@bifos/nhncloud-cli 0.10.1 → 0.12.0

package/dist/index.js

@@ -24,7 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 
 // src/index.ts
-var import_commander48 = require("commander");
+var import_commander53 = require("commander");
 var import_chalk18 = __toESM(require("chalk"));
 
 // src/utils/spinner.ts
@@ -114,7 +114,7 @@ nhncloud configure \uB97C \uC2E4\uD589\uD574 \uC790\uACA9\uC99D\uBA85\uC744 \uC1
           profiles: {
             default: {
               userAccessKey: { id: "<uak-id>", secret: "<uak-secret>" },
-              logncrash: { appkey: "<appkey>", secret: "<secretkey>" }
+              logncrash: { appkey: "<appkey>" }
             }
           }
         },
@@ -215,7 +215,7 @@ ${CREDENTIALS_PATH} \uC5D0\uC11C profiles.${profileName} \uBE14\uB85D\uC744 \uCD
     throw new NhnCloudCliError(
       `profile "${profileName}" \uC5D0 "${service}" \uC790\uACA9\uC99D\uBA85\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.
 ${CREDENTIALS_PATH} \uC5D0\uC11C profiles.${profileName}.${service} \uBE14\uB85D\uC744 \uCD94\uAC00\uD558\uC138\uC694.
-\uC608\uC2DC: { "appkey": "<appkey>", "secret": "<secretkey>" }`,
+\uC608\uC2DC: { "appkey": "<appkey>" }`,
       EXIT_CONFIG_ERROR
     );
   }
@@ -681,33 +681,26 @@ function unwrap(res) {
 // src/services/logncrash/client.ts
 var LogncrashClient = class {
   appkey;
-  /** 검색(X-LNCS-SECRET)에만 필요. collector send 는 secret 을 쓰지 않으므로 옵셔널 (ADR-014). */
-  secret;
-  constructor(appkey, secret) {
+  /** Search v3 읽기 요청에만 필요하다. collector send 는 인증 헤더를 쓰지 않는다(ADR-014). */
+  accessToken;
+  constructor(appkey, accessToken) {
     this.appkey = appkey;
-    this.secret = secret;
+    this.accessToken = accessToken;
   }
-  async search(params) {
-    if (!this.secret) {
-      throw new NhnCloudCliError(
-        "logncrash search \uC5D0\uB294 secret \uC774 \uD544\uC694\uD569\uB2C8\uB2E4. configure \uB85C logncrash secret \uC744 \uC124\uC815\uD558\uC138\uC694.",
-        EXIT_CONFIG_ERROR
-      );
-    }
+  async cursorSearch(params) {
+    const headers = this.readHeaders();
     const endpoint = endpointFor("logncrash");
-    const url = `${endpoint}/api/v2/search/${encodeURIComponent(this.appkey)}`;
+    const url = `${endpoint}/v3/${encodeURIComponent(this.appkey)}/logs/cursor`;
     try {
       const res = await import_ky4.default.post(url, {
-        headers: {
-          "X-LNCS-SECRET": this.secret,
-          "Content-Type": "application/json"
-        },
+        headers,
         json: {
           query: params.query,
           from: params.from,
           to: params.to,
-          pageNumber: params.pageNumber ?? 0,
-          pageSize: params.pageSize ?? 10
+          sort: { logTime: "DESC" },
+          ...params.pageSize !== void 0 ? { pageSize: params.pageSize } : {},
+          ...params.cursor !== void 0 ? { cursor: params.cursor } : {}
         }
       }).json();
       return unwrap(res);
@@ -716,29 +709,19 @@ var LogncrashClient = class {
     }
   }
   /**
-   * scroll 검색을 시작한다. POST /api/v2/search/scroll/{appkey}.
-   * body 는 search 와 동일(query/from/to/pageSize). 응답 scrollKey 로 scrollNext 를 이어 호출한다.
+   * v3 scroll 검색을 시작한다. 응답 scrollKey 로 scrollNext 를 이어 호출한다.
    */
   async scrollStart(params) {
-    if (!this.secret) {
-      throw new NhnCloudCliError(
-        "logncrash scroll \uC5D0\uB294 secret \uC774 \uD544\uC694\uD569\uB2C8\uB2E4. configure \uB85C logncrash secret \uC744 \uC124\uC815\uD558\uC138\uC694.",
-        EXIT_CONFIG_ERROR
-      );
-    }
+    const headers = this.readHeaders();
     const endpoint = endpointFor("logncrash");
-    const url = `${endpoint}/api/v2/search/scroll/${encodeURIComponent(this.appkey)}`;
+    const url = `${endpoint}/v3/${encodeURIComponent(this.appkey)}/logs/scroll`;
     try {
       const res = await import_ky4.default.post(url, {
-        headers: {
-          "X-LNCS-SECRET": this.secret,
-          "Content-Type": "application/json"
-        },
+        headers,
         json: {
           query: params.query,
           from: params.from,
-          to: params.to,
-          pageSize: params.pageSize ?? 100
+          to: params.to
         }
       }).json();
       return unwrap(res);
@@ -747,31 +730,30 @@ var LogncrashClient = class {
     }
   }
   /**
-   * scroll 다음 페이지를 가져온다. POST /api/v2/search/scroll/{appkey}/{scrollKey}.
-   * body 는 보내지 않는다(scrollKey 가 좌표). scrollKey 만료 시 API 가 실패 봉투를 주며,
-   * unwrap 이 EXIT_API_ERROR 로 변환한다 — 호출부에서 만료 안내 메시지로 감싼다.
+   * v3 scroll 다음 페이지를 가져온다. body 없이 scrollKey 경로만 사용한다.
    */
   async scrollNext(scrollKey) {
-    if (!this.secret) {
-      throw new NhnCloudCliError(
-        "logncrash scroll \uC5D0\uB294 secret \uC774 \uD544\uC694\uD569\uB2C8\uB2E4. configure \uB85C logncrash secret \uC744 \uC124\uC815\uD558\uC138\uC694.",
-        EXIT_CONFIG_ERROR
-      );
-    }
+    const headers = this.readHeaders();
     const endpoint = endpointFor("logncrash");
-    const url = `${endpoint}/api/v2/search/scroll/${encodeURIComponent(this.appkey)}/${encodeURIComponent(scrollKey)}`;
+    const url = `${endpoint}/v3/${encodeURIComponent(this.appkey)}/logs/scroll/${encodeURIComponent(scrollKey)}`;
     try {
       const res = await import_ky4.default.post(url, {
-        headers: {
-          "X-LNCS-SECRET": this.secret,
-          "Content-Type": "application/json"
-        }
+        headers
       }).json();
       return unwrap(res);
     } catch (err) {
       throw toNhnCloudCliError(err);
     }
   }
+  readHeaders() {
+    if (!this.accessToken) {
+      throw new NhnCloudCliError(
+        "Log & Crash Search v3 \uD638\uCD9C\uC5D0\uB294 \uACF5\uD1B5 UAK\uB85C \uBC1C\uAE09\uD55C access token\uC774 \uD544\uC694\uD569\uB2C8\uB2E4. nhncloud configure\uB85C UAK\uB97C \uC124\uC815\uD558\uC138\uC694.",
+        EXIT_CONFIG_ERROR
+      );
+    }
+    return { "X-NHN-Authorization": `Bearer ${this.accessToken}` };
+  }
   /**
    * 로그 한 건을 Log & Crash collector 로 전송한다 (ADR-014).
    * - host: api-logncrash (검색의 api-lncs-search 와 별도)
@@ -1766,17 +1748,17 @@ async function verifyNcs(uak, appkey) {
     throw err;
   }
 }
-async function verifyLogncrash(cred) {
-  if (!cred.appkey || !cred.secret) return false;
-  const client = new LogncrashClient(cred.appkey, cred.secret);
+async function verifyLogncrash(uak, appkey) {
+  if (!appkey) return false;
   const now = /* @__PURE__ */ new Date();
   const oneMinuteAgo = new Date(now.getTime() - 6e4);
   try {
-    await client.search({
+    const token = await getAccessToken("__verify__", uak.id, uak.secret, true);
+    const client = new LogncrashClient(appkey, token);
+    await client.cursorSearch({
       query: "*",
       from: oneMinuteAgo.toISOString(),
       to: now.toISOString(),
-      pageNumber: 0,
       pageSize: 1
     });
     return true;
@@ -1789,7 +1771,7 @@ async function verifyLogncrash(cred) {
 }
 
 // src/commands/configure.ts
-async function saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, doVerify) {
+async function saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, doVerify, logncrashUak = uak) {
   if (doVerify) {
     if (uak) {
       const ok = await verifyUserAccessKey(uak);
@@ -1803,12 +1785,18 @@ async function saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, doVeri
       }
     }
     if (logncrash) {
-      const ok = await verifyLogncrash(logncrash);
+      if (!logncrashUak) {
+        throw new NhnCloudCliError(
+          "logncrash Search v3 \uAC80\uC99D\uC5D0\uB294 \uACF5\uD1B5 UAK\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4. --uak-id\uC640 UAK secret\uC744 \uD568\uAED8 \uC124\uC815\uD558\uAC70\uB098 \uAE30\uC874 profile\uC5D0 UAK\uB97C \uC124\uC815\uD558\uC138\uC694.",
+          EXIT_CONFIG_ERROR
+        );
+      }
+      const ok = await verifyLogncrash(logncrashUak, logncrash.appkey ?? "");
       if (ok) {
         process.stderr.write(import_chalk.default.green("  \u2713 logncrash \uC5F0\uACB0 \uC131\uACF5\n"));
       } else {
         throw new NhnCloudCliError(
-          "logncrash \uC778\uC99D \uC2E4\uD328 \u2014 appkey / secret \uC744 \uD655\uC778\uD558\uC138\uC694.",
+          "logncrash \uC778\uC99D \uC2E4\uD328 \u2014 appkey \uB610\uB294 UAK\uB97C \uD655\uC778\uD558\uC138\uC694.",
           EXIT_AUTH_ERROR
         );
       }
@@ -1932,8 +1920,7 @@ async function runInteractive(opts) {
       message: "logncrash appkey",
       validate: (v) => v.trim().length > 0 || "logncrash appkey \uB97C \uC785\uB825\uD558\uC138\uC694"
     });
-    const secret = await password({ message: "logncrash secret", mask: "*" });
-    logncrash = { appkey, secret };
+    logncrash = { appkey: appkey.trim() };
   }
   let iaas;
   const setupIaas = await confirm({
@@ -1994,7 +1981,7 @@ async function runInteractive(opts) {
   }
   if (opts.verify) {
     try {
-      await saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, true);
+      await saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, true, uak);
     } catch (err) {
       if (err instanceof NhnCloudCliError && err.exitCode === EXIT_AUTH_ERROR) {
         process.stderr.write(import_chalk.default.red(`  \u2717 ${err.message}
@@ -2007,22 +1994,43 @@ async function runInteractive(opts) {
           process.stderr.write(import_chalk.default.yellow("\uC800\uC7A5\uC774 \uCDE8\uC18C\uB418\uC5C8\uC2B5\uB2C8\uB2E4.\n"));
           return;
         }
-        await saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, false);
+        await saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, false, uak);
       } else {
         throw err;
       }
     }
   } else {
-    await saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, false);
+    await saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, false, uak);
   }
 }
 async function runNonInteractive(opts) {
-  const profileName = await resolveProfileName(opts.profile);
   const uakSecret = opts.uakSecret ?? process.env["NHNCLOUD_UAK_SECRET"];
-  const logncrashSecret = opts.logncrashSecret ?? process.env["NHNCLOUD_LOGNCRASH_SECRET"];
   const iaasPassword = opts.iaasPassword ?? process.env["NHNCLOUD_IAAS_PASSWORD"];
-  const uak = opts.uakId && uakSecret ? { id: opts.uakId, secret: uakSecret } : void 0;
