릴리스: v1.3.15 티어 에디터 열 헤더와 액션 아이콘 정리

backend/src/db.js

@@ -154,7 +154,7 @@ function mapTemplateRequestRow(row) {
     requesterName: getUserDisplayName(row),
     requesterAccountName: getUserAccountName(row),
     requesterAvatarSrc: row.requester_avatar_src || '',
-    sourceTierListId: row.source_tierlist_id,
+    sourceTierListId: row.source_tierlist_id || '',
     sourceGameId: row.source_game_id,
     sourceGameName: row.source_game_name || '',
     sourceTierListTitle: row.title_snapshot || '',
@@ -164,6 +164,9 @@ function mapTemplateRequestRow(row) {
     targetGameName: row.target_game_name || '',
     status: row.status,
     items: parseJson(row.items_json, []),
+    snapshotGroups: parseJson(row.groups_json, []),
+    snapshotItems: parseJson(row.board_items_json, []),
+    snapshotShowCharacterNames: !!row.show_character_names_snapshot,
     createdAt: Number(row.created_at),
     updatedAt: Number(row.updated_at),
   }
@@ -389,6 +392,23 @@ async function ensureSchema() {
       ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4
     `)
 
+    const templateRequestSourceTierListColumns = await query("SHOW COLUMNS FROM template_requests LIKE 'source_tierlist_id'")
+    if (templateRequestSourceTierListColumns[0]?.Null !== 'YES') {
+      await query('ALTER TABLE template_requests MODIFY source_tierlist_id VARCHAR(64) NULL')
+    }
+    const templateRequestGroupsColumns = await query("SHOW COLUMNS FROM template_requests LIKE 'groups_json'")
+    if (!templateRequestGroupsColumns.length) {
+      await query("ALTER TABLE template_requests ADD COLUMN groups_json LONGTEXT NOT NULL AFTER items_json")
+    }
+    const templateRequestBoardItemsColumns = await query("SHOW COLUMNS FROM template_requests LIKE 'board_items_json'")
+    if (!templateRequestBoardItemsColumns.length) {
+      await query("ALTER TABLE template_requests ADD COLUMN board_items_json LONGTEXT NOT NULL AFTER groups_json")
+    }
+    const templateRequestShowNamesColumns = await query("SHOW COLUMNS FROM template_requests LIKE 'show_character_names_snapshot'")
+    if (!templateRequestShowNamesColumns.length) {
+      await query("ALTER TABLE template_requests ADD COLUMN show_character_names_snapshot TINYINT(1) NOT NULL DEFAULT 0 AFTER board_items_json")
+    }
+
     const tierListThumbnailColumns = await query("SHOW COLUMNS FROM tierlists LIKE 'thumbnail_src'")
     if (!tierListThumbnailColumns.length) {
       await query("ALTER TABLE tierlists ADD COLUMN thumbnail_src VARCHAR(255) NOT NULL DEFAULT '' AFTER title")
@@ -506,25 +526,59 @@ async function updateUserProfile({ id, nickname, avatarSrc }) {
   return findUserById(id)
 }
 
-async function listUsers() {
-  const rows = await query(`
-    SELECT
-      u.id,
-      u.email,
-      u.nickname,
-      u.is_admin,
-      u.avatar_src,
-      u.created_at,
-      COUNT(t.id) AS tierlist_count,
-      GREATEST(
+async function findPrimaryAdminUser() {
+  const rows = await query(
+    'SELECT id, email, nickname, is_admin, avatar_src, created_at FROM users WHERE is_admin = 1 ORDER BY created_at ASC, email ASC LIMIT 1'
+  )
+  return mapUserRow(rows[0])
+}
+
+async function listUsers({ queryText = '', sort = 'recent', direction = 'desc' } = {}) {
+  const where = []
+  const params = []
+  const trimmedQuery = typeof queryText === 'string' ? queryText.trim() : ''
+
+  if (trimmedQuery) {
+    where.push('(u.email LIKE ? OR u.nickname LIKE ?)')
+    params.push(`%${trimmedQuery}%`, `%${trimmedQuery}%`)
+  }
+
+  const isAsc = direction === 'asc'
+  const orderBy =
+    sort === 'created'
+      ? isAsc
+        ? 'u.created_at ASC, recent_activity_at ASC, u.email ASC'
+        : 'u.created_at DESC, recent_activity_at DESC, u.email ASC'
+      : sort === 'tierlists'
+        ? isAsc
+          ? 'tierlist_count ASC, recent_activity_at ASC, u.email ASC'
+          : 'tierlist_count DESC, recent_activity_at DESC, u.email ASC'
+        : isAsc
+          ? 'recent_activity_at ASC, u.created_at ASC, u.email ASC'
+          : 'recent_activity_at DESC, u.created_at ASC, u.email ASC'
+
+  const rows = await query(
+    `
+      SELECT
+        u.id,
+        u.email,
+        u.nickname,
+        u.is_admin,
+        u.avatar_src,
         u.created_at,
-        COALESCE(MAX(t.updated_at), 0)
-      ) AS recent_activity_at
-    FROM users u
-    LEFT JOIN tierlists t ON t.author_id = u.id
-    GROUP BY u.id, u.email, u.nickname, u.is_admin, u.avatar_src, u.created_at
-    ORDER BY recent_activity_at DESC, u.created_at ASC, u.email ASC
-  `)
+        COUNT(t.id) AS tierlist_count,
+        GREATEST(
+          u.created_at,
+          COALESCE(MAX(t.updated_at), 0)
+        ) AS recent_activity_at
+      FROM users u
+      LEFT JOIN tierlists t ON t.author_id = u.id
+      ${where.length ? `WHERE ${where.join(' AND ')}` : ''}
+      GROUP BY u.id, u.email, u.nickname, u.is_admin, u.avatar_src, u.created_at
+      ORDER BY ${orderBy}
+    `,
+    params
+  )
   return rows.map(mapUserRow)
 }
 
@@ -720,7 +774,7 @@ async function listUnusedImageAssets({ limit = 100, minAgeHours = 24 } = {}) {
     query("SELECT src FROM game_items WHERE src <> ''"),
     query("SELECT src FROM custom_items WHERE src <> ''"),
     query("SELECT thumbnail_src, pool_json FROM tierlists"),
-    query("SELECT thumbnail_src_snapshot, items_json FROM template_requests"),
+    query("SELECT thumbnail_src_snapshot, items_json, board_items_json FROM template_requests"),
   ])
 
   for (const row of userRows) if (row.avatar_src) referencedSrcs.add(row.avatar_src)
@@ -736,6 +790,7 @@ async function listUnusedImageAssets({ limit = 100, minAgeHours = 24 } = {}) {
   for (const row of templateRequestRows) {
     if (row.thumbnail_src_snapshot) referencedSrcs.add(row.thumbnail_src_snapshot)
     collectUploadSrcsFromItems(parseJson(row.items_json, []), referencedSrcs)
+    collectUploadSrcsFromItems(parseJson(row.board_items_json, []), referencedSrcs)
   }
 
   return assets.filter((asset) => !referencedSrcs.has(asset.src))
@@ -772,7 +827,7 @@ async function listReferencedUploadUsage() {
     query("SELECT src FROM game_items WHERE src <> ''"),
     query("SELECT src FROM custom_items WHERE src <> ''"),
     query("SELECT id, thumbnail_src, pool_json FROM tierlists"),
-    query("SELECT id, thumbnail_src_snapshot, items_json FROM template_requests"),
+    query("SELECT id, thumbnail_src_snapshot, items_json, board_items_json FROM template_requests"),
   ])
 
   for (const row of userRows) addUsage(row.avatar_src, 'avatar')
@@ -788,6 +843,7 @@ async function listReferencedUploadUsage() {
   for (const row of templateRequestRows) {
     addUsage(row.thumbnail_src_snapshot, 'template-thumbnail')
     for (const item of parseJson(row.items_json, [])) addUsage(item?.src, 'template-item')
+    for (const item of parseJson(row.board_items_json, [])) addUsage(item?.src, 'template-board-item')
   }
 
   return Array.from(usageMap.entries())
@@ -840,7 +896,7 @@ async function replaceUploadSourceReferences({ fromSrc, toSrc }) {
     }
   }
 
-  const requestRows = await query('SELECT id, thumbnail_src_snapshot, items_json FROM template_requests')
+  const requestRows = await query('SELECT id, thumbnail_src_snapshot, items_json, board_items_json FROM template_requests')
   for (const row of requestRows) {
     let nextThumbnail = row.thumbnail_src_snapshot
     let changed = false
@@ -850,12 +906,14 @@ async function replaceUploadSourceReferences({ fromSrc, toSrc }) {
     }
 
     const replacedItems = replaceItemSrc(parseJson(row.items_json, []), fromSrc, toSrc)
-    if (replacedItems.changed) changed = true
+    const replacedBoardItems = replaceItemSrc(parseJson(row.board_items_json, []), fromSrc, toSrc)
+    if (replacedItems.changed || replacedBoardItems.changed) changed = true
 
     if (changed) {
-      await query('UPDATE template_requests SET thumbnail_src_snapshot = ?, items_json = ?, updated_at = ? WHERE id = ?', [
+      await query('UPDATE template_requests SET thumbnail_src_snapshot = ?, items_json = ?, board_items_json = ?, updated_at = ? WHERE id = ?', [
         nextThumbnail || '',
         serializeJson(replacedItems.items),
+        serializeJson(replacedBoardItems.items),
         now(),
         row.id,
       ])
@@ -1602,19 +1660,24 @@ async function createTemplateRequest({
   id,
   type,
   requesterId,
-  sourceTierListId,
+  sourceTierListId = '',
   sourceGameId,
   targetGameId = '',
   title,
   description = '',
   thumbnailSrc = '',
   items = [],
+  groups = [],
+  boardItems = [],
+  showCharacterNames = false,
 }) {
-  const existing = await findPendingTemplateRequestByTierList({ sourceTierListId, type })
-  if (existing) {
-    const err = new Error('template_request_exists')
-    err.code = 'TEMPLATE_REQUEST_EXISTS'
-    throw err
+  if (sourceTierListId) {
+    const existing = await findPendingTemplateRequestByTierList({ sourceTierListId, type })
+    if (existing) {
+      const err = new Error('template_request_exists')
+      err.code = 'TEMPLATE_REQUEST_EXISTS'
+      throw err
+    }
   }
 
   const createdAt = now()
@@ -1632,22 +1695,28 @@ async function createTemplateRequest({
         description_snapshot,
         thumbnail_src_snapshot,
         items_json,
+        groups_json,
+        board_items_json,
+        show_character_names_snapshot,
         created_at,
         updated_at
       )
-      VALUES (?, ?, ?, ?, ?, ?, 'pending', ?, ?, ?, ?, ?, ?)
+      VALUES (?, ?, ?, ?, ?, ?, 'pending', ?, ?, ?, ?, ?, ?, ?, ?, ?)
     `,
     [
       id,
       type,
       requesterId,
-      sourceTierListId,
+      sourceTierListId || null,
       sourceGameId,
       targetGameId,
       title,
       description,
       thumbnailSrc,
       serializeJson(items),
+      serializeJson(groups),
+      serializeJson(boardItems),
+      showCharacterNames ? 1 : 0,
       createdAt,
       createdAt,
     ]
@@ -1670,6 +1739,9 @@ async function findTemplateRequestById(id) {
         tr.description_snapshot,
         tr.thumbnail_src_snapshot,
         tr.items_json,
+        tr.groups_json,
+        tr.board_items_json,
+        tr.show_character_names_snapshot,
         tr.created_at,
         tr.updated_at,
         u.nickname,
@@ -1705,6 +1777,9 @@ async function listAdminTemplateRequests({ status = 'pending' } = {}) {
         tr.description_snapshot,
         tr.thumbnail_src_snapshot,
         tr.items_json,
+        tr.groups_json,
+        tr.board_items_json,
+        tr.show_character_names_snapshot,
         tr.created_at,
         tr.updated_at,
         u.nickname,
@@ -1852,6 +1927,7 @@ module.exports = {
   findUserById,
   createUser,
   updateUserProfile,
+  findPrimaryAdminUser,
   listUsers,
   adminUpdateUser,
   adminUpdateUserPassword,

backend/src/routes/admin.js

@@ -22,6 +22,7 @@ const {
   findCustomItemsByIds,
   deleteCustomItems,
   listUsers,
+  findPrimaryAdminUser,
   listAdminTierLists,
   findTierListById,
   listAdminTemplateRequests,
@@ -62,6 +63,30 @@ function buildItemLabelFromFilename(file) {
 const upload = createMemoryUpload(multer, { fileSize: 8 * 1024 * 1024, maxCount: 50 })
 const avatarUpload = createMemoryUpload(multer, { fileSize: 4 * 1024 * 1024 })
 
