@bifos/nhncloud-cli 0.10.0 → 0.11.0

package/dist/index.js

@@ -24,7 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 
 // src/index.ts
-var import_commander48 = require("commander");
+var import_commander53 = require("commander");
 var import_chalk18 = __toESM(require("chalk"));
 
 // src/utils/spinner.ts
@@ -315,15 +315,18 @@ var import_node_path2 = require("path");
 var import_node_os2 = require("os");
 var import_node_crypto = require("crypto");
 var CACHE_DIR = (0, import_node_path2.join)((0, import_node_os2.homedir)(), ".nhncloud", "cache");
+function credentialFingerprint(material) {
+  return (0, import_node_crypto.createHash)("sha256").update(material).digest("hex");
+}
 function iaasCachePath(profile, region) {
   return (0, import_node_path2.join)(CACHE_DIR, `iaas-token-${profile}-${region}.json`);
 }
 function isIaasTokenCache(val) {
   if (typeof val !== "object" || val === null) return false;
   const obj = val;
-  return typeof obj["tokenId"] === "string" && typeof obj["expiresAt"] === "string" && typeof obj["computeEndpoint"] === "string" && typeof obj["imageEndpoint"] === "string" && typeof obj["networkEndpoint"] === "string" && typeof obj["blockStorageEndpoint"] === "string" && typeof obj["nksEndpoint"] === "string";
+  return typeof obj["tokenId"] === "string" && typeof obj["expiresAt"] === "string" && typeof obj["credentialHash"] === "string" && typeof obj["computeEndpoint"] === "string" && typeof obj["imageEndpoint"] === "string" && typeof obj["networkEndpoint"] === "string" && typeof obj["blockStorageEndpoint"] === "string" && typeof obj["nksEndpoint"] === "string";
 }
-async function readIaasToken(profile, region) {
+async function readIaasToken(profile, region, credentialHash) {
   const filePath = iaasCachePath(profile, region);
   try {
     const raw = await (0, import_promises2.readFile)(filePath, "utf-8");
@@ -332,6 +335,7 @@ async function readIaasToken(profile, region) {
     const expiresAt = new Date(parsed.expiresAt).getTime();
     const BUFFER_MS = 6e4;
     if (expiresAt - Date.now() < BUFFER_MS) return null;
+    if (parsed.credentialHash !== credentialHash) return null;
     return {
       tokenId: parsed.tokenId,
       expiresAt: parsed.expiresAt,
@@ -351,6 +355,7 @@ async function writeIaasToken(profile, region, data) {
   const cache = {
     tokenId: data.tokenId,
     expiresAt: data.expiresAt,
+    credentialHash: data.credentialHash,
     computeEndpoint: data.computeEndpoint,
     imageEndpoint: data.imageEndpoint,
     networkEndpoint: data.networkEndpoint,
@@ -362,14 +367,14 @@ async function writeIaasToken(profile, region, data) {
   await (0, import_promises2.rename)(tmp, filePath);
 }
 function tokenCachePath(profile) {
-  return (0, import_node_path2.join)(CACHE_DIR, `deploy-token-${profile}.json`);
+  return (0, import_node_path2.join)(CACHE_DIR, `user-access-token-${profile}.json`);
 }
 function isTokenCache(val) {
   if (typeof val !== "object" || val === null) return false;
   const obj = val;
-  return typeof obj["accessToken"] === "string" && typeof obj["expiresAt"] === "string";
+  return typeof obj["accessToken"] === "string" && typeof obj["expiresAt"] === "string" && typeof obj["credentialHash"] === "string";
 }
-async function readToken(profile) {
+async function readToken(profile, credentialHash) {
   const filePath = tokenCachePath(profile);
   try {
     const raw = await (0, import_promises2.readFile)(filePath, "utf-8");
@@ -379,17 +384,19 @@ async function readToken(profile) {
     const now = Date.now();
     const BUFFER_MS = 6e4;
     if (expiresAt - now < BUFFER_MS) return null;
+    if (parsed.credentialHash !== credentialHash) return null;
     return { accessToken: parsed.accessToken, expiresAt: parsed.expiresAt };
   } catch {
     return null;
   }
 }
-async function writeToken(profile, accessToken, expiresAt) {
+async function writeToken(profile, accessToken, expiresAt, credentialHash) {
   const filePath = tokenCachePath(profile);
   await (0, import_promises2.mkdir)((0, import_node_path2.dirname)(filePath), { recursive: true });
   const data = {
     accessToken,
-    expiresAt: expiresAt.toISOString()
+    expiresAt: expiresAt.toISOString(),
+    credentialHash
   };
   const tmp = filePath + "." + (0, import_node_crypto.randomBytes)(4).toString("hex") + ".tmp";
   await (0, import_promises2.writeFile)(tmp, JSON.stringify(data, null, 2), { encoding: "utf-8", mode: 384 });
@@ -424,8 +431,9 @@ function isTokenResponse(val) {
   return typeof obj["access_token"] === "string" && typeof obj["expires_in"] === "number";
 }
 async function getAccessToken(profile, uakId, uakSecret, forceRefresh = false) {
+  const credentialHash = credentialFingerprint(JSON.stringify([uakId, uakSecret]));
   if (!forceRefresh) {
-    const cached = await readToken(profile);
+    const cached = await readToken(profile, credentialHash);
     if (cached !== null) {
       return cached.accessToken;
     }
@@ -449,7 +457,7 @@ async function getAccessToken(profile, uakId, uakSecret, forceRefresh = false) {
   }
   if (!forceRefresh) {
     const expiresAt = new Date(Date.now() + raw.expires_in * 1e3);
-    await writeToken(profile, raw.access_token, expiresAt);
+    await writeToken(profile, raw.access_token, expiresAt, credentialHash);
   }
   return raw.access_token;
 }
@@ -597,8 +605,11 @@ function isKeystoneTokenResponse(val) {
   return typeof token["id"] === "string" && typeof token["expires"] === "string";
 }
 async function getIaasToken(profile, iaas, forceRefresh = false) {
+  const credentialHash = credentialFingerprint(
+    JSON.stringify([iaas.tenantId, iaas.username, iaas.password])
+  );
   if (!forceRefresh) {
-    const cached = await readIaasToken(profile, iaas.region);
+    const cached = await readIaasToken(profile, iaas.region, credentialHash);
     if (cached !== null) {
       return {
         tokenId: cached.tokenId,
@@ -642,7 +653,7 @@ async function getIaasToken(profile, iaas, forceRefresh = false) {
   const tokenId = raw.access.token.id;
   const expiresAt = raw.access.token.expires;
   if (!forceRefresh) {
-    await writeIaasToken(profile, iaas.region, { tokenId, expiresAt, computeEndpoint, imageEndpoint, networkEndpoint, blockStorageEndpoint, nksEndpoint });
+    await writeIaasToken(profile, iaas.region, { tokenId, expiresAt, credentialHash, computeEndpoint, imageEndpoint, networkEndpoint, blockStorageEndpoint, nksEndpoint });
   }
   return { tokenId, computeEndpoint, imageEndpoint, networkEndpoint, blockStorageEndpoint, nksEndpoint };
 }
@@ -3887,11 +3898,6 @@ function isVolume(val) {
   return typeof obj["id"] === "string" && // Cinder 는 --name 미지정 시 null — null 인 볼륨 하나가 list 전체를 거부하지 않게 허용 (isImage 선례).
