[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_404":405,"_406":407},"routes/_app.x.$handle.$name",{"_100":99,"_32":46,"_108":90,"_27":109,"_13":14,"_110":-5,"_11":111,"_112":113,"_114":115,"_116":117,"_118":119,"_20":-5,"_120":-5,"_121":-5,"_122":25,"_123":124,"_125":60,"_126":-5,"_127":-5,"_128":129},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_44":45,"_32":46,"_39":47,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":72,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":84,"_85":86,"_87":88,"_89":25},"version",33,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":38,"_39":40,"_41":14,"_42":43,"_24":25},"previous",{"_30":31,"_32":33,"_34":35,"_36":37},"deleted",false,"deletedHere","path","lib/auth.ts","latestPath","fileId","0882c860-ab26-11f1-aeaa-1607ee4eb77e","name","auth.ts","fileType","script","content","/**\n * Firebase ID 토큰 검증 + 사용자 upsert.\n *\n * Admin SDK 를 쓰지 않는다 — Deno/Val Town 에서 무겁고 서비스 계정 키까지 필요하다.\n * 대신 구글이 공개하는 JWK 로 RS256 서명을 WebCrypto 로 직접 검증한다.\n * (x509 PEM 엔드포인트가 아니라 JWK 엔드포인트를 쓰는 이유: importKey('jwk') 로 바로 들어간다.)\n */\nimport { CONFIG } from \"../config.ts\";\nimport { AuthUser, forbidden, unauthorized } from \"./http.ts\";\nimport { exec, one } from \"./sqlite.ts\";\nimport { nowIso } from \"./time.ts\";\n\nconst JWK_URL =\n \"https://www.googleapis.com/service_accounts/v1/jwk/securetoken@system.gserviceaccount.com\";\n\ninterface Jwk {\n kid: string;\n kty: string;\n n: string;\n e: string;\n alg: string;\n}\n\nlet keyCache: { keys: Map; expiresAt: number } | null = null;\n\nasync function getKeys(): Promise> {\n if (keyCache && keyCache.expiresAt > Date.now()) return keyCache.keys;\n\n const res = await fetch(JWK_URL);\n if (!res.ok) throw unauthorized(\"인증 키를 가져오지 못했습니다.\");\n\n const maxAge = Number(\n (res.headers.get(\"cache-control\") ?? \"\").match(/max-age=(\\d+)/)?.[1] ?? \"3600\",\n );\n const data = (await res.json()) as { keys: Jwk[] };\n\n const keys = new Map();\n for (const jwk of data.keys) {\n const key = await crypto.subtle.importKey(\n \"jwk\",\n { kty: jwk.kty, n: jwk.n, e: jwk.e, alg: \"RS256\", ext: true },\n { name: \"RSASSA-PKCS1-v1_5\", hash: \"SHA-256\" },\n false,\n [\"verify\"],\n );\n keys.set(jwk.kid, key);\n }\n\n keyCache = { keys, expiresAt: Date.now() + maxAge * 1000 };\n return keys;\n}\n\nfunction b64urlToBytes(s: string): Uint8Array {\n const b64 = s.replace(/-/g, \"+\").replace(/_/g, \"/\").padEnd(\n s.length + ((4 - (s.length % 4)) % 4),\n \"=\",\n );\n const bin = atob(b64);\n // WebCrypto 는 ArrayBuffer 기반 뷰만 받는다(SharedArrayBuffer 불가) — 버퍼를 직접 만들어 맞춘다.\n const out = new Uint8Array(new ArrayBuffer(bin.length));\n for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);\n return out;\n}\n\nfunction b64urlToJson(s: string): T {\n return JSON.parse(new TextDecoder().decode(b64urlToBytes(s))) as T;\n}\n\nexport interface FirebaseClaims {\n sub: string;\n email?: string;\n email_verified?: boolean;\n name?: string;\n picture?: string;\n aud: string;\n iss: string;\n exp: number;\n iat: number;\n}\n\n/** Firebase ID 토큰을 검증하고 클레임을 돌려준다. */\nexport async function verifyIdToken(token: string): Promise {\n const parts = token.split(\".\");\n if (parts.length !== 3) throw unauthorized(\"토큰 형식이 올바르지 않습니다.\");\n\n const [headerB64, payloadB64, sigB64] = parts;\n\n // 깨진 토큰은 base64/JSON 파싱에서 터진다. 그대로 두면 500 이 나가므로 401 로 바꾼다.\n let header: { alg: string; kid: string };\n try {\n header = b64urlToJson<{ alg: string; kid: string }>(headerB64);\n } catch {\n throw unauthorized(\"토큰을 해석할 수 없습니다. 다시 로그인해 주세요.\");\n }\n if (header.alg !== \"RS256\") throw unauthorized(\"지원하지 않는 서명 알고리즘입니다.\");\n\n const keys = await getKeys();\n const key = keys.get(header.kid);\n if (!key) throw unauthorized(\"토큰 서명 키를 찾을 수 없습니다.\");\n\n let valid: boolean;\n try {\n valid = await crypto.subtle.verify(\n \"RSASSA-PKCS1-v1_5\",\n key,\n b64urlToBytes(sigB64),\n new TextEncoder().encode(`${headerB64}.${payloadB64}`),\n );\n } catch {\n throw unauthorized(\"토큰 서명을 확인할 수 없습니다.\");\n }\n if (!valid) throw unauthorized(\"토큰 서명이 올바르지 않습니다.\");\n\n let claims: FirebaseClaims;\n try {\n claims = b64urlToJson(payloadB64);\n } catch {\n throw unauthorized(\"토큰을 해석할 수 없습니다. 다시 로그인해 주세요.\");\n }\n const projectId = CONFIG.firebaseProjectId;\n const now = Math.floor(Date.now() / 1000);\n\n if (!projectId) throw unauthorized(\"서버에 FIREBASE_PROJECT_ID 가 설정되지 않았습니다.\");\n if (claims.aud !== projectId) throw unauthorized(\"토큰 대상(aud)이 일치하지 않습니다.\");\n if (claims.iss !== `https://securetoken.google.com/${projectId}`) {\n throw unauthorized(\"토큰 발급자(iss)가 일치하지 않습니다.\");\n }\n if (claims.exp <= now) throw unauthorized(\"토큰이 만료되었습니다. 다시 로그인해 주세요.\");\n if (claims.iat > now + 300) throw unauthorized(\"토큰 발급 시각이 올바르지 않습니다.\");\n if (!claims.sub) throw unauthorized(\"토큰에 사용자 식별자가 없습니다.\");\n\n return claims;\n}\n\ninterface UserRow {\n id: string;\n email: string | null;\n name: string;\n role: \"student\" | \"coach\" | \"admin\";\n status: string;\n}\n\n/** 첫 로그인이면 만들고, 있으면 마지막 로그인 시각만 갱신한다. */\nasync function upsertUser(claims: {\n sub: string;\n email?: string;\n name?: string;\n picture?: string;\n}): Promise {\n const now = nowIso();\n const email = claims.email?.toLowerCase() ?? null;\n const existing = await one(\n \"SELECT id, email, name, role, status FROM users WHERE id = ?\",\n [claims.sub],\n );\n\n if (existing) {\n await exec(\"UPDATE users SET last_login_at = ?, updated_at = ? WHERE id = ?\", [\n now,\n now,\n claims.sub,\n ]);\n // 운영자 이메일이 나중에 추가된 경우를 위해 매 로그인마다 승격 여부를 본다.\n if (email && CONFIG.adminEmails.includes(email) && existing.role !== \"admin\") {\n await exec(\"UPDATE users SET role = 'admin' WHERE id = ?\", [claims.sub]);\n existing.role = \"admin\";\n }\n return existing;\n }\n\n const role = email && CONFIG.adminEmails.includes(email) ? \"admin\" : \"student\";\n await exec(\n `INSERT INTO users (id, email, name, role, status, photo_url, created_at, updated_at, last_login_at)\n VALUES (?, ?, ?, ?, 'active', ?, ?, ?, ?)`,\n [claims.sub, email, claims.name ?? \"\", role, claims.picture ?? null, now, now, now],\n );\n\n return { id: claims.sub, email, name: claims.name ?? \"\", role, status: \"active\" };\n}\n\n/**\n * 요청에서 사용자를 뽑는다. 토큰이 없으면 null.\n * AUTH_MODE=dev 이면 \"dev::\" 형태를 허용한다(로컬 전용).\n */\nexport async function resolveUser(req: Request): Promise {\n const header = req.headers.get(\"authorization\") ?? \"\";\n if (!header.toLowerCase().startsWith(\"bearer \")) return null;\n const token = header.slice(7).trim();\n if (!token) return null;\n\n if (CONFIG.authMode === \"dev\" && token.startsWith(\"dev:\")) {\n const [, uid, role = \"student\"] = token.split(\":\");\n const row = await upsertUser({ sub: uid, email: `${uid}@dev.local`, name: `dev-${uid}` });\n if (role === \"admin\" || role === \"coach\") {\n await exec(\"UPDATE users SET role = ? WHERE id = ?\", [role, uid]);\n row.role = role as UserRow[\"role\"];\n }\n return { id: row.id, email: row.email, name: row.name, role: row.role };\n }\n\n const claims = await verifyIdToken(token);\n const row = await upsertUser(claims);\n if (row.status === \"left\") throw forbidden(\"이용이 종료된 계정입니다. 관리자에게 문의하세요.\");\n return { id: row.id, email: row.email, name: row.name, role: row.role };\n}\n\nexport function requireStaff(user: AuthUser): void {\n if (user.role !== \"admin\" && user.role !== \"coach\") {\n throw forbidden(\"관리자 또는 관리쌤만 사용할 수 있습니다.\");\n }\n}\n\nexport function requireAdmin(user: AuthUser): void {\n if (user.role !== \"admin\") throw forbidden(\"관리자만 사용할 수 있습니다.\");\n}\n\nexport const isStaff = (user: AuthUser) => user.role === \"admin\" || user.role === \"coach\";\n","/**\n * Firebase ID 토큰 검증 + 사용자 upsert.\n *\n * Admin SDK 를 쓰지 않는다 — Deno/Val Town 에서 무겁고 서비스 계정 키까지 필요하다.\n * 대신 구글이 공개하는 JWK 로 RS256 서명을 WebCrypto 로 직접 검증한다.\n * (x509 PEM 엔드포인트가 아니라 JWK 엔드포인트를 쓰는 이유: importKey('jwk') 로 바로 들어간다.)\n */\nimport { CONFIG } from \"../config.ts\";\nimport { AuthUser, forbidden, unauthorized } from \"./http.ts\";\nimport { exec, one } from \"./sqlite.ts\";\nimport { nowIso } from \"./time.ts\";\n\nconst JWK_URL =\n \"https://www.googleapis.com/service_accounts/v1/jwk/securetoken@system.gserviceaccount.com\";\n\ninterface Jwk {\n kid: string;\n kty: string;\n n: string;\n e: string;\n alg: string;\n}\n\nlet keyCache: { keys: Map; expiresAt: number } | null = null;\n\nasync function getKeys(): Promise> {\n if (keyCache && keyCache.expiresAt > Date.now()) return keyCache.keys;\n\n const res = await fetch(JWK_URL);\n if (!res.ok) throw unauthorized(\"인증 키를 가져오지 못했습니다.\");\n\n const maxAge = Number(\n (res.headers.get(\"cache-control\") ?? \"\").match(/max-age=(\\d+)/)?.[1] ?? \"3600\",\n );\n const data = (await res.json()) as { keys: Jwk[] };\n\n const keys = new Map();\n for (const jwk of data.keys) {\n const key = await crypto.subtle.importKey(\n \"jwk\",\n { kty: jwk.kty, n: jwk.n, e: jwk.e, alg: \"RS256\", ext: true },\n { name: \"RSASSA-PKCS1-v1_5\", hash: \"SHA-256\" },\n false,\n [\"verify\"],\n );\n keys.set(jwk.kid, key);\n }\n\n keyCache = { keys, expiresAt: Date.now() + maxAge * 1000 };\n return keys;\n}\n\nfunction b64urlToBytes(s: string): Uint8Array {\n const b64 = s.replace(/-/g, \"+\").replace(/_/g, \"/\").padEnd(\n s.length + ((4 - (s.length % 4)) % 4),\n \"=\",\n );\n const bin = atob(b64);\n // WebCrypto 는 ArrayBuffer 기반 뷰만 받는다(SharedArrayBuffer 불가) — 버퍼를 직접 만들어 맞춘다.\n const out = new Uint8Array(new ArrayBuffer(bin.length));\n for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);\n return out;\n}\n\nfunction b64urlToJson(s: string): T {\n return JSON.parse(new TextDecoder().decode(b64urlToBytes(s))) as T;\n}\n\nexport interface FirebaseClaims {\n sub: string;\n email?: string;\n email_verified?: boolean;\n name?: string;\n picture?: string;\n aud: string;\n iss: string;\n exp: number;\n iat: number;\n}\n\n/** Firebase ID 토큰을 검증하고 클레임을 돌려준다. */\nexport async function verifyIdToken(token: string): Promise {\n const parts = token.split(\".\");\n if (parts.length !== 3) throw unauthorized(\"토큰 형식이 올바르지 않습니다.\");\n\n const [headerB64, payloadB64, sigB64] = parts;\n\n // 깨진 토큰은 base64/JSON 파싱에서 터진다. 그대로 두면 500 이 나가므로 401 로 바꾼다.\n let header: { alg: string; kid: string };\n try {\n header = b64urlToJson<{ alg: string; kid: string }>(headerB64);\n } catch {\n throw unauthorized(\"토큰을 해석할 수 없습니다. 다시 로그인해 주세요.\");\n }\n if (header.alg !== \"RS256\") throw unauthorized(\"지원하지 않는 서명 알고리즘입니다.\");\n\n const keys = await getKeys();\n const key = keys.get(header.kid);\n if (!key) throw unauthorized(\"토큰 서명 키를 찾을 수 없습니다.\");\n\n let valid: boolean;\n try {\n valid = await crypto.subtle.verify(\n \"RSASSA-PKCS1-v1_5\",\n key,\n b64urlToBytes(sigB64),\n new TextEncoder().encode(`${headerB64}.${payloadB64}`),\n );\n } catch {\n throw unauthorized(\"토큰 서명을 확인할 수 없습니다.\");\n }\n if (!valid) throw unauthorized(\"토큰 서명이 올바르지 않습니다.\");\n\n let claims: FirebaseClaims;\n try {\n claims = b64urlToJson(payloadB64);\n } catch {\n throw unauthorized(\"토큰을 해석할 수 없습니다. 다시 로그인해 주세요.\");\n }\n const projectId = CONFIG.firebaseProjectId;\n const now = Math.floor(Date.now() / 1000);\n\n if (!projectId) throw unauthorized(\"서버에 FIREBASE_PROJECT_ID 가 설정되지 않았습니다.\");\n if (claims.aud !== projectId) throw unauthorized(\"토큰 대상(aud)이 일치하지 않습니다.\");\n if (claims.iss !== `https://securetoken.google.com/${projectId}`) {\n throw unauthorized(\"토큰 발급자(iss)가 일치하지 않습니다.\");\n }\n if (claims.exp <= now) throw unauthorized(\"토큰이 만료되었습니다. 다시 로그인해 주세요.\");\n if (claims.iat > now + 300) throw unauthorized(\"토큰 발급 시각이 올바르지 않습니다.\");\n if (!claims.sub) throw unauthorized(\"토큰에 사용자 식별자가 없습니다.\");\n\n return claims;\n}\n\ninterface UserRow {\n id: string;\n email: string | null;\n name: string;\n role: \"student\" | \"coach\" | \"admin\";\n status: string;\n}\n\n/** 첫 로그인이면 만들고, 있으면 마지막 로그인 시각만 갱신한다. */\nasync function upsertUser(claims: {\n sub: string;\n email?: string;\n name?: string;\n picture?: string;\n}): Promise {\n const now = nowIso();\n const email = claims.email?.toLowerCase() ?? null;\n const existing = await one(\n \"SELECT id, email, name, role, status, photo_url FROM users WHERE id = ?\",\n [claims.sub],\n );\n\n if (existing) {\n await exec(\"UPDATE users SET last_login_at = ?, updated_at = ? WHERE id = ?\", [\n now,\n now,\n claims.sub,\n ]);\n /*\n * ★ 비어 있는 항목만 토큰 값으로 채운다.\n * 이메일/비밀번호 가입은 계정이 먼저 만들어지고 displayName 이 나중에 붙는다.\n * 그래서 첫 로그인 토큰에는 name 이 없고, 이 분기에서 갱신하지 않으면\n * 화면에 영원히 \"이름 없음\" 으로 남는다(실제로 그랬다).\n * 이미 값이 있으면 덮지 않는다 — 운영자가 고친 이름을 로그인할 때마다 되돌리면 안 된다.\n */\n if (!existing.name && claims.name) {\n await exec(\"UPDATE users SET name = ? WHERE id = ?\", [claims.name, claims.sub]);\n existing.name = claims.name;\n }\n if (!existing.photo_url && claims.picture) {\n await exec(\"UPDATE users SET photo_url = ? WHERE id = ?\", [claims.picture, claims.sub]);\n }\n\n // 운영자 이메일이 나중에 추가된 경우를 위해 매 로그인마다 승격 여부를 본다.\n if (email && CONFIG.adminEmails.includes(email) && existing.role !== \"admin\") {\n await exec(\"UPDATE users SET role = 'admin' WHERE id = ?\", [claims.sub]);\n existing.role = \"admin\";\n }\n return existing;\n }\n\n const role = email && CONFIG.adminEmails.includes(email) ? \"admin\" : \"student\";\n await exec(\n `INSERT INTO users (id, email, name, role, status, photo_url, created_at, updated_at, last_login_at)\n VALUES (?, ?, ?, ?, 'active', ?, ?, ?, ?)`,\n [claims.sub, email, claims.name ?? \"\", role, claims.picture ?? null, now, now, now],\n );\n\n return { id: claims.sub, email, name: claims.name ?? \"\", role, status: \"active\" };\n}\n\n/**\n * 요청에서 사용자를 뽑는다. 토큰이 없으면 null.\n * AUTH_MODE=dev 이면 \"dev::\" 형태를 허용한다(로컬 전용).\n */\nexport async function resolveUser(req: Request): Promise {\n const header = req.headers.get(\"authorization\") ?? \"\";\n if (!header.toLowerCase().startsWith(\"bearer \")) return null;\n const token = header.slice(7).trim();\n if (!token) return null;\n\n if (CONFIG.authMode === \"dev\" && token.startsWith(\"dev:\")) {\n const [, uid, role = \"student\"] = token.split(\":\");\n const row = await upsertUser({ sub: uid, email: `${uid}@dev.local`, name: `dev-${uid}` });\n if (role === \"admin\" || role === \"coach\") {\n await exec(\"UPDATE users SET role = ? WHERE id = ?\", [role, uid]);\n row.role = role as UserRow[\"role\"];\n }\n return { id: row.id, email: row.email, name: row.name, role: row.role };\n }\n\n const claims = await verifyIdToken(token);\n const row = await upsertUser(claims);\n if (row.status === \"left\") throw forbidden(\"이용이 종료된 계정입니다. 관리자에게 문의하세요.\");\n return { id: row.id, email: row.email, name: row.name, role: row.role };\n}\n\nexport function requireStaff(user: AuthUser): void {\n if (user.role !== \"admin\" && user.role !== \"coach\") {\n throw forbidden(\"관리자 또는 관리쌤만 사용할 수 있습니다.\");\n }\n}\n\nexport function requireAdmin(user: AuthUser): void {\n if (user.role !== \"admin\") throw forbidden(\"관리자만 사용할 수 있습니다.