+function decorateAdminUser(user, primaryAdmin) {
+  if (!user) return null
+  const isPrimaryAdmin = !!user.isAdmin && primaryAdmin?.id === user.id
+  return {
+    ...user,
+    isPrimaryAdmin,
+    isOperator: !!user.isAdmin && !isPrimaryAdmin,
+    role: isPrimaryAdmin ? 'owner' : user.isAdmin ? 'operator' : 'user',
+  }
+}
+
+async function getAdminUserContext(targetUserId, actingUserId) {
+  const [targetUser, actingUser, primaryAdmin] = await Promise.all([
+    findUserById(targetUserId),
+    findUserById(actingUserId),
+    findPrimaryAdminUser(),
+  ])
+  return { targetUser, actingUser, primaryAdmin }
+}
+
+function canManageAdminRole(actingUser, primaryAdmin) {
+  return !!actingUser?.isAdmin && primaryAdmin?.id === actingUser.id
+}
+
 router.post('/games', requireAdmin, async (req, res) => {
   const schema = z.object({ id: z.string().min(1), name: z.string().min(1).max(60) })
   const parsed = schema.safeParse(req.body)
@@ -537,8 +562,19 @@ router.delete('/custom-items', requireAdmin, async (req, res) => {
 })
 
 router.get('/users', requireAdmin, async (req, res) => {
-  const users = await listUsers()
-  res.json({ users })
+  const schema = z.object({
+    q: z.string().trim().max(120).optional().default(''),
+    sort: z.enum(['recent', 'created', 'tierlists']).optional().default('recent'),
+    direction: z.enum(['asc', 'desc']).optional().default('desc'),
+  })
+  const parsed = schema.safeParse(req.query)
+  if (!parsed.success) return res.status(400).json({ error: 'bad_request' })
+
+  const [users, primaryAdmin] = await Promise.all([
+    listUsers({ queryText: parsed.data.q, sort: parsed.data.sort, direction: parsed.data.direction }),
+    findPrimaryAdminUser(),
+  ])
+  res.json({ users: users.map((user) => decorateAdminUser(user, primaryAdmin)) })
 })
 
 router.patch('/users/:userId', requireAdmin, async (req, res) => {
@@ -550,21 +586,34 @@ router.patch('/users/:userId', requireAdmin, async (req, res) => {
   const parsed = schema.safeParse(req.body)
   if (!parsed.success) return res.status(400).json({ error: 'bad_request' })
 
+  const { targetUser, actingUser, primaryAdmin } = await getAdminUserContext(req.params.userId, req.session.userId)
+  if (!targetUser) return res.status(404).json({ error: 'not_found' })
+
+  const actingIsPrimaryAdmin = canManageAdminRole(actingUser, primaryAdmin)
+  const targetIsPrimaryAdmin = primaryAdmin?.id === targetUser.id
+  const roleChanged = parsed.data.isAdmin !== !!targetUser.isAdmin
+
   if (req.params.userId === req.session.userId && !parsed.data.isAdmin) {
     return res.status(400).json({ error: 'self_admin_required' })
   }
-
-  const user = await findUserById(req.params.userId)
-  if (!user) return res.status(404).json({ error: 'not_found' })
+  if (targetIsPrimaryAdmin && !actingIsPrimaryAdmin) {
+    return res.status(403).json({ error: 'primary_admin_protected' })
+  }
+  if (targetIsPrimaryAdmin && !parsed.data.isAdmin) {
+    return res.status(400).json({ error: 'primary_admin_required' })
+  }
+  if (roleChanged && !actingIsPrimaryAdmin) {
+    return res.status(403).json({ error: 'primary_admin_only' })
+  }
 
   try {
     const updated = await adminUpdateUser({
-      id: user.id,
+      id: targetUser.id,
       email: parsed.data.email,
       nickname: parsed.data.nickname,
       isAdmin: parsed.data.isAdmin,
     })
-    res.json({ user: updated })
+    res.json({ user: decorateAdminUser(updated, primaryAdmin) })
   } catch (e) {
     if (e && e.code === 'ER_DUP_ENTRY') {
       return res.status(409).json({ error: 'email_taken' })
@@ -580,8 +629,11 @@ router.post('/users/:userId/avatar', requireAdmin, avatarUpload.single('avatar')
   const parsed = schema.safeParse(req.body)
   if (!parsed.success) return res.status(400).json({ error: 'bad_request' })
 
-  const user = await findUserById(req.params.userId)
-  if (!user) return res.status(404).json({ error: 'not_found' })
+  const { targetUser, actingUser, primaryAdmin } = await getAdminUserContext(req.params.userId, req.session.userId)
+  if (!targetUser) return res.status(404).json({ error: 'not_found' })
+  if (primaryAdmin?.id === targetUser.id && !canManageAdminRole(actingUser, primaryAdmin)) {
+    return res.status(403).json({ error: 'primary_admin_protected' })
+  }
 
   const optimized = req.file
     ? await writeOptimizedImage({
@@ -594,16 +646,16 @@ router.post('/users/:userId/avatar', requireAdmin, avatarUpload.single('avatar')
       })
     : null
   const shouldRemoveAvatar = parsed.data.removeAvatar === '1'
-  const nextAvatarSrc = shouldRemoveAvatar ? '' : optimized?.src || user.avatarSrc || ''
+  const nextAvatarSrc = shouldRemoveAvatar ? '' : optimized?.src || targetUser.avatarSrc || ''
   const updated = await adminUpdateUser({
-    id: user.id,
-    email: user.email,
-    nickname: user.nickname || '',
-    isAdmin: !!user.isAdmin,
+    id: targetUser.id,
+    email: targetUser.email,
+    nickname: targetUser.nickname || '',
+    isAdmin: !!targetUser.isAdmin,
     avatarSrc: nextAvatarSrc,
   })
 
-  res.json({ user: updated })
+  res.json({ user: decorateAdminUser(updated, primaryAdmin) })
 })
 
 router.delete('/users/:userId', requireAdmin, async (req, res) => {
@@ -611,10 +663,19 @@ router.delete('/users/:userId', requireAdmin, async (req, res) => {
     return res.status(400).json({ error: 'cannot_delete_self' })
   }
 
-  const user = await findUserById(req.params.userId)
-  if (!user) return res.status(404).json({ error: 'not_found' })
+  const { targetUser, actingUser, primaryAdmin } = await getAdminUserContext(req.params.userId, req.session.userId)
+  if (!targetUser) return res.status(404).json({ error: 'not_found' })
 
-  await adminDeleteUser(user.id)
+  const actingIsPrimaryAdmin = canManageAdminRole(actingUser, primaryAdmin)
+  const targetIsPrimaryAdmin = primaryAdmin?.id === targetUser.id
+  if (targetIsPrimaryAdmin) {
+    return res.status(400).json({ error: 'cannot_delete_primary_admin' })
+  }
+  if (targetUser.isAdmin && !actingIsPrimaryAdmin) {
+    return res.status(403).json({ error: 'primary_admin_only' })
+  }
+
+  await adminDeleteUser(targetUser.id)
   res.json({ ok: true })
 })
 
@@ -625,11 +686,14 @@ router.patch('/users/:userId/password', requireAdmin, async (req, res) => {
   const parsed = schema.safeParse(req.body)
   if (!parsed.success) return res.status(400).json({ error: 'bad_request' })
 
-  const user = await findUserById(req.params.userId)
-  if (!user) return res.status(404).json({ error: 'not_found' })
+  const { targetUser, actingUser, primaryAdmin } = await getAdminUserContext(req.params.userId, req.session.userId)
+  if (!targetUser) return res.status(404).json({ error: 'not_found' })
+  if (primaryAdmin?.id === targetUser.id && !canManageAdminRole(actingUser, primaryAdmin)) {
+    return res.status(403).json({ error: 'primary_admin_protected' })
+  }
 
   const passwordHash = await bcrypt.hash(parsed.data.password, 10)
-  await adminUpdateUserPassword({ id: user.id, passwordHash })
+  await adminUpdateUserPassword({ id: targetUser.id, passwordHash })
   res.json({ ok: true })
 })
 

backend/src/routes/auth.js

@@ -9,6 +9,7 @@ const {
   findUserById,
   createUser,
   updateUserProfile,
+  findPrimaryAdminUser,
 } = require('../db')
 const { requireAuth } = require('../middleware/auth')
 const { createMemoryUpload, writeOptimizedImage } = require('../lib/image-storage')
@@ -25,6 +26,24 @@ const profileSchema = z.object({
   removeAvatar: z.union([z.string(), z.undefined()]).optional(),
 })
 
+async function serializeUser(user) {
+  if (!user) return null
+  const primaryAdmin = await findPrimaryAdminUser()
+  const isPrimaryAdmin = !!user.isAdmin && primaryAdmin?.id === user.id
+
+  return {
+    id: user.id,
+    email: user.email,
+    nickname: user.nickname || '',
+    isAdmin: !!user.isAdmin,
+    isPrimaryAdmin,
+    isOperator: !!user.isAdmin && !isPrimaryAdmin,
+    role: isPrimaryAdmin ? 'owner' : user.isAdmin ? 'operator' : 'user',
+    avatarSrc: user.avatarSrc || '',
+    createdAt: user.createdAt,
+  }
+}
+
 router.post('/signup', async (req, res) => {
   const parsed = signupSchema.safeParse(req.body)
   if (!parsed.success) return res.status(400).json({ error: 'bad_request' })
@@ -39,9 +58,9 @@ router.post('/signup', async (req, res) => {
 
   req.session.userId = user.id
   req.session.isAdmin = !!user.isAdmin
-  req.session.save((err) => {
+  req.session.save(async (err) => {
     if (err) return res.status(500).json({ error: 'session_save_failed' })
-    res.json(user)
+    res.json(await serializeUser(user))
   })
 })
 
@@ -58,16 +77,9 @@ router.post('/login', async (req, res) => {
 
   req.session.userId = user.id
   req.session.isAdmin = !!user.isAdmin
-  req.session.save((err) => {
+  req.session.save(async (err) => {
     if (err) return res.status(500).json({ error: 'session_save_failed' })
-    res.json({
-      id: user.id,
-      email: user.email,
-      nickname: user.nickname || '',
-      isAdmin: !!user.isAdmin,
-      avatarSrc: user.avatarSrc || '',
-      createdAt: user.createdAt,
-    })
+    res.json(await serializeUser(user))
   })
 })
 
@@ -80,7 +92,7 @@ router.get('/me', async (req, res) => {
   if (!req.session || !req.session.userId) return res.json({ user: null })
   const user = await findUserById(req.session.userId)
   if (!user) return res.json({ user: null })
-  res.json({ user })
+  res.json({ user: await serializeUser(user) })
 })
 
 router.get('/meta', async (req, res) => {
@@ -115,7 +127,7 @@ router.post('/profile', requireAuth, upload.single('avatar'), async (req, res) =
     avatarSrc: nextAvatarSrc,
   })
 
-  res.json({ user: updated })
+  res.json({ user: await serializeUser(updated) })
 })
 
 module.exports = router

backend/src/routes/tierlists.js

@@ -58,6 +58,33 @@ function getCustomTemplateItems(tierList) {
 const upload = createMemoryUpload(multer, { fileSize: 6 * 1024 * 1024 })
 const thumbnailUpload = createMemoryUpload(multer, { fileSize: 8 * 1024 * 1024 })
 
+const templateRequestSchema = z.object({
+  type: z.enum(['create', 'update']),
+  sourceTierListId: z.string().max(64).optional().default(''),
+  gameId: z.string().min(1).max(120),
+  requestTitle: z.string().trim().min(1).max(120),
+  requestDescription: z.string().trim().min(1).max(1000),
+  thumbnailSrc: z.string().max(255).optional().default(''),
+  isPublic: z.boolean().optional().default(false),
+  showCharacterNames: z.boolean().optional().default(false),
+  saveToMyTierList: z.boolean().optional().default(true),
+  groups: z.array(
+    z.object({
+      id: z.string().min(1),
+      name: z.string().min(1).max(16),
+      itemIds: z.array(z.string()).optional().default([]),
+    }).passthrough()
+  ),
+  boardItems: z.array(
+    z.object({
+      id: z.string().min(1),
+      src: z.string().min(1),
+      label: z.string().min(1).max(60),
+      origin: z.enum(['game', 'custom']).default('game'),
+    })
+  ),
+})
+
 const tierListUpsertSchema = z.object({
   id: z.string().optional(),
   gameId: z.string().min(1),
@@ -73,8 +100,8 @@ const tierListUpsertSchema = z.object({
     z.object({
       id: z.string().min(1),
       name: z.string().min(1).max(16),
-      itemIds: z.array(z.string()),
-    })
+      itemIds: z.array(z.string()).optional().default([]),
+    }).passthrough()
   ),
   pool: z.array(
     z.object({
@@ -194,42 +221,64 @@ router.post('/thumbnail', requireAuth, thumbnailUpload.single('thumbnail'), asyn
   res.json({ thumbnailSrc: optimized.src })
 })
 
-router.post('/:id/template-request', requireAuth, async (req, res) => {
-  const schema = z.object({
-    type: z.enum(['create', 'update']),
-    requestTitle: z.string().trim().min(1).max(80),
-    requestDescription: z.string().trim().min(1).max(240),
-  })
-  const parsed = schema.safeParse(req.body)
+router.post('/template-request', requireAuth, async (req, res) => {
+  const parsed = templateRequestSchema.safeParse(req.body)
   if (!parsed.success) return res.status(400).json({ error: 'bad_request' })
 
-  const tierList = await findTierListById(req.params.id, req.session.userId)
-  if (!tierList) return res.status(404).json({ error: 'not_found' })
-  if (tierList.authorId !== req.session.userId) return res.status(403).json({ error: 'forbidden' })
-
-  const customItems = getCustomTemplateItems(tierList)
+  const payload = parsed.data
+  const normalizedBoardItems = payload.boardItems.map(normalizePoolItem)
+  const customItems = normalizedBoardItems.filter((item) => item?.origin === 'custom')
   if (!customItems.length) return res.status(400).json({ error: 'custom_items_required' })
 
