careermate 0.1.2 → 0.1.3

package/dist/public/pages/documents.js

@@ -23,6 +23,7 @@ export async function render(ctx) {
   root.append(el('div', { class: 'tabs' }, tabCover, tabDocs), panel);
 
   let query = '';
+  let searchInput = null;
   function selectTab(next) {
     tab = next;
     query = '';
@@ -43,9 +44,12 @@ export async function render(ctx) {
       if (!hide) shown += 1;
     }
     const existing = panel.querySelector('.search-empty');
+    if (existing) existing.remove();
     if (q && cards.length && shown === 0) {
-      if (!existing) panel.append(el('p', { class: 'search-empty muted', style: { textAlign: 'center', margin: '8px 0' } }, '검색 결과가 없어요.'));
-    } else if (existing) existing.remove();
+      panel.append(el('div', { class: 'search-empty empty' },
+        el('p', { class: 'muted', style: { margin: '0 0 12px' } }, `‘${query.trim()}’에 맞는 항목이 없어요.`),
+        Btn('필터 초기화', { sm: true, variant: 'ghost', onClick: () => { query = ''; if (searchInput) searchInput.value = ''; applyFilter(); } })));
+    }
   }
 
   async function reload() {
@@ -70,6 +74,7 @@ export async function render(ctx) {
   function setActions() {
     const search = Input({ type: 'search', placeholder: tab === 'cover' ? '자기소개서 검색' : '문서 검색', value: query, attrs: { 'aria-label': '검색' } });
     search.classList.add('input--inline');
+    searchInput = search;
     search.addEventListener('input', () => { query = search.value; applyFilter(); });
     const createBtn = tab === 'cover'
       ? Btn('새 자기소개서', { icon: 'plus', variant: 'primary', onClick: () => openCoverCreate(reload) })

package/dist/public/pages/home.js

@@ -4,7 +4,7 @@
 // the 시작하기 card. Every empty state is ONE screen-specific sentence; never repeat
 // the same "AI에게 보내면 저장됩니다" instruction across surfaces.
 import {
-  el, get, icon, navigate, Card, Badge, Btn, EmptyState, ListRow, CheckRow,
+  el, get, icon, navigate, Card, Badge, Btn, ListRow, CheckRow,
   Stat, PageHead, fmtDate, fmtRelative, scoreClass, STATUS_COLOR, statusColor, mount,
 } from '/lib.js';
 
@@ -59,7 +59,7 @@ function Greeting(name, s, firstRun) {
   let focus;
   if (firstRun) focus = '시작해 볼까요 — 먼저 기본 정보를 채워 주세요.';
   else if (s.interview_todo.length) focus = `면접 준비가 필요한 지원 ${s.interview_todo.length}건이 있어요.`;
-  else if (s.in_progress.length) focus = `진행 중인 지원 ${s.in_progress.length}건을 확인하세요.`;
+  else if (s.in_progress.length) focus = `진행 중인 지원 ${s.in_progress.length}건이 있어요.`;
   else if (s.counts.jobs) focus = `저장된 공고 ${s.counts.jobs}건 · 새 적합도 분석을 받아보세요.`;
   else focus = '오늘도 한 걸음 나아가 볼까요.';
   return PageHead({ title: name ? `${name}님, 안녕하세요` : '환영합니다', desc: focus });
@@ -87,7 +87,7 @@ function GettingStarted(o) {
           el('div', { class: 'callout__body' },
             '공고 분석·자기소개서·면접 준비는 평소 쓰던 AI에게 말로 시키면, 결과가 이 대시보드에 쌓여요.'))),
       el('div', { class: 'progress' }, el('div', { class: 'progress__bar', style: { width: `${o.profile_completeness}%` } })),
-      el('p', { class: 'text-secondary text-sm', style: { margin: '12px 0 8px' } },
+      el('p', { class: 'text-secondary text-sm mt-3 mb-2' },
         '완성할수록 AI의 적합도 분석과 자기소개서 품질이 좋아져요.'),
       el('div', {}, ...steps.map((it) => CheckRow({ done: it.done, label: it.label, onClick: () => navigate(it.to) }))),
     ],
@@ -201,10 +201,7 @@ function RecentJobs(jobs) {
   if (!jobs.length) {
     return Card({
       title: '최근 공고',
-      body: EmptyState({
-        iconName: 'briefcase', title: '저장된 공고가 아직 없어요',
-        action: Btn('공고 추가', { icon: 'plus', variant: 'ghost', onClick: () => navigate('/jobs') }),
-      }),
+      body: el('p', { class: 'muted', style: { margin: 0 } }, '저장된 공고가 아직 없어요. 새 공고를 추가해 보세요.'),
     });
   }
   const rows = jobs.map((j) => ListRow({

