memi-board 0.56.2 → 0.57.0

package/dist/runtime/components/ProfileEditModal.vue

@@ -2,7 +2,7 @@
 import { computed, ref, watch } from 'vue'
 import { query, serverTimestamp, where, writeBatch, getDocs } from 'firebase/firestore'
 import { useFirestore } from 'vuefire'
-import { boardUserDoc, commentsCol, postsCol, useBoardPathConfig, useMemiBoardI18n } from 'memi-board/runtime'
+import { boardUserDoc, commentsCol, postsCol, useBoardPathConfig, useMemiBoardI18n, useMemiBoardModeration } from 'memi-board/runtime'
 import type { BoardUserModel } from 'memi-board/runtime'
 import { useMemiBoardStorage } from 'memi-board/storage'
 import MemiBoardAvatarCropModal from './AvatarCropModal.vue'
@@ -18,11 +18,13 @@ const emit = defineEmits<{ saved: [] }>()
 
 const db = useFirestore()
 const { t } = useMemiBoardI18n()
+const { checkText: checkName } = useMemiBoardModeration({ context: 'profile-name' })
 
 const displayName = ref('')
 const bio = ref('')
 const photoURL = ref<string | null>(null)
 const saving = ref(false)
+const checkingName = ref(false)
 const error = ref('')
 
 // 열릴 때마다 최신 프로필로 폼을 리셋 — 이전에 취소한 입력이 남아있지 않게.
@@ -128,6 +130,15 @@ async function onSave() {
   saving.value = true
   error.value = ''
   try {
+    if (trimmedName !== (props.profile?.displayName ?? '').trim()) {
+      checkingName.value = true
+      const review = await checkName(trimmedName)
+      checkingName.value = false
+      if (review.flagged || review.error) {
+        error.value = review.reason || t('profileEditModal.nameRejected')
+        return
+      }
+    }
     let nextPhotoURL = props.profile?.photoURL ?? null
     if (pendingAvatarFile) {
       avatarUploading.value = true
@@ -146,6 +157,7 @@ async function onSave() {
   }
   finally {
     saving.value = false
+    checkingName.value = false
     avatarUploading.value = false
   }
 }
@@ -155,6 +167,8 @@ async function onSave() {
   <UModal
     v-model:open="open"
     :title="t('profileEditModal.title')"
+    :dismissible="!saving"
+    :close="!saving"
     :ui="{ content: 'sm:max-w-md' }"
   >
     <template #body>
@@ -172,6 +186,7 @@ async function onSave() {
             variant="outline"
             size="sm"
             @click="avatarInput?.click()"
+            :disabled="saving"
           />
           <input
             ref="avatarInput"
@@ -182,11 +197,12 @@ async function onSave() {
           >
         </div>
 
-        <UFormField :label="t('profileEditModal.name')">
+        <UFormField :label="t('profileEditModal.name')" :help="t('profileEditModal.nameReviewHelp')">
           <UInput
             v-model="displayName"
             :placeholder="t('profileEditModal.name')"
             :maxlength="40"
+            :disabled="saving"
             class="w-full"
           />
         </UFormField>
@@ -196,6 +212,7 @@ async function onSave() {
             v-model="bio"
             :rows="3"
             :maxlength="200"
+            :disabled="saving"
             :placeholder="t('profileEditModal.bioPlaceholder')"
             class="w-full"
           />
@@ -224,7 +241,7 @@ async function onSave() {
           :loading="saving"
           @click="onSave"
         >
-          {{ t('common.action.save') }}
+          {{ checkingName ? t('profileEditModal.checkingName') : t('common.action.save') }}
         </UButton>
       </div>
     </template>