-  if (parsed.data.type === 'create') {
-    if (tierList.gameId !== FREEFORM_GAME_ID) return res.status(400).json({ error: 'freeform_required' })
-  } else {
-    if (tierList.gameId === FREEFORM_GAME_ID) return res.status(400).json({ error: 'game_template_required' })
+  if (payload.type === 'create') {
+    if (payload.gameId !== FREEFORM_GAME_ID) return res.status(400).json({ error: 'freeform_required' })
+  } else if (payload.gameId === FREEFORM_GAME_ID) {
+    return res.status(400).json({ error: 'game_template_required' })
+  }
+
+  let sourceTierList = null
+  if (payload.sourceTierListId) {
+    sourceTierList = await findTierListById(payload.sourceTierListId, req.session.userId)
+    if (!sourceTierList) return res.status(404).json({ error: 'not_found' })
+    if (sourceTierList.authorId !== req.session.userId) return res.status(403).json({ error: 'forbidden' })
+  }
+
+  let savedTierList = null
+  if (payload.saveToMyTierList) {
+    savedTierList = await saveTierList({
+      id: sourceTierList?.id || undefined,
+      authorId: req.session.userId,
+      gameId: payload.gameId,
+      title: payload.requestTitle,
+      thumbnailSrc: payload.thumbnailSrc || '',
+      description: payload.requestDescription || '',
+      isPublic: !!payload.isPublic,
+      showCharacterNames: !!payload.showCharacterNames,
+      sourceTierListId: sourceTierList?.sourceTierListId || '',
+      sourceSnapshotTitle: sourceTierList?.sourceSnapshotTitle || '',
+      sourceSnapshotAuthor: sourceTierList?.sourceSnapshotAuthor || '',
+      groups: payload.groups,
+      pool: normalizedBoardItems,
+    })
   }
 
   try {
     const request = await createTemplateRequest({
       id: nanoid(),
-      type: parsed.data.type,
+      type: payload.type,
       requesterId: req.session.userId,
-      sourceTierListId: tierList.id,
-      sourceGameId: tierList.gameId,
-      targetGameId: parsed.data.type === 'update' ? tierList.gameId : '',
-      title: parsed.data.requestTitle,
-      description: parsed.data.requestDescription,
-      thumbnailSrc: tierList.thumbnailSrc || '',
+      sourceTierListId: savedTierList?.id || sourceTierList?.id || '',
+      sourceGameId: payload.gameId,
+      targetGameId: payload.type === 'update' ? payload.gameId : '',
+      title: payload.requestTitle,
+      description: payload.requestDescription,
+      thumbnailSrc: payload.thumbnailSrc || '',
       items: customItems,
+      groups: payload.groups,
+      boardItems: normalizedBoardItems,
+      showCharacterNames: !!payload.showCharacterNames,
     })
-    return res.json({ request })
+    return res.json({ request, savedTierList: savedTierList ? normalizeTierList(savedTierList) : null })
   } catch (e) {
     if (e?.code === 'TEMPLATE_REQUEST_EXISTS') {
       return res.status(409).json({ error: 'template_request_exists' })

docs/todo.md

@@ -1,7 +1,6 @@
 # 할 일 및 이슈
 
 ## 즉시 확인 필요
-- 티어표 형식 추가 필요. 최근 게임들은 S, A, B,C 같은 랭크 뿐만 아니라 가로 열도 나누어진형태의 티어표를 원함 (공격, 방어, 지원 등 각 파트별 랭크를 보고싶어함)
 - 레거시 파일 정리 스크립트는 준비됐으므로, 운영 단계에서는 cron 등으로 주기 실행할지와 삭제 전 보관 기간을 함께 정한다.
 - 관리자 기본 아이템 다중 업로드는 현재 파일명 기반 자동 라벨만 지원하므로, 필요하면 업로드 후 일괄 라벨 수정/정렬 UX를 추가 검토한다.
 - 사용자 커스텀 아이템 승격은 현재 수동 복제 방식이므로, 필요하면 중복 감지나 “비슷한 항목 추천” 같은 보조 UX를 검토한다.
@@ -17,5 +16,5 @@
 
 ## 중기 개선
 - 관리자용 티어표 승인/숨김 처리, 아이템 정렬 UI를 추가한다.
-- 회원 검색/필터, 일괄 권한 변경 같은 관리 보조 기능을 추가한다.
+- 회원 일괄 작업(다중 선택, 일괄 비밀번호 초기화, 활동 저조 계정 정리) 같은 관리 보조 기능을 추가한다.
 - 티어 행 프리셋 저장, 색상 관리, 행 복제 같은 고급 편집 기능을 추가한다.

docs/update.md

@@ -1,5 +1,30 @@
 # 업데이트 로그
 
+## 2026-04-01 v1.3.15
+- 티어 에디터의 열 이름은 각 행 안에서 반복 렌더링되지 않도록 공통 상단 헤더로 분리해, 행 제목과 같은 구조로 더 또렷하게 구분되도록 수정함.
+- 행 추가/열 추가 액션은 새 SVG 아이콘 버튼으로 압축해, 텍스트 때문에 보드 상단 툴바 높이가 과하게 커지던 문제를 정리함.
+- 미리보기와 삭제 모달 문구도 행/열 기준으로 함께 정리해, 전체 티어 에디터 흐름을 더 일관된 용어와 레이아웃으로 다듬음.
+
+## 2026-04-01 v1.3.14
+- 티어 에디터를 단일 세로 랭크형에서 행/열 혼합 보드로 확장해, 공격·방어·지원 같은 가로 열을 추가하고 각 열 이름도 직접 입력할 수 있게 함.
+- 에디터 액션 문구를 `행 추가 / 열 추가` 기준으로 정리하고, 행 라벨 폭과 드래그 아이콘 위치를 다듬어 실제 사용 빈도에 맞는 더 압축된 보드 레이아웃으로 보정함.
+- 이름 오버레이 정렬과 저장용 미리보기 보드도 함께 손봐서, 이미지 다운로드 시 라벨 텍스트가 하단 중앙에 더 안정적으로 배치되도록 수정함.
+
+## 2026-04-01 v1.3.13
+- 템플릿 등록/업데이트 요청 모달은 이제 현재 티어표 제목·설명을 기본값으로 가져오고, 비어 있더라도 모달 안에서 바로 작성해 요청할 수 있도록 흐름을 단순화함.
+- 템플릿 요청 시 `내 티어 리스트에도 저장` 토글을 추가해, 요청 스냅샷만 관리자에게 전달할지 아니면 현재 양식도 내 티어표로 함께 저장할지 분리함.
+- 관리자 템플릿 요청 관리는 더 이상 원본 티어표 링크에 의존하지 않고, 요청 시점의 그룹/아이템/이름표시 상태를 그대로 담은 스냅샷 미리보기를 직접 열어 확인할 수 있게 확장함.
+
+## 2026-04-01 v1.3.12
+- 관리자 회원 관리 상단에 정렬 방향 선택을 추가해, 최근 활동순·가입순·작성 티어표순을 각각 오름차순/내림차순으로 다시 볼 수 있게 확장함.
+- 회원 정보 수정, 새 게임 생성, 비밀번호 초기화 모달은 Settings 톤 입력 스타일을 유지하면서 각 입력칸에 글자 수 피드백을 함께 보여주도록 정리함.
+- 로그인, 설정, 티어 에디터 제목·설명·요청 제목·요청 설명·티어 행 이름에도 최대 길이와 현재 입력 길이 안내를 붙여, 제출 전에 제한을 바로 인지할 수 있게 개선함.
+
+## 2026-04-01 v1.3.11
+- **회원 관리 편집 모달 전환**: 관리자 회원 카드를 읽기 전용 정보 카드로 바꾸고, `회원 정보 수정` 버튼으로 Settings 톤의 편집 모달에서 이메일/닉네임/운영자 권한을 저장하도록 재구성
+- **회원 검색/정렬 추가**: 회원 관리 상단에 이메일/닉네임 검색과 `최근 활동순`, `가입순`, `작성 티어표 많은 순` 정렬을 추가해 운영자가 원하는 기준으로 목록을 다시 볼 수 있도록 확장
+- **최고 관리자 보호 도입**: 가장 먼저 생성된 관리자 계정을 `최고 관리자`로 구분하고, 운영자는 최고 관리자 권한/아바타/비밀번호/삭제를 변경할 수 없도록 백엔드 보호 로직과 역할 메타데이터를 추가
+
 ## 2026-04-01 v1.3.10
 - 게임 허브 공개 티어표 카드 그리드는 최소/최대 폭을 고정해, 목록이 1~2장뿐일 때도 카드가 화면 전체를 먹으며 과하게 커지지 않도록 보정함.
 - 티어표 행 삭제는 상단 아이콘 대신 우측 하단의 작은 텍스트 액션으로 바꿔, 랭크 카드 안에서 더 조용하고 정돈된 편집 흐름으로 정리함.

frontend/src/assets/icons/add_column_right.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" height="24px" viewBox="0 -960 960 960" width="24px" fill="ffffff"><path d="M160-760v560h240v-560H160ZM80-120v-720h720v160h-80v-80H480v560h240v-80h80v160H80Zm400-360Zm-80 0h80-80Zm0 0Zm320 120v-80h-80v-80h80v-80h80v80h80v80h-80v80h-80Z"/></svg>

frontend/src/assets/icons/add_row_below.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" height="24px" viewBox="0 -960 960 960" width="24px" fill="ffffff"><path d="M200-560h560v-240H200v240Zm-80 400v-720h720v720H680v-80h80v-240H200v240h80v80H120Zm360-320Zm0-80v80-80Zm0 0ZM440-80v-80h-80v-80h80v-80h80v80h80v80h-80v80h-80Z"/></svg>

frontend/src/lib/api.js

@@ -62,7 +62,8 @@ export const api = {
   approveAdminTemplateRequest: (requestId, payload) =>
     request(`/api/admin/template-requests/${encodeURIComponent(requestId)}/approve`, { method: 'POST', body: payload || {} }),
   rejectAdminTemplateRequest: (requestId) => request(`/api/admin/template-requests/${encodeURIComponent(requestId)}/reject`, { method: 'POST', body: {} }),
-  listAdminUsers: () => request('/api/admin/users'),
+  listAdminUsers: ({ q = '', sort = 'recent', direction = 'desc' } = {}) =>
+    request(`/api/admin/users?q=${encodeURIComponent(q)}&sort=${encodeURIComponent(sort)}&direction=${encodeURIComponent(direction)}`),
   updateAdminUser: (userId, payload) =>
     request(`/api/admin/users/${encodeURIComponent(userId)}`, { method: 'PATCH', body: payload }),
   updateAdminUserPassword: (userId, payload) =>
@@ -100,7 +101,7 @@ export const api = {
   unfavoriteTierList: (id) => request(`/api/tierlists/${encodeURIComponent(id)}/favorite`, { method: 'DELETE' }),
   deleteTierList: (id) => request(`/api/tierlists/${encodeURIComponent(id)}`, { method: 'DELETE' }),
   duplicateTierList: (id) => request(`/api/tierlists/${encodeURIComponent(id)}/duplicate`, { method: 'POST' }),
-  requestTierListTemplate: (id, payload) => request(`/api/tierlists/${encodeURIComponent(id)}/template-request`, { method: 'POST', body: payload }),
+  requestTierListTemplate: (payload) => request('/api/tierlists/template-request', { method: 'POST', body: payload }),
   saveTierList: (payload) => request('/api/tierlists', { method: 'POST', body: payload }),
   uploadTierListThumbnail: async (file) => {
     const fd = new FormData()

frontend/src/views/AdminView.vue

@@ -47,6 +47,7 @@ const importModalNewGameId = ref('')
 const importModalNewGameName = ref('')
 const previewModalOpen = ref(false)
 const previewTierList = ref(null)
+const userEditModalOpen = ref(false)
 const userPasswordModalOpen = ref(false)
 const userDeleteModalOpen = ref(false)
 const userRoleModalOpen = ref(false)
@@ -55,9 +56,15 @@ const customItemDeleteModalOpen = ref(false)
 const modalTargetUser = ref(null)
 const modalPasswordDraft = ref('')
 const modalRoleNextAdmin = ref(false)
+const modalUserDraftEmail = ref('')
+const modalUserDraftNickname = ref('')
+const modalUserDraftIsAdmin = ref(false)
 const modalTargetCustomItem = ref(null)
 
 const users = ref([])
+const userQuery = ref('')
+const userSort = ref('recent')
+const userSortDirection = ref('desc')
 const imageStats = ref(null)
 const imageQueue = ref({ concurrency: 1, activeCount: 0, pendingCount: 0 })
 const imageRecentJobs = ref([])
@@ -128,7 +135,7 @@ const adminOverviewStats = computed(() => {
   const publishedTierLists = adminTierLists.value.filter((tierList) => tierList.isPublic).length
   const pendingRequests = templateRequests.value.length
   const orphanItems = customItems.value.filter((item) => item.usageCount === 0).length
-  const adminCount = users.value.filter((user) => user.isAdmin || user.draftIsAdmin).length
+  const adminCount = users.value.filter((user) => user.isAdmin).length
 
   if (activeTab.value === 'featured') {
     return [
@@ -351,9 +358,25 @@ function setUserAvatarInput(userId, el) {
   userAvatarInputs.value[userId] = el
 }
 
