@withwiz/toolkit 0.6.5 → 0.7.1

package/README.md

@@ -4,18 +4,20 @@ Shared utility library for [withwiz](https://github.com/greeun) projects — a c
 
 ## Features
 
-- **Auth** — JWT, password hashing, OAuth helpers (Google / GitHub / Kakao / Microsoft / Meta), Prisma adapter
-- **Cache** — Redis-backed caching with factory, invalidation, and defaults
+- **Composition root** — 단일 `initialize()`로 모든 티어 설정을 한 번에 조립
+- **Framework tiers** — `core` / `next` / `react` / `prisma` 4개 티어로 의존성 분리 (0.7+)
+- **Auth** — JWT, password hashing, OAuth helpers (Google / GitHub / Kakao / Microsoft / Meta), state-cookie CSRF 바인딩, Prisma adapter
+- **Cache** — Redis / in-memory / hybrid / noop 백엔드, factory, invalidation, defaults
 - **Constants** — Error codes, messages, pagination, security constants
-- **Error** — Typed `AppError`, centralized error handler and display
+- **Error** — Typed `AppError`, framework-aware error handler / display (core · next · react)
 - **Geolocation** — GeoIP lookup, batch processing, provider factory
 - **Hooks** — `useDataTable`, `useDebounce`, `useExitIntent`, `useTimezone`
 - **Logger** — Winston-based structured logger with daily rotation
-- **Middleware** — Auth, rate-limiting, CORS, security middleware wrappers
+- **Middleware** — Auth, rate-limiting, CORS, security middleware wrappers (Next.js)
 - **Storage** — Cloudflare R2 (AWS S3-compatible) storage
-- **System** — Health check endpoint
+- **System** — Health check, system monitoring
 - **Types** — Shared TypeScript types (API, DB, env, GeoIP, user, i18n, QR)
-- **Utils** — Sanitizer, validators, CSV export, URL normalizer, timezone, IP utils, and more
+- **Utils** — Sanitizer, type-guards, CSV export, URL normalizer, timezone, IP utils, ...
 - **Validators** — Password strength validator
 
 ## Installation
@@ -28,17 +30,26 @@ pnpm add @withwiz/toolkit
 yarn add @withwiz/toolkit
 ```
 
-### Peer dependencies
+### Peer dependencies (optional)
+
+`next` / `react` / `react-dom` 은 **optional** peer입니다 — 사용하는 티어가 요구하는 peer만 설치하세요.
 
 ```bash
-npm install next react react-dom
+# next 티어를 쓸 때
+npm install next
+
+# react 티어를 쓸 때
+npm install react react-dom
+
+# core 티어만 쓰는 백엔드 / CLI
+# (별도 peer 설치 불필요)
 ```
 
 ## Quick start
 
 ```ts
 // Auth — JWT
-import { signToken, verifyToken } from '@withwiz/toolkit/auth/core/jwt'
+import { signToken, verifyToken } from '@withwiz/toolkit/core/auth/jwt'
 
 const token = await signToken({ userId: 'u_123' })
 const payload = await verifyToken(token)
@@ -46,21 +57,21 @@ const payload = await verifyToken(token)
 
 ```ts
 // Cache — Redis wrapper
-import { withCache } from '@withwiz/toolkit/cache'
+import { withCache } from '@withwiz/toolkit/core/cache'
 
 const data = await withCache('my-key', async () => fetchData(), 3600)
 ```
 
 ```ts
 // Error — typed error class
-import { AppError } from '@withwiz/toolkit/error'
+import { AppError } from '@withwiz/toolkit/core/error'
 
 throw new AppError('NOT_FOUND', 'Resource not found', 404)
 ```
 
 ```ts
 // Logger
-import { logInfo, logError } from '@withwiz/toolkit/logger/logger'
+import { logInfo, logError } from '@withwiz/toolkit/core/logger/logger'
 
 logInfo('Server started', { port: 3000 })
 logError('Something went wrong', { error })
@@ -68,7 +79,7 @@ logError('Something went wrong', { error })
 
