@yoonion/mimi-seed-mcp 0.19.18 → 0.20.0

package/README.md

@@ -8,7 +8,8 @@ Start with a lightweight, account-free check in your app repository (Node 20+):
 npx -y mimi-seed@latest check --local
 ```
 
-Review identifiers, Target API and detectable Play Billing evidence first. Then connect stores for
+Review identifiers, Target API, detectable Play Billing, pinned Xcode / App Store SDK minimum and legacy FCM API
+evidence first. Then connect stores for
 metadata, screenshot and uploaded-build checks. Local results do not guarantee store approval.
 
 [Install the plugin for Claude Code or Codex](https://github.com/jeonghwanko/mimi-seed-sdk#30-second-setup)
@@ -40,7 +41,8 @@ MCP 패키지를 이미 설치했다면 같은 검사기의 직접 bin도 사용
 npx -y @yoonion/mimi-seed-mcp mimi-seed-release-doctor .
 ```
 
-앱 식별자, 일반 Android 앱의 Target API 제출 기준, Google Play Billing 지원 마감을 확인하며 정책
+앱 식별자, 일반 Android 앱의 Target API 제출 기준, Google Play Billing 지원 마감, 고정된 Xcode의 App Store
+SDK 최소 요건, 레거시 FCM API 사용을 확인하며 정책
 결과에는 근거 파일과 공식 출처를 함께 표시합니다. 모노레포에서는 `.` 대신 앱 경로를 전달하세요.
 CI에서는 `--fail-on-blocker`, 기계가 읽는 결과에는 `--json`을 추가할 수 있습니다. Wear OS, Android
 TV, Android Automotive OS, Android XR은 Target API 예외가 있으므로 카테고리 확인 경고를 냅니다.
@@ -125,32 +127,36 @@ export ANTHROPIC_API_KEY=sk-ant-...
 
 ---
 
+<!-- generated:readme-tools-heading:start — edit scripts/docs-spec.mjs, then npm run plugin:sync -->
 ## 제공 도구 (150+ 개 · 22개 영역)
+<!-- generated:readme-tools-heading:end -->
 
+<!-- generated:readme-tools-table:start — edit scripts/docs-spec.mjs, then npm run plugin:sync -->
 | 영역 | 도구 수 | 주요 도구 |
 |------|---------|-----------|
 | App Store Connect | 64 | `appstore_submit_for_review` / `appstore_get_weekly_insight` / `appstore_update_product_review_note` / `appstore_upload_product_review_screenshot` |
 | Google Play | 39 | `playstore_submit_release` / `playstore_promote_release` / `playstore_replace_images` / `playstore_reply_review` / `playstore_verify_service_account` |
 | Firebase | 21 | `firebase_create_project` / `firebase_get_remote_config_overview` / `firebase_get_android_config` / `firebase_create_ios_app` |
 | AdMob | 7 | `admob_list_apps` / `admob_create_ad_unit` / `admob_get_today_earnings` / `admob_get_report` |
-| CI/CD (GitHub Actions · GitLab) | 6 | `ci_trigger_build` / `ci_get_build_status` / `ci_list_workflows` / `ci_cancel_build` |
+| CI (GitHub Actions / GitLab) | 6 | `ci_trigger_build` / `ci_get_build_status` / `ci_list_workflows` / `ci_cancel_build` |
 | Jenkins (크리덴셜 + 잡) | 10 | `jenkins_create_credential` / `jenkins_upload_keystore` / `jenkins_create_job` / `jenkins_update_job` |
-| GA4 | 8 | `ga4_create_property` / `ga4_create_data_stream` / `ga4_plan_bigquery_link` / `ga4_create_bigquery_link` / `ga4_run_report` |
+| GA4 (Google Analytics 4) | 8 | `ga4_create_property` / `ga4_create_data_stream` / `ga4_plan_bigquery_link` / `ga4_create_bigquery_link` / `ga4_run_report` |
 | Search Console | 6 | `gsc_inspect_url` / `gsc_search_analytics` / `gsc_submit_sitemap` |
 | Google Ads | 6 | `googleads_list_campaigns` / `googleads_get_uac_report` / `googleads_get_campaign_report` |
 | Facebook | 6 | `facebook_post_photo` / `facebook_post_multi_photo` / `facebook_list_pages` |
 | Google Cloud IAM | 5 | `iam_create_service_account` / `iam_create_key` / `iam_add_iam_policy_binding` |
-| GCP Billing | 4 | `gcp_get_billing_info` / `gcp_list_billing_projects` / `gcp_list_budgets` / `gcp_create_budget` |
 | BigQuery | 5 | `bigquery_run_query` / `bigquery_list_datasets` / `bigquery_get_table_schema` |
+| GCP Billing | 4 | `gcp_get_billing_info` / `gcp_list_billing_projects` / `gcp_list_budgets` / `gcp_create_budget` |
 | Threads | 7 | `threads_post` / `threads_post_video` / `threads_post_carousel` / `threads_refresh_token` |
 | TikTok Business | 7 | `tiktok_business_plan_video_post` / `tiktok_business_publish_video` / `tiktok_business_get_publish_status` |
-| 점검 / 위험 | 5 | `playstore_check_submission_risks` / `appstore_check_submission_risks` / `android_check_billing_compliance` / `screenshot_validate` / `release_status` |
+| 출시 점검 | 5 | `playstore_check_submission_risks` / `appstore_check_submission_risks` / `android_check_billing_compliance` / `screenshot_validate` / `release_status` |
 | Instagram | 4 | `instagram_post_image` / `instagram_post_carousel` / `instagram_save_config` |
 | Android 서명 | 3 | `android_signing_setup` / `android_generate_keystore` / `jenkins_upload_playstore_sa` |
-| 인증 | 4 | `mimi_seed_status` / `mimi_seed_auth_start` / `mimi_seed_auth_status` / `mimi_seed_remote_sync_credentials` |
+| 인증 / 연결 진단 | 4 | `mimi_seed_status` / `mimi_seed_auth_start` / `mimi_seed_auth_status` / `mimi_seed_remote_sync_credentials` |
 | AI (Claude) | 2 | `generate_release_notes_from_commits` / `generate_review_reply` |
-| 영상 제작·YouTube | 15 | `youtube_upload_video` / `youtube_get_video_status` / `youtube_update_video_privacy` / `video_plan_from_story` / `video_render` |
+| 영상 제작 · YouTube 업로드 | 15 | `youtube_upload_video` / `youtube_get_video_status` / `youtube_update_video_privacy` / `video_plan_from_story` / `video_research_youtube` / `video_render` |
 | YouTube | 10 | `youtube_get_channel` / `youtube_list_videos` / `youtube_get_analytics_report` / `youtube_get_content_insights` / `youtube_update_video_metadata` / `youtube_set_thumbnail` / `youtube_schedule_video` / `youtube_list_comments` / `youtube_list_comment_replies` / `youtube_reply_comment` |
+<!-- generated:readme-tools-table:end -->
 
