@withwiz/toolkit 0.7.0 → 0.8.0

package/dist/{chunk-TQ3XHHZK.js → chunk-V3WZFUY3.js}

@@ -1,29 +1,29 @@
-import {
-  errorHandlerMiddleware
-} from "./chunk-HKW4JA45.js";
 import {
   initRequestMiddleware
 } from "./chunk-VC2E6KYQ.js";
 import {
   MiddlewareChain
-} from "./chunk-UMRKMF3E.js";
+} from "./chunk-WXOWI7BJ.js";
 import {
   rateLimitMiddleware
-} from "./chunk-Q4XDPK5B.js";
+} from "./chunk-TRGFXIEF.js";
 import {
   responseLoggerMiddleware
-} from "./chunk-GJO2MPC3.js";
+} from "./chunk-LCYDMYZS.js";
 import {
   securityMiddleware
-} from "./chunk-Q66VOVGN.js";
+} from "./chunk-Y4WPEIKW.js";
 import {
   adminMiddleware,
   authMiddleware,
   optionalAuthMiddleware
-} from "./chunk-M5ZYAQBB.js";
+} from "./chunk-XKIBJJA3.js";
 import {
   corsMiddleware
-} from "./chunk-3KYSGBVF.js";
+} from "./chunk-UWOWKOOQ.js";
+import {
+  errorHandlerMiddleware
+} from "./chunk-BRBOGLFT.js";
 
 // src/next/middleware/wrappers.ts
 function withPublicApi(handler) {

package/dist/{chunk-5BBVV2EX.js → chunk-VH57Y5Z4.js}

@@ -1,7 +1,7 @@
 import {
   cache,
   geoCache
-} from "./chunk-4YDBQZ5M.js";
+} from "./chunk-SCAFDDJP.js";
 
 // src/core/cache/cache-invalidation.ts
 var invalidateCache = {

package/dist/{chunk-5S7M2AJL.js → chunk-VWAB4PM7.js}

@@ -1,6 +1,6 @@
 import {
   getErrorMessage
-} from "./chunk-7WG7XPXC.js";
+} from "./chunk-KKZCNF6U.js";
 import {
   getErrorCategory
 } from "./chunk-XQIAXMRY.js";

package/dist/{chunk-AQZPGOEZ.js → chunk-VWKZMGPJ.js}

@@ -1,6 +1,6 @@
 import {
   TokenGenerator
-} from "./chunk-D73ZJQMX.js";
+} from "./chunk-ZZABL54F.js";
 import {
   AuthError
 } from "./chunk-5GWGARXI.js";
@@ -20,12 +20,13 @@ var EmailVerificationService = class {
     } };
   }
   async verify(email, token) {
-    const tokenRecord = await this.tokenRepo.findByEmailAndToken(email, token, "EMAIL_VERIFICATION" /* EMAIL_VERIFICATION */);
+    const hashedToken = TokenGenerator.hash(token);
+    const tokenRecord = await this.tokenRepo.findByEmailAndToken(email, hashedToken, "EMAIL_VERIFICATION" /* EMAIL_VERIFICATION */);
     if (!tokenRecord || tokenRecord.expires < /* @__PURE__ */ new Date()) {
       throw new AuthError("Invalid or expired verification token", "TOKEN_INVALID", 400);
     }
     await this.userRepo.verifyEmail(email);
-    await this.tokenRepo.delete(email, token, "EMAIL_VERIFICATION" /* EMAIL_VERIFICATION */);
+    await this.tokenRepo.delete(email, hashedToken, "EMAIL_VERIFICATION" /* EMAIL_VERIFICATION */);
     this.logger.info("Email verified", { email });
   }
   async resend(email) {
@@ -38,7 +39,7 @@ var EmailVerificationService = class {
     }
     const token = TokenGenerator.generate();
     const expires = new Date(Date.now() + this.tokenExpiryHours * 60 * 60 * 1e3);
-    await this.tokenRepo.create(email, token, "EMAIL_VERIFICATION" /* EMAIL_VERIFICATION */, expires);
+    await this.tokenRepo.create(email, TokenGenerator.hash(token), "EMAIL_VERIFICATION" /* EMAIL_VERIFICATION */, expires);
     await this.emailSender.sendVerificationEmail(email, token);
     this.logger.info("Verification email resent", { email });
   }

package/dist/{chunk-4K27YLAE.js → chunk-VZ2PQA4U.js}

@@ -1,9 +1,9 @@
 import {
   logger
-} from "./chunk-KG65BFPK.js";
+} from "./chunk-QAIN3WNN.js";
 import {
   __spreadValues
-} from "./chunk-ORMEWXMH.js";
+} from "./chunk-N3ETBM74.js";
 
