엑셀 관리 - ${escapeHtml(channel)}

\n Monitoring\n ${refreshControlsHtml(channel)}\n

이름

수량

관리

✨ 아직 비어 있어요. 항목을 추가해 주세요! 항목이 없습니다.

{\n await ensureTable();\n\n const url = new URL(req.url);\n const channel = url.searchParams.get(\"ch\")?.trim() || DEFAULT_CHANNEL;\n const q = url.searchParams.get(\"q\");\n const isAdmin = url.pathname === \"/admin\";\n\n if (isAdmin && !checkAuth(req)) {\n return new Response(\"관리자 인증이 필요합니다.\", {\n status: 401,\n headers: {\n \"content-type\": \"text/plain; charset=utf-8\",\n \"www-authenticate\": 'Basic realm=\"Excel Admin\", charset=\"UTF-8\"',\n },\n });\n }\n\n if (q !== null) {\n return new Response(await handleCommand(channel, q), {\n headers: {\n \"content-type\": \"text/plain; charset=utf-8\",\n },\n });\n }\n\n const items = await getItems(channel);\n const html = isAdmin\n ? renderAdminPage(channel, items)\n : renderViewPage(channel, items);\n\n return new Response(html, {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n },\n });\n}","label","aguking-excel",[18],"pulls","branches",1,"forks","envVars",{"_192":194,"_195":26},"connections",{"_192":26,"_193":26},"count","unfilledCount",6,"emptyCount",{"_35":233,"_13":234,"_67":235,"_45":-5,"_37":38,"_175":236,"_176":112,"_39":237,"_41":238,"_69":239,"_179":240,"_71":24,"_181":-5,"_209":241,"_17":242},{"_35":174,"_13":18,"_67":68,"_45":-5,"_37":38,"_175":93,"_176":112,"_39":230,"_41":178,"_69":70,"_179":180,"_71":24,"_181":182,"_209":231,"_17":232},{"_35":222,"_13":223,"_67":110,"_45":-5,"_37":38,"_175":138,"_176":112,"_39":224,"_41":225,"_69":70,"_179":226,"_71":24,"_181":227,"_209":228,"_17":229},{"_35":212,"_13":213,"_67":214,"_45":-5,"_37":38,"_175":215,"_176":112,"_39":216,"_41":217,"_69":218,"_179":219,"_71":24,"_181":-5,"_209":220,"_17":221},{"_35":201,"_13":202,"_67":203,"_45":-5,"_37":38,"_175":204,"_176":112,"_39":205,"_41":206,"_69":70,"_179":207,"_71":24,"_181":208,"_209":210,"_17":211},"9c961185-c175-4dcd-a379-789e7bc06f59","youtube-notice-bot.ts","31ef2e96-a5e5-11f1-aa35-1607ee4eb77e",342,["D",1788834627060],28,"/**\n * YouTube Live Stream Viewer for Val Town\n * 암본이수혁 (aguking) 유튜브 채널의 라이브 방송을 볼 수 있는 화면\n */\n\nconst CHANNEL_ID = \"UC1LiqB9tfyRge5fZ2-7BTVQ\";\nconst CHANNEL_NAME = \"암본이수혁 (aguking)\";\nconst CHANNEL_URL =\n \"https://www.youtube.com/@%EC%97%B0%EC%97%94%ED%84%B0%EC%9D%B4%EC%88%98%ED%98%81\";\nconst CHECK_INTERVAL_MS = 15 * 60_000;\n\ntype LiveResult =\n | { live: true; videoId: string; title: string }\n | { live: false; reason?: string };\n\nasync function findCurrentLive(): Promise {\n const apiKey = Deno.env.get(\"YOUTUBE_API_KEY\")?.trim();\n\n if (!apiKey) {\n return {\n live: false,\n reason: \"Val Town Secrets에 YOUTUBE_API_KEY가 설정되지 않았습니다.\",\n };\n }\n\n const params = new URLSearchParams({\n part: \"snippet\",\n channelId: CHANNEL_ID,\n eventType: \"live\",\n type: \"video\",\n order: \"date\",\n maxResults: \"1\",\n key: apiKey,\n });\n\n try {\n const response = await fetch(\n `https://www.googleapis.com/youtube/v3/search?${params.toString()}`,\n );\n\n if (!response.ok) {\n const detail = await response.text();\n console.error(\"YouTube API error:\", response.status, detail);\n return {\n live: false,\n reason:\n `YouTube API 요청 오류 (${response.status}). API 키와 YouTube Data API v3 활성화 상태를 확인하세요.`,\n };\n }\n\n const data = await response.json();\n const item = data.items?.[0];\n const videoId = item?.id?.videoId;\n\n if (!videoId || !/^[A-Za-z0-9_-]{11}$/.test(videoId)) {\n return { live: false };\n }\n\n return {\n live: true,\n videoId,\n title: item?.snippet?.title || \"YouTube Live\",\n };\n } catch (error) {\n console.error(\"YouTube API request failed:\", error);\n return {\n live: false,\n reason: \"YouTube API 연결에 실패했습니다. 잠시 후 다시 시도합니다.\",\n };\n }\n}\n\nfunction escapeHtml(value: string): string {\n return value.replace(/[&<>'\"]/g, (character) => {\n const entities: Record = {\n \"&\": \"&\",\n \"<\": \"<\",\n \">\": \">\",\n \"'\": \"'\",\n '\"': \""\",\n };\n return entities[character];\n });\n}\n\nfunction renderPage(origin: string): string {\n const liveApiUrl = `${origin}?api=live`;\n\n return `\n\n\n \n \n \n ${escapeHtml(CHANNEL_NAME)} 라이브\n \n\n\n

🎬 ${escapeHtml(CHANNEL_NAME)}

YouTube 라이브 시청 · 채팅

라이브 상태 확인 중…

\n\n

라이브 상태를 확인하고 있습니다

잠시만 기다려 주세요.

\n \n

\n\n

15분마다 새 라이브 여부를 자동으로 확인합니다.

