NewMock returns a Client backed by an in-memory MockServer. The server is shut down via t.Cleanup.

NewMockServer starts a test HTTP server that serves the given users. Caller is responsible for Close().

ParseDeleteArtifactResp parses an HTTP response from a DeleteArtifactWithResponse call

ParseDownloadArtifactResp parses an HTTP response from a DownloadArtifactWithResponse call

ParseGetArtifactResp parses an HTTP response from a GetArtifactWithResponse call

ParseListArtifactsResp parses an HTTP response from a ListArtifactsWithResponse call

PatchGalgameDraftMultipart proxies PATCH /galgame/:gid with a new banner file.

ProxyMultipart relays a multipart write (a `data` JSON part + an optional `file` part) — used by POST /galgame/:gid/prs so a PR proposal can carry a n

ProxyUserToOAuth forwards a logged-in user's request to an OAuth self- service endpoint (PATCH /auth/me, PUT /auth/password, etc.). The user's access_

PublicURL returns the public download URL for the given s3_key.

PurgePreview returns the count breakdown without mutating anything.

User management (GetUsers / UpdateUser / DeleteUser) was removed when identity moved to OAuth: name / email / role / status / bans are all owned by th

PutObject performs a server-side upload (used for user-page images, where the image is processed/resized first). Intended for small objects — it consu

ReactionsByMessageIDs / MessagesByIDs are thin passthroughs the handler uses to enrich a message page with reactions + reply quotes in two extra batch

ReferencePing refreshes last_referenced_at for a batch of hashes so the image_service GC doesn't reclaim images this site still references (cold- stor

RegisterClaimedGalgame creates the local patch row for a galgame the user just claimed on Wiki (status 2 → 0), awarding +3 moemoepoint and registering

Render renders markdown text to HTML.

Resolve returns metadata for the given hashes, serving cached entries and fetching the rest via one MetaBatch. Best-effort: on any error (client uncon

ResolveDownloadURL fills r.DownloadURL for artifact-backed rows by asking the artifact service to issue a download URL (presigned, or a CDN/Worker URL

RevokeOAuthToken is fire-and-forget per RFC 7009: the endpoint always returns 200 regardless of whether the token was valid, so we only log transport-

RunReferencePing collects every image_service hash this site still references and pings image_service so its GC doesn't reclaim them (cold-storage TTL

RunWikiMessageSync is exported so it can be called manually (e.g. for tests or one-off backfills). The cron path is the StartWikiSync wrapper below.

Search proxies /users/search. Results are not cached (query space is unbounded).

Search POST /api/search

SearchGalgame calls /galgame/search.

─── Configuration ───────────────────────────────────── SetBasicAuth registers the OAuth Client credentials used for service-to-service endpoints (cur

SetBool upserts the setting, recording the admin who changed it + the time.

SoftDeleteMessage soft-deletes a message.

StartPrivateChat returns the private chat room between the current user and peerUID, creating it on first call. The caller then navigates to message/c

SubmitGalgameMultipart proxies POST /galgame/submit in multipart mode. The `data` part is the JSON body, the `file` part is the optional banner image.

UpdateCommentStatus sets a comment's moderation status (0=approved, 1=pending). Used by PatchService.ApproveComment.

UpdateGalgameMultipart proxies PUT /galgame/:gid in multipart/form-data mode (per docs/galgame_wiki/01-galgame.md §Banner 上传). The wire shape: data=

UpdateMessageContent edits a message and writes the edit history (in a transaction).

UploadGalgameImage proxies a galgame cover/screenshot upload to the wiki's canonical POST /galgame/image (multipart {preset, file}), forwarding the us

─── User image uploads ────────────────────────────── UploadUserImage uploads an image for the user's personal page (fit within 1920x1080, JPEG q=50).

VariantURL builds the CDN URL for a pre-generated variant (e.g. "mini", "100", "256"). Returns "" if the hash is invalid.

WhichFollowed returns a set of candidateIDs that the viewer currently follows. One query for the whole page; used by GetFollowers / GetFollowing to st

WikiEditProxy is the generic GET / JSON-write pass-through used by every §15 endpoint except the multipart-capable PR submit (see WikiPRSubmit).

adoptStub upgrades an interaction-stub (a favorite/comment lazily recorded the galgame with the wiki creator as placeholder owner) into a real registr

applyWikiMessage handles a single Wiki message inside an open tx. It is the idempotency boundary: a non-zero RowsAffected on the INSERT means this is

attachUserBriefs is a tiny helper used by every admin list endpoint that previously relied on Preload("User") -- fetches publisher briefs from OAuth u

attach helpers stamp the embedded user/sender field on rows after they come back from the repository (Preload was removed in Phase 6e).

attachMoemoepointLinks fills LogEntry.Link for moyu-local rows so the records modal can deep-link them. resource / galgame refs map straight to a page

attachResourceUsers / attachCommentUsers stamp the User field on rows returned to the user-profile pages.

attachUsersToCards batch-fetches publisher briefs from OAuth and stamps the User field on each card. Best-effort -- on error the User field stays nil

avifToPNG decodes AVIF bytes to PNG via ffmpeg. The input goes through a temp FILE (not a pipe): AVIF is ISOBMFF, whose demuxer needs seekable input.

calendarFavoriteSet returns which of the given galgame ids the user has favorited — one indexed query, used to render the calendar's inline 收藏 state.

calendarHasPatchSet returns the subset of galgame ids that have a REAL downloadable patch on moyu — i.e. resource_count > 0, NOT merely a row. The det

─── helpers ──────────────────────────────────────

collectReferencedHashes gathers the distinct, well-formed (64-hex) hashes from every moyu-owned surface that references image_service.

contentImageHashes returns the unique content-image hashes (the /image/<hash> tokens) referenced in raw markdown, used to batch-resolve their metadata

deductQuotaOnce increments daily_upload_size once per artifact uuid (Redis SETNX, 24h TTL). If the user is over quota at this point the artifact is so

defaultLinkRender mirrors goldmark/renderer/html.(*Renderer).renderLink so non-mention links continue to render exactly as before. Reproduced inline b

diffResourceFields computes the public-safe per-field diff between the pre-edit (before) and post-edit (after) resource. Secrets (download link / s3 k

extractLegacyURLs pulls every legacy image URL out of one content string, strips clinging prose punctuation, and de-dups (a row may repeat the same im

fakeJWTWithRoles builds a header.payload.sig JWT-shaped string whose payload encodes {"roles": [...]}. Signature is dummy; middleware decodes without

fetchCalendarMonth fetches one ISO month, folding the content_limit fan-out ("all" → sfw + nsfw) into one merged GalgameCalendar.

fetchEcosystem performs the server-to-server GET against the OAuth provider's public app-directory endpoint and unwraps the {code, message, data:{apps

galgameDisplayName picks a human-readable name from a wiki brief, preferring zh-CN, then ja-JP, en-US, zh-TW, falling back to the VNDB id.