 // src/core/geolocation/batch-processor.ts
 var BatchProcessor = class {

package/dist/{chunk-ZOWEW4GY.js → chunk-WBHX4MJV.js}

@@ -3,10 +3,10 @@ import {
   formatBytesPerSec,
   runCommand,
   runMacCommand
-} from "./chunk-4KJZRI74.js";
+} from "./chunk-KWUOLKDO.js";
 import {
   logger
-} from "./chunk-KG65BFPK.js";
+} from "./chunk-QAIN3WNN.js";
 
 // src/core/system/network.ts
 async function getNetworkInfo() {

package/dist/{chunk-UMRKMF3E.js → chunk-WXOWI7BJ.js}

@@ -1,9 +1,9 @@
 import {
   logger
-} from "./chunk-KG65BFPK.js";
+} from "./chunk-QAIN3WNN.js";
 import {
   __spreadValues
-} from "./chunk-ORMEWXMH.js";
+} from "./chunk-N3ETBM74.js";
 
 // src/next/middleware/middleware-chain.ts
 var MiddlewareChain = class {

package/dist/chunk-XAGPZLRK.js

@@ -0,0 +1,106 @@
+import {
+  JWTService
+} from "./chunk-LWHLB2Y6.js";
+import {
+  AuthError
+} from "./chunk-5GWGARXI.js";
+import {
+  JWT_DEFAULTS,
+  ROLE_DEFAULTS
+} from "./chunk-7YWUKMZD.js";
+
+// src/core/auth/services/token-refresh.service.ts
+import { randomUUID } from "crypto";
+var TokenRefreshService = class {
+  constructor(config) {
+    var _a, _b, _c;
+    this.userRepo = config.userRepository;
+    this.jwtService = new JWTService({
+      secret: config.jwtSecret,
+      accessTokenExpiry: (_a = config.accessTokenExpiry) != null ? _a : JWT_DEFAULTS.DEFAULT_ACCESS_TOKEN_EXPIRES,
+      refreshTokenExpiry: (_b = config.refreshTokenExpiry) != null ? _b : JWT_DEFAULTS.DEFAULT_REFRESH_TOKEN_EXPIRES,
+      algorithm: JWT_DEFAULTS.ALGORITHM
+    }, config.logger);
+    this.isTokenBlacklisted = config.isTokenBlacklisted;
+    this.store = config.refreshTokenStore;
+    this.logger = (_c = config.logger) != null ? _c : { debug() {
+    }, info() {
+    }, warn() {
+    }, error() {
+    } };
+  }
+  async refresh(refreshToken) {
+    var _a, _b, _c;
+    if (this.isTokenBlacklisted) {
+      const blacklisted = await this.isTokenBlacklisted(refreshToken);
+      if (blacklisted) {
+        throw new AuthError("Token has been revoked", "TOKEN_REVOKED", 401);
+      }
+    }
+    const { userId, jti, familyId } = await this.jwtService.verifyRefreshToken(refreshToken);
+    if (this.store) {
+      if (familyId && await this.store.isFamilyRevoked(familyId)) {
+        throw new AuthError("Token has been revoked", "TOKEN_REVOKED", 401);
+      }
+      if (jti && await this.store.isUsed(jti)) {
+        if (familyId) await this.store.revokeFamily(familyId);
+        this.logger.warn("Refresh token reuse detected", { userId, jti, familyId });
+        throw new AuthError("Refresh token reuse detected", "TOKEN_REUSE_DETECTED", 401);
+      }
+    }
+    const user = await this.userRepo.findById(userId);
+    if (!user) {
+      throw new AuthError("User not found", "USER_NOT_FOUND", 401);
+    }
+    if (user.isActive === false) {
+      throw new AuthError("Account is disabled", "ACCOUNT_DISABLED", 403);
+    }
+    const role = (_a = user.role) != null ? _a : ROLE_DEFAULTS.DEFAULT_ROLE;
+    const accessToken = await this.jwtService.createAccessToken({
+      id: user.id,
+      userId: user.id,
+      email: user.email,
+      role,
+      emailVerified: user.emailVerified
+    });
+    if (!this.store) {
+      return { accessToken, user: { id: user.id, email: user.email, role } };
+    }
+    const family = familyId != null ? familyId : randomUUID();
+    if (jti) {
+      await this.store.markUsed(jti, { familyId: family, userId });
+    }
+    const newJti = randomUUID();
+    const newRefreshToken = await this.jwtService.createRefreshToken(userId, {
+      jti: newJti,
+      familyId: family
+    });
+    await ((_c = (_b = this.store).register) == null ? void 0 : _c.call(_b, { jti: newJti, familyId: family, userId }));
+    return { accessToken, refreshToken: newRefreshToken, user: { id: user.id, email: user.email, role } };
+  }
+  /**
+   * family 전체를 즉시 무효화한다 (stateful 로그아웃 / 탈취 대응).
+   * store 미주입 시 동작하지 않는다.
+   */
+  async revokeFamily(familyId) {
+    if (!this.store) {
+      throw new AuthError("Refresh token store is not configured", "STORE_NOT_CONFIGURED", 500);
+    }
+    await this.store.revokeFamily(familyId);
+  }
+  /**
+   * refresh 토큰을 검증해 그 family 를 무효화한다 (로그아웃 핸들러용).
+   * 토큰에 familyId 가 없으면(레거시) 무효화할 family 가 없으므로 무시한다.
+   */
+  async revokeByToken(refreshToken) {
+    if (!this.store) {
+      throw new AuthError("Refresh token store is not configured", "STORE_NOT_CONFIGURED", 500);
+    }
+    const { familyId } = await this.jwtService.verifyRefreshToken(refreshToken);
+    if (familyId) await this.store.revokeFamily(familyId);
+  }
+};
+
+export {
+  TokenRefreshService
+};