\n YouTube 채널에서 열기\n

\n\n \n

\n\n \n\n`;\n}\n\nexport default async function handler(request: Request): Promise {\n const url = new URL(request.url);\n\n if (url.searchParams.get(\"api\") === \"live\") {\n return Response.json(await findCurrentLive(), {\n headers: { \"cache-control\": \"no-store\" },\n });\n }\n\n return new Response(renderPage(url.origin), {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n \"cache-control\": \"no-store\",\n },\n });\n}","aguking-live","children",[],[202],"cd345a3e-9b73-4cb7-96df-1be8d611a279","ui.ts","6ac4b584-adf5-11f1-a55f-1607ee4eb77e",396,["D",1789477376229],13,"script","// ver.4.4 ui.ts — 화면(HTML/CSS/JS)과 공통 상수. main.ts 에서 import 해서 쓴다.\n// main.ts 와 반드시 같은 버전끼리 배포할 것. (import 이름이 하나만 어긋나도 전체가 멈춘다)\nexport const EMOJI_MAP: Record = {\n \"금연\": \"🚭\",\n \"흡연\": \"🚬\",\n \"먹어\": \"🍚\",\n \"먹지마\": \"🚫\",\n \"짠\": \"🍻\",\n \"오늘의 재미\": \"🤣\",\n \"무서움 지수\": \"👻\",\n \"문어\": \"🐙\",\n \"꽃게\": \"🦀\",\n \"소라\": \"🐚\",\n};\nexport const PRIMARY_CHANNEL = \"암본이수혁aguking\";\nexport const AUTO_REFRESH_INTERVAL_MS = 15000;\nconst CLIENT_COMMON_JS = `\nlet timer = null;\nfunction setStatus(msg, isErr) {\n statusEl.textContent = msg;\n statusEl.className = \"status\" + (isErr ? \" err\" : \"\");\n}\nfunction formatCount(raw) {\n if (raw === \"\" || raw === null || raw === undefined) return \"\";\n const n = Number(raw);\n if (!Number.isFinite(n)) return String(raw);\n return n.toLocaleString(\"en-US\", { maximumFractionDigits: 6 });\n}\nfunction errorMessage(e) {\n return e && e.message ? e.message : \"알 수 없는 오류\";\n}\nasync function fetchJson(path, options) {\n const res = await fetch(path, {\n cache: \"no-store\",\n credentials: \"same-origin\",\n ...(options || {})\n });\n const text = await res.text();\n let data = null;\n try {\n data = text ? JSON.parse(text) : null;\n } catch {}\n if (!res.ok || !data || data.ok === false) {\n const detail = data && (data.message || data.error);\n throw new Error(detail || (\"HTTP \" + res.status + (text ? \": \" + text : \"\")));\n }\n return data;\n}\nfunction bindCommonControls(load) {\n document.getElementById(\"loadBtn\").onclick = load;\n document.getElementById(\"autoRefresh\").onchange = e => {\n clearInterval(timer);\n timer = e.target.checked ? setInterval(load, ${AUTO_REFRESH_INTERVAL_MS}) : null;\n };\n chInput.addEventListener(\"keydown\", e => {\n if (e.key === \"Enter\") load();\n });\n}\n`;\n\n// Monitor / Admin 공통 CSS (History 는 테마 변수 구조가 달라 별도 유지)\nconst BASE_CSS = `\n:root { --bg:#f5f8fc; --panel:#fff; --line:#dde6f0; --text:#1c2733; --dim:#7891a8; --accent:#3b82f6; --input-bg:#eef3f9; --danger:#e0455a; }\n* { box-sizing:border-box; }\nbody { margin:0; background:var(--bg); color:var(--text); font-family:\"SF Mono\",\"D2Coding\",Consolas,monospace; padding:24px 16px 60px; min-height:100vh; }\n.wrap { max-width:560px; margin:0 auto; }\nh1 { font-size:15px; font-weight:600; letter-spacing:.02em; color:var(--dim); margin:0; }\nh1 span { color:var(--accent); }\n.panel { background:var(--panel); border:1px solid var(--line); border-radius:10px; padding:16px; margin-bottom:14px; box-shadow:0 1px 2px rgba(59,130,246,.06); }\nlabel { display:block; font-size:12px; color:var(--dim); margin-bottom:6px; }\n.row { display:flex; gap:8px; margin-bottom:10px; flex-wrap:wrap; }\ninput[type=\"text\"], input[type=\"number\"], select { flex:1; min-width:0; background:var(--input-bg); border:1px solid var(--line); border-radius:6px; color:var(--text); padding:9px 10px; font-family:inherit; font-size:16px; }\ninput[type=\"text\"]:focus, input[type=\"number\"]:focus, select:focus { outline:none; border-color:var(--accent); }\nbutton { background:var(--accent); color:#fff; border:none; border-radius:6px; padding:9px 14px; font-family:inherit; font-size:13px; font-weight:600; cursor:pointer; min-height:40px; }\nbutton:hover { filter:brightness(1.08); }\nbutton.ghost { background:transparent; color:var(--dim); border:1px solid var(--line); font-weight:500; }\nbutton.ghost:hover { color:var(--text); border-color:var(--accent); }\n.toolbar { display:flex; align-items:center; justify-content:space-between; margin-top:4px; flex-wrap:wrap; gap:8px; }\n.auto { display:flex; align-items:center; gap:6px; font-size:12px; color:var(--dim); }\n.auto input { accent-color:var(--accent); }\n.status { font-size:12px; color:var(--dim); margin:10px 0 4px; min-height:16px; white-space:pre-wrap; word-break:break-word; }\n.status.err { color:var(--danger); }\n.items { display:flex; flex-direction:column; gap:8px; }\n.item { display:flex; align-items:baseline; justify-content:space-between; background:var(--input-bg); border:1px solid var(--line); border-radius:8px; padding:10px 12px; gap:8px; }\n.item .name { font-size:14px; word-break:break-word; }\n.item .count { font-size:14px; font-weight:700; color:var(--accent); }\n.empty { text-align:center; color:var(--dim); font-size:13px; padding:28px 0; }\n@media (max-width:380px) { body { padding:16px 12px 48px; } }\n`;\n\nexport function label(item: string): string {\n const emoji = EMOJI_MAP[item];\n return emoji ? `${emoji} ${item}` : item;\n}\n\n// Channel Validation Helpers (Patched)\n\nconst MAX_CHANNEL_LENGTH = 100;\nconst MAX_ITEM_LENGTH = 100;\n\nexport function toNfc(value: string): string {\n try {\n return String(value ?? \"\").normalize(\"NFC\");\n } catch {\n return String(value ?? \"\");\n }\n}\n\nexport function normalizeChannel(channel: string): string {\n const trimmed = toNfc(String(channel ?? \"\").trim());\n // 예전 채널명(띄어쓰기 포함)으로 들어온 요청도 같은 데이터를 쓴다.\n return trimmed === \"암본이수혁 aguking\" ? PRIMARY_CHANNEL : trimmed;\n}\n\nexport function isSafeChannelName(channel: string): boolean {\n return (\n typeof channel === \"string\" &&\n channel.length > 0 &&\n channel.length <= MAX_CHANNEL_LENGTH &&\n !/[\\x00-\\x1F\\x7F]/.test(channel)\n );\n}\n\nexport function isSafeItemName(item: string): boolean {\n return (\n typeof item === \"string\" &&\n item.length > 0 &&\n item.length <= MAX_ITEM_LENGTH &&\n !/[\\x00-\\x1F\\x7F]/.test(item)\n );\n}\n\n// Monitor HTML\n\nexport const MONITOR_HTML = `\n\n\n\n\nStack Monitoring\n\n\n\n

