@withwiz/toolkit 0.12.0 → 0.14.0

package/dist/{chunk-4OKAMI6O.js → chunk-5EUK6YWS.js}

@@ -1,7 +1,7 @@
 import {
   cache,
   geoCache
-} from "./chunk-4OFL7KZ7.js";
+} from "./chunk-LJI4HDD6.js";
 
 // src/core/cache/cache-invalidation.ts
 var invalidateCache = {

package/dist/{chunk-2SV6VZOC.js → chunk-AQQ7JSS5.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-MTZXWVW3.js";
 import {
   OAuthManager
-} from "./chunk-P7WHMKN5.js";
+} from "./chunk-V3GEYUBG.js";
 import {
   OAUTH_STATE_COOKIE,
   clearOAuthStateCookie,

package/dist/{chunk-3EEOZHIJ.js → chunk-DTADWVLS.js}

@@ -1,7 +1,7 @@
 import {
   getCacheManager,
   getEffectiveCacheBackend
-} from "./chunk-4OFL7KZ7.js";
+} from "./chunk-LJI4HDD6.js";
 import {
   logger
 } from "./chunk-QAIN3WNN.js";

package/dist/{chunk-G4IGD3AZ.js → chunk-GPBNH2EZ.js}

@@ -125,16 +125,24 @@ var ApiKeyService = class {
     const { items, total } = await this.deps.repo.findMany(__spreadProps(__spreadValues({}, scoped), { page, pageSize }));
     return { keys: items.map((r) => this.toInfo(r)), total, page, pageSize, hasMore: total > page * pageSize };
   }
-  async updateApiKey(id, userId, data, isAdmin = false) {
+  /**
+   * rate limit 상한 — generate 와 동일하게 플랜 한도로 클램프한다.
+   * `plan` 미전달 시 현재 저장된 rateLimit(생성 시 이미 플랜 한도로 클램프됨)을
+   * 상한으로 사용해, 수정 경로로 한도를 상향하는 것을 막는다.
+   */
+  async updateApiKey(id, userId, data, isAdmin = false, plan) {
     const rec = await this.requireOwned(id, userId, isAdmin);
+    const cap = plan !== void 0 ? await this.deps.planConfig.getRateLimit(plan) : rec.rateLimit;
+    const rateLimit = data.customRateLimit !== void 0 ? Math.min(data.customRateLimit, cap) : void 0;
+    const endpointLimits = data.endpointLimits !== void 0 ? Object.fromEntries(Object.entries(data.endpointLimits).map(([k, v]) => [k, Math.min(v, cap)])) : void 0;
     const updated = await this.deps.repo.update(id, {
       name: data.name,
       description: data.description,
       isActive: data.isActive,
       permissions: data.permissions,
       ipWhitelist: data.ipWhitelist,
-      rateLimit: data.customRateLimit,
-      endpointLimits: data.endpointLimits
+      rateLimit,
+      endpointLimits
     });
     await this.deps.cache.invalidate(rec.key);
     return this.toInfo(updated);

package/dist/{chunk-YYTA6ERS.js → chunk-JL7CSV6G.js}

@@ -71,7 +71,18 @@ var InMemoryCacheManager = class _InMemoryCacheManager {
     const fullKey = this.getFullKey(key);
     const actualTTL = ttl != null ? ttl : this.config.defaultTTL;
     const size = this.estimateSize(value);
-    while (this.needsEviction(size)) {
+    const maxMemoryBytes = this.config.maxMemoryMB * 1024 * 1024;
+    if (this.config.maxSize <= 0 || size > maxMemoryBytes) {
+      logger.warn("[InMemoryCache] Item skipped: exceeds cache capacity", {
+        prefix: this.prefix,
+        key,
+        size,
+        maxMemoryBytes,
+        maxSize: this.config.maxSize
+      });
+      return;
+    }
+    while (this.cache.size > 0 && this.needsEviction(size)) {
       this.evict();
     }
     const existingEntry = this.cache.get(fullKey);

package/dist/{chunk-4OFL7KZ7.js → chunk-LJI4HDD6.js}

@@ -1,9 +1,9 @@
 import {
   HybridCacheManager
-} from "./chunk-ZLUID5BU.js";
+} from "./chunk-VVCT2A7O.js";
 import {
   InMemoryCacheManager
-} from "./chunk-YYTA6ERS.js";
+} from "./chunk-JL7CSV6G.js";
 import {
   NoopCacheManager
 } from "./chunk-ZFBY2FNS.js";

package/dist/{chunk-B2JZPUQ3.js → chunk-UTZ2XXGE.js}

@@ -20,12 +20,8 @@ function checkEnvironmentVariables() {
   const platform = getPlatform();
   const results = [];
   try {
-    const auth = getAuthConfig();
-    results.push({
-      key: "JWT_SECRET",
-      ok: true,
-      value: auth.jwtSecret.length > 20 ? auth.jwtSecret.substring(0, 20) + "..." : auth.jwtSecret
-    });
+    getAuthConfig();
+    results.push({ key: "JWT_SECRET", ok: true, value: "***" });
   } catch (e) {
     results.push({ key: "JWT_SECRET", ok: false });
   }

package/dist/{chunk-ZLUID5BU.js → chunk-VVCT2A7O.js}

@@ -1,6 +1,6 @@
 import {
   InMemoryCacheManager
-} from "./chunk-YYTA6ERS.js";
+} from "./chunk-JL7CSV6G.js";
 import {
   isRedisGloballyDisabled,
   notifyRedisError