package/dist/{chunk-AWIORJAI.js → chunk-XF3WUF3F.js}

@@ -1,9 +1,9 @@
 import {
   getCacheConfig
-} from "./chunk-TUA5XW5Z.js";
+} from "./chunk-Y6CPPBJI.js";
 import {
   getENV
-} from "./chunk-2QVDB6UO.js";
+} from "./chunk-HV6A6Z5R.js";
 
 // src/core/cache/noop-cache-manager.ts
 var NoopCacheManager = class {

package/dist/{chunk-M5ZYAQBB.js → chunk-XKIBJJA3.js}

@@ -2,17 +2,23 @@ import {
   AppError
 } from "./chunk-ATAQRXTH.js";
 import {
-  logger
-} from "./chunk-KG65BFPK.js";
+  ERROR_CODES
+} from "./chunk-XQIAXMRY.js";
 import {
   JWTManager
-} from "./chunk-2PFSRVVD.js";
+} from "./chunk-LWHLB2Y6.js";
+import {
+  getTokenDeliveryStrategy
+} from "./chunk-63EKUOJH.js";
 import {
   getAuthConfig
-} from "./chunk-UKPMQBU2.js";
+} from "./chunk-N3TCQ5BF.js";
 import {
-  ERROR_CODES
-} from "./chunk-XQIAXMRY.js";
+  ROLE_DEFAULTS
+} from "./chunk-7YWUKMZD.js";
+import {
+  logger
+} from "./chunk-QAIN3WNN.js";
 