   (typeof obj["name"] === "string" || obj["name"] === null) && typeof obj["size"] === "number" && typeof obj["status"] === "string" && (obj["availability_zone"] === void 0 || typeof obj["availability_zone"] === "string") && Array.isArray(obj["attachments"]);
 }
-function isVolumesResponse(val) {
-  if (typeof val !== "object" || val === null) return false;
-  const obj = val;
-  return Array.isArray(obj["volumes"]) && obj["volumes"].every(isVolume);
-}
 function isVolumeResponse(val) {
   if (typeof val !== "object" || val === null) return false;
   const obj = val;
@@ -3909,7 +3915,7 @@ var BlockStorageClient = class {
     return { "X-Auth-Token": this.tokenId };
   }
   async list(params) {
-    const url = `${this.endpoint}/volumes`;
+    const url = `${this.endpoint}/volumes/detail`;
     const searchParams = {};
     if (params?.sort !== void 0) searchParams["sort"] = params.sort;
     if (params?.limit !== void 0) searchParams["limit"] = params.limit;
@@ -3917,13 +3923,26 @@ var BlockStorageClient = class {
     if (params?.marker !== void 0) searchParams["marker"] = params.marker;
     try {
       const raw = await import_ky9.default.get(url, { headers: this.authHeaders(), searchParams, retry: 0, timeout: DEFAULT_TIMEOUT_MS5 }).json();
-      if (!isVolumesResponse(raw)) {
+      if (typeof raw !== "object" || raw === null) {
+        throw new NhnCloudCliError(
+          "volume list \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 volumes \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      const obj = raw;
+      if (!Array.isArray(obj["volumes"])) {
         throw new NhnCloudCliError(
           "volume list \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 volumes \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
           EXIT_API_ERROR
         );
       }
-      return raw.volumes;
+      if (!obj["volumes"].every(isVolume)) {
+        throw new NhnCloudCliError(
+          "volume list \uC751\uB2F5\uC758 \uBCFC\uB968 \uD56D\uBAA9 \uD615\uC2DD\uC774 \uC608\uC0C1\uACFC \uB2E4\uB985\uB2C8\uB2E4 \u2014 API \uC751\uB2F5 \uD544\uB4DC\uB97C \uD655\uC778\uD558\uC138\uC694.",
+          EXIT_API_ERROR
+        );
+      }
+      return obj["volumes"];
     } catch (err) {
       throw toNhnCloudCliError(err);
     }
@@ -6775,6 +6794,102 @@ var import_chalk16 = __toESM(require("chalk"));
 // src/commands/ncs/helpers.ts
 var import_node_fs7 = require("fs");
 var MAX_JSON_PAYLOAD_BYTES = 1e6;
+var NCS_RFC3339_PATTERN = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.(\d+))?(Z|([+-])(\d{2}):(\d{2}))$/;
+var NCS_RELATIVE_TIME_PATTERN = /^(\d+)(m|h|d)$/;
+var NCS_TIME_EXAMPLES = "\uC2DC\uAC04\uB300 \uD3EC\uD568 RFC3339(\uC608: 2026-05-01T00:00:00+09:00) \uB610\uB294 \uC0C1\uB300\uC2DC\uAC04(\uC608: 30m, 1h, 2d, now)";
+function ncsTimeError(option, value, detail) {
+  const suffix = detail ? ` ${detail}` : "";
+  return new NhnCloudCliError(
+    `${option} \uC2DC\uAC04 \uD615\uC2DD \uC624\uB958: ${JSON.stringify(value)}. ${NCS_TIME_EXAMPLES}\uC744 \uC0AC\uC6A9\uD558\uC138\uC694.${suffix}`,
+    EXIT_PARAM_ERROR
+  );
+}
+function isLeapYear(year) {
+  return year % 4 === 0 && (year % 100 !== 0 || year % 400 === 0);
+}
+function daysInMonth(year, month) {
+  if (month === 2) return isLeapYear(year) ? 29 : 28;
+  return [4, 6, 9, 11].includes(month) ? 30 : 31;
+}
+function formatNcsUtcTime(timestamp, option, input) {
+  const date = new Date(timestamp);
+  if (!Number.isFinite(timestamp) || Number.isNaN(date.getTime())) {
+    throw ncsTimeError(option, input, "\uC720\uD6A8\uD55C Date \uBC94\uC704\uB97C \uBC97\uC5B4\uB0AC\uC2B5\uB2C8\uB2E4.");
+  }
+  const iso = date.toISOString();
+  const secondPrecision = iso.replace(/\.\d{3}Z$/, "Z");
+  if (!/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}Z$/.test(secondPrecision)) {
+    throw ncsTimeError(option, input, "UTC \uC5F0\uB3C4\uAC00 \uC9C0\uC6D0 \uBC94\uC704\uB97C \uBC97\uC5B4\uB0AC\uC2B5\uB2C8\uB2E4.");
+  }
+  return secondPrecision;
+}
+function parseNcsAbsoluteTime(input, option) {
+  const match = NCS_RFC3339_PATTERN.exec(input);
+  if (!match) throw ncsTimeError(option, input);
+  const year = Number(match[1]);
+  const month = Number(match[2]);
+  const day = Number(match[3]);
+  const hour = Number(match[4]);
+  const minute = Number(match[5]);
+  const second = Number(match[6]);
+  const offsetHour = match[10] === void 0 ? 0 : Number(match[10]);
+  const offsetMinute = match[11] === void 0 ? 0 : Number(match[11]);
+  if (month < 1 || month > 12 || day < 1 || day > daysInMonth(year, month) || hour > 23 || minute > 59 || second > 59 || offsetHour > 23 || offsetMinute > 59) {
+    throw ncsTimeError(option, input, "\uB0A0\uC9DC\xB7\uC2DC\uAC01\xB7\uC2DC\uAC04\uB300 \uC624\uD504\uC14B\uC744 \uD655\uC778\uD558\uC138\uC694.");
+  }
+  const parsedTimestamp = Date.parse(input);
+  const timestamp = Math.floor(parsedTimestamp / 1e3) * 1e3;
+  return {
+    value: formatNcsUtcTime(timestamp, option, input),
+    timestamp
+  };
+}
+function parseNcsTime(input, option, baseTimestamp) {
+  const trimmed = input.trim();
+  if (trimmed === "now") {
+    return {
+      value: formatNcsUtcTime(baseTimestamp, option, input),
+      timestamp: Math.floor(baseTimestamp / 1e3) * 1e3
+    };
+  }
+  const relativeMatch = NCS_RELATIVE_TIME_PATTERN.exec(trimmed);
+  if (relativeMatch) {
+    const amount = Number(relativeMatch[1]);
+    const unitMs = relativeMatch[2] === "m" ? 6e4 : relativeMatch[2] === "h" ? 36e5 : 864e5;
+    const deltaMs = amount * unitMs;
+    if (!Number.isSafeInteger(amount) || !Number.isSafeInteger(deltaMs)) {
+      throw ncsTimeError(option, input, "\uC0C1\uB300\uC2DC\uAC04\uC774 \uC548\uC804\uD55C \uC815\uC218 \uBC94\uC704\uB97C \uBC97\uC5B4\uB0AC\uC2B5\uB2C8\uB2E4.");
+    }
+    const timestamp = baseTimestamp - deltaMs;
+    return {
+      value: formatNcsUtcTime(timestamp, option, input),
+      timestamp: Math.floor(timestamp / 1e3) * 1e3
+    };
+  }
+  return parseNcsAbsoluteTime(trimmed, option);
+}
+function normalizeNcsTimeRange(from, to, now) {
+  if (from === void 0 && to === void 0) return {};
+  const baseTimestamp = (now ?? /* @__PURE__ */ new Date()).getTime();
+  if (!Number.isFinite(baseTimestamp)) {
+    throw new NhnCloudCliError(
+      `NCS \uC2DC\uAC04 \uC815\uADDC\uD654 \uAE30\uC900 \uC2DC\uAC01\uC774 \uC720\uD6A8\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. ${NCS_TIME_EXAMPLES}\uC744 \uC0AC\uC6A9\uD558\uC138\uC694.`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  const normalizedFrom = from === void 0 ? void 0 : parseNcsTime(from, "--from", baseTimestamp);
+  const normalizedTo = to === void 0 ? void 0 : parseNcsTime(to, "--to", baseTimestamp);
+  if (normalizedFrom !== void 0 && normalizedTo !== void 0 && normalizedFrom.timestamp > normalizedTo.timestamp) {
+    throw new NhnCloudCliError(
+      `--from \uC2DC\uAC04\uC774 --to \uC2DC\uAC04\uBCF4\uB2E4 \uB2A6\uC2B5\uB2C8\uB2E4. ${NCS_TIME_EXAMPLES}\uC744 \uC0AC\uC6A9\uD558\uC138\uC694.`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return {
+    ...normalizedFrom === void 0 ? {} : { from: normalizedFrom.value },
+    ...normalizedTo === void 0 ? {} : { to: normalizedTo.value }
+  };
+}
 async function resolveNcsAppKey(profileName, appKeyOpt) {
   if (appKeyOpt) return appKeyOpt;
   let cred;
@@ -7143,7 +7258,13 @@ var getCommand7 = new import_commander46.Command("get").description("NCS workloa
     ids: [workload.id]
   });
 });
-var logsCommand = new import_commander46.Command("logs").description("NCS workload task \uC758 \uCEE8\uD14C\uC774\uB108 \uB85C\uADF8\uB97C \uC870\uD68C\uD55C\uB2E4").argument("<id>", "workload ID").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").option("--task <taskId>", "task ID (\uD544\uC218)").option("--container <name>", "\uCEE8\uD14C\uC774\uB108 \uC774\uB984 (\uD544\uC218)").option("--from <time>", "\uB85C\uADF8 \uC2DC\uC791 \uC2DC\uAC04 (\uAE30\uBCF8: \uD604\uC7AC\uB85C\uBD80\uD130 5\uBD84 \uC804)").option("--to <time>", "\uB85C\uADF8 \uC885\uB8CC \uC2DC\uAC04 (\uAE30\uBCF8: \uD604\uC7AC \uC2DC\uAC04)").option("--page <page>", "\uC870\uD68C\uD560 page \uBC88\uD638").option("--size <size>", "page \uB2F9 \uD56D\uBAA9 \uC218 (\uAE30\uBCF8: API \uAE30\uBCF8\uAC12 100)").action(async (id, _opts, cmd) => {
+var logsCommand = new import_commander46.Command("logs").description("NCS workload task \uC758 \uCEE8\uD14C\uC774\uB108 \uB85C\uADF8\uB97C \uC870\uD68C\uD55C\uB2E4").argument("<id>", "workload ID").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").option("--task <taskId>", "task ID (\uD544\uC218)").option("--container <name>", "\uCEE8\uD14C\uC774\uB108 \uC774\uB984 (\uD544\uC218)").option(
+  "--from <time>",
+  "\uB85C\uADF8 \uC2DC\uC791: \uC2DC\uAC04\uB300 \uD3EC\uD568 RFC3339, now \uB610\uB294 0 \uC774\uC0C1\uC758 \uC815\uC218\uC640 m/h/d \uB2E8\uC704 (\uC608: 30m, 1h, 2d). UTC Z\uB85C \uC815\uADDC\uD654\uD558\uBA70 \uC0DD\uB7B5 \uC2DC API \uAE30\uBCF8 \uBC94\uC704"
