memi-board 0.4.5 → 0.4.12

package/dist/index.js

@@ -1,14 +1,14 @@
 import { computed as e, reactive as t, ref as n, watch as r } from "vue";
 import { useCollection as i, useCurrentUser as a, useDocument as o, useFirebaseApp as s, useFirebaseAuth as c, useFirestore as l } from "vuefire";
-import { collection as u, deleteDoc as d, deleteField as f, doc as p, getDoc as m, getDocs as h, increment as g, limit as _, orderBy as v, query as y, serverTimestamp as b, setDoc as x, startAfter as S, updateDoc as C, where as w, writeBatch as T } from "firebase/firestore";
-import { GoogleAuthProvider as E, OAuthProvider as D, createUserWithEmailAndPassword as O, signInWithEmailAndPassword as k, signInWithPopup as A, signOut as j, updateProfile as ee } from "firebase/auth";
-import { deleteObject as M, getDownloadURL as N, getStorage as P, listAll as te, ref as F, uploadBytesResumable as ne } from "firebase/storage";
-import { GoogleAIBackend as I, Schema as L, getAI as R, getGenerativeModel as re } from "firebase/ai";
+import { collection as u, deleteDoc as d, deleteField as f, doc as p, getDoc as m, getDocs as h, increment as g, limit as _, orderBy as v, query as y, serverTimestamp as b, setDoc as x, startAfter as S, updateDoc as C, where as ee, writeBatch as w } from "firebase/firestore";
+import { GoogleAuthProvider as T, OAuthProvider as te, createUserWithEmailAndPassword as ne, signInWithEmailAndPassword as re, signInWithPopup as E, signOut as ie, updateProfile as ae } from "firebase/auth";
+import { deleteObject as D, getDownloadURL as O, getStorage as k, listAll as A, ref as j, uploadBytes as M, uploadBytesResumable as oe } from "firebase/storage";
+import { GoogleAIBackend as N, Schema as P, getAI as F, getGenerativeModel as I } from "firebase/ai";
 //#region src/config.ts
-var z = "__MEMI_BOARD_CONFIG__";
-function B() {
+var L = "__MEMI_BOARD_CONFIG__";
+function R() {
 	let e = globalThis;
-	return e[z] || (e[z] = t({
+	return e[L] || (e[L] = t({
 		collectionPrefix: "memiBoard",
 		auth: { providers: ["google", "apple"] },
 		moderation: {
@@ -16,113 +16,241 @@ function B() {
 			model: "gemini-3.5-flash-lite",
 			onError: "allow",
 			moderateImages: !1,
-			localBlocklist: []
+			localBlocklist: [],
+			blockBanThreshold: 3,
+			blockBanDecayMs: 864e5
 		}
-	})), e[z];
+	})), e[L];
 }
-function ie(e) {
-	let t = B();
+function z(e) {
+	let t = R();
 	e.collectionPrefix && (t.collectionPrefix = e.collectionPrefix), e.auth && Object.assign(t.auth, e.auth), e.moderation && Object.assign(t.moderation, e.moderation);
 }
-function V() {
-	return B();
+function B() {
+	return R();
+}
+//#endregion
+//#region src/utils/moderation-strike.ts
+var se = 3, V = 864e5;
+function H(e, t, n = Date.now(), r = V) {
+	let i = Math.max(0, Math.floor(Number(e) || 0));
+	if (i <= 0) return 0;
+	let a = typeof t == "number" && Number.isFinite(t) ? t : null;
+	if (a == null || n <= a) return i;
+	let o = Math.floor((n - a) / r);
+	return Math.max(0, i - o);
+}
+function U(e, t, n = Date.now(), r = 3, i = V) {
+	let a = Math.max(0, Math.floor(Number(e) || 0));
+	if (a < r) return null;
+	let o = typeof t == "number" && Number.isFinite(t) ? t : null;
+	if (o == null) return n;
+	let s = o + (a - (r - 1)) * i;
+	return s > n ? s : null;
+}
+function W(e, t, n = Date.now(), r = 3, i = V) {
+	return U(e, t, n, r, i) != null;
+}
+function G(e, t = Date.now()) {
+	let n = Math.max(0, e - t), r = Math.ceil(n / 36e5);
+	if (r <= 0) return "곧 해제";
+	if (r < 24) return `약 ${r}시간 후 해제`;
+	let i = Math.floor(r / 24), a = r % 24;
+	return a === 0 ? `약 ${i}일 후 해제` : `약 ${i}일 ${a}시간 후 해제`;
+}
+function ce(e) {
+	if (e == null) return null;
+	if (typeof e == "number" && Number.isFinite(e)) return e;
+	if (typeof e == "object" && e && "toMillis" in e && typeof e.toMillis == "function") return e.toMillis();
+	if (typeof e == "object" && e && "seconds" in e) {
+		let t = Number(e.seconds);
+		if (Number.isFinite(t)) return t * 1e3;
+	}
+	return null;
 }
 //#endregion
 //#region src/composables/useMemiBoardAuth.ts
