[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_215":216,"_217":218},"routes/_app.x.$handle.$name",{"_98":97,"_32":45,"_107":88,"_27":108,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":25,"_122":123,"_124":57,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":-5,"_53":-5,"_18":54,"_55":31,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":25},"version",398,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","e746b2fa-a4ff-11f1-8cae-1607ee4eb77e","name","fileType","http","content","// ver.4.4 main.ts — 서버 로직. 화면/상수는 ./ui.ts 에 있다. (val.town 80,000자 제한 때문에 분리)\n// ui.ts 와 반드시 같은 버전끼리 배포할 것. (import 이름이 하나만 어긋나도 전체가 멈춘다)\n// 4.4 수정분: 투네이션 후원 ID 를 적립이 끝난 뒤에 저장 / 흡연·금연 후원 상쇄\nimport {\n isSafeChannelName,\n isSafeItemName,\n label,\n MONITOR_HTML,\n normalizeChannel,\n renderAdminHtml,\n toNfc,\n} from \"./ui.ts\";\n\n// ver. 3 core: security + concurrency + JSON API + dedupe\n\nfunction getAdminAccounts(): Map {\n const rawAccounts = Deno.env.get(\"ADMIN_ACCOUNTS\") || \"\";\n const accounts = new Map();\n\n for (const entry of rawAccounts.split(\",\")) {\n const separatorIndex = entry.indexOf(\":\");\n if (separatorIndex <= 0) continue;\n\n const username = toNfc(entry.slice(0, separatorIndex).trim());\n const password = entry.slice(separatorIndex + 1).trim();\n if (username && password) accounts.set(username, password);\n }\n\n return accounts;\n}\n\nfunction timingSafeEqualText(a: string, b: string): boolean {\n const left = new TextEncoder().encode(a);\n const right = new TextEncoder().encode(b);\n let diff = left.length ^ right.length;\n const length = Math.max(left.length, right.length);\n\n for (let i = 0; i < length; i++) {\n diff |= (left[i] || 0) ^ (right[i] || 0);\n }\n\n return diff === 0;\n}\n\nfunction bytesToHex(buffer: ArrayBuffer): string {\n return Array.from(new Uint8Array(buffer))\n .map((b) => b.toString(16).padStart(2, \"0\"))\n .join(\"\");\n}\n\nasync function sha256Hex(value: string): Promise {\n return bytesToHex(\n await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(value)),\n );\n}\n\nasync function getAuthenticatedAdminUser(req: Request): Promise {\n const accounts = getAdminAccounts();\n if (!accounts.size) return null;\n\n const authHeader = req.headers.get(\"authorization\") || \"\";\n if (!authHeader.startsWith(\"Basic \")) return null;\n\n try {\n // 브라우저는 한글 아이디/비밀번호를 UTF-8로 보내므로 UTF-8로 풀어야 비교가 맞는다.\n const decoded = new TextDecoder().decode(\n Uint8Array.from(\n atob(authHeader.slice(\"Basic \".length)),\n (c) => c.charCodeAt(0),\n ),\n );\n const separatorIndex = decoded.indexOf(\":\");\n if (separatorIndex < 0) return null;\n\n const inputUser = toNfc(decoded.slice(0, separatorIndex).trim());\n const inputPassword = decoded.slice(separatorIndex + 1);\n const stored = accounts.get(inputUser);\n if (!stored) return null;\n\n const valid = stored.startsWith(\"sha256$\")\n ? timingSafeEqualText(\n await sha256Hex(inputPassword),\n stored.slice(\"sha256$\".length),\n )\n : timingSafeEqualText(inputPassword, stored);\n\n return valid ? inputUser : null;\n } catch {\n return null;\n }\n}\n\nasync function checkAuth(req: Request): Promise {\n return (await getAuthenticatedAdminUser(req)) !== null;\n}\n\nconst STACK_API_SECRET = Deno.env.get(\"STACK_API_SECRET\") || \"\";\n\nfunction checkStackApiKey(req: Request): boolean {\n if (!STACK_API_SECRET) return false;\n\n const headerKey = req.headers.get(\"x-stack-key\") || \"\";\n if (headerKey && timingSafeEqualText(headerKey, STACK_API_SECRET)) {\n return true;\n }\n\n const url = new URL(req.url);\n const queryKey = url.searchParams.get(\"key\") || \"\";\n return !!queryKey && timingSafeEqualText(queryKey, STACK_API_SECRET);\n}\n\nfunction unauthorizedResponse(): Response {\n return jsonResponse({ ok: false, error: \"인증이 필요합니다.\" }, 401, {\n \"WWW-Authenticate\": 'Basic realm=\"Admin Area\", charset=\"UTF-8\"',\n });\n}\n\nfunction forbiddenResponse(): Response {\n return jsonResponse({ ok: false, error: \"권한이 없습니다.\" }, 403);\n}\n\nfunction jsonResponse(\n body: unknown,\n status = 200,\n extraHeaders: Record = {},\n): Response {\n return new Response(JSON.stringify(body), {\n status,\n headers: {\n \"content-type\": \"application/json; charset=utf-8\",\n \"cache-control\": \"no-store\",\n \"x-content-type-options\": \"nosniff\",\n \"referrer-policy\": \"no-referrer\",\n ...extraHeaders,\n },\n });\n}\n\nfunction textResponse(\n body: string,\n status = 200,\n extraHeaders: Record = {},\n): Response {\n return new Response(body, {\n status,\n headers: {\n \"content-type\": \"text/plain; charset=utf-8\",\n \"cache-control\": \"no-store\",\n \"x-content-type-options\": \"nosniff\",\n \"referrer-policy\": \"no-referrer\",\n ...extraHeaders,\n },\n });\n}\n\nfunction redirectResponse(location: string): Response {\n // 302 를 쓴다. 301 은 브라우저가 오래 캐시해서 나중에 되돌리기 어렵다.\n return new Response(null, {\n status: 302,\n headers: {\n location,\n \"cache-control\": \"no-store\",\n \"referrer-policy\": \"no-referrer\",\n },\n });\n}\n\n// 알림 전용 서비스워커.\n// 페이지에서 직접 띄우는 알림과 달리, 탭이 백그라운드에서 멈춰 있어도 배너가 뜬다.\n// 알림을 누르면 이미 열려 있는 /admin 탭으로 이동하고, 없으면 새로 연다.\nconst SERVICE_WORKER_JS =\n `self.addEventListener(\"install\", () => self.skipWaiting());\nself.addEventListener(\"activate\", (e) => e.waitUntil(self.clients.claim()));\nself.addEventListener(\"notificationclick\", (e) => {\n e.notification.close();\n e.waitUntil((async () => {\n const wins = await self.clients.matchAll({ type: \"window\", includeUncontrolled: true });\n for (const w of wins) {\n if (w.url.indexOf(\"/admin\") !== -1) return w.focus();\n }\n return self.clients.openWindow(\"/admin\");\n })());\n});\n`;\n\nfunction htmlResponse(html: string): Response {\n return new Response(html, {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n \"cache-control\": \"no-store\",\n \"x-content-type-options\": \"nosniff\",\n \"referrer-policy\": \"no-referrer\",\n },\n });\n}\n\n// Maintenance\n\nconst MAINTENANCE_KEY = \"system_maintenance\";\nconst MAINTENANCE_MESSAGE = \"🚧 스택봇 점검중입니다.\";\n\nasync function safeGetJSON(\n blobStore: { getJSON: (k: string) => Promise },\n key: string,\n fallback: T,\n): Promise {\n try {\n return ((await blobStore.getJSON(key)) as T) ?? fallback;\n } catch {\n return fallback;\n }\n}\n\nasync function getMaintenanceMode(\n blob: { getJSON: (k: string) => Promise },\n): Promise {\n const value = await safeGetJSON<{ on?: boolean } | null>(\n blob,\n MAINTENANCE_KEY,\n null,\n );\n return value?.on === true;\n}\n\nasync function setMaintenanceMode(\n blob: { setJSON: (k: string, v: unknown) => Promise },\n on: boolean,\n): Promise {\n await blob.setJSON(MAINTENANCE_KEY, { on: !!on });\n}\n\n// Validation / parsing\n\nfunction roundAmount(n: number): number {\n return Math.round(n * 1e6) / 1e6;\n}\n\nfunction parsePositiveAmount(value: unknown): number | null {\n const s = String(value ?? \"\").trim();\n if (!/^\\d+(?:\\.\\d+)?$/.test(s)) return null;\n\n const n = Number(s);\n if (!Number.isFinite(n) || n <= 0 || n > 1_000_000_000) return null;\n return roundAmount(n);\n}\n\ntype ParsedCommandAmount = {\n item: string;\n amount: number;\n valid: boolean;\n // 수량으로 인식하려던 마지막 토큰 (오류 안내 문구용)\n lastToken: string | null;\n};\n\nfunction endsWithBareNumber(item: string): boolean {\n return /(^|\\s)-?\\d+(?:\\.\\d+)?$/.test(item.trim());\n}\n\nfunction splitItemAndAmount(rest: string[]): ParsedCommandAmount {\n const tokens = rest.map((token) => toNfc(token.trim())).filter(Boolean);\n if (!tokens.length) {\n return { item: \"\", amount: 1, valid: true, lastToken: null };\n }\n\n const last = tokens[tokens.length - 1];\n if (tokens.length === 1 || !/^-?(?:\\d+(?:\\.\\d+)?)$/.test(last)) {\n return { item: tokens.join(\" \"), amount: 1, valid: true, lastToken: last };\n }\n\n const item = tokens.slice(0, -1).join(\" \");\n const amount = parsePositiveAmount(last);\n return amount === null\n ? { item, amount: 0, valid: false, lastToken: last }\n : { item, amount, valid: true, lastToken: last };\n}\n\nfunction normalizeItem(raw: unknown): string {\n return toNfc(String(raw ?? \"\").trim());\n}\n\nfunction sanitizeStack(input: unknown): Record {\n const out: Record = Object.create(null);\n if (!input || typeof input !== \"object\" || Array.isArray(input)) return out;\n\n for (\n const [rawItem, rawValue] of Object.entries(\n input as Record,\n )\n ) {\n const item = normalizeItem(rawItem);\n const value = Number(rawValue);\n if (!isSafeItemName(item) || !Number.isFinite(value) || value <= 0) {\n continue;\n }\n out[item] = roundAmount((out[item] || 0) + value);\n }\n return out;\n}\n\n// History: bounded + normalized + exact-duplicate removal\n\nconst MAX_HISTORY_ENTRIES = 1000;\n\ninterface HistoryEntry {\n time: string;\n action: \"추가\" | \"차감\" | \"삭제\" | \"초기화\";\n item?: string;\n source?:\n | \"nightbot\"\n | \"admin\"\n | \"api\"\n | \"youtube-auto\"\n | \"cron\"\n | \"toonation\";\n actor?: string;\n amount?: number;\n count?: number;\n}\n\nfunction historyFingerprint(entry: HistoryEntry): string {\n return JSON.stringify([\n entry.time,\n entry.action,\n entry.source || \"\",\n entry.actor || \"\",\n entry.item || \"\",\n entry.amount ?? null,\n entry.count ?? null,\n ]);\n}\n\nfunction sanitizeHistory(input: unknown): HistoryEntry[] {\n if (!Array.isArray(input)) return [];\n\n const seen = new Set();\n const out: HistoryEntry[] = [];\n\n for (const raw of input) {\n if (!raw || typeof raw !== \"object\") continue;\n const e = raw as Partial;\n if (typeof e.time !== \"string\") continue;\n if (![\"추가\", \"차감\", \"삭제\", \"초기화\"].includes(e.action || \"\")) continue;\n\n const item = e.item === undefined ? undefined : normalizeItem(e.item);\n if (item !== undefined && !isSafeItemName(item)) continue;\n\n const amount = e.amount === undefined ? undefined : Number(e.amount);\n const count = e.count === undefined ? undefined : Number(e.count);\n if (amount !== undefined && (!Number.isFinite(amount) || amount <= 0)) {\n continue;\n }\n if (count !== undefined && (!Number.isFinite(count) || count < 0)) continue;\n\n const clean: HistoryEntry = {\n time: e.time,\n action: e.action as HistoryEntry[\"action\"],\n ...(typeof e.source === \"string\"\n ? { source: e.source as HistoryEntry[\"source\"] }\n : {}),\n ...(typeof e.actor === \"string\" ? { actor: e.actor.slice(0, 100) } : {}),\n ...(item === undefined ? {} : { item }),\n ...(amount === undefined ? {} : { amount: roundAmount(amount) }),\n ...(count === undefined ? {} : { count: roundAmount(count) }),\n };\n\n const fp = historyFingerprint(clean);\n if (seen.has(fp)) continue;\n seen.add(fp);\n out.push(clean);\n }\n\n return out\n .sort((a, b) => new Date(a.time).getTime() - new Date(b.time).getTime())\n .slice(-MAX_HISTORY_ENTRIES);\n}\n\nasync function readHistory(\n blob: { getJSON: (k: string) => Promise },\n channel: string,\n): Promise {\n return sanitizeHistory(await safeGetJSON(blob, `history_${channel}`, null));\n}\n\nasync function appendHistory(\n blob: {\n getJSON: (k: string) => Promise;\n setJSON: (k: string, v: unknown) => Promise;\n },\n channel: string,\n entry: HistoryEntry,\n): Promise {\n const history = await readHistory(blob, channel);\n const clean: HistoryEntry = {\n ...entry,\n item: entry.item === undefined ? undefined : normalizeItem(entry.item),\n amount: entry.amount === undefined ? undefined : roundAmount(entry.amount),\n count: entry.count === undefined ? undefined : roundAmount(entry.count),\n };\n\n const fp = historyFingerprint(clean);\n if (!history.some((e) => historyFingerprint(e) === fp)) {\n history.push(clean);\n }\n\n await blob.setJSON(`history_${channel}`, sanitizeHistory(history));\n}\n\nfunction formatStack(stack: Record): string {\n const keys = Object.keys(stack);\n if (!keys.length) return \"🤖 현재 스택 없음.\";\n return keys.map((k) => `${label(k)} ${roundAmount(stack[k])}`).join(\", \");\n}\n\n// Unified stack action engine (single source of truth)\n\ntype StackAction = \"추가\" | \"차감\" | \"삭제\" | \"초기화\";\n\nconst STACK_ACTIONS: readonly string[] = [\"추가\", \"차감\", \"삭제\", \"초기화\"];\n\nfunction isStackAction(value: string): value is StackAction {\n return STACK_ACTIONS.includes(value);\n}\n\ntype ActionResult = {\n ok: boolean;\n action?: StackAction;\n channel: string;\n item?: string;\n amount?: number;\n count?: number;\n stack: Record;\n message: string;\n error?: string;\n};\n\nasync function readStack(\n blob: { getJSON: (k: string) => Promise },\n channel: string,\n): Promise> {\n return sanitizeStack(await safeGetJSON(blob, `stack_${channel}`, null));\n}\n\nasync function writeStack(\n blob: { setJSON: (k: string, v: unknown) => Promise },\n channel: string,\n stack: Record,\n): Promise {\n await blob.setJSON(`stack_${channel}`, sanitizeStack(stack));\n}\n\nasync function applyStackAction(\n blob: {\n getJSON: (k: string) => Promise;\n setJSON: (k: string, v: unknown) => Promise;\n delete: (k: string) => Promise;\n },\n channel: string,\n action: StackAction,\n rawItem?: unknown,\n rawAmount?: unknown,\n historyMeta: Pick = {},\n): Promise {\n const item = normalizeItem(rawItem);\n const amount = rawAmount === undefined ? 1 : parsePositiveAmount(rawAmount);\n const stack = await readStack(blob, channel);\n\n if (action === \"초기화\") {\n await blob.delete(`stack_${channel}`);\n await appendHistory(blob, channel, {\n time: new Date().toISOString(),\n action: \"초기화\",\n ...historyMeta,\n });\n return {\n ok: true,\n action,\n channel,\n stack: Object.create(null),\n message: \"스택을 초기화했습니다.\",\n };\n }\n\n if (!item) {\n return {\n ok: false,\n channel,\n stack,\n message: \"항목을 입력해주세요.\",\n error: \"INVALID_ITEM\",\n };\n }\n if (!isSafeItemName(item)) {\n return {\n ok: false,\n channel,\n stack,\n message: \"항목 이름은 1~100 자로 입력해주세요.\",\n error: \"INVALID_ITEM\",\n };\n }\n if (amount === null) {\n return {\n ok: false,\n channel,\n item,\n stack,\n message: \"수량은 0 보다 큰 숫자만 입력할 수 있습니다.\",\n error: \"INVALID_AMOUNT\",\n };\n }\n\n if (action === \"추가\") {\n const next = roundAmount((stack[item] || 0) + amount);\n stack[item] = next;\n await writeStack(blob, channel, stack);\n await appendHistory(blob, channel, {\n time: new Date().toISOString(),\n action,\n item,\n amount,\n count: next,\n ...historyMeta,\n });\n return {\n ok: true,\n action,\n channel,\n item,\n amount,\n count: next,\n stack,\n message: `${label(item)} ${next}`,\n };\n }\n\n if (action === \"차감\") {\n if (!(item in stack)) {\n return {\n ok: false,\n action,\n channel,\n item,\n amount,\n stack,\n message: `${label(item)} 항목이 없습니다.`,\n error: \"NOT_FOUND\",\n };\n }\n const next = roundAmount(stack[item] - amount);\n if (next <= 0) {\n delete stack[item];\n await writeStack(blob, channel, stack);\n await appendHistory(blob, channel, {\n time: new Date().toISOString(),\n action,\n item,\n amount,\n count: 0,\n ...historyMeta,\n });\n return {\n ok: true,\n action,\n channel,\n item,\n amount,\n count: 0,\n stack,\n message: `${label(item)} 0 이하가 되어 삭제했습니다.`,\n };\n }\n stack[item] = next;\n await writeStack(blob, channel, stack);\n await appendHistory(blob, channel, {\n time: new Date().toISOString(),\n action,\n item,\n amount,\n count: next,\n ...historyMeta,\n });\n return {\n ok: true,\n action,\n channel,\n item,\n amount,\n count: next,\n stack,\n message: `${label(item)} ${next}`,\n };\n }\n\n if (!(item in stack)) {\n return {\n ok: false,\n action,\n channel,\n item,\n stack,\n message: `${label(item)} 항목이 없습니다.