@withwiz/toolkit 0.10.0 → 0.12.0

package/README.md

@@ -8,6 +8,7 @@ Shared utility library for [withwiz](https://github.com/greeun) projects — a c
 
 - **Composition root** — assemble every tier's configuration at once with a single `initialize()`
 - **Framework tiers** — dependencies split across three tiers: `core` / `next` / `prisma` (0.8+)
+- **API key** — framework/DB-agnostic API key core (generation with sha256-hashed storage, validation FSM, IP whitelist, plan limits, typed errors) over injectable ports, plus an x-api-key auth middleware and OpenAPI spec builder for Next.js (`next/oapi`)
 - **Auth** — JWT, password hashing, OAuth helpers (Google / GitHub / Kakao / Microsoft / Meta), state-cookie CSRF binding, Prisma adapter
 - **Cache** — Redis / in-memory / hybrid / noop backends, factory, invalidation, defaults
 - **Constants** — Error codes, messages, pagination, security constants
@@ -141,6 +142,10 @@ and the 0.7.0 / 0.8.0 entries in [`CHANGELOG.md`](CHANGELOG.md).
 
 | Subpath | Description |
 |---|---|
+| `/core/api-key` | API key core barrel (service + generator + validate + ip-whitelist + errors) |
+| `/core/api-key/api-key.service` | `ApiKeyService` — generate / validate / CRUD / regenerate over injected ports |
+| `/core/api-key/errors` | `ApiKeyError`, `API_KEY_ERROR_CODES`, `isApiKeyError` structural guard |
+| `/core/api-key/{types,ports,key-generator,ip-whitelist,validate}` | Pure types, DI ports, and helpers |
 | `/core/auth` | Full auth (JWT + password + OAuth + services + email + types) |
 | `/core/auth/jwt` | JWT sign / verify |
 | `/core/auth/password` | bcrypt helpers |
@@ -172,6 +177,7 @@ and the 0.7.0 / 0.8.0 entries in [`CHANGELOG.md`](CHANGELOG.md).
 | `/next/auth-handlers` | Route handlers (login / refresh / oauth callback / me) |
 | `/next/auth-types` | Handler types (`NextRequest` signatures) |
 | `/next/error` | `error-handler` (NextResponse), `LocaleDetector`, `ErrorBoundary` |
+| `/next/oapi` | `createApiKeyAuth` (x-api-key auth middleware), OpenAPI 3.0.3 spec builder, pagination helpers |
 | `/next/utils` | `api-helpers`, `cors`, `csv-export`, `error-processor` |
 
 ### `react` — moved to `@withwiz/ui` (0.8)

package/dist/{chunk-Z64GNAB7.js → chunk-2SV6VZOC.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-MTZXWVW3.js";
 import {
   OAuthManager
-} from "./chunk-ER6LSA4M.js";
+} from "./chunk-P7WHMKN5.js";
 import {
   OAUTH_STATE_COOKIE,
   clearOAuthStateCookie,
@@ -14,7 +14,7 @@ import {
 } from "./chunk-5GWGARXI.js";
 import {
   setTokenCookies
-} from "./chunk-6NEGFM32.js";
+} from "./chunk-DTRXWS7G.js";
 
 // src/next/auth-handlers/oauth-callback.handler.ts
 import { NextResponse } from "next/server";

package/dist/{chunk-3P4TZM3O.js → chunk-3EEOZHIJ.js}

@@ -1,17 +1,17 @@
 import {
   getCacheManager,
   getEffectiveCacheBackend
-} from "./chunk-BICSVLN7.js";
+} from "./chunk-4OFL7KZ7.js";
 import {
   logger
 } from "./chunk-QAIN3WNN.js";
 import {
   getCacheConfig,
   getCacheTTL
-} from "./chunk-Y6CPPBJI.js";
+} from "./chunk-OEZPVNSA.js";
 import {
   isCacheEnabled
-} from "./chunk-HV6A6Z5R.js";
+} from "./chunk-BPDYEB37.js";
 