-  const logncrash = opts.logncrashAppkey && logncrashSecret ? { appkey: opts.logncrashAppkey, secret: logncrashSecret } : void 0;
+  if (opts.uakId !== void 0 && opts.uakId.trim().length === 0) {
+    throw new NhnCloudCliError("--uak-id \uAC12\uC740 \uBE44\uC5B4 \uC788\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  if (uakSecret !== void 0 && uakSecret.length === 0) {
+    throw new NhnCloudCliError("UAK secret \uAC12\uC740 \uBE44\uC5B4 \uC788\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  if (opts.uakId !== void 0 !== (uakSecret !== void 0)) {
+    throw new NhnCloudCliError(
+      "\uBE44\uB300\uD654\uD615 \uBAA8\uB4DC\uC5D0\uC11C --uak-id\uC640 UAK secret\uC740 \uD568\uAED8 \uC9C0\uC815\uD574\uC57C \uD569\uB2C8\uB2E4.",
+      EXIT_PARAM_ERROR
+    );
+  }
+  if (opts.logncrashAppkey !== void 0 && opts.logncrashAppkey.trim().length === 0) {
+    throw new NhnCloudCliError("--logncrash-appkey \uAC12\uC740 \uBE44\uC5B4 \uC788\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  if (opts.logncrashSecret !== void 0) {
+    process.stderr.write(
+      import_chalk.default.yellow(
+        "\uACBD\uACE0: --logncrash-secret\uC740 \uD3D0\uAE30 \uC608\uC815\uC774\uBA70 Search v3 \uC778\uC99D\uC5D0 \uC0AC\uC6A9\uD558\uAC70\uB098 \uC800\uC7A5\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.\n"
+      )
+    );
+  }
+  const profileName = await resolveProfileName(opts.profile);
+  const uak = opts.uakId !== void 0 && uakSecret !== void 0 ? { id: opts.uakId.trim(), secret: uakSecret } : void 0;
+  const logncrash = opts.logncrashAppkey?.trim() ? { appkey: opts.logncrashAppkey.trim() } : void 0;
   const iaas = opts.iaasTenantId && opts.iaasUsername && iaasPassword ? {
     tenantId: opts.iaasTenantId,
     username: opts.iaasUsername,
@@ -2033,20 +2041,33 @@ async function runNonInteractive(opts) {
   const ncs = opts.ncsAppkey?.trim() ? { appkey: opts.ncsAppkey.trim() } : void 0;
   if (!uak && !logncrash && !iaas && !ncr && !ncs) {
     throw new NhnCloudCliError(
-      "\uBE44\uB300\uD654\uD615 \uBAA8\uB4DC: --uak-id + UAK secret, --logncrash-appkey + logncrash secret,\n--iaas-tenant-id + --iaas-username + iaas password,\n--ncr-appkey, \uB610\uB294 --ncs-appkey \uC911 \uD558\uB098\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.\nsecret/password \uB294 \uB178\uCD9C \uBC29\uC9C0\uB97C \uC704\uD574 \uD658\uACBD\uBCC0\uC218 \uAD8C\uC7A5:\nNHNCLOUD_UAK_SECRET / NHNCLOUD_LOGNCRASH_SECRET / NHNCLOUD_IAAS_PASSWORD.",
+      "\uBE44\uB300\uD654\uD615 \uBAA8\uB4DC: --uak-id + UAK secret, --logncrash-appkey,\n--iaas-tenant-id + --iaas-username + iaas password,\n--ncr-appkey, \uB610\uB294 --ncs-appkey \uC911 \uD558\uB098\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.\nsecret/password \uB294 \uB178\uCD9C \uBC29\uC9C0\uB97C \uC704\uD574 \uD658\uACBD\uBCC0\uC218 \uAD8C\uC7A5:\nNHNCLOUD_UAK_SECRET / NHNCLOUD_IAAS_PASSWORD.",
       EXIT_PARAM_ERROR
     );
   }
+  let logncrashUak = uak;
+  if (opts.verify && logncrash && !logncrashUak) {
+    logncrashUak = await getUserAccessKey(profileName);
+  }
   if (opts.verify) {
     process.stderr.write(import_chalk.default.gray("\uC5F0\uACB0 \uD14C\uC2A4\uD2B8 \uC911\u2026\n"));
   }
-  await saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, opts.verify);
+  await saveAndVerify(
+    profileName,
+    uak,
+    logncrash,
+    iaas,
+    ncr,
+    ncs,
+    opts.verify,
+    logncrashUak
+  );
 }
-var configureCommand = new import_commander.Command("configure").description("\uC790\uACA9\uC99D\uBA85 \uC124\uC815 \uB9C8\uBC95\uC0AC (\uB300\uD654\uD615 + flag)").option("--profile <name>", "\uB300\uC0C1 profile \uC774\uB984 (\uAE30\uBCF8: default)").option("--uak-id <id>", "\uAC1C\uC778 UAK ID (\uBE44\uB300\uD654\uD615)").option("--uak-secret <secret>", "\uAC1C\uC778 UAK Secret (\uBE44\uB300\uD654\uD615, \uB178\uCD9C \uBC29\uC9C0\uB85C env NHNCLOUD_UAK_SECRET \uAD8C\uC7A5)").option("--logncrash-appkey <key>", "logncrash appkey (\uBE44\uB300\uD654\uD615)").option("--logncrash-secret <secret>", "logncrash secret (\uBE44\uB300\uD654\uD615, env NHNCLOUD_LOGNCRASH_SECRET \uAD8C\uC7A5)").option("--iaas-tenant-id <id>", "iaas tenantId / \uD504\uB85C\uC81D\uD2B8 ID (\uBE44\uB300\uD654\uD615)").option("--iaas-username <user>", "iaas IAM username (\uBE44\uB300\uD654\uD615)").option(
+var configureCommand = new import_commander.Command("configure").description("\uC790\uACA9\uC99D\uBA85 \uC124\uC815 \uB9C8\uBC95\uC0AC (\uB300\uD654\uD615 + flag)").option("--profile <name>", "\uB300\uC0C1 profile \uC774\uB984 (\uAE30\uBCF8: default)").option("--uak-id <id>", "\uAC1C\uC778 UAK ID (\uBE44\uB300\uD654\uD615)").option("--uak-secret <secret>", "\uAC1C\uC778 UAK Secret (\uBE44\uB300\uD654\uD615, \uB178\uCD9C \uBC29\uC9C0\uB85C env NHNCLOUD_UAK_SECRET \uAD8C\uC7A5)").option("--logncrash-appkey <key>", "logncrash appkey (\uBE44\uB300\uD654\uD615)").option("--logncrash-secret <secret>", "\uD3D0\uAE30 \uC608\uC815: Search v3\uC5D0\uC11C\uB294 \uC0AC\uC6A9\xB7\uC800\uC7A5\uD558\uC9C0 \uC54A\uC74C").option("--iaas-tenant-id <id>", "iaas tenantId / \uD504\uB85C\uC81D\uD2B8 ID (\uBE44\uB300\uD654\uD615)").option("--iaas-username <user>", "iaas IAM username (\uBE44\uB300\uD654\uD615)").option(
   "--iaas-password <pass>",
   "iaas API \uBE44\uBC00\uBC88\uD638 (\uBE44\uB300\uD654\uD615, \uB178\uCD9C \uBC29\uC9C0\uB85C env NHNCLOUD_IAAS_PASSWORD \uAD8C\uC7A5)"
 ).option("--iaas-region <region>", "iaas region (\uAE30\uBCF8: kr1)", "kr1").option("--ncr-appkey <key>", "ncr appkey (\uBE44\uB300\uD654\uD615)").option("--ncs-appkey <key>", "ncs appkey (\uBE44\uB300\uD654\uD615)").option("--no-verify", "\uC5F0\uACB0 \uD14C\uC2A4\uD2B8 \uC0DD\uB7B5").action(async (opts) => {
-  const hasFlag = opts.uakId || opts.uakSecret || opts.logncrashAppkey || opts.logncrashSecret || opts.iaasTenantId || opts.iaasUsername || opts.iaasPassword || opts.ncrAppkey || opts.ncsAppkey;
+  const hasFlag = opts.uakId !== void 0 || opts.uakSecret !== void 0 || opts.logncrashAppkey !== void 0 || opts.logncrashSecret !== void 0 || opts.iaasTenantId !== void 0 || opts.iaasUsername !== void 0 || opts.iaasPassword !== void 0 || opts.ncrAppkey !== void 0 || opts.ncsAppkey !== void 0;
   try {
     if (hasFlag) {
       await runNonInteractive(opts);
@@ -2400,6 +2421,21 @@ function parseNonNegativeIntegerOption(value, flag) {
   return parseIntegerOption(value, flag, { min: 0 });
 }
 
+// src/commands/logncrash/helpers.ts
+async function resolveLogncrashClient(profile) {
+  const profileName = await resolveProfileName(profile);
+  const credential = await getServiceCredential("logncrash", profileName);
+  if (typeof credential.appkey !== "string" || credential.appkey.length === 0) {
+    throw new NhnCloudCliError(
+      `profile "${profileName}"\uC758 logncrash \uC790\uACA9\uC99D\uBA85\uC5D0 appkey\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4. nhncloud configure\uB85C appkey\uB97C \uC124\uC815\uD558\uC138\uC694.`,
+      EXIT_CONFIG_ERROR
+    );
+  }
+  const uak = await getUserAccessKey(profileName);
+  const accessToken = await getAccessToken(profileName, uak.id, uak.secret);
+  return new LogncrashClient(credential.appkey, accessToken);
+}
+
 // src/commands/logncrash/search.ts
 function getString(value) {
   return typeof value === "string" ? value : String(value ?? "");
@@ -2410,7 +2446,7 @@ function formatLogRow(log) {
   const body = truncate(getString(log["logBody"] ?? log["body"] ?? log["message"] ?? ""), 60);
   return [logTime, logType, body];
 }
-var searchCommand = new import_commander4.Command("search").description("Log & Crash \uB85C\uADF8 \uAC80\uC0C9").option("--query <lucene>", "Lucene \uC9C8\uC758 \uBB38\uC790\uC5F4 (\uD544\uC218)").option("--from <time>", "\uAC80\uC0C9 \uC2DC\uC791: ISO8601 \uB610\uB294 \uC0C1\uB300\uC2DC\uAC04 (1h/30m/2d/now) (\uD544\uC218)").option("--to <time>", "\uAC80\uC0C9 \uB05D: ISO8601 \uB610\uB294 \uC0C1\uB300\uC2DC\uAC04 (\uD544\uC218)").option("--page <n>", "pageNumber (\uAE30\uBCF8 0)", "0").option("--size <n>", "pageSize (\uAE30\uBCF8 10, \uCD5C\uB300 100)", "10").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+var searchCommand = new import_commander4.Command("search").description("Log & Crash \uB85C\uADF8 \uAC80\uC0C9").option("--query <lucene>", "Lucene \uC9C8\uC758 \uBB38\uC790\uC5F4 (\uD544\uC218)").option("--from <time>", "\uAC80\uC0C9 \uC2DC\uC791: ISO8601 \uB610\uB294 \uC0C1\uB300\uC2DC\uAC04 (1h/30m/2d/now) (\uD544\uC218)").option("--to <time>", "\uAC80\uC0C9 \uB05D: ISO8601 \uB610\uB294 \uC0C1\uB300\uC2DC\uAC04 (\uD544\uC218)").option("--page <n>", "pageNumber (\uAE30\uBCF8 0)", "0").option("--size <n>", "pageSize (\uAE30\uBCF8 10, \uCD5C\uB300 100)", "10").option("--cursor <value>", "\uB2E4\uC74C \uD398\uC774\uC9C0 \uC870\uD68C\uC6A9 opaque cursor").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   if (!opts.query) {
     throw new NhnCloudCliError(`--query \uC635\uC158\uC740 \uD544\uC218\uC785\uB2C8\uB2E4. \uC608: --query 'logType:"NORMAL"'`, EXIT_PARAM_ERROR);
@@ -2423,35 +2459,28 @@ var searchCommand = new import_commander4.Command("search").description("Log & C
   }
   const page = parseNonNegativeIntegerOption(opts.page ?? "0", "--page");
   const size = parseIntegerOption(opts.size ?? "10", "--size", { min: 1, max: 100 });
-  const fromIso = resolveTime(opts.from);
-  const toIso = resolveTime(opts.to);
-  assertSearchRange(fromIso, toIso);
-  const profileName = await resolveProfileName(opts.profile);
-  const cred = await getServiceCredential("logncrash", profileName);
-  if (!cred.appkey) {
+  if (page !== 0) {
     throw new NhnCloudCliError(
-      `profile "${profileName}" \uC758 logncrash \uC790\uACA9\uC99D\uBA85\uC5D0 appkey \uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.
-credentials.json \uC5D0 "appkey": "<appkey>" \uB97C \uCD94\uAC00\uD558\uC138\uC694.`,
-      EXIT_CONFIG_ERROR
+      "Search v3\uC5D0\uC11C\uB294 --page 0\uB9CC \uC9C0\uC6D0\uD569\uB2C8\uB2E4. \uB2E4\uC74C \uD398\uC774\uC9C0\uB294 --cursor <nextCursor>\uB97C \uC0AC\uC6A9\uD558\uC138\uC694.",
+      EXIT_PARAM_ERROR
     );
   }
-  if (!cred.secret) {
-    throw new NhnCloudCliError(
-      `profile "${profileName}" \uC758 logncrash \uC790\uACA9\uC99D\uBA85\uC5D0 secret \uC774 \uC5C6\uC2B5\uB2C8\uB2E4.