package/dist/chunk-WNOTRPZP.js

@@ -0,0 +1,44 @@
+import {
+  TokenRefreshService
+} from "./chunk-XAGPZLRK.js";
+import {
+  getTokenDeliveryStrategy
+} from "./chunk-HNFYO5XV.js";
+import {
+  clearTokenCookies
+} from "./chunk-DTRXWS7G.js";
+
+// src/next/auth-handlers/logout.handler.ts
+import { NextResponse } from "next/server";
+function createLogoutHandler(options) {
+  const { dependencies, jwt, hooks, tokenDelivery, refreshTokenStore } = options;
+  const refreshService = refreshTokenStore ? new TokenRefreshService({
+    userRepository: dependencies.userRepository,
+    jwtSecret: jwt.secret,
+    accessTokenExpiry: jwt.accessTokenExpiry,
+    refreshTokenExpiry: jwt.refreshTokenExpiry,
+    isTokenBlacklisted: hooks == null ? void 0 : hooks.isTokenBlacklisted,
+    refreshTokenStore,
+    logger: dependencies.logger
+  }) : void 0;
+  return async (request) => {
+    var _a;
+    if (refreshService) {
+      try {
+        const refreshToken = await getTokenDeliveryStrategy(tokenDelivery).extractRefreshToken(request);
+        if (refreshToken) await refreshService.revokeByToken(refreshToken);
+      } catch (error) {
+        (_a = dependencies.logger) == null ? void 0 : _a.debug("Logout: refresh token revoke skipped", {
+          reason: error instanceof Error ? error.message : String(error)
+        });
+      }
+    }
+    const response = NextResponse.json({ success: true });
+    clearTokenCookies(response);
+    return response;
+  };
+}
+
+export {
+  createLogoutHandler
+};

package/dist/{chunk-RWN47K7J.js → chunk-XIAZAHIL.js}

@@ -11,16 +11,18 @@ import {
 // src/next/auth-handlers/refresh.handler.ts
 import { NextResponse } from "next/server";
 function createRefreshHandler(options) {
-  const { dependencies, jwt, hooks, cookie, tokenDelivery } = options;
+  const { dependencies, jwt, hooks, cookie, tokenDelivery, refreshTokenStore } = options;
   const refreshService = new TokenRefreshService({
     userRepository: dependencies.userRepository,
     jwtSecret: jwt.secret,
     accessTokenExpiry: jwt.accessTokenExpiry,
     refreshTokenExpiry: jwt.refreshTokenExpiry,
     isTokenBlacklisted: hooks == null ? void 0 : hooks.isTokenBlacklisted,
+    refreshTokenStore,
     logger: dependencies.logger
   });
   return async (request) => {
+    var _a;
     try {
       const strategy = getTokenDeliveryStrategy(tokenDelivery);
       const refreshToken = await strategy.extractRefreshToken(request);
@@ -32,15 +34,17 @@ function createRefreshHandler(options) {
         if (hookResult instanceof Response) return hookResult;
       }
       const result = await refreshService.refresh(refreshToken);
+      const rotated = result.refreshToken !== void 0;
+      const nextRefreshToken = (_a = result.refreshToken) != null ? _a : refreshToken;
       const response = NextResponse.json(
         strategy.buildTokenResponse(
           { success: true, user: result.user },
-          { accessToken: result.accessToken }
+          rotated ? { accessToken: result.accessToken, refreshToken: nextRefreshToken } : { accessToken: result.accessToken }
         )
       );
       strategy.attachCookies(
         response,
-        { accessToken: result.accessToken, refreshToken },
+        { accessToken: result.accessToken, refreshToken: nextRefreshToken },
         { secure: cookie == null ? void 0 : cookie.secure }
       );
       return response;

package/dist/{chunk-U2TGXJ3A.js → chunk-ZVGEGDYF.js}

@@ -1,6 +1,6 @@
 import {
   OAuthManager
-} from "./chunk-P7WHMKN5.js";
+} from "./chunk-V3GEYUBG.js";
 import {
   generateOAuthState,
   setOAuthStateCookie

package/dist/core/api-key/api-key.service.d.ts

@@ -18,7 +18,12 @@ export declare class ApiKeyService {
     validateApiKey(rawKey: string): Promise<ApiKeyValidationResult>;
     getApiKey(id: string, userId: string, isAdmin?: boolean): Promise<ApiKeyInfo>;
     getApiKeys(filters: ApiKeyFilters, requesterId: string, isAdmin?: boolean): Promise<ApiKeyListResponse>;
-    updateApiKey(id: string, userId: string, data: UpdateApiKeyData, isAdmin?: boolean): Promise<ApiKeyInfo>;
+    /**
+     * rate limit 상한 — generate 와 동일하게 플랜 한도로 클램프한다.
+     * `plan` 미전달 시 현재 저장된 rateLimit(생성 시 이미 플랜 한도로 클램프됨)을
+     * 상한으로 사용해, 수정 경로로 한도를 상향하는 것을 막는다.
+     */
+    updateApiKey(id: string, userId: string, data: UpdateApiKeyData, isAdmin?: boolean, plan?: string): Promise<ApiKeyInfo>;
     deleteApiKey(id: string, userId: string, isAdmin?: boolean): Promise<void>;
     trackUsage(apiKeyId: string, ip?: string): Promise<void>;
     regenerateApiKey(userId: string, apiKeyId: string, plan: string, options?: {

package/dist/core/api-key/api-key.service.js

@@ -1,6 +1,6 @@
 import {
   ApiKeyService
-} from "../../chunk-G4IGD3AZ.js";
+} from "../../chunk-GPBNH2EZ.js";
 import "../../chunk-BTNM5YSU.js";
 import "../../chunk-4JZIIMAF.js";
 import "../../chunk-ZZTBIA57.js";

package/dist/core/api-key/index.js

@@ -2,7 +2,7 @@ import "../../chunk-KYUJ6D65.js";
 import "../../chunk-TN5ZNYR2.js";
 import {
   ApiKeyService
-} from "../../chunk-G4IGD3AZ.js";
+} from "../../chunk-GPBNH2EZ.js";
 import {
   validateApiKeyRecord
 } from "../../chunk-BTNM5YSU.js";

