@yoonion/mimi-seed-mcp 0.3.26 → 0.3.28

package/dist/googleads/tools.js

@@ -0,0 +1,221 @@
+const API_VERSION = 'v17';
+const BASE = `https://googleads.googleapis.com/${API_VERSION}`;
+// ─── 내부 헬퍼 ───────────────────────────────────────────────
+async function getAccessToken(auth) {
+    const token = await auth.getAccessToken();
+    if (!token.token)
+        throw new Error('OAuth 토큰을 가져올 수 없음. 재인증 필요.');
+    return token.token;
+}
+function buildHeaders(accessToken, cfg) {
+    const headers = {
+        Authorization: `Bearer ${accessToken}`,
+        'developer-token': cfg.developerToken,
+        'Content-Type': 'application/json',
+    };
+    if (cfg.loginCustomerId) {
+        headers['login-customer-id'] = cfg.loginCustomerId;
+    }
+    return headers;
+}
+/** search 엔드포인트 (paged JSON, searchStream보다 안정적) */
+async function search(auth, cfg, query) {
+    const accessToken = await getAccessToken(auth);
+    const url = `${BASE}/customers/${cfg.customerId}/googleAds:search`;
+    const all = [];
+    let pageToken;
+    do {
+        const body = { query, pageSize: 1000 };
+        if (pageToken)
+            body.pageToken = pageToken;
+        const res = await fetch(url, {
+            method: 'POST',
+            headers: buildHeaders(accessToken, cfg),
+            body: JSON.stringify(body),
+        });
+        const text = await res.text();
+        if (!res.ok) {
+            let msg = `Google Ads API ${res.status}`;
+            try {
+                const err = JSON.parse(text);
+                const detail = err?.error?.message ?? err?.[0]?.error?.message ?? text;
+                msg += `: ${detail}`;
+            }
+            catch {
+                msg += `: ${text.slice(0, 300)}`;
+            }
+            throw new Error(msg);
+        }
+        const json = JSON.parse(text);
+        all.push(...(json.results ?? []));
+        pageToken = json.nextPageToken ?? undefined;
+    } while (pageToken);
+    return all;
+}
+function microsToCurrency(micros) {
+    if (micros == null)
+        return 0;
+    return Number(micros) / 1_000_000;
+}
+// ─── 접근 가능한 고객 목록 (API 연결 확인용) ─────────────────────
+export async function listAccessibleCustomers(auth, cfg) {
+    const accessToken = await getAccessToken(auth);
+    const url = `${BASE}/customers:listAccessibleCustomers`;
+    const res = await fetch(url, {
+        method: 'GET',
+        headers: buildHeaders(accessToken, cfg),
+    });
+    const text = await res.text();
+    if (!res.ok) {
+        let msg = `Google Ads API ${res.status}`;
+        try {
+            const err = JSON.parse(text);
+            msg += `: ${err?.error?.message ?? text.slice(0, 300)}`;
+        }
+        catch {
+            msg += `: ${text.slice(0, 300)}`;
+        }
+        throw new Error(msg);
+    }
+    return JSON.parse(text);
+}
+// ─── 캠페인 목록 ─────────────────────────────────────────────
+export async function listCampaigns(auth, cfg) {
+    const query = `
+    SELECT
+      campaign.id,
+      campaign.name,
+      campaign.status,
+      campaign.advertising_channel_type,
+      campaign.advertising_channel_sub_type,
+      campaign.start_date,
+      campaign.end_date,
+      campaign_budget.amount_micros
+    FROM campaign
+    WHERE campaign.status != 'REMOVED'
+    ORDER BY campaign.name ASC
+    LIMIT 200
+  `;
+    const rows = await search(auth, cfg, query);
+    return rows.map((r) => ({
+        id: r.campaign?.id,
+        name: r.campaign?.name,
+        status: r.campaign?.status,
+        channelType: r.campaign?.advertisingChannelType,
+        channelSubType: r.campaign?.advertisingChannelSubType,
+        startDate: r.campaign?.startDate,
+        endDate: r.campaign?.endDate,
+        dailyBudget: microsToCurrency(r.campaignBudget?.amountMicros),
+    }));
+}
+// ─── 캠페인 성과 리포트 ────────────────────────────────────────
+export async function getCampaignReport(auth, cfg, range) {
+    const query = `
+    SELECT
+      campaign.id,
+      campaign.name,
+      campaign.status,
