ModeFeedCounts returns a map of mode_id→feed count.

ModeFeeds returns all feeds associated with a catalog mode.

PrefixCounts returns the number of distinct IPv4 and IPv6 CIDR prefixes for each service in each category.

Serialize encodes the KEEPALIVE message to wire format (just header).

SetDegraded enables degraded mode with version mismatch info.

ToggleSelectedService adds or removes a single service selection.

WithContext adds context to the error.

apiDashboard handles GET /api/admin/dashboard.

--- Communities handlers --- apiModeCommunitiesGet handles GET /api/admin/modes/{id}/communities.

apiUsersList handles GET /api/admin/users.

buildPeerConfigs converts m.peerConfigs (store.User) to []PeerConfig. Returns an error if any peer is invalid (e.g., IPv6 peer with no LocalAddressV6)

envOnlyError reports that a setting has no dbKey — it's env-only by design (see the dbKey="" convention documented on Settings) — and so can never be

users.filter_mode and users.web_auth are INTEGER enums in the database (schema >= 33); the Go API keeps the string forms. The mappings below are the s

isActiveWebAuth reports whether a web_auth mode uses IP-based resolution for identifying the user — everything except "login". Must name the same thre

isValidIP returns true if s is a valid IPv4 or IPv6 address.

============================================================================= Test helpers ===========================================================

wrapMessage creates a complete BGP message with header and body.

AddFeedWithMode is AddFeed plus a catalog_mode_feeds assignment, both in the same transaction — modeID <= 0 skips the assignment. Used instead of AddF

DecodeAddr converts a stored BLOB back to an address.

DeleteFeedAdapter deletes an adapter. Fails if any feeds reference it (FK constraint).

GetOrCreate gets an existing circuit breaker or creates a new one.

ParseSRS parses raw sing-box rule-set binary (.srs) data and returns canonical entries. cfgJSON controls what data to extract, e.g. {"cidrs":true}. Wh

ReplaceCatalogEntries deletes a feed's catalog entries and inserts the given ones, resolving names and CIDRs through the dictionaries in batches. Inva

SaveSettings upserts multiple settings in a transaction. Each entry in the map is a key→value pair.

Status reports whether a BGP speaker is currently running, and the error from the last failed Start/ReloadPeers attempt (nil when running is true).

SyncOne synchronizes one feed, acquiring the per-feed lock internally. Returns the adapter revision that was actually used during synchronization.

TransientError returns true for errors that are likely transient.

Withdraw removes prefixes from a specific peer.

apiDebugCIDR handles GET /api/admin/debug?cidr=...&mode=...

apiModesDelete handles DELETE /api/admin/modes/{id}.

apiModesGet handles GET /api/admin/modes/{id}.

apiUserCredentialsSet handles PUT /api/admin/users/{id}/credentials.

existingColumns returns the set of column names currently present on table, via the pragma_table_info table-valued function. Migrations that condition

insertRawNetwork inserts a network row directly, bypassing replaceNetworks' normalization/validation — for simulating stale or vestigial data (e.g. a

insertStaleNetwork stores a network row directly (bypassing the API and store validation) in the post-33 binary shape, to simulate data left over from

logAdminAction logs security-relevant admin actions

mainLoop handles incoming messages, periodic keepalives, and route updates for an established BGP session.

Parse log format from string

Parse log level from string

setTCPMD5OnFd sets the TCP MD5 signature option on a raw file descriptor. Skips loopback addresses (see setTCPMD5OnConn).

--- skip helpers for items we don't need ---

v032Rebuild applies the migration 31 per-table state machine, extended for tables that may not exist at all on very old databases: - table has oldCol

v033TableState resolves the per-table resume point. It returns v033NeedsCopy when the caller must run its copy loop and finish the DROP/RENAME; v033Do

validCSRFRequest reports whether a mutating request carries a CSRF header that matches its CSRF cookie. Safe methods never mutate state and are exempt

AcceptWithOpen handles a passive connection with a pre-read OPEN message.

AppendCatalogEntries inserts catalog entries for a feed without touching its existing rows — ReplaceCatalogEntries' non-destructive counterpart.

CountSelectionPrefixes returns the number of unique IPv4 and IPv6 prefixes that would be announced for a single user after applying their route filter