============================================================================= TestUserBGPPasswordToggle — 4-way BGP password enable/disable logic ====

TestUserByIPFallsBackWhenBestMatchIsDisabled — a disabled user's leftover network must never shadow an enabled user's overlapping-but-broader network.

============================================================================= TestUserLoginSessionCookieSentinel — session_max_age=0 must produce a br

============================================================================= TestUserMeReturnsLowercaseFilterKeys — apiUserMe embeds store.RouteFilte

============================================================================= TestUserSaveFiltersRejectsInvalidCIDR — apiUserSaveFilters must not pers

============================================================================= TestUserSaveSelectionsPreservesHidden — when a feed is disabled, its cat

============================================================================= TestUserSwitchModeSurfacesReconcileFailure — apiUserSwitchMode must not

============================================================================= TestUsersCRUD — create, read, update, delete lifecycle =================

============================================================================= TestUsersCreateAnyModeAllowsEmptyNetworks — web_auth="any" authenticates

TestUsersCreateBothModeRequiresNetworks confirms "both" is not accidentally exempted alongside "any" — it genuinely needs IP match.

============================================================================= TestUsersCreate/UpdateRejects*CatalogModeID — apiUsersCreate/apiUsersUpd

============================================================================= TestUsersCreateValidation — required fields ============================

============================================================================= TestUsersCreateWithNetworks — POST with networks array =================

============================================================================= TestUsersCreateWithPassword — POST with bgp_password ===================

============================================================================= TestUsersCredentialsLifecycle — credential management ==================

============================================================================= TestUsersListEmpty — GET /api/admin/users with empty DB ================

============================================================================= TestUsersNotFound — 404 cases ==========================================

============================================================================= TestUsersPartialUpdateDoubleToggleNoPassword — toggle enabled twice on u

============================================================================= TestUsersPartialUpdateDoubleToggleWithPassword — toggle enabled twice on

============================================================================= TestUsersPartialUpdateEnabledOnly — PUT with only enabled field ========

============================================================================= TestUsersPartialUpdateEnabledToggle — PUT {"enabled": false} only ======

============================================================================= TestUsersPartialUpdateEnabledToggleWithPassword — PUT {"enabled": false}

TestUsersPartialUpdateFilterOneSidePreservesTheOther guards against a bug where PUT with only filter_allow (or only filter_deny) silently wiped the om

============================================================================= TestUsersPartialUpdateFiltersOnly — PUT with only filter fields ========

============================================================================= TestUsersPartialUpdateInvalidEmptyName — PUT name="" returns 400 =======

============================================================================= TestUsersPartialUpdateNameOnly — PUT with only name field ==============

============================================================================= TestUsersPartialUpdatePasswordOnly — PUT with only password fields =====

============================================================================= TestUsersPeerState — peer state endpoint ===============================

============================================================================= TestUsersStatuses — batch peer-status endpoint =========================

TestUsersUpdateAnyModeAllowsEmptyNetworks confirms the update path doesn't wrongly demand a network for "any" either.

TestUsersUpdateNetworkModeRequiresNetworks guards a gap where apiUsersUpdate never enforced this at all — a user could be switched to web_auth="networ

============================================================================= TestUsersUpdatePasswordToggle — password_enabled =======================

TestUsersUpdateWithoutModeChangeSucceedsEvenIfCurrentModeDisabled — an update that doesn't touch catalog_mode_id at all must not be rejected just beca

============================================================================= TestValidCSRFRequest — double-submit cookie check: safe methods are alwa

TestValidateDBPath guards against a WDBGP_DB whose parent directory exists but isn't usable (not a directory, or not writable) — a nonexistent parent

TestValidateHost guards against WDBGP_HOST=<host>:<port> — a natural typo since the port is actually configured separately via WDBGP_PORT — being sile

TransientError creates a transient error.

TryLockFeed attempts to acquire the per-feed mutex without blocking. Returns the mutex and true if the lock was acquired, nil and false if another syn

TypeCode returns the path attribute type code for ORIGIN (1).

TypeCode returns the path attribute type code for NEXT_HOP (3).

TypeCode returns the path attribute type code for MP_REACH_NLRI (14).

TypeCode returns the path attribute type code for MP_UNREACH_NLRI (15).

TypeCode returns the path attribute type code for AS_PATH (2).

TypeCode returns the path attribute type code for Large Communities (32).

UnlockFeed releases the per-feed mutex previously acquired by TryLockFeed.

Unwrap returns the wrapped error.

UserByName returns a user by name for testing convenience.

UserError creates a user error.

V020NoTxSQL removes peer_ip UNIQUE constraint (issue #17). Must run outside migration transaction because SQLite doesn't support ALTER TABLE DROP CONS

V030 is a one-time, alpha-stage data cleanup: it removes overlapping networks between different users whose web_auth is network/both/any (login-mode u

V031 drops feed_adapters.key. It was originally the join column back to the Go-source-hardcoded builtInAdapters map (see internal/store/ feed_adapters

V031NoTxSQL performs the feed_adapters rebuild. Must run outside the migration transaction so PRAGMA foreign_keys actually takes effect. Runs as a si

V032 normalizes the catalog schema around numeric keys: - categories(id, name) and services(id, category_id, name) dictionaries replace the category/

V032NoTxSQL performs the catalog normalization. Runs outside the migration transaction and must be idempotent: it can be killed at any statement bound

V033 moves the user tables to binary IP storage and integer enums: - users: peer_ip and next_hop become 4/16-byte address BLOBs; filter_mode and web_

V033NoTxSQL performs the rebuilds. Idempotent via the same per-table state machine as migration 32: old column present → rebuild; table missing → fini

V034 finishes the numeric-schema cleanup on the remaining tables: - catalog_modes.key is dropped — same rationale as feed_adapters.key in migration 3

V034NoTxSQL performs the rebuilds, idempotent via the migration 32/33 per-table state machine.

V035 replaces feed_snapshots.prefixes — a JSON TEXT map of feed_id→prefix count — with a proper child table: feed_snapshot_counts(snapshot_id, feed_

V035NoTxSQL performs the conversion, idempotent via the usual per-table state machine. The JSON decode needs a Go loop; it runs before the parent rebu

WithContext adds context to the error.

WithContextMap adds multiple context values to the error.

WithContextMap adds multiple context values to the error.

WrapBuilder creates a new error builder wrapping an existing error.