@yoonion/mimi-seed-mcp 0.3.16 → 0.3.18

package/LICENSE

@@ -0,0 +1,75 @@
+# PolyForm Noncommercial License 1.0.0
+
+<https://polyformproject.org/licenses/noncommercial/1.0.0>
+
+Required Notice: Copyright 2026 Pryzm GG (https://mimi-seed.pryzm.gg)
+
+## Acceptance
+
+In order to get any license under these terms, you must agree to them as both strict obligations and conditions to all your licenses.
+
+## Copyright License
+
+The licensor grants you a copyright license for the software to do everything you might do with the software that would otherwise infringe the licensor's copyright in it for any permitted purpose.  However, you may only distribute the software according to [Distribution License](#distribution-license) and make changes or new works based on the software according to [Changes and New Works License](#changes-and-new-works-license).
+
+## Distribution License
+
+The licensor grants you an additional copyright license to distribute copies of the software.  Your license to distribute covers distributing the software with changes and new works permitted by [Changes and New Works License](#changes-and-new-works-license).
+
+## Notices
+
+You must ensure that anyone who gets a copy of any part of the software from you also gets a copy of these terms or the URL for them above, as well as copies of any plain-text lines beginning with `Required Notice:` that the licensor provided with the software.  For example:
+
+> Required Notice: Copyright Yoyodyne, Inc. (http://example.com)
+
+## Changes and New Works License
+
+The licensor grants you an additional copyright license to make changes and new works based on the software for any permitted purpose.
+
+## Patent License
+
+The licensor grants you a patent license for the software that covers patent claims the licensor can license, or becomes able to license, that you would infringe by using the software.
+
+## Noncommercial Purposes
+
+Any noncommercial purpose is a permitted purpose.
+
+## Personal Uses
+
+Personal use for research, experiment, and testing for the benefit of public knowledge, personal study, private entertainment, hobby projects, amateur pursuits, or religious observance, without any anticipated commercial application, is use for a permitted purpose.
+
+## Noncommercial Organizations
+
+Use by any charitable organization, educational institution, public research organization, public safety or health organization, environmental protection organization, or government institution is use for a permitted purpose regardless of the source of funding or obligations resulting from the funding.
+
+## Fair Use
+
+You may have "fair use" rights for the software under the law. These terms do not limit them.
+
+## No Other Rights
+
+These terms do not allow you to sublicense or transfer any of your licenses to anyone else, or prevent the licensor from granting licenses to anyone else.  These terms do not imply any other licenses.
+
+## Patent Defense
+
+If you make any written claim that the software infringes or contributes to infringement of any patent, your patent license for the software granted under these terms ends immediately. If your company makes such a claim, your patent license ends immediately for work on behalf of your company.
+
+## Violations
+
+The first time you are notified in writing that you have violated any of these terms, or done anything with the software not covered by your licenses, your licenses can nonetheless continue if you come into full compliance with these terms, and take practical steps to correct past violations, within 32 days of receiving notice.  Otherwise, all your licenses end immediately.
+
+## No Liability
+
+***As far as the law allows, the software comes as is, without any warranty or condition, and the licensor will not be liable to you for any damages arising out of these terms or the use or nature of the software, under any kind of legal claim.***
+
+## Definitions
+
+The **licensor** is the individual or entity offering these terms, and the **software** is the software the licensor makes available under these terms.
+
+**You** refers to the individual or entity agreeing to these terms.
+
+**Your company** is any legal entity, sole proprietorship, or other kind of organization that you work for, plus all organizations that have control over, are under the control of, or are under common control with that organization.  **Control** means ownership of substantially all the assets of an entity, or the power to direct its management and policies by vote, contract, or otherwise.  Control can be direct or indirect.
+
+**Your licenses** are all the licenses granted to you for the software under these terms.
+
+**Use** means anything you do with the software requiring one of your licenses.

package/dist/appstore/tools.d.ts

@@ -44,6 +44,7 @@ export declare function updateVersionWhatsNew(versionId: string, locale: string,
 export declare function updateReviewNotes(versionId: string, notes: string): Promise<{
     reviewDetailId: string;
     notes: string;
+    created: boolean;
 }>;
 export declare function getReviewNotes(versionId: string): Promise<{
     reviewDetailId: string | null;
@@ -88,6 +89,12 @@ export declare function submitVersionForReview(versionId: string): Promise<{
     itemAttached: boolean;
     state: any;
 }>;
+export declare function cancelVersionReview(versionId: string): Promise<{
+    submissionId: string;
+    previousState: string;
+    newState: string;
+    versionId: string;
+}>;
 export type AppleIapType = 'CONSUMABLE' | 'NON_CONSUMABLE' | 'NON_RENEWING_SUBSCRIPTION';
 export interface CreateInAppPurchaseInput {
     appId: string;

