Operator Surface

Admin API routes are isolated under `/api/v1/admin/*`; user DApp routes stay under `/api/v1/*`.

Admin session required

用户检索依赖受保护的 admin route。先完成管理员签名登录。