@withwiz/toolkit 0.6.5 → 0.7.1

package/dist/{chunk-WBWDJUF5.js → chunk-G4SNTXJ3.js}

@@ -1,17 +1,22 @@
 import {
   OAuthCallbackService
-} from "./chunk-Q26CQW7T.js";
+} from "./chunk-BBE4RXR7.js";
 import {
   OAuthManager
-} from "./chunk-57HPJEZB.js";
+} from "./chunk-UQ3Z3ZAF.js";
+import {
+  OAUTH_STATE_COOKIE,
+  clearOAuthStateCookie,
+  validateOAuthState
+} from "./chunk-JLRMET4V.js";
 import {
   setTokenCookies
-} from "./chunk-2O72OV5X.js";
+} from "./chunk-RJGYONRO.js";
 import {
   AuthError
-} from "./chunk-AIH3F7JV.js";
+} from "./chunk-5GWGARXI.js";
 
-// src/auth/handlers/oauth-callback.handler.ts
+// src/next/auth-handlers/oauth-callback.handler.ts
 import { NextResponse } from "next/server";
 function createOAuthCallbackHandler(options) {
   const { dependencies, jwt, oauth, hooks, cookie, urls } = options;
@@ -24,7 +29,12 @@ function createOAuthCallbackHandler(options) {
     logger: dependencies.logger
   });
   return async (request) => {
-    var _a, _b, _c, _d;
+    var _a, _b, _c, _d, _e;
+    const stateCookieOpts = {
+      secure: cookie == null ? void 0 : cookie.secure,
+      sameSite: cookie == null ? void 0 : cookie.sameSite,
+      domain: cookie == null ? void 0 : cookie.domain
+    };
     try {
       const url = new URL(request.url);
       const code = url.searchParams.get("code");
@@ -32,6 +42,15 @@ function createOAuthCallbackHandler(options) {
       if (!code || !provider || !(oauth == null ? void 0 : oauth[provider])) {
         return NextResponse.json({ success: false, error: "Invalid callback" }, { status: 400 });
       }
+      const stateParam = url.searchParams.get("state");
+      const stateCookie = (_b = request.cookies.get(OAUTH_STATE_COOKIE)) == null ? void 0 : _b.value;
+      if (!validateOAuthState(stateCookie, stateParam)) {
+        const res = NextResponse.json(
+          { success: false, error: "Invalid OAuth state" },
+          { status: 400 }
+        );
+        return clearOAuthStateCookie(res, stateCookieOpts);
+      }
       const providers = {};
       for (const [name, config] of Object.entries(oauth)) {
         providers[name] = config;
@@ -41,12 +60,15 @@ function createOAuthCallbackHandler(options) {
       }, warn() {
       }, error() {
       } };
-      const manager = new OAuthManager({ providers }, (_b = dependencies.logger) != null ? _b : noopLogger);
+      const manager = new OAuthManager({ providers }, (_c = dependencies.logger) != null ? _c : noopLogger);
       const accessToken = await manager.exchangeCodeForToken(provider, code);
       const userInfo = await manager.getUserInfo(provider, accessToken);
       if (hooks == null ? void 0 : hooks.allowEmail) {
         const allowed = await hooks.allowEmail(userInfo.email);
-        if (!allowed) return NextResponse.json({ success: false, error: "Email not allowed" }, { status: 403 });
+        if (!allowed) {
+          const res = NextResponse.json({ success: false, error: "Email not allowed" }, { status: 403 });
+          return clearOAuthStateCookie(res, stateCookieOpts);
+        }
       }
       const result = await callbackService.handleCallback({
         provider,
@@ -62,18 +84,20 @@ function createOAuthCallbackHandler(options) {
         if (redirect) {
           const response2 = NextResponse.redirect(redirect);
           setTokenCookies(response2, result.tokens, { secure: cookie == null ? void 0 : cookie.secure });
-          return response2;
+          return clearOAuthStateCookie(response2, stateCookieOpts);
         }
       }
-      const redirectUrl = (_d = (_c = urls.afterOAuth) != null ? _c : urls.afterLogin) != null ? _d : "/";
+      const redirectUrl = (_e = (_d = urls.afterOAuth) != null ? _d : urls.afterLogin) != null ? _e : "/";
       const response = NextResponse.redirect(new URL(redirectUrl, urls.baseUrl));
       setTokenCookies(response, result.tokens, { secure: cookie == null ? void 0 : cookie.secure });
-      return response;
+      return clearOAuthStateCookie(response, stateCookieOpts);
     } catch (error) {
       if (error instanceof AuthError) {
-        return NextResponse.json({ success: false, error: error.message }, { status: error.statusCode });
+        const res2 = NextResponse.json({ success: false, error: error.message }, { status: error.statusCode });
+        return clearOAuthStateCookie(res2, stateCookieOpts);
       }
-      return NextResponse.json({ success: false, error: "OAuth callback failed" }, { status: 500 });
+      const res = NextResponse.json({ success: false, error: "OAuth callback failed" }, { status: 500 });
+      return clearOAuthStateCookie(res, stateCookieOpts);
     }
   };
 }