package/dist/appstore/tools.js

@@ -186,8 +186,16 @@ export async function updateVersionWhatsNew(versionId, locale, fields) {
     return updateVersionLocalization(target.id, fields);
 }
 // ─── 리뷰어 노트 (appStoreReviewDetail.notes) ───
+/**
+ * apiGet이 throw한 에러가 404(리소스 없음)인지 판별.
+ * apiGet은 `App Store API ${status}: ${body}` 형식으로 throw하므로 prefix로 판별.
+ * 404 외(401/403/500 등)는 마스킹하지 않고 그대로 throw해야 디버깅 가능.
+ */
+function isNotFoundError(err) {
+    return err instanceof Error && /^App Store API 404:/.test(err.message);
+}
 export async function updateReviewNotes(versionId, notes) {
-    // 1. 기존 reviewDetail 조회
+    // 1. 기존 reviewDetail 조회 — 404면 신규 생성, 그 외 에러는 throw
     let reviewDetailId = null;
     try {
         const existing = await apiGet(`/appStoreVersions/${versionId}/appStoreReviewDetail`, {
@@ -195,34 +203,36 @@ export async function updateReviewNotes(versionId, notes) {
         });
         reviewDetailId = existing?.data?.id ?? null;
     }
-    catch {
-        // 없으면 새로 생성
+    catch (err) {
+        if (!isNotFoundError(err))
+            throw err;
     }
     if (reviewDetailId) {
-        // 2a. 있으면 PATCH
         const updated = await apiPatch(`/appStoreReviewDetails/${reviewDetailId}`, {
-            data: {
-                type: 'appStoreReviewDetails',
-                id: reviewDetailId,
-                attributes: { notes },
-            },
+            data: { type: 'appStoreReviewDetails', id: reviewDetailId, attributes: { notes } },
         });
-        return { reviewDetailId, notes: updated?.data?.attributes?.notes ?? notes };
+        return {
+            reviewDetailId,
+            notes: updated?.data?.attributes?.notes ?? notes,
+            created: false,
+        };
     }
-    else {
-        // 2b. 없으면 POST (version과 relationship 연결)
-        const created = await apiPost('/appStoreReviewDetails', {
-            data: {
-                type: 'appStoreReviewDetails',
-                attributes: { notes },
-                relationships: {
-                    appStoreVersion: { data: { type: 'appStoreVersions', id: versionId } },
-                },
+    // 신규 생성
+    const created = await apiPost('/appStoreReviewDetails', {
+        data: {
+            type: 'appStoreReviewDetails',
+            attributes: { notes },
+            relationships: {
+                appStoreVersion: { data: { type: 'appStoreVersions', id: versionId } },
             },
-        });
-        const newId = created?.data?.id ?? '';
-        return { reviewDetailId: newId, notes: created?.data?.attributes?.notes ?? notes };
-    }
+        },
+    });
+    const newId = created?.data?.id ?? '';
+    return {
+        reviewDetailId: newId,
+        notes: created?.data?.attributes?.notes ?? notes,
+        created: true,
+    };
 }
 export async function getReviewNotes(versionId) {
     try {
@@ -235,8 +245,11 @@ export async function getReviewNotes(versionId) {
             contactEmail: data?.data?.attributes?.contactEmail ?? null,
         };
     }
-    catch {
-        return { reviewDetailId: null, notes: null, contactEmail: null };
+    catch (err) {
+        if (isNotFoundError(err)) {
+            return { reviewDetailId: null, notes: null, contactEmail: null };
+        }
+        throw err;
     }
 }
 // ─── 빌드 ───
@@ -464,6 +477,40 @@ export async function submitVersionForReview(versionId) {
         state: submitted?.data?.attributes?.state ?? 'WAITING_FOR_REVIEW',
     };
 }
+// ─── 심사 철회 (Cancel Review) ───
+// WAITING_FOR_REVIEW 상태의 reviewSubmission에만 적용 가능.
+// IN_REVIEW 진입 후에는 Apple API가 거부함 (409).
+// submitted=false PATCH → version이 PREPARE_FOR_SUBMISSION으로 복귀.
+export async function cancelVersionReview(versionId) {
+    const { appId, platform } = await getVersionAppAndPlatform(versionId);
+    // 취소 가능한 상태(WAITING_FOR_REVIEW)의 submission 검색
+    const data = await apiGet('/reviewSubmissions', {
+        'filter[app]': appId,
+        'filter[platform]': platform,
+        'filter[state]': 'WAITING_FOR_REVIEW',
+        'limit': '1',
+    });
+    const submission = data?.data?.[0];
+    if (!submission) {
+        throw new Error([
+            `취소 가능한 심사 제출이 없어 (WAITING_FOR_REVIEW 상태 없음).`,
+            `IN_REVIEW 이상은 API로 취소 불가 — App Store Connect 웹에서 직접 처리하거나`,
+            `Apple 심사 결과(APPROVED/REJECTED)를 기다려야 해.`,
+        ].join('\n'));
+    }
+    const submissionId = submission.id;
+    const previousState = submission.attributes?.state ?? 'WAITING_FOR_REVIEW';
+    // submitted=false → WAITING_FOR_REVIEW → READY_FOR_REVIEW (version은 PREPARE_FOR_SUBMISSION으로 복귀)
+    const patched = await apiPatch(`/reviewSubmissions/${submissionId}`, {
+        data: {
+            type: 'reviewSubmissions',
+            id: submissionId,
+            attributes: { submitted: false },
+        },
+    });
+    const newState = patched?.data?.attributes?.state ?? 'READY_FOR_REVIEW';
+    return { submissionId, previousState, newState, versionId };
+}
 // ─── 인앱 구매 (IAP) 생성 ───
 // 2023년 출시된 IAP v2 API (POST /v2/inAppPurchases) 사용.
 // 흐름: (1) IAP draft 생성 → (2) 로컬라이제이션 → (3) priceSchedule → (4) submission(선택).

package/dist/auth/cli.js

@@ -3,7 +3,7 @@ import readline from 'node:readline';
 import open from 'open';
 import { startAuth, getStoredTokens, ensureFreshAccessToken, } from './google-auth.js';
 import { AuthError, classifyError } from './errors.js';
-import { MIMI_SEED_CLIENT_ID, MIMI_SEED_CLIENT_SECRET } from './constants.js';
+import { getMcpOAuthClient } from './constants.js';
 const args = process.argv.slice(2);
 const hasFlag = (name) => args.includes(`--${name}`);
 const flagValue = (name) => {
@@ -158,7 +158,8 @@ async function cmdLogin() {
     let url;
     let wait;
     try {
-        const r = startAuth(MIMI_SEED_CLIENT_ID, MIMI_SEED_CLIENT_SECRET, {
+        const { clientId, clientSecret } = await getMcpOAuthClient();
+        const r = startAuth(clientId, clientSecret, {
             timeoutMs: timeoutSec * 1000,
         });
         url = r.url;

package/dist/auth/constants.d.ts

@@ -1,2 +1,4 @@
-export declare const MIMI_SEED_CLIENT_ID: string;
-export declare const MIMI_SEED_CLIENT_SECRET: string;
+export declare function getMcpOAuthClient(): Promise<{
+    clientId: string;
+    clientSecret: string;
+}>;

