@yoonion/mimi-seed-mcp 0.19.3 → 0.19.5

package/dist/appstore/auth.d.ts

@@ -31,6 +31,14 @@ export interface AppStoreKey {
     keyId: string;
     privateKey: string;
 }
+/**
+ * 최상위 ASC API 키를 교체하되 같은 파일에 저장된 선택 설정은 보존한다.
+ *
+ * 재인증은 primary key 교체이지 appstore.json 전체 초기화가 아니다. 특히
+ * vendorNumber 와 reportsKey 는 별도 화면/키에서 얻는 값이라 다시 묻지 않고
+ * 지우면 매출·분석 기능이 조용히 망가진다.
+ */
+export declare function mergeAppStoreCredentials(existing: AppStoreCredentials | null, primary: AppStoreKey, vendorNumber?: string): AppStoreCredentials;
 export declare function getAppStoreCredentials(): AppStoreCredentials | null;
 export declare function saveAppStoreCredentials(creds: AppStoreCredentials): void;
 export declare function generateToken(creds: AppStoreCredentials): Promise<string>;

package/dist/appstore/auth.js

@@ -10,6 +10,20 @@ import { writeCredentialJson } from '../lib/atomic-write.js';
 // force a re-setup.
 const CONFIG_PATH = path.join(os.homedir(), '.mimi-seed', 'appstore.json');
 const LEGACY_CONFIG_PATH = path.join(os.homedir(), '.preseed', 'appstore.json');
+/**
+ * 최상위 ASC API 키를 교체하되 같은 파일에 저장된 선택 설정은 보존한다.
+ *
+ * 재인증은 primary key 교체이지 appstore.json 전체 초기화가 아니다. 특히
+ * vendorNumber 와 reportsKey 는 별도 화면/키에서 얻는 값이라 다시 묻지 않고
+ * 지우면 매출·분석 기능이 조용히 망가진다.
+ */
+export function mergeAppStoreCredentials(existing, primary, vendorNumber) {
+    const merged = { ...(existing ?? {}), ...primary };
+    const normalizedVendorNumber = vendorNumber?.trim();
+    if (normalizedVendorNumber)
+        merged.vendorNumber = normalizedVendorNumber;
+    return merged;
+}
 export function getAppStoreCredentials() {
     const pathToRead = fs.existsSync(CONFIG_PATH)
         ? CONFIG_PATH

