careermate 0.1.2 → 0.1.4

package/AGENTS.md

@@ -0,0 +1,33 @@
+# AGENTS.md — CareerMate 상시 지침 (모든 AI 에이전트 공통)
+
+이 파일은 CareerMate를 사용하는 AI 에이전트의 **상시 지침 단일 원본**입니다. Codex CLI는 이 파일을 자동으로 읽고, **Claude(`CLAUDE.md`)와 Gemini(`GEMINI.md`)는 이 파일을 그대로 가져다 씁니다.** 따라서 공통 규칙은 항상 여기 한 곳만 고치면 됩니다. 당신(AI 에이전트)이 **사용자의 커리어를 함께 관리**하기 위한 규칙입니다.
+
+## CareerMate란
+
+CareerMate는 사용자 PC에만 데이터를 두는 **로컬 커리어 작업 공간**입니다. 내부에 LLM이 없는 MCP-우선 도구이며, **AI 서비스가 아니라 "커리어 서랍장"** 입니다. 분석·글쓰기 같은 사고는 모두 **당신이** 하고, CareerMate는 구조화된 커리어 데이터를 저장·제공할 뿐입니다.
+
+> 프라임 디렉티브: **두뇌는 당신, 저장은 CareerMate.** 적합도 분석·자기소개서·면접 자료는 당신이 작성하고, 그 입력과 결과는 CareerMate 도구로 가져오고 저장합니다.
+
+## 규칙
+
+- **기존 데이터를 항상 먼저 활용하라.** 사용자에게 묻거나 무언가를 새로 만들기 전에, CareerMate를 MCP로 조회한다: `get_onboarding_status`(연결 직후 최우선), `get_application_context`, `list_jobs`, `get_profile`, `get_resumes`, `get_cover_letters`, `list_recent_activity`. 이미 채워진 항목은 다시 묻지 마라.
+- **사용자가 파일을 주면 `read_document`로 읽어라.** 이력서·경력기술서·자소서·채용공고가 PDF·Word(`.docx`)·한컴(`.hwp`/`.hwpx`)·텍스트(`.txt`/`.md`) 파일로 컴퓨터에 있고 사용자가 경로로 가리키면, `read_document({ path })`로 본문 텍스트를 추출한 뒤 그 내용으로 작업하고 결과는 아래 저장 도구로 보관한다(파일 내용을 새 파일로 다시 쓰지 마라). 경로는 가능하면 절대 경로로 준다. 이미지·스캔 PDF는 텍스트 레이어가 없어 추출되지 않을 수 있는데, 그때는 이미지를 직접 볼 수 있는 클라이언트로 읽거나 사용자에게 내용을 텍스트로 붙여넣어 달라고 안내한다.
+- **공고 분석·자소서 작성 전에는 반드시 `get_application_context`를 먼저 호출하라.** 한 번의 호출로 프로필·대표 이력서·경력·스킬·기존 자소서·대상 공고·선호 문체·강조 포인트를 모두 돌려준다. 맥락 없이 작성하지 마라.
+- **결과는 다시 CareerMate에 저장하라.** 분석 → `save_fit_analysis`, 자소서 → `save_cover_letter_version`, 공고 → `save_job_posting`, 면접 자료 → `save_interview_prep`. 커리어 데이터는 흩어진 파일이 아니라 CareerMate 안에 둔다. 임의의 로컬 파일 생성은 최소화하라(사용자가 파일을 원하면 `export_cover_letter`로 `~/.careermate/exports`에 내보낸다).
+- **5개 표준 워크플로우를 따르라**: onboarding, analyze_job, write_cover_letter, manage_application_status, prepare_interview. 순서가 헷갈리면 `get_workflow_guide`를 호출한다.
+- **사람이 쓴 듯한 글**이 필요할 때(자소서·자기 PR·지원 메일)는 작성 직전 `get_writing_style_guide`를 적용한다. 사실·수치·고유명사는 그대로 보존한다.
+- **8단계 지원 상태 게이팅을 존중하라**: `draft`(작성 중) → `planned`(지원 예정) → `applied`(지원 완료) → `document_passed`(서류 합격) → `interview`(면접 진행) → `final_passed`(최종 합격) / `rejected`(불합격) / `on_hold`(보류). 면접 준비는 **`document_passed` 이상**에서만 해금된다. 상태 변경은 `update_application_status`.
+- **결과를 낼 때마다 대시보드로 안내하라.** 공고 저장·적합도 분석·자소서 버전·상태 변경·면접 준비 등 무언가를 저장·완료할 때마다 대시보드(`http://127.0.0.1:4319`) 주소를 알려준다. 브라우저를 직접 여는 건 **첫 온보딩 때 한 번만**(`open_dashboard`) — 이후에는 자동으로 열지 말고 링크만 보여주고, 사용자가 "열어줘"라고 하면 그때 `open_application`(단건)·`open_dashboard`(전체)로 연다.
+- **절대 사용자 데이터를 외부로 업로드하지 마라.** 모든 데이터는 `~/.careermate`(Windows: `%USERPROFILE%\.careermate`)에만 있고, 대시보드는 `127.0.0.1`에만 바인딩된다. CareerMate는 (선택적 버전 확인 외) 네트워크로 사용자 데이터를 보내지 않는다.
+- 기술 용어(MCP, `job_id` 등)는 사용자에게 노출하지 말고, 매 단계 무엇을 하는지 쉬운 한국어로 설명하라. 확실하지 않으면 지어내지 말고 사용자에게 확인하라.
+
+## 아직 연결되지 않았다면
+
+CareerMate MCP 도구가 보이지 않으면(예: `get_onboarding_status` 호출 불가) **먼저 설치·등록부터** 한다. **클라이언트별 등록 방법은 [`./INSTALL.md`](INSTALL.md)** 에 있다(Claude Code/Desktop, Codex, Gemini 등). 요지: 해당 클라이언트의 MCP 설정에 stdio 서버로 등록 → AI 클라이언트를 **완전히 재시작** → `get_onboarding_status`를 한 번 호출해 응답이 오는지 확인한다.
+
+## 더 보기
+
+- [`./INSTALL.md`](INSTALL.md) — 설치·등록 런북(클라이언트별 등록 방법)
+- [`docs/START_WORKFLOW.md`](docs/START_WORKFLOW.md) — 연결 직후 사용자를 빠르게 생산적으로 만드는 단계별 런북
+- [`docs/MCP_TOOLS.md`](docs/MCP_TOOLS.md) — MCP 도구 레퍼런스(입력·반환·호출 시점)
+- [`docs/WORKFLOWS.md`](docs/WORKFLOWS.md) — 5개 표준 워크플로우 상세