 // src/core/cache/cache-wrapper.ts
 function getCacheBackendLabel() {

package/dist/chunk-4JZIIMAF.js

@@ -0,0 +1,33 @@
+// src/core/api-key/errors.ts
+var API_KEY_ERROR_CODES = {
+  /** 대상 API 키 미존재 */
+  NOT_FOUND: "API_KEY_NOT_FOUND",
+  /** 비소유자 접근 (admin 우회 제외) */
+  OWNERSHIP: "API_KEY_OWNERSHIP",
+  /** 제한 플랜(restrictedPlans)의 발급 시도 */
+  PLAN_RESTRICTED: "API_KEY_PLAN_RESTRICTED",
+  /** 플랜별 활성 키 한도 초과 */
+  LIMIT_REACHED: "API_KEY_LIMIT_REACHED"
+};
+var ApiKeyError = class _ApiKeyError extends Error {
+  constructor(message, code) {
+    super(message);
+    this.code = code;
+    this.name = "ApiKeyError";
+    if (Error.captureStackTrace) {
+      Error.captureStackTrace(this, _ApiKeyError);
+    }
+  }
+};
+function isApiKeyError(error, code) {
+  if (!(error instanceof Error) || error.name !== "ApiKeyError" || typeof error.code !== "string") {
+    return false;
+  }
+  return code === void 0 || error.code === code;
+}
+
+export {
+  API_KEY_ERROR_CODES,
+  ApiKeyError,
+  isApiKeyError
+};

package/dist/{chunk-BICSVLN7.js → chunk-4OFL7KZ7.js}

@@ -1,32 +1,32 @@
-import {
-  NoopCacheManager
-} from "./chunk-XF3WUF3F.js";
-import {
-  RedisCacheManager
-} from "./chunk-4TGPAUJV.js";
 import {
   HybridCacheManager
-} from "./chunk-2GK4LDPV.js";
+} from "./chunk-ZLUID5BU.js";
 import {
   InMemoryCacheManager
 } from "./chunk-YYTA6ERS.js";
+import {
+  NoopCacheManager
+} from "./chunk-ZFBY2FNS.js";
+import {
+  RedisCacheManager
+} from "./chunk-F2FTS6H4.js";
 import {
   isRedisAvailableNow,
   isRedisGloballyDisabled
-} from "./chunk-ZEHNCHIV.js";
+} from "./chunk-MTRPUJ4B.js";
 import {
   logger
 } from "./chunk-QAIN3WNN.js";
 import {
   getCacheConfig
-} from "./chunk-Y6CPPBJI.js";
+} from "./chunk-OEZPVNSA.js";
 import {
   getENV,
   isCacheEnabled
-} from "./chunk-HV6A6Z5R.js";
+} from "./chunk-BPDYEB37.js";
 import {
   isCacheConfigInitialized
-} from "./chunk-7KIM5MHV.js";
+} from "./chunk-RHYETIUR.js";
 import {
   configWarn
 } from "./chunk-6J2EJVND.js";

package/dist/{chunk-XDB3K74B.js → chunk-4OKAMI6O.js}

@@ -1,7 +1,7 @@
 import {
   cache,
   geoCache
-} from "./chunk-BICSVLN7.js";
+} from "./chunk-4OFL7KZ7.js";
 
 // src/core/cache/cache-invalidation.ts
 var invalidateCache = {

package/dist/{chunk-W27FQNP6.js → chunk-5MPMPXIR.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-5GWGARXI.js";
 import {
   getTokenDeliveryStrategy
-} from "./chunk-VHRBXD7U.js";
+} from "./chunk-HNFYO5XV.js";
 import {
   JWT_DEFAULTS,
   ROLE_DEFAULTS

package/dist/{chunk-XQIAXMRY.js → chunk-5VZIAXO2.js}

@@ -94,7 +94,8 @@ var ERROR_CODES = {
   },
   // ============================================
   // Permissions Related (403xx - 01~09)
-  // Reserved: 40301~40303 (미사용, 향후 세분화 확장용)
+  // 40301: next/oapi api-key-auth wire 계약에서 사용 중 (IP 차단·사용량 초과) — 재배정 금지
+  // Reserved: 40302~40303 (미사용, 향후 세분화 확장용)
   // ============================================
   FORBIDDEN: {
     code: 40304,

package/dist/{chunk-465MEI5K.js → chunk-6E2Q27EN.js}

@@ -1,6 +1,6 @@
 import {
   clearTokenCookies
-} from "./chunk-6NEGFM32.js";
+} from "./chunk-DTRXWS7G.js";
 