package/dist/{chunk-NQUYNPSD.js → chunk-GDTZMX3L.js}

@@ -1,14 +1,14 @@
 import {
   AppError
-} from "./chunk-EOEMOXNT.js";
+} from "./chunk-ATAQRXTH.js";
 import {
   ERROR_CODES
-} from "./chunk-SNTLJ646.js";
+} from "./chunk-XQIAXMRY.js";
 import {
   logger
-} from "./chunk-NOAU2JG7.js";
+} from "./chunk-KG65BFPK.js";
 
-// src/middleware/rate-limit.ts
+// src/next/middleware/rate-limit.ts
 var GLOBAL_KEY = "__withwiz_rateLimitAdapter__";
 var GLOBAL_WARN_KEY = "__withwiz_rateLimitWarningLogged__";
 function _getAdapter() {

package/dist/{chunk-RVL5ROWQ.js → chunk-GF3DKZIW.js}

@@ -1,8 +1,8 @@
 import {
   OAuthError
-} from "./chunk-AIH3F7JV.js";
+} from "./chunk-5GWGARXI.js";
 
-// src/auth/core/oauth/providers/google.ts
+// src/core/auth/oauth/providers/google.ts
 var GoogleOAuthProvider = class {
   constructor() {
     this.name = "google";

package/dist/{chunk-G2CKET5G.js → chunk-GH3U4WRE.js}

@@ -1,4 +1,4 @@
-// src/auth/types/index.ts
+// src/core/auth/types/index.ts
 var OAUTH_PROVIDERS = {
   GOOGLE: "google",
   GITHUB: "github",

package/dist/{chunk-NW3JIRFK.js → chunk-GJO2MPC3.js}

@@ -2,9 +2,9 @@ import {
   logApiRequest,
   logApiResponse,
   logger
-} from "./chunk-NOAU2JG7.js";
+} from "./chunk-KG65BFPK.js";
 
-// src/middleware/response-logger.ts
+// src/next/middleware/response-logger.ts
 var responseLoggerMiddleware = async (context, next) => {
   const startTime = context.startTime || Date.now();
   try {

package/dist/{chunk-LGAV5UU2.js → chunk-GJYHMHTU.js}

@@ -1,12 +1,12 @@
 import {
   BaseGeoIPProvider,
   truncateString
-} from "./chunk-AHDPGRXS.js";
+} from "./chunk-CCNZFZW6.js";
 import {
   getGeolocationConfig
-} from "./chunk-LHIVUV7Q.js";
+} from "./chunk-CRJUFA73.js";
 
