@withwiz/toolkit 0.7.1 → 0.9.0

package/dist/{chunk-6TRD7ZW4.js → chunk-XKIBJJA3.js}

@@ -6,13 +6,19 @@ import {
 } from "./chunk-XQIAXMRY.js";
 import {
   JWTManager
-} from "./chunk-2PFSRVVD.js";
+} from "./chunk-LWHLB2Y6.js";
+import {
+  getTokenDeliveryStrategy
+} from "./chunk-63EKUOJH.js";
 import {
   getAuthConfig
-} from "./chunk-KYAHURXN.js";
+} from "./chunk-N3TCQ5BF.js";
+import {
+  ROLE_DEFAULTS
+} from "./chunk-7YWUKMZD.js";
 import {
   logger
-} from "./chunk-KG65BFPK.js";
+} from "./chunk-QAIN3WNN.js";
 
 // src/next/middleware/auth.ts
 function setAccessTokenBlacklistChecker(checker) {
@@ -71,8 +77,14 @@ function initializeAuthMiddleware() {
   const jwtManager = getJWTManager();
   return jwtManager !== null;
 }
+function extractRequestToken(context, jwtManager) {
+  return getTokenDeliveryStrategy().extractAccessToken(
+    context.request,
+    (header) => jwtManager.extractTokenFromHeader(header)
+  );
+}
 var authMiddleware = async (context, next) => {
-  var _a, _b, _c, _d, _e;
+  var _a, _b, _c;
   try {
     const jwtManager = getJWTManager();
     if (!jwtManager) {
@@ -84,11 +96,7 @@ var authMiddleware = async (context, next) => {
         "Authentication not configured. Contact administrator."
       );
     }
-    let token = (_b = (_a = context.request.cookies.get("access_token")) == null ? void 0 : _a.value) != null ? _b : null;
-    if (!token) {
-      const authHeader = context.request.headers.get("authorization");
-      token = jwtManager.extractTokenFromHeader(authHeader);
-    }
+    const token = extractRequestToken(context, jwtManager);
     if (!token) {
       throw new AppError(ERROR_CODES.UNAUTHORIZED.code);
     }
@@ -108,16 +116,16 @@ var authMiddleware = async (context, next) => {
     const payload = await jwtManager.verifyAccessToken(token);
     context.user = {
       id: payload.userId,
-      email: (_c = payload.email) != null ? _c : "",
+      email: (_a = payload.email) != null ? _a : "",
       name: void 0,
       // 필요시 DB에서 조회
-      role: (_d = payload.role) != null ? _d : "USER"
+      role: (_b = payload.role) != null ? _b : ROLE_DEFAULTS.DEFAULT_ROLE
     };
   } catch (error) {
     if (error instanceof AppError) {
       throw error;
     }
-    if (error.code === "TOKEN_EXPIRED" || ((_e = error.message) == null ? void 0 : _e.includes("expired"))) {
+    if (error.code === "TOKEN_EXPIRED" || ((_c = error.message) == null ? void 0 : _c.includes("expired"))) {
       throw new AppError(ERROR_CODES.TOKEN_EXPIRED.code, error.message);
     }
     throw new AppError(
@@ -128,15 +136,11 @@ var authMiddleware = async (context, next) => {
   return await next();
 };
 var optionalAuthMiddleware = async (context, next) => {
-  var _a, _b, _c, _d;
+  var _a, _b;
   try {
     const jwtManager = getJWTManager();
     if (jwtManager) {
-      let token = (_b = (_a = context.request.cookies.get("access_token")) == null ? void 0 : _a.value) != null ? _b : null;
-      if (!token) {
-        const authHeader = context.request.headers.get("authorization");
-        token = jwtManager.extractTokenFromHeader(authHeader);
-      }
+      const token = extractRequestToken(context, jwtManager);
       if (token) {
         const tokenChecker = getAccessTokenChecker();
         let isRevoked = false;
@@ -147,9 +151,9 @@ var optionalAuthMiddleware = async (context, next) => {
           const payload = await jwtManager.verifyAccessToken(token);
           context.user = {
             id: payload.userId,
-            email: (_c = payload.email) != null ? _c : "",
+            email: (_a = payload.email) != null ? _a : "",
             name: void 0,
-            role: (_d = payload.role) != null ? _d : "USER"
+            role: (_b = payload.role) != null ? _b : ROLE_DEFAULTS.DEFAULT_ROLE
           };
         }
       }
@@ -169,7 +173,7 @@ function createRoleMiddleware(...allowedRoles) {
     return await next();
   };
 }
-var adminMiddleware = createRoleMiddleware("ADMIN");
+var adminMiddleware = createRoleMiddleware(ROLE_DEFAULTS.ADMIN_ROLE);
 
