ssampin-ai-bridge 0.1.0

package/dist/index.js

@@ -0,0 +1,2978 @@
+#!/usr/bin/env node
+
+// ../packages/mcp/dist/index.js
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+
+// ../packages/mcp/dist/server.js
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z } from "zod";
+
+// ../packages/core/dist/paths.js
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+var VALID_FILENAME_RE = /^[A-Za-z0-9_-]+$/;
+var APP_DIR_NAME = "\uC324\uD540";
+var PathSecurityError = class extends Error {
+  name = "PathSecurityError";
+};
+function resolveDataDir(env = process.env) {
+  const override = env["SSAMPIN_DATA_DIR"];
+  if (override && override.trim().length > 0) {
+    return path.resolve(override);
+  }
+  const appData = env["APPDATA"];
+  if (appData && appData.trim().length > 0) {
+    return path.join(appData, APP_DIR_NAME, "data");
+  }
+  const home = os.homedir();
+  if (process.platform === "darwin") {
+    return path.join(home, "Library", "Application Support", APP_DIR_NAME, "data");
+  }
+  return path.join(home, ".config", APP_DIR_NAME, "data");
+}
+function isValidFilename(name) {
+  return VALID_FILENAME_RE.test(name);
+}
+function realpathOrResolve(p) {
+  const abs = path.resolve(p);
+  try {
+    return fs.realpathSync.native(abs);
+  } catch {
+    return abs;
+  }
+}
+function isInside(parent, child) {
+  const rel = path.relative(parent, child);
+  return rel === "" || !rel.startsWith("..") && !path.isAbsolute(rel);
+}
+function resolveDataFile(dataDir, filename) {
+  if (!isValidFilename(filename)) {
+    throw new PathSecurityError(`\uC798\uBABB\uB41C \uD30C\uC77C\uBA85: ${JSON.stringify(filename)}`);
+  }
+  const baseReal = realpathOrResolve(dataDir);
+  const parentReal = realpathOrResolve(baseReal);
+  const finalPath = path.join(parentReal, `${filename}.json`);
+  if (!isInside(baseReal, finalPath)) {
+    throw new PathSecurityError(`\uB370\uC774\uD130 \uB514\uB809\uD1A0\uB9AC \uBC16 \uC811\uADFC \uCC28\uB2E8: ${finalPath}`);
+  }
+  return finalPath;
+}
+function backupPathFor(dataFilePath) {
+  return dataFilePath.replace(/\.json$/, ".backup.json");
+}
+function realDir(dataDir) {
+  return realpathOrResolve(dataDir);
+}
+function assertNoSymlinkEscape(baseRealDir, filePath) {
+  let isLink = false;
+  try {
+    isLink = fs.lstatSync(filePath).isSymbolicLink();
+  } catch {
+    return;
+  }
+  if (!isLink)
+    return;
+  let real;
+  try {
+    real = fs.realpathSync.native(filePath);
+  } catch {
+    throw new PathSecurityError(`symlink \uD574\uC11D \uC2E4\uD328: ${filePath}`);
+  }
+  if (!isInside(baseRealDir, real)) {
+    throw new PathSecurityError(`symlink \uD0C8\uCD9C \uCC28\uB2E8: ${filePath} -> ${real}`);
+  }
+}
+function bridgeStateDir(dataDir = resolveDataDir()) {
+  return path.join(dataDir, ".ssampin-aibridge");
+}
+
+// ../packages/core/dist/io.js
+import fs2 from "node:fs";
+
+// ../packages/core/dist/entities/student.js
+function asString(v) {
+  return typeof v === "string" ? v : void 0;
+}
+function asNumber(v) {
+  return typeof v === "number" && Number.isFinite(v) ? v : void 0;
+}
+function asBool(v) {
+  return typeof v === "boolean" ? v : void 0;
+}
+function setIf(target, key, value) {
+  if (value !== void 0)
+    target[key] = value;
+}
+function normalizeStudent(o) {
+  const s = {
+    id: String(o["id"]),
+    name: String(o["name"])
+  };
+  setIf(s, "studentNumber", asNumber(o["studentNumber"]));
+  setIf(s, "phone", asString(o["phone"]));
+  setIf(s, "parentPhone", asString(o["parentPhone"]));
+  setIf(s, "parentPhoneLabel", asString(o["parentPhoneLabel"]));
+  setIf(s, "parentPhone2", asString(o["parentPhone2"]));
+  setIf(s, "parentPhone2Label", asString(o["parentPhone2Label"]));
+  setIf(s, "isVacant", asBool(o["isVacant"]));
+  setIf(s, "birthDate", asString(o["birthDate"]));
+  setIf(s, "status", asString(o["status"]));
+  setIf(s, "statusNote", asString(o["statusNote"]));
+  setIf(s, "statusChangedAt", asString(o["statusChangedAt"]));
+  return s;
+}
+function parseStudents(raw) {
+  if (!Array.isArray(raw))
+    return [];
+  const out = [];
+  for (const item of raw) {
+    if (!item || typeof item !== "object")
+      continue;
+    const o = item;
+    if (typeof o["id"] !== "string" || typeof o["name"] !== "string")
+      continue;
+    out.push(normalizeStudent(o));
+  }
+  return out;
+}
+
+// ../packages/core/dist/entities/seating.js
+function toSeatCell(v) {
+  return typeof v === "string" && v.length > 0 ? v : null;
+}
+function parseSeating(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    return null;
+  const o = raw;
+  const rows = typeof o["rows"] === "number" ? o["rows"] : void 0;
+  const cols = typeof o["cols"] === "number" ? o["cols"] : void 0;
+  const rawSeats = o["seats"];
+  if (rows === void 0 || cols === void 0 || !Array.isArray(rawSeats))
+    return null;
+  const seats = rawSeats.map((row) => Array.isArray(row) ? row.map(toSeatCell) : []);
+  return { rows, cols, seats };
+}
+
+// ../packages/core/dist/entities/observation.js
+function asString2(v) {
+  return typeof v === "string" ? v : void 0;
+}
+function asNumber2(v) {
+  return typeof v === "number" && Number.isFinite(v) ? v : void 0;
+}
+function setIf2(target, key, value) {
+  if (value !== void 0)
+    target[key] = value;
+}
+function normalizeRecord(o) {
+  if (typeof o["id"] !== "string" || typeof o["studentId"] !== "string")
+    return null;
+  const visibility = o["visibility"] === "shared" ? "shared" : "private";
+  const tags = Array.isArray(o["tags"]) ? o["tags"].filter((t) => typeof t === "string") : [];
+  const rec = {
+    id: o["id"],
+    studentId: o["studentId"],
+    date: asString2(o["date"]) ?? "",
+    content: asString2(o["content"]) ?? "",
+    tags,
+    visibility
+  };
+  setIf2(rec, "classId", asString2(o["classId"]));
+  setIf2(rec, "authorId", asString2(o["authorId"]));
+  setIf2(rec, "createdAt", asNumber2(o["createdAt"]));
+  setIf2(rec, "updatedAt", asNumber2(o["updatedAt"]));
+  return rec;
+}
+function parseObservations(raw) {
+  const rawRecords = Array.isArray(raw) ? raw : raw && typeof raw === "object" && Array.isArray(raw["records"]) ? raw["records"] : [];
+  const records = [];
+  for (const item of rawRecords) {
+    if (!item || typeof item !== "object")
+      continue;
+    const rec = normalizeRecord(item);
+    if (rec)
+      records.push(rec);
+  }
+  const customTags = raw && typeof raw === "object" && Array.isArray(raw["customTags"]) ? raw["customTags"].filter((t) => typeof t === "string") : void 0;
+  return customTags ? { records, customTags } : { records };
+}
+
+// ../packages/core/dist/entities/teachingClass.js
+function studentKey(s) {
+  if (s.grade != null && s.classNum != null) {
+    return `${s.grade}-${s.classNum}-${s.number}`;
+  }
+  return String(s.number);
+}
+function asString3(v) {
+  return typeof v === "string" ? v : void 0;
+}
+function asNumber3(v) {
+  return typeof v === "number" && Number.isFinite(v) ? v : void 0;
+}
+function asBool2(v) {
+  return typeof v === "boolean" ? v : void 0;
+}
+function setIf3(target, key, value) {
+  if (value !== void 0)
+    target[key] = value;
+}
+function normalizeStudent2(o) {
+  const number = asNumber3(o["number"]);
+  if (number === void 0)
+    return null;
+  if (typeof o["name"] !== "string")
+    return null;
+  const s = { number, name: o["name"] };
+  setIf3(s, "memo", asString3(o["memo"]));
+  setIf3(s, "grade", asNumber3(o["grade"]));
+  setIf3(s, "classNum", asNumber3(o["classNum"]));
+  setIf3(s, "isVacant", asBool2(o["isVacant"]));
+  setIf3(s, "status", asString3(o["status"]));
+  setIf3(s, "statusNote", asString3(o["statusNote"]));
+  setIf3(s, "statusChangedAt", asString3(o["statusChangedAt"]));
+  return s;
+}
+function normalizeClass(o) {
+  if (typeof o["id"] !== "string" || typeof o["name"] !== "string")
+    return null;
+  const rawStudents = Array.isArray(o["students"]) ? o["students"] : [];
+  const students = [];
+  const seenKeys = /* @__PURE__ */ new Set();
+  for (const item of rawStudents) {
+    if (!item || typeof item !== "object")
+      continue;
+    const st = normalizeStudent2(item);
+    if (!st)
+      continue;
+    const key = studentKey(st);
+    if (seenKeys.has(key))
+      continue;
+    seenKeys.add(key);
+    students.push(st);
+  }
+  const c = {
+    id: o["id"],
+    name: o["name"],
+    subject: asString3(o["subject"]) ?? "",
+    students
+  };
+  setIf3(c, "groupId", asString3(o["groupId"]));
+  setIf3(c, "order", asNumber3(o["order"]));
+  const sync = o["studentSyncMode"];
+  if (sync === "shared" || sync === "independent")
+    c["studentSyncMode"] = sync;
+  setIf3(c, "createdAt", asString3(o["createdAt"]));
+  setIf3(c, "updatedAt", asString3(o["updatedAt"]));
+  return c;
+}
+function parseTeachingClasses(raw) {
+  const rawClasses = Array.isArray(raw) ? raw : raw && typeof raw === "object" && Array.isArray(raw["classes"]) ? raw["classes"] : [];
+  const classes = [];
+  for (const item of rawClasses) {
+    if (!item || typeof item !== "object")
+      continue;
+    const c = normalizeClass(item);
+    if (c)
+      classes.push(c);
+  }
+  return { classes };
+}
+
+// ../packages/core/dist/entities/rubric.js
+function asString4(v) {
+  return typeof v === "string" ? v : void 0;
+}
+function asNumber4(v) {
+  return typeof v === "number" && Number.isFinite(v) ? v : void 0;
+}
+function setIf4(target, key, value) {
+  if (value !== void 0)
+    target[key] = value;
+}
+function asStringRecord(v) {
+  if (!v || typeof v !== "object")
+    return {};
+  const out = {};
+  for (const [k, val] of Object.entries(v)) {
+    if (typeof val === "string")
+      out[k] = val;
+  }
+  return out;
+}
+function normalizeLevel(o) {
+  if (typeof o["id"] !== "string" || typeof o["name"] !== "string")
+    return null;
+  const lv = { id: o["id"], name: o["name"] };
+  setIf4(lv, "description", asString4(o["description"]));
+  return lv;
+}
+function normalizeCriterion(o) {
+  if (typeof o["id"] !== "string" || typeof o["name"] !== "string")
+    return null;
+  const levels = [];
+  if (Array.isArray(o["levels"])) {
+    for (const item of o["levels"]) {
+      if (item && typeof item === "object") {
+        const lv = normalizeLevel(item);
+        if (lv)
+          levels.push(lv);
+      }
+    }
+  }
+  return { id: o["id"], name: o["name"], order: asNumber4(o["order"]) ?? 0, levels };
+}
+function normalizeRubric(o) {
+  if (typeof o["id"] !== "string" || typeof o["classId"] !== "string" || typeof o["title"] !== "string") {
+    return null;
+  }
+  const criteria = [];
+  if (Array.isArray(o["criteria"])) {
+    for (const item of o["criteria"]) {
+      if (item && typeof item === "object") {
+        const c = normalizeCriterion(item);
+        if (c)
+          criteria.push(c);
+      }
+    }
+  }
+  const r = { id: o["id"], classId: o["classId"], title: o["title"], criteria };
+  setIf4(r, "description", asString4(o["description"]));
+  return r;
+}
+function normalizeGrading(o) {
+  if (typeof o["id"] !== "string" || typeof o["rubricId"] !== "string" || typeof o["classId"] !== "string" || typeof o["studentId"] !== "string") {
+    return null;
+  }
+  const status = o["status"] === "graded" || o["status"] === "absent" ? o["status"] : "partial";
+  const g = {
+    id: o["id"],
+    rubricId: o["rubricId"],
+    classId: o["classId"],
+    studentId: o["studentId"],
+    status,
+    marks: asStringRecord(o["marks"]),
+    criterionNotes: asStringRecord(o["criterionNotes"]),
+    gradedAt: asString4(o["gradedAt"]) ?? ""
+  };
+  setIf4(g, "overallFeedback", asString4(o["overallFeedback"]));
+  return g;
+}
+function parseRubrics(raw) {
+  const o = raw && typeof raw === "object" && !Array.isArray(raw) ? raw : {};
+  const rubrics = [];
+  if (Array.isArray(o["rubrics"])) {
+    for (const item of o["rubrics"]) {
+      if (item && typeof item === "object") {
+        const r = normalizeRubric(item);
+        if (r)
+          rubrics.push(r);
+      }
+    }
+  }
+  const gradings = [];
+  if (Array.isArray(o["gradings"])) {
+    for (const item of o["gradings"]) {
+      if (item && typeof item === "object") {
+        const g = normalizeGrading(item);
+        if (g)
+          gradings.push(g);
+      }
+    }
+  }
+  return { rubrics, gradings };
+}
+
+// ../packages/core/dist/entities/gradeAnalysis.js
+function gradeStudentKey(ref) {
+  const name = ref.name.replace(/\s/g, "");
+  if (ref.grade != null && ref.classNum != null) {
+    return [ref.grade, ref.classNum, ref.number, name].join("-");
+  }
+  return [ref.number, name].join("-");
+}
+function asString5(v) {
+  return typeof v === "string" ? v : void 0;
+}
+function setIf5(target, key, value) {
+  if (value !== void 0)
+    target[key] = value;
+}
+function asAbsence(v) {
+  return v === "absent" || v === "recognized" || v === "exempt" || v === "none" ? v : void 0;
+}
+function normalizePlan(o) {
+  if (typeof o["id"] !== "string" || typeof o["teachingClassId"] !== "string" || typeof o["title"] !== "string") {
+    return null;
+  }
+  const kind = o["kind"] === "written-exam" ? "written-exam" : "performance";
+  const p = {
+    id: o["id"],
+    teachingClassId: o["teachingClassId"],
+    semester: asString5(o["semester"]) ?? "",
+    subject: asString5(o["subject"]) ?? "",
+    title: o["title"],
+    kind,
+    areaName: asString5(o["areaName"]) ?? ""
+  };
+  setIf5(p, "method", asString5(o["method"]));
+  return p;
+}
+function normalizeWritten(o) {
+  if (typeof o["id"] !== "string" || typeof o["assessmentId"] !== "string" || typeof o["studentKey"] !== "string") {
+    return null;
+  }
+  const w = {
+    id: o["id"],
+    assessmentId: o["assessmentId"],
+    studentKey: o["studentKey"],
+    scorePresent: typeof o["score"] === "number" && Number.isFinite(o["score"]),
+    confirmed: o["confirmed"] === true
+  };
+  setIf5(w, "absenceCode", asAbsence(o["absenceCode"]));
+  setIf5(w, "memo", asString5(o["memo"]));
+  return w;
+}
+function normalizePerformance(o) {
+  if (typeof o["id"] !== "string" || typeof o["assessmentId"] !== "string" || typeof o["studentKey"] !== "string") {
+    return null;
+  }
+  const p = {
+    id: o["id"],
+    assessmentId: o["assessmentId"],
+    studentKey: o["studentKey"],
+    scorePresent: typeof o["score"] === "number" && Number.isFinite(o["score"]),
+    confirmed: o["confirmed"] === true
+  };
+  setIf5(p, "rubricGradingId", asString5(o["rubricGradingId"]));
+  setIf5(p, "evidenceNote", asString5(o["evidenceNote"]));
+  setIf5(p, "memo", asString5(o["memo"]));
+  return p;
+}
+function normalizeSemester(o) {
+  if (typeof o["id"] !== "string" || typeof o["teachingClassId"] !== "string" || typeof o["studentKey"] !== "string") {
+    return null;
+  }
+  const s = {
+    id: o["id"],
+    teachingClassId: o["teachingClassId"],
+    semester: asString5(o["semester"]) ?? "",
+    studentKey: o["studentKey"],
+    confirmed: o["confirmed"] === true
+  };
+  setIf5(s, "achievementLevel", asString5(o["achievementLevel"]));
+  return s;
+}
+function collect(raw, key, fn) {
+  const o = raw && typeof raw === "object" && !Array.isArray(raw) ? raw : {};
+  const out = [];
+  if (Array.isArray(o[key])) {
+    for (const item of o[key]) {
+      if (item && typeof item === "object") {
+        const v = fn(item);
+        if (v)
+          out.push(v);
+      }
+    }
+  }
+  return out;
+}
+function parseGradeAnalysis(raw) {
+  return {
+    plans: collect(raw, "plans", normalizePlan),
+    writtenResults: collect(raw, "writtenResults", normalizeWritten),
+    performanceResults: collect(raw, "performanceResults", normalizePerformance),
+    semesterResults: collect(raw, "semesterResults", normalizeSemester)
+  };
+}
+
+// ../packages/core/dist/entities/meal.js
+function asString6(v) {
+  return typeof v === "string" ? v : void 0;
+}
+function parseDishes(raw) {
+  if (!Array.isArray(raw))
+    return [];
+  const dishes = [];
+  for (const d of raw) {
+    if (!d || typeof d !== "object")
+      continue;
+    const o = d;
+    const name = asString6(o["name"]);
+    if (name === void 0 || name.length === 0)
+      continue;
+    const allergensRaw = o["allergens"];
+    const allergens = Array.isArray(allergensRaw) ? allergensRaw.filter((n) => typeof n === "number" && Number.isFinite(n)) : [];
+    dishes.push({ name, allergens });
+  }
+  return dishes;
+}
+function normalizeMeal(date, raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    return null;
+  const o = raw;
+  const ownDate = asString6(o["date"]);
+  const mealType = asString6(o["mealType"]) ?? "";
+  const dishes = parseDishes(o["dishes"]);
+  const calorie = asString6(o["calorie"]);
+  const entry = {
+    date: ownDate && ownDate.length > 0 ? ownDate : date,
+    mealType,
+    dishes
+  };
+  if (calorie !== void 0)
+    entry["calorie"] = calorie;
+  return entry;
+}
+function parseManualMeals(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    return [];
+  const byDate = raw;
+  const out = [];
+  for (const date of Object.keys(byDate)) {
+    const arr = byDate[date];
+    if (!Array.isArray(arr))
+      continue;
+    for (const item of arr) {
+      const meal = normalizeMeal(date, item);
+      if (meal)
+        out.push(meal);
+    }
+  }
+  out.sort((a, b) => a.date < b.date ? -1 : a.date > b.date ? 1 : 0);
+  return out;
+}
+
+// ../packages/core/dist/entities/schoolEvent.js
+function asString7(v) {
+  return typeof v === "string" ? v : void 0;
+}
+function asBool3(v) {
+  return typeof v === "boolean" ? v : void 0;
+}
+function setIf6(target, key, value) {
+  if (value !== void 0)
+    target[key] = value;
+}
+function normalizeEvent(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    return null;
+  const o = raw;
+  if (o["isHidden"] === true)
+    return null;
+  const date = asString7(o["date"]);
+  const title = asString7(o["title"]);
+  if (date === void 0 || date.length === 0)
+    return null;
+  const rec = { date, title: title ?? "" };
+  setIf6(rec, "endDate", asString7(o["endDate"]));
+  setIf6(rec, "category", asString7(o["category"]));
+  setIf6(rec, "time", asString7(o["time"]));
+  setIf6(rec, "startTime", asString7(o["startTime"]));
+  setIf6(rec, "endTime", asString7(o["endTime"]));
+  setIf6(rec, "period", asString7(o["period"]));
+  setIf6(rec, "periodEnd", asString7(o["periodEnd"]));
+  setIf6(rec, "recurrence", asString7(o["recurrence"]));
+  setIf6(rec, "isDDay", asBool3(o["isDDay"]));
+  setIf6(rec, "description", asString7(o["description"]));
+  setIf6(rec, "location", asString7(o["location"]));
+  return rec;
+}
+function parseSchoolEvents(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    return [];
+  const list = raw["events"];
+  if (!Array.isArray(list))
+    return [];
+  const out = [];
+  for (const item of list) {
+    const ev = normalizeEvent(item);
+    if (ev)
+      out.push(ev);
+  }
+  out.sort((a, b) => a.date < b.date ? -1 : a.date > b.date ? 1 : 0);
+  return out;
+}
+
+// ../packages/core/dist/entities/dday.js
+function asString8(v) {
+  return typeof v === "string" ? v : void 0;
+}
+function asBool4(v) {
+  return typeof v === "boolean" ? v : void 0;
+}
+function setIf7(target, key, value) {
+  if (value !== void 0)
+    target[key] = value;
+}
+function normalizeDday(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    return null;
+  const o = raw;
+  const date = asString8(o["targetDate"]);
+  if (date === void 0 || date.length === 0)
+    return null;
+  const rec = { date, title: asString8(o["title"]) ?? "" };
+  setIf7(rec, "emoji", asString8(o["emoji"]));
+  setIf7(rec, "color", asString8(o["color"]));
+  setIf7(rec, "pinned", asBool4(o["pinned"]));
+  return rec;
+}
+function parseDdays(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    return [];
+  const list = raw["items"];
+  if (!Array.isArray(list))
+    return [];
+  const out = [];
+  for (const item of list) {
+    const d = normalizeDday(item);
+    if (d)
+      out.push(d);
+  }
+  out.sort((a, b) => a.date < b.date ? -1 : a.date > b.date ? 1 : 0);
