🎬 ${escapeHtml(CHANNEL_NAME)}

YouTube 라이브 시청 · 채팅

라이브 상태 확인 중…

\n\n

라이브 상태를 확인하고 있습니다

잠시만 기다려 주세요.

\n \n

\n\n

15분마다 새 라이브 여부를 자동으로 확인합니다.

\n YouTube 채널에서 열기\n

\n\n \n

\n\n \n\n`;\n}\n\nexport default async function handler(request: Request): Promise {\n const url = new URL(request.url);\n\n if (url.searchParams.get(\"api\") === \"live\") {\n return Response.json(await findCurrentLive(), {\n headers: { \"cache-control\": \"no-store\" },\n });\n }\n\n return new Response(renderPage(url.origin), {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n \"cache-control\": \"no-store\",\n },\n });\n}","label","aguking-live",[136],"dc6de24a-9355-4df7-bdca-f670d96fa8ba","ui.ts","6ac4b584-adf5-11f1-a55f-1607ee4eb77e",407,["D",1789537331670],17,"// ver.4.7.1 ui.ts — 공통 상수/검증/Monitor 화면.\n// Admin 화면은 ./admin_ui.ts, Admin 조각은 ./admin_parts.ts 로 분리했다.\nexport const EMOJI_MAP: Record = {\n \"금연\": \"🚭\",\n \"흡연\": \"🚬\",\n \"먹어\": \"🍚\",\n \"먹지마\": \"🚫\",\n \"짠\": \"🍻\",\n \"오늘의 재미\": \"🤣\",\n \"무서움 지수\": \"👻\",\n \"문어\": \"🐙\",\n \"꽃게\": \"🦀\",\n \"소라\": \"🐚\",\n};\nexport const PRIMARY_CHANNEL = \"암본이수혁aguking\";\nexport const AUTO_REFRESH_INTERVAL_MS = 15000;\nexport const CLIENT_COMMON_JS = `\nlet timer = null;\nfunction setStatus(msg, isErr) {\n statusEl.textContent = msg;\n statusEl.className = \"status\" + (isErr ? \" err\" : \"\");\n}\nfunction formatCount(raw) {\n if (raw === \"\" || raw === null || raw === undefined) return \"\";\n const n = Number(raw);\n if (!Number.isFinite(n)) return String(raw);\n return n.toLocaleString(\"en-US\", { maximumFractionDigits: 6 });\n}\nfunction errorMessage(e) {\n return e && e.message ? e.message : \"알 수 없는 오류\";\n}\nasync function fetchJson(path, options) {\n const res = await fetch(path, {\n cache: \"no-store\",\n credentials: \"same-origin\",\n ...(options || {})\n });\n const text = await res.text();\n let data = null;\n try {\n data = text ? JSON.parse(text) : null;\n } catch {}\n if (!res.ok || !data || data.ok === false) {\n const detail = data && (data.message || data.error);\n throw new Error(detail || (\"HTTP \" + res.status + (text ? \": \" + text : \"\")));\n }\n return data;\n}\nfunction bindCommonControls(load) {\n document.getElementById(\"loadBtn\").onclick = load;\n document.getElementById(\"autoRefresh\").onchange = e => {\n clearInterval(timer);\n timer = e.target.checked ? setInterval(load, ${AUTO_REFRESH_INTERVAL_MS}) : null;\n };\n chInput.addEventListener(\"keydown\", e => {\n if (e.key === \"Enter\") load();\n });\n}\n`;\n\nconst BASE_CSS = `\n:root { --bg:#f5f8fc; --panel:#fff; --line:#dde6f0; --text:#1c2733; --dim:#7891a8; --accent:#3b82f6; --input-bg:#eef3f9; --danger:#e0455a; }\n* { box-sizing:border-box; }\nbody { margin:0; background:var(--bg); color:var(--text); font-family:\"SF Mono\",\"D2Coding\",Consolas,monospace; padding:24px 16px 60px; min-height:100vh; }\n.wrap { max-width:560px; margin:0 auto; }\nh1 { font-size:15px; font-weight:600; letter-spacing:.02em; color:var(--dim); margin:0; }\nh1 span { color:var(--accent); }\n.panel { background:var(--panel); border:1px solid var(--line); border-radius:10px; padding:16px; margin-bottom:14px; box-shadow:0 1px 2px rgba(59,130,246,.06); }\nlabel { display:block; font-size:12px; color:var(--dim); margin-bottom:6px; }\n.row { display:flex; gap:8px; margin-bottom:10px; flex-wrap:wrap; }\ninput[type=\"text\"], input[type=\"number\"], select { flex:1; min-width:0; background:var(--input-bg); border:1px solid var(--line); border-radius:6px; color:var(--text); padding:9px 10px; font-family:inherit; font-size:16px; }\ninput[type=\"text\"]:focus, input[type=\"number\"]:focus, select:focus { outline:none; border-color:var(--accent); }\nbutton { background:var(--accent); color:#fff; border:none; border-radius:6px; padding:9px 14px; font-family:inherit; font-size:13px; font-weight:600; cursor:pointer; min-height:40px; }\nbutton:hover { filter:brightness(1.08); }\nbutton.ghost { background:transparent; color:var(--dim); border:1px solid var(--line); font-weight:500; }\nbutton.ghost:hover { color:var(--text); border-color:var(--accent); }\n.toolbar { display:flex; align-items:center; justify-content:space-between; margin-top:4px; flex-wrap:wrap; gap:8px; }\n.auto { display:flex; align-items:center; gap:6px; font-size:12px; color:var(--dim); }\n.auto input { accent-color:var(--accent); }\n.status { font-size:12px; color:var(--dim); margin:10px 0 4px; min-height:16px; white-space:pre-wrap; word-break:break-word; }\n.status.err { color:var(--danger); }\n.items { display:flex; flex-direction:column; gap:8px; }\n.item { display:flex; align-items:baseline; justify-content:space-between; background:var(--input-bg); border:1px solid var(--line); border-radius:8px; padding:10px 12px; gap:8px; }\n.item .name { font-size:14px; word-break:break-word; }\n.item .count { font-size:14px; font-weight:700; color:var(--accent); }\n.empty { text-align:center; color:var(--dim); font-size:13px; padding:28px 0; }\n@media (max-width:380px) { body { padding:16px 12px 48px; } }\n`;\n\nexport function label(item: string): string {\n const emoji = EMOJI_MAP[item];\n return emoji ? `${emoji} ${item}` : item;\n}\n\nconst MAX_CHANNEL_LENGTH = 100;\nconst MAX_ITEM_LENGTH = 100;\n\nexport function toNfc(value: string): string {\n try {\n return String(value ?? \"\").normalize(\"NFC\");\n } catch {\n return String(value ?? \"\");\n }\n}\n\nexport function normalizeChannel(channel: string): string {\n const trimmed = toNfc(String(channel ?? \"\").trim());\n return trimmed === \"암본이수혁 aguking\" ? PRIMARY_CHANNEL : trimmed;\n}\n\nexport function isSafeChannelName(channel: string): boolean {\n return (\n typeof channel === \"string\" &&\n channel.length > 0 &&\n channel.length <= MAX_CHANNEL_LENGTH &&\n !/[\\x00-\\x1F\\x7F]/.test(channel)\n );\n}\n\nexport function isSafeItemName(item: string): boolean {\n return (\n typeof item === \"string\" &&\n item.length > 0 &&\n item.length <= MAX_ITEM_LENGTH &&\n !/[\\x00-\\x1F\\x7F]/.test(item)\n );\n}\n\nexport const MONITOR_HTML = `\n\n\n\n\nStack Monitoring\n\n\n\n

