memi-board 0.4.6 → 0.4.13

package/dist/index.js

@@ -1,14 +1,14 @@
 import { computed as e, reactive as t, ref as n, watch as r } from "vue";
 import { useCollection as i, useCurrentUser as a, useDocument as o, useFirebaseApp as s, useFirebaseAuth as c, useFirestore as l } from "vuefire";
-import { collection as u, deleteDoc as d, deleteField as f, doc as p, getDoc as m, getDocs as h, increment as g, limit as _, orderBy as v, query as y, serverTimestamp as b, setDoc as x, startAfter as S, updateDoc as C, where as w, writeBatch as T } from "firebase/firestore";
-import { GoogleAuthProvider as E, OAuthProvider as D, createUserWithEmailAndPassword as O, signInWithEmailAndPassword as k, signInWithPopup as A, signOut as j, updateProfile as ee } from "firebase/auth";
-import { deleteObject as M, getDownloadURL as N, getStorage as P, listAll as te, ref as F, uploadBytesResumable as I } from "firebase/storage";
-import { GoogleAIBackend as L, Schema as R, getAI as z, getGenerativeModel as ne } from "firebase/ai";
+import { collection as u, deleteDoc as d, deleteField as f, doc as p, getDoc as m, getDocs as h, increment as g, limit as _, orderBy as v, query as y, serverTimestamp as b, setDoc as x, startAfter as S, updateDoc as C, where as ee, writeBatch as w } from "firebase/firestore";
+import { GoogleAuthProvider as T, OAuthProvider as te, createUserWithEmailAndPassword as ne, signInWithEmailAndPassword as re, signInWithPopup as ie, signOut as ae, updateProfile as oe } from "firebase/auth";
+import { deleteObject as E, getDownloadURL as D, getStorage as O, listAll as k, ref as A, uploadBytes as j, uploadBytesResumable as M } from "firebase/storage";
+import { GoogleAIBackend as N, Schema as P, getAI as se, getGenerativeModel as ce } from "firebase/ai";
 //#region src/config.ts
-var B = "__MEMI_BOARD_CONFIG__";
-function V() {
+var F = "__MEMI_BOARD_CONFIG__";
+function I() {
 	let e = globalThis;
-	return e[B] || (e[B] = t({
+	return e[F] || (e[F] = t({
 		collectionPrefix: "memiBoard",
 		auth: { providers: ["google", "apple"] },
 		moderation: {
@@ -16,113 +16,267 @@ function V() {
 			model: "gemini-3.5-flash-lite",
 			onError: "allow",
 			moderateImages: !1,
-			localBlocklist: []
+			localBlocklist: [],
+			blockBanThreshold: 3,
+			blockBanDecayMs: 864e5
 		}
-	})), e[B];
+	})), e[F];
 }
-function re(e) {
-	let t = V();
+function L(e) {
+	let t = I();
 	e.collectionPrefix && (t.collectionPrefix = e.collectionPrefix), e.auth && Object.assign(t.auth, e.auth), e.moderation && Object.assign(t.moderation, e.moderation);
 }
-function H() {
-	return V();
+function R() {
+	return I();
+}
+//#endregion
+//#region src/utils/moderation-strike.ts
+var le = 3, z = 864e5;
+function B(e, t, n = Date.now(), r = z) {
+	let i = Math.max(0, Math.floor(Number(e) || 0));
+	if (i <= 0) return 0;
+	let a = typeof t == "number" && Number.isFinite(t) ? t : null;
+	if (a == null || n <= a) return i;
+	let o = Math.floor((n - a) / r);
+	return Math.max(0, i - o);
+}
+function V(e, t, n = Date.now(), r = 3, i = z) {
+	let a = Math.max(0, Math.floor(Number(e) || 0));
+	if (a < r) return null;
+	let o = typeof t == "number" && Number.isFinite(t) ? t : null;
+	if (o == null) return n;
+	let s = o + (a - (r - 1)) * i;
+	return s > n ? s : null;
+}
+function H(e, t, n = Date.now(), r = 3, i = z) {
+	return V(e, t, n, r, i) != null;
+}
+function U(e, t = Date.now()) {
+	let n = Math.max(0, e - t), r = Math.ceil(n / 36e5);
+	if (r <= 0) return "곧 해제";
+	if (r < 24) return `약 ${r}시간 후 해제`;
+	let i = Math.floor(r / 24), a = r % 24;
+	return a === 0 ? `약 ${i}일 후 해제` : `약 ${i}일 ${a}시간 후 해제`;
+}
+function ue(e) {
+	if (e == null) return null;
+	if (typeof e == "number" && Number.isFinite(e)) return e;
+	if (typeof e == "object" && e && "toMillis" in e && typeof e.toMillis == "function") return e.toMillis();
+	if (typeof e == "object" && e && "seconds" in e) {
+		let t = Number(e.seconds);
+		if (Number.isFinite(t)) return t * 1e3;
+	}
+	return null;
 }