+  return out;
+}
+
+// ../packages/core/dist/entities/todo.js
+function asString9(v) {
+  return typeof v === "string" ? v : void 0;
+}
+function asBool5(v) {
+  return v === true;
+}
+function setIf8(target, key, value) {
+  if (value !== void 0)
+    target[key] = value;
+}
+function recurrenceType(v) {
+  if (!v || typeof v !== "object" || Array.isArray(v))
+    return void 0;
+  return asString9(v["type"]);
+}
+function normalizeTodo(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    return null;
+  const o = raw;
+  const text = asString9(o["text"]);
+  if (text === void 0)
+    return null;
+  const rec = { text, completed: asBool5(o["completed"]) };
+  setIf8(rec, "dueDate", asString9(o["dueDate"]));
+  setIf8(rec, "startDate", asString9(o["startDate"]));
+  setIf8(rec, "time", asString9(o["time"]));
+  setIf8(rec, "priority", asString9(o["priority"]));
+  setIf8(rec, "category", asString9(o["category"]));
+  setIf8(rec, "status", asString9(o["status"]));
+  setIf8(rec, "recurrence", recurrenceType(o["recurrence"]));
+  setIf8(rec, "archivedAt", asString9(o["archivedAt"]));
+  setIf8(rec, "notes", asString9(o["notes"]));
+  const subTasks = o["subTasks"];
+  if (Array.isArray(subTasks)) {
+    rec["subTaskCount"] = subTasks.length;
+    rec["subTaskDone"] = subTasks.filter((s) => s && typeof s === "object" && s["completed"] === true).length;
+  }
+  return rec;
+}
+function parseTodos(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    return [];
+  const list = raw["todos"];
+  if (!Array.isArray(list))
+    return [];
+  const out = [];
+  for (const item of list) {
+    const t = normalizeTodo(item);
+    if (t)
+      out.push(t);
+  }
+  out.sort((a, b) => {
+    const ad = a.dueDate ?? "\uFFFF";
+    const bd = b.dueDate ?? "\uFFFF";
+    return ad < bd ? -1 : ad > bd ? 1 : 0;
+  });
+  return out;
+}
+function effectiveTodoStatus(t) {
+  if (t.status === "todo" || t.status === "inProgress" || t.status === "done")
+    return t.status;
+  return t.completed ? "done" : "todo";
+}
+
+// ../packages/core/dist/entities/schedule.js
+function asString10(v) {
+  return typeof v === "string" ? v : void 0;
+}
+function asNumber5(v) {
+  return typeof v === "number" && Number.isFinite(v) ? v : void 0;
+}
+function setIf9(target, key, value) {
+  if (value !== void 0)
+    target[key] = value;
+}
+function flattenDayMap(raw, build) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    return [];
+  const byDay = raw;
+  const out = [];
+  for (const day of Object.keys(byDay)) {
+    const arr = byDay[day];
+    if (!Array.isArray(arr))
+      continue;
+    arr.forEach((slot, i) => {
+      if (!slot || typeof slot !== "object" || Array.isArray(slot))
+        return;
+      const rec = build(day, i, slot);
+      if (rec)
+        out.push(rec);
+    });
+  }
+  return out;
+}
+function parseClassSchedule(raw) {
+  return flattenDayMap(raw, (day, i, slot) => {
+    const subject = asString10(slot["subject"]) ?? "";
+    if (subject.length === 0)
+      return null;
+    const rec = { day, period: i + 1, subject };
+    const teacher = asString10(slot["teacher"]);
+    if (teacher !== void 0 && teacher.length > 0)
+      rec["teacher"] = teacher;
+    return rec;
+  });
+}
+function parseTeacherSchedule(raw) {
+  return flattenDayMap(raw, (day, i, slot) => {
+    const subject = asString10(slot["subject"]) ?? "";
+    if (subject.length === 0)
+      return null;
+    const rec = { day, period: i + 1, subject };
+    const classroom = asString10(slot["classroom"]);
+    if (classroom !== void 0 && classroom.length > 0)
+      rec["classroom"] = classroom;
+    return rec;
+  });
+}
+function parseTimetableOverrides(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    return [];
+  const list = raw["overrides"];
+  if (!Array.isArray(list))
+    return [];
+  const out = [];
+  for (const item of list) {
+    if (!item || typeof item !== "object" || Array.isArray(item))
+      continue;
+    const o = item;
+    const date = asString10(o["date"]);
+    const period = asNumber5(o["period"]);
+    if (date === void 0 || period === void 0)
+      continue;
+    const rec = { date, period };
+    setIf9(rec, "subject", asString10(o["subject"]));
+    setIf9(rec, "classroom", asString10(o["classroom"]));
+    setIf9(rec, "kind", asString10(o["kind"]));
+    setIf9(rec, "scope", asString10(o["scope"]));
+    setIf9(rec, "substituteTeacher", asString10(o["substituteTeacher"]));
+    setIf9(rec, "reason", asString10(o["reason"]));
+    out.push(rec);
+  }
+  out.sort((a, b) => a.date < b.date ? -1 : a.date > b.date ? 1 : a.period - b.period);
+  return out;
+}
+
+// ../packages/core/dist/entities/note.js
+function asString11(v) {
+  return typeof v === "string" ? v : void 0;
+}
+function asNumber6(v) {
+  return typeof v === "number" && Number.isFinite(v) ? v : 0;
+}
+function asArray(raw) {
+  return Array.isArray(raw) ? raw : [];
+}
+function parseNotebooks(raw) {
+  const out = [];
+  for (const item of asArray(raw)) {
+    if (!item || typeof item !== "object")
+      continue;
+    const o = item;
+    const id = asString11(o["id"]);
+    if (id === void 0)
+      continue;
+    out.push({ id, title: asString11(o["title"]) ?? "", archived: o["archived"] === true, order: asNumber6(o["order"]) });
+  }
+  return out;
+}
+function parseNoteSections(raw) {
+  const out = [];
+  for (const item of asArray(raw)) {
+    if (!item || typeof item !== "object")
+      continue;
+    const o = item;
+    const id = asString11(o["id"]);
+    const notebookId = asString11(o["notebookId"]);
+    if (id === void 0 || notebookId === void 0)
+      continue;
+    out.push({ id, notebookId, title: asString11(o["title"]) ?? "", order: asNumber6(o["order"]) });
+  }
+  return out;
+}
+function parseNotePages(raw) {
+  const out = [];
+  for (const item of asArray(raw)) {
+    if (!item || typeof item !== "object")
+      continue;
+    const o = item;
+    const id = asString11(o["id"]);
+    const sectionId = asString11(o["sectionId"]);
+    if (id === void 0 || sectionId === void 0)
+      continue;
+    const tags = asArray(o["tags"]).filter((t) => typeof t === "string");
+    const rec = {
+      id,
+      sectionId,
+      title: asString11(o["title"]) ?? "",
+      tags,
+      pinned: o["pinned"] === true
+    };
+    const updatedAt = asString11(o["updatedAt"]);
+    if (updatedAt !== void 0)
+      rec["updatedAt"] = updatedAt;
+    out.push(rec);
+  }
+  return out;
+}
+
+// ../packages/core/dist/entities/memo.js
+function asString12(v) {
+  return typeof v === "string" ? v : void 0;
+}
+function parseMemos(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    return [];
+  const list = raw["memos"];
+  if (!Array.isArray(list))
+    return [];
+  const out = [];
+  for (const item of list) {
+    if (!item || typeof item !== "object" || Array.isArray(item))
+      continue;
+    const o = item;
+    const text = asString12(o["content"]);
+    if (text === void 0)
+      continue;
+    const rec = { text, archived: o["archived"] === true };
+    const color = asString12(o["color"]);
+    if (color !== void 0)
+      rec["color"] = color;
+    out.push(rec);
+  }
+  return out;
+}
+
+// ../packages/core/dist/entities/bookmark.js
+function asString13(v) {
+  return typeof v === "string" ? v : void 0;
+}
+function asNumber7(v) {
+  return typeof v === "number" && Number.isFinite(v) ? v : 0;
+}
+function parseBookmarks(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    return { groups: [], bookmarks: [] };
+  const o = raw;
+  const groups = [];
+  for (const g of Array.isArray(o["groups"]) ? o["groups"] : []) {
+    if (!g || typeof g !== "object")
+      continue;
+    const go = g;
+    const id = asString13(go["id"]);
+    if (id === void 0)
+      continue;
+    groups.push({ id, name: asString13(go["name"]) ?? "", archived: go["archived"] === true, order: asNumber7(go["order"]) });
+  }
+  const bookmarks = [];
+  for (const b of Array.isArray(o["bookmarks"]) ? o["bookmarks"] : []) {
+    if (!b || typeof b !== "object")
+      continue;
+    const bo = b;
+    const url = asString13(bo["url"]);
+    const groupId = asString13(bo["groupId"]);
+    if (url === void 0 || url.length === 0 || groupId === void 0)
+      continue;
+    bookmarks.push({ groupId, name: asString13(bo["name"]) ?? "", url });
+  }
+  return { groups, bookmarks };
+}
+
+// ../packages/core/dist/io.js
+function readRawJson(filename, dataDir = resolveDataDir()) {
+  const filePath = resolveDataFile(dataDir, filename);
+  const baseReal = realDir(dataDir);
+  try {
+    assertNoSymlinkEscape(baseReal, filePath);
+    if (fs2.existsSync(filePath)) {
+      const raw = fs2.readFileSync(filePath, "utf-8");
+      if (raw.trim().length < 2)
+        return null;
+      return JSON.parse(raw);
+    }
+  } catch (err) {
+    if (err instanceof Error && err.name === "PathSecurityError")
+      throw err;
+    const backup = backupPathFor(filePath);
+    try {
+      assertNoSymlinkEscape(baseReal, backup);
+      if (fs2.existsSync(backup)) {
+        const raw = fs2.readFileSync(backup, "utf-8");
+        return JSON.parse(raw);
+      }
+    } catch (backupErr) {
+      if (backupErr instanceof Error && backupErr.name === "PathSecurityError")
+        throw backupErr;
+    }
+  }
+  return null;
+}
+function readStudents(dataDir = resolveDataDir()) {
+  return parseStudents(readRawJson("students", dataDir));
+}
+function readSeating(dataDir = resolveDataDir()) {
+  return parseSeating(readRawJson("seating", dataDir));
+}
+function readTeachingClasses(dataDir = resolveDataDir()) {
+  return parseTeachingClasses(readRawJson("teaching-classes", dataDir));
+}
+function readRubrics(dataDir = resolveDataDir()) {
+  return parseRubrics(readRawJson("rubrics", dataDir));
+}
+function readGradeAnalysis(dataDir = resolveDataDir()) {
+  return parseGradeAnalysis(readRawJson("grade-analysis", dataDir));
+}
+function readManualMeals(dataDir = resolveDataDir()) {
+  return parseManualMeals(readRawJson("manual-meals", dataDir));
+}
+function readEvents(dataDir = resolveDataDir()) {
+  return parseSchoolEvents(readRawJson("events", dataDir));
+}
+function readDdays(dataDir = resolveDataDir()) {
+  return parseDdays(readRawJson("dday", dataDir));
+}
+function readTodos(dataDir = resolveDataDir()) {
+  return parseTodos(readRawJson("todos", dataDir));
+}
+function readClassSchedule(dataDir = resolveDataDir()) {
+  return parseClassSchedule(readRawJson("class-schedule", dataDir));
+}
+function readTeacherSchedule(dataDir = resolveDataDir()) {
+  return parseTeacherSchedule(readRawJson("teacher-schedule", dataDir));
+}
+function readTimetableOverrides(dataDir = resolveDataDir()) {
+  return parseTimetableOverrides(readRawJson("timetable-overrides", dataDir));
+}
+function readNotebooks(dataDir = resolveDataDir()) {
+  return parseNotebooks(readRawJson("note-notebooks", dataDir));
+}
+function readNoteSections(dataDir = resolveDataDir()) {
+  return parseNoteSections(readRawJson("note-sections", dataDir));
+}
+function readNotePages(dataDir = resolveDataDir()) {
+  return parseNotePages(readRawJson("note-pages-meta", dataDir));
+}
+function readMemos(dataDir = resolveDataDir()) {
+  return parseMemos(readRawJson("memos", dataDir));
+}
+function readBookmarks(dataDir = resolveDataDir()) {
+  return parseBookmarks(readRawJson("bookmarks", dataDir));
+}
+
+// ../packages/core/dist/identity.js
+var TEACHING_PREFIX = "tc:";
+var CLASS_PREFIX = "class:";
+var OBSERVATION_PREFIX = "obs:";
+function makeTeachingStudentIdentity(classId, studentKey2) {
+  return `${TEACHING_PREFIX}${classId}:${studentKey2}`;
+}
+function makeClassIdentity(classId) {
+  return `${CLASS_PREFIX}${classId}`;
+}
+function makeObservationIdentity(observationId) {
+  return `${OBSERVATION_PREFIX}${observationId}`;
+}
+function parseIdentity(resolved) {
+  if (resolved.startsWith(TEACHING_PREFIX)) {
+    const rest = resolved.slice(TEACHING_PREFIX.length);
+    const sep = rest.indexOf(":");
+    if (sep > 0 && sep < rest.length - 1) {
+      return { kind: "teaching", classId: rest.slice(0, sep), studentKey: rest.slice(sep + 1) };
+    }
+    return { kind: "homeroom", studentId: resolved };
+  }
+  if (resolved.startsWith(CLASS_PREFIX)) {
+    const classId = resolved.slice(CLASS_PREFIX.length);
+    if (classId.length > 0)
+      return { kind: "class", classId };
+    return { kind: "homeroom", studentId: resolved };
+  }
+  return { kind: "homeroom", studentId: resolved };
+}
+
+// ../packages/core/dist/pii/pseudonymize.js
+import crypto from "node:crypto";
+import fs3 from "node:fs";
+import path2 from "node:path";
+var TOKEN_RE = /^(?:stu|tcs|cls|obs)_[0-9a-f]{12}$/;
+function defaultRandomToken(prefix) {
+  return `${prefix}_` + crypto.randomBytes(6).toString("hex");
+}
+var TokenStore = class {
+  map = { idToToken: {}, tokenToId: {} };
+  filePath;
+  randomToken;
+  constructor(opts = {}) {
+    const base = opts.dir ?? resolveDataDir();
+    this.filePath = path2.join(bridgeStateDir(base), "tokenmap.json");
+    this.randomToken = opts.randomToken ?? defaultRandomToken;
+    this.load();
+  }
+  /**
+   * 영속 맵 로드 + 무결성 검증.
+   * 토큰 형식(불투명 난수)·양방향 일관성을 만족하는 쌍만 채택하고,
+   * 손상·조작된 항목은 조용히 폐기한다("토큰은 불투명" 성질을 영속 상태에도 강제).
+   */
+  load() {
+    let parsed;
+    try {
+      parsed = JSON.parse(fs3.readFileSync(this.filePath, "utf-8"));
+    } catch {
+      return;
+    }
+    const idToToken = parsed?.idToToken;
+    const tokenToId = parsed?.tokenToId;
+    if (!idToToken || !tokenToId || typeof idToToken !== "object" || typeof tokenToId !== "object") {
+      return;
+    }
+    const clean = { idToToken: {}, tokenToId: {} };
+    for (const [id, token] of Object.entries(idToToken)) {
+      if (typeof token !== "string" || !TOKEN_RE.test(token))
+        continue;
+      if (tokenToId[token] !== id)
+        continue;
+      if (clean.tokenToId[token] !== void 0)
+        continue;
+      clean.idToToken[id] = token;
+      clean.tokenToId[token] = id;
+    }
+    this.map = clean;
+  }
+  persist() {
+    const dir = path2.dirname(this.filePath);
+    fs3.mkdirSync(dir, { recursive: true });
+    const tmp = `${this.filePath}.tmp`;
+    fs3.writeFileSync(tmp, JSON.stringify(this.map, null, 2), "utf-8");
+    fs3.renameSync(tmp, this.filePath);
+  }
+  /**
+   * id(신원 문자열) → 토큰 (없으면 생성·영속).
+   * opts.prefix 로 토큰 종류를 자기-기술한다(기본 'stu' = 담임 학생, 하위호환).
+   * 이미 토큰이 있으면 prefix 와 무관하게 기존 토큰을 반환한다(멱등).
+   */
+  getToken(id, opts = {}) {
+    const existing = this.map.idToToken[id];
+    if (existing)
+      return existing;
+    const prefix = opts.prefix ?? "stu";
+    let token = this.randomToken(prefix);
+    while (this.map.tokenToId[token])
+      token = this.randomToken(prefix);
+    this.map.idToToken[id] = token;
+    this.map.tokenToId[token] = id;
+    this.persist();
+    return token;
+  }
+  /** 토큰 → id (로컬 전용 복원, 외부 전송 금지) */
+  resolveToken(token) {
+    return this.map.tokenToId[token];
+  }
+};
+function rosterFromTeachingClass(cls, store) {
+  return cls.students.map((s) => ({
+    token: store.getToken(makeTeachingStudentIdentity(cls.id, studentKey(s)), { prefix: "tcs" }),
+    names: [s.name]
+  }));
+}
+
+// ../packages/core/dist/pii/patterns.js
+var SOURCES = {
+  // 010-1234-5678 / 01012345678 / +82 10 1234 5678 / 010 123 4567
+  phone: "(?:\\+?82[-\\s.]?)?0?1[016789][-\\s.]?\\d{3,4}[-\\s.]?\\d{4}",
+  // 주민등록번호: 900315-1234567 / 900315 1234567
+  rrn: "(?<!\\d)\\d{6}[-\\s]?[1-4]\\d{6}(?!\\d)",
+  // 2010-03-15 / 2010.3.5 / 2010/12/31
+  birthDash: "(?:19|20)\\d{2}[-./](?:0?[1-9]|1[0-2])[-./](?:0?[1-9]|[12]\\d|3[01])",
+  // 2010년 3월 15일 / 10년 3월 15일
+  birthKorean: "(?:19|20)?\\d{2}\\s*\uB144\\s*\\d{1,2}\\s*\uC6D4\\s*\\d{1,2}\\s*\uC77C",
+  // 20100315 (8자리 압축)
+  birthCompact: "(?<!\\d)(?:19|20)\\d{2}(?:0[1-9]|1[0-2])(?:0[1-9]|[12]\\d|3[01])(?!\\d)"
+};
+function globalPattern(name) {
+  return new RegExp(SOURCES[name], "g");
+}
+function containsPii(value) {
+  return Object.keys(SOURCES).some((name) => new RegExp(SOURCES[name]).test(value));
+}
+function containsContactPii(value) {
+  return ["phone", "rrn"].some((name) => new RegExp(SOURCES[name]).test(value));
+}
+var MASK_ORDER = [
+  { name: "rrn", label: "[\uC8FC\uBBFC\uBC88\uD638]", stat: "rrns" },
+  { name: "phone", label: "[\uC804\uD654]", stat: "phones" },
+  { name: "birthKorean", label: "[\uC0DD\uB144\uC6D4\uC77C]", stat: "birthDates" },
+  { name: "birthDash", label: "[\uC0DD\uB144\uC6D4\uC77C]", stat: "birthDates" },
+  { name: "birthCompact", label: "[\uC0DD\uB144\uC6D4\uC77C]", stat: "birthDates" }
+];
+
+// ../packages/core/dist/pii/deidentify.js
+function escapeRegExp(s) {
+  return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+var NAME_SEP = "[\\s\\u00B7\\u2027\\u30FB\xB7]*";
+var INVISIBLE_RE = /[​‌‍­]/g;
+function deidentify(content, roster) {
+  const stats = { names: 0, phones: 0, rrns: 0, birthDates: 0, studentNumbers: 0 };
+  let text = content.normalize("NFC").replace(INVISIBLE_RE, "");
+  const nameReplacements = [];
+  for (const entry of roster) {
+    for (const n of entry.names) {
+      const needle = (n ?? "").normalize("NFC").replace(INVISIBLE_RE, "").trim();
+      if (needle.length > 0)
+        nameReplacements.push({ needle, token: entry.token });
+    }
+  }
+  nameReplacements.sort((a, b) => b.needle.length - a.needle.length);
+  for (const { needle, token } of nameReplacements) {
+    const spaced = needle.split("").map(escapeRegExp).join(NAME_SEP);
+    const re = new RegExp(spaced, "g");
+    text = text.replace(re, () => {
+      stats.names += 1;
+      return token;
+    });
+  }
+  for (const { name, label, stat } of MASK_ORDER) {
+    text = text.replace(globalPattern(name), () => {
+      stats[stat] += 1;
+      return label;
+    });
+  }
+  for (const entry of roster) {
+    if (entry.studentNumber !== void 0) {
+      const re = new RegExp(`(?<!\\d)${entry.studentNumber}(?!\\d)`, "g");
+      text = text.replace(re, () => {
+        stats.studentNumbers += 1;
+        return "[\uD559\uBC88]";
+      });
+    }
+  }
+  return { text, stats };
+}
+
+// ../packages/core/dist/audit.js
+import crypto2 from "node:crypto";
+import fs4 from "node:fs";
+import path3 from "node:path";
+var AuditValueError = class extends Error {
+  name = "AuditValueError";
+};
+var ALLOWED_STAT_KEYS = /* @__PURE__ */ new Set([
+  "names",
+  "phones",
+  "rrns",
+  "birthDates",
+  "studentNumbers",
+  "observations",
+  "students",
+  "records",
+  "items",
+  "redactions"
+]);
+function assertNoPii(field, value) {
+  if (value !== void 0 && containsPii(value)) {
+    throw new AuditValueError(`\uAC10\uC0AC\uB85C\uADF8 \uD544\uB4DC '${field}' \uC5D0 PII \uD615\uD0DC \uAC12\uC774 \uD3EC\uD568\uB428`);
+  }
+}
+function assertNoContactPii(field, value) {
+  if (value !== void 0 && containsContactPii(value)) {
+    throw new AuditValueError(`\uAC10\uC0AC\uB85C\uADF8 \uD544\uB4DC '${field}' \uC5D0 \uC5F0\uB77D\uCC98/\uC8FC\uBBFC\uBC88\uD638 \uD615\uD0DC \uAC12\uC774 \uD3EC\uD568\uB428`);
+  }
+}
+var AuditLog = class {
+  filePath;
+  saltPath;
+  saltKey;
+  constructor(dataDir = resolveDataDir()) {
+    const stateDir = bridgeStateDir(dataDir);
+    this.filePath = path3.join(stateDir, "audit.log.jsonl");
+    this.saltPath = path3.join(stateDir, ".audit-salt");
+    this.saltKey = this.loadOrCreateSalt();
+  }
+  get path() {
+    return this.filePath;
+  }
+  /** per-install 랜덤 salt 로드/생성 (로그와 분리 보관) */
+  loadOrCreateSalt() {
+    try {
+      const hex = fs4.readFileSync(this.saltPath, "utf-8").trim();
+      if (/^[0-9a-f]{64}$/.test(hex))
+        return Buffer.from(hex, "hex");
+    } catch {
+    }
+    const key = crypto2.randomBytes(32);
+    fs4.mkdirSync(path3.dirname(this.saltPath), { recursive: true });
+    const tmp = `${this.saltPath}.tmp`;
+    fs4.writeFileSync(tmp, key.toString("hex"), "utf-8");
+    fs4.renameSync(tmp, this.saltPath);
+    return key;
+  }
+  /**
+   * id → keyed HMAC 해시 (앞 16자).
