@bifos/dooray-cli 0.5.4 → 0.7.0

package/dist/index.js

@@ -24,7 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 
 // src/index.ts
-var import_commander40 = require("commander");
+var import_commander47 = require("commander");
 var import_chalk7 = __toESM(require("chalk"));
 
 // src/commands/config.ts
@@ -127,10 +127,13 @@ async function setConfigValue(key, value) {
     case "smtp-port":
       config.smtpPort = parseInt(value, 10);
       break;
+    case "track-last-run":
+      config.trackLastRun = value === "true";
+      break;
     default:
       throw new DoorayCliError(
         `\uC54C \uC218 \uC5C6\uB294 \uC124\uC815 \uD0A4: ${key}
-\uC0AC\uC6A9 \uAC00\uB2A5\uD55C \uD0A4: api-key, base-url, tenant-name, imap-host, imap-port, imap-username, imap-password, smtp-host, smtp-port`,
+\uC0AC\uC6A9 \uAC00\uB2A5\uD55C \uD0A4: api-key, base-url, tenant-name, imap-host, imap-port, imap-username, imap-password, smtp-host, smtp-port, track-last-run`,
         EXIT_CONFIG_ERROR
       );
   }
@@ -411,7 +414,7 @@ var DoorayApiClient = class {
     try {
       return await this.api.get("common/v1/members/me").json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   // ─── Projects ───────────────────────────────────────
@@ -428,7 +431,7 @@ var DoorayApiClient = class {
         }
       }).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   // ─── Posts ──────────────────────────────────────────
@@ -455,42 +458,42 @@ var DoorayApiClient = class {
         }
       }).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   async getPost(projectId, postId) {
     try {
       return await this.api.get(`project/v1/projects/${projectId}/posts/${postId}`).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   async getPostStandalone(postId) {
     try {
       return await this.api.get(`project/v1/posts/${postId}`).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   async createPost(projectId, body) {
     try {
       return await this.api.post(`project/v1/projects/${projectId}/posts`, { json: body }).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   async updatePost(projectId, postId, body) {
     try {
       return await this.api.put(`project/v1/projects/${projectId}/posts/${postId}`, { json: body }).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   async setPostDone(projectId, postId) {
     try {
       return await this.api.post(`project/v1/projects/${projectId}/posts/${postId}/set-done`).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   async setPostWorkflow(projectId, postId, workflowId) {
@@ -499,7 +502,7 @@ var DoorayApiClient = class {
         json: { workflowId }
       }).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   async setPostParent(projectId, postId, parentPostId) {
@@ -508,7 +511,7 @@ var DoorayApiClient = class {
         json: { parentPostId }
       }).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   // ─── Post Comments ──────────────────────────────────
@@ -522,28 +525,35 @@ var DoorayApiClient = class {
         }
       }).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
+    }
+  }
+  async getPostComment(projectId, postId, logId) {
+    try {
+      return await this.api.get(`project/v1/projects/${projectId}/posts/${postId}/logs/${logId}`).json();
+    } catch (e) {
+      return await toDoorayCliError(e);
     }
   }
   async createPostComment(projectId, postId, body) {
     try {
       return await this.api.post(`project/v1/projects/${projectId}/posts/${postId}/logs`, { json: body }).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   async updatePostComment(projectId, postId, logId, body) {
     try {
       return await this.api.put(`project/v1/projects/${projectId}/posts/${postId}/logs/${logId}`, { json: body }).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   async deletePostComment(projectId, postId, logId) {
     try {
       return await this.api.delete(`project/v1/projects/${projectId}/posts/${postId}/logs/${logId}`).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   // ─── Members ────────────────────────────────────────
@@ -557,14 +567,31 @@ var DoorayApiClient = class {
         }
       }).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   async getMemberDetail(memberId) {
     try {
       return await this.api.get(`common/v1/members/${memberId}`).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
+    }
+  }
+  async searchMembers(params) {
+    try {
+      return await this.api.get("common/v1/members", {
+        searchParams: {
+          ...params.name && { name: params.name },
+          ...params.externalEmailAddresses && { externalEmailAddresses: params.externalEmailAddresses },
+          ...params.userCode && { userCode: params.userCode },
+          ...params.userCodeExact && { userCodeExact: params.userCodeExact },
+          ...params.idProviderUserId && { idProviderUserId: params.idProviderUserId },
+          ...params.page != null && { page: params.page },
+          ...params.size != null && { size: params.size }
+        }
+      }).json();
+    } catch (e) {
+      return await toDoorayCliError(e);
     }
   }
   // ─── Workflows ──────────────────────────────────────
@@ -572,7 +599,7 @@ var DoorayApiClient = class {
     try {
       return await this.api.get(`project/v1/projects/${projectId}/workflows`).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   // ─── Tags ───────────────────────────────────────────
@@ -585,7 +612,7 @@ var DoorayApiClient = class {
         }
       }).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   // ─── Member Groups ──────────────────────────────────
@@ -598,7 +625,7 @@ var DoorayApiClient = class {
         }
       }).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   // ─── Milestones ─────────────────────────────────────
@@ -611,7 +638,7 @@ var DoorayApiClient = class {
         }
       }).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   // ─── Wiki ───────────────────────────────────────────
@@ -624,7 +651,7 @@ var DoorayApiClient = class {
         }
       }).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   async getWikiPages(wikiId, parentPageId) {
@@ -635,42 +662,42 @@ var DoorayApiClient = class {
         }
       }).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   async getWikiPage(wikiId, pageId) {
     try {
       return await this.api.get(`wiki/v1/wikis/${wikiId}/pages/${pageId}`).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   async createWikiPage(wikiId, body) {
     try {
       return await this.api.post(`wiki/v1/wikis/${wikiId}/pages`, { json: body }).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   async updateWikiPage(wikiId, pageId, body) {
     try {
       return await this.api.put(`wiki/v1/wikis/${wikiId}/pages/${pageId}`, { json: body }).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   async updateWikiPageTitle(wikiId, pageId, body) {
     try {
       return await this.api.put(`wiki/v1/wikis/${wikiId}/pages/${pageId}/title`, { json: body }).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   async updateWikiPageContent(wikiId, pageId, body) {
     try {
       return await this.api.put(`wiki/v1/wikis/${wikiId}/pages/${pageId}/content`, { json: body }).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   // ─── Post Files ─────────────────────────────────────
@@ -678,7 +705,7 @@ var DoorayApiClient = class {
     try {
       return await this.api.get(`project/v1/projects/${projectId}/posts/${postId}/files`).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   async getPostFileMeta(projectId, postId, fileId) {
@@ -687,7 +714,7 @@ var DoorayApiClient = class {
         searchParams: { media: "meta" }
       }).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   async downloadPostFile(projectId, postId, fileId) {
@@ -717,7 +744,7 @@ var DoorayApiClient = class {
       return { buffer, fileName };
     } catch (e) {
       if (e instanceof DoorayCliError) throw e;
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   async uploadPostFile(projectId, postId, filePath) {
@@ -754,14 +781,14 @@ var DoorayApiClient = class {
       return await res.json();
     } catch (e) {
       if (e instanceof DoorayCliError) throw e;
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
   async deletePostFile(projectId, postId, fileId) {
     try {
       return await this.api.delete(`project/v1/projects/${projectId}/posts/${postId}/files/${fileId}`).json();
     } catch (e) {
-      return toDoorayCliError(e);
+      return await toDoorayCliError(e);
     }
   }
 };
@@ -780,13 +807,24 @@ var WIKIS_TTL_MS = 864e5;
 // src/resolvers/me.ts
 async function ensureMe(client) {
   const entry = await getMe();
-  if (entry && !isExpired(entry.updatedAt, ME_TTL_MS)) {
+  if (entry && !isExpired(entry.updatedAt, ME_TTL_MS) && entry.data.orgId) {
     return entry.data;
   }
   const res = await client.getMe();
-  const me = { id: res.result.id, name: res.result.name };
-  await setMe(me);
-  return me;
+  const orgId = res.result.defaultOrganization?.id ?? "";
+  if (!orgId) {
+    throw new DoorayCliError(
+      "orgId\uB97C \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4 (getMe \uC751\uB2F5\uC5D0 defaultOrganization.id \uB204\uB77D). dooray cache clear \uD6C4 \uC7AC\uC2DC\uB3C4\uD558\uC138\uC694.",
+      EXIT_PARAM_ERROR
+    );
+  }
+  const cached = {
+    id: res.result.id,
+    name: res.result.name,
+    orgId
+  };
+  await setMe(cached);
+  return cached;
 }
 
 // src/commands/doctor.ts
@@ -973,6 +1011,11 @@ var setupCommand = new import_commander4.Command("setup").description("\uB300\uD
         }
       }
     }
+    const trackLastRun = await confirm2({
+      message: "feedback --last \uBAA8\uB4DC \uD65C\uC131\uD654 (\uC9C1\uC804 \uBA85\uB839 \uC5D0\uB7EC\uB97C GitHub issue\uC5D0 \uC790\uB3D9 \uCCA8\uBD80)?",
+      default: false,
+      theme: { prefix: "\u{1F4CB}" }
+    });
     const config = {
       version: 1,
       apiKey,
@@ -985,6 +1028,7 @@ var setupCommand = new import_commander4.Command("setup").description("\uB300\uD
       smtpHost: useMail ? DEFAULTS.smtpHost : existing?.smtpHost,
       smtpPort: useMail ? DEFAULTS.smtpPort : existing?.smtpPort
     };
+    config.trackLastRun = trackLastRun;
     await saveConfig(config);
     console.log(
       import_chalk4.default.green(
@@ -1084,17 +1128,29 @@ function output(opts, data) {
 // src/utils/spinner.ts
 var import_ora = __toESM(require("ora"));
 var current = null;
+var quiet = false;
+var noopSpinner = new Proxy({}, {
+  get(_target, prop) {
+    if (prop === "text" || prop === "prefixText" || prop === "suffixText") return "";
+    if (prop === "isSpinning") return false;
+    return () => noopSpinner;
+  },
+  set() {
+    return true;
+  }
+});
+function setQuiet(value) {
+  quiet = value;
+}
 function startSpinner(text) {
+  if (quiet) return noopSpinner;
   current = (0, import_ora.default)({ text, stream: process.stderr }).start();
   return current;
 }
 function stopSpinner(success, text) {
   if (!current) return;
-  if (success === false) {
-    current.fail(text);
-  } else {
-    current.succeed(text);
-  }
+  if (success === false) current.fail(text);
+  else current.succeed(text);
   current = null;
 }
 
@@ -1312,6 +1368,12 @@ async function ensureMemberGroups(client, projectId) {
   await setMemberGroups(projectId, items);
   return items;
 }
+async function resolveMemberGroup(client, projectId, input2) {
+  const groups = await ensureMemberGroups(client, projectId);
+  const adapter = groups.map((g) => ({ name: g.code, id: g.id, code: g.code }));
+  const match = matchByName(adapter, input2, "\uADF8\uB8F9", (g) => `${g.code} (${g.id})`);
+  return { id: match.id, code: match.code };
+}
 
 // src/commands/project/groups.ts
 var projectGroupsCommand = new import_commander8.Command("groups").description("\uD504\uB85C\uC81D\uD2B8 \uBA64\uBC84 \uADF8\uB8F9 \uBAA9\uB85D \uC870\uD68C").argument("<project>", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC \uB610\uB294 ID").action(async (project) => {
@@ -1364,6 +1426,35 @@ async function ensureTags(client, projectId) {
   await setTags(projectId, items);
   return items;
 }
+function buildMandatoryHint(allTags, missingGroupIds) {
+  const lines = [];
+  for (const groupId of missingGroupIds) {
+    const groupTags = allTags.filter((t) => t.groupId === groupId);
+    const groupName = groupTags[0]?.groupName ?? groupId;
+    const candidates = groupTags.map((t) => t.name).join(", ");
+    lines.push(`  - "${groupName}": ${candidates || "(\uD0DC\uADF8 \uC5C6\uC74C)"}`);
+  }
+  return lines.join("\n");
+}
+async function validateMandatoryTags(client, projectId) {
+  const allTags = await ensureTags(client, projectId);
+  const missingGroupIds = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const t of allTags) {
+    if (t.groupMandatory && t.groupId && !seen.has(t.groupId)) {
+      seen.add(t.groupId);
+      missingGroupIds.push(t.groupId);
+    }
+  }
+  if (missingGroupIds.length === 0) return;
+  throw new DoorayCliError(
+    `\uD544\uC218 \uD0DC\uADF8 \uADF8\uB8F9\uC774 \uB204\uB77D\uB418\uC5C8\uC2B5\uB2C8\uB2E4 (\uADF8\uB8F9\uB2F9 1\uAC1C \uC774\uC0C1 \uD544\uC694):
+` + buildMandatoryHint(allTags, missingGroupIds) + `
+
+\uB2E4\uC2DC \uC2DC\uB3C4: --tag "<\uADF8\uB8F9>: <\uD6C4\uBCF4>" \uD615\uC2DD\uC73C\uB85C \uCD94\uAC00`,
+    EXIT_PARAM_ERROR
+  );
+}
 async function resolveTags(client, projectId, inputs) {
   const allTags = await ensureTags(client, projectId);
   const selected = inputs.map(
@@ -1379,14 +1470,14 @@ async function resolveTags(client, projectId, inputs) {
     if (t.groupMandatory && t.groupId) mandatoryGroups.set(t.groupId, t.groupName ?? t.groupId);
   }
   const coveredGroups = new Set(selected.map((t) => t.groupId).filter((g) => !!g));
-  const missing = [];
-  for (const [gid, gname] of mandatoryGroups) {
-    if (!coveredGroups.has(gid)) missing.push(gname);
+  const missingIds = [];
+  for (const [gid] of mandatoryGroups) {
+    if (!coveredGroups.has(gid)) missingIds.push(gid);
   }
-  if (missing.length > 0) {
+  if (missingIds.length > 0) {
     throw new DoorayCliError(
       `\uD544\uC218 \uD0DC\uADF8 \uADF8\uB8F9\uC774 \uB204\uB77D\uB418\uC5C8\uC2B5\uB2C8\uB2E4 (\uADF8\uB8F9\uB2F9 1\uAC1C \uC774\uC0C1 \uD544\uC694):
-` + missing.map((g) => `  - ${g}`).join("\n"),
+` + buildMandatoryHint(allTags, missingIds),
       EXIT_PARAM_ERROR
     );
   }
@@ -1553,9 +1644,13 @@ async function resolvePost(client, projectId, postNumber) {
 
 // src/utils/dooray-url.ts
 var TASK_URL_RE = /^https?:\/\/[\w.-]+\.dooray\.com\/task\/to\/(\d+)(?:[/?#].*)?$/;
+var TASK_URL_ALT_RE = /^https?:\/\/[\w.-]+\.dooray\.com\/task\/(?:\d+)\/(\d+)(?:[/?#].*)?$/;
 function parseDoorayTaskUrl(input2) {
-  const m = TASK_URL_RE.exec(input2);
-  return m ? m[1] : null;
+  const m1 = TASK_URL_RE.exec(input2);
+  if (m1) return m1[1];
+  const m2 = TASK_URL_ALT_RE.exec(input2);
+  if (m2) return m2[1];
+  return null;
 }
 function isLikelyDoorayUrl(input2) {
   return /^https?:\/\//.test(input2);
@@ -1648,6 +1743,80 @@ var postGetCommand = new import_commander12.Command("get").description("\uC5C5\u
 // src/commands/post/edit.ts
 var import_commander13 = require("commander");
 
