[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_106":107,"_108":109},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","Steven_Jin","name","Aguking_Stack","path","main.ts","project",{"_22":46,"_11":12,"_33":47,"_48":-5,"_49":42,"_50":51,"_52":51,"_53":-5,"_54":-5,"_55":56,"_57":25,"_58":32,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_13":45},"permalink","https://www.val.town/x/Steven_Jin/Aguking_Stack/code/main.ts","extension","id","eda30a3b-7346-4d12-8aec-069ec11bd2df","fileId","e746b2fa-a4ff-11f1-8cae-1607ee4eb77e","parentId","branchId","a669a274-1d8e-4aec-b258-6ada72f2e9bb","branchVersion",406,"latest",true,"createdAt",["D",1789537307227],"version",208,"fileType","http","content","// ver.4.7.1 main.ts — 서버 로직. 공통/Monitor는 ./ui.ts, Admin 화면은 ./admin_ui.ts.\n// ui.ts / admin_ui.ts / admin_parts.ts 와 반드시 같은 버전끼리 배포할 것.\n// 4.7.1 수정분: ui.ts 80,000자 제한 대응을 위해 Admin UI를 별도 파일로 분리.\nimport {\n isSafeChannelName,\n isSafeItemName,\n label,\n MONITOR_HTML,\n normalizeChannel,\n toNfc,\n} from \"./ui.ts\";\nimport { renderAdminHtml } from \"./admin_ui.ts\";\n\n// ver. 3 core: security + concurrency + JSON API + dedupe\n\nfunction getAdminAccounts(): Map {\n const rawAccounts = Deno.env.get(\"ADMIN_ACCOUNTS\") || \"\";\n const accounts = new Map();\n\n for (const entry of rawAccounts.split(\",\")) {\n const separatorIndex = entry.indexOf(\":\");\n if (separatorIndex <= 0) continue;\n\n const username = toNfc(entry.slice(0, separatorIndex).trim());\n const password = entry.slice(separatorIndex + 1).trim();\n if (username && password) accounts.set(username, password);\n }\n\n return accounts;\n}\n\nfunction timingSafeEqualText(a: string, b: string): boolean {\n const left = new TextEncoder().encode(a);\n const right = new TextEncoder().encode(b);\n let diff = left.length ^ right.length;\n const length = Math.max(left.length, right.length);\n\n for (let i = 0; i < length; i++) {\n diff |= (left[i] || 0) ^ (right[i] || 0);\n }\n\n return diff === 0;\n}\n\nfunction bytesToHex(buffer: ArrayBuffer): string {\n return Array.from(new Uint8Array(buffer))\n .map((b) => b.toString(16).padStart(2, \"0\"))\n .join(\"\");\n}\n\nasync function sha256Hex(value: string): Promise {\n return bytesToHex(\n await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(value)),\n );\n}\n\nasync function getAuthenticatedAdminUser(req: Request): Promise {\n const accounts = getAdminAccounts();\n if (!accounts.size) return null;\n\n const authHeader = req.headers.get(\"authorization\") || \"\";\n if (!authHeader.startsWith(\"Basic \")) return null;\n\n try {\n // 브라우저는 한글 아이디/비밀번호를 UTF-8로 보내므로 UTF-8로 풀어야 비교가 맞는다.\n const decoded = new TextDecoder().decode(\n Uint8Array.from(\n atob(authHeader.slice(\"Basic \".length)),\n (c) => c.charCodeAt(0),\n ),\n );\n const separatorIndex = decoded.indexOf(\":\");\n if (separatorIndex < 0) return null;\n\n const inputUser = toNfc(decoded.slice(0, separatorIndex).trim());\n const inputPassword = decoded.slice(separatorIndex + 1);\n const stored = accounts.get(inputUser);\n if (!stored) return null;\n\n const valid = stored.startsWith(\"sha256$\")\n ? timingSafeEqualText(\n await sha256Hex(inputPassword),\n stored.slice(\"sha256$\".length),\n )\n : timingSafeEqualText(inputPassword, stored);\n\n return valid ? inputUser : null;\n } catch {\n return null;\n }\n}\n\nasync function checkAuth(req: Request): Promise {\n return (await getAuthenticatedAdminUser(req)) !== null;\n}\n\nconst STACK_API_SECRET = Deno.env.get(\"STACK_API_SECRET\") || \"\";\nconst NIGHTBOT_API_SECRET = Deno.env.get(\"NIGHTBOT_API_SECRET\") ||\n STACK_API_SECRET;\nconst DONATION_API_SECRET = Deno.env.get(\"DONATION_API_SECRET\") ||\n STACK_API_SECRET;\n\nfunction checkSecret(\n req: Request,\n secret: string,\n headerNames: readonly string[],\n allowQueryKey = false,\n): boolean {\n if (!secret) return false;\n for (const name of headerNames) {\n const value = req.headers.get(name) || \"\";\n if (value && timingSafeEqualText(value, secret)) return true;\n }\n if (!allowQueryKey) return false;\n const queryKey = new URL(req.url).searchParams.get(\"key\") || \"\";\n return !!queryKey && timingSafeEqualText(queryKey, secret);\n}\n\nfunction checkStackApiKey(req: Request): boolean {\n // 기존 서버/cron 호환을 위해 ?key= 도 유지한다.\n return checkSecret(req, STACK_API_SECRET, [\"x-stack-key\"], true);\n}\n\nfunction checkNightbotApiKey(req: Request): boolean {\n // Nightbot Custom API 는 query parameter 사용이 일반적이다.\n return checkSecret(req, NIGHTBOT_API_SECRET, [\"x-nightbot-key\"], true);\n}\n\nfunction checkDonationApiKey(req: Request): boolean {\n // 신규 연동은 x-donation-key 사용을 권장한다. x-stack-key 는 기존 연동 호환용.\n return checkSecret(req, DONATION_API_SECRET, [\n \"x-donation-key\",\n \"x-stack-key\",\n ], true);\n}\n\nfunction unauthorizedResponse(): Response {\n return jsonResponse({ ok: false, error: \"인증이 필요합니다.\" }, 401, {\n \"WWW-Authenticate\": 'Basic realm=\"Admin Area\", charset=\"UTF-8\"',\n });\n}\n\nfunction forbiddenResponse(): Response {\n return jsonResponse({ ok: false, error: \"권한이 없습니다.\" }, 403);\n}\n\nfunction jsonResponse(\n body: unknown,\n status = 200,\n extraHeaders: Record = {},\n): Response {\n return new Response(JSON.stringify(body), {\n status,\n headers: {\n \"content-type\": \"application/json; charset=utf-8\",\n \"cache-control\": \"no-store\",\n \"x-content-type-options\": \"nosniff\",\n \"referrer-policy\": \"no-referrer\",\n ...extraHeaders,\n },\n });\n}\n\nfunction textResponse(\n body: string,\n status = 200,\n extraHeaders: Record = {},\n): Response {\n return new Response(body, {\n status,\n headers: {\n \"content-type\": \"text/plain; charset=utf-8\",\n \"cache-control\": \"no-store\",\n \"x-content-type-options\": \"nosniff\",\n \"referrer-policy\": \"no-referrer\",\n ...extraHeaders,\n },\n });\n}\n\nfunction redirectResponse(location: string): Response {\n // 302 를 쓴다. 301 은 브라우저가 오래 캐시해서 나중에 되돌리기 어렵다.\n return new Response(null, {\n status: 302,\n headers: {\n location,\n \"cache-control\": \"no-store\",\n \"referrer-policy\": \"no-referrer\",\n },\n });\n}\n\nconst SERVICE_WORKER_JS =\n `self.addEventListener(\"install\", () => self.skipWaiting());\nself.addEventListener(\"activate\", (e) => e.waitUntil(self.clients.claim()));\nself.addEventListener(\"notificationclick\", (e) => {\n const target = (e.notification.data && e.notification.data.url) || \"/admin\";\n e.notification.close();\n e.waitUntil((async () => {\n const wins = await self.clients.matchAll({ type: \"window\", includeUncontrolled: true });\n for (const w of wins) {\n if (w.url.indexOf(\"/admin\") !== -1) {\n await w.focus();\n if (\"navigate\" in w) return w.navigate(target);\n return w;\n }\n }\n return self.clients.openWindow(target);\n })());\n});\n`;\n\nfunction htmlResponse(html: string): Response {\n return new Response(html, {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n \"cache-control\": \"no-store\",\n \"x-content-type-options\": \"nosniff\",\n \"referrer-policy\": \"no-referrer\",\n },\n });\n}\n\n// Maintenance\n\nconst MAINTENANCE_KEY = \"system_maintenance\";\nconst MAINTENANCE_MESSAGE = \"🚧 스택봇 점검중입니다.\";\n\nasync function getJSONOr(\n blobStore: { getJSON: (k: string) => Promise },\n key: string,\n fallback: T,\n): Promise {\n // 키가 없는 경우에만 fallback 을 쓴다.\n // 저장소 자체 오류는 숨기지 않고 throw 하여 빈 데이터로 덮어쓰는 사고를 막는다.\n const value = await blobStore.getJSON(key);\n return (value as T) ?? fallback;\n}\n\nasync function getMaintenanceMode(\n blob: { getJSON: (k: string) => Promise },\n): Promise {\n const value = await getJSONOr<{ on?: boolean } | null>(\n blob,\n MAINTENANCE_KEY,\n null,\n );\n return value?.on === true;\n}\n\nasync function setMaintenanceMode(\n blob: { setJSON: (k: string, v: unknown) => Promise },\n on: boolean,\n): Promise {\n await blob.setJSON(MAINTENANCE_KEY, { on: !!on });\n}\n\n// Validation / parsing\n\nfunction roundAmount(n: number): number {\n return Math.round(n * 1e6) / 1e6;\n}\n\nfunction parsePositiveAmount(value: unknown): number | null {\n const s = String(value ?? \"\").trim();\n // 저장 정밀도와 동일하게 소수점은 최대 6자리만 허용한다.\n if (!/^\\d+(?:\\.\\d{1,6})?$/.test(s)) return null;\n\n const n = Number(s);\n if (!Number.isFinite(n) || n > 1_000_000_000) return null;\n const rounded = roundAmount(n);\n if (rounded <= 0) return null;\n return rounded;\n}\n\ntype ParsedCommandAmount = {\n item: string;\n amount: number;\n valid: boolean;\n // 수량으로 인식하려던 마지막 토큰 (오류 안내 문구용)\n lastToken: string | null;\n};\n\nfunction endsWithBareNumber(item: string): boolean {\n return /(^|\\s)-?\\d+(?:\\.\\d+)?$/.test(item.trim());\n}\n\nfunction looksLikeMalformedAmountToken(token: string): boolean {\n // 쉼표/부호/점 때문에 숫자처럼 보이지만 수량 규칙에 맞지 않는 마지막 토큰을\n // 항목명으로 잘못 저장하지 않고 명시적인 수량 오류로 돌려보낸다.\n return /^[+-]?[0-9][0-9,._+-]*$/.test(token);\n}\n\nfunction splitItemAndAmount(rest: string[]): ParsedCommandAmount {\n const tokens = rest.map((token) => toNfc(token.trim())).filter(Boolean);\n if (!tokens.length) {\n return { item: \"\", amount: 1, valid: true, lastToken: null };\n }\n\n const last = tokens[tokens.length - 1];\n if (\n tokens.length > 1 && looksLikeMalformedAmountToken(last) &&\n !