\n\n

\n채널\n

\n \n \n

\n\n

\n 불러오는 중...\n

\n\n

\n\n\n`;",[149],"fdd90215-9a50-4a80-869c-4b9c84fc913d",["D",1789537371373],[27],"eda30a3b-7346-4d12-8aec-069ec11bd2df","main.ts",406,["D",1789537307227],208,"// ver.4.7.1 main.ts — 서버 로직. 공통/Monitor는 ./ui.ts, Admin 화면은 ./admin_ui.ts.\n// ui.ts / admin_ui.ts / admin_parts.ts 와 반드시 같은 버전끼리 배포할 것.\n// 4.7.1 수정분: ui.ts 80,000자 제한 대응을 위해 Admin UI를 별도 파일로 분리.\nimport {\n isSafeChannelName,\n isSafeItemName,\n label,\n MONITOR_HTML,\n normalizeChannel,\n toNfc,\n} from \"./ui.ts\";\nimport { renderAdminHtml } from \"./admin_ui.ts\";\n\n// ver. 3 core: security + concurrency + JSON API + dedupe\n\nfunction getAdminAccounts(): Map {\n const rawAccounts = Deno.env.get(\"ADMIN_ACCOUNTS\") || \"\";\n const accounts = new Map();\n\n for (const entry of rawAccounts.split(\",\")) {\n const separatorIndex = entry.indexOf(\":\");\n if (separatorIndex <= 0) continue;\n\n const username = toNfc(entry.slice(0, separatorIndex).trim());\n const password = entry.slice(separatorIndex + 1).trim();\n if (username && password) accounts.set(username, password);\n }\n\n return accounts;\n}\n\nfunction timingSafeEqualText(a: string, b: string): boolean {\n const left = new TextEncoder().encode(a);\n const right = new TextEncoder().encode(b);\n let diff = left.length ^ right.length;\n const length = Math.max(left.length, right.length);\n\n for (let i = 0; i < length; i++) {\n diff |= (left[i] || 0) ^ (right[i] || 0);\n }\n\n return diff === 0;\n}\n\nfunction bytesToHex(buffer: ArrayBuffer): string {\n return Array.from(new Uint8Array(buffer))\n .map((b) => b.toString(16).padStart(2, \"0\"))\n .join(\"\");\n}\n\nasync function sha256Hex(value: string): Promise {\n return bytesToHex(\n await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(value)),\n );\n}\n\nasync function getAuthenticatedAdminUser(req: Request): Promise {\n const accounts = getAdminAccounts();\n if (!accounts.size) return null;\n\n const authHeader = req.headers.get(\"authorization\") || \"\";\n if (!authHeader.startsWith(\"Basic \")) return null;\n\n try {\n // 브라우저는 한글 아이디/비밀번호를 UTF-8로 보내므로 UTF-8로 풀어야 비교가 맞는다.\n const decoded = new TextDecoder().decode(\n Uint8Array.from(\n atob(authHeader.slice(\"Basic \".length)),\n (c) => c.charCodeAt(0),\n ),\n );\n const separatorIndex = decoded.indexOf(\":\");\n if (separatorIndex < 0) return null;\n\n const inputUser = toNfc(decoded.slice(0, separatorIndex).trim());\n const inputPassword = decoded.slice(separatorIndex + 1);\n const stored = accounts.get(inputUser);\n if (!stored) return null;\n\n const valid = stored.startsWith(\"sha256$\")\n ? timingSafeEqualText(\n await sha256Hex(inputPassword),\n stored.slice(\"sha256$\".length),\n )\n : timingSafeEqualText(inputPassword, stored);\n\n return valid ? inputUser : null;\n } catch {\n return null;\n }\n}\n\nasync function checkAuth(req: Request): Promise {\n return (await getAuthenticatedAdminUser(req)) !== null;\n}\n\nconst STACK_API_SECRET = Deno.env.get(\"STACK_API_SECRET\") || \"\";\nconst NIGHTBOT_API_SECRET = Deno.env.get(\"NIGHTBOT_API_SECRET\") ||\n STACK_API_SECRET;\nconst DONATION_API_SECRET = Deno.env.get(\"DONATION_API_SECRET\") ||\n STACK_API_SECRET;\n\nfunction checkSecret(\n req: Request,\n secret: string,\n headerNames: readonly string[],\n allowQueryKey = false,\n): boolean {\n if (!secret) return false;\n for (const name of headerNames) {\n const value = req.headers.get(name) || \"\";\n if (value && timingSafeEqualText(value, secret)) return true;\n }\n if (!allowQueryKey) return false;\n const queryKey = new URL(req.url).searchParams.get(\"key\") || \"\";\n return !!queryKey && timingSafeEqualText(queryKey, secret);\n}\n\nfunction checkStackApiKey(req: Request): boolean {\n // 기존 서버/cron 호환을 위해 ?key= 도 유지한다.\n return checkSecret(req, STACK_API_SECRET, [\"x-stack-key\"], true);\n}\n\nfunction checkNightbotApiKey(req: Request): boolean {\n // Nightbot Custom API 는 query parameter 사용이 일반적이다.\n return checkSecret(req, NIGHTBOT_API_SECRET, [\"x-nightbot-key\"], true);\n}\n\nfunction checkDonationApiKey(req: Request): boolean {\n // 신규 연동은 x-donation-key 사용을 권장한다. x-stack-key 는 기존 연동 호환용.\n return checkSecret(req, DONATION_API_SECRET, [\n \"x-donation-key\",\n \"x-stack-key\",\n ], true);\n}\n\nfunction unauthorizedResponse(): Response {\n return jsonResponse({ ok: false, error: \"인증이 필요합니다.\" }, 401, {\n \"WWW-Authenticate\": 'Basic realm=\"Admin Area\", charset=\"UTF-8\"',\n });\n}\n\nfunction forbiddenResponse(): Response {\n return jsonResponse({ ok: false, error: \"권한이 없습니다.\" }, 403);\n}\n\nfunction jsonResponse(\n body: unknown,\n status = 200,\n extraHeaders: Record = {},\n): Response {\n return new Response(JSON.stringify(body), {\n status,\n headers: {\n \"content-type\": \"application/json; charset=utf-8\",\n \"cache-control\": \"no-store\",\n \"x-content-type-options\": \"nosniff\",\n \"referrer-policy\": \"no-referrer\",\n ...extraHeaders,\n },\n });\n}\n\nfunction textResponse(\n body: string,\n status = 200,\n extraHeaders: Record = {},\n): Response {\n return new Response(body, {\n status,\n headers: {\n \"content-type\": \"text/plain; charset=utf-8\",\n \"cache-control\": \"no-store\",\n \"x-content-type-options\": \"nosniff\",\n \"referrer-policy\": \"no-referrer\",\n ...extraHeaders,\n },\n });\n}\n\nfunction redirectResponse(location: string): Response {\n // 302 를 쓴다. 301 은 브라우저가 오래 캐시해서 나중에 되돌리기 어렵다.\n return new Response(null, {\n status: 302,\n headers: {\n location,\n \"cache-control\": \"no-store\",\n \"referrer-policy\": \"no-referrer\",\n },\n });\n}\n\nconst SERVICE_WORKER_JS =\n `self.addEventListener(\"install\", () => self.skipWaiting());\nself.addEventListener(\"activate\", (e) => e.waitUntil(self.clients.claim()));\nself.addEventListener(\"notificationclick\", (e) => {\n const target = (e.notification.data && e.notification.data.url) || \"/admin\";\n e.notification.close();\n e.waitUntil((async () => {\n const wins = await self.clients.matchAll({ type: \"window\", includeUncontrolled: true });\n for (const w of wins) {\n if (w.url.indexOf(\"/admin\") !== -1) {\n await w.focus();\n if (\"navigate\" in w) return w.navigate(target);\n return w;\n }\n }\n return self.clients.openWindow(target);\n })());\n});\n`;\n\nfunction htmlResponse(html: string): Response {\n return new Response(html, {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n \"cache-control\": \"no-store\",\n \"x-content-type-options\": \"nosniff\",\n \"referrer-policy\": \"no-referrer\",\n },\n });\n}\n\n// Maintenance\n\nconst MAINTENANCE_KEY = \"system_maintenance\";\nconst MAINTENANCE_MESSAGE = \"🚧 스택봇 점검중입니다.\";\n\nasync function getJSONOr(\n blobStore: { getJSON: (k: string) => Promise },\n key: string,\n fallback: T,\n): Promise {\n // 키가 없는 경우에만 fallback 을 쓴다.\n // 저장소 자체 오류는 숨기지 않고 throw 하여 빈 데이터로 덮어쓰는 사고를 막는다.\n const value = await blobStore.getJSON(key);\n return (value as T) ?? fallback;\n}\n\nasync function getMaintenanceMode(\n blob: { getJSON: (k: string) => Promise },\n): Promise {\n const value = await getJSONOr<{ on?: boolean } | null>(\n blob,\n MAINTENANCE_KEY,\n null,\n );\n return value?.on === true;\n}\n\nasync function setMaintenanceMode(\n blob: { setJSON: (k: string, v: unknown) => Promise },\n on: boolean,\n): Promise {\n await blob.setJSON(MAINTENANCE_KEY, { on: !!on });\n}\n\n// Validation / parsing\n\nfunction roundAmount(n: number): number {\n return Math.round(n * 1e6) / 1e6;\n}\n\nfunction parsePositiveAmount(value: unknown): number | null {\n const s = String(value ?? \"\").trim();\n // 저장 정밀도와 동일하게 소수점은 최대 6자리만 허용한다.\n if (!/^\\d+(?:\\.\\d{1,6})?$/.test(s)) return null;\n\n const n = Number(s);\n if (!Number.isFinite(n) || n > 1_000_000_000) return null;\n const rounded = roundAmount(n);\n if (rounded <= 0) return null;\n return rounded;\n}\n\ntype ParsedCommandAmount = {\n item: string;\n amount: number;\n valid: boolean;\n // 수량으로 인식하려던 마지막 토큰 (오류 안내 문구용)\n lastToken: string | null;\n};\n\nfunction endsWithBareNumber(item: string): boolean {\n return /(^|\\s)-?\\d+(?:\\.\\d+)?$/.test(item.trim());\n}\n\nfunction looksLikeMalformedAmountToken(token: string): boolean {\n // 쉼표/부호/점 때문에 숫자처럼 보이지만 수량 규칙에 맞지 않는 마지막 토큰을\n // 항목명으로 잘못 저장하지 않고 명시적인 수량 오류로 돌려보낸다.\n return /^[+-]?[0-9][0-9,._+-]*$/.test(token);\n}\n\nfunction splitItemAndAmount(rest: string[]): ParsedCommandAmount {\n const tokens = rest.map((token) => toNfc(token.trim())).filter(Boolean);\n if (!tokens.length) {\n return { item: \"\", amount: 1, valid: true, lastToken: null };\n }\n\n const last = tokens[tokens.length - 1];\n if (\n tokens.length > 1 && looksLikeMalformedAmountToken(last) &&\n !/^\\d+(?:\\.\\d{1,6})?$/.test(last)\n ) {\n return {\n item: tokens.slice(0, -1).join(\" \"),\n amount: 0,\n valid: false,\n lastToken: last,\n };\n }\n if (tokens.length === 1 || !/^-?(?:\\d+(?:\\.\\d+)?)$/.test(last)) {\n return { item: tokens.join(\" \"), amount: 1, valid: true, lastToken: last };\n }\n\n const item = tokens.slice(0, -1).join(\" \");\n const amount = parsePositiveAmount(last);\n return amount === null\n ? { item, amount: 0, valid: false, lastToken: last }\n : { item, amount, valid: true, lastToken: last };\n}\n\nfunction normalizeItem(raw: unknown): string {\n return toNfc(String(raw ?? \"\").trim());\n}\n\nfunction sanitizeStack(input: unknown): Record {\n const out: Record = Object.create(null);\n if (!input || typeof input !== \"object\" || Array.isArray(input)) return out;\n\n for (\n const [rawItem, rawValue] of Object.entries(\n input as Record,\n )\n ) {\n const item = normalizeItem(rawItem);\n const value = Number(rawValue);\n if (!isSafeItemName(item) || !Number.isFinite(value) || value <= 0) {\n continue;\n }\n out[item] = roundAmount((out[item] || 0) + value);\n }\n return out;\n}\n\n// History: bounded + normalized + exact-duplicate removal\n\nconst MAX_HISTORY_ENTRIES = 1000;\n\ninterface HistoryEntry {\n time: string;\n action: \"추가\" | \"차감\" | \"삭제\" | \"초기화\" | \"공지성공\" | \"공지실패\";\n item?: string;\n source?:\n | \"nightbot\"\n | \"admin\"\n | \"api\"\n | \"youtube-auto\"\n | \"cron\"\n | \"toonation\";\n actor?: string;\n amount?: number;\n count?: number;\n note?: string;\n error?: string;\n}\n\nfunction historyFingerprint(entry: HistoryEntry): string {\n return JSON.stringify([\n entry.time,\n entry.action,\n entry.source || \"\",\n entry.actor || \"\",\n entry.item || \"\",\n entry.amount ?? null,\n entry.count ?? null,\n entry.note || \"\",\n entry.error || \"\",\n ]);\n}\n\nfunction sanitizeHistory(input: unknown): HistoryEntry[] {\n if (!Array.isArray(input)) return [];\n\n const seen = new Set();\n const out: HistoryEntry[] = [];\n\n for (const raw of input) {\n if (!raw || typeof raw !== \"object\") continue;\n const e = raw as Partial;\n if (typeof e.time !== \"string\") continue;\n if (\n ![\"추가\", \"차감\", \"삭제\", \"초기화\", \"공지성공\", \"공지실패\"].includes(\n e.action || \"\",\n )\n ) continue;\n\n const item = e.item === undefined ? undefined : normalizeItem(e.item);\n if (item !== undefined && !isSafeItemName(item)) continue;\n\n const amount = e.amount === undefined ? undefined : Number(e.amount);\n const count = e.count === undefined ? undefined : Number(e.count);\n if (amount !== undefined && (!Number.isFinite(amount) || amount <= 0)) {\n continue;\n }\n if (count !== undefined && (!Number.isFinite(count) || count < 0)) continue;\n\n const clean: HistoryEntry = {\n time: e.time,\n action: e.action as HistoryEntry[\"action\"],\n ...(typeof e.source === \"string\"\n ? { source: e.source as HistoryEntry[\"source\"] }\n : {}),\n ...(typeof e.actor === \"string\" ? { actor: e.actor.slice(0, 100) } : {}),\n ...(item === undefined ? {} : { item }),\n ...(amount === undefined ? {} : { amount: roundAmount(amount) }),\n ...(count === undefined ? {} : { count: roundAmount(count) }),\n ...(typeof e.note === \"string\"\n ? { note: toNfc(e.note).slice(0, 500) }\n : {}),\n ...(typeof e.error === \"string\"\n ? { error: toNfc(e.error).slice(0, 500) }\n : {}),\n };\n\n const fp = historyFingerprint(clean);\n if (seen.has(fp)) continue;\n seen.add(fp);\n out.push(clean);\n }\n\n return out\n .sort((a, b) => new Date(a.time).getTime() - new Date(b.time).getTime())\n .slice(-MAX_HISTORY_ENTRIES);\n}\n\nasync function readHistory(\n blob: { getJSON: (k: string) => Promise },\n channel: string,\n): Promise {\n return sanitizeHistory(await getJSONOr(blob, `history_${channel}`, null));\n}\n\nasync function appendHistory(\n blob: {\n getJSON: (k: string) => Promise;\n setJSON: (k: string, v: unknown) => Promise;\n },\n channel: string,\n entry: HistoryEntry,\n): Promise {\n const history = await readHistory(blob, channel);\n const clean: HistoryEntry = {\n ...entry,\n item: entry.item === undefined ? undefined : normalizeItem(entry.item),\n amount: entry.amount === undefined ? undefined : roundAmount(entry.amount),\n count: entry.count === undefined ? undefined : roundAmount(entry.count),\n note: entry.note === undefined\n ? undefined\n : toNfc(entry.note).slice(0, 500),\n error: entry.error === undefined\n ? undefined\n : toNfc(entry.error).slice(0, 500),\n };\n\n const fp = historyFingerprint(clean);\n if (!history.some((e) => historyFingerprint(e) === fp)) {\n history.push(clean);\n }\n\n await blob.setJSON(`history_${channel}`, sanitizeHistory(history));\n}\n\nfunction formatStack(stack: Record): string {\n const keys = Object.keys(stack);\n if (!keys.length) return \"🤖 현재 스택 없음.