\");\n}\n\nexport const isStaff = (user: AuthUser) => user.role === \"admin\" || user.role === \"coach\";\n","createdAt",["D",1788841392119],"branchVersion","branchId","964f7637-562b-4945-9c69-b20a92bec2d0","id","19e69952-e1a2-467a-8d0c-9197e6be008a","roadmap-api",["D",1788831523479],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","관리형 독서실 학습 관리 API","imageUrl","62e039ee-902a-49bb-8a64-406c241f4c74","pinnedFileId","08a8e9dc-ab26-11f1-b9b1-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a07e6b-1ded-75cb-baf4-27bab987c121","tursoName","19e69952e1a2467a8d0c9197e6be008a","tursoHostname","19e69952e1a2467a8d0c9197e6be008a-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789442454549],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_100":99,"_107":103},"org",{"_100":99,"_101":99,"_102":103,"_18":56,"_104":105,"_106":25},"branch",{"_13":14,"_32":90,"_44":43,"_91":45,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":46,"_98":99},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","marketadapter","handle","displayName","avatar","https://lh3.googleusercontent.com/a/ACg8ocIP-2ZbzXrHkL2_NvgLmOKbrq2boZbhR3VJZY8_uH0a2c56-zs=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_44":45,"_32":46,"_39":399,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":400,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":401,"_85":402,"_87":403,"_89":25},"tree",[190,192,196,204,215,216],"files",[190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216],"counts",{"_179":64,"_180":143,"_181":64,"_182":183,"_184":185},"contents",[130,131,132,133,134,135],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_44":173,"_32":174,"_30":175,"_139":-5,"_42":43,"_41":176,"_141":60,"_39":177,"_13":64,"_34":160,"_36":-5,"_24":25,"_146":-5,"_27":178},{"_44":167,"_32":168,"_30":169,"_139":-5,"_42":43,"_41":170,"_141":60,"_39":171,"_13":64,"_34":160,"_36":-5,"_24":25,"_146":-5,"_27":172},{"_44":162,"_32":163,"_30":164,"_139":-5,"_42":43,"_41":143,"_141":60,"_39":165,"_13":64,"_34":160,"_36":-5,"_24":25,"_146":-5,"_27":166},{"_44":155,"_32":156,"_30":157,"_139":-5,"_42":43,"_41":158,"_141":60,"_39":159,"_13":64,"_34":160,"_36":-5,"_24":25,"_146":-5,"_27":161},{"_44":148,"_32":149,"_30":150,"_139":-5,"_42":43,"_41":151,"_141":60,"_39":152,"_13":64,"_34":35,"_36":153,"_24":25,"_146":-5,"_27":154},{"_44":136,"_32":137,"_30":138,"_139":-5,"_42":43,"_41":140,"_141":60,"_39":142,"_13":143,"_34":144,"_36":145,"_24":25,"_146":-5,"_27":147},"550f0237-bc84-47cc-9bc2-9830f4f002cd","main.ts","088e9dd4-ab26-11f1-bd9b-1607ee4eb77e","parentId",28,"latest",["D",1788831612609],1,"http","/**\n * Val Town HTTP 진입점.\n *\n * Val Town 은 이 파일의 default export 를 fetch 핸들러로 실행한다.\n * 로컬 개발은 backend/local.ts 가 같은 핸들러를 Deno.serve 로 감싼다.\n */\nimport { requireAdmin, requireStaff, resolveUser } from \"./lib/auth.ts\";\nimport {\n AuthUser,\n bodyReader,\n corsHeaders,\n Ctx,\n errorResponse,\n json,\n unauthorized,\n} from \"./lib/http.ts\";\nimport { buildRouter } from \"./routes/index.ts\";\nimport { toLocalDate } from \"./lib/time.ts\";\n\nconst router = buildRouter();\n\nexport default async function handler(req: Request): Promise {\n const url = new URL(req.url);\n const cors = corsHeaders(req);\n\n if (req.method === \"OPTIONS\") return new Response(null, { status: 204, headers: cors });\n\n try {\n if (url.pathname === \"/\" || url.pathname === \"/api\" || url.pathname === \"/api/health\") {\n return json(\n { ok: true, service: \"roadmap-study-api\", today: toLocalDate() },\n 200,\n cors,\n );\n }\n\n const matched = router.match(req.method, url.pathname);\n if (!matched) {\n return json({ error: \"not_found\", message: \"없는 경로입니다.\" }, 404, cors);\n }\n\n const level = router.levelOf(matched.route);\n let user: AuthUser | null = null;\n\n if (level !== \"public\") {\n user = await resolveUser(req);\n if (!user) throw unauthorized();\n if (level === \"staff\") requireStaff(user);\n if (level === \"admin\") requireAdmin(user);\n }\n\n const ctx: Ctx = {\n req,\n url,\n params: matched.params,\n query: url.searchParams,\n user: user ?? { id: \"\", email: null, name: \"\", role: \"student\" },\n body: bodyReader(req),\n };\n\n const res = await router.run(matched.route, ctx);\n\n // SSE 응답은 헤더를 다시 만들면 스트림이 깨진다 — 헤더만 덧댄다.\n const headers = new Headers(res.headers);\n for (const [k, v] of Object.entries(cors)) headers.set(k, v);\n return new Response(res.body, { status: res.status, headers });\n } catch (e) {\n return errorResponse(e, req);\n }\n}\n","label",[137],"5df8443e-478d-41ef-8c79-d515c1cb1ddd","config.ts","08f8b1a6-ab26-11f1-ba0e-1607ee4eb77e",17,["D",1788831527108],"/**\n * 환경 설정 SSOT.\n *\n * 값을 상수로 굳히지 않고 getter 로 매번 읽는다.\n * 이유: 로컬에서 .env 를 나중에 주입해도 반영돼야 한다. 상수로 두면 모듈 로드 순서에\n * 따라 값이 비는 함정이 생긴다(실제로 겪음 — import 는 hoisting 돼서 .env 로더보다 먼저 돈다).\n */\n\nfunction env(key: string, fallback = \"\"): string {\n try {\n return Deno.env.get(key) ?? fallback;\n } catch {\n return fallback; // env 권한이 없는 실행 환경 대비\n }\n}\n\nfunction envList(key: string): string[] {\n return env(key).split(\",\").map((s) => s.trim()).filter(Boolean);\n}\n\nexport const CONFIG = {\n get runtime(): \"valtown\" | \"local\" {\n return env(\"RUNTIME\", \"valtown\") === \"local\" ? \"local\" : \"valtown\";\n },\n get localDbPath() {\n return env(\"LOCAL_DB_PATH\", \"./.data/app.db\");\n },\n\n get firebaseProjectId() {\n return env(\"FIREBASE_PROJECT_ID\");\n },\n get authMode(): \"firebase\" | \"dev\" {\n return env(\"AUTH_MODE\", \"firebase\") === \"dev\" ? \"dev\" : \"firebase\";\n },\n get adminEmails() {\n return envList(\"ADMIN_EMAILS\").map((e) => e.toLowerCase());\n },\n\n get allowedOrigins() {\n return envList(\"ALLOWED_ORIGINS\");\n },\n\n get anthropicApiKey() {\n return env(\"ANTHROPIC_API_KEY\");\n },\n get claudeModel() {\n return env(\"CLAUDE_MODEL\", \"claude-sonnet-5\");\n },\n get chatDailyLimit() {\n return Number(env(\"CHAT_DAILY_LIMIT\", \"60\")) || 60;\n },\n\n /** 서비스 기준 시간대 — 날짜 경계(오늘/이번주) 계산에 쓴다. */\n timezone: \"Asia/Seoul\",\n};\n\nexport const isLocal = () => CONFIG.runtime === \"local\";\n",[149],"3fb43c0f-8230-4f8c-9ddf-d22e141f8fcb","routes","0819cf40-ab26-11f1-87f9-1607ee4eb77e",4,["D",1788831525811],"directory",[156],"f1a202e2-b1b4-42ba-aec0-af1add9fd545","lib","0791e4a4-ab26-11f1-a503-1607ee4eb77e",["D",1788831524911],[163],"1ab759e0-0152-48e1-8407-330dbb0c8088","db","07c0dc82-ab26-11f1-8306-1607ee4eb77e",2,["D",1788831525229],[168],"130359c1-3f85-42d1-853e-43f5d0e94aab","crons","07f16262-ab26-11f1-87f9-1607ee4eb77e",3,["D",1788831525524],[174],"pulls","branches","forks","envVars",{"_186":188,"_189":64},"connections",{"_186":64,"_187":64},"count","unfilledCount",5,"emptyCount",{"_44":173,"_32":174,"_30":175,"_139":-5,"_42":43,"_41":176,"_141":60,"_39":396,"_13":64,"_34":160,"_36":-5,"_24":25,"_146":-5,"_218":397,"_27":398},{"_44":387,"_32":388,"_30":389,"_139":175,"_42":43,"_41":390,"_141":60,"_39":391,"_13":64,"_34":392,"_36":393,"_24":25,"_146":-5,"_218":394,"_27":395},{"_44":167,"_32":168,"_30":169,"_139":-5,"_42":43,"_41":170,"_141":60,"_39":384,"_13":64,"_34":160,"_36":-5,"_24":25,"_146":-5,"_218":385,"_27":386},{"_44":376,"_32":377,"_30":378,"_139":169,"_42":43,"_41":379,"_141":60,"_39":380,"_13":64,"_34":35,"_36":381,"_24":25,"_146":-5,"_218":382,"_27":383},{"_44":368,"_32":369,"_30":370,"_139":169,"_42":43,"_41":371,"_141":60,"_39":372,"_13":64,"_34":35,"_36":373,"_24":25,"_146":-5,"_218":374,"_27":375},{"_44":360,"_32":361,"_30":362,"_139":169,"_42":43,"_41":363,"_141":60,"_39":364,"_13":64,"_34":35,"_36":365,"_24":25,"_146":-5,"_218":366,"_27":367},{"_44":162,"_32":163,"_30":164,"_139":-5,"_42":43,"_41":143,"_141":60,"_39":357,"_13":64,"_34":160,"_36":-5,"_24":25,"_146":-5,"_218":358,"_27":359},{"_44":353,"_32":33,"_30":31,"_139":164,"_42":43,"_41":14,"_141":60,"_39":354,"_13":170,"_34":35,"_36":38,"_24":25,"_146":-5,"_218":355,"_27":356},{"_44":345,"_32":346,"_30":347,"_139":164,"_42":43,"_41":348,"_141":60,"_39":349,"_13":64,"_34":35,"_36":350,"_24":25,"_146":-5,"_218":351,"_27":352},{"_44":337,"_32":338,"_30":339,"_139":164,"_42":43,"_41":340,"_141":60,"_39":341,"_13":64,"_34":35,"_36":342,"_24":25,"_146":-5,"_218":343,"_27":344},{"_44":330,"_32":331,"_30":58,"_139":164,"_42":43,"_41":332,"_141":60,"_39":333,"_13":143,"_34":35,"_36":334,"_24":25,"_146":-5,"_218":335,"_27":336},{"_44":322,"_32":323,"_30":324,"_139":164,"_42":43,"_41":325,"_141":60,"_39":326,"_13":64,"_34":35,"_36":327,"_24":25,"_146":-5,"_218":328,"_27":329},{"_44":314,"_32":315,"_30":316,"_139":164,"_42":43,"_41":317,"_141":60,"_39":318,"_13":64,"_34":35,"_36":319,"_24":25,"_146":-5,"_218":320,"_27":321},{"_44":307,"_32":308,"_30":309,"_139":164,"_42":43,"_41":188,"_141":60,"_39":310,"_13":64,"_34":35,"_36":311,"_24":25,"_146":-5,"_218":312,"_27":313},{"_44":155,"_32":156,"_30":157,"_139":-5,"_42":43,"_41":158,"_141":60,"_39":304,"_13":64,"_34":160,"_36":-5,"_24":25,"_146":-5,"_218":305,"_27":306},{"_44":296,"_32":297,"_30":298,"_139":157,"_42":43,"_41":299,"_141":60,"_39":300,"_13":64,"_34":35,"_36":301,"_24":25,"_146":-5,"_218":302,"_27":303},{"_44":288,"_32":289,"_30":290,"_139":157,"_42":43,"_41":291,"_141":60,"_39":292,"_13":64,"_34":35,"_36":293,"_24":25,"_146":-5,"_218":294,"_27":295},{"_44":280,"_32":281,"_30":282,"_139":157,"_42":43,"_41":283,"_141":60,"_39":284,"_13":64,"_34":35,"_36":285,"_24":25,"_146":-5,"_218":286,"_27":287},{"_44":272,"_32":273,"_30":274,"_139":157,"_42":43,"_41":275,"_141":60,"_39":276,"_13":64,"_34":35,"_36":277,"_24":25,"_146":-5,"_218":278,"_27":279},{"_44":264,"_32":265,"_30":266,"_139":157,"_42":43,"_41":267,"_141":60,"_39":268,"_13":64,"_34":35,"_36":269,"_24":25,"_146":-5,"_218":270,"_27":271},{"_44":256,"_32":257,"_30":258,"_139":157,"_42":43,"_41":259,"_141":60,"_39":260,"_13":64,"_34":35,"_36":261,"_24":25,"_146":-5,"_218":262,"_27":263},{"_44":248,"_32":249,"_30":250,"_139":157,"_42":43,"_41":251,"_141":60,"_39":252,"_13":64,"_34":35,"_36":253,"_24":25,"_146":-5,"_218":254,"_27":255},{"_44":240,"_32":241,"_30":242,"_139":157,"_42":43,"_41":243,"_141":60,"_39":244,"_13":64,"_34":35,"_36":245,"_24":25,"_146":-5,"_218":246,"_27":247},{"_44":232,"_32":233,"_30":234,"_139":157,"_42":43,"_41":235,"_141":60,"_39":236,"_13":64,"_34":35,"_36":237,"_24":25,"_146":-5,"_218":238,"_27":239},{"_44":224,"_32":225,"_30":226,"_139":157,"_42":43,"_41":227,"_141":60,"_39":228,"_13":64,"_34":35,"_36":229,"_24":25,"_146":-5,"_218":230,"_27":231},{"_44":148,"_32":149,"_30":150,"_139":-5,"_42":43,"_41":151,"_141":60,"_39":221,"_13":64,"_34":35,"_36":153,"_24":25,"_146":-5,"_218":222,"_27":223},{"_44":136,"_32":137,"_30":138,"_139":-5,"_42":43,"_41":140,"_141":60,"_39":217,"_13":143,"_34":144,"_36":145,"_24":25,"_146":-5,"_218":219,"_27":220},["D",1788831612609],"children",[],[137],["D",1788831527108],[],[149],"50701be9-75eb-40ce-a3ef-62795814ae9a","schedule.ts","0aeffa1e-ab26-11f1-b062-1607ee4eb77e",27,["D",1788831527209],"/**\n * 스케줄 — 개인 일정 + 전체 공지 일정(user_id IS NULL).\n */\nimport { isStaff } from \"../lib/auth.ts\";\nimport { badRequest, Ctx, forbidden, json, notFound, Router } from \"../lib/http.ts\";\nimport { exec, one, query, uuid } from \"../lib/sqlite.ts\";\nimport { addDays, nowIso, toLocalDate } from \"../lib/time.ts\";\nimport { enumOf, isoOf, optStr, rangeFromQuery, str } from \"../lib/validate.ts\";\nimport { audit, notify, targetUserId, targetUserIdFromBody } from \"./_shared.ts\";\n\nconst TYPES = [\"exam\", \"class\", \"consult\", \"holiday\", \"etc\"] as const;\n\ninterface EventRow {\n id: string;\n user_id: string | null;\n created_by: string;\n title: string;\n start_at: string;\n}\n\nexport function register(r: Router): void {\n /**\n * 기간 조회. 개인 일정 + 전체 공지 일정을 한 번에 준다.\n * 프론트가 두 번 부르지 않게 서버에서 합친다.\n */\n r.get(\"/api/schedule\", \"user\", async (ctx: Ctx) => {\n const userId = targetUserId(ctx);\n const today = toLocalDate();\n const { from, to } = rangeFromQuery(ctx.query, addDays(today, -7), addDays(today, 60));\n\n // 날짜 문자열 비교로 충분하다 — start_at 이 ISO 라 사전순 = 시간순.\n const rows = await query(\n `SELECT e.*, u.name AS owner_name\n FROM schedule_events e LEFT JOIN users u ON u.id = e.user_id\n WHERE (e.user_id = ? OR e.user_id IS NULL)\n AND e.start_at >= ? AND e.start_at < ?\n ORDER BY e.start_at`,\n [userId, `${from}T00:00:00.000Z`, `${addDays(to, 1)}T00:00:00.000Z`],\n );\n return json({ from, to, events: rows });\n });\n\n r.post(\"/api/schedule\", \"user\", async (ctx: Ctx) => {\n const body = await ctx.body();\n const isGlobal = body.global === true;\n if (isGlobal && !isStaff(ctx.user)) throw forbidden(\"전체 일정은 관리자만 등록할 수 있습니다.\");\n\n const userId = isGlobal ? null : targetUserIdFromBody(ctx, body);\n const startAt = isoOf(body, \"startAt\", true)!;\n const endAt = isoOf(body, \"endAt\");\n if (endAt && endAt < startAt) throw badRequest(\"종료 시각이 시작 시각보다 빠릅니다.\");\n\n const id = uuid();\n const now = nowIso();\n await exec(\n `INSERT INTO schedule_events (id, user_id, title, type, start_at, end_at, all_day, location, memo, created_by, created_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n [\n id,\n userId,\n str(body, \"title\", { required: true, max: 200 }),\n enumOf(body, \"type\", TYPES, \"etc\"),\n startAt,\n endAt,\n body.allDay ? 1 : 0,\n optStr(body, \"location\", 200),\n optStr(body, \"memo\", 1000),\n ctx.user.id,\n now,\n now,\n ],\n );\n\n // 관리쌤이 학생 일정을 넣어준 경우에만 알린다(본인이 넣은 건 알릴 필요가 없다).\n if (userId && userId !== ctx.user.id) {\n await notify(\n userId,\n \"schedule\",\n \"새 일정이 등록되었어요\",\n str(body, \"title\", { max: 200 }),\n \"/schedule.html\",\n );\n }\n return json({ event: await one(\"SELECT * FROM schedule_events WHERE id = ?\", [id]) }, 201);\n });\n\n r.patch(\"/api/schedule/:id\", \"user\", async (ctx: Ctx) => {\n const body = await ctx.body();\n const ev = await one(\"SELECT * FROM schedule_events WHERE id = ?\", [ctx.params.id]);\n if (!ev) throw notFound();\n const mine = ev.user_id === ctx.user.id;\n if (!mine && !isStaff(ctx.user)) throw forbidden(\"본인 일정만 수정할 수 있습니다.\");\n\n const sets: string[] = [];\n const args: (string | number | null)[] = [];\n const put = (c: string, v: string | number | null) => {\n sets.push(`${c} = ?`);\n args.push(v);\n };\n\n if (body.title !== undefined) put(\"title\", str(body, \"title\", { required: true, max: 200 }));\n if (body.type !== undefined) put(\"type\", enumOf(body, \"type\", TYPES, \"etc\"));\n if (body.startAt !== undefined) put(\"start_at\", isoOf(body, \"startAt\", true)!);\n if (body.endAt !== undefined) put(\"end_at\", isoOf(body, \"endAt\"));\n if (body.allDay !== undefined) put(\"all_day\", body.allDay ? 1 : 0);\n if (body.location !== undefined) put(\"location\", optStr(body, \"location\", 200));\n if (body.memo !== undefined) put(\"memo\", optStr(body, \"memo\", 1000));\n if (!sets.length) throw badRequest(\"변경할 값이 없습니다.\");\n\n sets.push(\"updated_at = ?\");\n args.push(nowIso(), ctx.params.id);\n await exec(`UPDATE schedule_events SET ${sets.join(\", \")} WHERE id = ?`, args);\n return json({\n event: await one(\"SELECT * FROM schedule_events WHERE id = ?\", [ctx.params.id]),\n });\n });\n\n r.del(\"/api/schedule/:id\", \"user\", async (ctx: Ctx) => {\n const ev = await one(\"SELECT * FROM schedule_events WHERE id = ?\", [ctx.params.id]);\n if (!ev) throw notFound();\n if (ev.user_id !== ctx.user.id && !isStaff(ctx.user)) {\n throw forbidden(\"본인 일정만 삭제할 수 있습니다.\");\n }\n await exec(\"DELETE FROM schedule_events WHERE id = ?\", [ctx.params.id]);\n await audit(ctx.user.id, \"schedule.delete\", ctx.params.id, { title: ev.title });\n return json({ ok: true });\n });\n}\n",[],[156,225],"937fa45b-caf5-4b57-99f8-361706e0ab0a","planner.ts","09dab6e6-ab26-11f1-a201-1607ee4eb77e",25,["D",1788831528381],"/**\n * 플래너 — 일별 계획 + 공부 타이머.