+   * 무염 해시와 달리, salt 없이 로그만 유출돼도 저엔트로피 id(학번·전화성)를
+   * 사전대입으로 복원할 수 없다.
+   */
+  hashRecordId(id) {
+    return crypto2.createHmac("sha256", this.saltKey).update(id).digest("hex").slice(0, 16);
+  }
+  append(input) {
+    assertNoPii("tool", input.tool);
+    assertNoPii("consentId", input.consentId);
+    assertNoPii("destination", input.destination);
+    assertNoContactPii("period", input.period);
+    assertNoContactPii("rulePackVersion", input.rulePackVersion);
+    assertNoPii("validatorResult", input.validatorResult);
+    if (input.redactionStats) {
+      for (const [k, v] of Object.entries(input.redactionStats)) {
+        if (!ALLOWED_STAT_KEYS.has(k)) {
+          throw new AuditValueError("redactionStats \uC5D0 \uD5C8\uC6A9\uB418\uC9C0 \uC54A\uC740 \uD0A4\uAC00 \uD3EC\uD568\uB428(allowlist \uC678)");
+        }
+        if (typeof v !== "number" || !Number.isInteger(v) || v < 0) {
+          throw new AuditValueError(`redactionStats['${k}'] \uB294 0 \uC774\uC0C1 \uC815\uC218\uC5EC\uC57C \uD568`);
+        }
+      }
+    }
+    const entry = {
+      ts: (/* @__PURE__ */ new Date()).toISOString(),
+      tool: input.tool
+    };
+    if (input.consentId !== void 0)
+      entry["consentId"] = input.consentId;
+    if (input.destination !== void 0)
+      entry["destination"] = input.destination;
+    if (input.period !== void 0)
+      entry["period"] = input.period;
+    if (input.recordIds)
+      entry["recordHashes"] = input.recordIds.map((id) => this.hashRecordId(id));
+    if (input.redactionStats)
+      entry["redactionStats"] = input.redactionStats;
+    if (input.rulePackVersion !== void 0)
+      entry["rulePackVersion"] = input.rulePackVersion;
+    if (input.validatorResult !== void 0)
+      entry["validatorResult"] = input.validatorResult;
+    const full = entry;
+    fs4.mkdirSync(path3.dirname(this.filePath), { recursive: true });
+    fs4.appendFileSync(this.filePath, `${JSON.stringify(full)}
+`, "utf-8");
+    return full;
+  }
+  readAll() {
+    try {
+      const raw = fs4.readFileSync(this.filePath, "utf-8");
+      return raw.split("\n").filter((line) => line.trim().length > 0).map((line) => JSON.parse(line));
+    } catch {
+      return [];
+    }
+  }
+};
+
+// ../packages/core/dist/write.js
+import crypto3 from "node:crypto";
+import fs5 from "node:fs";
+import path4 from "node:path";
+var LOCK_ACQUIRE_TIMEOUT_MS = 5e3;
+var MAX_CONTENT = 500;
+function isAlive(pid) {
+  if (!Number.isInteger(pid) || pid <= 0)
+    return false;
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (e) {
+    return e.code === "EPERM";
+  }
+}
+var WriteDisabledError = class extends Error {
+  name = "WriteDisabledError";
+};
+var WriteValidationError = class extends Error {
+  name = "WriteValidationError";
+};
+var WriteConflictError = class extends Error {
+  name = "WriteConflictError";
+};
+var WriteLockError = class extends Error {
+  name = "WriteLockError";
+};
+function isWriteEnabled(env = process.env) {
+  return env["SSAMPIN_BRIDGE_ALLOW_WRITE"] === "1";
+}
+function assertWriteEnabled(env = process.env) {
+  if (!isWriteEnabled(env)) {
+    throw new WriteDisabledError("\uC4F0\uAE30\uAC00 \uBE44\uD65C\uC131\uD654\uB418\uC5B4 \uC788\uC2B5\uB2C8\uB2E4. SSAMPIN_BRIDGE_ALLOW_WRITE=1 \uD658\uACBD\uBCC0\uC218\uB85C \uBA85\uC2DC\uC801\uC73C\uB85C \uD65C\uC131\uD654\uD558\uC138\uC694(\uC324\uD540\uC744 \uB2EB\uC740 \uC0C1\uD0DC \uAD8C\uC7A5).");
+  }
+}
+function sleep(ms) {
+  return new Promise((r) => setTimeout(r, ms));
+}
+function setIf10(target, key, value) {
+  if (value !== void 0)
+    target[key] = value;
+}
+function validate(input) {
+  if (typeof input.studentId !== "string" || input.studentId.trim().length === 0) {
+    throw new WriteValidationError("studentId \uAC00 \uBE44\uC5B4 \uC788\uC2B5\uB2C8\uB2E4.");
+  }
+  const content = input.content ?? "";
+  if (typeof content !== "string" || content.trim().length === 0) {
+    throw new WriteValidationError("content \uAC00 \uBE44\uC5B4 \uC788\uC2B5\uB2C8\uB2E4.");
+  }
+  if (content.length > MAX_CONTENT) {
+    throw new WriteValidationError(`content \uB294 \uCD5C\uB300 ${MAX_CONTENT}\uC790\uC785\uB2C8\uB2E4(\uD604\uC7AC ${content.length}).`);
+  }
+  if (input.date !== void 0 && !/^\d{4}-\d{2}-\d{2}$/.test(input.date)) {
+    throw new WriteValidationError("date \uB294 YYYY-MM-DD \uD615\uC2DD\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4.");
+  }
+  if (input.tags !== void 0 && !Array.isArray(input.tags)) {
+    throw new WriteValidationError("tags \uB294 \uBB38\uC790\uC5F4 \uBC30\uC5F4\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4.");
+  }
+}
+function todayIso() {
+  return (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+}
+function buildRecord(input) {
+  const now = Date.now();
+  const rec = {
+    id: `o_${now}_${crypto3.randomBytes(4).toString("hex")}`,
+    studentId: input.studentId,
+    date: input.date ?? todayIso(),
+    content: input.content.trim(),
+    tags: input.tags ? input.tags.filter((t) => typeof t === "string") : [],
+    visibility: input.visibility === "shared" ? "shared" : "private",
+    createdAt: now,
+    updatedAt: now
+  };
+  setIf10(rec, "classId", input.classId);
+  return rec;
+}
+function idemPath(dataDir) {
+  return path4.join(bridgeStateDir(dataDir), "idempotency.json");
+}
+function loadIdem(dataDir) {
+  try {
+    return JSON.parse(fs5.readFileSync(idemPath(dataDir), "utf-8"));
+  } catch {
+    return {};
+  }
+}
+function saveIdem(dataDir, map) {
+  const p = idemPath(dataDir);
+  fs5.mkdirSync(path4.dirname(p), { recursive: true });
+  const tmp = `${p}.tmp`;
+  fs5.writeFileSync(tmp, JSON.stringify(map), "utf-8");
+  fs5.renameSync(tmp, p);
+}
+function tryReclaimDeadLock(lockPath, nonce) {
+  const claim = `${lockPath}.reclaim-${nonce}`;
+  try {
+    fs5.renameSync(lockPath, claim);
+  } catch {
+    return;
+  }
+  let dead = false;
+  try {
+    const cur = JSON.parse(fs5.readFileSync(claim, "utf-8"));
+    dead = typeof cur.pid === "number" ? !isAlive(cur.pid) : true;
+  } catch {
+    dead = true;
+  }
+  if (dead) {
+    try {
+      fs5.unlinkSync(claim);
+    } catch {
+    }
+  } else {
+    try {
+      fs5.linkSync(claim, lockPath);
+    } catch {
+    }
+    try {
+      fs5.unlinkSync(claim);
+    } catch {
+    }
+  }
+}
+async function withLock(dataDir, fn) {
+  const lockPath = path4.join(bridgeStateDir(dataDir), "write.lock");
+  fs5.mkdirSync(path4.dirname(lockPath), { recursive: true });
+  const nonce = crypto3.randomBytes(8).toString("hex");
+  const start = Date.now();
+  for (; ; ) {
+    const tmp = `${lockPath}.acq-${nonce}`;
+    try {
+      fs5.writeFileSync(tmp, JSON.stringify({ pid: process.pid, nonce, ts: Date.now() }), "utf-8");
+      fs5.linkSync(tmp, lockPath);
+      fs5.unlinkSync(tmp);
+      break;
+    } catch {
+      try {
+        fs5.unlinkSync(tmp);
+      } catch {
+      }
+      let ownerAlive = true;
+      try {
+        const cur = JSON.parse(fs5.readFileSync(lockPath, "utf-8"));
+        ownerAlive = typeof cur.pid === "number" ? isAlive(cur.pid) : false;
+      } catch {
+        ownerAlive = false;
+      }
+      if (!ownerAlive) {
+        tryReclaimDeadLock(lockPath, nonce);
+        continue;
+      }
+      if (Date.now() - start > LOCK_ACQUIRE_TIMEOUT_MS) {
+        throw new WriteLockError("\uC4F0\uAE30 \uB77D \uD68D\uB4DD \uC2DC\uAC04 \uCD08\uACFC(\uB2E4\uB978 \uC4F0\uAE30 \uC9C4\uD589 \uC911).");
+      }
+      await sleep(15);
+    }
+  }
+  try {
+    return fn();
+  } finally {
+    try {
+      const cur = JSON.parse(fs5.readFileSync(lockPath, "utf-8"));
+      if (cur.nonce === nonce)
+        fs5.unlinkSync(lockPath);
+    } catch {
+    }
+  }
+}
+async function appendObservation(dataDir, input) {
+  assertWriteEnabled();
+  validate(input);
+  const baseReal = realDir(dataDir);
+  const file = resolveDataFile(dataDir, "observations");
+  assertNoSymlinkEscape(baseReal, file);
+  return withLock(dataDir, () => {
+    const baseRaw = fs5.existsSync(file) ? fs5.readFileSync(file, "utf-8") : "";
+    const data = parseObservations(baseRaw.length > 0 ? JSON.parse(baseRaw) : { records: [] });
+    if (input.clientKey) {
+      const idem = loadIdem(dataDir);
+      const existingId = idem[input.clientKey];
+      if (existingId) {
+        const found = data.records.find((r) => r.id === existingId);
+        if (found)
+          return found;
+      }
+    }
+    const record = buildRecord(input);
+    const nextData = { records: [...data.records, record] };
+    setIf10(nextData, "customTags", data.customTags);
+    const nowRaw = fs5.existsSync(file) ? fs5.readFileSync(file, "utf-8") : "";
+    if (nowRaw !== baseRaw) {
+      throw new WriteConflictError("\uC4F0\uAE30 \uB3C4\uC911 \uB370\uC774\uD130\uAC00 \uBCC0\uACBD\uB418\uC5C8\uC2B5\uB2C8\uB2E4(\uC324\uD540 \uC2E4\uD589 \uC911\uC77C \uC218 \uC788\uC74C). \uB2E4\uC2DC \uC2DC\uB3C4\uD558\uC138\uC694.");
+    }
+    if (baseRaw.length > 10) {
+      fs5.writeFileSync(backupPathFor(file), baseRaw, "utf-8");
+    }
+    const tmp = `${file}.tmp`;
+    fs5.writeFileSync(tmp, JSON.stringify(nextData, null, 2), "utf-8");
+    fs5.renameSync(tmp, file);
+    if (input.clientKey) {
+      const idem = loadIdem(dataDir);
+      idem[input.clientKey] = record.id;
+      saveIdem(dataDir, idem);
+    }
+    return record;
+  });
+}
+
+// ../packages/core/dist/grounding.js
+function isContentExposureEnabled(env = process.env) {
+  return env["SSAMPIN_BRIDGE_ALLOW_CONTENT"] === "1";
+}
+var ContentExposureDisabledError = class extends Error {
+  name = "ContentExposureDisabledError";
+};
+function getStudentObservations(dataDir, studentId, query = {}) {
+  const data = parseObservations(readRawJson("observations", dataDir));
+  return data.records.filter((r) => r.studentId === studentId).filter((r) => query.from ? r.date >= query.from : true).filter((r) => query.to ? r.date <= query.to : true);
+}
+function getTeachingObservations(dataDir, classId, studentKey2, query = {}) {
+  const data = parseObservations(readRawJson("observations", dataDir));
+  return data.records.filter((r) => r.classId === classId && r.studentId === studentKey2).filter((r) => query.from ? r.date >= query.from : true).filter((r) => query.to ? r.date <= query.to : true);
+}
+var COVERAGE_THRESHOLD = 0.18;
+var UNCOVERED_RUN_MAX = 4;
+var DISCLAIMER = '\uC5B4\uD718 \uC2A4\uD06C\uB9B0\uC77C \uBFD0 \uC758\uBBF8 \uAC80\uC99D\xB7\uAE30\uC7AC \uC801\uD569\uC131\xB7\uC0AC\uC2E4 \uD655\uC778\uC774 \uC544\uB2D9\uB2C8\uB2E4. flags \uAC00 \uC5C6\uC5B4\uB3C4 "\uAE30\uC7AC \uAC00\uB2A5"\uC774 \uC544\uB2C8\uBA70, \uC9E7\uC740 \uB0A0\uC870(\uC218\uC0C1\xB7\uB300\uC0C1\xB7\uC9C4\uB2E8\uBA85 \uB4F1)\uB294 \uC790\uB3D9\uC73C\uB85C \uBABB \uC7A1\uC744 \uC218 \uC788\uC73C\uB2C8 \uBAA8\uB4E0 \uBB38\uC7A5\uC744 \uAD50\uC0AC\uAC00 \uC9C1\uC811 \uC0AC\uC2E4 \uD655\uC778\uD574\uC57C \uD569\uB2C8\uB2E4. \uAE08\uC9C0\uD45C\uD604\xB7\uAE30\uC7AC\uC694\uB839\xB7\uC791\uC131\uBC94\uC704\uB3C4 \uBCC4\uB3C4\uB85C \uD655\uC778\uD558\uC138\uC694.';
+var LEVEL_LABELS = {
+  elementary: "\uCD08\uB4F1\uD559\uAD50",
+  middle: "\uC911\uD559\uAD50",
+  high: "\uACE0\uB4F1\uD559\uAD50"
+};
+var REF_HUNRYUNG = {
+  title: "\uD559\uAD50\uC0DD\uD65C\uAE30\uB85D \uC791\uC131 \uBC0F \uAD00\uB9AC\uC9C0\uCE68(\uAD50\uC721\uBD80\uD6C8\uB839 \uC81C555\uD638, \uC2DC\uD589 2026-03-01)",
+  url: "https://star.moe.go.kr/web/contents/m20103.do"
+};
+var REF_REVISION_2026 = {
+  title: "2026\uD559\uB144\uB3C4 \uD559\uAD50\uC0DD\uD65C\uAE30\uB85D\uBD80 \uAE30\uC7AC\uC694\uB839 \uC8FC\uC694 \uAC1C\uC815\uC0AC\uD56D(\uAD50\uC721\uBD80\xB7KERIS, 2026-02-19)",
+  url: "https://star.moe.go.kr/web/contents/m40100.do"
+};
+var REF_PORTAL = {
+  title: "\uD559\uAD50\uC0DD\uD65C\uAE30\uB85D\uBD80 \uAE30\uC7AC\uC694\uB839 \uC790\uB8CC\uC2E4(\uD559\uAD50\uC0DD\uD65C\uAE30\uB85D\uBD80 \uC885\uD569\uC9C0\uC6D0\uD3EC\uD138)",
+  url: "https://star.moe.go.kr/web/contents/m21100.do"
+};
+var REFERENCES = [REF_HUNRYUNG, REF_REVISION_2026, REF_PORTAL];
+var REF_HUNRYUNG_2025 = {
+  title: "\uD559\uAD50\uC0DD\uD65C\uAE30\uB85D \uC791\uC131 \uBC0F \uAD00\uB9AC\uC9C0\uCE68(\uAD50\uC721\uBD80\uD6C8\uB839 \uC81C504\uD638, \uC2DC\uD589 2025-03-01)",
+  url: "https://star.moe.go.kr/web/contents/m20103.do"
+};
+var REF_REVISION_2025 = {
+  title: "2025\uD559\uB144\uB3C4 \uD559\uAD50\uC0DD\uD65C\uAE30\uB85D\uBD80 \uAE30\uC7AC\uC694\uB839 \uC8FC\uC694 \uAC1C\uC815\uC0AC\uD56D(\uAD50\uC721\uBD80\xB7KERIS)",
+  url: "https://star.moe.go.kr/web/contents/m40100.do"
+};
+var REFERENCES_2025 = [REF_HUNRYUNG_2025, REF_REVISION_2025, REF_PORTAL];
+var DISCLAIMER_GUIDE = '\uC5F0\uB3C4\xB7\uD559\uAD50\uAE09\uBCC4 \uBCF4\uC218\uC801 \uC694\uC57D \uCC38\uC870\uC6A9\uC785\uB2C8\uB2E4. flags\xB7\uC6D0\uCE59 \uCDA9\uC871\uC774 "\uAE30\uC7AC \uAC00\uB2A5"\uC744 \uB73B\uD558\uC9C0 \uC54A\uC73C\uBA70, \uD559\uAD50\uAE09\xB7\uC5F0\uB3C4\uBCC4 \uCD5C\uC2E0 \uAE30\uC7AC\uC694\uB839 \uC6D0\uBB38\uACFC \uAE08\uC9C0\uD45C\uD604\xB7\uC791\uC131\uBC94\uC704\uB97C \uBC18\uB4DC\uC2DC \uD655\uC778\uD558\uACE0 \uAD50\uC0AC\uAC00 \uCD5C\uC885 \uAC80\uD1A0\uD558\uC138\uC694.';
+function principle(text, ref) {
+  return { text, source: ref.title, url: ref.url };
+}
+var COMMON_PRINCIPLES = [
+  principle("\uAD50\uC0AC\uAC00 \uC9C1\uC811 \uAD00\uCC30\xB7\uD3C9\uAC00\uD55C \uC0AC\uC2E4\uC744 \uADFC\uAC70\uB85C \uC785\uB825\uD558\uACE0, \uCD94\uCE21\xB7\uACFC\uC7A5\xB7\uBBF8\uAC80\uC99D \uB0B4\uC6A9\uC740 \uAE30\uC7AC\uD558\uC9C0 \uC54A\uB294\uB2E4.", REF_HUNRYUNG),
+  principle("\uC0DD\uC131\uD615 AI\uAC00 \uB9CC\uB4E0 \uBB38\uC7A5\uC744 \uADF8\uB300\uB85C \uC62E\uACA8 \uC801\uC9C0 \uC54A\uB294\uB2E4(2026 \uAC1C\uC815). \uAE30\uB85D \uC8FC\uCCB4\uB294 \uAD50\uC0AC\uC774\uBA70 \uBAA8\uB4E0 \uBB38\uC7A5\uC740 \uC218\uC5C5 \uC911 \uC2E4\uC81C \uAD00\uCC30\uC5D0 \uADFC\uAC70\uD574\uC57C \uD55C\uB2E4.", REF_REVISION_2026),
+  principle("\uB2E4\uC74C\uC740 \uC785\uB825\uD560 \uC218 \uC5C6\uB2E4: \uAD50\uB0B4\uC678 \uC778\uC99D\uC2DC\uD5D8 \uC131\uC801, \uBAA8\uC758\uACE0\uC0AC\xB7\uC804\uAD6D\uC5F0\uD569\uD559\uB825\uD3C9\uAC00 \uC131\uC801, \uB17C\uBB38 \uD22C\uACE0\xB7\uB4F1\uC7AC, \uB3C4\uC11C \uCD9C\uAC04, \uC9C0\uC2DD\uC7AC\uC0B0\uAD8C(\uD2B9\uD5C8\xB7\uC2E4\uC6A9\uC2E0\uC548 \uB4F1) \uCD9C\uC6D0\xB7\uB4F1\uB85D, \uC5B4\uD559\uC5F0\uC218 \uB4F1 \uD574\uC678 \uD65C\uB3D9\uC2E4\uC801, \uBD80\uBAA8\xB7\uCE5C\uC778\uCC99\uC758 \uC0AC\uD68C\xB7\uACBD\uC81C\uC801 \uC9C0\uC704 \uC554\uC2DC.", REF_HUNRYUNG),
+  principle("\uAD6C\uCCB4\uC801 \uC0AC\uB840 \uC911\uC2EC\uC73C\uB85C \uD559\uC0DD\uC758 \uC131\uC7A5\xB7\uBCC0\uD654\uB97C \uC11C\uC220\uD558\uACE0, \uB2E8\uC21C \uC0AC\uC2E4 \uB098\uC5F4\uC774\uB098 \uB2E8\uC815\uC801 \uD3C9\uAC00\uB294 \uD53C\uD55C\uB2E4.", REF_PORTAL),