 ```ts
 // Geolocation
-import { getGeoLocation } from '@withwiz/toolkit/geolocation'
+import { getGeoLocation } from '@withwiz/toolkit/core/geolocation'
 
 const geo = await getGeoLocation('8.8.8.8')
 // { country: 'US', city: 'Mountain View', ... }
@@ -76,68 +87,99 @@ const geo = await getGeoLocation('8.8.8.8')
 
 ```tsx
 // Hooks (React)
-import { useDebounce } from '@withwiz/toolkit/hooks/useDebounce'
+import { useDebounce } from '@withwiz/toolkit/react/hooks/useDebounce'
 
 const debouncedQuery = useDebounce(query, 300)
 ```
 
 ```ts
 // Utils
-import { sanitizeInput } from '@withwiz/toolkit/utils/sanitizer'
-import { formatNumber }  from '@withwiz/toolkit/utils/format-number'
-import { normalizeUrl }  from '@withwiz/toolkit/utils/url-normalizer'
+import { sanitizeInput } from '@withwiz/toolkit/core/utils/sanitizer'
+import { formatNumber }  from '@withwiz/toolkit/core/utils/format-number'
+import { normalizeUrl }  from '@withwiz/toolkit/core/utils/url-normalizer'
 ```
 
 ## Module reference
 
+0.7부터 모든 subpath는 프레임워크 의존성에 따라 4개 티어로 분리됩니다.
+자세한 티어 모델·규칙·마이그레이션 매핑은 [`docs/FRAMEWORK_TIERS.md`](docs/FRAMEWORK_TIERS.md)
+및 [`CHANGELOG.md`](CHANGELOG.md) 의 0.7.0 항목을 참조하세요.
+
+### Composition root
+
+| Subpath | Description |
+|---|---|
+| `/initialize` | 모든 티어 설정을 단일 객체로 조립하는 통합 진입점 |
+
+### `core` — 프레임워크 독립 (pure TS)
+
+| Subpath | Description |
+|---|---|
+| `/core/auth` | Full auth (JWT + password + OAuth + services + email + types) |
+| `/core/auth/jwt` | JWT sign / verify |
+| `/core/auth/password` | bcrypt helpers |
+| `/core/auth/oauth` | OAuth utilities (Google / GitHub / Kakao / Microsoft / Meta) |
+| `/core/auth/oauth/providers/{google,github,kakao,microsoft,meta}` | Individual OAuth providers |
+| `/core/auth/services` | Login / token-refresh / oauth-callback services |
+| `/core/auth/email` | Email token generation |
+| `/core/auth/types` | Framework-independent auth types |
+| `/core/cache` | Cache facade (get / set / delete / withCache) |
+| `/core/cache/cache-factory` | Cache backend factory (Redis / in-memory / hybrid / noop) |
+| `/core/cache/cache-invalidation` | Pattern-based cache invalidation |
+| `/core/config` | Config registry |
+| `/core/constants/{error-codes,messages,pagination,security}` | Shared constants |
+| `/core/cors` | Framework-independent CORS config |
+| `/core/error` | `AppError`, error codes, i18n messages, `extractErrorInfo` |
+| `/core/geolocation` | GeoIP lookup, batch processor, provider factory |
+| `/core/logger/logger` | Winston-based structured logger |
+| `/core/storage` | Cloudflare R2 / S3-compatible storage |
+| `/core/system` | Health check, system monitoring |
+| `/core/types/{api,database,env,geoip,i18n,qr-code,user}` | Shared TypeScript types |
+| `/core/utils` | `sanitizer`, `type-guards`, `format-number`, `ip-utils`, `timezone`, ... |
+| `/core/validators` | Password strength validator |
+
+### `next` — Next.js 의존
+
