@wooojin/forgen 0.4.7 → 0.4.8

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://claude.ai/schemas/claude-plugin.json",
   "name": "forgen",
-  "version": "0.4.7",
+  "version": "0.4.8",
   "description": "Claude Code harness — the more you use Claude, the better it gets",
   "author": {
     "name": "jang-ujin",

package/CHANGELOG.md

@@ -7,6 +7,46 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.4.8] — 2026-05-15 — Codex 동등화 마무리 + 잔재 청소
+
+테마: v0.4.6 (Unattended Resilience) 이후 남아 있던 **Codex 동등화 마무리**
+(A 묶음) 와 v0.4.7 매트릭스 첫 활성화에서 노출된 **사전 존재 결함 청소**
+(E 묶음) 을 한 번에 정리.
+
+### Added
+- **A1**: Codex transcript FTS5 인덱싱 — `session-store.ts:indexCodexSession()`
+  신설. 이전엔 spawn.ts 가 `runtime === 'claude'` 가드로 Codex 세션을 SQLite
+  / FTS5 인덱싱에서 제외해 `session-search` MCP 도구가 Codex 대화를 회수
+  못 했음. Claude/Codex schema 별 함수 분기.
+- **A2**: corrupt profile 자동 복구 — `profileExists()=true && loadProfile()=null`
+  케이스 (parse 실패 / v1 shape 위반) 에서 `profile.json.corrupt-<ts>` 로
+  자동 backup → `needsOnboarding=true` 흐름. 데이터 손실 없음. `harness.ts`
+  가 backup 경로를 user-visible warning 으로 표시.
+- **A3**: `SESSIONS_DIR` (legacy session log) 와 `V1_SESSIONS_DIR` (v1 effective
+  state) 정합화 — `V1_DIRS` 에 `SESSIONS_DIR` 추가 (bootstrap early-return
+  경로에서도 보장), `forgen doctor` 가 두 dir 모두 노출, `paths.ts` 책임
+  주석 확장.
+- **E3**: `forgen doctor --repair` — plugin cache / installPath 검사 실패 시
+  `npm run build` + `node scripts/postinstall.js` 를 forgen pkgRoot 안에서
+  자동 실행. fail-open (실패해도 doctor 진단 흐름은 계속).
+
+### Fixed
+- **E1**: `notify.ts` spawn 'error' event 핸들러 — headless CI / Docker /
+  notifier 미설치 환경에서 `osascript`/`notify-send` ENOENT 가 unhandled
+  로 caller process 를 죽이던 사전 존재 버그. v0.4.7 CI 매트릭스 첫
+  활성화에서 노출. 추가로 `rate-limit-spawn-integration` 의 v0.4.7 CI
+  skip 가드를 제거 (production fail-safe 보장).
+- **E2**: biome lint warnings 24 건 → 0 — `biome --unsafe` 자동 fix 17
+  건 + 수동 fix 7 건 (`useTemplate`, `noAssignInExpressions`,
+  `noExplicitAny`, `noNonNullAssertion` 등 33 files touched).
+
+### Verified
+- vitest 2454 / 2454 PASS (이전 2442 + 새 회귀 가드 12: notify 2, profile-
+  corrupt 3, doctor-repair 5, codex-fts 2).
+- 로컬 build / lint 0 warning.
+- CI 매트릭스 (Linux x64 + arm64, macOS, Windows hooks-portability) 모두
+  PASS — 별도 PR 머지 (#31 부분) 후 본 PR 에서 다시 확인.
+
 ## [0.4.7] — 2026-05-15 — fgx --codex 권한 플래그 수정
 
 ### Fixed

package/dist/checks/self-score-deflation.js

@@ -50,12 +50,13 @@ const SELF_SCORE_PATTERNS = [
 function extractDeltas(text) {
     const re = /(\d+(?:\.\d+)?)\s*(?:→|->|–>|~>)\s*(\d+(?:\.\d+)?)/g;
     const out = [];
-    let m;
-    while ((m = re.exec(text)) !== null) {
+    let m = re.exec(text);
+    while (m !== null) {
         const from = Number(m[1]);
         const to = Number(m[2]);
         if (Number.isFinite(from) && Number.isFinite(to))
             out.push({ from, to });
+        m = re.exec(text);
     }
     return out;
 }
@@ -66,9 +67,10 @@ function findScoreSignals(text, max = 3) {
             break;
         // 각 호출마다 lastIndex 초기화를 위해 새 RegExp 생성
         const re = new RegExp(p.source, p.flags);
-        let m;
-        while ((m = re.exec(text)) !== null && out.length < max) {
+        let m = re.exec(text);
+        while (m !== null && out.length < max) {
             out.push(m[0]);
+            m = re.exec(text);
         }
     }
     return out;

package/dist/cli.js

@@ -237,10 +237,13 @@ const commands = [
     },
     {
         name: 'doctor',
-        description: 'Diagnostics (--prune-state to GC stale session files)',
+        description: 'Diagnostics (--prune-state to GC stale session files, --repair to auto-fix plugin cache)',
         handler: async (args) => {
             const { runDoctor } = await import('./core/doctor.js');
-            await runDoctor({ pruneState: args.includes('--prune-state') });
+            await runDoctor({
+                pruneState: args.includes('--prune-state'),
+                repair: args.includes('--repair'),
+            });
         },
     },
     // install --plugin 제거됨 — postinstall이 유일한 설치 경로

package/dist/core/auto-compound-runner.js

@@ -219,8 +219,12 @@ function validateSolutionFiles(dirBefore) {
 function extractText(c) {
     if (typeof c === 'string')
         return c;
-    if (Array.isArray(c))
-        return c.filter((x) => x?.type === 'text').map((x) => x.text ?? '').join('\n');
+    if (Array.isArray(c)) {
+        return c
+            .filter((x) => typeof x === 'object' && x !== null && x.type === 'text')
+            .map((x) => (typeof x.text === 'string' ? x.text : ''))
+            .join('\n');
+    }
     return '';
 }
 /**

package/dist/core/dashboard.js

@@ -40,13 +40,13 @@ function dim(s) { return `${DIM}${s}${RESET}`; }
 function cyan(s) { return `${CYAN}${s}${RESET}`; }
 // ── Box-drawing table helpers ──
 function tableRow(cols, widths) {
-    return '  │ ' + cols.map((c, i) => c.padEnd(widths[i])).join(' │ ') + ' │';
+    return `  │ ${cols.map((c, i) => c.padEnd(widths[i])).join(' │ ')} │`;
 }
 function tableSep(widths, top = false, bottom = false) {
     const left = top ? '┌' : bottom ? '└' : '├';
     const mid = top ? '┬' : bottom ? '┴' : '┼';
     const right = top ? '┐' : bottom ? '┘' : '┤';
-    return '  ' + left + widths.map(w => '─'.repeat(w + 2)).join(mid) + right;
+    return `  ${left}${widths.map(w => '─'.repeat(w + 2)).join(mid)}${right}`;
 }
 // ── Data Collection Functions ──
 /** Read all .md files in a directory and return their frontmatter. */