package/dist/public/pages/jobs.js

@@ -365,11 +365,7 @@ function FitCard(fit) {
   if (!fit) {
     return Card({
       title: '적합도 분석',
-      body: EmptyState({
-        iconName: 'target',
-        title: '적합도 분석 전이에요',
-        body: '이 공고와 내 프로필을 비교한 분석 결과가 여기에 표시됩니다.',
-      }),
+      body: el('p', { class: 'muted', style: { margin: 0 } }, '아직 분석 전이에요. 이 공고와 내 프로필을 비교한 결과가 여기에 표시됩니다.'),
     });
   }
 

package/dist/public/pages/profile.js

@@ -264,7 +264,7 @@ function editWriting(p, reload) {
 /* ---------------------------------------------------- 4. 경력 (Experiences) */
 
 function ExperiencesCard(items, reload) {
-  const add = Btn('추가', { icon: 'plus', sm: true, variant: 'ghost', onClick: () => editExperience(null, reload) });
+  const add = Btn('경력 추가', { icon: 'plus', sm: true, variant: 'ghost', onClick: () => editExperience(null, reload) });
 
   if (!items.length) {
     return Card({
@@ -368,7 +368,7 @@ function editExperience(x, reload) {
 /* ----------------------------------------------------- 5. 프로젝트 (Projects) */
 
 function ProjectsCard(items, reload) {
-  const add = Btn('추가', { icon: 'plus', sm: true, variant: 'ghost', onClick: () => editProject(null, reload) });
+  const add = Btn('프로젝트 추가', { icon: 'plus', sm: true, variant: 'ghost', onClick: () => editProject(null, reload) });
 
   if (!items.length) {
     return Card({
@@ -469,7 +469,7 @@ function editProject(x, reload) {
 /* -------------------------------------------------------- 6. 기술 (Skills) */
 
 function SkillsCard(items, reload) {
-  const add = Btn('추가', { icon: 'plus', sm: true, variant: 'ghost', onClick: () => editSkill(null, reload) });
+  const add = Btn('기술 추가', { icon: 'plus', sm: true, variant: 'ghost', onClick: () => editSkill(null, reload) });
 
   if (!items.length) {
     return Card({

package/dist/public/styles.css

@@ -403,7 +403,9 @@ h1,h2,h3,h4 { margin: 0; font-weight: 650; letter-spacing: -0.01em; }
   background: var(--surface); border: 1px solid var(--border); border-radius: var(--radius); padding: 22px 26px; max-height: 60vh; overflow-y: auto; }
 .kv { display: grid; grid-template-columns: 132px 1fr; gap: 8px 16px; }
 .kv dt { color: var(--text-tertiary); font-size: 13px; }
-.kv dd { margin: 0; }
+/* min-width:0 overrides a grid item's default min-width:auto so the 1fr column
+   can shrink below its content — otherwise a long path/value overflows the grid. */
+.kv dd { margin: 0; min-width: 0; }
 
 /* ----------------------------------------------------------------- modal */
 .modal-root { position: fixed; inset: 0; z-index: 60; display: none; }
@@ -450,7 +452,10 @@ h1,h2,h3,h4 { margin: 0; font-weight: 650; letter-spacing: -0.01em; }
 .between { justify-content: space-between; } .center { align-items: center; } .wrap { flex-wrap: wrap; }
 .ml-auto { margin-left: auto; } .mt-2{margin-top:8px;} .mt-3{margin-top:12px;} .mt-4{margin-top:16px;} .mb-2{margin-bottom:8px;} .mb-3{margin-bottom:12px;} .mb-4{margin-bottom:16px;}
 .tnum { font-variant-numeric: tabular-nums; }
-.truncate { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; max-width: 100%; }
+/* min-width:0 lets a truncating element actually shrink inside a flex row;
+   without it a long unbreakable value (e.g. a data-folder path) forces the
+   flex item to its content width and overflows the viewport on narrow screens. */
+.truncate { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; max-width: 100%; min-width: 0; }
 .divider { height: 1px; background: var(--border); margin: 16px 0; }
 .skeleton { background: linear-gradient(90deg, var(--bg-sunken) 25%, var(--surface-hover) 37%, var(--bg-sunken) 63%); background-size: 400% 100%; animation: shimmer 1.4s infinite; border-radius: 6px; }
 @keyframes shimmer { 0% { background-position: 100% 0; } 100% { background-position: 0 0; } }

