@withwiz/cms-kit 0.1.0

package/dist/chunk-5JUIMXNF.js

@@ -0,0 +1,108 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
+
+var _chunkKWKV2GAHjs = require('./chunk-KWKV2GAH.js');
+
+// src/hooks/useAdminList.ts
+var _react = require('react');
+function useAdminList(options) {
+  const { initialItems, apiPath, defaultSortKey, normalizeItem, defaultFilterValue } = options;
+  const [items, setItems] = _react.useState.call(void 0, initialItems);
+  const [searchQuery, setSearchQuery] = _react.useState.call(void 0, "");
+  const [sortKey, setSortKey] = _react.useState.call(void 0, defaultSortKey);
+  const [filterValue, setFilterValue] = _react.useState.call(void 0, _nullishCoalesce(defaultFilterValue, () => ( "all")));
+  const fetchList = _react.useCallback.call(void 0, 
+    async (sort) => {
+      try {
+        const res = await _chunkKWKV2GAHjs.adminFetch.call(void 0, `${apiPath}?limit=100&sortBy=${sort}`);
+        if (res.ok) {
+          const json = await res.json();
+          if (json.success) {
+            setItems(normalizeItem ? json.data.items.map(normalizeItem) : json.data.items);
+          }
+        }
+      } catch (e) {
+      }
+    },
+    [apiPath]
+  );
+  const isInitialMount = _react.useRef.call(void 0, true);
+  _react.useEffect.call(void 0, () => {
+    if (isInitialMount.current) {
+      isInitialMount.current = false;
+      return;
+    }
+    fetchList(sortKey);
+  }, [sortKey, fetchList]);
+  return {
+    items,
+    setItems,
+    searchQuery,
+    setSearchQuery,
+    sortKey,
+    setSortKey,
+    filterValue,
+    setFilterValue,
+    fetchList
+  };
+}
+
+// src/hooks/useAdminForm.ts
+
+function useAdminForm(initialForm) {
+  const [tab, setTab] = _react.useState.call(void 0, "list");
+  const [form, setForm] = _react.useState.call(void 0, initialForm);
+  const [selectedId, setSelectedId] = _react.useState.call(void 0, null);
+  const [isNew, setIsNew] = _react.useState.call(void 0, false);
+  const [saving, setSaving] = _react.useState.call(void 0, false);
+  const [loading, setLoading] = _react.useState.call(void 0, false);
+  const [mobilePv, setMobilePv] = _react.useState.call(void 0, false);
+  const updateField = _react.useCallback.call(void 0, (key, value) => {
+    setForm((prev) => prev[key] === value ? prev : { ...prev, [key]: value });
+  }, []);
+  const addNew = _react.useCallback.call(void 0, 
+    (emptyForm) => {
+      setSelectedId(null);
+      setIsNew(true);
+      setForm(emptyForm);
+      setTab("edit");
+    },
+    []
+  );
+  const startEdit = _react.useCallback.call(void 0, (id, emptyForm) => {
+    setSelectedId(id);
+    if (emptyForm) setForm(emptyForm);
+    setIsNew(false);
+    setLoading(true);
+    setTab("edit");
+  }, []);
+  const backToList = _react.useCallback.call(void 0, () => {
+    setTab("list");
+    setSelectedId(null);
+  }, []);
+  return {
+    tab,
+    setTab,
+    form,
+    setForm,
+    updateField,
+    selectedId,
+    setSelectedId,
+    isNew,
+    setIsNew,
+    saving,
+    setSaving,
+    loading,
+    setLoading,
+    mobilePv,
+    setMobilePv,
+    addNew,
+    startEdit,
+    backToList
+  };
+}
+
+
+
+
+exports.useAdminList = useAdminList; exports.useAdminForm = useAdminForm;
+//# sourceMappingURL=chunk-5JUIMXNF.js.map

package/dist/chunk-5JUIMXNF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/uni4love/project/workspace/211-withwiz/node-packages/withwiz-cms-kit/dist/chunk-5JUIMXNF.js","../src/hooks/useAdminList.ts","../src/hooks/useAdminForm.ts"],"names":["useState","useCallback"],"mappings":"AAAA;AACE;AACF,sDAA4B;AAC5B;AACA;ACFA,8BAAyD;AAWlD,SAAS,YAAA,CACd,OAAA,EACA;AACA,EAAA,MAAM,EAAE,YAAA,EAAc,OAAA,EAAS,cAAA,EAAgB,aAAA,EAAe,mBAAmB,EAAA,EAAI,OAAA;AAErF,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,EAAA,EAAI,6BAAA,YAA0B,CAAA;AACpD,EAAA,MAAM,CAAC,WAAA,EAAa,cAAc,EAAA,EAAI,6BAAA,EAAW,CAAA;AACjD,EAAA,MAAM,CAAC,OAAA,EAAS,UAAU,EAAA,EAAI,6BAAA,cAA0B,CAAA;AACxD,EAAA,MAAM,CAAC,WAAA,EAAa,cAAc,EAAA,EAAI,6BAAA,iBAAS,kBAAA,UAAsB,OAAK,CAAA;AAE1E,EAAA,MAAM,UAAA,EAAY,gCAAA;AAAA,IAChB,MAAA,CAAO,IAAA,EAAA,GAAY;AACjB,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,EAAM,MAAM,yCAAA,CAAW,EAAA;AACjB,QAAA;AACkB,UAAA;AACV,UAAA;AACS,YAAA;AAC3B,UAAA;AACF,QAAA;AACM,MAAA;AAAC,MAAA;AACX,IAAA;AACQ,IAAA;AACV,EAAA;AAEkC,EAAA;AAClB,EAAA;AACc,IAAA;AACD,MAAA;AACzB,MAAA;AACF,IAAA;AACiB,IAAA;AACI,EAAA;AAEhB,EAAA;AACL,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACF,EAAA;AACF;ADXsC;AACA;AE9CnB;AAE4C;AACb,EAAA;AACZ,EAAA;AACAA,EAAAA;AACD,EAAA;AACPA,EAAAA;AACEA,EAAAA;AACEA,EAAAA;AAEoB,EAAA;AACjB,IAAA;AAC9B,EAAA;AAEUC,EAAAA;AACK,IAAA;AACE,MAAA;AACL,MAAA;AACI,MAAA;AACJ,MAAA;AACf,IAAA;AACC,IAAA;AACH,EAAA;AAE2C,EAAA;AACzB,IAAA;AACgB,IAAA;AAClB,IAAA;AACC,IAAA;AACF,IAAA;AACV,EAAA;AAE0B,EAAA;AAChB,IAAA;AACK,IAAA;AACf,EAAA;AAEE,EAAA;AACL,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACF,EAAA;AACF;AF0CsC;AACA;AACA;AACA;AACA","file":"/Users/uni4love/project/workspace/211-withwiz/node-packages/withwiz-cms-kit/dist/chunk-5JUIMXNF.js","sourcesContent":[null,"'use client';\n\nimport { useState, useCallback, useRef, useEffect } from 'react';\nimport { adminFetch } from '../utils/admin-fetch';\n\ninterface UseAdminListOptions<T, S extends string> {\n  initialItems: T[];\n  apiPath: string;\n  defaultSortKey: S;\n  normalizeItem?: (raw: unknown) => T;\n  defaultFilterValue?: string;\n}\n\nexport function useAdminList<T, S extends string = string>(\n  options: UseAdminListOptions<T, S>,\n) {\n  const { initialItems, apiPath, defaultSortKey, normalizeItem, defaultFilterValue } = options;\n\n  const [items, setItems] = useState<T[]>(initialItems);\n  const [searchQuery, setSearchQuery] = useState('');\n  const [sortKey, setSortKey] = useState<S>(defaultSortKey);\n  const [filterValue, setFilterValue] = useState(defaultFilterValue ?? 'all');\n\n  const fetchList = useCallback(\n    async (sort: S) => {\n      try {\n        const res = await adminFetch(`${apiPath}?limit=100&sortBy=${sort}`);\n        if (res.ok) {\n          const json = await res.json();\n          if (json.success) {\n            setItems(normalizeItem ? json.data.items.map(normalizeItem) : json.data.items);\n          }\n        }\n      } catch {}\n    },\n    [apiPath],\n  );\n\n  const isInitialMount = useRef(true);\n  useEffect(() => {\n    if (isInitialMount.current) {\n      isInitialMount.current = false;\n      return;\n    }\n    fetchList(sortKey);\n  }, [sortKey, fetchList]);\n\n  return {\n    items,\n    setItems,\n    searchQuery,\n    setSearchQuery,\n    sortKey,\n    setSortKey,\n    filterValue,\n    setFilterValue,\n    fetchList,\n  };\n}\n","'use client';\n\nimport { useState, useCallback } from 'react';\n\nexport function useAdminForm<F extends object>(initialForm: F) {\n  const [tab, setTab] = useState<'list' | 'edit'>('list');\n  const [form, setForm] = useState<F>(initialForm);\n  const [selectedId, setSelectedId] = useState<string | null>(null);\n  const [isNew, setIsNew] = useState(false);\n  const [saving, setSaving] = useState(false);\n  const [loading, setLoading] = useState(false);\n  const [mobilePv, setMobilePv] = useState(false);\n\n  const updateField = useCallback(<K extends keyof F>(key: K, value: F[K]) => {\n    setForm((prev) => (prev[key] === value ? prev : { ...prev, [key]: value }));\n  }, []);\n\n  const addNew = useCallback(\n    (emptyForm: F) => {\n      setSelectedId(null);\n      setIsNew(true);\n      setForm(emptyForm);\n      setTab('edit');\n    },\n    [],\n  );\n\n  const startEdit = useCallback((id: string, emptyForm?: F) => {\n    setSelectedId(id);\n    if (emptyForm) setForm(emptyForm);\n    setIsNew(false);\n    setLoading(true);\n    setTab('edit');\n  }, []);\n\n  const backToList = useCallback(() => {\n    setTab('list');\n    setSelectedId(null);\n  }, []);\n\n  return {\n    tab,\n    setTab,\n    form,\n    setForm,\n    updateField,\n    selectedId,\n    setSelectedId,\n    isNew,\n    setIsNew,\n    saving,\n    setSaving,\n    loading,\n    setLoading,\n    mobilePv,\n    setMobilePv,\n    addNew,\n    startEdit,\n    backToList,\n  };\n}\n"]}