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 CareerMate
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -240,7 +240,9 @@ CareerMate/
 - [`AGENTS.md`](AGENTS.md) — Codex용 영속 지침. / [`CLAUDE.md`](CLAUDE.md) — Claude Code용 영속 지침.
 - [`docs/SUPPORTED_AI_APPS.md`](docs/SUPPORTED_AI_APPS.md) — **설치 레퍼런스 허브**: 지원 앱 매트릭스 + 설치 3방식(에이전트/npx/.mcpb) + 클라이언트별 수동 MCP 설정 + 알려진 제약. (사람용 안내는 https://careermate.life)
 - [`docs/START_WORKFLOW.md`](docs/START_WORKFLOW.md) — 등록부터 면접 준비까지 단계별 작업 런북.
+- [`docs/FAQ.md`](docs/FAQ.md) — **자주 묻는 질문 / 문제 해결**: "PDF가 안 읽혀요", "분석이 안 돼요", "공고 URL은 어떻게 넣어요" 등.
 - [`docs/TODO.md`](docs/TODO.md) — 남은 작업과 v1 범위 밖 항목.
+- [`CHANGELOG.md`](CHANGELOG.md) — 버전별 변경 이력. / [`CONTRIBUTING.md`](CONTRIBUTING.md) · [`SECURITY.md`](SECURITY.md) · [`CODE_OF_CONDUCT.md`](CODE_OF_CONDUCT.md) — 기여·보안·행동 강령.
 
 ---
 
@@ -258,4 +260,4 @@ npm run typecheck
 
 ## 라이선스
 
-MIT 라이선스 — npm으로 배포되는 패키지 코드에 적용됩니다. (개발용 GitHub 저장소는 현재 비공개입니다.)
+MIT 라이선스 — 전문은 [`LICENSE`](LICENSE) 파일을 참고하세요. (개발용 GitHub 저장소는 현재 비공개입니다.)

package/apps/web/public/pages/documents.js

@@ -23,6 +23,7 @@ export async function render(ctx) {
   root.append(el('div', { class: 'tabs' }, tabCover, tabDocs), panel);
 
   let query = '';
+  let searchInput = null;
   function selectTab(next) {
     tab = next;
     query = '';
@@ -43,9 +44,12 @@ export async function render(ctx) {
       if (!hide) shown += 1;
     }
     const existing = panel.querySelector('.search-empty');
+    if (existing) existing.remove();
     if (q && cards.length && shown === 0) {
-      if (!existing) panel.append(el('p', { class: 'search-empty muted', style: { textAlign: 'center', margin: '8px 0' } }, '검색 결과가 없어요.'));
-    } else if (existing) existing.remove();
+      panel.append(el('div', { class: 'search-empty empty' },
+        el('p', { class: 'muted', style: { margin: '0 0 12px' } }, `‘${query.trim()}’에 맞는 항목이 없어요.`),
+        Btn('필터 초기화', { sm: true, variant: 'ghost', onClick: () => { query = ''; if (searchInput) searchInput.value = ''; applyFilter(); } })));
+    }
   }
 
   async function reload() {
@@ -70,6 +74,7 @@ export async function render(ctx) {
   function setActions() {
     const search = Input({ type: 'search', placeholder: tab === 'cover' ? '자기소개서 검색' : '문서 검색', value: query, attrs: { 'aria-label': '검색' } });
     search.classList.add('input--inline');
+    searchInput = search;
     search.addEventListener('input', () => { query = search.value; applyFilter(); });
     const createBtn = tab === 'cover'
       ? Btn('새 자기소개서', { icon: 'plus', variant: 'primary', onClick: () => openCoverCreate(reload) })

package/apps/web/public/pages/home.js

@@ -4,7 +4,7 @@
 // the 시작하기 card. Every empty state is ONE screen-specific sentence; never repeat
 // the same "AI에게 보내면 저장됩니다" instruction across surfaces.
 import {
-  el, get, icon, navigate, Card, Badge, Btn, EmptyState, ListRow, CheckRow,
+  el, get, icon, navigate, Card, Badge, Btn, ListRow, CheckRow,
   Stat, PageHead, fmtDate, fmtRelative, scoreClass, STATUS_COLOR, statusColor, mount,
 } from '/lib.js';
 