+  principle('"\uADFC\uAC70 \uC874\uC7AC"\uC640 "\uAE30\uC7AC \uAC00\uB2A5"\uC740 \uB2E4\uB974\uB2E4 \u2014 \uD559\uAD50\uAE09\xB7\uC5F0\uB3C4\uBCC4 \uAE30\uC7AC\uC694\uB839\uACFC \uC791\uC131 \uBC94\uC704\xB7\uAE08\uC9C0\uD45C\uD604\uC744 \uD568\uAED8 \uD655\uC778\uD55C\uB2E4.', REF_PORTAL),
+  principle("\uCD5C\uC885 \uAE30\uC7AC \uC804 \uAD50\uC0AC\uAC00 \uADDC\uC815\uACFC \uC0AC\uC2E4\uC744 \uBC18\uB4DC\uC2DC \uAC80\uD1A0\uD55C\uB2E4. \uB9C8\uAC10 \uC774\uD6C4 \uC815\uC815\uC740 \uC6D0\uCE59\uC801\uC73C\uB85C \uAE08\uC9C0\uB41C\uB2E4.", REF_HUNRYUNG)
+];
+var LEVEL_PRINCIPLES = {
+  elementary: [
+    principle("\uCD08\uB4F1\uD559\uAD50 \uAD50\uACFC\uD559\uC2B5\uBC1C\uB2EC\uC0C1\uD669\uC740 \uC810\uC218\xB7\uC11D\uCC28 \uC5C6\uC774 \uC131\uCDE8\uAE30\uC900 \uB3C4\uB2EC \uC815\uB3C4\uB97C \uC11C\uC220\uD558\uACE0, \uD589\uB3D9\uD2B9\uC131 \uBC0F \uC885\uD569\uC758\uACAC\uC744 \uAD00\uCC30 \uADFC\uAC70\uB85C \uC791\uC131\uD55C\uB2E4.", REF_PORTAL),
+    principle("\uC218\uC0C1\uACBD\uB825\uC5D0\uB294 \uAD50\uB0B4\uC0C1\uB9CC \uC785\uB825\uD558\uBA70 \uAD50\uC678 \uC218\uC0C1\xB7\uC678\uBD80 \uC2E4\uC801\uC740 \uAE30\uC7AC\uD558\uC9C0 \uC54A\uB294\uB2E4.", REF_HUNRYUNG)
+  ],
+  middle: [
+    principle("\uC218\uC0C1\uACBD\uB825\uC5D0\uB294 \uAD50\uB0B4\uC0C1\uB9CC \uC785\uB825\uD558\uACE0, \uAC19\uC740 \uB0B4\uC6A9\uC73C\uB85C \uC5EC\uB7EC \uBC88 \uC218\uC0C1\uD55C \uACBD\uC6B0 \uCD5C\uC0C1\uC704 1\uAC1C\uB9CC \uC785\uB825\uD55C\uB2E4. \uAD50\uC678 \uC218\uC0C1\uC740 \uAE30\uC7AC\uD558\uC9C0 \uC54A\uB294\uB2E4.", REF_HUNRYUNG)
+  ],
+  high: [
+    principle("\uC218\uC0C1\uACBD\uB825\uC5D0\uB294 \uAD50\uB0B4\uC0C1\uB9CC \uC785\uB825(\uCD5C\uC0C1\uC704 1\uAC1C)\uD558\uBA70, \uACF5\uC778\uC5B4\uD559\uC131\uC801\xB7\uAD50\uACFC \uAD00\uB828 \uAD50\uC678 \uC218\uC0C1\uC2E4\uC801\uC740 \uB300\uC785(\uD559\uC0DD\uBD80\uC704\uC8FC\uC804\uD615) \uC81C\uCD9C\uC774 \uAE08\uC9C0\uB41C\uB2E4.", REF_HUNRYUNG),
+    principle("\uACE0\uAD50\uD559\uC810\uC81C \uAD00\uB828: \uACFC\uBAA9 \uBBF8\uC774\uC218(I) \uCC98\uB9AC\uC640 \uC131\uCDE8\uB3C4(A~E) \uC0B0\uCD9C \uB4F1 2026 \uAC1C\uC815\uC0AC\uD56D\uC744 \uB530\uB978\uB2E4(\uC0C1\uC138 \uAE30\uC900\uC740 \uC6D0\uBB38 \uD655\uC778).", REF_REVISION_2026),
+    principle("\uD559\uAD50 \uBC16\uC5D0\uC11C \uD559\uC0DD\uC774 \uC2A4\uC2A4\uB85C \uC218\uD589\uD558\uB294 \uACFC\uC81C\uD615 \uC218\uD589\uD3C9\uAC00 \uACB0\uACFC\uB294 \uAE30\uB85D \uADFC\uAC70\uB85C \uC0BC\uC9C0 \uC54A\uB294\uB2E4(\uC218\uC5C5 \uC911 \uAD50\uC0AC \uAD00\uCC30 \uADFC\uAC70, 2026 \uAC1C\uC815).", REF_REVISION_2026)
+  ]
+};
+var COMMON_PRINCIPLES_2025 = [
+  principle("\uAD50\uC0AC\uAC00 \uC9C1\uC811 \uAD00\uCC30\xB7\uD3C9\uAC00\uD55C \uC0AC\uC2E4\uC744 \uADFC\uAC70\uB85C \uC785\uB825\uD558\uACE0, \uCD94\uCE21\xB7\uACFC\uC7A5\xB7\uBBF8\uAC80\uC99D \uB0B4\uC6A9\uC740 \uAE30\uC7AC\uD558\uC9C0 \uC54A\uB294\uB2E4.", REF_HUNRYUNG_2025),
+  principle("\uB2E4\uC74C\uC740 \uC785\uB825\uD560 \uC218 \uC5C6\uB2E4: \uAD50\uB0B4\uC678 \uC778\uC99D\uC2DC\uD5D8 \uC131\uC801, \uBAA8\uC758\uACE0\uC0AC\xB7\uC804\uAD6D\uC5F0\uD569\uD559\uB825\uD3C9\uAC00 \uC131\uC801, \uB17C\uBB38 \uD22C\uACE0\xB7\uB4F1\uC7AC, \uB3C4\uC11C \uCD9C\uAC04, \uC9C0\uC2DD\uC7AC\uC0B0\uAD8C(\uD2B9\uD5C8\xB7\uC2E4\uC6A9\uC2E0\uC548 \uB4F1) \uCD9C\uC6D0\xB7\uB4F1\uB85D, \uC5B4\uD559\uC5F0\uC218 \uB4F1 \uD574\uC678 \uD65C\uB3D9\uC2E4\uC801, \uBD80\uBAA8\xB7\uCE5C\uC778\uCC99\uC758 \uC0AC\uD68C\xB7\uACBD\uC81C\uC801 \uC9C0\uC704 \uC554\uC2DC.", REF_HUNRYUNG_2025),
+  principle("\uAD6C\uCCB4\uC801 \uC0AC\uB840 \uC911\uC2EC\uC73C\uB85C \uD559\uC0DD\uC758 \uC131\uC7A5\xB7\uBCC0\uD654\uB97C \uC11C\uC220\uD558\uACE0, \uB2E8\uC21C \uC0AC\uC2E4 \uB098\uC5F4\uC774\uB098 \uB2E8\uC815\uC801 \uD3C9\uAC00\uB294 \uD53C\uD55C\uB2E4.", REF_PORTAL),
+  principle('"\uADFC\uAC70 \uC874\uC7AC"\uC640 "\uAE30\uC7AC \uAC00\uB2A5"\uC740 \uB2E4\uB974\uB2E4 \u2014 \uD559\uAD50\uAE09\xB7\uC5F0\uB3C4\uBCC4 \uAE30\uC7AC\uC694\uB839\uACFC \uC791\uC131 \uBC94\uC704\xB7\uAE08\uC9C0\uD45C\uD604\uC744 \uD568\uAED8 \uD655\uC778\uD55C\uB2E4.', REF_PORTAL),
+  principle("\uCD5C\uC885 \uAE30\uC7AC \uC804 \uAD50\uC0AC\uAC00 \uADDC\uC815\uACFC \uC0AC\uC2E4\uC744 \uBC18\uB4DC\uC2DC \uAC80\uD1A0\uD55C\uB2E4. \uB9C8\uAC10 \uC774\uD6C4 \uC815\uC815\uC740 \uC6D0\uCE59\uC801\uC73C\uB85C \uAE08\uC9C0\uB41C\uB2E4.", REF_HUNRYUNG_2025)
+];
+var LEVEL_PRINCIPLES_2025 = {
+  elementary: [
+    principle("\uCD08\uB4F1\uD559\uAD50 \uAD50\uACFC\uD559\uC2B5\uBC1C\uB2EC\uC0C1\uD669\uC740 \uC810\uC218\xB7\uC11D\uCC28 \uC5C6\uC774 \uC131\uCDE8\uAE30\uC900 \uB3C4\uB2EC \uC815\uB3C4\uB97C \uC11C\uC220\uD558\uACE0, \uD589\uB3D9\uD2B9\uC131 \uBC0F \uC885\uD569\uC758\uACAC\uC744 \uAD00\uCC30 \uADFC\uAC70\uB85C \uC791\uC131\uD55C\uB2E4.", REF_PORTAL),
+    principle("\uC218\uC0C1\uACBD\uB825\uC5D0\uB294 \uAD50\uB0B4\uC0C1\uB9CC \uC785\uB825\uD558\uBA70 \uAD50\uC678 \uC218\uC0C1\xB7\uC678\uBD80 \uC2E4\uC801\uC740 \uAE30\uC7AC\uD558\uC9C0 \uC54A\uB294\uB2E4.", REF_HUNRYUNG_2025)
+  ],
+  middle: [
+    principle("\uC218\uC0C1\uACBD\uB825\uC5D0\uB294 \uAD50\uB0B4\uC0C1\uB9CC \uC785\uB825\uD558\uACE0, \uAC19\uC740 \uB0B4\uC6A9\uC73C\uB85C \uC5EC\uB7EC \uBC88 \uC218\uC0C1\uD55C \uACBD\uC6B0 \uCD5C\uC0C1\uC704 1\uAC1C\uB9CC \uC785\uB825\uD55C\uB2E4. \uAD50\uC678 \uC218\uC0C1\uC740 \uAE30\uC7AC\uD558\uC9C0 \uC54A\uB294\uB2E4.", REF_HUNRYUNG_2025)
+  ],
+  high: [
+    principle("\uC218\uC0C1\uACBD\uB825\uC5D0\uB294 \uAD50\uB0B4\uC0C1\uB9CC \uC785\uB825(\uCD5C\uC0C1\uC704 1\uAC1C)\uD558\uBA70, \uACF5\uC778\uC5B4\uD559\uC131\uC801\xB7\uAD50\uACFC \uAD00\uB828 \uAD50\uC678 \uC218\uC0C1\uC2E4\uC801\uC740 \uB300\uC785(\uD559\uC0DD\uBD80\uC704\uC8FC\uC804\uD615) \uC81C\uCD9C\uC774 \uAE08\uC9C0\uB41C\uB2E4.", REF_HUNRYUNG_2025),
+    principle("2025\uD559\uB144\uB3C4 \uACE01\uBD80\uD130 \uAD50\uACFC \uC11D\uCC28\uB4F1\uAE09\uC774 9\uB4F1\uAE09\uC5D0\uC11C 5\uB4F1\uAE09 \uCCB4\uACC4\uB85C \uC804\uD658\uB418\uACE0(2022 \uAC1C\uC815\uAD50\uC721\uACFC\uC815 \uC801\uC6A9), \uC131\uCDE8\uB3C4\uBCC4 \uBD84\uD3EC\uBE44\uC728\uC774 \uBCF4\uD1B5\uAD50\uACFC \uC804 \uACFC\uBAA9\uC73C\uB85C \uD655\uB300\uB418\uBA70 \uD45C\uC900\uD3B8\uCC28\uB294 \uAE30\uC7AC \uB300\uC0C1\uC5D0\uC11C \uC81C\uC678\uB41C\uB2E4(\uC0C1\uC138 \uAE30\uC900\uC740 \uC6D0\uBB38 \uD655\uC778).", REF_REVISION_2025)
+  ]
+};
+var YEAR_PACKS = {
+  "2025": {
+    commonPrinciples: COMMON_PRINCIPLES_2025,
+    levelPrinciples: LEVEL_PRINCIPLES_2025,
+    references: REFERENCES_2025
+  },
+  "2026": {
+    commonPrinciples: COMMON_PRINCIPLES,
+    levelPrinciples: LEVEL_PRINCIPLES,
+    references: REFERENCES
+  }
+};
+var RULE_PACK_YEARS = Object.keys(YEAR_PACKS).sort();
+var LATEST_YEAR = RULE_PACK_YEARS[RULE_PACK_YEARS.length - 1] ?? "2026";
+var LEGACY_HIGH_RISK_TERMS = [
+  "\uC218\uC0C1",
+  "\uB300\uC0C1",
+  "\uC6B0\uC2B9",
+  "\uCD5C\uC6B0\uC218",
+  "\uAE08\uC0C1",
+  "\uC740\uC0C1",
+  "\uB3D9\uC0C1",
+  "\uC785\uC0C1",
+  "\uD45C\uCC3D",
+  "\uC7A5\uD559",
+  "\uC790\uACA9\uC99D",
+  "\uD569\uACA9",
+  "\uC9C4\uB2E8",
+  "\uC7A5\uC560",
+  "\uB4F1\uAE09",
+  "1\uB4F1",
+  "\uC77C\uB4F1",
+  "\uAE08\uBA54\uB2EC"
+];
+var PROHIBITED_ITEM_TERMS = [
+  "\uD2B9\uD5C8",
+  "\uB17C\uBB38",
+  "\uC800\uC11C",
+  "\uCD9C\uAC04",
+  "\uACF5\uC778\uC5B4\uD559",
+  "\uD1A0\uC775",
+  "\uD1A0\uD50C",
+  "\uBAA8\uC758\uACE0\uC0AC",
+  "\uD559\uB825\uD3C9\uAC00"
+];
+var LEVEL_HIGH_RISK_TERMS = {
+  elementary: [],
+  middle: [],
+  // 고등학교: 대입 제출 금지(공인어학) 관련 어휘 보강
+  high: ["\uD15D\uC2A4", "\uC624\uD53D"]
+};
+function resolveLevel(level) {
+  if (level === void 0)
+    return void 0;
+  const key = level.trim().normalize("NFC");
+  const map = {
+    elementary: "elementary",
+    middle: "middle",
+    high: "high",
+    \uCD08\uB4F1\uD559\uAD50: "elementary",
+    \uC911\uD559\uAD50: "middle",
+    \uACE0\uB4F1\uD559\uAD50: "high"
+  };
+  const resolved = map[key];
+  if (resolved === void 0) {
+    throw new Error("\uC54C \uC218 \uC5C6\uB294 \uD559\uAD50\uAE09\uC785\uB2C8\uB2E4. \uD5C8\uC6A9\uAC12: elementary|middle|high \uB610\uB294 \uCD08\uB4F1\uD559\uAD50|\uC911\uD559\uAD50|\uACE0\uB4F1\uD559\uAD50");
+  }
+  return resolved;
+}
+function resolveYear(year) {
+  if (year === void 0)
+    return LATEST_YEAR;
+  if (!RULE_PACK_YEARS.includes(year)) {
+    throw new Error(`\uC9C0\uC6D0\uD558\uC9C0 \uC54A\uB294 \uAE30\uC7AC\uC694\uB839 \uC5F0\uB3C4\uC785\uB2C8\uB2E4. \uC9C0\uC6D0 \uC5F0\uB3C4: ${RULE_PACK_YEARS.join(", ")}`);
+  }
+  return year;
+}
+function resolveRulePack(query = {}) {
+  const version = resolveYear(query.year);
+  const pack = YEAR_PACKS[version];
+  if (!pack) {
+    throw new Error(`\uC9C0\uC6D0\uD558\uC9C0 \uC54A\uB294 \uAE30\uC7AC\uC694\uB839 \uC5F0\uB3C4\uC785\uB2C8\uB2E4. \uC9C0\uC6D0 \uC5F0\uB3C4: ${RULE_PACK_YEARS.join(", ")}`);
+  }
+  const level = resolveLevel(query.level);
+  const citations = level ? [...pack.commonPrinciples, ...pack.levelPrinciples[level]] : pack.commonPrinciples;
+  const highRiskTerms = level ? [...LEGACY_HIGH_RISK_TERMS, ...PROHIBITED_ITEM_TERMS, ...LEVEL_HIGH_RISK_TERMS[level]] : LEGACY_HIGH_RISK_TERMS;
+  return {
+    version,
+    level: level ?? "common",
+    levelLabel: level ? LEVEL_LABELS[level] : "\uACF5\uD1B5",
+    citations,
+    highRiskTerms,
+    references: pack.references
+  };
+}
+function bigrams(s) {
+  const t = s.replace(/\s+/g, "");
+  const set = /* @__PURE__ */ new Set();
+  for (let i = 0; i + 1 < t.length; i += 1)
+    set.add(t.slice(i, i + 2));
+  return set;
+}
+function claimCoverage(claim, content) {
+  const A = bigrams(claim);
+  if (A.size === 0)
+    return 0;
+  const B = bigrams(content);
+  let inter = 0;
+  for (const g of A)
+    if (B.has(g))
+      inter += 1;
+  return inter / A.size;
+}
+function maxUncoveredRun(claim, contents) {
+  const t = claim.replace(/\s+/g, "");
+  if (t.length < 2)
+    return 0;
+  const covered = /* @__PURE__ */ new Set();
+  for (const c of contents)
+    for (const g of bigrams(c))
+      covered.add(g);
+  let maxRun = 0;
+  let run = 0;
+  for (let i = 0; i + 1 < t.length; i += 1) {
+    if (covered.has(t.slice(i, i + 2))) {
+      run = 0;
+    } else {
+      run += 1;
+      if (run > maxRun)
+        maxRun = run;
+    }
+  }
+  return maxRun;
+}
+function hasUnverifiedHighRiskTerm(claim, contents, terms) {
+  const joined = contents.join(" ");
+  return terms.some((raw) => {
+    const term = raw.normalize("NFC");
+    return claim.includes(term) && !joined.includes(term);
+  });
+}
+function sentenceSegments(text) {
+  return text.split(/[.!?。]+/).map((s) => s.trim()).filter((s) => s.length > 0);
+}
+function checkGrounding(claims, observations, query = {}) {
+  const pack = resolveRulePack(query);
+  const highRiskTerms = pack.highRiskTerms;
+  const byId = /* @__PURE__ */ new Map();
+  for (const o of observations)
+    byId.set(o.id, o.content.normalize("NFC"));
+  const checks = claims.map((claim) => {
+    const text = typeof claim.text === "string" ? claim.text.trim().normalize("NFC") : "";
+    const citedIds = claim.observationIds ?? [];
+    const validIds = citedIds.filter((id) => byId.has(id));
+    const unknownIds = citedIds.filter((id) => !byId.has(id));
+    const flags = [];
+    let coverage = 0;
+    if (text.length === 0) {
+      flags.push("empty");
+    } else {
+      if (sentenceSegments(text).length > 1)
+        flags.push("multi_sentence");
+      if (unknownIds.length > 0)
+        flags.push("unknown_citation");
+      if (validIds.length === 0) {
+        flags.push("no_citation");
+      } else {
+        const contents = validIds.map((id) => byId.get(id) ?? "");
+        for (const content of contents)
+          coverage = Math.max(coverage, claimCoverage(text, content));
+        if (coverage < COVERAGE_THRESHOLD)
+          flags.push("low_overlap");
+        else if (maxUncoveredRun(text, contents) >= UNCOVERED_RUN_MAX)
+          flags.push("partial_unsupported");
+        if (hasUnverifiedHighRiskTerm(text, contents, highRiskTerms))
+          flags.push("unverified_high_risk_term");
+      }
+    }
+    return { text, citedIds, validIds, unknownIds, coverage: Number(coverage.toFixed(3)), flags };
+  });
+  const flaggedCount = checks.filter((c) => c.flags.length > 0).length;
+  return {
+    total: checks.length,
+    flaggedCount,
+    claims: checks,
+    rulePackVersion: pack.version,
+    rulePackLevel: pack.level,
+    requiresTeacherReview: true,
+    disclaimer: DISCLAIMER
+  };
+}
+function recordGuidelines(query = {}) {
+  const pack = resolveRulePack(query);
+  return {
+    version: pack.version,
+    level: pack.level,
+    levelLabel: pack.levelLabel,
+    principles: pack.citations.map((c) => c.text),
+    citations: pack.citations,
+    source: REF_PORTAL.url,
+    references: pack.references,
+    disclaimer: DISCLAIMER_GUIDE
+  };
+}
+
+// ../packages/core/dist/access.js
+function getObservationsForIdentity(dataDir, identity, query = {}) {
+  if (identity.kind === "teaching") {
+    return getTeachingObservations(dataDir, identity.classId, identity.studentKey, query);
+  }
+  if (identity.kind === "homeroom") {
+    return getStudentObservations(dataDir, identity.studentId, query).filter((r) => !r.classId);
+  }
+  return [];
+}
+function rosterForIdentity(dataDir, identity, store) {
+  if (identity.kind === "teaching") {
+    const cls = readTeachingClasses(dataDir).classes.find((c) => c.id === identity.classId);
+    return cls ? rosterFromTeachingClass(cls, store) : [];
+  }
+  if (identity.kind === "homeroom") {
+    return readStudents(dataDir).map((s) => {
+      const entry = { token: store.getToken(s.id), names: [s.name] };
+      return s.studentNumber === void 0 ? entry : { ...entry, studentNumber: s.studentNumber };
+    });
+  }
+  return [];
+}
+
+// ../packages/core/dist/assessments.js
+var NUM = "\\d[\\d,]*(?:\\.\\d+)?(?:\\s*[~\u223C\u301C\u2010\u2011\u2013\u2014\\-]\\s*\\d[\\d,]*(?:\\.\\d+)?)?";
+var SCORE_RULES = [
+  [new RegExp(`${NUM}\\s*\uBD84\uC758\\s*${NUM}`, "g"), "[\uC810\uC218]"],
+  // 한국어 분수 'N분의 M'
+  [new RegExp(`${NUM}\\s*/\\s*${NUM}`, "g"), "[\uC810\uC218]"],
+  // 'M/N'
+  [new RegExp(`${NUM}\\s*\uC810\\s*\uB9CC\uC810`, "g"), "[\uB9CC\uC810]"],
+  [new RegExp(`${NUM}\\s*\uB9CC\uC810`, "g"), "[\uB9CC\uC810]"],
+  // '점' 없는 만점(100만점/5 만점)
+  [new RegExp(`${NUM}\\s*\uC810`, "g"), "[\uC810\uC218]"],
+  [new RegExp(`${NUM}\\s*\uB4F1\uAE09`, "g"), "[\uB4F1\uAE09]"],
+  // 라벨형: 석차/순위/등수 + (콜론·공백) + 숫자(+등) — '석차: 2'·'순위: 1'·'등수 3'·'학급석차: 4'
+  [new RegExp(`(?:\uC11D\uCC28|\uC21C\uC704|\uB4F1\uC218)\\s*[:\uFF1A]?\\s*${NUM}\\s*\uB4F1?`, "g"), "[\uC11D\uCC28]"],
+  [new RegExp(`${NUM}\\s*\uC21C\uC704`, "g"), "[\uC11D\uCC28]"],
+  // 숫자-선행 '1순위'
+  // 숫자+등/위(석차)는 모두 마스킹. 무공백 합성(3등분야/3위로/100위안)을 정규식으로 완벽 구분 불가 →
+  // 누출 0 우선 전부 치환(등급은 위에서 선처리, 숫자 없는 등교/위원 등은 미매칭 보존).
