hikariAvatarURL resolves a brief's avatar to an ABSOLUTE URL for third-party (Hikari) consumers, mirroring the frontend resolveAvatarUrl: prefer the i

isAVIF detects the ISOBMFF `ftyp` box with an `avif`/`avis` brand (major or compatible). moyu's legacy content images are 100% AVIF.

linkText extracts the rendered text of a link's children, just enough to answer "does this link's label start with @?". We only look at *ast.Text node

markCompleteOnce returns true if THIS call is the first complete for the given artifact uuid, false if a prior call already deducted quota. Nil rdb (t

markResourceFavorited stamps is_favorite (收藏资源 subscription) on each resource for the given currentUID. Anonymous (0) leaves it false. Mirrors markRes

markResourceLiked stamps is_liked on each resource for the given currentUID. Anonymous (currentUID == 0) leaves is_liked false everywhere.

minMonthStr / maxMonthStr compare zero-padded "YYYY-MM" lexicographically (== chronologically), treating "" as absent. Used to union the data bounds w

newSanitizePolicy builds moyu's allow-list on top of bluemonday's UGCPolicy, extended with exactly what this package's renderers emit. Mirrors forum's

===== Notifications (simplified) =====

notifyResourceFavoritedUsers notifies every user subscribed to a SINGLE resource that its file/link changed. Called from UpdateResource ONLY on a file

parseCSVInts parses "1,2,3" → [1,2,3], skipping blanks/non-numeric, capped at 200 to bound the query.

parseEndpoint splits a full URL ("https://s3.xxx.com") into host and TLS flag; minio-go requires the host part to have no scheme.

parsePrivateLink splits a "{a}-{b}" private-room link into the two uids.

previewMessage returns a one-line preview of a message for the room list.

Read the bytes of a single image file from a form, with a 10 MB size cap.

redactURL replaces the password in postgres://user:pass@host/db with ***

redactURL replaces the password in postgres://user:pass@host/db with ***.

renderNote is the single point where a resource's markdown note becomes HTML. Pulled out so RenderResourceNotes (and its single-element callers) share

resolveGalgameName fetches a patch's galgame display name. patch.id IS the wiki galgame id (D13: patch.id == galgame_id), so a single batch lookup suf

resolveMappings hits Wiki concurrently and returns the partition.

resolveOrphanPublisherNames batch-fetches user names from OAuth /users/batch for every distinct publisher across the skipped rows. On error it returns

rewriteHost swaps the legacy host for -base so originals can be fetched from an internal mirror when image.moyu.moe isn't reachable from the job.

runRemap performs the actual two-pass remap + schema fixups in one tx.

schemaState inspects every child table and returns the aggregate phase.

splitOrigins turns the comma-separated CORS_ALLOW_ORIGINS env value into the []string that Fiber v3's cors.Config expects, trimming incidental whitesp

toUploadable returns bytes image_service can ingest. image_service has no AVIF decoder and the topic preset accepts only jpeg/png/webp/gif, so AVIF or

unmarkComplete releases the idempotency marker when a complete attempt set it but failed before the quota deduction committed (so a retry can re-run i

updateGalgameJSON is the plain JSON path. Decoding into the client's pointer-fielded shape filters out unsupported keys (e.g. vndb_id, which Wiki reje

updateGalgameMultipart reads `data` + optional `file` from the incoming multipart body and forwards them through the wiki client. Size cap is 10 MB (c

validatePreUpload pre-checks at init time: extension, per-role single-file cap, and (unless the tier is unlimited) the per-user daily quota based on t

writeBackup appends one original row as a JSONL record before it is rewritten.

writeOrphansFile dumps every skipped patch to a TSV file. Game names live on Wiki and these rows by definition have no Wiki match, so the most useful

Abort POST /api/upload/abort — voluntarily cancel an in-progress upload.

Abort soft-deletes an in-progress upload on client request (the artifact GC also reclaims orphaned status=uploading rows after its TTL).

AdminGetPost GET /admin/doc/:id — raw doc for the editor.

===== Admin (moderator+) ===== AdminListPosts GET /admin/doc — all docs incl. drafts.

ApproveComment flips a pending comment to approved and applies the deferred visible-comment side effects. Idempotent: approving an already-approved co

ApproveComment PUT /api/admin/comment/:id/approve Flips a pending comment (comment-verify) to approved, applying the deferred visible-comment side ef

Balance reads the user's current authoritative balance from OAuth (C3 single source — NOT the local user.moemoepoint cache). Read-only passthrough; a

BriefMapByInt is a thin convenience over Users that takes []int (the concrete type used in our domain models, where user_id is `int`), dedupes, drops

BuildPatchSummaryMap fetches Wiki briefs for the given patch IDs and returns a map keyed by patch_id (the local row id) of compact summaries. Patches

CheckDuplicate GET /api/patch/duplicate

CheckIn performs daily check-in.

===== Daily ===== CheckIn marks the user as checked-in for today. The moemoepoint reward is no longer applied here — it goes through OAuth (the unifie

CheckIn POST /api/user/check-in

ClaimGalgame proxies POST /galgame/:gid/claim — claim a VNDB draft (status=2) and immediately publish it (status=0). Returns the published galgame.

ClaimGalgame POST /api/v1/galgame/:gid/claim Flip a VNDB draft (status=2) to published (status=0) on Wiki, then register the local patch row + award

Complete POST /api/upload/complete — finalize (size verified by artifact) and deduct the per-user daily quota.

Complete finalizes the upload via artifact (which HeadObject-verifies the size server-side), then deducts the per-user daily quota once (idempotent).

CompleteUpload finalizes an upload (HeadObject size verify + optional manifest) and returns the ready artifact's metadata.

CompleteUploadWithBodyWithResponse request with any body

CompleteUploadWithBodyWithResponse request with arbitrary body returning *CompleteUploadResp

ContentLimitForListBrowse resolves the content_limit for browse-style list endpoints (home / list / ranking / user patches / etc.). The query value wi