memi-board 0.5.0 → 0.7.0

package/dist/index.js

@@ -1,14 +1,14 @@
 import { computed as e, reactive as t, ref as n, watch as r } from "vue";
 import { useCollection as i, useCurrentUser as a, useFirebaseApp as o, useFirebaseAuth as s, useFirestore as c } from "vuefire";
 import { collection as l, deleteDoc as u, deleteField as d, doc as f, endBefore as p, getDoc as m, getDocs as h, increment as g, limit as _, limitToLast as v, orderBy as y, query as b, serverTimestamp as x, setDoc as S, startAfter as C, updateDoc as w, where as T, writeBatch as E } from "firebase/firestore";
-import { GoogleAuthProvider as D, OAuthProvider as ee, createUserWithEmailAndPassword as O, signInWithEmailAndPassword as te, signInWithPopup as k, signOut as ne, updateProfile as re } from "firebase/auth";
-import { deleteObject as A, getDownloadURL as j, getStorage as M, listAll as N, ref as P, uploadBytes as ie, uploadBytesResumable as F } from "firebase/storage";
-import { GoogleAIBackend as ae, Schema as I, getAI as oe, getGenerativeModel as se } from "firebase/ai";
+import { GoogleAuthProvider as D, OAuthProvider as ee, createUserWithEmailAndPassword as O, signInWithEmailAndPassword as te, signInWithPopup as ne, signOut as re, updateProfile as ie } from "firebase/auth";
+import { deleteObject as k, getDownloadURL as A, getStorage as j, listAll as ae, ref as M, uploadBytes as N, uploadBytesResumable as oe } from "firebase/storage";
+import { GoogleAIBackend as se, Schema as P, getAI as ce, getGenerativeModel as le } from "firebase/ai";
 //#region src/config.ts
-var L = "__MEMI_BOARD_CONFIG__";
-function R() {
+var F = "__MEMI_BOARD_CONFIG__";
+function I() {
 	let e = globalThis;
-	return e[L] || (e[L] = t({
+	return e[F] || (e[F] = t({
 		collectionPrefix: "memiBoard",
 		auth: { providers: ["google", "apple"] },
 		moderation: {
@@ -20,19 +20,19 @@ function R() {
 			blockBanThreshold: 3,
 			blockBanDecayMs: 864e5
 		}
-	})), e[L];
+	})), e[F];
 }
-function ce(e) {
-	let t = R();
+function ue(e) {
+	let t = I();
 	e.collectionPrefix && (t.collectionPrefix = e.collectionPrefix), e.auth && Object.assign(t.auth, e.auth), e.moderation && Object.assign(t.moderation, e.moderation);
 }
-function z() {
-	return R();
+function L() {
+	return I();
 }
 //#endregion
 //#region src/utils/moderation-strike.ts
-var le = 3, B = 864e5;
-function V(e, t, n = Date.now(), r = B) {
+var R = 3, z = 864e5;
+function B(e, t, n = Date.now(), r = z) {
 	let i = Math.max(0, Math.floor(Number(e) || 0));
 	if (i <= 0) return 0;
 	let a = typeof t == "number" && Number.isFinite(t) ? t : null;
@@ -40,7 +40,7 @@ function V(e, t, n = Date.now(), r = B) {
 	let o = Math.floor((n - a) / r);
 	return Math.max(0, i - o);
 }
-function H(e, t, n = Date.now(), r = 3, i = B) {
+function V(e, t, n = Date.now(), r = 3, i = z) {
 	let a = Math.max(0, Math.floor(Number(e) || 0));
 	if (a < r) return null;
 	let o = typeof t == "number" && Number.isFinite(t) ? t : null;
@@ -48,17 +48,17 @@ function H(e, t, n = Date.now(), r = 3, i = B) {
 	let s = o + (a - (r - 1)) * i;
 	return s > n ? s : null;
 }
-function U(e, t, n = Date.now(), r = 3, i = B) {
-	return H(e, t, n, r, i) != null;
+function H(e, t, n = Date.now(), r = 3, i = z) {
+	return V(e, t, n, r, i) != null;
 }
-function W(e, t = Date.now()) {
+function U(e, t = Date.now()) {
 	let n = Math.max(0, e - t), r = Math.ceil(n / 36e5);
 	if (r <= 0) return "곧 해제";
 	if (r < 24) return `약 ${r}시간 후 해제`;
 	let i = Math.floor(r / 24), a = r % 24;
 	return a === 0 ? `약 ${i}일 후 해제` : `약 ${i}일 ${a}시간 후 해제`;
 }
-function ue(e) {
+function de(e) {
 	if (e == null) return null;
 	if (typeof e == "number" && Number.isFinite(e)) return e;
 	if (typeof e == "object" && e && "toMillis" in e && typeof e.toMillis == "function") return e.toMillis();
@@ -70,26 +70,26 @@ function ue(e) {
 }
 //#endregion
 //#region src/composables/useMemiBoardAuth.ts
-var G = "__MEMI_BOARD_AUTH_STATE__";
-function de() {
+var W = "__MEMI_BOARD_AUTH_STATE__";
+function fe() {
 	let e = globalThis;
-	return e[G] || (e[G] = {
+	return e[W] || (e[W] = {