-function H() {
-	let t = V(), i = l(), o = c(), s = a(), u = n("user"), d = n(!0);
-	function f(e) {
+var K = "__MEMI_BOARD_AUTH_STATE__";
+function le() {
+	let e = globalThis;
+	return e[K] || (e[K] = {
+		role: n("user"),
+		rolePending: n(!0),
+		rawBlockCount: n(0),
+		blockAtMs: n(null),
+		watchStarted: !1
+	}), e[K];
+}
+function q() {
+	let t = B(), n = le(), i = l(), o = c(), s = a(), { role: u, rolePending: d, rawBlockCount: f, blockAtMs: h } = n;
+	function _() {
+		let e = t.moderation?.blockBanThreshold;
+		return e === 0 ? 0 : typeof e == "number" && e > 0 ? Math.floor(e) : 3;
+	}
+	function v() {
+		let e = t.moderation?.blockBanDecayMs;
+		return typeof e == "number" && e > 0 ? e : V;
+	}
+	function y(e) {
 		return p(i, `${t.collectionPrefix}Users`, e);
 	}
-	async function h(e) {
-		let t = f(e.uid), n = await m(t);
-		return n.exists() ? (await C(t, {
+	function S(e) {
+		if (!e) {
+			f.value = 0, h.value = null;
+			return;
+		}
+		f.value = Math.max(0, Math.floor(Number(e.moderationBlockCount) || 0)), h.value = ce(e.moderationBlockAt);
+	}
+	async function ee(e) {
+		let t = y(e.uid), n = await m(t);
+		if (!n.exists()) return await x(t, {
+			role: "user",
 			displayName: e.displayName,
 			updatedAt: b()
-		}), n.data().role ?? "user") : (await x(t, {
-			role: "user",
+		}), S({ moderationBlockCount: 0 }), "user";
+		let r = n.data();
+		return S(r), await C(t, {
 			displayName: e.displayName,
 			updatedAt: b()
-		}), "user");
+		}), r.role ?? "user";
+	}
+	async function w() {
+		let e = s.value?.uid;
+		if (!e) {
+			S(void 0);
+			return;
+		}
+		let t = await m(y(e));
+		S(t.exists() ? t.data() : void 0);
 	}
-	r(s, async (e) => {
+	n.watchStarted || (n.watchStarted = !0, r(s, async (e) => {
 		if (d.value = !0, !e) {
-			u.value = "user", d.value = !1;
+			u.value = "user", S(void 0), d.value = !1;
 			return;
 		}
 		try {
-			u.value = await h(e);
+			u.value = await ee(e);
 		} catch {
 			u.value = "user";
 		} finally {
 			d.value = !1;
 		}
-	}, { immediate: !0 });
-	let g = e(() => !!s.value), _ = e(() => u.value === "admin");
-	function v() {
+	}, { immediate: !0 }));
+	let D = e(() => !!s.value), O = e(() => u.value === "admin"), k = e(() => H(f.value, h.value, Date.now(), v())), A = e(() => {
+		let e = _();
+		return e <= 0 ? !1 : W(f.value, h.value, Date.now(), e, v());
+	}), j = e(() => {
+		let e = _();
+		if (e <= 0) return null;
+		let t = U(f.value, h.value, Date.now(), e, v());
+		return t == null ? null : G(t);
+	}), M = e(() => {
+		if (!A.value) return null;
+		let e = j.value;
+		return e ? `콘텐츠 경고가 누적되어 글·댓글 작성이 잠시 제한됐어요. (${e})` : "콘텐츠 경고가 누적되어 글·댓글 작성이 잠시 제한됐어요.";
+	});
+	async function oe() {
+		let e = s.value?.uid, t = _();
+		if (!e || t <= 0) return {
+			effectiveCount: 0,
+			restricted: !1,
+			messageSuffix: ""
+		};
+		let n = y(e), r = await m(n);
+		r.exists() ? await C(n, {
+			moderationBlockCount: g(1),
+			moderationBlockAt: b(),
+			updatedAt: b()
+		}) : await x(n, {
+			role: "user",
+			displayName: s.value?.displayName ?? null,
+			moderationBlockCount: 1,
+			moderationBlockAt: b(),
+			updatedAt: b()
+		});
+		let i = (r.exists() ? Math.max(0, Math.floor(Number(r.data().moderationBlockCount) || 0)) : 0) + 1, a = Date.now();
+		f.value = i, h.value = a;
+		let o = H(i, a, a, v()), c = W(i, a, a, t, v()), l = ` (경고 ${o}/${t})`;
+		if (c) {
+			let e = U(i, a, a, t, v()), n = e == null ? null : G(e, a);
+			l = n ? ` 경고 ${o}회가 되어 글·댓글 작성이 제한됩니다 (${n}).` : ` 경고 ${o}회가 되어 글·댓글 작성이 제한됩니다.`;
+		}
+		return {
+			effectiveCount: o,
+			restricted: c,
+			messageSuffix: l
+		};
+	}
+	function N() {
 		if (!o) throw Error("[memi-board] Firebase Auth가 초기화되지 않았습니다.");
 		return o;
 	}
-	async function y() {
-		return A(v(), new E());
+	async function P() {
+		return E(N(), new T());
 	}
-	async function S() {
-		let e = new D("apple.com");
-		return e.addScope("email"), e.addScope("name"), A(v(), e);
+	async function F() {
+		let e = new te("apple.com");
+		return e.addScope("email"), e.addScope("name"), E(N(), e);