package/dist/auth/constants.js

@@ -1,11 +1,17 @@
-// Mimi Seed 내장 OAuth 클라이언트
-// 유저가 직접 만들 필요 없음 — `npx -y @yoonion/mimi-seed-mcp mimi-seed-auth`
-// (또는 로컬 dev 중엔 `npm run auth`) 한 줄이면 끝
-// 환경변수 MIMI_SEED_GOOGLE_CLIENT_ID / MIMI_SEED_GOOGLE_CLIENT_SECRET 로 오버라이드 가능
-// (레거시 PRESEED_GOOGLE_CLIENT_ID / PRESEED_GOOGLE_CLIENT_SECRET 도 계속 인식)
-export const MIMI_SEED_CLIENT_ID = process.env.MIMI_SEED_GOOGLE_CLIENT_ID ??
-    process.env.PRESEED_GOOGLE_CLIENT_ID ??
-    '980022244769-b6qugfe22pvfadg6ccaq699pc7nuju70.apps.googleusercontent.com';
-export const MIMI_SEED_CLIENT_SECRET = process.env.MIMI_SEED_GOOGLE_CLIENT_SECRET ??
-    process.env.PRESEED_GOOGLE_CLIENT_SECRET ??
-    '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';
+const WEB_BASE = process.env.MIMI_SEED_WEB_BASE ?? 'https://mimi-seed.pryzm.gg';
+let _cached = null;
+export async function getMcpOAuthClient() {
+    const id = process.env.MIMI_SEED_GOOGLE_CLIENT_ID ??
+        process.env.PRESEED_GOOGLE_CLIENT_ID;
+    const secret = process.env.MIMI_SEED_GOOGLE_CLIENT_SECRET ??
+        process.env.PRESEED_GOOGLE_CLIENT_SECRET;
+    if (id && secret)
+        return { clientId: id, clientSecret: secret };
+    if (_cached)
+        return _cached;
+    const res = await fetch(`${WEB_BASE}/api/mcp-auth-config`);
+    if (!res.ok)
+        throw new Error(`mcp-auth-config fetch failed (${res.status})`);
+    _cached = (await res.json());
+    return _cached;
+}

package/dist/auth/google-auth.js

@@ -4,7 +4,7 @@ import open from 'open';
 import fs from 'node:fs';
 import path from 'node:path';
 import os from 'node:os';
-import { MIMI_SEED_CLIENT_ID, MIMI_SEED_CLIENT_SECRET } from './constants.js';
+import { getMcpOAuthClient } from './constants.js';
 import { AuthError, classifyError } from './errors.js';
 const SCOPES = [
     'https://www.googleapis.com/auth/firebase',
@@ -285,10 +285,11 @@ export async function ensureFreshAccessToken(marginMs = 60_000) {
             },
         };
     }
-    // refresh 시도 — credentials.json 우선, 없으면 내장 클라이언트 사용
+    // refresh 시도 — credentials.json 우선, 없으면 원격에서 클라이언트 조회
     const stored = getStoredCredentials();
-    const clientId = stored?.clientId ?? MIMI_SEED_CLIENT_ID;
-    const clientSecret = stored?.clientSecret ?? MIMI_SEED_CLIENT_SECRET;
+    const { clientId: defaultId, clientSecret: defaultSecret } = await getMcpOAuthClient();
+    const clientId = stored?.clientId ?? defaultId;
+    const clientSecret = stored?.clientSecret ?? defaultSecret;
     const client = createOAuth2Client(clientId, clientSecret);
     client.setCredentials({ refresh_token: tokens.refresh_token });
     try {

package/dist/auth/playstore-auth.d.ts

@@ -1,4 +1,37 @@
 import { JWT } from 'google-auth-library';
-export declare function getServiceAccountJson(): string | null;
+/**
+ * 패키지별 → 레거시(default) 순으로 SA JSON을 로드.
+ * 여러 앱이 다른 GCP 프로젝트의 SA를 쓰는 환경 지원.
+ */
+export declare function getServiceAccountJson(packageName?: string): string | null;
+/**
+ * 레거시 호환 — 단일 SA 저장 (default).
+ */
 export declare function saveServiceAccountJson(json: string): void;
-export declare function getServiceAccountClient(): JWT | null;
+/**
+ * 패키지명에 묶여 SA JSON을 저장. 여러 앱이 다른 GCP 프로젝트일 때 사용.
+ * ~/.mimi-seed/play-service-accounts/{packageName}.json
+ */
+export declare function saveServiceAccountJsonForPackage(packageName: string, json: string): void;
+/**
+ * 등록된 패키지별 SA + default(레거시) 정보 요약.
+ */
+export declare function listRegisteredServiceAccounts(): {
+    perPackage: {
+        packageName: string;
+        clientEmail: string | null;
+        projectId: string | null;
+    }[];
+    default: {
+        clientEmail: string | null;
+        projectId: string | null;
+    } | null;
+};
+/**
+ * 패키지별 SA 삭제. 없으면 false.
+ */
+export declare function deleteServiceAccountJsonForPackage(packageName: string): boolean;
+/**
+ * SA JWT 클라이언트 생성. packageName이 주어지면 패키지별 → default 순으로 탐색.
+ */
+export declare function getServiceAccountClient(packageName?: string): JWT | null;

