mimi-seed 0.10.0 → 0.10.2

package/README.md

@@ -310,6 +310,9 @@ Codex는 자동 쓰기 명령을 사용할 수 있습니다.
 mimi-seed mcp codex --write
 ```
 
+이 명령은 `mimi-seed-remote` HTTP 항목과 `bearer_token_env_var = "MIMI_SEED_TOKEN"`을 기록하며 PAT 자체는
+`config.toml`에 쓰지 않습니다. Codex를 실행하는 환경에 `MIMI_SEED_TOKEN`을 설정하고 Codex를 다시 시작하세요.
+
 등록 후 Claude Code 또는 Codex에서 대화로 제어:
 
 ```

package/dist/index.js

@@ -1304,18 +1304,22 @@ import path3 from "path";
 import os2 from "os";
 import kleur8 from "kleur";
 var SERVER_NAME = "mimi-seed";
+var CODEX_REMOTE_NAME = "mimi-seed-remote";
+var CODEX_TOKEN_ENV = "MIMI_SEED_TOKEN";
 var M7 = catalog(
   {
     claudeTitle: "Claude Code MCP \uB4F1\uB85D \u2014 \uC544\uB798 \uD55C \uC904\uC744 \uADF8\uB300\uB85C \uC2E4\uD589\uD558\uC138\uC694:",
     tokenWarning: (loc) => `  \u26A0 \uC2E4\uC81C \uD1A0\uD070\uC774 \uD3EC\uD568\uB41C \uBA85\uB839\uC785\uB2C8\uB2E4 (\uC178 \uD788\uC2A4\uD1A0\uB9AC\uC5D0 \uB0A8\uC74C). \uD1A0\uD070\uC740 ${loc} \uC5D0\uB3C4 \uC800\uC7A5\uB418\uC5B4 \uC788\uC2B5\uB2C8\uB2E4.`,
     codexTitle: "Codex MCP \uB4F1\uB85D:",
-    codexManual: "  # \uB610\uB294 \uC218\uB3D9\uC73C\uB85C ~/.codex/config.toml \uC5D0 [mcp_servers.mimi-seed] \uCD94\uAC00"
+    codexEnvNote: `  # ${CODEX_TOKEN_ENV} \uD658\uACBD\uBCC0\uC218\uC5D0 PAT \uB97C \uB123\uC5B4\uC57C \uC6D0\uACA9 \uC778\uC99D\uC774 \uB429\uB2C8\uB2E4 (config \uC5D0 \uD1A0\uD070\uC744 \uD3C9\uBB38 \uC800\uC7A5\uD558\uC9C0 \uC54A\uC74C).`,
+    codexManual: `  # \uB610\uB294 \uC218\uB3D9\uC73C\uB85C:  codex mcp add ${CODEX_REMOTE_NAME} --url <endpoint> --bearer-token-env-var ${CODEX_TOKEN_ENV}`
   },
   {
     claudeTitle: "Register the MCP server with Claude Code \u2014 run this single line as-is:",
     tokenWarning: (loc) => `  \u26A0 This command contains your real token (it lands in your shell history). The token is also stored in ${loc}.`,
     codexTitle: "Register with Codex:",
-    codexManual: "  # or add [mcp_servers.mimi-seed] to ~/.codex/config.toml by hand"
+    codexEnvNote: `  # Set the ${CODEX_TOKEN_ENV} env var to your PAT so the remote authenticates (the token is not written to the config in plaintext).`,
+    codexManual: `  # or by hand:  codex mcp add ${CODEX_REMOTE_NAME} --url <endpoint> --bearer-token-env-var ${CODEX_TOKEN_ENV}`
   }
 );
 function tomlString(value) {
@@ -1323,10 +1327,10 @@ function tomlString(value) {
 }
 function codexBlock(cfg) {
   return [
-    `[mcp_servers.${SERVER_NAME}]`,
+    `[mcp_servers.${CODEX_REMOTE_NAME}]`,
     `url = ${tomlString(cfg.endpoint)}`,
+    `bearer_token_env_var = ${tomlString(CODEX_TOKEN_ENV)}`,
     `enabled = true`,