 export {
   setAccessTokenBlacklistChecker,

package/dist/{chunk-ZLYBY3R4.js → chunk-XTGS6JJB.js}

@@ -1,12 +1,15 @@
 import {
   JWTService
-} from "./chunk-2PFSRVVD.js";
+} from "./chunk-LWHLB2Y6.js";
+import {
+  getTokenDeliveryStrategy
+} from "./chunk-63EKUOJH.js";
 import {
   JWT_DEFAULTS
-} from "./chunk-2SIBG5BG.js";
+} from "./chunk-7YWUKMZD.js";
 import {
   __spreadValues
-} from "./chunk-ORMEWXMH.js";
+} from "./chunk-N3ETBM74.js";
 
 // src/next/auth-handlers/me.handler.ts
 import { NextResponse } from "next/server";
@@ -20,9 +23,11 @@ function createMeHandler(options) {
     algorithm: JWT_DEFAULTS.ALGORITHM
   });
   return async (request) => {
-    var _a2, _b2, _c;
     try {
-      const token = (_c = (_a2 = request.cookies.get("access_token")) == null ? void 0 : _a2.value) != null ? _c : jwtService.extractTokenFromHeader((_b2 = request.headers.get("authorization")) != null ? _b2 : void 0);
+      const token = getTokenDeliveryStrategy(options.tokenDelivery).extractAccessToken(
+        request,
+        (header) => jwtService.extractTokenFromHeader(header != null ? header : void 0)
+      );
       if (!token) {
         return NextResponse.json({ success: false, error: "Not authenticated" }, { status: 401 });
       }

package/dist/{chunk-BFZR62LZ.js → chunk-XXPB4C37.js}

@@ -1,19 +1,19 @@
+import {
+  InMemoryCacheManager
+} from "./chunk-JHUWZ6YW.js";
 import {
   isRedisGloballyDisabled,
   notifyRedisError
-} from "./chunk-6TUDUOGC.js";
-import {
-  InMemoryCacheManager
-} from "./chunk-J5NLAZV2.js";
+} from "./chunk-ZEHNCHIV.js";
 import {
   logger
-} from "./chunk-KG65BFPK.js";
+} from "./chunk-QAIN3WNN.js";
 import {
   getCacheFallbackConfig
-} from "./chunk-7F5X6F7X.js";
+} from "./chunk-HV6A6Z5R.js";
 import {
   __spreadValues
-} from "./chunk-ORMEWXMH.js";
+} from "./chunk-N3ETBM74.js";
 
 // src/core/cache/hybrid-cache-manager.ts
 function getDefaultHybridConfig() {

package/dist/{chunk-LUIYCIF7.js → chunk-Y4ME3Q5K.js}

@@ -1,6 +1,6 @@
 import {
   TokenGenerator
-} from "./chunk-D73ZJQMX.js";
+} from "./chunk-ZZABL54F.js";
 import {
   AuthError
 } from "./chunk-5GWGARXI.js";
@@ -38,7 +38,7 @@ var RegisterService = class {
     if (this.emailVerificationRequired && this.emailSender) {
       const token = TokenGenerator.generate();
       const expires = new Date(Date.now() + 24 * 60 * 60 * 1e3);
-      await this.tokenRepo.create(input.email, token, "EMAIL_VERIFICATION" /* EMAIL_VERIFICATION */, expires);
+      await this.tokenRepo.create(input.email, TokenGenerator.hash(token), "EMAIL_VERIFICATION" /* EMAIL_VERIFICATION */, expires);
       await this.emailSender.sendVerificationEmail(input.email, token);
       verificationSent = true;
     }

package/dist/{chunk-Q66VOVGN.js → chunk-Y4WPEIKW.js}

@@ -1,6 +1,6 @@
 import {
   logger
-} from "./chunk-KG65BFPK.js";
+} from "./chunk-QAIN3WNN.js";
 