package/dist/auth/playstore-auth.js

@@ -2,25 +2,109 @@ import { JWT } from 'google-auth-library';
 import fs from 'node:fs';
 import path from 'node:path';
 import os from 'node:os';
-const SA_PATH = path.join(os.homedir(), '.mimi-seed', 'play-service-account.json');
-export function getServiceAccountJson() {
-    if (!fs.existsSync(SA_PATH))
-        return null;
+const CONFIG_DIR = path.join(os.homedir(), '.mimi-seed');
+const SA_DIR = path.join(CONFIG_DIR, 'play-service-accounts');
+const LEGACY_SA_PATH = path.join(CONFIG_DIR, 'play-service-account.json');
+function safeReadFile(p) {
     try {
-        return fs.readFileSync(SA_PATH, 'utf-8');
+        return fs.readFileSync(p, 'utf-8');
     }
     catch {
         return null;
     }
 }
+/**
+ * 패키지별 → 레거시(default) 순으로 SA JSON을 로드.
+ * 여러 앱이 다른 GCP 프로젝트의 SA를 쓰는 환경 지원.
+ */
+export function getServiceAccountJson(packageName) {
+    if (packageName) {
+        const perPkg = path.join(SA_DIR, `${packageName}.json`);
+        if (fs.existsSync(perPkg)) {
+            const json = safeReadFile(perPkg);
+            if (json)
+                return json;
+        }
+    }
+    if (fs.existsSync(LEGACY_SA_PATH)) {
+        const json = safeReadFile(LEGACY_SA_PATH);
+        if (json)
+            return json;
+    }
+    return null;
+}
+/**
+ * 레거시 호환 — 단일 SA 저장 (default).
+ */
 export function saveServiceAccountJson(json) {
-    const dir = path.dirname(SA_PATH);
-    if (!fs.existsSync(dir))
-        fs.mkdirSync(dir, { recursive: true });
-    fs.writeFileSync(SA_PATH, json, { mode: 0o600 });
+    if (!fs.existsSync(CONFIG_DIR))
+        fs.mkdirSync(CONFIG_DIR, { recursive: true });
+    fs.writeFileSync(LEGACY_SA_PATH, json, { mode: 0o600 });
+}
+/**
+ * 패키지명에 묶여 SA JSON을 저장. 여러 앱이 다른 GCP 프로젝트일 때 사용.
+ * ~/.mimi-seed/play-service-accounts/{packageName}.json
+ */
+export function saveServiceAccountJsonForPackage(packageName, json) {
+    if (!fs.existsSync(SA_DIR))
+        fs.mkdirSync(SA_DIR, { recursive: true });
+    const filePath = path.join(SA_DIR, `${packageName}.json`);
+    fs.writeFileSync(filePath, json, { mode: 0o600 });
+}
+/**
+ * 등록된 패키지별 SA + default(레거시) 정보 요약.
+ */
+export function listRegisteredServiceAccounts() {
+    const perPackage = [];
+    if (fs.existsSync(SA_DIR)) {
+        for (const f of fs.readdirSync(SA_DIR)) {
+            if (!f.endsWith('.json'))
+                continue;
+            const packageName = f.replace(/\.json$/, '');
+            const json = safeReadFile(path.join(SA_DIR, f));
+            let clientEmail = null;
+            let projectId = null;
+            if (json) {
+                try {
+                    const parsed = JSON.parse(json);
+                    clientEmail = parsed.client_email ?? null;
+                    projectId = parsed.project_id ?? null;
+                }
+                catch { /* ignore parse errors */ }
+            }
+            perPackage.push({ packageName, clientEmail, projectId });
+        }
+    }
+    let defaultInfo = null;
+    if (fs.existsSync(LEGACY_SA_PATH)) {
+        const json = safeReadFile(LEGACY_SA_PATH);
+        if (json) {
+            try {
+                const parsed = JSON.parse(json);
+                defaultInfo = { clientEmail: parsed.client_email ?? null, projectId: parsed.project_id ?? null };
+            }
+            catch {
+                defaultInfo = { clientEmail: null, projectId: null };
+            }
+        }
+    }
+    return { perPackage, default: defaultInfo };
+}
+/**
+ * 패키지별 SA 삭제. 없으면 false.
+ */
+export function deleteServiceAccountJsonForPackage(packageName) {
+    const filePath = path.join(SA_DIR, `${packageName}.json`);
+    if (!fs.existsSync(filePath))
+        return false;
+    fs.unlinkSync(filePath);
+    return true;
 }
-export function getServiceAccountClient() {
-    const json = getServiceAccountJson();
+/**
+ * SA JWT 클라이언트 생성. packageName이 주어지면 패키지별 → default 순으로 탐색.
+ */
+export function getServiceAccountClient(packageName) {
+    const json = getServiceAccountJson(packageName);
     if (!json)
         return null;
     try {