\";\n return keys.map((k) => `${label(k)} ${roundAmount(stack[k])}`).join(\", \");\n}\n\n// Unified stack action engine (single source of truth)\n\ntype StackAction = \"추가\" | \"차감\" | \"삭제\" | \"초기화\";\n\nconst STACK_ACTIONS: readonly string[] = [\"추가\", \"차감\", \"삭제\", \"초기화\"];\n\nfunction isStackAction(value: string): value is StackAction {\n return STACK_ACTIONS.includes(value);\n}\n\ntype ActionResult = {\n ok: boolean;\n action?: StackAction;\n channel: string;\n item?: string;\n amount?: number;\n count?: number;\n stack: Record;\n message: string;\n error?: string;\n};\n\nasync function readStack(\n blob: { getJSON: (k: string) => Promise },\n channel: string,\n): Promise> {\n return sanitizeStack(await getJSONOr(blob, `stack_${channel}`, null));\n}\n\nasync function writeStack(\n blob: { setJSON: (k: string, v: unknown) => Promise },\n channel: string,\n stack: Record,\n): Promise {\n await blob.setJSON(`stack_${channel}`, sanitizeStack(stack));\n}\n\nasync function applyStackAction(\n blob: {\n getJSON: (k: string) => Promise;\n setJSON: (k: string, v: unknown) => Promise;\n delete: (k: string) => Promise;\n },\n channel: string,\n action: StackAction,\n rawItem?: unknown,\n rawAmount?: unknown,\n historyMeta: Pick = {},\n): Promise {\n const item = normalizeItem(rawItem);\n const amount = rawAmount === undefined ? 1 : parsePositiveAmount(rawAmount);\n const stack = await readStack(blob, channel);\n\n if (action === \"초기화\") {\n await blob.delete(`stack_${channel}`);\n await appendHistory(blob, channel, {\n time: new Date().toISOString(),\n action: \"초기화\",\n ...historyMeta,\n });\n return {\n ok: true,\n action,\n channel,\n stack: Object.create(null),\n message: \"스택을 초기화했습니다.\",\n };\n }\n\n if (!item) {\n return {\n ok: false,\n channel,\n stack,\n message: \"항목을 입력해주세요.\",\n error: \"INVALID_ITEM\",\n };\n }\n if (!isSafeItemName(item)) {\n return {\n ok: false,\n channel,\n stack,\n message: \"항목 이름은 1~100 자로 입력해주세요.\",\n error: \"INVALID_ITEM\",\n };\n }\n if (amount === null) {\n return {\n ok: false,\n channel,\n item,\n stack,\n message: \"수량은 0 보다 큰 숫자만 입력할 수 있습니다.\",\n error: \"INVALID_AMOUNT\",\n };\n }\n\n if (action === \"추가\") {\n const next = roundAmount((stack[item] || 0) + amount);\n stack[item] = next;\n await writeStack(blob, channel, stack);\n await appendHistory(blob, channel, {\n time: new Date().toISOString(),\n action,\n item,\n amount,\n count: next,\n ...historyMeta,\n });\n return {\n ok: true,\n action,\n channel,\n item,\n amount,\n count: next,\n stack,\n message: `${label(item)} ${next}`,\n };\n }\n\n if (action === \"차감\") {\n if (!(item in stack)) {\n return {\n ok: false,\n action,\n channel,\n item,\n amount,\n stack,\n message: `${label(item)} 항목이 없습니다.`,\n error: \"NOT_FOUND\",\n };\n }\n const next = roundAmount(stack[item] - amount);\n if (next <= 0) {\n delete stack[item];\n await writeStack(blob, channel, stack);\n await appendHistory(blob, channel, {\n time: new Date().toISOString(),\n action,\n item,\n amount,\n count: 0,\n ...historyMeta,\n });\n return {\n ok: true,\n action,\n channel,\n item,\n amount,\n count: 0,\n stack,\n message: `${label(item)} 0 이하가 되어 삭제했습니다.`,\n };\n }\n stack[item] = next;\n await writeStack(blob, channel, stack);\n await appendHistory(blob, channel, {\n time: new Date().toISOString(),\n action,\n item,\n amount,\n count: next,\n ...historyMeta,\n });\n return {\n ok: true,\n action,\n channel,\n item,\n amount,\n count: next,\n stack,\n message: `${label(item)} ${next}`,\n };\n }\n\n if (!(item in stack)) {\n return {\n ok: false,\n action,\n channel,\n item,\n stack,\n message: `${label(item)} 항목이 없습니다.`,\n error: \"NOT_FOUND\",\n };\n }\n delete stack[item];\n await writeStack(blob, channel, stack);\n await appendHistory(blob, channel, {\n time: new Date().toISOString(),\n action,\n item,\n ...historyMeta,\n });\n return {\n ok: true,\n action,\n channel,\n item,\n stack,\n message: `${label(item)} 삭제했습니다.`,\n };\n}\n\n// Concurrency: serialize every mutation by normalized channel.\n\nconst channelLocks = new Map>();\n\nasync function withChannelLock(\n channel: string,\n task: () => Promise,\n): Promise {\n const previous = channelLocks.get(channel) || Promise.resolve();\n let release!: () => void;\n const current = new Promise((resolve) => {\n release = resolve;\n });\n channelLocks.set(channel, current);\n await previous;\n try {\n return await task();\n } finally {\n release();\n if (channelLocks.get(channel) === current) channelLocks.delete(channel);\n }\n}\n\n// JSON API helpers\n\nconst MAX_JSON_BODY_BYTES = 16 * 1024;\n\nasync function readJsonBody(\n req: Request,\n): Promise | null> {\n const contentLength = Number(req.headers.get(\"content-length\") || 0);\n if (Number.isFinite(contentLength) && contentLength > MAX_JSON_BODY_BYTES) {\n return null;\n }\n try {\n const text = await req.text();\n if (new TextEncoder().encode(text).byteLength > MAX_JSON_BODY_BYTES) {\n return null;\n }\n const body = JSON.parse(text);\n return body && typeof body === \"object\" && !Array.isArray(body)\n ? body as Record\n : null;\n } catch {\n return null;\n }\n}\n\nfunction sameOrigin(req: Request, url: URL): boolean {\n const origin = req.headers.get(\"origin\");\n const referer = req.headers.get(\"referer\");\n const valid = (value: string | null) => {\n if (!value) return false;\n try {\n return new URL(value).origin === url.origin;\n } catch {\n return false;\n }\n };\n return valid(origin) || valid(referer);\n}\n\nfunction getValidatedChannel(raw: unknown): string | null {\n const value = toNfc(String(raw ?? \"\").trim());\n if (!value || !isSafeChannelName(value)) return null;\n return normalizeChannel(value);\n}\n\ntype BlobStore = {\n getJSON: (key: string) => Promise;\n setJSON: (key: string, value: unknown) => Promise;\n delete: (key: string) => Promise;\n};\n\n// 매일 06:00 크론(cron.ts)이 보내는 초기화 요청 표시\nconst DAILY_RESET_TRIGGER = \"daily-reset\";\n// 크론 재시도 등으로 같은 초기화가 두 번 기록되지 않도록 이 시간 안의 중복 요청은 건너뛴다.\nconst DAILY_RESET_DEDUPE_MS = 60 * 60 * 1000;\n\n// JSON API: GET /api/stack?ch= (공개 조회)\n// POST /api/stack (관리자 화면 또는 API Key)\nasync function handleStackJsonApi(\n req: Request,\n url: URL,\n blob: BlobStore,\n): Promise {\n if (req.method === \"GET\") {\n const channel = getValidatedChannel(url.searchParams.get(\"ch\"));\n if (!channel) {\n return jsonResponse(\n { ok: false, error: \"유효하지 않은 채널명입니다.\" },\n 400,\n );\n }\n return await withChannelLock(channel, async () => {\n const stack = await readStack(blob, channel);\n return jsonResponse({\n ok: true,\n channel,\n stack,\n items: Object.entries(stack).map(([item, count]) => ({\n item,\n label: label(item),\n count,\n })),\n });\n });\n }\n\n if (req.method !== \"POST\") {\n return jsonResponse({ ok: false, error: \"Method Not Allowed\" }, 405, {\n Allow: \"GET, POST\",\n });\n }\n\n // 관리자(Basic 인증)는 같은 출처(관리자 화면)에서 온 요청만 허용한다.\n // API Key 요청은 서버 간 호출이므로 출처 검사를 하지 않는다.\n const adminUser = await getAuthenticatedAdminUser(req);\n const apiKey = checkStackApiKey(req);\n if (!adminUser && !apiKey) return forbiddenResponse();\n if (!apiKey && !sameOrigin(req, url)) return forbiddenResponse();\n\n const body = await readJsonBody(req);\n if (!body) {\n return jsonResponse({\n ok: false,\n error: \"JSON body가 올바르지 않거나 너무 큽니다.\",\n }, 400);\n }\n\n const channel = getValidatedChannel(body.channel);\n if (!channel) {\n return jsonResponse(\n { ok: false, error: \"유효하지 않은 채널명입니다.\" },\n 400,\n );\n }\n\n const action = toNfc(String(body.action ?? \"\"));\n\n // 기록초기화는 되돌릴 수 없으므로 관리자만 실행할 수 있다.\n if (action === \"기록초기화\") {\n if (!adminUser) return forbiddenResponse();\n return await withChannelLock(channel, async () => {\n await blob.delete(`history_${channel}`);\n return jsonResponse({\n ok: true,\n action,\n channel,\n message: \"기록 (History) 을 초기화했습니다.\",\n });\n });\n }\n\n if (!isStackAction(action)) {\n return jsonResponse(\n { ok: false, error: \"지원하지 않는 action입니다.\" },\n 400,\n );\n }\n\n const isDailyReset = !adminUser && apiKey && action === \"초기화\" &&\n body.trigger === DAILY_RESET_TRIGGER;\n const historyMeta: Pick = adminUser\n ? { source: \"admin\", actor: adminUser }\n : isDailyReset\n ? { source: \"cron\", actor: \"매일 06:00 초기화\" }\n : { source: \"api\", actor: \"API Key\" };\n\n return await withChannelLock(channel, async () => {\n if (isDailyReset) {\n const now = Date.now();\n const history = await readHistory(blob, channel);\n const alreadyDone = history.some((e) =>\n e.action === \"초기화\" &&\n e.source === \"cron\" &&\n now - Date.parse(e.time) < DAILY_RESET_DEDUPE_MS\n );\n if (alreadyDone) {\n return jsonResponse({\n ok: true,\n action,\n channel,\n skipped: true,\n stack: await readStack(blob, channel),\n message: \"최근 1시간 안에 매일 초기화를 이미 실행해서 건너뜁니다.\",\n });\n }\n }\n\n const result = await applyStackAction(\n blob,\n channel,\n action,\n body.item,\n body.amount,\n historyMeta,\n );\n return jsonResponse(result, result.ok ? 200 : 400);\n });\n}\n\nasync function handleHistoryJsonApi(\n req: Request,\n url: URL,\n blob: Pick,\n): Promise {\n if (req.method !== \"GET\") {\n return jsonResponse({ ok: false, error: \"Method Not Allowed\" }, 405, {\n Allow: \"GET\",\n });\n }\n const channel = getValidatedChannel(url.searchParams.get(\"ch\"));\n if (!channel) {\n return jsonResponse(\n { ok: false, error: \"유효하지 않은 채널명입니다.\" },\n 400,\n );\n }\n\n // 후원 기록 자체는 공개하되, 비로그인 방문자에게는 후원자 닉네임을 가린다.\n // 화면에서만 가리면 /api/history 를 직접 열어 볼 수 있으므로 서버에서 바꿔서 내보낸다.\n // 마스킹 문구는 \"투네이션 후원\" 으로 둔다. 후원자가 투네이션에서 익명으로 보낸\n // 경우의 실제 표기(\"투네이션 익명\")와 헷갈리지 않게 하려는 것이다.\n // 투네이션 외 출처(admin 등)의 계정명은 그대로 비공개다.\n const DONOR_MASK = \"투네이션 후원\";\n const isAdmin = !!(await getAuthenticatedAdminUser(req));\n const history = (await readHistory(blob, channel)).map((entry) =>\n isAdmin ? entry : {\n ...entry,\n actor: entry.source === \"toonation\" ? DONOR_MASK : undefined,\n error: undefined,\n }\n );\n\n const payload = { ok: true, channel, history };\n\n // 기록이 바뀌지 않았으면 본문 없이 304로 응답한다.\n // (History 페이지를 자동 새로고침으로 오래 켜 둬도 같은 데이터를 매번 다시 받지 않게)\n const etag = `\"${(await sha256Hex(JSON.stringify(payload))).slice(0, 32)}\"`;\n const ifNoneMatch = (req.headers.get(\"if-none-match\") || \"\").replace(\n /^W\\//,\n \"\",\n );\n if (ifNoneMatch === etag) {\n return new Response(null, {\n status: 304,\n headers: {\n etag,\n vary: \"Authorization\",\n \"cache-control\": \"no-store\",\n \"x-content-type-options\": \"nosniff\",\n \"referrer-policy\": \"no-referrer\",\n },\n });\n }\n return jsonResponse(payload, 200, { etag, vary: \"Authorization\" });\n}\n\nconst DONATION_UNITS: readonly { unit: number; item: string }[] = [\n { unit: 11900, item: \"흡연\" },\n { unit: 12000, item: \"금연\" },\n];\n\nconst DONATION_OPPOSITE: Record = {\n \"흡연\": \"금연\",\n \"금연\": \"흡연\",\n};\n\nconst DONATION_AMBIGUOUS_POLICY: \"hold\" | \"first\" = \"hold\";\n\nconst MAX_DONATION_IDS = 300;\n\ntype DonationSplit = { item: string; count: number }[];\n\nfunction donationTotal(split: DonationSplit): number {\n return split.reduce((sum, s) => sum + s.count, 0);\n}\n\nfunction solveDonation(amount: number): DonationSplit[] {\n const [A, B] = DONATION_UNITS;\n const out: DonationSplit[] = [];\n\n for (let a = 0; a * A.unit <= amount; a++) {\n const rest = amount - a * A.unit;\n if (rest % B.unit !== 0) continue;\n const b = rest / B.unit;\n if (a + b < 1) continue;\n out.push([\n ...(a ? [{ item: A.item, count: a }] : []),\n ...(b ? [{ item: B.item, count: b }] : []),\n ]);\n }\n\n // 한 종류로 떨어지는 조합을 먼저, 그 다음 개수가 적은 조합을 먼저 본다.\n return out.sort((x, y) =>\n (x.length - y.length) || (donationTotal(x) - donationTotal(y))\n );\n}\n\nasync function readDonationIds(\n blob: Pick,\n channel: string,\n): Promise {\n const raw = await getJSONOr(blob, `donation_ids_${channel}`, null);\n return Array.isArray(raw) ? raw.filter((v) => typeof v === \"string\") : [];\n}\n\ntype DonationPending = {\n uid: string;\n amount: number;\n donor: string;\n startedAt: string;\n changes?: DonationChange[];\n error?: string;\n};\n\nasync function donationPendingKey(\n channel: string,\n uid: string,\n): Promise {\n // uid 원문을 Blob key 에 직접 넣지 않고 해시해 특수문자/길이 문제를 피한다.\n return `donation_pending_${channel}_${(await sha256Hex(uid)).slice(0, 32)}`;\n}\n\ntype DonationChange = {\n action: \"추가\" | \"차감\";\n item: string;\n amount: number;\n total: number;\n};\n\nasync function applyDonationPiece(\n blob: BlobStore,\n channel: string,\n item: string,\n count: number,\n historyMeta: Pick,\n): Promise {\n const changes: DonationChange[] = [];\n let rest = count;\n\n const opposite = DONATION_OPPOSITE[item];\n if (opposite) {\n const stack = await readStack(blob, channel);\n const offset = roundAmount(Math.min(stack[opposite] || 0, rest));\n if (offset > 0) {\n const r = await applyStackAction(\n blob,\n channel,\n \"차감\",\n opposite,\n offset,\n historyMeta,\n );\n if (!r.ok) throw new Error(r.message);\n changes.push({\n action: \"차감\",\n item: opposite,\n amount: offset,\n total: r.count ?? 0,\n });\n rest = roundAmount(rest - offset);\n }\n }\n\n if (rest > 0) {\n const r = await applyStackAction(\n blob,\n channel,\n \"추가\",\n item,\n rest,\n historyMeta,\n );\n if (!r.ok) throw new Error(r.message);\n changes.push({ action: \"추가\", item, amount: rest, total: r.count ?? 0 });\n }\n\n return changes;\n}\n\nasync function handleDonationApi(\n req: Request,\n _url: URL,\n blob: BlobStore,\n): Promise {\n if (req.method !== \"POST\") {\n return jsonResponse({ ok: false, error: \"Method Not Allowed\" }, 405, {\n Allow: \"POST\",\n });\n }\n if (!checkDonationApiKey(req)) return forbiddenResponse();\n\n const body = await readJsonBody(req);\n if (!body) {\n return jsonResponse({\n ok: false,\n error: \"JSON body가 올바르지 않거나 너무 큽니다.