+// src/utils/mention.ts
+function buildMemberMention(m, me) {
+  const title = m.memberId === me.id ? "me" : "member";
+  return `[@${m.name}](dooray://${me.orgId}/members/${m.memberId} "${title}")`;
+}
+function buildGroupMention(g, me) {
+  return `[@${g.projectCode}/${g.code}](dooray://${me.orgId}/member-groups/${g.groupId})`;
+}
+function prependMentions(body, members, groups, me) {
+  const parts = [];
+  for (const m of members) parts.push(buildMemberMention(m, me));
+  for (const g of groups) parts.push(buildGroupMention(g, me));
+  if (parts.length === 0) return body;
+  return parts.join(" ") + " " + body;
+}
+
+// src/utils/task-link.ts
+function escapeLinkText(text) {
+  return text.replace(/&/g, "&amp;").replace(/\[/g, "&#91;").replace(/\]/g, "&#93;").replace(/—/g, "&mdash;");
+}
+function buildTaskLink(t, me) {
+  const text = `${t.projectCode}/${t.number} ${escapeLinkText(t.subject)}`;
+  const url = `dooray://${me.orgId}/tasks/${t.postId}`;
+  if (t.workflowClass) {
+    const safeClass = t.workflowClass.replace(/"/g, "&quot;");
+    return `[${text}](${url} "${safeClass}")`;
+  }
+  return `[${text}](${url})`;
+}
+function parseLinkRef(ref) {
+  if (/^[0-9]{15,}$/.test(ref)) return { idOpt: ref };
+  if (ref.includes("/")) {
+    const [p, n] = ref.split("/");
+    if (!p || !n) {
+      throw new DoorayCliError(
+        `--link-task \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4: "${ref}". <project>/<number> \uB610\uB294 postId\uB97C \uC785\uB825\uD558\uC138\uC694.`,
+        EXIT_PARAM_ERROR
+      );
+    }
+    return { projectArg: p, postNumberArg: n };
+  }
+  throw new DoorayCliError(
+    `--link-task \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4: "${ref}". <project>/<number> \uB610\uB294 postId\uB97C \uC785\uB825\uD558\uC138\uC694.`,
+    EXIT_PARAM_ERROR
+  );
+}
+function appendTaskLinks(body, links, me) {
+  if (links.length === 0) return body;
+  const rendered = links.map((l) => buildTaskLink(l, me)).join("\n");
+  if (!body) return rendered;
+  return body.replace(/\n*$/, "") + "\n\n" + rendered;
+}
+
+// src/resolvers/task-link.ts
+async function resolveTaskLinks(client, linkInputs) {
+  return Promise.all(
+    linkInputs.map(async (ref) => {
+      const { projectArg, postNumberArg, idOpt } = parseLinkRef(ref);
+      const { projectId, postId, projectCode, postNumber } = await resolvePostInput(
+        client,
+        { projectArg, postNumberArg, idOpt }
+      );
+      const detail = await client.getPost(projectId, postId);
+      return {
+        projectCode,
+        number: postNumber,
+        postId,
+        subject: detail.result.subject,
+        workflowClass: detail.result.workflowClass
+      };
+    })
+  );
+}
+
 // src/editor/index.ts
 var import_node_child_process = require("child_process");
 var import_promises6 = __toESM(require("fs/promises"));
@@ -1694,11 +1863,11 @@ function openInEditor(content) {
     }
   });
 }
-function memberIdToEmail(memberId, members) {
+function memberIdToName(memberId, members) {
   const member = members.find(
     (m) => m.organizationMemberId === memberId
   );
-  return member?.emailAddress ?? memberId;
+  return member?.name ?? memberId;
 }
 function serializePostFrontmatter(post, members) {
   const frontmatter = {
@@ -1706,12 +1875,12 @@ function serializePostFrontmatter(post, members) {
     priority: post.priority,
     due_date: post.dueDate ?? null,
     to: post.users.to.map((u) => {
-      if (u.member) return memberIdToEmail(u.member.organizationMemberId, members);
+      if (u.member) return memberIdToName(u.member.organizationMemberId, members);
       if (u.emailUser) return u.emailUser.emailAddress;
       return "";
     }).filter(Boolean),
     cc: post.users.cc.map((u) => {
-      if (u.member) return memberIdToEmail(u.member.organizationMemberId, members);
+      if (u.member) return memberIdToName(u.member.organizationMemberId, members);
       if (u.emailUser) return u.emailUser.emailAddress;
       return "";
     }).filter(Boolean)
@@ -1807,20 +1976,88 @@ async function readStdin() {
   return Buffer.concat(chunks).toString("utf-8");
 }
 
+// src/utils/attachment-check.ts
+var import_node_readline = __toESM(require("readline"));
+function extractAttachmentFileIds(body) {
+  const ids = /* @__PURE__ */ new Set();
+  const re = /!?\[[^\]]*\]\(\/files\/([^\s)?#]+)/g;
+  let m;
+  while ((m = re.exec(body)) !== null) {
+    ids.add(m[1]);
+  }
+  return ids;
+}
+function findDroppedAttachments(oldBody, newBody, attachments) {
+  const oldIds = extractAttachmentFileIds(oldBody);
+  const newIds = extractAttachmentFileIds(newBody);
+  const dropped = [];
+  for (const att of attachments) {
+    if (oldIds.has(att.id) && !newIds.has(att.id)) {
+      dropped.push({ id: att.id, name: att.name });
+    }
+  }
+  return dropped;
+}
+function sanitizeFileName(name) {
+  return name.replace(/[\x00-\x1F\x7F]/g, "?");
+}
+function printDroppedWarning(dropped) {
+  process.stderr.write(`\u26A0  \uC0C8 \uBCF8\uBB38\uC5D0\uC11C ${dropped.length}\uAC1C attachment reference \uAC00 \uBE60\uC9D1\uB2C8\uB2E4:
+`);
+  for (const a of dropped) {
+    const safe = a.name ? sanitizeFileName(a.name) : void 0;
+    process.stderr.write(`   - /files/${a.id}  ${safe ? "\u2190 " + safe : ""}
+`);
+  }
+  process.stderr.write(`   (attachment \uC790\uCCB4\uB294 \uC11C\uBC84\uC5D0 \uB0A8\uC9C0\uB9CC \uBCF8\uBB38\uC5D0\uC11C \uC0AC\uB77C\uC838 \uBCF4\uC785\uB2C8\uB2E4.)
+`);
+}
+async function confirmDropped() {
+  const rl = import_node_readline.default.createInterface({ input: process.stdin, output: process.stderr });
+  const answer = await new Promise((resolve) => {
+    rl.question("\uACC4\uC18D \uC9C4\uD589\uD558\uC2DC\uACA0\uC2B5\uB2C8\uAE4C? (y/N) ", resolve);
+  });
+  rl.close();
+  return /^y(es)?$/i.test(answer.trim());
+}
+async function checkAndGuardDropped(oldBody, newBody, attachments, noConfirm) {
+  const dropped = findDroppedAttachments(oldBody, newBody, attachments);
+  if (dropped.length === 0) return;
+  printDroppedWarning(dropped);
+  if (noConfirm) {
+    process.stderr.write(`   --no-confirm \uD50C\uB798\uADF8\uB85C \uADF8\uB300\uB85C \uC9C4\uD589\uD569\uB2C8\uB2E4.
+`);
+    return;
+  }
+  if (!process.stdin.isTTY) {
+    throw new DoorayCliError(
+      "non-TTY \uD658\uACBD\uC5D0\uC11C \uB204\uB77D attachment \uAC00 \uAC10\uC9C0\uB418\uC5C8\uC2B5\uB2C8\uB2E4. \uC758\uB3C4\uD55C \uBCC0\uACBD\uC774\uBA74 --no-confirm \uD50C\uB798\uADF8\uB85C \uB2E4\uC2DC \uC2E4\uD589\uD558\uC138\uC694.",
+      EXIT_PARAM_ERROR
+    );
+  }
+  const confirmed = await confirmDropped();
+  if (!confirmed) {
+    throw new DoorayCliError("\uCDE8\uC18C\uB418\uC5C8\uC2B5\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+}
+
 // src/commands/post/edit.ts
-async function resolveUsers(client, projectId, emails) {
+async function resolveUsers(client, projectId, names) {
   const users = [];
-  for (const email of emails) {
-    const memberId = await resolveMember(client, projectId, email);
+  for (const name of names) {
+    const memberId = await resolveMember(client, projectId, name);
     users.push({ type: "member", member: { organizationMemberId: memberId } });
   }
   return users;
 }
-var postEditCommand = new import_commander13.Command("edit").description("\uC5C5\uBB34 \uC218\uC815 ($EDITOR \uB610\uB294 --title/--body \uC635\uC158)").argument("[project]", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC (\uB610\uB294 \uCCAB \uC778\uC790\uC5D0 Dooray URL)").argument("[post-number]", "\uC5C5\uBB34 \uBC88\uD638 (project\uC640 \uD568\uAED8 \uC0AC\uC6A9)").option("--id <postId>", "Dooray post ID (project/post-number \uB300\uC2E0)").option("--url <url>", "Dooray \uC5C5\uBB34 URL (project/post-number \uB300\uC2E0)").option("--title <title>", "\uC81C\uBAA9 \uBCC0\uACBD (non-interactive)").option("--subject <subject>", "--title\uC758 deprecated alias").option("--body <text>", "\uBCF8\uBB38 \uBCC0\uACBD (- \uC785\uB825 \uC2DC stdin, non-interactive)").option("--body-file <path>", "\uBCF8\uBB38 \uD30C\uC77C \uACBD\uB85C (- \uC785\uB825 \uC2DC stdin, non-interactive)").action(async (project, postNumberStr, opts) => {
+var postEditCommand = new import_commander13.Command("edit").description("\uC5C5\uBB34 \uC218\uC815 ($EDITOR \uB610\uB294 --title/--body \uC635\uC158)").argument("[project]", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC (\uB610\uB294 \uCCAB \uC778\uC790\uC5D0 Dooray URL)").argument("[post-number]", "\uC5C5\uBB34 \uBC88\uD638 (project\uC640 \uD568\uAED8 \uC0AC\uC6A9)").option("--id <postId>", "Dooray post ID (project/post-number \uB300\uC2E0)").option("--url <url>", "Dooray \uC5C5\uBB34 URL (project/post-number \uB300\uC2E0)").option("--title <title>", "\uC81C\uBAA9 \uBCC0\uACBD (non-interactive)").option("--subject <subject>", "--title\uC758 deprecated alias").option("--body <text>", "\uBCF8\uBB38 \uBCC0\uACBD (- \uC785\uB825 \uC2DC stdin, non-interactive)").option("--body-file <path>", "\uBCF8\uBB38 \uD30C\uC77C \uACBD\uB85C (- \uC785\uB825 \uC2DC stdin, non-interactive)").option("--mention <name>", "\uBA64\uBC84 \uBA58\uC158 (\uBC18\uBCF5 \uAC00\uB2A5, \uC774\uB984 \uBD80\uBD84\uC77C\uCE58)", (v, prev) => [...prev, v], []).option("--mention-group <code>", "\uADF8\uB8F9 \uBA58\uC158 (\uBC18\uBCF5 \uAC00\uB2A5, code \uBD80\uBD84\uC77C\uCE58)", (v, prev) => [...prev, v], []).option("--link-task <ref>", "\uB2E4\uB978 \uC5C5\uBB34 \uB9C1\uD06C \uCD94\uAC00 (<project>/<number> \uB610\uB294 postId, \uBC18\uBCF5 \uAC00\uB2A5)", (v, prev) => [...prev, v], []).option("--dry-run", "API \uD638\uCD9C \uC5C6\uC774 \uD569\uC131\uB41C \uBCF8\uBB38\uB9CC stdout \uCD9C\uB825 (mention/link-task \uC801\uC6A9 \uACB0\uACFC \uBBF8\uB9AC\uBCF4\uAE30)").option("--no-confirm", "\uB204\uB77D attachment \uACBD\uACE0 \uC2DC confirm \uC5C6\uC774 \uC9C4\uD589 (\uC790\uB3D9\uD654\uC6A9)").action(async (project, postNumberStr, opts) => {
   const config = await getConfigOrThrow();
   const client = new DoorayApiClient(config.apiKey, config.baseUrl);
+  const mentionInputs = (opts.mention ?? []).filter((s) => s.length > 0);
+  const groupInputs = (opts.mentionGroup ?? []).filter((s) => s.length > 0);
+  const linkInputs = (opts.linkTask ?? []).filter((s) => s.length > 0);
   startSpinner("\uC5C5\uBB34 \uC870\uD68C \uC911...");
-  const { projectId, postId, postNumber } = await resolvePostInput(client, {
+  const { projectId, postId, postNumber, projectCode } = await resolvePostInput(client, {
     projectArg: project,
     postNumberArg: postNumberStr,
     idOpt: opts.id,
@@ -1838,7 +2075,47 @@ var postEditCommand = new import_commander13.Command("edit").description("\uC5C5
   }
   const nonInteractive = title || opts.body || opts.bodyFile;
   if (nonInteractive) {
-    const newBody = await readBodyInputOrNull(opts);
+    let newBody = await readBodyInputOrNull(opts);
+    if (newBody != null && !opts.dryRun) {
+      const attachments = (post.files ?? []).map((f) => ({ id: f.id, name: f.name }));
+      await checkAndGuardDropped(post.body.content, newBody, attachments, !opts.confirm);
+    }
+    if (mentionInputs.length > 0 || groupInputs.length > 0) {
+      const effectiveBody = newBody ?? post.body.content;
+      const me = await ensureMe(client);
+      const memberIds = await Promise.all(
+        mentionInputs.map((name) => resolveMember(client, projectId, name))
+      );
+      const nameMap = await buildMemberNameMap(client, projectId);
+      const members2 = memberIds.map((memberId) => ({
+        memberId,
+        name: nameMap.get(memberId) ?? memberId
+      }));
+      const groups = await Promise.all(
+        groupInputs.map(async (code) => {
+          const g = await resolveMemberGroup(client, projectId, code);
+          return { groupId: g.id, code: g.code, projectCode };
+        })
+      );
+      newBody = prependMentions(effectiveBody, members2, groups, me);
+    }
+    if (linkInputs.length > 0) {
+      const effectiveBody = newBody ?? post.body.content;
+      const me = await ensureMe(client);
+      const links = await resolveTaskLinks(client, linkInputs);
+      newBody = appendTaskLinks(effectiveBody, links, me);
+    }
+    if (opts.dryRun) {
+      stopSpinner(false);
+      const globalOpts = postEditCommand.optsWithGlobals();
+      const previewBody = newBody ?? post.body.content;
+      if (globalOpts.json) {
+        process.stdout.write(JSON.stringify({ body: previewBody }) + "\n");
+      } else {
+        process.stdout.write(previewBody + "\n");
+      }
+      return;
+    }
     startSpinner("\uC5C5\uBB34 \uC218\uC815 \uC911...");
     const toUsers = post.users.to.map((u) => ({
       type: u.type,
@@ -1865,6 +2142,16 @@ var postEditCommand = new import_commander13.Command("edit").description("\uC5C5
     });
     stopSpinner(true, "\uC5C5\uBB34 \uC218\uC815 \uC644\uB8CC");
   } else {
+    if (mentionInputs.length > 0 || groupInputs.length > 0) {
+      process.stderr.write(
+        "\u26A0  --mention/--mention-group \uC740 --title/--body \uC640 \uD568\uAED8 \uC0AC\uC6A9 \uC2DC\uC5D0\uB9CC \uC801\uC6A9\uB429\uB2C8\uB2E4.\n"
+      );
+    }
+    if (linkInputs.length > 0) {
+      process.stderr.write(
+        "\u26A0  --link-task \uB294 --title/--body \uC640 \uD568\uAED8 \uC0AC\uC6A9 \uC2DC\uC5D0\uB9CC \uC801\uC6A9\uB429\uB2C8\uB2E4.\n"
+      );
+    }
     const original = serializePostFrontmatter(post, members);
     const edited = await openInEditor(original);
     if (original === edited) {
@@ -1872,6 +2159,8 @@ var postEditCommand = new import_commander13.Command("edit").description("\uC5C5
       return;
     }
     const parsed = parsePostFrontmatter(edited);
+    const attachmentsInteractive = (post.files ?? []).map((f) => ({ id: f.id, name: f.name }));
+    await checkAndGuardDropped(post.body.content, parsed.body, attachmentsInteractive, !opts.confirm);
     startSpinner("\uC5C5\uBB34 \uC218\uC815 \uC911...");
     const toUsers = await resolveUsers(client, projectId, parsed.to);
     const ccUsers = await resolveUsers(client, projectId, parsed.cc);
@@ -1945,7 +2234,7 @@ async function resolveUsers2(client, projectId, inputs) {
   }
   return users;
 }
-var postCreateCommand = new import_commander14.Command("create").description("\uC5C5\uBB34 \uC0DD\uC131").argument("<project>", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC \uB610\uB294 ID").option("--title <title>", "\uC5C5\uBB34 \uC81C\uBAA9").option("--subject <subject>", "--title\uC758 deprecated alias").option("--to <members...>", "\uB2F4\uB2F9\uC790 (\uC774\uB984 \uB610\uB294 \uC774\uBA54\uC77C, \uC5EC\uB7EC \uBA85 \uAC00\uB2A5)").option("--cc <members...>", "\uCC38\uC870\uC790 (\uC774\uB984 \uB610\uB294 \uC774\uBA54\uC77C, \uC5EC\uB7EC \uBA85 \uAC00\uB2A5)").option("--body <text>", "\uBCF8\uBB38 \uD14D\uC2A4\uD2B8 (- \uC785\uB825 \uC2DC stdin\uC5D0\uC11C \uC77D\uAE30)").option("--body-file <path>", "\uBCF8\uBB38 \uD30C\uC77C \uACBD\uB85C (- \uC785\uB825 \uC2DC stdin\uC5D0\uC11C \uC77D\uAE30)").option("--priority <level>", "\uC6B0\uC120\uC21C\uC704 (highest, high, normal, low, lowest)", "normal").option("--due-date <date>", "\uB9C8\uAC10\uC77C (ISO 8601 \uD615\uC2DD)").option("--tag <name>", "\uD0DC\uADF8 \uC774\uB984 (\uBC18\uBCF5 \uAC00\uB2A5)", (value, prev) => [...prev, value], []).option("--parent <ref>", "\uBD80\uBAA8 \uC5C5\uBB34 (project/number \uB610\uB294 postId)").option("--workflow <name>", "\uCD08\uAE30 \uC6CC\uD06C\uD50C\uB85C\uC6B0 \uC774\uB984 \uB610\uB294 class").option("--milestone <name>", "\uB9C8\uC77C\uC2A4\uD1A4 \uC774\uB984").action(async (project, opts) => {
+var postCreateCommand = new import_commander14.Command("create").description("\uC5C5\uBB34 \uC0DD\uC131").argument("<project>", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC \uB610\uB294 ID").option("--title <title>", "\uC5C5\uBB34 \uC81C\uBAA9").option("--subject <subject>", "--title\uC758 deprecated alias").option("--to <members...>", "\uB2F4\uB2F9\uC790 (\uC774\uB984 \uB610\uB294 \uC774\uBA54\uC77C, \uC5EC\uB7EC \uBA85 \uAC00\uB2A5)").option("--cc <members...>", "\uCC38\uC870\uC790 (\uC774\uB984 \uB610\uB294 \uC774\uBA54\uC77C, \uC5EC\uB7EC \uBA85 \uAC00\uB2A5)").option("--body <text>", "\uBCF8\uBB38 \uD14D\uC2A4\uD2B8 (- \uC785\uB825 \uC2DC stdin\uC5D0\uC11C \uC77D\uAE30)").option("--body-file <path>", "\uBCF8\uBB38 \uD30C\uC77C \uACBD\uB85C (- \uC785\uB825 \uC2DC stdin\uC5D0\uC11C \uC77D\uAE30)").option("--priority <level>", "\uC6B0\uC120\uC21C\uC704 (highest, high, normal, low, lowest)", "normal").option("--due-date <date>", "\uB9C8\uAC10\uC77C (ISO 8601 \uD615\uC2DD)").option("--tag <name>", "\uD0DC\uADF8 \uC774\uB984 (\uBC18\uBCF5 \uAC00\uB2A5)", (value, prev) => [...prev, value], []).option("--mention <name>", "\uBA64\uBC84 \uBA58\uC158 (\uBC18\uBCF5 \uAC00\uB2A5, \uC774\uB984 \uBD80\uBD84\uC77C\uCE58)", (v, prev) => [...prev, v], []).option("--mention-group <code>", "\uADF8\uB8F9 \uBA58\uC158 (\uBC18\uBCF5 \uAC00\uB2A5, code \uBD80\uBD84\uC77C\uCE58)", (v, prev) => [...prev, v], []).option("--link-task <ref>", "\uB2E4\uB978 \uC5C5\uBB34 \uB9C1\uD06C \uCD94\uAC00 (<project>/<number> \uB610\uB294 postId, \uBC18\uBCF5 \uAC00\uB2A5)", (v, prev) => [...prev, v], []).option("--parent <ref>", "\uBD80\uBAA8 \uC5C5\uBB34 (project/number \uB610\uB294 postId)").option("--workflow <name>", "\uCD08\uAE30 \uC6CC\uD06C\uD50C\uB85C\uC6B0 \uC774\uB984 \uB610\uB294 class").option("--milestone <name>", "\uB9C8\uC77C\uC2A4\uD1A4 \uC774\uB984").option("--dry-run", "API \uD638\uCD9C \uC5C6\uC774 \uD569\uC131\uB41C \uBCF8\uBB38\uB9CC stdout \uCD9C\uB825 (mention/link-task \uC801\uC6A9 \uACB0\uACFC \uBBF8\uB9AC\uBCF4\uAE30)").action(async (project, opts) => {
   const globalOpts = postCreateCommand.optsWithGlobals();
   const config = await getConfigOrThrow();
   const client = new DoorayApiClient(config.apiKey, config.baseUrl);
@@ -1961,14 +2250,60 @@ var postCreateCommand = new import_commander14.Command("create").description("\u
       "\u26A0  --subject\uB294 deprecated\uC785\uB2C8\uB2E4. \uB300\uC2E0 --title\uC744 \uC0AC\uC6A9\uD574\uC8FC\uC138\uC694.\n"
     );
   }
-  const bodyContent = await readBodyInput(opts);
+  const mentionInputs = (opts.mention ?? []).filter((s) => s.length > 0);
+  const groupInputs = (opts.mentionGroup ?? []).filter((s) => s.length > 0);
+  const linkInputs = (opts.linkTask ?? []).filter((s) => s.length > 0);
+  let bodyContent = await readBodyInput(opts);
   startSpinner("\uC5C5\uBB34 \uC0DD\uC131 \uC911...");
   const projectId = await resolveProject(client, project);
+  let projectCode;
+  if (groupInputs.length > 0) {
+    const projects = await ensureProjects(client);
+    projectCode = projects.find((p) => p.id === projectId)?.code;
+    if (!projectCode) {
+      throw new DoorayCliError(
+        `--mention-group \uC740 \uACF5\uAC1C \uD504\uB85C\uC81D\uD2B8\uC5D0\uC11C\uB9CC \uC9C0\uC6D0\uB429\uB2C8\uB2E4. dooray project list \uB85C \uCE90\uC2DC \uAC31\uC2E0 \uD6C4 \uC7AC\uC2DC\uB3C4\uD558\uC138\uC694.`,
+        EXIT_PARAM_ERROR
+      );
+    }
+  }
+  if (mentionInputs.length > 0 || groupInputs.length > 0) {
+    const me = await ensureMe(client);
+    const memberIds = await Promise.all(
+      mentionInputs.map((name) => resolveMember(client, projectId, name))
+    );
+    const nameMap = await buildMemberNameMap(client, projectId);
+    const members = memberIds.map((memberId) => ({
+      memberId,
+      name: nameMap.get(memberId) ?? memberId
+    }));
+    const groups = await Promise.all(
+      groupInputs.map(async (code) => {
+        const g = await resolveMemberGroup(client, projectId, code);
+        return { groupId: g.id, code: g.code, projectCode: projectCode ?? "" };
+      })
+    );
+    bodyContent = prependMentions(bodyContent, members, groups, me);
+  }
+  if (linkInputs.length > 0) {
+    const me = await ensureMe(client);
+    const links = await resolveTaskLinks(client, linkInputs);
+    bodyContent = appendTaskLinks(bodyContent, links, me);
+  }
+  if (opts.dryRun) {
+    stopSpinner(false);
+    if (globalOpts.json) {
+      process.stdout.write(JSON.stringify({ body: bodyContent }) + "\n");
+    } else {
+      process.stdout.write(bodyContent + "\n");
+    }
+    return;
+  }
   const toUsers = opts.to ? await resolveUsers2(client, projectId, opts.to) : [];
   const ccUsers = opts.cc ? await resolveUsers2(client, projectId, opts.cc) : [];
   const tagInputs = (opts.tag ?? []).filter((s) => s.length > 0);
   const [tagIds, parentPostId, milestoneId] = await Promise.all([
-    tagInputs.length > 0 ? resolveTags(client, projectId, tagInputs) : Promise.resolve(void 0),
+    tagInputs.length > 0 ? resolveTags(client, projectId, tagInputs) : validateMandatoryTags(client, projectId).then(() => void 0),
     opts.parent ? resolvePostRef(client, opts.parent) : Promise.resolve(void 0),
     opts.milestone ? resolveMilestone(client, projectId, opts.milestone) : Promise.resolve(void 0)
   ]);
@@ -2241,7 +2576,17 @@ var commentLatestCommand = new import_commander18.Command("latest").description(
 