 //#endregion
 //#region src/composables/useMemiBoardAuth.ts
-function U() {
-	let t = H(), i = l(), o = c(), s = a(), u = n("user"), d = n(!0);
-	function f(e) {
+var W = "__MEMI_BOARD_AUTH_STATE__";
+function de() {
+	let e = globalThis;
+	return e[W] || (e[W] = {
+		role: n("user"),
+		rolePending: n(!0),
+		rawBlockCount: n(0),
+		blockAtMs: n(null),
+		watchStarted: !1
+	}), e[W];
+}
+function G() {
+	let t = R(), n = de(), i = l(), o = c(), s = a(), { role: u, rolePending: d, rawBlockCount: f, blockAtMs: h } = n;
+	function _() {
+		let e = t.moderation?.blockBanThreshold;
+		return e === 0 ? 0 : typeof e == "number" && e > 0 ? Math.floor(e) : 3;
+	}
+	function v() {
+		let e = t.moderation?.blockBanDecayMs;
+		return typeof e == "number" && e > 0 ? e : z;
+	}
+	function y(e) {
 		return p(i, `${t.collectionPrefix}Users`, e);
 	}
-	async function h(e) {
-		let t = f(e.uid), n = await m(t);
-		return n.exists() ? (await C(t, {
+	function S(e) {
+		if (!e) {
+			f.value = 0, h.value = null;
+			return;
+		}
+		f.value = Math.max(0, Math.floor(Number(e.moderationBlockCount) || 0)), h.value = ue(e.moderationBlockAt);
+	}
+	async function ee(e) {
+		let t = y(e.uid), n = await m(t);
+		if (!n.exists()) return await x(t, {
+			role: "user",
 			displayName: e.displayName,
 			updatedAt: b()
-		}), n.data().role ?? "user") : (await x(t, {
-			role: "user",
+		}), S({ moderationBlockCount: 0 }), "user";
+		let r = n.data();
+		return S(r), await C(t, {
 			displayName: e.displayName,
 			updatedAt: b()
-		}), "user");
+		}), r.role ?? "user";
+	}
+	async function w() {
+		let e = s.value?.uid;
+		if (!e) {
+			S(void 0);
+			return;
+		}
+		let t = await m(y(e));
+		S(t.exists() ? t.data() : void 0);
 	}
-	r(s, async (e) => {
+	n.watchStarted || (n.watchStarted = !0, r(s, async (e) => {
 		if (d.value = !0, !e) {
-			u.value = "user", d.value = !1;
+			u.value = "user", S(void 0), d.value = !1;
 			return;
 		}
 		try {
-			u.value = await h(e);
+			u.value = await ee(e);
 		} catch {
 			u.value = "user";
 		} finally {
 			d.value = !1;
 		}
-	}, { immediate: !0 });
-	let g = e(() => !!s.value), _ = e(() => u.value === "admin");
-	function v() {
+	}, { immediate: !0 }));
+	let E = e(() => !!s.value), D = e(() => u.value === "admin"), O = e(() => B(f.value, h.value, Date.now(), v())), k = e(() => {
+		let e = _();
+		return e <= 0 ? !1 : H(f.value, h.value, Date.now(), e, v());
+	}), A = e(() => {
+		let e = _();
+		if (e <= 0) return null;
+		let t = V(f.value, h.value, Date.now(), e, v());
+		return t == null ? null : U(t);
+	}), j = e(() => {
+		if (!k.value) return null;
+		let e = A.value;
+		return e ? `콘텐츠 경고가 누적되어 글·댓글 작성이 잠시 제한됐어요. (${e})` : "콘텐츠 경고가 누적되어 글·댓글 작성이 잠시 제한됐어요.";
+	});
+	async function M() {
+		let e = s.value?.uid, t = _();
+		if (!e || t <= 0) return {
+			effectiveCount: 0,
+			restricted: !1,
+			messageSuffix: ""
+		};
+		let n = y(e), r = await m(n);
+		r.exists() ? await C(n, {
+			moderationBlockCount: g(1),
+			moderationBlockAt: b(),
+			updatedAt: b()
+		}) : await x(n, {
+			role: "user",
+			displayName: s.value?.displayName ?? null,
+			moderationBlockCount: 1,
+			moderationBlockAt: b(),
+			updatedAt: b()
+		});
+		let i = (r.exists() ? Math.max(0, Math.floor(Number(r.data().moderationBlockCount) || 0)) : 0) + 1, a = Date.now();
+		f.value = i, h.value = a;
+		let o = B(i, a, a, v()), c = H(i, a, a, t, v()), l = ` (경고 ${o}/${t})`;
+		if (c) {
+			let e = V(i, a, a, t, v()), n = e == null ? null : U(e, a);
+			l = n ? ` 경고 ${o}회가 되어 글·댓글 작성이 제한됩니다 (${n}).` : ` 경고 ${o}회가 되어 글·댓글 작성이 제한됩니다.`;
+		}
+		return {
+			effectiveCount: o,
+			restricted: c,
+			messageSuffix: l
+		};
+	}
+	function N() {
 		if (!o) throw Error("[memi-board] Firebase Auth가 초기화되지 않았습니다.");
 		return o;
 	}
-	async function y() {
-		return A(v(), new E());
+	async function P() {
+		return ie(N(), new T());
 	}
-	async function S() {
-		let e = new D("apple.com");
-		return e.addScope("email"), e.addScope("name"), A(v(), e);
