npm - @yoonion/mimi-seed-mcp - Versions diffs - 0.5.0 → 0.6.1 - Mend

@yoonion/mimi-seed-mcp 0.5.0 → 0.6.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (18) hide show

package/LICENSE +75 -75
package/README.md +241 -241
package/dist/admob/cli.js +20 -20
package/dist/auth/google-auth.js +7 -7
package/dist/firebase/cli.js +27 -27
package/dist/firebase/tools.d.ts +37 -0
package/dist/firebase/tools.js +99 -0
package/dist/ga4/cli.js +27 -27
package/dist/googleads/tools.js +54 -54
package/dist/jenkins/credentials.js +6 -29
package/dist/jenkins/http.d.ts +22 -0
package/dist/jenkins/http.js +67 -0
package/dist/jenkins/jobs.d.ts +28 -0
package/dist/jenkins/jobs.js +80 -0
package/dist/lib/google-errors.js +21 -6
package/dist/registers/firebase.js +37 -0
package/dist/registers/jenkins.js +75 -0
package/package.json +1 -1

package/dist/admob/cli.js CHANGED Viewed

@@ -5,26 +5,26 @@
 import { requireAuth } from '../helpers.js';
 import * as admob from './tools.js';
 import { runDomainCli, requireFlag, flag, CliUsageError } from '../lib/cli-args.js';
-const HELP = `
-  💰 mimi-seed-admob — AdMob attach
-  사용법:
-    mimi-seed admob accounts
-        AdMob 계정 목록 (accountId 확인 — accounts/pub-XXXX)
-    mimi-seed admob apps --account <id>
-    mimi-seed admob ad-units --account <id>
-        등록된 앱 / 광고 단위 목록
-    mimi-seed admob create-app --account <id> --platform <ANDROID|IOS> --name <displayName>
-                               [--store-id com.x.y | 123456789]
-        앱 등록 (store-id 주면 스토어 링크). ⚠️ v1beta Limited Access — 403 가능
-    mimi-seed admob create-ad-unit --account <id> --app <appId> --name <name>
-                                   --format <BANNER|INTERSTITIAL|REWARDED|REWARDED_INTERSTITIAL|APP_OPEN|NATIVE>
-        광고 단위 생성. ⚠️ v1beta Limited Access — 403 가능
-  인증: npx -y @yoonion/mimi-seed-mcp mimi-seed-auth
+const HELP = `
+  💰 mimi-seed-admob — AdMob attach
+  사용법:
+    mimi-seed admob accounts
+        AdMob 계정 목록 (accountId 확인 — accounts/pub-XXXX)
+    mimi-seed admob apps --account <id>
+    mimi-seed admob ad-units --account <id>
+        등록된 앱 / 광고 단위 목록
+    mimi-seed admob create-app --account <id> --platform <ANDROID|IOS> --name <displayName>
+                               [--store-id com.x.y | 123456789]
+        앱 등록 (store-id 주면 스토어 링크). ⚠️ v1beta Limited Access — 403 가능
+    mimi-seed admob create-ad-unit --account <id> --app <appId> --name <name>
+                                   --format <BANNER|INTERSTITIAL|REWARDED|REWARDED_INTERSTITIAL|APP_OPEN|NATIVE>
+        광고 단위 생성. ⚠️ v1beta Limited Access — 403 가능
+  인증: npx -y @yoonion/mimi-seed-mcp mimi-seed-auth
 `;
 const AD_FORMATS = ['BANNER', 'INTERSTITIAL', 'REWARDED', 'REWARDED_INTERSTITIAL', 'APP_OPEN', 'NATIVE'];
 runDomainCli({

