careermate 0.1.2 → 0.1.3

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 CareerMate
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -240,7 +240,9 @@ CareerMate/
 - [`AGENTS.md`](AGENTS.md) — Codex용 영속 지침. / [`CLAUDE.md`](CLAUDE.md) — Claude Code용 영속 지침.
 - [`docs/SUPPORTED_AI_APPS.md`](docs/SUPPORTED_AI_APPS.md) — **설치 레퍼런스 허브**: 지원 앱 매트릭스 + 설치 3방식(에이전트/npx/.mcpb) + 클라이언트별 수동 MCP 설정 + 알려진 제약. (사람용 안내는 https://careermate.life)
 - [`docs/START_WORKFLOW.md`](docs/START_WORKFLOW.md) — 등록부터 면접 준비까지 단계별 작업 런북.
+- [`docs/FAQ.md`](docs/FAQ.md) — **자주 묻는 질문 / 문제 해결**: "PDF가 안 읽혀요", "분석이 안 돼요", "공고 URL은 어떻게 넣어요" 등.
 - [`docs/TODO.md`](docs/TODO.md) — 남은 작업과 v1 범위 밖 항목.
+- [`CHANGELOG.md`](CHANGELOG.md) — 버전별 변경 이력. / [`CONTRIBUTING.md`](CONTRIBUTING.md) · [`SECURITY.md`](SECURITY.md) · [`CODE_OF_CONDUCT.md`](CODE_OF_CONDUCT.md) — 기여·보안·행동 강령.
 
 ---
 
@@ -258,4 +260,4 @@ npm run typecheck
 
 ## 라이선스
 
-MIT 라이선스 — npm으로 배포되는 패키지 코드에 적용됩니다. (개발용 GitHub 저장소는 현재 비공개입니다.)
+MIT 라이선스 — 전문은 [`LICENSE`](LICENSE) 파일을 참고하세요. (개발용 GitHub 저장소는 현재 비공개입니다.)

package/apps/web/public/pages/documents.js

@@ -23,6 +23,7 @@ export async function render(ctx) {
   root.append(el('div', { class: 'tabs' }, tabCover, tabDocs), panel);
 
   let query = '';
+  let searchInput = null;
   function selectTab(next) {
     tab = next;
     query = '';
@@ -43,9 +44,12 @@ export async function render(ctx) {
       if (!hide) shown += 1;
     }
     const existing = panel.querySelector('.search-empty');
+    if (existing) existing.remove();
     if (q && cards.length && shown === 0) {
-      if (!existing) panel.append(el('p', { class: 'search-empty muted', style: { textAlign: 'center', margin: '8px 0' } }, '검색 결과가 없어요.'));
-    } else if (existing) existing.remove();
+      panel.append(el('div', { class: 'search-empty empty' },
+        el('p', { class: 'muted', style: { margin: '0 0 12px' } }, `‘${query.trim()}’에 맞는 항목이 없어요.`),
+        Btn('필터 초기화', { sm: true, variant: 'ghost', onClick: () => { query = ''; if (searchInput) searchInput.value = ''; applyFilter(); } })));
+    }
   }
 
   async function reload() {
@@ -70,6 +74,7 @@ export async function render(ctx) {
   function setActions() {
     const search = Input({ type: 'search', placeholder: tab === 'cover' ? '자기소개서 검색' : '문서 검색', value: query, attrs: { 'aria-label': '검색' } });
     search.classList.add('input--inline');
+    searchInput = search;
     search.addEventListener('input', () => { query = search.value; applyFilter(); });
     const createBtn = tab === 'cover'
       ? Btn('새 자기소개서', { icon: 'plus', variant: 'primary', onClick: () => openCoverCreate(reload) })

package/apps/web/public/pages/home.js

@@ -4,7 +4,7 @@
 // the 시작하기 card. Every empty state is ONE screen-specific sentence; never repeat
 // the same "AI에게 보내면 저장됩니다" instruction across surfaces.
 import {
-  el, get, icon, navigate, Card, Badge, Btn, EmptyState, ListRow, CheckRow,
+  el, get, icon, navigate, Card, Badge, Btn, ListRow, CheckRow,
   Stat, PageHead, fmtDate, fmtRelative, scoreClass, STATUS_COLOR, statusColor, mount,
 } from '/lib.js';
 
@@ -59,7 +59,7 @@ function Greeting(name, s, firstRun) {
   let focus;
   if (firstRun) focus = '시작해 볼까요 — 먼저 기본 정보를 채워 주세요.';
   else if (s.interview_todo.length) focus = `면접 준비가 필요한 지원 ${s.interview_todo.length}건이 있어요.`;
-  else if (s.in_progress.length) focus = `진행 중인 지원 ${s.in_progress.length}건을 확인하세요.`;
+  else if (s.in_progress.length) focus = `진행 중인 지원 ${s.in_progress.length}건이 있어요.`;
   else if (s.counts.jobs) focus = `저장된 공고 ${s.counts.jobs}건 · 새 적합도 분석을 받아보세요.`;
   else focus = '오늘도 한 걸음 나아가 볼까요.';
   return PageHead({ title: name ? `${name}님, 안녕하세요` : '환영합니다', desc: focus });
@@ -87,7 +87,7 @@ function GettingStarted(o) {
           el('div', { class: 'callout__body' },
             '공고 분석·자기소개서·면접 준비는 평소 쓰던 AI에게 말로 시키면, 결과가 이 대시보드에 쌓여요.'))),
       el('div', { class: 'progress' }, el('div', { class: 'progress__bar', style: { width: `${o.profile_completeness}%` } })),
-      el('p', { class: 'text-secondary text-sm', style: { margin: '12px 0 8px' } },
+      el('p', { class: 'text-secondary text-sm mt-3 mb-2' },
         '완성할수록 AI의 적합도 분석과 자기소개서 품질이 좋아져요.'),
       el('div', {}, ...steps.map((it) => CheckRow({ done: it.done, label: it.label, onClick: () => navigate(it.to) }))),
     ],
@@ -201,10 +201,7 @@ function RecentJobs(jobs) {
   if (!jobs.length) {
     return Card({
       title: '최근 공고',
-      body: EmptyState({
-        iconName: 'briefcase', title: '저장된 공고가 아직 없어요',
-        action: Btn('공고 추가', { icon: 'plus', variant: 'ghost', onClick: () => navigate('/jobs') }),
-      }),
+      body: el('p', { class: 'muted', style: { margin: 0 } }, '저장된 공고가 아직 없어요. 새 공고를 추가해 보세요.'),
     });
   }
   const rows = jobs.map((j) => ListRow({