 | Subpath | Description |
 |---|---|
-| `/auth` | Full auth module (JWT + password + OAuth + Prisma adapter) |
-| `/auth/core/jwt` | JWT sign / verify |
-| `/auth/core/password` | bcrypt helpers |
-| `/auth/core/oauth` | OAuth utilities (Google / GitHub / Kakao / Microsoft / Meta) |
-| `/auth/adapters/prisma` | Prisma-based session adapter |
-| `/cache` | Redis cache (get / set / delete / withCache) |
-| `/cache/cache-factory` | Cache factory for multiple backends |
-| `/cache/cache-invalidation` | Pattern-based cache invalidation |
-| `/constants` | All shared constants |
-| `/constants/error-codes` | Application error codes |
-| `/constants/messages` | Shared user-facing messages |
-| `/constants/pagination` | Default pagination settings |
-| `/constants/security` | Security-related constants |
-| `/error` | AppError, error handler, error display |
-| `/geolocation` | GeoIP lookup & batch processor |
-| `/hooks/useDataTable` | Table state management hook |
-| `/hooks/useDebounce` | Debounce hook |
-| `/hooks/useExitIntent` | Exit intent detection hook |
-| `/hooks/useTimezone` | Timezone detection hook |
-| `/logger/logger` | Structured Winston logger |
-| `/middleware` | Next.js middleware helpers |
-| `/middleware/auth` | Auth middleware |
-| `/middleware/rate-limit` | Rate limiting middleware |
-| `/middleware/cors` | CORS middleware |
-| `/middleware/security` | Security headers middleware |
-| `/storage` | Cloudflare R2 / S3 storage client |
-| `/system/health-check` | Health check handler |
-| `/types/api` | API response types |
-| `/types/database` | Database entity types |
-| `/types/env` | Environment variable types |
-| `/types/user` | User types |
-| `/types/geoip` | GeoIP types |
-| `/utils` | All utility functions |
-| `/utils/sanitizer` | Input sanitization |
-| `/utils/url-normalizer` | URL normalization |
-| `/utils/timezone` | Timezone formatting helpers |
-| `/utils/csv-export` | CSV export helper |
-| `/validators/password-validator` | Password strength validator |
+| `/next/middleware` | Auth · rate-limit · CORS · security · wrappers |
+| `/next/auth-handlers` | Route handlers (login / refresh / oauth callback / me) |
+| `/next/auth-types` | Handler types (`NextRequest` signatures) |
+| `/next/error` | `error-handler` (NextResponse), `LocaleDetector`, `ErrorBoundary` |
+| `/next/utils` | `api-helpers`, `cors`, `csv-export`, `error-processor` |
+
+### `react` — React 의존
+
+| Subpath | Description |
+|---|---|
+| `/react/components/ui/*` | Button, Table, Badge, DataTable, ... |
+| `/react/hooks/{useDataTable,useDebounce,useExitIntent,useTimezone}` | React hooks |
+| `/react/error` | `error-display` (sonner toast) |
+| `/react/utils/{client-utils,qr-code}` | Browser-context utilities |
+
+### `prisma` — Prisma 의존
+
+| Subpath | Description |
+|---|---|
+| `/prisma/auth-adapter` | `UserRepository` / `OAuthAccountRepository` / `EmailTokenRepository` Prisma 구현체 |
 