package/dist/web.mjs

@@ -43892,29 +43892,42 @@ function isSafeUrl(u) {
   return !/^[a-z][a-z0-9+.-]*:/i.test(s) || /^(https?:|mailto:)/i.test(s);
 }
 var UNSAFE_URL_MSG = "javascript: \uAC19\uC740 \uC704\uD5D8\uD55C \uB9C1\uD06C\uB294 \uC0AC\uC6A9\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. http(s) \uB9C1\uD06C\uB97C \uC0AC\uC6A9\uD558\uC138\uC694.";
-var SafeUrl = external_exports.string().min(1).refine(isSafeUrl, { message: UNSAFE_URL_MSG });
-var SafeUrlOptional = external_exports.string().optional().refine((u) => u == null || u === "" || isSafeUrl(u), { message: UNSAFE_URL_MSG });
+var MAX_URL = 2e3;
+var SafeUrl = external_exports.string().min(1).max(MAX_URL).refine(isSafeUrl, { message: UNSAFE_URL_MSG });
+var SafeUrlOptional = external_exports.string().max(MAX_URL).optional().refine((u) => u == null || u === "" || isSafeUrl(u), { message: UNSAFE_URL_MSG });
+var MAX_LINE = 500;
+var MAX_NOTE = 1e4;
+var MAX_BODY = 2e5;
+var MAX_ITEM = 2e3;
+var MAX_ITEMS = 500;
+var EMPTY_MSG = "\uB0B4\uC6A9\uC774 \uBE44\uC5B4 \uC788\uC2B5\uB2C8\uB2E4(\uACF5\uBC31\uB9CC\uC73C\uB85C\uB294 \uC800\uC7A5\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4).";
+var reqLine = external_exports.string().trim().min(1).max(MAX_LINE);
+var optLine = external_exports.string().max(MAX_LINE).optional();
+var optNote = external_exports.string().max(MAX_NOTE).optional();
+var optBody = external_exports.string().max(MAX_BODY).optional();
+var reqBody = external_exports.string().max(MAX_BODY).refine((s) => s.trim().length > 0, { message: EMPTY_MSG });
+var strList = external_exports.array(external_exports.string().max(MAX_ITEM)).max(MAX_ITEMS);
 var baseRecord = {
   id,
   created_at: isoDateTime,
   updated_at: isoDateTime
 };
 var LinkSchema = external_exports.object({
-  label: external_exports.string().min(1),
+  label: reqLine,
   url: SafeUrl
 });
 var ProfileInputSchema = external_exports.object({
-  name: external_exports.string().min(1).optional(),
-  email: external_exports.string().optional(),
-  phone: external_exports.string().optional(),
-  location: external_exports.string().optional(),
-  headline: external_exports.string().optional().describe("\uD55C \uC904 \uC18C\uAC1C / \uC9C1\uBB34 \uD0C0\uC774\uD2C0"),
-  summary: external_exports.string().optional().describe("\uC790\uAE30\uC18C\uAC1C \uC694\uC57D"),
-  desired_roles: external_exports.array(external_exports.string()).optional().describe("\uD76C\uB9DD \uC9C1\uBB34"),
-  desired_conditions: external_exports.string().optional().describe("\uD76C\uB9DD \uADFC\uBB34 \uC870\uAC74 (\uC5F0\uBD09, \uC9C0\uC5ED, \uADFC\uBB34\uD615\uD0DC \uB4F1)"),
-  preferred_tone: external_exports.string().optional().describe("\uC790\uAE30\uC18C\uAC1C\uC11C \uC120\uD638 \uBB38\uCCB4 (\uC608: \uB2F4\uBC31\uD558\uACE0 \uAD6C\uCCB4\uC801)"),
-  emphasis_points: external_exports.array(external_exports.string()).optional().describe("\uAC15\uC870\uD558\uACE0 \uC2F6\uC740 \uD575\uC2EC \uD3EC\uC778\uD2B8"),
-  links: external_exports.array(LinkSchema).optional().describe("\uD3EC\uD2B8\uD3F4\uB9AC\uC624/\uAE43\uD5C8\uBE0C/\uB9C1\uD06C\uB4DC\uC778 \uB4F1")
+  name: reqLine.optional(),
+  email: optLine,
+  phone: optLine,
+  location: optLine,
+  headline: external_exports.string().max(MAX_LINE).optional().describe("\uD55C \uC904 \uC18C\uAC1C / \uC9C1\uBB34 \uD0C0\uC774\uD2C0"),
+  summary: external_exports.string().max(MAX_NOTE).optional().describe("\uC790\uAE30\uC18C\uAC1C \uC694\uC57D"),
+  desired_roles: strList.optional().describe("\uD76C\uB9DD \uC9C1\uBB34"),
+  desired_conditions: external_exports.string().max(MAX_NOTE).optional().describe("\uD76C\uB9DD \uADFC\uBB34 \uC870\uAC74 (\uC5F0\uBD09, \uC9C0\uC5ED, \uADFC\uBB34\uD615\uD0DC \uB4F1)"),
+  preferred_tone: external_exports.string().max(MAX_LINE).optional().describe("\uC790\uAE30\uC18C\uAC1C\uC11C \uC120\uD638 \uBB38\uCCB4 (\uC608: \uB2F4\uBC31\uD558\uACE0 \uAD6C\uCCB4\uC801)"),
+  emphasis_points: strList.optional().describe("\uAC15\uC870\uD558\uACE0 \uC2F6\uC740 \uD575\uC2EC \uD3EC\uC778\uD2B8"),
+  links: external_exports.array(LinkSchema).max(MAX_ITEMS).optional().describe("\uD3EC\uD2B8\uD3F4\uB9AC\uC624/\uAE43\uD5C8\uBE0C/\uB9C1\uD06C\uB4DC\uC778 \uB4F1")
 });
 var ProfileRecordSchema = external_exports.object({
   ...baseRecord,
@@ -43931,15 +43944,15 @@ var ProfileRecordSchema = external_exports.object({
   links: external_exports.array(LinkSchema)
 });
 var ExperienceInputSchema = external_exports.object({
-  company: external_exports.string().min(1),
-  role: external_exports.string().optional(),