package/apps/web/public/pages/jobs.js

@@ -365,11 +365,7 @@ function FitCard(fit) {
   if (!fit) {
     return Card({
       title: '적합도 분석',
-      body: EmptyState({
-        iconName: 'target',
-        title: '적합도 분석 전이에요',
-        body: '이 공고와 내 프로필을 비교한 분석 결과가 여기에 표시됩니다.',
-      }),
+      body: el('p', { class: 'muted', style: { margin: 0 } }, '아직 분석 전이에요. 이 공고와 내 프로필을 비교한 결과가 여기에 표시됩니다.'),
     });
   }
 

package/apps/web/public/pages/profile.js

@@ -264,7 +264,7 @@ function editWriting(p, reload) {
 /* ---------------------------------------------------- 4. 경력 (Experiences) */
 
 function ExperiencesCard(items, reload) {
-  const add = Btn('추가', { icon: 'plus', sm: true, variant: 'ghost', onClick: () => editExperience(null, reload) });
+  const add = Btn('경력 추가', { icon: 'plus', sm: true, variant: 'ghost', onClick: () => editExperience(null, reload) });
 
   if (!items.length) {
     return Card({
@@ -368,7 +368,7 @@ function editExperience(x, reload) {
 /* ----------------------------------------------------- 5. 프로젝트 (Projects) */
 
 function ProjectsCard(items, reload) {
-  const add = Btn('추가', { icon: 'plus', sm: true, variant: 'ghost', onClick: () => editProject(null, reload) });
+  const add = Btn('프로젝트 추가', { icon: 'plus', sm: true, variant: 'ghost', onClick: () => editProject(null, reload) });
 
   if (!items.length) {
     return Card({
@@ -469,7 +469,7 @@ function editProject(x, reload) {
 /* -------------------------------------------------------- 6. 기술 (Skills) */
 
 function SkillsCard(items, reload) {
-  const add = Btn('추가', { icon: 'plus', sm: true, variant: 'ghost', onClick: () => editSkill(null, reload) });
+  const add = Btn('기술 추가', { icon: 'plus', sm: true, variant: 'ghost', onClick: () => editSkill(null, reload) });
 
   if (!items.length) {
     return Card({

package/apps/web/public/styles.css

@@ -403,7 +403,9 @@ h1,h2,h3,h4 { margin: 0; font-weight: 650; letter-spacing: -0.01em; }
   background: var(--surface); border: 1px solid var(--border); border-radius: var(--radius); padding: 22px 26px; max-height: 60vh; overflow-y: auto; }
 .kv { display: grid; grid-template-columns: 132px 1fr; gap: 8px 16px; }
 .kv dt { color: var(--text-tertiary); font-size: 13px; }
-.kv dd { margin: 0; }
+/* min-width:0 overrides a grid item's default min-width:auto so the 1fr column
+   can shrink below its content — otherwise a long path/value overflows the grid. */
+.kv dd { margin: 0; min-width: 0; }
 
 /* ----------------------------------------------------------------- modal */
 .modal-root { position: fixed; inset: 0; z-index: 60; display: none; }
@@ -450,7 +452,10 @@ h1,h2,h3,h4 { margin: 0; font-weight: 650; letter-spacing: -0.01em; }
 .between { justify-content: space-between; } .center { align-items: center; } .wrap { flex-wrap: wrap; }
 .ml-auto { margin-left: auto; } .mt-2{margin-top:8px;} .mt-3{margin-top:12px;} .mt-4{margin-top:16px;} .mb-2{margin-bottom:8px;} .mb-3{margin-bottom:12px;} .mb-4{margin-bottom:16px;}
 .tnum { font-variant-numeric: tabular-nums; }
-.truncate { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; max-width: 100%; }
+/* min-width:0 lets a truncating element actually shrink inside a flex row;
+   without it a long unbreakable value (e.g. a data-folder path) forces the
+   flex item to its content width and overflows the viewport on narrow screens. */
+.truncate { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; max-width: 100%; min-width: 0; }
 .divider { height: 1px; background: var(--border); margin: 16px 0; }
 .skeleton { background: linear-gradient(90deg, var(--bg-sunken) 25%, var(--surface-hover) 37%, var(--bg-sunken) 63%); background-size: 400% 100%; animation: shimmer 1.4s infinite; border-radius: 6px; }
 @keyframes shimmer { 0% { background-position: 100% 0; } 100% { background-position: 0 0; } }