package/dist/runtime/components/UserListControls.vue

@@ -0,0 +1,29 @@
+<script setup lang="ts">
+import { computed } from 'vue'
+import { useMemiBoardI18n } from 'memi-board/runtime'
+import type { UserDirectorySort, UserDirectoryDirection } from 'memi-board/runtime'
+
+const sort = defineModel<UserDirectorySort>('sort', { required: true })
+const direction = defineModel<UserDirectoryDirection>('direction', { required: true })
+const pageSize = defineModel<number>('pageSize', { required: true })
+defineProps<{ disabled?: boolean }>()
+const { t, formatNumber } = useMemiBoardI18n()
+const sortItems = computed(() => [
+  { label: t('users.sort.name'), value: 'name' },
+  { label: t('users.sort.role'), value: 'role' },
+])
+const directionItems = computed(() => [
+  { label: t('users.sort.asc'), value: 'asc' },
+  { label: t('users.sort.desc'), value: 'desc' },
+])
+const sizeItems = computed(() => [10, 25, 50].map(value => ({ label: t('users.pagination.perPage', { count: formatNumber(value) }), value })))
+</script>
+
+<template>
+  <div class="flex flex-wrap items-center gap-2">
+    <UIcon name="i-lucide-arrow-up-down" class="size-4 shrink-0 text-muted" />
+    <USelect v-model="sort" :items="sortItems" :aria-label="t('users.sort.label')" :disabled="disabled" class="min-w-28" />
+    <USelect v-model="direction" :items="directionItems" :aria-label="t('users.sort.direction')" :disabled="disabled" class="min-w-28" />
+    <USelect v-model="pageSize" :items="sizeItems" :aria-label="t('users.pagination.pageSize')" :disabled="disabled" class="min-w-32 sm:ml-auto" />
+  </div>
+</template>

package/dist/runtime/components/UserListPagination.vue

@@ -0,0 +1,17 @@
+<script setup lang="ts">
+import { useMemiBoardI18n } from 'memi-board/runtime'
+
+defineProps<{ page: number; count: number; hasNext: boolean; pending: boolean }>()
+defineEmits<{ previous: []; next: [] }>()
+const { t, formatNumber } = useMemiBoardI18n()
+</script>
+
+<template>
+  <nav class="flex flex-wrap items-center justify-between gap-3" :aria-label="t('users.pagination.label')">
+    <p aria-live="polite" class="text-sm text-muted">{{ t('users.pagination.status', { page: formatNumber(page), count: formatNumber(count) }) }}</p>
+    <div class="flex items-center gap-2">
+      <UButton icon="i-lucide-chevron-left" color="neutral" variant="outline" :label="t('common.action.prev')" :disabled="pending || page <= 1" @click="$emit('previous')" />
+      <UButton trailing-icon="i-lucide-chevron-right" color="neutral" variant="outline" :label="t('common.action.next')" :disabled="pending || !hasNext" @click="$emit('next')" />
+    </div>
+  </nav>
+</template>

package/dist/runtime/components/UserManagementEmail.vue

@@ -0,0 +1,21 @@
+<script setup lang="ts">
+import { computed } from 'vue'
+import { doc } from 'firebase/firestore'
+import { useDocument, useFirestore } from 'vuefire'
+import { useBoardPathConfig, useMemiBoardI18n } from 'memi-board/runtime'
+import type { BoardUserPrivateModel } from 'memi-board/runtime'
+
+const props = defineProps<{ uid: string; authorized: boolean }>()
+const db = useFirestore()
+const { t } = useMemiBoardI18n()
+const privateRef = computed(() => props.authorized && props.uid
+  ? doc(db, useBoardPathConfig().usersCollection, props.uid, 'private', 'info')
+  : null)
+const { data: info, pending, error } = useDocument<BoardUserPrivateModel>(privateRef)
+</script>
+
+<template>
+  <p class="truncate text-sm text-muted">
+    {{ pending ? t('common.label.loading') : error ? t('users.emailLoadFailed') : info?.email || t('users.noEmail') }}
+  </p>
+</template>