package/dist/auth/google-auth.js CHANGED Viewed

@@ -215,13 +215,13 @@ export function startAuth(clientId, clientSecret, options = {}) {
                 };
                 saveTokens(stored);
                 res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
-                res.end(`
-          <html><body style="font-family:system-ui;display:flex;justify-content:center;align-items:center;height:100vh;margin:0">
-            <div style="text-align:center">
-              <h1>✅ Mimi Seed 인증 완료!</h1>
-              <p>이 창을 닫고 Claude Code 또는 Codex로 돌아가세요.</p>
-            </div>
-          </body></html>
+                res.end(`
+          <html><body style="font-family:system-ui;display:flex;justify-content:center;align-items:center;height:100vh;margin:0">
+            <div style="text-align:center">
+              <h1>✅ Mimi Seed 인증 완료!</h1>
+              <p>이 창을 닫고 Claude Code 또는 Codex로 돌아가세요.</p>
+            </div>
+          </body></html>
         `);
                 server.close();
                 activeAuthServer = null;

package/dist/firebase/cli.js CHANGED Viewed

@@ -5,33 +5,33 @@ import { requireAuth } from '../helpers.js';
 import * as firebase from './tools.js';
 import { runDomainCli, requireFlag, flag, CliUsageError } from '../lib/cli-args.js';
 const FB_PLATFORMS = ['android', 'ios', 'web'];
-const HELP = `
-  🔥 mimi-seed-firebase — Firebase attach (프로비저닝 + config 산출)
-  사용법:
-    mimi-seed firebase projects
-        내 Firebase 프로젝트 목록
-    mimi-seed firebase apps --project <id> [--platform android|ios|web]
-        프로젝트의 앱 목록 (기본: android+ios+web 전부)
-    mimi-seed firebase create-android --project <id> --package com.x.y --name <displayName>
-    mimi-seed firebase create-ios     --project <id> --bundle com.x.y  --name <displayName>
-        새 앱 등록
-    mimi-seed firebase config --project <id> --app <appId> --platform <android|ios|web>
-        ⭐ google-services.json / GoogleService-Info.plist / web config 출력 (attach 페이로드)
-    mimi-seed firebase enable-services --project <id>
-        Firebase 기본 서비스 일괄 활성화 (Analytics 포함)
-    mimi-seed firebase link-analytics --project <id> (--account <gaAccountId> | --property <gaPropertyId>)
-        GA4 링크 (앱 measurement 자동 활성화) — account(신규 property 생성) 또는 property(기존 연결) 중 하나 필수
-    mimi-seed firebase analytics-details --project <id>
-        GA4 링크 상세 (property + stream 매핑)
-  인증: npx -y @yoonion/mimi-seed-mcp mimi-seed-auth
+const HELP = `
+  🔥 mimi-seed-firebase — Firebase attach (프로비저닝 + config 산출)
+  사용법:
+    mimi-seed firebase projects
+        내 Firebase 프로젝트 목록
+    mimi-seed firebase apps --project <id> [--platform android|ios|web]
+        프로젝트의 앱 목록 (기본: android+ios+web 전부)
+    mimi-seed firebase create-android --project <id> --package com.x.y --name <displayName>
+    mimi-seed firebase create-ios     --project <id> --bundle com.x.y  --name <displayName>
+        새 앱 등록
+    mimi-seed firebase config --project <id> --app <appId> --platform <android|ios|web>
+        ⭐ google-services.json / GoogleService-Info.plist / web config 출력 (attach 페이로드)
+    mimi-seed firebase enable-services --project <id>
+        Firebase 기본 서비스 일괄 활성화 (Analytics 포함)
+    mimi-seed firebase link-analytics --project <id> (--account <gaAccountId> | --property <gaPropertyId>)
+        GA4 링크 (앱 measurement 자동 활성화) — account(신규 property 생성) 또는 property(기존 연결) 중 하나 필수
+    mimi-seed firebase analytics-details --project <id>
+        GA4 링크 상세 (property + stream 매핑)
+  인증: npx -y @yoonion/mimi-seed-mcp mimi-seed-auth
 `;
 async function listApps(projectId, platform) {
     const auth = await requireAuth();

