@yoonion/mimi-seed-mcp 0.19.2 → 0.19.4

package/dist/billing/tools.d.ts

@@ -8,7 +8,7 @@ export type BillingInfo = {
     /** 사람이 읽을 판정 — Blaze/Spark 오판을 막기 위해 문장으로 준다. */
     verdict: string;
 };
-export declare function getBillingInfo(auth: OAuth2Client, projectId: string): Promise<BillingInfo>;
+export declare function getBillingInfo(auth: OAuth2Client, projectId: string, quotaProjectId?: string): Promise<BillingInfo>;
 /**
  * 결제 계정에 붙은 프로젝트 목록 = **비용 범위 확인**.
  * 여기서 프로젝트가 여러 개면 계정 전체 예산은 의미가 없고 프로젝트 필터를 써야 한다.

package/dist/billing/tools.js

@@ -44,12 +44,13 @@ export function normalizeBillingAccount(input) {
     const trimmed = input.trim();
     return trimmed.startsWith('billingAccounts/') ? trimmed : `billingAccounts/${trimmed}`;
 }
-export async function getBillingInfo(auth, projectId) {
-    // 조회 대상 프로젝트 자신을 quota 주체로 쓴다 — 거기 Billing API 가 켜져 있어야 한다.
+export async function getBillingInfo(auth, projectId, quotaProjectId = projectId) {
+    // 기본은 조회 대상 프로젝트를 quota 주체로 쓰되, Spark 프로젝트처럼 유료 API를
+    // 소비할 수 없는 대상은 별도의 Blaze quota 프로젝트를 지정할 수 있다.
     const res = await billing().projects.getBillingInfo({
         auth,
         name: `projects/${projectId}`,
-        ...quotaHeaders(projectId),
+        ...quotaHeaders(quotaProjectId),
     });
     const enabled = res.data.billingEnabled ?? false;
     const account = res.data.billingAccountName ?? null;

package/dist/checks/billing.d.ts

@@ -4,7 +4,7 @@ export interface BillingEvidence {
     module: string;
     version?: string;
     expression?: string;
-    source: 'literal' | 'variable' | 'version_catalog' | 'unresolved';
+    source: 'literal' | 'variable' | 'version_catalog' | 'transitive' | 'unresolved';
 }
 export interface BillingComplianceResult {
     projectPath: string;
@@ -33,4 +33,8 @@ export interface BillingComplianceResult {
         automaticExecution: false;
     };
 }
+export declare function billingVersionFromPom(pom: string): {
+    module: string;
+    version: string;
+} | null;
 export declare function checkBillingCompliance(projectPath: string, now?: Date): Promise<BillingComplianceResult>;