package/dist/doctor.mjs

@@ -75561,29 +75561,42 @@ function isSafeUrl(u) {
   return !/^[a-z][a-z0-9+.-]*:/i.test(s) || /^(https?:|mailto:)/i.test(s);
 }
 var UNSAFE_URL_MSG = "javascript: \uAC19\uC740 \uC704\uD5D8\uD55C \uB9C1\uD06C\uB294 \uC0AC\uC6A9\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. http(s) \uB9C1\uD06C\uB97C \uC0AC\uC6A9\uD558\uC138\uC694.";
-var SafeUrl = external_exports.string().min(1).refine(isSafeUrl, { message: UNSAFE_URL_MSG });
-var SafeUrlOptional = external_exports.string().optional().refine((u) => u == null || u === "" || isSafeUrl(u), { message: UNSAFE_URL_MSG });
+var MAX_URL = 2e3;
+var SafeUrl = external_exports.string().min(1).max(MAX_URL).refine(isSafeUrl, { message: UNSAFE_URL_MSG });
+var SafeUrlOptional = external_exports.string().max(MAX_URL).optional().refine((u) => u == null || u === "" || isSafeUrl(u), { message: UNSAFE_URL_MSG });
+var MAX_LINE = 500;
+var MAX_NOTE = 1e4;
+var MAX_BODY = 2e5;
+var MAX_ITEM = 2e3;
+var MAX_ITEMS = 500;
+var EMPTY_MSG = "\uB0B4\uC6A9\uC774 \uBE44\uC5B4 \uC788\uC2B5\uB2C8\uB2E4(\uACF5\uBC31\uB9CC\uC73C\uB85C\uB294 \uC800\uC7A5\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4).";
+var reqLine = external_exports.string().trim().min(1).max(MAX_LINE);
+var optLine = external_exports.string().max(MAX_LINE).optional();
+var optNote = external_exports.string().max(MAX_NOTE).optional();
+var optBody = external_exports.string().max(MAX_BODY).optional();
+var reqBody = external_exports.string().max(MAX_BODY).refine((s) => s.trim().length > 0, { message: EMPTY_MSG });
+var strList = external_exports.array(external_exports.string().max(MAX_ITEM)).max(MAX_ITEMS);
 var baseRecord = {
   id,
   created_at: isoDateTime,
   updated_at: isoDateTime
 };
 var LinkSchema = external_exports.object({
-  label: external_exports.string().min(1),
+  label: reqLine,
   url: SafeUrl
 });
 var ProfileInputSchema = external_exports.object({
-  name: external_exports.string().min(1).optional(),
-  email: external_exports.string().optional(),
-  phone: external_exports.string().optional(),
-  location: external_exports.string().optional(),
-  headline: external_exports.string().optional().describe("\uD55C \uC904 \uC18C\uAC1C / \uC9C1\uBB34 \uD0C0\uC774\uD2C0"),
-  summary: external_exports.string().optional().describe("\uC790\uAE30\uC18C\uAC1C \uC694\uC57D"),
-  desired_roles: external_exports.array(external_exports.string()).optional().describe("\uD76C\uB9DD \uC9C1\uBB34"),
-  desired_conditions: external_exports.string().optional().describe("\uD76C\uB9DD \uADFC\uBB34 \uC870\uAC74 (\uC5F0\uBD09, \uC9C0\uC5ED, \uADFC\uBB34\uD615\uD0DC \uB4F1)"),
-  preferred_tone: external_exports.string().optional().describe("\uC790\uAE30\uC18C\uAC1C\uC11C \uC120\uD638 \uBB38\uCCB4 (\uC608: \uB2F4\uBC31\uD558\uACE0 \uAD6C\uCCB4\uC801)"),
-  emphasis_points: external_exports.array(external_exports.string()).optional().describe("\uAC15\uC870\uD558\uACE0 \uC2F6\uC740 \uD575\uC2EC \uD3EC\uC778\uD2B8"),
-  links: external_exports.array(LinkSchema).optional().describe("\uD3EC\uD2B8\uD3F4\uB9AC\uC624/\uAE43\uD5C8\uBE0C/\uB9C1\uD06C\uB4DC\uC778 \uB4F1")
+  name: reqLine.optional(),
+  email: optLine,
+  phone: optLine,
+  location: optLine,
+  headline: external_exports.string().max(MAX_LINE).optional().describe("\uD55C \uC904 \uC18C\uAC1C / \uC9C1\uBB34 \uD0C0\uC774\uD2C0"),
+  summary: external_exports.string().max(MAX_NOTE).optional().describe("\uC790\uAE30\uC18C\uAC1C \uC694\uC57D"),
+  desired_roles: strList.optional().describe("\uD76C\uB9DD \uC9C1\uBB34"),
+  desired_conditions: external_exports.string().max(MAX_NOTE).optional().describe("\uD76C\uB9DD \uADFC\uBB34 \uC870\uAC74 (\uC5F0\uBD09, \uC9C0\uC5ED, \uADFC\uBB34\uD615\uD0DC \uB4F1)"),
+  preferred_tone: external_exports.string().max(MAX_LINE).optional().describe("\uC790\uAE30\uC18C\uAC1C\uC11C \uC120\uD638 \uBB38\uCCB4 (\uC608: \uB2F4\uBC31\uD558\uACE0 \uAD6C\uCCB4\uC801)"),
+  emphasis_points: strList.optional().describe("\uAC15\uC870\uD558\uACE0 \uC2F6\uC740 \uD575\uC2EC \uD3EC\uC778\uD2B8"),
+  links: external_exports.array(LinkSchema).max(MAX_ITEMS).optional().describe("\uD3EC\uD2B8\uD3F4\uB9AC\uC624/\uAE43\uD5C8\uBE0C/\uB9C1\uD06C\uB4DC\uC778 \uB4F1")
 });
 var ProfileRecordSchema = external_exports.object({
   ...baseRecord,
@@ -75600,15 +75613,15 @@ var ProfileRecordSchema = external_exports.object({
   links: external_exports.array(LinkSchema)
 });
 var ExperienceInputSchema = external_exports.object({
-  company: external_exports.string().min(1),
-  role: external_exports.string().optional(),