 		role: n("user"),
 		rolePending: n(!0),
 		rawBlockCount: n(0),
 		blockAtMs: n(null),
 		watchStarted: !1
-	}), e[G];
+	}), e[W];
 }
-function K() {
-	let t = z(), n = de(), i = c(), o = s(), l = a(), { role: u, rolePending: d, rawBlockCount: p, blockAtMs: h } = n;
+function G() {
+	let t = L(), n = fe(), i = c(), o = s(), l = a(), { role: u, rolePending: d, rawBlockCount: p, blockAtMs: h } = n;
 	function _() {
 		let e = t.moderation?.blockBanThreshold;
 		return e === 0 ? 0 : typeof e == "number" && e > 0 ? Math.floor(e) : 3;
 	}
 	function v() {
 		let e = t.moderation?.blockBanDecayMs;
-		return typeof e == "number" && e > 0 ? e : B;
+		return typeof e == "number" && e > 0 ? e : z;
 	}
 	function y(e) {
 		return f(i, `${t.collectionPrefix}Users`, e);
@@ -99,20 +99,28 @@ function K() {
 			p.value = 0, h.value = null;
 			return;
 		}
-		p.value = Math.max(0, Math.floor(Number(e.moderationBlockCount) || 0)), h.value = ue(e.moderationBlockAt);
+		p.value = Math.max(0, Math.floor(Number(e.moderationBlockCount) || 0)), h.value = de(e.moderationBlockAt);
 	}
 	async function C(e) {
 		let t = y(e.uid), n = await m(t);
 		if (!n.exists()) return await S(t, {
 			role: "user",
 			displayName: e.displayName,
+			email: e.email,
+			photoURL: e.photoURL,
 			updatedAt: x()
 		}), b({ moderationBlockCount: 0 }), "user";
 		let r = n.data();
 		return b(r), await w(t, {
 			displayName: e.displayName,
+			email: e.email,
+			photoURL: e.photoURL,
 			updatedAt: x()
-		}), r.role ?? "user";
+		}), [
+			"admin",
+			"staff",
+			"user"
+		].includes(String(r.role)) ? r.role : "user";
 	}
 	async function T() {
 		let e = l.value?.uid;
@@ -136,20 +144,20 @@ function K() {
 			d.value = !1;
 		}
 	}, { immediate: !0 }));
-	let E = e(() => !!l.value), A = e(() => u.value === "admin"), j = e(() => V(p.value, h.value, Date.now(), v())), M = e(() => {
+	let E = e(() => !!l.value), k = e(() => u.value === "admin"), A = e(() => u.value === "staff"), j = e(() => k.value || A.value), ae = e(() => B(p.value, h.value, Date.now(), v())), M = e(() => {
 		let e = _();
-		return e <= 0 ? !1 : U(p.value, h.value, Date.now(), e, v());
+		return e <= 0 ? !1 : H(p.value, h.value, Date.now(), e, v());
 	}), N = e(() => {
 		let e = _();
 		if (e <= 0) return null;
-		let t = H(p.value, h.value, Date.now(), e, v());
-		return t == null ? null : W(t);
-	}), P = e(() => {
+		let t = V(p.value, h.value, Date.now(), e, v());
+		return t == null ? null : U(t);
+	}), oe = e(() => {
 		if (!M.value) return null;
 		let e = N.value;
 		return e ? `콘텐츠 경고가 누적되어 글·댓글 작성이 잠시 제한됐어요. (${e})` : "콘텐츠 경고가 누적되어 글·댓글 작성이 잠시 제한됐어요.";
 	});
-	async function ie() {
+	async function se() {
 		let e = l.value?.uid, t = _();
 		if (!e || t <= 0) return {
 			effectiveCount: 0,
@@ -170,9 +178,9 @@ function K() {
 		});
 		let i = (r.exists() ? Math.max(0, Math.floor(Number(r.data().moderationBlockCount) || 0)) : 0) + 1, a = Date.now();
 		p.value = i, h.value = a;
-		let o = V(i, a, a, v()), s = U(i, a, a, t, v()), c = ` (경고 ${o}/${t})`;
+		let o = B(i, a, a, v()), s = H(i, a, a, t, v()), c = ` (경고 ${o}/${t})`;
 		if (s) {
-			let e = H(i, a, a, t, v()), n = e == null ? null : W(e, a);
+			let e = V(i, a, a, t, v()), n = e == null ? null : U(e, a);
 			c = n ? ` 경고 ${o}회가 되어 글·댓글 작성이 제한됩니다 (${n}).` : ` 경고 ${o}회가 되어 글·댓글 작성이 제한됩니다.`;
 		}
 		return {
@@ -181,65 +189,67 @@ function K() {
 			messageSuffix: c
 		};
 	}
-	function F() {
+	function P() {
 		if (!o) throw Error("[memi-board] Firebase Auth가 초기화되지 않았습니다.");
 		return o;
 	}
-	async function ae() {
-		return k(F(), new D());
+	async function ce() {
+		return ne(P(), new D());
 	}
-	async function I() {
+	async function le() {
 		let e = new ee("apple.com");
-		return e.addScope("email"), e.addScope("name"), k(F(), e);
+		return e.addScope("email"), e.addScope("name"), ne(P(), e);
 	}
-	async function oe(e, t) {
-		return te(F(), e, t);
+	async function F(e, t) {
+		return te(P(), e, t);
 	}
-	async function se(e, t, n) {
-		let r = await O(F(), e, t);