-// src/geolocation/providers/ipgeolocation-provider.ts
+// src/core/geolocation/providers/ipgeolocation-provider.ts
 var IPGeolocationProvider = class extends BaseGeoIPProvider {
   constructor() {
     super(...arguments);

package/dist/{chunk-MGBNIDTP.js → chunk-GORISA3L.js}

@@ -1,18 +1,18 @@
 import {
   ConfigurationError
-} from "./chunk-2QH66EVQ.js";
+} from "./chunk-F3R3UYBF.js";
 import {
   CACHE_DURATION_DEFAULTS,
   CACHE_FALLBACK_DEFAULTS,
   CACHE_HEALTH_DEFAULTS,
   CACHE_TTL_DEFAULTS,
   INMEMORY_CACHE_DEFAULTS
-} from "./chunk-57W32BFZ.js";
+} from "./chunk-ERFD6YAW.js";
 import {
   __spreadValues
 } from "./chunk-ORMEWXMH.js";
 
-// src/cache/config.ts
+// src/core/cache/config.ts
 function initializeCache(input) {
   var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l, _m, _n, _o, _p, _q, _r, _s, _t, _u, _v, _w, _x, _y, _z, _A, _B, _C, _D, _E, _F, _G, _H, _I, _J, _K, _L, _M, _N, _O, _P, _Q, _R, _S, _T, _U, _V, _W, _X, _Y, _Z, __;
   (_a = globalThis.__withwiz_config) != null ? _a : globalThis.__withwiz_config = {};
@@ -89,6 +89,10 @@ function getResolvedCacheConfig() {
   }
   return cache;
 }
+function isCacheConfigInitialized() {
+  var _a;
+  return !!((_a = globalThis.__withwiz_config) == null ? void 0 : _a.cache);
+}
 function resetCache() {
   if (globalThis.__withwiz_config) delete globalThis.__withwiz_config.cache;
 }
@@ -96,5 +100,6 @@ function resetCache() {
 export {
   initializeCache,
   getResolvedCacheConfig,
+  isCacheConfigInitialized,
   resetCache
 };

package/dist/{chunk-WDUFQFDP.js → chunk-GPOSTBDQ.js}

@@ -1,13 +1,13 @@
 import {
   cn
-} from "./chunk-62FLBG6B.js";
+} from "./chunk-4K76HG4V.js";
 import {
   __objRest,
   __spreadProps,
   __spreadValues
 } from "./chunk-ORMEWXMH.js";
 
-// src/components/ui/Select.tsx
+// src/react/components/ui/Select.tsx
 import * as SelectPrimitive from "@radix-ui/react-select";
 import { CheckIcon, ChevronDownIcon, ChevronUpIcon } from "lucide-react";
 import { jsx, jsxs } from "react/jsx-runtime";

package/dist/{chunk-VB64KFBD.js → chunk-GSSHHVHF.js}

@@ -1,9 +1,12 @@
 import {
   OAuthError
-} from "./chunk-AIH3F7JV.js";
+} from "./chunk-5GWGARXI.js";
 