+	async function se() {
+		let e = new te("apple.com");
+		return e.addScope("email"), e.addScope("name"), ie(N(), e);
 	}
-	async function w(e, t) {
-		return k(v(), e, t);
+	async function ce(e, t) {
+		return re(N(), e, t);
 	}
-	async function T(e, t, n) {
-		let r = await O(v(), e, t);
-		return n && await ee(r.user, { displayName: n }), r;
+	async function F(e, t, n) {
+		let r = await ne(N(), e, t);
+		return n && await oe(r.user, { displayName: n }), r;
 	}
-	async function M() {
-		await j(v());
+	async function I() {
+		await ae(N());
 	}
-	function N(e) {
-		return g.value && (s.value?.uid === e.authorUid || _.value);
+	function L(e) {
+		return E.value && (s.value?.uid === e.authorUid || D.value);
 	}
-	function P(e) {
-		return g.value && (s.value?.uid === e.authorUid || _.value);
+	function le(e) {
+		return E.value && (s.value?.uid === e.authorUid || D.value);
 	}
 	return {
 		user: s,
-		isSignedIn: g,
-		isAdmin: _,
+		isSignedIn: E,
+		isAdmin: D,
 		rolePending: d,
-		signInWithGoogle: y,
-		signInWithApple: S,
-		signInWithEmail: w,
-		signUpWithEmail: T,
-		signOut: M,
-		canEdit: N,
-		canDelete: N,
-		canDeleteComment: P
+		moderationBlockCount: O,
+		isWriteRestricted: k,
+		restrictedUntilLabel: A,
+		restrictedMessage: j,
+		signInWithGoogle: P,
+		signInWithApple: se,
+		signInWithEmail: ce,
+		signUpWithEmail: F,
+		signOut: I,
+		canEdit: L,
+		canDelete: L,
+		canDeleteComment: le,
+		recordContentModerationBlock: M,
+		refreshBoardUser: w
 	};
 }
 //#endregion
 //#region src/utils/slugify.ts
-function W(e) {
+function K(e) {
 	return e.trim().replace(/\s+/g, "-").replace(/[^a-zA-Z0-9가-힣ㄱ-ㅎㅏ-ㅣ-]/g, "").replace(/-+/g, "-").replace(/^-+|-+$/g, "");
 }
-function G(e, t = 60) {
+function fe(e, t = 60) {
 	return e.replace(/[^a-zA-Z0-9가-힣ㄱ-ㅎ._-]/g, "-").slice(0, t);
 }
 //#endregion
+//#region src/utils/extractEditorImageUrls.ts
+function pe(e) {
+	if (!e) return [];
+	let t = /* @__PURE__ */ new Set();
+	for (let n of e.matchAll(/!\[[^\]]*]\((https?:\/\/[^)\s]+)\)/g)) n[1] && t.add(n[1].replaceAll("&amp;", "&"));
+	for (let n of e.matchAll(/<img[^>]*\ssrc=["'](https?:\/\/[^"']+)["']/gi)) n[1] && t.add(n[1].replaceAll("&amp;", "&"));
+	return [...t];
+}
+//#endregion
+//#region src/utils/storagePath.ts
+function me(e) {
+	try {
+		let t = e.match(/\/o\/([^?]+)/);
+		return t?.[1] ? decodeURIComponent(t[1]) : null;
+	} catch {
+		return null;
+	}
+}
+function q(e) {
+	return e.match(/(?:^|\/)posts\/([^/]+)\//)?.[1] ?? null;
+}
+//#endregion
 //#region src/composables/useMemiBoardPosts.ts
-async function K(e) {
-	let t = await te(e).catch(() => ({
+async function J(e) {
+	let t = await k(e).catch(() => ({
 		items: [],
 		prefixes: []
 	}));
-	await Promise.all([...t.items.map((e) => M(e)), ...t.prefixes.map((e) => K(e))]);
+	await Promise.all([...t.items.map((e) => E(e)), ...t.prefixes.map((e) => J(e))]);
+}
+async function he(e, t) {
+	let n = [...new Set([...t].filter(Boolean))];
+	await Promise.all(n.map((t) => E(A(e, t)).catch(() => {})));
 }
-function q() {
-	let e = H(), t = l(), n = s(), r = () => e.collectionPrefix, i = () => u(t, `${r()}Posts`), a = (e) => p(t, `${r()}Posts`, e), o = (e) => p(t, `${r()}Posts`, e, "body", "main"), c = (e) => u(t, `${r()}Posts`, e, "comments");
+function ge() {
+	let e = R(), t = l(), n = s(), r = () => e.collectionPrefix, i = () => u(t, `${r()}Posts`), a = (e) => p(t, `${r()}Posts`, e), o = (e) => p(t, `${r()}Posts`, e, "body", "main"), c = (e) => u(t, `${r()}Posts`, e, "comments");
 	async function g(e = {}) {
 		let t = e.pageSize ?? 20, n = [];
-		e.category && n.push(w("category", "==", e.category)), n.push(v("createdAt", "desc")), e.cursor && n.push(S(e.cursor)), n.push(_(t + 1));
+		e.category && n.push(ee("category", "==", e.category)), n.push(v("createdAt", "desc")), e.cursor && n.push(S(e.cursor)), n.push(_(t + 1));
 		let r = await h(y(i(), ...n)), a = r.docs.slice(0, t);
 		return {
 			posts: a.map((e) => ({
@@ -133,7 +287,7 @@ function q() {