package/dist/appstore/setup-cli.js

@@ -1,13 +1,14 @@
 #!/usr/bin/env node
-import { saveAppStoreCredentials, getAppStoreCredentials } from './auth.js';
+import { getAppStoreCredentials, mergeAppStoreCredentials } from './auth.js';
+import { verifyAndSaveAppStoreCredentials } from './setup.js';
 import readline from 'node:readline';
 import fs from 'node:fs';
 import { resolveLang } from '../lib/lang.js';
 // ko 가 원본이고 en 은 `typeof ko` 를 만족해야 한다 — 키를 빠뜨리면 컴파일이 깨진다.
 const ko = {
     title: '  🍎 Mimi Seed — App Store Connect 연결',
-    already: (keyId) => `  ✅ 이미 연결됨 (Key ID: ${keyId})`,
-    reconnect: '  다시 설정할래? (y/N): ',
+    already: (keyId) => `  ✅ 설정 파일 있음 (Key ID: ${keyId}) — API 권한은 다시 검증합니다`,
+    reconnect: '  API Key도 다시 설정할래? (y/N): ',
     needTitle: '  App Store Connect에서 API Key를 만들어야 해:',
     step1: '  1. "키 생성" 클릭',
     step2: '  2. 이름: Mimi Seed, 역할: Admin',
@@ -15,16 +16,20 @@ const ko = {
     askIssuerId: '  Issuer ID: ',
     askKeyId: '  Key ID: ',
     askP8Path: '  .p8 파일 경로: ',
+    askVendorNumber: '  Vendor Number (선택, Enter로 기존 값 유지): ',
     noFile: (p) => `  ❌ 파일 없음: ${p}`,
-    done: '  ✅ 연결 완료!',
+    verifying: '  Apple API로 자격증명을 검증하는 중...',
+    verifyFailed: (stage, message) => `  ❌ 검증 실패 (${stage}) — 저장하지 않았습니다.\n${message}`,
+    done: '  ✅ 연결 완료! (App Store API 검증 성공)',
+    vendorDone: '  ✅ Vendor Number 저장 완료! (기존 App Store API 키 검증 성공)',
     nextTitle: '  이제 Claude Code 또는 Codex에서:',
     nextExample1: '    "내 앱스토어 앱 목록 보여줘"',
     nextExample2: '    "TestFlight 빌드 목록 보여줘"',
 };
 const en = {
     title: '  🍎 Mimi Seed — Connect App Store Connect',
-    already: (keyId) => `  ✅ Already connected (Key ID: ${keyId})`,
-    reconnect: '  Set it up again? (y/N): ',
+    already: (keyId) => `  ✅ Configuration found (Key ID: ${keyId}) — API access will be verified again`,
+    reconnect: '  Replace the API Key too? (y/N): ',
     needTitle: '  You need to create an API Key in App Store Connect:',
     step1: '  1. Click "Generate API Key"',
     step2: '  2. Name: Mimi Seed, Access: Admin',
@@ -32,8 +37,12 @@ const en = {
     askIssuerId: '  Issuer ID: ',
     askKeyId: '  Key ID: ',
     askP8Path: '  Path to the .p8 file: ',
+    askVendorNumber: '  Vendor Number (optional, Enter keeps the saved value): ',
     noFile: (p) => `  ❌ File not found: ${p}`,
-    done: '  ✅ Connected!',
+    verifying: '  Verifying the credentials with the Apple API...',
+    verifyFailed: (stage, message) => `  ❌ Verification failed (${stage}) — nothing was saved.\n${message}`,
+    done: '  ✅ Connected! (App Store API verification passed)',
+    vendorDone: '  ✅ Vendor Number saved! (existing App Store API key verification passed)',
     nextTitle: '  Now, in Claude Code or Codex:',
     nextExample1: '    "Show my App Store apps"',
     nextExample2: '    "List the TestFlight builds"',
@@ -41,15 +50,31 @@ const en = {
 const M = resolveLang() === 'en' ? en : ko;
 const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
 const ask = (q) => new Promise((r) => rl.question(q, r));
+async function saveIfVerified(credentials) {
+    console.log(M.verifying);
+    const verification = await verifyAndSaveAppStoreCredentials(credentials);
+    if (verification.ok)
+        return true;
+    console.log(M.verifyFailed(verification.stage, verification.message));
+    process.exitCode = 1;
+    return false;
+}
 async function main() {
     console.log('');
     console.log(M.title);
     console.log('');
     const existing = getAppStoreCredentials();
+    let vendorNumber = '';
     if (existing) {
         console.log(M.already(existing.keyId));
+        vendorNumber = await ask(M.askVendorNumber);
         const answer = await ask(M.reconnect);
         if (answer.toLowerCase() !== 'y') {
+            if (vendorNumber.trim()) {
+                const credentials = mergeAppStoreCredentials(existing, existing, vendorNumber);
+                if (await saveIfVerified(credentials))
+                    console.log(M.vendorDone);
+            }
             rl.close();
             return;
         }
@@ -64,6 +89,8 @@ async function main() {
     const issuerId = await ask(M.askIssuerId);
     const keyId = await ask(M.askKeyId);
     const p8Path = await ask(M.askP8Path);
+    if (!existing)
+        vendorNumber = await ask(M.askVendorNumber);
     const trimmedPath = p8Path.trim().replace(/^["']|["']$/g, '');
     if (!fs.existsSync(trimmedPath)) {
         console.log(M.noFile(trimmedPath));
@@ -71,11 +98,11 @@ async function main() {
         process.exit(1);
     }
     const privateKey = fs.readFileSync(trimmedPath, 'utf-8');
-    saveAppStoreCredentials({
-        issuerId: issuerId.trim(),
-        keyId: keyId.trim(),
-        privateKey,
-    });
+    const credentials = mergeAppStoreCredentials(existing, { issuerId: issuerId.trim(), keyId: keyId.trim(), privateKey }, vendorNumber);
+    if (!(await saveIfVerified(credentials))) {
+        rl.close();
+        return;
+    }
     console.log('');
     console.log(M.done);
     console.log('');