-credentials.json \uC5D0 "secret": "<secretkey>" \uB97C \uCD94\uAC00\uD558\uC138\uC694.`,
-      EXIT_CONFIG_ERROR
-    );
+  if (opts.cursor !== void 0 && opts.cursor.trim().length === 0) {
+    throw new NhnCloudCliError("--cursor \uAC12\uC740 \uBE44\uC5B4 \uC788\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
   }
-  const client = new LogncrashClient(cred.appkey, cred.secret);
+  const fromIso = resolveTime(opts.from);
+  const toIso = resolveTime(opts.to);
+  assertSearchRange(fromIso, toIso);
+  const client = await resolveLogncrashClient(opts.profile);
   startSpinner("\uB85C\uADF8 \uAC80\uC0C9 \uC911...");
   let result;
   try {
-    result = await client.search({
+    result = await client.cursorSearch({
       query: opts.query,
       from: fromIso,
       to: toIso,
-      pageNumber: page,
-      pageSize: size
+      pageSize: size,
+      ...opts.cursor !== void 0 ? { cursor: opts.cursor } : {}
     });
   } catch (err) {
     stopSpinner(false);
@@ -2467,7 +2496,8 @@ credentials.json \uC5D0 "secret": "<secretkey>" \uB97C \uCD94\uAC00\uD558\uC138\
       totalItems: result.totalItems,
       pageNumber: result.pageNumber,
       pageSize: result.pageSize,
-      data: result.data
+      data: result.data,
+      ...result.nextCursor !== void 0 ? { nextCursor: result.nextCursor } : {}
     },
     ids
   });
@@ -2581,7 +2611,7 @@ function assertWritable(path3, force) {
     EXIT_PARAM_ERROR
   );
 }
-var exportCommand = new import_commander6.Command("export").description("Log & Crash \uB85C\uADF8\uB97C scroll \uB85C \uC804\uCCB4 \uCD94\uCD9C\uD574 \uD30C\uC77C\uB85C \uC800\uC7A5 (\uB300\uB7C9 \uCD94\uCD9C)").option("--query <lucene>", "Lucene \uC9C8\uC758 \uBB38\uC790\uC5F4 (\uD544\uC218)").option("--from <time>", "\uAC80\uC0C9 \uC2DC\uC791: ISO8601 \uB610\uB294 \uC0C1\uB300\uC2DC\uAC04 (1h/30m/2d/now) (\uD544\uC218)").option("--to <time>", "\uAC80\uC0C9 \uB05D: ISO8601 \uB610\uB294 \uC0C1\uB300\uC2DC\uAC04 (\uD544\uC218)").option("--output <file>", "\uCD9C\uB825 \uD30C\uC77C \uACBD\uB85C (\uD544\uC218)").option("--format <fmt>", "\uCD9C\uB825 \uD615\uC2DD: jsonl(\uAE30\uBCF8, \uD55C \uC904\uB2F9 \uD55C \uB85C\uADF8) \uB610\uB294 json(\uBC30\uC5F4)", "jsonl").option("--size <n>", "scroll \uD398\uC774\uC9C0 \uD06C\uAE30 (docs \uBC94\uC704 10~100, \uAE30\uBCF8 100)", "100").option("--force", "\uCD9C\uB825 \uD30C\uC77C\uC774 \uC788\uC73C\uBA74 \uB36E\uC5B4\uC4F4\uB2E4").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+var exportCommand = new import_commander6.Command("export").description("Log & Crash \uB85C\uADF8\uB97C scroll \uB85C \uC804\uCCB4 \uCD94\uCD9C\uD574 \uD30C\uC77C\uB85C \uC800\uC7A5 (\uB300\uB7C9 \uCD94\uCD9C)").option("--query <lucene>", "Lucene \uC9C8\uC758 \uBB38\uC790\uC5F4 (\uD544\uC218)").option("--from <time>", "\uAC80\uC0C9 \uC2DC\uC791: ISO8601 \uB610\uB294 \uC0C1\uB300\uC2DC\uAC04 (1h/30m/2d/now) (\uD544\uC218)").option("--to <time>", "\uAC80\uC0C9 \uB05D: ISO8601 \uB610\uB294 \uC0C1\uB300\uC2DC\uAC04 (\uD544\uC218)").option("--output <file>", "\uCD9C\uB825 \uD30C\uC77C \uACBD\uB85C (\uD544\uC218)").option("--format <fmt>", "\uCD9C\uB825 \uD615\uC2DD: jsonl(\uAE30\uBCF8, \uD55C \uC904\uB2F9 \uD55C \uB85C\uADF8) \uB610\uB294 json(\uBC30\uC5F4)", "jsonl").option("--size <n>", "\uD3D0\uAE30 \uC608\uC815: Search v3\uC5D0\uC11C\uB294 \uBB34\uC2DC\uB428 (\uD638\uD658 \uAC80\uC99D \uBC94\uC704 10~100)").option("--force", "\uCD9C\uB825 \uD30C\uC77C\uC774 \uC788\uC73C\uBA74 \uB36E\uC5B4\uC4F4\uB2E4").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   if (!opts.query) {
     throw new NhnCloudCliError(`--query \uC635\uC158\uC740 \uD544\uC218\uC785\uB2C8\uB2E4. \uC608: --query 'logType:"NORMAL"'`, EXIT_PARAM_ERROR);
@@ -2599,35 +2629,23 @@ var exportCommand = new import_commander6.Command("export").description("Log & C
   if (format !== "jsonl" && format !== "json") {
     throw new NhnCloudCliError("--format \uC740 jsonl \uB610\uB294 json \uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
   }
-  const sizeRaw = opts.size ?? "100";
-  if (!/^[1-9]\d*$/.test(sizeRaw)) {
-    throw new NhnCloudCliError("--size \uB294 \uC591\uC758 \uC815\uC218\uC5EC\uC57C \uD569\uB2C8\uB2E4 (docs \uBC94\uC704 10~100).", EXIT_PARAM_ERROR);
-  }
-  const size = parseInt(sizeRaw, 10);
-  if (size < 10 || size > 100) {
-    throw new NhnCloudCliError("--size \uB294 10~100 \uC0AC\uC774\uC5EC\uC57C \uD569\uB2C8\uB2E4 (Log & Crash scroll pageSize \uD55C\uB3C4).", EXIT_PARAM_ERROR);
+  if (opts.size !== void 0) {
+    if (!/^[1-9]\d*$/.test(opts.size)) {
+      throw new NhnCloudCliError("--size \uB294 \uC591\uC758 \uC815\uC218\uC5EC\uC57C \uD569\uB2C8\uB2E4 (\uD638\uD658 \uBC94\uC704 10~100).", EXIT_PARAM_ERROR);
+    }
+    const size = parseInt(opts.size, 10);
+    if (size < 10 || size > 100) {
+      throw new NhnCloudCliError("--size \uB294 10~100 \uC0AC\uC774\uC5EC\uC57C \uD569\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+    }
+    process.stderr.write(
+      "\uACBD\uACE0: logncrash export --size\uB294 \uD3D0\uAE30 \uC608\uC815\uC774\uBA70 Search v3 \uC694\uCCAD\uC5D0\uC11C\uB294 \uBB34\uC2DC\uB429\uB2C8\uB2E4.\n"
+    );
   }
   const fromIso = resolveTime(opts.from);
   const toIso = resolveTime(opts.to);
   assertSearchRange(fromIso, toIso);
   assertWritable(opts.output, opts.force ?? false);
-  const profileName = await resolveProfileName(opts.profile);
-  const cred = await getServiceCredential("logncrash", profileName);
-  if (!cred.appkey) {
-    throw new NhnCloudCliError(
-      `profile "${profileName}" \uC758 logncrash \uC790\uACA9\uC99D\uBA85\uC5D0 appkey \uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.
-credentials.json \uC5D0 "appkey": "<appkey>" \uB97C \uCD94\uAC00\uD558\uC138\uC694.`,
-      EXIT_CONFIG_ERROR
-    );
-  }
-  if (!cred.secret) {
-    throw new NhnCloudCliError(
-      `profile "${profileName}" \uC758 logncrash \uC790\uACA9\uC99D\uBA85\uC5D0 secret \uC774 \uC5C6\uC2B5\uB2C8\uB2E4.
-credentials.json \uC5D0 "secret": "<secret>" \uB97C \uCD94\uAC00\uD558\uC138\uC694.`,
-      EXIT_CONFIG_ERROR
-    );
-  }
-  const client = new LogncrashClient(cred.appkey, cred.secret);
+  const client = await resolveLogncrashClient(opts.profile);
   const tmp = opts.output + "." + (0, import_node_crypto2.randomBytes)(4).toString("hex") + ".tmp";
   const stream = (0, import_node_fs2.createWriteStream)(tmp, { encoding: "utf-8" });
   const spinner = startSpinner("\uB85C\uADF8 \uCD94\uCD9C \uC911...");
@@ -2645,12 +2663,16 @@ credentials.json \uC5D0 "secret": "<secret>" \uB97C \uCD94\uAC00\uD558\uC138\uC6
   };
   try {
     if (format === "json") stream.write("[");
-    let res = await client.scrollStart({ query: opts.query, from: fromIso, to: toIso, pageSize: size });
+    let res = await client.scrollStart({
+      query: opts.query,
+      from: fromIso,
+      to: toIso
+    });
     total = res.totalItems;
     writePage(res.data);
     spinner.text = `\uB85C\uADF8 \uCD94\uCD9C \uC911... ${count}/${total}`;
     while (res.data.length > 0 && res.scrollKey && count < Math.min(total, MAX_TOTAL)) {
-      res = await scrollNextOrExpire(client, res.scrollKey);
+      res = await scrollNextWithHint(client, res.scrollKey);
       writePage(res.data);
       spinner.text = `\uB85C\uADF8 \uCD94\uCD9C \uC911... ${count}/${total}`;
     }
@@ -2684,13 +2706,13 @@ credentials.json \uC5D0 "secret": "<secret>" \uB97C \uCD94\uAC00\uD558\uC138\uC6
   process.stderr.write(`${opts.output} \uC5D0 ${count}\uAC74 \uC800\uC7A5
 `);
 });
-async function scrollNextOrExpire(client, scrollKey) {
+async function scrollNextWithHint(client, scrollKey) {
   try {
     return await client.scrollNext(scrollKey);
   } catch (err) {
     if (err instanceof NhnCloudCliError && err.exitCode === EXIT_API_ERROR) {
       throw new NhnCloudCliError(
-        `scroll \uB2E4\uC74C \uD398\uC774\uC9C0 \uC694\uCCAD\uC774 \uC2E4\uD328\uD588\uC2B5\uB2C8\uB2E4 (\uC6D0\uC778: ${err.message}). scrollKey \uB9CC\uB8CC(\uC720\uD6A8 1\uBD84)\uC77C \uC218 \uC788\uC73C\uB2C8, \uB9CC\uB8CC\uB77C\uBA74 \uAC80\uC0C9 \uBC94\uC704\uB97C \uC881\uD788\uAC70\uB098 --size \uB97C \uD0A4\uC6CC \uD398\uC774\uC9C0 \uC218\uB97C \uC904\uC778 \uB4A4 \uB2E4\uC2DC \uC2DC\uB3C4\uD558\uC138\uC694.`,
+        `scroll \uB2E4\uC74C \uD398\uC774\uC9C0 \uC694\uCCAD\uC774 \uC2E4\uD328\uD588\uC2B5\uB2C8\uB2E4 (\uC6D0\uC778: ${err.message}). \uAC80\uC0C9 \uBC94\uC704\uB97C \uC881\uD600 \uB2E4\uC2DC \uC2E4\uD589\uD558\uC138\uC694.`,
         EXIT_API_ERROR
       );
     }
@@ -6794,6 +6816,102 @@ var import_chalk16 = __toESM(require("chalk"));
 // src/commands/ncs/helpers.ts
 var import_node_fs7 = require("fs");
 var MAX_JSON_PAYLOAD_BYTES = 1e6;
+var NCS_RFC3339_PATTERN = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.(\d+))?(Z|([+-])(\d{2}):(\d{2}))$/;
+var NCS_RELATIVE_TIME_PATTERN = /^(\d+)(m|h|d)$/;
+var NCS_TIME_EXAMPLES = "\uC2DC\uAC04\uB300 \uD3EC\uD568 RFC3339(\uC608: 2026-05-01T00:00:00+09:00) \uB610\uB294 \uC0C1\uB300\uC2DC\uAC04(\uC608: 30m, 1h, 2d, now)";
+function ncsTimeError(option, value, detail) {
+  const suffix = detail ? ` ${detail}` : "";
+  return new NhnCloudCliError(
+    `${option} \uC2DC\uAC04 \uD615\uC2DD \uC624\uB958: ${JSON.stringify(value)}. ${NCS_TIME_EXAMPLES}\uC744 \uC0AC\uC6A9\uD558\uC138\uC694.${suffix}`,
+    EXIT_PARAM_ERROR
+  );
+}
+function isLeapYear(year) {
+  return year % 4 === 0 && (year % 100 !== 0 || year % 400 === 0);
+}
+function daysInMonth(year, month) {
+  if (month === 2) return isLeapYear(year) ? 29 : 28;