`,\n error: \"NOT_FOUND\",\n };\n }\n delete stack[item];\n await writeStack(blob, channel, stack);\n await appendHistory(blob, channel, {\n time: new Date().toISOString(),\n action,\n item,\n ...historyMeta,\n });\n return {\n ok: true,\n action,\n channel,\n item,\n stack,\n message: `${label(item)} 삭제했습니다.`,\n };\n}\n\n// Concurrency: serialize every mutation by normalized channel.\n\nconst channelLocks = new Map>();\n\nasync function withChannelLock(\n channel: string,\n task: () => Promise,\n): Promise {\n const previous = channelLocks.get(channel) || Promise.resolve();\n let release!: () => void;\n const current = new Promise((resolve) => {\n release = resolve;\n });\n channelLocks.set(channel, current);\n await previous;\n try {\n return await task();\n } finally {\n release();\n if (channelLocks.get(channel) === current) channelLocks.delete(channel);\n }\n}\n\n// JSON API helpers\n\nconst MAX_JSON_BODY_BYTES = 16 * 1024;\n\nasync function readJsonBody(\n req: Request,\n): Promise | null> {\n const contentLength = Number(req.headers.get(\"content-length\") || 0);\n if (Number.isFinite(contentLength) && contentLength > MAX_JSON_BODY_BYTES) {\n return null;\n }\n try {\n const text = await req.text();\n if (new TextEncoder().encode(text).byteLength > MAX_JSON_BODY_BYTES) {\n return null;\n }\n const body = JSON.parse(text);\n return body && typeof body === \"object\" && !Array.isArray(body)\n ? body as Record\n : null;\n } catch {\n return null;\n }\n}\n\nfunction sameOrigin(req: Request, url: URL): boolean {\n const origin = req.headers.get(\"origin\");\n const referer = req.headers.get(\"referer\");\n const valid = (value: string | null) => {\n if (!value) return false;\n try {\n return new URL(value).origin === url.origin;\n } catch {\n return false;\n }\n };\n return valid(origin) || valid(referer);\n}\n\nfunction getValidatedChannel(raw: unknown): string | null {\n const value = toNfc(String(raw ?? \"\").trim());\n if (!value || !isSafeChannelName(value)) return null;\n return normalizeChannel(value);\n}\n\ntype BlobStore = {\n getJSON: (key: string) => Promise;\n setJSON: (key: string, value: unknown) => Promise;\n delete: (key: string) => Promise;\n};\n\n// 매일 06:00 크론(cron.ts)이 보내는 초기화 요청 표시\nconst DAILY_RESET_TRIGGER = \"daily-reset\";\n// 크론 재시도 등으로 같은 초기화가 두 번 기록되지 않도록 이 시간 안의 중복 요청은 건너뛴다.\nconst DAILY_RESET_DEDUPE_MS = 60 * 60 * 1000;\n\n// JSON API: GET /api/stack?ch= (공개 조회)\n// POST /api/stack (관리자 화면 또는 API Key)\nasync function handleStackJsonApi(\n req: Request,\n url: URL,\n blob: BlobStore,\n): Promise {\n if (req.method === \"GET\") {\n const channel = getValidatedChannel(url.searchParams.get(\"ch\"));\n if (!channel) {\n return jsonResponse(\n { ok: false, error: \"유효하지 않은 채널명입니다.\" },\n 400,\n );\n }\n return await withChannelLock(channel, async () => {\n const stack = await readStack(blob, channel);\n return jsonResponse({\n ok: true,\n channel,\n stack,\n items: Object.entries(stack).map(([item, count]) => ({\n item,\n label: label(item),\n count,\n })),\n });\n });\n }\n\n if (req.method !== \"POST\") {\n return jsonResponse({ ok: false, error: \"Method Not Allowed\" }, 405, {\n Allow: \"GET, POST\",\n });\n }\n\n // 관리자(Basic 인증)는 같은 출처(관리자 화면)에서 온 요청만 허용한다.\n // API Key 요청은 서버 간 호출이므로 출처 검사를 하지 않는다.\n const adminUser = await getAuthenticatedAdminUser(req);\n const apiKey = checkStackApiKey(req);\n if (!adminUser && !apiKey) return forbiddenResponse();\n if (!apiKey && !sameOrigin(req, url)) return forbiddenResponse();\n\n const body = await readJsonBody(req);\n if (!body) {\n return jsonResponse({\n ok: false,\n error: \"JSON body가 올바르지 않거나 너무 큽니다.\",\n }, 400);\n }\n\n const channel = getValidatedChannel(body.channel);\n if (!channel) {\n return jsonResponse(\n { ok: false, error: \"유효하지 않은 채널명입니다.\" },\n 400,\n );\n }\n\n const action = toNfc(String(body.action ?? \"\"));\n\n // 기록초기화는 되돌릴 수 없으므로 관리자만 실행할 수 있다.\n if (action === \"기록초기화\") {\n if (!adminUser) return forbiddenResponse();\n return await withChannelLock(channel, async () => {\n await blob.delete(`history_${channel}`);\n return jsonResponse({\n ok: true,\n action,\n channel,\n message: \"기록 (History) 을 초기화했습니다.\",\n });\n });\n }\n\n if (!isStackAction(action)) {\n return jsonResponse(\n { ok: false, error: \"지원하지 않는 action입니다.\" },\n 400,\n );\n }\n\n const isDailyReset = !adminUser && apiKey && action === \"초기화\" &&\n body.trigger === DAILY_RESET_TRIGGER;\n const historyMeta: Pick = adminUser\n ? { source: \"admin\", actor: adminUser }\n : isDailyReset\n ? { source: \"cron\", actor: \"매일 06:00 초기화\" }\n : { source: \"api\", actor: \"API Key\" };\n\n return await withChannelLock(channel, async () => {\n if (isDailyReset) {\n const now = Date.now();\n const history = await readHistory(blob, channel);\n const alreadyDone = history.some((e) =>\n e.action === \"초기화\" &&\n e.source === \"cron\" &&\n now - Date.parse(e.time) < DAILY_RESET_DEDUPE_MS\n );\n if (alreadyDone) {\n return jsonResponse({\n ok: true,\n action,\n channel,\n skipped: true,\n stack: await readStack(blob, channel),\n message: \"최근 1시간 안에 매일 초기화를 이미 실행해서 건너뜁니다.\",\n });\n }\n }\n\n const result = await applyStackAction(\n blob,\n channel,\n action,\n body.item,\n body.amount,\n historyMeta,\n );\n return jsonResponse(result, result.ok ? 200 : 400);\n });\n}\n\nasync function handleHistoryJsonApi(\n req: Request,\n url: URL,\n blob: Pick,\n): Promise {\n if (req.method !== \"GET\") {\n return jsonResponse({ ok: false, error: \"Method Not Allowed\" }, 405, {\n Allow: \"GET\",\n });\n }\n const channel = getValidatedChannel(url.searchParams.get(\"ch\"));\n if (!channel) {\n return jsonResponse(\n { ok: false, error: \"유효하지 않은 채널명입니다.\" },\n 400,\n );\n }\n\n // 후원 기록 자체는 공개하되, 비로그인 방문자에게는 후원자 닉네임을 가린다.\n // 화면에서만 가리면 /api/history 를 직접 열어 볼 수 있으므로 서버에서 바꿔서 내보낸다.\n // 마스킹 문구는 \"투네이션 후원\" 으로 둔다. 후원자가 투네이션에서 익명으로 보낸\n // 경우의 실제 표기(\"투네이션 익명\")와 헷갈리지 않게 하려는 것이다.\n // 투네이션 외 출처(admin 등)의 계정명은 그대로 비공개다.\n const DONOR_MASK = \"투네이션 후원\";\n const isAdmin = !!(await getAuthenticatedAdminUser(req));\n const history = (await readHistory(blob, channel)).map((entry) =>\n isAdmin ? entry : {\n ...entry,\n actor: entry.source === \"toonation\" ? DONOR_MASK : undefined,\n }\n );\n\n const payload = { ok: true, channel, history };\n\n // 기록이 바뀌지 않았으면 본문 없이 304로 응답한다.\n // (History 페이지를 자동 새로고침으로 오래 켜 둬도 같은 데이터를 매번 다시 받지 않게)\n const etag = `\"${(await sha256Hex(JSON.stringify(payload))).slice(0, 32)}\"`;\n const ifNoneMatch = (req.headers.get(\"if-none-match\") || \"\").replace(\n /^W\\//,\n \"\",\n );\n if (ifNoneMatch === etag) {\n return new Response(null, {\n status: 304,\n headers: {\n etag,\n vary: \"Authorization\",\n \"cache-control\": \"no-store\",\n \"x-content-type-options\": \"nosniff\",\n \"referrer-policy\": \"no-referrer\",\n },\n });\n }\n return jsonResponse(payload, 200, { etag, vary: \"Authorization\" });\n}\n\n// Toonation 후원 → 스택 자동 적립\n//\n// 금액을 기준 단가의 정수 조합으로 푼다.\n// 11,900 × a + 12,000 × b = 후원금액\n// 예) 11900 → 흡연 1 / 24000 → 금연 2 / 23900 → 흡연 1 + 금연 1\n// 두 단가가 100원밖에 차이나지 않아서 금액이 커지면 조합이 여러 개 나올 수 있다.\n// (예: 1,428,000 = 11900×120 = 12000×119) 이런 금액은 자동 적립하지 않고 보류한다.\nconst DONATION_UNITS: readonly { unit: number; item: string }[] = [\n { unit: 11900, item: \"흡연\" },\n { unit: 12000, item: \"금연\" },\n];\n\n// 서로 상쇄되는 항목. 후원이 들어오면 반대 항목을 먼저 깎고, 남는 수량만 쌓는다.\n// 예) 흡연 1 에서 금연 1 후원 → 흡연 0 → 삭제 (금연은 쌓이지 않음)\n// 예) 흡연 1 에서 금연 3 후원 → 흡연 삭제 + 금연 2\n// 한쪽 방향만 상쇄하려면 해당 줄을 지우면 된다.\nconst DONATION_OPPOSITE: Record = {\n \"흡연\": \"금연\",\n \"금연\": \"흡연\",\n};\n\n// 조합이 여러 개일 때: \"hold\" = 적립 보류(수동 처리) / \"first\" = 첫 후보로 적립\nconst DONATION_AMBIGUOUS_POLICY: \"hold\" | \"first\" = \"hold\";\n\n// 같은 후원이 재시도로 두 번 들어오는 것을 막는다. (uid 를 보낸 경우에만 동작)\n// id(후원자 ID 등)는 중복 판단에 쓰지 않는다. 같은 사람이 연달아 후원해도 매번 쌓인다.\nconst MAX_DONATION_IDS = 300;\n\ntype DonationSplit = { item: string; count: number }[];\n\nfunction donationTotal(split: DonationSplit): number {\n return split.reduce((sum, s) => sum + s.count, 0);\n}\n\nfunction solveDonation(amount: number): DonationSplit[] {\n const [A, B] = DONATION_UNITS;\n const out: DonationSplit[] = [];\n\n for (let a = 0; a * A.unit <= amount; a++) {\n const rest = amount - a * A.unit;\n if (rest % B.unit !== 0) continue;\n const b = rest / B.unit;\n if (a + b < 1) continue;\n out.push([\n ...(a ? [{ item: A.item, count: a }] : []),\n ...(b ? [{ item: B.item, count: b }] : []),\n ]);\n }\n\n // 한 종류로 떨어지는 조합을 먼저, 그 다음 개수가 적은 조합을 먼저 본다.\n return out.sort((x, y) =>\n (x.length - y.length) || (donationTotal(x) - donationTotal(y))\n );\n}\n\nasync function readDonationIds(\n blob: Pick,\n channel: string,\n): Promise {\n const raw = await safeGetJSON(blob, `donation_ids_${channel}`, null);\n return Array.isArray(raw) ? raw.filter((v) => typeof v === \"string\") : [];\n}\n\ntype DonationChange = {\n action: \"추가\" | \"차감\";\n item: string;\n amount: number;\n total: number;\n};\n\n// 후원 한 조각(예: 금연 1)을 처리한다. 반대 항목이 있으면 먼저 깎는다.\n// 0 이 되면 applyStackAction 의 차감 로직이 항목을 삭제한다.\nasync function applyDonationPiece(\n blob: BlobStore,\n channel: string,\n item: string,\n count: number,\n historyMeta: Pick,\n): Promise {\n const changes: DonationChange[] = [];\n let rest = count;\n\n const opposite = DONATION_OPPOSITE[item];\n if (opposite) {\n const stack = await readStack(blob, channel);\n const offset = roundAmount(Math.min(stack[opposite] || 0, rest));\n if (offset > 0) {\n const r = await applyStackAction(\n blob,\n channel,\n \"차감\",\n opposite,\n offset,\n historyMeta,\n );\n if (!r.ok) throw new Error(r.message);\n changes.push({\n action: \"차감\",\n item: opposite,\n amount: offset,\n total: r.count ?? 0,\n });\n rest = roundAmount(rest - offset);\n }\n }\n\n if (rest > 0) {\n const r = await applyStackAction(\n blob,\n channel,\n \"추가\",\n item,\n rest,\n historyMeta,\n );\n if (!r.ok) throw new Error(r.message);\n changes.push({ action: \"추가\", item, amount: rest, total: r.count ?? 0 });\n }\n\n return changes;\n}\n\n// POST /api/donation (API Key 전용)\n// body: { channel, amount, id?, uid?, name?, message? }\n// id : 후원자 ID 등. 중복 판단에 쓰지 않는다. (같은 id 로 여러 번 와도 매번 적립)\n// uid : 후원 \"한 건\"마다 다른 고유값. 보냈을 때만 재시도 중복을 막는다. (생략 가능)\nasync function handleDonationApi(\n req: Request,\n _url: URL,\n blob: BlobStore,\n): Promise {\n if (req.method !== \"POST\") {\n return jsonResponse({ ok: false, error: \"Method Not Allowed\" }, 405, {\n Allow: \"POST\",\n });\n }\n if (!checkStackApiKey(req)) return forbiddenResponse();\n\n const body = await readJsonBody(req);\n if (!body) {\n return jsonResponse({\n ok: false,\n error: \"JSON body가 올바르지 않거나 너무 큽니다.\",\n }, 400);\n }\n\n const channel = getValidatedChannel(body.channel);\n if (!channel) {\n return jsonResponse(\n { ok: false, error: \"유효하지 않은 채널명입니다.\" },\n 400,\n );\n }\n\n const amount = Number(body.amount);\n if (!Number.isInteger(amount) || amount <= 0 || amount > 100_000_000) {\n return jsonResponse(\n { ok: false, error: \"후원 금액이 올바르지 않습니다.\" },\n 400,\n );\n }\n\n if (await getMaintenanceMode(blob)) {\n return jsonResponse({ ok: false, error: MAINTENANCE_MESSAGE }, 503);\n }\n\n const donationId = toNfc(String(body.uid ?? \"\").trim()).slice(0, 100);\n const donor = toNfc(String(body.name ?? \"\").trim()).slice(0, 50);\n\n return await withChannelLock(channel, async () => {\n const seen = donationId ? await readDonationIds(blob, channel) : [];\n\n // 중복 후원 차단\n if (donationId && seen.includes(donationId)) {\n return jsonResponse({\n ok: true,\n duplicated: true,\n channel,\n amount,\n stack: await readStack(blob, channel),\n message: \"이미 처리한 후원입니다.\",\n });\n }\n\n // 처리가 끝난 뒤에만 \"처리됨\"으로 기록한다.\n // (중간에 실패하면 기록하지 않으므로 같은 uid 로 재시도하면 다시 처리된다)\n const markSeen = async () => {\n if (!donationId) return;\n await blob.setJSON(\n `donation_ids_${channel}`,\n [...seen, donationId].slice(-MAX_DONATION_IDS),\n );\n };\n\n const candidates = solveDonation(amount);\n\n if (!candidates.length) {\n await markSeen();\n return jsonResponse({\n ok: true,\n matched: false,\n channel,\n amount,\n stack: await readStack(blob, channel),\n message:\n `${amount}원은 스택 단가 조합에 맞지 않아 적립하지 않았습니다.`,\n });\n }\n\n if (candidates.length > 1 && DONATION_AMBIGUOUS_POLICY === \"hold\") {\n await markSeen();\n return jsonResponse({\n ok: true,\n matched: false,\n held: true,\n channel,\n amount,\n candidates,\n stack: await readStack(blob, channel),\n message:\n `${amount}원은 해석이 여러 가지라 자동 적립하지 않았습니다. 관리자 화면에서 직접 처리해주세요.`,\n });\n }\n\n const historyMeta: Pick = {\n source: \"toonation\",\n actor: donor ? `투네이션 ${donor}` : \"투네이션\",\n };\n\n const changes: DonationChange[] = [];\n try {\n for (const { item, count } of candidates[0]) {\n changes.push(\n ...(await applyDonationPiece(\n blob,\n channel,\n item,\n count,\n historyMeta,\n )),\n );\n }\n } catch (err) {\n // \"처리됨\"으로 기록하지 않았으므로 같은 uid 로 다시 보내면 다시 처리된다.\n // changes 에는 실패 전까지 이미 반영된 변동이 들어 있다.\n return jsonResponse({\n ok: false,\n channel,\n amount,\n changes,\n stack: await readStack(blob, channel),\n error: \"적립 중 오류가 발생했습니다. 같은 내용으로 다시 보내주세요.\",\n detail: err instanceof Error ? err.message : String(err),\n }, 500);\n }\n\n await markSeen();\n\n const stack = await readStack(blob, channel);\n return jsonResponse({\n ok: true,\n matched: true,\n channel,\n amount,\n changes,\n stack,\n message: changes\n .map((c) =>\n c.action === \"추가\"\n ? `${label(c.item)} +${c.amount}`\n : `${label(c.item)} -${c.amount}${c.total === 0 ? \" (삭제)\" : \"\"}`\n )\n .join(\", \") || \"변동 없음\",\n });\n });\n}\n\n// 나이트봇 텍스트 API: /?ch=채널&q=명령&key=STACK_API_SECRET\n// - q가 없으면 현재 스택을 보여준다. (인증 불필요)\n// - 명령은 API Key로만 실행한다. 관리자 화면은 /api/stack(POST)을 쓴다.\nasync function handleNightbotRequest(\n req: Request,\n url: URL,\n blob: BlobStore,\n): Promise {\n const requestedQuery = toNfc((url.searchParams.get(\"q\") || \"\").trim());\n const channel = getValidatedChannel(url.searchParams.get(\"ch\"));\n\n if (!channel) return textResponse(\"채널명을 입력해주세요.\", 200);\n if (requestedQuery && !checkStackApiKey(req)) return forbiddenResponse();\n if (await getMaintenanceMode(blob)) {\n return textResponse(MAINTENANCE_MESSAGE, 200);\n }\n\n const historyMeta: Pick = {\n source: \"nightbot\",\n actor: \"nightbot\",\n };\n\n return await withChannelLock(channel, async () => {\n if (!requestedQuery) {\n return textResponse(formatStack(await readStack(blob, channel)));\n }\n\n const parts = requestedQuery.split(/\\s+/);\n const command = parts[0];\n\n if (command === \"기록초기화\") {\n return textResponse(\"기록초기화는 관리자 화면에서만 할 수 있습니다.\");\n }\n\n if (command === \"추가\" || command === \"차감\" || command === \"빼기\") {\n const parsed = splitItemAndAmount(parts.slice(1));\n if (!parsed.item) {\n return textResponse(\n command === \"추가\"\n ? \"사용법 : !스택 추가 [항목] [숫자 (생략가능, 소수 가능)]\"\n : \"사용법 : !스택 차감 (빼기) [항목] [숫자 (생략가능, 소수 가능)]\",\n );\n }\n if (!parsed.valid) {\n return textResponse(\n `수량은 0 보다 큰 숫자만 입력할 수 있습니다. (인식된 수량 토큰: \"${\n parsed.lastToken ?? \"\"\n }\")`,\n );\n }\n if (command === \"추가\" && endsWithBareNumber(parsed.item)) {\n return textResponse(\n `항목 이름(\"${parsed.item}\") 끝에 숫자가 포함되어 있어 추가하지 않았습니다.