memi-board 0.5.0 → 0.9.0

package/dist/index.js

@@ -1,14 +1,14 @@
-import { computed as e, reactive as t, ref as n, watch as r } from "vue";
-import { useCollection as i, useCurrentUser as a, useFirebaseApp as o, useFirebaseAuth as s, useFirestore as c } from "vuefire";
-import { collection as l, deleteDoc as u, deleteField as d, doc as f, endBefore as p, getDoc as m, getDocs as h, increment as g, limit as _, limitToLast as v, orderBy as y, query as b, serverTimestamp as x, setDoc as S, startAfter as C, updateDoc as w, where as T, writeBatch as E } from "firebase/firestore";
-import { GoogleAuthProvider as D, OAuthProvider as ee, createUserWithEmailAndPassword as O, signInWithEmailAndPassword as te, signInWithPopup as k, signOut as ne, updateProfile as re } from "firebase/auth";
-import { deleteObject as A, getDownloadURL as j, getStorage as M, listAll as N, ref as P, uploadBytes as ie, uploadBytesResumable as F } from "firebase/storage";
-import { GoogleAIBackend as ae, Schema as I, getAI as oe, getGenerativeModel as se } from "firebase/ai";
+import { computed as e, onScopeDispose as t, reactive as n, ref as r, watch as i } from "vue";
+import { useCollection as a, useCurrentUser as o, useFirebaseApp as s, useFirebaseAuth as c, useFirestore as l } from "vuefire";
+import { collection as u, deleteDoc as d, deleteField as f, doc as p, documentId as m, endBefore as h, getDoc as g, getDocs as _, increment as v, limit as y, limitToLast as b, onSnapshot as x, orderBy as S, query as C, serverTimestamp as w, setDoc as T, startAfter as E, updateDoc as D, where as O, writeBatch as k } from "firebase/firestore";
+import { GoogleAuthProvider as A, OAuthProvider as j, createUserWithEmailAndPassword as M, signInWithEmailAndPassword as N, signInWithPopup as P, signOut as ee, updateProfile as te } from "firebase/auth";
+import { deleteObject as F, getDownloadURL as I, getStorage as L, listAll as ne, ref as R, uploadBytes as z, uploadBytesResumable as re } from "firebase/storage";
+import { GoogleAIBackend as ie, Schema as B, getAI as ae, getGenerativeModel as oe } from "firebase/ai";
 //#region src/config.ts
-var L = "__MEMI_BOARD_CONFIG__";
-function R() {
+var V = "__MEMI_BOARD_CONFIG__";
+function H() {
 	let e = globalThis;
-	return e[L] || (e[L] = t({
+	return e[V] || (e[V] = n({
 		collectionPrefix: "memiBoard",
 		auth: { providers: ["google", "apple"] },
 		moderation: {
@@ -20,19 +20,19 @@ function R() {
 			blockBanThreshold: 3,
 			blockBanDecayMs: 864e5
 		}
-	})), e[L];
+	})), e[V];
 }
-function ce(e) {
-	let t = R();
+function se(e) {
+	let t = H();
 	e.collectionPrefix && (t.collectionPrefix = e.collectionPrefix), e.auth && Object.assign(t.auth, e.auth), e.moderation && Object.assign(t.moderation, e.moderation);
 }
-function z() {
-	return R();
+function U() {
+	return H();
 }
 //#endregion
 //#region src/utils/moderation-strike.ts
-var le = 3, B = 864e5;
-function V(e, t, n = Date.now(), r = B) {
+var ce = 3, W = 864e5;
+function G(e, t, n = Date.now(), r = W) {
 	let i = Math.max(0, Math.floor(Number(e) || 0));
 	if (i <= 0) return 0;
 	let a = typeof t == "number" && Number.isFinite(t) ? t : null;
@@ -40,7 +40,7 @@ function V(e, t, n = Date.now(), r = B) {
 	let o = Math.floor((n - a) / r);
 	return Math.max(0, i - o);
 }
-function H(e, t, n = Date.now(), r = 3, i = B) {
+function K(e, t, n = Date.now(), r = 3, i = W) {
 	let a = Math.max(0, Math.floor(Number(e) || 0));
 	if (a < r) return null;
 	let o = typeof t == "number" && Number.isFinite(t) ? t : null;
@@ -48,17 +48,17 @@ function H(e, t, n = Date.now(), r = 3, i = B) {
 	let s = o + (a - (r - 1)) * i;
 	return s > n ? s : null;
 }
-function U(e, t, n = Date.now(), r = 3, i = B) {
-	return H(e, t, n, r, i) != null;
+function q(e, t, n = Date.now(), r = 3, i = W) {
+	return K(e, t, n, r, i) != null;
 }
-function W(e, t = Date.now()) {
+function J(e, t = Date.now()) {
 	let n = Math.max(0, e - t), r = Math.ceil(n / 36e5);
 	if (r <= 0) return "곧 해제";
 	if (r < 24) return `약 ${r}시간 후 해제`;
 	let i = Math.floor(r / 24), a = r % 24;
 	return a === 0 ? `약 ${i}일 후 해제` : `약 ${i}일 ${a}시간 후 해제`;
 }
-function ue(e) {
+function le(e) {
 	if (e == null) return null;
 	if (typeof e == "number" && Number.isFinite(e)) return e;
 	if (typeof e == "object" && e && "toMillis" in e && typeof e.toMillis == "function") return e.toMillis();
@@ -70,168 +70,178 @@ function ue(e) {
 }
 //#endregion
 //#region src/composables/useMemiBoardAuth.ts
-var G = "__MEMI_BOARD_AUTH_STATE__";
-function de() {
+var Y = "__MEMI_BOARD_AUTH_STATE__";
+function ue() {
 	let e = globalThis;
-	return e[G] || (e[G] = {
-		role: n("user"),
-		rolePending: n(!0),
-		rawBlockCount: n(0),
-		blockAtMs: n(null),
+	return e[Y] || (e[Y] = {
+		role: r("user"),
+		rolePending: r(!0),
+		rawBlockCount: r(0),
+		blockAtMs: r(null),
 		watchStarted: !1
-	}), e[G];
+	}), e[Y];
 }
-function K() {
-	let t = z(), n = de(), i = c(), o = s(), l = a(), { role: u, rolePending: d, rawBlockCount: p, blockAtMs: h } = n;
-	function _() {
+function X() {
+	let t = U(), n = ue(), r = l(), a = c(), s = o(), { role: u, rolePending: d, rawBlockCount: f, blockAtMs: m } = n;
+	function h() {
 		let e = t.moderation?.blockBanThreshold;
 		return e === 0 ? 0 : typeof e == "number" && e > 0 ? Math.floor(e) : 3;
 	}
-	function v() {
+	function _() {
 		let e = t.moderation?.blockBanDecayMs;
-		return typeof e == "number" && e > 0 ? e : B;
+		return typeof e == "number" && e > 0 ? e : W;
 	}
 	function y(e) {
-		return f(i, `${t.collectionPrefix}Users`, e);
+		return p(r, `${t.collectionPrefix}Users`, e);
 	}
 	function b(e) {
 		if (!e) {
-			p.value = 0, h.value = null;
+			f.value = 0, m.value = null;
 			return;
 		}
-		p.value = Math.max(0, Math.floor(Number(e.moderationBlockCount) || 0)), h.value = ue(e.moderationBlockAt);
