@yoonion/mimi-seed-mcp 0.19.8 → 0.19.10

package/README.md

@@ -8,6 +8,14 @@
 
 스토어 자격증명을 연결하기 전에 저장소에서 확정할 수 있는 출시 블로커를 검사합니다.
 
+일반 사용자는 전체 MCP 패키지를 먼저 설치하지 않는 경량 CLI 경로를 권장합니다.
+
+```bash
+npx -y mimi-seed@latest check --local
+```
+
+MCP 패키지를 이미 설치했다면 같은 검사기의 직접 bin도 사용할 수 있습니다.
+
 ```bash
 npx -y @yoonion/mimi-seed-mcp mimi-seed-release-doctor .
 ```

package/dist/checks/billing-network.d.ts

@@ -0,0 +1,2 @@
+import { type BillingTransitiveResolver } from './billing.js';
+export declare const resolveOpenIapBilling: BillingTransitiveResolver;

package/dist/checks/billing-network.js

@@ -0,0 +1,9 @@
+import { fetchWithTimeout } from '../lib/http.js';
+import { billingVersionFromPom } from './billing.js';
+export const resolveOpenIapBilling = async (openIapVersion) => {
+    const pomUrl = `https://repo.maven.apache.org/maven2/io/github/hyochan/openiap/openiap-google/${openIapVersion}/openiap-google-${openIapVersion}.pom`;
+    const response = await fetchWithTimeout(pomUrl, {}, { timeoutMs: 15_000, maxAttempts: 2 });
+    if (!response.ok)
+        return null;
+    return billingVersionFromPom(await response.text());
+};

package/dist/checks/billing.d.ts

@@ -33,8 +33,14 @@ export interface BillingComplianceResult {
         automaticExecution: false;
     };
 }
+export type BillingTransitiveResolver = (openIapVersion: string) => Promise<{
+    module: string;
+    version: string;
+} | null>;
 export declare function billingVersionFromPom(pom: string): {
     module: string;
     version: string;
 } | null;
-export declare function checkBillingCompliance(projectPath: string, now?: Date): Promise<BillingComplianceResult>;
+export declare function checkBillingCompliance(projectPath: string, now?: Date, options?: {
+    resolveTransitive?: BillingTransitiveResolver;
+}): Promise<BillingComplianceResult>;

package/dist/checks/billing.js

@@ -1,6 +1,5 @@
 import fs from 'node:fs/promises';
 import path from 'node:path';
-import { fetchWithTimeout } from '../lib/http.js';
 const BILLING_MODULE = /com\.android\.billingclient:billing(?:-ktx)?/;
 const LITERAL_DEPENDENCY = /com\.android\.billingclient:billing(?:-ktx)?:([0-9]+(?:\.[0-9A-Za-z_-]+){0,3})/g;
 const VARIABLE_DEPENDENCY = /com\.android\.billingclient:billing(?:-ktx)?:\$\{?([A-Za-z_][A-Za-z0-9_.-]*)\}?/g;
@@ -145,7 +144,7 @@ async function nearestNodePackage(packageDir, root) {
     }
     return null;
 }
-async function reactNativeIapEvidence(root, manifestFile, manifestText) {
+async function reactNativeIapEvidence(root, manifestFile, manifestText, resolveTransitive) {
     let manifest;
     try {
         manifest = JSON.parse(manifestText);
@@ -211,20 +210,24 @@ async function reactNativeIapEvidence(root, manifestFile, manifestText) {
         };
     }
     const coordinate = `io.github.hyochan.openiap:openiap-google:${openIapVersion}`;
+    if (!resolveTransitive) {
+        return {
+            file: relativeManifest,
+            module: 'com.android.billingclient:billing',
+            expression: `react-native-iap ${declaredVersion} -> ${coordinate}; transitive lookup unavailable in repository-only mode`,
+            source: 'unresolved',
+        };
+    }
     try {
-        const pomUrl = `https://repo.maven.apache.org/maven2/io/github/hyochan/openiap/openiap-google/${openIapVersion}/openiap-google-${openIapVersion}.pom`;
-        const response = await fetchWithTimeout(pomUrl, {}, { timeoutMs: 15_000, maxAttempts: 2 });
-        if (response.ok) {
-            const resolved = billingVersionFromPom(await response.text());
-            if (resolved) {
-                return {
-                    file: relativeManifest,
-                    module: resolved.module,
-                    version: resolved.version,
-                    expression: `react-native-iap ${declaredVersion} -> ${coordinate}`,
-                    source: 'transitive',
-                };
-            }
+        const resolved = await resolveTransitive(openIapVersion);
+        if (resolved) {
+            return {
+                file: relativeManifest,
+                module: resolved.module,
+                version: resolved.version,
+                expression: `react-native-iap ${declaredVersion} -> ${coordinate}`,
+                source: 'transitive',
+            };
         }
     }
     catch {
@@ -264,7 +267,7 @@ function isWithin(scope, file) {
     const relative = path.relative(scope, file);
     return relative === '' || (!relative.startsWith(`..${path.sep}`) && relative !== '..' && !path.isAbsolute(relative));
 }
-export async function checkBillingCompliance(projectPath, now = new Date()) {
+export async function checkBillingCompliance(projectPath, now = new Date(), options = {}) {
     const root = path.resolve(projectPath);
     let rootStat;
     try {
@@ -301,7 +304,7 @@ export async function checkBillingCompliance(projectPath, now = new Date()) {
     for (const [file, text] of texts) {
         if (path.basename(file) !== 'package.json')
             continue;
-        const transitive = await reactNativeIapEvidence(root, file, text);
+        const transitive = await reactNativeIapEvidence(root, file, text, options.resolveTransitive);
         if (transitive && !evidence.some((row) => row.expression === transitive.expression))
             evidence.push(transitive);
     }