`,\n );\n }\n\n const result = await applyStackAction(\n blob,\n channel,\n command === \"추가\" ? \"추가\" : \"차감\",\n parsed.item,\n parsed.amount,\n historyMeta,\n );\n return textResponse(result.message, 200);\n }\n\n if (command === \"삭제\") {\n const result = await applyStackAction(\n blob,\n channel,\n \"삭제\",\n parts.slice(1).join(\" \"),\n undefined,\n historyMeta,\n );\n return textResponse(result.message, 200);\n }\n\n if (command === \"초기화\") {\n const result = await applyStackAction(\n blob,\n channel,\n \"초기화\",\n undefined,\n undefined,\n historyMeta,\n );\n return textResponse(result.message, 200);\n }\n\n return textResponse(\n \"알 수 없는 명령입니다. (추가/차감/삭제/초기화)\",\n 200,\n );\n });\n}\n\n// Main (HTTP)\n\nexport default async function (req: Request): Promise {\n const { blob } = await import(\"https://esm.town/v/std/blob\");\n const url = new URL(req.url);\n\n // /admin 은 기록 조회까지 공개하고, 관리 패널은 로그인한 관리자에게만 내려준다.\n if (url.pathname === \"/admin\") {\n const adminUser = await getAuthenticatedAdminUser(req);\n\n // ?login=1 은 브라우저 로그인 창을 띄우기 위한 주소다.\n // 로그인 창을 같은 경로(/admin)에서 띄워야 이후 요청에도 인증 정보가 함께 간다.\n if (url.searchParams.has(\"login\")) {\n if (!adminUser) return unauthorizedResponse();\n const back = new URL(url.href);\n back.searchParams.delete(\"login\");\n return redirectResponse(back.pathname + back.search);\n }\n\n return htmlResponse(renderAdminHtml(!!adminUser));\n }\n if (url.pathname === \"/monitor\") return htmlResponse(MONITOR_HTML);\n\n // 알림용 서비스워커. 반드시 최상위 경로(/sw.js)에서 내려줘야 사이트 전체를 담당한다.\n if (url.pathname === \"/sw.js\") {\n return new Response(SERVICE_WORKER_JS, {\n headers: {\n \"content-type\": \"text/javascript; charset=utf-8\",\n \"cache-control\": \"no-cache\",\n \"service-worker-allowed\": \"/\",\n \"x-content-type-options\": \"nosniff\",\n },\n });\n }\n\n // 예전 주소로 들어오거나 이미 공유된 링크를 눌러도 통합된 화면으로 보낸다.\n if (url.pathname === \"/history\") {\n return redirectResponse(\"/admin\" + url.search);\n }\n\n if (url.pathname === \"/api/stack\") {\n return handleStackJsonApi(req, url, blob);\n }\n if (url.pathname === \"/api/donation\") {\n return handleDonationApi(req, url, blob);\n }\n if (url.pathname === \"/api/history\") {\n return handleHistoryJsonApi(req, url, blob);\n }\n\n if (url.pathname === \"/admin/maintenance-status\") {\n if (!(await checkAuth(req))) return unauthorizedResponse();\n return jsonResponse({ ok: true, on: await getMaintenanceMode(blob) });\n }\n\n if (url.pathname === \"/admin/maintenance\" && req.method === \"POST\") {\n if (!(await checkAuth(req))) return unauthorizedResponse();\n if (!sameOrigin(req, url)) return forbiddenResponse();\n const body = await readJsonBody(req);\n if (!body || typeof body.on !== \"boolean\") {\n return jsonResponse(\n { ok: false, error: \"on(boolean)이 필요합니다.\" },\n 400,\n );\n }\n await setMaintenanceMode(blob, body.on);\n return jsonResponse({ ok: true, on: body.on });\n }\n\n // 시간 기준 운영에서는 YouTube 연동을 쓰지 않는다.\n // 남아 있는 워커나 Push 알림이 들어오면 로그에서 바로 보이도록 410으로 응답한다.\n if (\n url.pathname === \"/youtube-check\" ||\n url.pathname.startsWith(\"/youtube-webhook\")\n ) {\n return jsonResponse({\n ok: false,\n error:\n \"YouTube 자동 초기화는 사용하지 않습니다. (매일 06:00 초기화로 운영)\",\n }, 410);\n }\n\n return handleNightbotRequest(req, url, blob);\n}","// ver.4.5 main.ts — 서버 로직. 화면/상수는 ./ui.ts 에 있다. (val.town 80,000자 제한 때문에 분리)\n// ui.ts 와 반드시 같은 버전끼리 배포할 것. (import 이름이 하나만 어긋나도 전체가 멈춘다)\n// 4.5 수정분: 저장소 오류 fail-fast / API key 분리 / Nightbot 공지 / 후원은 점검모드 영향 제외\nimport {\n isSafeChannelName,\n isSafeItemName,\n label,\n MONITOR_HTML,\n normalizeChannel,\n renderAdminHtml,\n toNfc,\n} from \"./ui.ts\";\n\n// ver. 3 core: security + concurrency + JSON API + dedupe\n\nfunction getAdminAccounts(): Map {\n const rawAccounts = Deno.env.get(\"ADMIN_ACCOUNTS\") || \"\";\n const accounts = new Map();\n\n for (const entry of rawAccounts.split(\",\")) {\n const separatorIndex = entry.indexOf(\":\");\n if (separatorIndex <= 0) continue;\n\n const username = toNfc(entry.slice(0, separatorIndex).trim());\n const password = entry.slice(separatorIndex + 1).trim();\n if (username && password) accounts.set(username, password);\n }\n\n return accounts;\n}\n\nfunction timingSafeEqualText(a: string, b: string): boolean {\n const left = new TextEncoder().encode(a);\n const right = new TextEncoder().encode(b);\n let diff = left.length ^ right.length;\n const length = Math.max(left.length, right.length);\n\n for (let i = 0; i < length; i++) {\n diff |= (left[i] || 0) ^ (right[i] || 0);\n }\n\n return diff === 0;\n}\n\nfunction bytesToHex(buffer: ArrayBuffer): string {\n return Array.from(new Uint8Array(buffer))\n .map((b) => b.toString(16).padStart(2, \"0\"))\n .join(\"\");\n}\n\nasync function sha256Hex(value: string): Promise {\n return bytesToHex(\n await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(value)),\n );\n}\n\nasync function getAuthenticatedAdminUser(req: Request): Promise {\n const accounts = getAdminAccounts();\n if (!accounts.size) return null;\n\n const authHeader = req.headers.get(\"authorization\") || \"\";\n if (!authHeader.startsWith(\"Basic \")) return null;\n\n try {\n // 브라우저는 한글 아이디/비밀번호를 UTF-8로 보내므로 UTF-8로 풀어야 비교가 맞는다.\n const decoded = new TextDecoder().decode(\n Uint8Array.from(\n atob(authHeader.slice(\"Basic \".length)),\n (c) => c.charCodeAt(0),\n ),\n );\n const separatorIndex = decoded.indexOf(\":\");\n if (separatorIndex < 0) return null;\n\n const inputUser = toNfc(decoded.slice(0, separatorIndex).trim());\n const inputPassword = decoded.slice(separatorIndex + 1);\n const stored = accounts.get(inputUser);\n if (!stored) return null;\n\n const valid = stored.startsWith(\"sha256$\")\n ? timingSafeEqualText(\n await sha256Hex(inputPassword),\n stored.slice(\"sha256$\".length),\n )\n : timingSafeEqualText(inputPassword, stored);\n\n return valid ? inputUser : null;\n } catch {\n return null;\n }\n}\n\nasync function checkAuth(req: Request): Promise {\n return (await getAuthenticatedAdminUser(req)) !== null;\n}\n\nconst STACK_API_SECRET = Deno.env.get(\"STACK_API_SECRET\") || \"\";\n// 점진적 마이그레이션을 위해 전용 키가 없으면 기존 STACK_API_SECRET 을 fallback 으로 쓴다.\n// 운영에서는 NIGHTBOT_API_SECRET / DONATION_API_SECRET 을 별도로 설정하는 것을 권장한다.\nconst NIGHTBOT_API_SECRET = Deno.env.get(\"NIGHTBOT_API_SECRET\") ||\n STACK_API_SECRET;\nconst DONATION_API_SECRET = Deno.env.get(\"DONATION_API_SECRET\") ||\n STACK_API_SECRET;\n\nfunction checkSecret(\n req: Request,\n secret: string,\n headerNames: readonly string[],\n allowQueryKey = false,\n): boolean {\n if (!secret) return false;\n for (const name of headerNames) {\n const value = req.headers.get(name) || \"\";\n if (value && timingSafeEqualText(value, secret)) return true;\n }\n if (!allowQueryKey) return false;\n const queryKey = new URL(req.url).searchParams.get(\"key\") || \"\";\n return !!queryKey && timingSafeEqualText(queryKey, secret);\n}\n\nfunction checkStackApiKey(req: Request): boolean {\n // 기존 서버/cron 호환을 위해 ?key= 도 유지한다.\n return checkSecret(req, STACK_API_SECRET, [\"x-stack-key\"], true);\n}\n\nfunction checkNightbotApiKey(req: Request): boolean {\n // Nightbot Custom API 는 query parameter 사용이 일반적이다.\n return checkSecret(req, NIGHTBOT_API_SECRET, [\"x-nightbot-key\"], true);\n}\n\nfunction checkDonationApiKey(req: Request): boolean {\n // 신규 연동은 x-donation-key 사용을 권장한다. x-stack-key 는 기존 연동 호환용.\n return checkSecret(req, DONATION_API_SECRET, [\n \"x-donation-key\",\n \"x-stack-key\",\n ], true);\n}\n\nfunction unauthorizedResponse(): Response {\n return jsonResponse({ ok: false, error: \"인증이 필요합니다.\" }, 401, {\n \"WWW-Authenticate\": 'Basic realm=\"Admin Area\", charset=\"UTF-8\"',\n });\n}\n\nfunction forbiddenResponse(): Response {\n return jsonResponse({ ok: false, error: \"권한이 없습니다.\" }, 403);\n}\n\nfunction jsonResponse(\n body: unknown,\n status = 200,\n extraHeaders: Record = {},\n): Response {\n return new Response(JSON.stringify(body), {\n status,\n headers: {\n \"content-type\": \"application/json; charset=utf-8\",\n \"cache-control\": \"no-store\",\n \"x-content-type-options\": \"nosniff\",\n \"referrer-policy\": \"no-referrer\",\n ...extraHeaders,\n },\n });\n}\n\nfunction textResponse(\n body: string,\n status = 200,\n extraHeaders: Record = {},\n): Response {\n return new Response(body, {\n status,\n headers: {\n \"content-type\": \"text/plain; charset=utf-8\",\n \"cache-control\": \"no-store\",\n \"x-content-type-options\": \"nosniff\",\n \"referrer-policy\": \"no-referrer\",\n ...extraHeaders,\n },\n });\n}\n\nfunction redirectResponse(location: string): Response {\n // 302 를 쓴다. 301 은 브라우저가 오래 캐시해서 나중에 되돌리기 어렵다.\n return new Response(null, {\n status: 302,\n headers: {\n location,\n \"cache-control\": \"no-store\",\n \"referrer-policy\": \"no-referrer\",\n },\n });\n}\n\n// 알림 전용 서비스워커.\n// 페이지에서 직접 띄우는 알림과 달리, 탭이 백그라운드에서 멈춰 있어도 배너가 뜬다.\n// 알림을 누르면 이미 열려 있는 /admin 탭으로 이동하고, 없으면 새로 연다.\nconst SERVICE_WORKER_JS =\n `self.addEventListener(\"install\", () => self.skipWaiting());\nself.addEventListener(\"activate\", (e) => e.waitUntil(self.clients.claim()));\nself.addEventListener(\"notificationclick\", (e) => {\n const target = (e.notification.data && e.notification.data.url) || \"/admin\";\n e.notification.close();\n e.waitUntil((async () => {\n const wins = await self.clients.matchAll({ type: \"window\", includeUncontrolled: true });\n for (const w of wins) {\n if (w.url.indexOf(\"/admin\") !== -1) {\n await w.focus();\n if (\"navigate\" in w) return w.navigate(target);\n return w;\n }\n }\n return self.clients.openWindow(target);\n })());\n});\n`;\n\nfunction htmlResponse(html: string): Response {\n return new Response(html, {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n \"cache-control\": \"no-store\",\n \"x-content-type-options\": \"nosniff\",\n \"referrer-policy\": \"no-referrer\",\n },\n });\n}\n\n// Maintenance\n\nconst MAINTENANCE_KEY = \"system_maintenance\";\nconst MAINTENANCE_MESSAGE = \"🚧 스택봇 점검중입니다.\";\n\nasync function getJSONOr(\n blobStore: { getJSON: (k: string) => Promise },\n key: string,\n fallback: T,\n): Promise {\n // 키가 없는 경우에만 fallback 을 쓴다.\n // 저장소 자체 오류는 숨기지 않고 throw 하여 빈 데이터로 덮어쓰는 사고를 막는다.\n const value = await blobStore.getJSON(key);\n return (value as T) ?? fallback;\n}\n\nasync function getMaintenanceMode(\n blob: { getJSON: (k: string) => Promise },\n): Promise {\n const value = await getJSONOr<{ on?: boolean } | null>(\n blob,\n MAINTENANCE_KEY,\n null,\n );\n return value?.on === true;\n}\n\nasync function setMaintenanceMode(\n blob: { setJSON: (k: string, v: unknown) => Promise },\n on: boolean,\n): Promise {\n await blob.setJSON(MAINTENANCE_KEY, { on: !!on });\n}\n\n// Validation / parsing\n\nfunction roundAmount(n: number): number {\n return Math.round(n * 1e6) / 1e6;\n}\n\nfunction parsePositiveAmount(value: unknown): number | null {\n const s = String(value ?? \"\").trim();\n // 저장 정밀도와 동일하게 소수점은 최대 6자리만 허용한다.\n if (!/^\\d+(?:\\.\\d{1,6})?$/.test(s)) return null;\n\n const n = Number(s);\n if (!Number.isFinite(n) || n > 1_000_000_000) return null;\n const rounded = roundAmount(n);\n if (rounded <= 0) return null;\n return rounded;\n}\n\ntype ParsedCommandAmount = {\n item: string;\n amount: number;\n valid: boolean;\n // 수량으로 인식하려던 마지막 토큰 (오류 안내 문구용)\n lastToken: string | null;\n};\n\nfunction endsWithBareNumber(item: string): boolean {\n return /(^|\\s)-?\\d+(?:\\.\\d+)?$/.test(item.trim());\n}\n\nfunction looksLikeMalformedAmountToken(token: string): boolean {\n // 쉼표/부호/점 때문에 숫자처럼 보이지만 수량 규칙에 맞지 않는 마지막 토큰을\n // 항목명으로 잘못 저장하지 않고 명시적인 수량 오류로 돌려보낸다.\n return /^[+-]?[0-9][0-9,._+-]*$/.test(token);\n}\n\nfunction splitItemAndAmount(rest: string[]): ParsedCommandAmount {\n const tokens = rest.map((token) => toNfc(token.trim())).filter(Boolean);\n if (!tokens.length) {\n return { item: \"\", amount: 1, valid: true, lastToken: null };\n }\n\n const last = tokens[tokens.length - 1];\n if (\n tokens.length > 1 && looksLikeMalformedAmountToken(last) &&\n !/^\\d+(?:\\.\\d{1,6})?$/.test(last)\n ) {\n return {\n item: tokens.slice(0, -1).join(\" \"),\n amount: 0,\n valid: false,\n lastToken: last,\n };\n }\n if (tokens.length === 1 || !/^-?(?:\\d+(?:\\.\\d+)?)$/.test(last)) {\n return { item: tokens.join(\" \"), amount: 1, valid: true, lastToken: last };\n }\n\n const item = tokens.slice(0, -1).join(\" \");\n const amount = parsePositiveAmount(last);\n return amount === null\n ? { item, amount: 0, valid: false, lastToken: last }\n : { item, amount, valid: true, lastToken: last };\n}\n\nfunction normalizeItem(raw: unknown): string {\n return toNfc(String(raw ?? \"\").trim());\n}\n\nfunction sanitizeStack(input: unknown): Record {\n const out: Record = Object.create(null);\n if (!input || typeof input !== \"object\" || Array.isArray(input)) return out;\n\n for (\n const [rawItem, rawValue] of Object.entries(\n input as Record,\n )\n ) {\n const item = normalizeItem(rawItem);\n const value = Number(rawValue);\n if (!isSafeItemName(item) || !Number.isFinite(value) || value <= 0) {\n continue;\n }\n out[item] = roundAmount((out[item] || 0) + value);\n }\n return out;\n}\n\n// History: bounded + normalized + exact-duplicate removal\n\nconst MAX_HISTORY_ENTRIES = 1000;\n\ninterface HistoryEntry {\n time: string;\n action: \"추가\" | \"차감\" | \"삭제\" | \"초기화\";\n item?: string;\n source?:\n | \"nightbot\"\n | \"admin\"\n | \"api\"\n | \"youtube-auto\"\n | \"cron\"\n | \"toonation\";\n actor?: string;\n amount?: number;\n count?: number;\n}\n\nfunction historyFingerprint(entry: HistoryEntry): string {\n return JSON.stringify([\n entry.time,\n entry.action,\n entry.source || \"\",\n entry.actor || \"\",\n entry.item || \"\",\n entry.amount ?? null,\n entry.count ?? null,\n ]);\n}\n\nfunction sanitizeHistory(input: unknown): HistoryEntry[] {\n if (!Array.isArray(input)) return [];\n\n const seen = new Set();\n const out: HistoryEntry[] = [];\n\n for (const raw of input) {\n if (!raw || typeof raw !== \"object\") continue;\n const e = raw as Partial;\n if (typeof e.time !== \"string\") continue;\n if (![\"추가\", \"차감\", \"삭제\", \"초기화\"].includes(e.action || \"\")) continue;\n\n const item = e.item === undefined ? undefined : normalizeItem(e.item);\n if (item !== undefined && !isSafeItemName(item)) continue;\n\n const amount = e.amount === undefined ? undefined : Number(e.amount);\n const count = e.count === undefined ? undefined : Number(e.count);\n if (amount !== undefined && (!Number.isFinite(amount) || amount <= 0)) {\n continue;\n }\n if (count !== undefined && (!Number.isFinite(count) || count < 0)) continue;\n\n const clean: HistoryEntry = {\n time: e.time,\n action: e.action as HistoryEntry[\"action\"],\n ...(typeof e.source === \"string\"\n ? { source: e.source as HistoryEntry[\"source\"] }\n : {}),\n ...(typeof e.actor === \"string\" ? { actor: e.actor.slice(0, 100) } : {}),\n ...(item === undefined ? {} : { item }),\n ...(amount === undefined ? {} : { amount: roundAmount(amount) }),\n ...(count === undefined ? {} : { count: roundAmount(count) }),\n };\n\n const fp = historyFingerprint(clean);\n if (seen.has(fp)) continue;\n seen.add(fp);\n out.push(clean);\n }\n\n return out\n .sort((a, b) => new Date(a.time).getTime() - new Date(b.time).getTime())\n .slice(-MAX_HISTORY_ENTRIES);\n}\n\nasync function readHistory(\n blob: { getJSON: (k: string) => Promise },\n channel: string,\n): Promise {\n return sanitizeHistory(await getJSONOr(blob, `history_${channel}`, null));\n}\n\nasync function appendHistory(\n blob: {\n getJSON: (k: string) => Promise;\n setJSON: (k: string, v: unknown) => Promise;\n },\n channel: string,\n entry: HistoryEntry,\n): Promise {\n const history = await readHistory(blob, channel);\n const clean: HistoryEntry = {\n ...entry,\n item: entry.item === undefined ? undefined : normalizeItem(entry.item),\n amount: entry.amount === undefined ? undefined : roundAmount(entry.amount),\n count: entry.count === undefined ? undefined : roundAmount(entry.count),\n };\n\n const fp = historyFingerprint(clean);\n if (!history.some((e) => historyFingerprint(e) === fp)) {\n history.push(clean);\n }\n\n await blob.setJSON(`history_${channel}`, sanitizeHistory(history));\n}\n\nfunction formatStack(stack: Record): string {\n const keys = Object.keys(stack);\n if (!keys.length) return \"🤖 현재 스택 없음.