 // src/next/middleware/auth.ts
 function setAccessTokenBlacklistChecker(checker) {
@@ -71,8 +77,14 @@ function initializeAuthMiddleware() {
   const jwtManager = getJWTManager();
   return jwtManager !== null;
 }
+function extractRequestToken(context, jwtManager) {
+  return getTokenDeliveryStrategy().extractAccessToken(
+    context.request,
+    (header) => jwtManager.extractTokenFromHeader(header)
+  );
+}
 var authMiddleware = async (context, next) => {
-  var _a, _b, _c, _d, _e;
+  var _a, _b, _c;
   try {
     const jwtManager = getJWTManager();
     if (!jwtManager) {
@@ -84,11 +96,7 @@ var authMiddleware = async (context, next) => {
         "Authentication not configured. Contact administrator."
       );
     }
-    let token = (_b = (_a = context.request.cookies.get("access_token")) == null ? void 0 : _a.value) != null ? _b : null;
-    if (!token) {
-      const authHeader = context.request.headers.get("authorization");
-      token = jwtManager.extractTokenFromHeader(authHeader);
-    }
+    const token = extractRequestToken(context, jwtManager);
     if (!token) {
       throw new AppError(ERROR_CODES.UNAUTHORIZED.code);
     }
@@ -108,16 +116,16 @@ var authMiddleware = async (context, next) => {
     const payload = await jwtManager.verifyAccessToken(token);
     context.user = {
       id: payload.userId,
-      email: (_c = payload.email) != null ? _c : "",
+      email: (_a = payload.email) != null ? _a : "",
       name: void 0,
       // 필요시 DB에서 조회
-      role: (_d = payload.role) != null ? _d : "USER"
+      role: (_b = payload.role) != null ? _b : ROLE_DEFAULTS.DEFAULT_ROLE
     };
   } catch (error) {
     if (error instanceof AppError) {
       throw error;
     }
-    if (error.code === "TOKEN_EXPIRED" || ((_e = error.message) == null ? void 0 : _e.includes("expired"))) {
+    if (error.code === "TOKEN_EXPIRED" || ((_c = error.message) == null ? void 0 : _c.includes("expired"))) {
       throw new AppError(ERROR_CODES.TOKEN_EXPIRED.code, error.message);
     }
     throw new AppError(
@@ -128,15 +136,11 @@ var authMiddleware = async (context, next) => {
   return await next();
 };
 var optionalAuthMiddleware = async (context, next) => {
-  var _a, _b, _c, _d;
+  var _a, _b;
   try {
     const jwtManager = getJWTManager();
     if (jwtManager) {
-      let token = (_b = (_a = context.request.cookies.get("access_token")) == null ? void 0 : _a.value) != null ? _b : null;
-      if (!token) {
-        const authHeader = context.request.headers.get("authorization");
-        token = jwtManager.extractTokenFromHeader(authHeader);
-      }
+      const token = extractRequestToken(context, jwtManager);
       if (token) {
         const tokenChecker = getAccessTokenChecker();
         let isRevoked = false;
@@ -147,9 +151,9 @@ var optionalAuthMiddleware = async (context, next) => {
           const payload = await jwtManager.verifyAccessToken(token);
           context.user = {
             id: payload.userId,
-            email: (_c = payload.email) != null ? _c : "",
+            email: (_a = payload.email) != null ? _a : "",
             name: void 0,
-            role: (_d = payload.role) != null ? _d : "USER"
+            role: (_b = payload.role) != null ? _b : ROLE_DEFAULTS.DEFAULT_ROLE
           };
         }
       }
@@ -169,7 +173,7 @@ function createRoleMiddleware(...allowedRoles) {
     return await next();
   };
 }
-var adminMiddleware = createRoleMiddleware("ADMIN");
+var adminMiddleware = createRoleMiddleware(ROLE_DEFAULTS.ADMIN_ROLE);
 
 export {
   setAccessTokenBlacklistChecker,

package/dist/{chunk-ZLYBY3R4.js → chunk-XTGS6JJB.js}

@@ -1,12 +1,15 @@
 import {
   JWTService
-} from "./chunk-2PFSRVVD.js";
+} from "./chunk-LWHLB2Y6.js";
+import {
+  getTokenDeliveryStrategy
+} from "./chunk-63EKUOJH.js";
 import {
   JWT_DEFAULTS
-} from "./chunk-2SIBG5BG.js";
+} from "./chunk-7YWUKMZD.js";
 import {
   __spreadValues
-} from "./chunk-ORMEWXMH.js";
+} from "./chunk-N3ETBM74.js";
 