 > 인앱 결제(IAP·구독) 도구는 위 Play Store·App Store 카운트에 포함됩니다 — `appstore_create_inapp_purchase` · `appstore_update_product_review_note` · `appstore_upload_product_review_screenshot` 등.
 > 전체 카탈로그(항상 최신): [`docs/domain/tool-catalog.md`](../../docs/domain/tool-catalog.md)
@@ -245,7 +251,7 @@ git 커밋 내역을 Claude가 사용자 친화적인 릴리즈 노트로 변환
 tone 옵션: `friendly`(친근) / `professional`(정중) / `empathetic`(공감) / `brief`(간결)
 
 > ⚠ AI 생성 답변은 초안입니다. 게시 전 반드시 검토하세요.  
-> 답변 게시는 `playstore_reply_review` 도구를 사용하세요.
+> 답변 게시는 `playstore_reply_review` 도구를 사용하세요 — `confirm` 없이 부르면 dry-run preview 만 돌아오고, `confirm: true` 로 다시 불러야 게시됩니다.
 
 ---
 
@@ -260,7 +266,7 @@ tone 옵션: `friendly`(친근) / `professional`(정중) / `empathetic`(공감)
 Claude가 연쇄 호출:
 
 - `iam_create_service_account("my-project", "onesub-play-verifier", "onesub Play verifier")`
-- `iam_create_key("onesub-play-verifier@my-project.iam.gserviceaccount.com")` → JSON 반환
+- `iam_create_key("onesub-play-verifier@my-project.iam.gserviceaccount.com")` → 먼저 dry-run preview, 사용자 승인 후 `confirm: true` 로 재호출하면 JSON 반환
 - `playstore_verify_service_account(<json>, "com.yourapp.id")` → 아직 Play Console 권한이 없어서 403 반환 기대
 
 그 다음 **Play Console에서 수동으로** (또는 별도 androidpublisher.users API 호출):
@@ -284,6 +290,7 @@ Claude가 연쇄 호출:
 | `PEXELS_API_KEY` | Pexels 스톡 영상 검색 (선택) |
 | `OPENAI_API_KEY` | 장면 이미지 생성 (선택) |
 | `MIMI_SEED_FFMPEG_PATH` / `MIMI_SEED_FFPROBE_PATH` | FFmpeg/ffprobe가 PATH에 없을 때 실행 파일 경로 (선택) |
+| `MIMI_SEED_TOOLSETS` / `MIMI_SEED_TOOLSETS_EXCLUDE` | 노출할 도구 영역만 고른다 — 도메인 키(`playstore,appstore` …) 또는 그룹 `store` · `google` · `social` · `media` · `build` · `all` 쉼표 구분. 미지정 = 전체. `auth`·`checks` 는 항상 켜짐, 모르는 키는 stderr 경고 후 무시 (선택) |
 
 ---
 

package/assets/agent-guide.md

@@ -42,19 +42,21 @@ tools directly — but the *call order* and *safety rules* below still apply.
 
 ### Ready-made `select:` batches
 
-Every registered tool appears in at least one batch below (test-enforced), so a task you can name is a batch
-you can paste. Pick the row for the job; batching two rows in one `select:` call is fine.
+Every registered tool appears in at least one batch below (the table is generated from the tool manifest, and a
+new tool lands in its domain's batch automatically), so a task you can name is a batch you can paste. Pick the
+row for the job; batching two rows in one `select:` call is fine.
 