\";\n return keys.map((k) => `${label(k)} ${roundAmount(stack[k])}`).join(\", \");\n}\n\n// Unified stack action engine (single source of truth)\n\ntype StackAction = \"추가\" | \"차감\" | \"삭제\" | \"초기화\";\n\nconst STACK_ACTIONS: readonly string[] = [\"추가\", \"차감\", \"삭제\", \"초기화\"];\n\nfunction isStackAction(value: string): value is StackAction {\n return STACK_ACTIONS.includes(value);\n}\n\ntype ActionResult = {\n ok: boolean;\n action?: StackAction;\n channel: string;\n item?: string;\n amount?: number;\n count?: number;\n stack: Record;\n message: string;\n error?: string;\n};\n\nasync function readStack(\n blob: { getJSON: (k: string) => Promise },\n channel: string,\n): Promise> {\n return sanitizeStack(await getJSONOr(blob, `stack_${channel}`, null));\n}\n\nasync function writeStack(\n blob: { setJSON: (k: string, v: unknown) => Promise },\n channel: string,\n stack: Record,\n): Promise {\n await blob.setJSON(`stack_${channel}`, sanitizeStack(stack));\n}\n\nasync function applyStackAction(\n blob: {\n getJSON: (k: string) => Promise;\n setJSON: (k: string, v: unknown) => Promise;\n delete: (k: string) => Promise;\n },\n channel: string,\n action: StackAction,\n rawItem?: unknown,\n rawAmount?: unknown,\n historyMeta: Pick = {},\n): Promise {\n const item = normalizeItem(rawItem);\n const amount = rawAmount === undefined ? 1 : parsePositiveAmount(rawAmount);\n const stack = await readStack(blob, channel);\n\n if (action === \"초기화\") {\n await blob.delete(`stack_${channel}`);\n await appendHistory(blob, channel, {\n time: new Date().toISOString(),\n action: \"초기화\",\n ...historyMeta,\n });\n return {\n ok: true,\n action,\n channel,\n stack: Object.create(null),\n message: \"스택을 초기화했습니다.\",\n };\n }\n\n if (!item) {\n return {\n ok: false,\n channel,\n stack,\n message: \"항목을 입력해주세요.\",\n error: \"INVALID_ITEM\",\n };\n }\n if (!isSafeItemName(item)) {\n return {\n ok: false,\n channel,\n stack,\n message: \"항목 이름은 1~100 자로 입력해주세요.\",\n error: \"INVALID_ITEM\",\n };\n }\n if (amount === null) {\n return {\n ok: false,\n channel,\n item,\n stack,\n message: \"수량은 0 보다 큰 숫자만 입력할 수 있습니다.\",\n error: \"INVALID_AMOUNT\",\n };\n }\n\n if (action === \"추가\") {\n const next = roundAmount((stack[item] || 0) + amount);\n stack[item] = next;\n await writeStack(blob, channel, stack);\n await appendHistory(blob, channel, {\n time: new Date().toISOString(),\n action,\n item,\n amount,\n count: next,\n ...historyMeta,\n });\n return {\n ok: true,\n action,\n channel,\n item,\n amount,\n count: next,\n stack,\n message: `${label(item)} ${next}`,\n };\n }\n\n if (action === \"차감\") {\n if (!(item in stack)) {\n return {\n ok: false,\n action,\n channel,\n item,\n amount,\n stack,\n message: `${label(item)} 항목이 없습니다.`,\n error: \"NOT_FOUND\",\n };\n }\n const next = roundAmount(stack[item] - amount);\n if (next <= 0) {\n delete stack[item];\n await writeStack(blob, channel, stack);\n await appendHistory(blob, channel, {\n time: new Date().toISOString(),\n action,\n item,\n amount,\n count: 0,\n ...historyMeta,\n });\n return {\n ok: true,\n action,\n channel,\n item,\n amount,\n count: 0,\n stack,\n message: `${label(item)} 0 이하가 되어 삭제했습니다.`,\n };\n }\n stack[item] = next;\n await writeStack(blob, channel, stack);\n await appendHistory(blob, channel, {\n time: new Date().toISOString(),\n action,\n item,\n amount,\n count: next,\n ...historyMeta,\n });\n return {\n ok: true,\n action,\n channel,\n item,\n amount,\n count: next,\n stack,\n message: `${label(item)} ${next}`,\n };\n }\n\n if (!(item in stack)) {\n return {\n ok: false,\n action,\n channel,\n item,\n stack,\n message: `${label(item)} 항목이 없습니다.`,\n error: \"NOT_FOUND\",\n };\n }\n delete stack[item];\n await writeStack(blob, channel, stack);\n await appendHistory(blob, channel, {\n time: new Date().toISOString(),\n action,\n item,\n ...historyMeta,\n });\n return {\n ok: true,\n action,\n channel,\n item,\n stack,\n message: `${label(item)} 삭제했습니다.`,\n };\n}\n\n// Concurrency: serialize every mutation by normalized channel.\n\nconst channelLocks = new Map>();\n\nasync function withChannelLock(\n channel: string,\n task: () => Promise,\n): Promise {\n const previous = channelLocks.get(channel) || Promise.resolve();\n let release!: () => void;\n const current = new Promise((resolve) => {\n release = resolve;\n });\n channelLocks.set(channel, current);\n await previous;\n try {\n return await task();\n } finally {\n release();\n if (channelLocks.get(channel) === current) channelLocks.delete(channel);\n }\n}\n\n// JSON API helpers\n\nconst MAX_JSON_BODY_BYTES = 16 * 1024;\n\nasync function readJsonBody(\n req: Request,\n): Promise | null> {\n const contentLength = Number(req.headers.get(\"content-length\") || 0);\n if (Number.isFinite(contentLength) && contentLength > MAX_JSON_BODY_BYTES) {\n return null;\n }\n try {\n const text = await req.text();\n if (new TextEncoder().encode(text).byteLength > MAX_JSON_BODY_BYTES) {\n return null;\n }\n const body = JSON.parse(text);\n return body && typeof body === \"object\" && !Array.isArray(body)\n ? body as Record\n : null;\n } catch {\n return null;\n }\n}\n\nfunction sameOrigin(req: Request, url: URL): boolean {\n const origin = req.headers.get(\"origin\");\n const referer = req.headers.get(\"referer\");\n const valid = (value: string | null) => {\n if (!value) return false;\n try {\n return new URL(value).origin === url.origin;\n } catch {\n return false;\n }\n };\n return valid(origin) || valid(referer);\n}\n\nfunction getValidatedChannel(raw: unknown): string | null {\n const value = toNfc(String(raw ?? \"\").trim());\n if (!value || !isSafeChannelName(value)) return null;\n return normalizeChannel(value);\n}\n\ntype BlobStore = {\n getJSON: (key: string) => Promise;\n setJSON: (key: string, value: unknown) => Promise;\n delete: (key: string) => Promise;\n};\n\n// 매일 06:00 크론(cron.ts)이 보내는 초기화 요청 표시\nconst DAILY_RESET_TRIGGER = \"daily-reset\";\n// 크론 재시도 등으로 같은 초기화가 두 번 기록되지 않도록 이 시간 안의 중복 요청은 건너뛴다.\nconst DAILY_RESET_DEDUPE_MS = 60 * 60 * 1000;\n\n// JSON API: GET /api/stack?ch= (공개 조회)\n// POST /api/stack (관리자 화면 또는 API Key)\nasync function handleStackJsonApi(\n req: Request,\n url: URL,\n blob: BlobStore,\n): Promise {\n if (req.method === \"GET\") {\n const channel = getValidatedChannel(url.searchParams.get(\"ch\"));\n if (!channel) {\n return jsonResponse(\n { ok: false, error: \"유효하지 않은 채널명입니다.\" },\n 400,\n );\n }\n return await withChannelLock(channel, async () => {\n const stack = await readStack(blob, channel);\n return jsonResponse({\n ok: true,\n channel,\n stack,\n items: Object.entries(stack).map(([item, count]) => ({\n item,\n label: label(item),\n count,\n })),\n });\n });\n }\n\n if (req.method !== \"POST\") {\n return jsonResponse({ ok: false, error: \"Method Not Allowed\" }, 405, {\n Allow: \"GET, POST\",\n });\n }\n\n // 관리자(Basic 인증)는 같은 출처(관리자 화면)에서 온 요청만 허용한다.\n // API Key 요청은 서버 간 호출이므로 출처 검사를 하지 않는다.\n const adminUser = await getAuthenticatedAdminUser(req);\n const apiKey = checkStackApiKey(req);\n if (!adminUser && !apiKey) return forbiddenResponse();\n if (!apiKey && !sameOrigin(req, url)) return forbiddenResponse();\n\n const body = await readJsonBody(req);\n if (!body) {\n return jsonResponse({\n ok: false,\n error: \"JSON body가 올바르지 않거나 너무 큽니다.\",\n }, 400);\n }\n\n const channel = getValidatedChannel(body.channel);\n if (!channel) {\n return jsonResponse(\n { ok: false, error: \"유효하지 않은 채널명입니다.\" },\n 400,\n );\n }\n\n const action = toNfc(String(body.action ?? \"\"));\n\n // 기록초기화는 되돌릴 수 없으므로 관리자만 실행할 수 있다.\n if (action === \"기록초기화\") {\n if (!adminUser) return forbiddenResponse();\n return await withChannelLock(channel, async () => {\n await blob.delete(`history_${channel}`);\n return jsonResponse({\n ok: true,\n action,\n channel,\n message: \"기록 (History) 을 초기화했습니다.\",\n });\n });\n }\n\n if (!isStackAction(action)) {\n return jsonResponse(\n { ok: false, error: \"지원하지 않는 action입니다.\" },\n 400,\n );\n }\n\n const isDailyReset = !adminUser && apiKey && action === \"초기화\" &&\n body.trigger === DAILY_RESET_TRIGGER;\n const historyMeta: Pick = adminUser\n ? { source: \"admin\", actor: adminUser }\n : isDailyReset\n ? { source: \"cron\", actor: \"매일 06:00 초기화\" }\n : { source: \"api\", actor: \"API Key\" };\n\n return await withChannelLock(channel, async () => {\n if (isDailyReset) {\n const now = Date.now();\n const history = await readHistory(blob, channel);\n const alreadyDone = history.some((e) =>\n e.action === \"초기화\" &&\n e.source === \"cron\" &&\n now - Date.parse(e.time) < DAILY_RESET_DEDUPE_MS\n );\n if (alreadyDone) {\n return jsonResponse({\n ok: true,\n action,\n channel,\n skipped: true,\n stack: await readStack(blob, channel),\n message: \"최근 1시간 안에 매일 초기화를 이미 실행해서 건너뜁니다.\",\n });\n }\n }\n\n const result = await applyStackAction(\n blob,\n channel,\n action,\n body.item,\n body.amount,\n historyMeta,\n );\n return jsonResponse(result, result.ok ? 200 : 400);\n });\n}\n\nasync function handleHistoryJsonApi(\n req: Request,\n url: URL,\n blob: Pick,\n): Promise {\n if (req.method !== \"GET\") {\n return jsonResponse({ ok: false, error: \"Method Not Allowed\" }, 405, {\n Allow: \"GET\",\n });\n }\n const channel = getValidatedChannel(url.searchParams.get(\"ch\"));\n if (!channel) {\n return jsonResponse(\n { ok: false, error: \"유효하지 않은 채널명입니다.\" },\n 400,\n );\n }\n\n // 후원 기록 자체는 공개하되, 비로그인 방문자에게는 후원자 닉네임을 가린다.\n // 화면에서만 가리면 /api/history 를 직접 열어 볼 수 있으므로 서버에서 바꿔서 내보낸다.\n // 마스킹 문구는 \"투네이션 후원\" 으로 둔다. 후원자가 투네이션에서 익명으로 보낸\n // 경우의 실제 표기(\"투네이션 익명\")와 헷갈리지 않게 하려는 것이다.\n // 투네이션 외 출처(admin 등)의 계정명은 그대로 비공개다.\n const DONOR_MASK = \"투네이션 후원\";\n const isAdmin = !!(await getAuthenticatedAdminUser(req));\n const history = (await readHistory(blob, channel)).map((entry) =>\n isAdmin ? entry : {\n ...entry,\n actor: entry.source === \"toonation\" ? DONOR_MASK : undefined,\n }\n );\n\n const payload = { ok: true, channel, history };\n\n // 기록이 바뀌지 않았으면 본문 없이 304로 응답한다.\n // (History 페이지를 자동 새로고침으로 오래 켜 둬도 같은 데이터를 매번 다시 받지 않게)\n const etag = `\"${(await sha256Hex(JSON.stringify(payload))).slice(0, 32)}\"`;\n const ifNoneMatch = (req.headers.get(\"if-none-match\") || \"\").replace(\n /^W\\//,\n \"\",\n );\n if (ifNoneMatch === etag) {\n return new Response(null, {\n status: 304,\n headers: {\n etag,\n vary: \"Authorization\",\n \"cache-control\": \"no-store\",\n \"x-content-type-options\": \"nosniff\",\n \"referrer-policy\": \"no-referrer\",\n },\n });\n }\n return jsonResponse(payload, 200, { etag, vary: \"Authorization\" });\n}\n\n// Toonation 후원 → 스택 자동 적립\n//\n// 금액을 기준 단가의 정수 조합으로 푼다.\n// 11,900 × a + 12,000 × b = 후원금액\n// 예) 11900 → 흡연 1 / 24000 → 금연 2 / 23900 → 흡연 1 + 금연 1\n// 두 단가가 100원밖에 차이나지 않아서 금액이 커지면 조합이 여러 개 나올 수 있다.\n// (예: 1,428,000 = 11900×120 = 12000×119) 이런 금액은 자동 적립하지 않고 보류한다.\nconst DONATION_UNITS: readonly { unit: number; item: string }[] = [\n { unit: 11900, item: \"흡연\" },\n { unit: 12000, item: \"금연\" },\n];\n\n// 서로 상쇄되는 항목. 후원이 들어오면 반대 항목을 먼저 깎고, 남는 수량만 쌓는다.\n// 예) 흡연 1 에서 금연 1 후원 → 흡연 0 → 삭제 (금연은 쌓이지 않음)\n// 예) 흡연 1 에서 금연 3 후원 → 흡연 삭제 + 금연 2\n// 한쪽 방향만 상쇄하려면 해당 줄을 지우면 된다.\nconst DONATION_OPPOSITE: Record = {\n \"흡연\": \"금연\",\n \"금연\": \"흡연\",\n};\n\n// 조합이 여러 개일 때: \"hold\" = 적립 보류(수동 처리) / \"first\" = 첫 후보로 적립\nconst DONATION_AMBIGUOUS_POLICY: \"hold\" | \"first\" = \"hold\";\n\n// 같은 후원이 재시도로 두 번 들어오는 것을 막는다. (uid 를 보낸 경우에만 동작)\n// id(후원자 ID 등)는 중복 판단에 쓰지 않는다. 같은 사람이 연달아 후원해도 매번 쌓인다.\nconst MAX_DONATION_IDS = 300;\n\ntype DonationSplit = { item: string; count: number }[];\n\nfunction donationTotal(split: DonationSplit): number {\n return split.reduce((sum, s) => sum + s.count, 0);\n}\n\nfunction solveDonation(amount: number): DonationSplit[] {\n const [A, B] = DONATION_UNITS;\n const out: DonationSplit[] = [];\n\n for (let a = 0; a * A.unit <= amount; a++) {\n const rest = amount - a * A.unit;\n if (rest % B.unit !== 0) continue;\n const b = rest / B.unit;\n if (a + b < 1) continue;\n out.push([\n ...(a ? [{ item: A.item, count: a }] : []),\n ...(b ? [{ item: B.item, count: b }] : []),\n ]);\n }\n\n // 한 종류로 떨어지는 조합을 먼저, 그 다음 개수가 적은 조합을 먼저 본다.\n return out.sort((x, y) =>\n (x.length - y.length) || (donationTotal(x) - donationTotal(y))\n );\n}\n\nasync function readDonationIds(\n blob: Pick,\n channel: string,\n): Promise {\n const raw = await getJSONOr(blob, `donation_ids_${channel}`, null);\n return Array.isArray(raw) ? raw.filter((v) => typeof v === \"string\") : [];\n}\n\ntype DonationPending = {\n uid: string;\n amount: number;\n donor: string;\n startedAt: string;\n changes?: DonationChange[];\n error?: string;\n};\n\nasync function donationPendingKey(\n channel: string,\n uid: string,\n): Promise {\n // uid 원문을 Blob key 에 직접 넣지 않고 해시해 특수문자/길이 문제를 피한다.\n return `donation_pending_${channel}_${(await sha256Hex(uid)).slice(0, 32)}`;\n}\n\ntype DonationChange = {\n action: \"추가\" | \"차감\";\n item: string;\n amount: number;\n total: number;\n};\n\n// 후원 한 조각(예: 금연 1)을 처리한다. 반대 항목이 있으면 먼저 깎는다.\n// 0 이 되면 applyStackAction 의 차감 로직이 항목을 삭제한다.\nasync function applyDonationPiece(\n blob: BlobStore,\n channel: string,\n item: string,\n count: number,\n historyMeta: Pick,\n): Promise {\n const changes: DonationChange[] = [];\n let rest = count;\n\n const opposite = DONATION_OPPOSITE[item];\n if (opposite) {\n const stack = await readStack(blob, channel);\n const offset = roundAmount(Math.min(stack[opposite] || 0, rest));\n if (offset > 0) {\n const r = await applyStackAction(\n blob,\n channel,\n \"차감\",\n opposite,\n offset,\n historyMeta,\n );\n if (!r.ok) throw new Error(r.message);\n changes.push({\n action: \"차감\",\n item: opposite,\n amount: offset,\n total: r.count ?? 0,\n });\n rest = roundAmount(rest - offset);\n }\n }\n\n if (rest > 0) {\n const r = await applyStackAction(\n blob,\n channel,\n \"추가\",\n item,\n rest,\n historyMeta,\n );\n if (!r.ok) throw new Error(r.message);\n changes.push({ action: \"추가\", item, amount: rest, total: r.count ?? 0 });\n }\n\n return changes;\n}\n\n// POST /api/donation (API Key 전용)\n// body: { channel, amount, id?, uid?, name?, message? }\n// id : 후원자 ID 등. 중복 판단에 쓰지 않는다. (같은 id 로 여러 번 와도 매번 적립)\n// uid : 후원 \"한 건\"마다 다른 고유값. 보냈을 때만 재시도 중복을 막는다. (생략 가능)\nasync function handleDonationApi(\n req: Request,\n _url: URL,\n blob: BlobStore,\n): Promise {\n if (req.method !== \"POST\") {\n return jsonResponse({ ok: false, error: \"Method Not Allowed\" }, 405, {\n Allow: \"POST\",\n });\n }\n if (!checkDonationApiKey(req)) return forbiddenResponse();\n\n const body = await readJsonBody(req);\n if (!body) {\n return jsonResponse({\n ok: false,\n error: \"JSON body가 올바르지 않거나 너무 큽니다.\",\n }, 400);\n }\n\n const channel = getValidatedChannel(body.channel);\n if (!channel) {\n return jsonResponse(\n { ok: false, error: \"유효하지 않은 채널명입니다.\" },\n 400,\n );\n }\n\n const amount = Number(body.amount);\n if (!Number.isInteger(amount) || amount <= 0 || amount > 100_000_000) {\n return jsonResponse(\n { ok: false, error: \"후원 금액이 올바르지 않습니다.