package/dist/index.js

@@ -3,10 +3,10 @@ import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { z } from 'zod';
 import { getAuthenticatedClient, startAuth, ensureFreshAccessToken } from './auth/google-auth.js';
-import { getServiceAccountClient, getServiceAccountJson } from './auth/playstore-auth.js';
+import { getServiceAccountClient, getServiceAccountJson, saveServiceAccountJsonForPackage, listRegisteredServiceAccounts, deleteServiceAccountJsonForPackage, } from './auth/playstore-auth.js';
 import { getAppStoreCredentials } from './appstore/auth.js';
 import { createGoogleOneTimePurchase, createGoogleSubscription, updateGoogleProduct, deleteGoogleProduct, listGoogleProducts, createAppleOneTimePurchase, createAppleSubscription, updateAppleProduct, deleteAppleProduct, listAppleProducts, } from '@onesub/providers';
-import { MIMI_SEED_CLIENT_ID, MIMI_SEED_CLIENT_SECRET } from './auth/constants.js';
+import { getMcpOAuthClient } from './auth/constants.js';
 import * as firebase from './firebase/tools.js';
 import * as admob from './admob/tools.js';
 import * as playstore from './playstore/tools.js';
@@ -60,14 +60,14 @@ const APPSTORE_AUTH_HINT = [
     'Issuer ID, Key ID, .p8 파일 경로를 입력하면 저장 완료.',
     '그 다음에 다시 물어봐줘.',
 ].join('\n');
-function requirePlayStoreAuth() {
-    const client = getServiceAccountClient();
+function requirePlayStoreAuth(packageName) {
+    const client = getServiceAccountClient(packageName);
     if (!client)
         throw new Error(PLAY_AUTH_HINT);
     return client;
 }
-function requireServiceAccountJson() {
-    const json = getServiceAccountJson();
+function requireServiceAccountJson(packageName) {
+    const json = getServiceAccountJson(packageName);
     if (!json)
         throw new Error(PLAY_AUTH_HINT);
     return json;
@@ -301,7 +301,7 @@ server.tool('admob_create_ad_unit', 'AdMob 광고 단위 생성 (v1beta — Limi
 // Google Play Store Tools
 // ══════════════════════════════════════════════════
 server.tool('playstore_get_app', 'Google Play 앱 상세 정보 조회', { packageName: z.string().describe('패키지명 (예: com.findthem.app)') }, async ({ packageName }) => {
-    const auth = requirePlayStoreAuth();
+    const auth = requirePlayStoreAuth(packageName);
     const details = await playstore.getAppDetails(auth, packageName);
     return { content: [{ type: 'text', text: JSON.stringify(details, null, 2) }] };
 });
@@ -309,7 +309,7 @@ server.tool('playstore_get_listing', 'Google Play 스토어 리스팅 조회 (
     packageName: z.string().describe('패키지명'),
     language: z.string().default('ko-KR').describe('언어 코드 (기본: ko-KR)'),
 }, async ({ packageName, language }) => {
-    const auth = requirePlayStoreAuth();
+    const auth = requirePlayStoreAuth(packageName);
     const listing = await playstore.getListing(auth, packageName, language);
     return { content: [{ type: 'text', text: JSON.stringify(listing, null, 2) }] };
 });
@@ -320,14 +320,14 @@ server.tool('playstore_update_listing', 'Google Play 스토어 리스팅 수정
     shortDescription: z.string().optional().describe('짧은 설명 (80자 이내)'),
     fullDescription: z.string().optional().describe('전체 설명 (4000자 이내)'),
 }, async ({ packageName, language, title, shortDescription, fullDescription }) => {
-    const auth = requirePlayStoreAuth();
+    const auth = requirePlayStoreAuth(packageName);
     const result = await playstore.updateListing(auth, packageName, language, {
         title, shortDescription, fullDescription,
     });
     return { content: [{ type: 'text', text: `수정 완료:\n${JSON.stringify(result, null, 2)}` }] };
 });
 server.tool('playstore_list_tracks', 'Google Play 릴리스 트랙 현황 (프로덕션/베타/알파/내부)', { packageName: z.string().describe('패키지명') }, async ({ packageName }) => {
-    const auth = requirePlayStoreAuth();
+    const auth = requirePlayStoreAuth(packageName);
     const tracks = await playstore.listTracks(auth, packageName);
     return { content: [{ type: 'text', text: JSON.stringify(tracks, null, 2) }] };
 });
@@ -336,7 +336,7 @@ server.tool('playstore_list_images', 'Google Play 리스팅 이미지 목록 조
     language: z.string().describe('언어 코드 (예: ko-KR)'),
     imageType: z.enum(['featureGraphic', 'icon', 'phoneScreenshots', 'promoGraphic', 'sevenInchScreenshots', 'tenInchScreenshots', 'tvBanner', 'tvScreenshots', 'wearScreenshots']).describe('이미지 타입'),
 }, async ({ packageName, language, imageType }) => {
-    const auth = requirePlayStoreAuth();
+    const auth = requirePlayStoreAuth(packageName);
     const images = await playstore.listImages(auth, packageName, language, imageType);
     return { content: [{ type: 'text', text: JSON.stringify(images, null, 2) }] };
 });
@@ -346,7 +346,7 @@ server.tool('playstore_upload_image', 'Google Play 리스팅 이미지 단일
     imageType: z.enum(['featureGraphic', 'icon', 'phoneScreenshots', 'promoGraphic', 'sevenInchScreenshots', 'tenInchScreenshots', 'tvBanner', 'tvScreenshots', 'wearScreenshots']),
     filePath: z.string().describe('업로드할 이미지 절대 경로'),
 }, async ({ packageName, language, imageType, filePath }) => {
-    const auth = requirePlayStoreAuth();
+    const auth = requirePlayStoreAuth(packageName);
     const result = await playstore.uploadImage(auth, packageName, language, imageType, filePath);
     return { content: [{ type: 'text', text: `✅ 업로드 완료\n${JSON.stringify(result, null, 2)}` }] };
 });
@@ -355,7 +355,7 @@ server.tool('playstore_delete_all_images', 'Google Play 리스팅 특정 imageTy
     language: z.string().describe('언어 코드'),
     imageType: z.enum(['featureGraphic', 'icon', 'phoneScreenshots', 'promoGraphic', 'sevenInchScreenshots', 'tenInchScreenshots', 'tvBanner', 'tvScreenshots', 'wearScreenshots']),
 }, async ({ packageName, language, imageType }) => {
-    const auth = requirePlayStoreAuth();
+    const auth = requirePlayStoreAuth(packageName);
     const result = await playstore.deleteAllImages(auth, packageName, language, imageType);
     return { content: [{ type: 'text', text: `✅ 전체 삭제\n${JSON.stringify(result, null, 2)}` }] };