package/dist/chunk-5RDMODGV.mjs

@@ -0,0 +1,34 @@
+import {
+  resolveJwtConfig
+} from "./chunk-BWKKHCDG.mjs";
+
+// src/utils/jwt.ts
+import { JWTManager } from "@withwiz/toolkit/core/auth/jwt";
+import { logInfo, logError } from "@withwiz/toolkit/core/logger/logger";
+var _jwtManager = null;
+function getJWTManager() {
+  if (!_jwtManager) {
+    const { secret, accessTokenExpiry, refreshTokenExpiry, algorithm } = resolveJwtConfig();
+    _jwtManager = new JWTManager(
+      {
+        secret,
+        accessTokenExpiry,
+        refreshTokenExpiry,
+        algorithm
+      },
+      {
+        debug: () => {
+        },
+        info: (msg, meta) => logInfo(`[JWT] ${msg}`, meta),
+        warn: (msg, meta) => logInfo(`[JWT] ${msg}`, meta),
+        error: (msg, meta) => logError(`[JWT] ${msg}`, meta)
+      }
+    );
+  }
+  return _jwtManager;
+}
+
+export {
+  getJWTManager
+};
+//# sourceMappingURL=chunk-5RDMODGV.mjs.map

package/dist/chunk-5RDMODGV.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/utils/jwt.ts"],"sourcesContent":["import { JWTManager } from '@withwiz/toolkit/core/auth/jwt';\nimport { logInfo, logError } from '@withwiz/toolkit/core/logger/logger';\nimport { resolveJwtConfig } from '../config';\n\nlet _jwtManager: JWTManager | null = null;\n\n/**\n * JWT 매니저 싱글턴 (spec.md §4.6 / §4.3 / Sprint 1 S3).\n *\n * secret/expiry/algorithm 은 §5 config boundary (`resolveJwtConfig`) 를 통해\n * 해석된다: 명시적 주입 > `process.env.JWT_SECRET` 레거시 fallback > (서명\n * 비밀에는 안전한 기본값이 없음 → point-of-use fail-fast).\n *\n * - 비밀 누락: `@withwiz/cms-kit:` 네임스페이스 에러로 즉시 throw (undefined 로\n *   조용히 JWTManager 를 만들지 않는다).\n * - 비밀 취약(<32자, 문서화 정책): `@withwiz/cms-kit:` 네임스페이스 에러로 거부\n *   (forgeable 서명 키는 unsafe-no-safe-default).\n * - import 만으로는 절대 throw 하지 않는다 (lazy / point-of-use).\n *   기존의 JWT_SECRET non-null 단정(bang) 직접 접근은 제거되었다.\n */\nexport function getJWTManager(): JWTManager {\n  if (!_jwtManager) {\n    const { secret, accessTokenExpiry, refreshTokenExpiry, algorithm } =\n      resolveJwtConfig();\n    _jwtManager = new JWTManager(\n      {\n        secret,\n        accessTokenExpiry,\n        refreshTokenExpiry,\n        algorithm,\n      },\n      {\n        debug: () => {},\n        info: (msg: string, meta?: any) => logInfo(`[JWT] ${msg}`, meta),\n        warn: (msg: string, meta?: any) => logInfo(`[JWT] ${msg}`, meta),\n        error: (msg: string, meta?: any) => logError(`[JWT] ${msg}`, meta),\n      },\n    );\n  }\n  return _jwtManager;\n}\n"],"mappings":";;;;;AAAA,SAAS,kBAAkB;AAC3B,SAAS,SAAS,gBAAgB;AAGlC,IAAI,cAAiC;AAgB9B,SAAS,gBAA4B;AAC1C,MAAI,CAAC,aAAa;AAChB,UAAM,EAAE,QAAQ,mBAAmB,oBAAoB,UAAU,IAC/D,iBAAiB;AACnB,kBAAc,IAAI;AAAA,MAChB;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACA;AAAA,QACE,OAAO,MAAM;AAAA,QAAC;AAAA,QACd,MAAM,CAAC,KAAa,SAAe,QAAQ,SAAS,GAAG,IAAI,IAAI;AAAA,QAC/D,MAAM,CAAC,KAAa,SAAe,QAAQ,SAAS,GAAG,IAAI,IAAI;AAAA,QAC/D,OAAO,CAAC,KAAa,SAAe,SAAS,SAAS,GAAG,IAAI,IAAI;AAAA,MACnE;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;","names":[]}

package/dist/chunk-6ES4W2DL.mjs

@@ -0,0 +1 @@
+//# sourceMappingURL=chunk-6ES4W2DL.mjs.map

package/dist/chunk-6ES4W2DL.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/chunk-6EZ3QE5N.js