-function isUserDirty(user) {
-  if (!user) return false
-  return user.draftEmail !== user.email || (user.draftNickname || '') !== (user.nickname || '') || !!user.draftIsAdmin !== !!user.isAdmin
+const canManageModalRole = computed(() => {
+  if (!auth.user?.isPrimaryAdmin) return false
+  if (!modalTargetUser.value) return false
+  return !modalTargetUser.value.isPrimaryAdmin
+})
+
+const isUserEditDirty = computed(() => {
+  if (!modalTargetUser.value) return false
+  return (
+    modalUserDraftEmail.value.trim() !== (modalTargetUser.value.email || '') ||
+    modalUserDraftNickname.value.trim() !== (modalTargetUser.value.nickname || '') ||
+    !!modalUserDraftIsAdmin.value !== !!modalTargetUser.value.isAdmin
+  )
+})
+
+function roleLabelOf(user) {
+  if (user?.isPrimaryAdmin) return '최고 관리자'
+  if (user?.isAdmin) return '운영자'
+  return '일반 회원'
 }
 
 function openUserAvatarPicker(user) {
@@ -372,17 +395,14 @@ async function uploadUserAvatar(user, file, { remove = false } = {}) {
       entry.id === updated.id
         ? {
             ...entry,
-            avatarSrc: updated.avatarSrc || '',
-            email: updated.email,
-            nickname: updated.nickname || '',
-            isAdmin: !!updated.isAdmin,
-            draftEmail: updated.email,
-            draftNickname: updated.nickname || '',
-            draftIsAdmin: !!updated.isAdmin,
+            ...updated,
             isAvatarBusy: false,
           }
         : entry
     )
+    if (modalTargetUser.value?.id === updated.id) {
+      modalTargetUser.value = { ...modalTargetUser.value, ...updated }
+    }
     if (updated.id === auth.user?.id) await auth.refresh()
     await refreshUsers()
     success.value = remove ? '회원 썸네일을 삭제했어요.' : '회원 썸네일을 업데이트했어요.'
@@ -496,12 +516,9 @@ async function refreshTemplateRequests() {
 async function refreshUsers() {
   if (!auth.user?.isAdmin) return
   try {
-    const data = await api.listAdminUsers()
+    const data = await api.listAdminUsers({ q: userQuery.value, sort: userSort.value, direction: userSortDirection.value })
     users.value = (data.users || []).map((user) => ({
       ...user,
-      draftEmail: user.email,
-      draftNickname: user.nickname || '',
-      draftIsAdmin: !!user.isAdmin,
       isAvatarBusy: false,
     }))
   } catch (e) {
@@ -778,29 +795,45 @@ async function removeGame() {
   }
 }
 
-async function saveUser(user) {
+function openUserEditModal(user) {
   resetMessages()
+  modalTargetUser.value = user ? { ...user } : null
+  modalUserDraftEmail.value = user?.email || ''
+  modalUserDraftNickname.value = user?.nickname || ''
+  modalUserDraftIsAdmin.value = !!user?.isAdmin
+  userEditModalOpen.value = true
+}
+
+function closeUserEditModal() {
+  userEditModalOpen.value = false
+  modalTargetUser.value = null
+  modalUserDraftEmail.value = ''
+  modalUserDraftNickname.value = ''
+  modalUserDraftIsAdmin.value = false
+}
+
+async function saveUserEdit() {
+  resetMessages()
+  if (!modalTargetUser.value?.id) return
+
   try {
-    const data = await api.updateAdminUser(user.id, {
-      email: user.draftEmail,
-      nickname: user.draftNickname,
-      isAdmin: !!user.draftIsAdmin,
+    const data = await api.updateAdminUser(modalTargetUser.value.id, {
+      email: modalUserDraftEmail.value.trim(),
+      nickname: modalUserDraftNickname.value.trim(),
+      isAdmin: !!modalUserDraftIsAdmin.value,
     })
     const updated = data.user
     users.value = users.value.map((entry) =>
       entry.id === updated.id
         ? {
             ...entry,
-            email: updated.email,
-            nickname: updated.nickname || '',
-            isAdmin: !!updated.isAdmin,
-            draftEmail: updated.email,
-            draftNickname: updated.nickname || '',
-            draftIsAdmin: !!updated.isAdmin,
+            ...updated,
+            isAvatarBusy: entry.isAvatarBusy || false,
           }
         : entry
     )
     if (updated.id === auth.user?.id) await auth.refresh()
+    closeUserEditModal()
     await refreshUsers()
     success.value = '회원 정보를 저장했어요.'
   } catch (e) {
@@ -810,7 +843,7 @@ async function saveUser(user) {
 
 function openUserPasswordModal(user) {
   resetMessages()
-  modalTargetUser.value = user || null
+  modalTargetUser.value = user ? { ...user } : null
   modalPasswordDraft.value = ''
   userPasswordModalOpen.value = true
 }
@@ -842,7 +875,7 @@ async function confirmUserPasswordReset() {
 
 function openUserDeleteModal(user) {
   resetMessages()
-  modalTargetUser.value = user || null
+  modalTargetUser.value = user ? { ...user } : null
   userDeleteModalOpen.value = true
 }
 
@@ -869,34 +902,31 @@ async function confirmUserDelete() {
 }
 
 
-function openUserRoleModal(user) {
+function openUserRoleModal(user, nextIsAdmin = !modalUserDraftIsAdmin.value) {
   resetMessages()
-  modalTargetUser.value = user || null
-  modalRoleNextAdmin.value = !user?.draftIsAdmin
+  modalTargetUser.value = user ? { ...user } : null
+  modalRoleNextAdmin.value = !!nextIsAdmin
   userRoleModalOpen.value = true
 }
 
 function closeUserRoleModal() {
   userRoleModalOpen.value = false
-  modalTargetUser.value = null
+  if (!userEditModalOpen.value) modalTargetUser.value = null
   modalRoleNextAdmin.value = false
 }
 
 function confirmUserRoleDraft() {
   if (!modalTargetUser.value?.id) return
-  users.value = users.value.map((entry) =>
-    entry.id === modalTargetUser.value.id
-      ? {
-          ...entry,
-          draftIsAdmin: modalRoleNextAdmin.value,
-        }
-      : entry
-  )
-  const targetLabel = modalRoleNextAdmin.value ? '관리자로 지정했어요. 저장하면 반영됩니다.' : '관리자 권한 해제로 표시했어요. 저장하면 반영됩니다.'
+  modalUserDraftIsAdmin.value = modalRoleNextAdmin.value
+  const targetLabel = modalRoleNextAdmin.value ? '운영자 권한을 저장 대기 상태로 반영했어요.' : '운영자 권한 해제를 저장 대기 상태로 반영했어요.'
   closeUserRoleModal()
   success.value = targetLabel
 }
 
+function submitUserFilters() {
+  refreshUsers()
+}
+
 function submitCustomItemSearch() {
   customItemPage.value = 1
   refreshCustomItems()
@@ -1035,6 +1065,38 @@ function openAdminTierList(tierList) {
   previewModalOpen.value = true
 }
 
+function previewRequestItemsById(preview) {
+  const items = Array.isArray(preview?.snapshotItems) ? preview.snapshotItems : []
+  return items.reduce((acc, item) => {
+    if (item?.id) acc[item.id] = item
+    return acc
+  }, {})
+}
+
+function previewRequestGroupItems(preview, group) {
+  const itemsById = previewRequestItemsById(preview)
+  return (group?.itemIds || []).map((itemId) => itemsById[itemId]).filter(Boolean)
+}
+
+function previewRequestPoolItems(preview) {
+  const groupedIds = new Set((preview?.snapshotGroups || []).flatMap((group) => group.itemIds || []))
+  return (preview?.snapshotItems || []).filter((item) => !groupedIds.has(item.id))
+}
+
+function openTemplateRequestPreview(request) {
+  previewTierList.value = {
+    id: request.id,
+    title: request.sourceTierListTitle || '템플릿 요청 미리보기',
+    description: request.sourceDescription || '',
+    thumbnailSrc: request.thumbnailSrc || '',
+    requestPreview: true,
+    snapshotGroups: request.snapshotGroups || [],
+    snapshotItems: request.snapshotItems || [],
+    snapshotShowCharacterNames: !!request.snapshotShowCharacterNames,
+  }
+  previewModalOpen.value = true
+}
+
 function closePreviewModal() {
   previewModalOpen.value = false
   previewTierList.value = null
@@ -1440,13 +1502,14 @@ async function saveFeaturedOrder() {
                 <div class="templateRequestCard__head">
                   <div>
                     <div class="templateRequestCard__title">{{ request.sourceTierListTitle }}</div>
+                    <div v-if="request.sourceDescription" class="templateRequestCard__desc">{{ request.sourceDescription }}</div>
                     <div class="templateRequestCard__meta">
                       {{ templateRequestTypeLabel(request) }} · {{ request.requesterName }} · {{ fmt(request.createdAt) }}
                     </div>
                     <div class="templateRequestCard__meta">{{ templateRequestTargetLabel(request) }}</div>
                   </div>
-                  <button class="btn btn--ghost btn--small" @click="openAdminTierList({ id: request.sourceTierListId, gameId: request.sourceGameId })">
-                    원본 보기
+                  <button class="btn btn--ghost btn--small" @click="openTemplateRequestPreview(request)">
+                    요청 미리보기
                   </button>
                 </div>
 
@@ -1548,6 +1611,25 @@ async function saveFeaturedOrder() {
               </div>
             </div>
 
+            <div class="toolbar toolbar--secondary">
+              <input
+                v-model="userQuery"
+                class="input toolbar__search"
+                placeholder="이메일, 닉네임 검색"
+                @keydown.enter.prevent="submitUserFilters"
+              />
+              <select v-model="userSort" class="select toolbar__select" @change="submitUserFilters">
+                <option value="recent">최근 활동순</option>
+                <option value="created">가입순</option>
+                <option value="tierlists">작성 티어표 많은 순</option>
+              </select>
+              <select v-model="userSortDirection" class="select toolbar__select" @change="submitUserFilters">
+                <option value="desc">내림차순</option>
+                <option value="asc">오름차순</option>
+              </select>
+              <button class="btn btn--ghost toolbar__button" type="button" @click="submitUserFilters">조회</button>
+            </div>
+
             <div v-if="!users.length" class="hint">아직 가입한 회원이 없어요.</div>
             <div v-else class="userList">
               <article v-for="user in users" :key="user.id" class="userCard">
@@ -1584,25 +1666,17 @@ async function saveFeaturedOrder() {
                   </div>
                 </div>
 
-                <div v-if="user.draftIsAdmin" class="roleBadge userCard__roleBadge">Administrator</div>
+                <div v-if="user.isAdmin" class="roleBadge userCard__roleBadge">{{ roleLabelOf(user) }}</div>
 
                 <div class="userInfoList">
                   <div class="userInfoLine"><span>가입일</span><strong>{{ fmt(user.createdAt) }}</strong></div>
                   <div class="userInfoLine"><span>작성 티어표</span><strong>{{ user.tierListCount }}개</strong></div>
                   <div class="userInfoLine"><span>최근 활동</span><strong>{{ fmt(user.recentActivityAt || user.createdAt) }}</strong></div>
+                  <div class="userInfoLine"><span>계정명</span><strong>{{ user.email }}</strong></div>
+                  <div class="userInfoLine"><span>닉네임</span><strong>{{ user.nickname || '미설정' }}</strong></div>
+                  <div class="userInfoLine"><span>권한</span><strong>{{ roleLabelOf(user) }}</strong></div>
                 </div>
 
-                <input v-model="user.draftEmail" class="input" placeholder="이메일" />
-                <input v-model="user.draftNickname" class="input" placeholder="닉네임" />
-                <button
-                  class="userRoleAction"
-                  type="button"
-                  :disabled="user.id === auth.user?.id"
-                  @click="openUserRoleModal(user)"
-                >
-                  {{ user.draftIsAdmin ? '관리자 권한 해제' : '관리자 권한 임명' }}
-                </button>
-
                 <div class="userCard__actions userCard__actions--compact">
                   <button class="iconActionButton" type="button" title="비밀번호 초기화" @click="openUserPasswordModal(user)">
                     <SvgIcon class="iconActionButton__icon" :src="lockResetIcon" :size="18" />
@@ -1610,7 +1684,7 @@ async function saveFeaturedOrder() {
                   <button class="iconActionButton iconActionButton--danger" type="button" title="회원 삭제" @click="openUserDeleteModal(user)">
                     <SvgIcon class="iconActionButton__icon" :src="deleteIcon" :size="18" />
                   </button>
-                  <button class="btn btn--ghost userSaveButton" :disabled="!isUserDirty(user)" @click="saveUser(user)">회원정보 저장</button>
+                  <button class="btn btn--ghost userSaveButton" type="button" @click="openUserEditModal(user)">회원 정보 수정</button>
                 </div>
               </article>
             </div>
@@ -1622,8 +1696,22 @@ async function saveFeaturedOrder() {
                 <div class="modalCard__title">새 게임 만들기</div>
                 <div class="modalCard__desc">게임 이름과 고유 ID를 입력한 뒤 생성하면 바로 아래 상세 관리 화면으로 이어집니다.</div>
                 <div class="modalCard__form">
-                  <input v-model="newGameName" class="input" placeholder="게임 이름" />
-                  <input v-model="newGameId" class="input" placeholder="game id (영문/숫자)" @keydown.enter.prevent="createGame" />
+                  <label class="field">
+                    <span class="field__label">게임 이름</span>
+                    <input v-model="newGameName" class="field__input" maxlength="60" placeholder="게임 이름" />
+                    <span class="field__hint">{{ newGameName.length }}/60자</span>
+                  </label>
+                  <label class="field">
+                    <span class="field__label">게임 ID</span>
+                    <input
+                      v-model="newGameId"
+                      class="field__input"
+                      maxlength="120"
+                      placeholder="game id (영문/숫자)"
+                      @keydown.enter.prevent="createGame"
+                    />
+                    <span class="field__hint">영문, 숫자, 하이픈 조합 권장 · {{ newGameId.length }}/120자</span>
+                  </label>
                 </div>
                 <div class="modalCard__actions">
                   <button class="btn btn--ghost" @click="closeGameCreateModal">취소</button>
@@ -1632,12 +1720,56 @@ async function saveFeaturedOrder() {
               </div>
             </div>
 
