Merge remote-tracking branch 'origin/main' into feature/047

#327

#327

#327

#327

Merge remote-tracking branch 'origin/main' into feature/327

#327

Co-authored-by: miteruzo <miteruzo@naver.com>
Reviewed-on: #342

backend/app/controllers/application_controller.rb

@@ -1,14 +1,16 @@
 class ApplicationController < ActionController::API
+  before_action :reject_banned_ip_address!
   before_action :authenticate_user
+  before_action :reject_banned_user!
 
-  def current_user
-    @current_user
-  end
+  def current_user = @current_user
 
   private
 
   def authenticate_user
     code = request.headers['X-Transfer-Code'] || request.headers['HTTP_X_TRANSFER_CODE']
+    return if code.blank?
+
     @current_user = User.find_by(inheritance_code: code)
   end
 
@@ -22,4 +24,17 @@ class ApplicationController < ActionController::API
       s.in?(['', '1', 'true', 'on', 'yes'])
     end
   end
+
+  def reject_banned_ip_address!
+    ip_address = IpAddress.find_by(ip_address: IPAddr.new(request.remote_ip).hton)
+    return unless ip_address&.banned?
+
+    head :forbidden
+  end
+
+  def reject_banned_user!
+    return unless current_user&.banned?
+
+    head :forbidden
+  end
 end

backend/app/controllers/nico_tags_controller.rb

@@ -33,7 +33,7 @@ class NicoTagsController < ApplicationController
     return head :bad_request unless tag.nico?
 
     linked_tag_names = params[:tags].to_s.split
-    linked_tags = Tag.normalise_tags(linked_tag_names, with_tagme: false,
+    linked_tags = Tag.normalise_tags!(linked_tag_names, with_tagme: false,
                                                         with_no_deerjikist: false)
     return head :bad_request if linked_tags.any? { |t| t.nico? }
 

backend/app/controllers/posts_controller.rb

@@ -109,7 +109,7 @@ class PostsController < ApplicationController
 
     render json: PostRepr.base(post, current_user)
                          .merge(tags: build_tag_tree_for(post.tags),
-                                related: post.related(limit: 20))
+                                related: PostRepr.many(post.related(limit: 20)))
   end
 
   def create
@@ -123,28 +123,36 @@ class PostsController < ApplicationController
     tag_names = params[:tags].to_s.split
     original_created_from = params[:original_created_from]
     original_created_before = params[:original_created_before]
+    parent_post_ids = parse_parent_post_ids
 
     post = Post.new(title:, url:, thumbnail_base: nil, uploaded_user: current_user,
                     original_created_from:, original_created_before:)
-    post.thumbnail.attach(thumbnail)
+    post.thumbnail.attach(thumbnail) if thumbnail.present?
 
     ApplicationRecord.transaction do
       post.save!
-      tags = Tag.normalise_tags(tag_names)
+
+      tags = Tag.normalise_tags!(tag_names)
       TagVersioning.record_tag_snapshots!(tags, created_by_user: current_user)
 
       tags = Tag.expand_parent_tags(tags)
       sync_post_tags!(post, tags)
+
+      sync_parent_posts!(post, parent_post_ids)
+
       post.resized_thumbnail!
+
       PostVersionRecorder.record!(post:, event_type: :create, created_by_user: current_user)
     end
 
     post.reload
     render json: PostRepr.base(post), status: :created
-  rescue ActiveRecord::RecordInvalid
-    render json: { errors: post.errors.full_messages }, status: :unprocessable_entity
   rescue Tag::NicoTagNormalisationError
     head :bad_request
+  rescue ArgumentError => e
+    render json: { errors: [e.message] }, status: :unprocessable_entity
+  rescue ActiveRecord::RecordInvalid => e
+    render json: { errors: e.record.errors.full_messages }, status: :unprocessable_entity
   end
 
   def viewed
@@ -169,6 +177,7 @@ class PostsController < ApplicationController
     tag_names = params[:tags].to_s.split
     original_created_from = params[:original_created_from]
     original_created_before = params[:original_created_before]
+    parent_post_ids = parse_parent_post_ids
 
     post = Post.find(params[:id].to_i)
 
@@ -177,12 +186,15 @@ class PostsController < ApplicationController
 
       post.update!(title:, original_created_from:, original_created_before:)
 
-      normalised_tags = Tag.normalise_tags(tag_names, with_tagme: false)
+      normalised_tags = Tag.normalise_tags!(tag_names, with_tagme: false)
       TagVersioning.record_tag_snapshots!(normalised_tags, created_by_user: current_user)
 
       tags = post.tags.nico.to_a + normalised_tags
       tags = Tag.expand_parent_tags(tags)
       sync_post_tags!(post, tags)
+
+      sync_parent_posts!(post, parent_post_ids)
+
       PostVersionRecorder.record!(post:, event_type: :update, created_by_user: current_user)
     end
 
@@ -190,10 +202,12 @@ class PostsController < ApplicationController
     json = post.as_json
     json['tags'] = build_tag_tree_for(post.tags)
     render json:, status: :ok
-  rescue ActiveRecord::RecordInvalid
-    render json: post.errors, status: :unprocessable_entity
   rescue Tag::NicoTagNormalisationError
     head :bad_request
+  rescue ArgumentError => e
+    render json: { errors: [e.message] }, status: :unprocessable_entity
+  rescue ActiveRecord::RecordInvalid => e
+    render json: { errors: e.record.errors.full_messages }, status: :unprocessable_entity
   end
 
   def changes
@@ -353,4 +367,41 @@ class PostsController < ApplicationController
 
     root_ids.filter_map { |id| build_node.call(id, []) }
   end
+
+  def parse_parent_post_ids
+    raise ArgumentError, 'parent_post_ids は必須です．' unless params.key?(:parent_post_ids)
+
+    params[:parent_post_ids].to_s.split.map { |token|
+      id = Integer(token, exception: false)
+      raise ArgumentError, "親投稿 Id. が不正です: #{ token }" if id.nil? || id <= 0
+
+      id
+    }.uniq
+  end
+
+  def sync_parent_posts! post, parent_post_ids
+    if parent_post_ids.include?(post.id)
+      post.errors.add(:base, '自分自身を親投稿にはできません．')
+      raise ActiveRecord::RecordInvalid, post
+    end
+
+    existing_ids = Post.where(id: parent_post_ids).pluck(:id)
+    missing_ids = parent_post_ids - existing_ids
+
+    if missing_ids.present?
+      post.errors.add(:base, "存在しない親投稿 ID があります: #{ missing_ids.join(' ') }")
+      raise ActiveRecord::RecordInvalid, post
+    end
+
+    current_ids = post.parent_posts.pluck(:id)
+
+    ids_to_add = parent_post_ids - current_ids
+    ids_to_remove = current_ids - parent_post_ids
+
+    PostImplication.where(post_id: post.id, parent_post_id: ids_to_remove).delete_all
+
+    ids_to_add.each do |parent_post_id|
+      PostImplication.create_or_find_by!(post_id: post.id, parent_post_id:)
+    end
+  end
 end

backend/app/controllers/tags_controller.rb

@@ -1,3 +1,7 @@
+require 'net/http'
+require 'uri'
+
+
 class TagsController < ApplicationController
   def index
     post_id = params[:post]
@@ -182,7 +186,8 @@ class TagsController < ApplicationController
              .find_by(id: params[:id])
     return head :not_found unless tag
 
-    render json: DeerjikistRepr.many(tag.deerjikists)
+    render json: { tag: TagRepr.base(tag),
+                   deerjikists: DeerjikistRepr.many(tag.deerjikists) }
   end
 
   def deerjikists_by_name
@@ -194,7 +199,31 @@ class TagsController < ApplicationController
              .find_by(tag_names: { name: })
     return head :not_found unless tag
 
-    render json: DeerjikistRepr.many(tag.deerjikists)
+    render json: { tag: TagRepr.base(tag),
+                   deerjikists: DeerjikistRepr.many(tag.deerjikists) }
+  end
+
+  def update_deerjikists
+    return head :unauthorized unless current_user
+    return head :forbidden unless current_user.gte_member?
+
+    tag = Tag.joins(:tag_name)
+             .includes(:tag_name, tag_name: :wiki_page)
+             .find_by(id: params[:id])
+    return head :not_found unless tag
+
+    ApplicationRecord.transaction do
+      tag.deerjikists = []
+      params[:_json].each do
+        platform = _1[:platform]
+        code = normalise_deerjikist_code(platform, _1[:code])
+        deerjikist = Deerjikist.find_or_initialize_by(platform:, code:)
+        deerjikist.tag = tag
+        deerjikist.save!
+      end
+    end
+
+    render json: DeerjikistRepr.many(tag.reload.deerjikists)
   end
 
   def materials_by_name
@@ -374,7 +403,7 @@ class TagsController < ApplicationController
   end
 
   def update_parent_tags! tag, parent_names
-    parent_tags = Tag.normalise_tags(parent_names, with_tagme: false,
+    parent_tags = Tag.normalise_tags!(parent_names, with_tagme: false,
                                                     with_no_deerjikist: false,
                                                     deny_nico: true)
 
@@ -391,4 +420,21 @@ class TagsController < ApplicationController
       TagImplication.create!(tag:, parent_tag:)
     end
   end
+
+  def normalise_deerjikist_code platform, code
+    return code if platform != 'youtube' || code[0] != '@'
+
+    url = "https://www.youtube.com/#{ code }"
+
+    html = Net::HTTP.get(URI(url))
+
+    canonical = html[
+        /<link rel="canonical" href="https:\/\/www\.youtube\.com\/channel\/(UC[a-zA-Z0-9_-]{22})"/,
+        1]
+    return canonical if canonical
+
+    html[/"channelId":"(UC[a-zA-Z0-9_-]{22})"/, 1] || html[/\bUC[a-zA-Z0-9_-]{22}\b/]
+  rescue
+    nil
+  end
 end

backend/app/controllers/users_controller.rb

@@ -1,9 +1,6 @@
 class UsersController < ApplicationController
   def create
-    return head :unprocessable_entity if request.remote_ip.blank?
-
     user = nil
-
     User.transaction do
       user = User.create!(inheritance_code: SecureRandom.uuid, role: :guest)
       attach_ip_address!(user)
@@ -17,8 +14,7 @@ class UsersController < ApplicationController
   def verify
     user = User.find_by(inheritance_code: params[:code])
     return render json: { valid: false } unless user
-
-    return head :unprocessable_entity if request.remote_ip.blank?
+    return head :forbidden if user.banned?
 
     attach_ip_address!(user)
 

backend/app/controllers/wiki_assets_controller.rb

@@ -0,0 +1,39 @@
+require 'digest'
+
+
+class WikiAssetsController < ApplicationController
+  def index
+    page_id = params[:wiki_page_id].to_i
+    page = WikiPage.find_by(id: page_id)
+    return head :not_found unless page
+
+    render json: WikiAssetRepr.many(page.assets)
+  end
+
+  def create
+    return head :unauthorized unless current_user
+    return head :forbidden unless current_user.gte_member?
+
+    wiki_page_id = params[:wiki_page_id].to_i
+    page = WikiPage.find_by(id: wiki_page_id)
+    return head :not_found unless page
+
+    file = params[:file]
+    return head :bad_request if file.blank?
+
+    asset = nil
+    page.with_lock do
+      no = page.next_asset_no
+      alt_text = params[:alt_text].presence
+      sha256 = Digest::SHA256.file(file.tempfile.path).digest
+
+      asset = WikiAsset.new(wiki_page_id:, no:, alt_text:, sha256:, created_by_user: current_user)
+      asset.file.attach(file)
+      asset.save!
+
+      page.update!(next_asset_no: no + 1)
+    end
+
+    render json: WikiAssetRepr.base(asset)
+  end
+end

backend/app/controllers/wiki_pages_controller.rb

@@ -109,7 +109,7 @@ class WikiPagesController < ApplicationController
     return head :unauthorized unless current_user
     return head :forbidden unless current_user.gte_member?
 
-    title = params[:title]&.strip
+    title = params[:title].to_s.strip
     body = params[:body].to_s
 
     return head :unprocessable_entity if title.blank? || body.blank?
@@ -143,7 +143,14 @@ class WikiPagesController < ApplicationController
       end
     end
 
-    head :ok
+    message = params[:message].presence
+    Wiki::Commit.content!(page:,
+                          body:,
+                          created_user: current_user,
+                          message:,
+                          base_revision_id:)
+
+    render json: WikiPageRepr.base(page).merge(body:)
   end
 
   def search

backend/app/models/ip_address.rb

@@ -1,7 +1,10 @@
 class IpAddress < ApplicationRecord
   validates :ip_address, presence: true, length: { maximum: 16 }
-  validates :banned, inclusion: { in: [true, false] }
 
   has_many :user_ips, dependent: :destroy
   has_many :users, through: :user_ips
+
+  def banned? = banned_at.present?
+  def ban! = banned? || update!(banned_at: Time.current)
+  def unban! = update!(banned_at: nil)
 end

backend/app/models/post.rb

@@ -1,7 +1,6 @@
 class Post < ApplicationRecord
   require 'mini_magick'
 
-  belongs_to :parent, class_name: 'Post', optional: true, foreign_key: 'parent_id'
   belongs_to :uploaded_user, class_name: 'User', optional: true
 
   has_many :post_tags, dependent: :destroy, inverse_of: :post
@@ -13,6 +12,20 @@ class Post < ApplicationRecord
   has_many :post_similarities, dependent: :delete_all
   has_many :post_versions
 
+  has_many :parent_post_implications,
+           class_name: 'PostImplication',
+           foreign_key: :post_id,
+           dependent: :destroy,
+           inverse_of: :post
+  has_many :parents, through: :parent_post_implications, source: :parent_post
+
+  has_many :child_post_implications,
+           class_name: 'PostImplication',
+           foreign_key: :parent_post_id,
+           dependent: :destroy,
+           inverse_of: :parent_post
+  has_many :children, through: :child_post_implications, source: :post
+
   has_one_attached :thumbnail
 
   before_validation :normalise_url
@@ -22,17 +35,29 @@ class Post < ApplicationRecord
   validate :validate_original_created_range
   validate :url_must_be_http_url
 
+  def parent_posts = parents
+
+  def child_posts = children
+
+  def sibling_posts
+    parent_post_ids = parent_posts.order(:id).pluck(:id)
+
+    parent_post_ids.to_h { [_1, PostImplication.where(parent_post: _1).map(&:post)] }
+  end
+
   def as_json options = { }
-    super(options).merge({ thumbnail: thumbnail.attached? ?
+    super(options).merge(thumbnail: thumbnail.attached? ?
                                     Rails.application.routes.url_helpers.rails_blob_url(
                                         thumbnail, only_path: false) :
-                                      nil })
+                                    nil)
   rescue
     super(options).merge(thumbnail: nil)
   end
 
   def snapshot_tag_names = tags.joins(:tag_name).order('tag_names.name').pluck('tag_names.name')
 
