[Deploy] develop → main 배포 반영

.env.production

@@ -0,0 +1 @@
+VITE_API_BASE_URL=/

.github/workflows/ci.yaml

@@ -32,5 +32,13 @@ jobs:
       - name: Run lint
         run: pnpm lint
 
+      - name: Run unit tests
+        run: pnpm test
+
       - name: Run build
         run: pnpm build
+
+      - name: Run Lighthouse CI
+        run: pnpm exec lhci autorun
+        env:
+          LHCI_GITHUB_APP_TOKEN: ${{ secrets.LHCI_GITHUB_APP_TOKEN }}

.github/workflows/main.yaml

@@ -50,6 +50,24 @@ jobs:
         run: |
           aws s3 cp --recursive dist s3://${{ secrets.AWS_BUCKET_NAME }}
 
+      # CloudFront Function 업데이트 (CSP 보안 헤더)
+      - name: Update CloudFront CSP Function
+        run: |
+          ETAG=$(aws cloudfront describe-function \
+            --name add-csp-report-only \
+            --query 'ETag' --output text)
+          aws cloudfront update-function \
+            --name add-csp-report-only \
+            --if-match "$ETAG" \
+            --function-config Comment="CSP security headers",Runtime="cloudfront-js-2.0" \
+            --function-code fileb://scripts/cloudfront-functions/csp-headers.js
+          NEW_ETAG=$(aws cloudfront describe-function \
+            --name add-csp-report-only \
+            --query 'ETag' --output text)
+          aws cloudfront publish-function \
+            --name add-csp-report-only \
+            --if-match "$NEW_ETAG"
+
       # CloudFront 캐시 무효화
       - name: Invalidate CloudFront Cache
         run: |

lighthouserc.cjs

@@ -0,0 +1,29 @@
+/** @type {import('@lhci/cli').LighthousercConfig} */
+module.exports = {
+  ci: {
+    collect: {
+      // CI 환경에서 인증이 필요한 /dashboard는 /login으로 리다이렉트됨.
+      // /dashboard 실측은 #277(perf/no-skeleton 브랜치)에서 진행.
+      startServerCommand: "pnpm preview --port 3000",
+      startServerReadyPattern: "Local",
+      url: ["http://localhost:3000/login"],
+      numberOfRuns: 3,
+      settings: {
+        chromeFlags: "--no-sandbox --disable-dev-shm-usage",
+      },
+    },
+    assert: {
+      assertions: {
+        // LCP: CI는 /login을 lazy load 환경에서 측정해 ~15s가 나옴 — 로컬 /dashboard 실측값(1048ms)과
+        // 측정 대상이 달라 error 임계값 적용 불가. 회귀 추세 감지용 warn으로 유지.
+        "largest-contentful-paint": ["warn", { maxNumericValue: 4000 }],
+        // CLS, TBT: CI 환경 무관하게 안정적으로 낮은 값 → error 수준 적용
+        "cumulative-layout-shift": ["error", { maxNumericValue: 0.1 }],
+        "total-blocking-time": ["error", { maxNumericValue: 200 }],
+      },
+    },
+    upload: {
+      target: "temporary-public-storage",
+    },
+  },
+};

package.json

@@ -12,7 +12,9 @@
     "storybook": "storybook dev -p 6006",
     "build-storybook": "storybook build",
     "chromatic": "npx chromatic --project-token=$CHROMATIC_PROJECT_TOKEN",
-    "test:e2e": "playwright test"
+    "test:e2e": "playwright test",
+    "test": "vitest run",
+    "test:watch": "vitest"
   },
   "dependencies": {
     "@hookform/resolvers": "^5.2.2",
@@ -41,6 +43,7 @@
     "@commitlint/cli": "^20.3.1",
     "@commitlint/config-conventional": "^20.3.1",
     "@eslint/js": "^9.39.2",
+    "@lhci/cli": "^0.15.1",
     "@playwright/test": "^1.60.0",
     "@storybook/addon-essentials": "8.6.17",
     "@storybook/react": "8.6.17",
@@ -74,7 +77,8 @@
     "typescript": "~5.9.3",
     "typescript-eslint": "^8.53.0",
     "vite": "^6.4.1",
-    "vite-plugin-svgr": "^4.5.0"
+    "vite-plugin-svgr": "^4.5.0",
+    "vitest": "^4.1.10"
   },
   "lint-staged": {
     "*.{ts,tsx}": [