+).option(
+  "--to <time>",
+  "\uB85C\uADF8 \uC885\uB8CC: \uC2DC\uAC04\uB300 \uD3EC\uD568 RFC3339, now \uB610\uB294 0 \uC774\uC0C1\uC758 \uC815\uC218\uC640 m/h/d \uB2E8\uC704 (\uC608: 30m, 1h, 2d). UTC Z\uB85C \uC815\uADDC\uD654\uD558\uBA70 \uC0DD\uB7B5 \uC2DC API \uAE30\uBCF8 \uBC94\uC704"
+).option("--page <page>", "\uC870\uD68C\uD560 page \uBC88\uD638").option("--size <size>", "page \uB2F9 \uD56D\uBAA9 \uC218 (\uAE30\uBCF8: API \uAE30\uBCF8\uAC12 100)").action(async (id, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   requireNonEmpty(id, "id");
   if (!opts.task || !opts.task.trim()) {
@@ -7158,14 +7279,14 @@ var logsCommand = new import_commander46.Command("logs").description("NCS worklo
       EXIT_PARAM_ERROR
     );
   }
+  const timeRange = normalizeNcsTimeRange(opts.from, opts.to);
   const { client } = await resolveNcsClient(opts);
   startSpinner(`NCS workload "${id}" task "${opts.task}" \uB85C\uADF8 \uC870\uD68C \uC911...`);
   let logs;
   try {
     const result = await client.getWorkloadLogs(id, opts.task, {
       container: opts.container,
-      from: opts.from,
-      to: opts.to,
+      ...timeRange,
       page: parsePositiveIntegerOption(opts.page, "--page"),
       size: parsePositiveIntegerOption(opts.size, "--size")
     });
@@ -7182,7 +7303,13 @@ var logsCommand = new import_commander46.Command("logs").description("NCS worklo
     ids: []
   });
 });
-var eventsCommand2 = new import_commander46.Command("events").description("NCS workload task \uC758 \uC774\uBCA4\uD2B8\uB97C \uC870\uD68C\uD55C\uB2E4").argument("<id>", "workload ID").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").option("--task <taskId>", "task ID (\uD544\uC218)").option("--type <type>", "\uC774\uBCA4\uD2B8 \uD0C0\uC785 (Normal | Warning)").option("--q <query>", "\uC774\uBCA4\uD2B8 \uB0B4\uC6A9 \uD544\uD130\uB9C1").option("--from <time>", "\uC774\uBCA4\uD2B8 \uB9C8\uC9C0\uB9C9 \uBC1C\uC0DD \uC2DC\uC791 \uC2DC\uAC04 (\uAE30\uBCF8: \uD604\uC7AC\uB85C\uBD80\uD130 1\uC2DC\uAC04 \uC804)").option("--to <time>", "\uC774\uBCA4\uD2B8 \uB9C8\uC9C0\uB9C9 \uBC1C\uC0DD \uC885\uB8CC \uC2DC\uAC04 (\uAE30\uBCF8: \uD604\uC7AC \uC2DC\uAC04)").option("--page <page>", "\uC870\uD68C\uD560 page \uBC88\uD638").option("--size <size>", "page \uB2F9 \uD56D\uBAA9 \uC218 (\uAE30\uBCF8: API \uAE30\uBCF8\uAC12 10)").action(async (id, _opts, cmd) => {
+var eventsCommand2 = new import_commander46.Command("events").description("NCS workload task \uC758 \uC774\uBCA4\uD2B8\uB97C \uC870\uD68C\uD55C\uB2E4").argument("<id>", "workload ID").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").option("--task <taskId>", "task ID (\uD544\uC218)").option("--type <type>", "\uC774\uBCA4\uD2B8 \uD0C0\uC785 (Normal | Warning)").option("--q <query>", "\uC774\uBCA4\uD2B8 \uB0B4\uC6A9 \uD544\uD130\uB9C1").option(
+  "--from <time>",
+  "\uC774\uBCA4\uD2B8 \uC2DC\uC791: \uC2DC\uAC04\uB300 \uD3EC\uD568 RFC3339, now \uB610\uB294 0 \uC774\uC0C1\uC758 \uC815\uC218\uC640 m/h/d \uB2E8\uC704 (\uC608: 30m, 1h, 2d). UTC Z\uB85C \uC815\uADDC\uD654\uD558\uBA70 \uC0DD\uB7B5 \uC2DC API \uAE30\uBCF8 \uBC94\uC704"
+).option(
+  "--to <time>",
+  "\uC774\uBCA4\uD2B8 \uC885\uB8CC: \uC2DC\uAC04\uB300 \uD3EC\uD568 RFC3339, now \uB610\uB294 0 \uC774\uC0C1\uC758 \uC815\uC218\uC640 m/h/d \uB2E8\uC704 (\uC608: 30m, 1h, 2d). UTC Z\uB85C \uC815\uADDC\uD654\uD558\uBA70 \uC0DD\uB7B5 \uC2DC API \uAE30\uBCF8 \uBC94\uC704"
+).option("--page <page>", "\uC870\uD68C\uD560 page \uBC88\uD638").option("--size <size>", "page \uB2F9 \uD56D\uBAA9 \uC218 (\uAE30\uBCF8: API \uAE30\uBCF8\uAC12 10)").action(async (id, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   requireNonEmpty(id, "id");
   if (!opts.task || !opts.task.trim()) {
@@ -7191,6 +7318,7 @@ var eventsCommand2 = new import_commander46.Command("events").description("NCS w
       EXIT_PARAM_ERROR
     );
   }
+  const timeRange = normalizeNcsTimeRange(opts.from, opts.to);
   const { client } = await resolveNcsClient(opts);
   startSpinner(`NCS workload "${id}" task "${opts.task}" \uC774\uBCA4\uD2B8 \uC870\uD68C \uC911...`);
   let totalCount;
@@ -7199,8 +7327,7 @@ var eventsCommand2 = new import_commander46.Command("events").description("NCS w
     const result = await client.getWorkloadEvents(id, opts.task, {
       type: opts.type,
       q: opts.q,
-      from: opts.from,
-      to: opts.to,
+      ...timeRange,
       page: parsePositiveIntegerOption(opts.page, "--page"),
       size: parsePositiveIntegerOption(opts.size, "--size")
     });
@@ -7532,6 +7659,920 @@ var resultCommand = new import_commander47.Command("result").description("NCS wo
 });
 var malwareCommand = new import_commander47.Command("malware").description("NCS \uC545\uC131\uCF54\uB4DC \uAC80\uC0AC \uAD00\uB9AC").addCommand(configCommand).addCommand(resultCommand);
 
+// src/commands/loadbalancer/list.ts
+var import_commander48 = require("commander");
+
+// src/commands/loadbalancer/helpers.ts
+var import_node_net = require("net");
+
+// src/services/loadbalancer/client.ts
+var import_ky13 = __toESM(require("ky"));
+
+// src/services/loadbalancer/types.ts
+function isRecord(value) {
+  return typeof value === "object" && value !== null;
+}
+function isNonEmptyString(value) {
+  return typeof value === "string" && value.length > 0;
+}
+function isIpAclAction(value) {
+  return value === "ALLOW" || value === "DENY";
+}
+function isLoadBalancerIpAclGroup(value) {
+  return isRecord(value) && isNonEmptyString(value["ipacl_group_id"]);
+}
+function isIpAclGroupLoadBalancer(value) {
+  return isRecord(value) && isNonEmptyString(value["loadbalancer_id"]);
+}
+function isLoadBalancer(value) {
+  if (!isRecord(value)) return false;
+  return isNonEmptyString(value["id"]) && typeof value["name"] === "string" && typeof value["vip_address"] === "string" && typeof value["provisioning_status"] === "string" && typeof value["operating_status"] === "string" && (value["ipacl_group_action"] === null || isIpAclAction(value["ipacl_group_action"])) && Array.isArray(value["ipacl_groups"]) && value["ipacl_groups"].every(isLoadBalancerIpAclGroup);
+}
+function isIpAclGroup(value) {
+  if (!isRecord(value)) return false;
+  return isNonEmptyString(value["id"]) && typeof value["name"] === "string" && isIpAclAction(value["action"]) && typeof value["ipacl_target_count"] === "string" && Array.isArray(value["loadbalancers"]) && value["loadbalancers"].every(isIpAclGroupLoadBalancer);
+}
+function isIpAclTarget(value) {
+  if (!isRecord(value)) return false;
+  return isNonEmptyString(value["id"]) && typeof value["cidr_address"] === "string" && typeof value["description"] === "string" && isNonEmptyString(value["ipacl_group_id"]);
+}
+function isIpAclBinding(value) {
+  return isRecord(value) && isNonEmptyString(value["loadbalancer_id"]) && isNonEmptyString(value["ipacl_group_id"]);
+}
+
+// src/services/loadbalancer/client.ts
+var DEFAULT_TIMEOUT_MS9 = 3e4;
+function isRecord2(value) {
+  return typeof value === "object" && value !== null;
+}
+function requireNonEmptyId(id, label) {
+  const normalized = id.trim();
+  if (!normalized) {
+    throw new NhnCloudCliError(`${label}\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.`, EXIT_PARAM_ERROR);
+  }
+  return normalized;
+}
+function readArrayField(response, key, itemGuard, missingKeyMessage, invalidItemMessage) {
+  if (!isRecord2(response) || !Array.isArray(response[key])) {
+    throw new NhnCloudCliError(missingKeyMessage, EXIT_API_ERROR);
+  }
+  const items = response[key];
+  if (!items.every(itemGuard)) {
+    throw new NhnCloudCliError(invalidItemMessage, EXIT_API_ERROR);
+  }
+  return items;
+}
+function readObjectField(response, key, itemGuard, missingKeyMessage, invalidItemMessage) {
+  if (!isRecord2(response) || !(key in response)) {
+    throw new NhnCloudCliError(missingKeyMessage, EXIT_API_ERROR);
+  }
+  const item = response[key];
+  if (!itemGuard(item)) {
+    throw new NhnCloudCliError(invalidItemMessage, EXIT_API_ERROR);
+  }
+  return item;
+}
+var LoadBalancerClient = class {
+  tokenId;
+  endpoint;
+  constructor(tokenId, networkEndpoint) {
+    this.tokenId = tokenId;
+    this.endpoint = `${networkEndpoint}/lbaas`;
+  }
+  authHeaders() {
+    return { "X-Auth-Token": this.tokenId };
+  }
+  async listLoadBalancers(query) {
+    const raw = await this.getJson("/loadbalancers", query);
+    return readArrayField(
+      raw,
+      "loadbalancers",
+      isLoadBalancer,
+      "loadbalancer list \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 loadbalancers \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
+      "loadbalancer list \uC751\uB2F5\uC758 Load Balancer \uD56D\uBAA9 \uD615\uC2DD\uC774 \uC608\uC0C1\uACFC \uB2E4\uB985\uB2C8\uB2E4 \u2014 API \uC751\uB2F5 \uD544\uB4DC\uB97C \uD655\uC778\uD558\uC138\uC694."