+  [new RegExp(`${NUM}\\s*\uB4F1`, "g"), "[\uC11D\uCC28]"],
+  [new RegExp(`${NUM}\\s*\uC704`, "g"), "[\uC11D\uCC28]"],
+  [new RegExp(`${NUM}\\s*(?:%|\uFF05|\uD37C\uC13C\uD2B8|\uD504\uB85C)`, "g"), "[\uBE44\uC728]"]
+];
+function maskScores(text) {
+  let out = text;
+  for (const [re, rep] of SCORE_RULES)
+    out = out.replace(re, rep);
+  return out;
+}
+function safeAchievement(level) {
+  if (level === void 0)
+    return void 0;
+  const t = level.trim();
+  if (t.length === 0 || t.length > 4 || /\d/.test(t))
+    return void 0;
+  return t;
+}
+function setIf11(target, key, value) {
+  if (value !== void 0 && value !== "")
+    target[key] = value;
+}
+function getRubricFeedback(dataDir, classId, studentKey2, maskText) {
+  const scrub = (s) => maskScores(maskText(s));
+  const { rubrics, gradings } = readRubrics(dataDir);
+  const rubricById = new Map(rubrics.map((r) => [r.id, r]));
+  return gradings.filter((g) => g.classId === classId && g.studentId === studentKey2).map((g) => {
+    const found = rubricById.get(g.rubricId);
+    const rubric = found && found.classId === classId ? found : void 0;
+    const criteria = (rubric?.criteria ?? []).slice().sort((a, b) => a.order - b.order).map((c) => {
+      const levelId = g.marks[c.id];
+      const level = levelId ? c.levels.find((l) => l.id === levelId) : void 0;
+      const fb = {
+        criterion: c.name,
+        achievedLevel: level?.name ?? null
+      };
+      if (level?.description)
+        setIf11(fb, "levelDescription", scrub(level.description));
+      const note = g.criterionNotes[c.id];
+      if (note)
+        setIf11(fb, "note", scrub(note));
+      return fb;
+    });
+    const view = {
+      rubricTitle: rubric?.title ?? "(\uC0AD\uC81C\uB41C \uD3C9\uAC00\uD45C)",
+      status: g.status,
+      criteria,
+      date: g.gradedAt
+    };
+    if (g.overallFeedback)
+      setIf11(view, "overallFeedback", scrub(g.overallFeedback));
+    return view;
+  });
+}
+function writtenParticipation(absence, scorePresent) {
+  if (absence === "absent")
+    return "\uACB0\uC2DC";
+  if (absence === "recognized")
+    return "\uC778\uC815";
+  if (absence === "exempt")
+    return "\uBA74\uC81C";
+  return scorePresent ? "\uC751\uC2DC" : "\uBBF8\uC785\uB825";
+}
+function getGradeSummary(dataDir, classId, studentKey2, maskText) {
+  const scrub = (s) => maskScores(maskText(s));
+  const cls = readTeachingClasses(dataDir).classes.find((c) => c.id === classId);
+  const student = cls?.students.find((s) => studentKey(s) === studentKey2);
+  if (!student)
+    return { achievement: [], assessments: [] };
+  const gKey = gradeStudentKey(student);
+  const ga = readGradeAnalysis(dataDir);
+  const achievement = [];
+  for (const r of ga.semesterResults) {
+    if (r.teachingClassId !== classId || r.studentKey !== gKey)
+      continue;
+    const level = safeAchievement(r.achievementLevel);
+    if (level)
+      achievement.push({ semester: r.semester, level, confirmed: r.confirmed });
+  }
+  const plans = ga.plans.filter((p) => p.teachingClassId === classId);
+  const assessments = plans.map((p) => {
+    const summary = {
+      area: p.areaName,
+      kind: p.kind === "written-exam" ? "\uC9C0\uD544" : "\uC218\uD589",
+      title: p.title,
+      participation: "\uBBF8\uC785\uB825",
+      confirmed: false
+    };
+    if (p.method)
+      setIf11(summary, "method", scrub(p.method));
+    if (p.kind === "written-exam") {
+      const w = ga.writtenResults.find((x) => x.assessmentId === p.id && x.studentKey === gKey);
+      if (w) {
+        summary["participation"] = writtenParticipation(w.absenceCode, w.scorePresent);
+        summary["confirmed"] = w.confirmed;
+      }
+    } else {
+      const pr = ga.performanceResults.find((x) => x.assessmentId === p.id && x.studentKey === gKey);
+      if (pr) {
+        summary["participation"] = pr.scorePresent ? "\uC751\uC2DC" : "\uBBF8\uC785\uB825";
+        summary["confirmed"] = pr.confirmed;
+        if (pr.evidenceNote)
+          setIf11(summary, "evidenceNote", scrub(pr.evidenceNote));
+      }
+    }
+    return summary;
+  });
+  return { achievement, assessments };
+}
+
+// ../packages/core/dist/consent.js
+import crypto4 from "node:crypto";
+import fs6 from "node:fs";
+import path5 from "node:path";
+var DATE_RE = /^\d{4}-\d{2}-\d{2}$/;
+var PURPOSE_MAX = 100;
+var OBSERVATION_READ_PURPOSE = "observation_read";
+var ConsentValidationError = class extends Error {
+  name = "ConsentValidationError";
+};
+function nowIso() {
+  return (/* @__PURE__ */ new Date()).toISOString();
+}
+var CONSENT_ID_ALPHABET = "abcdefghijklmnopqrstuvwxyz";
+function defaultConsentId() {
+  const bytes = crypto4.randomBytes(16);
+  let s = "";
+  for (const b of bytes)
+    s += CONSENT_ID_ALPHABET[b % 26];
+  return `cs_${s}`;
+}
+function notExpired(rec, t) {
+  if (rec.expiresAt === void 0)
+    return true;
+  const exp = Date.parse(rec.expiresAt);
+  const at = Date.parse(t);
+  if (Number.isNaN(exp) || Number.isNaN(at))
+    return false;
+  return at <= exp;
+}
+function isValidRecord(v) {
+  if (typeof v !== "object" || v === null)
+    return false;
+  const r = v;
+  if (typeof r["id"] !== "string" || r["id"].length === 0)
+    return false;
+  if (typeof r["studentId"] !== "string" || r["studentId"].length === 0)
+    return false;
+  if (typeof r["grantedAt"] !== "string")
+    return false;
+  for (const k of ["purpose", "from", "to", "expiresAt"]) {
+    if (r[k] !== void 0 && typeof r[k] !== "string")
+      return false;
+  }
+  return true;
+}
+var ConsentStore = class {
+  filePath;
+  genId;
+  lockTimeoutMs;
+  constructor(opts = {}) {
+    const base = opts.dir ?? resolveDataDir();
+    this.filePath = path5.join(bridgeStateDir(base), "consents.json");
+    this.genId = opts.genId ?? defaultConsentId;
+    this.lockTimeoutMs = opts.lockTimeoutMs ?? 3e3;
+  }
+  /** 파일을 새로 읽어 유효 레코드만 반환(손상 항목은 조용히 폐기). */
+  read() {
+    let parsed;
+    try {
+      parsed = JSON.parse(fs6.readFileSync(this.filePath, "utf-8"));
+    } catch {
+      return [];
+    }
+    const records = parsed?.records;
+    if (!Array.isArray(records))
+      return [];
+    return records.filter(isValidRecord);
+  }
+  /** 동기 sleep(잠금 재시도 백오프) — Atomics.wait 으로 CPU 스핀 없이 대기. */
+  sleep(ms) {
+    Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+  }
+  /**
+   * pid 가 살아있는가(존재=true). ESRCH(프로세스 없음)만 사망으로 보고, 그 외 오류(EPERM 등)는
+   * 보수적으로 생존 취급한다 — 확신 없는 회수를 막아 데이터 무결성을 우선(fail-closed).
+   */
+  pidAlive(pid) {
+    try {
+      process.kill(pid, 0);
+      return true;
+    } catch (e) {
+      return e.code !== "ESRCH";
+    }
+  }
+  /**
+   * 점유된 잠금이 안전하게 회수 가능하면 회수하고 true.
+   * - 소유자 pid 가 살아있으면 회수하지 않는다(살아있는 writer 의 락을 빼앗지 않음).
+   * - 소유자 pid 가 죽었으면 회수. (pid 재사용 시엔 보수적으로 살아있다고 보고 대기 → fail-closed)
+   * - 소유자 정보가 없고(획득 직후 크래시) 잠금이 충분히 오래(>30s)면 보수적 lease 로 회수.
+   */
+  reclaimIfStale(lockDir, ownerFile) {
+    let owner;
+    try {
+      owner = JSON.parse(fs6.readFileSync(ownerFile, "utf-8"));
+    } catch {
+      owner = void 0;
+    }
+    if (owner && typeof owner.pid === "number") {
+      if (this.pidAlive(owner.pid))
+        return false;
+      try {
+        fs6.rmSync(lockDir, { recursive: true, force: true });
+        return true;
+      } catch {
+        return false;
+      }
+    }
+    try {
+      if (Date.now() - fs6.statSync(lockDir).mtimeMs > 3e4) {
+        fs6.rmSync(lockDir, { recursive: true, force: true });
+        return true;
+      }
+    } catch {
+    }
+    return false;
+  }
+  /**
+   * 소유권 기반 배타 잠금으로 read-modify-write 를 직렬화(동시 grant/revoke 갱신 손실 방지).
+   * - 획득: 원자적 mkdir + owner 파일에 {pid, nonce} 기록.
+   * - 해제: owner.nonce 가 내 것일 때만 제거(중간에 회수당했으면 남의 락을 지우지 않음).
+   * - 회수: 소유자 pid 사망 시에만(또는 소유자 정보 없이 오래된 경우) 회수.
+   */
+  withLock(fn) {
+    const lockDir = `${this.filePath}.lock`;
+    const ownerFile = path5.join(lockDir, "owner.json");
+    const myNonce = `${process.pid}.${crypto4.randomBytes(6).toString("hex")}`;
+    const deadlineMs = Date.now() + this.lockTimeoutMs;
+    fs6.mkdirSync(path5.dirname(this.filePath), { recursive: true });
+    for (; ; ) {
+      try {
+        fs6.mkdirSync(lockDir);
+        fs6.writeFileSync(ownerFile, JSON.stringify({ pid: process.pid, nonce: myNonce }), "utf-8");
+        break;
+      } catch {
+        if (this.reclaimIfStale(lockDir, ownerFile))
+          continue;
+        if (Date.now() > deadlineMs) {
+          throw new Error("\uB3D9\uC758 \uC800\uC7A5\uC18C \uC7A0\uAE08 \uD68D\uB4DD \uC2E4\uD328(\uB2E4\uB978 \uC791\uC5C5\uC774 \uC9C4\uD589 \uC911\uC77C \uC218 \uC788\uC2B5\uB2C8\uB2E4).");
+        }
+        this.sleep(30);
+      }
+    }
+    try {
+      return fn();
+    } finally {
+      try {
+        const owner = JSON.parse(fs6.readFileSync(ownerFile, "utf-8"));
+        if (owner.nonce === myNonce)
+          fs6.rmSync(lockDir, { recursive: true, force: true });
+      } catch {
+      }
+    }
+  }
+  /** 고유 tmp + 원자적 rename(잠금 보유 중 호출). 고정 tmp 경로 충돌을 피한다. */
+  persist(records) {
+    const dir = path5.dirname(this.filePath);
+    fs6.mkdirSync(dir, { recursive: true });
+    const tmp = `${this.filePath}.${process.pid}.${crypto4.randomBytes(4).toString("hex")}.tmp`;
+    const body = { records: [...records] };
+    fs6.writeFileSync(tmp, JSON.stringify(body, null, 2), "utf-8");
+    fs6.renameSync(tmp, this.filePath);
+  }
+  /** 잠금 하에서 read → 변형 → write 를 원자적으로 수행(갱신 손실 방지). */
+  mutate(fn) {
+    this.withLock(() => {
+      this.persist(fn(this.read()));
+    });
+  }
+  /** 동의 부여(교사 권한). 검증 후 레코드 생성·영속하고 레코드를 반환. */
+  grant(input) {
+    const studentId = input.studentId;
+    if (typeof studentId !== "string" || studentId.trim().length === 0) {
+      throw new ConsentValidationError("studentId \uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.");
+    }
+    const record = {
+      id: this.genId(),
+      studentId,
+      grantedAt: nowIso()
+    };
+    if (input.purpose !== void 0) {
+      const p = input.purpose.trim();
+      if (p.length === 0 || p.length > PURPOSE_MAX) {
+        throw new ConsentValidationError(`purpose \uB294 1~${PURPOSE_MAX}\uC790\uC5EC\uC57C \uD569\uB2C8\uB2E4.`);
+      }
+      record.purpose = p;
+    }
+    for (const k of ["from", "to"]) {
+      const val = input[k];
+      if (val !== void 0) {
+        if (!DATE_RE.test(val))
+          throw new ConsentValidationError(`${k} \uB294 YYYY-MM-DD \uD615\uC2DD\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4.`);
+        record[k] = val;
+      }
+    }
+    if (record.from !== void 0 && record.to !== void 0 && record.from > record.to) {
+      throw new ConsentValidationError("from \uC740 to \uBCF4\uB2E4 \uC774\uD6C4\uC77C \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.");
+    }
+    if (input.expiresAt !== void 0 && input.ttlSeconds !== void 0) {
+      throw new ConsentValidationError("expiresAt \uC640 ttlSeconds \uB294 \uB3D9\uC2DC\uC5D0 \uC9C0\uC815\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4(\uD558\uB098\uB9CC).");
+    }
+    if (input.expiresAt !== void 0) {
+      if (Number.isNaN(Date.parse(input.expiresAt))) {
+        throw new ConsentValidationError("expiresAt \uB294 \uC720\uD6A8\uD55C ISO \uC2DC\uAC01\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4.");
+      }
+      record.expiresAt = input.expiresAt;
+    } else if (input.ttlSeconds !== void 0) {
+      if (!Number.isFinite(input.ttlSeconds) || input.ttlSeconds <= 0) {
+        throw new ConsentValidationError("ttlSeconds \uB294 \uC591\uC218\uC5EC\uC57C \uD569\uB2C8\uB2E4.");
+      }
+      record.expiresAt = new Date(Date.now() + input.ttlSeconds * 1e3).toISOString();
+    }
+    this.mutate((records) => [...records, record]);
+    return record;
+  }
+  /** 동의 철회. 제거되면 true. */
+  revoke(id) {
+    let removed = false;
+    this.mutate((records) => {
+      const next = records.filter((r) => r.id !== id);
+      removed = next.length !== records.length;
+      return next;
+    });
+    return removed;
+  }
+  /** 특정 학생의 모든 동의를 철회(교사 일괄 정리). 제거된 동의 id 목록을 반환. */
+  revokeForStudent(studentId) {
+    const removed = [];
+    this.mutate((records) => records.filter((r) => {
+      if (r.studentId === studentId) {
+        removed.push(r.id);
+        return false;
+      }
+      return true;
+    }));
+    return removed;
+  }
+  /** 모든 동의를 철회(교사 전체 초기화). 제거된 동의 id 목록을 반환. */
+  revokeAll() {
+    const removed = [];
+    this.mutate((records) => {
+      for (const r of records)
+        removed.push(r.id);
+      return [];
+    });
+    return removed;
+  }
+  /** 만료되지 않은 동의 목록(기본 현재 기준). */
+  list(at = nowIso()) {
+    return this.read().filter((r) => notExpired(r, at));
+  }
+  /** 만료된 동의까지 포함한 전체 목록(교사 점검용 — describeConsent 로 상태 표시). */
+  listAll() {
+    return this.read();
+  }
+  /**
+   * 질의에 부합하는 첫 활성 동의를 반환(없으면 undefined). 존재 확인용.
