@cartanova/qgrid-cli 2.6.5 → 2.6.6

package/bundle/web-dist/server/assets/{tokens-h-2A3wfD.js → tokens-Dkd_uXEk.js}

@@ -1,7 +1,7 @@
 import { Z as __toESM, _ as require_jsx_runtime, g as useQueryClient, v as require_react } from "./sd.generated-B0xqnHEo.js";
 import { a as TokenService, n as QgridService } from "./services.generated-DqAKskAS.js";
 import { i as Q, o as lucideKeyRound } from "../entry-server.generated.js";
-import { t as useUpdateTokenMutation } from "./use-update-token-mutation-DHCaa7Ku.js";
+import { n as OAuthCodeEntry, r as useUpdateTokenMutation, t as useOAuthLoginFlow } from "./use-oauth-login-flow-YM1nsd-H.js";
 //#region ~icons/lucide/plus.jsx
 var import_react = /* @__PURE__ */ __toESM(require_react());
 var import_jsx_runtime = require_jsx_runtime();
@@ -20,156 +20,6 @@ var lucidePlus = (props) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)("svg", {
 	})
 });
 //#endregion
-//#region src/components/qgrid/OAuthCodeEntry.tsx
-/**
-* 원격 접속(code 모드) Claude 로그인의 코드 입력 단계.
-* Add Token 모달과 재로그인이 같은 문구·에러·재시작 동선을 쓰도록 한 곳에 둔다.
-*/
-function OAuthCodeEntry({ isPending, isError, onSubmit, onRestart }) {
-	const [pastedCode, setPastedCode] = (0, import_react.useState)("");
-	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
-		className: "space-y-2",
-		children: [
-			/* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", {
-				className: "text-[12px] text-sand-600 leading-relaxed",
-				children: "새 탭에서 Claude 로그인을 완료하면 코드가 표시됩니다. 코드 전체를 아래에 붙여넣으세요."
-			}),
-			/* @__PURE__ */ (0, import_jsx_runtime.jsx)(Q, {
-				value: pastedCode,
-				onChange: (e) => setPastedCode(e.target.value),
-				placeholder: "code#state",
-				className: "w-full border border-sand-200 rounded-md px-3 py-2 text-sm font-mono text-sand-900 bg-white placeholder:text-sand-300 focus:outline-none focus:border-sienna-300"
-			}),
-			isError && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", {
-				className: "text-[11px] text-red-500",
-				children: "코드 확인에 실패했습니다 — 표시된 코드 전체를 다시 붙여넣거나 로그인을 다시 시작하세요."
-			}),
-			/* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", {
-				type: "button",
-				className: "w-full py-2.5 text-sm font-medium rounded-md bg-sand-900 text-white hover:bg-sand-800 disabled:opacity-50 transition-colors duration-150 flex items-center justify-center gap-2",
-				disabled: !pastedCode.trim() || isPending,
-				onClick: () => onSubmit(pastedCode),
-				children: isPending ? /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", {
-					className: "flex items-center gap-1.5",
-					children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "w-3.5 h-3.5 border-2 border-white border-t-transparent rounded-full animate-spin" }), "Verifying..."]
-				}) : "Complete login"
-			}),
-			/* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", {
-				type: "button",
-				className: "w-full py-1.5 text-[12px] text-sand-500 hover:text-sand-700 transition-colors duration-150",
-				onClick: () => {
-					setPastedCode("");
-					onRestart();
-				},
-				children: "처음부터 다시 시작"
-			})
-		]
-	});
-}
-//#endregion
-//#region src/components/qgrid/use-oauth-login-flow.ts
-var OPENAI_POLL_INTERVAL_MS = 3e3;
-var OPENAI_POLL_TIMEOUT_MS = 3e5;
-/** 캐시에 적재된 토큰 행 수. 폴링 조기 종료 판정에만 쓰는 근사치다. */
-function countTokens(queryClient) {
-	let total = 0;
-	for (const query of queryClient.getQueryCache().findAll({ queryKey: ["Token"] })) {