package/dist/runtime/components/UserRoleGuide.vue

@@ -0,0 +1,38 @@
+<script setup lang="ts">
+import { BOARD_USER_ROLES, useMemiBoardI18n } from 'memi-board/runtime'
+
+const { t } = useMemiBoardI18n()
+const appearance = {
+  owner: { icon: 'i-lucide-crown', color: 'text-amber-500 dark:text-amber-400', badge: 'border-amber-500/30 bg-amber-500/10' },
+  admin: { icon: 'i-lucide-shield-check', color: 'text-teal-600 dark:text-teal-400', badge: 'border-teal-500/30 bg-teal-500/10' },
+  manager: { icon: 'i-lucide-user-cog', color: 'text-blue-500 dark:text-blue-400', badge: 'border-blue-500/30 bg-blue-500/10' },
+  staff: { icon: 'i-lucide-user-check', color: 'text-green-600 dark:text-green-400', badge: 'border-green-500/30 bg-green-500/10' },
+  user: { icon: 'i-lucide-user-round', color: 'text-muted', badge: 'border-default bg-elevated' },
+}
+</script>
+
+<template>
+  <details class="group overflow-hidden rounded-xl border border-default bg-muted/30">
+    <summary class="flex cursor-pointer list-none items-center gap-3 px-4 py-4 select-none focus-visible:outline-2 focus-visible:outline-offset-[-2px] focus-visible:outline-primary sm:px-5 [&::-webkit-details-marker]:hidden">
+      <UIcon name="i-lucide-info" class="size-5 shrink-0 text-teal-500" />
+      <span class="flex-1 font-semibold text-highlighted">{{ t('boardUsers.guide.title') }}</span>
+      <UIcon name="i-lucide-chevron-down" class="size-5 shrink-0 text-muted transition-transform group-open:rotate-180" />
+    </summary>
+    <div class="grid gap-3 border-t border-default p-4 sm:grid-cols-2 sm:p-5 xl:grid-cols-5">
+      <article v-for="item in BOARD_USER_ROLES" :key="item.value" class="rounded-lg border border-default bg-default p-4">
+        <div class="mb-4 flex items-center gap-2.5" :class="appearance[item.value].color">
+          <UIcon :name="appearance[item.value].icon" class="size-6 shrink-0" />
+          <h3 class="rounded-md border px-2 py-1 text-sm font-medium" :class="appearance[item.value].badge">
+            {{ t(`common.role.${item.value}`) }}
+          </h3>
+        </div>
+        <ul class="space-y-2.5 pl-4 text-sm leading-6 text-muted list-disc marker:text-dimmed">
+          <li v-for="point in ['permissions', 'roles', 'restriction']" :key="point">
+            {{ t(`boardUsers.guide.${item.value}.${point}`) }}
+          </li>
+        </ul>
+      </article>
+    </div>
+    <p class="border-t border-default px-4 py-4 text-sm leading-6 text-muted sm:px-5">{{ t('boardUsers.guide.assignmentNote') }}</p>
+  </details>
+</template>

package/dist/runtime/components/Users.vue

@@ -1,73 +1,35 @@
 <script setup lang="ts">
 import MemiBoardSurface from './BoardSurface.vue'
-import { computed, ref } from 'vue'
-import { BOARD_USER_ROLES, useMemiBoardAuth, useMemiBoardI18n, useMemiBoardUsers } from 'memi-board/runtime'
-import type { BoardUserRole } from 'memi-board/runtime'
+import UserListControls from './UserListControls.vue'
+import UserListPagination from './UserListPagination.vue'
+import { useMemiBoardI18n, useMemiBoardUserDirectory } from 'memi-board/runtime'
 
-const props = withDefaults(defineProps<{ authorized?: boolean }>(), { authorized: false })
-const { isAdmin, isOwner, user, rolePending } = useMemiBoardAuth()
-const canManage = computed(() => isAdmin.value || props.authorized)
-const { users, usersPending, updateUserRole } = useMemiBoardUsers({ enabled: canManage })
-const { t, formatNumber } = useMemiBoardI18n()
-const roleItems = computed(() => BOARD_USER_ROLES.map(item => ({
-  ...item,
-  label: t(`common.role.${item.value}`),
-  description: t(`boardUsers.roleDescription.${item.value}`),
-})))
-const assignableRoles = computed(() => roleItems.value.filter(item => isOwner.value ? item.value !== 'owner' : !['owner', 'admin'].includes(item.value)))
-const savingUid = ref<string | null>(null)
-const savedUid = ref<string | null>(null)
-const error = ref('')
-
-async function changeRole(uid: string, role: BoardUserRole) {
-  if (!canManage.value) return
-  savingUid.value = uid
-  savedUid.value = null
-  error.value = ''
-  try {
-    await updateUserRole(uid, role)
-    savedUid.value = uid
-  }
-  catch (cause) {
-    error.value = cause instanceof Error ? cause.message : t('users.changeRoleFailed')
-  }
-  finally {
-    savingUid.value = null
-  }
-}
+defineProps<{ authorProfileTo?: (uid: string) => string }>()
+const { users, usersPending, loadError, sort, direction, pageSize, page, hasNext, previousPage, nextPage, refresh } = useMemiBoardUserDirectory()
+const { t } = useMemiBoardI18n()
 </script>
 