 // src/next/auth-handlers/logout.handler.ts
 import { NextResponse } from "next/server";

package/dist/chunk-6NFMRZWB.js

@@ -0,0 +1,8 @@
+// src/core/auth/cookie-names.ts
+var ACCESS_TOKEN_COOKIE = "access_token";
+var REFRESH_TOKEN_COOKIE = "refresh_token";
+
+export {
+  ACCESS_TOKEN_COOKIE,
+  REFRESH_TOKEN_COOKIE
+};

package/dist/{chunk-HZN44RWL.js → chunk-7Q6SMNMN.js}

@@ -1,21 +1,21 @@
 import {
   AppError
-} from "./chunk-ATAQRXTH.js";
+} from "./chunk-MCPPJI3T.js";
 import {
   ERROR_CODES
-} from "./chunk-XQIAXMRY.js";
+} from "./chunk-5VZIAXO2.js";
+import {
+  logger
+} from "./chunk-QAIN3WNN.js";
 import {
   JWTManager
 } from "./chunk-LWHLB2Y6.js";
 import {
   getTokenDeliveryStrategy
-} from "./chunk-VHRBXD7U.js";
-import {
-  logger
-} from "./chunk-QAIN3WNN.js";
+} from "./chunk-HNFYO5XV.js";
 import {
   getAuthConfig
-} from "./chunk-N3TCQ5BF.js";
+} from "./chunk-TQMQ5XXG.js";
 import {
   ROLE_DEFAULTS
 } from "./chunk-7YWUKMZD.js";

package/dist/{chunk-SROPI74N.js → chunk-AWFP2KAU.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-LWHLB2Y6.js";
 import {
   getTokenDeliveryStrategy
-} from "./chunk-VHRBXD7U.js";
+} from "./chunk-HNFYO5XV.js";
 import {
   JWT_DEFAULTS
 } from "./chunk-7YWUKMZD.js";

package/dist/{chunk-7S2PCYNT.js → chunk-B2JZPUQ3.js}

@@ -6,13 +6,13 @@ import {
 } from "./chunk-CRJUFA73.js";
 import {
   getAuthConfig
-} from "./chunk-N3TCQ5BF.js";
+} from "./chunk-TQMQ5XXG.js";
 import {
   getCommonConfig
 } from "./chunk-PX535BHW.js";
 import {
   getResolvedCacheConfig
-} from "./chunk-7KIM5MHV.js";
+} from "./chunk-RHYETIUR.js";
 
 // src/core/system/environment.ts
 import os from "os";

package/dist/{chunk-HV6A6Z5R.js → chunk-BPDYEB37.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-PX535BHW.js";
 import {
   getResolvedCacheConfig
-} from "./chunk-7KIM5MHV.js";
+} from "./chunk-RHYETIUR.js";
 
 // src/core/cache/cache-env.ts
 function _getNodeEnv() {

package/dist/{chunk-BRFW2LL2.js → chunk-D4QADM6T.js}

@@ -1,10 +1,10 @@
 import {
   AppError
-} from "./chunk-ATAQRXTH.js";
+} from "./chunk-MCPPJI3T.js";
 import {
   ERROR_CODES,
   formatErrorMessage
-} from "./chunk-XQIAXMRY.js";
+} from "./chunk-5VZIAXO2.js";
 import {
   logApiRequest,
   logApiResponse,

package/dist/{chunk-6NEGFM32.js → chunk-DTRXWS7G.js}

@@ -1,13 +1,18 @@
-import {
-  durationToSeconds
-} from "./chunk-OVOBSYR4.js";
 import {
   getAuthConfig
-} from "./chunk-N3TCQ5BF.js";
+} from "./chunk-TQMQ5XXG.js";
 import {
   JWT_DEFAULTS
 } from "./chunk-7YWUKMZD.js";
 import {
+  durationToSeconds
+} from "./chunk-OVOBSYR4.js";
+import {
+  ACCESS_TOKEN_COOKIE,
+  REFRESH_TOKEN_COOKIE
+} from "./chunk-6NFMRZWB.js";
+import {
+  __spreadProps,
   __spreadValues
 } from "./chunk-N3ETBM74.js";
 
