@yoonion/mimi-seed-mcp 0.3.12 → 0.3.14

package/dist/appstore/auth.d.ts

@@ -5,5 +5,5 @@ export interface AppStoreCredentials {
 }
 export declare function getAppStoreCredentials(): AppStoreCredentials | null;
 export declare function saveAppStoreCredentials(creds: AppStoreCredentials): void;
-export declare function generateToken(creds: AppStoreCredentials): string;
-export declare function getAuthHeaders(): Record<string, string> | null;
+export declare function generateToken(creds: AppStoreCredentials): Promise<string>;
+export declare function getAuthHeaders(): Promise<Record<string, string> | null>;

package/dist/appstore/auth.js

@@ -1,4 +1,4 @@
-import jwt from 'jsonwebtoken';
+import { SignJWT, importPKCS8 } from 'jose';
 import fs from 'node:fs';
 import path from 'node:path';
 import os from 'node:os';
@@ -28,26 +28,43 @@ export function saveAppStoreCredentials(creds) {
         fs.mkdirSync(dir, { recursive: true });
     fs.writeFileSync(CONFIG_PATH, JSON.stringify(creds, null, 2), { mode: 0o600 });
 }
-export function generateToken(creds) {
-    const now = Math.floor(Date.now() / 1000);
-    return jwt.sign({
-        iss: creds.issuerId,
-        iat: now,
-        exp: now + 20 * 60, // 20분
-        aud: 'appstoreconnect-v1',
-    }, creds.privateKey, {
-        algorithm: 'ES256',
-        header: {
-            alg: 'ES256',
-            kid: creds.keyId,
-            typ: 'JWT',
-        },
-    });
+function normalizePrivateKey(raw) {
+    // Normalize CRLF → LF, strip extra whitespace from lines
+    const lines = raw.replace(/\r\n/g, '\n').replace(/\r/g, '\n').split('\n');
+    const header = lines.find(l => l.startsWith('-----BEGIN'));
+    const footer = lines.find(l => l.startsWith('-----END'));
+    if (!header || !footer)
+        return raw; // not PEM, pass through and let importPKCS8 error
+    const body = lines
+        .filter(l => l && !l.startsWith('-----'))
+        .join('');
+    // Re-chunk into 64-char lines (standard PEM)
+    const chunks = body.match(/.{1,64}/g) ?? [];
+    return [header, ...chunks, footer, ''].join('\n');
 }
-export function getAuthHeaders() {
+export async function generateToken(creds) {
+    const normalizedKey = normalizePrivateKey(creds.privateKey);
+    let key;
+    try {
+        key = await importPKCS8(normalizedKey, 'ES256');
+    }
+    catch (err) {
+        throw new Error(`App Store 개인 키 파싱 실패 — ~/.mimi-seed/appstore.json의 privateKey 형식 확인 필요.\n원인: ${err.message}`);
+    }
+    // Subtract 60s from iat to tolerate local clock running slightly ahead of Apple servers.
+    const iat = Math.floor(Date.now() / 1000) - 60;
+    return new SignJWT({})
+        .setProtectedHeader({ alg: 'ES256', kid: creds.keyId, typ: 'JWT' })
+        .setIssuer(creds.issuerId)
+        .setIssuedAt(iat)
+        .setExpirationTime(iat + 20 * 60)
+        .setAudience('appstoreconnect-v1')
+        .sign(key);
+}
+export async function getAuthHeaders() {
     const creds = getAppStoreCredentials();
     if (!creds)
         return null;
-    const token = generateToken(creds);
+    const token = await generateToken(creds);
     return { Authorization: `Bearer ${token}` };
 }

package/dist/appstore/screenshots.js

@@ -14,8 +14,8 @@ import crypto from 'node:crypto';
  *   4. commit — PATCH /appScreenshots/{id}  { uploaded: true, sourceFileChecksum }
  */
 const BASE = 'https://api.appstoreconnect.apple.com/v1';
-function authHeadersOrThrow() {
-    const headers = getAuthHeaders();
+async function authHeadersOrThrow() {
+    const headers = await getAuthHeaders();
     if (!headers) {
         throw new Error([
             '❌ App Store Connect 인증이 필요해.',
@@ -27,7 +27,7 @@ function authHeadersOrThrow() {
     return headers;
 }
 async function req(pathOrUrl, init = {}) {
-    const headers = authHeadersOrThrow();
+    const headers = await authHeadersOrThrow();
     const url = pathOrUrl.startsWith('http') ? pathOrUrl : `${BASE}${pathOrUrl}`;
     const res = await fetch(url, {
         ...init,