\n *\n * 실제 공부 시간은 study_sessions 가 원장(ledger)이고,\n * plans.actual_minutes 는 화면용 합계 캐시다. 세션이 끝날 때마다 다시 계산해 채운다.\n */\nimport { badRequest, Ctx, json, notFound, Router } from \"../lib/http.ts\";\nimport { exec, one, query, scalar, uuid } from \"../lib/sqlite.ts\";\nimport { addDays, nowIso, toLocalDate } from \"../lib/time.ts\";\nimport { dateOf, enumOf, int, optStr, str } from \"../lib/validate.ts\";\nimport { audit, ensureSubjects, ownedRow, targetUserId, targetUserIdFromBody } from \"./_shared.ts\";\n\nconst STATUSES = [\"todo\", \"doing\", \"done\", \"skipped\"] as const;\n\ninterface PlanRow {\n id: string;\n user_id: string;\n date: string;\n subject_id: string | null;\n title: string;\n goal_minutes: number;\n actual_minutes: number;\n status: string;\n priority: number;\n memo: string | null;\n sort_order: number;\n}\n\ninterface SessionRow {\n id: string;\n user_id: string;\n plan_id: string | null;\n date: string;\n started_at: string;\n ended_at: string | null;\n minutes: number;\n}\n\n/** plans.actual_minutes 를 세션 합계로 다시 계산한다. */\nasync function recalcPlanMinutes(planId: string): Promise {\n const total = await scalar(\n \"SELECT COALESCE(SUM(minutes), 0) FROM study_sessions WHERE plan_id = ? AND ended_at IS NOT NULL\",\n [planId],\n );\n const minutes = Number(total ?? 0);\n await exec(\"UPDATE plans SET actual_minutes = ?, updated_at = ? WHERE id = ?\", [\n minutes,\n nowIso(),\n planId,\n ]);\n return minutes;\n}\n\nasync function runningSession(userId: string): Promise {\n return await one(\n \"SELECT * FROM study_sessions WHERE user_id = ? AND ended_at IS NULL ORDER BY started_at DESC LIMIT 1\",\n [userId],\n );\n}\n\nexport function register(r: Router): void {\n /* ── 과목 ─────────────────────────────────────────── */\n\n r.get(\"/api/subjects\", \"user\", async (ctx: Ctx) => {\n const userId = targetUserId(ctx);\n return json({ subjects: await ensureSubjects(userId) });\n });\n\n r.post(\"/api/subjects\", \"user\", async (ctx: Ctx) => {\n const body = await ctx.body();\n const userId = targetUserIdFromBody(ctx, body);\n const id = uuid();\n const order = Number(\n await scalar(\"SELECT COALESCE(MAX(sort_order), -1) + 1 FROM subjects WHERE user_id = ?\", [\n userId,\n ]) ?? 0,\n );\n await exec(\n \"INSERT INTO subjects (id, user_id, name, color, sort_order, archived, created_at) VALUES (?, ?, ?, ?, ?, 0, ?)\",\n [\n id,\n userId,\n str(body, \"name\", { required: true, max: 30 }),\n str(body, \"color\", { max: 20, default: \"#4f46e5\" }),\n order,\n nowIso(),\n ],\n );\n return json({ subject: await one(\"SELECT * FROM subjects WHERE id = ?\", [id]) }, 201);\n });\n\n r.patch(\"/api/subjects/:id\", \"user\", async (ctx: Ctx) => {\n const body = await ctx.body();\n await ownedRow(\"subjects\", ctx.params.id, ctx);\n const name = optStr(body, \"name\", 30);\n const color = optStr(body, \"color\", 20);\n const sets: string[] = [];\n const args: (string | number | null)[] = [];\n if (name) sets.push(\"name = ?\"), args.push(name);\n if (color) sets.push(\"color = ?\"), args.push(color);\n if (typeof body.sortOrder === \"number\") {\n sets.push(\"sort_order = ?\"), args.push(int(body, \"sortOrder\", { min: 0, max: 999 }));\n }\n if (!sets.length) throw badRequest(\"변경할 값이 없습니다.\");\n args.push(ctx.params.id);\n await exec(`UPDATE subjects SET ${sets.join(\", \")} WHERE id = ?`, args);\n return json({ subject: await one(\"SELECT * FROM subjects WHERE id = ?\", [ctx.params.id]) });\n });\n\n /** 과목은 실제로 지우지 않는다 — 지난 계획이 참조하고 있어서 통계가 깨진다. */\n r.del(\"/api/subjects/:id\", \"user\", async (ctx: Ctx) => {\n await ownedRow(\"subjects\", ctx.params.id, ctx);\n await exec(\"UPDATE subjects SET archived = 1 WHERE id = ?\", [ctx.params.id]);\n return json({ ok: true });\n });\n\n /* ── 하루 플래너 ──────────────────────────────────── */\n\n r.get(\"/api/planner\", \"user\", async (ctx: Ctx) => {\n const userId = targetUserId(ctx);\n const date = ctx.query.get(\"date\") ?? toLocalDate();\n\n const plans = await query(\n \"SELECT * FROM plans WHERE user_id = ? AND date = ? ORDER BY sort_order, created_at\",\n [userId, date],\n );\n const subjects = await ensureSubjects(userId);\n const sessions = await query(\n \"SELECT * FROM study_sessions WHERE user_id = ? AND date = ? ORDER BY started_at\",\n [userId, date],\n );\n\n const goal = plans.reduce((s, p) => s + p.goal_minutes, 0);\n const actual = sessions\n .filter((s) => s.ended_at)\n .reduce((s, x) => s + x.minutes, 0);\n const done = plans.filter((p) => p.status === \"done\").length;\n\n return json({\n date,\n plans,\n subjects,\n sessions,\n running: await runningSession(userId),\n summary: {\n goalMinutes: goal,\n actualMinutes: actual,\n total: plans.length,\n done,\n rate: plans.length ? Math.round((done / plans.length) * 100) : 0,\n },\n });\n });\n\n r.post(\"/api/planner/plans\", \"user\", async (ctx: Ctx) => {\n const body = await ctx.body();\n const userId = targetUserIdFromBody(ctx, body);\n const date = dateOf(body, \"date\", toLocalDate());\n const id = uuid();\n const now = nowIso();\n const order = Number(\n await scalar(\n \"SELECT COALESCE(MAX(sort_order), -1) + 1 FROM plans WHERE user_id = ? AND date = ?\",\n [userId, date],\n ) ?? 0,\n );\n\n await exec(\n `INSERT INTO plans\n (id, user_id, date, subject_id, title, goal_minutes, actual_minutes, status, priority, memo, sort_order, created_by, created_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, 0, 'todo', ?, ?, ?, ?, ?, ?)`,\n [\n id,\n userId,\n date,\n optStr(body, \"subjectId\", 40),\n str(body, \"title\", { required: true, max: 200 }),\n int(body, \"goalMinutes\", { min: 0, max: 1440, default: 0 }),\n int(body, \"priority\", { min: 1, max: 3, default: 2 }),\n optStr(body, \"memo\", 1000),\n order,\n ctx.user.id,\n now,\n now,\n ],\n );\n return json({ plan: await one(\"SELECT * FROM plans WHERE id = ?\", [id]) }, 201);\n });\n\n r.patch(\"/api/planner/plans/:id\", \"user\", async (ctx: Ctx) => {\n const body = await ctx.body();\n const plan = await ownedRow(\"plans\", ctx.params.id, ctx);\n\n const sets: string[] = [];\n const args: (string | number | null)[] = [];\n const put = (col: string, val: string | number | null) => {\n sets.push(`${col} = ?`);\n args.push(val);\n };\n\n if (body.title !== undefined) put(\"title\", str(body, \"title\", { required: true, max: 200 }));\n if (body.subjectId !== undefined) put(\"subject_id\", optStr(body, \"subjectId\", 40));\n if (body.goalMinutes !== undefined) {\n put(\"goal_minutes\", int(body, \"goalMinutes\", { min: 0, max: 1440 }));\n }\n if (body.memo !== undefined) put(\"memo\", optStr(body, \"memo\", 1000));\n if (body.priority !== undefined) put(\"priority\", int(body, \"priority\", { min: 1, max: 3 }));\n if (body.sortOrder !== undefined) {\n put(\"sort_order\", int(body, \"sortOrder\", { min: 0, max: 999 }));\n }\n if (body.date !== undefined) put(\"date\", dateOf(body, \"date\"));\n if (body.status !== undefined) {\n const status = enumOf(body, \"status\", STATUSES, \"todo\");\n put(\"status\", status);\n put(\"completed_at\", status === \"done\" ? nowIso() : null);\n }\n /** 타이머 없이 직접 시간을 입력하는 경우 — 보정 세션으로 기록해 원장을 유지한다. */\n if (body.actualMinutes !== undefined) {\n const target = int(body, \"actualMinutes\", { min: 0, max: 1440 });\n const diff = target - plan.actual_minutes;\n if (diff !== 0) {\n const now = nowIso();\n await exec(\n `INSERT INTO study_sessions (id, user_id, plan_id, date, started_at, ended_at, minutes, source, created_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, 'manual', ?)`,\n [uuid(), plan.user_id, plan.id, plan.date, now, now, diff, now],\n );\n }\n put(\"actual_minutes\", target);\n }\n\n if (!sets.length) throw badRequest(\"변경할 값이 없습니다.\");\n sets.push(\"updated_at = ?\");\n args.push(nowIso(), ctx.params.id);\n await exec(`UPDATE plans SET ${sets.join(\", \")} WHERE id = ?`, args);\n\n return json({ plan: await one(\"SELECT * FROM plans WHERE id = ?\", [ctx.params.id]) });\n });\n\n r.del(\"/api/planner/plans/:id\", \"user\", async (ctx: Ctx) => {\n await ownedRow(\"plans\", ctx.params.id, ctx);\n await exec(\"UPDATE study_sessions SET plan_id = NULL WHERE plan_id = ?\", [ctx.params.id]);\n await exec(\"DELETE FROM plans WHERE id = ?\", [ctx.params.id]);\n return json({ ok: true });\n });\n\n /** 어제(또는 지정일) 계획을 오늘로 복사 — 미완료 항목만. */\n r.post(\"/api/planner/copy\", \"user\", async (ctx: Ctx) => {\n const body = await ctx.body();\n const userId = targetUserIdFromBody(ctx, body);\n const to = dateOf(body, \"to\", toLocalDate());\n const from = dateOf(body, \"from\", addDays(to, -1));\n const onlyUnfinished = body.onlyUnfinished !== false;\n\n const src = await query(\n `SELECT * FROM plans WHERE user_id = ? AND date = ? ${\n onlyUnfinished ? \"AND status <> 'done'\" : \"\"\n } ORDER BY sort_order`,\n [userId, from],\n );\n if (!src.length) return json({ copied: 0 });\n\n let order = Number(\n await scalar(\n \"SELECT COALESCE(MAX(sort_order), -1) + 1 FROM plans WHERE user_id = ? AND date = ?\",\n [userId, to],\n ) ?? 0,\n );\n const now = nowIso();\n for (const p of src) {\n await exec(\n `INSERT INTO plans\n (id, user_id, date, subject_id, title, goal_minutes, actual_minutes, status, priority, memo, sort_order, created_by, created_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, 0, 'todo', ?, ?, ?, ?, ?, ?)`,\n [\n uuid(),\n userId,\n to,\n p.subject_id,\n p.title,\n p.goal_minutes,\n p.priority,\n p.memo,\n order++,\n ctx.user.id,\n now,\n now,\n ],\n );\n }\n return json({ copied: src.length });\n });\n\n /* ── 타이머 ───────────────────────────────────────── */\n\n r.get(\"/api/planner/timer\", \"user\", async (ctx: Ctx) => {\n return json({ running: await runningSession(targetUserId(ctx)) });\n });\n\n r.post(\"/api/planner/timer/start\", \"user\", async (ctx: Ctx) => {\n const body = await ctx.body();\n const userId = targetUserIdFromBody(ctx, body);\n\n // 이미 돌고 있는 타이머가 있으면 먼저 닫는다(브라우저를 그냥 닫은 경우 대비).\n const open = await runningSession(userId);\n if (open) await stopSession(open);\n\n const planId = optStr(body, \"planId\", 40);\n if (planId) {\n const plan = await one(\"SELECT * FROM plans WHERE id = ? AND user_id = ?\", [\n planId,\n userId,\n ]);\n if (!plan) throw notFound(\"해당 계획을 찾을 수 없습니다.\");\n await exec(\n \"UPDATE plans SET status = 'doing', updated_at = ? WHERE id = ? AND status = 'todo'\",\n [\n nowIso(),\n planId,\n ],\n );\n }\n\n const id = uuid();\n const now = nowIso();\n await exec(\n `INSERT INTO study_sessions (id, user_id, plan_id, date, started_at, minutes, source, created_at)\n VALUES (?, ?, ?, ?, ?, 0, 'timer', ?)`,\n [id, userId, planId, toLocalDate(), now, now],\n );\n return json({ session: await one(\"SELECT * FROM study_sessions WHERE id = ?\", [id]) }, 201);\n });\n\n r.post(\"/api/planner/timer/stop\", \"user\", async (ctx: Ctx) => {\n const body = await ctx.body();\n const userId = targetUserIdFromBody(ctx, body);\n const open = await runningSession(userId);\n if (!open) throw badRequest(\"실행 중인 타이머가 없습니다.\");\n\n const minutes = await stopSession(open);\n return json({\n session: await one(\"SELECT * FROM study_sessions WHERE id = ?\", [open.id]),\n minutes,\n });\n });\n\n /** 타이머 없이 공부 시간만 기록 */\n r.post(\"/api/planner/sessions\", \"user\", async (ctx: Ctx) => {\n const body = await ctx.body();\n const userId = targetUserIdFromBody(ctx, body);\n const date = dateOf(body, \"date\", toLocalDate());\n const minutes = int(body, \"minutes\", { required: true, min: 1, max: 1440 });\n const planId = optStr(body, \"planId\", 40);\n const now = nowIso();\n\n await exec(\n `INSERT INTO study_sessions (id, user_id, plan_id, date, started_at, ended_at, minutes, source, created_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, 'manual', ?)`,\n [uuid(), userId, planId, date, now, now, minutes, now],\n );\n if (planId) await recalcPlanMinutes(planId);\n return json({ ok: true, minutes }, 201);\n });\n\n r.del(\"/api/planner/sessions/:id\", \"user\", async (ctx: Ctx) => {\n const session = await ownedRow(\"study_sessions\", ctx.params.id, ctx);\n await exec(\"DELETE FROM study_sessions WHERE id = ?\", [ctx.params.id]);\n if (session.plan_id) await recalcPlanMinutes(session.plan_id);\n await audit(ctx.user.id, \"session.delete\", ctx.params.id);\n return json({ ok: true });\n });\n}\n\n/** 열린 세션을 닫고 분을 계산해 저장한다. */\nasync function stopSession(session: SessionRow): Promise {\n const ended = new Date();\n const started = new Date(session.started_at);\n // 12시간을 넘기면 타이머를 켜둔 채 잊은 것으로 보고 상한을 건다.\n const raw = Math.round((ended.getTime() - started.getTime()) / 60000);\n const minutes = Math.max(0, Math.min(raw, 720));\n\n await exec(\"UPDATE study_sessions SET ended_at = ?, minutes = ? WHERE id = ?\", [\n ended.toISOString(),\n minutes,\n session.id,\n ]);\n if (session.plan_id) await recalcPlanMinutes(session.plan_id);\n return minutes;\n}\n",[],[156,233],"1d754249-fec7-4e06-a827-74d9004ad653","me.ts","0989a742-ab26-11f1-9f56-1607ee4eb77e",24,["D",1788831528195],"/**\n * 내 프로필 / 알림.\n */\nimport { Ctx, json, Router } from \"../lib/http.ts\";\nimport { exec, one, query } from \"../lib/sqlite.ts\";\nimport { nowIso, toLocalDate } from \"../lib/time.ts\";\nimport { optStr } from \"../lib/validate.ts\";\nimport { ensureSubjects } from \"./_shared.ts\";\n\nexport function register(r: Router): void {\n /** 로그인 직후 호출 — 계정을 만들고 프로필/오늘 요약을 돌려준다. */\n r.post(\"/api/auth/session\", \"user\", async (ctx: Ctx) => {\n const profile = await one(\"SELECT * FROM users WHERE id = ?\", [ctx.user.id]);\n await ensureSubjects(ctx.user.id);\n return json({ user: profile });\n });\n\n r.get(\"/api/me\", \"user\", async (ctx: Ctx) => {\n const profile = await one(\"SELECT * FROM users WHERE id = ?\", [ctx.user.id]);\n const unread = await query<{ c: number }>(\n \"SELECT COUNT(*) AS c FROM notifications WHERE user_id = ? AND read_at IS NULL\",\n [ctx.user.id],\n );\n return json({ user: profile, unreadCount: unread[0]?.c ?? 0, today: toLocalDate() });\n });\n\n r.patch(\"/api/me\", \"user\", async (ctx: Ctx) => {\n const body = await ctx.body();\n const fields: Array<[string, string | null]> = [\n [\"name\", optStr(body, \"name\", 60)],\n [\"phone\", optStr(body, \"phone\", 30)],\n [\"school\", optStr(body, \"school\", 60)],\n [\"grade\", optStr(body, \"grade\", 20)],\n [\"target\", optStr(body, \"target\", 120)],\n ];\n const sets: string[] = [];\n const args: (string | null)[] = [];\n for (const [k, v] of fields) {\n if (v !== null) {\n sets.push(`${k} = ?`);\n args.push(v);\n }\n }\n if (sets.length) {\n sets.push(\"updated_at = ?\");\n args.push(nowIso(), ctx.user.id);\n await exec(`UPDATE users SET ${sets.join(\", \")} WHERE id = ?`, args);\n }\n const profile = await one(\"SELECT * FROM users WHERE id = ?\", [ctx.user.id]);\n return json({ user: profile });\n });\n\n r.get(\"/api/notifications\", \"user\", async (ctx: Ctx) => {\n const rows = await query(\n \"SELECT * FROM notifications WHERE user_id = ? ORDER BY created_at DESC LIMIT 50\",\n [ctx.user.id],\n );\n return json({ notifications: rows });\n });\n\n r.post(\"/api/notifications/read\", \"user\", async (ctx: Ctx) => {\n const body = await ctx.body<{ ids?: string[] }>();\n const now = nowIso();\n if (Array.isArray(body.ids) && body.ids.length) {\n for (const id of body.ids.slice(0, 100)) {\n await exec(\"UPDATE notifications SET read_at = ? WHERE id = ? AND user_id = ?