 	}
-	async function w(e, t) {
-		return k(v(), e, t);
+	async function I(e, t) {
+		return re(N(), e, t);
 	}
-	async function T(e, t, n) {
-		let r = await O(v(), e, t);
-		return n && await ee(r.user, { displayName: n }), r;
+	async function L(e, t, n) {
+		let r = await ne(N(), e, t);
+		return n && await ae(r.user, { displayName: n }), r;
 	}
-	async function M() {
-		await j(v());
+	async function R() {
+		await ie(N());
 	}
-	function N(e) {
-		return g.value && (s.value?.uid === e.authorUid || _.value);
+	function z(e) {
+		return D.value && (s.value?.uid === e.authorUid || O.value);
 	}
-	function P(e) {
-		return g.value && (s.value?.uid === e.authorUid || _.value);
+	function se(e) {
+		return D.value && (s.value?.uid === e.authorUid || O.value);
 	}
 	return {
 		user: s,
-		isSignedIn: g,
-		isAdmin: _,
+		isSignedIn: D,
+		isAdmin: O,
 		rolePending: d,
-		signInWithGoogle: y,
-		signInWithApple: S,
-		signInWithEmail: w,
-		signUpWithEmail: T,
-		signOut: M,
-		canEdit: N,
-		canDelete: N,
-		canDeleteComment: P
+		moderationBlockCount: k,
+		isWriteRestricted: A,
+		restrictedUntilLabel: j,
+		restrictedMessage: M,
+		signInWithGoogle: P,
+		signInWithApple: F,
+		signInWithEmail: I,
+		signUpWithEmail: L,
+		signOut: R,
+		canEdit: z,
+		canDelete: z,
+		canDeleteComment: se,
+		recordContentModerationBlock: oe,
+		refreshBoardUser: w
 	};
 }
 //#endregion
 //#region src/utils/slugify.ts
-function U(e) {
+function J(e) {
 	return e.trim().replace(/\s+/g, "-").replace(/[^a-zA-Z0-9가-힣ㄱ-ㅎㅏ-ㅣ-]/g, "").replace(/-+/g, "-").replace(/^-+|-+$/g, "");
 }
-function W(e, t = 60) {
+function ue(e, t = 60) {
 	return e.replace(/[^a-zA-Z0-9가-힣ㄱ-ㅎ._-]/g, "-").slice(0, t);
 }
 //#endregion
 //#region src/composables/useMemiBoardPosts.ts
-async function G(e) {
-	let t = await te(e).catch(() => ({
+async function de(e) {
+	let t = await A(e).catch(() => ({
 		items: [],
 		prefixes: []
 	}));
-	await Promise.all([...t.items.map((e) => M(e)), ...t.prefixes.map((e) => G(e))]);
+	await Promise.all([...t.items.map((e) => D(e)), ...t.prefixes.map((e) => de(e))]);
 }
-function K() {
-	let e = V(), t = l(), n = s(), r = () => e.collectionPrefix, i = () => u(t, `${r()}Posts`), a = (e) => p(t, `${r()}Posts`, e), o = (e) => p(t, `${r()}Posts`, e, "body", "main"), c = (e) => u(t, `${r()}Posts`, e, "comments");
+function fe() {
+	let e = B(), t = l(), n = s(), r = () => e.collectionPrefix, i = () => u(t, `${r()}Posts`), a = (e) => p(t, `${r()}Posts`, e), o = (e) => p(t, `${r()}Posts`, e, "body", "main"), c = (e) => u(t, `${r()}Posts`, e, "comments");
 	async function g(e = {}) {
 		let t = e.pageSize ?? 20, n = [];
-		e.category && n.push(w("category", "==", e.category)), n.push(v("createdAt", "desc")), e.cursor && n.push(S(e.cursor)), n.push(_(t + 1));
+		e.category && n.push(ee("category", "==", e.category)), n.push(v("createdAt", "desc")), e.cursor && n.push(S(e.cursor)), n.push(_(t + 1));
 		let r = await h(y(i(), ...n)), a = r.docs.slice(0, t);
 		return {
 			posts: a.map((e) => ({
@@ -133,7 +261,7 @@ function K() {
 			hasMore: r.docs.length > t
 		};
 	}
-	async function E(e) {
+	async function T(e) {
 		let [t, n] = await Promise.all([m(a(e)), m(o(e))]);
 		return t.exists() ? {
 			id: t.id,
@@ -141,8 +269,8 @@ function K() {
 			content: n.exists() ? n.data().content ?? "" : ""
 		} : null;
 	}
-	async function D(e) {
-		let t = U(e.title) || "post", n = t, r = 1;
+	async function te(e) {
+		let t = J(e.title) || "post", n = t, r = 1;
 		for (; (await m(a(n))).exists();) r++, n = `${t}-${r}`;
 		return await Promise.all([x(a(n), {
 			title: e.title,
@@ -159,7 +287,7 @@ function K() {
 			updatedAt: b()
 		}), x(o(n), { content: e.content })]), n;
 	}
-	async function O(e, t) {
+	async function ne(e, t) {
 		await Promise.all([C(a(e), {
 			title: t.title,
 			tags: t.tags ?? [],
@@ -168,29 +296,29 @@ function K() {
 			updatedAt: b()
 		}), x(o(e), { content: t.content }, { merge: !0 })]);
 	}
-	async function k(e) {
+	async function re(e) {