 <template>
   <MemiBoardSurface>
-  <div class="flex flex-col gap-6">
-    <div class="grid gap-3 md:grid-cols-3">
-      <UAlert v-for="item in roleItems" :key="item.value" color="neutral" variant="subtle" :title="item.label" :description="item.description" />
-    </div>
-    <UAlert v-if="error" color="error" variant="subtle" icon="i-lucide-circle-alert" :description="error" />
-    <div v-if="rolePending || usersPending" class="py-12 text-center text-sm text-muted">{{ t('users.loading') }}</div>
-    <UAlert v-else-if="!canManage" color="error" variant="subtle" icon="i-lucide-shield-alert" :title="t('users.noPermission.title')" :description="t('users.noPermission.description')" />
+    <UserListControls v-model:sort="sort" v-model:direction="direction" v-model:page-size="pageSize" />
+    <div v-if="usersPending" class="py-12 text-center text-sm text-muted">{{ t('users.loading') }}</div>
+    <UAlert v-else-if="loadError" color="error" variant="subtle" :description="t('users.loadFailed')">
+      <template #actions><UButton color="neutral" variant="outline" :label="t('common.action.retry')" @click="refresh()" /></template>
+    </UAlert>
     <div v-else-if="users.length === 0" class="py-12 text-center text-sm text-muted">{{ t('users.empty') }}</div>
     <div v-else class="divide-y divide-default rounded-lg border border-default">
-      <div v-for="boardUser in users" :key="boardUser.id" class="grid gap-4 p-4 md:grid-cols-[minmax(0,1fr)_12rem] md:items-center">
-        <div class="min-w-0">
-          <div class="flex items-center gap-2">
-            <p class="truncate font-medium text-highlighted">{{ boardUser.displayName || t('users.noName') }}</p>
-            <UBadge v-if="savedUid === boardUser.id" color="success" variant="subtle" :label="t('common.action.saved')" />
-          </div>
-          <p class="truncate text-sm text-muted">{{ boardUser.id }}</p>
-          <p v-if="boardUser.moderationBlockCount" class="mt-1 text-xs text-warning">{{ t('users.moderationWarnings', { count: formatNumber(boardUser.moderationBlockCount) }) }}</p>
+      <div v-for="boardUser in users" :key="boardUser.id" class="flex items-center gap-3 p-4">
+        <UAvatar :src="boardUser.photoURL || undefined" :alt="boardUser.displayName || t('users.noName')" />
+        <div class="min-w-0 flex-1">
+          <ULink v-if="authorProfileTo" :to="authorProfileTo(boardUser.id)" class="block truncate font-medium text-highlighted">
+            {{ boardUser.displayName || t('users.noName') }}
+          </ULink>
+          <p v-else class="truncate font-medium text-highlighted">{{ boardUser.displayName || t('users.noName') }}</p>
+          <p v-if="boardUser.bio" class="truncate text-sm text-muted">{{ boardUser.bio }}</p>
         </div>
-        <USelect
-          :model-value="boardUser.role || 'user'"
-          :items="boardUser.role === 'owner' || (!isOwner && boardUser.role === 'admin') ? roleItems : assignableRoles"
-          value-key="value"
-          label-key="label"
-          :loading="savingUid === boardUser.id"
-          :disabled="savingUid === boardUser.id || boardUser.id === user?.uid || boardUser.role === 'owner' || (!isOwner && boardUser.role === 'admin')"
-          @update:model-value="changeRole(boardUser.id, $event as BoardUserRole)"
-        />
+        <UBadge color="neutral" variant="subtle" :label="t(`common.role.${boardUser.role || 'user'}`)" />
       </div>
     </div>
-  </div>
+    <UserListPagination :page="page" :count="users.length" :has-next="hasNext" :pending="usersPending" @previous="previousPage" @next="nextPage" />
   </MemiBoardSurface>
 </template>