-    `http_headers = { Authorization = ${tomlString(`Bearer ${cfg.token}`)} }`,
     ""
   ].join("\n");
 }
@@ -1354,10 +1358,19 @@ function printMcpSetup(cfg) {
       "",
       kleur8.dim(M7().codexTitle),
       kleur8.dim("  mimi-seed mcp codex --write"),
+      kleur8.dim(M7().codexEnvNote),
       kleur8.dim(M7().codexManual)
     ].join("\n") + "\n"
   );
 }
+function removeTomlBlock(input, tableName) {
+  const header = `[${tableName}]`;
+  const start = input.indexOf(header);
+  if (start < 0) return input;
+  const next = input.slice(start + header.length).search(/\n\[[^\]]+\]/);
+  const end = next < 0 ? input.length : start + header.length + next + 1;
+  return `${input.slice(0, start)}${input.slice(end).replace(/^\n+/, "\n")}`;
+}
 async function writeCodexMcpConfig(cfg) {
   const configDir = path3.join(os2.homedir(), ".codex");
   const configPath = path3.join(configDir, "config.toml");
@@ -1368,7 +1381,12 @@ async function writeCodexMcpConfig(cfg) {
   } catch {
     current = "";
   }
-  const next = replaceTomlBlock(current, `mcp_servers.${SERVER_NAME}`, codexBlock(cfg));
+  const legacy = current.match(/\[mcp_servers\.mimi-seed\]\s*\n(?:(?!\[)[\s\S])*/);
+  if (legacy && /^\s*url\s*=/m.test(legacy[0])) {
+    current = removeTomlBlock(current, "mcp_servers.mimi-seed");
+    current = removeTomlBlock(current, "mcp_servers.mimi-seed.http_headers");
+  }
+  const next = replaceTomlBlock(current, `mcp_servers.${CODEX_REMOTE_NAME}`, codexBlock(cfg));
   await fs3.writeFile(configPath, next);
   return configPath;
 }
@@ -1457,12 +1475,12 @@ var M8 = catalog(
     listFailed: (text) => "\uC870\uD68C \uC2E4\uD328: " + text,
     logoutDone: "\u2713 \uB85C\uCEEC \uC124\uC815 \uC0AD\uC81C \uC644\uB8CC.",
     logoutRevoke: "\uC6F9\uC5D0\uC11C \uD1A0\uD070 \uD574\uC9C0: /workspace/api-tokens",
-    codexWritten: "\u2713 Codex MCP \uC124\uC815 \uC644\uB8CC",
-    codexWriteWarn: "  \u26A0 config.toml\uC5D0 \uC2E4\uC81C \uD1A0\uD070\uC774 \uD3C9\uBB38\uC73C\uB85C \uC800\uC7A5\uB429\uB2C8\uB2E4 (\uD30C\uC77C \uAD8C\uD55C \uD655\uC778 \uAD8C\uC7A5).",
+    codexWritten: "\u2713 Codex MCP \uC124\uC815 \uC644\uB8CC (mimi-seed-remote, HTTP)",
+    codexWriteWarn: "  \u26A0 \uD1A0\uD070\uC740 config \uC5D0 \uD3C9\uBB38 \uC800\uC7A5\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 MIMI_SEED_TOKEN \uD658\uACBD\uBCC0\uC218\uC5D0 PAT \uB97C \uB123\uC5B4\uC57C \uC778\uC99D\uB429\uB2C8\uB2E4.",
     codexVerify: "Codex\uB97C \uC0C8\uB85C \uC5F4\uACE0 `/mcp` \uB610\uB294 `codex mcp list`\uB85C \uD655\uC778\uD558\uC138\uC694.",
     codexTitle: "Codex MCP \uB4F1\uB85D",
     codexAuto: "\uC790\uB3D9 \uB4F1\uB85D:",
