@bifos/nhncloud-cli 0.13.0 → 0.14.0

package/dist/index.js

@@ -66,6 +66,14 @@ var NhnCloudCliError = class extends Error {
   exitCode;
 };
 
+// src/utils/terminal.ts
+function sanitizeForTerminal(value) {
+  return value.replace(/[\x00-\x1F\x7F]/g, "?");
+}
+function sanitizeMultilineForTerminal(value) {
+  return value.replace(/[\x00-\x09\x0B-\x1F\x7F]/g, "?");
+}
+
 // src/api/timeout.ts
 var SYNC_FLOOR_MS = 6e5;
 var DEFAULT_TIMEOUT_MS = 3e4;
@@ -737,15 +745,20 @@ async function getIaasToken(profile, iaas, forceRefresh = false) {
 }
 
 // src/services/logncrash/client.ts
-var import_ky4 = __toESM(require("ky"));
+var import_ky5 = __toESM(require("ky"));
 
 // src/api/envelope.ts
+var NhnEnvelopeError = class extends NhnCloudCliError {
+  resultCode;
+  constructor(resultCode, resultMessage) {
+    super(`API \uC624\uB958: ${resultMessage}`, EXIT_API_ERROR);
+    this.name = "NhnEnvelopeError";
+    this.resultCode = resultCode;
+  }
+};
 function unwrapHeader(res) {
   if (!res.header.isSuccessful) {
-    throw new NhnCloudCliError(
-      `API \uC624\uB958: ${res.header.resultMessage}`,
-      EXIT_API_ERROR
-    );
+    throw new NhnEnvelopeError(res.header.resultCode, res.header.resultMessage);
   }
 }
 function unwrap(res) {
@@ -756,6 +769,45 @@ function unwrap(res) {
   return res.body;
 }
 
+// src/services/logncrash/errors.ts
+var import_ky4 = require("ky");
+var RATE_LIMIT_RESULT_CODE = 429;
+function isRateLimitError(err) {
+  return err instanceof NhnEnvelopeError && Number(err.resultCode) === RATE_LIMIT_RESULT_CODE;
+}
+function withRateLimitHint(err) {
+  return new NhnCloudCliError(
+    `${err.message}
+\uC870\uD68C \uD69F\uC218 \uC81C\uD55C\uC5D0 \uAC78\uB838\uC2B5\uB2C8\uB2E4. \uC2DC\uAC04\uC744 \uB450\uACE0 \uB2E4\uC2DC \uC2E4\uD589\uD558\uC138\uC694. \uAC80\uC0C9 \uAE30\uAC04\uC744 \uC881\uD600\uB3C4 \uD480\uB9AC\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.`,
+    err.exitCode
+  );
+}
+var LogncrashServerError = class extends NhnCloudCliError {
+  requestId;
+  constructor(message, requestId) {
+    super(message, EXIT_API_ERROR);
+    this.name = "LogncrashServerError";
+    this.requestId = requestId === null ? null : sanitizeForTerminal(requestId);
+  }
+};
+async function toLogncrashError(err) {
+  if (!(err instanceof import_ky4.HTTPError) || err.response.status !== 500) {
+    return toNhnCloudCliError(err);
+  }
+  let requestId = null;
+  try {
+    const body = await err.response.json();
+    if (typeof body === "object" && body !== null && "requestId" in body && typeof body.requestId === "string") {
+      requestId = body.requestId;
+    }
+  } catch {
+  }
+  return new LogncrashServerError(
+    `API \uD638\uCD9C \uC2E4\uD328 (500): ${err.message}`,
+    requestId
+  );
+}
+
 // src/services/logncrash/client.ts
 var LogncrashClient = class {
   appkey;
@@ -770,7 +822,7 @@ var LogncrashClient = class {
     const endpoint = endpointFor("logncrash");
     const url = `${endpoint}/v3/${encodeURIComponent(this.appkey)}/logs/cursor`;
     try {
-      const res = await import_ky4.default.post(url, {
+      const res = await import_ky5.default.post(url, {
         headers,
         json: {
           query: params.query,
@@ -785,7 +837,7 @@ var LogncrashClient = class {
       }).json();
       return unwrap(res);
     } catch (err) {
-      throw toNhnCloudCliError(err);
+      throw await toLogncrashError(err);
     }
   }
   /**
@@ -796,7 +848,7 @@ var LogncrashClient = class {
     const endpoint = endpointFor("logncrash");
     const url = `${endpoint}/v3/${encodeURIComponent(this.appkey)}/logs/scroll`;
     try {
-      const res = await import_ky4.default.post(url, {
+      const res = await import_ky5.default.post(url, {
         headers,
         json: {
           query: params.query,
@@ -808,7 +860,7 @@ var LogncrashClient = class {
       }).json();
       return unwrap(res);
     } catch (err) {
-      throw toNhnCloudCliError(err);
+      throw await toLogncrashError(err);
     }
   }
   /**
@@ -819,14 +871,14 @@ var LogncrashClient = class {
     const endpoint = endpointFor("logncrash");
     const url = `${endpoint}/v3/${encodeURIComponent(this.appkey)}/logs/scroll/${encodeURIComponent(scrollKey)}`;
     try {
-      const res = await import_ky4.default.post(url, {
+      const res = await import_ky5.default.post(url, {
         headers,
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
       }).json();
       return unwrap(res);
     } catch (err) {
-      throw toNhnCloudCliError(err);
+      throw await toLogncrashError(err);
     }
   }
   readHeaders() {
@@ -858,7 +910,7 @@ var LogncrashClient = class {
     if (params.logType !== void 0) payload["logType"] = params.logType;
     if (params.host !== void 0) payload["host"] = params.host;
     try {
-      const res = await import_ky4.default.post(url, {
+      const res = await import_ky5.default.post(url, {
         headers: { "Content-Type": "application/json" },
         json: payload,
         retry: 0,
@@ -872,7 +924,7 @@ var LogncrashClient = class {
 };
 
 // src/services/ncr/client.ts
-var import_ky5 = __toESM(require("ky"));
+var import_ky6 = __toESM(require("ky"));
 
 // src/services/ncr/types.ts
 function isRegistry(val) {
@@ -913,7 +965,7 @@ var NcrClient = class {
   async listRegistries(appKey) {
     const url = `${this.baseUrl}/ncr/v2.0/appkeys/${encodeURIComponent(appKey)}/registries`;
     try {
-      const res = await import_ky5.default.get(url, {
+      const res = await import_ky6.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -940,7 +992,7 @@ var NcrClient = class {
   async getRegistry(appKey, registry) {
     const url = `${this.baseUrl}/ncr/v2.0/appkeys/${encodeURIComponent(appKey)}/registries/${encodeURIComponent(registry)}`;
     try {
-      const res = await import_ky5.default.get(url, {
+      const res = await import_ky6.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -961,7 +1013,7 @@ var NcrClient = class {
 };
 
 // src/services/ncs/client.ts
-var import_ky6 = __toESM(require("ky"));
+var import_ky7 = __toESM(require("ky"));
 
