chore(deps-dev): bump the dev-dependencies group with 17 updates

.editorconfig

@@ -0,0 +1,12 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+indent_size = 2
+indent_style = space
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+[*.md]
+trim_trailing_whitespace = false

.env.example

@@ -0,0 +1,8 @@
+# 이 파일을 복사해 `.env.local`을 만들어 로컬 값으로 덮어쓴다.
+# cp .env.example .env.local
+
+# API 서버 base URL (기본값: http://localhost:3000)
+VITE_API_BASE_URL=http://localhost:3000
+
+# MSW 목 API 사용 여부 ("true" | "false", 기본값: true)
+VITE_ENABLE_MOCKS=true

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,35 @@
+name: 버그 리포트
+description: 버그를 신고합니다.
+labels: ["bug"]
+body:
+  - type: textarea
+    id: description
+    attributes:
+      label: 버그 설명
+      description: 무엇이 잘못되었는지 설명해 주세요.
+    validations:
+      required: true
+  - type: textarea
+    id: reproduction
+    attributes:
+      label: 재현 방법
+      description: 재현 단계를 순서대로 적어 주세요.
+      placeholder: |
+        1. ...
+        2. ...
+        3. ...
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: 기대 동작
+    validations:
+      required: true
+  - type: textarea
+    id: environment
+    attributes:
+      label: 환경
+      description: OS, 브라우저, Node/pnpm 버전 등
+    validations:
+      required: false

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,23 @@
+name: 기능 제안
+description: 새로운 기능이나 개선을 제안합니다.
+labels: ["enhancement"]
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: 해결하려는 문제
+      description: 어떤 불편함이나 필요에서 출발했는지 설명해 주세요.
+    validations:
+      required: true
+  - type: textarea
+    id: proposal
+    attributes:
+      label: 제안 내용
+    validations:
+      required: true
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: 고려한 대안
+    validations:
+      required: false

.github/dependabot.yml

@@ -0,0 +1,29 @@
+version: 2
+updates:
+  - package-ecosystem: npm
+    directory: "/"
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 10
+    groups:
+      # 관련 패키지를 묶어 PR 수를 줄인다.
+      react:
+        patterns:
+          - "react"
+          - "react-dom"
+          - "@types/react"
+          - "@types/react-dom"
+      tanstack:
+        patterns:
+          - "@tanstack/*"
+      storybook:
+        patterns:
+          - "storybook"
+          - "@storybook/*"
+      dev-dependencies:
+        dependency-type: development
+
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: weekly

.github/pull_request_template.md

@@ -0,0 +1,22 @@
+## 변경 요약
+
+<!-- 무엇을, 왜 바꿨는지 간단히 설명합니다. -->
+
+## 변경 유형
+
+- [ ] 기능 추가 (feat)
+- [ ] 버그 수정 (fix)
+- [ ] 리팩터링 (refactor)
+- [ ] 문서 (docs)
+- [ ] 테스트 (test)
+- [ ] 기타 (chore/ci)
+
+## 체크리스트
+
+- [ ] `pnpm validate` 통과 (typecheck, lint, format, test, build)
+- [ ] 필요한 경우 테스트를 추가/수정했습니다
+- [ ] UI 변경 시 Storybook 스토리를 추가/갱신했습니다
+
+## 관련 이슈
+
+<!-- 예: Closes #123 -->

.github/workflows/ci.yml

@@ -0,0 +1,109 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  validate:
+    name: Validate (typecheck, lint, format, test, build)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: pnpm/action-setup@v6
+      - uses: actions/setup-node@v6
+        with:
+          node-version-file: .nvmrc
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm validate
+
+  storybook:
+    name: Build Storybook
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: pnpm/action-setup@v6
+      - uses: actions/setup-node@v6
+        with:
+          node-version-file: .nvmrc
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm build-storybook
+
+  e2e:
+    name: E2E (Playwright)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: pnpm/action-setup@v6
+      - uses: actions/setup-node@v6
+        with:
+          node-version-file: .nvmrc
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      - name: Resolve Playwright version
+        id: playwright
+        run: echo "version=$(node -p "require('@playwright/test/package.json').version")" >> "$GITHUB_OUTPUT"
+      - name: Cache Playwright browsers
+        id: playwright-cache
+        uses: actions/cache@v6
+        with:
+          path: ~/.cache/ms-playwright
+          key: playwright-${{ runner.os }}-${{ steps.playwright.outputs.version }}
+      # 캐시 미스: 브라우저 + 시스템 의존성 모두 설치
+      - name: Install Playwright browsers and system deps
+        if: steps.playwright-cache.outputs.cache-hit != 'true'
+        run: pnpm exec playwright install --with-deps chromium
+      # 캐시 히트: 브라우저는 복원됐으므로 시스템 의존성만 설치(빠름)
+      - name: Install Playwright system deps
+        if: steps.playwright-cache.outputs.cache-hit == 'true'
+        run: pnpm exec playwright install-deps chromium
+      - run: pnpm test:e2e
+      - uses: actions/upload-artifact@v7
+        if: ${{ !cancelled() }}
+        with:
+          name: playwright-report
+          path: playwright-report/
+          retention-days: 7
+
+  audit:
+    name: Security audit (pnpm)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: pnpm/action-setup@v6
+      - uses: actions/setup-node@v6
+        with:
+          node-version-file: .nvmrc
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      # 전체 취약점을 Actions 실행 요약(Summary)에 표로 남긴다.
+      - name: Audit report to job summary
+        if: always()
+        run: |
+          {
+            echo "## pnpm audit report"
+            echo ""
+            echo '```'
+            pnpm audit || true
+            echo '```'
+          } >> "$GITHUB_STEP_SUMMARY"
+      # JSON 리포트를 아티팩트로 보관한다.
+      - name: Save audit JSON report
+        if: always()
+        run: pnpm audit --json > pnpm-audit.json || true
+      - uses: actions/upload-artifact@v7
+        if: always()
+        with:
+          name: pnpm-audit-report
+          path: pnpm-audit.json
+          retention-days: 7
+      # high/critical 취약점이 있을 때만 실패시킨다(moderate/low는 리포트만).
+      - name: Fail on high or critical vulnerabilities
+        run: pnpm audit --audit-level high