+  def snapshot_parent_post_ids = parents.order(:id).pluck(:id)
+
   def related limit: nil
     ids = post_similarities.order(cos: :desc)
     ids = ids.limit(limit) if limit

backend/app/models/post_implication.rb

@@ -0,0 +1,19 @@
+class PostImplication < ApplicationRecord
+  self.primary_key = :post_id, :parent_post_id
+
+  belongs_to :post, inverse_of: :parent_post_implications
+  belongs_to :parent_post, class_name: 'Post', inverse_of: :child_post_implications
+
+  validates :post_id, presence: true, uniqueness: { scope: :parent_post_id }
+  validates :parent_post_id, presence: true
+
+  validate :parent_post_mustnt_be_itself
+
+  private
+
+  def parent_post_mustnt_be_itself
+    if parent_post_id == post_id
+      errors.add :parent_post_id, '親投稿に同じ投稿を設定することはできません．'
+    end
+  end
+end

backend/app/models/post_version.rb

@@ -2,7 +2,6 @@ class PostVersion < ApplicationRecord
   include VersionRecord
 
   belongs_to :post
-  belongs_to :parent, class_name: 'Post', optional: true
 
   validates :url, presence: true
 

backend/app/models/tag.rb

@@ -79,6 +79,8 @@ class Tag < ApplicationRecord
 
   def material_id = materials.first&.id
 
+  def has_deerjikists = deerjikists.present?
+
   def self.tagme = find_or_create_by_tag_name!('タグ希望', category: :meta)
   def self.bot = find_or_create_by_tag_name!('bot操作', category: :meta)
   def self.no_deerjikist = find_or_create_by_tag_name!('ニジラー情報不詳', category: :meta)
@@ -86,7 +88,7 @@ class Tag < ApplicationRecord
   def self.niconico = find_or_create_by_tag_name!('ニコニコ', category: :meta)
   def self.youtube = find_or_create_by_tag_name!('YouTube', category: :meta)
 
-  def self.normalise_tags tag_names, with_tagme: true,
+  def self.normalise_tags! tag_names, with_tagme: true,
                                       with_no_deerjikist: true,
                                       deny_nico: true
     if deny_nico && tag_names.any? { |n| n.downcase.start_with?('nico:') }

backend/app/models/user.rb

@@ -4,7 +4,6 @@ class User < ApplicationRecord
   validates :name, length: { maximum: 255 }
   validates :inheritance_code, presence: true, length: { maximum: 64 }
   validates :role, presence: true, inclusion: { in: roles.keys }
-  validates :banned, inclusion: { in: [true, false] }
 
   has_many :created_posts,
            class_name: 'Post', foreign_key: :uploaded_user_id, dependent: :nullify
@@ -19,5 +18,10 @@ class User < ApplicationRecord
            class_name: 'WikiPage', foreign_key: :updated_user_id, dependent: :nullify
 
   def viewed?(post) = user_post_views.exists?(post_id: post.id)
+
   def gte_member? = member? || admin?
+
+  def banned? = banned_at.present?
+  def ban! = banned? || update!(banned_at: Time.current)
+  def unban! = update!(banned_at: nil)
 end

backend/app/models/wiki_asset.rb

@@ -0,0 +1,12 @@
+class WikiAsset < ApplicationRecord
+  belongs_to :wiki_page
+  belongs_to :created_by_user, class_name: 'User'
+
+  has_one_attached :file
+
+  validates :file, presence: true
+
+  def url
+    Rails.application.routes.url_helpers.rails_blob_url(file, only_path: true)
+  end
+end

backend/app/models/wiki_page.rb

@@ -13,6 +13,8 @@ class WikiPage < ApplicationRecord
            foreign_key: :redirect_page_id,
            dependent: :nullify
 
+  has_many :assets, class_name: 'WikiAsset', dependent: :destroy
+
   has_many :wiki_versions
 
   belongs_to :tag_name

backend/app/representations/post_repr.rb

@@ -2,7 +2,8 @@
 
 
 module PostRepr
-  BASE = { include: { tags: TagRepr::BASE, uploaded_user: UserRepr::BASE } }.freeze
+  BASE = { include: { tags: TagRepr::BASE, uploaded_user: UserRepr::BASE },
+           methods: [:parent_posts, :child_posts, :sibling_posts] }.freeze
 
   module_function
 

backend/app/representations/tag_repr.rb

@@ -3,7 +3,7 @@
 
 module TagRepr
   BASE = { only: [:id, :category, :post_count, :created_at, :updated_at],
-           methods: [:name, :has_wiki, :material_id] }.freeze
+           methods: [:name, :has_wiki, :material_id, :has_deerjikists] }.freeze
 
   module_function
 

backend/app/representations/wiki_asset_repr.rb

@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+
+module WikiAssetRepr
+  BASE = { only: [:wiki_page_id, :no], methods: [:url] }.freeze
+
+  module_function
+
+  def base wiki_asset
+    wiki_asset.as_json(BASE)
+  end
+
+  def many wiki_assets
+    wiki_assets.map { |a| base(a) }
+  end
+end

backend/app/services/post_version_recorder.rb

@@ -24,7 +24,7 @@ class PostVersionRecorder < VersionRecorder
       url: @record.url,
       thumbnail_base: @record.thumbnail_base,
       tags: @record.snapshot_tag_names.join(' '),
-      parent_id: @record.parent_id,
+      parent_post_ids: @record.snapshot_parent_post_ids.join(' '),
       original_created_from: @record.original_created_from,
       original_created_before: @record.original_created_before }
   end

backend/config/routes.rb

@@ -24,6 +24,7 @@ Rails.application.routes.draw do
       patch '', action: :update
 
       get :deerjikists
+      put :deerjikists, action: :update_deerjikists
     end
   end
 
@@ -47,6 +48,8 @@ Rails.application.routes.draw do
       get :exists
       get :diff
     end
+
+    resources :assets, controller: :wiki_assets, only: [:index, :create]
   end
 
   resources :posts, only: [:index, :show, :create, :update] do

backend/db/migrate/20260323192300_create_wiki_assets.rb

@@ -0,0 +1,17 @@
+class CreateWikiAssets < ActiveRecord::Migration[8.0]
+  def change
+    create_table :wiki_assets do |t|
+      t.references :wiki_page, null: false, foreign_key: true, index: false
+      t.integer :no, null: false
+      t.string :alt_text
+      t.column :sha256, 'binary(32)', null: false
+      t.references :created_by_user, null: false, foreign_key: { to_table: :users }
+      t.timestamps
+    end
+
+    add_index :wiki_assets, [:wiki_page_id, :sha256], unique: true
+    add_index :wiki_assets, [:wiki_page_id, :no], unique: true
+
+    add_column :wiki_pages, :next_asset_no, :integer, null: false, default: 1
+  end
+end

backend/db/migrate/20260427214800_create_post_implications.rb

@@ -0,0 +1,24 @@
+class CreatePostImplications < ActiveRecord::Migration[8.0]
+  def up
+    create_table :post_implications, primary_key: [:post_id, :parent_post_id] do |t|
+      t.references :post, null: false, foreign_key: true, index: false
+      t.references :parent_post, null: false, foreign_key: { to_table: :posts }
+      t.timestamps
+
+      t.check_constraint 'post_id <> parent_post_id',
+                         name: 'chk_post_implications_no_self'
+    end
+
+    add_column :post_versions, :parent_post_ids, :text, null: false, after: :parent_id
+    remove_column :post_versions, :parent_id, :bigint
+    remove_reference :posts, :parent, foreign_key: { to_table: :posts }
+  end
+
+  def down
+    add_reference :posts, :parent, foreign_key: { to_table: :posts }, after: :thumbnail_base
+    add_column :post_versions, :parent_id, :bigint, after: :post_id
+    remove_column :post_versions, :parent_post_ids, :text
+
+    drop_table :post_implications
+  end
+end

backend/db/migrate/20260501153900_rename_banned_to_banned_at_in_users_and_ip_addresses.rb

@@ -0,0 +1,16 @@
+class RenameBannedToBannedAtInUsersAndIpAddresses < ActiveRecord::Migration[8.0]
+  def up
+    [:users, :ip_addresses].each do
+      add_column _1, :banned_at, :datetime, after: :banned
+      add_index _1, :banned_at
+      remove_column _1, :banned
+    end
+  end
+
+  def down
+    [:ip_addresses, :users].each do
+      add_column _1, :banned, :boolean, null: false, default: false, after: :banned_at
+      remove_column _1, :banned_at
+    end
+  end
+end

backend/db/schema.rb

@@ -10,7 +10,7 @@
 #
 # It's strongly recommended that you check this file into your version control system.
 
-ActiveRecord::Schema[8.0].define(version: 2026_04_26_120600) do
+ActiveRecord::Schema[8.0].define(version: 2026_05_01_153900) do
   create_table "active_storage_attachments", charset: "utf8mb4", collation: "utf8mb4_0900_ai_ci", force: :cascade do |t|
     t.string "name", null: false
     t.string "record_type", null: false
@@ -50,9 +50,10 @@ ActiveRecord::Schema[8.0].define(version: 2026_04_26_120600) do
 
   create_table "ip_addresses", charset: "utf8mb4", collation: "utf8mb4_0900_ai_ci", force: :cascade do |t|
     t.binary "ip_address", limit: 16, null: false
-    t.boolean "banned", default: false, null: false
+    t.datetime "banned_at"
     t.datetime "created_at", null: false
     t.datetime "updated_at", null: false
+    t.index ["banned_at"], name: "index_ip_addresses_on_banned_at"
     t.index ["ip_address"], name: "index_ip_addresses_on_ip_address", unique: true
   end
 
@@ -119,6 +120,15 @@ ActiveRecord::Schema[8.0].define(version: 2026_04_26_120600) do
     t.check_constraint "`version_no` > 0", name: "nico_tag_versions_version_no_positive"
   end
 
+  create_table "post_implications", primary_key: ["post_id", "parent_post_id"], charset: "utf8mb4", collation: "utf8mb4_0900_ai_ci", force: :cascade do |t|
+    t.bigint "post_id", null: false
+    t.bigint "parent_post_id", null: false
+    t.datetime "created_at", null: false
+    t.datetime "updated_at", null: false
+    t.index ["parent_post_id"], name: "index_post_implications_on_parent_post_id"
+    t.check_constraint "`post_id` <> `parent_post_id`", name: "chk_post_implications_no_self"
+  end
+
   create_table "post_similarities", primary_key: ["post_id", "target_post_id"], charset: "utf8mb4", collation: "utf8mb4_0900_ai_ci", force: :cascade do |t|
     t.bigint "post_id", null: false
     t.bigint "target_post_id", null: false
@@ -155,13 +165,12 @@ ActiveRecord::Schema[8.0].define(version: 2026_04_26_120600) do
     t.string "url", limit: 768, null: false
     t.string "thumbnail_base", limit: 2000
     t.text "tags", null: false
-    t.bigint "parent_id"
+    t.text "parent_post_ids", null: false
     t.datetime "original_created_from"
     t.datetime "original_created_before"
     t.datetime "created_at", null: false
     t.bigint "created_by_user_id"
     t.index ["created_by_user_id"], name: "index_post_versions_on_created_by_user_id"
-    t.index ["parent_id"], name: "index_post_versions_on_parent_id"
     t.index ["post_id", "version_no"], name: "index_post_versions_on_post_id_and_version_no", unique: true
     t.index ["post_id"], name: "index_post_versions_on_post_id"
     t.check_constraint "`event_type` in (_utf8mb4'create',_utf8mb4'update',_utf8mb4'discard',_utf8mb4'restore')", name: "post_versions_event_type_valid"
@@ -172,13 +181,11 @@ ActiveRecord::Schema[8.0].define(version: 2026_04_26_120600) do
     t.string "title"
     t.string "url", limit: 768, null: false
     t.string "thumbnail_base", limit: 2000
-    t.bigint "parent_id"
     t.bigint "uploaded_user_id"
     t.datetime "created_at", null: false
     t.datetime "original_created_from"
     t.datetime "original_created_before"
     t.datetime "updated_at", null: false
-    t.index ["parent_id"], name: "index_posts_on_parent_id"
     t.index ["uploaded_user_id"], name: "index_posts_on_uploaded_user_id"
     t.index ["url"], name: "index_posts_on_url", unique: true
   end
@@ -326,9 +333,10 @@ ActiveRecord::Schema[8.0].define(version: 2026_04_26_120600) do
     t.string "name"
     t.string "inheritance_code", limit: 64, null: false
     t.string "role", null: false
-    t.boolean "banned", default: false, null: false
+    t.datetime "banned_at"
     t.datetime "created_at", null: false
     t.datetime "updated_at", null: false
+    t.index ["banned_at"], name: "index_users_on_banned_at"
   end
 
   create_table "wiki_assets", charset: "utf8mb4", collation: "utf8mb4_0900_ai_ci", force: :cascade do |t|
@@ -428,6 +436,8 @@ ActiveRecord::Schema[8.0].define(version: 2026_04_26_120600) do
   add_foreign_key "nico_tag_relations", "tags", column: "nico_tag_id"
   add_foreign_key "nico_tag_versions", "tags"
   add_foreign_key "nico_tag_versions", "users", column: "created_by_user_id"
+  add_foreign_key "post_implications", "posts"
+  add_foreign_key "post_implications", "posts", column: "parent_post_id"
   add_foreign_key "post_similarities", "posts"
   add_foreign_key "post_similarities", "posts", column: "target_post_id"
   add_foreign_key "post_tags", "posts"
@@ -435,9 +445,7 @@ ActiveRecord::Schema[8.0].define(version: 2026_04_26_120600) do
   add_foreign_key "post_tags", "users", column: "created_user_id"
   add_foreign_key "post_tags", "users", column: "deleted_user_id"
   add_foreign_key "post_versions", "posts"
-  add_foreign_key "post_versions", "posts", column: "parent_id"
   add_foreign_key "post_versions", "users", column: "created_by_user_id"
-  add_foreign_key "posts", "posts", column: "parent_id"
   add_foreign_key "posts", "users", column: "uploaded_user_id"
   add_foreign_key "settings", "users"
   add_foreign_key "tag_implications", "tags"

backend/spec/factories/ip_addresses.rb

@@ -0,0 +1,10 @@
+FactoryBot.define do
+  factory :ip_address do
+    ip_address { IPAddr.new('203.0.113.10').hton }
+    banned_at { nil }
+
+    trait :banned do
+      banned_at { Time.current }
+    end
+  end
+end

backend/spec/factories/users.rb

@@ -1,15 +1,24 @@
 FactoryBot.define do
   factory :user do
-    name { "test-user" }
+    name { nil }
     inheritance_code { SecureRandom.uuid }
-    role { "guest" }
+    role { 'guest' }
+    banned_at { nil }
+
+    trait :guest do
+      role { 'guest' }
+    end
 