 });
@@ -365,7 +365,7 @@ server.tool('playstore_replace_images', 'Google Play 리스팅 이미지 일괄
     imageType: z.enum(['featureGraphic', 'icon', 'phoneScreenshots', 'promoGraphic', 'sevenInchScreenshots', 'tenInchScreenshots', 'tvBanner', 'tvScreenshots', 'wearScreenshots']),
     filePaths: z.array(z.string()).describe('업로드할 이미지 절대 경로 배열 (순서 = 노출 순서)'),
 }, async ({ packageName, language, imageType, filePaths }) => {
-    const auth = requirePlayStoreAuth();
+    const auth = requirePlayStoreAuth(packageName);
     const result = await playstore.replaceImages(auth, packageName, language, imageType, filePaths);
     return { content: [{ type: 'text', text: `✅ ${result.count}장 교체 완료\n${JSON.stringify(result, null, 2)}` }] };
 });
@@ -376,7 +376,7 @@ server.tool('playstore_update_release_notes', "Google Play 트랙 릴리스의 '
     language: z.string().describe('언어 코드 (예: ko-KR, en-US)'),
     text: z.string().describe('릴리스 노트 본문 (500자 이내)'),
 }, async ({ packageName, track, versionCode, language, text }) => {
-    const auth = requirePlayStoreAuth();
+    const auth = requirePlayStoreAuth(packageName);
     const result = await playstore.updateReleaseNotes(auth, packageName, track, versionCode, language, text);
     return { content: [{ type: 'text', text: `✅ ${packageName} ${track} v${versionCode} ${language} 노트 반영\n\n${JSON.stringify(result, null, 2)}` }] };
 });
@@ -386,12 +386,12 @@ server.tool('playstore_update_latest_release_notes', "Google Play 트랙의 최
     language: z.string().describe('언어 코드 (예: ko-KR)'),
     text: z.string().describe('릴리스 노트 본문 (500자 이내)'),
 }, async ({ packageName, track, language, text }) => {
-    const auth = requirePlayStoreAuth();
+    const auth = requirePlayStoreAuth(packageName);
     const result = await playstore.updateLatestReleaseNotes(auth, packageName, track, language, text);
     return { content: [{ type: 'text', text: `✅ ${packageName} ${track} (versionCodes=${JSON.stringify(result.updatedVersionCodes)}) ${language} 노트 반영\n\n${JSON.stringify(result, null, 2)}` }] };
 });
 server.tool('playstore_list_reviews', 'Google Play 리뷰 목록 조회', { packageName: z.string().describe('패키지명') }, async ({ packageName }) => {
-    const auth = requirePlayStoreAuth();
+    const auth = requirePlayStoreAuth(packageName);
     const reviews = await playstore.listReviews(auth, packageName);
     return { content: [{ type: 'text', text: JSON.stringify(reviews, null, 2) }] };
 });
@@ -400,17 +400,17 @@ server.tool('playstore_reply_review', 'Google Play 리뷰에 답변', {
     reviewId: z.string().describe('리뷰 ID'),
     replyText: z.string().describe('답변 내용'),
 }, async ({ packageName, reviewId, replyText }) => {
-    const auth = requirePlayStoreAuth();
+    const auth = requirePlayStoreAuth(packageName);
     const result = await playstore.replyToReview(auth, packageName, reviewId, replyText);
     return { content: [{ type: 'text', text: `답변 완료:\n${JSON.stringify(result, null, 2)}` }] };
 });
 server.tool('playstore_list_inapp_products', 'Google Play 인앱 상품 목록', { packageName: z.string().describe('패키지명') }, async ({ packageName }) => {
-    const auth = requirePlayStoreAuth();
+    const auth = requirePlayStoreAuth(packageName);
     const products = await playstore.listInAppProducts(auth, packageName);
     return { content: [{ type: 'text', text: JSON.stringify(products, null, 2) }] };
 });
 server.tool('playstore_list_subscriptions', 'Google Play 구독 상품 목록', { packageName: z.string().describe('패키지명') }, async ({ packageName }) => {
-    const auth = requirePlayStoreAuth();
+    const auth = requirePlayStoreAuth(packageName);
     const subs = await playstore.listSubscriptions(auth, packageName);
     return { content: [{ type: 'text', text: JSON.stringify(subs, null, 2) }] };
 });
@@ -437,7 +437,7 @@ server.tool('playstore_create_onetime_product', [
         .optional()
         .describe('추가 지역별 명시 가격. 자동 환산이 부정확한 KRW/JPY 등에 직접 지정.'),
 }, async (args) => {
-    const json = requireServiceAccountJson();
+    const json = requireServiceAccountJson(args.packageName);
     const result = await createGoogleOneTimePurchase({
         packageName: args.packageName,
         productId: args.productId,
@@ -488,7 +488,7 @@ server.tool('playstore_create_subscription', [
         .optional()
         .describe('추가 지역별 명시 가격'),
 }, async (args) => {
-    const json = requireServiceAccountJson();
+    const json = requireServiceAccountJson(args.packageName);
     const result = await createGoogleSubscription({
         packageName: args.packageName,
         productId: args.productId,
@@ -584,6 +584,96 @@ server.tool('playstore_verify_service_account', [
     }
     return { content: [{ type: 'text', text: lines.join('\n') }] };
 });
+server.tool('playstore_register_service_account', [
+    'Google Play 서비스 계정 JSON을 패키지 단위로 등록 (~/.mimi-seed/play-service-accounts/{packageName}.json, 0600 mode).',
+    '여러 앱이 서로 다른 GCP 프로젝트의 SA를 쓰는 환경 지원. 등록 후 해당 packageName으로 호출하는 모든 playstore_* 도구가 이 SA를 사용 (등록 안 된 패키지는 ~/.mimi-seed/play-service-account.json 의 default SA로 폴백).',
+    '먼저 playstore_verify_service_account 로 권한 확인 후 등록을 권장.',
+].join(' '), {
+    packageName: z.string().describe('Android 패키지명 (예: gg.pryzm.weather)'),
+    serviceAccountJson: z.string().describe('서비스 계정 JSON 전체 내용 (문자열)'),
+    skipVerify: z.boolean().optional().describe('true면 사전 검증 건너뜀 (기본 false: 등록 전 verifyServiceAccountJson 실행)'),
+}, async ({ packageName, serviceAccountJson, skipVerify }) => {
+    if (!skipVerify) {
+        const verify = await playstore.verifyServiceAccountJson(serviceAccountJson, packageName);
+        if (!verify.ok) {
+            return {
+                content: [{
+                        type: 'text',
+                        text: [
+                            `❌ 검증 실패 (stage: ${verify.stage})로 등록 중단.`,
+                            verify.message,
+                            '',
+                            `검증을 건너뛰고 강제 등록하려면 skipVerify=true 옵션 추가.`,