@@ -0,0 +1,71 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+
+var _chunkYY7K5CXXjs = require('./chunk-YY7K5CXX.js');
+
+// src/components/ImageDropUpload.tsx
+var _react = require('react');
+require('./image-drop-zone.css');
+var _jsxruntime = require('react/jsx-runtime');
+function ImageDropUpload({
+  src,
+  onUpload,
+  onKeyTracked,
+  className = "",
+  placeholder = "\uD074\uB9AD \uB610\uB294 \uB4DC\uB798\uADF8\uD558\uC5EC \uC774\uBBF8\uC9C0 \uCD94\uAC00"
+}) {
+  const inputRef = _react.useRef.call(void 0, null);
+  const drop = _chunkYY7K5CXXjs.useImageDropZone.call(void 0, {
+    onUpload: (result) => onUpload(result.url, result.key),
+    onKeyTracked
+  });
+  const cls = [
+    className,
+    src ? "has" : "",
+    drop.isDragOver ? "is-drag-over" : "",
+    drop.isUploading ? "is-uploading" : "",
+    drop.isResizing ? "is-resizing" : ""
+  ].filter(Boolean).join(" ");
+  return /* @__PURE__ */ _jsxruntime.jsxs.call(void 0, _jsxruntime.Fragment, { children: [
+    /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
+      "input",
+      {
+        ref: inputRef,
+        type: "file",
+        accept: "image/*",
+        style: { display: "none" },
+        onChange: async (e) => {
+          await drop.handleFileInput(e.target.files);
+          e.target.value = "";
+        }
+      }
+    ),
+    /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
+      "div",
+      {
+        className: cls,
+        onClick: () => !drop.isUploading && !drop.isResizing && _optionalChain([inputRef, 'access', _ => _.current, 'optionalAccess', _2 => _2.click, 'call', _3 => _3()]),
+        ...drop.dragHandlers,
+        children: drop.isResizing ? /* @__PURE__ */ _jsxruntime.jsx.call(void 0, "span", { className: "dz-upload-spinner", children: "\uCD5C\uC801\uD654 \uC911..." }) : drop.isUploading ? /* @__PURE__ */ _jsxruntime.jsx.call(void 0, "span", { className: "dz-upload-spinner", children: "\uC5C5\uB85C\uB4DC \uC911..." }) : drop.isDragOver ? /* @__PURE__ */ _jsxruntime.jsx.call(void 0, "span", { className: "dz-drag-hint", children: "\uB193\uC73C\uC138\uC694" }) : src ? (
+          /* eslint-disable-next-line @next/next/no-img-element */
+          /* @__PURE__ */ _jsxruntime.jsx.call(void 0, "img", { src, alt: "", style: { maxWidth: "100%", height: "auto" } })
+        ) : /* @__PURE__ */ _jsxruntime.jsxs.call(void 0, "div", { className: "dz-placeholder", children: [
+          /* @__PURE__ */ _jsxruntime.jsx.call(void 0, "div", { className: "dz-placeholder-icon", children: "+" }),
+          /* @__PURE__ */ _jsxruntime.jsx.call(void 0, "div", { className: "dz-placeholder-text", children: placeholder }),
+          /* @__PURE__ */ _jsxruntime.jsxs.call(void 0, "div", { className: "dz-placeholder-guide", children: [
+            "JPG, PNG, WebP, GIF | \uCD5C\uB300 5MB",
+            /* @__PURE__ */ _jsxruntime.jsx.call(void 0, "br", {}),
+            "\uCD08\uACFC \uC2DC \uC790\uB3D9 \uC555\uCD95 \xB7 1920px \uC774\uD558\uB85C \uB9AC\uC0AC\uC774\uC988",
+            /* @__PURE__ */ _jsxruntime.jsx.call(void 0, "br", {}),
+            "WebP \uBCC0\uD658 \xB7 4\uAC1C \uC0AC\uC774\uC988(lg/md/sm/thumb) \uC790\uB3D9 \uC0DD\uC131"
+          ] })
+        ] })
+      }
+    ),
+    drop.error && /* @__PURE__ */ _jsxruntime.jsx.call(void 0, "div", { className: "dz-error", children: drop.error })
+  ] });
+}
+
+
+
+exports.ImageDropUpload = ImageDropUpload;
+//# sourceMappingURL=chunk-6EZ3QE5N.js.map

package/dist/chunk-6EZ3QE5N.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/uni4love/project/workspace/211-withwiz/node-packages/withwiz-cms-kit/dist/chunk-6EZ3QE5N.js","../src/components/ImageDropUpload.tsx"],"names":[],"mappings":"AAAA;AACE;AACF,sDAA4B;AAC5B;AACA;ACFA,8BAAuB;AAEvB,iCAAO;AAqCH,+CAAA;AAtBW,SAAR,eAAA,CAAiC;AAAA,EACtC,GAAA;AAAA,EACA,QAAA;AAAA,EACA,YAAA;AAAA,EACA,UAAA,EAAY,EAAA;AAAA,EACZ,YAAA,EAAc;AAChB,CAAA,EAAU;AACR,EAAA,MAAM,SAAA,EAAW,2BAAA,IAA6B,CAAA;AAC9C,EAAA,MAAM,KAAA,EAAO,+CAAA;AAAiB,IAC5B,QAAA,EAAU,CAAC,MAAA,EAAA,GAAW,QAAA,CAAS,MAAA,CAAO,GAAA,EAAK,MAAA,CAAO,GAAG,CAAA;AAAA,IACrD;AAAA,EACF,CAAC,CAAA;AAED,EAAA,MAAM,IAAA,EAAM;AAAA,IACV,SAAA;AAAA,IACA,IAAA,EAAM,MAAA,EAAQ,EAAA;AAAA,IACd,IAAA,CAAK,WAAA,EAAa,eAAA,EAAiB,EAAA;AAAA,IACnC,IAAA,CAAK,YAAA,EAAc,eAAA,EAAiB,EAAA;AAAA,IACpC,IAAA,CAAK,WAAA,EAAa,cAAA,EAAgB;AAAA,EACpC,CAAA,CAAE,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA,CAAK,GAAG,CAAA;AAE1B,EAAA,uBACE,8BAAA,oBAAA,EAAA,EACE,QAAA,EAAA;AAAA,oBAAA,6BAAA;AAAA,MAAC,OAAA;AAAA,MAAA;AAAA,QACC,GAAA,EAAK,QAAA;AAAA,QACL,IAAA,EAAK,MAAA;AAAA,QACL,MAAA,EAAO,SAAA;AAAA,QACP,KAAA,EAAO,EAAE,OAAA,EAAS,OAAO,CAAA;AAAA,QACzB,QAAA,EAAU,MAAA,CAAO,CAAA,EAAA,GAAM;AACrB,UAAA,MAAM,IAAA,CAAK,eAAA,CAAgB,CAAA,CAAE,MAAA,CAAO,KAAK,CAAA;AACzC,UAAA,CAAA,CAAE,MAAA,CAAO,MAAA,EAAQ,EAAA;AAAA,QACnB;AAAA,MAAA;AAAA,IACF,CAAA;AAAA,oBACA,6BAAA;AAAA,MAAC,KAAA;AAAA,MAAA;AAAA,QACC,SAAA,EAAW,GAAA;AAAA,QACX,OAAA,EAAS,CAAA,EAAA,GAAM,CAAC,IAAA,CAAK,YAAA,GAAe,CAAC,IAAA,CAAK,WAAA,mBAAc,QAAA,mBAAS,OAAA,6BAAS,KAAA,mBAAM,GAAA;AAAA,QAC/E,GAAG,IAAA,CAAK,YAAA;AAAA,QAER,QAAA,EAAA,IAAA,CAAK,WAAA,kBACJ,6BAAA,MAAC,EAAA,EAAK,SAAA,EAAU,mBAAA,EAAoB,QAAA,EAAA,+BAAA,CAAQ,EAAA,EAC1C,IAAA,CAAK,YAAA,kBACP,6BAAA,MAAC,EAAA,EAAK,SAAA,EAAU,mBAAA,EAAoB,QAAA,EAAA,+BAAA,CAAQ,EAAA,EAC1C,IAAA,CAAK,WAAA,kBACP,6BAAA,MAAC,EAAA,EAAK,SAAA,EAAU,cAAA,EAAe,QAAA,EAAA,2BAAA,CAAI,EAAA,EACjC,IAAA,EAAA;AAAA;AAAA,0BAEF,6BAAA,KAAC,EAAA,EAAI,GAAA,EAAU,GAAA,EAAI,EAAA,EAAG,KAAA,EAAO,EAAE,QAAA,EAAU,MAAA,EAAQ,MAAA,EAAQ,OAAO,EAAA,CAAG;AAAA,QAAA,EAAA,kBAEnE,8BAAA,KAAC,EAAA,EAAI,SAAA,EAAU,gBAAA,EACb,QAAA,EAAA;AAAA,0BAAA,6BAAA,KAAC,EAAA,EAAI,SAAA,EAAU,qBAAA,EAAsB,QAAA,EAAA,IAAA,CAAC,CAAA;AAAA,0BACtC,6BAAA,KAAC,EAAA,EAAI,SAAA,EAAU,qBAAA,EAAuB,QAAA,EAAA,YAAA,CAAY,CAAA;AAAA,0BAClD,8BAAA,KAAC,EAAA,EAAI,SAAA,EAAU,sBAAA,EAAuB,QAAA,EAAA;AAAA,YAAA,wCAAA;AAAA,4BAEpC,6BAAA,IAAC,EAAA,CAAA,CAAG,CAAA;AAAA,YAAE,uGAAA;AAAA,4BAEN,6BAAA,IAAC,EAAA,CAAA,CAAG,CAAA;AAAA,YAAE;AAAA,UAAA,EAAA,CAER;AAAA,QAAA,EAAA,CACF;AAAA,MAAA;AAAA,IAEJ,CAAA;AAAA,IACC,IAAA,CAAK,MAAA,mBAAS,6BAAA,KAAC,EAAA,EAAI,SAAA,EAAU,UAAA,EAAY,QAAA,EAAA,IAAA,CAAK,MAAA,CAAM;AAAA,EAAA,EAAA,CACvD,CAAA;AAEJ;ADjBA;AACA;AACE;AACF,0CAAC","file":"/Users/uni4love/project/workspace/211-withwiz/node-packages/withwiz-cms-kit/dist/chunk-6EZ3QE5N.js","sourcesContent":[null,"\"use client\";\n\nimport { useRef } from \"react\";\nimport { useImageDropZone } from \"../hooks/useImageDropZone\";\nimport \"./image-drop-zone.css\";\n\ninterface Props {\n  /** Current image URL */\n  src: string;\n  /** Called with uploaded image URL and key */\n  onUpload: (url: string, key: string) => void;\n  /** Track uploaded key for orphan cleanup */\n  onKeyTracked?: (key: string) => void;\n  /** CSS class for the drop zone container */\n  className?: string;\n  /** Placeholder text when no image */\n  placeholder?: string;\n}\n\nexport default function ImageDropUpload({\n  src,\n  onUpload,\n  onKeyTracked,\n  className = \"\",\n  placeholder = \"클릭 또는 드래그하여 이미지 추가\",\n}: Props) {\n  const inputRef = useRef<HTMLInputElement>(null);\n  const drop = useImageDropZone({\n    onUpload: (result) => onUpload(result.url, result.key),\n    onKeyTracked,\n  });\n\n  const cls = [\n    className,\n    src ? \"has\" : \"\",\n    drop.isDragOver ? \"is-drag-over\" : \"\",\n    drop.isUploading ? \"is-uploading\" : \"\",\n    drop.isResizing ? \"is-resizing\" : \"\",\n  ].filter(Boolean).join(\" \");\n\n  return (\n    <>\n      <input\n        ref={inputRef}\n        type=\"file\"\n        accept=\"image/*\"\n        style={{ display: \"none\" }}\n        onChange={async (e) => {\n          await drop.handleFileInput(e.target.files);\n          e.target.value = \"\";\n        }}\n      />\n      <div\n        className={cls}\n        onClick={() => !drop.isUploading && !drop.isResizing && inputRef.current?.click()}\n        {...drop.dragHandlers}\n      >\n        {drop.isResizing ? (\n          <span className=\"dz-upload-spinner\">최적화 중...</span>\n        ) : drop.isUploading ? (\n          <span className=\"dz-upload-spinner\">업로드 중...</span>\n        ) : drop.isDragOver ? (\n          <span className=\"dz-drag-hint\">놓으세요</span>\n        ) : src ? (\n          /* eslint-disable-next-line @next/next/no-img-element */\n          <img src={src} alt=\"\" style={{ maxWidth: \"100%\", height: \"auto\" }} />\n        ) : (\n          <div className=\"dz-placeholder\">\n            <div className=\"dz-placeholder-icon\">+</div>\n            <div className=\"dz-placeholder-text\">{placeholder}</div>\n            <div className=\"dz-placeholder-guide\">\n              JPG, PNG, WebP, GIF | 최대 5MB\n              <br />\n              초과 시 자동 압축 · 1920px 이하로 리사이즈\n              <br />\n              WebP 변환 · 4개 사이즈(lg/md/sm/thumb) 자동 생성\n            </div>\n          </div>\n        )}\n      </div>\n      {drop.error && <div className=\"dz-error\">{drop.error}</div>}\n    </>\n  );\n}\n"]}