-  employment_type: external_exports.string().optional().describe("\uC815\uADDC\uC9C1/\uACC4\uC57D\uC9C1/\uC778\uD134/\uD504\uB9AC\uB79C\uC11C \uB4F1"),
-  start_date: external_exports.string().optional().describe("YYYY-MM \uB610\uB294 YYYY-MM-DD"),
-  end_date: external_exports.string().optional().describe("\uC7AC\uC9C1 \uC911\uC774\uBA74 \uBE44\uC6CC\uB450\uAE30"),
+  company: reqLine,
+  role: optLine,
+  employment_type: external_exports.string().max(MAX_LINE).optional().describe("\uC815\uADDC\uC9C1/\uACC4\uC57D\uC9C1/\uC778\uD134/\uD504\uB9AC\uB79C\uC11C \uB4F1"),
+  start_date: external_exports.string().max(MAX_LINE).optional().describe("YYYY-MM \uB610\uB294 YYYY-MM-DD"),
+  end_date: external_exports.string().max(MAX_LINE).optional().describe("\uC7AC\uC9C1 \uC911\uC774\uBA74 \uBE44\uC6CC\uB450\uAE30"),
   is_current: external_exports.boolean().optional(),
-  description: external_exports.string().optional(),
-  achievements: external_exports.array(external_exports.string()).optional().describe("\uC131\uACFC/\uC5C5\uC801 (\uC815\uB7C9 \uC9C0\uD45C \uAD8C\uC7A5)"),
-  tech: external_exports.array(external_exports.string()).optional().describe("\uC0AC\uC6A9 \uAE30\uC220/\uB3C4\uAD6C"),
+  description: optBody,
+  achievements: strList.optional().describe("\uC131\uACFC/\uC5C5\uC801 (\uC815\uB7C9 \uC9C0\uD45C \uAD8C\uC7A5)"),
+  tech: strList.optional().describe("\uC0AC\uC6A9 \uAE30\uC220/\uB3C4\uAD6C"),
   order_index: external_exports.number().optional()
 });
 var ExperienceRecordSchema = external_exports.object({
@@ -75625,14 +75638,14 @@ var ExperienceRecordSchema = external_exports.object({
   order_index: external_exports.number()
 });
 var ProjectInputSchema = external_exports.object({
-  name: external_exports.string().min(1),
-  role: external_exports.string().optional(),
-  description: external_exports.string().optional(),
-  highlights: external_exports.array(external_exports.string()).optional(),
-  tech: external_exports.array(external_exports.string()).optional(),
+  name: reqLine,
+  role: optLine,
+  description: optBody,
+  highlights: strList.optional(),
+  tech: strList.optional(),
   url: SafeUrlOptional,
-  start_date: external_exports.string().optional(),
-  end_date: external_exports.string().optional(),
+  start_date: optLine,
+  end_date: optLine,
   order_index: external_exports.number().optional()
 });
 var ProjectRecordSchema = external_exports.object({
@@ -75648,9 +75661,9 @@ var ProjectRecordSchema = external_exports.object({
   order_index: external_exports.number()
 });
 var SkillInputSchema = external_exports.object({
-  name: external_exports.string().min(1),
-  category: external_exports.string().optional().describe("\uC5B8\uC5B4/\uD504\uB808\uC784\uC6CC\uD06C/\uD234/\uC18C\uD504\uD2B8\uC2A4\uD0AC \uB4F1"),
-  level: external_exports.string().optional().describe("\uC0C1/\uC911/\uD558 \uB610\uB294 \uC790\uC720 \uC11C\uC220"),
+  name: reqLine,
+  category: external_exports.string().max(MAX_LINE).optional().describe("\uC5B8\uC5B4/\uD504\uB808\uC784\uC6CC\uD06C/\uD234/\uC18C\uD504\uD2B8\uC2A4\uD0AC \uB4F1"),
+  level: external_exports.string().max(MAX_LINE).optional().describe("\uC0C1/\uC911/\uD558 \uB610\uB294 \uC790\uC720 \uC11C\uC220"),
   years: external_exports.number().optional(),
   order_index: external_exports.number().optional()
 });
@@ -75664,11 +75677,11 @@ var SkillRecordSchema = external_exports.object({
 });
 var DocumentInputSchema = external_exports.object({
   kind: external_exports.enum(DOCUMENT_KINDS),
-  title: external_exports.string().min(1),
-  content: external_exports.string().describe("Markdown \uB610\uB294 \uC77C\uBC18 \uD14D\uC2A4\uD2B8 \uBCF8\uBB38"),
+  title: reqLine,
+  content: reqBody.describe("Markdown \uB610\uB294 \uC77C\uBC18 \uD14D\uC2A4\uD2B8 \uBCF8\uBB38"),
   source: external_exports.enum(CONTENT_SOURCES).optional(),
   is_primary: external_exports.boolean().optional().describe("\uB300\uD45C \uBB38\uC11C \uC5EC\uBD80"),
-  tags: external_exports.array(external_exports.string()).optional()
+  tags: strList.optional()
 });
 var DocumentRecordSchema = external_exports.object({
   ...baseRecord,
@@ -75680,19 +75693,19 @@ var DocumentRecordSchema = external_exports.object({
   tags: external_exports.array(external_exports.string())
 });
 var CoverLetterInputSchema = external_exports.object({
-  title: external_exports.string().min(1),
-  job_id: external_exports.string().optional().describe("\uD2B9\uC815 \uACF5\uACE0\uC5D0 \uC5F0\uACB0\uD560 \uACBD\uC6B0"),
+  title: reqLine,