package/dist/checks/billing.js

@@ -1,5 +1,6 @@
 import fs from 'node:fs/promises';
 import path from 'node:path';
+import { fetchWithTimeout } from '../lib/http.js';
 const BILLING_MODULE = /com\.android\.billingclient:billing(?:-ktx)?/;
 const LITERAL_DEPENDENCY = /com\.android\.billingclient:billing(?:-ktx)?:([0-9]+(?:\.[0-9A-Za-z_-]+){0,3})/g;
 const VARIABLE_DEPENDENCY = /com\.android\.billingclient:billing(?:-ktx)?:\$\{?([A-Za-z_][A-Za-z0-9_.-]*)\}?/g;
@@ -41,7 +42,8 @@ async function walk(root, maxDepth = 7) {
             else if (entry.isFile()
                 && (entry.name === 'build.gradle'
                     || entry.name === 'build.gradle.kts'
-                    || entry.name === 'libs.versions.toml')) {
+                    || entry.name === 'libs.versions.toml'
+                    || entry.name === 'package.json')) {
                 result.push(path.join(dir, entry.name));
             }
         }
@@ -114,6 +116,127 @@ function majorOf(version) {
     const major = Number.parseInt(version.split('.')[0], 10);
     return Number.isFinite(major) ? major : null;
 }
+export function billingVersionFromPom(pom) {
+    for (const match of pom.matchAll(/<dependency>([\s\S]*?)<\/dependency>/g)) {
+        const block = match[1];
+        const group = block.match(/<groupId>\s*([^<]+)\s*<\/groupId>/)?.[1]?.trim();
+        const artifact = block.match(/<artifactId>\s*([^<]+)\s*<\/artifactId>/)?.[1]?.trim();
+        const version = block.match(/<version>\s*([^<]+)\s*<\/version>/)?.[1]?.trim();
+        if (group === 'com.android.billingclient' && /^billing(?:-ktx)?$/.test(artifact ?? '') && version) {
+            return { module: `${group}:${artifact}`, version };
+        }
+    }
+    return null;
+}
+async function nearestNodePackage(packageDir, root) {
+    let current = packageDir;
+    while (isWithin(root, current)) {
+        const candidate = path.join(current, 'node_modules', 'react-native-iap');
+        try {
+            if ((await fs.stat(candidate)).isDirectory())
+                return candidate;
+        }
+        catch {
+            // Keep walking toward the project root; workspaces commonly hoist node_modules.
+        }
+        if (current === root)
+            break;
+        current = path.dirname(current);
+    }
+    return null;
+}
+async function reactNativeIapEvidence(root, manifestFile, manifestText) {
+    let manifest;
+    try {
+        manifest = JSON.parse(manifestText);
+    }
+    catch {
+        return null;
+    }
+    const dependencyGroups = ['dependencies', 'devDependencies', 'optionalDependencies']
+        .map((key) => manifest[key])
+        .filter((value) => Boolean(value) && typeof value === 'object');
+    const declaredVersion = dependencyGroups
+        .map((group) => group['react-native-iap'])
+        .find((value) => typeof value === 'string');
+    if (!declaredVersion)
+        return null;
+    const relativeManifest = path.relative(root, manifestFile).replace(/\\/g, '/');
+    const installedDir = await nearestNodePackage(path.dirname(manifestFile), root);
+    if (!installedDir) {
+        return {
+            file: relativeManifest,
+            module: 'com.android.billingclient:billing',
+            expression: `react-native-iap ${declaredVersion} is declared but not installed; transitive Billing version is unresolved`,
+            source: 'unresolved',
+        };
+    }
+    const directCandidates = [
+        path.join(installedDir, 'android', 'build.gradle'),
+        path.join(installedDir, 'android', 'build.gradle.kts'),
+    ];
+    for (const candidate of directCandidates) {
+        try {
+            const text = await fs.readFile(candidate, 'utf8');
+            const direct = [...text.matchAll(LITERAL_DEPENDENCY)][0];
+            if (direct) {
+                return {
+                    file: relativeManifest,
+                    module: direct[0].slice(0, direct[0].lastIndexOf(':')),
+                    version: direct[1],
+                    expression: `react-native-iap ${declaredVersion} native dependency`,
+                    source: 'transitive',
+                };
+            }
+        }
+        catch {
+            // Newer react-native-iap versions delegate Billing to the OpenIAP Maven artifact.
+        }
+    }
+    let openIapVersion;
+    try {
+        const versions = JSON.parse(await fs.readFile(path.join(installedDir, 'openiap-versions.json'), 'utf8'));
+        if (typeof versions.google === 'string')
+            openIapVersion = versions.google;
+    }
+    catch {
+        // Older releases may not use OpenIAP; fall through to an unresolved, safe result.
+    }
+    if (!openIapVersion || !/^[0-9A-Za-z][0-9A-Za-z._-]*$/.test(openIapVersion)) {
+        return {
+            file: relativeManifest,
+            module: 'com.android.billingclient:billing',
+            expression: `react-native-iap ${declaredVersion} detected; transitive Billing version is unresolved`,
+            source: 'unresolved',
+        };
+    }
+    const coordinate = `io.github.hyochan.openiap:openiap-google:${openIapVersion}`;
+    try {
+        const pomUrl = `https://repo.maven.apache.org/maven2/io/github/hyochan/openiap/openiap-google/${openIapVersion}/openiap-google-${openIapVersion}.pom`;
+        const response = await fetchWithTimeout(pomUrl, {}, { timeoutMs: 15_000, maxAttempts: 2 });
+        if (response.ok) {
+            const resolved = billingVersionFromPom(await response.text());
+            if (resolved) {
+                return {
+                    file: relativeManifest,
+                    module: resolved.module,
+                    version: resolved.version,
+                    expression: `react-native-iap ${declaredVersion} -> ${coordinate}`,
+                    source: 'transitive',
+                };
+            }
+        }
+    }
+    catch {
+        // Network failure must not turn a known IAP dependency into not_used.
+    }
+    return {
+        file: relativeManifest,
+        module: 'com.android.billingclient:billing',
+        expression: `react-native-iap ${declaredVersion} -> ${coordinate}; Maven Billing version lookup failed`,
+        source: 'unresolved',
+    };
+}
 function policyAt(now) {
     const deadlineEnd = (date) => new Date(`${date}T23:59:59.999Z`);
     const next = BILLING_SUPPORT_SCHEDULE.find((row) => now <= deadlineEnd(row.submissionDeadline));
@@ -175,9 +298,16 @@ export async function checkBillingCompliance(projectPath, now = new Date()) {
         .map(([, variables]) => variables.get(key))
         .find((value) => value !== undefined);
     const evidence = [];
+    for (const [file, text] of texts) {
+        if (path.basename(file) !== 'package.json')
+            continue;
+        const transitive = await reactNativeIapEvidence(root, file, text);
+        if (transitive && !evidence.some((row) => row.expression === transitive.expression))
+            evidence.push(transitive);
+    }
     for (const [file, text] of texts) {
         const relative = path.relative(root, file).replace(/\\/g, '/');
-        if (path.basename(file) === 'libs.versions.toml') {
+        if (path.basename(file) === 'libs.versions.toml' || path.basename(file) === 'package.json') {
             continue;
         }
         const catalog = catalogFor(file);
@@ -276,7 +406,7 @@ export async function checkBillingCompliance(projectPath, now = new Date()) {
     else if (unresolved || majors.length === 0) {
         status = 'unresolved';
         summary = 'A Billing dependency was found, but at least one version expression could not be resolved statically.';
-        actions.push('Resolve the reported Gradle variable or version catalog alias and run the check again.');
+        actions.push('Resolve the reported Gradle/version catalog expression or install the declared IAP package, then run the check again.');
     }
     else if (majors.some((major) => major === policy.minimumSupportedMajor)) {
         status = 'warning';

