Initialize XGBoost sender (called once when thread spawns)

Check if an IP is blocked (with expiry support). Returns `Some(reason)` if blocked, `None` if not blocked. Uses the in-memory HashMap cache — O(1) lo

Check if this certificate was generated by certbot by looking for renewal config

Checks if the model is currently loaded

Check if this manager is configured for production (not staging)

Checks if the program is running inside a service manager

Convenience function to check if a user has user role or above This function always returns true as all authenticated users have at least basic user

Loads the Isolation Forest model from database config

Loads the XGBoost model from database config

Log a message using the gateway logger # Safety Not thread-safe. Should only be called from a single thread.

Log a message using the proxy logger # Safety Not thread-safe. Should only be called from a single thread.

Register new client

Process a replacement string, handling $1, $2, etc. references

Remove clients that fail to receive ping

Renew a single domain certificate with retry logic using per-domain configuration

Regex-based HTTP request line parser and rewriter

Main loop that processes ML logs from the receiver channel

Runs inference on a single ML log

Runs inference on a single ML log

Generic request sender - only checks status, ignores response body

Send log to inference (non-blocking, fire-and-forget)

Configures and initializes the standard `env_logger`. This function serves as a fallback logging mechanism. It initializes the `env_logger`, which re

Configures and initializes the `TagBasedLogger`. This function sets up a logging system where log messages are routed based on tags embedded within t

Spawn the auto-renewal background thread

Spawns the Isolation Forest handler thread

Spawns the XGBoost handler thread

Sync pending entries to router-core via prottp

Executes a function within a transaction. This method provides a convenient way to execute multiple statements within a single transaction, ensuring

Updates gateway nodes to be unbound when their associated proxy is deleted Rather than deleting gateway nodes when their associated proxy is removed,

Enhanced validation with more diagnostics

Validates email format for TLS certificates (basic RFC 5322 validation)

Initializes the logging system for the application. This function orchestrates the setup of the logging infrastructure. It follows a priority order:

Add a log message to the pool

Get maximum capacity of queue

Check if certbot is installed and accessible

Clean up shared memory resources but don't unlink (the producer/router-core owns the shared memory)

Configure and mount all API routes for the application. This function is called during application startup to register all API routes and middleware

Configures user management routes and middleware This function sets up the endpoints and middleware for user management: - `/login` - Public endpoin

Configure statistics API routes This function will set up the routes for statistics endpoints when implemented. Currently a placeholder as the statis

Configures the AI security API routes This function registers all endpoints for managing AI models and viewing inference statistics under the "/ai-se

Configure and mount all generation API routes This function registers all generation utility endpoints under the "/generation" path prefix. It's call

Configures the settings API routes This function registers all endpoints for managing proxies, gateway nodes, and gateways under the "/settings" path

Configure synchronization API routes This function will set up the routes for synchronization endpoints when implemented. Currently a placeholder as

Convenience functions for common operations

Create certificate interactively (requires terminal/TTY)

Create certificate for non-root operation with custom directories

Add a method to create with specific capacity requirement

Create with options for fresh start and overflow policy

Creates a default configuration with a random key and 60-minute validity This default configuration: - Generates a cryptographically secure random ke

Default priority value for gateway nodes

Default TLS mode is staging for safety

Deletes an AI model from the database

Creates a Role from a string This method is used when loading roles from the database or deserializing from API requests. It implements a fallback st

Create configuration from environment variables

Creates a new DatabaseError with a custom message. This is a convenience method for creating a DatabaseError::Custom variant. # Parameters `msg` -