 // src/commands/post/comment/add.ts
 var import_commander19 = require("commander");
-var commentAddCommand = new import_commander19.Command("add").description("\uB313\uAE00 \uCD94\uAC00").argument("[project]", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC (\uB610\uB294 \uCCAB \uC778\uC790\uC5D0 Dooray URL)").argument("[post-number]", "\uC5C5\uBB34 \uBC88\uD638 (project\uC640 \uD568\uAED8 \uC0AC\uC6A9)").option("--id <postId>", "Dooray post ID (project/post-number \uB300\uC2E0)").option("--url <url>", "Dooray \uC5C5\uBB34 URL (project/post-number \uB300\uC2E0)").option("--body <text>", "\uB313\uAE00 \uBCF8\uBB38 (- \uC785\uB825 \uC2DC stdin\uC5D0\uC11C \uC77D\uAE30)").option("--body-file <path>", "\uBCF8\uBB38 \uD30C\uC77C \uACBD\uB85C (- \uC785\uB825 \uC2DC stdin\uC5D0\uC11C \uC77D\uAE30)").action(async (project, postNumberStr, opts) => {
+var commentAddCommand = new import_commander19.Command("add").description("\uB313\uAE00 \uCD94\uAC00").argument("[project]", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC (\uB610\uB294 \uCCAB \uC778\uC790\uC5D0 Dooray URL)").argument("[post-number]", "\uC5C5\uBB34 \uBC88\uD638 (project\uC640 \uD568\uAED8 \uC0AC\uC6A9)").option("--id <postId>", "Dooray post ID (project/post-number \uB300\uC2E0)").option("--url <url>", "Dooray \uC5C5\uBB34 URL (project/post-number \uB300\uC2E0)").option("--body <text>", "\uB313\uAE00 \uBCF8\uBB38 (- \uC785\uB825 \uC2DC stdin\uC5D0\uC11C \uC77D\uAE30)").option("--body-file <path>", "\uBCF8\uBB38 \uD30C\uC77C \uACBD\uB85C (- \uC785\uB825 \uC2DC stdin\uC5D0\uC11C \uC77D\uAE30)").option(
+  "--mention <name>",
+  "\uBA64\uBC84 \uBA58\uC158 (\uBC18\uBCF5 \uAC00\uB2A5, \uC774\uB984 \uBD80\uBD84\uC77C\uCE58)",
+  (value, prev) => [...prev, value],
+  []
+).option(
+  "--mention-group <code>",
+  "\uADF8\uB8F9 \uBA58\uC158 (\uBC18\uBCF5 \uAC00\uB2A5, code \uBD80\uBD84\uC77C\uCE58)",
+  (value, prev) => [...prev, value],
+  []
+).option("--link-task <ref>", "\uB2E4\uB978 \uC5C5\uBB34 \uB9C1\uD06C \uCD94\uAC00 (<project>/<number> \uB610\uB294 postId, \uBC18\uBCF5 \uAC00\uB2A5)", (v, prev) => [...prev, v], []).option("--dry-run", "API \uD638\uCD9C \uC5C6\uC774 \uD569\uC131\uB41C \uBCF8\uBB38\uB9CC stdout \uCD9C\uB825 (mention/link-task \uC801\uC6A9 \uACB0\uACFC \uBBF8\uB9AC\uBCF4\uAE30)").action(async (project, postNumberStr, opts) => {
   const globalOpts = commentAddCommand.optsWithGlobals();
   const config = await getConfigOrThrow();
   const client = new DoorayApiClient(config.apiKey, config.baseUrl);
@@ -2254,12 +2599,47 @@ var commentAddCommand = new import_commander19.Command("add").description("\uB31
     }
   }
   startSpinner("\uB313\uAE00 \uCD94\uAC00 \uC911...");
-  const { projectId, postId } = await resolvePostInput(client, {
+  const { projectId, postId, projectCode } = await resolvePostInput(client, {
     projectArg: project,
     postNumberArg: postNumberStr,
     idOpt: opts.id,
     urlOpt: opts.url
   });
+  const mentionInputs = (opts.mention ?? []).filter((s) => s.length > 0);
+  const groupInputs = (opts.mentionGroup ?? []).filter((s) => s.length > 0);
+  const linkInputs = (opts.linkTask ?? []).filter((s) => s.length > 0);
+  if (mentionInputs.length > 0 || groupInputs.length > 0) {
+    const me = await ensureMe(client);
+    const memberIds = await Promise.all(
+      mentionInputs.map((name) => resolveMember(client, projectId, name))
+    );
+    const nameMap = await buildMemberNameMap(client, projectId);
+    const members = memberIds.map((memberId) => ({
+      memberId,
+      name: nameMap.get(memberId) ?? memberId
+    }));
+    const groups = await Promise.all(
+      groupInputs.map(async (code) => {
+        const g = await resolveMemberGroup(client, projectId, code);
+        return { groupId: g.id, code: g.code, projectCode };
+      })
+    );
+    bodyContent = prependMentions(bodyContent, members, groups, me);
+  }
+  if (linkInputs.length > 0) {
+    const me = await ensureMe(client);
+    const links = await resolveTaskLinks(client, linkInputs);
+    bodyContent = appendTaskLinks(bodyContent, links, me);
+  }
+  if (opts.dryRun) {
+    stopSpinner(false);
+    if (globalOpts.json) {
+      process.stdout.write(JSON.stringify({ body: bodyContent }) + "\n");
+    } else {
+      process.stdout.write(bodyContent + "\n");
+    }
+    return;
+  }
   const res = await client.createPostComment(projectId, postId, {
     body: { mimeType: "text/x-markdown", content: bodyContent }
   });
@@ -2276,7 +2656,17 @@ var commentAddCommand = new import_commander19.Command("add").description("\uB31
 
 // src/commands/post/comment/edit.ts
 var import_commander20 = require("commander");
-var commentEditCommand = new import_commander20.Command("edit").description("\uB313\uAE00 \uC218\uC815 ($EDITOR \uB610\uB294 --body \uC635\uC158)").argument("[arg1]", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC / Dooray URL / \uB313\uAE00 ID (\uBAA8\uB4DC\uBCC4)").argument("[arg2]", "\uC5C5\uBB34 \uBC88\uD638 \uB610\uB294 \uB313\uAE00 ID (\uBAA8\uB4DC\uBCC4)").argument("[arg3]", "\uB313\uAE00 ID (positional 3\uAC1C \uBAA8\uB4DC)").option("--id <postId>", "Dooray post ID (project/post-number \uB300\uC2E0)").option("--url <url>", "Dooray \uC5C5\uBB34 URL (project/post-number \uB300\uC2E0)").option("--comment-id <commentId>", "\uB313\uAE00 ID (positional \uB300\uCCB4)").option("--body <text>", "\uB313\uAE00 \uBCF8\uBB38 \uBCC0\uACBD (- \uC785\uB825 \uC2DC stdin, non-interactive)").option("--body-file <path>", "\uBCF8\uBB38 \uD30C\uC77C \uACBD\uB85C (- \uC785\uB825 \uC2DC stdin, non-interactive)").action(async (arg1, arg2, arg3, opts) => {
+var commentEditCommand = new import_commander20.Command("edit").description("\uB313\uAE00 \uC218\uC815 ($EDITOR \uB610\uB294 --body \uC635\uC158)").argument("[arg1]", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC / Dooray URL / \uB313\uAE00 ID (\uBAA8\uB4DC\uBCC4)").argument("[arg2]", "\uC5C5\uBB34 \uBC88\uD638 \uB610\uB294 \uB313\uAE00 ID (\uBAA8\uB4DC\uBCC4)").argument("[arg3]", "\uB313\uAE00 ID (positional 3\uAC1C \uBAA8\uB4DC)").option("--id <postId>", "Dooray post ID (project/post-number \uB300\uC2E0)").option("--url <url>", "Dooray \uC5C5\uBB34 URL (project/post-number \uB300\uC2E0)").option("--comment-id <commentId>", "\uB313\uAE00 ID (positional \uB300\uCCB4)").option("--body <text>", "\uB313\uAE00 \uBCF8\uBB38 \uBCC0\uACBD (- \uC785\uB825 \uC2DC stdin, non-interactive)").option("--body-file <path>", "\uBCF8\uBB38 \uD30C\uC77C \uACBD\uB85C (- \uC785\uB825 \uC2DC stdin, non-interactive)").option("--no-confirm", "\uB204\uB77D attachment \uACBD\uACE0 \uC2DC confirm \uC5C6\uC774 \uC9C4\uD589 (\uC790\uB3D9\uD654\uC6A9)").option(
+  "--mention <name>",
+  "\uBA64\uBC84 \uBA58\uC158 (\uBC18\uBCF5 \uAC00\uB2A5, \uC774\uB984 \uBD80\uBD84\uC77C\uCE58)",
+  (value, prev) => [...prev, value],
+  []
+).option(
+  "--mention-group <code>",
+  "\uADF8\uB8F9 \uBA58\uC158 (\uBC18\uBCF5 \uAC00\uB2A5, code \uBD80\uBD84\uC77C\uCE58)",
+  (value, prev) => [...prev, value],
+  []
+).option("--link-task <ref>", "\uB2E4\uB978 \uC5C5\uBB34 \uB9C1\uD06C \uCD94\uAC00 (<project>/<number> \uB610\uB294 postId, \uBC18\uBCF5 \uAC00\uB2A5)", (v, prev) => [...prev, v], []).option("--dry-run", "API \uD638\uCD9C \uC5C6\uC774 \uD569\uC131\uB41C \uBCF8\uBB38\uB9CC stdout \uCD9C\uB825 (mention/link-task \uC801\uC6A9 \uACB0\uACFC \uBBF8\uB9AC\uBCF4\uAE30)").action(async (arg1, arg2, arg3, opts) => {
   const config = await getConfigOrThrow();
   const client = new DoorayApiClient(config.apiKey, config.baseUrl);
   let projectArg;
@@ -2319,7 +2709,7 @@ var commentEditCommand = new import_commander20.Command("edit").description("\uB
     );
   }
   startSpinner("\uB313\uAE00 \uC870\uD68C \uC911...");
-  const { projectId, postId } = await resolvePostInput(client, {
+  const { projectId, postId, projectCode } = await resolvePostInput(client, {
     projectArg,
     postNumberArg,
     idOpt: opts.id,
@@ -2333,15 +2723,57 @@ var commentEditCommand = new import_commander20.Command("edit").description("\uB
 `);
     process.exit(1);
   }
+  const mentionInputs = (opts.mention ?? []).filter((s) => s.length > 0);
+  const groupInputs = (opts.mentionGroup ?? []).filter((s) => s.length > 0);
+  const linkInputs = (opts.linkTask ?? []).filter((s) => s.length > 0);
+  let mentionPrefix = "";
+  if (mentionInputs.length > 0 || groupInputs.length > 0) {
+    const me = await ensureMe(client);
+    const memberIds = await Promise.all(
+      mentionInputs.map((name) => resolveMember(client, projectId, name))
+    );
+    const nameMap = await buildMemberNameMap(client, projectId);
+    const members = memberIds.map((memberId) => ({
+      memberId,
+      name: nameMap.get(memberId) ?? memberId
+    }));
+    const groups = await Promise.all(
+      groupInputs.map(async (code) => {
+        const g = await resolveMemberGroup(client, projectId, code);
+        return { groupId: g.id, code: g.code, projectCode };
+      })
+    );
+    mentionPrefix = prependMentions("", members, groups, me).trimEnd();
+  }
   let edited = await readBodyInputOrNull(opts);
   if (edited == null) {
-    const original = comment.body.content;
-    edited = await openInEditor(original);
-    if (original === edited) {
+    const rawContent = comment.body.content;
+    const editorSeed = mentionPrefix ? mentionPrefix + " " + rawContent : rawContent;
+    edited = await openInEditor(editorSeed);
+    if (rawContent === edited) {
       process.stdout.write("\uBCC0\uACBD\uC0AC\uD56D \uC5C6\uC74C\n");
       return;
     }
+  } else if (mentionPrefix) {
+    edited = mentionPrefix + " " + edited;
   }
+  if (linkInputs.length > 0) {
+    const me = await ensureMe(client);
+    const links = await resolveTaskLinks(client, linkInputs);
+    edited = appendTaskLinks(edited, links, me);
+  }
+  if (opts.dryRun) {
+    stopSpinner(false);
+    const globalOpts = commentEditCommand.optsWithGlobals();
+    if (globalOpts.json) {
+      process.stdout.write(JSON.stringify({ body: edited }) + "\n");
+    } else {
+      process.stdout.write(edited + "\n");
+    }
+    return;
+  }
+  const attachments = (comment.files ?? []).map((f) => ({ id: f.id, name: f.name }));
+  await checkAndGuardDropped(comment.body.content, edited, attachments, !opts.confirm);
   startSpinner("\uB313\uAE00 \uC218\uC815 \uC911...");
   await client.updatePostComment(projectId, postId, commentId, {
     body: { mimeType: "text/x-markdown", content: edited }
@@ -2408,14 +2840,397 @@ var commentDeleteCommand = new import_commander21.Command("delete").description(
 `);
 });
 