\" },\n 400,\n );\n }\n\n // 점검모드(B): Nightbot 명령만 중단하고 실제 후원 적립은 계속 처리한다.\n const donationId = toNfc(String(body.uid ?? \"\").trim()).slice(0, 100);\n const donor = toNfc(String(body.name ?? \"\").trim()).slice(0, 50);\n\n return await withChannelLock(channel, async () => {\n const seen = donationId ? await readDonationIds(blob, channel) : [];\n\n // 중복 후원 차단\n if (donationId && seen.includes(donationId)) {\n return jsonResponse({\n ok: true,\n duplicated: true,\n channel,\n amount,\n stack: await readStack(blob, channel),\n message: \"이미 처리한 후원입니다.\",\n });\n }\n\n // Blob은 트랜잭션을 지원하지 않으므로, UID가 있는 후원은 처리 시작 마커를 먼저 남긴다.\n // 이전 시도가 중간 실패한 경우 같은 UID를 자동 재적립하지 않고 관리자 확인 상태로 보류한다.\n const pendingKey = donationId\n ? await donationPendingKey(channel, donationId)\n : \"\";\n if (pendingKey) {\n const pending = await getJSONOr(\n blob,\n pendingKey,\n null,\n );\n if (pending) {\n return jsonResponse({\n ok: true,\n matched: false,\n held: true,\n pending: true,\n channel,\n amount,\n changes: pending.changes || [],\n stack: await readStack(blob, channel),\n message:\n \"같은 UID의 이전 후원 처리가 완전히 끝나지 않아 중복 적립 방지를 위해 보류했습니다. 관리자 확인이 필요합니다.\",\n });\n }\n await blob.setJSON(\n pendingKey,\n {\n uid: donationId,\n amount,\n donor,\n startedAt: new Date().toISOString(),\n } satisfies DonationPending,\n );\n }\n\n // 처리가 끝난 뒤에만 \"처리됨\"으로 기록한다.\n // (중간에 실패하면 기록하지 않으므로 같은 uid 로 재시도하면 다시 처리된다)\n const markSeen = async () => {\n if (!donationId) return;\n await blob.setJSON(\n `donation_ids_${channel}`,\n [...seen, donationId].slice(-MAX_DONATION_IDS),\n );\n if (pendingKey) await blob.delete(pendingKey);\n };\n\n const candidates = solveDonation(amount);\n\n if (!candidates.length) {\n await markSeen();\n return jsonResponse({\n ok: true,\n matched: false,\n channel,\n amount,\n stack: await readStack(blob, channel),\n message:\n `${amount}원은 스택 단가 조합에 맞지 않아 적립하지 않았습니다.`,\n });\n }\n\n if (candidates.length > 1 && DONATION_AMBIGUOUS_POLICY === \"hold\") {\n await markSeen();\n return jsonResponse({\n ok: true,\n matched: false,\n held: true,\n channel,\n amount,\n candidates,\n stack: await readStack(blob, channel),\n message:\n `${amount}원은 해석이 여러 가지라 자동 적립하지 않았습니다. 관리자 화면에서 직접 처리해주세요.`,\n });\n }\n\n const historyMeta: Pick = {\n source: \"toonation\",\n actor: donor ? `투네이션 ${donor}` : \"투네이션\",\n };\n\n const changes: DonationChange[] = [];\n try {\n for (const { item, count } of candidates[0]) {\n changes.push(\n ...(await applyDonationPiece(\n blob,\n channel,\n item,\n count,\n historyMeta,\n )),\n );\n }\n } catch (err) {\n // changes 에는 실패 전까지 이미 반영된 변동이 들어 있다.\n // UID가 있으면 pending 마커를 유지하므로 자동 재시도 시 중복 적립하지 않는다.\n const detail = err instanceof Error ? err.message : String(err);\n if (pendingKey) {\n try {\n await blob.setJSON(\n pendingKey,\n {\n uid: donationId,\n amount,\n donor,\n startedAt: new Date().toISOString(),\n changes,\n error: detail,\n } satisfies DonationPending,\n );\n } catch {\n // 원래 오류를 가리지 않는다.\n }\n }\n return jsonResponse({\n ok: false,\n channel,\n amount,\n changes,\n stack: await readStack(blob, channel),\n error: donationId\n ? \"적립 중 오류가 발생해 같은 UID를 자동 재적립하지 않도록 보류했습니다. 관리자 확인이 필요합니다.\"\n : \"적립 중 오류가 발생했습니다. UID가 없어 자동 중복 방지가 불가능합니다.\",\n detail,\n }, 500);\n }\n\n await markSeen();\n\n const stack = await readStack(blob, channel);\n return jsonResponse({\n ok: true,\n matched: true,\n channel,\n amount,\n changes,\n stack,\n message: changes\n .map((c) =>\n c.action === \"추가\"\n ? `${label(c.item)} +${c.amount}`\n : `${label(c.item)} -${c.amount}${c.total === 0 ? \" (삭제)\" : \"\"}`\n )\n .join(\", \") || \"변동 없음\",\n });\n });\n}\n\n// Nightbot 관리자 공지 전송\nconst NIGHTBOT_ANNOUNCE_PREFIX = \"📢 [공지] \";\nconst NIGHTBOT_MESSAGE_MAX = 400;\n\nasync function sendNightbotAnnouncement(message: string): Promise {\n const accessToken = Deno.env.get(\"NIGHTBOT_ACCESS_TOKEN\") || \"\";\n if (!accessToken) {\n throw new Error(\"NIGHTBOT_ACCESS_TOKEN 환경변수가 설정되지 않았습니다.\");\n }\n\n const text = toNfc(message).replace(/\\s+/g, \" \").trim();\n if (!text) throw new Error(\"공지 문구를 입력해주세요.\");\n const finalMessage = NIGHTBOT_ANNOUNCE_PREFIX + text;\n if (finalMessage.length > NIGHTBOT_MESSAGE_MAX) {\n throw new Error(\n `공지 문구가 너무 깁니다. 최종 메시지는 ${NIGHTBOT_MESSAGE_MAX}자 이하여야 합니다.`,\n );\n }\n\n const res = await fetch(\"https://api.nightbot.tv/1/channel/send\", {\n method: \"POST\",\n headers: {\n authorization: `Bearer ${accessToken}`,\n \"content-type\": \"application/json\",\n accept: \"application/json\",\n },\n body: JSON.stringify({ message: finalMessage }),\n });\n\n const textBody = await res.text();\n let data: unknown = null;\n try {\n data = textBody ? JSON.parse(textBody) : null;\n } catch {\n data = null;\n }\n if (!res.ok) {\n const detail = data && typeof data === \"object\" && \"message\" in data\n ? String((data as { message?: unknown }).message || \"\")\n : textBody;\n if (res.status === 429) {\n throw new Error(\n \"Nightbot 전송 제한(5초당 1회)에 걸렸습니다. 잠시 후 다시 보내주세요.\",\n );\n }\n throw new Error(detail || `Nightbot HTTP ${res.status}`);\n }\n}\n\nasync function handleAdminAnnouncement(\n req: Request,\n url: URL,\n): Promise {\n if (req.method !== \"POST\") {\n return jsonResponse({ ok: false, error: \"Method Not Allowed\" }, 405, {\n Allow: \"POST\",\n });\n }\n const adminUser = await getAuthenticatedAdminUser(req);\n if (!adminUser) return unauthorizedResponse();\n if (!sameOrigin(req, url)) return forbiddenResponse();\n\n const body = await readJsonBody(req);\n if (!body) {\n return jsonResponse(\n { ok: false, error: \"올바른 JSON body가 필요합니다.\" },\n 400,\n );\n }\n const message = toNfc(String(body.message ?? \"\")).trim();\n if (!message) {\n return jsonResponse({ ok: false, error: \"공지 문구를 입력해주세요.\" }, 400);\n }\n\n try {\n await sendNightbotAnnouncement(message);\n return jsonResponse({\n ok: true,\n message: \"Nightbot으로 공지를 전송했습니다.\",\n sent: NIGHTBOT_ANNOUNCE_PREFIX + message.replace(/\\s+/g, \" \").trim(),\n });\n } catch (err) {\n return jsonResponse({\n ok: false,\n error: err instanceof Error ? err.message : String(err),\n }, 502);\n }\n}\n\n// 나이트봇 텍스트 API: /?ch=채널&q=명령&key=NIGHTBOT_API_SECRET\n// - q가 없으면 현재 스택을 보여준다. (인증 불필요)\n// - 명령은 API Key로만 실행한다. 관리자 화면은 /api/stack(POST)을 쓴다.\nasync function handleNightbotRequest(\n req: Request,\n url: URL,\n blob: BlobStore,\n): Promise {\n const requestedQuery = toNfc((url.searchParams.get(\"q\") || \"\").trim());\n const channel = getValidatedChannel(url.searchParams.get(\"ch\"));\n\n if (!channel) return textResponse(\"채널명을 입력해주세요.\", 200);\n if (requestedQuery && !checkNightbotApiKey(req)) return forbiddenResponse();\n if (await getMaintenanceMode(blob)) {\n return textResponse(MAINTENANCE_MESSAGE, 200);\n }\n\n const historyMeta: Pick = {\n source: \"nightbot\",\n actor: \"nightbot\",\n };\n\n return await withChannelLock(channel, async () => {\n if (!requestedQuery) {\n return textResponse(formatStack(await readStack(blob, channel)));\n }\n\n const parts = requestedQuery.split(/\\s+/);\n const command = parts[0];\n\n if (command === \"기록초기화\") {\n return textResponse(\"기록초기화는 관리자 화면에서만 할 수 있습니다.\");\n }\n\n if (command === \"추가\" || command === \"차감\" || command === \"빼기\") {\n const parsed = splitItemAndAmount(parts.slice(1));\n if (!parsed.item) {\n return textResponse(\n command === \"추가\"\n ? \"사용법 : !스택 추가 [항목] [숫자 (생략가능, 소수 가능)]\"\n : \"사용법 : !스택 차감 (빼기) [항목] [숫자 (생략가능, 소수 가능)]\",\n );\n }\n if (!parsed.valid) {\n return textResponse(\n `수량은 0 보다 큰 숫자만 입력할 수 있습니다. (인식된 수량 토큰: \"${\n parsed.lastToken ?? \"\"\n }\")`,\n );\n }\n if (command === \"추가\" && endsWithBareNumber(parsed.item)) {\n return textResponse(\n `항목 이름(\"${parsed.item}\") 끝에 숫자가 포함되어 있어 추가하지 않았습니다.`,\n );\n }\n\n const result = await applyStackAction(\n blob,\n channel,\n command === \"추가\" ? \"추가\" : \"차감\",\n parsed.item,\n parsed.amount,\n historyMeta,\n );\n return textResponse(result.message, 200);\n }\n\n if (command === \"삭제\") {\n const result = await applyStackAction(\n blob,\n channel,\n \"삭제\",\n parts.slice(1).join(\" \"),\n undefined,\n historyMeta,\n );\n return textResponse(result.message, 200);\n }\n\n if (command === \"초기화\") {\n const result = await applyStackAction(\n blob,\n channel,\n \"초기화\",\n undefined,\n undefined,\n historyMeta,\n );\n return textResponse(result.message, 200);\n }\n\n return textResponse(\n \"알 수 없는 명령입니다. (추가/차감/삭제/초기화)\",\n 200,\n );\n });\n}\n\n// Main (HTTP)\n\nexport default async function (req: Request): Promise {\n const { blob } = await import(\"https://esm.town/v/std/blob\");\n const url = new URL(req.url);\n\n // /admin 은 기록 조회까지 공개하고, 관리 패널은 로그인한 관리자에게만 내려준다.\n if (url.pathname === \"/admin\") {\n const adminUser = await getAuthenticatedAdminUser(req);\n\n // ?login=1 은 브라우저 로그인 창을 띄우기 위한 주소다.\n // 로그인 창을 같은 경로(/admin)에서 띄워야 이후 요청에도 인증 정보가 함께 간다.\n if (url.searchParams.has(\"login\")) {\n if (!adminUser) return unauthorizedResponse();\n const back = new URL(url.href);\n back.searchParams.delete(\"login\");\n return redirectResponse(back.pathname + back.search);\n }\n\n return htmlResponse(renderAdminHtml(!!adminUser));\n }\n if (url.pathname === \"/monitor\") return htmlResponse(MONITOR_HTML);\n\n // 알림용 서비스워커. 반드시 최상위 경로(/sw.js)에서 내려줘야 사이트 전체를 담당한다.\n if (url.pathname === \"/sw.js\") {\n return new Response(SERVICE_WORKER_JS, {\n headers: {\n \"content-type\": \"text/javascript; charset=utf-8\",\n \"cache-control\": \"no-cache\",\n \"service-worker-allowed\": \"/\",\n \"x-content-type-options\": \"nosniff\",\n },\n });\n }\n\n // 예전 주소로 들어오거나 이미 공유된 링크를 눌러도 통합된 화면으로 보낸다.\n if (url.pathname === \"/history\") {\n return redirectResponse(\"/admin\" + url.search);\n }\n\n if (url.pathname === \"/api/stack\") {\n return handleStackJsonApi(req, url, blob);\n }\n if (url.pathname === \"/api/donation\") {\n return handleDonationApi(req, url, blob);\n }\n if (url.pathname === \"/api/history\") {\n return handleHistoryJsonApi(req, url, blob);\n }\n\n if (url.pathname === \"/admin/announce\") {\n return handleAdminAnnouncement(req, url);\n }\n\n if (url.pathname === \"/admin/maintenance-status\") {\n if (!(await checkAuth(req))) return unauthorizedResponse();\n return jsonResponse({ ok: true, on: await getMaintenanceMode(blob) });\n }\n\n if (url.pathname === \"/admin/maintenance\" && req.method === \"POST\") {\n if (!(await checkAuth(req))) return unauthorizedResponse();\n if (!sameOrigin(req, url)) return forbiddenResponse();\n const body = await readJsonBody(req);\n if (!body || typeof body.on !== \"boolean\") {\n return jsonResponse(\n { ok: false, error: \"on(boolean)이 필요합니다.\" },\n 400,\n );\n }\n await setMaintenanceMode(blob, body.on);\n return jsonResponse({ ok: true, on: body.on });\n }\n\n // 시간 기준 운영에서는 YouTube 연동을 쓰지 않는다.\n // 남아 있는 워커나 Push 알림이 들어오면 로그에서 바로 보이도록 410으로 응답한다.\n if (\n url.pathname === \"/youtube-check\" ||\n url.pathname.startsWith(\"/youtube-webhook\")\n ) {\n return jsonResponse({\n ok: false,\n error:\n \"YouTube 자동 초기화는 사용하지 않습니다. (매일 06:00 초기화로 운영)\",\n }, 410);\n }\n\n return handleNightbotRequest(req, url, blob);\n}","createdAt",["D",1789533994482],"branchVersion","branchId","a669a274-1d8e-4aec-b258-6ada72f2e9bb","id","9d4dc10d-0136-4985-94f6-6b0bf535e31e","Aguking_Stack",["D",1787817154621],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","d7bd44ad-648e-46fe-b25e-97dc3e998420","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a04226-b52a-76ab-bc3d-16937b891876","tursoName","9d4dc10d0136498594f66b0bf535e31e","tursoHostname","9d4dc10d0136498594f66b0bf535e31e-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789497078049],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_106":102},"org",{"_98":97,"_99":100,"_101":102,"_18":54,"_103":104,"_105":25},"branch",{"_13":87,"_32":88,"_43":42,"_89":44,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":45,"_96":97},"isOwned",415,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","Steven_Jin","handle","displayName","Steven-J-KY","avatar","https://avatars.githubusercontent.com/u/321694553?v=4","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":210,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":-5,"_53":-5,"_18":54,"_55":31,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":211,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":212,"_82":213,"_84":214,"_86":25},"tree",[189,190,191,192,193],"files",[189,190,191,192,193],"counts",{"_178":61,"_179":180,"_181":61,"_182":183,"_184":185},"contents",[129,130,131,132,133],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":169,"_32":170,"_30":171,"_137":-5,"_41":42,"_40":172,"_139":57,"_38":173,"_13":174,"_33":175,"_35":176,"_24":25,"_143":-5,"_27":177},{"_43":160,"_32":161,"_30":162,"_137":-5,"_41":42,"_40":163,"_139":57,"_38":164,"_13":165,"_33":34,"_35":166,"_24":25,"_143":167,"_27":168},{"_43":155,"_32":28,"_30":31,"_137":-5,"_41":42,"_40":14,"_139":25,"_38":156,"_13":157,"_33":34,"_35":37,"_24":25,"_143":158,"_27":159},{"_43":146,"_32":147,"_30":148,"_137":-5,"_41":42,"_40":149,"_139":25,"_38":150,"_13":151,"_33":152,"_35":153,"_24":25,"_143":-5,"_27":154},{"_43":134,"_32":135,"_30":136,"_137":-5,"_41":42,"_40":138,"_139":57,"_38":140,"_13":141,"_33":34,"_35":142,"_24":25,"_143":144,"_27":145},"9c961185-c175-4dcd-a379-789e7bc06f59","youtube-notice-bot.ts","31ef2e96-a5e5-11f1-aa35-1607ee4eb77e","parentId",342,"latest",["D",1788834627060],28,"/**\n * YouTube Live Stream Viewer for Val Town\n * 암본이수혁 (aguking) 유튜브 채널의 라이브 방송을 볼 수 있는 화면\n */\n\nconst CHANNEL_ID = \"UC1LiqB9tfyRge5fZ2-7BTVQ\";\nconst CHANNEL_NAME = \"암본이수혁 (aguking)\";\nconst CHANNEL_URL =\n \"https://www.youtube.com/@%EC%97%B0%EC%97%94%ED%84%B0%EC%9D%B4%EC%88%98%ED%98%81\";\nconst CHECK_INTERVAL_MS = 15 * 60_000;\n\ntype LiveResult =\n | { live: true; videoId: string; title: string }\n | { live: false; reason?: string };\n\nasync function findCurrentLive(): Promise {\n const apiKey = Deno.env.get(\"YOUTUBE_API_KEY\")?.trim();\n\n if (!apiKey) {\n return {\n live: false,\n reason: \"Val Town Secrets에 YOUTUBE_API_KEY가 설정되지 않았습니다.\",\n };\n }\n\n const params = new URLSearchParams({\n part: \"snippet\",\n channelId: CHANNEL_ID,\n eventType: \"live\",\n type: \"video\",\n order: \"date\",\n maxResults: \"1\",\n key: apiKey,\n });\n\n try {\n const response = await fetch(\n `https://www.googleapis.com/youtube/v3/search?${params.toString()}`,\n );\n\n if (!response.ok) {\n const detail = await response.text();\n console.error(\"YouTube API error:\", response.status, detail);\n return {\n live: false,\n reason:\n `YouTube API 요청 오류 (${response.status}). API 키와 YouTube Data API v3 활성화 상태를 확인하세요.`,\n };\n }\n\n const data = await response.json();\n const item = data.items?.[0];\n const videoId = item?.id?.videoId;\n\n if (!videoId || !/^[A-Za-z0-9_-]{11}$/.test(videoId)) {\n return { live: false };\n }\n\n return {\n live: true,\n videoId,\n title: item?.snippet?.title || \"YouTube Live\",\n };\n } catch (error) {\n console.error(\"YouTube API request failed:\", error);\n return {\n live: false,\n reason: \"YouTube API 연결에 실패했습니다. 잠시 후 다시 시도합니다.\",\n };\n }\n}\n\nfunction escapeHtml(value: string): string {\n return value.replace(/[&<>'\"]/g, (character) => {\n const entities: Record = {\n \"&\": \"&\",\n \"<\": \"<\",\n \">\": \">\",\n \"'\": \"'\",\n '\"': \""\",\n };\n return entities[character];\n });\n}\n\nfunction renderPage(origin: string): string {\n const liveApiUrl = `${origin}?api=live`;\n\n return `\n\n\n \n \n \n ${escapeHtml(CHANNEL_NAME)} 라이브\n \n\n\n