+      campaign.advertising_channel_type,
+      campaign.advertising_channel_sub_type,
+      metrics.clicks,
+      metrics.impressions,
+      metrics.cost_micros,
+      metrics.conversions,
+      metrics.conversions_value,
+      metrics.cost_per_conversion,
+      metrics.ctr,
+      metrics.average_cpc
+    FROM campaign
+    WHERE campaign.status != 'REMOVED'
+      AND segments.date BETWEEN '${range.startDate}' AND '${range.endDate}'
+    ORDER BY metrics.cost_micros DESC
+    LIMIT 500
+  `;
+    const rows = await search(auth, cfg, query);
+    return rows.map((r) => ({
+        id: r.campaign?.id,
+        name: r.campaign?.name,
+        status: r.campaign?.status,
+        channelType: r.campaign?.advertisingChannelType,
+        channelSubType: r.campaign?.advertisingChannelSubType,
+        clicks: Number(r.metrics?.clicks ?? 0),
+        impressions: Number(r.metrics?.impressions ?? 0),
+        cost: microsToCurrency(r.metrics?.costMicros),
+        conversions: Number(r.metrics?.conversions ?? 0),
+        conversionsValue: Number(r.metrics?.conversionsValue ?? 0),
+        cpi: microsToCurrency(r.metrics?.costPerConversion),
+        ctr: Number(r.metrics?.ctr ?? 0),
+        avgCpc: microsToCurrency(r.metrics?.averageCpc),
+    }));
+}
+// ─── UAC(앱 캠페인) 리포트 ─────────────────────────────────────
+export async function getUacReport(auth, cfg, range) {
+    const query = `
+    SELECT
+      campaign.id,
+      campaign.name,
+      campaign.status,
+      campaign.advertising_channel_sub_type,
+      metrics.clicks,
+      metrics.impressions,
+      metrics.cost_micros,
+      metrics.conversions,
+      metrics.conversions_value,
+      metrics.cost_per_conversion,
+      metrics.ctr,
+      segments.date
+    FROM campaign
+    WHERE campaign.advertising_channel_type = 'MULTI_CHANNEL'
+      AND campaign.advertising_channel_sub_type IN ('APP_CAMPAIGN', 'APP_CAMPAIGN_FOR_ENGAGEMENT', 'APP_CAMPAIGN_FOR_PRE_REGISTRATION')
+      AND segments.date BETWEEN '${range.startDate}' AND '${range.endDate}'
+    ORDER BY segments.date DESC, metrics.cost_micros DESC
+    LIMIT 500
+  `;
+    const rows = await search(auth, cfg, query);
+    const byId = new Map();
+    for (const r of rows) {
+        const id = String(r.campaign?.id ?? '');
+        const existing = byId.get(id);
+        const cost = microsToCurrency(r.metrics?.costMicros);
+        const installs = Number(r.metrics?.conversions ?? 0);
+        if (existing) {
+            existing.clicks += Number(r.metrics?.clicks ?? 0);
+            existing.impressions += Number(r.metrics?.impressions ?? 0);
+            existing.cost += cost;
+            existing.installs += installs;
+            existing.installsValue += Number(r.metrics?.conversionsValue ?? 0);
+            if (r.segments?.date)
+                existing.dates.push(r.segments.date);
+        }
+        else {
+            byId.set(id, {
+                id,
+                name: r.campaign?.name ?? '',
+                status: r.campaign?.status ?? '',
+                subType: r.campaign?.advertisingChannelSubType ?? '',
+                clicks: Number(r.metrics?.clicks ?? 0),
+                impressions: Number(r.metrics?.impressions ?? 0),
+                cost,
+                installs,
+                installsValue: Number(r.metrics?.conversionsValue ?? 0),
+                dates: r.segments?.date ? [r.segments.date] : [],
+            });
+        }
+    }
+    return Array.from(byId.values()).map((c) => ({
+        id: c.id,
+        name: c.name,
+        status: c.status,
+        subType: c.subType,
+        clicks: c.clicks,
+        impressions: c.impressions,
+        cost: c.cost,
+        installs: c.installs,
+        installsValue: c.installsValue,
+        cpi: c.installs > 0 ? c.cost / c.installs : 0,
+        dateRange: {
+            from: c.dates.length ? [...c.dates].sort()[0] : range.startDate,
+            to: c.dates.length ? [...c.dates].sort().reverse()[0] : range.endDate,
+        },
+    }));
+}