 		let i = await h(c(e));
 		for (let e = 0; e < i.docs.length; e += 450) {
-			let n = T(t);
+			let n = w(t);
 			i.docs.slice(e, e + 450).forEach((e) => n.delete(e.ref)), await n.commit();
 		}
-		let s = P(n);
-		await d(o(e)), await G(F(s, `${r()}/posts/${e}`)), await d(a(e));
+		let s = k(n);
+		await d(o(e)), await de(j(s, `${r()}/posts/${e}`)), await d(a(e));
 	}
 	return {
 		getPosts: g,
-		getPost: E,
-		createPost: D,
-		updatePost: O,
-		deletePost: k
+		getPost: T,
+		createPost: te,
+		updatePost: ne,
+		deletePost: re
 	};
 }
 //#endregion
 //#region src/composables/useMemiBoardComments.ts
-function q(t) {
-	let n = V(), r = l(), a = () => n.collectionPrefix, o = e(() => typeof t == "string" ? t : t.value), s = e(() => y(u(r, `${a()}Posts`, o.value, "comments"), v("createdAt", "asc"))), c = i(s);
+function pe(t) {
+	let n = B(), r = l(), a = () => n.collectionPrefix, o = e(() => typeof t == "string" ? t : t.value), s = e(() => y(u(r, `${a()}Posts`, o.value, "comments"), v("createdAt", "asc"))), c = i(s);
 	async function d(e) {
-		let t = T(r), n = a(), i = p(u(r, `${n}Posts`, o.value, "comments"));
+		let t = w(r), n = a(), i = p(u(r, `${n}Posts`, o.value, "comments"));
 		t.set(i, {
 			postId: o.value,
 			body: e.body,
@@ -202,7 +330,7 @@ function q(t) {
 		}), t.update(p(r, `${n}Posts`, o.value), { commentCount: g(1) }), await t.commit();
 	}
 	async function f(e) {
-		let t = T(r), n = a();
+		let t = w(r), n = a();
 		t.delete(p(r, `${n}Posts`, o.value, "comments", e)), t.update(p(r, `${n}Posts`, o.value), { commentCount: g(-1) }), await t.commit();
 	}
 	return {
@@ -213,7 +341,25 @@ function q(t) {
 }
 //#endregion
 //#region src/utils/moderation-prompt.ts
-var J = "당신은 게시판 콘텐츠를 심사하는 엄격한 모더레이터입니다.\n아래 텍스트에 욕설·비속어·성희롱·혐오·위협·스팸·도배성 광고가 있으면 반드시 거부(flagged=true)합니다.\n\nflagged=true 예:\n- 욕설/비속어: 씨발, 시발, 병신, 지랄, 좆, 개새끼, 존나, fuck, shit, bitch 등\n- 성적 모욕, 혐오 발언, 협박\n- 게시판 주제와 무관한 도배성 광고/스팸\n\nflagged=false:\n- 게시판 주제에 맞는 정상적인 글/댓글 (강한 의견이나 정당한 비판은 허용)\n\nJSON만 출력:\n{\"flagged\":boolean,\"category\":\"none\"|\"abuse\"|\"spam\"|\"adult\"|\"violence\"|\"other\",\"reason\":string}\n- flagged=true면 category는 상황에 맞게 고르고, reason은 한국어 1문장 (예: \"욕설이 포함되어 있어 게시할 수 없습니다.\")\n- flagged=false면 category는 \"none\", reason은 \"\"", ae = [
+var me = "당신은 게시판 콘텐츠를 심사하는 엄격한 모더레이터입니다.\n아래 텍스트에 욕설·비속어·성희롱·혐오·위협·스팸·도배성 광고가 있으면 반드시 거부(flagged=true)합니다.\n\nflagged=true 예:\n- 욕설/비속어: 씨발, 시발, 병신, 지랄, 좆, 개새끼, 존나, fuck, shit, bitch 등\n- 성적 모욕, 혐오 발언, 협박\n- 게시판 주제와 무관한 도배성 광고/스팸\n\nflagged=false:\n- 게시판 주제에 맞는 정상적인 글/댓글 (강한 의견이나 정당한 비판은 허용)\n\nJSON만 출력:\n{\"flagged\":boolean,\"category\":\"none\"|\"abuse\"|\"spam\"|\"adult\"|\"violence\"|\"other\",\"reason\":string}\n- flagged=true면 category를 고르고, reason은 한국어로 **무엇이 문제인지** 구체적으로 1문장\n  (예: \"욕설(비속어)이 포함되어 게시할 수 없습니다.\", \"광고·스팸성 문구가 있어 게시할 수 없습니다.\")\n  욕설 단어 전체를 그대로 길게 인용하지 말고, 유형(욕설/혐오/스팸 등)을 분명히 밝힌다.\n- flagged=false면 category는 \"none\", reason은 \"\"", he = {
+	abuse: "욕설·비속어·모욕",
+	spam: "스팸·광고",
+	adult: "선정적·성인 내용",
+	violence: "폭력·위협",
+	other: "부적절한 내용",
+	none: ""
+};
+function Y(e) {
+	if (e.via === "local" && e.localHit) {
+		let t = e.localHit.trim();
+		return t.length > 0 && t.length <= 12 ? `「${t}」 같은 표현은 사용할 수 없습니다. 다른 말로 바꿔 주세요.` : "욕설·비속어가 포함되어 게시할 수 없습니다. 표현을 바꿔 주세요.";
+	}
+	let t = (e.reason || "").trim();
+	if (t) return t;
+	let n = e.category && e.category !== "none" ? he[e.category] || e.category : "";
+	return n ? `${n}이(가) 포함되어 게시할 수 없습니다. 내용을 수정해 주세요.` : "게시할 수 없는 내용이 포함되어 있습니다. 내용을 수정해 주세요.";
+}
+var ge = [
 	"씨발",
 	"시발",
 	"시이발",
@@ -239,10 +385,10 @@ var J = "당신은 게시판 콘텐츠를 심사하는 엄격한 모더레이터
 	"bitch",
 	"asshole"
 ];
-function oe(e) {
+function _e(e) {
 	return new RegExp(e.join("|"), "i");
 }
-var se = /* @__PURE__ */ new Set([
+var ve = /* @__PURE__ */ new Set([
 	"none",
 	"abuse",
 	"spam",
@@ -250,7 +396,7 @@ var se = /* @__PURE__ */ new Set([
 	"violence",
 	"other"
 ]);
-function Y(e) {
+function ye(e) {
 	let t = e.trim();
 	if (!t) return null;
 	let n;
@@ -268,7 +414,7 @@ function Y(e) {
 	if (typeof n != "object" || !n) return null;
 	let r = n;
 	if (typeof r.flagged != "boolean") return null;
-	let i = typeof r.category == "string" && se.has(r.category) ? r.category : r.flagged ? "other" : "none", a = typeof r.reason == "string" ? r.reason : "";
+	let i = typeof r.category == "string" && ve.has(r.category) ? r.category : r.flagged ? "other" : "none", a = typeof r.reason == "string" ? r.reason : "";
 	return {
 		flagged: r.flagged,
 		category: i,
@@ -283,48 +429,46 @@ var X = {
 	reason: "",
 	via: "empty"
 };
-function Z(e, t) {
-	console.info(`[memi-board:moderation] ${e}`, t);
-}
-function Q() {
-	let e = V().moderation ?? {}, t = s(), n = oe([...ae, ...e.localBlocklist ?? []]);
-	function r(e) {
-		return e.match(n) ? {
+function be() {
+	let e = B().moderation ?? {}, t = s(), { isWriteRestricted: n, restrictedMessage: r, recordContentModerationBlock: i } = q(), a = _e([...ge, ...e.localBlocklist ?? []]);
+	function o(e) {
+		let t = e.match(a);
+		return t ? {
 			flagged: !0,
 			category: "abuse",
-			reason: "욕설·비속어가 포함되어 게시할 수 없습니다. 표현을 바꿔 주세요.",
+			reason: Y({
+				via: "local",
+				localHit: t[0] || "",
+				category: "abuse"
+			}),
 			via: "local"
 		} : null;
 	}
-	function i() {
-		let n = e.model ?? "gemini-3.5-flash-lite", r = e.useLimitedUseAppCheckTokens !== !1, i = R(t, {
-			backend: new I(),
+	function c() {
+		let n = e.model ?? "gemini-3.5-flash-lite", r = e.useLimitedUseAppCheckTokens !== !1, i = F(t, {
+			backend: new N(),
 			useLimitedUseAppCheckTokens: r
 		});
-		return {
-			modelName: n,
-			useLimited: r,
-			model: re(i, {
-				model: n,
-				systemInstruction: J,
-				generationConfig: {
-					temperature: 0,
-					maxOutputTokens: 256,
-					responseMimeType: "application/json",
-					responseSchema: L.object({ properties: {
-						flagged: L.boolean(),
-						category: L.string(),
-						reason: L.string()
-					} })
-				}
-			})
-		};
+		return I(i, {
+			model: n,
+			systemInstruction: me,
+			generationConfig: {
+				temperature: 0,
+				maxOutputTokens: 256,
+				responseMimeType: "application/json",
+				responseSchema: P.object({ properties: {
+					flagged: P.boolean(),
+					category: P.string(),
+					reason: P.string()
+				} })
+			}
+		});
 	}
-	function a() {
+	function l() {
 		return e.onError === "block" ? {
 			flagged: !0,
 			category: "other",
-			reason: "AI 검열에 실패해 글을 등록할 수 없습니다. (App Check/네트워크 확인) 잠시 후 다시 시도해 주세요.",
+			reason: "내용 검토에 실패해 글을 등록할 수 없습니다. 잠시 후 다시 시도해 주세요.",
 			error: !0,
 			via: "ai-error-block"
 		} : {
@@ -335,76 +479,69 @@ function Q() {
 			via: "ai-error-allow"
 		};
 	}
-	async function o(t) {
-		let o = t.trim();
-		if (Z("start", {
-			preview: o.slice(0, 80),
-			length: o.length,
-			enabled: e.enabled !== !1,
-			model: e.model ?? "gemini-3.5-flash-lite",
-			onError: e.onError ?? "allow"
-		}), !o) {
-			let e = {
-				...X,
-				via: "empty"
-			};
-			return Z("result", e), e;
-		}
-		let s = r(o);
-		if (s) {
-			let e = o.match(n)?.[0];
-			return Z("local-block", {
-				hit: e,
-				...s
-			}), Z("result", s), s;
-		}
-		if (Z("local-pass", { message: "로컬 금칙어 미매칭 → AI Logic 호출" }), e.enabled === !1) {
-			let e = {
-				...X,
-				via: "disabled"
-			};
-			return Z("result", e), e;
+	function u(e, t = "") {
+		let n = Y({
+			reason: e.reason,
+			category: e.category,
+			via: e.via
+		}), r = t ? `${n}${t}` : n;
+		return {
+			...e,
+			reason: r
+		};
+	}
+	async function d(e) {
+		if (!e.flagged || e.error || e.via !== "local" && e.via !== "ai") return e;
+		try {
+			let { messageSuffix: t } = await i();
+			return u(e, t);
+		} catch (t) {
+			return console.warn("[memi-board] record moderation strike failed", t instanceof Error ? t.message : t), u(e);
 		}
+	}
+	async function f(t) {
+		if (n.value) return {
+			flagged: !0,
+			category: "other",
+			reason: r.value || "콘텐츠 경고가 누적되어 글·댓글 작성이 잠시 제한됐어요.",
+			via: "restricted"
+		};
+		let i = t.trim();
+		if (!i) return {
+			...X,
+			via: "empty"
+		};
+		let a = o(i);
+		if (a) return d(a);
+		if (e.enabled === !1) return {
+			...X,
+			via: "disabled"
+		};
 		try {
-			let { model: e, modelName: t, useLimited: n } = i();
-			Z("ai-call", {
-				modelName: t,
-				useLimitedUseAppCheckTokens: n
-			});
-			let r = performance.now(), s = await e.generateContent(`심사할 텍스트:\n"""${o.slice(0, 4e3)}"""`), c = Math.round(performance.now() - r), l = s.response.text();
-			Z("ai-raw", {
-				ms: c,
-				raw: l.slice(0, 500)
-			});
-			let u = Y(l);
-			if (!u) {
-				Z("ai-parse-fail", { raw: l.slice(0, 300) });
-				let e = a();
-				return Z("result", e), e;
-			}
-			let d = {
-				flagged: u.flagged,
-				category: u.category,
-				reason: u.reason,
+			let e = ye((await c().generateContent(`심사할 텍스트:\n"""${i.slice(0, 4e3)}"""`)).response.text());
+			if (!e) return l();
+			let t = {
+				flagged: e.flagged,
+				category: e.category,
+				reason: Y({
+					reason: e.reason,
+					category: e.category,
+					via: "ai"
+				}),
 				via: "ai"
 			};
-			return Z("result", {
-				...d,
-				ms: c
-			}), d;
+			return t.flagged ? d(t) : t;
 		} catch (e) {
-			let t = e;
-			Z("ai-error", {
-				message: e instanceof Error ? e.message : String(e),
-				name: e instanceof Error ? e.name : void 0,
-				code: t?.code,
-				cause: t?.cause instanceof Error ? t.cause.message : t?.cause
-			});
-			let n = a();
-			return Z("result", n), n;
+			return console.warn("[memi-board] moderation AI failed", e instanceof Error ? e.message : e), l();
 		}
 	}
-	async function c(t) {
+	async function p(t) {
+		if (n.value) return {
+			flagged: !0,
+			category: "other",
+			reason: r.value || "콘텐츠 경고가 누적되어 글·댓글 작성이 잠시 제한됐어요.",
+			via: "restricted"
+		};
 		if (e.enabled === !1 || !e.moderateImages) return {
 			...X,
 			via: "disabled"
@@ -413,39 +550,58 @@ function Q() {
 			let e = await new Promise((e, n) => {
 				let r = new FileReader();
 				r.onload = () => e(r.result.split(",")[1] ?? ""), r.onerror = n, r.readAsDataURL(t);
-			}), { model: n, modelName: r } = i();
-			Z("ai-image-call", {
-				modelName: r,
-				type: t.type,
-				size: t.size
-			});
-			let o = (await n.generateContent([{ inlineData: {
+			}), n = ye((await c().generateContent([{ inlineData: {
 				mimeType: t.type || "image/jpeg",
 				data: e
-			} }, "이 이미지를 심사해 주세요."])).response.text(), s = Y(o);
-			if (!s) return Z("ai-image-parse-fail", { raw: o.slice(0, 300) }), a();
-			let c = {
-				flagged: s.flagged,
-				category: s.category,
-				reason: s.reason,
+			} }, "이 이미지를 심사해 주세요."])).response.text());
+			if (!n) return l();
+			let r = {
+				flagged: n.flagged,
+				category: n.category,
+				reason: Y({
+					reason: n.reason,
+					category: n.category,
+					via: "ai"
+				}),
 				via: "ai"
 			};
-			return Z("ai-image-result", c), c;
+			return r.flagged ? d(r) : r;
 		} catch (e) {
-			return Z("ai-image-error", { message: e instanceof Error ? e.message : String(e) }), a();
+			return console.warn("[memi-board] moderation AI image failed", e instanceof Error ? e.message : e), l();
 		}
 	}
 	return {
-		checkText: o,
-		checkImage: c
+		checkText: f,
+		checkImage: p
 	};
 }
 //#endregion
+//#region src/utils/compressImage.ts
+async function xe(e, { maxWidth: t = 400, quality: n = .8 } = {}) {
+	return new Promise((r, i) => {
+		let a = new Image(), o = URL.createObjectURL(e);
+		a.onload = () => {
+			URL.revokeObjectURL(o);
+			let e = Math.min(1, t / a.naturalWidth), s = document.createElement("canvas");
+			s.width = Math.round(a.naturalWidth * e), s.height = Math.round(a.naturalHeight * e);
+			let c = s.getContext("2d");
+			if (!c) {
+				i(/* @__PURE__ */ Error("Canvas를 사용할 수 없습니다"));
+				return;
+			}
+			c.drawImage(a, 0, 0, s.width, s.height), s.toBlob((e) => e ? r(e) : i(/* @__PURE__ */ Error("압축 실패")), "image/jpeg", n);
+		}, a.onerror = () => {
+			URL.revokeObjectURL(o), i(/* @__PURE__ */ Error("이미지 로드 실패"));
+		}, a.src = o;
+	});
+}
+//#endregion
 //#region src/composables/useMemiBoardStorage.ts
-function ce() {
-	let e = V(), t = s(), n = () => e.collectionPrefix;