package/dist/firebase/tools.d.ts CHANGED Viewed

@@ -9,6 +9,43 @@ export declare function listProjects(auth: OAuth2Client): Promise<{
     projectNumber: string | null | undefined;
 }[]>;
 export declare function getProject(auth: OAuth2Client, projectId: string): Promise<import("googleapis").firebase_v1beta1.Schema$FirebaseProject>;
+/** long-running Operation 하나의 완료 여부를 판정한다. 폴링 루프에서 재사용 + 단독 테스트 가능. */
+export declare function operationOutcome(op: {
+    done?: boolean | null;
+    error?: {
+        message?: string | null;
+    } | null;
+}): {
+    status: 'pending';
+} | {
+    status: 'done';
+} | {
+    status: 'error';
+    message: string;
+};
+/**
+ * getOperation()을 완료(done)까지 폴링한다. getOperation() 자체가 튕기는 것(네트워크 blip)과
+ * operation이 아직 안 끝난 것(pending)을 구분해서, 전자는 몇 번 더 참아주고 후자만 진행 신호로 본다.
+ * intervalMs/maxAttempts는 테스트에서 실시간 대기 없이 검증하기 위한 override.
+ */
+export declare function waitForOperation(getOperation: () => Promise<{
+    done?: boolean | null;
+    error?: {
+        message?: string | null;
+    } | null;
+}>, label: string, opts?: {
+    intervalMs?: number;
+    maxAttempts?: number;
+}): Promise<void>;
+/**
+ * 새 GCP 프로젝트를 만들고 Firebase를 추가한다 (앱 하나당 전용 Firebase 프로젝트 컨벤션).
+ * 둘 다 long-running operation이라 완료까지 폴링한다(최악 케이스 ~2분: 단계당 ~60s × 2단계).
+ * parent 생략 시 계정의 기본 정책대로 생성된다 — 조직 소속이 강제된 계정은 parent
+ * ('organizations/<id>' 또는 'folders/<id>') 없이 호출하면 에러가 난다.
+ */
+export declare function createProject(auth: OAuth2Client, projectId: string, displayName: string, opts?: {
+    parent?: string;
+}): Promise<import("googleapis").firebase_v1beta1.Schema$FirebaseProject>;
 export declare function listAndroidApps(auth: OAuth2Client, projectId: string): Promise<{
     appId: string | null | undefined;
     packageName: string | null | undefined;

