ReadBody reads the raw response body as string

RenderResourceNotes fills note_html for every resource in the slice. Idempotent: re-rendering an already-rendered slice is a no-op rerender. Defined h

RenderWithTOC renders markdown to HTML and additionally returns a flat list of headings (h1-h3) suitable for a "本页索引" sidebar. IDs come from the same

RequireRole returns a middleware that admits requests whose OAuth roles claim contains any of the listed role strings. With no roles passed it admits

ResolveContentImageTokens rewrites every `/image/<hash>` content-image token in RAW markdown to its fully-qualified CDN URL, using the same resolver t

Resume restarts an interrupted upload. It asks the artifact service which parts are already stored in B2 (UploadedParts — skip them, reuse their etags

Resume POST /api/upload/resume — continue an interrupted upload. The artifact service lists the parts already in B2 and re-presigns only the missing o

Resume continues an interrupted upload: it asks the artifact service which parts are already stored (skip them) and returns fresh presigned URLs for o

RevokeUserSessions best-effort deletes every Redis session belonging to a user, matched by the id embedded in SessionData. Used by the admin user purg

SearchGalgameForPublish wraps /galgame/search?include_pending=true. With a non-empty access token, wiki decodes the JWT and additionally surfaces the

SearchGalgameForPublish GET /api/v1/galgame/search/publish Used by the publish wizard. Forwards the user's Bearer + include_pending=true so the respo

SearchOfficial calls /official/search.

SearchTag calls /tag/search.

SearchUsers proxies OAuth /users/search and returns the slim wire shape. limit is capped server-side at 50 (the OAuth API's max).

SearchUsers GET /api/user/search

SetCommentVerify PUT /api/admin/setting/comment-verify

SetContentImageMetaResolver wires the hash→metadata resolver. Call once at startup, before serving.

SetContentImageResolver wires the hash→CDN-URL resolver used by the content image AST transformer. Call once at startup, before serving.

SetCreatorOnly PUT /api/admin/setting/creator-only When on, only moderators / admins (role > 2) may publish a galgame — enforced in the patch publish

Start starts all cron jobs and returns a stop function for graceful shutdown. Job list: 1. Daily 00:00: reset daily_image_count / daily_check_in / da

StartPrivate POST /api/chat/room/private Returns the (created or existing) private chat room between the caller and req.PeerUID. Front-end clicks "发消

Status returns HTTPResponse.Status

Status returns HTTPResponse.Status

Status returns HTTPResponse.Status

Status returns HTTPResponse.Status

Status returns HTTPResponse.Status

StatusCode returns HTTPResponse.StatusCode

StatusCode returns HTTPResponse.StatusCode

StatusCode returns HTTPResponse.StatusCode

StatusCode returns HTTPResponse.StatusCode

StatusCode returns HTTPResponse.StatusCode

StripResourceSecrets blanks the download payload (Content / S3Key / Code / Password) on a slice of resources. Used by the bulk LIST/feed endpoints (ho

─── User-facing methods (transparent JWT forwarding) ── SubmitGalgame proxies POST /galgame/submit in JSON mode. Use SubmitGalgameMultipart when the u

TestGetHikariIntegration exercises the external Hikari endpoint end-to-end against a real Postgres (so the jsonb JSONArray columns behave like prod).

TestHikariOriginAllowed locks the external Hikari API's partner-domain allowlist: legitimate partner origins (incl. wildcard subdomains) pass, and loo

Regression: the pgx driver can return jsonb as a string (e.g. the INSERT ... RETURNING scan in ensureLocalPatch). Scan must accept it, not error with