package/dist/chunk-6JFERXNE.mjs

@@ -0,0 +1,16 @@
+// src/services/base-service.ts
+var DEFAULT_PAGE = 1;
+var DEFAULT_LIMIT = 20;
+function parseSortParam(sortBy, allowed, defaultField) {
+  const [field, order] = sortBy.split("_");
+  const safeField = allowed.includes(field) ? field : defaultField;
+  const safeOrder = order === "asc" ? "asc" : "desc";
+  return { field: safeField, order: safeOrder };
+}
+
+export {
+  DEFAULT_PAGE,
+  DEFAULT_LIMIT,
+  parseSortParam
+};
+//# sourceMappingURL=chunk-6JFERXNE.mjs.map

package/dist/chunk-6JFERXNE.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/services/base-service.ts"],"sourcesContent":["import { prisma } from '../infrastructure/prisma';\nimport { buildPaginatedResult, type PaginatedResult } from '../types/common';\nimport { sanitizeHtmlContent } from '../utils/html-sanitizer';\nimport { isR2Enabled } from '../utils/r2-storage';\nimport { collectR2Keys, deleteR2Keys } from '../utils/r2-helpers';\nimport type { SortOrder } from '../types/common';\n\nexport { prisma, buildPaginatedResult, sanitizeHtmlContent, isR2Enabled, collectR2Keys, deleteR2Keys };\nexport type { PaginatedResult, SortOrder };\n\nexport interface ListParams {\n  page?: number;\n  limit?: number;\n  sortBy?: string;\n  sortOrder?: SortOrder;\n}\n\nexport const DEFAULT_PAGE = 1;\nexport const DEFAULT_LIMIT = 20;\n\nexport function parseSortParam(\n  sortBy: string,\n  allowed: string[],\n  defaultField: string,\n): { field: string; order: SortOrder } {\n  const [field, order] = sortBy.split('_');\n  const safeField = allowed.includes(field) ? field : defaultField;\n  const safeOrder: SortOrder = order === 'asc' ? 'asc' : 'desc';\n  return { field: safeField, order: safeOrder };\n}\n"],"mappings":";AAiBO,IAAM,eAAe;AACrB,IAAM,gBAAgB;AAEtB,SAAS,eACd,QACA,SACA,cACqC;AACrC,QAAM,CAAC,OAAO,KAAK,IAAI,OAAO,MAAM,GAAG;AACvC,QAAM,YAAY,QAAQ,SAAS,KAAK,IAAI,QAAQ;AACpD,QAAM,YAAuB,UAAU,QAAQ,QAAQ;AACvD,SAAO,EAAE,OAAO,WAAW,OAAO,UAAU;AAC9C;","names":[]}

package/dist/chunk-7SWW3ZIN.js

@@ -0,0 +1,17 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/validators/shared.ts
+var _zod = require('zod');
+var slugSchema = _zod.z.string().min(1).max(200).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/, "Slug must be URL-safe (lowercase, hyphens only)");
+var safeUrl = _zod.z.url().refine(
+  (url) => {
+    const lower = url.toLowerCase().replace(/[\t\n\r]/g, "");
+    return !lower.startsWith("file:") && !lower.startsWith("javascript:") && !lower.startsWith("data:");
+  },
+  { error: "Unsafe URL protocol (file:, javascript:, data: not allowed)" }
+);
+var optionalUrlSchema = safeUrl.optional().or(_zod.z.literal(""));
+
+
+
+
+exports.slugSchema = slugSchema; exports.optionalUrlSchema = optionalUrlSchema;
+//# sourceMappingURL=chunk-7SWW3ZIN.js.map