 ## Requirements
 
 - Node.js >= 18
-- Next.js >= 14
-- React >= 18
 - TypeScript >= 5
 
+### Optional peers
+
+`next` / `react` / `react-dom` 은 `optional` peer dependency입니다.
+사용하는 티어가 요구하는 peer만 설치하세요:
+
+- `core` 티어만 쓰는 백엔드 / CLI: peer 불필요
+- `next` 티어: Next.js >= 15
+- `react` 티어: React >= 18, React-DOM >= 18
+- `prisma` 티어: Prisma 호환 클라이언트 (덕 타이핑)
+- Prisma 어댑터의 `EmailTokenRepository` 등 일부 모듈: `date-fns >= 3` (optional)
+- 이메일 전송: `nodemailer >= 6` (optional)
+
 ## Development
 
 ```bash

package/dist/{chunk-FDFPNSKY.js → chunk-2D3YM34R.js}

@@ -1,4 +1,4 @@
-// src/config/registry.ts
+// src/core/config/registry.ts
 var _a;
 (_a = globalThis.__withwiz_config) != null ? _a : globalThis.__withwiz_config = {};
 var config = globalThis.__withwiz_config;

package/dist/{chunk-7IY3RQQL.js → chunk-2P4N4OK2.js}

@@ -1,11 +1,11 @@
 import {
   LoadingBar
-} from "./chunk-34WAGUT5.js";
+} from "./chunk-X7FGBUA4.js";
 import {
   cn
-} from "./chunk-62FLBG6B.js";
+} from "./chunk-4K76HG4V.js";
 
-// src/components/ui/data-table/DataTableBody.tsx
+// src/react/components/ui/data-table/DataTableBody.tsx
 import { useRef, useEffect } from "react";
 import { jsx, jsxs } from "react/jsx-runtime";
 function DataTableBody({
@@ -31,7 +31,7 @@ function DataTableBody({
   }, [localSelectedIds, data.length]);
   return /* @__PURE__ */ jsx("div", { className: "border rounded-lg overflow-hidden", children: /* @__PURE__ */ jsx("div", { className: "overflow-x-auto max-w-full", children: /* @__PURE__ */ jsxs("table", { className: "w-full text-sm min-w-full", children: [
     /* @__PURE__ */ jsx("thead", { children: /* @__PURE__ */ jsxs("tr", { className: "border-b bg-muted/50", children: [
-      selectable && /* @__PURE__ */ jsx("th", { className: "px-1 py-2 text-left font-medium w-8", children: /* @__PURE__ */ jsx(
+      selectable && /* @__PURE__ */ jsx("th", { className: "px-3 py-2 text-center font-medium w-12", children: /* @__PURE__ */ jsx("div", { className: "flex items-center justify-center", children: /* @__PURE__ */ jsx(
         "input",
         {
           "data-testid": "select-all-checkbox",
@@ -41,16 +41,15 @@ function DataTableBody({
           onChange: (e) => onSelectAll(e.target.checked),
           className: "h-4 w-4"
         }
-      ) }),
+      ) }) }),
       visibleColumns.map((column) => {
         var _a, _b, _c, _d;
         const width = column.width === "auto" ? void 0 : column.width;
-        const minWidth = column.minWidth;
         return /* @__PURE__ */ jsx(
           "th",
           {
             className: cn(
-              "px-2 py-2 font-medium",
+              "px-2 py-2 font-medium first:pl-4 last:pr-4",
               column.sortable && "cursor-pointer",
               column.className,
               ((_a = column.responsive) == null ? void 0 : _a.sm) && "hidden sm:table-cell",
@@ -60,7 +59,7 @@ function DataTableBody({
             ),
             style: {
               width,
-              minWidth: minWidth || width || void 0,
+              minWidth: column.minWidth || width || void 0,
               maxWidth: column.maxWidth || void 0
             },
             onClick: column.sortable ? () => onSort(column.key) : void 0,
@@ -107,7 +106,7 @@ function DataTableBody({
             localSelectedIds.includes(rowId) && "bg-primary/5"
           ),
           children: [
-            selectable && /* @__PURE__ */ jsx("td", { className: "px-1 py-2 w-8", children: /* @__PURE__ */ jsx(
+            selectable && /* @__PURE__ */ jsx("td", { className: "px-3 py-3 text-center w-12", children: /* @__PURE__ */ jsx(
               "input",
               {