package/dist/index.js

@@ -13,6 +13,7 @@ import { registerAuthTools } from './registers/auth.js';
 import { registerCiTools } from './registers/ci.js';
 import { registerInstagramTools } from './registers/instagram.js';
 import { registerFacebookTools } from './registers/facebook.js';
+import { registerGoogleAdsTools } from './registers/googleads.js';
 import { registerPrompts } from './prompts.js';
 import { registerResources } from './resources.js';
 const server = new McpServer({
@@ -31,6 +32,7 @@ registerAuthTools(server);
 registerCiTools(server);
 registerInstagramTools(server);
 registerFacebookTools(server);
+registerGoogleAdsTools(server);
 registerPrompts(server);
 registerResources(server);
 // `npx -y @yoonion/mimi-seed-mcp <subcommand>` 처리.

package/dist/lib/text-validators.d.ts

@@ -0,0 +1,34 @@
+/**
+ * 릴리스 노트 / What's New 텍스트 사전 검증.
+ *
+ * 스토어 측 거부 패턴(HTML 마크업, 길이 초과, 백슬래시 가격 표기 등)을
+ * API 호출 전에 잡아 round-trip 낭비와 무지한 재시도를 차단.
+ *
+ * 모든 detection 은 정규식 기반 단순 휴리스틱 — false positive 최소화를
+ * 위해 실측으로 거부된 패턴만 포함한다.
+ */
+export type ValidationCode = "HTML_TAG" | "LENGTH_EXCEEDED" | "BACKSLASH_PRICE";
+export interface ValidationIssue {
+    code: ValidationCode;
+    message: string;
+    /** 0-based 문자 인덱스. LENGTH_EXCEEDED 에는 없음. */
+    position?: number;
+    /** 문제 구간 ±10자 잘라낸 문자열 (HTML/BACKSLASH 위치 표시용). */
+    excerpt?: string;
+}
+export interface ValidationResult {
+    ok: boolean;
+    issues: ValidationIssue[];
+}
+/** App Store What's New 검증 — 길이(≤4000) + HTML 태그 거부. */
+export declare function validateAppStoreWhatsNew(text: string): ValidationResult;
+/** Play release notes 검증 — 길이(≤500) + HTML + 백슬래시 가격. */
+export declare function validatePlayReleaseNotes(text: string): ValidationResult;
+/** 사용자 친화 메시지로 포맷. MCP 도구가 거부 응답에 그대로 노출. */
+export declare function formatIssuesForUser(issues: ValidationIssue[]): string;
+export declare const __testing: {
+    MAX_APPSTORE_WHATSNEW: number;
+    MAX_PLAY_RELEASE_NOTES: number;
+    HTML_TAG_PATTERN: RegExp;
+    BACKSLASH_PRICE_PATTERN: RegExp;
+};