-		const rows = query.state.data?.rows;
-		if (Array.isArray(rows)) total = Math.max(total, rows.length);
-	}
-	return total;
-}
-/**
-* provider별 OAuth 로그인 시작과 코드 제출을 한 곳에 모은다.
-* Add Token 모달과 tokens 목록의 재로그인 버튼이 같은 플로우를 쓴다 — 두 진입점이
-* redirect/code 분기나 폴링 처리를 각자 구현하면 원격 접속 경험이 갈라진다.
-*/
-function useOAuthLoginFlow() {
-	const [loadingProvider, setLoadingProvider] = (0, import_react.useState)(null);
-	const [codeEntry, setCodeEntry] = (0, import_react.useState)(false);
-	const queryClient = useQueryClient();
-	const oauthStartMutation = QgridService.useOauthStartMutation();
-	const oauthStartOpenAIMutation = QgridService.useOauthStartOpenAIMutation();
-	const oauthCompleteMutation = QgridService.useOauthCompleteMutation();
-	const pollTimers = (0, import_react.useRef)({});
-	const stopPolling = () => {
-		if (pollTimers.current.interval !== void 0) clearInterval(pollTimers.current.interval);
-		if (pollTimers.current.timeout !== void 0) clearTimeout(pollTimers.current.timeout);
-		pollTimers.current = {};
-	};
-	(0, import_react.useEffect)(() => stopPolling, []);
-	const invalidateTokens = () => Promise.all([queryClient.invalidateQueries({ queryKey: ["Token"] }), queryClient.invalidateQueries({ queryKey: ["Qgrid"] })]);
-	const start = async (provider, name) => {
-		const trimmed = name.trim();
-		if (!trimmed) return;
-		const popup = window.open("about:blank", "_blank");
-		setLoadingProvider(provider);
-		try {
-			if (provider === "openai") {
-				const { authUrl } = await oauthStartOpenAIMutation.mutateAsync({ name: trimmed });
-				if (popup) popup.location.href = authUrl;
-				else window.open(authUrl, "_blank");
-				const before = countTokens(queryClient);
-				stopPolling();
-				pollTimers.current.interval = window.setInterval(() => {
-					invalidateTokens().then(() => {
-						if (countTokens(queryClient) > before) {
-							stopPolling();
-							setLoadingProvider(null);
-						}
-					});
-				}, OPENAI_POLL_INTERVAL_MS);
-				pollTimers.current.timeout = window.setTimeout(() => {
-					stopPolling();
-					setLoadingProvider(null);
-				}, OPENAI_POLL_TIMEOUT_MS);
-				return;
-			}
-			const { authUrl, mode } = await oauthStartMutation.mutateAsync({ name: trimmed });
-			if (mode === "code") {
-				if (popup) popup.location.href = authUrl;
-				else window.open(authUrl, "_blank");
-				setCodeEntry(true);
-				setLoadingProvider(null);
-			} else {
-				popup?.close();
-				window.location.href = authUrl;
-			}
-		} catch (e) {
-			popup?.close();
-			console.error("OAuth start failed:", e);
-			setLoadingProvider(null);
-		}
-	};
-	/** @returns 교환 성공 여부. 실패 시 `completeMutation.isError` 로 안내 문구를 띄운다. */
-	const submitCode = async (pastedCode) => {
-		const trimmed = pastedCode.trim();
-		if (!trimmed) return false;
-		try {
-			await oauthCompleteMutation.mutateAsync({ pastedCode: trimmed });
-		} catch (e) {
-			console.error("OAuth complete failed:", e);
-			return false;
-		}
-		await invalidateTokens();
-		return true;
-	};
-	const reset = () => {
-		stopPolling();
-		setLoadingProvider(null);
-		setCodeEntry(false);
-		oauthCompleteMutation.reset();
-	};
-	return {
-		loadingProvider,
-		codeEntry,
-		start,
-		submitCode,
-		reset,
-		completeMutation: oauthCompleteMutation
-	};
-}
-//#endregion
 //#region src/components/qgrid/AddTokenModal.tsx
 function AddTokenModal() {
 	const [open, setOpen] = (0, import_react.useState)(false);