🎬 ${escapeHtml(CHANNEL_NAME)}

YouTube 라이브 시청 · 채팅

라이브 상태 확인 중…

\n\n

라이브 상태를 확인하고 있습니다

잠시만 기다려 주세요.

\n \n

\n\n

15분마다 새 라이브 여부를 자동으로 확인합니다.

\n YouTube 채널에서 열기\n

\n\n \n

\n\n \n\n`;\n}\n\nexport default async function handler(request: Request): Promise {\n const url = new URL(request.url);\n\n if (url.searchParams.get(\"api\") === \"live\") {\n return Response.json(await findCurrentLive(), {\n headers: { \"cache-control\": \"no-store\" },\n });\n }\n\n return new Response(renderPage(url.origin), {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n \"cache-control\": \"no-store\",\n },\n });\n}","label","aguking-live",[135],"cd345a3e-9b73-4cb7-96df-1be8d611a279","ui.ts","6ac4b584-adf5-11f1-a55f-1607ee4eb77e",396,["D",1789477376229],13,"script","// ver.4.4 ui.ts — 화면(HTML/CSS/JS)과 공통 상수. main.ts 에서 import 해서 쓴다.\n// main.ts 와 반드시 같은 버전끼리 배포할 것. (import 이름이 하나만 어긋나도 전체가 멈춘다)\nexport const EMOJI_MAP: Record = {\n \"금연\": \"🚭\",\n \"흡연\": \"🚬\",\n \"먹어\": \"🍚\",\n \"먹지마\": \"🚫\",\n \"짠\": \"🍻\",\n \"오늘의 재미\": \"🤣\",\n \"무서움 지수\": \"👻\",\n \"문어\": \"🐙\",\n \"꽃게\": \"🦀\",\n \"소라\": \"🐚\",\n};\nexport const PRIMARY_CHANNEL = \"암본이수혁aguking\";\nexport const AUTO_REFRESH_INTERVAL_MS = 15000;\nconst CLIENT_COMMON_JS = `\nlet timer = null;\nfunction setStatus(msg, isErr) {\n statusEl.textContent = msg;\n statusEl.className = \"status\" + (isErr ? \" err\" : \"\");\n}\nfunction formatCount(raw) {\n if (raw === \"\" || raw === null || raw === undefined) return \"\";\n const n = Number(raw);\n if (!Number.isFinite(n)) return String(raw);\n return n.toLocaleString(\"en-US\", { maximumFractionDigits: 6 });\n}\nfunction errorMessage(e) {\n return e && e.message ? e.message : \"알 수 없는 오류\";\n}\nasync function fetchJson(path, options) {\n const res = await fetch(path, {\n cache: \"no-store\",\n credentials: \"same-origin\",\n ...(options || {})\n });\n const text = await res.text();\n let data = null;\n try {\n data = text ? JSON.parse(text) : null;\n } catch {}\n if (!res.ok || !data || data.ok === false) {\n const detail = data && (data.message || data.error);\n throw new Error(detail || (\"HTTP \" + res.status + (text ? \": \" + text : \"\")));\n }\n return data;\n}\nfunction bindCommonControls(load) {\n document.getElementById(\"loadBtn\").onclick = load;\n document.getElementById(\"autoRefresh\").onchange = e => {\n clearInterval(timer);\n timer = e.target.checked ? setInterval(load, ${AUTO_REFRESH_INTERVAL_MS}) : null;\n };\n chInput.addEventListener(\"keydown\", e => {\n if (e.key === \"Enter\") load();\n });\n}\n`;\n\n// Monitor / Admin 공통 CSS (History 는 테마 변수 구조가 달라 별도 유지)\nconst BASE_CSS = `\n:root { --bg:#f5f8fc; --panel:#fff; --line:#dde6f0; --text:#1c2733; --dim:#7891a8; --accent:#3b82f6; --input-bg:#eef3f9; --danger:#e0455a; }\n* { box-sizing:border-box; }\nbody { margin:0; background:var(--bg); color:var(--text); font-family:\"SF Mono\",\"D2Coding\",Consolas,monospace; padding:24px 16px 60px; min-height:100vh; }\n.wrap { max-width:560px; margin:0 auto; }\nh1 { font-size:15px; font-weight:600; letter-spacing:.02em; color:var(--dim); margin:0; }\nh1 span { color:var(--accent); }\n.panel { background:var(--panel); border:1px solid var(--line); border-radius:10px; padding:16px; margin-bottom:14px; box-shadow:0 1px 2px rgba(59,130,246,.06); }\nlabel { display:block; font-size:12px; color:var(--dim); margin-bottom:6px; }\n.row { display:flex; gap:8px; margin-bottom:10px; flex-wrap:wrap; }\ninput[type=\"text\"], input[type=\"number\"], select { flex:1; min-width:0; background:var(--input-bg); border:1px solid var(--line); border-radius:6px; color:var(--text); padding:9px 10px; font-family:inherit; font-size:16px; }\ninput[type=\"text\"]:focus, input[type=\"number\"]:focus, select:focus { outline:none; border-color:var(--accent); }\nbutton { background:var(--accent); color:#fff; border:none; border-radius:6px; padding:9px 14px; font-family:inherit; font-size:13px; font-weight:600; cursor:pointer; min-height:40px; }\nbutton:hover { filter:brightness(1.08); }\nbutton.ghost { background:transparent; color:var(--dim); border:1px solid var(--line); font-weight:500; }\nbutton.ghost:hover { color:var(--text); border-color:var(--accent); }\n.toolbar { display:flex; align-items:center; justify-content:space-between; margin-top:4px; flex-wrap:wrap; gap:8px; }\n.auto { display:flex; align-items:center; gap:6px; font-size:12px; color:var(--dim); }\n.auto input { accent-color:var(--accent); }\n.status { font-size:12px; color:var(--dim); margin:10px 0 4px; min-height:16px; white-space:pre-wrap; word-break:break-word; }\n.status.err { color:var(--danger); }\n.items { display:flex; flex-direction:column; gap:8px; }\n.item { display:flex; align-items:baseline; justify-content:space-between; background:var(--input-bg); border:1px solid var(--line); border-radius:8px; padding:10px 12px; gap:8px; }\n.item .name { font-size:14px; word-break:break-word; }\n.item .count { font-size:14px; font-weight:700; color:var(--accent); }\n.empty { text-align:center; color:var(--dim); font-size:13px; padding:28px 0; }\n@media (max-width:380px) { body { padding:16px 12px 48px; } }\n`;\n\nexport function label(item: string): string {\n const emoji = EMOJI_MAP[item];\n return emoji ? `${emoji} ${item}` : item;\n}\n\n// Channel Validation Helpers (Patched)\n\nconst MAX_CHANNEL_LENGTH = 100;\nconst MAX_ITEM_LENGTH = 100;\n\nexport function toNfc(value: string): string {\n try {\n return String(value ?? \"\").normalize(\"NFC\");\n } catch {\n return String(value ?? \"\");\n }\n}\n\nexport function normalizeChannel(channel: string): string {\n const trimmed = toNfc(String(channel ?? \"\").trim());\n // 예전 채널명(띄어쓰기 포함)으로 들어온 요청도 같은 데이터를 쓴다.\n return trimmed === \"암본이수혁 aguking\" ? PRIMARY_CHANNEL : trimmed;\n}\n\nexport function isSafeChannelName(channel: string): boolean {\n return (\n typeof channel === \"string\" &&\n channel.length > 0 &&\n channel.length <= MAX_CHANNEL_LENGTH &&\n !/[\\x00-\\x1F\\x7F]/.test(channel)\n );\n}\n\nexport function isSafeItemName(item: string): boolean {\n return (\n typeof item === \"string\" &&\n item.length > 0 &&\n item.length <= MAX_ITEM_LENGTH &&\n !/[\\x00-\\x1F\\x7F]/.test(item)\n );\n}\n\n// Monitor HTML\n\nexport const MONITOR_HTML = `\n\n\n\n\nStack Monitoring\n\n\n\n