package/dist/core/auth/index.js

@@ -1,19 +1,3 @@
-import {
-  JWTClientManager,
-  clearStoredTokens,
-  clearTokens,
-  createApiHeaders,
-  createAuthHeader,
-  decodeJWTPayload,
-  extractUserFromToken,
-  getStoredTokens,
-  getTokenExpirationString,
-  getTokenIssuedAtString,
-  getTokenRemainingTime,
-  isTokenExpired,
-  isTokenExpiringSoon,
-  storeTokens
-} from "../../chunk-5I3EQHR4.js";
 import {
   DEFAULT_PASSWORD_CONFIG,
   createPasswordHasher,
@@ -34,10 +18,29 @@ import {
   BcryptPasswordHasher,
   MigratingPasswordHasher
 } from "../../chunk-ILMPKSWS.js";
+import {
+  JWTClientManager,
+  clearStoredTokens,
+  clearTokens,
+  createApiHeaders,
+  createAuthHeader,
+  decodeJWTPayload,
+  extractUserFromToken,
+  getStoredTokens,
+  getTokenExpirationString,
+  getTokenIssuedAtString,
+  getTokenRemainingTime,
+  isTokenExpired,
+  isTokenExpiringSoon,
+  storeTokens
+} from "../../chunk-5I3EQHR4.js";
 import {
   OAuthManager
-} from "../../chunk-P7WHMKN5.js";
+} from "../../chunk-V3GEYUBG.js";
 import "../../chunk-CDALZTPN.js";
+import {
+  GitHubOAuthProvider
+} from "../../chunk-HIZ7USIF.js";
 import {
   GoogleOAuthProvider
 } from "../../chunk-GF3DKZIW.js";
@@ -46,9 +49,6 @@ import {
 } from "../../chunk-65HVR74O.js";
 import "../../chunk-33RIHX7O.js";
 import "../../chunk-GSSHHVHF.js";
-import {
-  GitHubOAuthProvider
-} from "../../chunk-HIZ7USIF.js";
 import "../../chunk-JLRMET4V.js";
 import {
   TokenGenerator

package/dist/core/auth/oauth/index.js

@@ -1,7 +1,10 @@
 import {
   OAuthManager
-} from "../../../chunk-P7WHMKN5.js";
+} from "../../../chunk-V3GEYUBG.js";
 import "../../../chunk-CDALZTPN.js";
+import {
+  GitHubOAuthProvider
+} from "../../../chunk-HIZ7USIF.js";
 import {
   GoogleOAuthProvider
 } from "../../../chunk-GF3DKZIW.js";
@@ -14,9 +17,6 @@ import {
 import {
   MicrosoftOAuthProvider
 } from "../../../chunk-GSSHHVHF.js";
-import {
-  GitHubOAuthProvider
-} from "../../../chunk-HIZ7USIF.js";
 import {
   OAUTH_STATE_COOKIE,
   clearOAuthStateCookie,

package/dist/core/auth/oauth/providers/index.js

@@ -1,4 +1,7 @@
 import "../../../../chunk-CDALZTPN.js";
+import {
+  GitHubOAuthProvider
+} from "../../../../chunk-HIZ7USIF.js";
 import {
   GoogleOAuthProvider
 } from "../../../../chunk-GF3DKZIW.js";
@@ -11,9 +14,6 @@ import {
 import {
   MicrosoftOAuthProvider
 } from "../../../../chunk-GSSHHVHF.js";
-import {
-  GitHubOAuthProvider
-} from "../../../../chunk-HIZ7USIF.js";
 import "../../../../chunk-5GWGARXI.js";
 import "../../../../chunk-N3ETBM74.js";
 export {

package/dist/core/cache/cache-factory.js

@@ -3,9 +3,9 @@ import {
   geoCache,
   getCacheManager,
   getEffectiveCacheBackend
-} from "../../chunk-4OFL7KZ7.js";
-import "../../chunk-ZLUID5BU.js";
-import "../../chunk-YYTA6ERS.js";
+} from "../../chunk-LJI4HDD6.js";
+import "../../chunk-VVCT2A7O.js";
+import "../../chunk-JL7CSV6G.js";
 import "../../chunk-ZFBY2FNS.js";
 import "../../chunk-F2FTS6H4.js";
 import {

package/dist/core/cache/cache-invalidation.js

@@ -3,10 +3,10 @@ import {
   deletePatternFromCache,
   deletePatternFromMultipleCaches,
   invalidateCache
-} from "../../chunk-4OKAMI6O.js";
-import "../../chunk-4OFL7KZ7.js";
-import "../../chunk-ZLUID5BU.js";
-import "../../chunk-YYTA6ERS.js";
+} from "../../chunk-5EUK6YWS.js";
+import "../../chunk-LJI4HDD6.js";
+import "../../chunk-VVCT2A7O.js";
+import "../../chunk-JL7CSV6G.js";
 import "../../chunk-ZFBY2FNS.js";
 import "../../chunk-F2FTS6H4.js";
 import "../../chunk-MTRPUJ4B.js";

package/dist/core/cache/cache-wrapper.js

@@ -2,10 +2,10 @@ import {
   cacheMetrics,
   getCacheBackendLabel,
   withCache
-} from "../../chunk-3EEOZHIJ.js";
-import "../../chunk-4OFL7KZ7.js";
-import "../../chunk-ZLUID5BU.js";
-import "../../chunk-YYTA6ERS.js";
+} from "../../chunk-DTADWVLS.js";
+import "../../chunk-LJI4HDD6.js";
+import "../../chunk-VVCT2A7O.js";
+import "../../chunk-JL7CSV6G.js";
 import "../../chunk-ZFBY2FNS.js";
 import "../../chunk-F2FTS6H4.js";
 import "../../chunk-MTRPUJ4B.js";

package/dist/core/cache/cache.js

@@ -1,23 +1,23 @@
 import "../../chunk-HH4ZKZHD.js";
 import {
   invalidateCache
-} from "../../chunk-4OKAMI6O.js";
+} from "../../chunk-5EUK6YWS.js";
 import {
   cacheMetrics,
   withCache
-} from "../../chunk-3EEOZHIJ.js";
+} from "../../chunk-DTADWVLS.js";
 import {
   cache,
   geoCache,
   getCacheManager,
   getEffectiveCacheBackend
-} from "../../chunk-4OFL7KZ7.js";
+} from "../../chunk-LJI4HDD6.js";
 import {
   HybridCacheManager
-} from "../../chunk-ZLUID5BU.js";
+} from "../../chunk-VVCT2A7O.js";
 import {
   InMemoryCacheManager
-} from "../../chunk-YYTA6ERS.js";
+} from "../../chunk-JL7CSV6G.js";
 import {
   NoopCacheManager
 } from "../../chunk-ZFBY2FNS.js";