@@ -38,39 +43,43 @@ function setTokenCookies(response, tokenPair, options = {}) {
   var _a, _b, _c;
   const opts = __spreadValues(__spreadValues({}, getDefaultOptions()), options);
   const maxAge = resolveMaxAge();
-  response.cookies.set("access_token", tokenPair.accessToken, {
+  response.cookies.set(ACCESS_TOKEN_COOKIE, tokenPair.accessToken, __spreadProps(__spreadValues({
     httpOnly: true,
     secure: opts.secure,
     sameSite: opts.sameSite,
-    path: "/",
+    path: "/"
+  }, opts.domain ? { domain: opts.domain } : {}), {
     maxAge: (_a = opts.accessTokenMaxAge) != null ? _a : maxAge.access
-  });
-  response.cookies.set("refresh_token", tokenPair.refreshToken, {
+  }));
+  response.cookies.set(REFRESH_TOKEN_COOKIE, tokenPair.refreshToken, __spreadProps(__spreadValues({
     httpOnly: true,
     secure: opts.secure,
     sameSite: opts.sameSite,
-    path: (_b = opts.refreshTokenPath) != null ? _b : "/api/auth",
+    path: (_b = opts.refreshTokenPath) != null ? _b : "/api/auth"
+  }, opts.domain ? { domain: opts.domain } : {}), {
     maxAge: (_c = opts.refreshTokenMaxAge) != null ? _c : maxAge.refresh
-  });
+  }));
   return response;
 }
 function clearTokenCookies(response, options = {}) {
   var _a;
   const opts = __spreadValues(__spreadValues({}, getDefaultOptions()), options);
-  response.cookies.set("access_token", "", {
+  response.cookies.set(ACCESS_TOKEN_COOKIE, "", __spreadProps(__spreadValues({
     httpOnly: true,
     secure: opts.secure,
     sameSite: opts.sameSite,
-    path: "/",
+    path: "/"
+  }, opts.domain ? { domain: opts.domain } : {}), {
     maxAge: 0
-  });
-  response.cookies.set("refresh_token", "", {
+  }));
+  response.cookies.set(REFRESH_TOKEN_COOKIE, "", __spreadProps(__spreadValues({
     httpOnly: true,
     secure: opts.secure,
     sameSite: opts.sameSite,
-    path: (_a = opts.refreshTokenPath) != null ? _a : "/api/auth",
+    path: (_a = opts.refreshTokenPath) != null ? _a : "/api/auth"
+  }, opts.domain ? { domain: opts.domain } : {}), {
     maxAge: 0
-  });
+  }));
   return response;
 }
 

package/dist/{chunk-UIWR5MXM.js → chunk-ETXMWDXV.js}

@@ -10,7 +10,7 @@ import {
 } from "./chunk-QAIN3WNN.js";
 import {
   getResolvedCacheConfig
-} from "./chunk-7KIM5MHV.js";
+} from "./chunk-RHYETIUR.js";
 
 // src/core/system/health-check.ts
 async function checkServiceHealth(prismaClient) {

package/dist/{chunk-4TGPAUJV.js → chunk-F2FTS6H4.js}

@@ -3,14 +3,14 @@ import {
   isRedisGloballyDisabled,
   notifyRedisError,
   resetRedisGlobalState
-} from "./chunk-ZEHNCHIV.js";
+} from "./chunk-MTRPUJ4B.js";
 import {
   logger
 } from "./chunk-QAIN3WNN.js";
 import {
   getENV,
   isCacheEnabled
-} from "./chunk-HV6A6Z5R.js";
+} from "./chunk-BPDYEB37.js";
 import {
   __spreadValues
 } from "./chunk-N3ETBM74.js";