/^\\d+(?:\\.\\d{1,6})?$/.test(last)\n ) {\n return {\n item: tokens.slice(0, -1).join(\" \"),\n amount: 0,\n valid: false,\n lastToken: last,\n };\n }\n if (tokens.length === 1 || !/^-?(?:\\d+(?:\\.\\d+)?)$/.test(last)) {\n return { item: tokens.join(\" \"), amount: 1, valid: true, lastToken: last };\n }\n\n const item = tokens.slice(0, -1).join(\" \");\n const amount = parsePositiveAmount(last);\n return amount === null\n ? { item, amount: 0, valid: false, lastToken: last }\n : { item, amount, valid: true, lastToken: last };\n}\n\nfunction normalizeItem(raw: unknown): string {\n return toNfc(String(raw ?? \"\").trim());\n}\n\nfunction sanitizeStack(input: unknown): Record {\n const out: Record = Object.create(null);\n if (!input || typeof input !== \"object\" || Array.isArray(input)) return out;\n\n for (\n const [rawItem, rawValue] of Object.entries(\n input as Record,\n )\n ) {\n const item = normalizeItem(rawItem);\n const value = Number(rawValue);\n if (!isSafeItemName(item) || !Number.isFinite(value) || value <= 0) {\n continue;\n }\n out[item] = roundAmount((out[item] || 0) + value);\n }\n return out;\n}\n\n// History: bounded + normalized + exact-duplicate removal\n\nconst MAX_HISTORY_ENTRIES = 1000;\n\ninterface HistoryEntry {\n time: string;\n action: \"추가\" | \"차감\" | \"삭제\" | \"초기화\" | \"공지성공\" | \"공지실패\";\n item?: string;\n source?:\n | \"nightbot\"\n | \"admin\"\n | \"api\"\n | \"youtube-auto\"\n | \"cron\"\n | \"toonation\";\n actor?: string;\n amount?: number;\n count?: number;\n note?: string;\n error?: string;\n}\n\nfunction historyFingerprint(entry: HistoryEntry): string {\n return JSON.stringify([\n entry.time,\n entry.action,\n entry.source || \"\",\n entry.actor || \"\",\n entry.item || \"\",\n entry.amount ?? null,\n entry.count ?? null,\n entry.note || \"\",\n entry.error || \"\",\n ]);\n}\n\nfunction sanitizeHistory(input: unknown): HistoryEntry[] {\n if (!Array.isArray(input)) return [];\n\n const seen = new Set();\n const out: HistoryEntry[] = [];\n\n for (const raw of input) {\n if (!raw || typeof raw !== \"object\") continue;\n const e = raw as Partial;\n if (typeof e.time !== \"string\") continue;\n if (\n ![\"추가\", \"차감\", \"삭제\", \"초기화\", \"공지성공\", \"공지실패\"].includes(\n e.action || \"\",\n )\n ) continue;\n\n const item = e.item === undefined ? undefined : normalizeItem(e.item);\n if (item !== undefined && !isSafeItemName(item)) continue;\n\n const amount = e.amount === undefined ? undefined : Number(e.amount);\n const count = e.count === undefined ? undefined : Number(e.count);\n if (amount !== undefined && (!Number.isFinite(amount) || amount <= 0)) {\n continue;\n }\n if (count !== undefined && (!Number.isFinite(count) || count < 0)) continue;\n\n const clean: HistoryEntry = {\n time: e.time,\n action: e.action as HistoryEntry[\"action\"],\n ...(typeof e.source === \"string\"\n ? { source: e.source as HistoryEntry[\"source\"] }\n : {}),\n ...(typeof e.actor === \"string\" ? { actor: e.actor.slice(0, 100) } : {}),\n ...(item === undefined ? {} : { item }),\n ...(amount === undefined ? {} : { amount: roundAmount(amount) }),\n ...(count === undefined ? {} : { count: roundAmount(count) }),\n ...(typeof e.note === \"string\"\n ? { note: toNfc(e.note).slice(0, 500) }\n : {}),\n ...(typeof e.error === \"string\"\n ? { error: toNfc(e.error).slice(0, 500) }\n : {}),\n };\n\n const fp = historyFingerprint(clean);\n if (seen.has(fp)) continue;\n seen.add(fp);\n out.push(clean);\n }\n\n return out\n .sort((a, b) => new Date(a.time).getTime() - new Date(b.time).getTime())\n .slice(-MAX_HISTORY_ENTRIES);\n}\n\nasync function readHistory(\n blob: { getJSON: (k: string) => Promise },\n channel: string,\n): Promise {\n return sanitizeHistory(await getJSONOr(blob, `history_${channel}`, null));\n}\n\nasync function appendHistory(\n blob: {\n getJSON: (k: string) => Promise;\n setJSON: (k: string, v: unknown) => Promise;\n },\n channel: string,\n entry: HistoryEntry,\n): Promise {\n const history = await readHistory(blob, channel);\n const clean: HistoryEntry = {\n ...entry,\n item: entry.item === undefined ? undefined : normalizeItem(entry.item),\n amount: entry.amount === undefined ? undefined : roundAmount(entry.amount),\n count: entry.count === undefined ? undefined : roundAmount(entry.count),\n note: entry.note === undefined\n ? undefined\n : toNfc(entry.note).slice(0, 500),\n error: entry.error === undefined\n ? undefined\n : toNfc(entry.error).slice(0, 500),\n };\n\n const fp = historyFingerprint(clean);\n if (!history.some((e) => historyFingerprint(e) === fp)) {\n history.push(clean);\n }\n\n await blob.setJSON(`history_${channel}`, sanitizeHistory(history));\n}\n\nfunction formatStack(stack: Record): string {\n const keys = Object.keys(stack);\n if (!keys.length) return \"🤖 현재 스택 없음.\";\n return keys.map((k) => `${label(k)} ${roundAmount(stack[k])}`).join(\", \");\n}\n\n// Unified stack action engine (single source of truth)\n\ntype StackAction = \"추가\" | \"차감\" | \"삭제\" | \"초기화\";\n\nconst STACK_ACTIONS: readonly string[] = [\"추가\", \"차감\", \"삭제\", \"초기화\"];\n\nfunction isStackAction(value: string): value is StackAction {\n return STACK_ACTIONS.includes(value);\n}\n\ntype ActionResult = {\n ok: boolean;\n action?: StackAction;\n channel: string;\n item?: string;\n amount?: number;\n count?: number;\n stack: Record;\n message: string;\n error?: string;\n};\n\nasync function readStack(\n blob: { getJSON: (k: string) => Promise },\n channel: string,\n): Promise> {\n return sanitizeStack(await getJSONOr(blob, `stack_${channel}`, null));\n}\n\nasync function writeStack(\n blob: { setJSON: (k: string, v: unknown) => Promise },\n channel: string,\n stack: Record,\n): Promise {\n await blob.setJSON(`stack_${channel}`, sanitizeStack(stack));\n}\n\nasync function applyStackAction(\n blob: {\n getJSON: (k: string) => Promise;\n setJSON: (k: string, v: unknown) => Promise;\n delete: (k: string) => Promise;\n },\n channel: string,\n action: StackAction,\n rawItem?: unknown,\n rawAmount?: unknown,\n historyMeta: Pick = {},\n): Promise {\n const item = normalizeItem(rawItem);\n const amount = rawAmount === undefined ? 1 : parsePositiveAmount(rawAmount);\n const stack = await readStack(blob, channel);\n\n if (action === \"초기화\") {\n await blob.delete(`stack_${channel}`);\n await appendHistory(blob, channel, {\n time: new Date().toISOString(),\n action: \"초기화\",\n ...historyMeta,\n });\n return {\n ok: true,\n action,\n channel,\n stack: Object.create(null),\n message: \"스택을 초기화했습니다.\",\n };\n }\n\n if (!item) {\n return {\n ok: false,\n channel,\n stack,\n message: \"항목을 입력해주세요.\",\n error: \"INVALID_ITEM\",\n };\n }\n if (!isSafeItemName(item)) {\n return {\n ok: false,\n channel,\n stack,\n message: \"항목 이름은 1~100 자로 입력해주세요.\",\n error: \"INVALID_ITEM\",\n };\n }\n if (amount === null) {\n return {\n ok: false,\n channel,\n item,\n stack,\n message: \"수량은 0 보다 큰 숫자만 입력할 수 있습니다.\",\n error: \"INVALID_AMOUNT\",\n };\n }\n\n if (action === \"추가\") {\n const next = roundAmount((stack[item] || 0) + amount);\n stack[item] = next;\n await writeStack(blob, channel, stack);\n await appendHistory(blob, channel, {\n time: new Date().toISOString(),\n action,\n item,\n amount,\n count: next,\n ...historyMeta,\n });\n return {\n ok: true,\n action,\n channel,\n item,\n amount,\n count: next,\n stack,\n message: `${label(item)} ${next}`,\n };\n }\n\n if (action === \"차감\") {\n if (!(item in stack)) {\n return {\n ok: false,\n action,\n channel,\n item,\n amount,\n stack,\n message: `${label(item)} 항목이 없습니다.`,\n error: \"NOT_FOUND\",\n };\n }\n const next = roundAmount(stack[item] - amount);\n if (next <= 0) {\n delete stack[item];\n await writeStack(blob, channel, stack);\n await appendHistory(blob, channel, {\n time: new Date().toISOString(),\n action,\n item,\n amount,\n count: 0,\n ...historyMeta,\n });\n return {\n ok: true,\n action,\n channel,\n item,\n amount,\n count: 0,\n stack,\n message: `${label(item)} 0 이하가 되어 삭제했습니다.`,\n };\n }\n stack[item] = next;\n await writeStack(blob, channel, stack);\n await appendHistory(blob, channel, {\n time: new Date().toISOString(),\n action,\n item,\n amount,\n count: next,\n ...historyMeta,\n });\n return {\n ok: true,\n action,\n channel,\n item,\n amount,\n count: next,\n stack,\n message: `${label(item)} ${next}`,\n };\n }\n\n if (!(item in stack)) {\n return {\n ok: false,\n action,\n channel,\n item,\n stack,\n message: `${label(item)} 항목이 없습니다.`,\n error: \"NOT_FOUND\",\n };\n }\n delete stack[item];\n await writeStack(blob, channel, stack);\n await appendHistory(blob, channel, {\n time: new Date().toISOString(),\n action,\n item,\n ...historyMeta,\n });\n return {\n ok: true,\n action,\n channel,\n item,\n stack,\n message: `${label(item)} 삭제했습니다.`,\n };\n}\n\n// Concurrency: serialize every mutation by normalized channel.