package/dist/checks/release-doctor-cli-args.d.ts

@@ -0,0 +1,8 @@
+export interface ReleaseDoctorCliArgs {
+    projectPath: string;
+    json: boolean;
+    failOnBlocker: boolean;
+    help: boolean;
+}
+export declare const RELEASE_DOCTOR_USAGE: string;
+export declare function parseReleaseDoctorArgs(argv: string[], defaultProjectPath?: string): ReleaseDoctorCliArgs;

package/dist/checks/release-doctor-cli-args.js

@@ -0,0 +1,32 @@
+export const RELEASE_DOCTOR_USAGE = [
+    'Usage: mimi-seed-release-doctor [project-path] [options]',
+    '',
+    'Options:',
+    '  --json             Print the machine-readable report',
+    '  --fail-on-blocker  Exit with status 1 when a blocker is found',
+    '  -h, --help         Show this help',
+].join('\n');
+export function parseReleaseDoctorArgs(argv, defaultProjectPath = process.cwd()) {
+    let projectPath = defaultProjectPath;
+    let projectPathExplicit = false;
+    let json = false;
+    let failOnBlocker = false;
+    let help = false;
+    for (const token of argv) {
+        if (token === '--json')
+            json = true;
+        else if (token === '--fail-on-blocker')
+            failOnBlocker = true;
+        else if (token === '--help' || token === '-h')
+            help = true;
+        else if (token.startsWith('-'))
+            throw new Error(`Unknown option: ${token}`);
+        else if (projectPathExplicit)
+            throw new Error(`Only one project path is allowed; received: ${token}`);
+        else {
+            projectPath = token;
+            projectPathExplicit = true;
+        }
+    }
+    return { projectPath, json, failOnBlocker, help };
+}