+		f.value = Math.max(0, Math.floor(Number(e.moderationBlockCount) || 0)), m.value = le(e.moderationBlockAt);
 	}
-	async function C(e) {
-		let t = y(e.uid), n = await m(t);
-		if (!n.exists()) return await S(t, {
+	async function x(e) {
+		let t = y(e.uid), n = await g(t);
+		if (!n.exists()) return await T(t, {
 			role: "user",
 			displayName: e.displayName,
-			updatedAt: x()
+			email: e.email,
+			photoURL: e.photoURL,
+			updatedAt: w()
 		}), b({ moderationBlockCount: 0 }), "user";
 		let r = n.data();
-		return b(r), await w(t, {
+		return b(r), await D(t, {
 			displayName: e.displayName,
-			updatedAt: x()
-		}), r.role ?? "user";
+			email: e.email,
+			photoURL: e.photoURL,
+			updatedAt: w()
+		}), [
+			"admin",
+			"staff",
+			"user"
+		].includes(String(r.role)) ? r.role : "user";
 	}
-	async function T() {
-		let e = l.value?.uid;
+	async function S() {
+		let e = s.value?.uid;
 		if (!e) {
 			b(void 0);
 			return;
 		}
-		let t = await m(y(e));
+		let t = await g(y(e));
 		b(t.exists() ? t.data() : void 0);
 	}
-	n.watchStarted || (n.watchStarted = !0, r(l, async (e) => {
+	n.watchStarted || (n.watchStarted = !0, i(s, async (e) => {
 		if (d.value = !0, !e) {
 			u.value = "user", b(void 0), d.value = !1;
 			return;
 		}
 		try {
-			u.value = await C(e);
+			u.value = await x(e);
 		} catch {
 			u.value = "user";
 		} finally {
 			d.value = !1;
 		}
 	}, { immediate: !0 }));
-	let E = e(() => !!l.value), A = e(() => u.value === "admin"), j = e(() => V(p.value, h.value, Date.now(), v())), M = e(() => {
-		let e = _();
-		return e <= 0 ? !1 : U(p.value, h.value, Date.now(), e, v());
-	}), N = e(() => {
-		let e = _();
+	let C = e(() => !!s.value), E = e(() => u.value === "admin"), O = e(() => u.value === "staff"), k = e(() => E.value || O.value), F = e(() => G(f.value, m.value, Date.now(), _())), I = e(() => {
+		let e = h();
+		return e <= 0 ? !1 : q(f.value, m.value, Date.now(), e, _());
+	}), L = e(() => {
+		let e = h();
 		if (e <= 0) return null;
-		let t = H(p.value, h.value, Date.now(), e, v());
-		return t == null ? null : W(t);
-	}), P = e(() => {
-		if (!M.value) return null;
-		let e = N.value;
+		let t = K(f.value, m.value, Date.now(), e, _());
+		return t == null ? null : J(t);
+	}), ne = e(() => {
+		if (!I.value) return null;
+		let e = L.value;
 		return e ? `콘텐츠 경고가 누적되어 글·댓글 작성이 잠시 제한됐어요. (${e})` : "콘텐츠 경고가 누적되어 글·댓글 작성이 잠시 제한됐어요.";
 	});
-	async function ie() {
-		let e = l.value?.uid, t = _();
+	async function R() {
+		let e = s.value?.uid, t = h();
 		if (!e || t <= 0) return {
 			effectiveCount: 0,
 			restricted: !1,
 			messageSuffix: ""
 		};
-		let n = y(e), r = await m(n);
-		r.exists() ? await w(n, {
-			moderationBlockCount: g(1),
-			moderationBlockAt: x(),
-			updatedAt: x()
-		}) : await S(n, {
+		let n = y(e), r = await g(n);
+		r.exists() ? await D(n, {
+			moderationBlockCount: v(1),
+			moderationBlockAt: w(),
+			updatedAt: w()
+		}) : await T(n, {
 			role: "user",
-			displayName: l.value?.displayName ?? null,
+			displayName: s.value?.displayName ?? null,
 			moderationBlockCount: 1,
-			moderationBlockAt: x(),
-			updatedAt: x()
+			moderationBlockAt: w(),
+			updatedAt: w()
 		});
 		let i = (r.exists() ? Math.max(0, Math.floor(Number(r.data().moderationBlockCount) || 0)) : 0) + 1, a = Date.now();
-		p.value = i, h.value = a;
-		let o = V(i, a, a, v()), s = U(i, a, a, t, v()), c = ` (경고 ${o}/${t})`;
-		if (s) {
-			let e = H(i, a, a, t, v()), n = e == null ? null : W(e, a);
-			c = n ? ` 경고 ${o}회가 되어 글·댓글 작성이 제한됩니다 (${n}).` : ` 경고 ${o}회가 되어 글·댓글 작성이 제한됩니다.`;
+		f.value = i, m.value = a;
+		let o = G(i, a, a, _()), c = q(i, a, a, t, _()), l = ` (경고 ${o}/${t})`;
+		if (c) {
+			let e = K(i, a, a, t, _()), n = e == null ? null : J(e, a);
+			l = n ? ` 경고 ${o}회가 되어 글·댓글 작성이 제한됩니다 (${n}).` : ` 경고 ${o}회가 되어 글·댓글 작성이 제한됩니다.`;
 		}
 		return {
 			effectiveCount: o,
-			restricted: s,
-			messageSuffix: c
+			restricted: c,
+			messageSuffix: l
 		};
 	}
-	function F() {
-		if (!o) throw Error("[memi-board] Firebase Auth가 초기화되지 않았습니다.");
-		return o;
+	function z() {
+		if (!a) throw Error("[memi-board] Firebase Auth가 초기화되지 않았습니다.");
+		return a;
 	}
-	async function ae() {
-		return k(F(), new D());
+	async function re() {
+		return P(z(), new A());
 	}
-	async function I() {
-		let e = new ee("apple.com");
-		return e.addScope("email"), e.addScope("name"), k(F(), e);
+	async function ie() {
+		let e = new j("apple.com");
+		return e.addScope("email"), e.addScope("name"), P(z(), e);
 	}
-	async function oe(e, t) {
-		return te(F(), e, t);
+	async function B(e, t) {
+		return N(z(), e, t);
 	}
-	async function se(e, t, n) {
-		let r = await O(F(), e, t);
-		return n && await re(r.user, { displayName: n }), r;
+	async function ae(e, t, n) {
+		let r = await M(z(), e, t);
+		return n && await te(r.user, { displayName: n }), r;
 	}
-	async function L() {
-		await ne(F());
+	async function oe() {
+		await ee(z());
 	}
-	function R(e) {
-		return E.value && (l.value?.uid === e.authorUid || A.value);
+	function V(e) {
+		return C.value && (s.value?.uid === e.authorUid || k.value);
 	}
-	function ce(e) {
-		return E.value && (l.value?.uid === e.authorUid || A.value);
+	function H(e) {
+		return C.value && (s.value?.uid === e.authorUid || k.value);
 	}
 	return {
-		user: l,
-		isSignedIn: E,
-		isAdmin: A,
+		user: s,
+		isSignedIn: C,
+		isAdmin: E,
+		isStaff: O,
+		canManageContent: k,
 		rolePending: d,
-		moderationBlockCount: j,
-		isWriteRestricted: M,
-		restrictedUntilLabel: N,
-		restrictedMessage: P,
-		signInWithGoogle: ae,
-		signInWithApple: I,
-		signInWithEmail: oe,
-		signUpWithEmail: se,
-		signOut: L,
-		canEdit: R,
-		canDelete: R,
-		canDeleteComment: ce,
-		recordContentModerationBlock: ie,
-		refreshBoardUser: T
+		moderationBlockCount: F,
+		isWriteRestricted: I,