\n\nconst channelLocks = new Map>();\n\nasync function withChannelLock(\n channel: string,\n task: () => Promise,\n): Promise {\n const previous = channelLocks.get(channel) || Promise.resolve();\n let release!: () => void;\n const current = new Promise((resolve) => {\n release = resolve;\n });\n channelLocks.set(channel, current);\n await previous;\n try {\n return await task();\n } finally {\n release();\n if (channelLocks.get(channel) === current) channelLocks.delete(channel);\n }\n}\n\n// JSON API helpers\n\nconst MAX_JSON_BODY_BYTES = 16 * 1024;\n\nasync function readJsonBody(\n req: Request,\n): Promise | null> {\n const contentLength = Number(req.headers.get(\"content-length\") || 0);\n if (Number.isFinite(contentLength) && contentLength > MAX_JSON_BODY_BYTES) {\n return null;\n }\n try {\n const text = await req.text();\n if (new TextEncoder().encode(text).byteLength > MAX_JSON_BODY_BYTES) {\n return null;\n }\n const body = JSON.parse(text);\n return body && typeof body === \"object\" && !Array.isArray(body)\n ? body as Record\n : null;\n } catch {\n return null;\n }\n}\n\nfunction sameOrigin(req: Request, url: URL): boolean {\n const origin = req.headers.get(\"origin\");\n const referer = req.headers.get(\"referer\");\n const valid = (value: string | null) => {\n if (!value) return false;\n try {\n return new URL(value).origin === url.origin;\n } catch {\n return false;\n }\n };\n return valid(origin) || valid(referer);\n}\n\nfunction getValidatedChannel(raw: unknown): string | null {\n const value = toNfc(String(raw ?? \"\").trim());\n if (!value || !isSafeChannelName(value)) return null;\n return normalizeChannel(value);\n}\n\ntype BlobStore = {\n getJSON: (key: string) => Promise;\n setJSON: (key: string, value: unknown) => Promise;\n delete: (key: string) => Promise;\n};\n\n// 매일 06:00 크론(cron.ts)이 보내는 초기화 요청 표시\nconst DAILY_RESET_TRIGGER = \"daily-reset\";\n// 크론 재시도 등으로 같은 초기화가 두 번 기록되지 않도록 이 시간 안의 중복 요청은 건너뛴다.\nconst DAILY_RESET_DEDUPE_MS = 60 * 60 * 1000;\n\n// JSON API: GET /api/stack?ch= (공개 조회)\n// POST /api/stack (관리자 화면 또는 API Key)\nasync function handleStackJsonApi(\n req: Request,\n url: URL,\n blob: BlobStore,\n): Promise {\n if (req.method === \"GET\") {\n const channel = getValidatedChannel(url.searchParams.get(\"ch\"));\n if (!channel) {\n return jsonResponse(\n { ok: false, error: \"유효하지 않은 채널명입니다.\" },\n 400,\n );\n }\n return await withChannelLock(channel, async () => {\n const stack = await readStack(blob, channel);\n return jsonResponse({\n ok: true,\n channel,\n stack,\n items: Object.entries(stack).map(([item, count]) => ({\n item,\n label: label(item),\n count,\n })),\n });\n });\n }\n\n if (req.method !== \"POST\") {\n return jsonResponse({ ok: false, error: \"Method Not Allowed\" }, 405, {\n Allow: \"GET, POST\",\n });\n }\n\n // 관리자(Basic 인증)는 같은 출처(관리자 화면)에서 온 요청만 허용한다.\n // API Key 요청은 서버 간 호출이므로 출처 검사를 하지 않는다.\n const adminUser = await getAuthenticatedAdminUser(req);\n const apiKey = checkStackApiKey(req);\n if (!adminUser && !apiKey) return forbiddenResponse();\n if (!apiKey && !sameOrigin(req, url)) return forbiddenResponse();\n\n const body = await readJsonBody(req);\n if (!body) {\n return jsonResponse({\n ok: false,\n error: \"JSON body가 올바르지 않거나 너무 큽니다.\",\n }, 400);\n }\n\n const channel = getValidatedChannel(body.channel);\n if (!channel) {\n return jsonResponse(\n { ok: false, error: \"유효하지 않은 채널명입니다.\" },\n 400,\n );\n }\n\n const action = toNfc(String(body.action ?? \"\"));\n\n // 기록초기화는 되돌릴 수 없으므로 관리자만 실행할 수 있다.\n if (action === \"기록초기화\") {\n if (!adminUser) return forbiddenResponse();\n return await withChannelLock(channel, async () => {\n await blob.delete(`history_${channel}`);\n return jsonResponse({\n ok: true,\n action,\n channel,\n message: \"기록 (History) 을 초기화했습니다.\",\n });\n });\n }\n\n if (!isStackAction(action)) {\n return jsonResponse(\n { ok: false, error: \"지원하지 않는 action입니다.\" },\n 400,\n );\n }\n\n const isDailyReset = !adminUser && apiKey && action === \"초기화\" &&\n body.trigger === DAILY_RESET_TRIGGER;\n const historyMeta: Pick = adminUser\n ? { source: \"admin\", actor: adminUser }\n : isDailyReset\n ? { source: \"cron\", actor: \"매일 06:00 초기화\" }\n : { source: \"api\", actor: \"API Key\" };\n\n return await withChannelLock(channel, async () => {\n if (isDailyReset) {\n const now = Date.now();\n const history = await readHistory(blob, channel);\n const alreadyDone = history.some((e) =>\n e.action === \"초기화\" &&\n e.source === \"cron\" &&\n now - Date.parse(e.time) < DAILY_RESET_DEDUPE_MS\n );\n if (alreadyDone) {\n return jsonResponse({\n ok: true,\n action,\n channel,\n skipped: true,\n stack: await readStack(blob, channel),\n message: \"최근 1시간 안에 매일 초기화를 이미 실행해서 건너뜁니다.\",\n });\n }\n }\n\n const result = await applyStackAction(\n blob,\n channel,\n action,\n body.item,\n body.amount,\n historyMeta,\n );\n return jsonResponse(result, result.ok ? 200 : 400);\n });\n}\n\nasync function handleHistoryJsonApi(\n req: Request,\n url: URL,\n blob: Pick,\n): Promise {\n if (req.method !== \"GET\") {\n return jsonResponse({ ok: false, error: \"Method Not Allowed\" }, 405, {\n Allow: \"GET\",\n });\n }\n const channel = getValidatedChannel(url.searchParams.get(\"ch\"));\n if (!channel) {\n return jsonResponse(\n { ok: false, error: \"유효하지 않은 채널명입니다.\" },\n 400,\n );\n }\n\n // 후원 기록 자체는 공개하되, 비로그인 방문자에게는 후원자 닉네임을 가린다.\n // 화면에서만 가리면 /api/history 를 직접 열어 볼 수 있으므로 서버에서 바꿔서 내보낸다.\n // 마스킹 문구는 \"투네이션 후원\" 으로 둔다. 후원자가 투네이션에서 익명으로 보낸\n // 경우의 실제 표기(\"투네이션 익명\")와 헷갈리지 않게 하려는 것이다.\n // 투네이션 외 출처(admin 등)의 계정명은 그대로 비공개다.\n const DONOR_MASK = \"투네이션 후원\";\n const isAdmin = !!(await getAuthenticatedAdminUser(req));\n const history = (await readHistory(blob, channel)).map((entry) =>\n isAdmin ? entry : {\n ...entry,\n actor: entry.source === \"toonation\" ? DONOR_MASK : undefined,\n error: undefined,\n }\n );\n\n const payload = { ok: true, channel, history };\n\n // 기록이 바뀌지 않았으면 본문 없이 304로 응답한다.\n // (History 페이지를 자동 새로고침으로 오래 켜 둬도 같은 데이터를 매번 다시 받지 않게)\n const etag = `\"${(await sha256Hex(JSON.stringify(payload))).slice(0, 32)}\"`;\n const ifNoneMatch = (req.headers.get(\"if-none-match\") || \"\").replace(\n /^W\\//,\n \"\",\n );\n if (ifNoneMatch === etag) {\n return new Response(null, {\n status: 304,\n headers: {\n etag,\n vary: \"Authorization\",\n \"cache-control\": \"no-store\",\n \"x-content-type-options\": \"nosniff\",\n \"referrer-policy\": \"no-referrer\",\n },\n });\n }\n return jsonResponse(payload, 200, { etag, vary: \"Authorization\" });\n}\n\nconst DONATION_UNITS: readonly { unit: number; item: string }[] = [\n { unit: 11900, item: \"흡연\" },\n { unit: 12000, item: \"금연\" },\n];\n\nconst DONATION_OPPOSITE: Record = {\n \"흡연\": \"금연\",\n \"금연\": \"흡연\",\n};\n\nconst DONATION_AMBIGUOUS_POLICY: \"hold\" | \"first\" = \"hold\";\n\nconst MAX_DONATION_IDS = 300;\n\ntype DonationSplit = { item: string; count: number }[];\n\nfunction donationTotal(split: DonationSplit): number {\n return split.reduce((sum, s) => sum + s.count, 0);\n}\n\nfunction solveDonation(amount: number): DonationSplit[] {\n const [A, B] = DONATION_UNITS;\n const out: DonationSplit[] = [];\n\n for (let a = 0; a * A.unit <= amount; a++) {\n const rest = amount - a * A.unit;\n if (rest % B.unit !== 0) continue;\n const b = rest / B.unit;\n if (a + b < 1) continue;\n out.push([\n ...(a ? [{ item: A.item, count: a }] : []),\n ...(b ? [{ item: B.item, count: b }] : []),\n ]);\n }\n\n // 한 종류로 떨어지는 조합을 먼저, 그 다음 개수가 적은 조합을 먼저 본다.\n return out.sort((x, y) =>\n (x.length - y.length) || (donationTotal(x) - donationTotal(y))\n );\n}\n\nasync function readDonationIds(\n blob: Pick,\n channel: string,\n): Promise {\n const raw = await getJSONOr(blob, `donation_ids_${channel}`, null);\n return Array.isArray(raw) ? raw.filter((v) => typeof v === \"string\") : [];\n}\n\ntype DonationPending = {\n uid: string;\n amount: number;\n donor: string;\n startedAt: string;\n changes?: DonationChange[];\n error?: string;\n};\n\nasync function donationPendingKey(\n channel: string,\n uid: string,\n): Promise {\n // uid 원문을 Blob key 에 직접 넣지 않고 해시해 특수문자/길이 문제를 피한다.\n return `donation_pending_${channel}_${(await sha256Hex(uid)).slice(0, 32)}`;\n}\n\ntype DonationChange = {\n action: \"추가\" | \"차감\";\n item: string;\n amount: number;\n total: number;\n};\n\nasync function applyDonationPiece(\n blob: BlobStore,\n channel: string,\n item: string,\n count: number,\n historyMeta: Pick,\n): Promise {\n const changes: DonationChange[] = [];\n let rest = count;\n\n const opposite = DONATION_OPPOSITE[item];\n if (opposite) {\n const stack = await readStack(blob, channel);\n const offset = roundAmount(Math.min(stack[opposite] || 0, rest));\n if (offset > 0) {\n const r = await applyStackAction(\n blob,\n channel,\n \"차감\",\n opposite,\n offset,\n historyMeta,\n );\n if (!r.ok) throw new Error(r.message);\n changes.push({\n action: \"차감\",\n item: opposite,\n amount: offset,\n total: r.count ?? 0,\n });\n rest = roundAmount(rest - offset);\n }\n }\n\n if (rest > 0) {\n const r = await applyStackAction(\n blob,\n channel,\n \"추가\",\n item,\n rest,\n historyMeta,\n );\n if (!r.ok) throw new Error(r.message);\n changes.push({ action: \"추가\", item, amount: rest, total: r.count ?? 