                 "data-testid": `row-checkbox-${rowId}`,
@@ -123,7 +122,7 @@ function DataTableBody({
                 "td",
                 {
                   className: cn(
-                    "px-2 py-3 overflow-hidden",
+                    "px-2 py-3 overflow-hidden first:pl-4 last:pr-4",
                     column.className,
                     ((_a = column.responsive) == null ? void 0 : _a.sm) && "hidden sm:table-cell",
                     ((_b = column.responsive) == null ? void 0 : _b.md) && "hidden md:table-cell",

package/dist/{chunk-3GAY2T2A.js → chunk-2PFSRVVD.js}

@@ -1,8 +1,12 @@
 import {
   JWTError
-} from "./chunk-AIH3F7JV.js";
+} from "./chunk-5GWGARXI.js";
+import {
+  __spreadProps,
+  __spreadValues
+} from "./chunk-ORMEWXMH.js";
 
-// src/auth/core/jwt/index.ts
+// src/core/auth/jwt/index.ts
 import { SignJWT, jwtVerify } from "jose";
 var JWTManager = class {
   constructor(config, logger) {
@@ -18,7 +22,7 @@ var JWTManager = class {
    */
   async createAccessToken(payload) {
     try {
-      const jwt = await new SignJWT(payload).setProtectedHeader({ alg: this.config.algorithm }).setIssuedAt().setExpirationTime(this.config.accessTokenExpiry).sign(this.secretKey);
+      const jwt = await new SignJWT(__spreadProps(__spreadValues({}, payload), { tokenType: "access" })).setProtectedHeader({ alg: this.config.algorithm }).setIssuedAt().setExpirationTime(this.config.accessTokenExpiry).sign(this.secretKey);
       this.logger.debug("Access token created successfully", {
         userId: payload.userId,
         expiresIn: this.config.accessTokenExpiry
@@ -92,6 +96,9 @@ var JWTManager = class {
       if (!userId || !payload.email || !payload.role) {
         throw new JWTError("Invalid JWT payload structure", "INVALID_PAYLOAD");
       }
+      if (payload.tokenType !== void 0 && payload.tokenType !== "access") {
+        throw new JWTError("Token is not an access token", "INVALID_PAYLOAD");
+      }
       this.logger.debug("Access token verified successfully", {
         userId
       });

package/dist/{chunk-C4TSQUFA.js → chunk-2SIBG5BG.js}

@@ -1,4 +1,4 @@
-// src/constants/security.ts
+// src/core/constants/security.ts
 var JWT_DEFAULTS = {
   /** 알고리즘 */
   ALGORITHM: "HS256",

package/dist/{chunk-K3OYTLXU.js → chunk-33RIHX7O.js}

@@ -1,8 +1,8 @@
 import {
   OAuthError
-} from "./chunk-AIH3F7JV.js";
+} from "./chunk-5GWGARXI.js";
 
-// src/auth/core/oauth/providers/meta.ts
+// src/core/auth/oauth/providers/meta.ts
 var META_GRAPH_VERSION = "v25.0";
 var MetaOAuthProvider = class {
   constructor() {
@@ -33,7 +33,11 @@ var MetaOAuthProvider = class {
       const errorData = await response.text();
       throw new OAuthError(`Meta token exchange failed: ${errorData}`, "TOKEN_EXCHANGE_FAILED");
     }
-    return response.json();
+    const data = await response.json();
+    if (!data.access_token) {
+      throw new OAuthError("Invalid Meta response: missing access_token", "INVALID_RESPONSE");
+    }
+    return data;
   }
   async getUserInfo(accessToken) {
     var _a, _b, _c, _d;
@@ -53,6 +57,8 @@ var MetaOAuthProvider = class {
       email: data.email,
       name: (_a = data.name) != null ? _a : null,
       image: (_d = (_c = (_b = data.picture) == null ? void 0 : _b.data) == null ? void 0 : _c.url) != null ? _d : null,
+      // Graph API는 이메일 검증 신호를 제공하지 않음 → 존재만으로 true.
+      // Microsoft(email_verified)/Kakao(is_email_verified) 같은 strict 검증 불가(provider 한계).
       emailVerified: !!data.email
     };
   }

package/dist/{chunk-EUQATJLI.js → chunk-4ETAGZIT.js}

@@ -1,4 +1,4 @@
-// src/utils/type-guards.ts
+// src/core/utils/type-guards.ts