+		restrictedUntilLabel: L,
+		restrictedMessage: ne,
+		signInWithGoogle: re,
+		signInWithApple: ie,
+		signInWithEmail: B,
+		signUpWithEmail: ae,
+		signOut: oe,
+		canEdit: V,
+		canDelete: V,
+		canDeleteComment: H,
+		recordContentModerationBlock: R,
+		refreshBoardUser: S
 	};
 }
 //#endregion
 //#region src/utils/slugify.ts
-function q(e) {
+function de(e) {
 	return e.trim().replace(/\s+/g, "-").replace(/[^a-zA-Z0-9가-힣ㄱ-ㅎㅏ-ㅣ-]/g, "").replace(/-+/g, "-").replace(/^-+|-+$/g, "");
 }
 function fe(e, t = 60) {
@@ -256,25 +266,25 @@ function me(e) {
 		return null;
 	}
 }
-function J(e) {
+function he(e) {
 	return e.match(/(?:^|\/)posts\/([^/]+)\//)?.[1] ?? null;
 }
 //#endregion
 //#region src/utils/postPreview.ts
-function Y(e) {
+function ge(e) {
 	return e.replace(/&amp;/g, "&").replace(/&quot;/g, "\"").replace(/&#39;/g, "'");
 }
-function he(e) {
+function _e(e) {
 	try {
-		let t = new URL(Y(e)), n = t.hostname.toLowerCase().replace(/^www\./, "");
+		let t = new URL(ge(e)), n = t.hostname.toLowerCase().replace(/^www\./, "");
 		if (n === "youtu.be") return t.pathname.split("/").filter(Boolean)[0];
 		if (n.endsWith("youtube.com") || n === "youtube-nocookie.com") return t.pathname.startsWith("/embed/") || t.pathname.startsWith("/shorts/") ? t.pathname.split("/")[2] : t.searchParams.get("v") || void 0;
 	} catch {
 		return;
 	}
 }
-function ge(e, t = []) {
-	let n = e.match(/<img\b[^>]*\bsrc=["']([^"']+)["']/i), r = e.match(/<iframe\b[^>]*\bsrc=["']([^"']+)["']/i), i = t.find((e) => e.type.startsWith("image/"))?.url, a = t.find((e) => e.type.startsWith("video/"))?.url, o = r ? Y(r[1]) : a, s = o ? he(o) : void 0, c = n ? Y(n[1]) : i || (s ? `https://i.ytimg.com/vi/${s}/hqdefault.jpg` : void 0);
+function ve(e, t = []) {
+	let n = e.match(/<img\b[^>]*\bsrc=["']([^"']+)["']/i), r = e.match(/<iframe\b[^>]*\bsrc=["']([^"']+)["']/i), i = t.find((e) => e.type.startsWith("image/"))?.url, a = t.find((e) => e.type.startsWith("video/"))?.url, o = r ? ge(r[1]) : a, s = o ? _e(o) : void 0, c = n ? ge(n[1]) : i || (s ? `https://i.ytimg.com/vi/${s}/hqdefault.jpg` : void 0);
 	return {
 		summary: e.replace(/<style[\s\S]*?<\/style>/gi, " ").replace(/<script[\s\S]*?<\/script>/gi, " ").replace(/<[^>]+>/g, " ").replace(/&nbsp;/g, " ").replace(/&amp;/g, "&").replace(/\s+/g, " ").trim().slice(0, 160),
 		...c ? { previewImage: c } : {},
@@ -283,26 +293,26 @@ function ge(e, t = []) {
 }
 //#endregion
 //#region src/composables/useMemiBoardPosts.ts
-async function X(e) {
-	let t = await N(e).catch(() => ({
+async function ye(e) {
+	let t = await ne(e).catch(() => ({
 		items: [],
 		prefixes: []
 	}));
-	await Promise.all([...t.items.map((e) => A(e)), ...t.prefixes.map((e) => X(e))]);
+	await Promise.all([...t.items.map((e) => F(e)), ...t.prefixes.map((e) => ye(e))]);
 }
-async function _e(e, t) {
+async function be(e, t) {
 	let n = [...new Set([...t].filter(Boolean))];
-	await Promise.all(n.map((t) => A(P(e, t)).catch(() => {})));
+	await Promise.all(n.map((t) => F(R(e, t)).catch(() => {})));
 }
-function ve() {
-	let e = z(), t = c(), n = o(), r = () => e.collectionPrefix, i = () => l(t, `${r()}Posts`), a = (e) => f(t, `${r()}Posts`, e), s = (e) => f(t, `${r()}Posts`, e, "body", "main"), g = (e) => l(t, `${r()}Posts`, e, "comments");
-	function D() {
-		return f(i()).id;
+function xe() {
+	let e = U(), t = l(), n = s(), r = () => e.collectionPrefix, i = () => u(t, `${r()}Posts`), a = (e) => p(t, `${r()}Posts`, e), o = (e) => p(t, `${r()}Posts`, e, "body", "main"), c = (e) => u(t, `${r()}Posts`, e, "comments");
+	function m() {
+		return p(i()).id;
 	}
-	async function ee(e = {}) {
+	async function v(e = {}) {
 		let t = e.pageSize ?? 20, n = [];
-		e.category && n.push(T("category", "==", e.category)), n.push(y("createdAt", "desc")), e.cursor && n.push(C(e.cursor)), n.push(_(t + 1));
-		let r = await h(b(i(), ...n)), a = r.docs.slice(0, t);
+		e.category && n.push(O("category", "==", e.category)), n.push(S("createdAt", "desc")), e.cursor && n.push(E(e.cursor)), n.push(y(t + 1));
+		let r = await _(C(i(), ...n)), a = r.docs.slice(0, t);
 		return {
 			posts: a.map((e) => ({
 				id: e.id,
@@ -312,24 +322,24 @@ function ve() {
 			hasMore: r.docs.length > t
 		};
 	}
-	async function O(e) {
-		let [t, n] = await Promise.all([m(a(e)), m(s(e))]);
+	async function x(e) {
+		let [t, n] = await Promise.all([g(a(e)), g(o(e))]);
 		return t.exists() ? {
 			id: t.id,
 			...t.data(),
 			content: n.exists() ? n.data().content ?? "" : ""
 		} : null;
 	}
-	async function te(e, t) {
-		let n = (await h(b(i(), T("category", "==", e), T("slug", "==", t), _(1)))).docs[0];
-		return n ? O(n.id) : null;
+	async function A(e, t) {
+		let n = (await _(C(i(), O("category", "==", e), O("slug", "==", t), y(1)))).docs[0];
+		return n ? x(n.id) : null;
 	}
-	async function k(e) {
+	async function j(e) {
 		if (!e.category || !e.createdAt) return {
 			previous: null,
 			next: null
 		};
-		let t = [T("category", "==", e.category), y("createdAt", "desc")], [n, r] = await Promise.all([h(b(i(), ...t, C(e.createdAt), _(1))), h(b(i(), ...t, p(e.createdAt), v(1)))]), a = (e) => {
+		let t = [O("category", "==", e.category), S("createdAt", "desc")], [n, r] = await Promise.all([_(C(i(), ...t, E(e.createdAt), y(1))), _(C(i(), ...t, h(e.createdAt), b(1)))]), a = (e) => {
 			let t = e.docs[0];
 			return t ? {
 				id: t.id,
@@ -341,11 +351,11 @@ function ve() {
 			next: a(r)
 		};
 	}
-	async function ne(e) {
-		let t = q(e.title) || "post", n = t, r = 1;
-		for (; !(await h(b(i(), T("category", "==", e.category || ""), T("slug", "==", n), _(1)))).empty;) r++, n = `${t}-${r}`;
-		let o = e.postId || D(), c = ge(e.content, e.attachments);
-		return await S(a(o), {
+	async function M(e) {
+		let t = de(e.title) || "post", n = t, r = 1;
