[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_301":302,"_303":304},"routes/_app.x.$handle.$name",{"_99":98,"_31":44,"_107":89,"_26":108,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":24,"_122":123,"_124":58,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_31":44,"_37":45,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":24},"version",16,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":14,"_40":41,"_23":24},"previous","deleted",false,"deletedHere","path","crons/daily.ts","latestPath","fileId","08df94be-ab26-11f1-ba6d-1607ee4eb77e","name","daily.ts","fileType","interval","content","/**\n * 매일 도는 크론 (Val Town Cron Val 로 등록. 권장 22:00 KST = 13:00 UTC).\n *\n * 하는 일\n * 1. 켜둔 채 잊은 타이머 정리 (12시간 상한으로 마감)\n * 2. 오늘 공부일기를 안 쓴 학생에게 알림\n * 3. 내일 상담이 잡힌 학생·관리쌤에게 알림\n *\n * Val Town 에서는 이 파일의 default export 가 스케줄러에 의해 호출된다.\n */\nimport \"../lib/env.ts\";\nimport { exec, query, uuid } from \"../lib/sqlite.ts\";\nimport { addDays, nowIso, toLocalDate } from \"../lib/time.ts\";\n\nasync function notify(userId: string, type: string, title: string, body: string, link: string) {\n await exec(\n \"INSERT INTO notifications (id, user_id, type, title, body, link, created_at) VALUES (?, ?, ?, ?, ?, ?, ?)\",\n [uuid(), userId, type, title, body, link, nowIso()],\n );\n}\n\nexport default async function daily(): Promise<\n { closedTimers: number; diaryReminders: number; consultReminders: number }\n> {\n const today = toLocalDate();\n const now = nowIso();\n\n // 1) 방치된 타이머 마감\n const openSessions = await query<{ id: string; started_at: string; plan_id: string | null }>(\n \"SELECT id, started_at, plan_id FROM study_sessions WHERE ended_at IS NULL\",\n );\n for (const s of openSessions) {\n const raw = Math.round((Date.now() - new Date(s.started_at).getTime()) / 60000);\n const minutes = Math.max(0, Math.min(raw, 720));\n await exec(\"UPDATE study_sessions SET ended_at = ?, minutes = ? WHERE id = ?\", [\n now,\n minutes,\n s.id,\n ]);\n if (s.plan_id) {\n await exec(\n `UPDATE plans SET actual_minutes =\n (SELECT COALESCE(SUM(minutes),0) FROM study_sessions WHERE plan_id = ? AND ended_at IS NOT NULL)\n WHERE id = ?`,\n [s.plan_id, s.plan_id],\n );\n }\n }\n\n // 2) 오늘 공부한 기록은 있는데 일기를 안 쓴 학생\n const missingDiary = await query<{ id: string; name: string }>(\n `SELECT u.id, u.name FROM users u\n WHERE u.role = 'student' AND u.status = 'active'\n AND EXISTS (SELECT 1 FROM study_sessions s WHERE s.user_id = u.id AND s.date = ?)\n AND NOT EXISTS (SELECT 1 FROM diaries d WHERE d.user_id = u.id AND d.date = ? AND d.content <> '')`,\n [today, today],\n );\n for (const u of missingDiary) {\n await notify(\n u.id,\n \"diary_reminder\",\n \"오늘 공부일기를 아직 안 썼어요\",\n \"5분이면 충분해요. 오늘 하루를 정리해 볼까요?\",\n `/diary.html?date=${today}`,\n );\n }\n\n // 3) 내일 상담 안내\n const tomorrow = addDays(today, 1);\n const consults = await query<\n { id: string; user_id: string; coach_id: string | null; topic: string; scheduled_at: string }\n >(\n `SELECT id, user_id, coach_id, topic, scheduled_at FROM consults\n WHERE status = 'scheduled' AND scheduled_at >= ? AND scheduled_at < ?`,\n [`${tomorrow}T00:00:00.000Z`, `${addDays(tomorrow, 1)}T00:00:00.000Z`],\n );\n for (const c of consults) {\n await notify(c.user_id, \"consult_reminder\", \"내일 상담이 있어요\", c.topic, \"/consult.html\");\n if (c.coach_id) {\n await notify(\n c.coach_id,\n \"consult_reminder\",\n \"내일 상담 일정\",\n c.topic,\n \"/admin.html#consults\",\n );\n }\n }\n\n return {\n closedTimers: openSessions.length,\n diaryReminders: missingDiary.length,\n consultReminders: consults.length,\n };\n}\n\nif (import.meta.main) console.log(await daily());\n","createdAt",["D",1788831527099],"branchVersion","branchId","964f7637-562b-4945-9c69-b20a92bec2d0","id","19e69952-e1a2-467a-8d0c-9197e6be008a","roadmap-api",["D",1788831523479],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","관리형 독서실 학습 관리 API","imageUrl","62e039ee-902a-49bb-8a64-406c241f4c74","pinnedFileId","08a8e9dc-ab26-11f1-b9b1-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a07e6b-1ded-75cb-baf4-27bab987c121","tursoName","19e69952e1a2467a8d0c9197e6be008a","tursoHostname","19e69952e1a2467a8d0c9197e6be008a-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789529498250],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_99":98,"_106":102},"org",{"_99":98,"_100":98,"_101":102,"_18":54,"_103":104,"_105":24},"branch",{"_13":88,"_31":89,"_42":41,"_90":43,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":44,"_97":98},"isOwned",33,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","marketadapter","handle","displayName","avatar","https://lh3.googleusercontent.com/a/ACg8ocIP-2ZbzXrHkL2_NvgLmOKbrq2boZbhR3VJZY8_uH0a2c56-zs=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_42":43,"_31":44,"_37":296,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":297,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":298,"_83":299,"_85":300,"_87":24},"tree",[181,183,187,195,196],"files",[181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196],"counts",{"_170":62,"_171":155,"_172":62,"_173":174,"_175":176},"contents",[129,130,131,132,133],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_42":164,"_31":165,"_29":166,"_137":-5,"_40":41,"_39":167,"_139":58,"_37":168,"_13":62,"_33":150,"_35":-5,"_23":24,"_143":-5,"_26":169},{"_42":158,"_31":159,"_29":160,"_137":-5,"_40":41,"_39":161,"_139":58,"_37":162,"_13":62,"_33":150,"_35":-5,"_23":24,"_143":-5,"_26":163},{"_42":152,"_31":153,"_29":154,"_137":-5,"_40":41,"_39":155,"_139":58,"_37":156,"_13":62,"_33":150,"_35":-5,"_23":24,"_143":-5,"_26":157},{"_42":145,"_31":146,"_29":147,"_137":-5,"_40":41,"_39":148,"_139":58,"_37":149,"_13":62,"_33":150,"_35":-5,"_23":24,"_143":-5,"_26":151},{"_42":134,"_31":135,"_29":136,"_137":-5,"_40":41,"_39":138,"_139":24,"_37":140,"_13":62,"_33":141,"_35":142,"_23":24,"_143":-5,"_26":144},"ba484cca-ae53-4e38-b4f4-903f7b8b9127","main.ts","088e9dd4-ab26-11f1-bd9b-1607ee4eb77e","parentId",10,"latest",["D",1788831526527],"script","/**\n * Val Town HTTP 진입점.\n *\n * Val Town 은 이 파일의 default export 를 fetch 핸들러로 실행한다.\n * 로컬 개발은 backend/local.ts 가 같은 핸들러를 Deno.serve 로 감싼다.