-// src/commands/post/file/list.ts
+// src/commands/post/comment/get.ts
 var import_commander22 = require("commander");
+
+// src/formatters/comment.ts
+function formatCommentDetail(comment, opts) {
+  if (opts.json) {
+    printJson(comment);
+    return;
+  }
+  if (opts.quiet) {
+    process.stdout.write(comment.id + "\n");
+    return;
+  }
+  const metaRows = [
+    ["ID", comment.id],
+    ["\uC791\uC131\uC790", comment.creator.member?.name ?? ""],
+    ["\uC0DD\uC131", comment.createdAt],
+    ...comment.modifiedAt ? [["\uC218\uC815", comment.modifiedAt]] : [],
+    ["mimeType", comment.body.mimeType]
+  ];
+  printTable(["Field", "Value"], metaRows);
+  process.stdout.write("\n" + comment.body.content + "\n");
+  if (comment.files && comment.files.length > 0) {
+    process.stdout.write("\n[Attachments]\n");
+    printTable(
+      ["Name", "Size", "ID"],
+      comment.files.map((f) => [f.name, String(f.size), f.id])
+    );
+  }
+}
+
+// src/commands/post/comment/get.ts
+function parseGetArgs(arg1, arg2, arg3, opts) {
+  const hasPositional = arg1 !== void 0 || arg2 !== void 0 || arg3 !== void 0;
+  const hasIdUrl = !!(opts.id || opts.url);
+  if (hasPositional && hasIdUrl) {
+    throw new DoorayCliError(
+      "positional \uC778\uC790\uC640 --id/--url \uC635\uC158\uC740 \uB3D9\uC2DC\uC5D0 \uC0AC\uC6A9\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.",
+      EXIT_PARAM_ERROR
+    );
+  }
+  if (hasIdUrl) {
+    if (!opts.commentId) {
+      throw new DoorayCliError(
+        "--id/--url \uBAA8\uB4DC\uC5D0\uC11C\uB294 --comment-id \uC635\uC158\uC774 \uD544\uC694\uD569\uB2C8\uB2E4.",
+        EXIT_PARAM_ERROR
+      );
+    }
+    return { commentId: opts.commentId, idOpt: opts.id, urlOpt: opts.url };
+  }
+  if (arg3) {
+    if (opts.commentId) {
+      throw new DoorayCliError(
+        "positional \uB313\uAE00 ID \uC640 --comment-id \uC635\uC158\uC740 \uB3D9\uC2DC\uC5D0 \uC0AC\uC6A9\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.",
+        EXIT_PARAM_ERROR
+      );
+    }
+    return {
+      projectArg: arg1,
+      postNumberArg: arg2,
+      commentId: arg3
+    };
+  }
+  if (arg1 && arg2 && opts.commentId) {
+    return {
+      projectArg: arg1,
+      postNumberArg: arg2,
+      commentId: opts.commentId
+    };
+  }
+  throw new DoorayCliError(
+    "<comment-id>\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4. positional 3\uBC88\uC9F8 \uB610\uB294 --comment-id \uC635\uC158\uC744 \uC0AC\uC6A9\uD558\uC138\uC694.",
+    EXIT_PARAM_ERROR
+  );
+}
+var commentGetCommand = new import_commander22.Command("get").description("\uB2E8\uC77C \uB313\uAE00 \uBCF8\uBB38 + \uBA54\uD0C0 + attachments \uC870\uD68C").argument("[arg1]", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC / Dooray URL (\uBAA8\uB4DC\uBCC4)").argument("[arg2]", "\uC5C5\uBB34 \uBC88\uD638 (\uBAA8\uB4DC\uBCC4)").argument("[arg3]", "\uB313\uAE00 ID (positional 3\uAC1C \uBAA8\uB4DC)").option("--id <postId>", "Dooray post ID (positional \uB300\uC2E0)").option("--url <url>", "Dooray \uC5C5\uBB34 URL (positional \uB300\uC2E0)").option("--comment-id <id>", "\uB313\uAE00 ID (arg3 \uB300\uC2E0)").action(async (arg1, arg2, arg3, opts) => {
+  const parsed = parseGetArgs(arg1, arg2, arg3, opts);
+  const config = await getConfigOrThrow();
+  const client = new DoorayApiClient(config.apiKey, config.baseUrl);
+  const globalOpts = commentGetCommand.optsWithGlobals();
+  startSpinner("\uB313\uAE00 \uC870\uD68C \uC911...");
+  let projectId;
+  let comment;
+  try {
+    const resolved = await resolvePostInput(client, {
+      projectArg: parsed.projectArg,
+      postNumberArg: parsed.postNumberArg,
+      idOpt: parsed.idOpt,
+      urlOpt: parsed.urlOpt
+    });
+    projectId = resolved.projectId;
+    const detail = await client.getPostComment(resolved.projectId, resolved.postId, parsed.commentId);
+    comment = detail.result;
+    stopSpinner(true, "\uB313\uAE00 \uC870\uD68C \uC644\uB8CC");
+  } catch (e) {
+    stopSpinner(false);
+    throw e;
+  }
+  if (!globalOpts.json) {
+    let nameMap = /* @__PURE__ */ new Map();
+    try {
+      nameMap = await buildMemberNameMap(client, projectId);
+    } catch {
+    }
+    comment = enrichCommentCreators([comment], nameMap)[0];
+  }
+  formatCommentDetail(comment, globalOpts);
+});
+
+// src/commands/post/comment/file/index.ts
+var import_commander27 = require("commander");
+
+// src/commands/post/comment/file/list.ts
+var import_commander23 = require("commander");
+
+// src/resolvers/comment-file-input.ts
+var FILE_ID_SECONDARY_LABEL = {
+  positional: "4\uBC88\uC9F8",
+  option: "--file-id",
+  identifier: "<fileId>"
+};
+function assertNonEmpty(value, fieldName) {
+  if (value.trim() === "") {
+    throw new DoorayCliError(
+      `${fieldName} \uAC00 \uBE44\uC5B4 \uC788\uC2B5\uB2C8\uB2E4.`,
+      EXIT_PARAM_ERROR
+    );
+  }
+}
+function parseImpl(args) {
+  const isOptionMode = !!(args.idOpt || args.urlOpt);
+  let projectArg;
+  let postNumberArg;
+  let commentId = args.commentIdOpt;
+  let secondary = args.secondaryOpt;
+  if (isOptionMode) {
+    if (!commentId) commentId = args.arg1;
+    if (!secondary) secondary = args.arg2;
+    if (args.arg3 || args.arg4) {
+      throw new DoorayCliError(
+        "--id/--url \uBAA8\uB4DC\uC5D0\uC11C\uB294 \uCD94\uAC00 positional \uC778\uC790\uAC00 \uD5C8\uC6A9\uB418\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.",
+        EXIT_PARAM_ERROR
+      );
+    }
+  } else {
+    projectArg = args.arg1;
+    postNumberArg = args.arg2;
+    if (!commentId) commentId = args.arg3;
+    if (!secondary) secondary = args.arg4;
+  }
+  if (!commentId) {
+    throw new DoorayCliError(
+      "<comment-id> \uAC00 \uD544\uC694\uD569\uB2C8\uB2E4. positional 3\uBC88\uC9F8 \uB610\uB294 --comment-id \uC635\uC158\uC744 \uC0AC\uC6A9\uD558\uC138\uC694.",
+      EXIT_PARAM_ERROR
+    );
+  }
+  assertNonEmpty(commentId, "<comment-id>");
+  if (args.requireSecondary) {
+    if (!secondary) {
+      const { identifier, positional, option } = args.secondaryLabel;
+      throw new DoorayCliError(
+        `${identifier} \uAC00 \uD544\uC694\uD569\uB2C8\uB2E4. positional ${positional} \uB610\uB294 ${option} \uC635\uC158\uC744 \uC0AC\uC6A9\uD558\uC138\uC694.`,
+        EXIT_PARAM_ERROR
+      );
+    }
+    assertNonEmpty(secondary, args.secondaryLabel.identifier);
+  } else if (secondary !== void 0) {
+    assertNonEmpty(secondary, "<secondary>");
+  }
+  return { projectArg, postNumberArg, commentId, secondary };
+}
+async function resolveCommentFileInput(client, args) {
+  const { projectArg, postNumberArg, commentId, secondary } = parseImpl(args);
+  const { projectId, postId } = await resolvePostInput(client, {
+    projectArg,
+    postNumberArg,
+    idOpt: args.idOpt,
+    urlOpt: args.urlOpt
+  });
+  return { projectId, postId, commentId, secondary };
+}
+
+// src/commands/post/comment/file/list.ts
 function formatSize(bytes) {
   if (bytes < 1024) return `${bytes}B`;
   if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)}KB`;
   return `${(bytes / (1024 * 1024)).toFixed(1)}MB`;
 }
-var fileListCommand = new import_commander22.Command("list").description("\uC5C5\uBB34 \uCCA8\uBD80\uD30C\uC77C \uBAA9\uB85D \uC870\uD68C").argument("[project]", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC (\uB610\uB294 \uCCAB \uC778\uC790\uC5D0 Dooray URL)").argument("[post-number]", "\uC5C5\uBB34 \uBC88\uD638 (project\uC640 \uD568\uAED8 \uC0AC\uC6A9)").option("--id <postId>", "Dooray post ID (project/post-number \uB300\uC2E0)").option("--url <url>", "Dooray \uC5C5\uBB34 URL (project/post-number \uB300\uC2E0)").action(async (project, postNumberStr, opts) => {
+var listCommentFileCommand = new import_commander23.Command("list").description("\uB313\uAE00 \uCCA8\uBD80 \uD30C\uC77C \uBAA9\uB85D \uC870\uD68C").argument("[arg1]", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC, Dooray URL, \uB610\uB294 (`--id`/`--url` \uBAA8\uB4DC\uC77C \uB54C) \uB313\uAE00 ID").argument("[arg2]", "\uC5C5\uBB34 \uBC88\uD638 (positional \uBAA8\uB4DC)").argument("[arg3]", "\uB313\uAE00 ID (positional 3\uAC1C \uBAA8\uB4DC)").option("--id <postId>", "Dooray post ID (project/post-number \uB300\uC2E0)").option("--url <url>", "Dooray \uC5C5\uBB34 URL (project/post-number \uB300\uC2E0)").option("--comment-id <logId>", "\uB313\uAE00 ID (positional \uB300\uCCB4)").action(async (arg1, arg2, arg3, opts) => {
+  const globalOpts = listCommentFileCommand.optsWithGlobals();
+  const config = await getConfigOrThrow();
+  const client = new DoorayApiClient(config.apiKey, config.baseUrl);
+  const { projectId, postId, commentId } = await resolveCommentFileInput(client, {
+    arg1,
+    arg2,
+    arg3,
+    idOpt: opts.id,
+    urlOpt: opts.url,
+    commentIdOpt: opts.commentId,
+    requireSecondary: false
+  });
+  startSpinner("\uB313\uAE00 \uCCA8\uBD80 \uD30C\uC77C \uBAA9\uB85D \uC870\uD68C \uC911...");
+  const res = await client.getPostComment(projectId, postId, commentId);
+  const files = res.result.files ?? [];
+  stopSpinner(true, `\uCCA8\uBD80 \uD30C\uC77C ${files.length}\uAC1C`);
+  if (files.length === 0) {
+    if (globalOpts.json) {
+      process.stdout.write("[]\n");
+    } else if (!globalOpts.quiet) {
+      process.stdout.write("\uCCA8\uBD80 \uC5C6\uC74C\n");
+    }
+    return;
+  }
+  output(globalOpts, {
+    headers: ["\uD30C\uC77C\uBA85", "\uD06C\uAE30", "ID"],
+    rows: files.map((f) => [f.name, formatSize(f.size), f.id]),
+    raw: files,
+    ids: files.map((f) => f.id)
+  });
+});
+
+// src/commands/post/comment/file/upload.ts
+var import_commander24 = require("commander");
+var import_node_path4 = require("path");
+
+// src/utils/comment-files.ts
+function appendFileReference(body, fileName, fileId) {
+  const safeName = fileName.replace(/[\[\]]/g, "");
+  const ref = `![${safeName}](/files/${fileId})`;
+  if (body.length === 0) return ref;
+  const trailing = body.endsWith("\n") ? "" : "\n";
+  return `${body}${trailing}
+${ref}`;
+}
+function removeFileReference(body, fileId) {
+  const escaped = fileId.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  const refSource = `!\\[[^\\]]*\\]\\(/files/${escaped}\\)`;
+  const lineRe = new RegExp(`^[ \\t]*${refSource}[ \\t]*$\\n?`, "gm");
+  const inlineRe = new RegExp(refSource, "g");
+  return body.replace(lineRe, "").replace(inlineRe, "");
+}
+
+// src/commands/post/comment/file/upload.ts
+var uploadCommentFileCommand = new import_commander24.Command("upload").description("\uB313\uAE00\uC5D0 \uD30C\uC77C \uC5C5\uB85C\uB4DC (post-level \uD30C\uC77C \uC5C5\uB85C\uB4DC + \uB313\uAE00 reference \uCD94\uAC00, ADR-024)").argument("[arg1]", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC, Dooray URL, \uB610\uB294 (`--id`/`--url` \uBAA8\uB4DC\uC77C \uB54C) \uB313\uAE00 ID").argument("[arg2]", "\uC5C5\uBB34 \uBC88\uD638 \uB610\uB294 (`--id`/`--url` \uBAA8\uB4DC\uC77C \uB54C) \uD30C\uC77C \uACBD\uB85C").argument("[arg3]", "\uB313\uAE00 ID (positional \uBAA8\uB4DC)").argument("[arg4]", "\uD30C\uC77C \uACBD\uB85C (positional \uBAA8\uB4DC)").option("--id <postId>", "Dooray post ID (project/post-number \uB300\uC2E0)").option("--url <url>", "Dooray \uC5C5\uBB34 URL (project/post-number \uB300\uC2E0)").option("--comment-id <logId>", "\uB313\uAE00 ID (positional \uB300\uCCB4)").option("--file <path>", "\uC5C5\uB85C\uB4DC\uD560 \uD30C\uC77C \uACBD\uB85C (positional \uB300\uCCB4)").action(async (arg1, arg2, arg3, arg4, opts) => {
+  const globalOpts = uploadCommentFileCommand.optsWithGlobals();
+  const config = await getConfigOrThrow();
+  const client = new DoorayApiClient(config.apiKey, config.baseUrl);
+  const { projectId, postId, commentId, secondary: filePath } = await resolveCommentFileInput(client, {
+    arg1,
+    arg2,
+    arg3,
+    arg4,
+    idOpt: opts.id,
+    urlOpt: opts.url,
+    commentIdOpt: opts.commentId,
+    secondaryOpt: opts.file,
+    requireSecondary: true,
+    secondaryLabel: { positional: "4\uBC88\uC9F8", option: "--file", identifier: "<path>" }
+  });
+  startSpinner("\uD30C\uC77C \uC5C5\uB85C\uB4DC \uC911...");
+  const uploadRes = await client.uploadPostFile(projectId, postId, filePath);
+  const fileId = uploadRes.result.id;
+  const fileName = (0, import_node_path4.basename)(filePath);
+  stopSpinner(true, "\uC5C5\uB85C\uB4DC \uC644\uB8CC");
+  startSpinner("\uB313\uAE00 reference \uCD94\uAC00 \uC911...");
+  try {
+    const commentRes = await client.getPostComment(projectId, postId, commentId);
+    const currentBody = commentRes.result.body.content;
+    const newBody = appendFileReference(currentBody, fileName, fileId);
+    await client.updatePostComment(projectId, postId, commentId, {
+      body: { mimeType: "text/x-markdown", content: newBody }
+    });
+    stopSpinner(true, "reference \uCD94\uAC00 \uC644\uB8CC");
+  } catch {
+    stopSpinner(false, "");
+    throw new DoorayCliError(
+      `\uC5C5\uB85C\uB4DC OK / \uB313\uAE00 reference \uCD94\uAC00 \uC2E4\uD328. fileId=${fileId} \u2014 'dooray post comment file delete' \uB610\uB294 \uC218\uB3D9 PUT \uC73C\uB85C \uC815\uB9AC\uD558\uC138\uC694.`,
+      EXIT_API_ERROR
+    );
+  }
+  if (globalOpts.json) {
+    printJson({ fileId, fileName, commentId });
+  } else if (globalOpts.quiet) {
+    process.stdout.write(`${fileId}
+`);
+  } else {
+    process.stdout.write(`\uC5C5\uB85C\uB4DC + \uB313\uAE00 reference \uCD94\uAC00: fileId=${fileId}
+`);
+  }
+});
+
+// src/commands/post/comment/file/download.ts
+var import_commander25 = require("commander");
+var import_promises8 = require("fs/promises");
+var import_node_path5 = require("path");
+var downloadCommentFileCommand = new import_commander25.Command("download").description(
+  "\uB313\uAE00\uC5D0 \uCCA8\uBD80\uB41C \uD30C\uC77C \uB2E4\uC6B4\uB85C\uB4DC (\uD604\uC7AC comment-id \uB294 \uBBF8\uC0AC\uC6A9 \u2014 \uBA58\uD0C8 \uBAA8\uB378 \uC77C\uAD00\uC131, \uBBF8\uB798 \uB313\uAE00 \uB2E8\uC704 \uAD8C\uD55C \uD638\uD658\uC6A9)"
+).argument("[arg1]", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC, Dooray URL, \uB610\uB294 (`--id`/`--url` \uBAA8\uB4DC\uC77C \uB54C) \uB313\uAE00 ID").argument("[arg2]", "\uC5C5\uBB34 \uBC88\uD638 \uB610\uB294 (`--id`/`--url` \uBAA8\uB4DC\uC77C \uB54C) \uD30C\uC77C ID").argument("[arg3]", "\uB313\uAE00 ID (positional \uBAA8\uB4DC)").argument("[arg4]", "\uD30C\uC77C ID (positional \uBAA8\uB4DC)").option("--id <postId>", "Dooray post ID (project/post-number \uB300\uC2E0)").option("--url <url>", "Dooray \uC5C5\uBB34 URL (project/post-number \uB300\uC2E0)").option("--comment-id <logId>", "\uB313\uAE00 ID (positional \uB300\uCCB4)").option("--file-id <fileId>", "\uD30C\uC77C ID (positional \uB300\uCCB4)").option("--out <path>", "\uC800\uC7A5 \uACBD\uB85C (\uBBF8\uC9C0\uC815 \uC2DC \uD604\uC7AC \uB514\uB809\uD1A0\uB9AC\uC5D0 \uC6D0\uBCF8 \uD30C\uC77C\uBA85\uC73C\uB85C \uC800\uC7A5)", ".").action(async (arg1, arg2, arg3, arg4, opts) => {
+  const config = await getConfigOrThrow();
+  const client = new DoorayApiClient(config.apiKey, config.baseUrl);
+  const { projectId, postId, secondary: fileId } = await resolveCommentFileInput(client, {
+    arg1,
+    arg2,
+    arg3,
+    arg4,
+    idOpt: opts.id,
+    urlOpt: opts.url,
+    commentIdOpt: opts.commentId,
+    secondaryOpt: opts.fileId,
+    requireSecondary: true,
+    secondaryLabel: FILE_ID_SECONDARY_LABEL
+  });
+  startSpinner("\uD30C\uC77C \uB2E4\uC6B4\uB85C\uB4DC \uC911...");
+  const { buffer, fileName } = await client.downloadPostFile(projectId, postId, fileId);
+  const safeName = (0, import_node_path5.basename)(fileName);
+  const outputPath = (0, import_node_path5.join)(opts.out, safeName);
+  await (0, import_promises8.writeFile)(outputPath, Buffer.from(buffer));
+  stopSpinner(true, "\uB2E4\uC6B4\uB85C\uB4DC \uC644\uB8CC");
+  process.stdout.write(`${outputPath}
+`);
+});
+
+// src/commands/post/comment/file/delete.ts
+var import_commander26 = require("commander");
+var deleteCommentFileCommand = new import_commander26.Command("delete").description("\uB313\uAE00 \uCCA8\uBD80 \uD30C\uC77C \uC0AD\uC81C (\uB313\uAE00 \uBCF8\uBB38 reference \uC81C\uAC70 + \uD30C\uC77C \uC0AD\uC81C, ADR-024)").argument("[arg1]", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC, Dooray URL, \uB610\uB294 (`--id`/`--url` \uBAA8\uB4DC\uC77C \uB54C) \uB313\uAE00 ID").argument("[arg2]", "\uC5C5\uBB34 \uBC88\uD638 \uB610\uB294 (`--id`/`--url` \uBAA8\uB4DC\uC77C \uB54C) \uD30C\uC77C ID").argument("[arg3]", "\uB313\uAE00 ID (positional \uBAA8\uB4DC)").argument("[arg4]", "\uD30C\uC77C ID (positional \uBAA8\uB4DC)").option("--id <postId>", "Dooray post ID (project/post-number \uB300\uC2E0)").option("--url <url>", "Dooray \uC5C5\uBB34 URL (project/post-number \uB300\uC2E0)").option("--comment-id <logId>", "\uB313\uAE00 ID (positional \uB300\uCCB4)").option("--file-id <fileId>", "\uD30C\uC77C ID (positional \uB300\uCCB4)").option("--yes", "\uD655\uC778 \uC5C6\uC774 \uC0AD\uC81C").action(async (arg1, arg2, arg3, arg4, opts) => {
+  const config = await getConfigOrThrow();
+  const client = new DoorayApiClient(config.apiKey, config.baseUrl);
+  const { projectId, postId, commentId, secondary: fileId } = await resolveCommentFileInput(client, {
+    arg1,
+    arg2,
+    arg3,
+    arg4,
+    idOpt: opts.id,
+    urlOpt: opts.url,
+    commentIdOpt: opts.commentId,
+    secondaryOpt: opts.fileId,
+    requireSecondary: true,
+    secondaryLabel: FILE_ID_SECONDARY_LABEL
+  });
+  if (!opts.yes) {
+    const { confirm: confirm2 } = await import("@inquirer/prompts");
+    const ok = await confirm2({
+      message: `\uB313\uAE00 \uBCF8\uBB38\uC5D0\uC11C reference \uB97C \uC81C\uAC70\uD558\uACE0 \uD30C\uC77C(${fileId})\uC744 \uC0AD\uC81C\uD569\uB2C8\uB2E4. \uAC19\uC740 post \uC758 \uB2E4\uB978 \uB313\uAE00\uC5D0\uC11C \uAC19\uC740 \uD30C\uC77C ID \uB97C \uCC38\uC870\uD558\uB294 \uACBD\uC6B0 broken \uB429\uB2C8\uB2E4. \uACC4\uC18D\uD558\uC2DC\uACA0\uC2B5\uB2C8\uAE4C?`
+    });
+    if (!ok) {
+      process.stdout.write("\uCDE8\uC18C\uB418\uC5C8\uC2B5\uB2C8\uB2E4.\n");
+      return;
+    }
+  }
+  startSpinner("\uB313\uAE00 \uBCF8\uBB38 reference \uC81C\uAC70 \uC911...");
+  try {
+    const commentRes = await client.getPostComment(projectId, postId, commentId);
+    const currentBody = commentRes.result.body.content;
+    const newBody = removeFileReference(currentBody, fileId);
+    await client.updatePostComment(projectId, postId, commentId, {
+      body: { mimeType: "text/x-markdown", content: newBody }
+    });
+    stopSpinner(true, "reference \uC81C\uAC70 \uC644\uB8CC");
+  } catch {
+    stopSpinner(false, "");
+    throw new DoorayCliError(
+      `\uB313\uAE00 \uBCF8\uBB38 reference \uC81C\uAC70 \uC2E4\uD328. \uD30C\uC77C \uC0AD\uC81C\uB97C \uC9C4\uD589\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. fileId=${fileId}`,
+      EXIT_API_ERROR
+    );
+  }
+  startSpinner("\uD30C\uC77C \uC0AD\uC81C \uC911...");
+  try {
+    await client.deletePostFile(projectId, postId, fileId);
+    stopSpinner(true, "\uD30C\uC77C \uC0AD\uC81C \uC644\uB8CC");
+  } catch {
+    stopSpinner(false, "");
+    throw new DoorayCliError(
+      `\uB313\uAE00 \uBCF8\uBB38 reference \uC81C\uAC70 OK / \uD30C\uC77C \uC0AD\uC81C \uC2E4\uD328. 'dooray post file delete' \uB85C \uD6C4\uCC98\uB9AC\uD558\uC138\uC694. fileId=${fileId}`,
+      EXIT_API_ERROR
+    );
+  }
+  process.stdout.write(`\uD30C\uC77C(${fileId})\uC774 \uB313\uAE00(${commentId})\uC5D0\uC11C \uC0AD\uC81C\uB418\uC5C8\uC2B5\uB2C8\uB2E4.
+`);
+});
+
+// src/commands/post/comment/file/index.ts
+var commentFileCommand = new import_commander27.Command("file").description("\uB313\uAE00 \uCCA8\uBD80 \uD30C\uC77C \uAD00\uB9AC (post-level files API + \uB313\uAE00 PUT \uD569\uC131, ADR-024)").addCommand(listCommentFileCommand).addCommand(uploadCommentFileCommand).addCommand(downloadCommentFileCommand).addCommand(deleteCommentFileCommand);
+
+// src/commands/post/file/list.ts
+var import_commander28 = require("commander");
+function formatSize2(bytes) {
+  if (bytes < 1024) return `${bytes}B`;
+  if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)}KB`;
+  return `${(bytes / (1024 * 1024)).toFixed(1)}MB`;
+}
+var fileListCommand = new import_commander28.Command("list").description("\uC5C5\uBB34 \uCCA8\uBD80\uD30C\uC77C \uBAA9\uB85D \uC870\uD68C").argument("[project]", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC (\uB610\uB294 \uCCAB \uC778\uC790\uC5D0 Dooray URL)").argument("[post-number]", "\uC5C5\uBB34 \uBC88\uD638 (project\uC640 \uD568\uAED8 \uC0AC\uC6A9)").option("--id <postId>", "Dooray post ID (project/post-number \uB300\uC2E0)").option("--url <url>", "Dooray \uC5C5\uBB34 URL (project/post-number \uB300\uC2E0)").action(async (project, postNumberStr, opts) => {
   const globalOpts = fileListCommand.optsWithGlobals();
   const config = await getConfigOrThrow();
   const client = new DoorayApiClient(config.apiKey, config.baseUrl);
@@ -2433,7 +3248,7 @@ var fileListCommand = new import_commander22.Command("list").description("\uC5C5
     rows: res.result.map((f) => [
       f.id,
       f.name,
-      formatSize(f.size),
+      formatSize2(f.size),
       f.mimeType,
       f.createdAt
     ]),
@@ -2443,10 +3258,10 @@ var fileListCommand = new import_commander22.Command("list").description("\uC5C5
 });
 
 // src/commands/post/file/download.ts
-var import_commander23 = require("commander");
-var import_promises8 = require("fs/promises");
-var import_node_path4 = require("path");
-var fileDownloadCommand = new import_commander23.Command("download").description("\uCCA8\uBD80\uD30C\uC77C \uB2E4\uC6B4\uB85C\uB4DC").argument("[arg1]", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC, Dooray URL, \uB610\uB294 (`--id`/`--url` \uBAA8\uB4DC\uC77C \uB54C) \uD30C\uC77C ID").argument("[arg2]", "\uC5C5\uBB34 \uBC88\uD638 \uB610\uB294 (`--id`/`--url` \uBAA8\uB4DC\uC77C \uB54C) \uD30C\uC77C ID").argument("[arg3]", "\uD30C\uC77C ID (positional \uBAA8\uB4DC)").option("--id <postId>", "Dooray post ID (project/post-number \uB300\uC2E0)").option("--url <url>", "Dooray \uC5C5\uBB34 URL (project/post-number \uB300\uC2E0)").option("--file-id <fileId>", "\uD30C\uC77C ID (positional \uB300\uCCB4)").option("-o, --output <dir>", "\uC800\uC7A5 \uB514\uB809\uD1A0\uB9AC", ".").action(async (arg1, arg2, arg3, opts) => {
+var import_commander29 = require("commander");
+var import_promises9 = require("fs/promises");
+var import_node_path6 = require("path");
+var fileDownloadCommand = new import_commander29.Command("download").description("\uCCA8\uBD80\uD30C\uC77C \uB2E4\uC6B4\uB85C\uB4DC").argument("[arg1]", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC, Dooray URL, \uB610\uB294 (`--id`/`--url` \uBAA8\uB4DC\uC77C \uB54C) \uD30C\uC77C ID").argument("[arg2]", "\uC5C5\uBB34 \uBC88\uD638 \uB610\uB294 (`--id`/`--url` \uBAA8\uB4DC\uC77C \uB54C) \uD30C\uC77C ID").argument("[arg3]", "\uD30C\uC77C ID (positional \uBAA8\uB4DC)").option("--id <postId>", "Dooray post ID (project/post-number \uB300\uC2E0)").option("--url <url>", "Dooray \uC5C5\uBB34 URL (project/post-number \uB300\uC2E0)").option("--file-id <fileId>", "\uD30C\uC77C ID (positional \uB300\uCCB4)").option("-o, --output <dir>", "\uC800\uC7A5 \uB514\uB809\uD1A0\uB9AC", ".").action(async (arg1, arg2, arg3, opts) => {
   const config = await getConfigOrThrow();
   const client = new DoorayApiClient(config.apiKey, config.baseUrl);
   let projectArg;
@@ -2493,18 +3308,18 @@ var fileDownloadCommand = new import_commander23.Command("download").description
     urlOpt: opts.url
   });
   const { buffer, fileName } = await client.downloadPostFile(projectId, postId, fileId);
-  const outputPath = (0, import_node_path4.join)(opts.output, fileName);
-  await (0, import_promises8.writeFile)(outputPath, Buffer.from(buffer));
+  const outputPath = (0, import_node_path6.join)(opts.output, fileName);
+  await (0, import_promises9.writeFile)(outputPath, Buffer.from(buffer));
   stopSpinner(true, "\uB2E4\uC6B4\uB85C\uB4DC \uC644\uB8CC");
   process.stdout.write(`${outputPath}
 `);
 });
 