+var Se = 5242880;
+function Ce() {
+	let e = B(), t = s(), n = () => e.collectionPrefix;
 	function r(e, r, i) {
-		let a = P(t), o = `${n()}/posts/${r}/attachments/${Date.now()}-${W(e.name)}`, s = F(a, o), c = ne(s, e, {
+		let a = k(t), o = `${n()}/posts/${r}/attachments/${Date.now()}-${ue(e.name)}`, s = j(a, o), c = oe(s, e, {
 			contentType: e.type || "application/octet-stream",
 			contentDisposition: `attachment; filename*=UTF-8''${encodeURIComponent(e.name)}`
 		});
@@ -454,7 +610,7 @@ function ce() {
 				c.on("state_changed", (e) => {
 					i && e.totalBytes > 0 && i(e.bytesTransferred / e.totalBytes);
 				}, n, async () => {
-					let n = await N(s);
+					let n = await O(s);
 					t({
 						name: e.name,
 						url: n,
@@ -468,17 +624,39 @@ function ce() {
 		};
 	}
 	async function i(e) {
-		let n = P(t);
-		await M(F(n, e.path)).catch(() => {});
+		let n = k(t);
+		await D(j(n, e.path)).catch(() => {});
+	}
+	async function a(e, r) {
+		if (!e.type.startsWith("image/")) throw Error("이미지 파일만 업로드할 수 있습니다.");
+		if (e.size > 5242880) throw Error(`이미지는 ${Se / 1024 / 1024}MB 이하여야 합니다.`);
+		let i = k(t), a = (e.name.split(".").pop() || e.type.split("/")[1] || "png").replace(/[^a-zA-Z0-9]/g, "").slice(0, 8) || "png", o = ue(e.name.replace(/\.[^.]+$/, "") || "image", 40), s = `${Date.now()}-${o || "image"}`, c = r || `new-${Date.now()}`, l = `${n()}/posts/${c}/images/${s}.${a}`, u = j(i, l);
+		await M(u, e, { contentType: e.type || "image/png" });
+		let d = await O(u), f = await xe(e, {
+			maxWidth: 400,
+			quality: .8
+		}), p = `${n()}/posts/${c}/images/thumbnails/${s}.jpg`, m = j(i, p);
+		return await M(m, f, { contentType: "image/jpeg" }), {
+			originalUrl: d,
+			originalPath: l,
+			thumbnailUrl: await O(m),
+			thumbnailPath: p
+		};
+	}
+	async function o(e) {
+		let n = k(t);
+		await Promise.all([D(j(n, e.originalPath)).catch(() => {}), D(j(n, e.thumbnailPath)).catch(() => {})]);
 	}
 	return {
 		uploadAttachment: r,
-		deleteAttachment: i
+		deleteAttachment: i,
+		uploadEditorImage: a,
+		deleteEditorImage: o
 	};
 }
 //#endregion
 //#region src/composables/useMemiBoardSettings.ts
-var $ = [
+var Z = [
 	{
 		id: "free",
 		label: "자유"
@@ -492,10 +670,10 @@ var $ = [
 		label: "질문"
 	}
 ];
-function le() {
-	let t = V(), n = l(), { isSignedIn: i, isAdmin: a } = H(), s = e(() => p(n, `${t.collectionPrefix}Settings`, "config")), { data: c, pending: u } = o(s), d = e(() => {
+function we() {
+	let t = B(), n = l(), { isSignedIn: i, isAdmin: a } = q(), s = e(() => p(n, `${t.collectionPrefix}Settings`, "config")), { data: c, pending: u } = o(s), d = e(() => {
 		let e = c.value?.categories;
-		return e && e.length > 0 ? e : $;
+		return e && e.length > 0 ? e : Z;
 	});
 	function f(e) {
 		if (e) return d.value.find((t) => t.id === e)?.label ?? e;
@@ -504,7 +682,7 @@ function le() {
 		if (!i.value) return;
 		let e = s.value, t = await m(e).catch(() => null);
 		!t || t.exists() || await x(e, {
-			categories: $,
+			categories: Z,
 			updatedAt: b()
 		});
 	}
@@ -513,9 +691,9 @@ function le() {
 		if (!t) throw Error("카테고리 이름을 입력해 주세요.");
 		if (!i.value) throw Error("로그인이 필요합니다.");
 		await h();
-		let n = d.value.find((e) => e.label === t || e.id === U(t));
+		let n = d.value.find((e) => e.label === t || e.id === J(t));
 		if (n) return n.id;
-		let r = U(t) || `cat-${Date.now()}`, a = new Set(d.value.map((e) => e.id));
+		let r = J(t) || `cat-${Date.now()}`, a = new Set(d.value.map((e) => e.id));
 		if (a.has(r)) {
 			let e = 2;
 			for (; a.has(`${r}-${e}`);) e++;
@@ -545,12 +723,12 @@ function le() {
 		settingsPending: u,
 		ensureSettings: h,
 		addCategory: g,
-		DEFAULT_CATEGORIES: $
+		DEFAULT_CATEGORIES: Z
 	};
 }
 //#endregion
 //#region src/data/versionHistory.ts
-var ue = [
+var Te = [
 	{
 		version: "0.2.2",
 		date: "2026-07-31",
@@ -577,10 +755,92 @@ var ue = [
 ];
 //#endregion
 //#region src/utils/formatDate.ts
-function de(e) {
+function Ee(e) {
 	return e?.toDate ? e.toDate().toLocaleDateString("ko-KR") : "";