 // src/services/ncs/types.ts
 function isNcsTemplateSummary(val) {
@@ -1053,7 +1105,7 @@ var NcsClient = class {
       searchParams["disable_containers"] = query.disableContainers;
     }
     try {
-      const res = await import_ky6.default.get(url, {
+      const res = await import_ky7.default.get(url, {
         headers: this.authHeaders(),
         searchParams,
         retry: 0,
@@ -1085,7 +1137,7 @@ var NcsClient = class {
   async getTemplate(id) {
     const url = `${this.baseUrl}/templates/${encodeURIComponent(id)}`;
     try {
-      const res = await import_ky6.default.get(url, {
+      const res = await import_ky7.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -1118,7 +1170,7 @@ var NcsClient = class {
     if (query.page !== void 0) searchParams["page"] = query.page;
     if (query.size !== void 0) searchParams["size"] = query.size;
     try {
-      const res = await import_ky6.default.get(url, {
+      const res = await import_ky7.default.get(url, {
         headers: this.authHeaders(),
         searchParams,
         retry: 0,
@@ -1150,7 +1202,7 @@ var NcsClient = class {
   async getTemplateVersion(id, version) {
     const url = `${this.baseUrl}/templates/${encodeURIComponent(id)}/versions/${encodeURIComponent(version)}`;
     try {
-      const res = await import_ky6.default.get(url, {
+      const res = await import_ky7.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -1182,7 +1234,7 @@ var NcsClient = class {
     if (query.page !== void 0) searchParams["page"] = query.page;
     if (query.size !== void 0) searchParams["size"] = query.size;
     try {
-      const res = await import_ky6.default.get(url, {
+      const res = await import_ky7.default.get(url, {
         headers: this.authHeaders(),
         searchParams,
         retry: 0,
@@ -1214,7 +1266,7 @@ var NcsClient = class {
   async getWorkload(id) {
     const url = `${this.baseUrl}/workloads/${encodeURIComponent(id)}`;
     try {
-      const res = await import_ky6.default.get(url, {
+      const res = await import_ky7.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -1254,7 +1306,7 @@ var NcsClient = class {
     if (query.page !== void 0) searchParams["page"] = query.page;
     if (query.size !== void 0) searchParams["size"] = query.size;
     try {
-      const res = await import_ky6.default.get(url, {
+      const res = await import_ky7.default.get(url, {
         headers: this.authHeaders(),
         searchParams,
         retry: 0,
@@ -1292,7 +1344,7 @@ var NcsClient = class {
     if (query.page !== void 0) searchParams["page"] = query.page;
     if (query.size !== void 0) searchParams["size"] = query.size;
     try {
-      const res = await import_ky6.default.get(url, {
+      const res = await import_ky7.default.get(url, {
         headers: this.authHeaders(),
         searchParams,
         retry: 0,
@@ -1329,7 +1381,7 @@ var NcsClient = class {
     if (query.size !== void 0) searchParams["size"] = query.size;
     if (query.sort !== void 0) searchParams["sort"] = query.sort;
     try {
-      const res = await import_ky6.default.get(url, {
+      const res = await import_ky7.default.get(url, {
         headers: this.authHeaders(),
         searchParams,
         retry: 0,
@@ -1361,7 +1413,7 @@ var NcsClient = class {
   async getWorkloadHistory(id, historyId) {
     const url = `${this.baseUrl}/workloads/${encodeURIComponent(id)}/history/${encodeURIComponent(historyId)}`;
     try {
-      const res = await import_ky6.default.get(url, {
+      const res = await import_ky7.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -1389,7 +1441,7 @@ var NcsClient = class {
   async getWorkloadScheduleHistory(id) {
     const url = `${this.baseUrl}/workloads/${encodeURIComponent(id)}/schedulehistory`;
     try {
-      const res = await import_ky6.default.get(url, {
+      const res = await import_ky7.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -1418,7 +1470,7 @@ var NcsClient = class {
   async createTemplate(body) {
     const url = `${this.baseUrl}/templates`;
     try {
-      const res = await import_ky6.default.post(url, {
+      const res = await import_ky7.default.post(url, {
         headers: this.authHeaders(),
         json: body,
         retry: 0,
@@ -1445,7 +1497,7 @@ var NcsClient = class {
   async deleteTemplate(id) {
     const url = `${this.baseUrl}/templates/${encodeURIComponent(id)}`;
     try {
-      const res = await import_ky6.default.delete(url, {
+      const res = await import_ky7.default.delete(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -1466,7 +1518,7 @@ var NcsClient = class {
   async createTemplateVersion(id, body) {
     const url = `${this.baseUrl}/templates/${encodeURIComponent(id)}/versions`;
     try {
-      const res = await import_ky6.default.post(url, {
+      const res = await import_ky7.default.post(url, {
         headers: this.authHeaders(),
         json: body,
         retry: 0,
@@ -1493,7 +1545,7 @@ var NcsClient = class {
   async deleteTemplateVersion(id, version) {
     const url = `${this.baseUrl}/templates/${encodeURIComponent(id)}/versions/${encodeURIComponent(version)}`;
     try {
-      const res = await import_ky6.default.delete(url, {
+      const res = await import_ky7.default.delete(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -1511,7 +1563,7 @@ var NcsClient = class {
   async pauseWorkload(id) {
     const url = `${this.baseUrl}/workloads/${encodeURIComponent(id)}/pause`;
     try {
-      const res = await import_ky6.default.post(url, {
+      const res = await import_ky7.default.post(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -1529,7 +1581,7 @@ var NcsClient = class {
   async resumeWorkload(id) {
     const url = `${this.baseUrl}/workloads/${encodeURIComponent(id)}/resume`;
     try {
-      const res = await import_ky6.default.post(url, {
+      const res = await import_ky7.default.post(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -1547,7 +1599,7 @@ var NcsClient = class {
   async restartWorkloadTask(id, taskId) {
     const url = `${this.baseUrl}/workloads/${encodeURIComponent(id)}/tasks/${encodeURIComponent(taskId)}/restart`;
     try {
-      const res = await import_ky6.default.post(url, {
+      const res = await import_ky7.default.post(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -1567,7 +1619,7 @@ var NcsClient = class {
   async createWorkload(body) {
     const url = `${this.baseUrl}/workloads`;
     try {
-      const res = await import_ky6.default.post(url, {
+      const res = await import_ky7.default.post(url, {
         headers: this.authHeaders(),
         json: body,
         retry: 0,
@@ -1595,7 +1647,7 @@ var NcsClient = class {
   async updateWorkload(id, body) {
     const url = `${this.baseUrl}/workloads/${encodeURIComponent(id)}`;
     try {
-      const res = await import_ky6.default.put(url, {
+      const res = await import_ky7.default.put(url, {
         headers: this.authHeaders(),
         json: body,
         retry: 0,
@@ -1625,7 +1677,7 @@ var NcsClient = class {
   async patchWorkload(id, patch) {
     const url = `${this.baseUrl}/workloads/${encodeURIComponent(id)}`;
     try {
-      const res = await import_ky6.default.patch(url, {
+      const res = await import_ky7.default.patch(url, {
         headers: { ...this.authHeaders(), "Content-Type": "application/json-patch+json" },
         json: patch,
         retry: 0,
@@ -1677,7 +1729,7 @@ var NcsClient = class {
   async deleteWorkload(id) {
     const url = `${this.baseUrl}/workloads/${encodeURIComponent(id)}`;
     try {
-      const res = await import_ky6.default.delete(url, {
+      const res = await import_ky7.default.delete(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -1696,7 +1748,7 @@ var NcsClient = class {
   async getMalwareConfig() {
     const url = `${this.baseUrl}/malware/config`;
     try {
-      const res = await import_ky6.default.get(url, {
+      const res = await import_ky7.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -1725,7 +1777,7 @@ var NcsClient = class {
   async setMalwareConfig(enabled) {
     const url = `${this.baseUrl}/malware/config`;
     try {
-      const res = await import_ky6.default.post(url, {
+      const res = await import_ky7.default.post(url, {
         headers: this.authHeaders(),
         json: { enabled },
         retry: 0,
@@ -1755,7 +1807,7 @@ var NcsClient = class {
   async getMalwareResult(workloadId, historyId) {
     const url = `${this.baseUrl}/workloads/${encodeURIComponent(workloadId)}/history/${encodeURIComponent(historyId)}/malware`;
     try {
-      const res = await import_ky6.default.get(url, {
+      const res = await import_ky7.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -2071,7 +2123,7 @@ async function runInteractive(opts) {
       await saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, void 0, true, uak);
     } catch (err) {
       if (err instanceof NhnCloudCliError && err.exitCode === EXIT_AUTH_ERROR) {
-        process.stderr.write(import_chalk.default.red(`  \u2717 ${err.message}
+        process.stderr.write(import_chalk.default.red(`  \u2717 ${sanitizeMultilineForTerminal(err.message)}
 `));
         const saveDespite = await confirm({
           message: "\uAC80\uC99D \uC2E4\uD328\uC5D0\uB3C4 \uC800\uC7A5\uD558\uC2DC\uACA0\uC2B5\uB2C8\uAE4C?",
@@ -2317,14 +2369,14 @@ function compareByCodePoint(left, right) {
   return leftPoints.length - rightPoints.length;
 }
 function ensureRegularFile(filePath) {
-  let stat2;
+  let stat3;
   try {
-    stat2 = (0, import_node_fs2.lstatSync)(filePath);
+    stat3 = (0, import_node_fs2.lstatSync)(filePath);
   } catch (error) {
     const reason = error instanceof Error ? error.message : String(error);
     throw new NhnCloudCliError(`\uC2A4\uD0AC \uD30C\uC77C\uC744 \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${filePath} (${reason})`, EXIT_PARAM_ERROR);
   }
-  if (stat2.isSymbolicLink() || !stat2.isFile()) {
+  if (stat3.isSymbolicLink() || !stat3.isFile()) {
     throw new NhnCloudCliError(`\uC2A4\uD0AC \uCF58\uD150\uCE20\uB294 \uC815\uADDC \uD30C\uC77C\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4: ${filePath}`, EXIT_PARAM_ERROR);
   }
 }
@@ -2341,21 +2393,21 @@ function collectReferenceFiles(referencesRoot, currentDir, files) {
   }
   for (const entry of entries) {
     const entryPath = import_node_path4.default.join(currentDir, entry.name);
-    let stat2;
+    let stat3;
     try {
-      stat2 = (0, import_node_fs2.lstatSync)(entryPath);
+      stat3 = (0, import_node_fs2.lstatSync)(entryPath);
     } catch (error) {
       const reason = error instanceof Error ? error.message : String(error);
       throw new NhnCloudCliError(`\uC2A4\uD0AC \uCF58\uD150\uCE20\uB97C \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${entryPath} (${reason})`, EXIT_PARAM_ERROR);
     }
-    if (stat2.isSymbolicLink()) {
+    if (stat3.isSymbolicLink()) {
       throw new NhnCloudCliError(`\uC2A4\uD0AC \uCF58\uD150\uCE20\uC5D0 \uC2EC\uBCFC\uB9AD \uB9C1\uD06C\uB97C \uC0AC\uC6A9\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${entryPath}`, EXIT_PARAM_ERROR);
     }
-    if (stat2.isDirectory()) {
+    if (stat3.isDirectory()) {
       collectReferenceFiles(referencesRoot, entryPath, files);
       continue;
     }
-    if (!stat2.isFile()) {
+    if (!stat3.isFile()) {
       throw new NhnCloudCliError(`\uC2A4\uD0AC \uCF58\uD150\uCE20\uB294 \uC815\uADDC \uD30C\uC77C \uB610\uB294 \uB514\uB809\uD130\uB9AC\uC5EC\uC57C \uD569\uB2C8\uB2E4: ${entryPath}`, EXIT_PARAM_ERROR);
     }
     files.push(`references/${import_node_path4.default.relative(referencesRoot, entryPath).split(import_node_path4.default.sep).join("/")}`);
@@ -3133,10 +3185,17 @@ function resolveTime(input) {
     }
     return toLocalISOString(now);
   }
-  const isoPattern = /^\d{4}-\d{2}-\d{2}(T\d{2}:\d{2}(:\d{2})?([+-]\d{2}:\d{2}|Z)?)?$/;
+  const isoPattern = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}([+-]\d{2}:\d{2}|Z)$/;
   if (isoPattern.test(trimmed)) {
     return trimmed;
   }
+  const partialIso = /^\d{4}-\d{2}-\d{2}(T\d{2}:\d{2}(:\d{2})?)?$/.test(trimmed);
+  if (partialIso) {
+    throw new NhnCloudCliError(
+      `\uC2DC\uAC04 \uD615\uC2DD \uC624\uB958: "${input}" \u2014 \uCD08\uC640 \uC2DC\uAC04\uB300\uAE4C\uC9C0 \uC9C0\uC815\uD574\uC57C \uD569\uB2C8\uB2E4 (\uC608: 2026-08-03T00:00:00+09:00 \uB610\uB294 2026-08-03T00:00:00Z).`,
+      EXIT_PARAM_ERROR
+    );
+  }
   throw new NhnCloudCliError(
     `\uC2DC\uAC04 \uD615\uC2DD \uC624\uB958: "${input}" \u2014 ISO8601 (\uC608: 2024-01-01T00:00:00+09:00) \uB610\uB294 \uC0C1\uB300\uC2DC\uAC04 (\uC608: 1h, 30m, 2d, now) \uC744 \uC0AC\uC6A9\uD558\uC138\uC694.`,
     EXIT_PARAM_ERROR
@@ -3144,6 +3203,49 @@ function resolveTime(input) {
 }
 var MAX_RANGE_DAYS = 31;
 var MAX_LOOKBACK_DAYS = 90;
+var MIN_SPLIT_WINDOW_MS = 10 * 60 * 1e3;
+function splitTimeRange(fromIso, toIso, windowMs) {
+  if (windowMs < MIN_SPLIT_WINDOW_MS) {
+    throw new NhnCloudCliError(
+      `\uAC80\uC0C9 \uBD84\uD560 \uCC3D\uC740 \uCD5C\uC18C ${MIN_SPLIT_WINDOW_MS / 6e4}\uBD84\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4.`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  const normalizedWindowMs = Math.floor(windowMs / 1e3) * 1e3;
+  const fromMs = floorToSecond(new Date(fromIso).getTime());
+  const toMs = floorToSecond(new Date(toIso).getTime());
+  if (normalizedWindowMs >= toMs - fromMs) {
+    return [{ from: fromIso, to: toIso }];
+  }
+  const windows = [];
+  let windowFromMs = fromMs;
+  let windowFrom = fromIso;
+  while (windowFromMs < toMs) {
+    const windowToMs = Math.min(windowFromMs + normalizedWindowMs, toMs);
+    const windowTo = windowToMs === toMs ? toIso : formatSplitBoundary(windowToMs, fromIso);
+    windows.push({ from: windowFrom, to: windowTo });
+    windowFromMs = windowToMs;
+    windowFrom = windowTo;
+  }
+  return windows;
+}
+function floorToSecond(timestampMs) {
+  return Math.floor(timestampMs / 1e3) * 1e3;
+}
+function formatSplitBoundary(timestampMs, referenceIso) {
+  const secondTimestampMs = floorToSecond(timestampMs);
+  if (referenceIso.endsWith("Z")) {
+    return `${new Date(secondTimestampMs).toISOString().slice(0, 19)}Z`;
+  }
+  const offsetMatch = referenceIso.match(/([+-])(\d{2}):(\d{2})$/);
+  if (!offsetMatch) {
+    return toLocalISOString(new Date(secondTimestampMs));
+  }
+  const direction = offsetMatch[1] === "+" ? 1 : -1;
+  const offsetMinutes = direction * (Number(offsetMatch[2]) * 60 + Number(offsetMatch[3]));
+  const shifted = new Date(secondTimestampMs + offsetMinutes * 6e4).toISOString().slice(0, 19);
+  return `${shifted}${offsetMatch[0]}`;
+}
 function assertSearchRange(fromIso, toIso) {
   const from = new Date(fromIso);
   const to = new Date(toIso);
@@ -3186,7 +3288,7 @@ function formatLogRow(log) {
   const body = truncate(getString(log["logBody"] ?? log["body"] ?? log["message"] ?? ""), 60);
   return [logTime, logType, body];
 }
-var searchCommand = new import_commander4.Command("search").description("Log & Crash \uB85C\uADF8 \uAC80\uC0C9").option("--query <lucene>", "Lucene \uC9C8\uC758 \uBB38\uC790\uC5F4 (\uD544\uC218)").option("--from <time>", "\uAC80\uC0C9 \uC2DC\uC791: ISO8601 \uB610\uB294 \uC0C1\uB300\uC2DC\uAC04 (1h/30m/2d/now) (\uD544\uC218)").option("--to <time>", "\uAC80\uC0C9 \uB05D: ISO8601 \uB610\uB294 \uC0C1\uB300\uC2DC\uAC04 (\uD544\uC218)").option("--page <n>", "\uC804\uD658 \uD638\uD658\uC6A9 pageNumber. 0\uB9CC \uD5C8\uC6A9 (\uB2E4\uC74C \uD398\uC774\uC9C0\uB294 --cursor)", "0").option("--size <n>", "pageSize (\uAE30\uBCF8 10, \uCD5C\uB300 100)", "10").option("--cursor <value>", "\uB2E4\uC74C \uD398\uC774\uC9C0 \uC870\uD68C\uC6A9 opaque cursor").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+var searchCommand = new import_commander4.Command("search").description("Log & Crash \uB85C\uADF8 \uAC80\uC0C9").option("--query <lucene>", "Lucene \uC9C8\uC758 \uBB38\uC790\uC5F4 (\uD544\uC218)").option("--from <time>", "\uAC80\uC0C9 \uC2DC\uC791: \uCD08\xB7\uC2DC\uAC04\uB300 \uD3EC\uD568 ISO8601 \uB610\uB294 \uC0C1\uB300\uC2DC\uAC04 (1h/30m/2d/now) (\uD544\uC218)").option("--to <time>", "\uAC80\uC0C9 \uB05D: \uCD08\xB7\uC2DC\uAC04\uB300 \uD3EC\uD568 ISO8601 \uB610\uB294 \uC0C1\uB300\uC2DC\uAC04 (\uD544\uC218)").option("--page <n>", "\uC804\uD658 \uD638\uD658\uC6A9 pageNumber. 0\uB9CC \uD5C8\uC6A9 (\uB2E4\uC74C \uD398\uC774\uC9C0\uB294 --cursor)", "0").option("--size <n>", "pageSize (\uAE30\uBCF8 10, \uCD5C\uB300 100)", "10").option("--cursor <value>", "\uB2E4\uC74C \uD398\uC774\uC9C0 \uC870\uD68C\uC6A9 opaque cursor").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   if (!opts.query) {
     throw new NhnCloudCliError(`--query \uC635\uC158\uC740 \uD544\uC218\uC785\uB2C8\uB2E4. \uC608: --query 'logType:"NORMAL"'`, EXIT_PARAM_ERROR);
@@ -3224,6 +3326,17 @@ var searchCommand = new import_commander4.Command("search").description("Log & C
     });
   } catch (err) {
     stopSpinner(false);
+    if (isRateLimitError(err)) {
+      throw withRateLimitHint(err);
+    }
+    if (err instanceof LogncrashServerError) {
+      const requestId = err.requestId === null ? "" : ` (requestId: ${err.requestId})`;
+      throw new LogncrashServerError(
+        `${err.message}
+\uAC80\uC0C9 \uAE30\uAC04\uC774 \uB113\uC5B4 \uC11C\uBC84\uAC00 \uCC98\uB9AC\uD558\uC9C0 \uBABB\uD588\uC744 \uC218 \uC788\uC2B5\uB2C8\uB2E4. \uAE30\uAC04\uC744 \uC904\uC5EC \uB2E4\uC2DC \uC2DC\uB3C4\uD558\uAC70\uB098 logncrash export\uB97C \uC0AC\uC6A9\uD558\uC138\uC694.${requestId}`,
+        err.requestId
+      );
+    }
     throw err;
   }
   stopSpinner(true);
@@ -3251,19 +3364,19 @@ var VALID_LEVELS = ["DEBUG", "INFO", "WARN", "ERROR", "FATAL"];
 function resolveBody(opts) {
   if (opts.body !== void 0) return opts.body;
   if (opts.file !== void 0) {
-    let stat2;
+    let stat3;
     try {
-      stat2 = (0, import_node_fs3.statSync)(opts.file);
+      stat3 = (0, import_node_fs3.statSync)(opts.file);
     } catch (e) {
       const reason = e.code ?? (e instanceof Error ? e.message : String(e));
       throw new NhnCloudCliError(`\uB85C\uADF8 \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${opts.file} (${reason})`, EXIT_PARAM_ERROR);
     }
-    if (!stat2.isFile()) {
+    if (!stat3.isFile()) {
       throw new NhnCloudCliError(`\uB85C\uADF8 \uD30C\uC77C\uC774 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${opts.file}`, EXIT_PARAM_ERROR);
     }
-    if (stat2.size > MAX_LOG_BYTES) {
+    if (stat3.size > MAX_LOG_BYTES) {
       throw new NhnCloudCliError(
-        `\uB85C\uADF8 \uD30C\uC77C\uC774 \uB108\uBB34 \uD07D\uB2C8\uB2E4: ${stat2.size} \uBC14\uC774\uD2B8 (\uD55C\uB3C4 ${MAX_LOG_BYTES} \uBC14\uC774\uD2B8).`,
+        `\uB85C\uADF8 \uD30C\uC77C\uC774 \uB108\uBB34 \uD07D\uB2C8\uB2E4: ${stat3.size} \uBC14\uC774\uD2B8 (\uD55C\uB3C4 ${MAX_LOG_BYTES} \uBC14\uC774\uD2B8).`,
         EXIT_PARAM_ERROR
       );
     }
@@ -3351,7 +3464,7 @@ function assertWritable(path5, force) {
     EXIT_PARAM_ERROR
   );
 }
-var exportCommand = new import_commander6.Command("export").description("Log & Crash \uB85C\uADF8\uB97C scroll \uB85C \uC804\uCCB4 \uCD94\uCD9C\uD574 \uD30C\uC77C\uB85C \uC800\uC7A5 (\uB300\uB7C9 \uCD94\uCD9C)").option("--query <lucene>", "Lucene \uC9C8\uC758 \uBB38\uC790\uC5F4 (\uD544\uC218)").option("--from <time>", "\uAC80\uC0C9 \uC2DC\uC791: ISO8601 \uB610\uB294 \uC0C1\uB300\uC2DC\uAC04 (1h/30m/2d/now) (\uD544\uC218)").option("--to <time>", "\uAC80\uC0C9 \uB05D: ISO8601 \uB610\uB294 \uC0C1\uB300\uC2DC\uAC04 (\uD544\uC218)").option("--output <file>", "\uCD9C\uB825 \uD30C\uC77C \uACBD\uB85C (\uD544\uC218)").option("--format <fmt>", "\uCD9C\uB825 \uD615\uC2DD: jsonl(\uAE30\uBCF8, \uD55C \uC904\uB2F9 \uD55C \uB85C\uADF8) \uB610\uB294 json(\uBC30\uC5F4)", "jsonl").option("--size <n>", "\uD3D0\uAE30 \uC608\uC815: Search v3\uC5D0\uC11C\uB294 \uBB34\uC2DC\uB428 (\uD638\uD658 \uAC80\uC99D \uBC94\uC704 10~100)").option("--force", "\uCD9C\uB825 \uD30C\uC77C\uC774 \uC788\uC73C\uBA74 \uB36E\uC5B4\uC4F4\uB2E4").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+var exportCommand = new import_commander6.Command("export").description("Log & Crash \uB85C\uADF8\uB97C scroll \uB85C \uC804\uCCB4 \uCD94\uCD9C\uD574 \uD30C\uC77C\uB85C \uC800\uC7A5 (\uB300\uB7C9 \uCD94\uCD9C)").option("--query <lucene>", "Lucene \uC9C8\uC758 \uBB38\uC790\uC5F4 (\uD544\uC218)").option("--from <time>", "\uAC80\uC0C9 \uC2DC\uC791: \uCD08\xB7\uC2DC\uAC04\uB300 \uD3EC\uD568 ISO8601 \uB610\uB294 \uC0C1\uB300\uC2DC\uAC04 (1h/30m/2d/now) (\uD544\uC218)").option("--to <time>", "\uAC80\uC0C9 \uB05D: \uCD08\xB7\uC2DC\uAC04\uB300 \uD3EC\uD568 ISO8601 \uB610\uB294 \uC0C1\uB300\uC2DC\uAC04 (\uD544\uC218)").option("--output <file>", "\uCD9C\uB825 \uD30C\uC77C \uACBD\uB85C (\uD544\uC218)").option("--format <fmt>", "\uCD9C\uB825 \uD615\uC2DD: jsonl(\uAE30\uBCF8, \uD55C \uC904\uB2F9 \uD55C \uB85C\uADF8) \uB610\uB294 json(\uBC30\uC5F4)", "jsonl").option("--size <n>", "\uD3D0\uAE30 \uC608\uC815: Search v3\uC5D0\uC11C\uB294 \uBB34\uC2DC\uB428 (\uD638\uD658 \uAC80\uC99D \uBC94\uC704 10~100)").option("--force", "\uCD9C\uB825 \uD30C\uC77C\uC774 \uC788\uC73C\uBA74 \uB36E\uC5B4\uC4F4\uB2E4").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   if (!opts.query) {
     throw new NhnCloudCliError(`--query \uC635\uC158\uC740 \uD544\uC218\uC785\uB2C8\uB2E4. \uC608: --query 'logType:"NORMAL"'`, EXIT_PARAM_ERROR);
@@ -3387,53 +3500,125 @@ var exportCommand = new import_commander6.Command("export").description("Log & C
   assertWritable(opts.output, opts.force ?? false);
   const client = await resolveLogncrashClient(opts.profile);
   const tmp = opts.output + "." + (0, import_node_crypto4.randomBytes)(4).toString("hex") + ".tmp";
-  const stream = (0, import_node_fs4.createWriteStream)(tmp, { encoding: "utf-8" });
+  let stream = (0, import_node_fs4.createWriteStream)(tmp, { encoding: "utf-8" });
   const spinner = startSpinner("\uB85C\uADF8 \uCD94\uCD9C \uC911...");
   let count = 0;
   let total = 0;
+  let hasUnqueriedWindows = false;
   let first = true;
+  let bytePosition = 0;
+  let resumeFrom = "";
+  const write = (chunk) => {
+    stream.write(chunk);
+    bytePosition += Buffer.byteLength(chunk, "utf-8");
+  };
   const writePage = (data) => {
     for (const log of data) {
       if (count >= MAX_TOTAL) break;
       const json = JSON.stringify(log);
-      stream.write(format === "json" ? first ? json : "," + json : json + "\n");
+      write(format === "json" ? first ? json : "," + json : json + "\n");
       first = false;
       count++;
     }
   };
   try {
-    if (format === "json") stream.write("[");
-    let res = await client.scrollStart({
-      query: opts.query,
-      from: fromIso,
-      to: toIso
-    });
-    total = res.totalItems;
-    writePage(res.data);
-    spinner.text = `\uB85C\uADF8 \uCD94\uCD9C \uC911... ${count}/${total}`;
-    while (res.data.length > 0 && res.scrollKey && count < Math.min(total, MAX_TOTAL)) {
-      res = await scrollNextWithHint(client, res.scrollKey);
-      writePage(res.data);
-      spinner.text = `\uB85C\uADF8 \uCD94\uCD9C \uC911... ${count}/${total}`;
-    }
-    if (format === "json") stream.write("]\n");
-    await new Promise((resolve, reject) => {
-      stream.once("error", reject);
-      stream.end(resolve);
-    });
+    if (format === "json") write("[");
+    let pendingWindows = [{ from: fromIso, to: toIso }];
+    let completedWindows = 0;
+    const progressText = () => {
+      const totalWindows = completedWindows + pendingWindows.length + 1;
+      const windowPart = totalWindows > 1 ? `\uCC3D ${completedWindows + 1}/${totalWindows} ` : "";
+      return `\uB85C\uADF8 \uCD94\uCD9C \uC911... ${windowPart}${count}/${total}`;
+    };
+    while (pendingWindows.length > 0) {
+      const window = pendingWindows.shift();
+      if (!window) break;
+      resumeFrom = window.from;
+      const checkpoint = {
+        bytesWritten: bytePosition,
+        count,
+        first,
+        total
+      };
+      try {
+        let res = await client.scrollStart({
+          query: opts.query,
+          from: window.from,
+          to: window.to
+        });
+        total += res.totalItems;
+        writePage(res.data);
+        spinner.text = progressText();
+        while (res.data.length > 0 && res.scrollKey && count < Math.min(total, MAX_TOTAL)) {
+          res = await scrollNextWithHint(client, res.scrollKey);
+          writePage(res.data);
+          spinner.text = progressText();
+        }
+        completedWindows++;
+        if (count >= MAX_TOTAL && pendingWindows.length > 0) {
+          hasUnqueriedWindows = true;
+          break;
+        }
+      } catch (err) {
+        if (!(err instanceof LogncrashServerError)) throw err;
+        await endAndClose(stream);
+        await (0, import_promises5.truncate)(tmp, checkpoint.bytesWritten);
+        stream = (0, import_node_fs4.createWriteStream)(tmp, { encoding: "utf-8", flags: "a" });
+        bytePosition = checkpoint.bytesWritten;
+        count = checkpoint.count;
+        first = checkpoint.first;
+        total = checkpoint.total;
+        const currentWindowMs = new Date(window.to).getTime() - new Date(window.from).getTime();
+        const smallerWindowMs = Math.ceil(currentWindowMs / 2);
+        if (smallerWindowMs < MIN_SPLIT_WINDOW_MS) throw err;
+        pendingWindows = splitTimeRange(window.from, toIso, smallerWindowMs);
+      }
+    }
+    await endAndClose(stream);
+    if (format === "json") await (0, import_promises5.appendFile)(tmp, "]\n");
   } catch (err) {
     stopSpinner(false);
+    const failure = isRateLimitError(err) ? withRateLimitHint(err) : err;
     await new Promise((resolve) => {
-      if (stream.destroyed && stream.closed) {
+      if (stream.closed) {
         resolve();
         return;
       }
       stream.once("close", () => resolve());
-      stream.destroy();
+      stream.once("error", () => resolve());
+      if (stream.destroyed) return;
+      stream.end();
     });
-    await (0, import_promises5.rm)(tmp, { force: true }).catch(() => {
-    });
-    throw err;
+    if (count === 0) {
+      await (0, import_promises5.rm)(tmp, { force: true }).catch(() => {
+      });
+      throw failure;
+    }
+    const partial = `${opts.output}.partial`;
+    try {
+      if (format === "json") await (0, import_promises5.appendFile)(tmp, "]\n");
+      await (0, import_promises5.rename)(tmp, partial);
+    } catch {
+      process.stderr.write(
+        `\uACBD\uACE0: \uBD80\uBD84 \uACB0\uACFC\uB97C ${partial} \uC5D0 \uB0A8\uAE30\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4. \uC784\uC2DC \uD30C\uC77C: ${tmp}
+`
+      );
+      throw failure;
+    }
+    process.stderr.write(`\uC548\uB0B4: \uC5EC\uAE30\uAE4C\uC9C0 \uBC1B\uC740 ${count}\uAC74\uC744 ${partial} \uC5D0 \uB0A8\uACBC\uC2B5\uB2C8\uB2E4.
+`);
+    if (resumeFrom === fromIso) {
+      process.stderr.write(
+        `\uC548\uB0B4: \uC774\uC5B4\uBC1B\uC744 \uC9C0\uC810\uC774 \uC5C6\uC2B5\uB2C8\uB2E4. \uAC19\uC740 \uBA85\uB839\uC744 \uB2E4\uC2DC \uC2E4\uD589\uD558\uBA74 ${count}\uAC74\uB3C4 \uB2E4\uC2DC \uC870\uD68C\uB429\uB2C8\uB2E4.
+`
+      );
+    } else {
+      process.stderr.write(
+        `\uC548\uB0B4: \uC774\uC5B4\uBC1B\uC73C\uB824\uBA74 --from "${resumeFrom}" --to "${toIso}" \uB85C \uB2E4\uC2DC \uC2E4\uD589\uD558\uC138\uC694. \uACBD\uACC4 \uAD6C\uAC04\uC758 \uB85C\uADF8\uAC00 \uC911\uBCF5\uB420 \uC218 \uC788\uC2B5\uB2C8\uB2E4.
+`
+      );
+    }
+    throw failure;
   }
   stopSpinner(true, `${count}\uAC74 \uCD94\uCD9C \uC644\uB8CC`);
   try {
@@ -3444,9 +3629,12 @@ var exportCommand = new import_commander6.Command("export").description("Log & C
     const reason = err.code ?? (err instanceof Error ? err.message : String(err));
     throw new NhnCloudCliError(`\uCD9C\uB825 \uD30C\uC77C\uC744 \uC4F8 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${opts.output} (${reason})`, EXIT_PARAM_ERROR);
   }
-  if (count >= MAX_TOTAL && total > MAX_TOTAL) {
+  await (0, import_promises5.rm)(`${opts.output}.partial`, { force: true }).catch(() => {
+  });
+  if (count >= MAX_TOTAL && (total > MAX_TOTAL || hasUnqueriedWindows)) {
+    const totalDescription = hasUnqueriedWindows ? `\uC870\uD68C\uD55C \uCC3D\uC5D0\uC11C ${total}\uAC74\uC744 \uD655\uC778\uD588\uACE0 \uB0A8\uC740 \uCC3D\uC744 \uC870\uD68C\uD558\uC9C0 \uC54A\uC740 \uCC44` : `\uC804\uCCB4 ${total}\uAC74 \uC911`;
     process.stderr.write(
-      `\uACBD\uACE0: \uC804\uCCB4 ${total}\uAC74 \uC911 \uC0C1\uD55C ${MAX_TOTAL}\uAC74\uAE4C\uC9C0\uB9CC \uCD94\uCD9C\uD588\uC2B5\uB2C8\uB2E4. \uAC80\uC0C9 \uBC94\uC704\uB97C \uC881\uD600 \uB098\uB220 \uCD94\uCD9C\uD558\uC138\uC694.
+      `\uACBD\uACE0: ${totalDescription} \uC0C1\uD55C ${MAX_TOTAL}\uAC74\uAE4C\uC9C0\uB9CC \uCD94\uCD9C\uD588\uC2B5\uB2C8\uB2E4. \uAC80\uC0C9 \uBC94\uC704\uB97C \uC881\uD600 \uB098\uB220 \uCD94\uCD9C\uD558\uC138\uC694.
 `
     );
   }
@@ -3457,6 +3645,8 @@ async function scrollNextWithHint(client, scrollKey) {
   try {
     return await client.scrollNext(scrollKey);
   } catch (err) {
+    if (isRateLimitError(err)) throw err;
+    if (err instanceof LogncrashServerError) throw err;
     if (err instanceof NhnCloudCliError && err.exitCode === EXIT_API_ERROR) {
       throw new NhnCloudCliError(
         `scroll \uB2E4\uC74C \uD398\uC774\uC9C0 \uC694\uCCAD\uC774 \uC2E4\uD328\uD588\uC2B5\uB2C8\uB2E4 (\uC6D0\uC778: ${err.message}). \uAC80\uC0C9 \uBC94\uC704\uB97C \uC881\uD600 \uB2E4\uC2DC \uC2E4\uD589\uD558\uC138\uC694.`,
@@ -3466,12 +3656,19 @@ async function scrollNextWithHint(client, scrollKey) {
     throw err;
   }
 }
+async function endAndClose(stream) {
+  await new Promise((resolve, reject) => {
+    stream.once("error", reject);
+    stream.once("close", resolve);
+    stream.end();
+  });
+}
 