package/dist/checks/release-doctor-cli.js

@@ -1,92 +1,20 @@
 #!/usr/bin/env node
 import { resolveLang } from '../lib/lang.js';
 import { scanReleaseDoctor } from './release-doctor.js';
-function parseArgs(argv) {
-    let projectPath = process.cwd();
-    let json = false;
-    let failOnBlocker = false;
-    for (const arg of argv) {
-        if (arg === '--json')
-            json = true;
-        else if (arg === '--fail-on-blocker')
-            failOnBlocker = true;
-        else if (!arg.startsWith('-'))
-            projectPath = arg;
-    }
-    return { projectPath, json, failOnBlocker };
-}
-const COPY = {
-    ko: {
-        title: 'Mimi Seed Release Doctor — 로그인 없는 출시 점검',
-        platforms: '감지 플랫폼',
-        summary: (blockers, warnings) => `결과: 블로커 ${blockers} · 경고 ${warnings}`,
-        labels: { blocker: '블로커', warning: '경고', info: '확인' },
-        evidence: '근거',
-        action: '조치',
-        source: '출처',
-        connected: '스토어 연결 후 추가 검사',
-        connectedChecks: [
-            '스토어 등록정보와 스크린샷',
-            '업로드된 빌드의 존재 여부와 처리 상태',
-            'App Store 연령등급 응답과 Google Play 선언',
-            '심사 제출과 단계적 출시 상태',
-        ],
-        ready: '로컬 검사에서 제출 차단 요인을 찾지 못했습니다.',
-        partial: '이 결과는 저장소의 결정적 증거만 검사합니다. 스토어 상태는 연결 후 별도로 확인합니다.',
-    },
-    en: {
-        title: 'Mimi Seed Release Doctor — no-login release check',
-        platforms: 'Platforms',
-        summary: (blockers, warnings) => `Result: ${blockers} blockers · ${warnings} warnings`,
-        labels: { blocker: 'BLOCKER', warning: 'WARNING', info: 'INFO' },
-        evidence: 'Evidence',
-        action: 'Action',
-        source: 'Source',
-        connected: 'Checked after connecting stores',
-        connectedChecks: undefined,
-        ready: 'No submission blocker was found by the local checks.',
-        partial: 'This report checks deterministic repository evidence only. Store state is checked separately after connection.',
-    },
-};
-function renderFinding(finding, copy, lang) {
-    const localized = lang === 'ko' ? finding.ko : undefined;
-    const lines = [
-        `[${copy.labels[finding.severity]}] ${localized?.title ?? finding.title}`,
-        `  ${localized?.detail ?? finding.detail}`,
-    ];
-    if (finding.file)
-        lines.push(`  ${copy.evidence}: ${finding.file}`);
-    const action = localized?.action ?? finding.action;
-    if (action)
-        lines.push(`  ${copy.action}: ${action}`);
-    if (finding.sourceUrl)
-        lines.push(`  ${copy.source}: ${finding.sourceUrl}`);
-    return lines;
-}
+import { parseReleaseDoctorArgs, RELEASE_DOCTOR_USAGE } from './release-doctor-cli-args.js';
+import { renderReleaseDoctor } from './release-doctor-render.js';
 async function main() {
-    const args = parseArgs(process.argv.slice(2));
+    const args = parseReleaseDoctorArgs(process.argv.slice(2));
+    if (args.help) {
+        process.stdout.write(`${RELEASE_DOCTOR_USAGE}\n`);
+        return;
+    }
     const report = await scanReleaseDoctor(args.projectPath);
     if (args.json) {
         process.stdout.write(`${JSON.stringify(report, null, 2)}\n`);
     }
     else {
-        const lang = resolveLang();
-        const copy = COPY[lang];
-        const lines = [
-            '',
-            copy.title,
-            report.projectPath,
-            `${copy.platforms}: ${report.platforms.length ? report.platforms.join(' + ') : '-'}`,
-            copy.summary(report.counts.blocker, report.counts.warning),
-            '',
-        ];
-        for (const finding of report.findings)
-            lines.push(...renderFinding(finding, copy, lang), '');
-        if (report.counts.blocker === 0)
-            lines.push(`✓ ${copy.ready}`, '');
-        const connectedChecks = copy.connectedChecks ?? report.coverage.requiresStoreConnection;
-        lines.push(copy.partial, '', `${copy.connected}:`, ...connectedChecks.map((item) => `  - ${item}`), '');
-        process.stdout.write(lines.join('\n'));
+        process.stdout.write(renderReleaseDoctor(report, resolveLang()));
     }
     if (args.failOnBlocker && report.counts.blocker > 0)
         process.exitCode = 1;

package/dist/checks/release-doctor-render.d.ts

@@ -0,0 +1,2 @@
+import type { ReleaseDoctorReport } from './release-doctor.js';
+export declare function renderReleaseDoctor(report: ReleaseDoctorReport, lang: 'ko' | 'en'): string;