+            <div v-if="userEditModalOpen" class="modalOverlay" @click.self="closeUserEditModal">
+              <div class="modalCard modalCard--userEdit" role="dialog" aria-modal="true">
+                <div class="modalCard__title">회원 정보 수정</div>
+                <div class="modalCard__desc">{{ modalTargetUser ? `${userDisplayName(modalTargetUser)} 계정의 정보와 권한을 조정할 수 있어요.` : '' }}</div>
+                <div class="userEditForm">
+                  <label class="field">
+                    <span class="field__label">이메일</span>
+                    <input v-model="modalUserDraftEmail" class="field__input" maxlength="255" placeholder="계정 이메일" />
+                    <span class="field__hint">로그인 계정으로 사용하는 이메일입니다. {{ modalUserDraftEmail.length }}/255자</span>
+                  </label>
+
+                  <label class="field">
+                    <span class="field__label">닉네임</span>
+                    <input v-model="modalUserDraftNickname" class="field__input" maxlength="40" placeholder="표시용 닉네임" />
+                    <span class="field__hint">티어표 작성자명과 프로필에 표시됩니다. {{ modalUserDraftNickname.length }}/40자</span>
+                  </label>
+
+                  <button
+                    v-if="canManageModalRole"
+                    class="userRoleAction"
+                    type="button"
+                    @click="openUserRoleModal(modalTargetUser, !modalUserDraftIsAdmin)"
+                  >
+                    {{ modalUserDraftIsAdmin ? '운영자 권한 해제' : '운영자 권한 부여' }}
+                  </button>
+                </div>
+                <div class="modalCard__actions">
+                  <button class="btn btn--ghost" @click="closeUserEditModal">취소</button>
+                  <button class="btn btn--primary" :disabled="!isUserEditDirty" @click="saveUserEdit">회원 정보 저장</button>
+                </div>
+              </div>
+            </div>
+
             <div v-if="userPasswordModalOpen" class="modalOverlay" @click.self="closeUserPasswordModal">
               <div class="modalCard" role="dialog" aria-modal="true">
                 <div class="modalCard__title">비밀번호 초기화</div>
                 <div class="modalCard__desc">{{ modalTargetUser ? `${userDisplayName(modalTargetUser)} 계정에 설정할 새 비밀번호를 입력해주세요.` : '' }}</div>
                 <div class="modalCard__form">
-                  <input v-model="modalPasswordDraft" class="input" type="password" placeholder="초기화할 비밀번호 입력" @keydown.enter.prevent="confirmUserPasswordReset" />
+                  <label class="field">
+                    <span class="field__label">새 비밀번호</span>
+                    <input
+                      v-model="modalPasswordDraft"
+                      class="field__input"
+                      type="password"
+                      maxlength="120"
+                      placeholder="초기화할 비밀번호 입력"
+                      @keydown.enter.prevent="confirmUserPasswordReset"
+                    />
+                    <span class="field__hint">6~120자 권장 · {{ modalPasswordDraft.length }}/120자</span>
+                  </label>
                 </div>
                 <div class="modalCard__actions">
                   <button class="btn btn--ghost" @click="closeUserPasswordModal">취소</button>
@@ -1659,13 +1791,13 @@ async function saveFeaturedOrder() {
 
             <div v-if="userRoleModalOpen" class="modalOverlay" @click.self="closeUserRoleModal">
               <div class="modalCard" role="dialog" aria-modal="true">
-                <div class="modalCard__title">관리자 권한 변경</div>
+                <div class="modalCard__title">운영자 권한 변경</div>
                 <div class="modalCard__desc">
                   {{
                     modalTargetUser
                       ? modalRoleNextAdmin
-                        ? `${userDisplayName(modalTargetUser)} 사용자를 관리자로 임명할까요?`
-                        : `${userDisplayName(modalTargetUser)} 사용자의 관리자 권한을 해제할까요?`
+                        ? `${userDisplayName(modalTargetUser)} 사용자를 운영자로 지정할까요?`
+                        : `${userDisplayName(modalTargetUser)} 사용자의 운영자 권한을 해제할까요?`
                       : ''
                   }}
                 </div>
@@ -1787,8 +1919,45 @@ async function saveFeaturedOrder() {
                   <div class="modalCard__title">{{ previewTierList?.title || '티어표 미리보기' }}</div>
                   <button class="btn btn--ghost btn--small" @click="closePreviewModal">닫기</button>
                 </div>
+                <div v-if="previewTierList?.requestPreview" class="requestPreview">
+                  <img
+                    v-if="previewTierList.thumbnailSrc"
+                    class="requestPreview__thumb"
+                    :src="toApiUrl(previewTierList.thumbnailSrc)"
+                    :alt="previewTierList.title"
+                  />
+                  <div v-if="previewTierList.description" class="requestPreview__desc">{{ previewTierList.description }}</div>
+                  <div class="requestPreview__rows">
+                    <div v-for="group in previewTierList.snapshotGroups" :key="group.id" class="requestPreview__row">
+                      <div class="requestPreview__rowLabel">{{ group.name }}</div>
+                      <div class="requestPreview__rowItems">
+                        <div
+                          v-for="item in previewRequestGroupItems(previewTierList, group)"
+                          :key="item.id"
+                          class="requestPreview__item"
+                        >
+                          <img class="requestPreview__itemThumb" :src="toApiUrl(item.src)" :alt="item.label" />
+                          <div v-if="previewTierList.snapshotShowCharacterNames" class="requestPreview__itemLabel">{{ item.label }}</div>
+                        </div>
+                      </div>
+                    </div>
+                  </div>
+                  <div v-if="previewRequestPoolItems(previewTierList).length" class="requestPreview__pool">
+                    <div class="requestPreview__poolLabel">남은 아이템</div>
+                    <div class="requestPreview__rowItems">
+                      <div
+                        v-for="item in previewRequestPoolItems(previewTierList)"
+                        :key="item.id"
+                        class="requestPreview__item requestPreview__item--muted"
+                      >
+                        <img class="requestPreview__itemThumb" :src="toApiUrl(item.src)" :alt="item.label" />
+                        <div v-if="previewTierList.snapshotShowCharacterNames" class="requestPreview__itemLabel">{{ item.label }}</div>
+                      </div>
+                    </div>
+                  </div>
+                </div>
                 <iframe
-                  v-if="previewTierList"
+                  v-else-if="previewTierList"
                   class="previewFrame"
                   :src="previewTierListUrl(previewTierList)"
                   title="티어표 미리보기"
@@ -2459,11 +2628,11 @@ async function saveFeaturedOrder() {
   border: 0;
 }
 .btn {
+  height: 100%;
   font-size: 12px;
   line-height: 1.2;
   white-space: nowrap;
   word-break: keep-all;
-  margin-top: 12px;
   padding: 11px 13px;
   border-radius: 14px;
   border: 1px solid rgba(255, 255, 255, 0.14);
@@ -2995,6 +3164,44 @@ async function saveFeaturedOrder() {
   font-size: 14px;
   font-weight: 900;
 }
+.field {
+  display: grid;
+  gap: 8px;
+}
+.field__label {
+  font-size: 13px;
+  color: rgba(255, 255, 255, 0.62);
+}
+.field__input {
+  width: 100%;
+  padding: 14px 0;
+  border: 0;
+  border-bottom: 1px solid rgba(255, 255, 255, 0.12);
+  background: transparent;
+  color: rgba(255, 255, 255, 0.94);
+  outline: none;
+  font-size: 18px;
+  letter-spacing: -0.02em;
+}
+.field__input:focus {
+  border-bottom-color: rgba(96, 165, 250, 0.9);
+}
+.field__hint {
+  font-size: 12px;
+  color: rgba(255, 255, 255, 0.42);
+}
+
+.userEditForm {
+  display: grid;
+  gap: 18px;
+}
+.userEditForm .field {
+  gap: 10px;
+}
+.modalCard--userEdit {
+  max-width: 520px;
+}
+
 .userCard__actions {
   display: grid;
   grid-template-columns: repeat(2, minmax(0, 1fr));
@@ -3003,6 +3210,7 @@ async function saveFeaturedOrder() {
 .userCard__actions--compact {
   grid-template-columns: auto auto minmax(0, 1fr);
   align-items: center;
+  margin-top: 12px;
 }
 .roleBadge {
   width: fit-content;
@@ -3086,6 +3294,12 @@ async function saveFeaturedOrder() {
   font-weight: 900;
   font-size: 18px;
 }
+.templateRequestCard__desc {
+  margin-top: 6px;
+  color: rgba(255, 255, 255, 0.74);
+  line-height: 1.55;
+  white-space: pre-line;
+}
 .templateRequestCard__meta {
   margin-top: 4px;
   font-size: 13px;
@@ -3134,6 +3348,76 @@ async function saveFeaturedOrder() {
   justify-content: flex-end;
   flex-wrap: wrap;
 }
+.requestPreview {
+  display: grid;
+  gap: 18px;
+}
+.requestPreview__thumb {
+  width: 100%;
+  max-height: 240px;
+  object-fit: cover;
+  border-radius: 18px;
+  border: 1px solid rgba(255, 255, 255, 0.08);
+  background: rgba(255, 255, 255, 0.04);
+}
+.requestPreview__desc {
+  color: rgba(255, 255, 255, 0.74);
+  line-height: 1.6;
+  white-space: pre-line;
+}
+.requestPreview__rows,
+.requestPreview__pool {
+  display: grid;
+  gap: 12px;
+}
+.requestPreview__row {
+  display: grid;
+  grid-template-columns: 88px minmax(0, 1fr);
+  gap: 12px;
+  align-items: start;
+}
+.requestPreview__rowLabel,
+.requestPreview__poolLabel {
+  font-size: 13px;
+  font-weight: 800;
+  color: rgba(255, 255, 255, 0.86);
+}
+.requestPreview__rowItems {
+  display: grid;
+  grid-template-columns: repeat(auto-fill, minmax(72px, 1fr));
+  gap: 10px;
+}
+.requestPreview__item {
+  position: relative;
+  overflow: hidden;
+  border-radius: 14px;
+  border: 1px solid rgba(255, 255, 255, 0.12);
+  background: rgba(255, 255, 255, 0.04);
+  min-height: 72px;
+}
+.requestPreview__item--muted {
+  opacity: 0.52;
+  filter: grayscale(0.2) brightness(0.78);
+}
+.requestPreview__itemThumb {
+  width: 100%;
+  aspect-ratio: 1 / 1;
+  object-fit: cover;
+  display: block;
+}
+.requestPreview__itemLabel {
+  position: absolute;
+  left: 8px;
+  right: 8px;
+  bottom: 8px;
+  padding: 4px 6px;
+  border-radius: 8px;
+  background: linear-gradient(180deg, rgba(0, 0, 0, 0.02), rgba(0, 0, 0, 0.7));
+  font-size: 11px;
+  font-weight: 700;
+  text-align: center;
+  line-height: 1.3;
+}
 .tierAdminList {
   margin-top: 14px;
   display: grid;

frontend/src/views/LoginView.vue

@@ -79,8 +79,8 @@ async function submit() {
       <form class="authFields" @submit.prevent="submit">
         <label class="field">
           <span class="field__label">이메일</span>
-          <input v-model="email" class="field__input" placeholder="you@example.com" autocomplete="email" />
-          <span class="field__hint">로그인과 알림에 사용되는 계정 이메일입니다.</span>
+          <input v-model="email" class="field__input" placeholder="you@example.com" autocomplete="email" maxlength="255" />
+          <span class="field__hint">로그인과 알림에 사용되는 계정 이메일입니다. {{ email.length }}/255자</span>
         </label>
 
         <label class="field">
@@ -91,8 +91,9 @@ async function submit() {
             type="password"
             placeholder="********"
             autocomplete="current-password"
+            maxlength="120"
           />
-          <span class="field__hint">8자 이상으로 설정하면 더 안전하게 사용할 수 있어요.</span>
+          <span class="field__hint">6~120자 입력 가능 · {{ password.length }}/120자</span>
         </label>
 
         <label v-if="mode === 'signup'" class="field">
@@ -103,8 +104,9 @@ async function submit() {
             type="password"
             placeholder="********"
             autocomplete="new-password"
+            maxlength="120"
           />
-          <span class="field__hint">같은 비밀번호를 한 번 더 입력해주세요.</span>
+          <span class="field__hint">같은 비밀번호를 한 번 더 입력해주세요. {{ passwordConfirm.length }}/120자</span>
         </label>
 
         <div v-if="!hasUsers" class="roleBadge">첫 회원가입 계정은 자동으로 관리자 권한이 부여됩니다.</div>

frontend/src/views/ProfileView.vue

@@ -156,8 +156,8 @@ async function logout() {
       <div class="settingsFields">
         <label class="field">
           <span class="field__label">닉네임</span>
-          <input v-model="nickname" class="field__input" placeholder="작성자 닉네임" />
-          <span class="field__hint">티어표 작성자 이름으로 표시됩니다.</span>
+          <input v-model="nickname" class="field__input" maxlength="40" placeholder="작성자 닉네임" />
+          <span class="field__hint">티어표 작성자 이름으로 표시됩니다. {{ nickname.length }}/40자</span>
         </label>
 
         <label class="field">

frontend/src/views/TierEditorView.vue

@@ -3,6 +3,9 @@ import { Teleport, computed, inject, nextTick, onMounted, onUnmounted, ref, watc
 import { useRoute, useRouter } from 'vue-router'
 import Sortable from 'sortablejs'
 import * as htmlToImage from 'html-to-image'
+import SvgIcon from '../components/SvgIcon.vue'
+import addColumnRightIcon from '../assets/icons/add_column_right.svg'
+import addRowBelowIcon from '../assets/icons/add_row_below.svg'
 import { api } from '../lib/api'
 import { toApiUrl } from '../lib/runtime'
 import { useAuthStore } from '../stores/auth'
@@ -19,11 +22,12 @@ const tierListId = computed(() => route.params.tierListId)
 const previewMode = computed(() => route.query.preview === '1')
 const gameName = ref('')
 