 // src/commands/deploy/run.ts
 var import_commander7 = require("commander");
 
 // src/services/deploy/client.ts
-var import_ky7 = __toESM(require("ky"));
+var import_ky8 = __toESM(require("ky"));
 function isBinaryGroup(val) {
   if (typeof val !== "object" || val === null) return false;
   const obj = val;
@@ -3517,7 +3714,7 @@ var DeployClient = class {
       payload["targetServerHostnames"] = params.targetHosts;
     }
     try {
-      const res = await import_ky7.default.post(url, {
+      const res = await import_ky8.default.post(url, {
         headers: {
           ...this.authHeaders(),
           "Content-Type": "application/json"
@@ -3537,7 +3734,7 @@ var DeployClient = class {
   async artifacts(appKey) {
     const url = `${this.baseUrl}/api/v2.1/projects/${encodeURIComponent(appKey)}/artifacts`;
     try {
-      const res = await import_ky7.default.get(url, {
+      const res = await import_ky8.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -3553,7 +3750,7 @@ var DeployClient = class {
   async serverGroups(appKey, artifactId) {
     const url = `${this.baseUrl}/api/v2.1/projects/${encodeURIComponent(appKey)}/artifacts/${encodeURIComponent(artifactId)}/server-groups`;
     try {
-      const res = await import_ky7.default.get(url, {
+      const res = await import_ky8.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -3569,7 +3766,7 @@ var DeployClient = class {
   async histories(appKey, artifactId) {
     const url = `${this.baseUrl}/api/v2.1/projects/${encodeURIComponent(appKey)}/artifacts/${encodeURIComponent(artifactId)}/deploy-histories`;
     try {
-      const res = await import_ky7.default.get(url, {
+      const res = await import_ky8.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -3585,7 +3782,7 @@ var DeployClient = class {
   async binaryGroups(appKey, artifactId) {
     const url = `${this.baseUrl}/api/v2.1/projects/${encodeURIComponent(appKey)}/artifacts/${encodeURIComponent(artifactId)}/binary-groups`;
     try {
-      const res = await import_ky7.default.get(url, {
+      const res = await import_ky8.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -3615,7 +3812,7 @@ var DeployClient = class {
     if (params.sortKey !== void 0) searchParams["sortKey"] = params.sortKey;
     if (params.sortDirection !== void 0) searchParams["sortDirection"] = params.sortDirection;
     try {
-      const res = await import_ky7.default.get(url, {
+      const res = await import_ky8.default.get(url, {
         headers: this.authHeaders(),
         searchParams,
         retry: 0,
@@ -3657,7 +3854,7 @@ var DeployClient = class {
       form.append("description", params.description);
     }
     try {
-      const res = await import_ky7.default.post(url, {
+      const res = await import_ky8.default.post(url, {
         headers: this.authHeaders(),
         // 인증 헤더만 — multipart boundary 는 ky 가 자동 설정
         body: form,
@@ -3693,7 +3890,7 @@ var DeployClient = class {
   async downloadBinary(appKey, artifactId, binaryGroupKey, binaryKey) {
     const url = `${this.baseUrl}/api/v2.1/projects/${encodeURIComponent(appKey)}/artifacts/${encodeURIComponent(artifactId)}/binary-group/${binaryGroupKey}/binaries/${binaryKey}`;
     try {
-      const ab = await import_ky7.default.get(url, {
+      const ab = await import_ky8.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: SYNC_TIMEOUT_MS
@@ -3953,9 +4150,9 @@ var uploadCommand = new import_commander13.Command("upload").description("\uB85C
     throw new NhnCloudCliError("--binary-group \uC774 \uD544\uC694\uD569\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
   }
   const filePath = opts.file;
-  let stat2;
+  let stat3;
   try {
-    stat2 = (0, import_node_fs5.statSync)(filePath);
+    stat3 = (0, import_node_fs5.statSync)(filePath);
   } catch (e) {
     const reason = e.code ?? (e instanceof Error ? e.message : String(e));
     throw new NhnCloudCliError(
@@ -3963,12 +4160,12 @@ var uploadCommand = new import_commander13.Command("upload").description("\uB85C
       EXIT_PARAM_ERROR
     );
   }
-  if (!stat2.isFile()) {
+  if (!stat3.isFile()) {
     throw new NhnCloudCliError(`--file \uC774 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${filePath}`, EXIT_PARAM_ERROR);
   }
-  if (stat2.size > MAX_UPLOAD_BYTES) {
+  if (stat3.size > MAX_UPLOAD_BYTES) {
     throw new NhnCloudCliError(
-      `--file \uC774 \uB108\uBB34 \uD07D\uB2C8\uB2E4 (${stat2.size} \uBC14\uC774\uD2B8). \uC5C5\uB85C\uB4DC \uD55C\uB3C4 ${MAX_UPLOAD_BYTES} \uBC14\uC774\uD2B8.`,
+      `--file \uC774 \uB108\uBB34 \uD07D\uB2C8\uB2E4 (${stat3.size} \uBC14\uC774\uD2B8). \uC5C5\uB85C\uB4DC \uD55C\uB3C4 ${MAX_UPLOAD_BYTES} \uBC14\uC774\uD2B8.`,
       EXIT_PARAM_ERROR
     );
   }
@@ -4079,7 +4276,7 @@ async function resolveIaasTokenContext(opts) {
 }
 
 // src/services/instance/client.ts
-var import_ky8 = __toESM(require("ky"));
+var import_ky9 = __toESM(require("ky"));
 var DEFAULT_POLL_INTERVAL_MS = 5e3;
 function isServer(val) {
   if (typeof val !== "object" || val === null) return false;
@@ -4208,7 +4405,7 @@ var InstanceClient = class {
   async list() {
     const url = `${this.computeEndpoint}/servers/detail`;
     try {
-      const raw = await import_ky8.default.get(url, {
+      const raw = await import_ky9.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -4230,7 +4427,7 @@ var InstanceClient = class {
   async get(id) {
     const url = `${this.computeEndpoint}/servers/${encodeURIComponent(id)}`;
     try {
-      const raw = await import_ky8.default.get(url, {
+      const raw = await import_ky9.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -4289,7 +4486,7 @@ var InstanceClient = class {
     }
     let raw;
     try {
-      raw = await import_ky8.default.post(url, {
+      raw = await import_ky9.default.post(url, {
         headers: this.authHeaders(),
         json: { server: serverBody },
         retry: 0,
@@ -4312,7 +4509,7 @@ var InstanceClient = class {
   async delete(id) {
     const url = `${this.computeEndpoint}/servers/${encodeURIComponent(id)}`;
     try {
-      await import_ky8.default.delete(url, {
+      await import_ky9.default.delete(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -4330,7 +4527,7 @@ var InstanceClient = class {
   async serverAction(id, payload) {
     const url = `${this.computeEndpoint}/servers/${encodeURIComponent(id)}/action`;
     try {
-      await import_ky8.default.post(url, {
+      await import_ky9.default.post(url, {
         headers: this.authHeaders(),
         json: payload,
         retry: 0,
@@ -4375,7 +4572,7 @@ var InstanceClient = class {
     if (params.minDisk !== void 0) searchParams["minDisk"] = params.minDisk;
     if (params.minRam !== void 0) searchParams["minRam"] = params.minRam;
     try {
-      const raw = await import_ky8.default.get(url, {
+      const raw = await import_ky9.default.get(url, {
         headers: this.authHeaders(),
         searchParams,
         retry: 0,
@@ -4408,7 +4605,7 @@ var InstanceClient = class {
   async listAvailabilityZones() {
     const url = `${this.computeEndpoint}/os-availability-zone`;
     try {
-      const raw = await import_ky8.default.get(url, {
+      const raw = await import_ky9.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -4428,7 +4625,7 @@ var InstanceClient = class {
   async listKeypairs() {
     const url = `${this.computeEndpoint}/os-keypairs`;
     try {
-      const raw = await import_ky8.default.get(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS }).json();
+      const raw = await import_ky9.default.get(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS }).json();
       if (!isKeypairsResponse(raw)) {
         throw new NhnCloudCliError(
           "instance keypairs \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 keypairs \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
@@ -4444,7 +4641,7 @@ var InstanceClient = class {
   async getKeypair(name) {
     const url = `${this.computeEndpoint}/os-keypairs/${encodeURIComponent(name)}`;
     try {
-      const raw = await import_ky8.default.get(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS }).json();
+      const raw = await import_ky9.default.get(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS }).json();
       if (!isKeypairDetailResponse(raw)) {
         throw new NhnCloudCliError(
           `instance keypair get(${name}) \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 keypair \uC0C1\uC138 \uD544\uB4DC\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.`,
@@ -4469,7 +4666,7 @@ var InstanceClient = class {
     }
     let raw;
     try {
-      raw = await import_ky8.default.post(url, {
+      raw = await import_ky9.default.post(url, {
         headers: this.authHeaders(),
         json: { keypair: keypairBody },
         retry: 0,
@@ -4498,7 +4695,7 @@ var InstanceClient = class {
   async deleteKeypair(name) {
     const url = `${this.computeEndpoint}/os-keypairs/${encodeURIComponent(name)}`;
     try {
-      await import_ky8.default.delete(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS });
+      await import_ky9.default.delete(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS });
     } catch (err) {
       throw toNhnCloudCliError(err);
     }
@@ -4518,7 +4715,7 @@ var InstanceClient = class {
     if (params.owner !== void 0) searchParams["owner"] = params.owner;
     if (params.status !== void 0) searchParams["status"] = params.status;
     try {
-      const raw = await import_ky8.default.get(url, {
+      const raw = await import_ky9.default.get(url, {
         headers: this.authHeaders(),
         searchParams,
         retry: 0,
@@ -4542,7 +4739,7 @@ var InstanceClient = class {
   async listVolumeAttachments(serverId) {
     const url = `${this.computeEndpoint}/servers/${encodeURIComponent(serverId)}/os-volume_attachments`;
     try {
-      const raw = await import_ky8.default.get(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS }).json();
+      const raw = await import_ky9.default.get(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS }).json();
       if (!isVolumeAttachmentsResponse(raw)) {
         throw new NhnCloudCliError(
           "instance volumes \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 volumeAttachments \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
@@ -4561,7 +4758,7 @@ var InstanceClient = class {
   async attachVolume(serverId, volumeId) {
     const url = `${this.computeEndpoint}/servers/${encodeURIComponent(serverId)}/os-volume_attachments`;
     try {
-      const res = await import_ky8.default.post(url, {
+      const res = await import_ky9.default.post(url, {
         headers: this.authHeaders(),
         json: { volumeAttachment: { volumeId } },
         retry: 0,
@@ -4589,7 +4786,7 @@ var InstanceClient = class {
   async detachVolume(serverId, volumeId) {
     const url = `${this.computeEndpoint}/servers/${encodeURIComponent(serverId)}/os-volume_attachments/${encodeURIComponent(volumeId)}`;
     try {
-      await import_ky8.default.delete(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS });
+      await import_ky9.default.delete(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS });
     } catch (err) {
       throw toNhnCloudCliError(err);
     }
@@ -4656,7 +4853,7 @@ var listCommand = new import_commander15.Command("list").description("\uC778\uC2
 var import_commander16 = require("commander");
 