 // src/next/middleware/security.ts
 import { NextResponse } from "next/server";

package/dist/{chunk-MREY2W7N.js → chunk-Y6CPPBJI.js}

@@ -1,7 +1,7 @@
 import {
   getENV,
   isCacheEnabled
-} from "./chunk-7F5X6F7X.js";
+} from "./chunk-HV6A6Z5R.js";
 
 // src/core/cache/cache-config.ts
 var getCacheConfig = {

package/dist/{chunk-6TUDUOGC.js → chunk-ZEHNCHIV.js}

@@ -1,13 +1,13 @@
 import {
   logger
-} from "./chunk-KG65BFPK.js";
+} from "./chunk-QAIN3WNN.js";
 import {
   getCacheFallbackConfig,
   getConfig,
   getEnv,
   isCacheEnabled,
   validateRedisEnvironment
-} from "./chunk-7F5X6F7X.js";
+} from "./chunk-HV6A6Z5R.js";
 
 // src/core/cache/cache-redis.ts
 import { Redis } from "@upstash/redis";

package/dist/{chunk-D73ZJQMX.js → chunk-ZZABL54F.js}

@@ -10,6 +10,19 @@ var TokenGenerator = class {
   static generate(bytes = 32) {
     return crypto.randomBytes(bytes).toString("hex");
   }
+  /**
+   * 토큰의 SHA-256 해시 (저장용)
+   *
+   * 이메일/URL 로 전달되는 평문 토큰을 DB 에 그대로 저장하지 않기 위해 사용한다.
+   * 저장·조회 시 이 해시값으로 비교하면 DB 유출 시에도 토큰을 복원할 수 없다.
+   * (토큰 자체가 고엔트로피 랜덤이므로 salt 없이 단방향 해시로 충분하다.)
+   *
+   * @param token - 평문 토큰
+   * @returns 64글자 hex SHA-256 다이제스트
+   */
+  static hash(token) {
+    return crypto.createHash("sha256").update(token).digest("hex");
+  }
   /**
    * URL-safe 토큰 생성 (Base64URL)
    *

package/dist/core/auth/adapters/sql/dialect.d.ts

@@ -0,0 +1,21 @@
+import type { SqlDialect } from './types';
+export interface DialectStrategy {
+    /** 1-based 파라미터 placeholder. postgres: $1,$2.. / mysql: ? */
+    placeholder(index: number): string;
+    /** 식별자 따옴표. postgres: "id" / mysql: `id` */
+    quoteId(id: string): string;
+}
+export declare function getDialect(dialect: SqlDialect): DialectStrategy;
+/**
+ * placeholder 순번과 params 배열을 동기화해 누적하는 빌더.
+ * add()는 값을 저장하고 그 위치의 placeholder 문자열을 돌려준다.
+ */
+export declare class ParamBuilder {
+    private dialect;
+    private _params;
+    constructor(dialect: DialectStrategy);
+    add(value: unknown): string;
+    get params(): unknown[];
+}
+/** 컬럼명 배열을 방언 따옴표로 감싸 ', ' 결합. */
+export declare function columnList(columns: string[], dialect: DialectStrategy): string;

package/dist/core/auth/adapters/sql/dialect.js

@@ -0,0 +1,11 @@
+import {
+  ParamBuilder,
+  columnList,
+  getDialect
+} from "../../../../chunk-2JUFL4KX.js";
+import "../../../../chunk-N3ETBM74.js";
+export {
+  ParamBuilder,
+  columnList,
+  getDialect
+};