+  return [4, 6, 9, 11].includes(month) ? 30 : 31;
+}
+function formatNcsUtcTime(timestamp, option, input) {
+  const date = new Date(timestamp);
+  if (!Number.isFinite(timestamp) || Number.isNaN(date.getTime())) {
+    throw ncsTimeError(option, input, "\uC720\uD6A8\uD55C Date \uBC94\uC704\uB97C \uBC97\uC5B4\uB0AC\uC2B5\uB2C8\uB2E4.");
+  }
+  const iso = date.toISOString();
+  const secondPrecision = iso.replace(/\.\d{3}Z$/, "Z");
+  if (!/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}Z$/.test(secondPrecision)) {
+    throw ncsTimeError(option, input, "UTC \uC5F0\uB3C4\uAC00 \uC9C0\uC6D0 \uBC94\uC704\uB97C \uBC97\uC5B4\uB0AC\uC2B5\uB2C8\uB2E4.");
+  }
+  return secondPrecision;
+}
+function parseNcsAbsoluteTime(input, option) {
+  const match = NCS_RFC3339_PATTERN.exec(input);
+  if (!match) throw ncsTimeError(option, input);
+  const year = Number(match[1]);
+  const month = Number(match[2]);
+  const day = Number(match[3]);
+  const hour = Number(match[4]);
+  const minute = Number(match[5]);
+  const second = Number(match[6]);
+  const offsetHour = match[10] === void 0 ? 0 : Number(match[10]);
+  const offsetMinute = match[11] === void 0 ? 0 : Number(match[11]);
+  if (month < 1 || month > 12 || day < 1 || day > daysInMonth(year, month) || hour > 23 || minute > 59 || second > 59 || offsetHour > 23 || offsetMinute > 59) {
+    throw ncsTimeError(option, input, "\uB0A0\uC9DC\xB7\uC2DC\uAC01\xB7\uC2DC\uAC04\uB300 \uC624\uD504\uC14B\uC744 \uD655\uC778\uD558\uC138\uC694.");
+  }
+  const parsedTimestamp = Date.parse(input);
+  const timestamp = Math.floor(parsedTimestamp / 1e3) * 1e3;
+  return {
+    value: formatNcsUtcTime(timestamp, option, input),
+    timestamp
+  };
+}
+function parseNcsTime(input, option, baseTimestamp) {
+  const trimmed = input.trim();
+  if (trimmed === "now") {
+    return {
+      value: formatNcsUtcTime(baseTimestamp, option, input),
+      timestamp: Math.floor(baseTimestamp / 1e3) * 1e3
+    };
+  }
+  const relativeMatch = NCS_RELATIVE_TIME_PATTERN.exec(trimmed);
+  if (relativeMatch) {
+    const amount = Number(relativeMatch[1]);
+    const unitMs = relativeMatch[2] === "m" ? 6e4 : relativeMatch[2] === "h" ? 36e5 : 864e5;
+    const deltaMs = amount * unitMs;
+    if (!Number.isSafeInteger(amount) || !Number.isSafeInteger(deltaMs)) {
+      throw ncsTimeError(option, input, "\uC0C1\uB300\uC2DC\uAC04\uC774 \uC548\uC804\uD55C \uC815\uC218 \uBC94\uC704\uB97C \uBC97\uC5B4\uB0AC\uC2B5\uB2C8\uB2E4.");
+    }
+    const timestamp = baseTimestamp - deltaMs;
+    return {
+      value: formatNcsUtcTime(timestamp, option, input),
+      timestamp: Math.floor(timestamp / 1e3) * 1e3
+    };
+  }
+  return parseNcsAbsoluteTime(trimmed, option);
+}
+function normalizeNcsTimeRange(from, to, now) {
+  if (from === void 0 && to === void 0) return {};
+  const baseTimestamp = (now ?? /* @__PURE__ */ new Date()).getTime();
+  if (!Number.isFinite(baseTimestamp)) {
+    throw new NhnCloudCliError(
+      `NCS \uC2DC\uAC04 \uC815\uADDC\uD654 \uAE30\uC900 \uC2DC\uAC01\uC774 \uC720\uD6A8\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. ${NCS_TIME_EXAMPLES}\uC744 \uC0AC\uC6A9\uD558\uC138\uC694.`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  const normalizedFrom = from === void 0 ? void 0 : parseNcsTime(from, "--from", baseTimestamp);
+  const normalizedTo = to === void 0 ? void 0 : parseNcsTime(to, "--to", baseTimestamp);
+  if (normalizedFrom !== void 0 && normalizedTo !== void 0 && normalizedFrom.timestamp > normalizedTo.timestamp) {
+    throw new NhnCloudCliError(
+      `--from \uC2DC\uAC04\uC774 --to \uC2DC\uAC04\uBCF4\uB2E4 \uB2A6\uC2B5\uB2C8\uB2E4. ${NCS_TIME_EXAMPLES}\uC744 \uC0AC\uC6A9\uD558\uC138\uC694.`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return {
+    ...normalizedFrom === void 0 ? {} : { from: normalizedFrom.value },
+    ...normalizedTo === void 0 ? {} : { to: normalizedTo.value }
+  };
+}
 async function resolveNcsAppKey(profileName, appKeyOpt) {
   if (appKeyOpt) return appKeyOpt;
   let cred;
@@ -7162,7 +7280,13 @@ var getCommand7 = new import_commander46.Command("get").description("NCS workloa
     ids: [workload.id]
   });
 });
-var logsCommand = new import_commander46.Command("logs").description("NCS workload task \uC758 \uCEE8\uD14C\uC774\uB108 \uB85C\uADF8\uB97C \uC870\uD68C\uD55C\uB2E4").argument("<id>", "workload ID").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").option("--task <taskId>", "task ID (\uD544\uC218)").option("--container <name>", "\uCEE8\uD14C\uC774\uB108 \uC774\uB984 (\uD544\uC218)").option("--from <time>", "\uB85C\uADF8 \uC2DC\uC791 \uC2DC\uAC04 (\uAE30\uBCF8: \uD604\uC7AC\uB85C\uBD80\uD130 5\uBD84 \uC804)").option("--to <time>", "\uB85C\uADF8 \uC885\uB8CC \uC2DC\uAC04 (\uAE30\uBCF8: \uD604\uC7AC \uC2DC\uAC04)").option("--page <page>", "\uC870\uD68C\uD560 page \uBC88\uD638").option("--size <size>", "page \uB2F9 \uD56D\uBAA9 \uC218 (\uAE30\uBCF8: API \uAE30\uBCF8\uAC12 100)").action(async (id, _opts, cmd) => {
+var logsCommand = new import_commander46.Command("logs").description("NCS workload task \uC758 \uCEE8\uD14C\uC774\uB108 \uB85C\uADF8\uB97C \uC870\uD68C\uD55C\uB2E4").argument("<id>", "workload ID").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").option("--task <taskId>", "task ID (\uD544\uC218)").option("--container <name>", "\uCEE8\uD14C\uC774\uB108 \uC774\uB984 (\uD544\uC218)").option(
+  "--from <time>",
+  "\uB85C\uADF8 \uC2DC\uC791: \uC2DC\uAC04\uB300 \uD3EC\uD568 RFC3339, now \uB610\uB294 0 \uC774\uC0C1\uC758 \uC815\uC218\uC640 m/h/d \uB2E8\uC704 (\uC608: 30m, 1h, 2d). UTC Z\uB85C \uC815\uADDC\uD654\uD558\uBA70 \uC0DD\uB7B5 \uC2DC API \uAE30\uBCF8 \uBC94\uC704"
+).option(
+  "--to <time>",
+  "\uB85C\uADF8 \uC885\uB8CC: \uC2DC\uAC04\uB300 \uD3EC\uD568 RFC3339, now \uB610\uB294 0 \uC774\uC0C1\uC758 \uC815\uC218\uC640 m/h/d \uB2E8\uC704 (\uC608: 30m, 1h, 2d). UTC Z\uB85C \uC815\uADDC\uD654\uD558\uBA70 \uC0DD\uB7B5 \uC2DC API \uAE30\uBCF8 \uBC94\uC704"
+).option("--page <page>", "\uC870\uD68C\uD560 page \uBC88\uD638").option("--size <size>", "page \uB2F9 \uD56D\uBAA9 \uC218 (\uAE30\uBCF8: API \uAE30\uBCF8\uAC12 100)").action(async (id, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   requireNonEmpty(id, "id");
   if (!opts.task || !opts.task.trim()) {
@@ -7177,14 +7301,14 @@ var logsCommand = new import_commander46.Command("logs").description("NCS worklo
       EXIT_PARAM_ERROR
     );
   }
+  const timeRange = normalizeNcsTimeRange(opts.from, opts.to);
   const { client } = await resolveNcsClient(opts);
   startSpinner(`NCS workload "${id}" task "${opts.task}" \uB85C\uADF8 \uC870\uD68C \uC911...`);
   let logs;
   try {
     const result = await client.getWorkloadLogs(id, opts.task, {
       container: opts.container,
-      from: opts.from,
-      to: opts.to,
+      ...timeRange,
       page: parsePositiveIntegerOption(opts.page, "--page"),
       size: parsePositiveIntegerOption(opts.size, "--size")
     });
@@ -7201,7 +7325,13 @@ var logsCommand = new import_commander46.Command("logs").description("NCS worklo
     ids: []
   });
 });
-var eventsCommand2 = new import_commander46.Command("events").description("NCS workload task \uC758 \uC774\uBCA4\uD2B8\uB97C \uC870\uD68C\uD55C\uB2E4").argument("<id>", "workload ID").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").option("--task <taskId>", "task ID (\uD544\uC218)").option("--type <type>", "\uC774\uBCA4\uD2B8 \uD0C0\uC785 (Normal | Warning)").option("--q <query>", "\uC774\uBCA4\uD2B8 \uB0B4\uC6A9 \uD544\uD130\uB9C1").option("--from <time>", "\uC774\uBCA4\uD2B8 \uB9C8\uC9C0\uB9C9 \uBC1C\uC0DD \uC2DC\uC791 \uC2DC\uAC04 (\uAE30\uBCF8: \uD604\uC7AC\uB85C\uBD80\uD130 1\uC2DC\uAC04 \uC804)").option("--to <time>", "\uC774\uBCA4\uD2B8 \uB9C8\uC9C0\uB9C9 \uBC1C\uC0DD \uC885\uB8CC \uC2DC\uAC04 (\uAE30\uBCF8: \uD604\uC7AC \uC2DC\uAC04)").option("--page <page>", "\uC870\uD68C\uD560 page \uBC88\uD638").option("--size <size>", "page \uB2F9 \uD56D\uBAA9 \uC218 (\uAE30\uBCF8: API \uAE30\uBCF8\uAC12 10)").action(async (id, _opts, cmd) => {
+var eventsCommand2 = new import_commander46.Command("events").description("NCS workload task \uC758 \uC774\uBCA4\uD2B8\uB97C \uC870\uD68C\uD55C\uB2E4").argument("<id>", "workload ID").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").option("--task <taskId>", "task ID (\uD544\uC218)").option("--type <type>", "\uC774\uBCA4\uD2B8 \uD0C0\uC785 (Normal | Warning)").option("--q <query>", "\uC774\uBCA4\uD2B8 \uB0B4\uC6A9 \uD544\uD130\uB9C1").option(
+  "--from <time>",
+  "\uC774\uBCA4\uD2B8 \uC2DC\uC791: \uC2DC\uAC04\uB300 \uD3EC\uD568 RFC3339, now \uB610\uB294 0 \uC774\uC0C1\uC758 \uC815\uC218\uC640 m/h/d \uB2E8\uC704 (\uC608: 30m, 1h, 2d). UTC Z\uB85C \uC815\uADDC\uD654\uD558\uBA70 \uC0DD\uB7B5 \uC2DC API \uAE30\uBCF8 \uBC94\uC704"
+).option(
+  "--to <time>",
+  "\uC774\uBCA4\uD2B8 \uC885\uB8CC: \uC2DC\uAC04\uB300 \uD3EC\uD568 RFC3339, now \uB610\uB294 0 \uC774\uC0C1\uC758 \uC815\uC218\uC640 m/h/d \uB2E8\uC704 (\uC608: 30m, 1h, 2d). UTC Z\uB85C \uC815\uADDC\uD654\uD558\uBA70 \uC0DD\uB7B5 \uC2DC API \uAE30\uBCF8 \uBC94\uC704"
+).option("--page <page>", "\uC870\uD68C\uD560 page \uBC88\uD638").option("--size <size>", "page \uB2F9 \uD56D\uBAA9 \uC218 (\uAE30\uBCF8: API \uAE30\uBCF8\uAC12 10)").action(async (id, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   requireNonEmpty(id, "id");
   if (!opts.task || !opts.task.trim()) {
@@ -7210,6 +7340,7 @@ var eventsCommand2 = new import_commander46.Command("events").description("NCS w