 			hasMore: r.docs.length > t
 		};
 	}
-	async function E(e) {
+	async function T(e) {
 		let [t, n] = await Promise.all([m(a(e)), m(o(e))]);
 		return t.exists() ? {
 			id: t.id,
@@ -141,8 +295,8 @@ function q() {
 			content: n.exists() ? n.data().content ?? "" : ""
 		} : null;
 	}
-	async function D(e) {
-		let t = W(e.title) || "post", n = t, r = 1;
+	async function te(e) {
+		let t = K(e.title) || "post", n = t, r = 1;
 		for (; (await m(a(n))).exists();) r++, n = `${t}-${r}`;
 		return await Promise.all([x(a(n), {
 			title: e.title,
@@ -159,7 +313,7 @@ function q() {
 			updatedAt: b()
 		}), x(o(n), { content: e.content })]), n;
 	}
-	async function O(e, t) {
+	async function ne(e, t) {
 		await Promise.all([C(a(e), {
 			title: t.title,
 			tags: t.tags ?? [],
@@ -168,29 +322,49 @@ function q() {
 			updatedAt: b()
 		}), x(o(e), { content: t.content }, { merge: !0 })]);
 	}
-	async function k(e) {
-		let i = await h(c(e));
-		for (let e = 0; e < i.docs.length; e += 450) {
-			let n = T(t);
-			i.docs.slice(e, e + 450).forEach((e) => n.delete(e.ref)), await n.commit();
+	async function re(e) {
+		let [i, s] = await Promise.all([m(a(e)), m(o(e))]);
+		if (!i.exists()) return;
+		let l = i.data(), u = s.exists() ? String(s.data().content ?? "") : "", f = await h(c(e));
+		for (let e = 0; e < f.docs.length; e += 450) {
+			let n = w(t);
+			f.docs.slice(e, e + 450).forEach((e) => n.delete(e.ref)), await n.commit();
 		}
-		let s = P(n);
-		await d(o(e)), await K(F(s, `${r()}/posts/${e}`)), await d(a(e));
+		let p = O(n), g = /* @__PURE__ */ new Set(), _ = /* @__PURE__ */ new Set();
+		for (let t of l.attachments ?? []) if (t?.path) {
+			g.add(t.path);
+			let n = q(t.path);
+			n && n !== e && _.add(n);
+		}
+		for (let t of pe(u)) {
+			let n = me(t);
+			if (!n) continue;
+			g.add(n);
+			let r = n.replace(/\/images\/([^/]+)$/, "/images/thumbnails/$1").replace(/\.[^.]+$/, ".jpg");
+			r !== n && r.includes("/images/thumbnails/") && g.add(r);
+			let i = n.match(/^(.*\/images\/)([^/]+)\.[^.]+$/);
+			i && !n.includes("/thumbnails/") && g.add(`${i[1]}thumbnails/${i[2]}.jpg`);
+			let a = q(n);
+			a && a !== e && _.add(a);
+		}
+		await d(o(e)), await J(A(p, `${r()}/posts/${e}`));
+		for (let e of _) await J(A(p, `${r()}/posts/${e}`));
+		await he(p, g), await d(a(e));
 	}
 	return {
 		getPosts: g,
-		getPost: E,
-		createPost: D,
-		updatePost: O,
-		deletePost: k
+		getPost: T,
+		createPost: te,
+		updatePost: ne,
+		deletePost: re
 	};
 }
 //#endregion
 //#region src/composables/useMemiBoardComments.ts
-function J(t) {
-	let n = H(), r = l(), a = () => n.collectionPrefix, o = e(() => typeof t == "string" ? t : t.value), s = e(() => y(u(r, `${a()}Posts`, o.value, "comments"), v("createdAt", "asc"))), c = i(s);
+function _e(t) {
+	let n = R(), r = l(), a = () => n.collectionPrefix, o = e(() => typeof t == "string" ? t : t.value), s = e(() => y(u(r, `${a()}Posts`, o.value, "comments"), v("createdAt", "asc"))), c = i(s);
 	async function d(e) {
-		let t = T(r), n = a(), i = p(u(r, `${n}Posts`, o.value, "comments"));
+		let t = w(r), n = a(), i = p(u(r, `${n}Posts`, o.value, "comments"));
 		t.set(i, {
 			postId: o.value,
 			body: e.body,
@@ -202,7 +376,7 @@ function J(t) {
 		}), t.update(p(r, `${n}Posts`, o.value), { commentCount: g(1) }), await t.commit();
 	}
 	async function f(e) {
-		let t = T(r), n = a();
+		let t = w(r), n = a();
 		t.delete(p(r, `${n}Posts`, o.value, "comments", e)), t.update(p(r, `${n}Posts`, o.value), { commentCount: g(-1) }), await t.commit();
 	}
 	return {
@@ -213,7 +387,25 @@ function J(t) {
 }
 //#endregion
 //#region src/utils/moderation-prompt.ts
-var Y = "당신은 게시판 콘텐츠를 심사하는 엄격한 모더레이터입니다.\n아래 텍스트에 욕설·비속어·성희롱·혐오·위협·스팸·도배성 광고가 있으면 반드시 거부(flagged=true)합니다.\n\nflagged=true 예:\n- 욕설/비속어: 씨발, 시발, 병신, 지랄, 좆, 개새끼, 존나, fuck, shit, bitch 등\n- 성적 모욕, 혐오 발언, 협박\n- 게시판 주제와 무관한 도배성 광고/스팸\n\nflagged=false:\n- 게시판 주제에 맞는 정상적인 글/댓글 (강한 의견이나 정당한 비판은 허용)\n\nJSON만 출력:\n{\"flagged\":boolean,\"category\":\"none\"|\"abuse\"|\"spam\"|\"adult\"|\"violence\"|\"other\",\"reason\":string}\n- flagged=true면 category는 상황에 맞게 고르고, reason은 한국어 1문장 (예: \"욕설이 포함되어 있어 게시할 수 없습니다.\")\n- flagged=false면 category는 \"none\", reason은 \"\"", ie = [