-		return n && await re(r.user, { displayName: n }), r;
+	async function I(e, t, n) {
+		let r = await O(P(), e, t);
+		return n && await ie(r.user, { displayName: n }), r;
 	}
-	async function L() {
-		await ne(F());
+	async function ue() {
+		await re(P());
 	}
 	function R(e) {
-		return E.value && (l.value?.uid === e.authorUid || A.value);
+		return E.value && (l.value?.uid === e.authorUid || j.value);
 	}
-	function ce(e) {
-		return E.value && (l.value?.uid === e.authorUid || A.value);
+	function W(e) {
+		return E.value && (l.value?.uid === e.authorUid || j.value);
 	}
 	return {
 		user: l,
 		isSignedIn: E,
-		isAdmin: A,
+		isAdmin: k,
+		isStaff: A,
+		canManageContent: j,
 		rolePending: d,
-		moderationBlockCount: j,
+		moderationBlockCount: ae,
 		isWriteRestricted: M,
 		restrictedUntilLabel: N,
-		restrictedMessage: P,
-		signInWithGoogle: ae,
-		signInWithApple: I,
-		signInWithEmail: oe,
-		signUpWithEmail: se,
-		signOut: L,
+		restrictedMessage: oe,
+		signInWithGoogle: ce,
+		signInWithApple: le,
+		signInWithEmail: F,
+		signUpWithEmail: I,
+		signOut: ue,
 		canEdit: R,
 		canDelete: R,
-		canDeleteComment: ce,
-		recordContentModerationBlock: ie,
+		canDeleteComment: W,
+		recordContentModerationBlock: se,
 		refreshBoardUser: T
 	};
 }
 //#endregion
 //#region src/utils/slugify.ts
-function q(e) {
+function K(e) {
 	return e.trim().replace(/\s+/g, "-").replace(/[^a-zA-Z0-9가-힣ㄱ-ㅎㅏ-ㅣ-]/g, "").replace(/-+/g, "-").replace(/^-+|-+$/g, "");
 }
-function fe(e, t = 60) {
+function pe(e, t = 60) {
 	return e.replace(/[^a-zA-Z0-9가-힣ㄱ-ㅎ._-]/g, "-").slice(0, t);
 }
 //#endregion
 //#region src/utils/extractEditorImageUrls.ts
-function pe(e) {
+function me(e) {
 	if (!e) return [];
 	let t = /* @__PURE__ */ new Set();
 	for (let n of e.matchAll(/!\[[^\]]*]\((https?:\/\/[^)\s]+)\)/g)) n[1] && t.add(n[1].replaceAll("&amp;", "&"));
@@ -248,7 +258,7 @@ function pe(e) {
 }
 //#endregion
 //#region src/utils/storagePath.ts
-function me(e) {
+function he(e) {
 	try {
 		let t = e.match(/\/o\/([^?]+)/);
 		return t?.[1] ? decodeURIComponent(t[1]) : null;
@@ -256,25 +266,25 @@ function me(e) {
 		return null;
 	}
 }
-function J(e) {
+function q(e) {
 	return e.match(/(?:^|\/)posts\/([^/]+)\//)?.[1] ?? null;
 }
 //#endregion
 //#region src/utils/postPreview.ts
-function Y(e) {
+function J(e) {
 	return e.replace(/&amp;/g, "&").replace(/&quot;/g, "\"").replace(/&#39;/g, "'");
 }
-function he(e) {
+function ge(e) {
 	try {
-		let t = new URL(Y(e)), n = t.hostname.toLowerCase().replace(/^www\./, "");
+		let t = new URL(J(e)), n = t.hostname.toLowerCase().replace(/^www\./, "");
 		if (n === "youtu.be") return t.pathname.split("/").filter(Boolean)[0];
 		if (n.endsWith("youtube.com") || n === "youtube-nocookie.com") return t.pathname.startsWith("/embed/") || t.pathname.startsWith("/shorts/") ? t.pathname.split("/")[2] : t.searchParams.get("v") || void 0;
 	} catch {
 		return;
 	}
 }
-function ge(e, t = []) {
-	let n = e.match(/<img\b[^>]*\bsrc=["']([^"']+)["']/i), r = e.match(/<iframe\b[^>]*\bsrc=["']([^"']+)["']/i), i = t.find((e) => e.type.startsWith("image/"))?.url, a = t.find((e) => e.type.startsWith("video/"))?.url, o = r ? Y(r[1]) : a, s = o ? he(o) : void 0, c = n ? Y(n[1]) : i || (s ? `https://i.ytimg.com/vi/${s}/hqdefault.jpg` : void 0);
+function _e(e, t = []) {
+	let n = e.match(/<img\b[^>]*\bsrc=["']([^"']+)["']/i), r = e.match(/<iframe\b[^>]*\bsrc=["']([^"']+)["']/i), i = t.find((e) => e.type.startsWith("image/"))?.url, a = t.find((e) => e.type.startsWith("video/"))?.url, o = r ? J(r[1]) : a, s = o ? ge(o) : void 0, c = n ? J(n[1]) : i || (s ? `https://i.ytimg.com/vi/${s}/hqdefault.jpg` : void 0);
 	return {
 		summary: e.replace(/<style[\s\S]*?<\/style>/gi, " ").replace(/<script[\s\S]*?<\/script>/gi, " ").replace(/<[^>]+>/g, " ").replace(/&nbsp;/g, " ").replace(/&amp;/g, "&").replace(/\s+/g, " ").trim().slice(0, 160),
 		...c ? { previewImage: c } : {},
@@ -283,19 +293,19 @@ function ge(e, t = []) {
 }
 //#endregion
 //#region src/composables/useMemiBoardPosts.ts
-async function X(e) {
-	let t = await N(e).catch(() => ({