-  employment_type: external_exports.string().optional().describe("\uC815\uADDC\uC9C1/\uACC4\uC57D\uC9C1/\uC778\uD134/\uD504\uB9AC\uB79C\uC11C \uB4F1"),
-  start_date: external_exports.string().optional().describe("YYYY-MM \uB610\uB294 YYYY-MM-DD"),
-  end_date: external_exports.string().optional().describe("\uC7AC\uC9C1 \uC911\uC774\uBA74 \uBE44\uC6CC\uB450\uAE30"),
+  company: reqLine,
+  role: optLine,
+  employment_type: external_exports.string().max(MAX_LINE).optional().describe("\uC815\uADDC\uC9C1/\uACC4\uC57D\uC9C1/\uC778\uD134/\uD504\uB9AC\uB79C\uC11C \uB4F1"),
+  start_date: external_exports.string().max(MAX_LINE).optional().describe("YYYY-MM \uB610\uB294 YYYY-MM-DD"),
+  end_date: external_exports.string().max(MAX_LINE).optional().describe("\uC7AC\uC9C1 \uC911\uC774\uBA74 \uBE44\uC6CC\uB450\uAE30"),
   is_current: external_exports.boolean().optional(),
-  description: external_exports.string().optional(),
-  achievements: external_exports.array(external_exports.string()).optional().describe("\uC131\uACFC/\uC5C5\uC801 (\uC815\uB7C9 \uC9C0\uD45C \uAD8C\uC7A5)"),
-  tech: external_exports.array(external_exports.string()).optional().describe("\uC0AC\uC6A9 \uAE30\uC220/\uB3C4\uAD6C"),
+  description: optBody,
+  achievements: strList.optional().describe("\uC131\uACFC/\uC5C5\uC801 (\uC815\uB7C9 \uC9C0\uD45C \uAD8C\uC7A5)"),
+  tech: strList.optional().describe("\uC0AC\uC6A9 \uAE30\uC220/\uB3C4\uAD6C"),
   order_index: external_exports.number().optional()
 });
 var ExperienceRecordSchema = external_exports.object({
@@ -43956,14 +43969,14 @@ var ExperienceRecordSchema = external_exports.object({
   order_index: external_exports.number()
 });
 var ProjectInputSchema = external_exports.object({
-  name: external_exports.string().min(1),
-  role: external_exports.string().optional(),
-  description: external_exports.string().optional(),
-  highlights: external_exports.array(external_exports.string()).optional(),
-  tech: external_exports.array(external_exports.string()).optional(),
+  name: reqLine,
+  role: optLine,
+  description: optBody,
+  highlights: strList.optional(),
+  tech: strList.optional(),
   url: SafeUrlOptional,
-  start_date: external_exports.string().optional(),
-  end_date: external_exports.string().optional(),
+  start_date: optLine,
+  end_date: optLine,
   order_index: external_exports.number().optional()
 });
 var ProjectRecordSchema = external_exports.object({
@@ -43979,9 +43992,9 @@ var ProjectRecordSchema = external_exports.object({
   order_index: external_exports.number()
 });
 var SkillInputSchema = external_exports.object({
-  name: external_exports.string().min(1),
-  category: external_exports.string().optional().describe("\uC5B8\uC5B4/\uD504\uB808\uC784\uC6CC\uD06C/\uD234/\uC18C\uD504\uD2B8\uC2A4\uD0AC \uB4F1"),
-  level: external_exports.string().optional().describe("\uC0C1/\uC911/\uD558 \uB610\uB294 \uC790\uC720 \uC11C\uC220"),
+  name: reqLine,
+  category: external_exports.string().max(MAX_LINE).optional().describe("\uC5B8\uC5B4/\uD504\uB808\uC784\uC6CC\uD06C/\uD234/\uC18C\uD504\uD2B8\uC2A4\uD0AC \uB4F1"),
+  level: external_exports.string().max(MAX_LINE).optional().describe("\uC0C1/\uC911/\uD558 \uB610\uB294 \uC790\uC720 \uC11C\uC220"),
   years: external_exports.number().optional(),
   order_index: external_exports.number().optional()
 });
@@ -43995,11 +44008,11 @@ var SkillRecordSchema = external_exports.object({
 });
 var DocumentInputSchema = external_exports.object({
   kind: external_exports.enum(DOCUMENT_KINDS),
-  title: external_exports.string().min(1),
-  content: external_exports.string().describe("Markdown \uB610\uB294 \uC77C\uBC18 \uD14D\uC2A4\uD2B8 \uBCF8\uBB38"),
+  title: reqLine,
+  content: reqBody.describe("Markdown \uB610\uB294 \uC77C\uBC18 \uD14D\uC2A4\uD2B8 \uBCF8\uBB38"),
   source: external_exports.enum(CONTENT_SOURCES).optional(),
   is_primary: external_exports.boolean().optional().describe("\uB300\uD45C \uBB38\uC11C \uC5EC\uBD80"),
-  tags: external_exports.array(external_exports.string()).optional()
+  tags: strList.optional()
 });
 var DocumentRecordSchema = external_exports.object({
   ...baseRecord,
@@ -44011,19 +44024,19 @@ var DocumentRecordSchema = external_exports.object({
   tags: external_exports.array(external_exports.string())
 });
 var CoverLetterInputSchema = external_exports.object({
-  title: external_exports.string().min(1),
-  job_id: external_exports.string().optional().describe("\uD2B9\uC815 \uACF5\uACE0\uC5D0 \uC5F0\uACB0\uD560 \uACBD\uC6B0"),
+  title: reqLine,