+<!-- generated:select-batches:start — edit scripts/docs-spec.mjs, then npm run plugin:sync -->
 | Goal | `ToolSearch` query |
 |------|--------------------|
 | First contact / "what's connected?" | `select:mimi_seed_status,mimi_seed_auth_status,mimi_seed_auth_start,mimi_seed_remote_sync_credentials` |
 | Release readiness (either store) | `select:release_status,playstore_check_submission_risks,appstore_check_submission_risks,screenshot_validate` |
 | Android Billing compliance | `select:android_check_billing_compliance,playstore_check_submission_risks` |
-| Play Store release | `select:playstore_get_app,playstore_list_tracks,playstore_update_release_notes,playstore_update_latest_release_notes,playstore_promote_release,playstore_submit_release,playstore_check_submission_risks,playstore_plan_release` |
+| Play Store release | `select:playstore_get_app,playstore_list_tracks,playstore_update_release_notes,playstore_promote_release,playstore_submit_release,playstore_check_submission_risks,playstore_plan_release` |
 | Play Store listing + images | `select:playstore_get_listing,playstore_update_listing,playstore_update_details,playstore_upload_image,playstore_list_images,playstore_replace_images,playstore_delete_all_images` |
 | Play Store reviews + stats | `select:playstore_list_reviews,playstore_reply_review,playstore_get_statistics,generate_review_reply` |
 | Play Store IAP / subscriptions | `select:playstore_list_products,playstore_list_inapp_products,playstore_list_subscriptions,playstore_create_onetime_product,playstore_create_subscription,playstore_update_product,playstore_update_product_listing,playstore_update_subscription_listing,playstore_update_product_state,playstore_delete_product` |
-| App Store / TestFlight | `select:appstore_list_apps,appstore_verify_credentials,appstore_get_app,appstore_list_versions,appstore_create_version,appstore_get_metadata,appstore_update_whats_new,appstore_list_builds,appstore_attach_build,appstore_attach_latest_build,appstore_list_beta_groups,appstore_submit_for_review,appstore_check_submission_risks,appstore_plan_release` |
+| App Store / TestFlight | `select:appstore_list_apps,appstore_verify_credentials,appstore_get_app,appstore_list_versions,appstore_create_version,appstore_get_metadata,appstore_update_whats_new,appstore_list_builds,appstore_attach_build,appstore_list_beta_groups,appstore_submit_for_review,appstore_check_submission_risks,appstore_plan_release` |
 | App Store release control (after approval) | `select:appstore_release_status,appstore_release_version,appstore_update_release_type,appstore_phased_release,appstore_list_versions` |
 | Pre-submission declarations (both stores) | `select:appstore_get_age_rating,appstore_update_age_rating,appstore_declare_encryption,appstore_get_availability,appstore_set_territory_availability,playstore_upload_data_safety` |
 | TestFlight external testing | `select:appstore_beta_status,appstore_update_beta_review_detail,appstore_update_beta_test_info,appstore_update_whats_to_test,appstore_submit_beta_review,appstore_set_beta_group_build,appstore_add_beta_testers,appstore_notify_beta_testers,appstore_list_beta_groups,appstore_list_builds` |
@@ -81,13 +83,14 @@ you can paste. Pick the row for the job; batching two rows in one `select:` call
 | TikTok Business video publish | `select:tiktok_business_auth_status,tiktok_business_get_account,tiktok_business_get_video_settings,tiktok_business_plan_video_post,tiktok_business_publish_video,tiktok_business_get_publish_status,tiktok_business_list_publish_audits` |
 | Jenkins credentials + jobs | `select:jenkins_status,jenkins_save_config,jenkins_list_credentials,jenkins_create_credential,jenkins_delete_credential,jenkins_upload_keystore,jenkins_upload_playstore_sa,jenkins_list_jobs,jenkins_get_job_config,jenkins_create_job,jenkins_update_job` |
 | CI (GitHub/GitLab) | `select:ci_save_config,ci_list_workflows,ci_trigger_build,ci_get_build_status,ci_list_recent_builds,ci_cancel_build` |
-| Android signing / keystore | `select:android_signing_setup,android_generate_keystore,jenkins_upload_keystore,jenkins_upload_playstore_sa` |
+| Android signing / keystore | `select:android_signing_setup,android_generate_keystore,jenkins_upload_keystore,jenkins_create_credential,jenkins_upload_playstore_sa` |
 | Service account end-to-end | `select:iam_list_service_accounts,iam_create_service_account,iam_list_keys,iam_create_key,iam_add_iam_policy_binding,setup_playstore_connection,playstore_register_service_account,playstore_verify_service_account,playstore_list_service_accounts,playstore_delete_service_account` |
 | Story → researched video | `select:video_save_plan,video_plan_from_story,video_research_youtube,video_search_stock_assets,video_synthesize_research,video_download_stock_assets,video_generate_image,video_add_local_asset,video_build_timeline,video_render,video_job_status,video_validate` |
 | YouTube upload / publish | `select:youtube_upload_video,youtube_get_video_status,youtube_update_video_privacy,youtube_update_video_metadata,youtube_set_thumbnail,youtube_schedule_video,mimi_seed_auth_start,mimi_seed_auth_status` |
 | YouTube channel + analytics | `select:youtube_get_channel,youtube_list_videos,youtube_get_analytics_report,mimi_seed_auth_start,mimi_seed_auth_status` |
 | YouTube comments | `select:youtube_list_comments,youtube_list_comment_replies,youtube_reply_comment,mimi_seed_auth_start,mimi_seed_auth_status` |
 | YouTube content insights | `select:youtube_get_content_insights,youtube_get_channel,youtube_list_videos,video_save_plan,mimi_seed_auth_start,mimi_seed_auth_status` |
+<!-- generated:select-batches:end -->
 
 ---
 
@@ -161,6 +164,8 @@ Credentials live under `~/.mimi-seed/` (legacy `~/.preseed/` is still read):
 | `social-profiles/<profile>.json` | Named Facebook/Instagram/Threads tokens selected by the current project's `.mimi-seed.json` |
 | `tiktok-business.json` | TikTok API for Business app credentials + short-term/refresh tokens (0600) |
 | `tiktok-business/plans`, `tiktok-business/audit`, `tiktok-business/locks` | Expiring post plans, deduplication/audit records, and atomic publish reservations; signed URL query strings are not written to audit records |
+| `keys/<sa>-<keyId>.json` | Service-account keys issued by `iam_create_key` (0600). The tool returns only this path |
+| `keystores/<app>-<timestamp>/upload.jks` + `signing.json` | Upload keystore and its alias/passwords from `android_generate_keystore` (0600). The tool returns only these paths |
 
 Notes that matter in practice:
 