+		for (; !(await _(C(i(), O("category", "==", e.category || ""), O("slug", "==", n), y(1)))).empty;) r++, n = `${t}-${r}`;
+		let s = e.postId || m(), c = ve(e.content, e.attachments);
+		return await T(a(s), {
 			slug: n,
 			title: e.title,
 			...c,
@@ -358,92 +368,249 @@ function ve() {
 			authorPhoto: e.authorPhoto,
 			moderationStatus: "approved",
 			moderationModel: e.moderationModel ?? null,
-			createdAt: x(),
-			updatedAt: x()
-		}), await S(s(o), { content: e.content }), n;
+			createdAt: w(),
+			updatedAt: w()
+		}), await T(o(s), { content: e.content }), n;
 	}
-	async function re(e, t) {
-		let n = ge(t.content, t.attachments);
-		await Promise.all([w(a(e), {
+	async function N(e, t) {
+		let n = ve(t.content, t.attachments);
+		await Promise.all([D(a(e), {
 			title: t.title,
 			...n,
-			previewImage: n.previewImage ? n.previewImage : d(),
-			videoUrl: n.videoUrl ? n.videoUrl : d(),
+			previewImage: n.previewImage ? n.previewImage : f(),
+			videoUrl: n.videoUrl ? n.videoUrl : f(),
 			tags: t.tags ?? [],
-			category: t.category ? t.category : d(),
+			category: t.category ? t.category : f(),
 			attachments: t.attachments ?? [],
-			updatedAt: x()
-		}), S(s(e), { content: t.content }, { merge: !0 })]);
+			updatedAt: w()
+		}), T(o(e), { content: t.content }, { merge: !0 })]);
 	}
-	async function A(e) {
-		let [i, o] = await Promise.all([m(a(e)), m(s(e))]);
+	async function P(e) {
+		let [i, s] = await Promise.all([g(a(e)), g(o(e))]);
 		if (!i.exists()) return;
-		let c = i.data(), l = o.exists() ? String(o.data().content ?? "") : "", d = await h(g(e));
-		for (let e = 0; e < d.docs.length; e += 450) {
-			let n = E(t);
-			d.docs.slice(e, e + 450).forEach((e) => n.delete(e.ref)), await n.commit();
+		let l = i.data(), u = s.exists() ? String(s.data().content ?? "") : "", f = await _(c(e));
+		for (let e = 0; e < f.docs.length; e += 450) {
+			let n = k(t);
+			f.docs.slice(e, e + 450).forEach((e) => n.delete(e.ref)), await n.commit();
 		}
-		let f = M(n), p = /* @__PURE__ */ new Set(), _ = /* @__PURE__ */ new Set();
-		for (let t of c.attachments ?? []) if (t?.path) {
-			p.add(t.path);
-			let n = J(t.path);
-			n && n !== e && _.add(n);
+		let p = L(n), m = /* @__PURE__ */ new Set(), h = /* @__PURE__ */ new Set();
+		for (let t of l.attachments ?? []) if (t?.path) {
+			m.add(t.path);
+			let n = he(t.path);
+			n && n !== e && h.add(n);
 		}
-		for (let t of pe(l)) {
+		for (let t of pe(u)) {
 			let n = me(t);
 			if (!n) continue;
-			p.add(n);
+			m.add(n);
 			let r = n.replace(/\/images\/([^/]+)$/, "/images/thumbnails/$1").replace(/\.[^.]+$/, ".jpg");
-			r !== n && r.includes("/images/thumbnails/") && p.add(r);
+			r !== n && r.includes("/images/thumbnails/") && m.add(r);
 			let i = n.match(/^(.*\/images\/)([^/]+)\.[^.]+$/);
-			i && !n.includes("/thumbnails/") && p.add(`${i[1]}thumbnails/${i[2]}.jpg`);
-			let a = J(n);
-			a && a !== e && _.add(a);
+			i && !n.includes("/thumbnails/") && m.add(`${i[1]}thumbnails/${i[2]}.jpg`);
+			let a = he(n);
+			a && a !== e && h.add(a);
 		}
-		await u(s(e)), await X(P(f, `${r()}/posts/${e}`));
-		for (let e of _) await X(P(f, `${r()}/posts/${e}`));
-		await _e(f, p), await u(a(e));
+		await d(o(e)), await ye(R(p, `${r()}/posts/${e}`));
+		for (let e of h) await ye(R(p, `${r()}/posts/${e}`));
+		await be(p, m), await d(a(e));
 	}
 	return {
-		createPostId: D,
-		getPosts: ee,
-		getPost: O,
-		getPostBySlug: te,
-		getAdjacentPosts: k,
-		createPost: ne,
-		updatePost: re,
-		deletePost: A
+		createPostId: m,
+		getPosts: v,
+		getPost: x,
+		getPostBySlug: A,
+		getAdjacentPosts: j,
+		createPost: M,
+		updatePost: N,
+		deletePost: P
 	};
 }
 //#endregion
 //#region src/composables/useMemiBoardComments.ts
-function ye(t) {
-	let n = z(), r = c(), a = () => n.collectionPrefix, o = e(() => typeof t == "string" ? t : t.value), s = e(() => b(l(r, `${a()}Posts`, o.value, "comments"), y("createdAt", "asc"))), u = i(s);
-	async function d(e) {
-		let t = E(r), n = a(), i = f(l(r, `${n}Posts`, o.value, "comments"));
+var Se = 10, Ce = 5;
+function we(n, a = {}) {
+	let o = U(), s = l(), c = () => o.collectionPrefix, d = e(() => typeof n == "string" ? n : n.value), f = r([]), h = r([]), g = r(a.subscribe !== !1), b = r([]), T = r(!1), D = r(a.subscribe !== !1), A = r(a.subscribe !== !1), j = null, M, N;
+	function P(e) {
+		return e.createdAt?.toMillis?.() ?? 0;
+	}
+	let ee = e(() => {
+		let e = /* @__PURE__ */ new Map();
+		for (let t of [
+			...f.value,
+			...h.value,
+			...b.value
+		]) t.id && e.set(t.id, t);
+		return [...e.values()].sort((e, t) => P(e) - P(t) || String(e.id).localeCompare(String(t.id)));
+	});
+	i(d, async (e) => {
+		if (b.value = [], f.value = [], h.value = [], j = null, clearTimeout(M), M = void 0, N?.(), N = void 0, D.value = a.subscribe !== !1, a.subscribe !== !1) {
+			g.value = !0, A.value = !0;
+			try {
+				let t = _(C(u(s, `${c()}Posts`, e, "comments"), S("createdAt", "desc"), S(m(), "desc")));
+				if (await Promise.all([t.then((t) => {
+					if (d.value !== e) return;
+					let n = t.docs.map((e) => ({
+						id: e.id,
+						...e.data()
+					}));
+					h.value = n.filter((e) => e.parentId === void 0);
+				}), F()]), d.value !== e) return;
+			} finally {
+				d.value === e && (g.value = !1, A.value = !1);
+			}
+		}
+	}, { immediate: !0 });
+	function te() {
+		N?.(), N = x(C(u(s, `${c()}Posts`, d.value, "comments"), O("parentId", "==", null), S("createdAt", "desc"), S(m(), "desc"), y(1)), (e) => {
+			let t = new Map(f.value.map((e) => [e.id, e]));
+			for (let n of e.docChanges()) n.type !== "removed" && t.set(n.doc.id, {
+				id: n.doc.id,
+				...n.doc.data()
+			});
+			f.value = [...t.values()];
+		}, (e) => {
+			console.error("[memi-board:comments] onSnapshot failed", e);
+		});
+	}
+	async function F() {
+		if (!(T.value || !D.value)) {