+  job_id: optLine.describe("\uD2B9\uC815 \uACF5\uACE0\uC5D0 \uC5F0\uACB0\uD560 \uACBD\uC6B0"),
   is_primary: external_exports.boolean().optional(),
-  content: external_exports.string().optional().describe("\uCD08\uAE30 \uBC84\uC804 \uBCF8\uBB38 (\uC788\uC73C\uBA74 v1\uB85C \uC800\uC7A5)"),
+  content: optBody.describe("\uCD08\uAE30 \uBC84\uC804 \uBCF8\uBB38 (\uC788\uC73C\uBA74 v1\uB85C \uC800\uC7A5)"),
   source: external_exports.enum(CONTENT_SOURCES).optional(),
-  note: external_exports.string().optional().describe("\uCD08\uAE30 \uBC84\uC804 \uBA54\uBAA8")
+  note: optNote.describe("\uCD08\uAE30 \uBC84\uC804 \uBA54\uBAA8")
 });
 var CoverLetterVersionInputSchema = external_exports.object({
-  cover_letter_id: external_exports.string().optional().describe("\uAE30\uC874 \uC790\uAE30\uC18C\uAC1C\uC11C\uC5D0 \uC0C8 \uBC84\uC804 \uCD94\uAC00 \uC2DC"),
-  title: external_exports.string().optional().describe("\uC0C8 \uC790\uAE30\uC18C\uAC1C\uC11C\uB97C \uB9CC\uB4E4 \uB54C \uC81C\uBAA9"),
-  job_id: external_exports.string().optional(),
-  content: external_exports.string().min(1),
-  note: external_exports.string().optional().describe("\uC774 \uBC84\uC804\uC758 \uBCC0\uACBD \uC694\uC57D (\uC608: \uC9C0\uC6D0\uB3D9\uAE30 \uBCF4\uAC15)"),
+  cover_letter_id: optLine.describe("\uAE30\uC874 \uC790\uAE30\uC18C\uAC1C\uC11C\uC5D0 \uC0C8 \uBC84\uC804 \uCD94\uAC00 \uC2DC"),
+  title: external_exports.string().max(MAX_LINE).optional().describe("\uC0C8 \uC790\uAE30\uC18C\uAC1C\uC11C\uB97C \uB9CC\uB4E4 \uB54C \uC81C\uBAA9"),
+  job_id: optLine,
+  content: reqBody,
+  note: optNote.describe("\uC774 \uBC84\uC804\uC758 \uBCC0\uACBD \uC694\uC57D (\uC608: \uC9C0\uC6D0\uB3D9\uAE30 \uBCF4\uAC15)"),
   source: external_exports.enum(CONTENT_SOURCES).optional(),
   set_current: external_exports.boolean().optional().describe("\uC774 \uBC84\uC804\uC744 \uD604\uC7AC \uBC84\uC804\uC73C\uB85C \uC9C0\uC815 (\uAE30\uBCF8 true)")
 });
@@ -44047,16 +44060,16 @@ var CoverLetterRecordSchema = external_exports.object({
   versions: external_exports.array(CoverLetterVersionRecordSchema).optional()
 });
 var JobInputSchema = external_exports.object({
-  company: external_exports.string().min(1),
-  position: external_exports.string().min(1).describe("\uC9C1\uBB34/\uD3EC\uC9C0\uC158\uBA85"),
+  company: reqLine,
+  position: reqLine.describe("\uC9C1\uBB34/\uD3EC\uC9C0\uC158\uBA85"),
   url: SafeUrlOptional,
-  location: external_exports.string().optional(),
-  employment_type: external_exports.string().optional(),
-  description: external_exports.string().optional().describe("\uACF5\uACE0 \uC6D0\uBB38 \uB610\uB294 \uC815\uB9AC\uB41C \uD14D\uC2A4\uD2B8"),
-  requirements: external_exports.array(external_exports.string()).optional().describe("\uC790\uACA9\uC694\uAC74/\uC6B0\uB300\uC0AC\uD56D \uD575\uC2EC"),
-  keywords: external_exports.array(external_exports.string()).optional().describe("\uD575\uC2EC \uD0A4\uC6CC\uB4DC"),
-  deadline: external_exports.string().optional().describe("\uB9C8\uAC10\uC77C YYYY-MM-DD"),
-  source: external_exports.string().optional().describe("\uCD9C\uCC98 (\uC0AC\uB78C\uC778/\uC6D0\uD2F0\uB4DC/\uC9C1\uC811 \uC785\uB825 \uB4F1)")
+  location: optLine,
+  employment_type: optLine,
+  description: optBody.describe("\uACF5\uACE0 \uC6D0\uBB38 \uB610\uB294 \uC815\uB9AC\uB41C \uD14D\uC2A4\uD2B8"),
+  requirements: strList.optional().describe("\uC790\uACA9\uC694\uAC74/\uC6B0\uB300\uC0AC\uD56D \uD575\uC2EC"),
+  keywords: strList.optional().describe("\uD575\uC2EC \uD0A4\uC6CC\uB4DC"),
+  deadline: external_exports.string().max(MAX_LINE).optional().describe("\uB9C8\uAC10\uC77C YYYY-MM-DD"),
+  source: external_exports.string().max(MAX_LINE).optional().describe("\uCD9C\uCC98 (\uC0AC\uB78C\uC778/\uC6D0\uD2F0\uB4DC/\uC9C1\uC811 \uC785\uB825 \uB4F1)")
 });
 var JobRecordSchema = external_exports.object({
   ...baseRecord,
@@ -44072,14 +44085,14 @@ var JobRecordSchema = external_exports.object({
   source: external_exports.string().nullable()
 });
 var FitAnalysisInputSchema = external_exports.object({
-  job_id: external_exports.string().describe("\uBD84\uC11D \uB300\uC0C1 \uACF5\uACE0 ID"),
+  job_id: reqLine.describe("\uBD84\uC11D \uB300\uC0C1 \uACF5\uACE0 ID"),
   score: external_exports.number().min(0).max(100).optional().describe("\uC885\uD569 \uC801\uD569\uB3C4 0~100"),
-  summary: external_exports.string().optional().describe("\uD55C\uB450 \uBB38\uB2E8 \uC694\uC57D"),
-  strengths: external_exports.array(external_exports.string()).optional().describe("\uAC15\uC810 / \uC798 \uB9DE\uB294 \uBD80\uBD84"),