@@ -174,6 +179,31 @@ Notes that matter in practice:
   `YOUTUBE_API_KEY` (reference research), `PEXELS_API_KEY` (licensed stock search), and
   `OPENAI_API_KEY` (generated images). Rendering needs FFmpeg on `PATH` or
   `MIMI_SEED_FFMPEG_PATH`.
+- Google API calls time out after 60 s by default. Media uploads (YouTube video/thumbnail, Play images) get
+  **3 hours** per call; set `MIMI_SEED_UPLOAD_TIMEOUT_MS` (milliseconds, positive integer) in the MCP server's
+  environment to change it for very large files or slow links.
+
+### Server configuration — limiting the tool surface (`MIMI_SEED_TOOLSETS`)
+
+Clients without lazy tool loading pay for every tool schema in context, and some cap the number of tools.
+The server can expose only the domains a project needs — set these in the MCP server's `env`:
+
+| Variable | Meaning |
+|----------|---------|
+| `MIMI_SEED_TOOLSETS` | Comma-separated domain keys from `mimi-seed://tools/catalog` (`playstore`, `appstore`, `firebase`, …) and/or groups: `store` (playstore · appstore · android · ai), `google` (firebase · admob · iam · billing · bigquery · ga4 · gsc · googleads), `social` (facebook · instagram · threads · tiktok · youtube), `media` (video · youtube), `build` (ci · jenkins · android), `all`. Unset = everything (default). |
+| `MIMI_SEED_TOOLSETS_EXCLUDE` | Same syntax; removed from the include set. |
+
+A few tools also belong to a second toolset: `youtube_upload_video` / `youtube_get_video_status` /
+`youtube_update_video_privacy` (`video` domain) are also in `youtube`, and `jenkins_upload_playstore_sa` (`android`)
+is also in `jenkins` — a tool is on when any of its toolsets is included and off when any is excluded.
+`auth` and `checks` are always on. Unknown keys are ignored with a warning on stderr (and if no include key is
+valid, everything stays on). `mimi_seed_status` prints the active toolsets on its second line — if a tool you
+expect is missing from the deferred list, check that line before concluding the tool doesn't exist.
+
+```json
+{ "mcpServers": { "mimi-seed": { "command": "npx", "args": ["-y", "@yoonion/mimi-seed-mcp"],
+  "env": { "MIMI_SEED_TOOLSETS": "store,build" } } } }
+```
 
 ---
 
@@ -184,8 +214,8 @@ per-domain inventory is [`docs/domain/tool-catalog.md`](domain/tool-catalog.md).
 
 | Domain | Representative tools |
 |--------|----------------------|
-| **Google Play** | `playstore_get_app` · `playstore_get_listing` · `playstore_update_listing` · `playstore_list_tracks` · `playstore_update_latest_release_notes` · `playstore_promote_release` · `playstore_submit_release` · `playstore_upload_image` · `playstore_replace_images` · `playstore_check_submission_risks` · `playstore_get_statistics` · `playstore_reply_review` · `playstore_register_service_account` |
-| **App Store Connect** | `appstore_list_apps` · `appstore_list_versions` · `appstore_create_version` · `appstore_update_whats_new` · `appstore_update_localization` · `appstore_list_builds` · `appstore_attach_latest_build` · `appstore_upload_screenshot` · `appstore_submit_for_review` · `appstore_cancel_review` · `appstore_list_beta_groups` · `appstore_reply_review` · `appstore_get_weekly_insight` |
+| **Google Play** | `playstore_get_app` · `playstore_get_listing` · `playstore_update_listing` · `playstore_list_tracks` · `playstore_update_release_notes` · `playstore_promote_release` · `playstore_submit_release` · `playstore_upload_image` · `playstore_replace_images` · `playstore_check_submission_risks` · `playstore_get_statistics` · `playstore_reply_review` · `playstore_register_service_account` |
+| **App Store Connect** | `appstore_list_apps` · `appstore_list_versions` · `appstore_create_version` · `appstore_update_whats_new` · `appstore_update_localization` · `appstore_list_builds` · `appstore_attach_build` · `appstore_upload_screenshot` · `appstore_submit_for_review` · `appstore_cancel_review` · `appstore_list_beta_groups` · `appstore_reply_review` · `appstore_get_weekly_insight` |
 | **Firebase** | `firebase_create_project` · `firebase_create_android_app` · `firebase_create_ios_app` · `firebase_get_android_config` · `firebase_enable_service` · `firebase_enable_common_services` · `firebase_get_remote_config_overview` · `firebase_list_*_apps` |
 | **AdMob** | `admob_create_app` · `admob_create_ad_unit` · `admob_list_ad_units` · `admob_get_today_earnings` · `admob_get_report` |
 | **CI/CD** | `ci_trigger_build` · `ci_get_build_status` · `ci_list_workflows` (**GitHub Actions / GitLab only**) |
@@ -209,14 +239,33 @@ per-domain inventory is [`docs/domain/tool-catalog.md`](domain/tool-catalog.md).
 ### Play Store release / promote
 1. `playstore_list_tracks` — see current track/version state.
 2. `playstore_check_submission_risks` (or `playstore_plan_release`) — surface blockers.
-3. Write missing listing/notes (`playstore_update_listing`, `playstore_update_latest_release_notes`, `playstore_upload_image`).
-4. `playstore_promote_release` / `playstore_submit_release` — **confirm first** (see §5).
+3. Write missing listing/notes (`playstore_update_listing`, `playstore_update_release_notes` — omit `versionCode` for the latest
+   release; `syncTracks` only works without `versionCode` — `playstore_upload_image`).
+4. `playstore_promote_release` / `playstore_submit_release` **without** `confirm` → show the returned dry-run preview to the user →
+   after an explicit go-ahead, call again with the same arguments plus `confirm: true` (see §5). This applies to every status, including `draft`.
 
 ### App Store TestFlight → review
 1. `appstore_list_apps` → `appstore_list_versions` (or `appstore_create_version`).
-2. `appstore_list_builds` → `appstore_attach_latest_build` (only `processingState=VALID`).
+2. `appstore_list_builds` → `appstore_attach_build` (omit `buildId` to attach the latest `processingState=VALID` build).
 3. `appstore_update_whats_new`, screenshots if needed.
-4. `appstore_check_submission_risks` → `appstore_submit_for_review` — **confirm first**.
+4. `appstore_check_submission_risks` → `appstore_submit_for_review` without `confirm` (dry-run preview) → user approves →
+   same call with `confirm: true`.
+
+### Service account key → Play / Jenkins (secrets stay on disk)
+1. `iam_create_service_account` (or reuse one) → `iam_create_key`. The key is written to
+   `~/.mimi-seed/keys/…json` and **only its path** comes back — the private key never enters the conversation.
+2. Pass that path, not the JSON: `playstore_verify_service_account(serviceAccountJsonPath=…)` →
+   `playstore_register_service_account(packageName, serviceAccountJsonPath=…)`, and/or
+   `jenkins_upload_playstore_sa(package_name, service_account_json_path=…)`.
+   Path params accept files **inside `~/.mimi-seed/keys/` only**. (`setup_playstore_connection` does
+   steps 1–2 in one call without surfacing the key.)
+
+### Android upload keystore → Jenkins
+1. `android_generate_keystore` → returns the paths of `upload.jks` and `signing.json` under
+   `~/.mimi-seed/keystores/`; passwords are not printed.
+2. `jenkins_upload_keystore(keystore_path=…)` and `jenkins_create_credential(secret_file=<signing.json>,
+   secret_field=storePassword|keyAlias|keyPassword)` — path params accept files **inside
+   `~/.mimi-seed/keystores/` only**. Never read `signing.json` into the chat to copy a value.
 