\n */\nimport { requireAdmin, requireStaff, resolveUser } from \"./lib/auth.ts\";\nimport {\n AuthUser,\n bodyReader,\n corsHeaders,\n Ctx,\n errorResponse,\n json,\n unauthorized,\n} from \"./lib/http.ts\";\nimport { buildRouter } from \"./routes/index.ts\";\nimport { toLocalDate } from \"./lib/time.ts\";\n\nconst router = buildRouter();\n\nexport default async function handler(req: Request): Promise {\n const url = new URL(req.url);\n const cors = corsHeaders(req);\n\n if (req.method === \"OPTIONS\") return new Response(null, { status: 204, headers: cors });\n\n try {\n if (url.pathname === \"/\" || url.pathname === \"/api\" || url.pathname === \"/api/health\") {\n return json(\n { ok: true, service: \"roadmap-study-api\", today: toLocalDate() },\n 200,\n cors,\n );\n }\n\n const matched = router.match(req.method, url.pathname);\n if (!matched) {\n return json({ error: \"not_found\", message: \"없는 경로입니다.\" }, 404, cors);\n }\n\n const level = router.levelOf(matched.route);\n let user: AuthUser | null = null;\n\n if (level !== \"public\") {\n user = await resolveUser(req);\n if (!user) throw unauthorized();\n if (level === \"staff\") requireStaff(user);\n if (level === \"admin\") requireAdmin(user);\n }\n\n const ctx: Ctx = {\n req,\n url,\n params: matched.params,\n query: url.searchParams,\n user: user ?? { id: \"\", email: null, name: \"\", role: \"student\" },\n body: bodyReader(req),\n };\n\n const res = await router.run(matched.route, ctx);\n\n // SSE 응답은 헤더를 다시 만들면 스트림이 깨진다 — 헤더만 덧댄다.\n const headers = new Headers(res.headers);\n for (const [k, v] of Object.entries(cors)) headers.set(k, v);\n return new Response(res.body, { status: res.status, headers });\n } catch (e) {\n return errorResponse(e, req);\n }\n}\n","label",[135],"3fb43c0f-8230-4f8c-9ddf-d22e141f8fcb","routes","0819cf40-ab26-11f1-87f9-1607ee4eb77e",4,["D",1788831525811],"directory",[146],"f1a202e2-b1b4-42ba-aec0-af1add9fd545","lib","0791e4a4-ab26-11f1-a503-1607ee4eb77e",1,["D",1788831524911],[153],"1ab759e0-0152-48e1-8407-330dbb0c8088","db","07c0dc82-ab26-11f1-8306-1607ee4eb77e",2,["D",1788831525229],[159],"130359c1-3f85-42d1-853e-43f5d0e94aab","crons","07f16262-ab26-11f1-87f9-1607ee4eb77e",3,["D",1788831525524],[165],"pulls","branches","forks","envVars",{"_177":179,"_180":62},"connections",{"_177":62,"_178":62},"count","unfilledCount",5,"emptyCount",{"_42":164,"_31":165,"_29":166,"_137":-5,"_40":41,"_39":167,"_139":58,"_37":293,"_13":62,"_33":150,"_35":-5,"_23":24,"_143":-5,"_198":294,"_26":295},{"_42":289,"_31":32,"_29":30,"_137":166,"_40":41,"_39":14,"_139":58,"_37":290,"_13":62,"_33":34,"_35":36,"_23":24,"_143":-5,"_198":291,"_26":292},{"_42":158,"_31":159,"_29":160,"_137":-5,"_40":41,"_39":161,"_139":58,"_37":286,"_13":62,"_33":150,"_35":-5,"_23":24,"_143":-5,"_198":287,"_26":288},{"_42":278,"_31":279,"_29":280,"_137":160,"_40":41,"_39":281,"_139":58,"_37":282,"_13":62,"_33":141,"_35":283,"_23":24,"_143":-5,"_198":284,"_26":285},{"_42":270,"_31":271,"_29":272,"_137":160,"_40":41,"_39":273,"_139":58,"_37":274,"_13":62,"_33":141,"_35":275,"_23":24,"_143":-5,"_198":276,"_26":277},{"_42":262,"_31":263,"_29":264,"_137":160,"_40":41,"_39":265,"_139":58,"_37":266,"_13":62,"_33":141,"_35":267,"_23":24,"_143":-5,"_198":268,"_26":269},{"_42":152,"_31":153,"_29":154,"_137":-5,"_40":41,"_39":155,"_139":58,"_37":259,"_13":62,"_33":150,"_35":-5,"_23":24,"_143":-5,"_198":260,"_26":261},{"_42":251,"_31":252,"_29":253,"_137":154,"_40":41,"_39":254,"_139":24,"_37":255,"_13":62,"_33":141,"_35":256,"_23":24,"_143":-5,"_198":257,"_26":258},{"_42":243,"_31":244,"_29":245,"_137":154,"_40":41,"_39":246,"_139":58,"_37":247,"_13":62,"_33":141,"_35":248,"_23":24,"_143":-5,"_198":249,"_26":250},{"_42":235,"_31":236,"_29":237,"_137":154,"_40":41,"_39":238,"_139":58,"_37":239,"_13":62,"_33":141,"_35":240,"_23":24,"_143":-5,"_198":241,"_26":242},{"_42":227,"_31":228,"_29":56,"_137":154,"_40":41,"_39":229,"_139":24,"_37":230,"_13":62,"_33":231,"_35":232,"_23":24,"_143":-5,"_198":233,"_26":234},{"_42":219,"_31":220,"_29":221,"_137":154,"_40":41,"_39":222,"_139":58,"_37":223,"_13":62,"_33":141,"_35":224,"_23":24,"_143":-5,"_198":225,"_26":226},{"_42":211,"_31":212,"_29":213,"_137":154,"_40":41,"_39":214,"_139":58,"_37":215,"_13":62,"_33":141,"_35":216,"_23":24,"_143":-5,"_198":217,"_26":218},{"_42":204,"_31":205,"_29":206,"_137":154,"_40":41,"_39":179,"_139":58,"_37":207,"_13":62,"_33":141,"_35":208,"_23":24,"_143":-5,"_198":209,"_26":210},{"_42":145,"_31":146,"_29":147,"_137":-5,"_40":41,"_39":148,"_139":58,"_37":201,"_13":62,"_33":150,"_35":-5,"_23":24,"_143":-5,"_198":202,"_26":203},{"_42":134,"_31":135,"_29":136,"_137":-5,"_40":41,"_39":138,"_139":24,"_37":197,"_13":62,"_33":141,"_35":142,"_23":24,"_143":-5,"_198":199,"_26":200},["D",1788831526527],"children",[],[135],["D",1788831525811],[],[146],"df23e099-bed8-4548-83a7-37c579690a42","validate.ts","084b9f48-ab26-11f1-97be-1607ee4eb77e",["D",1788831526112],"/**\n * 입력 검증 — 얇은 헬퍼. 스키마 라이브러리를 넣지 않고 필요한 것만 둔다.\n * 모든 문자열은 trim 하고 길이 상한을 강제한다(DB 오염 방지).\n */\nimport { badRequest } from \"./http.ts\";\nimport { isDate } from \"./time.ts\";\n\ntype Obj = Record;\n\nexport function str(\n body: Obj,\n key: string,\n opts: { required?: boolean; max?: number; min?: number; default?: string } = {},\n): string {\n const raw = body[key];\n if (raw === undefined || raw === null || raw === \"\") {\n if (opts.required) throw badRequest(`'${key}' 값이 필요합니다.`);\n return opts.default ?? \"\";\n }\n if (typeof raw !== \"string\") throw badRequest(`'${key}' 는 문자열이어야 합니다.`);\n const v = raw.trim();\n const max = opts.max ?? 2000;\n if (v.length > max) throw badRequest(`'${key}' 는 ${max}자를 넘을 수 없습니다.`);\n if (opts.min && v.length < opts.min) {\n throw badRequest(`'${key}' 는 ${opts.min}자 이상이어야 합니다.`);\n }\n return v;\n}\n\nexport function optStr(body: Obj, key: string, max = 2000): string | null {\n const v = str(body, key, { max });\n return v === \"\" ? null : v;\n}\n\nexport function int(\n body: Obj,\n key: string,\n opts: { required?: boolean; min?: number; max?: number; default?: number } = {},\n): number {\n const raw = body[key];\n if (raw === undefined || raw === null || raw === \"\") {\n if (opts.required) throw badRequest(`'${key}' 값이 필요합니다.`);\n return opts.default ?? 