\",\n }, 400);\n }\n\n const channel = getValidatedChannel(body.channel);\n if (!channel) {\n return jsonResponse(\n { ok: false, error: \"유효하지 않은 채널명입니다.\" },\n 400,\n );\n }\n\n const amount = Number(body.amount);\n if (!Number.isInteger(amount) || amount <= 0 || amount > 100_000_000) {\n return jsonResponse(\n { ok: false, error: \"후원 금액이 올바르지 않습니다.\" },\n 400,\n );\n }\n\n // 점검모드(B): Nightbot 명령만 중단하고 실제 후원 적립은 계속 처리한다.\n const donationId = toNfc(String(body.uid ?? \"\").trim()).slice(0, 100);\n const donor = toNfc(String(body.name ?? \"\").trim()).slice(0, 50);\n\n return await withChannelLock(channel, async () => {\n const seen = donationId ? await readDonationIds(blob, channel) : [];\n\n // 중복 후원 차단\n if (donationId && seen.includes(donationId)) {\n return jsonResponse({\n ok: true,\n duplicated: true,\n channel,\n amount,\n stack: await readStack(blob, channel),\n message: \"이미 처리한 후원입니다.\",\n });\n }\n\n // Blob은 트랜잭션을 지원하지 않으므로, UID가 있는 후원은 처리 시작 마커를 먼저 남긴다.\n // 이전 시도가 중간 실패한 경우 같은 UID를 자동 재적립하지 않고 관리자 확인 상태로 보류한다.\n const pendingKey = donationId\n ? await donationPendingKey(channel, donationId)\n : \"\";\n if (pendingKey) {\n const pending = await getJSONOr(\n blob,\n pendingKey,\n null,\n );\n if (pending) {\n return jsonResponse({\n ok: true,\n matched: false,\n held: true,\n pending: true,\n channel,\n amount,\n changes: pending.changes || [],\n stack: await readStack(blob, channel),\n message:\n \"같은 UID의 이전 후원 처리가 완전히 끝나지 않아 중복 적립 방지를 위해 보류했습니다. 관리자 확인이 필요합니다.\",\n });\n }\n await blob.setJSON(\n pendingKey,\n {\n uid: donationId,\n amount,\n donor,\n startedAt: new Date().toISOString(),\n } satisfies DonationPending,\n );\n }\n\n // 처리가 끝난 뒤에만 \"처리됨\"으로 기록한다.\n // (중간에 실패하면 기록하지 않으므로 같은 uid 로 재시도하면 다시 처리된다)\n const markSeen = async () => {\n if (!donationId) return;\n await blob.setJSON(\n `donation_ids_${channel}`,\n [...seen, donationId].slice(-MAX_DONATION_IDS),\n );\n if (pendingKey) await blob.delete(pendingKey);\n };\n\n const candidates = solveDonation(amount);\n\n if (!candidates.length) {\n await markSeen();\n return jsonResponse({\n ok: true,\n matched: false,\n channel,\n amount,\n stack: await readStack(blob, channel),\n message:\n `${amount}원은 스택 단가 조합에 맞지 않아 적립하지 않았습니다.`,\n });\n }\n\n if (candidates.length > 1 && DONATION_AMBIGUOUS_POLICY === \"hold\") {\n await markSeen();\n return jsonResponse({\n ok: true,\n matched: false,\n held: true,\n channel,\n amount,\n candidates,\n stack: await readStack(blob, channel),\n message:\n `${amount}원은 해석이 여러 가지라 자동 적립하지 않았습니다. 관리자 화면에서 직접 처리해주세요.`,\n });\n }\n\n const historyMeta: Pick = {\n source: \"toonation\",\n actor: donor ? `투네이션 ${donor}` : \"투네이션\",\n };\n\n const changes: DonationChange[] = [];\n try {\n for (const { item, count } of candidates[0]) {\n changes.push(\n ...(await applyDonationPiece(\n blob,\n channel,\n item,\n count,\n historyMeta,\n )),\n );\n }\n } catch (err) {\n // changes 에는 실패 전까지 이미 반영된 변동이 들어 있다.\n // UID가 있으면 pending 마커를 유지하므로 자동 재시도 시 중복 적립하지 않는다.\n const detail = err instanceof Error ? err.message : String(err);\n if (pendingKey) {\n try {\n await blob.setJSON(\n pendingKey,\n {\n uid: donationId,\n amount,\n donor,\n startedAt: new Date().toISOString(),\n changes,\n error: detail,\n } satisfies DonationPending,\n );\n } catch {\n // 원래 오류를 가리지 않는다.\n }\n }\n return jsonResponse({\n ok: false,\n channel,\n amount,\n changes,\n stack: await readStack(blob, channel),\n error: donationId\n ? \"적립 중 오류가 발생해 같은 UID를 자동 재적립하지 않도록 보류했습니다. 관리자 확인이 필요합니다.\"\n : \"적립 중 오류가 발생했습니다. UID가 없어 자동 중복 방지가 불가능합니다.\",\n detail,\n }, 500);\n }\n\n await markSeen();\n\n const stack = await readStack(blob, channel);\n return jsonResponse({\n ok: true,\n matched: true,\n channel,\n amount,\n changes,\n stack,\n message: changes\n .map((c) =>\n c.action === \"추가\"\n ? `${label(c.item)} +${c.amount}`\n : `${label(c.item)} -${c.amount}${c.total === 0 ? \" (삭제)\" : \"\"}`\n )\n .join(\", \") || \"변동 없음\",\n });\n });\n}\n\nconst NIGHTBOT_OAUTH_TOKEN_KEY = \"nightbot_oauth_tokens\";\nconst NIGHTBOT_OAUTH_STATE_PREFIX = \"nightbot_oauth_state_\";\nconst NIGHTBOT_OAUTH_STATE_TTL_MS = 10 * 60 * 1000;\nconst NIGHTBOT_REFRESH_EARLY_MS = 7 * 24 * 60 * 60 * 1000;\nconst NIGHTBOT_ANNOUNCE_PREFIX = \"📢 [공지] \";\nconst NIGHTBOT_MESSAGE_MAX = 400;\n\nconst ANNOUNCEMENT_LOG_KEY = \"nightbot_announcement_logs\";\nconst ANNOUNCEMENT_PRESET_KEY = \"nightbot_announcement_presets\";\nconst ANNOUNCEMENT_SCHEDULE_KEY = \"nightbot_announcement_schedules\";\nconst MAX_ANNOUNCEMENT_LOGS = 100;\nconst MAX_ANNOUNCEMENT_PRESETS = 12;\nconst MAX_ANNOUNCEMENT_SCHEDULES = 100;\nconst MAX_DUE_ANNOUNCEMENTS_PER_RUN = 5;\nconst ANNOUNCEMENT_SENDING_STALE_MS = 5 * 60 * 1000;\nconst MIN_SCHEDULE_LEAD_MS = 10 * 1000;\nconst MAX_SCHEDULE_AHEAD_MS = 180 * 24 * 60 * 60 * 1000;\nconst ANNOUNCEMENT_CRON_SECRET = Deno.env.get(\"ANNOUNCEMENT_CRON_SECRET\") ||\n STACK_API_SECRET;\n\ntype AnnouncementLog = {\n id: string;\n time: string;\n status: \"success\" | \"failure\";\n mode: \"manual\" | \"scheduled\";\n channel: string;\n actor: string;\n message: string;\n scheduleId?: string;\n scheduledAt?: string;\n error?: string;\n};\n\ntype AnnouncementPreset = {\n id: string;\n message: string;\n createdAt: string;\n createdBy: string;\n};\n\ntype AnnouncementSchedule = {\n id: string;\n channel: string;\n message: string;\n scheduledAt: string;\n createdAt: string;\n createdBy: string;\n status: \"pending\" | \"sending\" | \"sent\" | \"failed\" | \"cancelled\";\n sendingAt?: string;\n sentAt?: string;\n error?: string;\n};\n\nfunction normalizeAnnouncementText(value: unknown): string {\n return toNfc(String(value ?? \"\")).replace(/\\s+/g, \" \").trim();\n}\n\nfunction validateAnnouncementMessage(value: unknown): string {\n const text = normalizeAnnouncementText(value);\n if (!text) throw new Error(\"공지 문구를 입력해주세요.\");\n if ((NIGHTBOT_ANNOUNCE_PREFIX + text).length > NIGHTBOT_MESSAGE_MAX) {\n throw new Error(\n `공지 문구가 너무 깁니다. 최종 메시지는 ${NIGHTBOT_MESSAGE_MAX}자 이하여야 합니다.`,\n );\n }\n return text;\n}\n\nfunction sanitizeAnnouncementLogs(input: unknown): AnnouncementLog[] {\n if (!Array.isArray(input)) return [];\n const out: AnnouncementLog[] = [];\n for (const raw of input) {\n if (!raw || typeof raw !== \"object\") continue;\n const r = raw as Partial;\n if (typeof r.id !== \"string\" || typeof r.time !== \"string\") continue;\n if (r.status !== \"success\" && r.status !== \"failure\") continue;\n if (r.mode !== \"manual\" && r.mode !== \"scheduled\") continue;\n const channel = getValidatedChannel(r.channel);\n if (!channel) continue;\n const message = normalizeAnnouncementText(r.message);\n if (!message) continue;\n out.push({\n id: r.id.slice(0, 100),\n time: r.time,\n status: r.status,\n mode: r.mode,\n channel,\n actor: toNfc(String(r.actor ?? \"\")).slice(0, 100),\n message: message.slice(0, 400),\n ...(typeof r.scheduleId === \"string\"\n ? { scheduleId: r.scheduleId.slice(0, 100) }\n : {}),\n ...(typeof r.scheduledAt === \"string\"\n ? { scheduledAt: r.scheduledAt }\n : {}),\n ...(typeof r.error === \"string\"\n ? { error: toNfc(r.error).slice(0, 500) }\n : {}),\n });\n }\n return out\n .sort((a, b) => Date.parse(a.time) - Date.parse(b.time))\n .slice(-MAX_ANNOUNCEMENT_LOGS);\n}\n\nfunction sanitizeAnnouncementPresets(input: unknown): AnnouncementPreset[] {\n if (!Array.isArray(input)) return [];\n const out: AnnouncementPreset[] = [];\n const seen = new Set();\n for (const raw of input) {\n if (!raw || typeof raw !== \"object\") continue;\n const r = raw as Partial;\n if (typeof r.id !== \"string\" || typeof r.createdAt !== \"string\") continue;\n const message = normalizeAnnouncementText(r.message);\n if (\n !message ||\n (NIGHTBOT_ANNOUNCE_PREFIX + message).length > NIGHTBOT_MESSAGE_MAX\n ) continue;\n const key = message.toLowerCase();\n if (seen.has(key)) continue;\n seen.add(key);\n out.push({\n id: r.id.slice(0, 100),\n message,\n createdAt: r.createdAt,\n createdBy: toNfc(String(r.createdBy ?? \"\")).slice(0, 100),\n });\n }\n return out.slice(-MAX_ANNOUNCEMENT_PRESETS);\n}\n\nfunction sanitizeAnnouncementSchedules(input: unknown): AnnouncementSchedule[] {\n if (!Array.isArray(input)) return [];\n const out: AnnouncementSchedule[] = [];\n for (const raw of input) {\n if (!raw || typeof raw !== \"object\") continue;\n const r = raw as Partial;\n if (\n typeof r.id !== \"string\" || typeof r.createdAt !== \"string\" ||\n typeof r.scheduledAt !== \"string\"\n ) continue;\n if (\n ![\"pending\", \"sending\", \"sent\", \"failed\", \"cancelled\"].includes(\n String(r.status),\n )\n ) continue;\n const channel = getValidatedChannel(r.channel);\n if (!channel) continue;\n const message = normalizeAnnouncementText(r.message);\n if (\n !message ||\n (NIGHTBOT_ANNOUNCE_PREFIX + message).length > NIGHTBOT_MESSAGE_MAX\n ) continue;\n if (!Number.isFinite(Date.parse(r.scheduledAt))) continue;\n out.push({\n id: r.id.slice(0, 100),\n channel,\n message,\n scheduledAt: new Date(r.scheduledAt).toISOString(),\n createdAt: r.createdAt,\n createdBy: toNfc(String(r.createdBy ?? \"\")).slice(0, 100),\n status: r.status as AnnouncementSchedule[\"status\"],\n ...(typeof r.sendingAt === \"string\" ? { sendingAt: r.sendingAt } : {}),\n ...(typeof r.sentAt === \"string\" ? { sentAt: r.sentAt } : {}),\n ...(typeof r.error === \"string\"\n ? { error: toNfc(r.error).slice(0, 500) }\n : {}),\n });\n }\n return out\n .sort((a, b) => Date.parse(a.createdAt) - Date.parse(b.createdAt))\n .slice(-MAX_ANNOUNCEMENT_SCHEDULES);\n}\n\nasync function readAnnouncementLogs(\n blob: Pick,\n): Promise {\n return sanitizeAnnouncementLogs(\n await getJSONOr(blob, ANNOUNCEMENT_LOG_KEY, null),\n );\n}\n\nasync function readAnnouncementPresets(\n blob: Pick,\n): Promise {\n return sanitizeAnnouncementPresets(\n await getJSONOr(blob, ANNOUNCEMENT_PRESET_KEY, null),\n );\n}\n\nasync function readAnnouncementSchedules(\n blob: Pick,\n): Promise {\n return sanitizeAnnouncementSchedules(\n await getJSONOr(blob, ANNOUNCEMENT_SCHEDULE_KEY, null),\n );\n}\n\nasync function appendAnnouncementLog(\n blob: Pick,\n log: AnnouncementLog,\n): Promise {\n const logs = await readAnnouncementLogs(blob);\n logs.push(log);\n await blob.setJSON(ANNOUNCEMENT_LOG_KEY, sanitizeAnnouncementLogs(logs));\n}\n\nasync function recordAnnouncementAttempt(\n blob: BlobStore,\n args: {\n channel: string;\n actor: string;\n message: string;\n status: \"success\" | \"failure\";\n mode: \"manual\" | \"scheduled\";\n scheduleId?: string;\n scheduledAt?: string;\n error?: string;\n },\n): Promise {\n const time = new Date().toISOString();\n const error = args.error ? toNfc(args.error).slice(0, 500) : undefined;\n await appendAnnouncementLog(blob, {\n id: crypto.randomUUID(),\n time,\n status: args.status,\n mode: args.mode,\n channel: args.channel,\n actor: args.actor.slice(0, 100),\n message: args.message,\n ...(args.scheduleId ? { scheduleId: args.scheduleId } : {}),\n ...(args.scheduledAt ? { scheduledAt: args.scheduledAt } : {}),\n ...(error ? { error } : {}),\n });\n await appendHistory(blob, args.channel, {\n time,\n action: args.status === \"success\" ? \"공지성공\" : \"공지실패\",\n source: \"admin\",\n actor: args.actor.slice(0, 100),\n note: NIGHTBOT_ANNOUNCE_PREFIX + args.message,\n ...(error ? { error } : {}),\n });\n}\n\ntype NightbotOAuthTokenResponse = {\n access_token?: string;\n refresh_token?: string;\n token_type?: string;\n expires_in?: number;\n scope?: string;\n};\n\ntype NightbotOAuthRecord = {\n accessToken: string;\n refreshToken: string;\n tokenType: string;\n scope: string;\n expiresAt: number;\n updatedAt: string;\n user?: {\n name?: string;\n displayName?: string;\n provider?: string;\n providerId?: string;\n };\n};\n\ntype NightbotOAuthState = {\n createdAt: number;\n channel?: string;\n};\n\nfunction nightbotOAuthConfig(url: URL): {\n clientId: string;\n clientSecret: string;\n redirectUri: string;\n} {\n return {\n clientId: (Deno.env.get(\"NIGHTBOT_CLIENT_ID\") || \"\").trim(),\n clientSecret: (Deno.env.get(\"NIGHTBOT_CLIENT_SECRET\") || \"\").trim(),\n redirectUri:\n (Deno.env.get(\"NIGHTBOT_REDIRECT_URI\") || `${url.origin}/admin`).trim(),\n };\n}\n\nasync function readNightbotOAuthRecord(\n blob: Pick,\n): Promise {\n const raw = await getJSONOr(blob, NIGHTBOT_OAUTH_TOKEN_KEY, null);\n if (!raw || typeof raw !== \"object\" || Array.isArray(raw)) return null;\n const r = raw as Partial;\n if (!r.accessToken || typeof r.accessToken !== \"string\") return null;\n return {\n accessToken: r.accessToken,\n refreshToken: typeof r.refreshToken === \"string\" ? r.refreshToken : \"\",\n tokenType: typeof r.tokenType === \"string\" ? r.tokenType : \"bearer\",\n scope: typeof r.scope === \"string\" ? r.scope : \"\",\n expiresAt: Number.isFinite(Number(r.expiresAt)) ? Number(r.expiresAt) : 0,\n updatedAt: typeof r.updatedAt === \"string\" ? r.updatedAt : \"\",\n ...(r.user && typeof r.user === \"object\" ? { user: r.user } : {}),\n };\n}\n\nasync function requestNightbotOAuthToken(\n params: Record,\n): Promise {\n const res = await fetch(\"https://api.nightbot.tv/oauth2/token\", {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/x-www-form-urlencoded\",\n accept: \"application/json\",\n },\n body: new URLSearchParams(params).toString(),\n });\n const text = await res.text();\n let data: unknown = null;\n try {\n data = text ? JSON.parse(text) : null;\n } catch {\n data = null;\n }\n if (!res.ok || !data || typeof data !