+   * 매칭: studentId 일치 + 미만료 + (레코드 purpose 미지정이면 모든 목적 허용, 지정이면 동일 목적만).
+   */
+  findActive(query) {
+    const at = query.at ?? nowIso();
+    return this.read().find((r) => matchesQuery(r, query, at));
+  }
+  /** 질의에 부합하는 모든 활성 동의(기간 합집합 산정용 — 순서 의존성 제거). */
+  findAllActive(query) {
+    const at = query.at ?? nowIso();
+    return this.read().filter((r) => matchesQuery(r, query, at));
+  }
+};
+function matchesQuery(r, query, at) {
+  return r.studentId === query.studentId && notExpired(r, at) && (r.purpose === void 0 || r.purpose === query.purpose);
+}
+function resolveContentAccess(query) {
+  if (isContentExposureEnabled(query.env ?? process.env)) {
+    return { allowed: true, via: "master" };
+  }
+  if (query.consent) {
+    const cq = { studentId: query.studentId };
+    if (query.purpose !== void 0)
+      cq.purpose = query.purpose;
+    if (query.at !== void 0)
+      cq.at = query.at;
+    const consents = query.consent.findAllActive(cq);
+    if (consents.length > 0)
+      return { allowed: true, via: "consent", consents };
+  }
+  return { allowed: false };
+}
+function isObservationDateAllowed(access, date) {
+  if (access.via === "master")
+    return true;
+  return access.consents.some((c) => (c.from === void 0 || date >= c.from) && (c.to === void 0 || date <= c.to));
+}
+function assertContentAccess(query) {
+  const access = resolveContentAccess(query);
+  if (!access.allowed) {
+    throw new ContentExposureDisabledError("\uB0B4\uC6A9 \uB178\uCD9C\uC774 \uD5C8\uAC00\uB418\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4. \uAD50\uC0AC\uAC00 CLI \uB85C \uD574\uB2F9 \uD559\uC0DD \uB3D9\uC758\uB97C \uBD80\uC5EC(ssampin consent grant)\uD558\uAC70\uB098, SSAMPIN_BRIDGE_ALLOW_CONTENT=1 \uB9C8\uC2A4\uD130 \uC2A4\uC704\uCE58\uB97C \uD65C\uC131\uD654\uD558\uC138\uC694.");
+  }
+  return access;
+}
+
+// ../packages/mcp/dist/context.js
+function createContext(dataDir = resolveDataDir()) {
+  return {
+    dataDir,
+    store: new TokenStore({ dir: dataDir }),
+    audit: new AuditLog(dataDir),
+    consent: new ConsentStore({ dir: dataDir })
+  };
+}
+
+// ../packages/mcp/dist/tools.js
+function looksLikeToken(seg) {
+  if (/^[0-9a-fA-F]{16,}$/.test(seg))
+    return true;
+  if (/^eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+(?:\.[A-Za-z0-9_-]+)?$/.test(seg))
+    return true;
+  if (/^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/.test(seg))
+    return true;
+  if (seg.length >= 16 && /^[A-Za-z0-9_-]+$/.test(seg)) {
+    const mixedAlnum = /[A-Za-z]/.test(seg) && /[0-9]/.test(seg);
+    const mixedCase = /[a-z]/.test(seg) && /[A-Z]/.test(seg);
+    if (mixedAlnum || mixedCase)
+      return true;
+  }
+  return false;
+}
+function redactPathTokens(pathname) {
+  return pathname.split("/").map((seg) => looksLikeToken(seg) ? "[\uD1A0\uD070]" : seg).join("/");
+}
+function stripUrlSecrets(url) {
+  try {
+    const u = new URL(url);
+    return `${u.protocol}//${u.host}${redactPathTokens(u.pathname)}`;
+  } catch {
+    const noFrag = url.split("#")[0] ?? url;
+    const noQuery = noFrag.split("?")[0] ?? noFrag;
+    return redactPathTokens(noQuery);
+  }
+}
+function makeDeider(roster) {
+  let masked = 0;
+  return {
+    deid: (s) => {
+      const r = deidentify(s, roster);
+      masked += sumDeid(r.stats);
+      return r.text;
+    },
+    masked: () => masked
+  };
+}
+var UnknownTokenError = class extends Error {
+  name = "UnknownTokenError";
+};
+function resolveStudentTarget(ctx, token) {
+  if (/^(?:cls|obs)_/.test(token)) {
+    throw new UnknownTokenError("\uD559\uC0DD \uD1A0\uD070\uC774 \uC544\uB2D9\uB2C8\uB2E4(\uC218\uC5C5\uBC18/\uAD00\uCC30 \uD1A0\uD070). list_students \uC758 \uD559\uC0DD token \uC744 \uC4F0\uC138\uC694.");
+  }
+  const resolved = ctx.store.resolveToken(token);
+  if (!resolved) {
+    throw new UnknownTokenError("\uC54C \uC218 \uC5C6\uB294 \uD559\uC0DD \uD1A0\uD070\uC785\uB2C8\uB2E4. \uBA3C\uC800 list_students \uB85C \uD1A0\uD070\uC744 \uD655\uC778\uD558\uC138\uC694.");
+  }
+  const identity = parseIdentity(resolved);
+  if (identity.kind === "class") {
+    throw new UnknownTokenError("\uC218\uC5C5\uBC18 \uD1A0\uD070\uC744 \uD559\uC0DD \uD1A0\uD070 \uC790\uB9AC\uC5D0 \uC0AC\uC6A9\uD588\uC2B5\uB2C8\uB2E4. list_students \uC758 \uD559\uC0DD token \uC744 \uC4F0\uC138\uC694.");
+  }
+  return { resolved, identity };
+}
+function resolveClass(ctx, classToken) {
+  const resolved = ctx.store.resolveToken(classToken);
+  if (!resolved) {
+    throw new UnknownTokenError("\uC54C \uC218 \uC5C6\uB294 \uC218\uC5C5\uBC18 \uD1A0\uD070\uC785\uB2C8\uB2E4. \uBA3C\uC800 list_classes \uB85C \uD1A0\uD070\uC744 \uD655\uC778\uD558\uC138\uC694.");
+  }
+  const identity = parseIdentity(resolved);
+  if (identity.kind !== "class") {
+    throw new UnknownTokenError("\uD559\uC0DD \uD1A0\uD070\uC744 \uC218\uC5C5\uBC18 \uD1A0\uD070 \uC790\uB9AC\uC5D0 \uC0AC\uC6A9\uD588\uC2B5\uB2C8\uB2E4. list_classes \uC758 classToken \uC744 \uC4F0\uC138\uC694.");
+  }
+  const cls = readTeachingClasses(ctx.dataDir).classes.find((c) => c.id === identity.classId);
+  if (!cls)
+    throw new UnknownTokenError("\uC218\uC5C5\uBC18\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4(\uC0AD\uC81C\uB418\uC5C8\uC744 \uC218 \uC788\uC74C).");
+  return cls;
+}
+function listClasses(ctx) {
+  const classes = readTeachingClasses(ctx.dataDir).classes;
+  const views = classes.map((c) => ({
+    classToken: ctx.store.getToken(makeClassIdentity(c.id), { prefix: "cls" }),
+    subject: c.subject,
+    name: c.name,
+    studentCount: c.students.length
+  }));
+  ctx.audit.append({ tool: "list_classes", redactionStats: { students: classes.length } });
+  return { count: views.length, classes: views };
+}
+function listStudents(ctx, args = {}) {
+  if (args.classToken !== void 0) {
+    const cls = resolveClass(ctx, args.classToken);
+    const roster2 = cls.students.map((s) => ({
+      studentNumber: s.number,
+      token: ctx.store.getToken(makeTeachingStudentIdentity(cls.id, studentKey(s)), { prefix: "tcs" })
+    }));
+    ctx.audit.append({ tool: "list_students", redactionStats: { students: roster2.length } });
+    return { count: roster2.length, students: roster2 };
+  }
+  const students = readStudents(ctx.dataDir);
+  const roster = students.map((s) => {
+    const token = ctx.store.getToken(s.id);
+    return s.studentNumber === void 0 ? { token } : { studentNumber: s.studentNumber, token };
+  });
+  ctx.audit.append({ tool: "list_students", redactionStats: { students: students.length } });
+  return { count: roster.length, students: roster };
+}
+function getSeating(ctx) {
+  const seating = readSeating(ctx.dataDir);
+  if (!seating)
+    return null;
+  let seated = 0;
+  const seats = seating.seats.map((row) => row.map((cell) => {
+    if (!cell)
+      return null;
+    seated += 1;
+    return ctx.store.getToken(cell);
+  }));
+  ctx.audit.append({ tool: "get_seating", redactionStats: { students: seated } });
+  return { rows: seating.rows, cols: seating.cols, seats };
+}
+function isYmd(v) {
+  return typeof v === "string" && /^\d{8}$/.test(v);
+}
+function getMeals(ctx, args = {}) {
+  const all = readManualMeals(ctx.dataDir);
+  const from = isYmd(args.from) ? args.from : void 0;
+  const to = isYmd(args.to) ? args.to : void 0;
+  const meals = all.filter((m) => {
+    if (from !== void 0 && m.date < from)
+      return false;
+    if (to !== void 0 && m.date > to)
+      return false;
+    return true;
+  });
+  ctx.audit.append({ tool: "get_meals", redactionStats: { items: meals.length } });
+  return { count: meals.length, meals };
+}
+var CONTENT_GATE_NOTICE = "\uC81C\uBAA9\xB7\uC124\uBA85\xB7\uC7A5\uC18C \uB4F1 \uC790\uC720\uC11C\uC220\uC740 SSAMPIN_BRIDGE_ALLOW_CONTENT=1 \uB9C8\uC2A4\uD130 \uC2A4\uC704\uCE58\uAC00 \uCF1C\uC9C4 \uACBD\uC6B0\uC5D0\uB9CC \uB178\uCD9C\uB429\uB2C8\uB2E4(\uD604\uC7AC \uBBF8\uB178\uCD9C). \uB0A0\uC9DC\xB7\uAD50\uC2DC \uB4F1 \uBE44\uC2DD\uBCC4 \uBA54\uD0C0\uB9CC \uBC18\uD658\uD588\uC2B5\uB2C8\uB2E4.";
+var CONTENT_SHOWN_NOTICE = "\uC790\uC720\uC11C\uC220\uC774 \uD3EC\uD568\uB418\uC5B4 \uC788\uC2B5\uB2C8\uB2E4. \uD559\uC0DD \uC2E4\uBA85\xB7\uC5F0\uB77D\uCC98\xB7\uC0DD\uC77C\uC740 \uB9C8\uC2A4\uD0B9\uB418\uC9C0\uB9CC \uB9E5\uB77D\uC73C\uB85C \uC7AC\uC2DD\uBCC4\uB420 \uC218 \uC788\uC73C\uBBC0\uB85C \uAD50\uC0AC \uAC80\uD1A0\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.";
+function sumDeid(stats) {
+  return stats.names + stats.phones + stats.rrns + stats.birthDates + stats.studentNumbers;
+}
+function buildFullRoster(ctx) {
+  const entries = [];
+  for (const s of readStudents(ctx.dataDir)) {
+    if (!s.name)
+      continue;
+    const e = {
+      token: ctx.store.getToken(s.id),
+      names: [s.name]
+    };
+    if (s.studentNumber !== void 0)
+      e.studentNumber = s.studentNumber;
+    entries.push(e);
+  }
+  for (const c of readTeachingClasses(ctx.dataDir).classes) {
+    for (const st of c.students) {
+      if (!st.name)
+        continue;
+      const e = {
+        token: ctx.store.getToken(makeTeachingStudentIdentity(c.id, studentKey(st)), { prefix: "tcs" }),
+        names: [st.name]
+      };
+      if (st.number !== void 0)
+        e.studentNumber = st.number;
+      entries.push(e);
+    }
+  }
+  return entries;
+}
+function isYmdDash(v) {
+  return typeof v === "string" && /^\d{4}-\d{2}-\d{2}$/.test(v);
+}
+function safeEventView(e) {
+  const v = { date: e.date };
+  const copy = (k) => {
+    const val = e[k];
+    if (val !== void 0)
+      v[k] = val;
+  };
+  copy("endDate");
+  copy("category");
+  copy("time");
+  copy("startTime");
+  copy("endTime");
+  copy("period");
+  copy("periodEnd");
+  copy("recurrence");
+  copy("isDDay");
+  return v;
+}
+function getEvents(ctx, args = {}) {
+  const all = readEvents(ctx.dataDir);
+  const from = isYmdDash(args.from) ? args.from : void 0;
+  const to = isYmdDash(args.to) ? args.to : void 0;
+  const filtered = all.filter((e) => {
+    const end = e.endDate ?? e.date;
+    if (from !== void 0 && end < from)
+      return false;
+    if (to !== void 0 && e.date > to)
+      return false;
+    return true;
+  });
+  const contentOn = isContentExposureEnabled();
+  const roster = contentOn ? buildFullRoster(ctx) : [];
+  let masked = 0;
+  const events = filtered.map((e) => {
+    const v = safeEventView(e);
+    if (contentOn) {
+      const t = deidentify(e.title, roster);
+      masked += sumDeid(t.stats);
+      v["title"] = t.text;
+      if (e.description !== void 0) {
+        const d = deidentify(e.description, roster);
+        masked += sumDeid(d.stats);
+        v["description"] = d.text;
+      }
+      if (e.location !== void 0) {
+        const l = deidentify(e.location, roster);
+        masked += sumDeid(l.stats);
+        v["location"] = l.text;
+      }
+    }
+    return v;
+  });
+  ctx.audit.append({ tool: "get_events", redactionStats: { items: events.length, names: masked } });
+  return {
+    count: events.length,
+    contentIncluded: contentOn,
+    notice: contentOn ? CONTENT_SHOWN_NOTICE : CONTENT_GATE_NOTICE,
+    events
+  };
+}
+function getDdays(ctx) {
+  const all = readDdays(ctx.dataDir);
+  const contentOn = isContentExposureEnabled();
+  const roster = contentOn ? buildFullRoster(ctx) : [];
+  let masked = 0;
+  const ddays = all.map((d) => {
+    const v = { date: d.date };
+    if (d.emoji !== void 0)
+      v["emoji"] = d.emoji;
+    if (d.color !== void 0)
+      v["color"] = d.color;
+    if (d.pinned !== void 0)
+      v["pinned"] = d.pinned;
+    if (contentOn) {
+      const t = deidentify(d.title, roster);
+      masked += sumDeid(t.stats);
+      v["title"] = t.text;
+    }
+    return v;
+  });
+  ctx.audit.append({ tool: "get_ddays", redactionStats: { items: ddays.length, names: masked } });
+  return {
+    count: ddays.length,
+    contentIncluded: contentOn,
+    notice: contentOn ? CONTENT_SHOWN_NOTICE : CONTENT_GATE_NOTICE,
+    ddays
+  };
+}
+function safeTodoView(t) {
+  const v = {
+    status: effectiveTodoStatus(t),
+    completed: t.completed
+  };
+  const copy = (k) => {
+    const val = t[k];
+    if (val !== void 0)
+      v[k] = val;
+  };
+  copy("dueDate");
+  copy("startDate");
+  copy("time");
+  copy("priority");
+  copy("category");
+  copy("recurrence");
+  copy("archivedAt");
+  copy("subTaskCount");
+  copy("subTaskDone");
+  return v;
+}
+function getTodos(ctx, args = {}) {
+  const all = readTodos(ctx.dataDir);
+  const dueBefore = isYmdDash(args.dueBefore) ? args.dueBefore : void 0;
+  const statusFilter = args.status === "todo" || args.status === "inProgress" || args.status === "done" ? args.status : void 0;
+  const filtered = all.filter((t) => {
+    if (!args.includeArchived && t.archivedAt !== void 0)
+      return false;
+    if (statusFilter !== void 0 && effectiveTodoStatus(t) !== statusFilter)
+      return false;
+    if (dueBefore !== void 0 && (t.dueDate === void 0 || t.dueDate > dueBefore))
+      return false;
+    return true;
+  });
+  const contentOn = isContentExposureEnabled();
+  const roster = contentOn ? buildFullRoster(ctx) : [];
+  let masked = 0;
+  const todos = filtered.map((t) => {
+    const v = safeTodoView(t);
+    if (contentOn) {
+      const tx = deidentify(t.text, roster);
+      masked += sumDeid(tx.stats);
+      v["text"] = tx.text;
+      if (t.notes !== void 0) {
+        const n = deidentify(t.notes, roster);
+        masked += sumDeid(n.stats);
+        v["notes"] = n.text;
+      }
+    }
+    return v;
+  });
+  ctx.audit.append({ tool: "get_todos", redactionStats: { items: todos.length, names: masked } });
+  return {
+    count: todos.length,
+    contentIncluded: contentOn,
+    notice: contentOn ? CONTENT_SHOWN_NOTICE : CONTENT_GATE_NOTICE,
+    todos
+  };
+}
+function getSchedule(ctx, args) {
+  const kind = args.kind;
+  if (kind === "class") {
+    const slots2 = readClassSchedule(ctx.dataDir);
+    ctx.audit.append({ tool: "get_schedule", redactionStats: { items: slots2.length } });
+    return { kind, count: slots2.length, slots: slots2 };
+  }
+  if (kind === "teacher") {
+    const slots2 = readTeacherSchedule(ctx.dataDir);
+    ctx.audit.append({ tool: "get_schedule", redactionStats: { items: slots2.length } });
+    return { kind, count: slots2.length, slots: slots2 };
+  }
+  const all = readTimetableOverrides(ctx.dataDir);
+  const contentOn = isContentExposureEnabled();
+  const roster = contentOn ? buildFullRoster(ctx) : [];
+  let masked = 0;
+  const slots = all.map((o) => {
+    const v = { date: o.date, period: o.period };
+    if (o.subject !== void 0)
+      v["subject"] = o.subject;
+    if (o.classroom !== void 0)
+      v["classroom"] = o.classroom;
+    if (o.kind !== void 0)
+      v["kind"] = o.kind;
+    if (o.scope !== void 0)
+      v["scope"] = o.scope;
+    if (o.substituteTeacher !== void 0)
+      v["substituteTeacher"] = o.substituteTeacher;
+    if (contentOn && o.reason !== void 0) {
+      const r = deidentify(o.reason, roster);
+      masked += sumDeid(r.stats);