     trait :member do
-      role { "member" }
+      role { 'member' }
     end
 
     trait :admin do
       role { 'admin' }
     end
+
+    trait :banned do
+      banned_at { Time.current }
+    end
   end
 end

backend/spec/models/post_implication_spec.rb

@@ -0,0 +1,51 @@
+require 'rails_helper'
+
+RSpec.describe PostImplication, type: :model do
+  let!(:post_record) do
+    Post.create!(
+      title: 'post',
+      url: 'https://example.com/post-implication-post'
+    )
+  end
+
+  let!(:parent_post) do
+    Post.create!(
+      title: 'parent post',
+      url: 'https://example.com/post-implication-parent'
+    )
+  end
+
+  it 'is valid with post and parent_post' do
+    implication = described_class.new(
+      post: post_record,
+      parent_post:
+    )
+
+    expect(implication).to be_valid
+  end
+
+  it 'does not allow same post as parent_post' do
+    implication = described_class.new(
+      post: post_record,
+      parent_post: post_record
+    )
+
+    expect(implication).not_to be_valid
+    expect(implication.errors[:parent_post_id]).to be_present
+  end
+
+  it 'does not allow duplicate pair' do
+    described_class.create!(
+      post: post_record,
+      parent_post:
+    )
+
+    duplicate = described_class.new(
+      post: post_record,
+      parent_post:
+    )
+
+    expect(duplicate).not_to be_valid
+    expect(duplicate.errors[:post_id]).to be_present
+  end
+end

backend/spec/models/post_version_spec.rb

@@ -19,7 +19,7 @@ RSpec.describe PostVersion, type: :model do
       url: post_record.url,
       thumbnail_base: post_record.thumbnail_base,
       tags: post_record.snapshot_tag_names.join(' '),
-      parent: post_record.parent,
+      parent_post_ids: post_record.snapshot_parent_post_ids.join(' '),
       original_created_from: post_record.original_created_from,
       original_created_before: post_record.original_created_before,
       created_at: Time.current,

backend/spec/models/tag_spec.rb

@@ -161,7 +161,7 @@ RSpec.describe Tag, type: :model do
         url: post.url,
         thumbnail_base: post.thumbnail_base,
         tags: snapshot_tags(post),
-        parent: post.parent,
+        parent_post_ids: post.snapshot_parent_post_ids.join(' '),
         original_created_from: post.original_created_from,
         original_created_before: post.original_created_before,
         created_at: Time.current,

backend/spec/requests/posts_spec.rb

@@ -15,6 +15,31 @@ RSpec.describe 'Posts API', type: :request do
     Rack::Test::UploadedFile.new(StringIO.new('dummy'), 'image/jpeg', original_filename: 'dummy.jpg')
   end
 
+  def post_write_params params = { }
+    { parent_post_ids: '' }.merge(params)
+  end
+
+  def create_parent_post! title:, url:
+    Post.create!(title:, url:)
+  end
+
+  def create_post_version_for! post
+    PostVersion.create!(
+      post:,
+      version_no: 1,
+      event_type: 'create',
+      title: post.title,
+      url: post.url,
+      thumbnail_base: post.thumbnail_base,
+      tags: post.snapshot_tag_names.join(' '),
+      parent_post_ids: post.snapshot_parent_post_ids.join(' '),
+      original_created_from: post.original_created_from,
+      original_created_before: post.original_created_before,
+      created_at: post.created_at,
+      created_by_user: post.uploaded_user
+    )
+  end
+
   let!(:tag_name) { TagName.create!(name: 'spec_tag') }
   let!(:tag)      { Tag.create!(tag_name: tag_name, category: :general) }
 
@@ -457,6 +482,65 @@ RSpec.describe 'Posts API', type: :request do
         expect(json).to have_key('viewed')
         expect([true, false]).to include(json['viewed'])
       end
+
+      context 'when post has parent, child, and sibling posts' do
+        let!(:parent_post) do
+          create_parent_post!(
+            title: 'shared parent post',
+            url: 'https://example.com/shared-parent-post'
+          )
+        end
+
+        let!(:child_post) do
+          Post.create!(
+            title: 'child post',
+            url: 'https://example.com/show-child-post'
+          )
+        end
+
+        let!(:sibling_post) do
+          Post.create!(
+            title: 'sibling post',
+            url: 'https://example.com/show-sibling-post'
+          )
+        end
+
+        before do
+          PostImplication.create!(
+            post: post_record,
+            parent_post:
+          )
+
+          PostImplication.create!(
+            post: child_post,
+            parent_post: post_record
+          )
+
+          PostImplication.create!(
+            post: sibling_post,
+            parent_post:
+          )
+        end
+
+        it 'returns parent_posts, child_posts, and sibling_posts' do
+          get "/posts/#{post_record.id}"
+
+          expect(response).to have_http_status(:ok)
+
+          parent_ids = json.fetch('parent_posts').map { |p| p.fetch('id') }
+          child_ids = json.fetch('child_posts').map { |p| p.fetch('id') }
+
+          expect(parent_ids).to include(parent_post.id)
+          expect(child_ids).to include(child_post.id)
+
+          sibling_posts_by_parent = json.fetch('sibling_posts')
+          siblings = sibling_posts_by_parent.fetch(parent_post.id.to_s)
+
+          sibling_ids = siblings.map { |p| p.fetch('id') }
+          expect(sibling_ids).to include(post_record.id)
+          expect(sibling_ids).to include(sibling_post.id)
+        end
+      end
     end
 
     context 'when post does not exist' do
@@ -475,25 +559,28 @@ RSpec.describe 'Posts API', type: :request do
 
     it '401 when not logged in' do
       sign_out
-      post '/posts', params: { title: 't', url: 'https://example.com/x', tags: 'a', thumbnail: dummy_upload }
+      post '/posts', params: post_write_params(title: 't', url: 'https://example.com/x', tags: 'a',
+                                               thumbnail: dummy_upload)
+
       expect(response).to have_http_status(:unauthorized)
     end
 
     it '403 when not member' do
       sign_in_as(create(:user, role: 'guest'))
-      post '/posts', params: { title: 't', url: 'https://example.com/x', tags: 'a', thumbnail: dummy_upload }
+      post '/posts', params: post_write_params(title: 't', url: 'https://example.com/x', tags: 'a',
+                                               thumbnail: dummy_upload)
       expect(response).to have_http_status(:forbidden)
     end
 
     it '201 and creates post + tags when member' do
       sign_in_as(member)
 
-      post '/posts', params: {
+      post '/posts', params: post_write_params(
         title: 'new post',
         url: 'https://example.com/new',
         tags: 'spec_tag', # 既存タグ名を投げる
         thumbnail: dummy_upload
-      }
+      )
 
       expect(response).to have_http_status(:created)
       expect(json).to include('id', 'title', 'url')
@@ -507,12 +594,12 @@ RSpec.describe 'Posts API', type: :request do
     it '201 and creates post + tags when member and tags have aliases' do
       sign_in_as(member)
 
-      post '/posts', params: {
+      post '/posts', params: post_write_params(
         title: 'new post',
         url: 'https://example.com/new',
         tags: 'manko', # 既存タグ名を投げる
         thumbnail: dummy_upload
-      }
+      )
 
       expect(response).to have_http_status(:created)
       expect(json).to include('id', 'title', 'url')
@@ -533,13 +620,14 @@ RSpec.describe 'Posts API', type: :request do
       it 'return 400' do
         sign_in_as(member)
 
-        post '/posts', params: {
+        post '/posts', params: post_write_params(
           title: 'new post',
-            url: 'https://example.com/nico_tag',
+          url: 'https://example.com/nico-tag-post',
           tags: 'nico:nico_tag',
-            thumbnail: dummy_upload }
+          thumbnail: dummy_upload
+        )
 
-        expect(response).to have_http_status(:bad_request)
+        expect(response).to have_http_status(:bad_request), response.body
       end
     end
 
@@ -547,11 +635,11 @@ RSpec.describe 'Posts API', type: :request do
       it 'returns 422' do
         sign_in_as(member)
 
-        post '/posts', params: {
+        post '/posts', params: post_write_params(
             title: 'new post',
             url: '   ',
             tags: 'spec_tag', # 既存タグ名を投げる
-            thumbnail: dummy_upload }
+            thumbnail: dummy_upload)
 
         expect(response).to have_http_status(:unprocessable_entity)
       end
@@ -561,16 +649,156 @@ RSpec.describe 'Posts API', type: :request do
       it 'returns 422' do
         sign_in_as(member)
 
-        post '/posts', params: {
+        post '/posts', params: post_write_params(
             title: 'new post',
             url: 'ぼざクリタグ広場',
             tags: 'spec_tag', # 既存タグ名を投げる
-          thumbnail: dummy_upload
-        }
+            thumbnail: dummy_upload)
 
         expect(response).to have_http_status(:unprocessable_entity)
       end
     end
+
+    context 'when parent_post_ids is provided' do
+      let!(:parent_post_1) do
+        create_parent_post!(
+          title: 'parent post 1',
+          url: 'https://example.com/parent-post-1'
+        )
+      end
+
+      let!(:parent_post_2) do
+        create_parent_post!(
+          title: 'parent post 2',
+          url: 'https://example.com/parent-post-2'
+        )
+      end
+
+      it 'creates post implications for parent posts' do
+        sign_in_as(member)
+
+        expect {
+          post '/posts', params: {
+              title: 'child post',
+              url: 'https://example.com/child-post',
+              tags: 'spec_tag',
+              parent_post_ids: "#{parent_post_1.id} #{parent_post_2.id}",
+              thumbnail: dummy_upload }
+        }.to change(PostImplication, :count).by(2)
+
+        expect(response).to have_http_status(:created)
+
+        created_post = Post.find(json.fetch('id'))
+        expect(created_post.parent_posts.order(:id).pluck(:id)).to eq(
+          [parent_post_1.id, parent_post_2.id].sort
+        )
+
+        expect(PostImplication.exists?(
+          post_id: created_post.id,
+          parent_post_id: parent_post_1.id
+        )).to be(true)
+
+        expect(PostImplication.exists?(
+          post_id: created_post.id,
+          parent_post_id: parent_post_2.id
+        )).to be(true)
+      end
+
+      it 'deduplicates parent_post_ids' do
+        sign_in_as(member)
+
+        expect {
+          post '/posts', params: post_write_params(
+            title: 'dedup child post',
+            url: 'https://example.com/dedup-child-post',
+            tags: 'spec_tag',
+            parent_post_ids: "#{parent_post_1.id} #{parent_post_1.id}",
+            thumbnail: dummy_upload
+          )
+        }.to change(PostImplication, :count).by(1)
+
+        expect(response).to have_http_status(:created)
+
+        created_post = Post.find(json.fetch('id'))
+        expect(created_post.parent_posts.pluck(:id)).to eq([parent_post_1.id])
+      end
+
+      it 'records parent_post_ids in post version' do
+        sign_in_as(member)
+
+        post '/posts', params: post_write_params(
+          title: 'versioned child post',
+          url: 'https://example.com/versioned-child-post',
+          tags: 'spec_tag',
+          parent_post_ids: "#{parent_post_1.id} #{parent_post_2.id}",
+          thumbnail: dummy_upload
+        )
+
+        expect(response).to have_http_status(:created)
+
+        created_post = Post.find(json.fetch('id'))
+        version = PostVersion.find_by!(post: created_post, version_no: 1)
+
+        expect(version.parent_post_ids.split.map(&:to_i)).to eq(
+          [parent_post_1.id, parent_post_2.id].sort
+        )
+      end
+    end
+
+    context 'when parent_post_ids is missing' do
+      it 'returns 422' do
+        sign_in_as(member)
+
+        expect {
+          post '/posts', params: {
+              title: 'missing parent_post_ids',
+              url: 'https://example.com/missing-parent-post-ids',
+              tags: 'spec_tag',
+              thumbnail: dummy_upload }
+        }.not_to change(Post, :count)
+
+        expect(response).to have_http_status(:unprocessable_entity)
+        expect(json.fetch('errors')).to be_present
+      end
+    end
+
+    context 'when parent_post_ids includes invalid token' do
+      it 'returns 422 and does not create post' do
+        sign_in_as(member)
+
+        expect {
+          post '/posts', params: post_write_params(
+            title: 'invalid parent ids',
+            url: 'https://example.com/invalid-parent-ids',
+            tags: 'spec_tag',
+            parent_post_ids: 'abc',
+            thumbnail: dummy_upload
+          )
+        }.not_to change(Post, :count)
+
+        expect(response).to have_http_status(:unprocessable_entity)
+        expect(json.fetch('errors')).to be_present
+      end
+    end
+
+    context 'when parent_post_ids includes nonexistent post id' do
+      it 'returns 422 and does not create post implication' do
+        sign_in_as(member)
+
+        expect {
+          post '/posts', params: post_write_params(
+            title: 'missing parent post',
+            url: 'https://example.com/missing-parent-post',
+            tags: 'spec_tag',
+            parent_post_ids: '999999999',
+            thumbnail: dummy_upload
+          )
+        }.not_to change(PostImplication, :count)
+
+        expect(response).to have_http_status(:unprocessable_entity)
+        expect(json.fetch('errors')).to be_present
+      end
+    end
   end
 
   describe 'PUT /posts/:id' do
@@ -578,13 +806,13 @@ RSpec.describe 'Posts API', type: :request do
 
     it '401 when not logged in' do
       sign_out
-      put "/posts/#{post_record.id}", params: { title: 'updated', tags: 'spec_tag' }
+      put "/posts/#{post_record.id}", params: post_write_params(title: 'updated', tags: 'spec_tag')
       expect(response).to have_http_status(:unauthorized)
     end
 
     it '403 when not member' do
       sign_in_as(create(:user, role: 'guest'))
-      put "/posts/#{post_record.id}", params: { title: 'updated', tags: 'spec_tag' }
+      put "/posts/#{post_record.id}", params: post_write_params(title: 'updated', tags: 'spec_tag')
       expect(response).to have_http_status(:forbidden)
     end
 
@@ -595,10 +823,9 @@ RSpec.describe 'Posts API', type: :request do
       tn2 = TagName.create!(name: 'spec_tag_2')
       Tag.create!(tag_name: tn2, category: :general)
 
-      put "/posts/#{post_record.id}", params: {
+      put "/posts/#{post_record.id}", params: post_write_params(
           title: 'updated title',
-        tags: 'spec_tag_2'
-      }
+          tags: 'spec_tag_2')
 
       expect(response).to have_http_status(:ok)
       expect(json).to have_key('tags')
@@ -619,11 +846,178 @@ RSpec.describe 'Posts API', type: :request do
       it 'return 400' do
         sign_in_as(member)
 
-        put "/posts/#{ post_record.id }", params: {
+        put "/posts/#{post_record.id}", params: post_write_params(
           title: 'updated title',
-            tags: 'nico:nico_tag' }
+          tags: 'nico:nico_tag'
+        )
 