0 });\n }\n\n return changes;\n}\n\nasync function handleDonationApi(\n req: Request,\n _url: URL,\n blob: BlobStore,\n): Promise {\n if (req.method !== \"POST\") {\n return jsonResponse({ ok: false, error: \"Method Not Allowed\" }, 405, {\n Allow: \"POST\",\n });\n }\n if (!checkDonationApiKey(req)) return forbiddenResponse();\n\n const body = await readJsonBody(req);\n if (!body) {\n return jsonResponse({\n ok: false,\n error: \"JSON body가 올바르지 않거나 너무 큽니다.\",\n }, 400);\n }\n\n const channel = getValidatedChannel(body.channel);\n if (!channel) {\n return jsonResponse(\n { ok: false, error: \"유효하지 않은 채널명입니다.\" },\n 400,\n );\n }\n\n const amount = Number(body.amount);\n if (!Number.isInteger(amount) || amount <= 0 || amount > 100_000_000) {\n return jsonResponse(\n { ok: false, error: \"후원 금액이 올바르지 않습니다.\" },\n 400,\n );\n }\n\n // 점검모드(B): Nightbot 명령만 중단하고 실제 후원 적립은 계속 처리한다.\n const donationId = toNfc(String(body.uid ?? \"\").trim()).slice(0, 100);\n const donor = toNfc(String(body.name ?? \"\").trim()).slice(0, 50);\n\n return await withChannelLock(channel, async () => {\n const seen = donationId ? await readDonationIds(blob, channel) : [];\n\n // 중복 후원 차단\n if (donationId && seen.includes(donationId)) {\n return jsonResponse({\n ok: true,\n duplicated: true,\n channel,\n amount,\n stack: await readStack(blob, channel),\n message: \"이미 처리한 후원입니다.\",\n });\n }\n\n // Blob은 트랜잭션을 지원하지 않으므로, UID가 있는 후원은 처리 시작 마커를 먼저 남긴다.\n // 이전 시도가 중간 실패한 경우 같은 UID를 자동 재적립하지 않고 관리자 확인 상태로 보류한다.\n const pendingKey = donationId\n ? await donationPendingKey(channel, donationId)\n : \"\";\n if (pendingKey) {\n const pending = await getJSONOr(\n blob,\n pendingKey,\n null,\n );\n if (pending) {\n return jsonResponse({\n ok: true,\n matched: false,\n held: true,\n pending: true,\n channel,\n amount,\n changes: pending.changes || [],\n stack: await readStack(blob, channel),\n message:\n \"같은 UID의 이전 후원 처리가 완전히 끝나지 않아 중복 적립 방지를 위해 보류했습니다. 관리자 확인이 필요합니다.\",\n });\n }\n await blob.setJSON(\n pendingKey,\n {\n uid: donationId,\n amount,\n donor,\n startedAt: new Date().toISOString(),\n } satisfies DonationPending,\n );\n }\n\n // 처리가 끝난 뒤에만 \"처리됨\"으로 기록한다.\n // (중간에 실패하면 기록하지 않으므로 같은 uid 로 재시도하면 다시 처리된다)\n const markSeen = async () => {\n if (!donationId) return;\n await blob.setJSON(\n `donation_ids_${channel}`,\n [...seen, donationId].slice(-MAX_DONATION_IDS),\n );\n if (pendingKey) await blob.delete(pendingKey);\n };\n\n const candidates = solveDonation(amount);\n\n if (!candidates.length) {\n await markSeen();\n return jsonResponse({\n ok: true,\n matched: false,\n channel,\n amount,\n stack: await readStack(blob, channel),\n message:\n `${amount}원은 스택 단가 조합에 맞지 않아 적립하지 않았습니다.`,\n });\n }\n\n if (candidates.length > 1 && DONATION_AMBIGUOUS_POLICY === \"hold\") {\n await markSeen();\n return jsonResponse({\n ok: true,\n matched: false,\n held: true,\n channel,\n amount,\n candidates,\n stack: await readStack(blob, channel),\n message:\n `${amount}원은 해석이 여러 가지라 자동 적립하지 않았습니다. 관리자 화면에서 직접 처리해주세요.`,\n });\n }\n\n const historyMeta: Pick = {\n source: \"toonation\",\n actor: donor ? `투네이션 ${donor}` : \"투네이션\",\n };\n\n const changes: DonationChange[] = [];\n try {\n for (const { item, count } of candidates[0]) {\n changes.push(\n ...(await applyDonationPiece(\n blob,\n channel,\n item,\n count,\n historyMeta,\n )),\n );\n }\n } catch (err) {\n // changes 에는 실패 전까지 이미 반영된 변동이 들어 있다.\n // UID가 있으면 pending 마커를 유지하므로 자동 재시도 시 중복 적립하지 않는다.\n const detail = err instanceof Error ? err.message : String(err);\n if (pendingKey) {\n try {\n await blob.setJSON(\n pendingKey,\n {\n uid: donationId,\n amount,\n donor,\n startedAt: new Date().toISOString(),\n changes,\n error: detail,\n } satisfies DonationPending,\n );\n } catch {\n // 원래 오류를 가리지 않는다.\n }\n }\n return jsonResponse({\n ok: false,\n channel,\n amount,\n changes,\n stack: await readStack(blob, channel),\n error: donationId\n ? \"적립 중 오류가 발생해 같은 UID를 자동 재적립하지 않도록 보류했습니다. 관리자 확인이 필요합니다.\"\n : \"적립 중 오류가 발생했습니다. UID가 없어 자동 중복 방지가 불가능합니다.\",\n detail,\n }, 500);\n }\n\n await markSeen();\n\n const stack = await readStack(blob, channel);\n return jsonResponse({\n ok: true,\n matched: true,\n channel,\n amount,\n changes,\n stack,\n message: changes\n .map((c) =>\n c.action === \"추가\"\n ? `${label(c.item)} +${c.amount}`\n : `${label(c.item)} -${c.amount}${c.total === 0 ? \" (삭제)\" : \"\"}`\n )\n .join(\", \") || \"변동 없음\",\n });\n });\n}\n\nconst NIGHTBOT_OAUTH_TOKEN_KEY = \"nightbot_oauth_tokens\";\nconst NIGHTBOT_OAUTH_STATE_PREFIX = \"nightbot_oauth_state_\";\nconst NIGHTBOT_OAUTH_STATE_TTL_MS = 10 * 60 * 1000;\nconst NIGHTBOT_REFRESH_EARLY_MS = 7 * 24 * 60 * 60 * 1000;\nconst NIGHTBOT_ANNOUNCE_PREFIX = \"📢 [공지] \";\nconst NIGHTBOT_MESSAGE_MAX = 400;\n\nconst ANNOUNCEMENT_LOG_KEY = \"nightbot_announcement_logs\";\nconst ANNOUNCEMENT_PRESET_KEY = \"nightbot_announcement_presets\";\nconst ANNOUNCEMENT_SCHEDULE_KEY = \"nightbot_announcement_schedules\";\nconst MAX_ANNOUNCEMENT_LOGS = 100;\nconst MAX_ANNOUNCEMENT_PRESETS = 12;\nconst MAX_ANNOUNCEMENT_SCHEDULES = 100;\nconst MAX_DUE_ANNOUNCEMENTS_PER_RUN = 5;\nconst ANNOUNCEMENT_SENDING_STALE_MS = 5 * 60 * 1000;\nconst MIN_SCHEDULE_LEAD_MS = 10 * 1000;\nconst MAX_SCHEDULE_AHEAD_MS = 180 * 24 * 60 * 60 * 1000;\nconst ANNOUNCEMENT_CRON_SECRET = Deno.env.get(\"ANNOUNCEMENT_CRON_SECRET\") ||\n STACK_API_SECRET;\n\ntype AnnouncementLog = {\n id: string;\n time: string;\n status: \"success\" | \"failure\";\n mode: \"manual\" | \"scheduled\";\n channel: string;\n actor: string;\n message: string;\n scheduleId?: string;\n scheduledAt?: string;\n error?: string;\n};\n\ntype AnnouncementPreset = {\n id: string;\n message: string;\n createdAt: string;\n createdBy: string;\n};\n\ntype AnnouncementSchedule = {\n id: string;\n channel: string;\n message: string;\n scheduledAt: string;\n createdAt: string;\n createdBy: string;\n status: \"pending\" | \"sending\" | \"sent\" | \"failed\" | \"cancelled\";\n sendingAt?: string;\n sentAt?: string;\n error?: string;\n};\n\nfunction normalizeAnnouncementText(value: unknown): string {\n return toNfc(String(value ?? \"\")).replace(/\\s+/g, \" \").trim();\n}\n\nfunction validateAnnouncementMessage(value: unknown): string {\n const text = normalizeAnnouncementText(value);\n if (!text) throw new Error(\"공지 문구를 입력해주세요.\");\n if ((NIGHTBOT_ANNOUNCE_PREFIX + text).length > NIGHTBOT_MESSAGE_MAX) {\n throw new Error(\n `공지 문구가 너무 깁니다. 최종 메시지는 ${NIGHTBOT_MESSAGE_MAX}자 이하여야 합니다.`,\n );\n }\n return text;\n}\n\nfunction sanitizeAnnouncementLogs(input: unknown): AnnouncementLog[] {\n if (!Array.isArray(input)) return [];\n const out: AnnouncementLog[] = [];\n for (const raw of input) {\n if (!raw || typeof raw !== \"object\") continue;\n const r = raw as Partial;\n if (typeof r.id !== \"string\" || typeof r.time !== \"string\") continue;\n if (r.status !== \"success\" && r.status !== \"failure\") continue;\n if (r.mode !== \"manual\" && r.mode !== \"scheduled\") continue;\n const channel = getValidatedChannel(r.channel);\n if (!channel) continue;\n const message = normalizeAnnouncementText(r.message);\n if (!message) continue;\n out.push({\n id: r.id.slice(0, 100),\n time: r.time,\n status: r.status,\n mode: r.mode,\n channel,\n actor: toNfc(String(r.actor ?? \"\")).slice(0, 100),\n message: message.slice(0, 400),\n ...(typeof r.scheduleId === \"string\"\n ? { scheduleId: r.scheduleId.slice(0, 100) }\n : {}),\n ...(typeof r.scheduledAt === \"string\"\n ? { scheduledAt: r.scheduledAt }\n : {}),\n ...(typeof r.error === \"string\"\n ? { error: toNfc(r.error).slice(0, 500) }\n : {}),\n });\n }\n return out\n .sort((a, b) => Date.parse(a.time) - Date.parse(b.time))\n .slice(-MAX_ANNOUNCEMENT_LOGS);\n}\n\nfunction sanitizeAnnouncementPresets(input: unknown): AnnouncementPreset[] {\n if (!Array.isArray(input)) return [];\n const out: AnnouncementPreset[] = [];\n const seen = new Set();\n for (const raw of input) {\n if (!raw || typeof raw !== \"object\") continue;\n const r = raw as Partial;\n if (typeof r.id !== \"string\" || typeof r.createdAt !== \"string\") continue;\n const message = normalizeAnnouncementText(r.message);\n if (\n !message ||\n (NIGHTBOT_ANNOUNCE_PREFIX + message).length > NIGHTBOT_MESSAGE_MAX\n ) continue;\n const key = message.toLowerCase();\n if (seen.has(key)) continue;\n seen.add(key);\n out.push({\n id: r.id.slice(0, 100),\n message,\n createdAt: r.createdAt,\n createdBy: toNfc(String(r.createdBy ?? \"\")).slice(0, 100),\n });\n }\n return out.slice(-MAX_ANNOUNCEMENT_PRESETS);\n}\n\nfunction sanitizeAnnouncementSchedules(input: unknown): AnnouncementSchedule[] {\n if (!Array.isArray(input)) return [];\n const out: AnnouncementSchedule[] = [];\n for (const raw of input) {\n if (!raw || typeof raw !== \"object\") continue;\n const r = raw as Partial;\n if (\n typeof r.id !== \"string\" || typeof r.createdAt !== \"string\" ||\n typeof r.scheduledAt !