package/dist/runtime/components/UsersSettings.vue

@@ -0,0 +1,119 @@
+<script setup lang="ts">
+import MemiBoardSurface from './BoardSurface.vue'
+import UserManagementEmail from './UserManagementEmail.vue'
+import UserRoleGuide from './UserRoleGuide.vue'
+import UserListControls from './UserListControls.vue'
+import UserListPagination from './UserListPagination.vue'
+import { computed, ref, watch } from 'vue'
+import { BOARD_USER_ROLES, useMemiBoardAuth, useMemiBoardI18n, useMemiBoardUserDirectory } from 'memi-board/runtime'
+import type { BoardUserModel, BoardUserRole } from 'memi-board/runtime'
+
+const props = withDefaults(defineProps<{ authorized?: boolean }>(), { authorized: false })
+const { isAdmin, isOwner, user, rolePending } = useMemiBoardAuth()
+const canManage = computed(() => isAdmin.value || props.authorized)
+const { users, usersPending, updateUserRole, loadError, sort, direction, pageSize, page, hasNext, previousPage, nextPage, refresh } = useMemiBoardUserDirectory({ enabled: canManage })
+const { t, formatNumber } = useMemiBoardI18n()
+const roleItems = computed(() => BOARD_USER_ROLES.map(item => ({
+  ...item,
+  label: t(`common.role.${item.value}`),
+  description: t(`boardUsers.roleDescription.${item.value}`),
+})))
+const assignableRoles = computed(() => roleItems.value.filter(item => isOwner.value ? item.value !== 'owner' : !['owner', 'admin'].includes(item.value)))
+const savingUid = ref<string | null>(null)
+const savedUid = ref<string | null>(null)
+const error = ref('')
+const confirmOpen = ref(false)
+const pendingChange = ref<{ uid: string; name: string; from: BoardUserRole; to: BoardUserRole } | null>(null)
+const confirmDescription = computed(() => pendingChange.value ? t('users.confirmRole.description', {
+  name: pendingChange.value.name,
+  from: t(`common.role.${pendingChange.value.from}`),
+  to: t(`common.role.${pendingChange.value.to}`),
+}) : '')
+
+watch(confirmOpen, open => {
+  if (!open) {
+    pendingChange.value = null
+    error.value = ''
+  }
+})
+
+function requestRoleChange(target: BoardUserModel, role: BoardUserRole) {
+  if (!canManage.value || savingUid.value || target.id === user.value?.uid || target.role === 'owner'
+    || (!isOwner.value && target.role === 'admin') || (target.role || 'user') === role
+    || !assignableRoles.value.some(item => item.value === role)) return
+  pendingChange.value = { uid: target.id, name: target.displayName || t('users.noName'), from: target.role || 'user', to: role }
+  error.value = ''
+  confirmOpen.value = true
+}
+
+async function confirmRoleChange() {
+  const change = pendingChange.value
+  if (!confirmOpen.value || !change || !canManage.value || savingUid.value
+    || change.uid === user.value?.uid || (!isOwner.value && change.from === 'admin')
+    || !assignableRoles.value.some(item => item.value === change.to)) return
+  const { uid, to: role } = change
+  savingUid.value = uid
+  savedUid.value = null
+  error.value = ''
+  try {
+    await updateUserRole(uid, role)
+    savedUid.value = uid
+    confirmOpen.value = false
+  }
+  catch (cause) {
+    error.value = cause instanceof Error ? cause.message : t('users.changeRoleFailed')
+  }
+  finally {
+    savingUid.value = null
+  }
+}
+</script>
+
+<template>
+  <MemiBoardSurface>