 ### Release notes from git
 `generate_release_notes_from_commits` (pass commit array + locales) → review with user →
@@ -265,20 +314,54 @@ contact sheet; codec validation alone is not a quality pass.
 
 ## 5. Safety — irreversible actions need explicit confirmation
 
-Never run these without the user's go-ahead in the same turn:
+Every tool marked **D** in the [tool catalog](domain/tool-catalog.md) — submit/promote/release, deletes,
+public posts and review replies, IAM keys and bindings, Jenkins job/credential overwrites, Play service-account
+setup, beta invites — is
+**confirm-gated by the server**, and its MCP annotations say `destructiveHint: true`. Call order:
+
+1. Call the tool **without** `confirm`. Nothing changes; it returns a dry-run preview (the generic one starts
+   with `🛑 DRY-RUN` and lists the arguments; some tools show the current remote state instead).
+2. Show that preview to the user and get an explicit go-ahead **in the same turn**.
+3. Call again with the **same arguments** plus `confirm: true`.
+
+Some **D** tools gate themselves (`ownGate` in the manifest) and ask for confirmation only on the dangerous
+path: `tiktok_business_publish_video` uses `confirmPublish`; `appstore_phased_release` runs
+`pause`/`resume`/`enable`/`status` directly; `jenkins_create_credential` / `jenkins_upload_keystore` /
+`jenkins_upload_playstore_sa` create a **new** id directly but return a dry-run when the id already exists
+(replacing it needs `confirm: true`).
+There is no argument-based exemption otherwise — `playstore_submit_release` / `playstore_promote_release` need
+`confirm: true` even with `status="draft"`. `youtube_upload_video` / `youtube_update_video_privacy` are writes,
+not **D** (private is reversible), but public/unlisted still needs `confirmVisible: true`.
+
+Never pass `confirm: true` on the first call, and never retry an uncertain public write automatically.
 
 | Action | Why |
 |--------|-----|
 | `playstore_submit_release` / `playstore_promote_release` with `status=completed` | Starts Google review / full rollout. Near-irreversible. |
-| `appstore_submit_for_review` | Submits to Apple review. |
-| `appstore_delete_screenshot_set`, `playstore_delete_all_images` | Deletes assets. |
+| `appstore_submit_for_review`, `appstore_release_version` | Submits to Apple review / publishes immediately. |
+| `appstore_delete_screenshot_set`, `playstore_delete_all_images`, `playstore_replace_images` | Deletes assets. |
 | `playstore_delete_product`, `jenkins_delete_credential`, `firebase_delete_*_app` | Destructive. |
+| `facebook_post_*`, `instagram_post_*`, `threads_post*`, `*_reply_review`, `youtube_reply_comment` | Public, outward-facing. |
+| `iam_create_key`, `iam_add_iam_policy_binding` | Issues a permanent credential / changes project IAM. |
 
 General rules:
 - Run `*_check_submission_risks` / `*_plan_release` **before** submitting, and show
   blockers to the user as a checklist first.
 - Pass file paths as **absolute paths**; never load image bytes into the conversation.
 - Prefer `status=draft` while iterating; flip to `completed` only on explicit request.
+- **Never copy a secret through the chat.** Tools that mint secrets (`iam_create_key`,
+  `android_generate_keystore`) write them to `~/.mimi-seed/` and return paths; hand those paths to the
+  consuming tool's `*_path` / `secret_file` parameter instead of reading the file.
+- `bigquery_run_query` is **read-only**: it dry-runs the SQL first and refuses anything that is not a
+  single `SELECT` (DML, DDL, scripts). "Read-only" means no data change, not no side effects: a `SELECT`
+  still bills scanned bytes, and one that calls remote functions, `ML.GENERATE_TEXT`-style model calls, or
+  `EXTERNAL_QUERY` still makes those external calls and costs. If it returns `jobComplete=false` with a
+  `jobId`, the rows are empty because the job did not finish — not because the result is empty.
+- `mimi_seed_remote_sync_credentials` only sends Play service accounts that are **registered**
+  (`playstore_list_service_accounts`), or — when the legacy single `play-service-account.json` exists — any
+  well-formed package name (it falls back to that SA). Other names are **skipped and listed**; App Store and the
+  allowed packages still sync. The preview shows the destination host, and the endpoint must be https (http only
+  for localhost).
 
 ---
 
@@ -302,6 +385,14 @@ General rules:
   against editing the same app with both tools at once. Do all listing writes via the
   API, or finish & publish your Console edits first — never interleave them.
 - **`ci_*` is GitHub/GitLab only.** It does not trigger Jenkins builds.
+- **Identifiers are validated at the schema.** `packageName` / `package_name(s)` must look like an
+  Android application id (`com.example.app`) and `bundleId` like an iOS bundle id; anything else
+  (`../x`, slashes, empty segments) is rejected with `Input validation error` before the tool runs.
+  Google resource ids (project, app, service-account email, AdMob/GA4/billing account) must be a single segment
+  (`A-Z a-z 0-9 - _ . : @`) — `../` is refused before any request. BigQuery ids follow BigQuery's own naming
+  rules (table names may contain Unicode and spaces), and Play ids may not be exactly `.` or `..`.
+- **FFmpeg location is configuration, not a tool argument.** The video/TikTok tools no longer take
+  `ffmpegPath`; set `MIMI_SEED_FFMPEG_PATH` / `MIMI_SEED_FFPROBE_PATH` or put FFmpeg on `PATH`.
 - **Reward/cash-out apps** are a sensitive Play category — flag policy implications to
   the user, but it does not block test-track distribution.
 