+			T.value = !0;
+			try {
+				let e = [
+					O("parentId", "==", null),
+					S("createdAt", "asc"),
+					S(m(), "asc"),
+					...j ? [E(j)] : [],
+					y(11)
+				], t = await _(C(u(s, `${c()}Posts`, d.value, "comments"), ...e)), n = t.docs.slice(0, Se), r = n.map((e) => ({
+					id: e.id,
+					...e.data()
+				})), i = new Set(b.value.map((e) => e.id));
+				b.value.push(...r.filter((e) => !i.has(e.id))), j = n.at(-1) ?? j, t.size <= Se && (D.value = !1, M = setTimeout(() => {
+					M = void 0, te();
+				}, 1e3));
+			} finally {
+				T.value = !1;
+			}
+		}
+	}
+	t(() => {
+		clearTimeout(M), N?.();
+	});
+	async function I(e) {
+		let t = k(s), n = c(), r = p(u(s, `${n}Posts`, d.value, "comments"));
+		t.set(r, {
+			postId: d.value,
+			body: e.body,
+			authorUid: e.authorUid,
+			authorName: e.authorName,
+			authorPhoto: e.authorPhoto,
+			moderationStatus: "approved",
+			parentId: null,
+			rootId: r.id,
+			depth: 0,
+			replyToUid: null,
+			replyToName: null,
+			replyCount: 0,
+			isReply: !1,
+			createdAt: w()
+		}), t.update(p(s, `${n}Posts`, d.value), { commentCount: v(1) }), await t.commit();
+	}
+	async function L(e) {
+		if (!e.parent.id) throw Error("답글 대상 댓글을 찾을 수 없습니다.");
+		let t = k(s), n = c(), r = u(s, `${n}Posts`, d.value, "comments"), i = p(r), a = e.parent.parentId == null ? e.parent.id : e.parent.rootId;
+		if (!a) throw Error("댓글 스레드를 찾을 수 없습니다.");
+		let o = Math.min((e.parent.depth ?? 0) + 1, 2);
 		t.set(i, {
-			postId: o.value,
+			postId: d.value,
 			body: e.body,
 			authorUid: e.authorUid,
 			authorName: e.authorName,
 			authorPhoto: e.authorPhoto,
 			moderationStatus: "approved",
-			createdAt: x()
-		}), t.update(f(r, `${n}Posts`, o.value), { commentCount: g(1) }), await t.commit();
+			parentId: e.parent.id,
+			rootId: a,
+			depth: o,
+			replyToUid: e.parent.authorUid,
+			replyToName: e.parent.authorName,
+			replyCount: 0,
+			isReply: !0,
+			createdAt: w()
+		}), t.update(p(r, a), { replyCount: v(1) }), t.update(p(s, `${n}Posts`, d.value), { commentCount: v(1) }), await t.commit();
 	}
-	async function p(e) {
-		let t = E(r), n = a();
-		t.delete(f(r, `${n}Posts`, o.value, "comments", e)), t.update(f(r, `${n}Posts`, o.value), { commentCount: g(-1) }), await t.commit();
+	async function ne(e) {
+		if (!e.id) return;
+		if (e.parentId == null && (e.replyCount ?? 0) > 0) throw Error("답글이 있는 댓글은 현재 삭제할 수 없습니다.");
+		let t = k(s), n = c();
+		t.delete(p(s, `${n}Posts`, d.value, "comments", e.id)), e.parentId && e.rootId && t.update(p(s, `${n}Posts`, d.value, "comments", e.rootId), { replyCount: v(-1) }), t.update(p(s, `${n}Posts`, d.value), { commentCount: v(-1) }), await t.commit(), b.value = b.value.filter((t) => t.id !== e.id), h.value = h.value.filter((t) => t.id !== e.id), f.value = f.value.filter((t) => t.id !== e.id);
 	}
 	return {
-		comments: u,
-		addComment: d,
-		deleteComment: p
+		comments: ee,
+		commentsPending: e(() => A.value || g.value),
+		hasMore: D,
+		loadingMore: T,
+		loadMore: F,
+		addComment: I,
+		addReply: L,
+		deleteComment: ne
+	};
+}
+function Te(e, n) {
+	let i = U(), a = l(), o = r([]), s = r(!1), c = r(!1), d = r(!0), f = null, p;
+	function h(e) {
+		return e.sort((e, t) => (e.createdAt?.toMillis?.() ?? 0) - (t.createdAt?.toMillis?.() ?? 0) || String(e.id).localeCompare(String(t.id)));
+	}
+	function g() {
+		p ||= x(C(u(a, `${i.collectionPrefix}Posts`, e, "comments"), O("rootId", "==", n), O("isReply", "==", !0), S("createdAt", "desc"), S(m(), "desc"), y(1)), (e) => {
+			let t = new Map(o.value.map((e) => [e.id, e]));
+			for (let n of e.docChanges()) n.type !== "removed" && t.set(n.doc.id, {
+				id: n.doc.id,
+				...n.doc.data()
+			});
+			o.value = h([...t.values()]);
+		}, (e) => {
+			console.error("[memi-board:replies] onSnapshot failed", e);
+		});
+	}
+	async function v() {
+		if (!(s.value || !d.value)) {
+			s.value = !0;
+			try {
+				let t = [
+					O("rootId", "==", n),
+					O("isReply", "==", !0),
+					S("createdAt", "asc"),
+					S(m(), "asc"),
+					...f ? [E(f)] : [],
+					y(6)
+				], r = await _(C(u(a, `${i.collectionPrefix}Posts`, e, "comments"), ...t)), s = new Set(o.value.map((e) => e.id)), l = r.docs.slice(0, Ce), p = l.map((e) => ({
+					id: e.id,
+					...e.data()
+				})).filter((e) => !s.has(e.id));
+				o.value = h([...o.value, ...p]), f = l.at(-1) ?? f, c.value = !0, r.size <= Ce && (d.value = !1, g());
+			} finally {
+				s.value = !1;
+			}
+		}
+	}
+	function b() {
+		p?.(), p = void 0, o.value = [], f = null, c.value = !1, d.value = !0;
+	}
+	async function w() {
+		b(), await v();
+	}
+	return t(() => p?.()), {
+		replies: o,
+		loading: s,
+		loaded: c,
+		hasMore: d,
+		loadMore: v,
+		refresh: w
 	};
 }
 //#endregion
 //#region src/utils/moderation-prompt.ts
-var be = "당신은 게시판 콘텐츠를 심사하는 엄격한 모더레이터입니다.\n아래 텍스트에 욕설·비속어·성희롱·혐오·위협·스팸·도배성 광고가 있으면 반드시 거부(flagged=true)합니다.\n\nflagged=true 예:\n- 욕설/비속어: 씨발, 시발, 병신, 지랄, 좆, 개새끼, 존나, fuck, shit, bitch 등\n- 성적 모욕, 혐오 발언, 협박\n- 게시판 주제와 무관한 도배성 광고/스팸\n\nflagged=false:\n- 게시판 주제에 맞는 정상적인 글/댓글 (강한 의견이나 정당한 비판은 허용)\n\nJSON만 출력:\n{\"flagged\":boolean,\"category\":\"none\"|\"abuse\"|\"spam\"|\"adult\"|\"violence\"|\"other\",\"reason\":string}\n- flagged=true면 category를 고르고, reason은 한국어로 **무엇이 문제인지** 구체적으로 1문장\n  (예: \"욕설(비속어)이 포함되어 게시할 수 없습니다.\", \"광고·스팸성 문구가 있어 게시할 수 없습니다.\")\n  욕설 단어 전체를 그대로 길게 인용하지 말고, 유형(욕설/혐오/스팸 등)을 분명히 밝힌다.\n- flagged=false면 category는 \"none\", reason은 \"\"", xe = {
+var Ee = "당신은 게시판 콘텐츠를 심사하는 엄격한 모더레이터입니다.\n아래 텍스트에 욕설·비속어·성희롱·혐오·위협·스팸·도배성 광고가 있으면 반드시 거부(flagged=true)합니다.\n\nflagged=true 예:\n- 욕설/비속어: 씨발, 시발, 병신, 지랄, 좆, 개새끼, 존나, fuck, shit, bitch 등\n- 성적 모욕, 혐오 발언, 협박\n- 게시판 주제와 무관한 도배성 광고/스팸\n\nflagged=false:\n- 게시판 주제에 맞는 정상적인 글/댓글 (강한 의견이나 정당한 비판은 허용)\n\nJSON만 출력:\n{\"flagged\":boolean,\"category\":\"none\"|\"abuse\"|\"spam\"|\"adult\"|\"violence\"|\"other\",\"reason\":string}\n- flagged=true면 category를 고르고, reason은 한국어로 **무엇이 문제인지** 구체적으로 1문장\n  (예: \"욕설(비속어)이 포함되어 게시할 수 없습니다.\", \"광고·스팸성 문구가 있어 게시할 수 없습니다.\")\n  욕설 단어 전체를 그대로 길게 인용하지 말고, 유형(욕설/혐오/스팸 등)을 분명히 밝힌다.\n- flagged=false면 category는 \"none\", reason은 \"\"", De = {