+  <div class="flex flex-col gap-6">
+    <UserRoleGuide />
+    <UserListControls v-if="canManage" v-model:sort="sort" v-model:direction="direction" v-model:page-size="pageSize" :disabled="!!savingUid" />
+    <div v-if="rolePending || usersPending" class="py-12 text-center text-sm text-muted">{{ t('users.loading') }}</div>
+    <UAlert v-else-if="!canManage" color="error" variant="subtle" icon="i-lucide-shield-alert" :title="t('users.noPermission.title')" :description="t('users.noPermission.description')" />
+    <UAlert v-else-if="loadError" color="error" variant="subtle" :description="t('users.loadFailed')">
+      <template #actions><UButton color="neutral" variant="outline" :label="t('common.action.retry')" @click="refresh()" /></template>
+    </UAlert>
+    <div v-else-if="users.length === 0" class="py-12 text-center text-sm text-muted">{{ t('users.empty') }}</div>
+    <div v-else class="divide-y divide-default rounded-lg border border-default">
+      <div v-for="boardUser in users" :key="boardUser.id" class="grid gap-4 p-4 md:grid-cols-[minmax(0,1fr)_12rem] md:items-center">
+        <div class="min-w-0">
+          <div class="flex items-center gap-2">
+            <p class="truncate font-medium text-highlighted">{{ boardUser.displayName || t('users.noName') }}</p>
+            <UBadge v-if="savedUid === boardUser.id" color="success" variant="subtle" :label="t('common.action.saved')" />
+          </div>
+          <UserManagementEmail :uid="boardUser.id" :authorized="canManage" />
+          <p v-if="boardUser.moderationBlockCount" class="mt-1 text-xs text-warning">{{ t('users.moderationWarnings', { count: formatNumber(boardUser.moderationBlockCount) }) }}</p>
+        </div>
+        <USelect
+          :model-value="boardUser.role || 'user'"
+          :items="boardUser.role === 'owner' || (!isOwner && boardUser.role === 'admin') ? roleItems : assignableRoles"
+          value-key="value"
+          label-key="label"
+          :loading="savingUid === boardUser.id"
+          :disabled="!!savingUid || boardUser.id === user?.uid || boardUser.role === 'owner' || (!isOwner && boardUser.role === 'admin')"
+          @update:model-value="requestRoleChange(boardUser, $event as BoardUserRole)"
+        />
+      </div>
+    </div>
+    <UserListPagination v-if="canManage" :page="page" :count="users.length" :has-next="hasNext" :pending="usersPending || !!savingUid" @previous="previousPage" @next="nextPage" />
+  </div>
+  <UModal v-model:open="confirmOpen" :title="t('users.confirmRole.title')" :description="confirmDescription" :dismissible="!savingUid" :close="!savingUid">
+    <template #body>
+      <UserManagementEmail v-if="pendingChange" :uid="pendingChange.uid" :authorized="canManage" />
+      <UAlert v-if="error" class="mt-3" color="error" variant="subtle" icon="i-lucide-circle-alert" :description="error" />
+    </template>
+    <template #footer>
+      <div class="flex w-full justify-end gap-2">
+        <UButton color="neutral" variant="outline" :label="t('common.action.cancel')" :disabled="!!savingUid" @click="confirmOpen = false" />
+        <UButton :label="t('users.confirmRole.confirm')" :loading="!!savingUid" :disabled="!canManage" @click="confirmRoleChange" />
+      </div>
+    </template>
+  </UModal>
+  </MemiBoardSurface>
+</template>