-// src/auth/core/oauth/providers/microsoft.ts
-import { decodeJwt } from "jose";
+// src/core/auth/oauth/providers/microsoft.ts
+import { jwtVerify, createRemoteJWKSet } from "jose";
+var MS_JWKS = createRemoteJWKSet(
+  new URL("https://login.microsoftonline.com/common/discovery/v2.0/keys")
+);
 var MicrosoftOAuthProvider = class {
   constructor() {
     this.name = "microsoft";
@@ -49,8 +52,7 @@ var MicrosoftOAuthProvider = class {
     if (!data.id_token) {
       throw new OAuthError("Missing id_token in Microsoft token response", "INVALID_RESPONSE");
     }
-    const claims = decodeMicrosoftClaims(data.id_token);
-    assertMicrosoftClaims(claims, config.clientId);
+    await verifyMicrosoftClaims(data.id_token, config.clientId);
     return {
       access_token: data.id_token,
       token_type: (_a = data.token_type) != null ? _a : "Bearer",
@@ -61,8 +63,7 @@ var MicrosoftOAuthProvider = class {
   }
   async getUserInfo(idToken) {
     var _a, _b;
-    const claims = decodeMicrosoftClaims(idToken);
-    assertMicrosoftClaims(claims);
+    const claims = await verifyMicrosoftClaims(idToken);
     return {
       id: claims.oid,
       email: (_a = claims.email) != null ? _a : claims.preferred_username,
@@ -72,12 +73,23 @@ var MicrosoftOAuthProvider = class {
     };
   }
 };
-function decodeMicrosoftClaims(token) {
+async function verifyMicrosoftClaims(token, expectedAud) {
+  let claims;
   try {
-    return decodeJwt(token);
-  } catch (e) {
-    throw new OAuthError("Invalid Microsoft id_token: malformed JWT", "INVALID_RESPONSE");
+    const { payload } = await jwtVerify(token, MS_JWKS, { algorithms: ["RS256"] });
+    claims = payload;
+  } catch (err) {
+    const code = err == null ? void 0 : err.code;
+    if (code === "ERR_JWT_EXPIRED") {
+      throw new OAuthError("Invalid Microsoft id_token: expired", "INVALID_RESPONSE");
+    }
+    throw new OAuthError(
+      "Invalid Microsoft id_token: signature verification failed",
+      "INVALID_RESPONSE"
+    );
   }
+  assertMicrosoftClaims(claims, expectedAud);
+  return claims;
 }
 function assertMicrosoftClaims(claims, expectedAud) {
   if (!claims.iss || !/^https:\/\/login\.microsoftonline\.com\/(?!common\/|consumers\/|organizations\/)[\w-]+\/v2\.0$/.test(claims.iss)) {

package/dist/{chunk-N54KGJPU.js → chunk-GSUCBWML.js}

@@ -2,7 +2,7 @@ import {
   __spreadValues
 } from "./chunk-ORMEWXMH.js";
 
-// src/utils/sanitizer.ts
+// src/core/utils/sanitizer.ts
 function sanitizeHtml(input) {
   if (!input || typeof input !== "string") {
     return "";

package/dist/{chunk-LNV2E4I6.js → chunk-GTCCVI45.js}

@@ -1,4 +1,4 @@
-// src/constants/validation.ts
+// src/core/constants/validation.ts
 var PASSWORD = {
   /** 최소 길이 */
   MIN_LENGTH: 8,

package/dist/{chunk-GBLNXNEH.js → chunk-HIZ7USIF.js}

@@ -1,8 +1,8 @@
 import {
   OAuthError
-} from "./chunk-AIH3F7JV.js";
+} from "./chunk-5GWGARXI.js";
 
-// src/auth/core/oauth/providers/github.ts
+// src/core/auth/oauth/providers/github.ts
 var GitHubOAuthProvider = class {
   constructor() {
     this.name = "github";

package/dist/{chunk-3LVCK2NQ.js → chunk-HX4MPCVV.js}

@@ -1,19 +1,19 @@
 import {
   getCacheManager,
   getEffectiveCacheBackend
-} from "./chunk-YX3XMDDI.js";
+} from "./chunk-B6L5XV7O.js";
 import {
   logger
-} from "./chunk-NOAU2JG7.js";
+} from "./chunk-KG65BFPK.js";
 import {
   getCacheConfig,
   getCacheTTL
-} from "./chunk-F3NGZYL2.js";
+} from "./chunk-MREY2W7N.js";
 import {
   isCacheEnabled
-} from "./chunk-OFSPZUQD.js";
+} from "./chunk-7F5X6F7X.js";
 
-// src/cache/cache-wrapper.ts
+// src/core/cache/cache-wrapper.ts
 function getCacheBackendLabel() {
   const backend = getEffectiveCacheBackend();
   switch (backend) {

package/dist/{chunk-CVFVL5FL.js → chunk-I4NT6G2T.js}

@@ -1,12 +1,12 @@
 import {
   runCommand,
   runMacCommand
-} from "./chunk-LRRQ54YJ.js";
+} from "./chunk-4KJZRI74.js";
 import {
   logger
-} from "./chunk-NOAU2JG7.js";
+} from "./chunk-KG65BFPK.js";
 
