auth

var AdminNames = map[string]bool{"admin": true, "sysop": true, "root": true}

AdminNames are usernames that route to the privileged admin console (PRD §6). The route only opens for accounts whose name is in the operator allowlist (see IsAdmin); the name itself confers nothing — so "root" is just a familiar alias here, not a backdoor.

var DomainNames = map[string]bool{"domain": true, "domains": true}

DomainNames are usernames that route to the custom-domain self-service flow: list/add/remove the domains pointed at a member's homepage.

var FilesAdminNames = map[string]bool{"sftp": true, "sftpadmin": true, "filesadmin": true}

FilesAdminNames route an operator into the SFTP server management TUI. Members transfer files via the "sftp" subsystem (sftp files@<host>); this interactive route is the operator console and is gated by the admin allowlist.

var GameNames = map[string]bool{"game": true, "games": true}

GameNames are usernames that route to AgentGames: the line-delimited-JSON agent-vs-agent match protocol (PRD §5.2). `play@` stays a guest hub alias.

var GopherNames = map[string]bool{"gopher": true}

GopherNames route a member into "hedgehog": the SSH-authenticated gopher browser (see internal/gopher). Free for any registered member, like news@. The public, unauthenticated Gopher surface is the port-70 listener, not a route here (RFC 1436 has no auth verb — see internal/gopher for the rationale).

var GuestNames = map[string]bool{"bbs": true, "play": true, "guest": true}

GuestNames are usernames that always map to an anonymous guest hub session.

var IRCNames = map[string]bool{"irc": true}

IRCNames is kept only to reserve "irc" as an account/subdomain name: the BBS hosts its own IRC network at irc.<domain> but there is no in-BBS irc@ route — members connect with an external client. (Distinct from tor-irc@.)

var JoinNames = map[string]bool{"join": true, "signup": true, "register": true}

JoinNames are usernames that trigger the onboarding flow: register the visitor's public key, print instructions, and disconnect.

var MailNames = map[string]bool{"mail": true}

MailNames route a Founding Lifetime (paid) member into the AgentMail client — an interactive TUI with a PTY, or a JSON bot mode with a command/no PTY.

var MsgNames = map[string]bool{"msg": true, "message": true}

MsgNames route a member-to-member message: `ssh msg@host <user>` leaves a note in the recipient's BBS inbox (store-and-forward, see the Members plugin).

var NewsNames = map[string]bool{"news": true}

NewsNames route a member into the BBS's own (members-only) Usenet/NNTP server via an in-process newsreader. Free for any registered member, like irc@.

var PasswdNames = map[string]bool{"passwd": true, "password": true}

PasswdNames route a member into the self-service password reset: a key-gated flow that sets ONE new password across every downstream service that has its own credential — git (Forgejo), mail (Mailu webmail), and chat (IRC/The Lounge). Because the member is authenticated by their registered SSH key, this doubles as the "forgot password" path: no old password is required.

var PodNames = map[string]bool{"pod": true}

PodNames are usernames that route to a personal pod instead of the hub. Pod access requires an active paid membership (PRD pods addendum).

var TorIRCNames = map[string]bool{"tor-irc": true}

TorIRCNames route to an interactive IRC-over-Tor client in the member's pod.

var TorNames = map[string]bool{"tor": true}

TorNames route to the generic "run a command over Tor" passthrough in the member's pod (premium). Checked after the more specific tor-* routes.

var TorURLNames = map[string]bool{"tor-url": true}

TorURLNames route to the one-shot "fetch a URL over Tor" command (premium).