+const columns = ref([{ id: 'col-1', name: '' }])
 const groups = ref([
-  { id: 'gS', name: 'S', itemIds: [] },
-  { id: 'gA', name: 'A', itemIds: [] },
-  { id: 'gB', name: 'B', itemIds: [] },
-  { id: 'gC', name: 'C', itemIds: [] },
+  { id: 'gS', name: 'S', itemIds: [], cells: [[]] },
+  { id: 'gA', name: 'A', itemIds: [], cells: [[]] },
+  { id: 'gB', name: 'B', itemIds: [], cells: [[]] },
+  { id: 'gC', name: 'C', itemIds: [], cells: [[]] },
 ])
 
 const pool = ref([])
@@ -44,6 +48,7 @@ const isTemplateRequestModalOpen = ref(false)
 const isTemplateUpdateModalOpen = ref(false)
 const templateRequestDraftTitle = ref('')
 const templateRequestDraftDescription = ref('')
+const templateRequestSaveToMyTierList = ref(true)
 const isDeleteModalOpen = ref(false)
 const isGroupDeleteModalOpen = ref(false)
 const pendingRemoveGroupId = ref('')
@@ -119,14 +124,7 @@ const canRequestTemplateCreate = computed(
 const canRequestTemplateUpdate = computed(
   () => canEdit.value && !isNewTierList.value && gameId.value !== 'freeform' && customItems.value.length > 0
 )
-const templateRequestChecks = computed(() => [
-  {
-    id: 'title',
-    label: '티어표 이름(게임 이름)을 직접 입력했는지',
-    passed: !!(title.value || '').trim() && (title.value || '').trim() !== (gameName.value || '').trim(),
-  },
-])
-const canSubmitTemplateCreateRequest = computed(() => templateRequestChecks.value.every((item) => item.passed) && !!templateRequestDraftTitle.value.trim() && !!templateRequestDraftDescription.value.trim())
+const canSubmitTemplateCreateRequest = computed(() => !!templateRequestDraftTitle.value.trim() && !!templateRequestDraftDescription.value.trim())
 const canSubmitTemplateUpdateRequest = computed(() => !!templateRequestDraftTitle.value.trim() && !!templateRequestDraftDescription.value.trim())
 const templateRequestTargetLabel = computed(() => (gameId.value === 'freeform' ? '새로운 템플릿' : (gameName.value || gameId.value || '선택한 게임')))
 
@@ -160,38 +158,107 @@ function setIconSize(nextSize) {
   iconSize.value = nextSize
 }
 
-function removeItemFromGroup(groupId, itemId) {
-  if (!canEdit.value || !groupId || !itemId) return
+function getGroupCellIds(group, columnIndex) {
+  return Array.isArray(group?.cells?.[columnIndex]) ? group.cells[columnIndex] : []
+}
+
+function syncGroupItemIds(group) {
+  group.itemIds = (group.cells || []).flat()
+}
+
+function normalizeLoadedColumns(rawGroups) {
+  const fromGroup = Array.isArray(rawGroups) ? rawGroups.find((group) => Array.isArray(group?.columnNames) && group.columnNames.length) : null
+  const rawColumns = Array.isArray(fromGroup?.columnNames) ? fromGroup.columnNames : []
+  const cellCount = Math.max(1, ...(Array.isArray(rawGroups) ? rawGroups.map((group) => (Array.isArray(group?.cells) ? group.cells.length : 0)) : [0]))
+  const size = Math.max(rawColumns.length || 0, cellCount)
+  return Array.from({ length: size || 1 }, (_, index) => ({
+    id: rawColumns[index]?.id || `col-${index + 1}` ,
+    name: typeof rawColumns[index]?.name === 'string' ? rawColumns[index].name.slice(0, 16) : '',
+  }))
+}
+
+function normalizeLoadedGroups(rawGroups, nextColumns = columns.value) {
+  if (!Array.isArray(rawGroups) || !rawGroups.length) {
+    return [
+      { id: 'gS', name: 'S', itemIds: [], cells: nextColumns.map(() => []) },
+      { id: 'gA', name: 'A', itemIds: [], cells: nextColumns.map(() => []) },
+      { id: 'gB', name: 'B', itemIds: [], cells: nextColumns.map(() => []) },
+      { id: 'gC', name: 'C', itemIds: [], cells: nextColumns.map(() => []) },
+    ]
+  }
+  return rawGroups.map((group, index) => {
+    const cells = Array.from({ length: nextColumns.length }, (_, cellIndex) => {
+      if (Array.isArray(group?.cells?.[cellIndex])) return [...group.cells[cellIndex]]
+      if (cellIndex === 0 && Array.isArray(group?.itemIds)) return [...group.itemIds]
+      return []
+    })
+    return {
+      id: typeof group?.id === 'string' && group.id ? group.id : `g-${index + 1}` ,
+      name: typeof group?.name === 'string' && group.name ? group.name.slice(0, 16) : 'Tier',
+      itemIds: cells.flat(),
+      cells,
+    }
+  })
+}
+
+function buildGroupPayload() {
+  return groups.value.map((group) => ({
+    id: group.id,
+    name: group.name,
+    itemIds: (group.cells || []).flat(),
+    cells: (group.cells || []).map((cell) => [...cell]),
+    columnNames: columns.value.map((column) => ({ id: column.id, name: column.name || '' })),
+  }))
+}
+
+function removeItemFromGroup(groupId, columnIndex, itemId) {
+  if (!canEdit.value || !groupId || columnIndex == null || !itemId) return
   const targetGroup = groups.value.find((group) => group.id === groupId)
   if (!targetGroup) return
-  if (!targetGroup.itemIds.includes(itemId)) return
-  targetGroup.itemIds = targetGroup.itemIds.filter((id) => id !== itemId)
+  const nextCells = [...targetGroup.cells]
+  nextCells[columnIndex] = getGroupCellIds(targetGroup, columnIndex).filter((id) => id !== itemId)
+  targetGroup.cells = nextCells
+  syncGroupItemIds(targetGroup)
   pool.value = [itemId, ...pool.value.filter((id) => id !== itemId)]
 }
 
-function setGroupDropEl(groupId, el) {
+function setGroupDropEl(groupId, columnIndex, el) {
+  const key = `${groupId}::${columnIndex}`
   if (!el) {
-    delete groupDropEls.value[groupId]
+    delete groupDropEls.value[key]
     return
   }
-  groupDropEls.value[groupId] = el
+  groupDropEls.value[key] = el
 }
 
 function getListByContainer(containerEl) {
-  if (!containerEl) return { type: null, groupId: null }
+  if (!containerEl) return { type: null, groupId: null, columnIndex: null }
   const t = containerEl.getAttribute('data-list-type')
-  if (t === 'pool') return { type: 'pool', groupId: null }
-  if (t === 'group') return { type: 'group', groupId: containerEl.getAttribute('data-group-id') }
-  return { type: null, groupId: null }
+  if (t === 'pool') return { type: 'pool', groupId: null, columnIndex: null }
+  if (t === 'group') {
+    return {
+      type: 'group',
+      groupId: containerEl.getAttribute('data-group-id'),
+      columnIndex: Number(containerEl.getAttribute('data-column-index')),
+    }
+  }
+  return { type: null, groupId: null, columnIndex: null }
 }
 
 function normalizeSort(containerEl) {
   const ids = Array.from(containerEl.querySelectorAll('[data-item-id]')).map((n) => n.getAttribute('data-item-id'))
   const meta = getListByContainer(containerEl)
-  if (meta.type === 'pool') pool.value = ids
+  if (meta.type === 'pool') {
+    pool.value = ids
+    return
+  }
   if (meta.type === 'group') {
     const g = groups.value.find((x) => x.id === meta.groupId)
-    if (g) g.itemIds = ids
+    if (!g || !Number.isInteger(meta.columnIndex)) return
+    const nextCells = [...g.cells]
+    nextCells[meta.columnIndex] = ids
+    g.cells = nextCells
+    syncGroupItemIds(g)
   }
 }
 
@@ -230,7 +297,7 @@ async function initSortables() {
     onAdd: () => normalizeSort(poolEl.value),
   })
 
-  dropSortables.value = Object.entries(groupDropEls.value).map(([gid, el]) =>
+  dropSortables.value = Object.entries(groupDropEls.value).map(([, el]) =>
     Sortable.create(el, {
       group: 'tier-items',
       animation: 160,
@@ -263,32 +330,69 @@ async function syncSortables() {
   }
 }
 
-function createGroupName() {
+function createGroupName(index = groups.value.length) {
   const alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ'
-  const index = groups.value.length
   if (index < alphabet.length) return alphabet[index]
   return `Tier ${index + 1}`
 }
 
+function createColumnName(index = columns.value.length) {
+  return `열 ${index + 1}`
+}
+
 async function addGroup() {
   groups.value = [
     ...groups.value,
     {
-      id: `g-${Date.now()}-${Math.random().toString(16).slice(2, 8)}`,
+      id: `g-${Date.now()}-${Math.random().toString(16).slice(2, 8)}` ,
       name: createGroupName(),
       itemIds: [],
+      cells: columns.value.map(() => []),
     },
   ]
   await syncSortables()
 }
 
+async function addColumn() {
+  columns.value = [
+    ...columns.value,
+    { id: `col-${Date.now()}-${Math.random().toString(16).slice(2, 8)}`, name: createColumnName() },
+  ]
+  groups.value = groups.value.map((group) => ({
+    ...group,
+    cells: [...group.cells, []],
+    itemIds: [...group.itemIds],
+  }))
+  await syncSortables()
+}
+
+async function removeColumn(columnIndex) {
+  if (!canEdit.value || columns.value.length <= 1) return
+  const nextColumns = columns.value.filter((_, index) => index !== columnIndex)
+  groups.value = groups.value.map((group) => {
+    const nextCells = group.cells.filter((_, index) => index !== columnIndex)
+    const removed = Array.isArray(group.cells[columnIndex]) ? group.cells[columnIndex] : []
+    if (nextCells[0] && removed.length) nextCells[0] = [...removed, ...nextCells[0]]
+    const nextGroup = { ...group, cells: nextCells }
+    syncGroupItemIds(nextGroup)
+    return nextGroup
+  })
+  Object.keys(groupDropEls.value).forEach((key) => {
+    if (key.endsWith(`::${columnIndex}`)) delete groupDropEls.value[key]
+  })
+  columns.value = nextColumns
+  await syncSortables()
+}
+
 async function performRemoveGroup(groupId) {
   if (groups.value.length <= 1) return
   const target = groups.value.find((group) => group.id === groupId)
   if (!target) return
   pool.value = [...target.itemIds, ...pool.value]
   groups.value = groups.value.filter((group) => group.id !== groupId)
-  delete groupDropEls.value[groupId]
+  Object.keys(groupDropEls.value).forEach((key) => {
+    if (key.startsWith(`${groupId}::`)) delete groupDropEls.value[key]
+  })
   await syncSortables()
 }
 
@@ -475,10 +579,14 @@ async function uploadPendingCustomItems() {
     }
     itemsById.value = nextItemsById
     pool.value = pool.value.map((currentId) => (currentId === item.id ? uploaded.id : currentId))
-    groups.value = groups.value.map((group) => ({
-      ...group,
-      itemIds: group.itemIds.map((currentId) => (currentId === item.id ? uploaded.id : currentId)),
-    }))
+    groups.value = groups.value.map((group) => {
+      const nextGroup = {
+        ...group,
+        cells: group.cells.map((cell) => cell.map((currentId) => (currentId === item.id ? uploaded.id : currentId))),
+      }
+      syncGroupItemIds(nextGroup)
+      return nextGroup
+    })
   }
 }
 