package/dist/core/doctor.d.ts

@@ -2,5 +2,15 @@ export interface DoctorOptions {
     /** When true, delete stale session-scoped state files instead of just
      *  reporting bloat. Triggered by `forgen doctor --prune-state`. */
     pruneState?: boolean;
+    /**
+     * When true, auto-fix recoverable failures (e.g. missing plugin cache /
+     * stale installPath) by running `npm run build` + `node scripts/postinstall.js`
+     * inside the forgen install directory. Triggered by `forgen doctor --repair`.
+     *
+     * v0.4.8 (E3) — 이전엔 안내문 ("Fix: npm run build && node scripts/postinstall.js")
+     * 만 출력했고 사용자가 직접 실행해야 했음. fail-open: repair 실패해도
+     * doctor 흐름은 정상 종료.
+     */
+    repair?: boolean;
 }
 export declare function runDoctor(opts?: DoctorOptions): Promise<void>;

package/dist/core/doctor.js

@@ -2,7 +2,8 @@ import * as fs from 'node:fs';
 import * as os from 'node:os';
 import * as path from 'node:path';
 import { execFileSync } from 'node:child_process';
-import { FORGEN_HOME, LAB_DIR, ME_BEHAVIOR, ME_DIR, ME_SOLUTIONS, ME_RULES, ME_SKILLS, PACKS_DIR, SESSIONS_DIR, STATE_DIR } from './paths.js';
+import { fileURLToPath } from 'node:url';
+import { FORGEN_HOME, LAB_DIR, ME_BEHAVIOR, ME_DIR, ME_SOLUTIONS, ME_RULES, ME_SKILLS, PACKS_DIR, SESSIONS_DIR, STATE_DIR, V1_SESSIONS_DIR } from './paths.js';
 import { getTimingStats } from '../hooks/shared/hook-timing.js';
 import { countSessionScopedFiles, pruneState } from './state-gc.js';
 import { summarizeAllByHost } from '../store/host-mismatch.js';
@@ -87,6 +88,29 @@ function renderCodexParity() {
         console.log(`  ✓ Codex parity green (last run: ${timeStr},${version})`);
     }
 }
+/**
+ * v0.4.8 (E3): plugin cache / installPath 진단이 실패했을 때 자동 복구.
+ * forgen 패키지 디렉토리에서 `npm run build` + postinstall 을 차례로 실행.
+ * 실패해도 doctor 자체는 계속 진행 (fail-open).
+ */
+function attemptPluginRepair() {
+    try {
+        // forgen 패키지 루트 = 현재 파일에서 dist/core/doctor.js 위치 → pkgRoot.
+        // dev (src/) 와 prod (dist/) 양쪽 모두 path.resolve(...,'..','..') 로 도달.
+        const here = path.dirname(fileURLToPath(import.meta.url));
+        const pkgRoot = path.resolve(here, '..', '..');
+        console.log(`\n  [Repair] forgen 패키지 자가복구 시도 — ${pkgRoot}`);
+        execFileSync('npm', ['run', 'build'], { cwd: pkgRoot, stdio: 'inherit' });
+        execFileSync('node', ['scripts/postinstall.js'], { cwd: pkgRoot, stdio: 'inherit' });
+        console.log('  [Repair] 완료. 진단 재실행 권장: forgen doctor');
+        return true;
+    }
+    catch (e) {
+        console.warn(`  [Repair] 실패: ${e instanceof Error ? e.message : String(e)}`);
+        console.warn('  [Repair] 수동 복구: cd <forgen pkgRoot> && npm run build && node scripts/postinstall.js');
+        return false;
+    }
+}
 export async function runDoctor(opts = {}) {
     failedChecks = [];
     console.log('\n  Forgen — Diagnostics\n');
@@ -114,7 +138,9 @@ export async function runDoctor(opts = {}) {
         });
         forgenPluginCacheOk = versions.length > 0;
     }
-    check('forgen plugin cache', forgenPluginCacheOk, 'Hook execution requires plugin cache. Fix: npm run build && node scripts/postinstall.js');
+    check('forgen plugin cache', forgenPluginCacheOk, opts.repair
+        ? 'Hook execution requires plugin cache. Attempting auto-repair (--repair)…'
+        : 'Hook execution requires plugin cache. Fix: npm run build && node scripts/postinstall.js (or rerun with --repair)');
     // installed_plugins.json 정합성 확인
     const installedPluginsPath = path.join(os.homedir(), '.claude', 'plugins', 'installed_plugins.json');
     let pluginRegistered = false;
@@ -129,7 +155,15 @@ export async function runDoctor(opts = {}) {
         }
         catch { /* ignore */ }
     }
-    check('forgen plugin registered & installPath exists', pluginRegistered, 'Plugin registered but installPath missing on disk. Fix: npm run build && node scripts/postinstall.js');
+    check('forgen plugin registered & installPath exists', pluginRegistered, opts.repair
+        ? 'Plugin registered but installPath missing on disk. Attempting auto-repair (--repair)…'
+        : 'Plugin registered but installPath missing on disk. Fix: npm run build && node scripts/postinstall.js (or rerun with --repair)');
+    // v0.4.8 (E3): plugin cache 또는 installPath 가 깨졌고 --repair 가 켜져
+    // 있으면 build + postinstall 자동 실행. doctor 진단 자체는 계속 진행하여
+    // 사용자가 다른 health 항목도 한 번에 확인 가능.
+    if (opts.repair && (!forgenPluginCacheOk || !pluginRegistered)) {
+        attemptPluginRepair();
+    }
     console.log();
     section('Directories');
     check('~/.forgen/', exists(FORGEN_HOME));
@@ -138,7 +172,8 @@ export async function runDoctor(opts = {}) {
     check('~/.forgen/me/behavior/', exists(ME_BEHAVIOR));
     check('~/.forgen/me/rules/', exists(ME_RULES));
     check('~/.forgen/packs/', exists(PACKS_DIR));
-    check('~/.forgen/sessions/', exists(SESSIONS_DIR));
+    check('~/.forgen/sessions/ (session logs)', exists(SESSIONS_DIR));
+    check('~/.forgen/state/sessions/ (v1 effective state)', exists(V1_SESSIONS_DIR));
     // R9-IA5: warn if a user dropped rule files at ~/.forgen/rules/ by mistake.
     // That path is NOT loaded — personal rules live at ~/.forgen/me/rules/.
     const legacyRulesPath = path.join(FORGEN_HOME, 'rules');
@@ -194,10 +229,16 @@ export async function runDoctor(opts = {}) {
     }
     console.log();
     console.log('  [Log Locations]');
-    console.log(`  Session logs: ${SESSIONS_DIR}`);
+    console.log(`  Session logs:       ${SESSIONS_DIR}`);
     if (exists(SESSIONS_DIR)) {
         const sessionCount = fs.readdirSync(SESSIONS_DIR).filter((f) => f.endsWith('.json')).length;
-        console.log(`  Saved sessions: ${sessionCount}`);
+        console.log(`  Saved sessions:     ${sessionCount}`);
+    }
+    // v0.4.8 (A3): v1 effective state directory 도 가시화 — 두 dir 책임 다름.
+    console.log(`  V1 effective state: ${V1_SESSIONS_DIR}`);
+    if (exists(V1_SESSIONS_DIR)) {
+        const stateCount = fs.readdirSync(V1_SESSIONS_DIR).filter((f) => f.endsWith('.json')).length;
+        console.log(`  V1 state count:     ${stateCount}`);
     }
     console.log(`  Claude Code sessions: ${CLAUDE_PROJECTS_DIR}`);
     console.log();
@@ -244,7 +285,7 @@ export async function runDoctor(opts = {}) {
     }
     else {
         console.log('  Hook                  Count   p50ms   p95ms   max ms');
-        console.log('  ' + '-'.repeat(56));
+        console.log(`  ${'-'.repeat(56)}`);
         for (const s of timingStats) {
             const hook = s.hook.padEnd(22);
             const count = String(s.count).padStart(5);
@@ -499,7 +540,7 @@ export async function runDoctor(opts = {}) {
         for (const f of failedChecks) {
             if (!bySection.has(f.section))
                 bySection.set(f.section, []);
-            bySection.get(f.section).push(f);
+            bySection.get(f.section)?.push(f);
         }
         for (const [sec, items] of bySection) {
             console.log(`    [${sec}]`);