package/bundle/web-dist/server/assets/use-oauth-login-flow-YM1nsd-H.js

@@ -0,0 +1,161 @@
+import { Z as __toESM, _ as require_jsx_runtime, g as useQueryClient, v as require_react } from "./sd.generated-B0xqnHEo.js";
+import { n as QgridService, o as useMutation } from "./services.generated-DqAKskAS.js";
+import { i as Q } from "../entry-server.generated.js";
+//#region src/services/token/use-update-token-mutation.ts
+function useUpdateTokenMutation() {
+	return useMutation({ mutationFn: ({ id, name, quotaThreshold, weight }) => QgridService.updateToken(id, name, quotaThreshold, weight) });
+}
+//#endregion
+//#region src/components/qgrid/OAuthCodeEntry.tsx
+var import_react = /* @__PURE__ */ __toESM(require_react(), 1);
+var import_jsx_runtime = require_jsx_runtime();
+/**
+* 원격 접속(code 모드) Claude 로그인의 코드 입력 단계.
+* Add Token 모달과 재로그인이 같은 문구·에러·재시작 동선을 쓰도록 한 곳에 둔다.
+*/
+function OAuthCodeEntry({ isPending, isError, onSubmit, onRestart }) {
+	const [pastedCode, setPastedCode] = (0, import_react.useState)("");
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+		className: "space-y-2",
+		children: [
+			/* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", {
+				className: "text-[12px] text-sand-600 leading-relaxed",
+				children: "새 탭에서 Claude 로그인을 완료하면 코드가 표시됩니다. 코드 전체를 아래에 붙여넣으세요."
+			}),
+			/* @__PURE__ */ (0, import_jsx_runtime.jsx)(Q, {
+				value: pastedCode,
+				onChange: (e) => setPastedCode(e.target.value),
+				placeholder: "code#state",
+				className: "w-full border border-sand-200 rounded-md px-3 py-2 text-sm font-mono text-sand-900 bg-white placeholder:text-sand-300 focus:outline-none focus:border-sienna-300"
+			}),
+			isError && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", {
+				className: "text-[11px] text-red-500",
+				children: "코드 확인에 실패했습니다 — 표시된 코드 전체를 다시 붙여넣거나 로그인을 다시 시작하세요."
+			}),
+			/* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", {
+				type: "button",
+				className: "w-full py-2.5 text-sm font-medium rounded-md bg-sand-900 text-white hover:bg-sand-800 disabled:opacity-50 transition-colors duration-150 flex items-center justify-center gap-2",
+				disabled: !pastedCode.trim() || isPending,
+				onClick: () => onSubmit(pastedCode),
+				children: isPending ? /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", {
+					className: "flex items-center gap-1.5",
+					children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "w-3.5 h-3.5 border-2 border-white border-t-transparent rounded-full animate-spin" }), "Verifying..."]
+				}) : "Complete login"
+			}),
+			/* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", {
+				type: "button",
+				className: "w-full py-1.5 text-[12px] text-sand-500 hover:text-sand-700 transition-colors duration-150",
+				onClick: () => {
+					setPastedCode("");
+					onRestart();
+				},
+				children: "처음부터 다시 시작"
+			})
+		]
+	});
+}
+//#endregion
+//#region src/components/qgrid/use-oauth-login-flow.ts
+var OPENAI_POLL_INTERVAL_MS = 3e3;
+var OPENAI_POLL_TIMEOUT_MS = 3e5;
+/** 캐시에 적재된 토큰 행 수. 폴링 조기 종료 판정에만 쓰는 근사치다. */
+function countTokens(queryClient) {
+	let total = 0;
+	for (const query of queryClient.getQueryCache().findAll({ queryKey: ["Token"] })) {
+		const rows = query.state.data?.rows;
+		if (Array.isArray(rows)) total = Math.max(total, rows.length);