== \"object\") {\n const detail = data && typeof data === \"object\" && \"message\" in data\n ? String((data as { message?: unknown }).message || \"\")\n : text;\n throw new Error(detail || `Nightbot OAuth HTTP ${res.status}`);\n }\n return data as NightbotOAuthTokenResponse;\n}\n\nasync function fetchNightbotMe(accessToken: string): Promise<{\n user?: NightbotOAuthRecord[\"user\"];\n scopes: string[];\n}> {\n const res = await fetch(\"https://api.nightbot.tv/1/me\", {\n headers: {\n authorization: `Bearer ${accessToken}`,\n accept: \"application/json\",\n },\n });\n const text = await res.text();\n let data: unknown = null;\n try {\n data = text ? JSON.parse(text) : null;\n } catch {\n data = null;\n }\n if (!res.ok || !data || typeof data !== \"object\") {\n const detail = data && typeof data === \"object\" && \"message\" in data\n ? String((data as { message?: unknown }).message || \"\")\n : text;\n const err = new Error(detail || `Nightbot HTTP ${res.status}`) as Error & {\n status?: number;\n };\n err.status = res.status;\n throw err;\n }\n const obj = data as {\n user?: {\n name?: unknown;\n displayName?: unknown;\n provider?: unknown;\n providerId?: unknown;\n };\n authorization?: { scopes?: unknown };\n };\n const user = obj.user && typeof obj.user === \"object\"\n ? {\n name: typeof obj.user.name === \"string\" ? obj.user.name : undefined,\n displayName: typeof obj.user.displayName === \"string\"\n ? obj.user.displayName\n : undefined,\n provider: typeof obj.user.provider === \"string\"\n ? obj.user.provider\n : undefined,\n providerId: typeof obj.user.providerId === \"string\"\n ? obj.user.providerId\n : undefined,\n }\n : undefined;\n const scopes = Array.isArray(obj.authorization?.scopes)\n ? obj.authorization!.scopes!.filter((v): v is string =>\n typeof v === \"string\"\n )\n : [];\n return { user, scopes };\n}\n\nasync function saveNightbotOAuthTokens(\n blob: Pick,\n token: NightbotOAuthTokenResponse,\n previous: NightbotOAuthRecord | null,\n user?: NightbotOAuthRecord[\"user\"],\n): Promise {\n const accessToken = typeof token.access_token === \"string\"\n ? token.access_token\n : \"\";\n if (!accessToken) {\n throw new Error(\"Nightbot에서 access token을 받지 못했습니다.\");\n }\n const refreshToken = typeof token.refresh_token === \"string\"\n ? token.refresh_token\n : (previous?.refreshToken || \"\");\n const expiresIn = Number(token.expires_in);\n const record: NightbotOAuthRecord = {\n accessToken,\n refreshToken,\n tokenType: typeof token.token_type === \"string\"\n ? token.token_type\n : \"bearer\",\n scope: typeof token.scope === \"string\"\n ? token.scope\n : (previous?.scope || \"\"),\n expiresAt: Date.now() +\n (Number.isFinite(expiresIn) && expiresIn > 0\n ? expiresIn * 1000\n : 30 * 24 * 60 * 60 * 1000),\n updatedAt: new Date().toISOString(),\n ...(user || previous?.user ? { user: user || previous?.user } : {}),\n };\n await blob.setJSON(NIGHTBOT_OAUTH_TOKEN_KEY, record);\n return record;\n}\n\nasync function refreshNightbotOAuthToken(\n blob: Pick,\n url: URL,\n record: NightbotOAuthRecord,\n): Promise {\n if (!record.refreshToken) {\n throw new Error(\n \"Nightbot refresh token이 없습니다. 관리자 화면에서 다시 연결해주세요.\",\n );\n }\n const cfg = nightbotOAuthConfig(url);\n if (!cfg.clientId || !cfg.clientSecret) {\n throw new Error(\n \"NIGHTBOT_CLIENT_ID / NIGHTBOT_CLIENT_SECRET 환경변수가 필요합니다.\",\n );\n }\n const token = await requestNightbotOAuthToken({\n client_id: cfg.clientId,\n client_secret: cfg.clientSecret,\n grant_type: \"refresh_token\",\n redirect_uri: cfg.redirectUri,\n refresh_token: record.refreshToken,\n });\n return await saveNightbotOAuthTokens(blob, token, record);\n}\n\nasync function getNightbotAccessToken(\n blob: Pick,\n url: URL,\n forceRefresh = false,\n): Promise<\n { accessToken: string; managed: boolean; record: NightbotOAuthRecord | null }\n> {\n let record = await readNightbotOAuthRecord(blob);\n if (record) {\n const shouldRefresh = forceRefresh || !record.expiresAt ||\n record.expiresAt - Date.now() <= NIGHTBOT_REFRESH_EARLY_MS;\n if (shouldRefresh) {\n record = await refreshNightbotOAuthToken(blob, url, record);\n }\n return { accessToken: record.accessToken, managed: true, record };\n }\n\n // v4.5 호환: 기존 수동 access token 도 계속 사용할 수 있다.\n const legacy = (Deno.env.get(\"NIGHTBOT_ACCESS_TOKEN\") || \"\").trim();\n if (legacy) return { accessToken: legacy, managed: false, record: null };\n throw new Error(\n \"Nightbot이 연결되어 있지 않습니다. 관리자 화면에서 Nightbot 연결을 먼저 해주세요.\",\n );\n}\n\nasync function verifyNightbotConnection(\n blob: Pick,\n url: URL,\n): Promise<{\n accessToken: string;\n managed: boolean;\n record: NightbotOAuthRecord | null;\n user?: NightbotOAuthRecord[\"user\"];\n scopes: string[];\n}> {\n let auth = await getNightbotAccessToken(blob, url);\n try {\n const me = await fetchNightbotMe(auth.accessToken);\n if (auth.managed && auth.record) {\n const next = { ...auth.record, user: me.user || auth.record.user };\n await blob.setJSON(NIGHTBOT_OAUTH_TOKEN_KEY, next);\n auth = { ...auth, record: next };\n }\n return { ...auth, user: me.user || auth.record?.user, scopes: me.scopes };\n } catch (err) {\n const status = (err as Error & { status?: number }).status;\n if (status !== 401 || !auth.managed || !auth.record?.refreshToken) {\n throw err;\n }\n auth = await getNightbotAccessToken(blob, url, true);\n const me = await fetchNightbotMe(auth.accessToken);\n if (auth.record) {\n const next = { ...auth.record, user: me.user || auth.record.user };\n await blob.setJSON(NIGHTBOT_OAUTH_TOKEN_KEY, next);\n auth = { ...auth, record: next };\n }\n return { ...auth, user: me.user || auth.record?.user, scopes: me.scopes };\n }\n}\n\nasync function handleNightbotOAuthConnect(\n req: Request,\n url: URL,\n blob: BlobStore,\n): Promise {\n const adminUser = await getAuthenticatedAdminUser(req);\n if (!adminUser) return unauthorizedResponse();\n\n const cfg = nightbotOAuthConfig(url);\n if (!cfg.clientId || !cfg.clientSecret) {\n return textResponse(\n \"Val Town 환경변수 NIGHTBOT_CLIENT_ID 와 NIGHTBOT_CLIENT_SECRET 을 먼저 설정해주세요.\",\n 500,\n );\n }\n\n const state = crypto.randomUUID().replace(/-/g, \"\");\n const channel = getValidatedChannel(url.searchParams.get(\"ch\")) || undefined;\n const stateData: NightbotOAuthState = {\n createdAt: Date.now(),\n ...(channel ? { channel } : {}),\n };\n await blob.setJSON(NIGHTBOT_OAUTH_STATE_PREFIX + state, stateData);\n\n const authorize = new URL(\"https://api.nightbot.tv/oauth2/authorize\");\n authorize.searchParams.set(\"response_type\", \"code\");\n authorize.searchParams.set(\"client_id\", cfg.clientId);\n authorize.searchParams.set(\"redirect_uri\", cfg.redirectUri);\n authorize.searchParams.set(\"scope\", \"channel_send\");\n authorize.searchParams.set(\"state\", state);\n return redirectResponse(authorize.toString());\n}\n\nasync function handleNightbotOAuthCallback(\n url: URL,\n blob: BlobStore,\n): Promise {\n const state = (url.searchParams.get(\"state\") || \"\").trim();\n if (!state || !/^[0-9a-f]{32}$/i.test(state)) {\n return textResponse(\n \"Nightbot OAuth state가 올바르지 않습니다. 관리자 화면에서 다시 연결해주세요.\",\n 400,\n );\n }\n const stateKey = NIGHTBOT_OAUTH_STATE_PREFIX + state;\n const pending = await getJSONOr(\n blob,\n stateKey,\n null,\n );\n await blob.delete(stateKey);\n if (\n !pending || !Number.isFinite(pending.createdAt) ||\n Date.now() - pending.createdAt > NIGHTBOT_OAUTH_STATE_TTL_MS\n ) {\n return textResponse(\n \"Nightbot 연결 요청이 만료되었거나 유효하지 않습니다. 관리자 화면에서 다시 연결해주세요.\",\n 400,\n );\n }\n\n const back = new URL(\"/admin\", url.origin);\n if (pending.channel) back.searchParams.set(\"ch\", pending.channel);\n const oauthError = url.searchParams.get(\"error\");\n if (oauthError) {\n back.searchParams.set(\n \"nightbot\",\n oauthError === \"access_denied\" ? \"denied\" : \"error\",\n );\n return redirectResponse(back.pathname + back.search);\n }\n\n const code = (url.searchParams.get(\"code\") || \"\").trim();\n if (!code) {\n back.searchParams.set(\"nightbot\", \"error\");\n return redirectResponse(back.pathname + back.search);\n }\n\n try {\n const cfg = nightbotOAuthConfig(url);\n if (!cfg.clientId || !cfg.clientSecret) {\n throw new Error(\"Nightbot OAuth 환경변수가 설정되지 않았습니다.\");\n }\n const token = await requestNightbotOAuthToken({\n client_id: cfg.clientId,\n client_secret: cfg.clientSecret,\n grant_type: \"authorization_code\",\n redirect_uri: cfg.redirectUri,\n code,\n });\n const accessToken = typeof token.access_token === \"string\"\n ? token.access_token\n : \"\";\n let user: NightbotOAuthRecord[\"user\"] | undefined;\n if (accessToken) {\n try {\n user = (await fetchNightbotMe(accessToken)).user;\n } catch {\n // 사용자 정보 확인 실패만으로 연결 자체를 실패시키지는 않는다.\n }\n }\n await saveNightbotOAuthTokens(blob, token, null, user);\n back.searchParams.set(\"nightbot\", \"connected\");\n } catch {\n back.searchParams.set(\"nightbot\", \"error\");\n }\n return redirectResponse(back.pathname + back.search);\n}\n\nasync function handleNightbotStatus(\n req: Request,\n url: URL,\n blob: BlobStore,\n): Promise {\n const adminUser = await getAuthenticatedAdminUser(req);\n if (!adminUser) return unauthorizedResponse();\n const cfg = nightbotOAuthConfig(url);\n const configured = !!(cfg.clientId && cfg.clientSecret);\n const record = await readNightbotOAuthRecord(blob);\n const legacy = !!(Deno.env.get(\"NIGHTBOT_ACCESS_TOKEN\") || \"\").trim();\n if (!record && !legacy) {\n return jsonResponse({\n ok: true,\n configured,\n connected: false,\n managed: false,\n redirectUri: cfg.redirectUri,\n message: configured\n ? \"Nightbot이 아직 연결되지 않았습니다.\"\n : \"NIGHTBOT_CLIENT_ID / NIGHTBOT_CLIENT_SECRET 환경변수를 설정해주세요.\",\n });\n }\n\n try {\n const verified = await verifyNightbotConnection(blob, url);\n return jsonResponse({\n ok: true,\n configured,\n connected: true,\n managed: verified.managed,\n displayName: verified.user?.displayName || verified.user?.name ||\n \"Nightbot 계정\",\n provider: verified.user?.provider || \"\",\n scopes: verified.scopes,\n expiresAt: verified.record?.expiresAt || null,\n redirectUri: cfg.redirectUri,\n message: verified.managed\n ? \"Nightbot OAuth 연결됨\"\n : \"기존 NIGHTBOT_ACCESS_TOKEN 사용 중\",\n });\n } catch (err) {\n return jsonResponse({\n ok: true,\n configured,\n connected: false,\n managed: !!record,\n needsReconnect: true,\n redirectUri: cfg.redirectUri,\n message: err instanceof Error ? err.message : String(err),\n });\n }\n}\n\nasync function handleNightbotDisconnect(\n req: Request,\n url: URL,\n blob: BlobStore,\n): Promise {\n const adminUser = await getAuthenticatedAdminUser(req);\n if (!adminUser) return unauthorizedResponse();\n if (!sameOrigin(req, url)) return forbiddenResponse();\n const record = await readNightbotOAuthRecord(blob);\n if (record) {\n const token = record.refreshToken || record.accessToken;\n if (token) {\n try {\n await fetch(\"https://api.nightbot.tv/oauth2/token/revoke\", {\n method: \"POST\",\n headers: { \"content-type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({ token }).toString(),\n });\n } catch {\n // 로컬 연결 해제는 계속 진행한다.\n }\n }\n await blob.delete(NIGHTBOT_OAUTH_TOKEN_KEY);\n }\n return jsonResponse({\n ok: true,\n message: (Deno.env.get(\"NIGHTBOT_ACCESS_TOKEN\") || \"\").trim()\n ? \"OAuth 연결을 해제했습니다. 기존 NIGHTBOT_ACCESS_TOKEN 환경변수가 있으면 그것은 별도로 삭제해야 합니다.\"\n : \"Nightbot 연결을 해제했습니다.\",\n });\n}\n\nasync function sendNightbotAnnouncement(\n blob: BlobStore,\n url: URL,\n message: string,\n): Promise {\n const text = validateAnnouncementMessage(message);\n const finalMessage = NIGHTBOT_ANNOUNCE_PREFIX + text;\n\n let auth = await getNightbotAccessToken(blob, url);\n const doSend = (accessToken: string) =>\n fetch(\"https://api.nightbot.tv/1/channel/send\", {\n method: \"POST\",\n headers: {\n authorization: `Bearer ${accessToken}`,\n \"content-type\": \"application/json\",\n accept: \"application/json\",\n },\n body: JSON.stringify({ message: finalMessage }),\n });\n\n let res = await doSend(auth.accessToken);\n if (res.status === 401 && auth.managed && auth.record?.refreshToken) {\n auth = await getNightbotAccessToken(blob, url, true);\n res = await doSend(auth.accessToken);\n }\n\n const textBody = await res.text();\n let data: unknown = null;\n try {\n data = textBody ? JSON.parse(textBody) : null;\n } catch {\n data = null;\n }\n if (!res.ok) {\n const detail = data && typeof data === \"object\" && \"message\" in data\n ? String((data as { message?: unknown }).message || \"\")\n : textBody;\n if (res.status === 429) {\n throw new Error(\n \"Nightbot 전송 제한(5초당 1회)에 걸렸습니다. 잠시 후 다시 보내주세요.\",\n );\n }\n if (res.status === 401) {\n throw new Error(\n \"Nightbot 인증이 만료되었습니다. 관리자 화면에서 Nightbot을 다시 연결해주세요.\",\n );\n }\n throw new Error(detail || `Nightbot HTTP ${res.status}`);\n }\n return finalMessage;\n}\n\nasync function handleAdminAnnouncement(\n req: Request,\n url: URL,\n blob: BlobStore,\n): Promise {\n if (req.method !== \"POST\") {\n return jsonResponse({ ok: false, error: \"Method Not Allowed\" }, 405, {\n Allow: \"POST\",\n });\n }\n const adminUser = await getAuthenticatedAdminUser(req);\n if (!adminUser) return unauthorizedResponse();\n if (!sameOrigin(req, url)) return forbiddenResponse();\n\n const body = await readJsonBody(req);\n if (!body) {\n return jsonResponse(\n { ok: false, error: \"올바른 JSON body가 필요합니다.\" },\n 400,\n );\n }\n const channel = getValidatedChannel(body.channel);\n if (!channel) {\n return jsonResponse(\n { ok: false, error: \"유효하지 않은 채널명입니다.