package/dist/{chunk-P4MGYRJM.js → chunk-G4IGD3AZ.js}

@@ -1,11 +1,15 @@
+import {
+  validateApiKeyRecord
+} from "./chunk-BTNM5YSU.js";
+import {
+  API_KEY_ERROR_CODES,
+  ApiKeyError
+} from "./chunk-4JZIIMAF.js";
 import {
   generateRawKey,
   hashKey,
   keyPreview
 } from "./chunk-ZZTBIA57.js";
-import {
-  validateApiKeyRecord
-} from "./chunk-BTNM5YSU.js";
 import {
   __spreadProps,
   __spreadValues
@@ -42,19 +46,28 @@ var ApiKeyService = class {
   }
   async requireOwned(id, userId, isAdmin) {
     const rec = await this.deps.repo.findById(id);
-    if (!rec) throw new Error("API key not found");
-    if (!isAdmin && rec.userId !== userId) throw new Error("Unauthorized");
+    if (!rec) throw new ApiKeyError("API key not found", API_KEY_ERROR_CODES.NOT_FOUND);
+    if (!isAdmin && rec.userId !== userId) throw new ApiKeyError("Unauthorized", API_KEY_ERROR_CODES.OWNERSHIP);
     return rec;
   }
+  // FREEMIUM 등 제한 플랜은 한도(0) 의존이 아닌 명시 차단 — generate/validate 단일원천
+  assertPlanNotRestricted(plan) {
+    if (this.deps.env.restrictedPlans.includes(plan)) {
+      throw new ApiKeyError(
+        `API key is not available for the ${plan} plan. Please upgrade.`,
+        API_KEY_ERROR_CODES.PLAN_RESTRICTED
+      );
+    }
+  }
   async generateApiKey(userId, options, plan) {
     var _a, _b, _c, _d, _e, _f, _g;
     const { repo, planConfig, env } = this.deps;
-    if (env.restrictedPlans.includes(plan)) {
-      throw new Error(`API key is not available for the ${plan} plan. Please upgrade.`);
-    }
+    this.assertPlanNotRestricted(plan);
     const maxKeys = await planConfig.getApiKeyLimit(plan);
     const active = await repo.countActive(userId);
-    if (active >= maxKeys) throw new Error(`API key limit reached. Max ${maxKeys} keys.`);
+    if (active >= maxKeys) {
+      throw new ApiKeyError(`API key limit reached. Max ${maxKeys} keys.`, API_KEY_ERROR_CODES.LIMIT_REACHED);
+    }
     const rawKey = generateRawKey(this.prefix(options.environment));
     const planRate = await planConfig.getRateLimit(plan);
     const rateLimit = options.customRateLimit ? Math.min(options.customRateLimit, planRate) : planRate;
@@ -88,15 +101,17 @@ var ApiKeyService = class {
     var _a;
     const { repo, cache, env } = this.deps;
     const keyHash = hashKey(rawKey);
-    const cached = await cache.getValidation(keyHash);
+    const cached = await cache.getValidation(keyHash).catch(() => null);
     if (cached) {
       const exp = (_a = cached.apiKey) == null ? void 0 : _a.expiresAt;
       if (!(exp && new Date(exp) < /* @__PURE__ */ new Date())) return cached;
-      await cache.invalidate(keyHash);
+      await cache.invalidate(keyHash).catch(() => {
+      });
     }
     const record = await repo.findByHash(keyHash);
     const result = validateApiKeyRecord(record, { freemiumPlans: env.restrictedPlans });
-    if (result.valid) await cache.setValidation(keyHash, result);
+    if (result.valid) await cache.setValidation(keyHash, result).catch(() => {
+    });
     return result;
   }
   async getApiKey(id, userId, isAdmin = false) {
@@ -138,9 +153,14 @@ var ApiKeyService = class {
   async regenerateApiKey(userId, apiKeyId, plan, options = {}) {
     var _a, _b, _c, _d, _e;
     const old = await this.requireOwned(apiKeyId, userId, false);
+    this.assertPlanNotRestricted(plan);
     if (!options.keepOldKeyActive) {
       const max = await this.deps.planConfig.getApiKeyLimit(plan);
-      if (await this.deps.repo.countActive(userId) >= max) throw new Error(`API key limit reached. Max ${max} keys.`);
+      const active = await this.deps.repo.countActive(userId);
+      const effective = old.isActive ? active - 1 : active;
+      if (effective >= max) {
+        throw new ApiKeyError(`API key limit reached. Max ${max} keys.`, API_KEY_ERROR_CODES.LIMIT_REACHED);
+      }
       await this.deps.repo.deactivate(apiKeyId);
       await this.deps.cache.invalidate(old.key);
     }

