merge: 최신 main을 정적 프런트엔드 작업에 통합한다

app/gateway-api/test/authFlow.test.ts

@@ -98,6 +98,7 @@ const buildCaller = (
             apiPort: 15003,
             status: 'RUNNING' as const,
             buildStatus: 'SUCCEEDED' as const,
+            buildCommitSha: 'HEAD',
             meta: {},
             createdAt: new Date().toISOString(),
             updatedAt: new Date().toISOString(),
@@ -111,6 +112,7 @@ const buildCaller = (
             apiPort: 15015,
             status: 'RUNNING' as const,
             buildStatus: 'SUCCEEDED' as const,
+            buildCommitSha: 'HEAD',
             meta: {},
             createdAt: new Date().toISOString(),
             updatedAt: new Date().toISOString(),
@@ -268,6 +270,35 @@ const buildCaller = (
 };
 
 describe('gateway auth flow', () => {
+    it('allows a signed-in regular user to read only the active profile scenario catalog', async () => {
+        const { caller, sealPassword, setSessionHeader } = buildCaller();
+
+        await expect(caller.lobby.scenarios({ profileName: 'che:default' })).rejects.toMatchObject({
+            code: 'UNAUTHORIZED',
+        });
+
+        const register = await caller.auth.registerLocal({
+            username: 'scenario-reader',
+            credential: sealPassword('scenario-reader-password'),
+            displayName: '시나리오조회자',
+            termsAgreed: true,
+            privacyAgreed: true,
+            thirdPartyUse: false,
+        });
+        setSessionHeader(register.sessionToken);
+
+        const scenarios = await caller.lobby.scenarios({ profileName: 'che:default' });
+        expect(scenarios.length).toBeGreaterThan(0);
+        expect(scenarios[0]).toMatchObject({
+            id: expect.any(Number),
+            title: expect.any(String),
+            defaultStatTotal: expect.any(Number),
+        });
+        await expect(caller.lobby.scenarios({ profileName: 'hidden:default' })).rejects.toMatchObject({
+            code: 'NOT_FOUND',
+        });
+    });
+
     it('registers a local account first and accepts an encrypted password login', async () => {
         const { caller, users, sealPassword } = buildCaller();
         const register = await caller.auth.registerLocal({

app/gateway-api/test/scenarioCatalog.test.ts

@@ -14,6 +14,10 @@ describe('scenarioCatalog git ref support', () => {
         const ids = previews.map((scenario) => scenario.id);
         const sorted = [...ids].sort((a, b) => a - b);
         expect(ids).toEqual(sorted);
+        expect(previews.every((scenario) => scenario.defaultStatTotal > 0)).toBe(true);
+        expect(previews.every((scenario) => scenario.fiction === null || Number.isInteger(scenario.fiction))).toBe(
+            true
+        );
     });
 
     it('rejects without crashing when git cannot be spawned', async () => {