+                        ].join('\n'),
+                    }],
+            };
+        }
+    }
+    let clientEmail = '';
+    let projectId = '';
+    try {
+        const parsed = JSON.parse(serviceAccountJson);
+        clientEmail = parsed.client_email ?? '';
+        projectId = parsed.project_id ?? '';
+    }
+    catch {
+        return { content: [{ type: 'text', text: '❌ JSON 파싱 실패 — 서비스 계정 JSON 형식이 올바르지 않음.' }] };
+    }
+    saveServiceAccountJsonForPackage(packageName, serviceAccountJson);
+    return {
+        content: [{
+                type: 'text',
+                text: [
+                    `✓ ${packageName} 서비스 계정 등록 완료`,
+                    '',
+                    `**clientEmail**: \`${clientEmail}\``,
+                    `**projectId**: \`${projectId}\``,
+                    `**저장 경로**: \`~/.mimi-seed/play-service-accounts/${packageName}.json\` (0600)`,
+                    '',
+                    '이후 이 packageName으로 호출하는 모든 playstore_* 도구가 자동으로 이 SA 사용.',
+                ].join('\n'),
+            }],
+    };
+});
+server.tool('playstore_list_service_accounts', '등록된 패키지별 서비스 계정 + default(레거시) SA 정보 요약. clientEmail / projectId 만 노출 (private_key 미노출).', {}, async () => {
+    const info = listRegisteredServiceAccounts();
+    const lines = [];
+    if (info.default) {
+        lines.push('**Default (legacy)**: `~/.mimi-seed/play-service-account.json`');
+        lines.push(`  - clientEmail: \`${info.default.clientEmail ?? '(parse error)'}\``);
+        lines.push(`  - projectId: \`${info.default.projectId ?? '(parse error)'}\``);
+        lines.push('');
+    }
+    else {
+        lines.push('**Default (legacy)**: 미등록');
+        lines.push('');
+    }
+    if (info.perPackage.length === 0) {
+        lines.push('**Per-package**: 없음');
+        lines.push('');
+        lines.push('등록 방법: `playstore_register_service_account(packageName, serviceAccountJson)`');
+    }
+    else {
+        lines.push(`**Per-package** (${info.perPackage.length}개):`);
+        for (const item of info.perPackage) {
+            lines.push(`- \`${item.packageName}\` → \`${item.clientEmail ?? '(parse error)'}\` (project: \`${item.projectId ?? 'unknown'}\`)`);
+        }
+    }
+    return { content: [{ type: 'text', text: lines.join('\n') }] };
+});
+server.tool('playstore_delete_service_account', '등록된 패키지별 서비스 계정 삭제. default(레거시) SA는 영향 없음.', {
+    packageName: z.string().describe('삭제할 패키지명'),
+}, async ({ packageName }) => {
+    const deleted = deleteServiceAccountJsonForPackage(packageName);
+    return {
+        content: [{
+                type: 'text',
+                text: deleted
+                    ? `✓ ${packageName} 서비스 계정 파일 삭제 완료. 이후 이 패키지는 default SA로 폴백.`
+                    : `(skip) ${packageName} 등록된 패키지별 SA 없음.`,
+            }],
+    };
+});
 // ══════════════════════════════════════════════════
 // Google Cloud IAM Tools
 // ══════════════════════════════════════════════════
@@ -831,15 +921,17 @@ server.tool('appstore_update_whats_new', "App Store '이 버전의 새로운 기
     const result = await appstore.updateVersionWhatsNew(versionId, locale, { whatsNew });
     return { content: [{ type: 'text', text: `✅ ${locale} 로캘의 What's New가 업데이트됐어.\n\n${JSON.stringify(result, null, 2)}` }] };
 });
-server.tool('appstore_update_review_notes', "App Store 심사 리뷰어 노트(Notes for App Review) 등록/수정. versionId 버전에 appStoreReviewDetail.notes를 PATCH하거나 없으면 POST로 생성. 심사 시 리뷰어에게 전달되는 테스트 계정·기능 안내 텍스트 작성에 사용.", {
+server.tool('appstore_update_review_notes', "App Store 심사 리뷰어 노트(Notes for App Review) 등록/수정. versionId 버전에 appStoreReviewDetail.notes를 PATCH하거나 없으면 POST로 생성. 심사 시 리뷰어에게 전달되는 테스트 계정·기능 안내 텍스트 작성에 사용. 4000자 권장 한도.", {
     versionId: z.string().describe('버전 ID (appstore_list_versions 결과)'),
-    notes: z.string().describe('리뷰어에게 전달할 메모 (테스트 계정, 주요 변경사항, 접근 방법 등). 4000자 이내 권장.'),
+    notes: z.string().min(1).max(4000).describe('리뷰어에게 전달할 메모 (테스트 계정, 주요 변경사항, 접근 방법 등). 4000자 이내.'),
 }, async ({ versionId, notes }) => {
     const result = await appstore.updateReviewNotes(versionId, notes);
+    const action = result.created ? 'created' : 'updated';
+    const summary = `✅ 리뷰어 노트 ${result.created ? '신규 등록' : '수정'} 완료 (reviewDetailId: ${result.reviewDetailId})`;
     return {
         content: [{
                 type: 'text',
-                text: `✅ 리뷰어 노트가 저장됐어.\n\nreviewDetailId: ${result.reviewDetailId}\n\n${result.notes}`,
+                text: `${summary}\n\n${JSON.stringify({ ok: true, action, ...result }, null, 2)}`,
             }],
     };
 });
@@ -848,12 +940,18 @@ server.tool('appstore_get_review_notes', "App Store 심사 리뷰어 노트(Note
 }, async ({ versionId }) => {
     const result = await appstore.getReviewNotes(versionId);
     if (!result.reviewDetailId) {
-        return { content: [{ type: 'text', text: '이 버전에는 아직 리뷰어 노트가 없어. appstore_update_review_notes로 등록해줘.' }] };
+        return {
+            content: [{
+                    type: 'text',
+                    text: `이 버전에는 아직 리뷰어 노트가 없어. appstore_update_review_notes로 등록해줘.\n\n${JSON.stringify({ ok: true, exists: false }, null, 2)}`,
+                }],
+        };
     }
+    const summary = `reviewDetailId: ${result.reviewDetailId}\ncontactEmail: ${result.contactEmail ?? '(없음)'}\n\n노트:\n${result.notes ?? '(비어있음)'}`;
     return {
         content: [{
                 type: 'text',
-                text: `reviewDetailId: ${result.reviewDetailId}\ncontactEmail: ${result.contactEmail ?? '(없음)'}\n\n노트:\n${result.notes ?? '(비어있음)'}`,
+                text: `${summary}\n\n${JSON.stringify({ ok: true, exists: true, ...result }, null, 2)}`,
             }],
     };
 });
@@ -1049,7 +1147,7 @@ server.tool('appstore_create_subscription', [
 server.tool('playstore_list_products', 'Google Play의 모든 IAP 상품(구독 + 일회성) 통합 조회. productId / name / status / type / price / currency 반환.', {
     packageName: z.string().describe('패키지명'),
 }, async ({ packageName }) => {