package/dist/core/harness.js

@@ -165,7 +165,7 @@ function ensureCompoundMemory(cwd) {
             const content = fs.readFileSync(memoryMdPath, 'utf-8');
             if (content.includes('compound-index.md'))
                 return;
-            fs.writeFileSync(memoryMdPath, content.trimEnd() + '\n' + compoundPointer + '\n');
+            fs.writeFileSync(memoryMdPath, `${content.trimEnd()}\n${compoundPointer}\n`);
         }
         const indexPath = path.join(memoryDir, 'compound-index.md');
         const solutionsDir = ME_SOLUTIONS;
@@ -262,7 +262,7 @@ function migrateToForgen() {
         catch (e) {
             log.debug(`migrateToForgen: ${legacyHome} 파일 복사 중 오류`, e);
         }
-        const backupPath = legacyHome + '.bak';
+        const backupPath = `${legacyHome}.bak`;
         try {
             if (!fs.existsSync(backupPath)) {
                 fs.renameSync(legacyHome, backupPath);
@@ -348,6 +348,12 @@ export async function prepareHarness(cwd, options = {}) {
         if (v1Result.legacyBackupPath) {
             log.debug(`v1: 레거시 프로필 백업 완료 → ${v1Result.legacyBackupPath}`);
         }
+        if (v1Result.corruptProfileBackupPath) {
+            // v0.4.8 — corrupt profile auto-repair 결과는 debug 가 아닌 user-visible warning.
+            // 사용자가 onboarding 으로 보내지는 이유를 알 수 있도록.
+            console.warn(`  ⚠  forgen: profile.json 이 깨져 있어 옆에 백업해두고 onboarding 으로 보냅니다.`);
+            console.warn(`  ⚠  backup: ${v1Result.corruptProfileBackupPath}`);
+        }
         if (v1Result.session) {
             const { session } = v1Result;
             log.debug(`v1 세션 시작: ${session.quality_pack}/${session.autonomy_pack}, trust=${session.effective_trust_policy}`);

package/dist/core/inspect-cli.js

@@ -21,7 +21,7 @@ export async function handleInspect(args) {
             console.log('\n  No v1 profile found. Run onboarding first.\n');
             return;
         }
-        console.log('\n' + inspect.renderProfile(profile) + '\n');
+        console.log(`\n${inspect.renderProfile(profile)}\n`);
         // ── Learning Loop Status ──
         const activeRules = loadActiveRules();
         const rulesByScope = {
@@ -75,13 +75,13 @@ export async function handleInspect(args) {
     }
     if (sub === 'rules') {
         const rules = loadAllRules();
-        console.log('\n' + inspect.renderRules(rules) + '\n');
+        console.log(`\n${inspect.renderRules(rules)}\n`);
         return;
     }
     // R9-IA2: user-facing name is "corrections"; "evidence" kept as back-compat alias.
     if (sub === 'corrections' || sub === 'evidence') {
         const evidence = loadRecentEvidence(20);
-        console.log('\n' + inspect.renderEvidence(evidence) + '\n');
+        console.log(`\n${inspect.renderEvidence(evidence)}\n`);
         return;
     }
     if (sub === 'session') {
@@ -90,7 +90,7 @@ export async function handleInspect(args) {
             console.log('\n  No session state found.\n');
             return;
         }
-        console.log('\n' + inspect.renderSession(sessions[0]) + '\n');
+        console.log(`\n${inspect.renderSession(sessions[0])}\n`);
         return;
     }
     // R5-G1: 2AM 디버깅용 jsonl tail — violations/bypass/drift

package/dist/core/migrate-evidence-host.js

@@ -35,7 +35,7 @@ export function migrateEvidenceHost(options) {
             skipped++;
             continue;
         }
-        const host = data['host'];
+        const host = data.host;
         if (host === 'claude' || host === 'codex') {
             skipped++;
             continue;

package/dist/core/notify.js

@@ -37,6 +37,9 @@ function notifyDarwin(title, body) {
     try {
         const script = `display notification "${escapeForOsascript(body)}" with title "${escapeForOsascript(title)}"`;
         const child = spawn('osascript', ['-e', script], { detached: true, stdio: 'ignore' });
+        // ENOENT 등 spawn 실패는 동기 throw 가 아니라 'error' event 로 emit 됨.
+        // 핸들러 없으면 unhandled 로 process crash → headless CI 회귀 가드.
+        child.on('error', (e) => log.debug('osascript notification 실패 (event)', e));
         child.unref();
     }
     catch (e) {
@@ -47,6 +50,10 @@ function notifyDarwin(title, body) {
 function notifyLinux(title, body) {
     try {
         const child = spawn('notify-send', [title, body], { detached: true, stdio: 'ignore' });
+        // headless 환경 (CI, Docker) 에서 notify-send 부재 시 ENOENT 가 'error' event 로 emit.
+        // 핸들러 없으면 unhandled 로 caller 프로세스 죽음 — rate-limit-spawn-integration
+        // CI 실패의 사전 존재 원인.
+        child.on('error', (e) => log.debug('notify-send 실패 (event)', e));
         child.unref();
     }
     catch (e) {

package/dist/core/paths.d.ts

@@ -60,7 +60,15 @@ export declare const OUTCOMES_DIR: string;
 export declare const CANDIDATES_DIR: string;
 /** ~/.forgen/lab/archived/ — rollback destination for evolved solutions. */
 export declare const ARCHIVED_DIR: string;
-/** ~/.forgen/sessions/ — 세션 로그 */
+/**
+ * ~/.forgen/sessions/ — legacy session log directory (transcript-like).
+ *
+ * session-logger.ts 가 prepareHarness step 11 에서 한 줄짜리
+ * `{date}_{uuid}.json` 메타 파일을 기록. v1 의 SessionEffectiveState
+ * 와는 다른 책임이라 별 디렉토리 (V1_SESSIONS_DIR) 와 공존:
+ *   - SESSIONS_DIR (여기): 세션 발생 사실 + 시작/종료 시각 + cwd
+ *   - V1_SESSIONS_DIR     : profile + pack 합성 결과 (effective state)
+ */
 export declare const SESSIONS_DIR: string;
 /** ~/.forgen/config.json — 글로벌 설정 */
 export declare const GLOBAL_CONFIG: string;
@@ -72,7 +80,13 @@ export declare const LAB_DIR: string;
 export declare const FORGE_PROFILE: string;
 /** ~/.forgen/me/recommendations/ — Pack Recommendation */
 export declare const V1_RECOMMENDATIONS_DIR: string;
-/** ~/.forgen/state/sessions/ — Session Effective State */
+/**
+ * ~/.forgen/state/sessions/ — v1 Session Effective State.
+ *
+ * session-state-store.ts 가 매 세션마다 profile + active rules + pack
+ * 합성 결과를 `{sessionId}.json` 으로 기록. SESSIONS_DIR (legacy session
+ * log) 와는 다른 책임 (정합화는 v0.4.8 A3 참조).
+ */
 export declare const V1_SESSIONS_DIR: string;
 /** ~/.forgen/state/raw-logs/ — Raw Log */
 export declare const V1_RAW_LOGS_DIR: string;