package/dist/firebase/remote-config.d.ts

@@ -32,8 +32,10 @@ export declare function getRemoteConfigOverview(auth: OAuth2Client, input: {
     projectId: string;
     namespace?: string;
     days?: number;
+    quotaProjectId?: string;
 }): Promise<{
     projectId: string;
+    quotaProjectId: string;
     namespace: string;
     pricingPolicy: {
         effectiveDate: string;

package/dist/firebase/remote-config.js

@@ -3,6 +3,7 @@ import { getBillingInfo } from '../billing/tools.js';
 const FREE_DAILY_FETCHES = 100_000;
 const FIRST_PAID_TIER_END = 10_000_000;
 const REMOTE_CONFIG_BASE = 'https://firebaseremoteconfig.googleapis.com/v1';
+const FIREBASE_MANAGEMENT_BASE = 'https://firebase.googleapis.com/v1beta1';
 export function countStates(items) {
     const counts = {};
     for (const item of items) {
@@ -11,9 +12,12 @@ export function countStates(items) {
     }
     return counts;
 }
-async function optionalRequest(auth, url) {
+async function optionalRequest(auth, url, quotaProjectId) {
     try {
-        const response = await auth.request({ url });
+        const response = await auth.request({
+            url,
+            headers: { 'x-goog-user-project': quotaProjectId },
+        });
         return { available: true, data: response.data };
     }
     catch (error) {
@@ -23,7 +27,7 @@ async function optionalRequest(auth, url) {
         };
     }
 }
-async function optionalPagedRequest(auth, url, field) {
+async function optionalPagedRequest(auth, url, field, quotaProjectId) {
     try {
         const items = [];
         let pageToken;
@@ -33,7 +37,10 @@ async function optionalPagedRequest(auth, url, field) {
             requestUrl.searchParams.set('pageSize', '100');
             if (pageToken)
                 requestUrl.searchParams.set('pageToken', pageToken);
-            const response = await auth.request({ url: requestUrl.toString() });
+            const response = await auth.request({
+                url: requestUrl.toString(),
+                headers: { 'x-goog-user-project': quotaProjectId },
+            });
             const data = response.data;
             items.push(...(data[field] ?? []));
             pageToken = data.nextPageToken;
@@ -68,7 +75,7 @@ export function remoteConfigUsageLevel(fetches) {
         return 'warning';
     return 'ok';
 }
-async function fetchDailyUsage(auth, projectId, days) {
+async function fetchDailyUsage(auth, projectId, days, quotaProjectId) {
     try {
         const end = new Date();
         const start = new Date(end.getTime() - days * 86_400_000);
@@ -84,6 +91,8 @@ async function fetchDailyUsage(auth, projectId, days) {
             'aggregation.crossSeriesReducer': 'REDUCE_SUM',
             view: 'FULL',
             pageSize: Math.max(days + 2, 10),
+        }, {
+            headers: { 'x-goog-user-project': quotaProjectId },
         });
         const points = (response.data.timeSeries ?? [])
             .flatMap((series) => series.points ?? [])
@@ -109,15 +118,32 @@ async function fetchDailyUsage(auth, projectId, days) {
 export async function getRemoteConfigOverview(auth, input) {
     const namespace = input.namespace ?? 'firebase';
     const days = Math.min(Math.max(input.days ?? 7, 1), 30);
+    // User OAuth otherwise charges quota to the shared OAuth-client project. The
+    // resource project is the safest default; Spark projects can point this at a
+    // separate Blaze project with the relevant APIs enabled.
+    const quotaProjectId = input.quotaProjectId ?? input.projectId;
     const encodedProject = encodeURIComponent(input.projectId);
     const encodedNamespace = encodeURIComponent(namespace);
     const parent = `${REMOTE_CONFIG_BASE}/projects/${encodedProject}/namespaces/${encodedNamespace}`;
+    // The rollout beta endpoint rejects project IDs even though the REST path uses
+    // the generic {project} placeholder; live responses require projectNumber.
+    const projectNumber = optionalRequest(auth, `${FIREBASE_MANAGEMENT_BASE}/projects/${encodedProject}`, quotaProjectId);
+    const rolloutsPromise = projectNumber.then(async (result) => {
+        if (!result.available || !result.data?.projectNumber) {
+            return {
+                available: false,
+                error: result.error ?? 'Firebase project number is unavailable.',
+            };
+        }
+        const rolloutParent = `${REMOTE_CONFIG_BASE}/projects/${encodeURIComponent(result.data.projectNumber)}/namespaces/${encodedNamespace}`;
+        return optionalPagedRequest(auth, `${rolloutParent}/rollouts`, 'rollouts', quotaProjectId);
+    });
     const [template, experiments, rollouts, usage, billing] = await Promise.all([
-        optionalRequest(auth, `${parent}/remoteConfig`),
-        optionalPagedRequest(auth, `${parent}/experiments`, 'experiments'),
-        optionalPagedRequest(auth, `${parent}/rollouts`, 'rollouts'),
-        fetchDailyUsage(auth, input.projectId, days),
-        getBillingInfo(auth, input.projectId)
+        optionalRequest(auth, `${parent}/remoteConfig`, quotaProjectId),
+        optionalPagedRequest(auth, `${parent}/experiments`, 'experiments', quotaProjectId),
+        rolloutsPromise,
+        fetchDailyUsage(auth, input.projectId, days, quotaProjectId),
+        getBillingInfo(auth, input.projectId, quotaProjectId)
             .then((data) => ({ available: true, data }))
             .catch((error) => ({
             available: false,
@@ -167,6 +193,7 @@ export async function getRemoteConfigOverview(auth, input) {
         .map(summarizeRollout);
     return {
         projectId: input.projectId,
+        quotaProjectId,
         namespace,
         pricingPolicy: {
             effectiveDate: '2026-09-01',