0;\n }\n const n = Number(raw);\n if (!Number.isFinite(n)) throw badRequest(`'${key}' 는 숫자여야 합니다.`);\n const v = Math.trunc(n);\n if (opts.min !== undefined && v < opts.min) {\n throw badRequest(`'${key}' 는 ${opts.min} 이상이어야 합니다.`);\n }\n if (opts.max !== undefined && v > opts.max) {\n throw badRequest(`'${key}' 는 ${opts.max} 이하여야 합니다.`);\n }\n return v;\n}\n\nexport function optInt(body: Obj, key: string, min: number, max: number): number | null {\n const raw = body[key];\n if (raw === undefined || raw === null || raw === \"\") return null;\n return int(body, key, { min, max });\n}\n\nexport function enumOf(\n body: Obj,\n key: string,\n allowed: readonly T[],\n fallback: T,\n): T {\n const raw = body[key];\n if (raw === undefined || raw === null || raw === \"\") return fallback;\n if (typeof raw !== \"string\" || !allowed.includes(raw as T)) {\n throw badRequest(`'${key}' 는 ${allowed.join(\", \")} 중 하나여야 합니다.`);\n }\n return raw as T;\n}\n\nexport function dateOf(body: Obj, key: string, fallback?: string): string {\n const raw = body[key];\n if (raw === undefined || raw === null || raw === \"\") {\n if (fallback) return fallback;\n throw badRequest(`'${key}' 날짜가 필요합니다.`);\n }\n if (!isDate(raw)) throw badRequest(`'${key}' 는 YYYY-MM-DD 형식이어야 합니다.`);\n return raw;\n}\n\n/** ISO8601 시각 문자열 검증 */\nexport function isoOf(body: Obj, key: string, required = false): string | null {\n const raw = body[key];\n if (raw === undefined || raw === null || raw === \"\") {\n if (required) throw badRequest(`'${key}' 시각이 필요합니다.`);\n return null;\n }\n if (typeof raw !== \"string\" || Number.isNaN(Date.parse(raw))) {\n throw badRequest(`'${key}' 는 올바른 날짜/시각이어야 합니다.`);\n }\n return new Date(raw).toISOString();\n}\n\n/** 쿼리스트링에서 날짜 범위를 뽑는다. 없으면 기본 구간을 준다. */\nexport function rangeFromQuery(\n q: URLSearchParams,\n defaultFrom: string,\n defaultTo: string,\n): { from: string; to: string } {\n const from = q.get(\"from\");\n const to = q.get(\"to\");\n if (from && !isDate(from)) throw badRequest(\"'from' 은 YYYY-MM-DD 형식이어야 합니다.\");\n if (to && !isDate(to)) throw badRequest(\"'to' 는 YYYY-MM-DD 형식이어야 합니다.\");\n const f = from ?? defaultFrom;\n const t = to ?? defaultTo;\n if (f > t) throw badRequest(\"'from' 이 'to' 보다 늦습니다.\");\n return { from: f, to: t };\n}\n",[],[153,205],"3297f0d4-3d89-4bc6-835c-cfe724ea5bf9","time.ts","08ca7f20-ab26-11f1-9e2b-1607ee4eb77e",15,["D",1788831526935],"/**\n * 날짜 유틸. 서비스 기준 시간대(KST)로 \"오늘\"을 계산한다.\n * DB 에는 날짜는 YYYY-MM-DD(TEXT), 시각은 ISO8601 UTC(TEXT)로 저장한다.\n */\nimport { CONFIG } from \"../config.ts\";\n\nconst DATE_FMT = new Intl.DateTimeFormat(\"en-CA\", {\n timeZone: CONFIG.timezone,\n year: \"numeric\",\n month: \"2-digit\",\n day: \"2-digit\",\n});\n\n/** Date → 'YYYY-MM-DD' (KST 기준) */\nexport function toLocalDate(d: Date = new Date()): string {\n return DATE_FMT.format(d);\n}\n\n/** 현재 시각 ISO(UTC) */\nexport function nowIso(): string {\n return new Date().toISOString();\n}\n\n/** 'YYYY-MM-DD' 에 일수를 더한다. */\nexport function addDays(date: string, days: number): string {\n const [y, m, d] = date.split(\"-\").map(Number);\n const dt = new Date(Date.UTC(y, m - 1, d));\n dt.setUTCDate(dt.getUTCDate() + days);\n return dt.toISOString().slice(0, 10);\n}\n\n/** 두 날짜(양끝 포함) 사이의 날짜 배열. 최대 400일에서 끊는다. */\nexport function dateRange(from: string, to: string): string[] {\n const out: string[] = [];\n let cur = from;\n for (let i = 0; i < 400 && cur <= to; i++) {\n out.push(cur);\n cur = addDays(cur, 1);\n }\n return out;\n}\n\n/** 해당 날짜가 속한 주의 월요일 */\nexport function weekStart(date: string): string {\n const [y, m, d] = date.split(\"-\").map(Number);\n const dow = (new Date(Date.UTC(y, m - 1, d)).getUTCDay() + 6) % 7; // 월=0\n return addDays(date, -dow);\n}\n\nexport function isDate(v: unknown): v is string {\n return typeof v === \"string\" && /^\\d{4}-\\d{2}-\\d{2}$/.test(v);\n}\n",[],[153,212],"f3e0733b-4e89-4b1f-ae5f-40e750c11ca0","sqlite.ts","08548de2-ab26-11f1-aeaa-1607ee4eb77e",6,["D",1788831526144],"/**\n * SQLite 어댑터.\n *\n * 백엔드는 두 가지다.\n * - valtown : Val Town 내장 SQLite (https://esm.town/v/std/sqlite)\n * - local : jsr:@db/sqlite 파일 DB (로컬 개발/테스트)\n *\n * 두 백엔드의 반환 형태가 달라서(배열 행 vs 객체 행) 여기서 객체 행으로 통일한다.\n * 호출부는 어느 백엔드인지 알 필요가 없다.\n *\n * 모듈 경로를 변수로 조립하는 이유: `deno check` 가 정적 분석으로 원격 모듈을\n * 받아오려 하는 것을 막기 위해서다(로컬에서는 Val Town 모듈을 받을 수 없다).\n */\nimport { CONFIG, isLocal } from \"../config.ts\";\n\nexport type Row = Record;\nexport type Arg = string | number | boolean | null;\n\n// deno-lint-ignore no-explicit-any\ntype AnyDb = any;\n\nlet valtownSqlite: AnyDb | null = null;\nlet localDb: AnyDb | null = null;\n\n/**\n * Val Town 내장 SQLite.\n *\n * ★ 경로 끝의 `/main.ts` 를 반드시 붙인다.\n * 생략하면(`.../std/sqlite`) legacy account-scoped(global) DB 에 연결되고,\n * 그쪽은 rows 를 \"배열의 배열\"로 돌려줘 반환 형태까지 달라진다.\n * 현행 권장은 val-scoped(`/main.ts`)이며 rows 가 객체 배열이다.\n * https://docs.val.town/reference/std/sqlite/usage\n */\nasync function getValtown(): Promise {\n if (!valtownSqlite) {\n const spec = [\"https:/\", \"esm.town\", \"v\", \"std\", \"sqlite\", \"main.ts\"].join(\"/\");\n const mod = await import(spec);\n valtownSqlite = mod.sqlite;\n }\n return valtownSqlite;\n}\n\n/**\n * 로컬 백엔드는 Deno 내장 node:sqlite 를 쓴다.\n * (jsr:@db/sqlite 는 SQL 문에 한글이 섞이면 바이트 길이를 잘못 계산해\n * \"incomplete input\" 으로 실패한다 — DDL 주석이 한글이라 바로 걸린다.)\n */\nasync function getLocal(): Promise {\n if (!localDb) {\n const spec = [\"node:\", \"sqlite\"].join(\"\");\n const { DatabaseSync } = await import(spec);\n const path = CONFIG.localDbPath;\n const dir = path.slice(0, path.lastIndexOf(\"/\"));\n if (dir) await Deno.mkdir(dir, { recursive: true }).catch(() => {});\n localDb = new DatabaseSync(path);\n localDb.exec(\"PRAGMA journal_mode = WAL;\");\n localDb.exec(\"PRAGMA foreign_keys = ON;\");\n }\n return localDb;\n}\n\n/** SELECT — 객체 행 배열을 돌려준다. */\nexport async function query(sql: string, args: Arg[] = []): Promise {\n if (isLocal()) {\n const db = await getLocal();\n return db.prepare(sql).all(...args) as T[];\n }\n const sqlite = await getValtown();\n const res = await sqlite.execute({ sql, args });\n const rows: unknown[] = res.rows ?? [];\n if (!rows.length) return [];\n\n // val-scoped 는 객체 배열, legacy global 은 배열의 배열을 준다.\n // 어느 쪽에 붙어도 깨지지 않게 형태를 보고 분기한다.