+      v["reason"] = r.text;
+    }
+    return v;
+  });
+  ctx.audit.append({ tool: "get_schedule", redactionStats: { items: slots.length, names: masked } });
+  return {
+    kind,
+    count: slots.length,
+    contentIncluded: contentOn,
+    notice: contentOn ? CONTENT_SHOWN_NOTICE : CONTENT_GATE_NOTICE,
+    slots
+  };
+}
+function getNotes(ctx) {
+  const notebooks = readNotebooks(ctx.dataDir).filter((n) => !n.archived);
+  const sections = readNoteSections(ctx.dataDir);
+  const pages = readNotePages(ctx.dataDir);
+  const counts = { notebooks: notebooks.length, sections: sections.length, pages: pages.length };
+  if (!isContentExposureEnabled()) {
+    ctx.audit.append({ tool: "get_notes", redactionStats: { items: pages.length } });
+    return { contentIncluded: false, notice: CONTENT_GATE_NOTICE, counts };
+  }
+  const { deid, masked } = makeDeider(buildFullRoster(ctx));
+  const pagesBySection = /* @__PURE__ */ new Map();
+  for (const p of pages) {
+    const view = {
+      title: deid(p.title),
+      tags: p.tags.map(deid),
+      pinned: p.pinned,
+      ...p.updatedAt !== void 0 ? { updatedAt: p.updatedAt } : {}
+    };
+    const arr = pagesBySection.get(p.sectionId) ?? [];
+    arr.push(view);
+    pagesBySection.set(p.sectionId, arr);
+  }
+  const sectionsByNotebook = /* @__PURE__ */ new Map();
+  for (const s of [...sections].sort((a, b) => a.order - b.order)) {
+    const arr = sectionsByNotebook.get(s.notebookId) ?? [];
+    arr.push({ title: deid(s.title), pages: pagesBySection.get(s.id) ?? [] });
+    sectionsByNotebook.set(s.notebookId, arr);
+  }
+  const notebookViews = [...notebooks].sort((a, b) => a.order - b.order).map((n) => ({ title: deid(n.title), sections: sectionsByNotebook.get(n.id) ?? [] }));
+  ctx.audit.append({ tool: "get_notes", redactionStats: { items: pages.length, names: masked() } });
+  return { contentIncluded: true, notice: CONTENT_SHOWN_NOTICE, counts, notebooks: notebookViews };
+}
+function getMemos(ctx) {
+  const memos = readMemos(ctx.dataDir).filter((m) => !m.archived);
+  if (!isContentExposureEnabled()) {
+    ctx.audit.append({ tool: "get_memos", redactionStats: { items: memos.length } });
+    return { contentIncluded: false, notice: CONTENT_GATE_NOTICE, count: memos.length };
+  }
+  const { deid, masked } = makeDeider(buildFullRoster(ctx));
+  const views = memos.map((m) => ({
+    text: deid(m.text),
+    ...m.color !== void 0 ? { color: m.color } : {}
+  }));
+  ctx.audit.append({ tool: "get_memos", redactionStats: { items: memos.length, names: masked() } });
+  return { contentIncluded: true, notice: CONTENT_SHOWN_NOTICE, count: memos.length, memos: views };
+}
+function getBookmarks(ctx) {
+  const { groups, bookmarks } = readBookmarks(ctx.dataDir);
+  const activeGroups = groups.filter((g) => !g.archived);
+  if (!isContentExposureEnabled()) {
+    ctx.audit.append({ tool: "get_bookmarks", redactionStats: { items: bookmarks.length } });
+    return { contentIncluded: false, notice: CONTENT_GATE_NOTICE, count: bookmarks.length };
+  }
+  const { deid, masked } = makeDeider(buildFullRoster(ctx));
+  const byGroup = /* @__PURE__ */ new Map();
+  for (const b of bookmarks) {
+    const arr = byGroup.get(b.groupId) ?? [];
+    arr.push({ name: deid(b.name), url: deid(stripUrlSecrets(b.url)) });
+    byGroup.set(b.groupId, arr);
+  }
+  const groupViews = [...activeGroups].sort((a, b) => a.order - b.order).map((g) => ({ name: deid(g.name), bookmarks: byGroup.get(g.id) ?? [] }));
+  ctx.audit.append({ tool: "get_bookmarks", redactionStats: { items: bookmarks.length, names: masked() } });
+  return { contentIncluded: true, notice: CONTENT_SHOWN_NOTICE, count: bookmarks.length, groups: groupViews };
+}
+async function addObservation(ctx, args) {
+  assertWriteEnabled();
+  const { identity } = resolveStudentTarget(ctx, args.studentToken);
+  const input = { content: args.content };
+  if (identity.kind === "teaching") {
+    input["studentId"] = identity.studentKey;
+    input["classId"] = identity.classId;
+  } else {
+    input["studentId"] = identity.studentId;
+  }
+  if (args.tags !== void 0)
+    input["tags"] = args.tags;
+  if (args.date !== void 0)
+    input["date"] = args.date;
+  if (args.idempotencyKey !== void 0)
+    input["clientKey"] = args.idempotencyKey;
+  const record = await appendObservation(ctx.dataDir, input);
+  ctx.audit.append({ tool: "add_observation", recordIds: [record.id], redactionStats: { observations: 1 } });
+  return {
+    ok: true,
+    token: args.studentToken,
+    observationRef: ctx.audit.hashRecordId(record.id),
+    date: record.date,
+    contentLength: record.content.length
+  };
+}
+var SENSITIVE_NOTICE = "\uB3D9\uC758 \uD558\uC5D0 \uB178\uCD9C\uB41C \uBBFC\uAC10 \uADFC\uAC70 \uC6D0\uBB38\uC785\uB2C8\uB2E4. \uC9C1\uC811 \uC2DD\uBCC4\uC790(\uC2E4\uBA85/\uC5F0\uB77D\uCC98/\uC0DD\uC77C/\uD559\uBC88)\uB9CC \uB9C8\uC2A4\uD0B9\uB418\uBA70, \uC8FC\uC18C\xB7\uAC00\uC871\uAD00\uACC4\xB7\uAC74\uAC15\xB7\uC0C1\uB2F4\xB7\uD2B9\uC815 \uD65C\uB3D9/\uC7A5\uC18C \uB4F1 \uB9E5\uB77D\uC73C\uB85C \uC7AC\uC2DD\uBCC4\uB420 \uC218 \uC788\uC2B5\uB2C8\uB2E4. \uC775\uBA85\uD654\uB41C \uB370\uC774\uD130\uAC00 \uC544\uB2C8\uBBC0\uB85C \uAD50\uC0AC \uAC80\uD1A0\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.";
+function getObservations(ctx, args) {
+  const { resolved, identity } = resolveStudentTarget(ctx, args.studentToken);
+  const access = assertContentAccess({
+    studentId: resolved,
+    purpose: OBSERVATION_READ_PURPOSE,
+    consent: ctx.consent
+  });
+  const roster = rosterForIdentity(ctx.dataDir, identity, ctx.store);
+  const query = {};
+  if (args.from !== void 0)
+    query.from = args.from;
+  if (args.to !== void 0)
+    query.to = args.to;
+  const records = getObservationsForIdentity(ctx.dataDir, identity, query).filter((r) => isObservationDateAllowed(access, r.date));
+  let masked = 0;
+  const observations = records.map((r) => {
+    const { text, stats } = deidentify(r.content, roster);
+    masked += stats.names + stats.phones + stats.rrns + stats.birthDates + stats.studentNumbers;
+    const tags = r.tags.map((t) => deidentify(t, roster).text);
+    return { observationId: ctx.store.getToken(makeObservationIdentity(r.id), { prefix: "obs" }), date: r.date, tags, content: text };
+  });
+  ctx.audit.append({
+    tool: "get_observations",
+    ...access.via === "consent" ? { consentId: access.consents.map((c) => c.id).join(",") } : {},
+    recordIds: records.map((r) => r.id),
+    redactionStats: { observations: records.length, names: masked }
+  });
+  return { count: observations.length, observations, notice: SENSITIVE_NOTICE };
+}
+function checkRecordDraft(ctx, args) {
+  const { identity } = resolveStudentTarget(ctx, args.studentToken);
+  const query = {};
+  if (args.from !== void 0)
+    query.from = args.from;
+  if (args.to !== void 0)
+    query.to = args.to;
+  const records = getObservationsForIdentity(ctx.dataDir, identity, query);
+  const tokenized = records.map((o) => ({ id: ctx.store.getToken(makeObservationIdentity(o.id), { prefix: "obs" }), content: o.content }));
+  const rulePack = {};
+  if (args.level !== void 0)
+    rulePack.level = args.level;
+  if (args.year !== void 0)
+    rulePack.year = args.year;
+  const report = checkGrounding(args.claims, tokenized, rulePack);
+  ctx.audit.append({
+    tool: "check_record_draft",
+    recordIds: records.map((o) => o.id),
+    redactionStats: { observations: records.length },
+    validatorResult: report.flaggedCount === 0 ? "no_flags" : `flagged:${report.flaggedCount}`,
+    rulePackVersion: report.rulePackVersion
+  });
+  return report;
+}
+var ASSESSMENT_NOTICE = "\uC810\uC218\xB7\uC11D\uCC28\xB7\uD658\uC0B0\uC810\uC740 \uC81C\uC678\uB41C \uC9C8\uC801 \uC815\uBCF4\uC785\uB2C8\uB2E4(\uC0DD\uAE30\uBD80 \uC785\uB825 \uAE08\uC9C0 \uD56D\uBAA9). \uB3C4\uB2EC \uC218\uC900\xB7\uC131\uCDE8\uB3C4\xB7\uBA54\uBAA8\uB294 \uC11C\uC220\uD615 \uC5ED\uB7C9\xB7\uD0DC\uB3C4 \uD45C\uD604\uC758 \uADFC\uAC70\uB85C\uB9CC \uD65C\uC6A9\uD558\uACE0, \uC810\uC218/\uC11D\uCC28\uB97C \uC0DD\uAE30\uBD80\uC5D0 \uC801\uC9C0 \uB9C8\uC138\uC694. \uAD50\uC0AC \uCD5C\uC885 \uAC80\uD1A0 \uD544\uC694.";
+function resolveTeachingTarget(ctx, token) {
+  const { resolved, identity } = resolveStudentTarget(ctx, token);
+  if (identity.kind !== "teaching") {
+    throw new UnknownTokenError("\uC218\uD589\uD3C9\uAC00\xB7\uC131\uC801\uC740 \uC218\uC5C5\uBC18 \uD559\uC0DD \uD1A0\uD070\uC73C\uB85C \uC870\uD68C\uD558\uC138\uC694. list_classes \u2192 list_students(classToken) \uC758 token \uC744 \uC4F0\uC138\uC694.");
+  }
+  return { classId: identity.classId, studentKey: identity.studentKey, resolved };
+}
+function getPerformanceFeedback(ctx, args) {
+  const { classId, studentKey: studentKey2, resolved } = resolveTeachingTarget(ctx, args.studentToken);
+  const access = assertContentAccess({ studentId: resolved, purpose: OBSERVATION_READ_PURPOSE, consent: ctx.consent });
+  const roster = rosterForIdentity(ctx.dataDir, { kind: "teaching", classId, studentKey: studentKey2 }, ctx.store);
+  const items = getRubricFeedback(ctx.dataDir, classId, studentKey2, (s) => deidentify(s, roster).text);
+  ctx.audit.append({
+    tool: "get_performance_feedback",
+    ...access.via === "consent" ? { consentId: access.consents.map((c) => c.id).join(",") } : {},
+    redactionStats: { observations: items.length }
+  });
+  return { count: items.length, items, notice: ASSESSMENT_NOTICE };
+}
+function getGradeSummaryTool(ctx, args) {
+  const { classId, studentKey: studentKey2, resolved } = resolveTeachingTarget(ctx, args.studentToken);
+  const access = assertContentAccess({ studentId: resolved, purpose: OBSERVATION_READ_PURPOSE, consent: ctx.consent });
+  const roster = rosterForIdentity(ctx.dataDir, { kind: "teaching", classId, studentKey: studentKey2 }, ctx.store);
+  const summary = getGradeSummary(ctx.dataDir, classId, studentKey2, (s) => deidentify(s, roster).text);
+  ctx.audit.append({
+    tool: "get_grade_summary",
+    ...access.via === "consent" ? { consentId: access.consents.map((c) => c.id).join(",") } : {},
+    redactionStats: { observations: summary.assessments.length }
+  });
+  return { ...summary, notice: ASSESSMENT_NOTICE };
+}
+function getRecordGuidelines(args = {}) {
+  const rulePack = {};
+  if (args.level !== void 0)
+    rulePack.level = args.level;
+  if (args.year !== void 0)
+    rulePack.year = args.year;
+  return recordGuidelines(rulePack);
+}
+
+// ../packages/mcp/dist/server.js
+async function runTool(label, produce) {
+  try {
+    const value = await produce();
+    return { content: [{ type: "text", text: JSON.stringify(value, null, 2) }] };
+  } catch (err) {
+    process.stderr.write(`[ssampin-mcp] tool '${label}' \uC2E4\uD328: ${err instanceof Error ? err.name : "Error"}
+`);
+    return { content: [{ type: "text", text: "\uB3C4\uAD6C \uC2E4\uD589 \uC911 \uC624\uB958\uAC00 \uBC1C\uC0DD\uD588\uC2B5\uB2C8\uB2E4." }], isError: true };
+  }
+}
+function createSsampinMcpServer(opts = {}) {
+  const ctx = createContext(opts.dataDir);
+  const server = new McpServer({ name: "ssampin-ai-bridge", version: "0.0.0" });
+  server.registerTool("list_classes", {
+    title: "\uC218\uC5C5\uBC18(\uAD50\uACFC\uBC18) \uBAA9\uB85D",
+    description: "\uB2F4\uC784 \uD559\uAE09 \uC678\uC5D0 \uAD50\uC0AC\uAC00 \uAC00\uB974\uCE58\uB294 \uC218\uC5C5\uBC18(\uAD50\uACFC\uBC18) \uBAA9\uB85D\uC744 \uACFC\uBAA9\xB7\uBC18\uC774\uB984 + \uBD88\uD22C\uBA85 classToken \uC73C\uB85C \uBC18\uD658\uD569\uB2C8\uB2E4. \uD559\uC0DD \uC2E4\uBA85\xB7\uBA54\uBAA8\uB294 \uD3EC\uD568\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. \uD2B9\uC815 \uC218\uC5C5\uBC18\uC758 \uD559\uC0DD\uC744 \uBCF4\uB824\uBA74 \uC774 classToken \uC744 list_students \uC758 classToken \uC778\uC790\uB85C \uB118\uAE30\uC138\uC694. \uC77D\uAE30 \uC804\uC6A9.",
+    inputSchema: {},
+    annotations: { readOnlyHint: true }
+  }, async () => runTool("list_classes", () => listClasses(ctx)));
+  server.registerTool("list_students", {
+    title: "\uD559\uC0DD \uBA85\uB2E8(\uBC88\uD638+\uAC00\uBA85)",
+    description: '\uD559\uC0DD \uBA85\uB2E8\uC744 "\uBC88\uD638 + \uBD88\uD22C\uBA85 \uD1A0\uD070"\uC73C\uB85C \uBC18\uD658\uD569\uB2C8\uB2E4. classToken \uBBF8\uC9C0\uC815 \uC2DC \uB2F4\uC784 \uD559\uAE09(\uD559\uBC88), classToken \uC9C0\uC815 \uC2DC \uD574\uB2F9 \uC218\uC5C5\uBC18(\uBC18 \uB0B4 \uBC88\uD638)\uC744 \uBC18\uD658\uD569\uB2C8\uB2E4. \uAD50\uC0AC\uAC00 \uD1A0\uD070\uC744 \uC678\uC6B8 \uC218 \uC5C6\uC73C\uBBC0\uB85C \uBA85\uB2E8\uC5D0\uB9CC \uBC88\uD638\uB97C \uB178\uCD9C\uD558\uBA70, \uC2E4\uBA85\xB7\uC5F0\uB77D\uCC98\xB7\uC0DD\uB144\uC6D4\uC77C\xB7\uBA54\uBAA8\uB294 \uD3EC\uD568\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. \uBC88\uD638\uB85C \uD559\uC0DD\uC744 \uCC3E\uC544 \uAC19\uC740 \uD589\uC758 token \uC73C\uB85C add_observation/get_observations \uD558\uC138\uC694. \uC77D\uAE30 \uC804\uC6A9.',
+    inputSchema: {
+      classToken: z.string().optional().describe("list_classes \uAC00 \uBC18\uD658\uD55C \uC218\uC5C5\uBC18 \uD1A0\uD070(\uBBF8\uC9C0\uC815 \uC2DC \uB2F4\uC784 \uD559\uAE09)")
+    },
+    annotations: { readOnlyHint: true }
+  }, async (args) => runTool("list_students", () => listStudents(ctx, args)));
+  server.registerTool("get_seating", {
+    title: "\uC88C\uC11D \uBC30\uCE58(\uAC00\uBA85)",
+    description: "\uD604\uC7AC \uC88C\uC11D \uBC30\uCE58\uB97C \uD559\uC0DD \uD1A0\uD070 \uACA9\uC790\uB85C \uBC18\uD658\uD569\uB2C8\uB2E4(\uBE48 \uC88C\uC11D\uC740 null). \uC2E4\uBA85 \uBBF8\uD3EC\uD568, \uC77D\uAE30 \uC804\uC6A9.",
+    inputSchema: {},
+    annotations: { readOnlyHint: true }
+  }, async () => runTool("get_seating", () => getSeating(ctx)));
+  server.registerTool("get_meals", {
+    title: "\uAE09\uC2DD \uC2DD\uB2E8(\uBA54\uB274\xB7\uC54C\uB808\uB974\uAE30)",
+    description: "\uC218\uB3D9 \uC785\uB825 \uAE09\uC2DD \uC2DD\uB2E8\uC744 \uB0A0\uC9DC\xB7\uB07C\uB2C8\uBCC4 \uBA54\uB274\uC640 \uC54C\uB808\uB974\uAE30 \uCF54\uB4DC\uB85C \uBC18\uD658\uD569\uB2C8\uB2E4. \uD559\uC0DD \uAC1C\uC778\uC815\uBCF4\uB294 \uD3EC\uD568\uD558\uC9C0 \uC54A\uC73C\uBA70(\uBA54\uB274 \uC815\uBCF4\uB9CC), \uB3D9\uC758\xB7\uAC8C\uC774\uD2B8 \uC5C6\uC774 \uC77D\uC744 \uC218 \uC788\uC2B5\uB2C8\uB2E4. from/to \uB294 YYYYMMDD(8\uC790\uB9AC). \uC77D\uAE30 \uC804\uC6A9.",
+    inputSchema: {
+      from: z.string().regex(/^\d{8}$/).optional().describe("\uC2DC\uC791\uC77C YYYYMMDD(\uD3EC\uD568)"),
+      to: z.string().regex(/^\d{8}$/).optional().describe("\uC885\uB8CC\uC77C YYYYMMDD(\uD3EC\uD568)")
+    },
+    annotations: { readOnlyHint: true }
+  }, async (args) => runTool("get_meals", () => getMeals(ctx, args)));
+  server.registerTool("get_events", {
+    title: "\uD559\uC0AC\xB7\uD559\uAE09 \uC77C\uC815",