package/dist/appstore/tools.d.ts

@@ -41,6 +41,15 @@ export declare function updateVersionLocalization(localizationId: string, fields
  * localizationId를 직접 모를 때 편의용.
  */
 export declare function updateVersionWhatsNew(versionId: string, locale: string, fields: LocalizationUpdateFields): Promise<any>;
+export declare function updateReviewNotes(versionId: string, notes: string): Promise<{
+    reviewDetailId: string;
+    notes: string;
+}>;
+export declare function getReviewNotes(versionId: string): Promise<{
+    reviewDetailId: string | null;
+    notes: string | null;
+    contactEmail: string | null;
+}>;
 export declare function listBuilds(appId: string): Promise<any>;
 export declare function listBetaGroups(appId: string): Promise<any>;
 export declare function getAppInfo(appId: string): Promise<any>;

package/dist/appstore/tools.js

@@ -5,7 +5,7 @@ import { getAuthHeaders } from './auth.js';
  */
 const BASE = 'https://api.appstoreconnect.apple.com/v1';
 export async function apiGet(path, params) {
-    const headers = getAuthHeaders();
+    const headers = await getAuthHeaders();
     if (!headers)
         throw new Error([
             '❌ App Store Connect 인증이 필요해.',
@@ -29,7 +29,7 @@ export async function apiGet(path, params) {
     return res.json();
 }
 async function apiPatch(path, body) {
-    const headers = getAuthHeaders();
+    const headers = await getAuthHeaders();
     if (!headers)
         throw new Error([
             '❌ App Store Connect 인증이 필요해.',
@@ -51,7 +51,7 @@ async function apiPatch(path, body) {
     return text ? JSON.parse(text) : { ok: true };
 }
 async function apiPost(path, body) {
-    const headers = getAuthHeaders();
+    const headers = await getAuthHeaders();
     if (!headers)
         throw new Error([
             '❌ App Store Connect 인증이 필요해.',
@@ -185,6 +185,60 @@ export async function updateVersionWhatsNew(versionId, locale, fields) {
     }
     return updateVersionLocalization(target.id, fields);
 }
+// ─── 리뷰어 노트 (appStoreReviewDetail.notes) ───
+export async function updateReviewNotes(versionId, notes) {
+    // 1. 기존 reviewDetail 조회
+    let reviewDetailId = null;
+    try {
+        const existing = await apiGet(`/appStoreVersions/${versionId}/appStoreReviewDetail`, {
+            'fields[appStoreReviewDetails]': 'notes,contactFirstName,contactLastName,contactPhone,contactEmail',
+        });
+        reviewDetailId = existing?.data?.id ?? null;
+    }
+    catch {
+        // 없으면 새로 생성
+    }
+    if (reviewDetailId) {
+        // 2a. 있으면 PATCH
+        const updated = await apiPatch(`/appStoreReviewDetails/${reviewDetailId}`, {
+            data: {
+                type: 'appStoreReviewDetails',
+                id: reviewDetailId,
+                attributes: { notes },
+            },
+        });
+        return { reviewDetailId, notes: updated?.data?.attributes?.notes ?? notes };
+    }
+    else {
+        // 2b. 없으면 POST (version과 relationship 연결)
+        const created = await apiPost('/appStoreReviewDetails', {
+            data: {
+                type: 'appStoreReviewDetails',
+                attributes: { notes },
+                relationships: {
+                    appStoreVersion: { data: { type: 'appStoreVersions', id: versionId } },
+                },
+            },
+        });
+        const newId = created?.data?.id ?? '';
+        return { reviewDetailId: newId, notes: created?.data?.attributes?.notes ?? notes };
+    }
+}
+export async function getReviewNotes(versionId) {
+    try {
+        const data = await apiGet(`/appStoreVersions/${versionId}/appStoreReviewDetail`, {
+            'fields[appStoreReviewDetails]': 'notes,contactEmail,demoAccountName,demoAccountRequired',
+        });
+        return {
+            reviewDetailId: data?.data?.id ?? null,
+            notes: data?.data?.attributes?.notes ?? null,
+            contactEmail: data?.data?.attributes?.contactEmail ?? null,
+        };
+    }
+    catch {
+        return { reviewDetailId: null, notes: null, contactEmail: null };
+    }
+}
 // ─── 빌드 ───
 export async function listBuilds(appId) {
     const data = await apiGet(`/builds`, {
@@ -421,7 +475,7 @@ export async function submitVersionForReview(versionId) {
 // 자동 제출(submission)은 권장 가이드라인 (스크린샷·리뷰 노트 등)이 충족돼야 통과.
 const IAP_V2_BASE = 'https://api.appstoreconnect.apple.com/v2';
 async function apiPostV2(path, body) {
-    const headers = getAuthHeaders();
+    const headers = await getAuthHeaders();
     if (!headers) {
         throw new Error('App Store Connect 인증 필요 — npx -p @yoonion/mimi-seed-mcp mimi-seed-appstore-auth');
     }