       EXIT_PARAM_ERROR
     );
   }
+  const timeRange = normalizeNcsTimeRange(opts.from, opts.to);
   const { client } = await resolveNcsClient(opts);
   startSpinner(`NCS workload "${id}" task "${opts.task}" \uC774\uBCA4\uD2B8 \uC870\uD68C \uC911...`);
   let totalCount;
@@ -7218,8 +7349,7 @@ var eventsCommand2 = new import_commander46.Command("events").description("NCS w
     const result = await client.getWorkloadEvents(id, opts.task, {
       type: opts.type,
       q: opts.q,
-      from: opts.from,
-      to: opts.to,
+      ...timeRange,
       page: parsePositiveIntegerOption(opts.page, "--page"),
       size: parsePositiveIntegerOption(opts.size, "--size")
     });
@@ -7551,6 +7681,920 @@ var resultCommand = new import_commander47.Command("result").description("NCS wo
 });
 var malwareCommand = new import_commander47.Command("malware").description("NCS \uC545\uC131\uCF54\uB4DC \uAC80\uC0AC \uAD00\uB9AC").addCommand(configCommand).addCommand(resultCommand);
 
+// src/commands/loadbalancer/list.ts
+var import_commander48 = require("commander");
+
+// src/commands/loadbalancer/helpers.ts
+var import_node_net = require("net");
+
+// src/services/loadbalancer/client.ts
+var import_ky13 = __toESM(require("ky"));
+
+// src/services/loadbalancer/types.ts
+function isRecord(value) {
+  return typeof value === "object" && value !== null;
+}
+function isNonEmptyString(value) {
+  return typeof value === "string" && value.length > 0;
+}
+function isIpAclAction(value) {
+  return value === "ALLOW" || value === "DENY";
+}
+function isLoadBalancerIpAclGroup(value) {
+  return isRecord(value) && isNonEmptyString(value["ipacl_group_id"]);
+}
+function isIpAclGroupLoadBalancer(value) {
+  return isRecord(value) && isNonEmptyString(value["loadbalancer_id"]);
+}
+function isLoadBalancer(value) {
+  if (!isRecord(value)) return false;
+  return isNonEmptyString(value["id"]) && typeof value["name"] === "string" && typeof value["vip_address"] === "string" && typeof value["provisioning_status"] === "string" && typeof value["operating_status"] === "string" && (value["ipacl_group_action"] === null || isIpAclAction(value["ipacl_group_action"])) && Array.isArray(value["ipacl_groups"]) && value["ipacl_groups"].every(isLoadBalancerIpAclGroup);
+}
+function isIpAclGroup(value) {
+  if (!isRecord(value)) return false;
+  return isNonEmptyString(value["id"]) && typeof value["name"] === "string" && isIpAclAction(value["action"]) && typeof value["ipacl_target_count"] === "string" && Array.isArray(value["loadbalancers"]) && value["loadbalancers"].every(isIpAclGroupLoadBalancer);
+}
+function isIpAclTarget(value) {
+  if (!isRecord(value)) return false;
+  return isNonEmptyString(value["id"]) && typeof value["cidr_address"] === "string" && typeof value["description"] === "string" && isNonEmptyString(value["ipacl_group_id"]);
+}
+function isIpAclBinding(value) {
+  return isRecord(value) && isNonEmptyString(value["loadbalancer_id"]) && isNonEmptyString(value["ipacl_group_id"]);
+}
+
+// src/services/loadbalancer/client.ts
+var DEFAULT_TIMEOUT_MS9 = 3e4;
+function isRecord2(value) {
+  return typeof value === "object" && value !== null;
+}
+function requireNonEmptyId(id, label) {
+  const normalized = id.trim();
+  if (!normalized) {
+    throw new NhnCloudCliError(`${label}\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.`, EXIT_PARAM_ERROR);
+  }
+  return normalized;
+}
+function readArrayField(response, key, itemGuard, missingKeyMessage, invalidItemMessage) {
+  if (!isRecord2(response) || !Array.isArray(response[key])) {
+    throw new NhnCloudCliError(missingKeyMessage, EXIT_API_ERROR);
+  }
+  const items = response[key];
+  if (!items.every(itemGuard)) {
+    throw new NhnCloudCliError(invalidItemMessage, EXIT_API_ERROR);
+  }
+  return items;
+}
+function readObjectField(response, key, itemGuard, missingKeyMessage, invalidItemMessage) {
+  if (!isRecord2(response) || !(key in response)) {
+    throw new NhnCloudCliError(missingKeyMessage, EXIT_API_ERROR);
+  }
+  const item = response[key];
+  if (!itemGuard(item)) {
+    throw new NhnCloudCliError(invalidItemMessage, EXIT_API_ERROR);
+  }
+  return item;
+}
+var LoadBalancerClient = class {
+  tokenId;
+  endpoint;
+  constructor(tokenId, networkEndpoint) {
+    this.tokenId = tokenId;
+    this.endpoint = `${networkEndpoint}/lbaas`;
+  }
+  authHeaders() {
+    return { "X-Auth-Token": this.tokenId };
+  }
+  async listLoadBalancers(query) {
+    const raw = await this.getJson("/loadbalancers", query);
+    return readArrayField(
+      raw,
+      "loadbalancers",
+      isLoadBalancer,
+      "loadbalancer list \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 loadbalancers \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
+      "loadbalancer list \uC751\uB2F5\uC758 Load Balancer \uD56D\uBAA9 \uD615\uC2DD\uC774 \uC608\uC0C1\uACFC \uB2E4\uB985\uB2C8\uB2E4 \u2014 API \uC751\uB2F5 \uD544\uB4DC\uB97C \uD655\uC778\uD558\uC138\uC694."
+    );
+  }
+  async getLoadBalancer(id) {
+    const raw = await this.getJson(`/loadbalancers/${encodeURIComponent(id)}`);
+    return readObjectField(
+      raw,
+      "loadbalancer",
+      isLoadBalancer,
+      "loadbalancer get \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 loadbalancer \uAC1D\uCCB4\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.",
+      "loadbalancer get \uC751\uB2F5\uC758 Load Balancer \uD56D\uBAA9 \uD615\uC2DD\uC774 \uC608\uC0C1\uACFC \uB2E4\uB985\uB2C8\uB2E4 \u2014 API \uC751\uB2F5 \uD544\uB4DC\uB97C \uD655\uC778\uD558\uC138\uC694."
+    );
+  }
+  async listIpAclGroups(query) {
+    const raw = await this.getJson("/ipacl-groups", query);
+    return readArrayField(
+      raw,
+      "ipacl_groups",
+      isIpAclGroup,
+      "loadbalancer ipacl list \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 ipacl_groups \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
+      "loadbalancer ipacl list \uC751\uB2F5\uC758 IP ACL \uADF8\uB8F9 \uD56D\uBAA9 \uD615\uC2DD\uC774 \uC608\uC0C1\uACFC \uB2E4\uB985\uB2C8\uB2E4 \u2014 API \uC751\uB2F5 \uD544\uB4DC\uB97C \uD655\uC778\uD558\uC138\uC694."
+    );
+  }
+  async getIpAclGroup(id) {
+    const raw = await this.getJson(`/ipacl-groups/${encodeURIComponent(id)}`);
+    return readObjectField(
+      raw,
+      "ipacl_group",
+      isIpAclGroup,
+      "loadbalancer ipacl get \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 ipacl_group \uAC1D\uCCB4\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.",
+      "loadbalancer ipacl get \uC751\uB2F5\uC758 IP ACL \uADF8\uB8F9 \uD56D\uBAA9 \uD615\uC2DD\uC774 \uC608\uC0C1\uACFC \uB2E4\uB985\uB2C8\uB2E4 \u2014 API \uC751\uB2F5 \uD544\uB4DC\uB97C \uD655\uC778\uD558\uC138\uC694."
+    );
+  }
+  async listIpAclTargets(query) {
+    const raw = await this.getJson("/ipacl-targets", query);
+    return readArrayField(
+      raw,
+      "ipacl_targets",
+      isIpAclTarget,
+      "loadbalancer ipacl target list \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 ipacl_targets \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
+      "loadbalancer ipacl target list \uC751\uB2F5\uC758 IP ACL \uB300\uC0C1 \uD56D\uBAA9 \uD615\uC2DD\uC774 \uC608\uC0C1\uACFC \uB2E4\uB985\uB2C8\uB2E4 \u2014 API \uC751\uB2F5 \uD544\uB4DC\uB97C \uD655\uC778\uD558\uC138\uC694."
+    );
+  }
+  async createIpAclGroup(input) {
+    const request = { ipacl_group: input };
+    const raw = await this.postJson("/ipacl-groups", request);
+    return readObjectField(
+      raw,
+      "ipacl_group",
+      isIpAclGroup,
+      "loadbalancer ipacl create \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 ipacl_group \uAC1D\uCCB4\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.",
+      "loadbalancer ipacl create \uC751\uB2F5\uC758 IP ACL \uADF8\uB8F9 \uD56D\uBAA9 \uD615\uC2DD\uC774 \uC608\uC0C1\uACFC \uB2E4\uB985\uB2C8\uB2E4 \u2014 API \uC751\uB2F5 \uD544\uB4DC\uB97C \uD655\uC778\uD558\uC138\uC694."
+    );
+  }
+  async deleteIpAclGroup(id) {
+    const normalizedId = requireNonEmptyId(id, "IP ACL \uADF8\uB8F9 ID");
+    await this.deleteNoContent(`/ipacl-groups/${encodeURIComponent(normalizedId)}`);
+  }
+  async getIpAclTarget(id) {
+    const normalizedId = requireNonEmptyId(id, "IP ACL \uB300\uC0C1 ID");
+    const raw = await this.getJson(`/ipacl-targets/${encodeURIComponent(normalizedId)}`);
+    return readObjectField(
+      raw,
+      "ipacl_target",
+      isIpAclTarget,
+      "loadbalancer ipacl target get \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 ipacl_target \uAC1D\uCCB4\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.",
+      "loadbalancer ipacl target get \uC751\uB2F5\uC758 IP ACL \uB300\uC0C1 \uD56D\uBAA9 \uD615\uC2DD\uC774 \uC608\uC0C1\uACFC \uB2E4\uB985\uB2C8\uB2E4 \u2014 API \uC751\uB2F5 \uD544\uB4DC\uB97C \uD655\uC778\uD558\uC138\uC694."
+    );
+  }
+  async createIpAclTarget(input) {
+    const request = { ipacl_target: input };
+    const raw = await this.postJson("/ipacl-targets", request);
+    return readObjectField(
+      raw,
+      "ipacl_target",
+      isIpAclTarget,
+      "loadbalancer ipacl target add \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 ipacl_target \uAC1D\uCCB4\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.",
+      "loadbalancer ipacl target add \uC751\uB2F5\uC758 IP ACL \uB300\uC0C1 \uD56D\uBAA9 \uD615\uC2DD\uC774 \uC608\uC0C1\uACFC \uB2E4\uB985\uB2C8\uB2E4 \u2014 API \uC751\uB2F5 \uD544\uB4DC\uB97C \uD655\uC778\uD558\uC138\uC694."