-  gaps: external_exports.array(external_exports.string()).optional().describe("\uBD80\uC871\uD55C \uBD80\uBD84 / \uBCF4\uC644 \uD544\uC694"),
-  matched_keywords: external_exports.array(external_exports.string()).optional(),
-  missing_keywords: external_exports.array(external_exports.string()).optional(),
-  recommendations: external_exports.array(external_exports.string()).optional().describe("\uC790\uAE30\uC18C\uAC1C\uC11C/\uC9C0\uC6D0 \uC804\uB7B5 \uC81C\uC548")
+  summary: external_exports.string().max(MAX_NOTE).optional().describe("\uD55C\uB450 \uBB38\uB2E8 \uC694\uC57D"),
+  strengths: strList.optional().describe("\uAC15\uC810 / \uC798 \uB9DE\uB294 \uBD80\uBD84"),
+  gaps: strList.optional().describe("\uBD80\uC871\uD55C \uBD80\uBD84 / \uBCF4\uC644 \uD544\uC694"),
+  matched_keywords: strList.optional(),
+  missing_keywords: strList.optional(),
+  recommendations: strList.optional().describe("\uC790\uAE30\uC18C\uAC1C\uC11C/\uC9C0\uC6D0 \uC804\uB7B5 \uC81C\uC548")
 });
 var FitAnalysisRecordSchema = external_exports.object({
   ...baseRecord,
@@ -44093,18 +44106,18 @@ var FitAnalysisRecordSchema = external_exports.object({
   recommendations: external_exports.array(external_exports.string())
 });
 var ApplicationInputSchema = external_exports.object({
-  job_id: external_exports.string(),
+  job_id: reqLine,
   status: external_exports.enum(APPLICATION_STATUSES).optional(),
-  resume_id: external_exports.string().optional(),
-  cover_letter_id: external_exports.string().optional(),
-  applied_at: external_exports.string().optional(),
-  notes: external_exports.string().optional()
+  resume_id: optLine,
+  cover_letter_id: optLine,
+  applied_at: optLine,
+  notes: optNote
 });
 var ApplicationStatusUpdateSchema = external_exports.object({
-  job_id: external_exports.string().optional(),
-  application_id: external_exports.string().optional(),
+  job_id: optLine,
+  application_id: optLine,
   status: external_exports.enum(APPLICATION_STATUSES),
-  note: external_exports.string().optional().describe("\uC0C1\uD0DC \uBCC0\uACBD \uC0AC\uC720/\uBA54\uBAA8")
+  note: optNote.describe("\uC0C1\uD0DC \uBCC0\uACBD \uC0AC\uC720/\uBA54\uBAA8")
 });
 var ApplicationRecordSchema = external_exports.object({
   ...baseRecord,
@@ -44116,24 +44129,24 @@ var ApplicationRecordSchema = external_exports.object({
   notes: external_exports.string().nullable()
 });
 var StarGuideSchema = external_exports.object({
-  question: external_exports.string(),
-  situation: external_exports.string().optional(),
-  task: external_exports.string().optional(),
-  action: external_exports.string().optional(),
-  result: external_exports.string().optional()
+  question: external_exports.string().max(MAX_NOTE),
+  situation: optNote,
+  task: optNote,
+  action: optNote,
+  result: optNote
 });
 var InterviewQuestionSchema = external_exports.object({
-  question: external_exports.string(),
-  intent: external_exports.string().optional().describe("\uC9C8\uBB38 \uC758\uB3C4"),
-  followups: external_exports.array(external_exports.string()).optional().describe("\uC608\uC0C1 \uAF2C\uB9AC \uC9C8\uBB38"),
-  answer_outline: external_exports.string().optional().describe("\uB2F5\uBCC0 \uAC00\uC774\uB4DC/\uD575\uC2EC \uD3EC\uC778\uD2B8")
+  question: external_exports.string().max(MAX_NOTE),
+  intent: external_exports.string().max(MAX_NOTE).optional().describe("\uC9C8\uBB38 \uC758\uB3C4"),
+  followups: strList.optional().describe("\uC608\uC0C1 \uAF2C\uB9AC \uC9C8\uBB38"),
+  answer_outline: optBody.describe("\uB2F5\uBCC0 \uAC00\uC774\uB4DC/\uD575\uC2EC \uD3EC\uC778\uD2B8")
 });
 var InterviewPrepInputSchema = external_exports.object({
-  job_id: external_exports.string(),
-  questions: external_exports.array(InterviewQuestionSchema).optional(),
-  star_guides: external_exports.array(StarGuideSchema).optional(),
-  self_introduction: external_exports.string().optional().describe("1\uBD84 \uC790\uAE30\uC18C\uAC1C \uCD08\uC548"),
-  notes: external_exports.string().optional().describe("\uBA74\uC811 \uD6C4\uAE30/\uBA54\uBAA8")
+  job_id: reqLine,
+  questions: external_exports.array(InterviewQuestionSchema).max(MAX_ITEMS).optional(),
+  star_guides: external_exports.array(StarGuideSchema).max(MAX_ITEMS).optional(),
+  self_introduction: optBody.describe("1\uBD84 \uC790\uAE30\uC18C\uAC1C \uCD08\uC548"),
+  notes: optNote.describe("\uBA74\uC811 \uD6C4\uAE30/\uBA54\uBAA8")
 });
 var InterviewPrepRecordSchema = external_exports.object({
   ...baseRecord,
@@ -44187,7 +44200,7 @@ var ApplicationContextSchema = external_exports.object({
 });
 