+	}
+	return total;
+}
+/**
+* provider별 OAuth 로그인 시작과 코드 제출을 한 곳에 모은다.
+* Add Token 모달과 tokens 목록의 재로그인 버튼이 같은 플로우를 쓴다 — 두 진입점이
+* redirect/code 분기나 폴링 처리를 각자 구현하면 원격 접속 경험이 갈라진다.
+*/
+function useOAuthLoginFlow() {
+	const [loadingProvider, setLoadingProvider] = (0, import_react.useState)(null);
+	const [codeEntry, setCodeEntry] = (0, import_react.useState)(false);
+	const queryClient = useQueryClient();
+	const oauthStartMutation = QgridService.useOauthStartMutation();
+	const oauthStartOpenAIMutation = QgridService.useOauthStartOpenAIMutation();
+	const oauthCompleteMutation = QgridService.useOauthCompleteMutation();
+	const pollTimers = (0, import_react.useRef)({});
+	const stopPolling = () => {
+		if (pollTimers.current.interval !== void 0) clearInterval(pollTimers.current.interval);
+		if (pollTimers.current.timeout !== void 0) clearTimeout(pollTimers.current.timeout);
+		pollTimers.current = {};
+	};
+	(0, import_react.useEffect)(() => stopPolling, []);
+	const invalidateTokens = () => Promise.all([queryClient.invalidateQueries({ queryKey: ["Token"] }), queryClient.invalidateQueries({ queryKey: ["Qgrid"] })]);
+	const start = async (provider, name) => {
+		const trimmed = name.trim();
+		if (!trimmed) return;
+		const popup = window.open("about:blank", "_blank");
+		setLoadingProvider(provider);
+		try {
+			if (provider === "openai") {
+				const { authUrl } = await oauthStartOpenAIMutation.mutateAsync({ name: trimmed });
+				if (popup) popup.location.href = authUrl;
+				else window.open(authUrl, "_blank");
+				const before = countTokens(queryClient);
+				stopPolling();
+				pollTimers.current.interval = window.setInterval(() => {
+					invalidateTokens().then(() => {
+						if (countTokens(queryClient) > before) {
+							stopPolling();
+							setLoadingProvider(null);
+						}
+					});
+				}, OPENAI_POLL_INTERVAL_MS);
+				pollTimers.current.timeout = window.setTimeout(() => {
+					stopPolling();
+					setLoadingProvider(null);
+				}, OPENAI_POLL_TIMEOUT_MS);
+				return;
+			}
+			const { authUrl, mode } = await oauthStartMutation.mutateAsync({ name: trimmed });
+			if (mode === "code") {
+				if (popup) popup.location.href = authUrl;
+				else window.open(authUrl, "_blank");
+				setCodeEntry(true);
+				setLoadingProvider(null);
+			} else {
+				popup?.close();
+				window.location.href = authUrl;
+			}
+		} catch (e) {
+			popup?.close();
+			console.error("OAuth start failed:", e);
+			setLoadingProvider(null);
+		}
+	};
+	/** @returns 교환 성공 여부. 실패 시 `completeMutation.isError` 로 안내 문구를 띄운다. */
+	const submitCode = async (pastedCode) => {
+		const trimmed = pastedCode.trim();
+		if (!trimmed) return false;
+		try {
+			await oauthCompleteMutation.mutateAsync({ pastedCode: trimmed });
+		} catch (e) {
+			console.error("OAuth complete failed:", e);
+			return false;
+		}
+		await invalidateTokens();
+		return true;
+	};
+	const reset = () => {
+		stopPolling();
+		setLoadingProvider(null);
+		setCodeEntry(false);
+		oauthCompleteMutation.reset();
+	};
+	return {
+		loadingProvider,
+		codeEntry,
+		start,
+		submitCode,
+		reset,
+		completeMutation: oauthCompleteMutation
+	};
+}
+//#endregion
+export { OAuthCodeEntry as n, useUpdateTokenMutation as r, useOAuthLoginFlow as t };