 // src/services/blockstorage/client.ts
-var import_ky9 = __toESM(require("ky"));
+var import_ky10 = __toESM(require("ky"));
 function isVolume(val) {
   if (typeof val !== "object" || val === null) return false;
   const obj = val;
@@ -4687,7 +4884,7 @@ var BlockStorageClient = class {
     if (params?.offset !== void 0) searchParams["offset"] = params.offset;
     if (params?.marker !== void 0) searchParams["marker"] = params.marker;
     try {
-      const raw = await import_ky9.default.get(url, { headers: this.authHeaders(), searchParams, retry: 0, timeout: DEFAULT_TIMEOUT_MS }).json();
+      const raw = await import_ky10.default.get(url, { headers: this.authHeaders(), searchParams, retry: 0, timeout: DEFAULT_TIMEOUT_MS }).json();
       if (typeof raw !== "object" || raw === null) {
         throw new NhnCloudCliError(
           "volume list \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 volumes \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
@@ -4715,7 +4912,7 @@ var BlockStorageClient = class {
   async get(id) {
     const url = `${this.endpoint}/volumes/${encodeURIComponent(id)}`;
     try {
-      const raw = await import_ky9.default.get(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS }).json();
+      const raw = await import_ky10.default.get(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS }).json();
       if (!isVolumeResponse(raw)) {
         throw new NhnCloudCliError(
           "volume get \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 volume \uAC1D\uCCB4\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.",
@@ -4736,7 +4933,7 @@ var BlockStorageClient = class {
     if (params.availability_zone !== void 0) volumeBody["availability_zone"] = params.availability_zone;
     if (params.snapshot_id !== void 0) volumeBody["snapshot_id"] = params.snapshot_id;
     try {
-      const raw = await import_ky9.default.post(url, {
+      const raw = await import_ky10.default.post(url, {
         headers: this.authHeaders(),
         json: { volume: volumeBody },
         retry: 0,
@@ -4895,7 +5092,7 @@ var createCommand = new import_commander18.Command("create").description("\uBCFC
 var import_commander19 = require("commander");
 
 // src/services/network/client.ts
-var import_ky10 = __toESM(require("ky"));
+var import_ky11 = __toESM(require("ky"));
 function isVpc(val) {
   if (typeof val !== "object" || val === null) return false;
   const obj = val;
@@ -4948,7 +5145,7 @@ var NetworkClient = class {
   async listVpcs() {
     const url = `${this.networkEndpoint}/vpcs`;
     try {
-      const raw = await import_ky10.default.get(url, {
+      const raw = await import_ky11.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -4970,7 +5167,7 @@ var NetworkClient = class {
   async listSubnets() {
     const url = `${this.networkEndpoint}/vpcsubnets`;
     try {
-      const raw = await import_ky10.default.get(url, {
+      const raw = await import_ky11.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -4990,7 +5187,7 @@ var NetworkClient = class {
   async listFloatingIps() {
     const url = `${this.networkEndpoint}/floatingips`;
     try {
-      const raw = await import_ky10.default.get(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS }).json();
+      const raw = await import_ky11.default.get(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS }).json();
       if (!isFloatingIpsResponse(raw)) {
         throw new NhnCloudCliError(
           "floatingip list \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 floatingips \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
@@ -5006,7 +5203,7 @@ var NetworkClient = class {
   async createFloatingIp(params) {
     const url = `${this.networkEndpoint}/floatingips`;
     try {
-      const raw = await import_ky10.default.post(url, {
+      const raw = await import_ky11.default.post(url, {
         headers: this.authHeaders(),
         json: { floatingip: { floating_network_id: params.floating_network_id } },
         retry: 0,
@@ -5027,7 +5224,7 @@ var NetworkClient = class {
   async deleteFloatingIp(id) {
     const url = `${this.networkEndpoint}/floatingips/${encodeURIComponent(id)}`;
     try {
-      await import_ky10.default.delete(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS });
+      await import_ky11.default.delete(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS });
     } catch (err) {
       throw toNhnCloudCliError(err);
     }
@@ -5041,7 +5238,7 @@ var NetworkClient = class {
   async findExternalNetworkId() {
     const url = `${this.networkEndpoint}/vpcs`;
     try {
-      const raw = await import_ky10.default.get(url, {
+      const raw = await import_ky11.default.get(url, {
         headers: this.authHeaders(),
         searchParams: { "router:external": "true" },
         retry: 0,
@@ -5360,9 +5557,9 @@ var createCommand3 = new import_commander27.Command("create").description("\uC77
   }
   let userDataBase64;
   if (opts.userData !== void 0) {
-    let stat2;
+    let stat3;
     try {
-      stat2 = (0, import_node_fs7.statSync)(opts.userData);
+      stat3 = (0, import_node_fs7.statSync)(opts.userData);
     } catch (e) {
       const reason = e.code ?? (e instanceof Error ? e.message : String(e));
       throw new NhnCloudCliError(
@@ -5370,15 +5567,15 @@ var createCommand3 = new import_commander27.Command("create").description("\uC77
         EXIT_PARAM_ERROR
       );
     }
-    if (!stat2.isFile()) {
+    if (!stat3.isFile()) {
       throw new NhnCloudCliError(
         `--user-data \uAC00 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${opts.userData}`,
         EXIT_PARAM_ERROR
       );
     }
-    if (stat2.size > 49149) {
+    if (stat3.size > 49149) {
       throw new NhnCloudCliError(
-        `--user-data \uAC00 \uB108\uBB34 \uD07D\uB2C8\uB2E4 (${stat2.size} \uBC14\uC774\uD2B8). base64 \uC778\uCF54\uB529 \uD6C4 65535 \uBC14\uC774\uD2B8 \uD55C\uB3C4\uB77C raw 49149 \uBC14\uC774\uD2B8\uAE4C\uC9C0\uB9CC \uD5C8\uC6A9\uB429\uB2C8\uB2E4.`,
+        `--user-data \uAC00 \uB108\uBB34 \uD07D\uB2C8\uB2E4 (${stat3.size} \uBC14\uC774\uD2B8). base64 \uC778\uCF54\uB529 \uD6C4 65535 \uBC14\uC774\uD2B8 \uD55C\uB3C4\uB77C raw 49149 \uBC14\uC774\uD2B8\uAE4C\uC9C0\uB9CC \uD5C8\uC6A9\uB429\uB2C8\uB2E4.`,
         EXIT_PARAM_ERROR
       );
     }
@@ -5663,9 +5860,9 @@ var import_node_fs8 = require("fs");
 var import_node_crypto5 = require("crypto");
 var import_chalk11 = __toESM(require("chalk"));
 function resolvePublicKey(value) {
-  let stat2;
+  let stat3;
   try {
-    stat2 = (0, import_node_fs8.statSync)(value);
+    stat3 = (0, import_node_fs8.statSync)(value);
   } catch (e) {
     const err = e;
     if (err.code && err.code !== "ENOENT") {
@@ -5676,7 +5873,7 @@ function resolvePublicKey(value) {
     }
     return value;
   }
-  if (!stat2.isFile()) {
+  if (!stat3.isFile()) {
     throw new NhnCloudCliError(`--public-key \uAC00 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${value}`, EXIT_PARAM_ERROR);
   }
   return (0, import_node_fs8.readFileSync)(value, "utf-8").trim();
@@ -5880,7 +6077,7 @@ var volumesCommand = new import_commander35.Command("volumes").description("\uC7
 var import_commander36 = require("commander");
 
 // src/services/ncr/harbor-client.ts
-var import_ky11 = __toESM(require("ky"));
+var import_ky12 = __toESM(require("ky"));
 var PAGE_SIZE = 100;
 var MAX_PAGES = 1e3;
 var HarborClient = class {
@@ -5909,7 +6106,7 @@ var HarborClient = class {
     try {
       for (; ; ) {
         const url = `https://${this.host}${path5}?page=${page}&page_size=${PAGE_SIZE}`;
-        const res = await import_ky11.default.get(url, {
+        const res = await import_ky12.default.get(url, {
           headers: this.basicAuthHeaders(),
           retry: 0,
           timeout: DEFAULT_TIMEOUT_MS
@@ -6208,7 +6405,7 @@ var import_commander41 = require("commander");
 var import_promises6 = require("fs/promises");
 
 // src/services/nks/client.ts
-var import_ky12 = __toESM(require("ky"));
+var import_ky13 = __toESM(require("ky"));
 
 // src/services/nks/types.ts
 function isNksClusterSummary(val) {
@@ -6266,6 +6463,11 @@ function isBooleanLike(val) {
 function isNksUuidResponse(val) {
   return isPlainObject(val) && typeof val["uuid"] === "string";
 }
+function isNksClusterEvent(val) {
+  if (!isPlainObject(val)) return false;
+  if ("header" in val || "body" in val) return false;
+  return typeof val["id"] === "number" && typeof val["uuid"] === "string";
+}
 