package/dist/core/paths.js

@@ -65,7 +65,15 @@ export const OUTCOMES_DIR = path.join(STATE_DIR, 'outcomes');
 export const CANDIDATES_DIR = path.join(FORGEN_HOME, 'lab', 'candidates');
 /** ~/.forgen/lab/archived/ — rollback destination for evolved solutions. */
 export const ARCHIVED_DIR = path.join(FORGEN_HOME, 'lab', 'archived');
-/** ~/.forgen/sessions/ — 세션 로그 */
+/**
+ * ~/.forgen/sessions/ — legacy session log directory (transcript-like).
+ *
+ * session-logger.ts 가 prepareHarness step 11 에서 한 줄짜리
+ * `{date}_{uuid}.json` 메타 파일을 기록. v1 의 SessionEffectiveState
+ * 와는 다른 책임이라 별 디렉토리 (V1_SESSIONS_DIR) 와 공존:
+ *   - SESSIONS_DIR (여기): 세션 발생 사실 + 시작/종료 시각 + cwd
+ *   - V1_SESSIONS_DIR     : profile + pack 합성 결과 (effective state)
+ */
 export const SESSIONS_DIR = path.join(FORGEN_HOME, 'sessions');
 /** ~/.forgen/config.json — 글로벌 설정 */
 export const GLOBAL_CONFIG = path.join(FORGEN_HOME, 'config.json');
@@ -77,7 +85,13 @@ export const LAB_DIR = path.join(FORGEN_HOME, 'lab');
 export const FORGE_PROFILE = path.join(ME_DIR, 'forge-profile.json');
 /** ~/.forgen/me/recommendations/ — Pack Recommendation */
 export const V1_RECOMMENDATIONS_DIR = path.join(ME_DIR, 'recommendations');
-/** ~/.forgen/state/sessions/ — Session Effective State */
+/**
+ * ~/.forgen/state/sessions/ — v1 Session Effective State.
+ *
+ * session-state-store.ts 가 매 세션마다 profile + active rules + pack
+ * 합성 결과를 `{sessionId}.json` 으로 기록. SESSIONS_DIR (legacy session
+ * log) 와는 다른 책임 (정합화는 v0.4.8 A3 참조).
+ */
 export const V1_SESSIONS_DIR = path.join(STATE_DIR, 'sessions');
 /** ~/.forgen/state/raw-logs/ — Raw Log */
 export const V1_RAW_LOGS_DIR = path.join(STATE_DIR, 'raw-logs');

package/dist/core/session-store.d.ts

@@ -6,7 +6,18 @@
  * 외부 의존성 없음 — Node.js 22+ 내장 node:sqlite 사용.
  */
 /**
- * Transcript JSONL을 SQLite에 인덱싱.
+ * v0.4.8 (A1): Codex transcript JSONL 을 SQLite 에 인덱싱.
+ *
+ * Codex schema (Claude 와 다름):
+ *   {type: 'response_item', payload: {type: 'message', role: 'user'|'assistant',
+ *    content: [{type: 'input_text'|'output_text', text: '...'}]}}
+ *
+ * 결정 (v0.4.8 A1): Claude/Codex 통합 abstraction 대신 분기 함수 두 개로
+ * 처리. 미래에 host 가 추가될 때 통합 추상화로 리팩터.
+ */
+export declare function indexCodexSession(cwd: string, transcriptPath: string, sessionId: string): Promise<void>;
+/**
+ * Transcript JSONL을 SQLite에 인덱싱. (Claude schema)
  */
 export declare function indexSession(cwd: string, transcriptPath: string, sessionId: string): Promise<void>;
 /**

package/dist/core/session-store.js

@@ -69,8 +69,80 @@ function openDb() {
         return null;
     }
 }
+/** Codex content array → flat string. content: [{type: 'input_text', text: ...}, ...] */
+function extractCodexText(content) {
+    if (!Array.isArray(content))
+        return '';
+    const parts = [];
+    for (const item of content) {
+        if (item && typeof item === 'object' && 'text' in item && typeof item.text === 'string') {
+            parts.push(item.text);
+        }
+    }
+    return parts.join('\n').trim();
+}
+/**
+ * v0.4.8 (A1): Codex transcript JSONL 을 SQLite 에 인덱싱.
+ *
+ * Codex schema (Claude 와 다름):
+ *   {type: 'response_item', payload: {type: 'message', role: 'user'|'assistant',
+ *    content: [{type: 'input_text'|'output_text', text: '...'}]}}
+ *
+ * 결정 (v0.4.8 A1): Claude/Codex 통합 abstraction 대신 분기 함수 두 개로
+ * 처리. 미래에 host 가 추가될 때 통합 추상화로 리팩터.
+ */
+export async function indexCodexSession(cwd, transcriptPath, sessionId) {
+    const db = openDb();
+    if (!db)
+        return;
+    try {
+        const existing = db.prepare('SELECT id FROM sessions WHERE id = ?').get(sessionId);
+        if (existing)
+            return;
+        const content = fs.readFileSync(transcriptPath, 'utf-8');
+        const lines = content.split('\n').filter(Boolean);
+        db.prepare('INSERT INTO sessions (id, cwd, started_at, message_count) VALUES (?, ?, ?, 0)').run(sessionId, cwd, new Date().toISOString());
+        let messageCount = 0;
+        const insertMsg = db.prepare('INSERT INTO messages (session_id, role, content, timestamp) VALUES (?, ?, ?, ?)');
+        for (const line of lines) {
+            try {
+                const entry = JSON.parse(line);
+                if (entry.type !== 'response_item' || !entry.payload)
+                    continue;
+                const role = entry.payload.role;
+                if (role !== 'user' && role !== 'assistant')
+                    continue;
+                const text = extractCodexText(entry.payload.content);
+                if (!text)
+                    continue;
+                const truncated = text.slice(0, 10000);
+                const ts = typeof entry.timestamp === 'string' ? entry.timestamp : '';
+                const result = insertMsg.run(sessionId, role, truncated, ts);
+                if (fts5Available) {
+                    try {
+                        db.prepare('INSERT INTO messages_fts(rowid, content) VALUES (?, ?)').run(result.lastInsertRowid, truncated);
+                    }
+                    catch { /* FTS sync failure */ }
+                }
+                messageCount++;
+            }
+            catch { /* skip malformed lines */ }
+        }
+        db.prepare('UPDATE sessions SET message_count = ? WHERE id = ?').run(messageCount, sessionId);
+        log.debug(`Codex 세션 인덱싱 완료: ${sessionId} (${messageCount} messages)`);
+    }
+    catch (e) {
+        log.debug('Codex 세션 인덱싱 실패', e);
+    }
+    finally {
+        try {
+            db.close();
+        }
+        catch { /* ignore */ }
+    }
+}
 /**
- * Transcript JSONL을 SQLite에 인덱싱.
+ * Transcript JSONL을 SQLite에 인덱싱. (Claude schema)
  */
 export async function indexSession(cwd, transcriptPath, sessionId) {
     const db = openDb();