package/dist/firebase/tools.js CHANGED Viewed

@@ -19,6 +19,105 @@ export async function getProject(auth, projectId) {
     });
     return res.data;
 }
+const OPERATION_POLL_INTERVAL_MS = 2000;
+const OPERATION_MAX_ATTEMPTS = 30; // ~60s 상한 (operation 하나당) — 프로젝트 생성 + Firebase 추가 두 단계라 최악 ~2분
+const OPERATION_FETCH_RETRY_LIMIT = 3; // getOperation() 자체가 튕기는 경우(네트워크 blip) 허용할 연속 실패 횟수
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+/** long-running Operation 하나의 완료 여부를 판정한다. 폴링 루프에서 재사용 + 단독 테스트 가능. */
+export function operationOutcome(op) {
+    if (!op.done)
+        return { status: 'pending' };
+    if (op.error)
+        return { status: 'error', message: op.error.message ?? JSON.stringify(op.error) };
+    return { status: 'done' };
+}
+/**
+ * getOperation()을 완료(done)까지 폴링한다. getOperation() 자체가 튕기는 것(네트워크 blip)과
+ * operation이 아직 안 끝난 것(pending)을 구분해서, 전자는 몇 번 더 참아주고 후자만 진행 신호로 본다.
+ * intervalMs/maxAttempts는 테스트에서 실시간 대기 없이 검증하기 위한 override.
+ */
+export async function waitForOperation(getOperation, label, opts = {}) {
+    const intervalMs = opts.intervalMs ?? OPERATION_POLL_INTERVAL_MS;
+    const maxAttempts = opts.maxAttempts ?? OPERATION_MAX_ATTEMPTS;
+    let consecutiveFetchErrors = 0;
+    for (let attempt = 0; attempt < maxAttempts; attempt++) {
+        let op;
+        try {
+            op = await getOperation();
+            consecutiveFetchErrors = 0;
+        }
+        catch (err) {
+            consecutiveFetchErrors += 1;
+            if (consecutiveFetchErrors > OPERATION_FETCH_RETRY_LIMIT)
+                throw err;
+            if (attempt < maxAttempts - 1)
+                await sleep(intervalMs);
+            continue;
+        }
+        const outcome = operationOutcome(op);
+        if (outcome.status === 'error')
+            throw new Error(`${label} 실패: ${outcome.message}`);
+        if (outcome.status === 'done')
+            return;
+        if (attempt < maxAttempts - 1)
+            await sleep(intervalMs);
+    }
+    throw new Error(`${label}이(가) 시간 내에 끝나지 않았습니다 — 나중에 firebase_get_project 로 상태를 확인하세요.`);
+}
+/** 방금 만든 프로젝트를 곧바로 조회할 때의 짧은 전파 지연(propagation lag)을 흡수하는 재시도. */
+async function getProjectWithRetry(auth, projectId, attempts = 3, delayMs = 1500) {
+    for (let attempt = 0; attempt < attempts; attempt++) {
+        try {
+            return await getProject(auth, projectId);
+        }
+        catch (err) {
+            if (attempt === attempts - 1)
+                throw err;
+            await sleep(delayMs);
+        }
+    }
+    throw new Error('unreachable');
+}
+/**
+ * 새 GCP 프로젝트를 만들고 Firebase를 추가한다 (앱 하나당 전용 Firebase 프로젝트 컨벤션).
+ * 둘 다 long-running operation이라 완료까지 폴링한다(최악 케이스 ~2분: 단계당 ~60s × 2단계).
+ * parent 생략 시 계정의 기본 정책대로 생성된다 — 조직 소속이 강제된 계정은 parent
+ * ('organizations/<id>' 또는 'folders/<id>') 없이 호출하면 에러가 난다.
+ */
+export async function createProject(auth, projectId, displayName, opts = {}) {
+    const crm = google.cloudresourcemanager('v3');
+    const createRes = await crm.projects.create({
+        auth,
+        requestBody: { projectId, displayName, parent: opts.parent },
+    });
+    const createOpName = createRes.data.name;
+    if (!createOpName)
+        throw new Error('GCP 프로젝트 생성 응답에 operation name이 없습니다.');
+    await waitForOperation(async () => (await crm.operations.get({ auth, name: createOpName })).data, 'GCP 프로젝트 생성');
+    // 이 지점부터는 GCP 프로젝트가 이미 존재한다 — 아래서 실패하면 "다른 projectId로 재시도"가
+    // 아니라 "같은 projectId로 복구"를 안내해야 한다(안 그러면 고아 프로젝트가 계속 쌓일 수 있음).
+    try {
+        const fb = google.firebase('v1beta1');
+        const addRes = await fb.projects.addFirebase({ auth, project: `projects/${projectId}` });
+        const addOpName = addRes.data.name;
+        if (!addOpName)
+            throw new Error('Firebase 추가 응답에 operation name이 없습니다.');
+        await waitForOperation(async () => (await fb.operations.get({ auth, name: addOpName })).data, 'Firebase 추가');
+    }
+    catch (err) {
+        if (err && typeof err === 'object') {
+            err.partialFailureNote = [
+                `⚠️ GCP 프로젝트 \`${projectId}\`는 이미 생성됐습니다.`,
+                '→ 다른 projectId로 재시도하지 말고, 원인을 해결한 뒤 같은 projectId로 다시 시도하거나',
+                `firebase_get_project("${projectId}")로 상태를 확인하세요.`,
+            ].join(' ');
+        }
+        throw err;
+    }
+    return getProjectWithRetry(auth, projectId);
+}
 // ─── Android 앱 ───
 export async function listAndroidApps(auth, projectId) {
     const res = await google.firebase('v1beta1').projects.androidApps.list({