\", [\n now,\n id,\n ctx.user.id,\n ]);\n }\n } else {\n await exec(\"UPDATE notifications SET read_at = ? WHERE user_id = ? AND read_at IS NULL\", [\n now,\n ctx.user.id,\n ]);\n }\n return json({ ok: true });\n });\n}\n",[],[156,241],"aab27e99-7d3e-4773-b1a3-63bd5cb7c398","index.ts","097e9032-ab26-11f1-8eff-1607ee4eb77e",23,["D",1788831528108],"/**\n * 라우트 등록 지점. 새 기능을 추가하면 여기 한 줄만 늘린다.\n */\nimport { Router } from \"../lib/http.ts\";\nimport * as me from \"./me.ts\";\nimport * as planner from \"./planner.ts\";\nimport * as diary from \"./diary.ts\";\nimport * as schedule from \"./schedule.ts\";\nimport * as analytics from \"./analytics.ts\";\nimport * as chat from \"./chat.ts\";\nimport * as consult from \"./consult.ts\";\nimport * as admin from \"./admin.ts\";\n\nexport function buildRouter(): Router {\n const r = new Router();\n me.register(r);\n planner.register(r);\n diary.register(r);\n schedule.register(r);\n analytics.register(r);\n chat.register(r);\n consult.register(r);\n admin.register(r);\n return r;\n}\n",[],[156,249],"b81a6e18-a607-40b8-9f80-c8fc5290784a","diary.ts","09749528-ab26-11f1-8204-1607ee4eb77e",22,["D",1788831528032],"/**\n * 공부일기 — 하루 한 편(KPT 구조) + 관리쌤 코멘트.\n */\nimport { isStaff, requireStaff } from \"../lib/auth.ts\";\nimport { Ctx, json, notFound, Router } from \"../lib/http.ts\";\nimport { exec, one, query, uuid } from \"../lib/sqlite.ts\";\nimport { addDays, nowIso, toLocalDate } from \"../lib/time.ts\";\nimport { dateOf, optInt, optStr, rangeFromQuery, str } from \"../lib/validate.ts\";\nimport { notify, targetUserId, targetUserIdFromBody } from \"./_shared.ts\";\n\ninterface DiaryRow {\n id: string;\n user_id: string;\n date: string;\n coach_comment: string | null;\n}\n\nexport function register(r: Router): void {\n /** 기간 목록 (기본 최근 30일) */\n r.get(\"/api/diaries\", \"user\", async (ctx: Ctx) => {\n const userId = targetUserId(ctx);\n const today = toLocalDate();\n const { from, to } = rangeFromQuery(ctx.query, addDays(today, -29), today);\n const rows = await query(\n \"SELECT * FROM diaries WHERE user_id = ? AND date BETWEEN ? AND ? ORDER BY date DESC\",\n [userId, from, to],\n );\n return json({ from, to, diaries: rows });\n });\n\n /** 특정 날짜 한 편 (없으면 null) */\n r.get(\"/api/diaries/:date\", \"user\", async (ctx: Ctx) => {\n const userId = targetUserId(ctx);\n const row = await one(\"SELECT * FROM diaries WHERE user_id = ? AND date = ?\", [\n userId,\n ctx.params.date,\n ]);\n return json({ diary: row });\n });\n\n /**\n * 저장 — 하루 한 편이라 (user, date) 기준 upsert.\n * PUT 이 아니라 POST 하나로 두는 이유: 프론트가 \"있으면 수정, 없으면 생성\"을 신경 쓸 필요가 없다.\n */\n r.post(\"/api/diaries\", \"user\", async (ctx: Ctx) => {\n const body = await ctx.body();\n const userId = targetUserIdFromBody(ctx, body);\n const date = dateOf(body, \"date\", toLocalDate());\n const now = nowIso();\n\n const values = {\n mood: optInt(body, \"mood\", 1, 5),\n focus: optInt(body, \"focusScore\", 1, 5),\n content: str(body, \"content\", { max: 5000 }),\n keep: optStr(body, \"keep\", 2000),\n problem: optStr(body, \"problem\", 2000),\n tryNext: optStr(body, \"tryNext\", 2000),\n };\n\n const existing = await one(\n \"SELECT id FROM diaries WHERE user_id = ? AND date = ?\",\n [userId, date],\n );\n\n if (existing) {\n await exec(\n `UPDATE diaries SET mood = ?, focus_score = ?, content = ?, keep_note = ?, problem_note = ?, try_note = ?, updated_at = ?\n WHERE id = ?`,\n [\n values.mood,\n values.focus,\n values.content,\n values.keep,\n values.problem,\n values.tryNext,\n now,\n existing.id,\n ],\n );\n return json({ diary: await one(\"SELECT * FROM diaries WHERE id = ?\", [existing.id]) });\n }\n\n const id = uuid();\n await exec(\n `INSERT INTO diaries (id, user_id, date, mood, focus_score, content, keep_note, problem_note, try_note, created_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n [\n id,\n userId,\n date,\n values.mood,\n values.focus,\n values.content,\n values.keep,\n values.problem,\n values.tryNext,\n now,\n now,\n ],\n );\n return json({ diary: await one(\"SELECT * FROM diaries WHERE id = ?\", [id]) }, 201);\n });\n\n /** 관리쌤 코멘트 */\n r.post(\"/api/diaries/:id/comment\", \"staff\", async (ctx: Ctx) => {\n requireStaff(ctx.user);\n const body = await ctx.body();\n const diary = await one(\"SELECT * FROM diaries WHERE id = ?\", [ctx.params.id]);\n if (!diary) throw notFound(\"일기를 찾을 수 없습니다.\");\n\n const comment = str(body, \"comment\", { required: true, max: 2000 });\n const now = nowIso();\n await exec(\n \"UPDATE diaries SET coach_comment = ?, coach_id = ?, commented_at = ?, updated_at = ? WHERE id = ?\",\n [comment, ctx.user.id, now, now, ctx.params.id],\n );\n await notify(\n diary.user_id,\n \"diary_comment\",\n \"공부일기에 코멘트가 달렸어요\",\n `${diary.date} 일기 · ${ctx.user.name || \"관리쌤\"}`,\n `/diary.html?date=${diary.date}`,\n );\n return json({ diary: await one(\"SELECT * FROM diaries WHERE id = ?\", [ctx.params.id]) });\n });\n\n /** 관리쌤용 — 코멘트가 안 달린 일기 대기열 */\n r.get(\"/api/diaries/queue/pending\", \"staff\", async (ctx: Ctx) => {\n requireStaff(ctx.user);\n const rows = await query(\n `SELECT d.*, u.name AS student_name, u.grade AS student_grade\n FROM diaries d JOIN users u ON u.id = d.user_id\n WHERE d.coach_comment IS NULL\n ORDER BY d.date DESC LIMIT 100`,\n );\n return json({ diaries: rows, isStaff: isStaff(ctx.user) });\n });\n}\n",[],[156,257],"7fdf68c6-8911-4503-b323-bc8f8a293dbb","consult.ts","0948c150-ab26-11f1-8eff-1607ee4eb77e",20,["D",1788831527798],"/**\n * 학습 상담 신청 / 관리 (신규 기능).\n *\n * 흐름\n * 학생: 신청(requested) → 관리쌤이 슬롯 배정(scheduled) → 상담 후 기록(done)\n * 취소는 양쪽 다 가능(canceled).\n *\n * 슬롯은 \"관리쌤이 열어둔 상담 가능 시간\"이고, 정원(capacity)까지 예약을 받는다.\n */\nimport { isStaff, requireStaff } from \"../lib/auth.ts\";\nimport { badRequest, Ctx, forbidden, json, notFound, Router } from \"../lib/http.ts\";\nimport { exec, one, query, scalar, uuid } from \"../lib/sqlite.ts\";\nimport { nowIso } from \"../lib/time.ts\";\nimport { enumOf, isoOf, optStr, str } from \"../lib/validate.ts\";\nimport { audit, notify } from \"./_shared.ts\";\n\nconst CATEGORIES = [\"study\", \"plan\", \"mental\", \"career\", \"etc\"] as const;\nconst MODES = [\"offline\", \"online\", \"phone\"] as const;\nconst STATUSES = [\"requested\", \"scheduled\", \"done\", \"canceled\"] as const;\n\ninterface ConsultRow {\n id: string;\n user_id: string;\n slot_id: string | null;\n status: string;\n topic: string;\n coach_id: string | null;\n scheduled_at: string | null;\n}\n\ninterface SlotRow {\n id: string;\n coach_id: string;\n start_at: string;\n end_at: string;\n capacity: number;\n status: string;\n}\n\n/** 슬롯의 남은 자리. 취소된 건은 자리를 돌려준다. */\nasync function slotRemaining(slot: SlotRow): Promise {\n const used = Number(\n await scalar(\n \"SELECT COUNT(*) FROM consults WHERE slot_id = ? AND status IN ('requested','scheduled','done')\",\n [slot.id],\n ) ?? 0,\n );\n return Math.max(0, slot.capacity - used);\n}\n\nexport function register(r: Router): void {\n /* ── 학생 ─────────────────────────────────────────── */\n\n /** 예약 가능한 슬롯 (지금 이후, 열려 있고 자리가 남은 것) */\n r.get(\"/api/consults/slots\", \"user\", async (_ctx: Ctx) => {\n const slots = await query(\n `SELECT s.*, u.name AS coach_name\n FROM consult_slots s LEFT JOIN users u ON u.id = s.coach_id\n WHERE s.status = 'open' AND s.start_at >= ?\n ORDER BY s.start_at LIMIT 100`,\n [nowIso()],\n );\n const withRemaining = [];\n for (const s of slots) {\n const remaining = await slotRemaining(s);\n if (remaining > 0) withRemaining.push({ ...s, remaining });\n }\n return json({ slots: withRemaining });\n });\n\n /** 내 신청 목록 (관리쌤은 ?all=1 로 전체) */\n r.get(\"/api/consults\", \"user\", async (ctx: Ctx) => {\n const all = ctx.query.get(\"all\") === \"1\";\n if (all && !isStaff(ctx.user)) throw forbidden(\"전체 목록은 관리자만 볼 수 있습니다.\");\n\n const status = ctx.query.get(\"status\");\n if (status && !STATUSES.includes(status as typeof STATUSES[number])) {\n throw badRequest(\"status 값이 올바르지 않습니다.\");\n }\n\n const where: string[] = [];\n const args: string[] = [];\n if (!all) {\n where.push(\"c.user_id = ?\");\n args.push(ctx.user.id);\n }\n if (status) {\n where.push(\"c.status = ?\");\n args.push(status);\n }\n\n const rows = await query(\n `SELECT c.*, u.name AS student_name, u.grade AS student_grade, u.seat_no,\n co.name AS coach_name,\n s.start_at AS slot_start, s.end_at AS slot_end\n FROM consults c\n JOIN users u ON u.id = c.user_id\n LEFT JOIN users co ON co.id = c.coach_id\n LEFT JOIN consult_slots s ON s.id = c.slot_id\n ${where.length ? `WHERE ${where.join(\" AND \")}` : \"\"}\n ORDER BY CASE c.status WHEN 'requested' THEN 0 WHEN 'scheduled' THEN 1 ELSE 2 END,\n c.created_at DESC\n LIMIT 200`,\n args,\n );\n return json({ consults: rows });\n });\n\n r.get(\"/api/consults/:id\", \"user\", async (ctx: Ctx) => {\n const row = await one(\"SELECT * FROM consults WHERE id = ?\", [ctx.params.id]);\n if (!row) throw notFound();\n if (row.user_id !== ctx.user.id && !isStaff(ctx.user)) throw forbidden();\n return json({ consult: row });\n });\n\n /** 상담 신청 */\n r.post(\"/api/consults\", \"user\", async (ctx: Ctx) => {\n const body = await ctx.body();\n\n // 처리 중인 신청이 이미 있으면 막는다(중복 신청으로 대기열이 오염되는 것 방지).\n const open = await scalar(\n \"SELECT COUNT(*) FROM consults WHERE user_id = ? AND status IN ('requested','scheduled')\",\n [ctx.user.id],\n );\n if (Number(open ?? 0) >= 3) {\n throw badRequest(\"진행 중인 상담 신청이 3건 있습니다. 처리 후 다시 신청해 주세요.\");\n }\n\n const slotId = optStr(body, \"slotId\", 40);\n let scheduledAt: string | null = null;\n if (slotId) {\n const slot = await one(\"SELECT * FROM consult_slots WHERE id = ?\", [slotId]);\n if (!slot || slot.status !== \"open\") throw badRequest(\"선택한 시간을 예약할 수 없습니다.\");\n if (await slotRemaining(slot) <= 0) throw badRequest(\"선택한 시간의 자리가 찼습니다.\");\n scheduledAt = slot.start_at;\n }\n\n const id = uuid();\n const now = nowIso();\n await exec(\n `INSERT INTO consults (id, user_id, slot_id, category, topic, content, mode, preferred_at, status, coach_id, scheduled_at, created_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n [\n id,\n ctx.user.id,\n slotId,\n enumOf(body, \"category\", CATEGORIES, \"study\"),\n str(body, \"topic\", { required: true, max: 200 }),\n str(body, \"content\", { max: 3000 }),\n enumOf(body, \"mode\", MODES, \"offline\"),\n isoOf(body, \"preferredAt\"),\n slotId ? \"scheduled\" : \"requested\",\n slotId\n ? (await one(\"SELECT * FROM consult_slots WHERE id = ?\", [slotId]))?.coach_id ??\n null\n : null,\n scheduledAt,\n now,\n now,\n ],\n );\n\n // 관리쌤 전원에게 알림 — 대기열을 놓치지 않게.\n const staff = await query<{ id: string }>(\n \"SELECT id FROM users WHERE role IN ('admin','coach') AND status = 'active'\",\n );\n for (const s of staff) {\n await notify(\n s.id,\n \"consult_request\",\n \"새 상담 신청\",\n `${ctx.user.name || \"학생\"} · ${str(body, \"topic\", { max: 200 })}`,\n \"/admin.html#consults\",\n );\n }\n await audit(ctx.user.id, \"consult.create\", id);\n\n return json({ consult: await one(\"SELECT * FROM consults WHERE id = ?\", [id]) }, 201);\n });\n\n /** 학생 취소 / 후기 */\n r.patch(\"/api/consults/:id\", \"user\", async (ctx: Ctx) => {\n const body = await ctx.body();\n const row = await one(\"SELECT * FROM consults WHERE id = ?\", [ctx.params.id]);\n if (!row) throw notFound();\n\n const staff = isStaff(ctx.user);\n if (row.user_id !== ctx.user.id && !staff) throw forbidden();\n\n const sets: string[] = [];\n const args: (string | null)[] = [];\n const put = (c: string, v: string | null) => {\n sets.push(`${c} = ?`);\n args.push(v);\n };\n\n if (body.status !== undefined) {\n const status = enumOf(body, \"status\", STATUSES, \"requested\");\n // 학생은 취소만 가능하다. 배정·완료는 관리쌤 몫.\n if (!staff && status !== \"canceled\") throw forbidden(\"상태 변경은 관리쌤만 할 수 있습니다.\");\n if (row.status === \"done\" && !staff) throw badRequest(\"완료된 상담은 변경할 수 없습니다.\");\n put(\"status\", status);\n if (status === \"canceled\") put(\"slot_id\", null);\n }\n if (body.studentFeedback !== undefined) {\n if (row.user_id !== ctx.user.id) throw forbidden(\"후기는 본인만 작성할 수 있습니다.\");\n put(\"student_feedback\", optStr(body, \"studentFeedback\", 2000));\n }\n if (body.topic !== undefined && row.status === \"requested\") {\n put(\"topic\", str(body, \"topic\", { required: true, max: 200 }));\n }\n if (body.content !== undefined && row.status === \"requested\") {\n put(\"content\", str(body, \"content\", { max: 3000 }));\n }\n\n if (staff) {\n if (body.coachNote !== undefined) put(\"coach_note\", optStr(body, \"coachNote\", 3000));\n if (body.scheduledAt !== undefined) put(\"scheduled_at\", isoOf(body, \"scheduledAt\"));\n if (body.slotId !== undefined) put(\"slot_id\", optStr(body, \"slotId\", 40));\n if (body.coachId !== undefined) put(\"coach_id\", optStr(body, \"coachId\", 60));\n }\n\n if (!sets.length) throw badRequest(\"변경할 값이 없습니다.\");\n sets.push(\"updated_at = ?\");\n args.push(nowIso(), ctx.params.id);\n await exec(`UPDATE consults SET ${sets.join(\", \")} WHERE id = ?`, args);\n\n const updated = await one(\"SELECT * FROM consults WHERE id = ?\", [ctx.params.id]);\n\n // 관리쌤이 손댄 경우에만 학생에게 알린다.\n if (staff && row.user_id !== ctx.user.id && body.status !== undefined) {\n const label: Record = {\n scheduled: \"상담 일정이 잡혔어요\",\n done: \"상담이 완료되었어요\",\n canceled: \"상담 신청이 취소되었어요\",\n requested: \"상담 신청이 접수되었어요\",\n };\n await notify(\n row.user_id,\n \"consult_update\",\n label[String(body.status)] ?? \"상담 상태가 변경되었어요\",\n row.topic,\n \"/consult.html\",\n );\n }\n return json({ consult: updated });\n });\n\n /* ── 관리쌤: 슬롯 관리 ───────────────────────────── */\n\n r.get(\"/api/consults/slots/manage\", \"staff\", async (ctx: Ctx) => {\n requireStaff(ctx.user);\n const slots = await query(\n `SELECT s.*, u.name AS coach_name FROM consult_slots s\n LEFT JOIN users u ON u.id = s.coach_id\n ORDER BY s.start_at DESC LIMIT 200`,\n );\n const out = [];\n for (const s of slots) out.push({ ...s, remaining: await slotRemaining(s) });\n return json({ slots: out });\n });\n\n r.post(\"/api/consults/slots\", \"staff\", async (ctx: Ctx) => {\n requireStaff(ctx.user);\n const body = await ctx.body();\n const startAt = isoOf(body, \"startAt\", true)!;\n const endAt = isoOf(body, \"endAt\", true)!;\n if (endAt <= startAt) throw badRequest(\"종료 시각이 시작 시각보다 빠릅니다.\");\n\n const id = uuid();\n await exec(\n `INSERT INTO consult_slots (id, coach_id, start_at, end_at, capacity, status, memo, created_at)\n VALUES (?, ?, ?, ?, ?, 'open', ?, ?)`,\n [\n id,\n optStr(body, \"coachId\", 60) ?? ctx.user.id,\n startAt,\n endAt,\n Math.max(1, Math.min(20, Number(body.capacity ?? 1))),\n optStr(body, \"memo\", 500),\n nowIso(),\n ],\n );\n return json({ slot: await one(\"SELECT * FROM consult_slots WHERE id = ?\", [id]) }, 201);\n });\n\n r.patch(\"/api/consults/slots/:id\", \"staff\", async (ctx: Ctx) => {\n requireStaff(ctx.user);\n const body = await ctx.body();\n const slot = await one(\"SELECT * FROM consult_slots WHERE id = ?\", [ctx.params.id]);\n if (!slot) throw notFound();\n\n const status = enumOf(body, \"status\", [\"open\", \"closed\"] as const, slot.status as \"open\");\n await exec(\"UPDATE consult_slots SET status = ?, capacity = ? WHERE id = ?