package/dist/core/spawn.js

@@ -160,11 +160,19 @@ async function runAutoCompound(cwd, transcriptPath, sessionId) {
 }
 /**
  * Transcript를 SQLite FTS5에 인덱싱 (추후 session-search MCP 도구용).
+ *
+ * v0.4.8 (A1): runtime 별 schema 차이로 분기. Claude 는 `entry.type === 'user'|
+ * 'assistant'`, Codex 는 `entry.type === 'response_item' && entry.payload.role`.
  */
-async function indexTranscriptToFTS(cwd, transcriptPath, sessionId) {
+async function indexTranscriptToFTS(cwd, transcriptPath, sessionId, runtime = 'claude') {
     try {
-        const { indexSession } = await import('./session-store.js');
-        await indexSession(cwd, transcriptPath, sessionId);
+        const store = await import('./session-store.js');
+        if (runtime === 'codex') {
+            await store.indexCodexSession(cwd, transcriptPath, sessionId);
+        }
+        else {
+            await store.indexSession(cwd, transcriptPath, sessionId);
+        }
     }
     catch (e) {
         log.debug('FTS5 인덱싱 실패 (session-store 미구현 시 정상)', e);
@@ -225,10 +233,8 @@ export async function spawnClaude(args, context, runtime = 'claude') {
                     else {
                         sessionId = path.basename(transcript, '.jsonl');
                     }
-                    // 1. FTS5 인덱싱 (claude only — codex schema FTS 호환은 미검증, 별도 작업)
-                    if (runtime === 'claude') {
-                        await indexTranscriptToFTS(context.cwd, transcript, sessionId);
-                    }
+                    // 1. FTS5 인덱싱 — v0.4.8 (A1) 부터 Claude/Codex 모두 지원.
+                    await indexTranscriptToFTS(context.cwd, transcript, sessionId, runtime);
                     // 2. 자동 compound (10+ user 메시지인 경우만) — 양 runtime 호환
                     const userMsgCount = await countUserMessages(transcript);
                     if (userMsgCount >= 10) {

package/dist/core/v1-bootstrap.d.ts

@@ -18,6 +18,13 @@ export declare function ensureV1Directories(): void;
 export interface V1BootstrapResult {
     needsOnboarding: boolean;
     legacyBackupPath: string | null;
+    /**
+     * profile.json 이 존재했지만 parse/shape 오류로 사용 불가하여 v0.4.8
+     * 의 auto-repair 가 timestamp 백업으로 치워둔 경로. legacyBackupPath
+     * 와 의미가 다름 (legacy = model_version 구 버전 cutover, corrupt =
+     * 깨진 파일 격리).
+     */
+    corruptProfileBackupPath: string | null;
     session: SessionEffectiveState | null;
     renderedRules: string | null;
     profile: Profile | null;

package/dist/core/v1-bootstrap.js

@@ -15,10 +15,10 @@
 import * as fs from 'node:fs';
 import * as path from 'node:path';
 import * as crypto from 'node:crypto';
-import { FORGEN_HOME, ME_DIR, ME_RULES, ME_BEHAVIOR, V1_RECOMMENDATIONS_DIR, V1_SESSIONS_DIR, STATE_DIR, V1_RAW_LOGS_DIR, ME_SOLUTIONS } from './paths.js';
+import { FORGEN_HOME, ME_DIR, ME_RULES, ME_BEHAVIOR, V1_RECOMMENDATIONS_DIR, V1_SESSIONS_DIR, STATE_DIR, V1_RAW_LOGS_DIR, ME_SOLUTIONS, SESSIONS_DIR } from './paths.js';
 import { checkLegacyProfile, runLegacyCutover } from './legacy-detector.js';
 import { detectRuntimeCapability } from './runtime-detector.js';
-import { loadProfile, profileExists } from '../store/profile-store.js';
+import { backupCorruptProfile, loadProfile, profileExists } from '../store/profile-store.js';
 import { loadActiveRules, cleanupStaleSessionRules, markRulesInjected } from '../store/rule-store.js';
 import { composeSession } from '../preset/preset-manager.js';
 import { renderRules, DEFAULT_CONTEXT } from '../renderer/rule-renderer.js';
@@ -27,7 +27,14 @@ import { loadEvidenceBySession } from '../store/evidence-store.js';
 import { computeSessionSignals, detectMismatch } from '../forge/mismatch-detector.js';
 import { createRecommendation, saveRecommendation } from '../store/recommendation-store.js';
 // ── Directory Initialization ──
-const V1_DIRS = [FORGEN_HOME, ME_DIR, ME_RULES, ME_BEHAVIOR, V1_RECOMMENDATIONS_DIR, STATE_DIR, V1_SESSIONS_DIR, V1_RAW_LOGS_DIR, ME_SOLUTIONS];
+// v0.4.8 (A3): SESSIONS_DIR (~/.forgen/sessions/) 도 v1 bootstrap 보장 대상.
+// 이전엔 V1_DIRS 에 누락되어 있어, prepareHarness step 11 (startSessionLog)
+// 에 도달 못 하는 코드 경로 (예: forgen install 직접 실행) 에선 디렉토리가
+// 끝까지 생성되지 않았음. legacy session log 와 v1 effective state 는
+// 서로 다른 저장소 책임이라 두 dir 모두 명시 보장.
+//   - SESSIONS_DIR     = ~/.forgen/sessions/        ← legacy session log (transcript-like)
+//   - V1_SESSIONS_DIR  = ~/.forgen/state/sessions/  ← v1 effective state per session
+const V1_DIRS = [FORGEN_HOME, ME_DIR, ME_RULES, ME_BEHAVIOR, V1_RECOMMENDATIONS_DIR, STATE_DIR, V1_SESSIONS_DIR, V1_RAW_LOGS_DIR, ME_SOLUTIONS, SESSIONS_DIR];
 export function ensureV1Directories() {
     for (const dir of V1_DIRS) {
         fs.mkdirSync(dir, { recursive: true });
@@ -48,6 +55,7 @@ export function bootstrapV1Session() {
         return {
             needsOnboarding: true,
             legacyBackupPath,
+            corruptProfileBackupPath: null,
             session: null,
             renderedRules: null,
             profile: null,
@@ -56,7 +64,20 @@ export function bootstrapV1Session() {
     }
     const profile = loadProfile();
     if (!profile) {
-        return { needsOnboarding: true, legacyBackupPath, session: null, renderedRules: null, profile: null, mismatch: null };
+        // v0.4.8 — corrupt/invalid profile auto-repair.
+        // profileExists()=true && loadProfile()=null 은 parse 실패 또는 v1
+        // shape 위반. 그대로 두면 다음 실행에서도 같은 분기로 빠지므로
+        // backup 후 새 onboarding 흐름을 강제.
+        const corruptProfileBackupPath = backupCorruptProfile();
+        return {
+            needsOnboarding: true,
+            legacyBackupPath,
+            corruptProfileBackupPath,
+            session: null,
+            renderedRules: null,
+            profile: null,
+            mismatch: null,
+        };
     }
     // 3. Runtime capability 감지
     const runtime = detectRuntimeCapability();
@@ -133,7 +154,7 @@ export function bootstrapV1Session() {
     try {
         // 세션 시작 로그
         const rawLogPath = path.join(V1_RAW_LOGS_DIR, `${sessionId}.jsonl`);
-        fs.appendFileSync(rawLogPath, JSON.stringify({
+        fs.appendFileSync(rawLogPath, `${JSON.stringify({
             event: 'session-started',
             session_id: sessionId,
             timestamp: new Date().toISOString(),
@@ -142,7 +163,7 @@ export function bootstrapV1Session() {
             judgment_pack: profile.base_packs.judgment_pack,
             communication_pack: profile.base_packs.communication_pack,
             effective_trust: session.effective_trust_policy,
-        }) + '\n');
+        })}\n`);
         // TTL sweep: 7일 이상 된 raw log 파일 삭제
         const TTL_MS = 7 * 24 * 60 * 60 * 1000;
         const now = Date.now();
@@ -163,6 +184,7 @@ export function bootstrapV1Session() {
     return {
         needsOnboarding: false,
         legacyBackupPath,
+        corruptProfileBackupPath: null,
         session,
         renderedRules,
         profile,