+  job_id: optLine.describe("\uD2B9\uC815 \uACF5\uACE0\uC5D0 \uC5F0\uACB0\uD560 \uACBD\uC6B0"),
   is_primary: external_exports.boolean().optional(),
-  content: external_exports.string().optional().describe("\uCD08\uAE30 \uBC84\uC804 \uBCF8\uBB38 (\uC788\uC73C\uBA74 v1\uB85C \uC800\uC7A5)"),
+  content: optBody.describe("\uCD08\uAE30 \uBC84\uC804 \uBCF8\uBB38 (\uC788\uC73C\uBA74 v1\uB85C \uC800\uC7A5)"),
   source: external_exports.enum(CONTENT_SOURCES).optional(),
-  note: external_exports.string().optional().describe("\uCD08\uAE30 \uBC84\uC804 \uBA54\uBAA8")
+  note: optNote.describe("\uCD08\uAE30 \uBC84\uC804 \uBA54\uBAA8")
 });
 var CoverLetterVersionInputSchema = external_exports.object({
-  cover_letter_id: external_exports.string().optional().describe("\uAE30\uC874 \uC790\uAE30\uC18C\uAC1C\uC11C\uC5D0 \uC0C8 \uBC84\uC804 \uCD94\uAC00 \uC2DC"),
-  title: external_exports.string().optional().describe("\uC0C8 \uC790\uAE30\uC18C\uAC1C\uC11C\uB97C \uB9CC\uB4E4 \uB54C \uC81C\uBAA9"),
-  job_id: external_exports.string().optional(),
-  content: external_exports.string().min(1),
-  note: external_exports.string().optional().describe("\uC774 \uBC84\uC804\uC758 \uBCC0\uACBD \uC694\uC57D (\uC608: \uC9C0\uC6D0\uB3D9\uAE30 \uBCF4\uAC15)"),
+  cover_letter_id: optLine.describe("\uAE30\uC874 \uC790\uAE30\uC18C\uAC1C\uC11C\uC5D0 \uC0C8 \uBC84\uC804 \uCD94\uAC00 \uC2DC"),
+  title: external_exports.string().max(MAX_LINE).optional().describe("\uC0C8 \uC790\uAE30\uC18C\uAC1C\uC11C\uB97C \uB9CC\uB4E4 \uB54C \uC81C\uBAA9"),
+  job_id: optLine,
+  content: reqBody,
+  note: optNote.describe("\uC774 \uBC84\uC804\uC758 \uBCC0\uACBD \uC694\uC57D (\uC608: \uC9C0\uC6D0\uB3D9\uAE30 \uBCF4\uAC15)"),
   source: external_exports.enum(CONTENT_SOURCES).optional(),
   set_current: external_exports.boolean().optional().describe("\uC774 \uBC84\uC804\uC744 \uD604\uC7AC \uBC84\uC804\uC73C\uB85C \uC9C0\uC815 (\uAE30\uBCF8 true)")
 });
@@ -75716,16 +75729,16 @@ var CoverLetterRecordSchema = external_exports.object({
   versions: external_exports.array(CoverLetterVersionRecordSchema).optional()
 });
 var JobInputSchema = external_exports.object({
-  company: external_exports.string().min(1),
-  position: external_exports.string().min(1).describe("\uC9C1\uBB34/\uD3EC\uC9C0\uC158\uBA85"),
+  company: reqLine,
+  position: reqLine.describe("\uC9C1\uBB34/\uD3EC\uC9C0\uC158\uBA85"),
   url: SafeUrlOptional,
-  location: external_exports.string().optional(),
-  employment_type: external_exports.string().optional(),
-  description: external_exports.string().optional().describe("\uACF5\uACE0 \uC6D0\uBB38 \uB610\uB294 \uC815\uB9AC\uB41C \uD14D\uC2A4\uD2B8"),
-  requirements: external_exports.array(external_exports.string()).optional().describe("\uC790\uACA9\uC694\uAC74/\uC6B0\uB300\uC0AC\uD56D \uD575\uC2EC"),
-  keywords: external_exports.array(external_exports.string()).optional().describe("\uD575\uC2EC \uD0A4\uC6CC\uB4DC"),
-  deadline: external_exports.string().optional().describe("\uB9C8\uAC10\uC77C YYYY-MM-DD"),
-  source: external_exports.string().optional().describe("\uCD9C\uCC98 (\uC0AC\uB78C\uC778/\uC6D0\uD2F0\uB4DC/\uC9C1\uC811 \uC785\uB825 \uB4F1)")
+  location: optLine,
+  employment_type: optLine,
+  description: optBody.describe("\uACF5\uACE0 \uC6D0\uBB38 \uB610\uB294 \uC815\uB9AC\uB41C \uD14D\uC2A4\uD2B8"),
+  requirements: strList.optional().describe("\uC790\uACA9\uC694\uAC74/\uC6B0\uB300\uC0AC\uD56D \uD575\uC2EC"),
+  keywords: strList.optional().describe("\uD575\uC2EC \uD0A4\uC6CC\uB4DC"),
+  deadline: external_exports.string().max(MAX_LINE).optional().describe("\uB9C8\uAC10\uC77C YYYY-MM-DD"),
+  source: external_exports.string().max(MAX_LINE).optional().describe("\uCD9C\uCC98 (\uC0AC\uB78C\uC778/\uC6D0\uD2F0\uB4DC/\uC9C1\uC811 \uC785\uB825 \uB4F1)")
 });
 var JobRecordSchema = external_exports.object({
   ...baseRecord,
@@ -75741,14 +75754,14 @@ var JobRecordSchema = external_exports.object({
   source: external_exports.string().nullable()
 });
 var FitAnalysisInputSchema = external_exports.object({
-  job_id: external_exports.string().describe("\uBD84\uC11D \uB300\uC0C1 \uACF5\uACE0 ID"),
+  job_id: reqLine.describe("\uBD84\uC11D \uB300\uC0C1 \uACF5\uACE0 ID"),
   score: external_exports.number().min(0).max(100).optional().describe("\uC885\uD569 \uC801\uD569\uB3C4 0~100"),
-  summary: external_exports.string().optional().describe("\uD55C\uB450 \uBB38\uB2E8 \uC694\uC57D"),
-  strengths: external_exports.array(external_exports.string()).optional().describe("\uAC15\uC810 / \uC798 \uB9DE\uB294 \uBD80\uBD84"),