\n\n

\n채널\n

\n \n \n

\n\n

\n 불러오는 중...\n

\n\n

\n\n\n`;\n\n// 관리 패널 (로그인한 관리자에게만 내려간다)\n\nconst ADMIN_SIDE_HTML = ``;\n\nconst ADMIN_SIDE_JS = `\n// ---------- 관리 패널 ----------\nconst stackItemsEl = document.getElementById(\"stackItems\");\nconst stackCountEl = document.getElementById(\"stackCount\");\nconst newItemSelect = document.getElementById(\"newItem\");\nconst newItemCustom = document.getElementById(\"newItemCustom\");\nconst maintenanceToggle = document.getElementById(\"maintenanceToggle\");\nconst maintenanceStatusEl = document.getElementById(\"maintenanceStatus\");\n\nfunction renderMaintenanceStatus(on) {\n maintenanceStatusEl.textContent =\n on\n ? \"🔧 ON - 나이트봇 요청에는 점검 안내 문구만 응답합니다.\"\n : \"정상 작동 중입니다.\";\n}\nasync function loadMaintenanceStatus() {\n try {\n const data = await fetchJson(API + \"admin/maintenance-status\");\n maintenanceToggle.checked = !!data.on;\n renderMaintenanceStatus(!!data.on);\n } catch (e) {\n maintenanceStatusEl.textContent = \"점검 모드 상태 오류: \" + errorMessage(e);\n }\n}\nmaintenanceToggle.addEventListener(\"change\", async e => {\n const on = e.target.checked;\n maintenanceStatusEl.textContent = \"변경 중...\";\n try {\n const data = await fetchJson(API + \"admin/maintenance\", {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify({ on })\n });\n maintenanceToggle.checked = !!data.on;\n renderMaintenanceStatus(!!data.on);\n } catch (err) {\n maintenanceStatusEl.textContent = \"변경 실패: \" + errorMessage(err);\n maintenanceToggle.checked = !on;\n }\n});\n\nfunction looksLikeNameWithNumber(name) {\n return /(^|\\\\s)-?\\\\d+(?:\\\\.\\\\d+)?$/.test(name.trim());\n}\n// 0보다 큰 숫자면 서버로 보낼 문자열을, 아니면 null을 돌려준다.\nfunction parseAmount(raw) {\n const s = String(raw).trim();\n if (!/^\\\\d+(?:\\\\.\\\\d+)?$/.test(s)) return null;\n const n = Number(s);\n if (!Number.isFinite(n) || n <= 0) return null;\n return s;\n}\n\n// 기록을 불러온 뒤 이어서 호출된다. 성공했을 때는 상태 문구를 덮어쓰지 않는다.\nasync function loadStack() {\n const ch = chInput.value.trim();\n if (!ch) return;\n try {\n const data = await fetchJson(API + \"api/stack?ch=\" + encodeURIComponent(ch));\n renderStack(data.items || []);\n } catch (e) {\n stackItemsEl.replaceChildren();\n stackCountEl.textContent = \"\";\n setStatus(\"스택 불러오기 실패: \" + errorMessage(e), true);\n }\n}\n\nfunction renderStack(items) {\n stackItemsEl.replaceChildren();\n stackCountEl.textContent = items.length ? items.length + \"개\" : \"\";\n if (!items.length) {\n const empty = document.createElement(\"p\");\n empty.className = \"side-note\";\n empty.style.margin = \"0\";\n empty.textContent = \"🤖 현재 스택 없음.\";\n stackItemsEl.appendChild(empty);\n return;\n }\n items.forEach(it => {\n const displayName = it.label || it.item;\n const row = document.createElement(\"div\");\n row.className = \"stack-item\";\n\n const nameBtn = document.createElement(\"button\");\n nameBtn.type = \"button\";\n nameBtn.className = \"name\";\n nameBtn.textContent = displayName;\n nameBtn.title = \"이 항목의 기록만 보기\";\n nameBtn.onclick = () => focusItem(it.item);\n\n const countEl = document.createElement(\"span\");\n countEl.className = \"count\";\n countEl.textContent = formatCount(it.count);\n\n const btns = document.createElement(\"div\");\n btns.className = \"btns\";\n const stepInput = document.createElement(\"input\");\n stepInput.type = \"number\";\n stepInput.className = \"step\";\n stepInput.value = \"1\";\n stepInput.step = \"any\";\n stepInput.min = \"0.01\";\n stepInput.inputMode = \"decimal\";\n stepInput.setAttribute(\"aria-label\", displayName + \" 수량\");\n const minusBtn = document.createElement(\"button\");\n minusBtn.type = \"button\";\n minusBtn.className = \"ghost small\";\n minusBtn.textContent = \"차감\";\n const plusBtn = document.createElement(\"button\");\n plusBtn.type = \"button\";\n plusBtn.className = \"small\";\n plusBtn.textContent = \"추가\";\n const delBtn = document.createElement(\"button\");\n delBtn.type = \"button\";\n delBtn.className = \"ghost danger small\";\n delBtn.textContent = \"삭제\";\n btns.appendChild(stepInput);\n btns.appendChild(minusBtn);\n btns.appendChild(plusBtn);\n btns.appendChild(delBtn);\n\n row.appendChild(nameBtn);\n row.appendChild(countEl);\n row.appendChild(btns);\n\n const getStep = () => {\n const amount = parseAmount(stepInput.value);\n if (amount === null) {\n setStatus(\"수량은 0 보다 큰 숫자만 입력할 수 있습니다.\", true);\n }\n return amount;\n };\n plusBtn.onclick = () => {\n const amount = getStep();\n if (amount === null) return;\n if (looksLikeNameWithNumber(it.item) && !confirm(\n \"이 항목의 실제 이름이 \\\\\"\" + it.item + \"\\\\\" 입니다. \" +\n \"이름 끝에 숫자가 포함되어 있는데, 이 이름 그대로 계속 추가할까요?\\\\n\" +\n \"(잘못 생성된 항목이면 취소를 누르고 먼저 삭제 후 새로 추가하세요.)\"\n )) {\n return;\n }\n runAction(\"추가\", it.item, amount);\n };\n minusBtn.onclick = () => {\n const amount = getStep();\n if (amount === null) return;\n runAction(\"차감\", it.item, amount);\n };\n delBtn.onclick = () => {\n if (confirm(displayName + \" 항목을 완전히 삭제할까요?\")) {\n runAction(\"삭제\", it.item);\n }\n };\n stackItemsEl.appendChild(row);\n });\n}\n\nasync function runAction(action, item, amount) {\n const ch = chInput.value.trim();\n if (!ch) {\n setStatus(\"채널을 입력해주세요.\", true);\n return;\n }\n const body = { channel: ch, action };\n if (item !== undefined) body.item = item;\n if (amount !== undefined) body.amount = amount;\n setStatus(\"처리 중...\");\n try {\n const data = await fetchJson(API + \"api/stack\", {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify(body)\n });\n // 기록초기화 뒤에는 서버 응답이 비므로 etag 캐시를 버리고 새로 받는다.\n state.etag = \"\";\n await load();\n setStatus(\"처리 완료 : \" + data.message);\n } catch (e) {\n setStatus(\"처리 실패: \" + errorMessage(e), true);\n }\n}\n\nnewItemSelect.onchange = () => {\n const isCustom = newItemSelect.value === \"__custom__\";\n newItemCustom.style.display = isCustom ? \"\" : \"none\";\n if (isCustom) newItemCustom.focus();\n};\nnewItemCustom.addEventListener(\"keydown\", e => {\n if (e.key === \"Enter\") document.getElementById(\"addBtn\").click();\n});\nfunction validateNewItemName(name) {\n if (!name) {\n setStatus(\"항목 이름을 입력해주세요.\", true);\n return false;\n }\n if (looksLikeNameWithNumber(name)) {\n setStatus(\n \"항목 이름(\\\\\"\" + name + \"\\\\\") 끝에 숫자가 포함되어 있습니다. \" +\n \"이름과 수량은 반드시 분리된 칸에 각각 입력해주세요.\",\n true\n );\n return false;\n }\n return true;\n}\nfunction getNewItemName() {\n const isCustom = newItemSelect.value === \"__custom__\";\n return isCustom ? newItemCustom.value.trim() : newItemSelect.value;\n}\nfunction submitNewItem(action) {\n const name = getNewItemName();\n if (!validateNewItemName(name)) return;\n const raw = document.getElementById(\"newAmount\").value;\n const amount = parseAmount(raw);\n if (amount === null) {\n setStatus(\n \"수량은 0 보다 큰 숫자만 입력할 수 있습니다. (입력값: \\\\\"\" + raw + \"\\\\\")\",\n true\n );\n return;\n }\n runAction(action, name, amount);\n if (newItemSelect.value === \"__custom__\") newItemCustom.value = \"\";\n}\ndocument.getElementById(\"addBtn\").onclick = () => submitNewItem(\"추가\");\ndocument.getElementById(\"subBtn\").onclick = () => submitNewItem(\"차감\");\ndocument.getElementById(\"resetBtn\").onclick = () => {\n const ch = chInput.value.trim();\n if (!ch) {\n setStatus(\"채널을 입력해주세요.\", true);\n return;\n }\n if (confirm(ch + \" 채널의 모든 항목을 초기화할까요? 되돌릴 수 없습니다.\")) {\n runAction(\"초기화\");\n }\n};\ndocument.getElementById(\"resetHistoryBtn\").onclick = () => {\n const ch = chInput.value.trim();\n if (!ch) {\n setStatus(\"채널을 입력해주세요.\", true);\n return;\n }\n if (confirm(ch + \" 채널의 기록(History)을 모두 삭제할까요? 되돌릴 수 없습니다.\")) {\n runAction(\"기록초기화\");\n }\n};\n\nloadAdmin = loadStack;\nloadMaintenanceStatus();\n`;\n\n// 통합 화면 (/admin)\n// 히스토리를 기본으로 두고, 로그인한 관리자에게만 오른쪽 관리 패널을 함께 내려준다.\n// 비로그인 방문자에게는 관리 패널의 HTML 자체를 보내지 않는다.\n\nexport function renderAdminHtml(isAdmin: boolean): string {\n return `\n\n\n\n\nStack ${isAdmin ? \"Admin\" : \"History\"}\n\n\n\n\n

\n\n\n

\n 채널\n

\n \n \n

\n \n

\n\n

기록을 불러오는 중...