-// src/system/cpu.ts
+// src/core/system/cpu.ts
 import os from "os";
 async function getCpuInfo() {
   try {

package/dist/{chunk-LMQSV5UK.js → chunk-IKZB26SK.js}

@@ -1,11 +1,11 @@
 import {
   configWarn
-} from "./chunk-K25ICPU4.js";
+} from "./chunk-6J2EJVND.js";
 import {
   ConfigurationError
-} from "./chunk-2QH66EVQ.js";
+} from "./chunk-F3R3UYBF.js";
 
-// src/logger/config.ts
+// src/core/logger/config.ts
 function initializeLogger(config) {
   var _a, _b, _c, _d, _e, _f;
   (_a = globalThis.__withwiz_config) != null ? _a : globalThis.__withwiz_config = {};

package/dist/{chunk-TFZOOP3V.js → chunk-IMAFMUZ7.js}

@@ -1,11 +1,11 @@
 import {
   PasswordResetService
-} from "./chunk-WC2IYFGC.js";
+} from "./chunk-N5VOFGF3.js";
 import {
   AuthError
-} from "./chunk-AIH3F7JV.js";
+} from "./chunk-5GWGARXI.js";
 
-// src/auth/handlers/reset-password.handler.ts
+// src/next/auth-handlers/reset-password.handler.ts
 import { NextResponse } from "next/server";
 import { z } from "zod";
 var schema = z.object({

package/dist/{chunk-QXPMO2CO.js → chunk-IOUNOHP7.js}

@@ -1,17 +1,17 @@
 import {
   AppError
-} from "./chunk-EOEMOXNT.js";
+} from "./chunk-ATAQRXTH.js";
 import {
   ERROR_CODES,
   formatErrorMessage
-} from "./chunk-SNTLJ646.js";
+} from "./chunk-XQIAXMRY.js";
 import {
   logApiRequest,
   logApiResponse,
   logger
-} from "./chunk-NOAU2JG7.js";
+} from "./chunk-KG65BFPK.js";
 
-// src/utils/error-processor.ts
+// src/next/utils/error-processor.ts
 import { NextResponse } from "next/server";
 import { z } from "zod";
 var PRISMA_ERROR_MAP = {

package/dist/{chunk-IJEZ7G7S.js → chunk-IRUFNC4L.js}

@@ -1,12 +1,12 @@
 import {
   cn
-} from "./chunk-62FLBG6B.js";
+} from "./chunk-4K76HG4V.js";
 import {
   __objRest,
   __spreadValues
 } from "./chunk-ORMEWXMH.js";
 
-// src/components/ui/Label.tsx
+// src/react/components/ui/Label.tsx
 import { jsx } from "react/jsx-runtime";
 function Label(_a) {
   var _b = _a, { className } = _b, props = __objRest(_b, ["className"]);

package/dist/{chunk-YJWLWUFK.js → chunk-J2MAXMIP.js}

@@ -1,8 +1,8 @@
 import {
   cn
-} from "./chunk-62FLBG6B.js";
+} from "./chunk-4K76HG4V.js";
 
-// src/components/ui/Pagination.tsx
+// src/react/components/ui/Pagination.tsx
 import { ChevronLeft, ChevronRight, MoreHorizontal } from "lucide-react";
 import { jsx, jsxs } from "react/jsx-runtime";
 function Pagination({ children, className }) {

package/dist/{chunk-ZG2XGO44.js → chunk-J5NLAZV2.js}

@@ -1,15 +1,15 @@
 import {
   logger
-} from "./chunk-NOAU2JG7.js";
+} from "./chunk-KG65BFPK.js";
 import {
   DEFAULT_INMEMORY_CONFIG
-} from "./chunk-SS56XFLI.js";
+} from "./chunk-O4L6RI5S.js";
 import {
   __spreadProps,
   __spreadValues
 } from "./chunk-ORMEWXMH.js";
 