@@ -59,7 +59,7 @@ function Greeting(name, s, firstRun) {
   let focus;
   if (firstRun) focus = '시작해 볼까요 — 먼저 기본 정보를 채워 주세요.';
   else if (s.interview_todo.length) focus = `면접 준비가 필요한 지원 ${s.interview_todo.length}건이 있어요.`;
-  else if (s.in_progress.length) focus = `진행 중인 지원 ${s.in_progress.length}건을 확인하세요.`;
+  else if (s.in_progress.length) focus = `진행 중인 지원 ${s.in_progress.length}건이 있어요.`;
   else if (s.counts.jobs) focus = `저장된 공고 ${s.counts.jobs}건 · 새 적합도 분석을 받아보세요.`;
   else focus = '오늘도 한 걸음 나아가 볼까요.';
   return PageHead({ title: name ? `${name}님, 안녕하세요` : '환영합니다', desc: focus });
@@ -87,7 +87,7 @@ function GettingStarted(o) {
           el('div', { class: 'callout__body' },
             '공고 분석·자기소개서·면접 준비는 평소 쓰던 AI에게 말로 시키면, 결과가 이 대시보드에 쌓여요.'))),
       el('div', { class: 'progress' }, el('div', { class: 'progress__bar', style: { width: `${o.profile_completeness}%` } })),
-      el('p', { class: 'text-secondary text-sm', style: { margin: '12px 0 8px' } },
+      el('p', { class: 'text-secondary text-sm mt-3 mb-2' },
         '완성할수록 AI의 적합도 분석과 자기소개서 품질이 좋아져요.'),
       el('div', {}, ...steps.map((it) => CheckRow({ done: it.done, label: it.label, onClick: () => navigate(it.to) }))),
     ],
@@ -201,10 +201,7 @@ function RecentJobs(jobs) {
   if (!jobs.length) {
     return Card({
       title: '최근 공고',
-      body: EmptyState({
-        iconName: 'briefcase', title: '저장된 공고가 아직 없어요',
-        action: Btn('공고 추가', { icon: 'plus', variant: 'ghost', onClick: () => navigate('/jobs') }),
-      }),
+      body: el('p', { class: 'muted', style: { margin: 0 } }, '저장된 공고가 아직 없어요. 새 공고를 추가해 보세요.'),
     });
   }
   const rows = jobs.map((j) => ListRow({

package/apps/web/public/pages/jobs.js

@@ -365,11 +365,7 @@ function FitCard(fit) {
   if (!fit) {
     return Card({
       title: '적합도 분석',
-      body: EmptyState({
-        iconName: 'target',
-        title: '적합도 분석 전이에요',
-        body: '이 공고와 내 프로필을 비교한 분석 결과가 여기에 표시됩니다.',
-      }),
+      body: el('p', { class: 'muted', style: { margin: 0 } }, '아직 분석 전이에요. 이 공고와 내 프로필을 비교한 결과가 여기에 표시됩니다.'),
     });
   }
 

package/apps/web/public/pages/profile.js

@@ -264,7 +264,7 @@ function editWriting(p, reload) {
 /* ---------------------------------------------------- 4. 경력 (Experiences) */
 
 function ExperiencesCard(items, reload) {
-  const add = Btn('추가', { icon: 'plus', sm: true, variant: 'ghost', onClick: () => editExperience(null, reload) });
+  const add = Btn('경력 추가', { icon: 'plus', sm: true, variant: 'ghost', onClick: () => editExperience(null, reload) });
 
   if (!items.length) {
     return Card({
@@ -368,7 +368,7 @@ function editExperience(x, reload) {
 /* ----------------------------------------------------- 5. 프로젝트 (Projects) */
 
 function ProjectsCard(items, reload) {
-  const add = Btn('추가', { icon: 'plus', sm: true, variant: 'ghost', onClick: () => editProject(null, reload) });
+  const add = Btn('프로젝트 추가', { icon: 'plus', sm: true, variant: 'ghost', onClick: () => editProject(null, reload) });
 
   if (!items.length) {
     return Card({
@@ -469,7 +469,7 @@ function editProject(x, reload) {
 /* -------------------------------------------------------- 6. 기술 (Skills) */
 
 function SkillsCard(items, reload) {
-  const add = Btn('추가', { icon: 'plus', sm: true, variant: 'ghost', onClick: () => editSkill(null, reload) });
+  const add = Btn('기술 추가', { icon: 'plus', sm: true, variant: 'ghost', onClick: () => editSkill(null, reload) });
 
   if (!items.length) {
     return Card({

package/apps/web/public/styles.css

@@ -403,7 +403,9 @@ h1,h2,h3,h4 { margin: 0; font-weight: 650; letter-spacing: -0.01em; }
   background: var(--surface); border: 1px solid var(--border); border-radius: var(--radius); padding: 22px 26px; max-height: 60vh; overflow-y: auto; }
 .kv { display: grid; grid-template-columns: 132px 1fr; gap: 8px 16px; }
 .kv dt { color: var(--text-tertiary); font-size: 13px; }
-.kv dd { margin: 0; }
+/* min-width:0 overrides a grid item's default min-width:auto so the 1fr column
+   can shrink below its content — otherwise a long path/value overflows the grid. */
+.kv dd { margin: 0; min-width: 0; }
 
 /* ----------------------------------------------------------------- modal */
 .modal-root { position: fixed; inset: 0; z-index: 60; display: none; }
@@ -450,7 +452,10 @@ h1,h2,h3,h4 { margin: 0; font-weight: 650; letter-spacing: -0.01em; }
 .between { justify-content: space-between; } .center { align-items: center; } .wrap { flex-wrap: wrap; }
 .ml-auto { margin-left: auto; } .mt-2{margin-top:8px;} .mt-3{margin-top:12px;} .mt-4{margin-top:16px;} .mb-2{margin-bottom:8px;} .mb-3{margin-bottom:12px;} .mb-4{margin-bottom:16px;}
 .tnum { font-variant-numeric: tabular-nums; }
-.truncate { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; max-width: 100%; }
+/* min-width:0 lets a truncating element actually shrink inside a flex row;
+   without it a long unbreakable value (e.g. a data-folder path) forces the
+   flex item to its content width and overflows the viewport on narrow screens. */
+.truncate { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; max-width: 100%; min-width: 0; }
 .divider { height: 1px; background: var(--border); margin: 16px 0; }
 .skeleton { background: linear-gradient(90deg, var(--bg-sunken) 25%, var(--surface-hover) 37%, var(--bg-sunken) 63%); background-size: 400% 100%; animation: shimmer 1.4s infinite; border-radius: 6px; }
 @keyframes shimmer { 0% { background-position: 100% 0; } 100% { background-position: 0 0; } }