package/dist/core/cache/hybrid-cache-manager.js

@@ -1,7 +1,7 @@
 import {
   HybridCacheManager
-} from "../../chunk-ZLUID5BU.js";
-import "../../chunk-YYTA6ERS.js";
+} from "../../chunk-VVCT2A7O.js";
+import "../../chunk-JL7CSV6G.js";
 import "../../chunk-MTRPUJ4B.js";
 import "../../chunk-QAIN3WNN.js";
 import "../../chunk-O4L6RI5S.js";

package/dist/core/cache/index.js

@@ -1,23 +1,23 @@
 import "../../chunk-HH4ZKZHD.js";
 import {
   invalidateCache
-} from "../../chunk-4OKAMI6O.js";
+} from "../../chunk-5EUK6YWS.js";
 import {
   cacheMetrics,
   withCache
-} from "../../chunk-3EEOZHIJ.js";
+} from "../../chunk-DTADWVLS.js";
 import {
   cache,
   geoCache,
   getCacheManager,
   getEffectiveCacheBackend
-} from "../../chunk-4OFL7KZ7.js";
+} from "../../chunk-LJI4HDD6.js";
 import {
   HybridCacheManager
-} from "../../chunk-ZLUID5BU.js";
+} from "../../chunk-VVCT2A7O.js";
 import {
   InMemoryCacheManager
-} from "../../chunk-YYTA6ERS.js";
+} from "../../chunk-JL7CSV6G.js";
 import {
   NoopCacheManager
 } from "../../chunk-ZFBY2FNS.js";

package/dist/core/cache/inmemory-cache-manager.js

@@ -1,6 +1,6 @@
 import {
   InMemoryCacheManager
-} from "../../chunk-YYTA6ERS.js";
+} from "../../chunk-JL7CSV6G.js";
 import "../../chunk-QAIN3WNN.js";
 import "../../chunk-O4L6RI5S.js";
 import "../../chunk-IKZB26SK.js";

package/dist/core/constants/index.js

@@ -1,9 +1,3 @@
-import {
-  GENERIC_CONFIRM_MESSAGES,
-  GENERIC_ERROR_MESSAGES,
-  GENERIC_INFO_MESSAGES,
-  GENERIC_SUCCESS_MESSAGES
-} from "../../chunk-THUQVCTI.js";
 import {
   DATE_RANGE,
   FILTER_OPTIONS,
@@ -20,6 +14,12 @@ import {
   URL,
   USER_INPUT
 } from "../../chunk-GTCCVI45.js";
+import {
+  GENERIC_CONFIRM_MESSAGES,
+  GENERIC_ERROR_MESSAGES,
+  GENERIC_INFO_MESSAGES,
+  GENERIC_SUCCESS_MESSAGES
+} from "../../chunk-THUQVCTI.js";
 import {
   ERROR_CODES,
   HTTP_STATUS,

package/dist/core/geolocation/index.js

@@ -1,18 +1,18 @@
 import {
   GeoIPProviderFactory
-} from "../../chunk-VDRLJU6C.js";
-import {
-  IPApiProvider
-} from "../../chunk-E27YZK7O.js";
-import {
-  IPApiCoProvider
-} from "../../chunk-MRNRC45L.js";
+} from "../../chunk-Q5RPNLET.js";
 import {
   IPGeolocationProvider
 } from "../../chunk-GJYHMHTU.js";
 import {
   MaxMindProvider
 } from "../../chunk-R463CTX4.js";
+import {
+  IPApiProvider
+} from "../../chunk-E27YZK7O.js";
+import {
+  IPApiCoProvider
+} from "../../chunk-MRNRC45L.js";
 import {
   BaseGeoIPProvider,
   truncateString

package/dist/core/geolocation/providers/index.js

@@ -1,18 +1,18 @@
 import {
   GeoIPProviderFactory
-} from "../../../chunk-VDRLJU6C.js";
-import {
-  IPApiProvider
-} from "../../../chunk-E27YZK7O.js";
-import {
-  IPApiCoProvider
-} from "../../../chunk-MRNRC45L.js";
+} from "../../../chunk-Q5RPNLET.js";
 import {
   IPGeolocationProvider
 } from "../../../chunk-GJYHMHTU.js";
 import {
   MaxMindProvider
 } from "../../../chunk-R463CTX4.js";
+import {
+  IPApiProvider
+} from "../../../chunk-E27YZK7O.js";
+import {
+  IPApiCoProvider
+} from "../../../chunk-MRNRC45L.js";
 import {
   BaseGeoIPProvider,
   truncateString

package/dist/core/system/environment.js

@@ -1,6 +1,6 @@
 import {
   checkEnvironmentVariables
-} from "../../chunk-B2JZPUQ3.js";
+} from "../../chunk-UTZ2XXGE.js";
 import "../../chunk-KWUOLKDO.js";
 import "../../chunk-QAIN3WNN.js";
 import "../../chunk-CRJUFA73.js";

package/dist/core/system/health-check.js

@@ -1,6 +1,6 @@
 import {
   checkServiceHealth
-} from "../../chunk-ETXMWDXV.js";
+} from "../../chunk-IE52LXR7.js";
 import "../../chunk-PBVP7CFZ.js";
 import "../../chunk-KWUOLKDO.js";
 import "../../chunk-QAIN3WNN.js";

package/dist/core/system/index.js

@@ -1,3 +1,9 @@
+import {
+  getMemoryInfo
+} from "../../chunk-U52U5SK7.js";
+import {
+  getNetworkInfo
+} from "../../chunk-WBHX4MJV.js";
 import {
   getCpuInfo
 } from "../../chunk-DRTJSTEV.js";
@@ -6,17 +12,11 @@ import {
 } from "../../chunk-E5TDIRBJ.js";
 import {
   checkEnvironmentVariables
-} from "../../chunk-B2JZPUQ3.js";
+} from "../../chunk-UTZ2XXGE.js";
 import {
   checkServiceHealth
-} from "../../chunk-ETXMWDXV.js";
+} from "../../chunk-IE52LXR7.js";
 import "../../chunk-PBVP7CFZ.js";
-import {
-  getMemoryInfo
-} from "../../chunk-U52U5SK7.js";
-import {
-  getNetworkInfo
-} from "../../chunk-WBHX4MJV.js";
 import {
   getPlatform,
   getRecommendedCommands