-// src/cache/inmemory-cache-manager.ts
+// src/core/cache/inmemory-cache-manager.ts
 var InMemoryCacheManager = class _InMemoryCacheManager {
   constructor(prefix, config) {
     this.accessOrder = [];

package/dist/{chunk-QOKDGW3F.js → chunk-JIYLTMVL.js}

@@ -1,12 +1,11 @@
 import {
   logger
-} from "./chunk-NOAU2JG7.js";
+} from "./chunk-KG65BFPK.js";
 import {
   __spreadValues
 } from "./chunk-ORMEWXMH.js";
 
-// src/utils/csv-export.ts
-import { format as dateFnsFormat } from "date-fns";
+// src/next/utils/csv-export.ts
 import { NextResponse } from "next/server";
 function escapeCsvField(value) {
   if (value === null || value === void 0) {
@@ -117,15 +116,6 @@ var dateFormatter = {
   english: (date) => {
     if (!date) return "";
     return date.toLocaleString("en-US");
-  },
-  /** 커스텀 형식 (date-fns 사용) */
-  custom: (date, formatStr) => {
-    if (!date) return "";
-    try {
-      return dateFnsFormat(date, formatStr);
-    } catch (e) {
-      return date.toISOString();
-    }
   }
 };
 var boolFormatter = {

package/dist/{chunk-XY3ZVORI.js → chunk-JJAIVUVD.js}

@@ -1,24 +1,24 @@
 import {
   AppError
-} from "./chunk-EOEMOXNT.js";
+} from "./chunk-ATAQRXTH.js";
 import {
   ERROR_CODES,
   classifyError,
   formatErrorMessage,
   getHttpStatus
-} from "./chunk-SNTLJ646.js";
+} from "./chunk-XQIAXMRY.js";
 import {
   AuthError
-} from "./chunk-AIH3F7JV.js";
+} from "./chunk-5GWGARXI.js";
 import {
   logger
-} from "./chunk-NOAU2JG7.js";
+} from "./chunk-KG65BFPK.js";
 import {
   __spreadProps,
   __spreadValues
 } from "./chunk-ORMEWXMH.js";
 
-// src/error/error-handler.ts
+// src/next/error/error-handler.ts
 import { NextResponse } from "next/server";
 import { z } from "zod";
 var AUTH_ERROR_CODE_MAP = {

package/dist/{chunk-7UQZH2OH.js → chunk-JKSABDFT.js}

@@ -3,19 +3,19 @@ import {
   isRedisGloballyDisabled,
   notifyRedisError,
   resetRedisGlobalState
-} from "./chunk-UQM35MAO.js";
+} from "./chunk-6TUDUOGC.js";
 import {
   logger
-} from "./chunk-NOAU2JG7.js";
+} from "./chunk-KG65BFPK.js";
 import {
   getENV,
   isCacheEnabled
-} from "./chunk-OFSPZUQD.js";
+} from "./chunk-7F5X6F7X.js";
 import {
   __spreadValues
 } from "./chunk-ORMEWXMH.js";
 
-// src/cache/redis-cache-manager.ts
+// src/core/cache/redis-cache-manager.ts
 var RedisCacheManager = class _RedisCacheManager {
   constructor(prefix) {
     this.prefix = prefix;