package/dist/lib/text-validators.js

@@ -0,0 +1,106 @@
+/**
+ * 릴리스 노트 / What's New 텍스트 사전 검증.
+ *
+ * 스토어 측 거부 패턴(HTML 마크업, 길이 초과, 백슬래시 가격 표기 등)을
+ * API 호출 전에 잡아 round-trip 낭비와 무지한 재시도를 차단.
+ *
+ * 모든 detection 은 정규식 기반 단순 휴리스틱 — false positive 최소화를
+ * 위해 실측으로 거부된 패턴만 포함한다.
+ */
+// ── 한계값 (스토어 정책 SSOT) ─────────────────────────────────────
+const MAX_APPSTORE_WHATSNEW = 4000;
+const MAX_PLAY_RELEASE_NOTES = 500;
+// ── 패턴 ──────────────────────────────────────────────────────────
+// HTML 태그: <br>, </tag>, <a href="…"> 모두 매칭. Apple/Play 둘 다 마크업 거부.
+const HTML_TAG_PATTERN = /<\/?[a-zA-Z][^>]*>/g;
+// Play Store 가 홍보 정책으로 거부한 실측 사례: 본문에 '\5000원' 같이
+// 역슬래시 + 숫자 + (선택적 통화 단위) 패턴 (memory: reference_appstore_whatsnew_blacklist).
+const BACKSLASH_PRICE_PATTERN = /\\\d[\d,]*(?:원|won|krw)?/gi;
+// ── 헬퍼 ──────────────────────────────────────────────────────────
+function makeExcerpt(text, pos, radius = 10) {
+    const start = Math.max(0, pos - radius);
+    const end = Math.min(text.length, pos + radius);
+    const left = start > 0 ? "…" : "";
+    const right = end < text.length ? "…" : "";
+    return `${left}${text.slice(start, end)}${right}`;
+}
+function lintHtmlTags(text) {
+    const issues = [];
+    HTML_TAG_PATTERN.lastIndex = 0;
+    let m;
+    while ((m = HTML_TAG_PATTERN.exec(text)) !== null) {
+        issues.push({
+            code: "HTML_TAG",
+            message: `HTML 태그 '${m[0]}' 가 포함됐어요 — App Store / Play 모두 마크업 거부`,
+            position: m.index,
+            excerpt: makeExcerpt(text, m.index),
+        });
+        // 무한루프 방어 (제로폭 매치는 사실상 발생 안 하지만 안전망)
+        if (m.index === HTML_TAG_PATTERN.lastIndex)
+            HTML_TAG_PATTERN.lastIndex++;
+    }
+    return issues;
+}
+function lintLength(text, limit, label) {
+    if (text.length <= limit)
+        return [];
+    return [
+        {
+            code: "LENGTH_EXCEEDED",
+            message: `${label} 길이 ${text.length}자 — ${limit}자 이하로 줄여주세요`,
+        },
+    ];
+}
+function lintBackslashPrice(text) {
+    const issues = [];
+    BACKSLASH_PRICE_PATTERN.lastIndex = 0;
+    let m;
+    while ((m = BACKSLASH_PRICE_PATTERN.exec(text)) !== null) {
+        issues.push({
+            code: "BACKSLASH_PRICE",
+            message: `'${m[0]}' 처럼 역슬래시 + 숫자(가격) 표기는 Play Store 가 홍보 정책으로 거부할 수 있어요`,
+            position: m.index,
+            excerpt: makeExcerpt(text, m.index),
+        });
+        if (m.index === BACKSLASH_PRICE_PATTERN.lastIndex)
+            BACKSLASH_PRICE_PATTERN.lastIndex++;
+    }
+    return issues;
+}
+// ── public API ────────────────────────────────────────────────────
+/** App Store What's New 검증 — 길이(≤4000) + HTML 태그 거부. */
+export function validateAppStoreWhatsNew(text) {
+    const issues = [
+        ...lintLength(text, MAX_APPSTORE_WHATSNEW, "App Store What's New"),
+        ...lintHtmlTags(text),
+    ];
+    return { ok: issues.length === 0, issues };
+}
+/** Play release notes 검증 — 길이(≤500) + HTML + 백슬래시 가격. */
+export function validatePlayReleaseNotes(text) {
+    const issues = [
+        ...lintLength(text, MAX_PLAY_RELEASE_NOTES, "Play release notes"),
+        ...lintHtmlTags(text),
+        ...lintBackslashPrice(text),
+    ];
+    return { ok: issues.length === 0, issues };
+}
+/** 사용자 친화 메시지로 포맷. MCP 도구가 거부 응답에 그대로 노출. */
+export function formatIssuesForUser(issues) {
+    if (issues.length === 0)
+        return "검증 통과";
+    return issues
+        .map((i) => {
+        const loc = i.position !== undefined ? ` (pos ${i.position})` : "";
+        const ex = i.excerpt ? ` — 근처: ${JSON.stringify(i.excerpt)}` : "";
+        return `[${i.code}] ${i.message}${loc}${ex}`;
+    })
+        .join("\n");
+}
+// 테스트용 export (한계값 단언)
+export const __testing = {
+    MAX_APPSTORE_WHATSNEW,
+    MAX_PLAY_RELEASE_NOTES,
+    HTML_TAG_PATTERN,
+    BACKSLASH_PRICE_PATTERN,
+};

