feat(i18n): consume published Customer Master screen copy

docs/adr/0362-versioned-ui-translation-ledger.md

@@ -119,6 +119,39 @@ Child insert/update/delete obtains a `FOR UPDATE` lock on the parent resource. P
 
 The existing `user_account.preferred_locale` constraint expands to the same eight language tags. API request validation and frontend consumption must be cut over to the same contract before #922 can close; the database/read-model foundation alone is not buyer-visible completion.
 
+The first consumer slice is the Customer Master destination. It requests the
+latest published `customer-master` resource after authentication and after each
+locale change, admits it only when every key used by that destination is
+present, and does not request Customer Master data until that copy is ready.
+Loading and retry states remain a small product shell outside the translated
+screen resource so a missing resource can tell the reader what to do next.
+Changing locale aborts the prior request logically; a late response for an old
+locale cannot replace the active screen. Other destinations remain on their
+existing bundle until they receive their own complete resource and executable
+cutover evidence.
+
+### Authorization-lifecycle admission clarification (2026-09-07)
+
+Translation readiness and Customer Master data belong to the current
+authorization lifecycle. A token change clears both the primary projection and
+secondary related-post, hint, detail, and permission state. An imperative
+request may publish data, an error, a loading completion, or a follow-up read
+only while its originating lifecycle remains current. Returning to the same
+token value after A → B → A does not revive the first A lifecycle. Unmounting
+also retires that lifecycle. Existing per-request ordering still applies within
+one lifecycle, and server-side authorization remains authoritative.
+
+The existing token-equality guard was insufficient: a deferred related response
+replaced the new list after A → B → A, while a deferred hint result could
+trigger a stale refresh or display a retired error. Four behavioral App tests
+(success/failure for each operation) fail on `9b033e2737e9a42e04c326a80b53142a365a923d`.
+The repair reuses the existing authorization effect's cleanup to advance a
+component-local generation and checks that generation at all imperative
+completion paths. No shared session service, token storage, or new API is added.
+Effect-local cancellation still governs translation, permission, and detail
+fetches. This is candidate correctness evidence, not real-account or release
+acceptance.
+
 ## DDD mapping
 
 - Subdomain: product composition / presentation read model.

docs/storybook-inventory.md

@@ -20,6 +20,7 @@ operator-facing control you can click before changing product CSS.
 | `Admin/AdminPanel` | Change the tenant brand name, then verify the saved or failed state before leaving settings. | `--surface`, `--border`, `--space-panel-block`, `AdminPanel` |
 | `Lineage/LineageDag` | Open a reconstructed connection to read its inferred channel scores and Allen interval relation, or open the current branch node; compare empty, single-branch, grouped/forked, mobile-scroll, ungrouped, and long-title states before changing graph CSS. On narrow viewports, swipe the named viewport or focus it and use arrow keys to inspect the full lineage. | `--color-accent-background`, `--radius-control`, `--surface`, `--border`, `--color-focus-border`, `--size-control-min`, `LineageDag` |
 | `Chrome/StatusNotice` | Read success, unavailable, or retry copy, then take the named next action. Success and unavailable are a named region (not live `role=status`); Retry is `role=alert` and only on the retry kind. Calendar's missing Naruon projection uses unavailable. | `--badge-status-success-*`, `--badge-status-pending-*`, `--badge-status-danger-*`, `StatusNotice` |
+| `Chrome/Screen translation gate` | Wait for the selected-language screen, retry a failed load, or contact an administrator if the problem persists. Eight locale-specific retry stories cover the bootstrap recovery copy. The gated destination never flashes bundled screen copy. | `StatusNotice`, `ScreenTranslationGate` |
 | `Chrome/PopupCloseButton` | Close the evidence panel or post popup. | `--space-close-inset`, `--font-size-close`, `PopupCloseButton` |
 | `Workspace/WorkspaceCalendar` | Read observed Naruon events, or open a commitment to land on that post. Fail-closed copy stays `이 범위의 일정을 아직 받을 수 없습니다`. | `--color-chip-border`, `WorkspaceCalendar`, `EvidenceStatusMark` |
 | `Ask Agent/Public claim verification` | Compare supported, refuted, and not-enough-information states; open only the external evidence link, then review the separate internal citation before changing governed graph state. | `--space-panel-block`, `--space-control-gap`, `--color-border`, `--size-control-min`, `PublicClaimVerification` |

frontend/src/App.test.tsx

@@ -1,9 +1,9 @@
-import { fireEvent, render, screen, waitFor, within } from "@testing-library/react";
+import { act, fireEvent, render, screen, waitFor, within } from "@testing-library/react";
 import userEvent from "@testing-library/user-event";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 import App, { SurfaceBoundary } from "./App";
 import { optionalKnowledgeCutoffIso } from "./api";
-import { setLocale } from "./i18n";
+import { CUSTOMER_MASTER_TRANSLATION_KEYS, clearCustomerMasterTranslations, setLocale } from "./i18n";
 import { OIDC_RETURN_URL_STORAGE_KEY } from "./oidcReturnUrl";
 
 const signinRedirect = vi.fn();
@@ -15,6 +15,7 @@ vi.mock("react-oidc-context", () => ({
 }));
 
 beforeEach(() => {
+  clearCustomerMasterTranslations();
   setLocale("en");
   signinRedirect.mockReset();
   signoutRedirect.mockReset();
@@ -39,6 +40,7 @@ it("normalizes valid knowledge cutoffs and rejects invalid input", () => {
 });
 