\n\n

\n채널\n

\n \n \n

\n\n

\n 불러오는 중...\n

\n\n

\n\n\n`;\n\n// 관리 패널 (로그인한 관리자에게만 내려간다)\n\nconst ADMIN_SIDE_HTML = ``;\n\nconst ADMIN_SIDE_JS = `\n// ---------- 관리 패널 ----------\nconst stackItemsEl = document.getElementById(\"stackItems\");\nconst stackCountEl = document.getElementById(\"stackCount\");\nconst newItemSelect = document.getElementById(\"newItem\");\nconst newItemCustom = document.getElementById(\"newItemCustom\");\nconst maintenanceToggle = document.getElementById(\"maintenanceToggle\");\nconst maintenanceStatusEl = document.getElementById(\"maintenanceStatus\");\n\nfunction renderMaintenanceStatus(on) {\n maintenanceStatusEl.textContent =\n on\n ? \"🔧 ON - 나이트봇 요청에는 점검 안내 문구만 응답합니다.\"\n : \"정상 작동 중입니다.\";\n}\nasync function loadMaintenanceStatus() {\n try {\n const data = await fetchJson(API + \"admin/maintenance-status\");\n maintenanceToggle.checked = !!data.on;\n renderMaintenanceStatus(!!data.on);\n } catch (e) {\n maintenanceStatusEl.textContent = \"점검 모드 상태 오류: \" + errorMessage(e);\n }\n}\nmaintenanceToggle.addEventListener(\"change\", async e => {\n const on = e.target.checked;\n maintenanceStatusEl.textContent = \"변경 중...\";\n try {\n const data = await fetchJson(API + \"admin/maintenance\", {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify({ on })\n });\n maintenanceToggle.checked = !!data.on;\n renderMaintenanceStatus(!!data.on);\n } catch (err) {\n maintenanceStatusEl.textContent = \"변경 실패: \" + errorMessage(err);\n maintenanceToggle.checked = !on;\n }\n});\n\nfunction looksLikeNameWithNumber(name) {\n return /(^|\\\\s)-?\\\\d+(?:\\\\.\\\\d+)?$/.test(name.trim());\n}\n// 0보다 큰 숫자면 서버로 보낼 문자열을, 아니면 null을 돌려준다.\nfunction parseAmount(raw) {\n const s = String(raw).trim();\n if (!/^\\\\d+(?:\\\\.\\\\d+)?$/.test(s)) return null;\n const n = Number(s);\n if (!Number.isFinite(n) || n <= 0) return null;\n return s;\n}\n\n// 기록을 불러온 뒤 이어서 호출된다. 성공했을 때는 상태 문구를 덮어쓰지 않는다.\nasync function loadStack() {\n const ch = chInput.value.trim();\n if (!ch) return;\n try {\n const data = await fetchJson(API + \"api/stack?ch=\" + encodeURIComponent(ch));\n renderStack(data.items || []);\n } catch (e) {\n stackItemsEl.replaceChildren();\n stackCountEl.textContent = \"\";\n setStatus(\"스택 불러오기 실패: \" + errorMessage(e), true);\n }\n}\n\nfunction renderStack(items) {\n stackItemsEl.replaceChildren();\n stackCountEl.textContent = items.length ? items.length + \"개\" : \"\";\n if (!items.length) {\n const empty = document.createElement(\"p\");\n empty.className = \"side-note\";\n empty.style.margin = \"0\";\n empty.textContent = \"🤖 현재 스택 없음.\";\n stackItemsEl.appendChild(empty);\n return;\n }\n items.forEach(it => {\n const displayName = it.label || it.item;\n const row = document.createElement(\"div\");\n row.className = \"stack-item\";\n\n const nameBtn = document.createElement(\"button\");\n nameBtn.type = \"button\";\n nameBtn.className = \"name\";\n nameBtn.textContent = displayName;\n nameBtn.title = \"이 항목의 기록만 보기\";\n nameBtn.onclick = () => focusItem(it.item);\n\n const countEl = document.createElement(\"span\");\n countEl.className = \"count\";\n countEl.textContent = formatCount(it.count);\n\n const btns = document.createElement(\"div\");\n btns.className = \"btns\";\n const stepInput = document.createElement(\"input\");\n stepInput.type = \"number\";\n stepInput.className = \"step\";\n stepInput.value = \"1\";\n stepInput.step = \"any\";\n stepInput.min = \"0.01\";\n stepInput.inputMode = \"decimal\";\n stepInput.setAttribute(\"aria-label\", displayName + \" 수량\");\n const minusBtn = document.createElement(\"button\");\n minusBtn.type = \"button\";\n minusBtn.className = \"ghost small\";\n minusBtn.textContent = \"차감\";\n const plusBtn = document.createElement(\"button\");\n plusBtn.type = \"button\";\n plusBtn.className = \"small\";\n plusBtn.textContent = \"추가\";\n const delBtn = document.createElement(\"button\");\n delBtn.type = \"button\";\n delBtn.className = \"ghost danger small\";\n delBtn.textContent = \"삭제\";\n btns.appendChild(stepInput);\n btns.appendChild(minusBtn);\n btns.appendChild(plusBtn);\n btns.appendChild(delBtn);\n\n row.appendChild(nameBtn);\n row.appendChild(countEl);\n row.appendChild(btns);\n\n const getStep = () => {\n const amount = parseAmount(stepInput.value);\n if (amount === null) {\n setStatus(\"수량은 0 보다 큰 숫자만 입력할 수 있습니다.\", true);\n }\n return amount;\n };\n plusBtn.onclick = () => {\n const amount = getStep();\n if (amount === null) return;\n if (looksLikeNameWithNumber(it.item) && !confirm(\n \"이 항목의 실제 이름이 \\\\\"\" + it.item + \"\\\\\" 입니다. \" +\n \"이름 끝에 숫자가 포함되어 있는데, 이 이름 그대로 계속 추가할까요?\\\\n\" +\n \"(잘못 생성된 항목이면 취소를 누르고 먼저 삭제 후 새로 추가하세요.)\"\n )) {\n return;\n }\n runAction(\"추가\", it.item, amount);\n };\n minusBtn.onclick = () => {\n const amount = getStep();\n if (amount === null) return;\n runAction(\"차감\", it.item, amount);\n };\n delBtn.onclick = () => {\n if (confirm(displayName + \" 항목을 완전히 삭제할까요?\")) {\n runAction(\"삭제\", it.item);\n }\n };\n stackItemsEl.appendChild(row);\n });\n}\n\nasync function runAction(action, item, amount) {\n const ch = chInput.value.trim();\n if (!ch) {\n setStatus(\"채널을 입력해주세요.\", true);\n return;\n }\n const body = { channel: ch, action };\n if (item !== undefined) body.item = item;\n if (amount !== undefined) body.amount = amount;\n setStatus(\"처리 중...\");\n try {\n const data = await fetchJson(API + \"api/stack\", {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify(body)\n });\n // 기록초기화 뒤에는 서버 응답이 비므로 etag 캐시를 버리고 새로 받는다.\n state.etag = \"\";\n await load();\n setStatus(\"처리 완료 : \" + data.message);\n } catch (e) {\n setStatus(\"처리 실패: \" + errorMessage(e), true);\n }\n}\n\nnewItemSelect.onchange = () => {\n const isCustom = newItemSelect.value === \"__custom__\";\n newItemCustom.style.display = isCustom ? \"\" : \"none\";\n if (isCustom) newItemCustom.focus();\n};\nnewItemCustom.addEventListener(\"keydown\", e => {\n if (e.key === \"Enter\") document.getElementById(\"addBtn\").click();\n});\nfunction validateNewItemName(name) {\n if (!name) {\n setStatus(\"항목 이름을 입력해주세요.\", true);\n return false;\n }\n if (looksLikeNameWithNumber(name)) {\n setStatus(\n \"항목 이름(\\\\\"\" + name + \"\\\\\") 끝에 숫자가 포함되어 있습니다. \" +\n \"이름과 수량은 반드시 분리된 칸에 각각 입력해주세요.\",\n true\n );\n return false;\n }\n return true;\n}\nfunction getNewItemName() {\n const isCustom = newItemSelect.value === \"__custom__\";\n return isCustom ? newItemCustom.value.trim() : newItemSelect.value;\n}\nfunction submitNewItem(action) {\n const name = getNewItemName();\n if (!validateNewItemName(name)) return;\n const raw = document.getElementById(\"newAmount\").value;\n const amount = parseAmount(raw);\n if (amount === null) {\n setStatus(\n \"수량은 0 보다 큰 숫자만 입력할 수 있습니다. (입력값: \\\\\"\" + raw + \"\\\\\")\",\n true\n );\n return;\n }\n runAction(action, name, amount);\n if (newItemSelect.value === \"__custom__\") newItemCustom.value = \"\";\n}\ndocument.getElementById(\"addBtn\").onclick = () => submitNewItem(\"추가\");\ndocument.getElementById(\"subBtn\").onclick = () => submitNewItem(\"차감\");\ndocument.getElementById(\"resetBtn\").onclick = () => {\n const ch = chInput.value.trim();\n if (!ch) {\n setStatus(\"채널을 입력해주세요.\", true);\n return;\n }\n if (confirm(ch + \" 채널의 모든 항목을 초기화할까요? 되돌릴 수 없습니다.\")) {\n runAction(\"초기화\");\n }\n};\ndocument.getElementById(\"resetHistoryBtn\").onclick = () => {\n const ch = chInput.value.trim();\n if (!ch) {\n setStatus(\"채널을 입력해주세요.\", true);\n return;\n }\n if (confirm(ch + \" 채널의 기록(History)을 모두 삭제할까요? 되돌릴 수 없습니다.\")) {\n runAction(\"기록초기화\");\n }\n};\n\nloadAdmin = loadStack;\nloadMaintenanceStatus();\n`;\n\n// 통합 화면 (/admin)\n// 히스토리를 기본으로 두고, 로그인한 관리자에게만 오른쪽 관리 패널을 함께 내려준다.\n// 비로그인 방문자에게는 관리 패널의 HTML 자체를 보내지 않는다.\n\nexport function renderAdminHtml(isAdmin: boolean): string {\n return `\n\n\n\n\nStack ${isAdmin ? \"Admin\" : \"History\"}\n\n\n\n\n

\n\n\n

\n 채널\n

\n \n \n

\n \n

\n\n

기록을 불러오는 중...