 // packages/shared/src/build-info.ts
-var APP_VERSION = true ? "0.1.2" : "0.0.0-dev";
+var APP_VERSION = true ? "0.1.3" : "0.0.0-dev";
 var BUNDLED = true;
 
 // packages/shared/src/index.ts
@@ -44903,7 +44916,21 @@ var activityRepo = {
 };
 function getEntityCounts() {
   const db = getDb();
-  const c = (t) => db.prepare(`SELECT COUNT(*) AS n FROM ${t}`).get().n;
+  const ALLOWED_TABLES = /* @__PURE__ */ new Set([
+    "profile",
+    "experiences",
+    "projects",
+    "skills",
+    "documents",
+    "cover_letters",
+    "jobs",
+    "applications",
+    "interview_preps"
+  ]);
+  const c = (t) => {
+    if (!ALLOWED_TABLES.has(t)) throw new Error(`getEntityCounts: \uD5C8\uC6A9\uB418\uC9C0 \uC54A\uC740 \uD14C\uC774\uBE14 \uC774\uB984: ${t}`);
+    return db.prepare(`SELECT COUNT(*) AS n FROM ${t}`).get().n;
+  };
   return {
     profile: c("profile"),
     experiences: c("experiences"),
@@ -44979,7 +45006,7 @@ function injectToken(html) {
 // apps/web/src/http.ts
 import fs3 from "node:fs";
 import path3 from "node:path";
-var MAX_BODY = 8 * 1024 * 1024;
+var MAX_BODY2 = 8 * 1024 * 1024;
 var Router = class {
   routes = [];
   add(method, path6, handler) {
@@ -45074,7 +45101,7 @@ function readBody(req) {
     const chunks = [];
     req.on("data", (c) => {
       size2 += c.length;
-      if (size2 > MAX_BODY) {
+      if (size2 > MAX_BODY2) {
         reject2(new HttpError(413, "\uC694\uCCAD \uBCF8\uBB38\uC774 \uB108\uBB34 \uD07D\uB2C8\uB2E4.", "too_large"));
         req.destroy();
         return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "careermate",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "type": "module",
   "description": "CareerMate — an MCP-first, local-first career workspace. Connect it to a local AI agent (Claude Desktop, Claude Code, Codex); CareerMate stores your career data locally on your machine and exposes it over MCP.",
   "license": "MIT",
@@ -29,7 +29,6 @@
     "apps",
     "packages",
     "scripts",
-    "docs",
     "tsconfig.json",
     "README.md",
     "THIRD_PARTY_NOTICES.md"

