FilterSFW removes NSFW items when the caller requests SFW-only content.

────────────────────────────────────────── Reply interaction helpers (for tx participation) ────────────────────────────────────────── FindByIDTx load

FindLinks returns all download URLs for a resource.

────────────────────────────────────────── GetDetail / GetList ────────────────────────────────────────── GetDetail — GET /api/galgame/:gid Bearer-aw

GetList — GET /api/galgame SFW-default. Crawlers and cookie-less visitors get content_limit=sfw only; logged-in users with the NSFW switch on see eve

GetList — GET /doc/tag

GetUser extracts UserInfo from the Fiber context. Returns nil if not authenticated.

moemoepoint mutations no longer live here: OAuth is the single source of truth and changes flow through internal/moemoepoint.Awarder (which mirrors th

NotifyMentions emits a deduped "mentioned" notification to every user @mentioned in `content` (a topic or reply body). replyFloor deep-links the notif

ProxyWrite forwards a write request (POST/PUT/DELETE) with OAuth token. contentType is the original Content-Type from the gateway request — kept verb

ResolveMentionNames rewrites the display text of rendered @mention links to the CURRENT display name from `names` (user id → name), so a renamed user

StatusCode returns HTTPResponse.StatusCode

────────────────────────────────────────── Shared helpers ────────────────────────────────────────── adjustMoemoepoint applies a moemoepoint change vi

aliasesToNames extracts the name field from a slice of WikiAlias.

Banner / image resolution — server-side hash → CDN URL. Background: the Galgame Wiki is the SoT for galgame metadata. After wiki PR5 (K-PR6) the cano

────────────────────────────────────────── Reply mappers ────────────────────────────────────────── buildReplyResponses turns a batch of ReplyRow into

cachedKeyset wraps serveKeyset with the activityCacheTTL cache-aside. Keyed by cursor (the page), isSFW (which galgame names the wiki returns) and sho

collectUniqueIDs extracts unique int IDs from a slice via a projection.

createDedupMessage creates a Message only if no row already exists with the same (sender, receiver, type, link) triple. Same-user actions are a no-op.

decodeEnvelope reads resp.Body, parses the standard envelope, and returns either the data payload (success) or a structured *Error (failure). "Succes

do is a bodiless GET/DELETE authenticated with the client-credentials Basic header. v should be a pointer.

extractContentImageHashes pulls every distinct /image/<hash> token hash out of a set of content strings. A row may carry several images (and the same

makeMultipart builds a multipart form body with the given fields.

newTestApp wires a Fiber app with the upload handler + a session stub so MustGetUser succeeds for UID=1. ImageService is constructed without a wiki cl

ratingReward applies the documented thresholds (architecture-patterns spec): summary < 233 → +3, < 666 → +5, ≥ 666 → +10.

rawJSON wraps a DB-stored JSON string into a json.RawMessage. Falls back to an empty array (`[]`) rather than `null` because the only call site is `G

recomputeTopicCounts refreshes the denormalized topic.reply_count and topic.comment_count from the actual rows. The new BE does not otherwise maintain

renderReplyTokens rewrites @/# tokens to readable text: mentions → "@<name>" (from the resolved names map; unknown → "@用户"), quotes → their "#<floor>"

AdjustDislikeCount adjusts topic.dislike_count by delta.

AdjustLikeCount adjusts topic.like_count by delta.

AdjustReplyDislikeCount adjusts the topic_reply.dislike_count by `delta`.

AdjustReplyLikeCount adjusts the topic_reply.like_count by `delta`.

Configured reports whether the client has a base URL and credentials — i.e. it can actually reach image_service. Lets callers (e.g. the content-image

── Collection CRUD ──

────────────────────────────────────────── Create — POST /toolset ──────────────────────────────────────────

────────────────────────────────────────── Create — all checks inside transaction ──────────────────────────────────────────

────────────────────────────────────────── Create — POST /website-tag ──────────────────────────────────────────

────────────────────────────────────────── Delete — DELETE /website-tag ──────────────────────────────────────────

DeleteByID deletes a tag and any related article-tag rows.

DeleteLocalStub removes the local row for a galgame and lets CASCADE clean up the local interaction children (galgame_like, galgame_favorite, galgame_

FindByID loads a single comment.

────────────────────────────────────────── Comment CRUD ──────────────────────────────────────────

FindPaginated returns tags matching an optional keyword plus total.

FindRatingForWrite returns the writable rating model — used for permission and length checks before update/delete.

GetBatchWithOptions is the fully-parameterized batch fetch: - token: caller's Bearer access_token; "" = anonymous - contentLimit: "sfw" / "nsfw" / "a

GetDailyCount returns the user's current daily image upload count from the kungal_user_state table (the OAuth-migration successor to user.daily_*).

────────────────────────────────────────── GetDetail — GET /website-tag/:name ──────────────────────────────────────────

IncrementDailyCount atomically increments the user's daily image upload count.

IncrementView atomically bumps the view counter (best-effort).

Invalidate drops a user id from hot+miss cache. Use after explicit updates (admin ban, etc.) so the next read goes back to OAuth.

MainURL builds a URL using the client's configured CDN base. Uses "webp" as the default extension (V1 outputs are always webp).

PutWithToken performs a PUT with Bearer token. See PostWithToken for contentType semantics.

ReplaceViewers swaps the full viewer allow-list for a collection.

Update applies the provided fields to a tag and returns the refreshed row.

UpdateFields updates arbitrary fields on a tag row.

Upload uploads a file and waits for processing. filename is used only in the multipart content-disposition (does not influence storage key).

anyConsumeSection reports whether any section name is a paid (moemoepoint-consuming) one — see constants.TopicSectionConsume.

basicAuthHeader produces a Basic auth header value from client id/secret.

briefToName maps a wiki GalgameBrief to the four-language KunLanguage DTO.

buildGalgameCards turns an ORDERED slice of wiki briefs into profile cards, fusing in kungal-local stats (view / like), resource meta (platform / lang

buildSingleItem maps one row to a CommentItem with empty Replies. Returns nil if the author is no longer renderable (deleted user), letting callers sk

classifyError maps an image service error code to a sentinel if applicable. Returns the original *Error if no sentinel matches.

collectQueryWithRenames is like collectQuery but rewrites keys per the supplied translation map on the way through. Used to bridge the camelCase param

entityDetailRenames returns the rename map for a wiki-backed entity detail handler (tag / official / engine): only the FE's per-entity ID key → snake_

fetchMonthRaw fetches + parses a single month's wiki calendar response. An empty `month` lets wiki default to the current JST month. content_limit is

fetchParentNames is the shared id→parent-name lookup for the toolset / website cards: `childTable c JOIN parentTable p ON p.id = c.<fk>` selecting p.n

mapArtifactErr translates an artifactclient sentinel into a kungal AppError.

newFakeWiki spins up a tiny HTTP server that captures the next request and replies with a successful {code,message,data} envelope. Returns the capture