\n if (!Array.isArray(rows[0])) return rows as T[];\n\n const cols: string[] = res.columns ?? [];\n return (rows as unknown[][]).map((row) => {\n const obj: Row = {};\n cols.forEach((c, i) => (obj[c] = row[i]));\n return obj as T;\n });\n}\n\n/** SELECT 단건 */\nexport async function one(sql: string, args: Arg[] = []): Promise {\n const rows = await query(sql, args);\n return rows.length ? rows[0] : null;\n}\n\n/** INSERT / UPDATE / DELETE */\nexport async function exec(sql: string, args: Arg[] = []): Promise {\n if (isLocal()) {\n const db = await getLocal();\n db.prepare(sql).run(...args);\n return;\n }\n const sqlite = await getValtown();\n await sqlite.execute({ sql, args });\n}\n\n/** DDL 등 파라미터 없는 스크립트를 순서대로 실행 */\nexport async function execScript(statements: string[]): Promise {\n for (const sql of statements) {\n const trimmed = sql.trim();\n if (trimmed) await exec(trimmed);\n }\n}\n\n/** COUNT(*) 같은 단일 스칼라 */\nexport async function scalar(sql: string, args: Arg[] = []): Promise {\n const row = await one(sql, args);\n if (!row) return null;\n const first = Object.values(row)[0];\n return (first as T) ?? null;\n}\n\nexport function uuid(): string {\n return crypto.randomUUID();\n}\n",[],[153,220],"93f01b35-e597-47ba-b87c-d47c24cc5c0f","http.ts",11,["D",1788831526498],"http","/**\n * HTTP 유틸 — 응답 헬퍼, CORS, 아주 작은 라우터.\n * 프레임워크를 넣지 않는 이유: Val Town 은 단일 fetch 핸들러라 이 정도면 충분하고,\n * 의존성이 적을수록 배포가 단순하다.\n */\nimport { CONFIG } from \"../config.ts\";\n\nexport class HttpError extends Error {\n constructor(\n public status: number,\n public code: string,\n message: string,\n public detail?: unknown,\n ) {\n super(message);\n this.name = \"HttpError\";\n }\n}\n\nexport const badRequest = (msg: string, detail?: unknown) =>\n new HttpError(400, \"bad_request\", msg, detail);\nexport const unauthorized = (msg = \"로그인이 필요합니다.\") =>\n new HttpError(401, \"unauthorized\", msg);\nexport const forbidden = (msg = \"권한이 없습니다.\") => new HttpError(403, \"forbidden\", msg);\nexport const notFound = (msg = \"대상을 찾을 수 없습니다.\") => new HttpError(404, \"not_found\", msg);\nexport const tooMany = (msg: string) => new HttpError(429, \"rate_limited\", msg);\n\n/**\n * 허용 오리진이면 그 오리진을 그대로 돌려준다.\n * ALLOWED_ORIGINS 가 비어 있으면 개발 편의를 위해 * 를 준다(운영에서는 반드시 채울 것).\n */\nexport function corsHeaders(req: Request): Record {\n const origin = req.headers.get(\"origin\") ?? \"\";\n const list = CONFIG.allowedOrigins;\n let allow = \"*\";\n if (list.length) allow = list.includes(origin) ? origin : list[0];\n\n return {\n \"access-control-allow-origin\": allow,\n \"access-control-allow-methods\": \"GET,POST,PATCH,PUT,DELETE,OPTIONS\",\n \"access-control-allow-headers\": \"authorization,content-type\",\n \"access-control-max-age\": \"86400\",\n \"vary\": \"origin\",\n };\n}\n\nexport function json(data: unknown, status = 200, headers: Record = {}): Response {\n return new Response(JSON.stringify(data), {\n status,\n headers: { \"content-type\": \"application/json; charset=utf-8\", ...headers },\n });\n}\n\nexport function errorResponse(e: unknown, req: Request): Response {\n const cors = corsHeaders(req);\n if (e instanceof HttpError) {\n return json({ error: e.code, message: e.message, detail: e.detail }, e.status, cors);\n }\n console.error(\"[unhandled]\", e);\n const message = e instanceof Error ? e.message : String(e);\n return json({ error: \"internal\", message }, 500, cors);\n}\n\n/* ── 라우터 ───────────────────────────────────────────────── */\n\nexport type AuthLevel = \"public\" | \"user\" | \"staff\" | \"admin\";\n\nexport interface AuthUser {\n id: string;\n email: string | null;\n name: string;\n role: \"student\" | \"coach\" | \"admin\";\n}\n\nexport interface Ctx {\n req: Request;\n url: URL;\n params: Record;\n query: URLSearchParams;\n /** auth 레벨이 public 이 아니면 항상 채워진다. */\n user: AuthUser;\n body: >() => Promise;\n}\n\nexport type Handler = (ctx: Ctx) => Promise | Response;\n\ninterface Route {\n method: string;\n segments: string[];\n handler: Handler;\n auth: AuthLevel;\n}\n\nexport class Router {\n private routes: Route[] = [];\n\n add(method: string, pattern: string, auth: AuthLevel, handler: Handler): this {\n this.routes.push({\n method: method.toUpperCase(),\n segments: pattern.split(\"/\").filter(Boolean),\n handler,\n auth,\n });\n return this;\n }\n\n get = (p: string, a: AuthLevel, h: Handler) => this.add(\"GET\", p, a, h);\n post = (p: string, a: AuthLevel, h: Handler) => this.add(\"POST\", p, a, h);\n patch = (p: string, a: AuthLevel, h: Handler) => this.add(\"PATCH\", p, a, h);\n del = (p: string, a: AuthLevel, h: Handler) => this.add(\"DELETE\", p, a, h);\n\n match(method: string, path: string): { route: Route; params: Record } | null {\n const parts = path.split(\"/\").filter(Boolean);\n let pathMatched = false;\n\n for (const route of this.routes) {\n if (route.segments.length !== parts.length) continue;\n const params: Record = {};\n let ok = true;\n for (let i = 0; i < parts.length; i++) {\n const seg = route.segments[i];\n if (seg.startsWith(\":\")) params[seg.slice(1)] = decodeURIComponent(parts[i]);\n else if (seg !== parts[i]) {\n ok = false;\n break;\n }\n }\n if (!ok) continue;\n pathMatched = true;\n if (route.method === method.toUpperCase()) return { route, params };\n }\n\n if (pathMatched) throw new HttpError(405, \"method_not_allowed\", \"허용되지 않은 메서드입니다.\");\n return null;\n }\n\n levelOf(route: Route): AuthLevel {\n return route.auth;\n }\n\n run(route: Route, ctx: Ctx): Promise | Response {\n return route.handler(ctx);\n }\n}\n\n/** 요청 본문 파서 — 빈 본문은 {} 로 준다. */\nexport function bodyReader(req: Request) {\n let cached: unknown;\n let read = false;\n return async >(): Promise => {\n if (read) return cached as T;\n read = true;\n const text = await req.text();\n if (!text.trim()) {\n cached = {};\n return cached as T;\n }\n try {\n cached = JSON.parse(text);\n } catch {\n throw badRequest(\"JSON 본문을 해석할 수 없습니다.\");\n }\n return cached as T;\n };\n}\n",[],[153,228],"a856c541-89d5-4b15-a59e-2ae5b080db9c","env.ts","0879b608-ab26-11f1-aeaa-1607ee4eb77e",8,["D",1788831526436],"/**\n * 로컬 개발용 .env 로더.\n * Val Town 에서는 대시보드 환경변수가 이 역할을 하므로 파일이 없으면 조용히 넘어간다.\n *\n * 이 모듈은 부수효과가 목적이다 — 진입점에서 `import \"./lib/env.ts\";` 로 가장 먼저 부른다.