package/dist/checks/release-doctor-render.js

@@ -0,0 +1,66 @@
+const COPY = {
+    ko: {
+        title: 'Mimi Seed Release Doctor — 로그인 없는 출시 점검',
+        platforms: '감지 플랫폼',
+        summary: (blockers, warnings) => `결과: 블로커 ${blockers} · 경고 ${warnings}`,
+        labels: { blocker: '블로커', warning: '경고', info: '확인' },
+        evidence: '근거',
+        action: '조치',
+        source: '출처',
+        connected: '스토어 연결 후 추가 검사',
+        connectedChecks: [
+            '스토어 등록정보와 스크린샷',
+            '업로드된 빌드의 존재 여부와 처리 상태',
+            'App Store 연령등급 응답과 Google Play 선언',
+            '심사 제출과 단계적 출시 상태',
+        ],
+        ready: '로컬 검사에서 제출 차단 요인을 찾지 못했습니다.',
+        partial: '이 결과는 저장소의 결정적 증거만 검사합니다. 스토어 상태는 연결 후 별도로 확인합니다.',
+    },
+    en: {
+        title: 'Mimi Seed Release Doctor — no-login release check',
+        platforms: 'Platforms',
+        summary: (blockers, warnings) => `Result: ${blockers} blockers · ${warnings} warnings`,
+        labels: { blocker: 'BLOCKER', warning: 'WARNING', info: 'INFO' },
+        evidence: 'Evidence',
+        action: 'Action',
+        source: 'Source',
+        connected: 'Checked after connecting stores',
+        connectedChecks: undefined,
+        ready: 'No submission blocker was found by the local checks.',
+        partial: 'This report checks deterministic repository evidence only. Store state is checked separately after connection.',
+    },
+};
+function renderFinding(finding, copy, lang) {
+    const localized = lang === 'ko' ? finding.ko : undefined;
+    const lines = [
+        `[${copy.labels[finding.severity]}] ${localized?.title ?? finding.title}`,
+        `  ${localized?.detail ?? finding.detail}`,
+    ];
+    if (finding.file)
+        lines.push(`  ${copy.evidence}: ${finding.file}`);
+    const action = localized?.action ?? finding.action;
+    if (action)
+        lines.push(`  ${copy.action}: ${action}`);
+    if (finding.sourceUrl)
+        lines.push(`  ${copy.source}: ${finding.sourceUrl}`);
+    return lines;
+}
+export function renderReleaseDoctor(report, lang) {
+    const copy = COPY[lang];
+    const lines = [
+        '',
+        copy.title,
+        report.projectPath,
+        `${copy.platforms}: ${report.platforms.length ? report.platforms.join(' + ') : '-'}`,
+        copy.summary(report.counts.blocker, report.counts.warning),
+        '',
+    ];
+    for (const finding of report.findings)
+        lines.push(...renderFinding(finding, copy, lang), '');
+    if (report.counts.blocker === 0)
+        lines.push(`✓ ${copy.ready}`, '');
+    const connectedChecks = copy.connectedChecks ?? report.coverage.requiresStoreConnection;
+    lines.push(copy.partial, '', `${copy.connected}:`, ...connectedChecks.map((item) => `  - ${item}`), '');
+    return lines.join('\n');
+}

