adminSpaHandler serves the Vue admin SPA at /admin.

apiAdaptersAcknowledge handles POST /api/admin/adapters/{id}/acknowledge

apiAdaptersFork handles POST /api/admin/adapters/{id}/fork

apiAdminLogin handles POST /api/admin/login.

apiAdminLogout handles POST /api/admin/logout. Clears the admin session cookie.

apiAdminMe handles GET /api/admin/me. Requires valid admin session. Returns whether the user is authenticated.

apiAdminUserCatalog handles GET /api/admin/users/{id}/catalog. Returns catalog + selections for any user (admin-only). Accepts optional ?mode= query.

apiAdminUserCountPrefixes handles POST /api/admin/users/{id}/count-selections. Returns the number of v4/v6 prefixes for a given selection with deltas

apiBGPReload handles POST /api/admin/bgp/reload. Applies the 5 restart-only BGP settings (LocalASN, RouterID, BGPPort, LocalAddressV4/V6) by tearing d

apiBGPStatus handles GET /api/admin/bgp/status.

apiSettingsGet handles GET /api/admin/settings.

apiSettingsPurgeMetrics handles POST /api/admin/settings/purge-metrics

apiSettingsPut handles PUT /api/admin/settings.

apiUserCountPrefixes handles POST /api/user/count-prefixes. Returns the number of v4/v6 prefixes that would be announced for a given selection, along

apiUserMe handles GET /api/user/me. Returns the authenticated user's full data: user info, catalog, selections, communities, prefix counts, filters.

apiUserSaveFilters handles POST /api/user/filters. Saves the user's route filters, then reconciles BGP. Only allowed if filter_editable is enabled for

apiUserSaveSelections handles POST /api/user/selections. Saves the user's category and service selections, then reconciles BGP. Only allowed if the us

apiUserSwitchMode handles PUT /api/user/mode. Changes the user's catalog mode. Only allowed if catalog_editable.

dbEnvKeys returns the storage/env keys, for introspection only.

dbEnvKeys returns the storage/env keys, for introspection only.

parseBool parses a boolean string, accepting strconv.ParseBool's input set.

parseInt parses an integer string via strconv.Atoi.

parseString is the identity parser — it returns the input unchanged.

parseUint16 parses a 16-bit unsigned integer string (e.g. TCP/UDP ports). ParseUint's bitSize=16 already rejects anything outside 0-65535.

parseUint32 parses a 32-bit unsigned integer string (e.g. 4-byte BGP ASNs). ParseUint's bitSize=32 already rejects anything outside 0-4294967295.

userSpaHandler serves the Vue user SPA at root.

validateASN checks that an ASN is in the valid range 1-4294967295. The upper bound is enforced by uint32's width itself; only 0 needs rejecting here.

validateFilterList checks that a newline-separated list of CIDRs (the storage format for filter_allow/filter_deny) contains only well-formed prefixes.

validateIPv4 checks that a string is a valid IPv4 address.

validateIPv6 checks that a string is a valid IPv6 address (empty is allowed).

validateLogFormat checks that a log format is one of the values internal/logging.parseLogFormat actually recognizes (case-insensitively). Anything els

validateLogLevel checks that a log level is one of the values internal/logging.parseLogLevel actually recognizes (case-insensitively). Anything else s

validatePort checks that a port number is in the valid range 1-65535. The upper bound is enforced by uint16's width itself; only 0 needs rejecting her

validatePositive checks that a value is greater than zero.

validateRateLimit checks that a per-minute rate limit is positive and capped at 1000 — well above any legitimate login/admin request rate, but low eno

validateSessionMaxAge checks that a session max age is either the special sentinel 0 — a browser-session-scoped cookie, though the server still caps a

validateWebAuthMode checks that a value is one of the recognized per-user web_auth modes. apiUsersCreate copies default_web_auth into any user that om