package/dist/chunk-7SWW3ZIN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/uni4love/project/workspace/211-withwiz/node-packages/withwiz-cms-kit/dist/chunk-7SWW3ZIN.js","../src/validators/shared.ts"],"names":[],"mappings":"AAAA;ACAA,0BAAkB;AAEX,IAAM,WAAA,EAAa,MAAA,CACvB,MAAA,CAAO,CAAA,CACP,GAAA,CAAI,CAAC,CAAA,CACL,GAAA,CAAI,GAAG,CAAA,CACP,KAAA,CAAM,4BAAA,EAA8B,iDAAiD,CAAA;AAExF,IAAM,QAAA,EAAU,MAAA,CAAE,GAAA,CAAI,CAAA,CAAE,MAAA;AAAA,EACtB,CAAC,GAAA,EAAA,GAAQ;AACP,IAAA,MAAM,MAAA,EAAQ,GAAA,CAAI,WAAA,CAAY,CAAA,CAAE,OAAA,CAAQ,WAAA,EAAa,EAAE,CAAA;AACvD,IAAA,OAAO,CAAC,KAAA,CAAM,UAAA,CAAW,OAAO,EAAA,GAAK,CAAC,KAAA,CAAM,UAAA,CAAW,aAAa,EAAA,GAAK,CAAC,KAAA,CAAM,UAAA,CAAW,OAAO,CAAA;AAAA,EACpG,CAAA;AAAA,EACA,EAAE,KAAA,EAAO,8DAA8D;AACzE,CAAA;AACO,IAAM,kBAAA,EAAoB,OAAA,CAAQ,QAAA,CAAS,CAAA,CAAE,EAAA,CAAG,MAAA,CAAE,OAAA,CAAQ,EAAE,CAAC,CAAA;ADJpE;AACA;AACE;AACA;AACF,+EAAC","file":"/Users/uni4love/project/workspace/211-withwiz/node-packages/withwiz-cms-kit/dist/chunk-7SWW3ZIN.js","sourcesContent":[null,"import { z } from 'zod';\n\nexport const slugSchema = z\n  .string()\n  .min(1)\n  .max(200)\n  .regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/, 'Slug must be URL-safe (lowercase, hyphens only)');\n\nconst safeUrl = z.url().refine(\n  (url) => {\n    const lower = url.toLowerCase().replace(/[\\t\\n\\r]/g, '');\n    return !lower.startsWith('file:') && !lower.startsWith('javascript:') && !lower.startsWith('data:');\n  },\n  { error: 'Unsafe URL protocol (file:, javascript:, data: not allowed)' },\n);\nexport const optionalUrlSchema = safeUrl.optional().or(z.literal(''));\n"]}

package/dist/chunk-AXR56AUD.mjs

@@ -0,0 +1 @@
+//# sourceMappingURL=chunk-AXR56AUD.mjs.map

package/dist/chunk-AXR56AUD.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/chunk-BE7JDL64.js

@@ -0,0 +1,154 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } }
+
+
+
+var _chunkEG6NVPP2js = require('./chunk-EG6NVPP2.js');
+
+// src/utils/r2-storage.ts
+var _clients3 = require('@aws-sdk/client-s3');
+var _logger = require('@withwiz/toolkit/core/logger/logger');
+function sanitizeStorageKey(key) {
+  if (typeof key !== "string" || key.length === 0) {
+    throw _chunkEG6NVPP2js.namespacedError.call(void 0, 
+      `storage key is empty or not a string; refusing to send to storage.`
+    );
+  }
+  if (key.startsWith("/")) {
+    throw _chunkEG6NVPP2js.namespacedError.call(void 0, 
+      `storage key "${key}" is absolute / leading-slash; it could escape the intended namespace. Use a relative key (e.g. "news/x.jpg").`
+    );
+  }
+  if (key.includes("\\")) {
+    throw _chunkEG6NVPP2js.namespacedError.call(void 0, 
+      `storage key "${key}" contains a backslash; refusing (namespace-escape risk).`
+    );
+  }
+  for (let i = 0; i < key.length; i++) {
+    if (key.charCodeAt(i) < 32) {
+      throw _chunkEG6NVPP2js.namespacedError.call(void 0, 
+        `storage key contains control characters; refusing (namespace-escape risk).`
+      );
+    }
+  }
+  const segments = key.split("/");
+  if (segments.some((seg) => seg === ".." || seg === ".")) {
+    throw _chunkEG6NVPP2js.namespacedError.call(void 0, 
+      `storage key "${key}" contains a path-traversal segment ("." / ".."); it could escape the intended namespace.`
+    );
+  }
+  return key;
+}
+var client = null;
+var clientSnapshot = null;
+function requireR2Credentials() {
+  const c = _chunkEG6NVPP2js.resolveR2CredentialsConfig.call(void 0, );
+  const missing = [];
+  if (!c.accountId) missing.push("accountId");
+  if (!c.accessKeyId) missing.push("accessKeyId");
+  if (!c.secretAccessKey) missing.push("secretAccessKey");
+  if (!c.bucketName) missing.push("bucketName");
+  if (missing.length > 0) {
+    throw _chunkEG6NVPP2js.namespacedError.call(void 0, 
+      `R2 credentials are missing: ${missing.join(", ")}. Inject \`setCmsConfig({ storage: { r2: { accountId, accessKeyId, secretAccessKey, bucketName } } })\` or set the legacy R2_ACCOUNT_ID / R2_ACCESS_KEY_ID / R2_SECRET_ACCESS_KEY / R2_BUCKET_NAME environment variables. There is no safe default for storage credentials.`
+    );
+  }
+  return c;
+}
+function getClient() {
+  const c = requireR2Credentials();
+  const snapshot = `${c.accountId}|${c.accessKeyId}`;
+  if (!client || clientSnapshot !== snapshot) {
+    client = new (0, _clients3.S3Client)({
+      region: "auto",
+      endpoint: `https://${c.accountId}.r2.cloudflarestorage.com`,
+      credentials: {
+        accessKeyId: c.accessKeyId,
+        secretAccessKey: c.secretAccessKey
+      }
+    });
+    clientSnapshot = snapshot;
+  }
+  return client;
+}
+function isR2Enabled() {
+  const c = _chunkEG6NVPP2js.resolveR2CredentialsConfig.call(void 0, );
+  return !!(c.accountId && c.accessKeyId && c.secretAccessKey && c.bucketName);
+}
+function buildPublicUrl(key, bucket) {
+  const base = _chunkEG6NVPP2js.resolveR2PublicUrl.call(void 0, );
+  return base ? `${base}/${key}` : `https://${bucket}.r2.dev/${key}`;
+}
+async function uploadToR2(key, buffer, contentType) {
+  const safeKey = sanitizeStorageKey(key);
+  const s3 = getClient();
+  const { bucketName: bucket } = requireR2Credentials();
+  await s3.send(
+    new (0, _clients3.PutObjectCommand)({
+      Bucket: bucket,
+      Key: safeKey,
+      Body: buffer,
+      ContentType: contentType
+    })
+  );
+  return { url: buildPublicUrl(safeKey, bucket), key: safeKey, size: buffer.length };
+}
+async function uploadImageWithVariants(originalKey, originalBuffer, originalContentType) {
+  const { generateImageVariants } = await Promise.resolve().then(() => _interopRequireWildcard(require("./utils/image-variants.js")));
+  const original = await uploadToR2(originalKey, originalBuffer, originalContentType);
+  const baseKey = originalKey.replace(/\.[^.]+$/, "");
+  const variants = {};
+  const variantKeys = [];
+  try {
+    const imageVariants = await generateImageVariants(originalBuffer, baseKey, originalContentType);
+    const { bucketName: bucket } = requireR2Credentials();
+    await Promise.all(
+      imageVariants.map(async (v) => {
+        try {
+          await uploadToR2(v.key, v.buffer, v.contentType);
+          variants[v.size] = buildPublicUrl(v.key, bucket);
+          variantKeys.push(v.key);
+        } catch (err) {
+          _logger.logError.call(void 0, `[image-variant] Failed to upload variant ${v.key}`, {
+            error: err instanceof Error ? err.message : err,
+            originalKey,
+            size: v.size
+          });
+        }
+      })
+    );
+    if (variantKeys.length === 0) {
+      _logger.logError.call(void 0, `[image-variant] No variants generated for ${originalKey}`);
+    }
+  } catch (err) {
+    _logger.logError.call(void 0, `[image-variant] Failed to generate variants for ${originalKey}`, {
+      error: err instanceof Error ? err.message : err
+    });
+  }
+  return {
+    url: original.url,
+    key: original.key,
+    size: original.size,
+    variants,
+    variantKeys
+  };
+}
+async function deleteFromR2(key) {
+  const safeKey = sanitizeStorageKey(key);
+  const s3 = getClient();
+  const { bucketName: bucket } = requireR2Credentials();
+  await s3.send(
+    new (0, _clients3.DeleteObjectCommand)({
+      Bucket: bucket,
+      Key: safeKey
+    })
+  );
+}
+
+
+
+
+
+
+
+exports.sanitizeStorageKey = sanitizeStorageKey; exports.isR2Enabled = isR2Enabled; exports.uploadToR2 = uploadToR2; exports.uploadImageWithVariants = uploadImageWithVariants; exports.deleteFromR2 = deleteFromR2;
+//# sourceMappingURL=chunk-BE7JDL64.js.map