+var ve = "당신은 게시판 콘텐츠를 심사하는 엄격한 모더레이터입니다.\n아래 텍스트에 욕설·비속어·성희롱·혐오·위협·스팸·도배성 광고가 있으면 반드시 거부(flagged=true)합니다.\n\nflagged=true 예:\n- 욕설/비속어: 씨발, 시발, 병신, 지랄, 좆, 개새끼, 존나, fuck, shit, bitch 등\n- 성적 모욕, 혐오 발언, 협박\n- 게시판 주제와 무관한 도배성 광고/스팸\n\nflagged=false:\n- 게시판 주제에 맞는 정상적인 글/댓글 (강한 의견이나 정당한 비판은 허용)\n\nJSON만 출력:\n{\"flagged\":boolean,\"category\":\"none\"|\"abuse\"|\"spam\"|\"adult\"|\"violence\"|\"other\",\"reason\":string}\n- flagged=true면 category를 고르고, reason은 한국어로 **무엇이 문제인지** 구체적으로 1문장\n  (예: \"욕설(비속어)이 포함되어 게시할 수 없습니다.\", \"광고·스팸성 문구가 있어 게시할 수 없습니다.\")\n  욕설 단어 전체를 그대로 길게 인용하지 말고, 유형(욕설/혐오/스팸 등)을 분명히 밝힌다.\n- flagged=false면 category는 \"none\", reason은 \"\"", ye = {
+	abuse: "욕설·비속어·모욕",
+	spam: "스팸·광고",
+	adult: "선정적·성인 내용",
+	violence: "폭력·위협",
+	other: "부적절한 내용",
+	none: ""
+};
+function Y(e) {
+	if (e.via === "local" && e.localHit) {
+		let t = e.localHit.trim();
+		return t.length > 0 && t.length <= 12 ? `「${t}」 같은 표현은 사용할 수 없습니다. 다른 말로 바꿔 주세요.` : "욕설·비속어가 포함되어 게시할 수 없습니다. 표현을 바꿔 주세요.";
+	}
+	let t = (e.reason || "").trim();
+	if (t) return t;
+	let n = e.category && e.category !== "none" ? ye[e.category] || e.category : "";
+	return n ? `${n}이(가) 포함되어 게시할 수 없습니다. 내용을 수정해 주세요.` : "게시할 수 없는 내용이 포함되어 있습니다. 내용을 수정해 주세요.";
+}
+var be = [
 	"씨발",
 	"시발",
 	"시이발",
@@ -239,10 +431,10 @@ var Y = "당신은 게시판 콘텐츠를 심사하는 엄격한 모더레이터
 	"bitch",
 	"asshole"
 ];
-function ae(e) {
+function xe(e) {
 	return new RegExp(e.join("|"), "i");
 }
-var oe = /* @__PURE__ */ new Set([
+var Se = /* @__PURE__ */ new Set([
 	"none",
 	"abuse",
 	"spam",
@@ -250,7 +442,7 @@ var oe = /* @__PURE__ */ new Set([
 	"violence",
 	"other"
 ]);
-function X(e) {
+function Ce(e) {
 	let t = e.trim();
 	if (!t) return null;
 	let n;
@@ -268,7 +460,7 @@ function X(e) {
 	if (typeof n != "object" || !n) return null;
 	let r = n;
 	if (typeof r.flagged != "boolean") return null;
-	let i = typeof r.category == "string" && oe.has(r.category) ? r.category : r.flagged ? "other" : "none", a = typeof r.reason == "string" ? r.reason : "";
+	let i = typeof r.category == "string" && Se.has(r.category) ? r.category : r.flagged ? "other" : "none", a = typeof r.reason == "string" ? r.reason : "";
 	return {
 		flagged: r.flagged,
 		category: i,
@@ -277,43 +469,48 @@ function X(e) {
 }
 //#endregion
 //#region src/composables/useMemiBoardModeration.ts
-var Z = {
+var X = {
 	flagged: !1,
 	category: "none",
 	reason: "",
 	via: "empty"
 };
-function se() {
-	let e = H().moderation ?? {}, t = s(), n = ae([...ie, ...e.localBlocklist ?? []]);
-	function r(e) {
-		return e.match(n) ? {
+function we() {
+	let e = R().moderation ?? {}, t = s(), { isWriteRestricted: n, restrictedMessage: r, recordContentModerationBlock: i } = G(), a = xe([...be, ...e.localBlocklist ?? []]);
+	function o(e) {
+		let t = e.match(a);
+		return t ? {
 			flagged: !0,
 			category: "abuse",
-			reason: "욕설·비속어가 포함되어 게시할 수 없습니다. 표현을 바꿔 주세요.",
+			reason: Y({
+				via: "local",
+				localHit: t[0] || "",
+				category: "abuse"
+			}),
 			via: "local"
 		} : null;
 	}
-	function i() {
-		let n = e.model ?? "gemini-3.5-flash-lite", r = e.useLimitedUseAppCheckTokens !== !1, i = z(t, {
-			backend: new L(),
+	function c() {
+		let n = e.model ?? "gemini-3.5-flash-lite", r = e.useLimitedUseAppCheckTokens !== !1, i = se(t, {
+			backend: new N(),
 			useLimitedUseAppCheckTokens: r
 		});
-		return ne(i, {
+		return ce(i, {
 			model: n,
-			systemInstruction: Y,
+			systemInstruction: ve,
 			generationConfig: {
 				temperature: 0,
 				maxOutputTokens: 256,
 				responseMimeType: "application/json",
-				responseSchema: R.object({ properties: {
-					flagged: R.boolean(),
-					category: R.string(),
-					reason: R.string()
+				responseSchema: P.object({ properties: {