package/dist/doctor.mjs

@@ -75561,29 +75561,42 @@ function isSafeUrl(u) {
   return !/^[a-z][a-z0-9+.-]*:/i.test(s) || /^(https?:|mailto:)/i.test(s);
 }
 var UNSAFE_URL_MSG = "javascript: \uAC19\uC740 \uC704\uD5D8\uD55C \uB9C1\uD06C\uB294 \uC0AC\uC6A9\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. http(s) \uB9C1\uD06C\uB97C \uC0AC\uC6A9\uD558\uC138\uC694.";
-var SafeUrl = external_exports.string().min(1).refine(isSafeUrl, { message: UNSAFE_URL_MSG });
-var SafeUrlOptional = external_exports.string().optional().refine((u) => u == null || u === "" || isSafeUrl(u), { message: UNSAFE_URL_MSG });
+var MAX_URL = 2e3;
+var SafeUrl = external_exports.string().min(1).max(MAX_URL).refine(isSafeUrl, { message: UNSAFE_URL_MSG });
+var SafeUrlOptional = external_exports.string().max(MAX_URL).optional().refine((u) => u == null || u === "" || isSafeUrl(u), { message: UNSAFE_URL_MSG });
+var MAX_LINE = 500;
+var MAX_NOTE = 1e4;
+var MAX_BODY = 2e5;
+var MAX_ITEM = 2e3;
+var MAX_ITEMS = 500;
+var EMPTY_MSG = "\uB0B4\uC6A9\uC774 \uBE44\uC5B4 \uC788\uC2B5\uB2C8\uB2E4(\uACF5\uBC31\uB9CC\uC73C\uB85C\uB294 \uC800\uC7A5\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4).";
+var reqLine = external_exports.string().trim().min(1).max(MAX_LINE);
+var optLine = external_exports.string().max(MAX_LINE).optional();
+var optNote = external_exports.string().max(MAX_NOTE).optional();
+var optBody = external_exports.string().max(MAX_BODY).optional();
+var reqBody = external_exports.string().max(MAX_BODY).refine((s) => s.trim().length > 0, { message: EMPTY_MSG });
+var strList = external_exports.array(external_exports.string().max(MAX_ITEM)).max(MAX_ITEMS);
 var baseRecord = {
   id,
   created_at: isoDateTime,
   updated_at: isoDateTime
 };
 var LinkSchema = external_exports.object({
-  label: external_exports.string().min(1),
+  label: reqLine,
   url: SafeUrl
 });
 var ProfileInputSchema = external_exports.object({
-  name: external_exports.string().min(1).optional(),
-  email: external_exports.string().optional(),
-  phone: external_exports.string().optional(),
-  location: external_exports.string().optional(),
-  headline: external_exports.string().optional().describe("\uD55C \uC904 \uC18C\uAC1C / \uC9C1\uBB34 \uD0C0\uC774\uD2C0"),
-  summary: external_exports.string().optional().describe("\uC790\uAE30\uC18C\uAC1C \uC694\uC57D"),
-  desired_roles: external_exports.array(external_exports.string()).optional().describe("\uD76C\uB9DD \uC9C1\uBB34"),
-  desired_conditions: external_exports.string().optional().describe("\uD76C\uB9DD \uADFC\uBB34 \uC870\uAC74 (\uC5F0\uBD09, \uC9C0\uC5ED, \uADFC\uBB34\uD615\uD0DC \uB4F1)"),
-  preferred_tone: external_exports.string().optional().describe("\uC790\uAE30\uC18C\uAC1C\uC11C \uC120\uD638 \uBB38\uCCB4 (\uC608: \uB2F4\uBC31\uD558\uACE0 \uAD6C\uCCB4\uC801)"),
-  emphasis_points: external_exports.array(external_exports.string()).optional().describe("\uAC15\uC870\uD558\uACE0 \uC2F6\uC740 \uD575\uC2EC \uD3EC\uC778\uD2B8"),
-  links: external_exports.array(LinkSchema).optional().describe("\uD3EC\uD2B8\uD3F4\uB9AC\uC624/\uAE43\uD5C8\uBE0C/\uB9C1\uD06C\uB4DC\uC778 \uB4F1")
+  name: reqLine.optional(),
+  email: optLine,
+  phone: optLine,
+  location: optLine,
+  headline: external_exports.string().max(MAX_LINE).optional().describe("\uD55C \uC904 \uC18C\uAC1C / \uC9C1\uBB34 \uD0C0\uC774\uD2C0"),
+  summary: external_exports.string().max(MAX_NOTE).optional().describe("\uC790\uAE30\uC18C\uAC1C \uC694\uC57D"),
+  desired_roles: strList.optional().describe("\uD76C\uB9DD \uC9C1\uBB34"),
+  desired_conditions: external_exports.string().max(MAX_NOTE).optional().describe("\uD76C\uB9DD \uADFC\uBB34 \uC870\uAC74 (\uC5F0\uBD09, \uC9C0\uC5ED, \uADFC\uBB34\uD615\uD0DC \uB4F1)"),
+  preferred_tone: external_exports.string().max(MAX_LINE).optional().describe("\uC790\uAE30\uC18C\uAC1C\uC11C \uC120\uD638 \uBB38\uCCB4 (\uC608: \uB2F4\uBC31\uD558\uACE0 \uAD6C\uCCB4\uC801)"),
+  emphasis_points: strList.optional().describe("\uAC15\uC870\uD558\uACE0 \uC2F6\uC740 \uD575\uC2EC \uD3EC\uC778\uD2B8"),
+  links: external_exports.array(LinkSchema).max(MAX_ITEMS).optional().describe("\uD3EC\uD2B8\uD3F4\uB9AC\uC624/\uAE43\uD5C8\uBE0C/\uB9C1\uD06C\uB4DC\uC778 \uB4F1")
 });
 var ProfileRecordSchema = external_exports.object({
   ...baseRecord,
@@ -75600,15 +75613,15 @@ var ProfileRecordSchema = external_exports.object({
   links: external_exports.array(LinkSchema)
 });
 var ExperienceInputSchema = external_exports.object({
-  company: external_exports.string().min(1),
-  role: external_exports.string().optional(),