\", [\n status,\n Math.max(1, Math.min(20, Number(body.capacity ?? slot.capacity))),\n ctx.params.id,\n ]);\n return json({ slot: await one(\"SELECT * FROM consult_slots WHERE id = ?\", [ctx.params.id]) });\n });\n\n r.del(\"/api/consults/slots/:id\", \"staff\", async (ctx: Ctx) => {\n requireStaff(ctx.user);\n const booked = Number(\n await scalar(\n \"SELECT COUNT(*) FROM consults WHERE slot_id = ? AND status IN ('requested','scheduled')\",\n [ctx.params.id],\n ) ?? 0,\n );\n if (booked > 0) throw badRequest(\"예약이 있는 시간은 삭제할 수 없습니다. 먼저 닫아 주세요.\");\n await exec(\"DELETE FROM consult_slots WHERE id = ?\", [ctx.params.id]);\n return json({ ok: true });\n });\n}\n",[],[156,265],"595992b3-b471-49c8-9091-4b8b2e7d8520","chat.ts","093b775c-ab26-11f1-8e53-1607ee4eb77e",19,["D",1788831527384],"/**\n * AI 챗봇 — Claude 기반 학습 코치.\n *\n * 학생의 오늘 계획·최근 일기·최근 학습 통계를 시스템 프롬프트에 넣어\n * \"네 플래너를 보고 말해주는 코치\"로 동작하게 한다. 이게 없으면 그냥 범용 챗봇이라\n * 이 서비스 안에 있을 이유가 없다.\n */\nimport { CONFIG } from \"../config.ts\";\nimport * as claude from \"../lib/claude.ts\";\nimport { Ctx, forbidden, json, notFound, Router, tooMany } from \"../lib/http.ts\";\nimport { exec, one, query, scalar, uuid } from \"../lib/sqlite.ts\";\nimport { addDays, nowIso, toLocalDate } from \"../lib/time.ts\";\nimport { str } from \"../lib/validate.ts\";\nimport { buildSummary } from \"./analytics.ts\";\n\nconst MAX_CONTEXT_MESSAGES = 20;\n\ninterface ThreadRow {\n id: string;\n user_id: string;\n title: string;\n}\n\ninterface MessageRow {\n id: string;\n role: \"user\" | \"assistant\";\n content: string;\n}\n\n/** 학생의 학습 상태를 요약해 시스템 프롬프트에 붙인다. */\nasync function buildSystemPrompt(userId: string, userName: string): Promise {\n const today = toLocalDate();\n\n const plans = await query<\n {\n title: string;\n status: string;\n goal_minutes: number;\n actual_minutes: number;\n subject: string | null;\n }\n >(\n `SELECT p.title, p.status, p.goal_minutes, p.actual_minutes, s.name AS subject\n FROM plans p LEFT JOIN subjects s ON s.id = p.subject_id\n WHERE p.user_id = ? AND p.date = ? ORDER BY p.sort_order LIMIT 20`,\n [userId, today],\n );\n\n const diary = await one<\n { date: string; content: string; problem_note: string | null; focus_score: number | null }\n >(\n `SELECT date, content, problem_note, focus_score FROM diaries\n WHERE user_id = ? AND content <> '' ORDER BY date DESC LIMIT 1`,\n [userId],\n );\n\n const summary = await buildSummary(userId, addDays(today, -6), today);\n\n const planText = plans.length\n ? plans\n .map((p) =>\n `- [${p.status === \"done\" ? \"완료\" : p.status === \"doing\" ? \"진행중\" : \"미완료\"}] ` +\n `${\n p.subject ? `(${p.subject}) ` : \"\"\n }${p.title} · 목표 ${p.goal_minutes}분 / 실제 ${p.actual_minutes}분`\n )\n .join(\"\\n\")\n : \"- 오늘 등록한 계획이 없습니다.\";\n\n const subjectText = summary.bySubject.length\n ? summary.bySubject.map((s) => `${s.name} ${Math.round(s.minutes / 60 * 10) / 10}시간`).join(\n \", \",\n )\n : \"기록 없음\";\n\n const diaryText = diary\n ? `최근 공부일기(${diary.date}, 집중도 ${diary.focus_score ?? \"-\"}/5): ${\n diary.content.slice(0, 300)\n }${diary.problem_note ? ` / 아쉬웠던 점: ${diary.problem_note.slice(0, 200)}` : \"\"}`\n : \"최근 작성한 공부일기가 없습니다.\";\n\n return `당신은 관리형 독서실 '로드맵 독서실'의 학습 코치입니다. 학생 ${\n userName || \"학생\"\n }과 대화합니다.\n\n[역할]\n- 공부 방법, 계획 세우기, 개념 질문, 동기 관리를 도와줍니다.\n- 아래 학습 데이터를 근거로 구체적으로 조언합니다. 데이터에 없는 내용을 사실처럼 말하지 않습니다.\n- 답이 정해지지 않은 진로·심리 문제는 판단을 대신하지 말고, 관리쌤 상담 신청을 권합니다.\n\n[말투]\n- 존댓말을 쓰되 딱딱하지 않게, 학생을 응원하는 톤으로 씁니다.\n- 답변은 짧게. 3~6문장 또는 핵심만 담은 짧은 목록으로 끝냅니다. 길게 늘어놓지 않습니다.\n- 학생이 개념 질문을 하면 먼저 답을 주고, 그다음에 왜 그런지 한 줄로 덧붙입니다.\n\n[오늘 계획 · ${today}]\n${planText}\n\n[최근 7일 학습]\n- 총 공부 ${\n Math.round(summary.totals.studyMinutes / 60 * 10) / 10\n }시간, 공부한 날 ${summary.totals.studyDays}일\n- 계획 달성률 ${summary.totals.completionRate}% (${summary.totals.doneCount}/${summary.totals.planCount})\n- 과목별: ${subjectText}\n- 연속 학습 ${summary.streak.current}일\n\n[${diaryText}]\n\n학생이 학습과 무관한 요청(과제 대신 해주기, 시험 부정행위 등)을 하면 정중히 거절하고 공부 방향으로 돌립니다.`;\n}\n\nasync function todayMessageCount(userId: string): Promise {\n const since = `${toLocalDate()}T00:00:00.000Z`;\n const n = await scalar(\n \"SELECT COUNT(*) FROM chat_messages WHERE user_id = ? AND role = 'user' AND created_at >= ?\",\n [userId, since],\n );\n return Number(n ?? 0);\n}\n\nasync function loadThread(threadId: string, userId: string): Promise {\n const thread = await one(\"SELECT * FROM chat_threads WHERE id = ?\", [threadId]);\n if (!thread) throw notFound(\"대화를 찾을 수 없습니다.\");\n if (thread.user_id !== userId) throw forbidden(\"본인 대화만 열 수 있습니다.\");\n return thread;\n}\n\nexport function register(r: Router): void {\n r.get(\"/api/chat/threads\", \"user\", async (ctx: Ctx) => {\n const threads = await query(\n `SELECT t.*, (SELECT content FROM chat_messages m WHERE m.thread_id = t.id ORDER BY m.created_at DESC LIMIT 1) AS last_message\n FROM chat_threads t WHERE t.user_id = ? ORDER BY t.updated_at DESC LIMIT 50`,\n [ctx.user.id],\n );\n return json({\n threads,\n dailyUsed: await todayMessageCount(ctx.user.id),\n dailyLimit: CONFIG.chatDailyLimit,\n });\n });\n\n r.post(\"/api/chat/threads\", \"user\", async (ctx: Ctx) => {\n const body = await ctx.body();\n const id = uuid();\n const now = nowIso();\n await exec(\n \"INSERT INTO chat_threads (id, user_id, title, created_at, updated_at) VALUES (?, ?, ?, ?, ?)\",\n [id, ctx.user.id, str(body, \"title\", { max: 100, default: \"새 대화\" }), now, now],\n );\n return json({ thread: await one(\"SELECT * FROM chat_threads WHERE id = ?\", [id]) }, 201);\n });\n\n r.get(\"/api/chat/threads/:id\", \"user\", async (ctx: Ctx) => {\n const thread = await loadThread(ctx.params.id, ctx.user.id);\n const messages = await query(\n \"SELECT id, role, content, created_at FROM chat_messages WHERE thread_id = ? ORDER BY created_at\",\n [thread.id],\n );\n return json({ thread, messages });\n });\n\n r.del(\"/api/chat/threads/:id\", \"user\", async (ctx: Ctx) => {\n await loadThread(ctx.params.id, ctx.user.id);\n await exec(\"DELETE FROM chat_messages WHERE thread_id = ?\", [ctx.params.id]);\n await exec(\"DELETE FROM chat_threads WHERE id = ?\", [ctx.params.id]);\n return json({ ok: true });\n });\n\n /**\n * 메시지 전송.\n * ?stream=1 이면 SSE 로 토큰을 흘려보낸다(체감 속도 차이가 크다).\n */\n r.post(\"/api/chat/threads/:id/messages\", \"user\", async (ctx: Ctx) => {\n const body = await ctx.body();\n const thread = await loadThread(ctx.params.id, ctx.user.id);\n const content = str(body, \"content\", { required: true, max: 4000 });\n\n const used = await todayMessageCount(ctx.user.id);\n if (used >= CONFIG.chatDailyLimit) {\n throw tooMany(`오늘 질문 가능 횟수(${CONFIG.chatDailyLimit}회)를 모두 사용했습니다.`);\n }\n\n const now = nowIso();\n await exec(\n \"INSERT INTO chat_messages (id, thread_id, user_id, role, content, created_at) VALUES (?, ?, ?, 'user', ?, ?)\",\n [uuid(), thread.id, ctx.user.id, content, now],\n );\n\n // 첫 질문을 대화 제목으로 삼는다.\n if (thread.title === \"새 대화\") {\n await exec(\"UPDATE chat_threads SET title = ? WHERE id = ?\", [\n content.slice(0, 40),\n thread.id,\n ]);\n }\n\n const history = await query(\n \"SELECT role, content FROM chat_messages WHERE thread_id = ? ORDER BY created_at DESC LIMIT ?\",\n [thread.id, MAX_CONTEXT_MESSAGES],\n );\n const messages = history.reverse().map((m) => ({ role: m.role, content: m.content }));\n const system = await buildSystemPrompt(ctx.user.id, ctx.user.name);\n\n const persist = async (result: claude.ClaudeResult) => {\n if (!result.text.trim()) return;\n const ts = nowIso();\n await exec(\n `INSERT INTO chat_messages (id, thread_id, user_id, role, content, tokens_in, tokens_out, created_at)\n VALUES (?, ?, ?, 'assistant', ?, ?, ?, ?)`,\n [uuid(), thread.id, ctx.user.id, result.text, result.tokensIn, result.tokensOut, ts],\n );\n await exec(\"UPDATE chat_threads SET updated_at = ? WHERE id = ?\", [ts, thread.id]);\n };\n\n if (ctx.query.get(\"stream\") === \"1\") {\n return claude.stream({ system, messages }, persist);\n }\n\n const result = await claude.complete({ system, messages });\n await persist(result);\n return json({ reply: result.text, remaining: CONFIG.chatDailyLimit - used - 1 });\n });\n\n /** 관리쌤용 — 학생 질문 흐름 확인(개별 대화 열람은 하지 않고 통계만) */\n r.get(\"/api/chat/stats\", \"staff\", async (_ctx: Ctx) => {\n const rows = await query(\n `SELECT u.id, u.name, COUNT(m.id) AS messages, MAX(m.created_at) AS last_at\n FROM users u LEFT JOIN chat_messages m ON m.user_id = u.id AND m.role = 'user'\n WHERE u.role = 'student'\n GROUP BY u.id, u.name ORDER BY messages DESC LIMIT 100`,\n );\n return json({ stats: rows });\n });\n}\n",[],[156,273],"d7cd72d2-79fb-49be-97c2-2b9d2e83c90b","analytics.ts","0920dad2-ab26-11f1-ab9f-1607ee4eb77e",18,["D",1788831527208],"/**\n * 학습 분석지.\n *\n * 집계는 전부 SQL 로 끝낸다(행을 다 끌어와 JS 에서 도는 방식은 학생 수가 늘면 무너진다).\n * 프론트는 받은 숫자를 그리기만 한다.\n */\nimport { Ctx, json, Router } from \"../lib/http.ts\";\nimport { query, scalar } from \"../lib/sqlite.ts\";\nimport { addDays, dateRange, toLocalDate, weekStart } from \"../lib/time.ts\";\nimport { rangeFromQuery } from \"../lib/validate.ts\";\nimport { targetUserId } from \"./_shared.ts\";\n\nexport interface Summary {\n from: string;\n to: string;\n totals: {\n studyMinutes: number;\n goalMinutes: number;\n planCount: number;\n doneCount: number;\n completionRate: number;\n studyDays: number;\n avgMinutesPerStudyDay: number;\n diaryCount: number;\n avgFocus: number | null;\n };\n daily: Array<\n { date: string; minutes: number; done: number; total: number; focus: number | null }\n >;\n bySubject: Array<\n {\n subjectId: string | null;\n name: string;\n color: string;\n minutes: number;\n done: number;\n total: number;\n }\n >;\n weekly: Array<{ week: string; minutes: number; rate: number }>;\n streak: { current: number; best: number };\n}\n\nexport async function buildSummary(userId: string, from: string, to: string): Promise

{\n const [minutesRow] = await query<{ m: number }>(\n \"SELECT COALESCE(SUM(minutes),0) AS m FROM study_sessions WHERE user_id = ? AND date BETWEEN ? AND ? AND ended_at IS NOT NULL\",\n [userId, from, to],\n );\n const [planRow] = await query<{ total: number; done: number; goal: number }>(\n `SELECT COUNT(*) AS total,\n COALESCE(SUM(CASE WHEN status = 'done' THEN 1 ELSE 0 END), 0) AS done,\n COALESCE(SUM(goal_minutes), 0) AS goal\n FROM plans WHERE user_id = ? AND date BETWEEN ? AND ?`,\n [userId, from, to],\n );\n\n const dailyMinutes = await query<{ date: string; m: number }>(\n `SELECT date, COALESCE(SUM(minutes),0) AS m\n FROM study_sessions\n WHERE user_id = ? AND date BETWEEN ? AND ? AND ended_at IS NOT NULL\n GROUP BY date`,\n [userId, from, to],\n );\n const dailyPlans = await query<{ date: string; total: number; done: number }>(\n `SELECT date, COUNT(*) AS total,\n COALESCE(SUM(CASE WHEN status = 'done' THEN 1 ELSE 0 END), 0) AS done\n FROM plans WHERE user_id = ? AND date BETWEEN ? AND ? GROUP BY date`,\n [userId, from, to],\n );\n const dailyFocus = await query<{ date: string; focus: number | null }>(\n \"SELECT date, focus_score AS focus FROM diaries WHERE user_id = ? AND date BETWEEN ? AND ?\",\n [userId, from, to],\n );\n\n const minutesMap = new Map(dailyMinutes.map((r) => [r.date, Number(r.m)]));\n const planMap = new Map(dailyPlans.map((r) => [r.date, r]));\n const focusMap = new Map(dailyFocus.map((r) => [r.date, r.focus]));\n\n const daily = dateRange(from, to).map((date) => ({\n date,\n minutes: minutesMap.get(date) ?? 0,\n done: Number(planMap.get(date)?.done ?? 0),\n total: Number(planMap.get(date)?.total ?? 0),\n focus: focusMap.get(date) ?? null,\n }));\n\n const bySubjectRows = await query<\n {\n subject_id: string | null;\n name: string | null;\n color: string | null;\n minutes: number;\n total: number;\n done: number;\n }\n >(\n `SELECT p.subject_id,\n s.name, s.color,\n COALESCE(SUM(p.actual_minutes), 0) AS minutes,\n COUNT(*) AS total,\n COALESCE(SUM(CASE WHEN p.status = 'done' THEN 1 ELSE 0 END), 0) AS done\n FROM plans p LEFT JOIN subjects s ON s.id = p.subject_id\n WHERE p.user_id = ? AND p.date BETWEEN ? AND ?\n GROUP BY p.subject_id, s.name, s.color\n ORDER BY minutes DESC`,\n [userId, from, to],\n );\n\n const bySubject = bySubjectRows.map((r) => ({\n subjectId: r.subject_id,\n name: r.name ?? \"미지정\",\n color: r.color ?? \"#94a3b8\",\n minutes: Number(r.minutes),\n done: Number(r.done),\n total: Number(r.total),\n }));\n\n // 주간 집계 — 일별 결과를 주 단위로 접는다.\n const weekMap = new Map();\n for (const d of daily) {\n const wk = weekStart(d.date);\n const cur = weekMap.get(wk) ?? { minutes: 0, done: 0, total: 0 };\n cur.minutes += d.minutes;\n cur.done += d.done;\n cur.total += d.total;\n weekMap.set(wk, cur);\n }\n const weekly = [...weekMap.entries()]\n .sort(([a], [b]) => a.localeCompare(b))\n .map(([week, v]) => ({\n week,\n minutes: v.minutes,\n rate: v.total ? Math.round((v.done / v.total) * 100) : 0,\n }));\n\n // 연속 학습일 — 구간 안에서만 계산한다.\n let current = 0;\n let best = 0;\n for (const d of daily) {\n if (d.minutes > 0) {\n current += 1;\n best = Math.max(best, current);\n } else current = 0;\n }\n // 오늘 아직 공부 전이면 현재 연속이 0으로 보일 수 있다 — 마지막 날이 0이면 그 앞까지로 본다.\n if (daily.length && daily[daily.length - 1].minutes === 0) {\n let back = 0;\n for (let i = daily.length - 2; i >= 0 && daily[i].minutes > 0; i--) back++;\n current = back;\n }\n\n const studyDays = daily.filter((d) => d.minutes > 0).length;\n const focusValues = dailyFocus.map((r) => r.focus).filter((v): v is number =>\n typeof v === \"number\"\n );\n const diaryCount = Number(\n await scalar(\"SELECT COUNT(*) FROM diaries WHERE user_id = ? AND date BETWEEN ? AND ?\", [\n userId,\n from,\n to,\n ]) ?? 0,\n );\n const studyMinutes = Number(minutesRow?.m ?? 0);\n const planTotal = Number(planRow?.total ?? 0);\n const planDone = Number(planRow?.done ?? 0);\n\n return {\n from,\n to,\n totals: {\n studyMinutes,\n goalMinutes: Number(planRow?.goal ?? 0),\n planCount: planTotal,\n doneCount: planDone,\n completionRate: planTotal ? Math.round((planDone / planTotal) * 100) : 0,\n studyDays,\n avgMinutesPerStudyDay: studyDays ? Math.round(studyMinutes / studyDays) : 0,\n diaryCount,\n avgFocus: focusValues.length\n ? Math.round((focusValues.reduce((a, b) => a + b, 0) / focusValues.length) * 10) / 10\n : null,\n },\n daily,\n bySubject,\n weekly,\n streak: { current, best },\n };\n}\n\nexport function register(r: Router): void {\n r.get(\"/api/analytics/summary\", \"user\", async (ctx: Ctx) => {\n const userId = targetUserId(ctx);\n const today = toLocalDate();\n const { from, to } = rangeFromQuery(ctx.query, addDays(today, -27), today);\n return json(await buildSummary(userId, from, to));\n });\n\n /** 직전 동일 길이 구간과 비교 — \"지난주보다 얼마나\" 를 보여주기 위한 것 */\n r.get(\"/api/analytics/compare\", \"user\", async (ctx: Ctx) => {\n const userId = targetUserId(ctx);\n const today = toLocalDate();\n const { from, to } = rangeFromQuery(ctx.query, addDays(today, -6), today);\n const span = dateRange(from, to).length;\n const prevTo = addDays(from, -1);\n const prevFrom = addDays(prevTo, -(span - 1));\n\n const [cur, prev] = await Promise.all([\n buildSummary(userId, from, to),\n buildSummary(userId, prevFrom, prevTo),\n ]);\n return json({ current: cur, previous: prev });\n });\n}\n",[],[156,281],"4db72583-ffc0-4289-b9ca-3bf3ba195b50","admin.ts","0a4fc5d0-ab26-11f1-ba6d-1607ee4eb77e",26,["D",1788831527223],"/**\n * 관리자 / 관리쌤 화면용 API.