 // src/services/nks/client.ts
 function isArrayFieldResponse(key, val, itemGuard) {
@@ -6276,8 +6478,8 @@ function isArrayFieldResponse(key, val, itemGuard) {
 function isClustersResponse(val) {
   return isArrayFieldResponse("clusters", val, isNksClusterSummary);
 }
-function isNamedResourceArrayResponse(key, val) {
-  return isArrayFieldResponse(key, val, isNksNamedResource);
+function isClusterEventsResponse(val) {
+  return isArrayFieldResponse("events", val, isNksClusterEvent);
 }
 function isConfigResponse(val) {
   if (typeof val !== "object" || val === null) return false;
@@ -6310,7 +6512,7 @@ var NksClient = class {
   async supports() {
     const url = `${this.nksEndpoint}/supports`;
     try {
-      const raw = await import_ky12.default.get(url, {
+      const raw = await import_ky13.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -6330,7 +6532,7 @@ var NksClient = class {
   async listClusters() {
     const url = `${this.nksEndpoint}/clusters`;
     try {
-      const raw = await import_ky12.default.get(url, {
+      const raw = await import_ky13.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -6405,18 +6607,29 @@ var NksClient = class {
       "nks cluster set-control-plane-log \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 uuid \uD544\uB4DC\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4."
     );
   }
-  async listClusterEvents(cluster) {
-    return this.getNamedResourceArray(
-      "events",
-      `/clusters/${encodeURIComponent(cluster)}/events`,
-      "nks cluster events \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 events \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4."
-    );
+  /** 이벤트 엔드포인트는 클러스터 이름을 받지 않는다. 반드시 UUID 를 넘긴다. */
+  async listClusterEvents(clusterUuid) {
+    const raw = await this.getJson(`/clusters/${encodeURIComponent(clusterUuid)}/events`);
+    if (!isClusterEventsResponse(raw)) {
+      throw new NhnCloudCliError(
+        "nks cluster events \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 events \uBC30\uC5F4\uC774 \uC5C6\uAC70\uB098 \uD56D\uBAA9\uC5D0 id / uuid \uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.",
+        EXIT_API_ERROR
+      );
+    }
+    return raw.events;
   }
-  async getClusterEvent(cluster, event) {
-    return this.getFlatNamedResource(
-      `/clusters/${encodeURIComponent(cluster)}/events/${encodeURIComponent(event)}`,
-      "nks cluster event \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 event \uAC1D\uCCB4\uAC00 \uC544\uB2D9\uB2C8\uB2E4."
+  /** event 는 정수 `id` 가 아니라 `uuid` 로 조회한다. `id` 를 넘기면 서버가 400 을 준다. */
+  async getClusterEvent(clusterUuid, eventUuid) {
+    const raw = await this.getJson(
+      `/clusters/${encodeURIComponent(clusterUuid)}/events/${encodeURIComponent(eventUuid)}`
     );
+    if (!isNksClusterEvent(raw)) {
+      throw new NhnCloudCliError(
+        "nks cluster event \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 id / uuid \uAC00 \uC788\uB294 event \uAC1D\uCCB4\uAC00 \uC544\uB2D9\uB2C8\uB2E4.",
+        EXIT_API_ERROR
+      );
+    }
+    return raw;
   }
   async getClusterKubeconfig(cluster) {
     const raw = await this.getJson(`/clusters/${encodeURIComponent(cluster)}/config`);
@@ -6627,7 +6840,7 @@ var NksClient = class {
   async removeClusterAddon(cluster, addon) {
     const url = `${this.nksEndpoint}/clusters/${encodeURIComponent(cluster)}/addons/${encodeURIComponent(addon)}`;
     try {
-      const raw = await import_ky12.default.delete(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS }).json();
+      const raw = await import_ky13.default.delete(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS }).json();
       if (!isNksUuidResponse(raw)) {
         throw new NhnCloudCliError(
           "nks cluster addon remove \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 uuid \uD544\uB4DC\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.",
@@ -6639,13 +6852,6 @@ var NksClient = class {
       throw toNhnCloudCliError(err);
     }
   }
-  async getNamedResourceArray(key, path5, errorMessage) {
-    const raw = await this.getJson(path5);
-    if (!isNamedResourceArrayResponse(key, raw)) {
-      throw new NhnCloudCliError(errorMessage, EXIT_API_ERROR);
-    }
-    return raw[key];
-  }
   async getFlatNamedResource(path5, errorMessage) {
     const raw = await this.getJson(path5);
     if (!isNksNamedResource(raw)) {
@@ -6656,7 +6862,7 @@ var NksClient = class {
   async getJson(path5, searchParams) {
     const url = `${this.nksEndpoint}${path5}`;
     try {
-      return await import_ky12.default.get(url, {
+      return await import_ky13.default.get(url, {
         headers: this.authHeaders(),
         searchParams,
         retry: 0,
@@ -6677,10 +6883,10 @@ var NksClient = class {
     const url = `${this.nksEndpoint}${path5}`;
     try {
       if (method === "delete") {
-        await import_ky12.default.delete(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS });
+        await import_ky13.default.delete(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS });
         return;
       }
-      await import_ky12.default.post(url, { headers: this.authHeaders(), json: payload, retry: 0, timeout: DEFAULT_TIMEOUT_MS });
+      await import_ky13.default.post(url, { headers: this.authHeaders(), json: payload, retry: 0, timeout: DEFAULT_TIMEOUT_MS });
     } catch (err) {
       throw toNhnCloudCliError(err);
     }
@@ -6689,7 +6895,7 @@ var NksClient = class {
     const url = `${this.nksEndpoint}${path5}`;
     try {
       const options = { headers: this.authHeaders(), json: payload, retry: 0, timeout: DEFAULT_TIMEOUT_MS };
-      return method === "post" ? await import_ky12.default.post(url, options).json() : await import_ky12.default.patch(url, options).json();
+      return method === "post" ? await import_ky13.default.post(url, options).json() : await import_ky13.default.patch(url, options).json();
     } catch (err) {
       throw toNhnCloudCliError(err);
     }
@@ -6709,6 +6915,22 @@ async function resolveNksClient(opts) {
   const { profileName, tokenId, nksEndpoint } = await resolveIaasTokenContext(opts);
   return { client: new NksClient(tokenId, nksEndpoint), profileName };
 }
+var UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function isUuid(value) {
+  return UUID_PATTERN.test(value);
+}
+async function resolveClusterUuid(client, cluster) {
+  if (isUuid(cluster)) return cluster;
+  const detail = await client.getCluster(cluster);
+  const uuid = detail.uuid;
+  if (typeof uuid !== "string" || uuid === "") {
+    throw new NhnCloudCliError(
+      `\uD074\uB7EC\uC2A4\uD130 "${cluster}" \uC758 UUID \uB97C \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4 \u2014 \uC751\uB2F5\uC5D0 uuid \uD544\uB4DC\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.`,
+      EXIT_API_ERROR
+    );
+  }
+  return uuid;
+}
 async function readJsonFile(path5) {
   let raw;
   try {
@@ -6813,6 +7035,16 @@ function resourceRow(resource) {
     resource.status ?? ""
   ];
 }
+function eventRow(event) {
+  return [
+    event.uuid,
+    String(event.id),
+    event.type ?? "",
+    event.state ?? "",
+    event.resource_name ?? "",
+    event.created_at ?? ""
+  ];
+}
 function addonRow(addon) {
   return [
     addon.uuid ?? addon.id ?? addon.name,
@@ -7015,36 +7247,48 @@ var eventsCommand = new import_commander42.Command("events").description("NKS \u
   startSpinner("NKS \uD074\uB7EC\uC2A4\uD130 \uC791\uC5C5 \uC774\uB825 \uC870\uD68C \uC911...");
   let events;
   try {
-    events = await client.listClusterEvents(cluster);
+    const clusterUuid = await resolveClusterUuid(client, cluster);
+    events = await client.listClusterEvents(clusterUuid);
   } catch (err) {
     stopSpinner(false);
     throw err;
   }
   stopSpinner(true);
   output(opts, {
-    headers: ["id", "name", "status"],
-    rows: events.map(resourceRow),
+    headers: ["uuid", "id", "type", "state", "resource_name", "created_at"],
+    rows: events.map(eventRow),
     raw: events,
-    ids: events.map(resourceId)
+    // 단건 조회가 uuid 로만 되므로 --quiet 식별자도 uuid 를 쓴다.
+    ids: events.map((event) => event.uuid)
   });
 });
-var eventCommand = new import_commander42.Command("event").description("NKS \uD074\uB7EC\uC2A4\uD130 \uC791\uC5C5 \uC774\uB825 \uB2E8\uAC74\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<cluster>", "\uD074\uB7EC\uC2A4\uD130 UUID \uB610\uB294 \uC774\uB984").argument("<event>", "\uC791\uC5C5 \uC774\uB825 UUID \uB610\uB294 ID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (cluster, event, _opts, cmd) => {
+var eventCommand = new import_commander42.Command("event").description("NKS \uD074\uB7EC\uC2A4\uD130 \uC791\uC5C5 \uC774\uB825 \uB2E8\uAC74\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<cluster>", "\uD074\uB7EC\uC2A4\uD130 UUID \uB610\uB294 \uC774\uB984").argument("<event>", "\uC791\uC5C5 \uC774\uB825 UUID (\uC815\uC218 id \uAC00 \uC544\uB2C8\uB2E4)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (cluster, event, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
+  if (!isUuid(event)) {
+    throw new NhnCloudCliError(
+      `\uC791\uC5C5 \uC774\uB825\uC740 UUID \uB85C \uC870\uD68C\uD55C\uB2E4. events \uCD9C\uB825\uC758 uuid \uC5F4 \uAC12\uC744 \uB118\uAE34\uB2E4 (\uC785\uB825: ${JSON.stringify(event)}).`,
+      EXIT_PARAM_ERROR
+    );
+  }
   const { client } = await resolveNksClient(opts);
   startSpinner("NKS \uD074\uB7EC\uC2A4\uD130 \uC791\uC5C5 \uC774\uB825 \uC870\uD68C \uC911...");
   let result;
   try {
-    result = await client.getClusterEvent(cluster, event);
+    const clusterUuid = await resolveClusterUuid(client, cluster);
+    result = await client.getClusterEvent(clusterUuid, event);
   } catch (err) {
     stopSpinner(false);
     throw err;
   }
   stopSpinner(true);
   output(opts, {
-    headers: ["id", "name", "status"],
-    rows: [resourceRow(result)],
+    headers: ["field", "value"],
+    rows: Object.entries(result).map(([key, value]) => [
+      key,
+      truncate(typeof value === "object" && value !== null ? JSON.stringify(value) : String(value), 80)
+    ]),
     raw: result,
-    ids: [resourceId(result)]
+    ids: [result.uuid]
   });
 });
 var kubeconfigCommand = new import_commander42.Command("kubeconfig").description("NKS \uD074\uB7EC\uC2A4\uD130 kubeconfig \uB97C \uCD9C\uB825\uD558\uAC70\uB098 \uC800\uC7A5\uD55C\uB2E4").argument("<cluster>", "\uD074\uB7EC\uC2A4\uD130 UUID \uB610\uB294 \uC774\uB984").option("--output <file>", "kubeconfig \uC800\uC7A5 \uACBD\uB85C").option("--force", "\uAE30\uC874 \uD30C\uC77C \uB36E\uC5B4\uC4F0\uAE30").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (cluster, _opts, cmd) => {
@@ -7133,7 +7377,7 @@ function parseResolveConflicts(value) {
     EXIT_PARAM_ERROR
   );
 }
-var clusterAddonInstallCommand = new import_commander42.Command("install").description("NKS \uD074\uB7EC\uC2A4\uD130 \uC560\uB4DC\uC628\uC744 \uC124\uCE58\uD55C\uB2E4").argument("<cluster>", "\uD074\uB7EC\uC2A4\uD130 UUID \uB610\uB294 \uC774\uB984").requiredOption("--name <name>", "\uC560\uB4DC\uC628 \uC774\uB984").requiredOption("--version <version>", "\uC560\uB4DC\uC628 \uBC84\uC804").requiredOption("--resolve-conflicts <none|overwrite|preserve>", "\uCDA9\uB3CC \uD574\uACB0 \uC815\uCC45").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (cluster, _opts, cmd) => {
+var clusterAddonInstallCommand = new import_commander42.Command("install").description("NKS \uD074\uB7EC\uC2A4\uD130 \uC560\uB4DC\uC628\uC744 \uC124\uCE58\uD55C\uB2E4").argument("<cluster>", "\uD074\uB7EC\uC2A4\uD130 UUID \uB610\uB294 \uC774\uB984").requiredOption("--name <name>", "\uC560\uB4DC\uC628 \uC774\uB984").requiredOption("--addon-version <version>", "\uC560\uB4DC\uC628 \uBC84\uC804").requiredOption("--resolve-conflicts <none|overwrite|preserve>", "\uCDA9\uB3CC \uD574\uACB0 \uC815\uCC45").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (cluster, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   const resolveConflicts = parseResolveConflicts(opts.resolveConflicts);
   const { client } = await resolveNksClient(opts);
@@ -7142,7 +7386,7 @@ var clusterAddonInstallCommand = new import_commander42.Command("install").descr
   try {
     result = await client.installClusterAddon(cluster, {
       name: opts.name,
-      version: opts.version,
+      version: opts.addonVersion,
       resolveConflicts
     });
   } catch (err) {
@@ -7152,7 +7396,7 @@ var clusterAddonInstallCommand = new import_commander42.Command("install").descr
   stopSpinner(true);
   uuidOutput(opts, result, "\uD074\uB7EC\uC2A4\uD130 \uC560\uB4DC\uC628 \uC124\uCE58");
 });
-var clusterAddonUpdateCommand = new import_commander42.Command("update").description("NKS \uD074\uB7EC\uC2A4\uD130 \uC560\uB4DC\uC628\uC744 \uC5C5\uB370\uC774\uD2B8\uD55C\uB2E4").argument("<cluster>", "\uD074\uB7EC\uC2A4\uD130 UUID \uB610\uB294 \uC774\uB984").argument("<addon>", "\uC560\uB4DC\uC628 UUID \uB610\uB294 \uC774\uB984").requiredOption("--version <version>", "\uC560\uB4DC\uC628 \uBC84\uC804").requiredOption("--resolve-conflicts <none|overwrite|preserve>", "\uCDA9\uB3CC \uD574\uACB0 \uC815\uCC45").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (cluster, addon, _opts, cmd) => {
+var clusterAddonUpdateCommand = new import_commander42.Command("update").description("NKS \uD074\uB7EC\uC2A4\uD130 \uC560\uB4DC\uC628\uC744 \uC5C5\uB370\uC774\uD2B8\uD55C\uB2E4").argument("<cluster>", "\uD074\uB7EC\uC2A4\uD130 UUID \uB610\uB294 \uC774\uB984").argument("<addon>", "\uC560\uB4DC\uC628 UUID \uB610\uB294 \uC774\uB984").requiredOption("--addon-version <version>", "\uC560\uB4DC\uC628 \uBC84\uC804").requiredOption("--resolve-conflicts <none|overwrite|preserve>", "\uCDA9\uB3CC \uD574\uACB0 \uC815\uCC45").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (cluster, addon, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   const resolveConflicts = parseResolveConflicts(opts.resolveConflicts);
   const { client } = await resolveNksClient(opts);
@@ -7160,7 +7404,7 @@ var clusterAddonUpdateCommand = new import_commander42.Command("update").descrip
   let result;
   try {
     result = await client.updateClusterAddon(cluster, addon, {
-      version: opts.version,
+      version: opts.addonVersion,
       resolveConflicts
     });
   } catch (err) {
@@ -7379,14 +7623,14 @@ var setMetricAutoscaleCommand = new import_commander43.Command("set-metric-autos
   stopSpinner(true);
   uuidOutput2(opts, result, "metric autoscale \uBCC0\uACBD");
 });
-var upgradeCommand = new import_commander43.Command("upgrade").description("NKS \uB178\uB4DC \uADF8\uB8F9 Kubernetes version \uC744 \uC5C5\uADF8\uB808\uC774\uB4DC\uD55C\uB2E4").argument("<cluster>", "\uD074\uB7EC\uC2A4\uD130 UUID \uB610\uB294 \uC774\uB984").argument("<nodegroup>", "\uB178\uB4DC \uADF8\uB8F9 UUID \uB610\uB294 \uC774\uB984").requiredOption("--version <v>", "\uB300\uC0C1 Kubernetes version").option("--num-buffer-nodes <n>", "buffer node \uC218").option("--num-max-unavailable-nodes <n>", "\uCD5C\uB300 unavailable node \uC218").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (cluster, nodegroup, _opts, cmd) => {
+var upgradeCommand = new import_commander43.Command("upgrade").description("NKS \uB178\uB4DC \uADF8\uB8F9 Kubernetes version \uC744 \uC5C5\uADF8\uB808\uC774\uB4DC\uD55C\uB2E4 (default-master \uB85C control plane \uC5C5\uADF8\uB808\uC774\uB4DC)").argument("<cluster>", "\uD074\uB7EC\uC2A4\uD130 UUID \uB610\uB294 \uC774\uB984").argument("<nodegroup>", "\uB178\uB4DC \uADF8\uB8F9 UUID \uB610\uB294 \uC774\uB984. control plane \uC740 default-master \uB85C \uC9C0\uC815\uD55C\uB2E4").requiredOption("--kube-version <v>", "\uB300\uC0C1 Kubernetes version").option("--num-buffer-nodes <n>", "\uCD95\uCD9C\uB41C \uD30C\uB4DC\uB97C \uBC1B\uC744 \uC5EC\uC720 \uB178\uB4DC \uC218 (\uAE30\uBCF8 1, \uC791\uC5C5 \uD6C4 \uC790\uB3D9 \uC0AD\uC81C, \uC778\uC2A4\uD134\uC2A4 \uC694\uAE08 \uBC1C\uC0DD)").option("--num-max-unavailable-nodes <n>", "\uD55C \uBC88\uC5D0 \uC11C\uBE44\uC2A4 \uBD88\uAC00 \uC0C1\uD0DC\uB85C \uB458 \uB178\uB4DC \uC218 (\uAE30\uBCF8 1, \uD06C\uBA74 \uBE60\uB974\uACE0 \uAC00\uC6A9\uC131 \uB0AE\uC74C)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (cluster, nodegroup, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   const { client } = await resolveNksClient(opts);
   startSpinner("NKS \uB178\uB4DC \uADF8\uB8F9 upgrade \uC694\uCCAD \uC911...");
   let result;
   try {
     result = await client.upgradeNodeGroup(cluster, nodegroup, {
-      version: opts.version,
+      version: opts.kubeVersion,
       numBufferNodes: optionalNonNegativeInteger(opts.numBufferNodes, "--num-buffer-nodes"),
       numMaxUnavailableNodes: optionalPositiveInteger(opts.numMaxUnavailableNodes, "--num-max-unavailable-nodes")
     });
@@ -7412,7 +7656,7 @@ var setUserscriptCommand = new import_commander43.Command("set-userscript").desc
   stopSpinner(true);
   uuidOutput2(opts, result, "user script \uBCC0\uACBD");
 });
-var updateFlavorCommand = new import_commander43.Command("update-flavor").description("NKS \uB178\uB4DC \uADF8\uB8F9 flavor \uB97C \uBCC0\uACBD\uD55C\uB2E4").argument("<cluster>", "\uD074\uB7EC\uC2A4\uD130 UUID \uB610\uB294 \uC774\uB984").argument("<nodegroup>", "\uB178\uB4DC \uADF8\uB8F9 UUID \uB610\uB294 \uC774\uB984").requiredOption("--flavor <uuid>", "\uBCC0\uACBD\uD560 flavor UUID").option("--num-buffer-nodes <n>", "buffer node \uC218").option("--num-max-unavailable-nodes <n>", "\uCD5C\uB300 unavailable node \uC218").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (cluster, nodegroup, _opts, cmd) => {
+var updateFlavorCommand = new import_commander43.Command("update-flavor").description("NKS \uB178\uB4DC \uADF8\uB8F9 flavor \uB97C \uBCC0\uACBD\uD55C\uB2E4").argument("<cluster>", "\uD074\uB7EC\uC2A4\uD130 UUID \uB610\uB294 \uC774\uB984").argument("<nodegroup>", "\uB178\uB4DC \uADF8\uB8F9 UUID \uB610\uB294 \uC774\uB984").requiredOption("--flavor <uuid>", "\uBCC0\uACBD\uD560 flavor UUID").option("--num-buffer-nodes <n>", "\uCD95\uCD9C\uB41C \uD30C\uB4DC\uB97C \uBC1B\uC744 \uC5EC\uC720 \uB178\uB4DC \uC218 (\uAE30\uBCF8 1, \uC791\uC5C5 \uD6C4 \uC790\uB3D9 \uC0AD\uC81C, \uC778\uC2A4\uD134\uC2A4 \uC694\uAE08 \uBC1C\uC0DD)").option("--num-max-unavailable-nodes <n>", "\uD55C \uBC88\uC5D0 \uC11C\uBE44\uC2A4 \uBD88\uAC00 \uC0C1\uD0DC\uB85C \uB458 \uB178\uB4DC \uC218 (\uAE30\uBCF8 1, \uD06C\uBA74 \uBE60\uB974\uACE0 \uAC00\uC6A9\uC131 \uB0AE\uC74C)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (cluster, nodegroup, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   const { client } = await resolveNksClient(opts);
   startSpinner("NKS \uB178\uB4DC \uADF8\uB8F9 flavor \uBCC0\uACBD \uC694\uCCAD \uC911...");
@@ -7555,7 +7799,11 @@ var import_chalk15 = __toESM(require("chalk"));
 
 // src/commands/ncs/helpers.ts
 var import_node_fs9 = require("fs");
-var MAX_JSON_PAYLOAD_BYTES = 1e6;
+
+// src/utils/limits.ts
+var MAX_JSON_INPUT_BYTES = 1e6;
+
+// src/commands/ncs/helpers.ts
 var NCS_RFC3339_PATTERN = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.(\d+))?(Z|([+-])(\d{2}):(\d{2}))$/;
 var NCS_RELATIVE_TIME_PATTERN = /^(\d+)(m|h|d)$/;
 var NCS_TIME_EXAMPLES = "\uC2DC\uAC04\uB300 \uD3EC\uD568 RFC3339(\uC608: 2026-05-01T00:00:00+09:00) \uB610\uB294 \uC0C1\uB300\uC2DC\uAC04(\uC608: 30m, 1h, 2d, now)";
@@ -7679,9 +7927,9 @@ async function resolveNcsClient(opts) {
   return { client: new NcsClient(accessToken, region, appKey), profileName };
 }
 function readJsonPayload(filePath) {
-  let stat2;
+  let stat3;
   try {
-    stat2 = (0, import_node_fs9.statSync)(filePath);
+    stat3 = (0, import_node_fs9.statSync)(filePath);
   } catch (err) {
     const reason = err.code ?? (err instanceof Error ? err.message : String(err));
     throw new NhnCloudCliError(
@@ -7689,12 +7937,12 @@ function readJsonPayload(filePath) {
       EXIT_PARAM_ERROR
     );
   }
-  if (!stat2.isFile()) {
+  if (!stat3.isFile()) {
     throw new NhnCloudCliError(`--file \uC774 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${filePath}`, EXIT_PARAM_ERROR);
   }
-  if (stat2.size > MAX_JSON_PAYLOAD_BYTES) {
+  if (stat3.size > MAX_JSON_INPUT_BYTES) {
     throw new NhnCloudCliError(
-      `--file \uC774 \uB108\uBB34 \uD07D\uB2C8\uB2E4 (${stat2.size} \uBC14\uC774\uD2B8). JSON spec \uD55C\uB3C4 ${MAX_JSON_PAYLOAD_BYTES} \uBC14\uC774\uD2B8.`,
+      `--file \uC774 \uB108\uBB34 \uD07D\uB2C8\uB2E4 (${stat3.size} \uBC14\uC774\uD2B8). JSON spec \uD55C\uB3C4 ${MAX_JSON_INPUT_BYTES} \uBC14\uC774\uD2B8.`,
       EXIT_PARAM_ERROR
     );
   }
@@ -8424,8 +8672,11 @@ var malwareCommand = new import_commander47.Command("malware").description("NCS
 // src/commands/apigateway/service.ts
 var import_commander48 = require("commander");
 
+// src/commands/apigateway/helpers.ts
+var import_promises8 = require("fs/promises");
+
 // src/services/apigateway/client.ts
-var import_ky13 = __toESM(require("ky"));
+var import_ky14 = __toESM(require("ky"));
 