\n */\nexport async function loadEnvFile(url = new URL(\"../../.env\", import.meta.url)): Promise {\n let text: string;\n try {\n text = await Deno.readTextFile(url);\n } catch {\n return false;\n }\n\n for (const line of text.split(\"\\n\")) {\n const trimmed = line.trim();\n if (!trimmed || trimmed.startsWith(\"#\")) continue;\n const eq = trimmed.indexOf(\"=\");\n if (eq < 0) continue;\n const key = trimmed.slice(0, eq).trim();\n const value = trimmed.slice(eq + 1).trim().replace(/^[\"']|[\"']$/g, \"\");\n // 이미 설정된 시스템 환경변수가 우선한다.\n if (!Deno.env.get(key)) Deno.env.set(key, value);\n }\n return true;\n}\n\nawait loadEnvFile();\n",[],[153,236],"6b99b14f-dcd2-4a00-ada4-784904e0e85a","claude.ts","085c59c8-ab26-11f1-9b77-1607ee4eb77e",7,["D",1788831526216],"/**\n * Claude API 클라이언트 (Messages API).\n * SDK 를 넣지 않는다 — 필요한 건 fetch 두 줄이고, Val Town 은 의존성이 적을수록 안전하다.\n */\nimport { CONFIG } from \"../config.ts\";\nimport { HttpError } from \"./http.ts\";\n\nconst API_URL = \"https://api.anthropic.com/v1/messages\";\nconst API_VERSION = \"2023-06-01\";\n\nexport interface ClaudeMessage {\n role: \"user\" | \"assistant\";\n content: string;\n}\n\ninterface RequestOptions {\n system: string;\n messages: ClaudeMessage[];\n maxTokens?: number;\n stream?: boolean;\n}\n\nfunction headers(): HeadersInit {\n if (!CONFIG.anthropicApiKey) {\n throw new HttpError(503, \"chat_unavailable\", \"챗봇이 아직 설정되지 않았습니다.\");\n }\n return {\n \"content-type\": \"application/json\",\n \"x-api-key\": CONFIG.anthropicApiKey,\n \"anthropic-version\": API_VERSION,\n };\n}\n\n/**\n * Anthropic 오류를 사용자·운영자가 구분할 수 있는 문장으로 바꾼다.\n * 전부 \"실패했습니다\" 로 뭉치면 키가 틀린 건지 일시 장애인지 알 수 없다.\n */\nfunction messageFor(status: number): string {\n if (status === 401 || status === 403) {\n return \"챗봇 인증에 실패했습니다. 관리자에게 API 키 확인을 요청해 주세요.\";\n }\n if (status === 429) return \"지금 이용자가 많습니다. 잠시 후 다시 시도해 주세요.\";\n if (status >= 500) return \"챗봇 서버가 응답하지 않습니다. 잠시 후 다시 시도해 주세요.\";\n return \"챗봇 응답에 실패했습니다. 잠시 후 다시 시도해 주세요.\";\n}\n\nfunction payload(opts: RequestOptions) {\n return JSON.stringify({\n model: CONFIG.claudeModel,\n max_tokens: opts.maxTokens ?? 1500,\n system: opts.system,\n messages: opts.messages,\n stream: opts.stream ?? false,\n });\n}\n\nexport interface ClaudeResult {\n text: string;\n tokensIn: number;\n tokensOut: number;\n}\n\n/** 단발 호출 — 응답 전체를 받아서 돌려준다. */\nexport async function complete(opts: RequestOptions): Promise {\n const res = await fetch(API_URL, {\n method: \"POST\",\n headers: headers(),\n body: payload({ ...opts, stream: false }),\n });\n\n if (!res.ok) {\n const detail = await res.text();\n console.error(\"[claude]\", res.status, detail);\n throw new HttpError(502, \"chat_failed\", messageFor(res.status));\n }\n\n const data = await res.json() as {\n content: Array<{ type: string; text?: string }>;\n usage?: { input_tokens: number; output_tokens: number };\n };\n\n return {\n text: data.content.filter((c) => c.type === \"text\").map((c) => c.text ?? \"\").join(\"\"),\n tokensIn: data.usage?.input_tokens ?? 0,\n tokensOut: data.usage?.output_tokens ?? 0,\n };\n}\n\n/**\n * 스트리밍 호출.\n * Anthropic SSE 를 그대로 흘려보내지 않고 { delta } / { done } 형태로 단순화해 내보낸다.\n * 프론트가 Anthropic 이벤트 스펙에 묶이지 않게 하려는 것.\n * 전체 텍스트가 모이면 onDone 으로 넘겨 저장한다.\n */\nexport function stream(\n opts: RequestOptions,\n onDone: (result: ClaudeResult) => Promise,\n): Response {\n const encoder = new TextEncoder();\n\n const body = new ReadableStream({\n async start(controller) {\n const send = (obj: unknown) =>\n controller.enqueue(encoder.encode(`data: ${JSON.stringify(obj)}\\n\\n`));\n\n let full = \"\";\n let tokensIn = 0;\n let tokensOut = 0;\n\n try {\n const res = await fetch(API_URL, {\n method: \"POST\",\n headers: headers(),\n body: payload({ ...opts, stream: true }),\n });\n\n if (!res.ok || !res.body) {\n const detail = await res.text().catch(() => \"\");\n console.error(\"[claude:stream]\", res.status, detail);\n send({ error: messageFor(res.status) });\n controller.close();\n return;\n }\n\n const reader = res.body.pipeThrough(new TextDecoderStream()).getReader();\n let buffer = \"\";\n\n while (true) {\n const { value, done } = await reader.read();\n if (done) break;\n buffer += value;\n\n // SSE 는 빈 줄로 이벤트가 끝난다. 마지막 조각은 다음 청크와 이어 붙인다.\n const chunks = buffer.split(\"\\n\\n\");\n buffer = chunks.pop() ?? \"\";\n\n for (const chunk of chunks) {\n const line = chunk.split(\"\\n\").find((l) => l.startsWith(\"data:\"));\n if (!line) continue;\n const raw = line.slice(5).trim();\n if (!raw || raw === \"[DONE]\") continue;\n\n try {\n const evt = JSON.parse(raw);\n if (evt.type === \"content_block_delta\" && evt.delta?.type === \"text_delta\") {\n full += evt.delta.text;\n send({ delta: evt.delta.text });\n } else if (evt.type === \"message_start\") {\n tokensIn = evt.message?.usage?.input_tokens ?? 0;\n } else if (evt.type === \"message_delta\") {\n tokensOut = evt.usage?.output_tokens ?? tokensOut;\n } else if (evt.type === \"error\") {\n send({ error: evt.error?.message ?? \"오류가 발생했습니다.\" });\n }\n } catch {\n // 파싱 실패한 이벤트는 건너뛴다(핑 등).\n }\n }\n }\n\n await onDone({ text: full, tokensIn, tokensOut });\n send({ done: true });\n } catch (e) {\n console.error(\"[claude:stream]\", e);\n // 여기까지 받은 응답이라도 저장해 대화가 끊기지 않게 한다.\n if (full) await onDone({ text: full, tokensIn, tokensOut }).catch(() => {});\n send({ error: \"연결이 끊겼습니다.\" });\n } finally {\n controller.close();\n }\n },\n });\n\n return new Response(body, {\n headers: {\n \"content-type\": \"text/event-stream; charset=utf-8\",\n \"cache-control\": \"no-cache\",\n \"connection\": \"keep-alive\",\n },\n });\n}\n",[],[153,244],"1c512b15-d69b-4584-8f43-69cbcd1f2c6f","auth.ts","0882c860-ab26-11f1-aeaa-1607ee4eb77e",9,["D",1788831526489],"/**\n * Firebase ID 토큰 검증 + 사용자 upsert.\n *\n * Admin SDK 를 쓰지 않는다 — Deno/Val Town 에서 무겁고 서비스 계정 키까지 필요하다.\n * 대신 구글이 공개하는 JWK 로 RS256 서명을 WebCrypto 로 직접 검증한다.\n * (x509 PEM 엔드포인트가 아니라 JWK 엔드포인트를 쓰는 이유: importKey('jwk') 로 바로 들어간다.)