\" },\n 400,\n );\n }\n\n let message = \"\";\n try {\n message = validateAnnouncementMessage(body.message);\n } catch (err) {\n return jsonResponse({\n ok: false,\n error: err instanceof Error ? err.message : String(err),\n }, 400);\n }\n\n try {\n const sent = await sendNightbotAnnouncement(blob, url, message);\n let logWarning = \"\";\n try {\n await recordAnnouncementAttempt(blob, {\n channel,\n actor: adminUser,\n message,\n status: \"success\",\n mode: \"manual\",\n });\n } catch (logErr) {\n logWarning = logErr instanceof Error ? logErr.message : String(logErr);\n }\n return jsonResponse({\n ok: true,\n message: \"Nightbot으로 공지를 전송했습니다.\",\n sent,\n actor: adminUser,\n ...(logWarning\n ? {\n logWarning:\n `전송은 성공했지만 기록 저장에 실패했습니다: ${logWarning}`,\n }\n : {}),\n });\n } catch (err) {\n const error = err instanceof Error ? err.message : String(err);\n try {\n await recordAnnouncementAttempt(blob, {\n channel,\n actor: adminUser,\n message,\n status: \"failure\",\n mode: \"manual\",\n error,\n });\n } catch {\n // 실제 Nightbot 오류를 가리지 않도록 기록 실패는 여기서 무시한다.\n }\n return jsonResponse({ ok: false, error }, 502);\n }\n}\n\nasync function handleAnnouncementAdminData(\n req: Request,\n url: URL,\n blob: BlobStore,\n): Promise {\n if (req.method !== \"GET\") {\n return jsonResponse({ ok: false, error: \"Method Not Allowed\" }, 405, {\n Allow: \"GET\",\n });\n }\n const adminUser = await getAuthenticatedAdminUser(req);\n if (!adminUser) return unauthorizedResponse();\n const requestedChannel = url.searchParams.get(\"ch\");\n const channel = requestedChannel\n ? getValidatedChannel(requestedChannel)\n : null;\n if (requestedChannel && !channel) {\n return jsonResponse(\n { ok: false, error: \"유효하지 않은 채널명입니다.\" },\n 400,\n );\n }\n\n const [presets, schedules, logs] = await Promise.all([\n readAnnouncementPresets(blob),\n readAnnouncementSchedules(blob),\n readAnnouncementLogs(blob),\n ]);\n const channelSchedules = channel\n ? schedules.filter((s) => s.channel === channel)\n : schedules;\n const channelLogs = channel\n ? logs.filter((l) => l.channel === channel)\n : logs;\n return jsonResponse({\n ok: true,\n presets: presets.slice().reverse(),\n schedules: channelSchedules.slice().reverse().slice(0, 30),\n logs: channelLogs.slice().reverse().slice(0, 20),\n currentAdmin: adminUser,\n });\n}\n\nasync function handleAnnouncementPreset(\n req: Request,\n url: URL,\n blob: BlobStore,\n): Promise {\n if (req.method !== \"POST\") {\n return jsonResponse({ ok: false, error: \"Method Not Allowed\" }, 405, {\n Allow: \"POST\",\n });\n }\n const adminUser = await getAuthenticatedAdminUser(req);\n if (!adminUser) return unauthorizedResponse();\n if (!sameOrigin(req, url)) return forbiddenResponse();\n const body = await readJsonBody(req);\n if (!body) {\n return jsonResponse(\n { ok: false, error: \"올바른 JSON body가 필요합니다.\" },\n 400,\n );\n }\n const action = String(body.action ?? \"\");\n const presets = await readAnnouncementPresets(blob);\n\n if (action === \"add\") {\n let message = \"\";\n try {\n message = validateAnnouncementMessage(body.message);\n } catch (err) {\n return jsonResponse({\n ok: false,\n error: err instanceof Error ? err.message : String(err),\n }, 400);\n }\n if (\n presets.some((p) => p.message.toLowerCase() === message.toLowerCase())\n ) {\n return jsonResponse({\n ok: false,\n error: \"이미 같은 문구가 프리셋에 있습니다.\",\n }, 409);\n }\n presets.push({\n id: crypto.randomUUID(),\n message,\n createdAt: new Date().toISOString(),\n createdBy: adminUser,\n });\n await blob.setJSON(\n ANNOUNCEMENT_PRESET_KEY,\n sanitizeAnnouncementPresets(presets),\n );\n return jsonResponse({ ok: true, message: \"프리셋에 저장했습니다.\" });\n }\n\n if (action === \"delete\") {\n const id = String(body.id ?? \"\");\n const next = presets.filter((p) => p.id !== id);\n if (next.length === presets.length) {\n return jsonResponse(\n { ok: false, error: \"프리셋을 찾지 못했습니다.\" },\n 404,\n );\n }\n await blob.setJSON(ANNOUNCEMENT_PRESET_KEY, next);\n return jsonResponse({ ok: true, message: \"프리셋을 삭제했습니다.\" });\n }\n\n return jsonResponse(\n { ok: false, error: \"지원하지 않는 프리셋 작업입니다.\" },\n 400,\n );\n}\n\nasync function handleAnnouncementSchedule(\n req: Request,\n url: URL,\n blob: BlobStore,\n): Promise {\n if (req.method !== \"POST\") {\n return jsonResponse({ ok: false, error: \"Method Not Allowed\" }, 405, {\n Allow: \"POST\",\n });\n }\n const adminUser = await getAuthenticatedAdminUser(req);\n if (!adminUser) return unauthorizedResponse();\n if (!sameOrigin(req, url)) return forbiddenResponse();\n const body = await readJsonBody(req);\n if (!body) {\n return jsonResponse(\n { ok: false, error: \"올바른 JSON body가 필요합니다.\" },\n 400,\n );\n }\n const action = String(body.action ?? \"create\");\n const schedules = await readAnnouncementSchedules(blob);\n\n if (action === \"create\") {\n const channel = getValidatedChannel(body.channel);\n if (!channel) {\n return jsonResponse(\n { ok: false, error: \"유효하지 않은 채널명입니다.\" },\n 400,\n );\n }\n let message = \"\";\n try {\n message = validateAnnouncementMessage(body.message);\n } catch (err) {\n return jsonResponse({\n ok: false,\n error: err instanceof Error ? err.message : String(err),\n }, 400);\n }\n const scheduledMs = Date.parse(String(body.scheduledAt ?? \"\"));\n const now = Date.now();\n if (!Number.isFinite(scheduledMs)) {\n return jsonResponse({\n ok: false,\n error: \"예약 시간을 올바르게 입력해주세요.\",\n }, 400);\n }\n if (scheduledMs < now + MIN_SCHEDULE_LEAD_MS) {\n return jsonResponse({\n ok: false,\n error: \"예약 시간은 현재보다 최소 10초 뒤여야 합니다.\",\n }, 400);\n }\n if (scheduledMs > now + MAX_SCHEDULE_AHEAD_MS) {\n return jsonResponse({\n ok: false,\n error: \"예약은 최대 180일 뒤까지 설정할 수 있습니다.\",\n }, 400);\n }\n const schedule: AnnouncementSchedule = {\n id: crypto.randomUUID(),\n channel,\n message,\n scheduledAt: new Date(scheduledMs).toISOString(),\n createdAt: new Date().toISOString(),\n createdBy: adminUser,\n status: \"pending\",\n };\n schedules.push(schedule);\n await blob.setJSON(\n ANNOUNCEMENT_SCHEDULE_KEY,\n sanitizeAnnouncementSchedules(schedules),\n );\n return jsonResponse({\n ok: true,\n message: \"공지를 예약했습니다.\",\n schedule,\n });\n }\n\n if (action === \"cancel\") {\n const id = String(body.id ?? \"\");\n const target = schedules.find((s) => s.id === id);\n if (!target) {\n return jsonResponse({ ok: false, error: \"예약을 찾지 못했습니다.\" }, 404);\n }\n if (target.status !== \"pending\") {\n return jsonResponse({\n ok: false,\n error: \"대기 중인 예약만 취소할 수 있습니다.\",\n }, 409);\n }\n target.status = \"cancelled\";\n target.error = `관리자 ${adminUser} 취소`;\n await blob.setJSON(\n ANNOUNCEMENT_SCHEDULE_KEY,\n sanitizeAnnouncementSchedules(schedules),\n );\n return jsonResponse({ ok: true, message: \"예약을 취소했습니다.\" });\n }\n\n return jsonResponse(\n { ok: false, error: \"지원하지 않는 예약 작업입니다.\" },\n 400,\n );\n}\n\nlet announcementRunPromise: Promise = Promise.resolve();\n\nasync function withAnnouncementRunLock(task: () => Promise): Promise {\n const previous = announcementRunPromise;\n let release!: () => void;\n announcementRunPromise = new Promise((resolve) => {\n release = resolve;\n });\n await previous;\n try {\n return await task();\n } finally {\n release();\n }\n}\n\nasync function processDueAnnouncements(\n blob: BlobStore,\n url: URL,\n): Promise<{ processed: number; sent: number; failed: number }> {\n return await withAnnouncementRunLock(async () => {\n const schedules = await readAnnouncementSchedules(blob);\n const logs = await readAnnouncementLogs(blob);\n const now = Date.now();\n const due = schedules\n .filter((s) => {\n if (s.status === \"pending\") return Date.parse(s.scheduledAt) <= now;\n if (s.status !== \"sending\" || !s.sendingAt) return false;\n return now - Date.parse(s.sendingAt) >= ANNOUNCEMENT_SENDING_STALE_MS;\n })\n .sort((a, b) => Date.parse(a.scheduledAt) - Date.parse(b.scheduledAt))\n .slice(0, MAX_DUE_ANNOUNCEMENTS_PER_RUN);\n\n let sent = 0;\n let failed = 0;\n for (let i = 0; i < due.length; i++) {\n const target = schedules.find((s) => s.id === due[i].id);\n if (!target) continue;\n const alreadySent = logs.some((log) =>\n log.scheduleId === target.id && log.status === \"success\"\n );\n if (alreadySent) {\n target.status = \"sent\";\n target.sentAt = target.sentAt || new Date().toISOString();\n target.sendingAt = undefined;\n target.error = undefined;\n await blob.setJSON(\n ANNOUNCEMENT_SCHEDULE_KEY,\n sanitizeAnnouncementSchedules(schedules),\n );\n continue;\n }\n target.status = \"sending\";\n target.sendingAt = new Date().toISOString();\n target.error = undefined;\n await blob.setJSON(\n ANNOUNCEMENT_SCHEDULE_KEY,\n sanitizeAnnouncementSchedules(schedules),\n );\n\n try {\n await sendNightbotAnnouncement(blob, url, target.message);\n target.status = \"sent\";\n target.sentAt = new Date().toISOString();\n target.sendingAt = undefined;\n sent++;\n try {\n await recordAnnouncementAttempt(blob, {\n channel: target.channel,\n actor: target.createdBy,\n message: target.message,\n status: \"success\",\n mode: \"scheduled\",\n scheduleId: target.id,\n scheduledAt: target.scheduledAt,\n });\n } catch {\n // 전송 성공을 되돌릴 수 없으므로 로그 저장 실패로 재전송하지 않는다.\n }\n } catch (err) {\n const error = err instanceof Error ? err.message : String(err);\n target.status = \"failed\";\n target.sentAt = new Date().toISOString();\n target.sendingAt = undefined;\n target.error = error.slice(0, 500);\n failed++;\n try {\n await recordAnnouncementAttempt(blob, {\n channel: target.channel,\n actor: target.createdBy,\n message: target.message,\n status: \"failure\",\n mode: \"scheduled\",\n scheduleId: target.id,\n scheduledAt: target.scheduledAt,\n error,\n });\n } catch {\n // 원래 전송 오류를 보존한다.\n }\n }\n await blob.setJSON(\n ANNOUNCEMENT_SCHEDULE_KEY,\n sanitizeAnnouncementSchedules(schedules),\n );\n if (i < due.length - 1) {\n await new Promise((resolve) => setTimeout(resolve, 5200));\n }\n }\n return { processed: due.length, sent, failed };\n });\n}\n\nasync function handleAnnouncementRunDue(\n req: Request,\n url: URL,\n blob: BlobStore,\n): Promise {\n if (req.method !== \"POST\") {\n return jsonResponse({ ok: false, error: \"Method Not Allowed\" }, 405, {\n Allow: \"POST\",\n });\n }\n const adminUser = await getAuthenticatedAdminUser(req);\n const cronKey = checkSecret(req, ANNOUNCEMENT_CRON_SECRET, [\n \"x-announcement-key\",\n ], true);\n if (!adminUser && !cronKey) return forbiddenResponse();\n if (adminUser && !cronKey && !sameOrigin(req, url)) {\n return forbiddenResponse();\n }\n\n try {\n const result = await processDueAnnouncements(blob, url);\n return jsonResponse({ ok: true, ...result });\n } catch (err) {\n return jsonResponse({\n ok: false,\n error: err instanceof Error ? err.message : String(err),\n }, 500);\n }\n}\n\n// 나이트봇 텍스트 API: /?ch=채널&q=명령&key=NIGHTBOT_API_SECRET\n// - q가 없으면 현재 스택을 보여준다. (인증 불필요)\n// - 명령은 API Key로만 실행한다. 관리자 화면은 /api/stack(POST)을 쓴다.\nasync function handleNightbotRequest(\n req: Request,\n url: URL,\n blob: BlobStore,\n): Promise {\n const requestedQuery = toNfc((url.searchParams.get(\"q\") || \"\").trim());\n const channel = getValidatedChannel(url.searchParams.get(\"ch\"));\n\n if (!channel) return textResponse(\"채널명을 입력해주세요.\", 200);\n if (requestedQuery && !checkNightbotApiKey(req)) return forbiddenResponse();\n if (await getMaintenanceMode(blob)) {\n return textResponse(MAINTENANCE_MESSAGE, 200);\n }\n\n const historyMeta: Pick = {\n source: \"nightbot\",\n actor: \"nightbot\",\n };\n\n return await withChannelLock(channel, async () => {\n if (!requestedQuery) {\n return textResponse(formatStack(await readStack(blob, channel)));\n }\n\n const parts = requestedQuery.split(/\\s+/);\n const command = parts[0];\n\n if (command === \"기록초기화\") {\n return textResponse(\"기록초기화는 관리자 화면에서만 할 수 있습니다.\");\n }\n\n if (command === \"추가\" || command === \"차감\" || command === \"빼기\") {\n const parsed = splitItemAndAmount(parts.slice(1));\n if (!parsed.item) {\n return textResponse(\n command === \"추가\"\n ? \"사용법 : !스택 추가 [항목] [숫자 (생략가능, 소수 가능)]\"\n : \"사용법 : !스택 차감 (빼기) [항목] [숫자 (생략가능, 소수 가능)]\",\n );\n }\n if (!parsed.valid) {\n return textResponse(\n `수량은 0 보다 큰 숫자만 입력할 수 있습니다. (인식된 수량 토큰: \"${\n parsed.lastToken ?? \"\"\n }\")`,\n );\n }\n if (command === \"추가\" && endsWithBareNumber(parsed.item)) {\n return textResponse(\n `항목 이름(\"${parsed.item}\") 끝에 숫자가 포함되어 있어 추가하지 않았습니다.`,\n );\n }\n\n const result = await applyStackAction(\n blob,\n channel,\n command === \"추가\" ? \"추가\" : \"차감\",\n parsed.item,\n parsed.amount,\n historyMeta,\n );\n return textResponse(result.message, 200);\n }\n\n if (command === \"삭제\") {\n const result = await applyStackAction(\n blob,\n channel,\n \"삭제\",\n parts.slice(1).join(\" \"),\n undefined,\n historyMeta,\n );\n return textResponse(result.message, 200);\n }\n\n if (command === \"초기화\") {\n const result = await applyStackAction(\n blob,\n channel,\n \"초기화\",\n undefined,\n undefined,\n historyMeta,\n );\n return textResponse(result.message, 200);\n }\n\n return textResponse(\n \"알 수 없는 명령입니다. (추가/차감/삭제/초기화)\",\n 200,\n );\n });\n}\n\n// Main (HTTP)\n\nexport default async function (req: Request): Promise {\n const { blob } = await import(\"https://esm.town/v/std/blob\");\n const url = new URL(req.url);\n\n // /admin 은 기록 조회까지 공개하고, 관리 패널은 로그인한 관리자에게만 내려준다.\n if (url.pathname === \"/admin\") {\n // Nightbot OAuth 의 기본 Redirect URI 도 /admin 이다.\n // 브라우저 JS가 query string 을 정리하기 전에 서버에서 code/state 를 먼저 처리한다.\n if (\n url.searchParams.has(\"state\") &&\n (url.searchParams.has(\"code\") || url.searchParams.has(\"error\"))\n ) {\n return handleNightbotOAuthCallback(url, blob);\n }\n\n const adminUser = await getAuthenticatedAdminUser(req);\n\n // ?login=1 은 브라우저 로그인 창을 띄우기 위한 주소다.\n // 로그인 창을 같은 경로(/admin)에서 띄워야 이후 요청에도 인증 정보가 함께 간다.