-  gaps: external_exports.array(external_exports.string()).optional().describe("\uBD80\uC871\uD55C \uBD80\uBD84 / \uBCF4\uC644 \uD544\uC694"),
-  matched_keywords: external_exports.array(external_exports.string()).optional(),
-  missing_keywords: external_exports.array(external_exports.string()).optional(),
-  recommendations: external_exports.array(external_exports.string()).optional().describe("\uC790\uAE30\uC18C\uAC1C\uC11C/\uC9C0\uC6D0 \uC804\uB7B5 \uC81C\uC548")
+  summary: external_exports.string().max(MAX_NOTE).optional().describe("\uD55C\uB450 \uBB38\uB2E8 \uC694\uC57D"),
+  strengths: strList.optional().describe("\uAC15\uC810 / \uC798 \uB9DE\uB294 \uBD80\uBD84"),
+  gaps: strList.optional().describe("\uBD80\uC871\uD55C \uBD80\uBD84 / \uBCF4\uC644 \uD544\uC694"),
+  matched_keywords: strList.optional(),
+  missing_keywords: strList.optional(),
+  recommendations: strList.optional().describe("\uC790\uAE30\uC18C\uAC1C\uC11C/\uC9C0\uC6D0 \uC804\uB7B5 \uC81C\uC548")
 });
 var FitAnalysisRecordSchema = external_exports.object({
   ...baseRecord,
@@ -75762,18 +75775,18 @@ var FitAnalysisRecordSchema = external_exports.object({
   recommendations: external_exports.array(external_exports.string())
 });
 var ApplicationInputSchema = external_exports.object({
-  job_id: external_exports.string(),
+  job_id: reqLine,
   status: external_exports.enum(APPLICATION_STATUSES).optional(),
-  resume_id: external_exports.string().optional(),
-  cover_letter_id: external_exports.string().optional(),
-  applied_at: external_exports.string().optional(),
-  notes: external_exports.string().optional()
+  resume_id: optLine,
+  cover_letter_id: optLine,
+  applied_at: optLine,
+  notes: optNote
 });
 var ApplicationStatusUpdateSchema = external_exports.object({
-  job_id: external_exports.string().optional(),
-  application_id: external_exports.string().optional(),
+  job_id: optLine,
+  application_id: optLine,
   status: external_exports.enum(APPLICATION_STATUSES),
-  note: external_exports.string().optional().describe("\uC0C1\uD0DC \uBCC0\uACBD \uC0AC\uC720/\uBA54\uBAA8")
+  note: optNote.describe("\uC0C1\uD0DC \uBCC0\uACBD \uC0AC\uC720/\uBA54\uBAA8")
 });
 var ApplicationRecordSchema = external_exports.object({
   ...baseRecord,
@@ -75785,24 +75798,24 @@ var ApplicationRecordSchema = external_exports.object({
   notes: external_exports.string().nullable()
 });
 var StarGuideSchema = external_exports.object({
-  question: external_exports.string(),
-  situation: external_exports.string().optional(),
-  task: external_exports.string().optional(),
-  action: external_exports.string().optional(),
-  result: external_exports.string().optional()
+  question: external_exports.string().max(MAX_NOTE),
+  situation: optNote,
+  task: optNote,
+  action: optNote,
+  result: optNote
 });
 var InterviewQuestionSchema = external_exports.object({
-  question: external_exports.string(),
-  intent: external_exports.string().optional().describe("\uC9C8\uBB38 \uC758\uB3C4"),
-  followups: external_exports.array(external_exports.string()).optional().describe("\uC608\uC0C1 \uAF2C\uB9AC \uC9C8\uBB38"),
-  answer_outline: external_exports.string().optional().describe("\uB2F5\uBCC0 \uAC00\uC774\uB4DC/\uD575\uC2EC \uD3EC\uC778\uD2B8")
+  question: external_exports.string().max(MAX_NOTE),
+  intent: external_exports.string().max(MAX_NOTE).optional().describe("\uC9C8\uBB38 \uC758\uB3C4"),
+  followups: strList.optional().describe("\uC608\uC0C1 \uAF2C\uB9AC \uC9C8\uBB38"),
+  answer_outline: optBody.describe("\uB2F5\uBCC0 \uAC00\uC774\uB4DC/\uD575\uC2EC \uD3EC\uC778\uD2B8")
 });
 var InterviewPrepInputSchema = external_exports.object({
-  job_id: external_exports.string(),
-  questions: external_exports.array(InterviewQuestionSchema).optional(),
-  star_guides: external_exports.array(StarGuideSchema).optional(),
-  self_introduction: external_exports.string().optional().describe("1\uBD84 \uC790\uAE30\uC18C\uAC1C \uCD08\uC548"),
-  notes: external_exports.string().optional().describe("\uBA74\uC811 \uD6C4\uAE30/\uBA54\uBAA8")
+  job_id: reqLine,
+  questions: external_exports.array(InterviewQuestionSchema).max(MAX_ITEMS).optional(),
+  star_guides: external_exports.array(StarGuideSchema).max(MAX_ITEMS).optional(),
+  self_introduction: optBody.describe("1\uBD84 \uC790\uAE30\uC18C\uAC1C \uCD08\uC548"),
+  notes: optNote.describe("\uBA74\uC811 \uD6C4\uAE30/\uBA54\uBAA8")
 });
 var InterviewPrepRecordSchema = external_exports.object({
   ...baseRecord,
@@ -75856,7 +75869,7 @@ var ApplicationContextSchema = external_exports.object({
 });
 