package/dist/core/auth/adapters/sql/email-token-repository.d.ts

@@ -0,0 +1,17 @@
+import type { EmailTokenRepository, EmailToken, TokenType } from '@withwiz/toolkit/core/auth/types';
+import type { QueryExecutor, SqlAdapterConfig } from './types';
+export declare class SqlEmailTokenRepository implements EmailTokenRepository {
+    private exec;
+    private config;
+    private dialect;
+    constructor(exec: QueryExecutor, config: SqlAdapterConfig);
+    private get cols();
+    private tableName;
+    private quotedTable;
+    private selectColumns;
+    create(email: string, token: string, type: TokenType, expiresAt: Date): Promise<EmailToken>;
+    findByEmailAndToken(email: string, token: string, type: TokenType): Promise<EmailToken | null>;
+    delete(email: string, token: string, type: TokenType): Promise<void>;
+    deleteExpired(): Promise<void>;
+    markAsUsed(id: string): Promise<void>;
+}

package/dist/core/auth/adapters/sql/email-token-repository.js

@@ -0,0 +1,9 @@
+import {
+  SqlEmailTokenRepository
+} from "../../../../chunk-BTYH4MHU.js";
+import "../../../../chunk-2JUFL4KX.js";
+import "../../../../chunk-E4TKORMQ.js";
+import "../../../../chunk-N3ETBM74.js";
+export {
+  SqlEmailTokenRepository
+};

package/dist/core/auth/adapters/sql/index.d.ts

@@ -0,0 +1,7 @@
+export { SqlUserRepository } from './user-repository';
+export { SqlOAuthAccountRepository } from './oauth-account-repository';
+export { SqlEmailTokenRepository } from './email-token-repository';
+export { getDialect, ParamBuilder, columnList } from './dialect';
+export type { DialectStrategy } from './dialect';
+export { resolveConfig } from './types';
+export type { QueryExecutor, SqlDialect, SqlAdapterConfig, ResolvedSqlConfig, UserColumns, OAuthColumns, EmailTokenColumns, } from './types';

package/dist/core/auth/adapters/sql/index.js

@@ -0,0 +1,27 @@
+import {
+  SqlEmailTokenRepository
+} from "../../../../chunk-BTYH4MHU.js";
+import {
+  SqlOAuthAccountRepository
+} from "../../../../chunk-VQJY52YF.js";
+import {
+  SqlUserRepository
+} from "../../../../chunk-6A5JHOBB.js";
+import {
+  ParamBuilder,
+  columnList,
+  getDialect
+} from "../../../../chunk-2JUFL4KX.js";
+import {
+  resolveConfig
+} from "../../../../chunk-E4TKORMQ.js";
+import "../../../../chunk-N3ETBM74.js";
+export {
+  ParamBuilder,
+  SqlEmailTokenRepository,
+  SqlOAuthAccountRepository,
+  SqlUserRepository,
+  columnList,
+  getDialect,
+  resolveConfig
+};

package/dist/core/auth/adapters/sql/oauth-account-repository.d.ts

@@ -0,0 +1,18 @@
+import type { OAuthAccountRepository, OAuthAccount, CreateOAuthAccountData, UpdateOAuthAccountData } from '@withwiz/toolkit/core/auth/types';
+import type { QueryExecutor, SqlAdapterConfig } from './types';
+export declare class SqlOAuthAccountRepository implements OAuthAccountRepository {
+    private exec;
+    private config;
+    private dialect;
+    constructor(exec: QueryExecutor, config: SqlAdapterConfig);
+    private get table();
+    private get cols();
+    private selectColumns;
+    findByProvider(provider: string, providerAccountId: string): Promise<OAuthAccount | null>;
+    findByUserId(userId: string): Promise<OAuthAccount[]>;
+    create(data: CreateOAuthAccountData): Promise<OAuthAccount>;
+    update(id: string, data: UpdateOAuthAccountData): Promise<OAuthAccount>;
+    delete(id: string): Promise<void>;
+    private selectById;
+    private mapToOAuthAccount;
+}

package/dist/core/auth/adapters/sql/oauth-account-repository.js

@@ -0,0 +1,9 @@
+import {
+  SqlOAuthAccountRepository
+} from "../../../../chunk-VQJY52YF.js";
+import "../../../../chunk-2JUFL4KX.js";
+import "../../../../chunk-E4TKORMQ.js";
+import "../../../../chunk-N3ETBM74.js";
+export {
+  SqlOAuthAccountRepository
+};

