feat: asset catalog API, 태그 DB 기초, 마이그레이션 3건 및 도메인/테스트 갱신 (2026-05-19)

tests/test_v1.py

@@ -284,6 +284,7 @@ def test_v1_assets_returns_asset_list(monkeypatch) -> None:
         owner_user_id="user-1",
         include_disabled=False,
         managed_by_daemon_id="d-1",
+        market=None,
     )
 
 
@@ -815,6 +816,137 @@ def test_v1_assets_returns_asset_list(monkeypatch) -> None:
     assert "market" not in body["assets"][0]
 
 
+# ---------------------------------------------------------------------------
+# REQ-013: GET /v1/assets token-type branching
+# ---------------------------------------------------------------------------
+
+def test_v1_assets_user_token(monkeypatch) -> None:
+    settings = _make_app_db(monkeypatch)
+    portfolio = _make_portfolio()
+    principal = TokenPrincipal(
+        token_id="t1", user_id="user-1", permission="read",
+        token_type="user", runtime_id="rt-1",
+    )
+    mock_repo = MagicMock()
+    mock_repo.get_token_principal.return_value = principal
+    mock_repo.list_portfolios_with_strategies.return_value = [portfolio]
+    mock_repo.get_strategy_set.return_value = None
+
+    with patch("app.core.auth.get_portfolio_repository_from_settings", return_value=mock_repo), \
+         patch("app.api.v1_assets.get_portfolio_repository_from_settings", return_value=mock_repo):
+        client = _make_app(_make_settings(credential_encryption_key=_TEST_ENC_KEY))
+        resp = client.get("/v1/assets", headers=_service_token_header())
+
+    assert resp.status_code == 200
+    assert resp.json()["total"] == 1
+    mock_repo.list_portfolios_with_strategies.assert_called_once_with(
+        owner_user_id="user-1",
+        include_disabled=True,
+        market=None,
+    )
+
+
+def test_v1_assets_admin_token_default(monkeypatch) -> None:
+    settings = _make_app_db(monkeypatch)
+    portfolio = _make_portfolio()
+    principal = TokenPrincipal(
+        token_id="t1", user_id="admin-1", permission="admin",
+        token_type="admin", runtime_id="rt-1",
+    )
+    mock_repo = MagicMock()
+    mock_repo.get_token_principal.return_value = principal
+    mock_repo.list_portfolios_with_strategies.return_value = [portfolio]
+    mock_repo.get_strategy_set.return_value = None
+
+    with patch("app.core.auth.get_portfolio_repository_from_settings", return_value=mock_repo), \
+         patch("app.api.v1_assets.get_portfolio_repository_from_settings", return_value=mock_repo):
+        client = _make_app(_make_settings(credential_encryption_key=_TEST_ENC_KEY))
+        resp = client.get("/v1/assets", headers=_service_token_header())
+
+    assert resp.status_code == 200
+    mock_repo.list_portfolios_with_strategies.assert_called_once_with(
+        owner_user_id="admin-1",
+        include_disabled=True,
+        market=None,
+    )
+
+
+def test_v1_assets_admin_token_user_id_param(monkeypatch) -> None:
+    settings = _make_app_db(monkeypatch)
+    principal = TokenPrincipal(
+        token_id="t1", user_id="admin-1", permission="admin",
+        token_type="admin", runtime_id="rt-1",
+    )
+    mock_repo = MagicMock()
+    mock_repo.get_token_principal.return_value = principal
+    mock_repo.list_portfolios_with_strategies.return_value = []
+
+    with patch("app.core.auth.get_portfolio_repository_from_settings", return_value=mock_repo), \
+         patch("app.api.v1_assets.get_portfolio_repository_from_settings", return_value=mock_repo):
+        client = _make_app(_make_settings(credential_encryption_key=_TEST_ENC_KEY))
+        resp = client.get("/v1/assets?user_id=other-user", headers=_service_token_header())
+
+    assert resp.status_code == 200
+    mock_repo.list_portfolios_with_strategies.assert_called_once_with(
+        owner_user_id="other-user",
+        include_disabled=True,
+        market=None,
+    )
+
+
+def test_v1_assets_market_filter(monkeypatch) -> None:
+    settings = _make_app_db(monkeypatch)
+    principal = TokenPrincipal(
+        token_id="t1", user_id="user-1", permission="read",
+        token_type="service", runtime_id="rt-1", daemon_id="d-1",
+    )
+    mock_repo = MagicMock()
+    mock_repo.get_token_principal.return_value = principal
+    mock_repo.list_portfolios_with_strategies.return_value = []
+
+    with patch("app.core.auth.get_portfolio_repository_from_settings", return_value=mock_repo), \
+         patch("app.api.v1_assets.get_portfolio_repository_from_settings", return_value=mock_repo):
+        client = _make_app(_make_settings(credential_encryption_key=_TEST_ENC_KEY))
+        resp = client.get("/v1/assets?market=KRX", headers=_service_token_header())
+
+    assert resp.status_code == 200
+    mock_repo.list_portfolios_with_strategies.assert_called_once_with(
+        owner_user_id="user-1",
+        include_disabled=False,
+        managed_by_daemon_id="d-1",
+        market="KRX",
+    )
+
+
+def test_v1_assets_asset_id_is_uuid(monkeypatch) -> None:
+    import uuid as _uuid
+    settings = _make_app_db(monkeypatch)
+    uuid_portfolio_id = str(_uuid.uuid4())
+    portfolio = Portfolio(
+        portfolio_id=uuid_portfolio_id,
+        broker="kis", status="enabled", name="T",
+        symbol="005930", cash_balance=0.0, asset_quantity=0.0,
+        price=0.0, profit_buffer=0.0, owner_user_id="user-1",
+    )
+    principal = TokenPrincipal(
+        token_id="t1", user_id="user-1", permission="read",
+        token_type="service", runtime_id="rt-1", daemon_id="d-1",
+    )
+    mock_repo = MagicMock()
+    mock_repo.get_token_principal.return_value = principal
+    mock_repo.list_portfolios_with_strategies.return_value = [portfolio]
+    mock_repo.get_strategy_set.return_value = None
+
+    with patch("app.core.auth.get_portfolio_repository_from_settings", return_value=mock_repo), \
+         patch("app.api.v1_assets.get_portfolio_repository_from_settings", return_value=mock_repo):
+        client = _make_app(_make_settings(credential_encryption_key=_TEST_ENC_KEY))
+        resp = client.get("/v1/assets", headers=_service_token_header())
+
+    assert resp.status_code == 200
+    returned_id = resp.json()["assets"][0]["asset_id"]
+    _uuid.UUID(returned_id)  # raises ValueError if not a valid UUID
+
+
 # ---------------------------------------------------------------------------
 # GET /v1/user_info
 # ---------------------------------------------------------------------------