 	abuse: "욕설·비속어·모욕",
 	spam: "스팸·광고",
 	adult: "선정적·성인 내용",
@@ -458,10 +625,10 @@ function Z(e) {
 	}
 	let t = (e.reason || "").trim();
 	if (t) return t;
-	let n = e.category && e.category !== "none" ? xe[e.category] || e.category : "";
+	let n = e.category && e.category !== "none" ? De[e.category] || e.category : "";
 	return n ? `${n}이(가) 포함되어 게시할 수 없습니다. 내용을 수정해 주세요.` : "게시할 수 없는 내용이 포함되어 있습니다. 내용을 수정해 주세요.";
 }
-var Se = [
+var Oe = [
 	"씨발",
 	"시발",
 	"시이발",
@@ -487,10 +654,10 @@ var Se = [
 	"bitch",
 	"asshole"
 ];
-function Ce(e) {
+function ke(e) {
 	return new RegExp(e.join("|"), "i");
 }
-var we = /* @__PURE__ */ new Set([
+var Ae = /* @__PURE__ */ new Set([
 	"none",
 	"abuse",
 	"spam",
@@ -498,7 +665,7 @@ var we = /* @__PURE__ */ new Set([
 	"violence",
 	"other"
 ]);
-function Te(e) {
+function je(e) {
 	let t = e.trim();
 	if (!t) return null;
 	let n;
@@ -516,7 +683,7 @@ function Te(e) {
 	if (typeof n != "object" || !n) return null;
 	let r = n;
 	if (typeof r.flagged != "boolean") return null;
-	let i = typeof r.category == "string" && we.has(r.category) ? r.category : r.flagged ? "other" : "none", a = typeof r.reason == "string" ? r.reason : "";
+	let i = typeof r.category == "string" && Ae.has(r.category) ? r.category : r.flagged ? "other" : "none", a = typeof r.reason == "string" ? r.reason : "";
 	return {
 		flagged: r.flagged,
 		category: i,
@@ -525,15 +692,15 @@ function Te(e) {
 }
 //#endregion
 //#region src/composables/useMemiBoardModeration.ts
-var Ee = {
+var Me = {
 	flagged: !1,
 	category: "none",
 	reason: "",
 	via: "empty"
 };
-function De() {
-	let e = z().moderation ?? {}, t = o(), { isWriteRestricted: n, restrictedMessage: r, recordContentModerationBlock: i } = K(), a = Ce([...Se, ...e.localBlocklist ?? []]);
-	function s(e) {
+function Ne() {
+	let e = U().moderation ?? {}, t = s(), { isWriteRestricted: n, restrictedMessage: r, recordContentModerationBlock: i } = X(), a = ke([...Oe, ...e.localBlocklist ?? []]);
+	function o(e) {
 		let t = e.match(a);
 		return t ? {
 			flagged: !0,
@@ -547,21 +714,21 @@ function De() {
 		} : null;
 	}
 	function c() {
-		let n = e.model ?? "gemini-3.5-flash-lite", r = e.useLimitedUseAppCheckTokens !== !1, i = oe(t, {
-			backend: new ae(),
+		let n = e.model ?? "gemini-3.5-flash-lite", r = e.useLimitedUseAppCheckTokens !== !1, i = ae(t, {
+			backend: new ie(),
 			useLimitedUseAppCheckTokens: r
 		});
-		return se(i, {
+		return oe(i, {
 			model: n,
-			systemInstruction: be,
+			systemInstruction: Ee,
 			generationConfig: {
 				temperature: 0,
 				maxOutputTokens: 256,
 				responseMimeType: "application/json",
-				responseSchema: I.object({ properties: {
-					flagged: I.boolean(),
-					category: I.string(),
-					reason: I.string()
+				responseSchema: B.object({ properties: {
+					flagged: B.boolean(),
+					category: B.string(),
+					reason: B.string()
 				} })
 			}
 		});
@@ -610,17 +777,17 @@ function De() {
 		};
 		let i = t.trim();
 		if (!i) return {
-			...Ee,
+			...Me,
 			via: "empty"
 		};
-		let a = s(i);
+		let a = o(i);
 		if (a) return d(a);
 		if (e.enabled === !1) return {
-			...Ee,
+			...Me,
 			via: "disabled"
 		};
 		try {
-			let e = Te((await c().generateContent(`심사할 텍스트:\n"""${i.slice(0, 4e3)}"""`)).response.text());
+			let e = je((await c().generateContent(`심사할 텍스트:\n"""${i.slice(0, 4e3)}"""`)).response.text());
 			if (!e) return l();
 			let t = {
 				flagged: e.flagged,
@@ -645,14 +812,14 @@ function De() {
 			via: "restricted"
 		};
 		if (e.enabled === !1 || !e.moderateImages) return {
-			...Ee,
+			...Me,
 			via: "disabled"
 		};
 		try {
 			let e = await new Promise((e, n) => {
 				let r = new FileReader();
 				r.onload = () => e(r.result.split(",")[1] ?? ""), r.onerror = n, r.readAsDataURL(t);
-			}), n = Te((await c().generateContent([{ inlineData: {
+			}), n = je((await c().generateContent([{ inlineData: {
 				mimeType: t.type || "image/jpeg",
 				data: e
 			} }, "이 이미지를 심사해 주세요."])).response.text());
@@ -679,7 +846,7 @@ function De() {
 }
 //#endregion
 //#region src/utils/compressImage.ts
-async function Oe(e, { maxWidth: t = 400, quality: n = .8 } = {}) {
+async function Pe(e, { maxWidth: t = 400, quality: n = .8 } = {}) {
 	return new Promise((r, i) => {
 		let a = new Image(), o = URL.createObjectURL(e);
 		a.onload = () => {
@@ -699,11 +866,11 @@ async function Oe(e, { maxWidth: t = 400, quality: n = .8 } = {}) {
 }
 //#endregion
 //#region src/composables/useMemiBoardStorage.ts
-var ke = 5242880;
-function Ae() {
-	let e = z(), t = o(), n = () => e.collectionPrefix;
+var Fe = 5242880;
+function Ie() {
+	let e = U(), t = s(), n = () => e.collectionPrefix;
 	function r(e, r, i) {
-		let a = M(t), o = `${n()}/posts/${r}/attachments/${Date.now()}-${fe(e.name)}`, s = P(a, o), c = F(s, e, {
+		let a = L(t), o = `${n()}/posts/${r}/attachments/${Date.now()}-${fe(e.name)}`, s = R(a, o), c = re(s, e, {
 			contentType: e.type || "application/octet-stream",
 			contentDisposition: `attachment; filename*=UTF-8''${encodeURIComponent(e.name)}`
 		});
@@ -712,7 +879,7 @@ function Ae() {
 				c.on("state_changed", (e) => {
 					i && e.totalBytes > 0 && i(e.bytesTransferred / e.totalBytes);
 				}, n, async () => {
-					let n = await j(s);
+					let n = await I(s);
 					t({
 						name: e.name,
 						url: n,
@@ -726,130 +893,199 @@ function Ae() {
 		};
 	}
 	async function i(e) {
-		let n = M(t);
-		await A(P(n, e.path)).catch(() => {});
+		let n = L(t);