 // src/next/auth-handlers/me.handler.ts
 import { NextResponse } from "next/server";
@@ -20,9 +23,11 @@ function createMeHandler(options) {
     algorithm: JWT_DEFAULTS.ALGORITHM
   });
   return async (request) => {
-    var _a2, _b2, _c;
     try {
-      const token = (_c = (_a2 = request.cookies.get("access_token")) == null ? void 0 : _a2.value) != null ? _c : jwtService.extractTokenFromHeader((_b2 = request.headers.get("authorization")) != null ? _b2 : void 0);
+      const token = getTokenDeliveryStrategy(options.tokenDelivery).extractAccessToken(
+        request,
+        (header) => jwtService.extractTokenFromHeader(header != null ? header : void 0)
+      );
       if (!token) {
         return NextResponse.json({ success: false, error: "Not authenticated" }, { status: 401 });
       }

package/dist/{chunk-KCDJIW2F.js → chunk-XXPB4C37.js}

@@ -1,19 +1,19 @@
 import {
   InMemoryCacheManager
-} from "./chunk-J5NLAZV2.js";
+} from "./chunk-JHUWZ6YW.js";
 import {
   isRedisGloballyDisabled,
   notifyRedisError
-} from "./chunk-PRWWB4QY.js";
+} from "./chunk-ZEHNCHIV.js";
 import {
   logger
-} from "./chunk-KG65BFPK.js";
+} from "./chunk-QAIN3WNN.js";
 import {
   getCacheFallbackConfig
-} from "./chunk-2QVDB6UO.js";
+} from "./chunk-HV6A6Z5R.js";
 import {
   __spreadValues
-} from "./chunk-ORMEWXMH.js";
+} from "./chunk-N3ETBM74.js";
 
 // src/core/cache/hybrid-cache-manager.ts
 function getDefaultHybridConfig() {

package/dist/{chunk-LUIYCIF7.js → chunk-Y4ME3Q5K.js}

@@ -1,6 +1,6 @@
 import {
   TokenGenerator
-} from "./chunk-D73ZJQMX.js";
+} from "./chunk-ZZABL54F.js";
 import {
   AuthError
 } from "./chunk-5GWGARXI.js";
@@ -38,7 +38,7 @@ var RegisterService = class {
     if (this.emailVerificationRequired && this.emailSender) {
       const token = TokenGenerator.generate();
       const expires = new Date(Date.now() + 24 * 60 * 60 * 1e3);
-      await this.tokenRepo.create(input.email, token, "EMAIL_VERIFICATION" /* EMAIL_VERIFICATION */, expires);
+      await this.tokenRepo.create(input.email, TokenGenerator.hash(token), "EMAIL_VERIFICATION" /* EMAIL_VERIFICATION */, expires);
       await this.emailSender.sendVerificationEmail(input.email, token);
       verificationSent = true;
     }

package/dist/{chunk-Q66VOVGN.js → chunk-Y4WPEIKW.js}

@@ -1,6 +1,6 @@
 import {
   logger
-} from "./chunk-KG65BFPK.js";
+} from "./chunk-QAIN3WNN.js";
 
 // src/next/middleware/security.ts
 import { NextResponse } from "next/server";

package/dist/{chunk-TUA5XW5Z.js → chunk-Y6CPPBJI.js}

@@ -1,7 +1,7 @@
 import {
   getENV,
   isCacheEnabled
-} from "./chunk-2QVDB6UO.js";
+} from "./chunk-HV6A6Z5R.js";
 
 // src/core/cache/cache-config.ts
 var getCacheConfig = {

package/dist/{chunk-PRWWB4QY.js → chunk-ZEHNCHIV.js}

@@ -1,13 +1,13 @@
 import {
   logger
-} from "./chunk-KG65BFPK.js";
+} from "./chunk-QAIN3WNN.js";
 import {
   getCacheFallbackConfig,
   getConfig,
   getEnv,
   isCacheEnabled,
   validateRedisEnvironment
-} from "./chunk-2QVDB6UO.js";
+} from "./chunk-HV6A6Z5R.js";
 