-  employment_type: external_exports.string().optional().describe("\uC815\uADDC\uC9C1/\uACC4\uC57D\uC9C1/\uC778\uD134/\uD504\uB9AC\uB79C\uC11C \uB4F1"),
-  start_date: external_exports.string().optional().describe("YYYY-MM \uB610\uB294 YYYY-MM-DD"),
-  end_date: external_exports.string().optional().describe("\uC7AC\uC9C1 \uC911\uC774\uBA74 \uBE44\uC6CC\uB450\uAE30"),
+  company: reqLine,
+  role: optLine,
+  employment_type: external_exports.string().max(MAX_LINE).optional().describe("\uC815\uADDC\uC9C1/\uACC4\uC57D\uC9C1/\uC778\uD134/\uD504\uB9AC\uB79C\uC11C \uB4F1"),
+  start_date: external_exports.string().max(MAX_LINE).optional().describe("YYYY-MM \uB610\uB294 YYYY-MM-DD"),
+  end_date: external_exports.string().max(MAX_LINE).optional().describe("\uC7AC\uC9C1 \uC911\uC774\uBA74 \uBE44\uC6CC\uB450\uAE30"),
   is_current: external_exports.boolean().optional(),
-  description: external_exports.string().optional(),
-  achievements: external_exports.array(external_exports.string()).optional().describe("\uC131\uACFC/\uC5C5\uC801 (\uC815\uB7C9 \uC9C0\uD45C \uAD8C\uC7A5)"),
-  tech: external_exports.array(external_exports.string()).optional().describe("\uC0AC\uC6A9 \uAE30\uC220/\uB3C4\uAD6C"),
+  description: optBody,
+  achievements: strList.optional().describe("\uC131\uACFC/\uC5C5\uC801 (\uC815\uB7C9 \uC9C0\uD45C \uAD8C\uC7A5)"),
+  tech: strList.optional().describe("\uC0AC\uC6A9 \uAE30\uC220/\uB3C4\uAD6C"),
   order_index: external_exports.number().optional()
 });
 var ExperienceRecordSchema = external_exports.object({
@@ -75625,14 +75638,14 @@ var ExperienceRecordSchema = external_exports.object({
   order_index: external_exports.number()
 });
 var ProjectInputSchema = external_exports.object({
-  name: external_exports.string().min(1),
-  role: external_exports.string().optional(),
-  description: external_exports.string().optional(),
-  highlights: external_exports.array(external_exports.string()).optional(),
-  tech: external_exports.array(external_exports.string()).optional(),
+  name: reqLine,
+  role: optLine,
+  description: optBody,
+  highlights: strList.optional(),
+  tech: strList.optional(),
   url: SafeUrlOptional,
-  start_date: external_exports.string().optional(),
-  end_date: external_exports.string().optional(),
+  start_date: optLine,
+  end_date: optLine,
   order_index: external_exports.number().optional()
 });
 var ProjectRecordSchema = external_exports.object({
@@ -75648,9 +75661,9 @@ var ProjectRecordSchema = external_exports.object({
   order_index: external_exports.number()
 });
 var SkillInputSchema = external_exports.object({
-  name: external_exports.string().min(1),
-  category: external_exports.string().optional().describe("\uC5B8\uC5B4/\uD504\uB808\uC784\uC6CC\uD06C/\uD234/\uC18C\uD504\uD2B8\uC2A4\uD0AC \uB4F1"),
-  level: external_exports.string().optional().describe("\uC0C1/\uC911/\uD558 \uB610\uB294 \uC790\uC720 \uC11C\uC220"),
+  name: reqLine,
+  category: external_exports.string().max(MAX_LINE).optional().describe("\uC5B8\uC5B4/\uD504\uB808\uC784\uC6CC\uD06C/\uD234/\uC18C\uD504\uD2B8\uC2A4\uD0AC \uB4F1"),
+  level: external_exports.string().max(MAX_LINE).optional().describe("\uC0C1/\uC911/\uD558 \uB610\uB294 \uC790\uC720 \uC11C\uC220"),
   years: external_exports.number().optional(),
   order_index: external_exports.number().optional()
 });
@@ -75664,11 +75677,11 @@ var SkillRecordSchema = external_exports.object({
 });
 var DocumentInputSchema = external_exports.object({
   kind: external_exports.enum(DOCUMENT_KINDS),
-  title: external_exports.string().min(1),
-  content: external_exports.string().describe("Markdown \uB610\uB294 \uC77C\uBC18 \uD14D\uC2A4\uD2B8 \uBCF8\uBB38"),
+  title: reqLine,
+  content: reqBody.describe("Markdown \uB610\uB294 \uC77C\uBC18 \uD14D\uC2A4\uD2B8 \uBCF8\uBB38"),
   source: external_exports.enum(CONTENT_SOURCES).optional(),
   is_primary: external_exports.boolean().optional().describe("\uB300\uD45C \uBB38\uC11C \uC5EC\uBD80"),
-  tags: external_exports.array(external_exports.string()).optional()
+  tags: strList.optional()
 });
 var DocumentRecordSchema = external_exports.object({
   ...baseRecord,
@@ -75680,19 +75693,19 @@ var DocumentRecordSchema = external_exports.object({
   tags: external_exports.array(external_exports.string())
 });
 var CoverLetterInputSchema = external_exports.object({
-  title: external_exports.string().min(1),
-  job_id: external_exports.string().optional().describe("\uD2B9\uC815 \uACF5\uACE0\uC5D0 \uC5F0\uACB0\uD560 \uACBD\uC6B0"),
+  title: reqLine,