+    );
+  }
+  async getLoadBalancer(id) {
+    const raw = await this.getJson(`/loadbalancers/${encodeURIComponent(id)}`);
+    return readObjectField(
+      raw,
+      "loadbalancer",
+      isLoadBalancer,
+      "loadbalancer get \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 loadbalancer \uAC1D\uCCB4\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.",
+      "loadbalancer get \uC751\uB2F5\uC758 Load Balancer \uD56D\uBAA9 \uD615\uC2DD\uC774 \uC608\uC0C1\uACFC \uB2E4\uB985\uB2C8\uB2E4 \u2014 API \uC751\uB2F5 \uD544\uB4DC\uB97C \uD655\uC778\uD558\uC138\uC694."
+    );
+  }
+  async listIpAclGroups(query) {
+    const raw = await this.getJson("/ipacl-groups", query);
+    return readArrayField(
+      raw,
+      "ipacl_groups",
+      isIpAclGroup,
+      "loadbalancer ipacl list \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 ipacl_groups \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
+      "loadbalancer ipacl list \uC751\uB2F5\uC758 IP ACL \uADF8\uB8F9 \uD56D\uBAA9 \uD615\uC2DD\uC774 \uC608\uC0C1\uACFC \uB2E4\uB985\uB2C8\uB2E4 \u2014 API \uC751\uB2F5 \uD544\uB4DC\uB97C \uD655\uC778\uD558\uC138\uC694."
+    );
+  }
+  async getIpAclGroup(id) {
+    const raw = await this.getJson(`/ipacl-groups/${encodeURIComponent(id)}`);
+    return readObjectField(
+      raw,
+      "ipacl_group",
+      isIpAclGroup,
+      "loadbalancer ipacl get \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 ipacl_group \uAC1D\uCCB4\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.",
+      "loadbalancer ipacl get \uC751\uB2F5\uC758 IP ACL \uADF8\uB8F9 \uD56D\uBAA9 \uD615\uC2DD\uC774 \uC608\uC0C1\uACFC \uB2E4\uB985\uB2C8\uB2E4 \u2014 API \uC751\uB2F5 \uD544\uB4DC\uB97C \uD655\uC778\uD558\uC138\uC694."
+    );
+  }
+  async listIpAclTargets(query) {
+    const raw = await this.getJson("/ipacl-targets", query);
+    return readArrayField(
+      raw,
+      "ipacl_targets",
+      isIpAclTarget,
+      "loadbalancer ipacl target list \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 ipacl_targets \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
+      "loadbalancer ipacl target list \uC751\uB2F5\uC758 IP ACL \uB300\uC0C1 \uD56D\uBAA9 \uD615\uC2DD\uC774 \uC608\uC0C1\uACFC \uB2E4\uB985\uB2C8\uB2E4 \u2014 API \uC751\uB2F5 \uD544\uB4DC\uB97C \uD655\uC778\uD558\uC138\uC694."
+    );
+  }
+  async createIpAclGroup(input) {
+    const request = { ipacl_group: input };
+    const raw = await this.postJson("/ipacl-groups", request);
+    return readObjectField(
+      raw,
+      "ipacl_group",
+      isIpAclGroup,
+      "loadbalancer ipacl create \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 ipacl_group \uAC1D\uCCB4\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.",
+      "loadbalancer ipacl create \uC751\uB2F5\uC758 IP ACL \uADF8\uB8F9 \uD56D\uBAA9 \uD615\uC2DD\uC774 \uC608\uC0C1\uACFC \uB2E4\uB985\uB2C8\uB2E4 \u2014 API \uC751\uB2F5 \uD544\uB4DC\uB97C \uD655\uC778\uD558\uC138\uC694."
+    );
+  }
+  async deleteIpAclGroup(id) {
+    const normalizedId = requireNonEmptyId(id, "IP ACL \uADF8\uB8F9 ID");
+    await this.deleteNoContent(`/ipacl-groups/${encodeURIComponent(normalizedId)}`);
+  }
+  async getIpAclTarget(id) {
+    const normalizedId = requireNonEmptyId(id, "IP ACL \uB300\uC0C1 ID");
+    const raw = await this.getJson(`/ipacl-targets/${encodeURIComponent(normalizedId)}`);
+    return readObjectField(
+      raw,
+      "ipacl_target",
+      isIpAclTarget,
+      "loadbalancer ipacl target get \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 ipacl_target \uAC1D\uCCB4\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.",
+      "loadbalancer ipacl target get \uC751\uB2F5\uC758 IP ACL \uB300\uC0C1 \uD56D\uBAA9 \uD615\uC2DD\uC774 \uC608\uC0C1\uACFC \uB2E4\uB985\uB2C8\uB2E4 \u2014 API \uC751\uB2F5 \uD544\uB4DC\uB97C \uD655\uC778\uD558\uC138\uC694."
+    );
+  }
+  async createIpAclTarget(input) {
+    const request = { ipacl_target: input };
+    const raw = await this.postJson("/ipacl-targets", request);
+    return readObjectField(
+      raw,
+      "ipacl_target",
+      isIpAclTarget,
+      "loadbalancer ipacl target add \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 ipacl_target \uAC1D\uCCB4\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.",
+      "loadbalancer ipacl target add \uC751\uB2F5\uC758 IP ACL \uB300\uC0C1 \uD56D\uBAA9 \uD615\uC2DD\uC774 \uC608\uC0C1\uACFC \uB2E4\uB985\uB2C8\uB2E4 \u2014 API \uC751\uB2F5 \uD544\uB4DC\uB97C \uD655\uC778\uD558\uC138\uC694."
+    );
+  }
+  async deleteIpAclTarget(id) {
+    const normalizedId = requireNonEmptyId(id, "IP ACL \uB300\uC0C1 ID");
+    await this.deleteNoContent(`/ipacl-targets/${encodeURIComponent(normalizedId)}`);
+  }
+  async bindIpAclGroups(loadBalancerId, ipAclGroupIds) {
+    const normalizedLoadBalancerId = requireNonEmptyId(
+      loadBalancerId,
+      "Load Balancer ID"
+    );
+    const request = {
+      ipacl_groups_binding: ipAclGroupIds.map((id) => ({
+        ipacl_group_id: requireNonEmptyId(id, "IP ACL \uADF8\uB8F9 ID")
+      }))
+    };
+    const raw = await this.putJson(
+      `/loadbalancers/${encodeURIComponent(normalizedLoadBalancerId)}/bind_ipacl_groups`,
+      request
+    );
+    if (!Array.isArray(raw)) {
+      throw new NhnCloudCliError(
+        "loadbalancer set-ipacl \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 binding \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
+        EXIT_API_ERROR
+      );
+    }
+    if (!raw.every(isIpAclBinding)) {
+      throw new NhnCloudCliError(
+        "loadbalancer set-ipacl \uC751\uB2F5\uC758 binding \uD56D\uBAA9 \uD615\uC2DD\uC774 \uC608\uC0C1\uACFC \uB2E4\uB985\uB2C8\uB2E4 \u2014 API \uC751\uB2F5 \uD544\uB4DC\uB97C \uD655\uC778\uD558\uC138\uC694.",
+        EXIT_API_ERROR
+      );
+    }
+    return raw;
+  }
+  async getJson(path3, searchParams) {
+    const url = `${this.endpoint}${path3}`;
+    try {
+      return await import_ky13.default.get(url, {
+        headers: this.authHeaders(),
+        searchParams,
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS9
+      }).json();
+    } catch (error) {
+      throw toNhnCloudCliError(error);
+    }
+  }
+  async postJson(path3, json) {
+    const url = `${this.endpoint}${path3}`;
+    try {
+      return await import_ky13.default.post(url, {
+        headers: this.authHeaders(),
+        json,
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS9
+      }).json();
+    } catch (error) {
+      throw toNhnCloudCliError(error);
+    }
+  }
+  async putJson(path3, json) {
+    const url = `${this.endpoint}${path3}`;
+    try {
+      return await import_ky13.default.put(url, {
+        headers: this.authHeaders(),
+        json,
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS9
+      }).json();
+    } catch (error) {
+      throw toNhnCloudCliError(error);
+    }
+  }
+  async deleteNoContent(path3) {
+    const url = `${this.endpoint}${path3}`;
+    try {
+      await import_ky13.default.delete(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS9
+      });
+    } catch (error) {
+      throw toNhnCloudCliError(error);
+    }
+  }
+};
+
+// src/commands/loadbalancer/helpers.ts
+function requireResourceInput(value, label) {
+  const normalized = value.trim();
+  if (!normalized) {
+    throw new NhnCloudCliError(`${label} \uC774\uB984 \uB610\uB294 UUID\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.`, EXIT_PARAM_ERROR);
+  }
+  return normalized;
+}
+function optionalTrimmed(value) {
+  if (value === void 0) return void 0;
+  return value.trim();
+}
+function requireYes(yes, operation) {
+  if (!yes) {
+    throw new NhnCloudCliError(
+      `${operation}\uC5D0\uB294 --yes \uD50C\uB798\uADF8\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return true;
+}
+function parseIpAclAction(value) {
+  if (value !== "ALLOW" && value !== "DENY") {
+    throw new NhnCloudCliError(
+      `--action\uC740 ALLOW \uB610\uB294 DENY\uC5EC\uC57C \uD569\uB2C8\uB2E4: ${JSON.stringify(value)}`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return value;
+}
+function collectOption(value, previous = []) {
+  return [...previous, value];
+}
+function requireResourceInputs(values, label) {
+  if (values.length === 0) {
+    throw new NhnCloudCliError(`${label}\uC744(\uB97C) \uD55C \uAC1C \uC774\uC0C1 \uC9C0\uC815\uD574\uC57C \uD569\uB2C8\uB2E4.`, EXIT_PARAM_ERROR);
+  }
+  return values.map((value) => requireResourceInput(value, label));
+}
+function parseIpOrCidr(value) {
+  const normalized = value.trim();