 // src/services/apigateway/types.ts
 function isApiGatewayService(value) {
@@ -8438,6 +8689,19 @@ function isApiGatewayPaging(value) {
   const obj = value;
   return typeof obj["limit"] === "number" && Number.isInteger(obj["limit"]) && obj["limit"] > 0 && typeof obj["page"] === "number" && Number.isInteger(obj["page"]) && obj["page"] > 0 && typeof obj["totalCount"] === "number" && Number.isInteger(obj["totalCount"]) && obj["totalCount"] >= 0;
 }
+var PATH_PLUGIN_TYPES = [
+  "CORS",
+  "SET_REQUEST_HEADER",
+  "SET_RESPONSE_HEADER",
+  "ADD_REQUEST_QUERY_PARAMETER"
+];
+var METHOD_PLUGIN_TYPES = [
+  "HTTP",
+  "MOCK",
+  "SET_REQUEST_HEADER",
+  "SET_RESPONSE_HEADER",
+  "ADD_REQUEST_QUERY_PARAMETER"
+];
 function isNullableString(value) {
   return typeof value === "string" || value === null;
 }
@@ -8451,6 +8715,11 @@ function isResource(value) {
   const obj = value;
   return typeof obj["resourceId"] === "string" && typeof obj["apigwServiceId"] === "string" && isNullableString(obj["parentPath"]) && typeof obj["path"] === "string" && isNullableString(obj["methodType"]) && isNullableString(obj["methodName"]) && isNullableString(obj["methodDescription"]) && typeof obj["createdAt"] === "string" && typeof obj["updatedAt"] === "string" && Array.isArray(obj["resourcePluginList"]);
 }
+function isUpdatedResource(value) {
+  if (typeof value !== "object" || value === null) return false;
+  const obj = value;
+  return typeof obj["resourceId"] === "string" && typeof obj["path"] === "string" && (obj["methodType"] === void 0 || isNullableString(obj["methodType"]));
+}
 function isResourceParameters(value) {
   if (typeof value !== "object" || value === null) return false;
   const obj = value;
@@ -8461,6 +8730,8 @@ function isResourceResponses(value) {
   const obj = value;
   return Array.isArray(obj["responseList"]) && Array.isArray(obj["contentTypeList"]);
 }
+var DEPLOY_STATUS_COMPLETE = "COMPLETE";
+var DEPLOY_STATUS_DEPLOYING = "DEPLOYING";
 function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -8476,6 +8747,10 @@ function isStage(value) {
   if (!isRecord(value)) return false;
   return typeof value["stageId"] === "string" && typeof value["apigwServiceId"] === "string" && typeof value["regionCode"] === "string" && isNullableString(value["stageName"]) && typeof value["stageDescription"] === "string" && typeof value["stageUrl"] === "string" && typeof value["backendEndpointUrl"] === "string" && typeof value["resourceUpdatedAt"] === "string" && typeof value["createdAt"] === "string" && typeof value["updatedAt"] === "string" && typeof value["stageCustomUrl"] === "string" && Array.isArray(value["stageCustomDomainList"]) && value["stageCustomDomainList"].every(isStageCustomDomain) && Array.isArray(value["stageAliasDomainList"]) && value["stageAliasDomainList"].every(isStageAliasDomain);
 }
+function isUpdatedStage(value) {
+  if (!isRecord(value)) return false;
+  return typeof value["stageId"] === "string" && isNullableString(value["stageName"]) && typeof value["stageUrl"] === "string" && typeof value["backendEndpointUrl"] === "string" && typeof value["updatedAt"] === "string";
+}
 function isStageResourcePlugin(value) {
   return isRecord(value);
 }
@@ -8483,6 +8758,10 @@ function isStageResource(value) {
   if (!isRecord(value)) return false;
   return typeof value["stageResourceId"] === "string" && typeof value["path"] === "string" && isNullableString(value["methodType"]) && isNullableString(value["methodName"]) && isNullableString(value["methodDescription"]) && isNullableString(value["customBackendEndpointUrl"]) && typeof value["updatedAt"] === "string" && Array.isArray(value["stageResourcePluginList"]) && value["stageResourcePluginList"].every(isStageResourcePlugin);
 }
+function isWrittenStageResource(value) {
+  if (!isRecord(value)) return false;
+  return typeof value["stageResourceId"] === "string" && typeof value["path"] === "string" && (value["methodType"] === void 0 || isNullableString(value["methodType"])) && (value["methodName"] === void 0 || isNullableString(value["methodName"])) && (value["stageResourcePluginList"] === void 0 || Array.isArray(value["stageResourcePluginList"]) && value["stageResourcePluginList"].every(isStageResourcePlugin));
+}
 function isDeployHistory(value) {
   if (!isRecord(value)) return false;
   return typeof value["deployId"] === "string" && typeof value["stageId"] === "string" && typeof value["deployedAt"] === "string" && isNullableString(value["rollbackAt"]) && typeof value["deployDescription"] === "string" && typeof value["isBase"] === "boolean";
@@ -8496,6 +8775,7 @@ function isSwaggerData(value) {
 }
 
 // src/services/apigateway/client.ts
+var DEFAULT_DEPLOY_POLL_INTERVAL_MS = 3e3;
 var ApiGatewayClient = class {
   accessToken;
   baseUrl;
@@ -8513,7 +8793,7 @@ var ApiGatewayClient = class {
     let page = params.page ?? 1;
     try {
       while (true) {
-        const response = await import_ky13.default.get(`${this.baseUrl}/services`, {
+        const response = await import_ky14.default.get(`${this.baseUrl}/services`, {
           headers: this.authHeaders(),
           searchParams: { page, limit },
           retry: 0,
@@ -8553,7 +8833,7 @@ var ApiGatewayClient = class {
   /** API Gateway service 한 건을 조회한다. */
   async getService(apigwServiceId) {
     try {
-      const response = await import_ky13.default.get(`${this.baseUrl}/services/${encodeURIComponent(apigwServiceId)}`, {
+      const response = await import_ky14.default.get(`${this.baseUrl}/services/${encodeURIComponent(apigwServiceId)}`, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -8574,7 +8854,7 @@ var ApiGatewayClient = class {
   /** paging 없이 API Gateway resource 전체를 한 번에 조회한다. */
   async listResources(apigwServiceId) {
     try {
-      const response = await import_ky13.default.get(
+      const response = await import_ky14.default.get(
         `${this.baseUrl}/services/${encodeURIComponent(apigwServiceId)}/resources`,
         {
           headers: this.authHeaders(),
@@ -8595,10 +8875,60 @@ var ApiGatewayClient = class {
       throw toNhnCloudCliError(err);
     }
   }
+  /** API Gateway resource 경로 플러그인을 upsert한다. */
+  async setPathPlugins(apigwServiceId, resourceId2, pathPluginList) {
+    try {
+      const response = await import_ky14.default.put(
+        `${this.baseUrl}/services/${encodeURIComponent(apigwServiceId)}/resource-paths/${encodeURIComponent(resourceId2)}`,
+        {
+          headers: this.authHeaders(),
+          json: { pathPluginList },
+          retry: 0,
+          timeout: DEFAULT_TIMEOUT_MS
+        }
+      ).json();
+      unwrapHeader(response);
+      if (!Array.isArray(response.resourceList) || !response.resourceList.every(isUpdatedResource)) {
+        throw new NhnCloudCliError(
+          "API Gateway \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: resourceList \uAC00 \uC62C\uBC14\uB978 \uC218\uC815 \uC751\uB2F5 \uBC30\uC5F4\uC774 \uC544\uB2D9\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return response.resourceList;
+    } catch (error) {
+      if (error instanceof NhnCloudCliError) throw error;
+      throw toNhnCloudCliError(error);
+    }
+  }
+  /** API Gateway resource 메서드 플러그인을 upsert한다. */
+  async setMethodPlugins(apigwServiceId, resourceId2, body) {
+    try {
+      const response = await import_ky14.default.put(
+        `${this.baseUrl}/services/${encodeURIComponent(apigwServiceId)}/resource-methods/${encodeURIComponent(resourceId2)}`,
+        {
+          headers: this.authHeaders(),
+          json: body,
+          retry: 0,
+          timeout: DEFAULT_TIMEOUT_MS
+        }
+      ).json();
+      unwrapHeader(response);
+      if (!Array.isArray(response.resourceList) || !response.resourceList.every(isUpdatedResource)) {
+        throw new NhnCloudCliError(
+          "API Gateway \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: resourceList \uAC00 \uC62C\uBC14\uB978 \uC218\uC815 \uC751\uB2F5 \uBC30\uC5F4\uC774 \uC544\uB2D9\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return response.resourceList;
+    } catch (error) {
+      if (error instanceof NhnCloudCliError) throw error;
+      throw toNhnCloudCliError(error);
+    }
+  }
   /** API Gateway resource 요청 parameter를 조회한다. */
   async getResourceParameters(apigwServiceId, resourceId2) {
     try {
-      const response = await import_ky13.default.get(
+      const response = await import_ky14.default.get(
         `${this.baseUrl}/services/${encodeURIComponent(apigwServiceId)}/resources/${encodeURIComponent(resourceId2)}/parameters`,
         {
           headers: this.authHeaders(),
@@ -8628,7 +8958,7 @@ var ApiGatewayClient = class {
   /** API Gateway resource 응답 정의를 조회한다. */
   async getResourceResponses(apigwServiceId, resourceId2) {
     try {
-      const response = await import_ky13.default.get(
+      const response = await import_ky14.default.get(
         `${this.baseUrl}/services/${encodeURIComponent(apigwServiceId)}/resources/${encodeURIComponent(resourceId2)}/responses`,
         {
           headers: this.authHeaders(),
@@ -8659,7 +8989,7 @@ var ApiGatewayClient = class {
     let page = 1;
     try {
       while (true) {
-        const response = await import_ky13.default.get(
+        const response = await import_ky14.default.get(
           `${this.baseUrl}/services/${encodeURIComponent(apigwServiceId)}/stages`,
           {
             headers: this.authHeaders(),
@@ -8699,10 +9029,35 @@ var ApiGatewayClient = class {
       throw toNhnCloudCliError(err);
     }
   }
+  /** API Gateway stage의 backend endpoint와 설명을 수정한다. */
+  async updateStage(apigwServiceId, stageId, body) {
+    try {
+      const response = await import_ky14.default.put(
+        `${this.baseUrl}/services/${encodeURIComponent(apigwServiceId)}/stages/${encodeURIComponent(stageId)}`,
+        {
+          headers: this.authHeaders(),
+          json: body,
+          retry: 0,
+          timeout: DEFAULT_TIMEOUT_MS
+        }
+      ).json();
+      unwrapHeader(response);
+      if (!isUpdatedStage(response.stage)) {
+        throw new NhnCloudCliError(
+          "API Gateway \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: stage \uD544\uB4DC\uAC00 \uC5C6\uAC70\uB098 \uC62C\uBC14\uB978 \uC218\uC815 \uC751\uB2F5\uC774 \uC544\uB2D9\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return response.stage;
+    } catch (error) {
+      if (error instanceof NhnCloudCliError) throw error;
+      throw toNhnCloudCliError(error);
+    }
+  }
   /** 사용자 정의 Swagger 객체를 내부 해석 없이 반환한다. */
   async getStageSwagger(apigwServiceId, stageId) {
     try {
-      const response = await import_ky13.default.get(
+      const response = await import_ky14.default.get(
         `${this.baseUrl}/services/${encodeURIComponent(apigwServiceId)}/stages/${encodeURIComponent(stageId)}/swagger`,
         {
           headers: this.authHeaders(),
@@ -8726,7 +9081,7 @@ var ApiGatewayClient = class {
   /** paging 없이 배포된 API Gateway stage resource 전체를 한 번에 조회한다. */
   async listStageResources(apigwServiceId, stageId) {
     try {
-      const response = await import_ky13.default.get(
+      const response = await import_ky14.default.get(
         `${this.baseUrl}/services/${encodeURIComponent(apigwServiceId)}/stages/${encodeURIComponent(stageId)}/resources`,
         {
           headers: this.authHeaders(),
@@ -8747,16 +9102,83 @@ var ApiGatewayClient = class {
       throw toNhnCloudCliError(err);
     }
   }
-  /** paging.totalCount 를 기준으로 API Gateway stage 배포 이력 전체를 수집한다. */
-  async listDeploys(apigwServiceId, stageId) {
-    const deploys = [];
-    const limit = 1e3;
-    let page = 1;
+  /** API Gateway service resource를 stage에 반영한다. */
+  async importStageResources(apigwServiceId, stageId) {
     try {
-      while (true) {
-        const response = await import_ky13.default.get(
-          `${this.baseUrl}/services/${encodeURIComponent(apigwServiceId)}/stages/${encodeURIComponent(stageId)}/deploys`,
-          {
+      const response = await import_ky14.default.put(
+        `${this.baseUrl}/services/${encodeURIComponent(apigwServiceId)}/stages/${encodeURIComponent(stageId)}/resources`,
+        {
+          headers: this.authHeaders(),
+          retry: 0,
+          timeout: DEFAULT_TIMEOUT_MS
+        }
+      ).json();
+      unwrapHeader(response);
+      if (!Array.isArray(response.stageResourceList) || !response.stageResourceList.every(isWrittenStageResource)) {
+        throw new NhnCloudCliError(
+          "API Gateway \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: stageResourceList \uAC00 \uC62C\uBC14\uB978 \uBC30\uC5F4\uC774 \uC544\uB2D9\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return response.stageResourceList;
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /** API Gateway stage 배포를 요청한다. */
+  async createDeploy(apigwServiceId, stageId, body) {
+    const json = body.deployDescription === void 0 ? {} : { deployDescription: body.deployDescription };
+    try {
+      const response = await import_ky14.default.post(
+        `${this.baseUrl}/services/${encodeURIComponent(apigwServiceId)}/stages/${encodeURIComponent(stageId)}/deploys`,
+        {
+          headers: this.authHeaders(),
+          json,
+          retry: 0,
+          timeout: DEFAULT_TIMEOUT_MS
+        }
+      ).json();
+      unwrapHeader(response);
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /** 배포 이력의 설정으로 API Gateway stage를 롤백한다. */
+  async rollbackDeploy(apigwServiceId, stageId, deployId) {
+    try {
+      const response = await import_ky14.default.post(
+        `${this.baseUrl}/services/${encodeURIComponent(apigwServiceId)}/stages/${encodeURIComponent(stageId)}/deploys/${encodeURIComponent(deployId)}/rollback`,
+        {
+          headers: this.authHeaders(),
+          retry: 0,
+          timeout: DEFAULT_TIMEOUT_MS
+        }
+      ).json();
+      unwrapHeader(response);
+      if (!Array.isArray(response.stageResourceList) || !response.stageResourceList.every(isWrittenStageResource)) {
+        throw new NhnCloudCliError(
+          "API Gateway \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: stageResourceList \uAC00 \uC62C\uBC14\uB978 \uBC30\uC5F4\uC774 \uC544\uB2D9\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return response.stageResourceList;
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /** paging.totalCount 를 기준으로 API Gateway stage 배포 이력 전체를 수집한다. */
+  async listDeploys(apigwServiceId, stageId) {
+    const deploys = [];
+    const limit = 1e3;
+    let page = 1;
+    try {
+      while (true) {
+        const response = await import_ky14.default.get(
+          `${this.baseUrl}/services/${encodeURIComponent(apigwServiceId)}/stages/${encodeURIComponent(stageId)}/deploys`,
+          {
             headers: this.authHeaders(),
             searchParams: { page, limit },
             retry: 0,
@@ -8797,7 +9219,7 @@ var ApiGatewayClient = class {
   /** API Gateway stage 최신 배포 결과를 조회한다. */
   async getLatestDeploy(apigwServiceId, stageId) {
     try {
-      const response = await import_ky13.default.get(
+      const response = await import_ky14.default.get(
         `${this.baseUrl}/services/${encodeURIComponent(apigwServiceId)}/stages/${encodeURIComponent(stageId)}/deploys/latest`,
         {
           headers: this.authHeaders(),
@@ -8818,14 +9240,118 @@ var ApiGatewayClient = class {
       throw toNhnCloudCliError(err);
     }
   }
+  /** 직전 배포 ID와 상태를 비교해 이번 stage 배포가 종료될 때까지 대기한다. */
+  async waitForDeploy(apigwServiceId, stageId, opts) {
+    const intervalMs = opts.intervalMs ?? DEFAULT_DEPLOY_POLL_INTERVAL_MS;
+    const deadline = Date.now() + opts.timeoutMs;
+    let lastDeploy = null;
+    while (Date.now() < deadline) {
+      const deploy = await this.getLatestDeploy(apigwServiceId, stageId);
+      lastDeploy = deploy;
+      const isNewDeploy = opts.baselineDeployId === null || deploy.deployId !== opts.baselineDeployId;
+      if (isNewDeploy && deploy.deployStatus !== DEPLOY_STATUS_DEPLOYING) {
+        return deploy;
+      }
+      const remaining = deadline - Date.now();
+      if (remaining <= 0) break;
+      await new Promise(
+        (resolve) => setTimeout(resolve, Math.min(intervalMs, remaining))
+      );
+    }
+    const lastDeploySummary = lastDeploy ? `\uB9C8\uC9C0\uB9C9 \uC0C1\uD0DC: ${lastDeploy.deployStatus}, \uB9C8\uC9C0\uB9C9 \uBC30\uD3EC ID: ${lastDeploy.deployId}` : "\uB9C8\uC9C0\uB9C9 \uC870\uD68C \uC5C6\uC74C";
+    const baselineDeployId = opts.baselineDeployId ?? "\uC5C6\uC74C";
+    throw new NhnCloudCliError(
+      `API Gateway stage \uBC30\uD3EC\uAC00 \uC644\uB8CC\uB418\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4 (${lastDeploySummary}, \uAE30\uC900 \uBC30\uD3EC ID: ${baselineDeployId}). \uB300\uAE30 \uC0C1\uD55C(${Math.round(opts.timeoutMs / 1e3)}\uCD08)\uC744 \uB118\uACBC\uC2B5\uB2C8\uB2E4. --timeout \uC73C\uB85C \uB298\uB9B4 \uC218 \uC788\uC2B5\uB2C8\uB2E4.`,
+      EXIT_API_ERROR
+    );
+  }
 };
 