+async function Y(e) {
+	let t = await ae(e).catch(() => ({
 		items: [],
 		prefixes: []
 	}));
-	await Promise.all([...t.items.map((e) => A(e)), ...t.prefixes.map((e) => X(e))]);
+	await Promise.all([...t.items.map((e) => k(e)), ...t.prefixes.map((e) => Y(e))]);
 }
-async function _e(e, t) {
+async function ve(e, t) {
 	let n = [...new Set([...t].filter(Boolean))];
-	await Promise.all(n.map((t) => A(P(e, t)).catch(() => {})));
+	await Promise.all(n.map((t) => k(M(e, t)).catch(() => {})));
 }
-function ve() {
-	let e = z(), t = c(), n = o(), r = () => e.collectionPrefix, i = () => l(t, `${r()}Posts`), a = (e) => f(t, `${r()}Posts`, e), s = (e) => f(t, `${r()}Posts`, e, "body", "main"), g = (e) => l(t, `${r()}Posts`, e, "comments");
+function ye() {
+	let e = L(), t = c(), n = o(), r = () => e.collectionPrefix, i = () => l(t, `${r()}Posts`), a = (e) => f(t, `${r()}Posts`, e), s = (e) => f(t, `${r()}Posts`, e, "body", "main"), g = (e) => l(t, `${r()}Posts`, e, "comments");
 	function D() {
 		return f(i()).id;
 	}
@@ -324,7 +334,7 @@ function ve() {
 		let n = (await h(b(i(), T("category", "==", e), T("slug", "==", t), _(1)))).docs[0];
 		return n ? O(n.id) : null;
 	}
-	async function k(e) {
+	async function ne(e) {
 		if (!e.category || !e.createdAt) return {
 			previous: null,
 			next: null
@@ -341,10 +351,10 @@ function ve() {
 			next: a(r)
 		};
 	}
-	async function ne(e) {
-		let t = q(e.title) || "post", n = t, r = 1;
+	async function re(e) {
+		let t = K(e.title) || "post", n = t, r = 1;
 		for (; !(await h(b(i(), T("category", "==", e.category || ""), T("slug", "==", n), _(1)))).empty;) r++, n = `${t}-${r}`;
-		let o = e.postId || D(), c = ge(e.content, e.attachments);
+		let o = e.postId || D(), c = _e(e.content, e.attachments);
 		return await S(a(o), {
 			slug: n,
 			title: e.title,
@@ -362,8 +372,8 @@ function ve() {
 			updatedAt: x()
 		}), await S(s(o), { content: e.content }), n;
 	}
-	async function re(e, t) {
-		let n = ge(t.content, t.attachments);
+	async function ie(e, t) {
+		let n = _e(t.content, t.attachments);
 		await Promise.all([w(a(e), {
 			title: t.title,
 			...n,
@@ -375,7 +385,7 @@ function ve() {
 			updatedAt: x()
 		}), S(s(e), { content: t.content }, { merge: !0 })]);
 	}
-	async function A(e) {
+	async function k(e) {
 		let [i, o] = await Promise.all([m(a(e)), m(s(e))]);
 		if (!i.exists()) return;
 		let c = i.data(), l = o.exists() ? String(o.data().content ?? "") : "", d = await h(g(e));
@@ -383,42 +393,42 @@ function ve() {
 			let n = E(t);
 			d.docs.slice(e, e + 450).forEach((e) => n.delete(e.ref)), await n.commit();
 		}
-		let f = M(n), p = /* @__PURE__ */ new Set(), _ = /* @__PURE__ */ new Set();
+		let f = j(n), p = /* @__PURE__ */ new Set(), _ = /* @__PURE__ */ new Set();
 		for (let t of c.attachments ?? []) if (t?.path) {
 			p.add(t.path);
-			let n = J(t.path);
+			let n = q(t.path);
 			n && n !== e && _.add(n);
 		}
-		for (let t of pe(l)) {
-			let n = me(t);
+		for (let t of me(l)) {
+			let n = he(t);
 			if (!n) continue;
 			p.add(n);
 			let r = n.replace(/\/images\/([^/]+)$/, "/images/thumbnails/$1").replace(/\.[^.]+$/, ".jpg");
 			r !== n && r.includes("/images/thumbnails/") && p.add(r);
 			let i = n.match(/^(.*\/images\/)([^/]+)\.[^.]+$/);
 			i && !n.includes("/thumbnails/") && p.add(`${i[1]}thumbnails/${i[2]}.jpg`);
-			let a = J(n);
+			let a = q(n);
 			a && a !== e && _.add(a);
 		}
-		await u(s(e)), await X(P(f, `${r()}/posts/${e}`));
-		for (let e of _) await X(P(f, `${r()}/posts/${e}`));
-		await _e(f, p), await u(a(e));
+		await u(s(e)), await Y(M(f, `${r()}/posts/${e}`));
+		for (let e of _) await Y(M(f, `${r()}/posts/${e}`));
+		await ve(f, p), await u(a(e));
 	}
 	return {
 		createPostId: D,
 		getPosts: ee,
 		getPost: O,
 		getPostBySlug: te,
-		getAdjacentPosts: k,
-		createPost: ne,
-		updatePost: re,
-		deletePost: A
+		getAdjacentPosts: ne,
+		createPost: re,
+		updatePost: ie,
+		deletePost: k
 	};
 }
 //#endregion
 //#region src/composables/useMemiBoardComments.ts
-function ye(t) {