package/bundle/web-dist/server/entry-server.generated.js

@@ -22742,7 +22742,7 @@ function BottomNav() {
 }
 //#endregion
 //#region src/components/Sidebar.tsx
-var qgridVersion = "2.6.5";
+var qgridVersion = "2.6.6";
 function Sidebar({ className }) {
 	const pathname = useRouterState({ select: (s) => s.location.pathname });
 	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("aside", {
@@ -44623,7 +44623,7 @@ function RootComponent() {
 }
 //#endregion
 //#region src/routes/tokens.tsx
-var $$splitComponentImporter$4 = () => import("./assets/tokens-h-2A3wfD.js");
+var $$splitComponentImporter$4 = () => import("./assets/tokens-Dkd_uXEk.js");
 var Route$4 = createFileRoute("/tokens")({ component: lazyRouteComponent($$splitComponentImporter$4, "component") });
 //#endregion
 //#region src/routes/monit.tsx
@@ -44654,7 +44654,7 @@ var Route$2 = createFileRoute("/logs")({
 });
 //#endregion
 //#region src/routes/index.tsx
-var $$splitComponentImporter$1 = () => import("./assets/routes-Sv_4FjtH.js");
+var $$splitComponentImporter$1 = () => import("./assets/routes-BfoQmYud.js");
 var Route$1 = createFileRoute("/")({ component: lazyRouteComponent($$splitComponentImporter$1, "component") });
 //#endregion
 //#region src/routes/requests/show.tsx

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cartanova/qgrid-cli",
-  "version": "2.6.5",
+  "version": "2.6.6",
   "repository": {
     "type": "git",
     "url": "https://github.com/cartanova-ai/qgrid"

package/skills/qgrid/references/token-auth-quota-lifecycle.md

@@ -211,7 +211,8 @@ When a refresh fails in a way that only re-login can fix, qgrid removes the toke
 - The provider's last active token is never auto-deactivated. A systemic failure (client_id revocation, OAuth contract change) would otherwise empty the pool; qgrid logs an error, keeps the token, and sends its own Slack alert. That path leaves no state change behind, so every following request would re-alert — a per-provider 30-minute cooldown holds it to one. The cooldown is in-process, so N instances can each emit once per window.
 - The other notification is registration: every completed login sends one alert, whether the account is new or replacing an existing row through the account dedup. Manually toggling a token back to active is not a registration and sends nothing.
 - Notifications are fail-open: unset `SLACK_BOT_TOKEN`/`SLACK_CHANNEL_ID` is a silent no-op, and send failures (including HTTP 200 with `ok:false`) only warn. Payloads carry an internal reason code such as `anthropic:400`, never the raw provider response body.
-- A periodic digest (`expired-token-digest.ts`) re-announces tokens that are still inactive, because the one-shot death alert is lost on anyone not watching the channel at that moment and re-login only happens when a person does it. It runs every `SLACK_EXPIRY_DIGEST_INTERVAL_MINUTES` (unset or 0 disables) and sends nothing when no token is inactive — a periodic "all clear" trains people to ignore the channel. Owners come from `SLACK_USER_MAP` (`tokenName:SlackUserId`), which is explicit rather than resolved through `users.list`: Slack handles diverge from token names often enough (`haze`→`haze.lee`, `byeongjun`→`potados`) that auto-matching drops the mention silently, and a digest without the mention has no one to act on it. Shared accounts are left out of the map on purpose and appear by name only. Each instance sends its own digest — unlike deactivation there is no state change to gate on, and a few duplicates a day cost less than a locking scheme.
+- `expired-token-reminder.ts` repeats the session-expiry alert for tokens that are still inactive, because the one-shot alert is lost on anyone not watching the channel at that moment and re-login only happens when a person does it. It reuses the same `세션 만료` title rather than inventing a second name — there is one event, so a differently-named alert would read as a separate problem. It runs every `SLACK_EXPIRY_REMINDER_INTERVAL_MINUTES` (unset or 0 disables), batches every inactive token into one message, and sends nothing when none are inactive — a periodic "all clear" trains people to ignore the channel.
+- Owners are mentioned through `SLACK_USER_MAP` (`tokenName:SlackUserId`) on every token notification, not just the reminder. The map is explicit rather than resolved through `users.list`: Slack handles diverge from token names often enough (`haze`→`haze.lee`, `byeongjun`→`potados`) that auto-matching drops the mention silently, and an alert nobody is tagged in has no one to act on it. Shared accounts are left out of the map on purpose and appear by name only. Each instance sends its own reminder — unlike deactivation there is no state change to gate on, and a few duplicates a day cost less than a locking scheme.
 