 function isNotNull(value) {
   return value !== null;
 }

package/dist/{chunk-RJUVBBZG.js → chunk-4IQWQSEV.js}

@@ -1,12 +1,12 @@
 import {
   cn
-} from "./chunk-62FLBG6B.js";
+} from "./chunk-4K76HG4V.js";
 import {
   __objRest,
   __spreadValues
 } from "./chunk-ORMEWXMH.js";
 
-// src/components/ui/Input.tsx
+// src/react/components/ui/Input.tsx
 import { jsx } from "react/jsx-runtime";
 function Input(_a) {
   var _b = _a, { className, type } = _b, props = __objRest(_b, ["className", "type"]);

package/dist/{chunk-LG6GH4V7.js → chunk-4K27YLAE.js}

@@ -1,11 +1,11 @@
 import {
   logger
-} from "./chunk-NOAU2JG7.js";
+} from "./chunk-KG65BFPK.js";
 import {
   __spreadValues
 } from "./chunk-ORMEWXMH.js";
 
-// src/geolocation/batch-processor.ts
+// src/core/geolocation/batch-processor.ts
 var BatchProcessor = class {
   constructor(config) {
     this.config = __spreadValues({

package/dist/{chunk-62FLBG6B.js → chunk-4K76HG4V.js}

@@ -1,4 +1,4 @@
-// src/utils/client/client-utils.ts
+// src/react/utils/client-utils.ts
 import { clsx } from "clsx";
 import { twMerge } from "tailwind-merge";
 function cn(...inputs) {

package/dist/{chunk-LRRQ54YJ.js → chunk-4KJZRI74.js}

@@ -1,8 +1,8 @@
 import {
   logger
-} from "./chunk-NOAU2JG7.js";
+} from "./chunk-KG65BFPK.js";
 
-// src/system/utils.ts
+// src/core/system/utils.ts
 import { exec } from "child_process";
 import { promisify } from "util";
 import os from "os";

package/dist/{chunk-JP7FDGGL.js → chunk-4L6OSSSG.js}

@@ -1,20 +1,20 @@
 import {
   getPlatform
-} from "./chunk-LRRQ54YJ.js";
+} from "./chunk-4KJZRI74.js";
 import {
   getGeolocationConfig
-} from "./chunk-LHIVUV7Q.js";
+} from "./chunk-CRJUFA73.js";
 import {
   getAuthConfig
-} from "./chunk-JXACXHRL.js";
+} from "./chunk-KYAHURXN.js";
 import {
   getCommonConfig
-} from "./chunk-WPW4HXW4.js";
+} from "./chunk-PX535BHW.js";
 import {
   getResolvedCacheConfig
-} from "./chunk-MGBNIDTP.js";
+} from "./chunk-GORISA3L.js";
 
-// src/system/environment.ts
+// src/core/system/environment.ts
 import os from "os";
 function checkEnvironmentVariables() {
   const platform = getPlatform();

package/dist/{chunk-2NCTRLVH.js → chunk-4PROUAZ5.js}

@@ -1,31 +1,31 @@
 import {
   initRequestMiddleware
-} from "./chunk-62Q7DN5G.js";
+} from "./chunk-VC2E6KYQ.js";
 import {
   MiddlewareChain
-} from "./chunk-YTXCKIWE.js";
+} from "./chunk-UMRKMF3E.js";
 import {
   rateLimitMiddleware
-} from "./chunk-NQUYNPSD.js";
+} from "./chunk-GDTZMX3L.js";
 import {
   responseLoggerMiddleware
-} from "./chunk-NW3JIRFK.js";
+} from "./chunk-GJO2MPC3.js";
 import {
   securityMiddleware
-} from "./chunk-TLBY3DUK.js";
+} from "./chunk-Q66VOVGN.js";
 import {
   adminMiddleware,
   authMiddleware,
   optionalAuthMiddleware
-} from "./chunk-B7QWZ5SW.js";
+} from "./chunk-6TRD7ZW4.js";
 import {
   corsMiddleware
-} from "./chunk-A6FKWYO2.js";
+} from "./chunk-54REXMTE.js";
 import {
   errorHandlerMiddleware
-} from "./chunk-PT4FA7U4.js";
+} from "./chunk-W7PEL3DX.js";
 
-// src/middleware/wrappers.ts
+// src/next/middleware/wrappers.ts
 function withPublicApi(handler) {
   const chain = new MiddlewareChain().use(errorHandlerMiddleware).use(securityMiddleware).use(corsMiddleware).use(initRequestMiddleware).use(rateLimitMiddleware.api).use(responseLoggerMiddleware);
   return async (request, props) => {

package/dist/{chunk-A6FKWYO2.js → chunk-54REXMTE.js}

@@ -1,11 +1,11 @@
 import {
   getCorsConfig
-} from "./chunk-WJWCTCWZ.js";
+} from "./chunk-7ZO5UNTJ.js";
 import {
   logger
-} from "./chunk-NOAU2JG7.js";
+} from "./chunk-KG65BFPK.js";
 
-// src/middleware/cors.ts
+// src/next/middleware/cors.ts