-	let n = z(), r = c(), a = () => n.collectionPrefix, o = e(() => typeof t == "string" ? t : t.value), s = e(() => b(l(r, `${a()}Posts`, o.value, "comments"), y("createdAt", "asc"))), u = i(s);
+function be(t) {
+	let n = L(), r = c(), a = () => n.collectionPrefix, o = e(() => typeof t == "string" ? t : t.value), s = e(() => b(l(r, `${a()}Posts`, o.value, "comments"), y("createdAt", "asc"))), u = i(s);
 	async function d(e) {
 		let t = E(r), n = a(), i = f(l(r, `${n}Posts`, o.value, "comments"));
 		t.set(i, {
@@ -443,7 +453,7 @@ function ye(t) {
 }
 //#endregion
 //#region src/utils/moderation-prompt.ts
-var be = "당신은 게시판 콘텐츠를 심사하는 엄격한 모더레이터입니다.\n아래 텍스트에 욕설·비속어·성희롱·혐오·위협·스팸·도배성 광고가 있으면 반드시 거부(flagged=true)합니다.\n\nflagged=true 예:\n- 욕설/비속어: 씨발, 시발, 병신, 지랄, 좆, 개새끼, 존나, fuck, shit, bitch 등\n- 성적 모욕, 혐오 발언, 협박\n- 게시판 주제와 무관한 도배성 광고/스팸\n\nflagged=false:\n- 게시판 주제에 맞는 정상적인 글/댓글 (강한 의견이나 정당한 비판은 허용)\n\nJSON만 출력:\n{\"flagged\":boolean,\"category\":\"none\"|\"abuse\"|\"spam\"|\"adult\"|\"violence\"|\"other\",\"reason\":string}\n- flagged=true면 category를 고르고, reason은 한국어로 **무엇이 문제인지** 구체적으로 1문장\n  (예: \"욕설(비속어)이 포함되어 게시할 수 없습니다.\", \"광고·스팸성 문구가 있어 게시할 수 없습니다.\")\n  욕설 단어 전체를 그대로 길게 인용하지 말고, 유형(욕설/혐오/스팸 등)을 분명히 밝힌다.\n- flagged=false면 category는 \"none\", reason은 \"\"", xe = {
+var xe = "당신은 게시판 콘텐츠를 심사하는 엄격한 모더레이터입니다.\n아래 텍스트에 욕설·비속어·성희롱·혐오·위협·스팸·도배성 광고가 있으면 반드시 거부(flagged=true)합니다.\n\nflagged=true 예:\n- 욕설/비속어: 씨발, 시발, 병신, 지랄, 좆, 개새끼, 존나, fuck, shit, bitch 등\n- 성적 모욕, 혐오 발언, 협박\n- 게시판 주제와 무관한 도배성 광고/스팸\n\nflagged=false:\n- 게시판 주제에 맞는 정상적인 글/댓글 (강한 의견이나 정당한 비판은 허용)\n\nJSON만 출력:\n{\"flagged\":boolean,\"category\":\"none\"|\"abuse\"|\"spam\"|\"adult\"|\"violence\"|\"other\",\"reason\":string}\n- flagged=true면 category를 고르고, reason은 한국어로 **무엇이 문제인지** 구체적으로 1문장\n  (예: \"욕설(비속어)이 포함되어 게시할 수 없습니다.\", \"광고·스팸성 문구가 있어 게시할 수 없습니다.\")\n  욕설 단어 전체를 그대로 길게 인용하지 말고, 유형(욕설/혐오/스팸 등)을 분명히 밝힌다.\n- flagged=false면 category는 \"none\", reason은 \"\"", Se = {
 	abuse: "욕설·비속어·모욕",
 	spam: "스팸·광고",
 	adult: "선정적·성인 내용",
@@ -451,17 +461,17 @@ var be = "당신은 게시판 콘텐츠를 심사하는 엄격한 모더레이
 	other: "부적절한 내용",
 	none: ""
 };
-function Z(e) {
+function X(e) {
 	if (e.via === "local" && e.localHit) {
 		let t = e.localHit.trim();
 		return t.length > 0 && t.length <= 12 ? `「${t}」 같은 표현은 사용할 수 없습니다. 다른 말로 바꿔 주세요.` : "욕설·비속어가 포함되어 게시할 수 없습니다. 표현을 바꿔 주세요.";
 	}
 	let t = (e.reason || "").trim();
 	if (t) return t;
-	let n = e.category && e.category !== "none" ? xe[e.category] || e.category : "";
+	let n = e.category && e.category !== "none" ? Se[e.category] || e.category : "";
 	return n ? `${n}이(가) 포함되어 게시할 수 없습니다. 내용을 수정해 주세요.` : "게시할 수 없는 내용이 포함되어 있습니다. 내용을 수정해 주세요.";
 }
-var Se = [
+var Ce = [
 	"씨발",
 	"시발",
 	"시이발",
@@ -487,10 +497,10 @@ var Se = [
 	"bitch",
 	"asshole"
 ];
-function Ce(e) {
+function we(e) {
 	return new RegExp(e.join("|"), "i");
 }
-var we = /* @__PURE__ */ new Set([
+var Te = /* @__PURE__ */ new Set([
 	"none",
 	"abuse",
 	"spam",
@@ -498,7 +508,7 @@ var we = /* @__PURE__ */ new Set([
 	"violence",
 	"other"
 ]);
-function Te(e) {
+function Ee(e) {
 	let t = e.trim();
 	if (!t) return null;
 	let n;
@@ -516,7 +526,7 @@ function Te(e) {
 	if (typeof n != "object" || !n) return null;
 	let r = n;
 	if (typeof r.flagged != "boolean") return null;
-	let i = typeof r.category == "string" && we.has(r.category) ? r.category : r.flagged ? "other" : "none", a = typeof r.reason == "string" ? r.reason : "";
+	let i = typeof r.category == "string" && Te.has(r.category) ? r.category : r.flagged ? "other" : "none", a = typeof r.reason == "string" ? r.reason : "";
 	return {
 		flagged: r.flagged,
 		category: i,
@@ -525,20 +535,20 @@ function Te(e) {
 }
 //#endregion
 //#region src/composables/useMemiBoardModeration.ts
-var Ee = {
+var Z = {
 	flagged: !1,
 	category: "none",
 	reason: "",
 	via: "empty"
 };
 function De() {
-	let e = z().moderation ?? {}, t = o(), { isWriteRestricted: n, restrictedMessage: r, recordContentModerationBlock: i } = K(), a = Ce([...Se, ...e.localBlocklist ?? []]);