package/dist/engine/compound-extractor.js

@@ -557,7 +557,7 @@ function findCommonPrefix(strings) {
     return prefix.replace(/-$/, '');
 }
 /** Save an extracted solution as experiment */
-function saveExtractedSolution(sol, sessionId) {
+function saveExtractedSolution(sol, _sessionId) {
     const today = new Date().toISOString().split('T')[0];
     const slugName = sol.name.toLowerCase()
         .replace(/[^a-z0-9가-힣\s-]/g, '')

package/dist/engine/learn-cli.js

@@ -136,7 +136,7 @@ function runFitness(args) {
     console.log(`    ${'name'.padEnd(48)} ${'state'.padEnd(14)} ${'inj'.padStart(4)}  ${'acc/cor/err'.padStart(11)}  ${'fit'.padStart(6)}`);
     console.log(`    ${'-'.repeat(48)} ${'-'.repeat(14)} ${'-'.repeat(4)}  ${'-'.repeat(11)}  ${'-'.repeat(6)}`);
     for (const r of records) {
-        const name = r.solution.length > 47 ? r.solution.slice(0, 45) + '..' : r.solution;
+        const name = r.solution.length > 47 ? `${r.solution.slice(0, 45)}..` : r.solution;
         const acr = `${r.accepted}/${r.corrected}/${r.errored}`;
         console.log(`    ${name.padEnd(48)} ${r.state.padEnd(14)} ${String(r.injected).padStart(4)}  ${acr.padStart(11)}  ${r.fitness.toFixed(2).padStart(6)}`);
     }
@@ -222,7 +222,7 @@ function runEvolvePromote(candidateNameOrList) {
     }
     const result = promoteCandidate(candidateNameOrList);
     if (result.ok) {
-        console.log(`\n  ✓ Promoted: ${path.basename(result.dest)}`);
+        console.log(`\n  ✓ Promoted: ${result.dest ? path.basename(result.dest) : '(unknown)'}`);
         console.log(`    from: ${result.source}`);
         console.log(`    to:   ${result.dest}`);
         console.log(`    Cold-start bonus active until 5 injections accumulate (auto-promotes to verified).\n`);

package/dist/engine/lifecycle/bypass-detector.js

@@ -51,9 +51,10 @@ function extractParenthesizedExamples(p) {
     const out = [];
     // Match (...) groups; multiple groups in policy are uncommon but supported
     const re = /\(([^)]+)\)/g;
-    let m;
-    while ((m = re.exec(p))) {
+    let m = re.exec(p);
+    while (m !== null) {
         const inside = m[1];
+        m = re.exec(p);
         // Skip if it looks like a path (contains "/" before any obvious separator commitment)
         if (/[a-zA-Z]+\/[a-zA-Z]/.test(inside))
             continue;

package/dist/engine/lifecycle/meta-reclassifier.js

@@ -294,7 +294,7 @@ export function appendLifecycleEvents(events, now = Date.now()) {
             }
         }
         catch { /* missing → no rotate */ }
-        const body = events.map((e) => JSON.stringify(e)).join('\n') + '\n';
+        const body = `${events.map((e) => JSON.stringify(e)).join('\n')}\n`;
         fs.appendFileSync(logPath, body);
     }
     catch (e) {

package/dist/engine/lifecycle/signals.js

@@ -62,7 +62,7 @@ export function recordViolation(entry) {
         fs.mkdirSync(ENFORCEMENT_DIR, { recursive: true });
         rotateIfBig(VIOLATIONS_PATH);
         const full = { at: new Date().toISOString(), ...entry };
-        fs.appendFileSync(VIOLATIONS_PATH, JSON.stringify(full) + '\n');
+        fs.appendFileSync(VIOLATIONS_PATH, `${JSON.stringify(full)}\n`);
     }
     catch (e) {
         // best-effort, 실패 시 debug 로그 (silent swallow 방지)
@@ -76,7 +76,7 @@ export function recordBypass(entry) {
         fs.mkdirSync(ENFORCEMENT_DIR, { recursive: true });
         rotateIfBig(BYPASS_PATH);
         const full = { at: new Date().toISOString(), ...entry };
-        fs.appendFileSync(BYPASS_PATH, JSON.stringify(full) + '\n');
+        fs.appendFileSync(BYPASS_PATH, `${JSON.stringify(full)}\n`);
     }
     catch (e) {
         if (process.env.FORGEN_DEBUG_SIGNALS === '1') {

package/dist/engine/lifecycle/trigger-t1-correction.js

@@ -39,7 +39,7 @@ function matchesRule(evidence, rule) {
         .toLowerCase();
     return keyTokens.some((t) => {
         const tokLower = t.toLowerCase();
-        return summaryLower.includes(tokLower) || (targetToken && targetToken.includes(tokLower));
+        return summaryLower.includes(tokLower) || (targetToken?.includes(tokLower));
     });
 }
 export function detect(input) {

package/dist/engine/solution-candidate.js

@@ -100,7 +100,7 @@ export function rollbackSince(epochMs) {
                 continue;
             try {
                 fs.mkdirSync(archiveDir, { recursive: true });
-                const destName = path.basename(dir) + '__' + file;
+                const destName = `${path.basename(dir)}__${file}`;
                 fs.renameSync(filePath, path.join(archiveDir, destName));
                 archived.push(filePath);
             }

package/dist/engine/solution-outcomes.js

@@ -30,7 +30,7 @@ function writePending(sessionId, state) {
 }
 function appendOutcome(event) {
     fs.mkdirSync(OUTCOMES_DIR, { recursive: true });
-    fs.appendFileSync(outcomesPath(event.session_id), JSON.stringify(event) + '\n');
+    fs.appendFileSync(outcomesPath(event.session_id), `${JSON.stringify(event)}\n`);
 }
 /**
  * Run a read-modify-write pending-state mutation under a file lock

package/dist/engine/solution-quarantine.js

@@ -49,7 +49,7 @@ export function recordQuarantine(filePath, errors) {
             at: new Date().toISOString(),
             errors,
         };
-        fs.appendFileSync(SOLUTION_QUARANTINE_PATH, JSON.stringify(entry) + '\n');
+        fs.appendFileSync(SOLUTION_QUARANTINE_PATH, `${JSON.stringify(entry)}\n`);
     }
     catch (e) {
         log.debug(`quarantine write failed: ${e instanceof Error ? e.message : String(e)}`);

package/dist/engine/solution-weakness.js

@@ -97,14 +97,20 @@ function findConflictClusters(rows, fitnessByName) {
     const underperformers = rows.filter((r) => fitnessByName.get(r.name)?.state === 'underperform');
     const clusters = [];
     for (const ch of champions) {
+        const chFitness = fitnessByName.get(ch.name)?.fitness;
+        if (chFitness === undefined)
+            continue;
         for (const up of underperformers) {
+            const upFitness = fitnessByName.get(up.name)?.fitness;
+            if (upFitness === undefined)
+                continue;
             const shared = ch.tags.filter((t) => up.tags.includes(t));
             if (shared.length < 2)
                 continue;
             clusters.push({
                 shared_tags: shared,
-                champion: { name: ch.name, fitness: fitnessByName.get(ch.name).fitness },
-                underperform: { name: up.name, fitness: fitnessByName.get(up.name).fitness },
+                champion: { name: ch.name, fitness: chFitness },
+                underperform: { name: up.name, fitness: upFitness },
             });
         }
     }