 }
 //#endregion
-export { $ as DEFAULT_CATEGORIES, ie as configureMemiBoard, de as formatDate, H as useMemiBoardAuth, q as useMemiBoardComments, V as useMemiBoardConfig, Q as useMemiBoardModeration, K as useMemiBoardPosts, le as useMemiBoardSettings, ce as useMemiBoardStorage, ue as versionHistory };
+//#region src/utils/extractEditorImageUrls.ts
+function De(e) {
+	if (!e) return [];
+	let t = /* @__PURE__ */ new Set();
+	for (let n of e.matchAll(/!\[[^\]]*]\((https?:\/\/[^)\s]+)\)/g)) n[1] && t.add(n[1].replaceAll("&amp;", "&"));
+	for (let n of e.matchAll(/<img[^>]*\ssrc=["'](https?:\/\/[^"']+)["']/gi)) n[1] && t.add(n[1].replaceAll("&amp;", "&"));
+	return [...t];
+}
+//#endregion
+//#region src/utils/renderMarkdown.ts
+function Q(e) {
+	return e.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+function $(e) {
+	let t = e;
+	return t = t.replace(/`([^`]+)`/g, "<code>$1</code>"), t = t.replace(/!\[([^\]]*)\]\((https?:\/\/[^)\s]+)\)/g, "<img src=\"$2\" alt=\"$1\" class=\"max-w-full h-auto rounded-lg my-3\" loading=\"lazy\" />"), t = t.replace(/\[([^\]]+)\]\((https?:\/\/[^)\s]+)\)/g, "<a href=\"$2\" target=\"_blank\" rel=\"noopener noreferrer\" class=\"text-primary underline\">$1</a>"), t = t.replace(/\*\*([^*]+)\*\*/g, "<strong>$1</strong>"), t = t.replace(/\*([^*]+)\*/g, "<em>$1</em>"), t = t.replace(/~~([^~]+)~~/g, "<del>$1</del>"), t;
+}
+function Oe(e) {
+	if (!e?.trim()) return "";
+	let t = e.replace(/\r\n/g, "\n").split("\n"), n = [], r = 0, i = !1, a = [], o = null, s = [];
+	function c() {
+		if (!o || !s.length) {
+			o = null, s = [];
+			return;
+		}
+		let e = o;
+		n.push(`<${e}>${s.map((e) => `<li>${$(e)}</li>`).join("")}</${e}>`), o = null, s = [];
+	}
+	for (; r < t.length;) {
+		let e = t[r] ?? "", l = e.match(/^```(\w*)\s*$/);
+		if (l) {
+			i ? (n.push(`<pre class="overflow-x-auto rounded-lg bg-muted p-3 text-sm"><code>${a.join("\n")}</code></pre>`), a = [], i = !1) : (c(), i = !0, l[1]), r++;
+			continue;
+		}
+		if (i) {
+			a.push(Q(e)), r++;
+			continue;
+		}
+		if (/^(-{3,}|\*{3,}|_{3,})\s*$/.test(e)) {
+			c(), n.push("<hr class=\"my-4 border-default\" />"), r++;
+			continue;
+		}
+		let u = e.match(/^(#{1,3})\s+(.+)$/);
+		if (u) {
+			c();
+			let e = u[1].length;
+			n.push(`<h${e} class="font-semibold mt-4 mb-2">${$(Q(u[2]))}</h${e}>`), r++;
+			continue;
+		}
+		if (e.startsWith("> ")) {
+			c();
+			let e = [];
+			for (; r < t.length && (t[r] ?? "").startsWith("> ");) e.push(Q((t[r] ?? "").slice(2))), r++;
+			n.push(`<blockquote class="border-l-4 border-default pl-3 text-muted my-3">${$(e.join("<br />"))}</blockquote>`);
+			continue;
+		}
+		let d = e.match(/^[-*+]\s+(.+)$/);
+		if (d) {
+			o && o !== "ul" && c(), o = "ul", s.push(Q(d[1])), r++;
+			continue;
+		}
+		let f = e.match(/^\d+\.\s+(.+)$/);
+		if (f) {
+			o && o !== "ol" && c(), o = "ol", s.push(Q(f[1])), r++;
+			continue;
+		}
+		if (!e.trim()) {
+			c(), r++;
+			continue;
+		}
+		c();
+		let p = [];
+		for (; r < t.length;) {
+			let e = t[r] ?? "";
+			if (!e.trim() || /^(#{1,3}\s|```|[-*+]\s|\d+\.\s|> |(-{3,}|\*{3,})\s*$)/.test(e)) break;
+			p.push(Q(e)), r++;
+		}
+		n.push(`<p class="my-2 leading-relaxed">${$(p.join("<br />"))}</p>`);
+	}
+	return c(), i && a.length && n.push(`<pre class="overflow-x-auto rounded-lg bg-muted p-3 text-sm"><code>${a.join("\n")}</code></pre>`), n.join("\n");
+}
+//#endregion
+export { V as DEFAULT_BLOCK_BAN_DECAY_MS, se as DEFAULT_BLOCK_BAN_THRESHOLD, Z as DEFAULT_CATEGORIES, Se as EDITOR_IMAGE_MAX_BYTES, xe as compressImage, z as configureMemiBoard, H as effectiveModerationBlockCount, De as extractEditorImageUrls, Ee as formatDate, G as formatRestrictedUntilLabel, W as isModerationWriteRestricted, U as moderationWriteRestrictedUntilMs, Oe as renderMarkdownToHtml, q as useMemiBoardAuth, pe as useMemiBoardComments, B as useMemiBoardConfig, be as useMemiBoardModeration, fe as useMemiBoardPosts, we as useMemiBoardSettings, Ce as useMemiBoardStorage, Te as versionHistory };
 
 //# sourceMappingURL=index.js.map