+					flagged: P.boolean(),
+					category: P.string(),
+					reason: P.string()
 				} })
 			}
 		});
 	}
-	function a() {
+	function l() {
 		return e.onError === "block" ? {
 			flagged: !0,
 			category: "other",
@@ -328,64 +525,129 @@ function se() {
 			via: "ai-error-allow"
 		};
 	}
-	async function o(t) {
-		let n = t.trim();
-		if (!n) return {
-			...Z,
+	function u(e, t = "") {
+		let n = Y({
+			reason: e.reason,
+			category: e.category,
+			via: e.via
+		}), r = t ? `${n}${t}` : n;
+		return {
+			...e,
+			reason: r
+		};
+	}
+	async function d(e) {
+		if (!e.flagged || e.error || e.via !== "local" && e.via !== "ai") return e;
+		try {
+			let { messageSuffix: t } = await i();
+			return u(e, t);
+		} catch (t) {
+			return console.warn("[memi-board] record moderation strike failed", t instanceof Error ? t.message : t), u(e);
+		}
+	}
+	async function f(t) {
+		if (n.value) return {
+			flagged: !0,
+			category: "other",
+			reason: r.value || "콘텐츠 경고가 누적되어 글·댓글 작성이 잠시 제한됐어요.",
+			via: "restricted"
+		};
+		let i = t.trim();
+		if (!i) return {
+			...X,
 			via: "empty"
 		};
-		let o = r(n);
-		if (o) return o;
+		let a = o(i);
+		if (a) return d(a);
 		if (e.enabled === !1) return {
-			...Z,
+			...X,
 			via: "disabled"
 		};
 		try {
-			let e = X((await i().generateContent(`심사할 텍스트:\n"""${n.slice(0, 4e3)}"""`)).response.text());
-			return e ? {
+			let e = Ce((await c().generateContent(`심사할 텍스트:\n"""${i.slice(0, 4e3)}"""`)).response.text());
+			if (!e) return l();
+			let t = {
 				flagged: e.flagged,
 				category: e.category,
-				reason: e.reason,
+				reason: Y({
+					reason: e.reason,
+					category: e.category,
+					via: "ai"
+				}),
 				via: "ai"
-			} : a();
+			};
+			return t.flagged ? d(t) : t;
 		} catch (e) {
-			return console.warn("[memi-board] moderation AI failed", e instanceof Error ? e.message : e), a();
+			return console.warn("[memi-board] moderation AI failed", e instanceof Error ? e.message : e), l();
 		}
 	}
-	async function c(t) {
+	async function p(t) {
+		if (n.value) return {
+			flagged: !0,
+			category: "other",
+			reason: r.value || "콘텐츠 경고가 누적되어 글·댓글 작성이 잠시 제한됐어요.",
+			via: "restricted"
+		};
 		if (e.enabled === !1 || !e.moderateImages) return {
-			...Z,
+			...X,
 			via: "disabled"
 		};
 		try {
 			let e = await new Promise((e, n) => {
 				let r = new FileReader();
 				r.onload = () => e(r.result.split(",")[1] ?? ""), r.onerror = n, r.readAsDataURL(t);
-			}), n = X((await i().generateContent([{ inlineData: {
+			}), n = Ce((await c().generateContent([{ inlineData: {
 				mimeType: t.type || "image/jpeg",
 				data: e
 			} }, "이 이미지를 심사해 주세요."])).response.text());
-			return n ? {
+			if (!n) return l();
+			let r = {
 				flagged: n.flagged,
 				category: n.category,
-				reason: n.reason,
+				reason: Y({
+					reason: n.reason,
+					category: n.category,
+					via: "ai"
+				}),
 				via: "ai"
-			} : a();
+			};
+			return r.flagged ? d(r) : r;
 		} catch (e) {
-			return console.warn("[memi-board] moderation AI image failed", e instanceof Error ? e.message : e), a();
+			return console.warn("[memi-board] moderation AI image failed", e instanceof Error ? e.message : e), l();
 		}
 	}
 	return {
-		checkText: o,
-		checkImage: c
+		checkText: f,
+		checkImage: p
 	};
 }
 //#endregion
+//#region src/utils/compressImage.ts
+async function Te(e, { maxWidth: t = 400, quality: n = .8 } = {}) {
+	return new Promise((r, i) => {
+		let a = new Image(), o = URL.createObjectURL(e);
+		a.onload = () => {
+			URL.revokeObjectURL(o);
+			let e = Math.min(1, t / a.naturalWidth), s = document.createElement("canvas");
+			s.width = Math.round(a.naturalWidth * e), s.height = Math.round(a.naturalHeight * e);
+			let c = s.getContext("2d");
+			if (!c) {
+				i(/* @__PURE__ */ Error("Canvas를 사용할 수 없습니다"));
+				return;
+			}
+			c.drawImage(a, 0, 0, s.width, s.height), s.toBlob((e) => e ? r(e) : i(/* @__PURE__ */ Error("압축 실패")), "image/jpeg", n);