package/dist/index.js

@@ -830,6 +830,32 @@ server.tool('appstore_update_whats_new', "App Store '이 버전의 새로운 기
     const result = await appstore.updateVersionWhatsNew(versionId, locale, { whatsNew });
     return { content: [{ type: 'text', text: `✅ ${locale} 로캘의 What's New가 업데이트됐어.\n\n${JSON.stringify(result, null, 2)}` }] };
 });
+server.tool('appstore_update_review_notes', "App Store 심사 리뷰어 노트(Notes for App Review) 등록/수정. versionId 버전에 appStoreReviewDetail.notes를 PATCH하거나 없으면 POST로 생성. 심사 시 리뷰어에게 전달되는 테스트 계정·기능 안내 텍스트 작성에 사용.", {
+    versionId: z.string().describe('버전 ID (appstore_list_versions 결과)'),
+    notes: z.string().describe('리뷰어에게 전달할 메모 (테스트 계정, 주요 변경사항, 접근 방법 등). 4000자 이내 권장.'),
+}, async ({ versionId, notes }) => {
+    const result = await appstore.updateReviewNotes(versionId, notes);
+    return {
+        content: [{
+                type: 'text',
+                text: `✅ 리뷰어 노트가 저장됐어.\n\nreviewDetailId: ${result.reviewDetailId}\n\n${result.notes}`,
+            }],
+    };
+});
+server.tool('appstore_get_review_notes', "App Store 심사 리뷰어 노트(Notes for App Review) 조회. 현재 등록된 notes, contactEmail 확인용.", {
+    versionId: z.string().describe('버전 ID (appstore_list_versions 결과)'),
+}, async ({ versionId }) => {
+    const result = await appstore.getReviewNotes(versionId);
+    if (!result.reviewDetailId) {
+        return { content: [{ type: 'text', text: '이 버전에는 아직 리뷰어 노트가 없어. appstore_update_review_notes로 등록해줘.' }] };
+    }
+    return {
+        content: [{
+                type: 'text',
+                text: `reviewDetailId: ${result.reviewDetailId}\ncontactEmail: ${result.contactEmail ?? '(없음)'}\n\n노트:\n${result.notes ?? '(비어있음)'}`,
+            }],
+    };
+});
 server.tool('appstore_list_builds', 'TestFlight 빌드 목록', { appId: z.string().describe('앱 ID') }, async ({ appId }) => {
     const builds = await appstore.listBuilds(appId);
     return { content: [{ type: 'text', text: JSON.stringify(builds, null, 2) }] };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yoonion/mimi-seed-mcp",
-  "version": "0.3.12",
+  "version": "0.3.14",
   "description": "Mimi Seed MCP server — Firebase + AdMob + Google Play + App Store management for Claude Code / Cursor / any MCP client.",
   "type": "module",
   "bin": {
@@ -47,12 +47,11 @@
     "@modelcontextprotocol/sdk": "^1.12.1",
     "@onesub/providers": "^0.2.0",
     "googleapis": "^171.4.0",
-    "jsonwebtoken": "^9.0.3",
+    "jose": "^5.10.0",
     "open": "^10.1.0",
     "zod": "^3.24.0"
   },
   "devDependencies": {
-    "@types/jsonwebtoken": "^9.0.10",
     "@types/node": "^22.0.0",
     "tsx": "^4.19.0",
     "typescript": "^5.7.0"