@@ -317,8 +408,9 @@ Available in any MCP client as native slash commands:
 - `/mimi-seed:review-inbox` — fetch unanswered reviews → draft replies
 
 MCP resources: `mimi-seed://auth/status` (live token state) · `mimi-seed://agent/guide`
-(this guide, served over MCP) · `mimi-seed://tools/catalog` (the full tool inventory by
-domain, with the credential each domain needs — read it to answer "what can Mimi Seed do?").
+(this guide, served over MCP) · `mimi-seed://tools/catalog` (the tools this server registered,
+by domain — filtered by `MIMI_SEED_TOOLSETS` — with write / destructive markers, deprecated aliases, and the
+credential each domain needs; read it to answer "what can Mimi Seed do?").
 
 ---
 

package/dist/admob/tools.d.ts

@@ -1,4 +1,5 @@
 import type { OAuth2Client } from 'google-auth-library';
+import type { admob_v1, admob_v1beta } from 'googleapis/build/src/apis/admob/index.js';
 /**
  * AdMob API 래퍼
  * v1: 조회 (stable)
@@ -11,19 +12,19 @@ export declare function listAccounts(auth: OAuth2Client): Promise<{
     currencyCode: string | null | undefined;
 }[]>;
 export declare function listApps(auth: OAuth2Client, accountId: string): Promise<{
-    name: any;
-    appId: any;
-    platform: any;
-    linkedAppInfo: any;
-    manualAppInfo: any;
+    name: string | null | undefined;
+    appId: string | null | undefined;
+    platform: string | null | undefined;
+    linkedAppInfo: admob_v1.Schema$AppLinkedAppInfo | undefined;
+    manualAppInfo: admob_v1.Schema$AppManualAppInfo | undefined;
 }[]>;
 export declare function listAdUnits(auth: OAuth2Client, accountId: string): Promise<{
-    name: any;
-    adUnitId: any;
-    adFormat: any;
-    adTypes: any;
-    displayName: any;
-    appId: any;
+    name: string | null | undefined;
+    adUnitId: string | null | undefined;
+    adFormat: string | null | undefined;
+    adTypes: string[] | null | undefined;
+    displayName: string | null | undefined;
+    appId: string | null | undefined;
 }[]>;
 export declare function getNetworkReport(auth: OAuth2Client, accountId: string, startDate: {
     year: number;
@@ -33,8 +34,8 @@ export declare function getNetworkReport(auth: OAuth2Client, accountId: string,
     year: number;
     month: number;
     day: number;
-}): Promise<import("googleapis/build/src/apis/admob/v1.js").admob_v1.Schema$GenerateNetworkReportResponse>;
-export declare function getTodayEarnings(auth: OAuth2Client, accountId: string): Promise<import("googleapis/build/src/apis/admob/v1.js").admob_v1.Schema$GenerateNetworkReportResponse>;
+}): Promise<admob_v1.Schema$GenerateNetworkReportResponse>;
+export declare function getTodayEarnings(auth: OAuth2Client, accountId: string): Promise<admob_v1.Schema$GenerateNetworkReportResponse>;
 export type AdFormat = 'BANNER' | 'INTERSTITIAL' | 'REWARDED' | 'REWARDED_INTERSTITIAL' | 'APP_OPEN' | 'NATIVE';
 /**
  * adFormat → adTypes 파생 (순수 함수 — 테스트 대상).
@@ -45,5 +46,5 @@ export type AdFormat = 'BANNER' | 'INTERSTITIAL' | 'REWARDED' | 'REWARDED_INTERS
 export declare function adTypesForFormat(adFormat: AdFormat): string[];
 export declare function createApp(auth: OAuth2Client, accountId: string, platform: 'ANDROID' | 'IOS', displayName: string, 
 /** 스토어에 게시된 앱이면 store ID 로 링크 (Android=패키지명, iOS=App Store 숫자 ID). 없으면 manual(unlinked) 앱. */
-appStoreId?: string): Promise<any>;
-export declare function createAdUnit(auth: OAuth2Client, accountId: string, appId: string, displayName: string, adFormat: AdFormat): Promise<any>;
+appStoreId?: string): Promise<admob_v1beta.Schema$App>;
+export declare function createAdUnit(auth: OAuth2Client, accountId: string, appId: string, displayName: string, adFormat: AdFormat): Promise<admob_v1beta.Schema$AdUnit>;

package/dist/admob/tools.js

@@ -1,4 +1,5 @@
 import { google } from '../lib/googleapis-lite.js';
+import { resourceName } from '../lib/resource-id.js';
 /**
  * AdMob API 래퍼
  * v1: 조회 (stable)
@@ -23,7 +24,7 @@ export async function listApps(auth, accountId) {
     do {
         const res = await admobApi.accounts.apps.list({
             auth,
-            parent: accountId,
+            parent: resourceName(accountId, 'accounts', 'AdMob 계정 ID'),
             pageSize: 100,
             pageToken,
         });
@@ -46,7 +47,7 @@ export async function listAdUnits(auth, accountId) {
     do {
         const res = await admobApi.accounts.adUnits.list({
             auth,
-            parent: accountId,
+            parent: resourceName(accountId, 'accounts', 'AdMob 계정 ID'),
             pageSize: 100,
             pageToken,
         });
@@ -67,7 +68,7 @@ export async function getNetworkReport(auth, accountId, startDate, endDate) {
     const admob = google.admob('v1');
     const res = await admob.accounts.networkReport.generate({
         auth,
-        parent: accountId,
+        parent: resourceName(accountId, 'accounts', 'AdMob 계정 ID'),
         requestBody: {
             reportSpec: {
                 dateRange: { startDate, endDate },
@@ -125,7 +126,7 @@ appStoreId) {
     }
     const res = await admobBeta.accounts.apps.create({
         auth,
-        parent: accountId,
+        parent: resourceName(accountId, 'accounts', 'AdMob 계정 ID'),
         requestBody,
     });
     return res.data;
@@ -135,7 +136,7 @@ export async function createAdUnit(auth, accountId, appId, displayName, adFormat
     const admobBeta = google.admob('v1beta');
     const res = await admobBeta.accounts.adUnits.create({
         auth,
-        parent: accountId,
+        parent: resourceName(accountId, 'accounts', 'AdMob 계정 ID'),
         requestBody: {
             appId,
             displayName,