+		}, a.onerror = () => {
+			URL.revokeObjectURL(o), i(/* @__PURE__ */ Error("이미지 로드 실패"));
+		}, a.src = o;
+	});
+}
+//#endregion
 //#region src/composables/useMemiBoardStorage.ts
-function Q() {
-	let e = H(), t = s(), n = () => e.collectionPrefix;
+var Ee = 5242880;
+function De() {
+	let e = R(), t = s(), n = () => e.collectionPrefix;
 	function r(e, r, i) {
-		let a = P(t), o = `${n()}/posts/${r}/attachments/${Date.now()}-${G(e.name)}`, s = F(a, o), c = I(s, e, {
+		let a = O(t), o = `${n()}/posts/${r}/attachments/${Date.now()}-${fe(e.name)}`, s = A(a, o), c = M(s, e, {
 			contentType: e.type || "application/octet-stream",
 			contentDisposition: `attachment; filename*=UTF-8''${encodeURIComponent(e.name)}`
 		});
@@ -394,7 +656,7 @@ function Q() {
 				c.on("state_changed", (e) => {
 					i && e.totalBytes > 0 && i(e.bytesTransferred / e.totalBytes);
 				}, n, async () => {
-					let n = await N(s);
+					let n = await D(s);
 					t({
 						name: e.name,
 						url: n,
@@ -408,17 +670,39 @@ function Q() {
 		};
 	}
 	async function i(e) {
-		let n = P(t);
-		await M(F(n, e.path)).catch(() => {});
+		let n = O(t);
+		await E(A(n, e.path)).catch(() => {});
+	}
+	async function a(e, r) {
+		if (!e.type.startsWith("image/")) throw Error("이미지 파일만 업로드할 수 있습니다.");
+		if (e.size > 5242880) throw Error(`이미지는 ${Ee / 1024 / 1024}MB 이하여야 합니다.`);
+		let i = O(t), a = (e.name.split(".").pop() || e.type.split("/")[1] || "png").replace(/[^a-zA-Z0-9]/g, "").slice(0, 8) || "png", o = fe(e.name.replace(/\.[^.]+$/, "") || "image", 40), s = `${Date.now()}-${o || "image"}`, c = r || `new-${Date.now()}`, l = `${n()}/posts/${c}/images/${s}.${a}`, u = A(i, l);
+		await j(u, e, { contentType: e.type || "image/png" });
+		let d = await D(u), f = await Te(e, {
+			maxWidth: 400,
+			quality: .8
+		}), p = `${n()}/posts/${c}/images/thumbnails/${s}.jpg`, m = A(i, p);
+		return await j(m, f, { contentType: "image/jpeg" }), {
+			originalUrl: d,
+			originalPath: l,
+			thumbnailUrl: await D(m),
+			thumbnailPath: p
+		};
+	}
+	async function o(e) {
+		let n = O(t);
+		await Promise.all([E(A(n, e.originalPath)).catch(() => {}), E(A(n, e.thumbnailPath)).catch(() => {})]);
 	}
 	return {
 		uploadAttachment: r,
-		deleteAttachment: i
+		deleteAttachment: i,
+		uploadEditorImage: a,
+		deleteEditorImage: o
 	};
 }
 //#endregion
 //#region src/composables/useMemiBoardSettings.ts
-var $ = [
+var Z = [
 	{
 		id: "free",
 		label: "자유"
@@ -432,10 +716,10 @@ var $ = [
 		label: "질문"
 	}
 ];
-function ce() {
-	let t = H(), n = l(), { isSignedIn: i, isAdmin: a } = U(), s = e(() => p(n, `${t.collectionPrefix}Settings`, "config")), { data: c, pending: u } = o(s), d = e(() => {
+function Oe() {
+	let t = R(), n = l(), { isSignedIn: i, isAdmin: a } = G(), s = e(() => p(n, `${t.collectionPrefix}Settings`, "config")), { data: c, pending: u } = o(s), d = e(() => {
 		let e = c.value?.categories;
-		return e && e.length > 0 ? e : $;
+		return e && e.length > 0 ? e : Z;
 	});
 	function f(e) {
 		if (e) return d.value.find((t) => t.id === e)?.label ?? e;
@@ -444,7 +728,7 @@ function ce() {
 		if (!i.value) return;
 		let e = s.value, t = await m(e).catch(() => null);
 		!t || t.exists() || await x(e, {
-			categories: $,
+			categories: Z,
 			updatedAt: b()
 		});
 	}
@@ -453,9 +737,9 @@ function ce() {
 		if (!t) throw Error("카테고리 이름을 입력해 주세요.");
 		if (!i.value) throw Error("로그인이 필요합니다.");
 		await h();
-		let n = d.value.find((e) => e.label === t || e.id === W(t));
+		let n = d.value.find((e) => e.label === t || e.id === K(t));
 		if (n) return n.id;
-		let r = W(t) || `cat-${Date.now()}`, a = new Set(d.value.map((e) => e.id));
+		let r = K(t) || `cat-${Date.now()}`, a = new Set(d.value.map((e) => e.id));
 		if (a.has(r)) {
 			let e = 2;
 			for (; a.has(`${r}-${e}`);) e++;
@@ -485,12 +769,12 @@ function ce() {
 		settingsPending: u,
 		ensureSettings: h,
 		addCategory: g,
-		DEFAULT_CATEGORIES: $
+		DEFAULT_CATEGORIES: Z
 	};
 }
 //#endregion