 // src/commands/post/file/download-all.ts
-var import_commander24 = require("commander");
-var import_promises9 = require("fs/promises");
-var import_node_path5 = require("path");
-var fileDownloadAllCommand = new import_commander24.Command("download-all").description("\uC5C5\uBB34\uC758 \uBAA8\uB4E0 \uCCA8\uBD80\uD30C\uC77C \uB2E4\uC6B4\uB85C\uB4DC").argument("[project]", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC (\uB610\uB294 \uCCAB \uC778\uC790\uC5D0 Dooray URL)").argument("[post-number]", "\uC5C5\uBB34 \uBC88\uD638 (project\uC640 \uD568\uAED8 \uC0AC\uC6A9)").option("--id <postId>", "Dooray post ID (project/post-number \uB300\uC2E0)").option("--url <url>", "Dooray \uC5C5\uBB34 URL (project/post-number \uB300\uC2E0)").option("-o, --output <dir>", "\uC800\uC7A5 \uB514\uB809\uD1A0\uB9AC", ".").action(async (project, postNumberStr, opts) => {
+var import_commander30 = require("commander");
+var import_promises10 = require("fs/promises");
+var import_node_path7 = require("path");
+var fileDownloadAllCommand = new import_commander30.Command("download-all").description("\uC5C5\uBB34\uC758 \uBAA8\uB4E0 \uCCA8\uBD80\uD30C\uC77C \uB2E4\uC6B4\uB85C\uB4DC").argument("[project]", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC (\uB610\uB294 \uCCAB \uC778\uC790\uC5D0 Dooray URL)").argument("[post-number]", "\uC5C5\uBB34 \uBC88\uD638 (project\uC640 \uD568\uAED8 \uC0AC\uC6A9)").option("--id <postId>", "Dooray post ID (project/post-number \uB300\uC2E0)").option("--url <url>", "Dooray \uC5C5\uBB34 URL (project/post-number \uB300\uC2E0)").option("-o, --output <dir>", "\uC800\uC7A5 \uB514\uB809\uD1A0\uB9AC", ".").action(async (project, postNumberStr, opts) => {
   const config = await getConfigOrThrow();
   const client = new DoorayApiClient(config.apiKey, config.baseUrl);
   const spinner = startSpinner("\uCCA8\uBD80\uD30C\uC77C \uBAA9\uB85D \uC870\uD68C \uC911...");
@@ -2520,13 +3335,13 @@ var fileDownloadAllCommand = new import_commander24.Command("download-all").desc
     process.stdout.write("\uCCA8\uBD80\uD30C\uC77C\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.\n");
     return;
   }
-  await (0, import_promises9.mkdir)(opts.output, { recursive: true });
+  await (0, import_promises10.mkdir)(opts.output, { recursive: true });
   const downloaded = [];
   for (const file of res.result) {
     spinner.text = `\uB2E4\uC6B4\uB85C\uB4DC \uC911: ${file.name} (${downloaded.length + 1}/${res.result.length})`;
     const { buffer, fileName } = await client.downloadPostFile(projectId, postId, file.id);
-    const outputPath = (0, import_node_path5.join)(opts.output, fileName);
-    await (0, import_promises9.writeFile)(outputPath, Buffer.from(buffer));
+    const outputPath = (0, import_node_path7.join)(opts.output, fileName);
+    await (0, import_promises10.writeFile)(outputPath, Buffer.from(buffer));
     downloaded.push(outputPath);
   }
   stopSpinner(true, `${downloaded.length}\uAC1C \uD30C\uC77C \uB2E4\uC6B4\uB85C\uB4DC \uC644\uB8CC`);
@@ -2537,9 +3352,9 @@ var fileDownloadAllCommand = new import_commander24.Command("download-all").desc
 });
 
 // src/commands/post/file/upload.ts
-var import_commander25 = require("commander");
-var import_node_path6 = require("path");
-var fileUploadCommand = new import_commander25.Command("upload").description("\uCCA8\uBD80\uD30C\uC77C \uC5C5\uB85C\uB4DC").argument("[arg1]", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC, Dooray URL, \uB610\uB294 (`--id`/`--url` \uBAA8\uB4DC\uC77C \uB54C) \uD30C\uC77C \uACBD\uB85C").argument("[arg2]", "\uC5C5\uBB34 \uBC88\uD638 \uB610\uB294 (`--id`/`--url` \uBAA8\uB4DC\uC77C \uB54C) \uD30C\uC77C \uACBD\uB85C").argument("[arg3]", "\uD30C\uC77C \uACBD\uB85C (positional \uBAA8\uB4DC)").option("--id <postId>", "Dooray post ID (project/post-number \uB300\uC2E0)").option("--url <url>", "Dooray \uC5C5\uBB34 URL (project/post-number \uB300\uC2E0)").option("--file <path>", "\uC5C5\uB85C\uB4DC\uD560 \uD30C\uC77C \uACBD\uB85C (positional \uB300\uCCB4)").action(async (arg1, arg2, arg3, opts) => {
+var import_commander31 = require("commander");
+var import_node_path8 = require("path");
+var fileUploadCommand = new import_commander31.Command("upload").description("\uCCA8\uBD80\uD30C\uC77C \uC5C5\uB85C\uB4DC").argument("[arg1]", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC, Dooray URL, \uB610\uB294 (`--id`/`--url` \uBAA8\uB4DC\uC77C \uB54C) \uD30C\uC77C \uACBD\uB85C").argument("[arg2]", "\uC5C5\uBB34 \uBC88\uD638 \uB610\uB294 (`--id`/`--url` \uBAA8\uB4DC\uC77C \uB54C) \uD30C\uC77C \uACBD\uB85C").argument("[arg3]", "\uD30C\uC77C \uACBD\uB85C (positional \uBAA8\uB4DC)").option("--id <postId>", "Dooray post ID (project/post-number \uB300\uC2E0)").option("--url <url>", "Dooray \uC5C5\uBB34 URL (project/post-number \uB300\uC2E0)").option("--file <path>", "\uC5C5\uB85C\uB4DC\uD560 \uD30C\uC77C \uACBD\uB85C (positional \uB300\uCCB4)").action(async (arg1, arg2, arg3, opts) => {
   const globalOpts = fileUploadCommand.optsWithGlobals();
   const config = await getConfigOrThrow();
   const client = new DoorayApiClient(config.apiKey, config.baseUrl);
@@ -2594,14 +3409,14 @@ var fileUploadCommand = new import_commander25.Command("upload").description("\u
     process.stdout.write(`${res.result.id}
 `);
   } else {
-    process.stdout.write(`\uD30C\uC77C \uC5C5\uB85C\uB4DC \uC644\uB8CC: ${(0, import_node_path6.basename)(filePath)} (ID: ${res.result.id})
+    process.stdout.write(`\uD30C\uC77C \uC5C5\uB85C\uB4DC \uC644\uB8CC: ${(0, import_node_path8.basename)(filePath)} (ID: ${res.result.id})
 `);
   }
 });
 
 // src/commands/post/file/delete.ts
-var import_commander26 = require("commander");
-var fileDeleteCommand = new import_commander26.Command("delete").description("\uCCA8\uBD80\uD30C\uC77C \uC0AD\uC81C").argument("[arg1]", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC, Dooray URL, \uB610\uB294 (`--id`/`--url` \uBAA8\uB4DC\uC77C \uB54C) \uD30C\uC77C ID").argument("[arg2]", "\uC5C5\uBB34 \uBC88\uD638 \uB610\uB294 (`--id`/`--url` \uBAA8\uB4DC\uC77C \uB54C) \uD30C\uC77C ID").argument("[arg3]", "\uD30C\uC77C ID (positional 3\uAC1C \uBAA8\uB4DC)").option("--id <postId>", "Dooray post ID (project/post-number \uB300\uC2E0)").option("--url <url>", "Dooray \uC5C5\uBB34 URL (project/post-number \uB300\uC2E0)").option("--file-id <fileId>", "\uD30C\uC77C ID (positional \uB300\uCCB4)").action(async (arg1, arg2, arg3, opts) => {
+var import_commander32 = require("commander");
+var fileDeleteCommand = new import_commander32.Command("delete").description("\uCCA8\uBD80\uD30C\uC77C \uC0AD\uC81C").argument("[arg1]", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC, Dooray URL, \uB610\uB294 (`--id`/`--url` \uBAA8\uB4DC\uC77C \uB54C) \uD30C\uC77C ID").argument("[arg2]", "\uC5C5\uBB34 \uBC88\uD638 \uB610\uB294 (`--id`/`--url` \uBAA8\uB4DC\uC77C \uB54C) \uD30C\uC77C ID").argument("[arg3]", "\uD30C\uC77C ID (positional 3\uAC1C \uBAA8\uB4DC)").option("--id <postId>", "Dooray post ID (project/post-number \uB300\uC2E0)").option("--url <url>", "Dooray \uC5C5\uBB34 URL (project/post-number \uB300\uC2E0)").option("--file-id <fileId>", "\uD30C\uC77C ID (positional \uB300\uCCB4)").action(async (arg1, arg2, arg3, opts) => {
   const config = await getConfigOrThrow();
   const client = new DoorayApiClient(config.apiKey, config.baseUrl);
   let projectArg;
@@ -2654,7 +3469,7 @@ var fileDeleteCommand = new import_commander26.Command("delete").description("\u
 });
 
 // src/commands/wiki/list.ts
-var import_commander27 = require("commander");
+var import_commander33 = require("commander");
 
 // src/formatters/wiki.ts
 function formatWikiList(wikis, opts) {
@@ -2697,7 +3512,7 @@ function formatWikiPageDetail(page, opts) {
 }
 
 // src/commands/wiki/list.ts
-var wikiListCommand = new import_commander27.Command("list").description("\uC704\uD0A4 \uBAA9\uB85D \uC870\uD68C").option("--page <number>", "\uD398\uC774\uC9C0 \uBC88\uD638", "0").option("--size <number>", "\uD398\uC774\uC9C0 \uD06C\uAE30", "20").action(async (opts) => {
+var wikiListCommand = new import_commander33.Command("list").description("\uC704\uD0A4 \uBAA9\uB85D \uC870\uD68C").option("--page <number>", "\uD398\uC774\uC9C0 \uBC88\uD638", "0").option("--size <number>", "\uD398\uC774\uC9C0 \uD06C\uAE30", "20").action(async (opts) => {
   const globalOpts = wikiListCommand.optsWithGlobals();
   const config = await getConfigOrThrow();
   const client = new DoorayApiClient(config.apiKey, config.baseUrl);
@@ -2711,7 +3526,7 @@ var wikiListCommand = new import_commander27.Command("list").description("\uC704
 });
 
 // src/commands/wiki/pages.ts
-var import_commander28 = require("commander");
+var import_commander34 = require("commander");
 
 // src/resolvers/wiki.ts
 async function resolveWiki(client, projectCode) {
@@ -2755,7 +3570,7 @@ async function resolveWikiHomePageId(client, wikiId) {
 }
 
 // src/commands/wiki/pages.ts
-var wikiPagesCommand = new import_commander28.Command("pages").description("\uC704\uD0A4 \uD398\uC774\uC9C0 \uBAA9\uB85D \uC870\uD68C").argument("<project>", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC \uB610\uB294 ID").option("--parent <page-id>", "\uBD80\uBAA8 \uD398\uC774\uC9C0 ID").action(async (project, opts) => {
+var wikiPagesCommand = new import_commander34.Command("pages").description("\uC704\uD0A4 \uD398\uC774\uC9C0 \uBAA9\uB85D \uC870\uD68C").argument("<project>", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC \uB610\uB294 ID").option("--parent <page-id>", "\uBD80\uBAA8 \uD398\uC774\uC9C0 ID").action(async (project, opts) => {
   const globalOpts = wikiPagesCommand.optsWithGlobals();
   const config = await getConfigOrThrow();
   const client = new DoorayApiClient(config.apiKey, config.baseUrl);
@@ -2767,8 +3582,8 @@ var wikiPagesCommand = new import_commander28.Command("pages").description("\uC7
 });
 
 // src/commands/wiki/page-get.ts
-var import_commander29 = require("commander");
-var wikiPageGetCommand = new import_commander29.Command("get").description("\uC704\uD0A4 \uD398\uC774\uC9C0 \uC0C1\uC138 \uC870\uD68C").argument("<project>", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC \uB610\uB294 ID").argument("<page-id>", "\uD398\uC774\uC9C0 ID").action(async (project, pageId) => {
+var import_commander35 = require("commander");
+var wikiPageGetCommand = new import_commander35.Command("get").description("\uC704\uD0A4 \uD398\uC774\uC9C0 \uC0C1\uC138 \uC870\uD68C").argument("<project>", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC \uB610\uB294 ID").argument("<page-id>", "\uD398\uC774\uC9C0 ID").action(async (project, pageId) => {
   const globalOpts = wikiPageGetCommand.optsWithGlobals();
   const config = await getConfigOrThrow();
   const client = new DoorayApiClient(config.apiKey, config.baseUrl);
@@ -2780,8 +3595,8 @@ var wikiPageGetCommand = new import_commander29.Command("get").description("\uC7
 });
 
 // src/commands/wiki/page-create.ts
-var import_commander30 = require("commander");
-var wikiPageCreateCommand = new import_commander30.Command("create").description("\uC704\uD0A4 \uD398\uC774\uC9C0 \uC0DD\uC131").argument("<project>", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC \uB610\uB294 ID").requiredOption("--title <title>", "\uD398\uC774\uC9C0 \uC81C\uBAA9").option("--parent <page-id>", "\uBD80\uBAA8 \uD398\uC774\uC9C0 ID").option("--body <text>", "\uBCF8\uBB38 \uD14D\uC2A4\uD2B8 (- \uC785\uB825 \uC2DC stdin\uC5D0\uC11C \uC77D\uAE30)").option("--body-file <path>", "\uBCF8\uBB38 \uD30C\uC77C \uACBD\uB85C (- \uC785\uB825 \uC2DC stdin\uC5D0\uC11C \uC77D\uAE30)").action(async (project, opts) => {
+var import_commander36 = require("commander");
+var wikiPageCreateCommand = new import_commander36.Command("create").description("\uC704\uD0A4 \uD398\uC774\uC9C0 \uC0DD\uC131").argument("<project>", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC \uB610\uB294 ID").requiredOption("--title <title>", "\uD398\uC774\uC9C0 \uC81C\uBAA9").option("--parent <page-id>", "\uBD80\uBAA8 \uD398\uC774\uC9C0 ID").option("--body <text>", "\uBCF8\uBB38 \uD14D\uC2A4\uD2B8 (- \uC785\uB825 \uC2DC stdin\uC5D0\uC11C \uC77D\uAE30)").option("--body-file <path>", "\uBCF8\uBB38 \uD30C\uC77C \uACBD\uB85C (- \uC785\uB825 \uC2DC stdin\uC5D0\uC11C \uC77D\uAE30)").action(async (project, opts) => {
   const globalOpts = wikiPageCreateCommand.optsWithGlobals();
   const config = await getConfigOrThrow();
   const client = new DoorayApiClient(config.apiKey, config.baseUrl);
@@ -2806,8 +3621,8 @@ var wikiPageCreateCommand = new import_commander30.Command("create").description
 });
 
 // src/commands/wiki/page-edit.ts
-var import_commander31 = require("commander");
-var wikiPageEditCommand = new import_commander31.Command("edit").description("\uC704\uD0A4 \uD398\uC774\uC9C0 \uC218\uC815 (\uD50C\uB798\uADF8 \uC5C6\uC73C\uBA74 $EDITOR)").argument("<project>", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC \uB610\uB294 ID").argument("<page-id>", "\uD398\uC774\uC9C0 ID").option("--title <title>", "\uD398\uC774\uC9C0 \uC81C\uBAA9 (\uC9C0\uC815 \uC2DC $EDITOR \uC0DD\uB7B5)").option("--body <text>", "\uBCF8\uBB38 \uD14D\uC2A4\uD2B8 (- \uC785\uB825 \uC2DC stdin\uC5D0\uC11C \uC77D\uAE30)").option("--body-file <path>", "\uBCF8\uBB38 \uD30C\uC77C \uACBD\uB85C (- \uC785\uB825 \uC2DC stdin\uC5D0\uC11C \uC77D\uAE30)").action(async (project, pageId, opts) => {
+var import_commander37 = require("commander");
+var wikiPageEditCommand = new import_commander37.Command("edit").description("\uC704\uD0A4 \uD398\uC774\uC9C0 \uC218\uC815 (\uD50C\uB798\uADF8 \uC5C6\uC73C\uBA74 $EDITOR)").argument("<project>", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC \uB610\uB294 ID").argument("<page-id>", "\uD398\uC774\uC9C0 ID").option("--title <title>", "\uD398\uC774\uC9C0 \uC81C\uBAA9 (\uC9C0\uC815 \uC2DC $EDITOR \uC0DD\uB7B5)").option("--body <text>", "\uBCF8\uBB38 \uD14D\uC2A4\uD2B8 (- \uC785\uB825 \uC2DC stdin\uC5D0\uC11C \uC77D\uAE30)").option("--body-file <path>", "\uBCF8\uBB38 \uD30C\uC77C \uACBD\uB85C (- \uC785\uB825 \uC2DC stdin\uC5D0\uC11C \uC77D\uAE30)").action(async (project, pageId, opts) => {
   const config = await getConfigOrThrow();
   const client = new DoorayApiClient(config.apiKey, config.baseUrl);
   const hasTitle = opts.title != null;
@@ -2860,10 +3675,10 @@ var wikiPageEditCommand = new import_commander31.Command("edit").description("\u
 });
 