package/packages/db/src/repositories.ts

@@ -859,7 +859,24 @@ export const activityRepo = {
  */
 export function getEntityCounts(): Record<string, number> {
   const db = getDb();
-  const c = (t: string): number => (db.prepare(`SELECT COUNT(*) AS n FROM ${t}`).get() as { n: number }).n;
+  // Table names are hardcoded below, but the name is interpolated into SQL, so
+  // guard with an allowlist as defense-in-depth: a future caller can never turn
+  // this into an injection sink even if `t` were sourced from elsewhere.
+  const ALLOWED_TABLES = new Set([
+    'profile',
+    'experiences',
+    'projects',
+    'skills',
+    'documents',
+    'cover_letters',
+    'jobs',
+    'applications',
+    'interview_preps',
+  ]);
+  const c = (t: string): number => {
+    if (!ALLOWED_TABLES.has(t)) throw new Error(`getEntityCounts: 허용되지 않은 테이블 이름: ${t}`);
+    return (db.prepare(`SELECT COUNT(*) AS n FROM ${t}`).get() as { n: number }).n;
+  };
   return {
     profile: c('profile'),
     experiences: c('experiences'),

package/packages/mcp-tools/src/tools.ts

@@ -22,6 +22,7 @@ import {
   FitAnalysisInputSchema,
   CoverLetterVersionInputSchema,
   InterviewPrepInputSchema,
+  DocumentInputSchema,
   APPLICATION_STATUSES,
   APPLICATION_STATUS_LABELS,
   DOCUMENT_KINDS,
@@ -272,13 +273,12 @@ export const TOOLS: ToolDef[] = [
     title: '이력서/경력기술서 추가',
     description:
       '이력서, 경력기술서, 포트폴리오 등 문서를 저장합니다. content에는 사용자가 업로드/붙여넣은 텍스트(또는 정리한 Markdown)를 넣으세요. kind 기본값은 resume입니다. is_primary=true로 대표 문서를 지정하면 get_application_context의 primary_resume로 노출됩니다.',
+    // Reuse the shared (length-bounded, whitespace-rejecting) Document schema so
+    // the MCP ingestion path — the primary route for résumé text — inherits the
+    // same caps as the web API. kind stays optional here (defaults to resume).
     inputSchema: {
-      title: z.string().describe('문서 제목'),
-      content: z.string().describe('본문 (Markdown/일반 텍스트)'),
+      ...DocumentInputSchema.omit({ kind: true }).shape,
       kind: z.enum(DOCUMENT_KINDS).optional().describe('resume(이력서)/career_description(경력기술서)/portfolio/other'),
-      source: z.enum(CONTENT_SOURCES).optional(),
-      is_primary: z.boolean().optional().describe('대표 문서 여부'),
-      tags: z.array(z.string()).optional(),
     },
     handler: (args) => {
       const doc = addResume(args);

package/packages/parsers/src/documents.ts

@@ -427,9 +427,21 @@ async function finishPdf(buf: Buffer, base: BaseFn): Promise<ExtractDocumentResu
       });
     return base('pdf', { text, bytes: buf.length, warnings: pageWarnings });
   } catch (e) {
+    // pdfjs throws a named PasswordException for password-protected PDFs — give
+    // a distinct, actionable hint instead of the generic "corrupted or encrypted".
+    const name = e && typeof e === 'object' && 'name' in e ? String((e as { name?: unknown }).name) : '';
+    if (name === 'PasswordException') {
+      return base('unsupported', {
+        bytes: buf.length,
+        warnings: [
+          '이 PDF는 암호(비밀번호)로 보호되어 있어 읽을 수 없습니다. PDF 뷰어에서 암호를 해제해 다시 저장하거나, 내용을 텍스트로 붙여넣어 주세요.',
+        ],
+        unsupported: true,
+      });
+    }
     return base('unsupported', {
       bytes: buf.length,
-      warnings: [`PDF를 읽지 못했습니다(${errMsg(e)}). 암호화되었거나 손상된 PDF일 수 있습니다. 텍스트로 붙여넣어 주세요.`],
+      warnings: [`PDF를 읽지 못했습니다(${errMsg(e)}). 손상되었거나 지원하지 않는 PDF일 수 있습니다. 텍스트로 붙여넣어 주세요.`],
       unsupported: true,
     });
   }