\n */\nimport { requireAdmin, requireStaff } from \"../lib/auth.ts\";\nimport { badRequest, Ctx, json, notFound, Router } from \"../lib/http.ts\";\nimport { exec, one, query } from \"../lib/sqlite.ts\";\nimport { addDays, nowIso, toLocalDate } from \"../lib/time.ts\";\nimport { enumOf, optStr, str } from \"../lib/validate.ts\";\nimport { audit, notify } from \"./_shared.ts\";\nimport { buildSummary } from \"./analytics.ts\";\nimport { migrate } from \"../db/migrate.ts\";\n\nexport function register(r: Router): void {\n /** 오늘의 운영 현황 — 관리자 대시보드 첫 화면 */\n r.get(\"/api/admin/overview\", \"staff\", async (ctx: Ctx) => {\n requireStaff(ctx.user);\n const today = toLocalDate();\n\n const [students] = await query<{ c: number }>(\n \"SELECT COUNT(*) AS c FROM users WHERE role = 'student' AND status = 'active'\",\n );\n const [studiedToday] = await query<{ c: number }>(\n \"SELECT COUNT(DISTINCT user_id) AS c FROM study_sessions WHERE date = ?\",\n [today],\n );\n const [diariesToday] = await query<{ c: number }>(\n \"SELECT COUNT(*) AS c FROM diaries WHERE date = ? AND content <> ''\",\n [today],\n );\n const [pendingComments] = await query<{ c: number }>(\n \"SELECT COUNT(*) AS c FROM diaries WHERE coach_comment IS NULL AND date >= ?\",\n [addDays(today, -14)],\n );\n const [openConsults] = await query<{ c: number }>(\n \"SELECT COUNT(*) AS c FROM consults WHERE status IN ('requested','scheduled')\",\n );\n const [minutesToday] = await query<{ m: number }>(\n \"SELECT COALESCE(SUM(minutes),0) AS m FROM study_sessions WHERE date = ? AND ended_at IS NOT NULL\",\n [today],\n );\n\n return json({\n today,\n stats: {\n activeStudents: Number(students?.c ?? 0),\n studiedToday: Number(studiedToday?.c ?? 0),\n diariesToday: Number(diariesToday?.c ?? 0),\n pendingComments: Number(pendingComments?.c ?? 0),\n openConsults: Number(openConsults?.c ?? 0),\n studyMinutesToday: Number(minutesToday?.m ?? 0),\n },\n });\n });\n\n /**\n * 학생 목록 + 오늘 진도.\n * 화면에서 학생마다 API 를 또 부르지 않도록 한 번에 붙여서 준다.\n */\n r.get(\"/api/admin/students\", \"staff\", async (ctx: Ctx) => {\n requireStaff(ctx.user);\n const today = toLocalDate();\n const q = (ctx.query.get(\"q\") ?? \"\").trim();\n const like = `%${q}%`;\n\n const rows = await query(\n `SELECT u.id, u.name, u.email, u.grade, u.school, u.target, u.seat_no, u.status, u.role,\n u.last_login_at, u.coach_id,\n (SELECT COALESCE(SUM(s.minutes),0) FROM study_sessions s\n WHERE s.user_id = u.id AND s.date = ? AND s.ended_at IS NOT NULL) AS minutes_today,\n (SELECT COUNT(*) FROM plans p WHERE p.user_id = u.id AND p.date = ?) AS plans_today,\n (SELECT COUNT(*) FROM plans p WHERE p.user_id = u.id AND p.date = ? AND p.status = 'done') AS done_today,\n (SELECT COUNT(*) FROM diaries d WHERE d.user_id = u.id AND d.date = ? AND d.content <> '') AS diary_today\n FROM users u\n WHERE u.role = 'student' ${\n q ? \"AND (u.name LIKE ? OR u.email LIKE ? OR u.seat_no LIKE ?)\" : \"\"\n }\n ORDER BY u.status, u.name\n LIMIT 300`,\n q ? [today, today, today, today, like, like, like] : [today, today, today, today],\n );\n return json({ students: rows, today });\n });\n\n /** 학생 1명 상세 — 프로필 + 기간 분석 + 최근 일기 */\n r.get(\"/api/admin/students/:id\", \"staff\", async (ctx: Ctx) => {\n requireStaff(ctx.user);\n const user = await one(\"SELECT * FROM users WHERE id = ?\", [ctx.params.id]);\n if (!user) throw notFound(\"학생을 찾을 수 없습니다.\");\n\n const today = toLocalDate();\n const from = ctx.query.get(\"from\") ?? addDays(today, -27);\n const summary = await buildSummary(ctx.params.id, from, ctx.query.get(\"to\") ?? today);\n const diaries = await query(\n \"SELECT * FROM diaries WHERE user_id = ? ORDER BY date DESC LIMIT 10\",\n [ctx.params.id],\n );\n const consults = await query(\n \"SELECT * FROM consults WHERE user_id = ? ORDER BY created_at DESC LIMIT 10\",\n [ctx.params.id],\n );\n return json({ user, summary, diaries, consults });\n });\n\n /** 학생 정보 수정 (좌석·담당쌤·상태·권한) */\n r.patch(\"/api/admin/students/:id\", \"staff\", async (ctx: Ctx) => {\n requireStaff(ctx.user);\n const body = await ctx.body();\n const user = await one<{ id: string }>(\"SELECT id FROM users WHERE id = ?\", [ctx.params.id]);\n if (!user) throw notFound(\"학생을 찾을 수 없습니다.\");\n\n const sets: string[] = [];\n const args: (string | null)[] = [];\n const put = (c: string, v: string | null) => {\n sets.push(`${c} = ?`);\n args.push(v);\n };\n\n if (body.seatNo !== undefined) put(\"seat_no\", optStr(body, \"seatNo\", 20));\n if (body.grade !== undefined) put(\"grade\", optStr(body, \"grade\", 20));\n if (body.school !== undefined) put(\"school\", optStr(body, \"school\", 60));\n if (body.target !== undefined) put(\"target\", optStr(body, \"target\", 120));\n if (body.phone !== undefined) put(\"phone\", optStr(body, \"phone\", 30));\n if (body.coachId !== undefined) put(\"coach_id\", optStr(body, \"coachId\", 60));\n if (body.status !== undefined) {\n put(\"status\", enumOf(body, \"status\", [\"active\", \"paused\", \"left\"] as const, \"active\"));\n }\n // 권한 변경은 관리자만.\n if (body.role !== undefined) {\n requireAdmin(ctx.user);\n put(\"role\", enumOf(body, \"role\", [\"student\", \"coach\", \"admin\"] as const, \"student\"));\n }\n\n if (!sets.length) throw badRequest(\"변경할 값이 없습니다.\");\n sets.push(\"updated_at = ?\");\n args.push(nowIso(), ctx.params.id);\n await exec(`UPDATE users SET ${sets.join(\", \")} WHERE id = ?`, args);\n await audit(ctx.user.id, \"student.update\", ctx.params.id, body);\n\n return json({ user: await one(\"SELECT * FROM users WHERE id = ?\", [ctx.params.id]) });\n });\n\n /** 관리쌤 목록 (담당 배정 셀렉트박스용) */\n r.get(\"/api/admin/staff\", \"staff\", async (ctx: Ctx) => {\n requireStaff(ctx.user);\n const rows = await query(\n \"SELECT id, name, email, role FROM users WHERE role IN ('coach','admin') ORDER BY name\",\n );\n return json({ staff: rows });\n });\n\n /** 공지 — 전체 또는 지정 학생에게 알림을 보낸다 */\n r.post(\"/api/admin/notices\", \"staff\", async (ctx: Ctx) => {\n requireStaff(ctx.user);\n const body = await ctx.body();\n const title = str(body, \"title\", { required: true, max: 120 });\n const message = str(body, \"body\", { max: 1000 });\n const targets = Array.isArray(body.studentIds) && body.studentIds.length\n ? (body.studentIds as string[]).slice(0, 500)\n : (await query<{ id: string }>(\n \"SELECT id FROM users WHERE role = 'student' AND status = 'active'\",\n )).map((r) => r.id);\n\n for (const id of targets) await notify(id, \"notice\", title, message, \"/index.html\");\n await audit(ctx.user.id, \"notice.send\", undefined, { title, count: targets.length });\n return json({ sent: targets.length });\n });\n\n /** 마이그레이션 실행 (Val Town 최초 세팅/스키마 추가 시) */\n r.post(\"/api/admin/migrate\", \"admin\", async (ctx: Ctx) => {\n requireAdmin(ctx.user);\n const result = await migrate();\n await audit(ctx.user.id, \"db.migrate\", undefined, result);\n return json(result);\n });\n\n r.get(\"/api/admin/audit\", \"admin\", async (ctx: Ctx) => {\n requireAdmin(ctx.user);\n const rows = await query(\n `SELECT a.*, u.name AS actor_name FROM audit_logs a\n LEFT JOIN users u ON u.id = a.actor_id\n ORDER BY a.created_at DESC LIMIT 200`,\n );\n return json({ logs: rows });\n });\n}\n",[],[156,289],"5432eda6-3455-4b48-aa81-236fbe678efe","_shared.ts","09507b02-ab26-11f1-9183-1607ee4eb77e",21,["D",1788831527798],"/**\n * 라우트 공통 헬퍼.\n */\nimport { isStaff } from \"../lib/auth.ts\";\nimport { Ctx, forbidden, notFound } from \"../lib/http.ts\";\nimport { exec, one, query, uuid } from \"../lib/sqlite.ts\";\nimport { nowIso } from \"../lib/time.ts\";\nimport { DEFAULT_SUBJECTS } from \"../db/schema.ts\";\n\n/**\n * 조회/수정 대상 학생을 정한다.\n * - 학생 : 항상 본인\n * - 관리쌤/관리자 : ?studentId= 로 다른 학생을 지정할 수 있다\n *\n * 학생이 남의 데이터를 보려고 studentId 를 넣으면 403.\n */\nexport function targetUserId(ctx: Ctx): string {\n const requested = ctx.query.get(\"studentId\");\n if (!requested || requested === ctx.user.id) return ctx.user.id;\n if (!isStaff(ctx.user)) throw forbidden(\"다른 학생의 데이터에 접근할 수 없습니다.\");\n return requested;\n}\n\n/** 본문에 studentId 가 들어오는 POST/PATCH 용 */\nexport function targetUserIdFromBody(ctx: Ctx, body: Record): string {\n const requested = typeof body.studentId === \"string\" ? body.studentId : null;\n if (!requested || requested === ctx.user.id) return ctx.user.id;\n if (!isStaff(ctx.user)) throw forbidden(\"다른 학생의 데이터를 수정할 수 없습니다.\");\n return requested;\n}\n\nexport interface SubjectRow {\n id: string;\n user_id: string;\n name: string;\n color: string;\n sort_order: number;\n archived: number;\n}\n\n/** 과목이 하나도 없는 신규 학생에게 기본 과목을 깔아준다. */\nexport async function ensureSubjects(userId: string): Promise {\n const rows = await query(\n \"SELECT * FROM subjects WHERE user_id = ? AND archived = 0 ORDER BY sort_order, name\",\n [userId],\n );\n if (rows.length) return rows;\n\n const now = nowIso();\n for (let i = 0; i < DEFAULT_SUBJECTS.length; i++) {\n const s = DEFAULT_SUBJECTS[i];\n await exec(\n \"INSERT INTO subjects (id, user_id, name, color, sort_order, archived, created_at) VALUES (?, ?, ?, ?, ?, 0, ?)\",\n [uuid(), userId, s.name, s.color, i, now],\n );\n }\n return await query(\n \"SELECT * FROM subjects WHERE user_id = ? AND archived = 0 ORDER BY sort_order, name\",\n [userId],\n );\n}\n\n/** 소유자 확인 후 행을 돌려준다. 없거나 남의 것이면 404/403. */\nexport async function ownedRow(\n table: string,\n id: string,\n ctx: Ctx,\n): Promise {\n const row = await one(`SELECT * FROM ${table} WHERE id = ?`, [id]);\n if (!row) throw notFound();\n if (row.user_id && row.user_id !== ctx.user.id && !isStaff(ctx.user)) {\n throw forbidden(\"본인 데이터만 수정할 수 있습니다.\");\n }\n return row;\n}\n\nexport async function notify(\n userId: string,\n type: string,\n title: string,\n body?: string,\n link?: string,\n): Promise {\n await exec(\n \"INSERT INTO notifications (id, user_id, type, title, body, link, created_at) VALUES (?, ?, ?, ?, ?, ?, ?)\",\n [uuid(), userId, type, title, body ?? null, link ?? null, nowIso()],\n );\n}\n\nexport async function audit(\n actorId: string,\n action: string,\n target?: string,\n meta?: unknown,\n): Promise {\n await exec(\n \"INSERT INTO audit_logs (id, actor_id, action, target, meta, created_at) VALUES (?, ?, ?, ?, ?, ?)\",\n [uuid(), actorId, action, target ?? null, meta ? JSON.stringify(meta) : null, nowIso()],\n );\n}\n",[],[156,297],["D",1788831525811],[205,206,207,208,209,210,211,212,213,214],[156],"df23e099-bed8-4548-83a7-37c579690a42","validate.ts","084b9f48-ab26-11f1-97be-1607ee4eb77e",["D",1788831526112],"/**\n * 입력 검증 — 얇은 헬퍼. 스키마 라이브러리를 넣지 않고 필요한 것만 둔다.\n * 모든 문자열은 trim 하고 길이 상한을 강제한다(DB 오염 방지).\n */\nimport { badRequest } from \"./http.ts\";\nimport { isDate } from \"./time.ts\";\n\ntype Obj = Record;\n\nexport function str(\n body: Obj,\n key: string,\n opts: { required?: boolean; max?: number; min?: number; default?: string } = {},\n): string {\n const raw = body[key];\n if (raw === undefined || raw === null || raw === \"\") {\n if (opts.required) throw badRequest(`'${key}' 값이 필요합니다.`);\n return opts.default ?? \"\";\n }\n if (typeof raw !== \"string\") throw badRequest(`'${key}' 는 문자열이어야 합니다.`);\n const v = raw.trim();\n const max = opts.max ?? 2000;\n if (v.length > max) throw badRequest(`'${key}' 는 ${max}자를 넘을 수 없습니다.`);\n if (opts.min && v.length < opts.min) {\n throw badRequest(`'${key}' 는 ${opts.min}자 이상이어야 합니다.`);\n }\n return v;\n}\n\nexport function optStr(body: Obj, key: string, max = 2000): string | null {\n const v = str(body, key, { max });\n return v === \"\" ? null : v;\n}\n\nexport function int(\n body: Obj,\n key: string,\n opts: { required?: boolean; min?: number; max?: number; default?: number } = {},\n): number {\n const raw = body[key];\n if (raw === undefined || raw === null || raw === \"\") {\n if (opts.required) throw badRequest(`'${key}' 값이 필요합니다.`);\n return opts.default ?? 0;\n }\n const n = Number(raw);\n if (!Number.isFinite(n)) throw badRequest(`'${key}' 는 숫자여야 합니다.`);\n const v = Math.trunc(n);\n if (opts.min !== undefined && v < opts.min) {\n throw badRequest(`'${key}' 는 ${opts.min} 이상이어야 합니다.`);\n }\n if (opts.max !== undefined && v > opts.max) {\n throw badRequest(`'${key}' 는 ${opts.max} 이하여야 합니다.`);\n }\n return v;\n}\n\nexport function optInt(body: Obj, key: string, min: number, max: number): number | null {\n const raw = body[key];\n if (raw === undefined || raw === null || raw === \"\") return null;\n return int(body, key, { min, max });\n}\n\nexport function enumOf(\n body: Obj,\n key: string,\n allowed: readonly T[],\n fallback: T,\n): T {\n const raw = body[key];\n if (raw === undefined || raw === null || raw === \"\") return fallback;\n if (typeof raw !== \"string\" || !allowed.includes(raw as T)) {\n throw badRequest(`'${key}' 는 ${allowed.join(\", \")} 중 하나여야 합니다.`);\n }\n return raw as T;\n}\n\nexport function dateOf(body: Obj, key: string, fallback?: string): string {\n const raw = body[key];\n if (raw === undefined || raw === null || raw === \"\") {\n if (fallback) return fallback;\n throw badRequest(`'${key}' 날짜가 필요합니다.`);\n }\n if (!isDate(raw)) throw badRequest(`'${key}' 는 YYYY-MM-DD 형식이어야 합니다.`);\n return raw;\n}\n\n/** ISO8601 시각 문자열 검증 */\nexport function isoOf(body: Obj, key: string, required = false): string | null {\n const raw = body[key];\n if (raw === undefined || raw === null || raw === \"\") {\n if (required) throw badRequest(`'${key}' 시각이 필요합니다.`);\n return null;\n }\n if (typeof raw !== \"string\" || Number.isNaN(Date.parse(raw))) {\n throw badRequest(`'${key}' 는 올바른 날짜/시각이어야 합니다.`);\n }\n return new Date(raw).toISOString();\n}\n\n/** 쿼리스트링에서 날짜 범위를 뽑는다. 없으면 기본 구간을 준다. */\nexport function rangeFromQuery(\n q: URLSearchParams,\n defaultFrom: string,\n defaultTo: string,\n): { from: string; to: string } {\n const from = q.get(\"from\");\n const to = q.get(\"to\");\n if (from && !isDate(from)) throw badRequest(\"'from' 은 YYYY-MM-DD 형식이어야 합니다.\");\n if (to && !isDate(to)) throw badRequest(\"'to' 는 YYYY-MM-DD 형식이어야 합니다.\");\n const f = from ?? defaultFrom;\n const t = to ?? defaultTo;\n if (f > t) throw badRequest(\"'from' 이 'to' 보다 늦습니다.\");\n return { from: f, to: t };\n}\n",[],[163,308],"3297f0d4-3d89-4bc6-835c-cfe724ea5bf9","time.ts","08ca7f20-ab26-11f1-9e2b-1607ee4eb77e",15,["D",1788831526935],"/**\n * 날짜 유틸. 서비스 기준 시간대(KST)로 \"오늘\"을 계산한다.\n * DB 에는 날짜는 YYYY-MM-DD(TEXT), 시각은 ISO8601 UTC(TEXT)로 저장한다.\n */\nimport { CONFIG } from \"../config.ts\";\n\nconst DATE_FMT = new Intl.DateTimeFormat(\"en-CA\", {\n timeZone: CONFIG.timezone,\n year: \"numeric\",\n month: \"2-digit\",\n day: \"2-digit\",\n});\n\n/** Date → 'YYYY-MM-DD' (KST 기준) */\nexport function toLocalDate(d: Date = new Date()): string {\n return DATE_FMT.format(d);\n}\n\n/** 현재 시각 ISO(UTC) */\nexport function nowIso(): string {\n return new Date().toISOString();\n}\n\n/** 'YYYY-MM-DD' 에 일수를 더한다. */\nexport function addDays(date: string, days: number): string {\n const [y, m, d] = date.split(\"-\").map(Number);\n const dt = new Date(Date.UTC(y, m - 1, d));\n dt.setUTCDate(dt.getUTCDate() + days);\n return dt.toISOString().slice(0, 10);\n}\n\n/** 두 날짜(양끝 포함) 사이의 날짜 배열. 