동의 게이트와 런타임 안정화

apps/api/app/routes/voice.py

@@ -23,7 +23,7 @@ from fastapi.responses import JSONResponse
 from starlette.websockets import WebSocketState
 
 from .. import session_persistence, turn_runtime
-from ..auth_sessions import get_session
+from ..auth_sessions import get_session, user_has_consent
 from ..config import settings
 from ..deps import Principal, Role
 from ..engine_client import EngineError, engine_client
@@ -431,6 +431,7 @@ async def _principal_from_websocket(websocket: WebSocket) -> Principal | None:
         cohort_ids=session.cohort_ids,
         email=session.email,
         display_name=session.display_name,
+        consent_at=session.consent_at,
     )
 
 
@@ -457,6 +458,8 @@ async def _bind_session(
     persona_code = qp.get("persona_code")
     if not persona_code:
         return None, None, "session_id or persona_code query required", {}
+    if principal.consent_at is None and not await user_has_consent(principal.user_id):
+        return None, None, "consent_required", {}
     try:
         catalog_persona = await get_catalog_persona(persona_code)
     except Exception: