@withwiz/toolkit 0.9.3 → 0.11.0

package/dist/core/api-key/api-key.service.d.ts

@@ -0,0 +1,28 @@
+import type { IApiKeyRepository, IApiKeyCacheStore, IPlanConfigProvider, IUsageTracker, ApiKeyServiceEnv } from '@withwiz/toolkit/core/api-key/ports';
+import type { CreateApiKeyOptions, ApiKeyResult, ApiKeyValidationResult, ApiKeyInfo, ApiKeyFilters, ApiKeyListResponse, UpdateApiKeyData } from '@withwiz/toolkit/core/api-key/types';
+export interface ApiKeyServiceDeps {
+    repo: IApiKeyRepository;
+    cache: IApiKeyCacheStore;
+    planConfig: IPlanConfigProvider;
+    usage: IUsageTracker;
+    env: ApiKeyServiceEnv;
+}
+export declare class ApiKeyService {
+    private readonly deps;
+    constructor(deps: ApiKeyServiceDeps);
+    private prefix;
+    private toInfo;
+    private requireOwned;
+    generateApiKey(userId: string, options: CreateApiKeyOptions, plan: string): Promise<ApiKeyResult>;
+    validateApiKey(rawKey: string): Promise<ApiKeyValidationResult>;
+    getApiKey(id: string, userId: string, isAdmin?: boolean): Promise<ApiKeyInfo>;
+    getApiKeys(filters: ApiKeyFilters, requesterId: string, isAdmin?: boolean): Promise<ApiKeyListResponse>;
+    updateApiKey(id: string, userId: string, data: UpdateApiKeyData, isAdmin?: boolean): Promise<ApiKeyInfo>;
+    deleteApiKey(id: string, userId: string, isAdmin?: boolean): Promise<void>;
+    trackUsage(apiKeyId: string, ip?: string): Promise<void>;
+    regenerateApiKey(userId: string, apiKeyId: string, plan: string, options?: {
+        name?: string;
+        description?: string;
+        keepOldKeyActive?: boolean;
+    }): Promise<ApiKeyResult>;
+}

package/dist/core/api-key/api-key.service.js

@@ -0,0 +1,9 @@
+import {
+  ApiKeyService
+} from "../../chunk-RWENSBNW.js";
+import "../../chunk-BTNM5YSU.js";
+import "../../chunk-ZZTBIA57.js";
+import "../../chunk-N3ETBM74.js";
+export {
+  ApiKeyService
+};

package/dist/core/api-key/index.d.ts

@@ -0,0 +1,6 @@
+export * from '@withwiz/toolkit/core/api-key/types';
+export * from '@withwiz/toolkit/core/api-key/ports';
+export * from '@withwiz/toolkit/core/api-key/key-generator';
+export * from '@withwiz/toolkit/core/api-key/ip-whitelist';
+export * from '@withwiz/toolkit/core/api-key/validate';
+export { ApiKeyService, type ApiKeyServiceDeps } from '@withwiz/toolkit/core/api-key/api-key.service';

package/dist/core/api-key/index.js

@@ -0,0 +1,28 @@
+import "../../chunk-MXWSG6ER.js";
+import {
+  ApiKeyService
+} from "../../chunk-RWENSBNW.js";
+import {
+  validateApiKeyRecord
+} from "../../chunk-BTNM5YSU.js";
+import {
+  isIpAllowed,
+  isIpInCidr
+} from "../../chunk-NUHSUAXG.js";
+import {
+  generateRawKey,
+  hashKey,
+  keyPreview
+} from "../../chunk-ZZTBIA57.js";
+import "../../chunk-N3ETBM74.js";
+import "../../chunk-CWS5RPRX.js";
+import "../../chunk-TN5ZNYR2.js";
+export {
+  ApiKeyService,
+  generateRawKey,
+  hashKey,
+  isIpAllowed,
+  isIpInCidr,
+  keyPreview,
+  validateApiKeyRecord
+};

package/dist/core/api-key/ip-whitelist.d.ts

@@ -0,0 +1,4 @@
+/** IPv4 CIDR 범위 포함 여부. 잘못된 입력은 false(throw 안 함). */
+export declare function isIpInCidr(ip: string, cidr: string): boolean;
+/** 클라이언트 IP가 화이트리스트(단일 IP 또는 CIDR)에 포함되는지. 빈/null이면 모두 허용. */
+export declare function isIpAllowed(clientIp: string, whitelist: string[] | null): boolean;

package/dist/core/api-key/ip-whitelist.js

@@ -0,0 +1,9 @@
+import {
+  isIpAllowed,
+  isIpInCidr
+} from "../../chunk-NUHSUAXG.js";
+import "../../chunk-N3ETBM74.js";
+export {
+  isIpAllowed,
+  isIpInCidr
+};

package/dist/core/api-key/key-generator.d.ts

@@ -0,0 +1,6 @@
+/** prefix + 32바이트 랜덤 hex. */
+export declare function generateRawKey(prefix: string): string;
+/** raw key의 sha256 hex (DB 저장용). */
+export declare function hashKey(rawKey: string): string;
+/** 키 해시 미리보기: 처음 10 + ... + 마지막 4. 14자 미만이면 원본. */
+export declare function keyPreview(keyHash: string): string;

package/dist/core/api-key/key-generator.js

@@ -0,0 +1,11 @@
+import {
+  generateRawKey,
+  hashKey,
+  keyPreview
+} from "../../chunk-ZZTBIA57.js";
+import "../../chunk-N3ETBM74.js";
+export {
+  generateRawKey,
+  hashKey,
+  keyPreview
+};

package/dist/core/api-key/ports.d.ts

@@ -0,0 +1,104 @@
+import type { ApiKeyEnvironment, ApiKeyPermission, ApiKeyFilters, ApiKeyValidationResult } from '@withwiz/toolkit/core/api-key/types';
+export interface ApiKeyRecord {
+    id: string;
+    userId: string;
+    name: string;
+    description: string | null;
+    key: string;
+    permissions: ApiKeyPermission[];
+    rateLimit: number;
+    endpointLimits: Record<string, number> | null;
+    environment: ApiKeyEnvironment;
+    ipWhitelist: string[];
+    isActive: boolean;
+    usageCount: number;
+    lastUsedAt: Date | null;
+    lastUsedIp: string | null;
+    expiresAt: Date | null;
+    createdAt: Date;
+    updatedAt: Date;
+}
+export interface ApiKeyWithUser extends ApiKeyRecord {
+    user: {
+        id: string;
+        email: string;
+        isActive: boolean;
+        plan: string;
+    };
+}
+export interface ApiKeyCreateInput {
+    userId: string;
+    key: string;
+    name: string;
+    description?: string | null;
+    permissions: ApiKeyPermission[];
+    rateLimit: number;
+    endpointLimits?: Record<string, number> | null;
+    environment: ApiKeyEnvironment;
+    ipWhitelist: string[];
+    expiresAt: Date;
+}
+export interface ApiKeyUpdateInput {
+    name?: string;
+    description?: string | null;
+    isActive?: boolean;
+    permissions?: ApiKeyPermission[];
+    ipWhitelist?: string[];
+    rateLimit?: number;
+    endpointLimits?: Record<string, number> | null;
+}
+export interface IApiKeyRepository {
+    create(data: ApiKeyCreateInput): Promise<ApiKeyRecord>;
+    findByHash(keyHash: string): Promise<ApiKeyWithUser | null>;
+    findById(id: string): Promise<ApiKeyRecord | null>;
+    findMany(filters: ApiKeyFilters): Promise<{
+        items: ApiKeyRecord[];
+        total: number;
+    }>;
+    countActive(userId: string): Promise<number>;
+    update(id: string, data: ApiKeyUpdateInput): Promise<ApiKeyRecord>;
+    deactivate(id: string): Promise<void>;
+    delete(id: string): Promise<void>;
+    incrementUsage(id: string, ip?: string): Promise<void>;
+}
+export interface IApiKeyCacheStore {
+    getValidation(keyHash: string): Promise<ApiKeyValidationResult | null>;
+    setValidation(keyHash: string, result: ApiKeyValidationResult): Promise<void>;
+    invalidate(keyHash: string): Promise<void>;
+    invalidateUser?(userId: string): Promise<void>;
+}
+export interface IPlanConfigProvider {
+    getApiKeyLimit(plan: string): Promise<number>;
+    getRateLimit(plan: string): Promise<number>;
+    getEndpointLimit?(plan: string, action: string): Promise<number>;
+}
+export interface UsageCheckResult {
+    allowed: boolean;
+    reason?: 'DAILY_LIMIT' | 'MONTHLY_LIMIT';
+    current: {
+        daily: number;
+        monthly: number;
+    };
+    limit: {
+        daily: number;
+        monthly: number;
+    };
+}
+export interface UsageLogInput {
+    apiKeyId: string;
+    userId: string;
+    endpoint: string;
+    ip?: string;
+}
+export interface IUsageTracker {
+    canMakeApiCall(userId: string, plan: string): Promise<UsageCheckResult>;
+    /** 코어/미들웨어는 호출하지 않음 — 소비자 라우트 계층 선택 사용(optional). */
+    logUsage?(data: UsageLogInput): Promise<void>;
+}
+export interface ApiKeyServiceEnv {
+    prefixProd: string;
+    prefixDev: string;
+    defaultExpiryDays: number;
+    /** API키 발급/사용 불가 플랜명 목록. 예: ['FREEMIUM'] */
+    restrictedPlans: string[];
+}

package/dist/core/api-key/ports.js

@@ -0,0 +1 @@
+import "../../chunk-CWS5RPRX.js";

package/dist/core/api-key/types.d.ts

@@ -0,0 +1,88 @@
+export type ApiKeyPermission = 'read' | 'write' | 'delete';
+export type ApiKeyEnvironment = 'production' | 'development';
+export interface CreateApiKeyOptions {
+    name: string;
+    description?: string;
+    permissions: ApiKeyPermission[];
+    environment: ApiKeyEnvironment;
+    expiresAt?: Date;
+    ipWhitelist?: string[];
+    customRateLimit?: number;
+    endpointLimits?: Record<string, number>;
+}
+export interface ApiKeyResult {
+    id: string;
+    key: string;
+    name: string;
+    description?: string;
+    permissions: ApiKeyPermission[];
+    environment: ApiKeyEnvironment;
+    rateLimit: number;
+    endpointLimits?: Record<string, number>;
+    expiresAt?: Date;
+    createdAt: Date;
+}
+export interface ApiKeyInfo {
+    id: string;
+    name: string;
+    description?: string;
+    keyPreview: string;
+    permissions: ApiKeyPermission[];
+    environment: ApiKeyEnvironment;
+    rateLimit: number;
+    endpointLimits?: Record<string, number>;
+    ipWhitelist: string[];
+    lastUsedAt?: Date;
+    lastUsedIp?: string;
+    usageCount: number;
+    isActive: boolean;
+    expiresAt?: Date;
+    createdAt: Date;
+    updatedAt: Date;
+}
+/** validate FSM이 반환하는 검증 실패 코드. */
+export type ApiKeyValidationError = 'INVALID_API_KEY' | 'INACTIVE_API_KEY' | 'EXPIRED_API_KEY' | 'INACTIVE_USER' | 'PLAN_RESTRICTED';
+export interface ApiKeyValidationResult {
+    valid: boolean;
+    error?: ApiKeyValidationError;
+    message?: string;
+    apiKey?: {
+        id: string;
+        userId: string;
+        permissions: ApiKeyPermission[];
+        rateLimit: number;
+        endpointLimits?: Record<string, number>;
+        ipWhitelist: string[];
+        environment: ApiKeyEnvironment;
+        expiresAt?: Date | null;
+    };
+    user?: {
+        id: string;
+        email: string;
+        plan: string;
+    };
+}
+export interface UpdateApiKeyData {
+    name?: string;
+    description?: string;
+    isActive?: boolean;
+    permissions?: ApiKeyPermission[];
+    ipWhitelist?: string[];
+    customRateLimit?: number;
+    endpointLimits?: Record<string, number>;
+}
+export interface ApiKeyFilters {
+    userId?: string;
+    environment?: ApiKeyEnvironment;
+    isActive?: boolean;
+    search?: string;
+    page?: number;
+    pageSize?: number;
+}
+export interface ApiKeyListResponse {
+    keys: ApiKeyInfo[];
+    total: number;
+    page: number;
+    pageSize: number;
+    hasMore: boolean;
+}

package/dist/core/api-key/types.js

@@ -0,0 +1 @@
+import "../../chunk-TN5ZNYR2.js";

package/dist/core/api-key/validate.d.ts

@@ -0,0 +1,9 @@
+import type { ApiKeyWithUser } from '@withwiz/toolkit/core/api-key/ports';
+import type { ApiKeyValidationResult } from '@withwiz/toolkit/core/api-key/types';
+/**
+ * API 키 레코드 검증 FSM(순수). 우선순위:
+ * null → 비활성키 → 만료 → 비활성사용자 → 제한플랜 → 정상.
+ */
+export declare function validateApiKeyRecord(record: ApiKeyWithUser | null, opts: {
+    freemiumPlans?: string[];
+}): ApiKeyValidationResult;

package/dist/core/api-key/validate.js

@@ -0,0 +1,7 @@
+import {
+  validateApiKeyRecord
+} from "../../chunk-BTNM5YSU.js";
+import "../../chunk-N3ETBM74.js";
+export {
+  validateApiKeyRecord
+};

package/dist/core/auth/config.js

@@ -2,8 +2,9 @@ import {
   getAuthConfig,
   initializeAuth,
   resetAuth
-} from "../../chunk-N3TCQ5BF.js";
+} from "../../chunk-TQMQ5XXG.js";
 import "../../chunk-7YWUKMZD.js";
+import "../../chunk-OVOBSYR4.js";
 import "../../chunk-6J2EJVND.js";
 import "../../chunk-F3R3UYBF.js";
 import "../../chunk-N3ETBM74.js";

package/dist/core/auth/cookie-names.d.ts

@@ -0,0 +1,3 @@
+/** 인증 쿠키명 단일 소스 (순수 상수 — node/edge 양쪽 안전) */
+export declare const ACCESS_TOKEN_COOKIE = "access_token";
+export declare const REFRESH_TOKEN_COOKIE = "refresh_token";

package/dist/core/auth/cookie-names.js

@@ -0,0 +1,9 @@
+import {
+  ACCESS_TOKEN_COOKIE,
+  REFRESH_TOKEN_COOKIE
+} from "../../chunk-6NFMRZWB.js";
+import "../../chunk-N3ETBM74.js";
+export {
+  ACCESS_TOKEN_COOKIE,
+  REFRESH_TOKEN_COOKIE
+};

package/dist/core/auth/index.js

@@ -36,20 +36,24 @@ import {
 } from "../../chunk-ILMPKSWS.js";
 import {
   OAuthManager
-} from "../../chunk-V3GEYUBG.js";
+} from "../../chunk-UQ3Z3ZAF.js";
 import "../../chunk-CDALZTPN.js";
+import {
+  KakaoOAuthProvider
+} from "../../chunk-65HVR74O.js";
+import "../../chunk-33RIHX7O.js";
+import "../../chunk-GSSHHVHF.js";
 import {
   GitHubOAuthProvider
 } from "../../chunk-HIZ7USIF.js";
 import {
   GoogleOAuthProvider
 } from "../../chunk-GF3DKZIW.js";
-import {
-  KakaoOAuthProvider
-} from "../../chunk-65HVR74O.js";
-import "../../chunk-33RIHX7O.js";
-import "../../chunk-GSSHHVHF.js";
 import "../../chunk-JLRMET4V.js";
+import {
+  JWTManager,
+  JWTService
+} from "../../chunk-LWHLB2Y6.js";
 import {
   TokenGenerator
 } from "../../chunk-ZZABL54F.js";
@@ -58,10 +62,6 @@ import {
   PasswordStrength,
   TokenType
 } from "../../chunk-GH3U4WRE.js";
-import {
-  JWTManager,
-  JWTService
-} from "../../chunk-LWHLB2Y6.js";
 import {
   AUTH_ERROR_CODES,
   AuthError,
@@ -70,12 +70,13 @@ import {
   OAuthError,
   PasswordError
 } from "../../chunk-5GWGARXI.js";
-import "../../chunk-BOABYFJ7.js";
-import "../../chunk-N3TCQ5BF.js";
+import "../../chunk-DTRXWS7G.js";
+import "../../chunk-TQMQ5XXG.js";
 import "../../chunk-7YWUKMZD.js";
 import "../../chunk-OVOBSYR4.js";
 import "../../chunk-6J2EJVND.js";
 import "../../chunk-F3R3UYBF.js";
+import "../../chunk-6NFMRZWB.js";
 import "../../chunk-N3ETBM74.js";
 export {
   AUTH_ERROR_CODES,

package/dist/core/auth/jwt/cookie.js

@@ -1,12 +1,13 @@
 import {
   clearTokenCookies,
   setTokenCookies
-} from "../../../chunk-BOABYFJ7.js";
-import "../../../chunk-N3TCQ5BF.js";
+} from "../../../chunk-DTRXWS7G.js";
+import "../../../chunk-TQMQ5XXG.js";
 import "../../../chunk-7YWUKMZD.js";
 import "../../../chunk-OVOBSYR4.js";
 import "../../../chunk-6J2EJVND.js";
 import "../../../chunk-F3R3UYBF.js";
+import "../../../chunk-6NFMRZWB.js";
 import "../../../chunk-N3ETBM74.js";
 export {
   clearTokenCookies,

package/dist/core/auth/jwt/index.js

@@ -6,12 +6,13 @@ import "../../../chunk-5GWGARXI.js";
 import {
   clearTokenCookies,
   setTokenCookies
-} from "../../../chunk-BOABYFJ7.js";
-import "../../../chunk-N3TCQ5BF.js";
+} from "../../../chunk-DTRXWS7G.js";
+import "../../../chunk-TQMQ5XXG.js";
 import "../../../chunk-7YWUKMZD.js";
 import "../../../chunk-OVOBSYR4.js";
 import "../../../chunk-6J2EJVND.js";
 import "../../../chunk-F3R3UYBF.js";
+import "../../../chunk-6NFMRZWB.js";
 import "../../../chunk-N3ETBM74.js";
 export {
   JWTManager,

package/dist/core/auth/oauth/index.js

@@ -1,13 +1,7 @@
 import {
   OAuthManager
-} from "../../../chunk-V3GEYUBG.js";
+} from "../../../chunk-UQ3Z3ZAF.js";
 import "../../../chunk-CDALZTPN.js";
-import {
-  GitHubOAuthProvider
-} from "../../../chunk-HIZ7USIF.js";
-import {
-  GoogleOAuthProvider
-} from "../../../chunk-GF3DKZIW.js";
 import {
   KakaoOAuthProvider
 } from "../../../chunk-65HVR74O.js";
@@ -17,6 +11,12 @@ import {
 import {
   MicrosoftOAuthProvider
 } from "../../../chunk-GSSHHVHF.js";
+import {
+  GitHubOAuthProvider
+} from "../../../chunk-HIZ7USIF.js";
+import {
+  GoogleOAuthProvider
+} from "../../../chunk-GF3DKZIW.js";
 import {
   OAUTH_STATE_COOKIE,
   clearOAuthStateCookie,

package/dist/core/auth/oauth/providers/index.js

@@ -1,10 +1,4 @@
 import "../../../../chunk-CDALZTPN.js";
-import {
-  GitHubOAuthProvider
-} from "../../../../chunk-HIZ7USIF.js";
-import {
-  GoogleOAuthProvider
-} from "../../../../chunk-GF3DKZIW.js";
 import {
   KakaoOAuthProvider
 } from "../../../../chunk-65HVR74O.js";
@@ -14,6 +8,12 @@ import {
 import {
   MicrosoftOAuthProvider
 } from "../../../../chunk-GSSHHVHF.js";
+import {
+  GitHubOAuthProvider
+} from "../../../../chunk-HIZ7USIF.js";
+import {
+  GoogleOAuthProvider
+} from "../../../../chunk-GF3DKZIW.js";
 import "../../../../chunk-5GWGARXI.js";
 import "../../../../chunk-N3ETBM74.js";
 export {

package/dist/core/auth/services/cache-token-stores.d.ts

@@ -0,0 +1,45 @@
+import type { IRefreshTokenStore } from '@withwiz/toolkit/core/auth/services/refresh-token-store';
+/**
+ * store 가 요구하는 최소 cache 형태 — IUnifiedCacheManager 의 부분집합.
+ * ttl 은 초 단위. (InMemoryCacheManager/HybridCacheManager 등이 그대로 만족)
+ */
+export interface TokenStoreCache {
+    set<T>(key: string, value: T, ttl?: number): Promise<void>;
+    delete(key: string): Promise<void>;
+    exists(key: string): Promise<boolean>;
+}
+/**
+ * next/middleware 의 IAccessTokenBlacklistChecker 와 구조적으로 호환한다
+ * (isAccessTokenRevoked). setAccessTokenBlacklistChecker(store) 로 주입 가능.
+ */
+export interface CacheAccessTokenBlacklist {
+    /** 이 access 토큰이 revoke 되었는지 여부. */
+    isAccessTokenRevoked(token: string): Promise<boolean>;
+    /** access 토큰 revoke — 남은 만료까지의 TTL(초). */
+    revokeAccessToken(token: string, ttlSec: number): Promise<void>;
+}
+export interface CacheBlacklistOptions {
+    /** 키 네임스페이스 프리픽스. 기본 'revoked:at:' */
+    prefix?: string;
+    /** 토큰 → 키 식별자 변형. 기본 sha256 hex (원문 키 저장 지양). */
+    deriveId?: (token: string) => string;
+}
+/**
+ * access 토큰 blacklist(revoke) 를 cache 로 구현.
+ * 키: `${prefix}${sha256(token)}` = 1, TTL = 토큰 잔여 만료.
+ */
+export declare function createCacheBlacklistChecker(cache: TokenStoreCache, opts?: CacheBlacklistOptions): CacheAccessTokenBlacklist;
+export interface CacheRefreshStoreOptions {
+    /** used jti 키 프리픽스. 기본 'rt:used:' */
+    usedPrefix?: string;
+    /** family revoke 키 프리픽스. 기본 'rt:famrevoked:' */
+    familyPrefix?: string;
+    /** meta.expiresAt 이 없을 때 사용할 기본 TTL(초). 기본 30d. */
+    defaultTtlSec?: number;
+}
+/**
+ * refresh 토큰 store(회전/재사용탐지/family revoke)를 cache 로 구현.
+ * 키: used=`${usedPrefix}${jti}`, family=`${familyPrefix}${familyId}`.
+ * TTL 은 meta.expiresAt 잔여시간에 정렬(없으면 defaultTtlSec).
+ */
+export declare function createCacheRefreshTokenStore(cache: TokenStoreCache, opts?: CacheRefreshStoreOptions): IRefreshTokenStore;

package/dist/core/auth/services/cache-token-stores.js

@@ -0,0 +1,59 @@
+import "../../../chunk-N3ETBM74.js";
+
+// src/core/auth/services/cache-token-stores.ts
+import { createHash } from "crypto";
+var sha256Hex = (value) => createHash("sha256").update(value).digest("hex");
+var normalizeTtl = (ttlSec, fallback) => {
+  const s = Math.floor(ttlSec);
+  return s > 0 ? s : fallback;
+};
+function createCacheBlacklistChecker(cache, opts = {}) {
+  var _a, _b;
+  const prefix = (_a = opts.prefix) != null ? _a : "revoked:at:";
+  const deriveId = (_b = opts.deriveId) != null ? _b : sha256Hex;
+  const keyFor = (token) => `${prefix}${deriveId(token)}`;
+  return {
+    async revokeAccessToken(token, ttlSec) {
+      await cache.set(keyFor(token), 1, normalizeTtl(ttlSec, 1));
+    },
+    async isAccessTokenRevoked(token) {
+      return cache.exists(keyFor(token));
+    }
+  };
+}
+var THIRTY_DAYS_SEC = 30 * 86400;
+function createCacheRefreshTokenStore(cache, opts = {}) {
+  var _a, _b, _c;
+  const usedPrefix = (_a = opts.usedPrefix) != null ? _a : "rt:used:";
+  const familyPrefix = (_b = opts.familyPrefix) != null ? _b : "rt:famrevoked:";
+  const defaultTtl = (_c = opts.defaultTtlSec) != null ? _c : THIRTY_DAYS_SEC;
+  const ttlFrom = (expiresAt) => {
+    if (!expiresAt) return defaultTtl;
+    return normalizeTtl((expiresAt.getTime() - Date.now()) / 1e3, defaultTtl);
+  };
+  return {
+    async isUsed(jti) {
+      return cache.exists(`${usedPrefix}${jti}`);
+    },
+    async markUsed(jti, meta) {
+      await cache.set(`${usedPrefix}${jti}`, 1, ttlFrom(meta == null ? void 0 : meta.expiresAt));
+    },
+    async isFamilyRevoked(familyId) {
+      return cache.exists(`${familyPrefix}${familyId}`);
+    },
+    async revokeFamily(familyId) {
+      await cache.set(`${familyPrefix}${familyId}`, 1, defaultTtl);
+    },
+    async register(record) {
+      await cache.set(
+        `${usedPrefix}issued:${record.jti}`,
+        { familyId: record.familyId, userId: record.userId },
+        ttlFrom(record.expiresAt)
+      );
+    }
+  };
+}
+export {
+  createCacheBlacklistChecker,
+  createCacheRefreshTokenStore
+};

package/dist/core/auth/services/index.js

@@ -1,6 +1,9 @@
 import {
   LoginService
 } from "../../../chunk-TNDEYJEL.js";
+import {
+  EmailVerificationService
+} from "../../../chunk-VWKZMGPJ.js";
 import {
   OAuthCallbackService
 } from "../../../chunk-MTZXWVW3.js";
@@ -10,22 +13,20 @@ import {
 import {
   RegisterService
 } from "../../../chunk-Y4ME3Q5K.js";
-import {
-  EmailVerificationService
-} from "../../../chunk-VWKZMGPJ.js";
 import {
   PasswordResetService
 } from "../../../chunk-75UDFONR.js";
+import "../../../chunk-LWHLB2Y6.js";
 import "../../../chunk-ZZABL54F.js";
 import "../../../chunk-GH3U4WRE.js";
-import "../../../chunk-LWHLB2Y6.js";
 import "../../../chunk-5GWGARXI.js";
-import "../../../chunk-BOABYFJ7.js";
-import "../../../chunk-N3TCQ5BF.js";
+import "../../../chunk-DTRXWS7G.js";
+import "../../../chunk-TQMQ5XXG.js";
 import "../../../chunk-7YWUKMZD.js";
 import "../../../chunk-OVOBSYR4.js";
 import "../../../chunk-6J2EJVND.js";
 import "../../../chunk-F3R3UYBF.js";
+import "../../../chunk-6NFMRZWB.js";
 import "../../../chunk-N3ETBM74.js";
 export {
   EmailVerificationService,

package/dist/core/auth/services/login.service.js

@@ -3,12 +3,13 @@ import {
 } from "../../../chunk-TNDEYJEL.js";
 import "../../../chunk-LWHLB2Y6.js";
 import "../../../chunk-5GWGARXI.js";
-import "../../../chunk-BOABYFJ7.js";
-import "../../../chunk-N3TCQ5BF.js";
+import "../../../chunk-DTRXWS7G.js";
+import "../../../chunk-TQMQ5XXG.js";
 import "../../../chunk-7YWUKMZD.js";
 import "../../../chunk-OVOBSYR4.js";
 import "../../../chunk-6J2EJVND.js";
 import "../../../chunk-F3R3UYBF.js";
+import "../../../chunk-6NFMRZWB.js";
 import "../../../chunk-N3ETBM74.js";
 export {
   LoginService