 ## Quota Threshold Semantics
 

package/bundle/dist/application/qgrid/expired-token-digest.js

@@ -1,78 +0,0 @@
-import { SLACK_COLOR, notifySlack } from "../../utils/slack-notify.js";
-import { TokenModel } from "../token/token.model.js";
-import { getLogger } from "@logtape/logtape";
-//#region src/application/qgrid/expired-token-digest.ts
-/**
-* 비활성 토큰 주기 알림.
-*
-* 사망 순간의 단발 알림(`token-death.ts`)은 그 시점에 채널을 보지 않으면 놓친다. 재로그인은
-* 사람이 해야 하는 일이라 놓치면 토큰이 계속 빠진 채로 남는다. 그래서 남아 있는 비활성
-* 토큰을 주기적으로 다시 알리고, 소유자를 멘션해 개인에게 꽂는다.
-*
-* 비활성 토큰이 없으면 보내지 않는다 — "이상 없음"을 주기적으로 알리면 채널이 무뎌진다.
-*/
-const logger = getLogger(["qgrid", "expired-digest"]);
-const MINUTE_MS = 6e4;
-/**
-* `토큰명:SlackUserId` 목록. 공용 계정(bysuco, dev-common 등)은 넣지 않는다 — 매핑이 없으면
-* 멘션 없이 이름만 나가고, 그게 맞는 동작이다.
-*
-* Slack 표시 이름과 토큰명이 자주 어긋나(haze→haze.lee, byeongjun→potados) 자동 매칭은
-* 조용히 실패한다. 멘션이 빠지면 알림의 목적 자체가 사라지므로 명시 매핑만 쓴다.
-*/
-function parseUserMap(raw) {
-	const map = /* @__PURE__ */ new Map();
-	if (!raw) return map;
-	for (const entry of raw.split(",")) {
-		const [name, userId] = entry.split(":").map((s) => s.trim());
-		if (name && userId) map.set(name, userId);
-	}
-	return map;
-}
-/** `anthropic/yds` → `yds`. provider prefix 없이 저장된 이름도 그대로 받는다. */
-function ownerOf(tokenName) {
-	if (!tokenName) return "";
-	const slash = tokenName.indexOf("/");
-	return slash === -1 ? tokenName : tokenName.slice(slash + 1);
-}
-function buildDigestContext(tokens, userMap) {
-	return tokens.map((token) => {
-		const userId = userMap.get(ownerOf(token.name));
-		const label = token.name ?? "unnamed";
-		return userId ? `<@${userId}> ${token.provider}` : `${label} (${token.provider})`;
-	}).join("\n");
-}
-async function sendDigest(userMap) {
-	const inactive = await TokenModel.findInactive("A");
-	if (inactive.length === 0) return;
-	await notifySlack({
-		title: `재로그인 필요 ${inactive.length}건`,
-		context: buildDigestContext(inactive, userMap),
-		color: SLACK_COLOR.bad
-	});
-}
-let timer = null;
-/**
-* `SLACK_EXPIRY_DIGEST_INTERVAL_MINUTES` 가 양수일 때만 켜진다. 미설정·0 이면 비활성.
-*
-* 인스턴스가 여러 개면 각자 보낸다. 사망 알림과 달리 상태 변화가 없어 DB 로 억제할 수 없고,
-* 다이제스트는 하루 몇 건 수준이라 중복을 감수하는 편이 잠금 장치를 두는 것보다 낫다.
-*/
-function startExpiredTokenDigest() {
-	const minutes = Number(process.env.SLACK_EXPIRY_DIGEST_INTERVAL_MINUTES ?? 0);
-	if (!Number.isFinite(minutes) || minutes <= 0) return;
-	const userMap = parseUserMap(process.env.SLACK_USER_MAP);
-	logger.info(`expired token digest every ${minutes}m (${userMap.size} user mappings)`);
-	timer = setInterval(() => {
-		sendDigest(userMap).catch((e) => logger.warn(`digest failed: ${e.message}`));
-	}, minutes * MINUTE_MS);
-}
-function stopExpiredTokenDigest() {
-	if (!timer) return;
-	clearInterval(timer);
-	timer = null;
-}
-//#endregion
-export { buildDigestContext, startExpiredTokenDigest, stopExpiredTokenDigest };
-
-//# sourceMappingURL=data:application/json;charset=utf-8;base64,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