package/dist/chunk-BE7JDL64.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/uni4love/project/workspace/211-withwiz/node-packages/withwiz-cms-kit/dist/chunk-BE7JDL64.js","../src/utils/r2-storage.ts"],"names":[],"mappings":"AAAA;AACE;AACA;AACA;AACF,sDAA4B;AAC5B;AACA;ACNA,8CAAgE;AAChE,6DAAkC;AAsB3B,SAAS,kBAAA,CAAmB,GAAA,EAAqB;AACtD,EAAA,GAAA,CAAI,OAAO,IAAA,IAAQ,SAAA,GAAY,GAAA,CAAI,OAAA,IAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,8CAAA;AAAA,MACJ,CAAA,kEAAA;AAAA,IACF,CAAA;AAAA,EACF;AACA,EAAA,GAAA,CAAI,GAAA,CAAI,UAAA,CAAW,GAAG,CAAA,EAAG;AACvB,IAAA,MAAM,8CAAA;AAAA,MACJ,CAAA,aAAA,EAAgB,GAAG,CAAA,8GAAA;AAAA,IAErB,CAAA;AAAA,EACF;AACA,EAAA,GAAA,CAAI,GAAA,CAAI,QAAA,CAAS,IAAI,CAAA,EAAG;AACtB,IAAA,MAAM,8CAAA;AAAA,MACJ,CAAA,aAAA,EAAgB,GAAG,CAAA,yDAAA;AAAA,IACrB,CAAA;AAAA,EACF;AACA,EAAA,IAAA,CAAA,IAAS,EAAA,EAAI,CAAA,EAAG,EAAA,EAAI,GAAA,CAAI,MAAA,EAAQ,CAAA,EAAA,EAAK;AACnC,IAAA,GAAA,CAAI,GAAA,CAAI,UAAA,CAAW,CAAC,EAAA,EAAI,EAAA,EAAM;AAC5B,MAAA,MAAM,8CAAA;AAAA,QACJ,CAAA,0EAAA;AAAA,MACF,CAAA;AAAA,IACF;AAAA,EACF;AACA,EAAA,MAAM,SAAA,EAAW,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA;AAC9B,EAAA,GAAA,CAAI,QAAA,CAAS,IAAA,CAAK,CAAC,GAAA,EAAA,GAAQ,IAAA,IAAQ,KAAA,GAAQ,IAAA,IAAQ,GAAG,CAAA,EAAG;AACvD,IAAA,MAAM,8CAAA;AAAA,MACJ,CAAA,aAAA,EAAgB,GAAG,CAAA,yFAAA;AAAA,IAErB,CAAA;AAAA,EACF;AAEA,EAAA,OAAO,GAAA;AACT;AAEA,IAAI,OAAA,EAA0B,IAAA;AAI9B,IAAI,eAAA,EAAgC,IAAA;AAEpC,SAAS,oBAAA,CAAA,EAKP;AACA,EAAA,MAAM,EAAA,EAAI,yDAAA,CAA2B;AACrC,EAAA,MAAM,QAAA,EAAoB,CAAC,CAAA;AAC3B,EAAA,GAAA,CAAI,CAAC,CAAA,CAAE,SAAA,EAAW,OAAA,CAAQ,IAAA,CAAK,WAAW,CAAA;AAC1C,EAAA,GAAA,CAAI,CAAC,CAAA,CAAE,WAAA,EAAa,OAAA,CAAQ,IAAA,CAAK,aAAa,CAAA;AAC9C,EAAA,GAAA,CAAI,CAAC,CAAA,CAAE,eAAA,EAAiB,OAAA,CAAQ,IAAA,CAAK,iBAAiB,CAAA;AACtD,EAAA,GAAA,CAAI,CAAC,CAAA,CAAE,UAAA,EAAY,OAAA,CAAQ,IAAA,CAAK,YAAY,CAAA;AAC5C,EAAA,GAAA,CAAI,OAAA,CAAQ,OAAA,EAAS,CAAA,EAAG;AACtB,IAAA,MAAM,8CAAA;AAAA,MACJ,CAAA,4BAAA,EAA+B,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAC,CAAA,2QAAA;AAAA,IAInD,CAAA;AAAA,EACF;AACA,EAAA,OAAO,CAAA;AAMT;AAEA,SAAS,SAAA,CAAA,EAAsB;AAC7B,EAAA,MAAM,EAAA,EAAI,oBAAA,CAAqB,CAAA;AAC/B,EAAA,MAAM,SAAA,EAAW,CAAA,EAAA;AACF,EAAA;AACA,IAAA;AACH,MAAA;AACE,MAAA;AACG,MAAA;AACX,QAAA;AACA,QAAA;AACF,MAAA;AACD,IAAA;AACD,IAAA;AACF,EAAA;AACO,EAAA;AACT;AAEgB;AACJ,EAAA;AACE,EAAA;AACd;AAES;AACM,EAAA;AACI,EAAA;AACnB;AAEsB;AAKJ,EAAA;AACL,EAAA;AACH,EAAA;AAEC,EAAA;AACH,IAAA;AACM,MAAA;AACH,MAAA;AACC,MAAA;AACO,MAAA;AACd,IAAA;AACH,EAAA;AAEc,EAAA;AAChB;AASsB;AAWZ,EAAA;AAES,EAAA;AAED,EAAA;AAEoB,EAAA;AAC9B,EAAA;AAEF,EAAA;AACI,IAAA;AACE,IAAA;AAEM,IAAA;AACE,MAAA;AACR,QAAA;AACI,UAAA;AACG,UAAA;AACT,UAAA;AACO,QAAA;AACE,UAAA;AACA,YAAA;AACP,YAAA;AACQ,YAAA;AACT,UAAA;AACH,QAAA;AACD,MAAA;AACH,IAAA;AAEgB,IAAA;AACL,MAAA;AACX,IAAA;AACY,EAAA;AACH,IAAA;AACA,MAAA;AACR,IAAA;AACH,EAAA;AAEO,EAAA;AACS,IAAA;AACA,IAAA;AACC,IAAA;AACf,IAAA;AACA,IAAA;AACF,EAAA;AACF;AAEsB;AACJ,EAAA;AACL,EAAA;AACH,EAAA;AACC,EAAA;AACH,IAAA;AACM,MAAA;AACH,MAAA;AACN,IAAA;AACH,EAAA;AACF;ADtEoB;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/Users/uni4love/project/workspace/211-withwiz/node-packages/withwiz-cms-kit/dist/chunk-BE7JDL64.js","sourcesContent":[null,"import { S3Client, PutObjectCommand, DeleteObjectCommand } from '@aws-sdk/client-s3';\nimport { logError, logInfo } from '@withwiz/toolkit/core/logger/logger';\nimport {\n  namespacedError,\n  resolveR2CredentialsConfig,\n  resolveR2PublicUrl,\n} from '../config';\n\n/**\n * storage object key 를 검증/정규화한다 (spec.md §4.6 / Sprint 1 S5).\n *\n * caller/user 파생 key 가 의도된 namespace 를 탈출(path traversal /\n * absolute / prefix-escape)하지 못하도록 한다. 위험 key 는 `@withwiz/cms-kit:`\n * 네임스페이스 에러로 즉시 거부한다. 양성(benign) key 는 *바이트 동일하게*\n * 통과시킨다 (blanket reject 아님 — 정규화로 인한 mangling 없음).\n *\n * 거부 규칙:\n *  - 빈 값 / 비문자열\n *  - 선행 `/` (절대/leading-slash: `/absolute`, `/news/x.jpg`)\n *  - 백슬래시 포함 (`\\` — 윈도우식 절대/우회)\n *  - 제어문자 (codepoint < 0x20)\n *  - `.` / `..` path 세그먼트 (`../`, `a/../../b`, `news/../../secret`)\n */\nexport function sanitizeStorageKey(key: string): string {\n  if (typeof key !== 'string' || key.length === 0) {\n    throw namespacedError(\n      `storage key is empty or not a string; refusing to send to storage.`,\n    );\n  }\n  if (key.startsWith('/')) {\n    throw namespacedError(\n      `storage key \"${key}\" is absolute / leading-slash; it could escape the ` +\n        `intended namespace. Use a relative key (e.g. \"news/x.jpg\").`,\n    );\n  }\n  if (key.includes('\\\\')) {\n    throw namespacedError(\n      `storage key \"${key}\" contains a backslash; refusing (namespace-escape risk).`,\n    );\n  }\n  for (let i = 0; i < key.length; i++) {\n    if (key.charCodeAt(i) < 0x20) {\n      throw namespacedError(\n        `storage key contains control characters; refusing (namespace-escape risk).`,\n      );\n    }\n  }\n  const segments = key.split('/');\n  if (segments.some((seg) => seg === '..' || seg === '.')) {\n    throw namespacedError(\n      `storage key \"${key}\" contains a path-traversal segment (\".