package/dist/playstore/tools.d.ts

@@ -8,7 +8,22 @@ export type PlayImageType = 'featureGraphic' | 'icon' | 'phoneScreenshots' | 'pr
  * 여기서는 기존 앱의 메타데이터, 빌드, 출시를 관리.
  */
 export declare const publisher: () => import("googleapis").androidpublisher_v3.Androidpublisher;
+export type PlayVitalsMetricSet = 'anrRate' | 'crashRate' | 'errorCount';
+export interface PlayStatisticsQuery {
+    metricSet?: PlayVitalsMetricSet;
+    startDate: string;
+    endDate: string;
+    aggregationPeriod?: 'DAILY' | 'HOURLY';
+    dimensions?: string[];
+    metrics?: string[];
+    filter?: string;
+    pageSize?: number;
+    pageToken?: string;
+    userCohort?: 'OS_PUBLIC' | 'APP_TESTERS' | 'OS_BETA';
+    timeZone?: string;
+}
 export declare function withEdit<T>(auth: OAuth2Client | JWT, packageName: string, fn: (editId: string) => Promise<T>, commit?: boolean): Promise<T>;
+export declare function getStatistics(auth: OAuth2Client | JWT, packageName: string, query: PlayStatisticsQuery): Promise<unknown>;
 export declare function getAppDetails(auth: OAuth2Client | JWT, packageName: string): Promise<import("googleapis").androidpublisher_v3.Schema$AppDetails>;
 export declare function getListing(auth: OAuth2Client | JWT, packageName: string, language?: string): Promise<import("googleapis").androidpublisher_v3.Schema$Listing>;
 export declare function updateListing(auth: OAuth2Client | JWT, packageName: string, language: string, data: {

package/dist/playstore/tools.js

@@ -18,6 +18,28 @@ function mimeTypeFor(filePath) {
  * 여기서는 기존 앱의 메타데이터, 빌드, 출시를 관리.
  */
 export const publisher = () => google.androidpublisher('v3');
+const REPORTING_API_BASE = 'https://playdeveloperreporting.googleapis.com/v1beta1';
+const METRIC_SET_RESOURCE = {
+    anrRate: 'anrRateMetricSet',
+    crashRate: 'crashRateMetricSet',
+    errorCount: 'errorCountMetricSet',
+};
+const DEFAULT_METRICS = {
+    anrRate: ['anrRate', 'userPerceivedAnrRate', 'distinctUsers'],
+    crashRate: ['crashRate', 'userPerceivedCrashRate', 'distinctUsers'],
+    errorCount: ['errorReportCount', 'distinctUsers'],
+};
+function dateToReportingDateTime(date, timeZone) {
+    const match = /^(\d{4})-(\d{2})-(\d{2})$/.exec(date);
+    if (!match)
+        throw new Error(`날짜는 YYYY-MM-DD 형식이어야 해: ${date}`);
+    return {
+        year: Number(match[1]),
+        month: Number(match[2]),
+        day: Number(match[3]),
+        timeZone: { id: timeZone },
+    };
+}
 export async function withEdit(auth, packageName, fn, commit = false) {
     const res = await publisher().edits.insert({ auth, packageName });
     const editId = res.data.id;
@@ -36,6 +58,31 @@ export async function withEdit(auth, packageName, fn, commit = false) {
         }
     }
 }
+// ─── Play Developer Reporting API / Android vitals ───
+export async function getStatistics(auth, packageName, query) {
+    const metricSet = query.metricSet ?? 'anrRate';
+    const resource = METRIC_SET_RESOURCE[metricSet];
+    const timeZone = query.timeZone ?? 'America/Los_Angeles';
+    const url = `${REPORTING_API_BASE}/apps/${encodeURIComponent(packageName)}/${resource}:query`;
+    const res = await auth.request({
+        url,
+        method: 'POST',
+        data: {
+            timelineSpec: {
+                aggregationPeriod: query.aggregationPeriod ?? 'DAILY',
+                startTime: dateToReportingDateTime(query.startDate, timeZone),
+                endTime: dateToReportingDateTime(query.endDate, timeZone),
+            },
+            dimensions: query.dimensions ?? ['versionCode'],
+            metrics: query.metrics ?? DEFAULT_METRICS[metricSet],
+            ...(query.filter ? { filter: query.filter } : {}),
+            ...(query.pageSize ? { pageSize: query.pageSize } : {}),
+            ...(query.pageToken ? { pageToken: query.pageToken } : {}),
+            ...(query.userCohort ? { userCohort: query.userCohort } : {}),
+        },
+    });
+    return res.data;
+}
 // ─── 앱 목록 ───
 export async function getAppDetails(auth, packageName) {
     return withEdit(auth, packageName, async (editId) => {