package/dist/core/utils/index.js

@@ -1,11 +1,3 @@
-import {
-  removeEventHandlers,
-  sanitizeArray,
-  sanitizeHtml,
-  sanitizeInput,
-  sanitizeObjectFields,
-  sanitizeUrl
-} from "../../chunk-3RK3MKAR.js";
 import {
   isApiErrorResponse,
   isApiSuccessResponse,
@@ -34,6 +26,14 @@ import {
   isValidJSON,
   isValidUrl
 } from "../../chunk-4ETAGZIT.js";
+import {
+  removeEventHandlers,
+  sanitizeArray,
+  sanitizeHtml,
+  sanitizeInput,
+  sanitizeObjectFields,
+  sanitizeUrl
+} from "../../chunk-3RK3MKAR.js";
 import "../../chunk-N3ETBM74.js";
 export {
   isApiErrorResponse,

package/dist/core/utils/input-validation.js

@@ -25,29 +25,50 @@ var ALLOWED_URL_SCHEMES = [
   "tel:",
   "sms:"
 ];
-function isPrivateV4(a, b) {
+function isPrivateV4(a, b, c = 0) {
   if (a === 0) return true;
   if (a === 127) return true;
   if (a === 10) return true;
+  if (a === 100 && b >= 64 && b <= 127) return true;
   if (a === 169 && b === 254) return true;
+  if (a === 192 && b === 0 && c === 0) return true;
   if (a === 192 && b === 168) return true;
   if (a === 172 && b >= 16 && b <= 31) return true;
+  if (a >= 224) return true;
   return false;
 }
+function mappedV4Octets(h) {
+  const prefix = "::ffff:";
+  if (!h.startsWith(prefix)) return null;
+  const rest = h.slice(prefix.length);
+  const dotted = rest.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
+  if (dotted) {
+    const o = dotted.slice(1, 5).map(Number);
+    return o.some((n) => n > 255) ? null : o;
+  }
+  const hex = rest.match(/^([0-9a-f]{1,4}):([0-9a-f]{1,4})$/);
+  if (!hex) return null;
+  const hi = parseInt(hex[1], 16);
+  const lo = parseInt(hex[2], 16);
+  return [hi >> 8, hi & 255, lo >> 8, lo & 255];
+}
 function isInternalHost(hostname) {
   let h = hostname.toLowerCase();
   if (h.startsWith("[") && h.endsWith("]")) h = h.slice(1, -1);
+  if (h.endsWith(".")) h = h.slice(0, -1);
   if (h === "localhost" || h.endsWith(".localhost")) return true;
   if (h.includes(":")) {
     if (h === "::1" || h === "::") return true;
     if (/^f[cd]/.test(h) || /^fe[89ab]/.test(h)) return true;
+    const mapped = mappedV4Octets(h);
+    if (mapped) return isPrivateV4(mapped[0], mapped[1], mapped[2]);
     return false;
   }
   const v4 = h.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
   if (v4) {
     const o = v4.slice(1, 5).map(Number);
     if (o.some((n) => n > 255)) return false;
-    return isPrivateV4(o[0], o[1]);
+    return isPrivateV4(o[0], o[1], o[2]);
   }
   return false;
 }

package/dist/core/utils/startup-banner.d.ts

@@ -0,0 +1,56 @@
+/**
+ * startup-banner — 공용 서버 구동 배너
+ *
+ * 모든 withwiz 서버 프로젝트에서 서버 구동 시 환경설정을 동일한 형식으로 출력한다.
+ * 외부 의존성 없음(순수 console) — Core tier.
+ *
+ * 사용 예:
+ *   import { printStartupBanner, mask, status } from '@withwiz/toolkit/core/utils/startup-banner';
+ *   printStartupBanner({
+ *     title: '🚀 My Service',
+ *     version: process.env.npm_package_version,
+ *     sections: [
+ *       { emoji: '⚙️', title: 'Environment', lines: [
+ *         ['Mode', process.env.NODE_ENV ?? 'development'],
+ *         ['Base URL', mask(process.env.BASE_URL, 'url')],
+ *       ]},
+ *     ],
+ *   });
+ */
+declare const colors: {
+    readonly reset: "\u001B[0m";
+    readonly bright: "\u001B[1m";
+    readonly dim: "\u001B[2m";
+    readonly cyan: "\u001B[36m";
+    readonly green: "\u001B[32m";
+    readonly yellow: "\u001B[33m";
+    readonly red: "\u001B[31m";
+};
+type Color = keyof typeof colors;
+export declare const c: (color: Color, text: string) => string;
+/** 민감/긴 값을 마스킹해 표시. url=host만, secret=앞 4글자, default=앞 20글자. */
+export declare function mask(value: string | undefined, type?: 'url' | 'secret' | 'default'): string;
+/** 불리언 상태를 ✓/✗ 로 표시. */
+export declare function status(condition: boolean): string;
+/** 기능 플래그 표시: 켜짐 ✓, 꺼짐 ⚠ OFF. */
+export declare function feature(condition: boolean): string;
+/** NODE_ENV 를 색상 라벨로. production=노랑, test=시안, 그 외=초록(DEVELOPMENT). */
+export declare function modeLabel(nodeEnv: string | undefined): string;
+export type BannerLine = [label: string, value: string];
+export interface BannerSection {
+    emoji: string;
+    title: string;
+    lines: BannerLine[];
+}
+export interface StartupBannerOptions {
+    title: string;
+    version?: string;
+    sections: BannerSection[];
+    width?: number;
+    labelWidth?: number;
+    locale?: string;
+    timeZone?: string;
+}
+/** 서버 구동 배너 출력 (런타임에 실제 로드된 값 사용). */
+export declare function printStartupBanner(opts: StartupBannerOptions): void;
+export {};