-        expect(response).to have_http_status(:bad_request)
+        expect(response).to have_http_status(:bad_request), response.body
+      end
+    end
+
+    context 'when parent_post_ids is provided' do
+      let!(:old_parent_post) do
+        create_parent_post!(
+          title: 'old parent post',
+          url: 'https://example.com/old-parent-post'
+        )
+      end
+
+      let!(:new_parent_post_1) do
+        create_parent_post!(
+          title: 'new parent post 1',
+          url: 'https://example.com/new-parent-post-1'
+        )
+      end
+
+      let!(:new_parent_post_2) do
+        create_parent_post!(
+          title: 'new parent post 2',
+          url: 'https://example.com/new-parent-post-2'
+        )
+      end
+
+      before do
+        PostImplication.create!(
+          post: post_record,
+          parent_post: old_parent_post
+        )
+      end
+
+      it 'replaces parent posts' do
+        sign_in_as(member)
+
+        put "/posts/#{post_record.id}", params: post_write_params(
+          title: 'updated title',
+          tags: 'spec_tag',
+          parent_post_ids: "#{new_parent_post_1.id} #{new_parent_post_2.id}"
+        )
+
+        expect(response).to have_http_status(:ok)
+
+        expect(post_record.reload.parent_posts.order(:id).pluck(:id)).to eq(
+          [new_parent_post_1.id, new_parent_post_2.id].sort
+        )
+
+        expect(PostImplication.exists?(
+          post_id: post_record.id,
+          parent_post_id: old_parent_post.id
+        )).to be(false)
+      end
+
+      it 'clears parent posts when parent_post_ids is blank' do
+        sign_in_as(member)
+
+        put "/posts/#{post_record.id}", params: post_write_params(
+          title: 'updated title',
+          tags: 'spec_tag',
+          parent_post_ids: ''
+        )
+
+        expect(response).to have_http_status(:ok)
+        expect(post_record.reload.parent_posts).to be_empty
+      end
+
+      it 'records changed parent_post_ids in post version' do
+        sign_in_as(member)
+        create_post_version_for!(post_record.reload)
+
+        put "/posts/#{post_record.id}", params: post_write_params(
+          title: 'updated title',
+          tags: 'spec_tag',
+          parent_post_ids: "#{new_parent_post_1.id} #{new_parent_post_2.id}"
+        )
+
+        expect(response).to have_http_status(:ok)
+
+        version = post_record.reload.post_versions.order(:version_no).last
+
+        expect(version.version_no).to eq(2)
+        expect(version.parent_post_ids.split.map(&:to_i)).to eq(
+          [new_parent_post_1.id, new_parent_post_2.id].sort
+        )
+      end
+    end
+
+    context 'when parent_post_ids is missing' do
+      it 'returns 422' do
+        sign_in_as(member)
+
+        put "/posts/#{post_record.id}", params: {
+            title: 'updated title',
+            tags: 'spec_tag' }
+
+        expect(response).to have_http_status(:unprocessable_entity)
+        expect(json.fetch('errors')).to be_present
+      end
+    end
+
+    context 'when parent_post_ids includes invalid token' do
+      it 'returns 422 and does not change parent posts' do
+        sign_in_as(member)
+
+        parent_post = create_parent_post!(
+          title: 'valid parent post',
+          url: 'https://example.com/valid-parent-post'
+        )
+
+        PostImplication.create!(
+          post: post_record,
+          parent_post:
+        )
+
+        put "/posts/#{post_record.id}", params: post_write_params(
+          title: 'updated title',
+          tags: 'spec_tag',
+          parent_post_ids: 'abc'
+        )
+
+        expect(response).to have_http_status(:unprocessable_entity)
+        expect(post_record.reload.parent_posts.pluck(:id)).to eq([parent_post.id])
+      end
+    end
+
+    context 'when parent_post_ids includes nonexistent post id' do
+      it 'returns 422 and does not change parent posts' do
+        sign_in_as(member)
+
+        parent_post = create_parent_post!(
+          title: 'existing parent post',
+          url: 'https://example.com/existing-parent-post'
+        )
+
+        PostImplication.create!(
+          post: post_record,
+          parent_post:
+        )
+
+        put "/posts/#{post_record.id}", params: post_write_params(
+          title: 'updated title',
+          tags: 'spec_tag',
+          parent_post_ids: '999999999'
+        )
+
+        expect(response).to have_http_status(:unprocessable_entity)
+        expect(post_record.reload.parent_posts.pluck(:id)).to eq([parent_post.id])
+      end
+    end
+
+    context 'when parent_post_ids includes self id' do
+      it 'returns 422 and does not create self implication' do
+        sign_in_as(member)
+
+        put "/posts/#{post_record.id}", params: post_write_params(
+          title: 'updated title',
+          tags: 'spec_tag',
+          parent_post_ids: post_record.id.to_s
+        )
+
+        expect(response).to have_http_status(:unprocessable_entity)
+
+        expect(PostImplication.exists?(
+          post_id: post_record.id,
+          parent_post_id: post_record.id
+        )).to be(false)
       end
     end
   end
@@ -773,20 +1167,20 @@ RSpec.describe 'Posts API', type: :request do
       post.snapshot_tag_names.join(' ')
     end
 
-    def create_post_version!(post, version_no:, event_type:, created_by_user:, created_at:)
+    def create_post_version! post, version_no:, event_type:, created_by_user:, created_at:
       PostVersion.create!(
-        post: post,
-        version_no: version_no,
-        event_type: event_type,
+        post:,
+        version_no:,
+        event_type:,
         title: post.title,
         url: post.url,
         thumbnail_base: post.thumbnail_base,
         tags: snapshot_tags(post),
-        parent: post.parent,
+        parent_post_ids: post.snapshot_parent_post_ids.join(' '),
         original_created_from: post.original_created_from,
         original_created_before: post.original_created_before,
-        created_at: created_at,
-        created_by_user: created_by_user
+        created_at:,
+        created_by_user:
       )
     end
 
@@ -1024,7 +1418,6 @@ RSpec.describe 'Posts API', type: :request do
         url: post.url,
         thumbnail_base: post.thumbnail_base,
         tags: snapshot_tags(post),
-        parent: post.parent,
         original_created_from: post.original_created_from,
         original_created_before: post.original_created_before,
         created_at: post.created_at,
@@ -1036,12 +1429,11 @@ RSpec.describe 'Posts API', type: :request do
       sign_in_as(member)
 
       expect do
-        post '/posts', params: {
+        post '/posts', params: post_write_params(
             title: 'versioned post',
             url: 'https://example.com/versioned-post',
             tags: 'spec_tag',
-          thumbnail: dummy_upload
-        }
+            thumbnail: dummy_upload)
       end.to change(PostVersion, :count).by(1)
 
       expect(response).to have_http_status(:created)
@@ -1064,10 +1456,9 @@ RSpec.describe 'Posts API', type: :request do
       Tag.create!(tag_name: tag_name2, category: :general)
 
       expect do
-        put "/posts/#{post_record.id}", params: {
+        put "/posts/#{post_record.id}", params: post_write_params(
             title: 'updated title',
-          tags: 'spec_tag_2'
-        }
+            tags: 'spec_tag_2')
       end.to change(PostVersion, :count).by(1)
 
       expect(response).to have_http_status(:ok)
@@ -1087,10 +1478,9 @@ RSpec.describe 'Posts API', type: :request do
       create_post_version_for!(post_record.reload)
 
       expect {
-        put "/posts/#{post_record.id}", params: {
+        put "/posts/#{post_record.id}", params: post_write_params(
             title: post_record.title,
-          tags: 'spec_tag'
-        }
+            tags: 'spec_tag')
       }.not_to change(PostVersion, :count)
       expect(response).to have_http_status(:ok)
 
@@ -1104,12 +1494,11 @@ RSpec.describe 'Posts API', type: :request do
       sign_in_as(member)
 
       expect do
-        post '/posts', params: {
+        post '/posts', params: post_write_params(
             title: 'invalid post',
             url: 'ぼざクリタグ広場',
             tags: 'spec_tag',
-          thumbnail: dummy_upload
-        }
+            thumbnail: dummy_upload)
       end.not_to change(PostVersion, :count)
 
       expect(response).to have_http_status(:unprocessable_entity)
@@ -1120,12 +1509,11 @@ RSpec.describe 'Posts API', type: :request do
       create_post_version_for!(post_record)
 
       expect do
-        put "/posts/#{post_record.id}", params: {
+        put "/posts/#{post_record.id}", params: post_write_params(
             title: 'updated title',
             tags: 'spec_tag',
             original_created_from: Time.zone.local(2020, 1, 2, 0, 0, 0).iso8601,
-          original_created_before: Time.zone.local(2020, 1, 1, 0, 0, 0).iso8601
-        }
+            original_created_before: Time.zone.local(2020, 1, 1, 0, 0, 0).iso8601)
       end.not_to change(PostVersion, :count)
 
       expect(response).to have_http_status(:unprocessable_entity)
@@ -1139,12 +1527,11 @@ RSpec.describe 'Posts API', type: :request do
       sign_in_as(member)
 
       expect {
-        post '/posts', params: {
+        post '/posts', params: post_write_params(
             title: 'tag versioned post',
             url: 'https://example.com/tag-versioned-post',
             tags: 'spec_tag',
-          thumbnail: dummy_upload
-        }
+            thumbnail: dummy_upload)
       }.to change { tag.reload.tag_versions.count }.by(1)
 
       expect(response).to have_http_status(:created)
@@ -1164,10 +1551,9 @@ RSpec.describe 'Posts API', type: :request do
       tag2 = Tag.create!(tag_name: tag_name2, category: :general)
 
       expect {
-        put "/posts/#{post_record.id}", params: {
+        put "/posts/#{post_record.id}", params: post_write_params(
             title: 'updated title',
-          tags: 'spec_tag_2'
-        }
+            tags: 'spec_tag_2')
       }.to change { tag2.reload.tag_versions.count }.by(1)
 
       expect(response).to have_http_status(:ok)

backend/spec/requests/tags_deerjikists_spec.rb

@@ -8,23 +8,35 @@ RSpec.describe 'Tags deerjikists API', type: :request do
 
   let!(:tag) { create(:tag, category: :deerjikist) }
 
+  let(:member) { create(:user, :member) }
+  let(:guest) { create(:user, role: :guest) }
+
   before do
-    # show_by_name / deerjikists_by_name 用に名前を固定
     tag.tag_name.update!(name: 'deerjika')
   end
 
   describe 'GET /tags/:id/deerjikists' do
     subject(:do_request) do
-      get "/tags/#{ tag_id }/deerjikists"
+      get "/tags/#{tag_id}/deerjikists"
     end
 
     let(:tag_id) { tag.id }
 
     context 'when tag exists and has no deerjikists' do
-      it 'returns 200 and empty array' do
+      it 'returns 200 with tag and empty deerjikists array' do
         do_request
+
         expect(response).to have_http_status(:ok)
-        expect(json).to eq([])
+
+        expect(json).to be_a(Hash)
+
+        expect(json['tag']).to be_a(Hash)
+        expect(json['tag']['id']).to eq(tag.id)
+        expect(json['tag']['name']).to eq('deerjika')
+        expect(json['tag']['category']).to eq('deerjikist')
+        expect(json['tag']['has_deerjikists']).to eq(false)
+
+        expect(json['deerjikists']).to eq([])
       end
     end
 
@@ -34,14 +46,24 @@ RSpec.describe 'Tags deerjikists API', type: :request do
         Deerjikist.create!(platform: platform2, code: code2, tag: tag)
       end
 
-      it 'returns 200 and deerjikists array' do
+      it 'returns 200 with tag and deerjikists array' do
         do_request
+
         expect(response).to have_http_status(:ok)
 
-        expect(json).to be_a(Array)
-        expect(json.size).to eq(2)
+        expect(json).to be_a(Hash)
 
-        expect(json.map { |h| [h['platform'], h['code']] }).to contain_exactly(
+        expect(json['tag']).to be_a(Hash)
+        expect(json['tag']['id']).to eq(tag.id)
+        expect(json['tag']['name']).to eq('deerjika')
+        expect(json['tag']['category']).to eq('deerjikist')
+        expect(json['tag']['has_deerjikists']).to eq(true)
+
+        expect(json['deerjikists']).to be_a(Array)
+        expect(json['deerjikists'].size).to eq(2)
+
+        expect(json['deerjikists'].map { |h| [h['platform'], h['code']] })
+          .to contain_exactly(
             [platform1, code1],
             [platform2, code2],
           )
@@ -53,6 +75,7 @@ RSpec.describe 'Tags deerjikists API', type: :request do
 
       it 'returns 404' do
         do_request
+
         expect(response).to have_http_status(:not_found)
       end
     end
@@ -60,7 +83,7 @@ RSpec.describe 'Tags deerjikists API', type: :request do
 
   describe 'GET /tags/name/:name/deerjikists' do
     subject(:do_request) do
-      get "/tags/name/#{ name }/deerjikists"
+      get "/tags/name/#{name}/deerjikists"
     end
 
     let(:name) { 'deerjika' }
@@ -70,6 +93,7 @@ RSpec.describe 'Tags deerjikists API', type: :request do
 
       it 'returns 400' do
         do_request
+
         expect(response).to have_http_status(:bad_request)
       end
     end
@@ -79,23 +103,209 @@ RSpec.describe 'Tags deerjikists API', type: :request do
 
       it 'returns 404' do
         do_request
+
         expect(response).to have_http_status(:not_found)
       end
     end
 
+    context 'when tag exists and has no deerjikists' do
+      it 'returns 200 with tag and empty deerjikists array' do
+        do_request
+
+        expect(response).to have_http_status(:ok)
+
+        expect(json).to be_a(Hash)
+
+        expect(json['tag']).to be_a(Hash)
+        expect(json['tag']['id']).to eq(tag.id)
+        expect(json['tag']['name']).to eq('deerjika')
+        expect(json['tag']['category']).to eq('deerjikist')
+        expect(json['tag']['has_deerjikists']).to eq(false)
+
+        expect(json['deerjikists']).to eq([])
+      end
+    end
+
     context 'when tag exists and has deerjikists' do
       before do
         Deerjikist.create!(platform: platform1, code: code1, tag: tag)
       end
 