package/dist/storage.js

@@ -1,4 +1,4 @@
-import { G as e, T as t, a as n, c as r, h as i, n as a } from "./commentImages-DsW2yCqu.js";
+import { G as e, T as t, a as n, c as r, h as i, n as a } from "./commentImages-mIfyNHgz.js";
 import { useFirebaseApp as o } from "vuefire";
 import { getAuth as s } from "firebase/auth";
 import { deleteObject as c, getDownloadURL as l, getStorage as u, ref as d, uploadBytes as f, uploadBytesResumable as p } from "firebase/storage";

package/dist/types.d.ts

@@ -175,6 +175,8 @@ export type BoardUserRole = 'owner' | 'admin' | 'manager' | 'staff' | 'user';
 /** memiBoardUsers/{uid} — 이메일만 빼고 전부 공개 프로필 정보다(누구나 읽을 수 있음). */
 export interface BoardUserModel {
     id: string;
+    /** 서버 탈퇴 처리 중 또는 개인정보 없는 탈퇴 표식. 클라이언트는 수정할 수 없다. */
+    deletionPending?: boolean;
     role: BoardUserRole;
     displayName?: string | null;
     photoURL?: string | null;

package/dist/utils/postSlug.d.ts

@@ -0,0 +1,12 @@
+import { Firestore, Transaction } from 'firebase/firestore';
+import { BoardPathConfig } from './boardPaths';
+/** Keep room for numeric suffixes within Firestore's 1,500-byte document ID limit. */
+export declare function postSlugBase(slug: string): string;
+export declare function postSlugRef(db: Firestore, cfg: BoardPathConfig, boardId: string, slug: string): import('firebase/firestore').DocumentReference<import('firebase/firestore').DocumentData, import('firebase/firestore').DocumentData>;
+export declare function postSlugMigrationRef(db: Firestore, cfg: BoardPathConfig): import('firebase/firestore').DocumentReference<import('firebase/firestore').DocumentData, import('firebase/firestore').DocumentData>;
+/** Advisory only: the final reservation must be committed with the new post. */
+export declare function availablePostSlug(db: Firestore, cfg: BoardPathConfig, boardId: string, base: string): Promise<string>;
+/** The callback atomically claims a candidate, or returns false when already occupied. */
+export declare function choosePostSlug(base: string, claim: (slug: string) => Promise<boolean>): Promise<string>;
+/** Reservation, metadata and body either all commit, or none do. Retries cannot overwrite a post. */
+export declare function createPostWithSlug(db: Firestore, cfg: BoardPathConfig, boardId: string, postId: string, base: string, write: (transaction: Transaction, slug: string) => void): Promise<string>;

package/dist/utils/profileNameModeration.d.ts

@@ -0,0 +1,8 @@
+/** Usernames are untrusted data, never instructions for the reviewer. */
+export declare function buildProfileNameModerationPrompt(language: string): string;
+/** A missing, contradictory, or malformed verdict is never an approval. */
+export declare function parseProfileNameModerationJson(raw: string): {
+    flagged: boolean;
+    category: 'none' | 'abuse' | 'spam' | 'adult' | 'violence' | 'other';
+    reason: string;
+} | null;

package/dist/utils/userDirectoryPage.d.ts

@@ -0,0 +1,19 @@
+export type UserDirectorySort = 'name' | 'role';
+export type UserDirectoryDirection = 'asc' | 'desc';
+export interface UserDirectoryCursor<T> {
+    document: T;
+    roleIndex: number;
+}
+export declare const USER_DIRECTORY_ROLES: readonly ["owner", "admin", "manager", "staff", "user"];
+/** Fetch one bounded page, including a lookahead across role boundaries. */
+export declare function readUserDirectoryPage<T>(options: {
+    sort: UserDirectorySort;
+    direction: UserDirectoryDirection;
+    pageSize: number;
+    cursor: UserDirectoryCursor<T> | null;
+    readBatch: (role: typeof USER_DIRECTORY_ROLES[number] | null, after: T | null, count: number) => Promise<T[]>;
+}): Promise<{
+    documents: T[];
+    cursor: UserDirectoryCursor<T> | null;
+    hasNext: boolean;
+}>;