.github/workflows/deploy-storybook.yml

@@ -0,0 +1,42 @@
+name: Deploy Storybook
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+# GitHub Pages 배포에 필요한 최소 권한.
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+
+concurrency:
+  group: storybook-pages
+  cancel-in-progress: true
+
+jobs:
+  deploy:
+    name: Build and deploy to GitHub Pages
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: pnpm/action-setup@v6
+      - uses: actions/setup-node@v6
+        with:
+          node-version-file: .nvmrc
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm build-storybook
+      - uses: actions/configure-pages@v6
+        with:
+          # Pages가 아직 켜져 있지 않으면 워크플로가 Source=GitHub Actions로 자동 활성화한다.
+          enablement: true
+      - uses: actions/upload-pages-artifact@v5
+        with:
+          path: storybook-static
+      - id: deployment
+        uses: actions/deploy-pages@v5

.gitignore

@@ -12,6 +12,34 @@ dist
 dist-ssr
 *.local
 
+# Environment files
+.env
+.env.*
+!.env.example
+
+# Package manager caches
+.pnpm-store/
+.npm/
+.yarn/
+
+# Local agent artifacts
+.superpowers/
+.worktrees/
+
+# Test and build output
+coverage/
+.vite/
+.vitest/
+.cache/
+.turbo/
+playwright-report/
+test-results/
+*.tsbuildinfo
+
+# Storybook
+storybook-static/
+*.storybook.log
+
 # Editor directories and files
 .vscode/*
 !.vscode/extensions.json

.nvmrc

@@ -1 +1 @@
-v20.11.0
+24.13.0

.prettierignore

@@ -0,0 +1,16 @@
+node_modules/
+dist/
+dist-ssr/
+coverage/
+.superpowers/
+docs/superpowers/
+.worktrees/
+.vite/
+.vitest/
+.cache/
+.turbo/
+playwright-report/
+test-results/
+pnpm-lock.yaml
+public/mockServiceWorker.js
+src/routeTree.gen.ts

.prettierrc

@@ -1,9 +1,12 @@
 {
-  "editor.formatOnSave": true,
-  "prettier.semi": true,
-  "prettier.javascriptEnable": ["javascript", "javascriptreact"],
-  "prettier.printWidth": 2,
-  "prettier.useTabs": false,
-  "prettier.tabWidth": 4,
+  "printWidth": 80,
+  "tabWidth": 2,
+  "useTabs": false,
+  "semi": true,
+  "singleQuote": false,
+  "trailingComma": "all",
+  "bracketSpacing": true,
+  "arrowParens": "always",
+  "endOfLine": "lf",
   "plugins": ["prettier-plugin-tailwindcss"]
 }

.storybook/main.ts

@@ -0,0 +1,33 @@
+import type { StorybookConfig } from "@storybook/react-vite";
+
+const config: StorybookConfig = {
+  // 스토리는 컴포넌트와 같은 위치(co-location)에 두어 유지보수를 쉽게 한다.
+  stories: ["../src/**/*.mdx", "../src/**/*.stories.@(ts|tsx)"],
+  addons: [
+    "@storybook/addon-docs", // autodocs 문서 자동 생성
+    "@storybook/addon-a11y", // 접근성 검사
+    "@storybook/addon-themes", // 라이트/다크 테마 토글
+  ],
+  framework: {
+    name: "@storybook/react-vite",
+    options: {},
+  },
+  viteFinal(viteConfig) {
+    // 앱 전용 TanStack Router 플러그인(라우트 생성/HMR)은 Storybook에 불필요하다.
+    // 세 플러그인 모두 "tanstack" 접두사를 쓰므로 이름으로 걸러 빌드 부하를 줄인다.
+    const isTanstackRouterPlugin = (plugin: unknown): boolean =>
+      typeof plugin === "object" &&
+      plugin !== null &&
+      "name" in plugin &&
+      typeof (plugin as { name: unknown }).name === "string" &&
+      (plugin as { name: string }).name.includes("tanstack");
+
+    viteConfig.plugins = (viteConfig.plugins ?? [])
+      .flat(Infinity)
+      .filter((plugin) => !isTanstackRouterPlugin(plugin));
+
+    return viteConfig;
+  },
+};
+
+export default config;