 import { NextResponse } from "next/server";
 var DEFAULT_METHODS = "GET, POST, PUT, DELETE, PATCH, OPTIONS";
 var DEFAULT_HEADERS = "Content-Type, Authorization, X-Requested-With, X-API-Key";
@@ -25,15 +25,15 @@ function createCorsMiddleware(config) {
       const response2 = new NextResponse(null, { status: 204 });
       if (origin && allowedOrigins.includes(origin)) {
         response2.headers.set("Access-Control-Allow-Origin", origin);
+        if (allowCredentials) {
+          response2.headers.set("Access-Control-Allow-Credentials", "true");
+        }
       } else if (allowedOrigins.includes("*")) {
         response2.headers.set("Access-Control-Allow-Origin", "*");
       }
       response2.headers.set("Access-Control-Allow-Methods", allowedMethods);
       response2.headers.set("Access-Control-Allow-Headers", allowedHeaders);
       response2.headers.set("Access-Control-Max-Age", String(maxAge));
-      if (allowCredentials) {
-        response2.headers.set("Access-Control-Allow-Credentials", "true");
-      }
       return response2;
     }
     const response = await next();
@@ -44,9 +44,6 @@ function createCorsMiddleware(config) {
       }
     } else if (allowedOrigins.includes("*")) {
       response.headers.set("Access-Control-Allow-Origin", "*");
-      if (allowCredentials) {
-        response.headers.set("Access-Control-Allow-Credentials", "true");
-      }
     }
     response.headers.set("Access-Control-Allow-Methods", allowedMethods);
     response.headers.set("Access-Control-Allow-Headers", allowedHeaders);

package/dist/{chunk-AIH3F7JV.js → chunk-5GWGARXI.js}

@@ -1,4 +1,4 @@
-// src/auth/errors/index.ts
+// src/core/auth/errors/index.ts
 var AuthError = class _AuthError extends Error {
   constructor(message, code, statusCode = 400) {
     super(message);

package/dist/{chunk-7VTBRP5M.js → chunk-5S7M2AJL.js}

@@ -1,11 +1,11 @@
 import {
   getErrorMessage
-} from "./chunk-JNJALNRR.js";
+} from "./chunk-7WG7XPXC.js";
 import {
   getErrorCategory
-} from "./chunk-SNTLJ646.js";
+} from "./chunk-XQIAXMRY.js";
 
-// src/error/friendly-messages-v2.ts
+// src/core/error/friendly-messages-v2.ts
 var categoryIcons = {
   validation: "\u26A0\uFE0F",
   auth: "\u{1F510}",

package/dist/{chunk-TLZJQR26.js → chunk-65HVR74O.js}

@@ -1,8 +1,8 @@
 import {
   OAuthError
-} from "./chunk-AIH3F7JV.js";
+} from "./chunk-5GWGARXI.js";
 
-// src/auth/core/oauth/providers/kakao.ts
+// src/core/auth/oauth/providers/kakao.ts
 var KakaoOAuthProvider = class {
   constructor() {
     this.name = "kakao";

package/dist/chunk-6HQ5JHL4.js

@@ -0,0 +1,14 @@
+// src/core/error/extract-error-info.ts
+function extractErrorInfo(error) {
+  if (error instanceof Error) {
+    if ("code" in error && typeof error.code === "number" && error.code >= 1e4) {
+      return { code: error.code, message: error.message, stack: error.stack };
+    }
+    return { code: 50001, message: error.message, stack: error.stack };
+  }
+  return { code: 50001, message: String(error) };
+}
+
+export {
+  extractErrorInfo
+};

package/dist/{chunk-K25ICPU4.js → chunk-6J2EJVND.js}

@@ -1,4 +1,4 @@
-// src/config/warn.ts
+// src/core/config/warn.ts
 function configWarn(module, message) {
   console.warn(`[${module}] ${message}`);
 }

package/dist/{chunk-G26T2PRQ.js → chunk-6JXHXIEH.js}

@@ -1,12 +1,12 @@
 import {
   PasswordHasher,
   PasswordValidator
-} from "./chunk-IHXRF3BH.js";
+} from "./chunk-MNYVAEXK.js";
 import {
   __spreadValues
 } from "./chunk-ORMEWXMH.js";
 
-// src/auth/core/password/client-helper.ts
+// src/core/auth/password/client-helper.ts
 var DEFAULT_PASSWORD_CONFIG = {
   minLength: 8,
   maxLength: 128,