[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_108":109,"_110":111},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","marketadapter","name","roadmap-api","path","routes/_shared.ts","project",{"_22":48,"_11":12,"_35":49,"_50":-5,"_51":44,"_52":53,"_54":53,"_55":56,"_57":-5,"_58":59,"_60":61,"_62":34,"_63":-5,"_64":-5,"_65":38,"_66":67,"_68":69,"_70":71,"_72":73,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":85,"_86":87,"_88":89,"_90":44},"file",{"_22":23,"_11":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":-5,"_13":46},"permalink","https://www.val.town/x/marketadapter/roadmap-api/code/routes/_shared.ts","extension","id","5432eda6-3455-4b48-aa81-236fbe678efe","_shared.ts","fileId","09507b02-ab26-11f1-9183-1607ee4eb77e","parentId","0819cf40-ab26-11f1-87f9-1607ee4eb77e","branchId","964f7637-562b-4945-9c69-b20a92bec2d0","branchVersion",21,"latest",true,"createdAt",["D",1788831527798],"version",0,"fileType","script","content","/**\n * 라우트 공통 헬퍼.\n */\nimport { isStaff } from \"../lib/auth.ts\";\nimport { Ctx, forbidden, notFound } from \"../lib/http.ts\";\nimport { exec, one, query, uuid } from \"../lib/sqlite.ts\";\nimport { nowIso } from \"../lib/time.ts\";\nimport { DEFAULT_SUBJECTS } from \"../db/schema.ts\";\n\n/**\n * 조회/수정 대상 학생을 정한다.\n * - 학생 : 항상 본인\n * - 관리쌤/관리자 : ?studentId= 로 다른 학생을 지정할 수 있다\n *\n * 학생이 남의 데이터를 보려고 studentId 를 넣으면 403.\n */\nexport function targetUserId(ctx: Ctx): string {\n const requested = ctx.query.get(\"studentId\");\n if (!requested || requested === ctx.user.id) return ctx.user.id;\n if (!isStaff(ctx.user)) throw forbidden(\"다른 학생의 데이터에 접근할 수 없습니다.\");\n return requested;\n}\n\n/** 본문에 studentId 가 들어오는 POST/PATCH 용 */\nexport function targetUserIdFromBody(ctx: Ctx, body: Record): string {\n const requested = typeof body.studentId === \"string\" ? body.studentId : null;\n if (!requested || requested === ctx.user.id) return ctx.user.id;\n if (!isStaff(ctx.user)) throw forbidden(\"다른 학생의 데이터를 수정할 수 없습니다.\");\n return requested;\n}\n\nexport interface SubjectRow {\n id: string;\n user_id: string;\n name: string;\n color: string;\n sort_order: number;\n archived: number;\n}\n\n/** 과목이 하나도 없는 신규 학생에게 기본 과목을 깔아준다. */\nexport async function ensureSubjects(userId: string): Promise {\n const rows = await query(\n \"SELECT * FROM subjects WHERE user_id = ? AND archived = 0 ORDER BY sort_order, name\",\n [userId],\n );\n if (rows.length) return rows;\n\n const now = nowIso();\n for (let i = 0; i < DEFAULT_SUBJECTS.length; i++) {\n const s = DEFAULT_SUBJECTS[i];\n await exec(\n \"INSERT INTO subjects (id, user_id, name, color, sort_order, archived, created_at) VALUES (?, ?, ?, ?, ?, 0, ?)\",\n [uuid(), userId, s.name, s.color, i, now],\n );\n }\n return await query(\n \"SELECT * FROM subjects WHERE user_id = ? AND archived = 0 ORDER BY sort_order, name\",\n [userId],\n );\n}\n\n/** 소유자 확인 후 행을 돌려준다. 없거나 남의 것이면 404/403. */\nexport async function ownedRow(\n table: string,\n id: string,\n ctx: Ctx,\n): Promise {\n const row = await one(`SELECT * FROM ${table} WHERE id = ?`, [id]);\n if (!row) throw notFound();\n if (row.user_id && row.user_id !== ctx.user.id && !isStaff(ctx.user)) {\n throw forbidden(\"본인 데이터만 수정할 수 있습니다.\");\n }\n return row;\n}\n\nexport async function notify(\n userId: string,\n type: string,\n title: string,\n body?: string,\n link?: string,\n): Promise {\n await exec(\n \"INSERT INTO notifications (id, user_id, type, title, body, link, created_at) VALUES (?, ?, ?, ?, ?, ?, ?)\",\n [uuid(), userId, type, title, body ?? null, link ?? null, nowIso()],\n );\n}\n\nexport async function audit(\n actorId: string,\n action: string,\n target?: string,\n meta?: unknown,\n): Promise {\n await exec(\n \"INSERT INTO audit_logs (id, actor_id, action, target, meta, created_at) VALUES (?, ?, ?, ?, ?, ?)\",\n [uuid(), actorId, action, target ?? null, meta ? JSON.stringify(meta) : null, nowIso()],\n );\n}\n","deleted",false,"label",[47,24],"routes","19e69952-e1a2-467a-8d0c-9197e6be008a",["D",1788831523479],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","관리형 독서실 학습 관리 API","imageUrl","userId","62e039ee-902a-49bb-8a64-406c241f4c74","pinnedFileId","08a8e9dc-ab26-11f1-b9b1-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","01a07e6b-1ded-75cb-baf4-27bab987c121","tursoName","19e69952e1a2467a8d0c9197e6be008a","tursoHostname","19e69952e1a2467a8d0c9197e6be008a-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789529498250],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_107":103},"org",{"_9":10,"_101":10,"_102":103,"_58":59,"_104":105,"_106":44},"branch",{"_37":91,"_11":92,"_22":30,"_93":48,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":12,"_100":10},"isOwned",33,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://lh3.googleusercontent.com/a/ACg8ocIP-2ZbzXrHkL2_NvgLmOKbrq2boZbhR3VJZY8_uH0a2c56-zs=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_84":-5,"_141":142,"_143":144,"_145":146,"_147":44,"_148":44,"_149":44,"_150":34,"_151":-5,"_152":-7,"_153":-7,"_154":38,"_155":44,"_156":44,"_157":-5,"_158":44,"_159":44,"_160":44,"_161":-5},"ENV",{"_112":113,"_114":115,"_116":92,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138,"_139":140},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]