package/dist/core/auth/adapters/sql/types.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Raw SQL Auth Adapter — 공유 타입 & config 해석.
+ */
+/** 실행할 SQL 방언. */
+export type SqlDialect = 'postgres' | 'mysql';
+/**
+ * 드라이버 독립 쿼리 실행기. 소비자가 자기 드라이버를 한 줄 wrapping 해 주입한다.
+ *
+ * @example
+ * // pg
+ * const exec = { query: (sql, p) => pool.query(sql, p).then((r) => r.rows) };
+ * // mysql2/promise
+ * const exec = { query: (sql, p) => pool.query(sql, p).then(([rows]) => rows) };
+ */
+export interface QueryExecutor {
+    query(sql: string, params: unknown[]): Promise<Record<string, unknown>[]>;
+}
+export interface UserColumns {
+    id: string;
+    email: string;
+    name: string;
+    password: string;
+    role: string;
+    image: string;
+    emailVerified: string;
+    isActive: string;
+    createdAt: string;
+    updatedAt: string;
+    lastLoginAt: string;
+}
+export interface OAuthColumns {
+    id: string;
+    userId: string;
+    provider: string;
+    providerAccountId: string;
+    accessToken: string;
+    refreshToken: string;
+    expiresAt: string;
+    tokenType: string;
+    scope: string;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface EmailTokenColumns {
+    id: string;
+    email: string;
+    token: string;
+    expires: string;
+    used: string;
+    createdAt: string;
+}
+export interface SqlAdapterConfig {
+    dialect: SqlDialect;
+    tables?: {
+        user?: string;
+        oauthAccount?: string;
+        emailVerification?: string;
+        passwordReset?: string;
+        magicLink?: string;
+    };
+    userColumns?: Partial<UserColumns>;
+    oauthColumns?: Partial<OAuthColumns>;
+    emailTokenColumns?: Partial<EmailTokenColumns>;
+}
+export interface ResolvedSqlConfig {
+    dialect: SqlDialect;
+    tables: Required<NonNullable<SqlAdapterConfig['tables']>>;
+    userColumns: UserColumns;
+    oauthColumns: OAuthColumns;
+    emailTokenColumns: EmailTokenColumns;
+}
+/** SqlAdapterConfig를 기본값으로 채워 완전한 ResolvedSqlConfig로 해석한다. */
+export declare function resolveConfig(config: SqlAdapterConfig): ResolvedSqlConfig;

package/dist/core/auth/adapters/sql/types.js

@@ -0,0 +1,7 @@
+import {
+  resolveConfig
+} from "../../../../chunk-E4TKORMQ.js";
+import "../../../../chunk-N3ETBM74.js";
+export {
+  resolveConfig
+};

package/dist/core/auth/adapters/sql/user-repository.d.ts

@@ -0,0 +1,20 @@
+import type { UserRepository, BaseUser, CreateUserData, UpdateUserData } from '@withwiz/toolkit/core/auth/types';
+import type { QueryExecutor, SqlAdapterConfig } from './types';
+export declare class SqlUserRepository implements UserRepository {
+    private exec;
+    private config;
+    private dialect;
+    constructor(exec: QueryExecutor, config: SqlAdapterConfig);
+    private get table();
+    private get cols();
+    /** password 제외 SELECT/매핑 대상 컬럼. */
+    private selectColumns;
+    findById(id: string): Promise<BaseUser | null>;
+    findByEmail(email: string): Promise<BaseUser | null>;
+    create(data: CreateUserData): Promise<BaseUser>;
+    update(id: string, data: UpdateUserData): Promise<BaseUser>;
+    delete(id: string): Promise<void>;
+    updateLastLoginAt(id: string): Promise<void>;
+    verifyEmail(email: string): Promise<void>;
+    private mapToBaseUser;
+}