package/dist/core/utils/startup-banner.js

@@ -0,0 +1,78 @@
+import "../../chunk-N3ETBM74.js";
+
+// src/core/utils/startup-banner.ts
+var colors = {
+  reset: "\x1B[0m",
+  bright: "\x1B[1m",
+  dim: "\x1B[2m",
+  cyan: "\x1B[36m",
+  green: "\x1B[32m",
+  yellow: "\x1B[33m",
+  red: "\x1B[31m"
+};
+var c = (color, text) => `${colors[color]}${text}${colors.reset}`;
+function mask(value, type = "default") {
+  if (!value) return c("red", "\u2717 NOT_SET");
+  switch (type) {
+    case "url":
+      try {
+        const url = new URL(value);
+        return c("green", `\u2713 ${url.host}`);
+      } catch (e) {
+        return value.length > 15 ? value.substring(0, 15) + "..." : value;
+      }
+    case "secret":
+      return c("green", `\u2713 ${value.substring(0, 4)}***`);
+    default:
+      return c("green", `\u2713 ${value.length > 20 ? value.substring(0, 20) + "..." : value}`);
+  }
+}
+function status(condition) {
+  return condition ? c("green", "\u2713") : c("red", "\u2717");
+}
+function feature(condition) {
+  return condition ? status(true) : c("yellow", "\u26A0 OFF");
+}
+function modeLabel(nodeEnv) {
+  const mode = nodeEnv || "development";
+  if (mode === "production") return c("yellow", "PRODUCTION");
+  if (mode === "test") return c("cyan", "TEST");
+  return c("green", "DEVELOPMENT");
+}
+function printStartupBanner(opts) {
+  const {
+    title,
+    version,
+    sections,
+    width = 50,
+    labelWidth = 28,
+    locale = "ko-KR",
+    timeZone = "Asia/Seoul"
+  } = opts;
+  const bar = c("cyan", "\u2501".repeat(width));
+  console.log(`
+${bar}`);
+  console.log(`${c("bright", title)}${version ? " " + c("dim", `v${version}`) : ""}`);
+  console.log(bar);
+  for (const s of sections) {
+    console.log(`
+${s.emoji} ${c("bright", s.title)}`);
+    for (const [label, value] of s.lines) {
+      console.log(`  ${c("dim", label.padEnd(labelWidth))} ${value}`);
+    }
+  }
+  console.log(`
+${bar}`);
+  const time = (/* @__PURE__ */ new Date()).toLocaleTimeString(locale, { timeZone });
+  console.log(`${c("green", "\u2713")} Ready at ${time}`);
+  console.log(`${bar}
+`);
+}
+export {
+  c,
+  feature,
+  mask,
+  modeLabel,
+  printStartupBanner,
+  status
+};

package/dist/initialize.js

@@ -1,6 +1,9 @@
 import {
   initializeStorage
 } from "./chunk-C5CBJC6V.js";
+import {
+  initializeGeolocation
+} from "./chunk-CRJUFA73.js";
 import {
   config,
   resetConfig
@@ -8,9 +11,6 @@ import {
 import {
   initializeCors
 } from "./chunk-7ZO5UNTJ.js";
-import {
-  initializeGeolocation
-} from "./chunk-CRJUFA73.js";
 import {
   initializeLogger
 } from "./chunk-IKZB26SK.js";

package/dist/next/auth-handlers/index.js

@@ -1,19 +1,19 @@
 import {
   createLogoutHandler
-} from "../../chunk-6E2Q27EN.js";
+} from "../../chunk-WNOTRPZP.js";
 import {
   createMeHandler
 } from "../../chunk-AWFP2KAU.js";
 import {
   createOAuthAuthorizeHandler
-} from "../../chunk-U2TGXJ3A.js";
+} from "../../chunk-ZVGEGDYF.js";
 import {
   createOAuthCallbackHandler
-} from "../../chunk-2SV6VZOC.js";
+} from "../../chunk-AQQ7JSS5.js";
 import "../../chunk-MTZXWVW3.js";
 import {
   createRefreshHandler
-} from "../../chunk-RWN47K7J.js";
+} from "../../chunk-XIAZAHIL.js";
 import "../../chunk-XAGPZLRK.js";
 import {
   createRegisterHandler
@@ -33,13 +33,13 @@ import "../../chunk-75UDFONR.js";
 import {
   createLoginHandler
 } from "../../chunk-5MPMPXIR.js";
-import "../../chunk-P7WHMKN5.js";
+import "../../chunk-V3GEYUBG.js";
 import "../../chunk-CDALZTPN.js";
+import "../../chunk-HIZ7USIF.js";
 import "../../chunk-GF3DKZIW.js";
 import "../../chunk-65HVR74O.js";
 import "../../chunk-33RIHX7O.js";
 import "../../chunk-GSSHHVHF.js";
-import "../../chunk-HIZ7USIF.js";
 import "../../chunk-JLRMET4V.js";
 import "../../chunk-ZZABL54F.js";
 import "../../chunk-GH3U4WRE.js";

package/dist/next/auth-handlers/logout.handler.d.ts

@@ -1,3 +1,3 @@
 import type { NextRequest } from 'next/server';
 import type { AuthHandlerOptions } from '@withwiz/toolkit/next/auth-types/handler-types';
-export declare function createLogoutHandler(_options: AuthHandlerOptions): (_request: NextRequest) => Promise<Response>;
+export declare function createLogoutHandler(options: AuthHandlerOptions): (request: NextRequest) => Promise<Response>;

package/dist/next/auth-handlers/logout.handler.js

@@ -1,6 +1,10 @@
 import {
   createLogoutHandler
-} from "../../chunk-6E2Q27EN.js";
+} from "../../chunk-WNOTRPZP.js";
+import "../../chunk-XAGPZLRK.js";
+import "../../chunk-LWHLB2Y6.js";
+import "../../chunk-5GWGARXI.js";
+import "../../chunk-HNFYO5XV.js";
 import "../../chunk-DTRXWS7G.js";
 import "../../chunk-TQMQ5XXG.js";
 import "../../chunk-7YWUKMZD.js";