package/dist/appstore/setup.d.ts

@@ -0,0 +1,9 @@
+import { type AppStoreCredentials } from './auth.js';
+import { type AppStoreVerifyResult } from './tools.js';
+interface SetupDependencies {
+    verify: (credentials: AppStoreCredentials) => Promise<AppStoreVerifyResult>;
+    save: (credentials: AppStoreCredentials) => void;
+}
+/** Apple API에서 실제로 쓸 수 있는 키인지 확인한 뒤에만 디스크에 저장한다. */
+export declare function verifyAndSaveAppStoreCredentials(credentials: AppStoreCredentials, dependencies?: SetupDependencies): Promise<AppStoreVerifyResult>;
+export {};

package/dist/appstore/setup.js

@@ -0,0 +1,13 @@
+import { saveAppStoreCredentials, } from './auth.js';
+import { verifyAppStoreCredentials, } from './tools.js';
+const defaultDependencies = {
+    verify: verifyAppStoreCredentials,
+    save: saveAppStoreCredentials,
+};
+/** Apple API에서 실제로 쓸 수 있는 키인지 확인한 뒤에만 디스크에 저장한다. */
+export async function verifyAndSaveAppStoreCredentials(credentials, dependencies = defaultDependencies) {
+    const result = await dependencies.verify(credentials);
+    if (result.ok)
+        dependencies.save(credentials);
+    return result;
+}

package/dist/appstore/tools.d.ts

@@ -17,7 +17,7 @@ export interface AppStoreVerifyResult {
  * 파일 존재만 보는 requireAppStoreCreds 와 달리, 잘못된 .p8/keyId/issuerId 를
  * "첫 호출 401" 로 늦게 터지기 전에 setup 단계에서 잡아준다.
  */
-export declare function verifyAppStoreCredentials(): Promise<AppStoreVerifyResult>;
+export declare function verifyAppStoreCredentials(creds?: import("./auth.js").AppStoreCredentials | null): Promise<AppStoreVerifyResult>;
 export declare function listApps(): Promise<any>;
 export declare function getApp(appId: string): Promise<any>;
 export declare function listVersions(appId: string): Promise<any>;

package/dist/appstore/tools.js

@@ -36,8 +36,7 @@ export async function apiGet(path, params) {
  * 파일 존재만 보는 requireAppStoreCreds 와 달리, 잘못된 .p8/keyId/issuerId 를
  * "첫 호출 401" 로 늦게 터지기 전에 setup 단계에서 잡아준다.
  */
-export async function verifyAppStoreCredentials() {
-    const creds = getAppStoreCredentials();
+export async function verifyAppStoreCredentials(creds = getAppStoreCredentials()) {
     if (!creds) {
         return {
             ok: false,

package/dist/billing/tools.d.ts

@@ -8,7 +8,7 @@ export type BillingInfo = {
     /** 사람이 읽을 판정 — Blaze/Spark 오판을 막기 위해 문장으로 준다. */
     verdict: string;
 };
-export declare function getBillingInfo(auth: OAuth2Client, projectId: string): Promise<BillingInfo>;
+export declare function getBillingInfo(auth: OAuth2Client, projectId: string, quotaProjectId?: string): Promise<BillingInfo>;
 /**
  * 결제 계정에 붙은 프로젝트 목록 = **비용 범위 확인**.
  * 여기서 프로젝트가 여러 개면 계정 전체 예산은 의미가 없고 프로젝트 필터를 써야 한다.