+    description: "\uC77C\uC815\uC744 \uB0A0\uC9DC\xB7\uAD50\uC2DC\xB7\uCE74\uD14C\uACE0\uB9AC \uB4F1 \uBE44\uC2DD\uBCC4 \uBA54\uD0C0\uB85C \uBC18\uD658\uD569\uB2C8\uB2E4. \uC81C\uBAA9\xB7\uC124\uBA85\xB7\uC7A5\uC18C \uB4F1 \uC790\uC720\uC11C\uC220\uC740 SSAMPIN_BRIDGE_ALLOW_CONTENT=1 \uB9C8\uC2A4\uD130 \uC2A4\uC704\uCE58\uAC00 \uCF1C\uC9C4 \uACBD\uC6B0\uC5D0\uB9CC \uD559\uC0DD \uC2E4\uBA85 \uD0C8\uC2DD\uBCC4 \uD6C4 \uD3EC\uD568\uB429\uB2C8\uB2E4(\uB9E5\uB77D \uC7AC\uC2DD\uBCC4 \uAC00\uB2A5 \u2014 \uAD50\uC0AC \uAC80\uD1A0 \uD544\uC694). from/to \uB294 YYYY-MM-DD. \uC77D\uAE30 \uC804\uC6A9.",
+    inputSchema: {
+      from: z.string().regex(/^\d{4}-\d{2}-\d{2}$/).optional().describe("\uC2DC\uC791\uC77C YYYY-MM-DD(\uD3EC\uD568)"),
+      to: z.string().regex(/^\d{4}-\d{2}-\d{2}$/).optional().describe("\uC885\uB8CC\uC77C YYYY-MM-DD(\uD3EC\uD568)")
+    },
+    annotations: { readOnlyHint: true }
+  }, async (args) => runTool("get_events", () => getEvents(ctx, args)));
+  server.registerTool("get_ddays", {
+    title: "\uB514\uB370\uC774(D-Day) \uBAA9\uB85D",
+    description: "\uB514\uB370\uC774 \uD56D\uBAA9\uC744 \uBAA9\uD45C\uC77C\xB7\uC774\uBAA8\uC9C0\xB7\uC0C9\uC0C1\uC73C\uB85C \uBC18\uD658\uD569\uB2C8\uB2E4. \uC81C\uBAA9(\uC790\uC720\uC11C\uC220)\uC740 SSAMPIN_BRIDGE_ALLOW_CONTENT=1 \uC77C \uB54C\uB9CC \uD0C8\uC2DD\uBCC4 \uD6C4 \uD3EC\uD568\uB429\uB2C8\uB2E4. \uC77D\uAE30 \uC804\uC6A9.",
+    inputSchema: {},
+    annotations: { readOnlyHint: true }
+  }, async () => runTool("get_ddays", () => getDdays(ctx)));
+  server.registerTool("get_todos", {
+    title: "\uD560\uC77C(To-do) \uBAA9\uB85D",
+    description: "\uD560\uC77C\uC744 \uC0C1\uD0DC\xB7\uB9C8\uAC10\uC77C\xB7\uC6B0\uC120\uC21C\uC704\xB7\uCE74\uD14C\uACE0\uB9AC \uB4F1 \uBE44\uC2DD\uBCC4 \uBA54\uD0C0\uB85C \uBC18\uD658\uD569\uB2C8\uB2E4. \uD560\uC77C \uB0B4\uC6A9(text)\xB7\uBA54\uBAA8(notes)\uB294 SSAMPIN_BRIDGE_ALLOW_CONTENT=1 \uB9C8\uC2A4\uD130 \uC2A4\uC704\uCE58\uAC00 \uCF1C\uC9C4 \uACBD\uC6B0\uC5D0\uB9CC \uD559\uC0DD \uC2E4\uBA85 \uD0C8\uC2DD\uBCC4 \uD6C4 \uD3EC\uD568\uB429\uB2C8\uB2E4. status(todo|inProgress|done)\uB85C \uC0C1\uD0DC \uD544\uD130, dueBefore(YYYY-MM-DD)\uB85C \uB9C8\uAC10 \uC784\uBC15 \uD544\uD130. \uC544\uCE74\uC774\uBE0C \uD56D\uBAA9\uC740 \uAE30\uBCF8 \uC81C\uC678. \uC77D\uAE30 \uC804\uC6A9.",
+    inputSchema: {
+      status: z.enum(["todo", "inProgress", "done"]).optional().describe("\uC0C1\uD0DC \uD544\uD130"),
+      dueBefore: z.string().regex(/^\d{4}-\d{2}-\d{2}$/).optional().describe("\uC774 \uB0A0\uC9DC \uC774\uC804(\uD3EC\uD568) \uB9C8\uAC10\uB9CC"),
+      includeArchived: z.boolean().optional().describe("\uC544\uCE74\uC774\uBE0C \uD3EC\uD568(\uAE30\uBCF8 false)")
+    },
+    annotations: { readOnlyHint: true }
+  }, async (args) => runTool("get_todos", () => getTodos(ctx, args)));
+  server.registerTool("get_schedule", {
+    title: "\uC2DC\uAC04\uD45C\xB7\uC77C\uACFC",
+    description: "\uC2DC\uAC04\uD45C\uB97C \uC885\uB958\uBCC4\uB85C \uBC18\uD658\uD569\uB2C8\uB2E4. kind=class(\uC6B0\uB9AC \uBC18 \uC2DC\uAC04\uD45C: \uC694\uC77C\xB7\uAD50\uC2DC\xB7\uACFC\uBAA9\xB7\uAD50\uC0AC), teacher(\uB0B4 \uC2DC\uAC04\uD45C: \uC694\uC77C\xB7\uAD50\uC2DC\xB7\uACFC\uBAA9\xB7\uAD50\uC2E4), overrides(\uBCC0\uB3D9 \uC2DC\uAC04\uD45C: \uB0A0\uC9DC\xB7\uAD50\uC2DC\xB7\uACFC\uBAA9\xB7\uC885\uB958\xB7\uBCF4\uAC15\uAD50\uC0AC). class/teacher \uB294 \uAC8C\uC774\uD2B8 \uC5C6\uC774 \uC77D\uD788\uBA70, overrides \uC758 \uBCC0\uACBD \uC0AC\uC720(reason)\uB9CC SSAMPIN_BRIDGE_ALLOW_CONTENT=1 \uC77C \uB54C \uD0C8\uC2DD\uBCC4 \uD6C4 \uD3EC\uD568\uB429\uB2C8\uB2E4. \uC77D\uAE30 \uC804\uC6A9.",
+    inputSchema: {
+      kind: z.enum(["class", "teacher", "overrides"]).describe("class=\uC6B0\uB9AC \uBC18 | teacher=\uB0B4 \uC2DC\uAC04\uD45C | overrides=\uBCC0\uB3D9")
+    },
+    annotations: { readOnlyHint: true }
+  }, async (args) => runTool("get_schedule", () => getSchedule(ctx, args)));
+  server.registerTool("get_notes", {
+    title: "\uB178\uD2B8 \uAD6C\uC870(\uB178\uD2B8\uBD81\xB7\uC139\uC158\xB7\uD398\uC774\uC9C0 \uC81C\uBAA9)",
+    description: "\uB178\uD2B8\uC758 \uAD6C\uC870(\uB178\uD2B8\uBD81\u2192\uC139\uC158\u2192\uD398\uC774\uC9C0)\uC640 \uC81C\uBAA9\xB7\uD0DC\uADF8\uB97C \uBC18\uD658\uD569\uB2C8\uB2E4. \uBCF8\uBB38\uC740 \uD3EC\uD568\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. \uC81C\uBAA9\xB7\uD0DC\uADF8\uB294 \uC790\uC720\uC11C\uC220\uC774\uB77C SSAMPIN_BRIDGE_ALLOW_CONTENT=1 \uB9C8\uC2A4\uD130 \uC2A4\uC704\uCE58\uAC00 \uCF1C\uC9C4 \uACBD\uC6B0\uC5D0\uB9CC \uD559\uC0DD \uC2E4\uBA85 \uD0C8\uC2DD\uBCC4 \uD6C4 \uB178\uCD9C\uB418\uACE0, \uAEBC\uC838 \uC788\uC73C\uBA74 \uAC1C\uC218\uB9CC \uBC18\uD658\uD569\uB2C8\uB2E4. \uC77D\uAE30 \uC804\uC6A9.",
+    inputSchema: {},
+    annotations: { readOnlyHint: true }
+  }, async () => runTool("get_notes", () => getNotes(ctx)));
+  server.registerTool("get_memos", {
+    title: "\uD3EC\uC2A4\uD2B8\uC787 \uBA54\uBAA8",
+    description: "\uD3EC\uC2A4\uD2B8\uC787 \uBA54\uBAA8\uB97C \uBC18\uD658\uD569\uB2C8\uB2E4(\uC544\uCE74\uC774\uBE0C \uC81C\uC678). \uBA54\uBAA8 \uBCF8\uBB38\uC740 SSAMPIN_BRIDGE_ALLOW_CONTENT=1 \uC77C \uB54C\uB9CC \uD559\uC0DD \uC2E4\uBA85 \uD0C8\uC2DD\uBCC4 \uD6C4 \uB178\uCD9C\uB418\uACE0, \uAEBC\uC838 \uC788\uC73C\uBA74 \uAC1C\uC218\uB9CC \uBC18\uD658\uD569\uB2C8\uB2E4. \uC77D\uAE30 \uC804\uC6A9.",
+    inputSchema: {},
+    annotations: { readOnlyHint: true }
+  }, async () => runTool("get_memos", () => getMemos(ctx)));
+  server.registerTool("get_bookmarks", {
+    title: "\uBD81\uB9C8\uD06C(\uB9C1\uD06C \uBAA8\uC74C)",
+    description: "\uBD81\uB9C8\uD06C\uB97C \uADF8\uB8F9\uBCC4\uB85C \uBC18\uD658\uD569\uB2C8\uB2E4(\uC544\uCE74\uC774\uBE0C \uADF8\uB8F9 \uC81C\uC678). \uC774\uB984\xB7URL \uC740 \uBBFC\uAC10\uD560 \uC218 \uC788\uC5B4(URL \uC5D0 \uD1A0\uD070\xB7\uD0A4 \uD3EC\uD568 \uAC00\uB2A5) SSAMPIN_BRIDGE_ALLOW_CONTENT=1 \uC77C \uB54C\uB9CC \uD0C8\uC2DD\uBCC4 \uD6C4 \uB178\uCD9C\uB418\uACE0, \uAEBC\uC838 \uC788\uC73C\uBA74 \uAC1C\uC218\uB9CC \uBC18\uD658\uD569\uB2C8\uB2E4. \uC77D\uAE30 \uC804\uC6A9.",
+    inputSchema: {},
+    annotations: { readOnlyHint: true }
+  }, async () => runTool("get_bookmarks", () => getBookmarks(ctx)));
+  server.registerTool("add_observation", {
+    title: "\uAD00\uCC30\uAE30\uB85D \uC785\uB825",
+    description: "\uD559\uC0DD \uD1A0\uD070\uC5D0 \uAD00\uCC30\uAE30\uB85D\uC744 \uCD94\uAC00(append)\uD569\uB2C8\uB2E4. \uC678\uBD80 \uC778\uC790\uB294 \uD1A0\uD070\uB9CC \uBC1B\uC2B5\uB2C8\uB2E4(\uC774\uB984 \uAE08\uC9C0). \uC4F0\uAE30\uB294 SSAMPIN_BRIDGE_ALLOW_WRITE=1 \uC77C \uB54C\uB9CC \uD65C\uC131\uC774\uBA70 \uC324\uD540\uC744 \uB2EB\uC740 \uC0C1\uD0DC\uB97C \uAD8C\uC7A5\uD569\uB2C8\uB2E4.",
+    inputSchema: {
+      studentToken: z.string().describe("list_students \uAC00 \uBC18\uD658\uD55C \uD559\uC0DD \uD1A0\uD070"),
+      content: z.string().min(1).max(500).describe("\uAD00\uCC30 \uB0B4\uC6A9(\uCD5C\uB300 500\uC790)"),
+      tags: z.array(z.string()).optional(),
+      date: z.string().regex(/^\d{4}-\d{2}-\d{2}$/).optional(),
+      idempotencyKey: z.string().optional().describe("\uC7AC\uC2DC\uB3C4 \uC911\uBCF5 \uBC29\uC9C0 \uD0A4")
+    },
+    annotations: { readOnlyHint: false }
+  }, async (args) => runTool("add_observation", () => addObservation(ctx, args)));
+  server.registerTool("get_observations", {
+    title: "\uAD00\uCC30\uAE30\uB85D \uC870\uD68C(\uC0DD\uAE30\uBD80 \uADFC\uAC70)",
+    description: "\uD559\uC0DD \uD1A0\uD070\uC758 \uAD00\uCC30\uAE30\uB85D\uC744 \uD0C8\uC2DD\uBCC4\uD574 \uBC18\uD658\uD569\uB2C8\uB2E4(\uC0DD\uAE30\uBD80 \uCD08\uC548 \uADFC\uAC70 \uC790\uB8CC). \uAC01 \uAE30\uB85D\uC758 observationId \uB97C \uCD08\uC548 \uBB38\uC7A5 \uADFC\uAC70\uB85C \uC778\uC6A9\uD558\uC138\uC694. \uB0B4\uC6A9 \uB178\uCD9C\uC740 \uAD50\uC0AC\uAC00 \uBD80\uC5EC\uD55C \uBC94\uC704 \uB3D9\uC758(\uD559\uC0DD\xB7\uAE30\uAC04\xB7\uBAA9\uC801\xB7\uB9CC\uB8CC) \uB610\uB294 SSAMPIN_BRIDGE_ALLOW_CONTENT=1 \uB9C8\uC2A4\uD130 \uC2A4\uC704\uCE58\uAC00 \uC788\uC5B4\uC57C \uD65C\uC131\uB429\uB2C8\uB2E4. \uB3D9\uC758\uAC00 \uC5C6\uC73C\uBA74 \uAD50\uC0AC\uC5D0\uAC8C CLI \uB3D9\uC758 \uBD80\uC5EC\uB97C \uC694\uCCAD\uD558\uC138\uC694(AI \uB294 \uB3D9\uC758\uB97C \uBC1C\uAE09\uD560 \uC218 \uC5C6\uC74C). \uC77D\uAE30 \uC804\uC6A9.",
+    inputSchema: {
+      studentToken: z.string().describe("list_students \uAC00 \uBC18\uD658\uD55C \uD559\uC0DD \uD1A0\uD070"),
+      from: z.string().regex(/^\d{4}-\d{2}-\d{2}$/).optional().describe("\uC2DC\uC791\uC77C(YYYY-MM-DD)"),
+      to: z.string().regex(/^\d{4}-\d{2}-\d{2}$/).optional().describe("\uC885\uB8CC\uC77C(YYYY-MM-DD)")
+    },
+    annotations: { readOnlyHint: true }
+  }, async (args) => runTool("get_observations", () => getObservations(ctx, args)));
+  server.registerTool("check_record_draft", {
+    title: "\uC0DD\uAE30\uBD80 \uCD08\uC548 \uADFC\uAC70 \uAC80\uC99D(\uC5B4\uD718)",
+    description: '\uC0DD\uAE30\uBD80 \uCD08\uC548\uC758 \uAC01 \uBB38\uC7A5\uC774 \uAD00\uCC30\uAE30\uB85D\uC5D0 \uC5B4\uD718\uC801\uC73C\uB85C \uADFC\uAC70\uD558\uB294\uC9C0 \uAC80\uC0AC\uD569\uB2C8\uB2E4. \uC5C6\uB294 \uD1A0\uD070 \uC778\uC6A9\xB7\uB2E4\uBB38\uC7A5\xB7\uB0B4\uC6A9 \uBD88\uC77C\uCE58 \uBB38\uC7A5\uC744 flag(supported=false)\uD569\uB2C8\uB2E4. \uC774\uAC83\uC740 "\uC2B9\uC778"\uC774 \uC544\uB2C8\uB77C \uC5B4\uD718 \uADFC\uAC70 \uAC80\uC0AC\uC774\uBA70, \uC758\uBBF8\xB7\uAE08\uC9C0\uD45C\uD604\xB7\uAE30\uC7AC\uC694\uB839 \uC801\uD569\uC131\uC740 \uD310\uB2E8\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. \uC0DD\uAE30\uBD80\uB294 \uBC95\uC815 \uAE30\uB85D\uC774\uBBC0\uB85C flag \uBB38\uC7A5\uC740 \uC218\uC815\xB7\uC0AD\uC81C\uD558\uACE0 \uAD50\uC0AC\uAC00 \uBC18\uB4DC\uC2DC \uCD5C\uC885 \uAC80\uD1A0\uD558\uC138\uC694. claims \uC758 observationIds \uB294 get_observations \uAC00 \uC900 \uAD00\uCC30 \uD1A0\uD070\uC744 \uC4F0\uACE0, from/to \uB85C \uC791\uC131 \uBC94\uC704\uB97C \uB9DE\uCD94\uC138\uC694. \uC77D\uAE30 \uC804\uC6A9.',
+    inputSchema: {
+      studentToken: z.string(),
+      claims: z.array(z.object({ text: z.string(), observationIds: z.array(z.string()) })).describe("\uCD08\uC548 \uBB38\uC7A5(\uB2E8\uC77C \uBB38\uC7A5)\uACFC \uAC01 \uBB38\uC7A5\uC758 \uADFC\uAC70 \uAD00\uCC30 \uD1A0\uD070 \uBAA9\uB85D"),
+      from: z.string().regex(/^\d{4}-\d{2}-\d{2}$/).optional().describe("\uAC80\uC99D \uB300\uC0C1 \uC2DC\uC791\uC77C"),
+      to: z.string().regex(/^\d{4}-\d{2}-\d{2}$/).optional().describe("\uAC80\uC99D \uB300\uC0C1 \uC885\uB8CC\uC77C"),
+      level: z.enum(["elementary", "middle", "high", "\uCD08\uB4F1\uD559\uAD50", "\uC911\uD559\uAD50", "\uACE0\uB4F1\uD559\uAD50"]).optional().describe("\uD559\uAD50\uAE09 \u2014 \uD559\uAD50\uAE09\uBCC4 \uACE0\uC704\uD5D8 \uC5B4\uD718 \uC801\uC6A9(\uBBF8\uC9C0\uC815 \uC2DC \uACF5\uD1B5)"),
+      year: z.string().regex(/^\d{4}$/).optional().describe("\uAE30\uC7AC\uC694\uB839 \uC5F0\uB3C4(\uC608: 2026)")
+    },
+    annotations: { readOnlyHint: true }
+  }, async (args) => runTool("check_record_draft", () => checkRecordDraft(ctx, args)));
+  server.registerTool("get_performance_feedback", {
+    title: "\uC218\uD589\uD3C9\uAC00 \uC9C8\uC801 \uD53C\uB4DC\uBC31(\uC810\uC218 \uC81C\uC678)",
+    description: '\uC218\uC5C5\uBC18 \uD559\uC0DD\uC758 \uC218\uD589\uD3C9\uAC00(\uB8E8\uBE0C\uB9AD) \uCC44\uC810\uC744 "\uB3C4\uB2EC \uC218\uC900 \uC774\uB984\xB7\uC131\uCDE8 \uC124\uBA85\xB7\uC694\uC18C \uBA54\uBAA8\xB7\uCD1D\uD3C9"\uC73C\uB85C \uBC18\uD658\uD569\uB2C8\uB2E4. \uC810\uC218\xB7\uBC30\uC810\xB7\uD569\uACC4\uB294 \uD3EC\uD568\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4(\uC0DD\uAE30\uBD80 \uC785\uB825 \uAE08\uC9C0 \uD56D\uBAA9). \uC138\uD2B9\uC758 \uC11C\uC220\uD615 \uC5ED\uB7C9\xB7\uD0DC\uB3C4 \uADFC\uAC70\uB85C\uB9CC \uD65C\uC6A9\uD558\uC138\uC694. list_students(classToken) \uAC00 \uC900 \uD559\uC0DD token \uC744 \uC4F0\uBA70, \uB3D9\uAE09\uC0DD \uC2E4\uBA85\uC740 \uD0C8\uC2DD\uBCC4\uB429\uB2C8\uB2E4. \uB0B4\uC6A9 \uB178\uCD9C \uB3D9\uC758(\uB610\uB294 \uB9C8\uC2A4\uD130 \uC2A4\uC704\uCE58) \uD544\uC694. \uC77D\uAE30 \uC804\uC6A9.',
+    inputSchema: {
+      studentToken: z.string().describe("list_students(classToken) \uAC00 \uBC18\uD658\uD55C \uC218\uC5C5\uBC18 \uD559\uC0DD \uD1A0\uD070")
+    },
+    annotations: { readOnlyHint: true }
+  }, async (args) => runTool("get_performance_feedback", () => getPerformanceFeedback(ctx, args)));
+  server.registerTool("get_grade_summary", {
+    title: "\uC131\uC801 \uC9C8\uC801 \uC694\uC57D(\uC810\uC218\xB7\uC11D\uCC28 \uC81C\uC678)",
+    description: '\uC218\uC5C5\uBC18 \uD559\uC0DD\uC758 \uC131\uC801\uC744 "\uC131\uCDE8\uB3C4(A~E)\xB7\uD3C9\uAC00\uC601\uC5ED\xB7\uD3C9\uAC00\uBC29\uBC95\xB7\uC751\uC2DC\uC5EC\uBD80\xB7\uC218\uD589 \uC99D\uBE59 \uBA54\uBAA8"\uB85C \uC694\uC57D\uD574 \uBC18\uD658\uD569\uB2C8\uB2E4. \uC6D0\uC810\uC218\xB7\uD658\uC0B0\uC810\xB7\uC11D\uCC28\uB294 \uD3EC\uD568\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4(\uC0DD\uAE30\uBD80 \uC785\uB825 \uAE08\uC9C0 \uD56D\uBAA9). \uC11C\uC220\uD615 \uADFC\uAC70\uB85C\uB9CC \uD65C\uC6A9\uD558\uACE0 \uC810\uC218/\uC11D\uCC28\uB294 \uC0DD\uAE30\uBD80\uC5D0 \uC801\uC9C0 \uB9C8\uC138\uC694. list_students(classToken) \uC758 \uD559\uC0DD token \uC744 \uC4F0\uBA70 \uB0B4\uC6A9 \uB178\uCD9C \uB3D9\uC758 \uD544\uC694. \uC77D\uAE30 \uC804\uC6A9.',
+    inputSchema: {
+      studentToken: z.string().describe("list_students(classToken) \uAC00 \uBC18\uD658\uD55C \uC218\uC5C5\uBC18 \uD559\uC0DD \uD1A0\uD070")
+    },
+    annotations: { readOnlyHint: true }
+  }, async (args) => runTool("get_grade_summary", () => getGradeSummaryTool(ctx, args)));
+  server.registerTool("get_record_guidelines", {
+    title: "\uC0DD\uAE30\uBD80 \uC791\uC131 \uCC38\uC870 \uC6D0\uCE59",
+    description: "\uC0DD\uAE30\uBD80(\uD559\uAD50\uC0DD\uD65C\uAE30\uB85D\uBD80) \uC791\uC131 \uC2DC \uB530\uB77C\uC57C \uD560 \uD575\uC2EC \uC6D0\uCE59 \uC694\uC57D\uACFC \uADFC\uAC70 \uCD9C\uCC98\uB97C \uBC18\uD658\uD569\uB2C8\uB2E4. level(\uCD08/\uC911/\uACE0) \uC9C0\uC815 \uC2DC \uD559\uAD50\uAE09\uBCC4 \uCD94\uAC00 \uC6D0\uCE59\uC744 \uD3EC\uD568\uD558\uBA70, \uAC01 \uC6D0\uCE59\uC740 \uADFC\uAC70(\uD6C8\uB839\xB7\uAC1C\uC815\uC548\uB0B4\xB7\uD3EC\uD138)\uB97C \uB3D9\uBC18\uD569\uB2C8\uB2E4. \uC6D0\uBB38 \uD655\uC778\uC774 \uD544\uC694\uD569\uB2C8\uB2E4. \uC77D\uAE30 \uC804\uC6A9.",
+    inputSchema: {
+      level: z.enum(["elementary", "middle", "high", "\uCD08\uB4F1\uD559\uAD50", "\uC911\uD559\uAD50", "\uACE0\uB4F1\uD559\uAD50"]).optional().describe("\uD559\uAD50\uAE09(\uBBF8\uC9C0\uC815 \uC2DC \uACF5\uD1B5 \uC6D0\uCE59\uB9CC)"),
+      year: z.string().regex(/^\d{4}$/).optional().describe("\uAE30\uC7AC\uC694\uB839 \uC5F0\uB3C4(\uC608: 2026)")
+    },
+    annotations: { readOnlyHint: true }
+  }, async (args) => runTool("get_record_guidelines", () => getRecordGuidelines(args)));
+  return server;
+}
+
+// ../packages/mcp/dist/index.js
+async function main() {
+  const server = createSsampinMcpServer();
+  const transport = new StdioServerTransport();
+  await server.connect(transport);
+  process.stderr.write("[ssampin-mcp] connected (stdio)\n");
+}
+main().catch((err) => {
+  process.stderr.write(`[ssampin-mcp] fatal: ${err instanceof Error ? err.message : String(err)}
+`);
+  process.exit(1);
+});