-    const json = requireServiceAccountJson();
+    const json = requireServiceAccountJson(packageName);
     const products = await listGoogleProducts({ packageName, serviceAccountKey: json });
     return { content: [{ type: 'text', text: JSON.stringify(products, null, 2) }] };
 });
@@ -1059,7 +1157,7 @@ server.tool('playstore_update_product', 'Google Play IAP 상품의 표시 이름
     productType: z.enum(['subscription', 'consumable', 'non_consumable']).describe('상품 유형'),
     name: z.string().describe('새 표시 이름'),
 }, async ({ packageName, productId, productType, name }) => {
-    const json = requireServiceAccountJson();
+    const json = requireServiceAccountJson(packageName);
     const result = await updateGoogleProduct({
         packageName, productId, productType, name, serviceAccountKey: json,
     });
@@ -1073,7 +1171,7 @@ server.tool('playstore_delete_product', '⚠️ 비가역. Google Play IAP 상
     productId: z.string().describe('상품 ID'),
     productType: z.enum(['subscription', 'consumable', 'non_consumable']).describe('상품 유형'),
 }, async ({ packageName, productId, productType }) => {
-    const json = requireServiceAccountJson();
+    const json = requireServiceAccountJson(packageName);
     const result = await deleteGoogleProduct({
         packageName, productId, productType, serviceAccountKey: json,
     });
@@ -1146,7 +1244,7 @@ server.tool('playstore_plan_release', [
     track: z.enum(['production', 'beta', 'alpha', 'internal']).optional().describe('대상 트랙 (기본: production)'),
     language: z.string().optional().describe('점검할 리스팅 언어 (기본: ko-KR)'),
 }, async ({ packageName, versionCode, track, language }) => {
-    const auth = requirePlayStoreAuth();
+    const auth = requirePlayStoreAuth(packageName);
     const text = await buildPlayStoreReleasePlan({
         auth,
         packageName,
@@ -1183,6 +1281,29 @@ server.tool('appstore_submit_for_review', [
     const result = await appstore.submitVersionForReview(versionId);
     return { content: [{ type: 'text', text: `✅ 버전 ${versionId} 심사 제출 완료 (state: ${result.state}). App Store Connect에서 진행 상태 확인 가능.\n\n${JSON.stringify(result, null, 2)}` }] };
 });
+// --- App Store 심사 철회 (Cancel Review) ---
+server.tool('appstore_cancel_review', [
+    'App Store 심사 제출을 철회 — WAITING_FOR_REVIEW 상태에서만 가능.',
+    'submitted=false PATCH → reviewSubmission이 READY_FOR_REVIEW로 복귀, 버전은 PREPARE_FOR_SUBMISSION 상태로 돌아가 메타데이터/빌드 수정 가능.',
+    '⚠️ IN_REVIEW 이상이면 Apple API가 409로 거부함 — 이 경우 App Store Connect 웹에서 직접 처리하거나 심사 결과를 기다려야 함.',
+    '철회 후 수정 완료 시 appstore_submit_for_review로 재제출 가능.',
+].join(' '), {
+    versionId: z.string().describe('App Store 버전 ID (appstore_list_versions 결과)'),
+}, async ({ versionId }) => {
+    const result = await appstore.cancelVersionReview(versionId);
+    return {
+        content: [{
+                type: 'text',
+                text: [
+                    `✅ 심사 철회 완료`,
+                    `  submissionId: ${result.submissionId}`,
+                    `  ${result.previousState} → ${result.newState}`,
+                    `  버전 ${result.versionId}이(가) PREPARE_FOR_SUBMISSION 상태로 복귀됨.`,
+                    `  메타데이터/빌드 수정 후 appstore_submit_for_review로 재제출 가능.`,
+                ].join('\n'),
+            }],
+    };
+});
 // --- Play Store 심사 제출 / release status 변경 ---
 server.tool('playstore_submit_release', [
     'Google Play 트랙의 release status를 변경 — 일반적으로 draft → completed로 바꿔 검토/배포 큐에 진입시킬 때 사용.',
@@ -1195,7 +1316,7 @@ server.tool('playstore_submit_release', [
     versionCode: z.string().describe('대상 versionCode (문자열)'),
     status: z.enum(['draft', 'inProgress', 'completed', 'halted']).optional().describe('새 status (기본: completed)'),
 }, async ({ packageName, track, versionCode, status }) => {
-    const auth = requirePlayStoreAuth();
+    const auth = requirePlayStoreAuth(packageName);
     const result = await playstore.submitRelease(auth, packageName, track, versionCode, status);
     return { content: [{ type: 'text', text: `✅ ${packageName} ${track} v${versionCode}: ${result.previousStatus} → ${result.newStatus}\n\n${JSON.stringify(result, null, 2)}` }] };
 });
@@ -1221,7 +1342,7 @@ server.tool('playstore_promote_release', [
         text: z.string().describe('릴리스 노트 본문 (500자 이내)'),
     })).optional().describe('대상 트랙용 릴리스 노트 (미지정 + copyReleaseNotes=true면 source 그대로)'),
 }, async ({ packageName, fromTrack, toTrack, versionCode, status, userFraction, releaseName, copyReleaseNotes, releaseNotes }) => {
-    const auth = requirePlayStoreAuth();
+    const auth = requirePlayStoreAuth(packageName);
     const result = await playstore.promoteRelease(auth, packageName, fromTrack, toTrack, versionCode, {
         status,
         userFraction,
@@ -1239,7 +1360,8 @@ server.tool('mimi_seed_auth_start', [
     '이후 playstore_*, firebase_*, admob_* 등 다른 MCP 도구 바로 호출 가능.',
     '토큰 만료(invalid_rapt) / 재인증 필요 시 사용. 10분 내 완료해야 함.',
 ].join(' '), {}, async () => {
-    const { url, wait } = startAuth(MIMI_SEED_CLIENT_ID, MIMI_SEED_CLIENT_SECRET);
+    const { clientId, clientSecret } = await getMcpOAuthClient();
+    const { url, wait } = startAuth(clientId, clientSecret);
     // fire-and-forget — 토큰은 콜백 서버가 자동 저장
     wait.then(() => { }, (err) => { console.error('[mimi-seed auth]', err.message); });
     return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yoonion/mimi-seed-mcp",
-  "version": "0.3.16",
+  "version": "0.3.18",
   "description": "Mimi Seed MCP server — Firebase + AdMob + Google Play + App Store management for Claude Code / Cursor / any MCP client.",
   "type": "module",
   "bin": {
@@ -10,7 +10,8 @@
     "mimi-seed-playstore-auth": "dist/auth/playstore-setup-cli.js"
   },
   "files": [
-    "dist"
+    "dist",
+    "LICENSE"
   ],
   "scripts": {
     "build": "tsc",
@@ -38,7 +39,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "license": "MIT",
+  "license": "PolyForm-Noncommercial-1.0.0",
   "engines": {
     "node": ">=20"
   },