+    );
+  }
+  async deleteIpAclTarget(id) {
+    const normalizedId = requireNonEmptyId(id, "IP ACL \uB300\uC0C1 ID");
+    await this.deleteNoContent(`/ipacl-targets/${encodeURIComponent(normalizedId)}`);
+  }
+  async bindIpAclGroups(loadBalancerId, ipAclGroupIds) {
+    const normalizedLoadBalancerId = requireNonEmptyId(
+      loadBalancerId,
+      "Load Balancer ID"
+    );
+    const request = {
+      ipacl_groups_binding: ipAclGroupIds.map((id) => ({
+        ipacl_group_id: requireNonEmptyId(id, "IP ACL \uADF8\uB8F9 ID")
+      }))
+    };
+    const raw = await this.putJson(
+      `/loadbalancers/${encodeURIComponent(normalizedLoadBalancerId)}/bind_ipacl_groups`,
+      request
+    );
+    if (!Array.isArray(raw)) {
+      throw new NhnCloudCliError(
+        "loadbalancer set-ipacl \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 binding \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
+        EXIT_API_ERROR
+      );
+    }
+    if (!raw.every(isIpAclBinding)) {
+      throw new NhnCloudCliError(
+        "loadbalancer set-ipacl \uC751\uB2F5\uC758 binding \uD56D\uBAA9 \uD615\uC2DD\uC774 \uC608\uC0C1\uACFC \uB2E4\uB985\uB2C8\uB2E4 \u2014 API \uC751\uB2F5 \uD544\uB4DC\uB97C \uD655\uC778\uD558\uC138\uC694.",
+        EXIT_API_ERROR
+      );
+    }
+    return raw;
+  }
+  async getJson(path3, searchParams) {
+    const url = `${this.endpoint}${path3}`;
+    try {
+      return await import_ky13.default.get(url, {
+        headers: this.authHeaders(),
+        searchParams,
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS9
+      }).json();
+    } catch (error) {
+      throw toNhnCloudCliError(error);
+    }
+  }
+  async postJson(path3, json) {
+    const url = `${this.endpoint}${path3}`;
+    try {
+      return await import_ky13.default.post(url, {
+        headers: this.authHeaders(),
+        json,
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS9
+      }).json();
+    } catch (error) {
+      throw toNhnCloudCliError(error);
+    }
+  }
+  async putJson(path3, json) {
+    const url = `${this.endpoint}${path3}`;
+    try {
+      return await import_ky13.default.put(url, {
+        headers: this.authHeaders(),
+        json,
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS9
+      }).json();
+    } catch (error) {
+      throw toNhnCloudCliError(error);
+    }
+  }
+  async deleteNoContent(path3) {
+    const url = `${this.endpoint}${path3}`;
+    try {
+      await import_ky13.default.delete(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS9
+      });
+    } catch (error) {
+      throw toNhnCloudCliError(error);
+    }
+  }
+};
+
+// src/commands/loadbalancer/helpers.ts
+function requireResourceInput(value, label) {
+  const normalized = value.trim();
+  if (!normalized) {
+    throw new NhnCloudCliError(`${label} \uC774\uB984 \uB610\uB294 UUID\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.`, EXIT_PARAM_ERROR);
+  }
+  return normalized;
+}
+function optionalTrimmed(value) {
+  if (value === void 0) return void 0;
+  return value.trim();
+}
+function requireYes(yes, operation) {
+  if (!yes) {
+    throw new NhnCloudCliError(
+      `${operation}\uC5D0\uB294 --yes \uD50C\uB798\uADF8\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return true;
+}
+function parseIpAclAction(value) {
+  if (value !== "ALLOW" && value !== "DENY") {
+    throw new NhnCloudCliError(
+      `--action\uC740 ALLOW \uB610\uB294 DENY\uC5EC\uC57C \uD569\uB2C8\uB2E4: ${JSON.stringify(value)}`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return value;
+}
+function collectOption(value, previous = []) {
+  return [...previous, value];
+}
+function requireResourceInputs(values, label) {
+  if (values.length === 0) {
+    throw new NhnCloudCliError(`${label}\uC744(\uB97C) \uD55C \uAC1C \uC774\uC0C1 \uC9C0\uC815\uD574\uC57C \uD569\uB2C8\uB2E4.`, EXIT_PARAM_ERROR);
+  }
+  return values.map((value) => requireResourceInput(value, label));
+}
+function parseIpOrCidr(value) {
+  const normalized = value.trim();
+  const parts = normalized.split("/");
+  const address = parts[0] ?? "";
+  const version = (0, import_node_net.isIP)(address);
+  if (version === 0 || parts.length > 2) {
+    throw new NhnCloudCliError(
+      `--cidr\uC740 IP \uC8FC\uC18C \uB610\uB294 CIDR\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4: ${JSON.stringify(value)}`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  if (parts.length === 2) {
+    const prefix = parts[1] ?? "";
+    const maxPrefix = version === 4 ? 32 : 128;
+    if (!/^\d+$/.test(prefix) || Number(prefix) > maxPrefix) {
+      throw new NhnCloudCliError(
+        `--cidr prefix\uAC00 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4: ${JSON.stringify(value)}`,
+        EXIT_PARAM_ERROR
+      );
+    }
+  }
+  return normalized;
+}
+function resolvedId(resource, label) {
+  const id = resource.id.trim();
+  if (!id) {
+    throw new NhnCloudCliError(`${label} \uC870\uD68C \uACB0\uACFC\uC758 UUID\uAC00 \uBE44\uC5B4 \uC788\uC2B5\uB2C8\uB2E4.`, EXIT_PARAM_ERROR);
+  }
+  return id;
+}
+function resolveFromList(resources, input, label) {
+  const exactId = resources.find((resource) => resource.id === input);
+  if (exactId) return resolvedId(exactId, label);
+  const nameMatches = resources.filter((resource) => resource.name === input);
+  if (nameMatches.length === 1) return resolvedId(nameMatches[0], label);
+  if (nameMatches.length === 0) {
+    throw new NhnCloudCliError(
+      `${label}\uC744(\uB97C) \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${JSON.stringify(input)}`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  const candidateIds = nameMatches.map((resource) => resolvedId(resource, label)).sort();
+  throw new NhnCloudCliError(
+    `${label} \uC774\uB984\uC774 \uC911\uBCF5\uB429\uB2C8\uB2E4: ${JSON.stringify(input)} (\uD6C4\uBCF4 UUID: ${candidateIds.join(", ")})`,
+    EXIT_PARAM_ERROR
+  );
+}
+async function resolveLoadBalancerId(client, value) {
+  const input = requireResourceInput(value, "Load Balancer");
+  const resources = await client.listLoadBalancers();
+  return resolveFromList(resources, input, "Load Balancer");
+}
+async function resolveIpAclGroupId(client, value) {
+  const input = requireResourceInput(value, "IP ACL \uADF8\uB8F9");
+  const resources = await client.listIpAclGroups();
+  return resolveFromList(resources, input, "IP ACL \uADF8\uB8F9");
+}
+async function resolveIpAclGroups(client, values) {
+  const inputs = requireResourceInputs(values, "IP ACL \uADF8\uB8F9");
+  const resources = await client.listIpAclGroups();
+  return inputs.map((input) => {
+    const id = resolveFromList(resources, input, "IP ACL \uADF8\uB8F9");
+    const group = resources.find((resource) => resource.id === id);
+    if (!group) {
+      throw new NhnCloudCliError(
+        `IP ACL \uADF8\uB8F9 \uC870\uD68C \uACB0\uACFC\uC5D0\uC11C UUID\uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${JSON.stringify(id)}`,
+        EXIT_PARAM_ERROR
+      );
+    }
+    return group;
+  });
+}
+async function resolveLoadBalancerClient(opts) {
+  const { profileName, tokenId, networkEndpoint } = await resolveIaasTokenContext(opts);
+  return {
+    client: new LoadBalancerClient(tokenId, networkEndpoint),
+    profileName
+  };
+}
+
+// src/commands/loadbalancer/list.ts
+var listCommand10 = new import_commander48.Command("list").description("Load Balancer \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4 (\uC804\uCCB4 \uD544\uB4DC\uB294 --json)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client } = await resolveLoadBalancerClient(opts);
+  startSpinner("Load Balancer \uBAA9\uB85D \uC870\uD68C \uC911...");
+  let loadBalancers;
+  let success = false;
+  try {
+    loadBalancers = await client.listLoadBalancers();
+    success = true;
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  } finally {
+    if (success) stopSpinner(true);
+  }
+  output(opts, {
+    headers: [
+      "id",
+      "name",
+      "vip_address",
+      "provisioning_status",
+      "operating_status",
+      "ipacl_group_action"
+    ],
+    rows: loadBalancers.map((loadBalancer) => [
+      loadBalancer.id,
+      loadBalancer.name,
+      loadBalancer.vip_address,
+      loadBalancer.provisioning_status,
+      loadBalancer.operating_status,
+      loadBalancer.ipacl_group_action ?? ""
+    ]),
+    raw: loadBalancers,
+    ids: loadBalancers.map((loadBalancer) => loadBalancer.id)
+  });
+});
+
+// src/commands/loadbalancer/get.ts
+var import_commander49 = require("commander");
+var getCommand8 = new import_commander49.Command("get").description("Load Balancer\uB97C \uC774\uB984 \uB610\uB294 UUID\uB85C \uC870\uD68C\uD55C\uB2E4").argument("<loadbalancer>", "Load Balancer \uC774\uB984 \uB610\uB294 UUID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (loadBalancerInput, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const input = requireResourceInput(loadBalancerInput, "Load Balancer");
+  const { client } = await resolveLoadBalancerClient(opts);
+  startSpinner("Load Balancer \uC870\uD68C \uC911...");
+  let loadBalancer;
+  let success = false;
+  try {
+    const id = await resolveLoadBalancerId(client, input);
+    loadBalancer = await client.getLoadBalancer(id);
+    success = true;
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  } finally {
+    if (success) stopSpinner(true);
+  }
+  output(opts, {
+    headers: ["field", "value"],
+    rows: [
+      ["id", loadBalancer.id],
+      ["name", loadBalancer.name],
+      ["vip_address", loadBalancer.vip_address],
+      ["provisioning_status", loadBalancer.provisioning_status],
+      ["operating_status", loadBalancer.operating_status],
+      ["ipacl_group_action", loadBalancer.ipacl_group_action ?? ""],
+      [
+        "ipacl_group_ids",
+        loadBalancer.ipacl_groups.map((group) => group.ipacl_group_id).join(", ")
+      ]
+    ],
+    raw: loadBalancer,
+    ids: [loadBalancer.id]
+  });
+});
+
+// src/commands/loadbalancer/ipacl.ts
+var import_commander51 = require("commander");
+
+// src/commands/loadbalancer/target.ts
+var import_commander50 = require("commander");
+
+// src/commands/loadbalancer/rebind.ts
+function sanitizeForTerminal(value) {
+  return value.replace(/[\x00-\x1F\x7F]/g, "?");
+}
+function shellQuote(value) {
+  return `'${value.replace(/'/g, `'"'"'`)}'`;
+}
+function contextArgv(context) {
+  return [
+    ...context.profile === void 0 ? [] : ["--profile", context.profile],
+    ...context.region === void 0 ? [] : ["--region", context.region]
+  ];
+}
+function retryArgv(snapshot, context = {}) {
+  if (snapshot.ipacl_group_ids.length === 0) {
+    return [
+      "nhncloud",
+      "loadbalancer",
+      "clear-ipacl",
+      snapshot.loadbalancer_id,
+      ...contextArgv(context),
+      "--yes",
+      "--json"
+    ];
+  }
+  return [
+    "nhncloud",
+    "loadbalancer",
+    "set-ipacl",
+    snapshot.loadbalancer_id,
+    ...snapshot.ipacl_group_ids.flatMap((id) => ["--group", id]),
+    ...contextArgv(context),
+    "--yes",
+    "--json"
+  ];
+}
+function retryCommand(argv) {
+  return argv.map(shellQuote).join(" ");
+}
+async function snapshotIpAclBindings(client, loadBalancerIds) {
+  const uniqueIds = [...new Set(loadBalancerIds)].sort();
+  const snapshots = [];
+  for (const loadBalancerId of uniqueIds) {
+    const loadBalancer = await client.getLoadBalancer(loadBalancerId);
+    snapshots.push({
+      loadbalancer_id: loadBalancer.id,
+      ipacl_group_ids: loadBalancer.ipacl_groups.map((group) => group.ipacl_group_id)
+    });
+  }
+  return snapshots;
+}
+async function rebindIpAclSnapshots(client, snapshots, retryContext = {}) {
+  const succeeded = [];
+  const failed = [];
+  for (const snapshot of snapshots) {
+    try {
+      await client.bindIpAclGroups(
+        snapshot.loadbalancer_id,
+        snapshot.ipacl_group_ids
+      );
+      succeeded.push(snapshot);
+    } catch (error) {
+      const argv = retryArgv(snapshot, retryContext);
+      failed.push({
+        ...snapshot,
+        error: error instanceof Error ? error.message : String(error),
+        retry_argv: argv,
+        retry_command: retryCommand(argv)
+      });
+    }
+  }
+  return { skipped: false, succeeded, failed };
+}
+function skippedRebindResult() {
+  return { skipped: true, succeeded: [], failed: [] };
+}
+
+// src/commands/loadbalancer/target.ts
+function outputTargetWriteResult(opts, result) {
+  output(opts, {
+    headers: ["field", "value"],
+    rows: [
+      ["operation", result.operation],
+      ["status", result.status],
+      ["target_id", result.target.id],
+      ["ipacl_group_id", result.target.ipacl_group_id],
+      ["rebind_skipped", String(result.rebind.skipped)],
+      ["rebind_succeeded", String(result.rebind.succeeded.length)],
+      ["rebind_failed", String(result.rebind.failed.length)]
+    ],
+    raw: result,
+    ids: [result.target.id]
+  });
+}
+function writeTargetWarnings(group, result) {
+  if (result.rebind.skipped) {
+    process.stderr.write(
+      "\uACBD\uACE0: --no-rebind\uB85C \uC7AC\uBC14\uC778\uB529\uC744 \uC0DD\uB7B5\uD588\uC2B5\uB2C8\uB2E4. \uB370\uC774\uD130 \uC601\uC5ED\uC5D0 \uADDC\uCE59\uC774 \uC989\uC2DC \uBC18\uC601\uB418\uC9C0 \uC54A\uC744 \uC218 \uC788\uC2B5\uB2C8\uB2E4.\n"
+    );
+  }
+  process.stderr.write(
+    "\uC548\uB0B4: IP ACL \uB300\uC0C1 \uBCC0\uACBD\uC774 \uB370\uC774\uD130 \uC601\uC5ED\uC5D0 \uBC18\uC601\uB418\uAE30\uAE4C\uC9C0 \uC57D 10~20\uCD08\uAC00 \uAC78\uB9B4 \uC218 \uC788\uC2B5\uB2C8\uB2E4.\n"
+  );
+  if (group.action === "ALLOW") {
+    process.stderr.write(
+      "\uACBD\uACE0: ALLOW \uADF8\uB8F9 \uB300\uC0C1\uC5D0\uB294 Load Balancer\uAC00 \uC18D\uD55C VPC\uC758 private CIDR\uC744 \uC0AC\uC6A9\uD574\uC57C \uD569\uB2C8\uB2E4.\n"
+    );
+  }
+  if (result.rebind.failed.length > 0) {
+    process.stderr.write(
+      `\uACBD\uACE0: ${result.rebind.failed.length}\uAC1C Load Balancer \uC7AC\uBC14\uC778\uB529\uC774 \uC2E4\uD328\uD588\uC2B5\uB2C8\uB2E4. \uC544\uB798 \uBA85\uB839\uC73C\uB85C \uBCF5\uAD6C\uD558\uC138\uC694.