+  const parts = normalized.split("/");
+  const address = parts[0] ?? "";
+  const version = (0, import_node_net.isIP)(address);
+  if (version === 0 || parts.length > 2) {
+    throw new NhnCloudCliError(
+      `--cidr\uC740 IP \uC8FC\uC18C \uB610\uB294 CIDR\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4: ${JSON.stringify(value)}`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  if (parts.length === 2) {
+    const prefix = parts[1] ?? "";
+    const maxPrefix = version === 4 ? 32 : 128;
+    if (!/^\d+$/.test(prefix) || Number(prefix) > maxPrefix) {
+      throw new NhnCloudCliError(
+        `--cidr prefix\uAC00 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4: ${JSON.stringify(value)}`,
+        EXIT_PARAM_ERROR
+      );
+    }
+  }
+  return normalized;
+}
+function resolvedId(resource, label) {
+  const id = resource.id.trim();
+  if (!id) {
+    throw new NhnCloudCliError(`${label} \uC870\uD68C \uACB0\uACFC\uC758 UUID\uAC00 \uBE44\uC5B4 \uC788\uC2B5\uB2C8\uB2E4.`, EXIT_PARAM_ERROR);
+  }
+  return id;
+}
+function resolveFromList(resources, input, label) {
+  const exactId = resources.find((resource) => resource.id === input);
+  if (exactId) return resolvedId(exactId, label);
+  const nameMatches = resources.filter((resource) => resource.name === input);
+  if (nameMatches.length === 1) return resolvedId(nameMatches[0], label);
+  if (nameMatches.length === 0) {
+    throw new NhnCloudCliError(
+      `${label}\uC744(\uB97C) \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${JSON.stringify(input)}`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  const candidateIds = nameMatches.map((resource) => resolvedId(resource, label)).sort();
+  throw new NhnCloudCliError(
+    `${label} \uC774\uB984\uC774 \uC911\uBCF5\uB429\uB2C8\uB2E4: ${JSON.stringify(input)} (\uD6C4\uBCF4 UUID: ${candidateIds.join(", ")})`,
+    EXIT_PARAM_ERROR
+  );
+}
+async function resolveLoadBalancerId(client, value) {
+  const input = requireResourceInput(value, "Load Balancer");
+  const resources = await client.listLoadBalancers();
+  return resolveFromList(resources, input, "Load Balancer");
+}
+async function resolveIpAclGroupId(client, value) {
+  const input = requireResourceInput(value, "IP ACL \uADF8\uB8F9");
+  const resources = await client.listIpAclGroups();
+  return resolveFromList(resources, input, "IP ACL \uADF8\uB8F9");
+}
+async function resolveIpAclGroups(client, values) {
+  const inputs = requireResourceInputs(values, "IP ACL \uADF8\uB8F9");
+  const resources = await client.listIpAclGroups();
+  return inputs.map((input) => {
+    const id = resolveFromList(resources, input, "IP ACL \uADF8\uB8F9");
+    const group = resources.find((resource) => resource.id === id);
+    if (!group) {
+      throw new NhnCloudCliError(
+        `IP ACL \uADF8\uB8F9 \uC870\uD68C \uACB0\uACFC\uC5D0\uC11C UUID\uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${JSON.stringify(id)}`,
+        EXIT_PARAM_ERROR
+      );
+    }
+    return group;
+  });
+}
+async function resolveLoadBalancerClient(opts) {
+  const { profileName, tokenId, networkEndpoint } = await resolveIaasTokenContext(opts);
+  return {
+    client: new LoadBalancerClient(tokenId, networkEndpoint),
+    profileName
+  };
+}
+
+// src/commands/loadbalancer/list.ts
+var listCommand10 = new import_commander48.Command("list").description("Load Balancer \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4 (\uC804\uCCB4 \uD544\uB4DC\uB294 --json)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client } = await resolveLoadBalancerClient(opts);
+  startSpinner("Load Balancer \uBAA9\uB85D \uC870\uD68C \uC911...");
+  let loadBalancers;
+  let success = false;
+  try {
+    loadBalancers = await client.listLoadBalancers();
+    success = true;
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  } finally {
+    if (success) stopSpinner(true);
+  }
+  output(opts, {
+    headers: [
+      "id",
+      "name",
+      "vip_address",
+      "provisioning_status",
+      "operating_status",
+      "ipacl_group_action"
+    ],
+    rows: loadBalancers.map((loadBalancer) => [
+      loadBalancer.id,
+      loadBalancer.name,
+      loadBalancer.vip_address,
+      loadBalancer.provisioning_status,
+      loadBalancer.operating_status,
+      loadBalancer.ipacl_group_action ?? ""
+    ]),
+    raw: loadBalancers,
+    ids: loadBalancers.map((loadBalancer) => loadBalancer.id)
+  });
+});
+
+// src/commands/loadbalancer/get.ts
+var import_commander49 = require("commander");
+var getCommand8 = new import_commander49.Command("get").description("Load Balancer\uB97C \uC774\uB984 \uB610\uB294 UUID\uB85C \uC870\uD68C\uD55C\uB2E4").argument("<loadbalancer>", "Load Balancer \uC774\uB984 \uB610\uB294 UUID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (loadBalancerInput, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const input = requireResourceInput(loadBalancerInput, "Load Balancer");
+  const { client } = await resolveLoadBalancerClient(opts);
+  startSpinner("Load Balancer \uC870\uD68C \uC911...");
+  let loadBalancer;
+  let success = false;
+  try {
+    const id = await resolveLoadBalancerId(client, input);
+    loadBalancer = await client.getLoadBalancer(id);
+    success = true;
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  } finally {
+    if (success) stopSpinner(true);
+  }
+  output(opts, {
+    headers: ["field", "value"],
+    rows: [
+      ["id", loadBalancer.id],
+      ["name", loadBalancer.name],
+      ["vip_address", loadBalancer.vip_address],
+      ["provisioning_status", loadBalancer.provisioning_status],
+      ["operating_status", loadBalancer.operating_status],
+      ["ipacl_group_action", loadBalancer.ipacl_group_action ?? ""],
+      [
+        "ipacl_group_ids",
+        loadBalancer.ipacl_groups.map((group) => group.ipacl_group_id).join(", ")
+      ]
+    ],
+    raw: loadBalancer,
+    ids: [loadBalancer.id]
+  });
+});
+
+// src/commands/loadbalancer/ipacl.ts
+var import_commander51 = require("commander");
+
+// src/commands/loadbalancer/target.ts
+var import_commander50 = require("commander");
+
+// src/commands/loadbalancer/rebind.ts
+function sanitizeForTerminal(value) {
+  return value.replace(/[\x00-\x1F\x7F]/g, "?");
+}
+function shellQuote(value) {
+  return `'${value.replace(/'/g, `'"'"'`)}'`;
+}
+function contextArgv(context) {
+  return [
+    ...context.profile === void 0 ? [] : ["--profile", context.profile],
+    ...context.region === void 0 ? [] : ["--region", context.region]
+  ];
+}
+function retryArgv(snapshot, context = {}) {
+  if (snapshot.ipacl_group_ids.length === 0) {
+    return [
+      "nhncloud",
+      "loadbalancer",
+      "clear-ipacl",
+      snapshot.loadbalancer_id,
+      ...contextArgv(context),
+      "--yes",
+      "--json"
+    ];
+  }
+  return [
+    "nhncloud",
+    "loadbalancer",
+    "set-ipacl",
+    snapshot.loadbalancer_id,
+    ...snapshot.ipacl_group_ids.flatMap((id) => ["--group", id]),
+    ...contextArgv(context),
+    "--yes",
+    "--json"
+  ];
+}
+function retryCommand(argv) {
+  return argv.map(shellQuote).join(" ");
+}
+async function snapshotIpAclBindings(client, loadBalancerIds) {
+  const uniqueIds = [...new Set(loadBalancerIds)].sort();
+  const snapshots = [];
+  for (const loadBalancerId of uniqueIds) {
+    const loadBalancer = await client.getLoadBalancer(loadBalancerId);
+    snapshots.push({
+      loadbalancer_id: loadBalancer.id,
+      ipacl_group_ids: loadBalancer.ipacl_groups.map((group) => group.ipacl_group_id)
+    });
+  }
+  return snapshots;
+}
+async function rebindIpAclSnapshots(client, snapshots, retryContext = {}) {
+  const succeeded = [];
+  const failed = [];
+  for (const snapshot of snapshots) {
+    try {
+      await client.bindIpAclGroups(
+        snapshot.loadbalancer_id,
+        snapshot.ipacl_group_ids
+      );
+      succeeded.push(snapshot);
+    } catch (error) {
+      const argv = retryArgv(snapshot, retryContext);
+      failed.push({
+        ...snapshot,
+        error: error instanceof Error ? error.message : String(error),
+        retry_argv: argv,
+        retry_command: retryCommand(argv)
+      });
+    }
+  }
+  return { skipped: false, succeeded, failed };
+}
+function skippedRebindResult() {
+  return { skipped: true, succeeded: [], failed: [] };
+}
+
+// src/commands/loadbalancer/target.ts
+function outputTargetWriteResult(opts, result) {
+  output(opts, {
+    headers: ["field", "value"],
+    rows: [
+      ["operation", result.operation],
+      ["status", result.status],