\n\n

\n\n${isAdmin ? ADMIN_SIDE_HTML : \"\"}\n

\n\n\n\n\n\n`;\n}",[],[213],"bb083305-8113-4329-b8ec-43ed851cdef8","main.ts",["D",1789477403340],204,"// ver.4.4 main.ts — 서버 로직. 화면/상수는 ./ui.ts 에 있다. (val.town 80,000자 제한 때문에 분리)\n// ui.ts 와 반드시 같은 버전끼리 배포할 것. (import 이름이 하나만 어긋나도 전체가 멈춘다)\n// 4.4 수정분: 투네이션 후원 ID 를 적립이 끝난 뒤에 저장 / 흡연·금연 후원 상쇄\nimport {\n isSafeChannelName,\n isSafeItemName,\n label,\n MONITOR_HTML,\n normalizeChannel,\n renderAdminHtml,\n toNfc,\n} from \"./ui.ts\";\n\n// ver. 3 core: security + concurrency + JSON API + dedupe\n\nfunction getAdminAccounts(): Map {\n const rawAccounts = Deno.env.get(\"ADMIN_ACCOUNTS\") || \"\";\n const accounts = new Map();\n\n for (const entry of rawAccounts.split(\",\")) {\n const separatorIndex = entry.indexOf(\":\");\n if (separatorIndex <= 0) continue;\n\n const username = toNfc(entry.slice(0, separatorIndex).trim());\n const password = entry.slice(separatorIndex + 1).trim();\n if (username && password) accounts.set(username, password);\n }\n\n return accounts;\n}\n\nfunction timingSafeEqualText(a: string, b: string): boolean {\n const left = new TextEncoder().encode(a);\n const right = new TextEncoder().encode(b);\n let diff = left.length ^ right.length;\n const length = Math.max(left.length, right.length);\n\n for (let i = 0; i < length; i++) {\n diff |= (left[i] || 0) ^ (right[i] || 0);\n }\n\n return diff === 0;\n}\n\nfunction bytesToHex(buffer: ArrayBuffer): string {\n return Array.from(new Uint8Array(buffer))\n .map((b) => b.toString(16).padStart(2, \"0\"))\n .join(\"\");\n}\n\nasync function sha256Hex(value: string): Promise {\n return bytesToHex(\n await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(value)),\n );\n}\n\nasync function getAuthenticatedAdminUser(req: Request): Promise {\n const accounts = getAdminAccounts();\n if (!accounts.size) return null;\n\n const authHeader = req.headers.get(\"authorization\") || \"\";\n if (!authHeader.startsWith(\"Basic \")) return null;\n\n try {\n // 브라우저는 한글 아이디/비밀번호를 UTF-8로 보내므로 UTF-8로 풀어야 비교가 맞는다.\n const decoded = new TextDecoder().decode(\n Uint8Array.from(\n atob(authHeader.slice(\"Basic \".length)),\n (c) => c.charCodeAt(0),\n ),\n );\n const separatorIndex = decoded.indexOf(\":\");\n if (separatorIndex < 0) return null;\n\n const inputUser = toNfc(decoded.slice(0, separatorIndex).trim());\n const inputPassword = decoded.slice(separatorIndex + 1);\n const stored = accounts.get(inputUser);\n if (!stored) return null;\n\n const valid = stored.startsWith(\"sha256$\")\n ? timingSafeEqualText(\n await sha256Hex(inputPassword),\n stored.slice(\"sha256$\".length),\n )\n : timingSafeEqualText(inputPassword, stored);\n\n return valid ? inputUser : null;\n } catch {\n return null;\n }\n}\n\nasync function checkAuth(req: Request): Promise {\n return (await getAuthenticatedAdminUser(req)) !== null;\n}\n\nconst STACK_API_SECRET = Deno.env.get(\"STACK_API_SECRET\") || \"\";\n\nfunction checkStackApiKey(req: Request): boolean {\n if (!STACK_API_SECRET) return false;\n\n const headerKey = req.headers.get(\"x-stack-key\") || \"\";\n if (headerKey && timingSafeEqualText(headerKey, STACK_API_SECRET)) {\n return true;\n }\n\n const url = new URL(req.url);\n const queryKey = url.searchParams.get(\"key\") || \"\";\n return !!queryKey && timingSafeEqualText(queryKey, STACK_API_SECRET);\n}\n\nfunction unauthorizedResponse(): Response {\n return jsonResponse({ ok: false, error: \"인증이 필요합니다.\" }, 401, {\n \"WWW-Authenticate\": 'Basic realm=\"Admin Area\", charset=\"UTF-8\"',\n });\n}\n\nfunction forbiddenResponse(): Response {\n return jsonResponse({ ok: false, error: \"권한이 없습니다.\" }, 403);\n}\n\nfunction jsonResponse(\n body: unknown,\n status = 200,\n extraHeaders: Record = {},\n): Response {\n return new Response(JSON.stringify(body), {\n status,\n headers: {\n \"content-type\": \"application/json; charset=utf-8\",\n \"cache-control\": \"no-store\",\n \"x-content-type-options\": \"nosniff\",\n \"referrer-policy\": \"no-referrer\",\n ...extraHeaders,\n },\n });\n}\n\nfunction textResponse(\n body: string,\n status = 200,\n extraHeaders: Record = {},\n): Response {\n return new Response(body, {\n status,\n headers: {\n \"content-type\": \"text/plain; charset=utf-8\",\n \"cache-control\": \"no-store\",\n \"x-content-type-options\": \"nosniff\",\n \"referrer-policy\": \"no-referrer\",\n ...extraHeaders,\n },\n });\n}\n\nfunction redirectResponse(location: string): Response {\n // 302 를 쓴다. 301 은 브라우저가 오래 캐시해서 나중에 되돌리기 어렵다.\n return new Response(null, {\n status: 302,\n headers: {\n location,\n \"cache-control\": \"no-store\",\n \"referrer-policy\": \"no-referrer\",\n },\n });\n}\n\n// 알림 전용 서비스워커.\n// 페이지에서 직접 띄우는 알림과 달리, 탭이 백그라운드에서 멈춰 있어도 배너가 뜬다.\n// 알림을 누르면 이미 열려 있는 /admin 탭으로 이동하고, 없으면 새로 연다.\nconst SERVICE_WORKER_JS =\n `self.addEventListener(\"install\", () => self.skipWaiting());\nself.addEventListener(\"activate\", (e) => e.waitUntil(self.clients.claim()));\nself.addEventListener(\"notificationclick\", (e) => {\n e.notification.close();\n e.waitUntil((async () => {\n const wins = await self.clients.matchAll({ type: \"window\", includeUncontrolled: true });\n for (const w of wins) {\n if (w.url.indexOf(\"/admin\") !== -1) return w.focus();\n }\n return self.clients.openWindow(\"/admin\");\n })());\n});\n`;\n\nfunction htmlResponse(html: string): Response {\n return new Response(html, {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n \"cache-control\": \"no-store\",\n \"x-content-type-options\": \"nosniff\",\n \"referrer-policy\": \"no-referrer\",\n },\n });\n}\n\n// Maintenance\n\nconst MAINTENANCE_KEY = \"system_maintenance\";\nconst MAINTENANCE_MESSAGE = \"🚧 스택봇 점검중입니다.\";\n\nasync function safeGetJSON(\n blobStore: { getJSON: (k: string) => Promise },\n key: string,\n fallback: T,\n): Promise {\n try {\n return ((await blobStore.getJSON(key)) as T) ?? fallback;\n } catch {\n return fallback;\n }\n}\n\nasync function getMaintenanceMode(\n blob: { getJSON: (k: string) => Promise },\n): Promise {\n const value = await safeGetJSON<{ on?: boolean } | null>(\n blob,\n MAINTENANCE_KEY,\n null,\n );\n return value?.on === true;\n}\n\nasync function setMaintenanceMode(\n blob: { setJSON: (k: string, v: unknown) => Promise },\n on: boolean,\n): Promise {\n await blob.setJSON(MAINTENANCE_KEY, { on: !!on });\n}\n\n// Validation / parsing\n\nfunction roundAmount(n: number): number {\n return Math.round(n * 1e6) / 1e6;\n}\n\nfunction parsePositiveAmount(value: unknown): number | null {\n const s = String(value ?? \"\").trim();\n if (!/^\\d+(?:\\.\\d+)?$/.test(s)) return null;\n\n const n = Number(s);\n if (!Number.isFinite(n) || n <= 0 || n > 1_000_000_000) return null;\n return roundAmount(n);\n}\n\ntype ParsedCommandAmount = {\n item: string;\n amount: number;\n valid: boolean;\n // 수량으로 인식하려던 마지막 토큰 (오류 안내 문구용)\n lastToken: string | null;\n};\n\nfunction endsWithBareNumber(item: string): boolean {\n return /(^|\\s)-?\\d+(?:\\.\\d+)?$/.test(item.trim());\n}\n\nfunction splitItemAndAmount(rest: string[]): ParsedCommandAmount {\n const tokens = rest.map((token) => toNfc(token.trim())).filter(Boolean);\n if (!tokens.length) {\n return { item: \"\", amount: 1, valid: true, lastToken: null };\n }\n\n const last = tokens[tokens.length - 1];\n if (tokens.length === 1 || !