+`
+    );
+    for (const failure of result.rebind.failed) {
+      process.stderr.write(`${sanitizeForTerminal(failure.retry_command)}
+`);
+      process.stderr.write(`  \uC624\uB958: ${sanitizeForTerminal(failure.error)}
+`);
+    }
+  }
+}
+function targetWriteResult(operation, target, rebind) {
+  return {
+    operation,
+    status: rebind.failed.length === 0 ? "succeeded" : "partial",
+    target: {
+      id: target.id,
+      ipacl_group_id: target.ipacl_group_id
+    },
+    rebind
+  };
+}
+var listCommand11 = new import_commander50.Command("list").description("IP ACL \uB300\uC0C1 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<group>", "IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (groupInput, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const input = requireResourceInput(groupInput, "IP ACL \uADF8\uB8F9");
+  const { client } = await resolveLoadBalancerClient(opts);
+  startSpinner("IP ACL \uB300\uC0C1 \uBAA9\uB85D \uC870\uD68C \uC911...");
+  let targets;
+  let success = false;
+  try {
+    const groupId = await resolveIpAclGroupId(client, input);
+    targets = await client.listIpAclTargets({ ipacl_group_id: groupId });
+    success = true;
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  } finally {
+    if (success) stopSpinner(true);
+  }
+  output(opts, {
+    headers: ["id", "cidr_address", "description", "ipacl_group_id"],
+    rows: targets.map((target) => [
+      target.id,
+      target.cidr_address,
+      target.description,
+      target.ipacl_group_id
+    ]),
+    raw: targets,
+    ids: targets.map((target) => target.id)
+  });
+});
+var addCommand = new import_commander50.Command("add").description("IP ACL \uB300\uC0C1\uC744 \uCD94\uAC00\uD558\uACE0 \uC5F0\uACB0\uB41C Load Balancer\uB97C \uC7AC\uBC14\uC778\uB529\uD55C\uB2E4").argument("<group>", "IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID").requiredOption("--cidr <ip-or-cidr>", "\uCD94\uAC00\uD560 IP \uC8FC\uC18C \uB610\uB294 CIDR").option("--description <text>", "IP ACL \uB300\uC0C1 \uC124\uBA85").option("--no-rebind", "\uB300\uC0C1 \uCD94\uAC00 \uD6C4 Load Balancer \uC7AC\uBC14\uC778\uB529 \uC0DD\uB7B5").option("--yes", "\uB300\uC0C1 \uCD94\uAC00 \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (groupInput, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  requireYes(opts.yes, "IP ACL \uB300\uC0C1 \uCD94\uAC00");
+  const parsedGroup = requireResourceInput(groupInput, "IP ACL \uADF8\uB8F9");
+  const parsedCidr = parseIpOrCidr(opts.cidr ?? "");
+  const parsedDescription = optionalTrimmed(opts.description);
+  const { client } = await resolveLoadBalancerClient(opts);
+  startSpinner("IP ACL \uB300\uC0C1 \uCD94\uAC00\uC640 Load Balancer \uC7AC\uBC14\uC778\uB529 \uC911...");
+  let group;
+  let target;
+  let rebind;
+  try {
+    const groupId = await resolveIpAclGroupId(client, parsedGroup);
+    group = await client.getIpAclGroup(groupId);
+    const snapshots = opts.rebind === false ? [] : await snapshotIpAclBindings(
+      client,
+      group.loadbalancers.map((item) => item.loadbalancer_id)
+    );
+    target = await client.createIpAclTarget({
+      ipacl_group_id: group.id,
+      cidr_address: parsedCidr,
+      ...parsedDescription === void 0 ? {} : { description: parsedDescription }
+    });
+    rebind = opts.rebind === false ? skippedRebindResult() : await rebindIpAclSnapshots(client, snapshots, {
+      profile: opts.profile,
+      region: opts.region
+    });
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  }
+  stopSpinner(true);
+  const result = targetWriteResult("ipacl-target-add", target, rebind);
+  outputTargetWriteResult(opts, result);
+  writeTargetWarnings(group, result);
+  if (result.status === "partial") process.exitCode = EXIT_API_ERROR;
+});
+var removeCommand = new import_commander50.Command("remove").description("IP ACL \uB300\uC0C1\uC744 \uC0AD\uC81C\uD558\uACE0 \uC5F0\uACB0\uB41C Load Balancer\uB97C \uC7AC\uBC14\uC778\uB529\uD55C\uB2E4").argument("<target-id>", "\uC0AD\uC81C\uD560 IP ACL \uB300\uC0C1 UUID").option("--no-rebind", "\uB300\uC0C1 \uC0AD\uC81C \uD6C4 Load Balancer \uC7AC\uBC14\uC778\uB529 \uC0DD\uB7B5").option("--yes", "\uB300\uC0C1 \uC0AD\uC81C \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (targetInput, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  requireYes(opts.yes, "IP ACL \uB300\uC0C1 \uC0AD\uC81C");
+  const parsedTargetId = requireResourceInput(targetInput, "IP ACL \uB300\uC0C1");
+  const { client } = await resolveLoadBalancerClient(opts);
+  startSpinner("IP ACL \uB300\uC0C1 \uC0AD\uC81C\uC640 Load Balancer \uC7AC\uBC14\uC778\uB529 \uC911...");
+  let group;
+  let target;
+  let rebind;
+  try {
+    target = await client.getIpAclTarget(parsedTargetId);
+    group = await client.getIpAclGroup(target.ipacl_group_id);
+    const snapshots = opts.rebind === false ? [] : await snapshotIpAclBindings(
+      client,
+      group.loadbalancers.map((item) => item.loadbalancer_id)
+    );
+    await client.deleteIpAclTarget(target.id);
+    rebind = opts.rebind === false ? skippedRebindResult() : await rebindIpAclSnapshots(client, snapshots, {
+      profile: opts.profile,
+      region: opts.region
+    });
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  }
+  stopSpinner(true);
+  const result = targetWriteResult("ipacl-target-remove", target, rebind);
+  outputTargetWriteResult(opts, result);
+  writeTargetWarnings(group, result);
+  if (result.status === "partial") process.exitCode = EXIT_API_ERROR;
+});
+var targetCommand = new import_commander50.Command("target").description("IP ACL \uB300\uC0C1 \uC870\uD68C\xB7\uAD00\uB9AC");
+targetCommand.addCommand(listCommand11);
+targetCommand.addCommand(addCommand);
+targetCommand.addCommand(removeCommand);
+
+// src/commands/loadbalancer/ipacl.ts
+var listCommand12 = new import_commander51.Command("list").description("IP ACL \uADF8\uB8F9 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4 (\uC804\uCCB4 \uD544\uB4DC\uB294 --json)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client } = await resolveLoadBalancerClient(opts);
+  startSpinner("IP ACL \uADF8\uB8F9 \uBAA9\uB85D \uC870\uD68C \uC911...");
+  let groups;
+  let success = false;
+  try {
+    groups = await client.listIpAclGroups();
+    success = true;
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  } finally {
+    if (success) stopSpinner(true);
+  }
+  output(opts, {
+    headers: ["id", "name", "action", "ipacl_target_count", "loadbalancer_count"],
+    rows: groups.map((group) => [
+      group.id,
+      group.name,
+      group.action,
+      group.ipacl_target_count,
+      String(group.loadbalancers.length)
+    ]),
+    raw: groups,
+    ids: groups.map((group) => group.id)
+  });
+});
+var getCommand9 = new import_commander51.Command("get").description("IP ACL \uADF8\uB8F9\uC744 \uC774\uB984 \uB610\uB294 UUID\uB85C \uC870\uD68C\uD55C\uB2E4").argument("<group>", "IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (groupInput, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const input = requireResourceInput(groupInput, "IP ACL \uADF8\uB8F9");
+  const { client } = await resolveLoadBalancerClient(opts);
+  startSpinner("IP ACL \uADF8\uB8F9 \uC870\uD68C \uC911...");
+  let group;
+  let success = false;
+  try {
+    const id = await resolveIpAclGroupId(client, input);
+    group = await client.getIpAclGroup(id);
+    success = true;
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  } finally {
+    if (success) stopSpinner(true);
+  }
+  output(opts, {
+    headers: ["field", "value"],
+    rows: [
+      ["id", group.id],
+      ["name", group.name],
+      ["action", group.action],
+      ["ipacl_target_count", group.ipacl_target_count],
+      [
+        "loadbalancer_ids",
+        group.loadbalancers.map((loadBalancer) => loadBalancer.loadbalancer_id).join(", ")
+      ]
+    ],
+    raw: group,
+    ids: [group.id]
+  });
+});
+var createCommand8 = new import_commander51.Command("create").description("IP ACL \uADF8\uB8F9\uC744 \uC0DD\uC131\uD55C\uB2E4").requiredOption("--name <name>", "IP ACL \uADF8\uB8F9 \uC774\uB984").requiredOption("--action <ALLOW|DENY>", "IP \uC811\uADFC \uC81C\uC5B4 \uB3D9\uC791").option("--description <text>", "IP ACL \uADF8\uB8F9 \uC124\uBA85").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const parsedName = requireResourceInput(opts.name ?? "", "IP ACL \uADF8\uB8F9");
+  const parsedAction = parseIpAclAction(opts.action ?? "");
+  const parsedDescription = optionalTrimmed(opts.description);
+  const { client } = await resolveLoadBalancerClient(opts);
+  startSpinner("IP ACL \uADF8\uB8F9 \uC0DD\uC131 \uC911...");
+  let group;
+  try {
+    group = await client.createIpAclGroup({
+      name: parsedName,
+      action: parsedAction,
+      ...parsedDescription === void 0 ? {} : { description: parsedDescription }
+    });
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  }
+  stopSpinner(true);
+  const result = {
+    operation: "ipacl-group-create",
+    status: "succeeded",
+    ipacl_group_id: group.id
+  };
+  output(opts, {
+    headers: ["field", "value"],
+    rows: Object.entries(result).map(([key, value]) => [key, value]),
+    raw: result,
+    ids: [group.id]
+  });
+});
+var deleteCommand7 = new import_commander51.Command("delete").description("IP ACL \uADF8\uB8F9\uACFC \uD558\uC704 \uB300\uC0C1\uC744 \uC0AD\uC81C\uD55C\uB2E4").argument("<group>", "IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID").option("--yes", "\uC0AD\uC81C\uC640 \uC5F0\uACB0 \uADDC\uCE59 \uC81C\uAC70 \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (groupInput, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const confirmedYes = requireYes(opts.yes, "IP ACL \uADF8\uB8F9 \uC0AD\uC81C");
+  const parsedGroup = requireResourceInput(groupInput, "IP ACL \uADF8\uB8F9");
+  if (confirmedYes) {
+    process.stderr.write(
+      "\uACBD\uACE0: \uADF8\uB8F9\uC758 \uBAA8\uB4E0 \uB300\uC0C1\uACFC Load Balancer \uC5F0\uACB0 \uADDC\uCE59\uC774 \uD568\uAED8 \uC81C\uAC70\uB429\uB2C8\uB2E4.\n"
+    );
+  }
+  const { client } = await resolveLoadBalancerClient(opts);
+  startSpinner("IP ACL \uADF8\uB8F9 \uC0AD\uC81C \uC911...");
+  let groupId;
+  try {
+    groupId = await resolveIpAclGroupId(client, parsedGroup);
+    await client.deleteIpAclGroup(groupId);
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  }
+  stopSpinner(true);
+  const result = {
+    operation: "ipacl-group-delete",
+    status: "succeeded",
+    ipacl_group_id: groupId
+  };
+  output(opts, {
+    headers: ["field", "value"],
+    rows: Object.entries(result).map(([key, value]) => [key, value]),
+    raw: result,
+    ids: [groupId]
+  });
+});
+var ipaclCommand = new import_commander51.Command("ipacl").description("IP ACL \uADF8\uB8F9\xB7\uB300\uC0C1 \uC870\uD68C");
+ipaclCommand.addCommand(listCommand12);
+ipaclCommand.addCommand(getCommand9);
+ipaclCommand.addCommand(createCommand8);
+ipaclCommand.addCommand(deleteCommand7);
+ipaclCommand.addCommand(targetCommand);
+
+// src/commands/loadbalancer/help.ts
+function configureLoadBalancerHelp(command) {
+  command.configureHelp({ showGlobalOptions: true });