\n\n

\n\n${isAdmin ? ADMIN_SIDE_HTML : \"\"}\n

\n\n\n\n\n\n`;\n}",[147],"c048e764-8384-4bf4-82e0-7121c83020b4",["D",1789533994482],205,"aguking-stack",[28],"a81d3785-4d93-48a3-a20e-96a95950da37","excel.ts","b6c0703c-a863-11f1-85c1-1607ee4eb77e",371,["D",1789044918857],3,"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst TABLE = \"excel_items\";\nconst DEFAULT_CHANNEL = \"암본이수혁aguking\";\nconst DECIMAL_PLACES = 6;\nconst SCALE = 1_000_000;\n\nconst EMOJIS = [\n \"🍎\",\n \"🍏\",\n \"🍓\",\n \"🍒\",\n \"🍋\",\n \"🧅\",\n \"🥔\",\n \"🧄\",\n \"🌽\",\n \"🥕\",\n \"👑\",\n \"💎\",\n \"⚔️\",\n \"🐉\",\n \"🔥\",\n \"🦁\",\n \"🐯\",\n \"🐺\",\n \"🦊\",\n \"🐻\",\n \"🎲\",\n \"⭐\",\n \"✨\",\n \"💫\",\n \"🌈\",\n \"🎯\",\n \"🏆\",\n \"🎮\",\n \"🎁\",\n \"🚀\",\n \"📦\",\n \"🔹\",\n \"🎉\",\n \"✅\",\n];\n\ntype Item = { name: string; qty: number };\n\ntype Command =\n | { command: \"추가\" | \"차감\"; name?: string; amount: number }\n | { command: \"삭제\"; name?: string }\n | { command: \"초기화\" }\n | { command: \"unknown\" };\n\nfunction round6(value: number): number {\n return Math.round((value + Number.EPSILON) * SCALE) / SCALE;\n}\n\nfunction formatQty(value: number): string {\n const safe = Number.isFinite(value) ? round6(value) : 0;\n return safe.toFixed(DECIMAL_PLACES).replace(/\\.?0+$/, \"\");\n}\n\nfunction parseAmount(raw: string | undefined): number {\n const value = Number(raw);\n return Number.isFinite(value) && value > 0 ? round6(value) : 1;\n}\n\nfunction getRandomEmoji(): string {\n return EMOJIS[Math.floor(Math.random() * EMOJIS.length)];\n}\n\nfunction escapeHtml(value: string): string {\n return value\n .replaceAll(\"&\", \"&\")\n .replaceAll(\"<\", \"<\")\n .replaceAll(\">\", \">\")\n .replaceAll('\"', \""\")\n .replaceAll(\"'\", \"'\");\n}\n\nfunction readResultValue(result: any, row: any, column: string): unknown {\n if (row && typeof row === \"object\" && !Array.isArray(row) && column in row) {\n return row[column];\n }\n\n const columns = Array.isArray(result.columns) ? result.columns : [];\n const index = columns.findIndex(\n (item: unknown) => String(item).toLowerCase() === column.toLowerCase(),\n );\n\n return index >= 0 && row ? row[index] : undefined;\n}\n\nasync function ensureTable(): Promise {\n await sqlite.execute(\n `CREATE TABLE IF NOT EXISTS ${TABLE} (\n channel TEXT NOT NULL,\n name TEXT NOT NULL,\n qty REAL NOT NULL DEFAULT 0,\n PRIMARY KEY (channel, name)\n )`,\n );\n}\n\nasync function getItems(channel: string): Promise {\n const result: any = await sqlite.execute({\n sql: `SELECT name, qty\n FROM ${TABLE}\n WHERE channel = ?\n ORDER BY CASE WHEN name = '국고' THEN 1 ELSE 0 END ASC,\n rowid ASC`,\n args: [channel],\n });\n\n return (result.rows || [])\n .map((row: any) => ({\n name: String(readResultValue(result, row, \"name\") ?? \"\").trim(),\n qty: round6(Number(readResultValue(result, row, \"qty\")) || 0),\n }))\n .filter((item: Item) => item.name !== \"\");\n}\n\nasync function listItemsText(channel: string): Promise {\n const items = await getItems(channel);\n\n return items.length\n ? items\n .map(\n (item) => `${getRandomEmoji()} ${item.name} ${formatQty(item.qty)}`,\n )\n .join(\", \")\n : \"✨ 아직 비어 있어요. 항목을 추가해 주세요!\";\n}\n\nasync function addItem(\n channel: string,\n name: string,\n amount: number,\n): Promise {\n if (name === \"국고\") {\n // 1) 기존 국고 수량 읽기\n const result: any = await sqlite.execute({\n sql: `SELECT qty FROM ${TABLE} WHERE channel = ? AND name = ?`,\n args: [channel, name],\n });\n\n const oldQty = result.rows?.length\n ? round6(Number(readResultValue(result, result.rows[0], \"qty\")) || 0)\n : 0;\n\n const newQty = round6(oldQty + amount);\n\n // 2) 기존 국고 삭제 (있으면)\n if (result.rows?.length) {\n await sqlite.execute({\n sql: `DELETE FROM ${TABLE} WHERE channel = ? AND name = ?`,\n args: [channel, name],\n });\n }\n\n // 3) 새 행으로 INSERT → rowid 가 가장 큰 값이 되어 맨 뒤로 감\n await sqlite.execute({\n sql: `INSERT INTO ${TABLE} (channel, name, qty) VALUES (?, ?, ?)`,\n args: [channel, name, newQty],\n });\n\n return newQty;\n }\n\n // 일반 항목: 기존 로직 유지 (중복 시 합산)\n await sqlite.execute({\n sql: `INSERT INTO ${TABLE} (channel, name, qty) VALUES (?, ?, ?)\n ON CONFLICT(channel, name)\n DO UPDATE SET qty = ROUND(qty + excluded.qty, 6)`,\n args: [channel, name, amount],\n });\n\n const result: any = await sqlite.execute({\n sql: `SELECT qty FROM ${TABLE} WHERE channel = ? AND name = ?`,\n args: [channel, name],\n });\n\n return round6(Number(readResultValue(result, result.rows[0], \"qty\")) || 0);\n}\n\nasync function subtractItem(\n channel: string,\n name: string,\n amount: number,\n): Promise {\n const result: any = await sqlite.execute({\n sql: `SELECT qty FROM ${TABLE} WHERE channel = ? AND name = ?`,\n args: [channel, name],\n });\n\n if (!result.rows?.length) return null;\n\n const current = round6(\n Number(readResultValue(result, result.rows[0], \"qty\")) || 0,\n );\n const next = Math.max(0, round6(current - amount));\n\n if (name === \"국고\") {\n // 국고는 삭제 후 재 INSERT 로 rowid 갱신 (항상 맨 뒤)\n await sqlite.execute({\n sql: `DELETE FROM ${TABLE} WHERE channel = ? AND name = ?`,\n args: [channel, name],\n });\n\n await sqlite.execute({\n sql: `INSERT INTO ${TABLE} (channel, name, qty) VALUES (?, ?, ?)`,\n args: [channel, name, next],\n });\n } else {\n // 일반 항목은 그냥 업데이트\n await sqlite.execute({\n sql: `UPDATE ${TABLE} SET qty = ? WHERE channel = ? AND name = ?`,\n args: [next, channel, name],\n });\n }\n\n return next;\n}\n\nasync function deleteItem(channel: string, name: string): Promise {\n await sqlite.execute({\n sql: `DELETE FROM ${TABLE} WHERE channel = ? AND name = ?`,\n args: [channel, name],\n });\n}\n\nasync function resetChannel(channel: string): Promise {\n await sqlite.execute({\n sql: `DELETE FROM ${TABLE} WHERE channel = ?`,\n args: [channel],\n });\n}\n\nfunction parseCommand(q: string): Command {\n const parts = q.trim().split(/\\s+/);\n const command = parts[0] || \"\";\n\n if (command === \"추가\" || command === \"차감\") {\n return {\n command,\n name: parts[1],\n amount: parseAmount(parts[2]),\n };\n }\n\n if (command === \"삭제\") {\n return {\n command,\n name: parts[1],\n };\n }\n\n if (command === \"초기화\") {\n return { command };\n }\n\n return { command: \"unknown\" };\n}\n\nasync function handleCommand(channel: string, q: string): Promise {\n if (!q.trim()) {\n return await listItemsText(channel);\n }\n\n const parsed = parseCommand(q);\n\n switch (parsed.command) {\n case \"추가\": {\n if (!parsed.name) return \"사용법: 추가 이름 수량\";\n\n const qty = await addItem(channel, parsed.name, parsed.amount);\n return `${parsed.name} 추가됨 (현재 ${formatQty(qty)})`;\n }\n\n case \"차감\": {\n if (!parsed.name) return \"사용법: 차감 이름 수량\";\n\n const qty = await subtractItem(channel, parsed.name, parsed.amount);\n\n return qty === null\n ? `${parsed.name} 항목이 없습니다.`\n : `${parsed.name} 차감됨 (현재 ${formatQty(qty)})`;\n }\n\n case \"삭제\": {\n if (!parsed.name) return \"사용법: 삭제 이름\";\n\n await deleteItem(channel, parsed.name);\n return `${parsed.name} 삭제됨`;\n }\n\n case \"초기화\":\n await resetChannel(channel);\n return \"전체 초기화 완료\";\n\n default:\n return \"알 수 없는 명령어입니다. (추가/차감/삭제/초기화)\";\n }\n}\n\nfunction checkAuth(req: Request): boolean {\n const accounts = new Map();\n\n for (const entry of (Deno.env.get(\"ADMIN_ACCOUNTS\") || \"\").split(\",\")) {\n const index = entry.indexOf(\":\");\n\n if (index > 0) {\n accounts.set(\n entry.slice(0, index).trim(),\n entry.slice(index + 1).trim(),\n );\n }\n }\n\n if (!accounts.size) return false;\n\n const header = req.headers.get(\"authorization\") || \"\";\n if (!header.startsWith(\"Basic \")) return false;\n\n try {\n const decoded = atob(header.slice(6));\n const index = decoded.indexOf(\":\");\n\n return index >= 0 &&\n accounts.get(decoded.slice(0, index).trim()) === decoded.slice(index + 1);\n } catch {\n return false;\n }\n}\n\nfunction refreshControlsHtml(channel: string): string {\n return `\n Auto\n \n \n \n \n \n\n \n\n `;\n}\n\nconst COMMON_CSS = `\n body {\n background: #0f1115;\n color: #eee;\n font-family: sans-serif;\n padding: 24px;\n }\n\n a { color: #9ab5ff; }\n\n table {\n width: 100%;\n border-collapse: collapse;\n background: #181b21;\n margin-top: 16px;\n }\n\n th, td {\n padding: 12px;\n text-align: left;\n border-bottom: 1px solid #2a2e37;\n }\n\n th { color: #9aa0a6; }\n\n .top-controls {\n position: fixed;\n top: 18px;\n right: 18px;\n display: flex;\n align-items: center;\n gap: 10px;\n z-index: 10;\n }\n\n .page-link {\n display: inline-flex;\n align-items: center;\n min-height: 38px;\n padding: 0 12px;\n box-sizing: border-box;\n border: 1px solid #3c4657;\n border-radius: 7px;\n color: #eaf0ff;\n background: #202631;\n text-decoration: none;\n font-size: 14px;\n font-weight: 700;\n }\n\n .page-link:hover {\n background: #303947;\n }\n\n .auto-toggle {\n display: inline-flex;\n align-items: center;\n gap: 8px;\n cursor: pointer;\n user-select: none;\n color: #c9ced8;\n font-size: 14px;\n }\n\n .auto-label {\n font-weight: 700;\n letter-spacing: .2px;\n }\n\n .auto-toggle input {\n position: absolute;\n width: 1px;\n height: 1px;\n opacity: 0;\n pointer-events: none;\n }\n\n .toggle-track {\n width: 42px;\n height: 24px;\n padding: 3px;\n box-sizing: border-box;\n border-radius: 999px;\n background: #343943;\n border: 1px solid #4b5260;\n transition: background .2s ease, border-color .2s ease;\n }\n\n .toggle-knob {\n display: block;\n width: 16px;\n height: 16px;\n border-radius: 50%;\n background: #fff;\n box-shadow: 0 1px 3px rgba(0, 0, 0, .45);\n transform: translateX(0);\n transition: transform .2s ease;\n }\n\n .auto-toggle input:checked + .toggle-track {\n background: #2a8a4b;\n border-color: #48b96b;\n }\n\n .auto-toggle input:checked + .toggle-track .toggle-knob {\n transform: translateX(16px);\n }\n\n .auto-toggle input:focus-visible + .toggle-track {\n outline: 2px solid #8fb1ff;\n outline-offset: 3px;\n }\n\n .manual-refresh {\n min-height: 38px;\n padding: 8px 12px;\n border: 1px solid #3c4657;\n border-radius: 7px;\n cursor: pointer;\n color: #eaf0ff;\n background: #263a63;\n font-weight: 700;\n }\n\n .manual-refresh:hover {\n background: #31508d;\n }\n`;\n\nfunction renderViewPage(channel: string, items: Item[]): string {\n const rows = items\n .map(\n (item) =>\n `${getRandomEmoji()} ${escapeHtml(item.name)}${\n formatQty(item.qty)\n }`,\n )\n .join(\"\");\n\n const adminUrl = `/admin?ch=${encodeURIComponent(channel)}`;\n\n return `\n\n\n \n \n 엑셀 - ${escapeHtml(channel)}\n \n\n\n

엑셀 - ${escapeHtml(channel)}

\n Admin\n ${refreshControlsHtml(channel)}\n

\n ${\n rows\n ? `\n \n ${rows}\n

이름	수량

`\n : \"

✨ 아직 비어 있어요. 항목을 추가해 주세요!

\"\n }\n\n`;\n}\n\nfunction renderAdminPage(channel: string, items: Item[]): string {\n const rows = items\n .map((item) => {\n const name = JSON.stringify(item.name);\n\n return `\n ${escapeHtml(item.name)}\n ${formatQty(item.qty)}\n \n \n \n \n \n `;\n })\n .join(\"\");\n\n const listUrl = `/?ch=${encodeURIComponent(channel)}`;\n\n return `\n\n\n \n \n 엑셀 관리 - ${escapeHtml(channel)}\n \n\n\n

엑셀 관리 - ${escapeHtml(channel)}

\n Monitoring\n ${refreshControlsHtml(channel)}\n

\n\n \n\n ${\n rows\n ? `\n \n ${rows}\n

이름	수량	관리

`\n : \"

✨ 아직 비어 있어요. 항목을 추가해 주세요! 항목이 없습니다.

\"\n }\n\n \n\n`;\n}\n\nexport default async function (req: Request): Promise {\n await ensureTable();\n\n const url = new URL(req.url);\n const channel = url.searchParams.get(\"ch\")?.trim() || DEFAULT_CHANNEL;\n const q = url.searchParams.get(\"q\");\n const isAdmin = url.pathname === \"/admin\";\n\n if (isAdmin && !checkAuth(req)) {\n return new Response(\"관리자 인증이 필요합니다.\", {\n status: 401,\n headers: {\n \"content-type\": \"text/plain; charset=utf-8\",\n \"www-authenticate\": 'Basic realm=\"Excel Admin\", charset=\"UTF-8\"',\n },\n });\n }\n\n if (q !== null) {\n return new Response(await handleCommand(channel, q), {\n headers: {\n \"content-type\": \"text/plain; charset=utf-8\",\n },\n });\n }\n\n const items = await getItems(channel);\n const html = isAdmin\n ? renderAdminPage(channel, items)\n : renderViewPage(channel, items);\n\n return new Response(html, {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n },\n });\n}","aguking-excel",[161],"e9f69516-3243-4254-b5c2-2e1f1ede405c","cron.ts","76069368-acbf-11f1-9e7d-1607ee4eb77e",377,["D",1789109900008],8,"interval","// 매일 06:00 KST 스택 초기화 (시간 기준, B)\n// Val Town Cron 스케줄은 지금 설정 그대로 두면 된다. (UTC 기준 0 21 * * * = KST 06:00)\n//\n// - main.ts 의 /api/stack 에 trigger:\"daily-reset\" 으로 초기화를 요청한다.\n// → History에 \"자동초기화(06시)\"로 기록된다.\n// - 일시적인 오류(네트워크, 5xx)는 최대 3번까지 다시 시도한다.\n// 서버가 최근 1시간 안의 매일 초기화를 건너뛰므로 재시도해도 두 번 초기화되지 않는다.\n\nconst STACK_API_URL = \"https://aguking-stack.val.run/api/stack\";\nconst STACK_API_SECRET = Deno.env.get(\"STACK_API_SECRET\") || \"\";\nconst CHANNEL = \"암본이수혁aguking\";\n\nconst MAX_ATTEMPTS = 3;\nconst REQUEST_TIMEOUT_MS = 15_000;\nconst RETRY_DELAY_MS = 5_000;\n\nexport default async function (_interval: Interval) {\n if (!STACK_API_SECRET) {\n console.error(\"STACK_API_SECRET이 없어 매일 초기화를 실행할 수 없습니다.\");\n return;\n }\n\n for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) {\n try {\n const res = await fetch(STACK_API_URL, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-stack-key\": STACK_API_SECRET,\n },\n body: JSON.stringify({\n channel: CHANNEL,\n action: \"초기화\",\n trigger: \"daily-reset\",\n }),\n signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),\n });\n const data = await res.json().catch(() => null);\n\n if (res.ok && data?.ok) {\n console.log(\n data.skipped ? \"매일 초기화 건너뜀:\" : \"매일 초기화 성공:\",\n data.message,\n );\n return;\n }\n\n console.error(\n `매일 초기화 실패 (${attempt}/${MAX_ATTEMPTS}):`,\n res.status,\n data,\n );\n // 인증·요청 오류(4xx)는 다시 시도해도 결과가 같으므로 바로 끝낸다.\n if (res.status >= 400 && res.status < 500) return;\n } catch (err) {\n console.error(\n `매일 초기화 요청 오류 (${attempt}/${MAX_ATTEMPTS}):`,\n String(err),\n );\n }\n\n if (attempt < MAX_ATTEMPTS) {\n await new Promise((resolve) => setTimeout(resolve, RETRY_DELAY_MS));\n }\n }\n}",[170],"pulls","branches",1,"forks","envVars",{"_186":174,"_188":61},"connections",{"_186":61,"_187":61},"count","unfilledCount","emptyCount",{"_43":169,"_32":170,"_30":171,"_137":-5,"_41":42,"_40":172,"_139":57,"_38":207,"_13":174,"_33":175,"_35":176,"_24":25,"_143":-5,"_195":208,"_27":209},{"_43":160,"_32":161,"_30":162,"_137":-5,"_41":42,"_40":163,"_139":57,"_38":204,"_13":165,"_33":34,"_35":166,"_24":25,"_143":167,"_195":205,"_27":206},{"_43":155,"_32":28,"_30":31,"_137":-5,"_41":42,"_40":14,"_139":25,"_38":201,"_13":157,"_33":34,"_35":37,"_24":25,"_143":158,"_195":202,"_27":203},{"_43":146,"_32":147,"_30":148,"_137":-5,"_41":42,"_40":149,"_139":25,"_38":198,"_13":151,"_33":152,"_35":153,"_24":25,"_143":-5,"_195":199,"_27":200},{"_43":134,"_32":135,"_30":136,"_137":-5,"_41":42,"_40":138,"_139":57,"_38":194,"_13":141,"_33":34,"_35":142,"_24":25,"_143":144,"_195":196,"_27":197},["D",1788834627060],"children",[],[135],["D",1789477376229],[],[147],["D",1789533994482],[],[28],["D",1789044918857],[],[161],["D",1789109900008],[],[170],["D",1787817154621],["D",1789497078049],{"_98":97,"_106":102},{"_98":97,"_99":100,"_101":102,"_18":54,"_103":104,"_105":25},{"_13":87,"_32":88,"_43":42,"_89":44,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":45,"_96":97},"ctx",{"_80":-5,"_126":248,"_249":250,"_251":252,"_253":25,"_254":25,"_255":25,"_256":57,"_257":-5,"_258":-7,"_259":-7,"_260":61,"_261":25,"_262":25,"_263":-5,"_264":25,"_265":25,"_266":25,"_267":-5},"ENV",{"_219":220,"_221":222,"_223":88,"_224":225,"_226":227,"_228":229,"_230":231,"_232":233,"_234":235,"_236":237,"_238":239,"_240":241,"_242":243,"_244":245,"_246":247},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

🎬 ${escapeHtml(CHANNEL_NAME)}

Stack Monitoring · aguking-stack

Stack ${\n isAdmin ? \"Admin\" : \"History\"\n } · aguking-stack

엑셀 - ${escapeHtml(channel)}

엑셀 관리 - ${escapeHtml(channel)}

Diff · v398