\n */\nimport { CONFIG } from \"../config.ts\";\nimport { AuthUser, forbidden, unauthorized } from \"./http.ts\";\nimport { exec, one } from \"./sqlite.ts\";\nimport { nowIso } from \"./time.ts\";\n\nconst JWK_URL =\n \"https://www.googleapis.com/service_accounts/v1/jwk/securetoken@system.gserviceaccount.com\";\n\ninterface Jwk {\n kid: string;\n kty: string;\n n: string;\n e: string;\n alg: string;\n}\n\nlet keyCache: { keys: Map; expiresAt: number } | null = null;\n\nasync function getKeys(): Promise> {\n if (keyCache && keyCache.expiresAt > Date.now()) return keyCache.keys;\n\n const res = await fetch(JWK_URL);\n if (!res.ok) throw unauthorized(\"인증 키를 가져오지 못했습니다.\");\n\n const maxAge = Number(\n (res.headers.get(\"cache-control\") ?? \"\").match(/max-age=(\\d+)/)?.[1] ?? \"3600\",\n );\n const data = (await res.json()) as { keys: Jwk[] };\n\n const keys = new Map();\n for (const jwk of data.keys) {\n const key = await crypto.subtle.importKey(\n \"jwk\",\n { kty: jwk.kty, n: jwk.n, e: jwk.e, alg: \"RS256\", ext: true },\n { name: \"RSASSA-PKCS1-v1_5\", hash: \"SHA-256\" },\n false,\n [\"verify\"],\n );\n keys.set(jwk.kid, key);\n }\n\n keyCache = { keys, expiresAt: Date.now() + maxAge * 1000 };\n return keys;\n}\n\nfunction b64urlToBytes(s: string): Uint8Array {\n const b64 = s.replace(/-/g, \"+\").replace(/_/g, \"/\").padEnd(\n s.length + ((4 - (s.length % 4)) % 4),\n \"=\",\n );\n const bin = atob(b64);\n // WebCrypto 는 ArrayBuffer 기반 뷰만 받는다(SharedArrayBuffer 불가) — 버퍼를 직접 만들어 맞춘다.\n const out = new Uint8Array(new ArrayBuffer(bin.length));\n for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);\n return out;\n}\n\nfunction b64urlToJson(s: string): T {\n return JSON.parse(new TextDecoder().decode(b64urlToBytes(s))) as T;\n}\n\nexport interface FirebaseClaims {\n sub: string;\n email?: string;\n email_verified?: boolean;\n name?: string;\n picture?: string;\n aud: string;\n iss: string;\n exp: number;\n iat: number;\n}\n\n/** Firebase ID 토큰을 검증하고 클레임을 돌려준다. */\nexport async function verifyIdToken(token: string): Promise {\n const parts = token.split(\".\");\n if (parts.length !== 3) throw unauthorized(\"토큰 형식이 올바르지 않습니다.\");\n\n const [headerB64, payloadB64, sigB64] = parts;\n const header = b64urlToJson<{ alg: string; kid: string }>(headerB64);\n if (header.alg !== \"RS256\") throw unauthorized(\"지원하지 않는 서명 알고리즘입니다.\");\n\n const keys = await getKeys();\n const key = keys.get(header.kid);\n if (!key) throw unauthorized(\"토큰 서명 키를 찾을 수 없습니다.\");\n\n const valid = await crypto.subtle.verify(\n \"RSASSA-PKCS1-v1_5\",\n key,\n b64urlToBytes(sigB64),\n new TextEncoder().encode(`${headerB64}.${payloadB64}`),\n );\n if (!valid) throw unauthorized(\"토큰 서명이 올바르지 않습니다.\");\n\n const claims = b64urlToJson(payloadB64);\n const projectId = CONFIG.firebaseProjectId;\n const now = Math.floor(Date.now() / 1000);\n\n if (!projectId) throw unauthorized(\"서버에 FIREBASE_PROJECT_ID 가 설정되지 않았습니다.\");\n if (claims.aud !== projectId) throw unauthorized(\"토큰 대상(aud)이 일치하지 않습니다.\");\n if (claims.iss !== `https://securetoken.google.com/${projectId}`) {\n throw unauthorized(\"토큰 발급자(iss)가 일치하지 않습니다.\");\n }\n if (claims.exp <= now) throw unauthorized(\"토큰이 만료되었습니다. 다시 로그인해 주세요.\");\n if (claims.iat > now + 300) throw unauthorized(\"토큰 발급 시각이 올바르지 않습니다.\");\n if (!claims.sub) throw unauthorized(\"토큰에 사용자 식별자가 없습니다.\");\n\n return claims;\n}\n\ninterface UserRow {\n id: string;\n email: string | null;\n name: string;\n role: \"student\" | \"coach\" | \"admin\";\n status: string;\n}\n\n/** 첫 로그인이면 만들고, 있으면 마지막 로그인 시각만 갱신한다. */\nasync function upsertUser(claims: {\n sub: string;\n email?: string;\n name?: string;\n picture?: string;\n}): Promise {\n const now = nowIso();\n const email = claims.email?.toLowerCase() ?? null;\n const existing = await one(\n \"SELECT id, email, name, role, status FROM users WHERE id = ?\",\n [claims.sub],\n );\n\n if (existing) {\n await exec(\"UPDATE users SET last_login_at = ?, updated_at = ? WHERE id = ?\", [\n now,\n now,\n claims.sub,\n ]);\n // 운영자 이메일이 나중에 추가된 경우를 위해 매 로그인마다 승격 여부를 본다.\n if (email && CONFIG.adminEmails.includes(email) && existing.role !== \"admin\") {\n await exec(\"UPDATE users SET role = 'admin' WHERE id = ?\", [claims.sub]);\n existing.role = \"admin\";\n }\n return existing;\n }\n\n const role = email && CONFIG.adminEmails.includes(email) ? \"admin\" : \"student\";\n await exec(\n `INSERT INTO users (id, email, name, role, status, photo_url, created_at, updated_at, last_login_at)\n VALUES (?, ?, ?, ?, 'active', ?, ?, ?, ?)`,\n [claims.sub, email, claims.name ?? \"\", role, claims.picture ?? null, now, now, now],\n );\n\n return { id: claims.sub, email, name: claims.name ?? \"\", role, status: \"active\" };\n}\n\n/**\n * 요청에서 사용자를 뽑는다. 토큰이 없으면 null.\n * AUTH_MODE=dev 이면 \"dev::\" 형태를 허용한다(로컬 전용).\n */\nexport async function resolveUser(req: Request): Promise {\n const header = req.headers.get(\"authorization\") ?? \"\";\n if (!header.toLowerCase().startsWith(\"bearer \")) return null;\n const token = header.slice(7).trim();\n if (!token) return null;\n\n if (CONFIG.authMode === \"dev\" && token.startsWith(\"dev:\")) {\n const [, uid, role = \"student\"] = token.split(\":\");\n const row = await upsertUser({ sub: uid, email: `${uid}@dev.local`, name: `dev-${uid}` });\n if (role === \"admin\" || role === \"coach\") {\n await exec(\"UPDATE users SET role = ? WHERE id = ?\", [role, uid]);\n row.role = role as UserRow[\"role\"];\n }\n return { id: row.id, email: row.email, name: row.name, role: row.role };\n }\n\n const claims = await verifyIdToken(token);\n const row = await upsertUser(claims);\n if (row.status === \"left\") throw forbidden(\"이용이 종료된 계정입니다. 관리자에게 문의하세요.\");\n return { id: row.id, email: row.email, name: row.name, role: row.role };\n}\n\nexport function requireStaff(user: AuthUser): void {\n if (user.role !== \"admin\" && user.role !== \"coach\") {\n throw forbidden(\"관리자 또는 관리쌤만 사용할 수 있습니다.\");\n }\n}\n\nexport function requireAdmin(user: AuthUser): void {\n if (user.role !== \"admin\") throw forbidden(\"관리자만 사용할 수 있습니다.\");\n}\n\nexport const isStaff = (user: AuthUser) => user.role === \"admin\" || user.role === \"coach\";\n",[],[153,252],["D",1788831524911],[188,189,190,191,192,193,194],[153],"3f856cc0-45ce-4120-bb92-946ca18a1a71","seed.ts","08c5d4ca-ab26-11f1-ba0e-1607ee4eb77e",14,["D",1788831526931],"/**\n * 로컬 개발용 시드. 운영에서는 실행하지 않는다.