 //#region src/data/versionHistory.ts
-var le = [
+var ke = [
 	{
 		version: "0.2.2",
 		date: "2026-07-31",
@@ -517,10 +801,83 @@ var le = [
 ];
 //#endregion
 //#region src/utils/formatDate.ts
-function ue(e) {
+function Ae(e) {
 	return e?.toDate ? e.toDate().toLocaleDateString("ko-KR") : "";
 }
 //#endregion
-export { $ as DEFAULT_CATEGORIES, re as configureMemiBoard, ue as formatDate, U as useMemiBoardAuth, J as useMemiBoardComments, H as useMemiBoardConfig, se as useMemiBoardModeration, q as useMemiBoardPosts, ce as useMemiBoardSettings, Q as useMemiBoardStorage, le as versionHistory };
+//#region src/utils/renderMarkdown.ts
+function Q(e) {
+	return e.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+function $(e) {
+	let t = e;
+	return t = t.replace(/`([^`]+)`/g, "<code>$1</code>"), t = t.replace(/!\[([^\]]*)\]\((https?:\/\/[^)\s]+)\)/g, "<img src=\"$2\" alt=\"$1\" class=\"max-w-full h-auto rounded-lg my-3\" loading=\"lazy\" />"), t = t.replace(/\[([^\]]+)\]\((https?:\/\/[^)\s]+)\)/g, "<a href=\"$2\" target=\"_blank\" rel=\"noopener noreferrer\" class=\"text-primary underline\">$1</a>"), t = t.replace(/\*\*([^*]+)\*\*/g, "<strong>$1</strong>"), t = t.replace(/\*([^*]+)\*/g, "<em>$1</em>"), t = t.replace(/~~([^~]+)~~/g, "<del>$1</del>"), t;
+}
+function je(e) {
+	if (!e?.trim()) return "";
+	let t = e.replace(/\r\n/g, "\n").split("\n"), n = [], r = 0, i = !1, a = [], o = null, s = [];
+	function c() {
+		if (!o || !s.length) {
+			o = null, s = [];
+			return;
+		}
+		let e = o;
+		n.push(`<${e}>${s.map((e) => `<li>${$(e)}</li>`).join("")}</${e}>`), o = null, s = [];
+	}
+	for (; r < t.length;) {
+		let e = t[r] ?? "", l = e.match(/^```(\w*)\s*$/);
+		if (l) {
+			i ? (n.push(`<pre class="overflow-x-auto rounded-lg bg-muted p-3 text-sm"><code>${a.join("\n")}</code></pre>`), a = [], i = !1) : (c(), i = !0, l[1]), r++;
+			continue;
+		}
+		if (i) {
+			a.push(Q(e)), r++;
+			continue;
+		}
+		if (/^(-{3,}|\*{3,}|_{3,})\s*$/.test(e)) {
+			c(), n.push("<hr class=\"my-4 border-default\" />"), r++;
+			continue;
+		}
+		let u = e.match(/^(#{1,3})\s+(.+)$/);
+		if (u) {
+			c();
+			let e = u[1].length;
+			n.push(`<h${e} class="font-semibold mt-4 mb-2">${$(Q(u[2]))}</h${e}>`), r++;
+			continue;
+		}
+		if (e.startsWith("> ")) {
+			c();
+			let e = [];
+			for (; r < t.length && (t[r] ?? "").startsWith("> ");) e.push(Q((t[r] ?? "").slice(2))), r++;
+			n.push(`<blockquote class="border-l-4 border-default pl-3 text-muted my-3">${$(e.join("<br />"))}</blockquote>`);
+			continue;
+		}
+		let d = e.match(/^[-*+]\s+(.+)$/);
+		if (d) {
+			o && o !== "ul" && c(), o = "ul", s.push(Q(d[1])), r++;
+			continue;
+		}
+		let f = e.match(/^\d+\.\s+(.+)$/);
+		if (f) {
+			o && o !== "ol" && c(), o = "ol", s.push(Q(f[1])), r++;
+			continue;
+		}
+		if (!e.trim()) {
+			c(), r++;
+			continue;
+		}
+		c();
+		let p = [];
+		for (; r < t.length;) {
+			let e = t[r] ?? "";
+			if (!e.trim() || /^(#{1,3}\s|```|[-*+]\s|\d+\.\s|> |(-{3,}|\*{3,})\s*$)/.test(e)) break;
+			p.push(Q(e)), r++;
+		}
+		n.push(`<p class="my-2 leading-relaxed">${$(p.join("<br />"))}</p>`);
+	}
+	return c(), i && a.length && n.push(`<pre class="overflow-x-auto rounded-lg bg-muted p-3 text-sm"><code>${a.join("\n")}</code></pre>`), n.join("\n");
+}
+//#endregion
+export { z as DEFAULT_BLOCK_BAN_DECAY_MS, le as DEFAULT_BLOCK_BAN_THRESHOLD, Z as DEFAULT_CATEGORIES, Ee as EDITOR_IMAGE_MAX_BYTES, Te as compressImage, L as configureMemiBoard, B as effectiveModerationBlockCount, pe as extractEditorImageUrls, Ae as formatDate, U as formatRestrictedUntilLabel, H as isModerationWriteRestricted, V as moderationWriteRestrictedUntilMs, q as postNamespaceFromStoragePath, je as renderMarkdownToHtml, me as storagePathFromDownloadUrl, G as useMemiBoardAuth, _e as useMemiBoardComments, R as useMemiBoardConfig, we as useMemiBoardModeration, ge as useMemiBoardPosts, Oe as useMemiBoardSettings, De as useMemiBoardStorage, ke as versionHistory };
 
 //# sourceMappingURL=index.js.map