 // src/commands/member/index.ts
-var import_commander34 = require("commander");
+var import_commander41 = require("commander");
 
 // src/commands/member/get.ts
-var import_commander32 = require("commander");
+var import_commander38 = require("commander");
 
 // src/formatters/member.ts
 function formatMemberDetail(member, opts) {
@@ -2893,9 +3708,23 @@ function formatMemberList(rows, opts) {
     ids: rows.map((r) => r.id)
   });
 }
+function formatMemberSearchResults(members, opts) {
+  output(opts, {
+    headers: ["ID", "Name", "UserCode", "Nickname", "Email"],
+    rows: members.map((m) => [
+      m.id,
+      m.name,
+      m.userCode ?? "",
+      m.nickname ?? "",
+      m.externalEmailAddress ?? ""
+    ]),
+    raw: members,
+    ids: members.map((m) => m.id)
+  });
+}
 
 // src/commands/member/get.ts
-var memberGetCommand = new import_commander32.Command("get").description("\uBA64\uBC84 \uC0C1\uC138 \uC815\uBCF4 \uC870\uD68C (organizationMemberId)").argument("<member-id>", "\uC870\uD68C\uD560 organization member ID").action(async (memberId) => {
+var memberGetCommand = new import_commander38.Command("get").description("\uBA64\uBC84 \uC0C1\uC138 \uC815\uBCF4 \uC870\uD68C (organizationMemberId)").argument("<member-id>", "\uC870\uD68C\uD560 organization member ID").action(async (memberId) => {
   const globalOpts = memberGetCommand.optsWithGlobals();
   const config = await getConfigOrThrow();
   const client = new DoorayApiClient(config.apiKey, config.baseUrl);
@@ -2904,8 +3733,8 @@ var memberGetCommand = new import_commander32.Command("get").description("\uBA64
 });
 
 // src/commands/member/list.ts
-var import_commander33 = require("commander");
-var memberListCommand = new import_commander33.Command("list").description("\uD504\uB85C\uC81D\uD2B8 \uBA64\uBC84 \uBAA9\uB85D").argument("<project>", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC \uB610\uB294 ID").action(async (project) => {
+var import_commander39 = require("commander");
+var memberListCommand = new import_commander39.Command("list").description("\uD504\uB85C\uC81D\uD2B8 \uBA64\uBC84 \uBAA9\uB85D").argument("<project>", "\uD504\uB85C\uC81D\uD2B8 \uCF54\uB4DC \uB610\uB294 ID").action(async (project) => {
   const globalOpts = memberListCommand.optsWithGlobals();
   const config = await getConfigOrThrow();
   const client = new DoorayApiClient(config.apiKey, config.baseUrl);
@@ -2919,13 +3748,48 @@ var memberListCommand = new import_commander33.Command("list").description("\uD5
   );
 });
 
+// src/commands/member/search.ts
+var import_commander40 = require("commander");
+var memberSearchCommand = new import_commander40.Command("search").description("organization \uC804\uCCB4\uC5D0\uC11C \uBA64\uBC84 \uAC80\uC0C9").argument("[keyword]", "\uC774\uB984 \uAC80\uC0C9\uC5B4 (--email/--user-code \uBBF8\uC9C0\uC815 \uC2DC name\uC73C\uB85C \uAC80\uC0C9)").option("--email <email>", "\uC678\uBD80 \uC774\uBA54\uC77C (\uCF64\uB9C8 \uAD6C\uBD84 \uAC00\uB2A5, exact match)").option("--user-code <code>", "\uC0AC\uBC88 like \uAC80\uC0C9").option("--user-code-exact <code>", "\uC0AC\uBC88 exact match").option("--page <n>", "\uD398\uC774\uC9C0 (\uAE30\uBCF8 0)", "0").option("--size <n>", "\uD398\uC774\uC9C0 \uD06C\uAE30 (\uAE30\uBCF8 20, max 100)", "20").action(async (keyword, opts) => {
+  const globalOpts = memberSearchCommand.optsWithGlobals();
+  const filterCount = [keyword, opts.email, opts.userCode, opts.userCodeExact].filter(Boolean).length;
+  if (filterCount === 0) {
+    throw new DoorayCliError(
+      "\uAC80\uC0C9 \uC870\uAC74\uC774 \uD544\uC694\uD569\uB2C8\uB2E4. positional <keyword>(=name) \uB610\uB294 --email/--user-code/--user-code-exact \uC911 \uD558\uB098 \uC774\uC0C1.",
+      EXIT_PARAM_ERROR
+    );
+  }
+  if (keyword && (opts.email || opts.userCode || opts.userCodeExact)) {
+    throw new DoorayCliError(
+      "positional <keyword>(name)\uC640 --email/--user-code/--user-code-exact \uC635\uC158\uC740 \uB3D9\uC2DC \uC0AC\uC6A9 \uBD88\uAC00.",
+      EXIT_PARAM_ERROR
+    );
+  }
+  const config = await getConfigOrThrow();
+  const client = new DoorayApiClient(config.apiKey, config.baseUrl);
+  const size = Math.min(Math.max(1, Number(opts.size) || 20), 100);
+  const page = Math.max(0, Number(opts.page) || 0);
+  startSpinner("\uBA64\uBC84 \uAC80\uC0C9 \uC911...");
+  const res = await client.searchMembers({
+    ...keyword && { name: keyword },
+    ...opts.email && { externalEmailAddresses: opts.email },
+    ...opts.userCode && { userCode: opts.userCode },
+    ...opts.userCodeExact && { userCodeExact: opts.userCodeExact },
+    page,
+    size
+  });
+  stopSpinner(true, `${res.totalCount}\uAC74 (\uC774 \uD398\uC774\uC9C0 ${res.result.length})`);
+  formatMemberSearchResults(res.result, globalOpts);
+});
+
 // src/commands/member/index.ts
-var memberCommand = new import_commander34.Command("member").description("Dooray \uBA64\uBC84 \uC870\uD68C");
+var memberCommand = new import_commander41.Command("member").description("Dooray \uBA64\uBC84 \uC870\uD68C");
 memberCommand.addCommand(memberGetCommand);
 memberCommand.addCommand(memberListCommand);
+memberCommand.addCommand(memberSearchCommand);
 
 // src/commands/mail/list.ts
-var import_commander35 = require("commander");
+var import_commander42 = require("commander");
 
 // src/api/imapClient.ts
 var import_imapflow = require("imapflow");
@@ -2966,7 +3830,7 @@ async function listMails(config, opts) {
       if (opts.search) query.subject = opts.search;
       if (Object.keys(query).length === 0) query.all = true;
       const uids = await client.search(query, { uid: true });
-      if (uids.length === 0) return [];
+      if (!Array.isArray(uids) || uids.length === 0) return [];
       const sorted = uids.sort((a, b) => b - a).slice(0, limit);
       const uidSet = sorted.join(",");
       const messages = [];
@@ -2975,15 +3839,17 @@ async function listMails(config, opts) {
         flags: true,
         envelope: true
       }, { uid: true })) {
+        const { envelope, flags } = msg;
+        if (!envelope || !flags) continue;
         messages.push({
           uid: msg.uid,
-          subject: msg.envelope.subject ?? "(\uC81C\uBAA9 \uC5C6\uC74C)",
-          from: msg.envelope.from?.[0] ? `${msg.envelope.from[0].name || ""} <${msg.envelope.from[0].address || ""}>` : "(unknown)",
-          to: (msg.envelope.to ?? []).map(
+          subject: envelope.subject ?? "(\uC81C\uBAA9 \uC5C6\uC74C)",
+          from: envelope.from?.[0] ? `${envelope.from[0].name || ""} <${envelope.from[0].address || ""}>` : "(unknown)",
+          to: (envelope.to ?? []).map(
             (t) => `${t.name || ""} <${t.address || ""}>`
           ),
-          date: msg.envelope.date ?? null,
-          isRead: msg.flags.has("\\Seen")
+          date: envelope.date ?? null,
+          isRead: flags.has("\\Seen")
         });
       }
       messages.sort((a, b) => b.uid - a.uid);
@@ -3010,17 +3876,24 @@ async function getMail(config, uid) {
       if (!msg) {
         throw new DoorayCliError(`\uBA54\uC77C\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: UID ${uid}`, 1);
       }
-      const parsed = await (0, import_mailparser.simpleParser)(msg.source);
-      const body = parsed.text ?? parsed.html ?? "(\uBCF8\uBB38 \uC5C6\uC74C)";
+      const { envelope, flags, source } = msg;
+      if (!envelope || !flags || !source) {
+        throw new DoorayCliError(
+          `\uBA54\uC77C \uBA54\uD0C0\uB370\uC774\uD130\uAC00 \uBD88\uC644\uC804\uD569\uB2C8\uB2E4 (UID ${uid}): envelope/flags/source \uB204\uB77D`,
+          1
+        );
+      }
+      const parsed = await (0, import_mailparser.simpleParser)(source);
+      const body = parsed.text || (parsed.html || "") || "(\uBCF8\uBB38 \uC5C6\uC74C)";
       return {
         uid: msg.uid,
-        subject: msg.envelope.subject ?? "(\uC81C\uBAA9 \uC5C6\uC74C)",
-        from: msg.envelope.from?.[0] ? `${msg.envelope.from[0].name || ""} <${msg.envelope.from[0].address || ""}>` : "(unknown)",
-        to: (msg.envelope.to ?? []).map(
+        subject: envelope.subject ?? "(\uC81C\uBAA9 \uC5C6\uC74C)",
+        from: envelope.from?.[0] ? `${envelope.from[0].name || ""} <${envelope.from[0].address || ""}>` : "(unknown)",
+        to: (envelope.to ?? []).map(
           (t) => `${t.name || ""} <${t.address || ""}>`
         ),
-        date: msg.envelope.date ?? null,
-        isRead: msg.flags.has("\\Seen"),
+        date: envelope.date ?? null,
+        isRead: flags.has("\\Seen"),
         body
       };
     } finally {
@@ -3033,7 +3906,7 @@ async function getMail(config, uid) {
 
 // src/commands/mail/list.ts
 var import_chalk5 = __toESM(require("chalk"));
-var mailListCommand = new import_commander35.Command("list").description("\uBA54\uC77C \uBAA9\uB85D \uC870\uD68C").option("--unread", "\uC548\uC77D\uC740 \uBA54\uC77C\uB9CC").option("--search <keyword>", "\uC81C\uBAA9 \uAC80\uC0C9").option("--size <number>", "\uC870\uD68C \uAC1C\uC218", "20").action(async (opts) => {
+var mailListCommand = new import_commander42.Command("list").description("\uBA54\uC77C \uBAA9\uB85D \uC870\uD68C").option("--unread", "\uC548\uC77D\uC740 \uBA54\uC77C\uB9CC").option("--search <keyword>", "\uC81C\uBAA9 \uAC80\uC0C9").option("--size <number>", "\uC870\uD68C \uAC1C\uC218", "20").action(async (opts) => {
   const globalOpts = mailListCommand.optsWithGlobals();
   const config = await getConfigOrThrow();
   startSpinner("\uBA54\uC77C \uC870\uD68C \uC911...");
@@ -3065,9 +3938,9 @@ var mailListCommand = new import_commander35.Command("list").description("\uBA54
 });
 
 // src/commands/mail/get.ts
-var import_commander36 = require("commander");
+var import_commander43 = require("commander");
 var import_chalk6 = __toESM(require("chalk"));
-var mailGetCommand = new import_commander36.Command("get").description("\uBA54\uC77C \uC0C1\uC138 \uC870\uD68C").argument("<uid>", "\uBA54\uC77C UID").action(async (uid) => {
+var mailGetCommand = new import_commander43.Command("get").description("\uBA54\uC77C \uC0C1\uC138 \uC870\uD68C").argument("<uid>", "\uBA54\uC77C UID").action(async (uid) => {
   const globalOpts = mailGetCommand.optsWithGlobals();
   const config = await getConfigOrThrow();
   startSpinner("\uBA54\uC77C \uC870\uD68C \uC911...");
@@ -3098,8 +3971,8 @@ ${mail.body}
 });
 
 // src/commands/mail/send.ts
-var import_commander37 = require("commander");
-var import_promises10 = require("fs/promises");
+var import_commander44 = require("commander");
+var import_promises11 = require("fs/promises");
 
 // src/api/smtpClient.ts
 var import_nodemailer = __toESM(require("nodemailer"));
@@ -3148,12 +4021,12 @@ async function sendMail(config, opts) {
 }
 
 // src/commands/mail/send.ts
-var mailSendCommand = new import_commander37.Command("send").description("\uBA54\uC77C \uBC1C\uC1A1").requiredOption("--to <addresses...>", "\uBC1B\uB294\uC0AC\uB78C \uC774\uBA54\uC77C (\uBCF5\uC218 \uAC00\uB2A5)").requiredOption("--subject <title>", "\uC81C\uBAA9").option("--body <text>", "\uBCF8\uBB38").option("--body-file <path>", "\uBCF8\uBB38 \uD30C\uC77C \uACBD\uB85C").option("--cc <addresses...>", "\uCC38\uC870").option("--bcc <addresses...>", "\uC228\uC740\uCC38\uC870").option("--html", "\uBCF8\uBB38\uC744 HTML\uB85C \uC804\uC1A1").action(async (opts) => {
+var mailSendCommand = new import_commander44.Command("send").description("\uBA54\uC77C \uBC1C\uC1A1").requiredOption("--to <addresses...>", "\uBC1B\uB294\uC0AC\uB78C \uC774\uBA54\uC77C (\uBCF5\uC218 \uAC00\uB2A5)").requiredOption("--subject <title>", "\uC81C\uBAA9").option("--body <text>", "\uBCF8\uBB38").option("--body-file <path>", "\uBCF8\uBB38 \uD30C\uC77C \uACBD\uB85C").option("--cc <addresses...>", "\uCC38\uC870").option("--bcc <addresses...>", "\uC228\uC740\uCC38\uC870").option("--html", "\uBCF8\uBB38\uC744 HTML\uB85C \uC804\uC1A1").action(async (opts) => {
   const globalOpts = mailSendCommand.optsWithGlobals();
   const config = await getConfigOrThrow();
   let body = opts.body ?? "";
   if (opts.bodyFile) {
-    body = await (0, import_promises10.readFile)(opts.bodyFile, "utf-8");
+    body = await (0, import_promises11.readFile)(opts.bodyFile, "utf-8");
   }
   if (!body) {
     process.stderr.write("\uC624\uB958: --body \uB610\uB294 --body-file\uC744 \uC9C0\uC815\uD558\uC138\uC694\n");
@@ -3183,8 +4056,8 @@ var mailSendCommand = new import_commander37.Command("send").description("\uBA54
 });
 
 // src/commands/mail/reply.ts
-var import_commander38 = require("commander");
-var import_promises11 = require("fs/promises");
+var import_commander45 = require("commander");
+var import_promises12 = require("fs/promises");
 var import_imapflow2 = require("imapflow");
 async function getMessageId(config, uid) {
   const imap = getImapConfigOrThrow(config);
@@ -3203,7 +4076,8 @@ async function getMessageId(config, uid) {
         uid: true,
         envelope: true
       }, { uid: true });
-      return msg?.envelope.messageId ?? null;
+      if (!msg) return null;
+      return msg.envelope?.messageId ?? null;
     } finally {
       lock.release();
     }
@@ -3211,12 +4085,12 @@ async function getMessageId(config, uid) {
     await client.logout();
   }
 }
-var mailReplyCommand = new import_commander38.Command("reply").description("\uBA54\uC77C \uB2F5\uC7A5").argument("<uid>", "\uC6D0\uBCF8 \uBA54\uC77C UID").option("--body <text>", "\uB2F5\uC7A5 \uBCF8\uBB38").option("--body-file <path>", "\uB2F5\uC7A5 \uBCF8\uBB38 \uD30C\uC77C \uACBD\uB85C").option("--cc <addresses...>", "\uCC38\uC870").option("--html", "\uBCF8\uBB38\uC744 HTML\uB85C \uC804\uC1A1").action(async (uid, opts) => {
+var mailReplyCommand = new import_commander45.Command("reply").description("\uBA54\uC77C \uB2F5\uC7A5").argument("<uid>", "\uC6D0\uBCF8 \uBA54\uC77C UID").option("--body <text>", "\uB2F5\uC7A5 \uBCF8\uBB38").option("--body-file <path>", "\uB2F5\uC7A5 \uBCF8\uBB38 \uD30C\uC77C \uACBD\uB85C").option("--cc <addresses...>", "\uCC38\uC870").option("--html", "\uBCF8\uBB38\uC744 HTML\uB85C \uC804\uC1A1").action(async (uid, opts) => {
   const globalOpts = mailReplyCommand.optsWithGlobals();
   const config = await getConfigOrThrow();
   let body = opts.body ?? "";
   if (opts.bodyFile) {
-    body = await (0, import_promises11.readFile)(opts.bodyFile, "utf-8");
+    body = await (0, import_promises12.readFile)(opts.bodyFile, "utf-8");
   }
   if (!body) {
     process.stderr.write("\uC624\uB958: --body \uB610\uB294 --body-file\uC744 \uC9C0\uC815\uD558\uC138\uC694\n");
@@ -3252,29 +4126,29 @@ var mailReplyCommand = new import_commander38.Command("reply").description("\uBA
 });
 