package/dist/ga4/cli.js CHANGED Viewed

@@ -4,33 +4,33 @@
 import { requireAuth } from '../helpers.js';
 import * as ga4 from './tools.js';
 import { runDomainCli, requireFlag, flag, flagList } from '../lib/cli-args.js';
-const HELP = `
-  📊 mimi-seed-ga4 — GA4(Google Analytics 4) attach
-  사용법:
-    mimi-seed ga4 accounts
-        접근 가능한 GA 계정 + property 요약 (accountId/propertyId 확인)
-    mimi-seed ga4 properties --account <id>
-        계정 하위 GA4 property 목록
-    mimi-seed ga4 create-property --account <id> --name <displayName>
-                                  [--timezone Asia/Seoul] [--currency KRW]
-        새 GA4 property 생성
-    mimi-seed ga4 create-stream --property <id> --platform <web|android|ios> --name <name>
-                                [--uri https://...] [--package com.x.y] [--bundle com.x.y]
-        data stream 생성 (web→measurementId, app→firebaseAppId)
-    mimi-seed ga4 streams --property <id>
-        data stream 목록
-    mimi-seed ga4 report --property <id> --start 28daysAgo --end today
-                         [--dimensions date,country] [--metrics activeUsers,eventCount]
-        GA4 Data API 리포트
-  ⚠️ analytics.edit 스코프 필요 — 처음이면 재로그인:
-     npx -y @yoonion/mimi-seed-mcp mimi-seed-auth
+const HELP = `
+  📊 mimi-seed-ga4 — GA4(Google Analytics 4) attach
+  사용법:
+    mimi-seed ga4 accounts
+        접근 가능한 GA 계정 + property 요약 (accountId/propertyId 확인)
+    mimi-seed ga4 properties --account <id>
+        계정 하위 GA4 property 목록
+    mimi-seed ga4 create-property --account <id> --name <displayName>
+                                  [--timezone Asia/Seoul] [--currency KRW]
+        새 GA4 property 생성
+    mimi-seed ga4 create-stream --property <id> --platform <web|android|ios> --name <name>
+                                [--uri https://...] [--package com.x.y] [--bundle com.x.y]
+        data stream 생성 (web→measurementId, app→firebaseAppId)
+    mimi-seed ga4 streams --property <id>
+        data stream 목록
+    mimi-seed ga4 report --property <id> --start 28daysAgo --end today
+                         [--dimensions date,country] [--metrics activeUsers,eventCount]
+        GA4 Data API 리포트
+  ⚠️ analytics.edit 스코프 필요 — 처음이면 재로그인:
+     npx -y @yoonion/mimi-seed-mcp mimi-seed-auth
 `;
 runDomainCli({
     binName: 'mimi-seed-ga4',