package/dist/registers/checks.js

@@ -9,7 +9,7 @@ import { checkBillingCompliance } from '../checks/billing.js';
 export function registerChecksTools(server) {
     server.tool('android_check_billing_compliance', [
         '로컬 Android 저장소의 Google Play Billing Library 버전을 읽기 전용으로 탐지하고 제출 정책 마감과 비교합니다.',
-        'build.gradle, build.gradle.kts, gradle/libs.versions.toml의 literal·변수·version catalog를 검사합니다.',
+        'build.gradle, build.gradle.kts, gradle/libs.versions.toml의 literal·변수·version catalog와 react-native-iap의 OpenIAP 전이 의존성을 검사합니다.',
         '코드를 자동 수정하지 않고 공식 Android CLI Skill 설치 명령과 업그레이드 프롬프트만 반환합니다.',
     ].join(' '), {
         projectPath: z.string().optional().describe('검사할 프로젝트 절대경로 (기본: MCP 프로세스 현재 디렉터리)'),

package/dist/registers/firebase.js

@@ -38,9 +38,10 @@ export function registerFirebaseTools(server) {
         projectId: z.string().describe('Firebase / Google Cloud 프로젝트 ID'),
         namespace: z.string().optional().describe('Remote Config namespace (기본: firebase)'),
         days: z.number().int().min(1).max(30).optional().describe('사용량 조회 일수 (기본: 7, 최대: 30)'),
-    }, async ({ projectId, namespace, days }) => {
+        quotaProjectId: z.string().optional().describe('API quota/과금 프로젝트 ID. 기본은 projectId. Spark 프로젝트의 Monitoring 조회가 billing_required이면 Remote Config·Monitoring API가 활성화된 Blaze 프로젝트를 지정'),
+    }, async ({ projectId, namespace, days, quotaProjectId }) => {
         const auth = await requireAuth();
-        return jsonResult(await getRemoteConfigOverview(auth, { projectId, namespace, days }));
+        return jsonResult(await getRemoteConfigOverview(auth, { projectId, namespace, days, quotaProjectId }));
     });
     server.tool('firebase_list_projects', '내 Firebase 프로젝트 목록 조회', {}, async () => {
         const auth = await requireAuth();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yoonion/mimi-seed-mcp",
-  "version": "0.19.2",
+  "version": "0.19.4",
   "description": "Mimi Seed MCP server \u2014 Firebase + AdMob + Google Play + App Store management for Claude Code / Codex / Cursor / any MCP client.",
   "type": "module",
   "bin": {