package/dist/android/keystore-store.d.ts

@@ -0,0 +1,30 @@
+import type { GeneratedKeystore } from './keystore.js';
+export declare const KEYSTORE_FILE = "upload.jks";
+export declare const SIGNING_SECRETS_FILE = "signing.json";
+export declare const SIGNING_SECRET_FIELDS: readonly ["storePassword", "keyPassword", "keyAlias"];
+export type SigningSecretField = (typeof SIGNING_SECRET_FIELDS)[number];
+/** 호출 시점에 계산한다 — 테스트가 홈 디렉터리를 바꿀 수 있어야 한다. */
+export declare function keystoresDir(): string;
+export interface PersistedKeystore {
+    dir: string;
+    keystorePath: string;
+    secretsPath: string;
+    keyAlias: string;
+}
+/** keystore 바이너리와 비밀번호 파일을 0600 으로 저장한다. label 은 영숫자·하이픈만 남긴다. */
+export declare function persistGeneratedKeystore(ks: GeneratedKeystore, label: string): PersistedKeystore;
+/** ~/.mimi-seed/keystores/ 안의 keystore 파일만 base64 로 읽는다. */
+export declare function readKeystoreBase64(filePath: string): string;
+/** jenkins_upload_keystore 입력 → base64. 직접 값(기존 호환)과 경로 중 정확히 하나. */
+export declare function resolveKeystoreInput(input: {
+    base64?: string;
+    path?: string;
+}): string;
+/** jenkins_create_credential 입력 → 비밀값. 직접 값(기존 호환)과 파일+필드 중 정확히 하나. */
+export declare function resolveSecretInput(input: {
+    secret?: string;
+    secretFile?: string;
+    secretField?: SigningSecretField;
+}): string;
+/** ~/.mimi-seed/keystores/ 안의 signing.json 에서 한 필드만 꺼낸다. */
+export declare function readSigningSecret(filePath: string, field: SigningSecretField): string;

package/dist/android/keystore-store.js

@@ -0,0 +1,85 @@
+// 생성한 upload keystore 보관소 — ~/.mimi-seed/keystores/<앱>-<시각>/.
+//
+// android_generate_keystore 는 예전에 store/key 비밀번호와 keystore base64 전체를 도구 응답에
+// 실었다. 그 값들은 대화 기록·클라이언트 로그에 평문으로 남고, 잃어버리면 앱 서명을 영구히
+// 잃는 비밀이다. 이제 keystore 와 비밀번호는 0600 파일로만 존재하고, Jenkins 등록 도구는
+// 이 디렉터리 안의 **경로**를 받는다 (jenkins_upload_keystore.keystore_path,
+// jenkins_create_credential.secret_file).
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { writeCredentialFile, writeCredentialJson } from '../lib/atomic-write.js';
+import { resolveInsideDir } from '../lib/path-containment.js';
+export const KEYSTORE_FILE = 'upload.jks';
+export const SIGNING_SECRETS_FILE = 'signing.json';
+export const SIGNING_SECRET_FIELDS = ['storePassword', 'keyPassword', 'keyAlias'];
+/** 호출 시점에 계산한다 — 테스트가 홈 디렉터리를 바꿀 수 있어야 한다. */
+export function keystoresDir() {
+    return path.join(os.homedir(), '.mimi-seed', 'keystores');
+}
+/** keystore 바이너리와 비밀번호 파일을 0600 으로 저장한다. label 은 영숫자·하이픈만 남긴다. */
+export function persistGeneratedKeystore(ks, label) {
+    const safeLabel = label.toLowerCase().replace(/[^a-z0-9-]+/g, '-').replace(/^-+|-+$/g, '') || 'app';
+    const stamp = new Date().toISOString().replace(/[:.]/g, '-');
+    const dir = path.join(keystoresDir(), `${safeLabel}-${stamp}`);
+    const keystorePath = path.join(dir, KEYSTORE_FILE);
+    const secretsPath = path.join(dir, SIGNING_SECRETS_FILE);
+    writeCredentialFile(keystorePath, Buffer.from(ks.keystoreBase64, 'base64'));
+    writeCredentialJson(secretsPath, {
+        keystore: KEYSTORE_FILE,
+        keyAlias: ks.keyAlias,
+        storePassword: ks.storePassword,
+        keyPassword: ks.keyPassword,
+        createdAt: new Date().toISOString(),
+    });
+    return { dir, keystorePath, secretsPath, keyAlias: ks.keyAlias };
+}
+/** ~/.mimi-seed/keystores/ 안의 keystore 파일만 base64 로 읽는다. */
+export function readKeystoreBase64(filePath) {
+    const real = resolveInsideDir(keystoresDir(), filePath, {
+        label: 'keystore',
+        extensions: ['.jks', '.keystore', '.p12'],
+    });
+    return fs.readFileSync(real).toString('base64');
+}
+/** jenkins_upload_keystore 입력 → base64. 직접 값(기존 호환)과 경로 중 정확히 하나. */
+export function resolveKeystoreInput(input) {
+    if (input.base64 && input.path)
+        throw new Error('keystore_base64 와 keystore_path 중 하나만 주세요.');
+    if (input.path)
+        return readKeystoreBase64(input.path);
+    if (input.base64)
+        return input.base64;
+    throw new Error('keystore_path(권장) 또는 keystore_base64 가 필요합니다.');
+}
+/** jenkins_create_credential 입력 → 비밀값. 직접 값(기존 호환)과 파일+필드 중 정확히 하나. */
+export function resolveSecretInput(input) {
+    if (input.secret !== undefined && input.secretFile)
+        throw new Error('secret 과 secret_file 중 하나만 주세요.');
+    if (input.secretFile) {
+        if (!input.secretField)
+            throw new Error('secret_file 을 쓰면 secret_field 도 필요합니다.');
+        return readSigningSecret(input.secretFile, input.secretField);
+    }
+    // 빈 문자열도 값이다 — main 의 `secret: z.string()` 은 ""(예: 비워 둔 플레이스홀더)를 그대로
+    // 저장했다. 없음(undefined)과 빈 값을 구분한다.
+    if (input.secret !== undefined)
+        return input.secret;
+    throw new Error('secret_file + secret_field(권장) 또는 secret 이 필요합니다.');
+}
+/** ~/.mimi-seed/keystores/ 안의 signing.json 에서 한 필드만 꺼낸다. */
+export function readSigningSecret(filePath, field) {
+    const real = resolveInsideDir(keystoresDir(), filePath, { label: '서명 비밀 파일', extensions: ['.json'] });
+    let parsed;
+    try {
+        parsed = JSON.parse(fs.readFileSync(real, 'utf8'));
+    }
+    catch {
+        throw new Error(`서명 비밀 파일을 읽지 못했습니다: ${filePath}`);
+    }
+    const value = parsed[field];
+    if (typeof value !== 'string' || !value) {
+        throw new Error(`서명 비밀 파일에 ${field} 값이 없습니다: ${filePath}`);
+    }
+    return value;
+}

