feat(lint): P84 — lint --fix-wiki-invocations for legacy wiki self-ingest cleanup (#82 follow-up)

[hang-in]

Summary

P83 (#85) fast-follow. 머지 전에 이미 ingest 된 wiki invocation 세션을 사용자가 한 번 실행해 일괄 archive 할 수 있는 lint 옵션 추가.

• ingest/lint.rs: check_wiki_invocations() 함수 추가 — L011 신규. cwd 가 [vault].path 와 일치하는 codex/claude 세션을 Info 레벨로 finding.
• commands/lint.rs: --fix-wiki-invocations flag 처리하는 run_fix_wiki_invocations() — SessionRepo::archive_session 호출.
• main.rs: clap arg + call site 갱신.
• 신규 unit test 5건.

Why

P83 marker 는 신규 ingest 만 보호. 기존 세션은 marker 가 없어 자동 정리 안 됨. dicebattle (issue #82) 등 사용자가 수동으로 secall archive 또는 파일 삭제로 정리해야 하는 부담 해소.

Usage

```bash

1. 검사 (자동 fix 없이)

secall lint

→ L011 [INFO] codex session at vault path (likely wiki self-invocation): cwd=/Users/me/Documents/Obsidian Vault/seCall

2. 자동 archive

secall lint --fix-wiki-invocations

→ [fix-wiki-invocations] Archiving 12 wiki invocation session(s)...

3. 의도와 다르면 개별 복원 (reversible)

secall unarchive
```

Detection rule (L011)

```sql
SELECT id, cwd, agent FROM sessions
WHERE is_archived = 0
AND cwd IS NOT NULL
AND agent IN ('codex', 'claude-code')
```
→ `cwd == config.vault.path` 인 경우 L011 finding.

근거: `wiki/{codex,claude}.rs` 가 subprocess 를 `cwd = vault_path` 으로 spawn. wiki 호출이 만든 세션의 cwd 는 정확히 vault path.

Risks

• False positive: 사용자가 vault 디렉토리에서 codex/claude 일반 작업한 경우 archive 됨. 대응: `secall unarchive` 로 복구. 게다가 vault 는 일반적으로 wiki 저장소라 직접 작업 빈도 낮음.

Test plan

• `cargo fmt --all -- --check` clean
• `cargo clippy --workspace --all-targets -- -D warnings` clean
• `cargo test -p secall-core --lib ingest::lint` 18 passed (신규 L011 5건 포함)
• `cargo test --workspace --no-fail-fast` all green (lib 426 + integration)

🤖 Generated with Claude Code

[gemini-code-assist]

Code Review

This pull request introduces a new lint rule, L011, to detect legacy wiki self-invocation sessions where the current working directory matches the vault path for 'codex' and 'claude-code' agents. It also adds a --fix-wiki-invocations command-line flag to automate the archiving of these sessions, along with corresponding unit tests and documentation. Feedback was provided to optimize the linting process by moving the directory filtering logic directly into the SQL query to improve performance and simplify the code.

[gemini-code-assist]

The filtering of sessions by cwd can be performed directly in the SQL query instead of fetching all sessions for the specified agents and filtering them in Rust. This is more efficient as it reduces the amount of data transferred from the database and the number of iterations in the application code. Additionally, it simplifies the logic by removing the conditional check inside the loop.

    let mut stmt = conn.prepare(
        "SELECT id, cwd, agent FROM sessions \
         WHERE is_archived = 0 \
           AND cwd = ?1 \
           AND agent IN ('codex', 'claude-code')",
    )?;
    let rows = stmt.query_map([&vault_str], |r| {
        Ok((
            r.get::<_, String>(0)?,
            r.get::<_, String>(1)?,
            r.get::<_, String>(2)?,
        ))
    })?;
    for row in rows {
        let (id, cwd, agent) = row?;
        findings.push(LintFinding {
            code: "L011".to_string(),
            severity: Severity::Info,
            message: format!(
                "{agent} session at vault path (likely wiki self-invocation): cwd={cwd}"
            ),
            session_id: Some(id),
            path: None,
        });
    }

[hang-in]

Gemini 리뷰 반영 (commit 7337d3e). cwd 비교를 SQL WHERE 절로 옮겨 DB level 필터링 + Rust loop 조건문 제거. cargo fmt + clippy -D warnings + test 모두 통과.