package/dist/checks/release-doctor.js

@@ -76,10 +76,15 @@ function parseExpo(files) {
     const platforms = new Set();
     let detected = false;
     for (const file of files.filter((candidate) => /(?:^|\/)app(?:\.config)?\.(?:json|js|cjs|mjs|ts)$/.test(candidate.relative))) {
-        detected = true;
         try {
             const json = JSON.parse(file.text);
-            const expo = ((json.expo && typeof json.expo === 'object') ? json.expo : json);
+            const hasExpoRoot = Boolean(json.expo && typeof json.expo === 'object');
+            const expo = (hasExpoRoot ? json.expo : json);
+            if (hasExpoRoot
+                || typeof expo.android?.package === 'string'
+                || typeof expo.ios?.bundleIdentifier === 'string'
+                || Array.isArray(expo.platforms))
+                detected = true;
             if (typeof expo.android?.package === 'string')
                 androidPackageNames.push(expo.android.package);
             if (typeof expo.ios?.bundleIdentifier === 'string')
@@ -94,6 +99,8 @@ function parseExpo(files) {
             // Dynamic Expo configs are common. Resolve only obvious literal identifiers and keep the rest as warnings.
             const android = file.text.match(/\bandroid\s*:\s*\{[\s\S]{0,3000}?\bpackage\s*:\s*['"]([^'"]+)['"]/);
             const ios = file.text.match(/\bios\s*:\s*\{[\s\S]{0,3000}?\bbundleIdentifier\s*:\s*['"]([^'"]+)['"]/);
+            if (android?.[1] || ios?.[1] || /\bexpo\s*:/.test(file.text))
+                detected = true;
             if (android?.[1])
                 androidPackageNames.push(android[1]);
             if (ios?.[1])
@@ -118,42 +125,49 @@ function detectProject(files) {
     const gradleFiles = files.filter((file) => /build\.gradle(?:\.kts)?$/.test(file.relative));
     const pbxFiles = files.filter((file) => file.relative.endsWith('project.pbxproj'));
     const plistFiles = files.filter((file) => file.relative.endsWith('Info.plist'));
+    const androidAppGradleFiles = gradleFiles.filter((file) => /\bcom\.android\.application\b|\blibs\.plugins\.android\.application\b|\bapplicationId\b/.test(file.text));
+    const androidAppManifestFiles = files.filter((file) => /(?:^|\/)android\/app\/src\/main\/AndroidManifest\.xml$/.test(file.relative));
+    const versionCatalogFiles = files.filter((file) => file.relative.endsWith('libs.versions.toml'));
+    const iosPbxFiles = pbxFiles.filter((file) => /(?:^|\/)ios\//.test(file.relative)
+        || /\b(?:SDKROOT\s*=\s*iphoneos|IPHONEOS_DEPLOYMENT_TARGET|TARGETED_DEVICE_FAMILY)\b/.test(file.text));
+    const iosPlistFiles = plistFiles.filter((file) => /(?:^|\/)ios\//.test(file.relative) || iosPbxFiles.length > 0);
     const androidPackageNames = [...expo.androidPackageNames];
-    for (const file of gradleFiles) {
+    for (const file of androidAppGradleFiles) {
         for (const match of file.text.matchAll(/\bapplicationId\s*(?:=\s*)?["']([^"']+)["']/g)) {
             androidPackageNames.push(match[1]);
         }
     }
     const iosBundleIds = [...expo.iosBundleIds];
-    for (const file of pbxFiles) {
+    for (const file of iosPbxFiles) {
         for (const match of file.text.matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*([^;]+);/g)) {
             const value = match[1].trim().replace(/^["']|["']$/g, '');
-            if (value && !value.includes('$'))
+            if (value && !value.includes('$') && !/(?:^|\.)(?:Tests?|UITests?|RunnerTests)$/i.test(value)) {
                 iosBundleIds.push(value);
+            }
         }
     }
-    for (const file of plistFiles) {
+    for (const file of iosPlistFiles) {
         const match = file.text.match(/<key>CFBundleIdentifier<\/key>\s*<string>([^<]+)<\/string>/);
         if (match?.[1] && !match[1].includes('$'))
             iosBundleIds.push(match[1]);
     }
     const expoTargetsAndroid = expo.detected && (expo.platforms.size === 0 || expo.platforms.has('android'));
     const expoTargetsIos = expo.detected && (expo.platforms.size === 0 || expo.platforms.has('ios'));
-    const android = gradleFiles.length > 0
+    const android = androidAppGradleFiles.length > 0
         || expo.androidPackageNames.length > 0
         || expoTargetsAndroid
-        || files.some((file) => /(?:^|\/)android\//.test(file.relative));
-    const ios = pbxFiles.length > 0
-        || plistFiles.length > 0
+        || androidAppManifestFiles.length > 0;
+    const ios = iosPbxFiles.length > 0
+        || iosPlistFiles.some((file) => /(?:^|\/)ios\//.test(file.relative))
         || expo.iosBundleIds.length > 0
-        || expoTargetsIos
-        || files.some((file) => /(?:^|\/)ios\//.test(file.relative));
+        || expoTargetsIos;
+    const androidGradleFiles = gradleFiles.filter((file) => androidAppGradleFiles.includes(file) || /(?:^|\/)android\//.test(file.relative));
     return {
         android,
         ios,
         androidPackageNames: unique(androidPackageNames),
         iosBundleIds: unique(iosBundleIds),
-        gradleFiles,
+        gradleFiles: [...androidGradleFiles, ...versionCatalogFiles],
     };
 }
 function targetPolicy(now) {
@@ -169,12 +183,39 @@ function targetPolicy(now) {
 function targetSdkFindings(gradleFiles, now) {
     const evidence = [];
     let hasUnresolvedExpression = false;