package/dist/registers/appstore.js

@@ -4,6 +4,7 @@ import * as appstoreScreenshots from '../appstore/screenshots.js';
 import { createAppleOneTimePurchase, createAppleSubscription, updateAppleProduct, deleteAppleProduct, listAppleProducts, } from '@onesub/providers';
 import { requireAppStoreCreds } from '../helpers.js';
 import { buildAppStoreReleasePlan } from '../checks/plan.js';
+import { validateAppStoreWhatsNew, formatIssuesForUser } from '../lib/text-validators.js';
 export function registerAppstoreTools(server) {
     server.tool('appstore_list_apps', 'App Store Connect 앱 목록 조회', {}, async () => {
         const apps = await appstore.listApps();
@@ -80,6 +81,25 @@ export function registerAppstoreTools(server) {
             ],
         };
     });
+    server.tool('appstore_attach_latest_build', [
+        'App Store 버전에 최신 VALID 빌드를 자동으로 attach — list_builds → 필터 → attach 의 3-step 을 1회로 단축.',
+        '내부: versionId 로 appId 역추적 → listBuilds 에서 processingState=VALID 만 필터 → buildNumber 숫자 최대값 선택 → attach.',
+        'PROCESSING 중인 빌드를 실수로 attach 해서 심사 제출 시 깨지는 케이스를 차단.',
+        'minBuildNumber 옵션으로 floor 지정 가능 (예: 1.4.x 빌드만 attach).',
+    ].join(' '), {
+        versionId: z.string().describe('App Store 버전 ID (appstore_create_version 또는 list_versions 결과)'),
+        minBuildNumber: z.number().int().optional().describe('attach 후보 최소 buildNumber (예: 186 — 이전 빌드 무시)'),
+    }, async ({ versionId, minBuildNumber }) => {
+        const result = await appstore.attachLatestValidBuild(versionId, { minBuildNumber });
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `✅ 최신 VALID 빌드 #${result.buildNumber} (id=${result.attachedBuildId}) 가 버전 ${versionId} 에 연결됐어.\n\n${JSON.stringify(result, null, 2)}`,
+                },
+            ],
+        };
+    });
     server.tool('appstore_get_metadata', 'App Store 버전 메타데이터 (설명문, 키워드, What\'s New)', { versionId: z.string().describe('버전 ID') }, async ({ versionId }) => {
         const localizations = await appstore.getVersionLocalizations(versionId);
         return { content: [{ type: 'text', text: JSON.stringify(localizations, null, 2) }] };
@@ -97,6 +117,19 @@ export function registerAppstoreTools(server) {
         if (Object.keys(cleaned).length === 0) {
             throw new Error('수정할 필드를 하나 이상 지정해줘 (whatsNew, description, keywords, promotionalText, supportUrl, marketingUrl).');
         }
+        // whatsNew 가 포함될 때만 사전 lint — 다른 필드(description/keywords)는 별도 정책.
+        if (typeof cleaned.whatsNew === 'string') {
+            const validation = validateAppStoreWhatsNew(cleaned.whatsNew);
+            if (!validation.ok) {
+                return {
+                    content: [{
+                            type: 'text',
+                            text: `❌ whatsNew 사전 검증 실패 — API 호출 안 함\n\n${formatIssuesForUser(validation.issues)}\n\n수정 후 다시 호출해주세요.`,
+                        }],
+                    isError: true,
+                };
+            }
+        }
         const result = await appstore.updateVersionLocalization(localizationId, cleaned);
         return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
     });
@@ -139,6 +172,17 @@ export function registerAppstoreTools(server) {
         locale: z.string().describe('로캘 (예: ko, en-US, ja)'),
         whatsNew: z.string().describe("'이 버전의 새로운 기능' 텍스트 (4000자 이내)"),
     }, async ({ versionId, locale, whatsNew }) => {
+        // ── 사전 lint — Apple 409 INVALID_CHARACTERS 등 round-trip 낭비 차단.
+        const validation = validateAppStoreWhatsNew(whatsNew);