+	let e = L().moderation ?? {}, t = o(), { isWriteRestricted: n, restrictedMessage: r, recordContentModerationBlock: i } = G(), a = we([...Ce, ...e.localBlocklist ?? []]);
 	function s(e) {
 		let t = e.match(a);
 		return t ? {
 			flagged: !0,
 			category: "abuse",
-			reason: Z({
+			reason: X({
 				via: "local",
 				localHit: t[0] || "",
 				category: "abuse"
@@ -547,21 +557,21 @@ function De() {
 		} : null;
 	}
 	function c() {
-		let n = e.model ?? "gemini-3.5-flash-lite", r = e.useLimitedUseAppCheckTokens !== !1, i = oe(t, {
-			backend: new ae(),
+		let n = e.model ?? "gemini-3.5-flash-lite", r = e.useLimitedUseAppCheckTokens !== !1, i = ce(t, {
+			backend: new se(),
 			useLimitedUseAppCheckTokens: r
 		});
-		return se(i, {
+		return le(i, {
 			model: n,
-			systemInstruction: be,
+			systemInstruction: xe,
 			generationConfig: {
 				temperature: 0,
 				maxOutputTokens: 256,
 				responseMimeType: "application/json",
-				responseSchema: I.object({ properties: {
-					flagged: I.boolean(),
-					category: I.string(),
-					reason: I.string()
+				responseSchema: P.object({ properties: {
+					flagged: P.boolean(),
+					category: P.string(),
+					reason: P.string()
 				} })
 			}
 		});
@@ -582,7 +592,7 @@ function De() {
 		};
 	}
 	function u(e, t = "") {
-		let n = Z({
+		let n = X({
 			reason: e.reason,
 			category: e.category,
 			via: e.via
@@ -610,22 +620,22 @@ function De() {
 		};
 		let i = t.trim();
 		if (!i) return {
-			...Ee,
+			...Z,
 			via: "empty"
 		};
 		let a = s(i);
 		if (a) return d(a);
 		if (e.enabled === !1) return {
-			...Ee,
+			...Z,
 			via: "disabled"
 		};
 		try {
-			let e = Te((await c().generateContent(`심사할 텍스트:\n"""${i.slice(0, 4e3)}"""`)).response.text());
+			let e = Ee((await c().generateContent(`심사할 텍스트:\n"""${i.slice(0, 4e3)}"""`)).response.text());
 			if (!e) return l();
 			let t = {
 				flagged: e.flagged,
 				category: e.category,
-				reason: Z({
+				reason: X({
 					reason: e.reason,
 					category: e.category,
 					via: "ai"
@@ -645,14 +655,14 @@ function De() {
 			via: "restricted"
 		};
 		if (e.enabled === !1 || !e.moderateImages) return {
-			...Ee,
+			...Z,
 			via: "disabled"
 		};
 		try {
 			let e = await new Promise((e, n) => {
 				let r = new FileReader();
 				r.onload = () => e(r.result.split(",")[1] ?? ""), r.onerror = n, r.readAsDataURL(t);
-			}), n = Te((await c().generateContent([{ inlineData: {
+			}), n = Ee((await c().generateContent([{ inlineData: {
 				mimeType: t.type || "image/jpeg",
 				data: e
 			} }, "이 이미지를 심사해 주세요."])).response.text());
@@ -660,7 +670,7 @@ function De() {
 			let r = {
 				flagged: n.flagged,
 				category: n.category,
-				reason: Z({
+				reason: X({
 					reason: n.reason,
 					category: n.category,
 					via: "ai"
@@ -701,9 +711,9 @@ async function Oe(e, { maxWidth: t = 400, quality: n = .8 } = {}) {
 //#region src/composables/useMemiBoardStorage.ts
 var ke = 5242880;
 function Ae() {
-	let e = z(), t = o(), n = () => e.collectionPrefix;
+	let e = L(), t = o(), n = () => e.collectionPrefix;
 	function r(e, r, i) {
-		let a = M(t), o = `${n()}/posts/${r}/attachments/${Date.now()}-${fe(e.name)}`, s = P(a, o), c = F(s, e, {
+		let a = j(t), o = `${n()}/posts/${r}/attachments/${Date.now()}-${pe(e.name)}`, s = M(a, o), c = oe(s, e, {
 			contentType: e.type || "application/octet-stream",
 			contentDisposition: `attachment; filename*=UTF-8''${encodeURIComponent(e.name)}`
 		});
@@ -712,7 +722,7 @@ function Ae() {
 				c.on("state_changed", (e) => {
 					i && e.totalBytes > 0 && i(e.bytesTransferred / e.totalBytes);
 				}, n, async () => {
-					let n = await j(s);
+					let n = await A(s);
 					t({
 						name: e.name,
 						url: n,
@@ -726,28 +736,28 @@ function Ae() {
 		};
 	}
 	async function i(e) {
-		let n = M(t);
-		await A(P(n, e.path)).catch(() => {});
+		let n = j(t);
+		await k(M(n, e.path)).catch(() => {});
 	}
 	async function a(e, r) {
 		if (!e.type.startsWith("image/")) throw Error("이미지 파일만 업로드할 수 있습니다.");
 		if (e.size > 5242880) throw Error(`이미지는 ${ke / 1024 / 1024}MB 이하여야 합니다.`);