package/dist/{chunk-VHRBXD7U.js → chunk-HNFYO5XV.js}

@@ -1,9 +1,13 @@
 import {
   setTokenCookies
-} from "./chunk-6NEGFM32.js";
+} from "./chunk-DTRXWS7G.js";
 import {
   getAuthConfig
-} from "./chunk-N3TCQ5BF.js";
+} from "./chunk-TQMQ5XXG.js";
+import {
+  ACCESS_TOKEN_COOKIE,
+  REFRESH_TOKEN_COOKIE
+} from "./chunk-6NFMRZWB.js";
 import {
   __spreadValues
 } from "./chunk-N3ETBM74.js";
@@ -21,11 +25,11 @@ async function readBodyRefreshToken(source) {
 var cookieStrategy = {
   extractAccessToken: (source) => {
     var _a, _b;
-    return (_b = (_a = source.cookies.get("access_token")) == null ? void 0 : _a.value) != null ? _b : null;
+    return (_b = (_a = source.cookies.get(ACCESS_TOKEN_COOKIE)) == null ? void 0 : _a.value) != null ? _b : null;
   },
   extractRefreshToken: async (source) => {
     var _a;
-    return (_a = source.cookies.get("refresh_token")) == null ? void 0 : _a.value;
+    return (_a = source.cookies.get(REFRESH_TOKEN_COOKIE)) == null ? void 0 : _a.value;
   },
   buildTokenResponse: (body) => body,
   attachCookies: (response, tokens, options) => setTokenCookies(response, tokens, options)
@@ -39,12 +43,12 @@ var headerStrategy = {
 var hybridStrategy = {
   extractAccessToken: (source, parseHeader) => {
     var _a, _b;
-    return (_b = (_a = source.cookies.get("access_token")) == null ? void 0 : _a.value) != null ? _b : parseHeader(source.headers.get("authorization"));
+    return (_b = (_a = source.cookies.get(ACCESS_TOKEN_COOKIE)) == null ? void 0 : _a.value) != null ? _b : parseHeader(source.headers.get("authorization"));
   },
   // 쿠키 우선 — 쿠키가 있으면 body 를 소비하지 않는다 (빈 body 요청 보호)
   extractRefreshToken: async (source) => {
     var _a, _b;
-    return (_b = (_a = source.cookies.get("refresh_token")) == null ? void 0 : _a.value) != null ? _b : await readBodyRefreshToken(source);
+    return (_b = (_a = source.cookies.get(REFRESH_TOKEN_COOKIE)) == null ? void 0 : _a.value) != null ? _b : await readBodyRefreshToken(source);
   },
   buildTokenResponse: (body, fragment) => __spreadValues(__spreadValues({}, body), fragment),
   attachCookies: (response, tokens, options) => setTokenCookies(response, tokens, options)

package/dist/{chunk-23LQJYZN.js → chunk-KAS5ILUM.js}

@@ -1,7 +1,7 @@
 import {
   ERROR_CODES,
   formatErrorMessage
-} from "./chunk-XQIAXMRY.js";
+} from "./chunk-5VZIAXO2.js";
 import {
   ROLE_DEFAULTS
 } from "./chunk-7YWUKMZD.js";