-    for (const file of gradleFiles) {
+    const catalogs = new Map();
+    for (const file of gradleFiles.filter((candidate) => candidate.relative.endsWith('libs.versions.toml'))) {
+        let section = '';
+        for (const rawLine of file.text.split(/\r?\n/)) {
+            const line = rawLine.replace(/\s+#.*$/, '').trim();
+            const sectionMatch = line.match(/^\[([^\]]+)]$/);
+            if (sectionMatch) {
+                section = sectionMatch[1];
+                continue;
+            }
+            if (section !== 'versions')
+                continue;
+            const version = line.match(/^([A-Za-z0-9_.-]+)\s*=\s*["'](\d+)["']/);
+            if (version)
+                catalogs.set(version[1], { value: Number.parseInt(version[2], 10), file: file.relative });
+        }
+    }
+    for (const file of gradleFiles.filter((candidate) => /build\.gradle(?:\.kts)?$/.test(candidate.relative))) {
         for (const match of file.text.matchAll(/\btargetSdk(?:Version)?\s*(?:=\s*)?(\d+)/g)) {
             evidence.push({ file: file.relative, value: Number.parseInt(match[1], 10) });
         }
+        for (const match of file.text.matchAll(/\btargetSdk(?:Version)?\s*(?:=\s*)?libs\.versions\.([A-Za-z0-9_.-]+?)(?=\.get\(\)|\s|$)/g)) {
+            const resolved = catalogs.get(match[1]) ?? catalogs.get(match[1].replace(/\./g, '-'));
+            if (resolved)
+                evidence.push({ file: resolved.file, value: resolved.value });
+        }
         if (/\btargetSdk(?:Version)?\b/.test(file.text) && !/\btargetSdk(?:Version)?\s*(?:=\s*)?\d+/.test(file.text)) {
-            hasUnresolvedExpression = true;
+            const catalogExpression = /\btargetSdk(?:Version)?\s*(?:=\s*)?libs\.versions\.([A-Za-z0-9_.-]+?)(?=\.get\(\)|\s|$)/.exec(file.text);
+            const resolved = catalogExpression
+                ? catalogs.get(catalogExpression[1]) ?? catalogs.get(catalogExpression[1].replace(/\./g, '-'))
+                : undefined;
+            if (!resolved)
+                hasUnresolvedExpression = true;
         }
     }
     const policy = targetPolicy(now);
@@ -247,7 +288,11 @@ function targetSdkFindings(gradleFiles, now) {
 function hasSpecializedAndroidProfile(files) {
     return files
         .filter((file) => file.relative.endsWith('AndroidManifest.xml'))
-        .some((file) => /android\.hardware\.type\.(?:watch|automotive)|android\.software\.(?:leanback|xr)|LEANBACK_LAUNCHER/i.test(file.text));
+        .some((file) => {
+        const manifest = file.text.replace(/<!--[\s\S]*?-->/g, '');
+        return /android\.hardware\.type\.(?:watch|automotive)|android\.(?:software|hardware)\.xr|LEANBACK_LAUNCHER/i.test(manifest)
+            || /android\.software\.leanback[^>]*android:required\s*=\s*["']true["']/i.test(manifest);
+    });
 }
 export async function scanReleaseDoctor(projectPath, now = new Date()) {
     const root = path.resolve(projectPath);
@@ -308,6 +353,20 @@ export async function scanReleaseDoctor(projectPath, now = new Date()) {
                     detail: detected.androidPackageNames.join(', '),
                 },
             });
+            if (detected.androidPackageNames.length > 1) {
+                findings.push({
+                    code: 'MULTIPLE_ANDROID_APPLICATION_IDS',
+                    severity: 'warning',
+                    title: 'Multiple Android application IDs share this scan scope',
+                    detail: 'Repository-wide Target API and Billing evidence may belong to different apps or variants.',
+                    action: 'Run Release Doctor with --path set to one mobile app root before treating blockers as app-specific.',
+                    ko: {
+                        title: '검사 범위에 Android application ID가 여러 개 있음',
+                        detail: '저장소 전체에서 찾은 Target API와 Billing 근거가 서로 다른 앱 또는 variant에 속할 수 있습니다.',
+                        action: '블로커를 특정 앱의 결과로 판단하기 전에 --path로 모바일 앱 루트를 하나만 지정해 다시 검사하세요.',
+                    },
+                });
+            }
         }
         if (hasSpecializedAndroidProfile(files)) {
             findings.push({
@@ -380,6 +439,20 @@ export async function scanReleaseDoctor(projectPath, now = new Date()) {
                     detail: detected.iosBundleIds.join(', '),
                 },
             });
+            if (detected.iosBundleIds.length > 1) {
+                findings.push({
+                    code: 'MULTIPLE_IOS_BUNDLE_IDS',
+                    severity: 'warning',
+                    title: 'Multiple iOS bundle identifiers share this scan scope',
+                    detail: 'The identifiers may represent multiple apps, extensions, or release targets in the same repository.',
+                    action: 'Confirm which identifier belongs to the release target; use --path to narrow a monorepo scan.',
+                    ko: {
+                        title: '검사 범위에 iOS bundle identifier가 여러 개 있음',
+                        detail: '같은 저장소의 여러 앱, extension 또는 출시 타깃 식별자가 함께 감지됐을 수 있습니다.',
+                        action: '출시 타깃의 식별자를 확인하고, 모노레포라면 --path로 검사 범위를 좁히세요.',
+                    },
+                });
+            }
         }
     }
     const counts = findings.reduce((result, finding) => ({ ...result, [finding.severity]: result[finding.severity] + 1 }), { blocker: 0, warning: 0, info: 0 });