+      ["target_id", result.target.id],
+      ["ipacl_group_id", result.target.ipacl_group_id],
+      ["rebind_skipped", String(result.rebind.skipped)],
+      ["rebind_succeeded", String(result.rebind.succeeded.length)],
+      ["rebind_failed", String(result.rebind.failed.length)]
+    ],
+    raw: result,
+    ids: [result.target.id]
+  });
+}
+function writeTargetWarnings(group, result) {
+  if (result.rebind.skipped) {
+    process.stderr.write(
+      "\uACBD\uACE0: --no-rebind\uB85C \uC7AC\uBC14\uC778\uB529\uC744 \uC0DD\uB7B5\uD588\uC2B5\uB2C8\uB2E4. \uB370\uC774\uD130 \uC601\uC5ED\uC5D0 \uADDC\uCE59\uC774 \uC989\uC2DC \uBC18\uC601\uB418\uC9C0 \uC54A\uC744 \uC218 \uC788\uC2B5\uB2C8\uB2E4.\n"
+    );
+  }
+  process.stderr.write(
+    "\uC548\uB0B4: IP ACL \uB300\uC0C1 \uBCC0\uACBD\uC774 \uB370\uC774\uD130 \uC601\uC5ED\uC5D0 \uBC18\uC601\uB418\uAE30\uAE4C\uC9C0 \uC57D 10~20\uCD08\uAC00 \uAC78\uB9B4 \uC218 \uC788\uC2B5\uB2C8\uB2E4.\n"
+  );
+  if (group.action === "ALLOW") {
+    process.stderr.write(
+      "\uACBD\uACE0: ALLOW \uADF8\uB8F9 \uB300\uC0C1\uC5D0\uB294 Load Balancer\uAC00 \uC18D\uD55C VPC\uC758 private CIDR\uC744 \uC0AC\uC6A9\uD574\uC57C \uD569\uB2C8\uB2E4.\n"
+    );
+  }
+  if (result.rebind.failed.length > 0) {
+    process.stderr.write(
+      `\uACBD\uACE0: ${result.rebind.failed.length}\uAC1C Load Balancer \uC7AC\uBC14\uC778\uB529\uC774 \uC2E4\uD328\uD588\uC2B5\uB2C8\uB2E4. \uC544\uB798 \uBA85\uB839\uC73C\uB85C \uBCF5\uAD6C\uD558\uC138\uC694.
+`
+    );
+    for (const failure of result.rebind.failed) {
+      process.stderr.write(`${sanitizeForTerminal(failure.retry_command)}
+`);
+      process.stderr.write(`  \uC624\uB958: ${sanitizeForTerminal(failure.error)}
+`);
+    }
+  }
+}
+function targetWriteResult(operation, target, rebind) {
+  return {
+    operation,
+    status: rebind.failed.length === 0 ? "succeeded" : "partial",
+    target: {
+      id: target.id,
+      ipacl_group_id: target.ipacl_group_id
+    },
+    rebind
+  };
+}
+var listCommand11 = new import_commander50.Command("list").description("IP ACL \uB300\uC0C1 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<group>", "IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (groupInput, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const input = requireResourceInput(groupInput, "IP ACL \uADF8\uB8F9");
+  const { client } = await resolveLoadBalancerClient(opts);
+  startSpinner("IP ACL \uB300\uC0C1 \uBAA9\uB85D \uC870\uD68C \uC911...");
+  let targets;
+  let success = false;
+  try {
+    const groupId = await resolveIpAclGroupId(client, input);
+    targets = await client.listIpAclTargets({ ipacl_group_id: groupId });
+    success = true;
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  } finally {
+    if (success) stopSpinner(true);
+  }
+  output(opts, {
+    headers: ["id", "cidr_address", "description", "ipacl_group_id"],
+    rows: targets.map((target) => [
+      target.id,
+      target.cidr_address,
+      target.description,
+      target.ipacl_group_id
+    ]),
+    raw: targets,
+    ids: targets.map((target) => target.id)
+  });
+});
+var addCommand = new import_commander50.Command("add").description("IP ACL \uB300\uC0C1\uC744 \uCD94\uAC00\uD558\uACE0 \uC5F0\uACB0\uB41C Load Balancer\uB97C \uC7AC\uBC14\uC778\uB529\uD55C\uB2E4").argument("<group>", "IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID").requiredOption("--cidr <ip-or-cidr>", "\uCD94\uAC00\uD560 IP \uC8FC\uC18C \uB610\uB294 CIDR").option("--description <text>", "IP ACL \uB300\uC0C1 \uC124\uBA85").option("--no-rebind", "\uB300\uC0C1 \uCD94\uAC00 \uD6C4 Load Balancer \uC7AC\uBC14\uC778\uB529 \uC0DD\uB7B5").option("--yes", "\uB300\uC0C1 \uCD94\uAC00 \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (groupInput, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  requireYes(opts.yes, "IP ACL \uB300\uC0C1 \uCD94\uAC00");
+  const parsedGroup = requireResourceInput(groupInput, "IP ACL \uADF8\uB8F9");
+  const parsedCidr = parseIpOrCidr(opts.cidr ?? "");
+  const parsedDescription = optionalTrimmed(opts.description);
+  const { client } = await resolveLoadBalancerClient(opts);
+  startSpinner("IP ACL \uB300\uC0C1 \uCD94\uAC00\uC640 Load Balancer \uC7AC\uBC14\uC778\uB529 \uC911...");
+  let group;
+  let target;
+  let rebind;
+  try {
+    const groupId = await resolveIpAclGroupId(client, parsedGroup);
+    group = await client.getIpAclGroup(groupId);
+    const snapshots = opts.rebind === false ? [] : await snapshotIpAclBindings(
+      client,
+      group.loadbalancers.map((item) => item.loadbalancer_id)
+    );
+    target = await client.createIpAclTarget({
+      ipacl_group_id: group.id,
+      cidr_address: parsedCidr,
+      ...parsedDescription === void 0 ? {} : { description: parsedDescription }
+    });
+    rebind = opts.rebind === false ? skippedRebindResult() : await rebindIpAclSnapshots(client, snapshots, {
+      profile: opts.profile,
+      region: opts.region
+    });
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  }
+  stopSpinner(true);
+  const result = targetWriteResult("ipacl-target-add", target, rebind);
+  outputTargetWriteResult(opts, result);
+  writeTargetWarnings(group, result);
+  if (result.status === "partial") process.exitCode = EXIT_API_ERROR;
+});
+var removeCommand = new import_commander50.Command("remove").description("IP ACL \uB300\uC0C1\uC744 \uC0AD\uC81C\uD558\uACE0 \uC5F0\uACB0\uB41C Load Balancer\uB97C \uC7AC\uBC14\uC778\uB529\uD55C\uB2E4").argument("<target-id>", "\uC0AD\uC81C\uD560 IP ACL \uB300\uC0C1 UUID").option("--no-rebind", "\uB300\uC0C1 \uC0AD\uC81C \uD6C4 Load Balancer \uC7AC\uBC14\uC778\uB529 \uC0DD\uB7B5").option("--yes", "\uB300\uC0C1 \uC0AD\uC81C \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (targetInput, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  requireYes(opts.yes, "IP ACL \uB300\uC0C1 \uC0AD\uC81C");
+  const parsedTargetId = requireResourceInput(targetInput, "IP ACL \uB300\uC0C1");
+  const { client } = await resolveLoadBalancerClient(opts);
+  startSpinner("IP ACL \uB300\uC0C1 \uC0AD\uC81C\uC640 Load Balancer \uC7AC\uBC14\uC778\uB529 \uC911...");
+  let group;
+  let target;
+  let rebind;
+  try {
+    target = await client.getIpAclTarget(parsedTargetId);
+    group = await client.getIpAclGroup(target.ipacl_group_id);
+    const snapshots = opts.rebind === false ? [] : await snapshotIpAclBindings(
+      client,
+      group.loadbalancers.map((item) => item.loadbalancer_id)
+    );
+    await client.deleteIpAclTarget(target.id);
+    rebind = opts.rebind === false ? skippedRebindResult() : await rebindIpAclSnapshots(client, snapshots, {
+      profile: opts.profile,
+      region: opts.region
+    });
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  }
+  stopSpinner(true);
+  const result = targetWriteResult("ipacl-target-remove", target, rebind);
+  outputTargetWriteResult(opts, result);
+  writeTargetWarnings(group, result);
+  if (result.status === "partial") process.exitCode = EXIT_API_ERROR;
+});
+var targetCommand = new import_commander50.Command("target").description("IP ACL \uB300\uC0C1 \uC870\uD68C\xB7\uAD00\uB9AC");
+targetCommand.addCommand(listCommand11);
+targetCommand.addCommand(addCommand);
+targetCommand.addCommand(removeCommand);
+
+// src/commands/loadbalancer/ipacl.ts
+var listCommand12 = new import_commander51.Command("list").description("IP ACL \uADF8\uB8F9 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4 (\uC804\uCCB4 \uD544\uB4DC\uB294 --json)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client } = await resolveLoadBalancerClient(opts);
+  startSpinner("IP ACL \uADF8\uB8F9 \uBAA9\uB85D \uC870\uD68C \uC911...");
+  let groups;
+  let success = false;
+  try {
+    groups = await client.listIpAclGroups();
+    success = true;
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  } finally {
+    if (success) stopSpinner(true);
+  }
+  output(opts, {
+    headers: ["id", "name", "action", "ipacl_target_count", "loadbalancer_count"],
+    rows: groups.map((group) => [
+      group.id,
+      group.name,
+      group.action,
+      group.ipacl_target_count,
+      String(group.loadbalancers.length)
+    ]),
+    raw: groups,
+    ids: groups.map((group) => group.id)
+  });
+});
+var getCommand9 = new import_commander51.Command("get").description("IP ACL \uADF8\uB8F9\uC744 \uC774\uB984 \uB610\uB294 UUID\uB85C \uC870\uD68C\uD55C\uB2E4").argument("<group>", "IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (groupInput, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const input = requireResourceInput(groupInput, "IP ACL \uADF8\uB8F9");