-      it 'returns 200 and deerjikists array' do
+      it 'returns 200 with tag and deerjikists array' do
         do_request
+
+        expect(response).to have_http_status(:ok)
+
+        expect(json).to be_a(Hash)
+
+        expect(json['tag']).to be_a(Hash)
+        expect(json['tag']['id']).to eq(tag.id)
+        expect(json['tag']['name']).to eq('deerjika')
+        expect(json['tag']['category']).to eq('deerjikist')
+        expect(json['tag']['has_deerjikists']).to eq(true)
+
+        expect(json['deerjikists']).to be_a(Array)
+        expect(json['deerjikists'].size).to eq(1)
+
+        expect(json['deerjikists'][0]['platform']).to eq(platform1)
+        expect(json['deerjikists'][0]['code']).to eq(code1)
+      end
+    end
+  end
+
+  describe 'PUT /tags/:id/deerjikists' do
+    subject(:do_request) do
+      put "/tags/#{tag_id}/deerjikists", params: payload, as: :json
+    end
+
+    let(:tag_id) { tag.id }
+    let(:payload) do
+      [
+        { platform: platform1, code: code1 },
+        { platform: platform2, code: code2 },
+      ]
+    end
+
+    context 'when not logged in' do
+      it 'returns 401' do
+        do_request
+
+        expect(response).to have_http_status(:unauthorized)
+      end
+    end
+
+    context 'when logged in but not member' do
+      before do
+        sign_in_as guest
+      end
+
+      it 'returns 403' do
+        do_request
+
+        expect(response).to have_http_status(:forbidden)
+      end
+    end
+
+    context 'when tag does not exist' do
+      let(:tag_id) { 9_999_999 }
+
+      before do
+        sign_in_as member
+      end
+
+      it 'returns 404' do
+        do_request
+
+        expect(response).to have_http_status(:not_found)
+      end
+    end
+
+    context 'when logged in as member' do
+      before do
+        sign_in_as member
+      end
+
+      context 'when tag has no deerjikists' do
+        it 'creates deerjikists and returns deerjikists array' do
+          expect {
+            do_request
+          }.to change { Deerjikist.where(tag: tag).count }.from(0).to(2)
+
           expect(response).to have_http_status(:ok)
 
+          expect(json).to be_a(Array)
+          expect(json.map { |h| [h['platform'], h['code']] })
+            .to contain_exactly(
+              [platform1, code1],
+              [platform2, code2],
+            )
+
+          expect(Deerjikist.where(tag: tag).map { |d| [d.platform, d.code] })
+            .to contain_exactly(
+              [platform1, code1],
+              [platform2, code2],
+            )
+        end
+      end
+
+      context 'when tag already has deerjikists' do
+        before do
+          Deerjikist.create!(platform: platform1, code: 'old-code-1', tag: tag)
+          Deerjikist.create!(platform: platform2, code: 'old-code-2', tag: tag)
+        end
+
+        it 'replaces deerjikists and returns deerjikists array' do
+          do_request
+
+          expect(response).to have_http_status(:ok)
+
+          expect(Deerjikist.where(tag: tag).map { |d| [d.platform, d.code] })
+            .to contain_exactly(
+              [platform1, code1],
+              [platform2, code2],
+            )
+
+          expect(Deerjikist.exists?(platform: platform1, code: 'old-code-1')).to eq(false)
+          expect(Deerjikist.exists?(platform: platform2, code: 'old-code-2')).to eq(false)
+
+          expect(json).to be_a(Array)
+          expect(json.map { |h| [h['platform'], h['code']] })
+            .to contain_exactly(
+              [platform1, code1],
+              [platform2, code2],
+            )
+        end
+      end
+
+      context 'when payload is empty array' do
+        let(:payload) { [] }
+
+        before do
+          Deerjikist.create!(platform: platform1, code: code1, tag: tag)
+          Deerjikist.create!(platform: platform2, code: code2, tag: tag)
+        end
+
+        it 'clears deerjikists and returns empty array' do
+          expect {
+            do_request
+          }.to change { Deerjikist.where(tag: tag).count }.from(2).to(0)
+
+          expect(response).to have_http_status(:ok)
+          expect(json).to eq([])
+        end
+      end
+
+      context 'when youtube code is handle' do
+        let(:channel_id) { 'UCabcdefghijklmnopqrstuv' }
+        let(:payload) do
+          [
+            { platform: 'youtube', code: '@deerjika' },
+          ]
+        end
+
+        before do
+          allow(Net::HTTP).to receive(:get).and_return(
+            %(<link rel="canonical" href="https://www.youtube.com/channel/#{channel_id}">),
+          )
+        end
+
+        it 'normalises youtube handle to channel id' do
+          expect {
+            do_request
+          }.to change { Deerjikist.where(tag: tag).count }.from(0).to(1)
+
+          expect(response).to have_http_status(:ok)
+
+          expect(Net::HTTP).to have_received(:get)
+
+          expect(Deerjikist.exists?(platform: 'youtube', code: channel_id, tag: tag))
+            .to eq(true)
+
           expect(json).to be_a(Array)
           expect(json.size).to eq(1)
-        expect(json[0]['platform']).to eq(platform1)
-        expect(json[0]['code']).to eq(code1)
+          expect(json[0]['platform']).to eq('youtube')
+          expect(json[0]['code']).to eq(channel_id)
+        end
       end
     end
   end

backend/spec/requests/users_spec.rb

@@ -1,109 +1,266 @@
-require "rails_helper"
+require 'rails_helper'
+
+RSpec.describe 'Users', type: :request do
+  let(:remote_ip) { '203.0.113.10' }
+
+  before do
+    allow_any_instance_of(ActionDispatch::Request)
+      .to receive(:remote_ip)
+      .and_return(remote_ip)
+  end
+
+  def auth_headers(user)
+    { 'X-Transfer-Code' => user.inheritance_code }
+  end
+
+  describe 'POST /users' do
+    it 'creates guest user, IpAddress and UserIp, and returns code' do
+      expect {
+        post '/users'
+      }.to change(User, :count).by(1)
+        .and change(IpAddress, :count).by(1)
+        .and change(UserIp, :count).by(1)
 
-RSpec.describe "Users", type: :request do
-  describe "POST /users" do
-    it "creates guest user and returns code" do
-      post "/users"
       expect(response).to have_http_status(:created)
-      expect(json["code"]).to be_present
-      expect(json["user"]["role"]).to eq("guest")
+      expect(json['code']).to be_present
+      expect(json['user']['role']).to eq('guest')
+
+      user = User.last
+      ip_address = IpAddress.find_by(ip_address: IPAddr.new(remote_ip).hton)
+
+      expect(user.role).to eq('guest')
+      expect(ip_address).to be_present
+      expect(UserIp.exists?(user:, ip_address:)).to eq(true)
+    end
+
+    it 'returns 403 and does not create user when current IP address is banned' do
+      IpAddress.create!(
+        ip_address: IPAddr.new(remote_ip).hton,
+        banned_at: Time.current
+      )
+
+      expect {
+        post '/users'
+      }.not_to change(User, :count)
+
+      expect(response).to have_http_status(:forbidden)
+      expect(UserIp.count).to eq(0)
     end
   end
 
-  describe "POST /users/code/renew" do
-    it "returns 401 when not logged in" do
-      sign_out
-      post "/users/code/renew"
-      expect(response).to have_http_status(:unauthorized)
-    end
-  end
+  describe 'POST /users/code/renew' do
+    it 'returns 401 when not logged in' do
+      post '/users/code/renew'
 
-  describe "PUT /users/:id" do
-    let(:user) { create(:user, name: "old-name", role: "guest") }
-
-    it "returns 401 when current_user id mismatch" do
-      sign_in_as(create(:user))
-      put "/users/#{user.id}", params: { name: "new-name" }
       expect(response).to have_http_status(:unauthorized)
     end
 
-    it "returns 400 when name is blank" do
-      sign_in_as(user)
-      put "/users/#{user.id}", params: { name: "   " }
+    it 'returns 403 when current user is banned' do
+      user = create(:user, :banned)
+
+      post '/users/code/renew', headers: auth_headers(user)
+
+      expect(response).to have_http_status(:forbidden)
+    end
+
+    it 'returns 403 when current IP address is banned' do
+      user = create(:user)
+
+      IpAddress.create!(
+        ip_address: IPAddr.new(remote_ip).hton,
+        banned_at: Time.current
+      )
+
+      post '/users/code/renew', headers: auth_headers(user)
+
+      expect(response).to have_http_status(:forbidden)
+    end
+  end
+
+  describe 'PUT /users/:id' do
+    let(:user) { create(:user, name: 'old-name', role: 'guest') }
+
+    it 'returns 401 when current_user id mismatch' do
+      other_user = create(:user)
+
+      put "/users/#{user.id}",
+          params: { name: 'new-name' },
+          headers: auth_headers(other_user)
+
+      expect(response).to have_http_status(:unauthorized)
+    end
+
+    it 'returns 400 when name is blank' do
+      put "/users/#{user.id}",
+          params: { name: '   ' },
+          headers: auth_headers(user)
+
       expect(response).to have_http_status(:bad_request)
     end
 
-    it "updates name and returns 201 with user slice" do
-      sign_in_as(user)
-      put "/users/#{user.id}", params: { name: "new-name" }
+    it 'updates name and returns user slice' do
+      put "/users/#{user.id}",
+          params: { name: 'new-name' },
+          headers: auth_headers(user)
 
       expect(response).to have_http_status(:ok)
-      expect(json["id"]).to eq(user.id)
-      expect(json["name"]).to eq("new-name")
+      expect(json['id']).to eq(user.id)
+      expect(json['name']).to eq('new-name')
 
       user.reload
-      expect(user.name).to eq("new-name")
+      expect(user.name).to eq('new-name')
+    end
+
+    it 'returns 403 when current user is banned' do
+      user.update!(banned_at: Time.current)
+
+      put "/users/#{user.id}",
+          params: { name: 'new-name' },
+          headers: auth_headers(user)
+
+      expect(response).to have_http_status(:forbidden)
+
+      user.reload
+      expect(user.name).to eq('old-name')
+    end
+
+    it 'returns 403 when current IP address is banned' do
+      IpAddress.create!(
+        ip_address: IPAddr.new(remote_ip).hton,
+        banned_at: Time.current
+      )
+
+      put "/users/#{user.id}",
+          params: { name: 'new-name' },
+          headers: auth_headers(user)
+
+      expect(response).to have_http_status(:forbidden)
+
+      user.reload
+      expect(user.name).to eq('old-name')
     end
   end
 
-  describe "POST /users/verify" do
-    it "returns valid:false when code not found" do
-      post "/users/verify", params: { code: "nope" }
+  describe 'POST /users/verify' do
+    it 'returns valid:false when code not found' do
+      post '/users/verify', params: { code: 'nope' }
+
       expect(response).to have_http_status(:ok)
-      expect(json["valid"]).to eq(false)
+      expect(json['valid']).to eq(false)
     end
 
-    it "creates IpAddress and UserIp, and returns valid:true with user slice" do
-      user = create(:user, inheritance_code: SecureRandom.uuid, role: "guest")
+    it 'returns 403 when current IP address is banned' do
+      user = create(:user, inheritance_code: SecureRandom.uuid, role: 'guest')
 
-      # request.remote_ip を固定
-      allow_any_instance_of(ActionDispatch::Request).to receive(:remote_ip).and_return("203.0.113.10")
+      IpAddress.create!(
+        ip_address: IPAddr.new(remote_ip).hton,
+        banned_at: Time.current
+      )
 
       expect {
-        post "/users/verify", params: { code: user.inheritance_code }
+        post '/users/verify', params: { code: user.inheritance_code }
+      }.not_to change(UserIp, :count)
+
+      expect(response).to have_http_status(:forbidden)
+    end
+
+    it 'returns 403 when verified user is banned' do
+      user = create(
+        :user,
+        :banned,
+        inheritance_code: SecureRandom.uuid,
+        role: 'guest'
+      )
+
+      expect {
+        post '/users/verify', params: { code: user.inheritance_code }
+      }.not_to change(UserIp, :count)
+
+      expect(response).to have_http_status(:forbidden)
+    end
+
+    it 'creates IpAddress and UserIp, and returns valid:true with user slice' do
+      user = create(:user, inheritance_code: SecureRandom.uuid, role: 'guest')
+
+      expect {
+        post '/users/verify', params: { code: user.inheritance_code }
       }.to change(UserIp, :count).by(1)
+        .and change(IpAddress, :count).by(1)
 
       expect(response).to have_http_status(:ok)
-      expect(json["valid"]).to eq(true)
-      expect(json["user"]["id"]).to eq(user.id)
-      expect(json["user"]["inheritance_code"]).to eq(user.inheritance_code)
-      expect(json["user"]["role"]).to eq("guest")
+      expect(json['valid']).to eq(true)
+      expect(json['user']['id']).to eq(user.id)
+      expect(json['user']['inheritance_code']).to eq(user.inheritance_code)
+      expect(json['user']['role']).to eq('guest')
 
-      # ついでに IpAddress もできてることを確認（ipの保存形式がバイナリでも count で見れる）
-      expect(IpAddress.count).to be >= 1
+      ip_address = IpAddress.find_by(ip_address: IPAddr.new(remote_ip).hton)
+      expect(ip_address).to be_present
+      expect(UserIp.exists?(user:, ip_address:)).to eq(true)
     end
 
-    it "is idempotent for same user+ip (does not create duplicate UserIp)" do
-      user = create(:user, inheritance_code: SecureRandom.uuid, role: "guest")
-      allow_any_instance_of(ActionDispatch::Request).to receive(:remote_ip).and_return("203.0.113.10")
+    it 'is idempotent for same user and same IP address' do
+      user = create(:user, inheritance_code: SecureRandom.uuid, role: 'guest')
 
-      post "/users/verify", params: { code: user.inheritance_code }
+      post '/users/verify', params: { code: user.inheritance_code }
       expect(response).to have_http_status(:ok)
 
       expect {
-        post "/users/verify", params: { code: user.inheritance_code }
+        post '/users/verify', params: { code: user.inheritance_code }
       }.not_to change(UserIp, :count)
 
       expect(response).to have_http_status(:ok)
-      expect(json["valid"]).to eq(true)
+      expect(json['valid']).to eq(true)
+    end
+
+    it 'creates another UserIp for same user and different IP address' do
+      user = create(:user, inheritance_code: SecureRandom.uuid, role: 'guest')
+
+      post '/users/verify', params: { code: user.inheritance_code }
+      expect(response).to have_http_status(:ok)
+
+      allow_any_instance_of(ActionDispatch::Request)
+        .to receive(:remote_ip)
+        .and_return('203.0.113.11')
+
+      expect {
+        post '/users/verify', params: { code: user.inheritance_code }
+      }.to change(UserIp, :count).by(1)
+
+      expect(response).to have_http_status(:ok)
+      expect(json['valid']).to eq(true)
     end
   end
 
-  describe "GET /users/me" do
-    it "returns 404 when code not found" do
-      get "/users/me", params: { code: "nope" }
+  describe 'GET /users/me' do
+    it 'returns 404 when code not found' do
+      get '/users/me', params: { code: 'nope' }
+
       expect(response).to have_http_status(:not_found)
     end
 