\n * deno task seed\n */\nimport \"../lib/env.ts\";\nimport { exec, one, query, uuid } from \"../lib/sqlite.ts\";\nimport { addDays, nowIso, toLocalDate } from \"../lib/time.ts\";\nimport { migrate } from \"./migrate.ts\";\nimport { DEFAULT_SUBJECTS } from \"./schema.ts\";\n\nconst STUDENT_ID = \"dev-student\";\nconst ADMIN_ID = \"dev-admin\";\n\nasync function upsertUser(\n id: string,\n name: string,\n role: string,\n extra: Record = {},\n) {\n const now = nowIso();\n const exists = await one(\"SELECT id FROM users WHERE id = ?\", [id]);\n if (exists) {\n await exec(\"UPDATE users SET name = ?, role = ?, updated_at = ? WHERE id = ?\", [\n name,\n role,\n now,\n id,\n ]);\n return;\n }\n await exec(\n `INSERT INTO users (id, email, name, role, status, school, grade, target, seat_no, created_at, updated_at)\n VALUES (?, ?, ?, ?, 'active', ?, ?, ?, ?, ?, ?)`,\n [\n id,\n `${id}@dev.local`,\n name,\n role,\n extra.school ?? null,\n extra.grade ?? null,\n extra.target ?? null,\n extra.seat ?? null,\n now,\n now,\n ],\n );\n}\n\nconst result = await migrate();\nconsole.log(\"마이그레이션:\", result.applied.length ? result.applied.join(\", \") : \"이미 적용됨\");\n\nawait upsertUser(ADMIN_ID, \"김관리\", \"admin\");\nawait upsertUser(STUDENT_ID, \"이학생\", \"student\", {\n school: \"로드맵고\",\n grade: \"고2\",\n target: \"서울대 컴퓨터공학과\",\n seat: \"A-14\",\n});\n\n// 과목\nconst subjectIds: string[] = [];\nfor (let i = 0; i < DEFAULT_SUBJECTS.length; i++) {\n const s = DEFAULT_SUBJECTS[i];\n const existing = await one<{ id: string }>(\n \"SELECT id FROM subjects WHERE user_id = ? AND name = ?\",\n [STUDENT_ID, s.name],\n );\n if (existing) {\n subjectIds.push(existing.id);\n continue;\n }\n const id = uuid();\n await exec(\n \"INSERT INTO subjects (id, user_id, name, color, sort_order, archived, created_at) VALUES (?, ?, ?, ?, ?, 0, ?)\",\n [id, STUDENT_ID, s.name, s.color, i, nowIso()],\n );\n subjectIds.push(id);\n}\n\n// 최근 14일 계획·세션·일기\nconst today = toLocalDate();\nconst already = await query(\"SELECT id FROM plans WHERE user_id = ? LIMIT 1\", [STUDENT_ID]);\nif (already.length) {\n console.log(\"이미 시드 데이터가 있습니다. 계획 생성은 건너뜁니다.\");\n} else {\n const titles = [\n [\"수능특강 독서 3강\", 60],\n [\"수학 미적분 유형편 20문항\", 90],\n [\"영단어 Day 12\", 30],\n [\"한국사 근현대 개념\", 45],\n [\"기출 오답 정리\", 50],\n ] as const;\n\n for (let d = 13; d >= 0; d--) {\n const date = addDays(today, -d);\n const count = 2 + (d % 3);\n for (let i = 0; i < count; i++) {\n const [title, goal] = titles[(d + i) % titles.length];\n const planId = uuid();\n const done = Math.random() > 0.3;\n const actual = done ? goal + Math.round((Math.random() - 0.5) * 20) : Math.round(goal * 0.4);\n const now = nowIso();\n\n await exec(\n `INSERT INTO plans (id, user_id, date, subject_id, title, goal_minutes, actual_minutes, status, priority, sort_order, created_by, created_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, 2, ?, ?, ?, ?)`,\n [\n planId,\n STUDENT_ID,\n date,\n subjectIds[(d + i) % subjectIds.length],\n title,\n goal,\n Math.max(0, actual),\n done ? \"done\" : \"todo\",\n i,\n STUDENT_ID,\n now,\n now,\n ],\n );\n if (actual > 0) {\n await exec(\n `INSERT INTO study_sessions (id, user_id, plan_id, date, started_at, ended_at, minutes, source, created_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, 'manual', ?)`,\n [\n uuid(),\n STUDENT_ID,\n planId,\n date,\n `${date}T10:00:00.000Z`,\n `${date}T11:00:00.000Z`,\n Math.max(0, actual),\n now,\n ],\n );\n }\n }\n\n if (d % 2 === 0) {\n await exec(\n `INSERT INTO diaries (id, user_id, date, mood, focus_score, content, keep_note, problem_note, try_note, created_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n [\n uuid(),\n STUDENT_ID,\n date,\n 3 + (d % 3 === 0 ? 1 : 0),\n 3 + (d % 2),\n \"오늘은 수학에 시간을 많이 썼다. 미적분 유형이 아직 손에 안 익는다.\",\n \"계획한 분량을 거의 다 했다.\",\n \"쉬는 시간이 길어졌다.\",\n \"타이머를 켜고 50분 단위로 끊어보기.\",\n nowIso(),\n nowIso(),\n ],\n );\n }\n }\n console.log(\"계획·세션·일기 시드 완료\");\n}\n\nconsole.log(`\n시드 완료.\n 학생 토큰 : dev:${STUDENT_ID}:student\n 관리자 토큰: dev:${ADMIN_ID}:admin\n .env 에 AUTH_MODE=dev 로 두면 이 토큰으로 로그인할 수 있습니다.\n`);\n",[],[159,263],"4e4d5d4e-b2ed-4987-a594-9336aa870866","schema.ts","08b2b3b8-ab26-11f1-ba0e-1607ee4eb77e",12,["D",1788831526757],"/**\n * 스키마 SSOT.\n *\n * 규칙\n * - id 는 전부 TEXT(UUID). 자동증가 정수를 쓰지 않는다(환경 간 이관이 쉬움).\n * - 날짜는 'YYYY-MM-DD'(KST 기준), 시각은 ISO8601 UTC 문자열.\n * - 마이그레이션은 append-only. 기존 항목을 수정하지 말고 뒤에 추가한다.\n */\n\nexport interface Migration {\n id: string;\n statements: string[];\n}\n\nexport const MIGRATIONS: Migration[] = [\n {\n id: \"0001_init\",\n statements: [\n `CREATE TABLE IF NOT EXISTS users (\n id TEXT PRIMARY KEY, -- Firebase uid\n email TEXT,\n name TEXT NOT NULL DEFAULT '',\n phone TEXT,\n role TEXT NOT NULL DEFAULT 'student', -- student | coach | admin\n status TEXT NOT NULL DEFAULT 'active', -- active | paused | left\n school TEXT,\n grade TEXT,\n target TEXT, -- 목표 대학/시험\n seat_no TEXT, -- 독서실 좌석\n photo_url TEXT,\n coach_id TEXT, -- 담당 관리쌤\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n last_login_at TEXT\n )`,\n `CREATE INDEX IF NOT EXISTS idx_users_role ON users(role, status)`,\n `CREATE INDEX IF NOT EXISTS idx_users_coach ON users(coach_id)`,\n\n `CREATE TABLE IF NOT EXISTS subjects (\n id TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n name TEXT NOT NULL,\n color TEXT NOT NULL DEFAULT '#4f46e5',\n sort_order INTEGER NOT NULL DEFAULT 0,\n archived INTEGER NOT NULL DEFAULT 0,\n created_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_subjects_user ON subjects(user_id, archived, sort_order)`,\n\n `CREATE TABLE IF NOT EXISTS plans (\n id TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n date TEXT NOT NULL, -- YYYY-MM-DD\n subject_id TEXT,\n title TEXT NOT NULL,\n goal_minutes INTEGER NOT NULL DEFAULT 0,\n actual_minutes INTEGER NOT NULL DEFAULT 0,\n status TEXT NOT NULL DEFAULT 'todo', -- todo | doing | done | skipped\n priority INTEGER NOT NULL DEFAULT 2, -- 1 높음 2 보통 3 낮음\n memo TEXT,\n sort_order INTEGER NOT NULL DEFAULT 0,\n created_by TEXT NOT NULL, -- 학생 본인 또는 관리쌤 uid\n completed_at TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_plans_user_date ON plans(user_id, date)`,\n `CREATE INDEX IF NOT EXISTS idx_plans_subject ON plans(subject_id)`,\n\n `CREATE TABLE IF NOT EXISTS study_sessions (\n id TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n