+		await F(R(n, e.path)).catch(() => {});
 	}
 	async function a(e, r) {
 		if (!e.type.startsWith("image/")) throw Error("이미지 파일만 업로드할 수 있습니다.");
-		if (e.size > 5242880) throw Error(`이미지는 ${ke / 1024 / 1024}MB 이하여야 합니다.`);
-		let i = M(t), a = (e.name.split(".").pop() || e.type.split("/")[1] || "png").replace(/[^a-zA-Z0-9]/g, "").slice(0, 8) || "png", o = fe(e.name.replace(/\.[^.]+$/, "") || "image", 40), s = `${Date.now()}-${o || "image"}`, c = r || `new-${Date.now()}`, l = `${n()}/posts/${c}/images/${s}.${a}`, u = P(i, l);
-		await ie(u, e, { contentType: e.type || "image/png" });
-		let d = await j(u), f = await Oe(e, {
+		if (e.size > 5242880) throw Error(`이미지는 ${Fe / 1024 / 1024}MB 이하여야 합니다.`);
+		let i = L(t), a = (e.name.split(".").pop() || e.type.split("/")[1] || "png").replace(/[^a-zA-Z0-9]/g, "").slice(0, 8) || "png", o = fe(e.name.replace(/\.[^.]+$/, "") || "image", 40), s = `${Date.now()}-${o || "image"}`, c = r || `new-${Date.now()}`, l = `${n()}/posts/${c}/images/${s}.${a}`, u = R(i, l);
+		await z(u, e, { contentType: e.type || "image/png" });
+		let d = await I(u), f = await Pe(e, {
 			maxWidth: 400,
 			quality: .8
-		}), p = `${n()}/posts/${c}/images/thumbnails/${s}.jpg`, m = P(i, p);
-		return await ie(m, f, { contentType: "image/jpeg" }), {
+		}), p = `${n()}/posts/${c}/images/thumbnails/${s}.jpg`, m = R(i, p);
+		return await z(m, f, { contentType: "image/jpeg" }), {
 			originalUrl: d,
 			originalPath: l,
-			thumbnailUrl: await j(m),
+			thumbnailUrl: await I(m),
 			thumbnailPath: p
 		};
 	}
-	async function s(e) {
-		let n = M(t);
-		await Promise.all([A(P(n, e.originalPath)).catch(() => {}), A(P(n, e.thumbnailPath)).catch(() => {})]);
+	async function o(e) {
+		let n = L(t);
+		await Promise.all([F(R(n, e.originalPath)).catch(() => {}), F(R(n, e.thumbnailPath)).catch(() => {})]);
 	}
 	return {
 		uploadAttachment: r,
 		deleteAttachment: i,
 		uploadEditorImage: a,
-		deleteEditorImage: s
+		deleteEditorImage: o
 	};
 }
 //#endregion
 //#region src/composables/useMemiBoardSettings.ts
-var je = [
+var Le = [
 	{
 		id: "free",
 		label: "자유",
 		listView: "default",
+		writeRole: "user",
 		order: 0
 	},
 	{
 		id: "notice",
 		label: "공지",
 		listView: "default",
+		writeRole: "admin",
 		order: 1
 	},
 	{
 		id: "question",
 		label: "질문",
 		listView: "default",
+		writeRole: "user",
 		order: 2
 	}
 ];
-function Me() {
-	let t = z(), n = c(), { isSignedIn: r } = K(), a = e(() => f(n, `${t.collectionPrefix}Settings`, "config")), o = e(() => l(n, `${t.collectionPrefix}Settings`, "config", "categories")), s = e(() => b(o.value, y("order", "asc"))), { data: d, pending: p } = i(s), m = e(() => d.value.map((e, t) => ({
+function Re() {
+	let t = U(), n = l(), { isSignedIn: r } = X(), i = e(() => p(n, `${t.collectionPrefix}Settings`, "config")), o = e(() => u(n, `${t.collectionPrefix}Settings`, "config", "categories")), s = e(() => C(o.value, S("order", "asc"))), { data: c, pending: f } = a(s, { ssrKey: `${t.collectionPrefix}Settings/config/categories` }), m = e(() => c.value.map((e, t) => ({
 		...e,
 		id: e.id,
 		order: typeof e.order == "number" ? e.order : t,
-		listView: e.listView ?? "default"
+		listView: e.listView ?? "default",
+		writeRole: e.writeRole ?? "user"
 	})));
 	function h(e) {
 		if (e) return m.value.find((t) => t.id === e)?.label ?? e;
 	}
 	async function g(e, t = e.order ?? 0) {
 		if (!r.value) throw Error("로그인이 필요합니다.");
-		let n = e.id.trim(), i = e.label.trim();
-		if (!n || !i) throw Error("카테고리 ID와 이름을 입력해 주세요.");
-		await S(a.value, { updatedAt: x() }, { merge: !0 }), await S(f(o.value, n), {
-			label: i,
+		let n = e.id.trim(), a = e.label.trim();
+		if (!n || !a) throw Error("카테고리 ID와 이름을 입력해 주세요.");
+		await T(i.value, { updatedAt: w() }, { merge: !0 }), await T(p(o.value, n), {
+			label: a,
 			listView: e.listView ?? "default",
+			writeRole: e.writeRole ?? "user",
 			order: t,
-			updatedAt: x()
+			updatedAt: w()
 		}, { merge: !0 });
 	}
 	async function _(e) {
 		if (!r.value) throw Error("로그인이 필요합니다.");
-		let t = E(n);
-		t.set(a.value, { updatedAt: x() }, { merge: !0 }), e.forEach((e, n) => {
+		let t = k(n);
+		t.set(i.value, { updatedAt: w() }, { merge: !0 }), e.forEach((e, n) => {
 			let r = e.id.trim(), i = e.label.trim();
 			if (!r || !i) throw Error("카테고리 ID와 이름을 입력해 주세요.");
-			t.set(f(o.value, r), {
+			t.set(p(o.value, r), {
 				label: i,
 				listView: e.listView ?? "default",
+				writeRole: e.writeRole ?? "user",
 				order: n,
-				updatedAt: x()
+				updatedAt: w()
 			}, { merge: !0 });
 		}), await t.commit();
 	}
 	async function v(e) {
 		if (!r.value) throw Error("로그인이 필요합니다.");
-		await u(f(o.value, e));
+		await d(p(o.value, e));
 	}
-	async function C() {
+	async function y() {
 		return Promise.resolve();
 	}
-	async function w(e) {
+	async function b(e) {
 		let t = e.trim();
 		if (!t) throw Error("카테고리 이름을 입력해 주세요.");
 		if (!r.value) throw Error("로그인이 필요합니다.");
 		let n = m.value.find((e) => e.label === t);
 		if (n) return n.id;
-		let i = q(t) || `cat-${Date.now()}`, a = i, o = 2, s = new Set(m.value.map((e) => e.id));
+		let i = de(t) || `cat-${Date.now()}`, a = i, o = 2, s = new Set(m.value.map((e) => e.id));
 		for (; s.has(a);) a = `${i}-${o++}`;
 		return await g({
 			id: a,
 			label: t,
 			listView: "default",
+			writeRole: "user",
 			order: m.value.length
 		}), a;
 	}
 	return {
 		categories: m,
 		categoryLabel: h,
-		settingsPending: p,
-		ensureSettings: C,
-		addCategory: w,
+		settingsPending: f,
+		ensureSettings: y,
+		addCategory: b,
 		saveCategory: g,
 		saveCategories: _,
 		deleteCategory: v,
-		DEFAULT_CATEGORIES: je
+		DEFAULT_CATEGORIES: Le
+	};
+}
+//#endregion
+//#region src/composables/useMemiBoardUsers.ts
+var ze = [
+	{
+		value: "admin",
+		label: "관리자",
+		description: "사용자 역할, 게시판 설정과 모든 콘텐츠를 관리합니다."