-    it "returns user slice when found" do
-      user = create(:user, inheritance_code: SecureRandom.uuid, name: "me", role: "guest")
-      get "/users/me", params: { code: user.inheritance_code }
+    it 'returns user slice when found' do
+      user = create(:user, inheritance_code: SecureRandom.uuid, name: 'me', role: 'guest')
+
+      get '/users/me', params: { code: user.inheritance_code }
 
       expect(response).to have_http_status(:ok)
-      expect(json["id"]).to eq(user.id)
-      expect(json["name"]).to eq("me")
-      expect(json["inheritance_code"]).to eq(user.inheritance_code)
-      expect(json["role"]).to eq("guest")
+      expect(json['id']).to eq(user.id)
+      expect(json['name']).to eq('me')
+      expect(json['inheritance_code']).to eq(user.inheritance_code)
+      expect(json['role']).to eq('guest')
+    end
+
+    it 'returns 403 when current IP address is banned' do
+      user = create(:user, inheritance_code: SecureRandom.uuid)
+
+      IpAddress.create!(
+        ip_address: IPAddr.new(remote_ip).hton,
+        banned_at: Time.current
+      )
+
+      get '/users/me', params: { code: user.inheritance_code }
+
+      expect(response).to have_http_status(:forbidden)
     end
   end
 end

backend/spec/requests/wiki_assets_spec.rb

@@ -0,0 +1,191 @@
+require 'digest'
+require 'rails_helper'
+require 'stringio'
+
+
+RSpec.describe 'WikiAssets API', type: :request do
+  def dummy_upload(content = 'dummy-image', filename: 'dummy.png', content_type: 'image/png')
+    Rack::Test::UploadedFile.new(StringIO.new(content),
+                                 content_type,
+                                 original_filename: filename)
+  end
+
+  let(:member) { create(:user, :member, name: 'member user') }
+  let(:guest)  { create(:user, name: 'guest user') }
+
+  let!(:tag_name) { TagName.create!(name: 'spec_wiki_asset_page') }
+  let!(:page) do
+    WikiPage.create!(tag_name: tag_name, created_user: member, updated_user: member).tap do |p|
+      Wiki::Commit.content!(page: p, body: 'init', created_user: member, message: 'init')
+    end
+  end
+
+  describe 'GET /wiki/:wiki_page_id/assets' do
+    subject(:do_request) do
+      get "/wiki/#{wiki_page_id}/assets"
+    end
+
+    let(:wiki_page_id) { page.id }
+
+    let!(:asset) do
+      WikiAsset.new(wiki_page: page,
+                    no: 1,
+                    alt_text: 'spec alt',
+                    sha256: Digest::SHA256.digest('asset-1'),
+                    created_by_user: member).tap do |record|
+        record.file.attach(dummy_upload('asset-1'))
+        record.save!
+      end
+    end
+
+    context 'when wiki page exists' do
+      it 'returns assets for the page' do
+        do_request
+
+        expect(response).to have_http_status(:ok)
+        expect(json).to be_an(Array)
+        expect(json.size).to eq(1)
+
+        expect(json.first).to include(
+            'wiki_page_id' => page.id,
+            'no' => 1)
+      end
+
+      it 'does not include assets from other pages' do
+        other_tag_name = TagName.create!(name: 'spec_other_wiki_asset_page')
+        other_page = WikiPage.create!(tag_name: other_tag_name,
+                                      created_user: member,
+                                      updated_user: member)
+        Wiki::Commit.content!(page: other_page, body: 'other', created_user: member, message: 'other')
+
+        WikiAsset.new(wiki_page: other_page,
+                      no: 1,
+                      alt_text: 'other alt',
+                      sha256: Digest::SHA256.digest('asset-2'),
+                      created_by_user: member).tap do |record|
+          record.file.attach(dummy_upload('asset-2', filename: 'other.png'))
+          record.save!
+        end
+
+        do_request
+
+        expect(response).to have_http_status(:ok)
+        expect(json.size).to eq(1)
+        expect(json.first['wiki_page_id']).to eq(page.id)
+      end
+    end
+
+    context 'when wiki page does not exist' do
+      let(:wiki_page_id) { 999_999_999 }
+
+      it 'returns 404' do
+        do_request
+        expect(response).to have_http_status(:not_found)
+      end
+    end
+  end
+
+  describe 'POST /wiki/:wiki_page_id/assets' do
+    subject(:do_request) do
+      post "/wiki/#{wiki_page_id}/assets", params: params
+    end
+
+    let(:wiki_page_id) { page.id }
+    let(:params) do
+      { file: dummy_upload(upload_content),
+        alt_text: 'uploaded alt' }
+    end
+    let(:upload_content) { 'uploaded-image-binary' }
+
+    context 'when not logged in' do
+      it 'returns 401' do
+        sign_out
+        do_request
+        expect(response).to have_http_status(:unauthorized)
+      end
+    end
+
+    context 'when logged in but not member' do
+      it 'returns 403' do
+        sign_in_as(guest)
+        do_request
+        expect(response).to have_http_status(:forbidden)
+      end
+    end
+
+    context 'when wiki page does not exist' do
+      let(:wiki_page_id) { 999_999_999 }
+
+      it 'returns 404' do
+        sign_in_as(member)
+        do_request
+        expect(response).to have_http_status(:not_found)
+      end
+    end
+
+    context 'when file is blank' do
+      let(:params) { { alt_text: 'uploaded alt' } }
+
+      it 'returns 400' do
+        sign_in_as(member)
+        do_request
+        expect(response).to have_http_status(:bad_request)
+      end
+    end
+
+    context 'when success' do
+      before do
+        sign_in_as(member)
+      end
+
+      it 'creates asset, attaches file, increments next_asset_no, and returns json' do
+        expect { do_request }
+          .to change(WikiAsset, :count).by(1)
+
+        expect(response).to have_http_status(:ok)
+
+        asset = WikiAsset.order(:id).last
+        expect(asset.wiki_page_id).to eq(page.id)
+        expect(asset.no).to eq(1)
+        expect(asset.alt_text).to eq('uploaded alt')
+        expect(asset.sha256).to eq(Digest::SHA256.digest(upload_content))
+        expect(asset.created_by_user_id).to eq(member.id)
+        expect(asset.file).to be_attached
+        expect(asset.file.download).to eq(upload_content)
+
+        expect(page.reload.next_asset_no).to eq(2)
+
+        expect(json).to include(
+          'wiki_page_id' => page.id,
+          'no' => 1,
+          'url' => asset.url
+        )
+      end
+
+      it 'uses the next page-local number when assets already exist' do
+        existing = WikiAsset.new(wiki_page: page,
+                                 no: 1,
+                                 alt_text: 'existing alt',
+                                 sha256: Digest::SHA256.digest('existing'),
+                                 created_by_user: member)
+        existing.file.attach(dummy_upload('existing', filename: 'existing.png'))
+        existing.save!
+        page.update!(next_asset_no: 2)
+
+        do_request
+
+        expect(response).to have_http_status(:ok)
+
+        asset = WikiAsset.order(:id).last
+        expect(asset.no).to eq(2)
+        expect(page.reload.next_asset_no).to eq(3)
+
+        expect(json).to include(
+          'wiki_page_id' => page.id,
+          'no' => 2,
+          'url' => asset.url
+        )
+      end
+    end
+  end
+end

backend/spec/requests/wiki_spec.rb

@@ -113,6 +113,7 @@ RSpec.describe 'Wiki API', type: :request do
 
         page_id = json.fetch('id')
         expect(json.fetch('title')).to eq('TestPage')
+        expect(json.fetch('body')).to eq("a\nb\nc")
 
         created_page = WikiPage.find(page_id)
         version = created_page.wiki_versions.order(:version_no).last

backend/spec/support/test_records.rb

@@ -2,14 +2,12 @@ module TestRecords
   def create_member_user!
     User.create!(name: 'spec user',
                  inheritance_code: SecureRandom.hex(16),
-                 role: 'member',
-                 banned: false)
+                 role: 'member')
   end
 
   def create_admin_user!
     User.create!(name: 'spec admin',
                  inheritance_code: SecureRandom.hex(16),
-                 role: 'admin',
-                 banned: false)
+                 role: 'admin')
   end
 end

backend/spec/tasks/nico_sync_spec.rb

@@ -104,7 +104,7 @@ RSpec.describe "nico:sync" do
       url: post.url,
       thumbnail_base: post.thumbnail_base,
       tags: snapshot_tags(post),
-      parent: post.parent,
+      parent_post_ids: post.snapshot_parent_post_ids.join(' '),
       original_created_from: post.original_created_from,
       original_created_before: post.original_created_before,
       created_at: Time.current,

frontend/src/App.tsx

@@ -10,6 +10,7 @@ import RouteBlockerOverlay from '@/components/RouteBlockerOverlay'
 import TopNav from '@/components/TopNav'
 import { Toaster } from '@/components/ui/toaster'
 import { apiPost, isApiError } from '@/lib/api'
+import DeerjikistDetailPage from '@/pages/deerjikists/DeerjikistDetailPage'
 import MaterialBasePage from '@/pages/materials/MaterialBasePage'
 import MaterialDetailPage from '@/pages/materials/MaterialDetailPage'
 import MaterialListPage from '@/pages/materials/MaterialListPage'
@@ -58,6 +59,7 @@ const RouteTransitionWrapper = ({ user, setUser }: {
 	  <Route path="/posts/changes" element={<PostHistoryPage/>}/>
 	  <Route path="/tags" element={<TagListPage/>}/>
 	  <Route path="/tags/:id" element={<TagDetailPage/>}/>
+	  <Route path="/tags/:id/deerjikists" element={<DeerjikistDetailPage/>}/>
 	  <Route path="/tags/nico" element={<NicoTagListPage user={user}/>}/>
 	  <Route path="/tags/changes" element={<TagHistoryPage/>}/>
 	  <Route path="/theatres/:id" element={<TheatreDetailPage/>}/>

frontend/src/components/PostEditForm.tsx

@@ -4,6 +4,7 @@ import PostFormTagsArea from '@/components/PostFormTagsArea'
 import PostOriginalCreatedTimeField from '@/components/PostOriginalCreatedTimeField'
 import Label from '@/components/common/Label'
 import { Button } from '@/components/ui/button'
+import { toast } from '@/components/ui/use-toast'
 import { apiPut } from '@/lib/api'
 
 import type { FC } from 'react'
@@ -35,20 +36,34 @@ export default (({ post, onSave }: Props) => {
       useState<string | null> (post.originalCreatedBefore)
   const [originalCreatedFrom, setOriginalCreatedFrom] =
       useState<string | null> (post.originalCreatedFrom)
-  const [title, setTitle] = useState (post.title)
+  const [parentPostIds, setParentPostIds] =
+      useState ((post.parentPosts ?? []).map (p => p.id).join (' '))
   const [tags, setTags] = useState<string> ('')
+  const [title, setTitle] = useState (post.title)
 
   const handleSubmit = async () => {
+    try
+    {
       const data = await apiPut<Post> (
 	  `/posts/${ post.id }`,
-	{ title, tags, original_created_from: originalCreatedFrom,
+	  { title, tags, parent_post_ids: parentPostIds,
+	    original_created_from: originalCreatedFrom,
 	    original_created_before: originalCreatedBefore },
 	  { headers: { 'Content-Type': 'multipart/form-data' } })
       onSave ({ ...post,
 		title:                  data.title,
 		tags:                   data.tags,
+		parentPosts:            data.parentPosts,
+		childPosts:             data.childPosts,
+		siblingPosts:           data.siblingPosts,
 		originalCreatedFrom:    data.originalCreatedFrom,
 		originalCreatedBefore:  data.originalCreatedBefore } as Post)
+      toast ({ description: '更新しました．' })
+    }
+    catch
+    {
+      toast ({ description: '更新はできなかったよ……' })
+    }
   }
 
   useEffect (() => {
@@ -66,6 +81,16 @@ export default (({ post, onSave }: Props) => {
 		 onChange={ev => setTitle (ev.target.value)}/>
 	</div>
 
+	{/* 親投稿 */}
+	<div>
+	  <Label>親投稿</Label>
+	  <input
+	      type="text"
+	      value={parentPostIds}
+	      onChange={e => setParentPostIds (e.target.value)}
+	      className="w-full border p-2 rounded"/>
+	</div>
+
 	{/* タグ */}
 	<PostFormTagsArea tags={tags} setTags={setTags}/>
 

frontend/src/components/PostList.tsx

@@ -3,6 +3,7 @@ import { useRef } from 'react'
 import { useLocation } from 'react-router-dom'
 
 import PrefetchLink from '@/components/PrefetchLink'
+import { cn } from '@/lib/utils'
 import { useSharedTransitionStore } from '@/stores/sharedTransitionStore'
 
 import type { FC, MouseEvent } from 'react'
@@ -39,8 +40,10 @@ export default (({ posts, onClick }: Props) => {
 		<motion.div
 		    ref={cardRef}
 		    layoutId={layoutId}
-		    className="w-full h-full overflow-hidden rounded-xl shadow
-			       transform-gpu will-change-transform"
+		    className={cn ('w-full h-full overflow-hidden rounded-xl shadow',
+				   'transform-gpu will-change-transform',
+				   (post.childPosts ?? []).length > 0 && 'outline-4 outline-green-500',
+				   (post.parentPosts ?? []).length > 0 && 'ring-4 ring-yellow-500')}
 		    whileHover={{ scale: 1.02 }}
 		    onLayoutAnimationStart={() => {
 		      if (!(cardRef.current))

frontend/src/components/TagLink.tsx

@@ -45,9 +45,9 @@ export default (({ tag,
       <>
 	{(linkFlg && withWiki) && (
 	    <span className="mr-1">
-	      {(tag.materialId != null || tag.hasWiki)
+	      {(tag.materialId != null || tag.hasWiki || tag.hasDeerjikists)
 	       ? (
-		  tag.materialId == null
+		  tag.materialId == null && !(tag.hasDeerjikists)
 		  ? (
 		      <PrefetchLink
 			  to={`/wiki/${ encodeURIComponent (tag.name) }`}
@@ -55,11 +55,19 @@ export default (({ tag,
 			?
 		      </PrefetchLink>)
 		  : (
+		      tag.materialId != null
+		      ? (
 			  <PrefetchLink
 			      to={`/materials/${ tag.materialId }`}
 			      className={linkClass}>
 			    ?
-		      </PrefetchLink>))
+			  </PrefetchLink>)
+		      : (
+			  <PrefetchLink
+			      to={`/tags/${ tag.id }/deerjikists`}
+			      className={linkClass}>
+			    ?
+			  </PrefetchLink>)))
 	       : (
 		  ['character', 'material'].includes (tag.category)
 		  ? (
@@ -70,6 +78,16 @@ export default (({ tag,
 			  title={`${ tag.name } 素材情報が存在しません．`}>
 			!
 		      </PrefetchLink>)
+		  : (
+		      tag.category === 'deerjikist'
+		      ? (
+			  <PrefetchLink
+			      to={`/tags/${ tag.id }/deerjikists`}
+			      className="animate-[wiki-blink_.25s_steps(2,end)_infinite]
+					 dark:animate-[wiki-blink-dark_.25s_steps(2,end)_infinite]"
+			      title={`${ tag.name } に関する情報が存在しません．`}>
+			    !
+			  </PrefetchLink>)
 		      : (
 			  <PrefetchLink
 			      to={`/wiki/${ encodeURIComponent (tag.name) }`}
@@ -77,7 +95,7 @@ export default (({ tag,
 					 dark:animate-[wiki-blink-dark_.25s_steps(2,end)_infinite]"
 			      title={`${ tag.name } Wiki が存在しません．`}>
 			    !
-		      </PrefetchLink>))}
+			  </PrefetchLink>)))}
 	    </span>)}
 	{nestLevel > 0 && (
 	    <span