\n if (url.searchParams.has(\"login\")) {\n if (!adminUser) return unauthorizedResponse();\n const back = new URL(url.href);\n back.searchParams.delete(\"login\");\n return redirectResponse(back.pathname + back.search);\n }\n\n return htmlResponse(renderAdminHtml(!!adminUser));\n }\n if (url.pathname === \"/monitor\") return htmlResponse(MONITOR_HTML);\n\n // 알림용 서비스워커. 반드시 최상위 경로(/sw.js)에서 내려줘야 사이트 전체를 담당한다.\n if (url.pathname === \"/sw.js\") {\n return new Response(SERVICE_WORKER_JS, {\n headers: {\n \"content-type\": \"text/javascript; charset=utf-8\",\n \"cache-control\": \"no-cache\",\n \"service-worker-allowed\": \"/\",\n \"x-content-type-options\": \"nosniff\",\n },\n });\n }\n\n // 예전 주소로 들어오거나 이미 공유된 링크를 눌러도 통합된 화면으로 보낸다.\n if (url.pathname === \"/history\") {\n return redirectResponse(\"/admin\" + url.search);\n }\n\n if (url.pathname === \"/api/stack\") {\n return handleStackJsonApi(req, url, blob);\n }\n if (url.pathname === \"/api/donation\") {\n return handleDonationApi(req, url, blob);\n }\n if (url.pathname === \"/api/history\") {\n return handleHistoryJsonApi(req, url, blob);\n }\n\n if (url.pathname === \"/admin/nightbot-connect\") {\n return handleNightbotOAuthConnect(req, url, blob);\n }\n // NIGHTBOT_REDIRECT_URI 를 /nightbot/callback 으로 지정한 경우에도 동작한다.\n if (url.pathname === \"/nightbot/callback\") {\n return handleNightbotOAuthCallback(url, blob);\n }\n if (url.pathname === \"/admin/nightbot-status\") {\n return handleNightbotStatus(req, url, blob);\n }\n if (url.pathname === \"/admin/nightbot-disconnect\" && req.method === \"POST\") {\n return handleNightbotDisconnect(req, url, blob);\n }\n if (url.pathname === \"/admin/announce\") {\n return handleAdminAnnouncement(req, url, blob);\n }\n if (url.pathname === \"/admin/announcement-data\") {\n return handleAnnouncementAdminData(req, url, blob);\n }\n if (url.pathname === \"/admin/announcement-preset\") {\n return handleAnnouncementPreset(req, url, blob);\n }\n if (url.pathname === \"/admin/announcement-schedule\") {\n return handleAnnouncementSchedule(req, url, blob);\n }\n if (url.pathname === \"/admin/announcement-run-due\") {\n return handleAnnouncementRunDue(req, url, blob);\n }\n\n if (url.pathname === \"/admin/maintenance-status\") {\n if (!(await checkAuth(req))) return unauthorizedResponse();\n return jsonResponse({ ok: true, on: await getMaintenanceMode(blob) });\n }\n\n if (url.pathname === \"/admin/maintenance\" && req.method === \"POST\") {\n if (!(await checkAuth(req))) return unauthorizedResponse();\n if (!sameOrigin(req, url)) return forbiddenResponse();\n const body = await readJsonBody(req);\n if (!body || typeof body.on !== \"boolean\") {\n return jsonResponse(\n { ok: false, error: \"on(boolean)이 필요합니다.\" },\n 400,\n );\n }\n await setMaintenanceMode(blob, body.on);\n return jsonResponse({ ok: true, on: body.on });\n }\n\n // 시간 기준 운영에서는 YouTube 연동을 쓰지 않는다.\n // 남아 있는 워커나 Push 알림이 들어오면 로그에서 바로 보이도록 410으로 응답한다.\n if (\n url.pathname === \"/youtube-check\" ||\n url.pathname.startsWith(\"/youtube-webhook\")\n ) {\n return jsonResponse({\n ok: false,\n error:\n \"YouTube 자동 초기화는 사용하지 않습니다. (매일 06:00 초기화로 운영)\",\n }, 410);\n }\n\n return handleNightbotRequest(req, url, blob);\n}","aguking-stack",[160],"a81d3785-4d93-48a3-a20e-96a95950da37","excel.ts","b6c0703c-a863-11f1-85c1-1607ee4eb77e",371,["D",1789044918857],3,"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst TABLE = \"excel_items\";\nconst DEFAULT_CHANNEL = \"암본이수혁aguking\";\nconst DECIMAL_PLACES = 6;\nconst SCALE = 1_000_000;\n\nconst EMOJIS = [\n \"🍎\",\n \"🍏\",\n \"🍓\",\n \"🍒\",\n \"🍋\",\n \"🧅\",\n \"🥔\",\n \"🧄\",\n \"🌽\",\n \"🥕\",\n \"👑\",\n \"💎\",\n \"⚔️\",\n \"🐉\",\n \"🔥\",\n \"🦁\",\n \"🐯\",\n \"🐺\",\n \"🦊\",\n \"🐻\",\n \"🎲\",\n \"⭐\",\n \"✨\",\n \"💫\",\n \"🌈\",\n \"🎯\",\n \"🏆\",\n \"🎮\",\n \"🎁\",\n \"🚀\",\n \"📦\",\n \"🔹\",\n \"🎉\",\n \"✅\",\n];\n\ntype Item = { name: string; qty: number };\n\ntype Command =\n | { command: \"추가\" | \"차감\"; name?: string; amount: number }\n | { command: \"삭제\"; name?: string }\n | { command: \"초기화\" }\n | { command: \"unknown\" };\n\nfunction round6(value: number): number {\n return Math.round((value + Number.EPSILON) * SCALE) / SCALE;\n}\n\nfunction formatQty(value: number): string {\n const safe = Number.isFinite(value) ? round6(value) : 0;\n return safe.toFixed(DECIMAL_PLACES).replace(/\\.?0+$/, \"\");\n}\n\nfunction parseAmount(raw: string | undefined): number {\n const value = Number(raw);\n return Number.isFinite(value) && value > 0 ? round6(value) : 1;\n}\n\nfunction getRandomEmoji(): string {\n return EMOJIS[Math.floor(Math.random() * EMOJIS.length)];\n}\n\nfunction escapeHtml(value: string): string {\n return value\n .replaceAll(\"&\", \"&\")\n .replaceAll(\"<\", \"<\")\n .replaceAll(\">\", \">\")\n .replaceAll('\"', \""\")\n .replaceAll(\"'\", \"'\");\n}\n\nfunction readResultValue(result: any, row: any, column: string): unknown {\n if (row && typeof row === \"object\" && !Array.isArray(row) && column in row) {\n return row[column];\n }\n\n const columns = Array.isArray(result.columns) ? result.columns : [];\n const index = columns.findIndex(\n (item: unknown) => String(item).toLowerCase() === column.toLowerCase(),\n );\n\n return index >= 0 && row ? row[index] : undefined;\n}\n\nasync function ensureTable(): Promise {\n await sqlite.execute(\n `CREATE TABLE IF NOT EXISTS ${TABLE} (\n channel TEXT NOT NULL,\n name TEXT NOT NULL,\n qty REAL NOT NULL DEFAULT 0,\n PRIMARY KEY (channel, name)\n )`,\n );\n}\n\nasync function getItems(channel: string): Promise {\n const result: any = await sqlite.execute({\n sql: `SELECT name, qty\n FROM ${TABLE}\n WHERE channel = ?\n ORDER BY CASE WHEN name = '국고' THEN 1 ELSE 0 END ASC,\n rowid ASC`,\n args: [channel],\n });\n\n return (result.rows || [])\n .map((row: any) => ({\n name: String(readResultValue(result, row, \"name\") ?? \"\").trim(),\n qty: round6(Number(readResultValue(result, row, \"qty\")) || 0),\n }))\n .filter((item: Item) => item.name !== \"\");\n}\n\nasync function listItemsText(channel: string): Promise {\n const items = await getItems(channel);\n\n return items.length\n ? items\n .map(\n (item) => `${getRandomEmoji()} ${item.name} ${formatQty(item.qty)}`,\n )\n .join(\", \")\n : \"✨ 아직 비어 있어요. 항목을 추가해 주세요!\";\n}\n\nasync function addItem(\n channel: string,\n name: string,\n amount: number,\n): Promise {\n if (name === \"국고\") {\n // 1) 기존 국고 수량 읽기\n const result: any = await sqlite.execute({\n sql: `SELECT qty FROM ${TABLE} WHERE channel = ? AND name = ?`,\n args: [channel, name],\n });\n\n const oldQty = result.rows?.length\n ? round6(Number(readResultValue(result, result.rows[0], \"qty\")) || 0)\n : 0;\n\n const newQty = round6(oldQty + amount);\n\n // 2) 기존 국고 삭제 (있으면)\n if (result.rows?.length) {\n await sqlite.execute({\n sql: `DELETE FROM ${TABLE} WHERE channel = ? AND name = ?`,\n args: [channel, name],\n });\n }\n\n // 3) 새 행으로 INSERT → rowid 가 가장 큰 값이 되어 맨 뒤로 감\n await sqlite.execute({\n sql: `INSERT INTO ${TABLE} (channel, name, qty) VALUES (?, ?, ?)`,\n args: [channel, name, newQty],\n });\n\n return newQty;\n }\n\n // 일반 항목: 기존 로직 유지 (중복 시 합산)\n await sqlite.execute({\n sql: `INSERT INTO ${TABLE} (channel, name, qty) VALUES (?, ?, ?)\n ON CONFLICT(channel, name)\n DO UPDATE SET qty = ROUND(qty + excluded.qty, 6)`,\n args: [channel, name, amount],\n });\n\n const result: any = await sqlite.execute({\n sql: `SELECT qty FROM ${TABLE} WHERE channel = ? AND name = ?`,\n args: [channel, name],\n });\n\n return round6(Number(readResultValue(result, result.rows[0], \"qty\")) || 0);\n}\n\nasync function subtractItem(\n channel: string,\n name: string,\n amount: number,\n): Promise {\n const result: any = await sqlite.execute({\n sql: `SELECT qty FROM ${TABLE} WHERE channel = ? AND name = ?`,\n args: [channel, name],\n });\n\n if (!result.rows?.length) return null;\n\n const current = round6(\n Number(readResultValue(result, result.rows[0], \"qty\")) || 0,\n );\n const next = Math.max(0, round6(current - amount));\n\n if (name === \"국고\") {\n // 국고는 삭제 후 재 INSERT 로 rowid 갱신 (항상 맨 뒤)\n await sqlite.execute({\n sql: `DELETE FROM ${TABLE} WHERE channel = ? AND name = ?`,\n args: [channel, name],\n });\n\n await sqlite.execute({\n sql: `INSERT INTO ${TABLE} (channel, name, qty) VALUES (?, ?, ?)`,\n args: [channel, name, next],\n });\n } else {\n // 일반 항목은 그냥 업데이트\n await sqlite.execute({\n sql: `UPDATE ${TABLE} SET qty = ? WHERE channel = ? AND name = ?`,\n args: [next, channel, name],\n });\n }\n\n return next;\n}\n\nasync function deleteItem(channel: string, name: string): Promise {\n await sqlite.execute({\n sql: `DELETE FROM ${TABLE} WHERE channel = ? AND name = ?`,\n args: [channel, name],\n });\n}\n\nasync function resetChannel(channel: string): Promise {\n await sqlite.execute({\n sql: `DELETE FROM ${TABLE} WHERE channel = ?`,\n args: [channel],\n });\n}\n\nfunction parseCommand(q: string): Command {\n const parts = q.trim().split(/\\s+/);\n const command = parts[0] || \"\";\n\n if (command === \"추가\" || command === \"차감\") {\n return {\n command,\n name: parts[1],\n amount: parseAmount(parts[2]),\n };\n }\n\n if (command === \"삭제\") {\n return {\n command,\n name: parts[1],\n };\n }\n\n if (command === \"초기화\") {\n return { command };\n }\n\n return { command: \"unknown\" };\n}\n\nasync function handleCommand(channel: string, q: string): Promise {\n if (!q.trim()) {\n return await listItemsText(channel);\n }\n\n const parsed = parseCommand(q);\n\n switch (parsed.command) {\n case \"추가\": {\n if (!parsed.name) return \"사용법: 추가 이름 수량\";\n\n const qty = await addItem(channel, parsed.name, parsed.amount);\n return `${parsed.name} 추가됨 (현재 ${formatQty(qty)})`;\n }\n\n case \"차감\": {\n if (!parsed.name) return \"사용법: 차감 이름 수량\";\n\n const qty = await subtractItem(channel, parsed.name, parsed.amount);\n\n return qty === null\n ? `${parsed.name} 항목이 없습니다.`\n : `${parsed.name} 차감됨 (현재 ${formatQty(qty)})`;\n }\n\n case \"삭제\": {\n if (!parsed.name) return \"사용법: 삭제 이름\";\n\n await deleteItem(channel, parsed.name);\n return `${parsed.name} 삭제됨`;\n }\n\n case \"초기화\":\n await resetChannel(channel);\n return \"전체 초기화 완료\";\n\n default:\n return \"알 수 없는 명령어입니다. (추가/차감/삭제/초기화)\";\n }\n}\n\nfunction checkAuth(req: Request): boolean {\n const accounts = new Map();\n\n for (const entry of (Deno.env.get(\"ADMIN_ACCOUNTS\") || \"\").split(\",\")) {\n const index = entry.indexOf(\":\");\n\n if (index > 0) {\n accounts.set(\n entry.slice(0, index).trim(),\n entry.slice(index + 1).trim(),\n );\n }\n }\n\n if (!accounts.size) return false;\n\n const header = req.headers.get(\"authorization\") || \"\";\n if (!header.startsWith(\"Basic \")) return false;\n\n try {\n const decoded = atob(header.slice(6));\n const index = decoded.indexOf(\":\");\n\n return index >= 0 &&\n accounts.get(decoded.slice(0, index).trim()) === decoded.slice(index + 1);\n } catch {\n return false;\n }\n}\n\nfunction refreshControlsHtml(channel: string): string {\n return `\n Auto\n \n \n \n \n \n\n \n\n `;\n}\n\nconst COMMON_CSS = `\n body {\n background: #0f1115;\n color: #eee;\n font-family: sans-serif;\n padding: 24px;\n }\n\n a { color: #9ab5ff; }\n\n table {\n width: 100%;\n border-collapse: collapse;\n background: #181b21;\n margin-top: 16px;\n }\n\n th, td {\n padding: 12px;\n text-align: left;\n border-bottom: 1px solid #2a2e37;\n }\n\n th { color: #9aa0a6; }\n\n .top-controls {\n position: fixed;\n top: 18px;\n right: 18px;\n display: flex;\n align-items: center;\n gap: 10px;\n z-index: 10;\n }\n\n .page-link {\n display: inline-flex;\n align-items: center;\n min-height: 38px;\n padding: 0 12px;\n box-sizing: border-box;\n border: 1px solid #3c4657;\n border-radius: 7px;\n color: #eaf0ff;\n background: #202631;\n text-decoration: none;\n font-size: 14px;\n font-weight: 700;\n }\n\n .page-link:hover {\n background: #303947;\n }\n\n .auto-toggle {\n display: inline-flex;\n align-items: center;\n gap: 8px;\n cursor: pointer;\n user-select: none;\n color: #c9ced8;\n font-size: 14px;\n }\n\n .auto-label {\n font-weight: 700;\n letter-spacing: .2px;\n }\n\n .auto-toggle input {\n position: absolute;\n width: 1px;\n height: 1px;\n opacity: 0;\n pointer-events: none;\n }\n\n .toggle-track {\n width: 42px;\n height: 24px;\n padding: 3px;\n box-sizing: border-box;\n border-radius: 999px;\n background: #343943;\n border: 1px solid #4b5260;\n transition: background .2s ease, border-color .2s ease;\n }\n\n .toggle-knob {\n display: block;\n width: 16px;\n height: 16px;\n border-radius: 50%;\n background: #fff;\n box-shadow: 0 1px 3px rgba(0, 0, 0, .45);\n transform: translateX(0);\n transition: transform .2s ease;\n }\n\n .auto-toggle input:checked + .toggle-track {\n background: #2a8a4b;\n border-color: #48b96b;\n }\n\n .auto-toggle input:checked + .toggle-track .toggle-knob {\n transform: translateX(16px);\n }\n\n .auto-toggle input:focus-visible + .toggle-track {\n outline: 2px solid #8fb1ff;\n outline-offset: 3px;\n }\n\n .manual-refresh {\n min-height: 38px;\n padding: 8px 12px;\n border: 1px solid #3c4657;\n border-radius: 7px;\n cursor: pointer;\n color: #eaf0ff;\n background: #263a63;\n font-weight: 700;\n }\n\n .manual-refresh:hover {\n background: #31508d;\n }\n`;\n\nfunction renderViewPage(channel: string, items: Item[]): string {\n const rows = items\n .map(\n (item) =>\n `${getRandomEmoji()} ${escapeHtml(item.name)}${\n formatQty(item.qty)\n }`,\n )\n .join(\"\");\n\n const adminUrl = `/admin?ch=${encodeURIComponent(channel)}`;\n\n return `\n\n\n \n \n 엑셀 - ${escapeHtml(channel)}\n \n\n\n