== \"string\"\n ) continue;\n if (\n ![\"pending\", \"sending\", \"sent\", \"failed\", \"cancelled\"].includes(\n String(r.status),\n )\n ) continue;\n const channel = getValidatedChannel(r.channel);\n if (!channel) continue;\n const message = normalizeAnnouncementText(r.message);\n if (\n !message ||\n (NIGHTBOT_ANNOUNCE_PREFIX + message).length > NIGHTBOT_MESSAGE_MAX\n ) continue;\n if (!Number.isFinite(Date.parse(r.scheduledAt))) continue;\n out.push({\n id: r.id.slice(0, 100),\n channel,\n message,\n scheduledAt: new Date(r.scheduledAt).toISOString(),\n createdAt: r.createdAt,\n createdBy: toNfc(String(r.createdBy ?? \"\")).slice(0, 100),\n status: r.status as AnnouncementSchedule[\"status\"],\n ...(typeof r.sendingAt === \"string\" ? { sendingAt: r.sendingAt } : {}),\n ...(typeof r.sentAt === \"string\" ? { sentAt: r.sentAt } : {}),\n ...(typeof r.error === \"string\"\n ? { error: toNfc(r.error).slice(0, 500) }\n : {}),\n });\n }\n return out\n .sort((a, b) => Date.parse(a.createdAt) - Date.parse(b.createdAt))\n .slice(-MAX_ANNOUNCEMENT_SCHEDULES);\n}\n\nasync function readAnnouncementLogs(\n blob: Pick,\n): Promise {\n return sanitizeAnnouncementLogs(\n await getJSONOr(blob, ANNOUNCEMENT_LOG_KEY, null),\n );\n}\n\nasync function readAnnouncementPresets(\n blob: Pick,\n): Promise {\n return sanitizeAnnouncementPresets(\n await getJSONOr(blob, ANNOUNCEMENT_PRESET_KEY, null),\n );\n}\n\nasync function readAnnouncementSchedules(\n blob: Pick,\n): Promise {\n return sanitizeAnnouncementSchedules(\n await getJSONOr(blob, ANNOUNCEMENT_SCHEDULE_KEY, null),\n );\n}\n\nasync function appendAnnouncementLog(\n blob: Pick,\n log: AnnouncementLog,\n): Promise {\n const logs = await readAnnouncementLogs(blob);\n logs.push(log);\n await blob.setJSON(ANNOUNCEMENT_LOG_KEY, sanitizeAnnouncementLogs(logs));\n}\n\nasync function recordAnnouncementAttempt(\n blob: BlobStore,\n args: {\n channel: string;\n actor: string;\n message: string;\n status: \"success\" | \"failure\";\n mode: \"manual\" | \"scheduled\";\n scheduleId?: string;\n scheduledAt?: string;\n error?: string;\n },\n): Promise {\n const time = new Date().toISOString();\n const error = args.error ? toNfc(args.error).slice(0, 500) : undefined;\n await appendAnnouncementLog(blob, {\n id: crypto.randomUUID(),\n time,\n status: args.status,\n mode: args.mode,\n channel: args.channel,\n actor: args.actor.slice(0, 100),\n message: args.message,\n ...(args.scheduleId ? { scheduleId: args.scheduleId } : {}),\n ...(args.scheduledAt ? { scheduledAt: args.scheduledAt } : {}),\n ...(error ? { error } : {}),\n });\n await appendHistory(blob, args.channel, {\n time,\n action: args.status === \"success\" ? \"공지성공\" : \"공지실패\",\n source: \"admin\",\n actor: args.actor.slice(0, 100),\n note: NIGHTBOT_ANNOUNCE_PREFIX + args.message,\n ...(error ? { error } : {}),\n });\n}\n\ntype NightbotOAuthTokenResponse = {\n access_token?: string;\n refresh_token?: string;\n token_type?: string;\n expires_in?: number;\n scope?: string;\n};\n\ntype NightbotOAuthRecord = {\n accessToken: string;\n refreshToken: string;\n tokenType: string;\n scope: string;\n expiresAt: number;\n updatedAt: string;\n user?: {\n name?: string;\n displayName?: string;\n provider?: string;\n providerId?: string;\n };\n};\n\ntype NightbotOAuthState = {\n createdAt: number;\n channel?: string;\n};\n\nfunction nightbotOAuthConfig(url: URL): {\n clientId: string;\n clientSecret: string;\n redirectUri: string;\n} {\n return {\n clientId: (Deno.env.get(\"NIGHTBOT_CLIENT_ID\") || \"\").trim(),\n clientSecret: (Deno.env.get(\"NIGHTBOT_CLIENT_SECRET\") || \"\").trim(),\n redirectUri:\n (Deno.env.get(\"NIGHTBOT_REDIRECT_URI\") || `${url.origin}/admin`).trim(),\n };\n}\n\nasync function readNightbotOAuthRecord(\n blob: Pick,\n): Promise {\n const raw = await getJSONOr(blob, NIGHTBOT_OAUTH_TOKEN_KEY, null);\n if (!raw || typeof raw !== \"object\" || Array.isArray(raw)) return null;\n const r = raw as Partial;\n if (!r.accessToken || typeof r.accessToken !== \"string\") return null;\n return {\n accessToken: r.accessToken,\n refreshToken: typeof r.refreshToken === \"string\" ? r.refreshToken : \"\",\n tokenType: typeof r.tokenType === \"string\" ? r.tokenType : \"bearer\",\n scope: typeof r.scope === \"string\" ? r.scope : \"\",\n expiresAt: Number.isFinite(Number(r.expiresAt)) ? Number(r.expiresAt) : 0,\n updatedAt: typeof r.updatedAt === \"string\" ? r.updatedAt : \"\",\n ...(r.user && typeof r.user === \"object\" ? { user: r.user } : {}),\n };\n}\n\nasync function requestNightbotOAuthToken(\n params: Record,\n): Promise {\n const res = await fetch(\"https://api.nightbot.tv/oauth2/token\", {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/x-www-form-urlencoded\",\n accept: \"application/json\",\n },\n body: new URLSearchParams(params).toString(),\n });\n const text = await res.text();\n let data: unknown = null;\n try {\n data = text ? JSON.parse(text) : null;\n } catch {\n data = null;\n }\n if (!res.ok || !data || typeof data !== \"object\") {\n const detail = data && typeof data === \"object\" && \"message\" in data\n ? String((data as { message?: unknown }).message || \"\")\n : text;\n throw new Error(detail || `Nightbot OAuth HTTP ${res.status}`);\n }\n return data as NightbotOAuthTokenResponse;\n}\n\nasync function fetchNightbotMe(accessToken: string): Promise<{\n user?: NightbotOAuthRecord[\"user\"];\n scopes: string[];\n}> {\n const res = await fetch(\"https://api.nightbot.tv/1/me\", {\n headers: {\n authorization: `Bearer ${accessToken}`,\n accept: \"application/json\",\n },\n });\n const text = await res.text();\n let data: unknown = null;\n try {\n data = text ? JSON.parse(text) : null;\n } catch {\n data = null;\n }\n if (!res.ok || !data || typeof data !== \"object\") {\n const detail = data && typeof data === \"object\" && \"message\" in data\n ? String((data as { message?: unknown }).message || \"\")\n : text;\n const err = new Error(detail || `Nightbot HTTP ${res.status}`) as Error & {\n status?: number;\n };\n err.status = res.status;\n throw err;\n }\n const obj = data as {\n user?: {\n name?: unknown;\n displayName?: unknown;\n provider?: unknown;\n providerId?: unknown;\n };\n authorization?: { scopes?: unknown };\n };\n const user = obj.user && typeof obj.user === \"object\"\n ? {\n name: typeof obj.user.name === \"string\" ? obj.user.name : undefined,\n displayName: typeof obj.user.displayName === \"string\"\n ? obj.user.displayName\n : undefined,\n provider: typeof obj.user.provider === \"string\"\n ? obj.user.provider\n : undefined,\n providerId: typeof obj.user.providerId === \"string\"\n ? obj.user.providerId\n : undefined,\n }\n : undefined;\n const scopes = Array.isArray(obj.authorization?.scopes)\n ? obj.authorization!.scopes!.filter((v): v is string =>\n typeof v === \"string\"\n )\n : [];\n return { user, scopes };\n}\n\nasync function saveNightbotOAuthTokens(\n blob: Pick,\n token: NightbotOAuthTokenResponse,\n previous: NightbotOAuthRecord | null,\n user?: NightbotOAuthRecord[\"user\"],\n): Promise {\n const accessToken = typeof token.access_token === \"string\"\n ? token.access_token\n : \"\";\n if (!accessToken) {\n throw new Error(\"Nightbot에서 access token을 받지 못했습니다.\");\n }\n const refreshToken = typeof token.refresh_token === \"string\"\n ? token.refresh_token\n : (previous?.refreshToken || \"\");\n const expiresIn = Number(token.expires_in);\n const record: NightbotOAuthRecord = {\n accessToken,\n refreshToken,\n tokenType: typeof token.token_type === \"string\"\n ? token.token_type\n : \"bearer\",\n scope: typeof token.scope === \"string\"\n ? token.scope\n : (previous?.scope || \"\"),\n expiresAt: Date.now() +\n (Number.isFinite(expiresIn) && expiresIn > 0\n ? expiresIn * 1000\n : 30 * 24 * 60 * 60 * 1000),\n updatedAt: new Date().toISOString(),\n ...(user || previous?.user ? { user: user || previous?.user } : {}),\n };\n await blob.setJSON(NIGHTBOT_OAUTH_TOKEN_KEY, record);\n return record;\n}\n\nasync function refreshNightbotOAuthToken(\n blob: Pick,\n url: URL,\n record: NightbotOAuthRecord,\n): Promise {\n if (!record.refreshToken) {\n throw new Error(\n \"Nightbot refresh token이 없습니다. 관리자 화면에서 다시 연결해주세요.\",\n );\n }\n const cfg = nightbotOAuthConfig(url);\n if (!cfg.clientId || !cfg.clientSecret) {\n throw new Error(\n \"NIGHTBOT_CLIENT_ID / NIGHTBOT_CLIENT_SECRET 환경변수가 필요합니다.\",\n );\n }\n const token = await requestNightbotOAuthToken({\n client_id: cfg.clientId,\n client_secret: cfg.clientSecret,\n grant_type: \"refresh_token\",\n redirect_uri: cfg.redirectUri,\n refresh_token: record.refreshToken,\n });\n return await saveNightbotOAuthTokens(blob, token, record);\n}\n\nasync function getNightbotAccessToken(\n blob: Pick,\n url: URL,\n forceRefresh = false,\n): Promise<\n { accessToken: string; managed: boolean; record: NightbotOAuthRecord | null }\n> {\n let record = await readNightbotOAuthRecord(blob);\n if (record) {\n const shouldRefresh = forceRefresh || !record.expiresAt ||\n record.expiresAt - Date.now() <= NIGHTBOT_REFRESH_EARLY_MS;\n if (shouldRefresh) {\n record = await refreshNightbotOAuthToken(blob, url, record);\n }\n return { accessToken: record.accessToken, managed: true, record };\n }\n\n // v4.5 호환: 기존 수동 access token 도 계속 사용할 수 있다.