+	},
+	{
+		value: "staff",
+		label: "스태프",
+		description: "모든 게시글과 댓글을 관리하지만 사용자 역할과 게시판 설정은 바꿀 수 없습니다."
+	},
+	{
+		value: "user",
+		label: "사용자",
+		description: "글과 댓글을 작성하고 본인이 작성한 콘텐츠만 수정·삭제할 수 있습니다."
+	}
+];
+function Be() {
+	let e = U(), t = l(), n = `${e.collectionPrefix}Users`, r = a(u(t, n), { ssrKey: `${n}-management` });
+	async function i(e, r) {
+		if (!ze.some((e) => e.value === r)) throw Error("지원하지 않는 역할입니다.");
+		await D(p(t, n, e), {
+			role: r,
+			updatedAt: w()
+		});
+	}
+	return {
+		users: r,
+		usersPending: r.pending,
+		updateUserRole: i
 	};
 }
 //#endregion
 //#region src/data/versionHistory.ts
-var Ne = [
+var Ve = [
+	{
+		version: "0.9.0",
+		date: "2026-08-04",
+		highlights: [
+			"댓글에 답글을 달고 대화 흐름을 최대 2단계로 볼 수 있어요",
+			"댓글 10개·답글 5개 단위로 이어서 보고 마지막부터 새 댓글을 실시간으로 받아요",
+			"더보기 버튼이 화면에 들어오면 로딩 표시와 함께 다음 댓글을 자동으로 불러와요"
+		]
+	},
+	{
+		version: "0.8.0",
+		date: "2026-08-04",
+		highlights: [
+			"최근 댓글 5개는 실시간으로 보고 이전 댓글은 5개씩 불러올 수 있어요",
+			"댓글 시간이 상대시간으로 표시되고 전체 시간은 툴팁으로 확인할 수 있어요",
+			"댓글 작성 영역을 대화 흐름의 맨 아래로 옮겼어요"
+		]
+	},
+	{
+		version: "0.7.0",
+		date: "2026-08-04",
+		highlights: ["카테고리마다 글쓰기 권한을 일반 이상·스태프 이상·관리자만으로 설정할 수 있어요", "게시판 설정 화면의 SSR hydration 경고를 해결했어요"]
+	},
+	{
+		version: "0.6.0",
+		date: "2026-08-04",
+		highlights: ["관리자가 게시판 사용자를 확인하고 관리자·스태프·사용자 역할을 설정할 수 있어요", "스태프는 게시판 설정이나 사용자 역할은 바꾸지 않고 게시글과 댓글을 관리할 수 있어요"]
+	},
 	{
 		version: "0.5.0",
 		date: "2026-08-04",
@@ -896,7 +1132,7 @@ var Ne = [
 ];
 //#endregion
 //#region src/utils/formatDate.ts
-function Pe(e) {
+function He(e) {
 	return e?.toDate ? e.toDate().toLocaleDateString("ko-KR") : "";
 }
 //#endregion
@@ -908,7 +1144,7 @@ function $(e) {
 	let t = e;
 	return t = t.replace(/`([^`]+)`/g, "<code>$1</code>"), t = t.replace(/!\[([^\]]*)\]\((https?:\/\/[^)\s]+)\)/g, "<img src=\"$2\" alt=\"$1\" class=\"max-w-full h-auto rounded-lg my-3\" loading=\"lazy\" />"), t = t.replace(/\[([^\]]+)\]\((https?:\/\/[^)\s]+)\)/g, "<a href=\"$2\" target=\"_blank\" rel=\"noopener noreferrer\" class=\"text-primary underline\">$1</a>"), t = t.replace(/\*\*([^*]+)\*\*/g, "<strong>$1</strong>"), t = t.replace(/\*([^*]+)\*/g, "<em>$1</em>"), t = t.replace(/~~([^~]+)~~/g, "<del>$1</del>"), t;
 }
-function Fe(e) {
+function Ue(e) {
 	if (!e?.trim()) return "";
 	let t = e.replace(/\r\n/g, "\n").split("\n"), n = [], r = 0, i = !1, a = [], o = null, s = [];
 	function c() {
@@ -973,6 +1209,6 @@ function Fe(e) {
 	return c(), i && a.length && n.push(`<pre class="overflow-x-auto rounded-lg bg-muted p-3 text-sm"><code>${a.join("\n")}</code></pre>`), n.join("\n");
 }
 //#endregion
-export { B as DEFAULT_BLOCK_BAN_DECAY_MS, le as DEFAULT_BLOCK_BAN_THRESHOLD, je as DEFAULT_CATEGORIES, ke as EDITOR_IMAGE_MAX_BYTES, Oe as compressImage, ce as configureMemiBoard, V as effectiveModerationBlockCount, pe as extractEditorImageUrls, Pe as formatDate, W as formatRestrictedUntilLabel, U as isModerationWriteRestricted, H as moderationWriteRestrictedUntilMs, J as postNamespaceFromStoragePath, Fe as renderMarkdownToHtml, q as slugify, me as storagePathFromDownloadUrl, K as useMemiBoardAuth, ye as useMemiBoardComments, z as useMemiBoardConfig, De as useMemiBoardModeration, ve as useMemiBoardPosts, Me as useMemiBoardSettings, Ae as useMemiBoardStorage, Ne as versionHistory };
+export { ze as BOARD_USER_ROLES, W as DEFAULT_BLOCK_BAN_DECAY_MS, ce as DEFAULT_BLOCK_BAN_THRESHOLD, Le as DEFAULT_CATEGORIES, Fe as EDITOR_IMAGE_MAX_BYTES, Pe as compressImage, se as configureMemiBoard, G as effectiveModerationBlockCount, pe as extractEditorImageUrls, He as formatDate, J as formatRestrictedUntilLabel, q as isModerationWriteRestricted, K as moderationWriteRestrictedUntilMs, he as postNamespaceFromStoragePath, Ue as renderMarkdownToHtml, de as slugify, me as storagePathFromDownloadUrl, X as useMemiBoardAuth, we as useMemiBoardComments, U as useMemiBoardConfig, Ne as useMemiBoardModeration, xe as useMemiBoardPosts, Te as useMemiBoardReplies, Re as useMemiBoardSettings, Ie as useMemiBoardStorage, Be as useMemiBoardUsers, Ve as versionHistory };
 
 //# sourceMappingURL=index.js.map