package/dist/billing/tools.js

@@ -44,12 +44,13 @@ export function normalizeBillingAccount(input) {
     const trimmed = input.trim();
     return trimmed.startsWith('billingAccounts/') ? trimmed : `billingAccounts/${trimmed}`;
 }
-export async function getBillingInfo(auth, projectId) {
-    // 조회 대상 프로젝트 자신을 quota 주체로 쓴다 — 거기 Billing API 가 켜져 있어야 한다.
+export async function getBillingInfo(auth, projectId, quotaProjectId = projectId) {
+    // 기본은 조회 대상 프로젝트를 quota 주체로 쓰되, Spark 프로젝트처럼 유료 API를
+    // 소비할 수 없는 대상은 별도의 Blaze quota 프로젝트를 지정할 수 있다.
     const res = await billing().projects.getBillingInfo({
         auth,
         name: `projects/${projectId}`,
-        ...quotaHeaders(projectId),
+        ...quotaHeaders(quotaProjectId),
     });
     const enabled = res.data.billingEnabled ?? false;
     const account = res.data.billingAccountName ?? null;

package/dist/firebase/remote-config.d.ts

@@ -32,8 +32,10 @@ export declare function getRemoteConfigOverview(auth: OAuth2Client, input: {
     projectId: string;
     namespace?: string;
     days?: number;
+    quotaProjectId?: string;
 }): Promise<{
     projectId: string;
+    quotaProjectId: string;
     namespace: string;
     pricingPolicy: {
         effectiveDate: string;

package/dist/firebase/remote-config.js

@@ -3,6 +3,7 @@ import { getBillingInfo } from '../billing/tools.js';
 const FREE_DAILY_FETCHES = 100_000;
 const FIRST_PAID_TIER_END = 10_000_000;
 const REMOTE_CONFIG_BASE = 'https://firebaseremoteconfig.googleapis.com/v1';
+const FIREBASE_MANAGEMENT_BASE = 'https://firebase.googleapis.com/v1beta1';
 export function countStates(items) {
     const counts = {};
     for (const item of items) {
@@ -11,9 +12,12 @@ export function countStates(items) {
     }
     return counts;
 }
-async function optionalRequest(auth, url) {
+async function optionalRequest(auth, url, quotaProjectId) {
     try {
-        const response = await auth.request({ url });
+        const response = await auth.request({
+            url,
+            headers: { 'x-goog-user-project': quotaProjectId },
+        });
         return { available: true, data: response.data };
     }
     catch (error) {
@@ -23,7 +27,7 @@ async function optionalRequest(auth, url) {
         };
     }
 }
-async function optionalPagedRequest(auth, url, field) {
+async function optionalPagedRequest(auth, url, field, quotaProjectId) {
     try {
         const items = [];
         let pageToken;
@@ -33,7 +37,10 @@ async function optionalPagedRequest(auth, url, field) {
             requestUrl.searchParams.set('pageSize', '100');
             if (pageToken)
                 requestUrl.searchParams.set('pageToken', pageToken);
-            const response = await auth.request({ url: requestUrl.toString() });
+            const response = await auth.request({
+                url: requestUrl.toString(),
+                headers: { 'x-goog-user-project': quotaProjectId },
+            });
             const data = response.data;
             items.push(...(data[field] ?? []));
             pageToken = data.nextPageToken;
@@ -68,7 +75,7 @@ export function remoteConfigUsageLevel(fetches) {
         return 'warning';
     return 'ok';
 }
-async function fetchDailyUsage(auth, projectId, days) {
+async function fetchDailyUsage(auth, projectId, days, quotaProjectId) {
     try {
         const end = new Date();
         const start = new Date(end.getTime() - days * 86_400_000);
@@ -84,6 +91,8 @@ async function fetchDailyUsage(auth, projectId, days) {
             'aggregation.crossSeriesReducer': 'REDUCE_SUM',
             view: 'FULL',
             pageSize: Math.max(days + 2, 10),
+        }, {
+            headers: { 'x-goog-user-project': quotaProjectId },
         });
         const points = (response.data.timeSeries ?? [])
             .flatMap((series) => series.points ?? [])
@@ -109,15 +118,32 @@ async function fetchDailyUsage(auth, projectId, days) {
 export async function getRemoteConfigOverview(auth, input) {
     const namespace = input.namespace ?? 'firebase';
     const days = Math.min(Math.max(input.days ?? 7, 1), 30);
+    // User OAuth otherwise charges quota to the shared OAuth-client project. The
+    // resource project is the safest default; Spark projects can point this at a
+    // separate Blaze project with the relevant APIs enabled.
+    const quotaProjectId = input.quotaProjectId ?? input.projectId;
     const encodedProject = encodeURIComponent(input.projectId);
     const encodedNamespace = encodeURIComponent(namespace);
     const parent = `${REMOTE_CONFIG_BASE}/projects/${encodedProject}/namespaces/${encodedNamespace}`;
+    // The rollout beta endpoint rejects project IDs even though the REST path uses
+    // the generic {project} placeholder; live responses require projectNumber.
+    const projectNumber = optionalRequest(auth, `${FIREBASE_MANAGEMENT_BASE}/projects/${encodedProject}`, quotaProjectId);
+    const rolloutsPromise = projectNumber.then(async (result) => {
+        if (!result.available || !result.data?.projectNumber) {
+            return {
+                available: false,
+                error: result.error ?? 'Firebase project number is unavailable.',
+            };
+        }
+        const rolloutParent = `${REMOTE_CONFIG_BASE}/projects/${encodeURIComponent(result.data.projectNumber)}/namespaces/${encodedNamespace}`;
+        return optionalPagedRequest(auth, `${rolloutParent}/rollouts`, 'rollouts', quotaProjectId);
+    });
     const [template, experiments, rollouts, usage, billing] = await Promise.all([
-        optionalRequest(auth, `${parent}/remoteConfig`),
-        optionalPagedRequest(auth, `${parent}/experiments`, 'experiments'),
-        optionalPagedRequest(auth, `${parent}/rollouts`, 'rollouts'),
-        fetchDailyUsage(auth, input.projectId, days),
-        getBillingInfo(auth, input.projectId)
+        optionalRequest(auth, `${parent}/remoteConfig`, quotaProjectId),
+        optionalPagedRequest(auth, `${parent}/experiments`, 'experiments', quotaProjectId),
+        rolloutsPromise,
+        fetchDailyUsage(auth, input.projectId, days, quotaProjectId),
+        getBillingInfo(auth, input.projectId, quotaProjectId)
             .then((data) => ({ available: true, data }))
             .catch((error) => ({
             available: false,
@@ -167,6 +193,7 @@ export async function getRemoteConfigOverview(auth, input) {
         .map(summarizeRollout);
     return {
         projectId: input.projectId,
+        quotaProjectId,
         namespace,
         pricingPolicy: {
             effectiveDate: '2026-09-01',