plan_id TEXT,\n date TEXT NOT NULL,\n started_at TEXT NOT NULL,\n ended_at TEXT,\n minutes INTEGER NOT NULL DEFAULT 0,\n source TEXT NOT NULL DEFAULT 'timer', -- timer | manual\n created_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_sessions_user_date ON study_sessions(user_id, date)`,\n `CREATE INDEX IF NOT EXISTS idx_sessions_open ON study_sessions(user_id, ended_at)`,\n\n `CREATE TABLE IF NOT EXISTS diaries (\n id TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n date TEXT NOT NULL,\n mood INTEGER, -- 1..5\n focus_score INTEGER, -- 1..5\n content TEXT NOT NULL DEFAULT '',\n keep_note TEXT, -- 잘한 점\n problem_note TEXT, -- 아쉬운 점\n try_note TEXT, -- 내일 할 것\n coach_comment TEXT,\n coach_id TEXT,\n commented_at TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`,\n `CREATE UNIQUE INDEX IF NOT EXISTS uq_diary_user_date ON diaries(user_id, date)`,\n\n `CREATE TABLE IF NOT EXISTS schedule_events (\n id TEXT PRIMARY KEY,\n user_id TEXT, -- NULL 이면 전체 공지 일정\n title TEXT NOT NULL,\n type TEXT NOT NULL DEFAULT 'etc', -- exam | class | consult | holiday | etc\n start_at TEXT NOT NULL, -- ISO UTC\n end_at TEXT,\n all_day INTEGER NOT NULL DEFAULT 0,\n location TEXT,\n memo TEXT,\n created_by TEXT NOT NULL,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_events_user_start ON schedule_events(user_id, start_at)`,\n\n `CREATE TABLE IF NOT EXISTS chat_threads (\n id TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n title TEXT NOT NULL DEFAULT '새 대화',\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_threads_user ON chat_threads(user_id, updated_at DESC)`,\n\n `CREATE TABLE IF NOT EXISTS chat_messages (\n id TEXT PRIMARY KEY,\n thread_id TEXT NOT NULL,\n user_id TEXT NOT NULL,\n role TEXT NOT NULL, -- user | assistant\n content TEXT NOT NULL,\n tokens_in INTEGER NOT NULL DEFAULT 0,\n tokens_out INTEGER NOT NULL DEFAULT 0,\n created_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_messages_thread ON chat_messages(thread_id, created_at)`,\n `CREATE INDEX IF NOT EXISTS idx_messages_user_day ON chat_messages(user_id, created_at)`,\n\n `CREATE TABLE IF NOT EXISTS consult_slots (\n id TEXT PRIMARY KEY,\n coach_id TEXT NOT NULL,\n start_at TEXT NOT NULL,\n end_at TEXT NOT NULL,\n capacity INTEGER NOT NULL DEFAULT 1,\n status TEXT NOT NULL DEFAULT 'open', -- open | closed\n memo TEXT,\n created_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_slots_start ON consult_slots(start_at, status)`,\n\n `CREATE TABLE IF NOT EXISTS consults (\n id TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n slot_id TEXT,\n category TEXT NOT NULL DEFAULT 'study', -- study | plan | mental | career | etc\n topic TEXT NOT NULL,\n content TEXT NOT NULL DEFAULT '',\n mode TEXT NOT NULL DEFAULT 'offline', -- offline | online | phone\n preferred_at TEXT,\n status TEXT NOT NULL DEFAULT 'requested', -- requested | scheduled | done | canceled\n coach_id TEXT,\n scheduled_at TEXT,\n coach_note TEXT,\n student_feedback TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_consults_user ON consults(user_id, created_at DESC)`,\n `CREATE INDEX IF NOT EXISTS idx_consults_status ON consults(status, created_at DESC)`,\n\n `CREATE TABLE IF NOT EXISTS notifications (\n id TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n type TEXT NOT NULL,\n title TEXT NOT NULL,\n body TEXT,\n link TEXT,\n read_at TEXT,\n created_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_notif_user ON notifications(user_id, read_at, created_at DESC)`,\n\n `CREATE TABLE IF NOT EXISTS audit_logs (\n id TEXT PRIMARY KEY,\n actor_id TEXT,\n action TEXT NOT NULL,\n target TEXT,\n meta TEXT,\n created_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_audit_created ON audit_logs(created_at DESC)`,\n ],\n },\n];\n\nexport const DEFAULT_SUBJECTS: Array<{ name: string; color: string }> = [\n { name: \"국어\", color: \"#ef4444\" },\n { name: \"수학\", color: \"#3b82f6\" },\n { name: \"영어\", color: \"#10b981\" },\n { name: \"탐구\", color: \"#f59e0b\" },\n { name: \"기타\", color: \"#8b5cf6\" },\n];\n",[],[159,271],"42980979-1a80-46a5-b031-ae98396bf820","migrate.ts","08b84e36-ab26-11f1-84f5-1607ee4eb77e",13,["D",1788831526829],"/**\n * 마이그레이션 실행기.\n * 적용된 마이그레이션 id 를 _migrations 에 기록해 멱등하게 만든다.\n *\n * 로컬: deno task migrate\n * Val Town: /api/admin/migrate (관리자) 또는 이 파일을 한 번 실행하는 val\n */\nimport \"../lib/env.ts\";\nimport { exec, execScript, query } from \"../lib/sqlite.ts\";\nimport { nowIso } from \"../lib/time.ts\";\nimport { MIGRATIONS } from \"./schema.ts\";\n\nexport async function migrate(): Promise<{ applied: string[]; skipped: string[] }> {\n await exec(\n `CREATE TABLE IF NOT EXISTS _migrations (\n id TEXT PRIMARY KEY,\n applied_at TEXT NOT NULL\n )`,\n );\n\n const done = new Set(\n (await query<{ id: string }>(\"SELECT id FROM _migrations\")).map((r) => r.id),\n );\n\n const applied: string[] = [];\n const skipped: string[] = [];\n\n for (const m of MIGRATIONS) {\n if (done.has(m.id)) {\n skipped.push(m.id);\n continue;\n }\n await execScript(m.statements);\n await exec(\"INSERT INTO _migrations (id, applied_at) VALUES (?, ?)\", [m.id, nowIso()]);\n applied.push(m.id);\n }\n\n return { applied, skipped };\n}\n\nif (import.meta.main) {\n const result = await migrate();\n console.log(\"적용:\", result.applied.length ? result.applied.join(\", \") : \"(없음)\");\n console.log(\"건너뜀:\", result.skipped.length ? result.skipped.join(\", \") : \"(없음)\");\n}\n",[],[159,279],["D",1788831525229],[184,185,186],[159],"1cf511e8-e749-44bd-bc68-e750233a04ea",["D",1788831527099],[],[165,32],["D",1788831525524],[182],[165],["D",1788831523479],["D",1789529498250],{"_99":98,"_106":102},{"_99":98,"_100":98,"_101":102,"_18":54,"_103":104,"_105":24},{"_13":88,"_31":89,"_42":41,"_90":43,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":44,"_97":98},"ctx",{"_81":-5,"_126":334,"_335":336,"_337":338,"_339":24,"_340":24,"_341":24,"_342":58,"_343":-5,"_344":-7,"_345":-7,"_346":62,"_347":24,"_348":24,"_349":-5,"_350":24,"_351":24,"_352":24,"_353":-5},"ENV",{"_305":306,"_307":308,"_309":89,"_310":311,"_312":313,"_314":315,"_316":317,"_318":319,"_320":321,"_322":323,"_324":325,"_326":327,"_328":329,"_330":331,"_332":333},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v16