+  for (const child of command.commands) {
+    configureLoadBalancerHelp(child);
+  }
+}
+
+// src/commands/loadbalancer/binding.ts
+var import_commander52 = require("commander");
+function bindingResult(operation, loadBalancerId, groupIds) {
+  return {
+    operation,
+    status: "succeeded",
+    loadbalancer_id: loadBalancerId,
+    ipacl_group_ids: groupIds
+  };
+}
+function outputBindingResult(opts, result) {
+  output(opts, {
+    headers: ["field", "value"],
+    rows: [
+      ["operation", result.operation],
+      ["status", result.status],
+      ["loadbalancer_id", result.loadbalancer_id],
+      ["ipacl_group_ids", result.ipacl_group_ids.join(", ")]
+    ],
+    raw: result,
+    ids: [result.loadbalancer_id]
+  });
+}
+var setIpAclCommand2 = new import_commander52.Command("set-ipacl").description("Load Balancer\uC758 IP ACL \uADF8\uB8F9 \uC5F0\uACB0\uC744 \uC804\uCCB4 \uAD50\uCCB4\uD55C\uB2E4").argument("<loadbalancer>", "Load Balancer \uC774\uB984 \uB610\uB294 UUID").requiredOption(
+  "--group <group>",
+  "\uC801\uC6A9\uD560 IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID (\uBC18\uBCF5 \uAC00\uB2A5)",
+  collectOption
+).option("--yes", "\uAE30\uC874 \uC5F0\uACB0 \uC804\uCCB4 \uAD50\uCCB4 \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (loadBalancerInput, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const confirmedYes = requireYes(opts.yes, "Load Balancer IP ACL \uC5F0\uACB0 \uAD50\uCCB4");
+  const parsedLoadBalancer = requireResourceInput(loadBalancerInput, "Load Balancer");
+  const parsedGroups = requireResourceInputs(opts.group ?? [], "IP ACL \uADF8\uB8F9");
+  const { client } = await resolveLoadBalancerClient(opts);
+  startSpinner("Load Balancer IP ACL \uC5F0\uACB0 \uAD50\uCCB4 \uC911...");
+  let loadBalancerId;
+  let groupIds;
+  try {
+    loadBalancerId = await resolveLoadBalancerId(client, parsedLoadBalancer);
+    const groups = await resolveIpAclGroups(client, parsedGroups);
+    groupIds = groups.map((group) => group.id);
+    if (new Set(groupIds).size !== groupIds.length) {
+      throw new NhnCloudCliError(
+        "\uAC19\uC740 IP ACL \uADF8\uB8F9\uC744 \uC911\uBCF5 \uC9C0\uC815\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.",
+        EXIT_PARAM_ERROR
+      );
+    }
+    if (new Set(groups.map((group) => group.action)).size > 1) {
+      throw new NhnCloudCliError(
+        "\uD568\uAED8 \uC801\uC6A9\uD560 IP ACL \uADF8\uB8F9\uC758 action\uC740 \uBAA8\uB450 \uAC19\uC544\uC57C \uD569\uB2C8\uB2E4.",
+        EXIT_PARAM_ERROR
+      );
+    }
+    if (confirmedYes) await client.bindIpAclGroups(loadBalancerId, groupIds);
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  }
+  stopSpinner(true);
+  outputBindingResult(
+    opts,
+    bindingResult("loadbalancer-set-ipacl", loadBalancerId, groupIds)
+  );
+});
+var clearIpAclCommand = new import_commander52.Command("clear-ipacl").description("Load Balancer\uC758 \uBAA8\uB4E0 IP ACL \uADF8\uB8F9 \uC5F0\uACB0\uC744 \uD574\uC81C\uD55C\uB2E4").argument("<loadbalancer>", "Load Balancer \uC774\uB984 \uB610\uB294 UUID").option("--yes", "\uBAA8\uB4E0 IP ACL \uC5F0\uACB0 \uD574\uC81C \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (loadBalancerInput, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const confirmedYes = requireYes(opts.yes, "Load Balancer IP ACL \uC5F0\uACB0 \uD574\uC81C");
+  const parsedLoadBalancer = requireResourceInput(loadBalancerInput, "Load Balancer");
+  const { client } = await resolveLoadBalancerClient(opts);
+  startSpinner("Load Balancer IP ACL \uC5F0\uACB0 \uD574\uC81C \uC911...");
+  let loadBalancerId;
+  try {
+    loadBalancerId = await resolveLoadBalancerId(client, parsedLoadBalancer);
+    if (confirmedYes) await client.bindIpAclGroups(loadBalancerId, []);
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  }
+  stopSpinner(true);
+  outputBindingResult(
+    opts,
+    bindingResult("loadbalancer-clear-ipacl", loadBalancerId, [])
+  );
+});
+
 // src/index.ts
 var rootAgentHints = `
 Agent hints:
@@ -7592,6 +8636,14 @@ Agent workflow:
   1. nhncloud floatingip list --json
   2. nhncloud floatingip create --json
 `;
+var loadbalancerAgentWorkflow = `
+Agent workflow:
+  1. nhncloud loadbalancer list --json
+  2. nhncloud loadbalancer ipacl list --json
+  3. nhncloud loadbalancer ipacl target list <group> --json
+  4. \uC4F0\uAE30 \uC804\uC5D0\uB294 --profile, --region, --yes, --json\uC744 \uBA85\uC2DC\uD55C\uB2E4.
+  5. \uB300\uC0C1 \uBCC0\uACBD\uC740 \uAE30\uBCF8\uC73C\uB85C \uC7AC\uBC14\uC778\uB529\uD55C\uB2E4. exit code 1\uC774\uBA74 rebind.failed[].retry_argv\uB97C \uC77D\uB294\uB2E4.
+`;
 var ncrAgentWorkflow = `
 Agent workflow:
   1. nhncloud ncr list --json
@@ -7610,8 +8662,8 @@ Agent workflow:
   2. nhncloud ncs workload list --json
   3. nhncloud ncs workload get <id> --json
 `;
-var program = new import_commander48.Command();
-program.name("nhncloud").description("NHN Cloud CLI \u2014 AI agent & terminal friendly").version("0.10.1").option("--json", "JSON \uD615\uC2DD\uC73C\uB85C \uCD9C\uB825").option("--quiet", "\uCD5C\uC18C \uCD9C\uB825 (\uC790\uB3D9\uD654\uC6A9)").option("--no-color", "\uC0C9\uC0C1 \uBE44\uD65C\uC131\uD654").addHelpText("after", rootAgentHints);
+var program = new import_commander53.Command();
+program.name("nhncloud").description("NHN Cloud CLI \u2014 AI agent & terminal friendly").version("0.12.0").option("--json", "JSON \uD615\uC2DD\uC73C\uB85C \uCD9C\uB825").option("--quiet", "\uCD5C\uC18C \uCD9C\uB825 (\uC790\uB3D9\uD654\uC6A9)").option("--no-color", "\uC0C9\uC0C1 \uBE44\uD65C\uC131\uD654").addHelpText("after", rootAgentHints);
 program.hook("preAction", () => {
   const opts = program.opts();
   if (!opts.color || process.env["NO_COLOR"]) {
@@ -7622,12 +8674,12 @@ program.hook("preAction", () => {
   }
 });
 program.addCommand(configureCommand);
-var logncrashCommand = new import_commander48.Command("logncrash").description("Log & Crash \uAD00\uB828 \uBA85\uB839").addHelpText("after", logncrashAgentWorkflow);
+var logncrashCommand = new import_commander53.Command("logncrash").description("Log & Crash \uAD00\uB828 \uBA85\uB839").addHelpText("after", logncrashAgentWorkflow);
 logncrashCommand.addCommand(searchCommand);
 logncrashCommand.addCommand(sendCommand);
 logncrashCommand.addCommand(exportCommand);
 program.addCommand(logncrashCommand);
-var deployCommand = new import_commander48.Command("deploy").description("NHN Cloud Deploy \uAD00\uB828 \uBA85\uB839").addHelpText("after", deployAgentWorkflow);
+var deployCommand = new import_commander53.Command("deploy").description("NHN Cloud Deploy \uAD00\uB828 \uBA85\uB839").addHelpText("after", deployAgentWorkflow);
 deployCommand.addCommand(runCommand);
 deployCommand.addCommand(artifactsCommand);
 deployCommand.addCommand(serverGroupsCommand);
@@ -7637,7 +8689,7 @@ deployCommand.addCommand(binariesCommand);
 deployCommand.addCommand(uploadCommand);
 deployCommand.addCommand(downloadCommand);
 program.addCommand(deployCommand);
-var instanceCommand = new import_commander48.Command("instance").description("Compute \uC778\uC2A4\uD134\uC2A4 \uAD00\uB828 \uBA85\uB839").addHelpText("after", instanceAgentWorkflow);
+var instanceCommand = new import_commander53.Command("instance").description("Compute \uC778\uC2A4\uD134\uC2A4 \uAD00\uB828 \uBA85\uB839").addHelpText("after", instanceAgentWorkflow);
 instanceCommand.addCommand(listCommand);
 instanceCommand.addCommand(flavorsCommand);
 instanceCommand.addCommand(availabilityZonesCommand);
@@ -7656,36 +8708,44 @@ instanceCommand.addCommand(keypairCommand);
 instanceCommand.addCommand(volumeCommand);
 instanceCommand.addCommand(volumesCommand);
 program.addCommand(instanceCommand);
-var networkCommand = new import_commander48.Command("network").description("VPC\xB7\uC11C\uBE0C\uB137 \uC870\uD68C").addHelpText("after", networkAgentWorkflow);
+var networkCommand = new import_commander53.Command("network").description("VPC\xB7\uC11C\uBE0C\uB137 \uC870\uD68C").addHelpText("after", networkAgentWorkflow);
 networkCommand.addCommand(listCommand3);
 networkCommand.addCommand(subnetCommand);
 program.addCommand(networkCommand);
-var volumeCommand2 = new import_commander48.Command("volume").description("Block Storage \uBCFC\uB968 \uAD00\uB828 \uBA85\uB839").addHelpText("after", volumeAgentWorkflow);
+var volumeCommand2 = new import_commander53.Command("volume").description("Block Storage \uBCFC\uB968 \uAD00\uB828 \uBA85\uB839").addHelpText("after", volumeAgentWorkflow);
 volumeCommand2.addCommand(listCommand2);
 volumeCommand2.addCommand(getCommand);
 volumeCommand2.addCommand(createCommand);
 program.addCommand(volumeCommand2);
-var floatingipCommand = new import_commander48.Command("floatingip").description(
+var floatingipCommand = new import_commander53.Command("floatingip").description(
   "Floating IP(\uC778\uC2A4\uD134\uC2A4 \uACF5\uC778 IP) \uAD00\uB9AC"
 ).addHelpText("after", floatingIpAgentWorkflow);
 floatingipCommand.addCommand(listCommand4);
 floatingipCommand.addCommand(createCommand2);
 floatingipCommand.addCommand(deleteCommand);
 program.addCommand(floatingipCommand);
-var ncrCommand = new import_commander48.Command("ncr").description("NHN Container Registry \uAD00\uB828 \uBA85\uB839").addHelpText("after", ncrAgentWorkflow);
+var loadbalancerCommand = new import_commander53.Command("loadbalancer").description("Load Balancer\xB7IP ACL \uC870\uD68C\xB7\uAD00\uB9AC").addHelpText("after", loadbalancerAgentWorkflow);
+loadbalancerCommand.addCommand(listCommand10);
+loadbalancerCommand.addCommand(getCommand8);
+loadbalancerCommand.addCommand(ipaclCommand);
+loadbalancerCommand.addCommand(setIpAclCommand2);
+loadbalancerCommand.addCommand(clearIpAclCommand);
+configureLoadBalancerHelp(loadbalancerCommand);
+program.addCommand(loadbalancerCommand);
+var ncrCommand = new import_commander53.Command("ncr").description("NHN Container Registry \uAD00\uB828 \uBA85\uB839").addHelpText("after", ncrAgentWorkflow);
 ncrCommand.addCommand(listCommand5);
 ncrCommand.addCommand(getCommand3);
 ncrCommand.addCommand(imagesCommand2);
 ncrCommand.addCommand(tagsCommand);
 program.addCommand(ncrCommand);
-var nksCommand = new import_commander48.Command("nks").description("NHN Kubernetes Service \uAD00\uB828 \uBA85\uB839").addHelpText("after", nksAgentWorkflow);
+var nksCommand = new import_commander53.Command("nks").description("NHN Kubernetes Service \uAD00\uB828 \uBA85\uB839").addHelpText("after", nksAgentWorkflow);
 nksCommand.addCommand(supportsCommand);
 nksCommand.addCommand(clusterCommand);
 nksCommand.addCommand(nodegroupCommand);
 nksCommand.addCommand(addonTypeCommand);
 nksCommand.addCommand(addonCommand);
 program.addCommand(nksCommand);
-var ncsCommand = new import_commander48.Command("ncs").description("NHN Container Service \uAD00\uB828 \uBA85\uB839").addHelpText("after", ncsAgentWorkflow);
+var ncsCommand = new import_commander53.Command("ncs").description("NHN Container Service \uAD00\uB828 \uBA85\uB839").addHelpText("after", ncsAgentWorkflow);
 ncsCommand.addCommand(templateCommand);
 ncsCommand.addCommand(workloadCommand);
 ncsCommand.addCommand(malwareCommand);