package/bundle/src/application/qgrid/expired-token-digest.test.ts

@@ -1,49 +0,0 @@
-import { describe, expect, it } from "vitest";
-
-import { buildDigestContext } from "./expired-token-digest";
-
-const userMap = new Map([
-  ["yds", "U09NAJUQSFQ"],
-  ["haze", "U09N96NHZB7"],
-]);
-
-describe("buildDigestContext", () => {
-  it("매핑된 토큰은 멘션으로 개인에게 꽂는다", () => {
-    const text = buildDigestContext([{ name: "anthropic/yds", provider: "anthropic" }], userMap);
-
-    expect(text).toBe("<@U09NAJUQSFQ> anthropic");
-  });
-
-  it("공용 계정처럼 매핑이 없으면 멘션 없이 이름만 남긴다", () => {
-    const text = buildDigestContext(
-      [{ name: "anthropic/dev-common", provider: "anthropic" }],
-      userMap,
-    );
-
-    expect(text).toBe("anthropic/dev-common (anthropic)");
-  });
-
-  it("같은 사람의 provider 별 토큰을 각각 줄로 나열한다", () => {
-    const text = buildDigestContext(
-      [
-        { name: "anthropic/yds", provider: "anthropic" },
-        { name: "openai/yds", provider: "openai" },
-      ],
-      userMap,
-    );
-
-    expect(text.split("\n")).toEqual(["<@U09NAJUQSFQ> anthropic", "<@U09NAJUQSFQ> openai"]);
-  });
-
-  it("provider prefix 없이 저장된 이름도 매핑한다", () => {
-    const text = buildDigestContext([{ name: "haze", provider: "anthropic" }], userMap);
-
-    expect(text).toBe("<@U09N96NHZB7> anthropic");
-  });
-
-  it("이름이 없는 토큰도 줄을 잃지 않는다", () => {
-    const text = buildDigestContext([{ name: null, provider: "openai" }], userMap);
-
-    expect(text).toBe("unnamed (openai)");
-  });
-});