\n const legacy = (Deno.env.get(\"NIGHTBOT_ACCESS_TOKEN\") || \"\").trim();\n if (legacy) return { accessToken: legacy, managed: false, record: null };\n throw new Error(\n \"Nightbot이 연결되어 있지 않습니다. 관리자 화면에서 Nightbot 연결을 먼저 해주세요.\",\n );\n}\n\nasync function verifyNightbotConnection(\n blob: Pick,\n url: URL,\n): Promise<{\n accessToken: string;\n managed: boolean;\n record: NightbotOAuthRecord | null;\n user?: NightbotOAuthRecord[\"user\"];\n scopes: string[];\n}> {\n let auth = await getNightbotAccessToken(blob, url);\n try {\n const me = await fetchNightbotMe(auth.accessToken);\n if (auth.managed && auth.record) {\n const next = { ...auth.record, user: me.user || auth.record.user };\n await blob.setJSON(NIGHTBOT_OAUTH_TOKEN_KEY, next);\n auth = { ...auth, record: next };\n }\n return { ...auth, user: me.user || auth.record?.user, scopes: me.scopes };\n } catch (err) {\n const status = (err as Error & { status?: number }).status;\n if (status !== 401 || !auth.managed || !auth.record?.refreshToken) {\n throw err;\n }\n auth = await getNightbotAccessToken(blob, url, true);\n const me = await fetchNightbotMe(auth.accessToken);\n if (auth.record) {\n const next = { ...auth.record, user: me.user || auth.record.user };\n await blob.setJSON(NIGHTBOT_OAUTH_TOKEN_KEY, next);\n auth = { ...auth, record: next };\n }\n return { ...auth, user: me.user || auth.record?.user, scopes: me.scopes };\n }\n}\n\nasync function handleNightbotOAuthConnect(\n req: Request,\n url: URL,\n blob: BlobStore,\n): Promise {\n const adminUser = await getAuthenticatedAdminUser(req);\n if (!adminUser) return unauthorizedResponse();\n\n const cfg = nightbotOAuthConfig(url);\n if (!cfg.clientId || !cfg.clientSecret) {\n return textResponse(\n \"Val Town 환경변수 NIGHTBOT_CLIENT_ID 와 NIGHTBOT_CLIENT_SECRET 을 먼저 설정해주세요.\",\n 500,\n );\n }\n\n const state = crypto.randomUUID().replace(/-/g, \"\");\n const channel = getValidatedChannel(url.searchParams.get(\"ch\")) || undefined;\n const stateData: NightbotOAuthState = {\n createdAt: Date.now(),\n ...(channel ? { channel } : {}),\n };\n await blob.setJSON(NIGHTBOT_OAUTH_STATE_PREFIX + state, stateData);\n\n const authorize = new URL(\"https://api.nightbot.tv/oauth2/authorize\");\n authorize.searchParams.set(\"response_type\", \"code\");\n authorize.searchParams.set(\"client_id\", cfg.clientId);\n authorize.searchParams.set(\"redirect_uri\", cfg.redirectUri);\n authorize.searchParams.set(\"scope\", \"channel_send\");\n authorize.searchParams.set(\"state\", state);\n return redirectResponse(authorize.toString());\n}\n\nasync function handleNightbotOAuthCallback(\n url: URL,\n blob: BlobStore,\n): Promise {\n const state = (url.searchParams.get(\"state\") || \"\").trim();\n if (!state || !/^[0-9a-f]{32}$/i.test(state)) {\n return textResponse(\n \"Nightbot OAuth state가 올바르지 않습니다. 관리자 화면에서 다시 연결해주세요.\",\n 400,\n );\n }\n const stateKey = NIGHTBOT_OAUTH_STATE_PREFIX + state;\n const pending = await getJSONOr(\n blob,\n stateKey,\n null,\n );\n await blob.delete(stateKey);\n if (\n !pending || !Number.isFinite(pending.createdAt) ||\n Date.now() - pending.createdAt > NIGHTBOT_OAUTH_STATE_TTL_MS\n ) {\n return textResponse(\n \"Nightbot 연결 요청이 만료되었거나 유효하지 않습니다. 관리자 화면에서 다시 연결해주세요.\",\n 400,\n );\n }\n\n const back = new URL(\"/admin\", url.origin);\n if (pending.channel) back.searchParams.set(\"ch\", pending.channel);\n const oauthError = url.searchParams.get(\"error\");\n if (oauthError) {\n back.searchParams.set(\n \"nightbot\",\n oauthError === \"access_denied\" ? \"denied\" : \"error\",\n );\n return redirectResponse(back.pathname + back.search);\n }\n\n const code = (url.searchParams.get(\"code\") || \"\").trim();\n if (!code) {\n back.searchParams.set(\"nightbot\", \"error\");\n return redirectResponse(back.pathname + back.search);\n }\n\n try {\n const cfg = nightbotOAuthConfig(url);\n if (!cfg.clientId || !cfg.clientSecret) {\n throw new Error(\"Nightbot OAuth 환경변수가 설정되지 않았습니다.\");\n }\n const token = await requestNightbotOAuthToken({\n client_id: cfg.clientId,\n client_secret: cfg.clientSecret,\n grant_type: \"authorization_code\",\n redirect_uri: cfg.redirectUri,\n code,\n });\n const accessToken = typeof token.access_token === \"string\"\n ? token.access_token\n : \"\";\n let user: NightbotOAuthRecord[\"user\"] | undefined;\n if (accessToken) {\n try {\n user = (await fetchNightbotMe(accessToken)).user;\n } catch {\n // 사용자 정보 확인 실패만으로 연결 자체를 실패시키지는 않는다.\n }\n }\n await saveNightbotOAuthTokens(blob, token, null, user);\n back.searchParams.set(\"nightbot\", \"connected\");\n } catch {\n back.searchParams.set(\"nightbot\", \"error\");\n }\n return redirectResponse(back.pathname + back.search);\n}\n\nasync function handleNightbotStatus(\n req: Request,\n url: URL,\n blob: BlobStore,\n): Promise {\n const adminUser = await getAuthenticatedAdminUser(req);\n if (!adminUser) return unauthorizedResponse();\n const cfg = nightbotOAuthConfig(url);\n const configured = !!(cfg.clientId && cfg.clientSecret);\n const record = await readNightbotOAuthRecord(blob);\n const legacy = !!(Deno.env.get(\"NIGHTBOT_ACCESS_TOKEN\") || \"\").trim();\n if (!record && !legacy) {\n return jsonResponse({\n ok: true,\n configured,\n connected: false,\n managed: false,\n redirectUri: cfg.redirectUri,\n message: configured\n ? \"Nightbot이 아직 연결되지 않았습니다.\"\n : \"NIGHTBOT_CLIENT_ID / NIGHTBOT_CLIENT_SECRET 환경변수를 설정해주세요.\",\n });\n }\n\n try {\n const verified = await verifyNightbotConnection(blob, url);\n return jsonResponse({\n ok: true,\n configured,\n connected: true,\n managed: verified.managed,\n displayName: verified.user?.displayName || verified.user?.name ||\n \"Nightbot 계정\",\n provider: verified.user?.provider || \"\",\n scopes: verified.scopes,\n expiresAt: verified.record?.expiresAt || null,\n redirectUri: cfg.redirectUri,\n message: verified.managed\n ? \"Nightbot OAuth 연결됨\"\n : \"기존 NIGHTBOT_ACCESS_TOKEN 사용 중\",\n });\n } catch (err) {\n return jsonResponse({\n ok: true,\n configured,\n connected: false,\n managed: !!record,\n needsReconnect: true,\n redirectUri: cfg.redirectUri,\n message: err instanceof Error ? err.message : String(err),\n });\n }\n}\n\nasync function handleNightbotDisconnect(\n req: Request,\n url: URL,\n blob: BlobStore,\n): Promise {\n const adminUser = await getAuthenticatedAdminUser(req);\n if (!adminUser) return unauthorizedResponse();\n if (!sameOrigin(req, url)) return forbiddenResponse();\n const record = await readNightbotOAuthRecord(blob);\n if (record) {\n const token = record.refreshToken || record.accessToken;\n if (token) {\n try {\n await fetch(\"https://api.nightbot.tv/oauth2/token/revoke\", {\n method: \"POST\",\n headers: { \"content-type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({ token }).toString(),\n });\n } catch {\n // 로컬 연결 해제는 계속 진행한다.\n }\n }\n await blob.delete(NIGHTBOT_OAUTH_TOKEN_KEY);\n }\n return jsonResponse({\n ok: true,\n message: (Deno.env.get(\"NIGHTBOT_ACCESS_TOKEN\") || \"\").trim()\n ? \"OAuth 연결을 해제했습니다. 기존 NIGHTBOT_ACCESS_TOKEN 환경변수가 있으면 그것은 별도로 삭제해야 합니다.\"\n : \"Nightbot 연결을 해제했습니다.\",\n });\n}\n\nasync function sendNightbotAnnouncement(\n blob: BlobStore,\n url: URL,\n message: string,\n): Promise {\n const text = validateAnnouncementMessage(message);\n const finalMessage = NIGHTBOT_ANNOUNCE_PREFIX + text;\n\n let auth = await getNightbotAccessToken(blob, url);\n const doSend = (accessToken: string) =>\n fetch(\"https://api.nightbot.tv/1/channel/send\", {\n method: \"POST\",\n headers: {\n authorization: `Bearer ${accessToken}`,\n \"content-type\": \"application/json\",\n accept: \"application/json\",\n },\n body: JSON.stringify({ message: finalMessage }),\n });\n\n let res = await doSend(auth.accessToken);\n if (res.status === 401 && auth.managed && auth.record?.refreshToken) {\n auth = await getNightbotAccessToken(blob, url, true);\n res = await doSend(auth.accessToken);\n }\n\n const textBody = await res.text();\n let data: unknown = null;\n try {\n data = textBody ? JSON.parse(textBody) : null;\n } catch {\n data = null;\n }\n if (!res.ok) {\n const detail = data && typeof data === \"object\" && \"message\" in data\n ? String((data as { message?: unknown }).message || \"\")\n : textBody;\n if (res.status === 429) {\n throw new Error(\n \"Nightbot 전송 제한(5초당 1회)에 걸렸습니다. 잠시 후 다시 보내주세요.\",\n );\n }\n if (res.status === 401) {\n throw new Error(\n \"Nightbot 인증이 만료되었습니다. 관리자 화면에서 Nightbot을 다시 연결해주세요.\",\n );\n }\n throw new Error(detail || `Nightbot HTTP ${res.status}`);\n }\n return finalMessage;\n}\n\nasync function handleAdminAnnouncement(\n req: Request,\n url: URL,\n blob: BlobStore,\n): Promise {\n if (req.method !== \"POST\") {\n return jsonResponse({ ok: false, error: \"Method Not Allowed\" }, 405, {\n Allow: \"POST\",\n });\n }\n const adminUser = await getAuthenticatedAdminUser(req);\n if (!adminUser) return unauthorizedResponse();\n if (!sameOrigin(req, url)) return forbiddenResponse();\n\n const body = await readJsonBody(req);\n if (!body) {\n return jsonResponse(\n { ok: false, error: \"올바른 JSON body가 필요합니다.\" },\n 400,\n );\n }\n const channel = getValidatedChannel(body.channel);\n if (!channel) {\n return jsonResponse(\n { ok: false, error: \"유효하지 않은 채널명입니다.