 // packages/shared/src/build-info.ts
-var APP_VERSION = true ? "0.1.2" : "0.0.0-dev";
+var APP_VERSION = true ? "0.1.3" : "0.0.0-dev";
 var BUNDLED = true;
 
 // packages/shared/src/index.ts
@@ -77931,9 +77944,19 @@ async function finishPdf(buf, base) {
       });
     return base("pdf", { text, bytes: buf.length, warnings: pageWarnings });
   } catch (e) {
+    const name = e && typeof e === "object" && "name" in e ? String(e.name) : "";
+    if (name === "PasswordException") {
+      return base("unsupported", {
+        bytes: buf.length,
+        warnings: [
+          "\uC774 PDF\uB294 \uC554\uD638(\uBE44\uBC00\uBC88\uD638)\uB85C \uBCF4\uD638\uB418\uC5B4 \uC788\uC5B4 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. PDF \uBDF0\uC5B4\uC5D0\uC11C \uC554\uD638\uB97C \uD574\uC81C\uD574 \uB2E4\uC2DC \uC800\uC7A5\uD558\uAC70\uB098, \uB0B4\uC6A9\uC744 \uD14D\uC2A4\uD2B8\uB85C \uBD99\uC5EC\uB123\uC5B4 \uC8FC\uC138\uC694."
+        ],
+        unsupported: true
+      });
+    }
     return base("unsupported", {
       bytes: buf.length,
-      warnings: [`PDF\uB97C \uC77D\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4(${errMsg(e)}). \uC554\uD638\uD654\uB418\uC5C8\uAC70\uB098 \uC190\uC0C1\uB41C PDF\uC77C \uC218 \uC788\uC2B5\uB2C8\uB2E4. \uD14D\uC2A4\uD2B8\uB85C \uBD99\uC5EC\uB123\uC5B4 \uC8FC\uC138\uC694.`],
+      warnings: [`PDF\uB97C \uC77D\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4(${errMsg(e)}). \uC190\uC0C1\uB418\uC5C8\uAC70\uB098 \uC9C0\uC6D0\uD558\uC9C0 \uC54A\uB294 PDF\uC77C \uC218 \uC788\uC2B5\uB2C8\uB2E4. \uD14D\uC2A4\uD2B8\uB85C \uBD99\uC5EC\uB123\uC5B4 \uC8FC\uC138\uC694.`],
       unsupported: true
     });
   }
@@ -78487,13 +78510,12 @@ ${lines}`;
     name: "add_resume",
     title: "\uC774\uB825\uC11C/\uACBD\uB825\uAE30\uC220\uC11C \uCD94\uAC00",
     description: "\uC774\uB825\uC11C, \uACBD\uB825\uAE30\uC220\uC11C, \uD3EC\uD2B8\uD3F4\uB9AC\uC624 \uB4F1 \uBB38\uC11C\uB97C \uC800\uC7A5\uD569\uB2C8\uB2E4. content\uC5D0\uB294 \uC0AC\uC6A9\uC790\uAC00 \uC5C5\uB85C\uB4DC/\uBD99\uC5EC\uB123\uC740 \uD14D\uC2A4\uD2B8(\uB610\uB294 \uC815\uB9AC\uD55C Markdown)\uB97C \uB123\uC73C\uC138\uC694. kind \uAE30\uBCF8\uAC12\uC740 resume\uC785\uB2C8\uB2E4. is_primary=true\uB85C \uB300\uD45C \uBB38\uC11C\uB97C \uC9C0\uC815\uD558\uBA74 get_application_context\uC758 primary_resume\uB85C \uB178\uCD9C\uB429\uB2C8\uB2E4.",
+    // Reuse the shared (length-bounded, whitespace-rejecting) Document schema so
+    // the MCP ingestion path — the primary route for résumé text — inherits the
+    // same caps as the web API. kind stays optional here (defaults to resume).
     inputSchema: {
-      title: external_exports.string().describe("\uBB38\uC11C \uC81C\uBAA9"),
-      content: external_exports.string().describe("\uBCF8\uBB38 (Markdown/\uC77C\uBC18 \uD14D\uC2A4\uD2B8)"),
-      kind: external_exports.enum(DOCUMENT_KINDS).optional().describe("resume(\uC774\uB825\uC11C)/career_description(\uACBD\uB825\uAE30\uC220\uC11C)/portfolio/other"),
-      source: external_exports.enum(CONTENT_SOURCES).optional(),
-      is_primary: external_exports.boolean().optional().describe("\uB300\uD45C \uBB38\uC11C \uC5EC\uBD80"),
-      tags: external_exports.array(external_exports.string()).optional()
+      ...DocumentInputSchema.omit({ kind: true }).shape,
+      kind: external_exports.enum(DOCUMENT_KINDS).optional().describe("resume(\uC774\uB825\uC11C)/career_description(\uACBD\uB825\uAE30\uC220\uC11C)/portfolio/other")
     },
     handler: (args) => {
       const doc = addResume(args);