+  job_id: optLine.describe("\uD2B9\uC815 \uACF5\uACE0\uC5D0 \uC5F0\uACB0\uD560 \uACBD\uC6B0"),
   is_primary: external_exports.boolean().optional(),
-  content: external_exports.string().optional().describe("\uCD08\uAE30 \uBC84\uC804 \uBCF8\uBB38 (\uC788\uC73C\uBA74 v1\uB85C \uC800\uC7A5)"),
+  content: optBody.describe("\uCD08\uAE30 \uBC84\uC804 \uBCF8\uBB38 (\uC788\uC73C\uBA74 v1\uB85C \uC800\uC7A5)"),
   source: external_exports.enum(CONTENT_SOURCES).optional(),
-  note: external_exports.string().optional().describe("\uCD08\uAE30 \uBC84\uC804 \uBA54\uBAA8")
+  note: optNote.describe("\uCD08\uAE30 \uBC84\uC804 \uBA54\uBAA8")
 });
 var CoverLetterVersionInputSchema = external_exports.object({
-  cover_letter_id: external_exports.string().optional().describe("\uAE30\uC874 \uC790\uAE30\uC18C\uAC1C\uC11C\uC5D0 \uC0C8 \uBC84\uC804 \uCD94\uAC00 \uC2DC"),
-  title: external_exports.string().optional().describe("\uC0C8 \uC790\uAE30\uC18C\uAC1C\uC11C\uB97C \uB9CC\uB4E4 \uB54C \uC81C\uBAA9"),
-  job_id: external_exports.string().optional(),
-  content: external_exports.string().min(1),
-  note: external_exports.string().optional().describe("\uC774 \uBC84\uC804\uC758 \uBCC0\uACBD \uC694\uC57D (\uC608: \uC9C0\uC6D0\uB3D9\uAE30 \uBCF4\uAC15)"),
+  cover_letter_id: optLine.describe("\uAE30\uC874 \uC790\uAE30\uC18C\uAC1C\uC11C\uC5D0 \uC0C8 \uBC84\uC804 \uCD94\uAC00 \uC2DC"),
+  title: external_exports.string().max(MAX_LINE).optional().describe("\uC0C8 \uC790\uAE30\uC18C\uAC1C\uC11C\uB97C \uB9CC\uB4E4 \uB54C \uC81C\uBAA9"),
+  job_id: optLine,
+  content: reqBody,
+  note: optNote.describe("\uC774 \uBC84\uC804\uC758 \uBCC0\uACBD \uC694\uC57D (\uC608: \uC9C0\uC6D0\uB3D9\uAE30 \uBCF4\uAC15)"),
   source: external_exports.enum(CONTENT_SOURCES).optional(),
   set_current: external_exports.boolean().optional().describe("\uC774 \uBC84\uC804\uC744 \uD604\uC7AC \uBC84\uC804\uC73C\uB85C \uC9C0\uC815 (\uAE30\uBCF8 true)")
 });
@@ -75716,16 +75729,16 @@ var CoverLetterRecordSchema = external_exports.object({
   versions: external_exports.array(CoverLetterVersionRecordSchema).optional()
 });
 var JobInputSchema = external_exports.object({
-  company: external_exports.string().min(1),
-  position: external_exports.string().min(1).describe("\uC9C1\uBB34/\uD3EC\uC9C0\uC158\uBA85"),
+  company: reqLine,
+  position: reqLine.describe("\uC9C1\uBB34/\uD3EC\uC9C0\uC158\uBA85"),
   url: SafeUrlOptional,
-  location: external_exports.string().optional(),
-  employment_type: external_exports.string().optional(),
-  description: external_exports.string().optional().describe("\uACF5\uACE0 \uC6D0\uBB38 \uB610\uB294 \uC815\uB9AC\uB41C \uD14D\uC2A4\uD2B8"),
-  requirements: external_exports.array(external_exports.string()).optional().describe("\uC790\uACA9\uC694\uAC74/\uC6B0\uB300\uC0AC\uD56D \uD575\uC2EC"),
-  keywords: external_exports.array(external_exports.string()).optional().describe("\uD575\uC2EC \uD0A4\uC6CC\uB4DC"),
-  deadline: external_exports.string().optional().describe("\uB9C8\uAC10\uC77C YYYY-MM-DD"),
-  source: external_exports.string().optional().describe("\uCD9C\uCC98 (\uC0AC\uB78C\uC778/\uC6D0\uD2F0\uB4DC/\uC9C1\uC811 \uC785\uB825 \uB4F1)")
+  location: optLine,
+  employment_type: optLine,
+  description: optBody.describe("\uACF5\uACE0 \uC6D0\uBB38 \uB610\uB294 \uC815\uB9AC\uB41C \uD14D\uC2A4\uD2B8"),
+  requirements: strList.optional().describe("\uC790\uACA9\uC694\uAC74/\uC6B0\uB300\uC0AC\uD56D \uD575\uC2EC"),
+  keywords: strList.optional().describe("\uD575\uC2EC \uD0A4\uC6CC\uB4DC"),
+  deadline: external_exports.string().max(MAX_LINE).optional().describe("\uB9C8\uAC10\uC77C YYYY-MM-DD"),
+  source: external_exports.string().max(MAX_LINE).optional().describe("\uCD9C\uCC98 (\uC0AC\uB78C\uC778/\uC6D0\uD2F0\uB4DC/\uC9C1\uC811 \uC785\uB825 \uB4F1)")
 });
 var JobRecordSchema = external_exports.object({
   ...baseRecord,
@@ -75741,14 +75754,14 @@ var JobRecordSchema = external_exports.object({
   source: external_exports.string().nullable()
 });
 var FitAnalysisInputSchema = external_exports.object({
-  job_id: external_exports.string().describe("\uBD84\uC11D \uB300\uC0C1 \uACF5\uACE0 ID"),
+  job_id: reqLine.describe("\uBD84\uC11D \uB300\uC0C1 \uACF5\uACE0 ID"),
   score: external_exports.number().min(0).max(100).optional().describe("\uC885\uD569 \uC801\uD569\uB3C4 0~100"),
-  summary: external_exports.string().optional().describe("\uD55C\uB450 \uBB38\uB2E8 \uC694\uC57D"),
-  strengths: external_exports.array(external_exports.string()).optional().describe("\uAC15\uC810 / \uC798 \uB9DE\uB294 \uBD80\uBD84"),