최대 400일에서 끊는다. */\nexport function dateRange(from: string, to: string): string[] {\n const out: string[] = [];\n let cur = from;\n for (let i = 0; i < 400 && cur <= to; i++) {\n out.push(cur);\n cur = addDays(cur, 1);\n }\n return out;\n}\n\n/** 해당 날짜가 속한 주의 월요일 */\nexport function weekStart(date: string): string {\n const [y, m, d] = date.split(\"-\").map(Number);\n const dow = (new Date(Date.UTC(y, m - 1, d)).getUTCDay() + 6) % 7; // 월=0\n return addDays(date, -dow);\n}\n\nexport function isDate(v: unknown): v is string {\n return typeof v === \"string\" && /^\\d{4}-\\d{2}-\\d{2}$/.test(v);\n}\n",[],[163,315],"f3e0733b-4e89-4b1f-ae5f-40e750c11ca0","sqlite.ts","08548de2-ab26-11f1-aeaa-1607ee4eb77e",6,["D",1788831526144],"/**\n * SQLite 어댑터.\n *\n * 백엔드는 두 가지다.\n * - valtown : Val Town 내장 SQLite (https://esm.town/v/std/sqlite)\n * - local : jsr:@db/sqlite 파일 DB (로컬 개발/테스트)\n *\n * 두 백엔드의 반환 형태가 달라서(배열 행 vs 객체 행) 여기서 객체 행으로 통일한다.\n * 호출부는 어느 백엔드인지 알 필요가 없다.\n *\n * 모듈 경로를 변수로 조립하는 이유: `deno check` 가 정적 분석으로 원격 모듈을\n * 받아오려 하는 것을 막기 위해서다(로컬에서는 Val Town 모듈을 받을 수 없다).\n */\nimport { CONFIG, isLocal } from \"../config.ts\";\n\nexport type Row = Record;\nexport type Arg = string | number | boolean | null;\n\n// deno-lint-ignore no-explicit-any\ntype AnyDb = any;\n\nlet valtownSqlite: AnyDb | null = null;\nlet localDb: AnyDb | null = null;\n\n/**\n * Val Town 내장 SQLite.\n *\n * ★ 경로 끝의 `/main.ts` 를 반드시 붙인다.\n * 생략하면(`.../std/sqlite`) legacy account-scoped(global) DB 에 연결되고,\n * 그쪽은 rows 를 \"배열의 배열\"로 돌려줘 반환 형태까지 달라진다.\n * 현행 권장은 val-scoped(`/main.ts`)이며 rows 가 객체 배열이다.\n * https://docs.val.town/reference/std/sqlite/usage\n */\nasync function getValtown(): Promise {\n if (!valtownSqlite) {\n const spec = [\"https:/\", \"esm.town\", \"v\", \"std\", \"sqlite\", \"main.ts\"].join(\"/\");\n const mod = await import(spec);\n valtownSqlite = mod.sqlite;\n }\n return valtownSqlite;\n}\n\n/**\n * 로컬 백엔드는 Deno 내장 node:sqlite 를 쓴다.\n * (jsr:@db/sqlite 는 SQL 문에 한글이 섞이면 바이트 길이를 잘못 계산해\n * \"incomplete input\" 으로 실패한다 — DDL 주석이 한글이라 바로 걸린다.)\n */\nasync function getLocal(): Promise {\n if (!localDb) {\n const spec = [\"node:\", \"sqlite\"].join(\"\");\n const { DatabaseSync } = await import(spec);\n const path = CONFIG.localDbPath;\n const dir = path.slice(0, path.lastIndexOf(\"/\"));\n if (dir) await Deno.mkdir(dir, { recursive: true }).catch(() => {});\n localDb = new DatabaseSync(path);\n localDb.exec(\"PRAGMA journal_mode = WAL;\");\n localDb.exec(\"PRAGMA foreign_keys = ON;\");\n }\n return localDb;\n}\n\n/** SELECT — 객체 행 배열을 돌려준다. */\nexport async function query(sql: string, args: Arg[] = []): Promise {\n if (isLocal()) {\n const db = await getLocal();\n return db.prepare(sql).all(...args) as T[];\n }\n const sqlite = await getValtown();\n const res = await sqlite.execute({ sql, args });\n const rows: unknown[] = res.rows ?? [];\n if (!rows.length) return [];\n\n // val-scoped 는 객체 배열, legacy global 은 배열의 배열을 준다.\n // 어느 쪽에 붙어도 깨지지 않게 형태를 보고 분기한다.\n if (!Array.isArray(rows[0])) return rows as T[];\n\n const cols: string[] = res.columns ?? [];\n return (rows as unknown[][]).map((row) => {\n const obj: Row = {};\n cols.forEach((c, i) => (obj[c] = row[i]));\n return obj as T;\n });\n}\n\n/** SELECT 단건 */\nexport async function one(sql: string, args: Arg[] = []): Promise {\n const rows = await query(sql, args);\n return rows.length ? rows[0] : null;\n}\n\n/** INSERT / UPDATE / DELETE */\nexport async function exec(sql: string, args: Arg[] = []): Promise {\n if (isLocal()) {\n const db = await getLocal();\n db.prepare(sql).run(...args);\n return;\n }\n const sqlite = await getValtown();\n await sqlite.execute({ sql, args });\n}\n\n/** DDL 등 파라미터 없는 스크립트를 순서대로 실행 */\nexport async function execScript(statements: string[]): Promise {\n for (const sql of statements) {\n const trimmed = sql.trim();\n if (trimmed) await exec(trimmed);\n }\n}\n\n/** COUNT(*) 같은 단일 스칼라 */\nexport async function scalar(sql: string, args: Arg[] = []): Promise {\n const row = await one(sql, args);\n if (!row) return null;\n const first = Object.values(row)[0];\n return (first as T) ?? null;\n}\n\nexport function uuid(): string {\n return crypto.randomUUID();\n}\n",[],[163,323],"af4ffba0-23c5-4c86-9eff-6d32cdf4b408","http.ts",31,["D",1788831720182],"/**\n * HTTP 유틸 — 응답 헬퍼, CORS, 아주 작은 라우터.\n * 프레임워크를 넣지 않는 이유: Val Town 은 단일 fetch 핸들러라 이 정도면 충분하고,\n * 의존성이 적을수록 배포가 단순하다.\n */\nimport { CONFIG } from \"../config.ts\";\n\nexport class HttpError extends Error {\n constructor(\n public status: number,\n public code: string,\n message: string,\n public detail?: unknown,\n ) {\n super(message);\n this.name = \"HttpError\";\n }\n}\n\nexport const badRequest = (msg: string, detail?: unknown) =>\n new HttpError(400, \"bad_request\", msg, detail);\nexport const unauthorized = (msg = \"로그인이 필요합니다.\") =>\n new HttpError(401, \"unauthorized\", msg);\nexport const forbidden = (msg = \"권한이 없습니다.\") => new HttpError(403, \"forbidden\", msg);\nexport const notFound = (msg = \"대상을 찾을 수 없습니다.\") => new HttpError(404, \"not_found\", msg);\nexport const tooMany = (msg: string) => new HttpError(429, \"rate_limited\", msg);\n\n/**\n * 허용 오리진이면 그 오리진을 그대로 돌려준다.\n * ALLOWED_ORIGINS 가 비어 있으면 개발 편의를 위해 * 를 준다(운영에서는 반드시 채울 것).\n */\nexport function corsHeaders(req: Request): Record {\n const origin = req.headers.get(\"origin\") ?? \"\";\n const list = CONFIG.allowedOrigins;\n let allow = \"*\";\n if (list.length) allow = list.includes(origin) ? origin : list[0];\n\n return {\n \"access-control-allow-origin\": allow,\n \"access-control-allow-methods\": \"GET,POST,PATCH,PUT,DELETE,OPTIONS\",\n \"access-control-allow-headers\": \"authorization,content-type\",\n \"access-control-max-age\": \"86400\",\n \"vary\": \"origin\",\n };\n}\n\nexport function json(data: unknown, status = 200, headers: Record = {}): Response {\n return new Response(JSON.stringify(data), {\n status,\n headers: { \"content-type\": \"application/json; charset=utf-8\", ...headers },\n });\n}\n\nexport function errorResponse(e: unknown, req: Request): Response {\n const cors = corsHeaders(req);\n if (e instanceof HttpError) {\n return json({ error: e.code, message: e.message, detail: e.detail }, e.status, cors);\n }\n console.error(\"[unhandled]\", e);\n const message = e instanceof Error ? e.message : String(e);\n return json({ error: \"internal\", message }, 500, cors);\n}\n\n/* ── 라우터 ───────────────────────────────────────────────── */\n\nexport type AuthLevel = \"public\" | \"user\" | \"staff\" | \"admin\";\n\nexport interface AuthUser {\n id: string;\n email: string | null;\n name: string;\n role: \"student\" | \"coach\" | \"admin\";\n}\n\nexport interface Ctx {\n req: Request;\n url: URL;\n params: Record;\n query: URLSearchParams;\n /** auth 레벨이 public 이 아니면 항상 채워진다. */\n user: AuthUser;\n body: >() => Promise;\n}\n\nexport type Handler = (ctx: Ctx) => Promise | Response;\n\ninterface Route {\n method: string;\n segments: string[];\n handler: Handler;\n auth: AuthLevel;\n}\n\nexport class Router {\n private routes: Route[] = [];\n\n add(method: string, pattern: string, auth: AuthLevel, handler: Handler): this {\n this.routes.push({\n method: method.toUpperCase(),\n segments: pattern.split(\"/\").filter(Boolean),\n handler,\n auth,\n });\n return this;\n }\n\n get = (p: string, a: AuthLevel, h: Handler) => this.add(\"GET\", p, a, h);\n post = (p: string, a: AuthLevel, h: Handler) => this.add(\"POST\", p, a, h);\n patch = (p: string, a: AuthLevel, h: Handler) => this.add(\"PATCH\", p, a, h);\n del = (p: string, a: AuthLevel, h: Handler) => this.add(\"DELETE\", p, a, h);\n\n match(method: string, path: string): { route: Route; params: Record } | null {\n const parts = path.split(\"/\").filter(Boolean);\n let pathMatched = false;\n\n for (const route of this.routes) {\n if (route.segments.length !== parts.length) continue;\n const params: Record = {};\n let ok = true;\n for (let i = 0; i < parts.length; i++) {\n const seg = route.segments[i];\n if (seg.startsWith(\":\")) params[seg.slice(1)] = decodeURIComponent(parts[i]);\n else if (seg !== parts[i]) {\n ok = false;\n break;\n }\n }\n if (!ok) continue;\n pathMatched = true;\n if (route.method === method.toUpperCase()) return { route, params };\n }\n\n if (pathMatched) throw new HttpError(405, \"method_not_allowed\", \"허용되지 않은 메서드입니다.\");\n return null;\n }\n\n levelOf(route: Route): AuthLevel {\n return route.auth;\n }\n\n run(route: Route, ctx: Ctx): Promise | Response {\n return route.handler(ctx);\n }\n}\n\n/** 요청 본문 파서 — 빈 본문은 {} 로 준다. */\nexport function bodyReader(req: Request) {\n let cached: unknown;\n let read = false;\n return async >(): Promise => {\n if (read) return cached as T;\n read = true;\n const text = await req.text();\n if (!text.trim()) {\n cached = {};\n return cached as T;\n }\n try {\n cached = JSON.parse(text);\n } catch {\n throw badRequest(\"JSON 본문을 해석할 수 없습니다.\");\n }\n return cached as T;\n };\n}\n",[],[163,331],"a856c541-89d5-4b15-a59e-2ae5b080db9c","env.ts","0879b608-ab26-11f1-aeaa-1607ee4eb77e",8,["D",1788831526436],"/**\n * 로컬 개발용 .env 로더.\n * Val Town 에서는 대시보드 환경변수가 이 역할을 하므로 파일이 없으면 조용히 넘어간다.\n *\n * 이 모듈은 부수효과가 목적이다 — 진입점에서 `import \"./lib/env.ts\";` 로 가장 먼저 부른다.\n */\nexport async function loadEnvFile(url = new URL(\"../../.env\", import.meta.url)): Promise {\n let text: string;\n try {\n text = await Deno.readTextFile(url);\n } catch {\n return false;\n }\n\n for (const line of text.split(\"\\n\")) {\n const trimmed = line.trim();\n if (!trimmed || trimmed.startsWith(\"#\")) continue;\n const eq = trimmed.indexOf(\"=\");\n if (eq < 0) continue;\n const key = trimmed.slice(0, eq).trim();\n const value = trimmed.slice(eq + 1).trim().replace(/^[\"']|[\"']$/g, \"\");\n // 이미 설정된 시스템 환경변수가 우선한다.\n if (!Deno.env.get(key)) Deno.env.set(key, value);\n }\n return true;\n}\n\nawait loadEnvFile();\n",[],[163,338],"6b99b14f-dcd2-4a00-ada4-784904e0e85a","claude.ts","085c59c8-ab26-11f1-9b77-1607ee4eb77e",7,["D",1788831526216],"/**\n * Claude API 클라이언트 (Messages API).\n * SDK 를 넣지 않는다 — 필요한 건 fetch 두 줄이고, Val Town 은 의존성이 적을수록 안전하다.\n */\nimport { CONFIG } from \"../config.ts\";\nimport { HttpError } from \"./http.ts\";\n\nconst API_URL = \"https://api.anthropic.com/v1/messages\";\nconst API_VERSION = \"2023-06-01\";\n\nexport interface ClaudeMessage {\n role: \"user\" | \"assistant\";\n content: string;\n}\n\ninterface RequestOptions {\n system: string;\n messages: ClaudeMessage[];\n maxTokens?: number;\n stream?: boolean;\n}\n\nfunction headers(): HeadersInit {\n if (!CONFIG.anthropicApiKey) {\n throw new HttpError(503, \"chat_unavailable\", \"챗봇이 아직 설정되지 않았습니다.\");\n }\n return {\n \"content-type\": \"application/json\",\n \"x-api-key\": CONFIG.anthropicApiKey,\n \"anthropic-version\": API_VERSION,\n };\n}\n\n/**\n * Anthropic 오류를 사용자·운영자가 구분할 수 있는 문장으로 바꾼다.\n * 전부 \"실패했습니다\" 로 뭉치면 키가 틀린 건지 일시 장애인지 알 수 없다.\n */\nfunction messageFor(status: number): string {\n if (status === 401 || status === 403) {\n return \"챗봇 인증에 실패했습니다. 관리자에게 API 키 확인을 요청해 주세요.\";\n }\n if (status === 429) return \"지금 이용자가 많습니다. 잠시 후 다시 시도해 주세요.\";\n if (status >= 500) return \"챗봇 서버가 응답하지 않습니다. 잠시 후 다시 시도해 주세요.\";\n return \"챗봇 응답에 실패했습니다. 잠시 후 다시 시도해 주세요.\";\n}\n\nfunction payload(opts: RequestOptions) {\n return JSON.stringify({\n model: CONFIG.claudeModel,\n max_tokens: opts.maxTokens ?? 1500,\n system: opts.system,\n messages: opts.messages,\n stream: opts.stream ?? false,\n });\n}\n\nexport interface ClaudeResult {\n text: string;\n tokensIn: number;\n tokensOut: number;\n}\n\n/** 단발 호출 — 응답 전체를 받아서 돌려준다. */\nexport async function complete(opts: RequestOptions): Promise {\n const res = await fetch(API_URL, {\n method: \"POST\",\n headers: headers(),\n body: payload({ ...opts, stream: false }),\n });\n\n if (!res.ok) {\n const detail = await res.text();\n console.error(\"[claude]\", res.status, detail);\n throw new HttpError(502, \"chat_failed\", messageFor(res.status));\n }\n\n const data = await res.json() as {\n content: Array<{ type: string; text?: string }>;\n usage?: { input_tokens: number; output_tokens: number };\n };\n\n return {\n text: data.content.filter((c) => c.type === \"text\").map((c) => c.text ?? \"\").join(\"\"),\n tokensIn: data.usage?.input_tokens ?? 0,\n tokensOut: data.usage?.output_tokens ?? 0,\n };\n}\n\n/**\n * 스트리밍 호출.\n * Anthropic SSE 를 그대로 흘려보내지 않고 { delta } / { done } 형태로 단순화해 내보낸다.\n * 프론트가 Anthropic 이벤트 스펙에 묶이지 않게 하려는 것.\n * 전체 텍스트가 모이면 onDone 으로 넘겨 저장한다.\n */\nexport function stream(\n opts: RequestOptions,\n onDone: (result: ClaudeResult) => Promise,\n): Response {\n const encoder = new TextEncoder();\n\n const body = new ReadableStream({\n async start(controller) {\n const send = (obj: unknown) =>\n controller.enqueue(encoder.encode(`data: ${JSON.stringify(obj)}\\n\\n`));\n\n let full = \"\";\n let tokensIn = 0;\n let tokensOut = 0;\n\n try {\n const res = await fetch(API_URL, {\n method: \"POST\",\n headers: headers(),\n body: payload({ ...opts, stream: true }),\n });\n\n if (!res.ok || !res.body) {\n const detail = await res.text().catch(() => \"\");\n console.error(\"[claude:stream]\", res.status, detail);\n send({ error: messageFor(res.status) });\n controller.close();\n return;\n }\n\n const reader = res.body.pipeThrough(new TextDecoderStream()).getReader();\n let buffer = \"\";\n\n while (true) {\n const { value, done } = await reader.read();\n if (done) break;\n buffer += value;\n\n // SSE 는 빈 줄로 이벤트가 끝난다. 마지막 조각은 다음 청크와 이어 붙인다.\n const chunks = buffer.split(\"\\n\\n\");\n buffer = chunks.pop() ?? \"\";\n\n for (const chunk of chunks) {\n const line = chunk.split(\"\\n\").find((l) => l.startsWith(\"data:\"));\n if (!line) continue;\n const raw = line.slice(5).trim();\n if (!raw || raw === \"[DONE]\") continue;\n\n try {\n const evt = JSON.parse(raw);\n if (evt.type === \"content_block_delta\" && evt.delta?.type === \"text_delta\") {\n full += evt.delta.text;\n send({ delta: evt.delta.text });\n } else if (evt.type === \"message_start\") {\n tokensIn = evt.message?.usage?.input_tokens ?? 0;\n } else if (evt.type === \"message_delta\") {\n tokensOut = evt.usage?.output_tokens ?? tokensOut;\n } else if (evt.type === \"error\") {\n send({ error: evt.error?.message ?? \"오류가 발생했습니다.\" });\n }\n } catch {\n // 파싱 실패한 이벤트는 건너뛴다(핑 등).\n }\n }\n }\n\n await onDone({ text: full, tokensIn, tokensOut });\n send({ done: true });\n } catch (e) {\n console.error(\"[claude:stream]\", e);\n // 여기까지 받은 응답이라도 저장해 대화가 끊기지 않게 한다.\n if (full) await onDone({ text: full, tokensIn, tokensOut }).catch(() => {});\n send({ error: \"연결이 끊겼습니다.\" });\n } finally {\n controller.close();\n }\n },\n });\n\n return new Response(body, {\n headers: {\n \"content-type\": \"text/event-stream; charset=utf-8\",\n \"cache-control\": \"no-cache\",\n \"connection\": \"keep-alive\",\n },\n });\n}\n",[],[163,346],"c5cef72f-db43-438c-977c-fe9723c10e7f",["D",1788841392119],[],[163,33],["D",1788831524911],[197,198,199,200,201,202,203],[163],"3f856cc0-45ce-4120-bb92-946ca18a1a71","seed.ts","08c5d4ca-ab26-11f1-ba0e-1607ee4eb77e",14,["D",1788831526931],"/**\n * 로컬 개발용 시드. 운영에서는 실행하지 않는다.\n * deno task seed\n */\nimport \"../lib/env.ts\";\nimport { exec, one, query, uuid } from \"../lib/sqlite.ts\";\nimport { addDays, nowIso, toLocalDate } from \"../lib/time.ts\";\nimport { migrate } from \"./migrate.ts\";\nimport { DEFAULT_SUBJECTS } from \"./schema.ts\";\n\nconst STUDENT_ID = \"dev-student\";\nconst ADMIN_ID = \"dev-admin\";\n\nasync function upsertUser(\n id: string,\n name: string,\n role: string,\n extra: Record = {},\n) {\n const now = nowIso();\n const exists = await one(\"SELECT id FROM users WHERE id = ?