 // src/core/cache/cache-redis.ts
 import { Redis } from "@upstash/redis";

package/dist/{chunk-D73ZJQMX.js → chunk-ZZABL54F.js}

@@ -10,6 +10,19 @@ var TokenGenerator = class {
   static generate(bytes = 32) {
     return crypto.randomBytes(bytes).toString("hex");
   }
+  /**
+   * 토큰의 SHA-256 해시 (저장용)
+   *
+   * 이메일/URL 로 전달되는 평문 토큰을 DB 에 그대로 저장하지 않기 위해 사용한다.
+   * 저장·조회 시 이 해시값으로 비교하면 DB 유출 시에도 토큰을 복원할 수 없다.
+   * (토큰 자체가 고엔트로피 랜덤이므로 salt 없이 단방향 해시로 충분하다.)
+   *
+   * @param token - 평문 토큰
+   * @returns 64글자 hex SHA-256 다이제스트
+   */
+  static hash(token) {
+    return crypto.createHash("sha256").update(token).digest("hex");
+  }
   /**
    * URL-safe 토큰 생성 (Base64URL)
    *

package/dist/core/auth/config.d.ts

@@ -1,14 +1,17 @@
+export type TokenDelivery = 'cookie' | 'header' | 'hybrid';
 export interface AuthConfig {
     jwtSecret: string;
     accessTokenExpiry?: string;
     refreshTokenExpiry?: string;
     cookieSecure?: boolean;
+    tokenDelivery?: TokenDelivery;
 }
 export interface ResolvedAuthConfig {
     jwtSecret: string;
     accessTokenExpiry: string;
     refreshTokenExpiry: string;
     cookieSecure: boolean;
+    tokenDelivery: TokenDelivery;
 }
 export declare function initializeAuth(config: AuthConfig): void;
 export declare function getAuthConfig(): ResolvedAuthConfig;

package/dist/core/auth/config.js

@@ -2,11 +2,11 @@ import {
   getAuthConfig,
   initializeAuth,
   resetAuth
-} from "../../chunk-UKPMQBU2.js";
+} from "../../chunk-N3TCQ5BF.js";
+import "../../chunk-7YWUKMZD.js";
 import "../../chunk-6J2EJVND.js";
 import "../../chunk-F3R3UYBF.js";
-import "../../chunk-2SIBG5BG.js";
-import "../../chunk-ORMEWXMH.js";
+import "../../chunk-N3ETBM74.js";
 export {
   getAuthConfig,
   initializeAuth,

package/dist/core/auth/email/index.d.ts

@@ -1,3 +1,3 @@
-export { SmtpEmailSender } from './sender';
-export type { SmtpConfig, EmailTemplates } from './sender';
-export { TokenGenerator } from './token-generator';
+export { SmtpEmailSender } from '@withwiz/toolkit/core/auth/email/sender';
+export type { SmtpConfig, EmailTemplates } from '@withwiz/toolkit/core/auth/email/sender';
+export { TokenGenerator } from '@withwiz/toolkit/core/auth/email/token-generator';

package/dist/core/auth/email/index.js

@@ -1,10 +1,10 @@
 import {
   SmtpEmailSender
-} from "../../../chunk-7X2N4VZM.js";
+} from "../../../chunk-ATBYGPLP.js";
 import {
   TokenGenerator
-} from "../../../chunk-D73ZJQMX.js";
-import "../../../chunk-ORMEWXMH.js";
+} from "../../../chunk-ZZABL54F.js";
+import "../../../chunk-N3ETBM74.js";
 export {
   SmtpEmailSender,
   TokenGenerator

package/dist/core/auth/email/sender.d.ts

@@ -1,4 +1,4 @@
-import type { EmailSender } from '../types';
+import type { EmailSender } from '@withwiz/toolkit/core/auth/types';
 export interface SmtpConfig {
     host: string;
     port: number;

package/dist/core/auth/email/sender.js

@@ -1,7 +1,7 @@
 import {
   SmtpEmailSender
-} from "../../../chunk-7X2N4VZM.js";
-import "../../../chunk-ORMEWXMH.js";
+} from "../../../chunk-ATBYGPLP.js";
+import "../../../chunk-N3ETBM74.js";
 export {
   SmtpEmailSender
 };

package/dist/core/auth/email/token-generator.d.ts

@@ -12,6 +12,17 @@ export declare class TokenGenerator {
      * @returns 16진수 문자열 토큰
      */
     static generate(bytes?: number): string;
+    /**
+     * 토큰의 SHA-256 해시 (저장용)
+     *
+     * 이메일/URL 로 전달되는 평문 토큰을 DB 에 그대로 저장하지 않기 위해 사용한다.
+     * 저장·조회 시 이 해시값으로 비교하면 DB 유출 시에도 토큰을 복원할 수 없다.
+     * (토큰 자체가 고엔트로피 랜덤이므로 salt 없이 단방향 해시로 충분하다.)
+     *
+     * @param token - 평문 토큰
+     * @returns 64글자 hex SHA-256 다이제스트
+     */
+    static hash(token: string): string;
     /**
      * URL-safe 토큰 생성 (Base64URL)
      *