package/dist/core/auth/adapters/sql/user-repository.js

@@ -0,0 +1,9 @@
+import {
+  SqlUserRepository
+} from "../../../../chunk-6A5JHOBB.js";
+import "../../../../chunk-2JUFL4KX.js";
+import "../../../../chunk-E4TKORMQ.js";
+import "../../../../chunk-N3ETBM74.js";
+export {
+  SqlUserRepository
+};

package/dist/core/auth/config.d.ts

@@ -1,14 +1,17 @@
+export type TokenDelivery = 'cookie' | 'header' | 'hybrid';
 export interface AuthConfig {
     jwtSecret: string;
     accessTokenExpiry?: string;
     refreshTokenExpiry?: string;
     cookieSecure?: boolean;
+    tokenDelivery?: TokenDelivery;
 }
 export interface ResolvedAuthConfig {
     jwtSecret: string;
     accessTokenExpiry: string;
     refreshTokenExpiry: string;
     cookieSecure: boolean;
+    tokenDelivery: TokenDelivery;
 }
 export declare function initializeAuth(config: AuthConfig): void;
 export declare function getAuthConfig(): ResolvedAuthConfig;

package/dist/core/auth/config.js

@@ -2,11 +2,11 @@ import {
   getAuthConfig,
   initializeAuth,
   resetAuth
-} from "../../chunk-KYAHURXN.js";
-import "../../chunk-2SIBG5BG.js";
+} from "../../chunk-N3TCQ5BF.js";
+import "../../chunk-7YWUKMZD.js";
 import "../../chunk-6J2EJVND.js";
 import "../../chunk-F3R3UYBF.js";
-import "../../chunk-ORMEWXMH.js";
+import "../../chunk-N3ETBM74.js";
 export {
   getAuthConfig,
   initializeAuth,

package/dist/core/auth/email/index.d.ts

@@ -1,3 +1,3 @@
-export { SmtpEmailSender } from './sender';
-export type { SmtpConfig, EmailTemplates } from './sender';
-export { TokenGenerator } from './token-generator';
+export { SmtpEmailSender } from '@withwiz/toolkit/core/auth/email/sender';
+export type { SmtpConfig, EmailTemplates } from '@withwiz/toolkit/core/auth/email/sender';
+export { TokenGenerator } from '@withwiz/toolkit/core/auth/email/token-generator';

package/dist/core/auth/email/index.js

@@ -1,10 +1,10 @@
 import {
   SmtpEmailSender
-} from "../../../chunk-7X2N4VZM.js";
+} from "../../../chunk-ATBYGPLP.js";
 import {
   TokenGenerator
-} from "../../../chunk-D73ZJQMX.js";
-import "../../../chunk-ORMEWXMH.js";
+} from "../../../chunk-ZZABL54F.js";
+import "../../../chunk-N3ETBM74.js";
 export {
   SmtpEmailSender,
   TokenGenerator

package/dist/core/auth/email/sender.d.ts

@@ -1,4 +1,4 @@
-import type { EmailSender } from '../types';
+import type { EmailSender } from '@withwiz/toolkit/core/auth/types';
 export interface SmtpConfig {
     host: string;
     port: number;

package/dist/core/auth/email/sender.js

@@ -1,7 +1,7 @@
 import {
   SmtpEmailSender
-} from "../../../chunk-7X2N4VZM.js";
-import "../../../chunk-ORMEWXMH.js";
+} from "../../../chunk-ATBYGPLP.js";
+import "../../../chunk-N3ETBM74.js";
 export {
   SmtpEmailSender
 };

package/dist/core/auth/email/token-generator.d.ts

@@ -12,6 +12,17 @@ export declare class TokenGenerator {
      * @returns 16진수 문자열 토큰
      */
     static generate(bytes?: number): string;
+    /**
+     * 토큰의 SHA-256 해시 (저장용)
+     *
+     * 이메일/URL 로 전달되는 평문 토큰을 DB 에 그대로 저장하지 않기 위해 사용한다.
+     * 저장·조회 시 이 해시값으로 비교하면 DB 유출 시에도 토큰을 복원할 수 없다.
+     * (토큰 자체가 고엔트로피 랜덤이므로 salt 없이 단방향 해시로 충분하다.)
+     *
+     * @param token - 평문 토큰
+     * @returns 64글자 hex SHA-256 다이제스트
+     */
+    static hash(token: string): string;
     /**
      * URL-safe 토큰 생성 (Base64URL)
      *