frontend/src/components/WikiBody.tsx

@@ -1,42 +1,9 @@
-import { useQuery } from '@tanstack/react-query'
-import { useMemo } from 'react'
-import ReactMarkdown from 'react-markdown'
-import remarkGFM from 'remark-gfm'
-
-import PrefetchLink from '@/components/PrefetchLink'
-import { wikiKeys } from '@/lib/queryKeys'
-import remarkWikiAutoLink from '@/lib/remark-wiki-autolink'
-import { fetchWikiPages } from '@/lib/wiki'
+import WikiMarkdown from '@/components/WikiMarkdown'
 
 import type { FC } from 'react'
-import type { Components } from 'react-markdown'
 
 type Props = { title: string
 	       body?: string }
 
-const mdComponents = { a: (({ href, children }) => (
-			      ['/', '.'].some (e => href?.startsWith (e))
-			      ? <PrefetchLink to={href!}>{children}</PrefetchLink>
-			      : (
-				  <a href={href}
-				     target="_blank"
-				     rel="noopener noreferrer">
-				    {children}
-				  </a>))) } as const satisfies Components
-
-
-export default (({ title, body }: Props) => {
-  const { data } = useQuery ({
-      enabled: Boolean (body),
-      queryKey: wikiKeys.index ({ }),
-      queryFn: () => fetchWikiPages ({ }) })
-  const pageNames = (data ?? []).map (page => page.title).sort ((a, b) => b.length - a.length)
-
-  const remarkPlugins = useMemo (
-      () => [() => remarkWikiAutoLink (pageNames), remarkGFM], [pageNames])
-
-  return (
-      <ReactMarkdown components={mdComponents} remarkPlugins={remarkPlugins}>
-	{body || `このページは存在しません。[新規作成してください](/wiki/new?title=${ encodeURIComponent (title) })。`}
-      </ReactMarkdown>)
-}) satisfies FC<Props>
+export default (({ title, body }: Props) =>
+    <WikiMarkdown title={title} body={body ?? ''}/>) satisfies FC<Props>

frontend/src/components/WikiEditForm.tsx

@@ -0,0 +1,76 @@
+import { useEffect, useState } from 'react'
+import MdEditor from 'react-markdown-editor-lite'
+
+import WikiMarkdown from '@/components/WikiMarkdown'
+import Label from '@/components/common/Label'
+import { apiPost } from '@/lib/api'
+
+import type { FC } from 'react'
+
+import type { WikiAsset } from '@/types'
+
+type Props = {
+    title:    string
+    body:     string
+    onSubmit: (title: string, body: string) => void
+    id?:      number | null }
+
+
+export default (({ title: initTitle, body: initBody, onSubmit, id }: Props) => {
+  const forEdit = id != null
+
+  const [title, setTitle] = useState<string> (initTitle)
+  const [body, setBody] = useState<string> (initBody)
+
+  useEffect (() => {
+    setTitle (initTitle)
+    setBody (initBody)
+  }, [initTitle, initBody])
+
+  const handleImageUpload = async (file: File) => {
+    if (!(forEdit))
+      throw new Error ('画像は Wiki 作成前に追加することができません．')
+
+    const formData = new FormData
+    formData.append ('file', file)
+
+    const asset = await apiPost<WikiAsset> (
+	`/wiki/${ id }/assets`,
+	formData,
+	{ headers: { 'Content-Type': 'multipart/form-data' } })
+
+    return asset.url
+  }
+
+  return (
+      <>
+	{/* タイトル */}
+	{/* TODO: タグ補完 */}
+	<div>
+	  <Label>タイトル</Label>
+	  <input
+	      type="text"
+	      value={title}
+	      onChange={e => setTitle (e.target.value)}
+	      className="w-full border p-2 rounded"/>
+	</div>
+
+	{/* 本文 */}
+	<div>
+	  <Label>本文</Label>
+	  <MdEditor
+	      value={body}
+	      style={{ height: '500px' }}
+	      renderHTML={text => <WikiMarkdown body={text} preview/>}
+	      onChange={({ text }) => setBody (text)}
+	      onImageUpload={handleImageUpload}/>
+	</div>
+
+	{/* 送信 */}
+	<button
+	    onClick={() => onSubmit (title, body)}
+	    className="px-4 py-2 bg-blue-600 text-white rounded disabled:bg-gray-400">
+	  {forEdit ? '編輯' : '追加'}
+	</button>
+      </>)
+}) satisfies FC<Props>

frontend/src/components/WikiMarkdown.tsx

@@ -0,0 +1,77 @@
+import { useQuery } from '@tanstack/react-query'
+import { useMemo } from 'react'
+import ReactMarkdown from 'react-markdown'
+import remarkGFM from 'remark-gfm'
+
+import PrefetchLink from '@/components/PrefetchLink'
+import SectionTitle from '@/components/common/SectionTitle'
+import SubsectionTitle from '@/components/common/SubsectionTitle'
+import { wikiKeys } from '@/lib/queryKeys'
+import remarkWikiAutoLink from '@/lib/remark-wiki-autolink'
+import { fetchWikiPages } from '@/lib/wiki'
+
+import type { FC } from 'react'
+import type { Components } from 'react-markdown'
+
+type Props = {
+    title?:   string
+    body:     string
+    preview?: boolean }
+
+
+const makeComponents = (preview = false) => (
+    { h1: ({ children }) => <SectionTitle>{children}</SectionTitle>,
+      h2: ({ children }) => <SubsectionTitle>{children}</SubsectionTitle>,
+      ol: ({ children }) => <ol className="list-decimal pl-6">{children}</ol>,
+      ul: ({ children }) => <ul className="list-disc pl-6">{children}</ul>,
+      a:  ({ href, children }) => {
+	if (!(href))
+	  return <>{children}</>
+
+	if (!(preview) && ['/', '.'].some (e => href.startsWith (e)))
+	  return <PrefetchLink to={href}>{children}</PrefetchLink>
+
+	const ext = /^(?:https?:)?\/\//.test (href)
+
+	return (
+	    <a href={href}
+	       target={ext ? '_blank' : undefined}
+	       rel={ext ? 'noopener noreferrer' : undefined}>
+	      {children}
+	    </a>)
+      },
+      img: (({ src, alt }) => (
+	  <img src={src ?? ''}
+	       alt={alt ?? ''}
+	       className="max-w-[240px] max-h-[320px]"/>)),
+    } as const satisfies Components)
+
+
+export default (({ title, body, preview = false }: Props) => {
+  const { data } = useQuery ({
+      queryKey: wikiKeys.index ({ }),
+      queryFn: () => fetchWikiPages ({ }) })
+
+  const pageNames = useMemo (
+      () => (data ?? []).map ((page) => page.title).sort ((a, b) => b.length - a.length),
+      [data])
+
+  const remarkPlugins = useMemo (
+      () => [() => remarkWikiAutoLink (pageNames), remarkGFM],
+      [pageNames])
+
+  const components = useMemo (
+      () => makeComponents (preview),
+      [preview])
+
+  return (
+      <ReactMarkdown
+	  components={components}
+	  remarkPlugins={remarkPlugins}>
+        {body
+	 || (title
+	     ? ('このページは存在しません。'
+		+`[新規作成してください](/wiki/new?title=${ encodeURIComponent (title) })。`)
+	     : '')}
+      </ReactMarkdown>)
+}) satisfies FC<Props>

frontend/src/consts.ts

@@ -1,4 +1,4 @@
-import type { Category } from 'types'
+import type { Category, Platform } from 'types'
 
 export const LIGHT_COLOUR_SHADE = 800
 export const DARK_COLOUR_SHADE = 300
@@ -31,6 +31,11 @@ export const FETCH_POSTS_ORDER_FIELDS = [
     'updated_at',
     ] as const
 
+export const PLATFORMS = ['nico', 'youtube'] as const
+
+export const PLATFORM_NAMES: Record<Platform, string> =
+    { nico: 'ニコニコ', youtube: 'YouTube' } as const
+
 export const TAG_COLOUR = {
     deerjikist: 'rose',
     meme:       'purple',

frontend/src/lib/queryKeys.ts

@@ -13,7 +13,8 @@ export const tagsKeys = {
     index:        (p: FetchTagsParams) => ['tags', 'index', p] as const,
     show:         (name: string) => ['tags', name] as const,
     changes:      (p: { id?: string; page: number; limit: number }) =>
-		  ['tags', 'changes', p] as const }
+		      ['tags', 'changes', p] as const,
+    deerjikists:  (id: string) => ['tags', 'deerjikists', id] as const }
 
 export const wikiKeys = {
     root:   ['wiki'] as const,

frontend/src/lib/tags.ts

@@ -1,6 +1,6 @@
 import { apiGet } from '@/lib/api'
 
-import type { FetchTagsParams, Tag, TagVersion } from '@/types'
+import type { Deerjikist, FetchTagsParams, Tag, TagVersion } from '@/types'
 
 
 export const fetchTags = async (
@@ -56,3 +56,9 @@ export const fetchTagChanges = async (
     versions: TagVersion[]
     count:    number }> =>
 	await apiGet ('/tags/versions', { params: { ...(id && { id }), page, limit } })
+
+
+export const fetchDeerjikistsByTag = async (
+    id: string,
+): Promise<{ tag: Tag; deerjikists: Deerjikist[]}> =>
+    await apiGet (`/tags/${ id }/deerjikists`)

frontend/src/pages/deerjikists/DeerjikistDetailPage.tsx

@@ -0,0 +1,155 @@
+import { useQuery, useQueryClient } from '@tanstack/react-query'
+import { useEffect, useState } from 'react'
+import { useParams } from 'react-router-dom'
+
+import TagLink from '@/components/TagLink'
+import Label from '@/components/common/Label'
+import PageTitle from '@/components/common/PageTitle'
+import MainArea from '@/components/layout/MainArea'
+import { toast } from '@/components/ui/use-toast'
+import { PLATFORM_NAMES, PLATFORMS } from '@/consts'
+import { apiPut } from '@/lib/api'
+import { tagsKeys } from '@/lib/queryKeys'
+import { fetchDeerjikistsByTag } from '@/lib/tags'
+import { cn } from '@/lib/utils'
+
+import type { FC, FormEvent } from 'react'
+
+import type { Deerjikist, Platform } from '@/types'
+
+
+export default (() => {
+  const { id } = useParams ()
+  const tagId = String (id ?? '')
+  const tagKey = tagsKeys.deerjikists (tagId)
+
+  const { data: qData, isLoading: loading } =
+      useQuery ({ queryKey: tagKey, queryFn: () => fetchDeerjikistsByTag (tagId) })
+  const tag = qData?.tag
+  const deerjikists = qData?.deerjikists ?? []
+
+  const [data, setData] =
+      useState<(Omit<Deerjikist, 'platform'> & { platform: Platform | null })[]> ([])
+  const [disabled, setDisabled] = useState (true)
+
+  const qc = useQueryClient ()
+
+  const handleSubmit = async (e: FormEvent) => {
+    e.preventDefault ()
+
+    try
+    {
+      setDisabled (true)
+
+      setData (await apiPut<Deerjikist[]> (`/tags/${ id }/deerjikists`, data))
+      qc.invalidateQueries ({ queryKey: tagsKeys.root })
+
+      toast ({ description: '更新しました．' })
+    }
+    catch
+    {
+      toast ({ title: '更新失敗', description: '入力内容を確認してください．' })
+    }
+    finally
+    {
+      setDisabled (false)
+    }
+  }
+
+  useEffect (() => {
+    if (!(tag))
+      {
+	setDisabled (true)
+	return
+      }
+
+    setData (deerjikists)
+    setDisabled (false)
+  }, [tag, deerjikists])
+
+  return (
+      <MainArea>
+	{(loading || !(tag)) ? 'Loading...' : (
+	    <div className="max-w-xl">
+	      <PageTitle>
+		<TagLink tag={tag} withWiki={false} withCount={false}/>
+	      </PageTitle>
+
+	      <form onSubmit={handleSubmit} className="my-4 space-y-2">
+		{data.map ((datum, i) => (
+		    <fieldset key={i} className="min-w-0 rounded-lg border border-gray-300
+						 dark:border-gray-700 p-4">
+		      <legend className="px-2 text-sm font-semibold text-gray-700
+					 dark:text-gray-300">
+			<button
+			    type="button"
+			    disabled={disabled}
+			    onClick={() => setData (prev => [...prev.slice (0, i),
+							     ...prev.slice (i + 1)])}>
+			  #{i + 1}
+			</button>
+		      </legend>
+
+		      {/* プラットフォーム */}
+		      <div>
+			<Label>プラットフォーム</Label>
+			<select
+			    className="w-full border p-2 rounded"
+			    disabled={disabled}
+			    value={datum.platform ?? ''}
+			    onChange={e => setData (prev => {
+			      const rtn = [...prev]
+			      rtn[i] = { ...rtn[i],
+					 platform: (e.target.value || null) as Platform | null }
+			      return rtn
+			    })}>
+			  <option value="">&nbsp;</option>
+			  {PLATFORMS.map (p => (
+			      <option key={p} value={p}>
+				{PLATFORM_NAMES[p]}
+			      </option>))}
+			</select>
+		      </div>
+
+		      {/* コード */}
+		      <div>
+			<Label>コード</Label>
+			<input
+			    type="text"
+			    disabled={disabled}
+			    className="w-full border p-2 rounded"
+			    value={datum.code}
+			    onChange={e => setData (prev => {
+			      const rtn = [...prev]
+			      rtn[i] = { ...rtn[i], code: e.target.value }
+			      return rtn
+			    })}/>
+		      </div>
+		    </fieldset>
+		))}
+
+		<div className="py-3">
+		  <button
+		      type="button"
+		      disabled={disabled}
+		      onClick={() => setData (prev => [...prev, { platform: null, code: '' }])}>
+		    +
+		  </button>
+		</div>
+
+		<div className="py-3">
+		  <button
+		      type="submit"
+		      disabled={disabled}
+		      className={cn ('px-4 py-2 rounded',
+				     (disabled
+				      ? 'text-gray-300 bg-gray-500'
+				      : 'text-white bg-blue-500'))}>
+		    更新
+		  </button>
+		</div>
+	      </form>
+	    </div>
+	)}
+      </MainArea>)
+}) satisfies FC

frontend/src/pages/posts/PostDetailPage.tsx

@@ -21,7 +21,7 @@ import ServiceUnavailable from '@/pages/ServiceUnavailable'
 
 import type { FC } from 'react'
 