/^-?(?:\\d+(?:\\.\\d+)?)$/.test(last)) {\n return { item: tokens.join(\" \"), amount: 1, valid: true, lastToken: last };\n }\n\n const item = tokens.slice(0, -1).join(\" \");\n const amount = parsePositiveAmount(last);\n return amount === null\n ? { item, amount: 0, valid: false, lastToken: last }\n : { item, amount, valid: true, lastToken: last };\n}\n\nfunction normalizeItem(raw: unknown): string {\n return toNfc(String(raw ?? \"\").trim());\n}\n\nfunction sanitizeStack(input: unknown): Record {\n const out: Record = Object.create(null);\n if (!input || typeof input !== \"object\" || Array.isArray(input)) return out;\n\n for (\n const [rawItem, rawValue] of Object.entries(\n input as Record,\n )\n ) {\n const item = normalizeItem(rawItem);\n const value = Number(rawValue);\n if (!isSafeItemName(item) || !Number.isFinite(value) || value <= 0) {\n continue;\n }\n out[item] = roundAmount((out[item] || 0) + value);\n }\n return out;\n}\n\n// History: bounded + normalized + exact-duplicate removal\n\nconst MAX_HISTORY_ENTRIES = 1000;\n\ninterface HistoryEntry {\n time: string;\n action: \"추가\" | \"차감\" | \"삭제\" | \"초기화\";\n item?: string;\n source?:\n | \"nightbot\"\n | \"admin\"\n | \"api\"\n | \"youtube-auto\"\n | \"cron\"\n | \"toonation\";\n actor?: string;\n amount?: number;\n count?: number;\n}\n\nfunction historyFingerprint(entry: HistoryEntry): string {\n return JSON.stringify([\n entry.time,\n entry.action,\n entry.source || \"\",\n entry.actor || \"\",\n entry.item || \"\",\n entry.amount ?? null,\n entry.count ?? null,\n ]);\n}\n\nfunction sanitizeHistory(input: unknown): HistoryEntry[] {\n if (!Array.isArray(input)) return [];\n\n const seen = new Set();\n const out: HistoryEntry[] = [];\n\n for (const raw of input) {\n if (!raw || typeof raw !== \"object\") continue;\n const e = raw as Partial;\n if (typeof e.time !== \"string\") continue;\n if (![\"추가\", \"차감\", \"삭제\", \"초기화\"].includes(e.action || \"\")) continue;\n\n const item = e.item === undefined ? undefined : normalizeItem(e.item);\n if (item !== undefined && !isSafeItemName(item)) continue;\n\n const amount = e.amount === undefined ? undefined : Number(e.amount);\n const count = e.count === undefined ? undefined : Number(e.count);\n if (amount !== undefined && (!Number.isFinite(amount) || amount <= 0)) {\n continue;\n }\n if (count !== undefined && (!Number.isFinite(count) || count < 0)) continue;\n\n const clean: HistoryEntry = {\n time: e.time,\n action: e.action as HistoryEntry[\"action\"],\n ...(typeof e.source === \"string\"\n ? { source: e.source as HistoryEntry[\"source\"] }\n : {}),\n ...(typeof e.actor === \"string\" ? { actor: e.actor.slice(0, 100) } : {}),\n ...(item === undefined ? {} : { item }),\n ...(amount === undefined ? {} : { amount: roundAmount(amount) }),\n ...(count === undefined ? {} : { count: roundAmount(count) }),\n };\n\n const fp = historyFingerprint(clean);\n if (seen.has(fp)) continue;\n seen.add(fp);\n out.push(clean);\n }\n\n return out\n .sort((a, b) => new Date(a.time).getTime() - new Date(b.time).getTime())\n .slice(-MAX_HISTORY_ENTRIES);\n}\n\nasync function readHistory(\n blob: { getJSON: (k: string) => Promise },\n channel: string,\n): Promise {\n return sanitizeHistory(await safeGetJSON(blob, `history_${channel}`, null));\n}\n\nasync function appendHistory(\n blob: {\n getJSON: (k: string) => Promise;\n setJSON: (k: string, v: unknown) => Promise;\n },\n channel: string,\n entry: HistoryEntry,\n): Promise {\n const history = await readHistory(blob, channel);\n const clean: HistoryEntry = {\n ...entry,\n item: entry.item === undefined ? undefined : normalizeItem(entry.item),\n amount: entry.amount === undefined ? undefined : roundAmount(entry.amount),\n count: entry.count === undefined ? undefined : roundAmount(entry.count),\n };\n\n const fp = historyFingerprint(clean);\n if (!history.some((e) => historyFingerprint(e) === fp)) {\n history.push(clean);\n }\n\n await blob.setJSON(`history_${channel}`, sanitizeHistory(history));\n}\n\nfunction formatStack(stack: Record): string {\n const keys = Object.keys(stack);\n if (!keys.length) return \"🤖 현재 스택 없음.\";\n return keys.map((k) => `${label(k)} ${roundAmount(stack[k])}`).join(\", \");\n}\n\n// Unified stack action engine (single source of truth)\n\ntype StackAction = \"추가\" | \"차감\" | \"삭제\" | \"초기화\";\n\nconst STACK_ACTIONS: readonly string[] = [\"추가\", \"차감\", \"삭제\", \"초기화\"];\n\nfunction isStackAction(value: string): value is StackAction {\n return STACK_ACTIONS.includes(value);\n}\n\ntype ActionResult = {\n ok: boolean;\n action?: StackAction;\n channel: string;\n item?: string;\n amount?: number;\n count?: number;\n stack: Record;\n message: string;\n error?: string;\n};\n\nasync function readStack(\n blob: { getJSON: (k: string) => Promise },\n channel: string,\n): Promise> {\n return sanitizeStack(await safeGetJSON(blob, `stack_${channel}`, null));\n}\n\nasync function writeStack(\n blob: { setJSON: (k: string, v: unknown) => Promise },\n channel: string,\n stack: Record,\n): Promise {\n await blob.setJSON(`stack_${channel}`, sanitizeStack(stack));\n}\n\nasync function applyStackAction(\n blob: {\n getJSON: (k: string) => Promise;\n setJSON: (k: string, v: unknown) => Promise;\n delete: (k: string) => Promise;\n },\n channel: string,\n action: StackAction,\n rawItem?: unknown,\n rawAmount?: unknown,\n historyMeta: Pick = {},\n): Promise {\n const item = normalizeItem(rawItem);\n const amount = rawAmount === undefined ? 1 : parsePositiveAmount(rawAmount);\n const stack = await readStack(blob, channel);\n\n if (action === \"초기화\") {\n await blob.delete(`stack_${channel}`);\n await appendHistory(blob, channel, {\n time: new Date().toISOString(),\n action: \"초기화\",\n ...historyMeta,\n });\n return {\n ok: true,\n action,\n channel,\n stack: Object.create(null),\n message: \"스택을 초기화했습니다.\",\n };\n }\n\n if (!item) {\n return {\n ok: false,\n channel,\n stack,\n message: \"항목을 입력해주세요.\",\n error: \"INVALID_ITEM\",\n };\n }\n if (!isSafeItemName(item)) {\n return {\n ok: false,\n channel,\n stack,\n message: \"항목 이름은 1~100 자로 입력해주세요.\",\n error: \"INVALID_ITEM\",\n };\n }\n if (amount === null) {\n return {\n ok: false,\n channel,\n item,\n stack,\n message: \"수량은 0 보다 큰 숫자만 입력할 수 있습니다.\",\n error: \"INVALID_AMOUNT\",\n };\n }\n\n if (action === \"추가\") {\n const next = roundAmount((stack[item] || 0) + amount);\n stack[item] = next;\n await writeStack(blob, channel, stack);\n await appendHistory(blob, channel, {\n time: new Date().toISOString(),\n action,\n item,\n amount,\n count: next,\n ...historyMeta,\n });\n return {\n ok: true,\n action,\n channel,\n item,\n amount,\n count: next,\n stack,\n message: `${label(item)} ${next}`,\n };\n }\n\n if (action === \"차감\") {\n if (!(item in stack)) {\n return {\n ok: false,\n action,\n channel,\n item,\n amount,\n stack,\n message: `${label(item)} 항목이 없습니다.`,\n error: \"NOT_FOUND\",\n };\n }\n const next = roundAmount(stack[item] - amount);\n if (next <= 0) {\n delete stack[item];\n await writeStack(blob, channel, stack);\n await appendHistory(blob, channel, {\n time: new Date().toISOString(),\n action,\n item,\n amount,\n count: 0,\n ...historyMeta,\n });\n return {\n ok: true,\n action,\n channel,\n item,\n amount,\n count: 0,\n stack,\n message: `${label(item)} 0 이하가 되어 삭제했습니다.