-    codexManual: "\uC218\uB3D9 \uB4F1\uB85D \uC608\uC2DC (~/.codex/config.toml) \u2014 \uC2E4\uC81C \uD1A0\uD070 \uD3EC\uD568:",
+    codexManual: "\uC218\uB3D9 \uB4F1\uB85D \uC608\uC2DC (~/.codex/config.toml) \u2014 \uD1A0\uD070\uC740 MIMI_SEED_TOKEN \uD658\uACBD\uBCC0\uC218\uB85C:",
     claudeTitle: "Claude Code MCP \uB4F1\uB85D \u2014 \uC544\uB798 \uD55C \uC904\uC744 \uADF8\uB300\uB85C \uC2E4\uD589\uD558\uC138\uC694:",
     claudeWarn: "  \u26A0 \uC2E4\uC81C \uD1A0\uD070\uC774 \uD3EC\uD568\uB41C \uBA85\uB839\uC785\uB2C8\uB2E4 (\uC178 \uD788\uC2A4\uD1A0\uB9AC\uC5D0 \uB0A8\uC74C). \uD1A0\uD070\uC740 ~/.mimi-seed/config.json \uC5D0\uB3C4 \uC800\uC7A5\uB418\uC5B4 \uC788\uC2B5\uB2C8\uB2E4.",
     // 명령별 상세 사용법 (SSOT). `mimi-seed <command> --help` 와 overview 가 공유.
@@ -1621,12 +1639,12 @@ ${kleur9.bold("\uD658\uACBD\uBCC0\uC218:")}
     listFailed: (text) => "Lookup failed: " + text,
     logoutDone: "\u2713 Local config deleted.",
     logoutRevoke: "Revoke the token on the web: /workspace/api-tokens",
-    codexWritten: "\u2713 Codex MCP configured",
-    codexWriteWarn: "  \u26A0 The real token is stored in plain text in config.toml (check the file permissions).",
+    codexWritten: "\u2713 Codex MCP configured (mimi-seed-remote, HTTP)",
+    codexWriteWarn: "  \u26A0 The token is NOT written to the config \u2014 set MIMI_SEED_TOKEN to your PAT so the remote authenticates.",
     codexVerify: "Reopen Codex and verify with `/mcp` or `codex mcp list`.",
     codexTitle: "Codex MCP registration",
     codexAuto: "Automatic:",
-    codexManual: "Manual example (~/.codex/config.toml) \u2014 contains the real token:",
+    codexManual: "Manual example (~/.codex/config.toml) \u2014 token via the MIMI_SEED_TOKEN env var:",
     claudeTitle: "Claude Code MCP registration \u2014 run this one line as-is:",
     claudeWarn: "  \u26A0 This command contains the real token (it stays in your shell history). The token is also stored in ~/.mimi-seed/config.json.",
     usage: {
@@ -1954,10 +1972,10 @@ async function cmdMcp(args) {
     log4(kleur9.cyan("  mimi-seed mcp codex --write"));
     log4("");
     log4(M8().codexManual);
-    log4(`[mcp_servers.mimi-seed]
+    log4(`[mcp_servers.mimi-seed-remote]
 url = "${cfg.endpoint}"
-enabled = true
-http_headers = { Authorization = "Bearer ${cfg.token}" }`);
+bearer_token_env_var = "MIMI_SEED_TOKEN"
+enabled = true`);
     return;
   }
   if (target === "claude") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mimi-seed",
-  "version": "0.10.0",
+  "version": "0.10.2",
   "description": "Mimi Seed CLI — Claude Code와 Codex에서 앱 출시 운영을 관리합니다.",
   "bin": {
     "mimi-seed": "dist/index.js"