\", [id]);\n if (exists) {\n await exec(\"UPDATE users SET name = ?, role = ?, updated_at = ? WHERE id = ?\", [\n name,\n role,\n now,\n id,\n ]);\n return;\n }\n await exec(\n `INSERT INTO users (id, email, name, role, status, school, grade, target, seat_no, created_at, updated_at)\n VALUES (?, ?, ?, ?, 'active', ?, ?, ?, ?, ?, ?)`,\n [\n id,\n `${id}@dev.local`,\n name,\n role,\n extra.school ?? null,\n extra.grade ?? null,\n extra.target ?? null,\n extra.seat ?? null,\n now,\n now,\n ],\n );\n}\n\nconst result = await migrate();\nconsole.log(\"마이그레이션:\", result.applied.length ? result.applied.join(\", \") : \"이미 적용됨\");\n\nawait upsertUser(ADMIN_ID, \"김관리\", \"admin\");\nawait upsertUser(STUDENT_ID, \"이학생\", \"student\", {\n school: \"로드맵고\",\n grade: \"고2\",\n target: \"서울대 컴퓨터공학과\",\n seat: \"A-14\",\n});\n\n// 과목\nconst subjectIds: string[] = [];\nfor (let i = 0; i < DEFAULT_SUBJECTS.length; i++) {\n const s = DEFAULT_SUBJECTS[i];\n const existing = await one<{ id: string }>(\n \"SELECT id FROM subjects WHERE user_id = ? AND name = ?\",\n [STUDENT_ID, s.name],\n );\n if (existing) {\n subjectIds.push(existing.id);\n continue;\n }\n const id = uuid();\n await exec(\n \"INSERT INTO subjects (id, user_id, name, color, sort_order, archived, created_at) VALUES (?, ?, ?, ?, ?, 0, ?)\",\n [id, STUDENT_ID, s.name, s.color, i, nowIso()],\n );\n subjectIds.push(id);\n}\n\n// 최근 14일 계획·세션·일기\nconst today = toLocalDate();\nconst already = await query(\"SELECT id FROM plans WHERE user_id = ? LIMIT 1\", [STUDENT_ID]);\nif (already.length) {\n console.log(\"이미 시드 데이터가 있습니다. 계획 생성은 건너뜁니다.\");\n} else {\n const titles = [\n [\"수능특강 독서 3강\", 60],\n [\"수학 미적분 유형편 20문항\", 90],\n [\"영단어 Day 12\", 30],\n [\"한국사 근현대 개념\", 45],\n [\"기출 오답 정리\", 50],\n ] as const;\n\n for (let d = 13; d >= 0; d--) {\n const date = addDays(today, -d);\n const count = 2 + (d % 3);\n for (let i = 0; i < count; i++) {\n const [title, goal] = titles[(d + i) % titles.length];\n const planId = uuid();\n const done = Math.random() > 0.3;\n const actual = done ? goal + Math.round((Math.random() - 0.5) * 20) : Math.round(goal * 0.4);\n const now = nowIso();\n\n await exec(\n `INSERT INTO plans (id, user_id, date, subject_id, title, goal_minutes, actual_minutes, status, priority, sort_order, created_by, created_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, 2, ?, ?, ?, ?)`,\n [\n planId,\n STUDENT_ID,\n date,\n subjectIds[(d + i) % subjectIds.length],\n title,\n goal,\n Math.max(0, actual),\n done ? \"done\" : \"todo\",\n i,\n STUDENT_ID,\n now,\n now,\n ],\n );\n if (actual > 0) {\n await exec(\n `INSERT INTO study_sessions (id, user_id, plan_id, date, started_at, ended_at, minutes, source, created_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, 'manual', ?)`,\n [\n uuid(),\n STUDENT_ID,\n planId,\n date,\n `${date}T10:00:00.000Z`,\n `${date}T11:00:00.000Z`,\n Math.max(0, actual),\n now,\n ],\n );\n }\n }\n\n if (d % 2 === 0) {\n await exec(\n `INSERT INTO diaries (id, user_id, date, mood, focus_score, content, keep_note, problem_note, try_note, created_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n [\n uuid(),\n STUDENT_ID,\n date,\n 3 + (d % 3 === 0 ? 1 : 0),\n 3 + (d % 2),\n \"오늘은 수학에 시간을 많이 썼다. 미적분 유형이 아직 손에 안 익는다.\",\n \"계획한 분량을 거의 다 했다.\",\n \"쉬는 시간이 길어졌다.\",\n \"타이머를 켜고 50분 단위로 끊어보기.\",\n nowIso(),\n nowIso(),\n ],\n );\n }\n }\n console.log(\"계획·세션·일기 시드 완료\");\n}\n\nconsole.log(`\n시드 완료.\n 학생 토큰 : dev:${STUDENT_ID}:student\n 관리자 토큰: dev:${ADMIN_ID}:admin\n .env 에 AUTH_MODE=dev 로 두면 이 토큰으로 로그인할 수 있습니다.\n`);\n",[],[168,361],"4e4d5d4e-b2ed-4987-a594-9336aa870866","schema.ts","08b2b3b8-ab26-11f1-ba0e-1607ee4eb77e",12,["D",1788831526757],"/**\n * 스키마 SSOT.\n *\n * 규칙\n * - id 는 전부 TEXT(UUID). 자동증가 정수를 쓰지 않는다(환경 간 이관이 쉬움).\n * - 날짜는 'YYYY-MM-DD'(KST 기준), 시각은 ISO8601 UTC 문자열.\n * - 마이그레이션은 append-only. 기존 항목을 수정하지 말고 뒤에 추가한다.\n */\n\nexport interface Migration {\n id: string;\n statements: string[];\n}\n\nexport const MIGRATIONS: Migration[] = [\n {\n id: \"0001_init\",\n statements: [\n `CREATE TABLE IF NOT EXISTS users (\n id TEXT PRIMARY KEY, -- Firebase uid\n email TEXT,\n name TEXT NOT NULL DEFAULT '',\n phone TEXT,\n role TEXT NOT NULL DEFAULT 'student', -- student | coach | admin\n status TEXT NOT NULL DEFAULT 'active', -- active | paused | left\n school TEXT,\n grade TEXT,\n target TEXT, -- 목표 대학/시험\n seat_no TEXT, -- 독서실 좌석\n photo_url TEXT,\n coach_id TEXT, -- 담당 관리쌤\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n last_login_at TEXT\n )`,\n `CREATE INDEX IF NOT EXISTS idx_users_role ON users(role, status)`,\n `CREATE INDEX IF NOT EXISTS idx_users_coach ON users(coach_id)`,\n\n `CREATE TABLE IF NOT EXISTS subjects (\n id TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n name TEXT NOT NULL,\n color TEXT NOT NULL DEFAULT '#4f46e5',\n sort_order INTEGER NOT NULL DEFAULT 0,\n archived INTEGER NOT NULL DEFAULT 0,\n created_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_subjects_user ON subjects(user_id, archived, sort_order)`,\n\n `CREATE TABLE IF NOT EXISTS plans (\n id TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n date TEXT NOT NULL, -- YYYY-MM-DD\n subject_id TEXT,\n title TEXT NOT NULL,\n goal_minutes INTEGER NOT NULL DEFAULT 0,\n actual_minutes INTEGER NOT NULL DEFAULT 0,\n status TEXT NOT NULL DEFAULT 'todo', -- todo | doing | done | skipped\n priority INTEGER NOT NULL DEFAULT 2, -- 1 높음 2 보통 3 낮음\n memo TEXT,\n sort_order INTEGER NOT NULL DEFAULT 0,\n created_by TEXT NOT NULL, -- 학생 본인 또는 관리쌤 uid\n completed_at TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_plans_user_date ON plans(user_id, date)`,\n `CREATE INDEX IF NOT EXISTS idx_plans_subject ON plans(subject_id)`,\n\n `CREATE TABLE IF NOT EXISTS study_sessions (\n id TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n plan_id TEXT,\n date TEXT NOT NULL,\n started_at TEXT NOT NULL,\n ended_at TEXT,\n minutes INTEGER NOT NULL DEFAULT 0,\n source TEXT NOT NULL DEFAULT 'timer', -- timer | manual\n created_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_sessions_user_date ON study_sessions(user_id, date)`,\n `CREATE INDEX IF NOT EXISTS idx_sessions_open ON study_sessions(user_id, ended_at)`,\n\n `CREATE TABLE IF NOT EXISTS diaries (\n id TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n date TEXT NOT NULL,\n mood INTEGER, -- 1..5\n focus_score INTEGER, -- 1..5\n content TEXT NOT NULL DEFAULT '',\n keep_note TEXT, -- 잘한 점\n problem_note TEXT, -- 아쉬운 점\n try_note TEXT, -- 내일 할 것\n coach_comment TEXT,\n coach_id TEXT,\n commented_at TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`,\n `CREATE UNIQUE INDEX IF NOT EXISTS uq_diary_user_date ON diaries(user_id, date)`,\n\n `CREATE TABLE IF NOT EXISTS schedule_events (\n id TEXT PRIMARY KEY,\n user_id TEXT, -- NULL 이면 전체 공지 일정\n title TEXT NOT NULL,\n type TEXT NOT NULL DEFAULT 'etc', -- exam | class | consult | holiday | etc\n start_at TEXT NOT NULL, -- ISO UTC\n end_at TEXT,\n all_day INTEGER NOT NULL DEFAULT 0,\n location TEXT,\n memo TEXT,\n created_by TEXT NOT NULL,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_events_user_start ON schedule_events(user_id, start_at)`,\n\n `CREATE TABLE IF NOT EXISTS chat_threads (\n id TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n title TEXT NOT NULL DEFAULT '새 대화',\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_threads_user ON chat_threads(user_id, updated_at DESC)`,\n\n `CREATE TABLE IF NOT EXISTS chat_messages (\n id TEXT PRIMARY KEY,\n thread_id TEXT NOT NULL,\n user_id TEXT NOT NULL,\n role TEXT NOT NULL, -- user | assistant\n content TEXT NOT NULL,\n tokens_in INTEGER NOT NULL DEFAULT 0,\n tokens_out INTEGER NOT NULL DEFAULT 0,\n created_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_messages_thread ON chat_messages(thread_id, created_at)`,\n `CREATE INDEX IF NOT EXISTS idx_messages_user_day ON chat_messages(user_id, created_at)`,\n\n `CREATE TABLE IF NOT EXISTS consult_slots (\n id TEXT PRIMARY KEY,\n coach_id TEXT NOT NULL,\n start_at TEXT NOT NULL,\n end_at TEXT NOT NULL,\n capacity INTEGER NOT NULL DEFAULT 1,\n status TEXT NOT NULL DEFAULT 'open', -- open | closed\n memo TEXT,\n created_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_slots_start ON consult_slots(start_at, status)`,\n\n `CREATE TABLE IF NOT EXISTS consults (\n id TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n slot_id TEXT,\n category TEXT NOT NULL DEFAULT 'study', -- study | plan | mental | career | etc\n topic TEXT NOT NULL,\n content TEXT NOT NULL DEFAULT '',\n mode TEXT NOT NULL DEFAULT 'offline', -- offline | online | phone\n preferred_at TEXT,\n status TEXT NOT NULL DEFAULT 'requested', -- requested | scheduled | done | canceled\n coach_id TEXT,\n scheduled_at TEXT,\n coach_note TEXT,\n student_feedback TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_consults_user ON consults(user_id, created_at DESC)`,\n `CREATE INDEX IF NOT EXISTS idx_consults_status ON consults(status, created_at DESC)`,\n\n `CREATE TABLE IF NOT EXISTS notifications (\n id TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n type TEXT NOT NULL,\n title TEXT NOT NULL,\n body TEXT,\n link TEXT,\n read_at TEXT,\n created_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_notif_user ON notifications(user_id, read_at, created_at DESC)`,\n\n `CREATE TABLE IF NOT EXISTS audit_logs (\n id TEXT PRIMARY KEY,\n actor_id TEXT,\n action TEXT NOT NULL,\n target TEXT,\n meta TEXT,\n created_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_audit_created ON audit_logs(created_at DESC)`,\n ],\n },\n];\n\nexport const DEFAULT_SUBJECTS: Array<{ name: string; color: string }> = [\n { name: \"국어\", color: \"#ef4444\" },\n { name: \"수학\", color: \"#3b82f6\" },\n { name: \"영어\", color: \"#10b981\" },\n { name: \"탐구\", color: \"#f59e0b\" },\n { name: \"기타\", color: \"#8b5cf6\" },\n];\n",[],[168,369],"42980979-1a80-46a5-b031-ae98396bf820","migrate.ts","08b84e36-ab26-11f1-84f5-1607ee4eb77e",13,["D",1788831526829],"/**\n * 마이그레이션 실행기.\n * 적용된 마이그레이션 id 를 _migrations 에 기록해 멱등하게 만든다.\n *\n * 로컬: deno task migrate\n * Val Town: /api/admin/migrate (관리자) 또는 이 파일을 한 번 실행하는 val\n */\nimport \"../lib/env.ts\";\nimport { exec, execScript, query } from \"../lib/sqlite.ts\";\nimport { nowIso } from \"../lib/time.ts\";\nimport { MIGRATIONS } from \"./schema.ts\";\n\nexport async function migrate(): Promise<{ applied: string[]; skipped: string[] }> {\n await exec(\n `CREATE TABLE IF NOT EXISTS _migrations (\n id TEXT PRIMARY KEY,\n applied_at TEXT NOT NULL\n )`,\n );\n\n const done = new Set(\n (await query<{ id: string }>(\"SELECT id FROM _migrations\")).map((r) => r.id),\n );\n\n const applied: string[] = [];\n const skipped: string[] = [];\n\n for (const m of MIGRATIONS) {\n if (done.has(m.id)) {\n skipped.push(m.id);\n continue;\n }\n await execScript(m.statements);\n await exec(\"INSERT INTO _migrations (id, applied_at) VALUES (?, ?)\", [m.id, nowIso()]);\n applied.push(m.id);\n }\n\n return { applied, skipped };\n}\n\nif (import.meta.main) {\n const result = await migrate();\n console.log(\"적용:\", result.applied.length ? result.applied.join(\", \") : \"(없음)\");\n console.log(\"건너뜀:\", result.skipped.length ? result.skipped.join(\", \") : \"(없음)\");\n}\n",[],[168,377],["D",1788831525229],[193,194,195],[168],"1cf511e8-e749-44bd-bc68-e750233a04ea","daily.ts","08df94be-ab26-11f1-ba6d-1607ee4eb77e",16,["D",1788831527099],"interval","/**\n * 매일 도는 크론 (Val Town Cron Val 로 등록. 권장 22:00 KST = 13:00 UTC).\n *\n * 하는 일\n * 1. 켜둔 채 잊은 타이머 정리 (12시간 상한으로 마감)\n * 2. 오늘 공부일기를 안 쓴 학생에게 알림\n * 3. 내일 상담이 잡힌 학생·관리쌤에게 알림\n *\n * Val Town 에서는 이 파일의 default export 가 스케줄러에 의해 호출된다.\n */\nimport \"../lib/env.ts\";\nimport { exec, query, uuid } from \"../lib/sqlite.ts\";\nimport { addDays, nowIso, toLocalDate } from \"../lib/time.ts\";\n\nasync function notify(userId: string, type: string, title: string, body: string, link: string) {\n await exec(\n \"INSERT INTO notifications (id, user_id, type, title, body, link, created_at) VALUES (?, ?, ?, ?, ?, ?, ?)\",\n [uuid(), userId, type, title, body, link, nowIso()],\n );\n}\n\nexport default async function daily(): Promise<\n { closedTimers: number; diaryReminders: number; consultReminders: number }\n> {\n const today = toLocalDate();\n const now = nowIso();\n\n // 1) 방치된 타이머 마감\n const openSessions = await query<{ id: string; started_at: string; plan_id: string | null }>(\n \"SELECT id, started_at, plan_id FROM study_sessions WHERE ended_at IS NULL\",\n );\n for (const s of openSessions) {\n const raw = Math.round((Date.now() - new Date(s.started_at).getTime()) / 60000);\n const minutes = Math.max(0, Math.min(raw, 720));\n await exec(\"UPDATE study_sessions SET ended_at = ?, minutes = ? WHERE id = ?\", [\n now,\n minutes,\n s.id,\n ]);\n if (s.plan_id) {\n await exec(\n `UPDATE plans SET actual_minutes =\n (SELECT COALESCE(SUM(minutes),0) FROM study_sessions WHERE plan_id = ? AND ended_at IS NOT NULL)\n WHERE id = ?`,\n [s.plan_id, s.plan_id],\n );\n }\n }\n\n // 2) 오늘 공부한 기록은 있는데 일기를 안 쓴 학생\n const missingDiary = await query<{ id: string; name: string }>(\n `SELECT u.id, u.name FROM users u\n WHERE u.role = 'student' AND u.status = 'active'\n AND EXISTS (SELECT 1 FROM study_sessions s WHERE s.user_id = u.id AND s.date = ?)\n AND NOT EXISTS (SELECT 1 FROM diaries d WHERE d.user_id = u.id AND d.date = ? AND d.content <> '')`,\n [today, today],\n );\n for (const u of missingDiary) {\n await notify(\n u.id,\n \"diary_reminder\",\n \"오늘 공부일기를 아직 안 썼어요\",\n \"5분이면 충분해요. 오늘 하루를 정리해 볼까요?\",\n `/diary.html?date=${today}`,\n );\n }\n\n // 3) 내일 상담 안내\n const tomorrow = addDays(today, 1);\n const consults = await query<\n { id: string; user_id: string; coach_id: string | null; topic: string; scheduled_at: string }\n >(\n `SELECT id, user_id, coach_id, topic, scheduled_at FROM consults\n WHERE status = 'scheduled' AND scheduled_at >= ? AND scheduled_at < ?`,\n [`${tomorrow}T00:00:00.000Z`, `${addDays(tomorrow, 1)}T00:00:00.000Z`],\n );\n for (const c of consults) {\n await notify(c.user_id, \"consult_reminder\", \"내일 상담이 있어요\", c.topic, \"/consult.html\");\n if (c.coach_id) {\n await notify(\n c.coach_id,\n \"consult_reminder\",\n \"내일 상담 일정\",\n c.topic,\n \"/admin.html#consults\",\n );\n }\n }\n\n return {\n closedTimers: openSessions.length,\n diaryReminders: missingDiary.length,\n consultReminders: consults.length,\n };\n}\n\nif (import.meta.main) console.log(await daily());\n",[],[174,388],["D",1788831525524],[191],[174],["D",1788831523479],["D",1789442454549],{"_100":99,"_107":103},{"_100":99,"_101":99,"_102":103,"_18":56,"_104":105,"_106":25},{"_13":14,"_32":90,"_44":43,"_91":45,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":46,"_98":99},"ctx",{"_83":-5,"_127":437,"_438":439,"_440":441,"_442":25,"_443":25,"_444":25,"_445":60,"_446":-5,"_447":-7,"_448":-7,"_449":64,"_450":25,"_451":25,"_452":-5,"_453":25,"_454":25,"_455":25,"_456":-5},"ENV",{"_408":409,"_410":411,"_412":90,"_413":414,"_415":416,"_417":418,"_419":420,"_421":422,"_423":424,"_425":426,"_427":428,"_429":430,"_431":432,"_433":434,"_435":436},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v33