package/dist/forge/cli.js

@@ -39,7 +39,7 @@ function handleShowProfile() {
         console.log('\n  No v1 profile found. Run `forgen forge` or `forgen onboarding`.\n');
         return;
     }
-    console.log('\n' + renderProfile(profile) + '\n');
+    console.log(`\n${renderProfile(profile)}\n`);
 }
 function handleExport() {
     const profile = loadProfile();

package/dist/hooks/keyword-detector.js

@@ -192,7 +192,7 @@ async function main() {
             return;
         }
         const match = detectKeyword(input.prompt);
-        const sessionId = input.session_id ?? 'unknown';
+        const _sessionId = input.session_id ?? 'unknown';
         // v1: regex 기반 prompt 학습 제거. Evidence 기반으로 전환됨.
         if (!match) {
             console.log(approve());

package/dist/hooks/secret-filter.js

@@ -34,10 +34,10 @@ export function redactSecrets(text) {
     let out = text;
     for (const sp of SECRET_PATTERNS) {
         // regex 복제 (global flag 없이 repeated test 되는 경우 lastIndex 안전)
-        const re = new RegExp(sp.pattern.source, (sp.pattern.flags.includes('g') ? sp.pattern.flags : sp.pattern.flags + 'g'));
+        const re = new RegExp(sp.pattern.source, (sp.pattern.flags.includes('g') ? sp.pattern.flags : `${sp.pattern.flags}g`));
         if (re.test(out)) {
             hits.push(sp);
-            const re2 = new RegExp(sp.pattern.source, (sp.pattern.flags.includes('g') ? sp.pattern.flags : sp.pattern.flags + 'g'));
+            const re2 = new RegExp(sp.pattern.source, (sp.pattern.flags.includes('g') ? sp.pattern.flags : `${sp.pattern.flags}g`));
             out = out.replace(re2, `[REDACTED:${sp.name}]`);
         }
     }

package/dist/hooks/shared/hook-response.js

@@ -146,7 +146,7 @@ export function failOpenWithTracking(hookName, err) {
             }
         }
         const entry = JSON.stringify(payload);
-        fs.appendFileSync(logPath, entry + '\n');
+        fs.appendFileSync(logPath, `${entry}\n`);
     }
     catch { /* fail-open: tracking itself must not throw */ }
     return JSON.stringify({ continue: true });

package/dist/hooks/shared/hook-timing.js

@@ -19,7 +19,7 @@ export function recordHookTiming(hookName, durationMs, event) {
     try {
         fs.mkdirSync(STATE_DIR, { recursive: true });
         const entry = JSON.stringify({ hook: hookName, ms: durationMs, event, at: Date.now() });
-        fs.appendFileSync(TIMING_LOG, entry + '\n');
+        fs.appendFileSync(TIMING_LOG, `${entry}\n`);
         // Rotate if too large — size-gated (statSync only, skip read/write 대부분의 호출)
         try {
             const size = fs.statSync(TIMING_LOG).size;
@@ -28,7 +28,7 @@ export function recordHookTiming(hookName, durationMs, event) {
             const content = fs.readFileSync(TIMING_LOG, 'utf-8');
             const lines = content.trim().split('\n');
             if (lines.length > MAX_LINES) {
-                fs.writeFileSync(TIMING_LOG, lines.slice(-MAX_LINES).join('\n') + '\n');
+                fs.writeFileSync(TIMING_LOG, `${lines.slice(-MAX_LINES).join('\n')}\n`);
             }
         }
         catch { /* skip rotation on error */ }
@@ -52,7 +52,7 @@ export function getTimingStats() {
         for (const e of entries) {
             if (!byHook.has(e.hook))
                 byHook.set(e.hook, []);
-            byHook.get(e.hook).push(e.ms);
+            byHook.get(e.hook)?.push(e.ms);
         }
         const stats = [];
         for (const [hook, times] of byHook) {

package/dist/hooks/solution-injector.js

@@ -409,7 +409,7 @@ async function main() {
                         .filter(l => l.length > 0);
                     contentSnippet = lines.slice(0, 3).join('\n');
                     if (contentSnippet.length > SUMMARY_MAX_CHARS) {
-                        contentSnippet = contentSnippet.slice(0, SUMMARY_MAX_CHARS - 3) + '...';
+                        contentSnippet = `${contentSnippet.slice(0, SUMMARY_MAX_CHARS - 3)}...`;
                     }
                 }
             }

package/dist/hooks/stop-guard.js

@@ -370,14 +370,14 @@ export function acknowledgeSessionBlocks(sessionId) {
             try {
                 fs.mkdirSync(path.dirname(ACK_LOG), { recursive: true });
                 rotateIfBig(ACK_LOG);
-                fs.appendFileSync(ACK_LOG, JSON.stringify({
+                fs.appendFileSync(ACK_LOG, `${JSON.stringify({
                     at: now,
                     session_id: state.sessionId,
                     rule_id: state.ruleId,
                     block_count: state.count,
                     first_block_at: state.firstBlockAt,
                     last_block_at: state.lastBlockAt,
-                }) + '\n');
+                })}\n`);
                 acked += 1;
             }
             catch { /* append failure: still try cleanup */ }
@@ -396,7 +396,7 @@ export function logDriftEvent(event) {
     try {
         fs.mkdirSync(path.dirname(DRIFT_LOG), { recursive: true });
         rotateIfBig(DRIFT_LOG);
-        fs.appendFileSync(DRIFT_LOG, JSON.stringify({ at: new Date().toISOString(), ...event }) + '\n');
+        fs.appendFileSync(DRIFT_LOG, `${JSON.stringify({ at: new Date().toISOString(), ...event })}\n`);
     }
     catch {
         // best-effort

package/dist/host/install-codex.js

@@ -202,7 +202,7 @@ function installCodexSkills(opts) {
     return { installed: count };
 }
 // ── P3-3: AGENTS.md inject ────────────────────────────────────────────
-function resolveAgentsMdPath(pkgRoot) {
+function resolveAgentsMdPath(_pkgRoot) {
     // Phase 3 critic fix: pkgRoot 기반 walk-up 은 `npm install -g` 시 시스템 디렉토리
     // (예: /usr/local/lib/node_modules/forgen) 에 fallback AGENTS.md 작성 위험.
     // *cwd 기반* 으로 변경 — 사용자 작업 디렉토리의 git root, 없으면 cwd 자체.

