memba_reviews_v2 state

moderator

pendingModerator

TransferOwnership

TransferOwnership stages a handoff of the moderator role. Moderator only; it takes effect only once newModerator calls AcceptOwnership. Calling it again before acceptance replaces the staged address, which is how a mistyped proposal is corrected.

AcceptOwnership

AcceptOwnership completes the handoff. Only the staged pendingModerator may call it — including against the outgoing moderator, so the two steps cannot be collapsed into one by the party giving up the role.

CancelOwnershipTransfer

CancelOwnershipTransfer clears a staged handoff. Moderator only, so a proposal can be aborted without the proposed address cooperating.

GetModerator

GetModerator returns the address that currently holds moderation.

GetPendingModerator

GetPendingModerator returns the staged successor ("" when none).

assertModeratorCur

assertModeratorCur is the gate for this file's entrypoints. Named apart from the realm's existing assertModerator so the older call sites keep their signature and semantics untouched.

MaxBodyLen

// review body

MaxCommentLen

// comment body

MaxPageLimit

// hard cap on any paginated read (DoS guard)

Review

── Types ────────────────────────────────────────────────────

Comment

reviews

// strID(id) -> \*Review

comments

// strID(id) -> \*Comment

subjectIndex

// subject -> \[]uint64 (review IDs, ascending) — bounds reads

commentIndex

// strID(reviewID) -> \[]uint64 (comment IDs, ascending)

authorSubject

// subject + "\\x00" + author -> uint64 (reviewID) — one-per-pair

reactions

// strID(targetID) + "/" + addr -> "like"|"dislike"

flags

// strID(targetID) + "/" + addr -> true (one flag per acct/target)

reputation

// addr -> int64 (Σ likes−dislikes on their reviews+comments)

flaggedIDs

// strID(targetID) -> true (visible targets with ≥1 flag, for the mod dashboard)

subjStatCount

// subject -> int64 (# visible reviews)

subjStatSum

// subject -> int64 (Σ rating over visible reviews)

nextID

── State ────────────────────────────────────────────────────

init.25

getStat

── RV-1 subject-stat counters (O(1) summary) ────────────────

applySubjectStat

applySubjectStat adjusts the visible-review counters for a subject. Callers apply a delta only when a review's \*counted\* state (visible = !Deleted && !Hidden) actually changes.

strID

── Helpers ──────────────────────────────────────────────────

getReview

getComment

assertModerator

getReputation

addReputation

idList

removeID

removeID returns ids with the first occurrence of target removed.

sanitizeForRender

sanitizeForRender strips markdown/HTML-sensitive chars from user strings used inside Render() markdown (defense-in-depth; the frontend also DOMPurifies). "&" is escaped FIRST to prevent entity-injection (e.g. "<" → "<").

jsonEscape

jsonEscape escapes a string for embedding in the realm's hand-built JSON.

validRating

validBody

pairKey

pairKey returns the authorSubject tree key for a (subject, author) pair. The NUL separator prevents prefix collisions between subject and author.

PostReview

PostReview creates the caller's review for \`subject\`, or replaces it in place if one already exists (the "one editable review per pair" rule).

EditReview

EditReview updates rating + body of an existing non-deleted review. Only the original author may edit.

DeleteReview

DeleteReview tombstones the caller's review: keeps the ID + reaction history, clears the body, and frees the (author, subject) pair for a fresh review. Only the original author may delete.

validComment

validComment returns true iff body is non-empty and within MaxCommentLen.

PostComment

PostComment posts a flat reply to an existing, non-deleted, non-hidden review.

EditComment

EditComment updates the body of an existing, non-deleted comment. Only the original author may edit.

DeleteComment

DeleteComment tombstones the caller's comment: clears the body. Only the original author may delete.

boolToInt

reactionDelta

reactionDelta returns how a reaction change (old -> newKind, each "" | "like" | "dislike") moves the target's like count, dislike count, and the target author's reputation. repDelta = likesDelta - dislikesDelta.

applyDelta

applyDelta adjusts an unsigned counter by ±1-style delta without underflow.

React

React records or toggles a like/dislike on a review or comment. Re-reacting with the same kind toggles it off; switching kind replaces it. Updates the target's Likes/Dislikes counters and the author's reputation by Δ(likes−dislikes). Self-reactions are rejected. Deleted/hidden targets are rejected.

Flag

Flag records one community flag per account per target (review or comment). Auto-hide is NOT performed here; takedowns are multisig-only (HideReview/HideComment). Deleted/hidden targets are rejected.

HideReview

HideReview soft-deletes a review. Moderator (multisig) only.

HideComment

HideComment soft-deletes a comment. Moderator (multisig) only.

Unhide

Unhide reverses a hide (manual or auto-flag) on a review or comment. Moderator (multisig) only. Also removes the target from the mod dashboard index.

clampLimit

clampLimit ensures limit is in \[1, MaxPageLimit]. Zero or negative values and values above MaxPageLimit are all clamped to MaxPageLimit.

window

window slices ids\[offset : offset+limit] safely (no panics on out-of-range).

reviewJSON

commentJSON

GetReviewsJSON

GetReviewsJSON returns a JSON array of a subject's non-hidden reviews (paginated). Deleted reviews are included as tombstones (empty body, deleted:true).

GetCommentsJSON

GetCommentsJSON returns a JSON array of a review's non-hidden comments (paginated).

GetSubjectSummaryJSON

GetSubjectSummaryJSON returns {"count":N,"average":A,"sum":S} over non-hidden, non-deleted reviews for a subject. Average is integer-rounded. GetSubjectSummaryJSON returns the count/average/sum of a subject's VISIBLE reviews. RV-1: O(1) — reads the maintained per-subject counters instead of scanning the (sybil- growable) review list, so it can never exceed the query gas cap.

GetReputation

GetReputation returns the net likes−dislikes reputation for an address. Returns 0 for unknown addresses. Queried via vm/qeval (bare int64).

GetFlaggedJSON

GetFlaggedJSON returns a JSON array of flagged target IDs for the mod dashboard, paginated. IDs are returned as bare integers (not quoted strings). Uses early-stop iteration to avoid loading the entire tree.

Render

Render — human gnoweb view. "" → home (total count); "s/\<subject>" → subject review list; else 404.

ModerationState

ModerationState is a bounded copied snapshot, including hidden/deleted items. No pointer or body is exposed. BodyHash binds edits even within the same block. Reactions and cumulative flag counts are not moderation authorization inputs.

moderationBodyHash

GetModerationState

GetModerationState returns a zero value for an absent ID. The flagged-index bit is distinct from historical flags; Unhide removes only the index entry.

publisherAtLoad