+  const { client } = await resolveLoadBalancerClient(opts);
+  startSpinner("IP ACL \uADF8\uB8F9 \uC870\uD68C \uC911...");
+  let group;
+  let success = false;
+  try {
+    const id = await resolveIpAclGroupId(client, input);
+    group = await client.getIpAclGroup(id);
+    success = true;
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  } finally {
+    if (success) stopSpinner(true);
+  }
+  output(opts, {
+    headers: ["field", "value"],
+    rows: [
+      ["id", group.id],
+      ["name", group.name],
+      ["action", group.action],
+      ["ipacl_target_count", group.ipacl_target_count],
+      [
+        "loadbalancer_ids",
+        group.loadbalancers.map((loadBalancer) => loadBalancer.loadbalancer_id).join(", ")
+      ]
+    ],
+    raw: group,
+    ids: [group.id]
+  });
+});
+var createCommand8 = new import_commander51.Command("create").description("IP ACL \uADF8\uB8F9\uC744 \uC0DD\uC131\uD55C\uB2E4").requiredOption("--name <name>", "IP ACL \uADF8\uB8F9 \uC774\uB984").requiredOption("--action <ALLOW|DENY>", "IP \uC811\uADFC \uC81C\uC5B4 \uB3D9\uC791").option("--description <text>", "IP ACL \uADF8\uB8F9 \uC124\uBA85").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const parsedName = requireResourceInput(opts.name ?? "", "IP ACL \uADF8\uB8F9");
+  const parsedAction = parseIpAclAction(opts.action ?? "");
+  const parsedDescription = optionalTrimmed(opts.description);
+  const { client } = await resolveLoadBalancerClient(opts);
+  startSpinner("IP ACL \uADF8\uB8F9 \uC0DD\uC131 \uC911...");
+  let group;
+  try {
+    group = await client.createIpAclGroup({
+      name: parsedName,
+      action: parsedAction,
+      ...parsedDescription === void 0 ? {} : { description: parsedDescription }
+    });
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  }
+  stopSpinner(true);
+  const result = {
+    operation: "ipacl-group-create",
+    status: "succeeded",
+    ipacl_group_id: group.id
+  };
+  output(opts, {
+    headers: ["field", "value"],
+    rows: Object.entries(result).map(([key, value]) => [key, value]),
+    raw: result,
+    ids: [group.id]
+  });
+});
+var deleteCommand7 = new import_commander51.Command("delete").description("IP ACL \uADF8\uB8F9\uACFC \uD558\uC704 \uB300\uC0C1\uC744 \uC0AD\uC81C\uD55C\uB2E4").argument("<group>", "IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID").option("--yes", "\uC0AD\uC81C\uC640 \uC5F0\uACB0 \uADDC\uCE59 \uC81C\uAC70 \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (groupInput, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const confirmedYes = requireYes(opts.yes, "IP ACL \uADF8\uB8F9 \uC0AD\uC81C");
+  const parsedGroup = requireResourceInput(groupInput, "IP ACL \uADF8\uB8F9");
+  if (confirmedYes) {
+    process.stderr.write(
+      "\uACBD\uACE0: \uADF8\uB8F9\uC758 \uBAA8\uB4E0 \uB300\uC0C1\uACFC Load Balancer \uC5F0\uACB0 \uADDC\uCE59\uC774 \uD568\uAED8 \uC81C\uAC70\uB429\uB2C8\uB2E4.\n"
+    );
+  }
+  const { client } = await resolveLoadBalancerClient(opts);
+  startSpinner("IP ACL \uADF8\uB8F9 \uC0AD\uC81C \uC911...");
+  let groupId;
+  try {
+    groupId = await resolveIpAclGroupId(client, parsedGroup);
+    await client.deleteIpAclGroup(groupId);
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  }
+  stopSpinner(true);
+  const result = {
+    operation: "ipacl-group-delete",
+    status: "succeeded",
+    ipacl_group_id: groupId
+  };
+  output(opts, {
+    headers: ["field", "value"],
+    rows: Object.entries(result).map(([key, value]) => [key, value]),
+    raw: result,
+    ids: [groupId]
+  });
+});
+var ipaclCommand = new import_commander51.Command("ipacl").description("IP ACL \uADF8\uB8F9\xB7\uB300\uC0C1 \uC870\uD68C");
+ipaclCommand.addCommand(listCommand12);
+ipaclCommand.addCommand(getCommand9);
+ipaclCommand.addCommand(createCommand8);
+ipaclCommand.addCommand(deleteCommand7);
+ipaclCommand.addCommand(targetCommand);
+
+// src/commands/loadbalancer/help.ts
+function configureLoadBalancerHelp(command) {
+  command.configureHelp({ showGlobalOptions: true });
+  for (const child of command.commands) {
+    configureLoadBalancerHelp(child);
+  }
+}
+
+// src/commands/loadbalancer/binding.ts
+var import_commander52 = require("commander");
+function bindingResult(operation, loadBalancerId, groupIds) {
+  return {
+    operation,
+    status: "succeeded",
+    loadbalancer_id: loadBalancerId,
+    ipacl_group_ids: groupIds
+  };
+}
+function outputBindingResult(opts, result) {
+  output(opts, {
+    headers: ["field", "value"],
+    rows: [
+      ["operation", result.operation],
+      ["status", result.status],
+      ["loadbalancer_id", result.loadbalancer_id],
+      ["ipacl_group_ids", result.ipacl_group_ids.join(", ")]
+    ],
+    raw: result,
+    ids: [result.loadbalancer_id]
+  });
+}
+var setIpAclCommand2 = new import_commander52.Command("set-ipacl").description("Load Balancer\uC758 IP ACL \uADF8\uB8F9 \uC5F0\uACB0\uC744 \uC804\uCCB4 \uAD50\uCCB4\uD55C\uB2E4").argument("<loadbalancer>", "Load Balancer \uC774\uB984 \uB610\uB294 UUID").requiredOption(
+  "--group <group>",
+  "\uC801\uC6A9\uD560 IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID (\uBC18\uBCF5 \uAC00\uB2A5)",
+  collectOption
+).option("--yes", "\uAE30\uC874 \uC5F0\uACB0 \uC804\uCCB4 \uAD50\uCCB4 \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (loadBalancerInput, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const confirmedYes = requireYes(opts.yes, "Load Balancer IP ACL \uC5F0\uACB0 \uAD50\uCCB4");
+  const parsedLoadBalancer = requireResourceInput(loadBalancerInput, "Load Balancer");
+  const parsedGroups = requireResourceInputs(opts.group ?? [], "IP ACL \uADF8\uB8F9");
+  const { client } = await resolveLoadBalancerClient(opts);
+  startSpinner("Load Balancer IP ACL \uC5F0\uACB0 \uAD50\uCCB4 \uC911...");
+  let loadBalancerId;
+  let groupIds;
+  try {
+    loadBalancerId = await resolveLoadBalancerId(client, parsedLoadBalancer);
+    const groups = await resolveIpAclGroups(client, parsedGroups);
+    groupIds = groups.map((group) => group.id);
+    if (new Set(groupIds).size !== groupIds.length) {
+      throw new NhnCloudCliError(
+        "\uAC19\uC740 IP ACL \uADF8\uB8F9\uC744 \uC911\uBCF5 \uC9C0\uC815\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.",
+        EXIT_PARAM_ERROR
+      );
+    }
+    if (new Set(groups.map((group) => group.action)).size > 1) {
+      throw new NhnCloudCliError(
+        "\uD568\uAED8 \uC801\uC6A9\uD560 IP ACL \uADF8\uB8F9\uC758 action\uC740 \uBAA8\uB450 \uAC19\uC544\uC57C \uD569\uB2C8\uB2E4.",
+        EXIT_PARAM_ERROR
+      );
+    }
+    if (confirmedYes) await client.bindIpAclGroups(loadBalancerId, groupIds);
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  }
+  stopSpinner(true);
+  outputBindingResult(
+    opts,
+    bindingResult("loadbalancer-set-ipacl", loadBalancerId, groupIds)
+  );
+});
+var clearIpAclCommand = new import_commander52.Command("clear-ipacl").description("Load Balancer\uC758 \uBAA8\uB4E0 IP ACL \uADF8\uB8F9 \uC5F0\uACB0\uC744 \uD574\uC81C\uD55C\uB2E4").argument("<loadbalancer>", "Load Balancer \uC774\uB984 \uB610\uB294 UUID").option("--yes", "\uBAA8\uB4E0 IP ACL \uC5F0\uACB0 \uD574\uC81C \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (loadBalancerInput, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const confirmedYes = requireYes(opts.yes, "Load Balancer IP ACL \uC5F0\uACB0 \uD574\uC81C");
+  const parsedLoadBalancer = requireResourceInput(loadBalancerInput, "Load Balancer");
+  const { client } = await resolveLoadBalancerClient(opts);
+  startSpinner("Load Balancer IP ACL \uC5F0\uACB0 \uD574\uC81C \uC911...");
+  let loadBalancerId;
+  try {
+    loadBalancerId = await resolveLoadBalancerId(client, parsedLoadBalancer);
+    if (confirmedYes) await client.bindIpAclGroups(loadBalancerId, []);
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  }
+  stopSpinner(true);
+  outputBindingResult(
+    opts,
+    bindingResult("loadbalancer-clear-ipacl", loadBalancerId, [])
+  );
+});
+
 // src/index.ts
 var rootAgentHints = `
 Agent hints:
@@ -7573,6 +8614,14 @@ Agent workflow:
   1. nhncloud floatingip list --json
   2. nhncloud floatingip create --json
 `;
+var loadbalancerAgentWorkflow = `
+Agent workflow:
+  1. nhncloud loadbalancer list --json
+  2. nhncloud loadbalancer ipacl list --json
+  3. nhncloud loadbalancer ipacl target list <group> --json
+  4. \uC4F0\uAE30 \uC804\uC5D0\uB294 --profile, --region, --yes, --json\uC744 \uBA85\uC2DC\uD55C\uB2E4.
