@yoonion/mimi-seed-mcp 0.3.12 → 0.3.13

package/dist/appstore/auth.d.ts

@@ -5,5 +5,5 @@ export interface AppStoreCredentials {
 }
 export declare function getAppStoreCredentials(): AppStoreCredentials | null;
 export declare function saveAppStoreCredentials(creds: AppStoreCredentials): void;
-export declare function generateToken(creds: AppStoreCredentials): string;
-export declare function getAuthHeaders(): Record<string, string> | null;
+export declare function generateToken(creds: AppStoreCredentials): Promise<string>;
+export declare function getAuthHeaders(): Promise<Record<string, string> | null>;

package/dist/appstore/auth.js

@@ -1,4 +1,4 @@
-import jwt from 'jsonwebtoken';
+import { SignJWT, importPKCS8 } from 'jose';
 import fs from 'node:fs';
 import path from 'node:path';
 import os from 'node:os';
@@ -28,26 +28,20 @@ export function saveAppStoreCredentials(creds) {
         fs.mkdirSync(dir, { recursive: true });
     fs.writeFileSync(CONFIG_PATH, JSON.stringify(creds, null, 2), { mode: 0o600 });
 }
-export function generateToken(creds) {
-    const now = Math.floor(Date.now() / 1000);
-    return jwt.sign({
-        iss: creds.issuerId,
-        iat: now,
-        exp: now + 20 * 60, // 20분
-        aud: 'appstoreconnect-v1',
-    }, creds.privateKey, {
-        algorithm: 'ES256',
-        header: {
-            alg: 'ES256',
-            kid: creds.keyId,
-            typ: 'JWT',
-        },
-    });
+export async function generateToken(creds) {
+    const key = await importPKCS8(creds.privateKey, 'ES256');
+    return new SignJWT({})
+        .setProtectedHeader({ alg: 'ES256', kid: creds.keyId, typ: 'JWT' })
+        .setIssuer(creds.issuerId)
+        .setIssuedAt()
+        .setExpirationTime('20m')
+        .setAudience('appstoreconnect-v1')
+        .sign(key);
 }
-export function getAuthHeaders() {
+export async function getAuthHeaders() {
     const creds = getAppStoreCredentials();
     if (!creds)
         return null;
-    const token = generateToken(creds);
+    const token = await generateToken(creds);
     return { Authorization: `Bearer ${token}` };
 }

package/dist/appstore/screenshots.js

@@ -14,8 +14,8 @@ import crypto from 'node:crypto';
  *   4. commit — PATCH /appScreenshots/{id}  { uploaded: true, sourceFileChecksum }
  */
 const BASE = 'https://api.appstoreconnect.apple.com/v1';
-function authHeadersOrThrow() {
-    const headers = getAuthHeaders();
+async function authHeadersOrThrow() {
+    const headers = await getAuthHeaders();
     if (!headers) {
         throw new Error([
             '❌ App Store Connect 인증이 필요해.',
@@ -27,7 +27,7 @@ function authHeadersOrThrow() {
     return headers;
 }
 async function req(pathOrUrl, init = {}) {
-    const headers = authHeadersOrThrow();
+    const headers = await authHeadersOrThrow();
     const url = pathOrUrl.startsWith('http') ? pathOrUrl : `${BASE}${pathOrUrl}`;
     const res = await fetch(url, {
         ...init,

package/dist/appstore/tools.js

@@ -5,7 +5,7 @@ import { getAuthHeaders } from './auth.js';
  */
 const BASE = 'https://api.appstoreconnect.apple.com/v1';
 export async function apiGet(path, params) {
-    const headers = getAuthHeaders();
+    const headers = await getAuthHeaders();
     if (!headers)
         throw new Error([
             '❌ App Store Connect 인증이 필요해.',
@@ -29,7 +29,7 @@ export async function apiGet(path, params) {
     return res.json();
 }
 async function apiPatch(path, body) {
-    const headers = getAuthHeaders();
+    const headers = await getAuthHeaders();
     if (!headers)
         throw new Error([
             '❌ App Store Connect 인증이 필요해.',
@@ -51,7 +51,7 @@ async function apiPatch(path, body) {
     return text ? JSON.parse(text) : { ok: true };
 }
 async function apiPost(path, body) {
-    const headers = getAuthHeaders();
+    const headers = await getAuthHeaders();
     if (!headers)
         throw new Error([
             '❌ App Store Connect 인증이 필요해.',
@@ -421,7 +421,7 @@ export async function submitVersionForReview(versionId) {
 // 자동 제출(submission)은 권장 가이드라인 (스크린샷·리뷰 노트 등)이 충족돼야 통과.
 const IAP_V2_BASE = 'https://api.appstoreconnect.apple.com/v2';
 async function apiPostV2(path, body) {
-    const headers = getAuthHeaders();
+    const headers = await getAuthHeaders();
     if (!headers) {
         throw new Error('App Store Connect 인증 필요 — npx -p @yoonion/mimi-seed-mcp mimi-seed-appstore-auth');
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yoonion/mimi-seed-mcp",
-  "version": "0.3.12",
+  "version": "0.3.13",
   "description": "Mimi Seed MCP server — Firebase + AdMob + Google Play + App Store management for Claude Code / Cursor / any MCP client.",
   "type": "module",
   "bin": {
@@ -47,12 +47,11 @@
     "@modelcontextprotocol/sdk": "^1.12.1",
     "@onesub/providers": "^0.2.0",
     "googleapis": "^171.4.0",
-    "jsonwebtoken": "^9.0.3",
+    "jose": "^5.10.0",
     "open": "^10.1.0",
     "zod": "^3.24.0"
   },
   "devDependencies": {
-    "@types/jsonwebtoken": "^9.0.10",
     "@types/node": "^22.0.0",
     "tsx": "^4.19.0",
     "typescript": "^5.7.0"