`,\n };\n }\n stack[item] = next;\n await writeStack(blob, channel, stack);\n await appendHistory(blob, channel, {\n time: new Date().toISOString(),\n action,\n item,\n amount,\n count: next,\n ...historyMeta,\n });\n return {\n ok: true,\n action,\n channel,\n item,\n amount,\n count: next,\n stack,\n message: `${label(item)} ${next}`,\n };\n }\n\n if (!(item in stack)) {\n return {\n ok: false,\n action,\n channel,\n item,\n stack,\n message: `${label(item)} 항목이 없습니다.`,\n error: \"NOT_FOUND\",\n };\n }\n delete stack[item];\n await writeStack(blob, channel, stack);\n await appendHistory(blob, channel, {\n time: new Date().toISOString(),\n action,\n item,\n ...historyMeta,\n });\n return {\n ok: true,\n action,\n channel,\n item,\n stack,\n message: `${label(item)} 삭제했습니다.`,\n };\n}\n\n// Concurrency: serialize every mutation by normalized channel.\n\nconst channelLocks = new Map>();\n\nasync function withChannelLock(\n channel: string,\n task: () => Promise,\n): Promise {\n const previous = channelLocks.get(channel) || Promise.resolve();\n let release!: () => void;\n const current = new Promise((resolve) => {\n release = resolve;\n });\n channelLocks.set(channel, current);\n await previous;\n try {\n return await task();\n } finally {\n release();\n if (channelLocks.get(channel) === current) channelLocks.delete(channel);\n }\n}\n\n// JSON API helpers\n\nconst MAX_JSON_BODY_BYTES = 16 * 1024;\n\nasync function readJsonBody(\n req: Request,\n): Promise | null> {\n const contentLength = Number(req.headers.get(\"content-length\") || 0);\n if (Number.isFinite(contentLength) && contentLength > MAX_JSON_BODY_BYTES) {\n return null;\n }\n try {\n const text = await req.text();\n if (new TextEncoder().encode(text).byteLength > MAX_JSON_BODY_BYTES) {\n return null;\n }\n const body = JSON.parse(text);\n return body && typeof body === \"object\" && !Array.isArray(body)\n ? body as Record\n : null;\n } catch {\n return null;\n }\n}\n\nfunction sameOrigin(req: Request, url: URL): boolean {\n const origin = req.headers.get(\"origin\");\n const referer = req.headers.get(\"referer\");\n const valid = (value: string | null) => {\n if (!value) return false;\n try {\n return new URL(value).origin === url.origin;\n } catch {\n return false;\n }\n };\n return valid(origin) || valid(referer);\n}\n\nfunction getValidatedChannel(raw: unknown): string | null {\n const value = toNfc(String(raw ?? \"\").trim());\n if (!value || !isSafeChannelName(value)) return null;\n return normalizeChannel(value);\n}\n\ntype BlobStore = {\n getJSON: (key: string) => Promise;\n setJSON: (key: string, value: unknown) => Promise;\n delete: (key: string) => Promise;\n};\n\n// 매일 06:00 크론(cron.ts)이 보내는 초기화 요청 표시\nconst DAILY_RESET_TRIGGER = \"daily-reset\";\n// 크론 재시도 등으로 같은 초기화가 두 번 기록되지 않도록 이 시간 안의 중복 요청은 건너뛴다.\nconst DAILY_RESET_DEDUPE_MS = 60 * 60 * 1000;\n\n// JSON API: GET /api/stack?ch= (공개 조회)\n// POST /api/stack (관리자 화면 또는 API Key)\nasync function handleStackJsonApi(\n req: Request,\n url: URL,\n blob: BlobStore,\n): Promise {\n if (req.method === \"GET\") {\n const channel = getValidatedChannel(url.searchParams.get(\"ch\"));\n if (!channel) {\n return jsonResponse(\n { ok: false, error: \"유효하지 않은 채널명입니다.\" },\n 400,\n );\n }\n return await withChannelLock(channel, async () => {\n const stack = await readStack(blob, channel);\n return jsonResponse({\n ok: true,\n channel,\n stack,\n items: Object.entries(stack).map(([item, count]) => ({\n item,\n label: label(item),\n count,\n })),\n });\n });\n }\n\n if (req.method !== \"POST\") {\n return jsonResponse({ ok: false, error: \"Method Not Allowed\" }, 405, {\n Allow: \"GET, POST\",\n });\n }\n\n // 관리자(Basic 인증)는 같은 출처(관리자 화면)에서 온 요청만 허용한다.\n // API Key 요청은 서버 간 호출이므로 출처 검사를 하지 않는다.\n const adminUser = await getAuthenticatedAdminUser(req);\n const apiKey = checkStackApiKey(req);\n if (!adminUser && !apiKey) return forbiddenResponse();\n if (!apiKey && !sameOrigin(req, url)) return forbiddenResponse();\n\n const body = await readJsonBody(req);\n if (!body) {\n return jsonResponse({\n ok: false,\n error: \"JSON body가 올바르지 않거나 너무 큽니다.\",\n }, 400);\n }\n\n const channel = getValidatedChannel(body.channel);\n if (!channel) {\n return jsonResponse(\n { ok: false, error: \"유효하지 않은 채널명입니다.\" },\n 400,\n );\n }\n\n const action = toNfc(String(body.action ?? \"\"));\n\n // 기록초기화는 되돌릴 수 없으므로 관리자만 실행할 수 있다.\n if (action === \"기록초기화\") {\n if (!adminUser) return forbiddenResponse();\n return await withChannelLock(channel, async () => {\n await blob.delete(`history_${channel}`);\n return jsonResponse({\n ok: true,\n action,\n channel,\n message: \"기록 (History) 을 초기화했습니다.\",\n });\n });\n }\n\n if (!isStackAction(action)) {\n return jsonResponse(\n { ok: false, error: \"지원하지 않는 action입니다.\" },\n 400,\n );\n }\n\n const isDailyReset = !adminUser && apiKey && action === \"초기화\" &&\n body.trigger === DAILY_RESET_TRIGGER;\n const historyMeta: Pick = adminUser\n ? { source: \"admin\", actor: adminUser }\n : isDailyReset\n ? { source: \"cron\", actor: \"매일 06:00 초기화\" }\n : { source: \"api\", actor: \"API Key\" };\n\n return await withChannelLock(channel, async () => {\n if (isDailyReset) {\n const now = Date.now();\n const history = await readHistory(blob, channel);\n const alreadyDone = history.some((e) =>\n e.action === \"초기화\" &&\n e.source === \"cron\" &&\n now - Date.parse(e.time) < DAILY_RESET_DEDUPE_MS\n );\n if (alreadyDone) {\n return jsonResponse({\n ok: true,\n action,\n channel,\n skipped: true,\n stack: await readStack(blob, channel),\n message: \"최근 1시간 안에 매일 초기화를 이미 실행해서 건너뜁니다.\",\n });\n }\n }\n\n const result = await applyStackAction(\n blob,\n channel,\n action,\n body.item,\n body.amount,\n historyMeta,\n );\n return jsonResponse(result, result.ok ? 200 : 400);\n });\n}\n\nasync function handleHistoryJsonApi(\n req: Request,\n url: URL,\n blob: Pick,\n): Promise {\n if (req.method !== \"GET\") {\n return jsonResponse({ ok: false, error: \"Method Not Allowed\" }, 405, {\n Allow: \"GET\",\n });\n }\n const channel = getValidatedChannel(url.searchParams.get(\"ch\"));\n if (!channel) {\n return jsonResponse(\n { ok: false, error: \"유효하지 않은 채널명입니다.\" },\n 400,\n );\n }\n\n // 후원 기록 자체는 공개하되, 비로그인 방문자에게는 후원자 닉네임을 가린다.\n // 화면에서만 가리면 /api/history 를 직접 열어 볼 수 있으므로 서버에서 바꿔서 내보낸다.\n // 마스킹 문구는 \"투네이션 후원\" 으로 둔다. 후원자가 투네이션에서 익명으로 보낸\n // 경우의 실제 표기(\"투네이션 익명\")와 헷갈리지 않게 하려는 것이다.\n // 투네이션 외 출처(admin 등)의 계정명은 그대로 비공개다.\n const DONOR_MASK = \"투네이션 후원\";\n const isAdmin = !!(await getAuthenticatedAdminUser(req));\n const history = (await readHistory(blob, channel)).map((entry) =>\n isAdmin ? entry : {\n ...entry,\n actor: entry.source === \"toonation\" ? DONOR_MASK : undefined,\n }\n );\n\n const payload = { ok: true, channel, history };\n\n // 기록이 바뀌지 않았으면 본문 없이 304로 응답한다.\n // (History 페이지를 자동 새로고침으로 오래 켜 둬도 같은 데이터를 매번 다시 받지 않게)\n const etag = `\"${(await sha256Hex(JSON.stringify(payload))).slice(0, 32)}\"`;\n const ifNoneMatch = (req.headers.get(\"if-none-match\") || \"\").replace(\n /^W\\//,\n \"\",\n );\n if (ifNoneMatch === etag) {\n return new Response(null, {\n status: 304,\n headers: {\n etag,\n vary: \"Authorization\",\n \"cache-control\": \"no-store\",\n \"x-content-type-options\": \"nosniff\",\n \"referrer-policy\": \"no-referrer\",\n },\n });\n }\n return jsonResponse(payload, 200, { etag, vary: \"Authorization\" });\n}\n\n// Toonation 후원 → 스택 자동 적립\n//\n// 금액을 기준 단가의 정수 조합으로 푼다.