-		let i = M(t), a = (e.name.split(".").pop() || e.type.split("/")[1] || "png").replace(/[^a-zA-Z0-9]/g, "").slice(0, 8) || "png", o = fe(e.name.replace(/\.[^.]+$/, "") || "image", 40), s = `${Date.now()}-${o || "image"}`, c = r || `new-${Date.now()}`, l = `${n()}/posts/${c}/images/${s}.${a}`, u = P(i, l);
-		await ie(u, e, { contentType: e.type || "image/png" });
-		let d = await j(u), f = await Oe(e, {
+		let i = j(t), a = (e.name.split(".").pop() || e.type.split("/")[1] || "png").replace(/[^a-zA-Z0-9]/g, "").slice(0, 8) || "png", o = pe(e.name.replace(/\.[^.]+$/, "") || "image", 40), s = `${Date.now()}-${o || "image"}`, c = r || `new-${Date.now()}`, l = `${n()}/posts/${c}/images/${s}.${a}`, u = M(i, l);
+		await N(u, e, { contentType: e.type || "image/png" });
+		let d = await A(u), f = await Oe(e, {
 			maxWidth: 400,
 			quality: .8
-		}), p = `${n()}/posts/${c}/images/thumbnails/${s}.jpg`, m = P(i, p);
-		return await ie(m, f, { contentType: "image/jpeg" }), {
+		}), p = `${n()}/posts/${c}/images/thumbnails/${s}.jpg`, m = M(i, p);
+		return await N(m, f, { contentType: "image/jpeg" }), {
 			originalUrl: d,
 			originalPath: l,
-			thumbnailUrl: await j(m),
+			thumbnailUrl: await A(m),
 			thumbnailPath: p
 		};
 	}
 	async function s(e) {
-		let n = M(t);
-		await Promise.all([A(P(n, e.originalPath)).catch(() => {}), A(P(n, e.thumbnailPath)).catch(() => {})]);
+		let n = j(t);
+		await Promise.all([k(M(n, e.originalPath)).catch(() => {}), k(M(n, e.thumbnailPath)).catch(() => {})]);
 	}
 	return {
 		uploadAttachment: r,
@@ -763,27 +773,31 @@ var je = [
 		id: "free",
 		label: "자유",
 		listView: "default",
+		writeRole: "user",
 		order: 0
 	},
 	{
 		id: "notice",
 		label: "공지",
 		listView: "default",
+		writeRole: "admin",
 		order: 1
 	},
 	{
 		id: "question",
 		label: "질문",
 		listView: "default",
+		writeRole: "user",
 		order: 2
 	}
 ];
 function Me() {
-	let t = z(), n = c(), { isSignedIn: r } = K(), a = e(() => f(n, `${t.collectionPrefix}Settings`, "config")), o = e(() => l(n, `${t.collectionPrefix}Settings`, "config", "categories")), s = e(() => b(o.value, y("order", "asc"))), { data: d, pending: p } = i(s), m = e(() => d.value.map((e, t) => ({
+	let t = L(), n = c(), { isSignedIn: r } = G(), a = e(() => f(n, `${t.collectionPrefix}Settings`, "config")), o = e(() => l(n, `${t.collectionPrefix}Settings`, "config", "categories")), s = e(() => b(o.value, y("order", "asc"))), { data: d, pending: p } = i(s, { ssrKey: `${t.collectionPrefix}Settings/config/categories` }), m = e(() => d.value.map((e, t) => ({
 		...e,
 		id: e.id,
 		order: typeof e.order == "number" ? e.order : t,
-		listView: e.listView ?? "default"
+		listView: e.listView ?? "default",
+		writeRole: e.writeRole ?? "user"
 	})));
 	function h(e) {
 		if (e) return m.value.find((t) => t.id === e)?.label ?? e;
@@ -795,6 +809,7 @@ function Me() {
 		await S(a.value, { updatedAt: x() }, { merge: !0 }), await S(f(o.value, n), {
 			label: i,
 			listView: e.listView ?? "default",
+			writeRole: e.writeRole ?? "user",
 			order: t,
 			updatedAt: x()
 		}, { merge: !0 });
@@ -808,6 +823,7 @@ function Me() {
 			t.set(f(o.value, r), {
 				label: i,
 				listView: e.listView ?? "default",
+				writeRole: e.writeRole ?? "user",
 				order: n,
 				updatedAt: x()
 			}, { merge: !0 });
@@ -826,12 +842,13 @@ function Me() {
 		if (!r.value) throw Error("로그인이 필요합니다.");
 		let n = m.value.find((e) => e.label === t);
 		if (n) return n.id;
-		let i = q(t) || `cat-${Date.now()}`, a = i, o = 2, s = new Set(m.value.map((e) => e.id));
+		let i = K(t) || `cat-${Date.now()}`, a = i, o = 2, s = new Set(m.value.map((e) => e.id));
 		for (; s.has(a);) a = `${i}-${o++}`;
 		return await g({
 			id: a,
 			label: t,
 			listView: "default",
+			writeRole: "user",
 			order: m.value.length
 		}), a;
 	}
@@ -848,8 +865,52 @@ function Me() {
 	};
 }
 //#endregion
-//#region src/data/versionHistory.ts
+//#region src/composables/useMemiBoardUsers.ts
 var Ne = [
+	{
+		value: "admin",
+		label: "관리자",
+		description: "사용자 역할, 게시판 설정과 모든 콘텐츠를 관리합니다."
