fix(share): address Copilot review comments

- Add ssr=false to avoid localStorage access during SSR (isOwner always false)
- Return isLoggedIn from load; readOnly only when logged in && not owner
- Pass all handlers unconditionally; readOnly prop handles UI suppression
- Fix setTimeout race condition in copyPublicLink with clearTimeout

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: Sora4431

apps/web/src/routes/[id]/+page.svelte

@@ -184,13 +184,14 @@
 
 {#key data.itinerary.theme_id}
   <!-- readOnly は standard-seasons テーマのみ対応。他テーマは issue #159 で対応予定 -->
+  <!-- ログイン済み && 非オーナーのみ readOnly。未ログインは既存動作を維持 -->
   <ItineraryView
     {itinerary}
     {steps}
-    readOnly={!data.isOwner}
-    onUpdateItinerary={!data.isOwner ? undefined : handleUpdateItinerary}
-    onCreateStep={!data.isOwner ? undefined : handleCreateStep}
-    onUpdateStep={!data.isOwner ? undefined : handleUpdateStep}
-    onDeleteStep={!data.isOwner ? undefined : handleDeleteStep}
+    readOnly={data.isLoggedIn && !data.isOwner}
+    onUpdateItinerary={handleUpdateItinerary}
+    onCreateStep={handleCreateStep}
+    onUpdateStep={handleUpdateStep}
+    onDeleteStep={handleDeleteStep}
   />
 {/key}

apps/web/src/routes/[id]/+page.ts

@@ -7,19 +7,22 @@ import { loadTheme } from '$lib/themes';
 import { error } from '@sveltejs/kit';
 
 export const prerender = false;
+// userAuth は localStorage 依存のため SSR では動作しない → CSR のみで実行
+export const ssr = false;
 
 export const load: PageLoad = async ({ params }) => {
   try {
     const itinerary = await itineraryApi.get(params.id);
     const theme = await loadTheme(itinerary.theme_id);
     const steps = await stepApi.list(params.id);
 
+    const isLoggedIn = userAuth.isLoggedIn();
     let isOwner = false;
-    if (userAuth.isLoggedIn()) {
+    if (isLoggedIn) {
       try {
         await userApi.checkOwnership(params.id);
         isOwner = true;
-      } catch (e) {
+      } catch {
         // 404 = bookmark not found (not owner)
         // 401 = token expired → isLoggedIn() で事前にチェック済みのため通常発生しない
         isOwner = false;
@@ -30,6 +33,7 @@ export const load: PageLoad = async ({ params }) => {
       itinerary,
       theme,
       steps,
+      isLoggedIn,
       isOwner,
     };
   } catch (e) {

apps/web/src/routes/profile/+page.svelte

@@ -19,6 +19,7 @@
   let formError = $state<string | null>(null);
   let submitting = $state(false);
   let copiedId = $state<string | null>(null);
+  let copyTimeout: ReturnType<typeof setTimeout> | null = null;
 
   onMount(async () => {
     loggedIn = userAuth.isLoggedIn();
@@ -81,7 +82,8 @@
       const url = window.location.origin + '/' + itineraryId;
       await navigator.clipboard.writeText(url);
       copiedId = itineraryId;
-      setTimeout(() => { copiedId = null; }, 2000);
+      if (copyTimeout) clearTimeout(copyTimeout);
+      copyTimeout = setTimeout(() => { copiedId = null; }, 2000);
     } catch {
       alert('クリップボードへのコピーに失敗しました');
     }