\" / \"..\"); ` +\n        `it could escape the intended namespace.`,\n    );\n  }\n  // benign key: byte-identical passthrough.\n  return key;\n}\n\nlet client: S3Client | null = null;\n// 자격증명/엔드포인트가 바뀌면 캐시된 S3Client 를 무효화하기 위한 스냅샷.\n// 같은 프로세스 내에서 `setCmsConfig` 가 재호출되거나 R2_* env 가 바뀐 경우\n// 다음 호출에서 새 클라이언트가 만들어진다.\nlet clientSnapshot: string | null = null;\n\nfunction requireR2Credentials(): {\n  accountId: string;\n  accessKeyId: string;\n  secretAccessKey: string;\n  bucketName: string;\n} {\n  const c = resolveR2CredentialsConfig();\n  const missing: string[] = [];\n  if (!c.accountId) missing.push('accountId');\n  if (!c.accessKeyId) missing.push('accessKeyId');\n  if (!c.secretAccessKey) missing.push('secretAccessKey');\n  if (!c.bucketName) missing.push('bucketName');\n  if (missing.length > 0) {\n    throw namespacedError(\n      `R2 credentials are missing: ${missing.join(', ')}. ` +\n        'Inject `setCmsConfig({ storage: { r2: { accountId, accessKeyId, secretAccessKey, bucketName } } })` ' +\n        'or set the legacy R2_ACCOUNT_ID / R2_ACCESS_KEY_ID / R2_SECRET_ACCESS_KEY / R2_BUCKET_NAME ' +\n        'environment variables. There is no safe default for storage credentials.',\n    );\n  }\n  return c as {\n    accountId: string;\n    accessKeyId: string;\n    secretAccessKey: string;\n    bucketName: string;\n  };\n}\n\nfunction getClient(): S3Client {\n  const c = requireR2Credentials();\n  const snapshot = `${c.accountId}|${c.accessKeyId}`;\n  if (!client || clientSnapshot !== snapshot) {\n    client = new S3Client({\n      region: 'auto',\n      endpoint: `https://${c.accountId}.r2.cloudflarestorage.com`,\n      credentials: {\n        accessKeyId: c.accessKeyId,\n        secretAccessKey: c.secretAccessKey,\n      },\n    });\n    clientSnapshot = snapshot;\n  }\n  return client;\n}\n\nexport function isR2Enabled(): boolean {\n  const c = resolveR2CredentialsConfig();\n  return !!(c.accountId && c.accessKeyId && c.secretAccessKey && c.bucketName);\n}\n\nfunction buildPublicUrl(key: string, bucket: string): string {\n  const base = resolveR2PublicUrl();\n  return base ? `${base}/${key}` : `https://${bucket}.r2.dev/${key}`;\n}\n\nexport async function uploadToR2(\n  key: string,\n  buffer: Buffer,\n  contentType: string,\n): Promise<{ url: string; key: string; size: number }> {\n  const safeKey = sanitizeStorageKey(key);\n  const s3 = getClient();\n  const { bucketName: bucket } = requireR2Credentials();\n\n  await s3.send(\n    new PutObjectCommand({\n      Bucket: bucket,\n      Key: safeKey,\n      Body: buffer,\n      ContentType: contentType,\n    }),\n  );\n\n  return { url: buildPublicUrl(safeKey, bucket), key: safeKey, size: buffer.length };\n}\n\nexport interface ImageVariantUrls {\n  lg?: string;\n  md?: string;\n  sm?: string;\n  thumb?: string;\n}\n\nexport async function uploadImageWithVariants(\n  originalKey: string,\n  originalBuffer: Buffer,\n  originalContentType: string,\n): Promise<{\n  url: string;\n  key: string;\n  size: number;\n  variants: ImageVariantUrls;\n  variantKeys: string[];\n}> {\n  const { generateImageVariants } = await import('./image-variants');\n\n  const original = await uploadToR2(originalKey, originalBuffer, originalContentType);\n\n  const baseKey = originalKey.replace(/\\.[^.]+$/, '');\n\n  const variants: ImageVariantUrls = {};\n  const variantKeys: string[] = [];\n\n  try {\n    const imageVariants = await generateImageVariants(originalBuffer, baseKey, originalContentType);\n    const { bucketName: bucket } = requireR2Credentials();\n\n    await Promise.all(\n      imageVariants.map(async (v) => {\n        try {\n          await uploadToR2(v.key, v.buffer, v.contentType);\n          variants[v.size] = buildPublicUrl(v.key, bucket);\n          variantKeys.push(v.key);\n        } catch (err) {\n          logError(`[image-variant] Failed to upload variant ${v.key}`, {\n            error: err instanceof Error ? err.message : err,\n            originalKey,\n            size: v.size,\n          });\n        }\n      }),\n    );\n\n    if (variantKeys.length === 0) {\n      logError(`[image-variant] No variants generated for ${originalKey}`);\n    }\n  } catch (err) {\n    logError(`[image-variant] Failed to generate variants for ${originalKey}`, {\n      error: err instanceof Error ? err.message : err,\n    });\n  }\n\n  return {\n    url: original.url,\n    key: original.key,\n    size: original.size,\n    variants,\n    variantKeys,\n  };\n}\n\nexport async function deleteFromR2(key: string): Promise<void> {\n  const safeKey = sanitizeStorageKey(key);\n  const s3 = getClient();\n  const { bucketName: bucket } = requireR2Credentials();\n  await s3.send(\n    new DeleteObjectCommand({\n      Bucket: bucket,\n      Key: safeKey,\n    }),\n  );\n}\n"]}