package/dist/core/auth/email/token-generator.js

@@ -1,7 +1,7 @@
 import {
   TokenGenerator
-} from "../../../chunk-D73ZJQMX.js";
-import "../../../chunk-ORMEWXMH.js";
+} from "../../../chunk-ZZABL54F.js";
+import "../../../chunk-N3ETBM74.js";
 export {
   TokenGenerator
 };

package/dist/core/auth/errors/index.js

@@ -6,7 +6,7 @@ import {
   OAuthError,
   PasswordError
 } from "../../../chunk-5GWGARXI.js";
-import "../../../chunk-ORMEWXMH.js";
+import "../../../chunk-N3ETBM74.js";
 export {
   AUTH_ERROR_CODES,
   AuthError,

package/dist/core/auth/index.d.ts

@@ -7,14 +7,14 @@
  * @version 1.0.0
  * @description 범용 공유 라이브러리 - Tier 3
  */
-export * from './types';
-export * from './errors';
-export { JWTManager, JWTService } from './jwt';
-export type { JWTConfig, JWTPayload, TokenPair } from './types';
-export { JWTClientManager, getStoredTokens, storeTokens, clearStoredTokens, clearTokens, decodeJWTPayload, isTokenExpired, getTokenRemainingTime, extractUserFromToken, createAuthHeader, createApiHeaders, isTokenExpiringSoon, getTokenExpirationString, getTokenIssuedAtString, } from './jwt/client';
-export { PasswordValidator, PasswordHasher, defaultPasswordSchema, strongPasswordSchema, } from './password';
-export type { PasswordValidationResult, PasswordConfig } from './password';
-export { DEFAULT_PASSWORD_CONFIG, createPasswordValidator, validatePassword, getPasswordStrength, createPasswordSchema, passwordValidator, createPasswordHasher, } from './password/client-helper';
-export { OAuthManager, GoogleOAuthProvider, GitHubOAuthProvider, KakaoOAuthProvider } from './oauth';
-export { TokenGenerator } from './email/token-generator';
-export { PasswordStrength, OAUTH_PROVIDERS, TokenType } from './types';
+export * from '@withwiz/toolkit/core/auth/types';
+export * from '@withwiz/toolkit/core/auth/errors';
+export { JWTManager, JWTService } from '@withwiz/toolkit/core/auth/jwt';
+export type { JWTConfig, JWTPayload, TokenPair } from '@withwiz/toolkit/core/auth/types';
+export { JWTClientManager, getStoredTokens, storeTokens, clearStoredTokens, clearTokens, decodeJWTPayload, isTokenExpired, getTokenRemainingTime, extractUserFromToken, createAuthHeader, createApiHeaders, isTokenExpiringSoon, getTokenExpirationString, getTokenIssuedAtString, } from '@withwiz/toolkit/core/auth/jwt/client';
+export { PasswordValidator, PasswordHasher, defaultPasswordSchema, strongPasswordSchema, BcryptPasswordHasher, Argon2idPasswordHasher, MigratingPasswordHasher, } from '@withwiz/toolkit/core/auth/password';
+export type { PasswordValidationResult, PasswordConfig, IPasswordHasher, BcryptHasherOptions, Argon2idHasherOptions, MigratingHasherOptions, } from '@withwiz/toolkit/core/auth/password';
+export { DEFAULT_PASSWORD_CONFIG, createPasswordValidator, validatePassword, getPasswordStrength, createPasswordSchema, passwordValidator, createPasswordHasher, } from '@withwiz/toolkit/core/auth/password/client-helper';
+export { OAuthManager, GoogleOAuthProvider, GitHubOAuthProvider, KakaoOAuthProvider } from '@withwiz/toolkit/core/auth/oauth';
+export { TokenGenerator } from '@withwiz/toolkit/core/auth/email/token-generator';
+export { PasswordStrength, OAUTH_PROVIDERS, TokenType } from '@withwiz/toolkit/core/auth/types';