package/dist/googleads/tools.js CHANGED Viewed

@@ -84,20 +84,20 @@ export async function listAccessibleCustomers(auth, cfg) {
 }
 // ─── 캠페인 목록 ─────────────────────────────────────────────
 export async function listCampaigns(auth, cfg) {
-    const query = `
-    SELECT
-      campaign.id,
-      campaign.name,
-      campaign.status,
-      campaign.advertising_channel_type,
-      campaign.advertising_channel_sub_type,
-      campaign.start_date,
-      campaign.end_date,
-      campaign_budget.amount_micros
-    FROM campaign
-    WHERE campaign.status != 'REMOVED'
-    ORDER BY campaign.name ASC
-    LIMIT 200
+    const query = `
+    SELECT
+      campaign.id,
+      campaign.name,
+      campaign.status,
+      campaign.advertising_channel_type,
+      campaign.advertising_channel_sub_type,
+      campaign.start_date,
+      campaign.end_date,
+      campaign_budget.amount_micros
+    FROM campaign
+    WHERE campaign.status != 'REMOVED'
+    ORDER BY campaign.name ASC
+    LIMIT 200
   `;
     const rows = await search(auth, cfg, query);
     return rows.map((r) => ({
@@ -113,26 +113,26 @@ export async function listCampaigns(auth, cfg) {
 }
 // ─── 캠페인 성과 리포트 ────────────────────────────────────────
 export async function getCampaignReport(auth, cfg, range) {
-    const query = `
-    SELECT
-      campaign.id,
-      campaign.name,
-      campaign.status,
-      campaign.advertising_channel_type,
-      campaign.advertising_channel_sub_type,
-      metrics.clicks,
-      metrics.impressions,
-      metrics.cost_micros,
-      metrics.conversions,
-      metrics.conversions_value,
-      metrics.cost_per_conversion,
-      metrics.ctr,
-      metrics.average_cpc
-    FROM campaign
-    WHERE campaign.status != 'REMOVED'
-      AND segments.date BETWEEN '${range.startDate}' AND '${range.endDate}'
-    ORDER BY metrics.cost_micros DESC
-    LIMIT 500
+    const query = `
+    SELECT
+      campaign.id,
+      campaign.name,
+      campaign.status,
+      campaign.advertising_channel_type,
+      campaign.advertising_channel_sub_type,
+      metrics.clicks,
+      metrics.impressions,
+      metrics.cost_micros,
+      metrics.conversions,
+      metrics.conversions_value,
+      metrics.cost_per_conversion,
+      metrics.ctr,
+      metrics.average_cpc
+    FROM campaign
+    WHERE campaign.status != 'REMOVED'
+      AND segments.date BETWEEN '${range.startDate}' AND '${range.endDate}'
+    ORDER BY metrics.cost_micros DESC
+    LIMIT 500
   `;
     const rows = await search(auth, cfg, query);
     return rows.map((r) => ({
@@ -153,26 +153,26 @@ export async function getCampaignReport(auth, cfg, range) {
 }
 // ─── UAC(앱 캠페인) 리포트 ─────────────────────────────────────
 export async function getUacReport(auth, cfg, range) {
-    const query = `
-    SELECT
-      campaign.id,
-      campaign.name,
-      campaign.status,
-      campaign.advertising_channel_sub_type,
-      metrics.clicks,
-      metrics.impressions,
-      metrics.cost_micros,
-      metrics.conversions,
-      metrics.conversions_value,
-      metrics.cost_per_conversion,
-      metrics.ctr,
-      segments.date
-    FROM campaign
-    WHERE campaign.advertising_channel_type = 'MULTI_CHANNEL'
-      AND campaign.advertising_channel_sub_type IN ('APP_CAMPAIGN', 'APP_CAMPAIGN_FOR_ENGAGEMENT', 'APP_CAMPAIGN_FOR_PRE_REGISTRATION')
-      AND segments.date BETWEEN '${range.startDate}' AND '${range.endDate}'
-    ORDER BY segments.date DESC, metrics.cost_micros DESC
-    LIMIT 500
+    const query = `
+    SELECT
+      campaign.id,
+      campaign.name,
+      campaign.status,
+      campaign.advertising_channel_sub_type,
+      metrics.clicks,
+      metrics.impressions,
+      metrics.cost_micros,
+      metrics.conversions,
+      metrics.conversions_value,
+      metrics.cost_per_conversion,
+      metrics.ctr,
+      segments.date
+    FROM campaign
+    WHERE campaign.advertising_channel_type = 'MULTI_CHANNEL'
+      AND campaign.advertising_channel_sub_type IN ('APP_CAMPAIGN', 'APP_CAMPAIGN_FOR_ENGAGEMENT', 'APP_CAMPAIGN_FOR_PRE_REGISTRATION')
+      AND segments.date BETWEEN '${range.startDate}' AND '${range.endDate}'
+    ORDER BY segments.date DESC, metrics.cost_micros DESC
+    LIMIT 500
   `;
     const rows = await search(auth, cfg, query);
     const byId = new Map();