package/dist/registers/checks.js

@@ -6,6 +6,7 @@ import * as appstore from '../appstore/tools.js';
 import * as playstore from '../playstore/tools.js';
 import { jsonResult } from '../lib/mcp-response.js';
 import { checkBillingCompliance } from '../checks/billing.js';
+import { resolveOpenIapBilling } from '../checks/billing-network.js';
 export function registerChecksTools(server) {
     server.tool('android_check_billing_compliance', [
         '로컬 Android 저장소의 Google Play Billing Library 버전을 읽기 전용으로 탐지하고 제출 정책 마감과 비교합니다.',
@@ -13,7 +14,7 @@ export function registerChecksTools(server) {
         '코드를 자동 수정하지 않고 공식 Android CLI Skill 설치 명령과 업그레이드 프롬프트만 반환합니다.',
     ].join(' '), {
         projectPath: z.string().optional().describe('검사할 프로젝트 절대경로 (기본: MCP 프로세스 현재 디렉터리)'),
-    }, async ({ projectPath }) => jsonResult(await checkBillingCompliance(projectPath ?? process.cwd())));
+    }, async ({ projectPath }) => jsonResult(await checkBillingCompliance(projectPath ?? process.cwd(), new Date(), { resolveTransitive: resolveOpenIapBilling })));
     server.tool('playstore_check_submission_risks', [
         'Google Play 제출 전 위험 요소를 자동으로 점검합니다.',
         '블로커(반드시 수정)와 경고(권장 수정)로 분류하여 반환합니다.',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yoonion/mimi-seed-mcp",
-  "version": "0.19.8",
+  "version": "0.19.10",
   "description": "Mimi Seed MCP server \u2014 Firebase + AdMob + Google Play + App Store management for Claude Code / Codex / Cursor / any MCP client.",
   "type": "module",
   "bin": {