\" },\n 400,\n );\n }\n\n let message = \"\";\n try {\n message = validateAnnouncementMessage(body.message);\n } catch (err) {\n return jsonResponse({\n ok: false,\n error: err instanceof Error ? err.message : String(err),\n }, 400);\n }\n\n try {\n const sent = await sendNightbotAnnouncement(blob, url, message);\n let logWarning = \"\";\n try {\n await recordAnnouncementAttempt(blob, {\n channel,\n actor: adminUser,\n message,\n status: \"success\",\n mode: \"manual\",\n });\n } catch (logErr) {\n logWarning = logErr instanceof Error ? logErr.message : String(logErr);\n }\n return jsonResponse({\n ok: true,\n message: \"Nightbot으로 공지를 전송했습니다.\",\n sent,\n actor: adminUser,\n ...(logWarning\n ? {\n logWarning:\n `전송은 성공했지만 기록 저장에 실패했습니다: ${logWarning}`,\n }\n : {}),\n });\n } catch (err) {\n const error = err instanceof Error ? err.message : String(err);\n try {\n await recordAnnouncementAttempt(blob, {\n channel,\n actor: adminUser,\n message,\n status: \"failure\",\n mode: \"manual\",\n error,\n });\n } catch {\n // 실제 Nightbot 오류를 가리지 않도록 기록 실패는 여기서 무시한다.\n }\n return jsonResponse({ ok: false, error }, 502);\n }\n}\n\nasync function handleAnnouncementAdminData(\n req: Request,\n url: URL,\n blob: BlobStore,\n): Promise {\n if (req.method !== \"GET\") {\n return jsonResponse({ ok: false, error: \"Method Not Allowed\" }, 405, {\n Allow: \"GET\",\n });\n }\n const adminUser = await getAuthenticatedAdminUser(req);\n if (!adminUser) return unauthorizedResponse();\n const requestedChannel = url.searchParams.get(\"ch\");\n const channel = requestedChannel\n ? getValidatedChannel(requestedChannel)\n : null;\n if (requestedChannel && !channel) {\n return jsonResponse(\n { ok: false, error: \"유효하지 않은 채널명입니다.\" },\n 400,\n );\n }\n\n const [presets, schedules, logs] = await Promise.all([\n readAnnouncementPresets(blob),\n readAnnouncementSchedules(blob),\n readAnnouncementLogs(blob),\n ]);\n const channelSchedules = channel\n ? schedules.filter((s) => s.channel === channel)\n : schedules;\n const channelLogs = channel\n ? logs.filter((l) => l.channel === channel)\n : logs;\n return jsonResponse({\n ok: true,\n presets: presets.slice().reverse(),\n schedules: channelSchedules.slice().reverse().slice(0, 30),\n logs: channelLogs.slice().reverse().slice(0, 20),\n currentAdmin: adminUser,\n });\n}\n\nasync function handleAnnouncementPreset(\n req: Request,\n url: URL,\n blob: BlobStore,\n): Promise {\n if (req.method !== \"POST\") {\n return jsonResponse({ ok: false, error: \"Method Not Allowed\" }, 405, {\n Allow: \"POST\",\n });\n }\n const adminUser = await getAuthenticatedAdminUser(req);\n if (!adminUser) return unauthorizedResponse();\n if (!sameOrigin(req, url)) return forbiddenResponse();\n const body = await readJsonBody(req);\n if (!body) {\n return jsonResponse(\n { ok: false, error: \"올바른 JSON body가 필요합니다.\" },\n 400,\n );\n }\n const action = String(body.action ?? \"\");\n const presets = await readAnnouncementPresets(blob);\n\n if (action === \"add\") {\n let message = \"\";\n try {\n message = validateAnnouncementMessage(body.message);\n } catch (err) {\n return jsonResponse({\n ok: false,\n error: err instanceof Error ? err.message : String(err),\n }, 400);\n }\n if (\n presets.some((p) => p.message.toLowerCase() === message.toLowerCase())\n ) {\n return jsonResponse({\n ok: false,\n error: \"이미 같은 문구가 프리셋에 있습니다.\",\n }, 409);\n }\n presets.push({\n id: crypto.randomUUID(),\n message,\n createdAt: new Date().toISOString(),\n createdBy: adminUser,\n });\n await blob.setJSON(\n ANNOUNCEMENT_PRESET_KEY,\n sanitizeAnnouncementPresets(presets),\n );\n return jsonResponse({ ok: true, message: \"프리셋에 저장했습니다.\" });\n }\n\n if (action === \"delete\") {\n const id = String(body.id ?? \"\");\n const next = presets.filter((p) => p.id !== id);\n if (next.length === presets.length) {\n return jsonResponse(\n { ok: false, error: \"프리셋을 찾지 못했습니다.\" },\n 404,\n );\n }\n await blob.setJSON(ANNOUNCEMENT_PRESET_KEY, next);\n return jsonResponse({ ok: true, message: \"프리셋을 삭제했습니다.\" });\n }\n\n return jsonResponse(\n { ok: false, error: \"지원하지 않는 프리셋 작업입니다.\" },\n 400,\n );\n}\n\nasync function handleAnnouncementSchedule(\n req: Request,\n url: URL,\n blob: BlobStore,\n): Promise {\n if (req.method !== \"POST\") {\n return jsonResponse({ ok: false, error: \"Method Not Allowed\" }, 405, {\n Allow: \"POST\",\n });\n }\n const adminUser = await getAuthenticatedAdminUser(req);\n if (!adminUser) return unauthorizedResponse();\n if (!sameOrigin(req, url)) return forbiddenResponse();\n const body = await readJsonBody(req);\n if (!body) {\n return jsonResponse(\n { ok: false, error: \"올바른 JSON body가 필요합니다.\" },\n 400,\n );\n }\n const action = String(body.action ?? \"create\");\n const schedules = await readAnnouncementSchedules(blob);\n\n if (action === \"create\") {\n const channel = getValidatedChannel(body.channel);\n if (!channel) {\n return jsonResponse(\n { ok: false, error: \"유효하지 않은 채널명입니다.\" },\n 400,\n );\n }\n let message = \"\";\n try {\n message = validateAnnouncementMessage(body.message);\n } catch (err) {\n return jsonResponse({\n ok: false,\n error: err instanceof Error ? err.message : String(err),\n }, 400);\n }\n const scheduledMs = Date.parse(String(body.scheduledAt ?? \"\"));\n const now = Date.now();\n if (!Number.isFinite(scheduledMs)) {\n return jsonResponse({\n ok: false,\n error: \"예약 시간을 올바르게 입력해주세요.\",\n }, 400);\n }\n if (scheduledMs < now + MIN_SCHEDULE_LEAD_MS) {\n return jsonResponse({\n ok: false,\n error: \"예약 시간은 현재보다 최소 10초 뒤여야 합니다.\",\n }, 400);\n }\n if (scheduledMs > now + MAX_SCHEDULE_AHEAD_MS) {\n return jsonResponse({\n ok: false,\n error: \"예약은 최대 180일 뒤까지 설정할 수 있습니다.\",\n }, 400);\n }\n const schedule: AnnouncementSchedule = {\n id: crypto.randomUUID(),\n channel,\n message,\n scheduledAt: new Date(scheduledMs).toISOString(),\n createdAt: new Date().toISOString(),\n createdBy: adminUser,\n status: \"pending\",\n };\n schedules.push(schedule);\n await blob.setJSON(\n ANNOUNCEMENT_SCHEDULE_KEY,\n sanitizeAnnouncementSchedules(schedules),\n );\n return jsonResponse({\n ok: true,\n message: \"공지를 예약했습니다.\",\n schedule,\n });\n }\n\n if (action === \"cancel\") {\n const id = String(body.id ?? \"\");\n const target = schedules.find((s) => s.id === id);\n if (!target) {\n return jsonResponse({ ok: false, error: \"예약을 찾지 못했습니다.\" }, 404);\n }\n if (target.status !== \"pending\") {\n return jsonResponse({\n ok: false,\n error: \"대기 중인 예약만 취소할 수 있습니다.\",\n }, 409);\n }\n target.status = \"cancelled\";\n target.error = `관리자 ${adminUser} 취소`;\n await blob.setJSON(\n ANNOUNCEMENT_SCHEDULE_KEY,\n sanitizeAnnouncementSchedules(schedules),\n );\n return jsonResponse({ ok: true, message: \"예약을 취소했습니다.\" });\n }\n\n return jsonResponse(\n { ok: false, error: \"지원하지 않는 예약 작업입니다.\" },\n 400,\n );\n}\n\nlet announcementRunPromise: Promise = Promise.resolve();\n\nasync function withAnnouncementRunLock(task: () => Promise): Promise {\n const previous = announcementRunPromise;\n let release!: () => void;\n announcementRunPromise = new Promise((resolve) => {\n release = resolve;\n });\n await previous;\n try {\n return await task();\n } finally {\n release();\n }\n}\n\nasync function processDueAnnouncements(\n blob: BlobStore,\n url: URL,\n): Promise<{ processed: number; sent: number; failed: number }> {\n return await withAnnouncementRunLock(async () => {\n const schedules = await readAnnouncementSchedules(blob);\n const logs = await readAnnouncementLogs(blob);\n const now = Date.now();\n const due = schedules\n .filter((s) => {\n if (s.status === \"pending\") return Date.parse(s.scheduledAt) <= now;\n if (s.status !== \"sending\" || !s.sendingAt) return false;\n return now - Date.parse(s.sendingAt) >= ANNOUNCEMENT_SENDING_STALE_MS;\n })\n .sort((a, b) => Date.parse(a.scheduledAt) - Date.parse(b.scheduledAt))\n .slice(0, MAX_DUE_ANNOUNCEMENTS_PER_RUN);\n\n let sent = 0;\n let failed = 0;\n for (let i = 0; i < due.length; i++) {\n const target = schedules.find((s) => s.id === due[i].id);\n if (!target) continue;\n const alreadySent = logs.some((log) =>\n log.scheduleId === target.id && log.status === \"success\"\n );\n if (alreadySent) {\n target.status = \"sent\";\n target.sentAt = target.sentAt || new Date().toISOString();\n target.sendingAt = undefined;\n target.error = undefined;\n await blob.setJSON(\n ANNOUNCEMENT_SCHEDULE_KEY,\n sanitizeAnnouncementSchedules(schedules),\n );\n continue;\n }\n target.status = \"sending\";\n target.sendingAt = new Date().toISOString();\n target.error = undefined;\n await blob.setJSON(\n ANNOUNCEMENT_SCHEDULE_KEY,\n sanitizeAnnouncementSchedules(schedules),\n );\n\n try {\n await sendNightbotAnnouncement(blob, url, target.message);\n target.status = \"sent\";\n target.sentAt = new Date().toISOString();\n target.sendingAt = undefined;\n sent++;\n try {\n await recordAnnouncementAttempt(blob, {\n channel: target.channel,\n actor: target.createdBy,\n message: target.message,\n status: \"success\",\n mode: \"scheduled\",\n scheduleId: target.id,\n scheduledAt: target.scheduledAt,\n });\n } catch {\n // 전송 성공을 되돌릴 수 없으므로 로그 저장 실패로 재전송하지 않는다.