+        if (!validation.ok) {
+            return {
+                content: [{
+                        type: 'text',
+                        text: `❌ What's New 사전 검증 실패 — API 호출 안 함\n\n${formatIssuesForUser(validation.issues)}\n\n수정 후 다시 호출해주세요.`,
+                    }],
+                isError: true,
+            };
+        }
         const result = await appstore.updateVersionWhatsNew(versionId, locale, { whatsNew });
         return { content: [{ type: 'text', text: `✅ ${locale} 로캘의 What's New가 업데이트됐어.\n\n${JSON.stringify(result, null, 2)}` }] };
     });
@@ -431,11 +475,44 @@ export function registerAppstoreTools(server) {
         '내부 흐름: POST /reviewSubmissions(또는 CREATED 상태 재사용) → POST /reviewSubmissionItems(version attach) → PATCH submitted=true.',
         'appId와 platform은 versionId에서 자동 조회 — 별도 입력 불필요.',
         '⚠️ 비가역 작업: 제출 후엔 Apple 심사가 시작되며, 메타데이터/스크린샷/빌드를 더 못 바꿈 (REJECTED/METADATA_REJECTED 시 다시 편집 가능).',
+        '안전 가드: confirm 생략/false 시 dry-run preview 만 반환 (versionString·빌드·whatsNew 발췌). 실제 제출은 confirm: true 로 재호출.',
         '사전 조건: 버전이 PREPARE_FOR_SUBMISSION 또는 DEVELOPER_REJECTED 상태, 빌드 attached, 모든 필수 메타데이터 채워짐.',
         'appstore_check_submission_risks로 사전 점검 권장.',
     ].join(' '), {
         versionId: z.string().describe('App Store 버전 ID (appstore_list_versions 결과)'),
-    }, async ({ versionId }) => {
+        confirm: z.boolean().optional().describe('true 명시 시에만 실제 심사 제출. 생략/false 면 dry-run preview 만 반환 (비가역 사고 차단).'),
+    }, async ({ versionId, confirm }) => {
+        if (!confirm) {
+            // ── dry-run preview — versionString·빌드·whatsNew 발췌를 사용자에게 보여주고 재호출 유도.
+            const preview = await appstore.buildSubmitForReviewPreview(versionId);
+            const lines = [];
+            lines.push('🛑 심사 제출 dry-run — 아직 실제 제출 안 함.');
+            lines.push('');
+            lines.push(`  versionId    : ${preview.versionId}`);
+            lines.push(`  versionString: ${preview.versionString ?? '(조회 실패)'}`);
+            lines.push(`  state        : ${preview.state ?? '(조회 실패)'}`);
+            lines.push(`  appId        : ${preview.appId}`);
+            lines.push(`  platform     : ${preview.platform}`);
+            if (preview.attachedBuild) {
+                lines.push(`  attachedBuild: #${preview.attachedBuild.buildNumber ?? '?'} (id=${preview.attachedBuild.id}, state=${preview.attachedBuild.processingState ?? '?'})`);
+            }
+            else {
+                lines.push(`  attachedBuild: ⚠️ 미연결 — appstore_attach_latest_build 필요`);
+            }
+            if (preview.whatsNewByLocale.length === 0) {
+                lines.push(`  whatsNew     : ⚠️ 등록된 로컬라이제이션 없음`);
+            }
+            else {
+                lines.push(`  whatsNew     :`);
+                for (const wn of preview.whatsNewByLocale) {
+                    lines.push(`    [${wn.locale}] (${wn.length}자) "${wn.excerpt}"`);
+                }
+            }
+            lines.push('');
+            lines.push('실제 제출하려면 같은 versionId 로 `confirm: true` 옵션을 추가해 재호출하세요.');
+            lines.push('⚠️ 제출 후엔 cancel_review 가 큐 진입(WAITING_FOR_REVIEW) 시점에 막힐 수 있어요 (실측: 1.4.2→3, 1.4.5→6).');
+            return { content: [{ type: 'text', text: lines.join('\n') }] };
+        }
         const result = await appstore.submitVersionForReview(versionId);
         return { content: [{ type: 'text', text: `✅ 버전 ${versionId} 심사 제출 완료 (state: ${result.state}). App Store Connect에서 진행 상태 확인 가능.\n\n${JSON.stringify(result, null, 2)}` }] };
     });