package/dist/{chunk-KHXS4DGA.js → chunk-LFJ24NDO.js}

@@ -1,22 +1,22 @@
 import {
   AUTH_ERROR_CODE_MAP
-} from "./chunk-R7EFDSPZ.js";
-import {
-  AppError
-} from "./chunk-ATAQRXTH.js";
+} from "./chunk-NHFIOK2D.js";
 import {
   getErrorMessage
 } from "./chunk-7WG7XPXC.js";
+import {
+  AppError
+} from "./chunk-MCPPJI3T.js";
 import {
   ERROR_CODES,
   classifyError
-} from "./chunk-XQIAXMRY.js";
-import {
-  AuthError
-} from "./chunk-5GWGARXI.js";
+} from "./chunk-5VZIAXO2.js";
 import {
   logger
 } from "./chunk-QAIN3WNN.js";
+import {
+  AuthError
+} from "./chunk-5GWGARXI.js";
 import {
   __spreadValues
 } from "./chunk-N3ETBM74.js";

package/dist/{chunk-TRGFXIEF.js → chunk-M4ZVQFOH.js}

@@ -1,9 +1,9 @@
 import {
   AppError
-} from "./chunk-ATAQRXTH.js";
+} from "./chunk-MCPPJI3T.js";
 import {
   ERROR_CODES
-} from "./chunk-XQIAXMRY.js";
+} from "./chunk-5VZIAXO2.js";
 import {
   logger
 } from "./chunk-QAIN3WNN.js";

package/dist/{chunk-ATAQRXTH.js → chunk-MCPPJI3T.js}

@@ -4,7 +4,7 @@ import {
   formatErrorMessage,
   getErrorCategory,
   getHttpStatus
-} from "./chunk-XQIAXMRY.js";
+} from "./chunk-5VZIAXO2.js";
 
 // src/core/error/app-error.ts
 var AppError = class _AppError extends Error {

package/dist/{chunk-ZEHNCHIV.js → chunk-MTRPUJ4B.js}

@@ -7,7 +7,7 @@ import {
   getEnv,
   isCacheEnabled,
   validateRedisEnvironment
-} from "./chunk-HV6A6Z5R.js";
+} from "./chunk-BPDYEB37.js";
 
 // src/core/cache/cache-redis.ts
 import { Redis } from "@upstash/redis";

package/dist/{chunk-R7EFDSPZ.js → chunk-NHFIOK2D.js}

@@ -1,18 +1,18 @@
 import {
   AppError
-} from "./chunk-ATAQRXTH.js";
+} from "./chunk-MCPPJI3T.js";
 import {
   ERROR_CODES,
   classifyError,
   formatErrorMessage,
   getHttpStatus
-} from "./chunk-XQIAXMRY.js";
-import {
-  AuthError
-} from "./chunk-5GWGARXI.js";
+} from "./chunk-5VZIAXO2.js";
 import {
   logger
 } from "./chunk-QAIN3WNN.js";
+import {
+  AuthError
+} from "./chunk-5GWGARXI.js";
 import {
   __spreadProps,
   __spreadValues

package/dist/{chunk-5Z5CZAZP.js → chunk-NT6URT4W.js}

@@ -1,18 +1,6 @@
-import {
-  corsMiddleware
-} from "./chunk-37VGD4VX.js";
-import {
-  errorHandlerMiddleware
-} from "./chunk-KHXS4DGA.js";
-import {
-  initRequestMiddleware
-} from "./chunk-VC2E6KYQ.js";
-import {
-  MiddlewareChain
-} from "./chunk-WXOWI7BJ.js";
 import {
   rateLimitMiddleware
-} from "./chunk-TRGFXIEF.js";
+} from "./chunk-M4ZVQFOH.js";
 import {
   responseLoggerMiddleware
 } from "./chunk-LCYDMYZS.js";
@@ -23,7 +11,19 @@ import {
   adminMiddleware,
   authMiddleware,
   optionalAuthMiddleware
-} from "./chunk-HZN44RWL.js";
+} from "./chunk-7Q6SMNMN.js";
+import {
+  corsMiddleware
+} from "./chunk-37VGD4VX.js";
+import {
+  errorHandlerMiddleware
+} from "./chunk-LFJ24NDO.js";
+import {
+  initRequestMiddleware
+} from "./chunk-VC2E6KYQ.js";
+import {
+  MiddlewareChain
+} from "./chunk-WXOWI7BJ.js";
 
 // src/next/middleware/wrappers.ts
 function withPublicApi(handler) {