 // src/commands/feedback.ts
-var import_commander39 = require("commander");
+var import_commander46 = require("commander");
 var import_node_child_process2 = require("child_process");
 var import_node_util = require("util");
-var import_promises13 = require("fs/promises");
-var import_node_os3 = require("os");
-var import_node_path8 = require("path");
+var import_promises15 = require("fs/promises");
+var import_node_os4 = require("os");
+var import_node_path11 = require("path");
 var import_node_crypto = require("crypto");
 var import_prompts = require("@inquirer/prompts");
 
 // src/utils/feedback-meta.ts
-var import_promises12 = require("fs/promises");
-var import_node_path7 = require("path");
+var import_promises13 = require("fs/promises");
+var import_node_path9 = require("path");
 async function readCliVersion() {
   const entry = process.argv[1];
-  const here = entry ? (0, import_node_path7.dirname)(entry) : process.cwd();
+  const here = entry ? (0, import_node_path9.dirname)(entry) : process.cwd();
   const candidates = [
-    (0, import_node_path7.join)(here, "package.json"),
-    (0, import_node_path7.join)(here, "..", "package.json"),
-    (0, import_node_path7.join)(here, "..", "..", "package.json")
+    (0, import_node_path9.join)(here, "package.json"),
+    (0, import_node_path9.join)(here, "..", "package.json"),
+    (0, import_node_path9.join)(here, "..", "..", "package.json")
   ];
   for (const p of candidates) {
     try {
-      const raw = await (0, import_promises12.readFile)(p, "utf-8");
+      const raw = await (0, import_promises13.readFile)(p, "utf-8");
       const pkg = JSON.parse(raw);
       if (pkg.name === "@bifos/dooray-cli" && typeof pkg.version === "string") {
         return pkg.version;
@@ -3292,6 +4166,19 @@ function collectMeta(version) {
     arch: process.arch
   };
 }
+function buildLastRunBlock(last) {
+  return [
+    "## \uC9C1\uC804 \uC2E4\uD589 (\uC790\uB3D9 \uCCA8\uBD80)",
+    "",
+    "```",
+    `$ ${last.argv.join(" ")}`,
+    last.errorMessage.replace(/```/g, "'''"),
+    "```",
+    "",
+    `- exit code: ${last.exitCode}`,
+    `- \uC2DC\uAC01: ${last.timestamp}`
+  ].join("\n");
+}
 function buildIssueBody(userBody, meta) {
   return [
     "## \uD658\uACBD",
@@ -3306,6 +4193,32 @@ function buildIssueBody(userBody, meta) {
   ].join("\n");
 }
 
+// src/cache/last-run.ts
+var import_promises14 = require("fs/promises");
+var import_node_path10 = require("path");
+var import_node_os3 = require("os");
+var LAST_RUN_PATH = (0, import_node_path10.join)((0, import_node_os3.homedir)(), ".dooray", "last-run.json");
+function isLastRun(obj) {
+  if (typeof obj !== "object" || obj === null) return false;
+  const o = obj;
+  return Array.isArray(o.argv) && o.argv.every((a) => typeof a === "string") && typeof o.exitCode === "number" && typeof o.errorMessage === "string" && typeof o.timestamp === "string";
+}
+async function readLastRun() {
+  try {
+    const raw = await (0, import_promises14.readFile)(LAST_RUN_PATH, "utf-8");
+    const parsed = JSON.parse(raw);
+    return isLastRun(parsed) ? parsed : null;
+  } catch {
+    return null;
+  }
+}
+async function writeLastRun(data) {
+  await (0, import_promises14.mkdir)((0, import_node_path10.join)((0, import_node_os3.homedir)(), ".dooray"), { recursive: true });
+  const tmp2 = LAST_RUN_PATH + ".tmp";
+  await (0, import_promises14.writeFile)(tmp2, JSON.stringify(data, null, 2) + "\n", { mode: 384 });
+  await (0, import_promises14.rename)(tmp2, LAST_RUN_PATH);
+}
+
 // src/commands/feedback.ts
 var execFileAsync = (0, import_node_util.promisify)(import_node_child_process2.execFile);
 var TARGET_REPO = "jon890/dooray-cli";
@@ -3321,18 +4234,36 @@ async function ensureGhInstalled() {
 }
 async function readBody(opts) {
   if (opts.body) return opts.body;
-  if (opts.bodyFile) return await (0, import_promises13.readFile)(opts.bodyFile, "utf-8");
+  if (opts.bodyFile) return await (0, import_promises15.readFile)(opts.bodyFile, "utf-8");
   return void 0;
 }
-var feedbackCommand = new import_commander39.Command("feedback").description("dooray-cli\uC5D0 \uB300\uD55C GitHub issue \uB4F1\uB85D (gh CLI \uC704\uC784)").option("--title <text>", "\uC774\uC288 \uC81C\uBAA9 (\uC5C6\uC73C\uBA74 \uC778\uD130\uB799\uD2F0\uBE0C)").option("--body <text>", "\uC774\uC288 \uBCF8\uBB38").option("--body-file <path>", "\uBCF8\uBB38 \uD30C\uC77C \uACBD\uB85C").option(
+var feedbackCommand = new import_commander46.Command("feedback").description("dooray-cli\uC5D0 \uB300\uD55C GitHub issue \uB4F1\uB85D (gh CLI \uC704\uC784)").option("--title <text>", "\uC774\uC288 \uC81C\uBAA9 (\uC5C6\uC73C\uBA74 \uC778\uD130\uB799\uD2F0\uBE0C)").option("--body <text>", "\uC774\uC288 \uBCF8\uBB38").option("--body-file <path>", "\uBCF8\uBB38 \uD30C\uC77C \uACBD\uB85C").option(
   "--label <name>",
   "\uB77C\uBCA8 (\uBC18\uBCF5 \uAC00\uB2A5)",
   (value, prev) => [...prev, value],
   []
-).option("--dry-run", "gh \uD638\uCD9C \uC5C6\uC774 \uBCF8\uBB38\uB9CC \uBBF8\uB9AC\uBCF4\uAE30").action(async (opts) => {
+).option("--last", "\uC9C1\uC804 \uC2E4\uD589\uD55C dooray \uBA85\uB839\uC758 argv + \uC5D0\uB7EC\uB97C \uBCF8\uBB38 \uC0C1\uB2E8\uC5D0 \uC790\uB3D9 \uCCA8\uBD80").option("--dry-run", "gh \uD638\uCD9C \uC5C6\uC774 \uBCF8\uBB38\uB9CC \uBBF8\uB9AC\uBCF4\uAE30").action(async (opts) => {
   let title = opts.title;
   let userBody = await readBody(opts);
   let labels = [...opts.label];
+  if (opts.last) {
+    const last = await readLastRun();
+    if (!last) {
+      throw new DoorayCliError(
+        "\uAE30\uB85D\uB41C \uC9C1\uC804 \uC2E4\uD589\uC774 \uC5C6\uC2B5\uB2C8\uB2E4. config.json\uC5D0 trackLastRun: true \uC124\uC815 \uD6C4 dooray \uBA85\uB839 \uC2E4\uD589 \uC2DC \uC790\uB3D9 \uAE30\uB85D\uB429\uB2C8\uB2E4.\n  \uC124\uC815: dooray config set track-last-run true",
+        EXIT_PARAM_ERROR
+      );
+    }
+    const lastBlock = buildLastRunBlock(last);
+    if (userBody == null) {
+      userBody = await (0, import_prompts.editor)({
+        message: "\uBCF8\uBB38 \uC791\uC131 ($EDITOR\uAC00 \uC5F4\uB9BC)",
+        default: lastBlock + "\n\n"
+      });
+    } else {
+      userBody = lastBlock + "\n\n" + userBody;
+    }
+  }
   if (!title) {
     title = await (0, import_prompts.input)({ message: "\uC774\uC288 \uC81C\uBAA9" });
   }
@@ -3397,8 +4328,8 @@ var feedbackCommand = new import_commander39.Command("feedback").description("do
     }
   }
   await ensureGhInstalled();
-  const bodyFile = (0, import_node_path8.join)((0, import_node_os3.tmpdir)(), `dooray-feedback-${(0, import_node_crypto.randomUUID)()}.md`);
-  await (0, import_promises13.writeFile)(bodyFile, issueBody);
+  const bodyFile = (0, import_node_path11.join)((0, import_node_os4.tmpdir)(), `dooray-feedback-${(0, import_node_crypto.randomUUID)()}.md`);
+  await (0, import_promises15.writeFile)(bodyFile, issueBody);
   try {
     const args = [
       "issue",
@@ -3425,27 +4356,68 @@ gh \uC778\uC99D \uC548 \uB418\uC5B4 \uC788\uC73C\uBA74: gh auth login`,
       EXIT_PARAM_ERROR
     );
   } finally {
-    await (0, import_promises13.unlink)(bodyFile).catch(() => {
+    await (0, import_promises15.unlink)(bodyFile).catch(() => {
     });
   }
 });
 
+// src/utils/argv-sanitize.ts
+var KEY_VALUE_PATTERNS = [
+  /^(--api-key|--token|--password)=(.+)$/
+];
+var SEPARATED_KEYS = /* @__PURE__ */ new Set(["--api-key", "--token", "--password"]);
+function sanitizeArgv(argv) {
+  const out = [];
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    let kvMatch = null;
+    for (const re of KEY_VALUE_PATTERNS) {
+      const m = re.exec(a);
+      if (m) {
+        kvMatch = m;
+        break;
+      }
+    }
+    if (kvMatch) {
+      out.push(`${kvMatch[1]}=***`);
+      continue;
+    }
+    if (SEPARATED_KEYS.has(a)) {
+      out.push(a);
+      if (i + 1 < argv.length) {
+        out.push("***");
+        i++;
+      }
+      continue;
+    }
+    if (/^Authorization\s*:/i.test(a) || /^Bearer\s+\S+/.test(a)) {
+      out.push(a.replace(/(Authorization\s*:\s*).+/i, "$1***").replace(/^(Bearer\s+).+/i, "$1***"));
+      continue;
+    }
+    out.push(a);
+  }
+  return out;
+}
+
 // src/index.ts
-var program = new import_commander40.Command();
-program.name("dooray").description("Dooray REST API CLI").version("0.5.4").option("--json", "JSON \uD615\uC2DD\uC73C\uB85C \uCD9C\uB825").option("--quiet", "ID\uB9CC \uCD9C\uB825").option("--no-color", "\uC0C9\uC0C1 \uBE44\uD65C\uC131\uD654");
+var program = new import_commander47.Command();
+program.name("dooray").description("Dooray REST API CLI").version("0.7.0").option("--json", "JSON \uD615\uC2DD\uC73C\uB85C \uCD9C\uB825").option("--quiet", "ID\uB9CC \uCD9C\uB825").option("--no-color", "\uC0C9\uC0C1 \uBE44\uD65C\uC131\uD654");
 program.hook("preAction", () => {
   const opts = program.opts();
   if (opts.color === false || process.env.NO_COLOR) {
     import_chalk7.default.level = 0;
   }
+  if (opts.json || opts.quiet) {
+    setQuiet(true);
+  }
 });
-var projectCommand = new import_commander40.Command("project").description("\uD504\uB85C\uC81D\uD2B8 \uAD00\uB828 \uBA85\uB839");
+var projectCommand = new import_commander47.Command("project").description("\uD504\uB85C\uC81D\uD2B8 \uAD00\uB828 \uBA85\uB839");
 projectCommand.addCommand(projectListCommand);
 projectCommand.addCommand(projectMembersCommand);
 projectCommand.addCommand(projectWorkflowsCommand);
 projectCommand.addCommand(projectGroupsCommand);
 projectCommand.addCommand(projectTagsCommand);
-var postCommand = new import_commander40.Command("post").description("\uC5C5\uBB34 \uAD00\uB828 \uBA85\uB839");
+var postCommand = new import_commander47.Command("post").description("\uC5C5\uBB34 \uAD00\uB828 \uBA85\uB839");
 postCommand.addCommand(postListCommand);
 postCommand.addCommand(postSearchCommand);
 postCommand.addCommand(postGetCommand);
@@ -3453,29 +4425,31 @@ postCommand.addCommand(postEditCommand);
 postCommand.addCommand(postCreateCommand);
 postCommand.addCommand(postDoneCommand);
 postCommand.addCommand(postWorkflowCommand);
-var commentCommand = new import_commander40.Command("comment").description("\uB313\uAE00 \uAD00\uB828 \uBA85\uB839");
+var commentCommand = new import_commander47.Command("comment").description("\uB313\uAE00 \uAD00\uB828 \uBA85\uB839");
 commentCommand.addCommand(commentListCommand);
 commentCommand.addCommand(commentLatestCommand);
+commentCommand.addCommand(commentGetCommand);
 commentCommand.addCommand(commentAddCommand);
 commentCommand.addCommand(commentEditCommand);
 commentCommand.addCommand(commentDeleteCommand);
+commentCommand.addCommand(commentFileCommand);
 postCommand.addCommand(commentCommand);
-var fileCommand = new import_commander40.Command("file").description("\uCCA8\uBD80\uD30C\uC77C \uAD00\uB828 \uBA85\uB839");
+var fileCommand = new import_commander47.Command("file").description("\uCCA8\uBD80\uD30C\uC77C \uAD00\uB828 \uBA85\uB839");
 fileCommand.addCommand(fileListCommand);
 fileCommand.addCommand(fileDownloadCommand);
 fileCommand.addCommand(fileDownloadAllCommand);
 fileCommand.addCommand(fileUploadCommand);
 fileCommand.addCommand(fileDeleteCommand);
 postCommand.addCommand(fileCommand);
-var wikiCommand = new import_commander40.Command("wiki").description("\uC704\uD0A4 \uAD00\uB828 \uBA85\uB839");
+var wikiCommand = new import_commander47.Command("wiki").description("\uC704\uD0A4 \uAD00\uB828 \uBA85\uB839");
 wikiCommand.addCommand(wikiListCommand);
 wikiCommand.addCommand(wikiPagesCommand);
-var wikiPageCommand = new import_commander40.Command("page").description("\uC704\uD0A4 \uD398\uC774\uC9C0 \uAD00\uB828 \uBA85\uB839");
+var wikiPageCommand = new import_commander47.Command("page").description("\uC704\uD0A4 \uD398\uC774\uC9C0 \uAD00\uB828 \uBA85\uB839");
 wikiPageCommand.addCommand(wikiPageGetCommand);
 wikiPageCommand.addCommand(wikiPageCreateCommand);
 wikiPageCommand.addCommand(wikiPageEditCommand);
 wikiCommand.addCommand(wikiPageCommand);
-var mailCommand = new import_commander40.Command("mail").description("\uBA54\uC77C \uAD00\uB828 \uBA85\uB839");
+var mailCommand = new import_commander47.Command("mail").description("\uBA54\uC77C \uAD00\uB828 \uBA85\uB839");
 mailCommand.addCommand(mailListCommand);
 mailCommand.addCommand(mailGetCommand);
 mailCommand.addCommand(mailSendCommand);
@@ -3490,11 +4464,24 @@ program.addCommand(postCommand);
 program.addCommand(wikiCommand);
 program.addCommand(mailCommand);
 program.addCommand(feedbackCommand);
-program.parseAsync().catch((err) => {
-  if (err instanceof DoorayCliError) {
-    process.stderr.write(import_chalk7.default.red(`\uC624\uB958: ${err.message}`) + "\n");
-    process.exit(err.exitCode);
+program.parseAsync().catch(async (err) => {
+  const errorMessage = err instanceof Error ? err.message : String(err);
+  const exitCode = err instanceof DoorayCliError ? err.exitCode : 1;
+  try {
+    const config = await getConfig();
+    const sanitized = sanitizeArgv(process.argv.slice(2));
+    const firstNonFlag = sanitized.find((a) => !a.startsWith("-"));
+    const isFeedbackCommand = firstNonFlag === "feedback";
+    if (config?.trackLastRun && !isFeedbackCommand) {
+      await writeLastRun({
+        argv: ["dooray", ...sanitized],
+        exitCode,
+        errorMessage,
+        timestamp: (/* @__PURE__ */ new Date()).toISOString()
+      });
+    }
+  } catch {
   }
-  process.stderr.write(import_chalk7.default.red(`\uC624\uB958: ${err.message}`) + "\n");
-  process.exit(1);
+  process.stderr.write(import_chalk7.default.red(`\uC624\uB958: ${errorMessage}`) + "\n");
+  process.exit(exitCode);
 });