-  gaps: external_exports.array(external_exports.string()).optional().describe("\uBD80\uC871\uD55C \uBD80\uBD84 / \uBCF4\uC644 \uD544\uC694"),
-  matched_keywords: external_exports.array(external_exports.string()).optional(),
-  missing_keywords: external_exports.array(external_exports.string()).optional(),
-  recommendations: external_exports.array(external_exports.string()).optional().describe("\uC790\uAE30\uC18C\uAC1C\uC11C/\uC9C0\uC6D0 \uC804\uB7B5 \uC81C\uC548")
+  summary: external_exports.string().max(MAX_NOTE).optional().describe("\uD55C\uB450 \uBB38\uB2E8 \uC694\uC57D"),
+  strengths: strList.optional().describe("\uAC15\uC810 / \uC798 \uB9DE\uB294 \uBD80\uBD84"),
+  gaps: strList.optional().describe("\uBD80\uC871\uD55C \uBD80\uBD84 / \uBCF4\uC644 \uD544\uC694"),
+  matched_keywords: strList.optional(),
+  missing_keywords: strList.optional(),
+  recommendations: strList.optional().describe("\uC790\uAE30\uC18C\uAC1C\uC11C/\uC9C0\uC6D0 \uC804\uB7B5 \uC81C\uC548")
 });
 var FitAnalysisRecordSchema = external_exports.object({
   ...baseRecord,
@@ -75762,18 +75775,18 @@ var FitAnalysisRecordSchema = external_exports.object({
   recommendations: external_exports.array(external_exports.string())
 });
 var ApplicationInputSchema = external_exports.object({
-  job_id: external_exports.string(),
+  job_id: reqLine,
   status: external_exports.enum(APPLICATION_STATUSES).optional(),
-  resume_id: external_exports.string().optional(),
-  cover_letter_id: external_exports.string().optional(),
-  applied_at: external_exports.string().optional(),
-  notes: external_exports.string().optional()
+  resume_id: optLine,
+  cover_letter_id: optLine,
+  applied_at: optLine,
+  notes: optNote
 });
 var ApplicationStatusUpdateSchema = external_exports.object({
-  job_id: external_exports.string().optional(),
-  application_id: external_exports.string().optional(),
+  job_id: optLine,
+  application_id: optLine,
   status: external_exports.enum(APPLICATION_STATUSES),
-  note: external_exports.string().optional().describe("\uC0C1\uD0DC \uBCC0\uACBD \uC0AC\uC720/\uBA54\uBAA8")
+  note: optNote.describe("\uC0C1\uD0DC \uBCC0\uACBD \uC0AC\uC720/\uBA54\uBAA8")
 });
 var ApplicationRecordSchema = external_exports.object({
   ...baseRecord,
@@ -75785,24 +75798,24 @@ var ApplicationRecordSchema = external_exports.object({
   notes: external_exports.string().nullable()
 });
 var StarGuideSchema = external_exports.object({
-  question: external_exports.string(),
-  situation: external_exports.string().optional(),
-  task: external_exports.string().optional(),
-  action: external_exports.string().optional(),
-  result: external_exports.string().optional()
+  question: external_exports.string().max(MAX_NOTE),
+  situation: optNote,
+  task: optNote,
+  action: optNote,
+  result: optNote
 });
 var InterviewQuestionSchema = external_exports.object({
-  question: external_exports.string(),
-  intent: external_exports.string().optional().describe("\uC9C8\uBB38 \uC758\uB3C4"),
-  followups: external_exports.array(external_exports.string()).optional().describe("\uC608\uC0C1 \uAF2C\uB9AC \uC9C8\uBB38"),
-  answer_outline: external_exports.string().optional().describe("\uB2F5\uBCC0 \uAC00\uC774\uB4DC/\uD575\uC2EC \uD3EC\uC778\uD2B8")
+  question: external_exports.string().max(MAX_NOTE),
+  intent: external_exports.string().max(MAX_NOTE).optional().describe("\uC9C8\uBB38 \uC758\uB3C4"),
+  followups: strList.optional().describe("\uC608\uC0C1 \uAF2C\uB9AC \uC9C8\uBB38"),
+  answer_outline: optBody.describe("\uB2F5\uBCC0 \uAC00\uC774\uB4DC/\uD575\uC2EC \uD3EC\uC778\uD2B8")
 });
 var InterviewPrepInputSchema = external_exports.object({
-  job_id: external_exports.string(),
-  questions: external_exports.array(InterviewQuestionSchema).optional(),
-  star_guides: external_exports.array(StarGuideSchema).optional(),
-  self_introduction: external_exports.string().optional().describe("1\uBD84 \uC790\uAE30\uC18C\uAC1C \uCD08\uC548"),
-  notes: external_exports.string().optional().describe("\uBA74\uC811 \uD6C4\uAE30/\uBA54\uBAA8")
+  job_id: reqLine,
+  questions: external_exports.array(InterviewQuestionSchema).max(MAX_ITEMS).optional(),
+  star_guides: external_exports.array(StarGuideSchema).max(MAX_ITEMS).optional(),
+  self_introduction: optBody.describe("1\uBD84 \uC790\uAE30\uC18C\uAC1C \uCD08\uC548"),
+  notes: optNote.describe("\uBA74\uC811 \uD6C4\uAE30/\uBA54\uBAA8")
 });
 var InterviewPrepRecordSchema = external_exports.object({
   ...baseRecord,
@@ -75856,7 +75869,7 @@ var ApplicationContextSchema = external_exports.object({
 });
 