package/dist/next/auth-handlers/oauth-authorize.handler.js

@@ -1,13 +1,13 @@
 import {
   createOAuthAuthorizeHandler
-} from "../../chunk-U2TGXJ3A.js";
-import "../../chunk-P7WHMKN5.js";
+} from "../../chunk-ZVGEGDYF.js";
+import "../../chunk-V3GEYUBG.js";
 import "../../chunk-CDALZTPN.js";
+import "../../chunk-HIZ7USIF.js";
 import "../../chunk-GF3DKZIW.js";
 import "../../chunk-65HVR74O.js";
 import "../../chunk-33RIHX7O.js";
 import "../../chunk-GSSHHVHF.js";
-import "../../chunk-HIZ7USIF.js";
 import "../../chunk-JLRMET4V.js";
 import "../../chunk-GH3U4WRE.js";
 import "../../chunk-5GWGARXI.js";

package/dist/next/auth-handlers/oauth-callback.handler.js

@@ -1,14 +1,14 @@
 import {
   createOAuthCallbackHandler
-} from "../../chunk-2SV6VZOC.js";
+} from "../../chunk-AQQ7JSS5.js";
 import "../../chunk-MTZXWVW3.js";
-import "../../chunk-P7WHMKN5.js";
+import "../../chunk-V3GEYUBG.js";
 import "../../chunk-CDALZTPN.js";
+import "../../chunk-HIZ7USIF.js";
 import "../../chunk-GF3DKZIW.js";
 import "../../chunk-65HVR74O.js";
 import "../../chunk-33RIHX7O.js";
 import "../../chunk-GSSHHVHF.js";
-import "../../chunk-HIZ7USIF.js";
 import "../../chunk-JLRMET4V.js";
 import "../../chunk-GH3U4WRE.js";
 import "../../chunk-LWHLB2Y6.js";

package/dist/next/auth-handlers/refresh.handler.js

@@ -1,6 +1,6 @@
 import {
   createRefreshHandler
-} from "../../chunk-RWN47K7J.js";
+} from "../../chunk-XIAZAHIL.js";
 import "../../chunk-XAGPZLRK.js";
 import "../../chunk-LWHLB2Y6.js";
 import "../../chunk-5GWGARXI.js";

package/dist/next/auth-types/handler-types.d.ts

@@ -1,6 +1,7 @@
 import type { NextRequest } from 'next/server';
 import type { BaseUser, OAuthProviderName, UserRepository, OAuthAccountRepository, EmailTokenRepository, EmailSender, Logger } from '@withwiz/toolkit/core/auth/types';
 import type { TokenDelivery } from '@withwiz/toolkit/core/auth/config';
+import type { IRefreshTokenStore } from '@withwiz/toolkit/core/auth/services/refresh-token-store';
 export interface AuthHandlerDependencies {
     userRepository: UserRepository;
     oauthAccountRepository: OAuthAccountRepository;
@@ -64,6 +65,14 @@ export interface AuthHandlerOptions {
     };
     /** 토큰 전달 모드. 미지정 시 전역 AuthConfig → 'hybrid' 순으로 해석 */
     tokenDelivery?: TokenDelivery;
+    /**
+     * refresh 토큰 store. 주입 시:
+     * - refresh 핸들러가 회전(rotation) + 재사용 탐지(reuse detection)를 수행하고
+     *   새 refresh 토큰을 쿠키/응답에 반영한다.
+     * - logout 핸들러가 제출된 refresh 토큰의 family 를 즉시 무효화한다.
+     * 미주입 시 0.13 이전과 동일하게 동작한다(access 재발급만, 로그아웃은 쿠키 삭제만).
+     */
+    refreshTokenStore?: IRefreshTokenStore;
 }
 export interface AuthHandlerResult {
     GET: (req: NextRequest) => Promise<Response>;

package/dist/next/middleware/index.js

@@ -4,7 +4,10 @@ import {
   withCustomApi,
   withOptionalAuthApi,
   withPublicApi
-} from "../../chunk-NT6URT4W.js";
+} from "../../chunk-2HFLXCXJ.js";
+import {
+  MiddlewareChain
+} from "../../chunk-WXOWI7BJ.js";
 import {
   createRateLimitMiddleware,
   rateLimitMiddleware,
@@ -33,13 +36,10 @@ import {
 import {
   errorHandlerMiddleware
 } from "../../chunk-LFJ24NDO.js";
+import "../../chunk-NHFIOK2D.js";
 import {
   initRequestMiddleware
 } from "../../chunk-VC2E6KYQ.js";
-import {
-  MiddlewareChain
-} from "../../chunk-WXOWI7BJ.js";
-import "../../chunk-NHFIOK2D.js";
 import "../../chunk-K2PNAQI4.js";
 import "../../chunk-7WG7XPXC.js";
 import "../../chunk-AMZWDLJ4.js";

package/dist/next/middleware/wrappers.js

@@ -4,16 +4,16 @@ import {
   withCustomApi,
   withOptionalAuthApi,
   withPublicApi
-} from "../../chunk-NT6URT4W.js";
+} from "../../chunk-2HFLXCXJ.js";
+import "../../chunk-WXOWI7BJ.js";
 import "../../chunk-M4ZVQFOH.js";
 import "../../chunk-LCYDMYZS.js";
 import "../../chunk-Y4WPEIKW.js";
 import "../../chunk-7Q6SMNMN.js";
 import "../../chunk-37VGD4VX.js";
 import "../../chunk-LFJ24NDO.js";
-import "../../chunk-VC2E6KYQ.js";
-import "../../chunk-WXOWI7BJ.js";
 import "../../chunk-NHFIOK2D.js";
+import "../../chunk-VC2E6KYQ.js";
 import "../../chunk-K2PNAQI4.js";
 import "../../chunk-7WG7XPXC.js";
 import "../../chunk-AMZWDLJ4.js";

package/dist/next/oapi/api-key-auth.js

@@ -3,7 +3,7 @@ import {
 } from "../../chunk-XWHT53CZ.js";
 import "../../chunk-KYUJ6D65.js";
 import "../../chunk-TN5ZNYR2.js";
-import "../../chunk-G4IGD3AZ.js";
+import "../../chunk-GPBNH2EZ.js";
 import "../../chunk-BTNM5YSU.js";
 import "../../chunk-4JZIIMAF.js";
 import "../../chunk-NUHSUAXG.js";