package/dist/mcp/tools.js

@@ -239,7 +239,7 @@ export function registerTools(server) {
                     }],
             };
         }
-        catch (e) {
+        catch (_e) {
             return {
                 content: [{
                         type: 'text',

package/dist/preset/facet-catalog.js

@@ -29,8 +29,8 @@ export const COMMUNICATION_CENTROIDS = {
     '상세형': { verbosity: 0.85, structure: 0.80, teaching_bias: 0.80 },
 };
 // ── Defaults (backward compat) ──
-export const DEFAULT_JUDGMENT_FACETS = JUDGMENT_CENTROIDS['균형형'];
-export const DEFAULT_COMMUNICATION_FACETS = COMMUNICATION_CENTROIDS['균형형'];
+export const DEFAULT_JUDGMENT_FACETS = JUDGMENT_CENTROIDS.균형형;
+export const DEFAULT_COMMUNICATION_FACETS = COMMUNICATION_CENTROIDS.균형형;
 // ── Utilities ──
 export function qualityCentroid(pack) {
     return { ...QUALITY_CENTROIDS[pack] };

package/dist/renderer/rule-renderer.js

@@ -171,28 +171,28 @@ export function renderRules(rules, state, profile, ctx = DEFAULT_CONTEXT) {
     for (const name of SECTION_ORDER)
         sections.set(name, []);
     for (const rule of hardRules) {
-        sections.get('Must Not').push(ruleToText(rule));
+        sections.get('Must Not')?.push(ruleToText(rule));
     }
     for (const rule of otherRules) {
         const section = CATEGORY_TO_SECTION[rule.category] ?? 'Working Defaults';
-        sections.get(section).push(ruleToText(rule));
+        sections.get(section)?.push(ruleToText(rule));
     }
     // 5. trust policy + pack 기본 규칙 주입
     if (ctx.include_pack_summary) {
-        sections.get('Working Defaults').unshift(`Trust: ${trustPolicySummary(state.effective_trust_policy)}`);
+        sections.get('Working Defaults')?.unshift(`Trust: ${trustPolicySummary(state.effective_trust_policy)}`);
         // judgment pack 기본 규칙
         for (const rule of judgmentPackRules(state.judgment_pack)) {
-            sections.get('Working Defaults').push(rule);
+            sections.get('Working Defaults')?.push(rule);
         }
         // communication pack 기본 규칙
         for (const rule of communicationPackRules(state.communication_pack)) {
-            sections.get('How To Report').push(rule);
+            sections.get('How To Report')?.push(rule);
         }
         // 4축 facet 극단값 → 추가 규칙 (12-bucket pack 위에 연속 값 차별화).
         // 각 facet 0.5 default 이고 자동 갱신 ±0.1 단위이므로, 0.85/0.15 임계값은
         // 여러 세션에 걸친 강한 신호 누적 후에만 발화한다.
         for (const fr of facetDrivenRules(profile)) {
-            sections.get(fr.section).push(fr.rule);
+            sections.get(fr.section)?.push(fr.rule);
         }
     }
     // 6. 섹션 조립 (AI-optimized: 간결한 태그 형식)
@@ -200,7 +200,7 @@ export function renderRules(rules, state, profile, ctx = DEFAULT_CONTEXT) {
     let totalChars = 0;
     let totalRules = 0;
     for (const name of SECTION_ORDER) {
-        const items = sections.get(name);
+        const items = sections.get(name) ?? [];
         if (items.length === 0)
             continue;
         const header = `## ${name}`;

package/dist/store/compound-usage-store.js

@@ -27,7 +27,7 @@ export function recordUsage(name, via = 'mcp') {
     try {
         fs.mkdirSync(STATE_DIR, { recursive: true });
         const entry = { at: new Date().toISOString(), name, via };
-        fs.appendFileSync(COMPOUND_USAGE_LOG, JSON.stringify(entry) + '\n');
+        fs.appendFileSync(COMPOUND_USAGE_LOG, `${JSON.stringify(entry)}\n`);
     }
     catch {
         // fail-open: 신호 수집 실패가 사용자 경험을 방해하면 안 됨

package/dist/store/implicit-feedback-store.js

@@ -67,7 +67,7 @@ export function appendImplicitFeedback(entry) {
         return false;
     try {
         fs.mkdirSync(STATE_DIR, { recursive: true });
-        fs.appendFileSync(IMPLICIT_FEEDBACK_LOG, JSON.stringify(normalized) + '\n');
+        fs.appendFileSync(IMPLICIT_FEEDBACK_LOG, `${JSON.stringify(normalized)}\n`);
         return true;
     }
     catch {
@@ -147,7 +147,7 @@ export function migrateImplicitFeedbackLog() {
     }
     // atomic replace via temp file
     const tmp = `${IMPLICIT_FEEDBACK_LOG}.migrate.${process.pid}`;
-    fs.writeFileSync(tmp, out.length > 0 ? out.join('\n') + '\n' : '');
+    fs.writeFileSync(tmp, out.length > 0 ? `${out.join('\n')}\n` : '');
     fs.renameSync(tmp, IMPLICIT_FEEDBACK_LOG);
     return { migrated, dropped };
 }

package/dist/store/profile-store.d.ts

@@ -18,6 +18,17 @@ export declare function saveProfile(profile: Profile): void;
  * whether to run `runLegacyCutover`).
  */
 export declare function profileExists(): boolean;
+/**
+ * profile.json 이 존재하지만 parse 실패 / v1 shape 위반인 경우, 사용자가
+ * 다음 onboarding 으로 매끄럽게 복구되도록 corrupt 파일을 timestamp 백업
+ * 으로 옆에 치워둔다. 백업 경로를 반환.
+ *
+ * v0.4.8 — bootstrapV1Session 의 loadProfile()=null early-return 보강.
+ * 이전엔 needsOnboarding=true 만 반환했고 corrupt 파일이 그대로 남아
+ * 다음 실행 때도 동일 분기로 빠지면서 사용자가 정체 원인을 모른 채
+ * onboarding 안내만 반복 받는 패턴이었음.
+ */
+export declare function backupCorruptProfile(): string | null;
 export declare function isV1Profile(data: unknown): data is Profile;
 /**
  * D2 fix (2026-04-27): explicit_correction 누적 시 해당 축의 confidence 를 점진

package/dist/store/profile-store.js

@@ -66,6 +66,29 @@ export function saveProfile(profile) {
 export function profileExists() {
     return fs.existsSync(FORGE_PROFILE);
 }
+/**
+ * profile.json 이 존재하지만 parse 실패 / v1 shape 위반인 경우, 사용자가
+ * 다음 onboarding 으로 매끄럽게 복구되도록 corrupt 파일을 timestamp 백업
+ * 으로 옆에 치워둔다. 백업 경로를 반환.
+ *
+ * v0.4.8 — bootstrapV1Session 의 loadProfile()=null early-return 보강.
+ * 이전엔 needsOnboarding=true 만 반환했고 corrupt 파일이 그대로 남아
+ * 다음 실행 때도 동일 분기로 빠지면서 사용자가 정체 원인을 모른 채
+ * onboarding 안내만 반복 받는 패턴이었음.
+ */
+export function backupCorruptProfile() {
+    if (!fs.existsSync(FORGE_PROFILE))
+        return null;
+    const ts = new Date().toISOString().replace(/[:.]/g, '-');
+    const backupPath = `${FORGE_PROFILE}.corrupt-${ts}`;
+    try {
+        fs.renameSync(FORGE_PROFILE, backupPath);
+        return backupPath;
+    }
+    catch {
+        return null;
+    }
+}
 export function isV1Profile(data) {
     if (!data || typeof data !== 'object')
         return false;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wooojin/forgen",
-  "version": "0.4.7",
+  "version": "0.4.8",
   "preferGlobal": true,
   "main": "dist/lib.js",
   "types": "./dist/lib.d.ts",

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://claude.ai/schemas/claude-plugin.json",
   "name": "forgen",
-  "version": "0.4.7",
+  "version": "0.4.8",
   "description": "Claude Code harness — the more you use Claude, the better it gets",
   "author": {
     "name": "jang-ujin",