 // packages/shared/src/build-info.ts
-var APP_VERSION = true ? "0.1.2" : "0.0.0-dev";
+var APP_VERSION = true ? "0.1.4" : "0.0.0-dev";
 var BUNDLED = true;
 
 // packages/shared/src/index.ts
@@ -77931,9 +77944,19 @@ async function finishPdf(buf, base) {
       });
     return base("pdf", { text, bytes: buf.length, warnings: pageWarnings });
   } catch (e) {
+    const name = e && typeof e === "object" && "name" in e ? String(e.name) : "";
+    if (name === "PasswordException") {
+      return base("unsupported", {
+        bytes: buf.length,
+        warnings: [
+          "\uC774 PDF\uB294 \uC554\uD638(\uBE44\uBC00\uBC88\uD638)\uB85C \uBCF4\uD638\uB418\uC5B4 \uC788\uC5B4 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. PDF \uBDF0\uC5B4\uC5D0\uC11C \uC554\uD638\uB97C \uD574\uC81C\uD574 \uB2E4\uC2DC \uC800\uC7A5\uD558\uAC70\uB098, \uB0B4\uC6A9\uC744 \uD14D\uC2A4\uD2B8\uB85C \uBD99\uC5EC\uB123\uC5B4 \uC8FC\uC138\uC694."
+        ],
+        unsupported: true
+      });
+    }
     return base("unsupported", {
       bytes: buf.length,
-      warnings: [`PDF\uB97C \uC77D\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4(${errMsg(e)}). \uC554\uD638\uD654\uB418\uC5C8\uAC70\uB098 \uC190\uC0C1\uB41C PDF\uC77C \uC218 \uC788\uC2B5\uB2C8\uB2E4. \uD14D\uC2A4\uD2B8\uB85C \uBD99\uC5EC\uB123\uC5B4 \uC8FC\uC138\uC694.`],
+      warnings: [`PDF\uB97C \uC77D\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4(${errMsg(e)}). \uC190\uC0C1\uB418\uC5C8\uAC70\uB098 \uC9C0\uC6D0\uD558\uC9C0 \uC54A\uB294 PDF\uC77C \uC218 \uC788\uC2B5\uB2C8\uB2E4. \uD14D\uC2A4\uD2B8\uB85C \uBD99\uC5EC\uB123\uC5B4 \uC8FC\uC138\uC694.`],
       unsupported: true
     });
   }
@@ -78487,13 +78510,12 @@ ${lines}`;
     name: "add_resume",
     title: "\uC774\uB825\uC11C/\uACBD\uB825\uAE30\uC220\uC11C \uCD94\uAC00",
     description: "\uC774\uB825\uC11C, \uACBD\uB825\uAE30\uC220\uC11C, \uD3EC\uD2B8\uD3F4\uB9AC\uC624 \uB4F1 \uBB38\uC11C\uB97C \uC800\uC7A5\uD569\uB2C8\uB2E4. content\uC5D0\uB294 \uC0AC\uC6A9\uC790\uAC00 \uC5C5\uB85C\uB4DC/\uBD99\uC5EC\uB123\uC740 \uD14D\uC2A4\uD2B8(\uB610\uB294 \uC815\uB9AC\uD55C Markdown)\uB97C \uB123\uC73C\uC138\uC694. kind \uAE30\uBCF8\uAC12\uC740 resume\uC785\uB2C8\uB2E4. is_primary=true\uB85C \uB300\uD45C \uBB38\uC11C\uB97C \uC9C0\uC815\uD558\uBA74 get_application_context\uC758 primary_resume\uB85C \uB178\uCD9C\uB429\uB2C8\uB2E4.",
+    // Reuse the shared (length-bounded, whitespace-rejecting) Document schema so
+    // the MCP ingestion path — the primary route for résumé text — inherits the
+    // same caps as the web API. kind stays optional here (defaults to resume).
     inputSchema: {
-      title: external_exports.string().describe("\uBB38\uC11C \uC81C\uBAA9"),
-      content: external_exports.string().describe("\uBCF8\uBB38 (Markdown/\uC77C\uBC18 \uD14D\uC2A4\uD2B8)"),
-      kind: external_exports.enum(DOCUMENT_KINDS).optional().describe("resume(\uC774\uB825\uC11C)/career_description(\uACBD\uB825\uAE30\uC220\uC11C)/portfolio/other"),
-      source: external_exports.enum(CONTENT_SOURCES).optional(),
-      is_primary: external_exports.boolean().optional().describe("\uB300\uD45C \uBB38\uC11C \uC5EC\uBD80"),
-      tags: external_exports.array(external_exports.string()).optional()
+      ...DocumentInputSchema.omit({ kind: true }).shape,
+      kind: external_exports.enum(DOCUMENT_KINDS).optional().describe("resume(\uC774\uB825\uC11C)/career_description(\uACBD\uB825\uAE30\uC220\uC11C)/portfolio/other")
     },
     handler: (args) => {
       const doc = addResume(args);