writeWikiNotification inserts a local user_message row pointing at the patch page of the galgame so the user can jump in one click.

ApplyCreator enforces moyu's eligibility gate, then files the application on the central OAuth queue with evidence. OAuth's own guards (already-creato

CollectUserS3Keys returns the deduped set of moyu-bucket S3 object keys that the purge must delete (PG CASCADE removes the rows but never the objects)

CompleteUploadWithBody request with any body

ContentLimitFromQuery parses the `content_limit` query parameter and returns one of {"sfw","nsfw","all"} when recognized, or "" otherwise. Returning

CountCommentAndReplies counts a comment + its direct replies, restricted to APPROVED rows (status = 0). DeleteComment uses this to decrement patch.com

CountOrphanPatches returns true-orphan counts by category (excludeIDs excluded).

CountPublishedPatchResources counts a user's PUBLISHED (status=0) patch resources — the moyu-side creator eligibility signal.

CountRootCommentsBefore returns how many APPROVED root comments of the patch sort BEFORE the given root under the list order (created DESC, id DESC).

CreateCreatorApplication files a creator-role application AS THE END USER (Authorization: Bearer <token>), not via client credentials.

CreateFollowAndIncrement inserts the relation AND bumps both denormalized counts in ONE transaction (audit F029), so they can't drift if the process d

CreateGroupRoom creates a group chat. Only role >= 4 is allowed (checked in the handler layer).

CreatePatchByGalgameID registers a local patch carrier directly by Wiki galgame_id — the path the publish wizard ("选择此条目") uses. Unlike the vndb_id pa

CreateRoom POST /api/chat/room (admin only)

CreateUser inserts a new local row. Caller must populate ID with the OAuth-side integer id (NOT autoincrement; see migration 005). ON CONFLICT DO NOTH

DeleteArtifact request

DeleteArtifactWithResponse request

DeleteFollowAndDecrement removes the relation and, ONLY if a row was actually deleted, decrements both counts — all in one transaction (audit F029 + t

DownloadArtifact request

DownloadArtifactWithResponse request

ExchangeCode trades an authorization code (+ PKCE verifier) for tokens. KUN OAuth takes a JSON body, not RFC-6749 form-encoded, and wraps the respons

===== Comment Likes =====

FindOrCreatePrivateRoom returns the unique private chat room between two users, creating it (with both members) if it does not yet exist. The room li

FindOrCreateUserByID looks up the local user row by id, inserting an empty site-local row if it does not exist. The id MUST be the integer returned by

===== Resource Likes =====

===== All Patches =====

GetArtifact request

===== Contributors ===== GetContributorIDs returns the user_ids of every contributor on a patch. Handler enriches them via OAuth /users/batch (pkg/use

GetFavoritedResourceIDs returns the subset of resourceIDs the user has subscribed to (收藏资源) — mirrors GetLikedResourceIDs, used to stamp is_favorite o

GetFollowerIDs / GetFollowingIDs return only the user_ids; the handler layer resolves them to display briefs via OAuth /users/batch (pkg/userclient).

GetGalgameCalendar GET /api/galgame/calendar?month=YYYY-MM

moemoepoint is no longer mutated locally — OAuth is the unified source of truth (see pkg/moemoepoint). The local user.moemoepoint column is a read-cac

─── Messages ─────────────────────────────────────── GetMessages polls for new messages. Resolves the room by link and checks membership first, then

GetMessages GET /api/message

GetMessagesByIDs loads bare messages by id (used to build reply quotes).

GetMessagesByIDsInRoom returns the given messages, scoped to the room (and verifying caller membership) so a member can only refresh messages from a r

GetMyCreatorApplication returns the user's latest creator application (nil if none).

===== Orphan Patches (D12) ===== GetOrphanCandidateIDs returns ids of candidate orphans (cheap local filter); the handler verifies them against Wiki b

GetPatchResourceFileHistoryS3Keys returns every non-empty old_s3_key on patch_resource_file_history rows belonging to the patch's resources. UpdateRes

GetPatchResourceS3Keys returns every non-empty s3_key on patch_resource rows owned by the patch. Used by DeletePatch right before the row goes away —

GetPatchesByIDs returns existing patches for the given ids in the caller- supplied order — no lazy materialization. Used by handlers that enrich a lis

GetRandomPatchID returns a random patch id, optionally constrained by the caller's content_limit. The single-row RANDOM() path can land on a NSFW patc

GetRandomPatchIDs returns up to n random patch ids. Used by the random-patch endpoint so the service layer can ask wiki to filter the candidate set by

GetResourceFileHistoryS3Keys returns the history's old_s3_keys for a single resource. Used by DeleteResource for the same reason as the patch-scoped h

GetUserInfo fetches the current user's identity from /oauth/userinfo.

GetUserInfo composes the public user profile: site-local row (moemoepoint, follower/following counts, content counts) + OAuth brief (name/avatar/bio).

GetUserStats fetches a user's galgame contribution stats from the wiki.

GetWikiMessageFeed proxies GET /galgame/messages/feed for the cron job. Authenticated via OAuth Client Basic Auth — the same client_id/secret used by

IncrementView PUT /doc/view?slug=... — best-effort view counter.

IncrementViewBySlug bumps the view counter for a published doc (best-effort).

InitUploadWithBody request with any body

===== Admin Settings Check ===== Source of truth is the site_setting table via settingService (durable + audited), read directly — see internal/setti

IsCreatorOnlyEnabled reports the admin "仅创作者 / 版主 / 管理员可发布 Galgame" toggle. When on, the publish handlers reject users without creator / moderator / a

IsNotFound reports whether an error from DeleteObject is "object not found".

JoinRoomByLink joins a room via its link.

LatestMessagePerRoom passthrough for room-list last-message previews.

===== Public ===== List returns the published flat list + the category tree.

===== Admin =====

ListArtifacts request

ListEcosystem returns the OAuth app-directory strip, served same-origin from moyu so the browser never has to cross-origin fetch the OAuth provider (w

ListMembers returns all members of a room. The handler layer attaches the user briefs from OAuth /users/batch.

─── Messages ─────────────────────────────────────── ListMessages GET /api/chat/room/:link/message?after=&limit=

ListMessagesByIDsInRoom returns the given messages that belong to roomID, ascending by id. Room-scoped so a member can't fetch arbitrary messages.

ListPinned returns the pinned, published docs for the home carousel, newest first by the displayed `date`. We parse the date string for ordering rathe

ListReactionsByMessageIDs returns all reactions for the given message ids, ordered by id so reaction chips render stably. The handler attaches the rea

ListRoomsByUser lists rooms a user has joined that contain at least one live (non-deleted) message, ordered by last message time desc. Empty rooms ar

MetaBatch fetches width/height/thumbhash for a batch of hashes in one roundtrip, keyed by hash. Hashes image_service doesn't know are simply absent fr

Creates a new Client, with reasonable defaults

NewCompleteUploadRequest calls the generic CompleteUpload builder with application/json body

NewDeleteArtifactRequest generates requests for DeleteArtifact

NewDownloadArtifactRequest generates requests for DownloadArtifact

NewGetArtifactRequest generates requests for GetArtifact

NewInitUploadRequest calls the generic InitUpload builder with application/json body

NewListArtifactsRequest generates requests for ListArtifacts

NewMetaResolver builds a resolver over this client. timeout bounds the synchronous meta-batch call on the cold path (<= 0 → 3s default) so a slow or u