package/dist/jenkins/credentials.js CHANGED Viewed

@@ -1,8 +1,6 @@
+import { authHeaders, getCrumb } from './http.js';
 const FILE_CLASS = 'org.jenkinsci.plugins.plaincredentials.impl.FileCredentialsImpl';
 const TEXT_CLASS = 'org.jenkinsci.plugins.plaincredentials.impl.StringCredentialsImpl';
-function basicAuth(username, token) {
-    return 'Basic ' + Buffer.from(`${username}:${token}`).toString('base64');
-}
 // 도메인(_ = 전역) 레벨 — 목록 조회 / createCredentials 의 베이스
 function storeBase(url) {
     return `${url.replace(/\/$/, '')}/credentials/store/system/domain/_`;
@@ -11,36 +9,15 @@ function storeBase(url) {
 function credentialBase(url, id) {
     return `${storeBase(url)}/credential/${encodeURIComponent(id)}`;
 }
-/**
- * CSRF crumb (best-effort). crumb issuer 비활성이거나 API 토큰으로 면제되면 빈 객체.
- * 구버전 Jenkins / 비밀번호 인증 환경에서 POST 403 방지.
- */
-async function getCrumb(cfg) {
-    try {
-        const res = await fetch(`${cfg.url.replace(/\/$/, '')}/crumbIssuer/api/json`, {
-            headers: { Authorization: basicAuth(cfg.username, cfg.token) },
-        });
-        if (!res.ok)
-            return {};
-        const data = (await res.json());
-        if (data.crumbRequestField && data.crumb) {
-            return { [data.crumbRequestField]: data.crumb };
-        }
-        return {};
-    }
-    catch {
-        return {};
-    }
-}
 async function credentialExists(cfg, id) {
     const res = await fetch(`${credentialBase(cfg.url, id)}/api/json`, {
-        headers: { Authorization: basicAuth(cfg.username, cfg.token) },
+        headers: authHeaders(cfg),
     });
     return res.ok;
 }
 export async function listCredentials(cfg) {
     const res = await fetch(`${storeBase(cfg.url)}/api/json?depth=1`, {
-        headers: { Authorization: basicAuth(cfg.username, cfg.token) },
+        headers: authHeaders(cfg),
     });
     if (!res.ok)
         throw new Error(`Jenkins credentials 조회 실패 (${res.status})`);
@@ -70,7 +47,7 @@ export async function upsertSecretText(cfg, id, secret, description = '') {
     const res = await fetch(endpoint, {
         method: 'POST',
         headers: {
-            Authorization: basicAuth(cfg.username, cfg.token),
+            ...authHeaders(cfg),
             'Content-Type': 'application/x-www-form-urlencoded',
             ...crumb,
         },
@@ -109,7 +86,7 @@ export async function upsertSecretFile(cfg, id, fileBase64, fileName, descriptio
     const res = await fetch(endpoint, {
         method: 'POST',
         headers: {
-            Authorization: basicAuth(cfg.username, cfg.token),
+            ...authHeaders(cfg),
             ...crumb,
         },
         body: form,
@@ -124,7 +101,7 @@ export async function deleteCredential(cfg, id) {
     const res = await fetch(`${credentialBase(cfg.url, id)}/doDelete`, {
         method: 'POST',
         headers: {
-            Authorization: basicAuth(cfg.username, cfg.token),
+            ...authHeaders(cfg),
             ...crumb,
         },
     });

