============================================================================= TestKeepaliveLoopSurvivesStaleDeadline — keepaliveLoop's Write shares th

============================================================================= Test 11: Keepalive maintains session ===================================

TestLogFormatValidation mirrors TestLogLevelValidation for log_format — internal/logging.parseLogFormat only recognizes "json"/"text" (case-insensitiv

TestLogLevelValidation guards against log_level being settable to a value internal/logging.parseLogLevel doesn't recognize — it would silently fall ba

============================================================================= TestLoginCookieExpiresWithMaxAge — when SessionMaxAge > 0, the login coo

============================================================================= TestLoginCookieExpiresWithZeroMaxAge — when SessionMaxAge is 0, the logi

============================================================================= TestMainLoopSendsNotificationOnHoldTimerExpiry — RFC 4271 requires a NOT

============================================================================= Migration 14 — web_auth column + user_credentials table ================

============================================================================= Migration 15 — app_settings table ======================================

TestMigration20FeedAdapterUpgrade verifies that migration 20 adds the builtin_version and is_customized columns to feed_adapters.

TestMigration20Idempotency verifies that migration 20 can be re-run after a crash that left the DB in an intermediate state. The NoTxSQL in migration

TestMigration20NoTxSQLFailureRollsBack verifies that if migration 20's NoTxSQL fails, version 20 is NOT recorded in schema_migrations. This prevents t

TestMigration20PreservesAdapterCustomizations verifies that migration 20 and seedBuiltInAdapters do NOT overwrite admin-customized built-in adapter so

TestMigration30ExcludesDisabledUsersFromOverlapResolution guards against a bug where a disabled user's narrower network could "win" the overlap compar

TestMigration31DropsKeyColumn verifies the normal, uninterrupted rebuild: key is gone, both rows survive with their data intact.

TestMigration31IdempotentAfterCrash simulates a process kill between the CREATE TABLE feed_adapters_new and DROP TABLE feed_adapters steps: on retry,

TestMigration31IdempotentAfterCrashBetweenDropAndRename simulates a process kill after DROP TABLE feed_adapters succeeded but before the RENAME commit

TestMigrationReopenPreservesData verifies that re-opening a fully migrated database preserves all data.

============================================================================= TestModeCommunities — community CRUD: generate, get, put, reset ========

============================================================================= TestModeGetNotFound — 404 for non-existent mode ========================

TestModeDeleteNotFound guards against DeleteCatalogMode's sql.ErrNoRows for a nonexistent (but >3, i.e. not built-in) mode ID surfacing as a raw 500 i

============================================================================= TestModeFeedReplaceAtomic — feed replacement uses a transaction: on inva

============================================================================= TestModeFeedsAssign — assign feeds to mode and verify ==================

============================================================================= TestModeFeedsSetNoRollbackWarning — verifies no rollback warning is logg

============================================================================= TestModesCRUD — create, read, update, delete lifecycle =================

TestModesCreateRejectsEmptyName mirrors apiModesUpdate's existing empty-name check, which apiModesCreate lacked — without it, POSTing an empty name cr

============================================================================= TestModesList — GET /api/admin/modes returns built-in modes ============

============================================================================= TestModesPartialUpdateEnabledOnly — partial update only sets enabled, na

TestNewSettings_LegacyBirdLocalAddressAlias guards against a regression from the internal/config -> internal/settings rewrite: existing releases accep

TestNewSettings_NewLocalAddressVarTakesPriorityOverLegacy guards the precedence direction: the new env var name must win when both are set.

TestNoSettingIsBothDBAndEnvInaccessible guards against a setting being defined with both dbKey and envVar empty. Such a setting would be a disguised c

TestNoTwoSettingsShareANonEmptyDBKey guards against a copy-paste mistake giving two DB-backed settings the same real dbKey (which would cause the same

TestParseSRS_GeoIP_RU tests against a real SRS v1 file downloaded to runtime/. The runtime/ directory is gitignored; this test is skipped in CI. For C

============================================================================= Test 9: Password authentication ========================================

TestPasswordAuthCorrectIPv6: password auth over IPv6 session.

============================================================================= Test 10: Peer state transitions ========================================

TestPortValidation — unlike BGPPort (a DB-backed setting), Port is intentionally env-only (dbKey=""), so Set must reject every value, valid or not, ra

TestPruneAdapterBackupsIgnoresAllDigitLegacyKey guards against an adapter named entirely with digits (e.g. "42") producing a legacy key that's indisti

TestPruneAdapterBackupsSweepsLegacyKeyPrefixedFiles guards against backups written before feed_adapters.key was dropped (named {key}_r{rev}_{ts}.js) s

============================================================================= TestPurgeUserSnapshots — insert 3 snapshots with different timestamps, p

TestRateLimitValidation guards against WDBGP_RATE_LIMIT_LOGIN=0 (or the admin equivalent) silently disabling brute-force protection — the documented r

TestRateLimiterStillEnforcesLimit is a basic regression check that the sweep doesn't change actual allow/deny behavior within a window.

============================================================================= TestRateLimiterSweepsStaleIPs — limits only ever grew before this fix: e

============================================================================= Test 8: Reconnect after disconnect =====================================

TestReconnectIPv6: reconnect over IPv6 session.

============================================================================= TestRecordFeedSnapshotDisabled — RecordFeedSnapshot with metrics disable

============================================================================= TestRecordFeedSnapshotEnabled — RecordFeedSnapshot with metrics enabled

============================================================================= TestRecordUserSnapshotDisabled — RecordUserSnapshot with metrics disable