package/dist/registers/firebase.js

@@ -38,9 +38,10 @@ export function registerFirebaseTools(server) {
         projectId: z.string().describe('Firebase / Google Cloud 프로젝트 ID'),
         namespace: z.string().optional().describe('Remote Config namespace (기본: firebase)'),
         days: z.number().int().min(1).max(30).optional().describe('사용량 조회 일수 (기본: 7, 최대: 30)'),
-    }, async ({ projectId, namespace, days }) => {
+        quotaProjectId: z.string().optional().describe('API quota/과금 프로젝트 ID. 기본은 projectId. Spark 프로젝트의 Monitoring 조회가 billing_required이면 Remote Config·Monitoring API가 활성화된 Blaze 프로젝트를 지정'),
+    }, async ({ projectId, namespace, days, quotaProjectId }) => {
         const auth = await requireAuth();
-        return jsonResult(await getRemoteConfigOverview(auth, { projectId, namespace, days }));
+        return jsonResult(await getRemoteConfigOverview(auth, { projectId, namespace, days, quotaProjectId }));
     });
     server.tool('firebase_list_projects', '내 Firebase 프로젝트 목록 조회', {}, async () => {
         const auth = await requireAuth();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yoonion/mimi-seed-mcp",
-  "version": "0.19.3",
+  "version": "0.19.5",
   "description": "Mimi Seed MCP server \u2014 Firebase + AdMob + Google Play + App Store management for Claude Code / Codex / Cursor / any MCP client.",
   "type": "module",
   "bin": {