\n// 11,900 × a + 12,000 × b = 후원금액\n// 예) 11900 → 흡연 1 / 24000 → 금연 2 / 23900 → 흡연 1 + 금연 1\n// 두 단가가 100원밖에 차이나지 않아서 금액이 커지면 조합이 여러 개 나올 수 있다.\n// (예: 1,428,000 = 11900×120 = 12000×119) 이런 금액은 자동 적립하지 않고 보류한다.\nconst DONATION_UNITS: readonly { unit: number; item: string }[] = [\n { unit: 11900, item: \"흡연\" },\n { unit: 12000, item: \"금연\" },\n];\n\n// 서로 상쇄되는 항목. 후원이 들어오면 반대 항목을 먼저 깎고, 남는 수량만 쌓는다.\n// 예) 흡연 1 에서 금연 1 후원 → 흡연 0 → 삭제 (금연은 쌓이지 않음)\n// 예) 흡연 1 에서 금연 3 후원 → 흡연 삭제 + 금연 2\n// 한쪽 방향만 상쇄하려면 해당 줄을 지우면 된다.\nconst DONATION_OPPOSITE: Record = {\n \"흡연\": \"금연\",\n \"금연\": \"흡연\",\n};\n\n// 조합이 여러 개일 때: \"hold\" = 적립 보류(수동 처리) / \"first\" = 첫 후보로 적립\nconst DONATION_AMBIGUOUS_POLICY: \"hold\" | \"first\" = \"hold\";\n\n// 같은 후원이 재시도로 두 번 들어오는 것을 막는다. (uid 를 보낸 경우에만 동작)\n// id(후원자 ID 등)는 중복 판단에 쓰지 않는다. 같은 사람이 연달아 후원해도 매번 쌓인다.\nconst MAX_DONATION_IDS = 300;\n\ntype DonationSplit = { item: string; count: number }[];\n\nfunction donationTotal(split: DonationSplit): number {\n return split.reduce((sum, s) => sum + s.count, 0);\n}\n\nfunction solveDonation(amount: number): DonationSplit[] {\n const [A, B] = DONATION_UNITS;\n const out: DonationSplit[] = [];\n\n for (let a = 0; a * A.unit <= amount; a++) {\n const rest = amount - a * A.unit;\n if (rest % B.unit !== 0) continue;\n const b = rest / B.unit;\n if (a + b < 1) continue;\n out.push([\n ...(a ? [{ item: A.item, count: a }] : []),\n ...(b ? [{ item: B.item, count: b }] : []),\n ]);\n }\n\n // 한 종류로 떨어지는 조합을 먼저, 그 다음 개수가 적은 조합을 먼저 본다.\n return out.sort((x, y) =>\n (x.length - y.length) || (donationTotal(x) - donationTotal(y))\n );\n}\n\nasync function readDonationIds(\n blob: Pick,\n channel: string,\n): Promise {\n const raw = await safeGetJSON(blob, `donation_ids_${channel}`, null);\n return Array.isArray(raw) ? raw.filter((v) => typeof v === \"string\") : [];\n}\n\ntype DonationChange = {\n action: \"추가\" | \"차감\";\n item: string;\n amount: number;\n total: number;\n};\n\n// 후원 한 조각(예: 금연 1)을 처리한다. 반대 항목이 있으면 먼저 깎는다.\n// 0 이 되면 applyStackAction 의 차감 로직이 항목을 삭제한다.\nasync function applyDonationPiece(\n blob: BlobStore,\n channel: string,\n item: string,\n count: number,\n historyMeta: Pick,\n): Promise {\n const changes: DonationChange[] = [];\n let rest = count;\n\n const opposite = DONATION_OPPOSITE[item];\n if (opposite) {\n const stack = await readStack(blob, channel);\n const offset = roundAmount(Math.min(stack[opposite] || 0, rest));\n if (offset > 0) {\n const r = await applyStackAction(\n blob,\n channel,\n \"차감\",\n opposite,\n offset,\n historyMeta,\n );\n if (!r.ok) throw new Error(r.message);\n changes.push({\n action: \"차감\",\n item: opposite,\n amount: offset,\n total: r.count ?? 0,\n });\n rest = roundAmount(rest - offset);\n }\n }\n\n if (rest > 0) {\n const r = await applyStackAction(\n blob,\n channel,\n \"추가\",\n item,\n rest,\n historyMeta,\n );\n if (!r.ok) throw new Error(r.message);\n changes.push({ action: \"추가\", item, amount: rest, total: r.count ?? 0 });\n }\n\n return changes;\n}\n\n// POST /api/donation (API Key 전용)\n// body: { channel, amount, id?, uid?, name?, message? }\n// id : 후원자 ID 등. 중복 판단에 쓰지 않는다. (같은 id 로 여러 번 와도 매번 적립)\n// uid : 후원 \"한 건\"마다 다른 고유값. 보냈을 때만 재시도 중복을 막는다. (생략 가능)\nasync function handleDonationApi(\n req: Request,\n _url: URL,\n blob: BlobStore,\n): Promise {\n if (req.method !== \"POST\") {\n return jsonResponse({ ok: false, error: \"Method Not Allowed\" }, 405, {\n Allow: \"POST\",\n });\n }\n if (!checkStackApiKey(req)) return forbiddenResponse();\n\n const body = await readJsonBody(req);\n if (!body) {\n return jsonResponse({\n ok: false,\n error: \"JSON body가 올바르지 않거나 너무 큽니다.\",\n }, 400);\n }\n\n const channel = getValidatedChannel(body.channel);\n if (!channel) {\n return jsonResponse(\n { ok: false, error: \"유효하지 않은 채널명입니다.\" },\n 400,\n );\n }\n\n const amount = Number(body.amount);\n if (!Number.isInteger(amount) || amount <= 0 || amount > 100_000_000) {\n return jsonResponse(\n { ok: false, error: \"후원 금액이 올바르지 않습니다.\" },\n 400,\n );\n }\n\n if (await getMaintenanceMode(blob)) {\n return jsonResponse({ ok: false, error: MAINTENANCE_MESSAGE }, 503);\n }\n\n const donationId = toNfc(String(body.uid ?? \"\").trim()).slice(0, 100);\n const donor = toNfc(String(body.name ?? \"\").trim()).slice(0, 50);\n\n return await withChannelLock(channel, async () => {\n const seen = donationId ? await readDonationIds(blob, channel) : [];\n\n // 중복 후원 차단\n if (donationId && seen.includes(donationId)) {\n return jsonResponse({\n ok: true,\n duplicated: true,\n channel,\n amount,\n stack: await readStack(blob, channel),\n message: \"이미 처리한 후원입니다.\",\n });\n }\n\n // 처리가 끝난 뒤에만 \"처리됨\"으로 기록한다.\n // (중간에 실패하면 기록하지 않으므로 같은 uid 로 재시도하면 다시 처리된다)\n const markSeen = async () => {\n if (!donationId) return;\n await blob.setJSON(\n `donation_ids_${channel}`,\n [...seen, donationId].slice(-MAX_DONATION_IDS),\n );\n };\n\n const candidates = solveDonation(amount);\n\n if (!candidates.length) {\n await markSeen();\n return jsonResponse({\n ok: true,\n matched: false,\n channel,\n amount,\n stack: await readStack(blob, channel),\n message:\n `${amount}원은 스택 단가 조합에 맞지 않아 적립하지 않았습니다.`,\n });\n }\n\n if (candidates.length > 1 && DONATION_AMBIGUOUS_POLICY === \"hold\") {\n await markSeen();\n return jsonResponse({\n ok: true,\n matched: false,\n held: true,\n channel,\n amount,\n candidates,\n stack: await readStack(blob, channel),\n message:\n `${amount}원은 해석이 여러 가지라 자동 적립하지 않았습니다. 관리자 화면에서 직접 처리해주세요.`,\n });\n }\n\n const historyMeta: Pick = {\n source: \"toonation\",\n actor: donor ? `투네이션 ${donor}` : \"투네이션\",\n };\n\n const changes: DonationChange[] = [];\n try {\n for (const { item, count } of candidates[0]) {\n changes.push(\n ...(await applyDonationPiece(\n blob,\n channel,\n item,\n count,\n historyMeta,\n )),\n );\n }\n } catch (err) {\n // \"처리됨\"으로 기록하지 않았으므로 같은 uid 로 다시 보내면 다시 처리된다.\n // changes 에는 실패 전까지 이미 반영된 변동이 들어 있다.\n return jsonResponse({\n ok: false,\n channel,\n amount,\n changes,\n stack: await readStack(blob, channel),\n error: \"적립 중 오류가 발생했습니다. 같은 내용으로 다시 보내주세요.\",\n detail: err instanceof Error ? err.message : String(err),\n }, 500);\n }\n\n await markSeen();\n\n const stack = await readStack(blob, channel);\n return jsonResponse({\n ok: true,\n matched: true,\n channel,\n amount,\n changes,\n stack,\n message: changes\n .map((c) =>\n c.action === \"추가\"\n ? `${label(c.item)} +${c.amount}`\n : `${label(c.item)} -${c.amount}${c.total === 0 ? \" (삭제)\" : \"\"}`\n )\n .join(\", \") || \"변동 없음\",\n });\n });\n}\n\n// 나이트봇 텍스트 API: /?ch=채널&q=명령&key=STACK_API_SECRET\n// - q가 없으면 현재 스택을 보여준다. (인증 불필요)\n// - 명령은 API Key로만 실행한다. 관리자 화면은 /api/stack(POST)을 쓴다.\nasync function handleNightbotRequest(\n req: Request,\n url: URL,\n blob: BlobStore,\n): Promise {\n const requestedQuery = toNfc((url.searchParams.get(\"q\") || \"\").trim());\n const channel = getValidatedChannel(url.searchParams.get(\"ch\"));\n\n if (!channel) return textResponse(\"채널명을 입력해주세요.