+  5. \uB300\uC0C1 \uBCC0\uACBD\uC740 \uAE30\uBCF8\uC73C\uB85C \uC7AC\uBC14\uC778\uB529\uD55C\uB2E4. exit code 1\uC774\uBA74 rebind.failed[].retry_argv\uB97C \uC77D\uB294\uB2E4.
+`;
 var ncrAgentWorkflow = `
 Agent workflow:
   1. nhncloud ncr list --json
@@ -7591,8 +8640,8 @@ Agent workflow:
   2. nhncloud ncs workload list --json
   3. nhncloud ncs workload get <id> --json
 `;
-var program = new import_commander48.Command();
-program.name("nhncloud").description("NHN Cloud CLI \u2014 AI agent & terminal friendly").version("0.10.0").option("--json", "JSON \uD615\uC2DD\uC73C\uB85C \uCD9C\uB825").option("--quiet", "\uCD5C\uC18C \uCD9C\uB825 (\uC790\uB3D9\uD654\uC6A9)").option("--no-color", "\uC0C9\uC0C1 \uBE44\uD65C\uC131\uD654").addHelpText("after", rootAgentHints);
+var program = new import_commander53.Command();
+program.name("nhncloud").description("NHN Cloud CLI \u2014 AI agent & terminal friendly").version("0.11.0").option("--json", "JSON \uD615\uC2DD\uC73C\uB85C \uCD9C\uB825").option("--quiet", "\uCD5C\uC18C \uCD9C\uB825 (\uC790\uB3D9\uD654\uC6A9)").option("--no-color", "\uC0C9\uC0C1 \uBE44\uD65C\uC131\uD654").addHelpText("after", rootAgentHints);
 program.hook("preAction", () => {
   const opts = program.opts();
   if (!opts.color || process.env["NO_COLOR"]) {
@@ -7603,12 +8652,12 @@ program.hook("preAction", () => {
   }
 });
 program.addCommand(configureCommand);
-var logncrashCommand = new import_commander48.Command("logncrash").description("Log & Crash \uAD00\uB828 \uBA85\uB839").addHelpText("after", logncrashAgentWorkflow);
+var logncrashCommand = new import_commander53.Command("logncrash").description("Log & Crash \uAD00\uB828 \uBA85\uB839").addHelpText("after", logncrashAgentWorkflow);
 logncrashCommand.addCommand(searchCommand);
 logncrashCommand.addCommand(sendCommand);
 logncrashCommand.addCommand(exportCommand);
 program.addCommand(logncrashCommand);
-var deployCommand = new import_commander48.Command("deploy").description("NHN Cloud Deploy \uAD00\uB828 \uBA85\uB839").addHelpText("after", deployAgentWorkflow);
+var deployCommand = new import_commander53.Command("deploy").description("NHN Cloud Deploy \uAD00\uB828 \uBA85\uB839").addHelpText("after", deployAgentWorkflow);
 deployCommand.addCommand(runCommand);
 deployCommand.addCommand(artifactsCommand);
 deployCommand.addCommand(serverGroupsCommand);
@@ -7618,7 +8667,7 @@ deployCommand.addCommand(binariesCommand);
 deployCommand.addCommand(uploadCommand);
 deployCommand.addCommand(downloadCommand);
 program.addCommand(deployCommand);
-var instanceCommand = new import_commander48.Command("instance").description("Compute \uC778\uC2A4\uD134\uC2A4 \uAD00\uB828 \uBA85\uB839").addHelpText("after", instanceAgentWorkflow);
+var instanceCommand = new import_commander53.Command("instance").description("Compute \uC778\uC2A4\uD134\uC2A4 \uAD00\uB828 \uBA85\uB839").addHelpText("after", instanceAgentWorkflow);
 instanceCommand.addCommand(listCommand);
 instanceCommand.addCommand(flavorsCommand);
 instanceCommand.addCommand(availabilityZonesCommand);
@@ -7637,36 +8686,44 @@ instanceCommand.addCommand(keypairCommand);
 instanceCommand.addCommand(volumeCommand);
 instanceCommand.addCommand(volumesCommand);
 program.addCommand(instanceCommand);
-var networkCommand = new import_commander48.Command("network").description("VPC\xB7\uC11C\uBE0C\uB137 \uC870\uD68C").addHelpText("after", networkAgentWorkflow);
+var networkCommand = new import_commander53.Command("network").description("VPC\xB7\uC11C\uBE0C\uB137 \uC870\uD68C").addHelpText("after", networkAgentWorkflow);
 networkCommand.addCommand(listCommand3);
 networkCommand.addCommand(subnetCommand);
 program.addCommand(networkCommand);
-var volumeCommand2 = new import_commander48.Command("volume").description("Block Storage \uBCFC\uB968 \uAD00\uB828 \uBA85\uB839").addHelpText("after", volumeAgentWorkflow);
+var volumeCommand2 = new import_commander53.Command("volume").description("Block Storage \uBCFC\uB968 \uAD00\uB828 \uBA85\uB839").addHelpText("after", volumeAgentWorkflow);
 volumeCommand2.addCommand(listCommand2);
 volumeCommand2.addCommand(getCommand);
 volumeCommand2.addCommand(createCommand);
 program.addCommand(volumeCommand2);
-var floatingipCommand = new import_commander48.Command("floatingip").description(
+var floatingipCommand = new import_commander53.Command("floatingip").description(
   "Floating IP(\uC778\uC2A4\uD134\uC2A4 \uACF5\uC778 IP) \uAD00\uB9AC"
 ).addHelpText("after", floatingIpAgentWorkflow);
 floatingipCommand.addCommand(listCommand4);
 floatingipCommand.addCommand(createCommand2);
 floatingipCommand.addCommand(deleteCommand);
 program.addCommand(floatingipCommand);
-var ncrCommand = new import_commander48.Command("ncr").description("NHN Container Registry \uAD00\uB828 \uBA85\uB839").addHelpText("after", ncrAgentWorkflow);
+var loadbalancerCommand = new import_commander53.Command("loadbalancer").description("Load Balancer\xB7IP ACL \uC870\uD68C\xB7\uAD00\uB9AC").addHelpText("after", loadbalancerAgentWorkflow);
+loadbalancerCommand.addCommand(listCommand10);
+loadbalancerCommand.addCommand(getCommand8);
+loadbalancerCommand.addCommand(ipaclCommand);
+loadbalancerCommand.addCommand(setIpAclCommand2);
+loadbalancerCommand.addCommand(clearIpAclCommand);
+configureLoadBalancerHelp(loadbalancerCommand);
+program.addCommand(loadbalancerCommand);
+var ncrCommand = new import_commander53.Command("ncr").description("NHN Container Registry \uAD00\uB828 \uBA85\uB839").addHelpText("after", ncrAgentWorkflow);
 ncrCommand.addCommand(listCommand5);
 ncrCommand.addCommand(getCommand3);
 ncrCommand.addCommand(imagesCommand2);
 ncrCommand.addCommand(tagsCommand);
 program.addCommand(ncrCommand);
-var nksCommand = new import_commander48.Command("nks").description("NHN Kubernetes Service \uAD00\uB828 \uBA85\uB839").addHelpText("after", nksAgentWorkflow);
+var nksCommand = new import_commander53.Command("nks").description("NHN Kubernetes Service \uAD00\uB828 \uBA85\uB839").addHelpText("after", nksAgentWorkflow);
 nksCommand.addCommand(supportsCommand);
 nksCommand.addCommand(clusterCommand);
 nksCommand.addCommand(nodegroupCommand);
 nksCommand.addCommand(addonTypeCommand);
 nksCommand.addCommand(addonCommand);
 program.addCommand(nksCommand);
-var ncsCommand = new import_commander48.Command("ncs").description("NHN Container Service \uAD00\uB828 \uBA85\uB839").addHelpText("after", ncsAgentWorkflow);
+var ncsCommand = new import_commander53.Command("ncs").description("NHN Container Service \uAD00\uB828 \uBA85\uB839").addHelpText("after", ncsAgentWorkflow);
 ncsCommand.addCommand(templateCommand);
 ncsCommand.addCommand(workloadCommand);
 ncsCommand.addCommand(malwareCommand);