 afterEach(() => {
+  clearCustomerMasterTranslations();
   vi.unstubAllGlobals();
   window.history.replaceState({}, "", "/");
   window.sessionStorage.clear();
@@ -1905,6 +1907,19 @@ describe("App, authenticated", () => {
           }),
         );
       }
+      if (url.includes("/api/translations/customer-master?") && method === "GET") {
+        const translations = Object.fromEntries(
+          CUSTOMER_MASTER_TRANSLATION_KEYS.map((key) => [key, key]),
+        );
+        return Promise.resolve(
+          jsonResponse({
+            screen_key: "customer-master",
+            resource_version: 1,
+            locale: new URL(url).searchParams.get("locale") ?? "en",
+            translations,
+          }),
+        );
+      }
       if (url.endsWith("/api/customer-master") && method === "GET") {
         return Promise.resolve(
           jsonResponse({
@@ -2250,6 +2265,51 @@ describe("App, authenticated", () => {
     expect(parentRow?.contains(subsidiaryRow)).toBe(true);
   });
 
+  it.each(["success", "failure"])("rejects a related %s from before an A-B-A authorization transition", async (outcome) => {
+    stubBackend();
+    const backend = fetch;
+    let releaseRelated!: (response: Response) => void;
+    let rejectRelated!: (error: Error) => void;
+    const oldRelated = new Promise<Response>((resolve, reject) => {
+      releaseRelated = resolve;
+      rejectRelated = reject;
+    });
+    let relatedRequests = 0;
+    vi.stubGlobal("fetch", vi.fn((input: RequestInfo | URL, init?: RequestInit) => {
+      if (String(input).endsWith("/api/corporate-entities/corp-demo/related")) {
+        relatedRequests += 1;
+        if (relatedRequests === 1) return oldRelated;
+      }
+      return backend(input, init);
+    }));
+    const { rerender } = render(<App />);
+    fireEvent.click(screen.getByRole("button", { name: "고객 마스터" }));
+    await userEvent.click((await screen.findByText("DEMO-CORP-01 · Company")).closest("button")!);
+    expect(relatedRequests).toBe(1);
+
+    for (const accessToken of ["other-access-token", "test-access-token"]) {
+      mockAuth = { ...mockAuth, user: {
+        access_token: accessToken, profile: { preferred_username: "demo.analyst" },
+      } };
+      rerender(<App />);
+      await screen.findByText("DEMO-CORP-01 · Company");
+    }
+    await userEvent.click(screen.getByText("DEMO-CORP-01 · Company").closest("button")!);
+    await screen.findByRole("button", { name: "Open related post: Linked post" });
+    expect(relatedRequests).toBe(2);
+
+    await act(async () => {
+      if (outcome === "failure") rejectRelated(new Error("Superseded request failed"));
+      else releaseRelated(jsonResponse({ related: [{
+        node_id: "superseded-post", node_type_code: "node_post",
+        label: "Superseded related post", relevance: 0.5,
+      }] }));
+      await oldRelated.catch(() => undefined);
+    });
+    expect(screen.queryByRole("button", { name: "Open related post: Superseded related post" })).not.toBeInTheDocument();
+    expect(screen.getByRole("button", { name: "Open related post: Linked post" })).toBeInTheDocument();
+  });
+
   it("opens a customer's related post in place instead of jumping to the Board", async () => {
     // Live bug (2026-08-19): opening a related post from Customer
     // Master swapped the whole workspace to the Board and opened the
@@ -2298,6 +2358,42 @@ describe("App, authenticated", () => {
     expect(within(soloRow as HTMLElement).queryByText("Multiple roles observed")).not.toBeInTheDocument();
   });
 
+  it.each(["success", "failure"])("ignores hint %s from before an A-B-A authorization transition", async (outcome) => {
+    stubBackend({ admin: true, manyCustomerHints: 1 });
+    const backend = fetch;
+    let releaseHint!: (response: Response) => void;
+    let rejectHint!: (error: Error) => void;
+    const oldHint = new Promise<Response>((resolve, reject) => {
+      releaseHint = resolve;
+      rejectHint = reject;
+    });
+    let masterRequests = 0;
+    vi.stubGlobal("fetch", vi.fn((input: RequestInfo | URL, init?: RequestInit) => {
+      if (String(input).endsWith("/api/customer-master/resolve-hint")) return oldHint;
+      if (String(input).endsWith("/api/customer-master")) masterRequests += 1;
+      return backend(input, init);
+    }));
+    const { rerender } = render(<App />);
+    fireEvent.click(screen.getByRole("button", { name: "고객 마스터" }));
+    await userEvent.click(await screen.findByRole("button", { name: "Resolve" }));
+    for (const accessToken of ["other-access-token", "test-access-token"]) {
+      mockAuth = { ...mockAuth, user: {
+        access_token: accessToken, profile: { preferred_username: "demo.analyst" },
+      } };
+      rerender(<App />);
+      await screen.findByRole("button", { name: "Resolve" });
+    }
+    const currentRequests = masterRequests;
+    await act(async () => {
+      if (outcome === "failure") rejectHint(new Error("Superseded hint failed"));
+      else releaseHint(jsonResponse({ corporate_entity_id: "corp-demo", linked_post_count: 1 }));
+      await oldHint.catch(() => undefined);
+    });
+    expect(masterRequests).toBe(currentRequests);
+    expect(screen.queryByText("This hint could not be resolved to a corroborated organization name.")).not.toBeInTheDocument();
+    expect(screen.getByRole("button", { name: "Resolve" })).toBeEnabled();
+  });
+
   it("lets a post_admin account resolve an unresolved customer hint into a real name", async () => {
     // Feature (2026-08-19): a Customer Master hint (an opaque customer
     // code with no name) previously had no action at all -- a dead end