엑셀 - ${escapeHtml(channel)}

\n Admin\n ${refreshControlsHtml(channel)}\n

\n ${\n rows\n ? `\n \n ${rows}\n

이름	수량

`\n : \"

✨ 아직 비어 있어요. 항목을 추가해 주세요!

\"\n }\n\n`;\n}\n\nfunction renderAdminPage(channel: string, items: Item[]): string {\n const rows = items\n .map((item) => {\n const name = JSON.stringify(item.name);\n\n return `\n ${escapeHtml(item.name)}\n ${formatQty(item.qty)}\n \n \n \n \n \n `;\n })\n .join(\"\");\n\n const listUrl = `/?ch=${encodeURIComponent(channel)}`;\n\n return `\n\n\n \n \n 엑셀 관리 - ${escapeHtml(channel)}\n \n\n\n

엑셀 관리 - ${escapeHtml(channel)}

\n Monitoring\n ${refreshControlsHtml(channel)}\n

\n\n \n\n ${\n rows\n ? `\n \n ${rows}\n

이름	수량	관리

`\n : \"

✨ 아직 비어 있어요. 항목을 추가해 주세요! 항목이 없습니다.

\"\n }\n\n \n\n`;\n}\n\nexport default async function (req: Request): Promise {\n await ensureTable();\n\n const url = new URL(req.url);\n const channel = url.searchParams.get(\"ch\")?.trim() || DEFAULT_CHANNEL;\n const q = url.searchParams.get(\"q\");\n const isAdmin = url.pathname === \"/admin\";\n\n if (isAdmin && !checkAuth(req)) {\n return new Response(\"관리자 인증이 필요합니다.\", {\n status: 401,\n headers: {\n \"content-type\": \"text/plain; charset=utf-8\",\n \"www-authenticate\": 'Basic realm=\"Excel Admin\", charset=\"UTF-8\"',\n },\n });\n }\n\n if (q !== null) {\n return new Response(await handleCommand(channel, q), {\n headers: {\n \"content-type\": \"text/plain; charset=utf-8\",\n },\n });\n }\n\n const items = await getItems(channel);\n const html = isAdmin\n ? renderAdminPage(channel, items)\n : renderViewPage(channel, items);\n\n return new Response(html, {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n },\n });\n}","aguking-excel",[168],"e9f69516-3243-4254-b5c2-2e1f1ede405c","cron.ts","76069368-acbf-11f1-9e7d-1607ee4eb77e",377,["D",1789109900008],8,"interval","// 매일 06:00 KST 스택 초기화 (시간 기준, B)\n// Val Town Cron 스케줄은 지금 설정 그대로 두면 된다. (UTC 기준 0 21 * * * = KST 06:00)\n//\n// - main.ts 의 /api/stack 에 trigger:\"daily-reset\" 으로 초기화를 요청한다.\n// → History에 \"자동초기화(06시)\"로 기록된다.\n// - 일시적인 오류(네트워크, 5xx)는 최대 3번까지 다시 시도한다.\n// 서버가 최근 1시간 안의 매일 초기화를 건너뛰므로 재시도해도 두 번 초기화되지 않는다.\n\nconst STACK_API_URL = \"https://aguking-stack.val.run/api/stack\";\nconst STACK_API_SECRET = Deno.env.get(\"STACK_API_SECRET\") || \"\";\nconst CHANNEL = \"암본이수혁aguking\";\n\nconst MAX_ATTEMPTS = 3;\nconst REQUEST_TIMEOUT_MS = 15_000;\nconst RETRY_DELAY_MS = 5_000;\n\nexport default async function (_interval: Interval) {\n if (!STACK_API_SECRET) {\n console.error(\"STACK_API_SECRET이 없어 매일 초기화를 실행할 수 없습니다.\");\n return;\n }\n\n for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) {\n try {\n const res = await fetch(STACK_API_URL, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-stack-key\": STACK_API_SECRET,\n },\n body: JSON.stringify({\n channel: CHANNEL,\n action: \"초기화\",\n trigger: \"daily-reset\",\n }),\n signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),\n });\n const data = await res.json().catch(() => null);\n\n if (res.ok && data?.ok) {\n console.log(\n data.skipped ? \"매일 초기화 건너뜀:\" : \"매일 초기화 성공:\",\n data.message,\n );\n return;\n }\n\n console.error(\n `매일 초기화 실패 (${attempt}/${MAX_ATTEMPTS}):`,\n res.status,\n data,\n );\n // 인증·요청 오류(4xx)는 다시 시도해도 결과가 같으므로 바로 끝낸다.\n if (res.status >= 400 && res.status < 500) return;\n } catch (err) {\n console.error(\n `매일 초기화 요청 오류 (${attempt}/${MAX_ATTEMPTS}):`,\n String(err),\n );\n }\n\n if (attempt < MAX_ATTEMPTS) {\n await new Promise((resolve) => setTimeout(resolve, RETRY_DELAY_MS));\n }\n }\n}",[177],"1e827651-4dfe-4703-8870-957873506f55","admin-ui.ts","e42db918-b190-11f1-bbc7-1607ee4eb77e",408,["D",1789537353131],2,"// ver.4.7.1 admin_ui.ts — /admin History/Admin 화면 렌더러.\nimport {\n AUTO_REFRESH_INTERVAL_MS,\n CLIENT_COMMON_JS,\n EMOJI_MAP,\n PRIMARY_CHANNEL,\n} from \"./ui.ts\";\nimport { ADMIN_SIDE_HTML, ADMIN_SIDE_JS } from \"./admin_parts.ts\";\n\nexport function renderAdminHtml(isAdmin: boolean): string {\n return `\n\n\n\n\nStack ${isAdmin ? \"Admin\" : \"History\"}\n\n\n\n\n

\n\n\n

\n 채널\n

\n \n \n

\n \n

\n\n

기록을 불러오는 중...

\n\n

\n\n${isAdmin ? ADMIN_SIDE_HTML : \"\"}\n

\n\n\n\n\n\n`;\n}\n",[186],"pulls","branches",1,"forks","envVars",{"_201":181,"_203":61},"connections",{"_201":61,"_202":61},"count","unfilledCount","emptyCount",{"_42":185,"_32":186,"_30":187,"_138":-5,"_40":41,"_39":188,"_140":24,"_37":230,"_13":190,"_33":34,"_35":191,"_23":24,"_145":-5,"_212":231,"_26":232},{"_42":176,"_32":177,"_30":178,"_138":-5,"_40":41,"_39":179,"_140":57,"_37":227,"_13":181,"_33":182,"_35":183,"_23":24,"_145":-5,"_212":228,"_26":229},{"_42":167,"_32":168,"_30":169,"_138":-5,"_40":41,"_39":170,"_140":57,"_37":224,"_13":172,"_33":143,"_35":173,"_23":24,"_145":174,"_212":225,"_26":226},{"_42":159,"_32":160,"_30":55,"_138":-5,"_40":41,"_39":161,"_140":57,"_37":221,"_13":163,"_33":143,"_35":164,"_23":24,"_145":165,"_212":222,"_26":223},{"_42":156,"_32":27,"_30":31,"_138":-5,"_40":41,"_39":14,"_140":24,"_37":218,"_13":61,"_33":34,"_35":36,"_23":24,"_145":-5,"_212":219,"_26":220},{"_42":148,"_32":149,"_30":150,"_138":-5,"_40":41,"_39":151,"_140":57,"_37":215,"_13":153,"_33":34,"_35":154,"_23":24,"_145":-5,"_212":216,"_26":217},{"_42":135,"_32":136,"_30":137,"_138":-5,"_40":41,"_39":139,"_140":57,"_37":211,"_13":142,"_33":143,"_35":144,"_23":24,"_145":146,"_212":213,"_26":214},["D",1788834627060],"children",[],[136],["D",1789537331670],[],[149],["D",1789537371373],[],[27],["D",1789537307227],[],[160],["D",1789044918857],[],[168],["D",1789109900008],[],[177],["D",1789537353131],[],[186],["D",1787817154621],["D",1789497078049],{"_98":97,"_106":102},{"_98":97,"_99":100,"_101":102,"_18":53,"_103":104,"_105":24},{"_13":87,"_32":88,"_42":41,"_89":43,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":44,"_96":97},"ctx",{"_80":-5,"_125":271,"_272":273,"_274":275,"_276":24,"_277":24,"_278":24,"_279":57,"_280":-5,"_281":-7,"_282":-7,"_283":61,"_284":24,"_285":24,"_286":-5,"_287":24,"_288":24,"_289":24,"_290":-5},"ENV",{"_242":243,"_244":245,"_246":88,"_247":248,"_249":250,"_251":252,"_253":254,"_255":256,"_257":258,"_259":260,"_261":262,"_263":264,"_265":266,"_267":268,"_269":270},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

🎬 ${escapeHtml(CHANNEL_NAME)}

Stack Monitoring · aguking-stack

엑셀 - ${escapeHtml(channel)}

엑셀 관리 - ${escapeHtml(channel)}

Stack ${\n isAdmin ? \"Admin\" : \"History\"\n } · aguking-stack

Diff · v409