package/dist/core/auth/email/token-generator.js

@@ -1,7 +1,7 @@
 import {
   TokenGenerator
-} from "../../../chunk-D73ZJQMX.js";
-import "../../../chunk-ORMEWXMH.js";
+} from "../../../chunk-ZZABL54F.js";
+import "../../../chunk-N3ETBM74.js";
 export {
   TokenGenerator
 };

package/dist/core/auth/errors/index.js

@@ -6,7 +6,7 @@ import {
   OAuthError,
   PasswordError
 } from "../../../chunk-5GWGARXI.js";
-import "../../../chunk-ORMEWXMH.js";
+import "../../../chunk-N3ETBM74.js";
 export {
   AUTH_ERROR_CODES,
   AuthError,

package/dist/core/auth/index.d.ts

@@ -7,14 +7,14 @@
  * @version 1.0.0
  * @description 범용 공유 라이브러리 - Tier 3
  */
-export * from './types';
-export * from './errors';
-export { JWTManager, JWTService } from './jwt';
-export type { JWTConfig, JWTPayload, TokenPair } from './types';
-export { JWTClientManager, getStoredTokens, storeTokens, clearStoredTokens, clearTokens, decodeJWTPayload, isTokenExpired, getTokenRemainingTime, extractUserFromToken, createAuthHeader, createApiHeaders, isTokenExpiringSoon, getTokenExpirationString, getTokenIssuedAtString, } from './jwt/client';
-export { PasswordValidator, PasswordHasher, defaultPasswordSchema, strongPasswordSchema, } from './password';
-export type { PasswordValidationResult, PasswordConfig } from './password';
-export { DEFAULT_PASSWORD_CONFIG, createPasswordValidator, validatePassword, getPasswordStrength, createPasswordSchema, passwordValidator, createPasswordHasher, } from './password/client-helper';
-export { OAuthManager, GoogleOAuthProvider, GitHubOAuthProvider, KakaoOAuthProvider } from './oauth';
-export { TokenGenerator } from './email/token-generator';
-export { PasswordStrength, OAUTH_PROVIDERS, TokenType } from './types';
+export * from '@withwiz/toolkit/core/auth/types';
+export * from '@withwiz/toolkit/core/auth/errors';
+export { JWTManager, JWTService } from '@withwiz/toolkit/core/auth/jwt';
+export type { JWTConfig, JWTPayload, TokenPair } from '@withwiz/toolkit/core/auth/types';
+export { JWTClientManager, getStoredTokens, storeTokens, clearStoredTokens, clearTokens, decodeJWTPayload, isTokenExpired, getTokenRemainingTime, extractUserFromToken, createAuthHeader, createApiHeaders, isTokenExpiringSoon, getTokenExpirationString, getTokenIssuedAtString, } from '@withwiz/toolkit/core/auth/jwt/client';
+export { PasswordValidator, PasswordHasher, defaultPasswordSchema, strongPasswordSchema, BcryptPasswordHasher, Argon2idPasswordHasher, MigratingPasswordHasher, } from '@withwiz/toolkit/core/auth/password';
+export type { PasswordValidationResult, PasswordConfig, IPasswordHasher, BcryptHasherOptions, Argon2idHasherOptions, MigratingHasherOptions, } from '@withwiz/toolkit/core/auth/password';
+export { DEFAULT_PASSWORD_CONFIG, createPasswordValidator, validatePassword, getPasswordStrength, createPasswordSchema, passwordValidator, createPasswordHasher, } from '@withwiz/toolkit/core/auth/password/client-helper';
+export { OAuthManager, GoogleOAuthProvider, GitHubOAuthProvider, KakaoOAuthProvider } from '@withwiz/toolkit/core/auth/oauth';
+export { TokenGenerator } from '@withwiz/toolkit/core/auth/email/token-generator';
+export { PasswordStrength, OAUTH_PROVIDERS, TokenType } from '@withwiz/toolkit/core/auth/types';