feat: expose authoritative ranked profile

server/api/service_test.go

@@ -151,3 +151,41 @@ func TestAuthenticatedProposalAPIUsesRevisionAndIdempotencyPolicy(t *testing.T)
 	}
 	_ = response.Body.Close()
 }
+
+func TestRankedProfileAPIReturnsBackendTierAndHidesCasualData(t *testing.T) {
+	now := time.Unix(1000, 0).UTC()
+	sessions := domain.NewSessionStore()
+	session, token, err := sessions.Issue("player-a", time.Hour, now)
+	if err != nil {
+		t.Fatal(err)
+	}
+	policy, err := domain.NewTierPolicy([]domain.TierBand{{Tier: domain.RankTierBronze, MinRating: 0}, {Tier: domain.RankTierGold, MinRating: 1500}})
+	if err != nil {
+		t.Fatal(err)
+	}
+	service := &Service{
+		Sessions:       sessions,
+		RankedProfiles: map[string]domain.RankedProfile{"player-a": {Rating: domain.Rating{Value: 1600, RD: 200, Volatility: 0.06}, RankedGames: 10, LastSeasonID: "season-1"}},
+		TierPolicy:     policy,
+		Now:            func() time.Time { return now },
+	}
+	server := httptest.NewServer(service.Handler())
+	defer server.Close()
+	req, _ := http.NewRequest(http.MethodGet, server.URL+"/v1/profile/ranked", nil)
+	req.Header.Set("Authorization", "Bearer "+session.SessionID+":"+token)
+	response, err := http.DefaultClient.Do(req)
+	if err != nil {
+		t.Fatal(err)
+	}
+	defer response.Body.Close()
+	if response.StatusCode != http.StatusOK {
+		t.Fatalf("ranked profile status = %d", response.StatusCode)
+	}
+	var body rankedProfileResponse
+	if err := json.NewDecoder(response.Body).Decode(&body); err != nil {
+		t.Fatal(err)
+	}
+	if body.Tier != string(domain.RankTierGold) || body.Provisional || body.RankedGames != 10 || body.SeasonID != "season-1" {
+		t.Fatalf("ranked profile response = %+v", body)
+	}
+}