package/dist/install-page/analytics.js

@@ -0,0 +1,97 @@
+// =============================================================================
+// CareerMate marketing-site analytics — careermate.life ONLY.
+//
+// SCOPE: this file loads on the PUBLIC marketing/demo site (install-page/) that
+// Vercel serves. It must NEVER be loaded by the local dashboard (apps/web, bound
+// to 127.0.0.1) — that would break the core promise in AGENTS.md:
+//   "절대 사용자 데이터를 외부로 업로드하지 마라."
+// There is no user career data on this site; only anonymous page/traffic signals.
+//
+// What runs here:
+//   1) Vercel Web Analytics   — cookieless, no PII, no consent banner required.
+//   2) Vercel Speed Insights  — Core Web Vitals, also cookieless.
+//   3) Google Analytics 4     — OPTIONAL. Off until GA_MEASUREMENT_ID is filled in.
+//      Runs under Google Consent Mode v2 with analytics_storage DENIED by default,
+//      i.e. cookieless pings, so it needs no consent banner and stays consistent
+//      with the local-first / privacy-first brand. (Flip consent to 'granted'
+//      later only if you add a real consent UI.)
+//
+// The marketing pages (index.html, start.html) are classic multi-page navigations,
+// so a single pageview on load is enough. The demo (/demo/) is a hash-router SPA,
+// so we emit a virtual pageview on every hashchange — otherwise every sub-route
+// (#/jobs, #/applications, …) would collapse into one "/demo" view.
+// =============================================================================
+(function () {
+  'use strict';
+
+  // ── 1. Vercel Web Analytics (cookieless) ───────────────────────────────────
+  // Queue shim per Vercel's HTML snippet; the injected script drains window.vaq.
+  window.va = window.va || function () { (window.vaq = window.vaq || []).push(arguments); };
+  loadScript('/_vercel/insights/script.js');
+
+  // ── 2. Vercel Speed Insights (cookieless) — OFF by default ──────────────────
+  // Vercel's Hobby plan allows Speed Insights on only ONE project at a time, and it's
+  // more valuable on the real app than on this rarely-changing static site (use the free
+  // PageSpeed Insights for ad-hoc checks here). Flip to true to load it (needs Enable in
+  // the Vercel dashboard too); leaving it false avoids a dead 404 script request.
+  var ENABLE_SPEED_INSIGHTS = false;
+  if (ENABLE_SPEED_INSIGHTS) {
+    window.si = window.si || function () { (window.siq = window.siq || []).push(arguments); };
+    loadScript('/_vercel/speed-insights/script.js');
+  }
+
+  // ── 3. Google Analytics 4 (optional, cookieless via Consent Mode v2) ────────
+  // Paste your GA4 measurement ID (looks like "G-XXXXXXXXXX") here to turn it on.
+  // Leaving it blank keeps GA off entirely — Vercel analytics above still runs.
+  var GA_MEASUREMENT_ID = 'G-HK9KWTYCBD';
+  if (/^G-[A-Z0-9]+$/.test(GA_MEASUREMENT_ID)) initGoogleAnalytics(GA_MEASUREMENT_ID);
+
+  // ── Demo SPA: report hash route changes to Vercel as a custom event ─────────
+  // Vercel's script auto-tracks History API navigations but not hashchange.
+  if (location.pathname.indexOf('/demo') === 0) {
+    window.addEventListener('hashchange', function () {
+      window.va('event', { name: 'demo_route', data: { route: currentRoute() } });
+    });
+  }
+
+  // ── helpers ─────────────────────────────────────────────────────────────────
+  function loadScript(src) {
+    var s = document.createElement('script');
+    s.src = src;
+    s.defer = true;
+    document.head.appendChild(s);
+  }
+
+  function currentRoute() {
+    return (location.hash || '').replace(/^#\/?/, '').split('/')[0] || 'home';
+  }
+
+  function initGoogleAnalytics(id) {
+    window.dataLayer = window.dataLayer || [];
+    function gtag() { window.dataLayer.push(arguments); }
+    window.gtag = gtag;
+    // Deny storage by default → GA runs cookieless. No banner required.
+    gtag('consent', 'default', {
+      ad_storage: 'denied',
+      ad_user_data: 'denied',
+      ad_personalization: 'denied',
+      analytics_storage: 'denied',
+    });
+    gtag('js', new Date());
+    // send_page_view:false so we control pageviews (incl. the demo's hash routes).
+    gtag('config', id, { send_page_view: false, anonymize_ip: true });
+    loadScript('https://www.googletagmanager.com/gtag/js?id=' + id);
+
+    sendGaPageview();
+    window.addEventListener('hashchange', sendGaPageview);
+  }
+
+  function sendGaPageview() {
+    if (!window.gtag) return;
+    window.gtag('event', 'page_view', {
+      page_path: location.pathname + location.search + location.hash,
+      page_location: location.href,
+      page_title: document.title,
+    });
+  }
+})();