@@ -507,7 +615,7 @@ function buildPayload(existingId) {
     sourceTierListId: sourceTierListId.value || '',
     sourceSnapshotTitle: sourceSnapshotTitle.value || '',
     sourceSnapshotAuthor: sourceSnapshotAuthor.value || '',
-    groups: groups.value.map((g) => ({ id: g.id, name: g.name, itemIds: g.itemIds })),
+    groups: buildGroupPayload(),
     pool: Object.values(itemsById.value),
   }
 }
@@ -547,8 +655,9 @@ function closeSaveModal() {
 }
 
 function resetTemplateRequestDrafts() {
-  templateRequestDraftTitle.value = ''
-  templateRequestDraftDescription.value = ''
+  templateRequestDraftTitle.value = (title.value || '').trim()
+  templateRequestDraftDescription.value = (description.value || '').trim()
+  templateRequestSaveToMyTierList.value = true
 }
 
 function openTemplateRequestModal() {
@@ -624,27 +733,50 @@ async function toggleFavorite() {
 }
 
 async function requestTemplate(type) {
-  if (isNewTierList.value) {
-    toast.error('요청 전에 먼저 티어표를 저장해주세요.')
-    return
-  }
-
   try {
     isRequestingTemplate.value = true
-    const persisted = await persistTierList({ showModal: false })
-    await api.requestTierListTemplate(persisted.savedTierListId, {
+    await uploadPendingCustomItems()
+    const uploadedThumbnailSrc = await uploadPendingThumbnail()
+    const response = await api.requestTierListTemplate({
       type,
+      sourceTierListId: tierListId.value !== 'new' ? tierListId.value : '',
+      gameId: gameId.value,
       requestTitle: templateRequestDraftTitle.value.trim(),
       requestDescription: templateRequestDraftDescription.value.trim(),
+      thumbnailSrc: uploadedThumbnailSrc || thumbnailSrc.value || '',
+      isPublic: !!isPublic.value,
+      showCharacterNames: !!showCharacterNames.value,
+      saveToMyTierList: !!templateRequestSaveToMyTierList.value,
+      groups: buildGroupPayload(),
+      boardItems: Object.values(itemsById.value),
     })
+
+    const savedTierList = response?.savedTierList
+    if (savedTierList) {
+      title.value = savedTierList.title || title.value
+      description.value = savedTierList.description || ''
+      updatedAt.value = Number(savedTierList.updatedAt || Date.now())
+      authorName.value = savedTierList.authorName || effectiveAuthorName.value
+      authorAccountName.value = savedTierList.authorAccountName || authorAccountName.value
+      favoriteCount.value = Number(savedTierList.favoriteCount || favoriteCount.value || 0)
+      isFavorited.value = !!savedTierList.isFavorited
+      if (tierListId.value === 'new' && savedTierList.id) {
+        await router.replace(`/editor/${gameId.value}/${savedTierList.id}`)
+      }
+    }
+
     if (type === 'create') closeTemplateRequestModal()
     if (type === 'update') closeTemplateUpdateModal()
-    toast.success(type === 'create' ? '템플릿 등록 요청을 보냈어요.' : '템플릿 업데이트 요청을 보냈어요.')
+    toast.success(
+      type === 'create'
+        ? templateRequestSaveToMyTierList.value
+          ? '템플릿 등록 요청과 내 티어표 저장을 함께 완료했어요.'
+          : '템플릿 등록 요청을 보냈어요.'
+        : templateRequestSaveToMyTierList.value
+          ? '템플릿 업데이트 요청과 내 티어표 저장을 함께 완료했어요.'
+          : '템플릿 업데이트 요청을 보냈어요.'
+    )
   } catch (e) {
-    if (e?.status === 400 && e?.data?.error === 'title_required') {
-      toast.error('템플릿 등록 요청 전에는 티어표 이름을 직접 입력해주세요.')
-      return
-    }
     if (e?.status === 409) {
       toast.error('이미 처리 대기 중인 같은 요청이 있어요.')
       return
@@ -705,12 +837,13 @@ onMounted(() => {
         sourceSnapshotAuthor.value = t.sourceSnapshotAuthor || ''
         favoriteCount.value = Number(t.favoriteCount || 0)
         isFavorited.value = !!t.isFavorited
-        groups.value = t.groups
+        columns.value = normalizeLoadedColumns(t.groups)
+        groups.value = normalizeLoadedGroups(t.groups, columns.value)
         const map = {}
         ;(t.pool || []).forEach((it) => (map[it.id] = it))
         itemsById.value = map
         const grouped = new Set()
-        groups.value.forEach((g) => g.itemIds.forEach((id) => grouped.add(id)))
+        groups.value.forEach((group) => group.itemIds.forEach((id) => grouped.add(id)))
         pool.value = Object.keys(itemsById.value).filter((id) => !grouped.has(id))
       } catch (e) {
         error.value = '티어표를 불러오지 못했어요.'
@@ -735,13 +868,23 @@ onUnmounted(() => {
     <div class="previewOnly__sheet">
       <div class="previewOnly__title">{{ effectiveTitle }}</div>
       <div v-if="description" class="previewOnly__description">{{ description }}</div>
+      <div v-if="columns.length > 1" class="previewOnly__columns">
+        <div class="previewOnly__columnsSpacer" aria-hidden="true"></div>
+        <div class="previewOnly__columnsGrid" :style="{ '--column-count': columns.length }">
+          <div v-for="(column, columnIndex) in columns" :key="column.id" class="previewOnly__columnHeader">{{ column.name || '열 ' + (columnIndex + 1) }}</div>
+        </div>
+      </div>
       <div class="previewOnly__rows">
         <div v-for="g in groups" :key="g.id" class="previewOnly__row">
           <div class="previewOnly__label">{{ g.name }}</div>
-          <div class="previewOnly__drop">
-            <div v-for="id in g.itemIds" :key="id" class="previewOnly__cell">
-              <img :src="resolveItemSrc(itemsById[id])" class="thumb" :alt="itemsById[id]?.label || id" />
-              <div v-if="showCharacterNames" class="itemNameOverlay">{{ itemsById[id]?.label || id }}</div>
+          <div class="previewOnly__dropGrid" :style="{ '--column-count': columns.length }">
+            <div v-for="(column, columnIndex) in columns" :key="column.id" class="previewOnly__dropColumn">
+              <div class="previewOnly__drop">
+                <div v-for="id in getGroupCellIds(g, columnIndex)" :key="id" class="previewOnly__cell">
+                  <img :src="resolveItemSrc(itemsById[id])" class="thumb" :alt="itemsById[id]?.label || id" />
+                  <div v-if="showCharacterNames" class="itemNameOverlay">{{ itemsById[id]?.label || id }}</div>
+                </div>
+              </div>
             </div>
           </div>
         </div>
@@ -773,18 +916,7 @@ onUnmounted(() => {
     <div class="modalCard" role="dialog" aria-modal="true" aria-labelledby="templateRequestTitle">
       <div id="templateRequestTitle" class="modalCard__title">템플릿 등록 요청</div>
       <div class="modalCard__desc">
-        여러 사용자가 비슷한 주제로 요청할 수 있으니, 관리자에게 전달되기 전에 아래 조건을 먼저 확인해주세요.
-      </div>
-      <div class="requestChecklist">
-        <div
-          v-for="check in templateRequestChecks"
-          :key="check.id"
-          class="requestChecklist__item"
-          :class="{ 'requestChecklist__item--passed': check.passed }"
-        >
-          <span class="requestChecklist__label">{{ check.label }}</span>
-          <span class="requestChecklist__icon">{{ check.passed ? '완료' : '확인 필요' }}</span>
-        </div>
+        티어표에 적어둔 제목과 설명이 있다면 그대로 가져와 두었어요. 비어 있다면 여기서 바로 작성해도 괜찮아요.
       </div>
       <div class="requestChecklist__hint">
         제목과 설명을 함께 적어두면 관리자가 어떤 신규 템플릿인지 훨씬 빠르게 파악할 수 있어요.
@@ -792,13 +924,23 @@ onUnmounted(() => {
       </div>
       <div class="templateRequestDraft">
         <label class="templateRequestDraft__field">
-          <span class="templateRequestDraft__label">요청 제목</span>
-          <input v-model="templateRequestDraftTitle" class="templateRequestDraft__input" maxlength="80" placeholder="예: 템플릿 등록 요청" />
+          <span class="templateRequestDraft__label">티어표 제목</span>
+          <input v-model="templateRequestDraftTitle" class="templateRequestDraft__input" maxlength="120" placeholder="예: 템플릿 등록 요청" />
+          <span class="templateRequestDraft__hint">{{ templateRequestDraftTitle.length }}/120자</span>
         </label>
         <label class="templateRequestDraft__field">
-          <span class="templateRequestDraft__label">요청 설명</span>
-          <textarea v-model="templateRequestDraftDescription" class="templateRequestDraft__input templateRequestDraft__textarea" maxlength="240" placeholder="예: 여름 이벤트 한정 캐릭터 추가용으로 신규 템플릿이 필요합니다." />
+          <span class="templateRequestDraft__label">티어표 설명</span>
+          <textarea v-model="templateRequestDraftDescription" class="templateRequestDraft__input templateRequestDraft__textarea" maxlength="1000" placeholder="예: 여름 이벤트 한정 캐릭터 추가용으로 신규 템플릿이 필요합니다." />
+          <span class="templateRequestDraft__hint">{{ templateRequestDraftDescription.length }}/1000자</span>
         </label>
+        <label class="toggleSwitch">
+          <input v-model="templateRequestSaveToMyTierList" type="checkbox" />
+          <span class="toggleSwitch__label">내 티어 리스트에도 저장</span>
+          <span class="toggleSwitch__track"><span class="toggleSwitch__thumb"></span></span>
+        </label>
+        <div class="templateRequestDraft__note">
+          저장을 끄면 요청 시점 스냅샷만 관리자에게 전달되고, 내 티어 리스트에는 별도로 남기지 않아요.
+        </div>
       </div>
       <div class="modalCard__actions">
         <button class="btn btn--ghost" @click="closeTemplateRequestModal">취소</button>
@@ -813,7 +955,7 @@ onUnmounted(() => {
     <div class="modalCard" role="dialog" aria-modal="true" aria-labelledby="templateUpdateTitle">
       <div id="templateUpdateTitle" class="modalCard__title">템플릿 요청하기</div>
       <div class="modalCard__desc">
-        {{ templateRequestTargetLabel }}에 직접 추가한 아이템을 포함해 달라고 관리자에게 요청을 보냅니다.
+        {{ templateRequestTargetLabel }}에 직접 추가한 아이템을 포함해 달라고 관리자에게 요청합니다. 현재 티어표 제목과 설명은 그대로 가져와 두었어요.
       </div>
       <div class="modalCard__note">
         모두가 사용하는 기본 템플릿이니 개인적인 항목이 아닌 공통된 항목만 추가한 뒤 신청해주세요.
@@ -821,13 +963,23 @@ onUnmounted(() => {
       </div>
       <div class="templateRequestDraft">
         <label class="templateRequestDraft__field">
-          <span class="templateRequestDraft__label">요청 제목</span>
-          <input v-model="templateRequestDraftTitle" class="templateRequestDraft__input" maxlength="80" placeholder="예: 템플릿 업데이트 요청" />
+          <span class="templateRequestDraft__label">티어표 제목</span>
+          <input v-model="templateRequestDraftTitle" class="templateRequestDraft__input" maxlength="120" placeholder="예: 템플릿 업데이트 요청" />
+          <span class="templateRequestDraft__hint">{{ templateRequestDraftTitle.length }}/120자</span>
         </label>
         <label class="templateRequestDraft__field">
-          <span class="templateRequestDraft__label">요청 설명</span>
-          <textarea v-model="templateRequestDraftDescription" class="templateRequestDraft__input templateRequestDraft__textarea" maxlength="240" placeholder="예: 여름 이벤트 한정 캐릭터 추가" />
+          <span class="templateRequestDraft__label">티어표 설명</span>
+          <textarea v-model="templateRequestDraftDescription" class="templateRequestDraft__input templateRequestDraft__textarea" maxlength="1000" placeholder="예: 여름 이벤트 한정 캐릭터 추가" />
+          <span class="templateRequestDraft__hint">{{ templateRequestDraftDescription.length }}/1000자</span>
         </label>
+        <label class="toggleSwitch">
+          <input v-model="templateRequestSaveToMyTierList" type="checkbox" />
+          <span class="toggleSwitch__label">내 티어 리스트에도 저장</span>
+          <span class="toggleSwitch__track"><span class="toggleSwitch__thumb"></span></span>
+        </label>
+        <div class="templateRequestDraft__note">
+          저장을 끄면 관리자 확인용 요청 스냅샷만 남고, 현재 작업 중인 티어표는 따로 저장하지 않아요.
+        </div>
       </div>
       <div class="modalCard__actions">
         <button class="btn btn--ghost" @click="closeTemplateUpdateModal">요청 취소</button>
@@ -855,13 +1007,13 @@ onUnmounted(() => {
 