 // src/commands/apigateway/helpers.ts
-function sanitizeForTerminal(value) {
-  return value.replace(/[\x00-\x1F\x7F]/g, "?");
+function fileErrorReason(error) {
+  if (typeof error === "object" && error !== null && "code" in error) {
+    const code = error.code;
+    if (typeof code === "string") return code;
+  }
+  return error instanceof Error ? error.message : String(error);
+}
+function requireYes(yes, operation) {
+  if (!yes) {
+    throw new NhnCloudCliError(
+      `${operation}\uC5D0\uB294 --yes \uD50C\uB798\uADF8\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return true;
+}
+async function readPluginConfigFile(path5) {
+  let fileStat;
+  try {
+    fileStat = await (0, import_promises8.stat)(path5);
+  } catch (error) {
+    const reason = fileErrorReason(error);
+    throw new NhnCloudCliError(
+      `\uD50C\uB7EC\uADF8\uC778 \uC124\uC815 \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${JSON.stringify(path5)} (${JSON.stringify(reason)}).`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  if (!fileStat.isFile()) {
+    const reason = fileStat.isDirectory() ? "EISDIR" : "EINVAL";
+    throw new NhnCloudCliError(
+      `\uD50C\uB7EC\uADF8\uC778 \uC124\uC815 \uACBD\uB85C\uAC00 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${JSON.stringify(path5)} (${reason}).`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  if (fileStat.size > MAX_JSON_INPUT_BYTES) {
+    throw new NhnCloudCliError(
+      `\uD50C\uB7EC\uADF8\uC778 \uC124\uC815 \uD30C\uC77C\uC774 \uB108\uBB34 \uD07D\uB2C8\uB2E4 (${fileStat.size} \uBC14\uC774\uD2B8). \uD5C8\uC6A9 \uC0C1\uD55C\uC740 ${MAX_JSON_INPUT_BYTES} \uBC14\uC774\uD2B8\uC785\uB2C8\uB2E4.`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  let raw;
+  try {
+    raw = await (0, import_promises8.readFile)(path5, "utf-8");
+  } catch (error) {
+    const reason = fileErrorReason(error);
+    throw new NhnCloudCliError(
+      `\uD50C\uB7EC\uADF8\uC778 \uC124\uC815 \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${JSON.stringify(path5)} (${JSON.stringify(reason)}).`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  try {
+    return JSON.parse(raw);
+  } catch (error) {
+    const reason = sanitizeForTerminal(
+      error instanceof Error ? error.message : String(error)
+    );
+    throw new NhnCloudCliError(
+      `\uD50C\uB7EC\uADF8\uC778 \uC124\uC815 JSON \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4: ${JSON.stringify(path5)} (${reason}).`,
+      EXIT_PARAM_ERROR
+    );
+  }
 }
-async function resolveApiGatewayAppKey(profileName, appKeyOption) {
-  if (appKeyOption?.trim()) return appKeyOption.trim();
+function collectAffectedPaths(resources, targetPath) {
+  if (targetPath === "/") return resources;
+  const childPrefix = `${targetPath}/`;
+  return resources.filter(
+    (resource) => resource.path === targetPath || resource.path.startsWith(childPrefix)
+  );
+}
+function writtenStageResourceOutput(resources) {
+  return {
+    headers: ["stageResourceId", "path", "methodType", "methodName", "plugins"],
+    rows: resources.map((resource) => [
+      sanitizeForTerminal(resource.stageResourceId),
+      sanitizeForTerminal(resource.path),
+      resource.methodType == null ? "-" : sanitizeForTerminal(resource.methodType),
+      resource.methodName == null ? "-" : sanitizeForTerminal(resource.methodName),
+      String(resource.stageResourcePluginList?.length ?? 0)
+    ]),
+    raw: resources,
+    ids: resources.map((resource) => sanitizeForTerminal(resource.stageResourceId))
+  };
+}
+async function resolveApiGatewayAppKey(profileName) {
   let credential;
   try {
     credential = await getServiceCredential("apigateway", profileName);
@@ -8836,7 +9362,7 @@ async function resolveApiGatewayAppKey(profileName, appKeyOption) {
   }
   if (!credential?.appkey) {
     throw new NhnCloudCliError(
-      "API Gateway appKey\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4. nhncloud configure --apigateway-appkey <key>\uB85C \uC124\uC815\uD558\uAC70\uB098\n--app-key\uB85C \uC9C1\uC811 \uB118\uAE30\uC138\uC694.",
+      "API Gateway appKey\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4. nhncloud configure --apigateway-appkey <key>\uB85C \uC124\uC815\uD558\uC138\uC694.",
       EXIT_CONFIG_ERROR
     );
   }
@@ -8846,7 +9372,7 @@ async function resolveApiGatewayClient(opts) {
   const profileName = await resolveProfileName(opts.profile);
   const uak = await getUserAccessKey(profileName);
   const accessToken = await getAccessToken(profileName, uak.id, uak.secret);
-  const appKey = await resolveApiGatewayAppKey(profileName, opts.appKey);
+  const appKey = await resolveApiGatewayAppKey(profileName);
   return {
     client: new ApiGatewayClient(accessToken, opts.region ?? "kr1", appKey),
     profileName
@@ -8854,7 +9380,7 @@ async function resolveApiGatewayClient(opts) {
 }
 
 // src/commands/apigateway/service.ts
-var listCommand10 = new import_commander48.Command("list").description("API Gateway service \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4 (\uC804\uCCB4 \uD544\uB4DC\uB294 --json)").option("--region <region>", "API Gateway region (\uAE30\uBCF8: kr1)", "kr1").option("--app-key <key>", "API Gateway appKey (profile \uC758 apigateway.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, command) => {
+var listCommand10 = new import_commander48.Command("list").description("API Gateway service \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4 (\uC804\uCCB4 \uD544\uB4DC\uB294 --json)").option("--region <region>", "API Gateway region (\uAE30\uBCF8: kr1)", "kr1").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, command) => {
   const opts = command.optsWithGlobals();
   const { client } = await resolveApiGatewayClient(opts);
   startSpinner("API Gateway service \uBAA9\uB85D \uC870\uD68C \uC911...");
@@ -8885,7 +9411,7 @@ var listCommand10 = new import_commander48.Command("list").description("API Gate
     ids: services.map((service) => sanitizeForTerminal(service.apigwServiceId))
   });
 });
-var getCommand8 = new import_commander48.Command("get").description("API Gateway service \uD55C \uAC74\uC744 \uC870\uD68C\uD55C\uB2E4 (\uC804\uCCB4 \uD544\uB4DC\uB294 --json)").argument("<service-id>", "API Gateway service ID").option("--region <region>", "API Gateway region (\uAE30\uBCF8: kr1)", "kr1").option("--app-key <key>", "API Gateway appKey (profile \uC758 apigateway.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (serviceId, _opts, command) => {
+var getCommand8 = new import_commander48.Command("get").description("API Gateway service \uD55C \uAC74\uC744 \uC870\uD68C\uD55C\uB2E4 (\uC804\uCCB4 \uD544\uB4DC\uB294 --json)").argument("<service-id>", "API Gateway service ID").option("--region <region>", "API Gateway region (\uAE30\uBCF8: kr1)", "kr1").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (serviceId, _opts, command) => {
   const opts = command.optsWithGlobals();
   const parsedServiceId = parseRequiredArgument(serviceId, "service-id");
   const displayServiceId = sanitizeForTerminal(parsedServiceId);
@@ -8923,12 +9449,85 @@ var serviceCommand = new import_commander48.Command("service").description("API
 // src/commands/apigateway/resource.ts
 var import_commander49 = require("commander");
 function addApiGatewayOptions(command) {
-  return command.option("--region <region>", "API Gateway region (\uAE30\uBCF8: kr1)", "kr1").option("--app-key <key>", "API Gateway appKey (profile \uC758 apigateway.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984");
+  return command.option("--region <region>", "API Gateway region (\uAE30\uBCF8: kr1)", "kr1").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984");
 }
 function displayUnknown(value) {
   const serialized = JSON.stringify(value);
   return serialized ?? String(value);
 }
+function isRecord2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function configError(message) {
+  throw new NhnCloudCliError(message, EXIT_PARAM_ERROR);
+}
+function parsePluginInput(value, allowedTypes, label, rejectApplyChildPath) {
+  if (!isRecord2(value)) {
+    return configError(`${label} \uD56D\uBAA9\uC740 JSON \uAC1D\uCCB4\uC5EC\uC57C \uD569\uB2C8\uB2E4.`);
+  }
+  if (typeof value["pluginType"] !== "string" || !allowedTypes.includes(value["pluginType"])) {
+    return configError(`${label}\uC758 pluginType\uC774 \uD5C8\uC6A9\uB41C \uD0C0\uC785\uC774 \uC544\uB2D9\uB2C8\uB2E4.`);
+  }
+  if (rejectApplyChildPath && "applyChildPath" in value) {
+    return configError(`${label}\uC5D0\uB294 applyChildPath\uB97C \uC0AC\uC6A9\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.`);
+  }
+  if ("delete" in value && typeof value["delete"] !== "boolean") {
+    return configError(`${label}\uC758 delete\uB294 boolean\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4.`);
+  }
+  if ("applyChildPath" in value && typeof value["applyChildPath"] !== "boolean") {
+    return configError(`${label}\uC758 applyChildPath\uB294 boolean\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4.`);
+  }
+  if (value["delete"] !== true && value["pluginConfigJson"] === void 0) {
+    return configError(`${label}\uC5D0\uC11C delete\uAC00 true\uAC00 \uC544\uB2C8\uBA74 pluginConfigJson\uC774 \uD544\uC694\uD569\uB2C8\uB2E4.`);
+  }
+  if (value["pluginConfigJson"] !== void 0 && !isRecord2(value["pluginConfigJson"])) {
+    return configError(`${label}\uC758 pluginConfigJson\uC740 JSON \uAC1D\uCCB4\uC5EC\uC57C \uD569\uB2C8\uB2E4.`);
+  }
+  return {
+    pluginType: value["pluginType"],
+    ...isRecord2(value["pluginConfigJson"]) ? { pluginConfigJson: value["pluginConfigJson"] } : {},
+    ...typeof value["delete"] === "boolean" ? { delete: value["delete"] } : {},
+    ...typeof value["applyChildPath"] === "boolean" ? { applyChildPath: value["applyChildPath"] } : {}
+  };
+}
+function parsePathPluginConfig(value) {
+  if (!isRecord2(value) || !Array.isArray(value["pathPluginList"]) || value["pathPluginList"].length === 0) {
+    return configError("\uC124\uC815 \uD30C\uC77C\uC758 pathPluginList\uB294 \uBE44\uC5B4 \uC788\uC9C0 \uC54A\uC740 \uBC30\uC5F4\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4.");
+  }
+  return value["pathPluginList"].map(
+    (item, index) => parsePluginInput(item, PATH_PLUGIN_TYPES, `pathPluginList[${index}]`, false)
+  );
+}
+function parseMethodPluginConfig(value) {
+  if (!isRecord2(value) || !Array.isArray(value["methodPluginList"]) || value["methodPluginList"].length === 0) {
+    return configError("\uC124\uC815 \uD30C\uC77C\uC758 methodPluginList\uB294 \uBE44\uC5B4 \uC788\uC9C0 \uC54A\uC740 \uBC30\uC5F4\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4.");
+  }
+  if (value["methodName"] !== void 0 && typeof value["methodName"] !== "string") {
+    return configError("methodName\uC740 \uBB38\uC790\uC5F4\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4.");
+  }
+  if (value["methodDescription"] !== void 0 && typeof value["methodDescription"] !== "string") {
+    return configError("methodDescription\uC740 \uBB38\uC790\uC5F4\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4.");
+  }
+  return {
+    methodName: value["methodName"],
+    methodDescription: value["methodDescription"],
+    methodPluginList: value["methodPluginList"].map(
+      (item, index) => parsePluginInput(item, METHOD_PLUGIN_TYPES, `methodPluginList[${index}]`, true)
+    )
+  };
+}
+function updatedResourceOutput(opts, resources) {
+  output(opts, {
+    headers: ["resourceId", "path", "methodType"],
+    rows: resources.map((resource) => [
+      sanitizeForTerminal(resource.resourceId),
+      sanitizeForTerminal(resource.path),
+      resource.methodType == null ? "-" : sanitizeForTerminal(resource.methodType)
+    ]),
+    raw: resources,
+    ids: resources.map((resource) => sanitizeForTerminal(resource.resourceId))
+  });
+}
 var listCommand11 = addApiGatewayOptions(
   new import_commander49.Command("list").description("API Gateway resource \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4 (\uC804\uCCB4 \uD544\uB4DC\uB294 --json)").argument("<service-id>", "API Gateway service ID")
 ).action(async (serviceId, _opts, command) => {
@@ -9013,16 +9612,179 @@ var responsesCommand = addApiGatewayOptions(
     ids: []
   });
 });
-var resourceCommand = new import_commander49.Command("resource").description("API Gateway resource \uC870\uD68C \uBA85\uB839").addCommand(listCommand11).addCommand(parametersCommand).addCommand(responsesCommand);
+var setPathPluginCommand = addApiGatewayOptions(
+  new import_commander49.Command("set-path-plugin").description("API Gateway resource \uACBD\uB85C \uD50C\uB7EC\uADF8\uC778\uC744 \uC124\uC815\uD55C\uB2E4").argument("<service-id>", "API Gateway service ID").argument("<resource-id>", "API Gateway resource ID").requiredOption("--config-file <path>", "\uD50C\uB7EC\uADF8\uC778 \uC124\uC815 JSON \uD30C\uC77C").option("--dry-run", "\uC4F0\uAE30 \uC5C6\uC774 \uC608\uC0C1 \uC601\uD5A5 \uBC94\uC704\uB97C \uCD9C\uB825\uD55C\uB2E4").option("--yes", "\uB9AC\uC18C\uC2A4 \uACBD\uB85C \uD50C\uB7EC\uADF8\uC778 \uC124\uC815\uC744 \uD655\uC778\uD55C\uB2E4")
+).action(async (serviceId, resourceId2, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedServiceId = parseRequiredArgument(serviceId, "service-id");
+  const parsedResourceId = parseRequiredArgument(resourceId2, "resource-id");
+  const plugins = parsePathPluginConfig(await readPluginConfigFile(opts.configFile));
+  if (plugins.some((plugin) => plugin.pluginType === "CORS")) {
+    process.stderr.write(
+      "\uACBD\uACE0: CORS \uD50C\uB7EC\uADF8\uC778\uC740 \uD558\uC704\uC5D0 OPTIONS \uBA54\uC11C\uB4DC\uB97C \uC790\uB3D9 \uC0DD\uC131\uD558\uBA70 \uAE30\uC874 OPTIONS\uB97C \uC0AD\uC81C\xB7\uB300\uCCB4\uD569\uB2C8\uB2E4.\n"
+    );
+  }
+  if (plugins.some((plugin) => plugin.applyChildPath === true && plugin.delete === true)) {
+    process.stderr.write(
+      "\uACBD\uACE0: applyChildPath\uC640 delete\uAC00 \uD568\uAED8 true\uC774\uBA74 \uD558\uC704 \uC804\uCCB4\uC5D0\uC11C \uD574\uB2F9 \uD50C\uB7EC\uADF8\uC778\uC774 \uC0AD\uC81C\uB429\uB2C8\uB2E4.\n"
+    );
+  }
+  if (!opts.dryRun) requireYes(opts.yes, "\uB9AC\uC18C\uC2A4 \uACBD\uB85C \uD50C\uB7EC\uADF8\uC778 \uC124\uC815");
+  const { client } = await resolveApiGatewayClient(opts);
+  const displayResourceId = sanitizeForTerminal(parsedResourceId);
+  const spinnerAction = opts.dryRun ? "\uACBD\uB85C \uD50C\uB7EC\uADF8\uC778 \uC601\uD5A5 \uBC94\uC704 \uD655\uC778" : "\uACBD\uB85C \uD50C\uB7EC\uADF8\uC778 \uC124\uC815";
+  startSpinner(`API Gateway resource "${displayResourceId}" ${spinnerAction} \uC911...`);
+  let target;
+  let applyChildPath;
+  let affected;
+  let updatedResources = [];
+  try {
+    const resources = await client.listResources(parsedServiceId);
+    const matchedResource = resources.find(
+      (resource) => resource.resourceId === parsedResourceId
+    );
+    if (matchedResource === void 0) {
+      throw new NhnCloudCliError(
+        `API Gateway resource "${displayResourceId}"\uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.`,
+        EXIT_PARAM_ERROR
+      );
+    }
+    target = matchedResource;
+    applyChildPath = plugins.some((plugin) => plugin.applyChildPath === true);
+    affected = applyChildPath ? collectAffectedPaths(resources, target.path) : [target];
+    if (!opts.dryRun) {
+      updatedResources = await client.setPathPlugins(
+        parsedServiceId,
+        parsedResourceId,
+        plugins
+      );
+    }
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  }
+  stopSpinner(true);
+  if (opts.dryRun) {
+    const appliedPluginTypes = plugins.map((plugin) => plugin.pluginType).join(",");
+    output(opts, {
+      headers: ["resourceId", "path", "methodType", "appliedPluginTypes"],
+      rows: affected.map((resource) => [
+        sanitizeForTerminal(resource.resourceId),
+        sanitizeForTerminal(resource.path),
+        resource.methodType === null ? "-" : sanitizeForTerminal(resource.methodType),
+        appliedPluginTypes
+      ]),
+      raw: { targetPath: target.path, applyChildPath, plugins, affected },
+      ids: affected.map((resource) => sanitizeForTerminal(resource.resourceId))
+    });
+    if (applyChildPath) {
+      process.stderr.write(
+        "\uACBD\uACE0: dry-run \uC601\uD5A5 \uBC94\uC704\uB294 path \uC811\uB450 \uBE44\uAD50\uB85C \uACC4\uC0B0\uD55C \uCD94\uC815\uAC12\uC774\uBA70 \uC11C\uBC84 \uD310\uC815\uACFC \uB2E4\uB97C \uC218 \uC788\uC2B5\uB2C8\uB2E4.\n"
+      );
+    }
+    return;
+  }
+  updatedResourceOutput(opts, updatedResources);
+});
+var setMethodPluginCommand = addApiGatewayOptions(
+  new import_commander49.Command("set-method-plugin").description("API Gateway resource \uBA54\uC11C\uB4DC \uD50C\uB7EC\uADF8\uC778\uC744 \uC124\uC815\uD55C\uB2E4").argument("<service-id>", "API Gateway service ID").argument("<resource-id>", "API Gateway resource ID").requiredOption("--config-file <path>", "\uD50C\uB7EC\uADF8\uC778 \uC124\uC815 JSON \uD30C\uC77C").option("--dry-run", "\uC4F0\uAE30 \uC5C6\uC774 \uC608\uC0C1 \uBCC0\uACBD \uB0B4\uC6A9\uC744 \uCD9C\uB825\uD55C\uB2E4").option("--yes", "\uB9AC\uC18C\uC2A4 \uBA54\uC11C\uB4DC \uD50C\uB7EC\uADF8\uC778 \uC124\uC815\uC744 \uD655\uC778\uD55C\uB2E4")
+).action(async (serviceId, resourceId2, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedServiceId = parseRequiredArgument(serviceId, "service-id");
+  const parsedResourceId = parseRequiredArgument(resourceId2, "resource-id");
+  const config = parseMethodPluginConfig(await readPluginConfigFile(opts.configFile));
+  if (!opts.dryRun) requireYes(opts.yes, "\uB9AC\uC18C\uC2A4 \uBA54\uC11C\uB4DC \uD50C\uB7EC\uADF8\uC778 \uC124\uC815");
+  const { client } = await resolveApiGatewayClient(opts);
+  const displayResourceId = sanitizeForTerminal(parsedResourceId);
+  const spinnerAction = opts.dryRun ? "\uBA54\uC11C\uB4DC \uD50C\uB7EC\uADF8\uC778 \uC601\uD5A5 \uBC94\uC704 \uD655\uC778" : "\uBA54\uC11C\uB4DC \uD50C\uB7EC\uADF8\uC778 \uC124\uC815";
+  startSpinner(`API Gateway resource "${displayResourceId}" ${spinnerAction} \uC911...`);
+  let target;
+  let methodName;
+  let methodDescription;
+  let updatedResources = [];
+  try {
+    const resources = await client.listResources(parsedServiceId);
+    const matchedResource = resources.find(
+      (resource) => resource.resourceId === parsedResourceId
+    );
+    if (matchedResource === void 0) {
+      throw new NhnCloudCliError(
+        `API Gateway resource "${displayResourceId}"\uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.`,
+        EXIT_PARAM_ERROR
+      );
+    }
+    target = matchedResource;
+    if (target.methodType === null) {
+      throw new NhnCloudCliError(
+        "\uB300\uC0C1 resource\uB294 \uBA54\uC11C\uB4DC\uAC00 \uC544\uB2CC \uACBD\uB85C\uC785\uB2C8\uB2E4. set-path-plugin\uC744 \uC0AC\uC6A9\uD558\uC138\uC694.",
+        EXIT_PARAM_ERROR
+      );
+    }
+    const resolvedMethodName = config.methodName ?? target.methodName;
+    if (resolvedMethodName === null) {
+      throw new NhnCloudCliError(
+        "\uAE30\uC874 methodName\uC774 \uC5C6\uC2B5\uB2C8\uB2E4. \uC124\uC815 \uD30C\uC77C\uC5D0 methodName\uC744 \uB123\uC73C\uC138\uC694.",
+        EXIT_PARAM_ERROR
+      );
+    }
+    methodName = resolvedMethodName;
+    methodDescription = config.methodDescription ?? target.methodDescription ?? void 0;
+    if (!opts.dryRun) {
+      const body = {
+        methodName,
+        ...methodDescription === void 0 ? {} : { methodDescription },
+        methodPluginList: config.methodPluginList
+      };
+      updatedResources = await client.setMethodPlugins(
+        parsedServiceId,
+        parsedResourceId,
+        body
+      );
+    }
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  }
+  stopSpinner(true);
+  if (opts.dryRun) {
+    const appliedPluginTypes = config.methodPluginList.map((plugin) => plugin.pluginType).join(",");
+    output(opts, {
+      headers: [
+        "resourceId",
+        "path",
+        "methodType",
+        "methodName",
+        "appliedPluginTypes"
+      ],
+      rows: [[
+        sanitizeForTerminal(target.resourceId),
+        sanitizeForTerminal(target.path),
+        sanitizeForTerminal(target.methodType),
+        sanitizeForTerminal(methodName),
+        appliedPluginTypes
+      ]],
+      raw: {
+        target,
+        methodName,
+        methodDescription,
+        plugins: config.methodPluginList
+      },
+      ids: [sanitizeForTerminal(target.resourceId)]
+    });
+    return;
+  }
+  updatedResourceOutput(opts, updatedResources);
+});
+var resourceCommand = new import_commander49.Command("resource").description("API Gateway resource \uC870\uD68C \uBC0F \uBCC0\uACBD \uBA85\uB839").addCommand(listCommand11).addCommand(parametersCommand).addCommand(responsesCommand).addCommand(setPathPluginCommand).addCommand(setMethodPluginCommand);
 