package/dist/next/oapi/index.js

@@ -1,3 +1,6 @@
+import {
+  buildOpenApiSpec
+} from "../../chunk-L2A6NGW7.js";
 import {
   createApiKeyAuth
 } from "../../chunk-XWHT53CZ.js";
@@ -7,12 +10,9 @@ import {
   parseSearchParams,
   requireParam
 } from "../../chunk-Z4J452HD.js";
-import {
-  buildOpenApiSpec
-} from "../../chunk-L2A6NGW7.js";
 import "../../chunk-KYUJ6D65.js";
 import "../../chunk-TN5ZNYR2.js";
-import "../../chunk-G4IGD3AZ.js";
+import "../../chunk-GPBNH2EZ.js";
 import "../../chunk-BTNM5YSU.js";
 import "../../chunk-4JZIIMAF.js";
 import "../../chunk-NUHSUAXG.js";

package/dist/next/utils/index.js

@@ -1,26 +1,3 @@
-import {
-  boolFormatter,
-  createCsvHeader,
-  createSimpleCsvResponse,
-  createStreamingCsvResponse,
-  dateFormatter,
-  escapeCsvField,
-  rowToCsv
-} from "../../chunk-DVCGAI5N.js";
-import {
-  ErrorProcessor,
-  errorToResponse,
-  handlePrismaError,
-  processError,
-  throwBadRequestError,
-  throwBusinessRuleError,
-  throwConflictError,
-  throwForbiddenError,
-  throwNotFoundError,
-  throwUnauthorizedError,
-  throwValidationError,
-  withErrorHandling
-} from "../../chunk-D4QADM6T.js";
 import {
   createPaginatedResponse,
   getReferer,
@@ -45,6 +22,29 @@ import {
   withPublicCORS,
   withRestrictedCORS
 } from "../../chunk-34L7HTM7.js";
+import {
+  boolFormatter,
+  createCsvHeader,
+  createSimpleCsvResponse,
+  createStreamingCsvResponse,
+  dateFormatter,
+  escapeCsvField,
+  rowToCsv
+} from "../../chunk-DVCGAI5N.js";
+import {
+  ErrorProcessor,
+  errorToResponse,
+  handlePrismaError,
+  processError,
+  throwBadRequestError,
+  throwBusinessRuleError,
+  throwConflictError,
+  throwForbiddenError,
+  throwNotFoundError,
+  throwUnauthorizedError,
+  throwValidationError,
+  withErrorHandling
+} from "../../chunk-D4QADM6T.js";
 import "../../chunk-MCPPJI3T.js";
 import "../../chunk-5VZIAXO2.js";
 import "../../chunk-QAIN3WNN.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@withwiz/toolkit",
-  "version": "0.12.0",
+  "version": "0.14.0",
   "description": "Shared utility library for withwiz projects",
   "license": "MIT",
   "private": false,
@@ -151,6 +151,7 @@
     "./core/utils/optimistic-lock": "./dist/core/utils/optimistic-lock.js",
     "./core/utils/sanitizer": "./dist/core/utils/sanitizer.js",
     "./core/utils/short-code-generator": "./dist/core/utils/short-code-generator.js",
+    "./core/utils/startup-banner": "./dist/core/utils/startup-banner.js",
     "./core/utils/timezone": "./dist/core/utils/timezone.js",
     "./core/utils/type-guards": "./dist/core/utils/type-guards.js",
     "./core/utils/url-normalizer": "./dist/core/utils/url-normalizer.js",

package/dist/chunk-6E2Q27EN.js

@@ -1,17 +0,0 @@
-import {
-  clearTokenCookies
-} from "./chunk-DTRXWS7G.js";
-
-// src/next/auth-handlers/logout.handler.ts
-import { NextResponse } from "next/server";
-function createLogoutHandler(_options) {
-  return async (_request) => {
-    const response = NextResponse.json({ success: true });
-    clearTokenCookies(response);
-    return response;
-  };
-}
-
-export {
-  createLogoutHandler
-};

package/dist/{chunk-NT6URT4W.js → chunk-2HFLXCXJ.js}

@@ -1,3 +1,6 @@
+import {
+  MiddlewareChain
+} from "./chunk-WXOWI7BJ.js";
 import {
   rateLimitMiddleware
 } from "./chunk-M4ZVQFOH.js";
@@ -21,9 +24,6 @@ import {
 import {
   initRequestMiddleware
 } from "./chunk-VC2E6KYQ.js";
-import {
-  MiddlewareChain
-} from "./chunk-WXOWI7BJ.js";
 
 // src/next/middleware/wrappers.ts
 function withPublicApi(handler) {

package/dist/{chunk-VDRLJU6C.js → chunk-Q5RPNLET.js}

@@ -1,15 +1,15 @@
-import {
-  IPApiProvider
-} from "./chunk-E27YZK7O.js";
-import {
-  IPApiCoProvider
-} from "./chunk-MRNRC45L.js";
 import {
   IPGeolocationProvider
 } from "./chunk-GJYHMHTU.js";
 import {
   MaxMindProvider
 } from "./chunk-R463CTX4.js";
+import {
+  IPApiProvider
+} from "./chunk-E27YZK7O.js";
+import {
+  IPApiCoProvider
+} from "./chunk-MRNRC45L.js";
 
 // src/core/geolocation/providers/index.ts
 var GeoIPProviderFactory = class {

package/dist/{chunk-P7WHMKN5.js → chunk-V3GEYUBG.js}

@@ -1,3 +1,6 @@
+import {
+  GitHubOAuthProvider
+} from "./chunk-HIZ7USIF.js";
 import {
   GoogleOAuthProvider
 } from "./chunk-GF3DKZIW.js";
@@ -10,9 +13,6 @@ import {
 import {
   MicrosoftOAuthProvider
 } from "./chunk-GSSHHVHF.js";
-import {
-  GitHubOAuthProvider
-} from "./chunk-HIZ7USIF.js";
 import {
   OAuthError
 } from "./chunk-5GWGARXI.js";