package/dist/registers/auth.js

@@ -1,5 +1,31 @@
 import { getMcpOAuthClient } from '../auth/constants.js';
-import { startAuth, ensureFreshAccessToken } from '../auth/google-auth.js';
+import { startAuth, ensureFreshAccessToken, getTokensLastRefreshMs } from '../auth/google-auth.js';
+/**
+ * tokens.json mtime → "Nd Hh ago" 형식 문자열 + 재인증 권고.
+ * Google 정책: 7일 미사용 시 미인증 앱 refresh_token revoke 가능.
+ * 14일 초과 시 강한 권고, 7일~14일 부드러운 안내.
+ */
+function formatLastRefreshHint(lastMs) {
+    if (lastMs === null)
+        return { label: '(파일 mtime 조회 실패)' };
+    const ageMs = Date.now() - lastMs;
+    const days = Math.floor(ageMs / 86_400_000);
+    const hours = Math.floor((ageMs % 86_400_000) / 3_600_000);
+    const label = days > 0 ? `${days}d ${hours}h 전 갱신` : `${hours}h 전 갱신`;
+    if (days >= 14) {
+        return {
+            label,
+            recommendation: `⚠️ 14일 이상 미사용 — Google 정책상 refresh_token revoke 위험. 안전을 위해 'mimi_seed_auth_start' 로 재인증 권장.`,
+        };
+    }
+    if (days >= 7) {
+        return {
+            label,
+            recommendation: `ℹ️ 7일 이상 미사용 — 한 번 더 갱신하지 않으면 곧 revoke 가능. 다음 도구 호출이 자동 갱신해주지만, 장기 미사용 예정이면 미리 인증 갱신 권장.`,
+        };
+    }
+    return { label };
+}
 export function registerAuthTools(server) {
     server.tool('mimi_seed_auth_start', [
         'Google OAuth 로그인 링크를 발급하고 백그라운드 콜백 서버를 시작.',
@@ -28,6 +54,9 @@ export function registerAuthTools(server) {
     });
     server.tool('mimi_seed_auth_status', 'Mimi Seed MCP 인증 상태 확인 (만료 시 refresh_token으로 자동 갱신 시도)', {}, async () => {
         const r = await ensureFreshAccessToken();
+        const refreshHint = formatLastRefreshHint(getTokensLastRefreshMs());
+        const refreshLine = `   마지막 갱신: ${refreshHint.label}`;
+        const recommendation = refreshHint.recommendation ? `\n\n${refreshHint.recommendation}` : '';
         switch (r.status) {
             case 'unauthenticated':
                 return {
@@ -40,14 +69,19 @@ export function registerAuthTools(server) {
                 };
             case 'fresh': {
                 const min = Math.round(r.msUntilExpiry / 60000);
-                return { content: [{ type: 'text', text: `✅ 인증 유효 (${min}분 남음).` }] };
+                return {
+                    content: [{
+                            type: 'text',
+                            text: `✅ 인증 유효 (${min}분 남음).\n${refreshLine}${recommendation}`,
+                        }],
+                };
             }
             case 'refreshed': {
                 const min = Math.round(r.msUntilExpiry / 60000);
                 return {
                     content: [{
                             type: 'text',
-                            text: `✅ 토큰 만료 → refresh_token으로 자동 갱신 완료 (${min}분 남음).`,
+                            text: `✅ 토큰 만료 → refresh_token으로 자동 갱신 완료 (${min}분 남음).\n${refreshLine}${recommendation}`,
                         }],
                 };
             }
@@ -59,6 +93,7 @@ export function registerAuthTools(server) {
                                 `   코드: ${r.error.code}\n` +
                                 `   ${r.error.message}\n` +
                                 (r.error.hint ? `   → ${r.error.hint}\n` : '') +
+                                `${refreshLine}\n` +
                                 '\n터미널에서 재로그인:\n  npx -y @yoonion/mimi-seed-mcp mimi-seed-auth',
                         }],
                 };