+	},
+	{
+		value: "staff",
+		label: "스태프",
+		description: "모든 게시글과 댓글을 관리하지만 사용자 역할과 게시판 설정은 바꿀 수 없습니다."
+	},
+	{
+		value: "user",
+		label: "사용자",
+		description: "글과 댓글을 작성하고 본인이 작성한 콘텐츠만 수정·삭제할 수 있습니다."
+	}
+];
+function Pe() {
+	let e = L(), t = c(), n = `${e.collectionPrefix}Users`, r = i(l(t, n), { ssrKey: `${n}-management` });
+	async function a(e, r) {
+		if (!Ne.some((e) => e.value === r)) throw Error("지원하지 않는 역할입니다.");
+		await w(f(t, n, e), {
+			role: r,
+			updatedAt: x()
+		});
+	}
+	return {
+		users: r,
+		usersPending: r.pending,
+		updateUserRole: a
+	};
+}
+//#endregion
+//#region src/data/versionHistory.ts
+var Fe = [
+	{
+		version: "0.7.0",
+		date: "2026-08-04",
+		highlights: ["카테고리마다 글쓰기 권한을 일반 이상·스태프 이상·관리자만으로 설정할 수 있어요", "게시판 설정 화면의 SSR hydration 경고를 해결했어요"]
+	},
+	{
+		version: "0.6.0",
+		date: "2026-08-04",
+		highlights: ["관리자가 게시판 사용자를 확인하고 관리자·스태프·사용자 역할을 설정할 수 있어요", "스태프는 게시판 설정이나 사용자 역할은 바꾸지 않고 게시글과 댓글을 관리할 수 있어요"]
+	},
 	{
 		version: "0.5.0",
 		date: "2026-08-04",
@@ -896,7 +957,7 @@ var Ne = [
 ];
 //#endregion
 //#region src/utils/formatDate.ts
-function Pe(e) {
+function Ie(e) {
 	return e?.toDate ? e.toDate().toLocaleDateString("ko-KR") : "";
 }
 //#endregion
@@ -908,7 +969,7 @@ function $(e) {
 	let t = e;
 	return t = t.replace(/`([^`]+)`/g, "<code>$1</code>"), t = t.replace(/!\[([^\]]*)\]\((https?:\/\/[^)\s]+)\)/g, "<img src=\"$2\" alt=\"$1\" class=\"max-w-full h-auto rounded-lg my-3\" loading=\"lazy\" />"), t = t.replace(/\[([^\]]+)\]\((https?:\/\/[^)\s]+)\)/g, "<a href=\"$2\" target=\"_blank\" rel=\"noopener noreferrer\" class=\"text-primary underline\">$1</a>"), t = t.replace(/\*\*([^*]+)\*\*/g, "<strong>$1</strong>"), t = t.replace(/\*([^*]+)\*/g, "<em>$1</em>"), t = t.replace(/~~([^~]+)~~/g, "<del>$1</del>"), t;
 }
-function Fe(e) {
+function Le(e) {
 	if (!e?.trim()) return "";
 	let t = e.replace(/\r\n/g, "\n").split("\n"), n = [], r = 0, i = !1, a = [], o = null, s = [];
 	function c() {
@@ -973,6 +1034,6 @@ function Fe(e) {
 	return c(), i && a.length && n.push(`<pre class="overflow-x-auto rounded-lg bg-muted p-3 text-sm"><code>${a.join("\n")}</code></pre>`), n.join("\n");
 }
 //#endregion
-export { B as DEFAULT_BLOCK_BAN_DECAY_MS, le as DEFAULT_BLOCK_BAN_THRESHOLD, je as DEFAULT_CATEGORIES, ke as EDITOR_IMAGE_MAX_BYTES, Oe as compressImage, ce as configureMemiBoard, V as effectiveModerationBlockCount, pe as extractEditorImageUrls, Pe as formatDate, W as formatRestrictedUntilLabel, U as isModerationWriteRestricted, H as moderationWriteRestrictedUntilMs, J as postNamespaceFromStoragePath, Fe as renderMarkdownToHtml, q as slugify, me as storagePathFromDownloadUrl, K as useMemiBoardAuth, ye as useMemiBoardComments, z as useMemiBoardConfig, De as useMemiBoardModeration, ve as useMemiBoardPosts, Me as useMemiBoardSettings, Ae as useMemiBoardStorage, Ne as versionHistory };
+export { Ne as BOARD_USER_ROLES, z as DEFAULT_BLOCK_BAN_DECAY_MS, R as DEFAULT_BLOCK_BAN_THRESHOLD, je as DEFAULT_CATEGORIES, ke as EDITOR_IMAGE_MAX_BYTES, Oe as compressImage, ue as configureMemiBoard, B as effectiveModerationBlockCount, me as extractEditorImageUrls, Ie as formatDate, U as formatRestrictedUntilLabel, H as isModerationWriteRestricted, V as moderationWriteRestrictedUntilMs, q as postNamespaceFromStoragePath, Le as renderMarkdownToHtml, K as slugify, he as storagePathFromDownloadUrl, G as useMemiBoardAuth, be as useMemiBoardComments, L as useMemiBoardConfig, De as useMemiBoardModeration, ye as useMemiBoardPosts, Me as useMemiBoardSettings, Ae as useMemiBoardStorage, Pe as useMemiBoardUsers, Fe as versionHistory };
 
 //# sourceMappingURL=index.js.map