-import type { NiconicoViewerHandle, User } from '@/types'
+import type { NiconicoViewerHandle, Post, User } from '@/types'
 
 type Props = { user: User | null }
 
@@ -108,6 +108,34 @@ export default (({ user }: Props) => {
 	  {post
 	   ? (
 	      <>
+		{(post.childPosts ?? []).length > 0 && (
+		    <div className="mb-4 bg-green-200 dark:bg-green-800 text-sm p-2 rounded-md">
+		      <p>この投稿には {post.childPosts!.length} 件の子投稿があります．</p>
+		      <PostList posts={[{ ...post, childPosts: [{ } as Post] },
+					...post.childPosts!.map (p => ({
+					    ...p, parentPosts: [{ } as Post] }))]}/>
+		    </div>
+		)}
+		{(post.parentPosts ?? []).map (pp => {
+		  const siblings = post.siblingPosts?.[String (pp.id) as `${ number }`]
+		  if (!(siblings))
+		    return
+
+		  return (
+		      <div
+			  key={pp.id}
+			  className="mb-4 bg-yellow-200 dark:bg-yellow-800 text-sm p-2 rounded-md">
+			<p>
+			  この投稿には 1 件の親投稿{
+			      siblings.length > 1
+			      && `と ${ siblings.length - 1 } 件の姉妹投稿`}があります．
+			</p>
+			<PostList posts={[{ ...pp, childPosts: [{ } as Post] },
+					  ...siblings.map (p => ({
+					      ...p, parentPosts: [{ } as Post] }))]}/>
+		      </div>)
+		})}
+
 		{(post.thumbnail || post.thumbnailBase) && (
 		    <motion.div
 			layoutId={`page-${ id }`}
@@ -146,7 +174,6 @@ export default (({ user }: Props) => {
 					       (prev: any) => newPost ?? prev)
 			      qc.invalidateQueries ({ queryKey: postsKeys.root })
 			      qc.invalidateQueries ({ queryKey: tagsKeys.root })
-			      toast ({ description: '更新しました．' })
 			    }}/>
 		      </Tab>)}
 		</TabGroup>

frontend/src/pages/posts/PostHistoryPage.tsx

@@ -95,6 +95,8 @@ export default (() => {
 		    <col className="w-96"/>
 		    {/* タグ */}
 		    <col className="w-[48rem]"/>
+		    {/* TODO: 親投稿 */}
+		    {/* <col className="w-[48rem]"/> */}
 		    {/* オリジナルの投稿日時 */}
 		    <col className="w-96"/>
 		    {/* 更新日時 */}
@@ -110,6 +112,8 @@ export default (() => {
 		      <th className="p-2 text-left">タイトル</th>
 		      <th className="p-2 text-left">URL</th>
 		      <th className="p-2 text-left">タグ</th>
+		      {/* TODO: 親投稿の履歴 */}
+		      {/* <th className="p-2 text-left">親投稿</th> */}
 		      <th className="p-2 text-left">オリジナルの投稿日時</th>
 		      <th className="p-2 text-left">更新日時</th>
 		      <th className="p-2"/>
@@ -180,6 +184,29 @@ export default (() => {
 					    {tag.name}
 					  </span>))))}
 			    </td>
+			    {/* TODO: 親投稿の履歴 */}
+			    {/* <td className="p-2">
+			      {change.parentPosts.map ((pp, i) => (
+				  pp.type === 'added'
+				  ? (
+				      <ins
+					  key={i}
+					  className="mr-2 text-green-600 dark:text-green-400">
+					{pp.title}
+				      </ins>)
+				  : (
+				      pp.type === 'removed'
+				      ? (
+					  <del
+					      key={i}
+					      className="mr-2 text-red-600 dark:text-red-400">
+					    {pp.title}
+					  </del>)
+				      : (
+					  <span key={i} className="mr-2">
+					    {pp.title}
+					  </span>))))}
+			    </td> */}
 			    <td className="p-2">
 			      {change.versionNo === 1
 			       ? originalCreatedAtString (change.originalCreatedFrom.current,
@@ -225,6 +252,11 @@ export default (() => {
 						  .map (t => t.name)
 						  .filter (t => t.slice (0, 5) !== 'nico:')
 						  .join (' '),
+					    parent_post_ids:
+						(change.parentPosts ?? [])
+						.filter (p => p.type !== 'removed')
+						.map (p => p.id)
+						.join (' '),
 					    original_created_from:
 						change.originalCreatedFrom.current,
 					    original_created_before:

frontend/src/pages/posts/PostNewPage.tsx

@@ -29,6 +29,7 @@ export default (({ user }: Props) => {
 
   const [originalCreatedBefore, setOriginalCreatedBefore] = useState<string | null> (null)
   const [originalCreatedFrom, setOriginalCreatedFrom] = useState<string | null> (null)
+  const [parentPostIds, setParentPostIds] = useState ('')
   const [tags, setTags] = useState ('')
   const [thumbnailAutoFlg, setThumbnailAutoFlg] = useState (true)
   const [thumbnailFile, setThumbnailFile] = useState<File | null> (null)
@@ -46,6 +47,7 @@ export default (({ user }: Props) => {
     formData.append ('title', title)
     formData.append ('url', url)
     formData.append ('tags', tags)
+    formData.append ('parent_post_ids', parentPostIds)
     if (thumbnailFile)
       formData.append ('thumbnail', thumbnailFile)
     if (originalCreatedFrom)
@@ -177,6 +179,16 @@ export default (({ user }: Props) => {
 		     className="mt-2 max-h-48 rounded border"/>)}
 	  </div>
 
+	  {/* 親投稿 */}
+	  <div>
+	    <Label>親投稿</Label>
+	    <input
+		type="text"
+		value={parentPostIds}
+		onChange={e => setParentPostIds (e.target.value)}
+		className="w-full border p-2 rounded"/>
+	  </div>
+
 	  {/* タグ */}
 	  <PostFormTagsArea tags={tags} setTags={setTags}/>
 

frontend/src/pages/wiki/WikiEditPage.tsx

@@ -1,10 +1,9 @@
 import { useQueryClient } from '@tanstack/react-query'
-import MarkdownIt from 'markdown-it'
 import { useEffect, useState } from 'react'
 import { Helmet } from 'react-helmet-async'
-import MdEditor from 'react-markdown-editor-lite'
 import { useParams, useNavigate } from 'react-router-dom'
 
+import WikiEditForm from '@/components/WikiEditForm'
 import MainArea from '@/components/layout/MainArea'
 import { toast } from '@/components/ui/use-toast'
 import { SITE_TITLE } from '@/config'
@@ -18,8 +17,6 @@ import type { FC } from 'react'
 
 import type { User, WikiPage } from '@/types'
 
-const mdParser = new MarkdownIt
-
 type Props = { user: User | null }
 
 
@@ -37,7 +34,7 @@ export default (({ user }: Props) => {
   const [loading, setLoading] = useState (true)
   const [title, setTitle] = useState ('')
 
-  const handleSubmit = async () => {
+  const handleSubmit = async (title: string, body: string) => {
     const formData = new FormData ()
     formData.append ('title', title)
     formData.append ('body', body)
@@ -46,8 +43,6 @@ export default (({ user }: Props) => {
     {
       await apiPut (`/wiki/${ id }`, formData,
 		    { headers: { 'Content-Type': 'multipart/form-data' } })
-      qc.setQueryData (wikiKeys.show (title, { }),
-		       (prev: WikiPage) => ({ ...prev, title, body }))
       qc.invalidateQueries ({ queryKey: wikiKeys.root })
       toast ({ title: '投稿成功!' })
       navigate (`/wiki/${ title }`)
@@ -77,32 +72,11 @@ export default (({ user }: Props) => {
 	  <h1 className="text-2xl font-bold mb-2">Wiki ページを編輯</h1>
 
 	  {loading ? 'Loading...' : (
-	      <>
-		{/* タイトル */}
-		{/* TODO: タグ補完 */}
-		<div>
-		  <label className="block font-semibold mb-1">タイトル</label>
-		  <input type="text"
-			 value={title}
-			 onChange={e => setTitle (e.target.value)}
-			 className="w-full border p-2 rounded"/>
-		</div>
-
-		{/* 本文 */}
-		<div>
-		  <label className="block font-semibold mb-1">本文</label>
-		  <MdEditor value={body}
-			    style={{ height: '500px' }}
-			    renderHTML={text => mdParser.render (text)}
-			    onChange={({ text }) => setBody (text)}/>
-		</div>
-
-		{/* 送信 */}
-		<button onClick={handleSubmit}
-			className="px-4 py-2 bg-blue-600 text-white rounded disabled:bg-gray-400">
-		  編輯
-		</button>
-	      </>)}
+	      <WikiEditForm
+		  title={title}
+		  body={body}
+		  onSubmit={handleSubmit}
+		  id={Number (id)}/>)}
 	</div>
       </MainArea>)
 }) satisfies FC<Props>

frontend/src/pages/wiki/WikiNewPage.tsx

@@ -1,21 +1,19 @@
-import MarkdownIt from 'markdown-it'
-import { useState } from 'react'
+import { useQueryClient } from '@tanstack/react-query'
 import { Helmet } from 'react-helmet-async'
-import MdEditor from 'react-markdown-editor-lite'
 import { useLocation, useNavigate } from 'react-router-dom'
 
+import WikiEditForm from '@/components/WikiEditForm'
 import MainArea from '@/components/layout/MainArea'
 import { toast } from '@/components/ui/use-toast'
 import { SITE_TITLE } from '@/config'
 import { apiPost } from '@/lib/api'
+import { wikiKeys } from '@/lib/queryKeys'
 import Forbidden from '@/pages/Forbidden'
 
 import 'react-markdown-editor-lite/lib/index.css'
 
 import type { User, WikiPage } from '@/types'
 
-const mdParser = new MarkdownIt
-
 type Props = { user: User | null }
 
 
@@ -26,13 +24,12 @@ export default ({ user }: Props) => {
   const location = useLocation ()
   const navigate = useNavigate ()
 
+  const qc = useQueryClient ()
+
   const query = new URLSearchParams (location.search)
   const titleQuery = query.get ('title') ?? ''
 
-  const [title, setTitle] = useState (titleQuery)
-  const [body, setBody] = useState ('')
-
-  const handleSubmit = async () => {
+  const handleSubmit = async (title: string, body: string) => {
     const formData = new FormData
     formData.append ('title', title)
     formData.append ('body', body)
@@ -41,6 +38,7 @@ export default ({ user }: Props) => {
     {
       const data = await apiPost<WikiPage> ('/wiki', formData,
 	  { headers: { 'Content-Type': 'multipart/form-data' } })
+      qc.invalidateQueries ({ queryKey: wikiKeys.root })
       toast ({ title: '投稿成功!' })
       navigate (`/wiki/${ data.title }`)
     }
@@ -58,30 +56,10 @@ export default ({ user }: Props) => {
 	<div className="max-w-xl mx-auto p-4 space-y-4">
 	  <h1 className="text-2xl font-bold mb-2">新規 Wiki ページ</h1>
 
-	  {/* タイトル */}
-	  {/* TODO: タグ補完 */}
-	  <div>
-	    <label className="block font-semibold mb-1">タイトル</label>
-	    <input type="text"
-		   value={title}
-		   onChange={e => setTitle (e.target.value)}
-		   className="w-full border p-2 rounded"/>
-	  </div>
-
-	  {/* 本文 */}
-	  <div>
-	    <label className="block font-semibold mb-1">本文</label>
-	    <MdEditor value={body}
-		      style={{ height: '500px' }}
-		      renderHTML={text => mdParser.render (text)}
-		      onChange={({ text }) => setBody (text)}/>
-	  </div>
-
-	  {/* 送信 */}
-	  <button onClick={handleSubmit}
-		  className="px-4 py-2 bg-blue-600 text-white rounded disabled:bg-gray-400">
-	    追加
-	  </button>
+	  <WikiEditForm
+	      title={titleQuery}
+	      body=""
+	      onSubmit={handleSubmit}/>
 	</div>
       </MainArea>)
 }

frontend/src/types.ts

@@ -1,5 +1,6 @@
 import { CATEGORIES,
 	 FETCH_POSTS_ORDER_FIELDS,
+	 PLATFORMS,
 	 USER_ROLES,
 	 ViewFlagBehavior } from '@/consts'
 
@@ -7,6 +8,8 @@ import type { ReactNode } from 'react'
 
 export type Category = typeof CATEGORIES[number]
 
+export type Deerjikist = { platform: Platform; code: string }
+
 export type FetchPostsOrder = `${ FetchPostsOrderField }:${ 'asc' | 'desc' }`
 
 export type FetchPostsOrderField = typeof FETCH_POSTS_ORDER_FIELDS[number]
@@ -114,6 +117,8 @@ export type NiconicoViewerHandle = {
     showComments: () => void
     hideComments: () => void }
 
+export type Platform = typeof PLATFORMS[number]
+
 export type Post = {
     id:                     number
     url:                    string
@@ -121,6 +126,9 @@ export type Post = {
     thumbnail:              string | null
     thumbnailBase:          string | null
     tags:                   Tag[]
+    parentPosts?:           Post[]
+    childPosts?:            Post[]
+    siblingPosts?:          Record<`${ number }`, Post[]>
     viewed:                 boolean
     related:                Post[]
     originalCreatedFrom:    string | null
@@ -144,7 +152,11 @@ export type PostVersion = {
     url:                    { current: string; prev: string | null }
     thumbnail:              { current: string | null; prev: string | null }
     thumbnailBase:          { current: string | null; prev: string | null }
-    tags:                   { name: string; type: 'context' | 'added' | 'removed' }[]
+    tags:                   { name: string
+			      type: 'context' | 'added' | 'removed' }[]
+    parentPosts:            { id: number
+			      title: string
+			      type: 'context' | 'added' | 'removed' }[]
     originalCreatedFrom:    { current: string | null; prev: string | null }
     originalCreatedBefore:  { current: string | null; prev: string | null }
     createdAt:              string
@@ -171,7 +183,8 @@ export type Tag = {
     createdAt:      string
     updatedAt:      string
     hasWiki:        boolean
-    materialId:     number
+    materialId:     number | null
+    hasDeerjikists: boolean
     children?:      Tag[]
     matchedAlias?:  string | null }
 
@@ -210,6 +223,11 @@ export type User = {
 
 export type ViewFlagBehavior = typeof ViewFlagBehavior[keyof typeof ViewFlagBehavior]
 
+export type WikiAsset = {
+    wikiPageId: number
+    no:         number
+    url:        string }
+
 export type WikiPage = {
     id:             number
     title:          string