package/dist/chunk-JLRMET4V.js

@@ -0,0 +1,49 @@
+// src/core/auth/oauth/state-cookie.ts
+var OAUTH_STATE_COOKIE = "oauth_state";
+var STATE_COOKIE_MAX_AGE = 600;
+function generateOAuthState() {
+  return crypto.randomUUID();
+}
+function buildCookieOptions(options, maxAge) {
+  var _a, _b;
+  const opts = {
+    httpOnly: true,
+    secure: (_a = options.secure) != null ? _a : false,
+    sameSite: (_b = options.sameSite) != null ? _b : "lax",
+    path: "/",
+    maxAge
+  };
+  if (options.domain) opts.domain = options.domain;
+  return opts;
+}
+function setOAuthStateCookie(response, state, options = {}) {
+  response.cookies.set(
+    OAUTH_STATE_COOKIE,
+    state,
+    buildCookieOptions(options, STATE_COOKIE_MAX_AGE)
+  );
+  return response;
+}
+function clearOAuthStateCookie(response, options = {}) {
+  response.cookies.set(
+    OAUTH_STATE_COOKIE,
+    "",
+    buildCookieOptions(options, 0)
+  );
+  return response;
+}
+function validateOAuthState(cookieValue, queryState) {
+  if (typeof cookieValue !== "string" || typeof queryState !== "string") {
+    return false;
+  }
+  if (cookieValue.length === 0 || queryState.length === 0) return false;
+  return cookieValue === queryState;
+}
+
+export {
+  OAUTH_STATE_COOKIE,
+  generateOAuthState,
+  setOAuthStateCookie,
+  clearOAuthStateCookie,
+  validateOAuthState
+};

package/dist/{chunk-GDX3YQGK.js → chunk-JRORMRVN.js}

@@ -1,13 +1,17 @@
 import {
   OAuthManager
-} from "./chunk-57HPJEZB.js";
+} from "./chunk-UQ3Z3ZAF.js";
+import {
+  generateOAuthState,
+  setOAuthStateCookie
+} from "./chunk-JLRMET4V.js";
 
-// src/auth/handlers/oauth-authorize.handler.ts
+// src/next/auth-handlers/oauth-authorize.handler.ts
 import { NextResponse } from "next/server";
 function createOAuthAuthorizeHandler(options) {
   const { oauth } = options;
   return async (request) => {
-    var _a;
+    var _a, _b, _c, _d;
     try {
       const body = await request.json();
       const provider = body.provider;
@@ -24,9 +28,15 @@ function createOAuthAuthorizeHandler(options) {
       }, error() {
       } };
       const manager = new OAuthManager({ providers }, (_a = options.dependencies.logger) != null ? _a : noopLogger);
-      const state = crypto.randomUUID();
+      const state = generateOAuthState();
       const loginUrl = manager.getLoginUrl(provider, state);
-      return NextResponse.json({ success: true, loginUrl, state });
+      const response = NextResponse.json({ success: true, loginUrl, state });
+      setOAuthStateCookie(response, state, {
+        secure: (_b = options.cookie) == null ? void 0 : _b.secure,
+        sameSite: (_c = options.cookie) == null ? void 0 : _c.sameSite,
+        domain: (_d = options.cookie) == null ? void 0 : _d.domain
+      });
+      return response;
     } catch (e) {
       return NextResponse.json({ success: false, error: "OAuth initialization failed" }, { status: 500 });
     }

package/dist/{chunk-XHZ5L4FO.js → chunk-K2PNAQI4.js}

@@ -1,4 +1,4 @@
-// src/error/core/locale-detector.ts
+// src/next/error/locale-detector.ts
 var LocaleDetector = class {
   /**
    * 클라이언트 측 로케일 감지

package/dist/{chunk-NOAU2JG7.js → chunk-KG65BFPK.js}

@@ -1,12 +1,12 @@
 import {
   getLoggerConfig
-} from "./chunk-LMQSV5UK.js";
+} from "./chunk-IKZB26SK.js";
 import {
   __spreadProps,
   __spreadValues
 } from "./chunk-ORMEWXMH.js";
 
-// src/logger/logger.ts
+// src/core/logger/logger.ts
 import fs from "fs";
 import winston from "winston";
 import DailyRotateFile from "winston-daily-rotate-file";