package/bundle/src/application/qgrid/expired-token-digest.ts

@@ -1,93 +0,0 @@
-/**
- * 비활성 토큰 주기 알림.
- *
- * 사망 순간의 단발 알림(`token-death.ts`)은 그 시점에 채널을 보지 않으면 놓친다. 재로그인은
- * 사람이 해야 하는 일이라 놓치면 토큰이 계속 빠진 채로 남는다. 그래서 남아 있는 비활성
- * 토큰을 주기적으로 다시 알리고, 소유자를 멘션해 개인에게 꽂는다.
- *
- * 비활성 토큰이 없으면 보내지 않는다 — "이상 없음"을 주기적으로 알리면 채널이 무뎌진다.
- */
-import { getLogger } from "@logtape/logtape";
-
-import { notifySlack, SLACK_COLOR } from "../../utils/slack-notify";
-import { TokenModel } from "../token/token.model";
-
-const logger = getLogger(["qgrid", "expired-digest"]);
-
-const MINUTE_MS = 60_000;
-
-/**
- * `토큰명:SlackUserId` 목록. 공용 계정(bysuco, dev-common 등)은 넣지 않는다 — 매핑이 없으면
- * 멘션 없이 이름만 나가고, 그게 맞는 동작이다.
- *
- * Slack 표시 이름과 토큰명이 자주 어긋나(haze→haze.lee, byeongjun→potados) 자동 매칭은
- * 조용히 실패한다. 멘션이 빠지면 알림의 목적 자체가 사라지므로 명시 매핑만 쓴다.
- */
-function parseUserMap(raw: string | undefined): Map<string, string> {
-  const map = new Map<string, string>();
-  if (!raw) return map;
-
-  for (const entry of raw.split(",")) {
-    const [name, userId] = entry.split(":").map((s) => s.trim());
-    if (name && userId) map.set(name, userId);
-  }
-  return map;
-}
-
-/** `anthropic/yds` → `yds`. provider prefix 없이 저장된 이름도 그대로 받는다. */
-function ownerOf(tokenName: string | null): string {
-  if (!tokenName) return "";
-  const slash = tokenName.indexOf("/");
-  return slash === -1 ? tokenName : tokenName.slice(slash + 1);
-}
-
-export function buildDigestContext(
-  tokens: { name: string | null; provider: string }[],
-  userMap: Map<string, string>,
-): string {
-  return tokens
-    .map((token) => {
-      const userId = userMap.get(ownerOf(token.name));
-      const label = token.name ?? "unnamed";
-      // 멘션이 있으면 이름 대신 멘션을 쓴다 — 둘 다 쓰면 같은 말이 두 번 나온다.
-      return userId ? `<@${userId}> ${token.provider}` : `${label} (${token.provider})`;
-    })
-    .join("\n");
-}
-
-async function sendDigest(userMap: Map<string, string>): Promise<void> {
-  const inactive = await TokenModel.findInactive("A");
-  if (inactive.length === 0) return;
-
-  await notifySlack({
-    title: `재로그인 필요 ${inactive.length}건`,
-    context: buildDigestContext(inactive, userMap),
-    color: SLACK_COLOR.bad,
-  });
-}
-
-let timer: ReturnType<typeof setInterval> | null = null;
-
-/**
- * `SLACK_EXPIRY_DIGEST_INTERVAL_MINUTES` 가 양수일 때만 켜진다. 미설정·0 이면 비활성.
- *
- * 인스턴스가 여러 개면 각자 보낸다. 사망 알림과 달리 상태 변화가 없어 DB 로 억제할 수 없고,
- * 다이제스트는 하루 몇 건 수준이라 중복을 감수하는 편이 잠금 장치를 두는 것보다 낫다.
- */
-export function startExpiredTokenDigest(): void {
-  const minutes = Number(process.env.SLACK_EXPIRY_DIGEST_INTERVAL_MINUTES ?? 0);
-  if (!Number.isFinite(minutes) || minutes <= 0) return;
-
-  const userMap = parseUserMap(process.env.SLACK_USER_MAP);
-  logger.info(`expired token digest every ${minutes}m (${userMap.size} user mappings)`);
-
-  timer = setInterval(() => {
-    sendDigest(userMap).catch((e) => logger.warn(`digest failed: ${(e as Error).message}`));
-  }, minutes * MINUTE_MS);
-}
-
-export function stopExpiredTokenDigest(): void {
-  if (!timer) return;
-  clearInterval(timer);
-  timer = null;
-}