package/docs/account-deletion.md

@@ -0,0 +1,60 @@
+# Account deletion in a host application
+
+`MemiBoardAccountDeletion` provides confirmation and progress UI. The host owns reauthentication, server processing, and Firebase Auth deletion. The package never deletes a shared host account just because a profile component is mounted.
+
+Place this feature on a sign-in-protected, `noindex` `/board-account` page. Do not place it in a public profile or admin user directory. This flow deletes the **whole Firebase sign-in account**, including access to other host features sharing that identity. A host offering board-only withdrawal needs a separate flow and matching explanations.
+
+```vue
+<MemiBoardAccountDeletion
+  :state="deletionState"
+  :processed="processedItems"
+  :error="deletionError"
+  :is-owner="role === 'owner'"
+  :account-label="user.email"
+  :locked-policy="previouslyConfirmedPolicy"
+  @confirm="({ deleteContent }) => deleteOwnAccount({ deleteContent })"
+/>
+```
+
+`state` is `idle`, `authenticating`, `working`, or `error`. `processed` is a monotonically increasing work count, not an estimated percentage or a total. `lockedPolicy` is `null` before starting and the previously confirmed boolean when resuming. Opening the dialog performs no deletion. The confirm action requires an acknowledgement and exact `DELETE` input; controls and dismissal are disabled while processing. The host must also reject duplicate calls.
+
+## User-selected content handling
+
+- **Unchecked, by default:** keep posts, comments, and content files; remove author names, photos, account links, reply-target names, and file ownership metadata. Information the user wrote into retained content can remain, and the dialog explains this.
+- **Checked:** delete the user's posts, body documents, comments, and uploaded files. Deleting a post also removes other people's comments and files beneath it; disclose this in the confirmation. On other people's posts, retain content-free anonymous placeholders only where needed to preserve their reply threads, and remove translated copies and images from those placeholders.
+- In either mode, remove profile/email/provider information, avatar files, private memos, likes, reporter details, and board assignments. Update affected like/comment/reply counters atomically with deletions. Scrub author/moderator/creator references. Host-specific and legacy account data require an explicit host cleanup stage.
+
+## Required server safeguards
+
+1. Reauthenticate with the current sign-in provider. The server must verify the ID token with revocation checking, require a recent `auth_time`, reject anonymous users, and derive the deletion UID from that verified token. A client-supplied UID or `isOwner` prop is not authorization.
+2. Reject owners on the server before changing any data. Ownership must be transferred through a trusted process first.
+3. Save a private server job and a protected `deletionPending` marker before removing data. Freeze the content policy after confirmation. Do not allow clients to read or write job checkpoints or secrets.
+4. Process one bounded stage per request, using limited queries and transaction/batch sizes comfortably below 500 writes. Bound Storage listing and deletion concurrency too. Account size must not result in an unbounded `Promise.all` or a single giant client batch.
+5. Commit Firestore changes and their progress checkpoint together. Decrement counters in the same transaction that removes their corresponding records. Storage deletion must ignore only missing files; other errors must stop the stage, preserve progress, and allow retry.
+6. Use a server lease to serialize duplicate requests. Check that lease again when committing a checkpoint. Bind any continuation key to one preconfirmed job, hash it server-side, expire it, and keep it out of URLs and logs. A continuation may only finish the scope already confirmed; it must not change the target or policy.
+7. Delete Firebase Auth **last**, after all required data/file stages succeed. Treat `auth/user-not-found` as success when retrying this final stage. A scoped continuation permits finalizing a lost response even after the user is signed out. Without it, the host can strand a cleanup job by requiring an account it has just deleted.
+8. Show loading and processed counts; protect against accidental navigation. Keep a browser-session continuation for refresh/retry. On a signed-out continuation page, render no private profile or email data and still verify the continuation server-side.
+
+The memi-dev reference implementation uses 100-record pages, at most 201 Firestore writes per main step, an additional approximate 2 MiB payload budget, Storage concurrency of five, a 90-second request lease, and a 24-hour continuation key. Large legacy subtrees use Admin SDK `recursiveDelete`/BulkWriter. It retains no names or emails in job records.
+
+## Rules and activation
+
+Merge the deletion protections in the current [Firestore rules](firestore.rules.example) and [Storage rules](storage.rules.example) into the host's actual rules. They block writes by pending/deleted members and new content beneath posts/comments currently being removed. The Storage check shares the existing user-document lookup to remain within the two-document read budget.
+
+A minimal `memiBoardUsers/{uid}` document containing only `deletionPending: true` remains after profile erasure. It contains no profile or contact fields. This marker blocks still-valid cached tokens and automatic profile recreation. Public profile/directory components omit these records. Removing this marker immediately would reopen that race until old tokens expire. Do not let clients remove it.
+
+The host server job collection `memiBoardAccountDeletionJobs` is server-only. Collection names and Storage prefixes must match the host's configured board collections. Do not use a request body or a document's arbitrary download URL as an unrestricted Storage deletion path.
+
+In memi-dev, actual deletion is **disabled until deployment** through `runtimeConfig.boardAccountDeletionEnabled`. Deploy the reviewed Firestore/Storage rules, verify server Admin credentials and bucket configuration, then set `NUXT_BOARD_ACCOUNT_DELETION_ENABLED=true`. Keep it disabled if those prerequisites have not been verified. Installing/building the package does not deploy rules or activate the endpoint.
+
+## Verification
+
+Run against a dedicated `demo-...` emulator project, never production accounts. Cover more than 500 posts/comments/likes/files, retention and full-content modes, owner rejection, expired/incorrect continuation keys, cached-token write attempts, duplicate requests, Storage failures, Auth response loss, and preservation of unrelated users' data. Test the exact host rules used for deployment and the UI acknowledgement/confirmation gate.
+
+The memi-dev regression command is:
+
+```sh
+firebase emulators:exec --config firebase.account-deletion-tests.json \
+  --only firestore,auth,storage --project demo-memi-account-deletion \
+  'node --experimental-strip-types scripts/test-account-deletion.mjs'
+```