\", 200);\n if (requestedQuery && !checkStackApiKey(req)) return forbiddenResponse();\n if (await getMaintenanceMode(blob)) {\n return textResponse(MAINTENANCE_MESSAGE, 200);\n }\n\n const historyMeta: Pick = {\n source: \"nightbot\",\n actor: \"nightbot\",\n };\n\n return await withChannelLock(channel, async () => {\n if (!requestedQuery) {\n return textResponse(formatStack(await readStack(blob, channel)));\n }\n\n const parts = requestedQuery.split(/\\s+/);\n const command = parts[0];\n\n if (command === \"기록초기화\") {\n return textResponse(\"기록초기화는 관리자 화면에서만 할 수 있습니다.\");\n }\n\n if (command === \"추가\" || command === \"차감\" || command === \"빼기\") {\n const parsed = splitItemAndAmount(parts.slice(1));\n if (!parsed.item) {\n return textResponse(\n command === \"추가\"\n ? \"사용법 : !스택 추가 [항목] [숫자 (생략가능, 소수 가능)]\"\n : \"사용법 : !스택 차감 (빼기) [항목] [숫자 (생략가능, 소수 가능)]\",\n );\n }\n if (!parsed.valid) {\n return textResponse(\n `수량은 0 보다 큰 숫자만 입력할 수 있습니다. (인식된 수량 토큰: \"${\n parsed.lastToken ?? \"\"\n }\")`,\n );\n }\n if (command === \"추가\" && endsWithBareNumber(parsed.item)) {\n return textResponse(\n `항목 이름(\"${parsed.item}\") 끝에 숫자가 포함되어 있어 추가하지 않았습니다.`,\n );\n }\n\n const result = await applyStackAction(\n blob,\n channel,\n command === \"추가\" ? \"추가\" : \"차감\",\n parsed.item,\n parsed.amount,\n historyMeta,\n );\n return textResponse(result.message, 200);\n }\n\n if (command === \"삭제\") {\n const result = await applyStackAction(\n blob,\n channel,\n \"삭제\",\n parts.slice(1).join(\" \"),\n undefined,\n historyMeta,\n );\n return textResponse(result.message, 200);\n }\n\n if (command === \"초기화\") {\n const result = await applyStackAction(\n blob,\n channel,\n \"초기화\",\n undefined,\n undefined,\n historyMeta,\n );\n return textResponse(result.message, 200);\n }\n\n return textResponse(\n \"알 수 없는 명령입니다. (추가/차감/삭제/초기화)\",\n 200,\n );\n });\n}\n\n// Main (HTTP)\n\nexport default async function (req: Request): Promise {\n const { blob } = await import(\"https://esm.town/v/std/blob\");\n const url = new URL(req.url);\n\n // /admin 은 기록 조회까지 공개하고, 관리 패널은 로그인한 관리자에게만 내려준다.\n if (url.pathname === \"/admin\") {\n const adminUser = await getAuthenticatedAdminUser(req);\n\n // ?login=1 은 브라우저 로그인 창을 띄우기 위한 주소다.\n // 로그인 창을 같은 경로(/admin)에서 띄워야 이후 요청에도 인증 정보가 함께 간다.\n if (url.searchParams.has(\"login\")) {\n if (!adminUser) return unauthorizedResponse();\n const back = new URL(url.href);\n back.searchParams.delete(\"login\");\n return redirectResponse(back.pathname + back.search);\n }\n\n return htmlResponse(renderAdminHtml(!!adminUser));\n }\n if (url.pathname === \"/monitor\") return htmlResponse(MONITOR_HTML);\n\n // 알림용 서비스워커. 반드시 최상위 경로(/sw.js)에서 내려줘야 사이트 전체를 담당한다.\n if (url.pathname === \"/sw.js\") {\n return new Response(SERVICE_WORKER_JS, {\n headers: {\n \"content-type\": \"text/javascript; charset=utf-8\",\n \"cache-control\": \"no-cache\",\n \"service-worker-allowed\": \"/\",\n \"x-content-type-options\": \"nosniff\",\n },\n });\n }\n\n // 예전 주소로 들어오거나 이미 공유된 링크를 눌러도 통합된 화면으로 보낸다.\n if (url.pathname === \"/history\") {\n return redirectResponse(\"/admin\" + url.search);\n }\n\n if (url.pathname === \"/api/stack\") {\n return handleStackJsonApi(req, url, blob);\n }\n if (url.pathname === \"/api/donation\") {\n return handleDonationApi(req, url, blob);\n }\n if (url.pathname === \"/api/history\") {\n return handleHistoryJsonApi(req, url, blob);\n }\n\n if (url.pathname === \"/admin/maintenance-status\") {\n if (!(await checkAuth(req))) return unauthorizedResponse();\n return jsonResponse({ ok: true, on: await getMaintenanceMode(blob) });\n }\n\n if (url.pathname === \"/admin/maintenance\" && req.method === \"POST\") {\n if (!(await checkAuth(req))) return unauthorizedResponse();\n if (!sameOrigin(req, url)) return forbiddenResponse();\n const body = await readJsonBody(req);\n if (!body || typeof body.on !== \"boolean\") {\n return jsonResponse(\n { ok: false, error: \"on(boolean)이 필요합니다.\" },\n 400,\n );\n }\n await setMaintenanceMode(blob, body.on);\n return jsonResponse({ ok: true, on: body.on });\n }\n\n // 시간 기준 운영에서는 YouTube 연동을 쓰지 않는다.\n // 남아 있는 워커나 Push 알림이 들어오면 로그에서 바로 보이도록 410으로 응답한다.\n if (\n url.pathname === \"/youtube-check\" ||\n url.pathname.startsWith(\"/youtube-webhook\")\n ) {\n return jsonResponse({\n ok: false,\n error:\n \"YouTube 자동 초기화는 사용하지 않습니다. (매일 06:00 초기화로 운영)\",\n }, 410);\n }\n\n return handleNightbotRequest(req, url, blob);\n}","aguking-stack",[],[223],["D",1789044918857],[],[18],"e9f69516-3243-4254-b5c2-2e1f1ede405c","cron.ts","76069368-acbf-11f1-9e7d-1607ee4eb77e",377,["D",1789109900008],8,"interval","// 매일 06:00 KST 스택 초기화 (시간 기준, B)\n// Val Town Cron 스케줄은 지금 설정 그대로 두면 된다. (UTC 기준 0 21 * * * = KST 06:00)\n//\n// - main.ts 의 /api/stack 에 trigger:\"daily-reset\" 으로 초기화를 요청한다.\n// → History에 \"자동초기화(06시)\"로 기록된다.\n// - 일시적인 오류(네트워크, 5xx)는 최대 3번까지 다시 시도한다.\n// 서버가 최근 1시간 안의 매일 초기화를 건너뛰므로 재시도해도 두 번 초기화되지 않는다.\n\nconst STACK_API_URL = \"https://aguking-stack.val.run/api/stack\";\nconst STACK_API_SECRET = Deno.env.get(\"STACK_API_SECRET\") || \"\";\nconst CHANNEL = \"암본이수혁aguking\";\n\nconst MAX_ATTEMPTS = 3;\nconst REQUEST_TIMEOUT_MS = 15_000;\nconst RETRY_DELAY_MS = 5_000;\n\nexport default async function (_interval: Interval) {\n if (!STACK_API_SECRET) {\n console.error(\"STACK_API_SECRET이 없어 매일 초기화를 실행할 수 없습니다.\");\n return;\n }\n\n for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) {\n try {\n const res = await fetch(STACK_API_URL, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-stack-key\": STACK_API_SECRET,\n },\n body: JSON.stringify({\n channel: CHANNEL,\n action: \"초기화\",\n trigger: \"daily-reset\",\n }),\n signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),\n });\n const data = await res.json().catch(() => null);\n\n if (res.ok && data?.ok) {\n console.log(\n data.skipped ? \"매일 초기화 건너뜀:\" : \"매일 초기화 성공:\",\n data.message,\n );\n return;\n }\n\n console.error(\n `매일 초기화 실패 (${attempt}/${MAX_ATTEMPTS}):`,\n res.status,\n data,\n );\n // 인증·요청 오류(4xx)는 다시 시도해도 결과가 같으므로 바로 끝낸다.\n if (res.status >= 400 && res.status < 500) return;\n } catch (err) {\n console.error(\n `매일 초기화 요청 오류 (${attempt}/${MAX_ATTEMPTS}):`,\n String(err),\n );\n }\n\n if (attempt < MAX_ATTEMPTS) {\n await new Promise((resolve) => setTimeout(resolve, RETRY_DELAY_MS));\n }\n }\n}",[],[234],["D",1787817154621],["D",1789497078049],{"_11":12,"_152":74},{"_11":12,"_147":148,"_73":74,"_30":72,"_149":150,"_151":24},{"_41":138,"_13":16,"_35":38,"_139":100,"_140":-5,"_141":-5,"_142":-5,"_143":-5,"_144":-5,"_145":14,"_146":12},"ctx",{"_55":-5,"_171":281,"_282":283,"_284":285,"_286":24,"_287":24,"_288":24,"_289":112,"_290":-5,"_291":-7,"_292":-7,"_293":26,"_294":24,"_295":24,"_296":-5,"_297":24,"_298":24,"_299":24,"_300":-5},"ENV",{"_252":253,"_254":255,"_256":16,"_257":258,"_259":260,"_261":262,"_263":264,"_265":266,"_267":268,"_269":270,"_271":272,"_273":274,"_275":276,"_277":278,"_279":280},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

엑셀 - ${escapeHtml(channel)}

엑셀 관리 - ${escapeHtml(channel)}

🎬 ${escapeHtml(CHANNEL_NAME)}

Stack Monitoring · aguking-stack

Stack ${\n isAdmin ? \"Admin\" : \"History\"\n } · aguking-stack

History · excel.ts