package/dist/jenkins/http.d.ts ADDED Viewed

@@ -0,0 +1,22 @@
+import type { JenkinsConfig } from './config.js';
+export declare function basicAuth(username: string, token: string): string;
+export declare function baseUrl(cfg: JenkinsConfig): string;
+export declare function authHeaders(cfg: JenkinsConfig): Record<string, string>;
+/**
+ * CSRF crumb (best-effort). crumb issuer 비활성이거나 API 토큰으로 면제되면 빈 객체.
+ * 구버전 Jenkins / 비밀번호 인증 환경에서 POST 403 방지.
+ */
+export declare function getCrumb(cfg: JenkinsConfig): Promise<Record<string, string>>;
+/**
+ * 잡 경로를 Jenkins URL 로 바꾼다. 폴더는 `/` 로 구분한다.
+ *   "penguinrun"        -> <base>/job/penguinrun
+ *   "vir-game/client"   -> <base>/job/vir-game/job/client
+ */
+export declare function jobUrl(cfg: JenkinsConfig, jobPath: string): string;
+/**
+ * createItem 은 "부모 컨테이너" 에 POST 하고 leaf 이름을 쿼리로 넘긴다.
+ * 루트 잡이면 부모가 Jenkins 루트, 폴더 안이면 폴더 URL.
+ */
+export declare function createItemUrl(cfg: JenkinsConfig, jobPath: string): string;
+/** 실패 응답의 본문 일부를 붙여 에러를 만든다. Jenkins 는 원인을 본문에만 담는 경우가 많다. */
+export declare function jenkinsError(prefix: string, res: Response): Promise<Error>;

package/dist/jenkins/http.js ADDED Viewed

@@ -0,0 +1,67 @@
+export function basicAuth(username, token) {
+    return 'Basic ' + Buffer.from(`${username}:${token}`).toString('base64');
+}
+export function baseUrl(cfg) {
+    return cfg.url.replace(/\/$/, '');
+}
+export function authHeaders(cfg) {
+    return { Authorization: basicAuth(cfg.username, cfg.token) };
+}
+/**
+ * CSRF crumb (best-effort). crumb issuer 비활성이거나 API 토큰으로 면제되면 빈 객체.
+ * 구버전 Jenkins / 비밀번호 인증 환경에서 POST 403 방지.
+ */
+export async function getCrumb(cfg) {
+    try {
+        const res = await fetch(`${baseUrl(cfg)}/crumbIssuer/api/json`, {
+            headers: authHeaders(cfg),
+        });
+        if (!res.ok)
+            return {};
+        const data = (await res.json());
+        if (data.crumbRequestField && data.crumb) {
+            return { [data.crumbRequestField]: data.crumb };
+        }
+        return {};
+    }
+    catch {
+        return {};
+    }
+}
+/**
+ * 잡 경로를 Jenkins URL 로 바꾼다. 폴더는 `/` 로 구분한다.
+ *   "penguinrun"        -> <base>/job/penguinrun
+ *   "vir-game/client"   -> <base>/job/vir-game/job/client
+ */
+export function jobUrl(cfg, jobPath) {
+    const segments = jobPath.split('/').filter(Boolean);
+    if (segments.length === 0)
+        throw new Error('잡 이름이 비어 있습니다.');
+    const suffix = segments.map((s) => `job/${encodeURIComponent(s)}`).join('/');
+    return `${baseUrl(cfg)}/${suffix}`;
+}
+/**
+ * createItem 은 "부모 컨테이너" 에 POST 하고 leaf 이름을 쿼리로 넘긴다.
+ * 루트 잡이면 부모가 Jenkins 루트, 폴더 안이면 폴더 URL.
+ */
+export function createItemUrl(cfg, jobPath) {
+    const segments = jobPath.split('/').filter(Boolean);
+    if (segments.length === 0)
+        throw new Error('잡 이름이 비어 있습니다.');
+    const leaf = segments.pop();
+    const parent = segments.length
+        ? `${baseUrl(cfg)}/${segments.map((s) => `job/${encodeURIComponent(s)}`).join('/')}`
+        : baseUrl(cfg);
+    return `${parent}/createItem?name=${encodeURIComponent(leaf)}`;
+}
+/** 실패 응답의 본문 일부를 붙여 에러를 만든다. Jenkins 는 원인을 본문에만 담는 경우가 많다. */
+export async function jenkinsError(prefix, res) {
+    let detail = '';
+    try {
+        detail = (await res.text()).trim().slice(0, 300);
+    }
+    catch {
+        // 본문 없음
+    }
+    return new Error(`${prefix} (${res.status})${detail ? `: ${detail}` : ''}`);
+}