\n }\n } catch (err) {\n const error = err instanceof Error ? err.message : String(err);\n target.status = \"failed\";\n target.sentAt = new Date().toISOString();\n target.sendingAt = undefined;\n target.error = error.slice(0, 500);\n failed++;\n try {\n await recordAnnouncementAttempt(blob, {\n channel: target.channel,\n actor: target.createdBy,\n message: target.message,\n status: \"failure\",\n mode: \"scheduled\",\n scheduleId: target.id,\n scheduledAt: target.scheduledAt,\n error,\n });\n } catch {\n // 원래 전송 오류를 보존한다.\n }\n }\n await blob.setJSON(\n ANNOUNCEMENT_SCHEDULE_KEY,\n sanitizeAnnouncementSchedules(schedules),\n );\n if (i < due.length - 1) {\n await new Promise((resolve) => setTimeout(resolve, 5200));\n }\n }\n return { processed: due.length, sent, failed };\n });\n}\n\nasync function handleAnnouncementRunDue(\n req: Request,\n url: URL,\n blob: BlobStore,\n): Promise {\n if (req.method !== \"POST\") {\n return jsonResponse({ ok: false, error: \"Method Not Allowed\" }, 405, {\n Allow: \"POST\",\n });\n }\n const adminUser = await getAuthenticatedAdminUser(req);\n const cronKey = checkSecret(req, ANNOUNCEMENT_CRON_SECRET, [\n \"x-announcement-key\",\n ], true);\n if (!adminUser && !cronKey) return forbiddenResponse();\n if (adminUser && !cronKey && !sameOrigin(req, url)) {\n return forbiddenResponse();\n }\n\n try {\n const result = await processDueAnnouncements(blob, url);\n return jsonResponse({ ok: true, ...result });\n } catch (err) {\n return jsonResponse({\n ok: false,\n error: err instanceof Error ? err.message : String(err),\n }, 500);\n }\n}\n\n// 나이트봇 텍스트 API: /?ch=채널&q=명령&key=NIGHTBOT_API_SECRET\n// - q가 없으면 현재 스택을 보여준다. (인증 불필요)\n// - 명령은 API Key로만 실행한다. 관리자 화면은 /api/stack(POST)을 쓴다.\nasync function handleNightbotRequest(\n req: Request,\n url: URL,\n blob: BlobStore,\n): Promise {\n const requestedQuery = toNfc((url.searchParams.get(\"q\") || \"\").trim());\n const channel = getValidatedChannel(url.searchParams.get(\"ch\"));\n\n if (!channel) return textResponse(\"채널명을 입력해주세요.\", 200);\n if (requestedQuery && !checkNightbotApiKey(req)) return forbiddenResponse();\n if (await getMaintenanceMode(blob)) {\n return textResponse(MAINTENANCE_MESSAGE, 200);\n }\n\n const historyMeta: Pick = {\n source: \"nightbot\",\n actor: \"nightbot\",\n };\n\n return await withChannelLock(channel, async () => {\n if (!requestedQuery) {\n return textResponse(formatStack(await readStack(blob, channel)));\n }\n\n const parts = requestedQuery.split(/\\s+/);\n const command = parts[0];\n\n if (command === \"기록초기화\") {\n return textResponse(\"기록초기화는 관리자 화면에서만 할 수 있습니다.\");\n }\n\n if (command === \"추가\" || command === \"차감\" || command === \"빼기\") {\n const parsed = splitItemAndAmount(parts.slice(1));\n if (!parsed.item) {\n return textResponse(\n command === \"추가\"\n ? \"사용법 : !스택 추가 [항목] [숫자 (생략가능, 소수 가능)]\"\n : \"사용법 : !스택 차감 (빼기) [항목] [숫자 (생략가능, 소수 가능)]\",\n );\n }\n if (!parsed.valid) {\n return textResponse(\n `수량은 0 보다 큰 숫자만 입력할 수 있습니다. (인식된 수량 토큰: \"${\n parsed.lastToken ?? \"\"\n }\")`,\n );\n }\n if (command === \"추가\" && endsWithBareNumber(parsed.item)) {\n return textResponse(\n `항목 이름(\"${parsed.item}\") 끝에 숫자가 포함되어 있어 추가하지 않았습니다.`,\n );\n }\n\n const result = await applyStackAction(\n blob,\n channel,\n command === \"추가\" ? \"추가\" : \"차감\",\n parsed.item,\n parsed.amount,\n historyMeta,\n );\n return textResponse(result.message, 200);\n }\n\n if (command === \"삭제\") {\n const result = await applyStackAction(\n blob,\n channel,\n \"삭제\",\n parts.slice(1).join(\" \"),\n undefined,\n historyMeta,\n );\n return textResponse(result.message, 200);\n }\n\n if (command === \"초기화\") {\n const result = await applyStackAction(\n blob,\n channel,\n \"초기화\",\n undefined,\n undefined,\n historyMeta,\n );\n return textResponse(result.message, 200);\n }\n\n return textResponse(\n \"알 수 없는 명령입니다. (추가/차감/삭제/초기화)\",\n 200,\n );\n });\n}\n\n// Main (HTTP)\n\nexport default async function (req: Request): Promise {\n const { blob } = await import(\"https://esm.town/v/std/blob\");\n const url = new URL(req.url);\n\n // /admin 은 기록 조회까지 공개하고, 관리 패널은 로그인한 관리자에게만 내려준다.\n if (url.pathname === \"/admin\") {\n // Nightbot OAuth 의 기본 Redirect URI 도 /admin 이다.\n // 브라우저 JS가 query string 을 정리하기 전에 서버에서 code/state 를 먼저 처리한다.\n if (\n url.searchParams.has(\"state\") &&\n (url.searchParams.has(\"code\") || url.searchParams.has(\"error\"))\n ) {\n return handleNightbotOAuthCallback(url, blob);\n }\n\n const adminUser = await getAuthenticatedAdminUser(req);\n\n // ?login=1 은 브라우저 로그인 창을 띄우기 위한 주소다.\n // 로그인 창을 같은 경로(/admin)에서 띄워야 이후 요청에도 인증 정보가 함께 간다.\n if (url.searchParams.has(\"login\")) {\n if (!adminUser) return unauthorizedResponse();\n const back = new URL(url.href);\n back.searchParams.delete(\"login\");\n return redirectResponse(back.pathname + back.search);\n }\n\n return htmlResponse(renderAdminHtml(!!adminUser));\n }\n if (url.pathname === \"/monitor\") return htmlResponse(MONITOR_HTML);\n\n // 알림용 서비스워커. 반드시 최상위 경로(/sw.js)에서 내려줘야 사이트 전체를 담당한다.\n if (url.pathname === \"/sw.js\") {\n return new Response(SERVICE_WORKER_JS, {\n headers: {\n \"content-type\": \"text/javascript; charset=utf-8\",\n \"cache-control\": \"no-cache\",\n \"service-worker-allowed\": \"/\",\n \"x-content-type-options\": \"nosniff\",\n },\n });\n }\n\n // 예전 주소로 들어오거나 이미 공유된 링크를 눌러도 통합된 화면으로 보낸다.\n if (url.pathname === \"/history\") {\n return redirectResponse(\"/admin\" + url.search);\n }\n\n if (url.pathname === \"/api/stack\") {\n return handleStackJsonApi(req, url, blob);\n }\n if (url.pathname === \"/api/donation\") {\n return handleDonationApi(req, url, blob);\n }\n if (url.pathname === \"/api/history\") {\n return handleHistoryJsonApi(req, url, blob);\n }\n\n if (url.pathname === \"/admin/nightbot-connect\") {\n return handleNightbotOAuthConnect(req, url, blob);\n }\n // NIGHTBOT_REDIRECT_URI 를 /nightbot/callback 으로 지정한 경우에도 동작한다.\n if (url.pathname === \"/nightbot/callback\") {\n return handleNightbotOAuthCallback(url, blob);\n }\n if (url.pathname === \"/admin/nightbot-status\") {\n return handleNightbotStatus(req, url, blob);\n }\n if (url.pathname === \"/admin/nightbot-disconnect\" && req.method === \"POST\") {\n return handleNightbotDisconnect(req, url, blob);\n }\n if (url.pathname === \"/admin/announce\") {\n return handleAdminAnnouncement(req, url, blob);\n }\n if (url.pathname === \"/admin/announcement-data\") {\n return handleAnnouncementAdminData(req, url, blob);\n }\n if (url.pathname === \"/admin/announcement-preset\") {\n return handleAnnouncementPreset(req, url, blob);\n }\n if (url.pathname === \"/admin/announcement-schedule\") {\n return handleAnnouncementSchedule(req, url, blob);\n }\n if (url.pathname === \"/admin/announcement-run-due\") {\n return handleAnnouncementRunDue(req, url, blob);\n }\n\n if (url.pathname === \"/admin/maintenance-status\") {\n if (!(await checkAuth(req))) return unauthorizedResponse();\n return jsonResponse({ ok: true, on: await getMaintenanceMode(blob) });\n }\n\n if (url.pathname === \"/admin/maintenance\" && req.method === \"POST\") {\n if (!(await checkAuth(req))) return unauthorizedResponse();\n if (!sameOrigin(req, url)) return forbiddenResponse();\n const body = await readJsonBody(req);\n if (!body || typeof body.on !== \"boolean\") {\n return jsonResponse(\n { ok: false, error: \"on(boolean)이 필요합니다.\" },\n 400,\n );\n }\n await setMaintenanceMode(blob, body.on);\n return jsonResponse({ ok: true, on: body.on });\n }\n\n // 시간 기준 운영에서는 YouTube 연동을 쓰지 않는다.\n // 남아 있는 워커나 Push 알림이 들어오면 로그에서 바로 보이도록 410으로 응답한다.\n if (\n url.pathname === \"/youtube-check\" ||\n url.pathname.startsWith(\"/youtube-webhook\")\n ) {\n return jsonResponse({\n ok: false,\n error:\n \"YouTube 자동 초기화는 사용하지 않습니다. (매일 06:00 초기화로 운영)\",\n }, 410);\n }\n\n return handleNightbotRequest(req, url, blob);\n}","deleted",false,"label","aguking-stack",[14],"9d4dc10d-0136-4985-94f6-6b0bf535e31e",["D",1787817154621],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","d7bd44ad-648e-46fe-b25e-97dc3e998420","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a04226-b52a-76ab-bc3d-16937b891876","tursoName","9d4dc10d0136498594f66b0bf535e31e","tursoHostname","9d4dc10d0136498594f66b0bf535e31e-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789497078049],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_105":101},"org",{"_9":10,"_98":99,"_100":101,"_55":56,"_102":103,"_104":42},"branch",{"_35":88,"_11":89,"_22":28,"_90":46,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":12,"_97":10},"isOwned",415,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Steven-J-KY","avatar","https://avatars.githubusercontent.com/u/321694553?v=4","tier","free","canRestrictVals","profileImageUrl","ctx",{"_81":-5,"_139":140,"_141":142,"_143":144,"_145":42,"_146":42,"_147":42,"_148":32,"_149":-5,"_150":-7,"_151":-7,"_152":62,"_153":42,"_154":42,"_155":-5,"_156":42,"_157":42,"_158":42,"_159":-5},"ENV",{"_110":111,"_112":113,"_114":89,"_115":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]