package/dist/chunk-BHN2SRZC.js

@@ -0,0 +1,51 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/utils/cn.ts
+var _clsx = require('clsx');
+var _tailwindmerge = require('tailwind-merge');
+function cn(...inputs) {
+  return _tailwindmerge.twMerge.call(void 0, _clsx.clsx.call(void 0, inputs));
+}
+
+// src/utils/api-response.ts
+var _server = require('next/server');
+var NextApiResponse = class {
+  static success(data, status = 200) {
+    return _server.NextResponse.json({ success: true, data }, { status });
+  }
+  static paginated(items, page, pageSize, total, dataKey = "items") {
+    const totalPages = Math.ceil(total / pageSize);
+    return this.success({
+      [dataKey]: items,
+      pagination: { page, pageSize, total, totalPages, hasMore: page < totalPages }
+    });
+  }
+  static created(data) {
+    return this.success(data, 201);
+  }
+  static noContent() {
+    return new (0, _server.NextResponse)(null, { status: 204 });
+  }
+  static error(message, status = 400, code) {
+    return _server.NextResponse.json(
+      { success: false, error: { message, ...code && { code } } },
+      { status }
+    );
+  }
+  static notFound(message = "Not Found") {
+    return this.error(message, 404, "NOT_FOUND");
+  }
+  static unauthorized(message = "Unauthorized") {
+    return this.error(message, 401, "UNAUTHORIZED");
+  }
+  static forbidden(message = "Forbidden") {
+    return this.error(message, 403, "FORBIDDEN");
+  }
+  static serverError(message = "Internal Server Error") {
+    return this.error(message, 500, "INTERNAL_SERVER_ERROR");
+  }
+};
+
+
+
+
+exports.cn = cn; exports.NextApiResponse = NextApiResponse;
+//# sourceMappingURL=chunk-BHN2SRZC.js.map

package/dist/chunk-BHN2SRZC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/uni4love/project/workspace/211-withwiz/node-packages/withwiz-cms-kit/dist/chunk-BHN2SRZC.js","../src/utils/cn.ts","../src/utils/api-response.ts"],"names":[],"mappings":"AAAA;ACAA,4BAAsC;AACtC,+CAAwB;AAEjB,SAAS,EAAA,CAAA,GAAM,MAAA,EAAsB;AAC1C,EAAA,OAAO,oCAAA,wBAAQ,MAAW,CAAC,CAAA;AAC7B;ADCA;AACA;AEPA,qCAA6B;AAEtB,IAAM,gBAAA,EAAN,MAAsB;AAAA,EAC3B,OAAO,OAAA,CAAW,IAAA,EAAS,OAAA,EAAiB,GAAA,EAAK;AAC/C,IAAA,OAAO,oBAAA,CAAa,IAAA,CAAK,EAAE,OAAA,EAAS,IAAA,EAAM,KAAK,CAAA,EAAG,EAAE,OAAO,CAAC,CAAA;AAAA,EAC9D;AAAA,EAEA,OAAO,SAAA,CACL,KAAA,EACA,IAAA,EACA,QAAA,EACA,KAAA,EACA,QAAA,EAAkB,OAAA,EAClB;AACA,IAAA,MAAM,WAAA,EAAa,IAAA,CAAK,IAAA,CAAK,MAAA,EAAQ,QAAQ,CAAA;AAC7C,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ;AAAA,MAClB,CAAC,OAAO,CAAA,EAAG,KAAA;AAAA,MACX,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAA,EAAO,UAAA,EAAY,OAAA,EAAS,KAAA,EAAO,WAAW;AAAA,IAC9E,CAAC,CAAA;AAAA,EACH;AAAA,EAEA,OAAO,OAAA,CAAW,IAAA,EAAS;AACzB,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA;AAAA,EAC/B;AAAA,EAEA,OAAO,SAAA,CAAA,EAAY;AACjB,IAAA,OAAO,IAAI,yBAAA,CAAa,IAAA,EAAM,EAAE,MAAA,EAAQ,IAAI,CAAC,CAAA;AAAA,EAC/C;AAAA,EAEA,OAAO,KAAA,CAAM,OAAA,EAAiB,OAAA,EAAiB,GAAA,EAAK,IAAA,EAAe;AACjE,IAAA,OAAO,oBAAA,CAAa,IAAA;AAAA,MAClB,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,EAAE,OAAA,EAAS,GAAI,KAAA,GAAQ,EAAE,KAAK,EAAG,EAAE,CAAA;AAAA,MAC5D,EAAE,OAAO;AAAA,IACX,CAAA;AAAA,EACF;AAAA,EAEA,OAAO,QAAA,CAAS,QAAA,EAAkB,WAAA,EAAa;AAC7C,IAAA,OAAO,IAAA,CAAK,KAAA,CAAM,OAAA,EAAS,GAAA,EAAK,WAAW,CAAA;AAAA,EAC7C;AAAA,EAEA,OAAO,YAAA,CAAa,QAAA,EAAkB,cAAA,EAAgB;AACpD,IAAA,OAAO,IAAA,CAAK,KAAA,CAAM,OAAA,EAAS,GAAA,EAAK,cAAc,CAAA;AAAA,EAChD;AAAA,EAEA,OAAO,SAAA,CAAU,QAAA,EAAkB,WAAA,EAAa;AAC9C,IAAA,OAAO,IAAA,CAAK,KAAA,CAAM,OAAA,EAAS,GAAA,EAAK,WAAW,CAAA;AAAA,EAC7C;AAAA,EAEA,OAAO,WAAA,CAAY,QAAA,EAAkB,uBAAA,EAAyB;AAC5D,IAAA,OAAO,IAAA,CAAK,KAAA,CAAM,OAAA,EAAS,GAAA,EAAK,uBAAuB,CAAA;AAAA,EACzD;AACF,CAAA;AFNA;AACA;AACE;AACA;AACF,2DAAC","file":"/Users/uni4love/project/workspace/211-withwiz/node-packages/withwiz-cms-kit/dist/chunk-BHN2SRZC.js","sourcesContent":[null,"import { type ClassValue, clsx } from 'clsx';\nimport { twMerge } from 'tailwind-merge';\n\nexport function cn(...inputs: ClassValue[]) {\n  return twMerge(clsx(inputs));\n}\n","import { NextResponse } from 'next/server';\n\nexport class NextApiResponse {\n  static success<T>(data: T, status: number = 200) {\n    return NextResponse.json({ success: true, data }, { status });\n  }\n\n  static paginated<T>(\n    items: T[],\n    page: number,\n    pageSize: number,\n    total: number,\n    dataKey: string = 'items',\n  ) {\n    const totalPages = Math.ceil(total / pageSize);\n    return this.success({\n      [dataKey]: items,\n      pagination: { page, pageSize, total, totalPages, hasMore: page < totalPages },\n    });\n  }\n\n  static created<T>(data: T) {\n    return this.success(data, 201);\n  }\n\n  static noContent() {\n    return new NextResponse(null, { status: 204 });\n  }\n\n  static error(message: string, status: number = 400, code?: string) {\n    return NextResponse.json(\n      { success: false, error: { message, ...(code && { code }) } },\n      { status },\n    );\n  }\n\n  static notFound(message: string = 'Not Found') {\n    return this.error(message, 404, 'NOT_FOUND');\n  }\n\n  static unauthorized(message: string = 'Unauthorized') {\n    return this.error(message, 401, 'UNAUTHORIZED');\n  }\n\n  static forbidden(message: string = 'Forbidden') {\n    return this.error(message, 403, 'FORBIDDEN');\n  }\n\n  static serverError(message: string = 'Internal Server Error') {\n    return this.error(message, 500, 'INTERNAL_SERVER_ERROR');\n  }\n}\n"]}

package/dist/chunk-BJTO5JO5.mjs

@@ -0,0 +1,11 @@
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+
+export {
+  __require
+};
+//# sourceMappingURL=chunk-BJTO5JO5.mjs.map

package/dist/chunk-BJTO5JO5.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}