package/dist/android/keystore.d.ts

@@ -4,6 +4,9 @@ export interface GeneratedKeystore {
     keyAlias: string;
     keyPassword: string;
 }
+/** keytool `-storepass:env` / `-keypass:env` 로 넘기는 환경변수 이름. */
+export declare const STOREPASS_ENV = "MIMI_SEED_KEYTOOL_STOREPASS";
+export declare const KEYPASS_ENV = "MIMI_SEED_KEYTOOL_KEYPASS";
 export declare function isKeytoolAvailable(): boolean;
 export declare function generateKeystore(opts: {
     appName: string;

package/dist/android/keystore.js

@@ -3,6 +3,9 @@ import { randomBytes } from 'node:crypto';
 import { readFileSync, unlinkSync, existsSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
+/** keytool `-storepass:env` / `-keypass:env` 로 넘기는 환경변수 이름. */
+export const STOREPASS_ENV = 'MIMI_SEED_KEYTOOL_STOREPASS';
+export const KEYPASS_ENV = 'MIMI_SEED_KEYTOOL_KEYPASS';
 function randomPassword(len = 20) {
     // alphanumeric — avoid quoting/escape issues in shell / Gradle properties
     return randomBytes(32).toString('base64url').replace(/[^a-zA-Z0-9]/g, '').slice(0, len);
@@ -31,11 +34,17 @@ export function generateKeystore(opts) {
             '-keysize', '2048',
             '-validity', '10000',
             '-alias', keyAlias,
-            '-storepass', storePassword,
-            '-keypass', keyPassword,
+            // 비밀번호를 argv 에 실으면 같은 머신의 다른 사용자가 `ps` 로 볼 수 있다.
+            // keytool 의 `:env` 형식은 환경변수 이름만 인자로 받는다.
+            '-storepass:env', STOREPASS_ENV,
+            '-keypass:env', KEYPASS_ENV,
             '-dname', dname,
             '-storetype', 'JKS',
-        ], { stdio: 'pipe', encoding: 'buffer' });
+        ], {
+            stdio: 'pipe',
+            encoding: 'buffer',
+            env: { ...process.env, [STOREPASS_ENV]: storePassword, [KEYPASS_ENV]: keyPassword },
+        });
         if (result.status !== 0) {
             const stderr = result.stderr?.toString('utf-8') ?? '';
             throw new Error(`keytool 실패:\n${stderr}`);

package/dist/android/messages.d.ts

@@ -0,0 +1,35 @@
+import { type PersistedKeystore } from './keystore-store.js';
+/**
+ * android_signing_setup — Play Console 에 이미 있는 앱. 기존 keystore 를 받아 등록하는 순서.
+ *
+ * 비밀값(keystore 바이트·비밀번호)을 대화에 싣지 않는다 — 사용자가 keystore 를 `keystoreDir` 로 복사하고
+ * 비밀번호를 그 폴더의 signing.json 에 적게 한 뒤, Jenkins 도구에는 경로만 넘긴다
+ * (jenkins_upload_keystore.keystore_path, jenkins_create_credential.secret_file + secret_field).
+ */
+export declare function existingAppSigningPlanLines(packageName: string, prefix: string, jenkinsStatus: string, keystoreDir: string): string[];
+/** android_signing_setup — 신규 앱(또는 Play Console 확인 불가). keystore 생성부터의 순서. */
+export declare function newAppSigningPlanLines(opts: {
+    packageName: string;
+    prefix: string;
+    appStatus: 'new' | 'unknown';
+    playNote: string;
+    jenkinsStatus: string;
+    jenkinsConfigured: boolean;
+    keytoolOk: boolean;
+    projectId?: string;
+    /** keytool 이 없어 사용자가 직접 만든 keystore·비밀번호 파일을 둘 폴더 (~/.mimi-seed/keystores/ 안). */
+    keystoreDir: string;
+}): string[];
+/** android_generate_keystore — keytool 이 없을 때 설치 안내. */
+export declare function keytoolMissingLines(): string[];
+/** android_generate_keystore — 생성 완료. 비밀값은 싣지 않고 경로만 넘긴다. */
+export declare function keystoreGeneratedLines(prefix: string, saved: PersistedKeystore): string[];
+/** jenkins_upload_playstore_sa — 패키지별 SA 파일이 아직 없을 때. */
+export declare function playServiceAccountMissingLines(packageName: string, saPath: string): string[];
+/** jenkins_upload_playstore_sa — 업로드 완료 + Play Console 권한 부여(수동 1회) 안내. */
+export declare function playServiceAccountUploadedLines(opts: {
+    result: string;
+    credentialId: string;
+    clientEmail: string;
+    rawLength: number;
+}): string[];