   <div v-if="isGroupDeleteModalOpen" class="modalOverlay" @click.self="closeGroupDeleteModal">
     <div class="modalCard" role="dialog" aria-modal="true" aria-labelledby="deleteGroupTitle">
-      <div id="deleteGroupTitle" class="modalCard__title">티어 라인 삭제</div>
+      <div id="deleteGroupTitle" class="modalCard__title">티어 행 삭제</div>
       <div class="modalCard__desc">
-        이 라인을 삭제하면 현재 들어 있는 아이템은 모두 아래 아이템 영역으로 이동합니다. 삭제 후에도 아이템 자체는 유지돼요.
+        이 행을 삭제하면 현재 들어 있는 아이템은 모두 아래 아이템 영역으로 이동합니다. 삭제 후에도 아이템 자체는 유지돼요.
       </div>
       <div class="modalCard__actions">
         <button class="btn btn--ghost" @click="closeGroupDeleteModal">취소</button>
-        <button class="btn btn--danger" @click="confirmRemoveGroup">라인 삭제</button>
+        <button class="btn btn--danger" @click="confirmRemoveGroup">행 삭제</button>
       </div>
     </div>
   </div>
@@ -873,7 +1025,7 @@ onUnmounted(() => {
           <div class="editorMain__title">{{ gameName || gameId }}</div>
           <div class="editorMain__subtitle">
             <template v-if="canEdit">
-              그룹 이름/순서 변경과 아이템 드래그&드롭이 가능합니다.
+              행/열 이름과 순서를 바꾸고 아이템을 드래그해서 배치할 수 있어요.
             </template>
             <template v-else>
               공개된 티어표를 보는 중입니다. 로그인한 작성자만 수정할 수 있어요.
@@ -890,7 +1042,12 @@ onUnmounted(() => {
         <div ref="boardEl" class="board">
           <div v-if="canEdit && !isExporting" class="boardTools">
             <div class="boardTools__left">
-              <button class="btn btn--ghost" @click="addGroup">티어 추가</button>
+              <button class="boardActionIcon" type="button" title="행 추가" aria-label="행 추가" @click="addGroup">
+                <SvgIcon :src="addRowBelowIcon" :size="18" />
+              </button>
+              <button class="boardActionIcon" type="button" title="열 추가" aria-label="열 추가" @click="addColumn">
+                <SvgIcon :src="addColumnRightIcon" :size="18" />
+              </button>
             </div>
             <div class="boardTools__right">
               <span class="boardTools__label">아이콘 크기</span>
@@ -910,6 +1067,22 @@ onUnmounted(() => {
           <div ref="exportBoardEl" class="exportBoard" :class="{ 'exportBoard--active': isExporting }">
             <div v-if="isExporting" class="exportBoard__title">{{ effectiveTitle }}</div>
             <div v-if="isExporting && description" class="exportBoard__description">{{ description }}</div>
+            <div v-if="columns.length > 1" class="boardColumnsHeader" :class="{ 'boardColumnsHeader--export': isExporting }">
+              <div class="boardColumnsHeader__spacer" aria-hidden="true"></div>
+              <div class="boardColumnsHeader__grid" :style="{ '--column-count': columns.length }">
+                <div v-for="(column, columnIndex) in columns" :key="column.id" class="boardColumnsHeader__cell">
+                  <template v-if="isExporting">
+                    <div class="boardColumnsHeader__name">{{ column.name || '열 ' + (columnIndex + 1) }}</div>
+                  </template>
+                  <template v-else>
+                    <div class="columnHeader">
+                      <input v-model="column.name" class="columnName" maxlength="16" placeholder="열 이름" />
+                      <button class="columnRemoveText" type="button" :disabled="columns.length <= 1" @click="removeColumn(columnIndex)">열 삭제</button>
+                    </div>
+                  </template>
+                </div>
+              </div>
+            </div>
             <div ref="groupListEl" class="rows">
               <div v-for="g in groups" :key="g.id" class="row">
                 <div class="row__label">
@@ -917,40 +1090,45 @@ onUnmounted(() => {
                     <div class="row__exportName">{{ g.name }}</div>
                   </template>
                   <template v-else>
+                    <span class="grab" title="드래그로 순서 변경" data-group-handle>↕</span>
+                    <input v-model="g.name" class="groupName" maxlength="16" :readonly="!canEdit" />
                     <button
                       v-if="canEdit"
                       class="rowRemoveText"
                       type="button"
-                      title="티어 라인 삭제"
+                      title="행 삭제"
                       :disabled="groups.length <= 1"
                       @click="openGroupDeleteModal(g.id)"
                     >
-                      열 삭제
+                      행 삭제
                     </button>
-                    <span class="grab" title="드래그로 순서 변경" data-group-handle>↕</span>
-                    <input v-model="g.name" class="groupName" :readonly="!canEdit" />
                   </template>
                 </div>
-                <div
-                  class="row__drop"
-                  :data-list-type="'group'"
-                  :data-group-id="g.id"
-                  :ref="(el) => setGroupDropEl(g.id, el)"
-                >
-                  <div v-if="!isExporting" class="row__empty" v-show="g.itemIds.length === 0">여기로 드래그해서 배치</div>
-                  <div v-for="id in g.itemIds" :key="id" class="cell" :data-item-id="id">
-                    <img :src="resolveItemSrc(itemsById[id])" class="thumb" :alt="itemsById[id]?.label || id" />
-                    <div v-if="showCharacterNames" class="itemNameOverlay">{{ itemsById[id]?.label || id }}</div>
-                    <button
-                      v-if="canEdit && !isExporting"
-                      class="cellRemoveBtn"
-                      type="button"
-                      title="아이템 빼내기"
-                      @pointerdown.stop
-                      @click.stop="removeItemFromGroup(g.id, id)"
+                <div class="row__content" :style="{ '--column-count': columns.length }">
+                  <div v-for="(column, columnIndex) in columns" :key="column.id" class="row__column">
+                    <div
+                      class="row__drop"
+                      :data-list-type="'group'"
+                      :data-group-id="g.id"
+                      :data-column-index="columnIndex"
+                      :ref="(el) => setGroupDropEl(g.id, columnIndex, el)"
                     >
-                      ×
-                    </button>
+                      <div v-if="!isExporting" class="row__empty" v-show="getGroupCellIds(g, columnIndex).length === 0">여기로 드래그해서 배치</div>
+                      <div v-for="id in getGroupCellIds(g, columnIndex)" :key="id" class="cell" :data-item-id="id">
+                        <img :src="resolveItemSrc(itemsById[id])" class="thumb" :alt="itemsById[id]?.label || id" />
+                        <div v-if="showCharacterNames" class="itemNameOverlay">{{ itemsById[id]?.label || id }}</div>
+                        <button
+                          v-if="canEdit && !isExporting"
+                          class="cellRemoveBtn"
+                          type="button"
+                          title="아이템 빼내기"
+                          @pointerdown.stop
+                          @click.stop="removeItemFromGroup(g.id, columnIndex, id)"
+                        >
+                          ×
+                        </button>
+                      </div>
+                    </div>
                   </div>
                 </div>
               </div>
@@ -1004,7 +1182,8 @@ onUnmounted(() => {
     <template v-if="globalRightRailOpen">
       <div class="editorSidebar__section">
         <div class="editorSidebar__label">Title</div>
-        <input v-model="title" class="editorSidebar__input" placeholder="Title Text" :readonly="!canEdit" />
+        <input v-model="title" class="editorSidebar__input" maxlength="120" placeholder="Title Text" :readonly="!canEdit" />
+        <div class="editorSidebar__hint">{{ title.length }}/120자</div>
         <div v-if="untitledWarning" class="editorSidebar__hint editorSidebar__hint--warn">{{ untitledWarning }}</div>
       </div>
 
@@ -1014,8 +1193,10 @@ onUnmounted(() => {
           v-model="description"
           class="editorSidebar__textarea"
           placeholder="Description Text"
+          maxlength="1000"
           :readonly="!canEdit"
         ></textarea>
+        <div class="editorSidebar__hint">{{ description.length }}/1000자</div>
       </div>
 
       <div class="editorSidebar__section">
@@ -1176,15 +1357,42 @@ onUnmounted(() => {
   line-height: 1.6;
   opacity: 0.76;
 }
+.previewOnly__columns {
+  display: grid;
+  grid-template-columns: 132px 1fr;
+  gap: 10px;
+  margin-bottom: 10px;
+}
+.previewOnly__columnsGrid {
+  display: grid;
+  grid-template-columns: repeat(var(--column-count, 1), minmax(0, 1fr));
+  gap: 10px;
+}
+.previewOnly__columnHeader {
+  min-height: 20px;
+  font-size: 12px;
+  font-weight: 800;
+  text-align: center;
+  opacity: 0.72;
+}
 .previewOnly__rows {
   display: grid;
   gap: 10px;
 }
 .previewOnly__row {
   display: grid;
-  grid-template-columns: 180px 1fr;
+  grid-template-columns: 132px 1fr;
   gap: 10px;
 }
+.previewOnly__dropGrid {
+  display: grid;
+  grid-template-columns: repeat(var(--column-count, 1), minmax(0, 1fr));
+  gap: 10px;
+}
+.previewOnly__dropColumn {
+  display: grid;
+  gap: 8px;
+}
 .previewOnly__label {
   display: grid;
   place-items: center;
@@ -1438,6 +1646,15 @@ onUnmounted(() => {
   font-size: 12px;
   color: rgba(255, 255, 255, 0.64);
 }
+.templateRequestDraft__hint {
+  font-size: 12px;
+  color: rgba(255, 255, 255, 0.46);
+}
+.templateRequestDraft__note {
+  font-size: 12px;
+  line-height: 1.6;
+  color: rgba(255, 255, 255, 0.6);
+}
 .templateRequestDraft__input {
   width: 100%;
   padding: 14px 0;
@@ -1483,6 +1700,45 @@ onUnmounted(() => {
 .boardTools__left {
   margin-right: auto;
 }
+.boardActionIcon {
+  width: 40px;
+  height: 40px;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  border-radius: 12px;
+  border: 1px solid rgba(255, 255, 255, 0.12);
+  background: rgba(255, 255, 255, 0.04);
+  color: rgba(255, 255, 255, 0.9);
+  cursor: pointer;
+  transition: background 160ms ease, border-color 160ms ease, color 160ms ease;
+}
+.boardActionIcon:hover {
+  background: rgba(96, 165, 250, 0.12);
+  border-color: rgba(96, 165, 250, 0.28);
+  color: rgba(255, 255, 255, 0.98);
+}
+.boardColumnsHeader {
+  display: grid;
+  grid-template-columns: 132px 1fr;
+  gap: 10px;
+  margin-bottom: 10px;
+}
+.boardColumnsHeader__grid {
+  display: grid;
+  grid-template-columns: repeat(var(--column-count, 1), minmax(0, 1fr));
+  gap: 10px;
+}
+.boardColumnsHeader__cell {
+  min-width: 0;
+}
+.boardColumnsHeader__name {
+  padding: 4px 0 8px;
+  text-align: center;
+  font-size: 12px;
+  font-weight: 800;
+  opacity: 0.74;
+}
 .boardTools__label {
   font-size: 13px;
   opacity: 0.76;
@@ -1549,7 +1805,7 @@ onUnmounted(() => {
 }
 .row {
   display: grid;
-  grid-template-columns: 180px 1fr;
+  grid-template-columns: 132px 1fr;
   gap: 10px;
   align-items: stretch;
 }
@@ -1559,24 +1815,71 @@ onUnmounted(() => {
   background: rgba(255, 255, 255, 0.08);
   border: 1px solid rgba(255, 255, 255, 0.12);
   display: flex;
-  gap: 8px;
   align-items: center;
   justify-content: center;
-  padding: 10px 12px 30px;
+  padding: 14px 12px 30px;
   font-weight: 900;
   overflow: hidden;
 }
+.row__content {
+  display: grid;
+  grid-template-columns: repeat(var(--column-count, 1), minmax(0, 1fr));
+  gap: 10px;
+}
+.row__column {
+  display: grid;
+  gap: 8px;
+  min-width: 0;
+}
+.columnHeader {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  min-height: 38px;
+  padding: 0 2px;
+}
+.columnName {
+  width: 100%;
+  border: 0;
+  border-bottom: 1px solid rgba(255, 255, 255, 0.12);
+  background: transparent;
+  color: rgba(255, 255, 255, 0.88);
+  padding: 4px 0;
+  text-align: center;
+  font-size: 12px;
+  font-weight: 800;
+  outline: none;
+}
+.columnName::placeholder {
+  color: rgba(255, 255, 255, 0.34);
+}
+.columnRemoveText {
+  padding: 0;
+  border: 0;
+  background: transparent;
+  color: rgba(255, 255, 255, 0.56);
+  font-size: 11px;
+  font-weight: 800;
+  cursor: pointer;
+}
+.columnRemoveText:disabled {
+  opacity: 0.32;
+  cursor: not-allowed;
+}
 .grab {
+  position: absolute;
+  top: 10px;
+  left: 10px;
   cursor: grab;
-  opacity: 0.85;
-  width: 26px;
-  height: 26px;
+  opacity: 0.72;
+  width: 22px;
+  height: 22px;
   display: grid;
   place-items: center;
-  border-radius: 10px;
-  border: 1px solid rgba(255, 255, 255, 0.14);
+  border-radius: 8px;
+  border: 1px solid rgba(255, 255, 255, 0.1);
   background: rgba(0, 0, 0, 0.16);
-  flex: 0 0 auto;
+  font-size: 12px;
 }
 .groupName {
   width: 100%;
@@ -1584,7 +1887,7 @@ onUnmounted(() => {
   background: rgba(0, 0, 0, 0.18);
   color: rgba(255, 255, 255, 0.92);
   border-radius: 10px;
-  padding: 6px 8px;
+  padding: 8px 10px;
   font-weight: 900;
   text-align: center;
   outline: none;
@@ -1599,7 +1902,7 @@ onUnmounted(() => {
   background: transparent;
   color: rgba(255, 255, 255, 0.6);
   cursor: pointer;
-  font-size: 12px;
+  font-size: 11px;
   line-height: 1;
   font-weight: 800;
 }
@@ -1646,17 +1949,21 @@ onUnmounted(() => {
 .itemNameOverlay {
   position: absolute;
   inset: auto 0 0 0;
-  padding: 16px 8px 6px;
+  min-height: 26px;
+  padding: 18px 8px 6px;
   border-radius: 0 0 10px 10px;
   background: linear-gradient(180deg, rgba(7, 10, 18, 0), rgba(7, 10, 18, 0.92));
   color: rgba(255, 255, 255, 0.96);
   font-size: 11px;
-  line-height: 1.25;
+  line-height: 1.2;
   font-weight: 800;
   text-align: center;
   white-space: nowrap;
   overflow: hidden;
   text-overflow: ellipsis;
+  display: flex;
+  align-items: flex-end;
+  justify-content: center;
   pointer-events: none;
 }
 .cellRemoveBtn {
@@ -2000,6 +2307,9 @@ onUnmounted(() => {
   .editorCanvas {
     grid-template-columns: 1fr;
   }
+  .row__content {
+    grid-template-columns: 1fr;
+  }
   .row {
     grid-template-columns: 150px 1fr;
   }
@@ -2031,7 +2341,18 @@ onUnmounted(() => {
   .previewOnly {
     padding: 14px;
   }
-  .previewOnly__row {
+  .previewOnly__columns,
+  .previewOnly__row,
+  .boardColumnsHeader,
+  .row {
+    grid-template-columns: 1fr;
+  }
+  .previewOnly__columnsSpacer,
+  .boardColumnsHeader__spacer {
+    display: none;
+  }
+  .previewOnly__dropGrid,
+  .boardColumnsHeader__grid {
     grid-template-columns: 1fr;
   }
   .pool {