 // src/commands/apigateway/stage.ts
-var import_promises8 = require("fs/promises");
+var import_promises9 = require("fs/promises");
 var import_commander51 = require("commander");
 
 // src/commands/apigateway/deploy.ts
 var import_commander50 = require("commander");
 function addApiGatewayOptions2(command) {
-  return command.option("--region <region>", "API Gateway region (\uAE30\uBCF8: kr1)", "kr1").option("--app-key <key>", "API Gateway appKey (profile \uC758 apigateway.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984");
+  return command.option("--region <region>", "API Gateway region (\uAE30\uBCF8: kr1)", "kr1").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984");
 }
 var listCommand12 = addApiGatewayOptions2(
   new import_commander50.Command("list").description("API Gateway stage \uBC30\uD3EC \uC774\uB825 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4 (\uC804\uCCB4 \uD544\uB4DC\uB294 --json)").argument("<service-id>", "API Gateway service ID").argument("<stage-id>", "API Gateway stage ID")
@@ -9083,13 +9845,140 @@ var latestCommand = addApiGatewayOptions2(
     ids: [sanitizeForTerminal(deploy.deployId)]
   });
 });
-var deployCommand = new import_commander50.Command("deploy").description("API Gateway stage \uBC30\uD3EC \uC774\uB825 \uC870\uD68C \uBA85\uB839").addCommand(listCommand12).addCommand(latestCommand);
+var createCommand8 = addApiGatewayOptions2(
+  new import_commander50.Command("create").description("stage \uC124\uC815\uC744 API Gateway service \uC5D0 \uBC30\uD3EC\uD55C\uB2E4").argument("<service-id>", "API Gateway service ID").argument("<stage-id>", "API Gateway stage ID").option("--description <text>", "\uBC30\uD3EC \uC124\uBA85 (\uCD5C\uB300 200\uC790)").option("--no-wait", "\uBC30\uD3EC \uACB0\uACFC\uB97C \uAE30\uB2E4\uB9AC\uC9C0 \uC54A\uACE0 \uC694\uCCAD\uB9CC \uD55C\uB2E4").option("--timeout <sec>", "\uBC30\uD3EC \uB300\uAE30 \uC0C1\uD55C (\uCD08, \uAE30\uBCF8 300)", "300").option("--yes", "\uBC30\uD3EC\uB97C \uD655\uC778\uD55C\uB2E4")
+).action(async (serviceId, stageId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedServiceId = parseRequiredArgument(serviceId, "service-id");
+  const parsedStageId = parseRequiredArgument(stageId, "stage-id");
+  if (opts.description !== void 0 && opts.description.trim().length === 0) {
+    throw new NhnCloudCliError(
+      "--description \uC740 \uBE44\uC5B4 \uC788\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.",
+      EXIT_PARAM_ERROR
+    );
+  }
+  if (opts.description !== void 0 && [...opts.description].length > 200) {
+    throw new NhnCloudCliError(
+      "--description \uC740 \uCD5C\uB300 200\uC790\uAE4C\uC9C0 \uC9C0\uC815\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4.",
+      EXIT_PARAM_ERROR
+    );
+  }
+  const timeoutMs = parsePositiveIntegerOption(opts.timeout ?? "300", "--timeout") * 1e3;
+  requireYes(opts.yes, "\uC2A4\uD14C\uC774\uC9C0 \uBC30\uD3EC");
+  const displayStageId = sanitizeForTerminal(parsedStageId);
+  const { client } = await resolveApiGatewayClient(opts);
+  let baselineDeployId = null;
+  let baselineLookupFailed = false;
+  let deploy;
+  if (opts.wait) {
+    startSpinner("\uC9C1\uC804 \uBC30\uD3EC \uD655\uC778 \uC911...");
+    try {
+      const baseline = await client.getLatestDeploy(parsedServiceId, parsedStageId);
+      baselineDeployId = baseline.deployId;
+      stopSpinner(true);
+    } catch {
+      baselineLookupFailed = true;
+      stopSpinner(false);
+    }
+  }
+  if (baselineLookupFailed) {
+    process.stderr.write("\uC548\uB0B4: \uC9C1\uC804 \uBC30\uD3EC ID \uB97C \uC77D\uC9C0 \uBABB\uD574 \uC0C1\uD0DC\uB9CC\uC73C\uB85C \uC644\uB8CC\uB97C \uD310\uC815\uD569\uB2C8\uB2E4.\n");
+  }
+  startSpinner(`API Gateway stage "${displayStageId}" \uBC30\uD3EC \uC911...`);
+  let deployAccepted = false;
+  let deployResultKnown = false;
+  try {
+    await client.createDeploy(parsedServiceId, parsedStageId, {
+      deployDescription: opts.description
+    });
+    deployAccepted = true;
+    if (opts.wait) {
+      deploy = await client.waitForDeploy(parsedServiceId, parsedStageId, {
+        timeoutMs,
+        baselineDeployId
+      });
+      if (deploy.deployStatus !== DEPLOY_STATUS_COMPLETE) {
+        deployResultKnown = true;
+        throw new NhnCloudCliError(
+          `API Gateway stage \uBC30\uD3EC \uC2E4\uD328: deployId=${deploy.deployId}, deployStatus=${deploy.deployStatus}`,
+          EXIT_API_ERROR
+        );
+      }
+    }
+  } catch (error) {
+    stopSpinner(false);
+    if (deployAccepted && !deployResultKnown) {
+      process.stderr.write(
+        "\uC8FC\uC758: \uBC30\uD3EC \uC694\uCCAD\uC740 \uC774\uBBF8 \uC811\uC218\uB410\uC2B5\uB2C8\uB2E4. \uC7AC\uC2E4\uD589\uD558\uC9C0 \uB9D0\uACE0 apigateway stage deploy latest \uB85C \uACB0\uACFC\uB97C \uD655\uC778\uD558\uC138\uC694.\n"
+      );
+    }
+    throw error;
+  }
+  stopSpinner(true);
+  if (!opts.wait) {
+    if (opts.json) {
+      printJson({ requested: true });
+    } else if (!opts.quiet) {
+      process.stderr.write(
+        "\uC548\uB0B4: \uBC30\uD3EC\uB97C \uC694\uCCAD\uD588\uC2B5\uB2C8\uB2E4. \uACB0\uACFC\uB294 apigateway stage deploy latest \uB85C \uD655\uC778\uD558\uC138\uC694.\n"
+      );
+    }
+    return;
+  }
+  if (deploy === void 0) {
+    throw new NhnCloudCliError(
+      "API Gateway stage \uBC30\uD3EC \uACB0\uACFC\uB97C \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.",
+      EXIT_API_ERROR
+    );
+  }
+  output(opts, {
+    headers: ["deployId", "deployStatus", "deployedAt", "deployDescription"],
+    rows: [[
+      sanitizeForTerminal(deploy.deployId),
+      sanitizeForTerminal(deploy.deployStatus),
+      sanitizeForTerminal(deploy.deployedAt),
+      sanitizeForTerminal(deploy.deployDescription)
+    ]],
+    raw: deploy,
+    ids: [sanitizeForTerminal(deploy.deployId)]
+  });
+});
+var rollbackCommand = addApiGatewayOptions2(
+  new import_commander50.Command("rollback").description("\uBC30\uD3EC \uC774\uB825\uC73C\uB85C stage \uC124\uC815\uC744 \uB418\uB3CC\uB9B0\uB2E4").argument("<service-id>", "API Gateway service ID").argument("<stage-id>", "API Gateway stage ID").argument("<deploy-id>", "\uB418\uB3CC\uB9B4 \uBC30\uD3EC ID").option("--yes", "\uB418\uB3CC\uB9AC\uAE30\uB97C \uD655\uC778\uD55C\uB2E4")
+).action(async (serviceId, stageId, deployId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedServiceId = parseRequiredArgument(serviceId, "service-id");
+  const parsedStageId = parseRequiredArgument(stageId, "stage-id");
+  const parsedDeployId = parseRequiredArgument(deployId, "deploy-id");
+  requireYes(opts.yes, "\uC2A4\uD14C\uC774\uC9C0 \uB418\uB3CC\uB9AC\uAE30");
+  const displayStageId = sanitizeForTerminal(parsedStageId);
+  const { client } = await resolveApiGatewayClient(opts);
+  startSpinner(`API Gateway stage "${displayStageId}" \uB418\uB3CC\uB9AC\uB294 \uC911...`);
+  let resources;
+  try {
+    resources = await client.rollbackDeploy(
+      parsedServiceId,
+      parsedStageId,
+      parsedDeployId
+    );
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  }
+  stopSpinner(true);
+  output(opts, writtenStageResourceOutput(resources));
+  process.stderr.write(
+    "\uC548\uB0B4: \uB418\uB3CC\uB9AC\uAE30\uB294 \uC2A4\uD14C\uC774\uC9C0 \uC124\uC815\uB9CC \uBC14\uAFC9\uB2C8\uB2E4. \uC11C\uBE44\uC2A4\uC5D0 \uC801\uC6A9\uD558\uB824\uBA74 apigateway stage deploy create \uB97C \uC2E4\uD589\uD558\uC138\uC694.\n"
+  );
+  process.stderr.write("\uC644\uB8CC: \uC9C1\uC804\uAE4C\uC9C0\uC758 \uC2A4\uD14C\uC774\uC9C0 \uC124\uC815\uC740 \uC774 \uBC30\uD3EC \uC774\uB825\uC758 \uB0B4\uC6A9\uC73C\uB85C \uB300\uCCB4\uB410\uC2B5\uB2C8\uB2E4.\n");
+});
+var deployCommand = new import_commander50.Command("deploy").description("API Gateway stage \uBC30\uD3EC \uC870\uD68C\uC640 \uC2E4\uD589 \uBA85\uB839").addCommand(listCommand12).addCommand(latestCommand).addCommand(createCommand8).addCommand(rollbackCommand);
 
 // src/commands/apigateway/stage.ts
 function addApiGatewayOptions3(command) {
-  return command.option("--region <region>", "API Gateway region (\uAE30\uBCF8: kr1)", "kr1").option("--app-key <key>", "API Gateway appKey (profile \uC758 apigateway.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984");
+  return command.option("--region <region>", "API Gateway region (\uAE30\uBCF8: kr1)", "kr1").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984");
 }
-function fileErrorReason(error) {
+function fileErrorReason2(error) {
   if (typeof error === "object" && error !== null && "code" in error) {
     const code = error.code;
     if (typeof code === "string") return code;
@@ -9098,12 +9987,12 @@ function fileErrorReason(error) {
 }
 async function writeStageSwaggerFile(path5, swagger, force) {
   try {
-    await (0, import_promises8.writeFile)(path5, JSON.stringify(swagger, null, 2) + "\n", {
+    await (0, import_promises9.writeFile)(path5, JSON.stringify(swagger, null, 2) + "\n", {
       encoding: "utf-8",
       flag: force ? "w" : "wx"
     });
   } catch (error) {
-    const reason = fileErrorReason(error);
+    const reason = fileErrorReason2(error);
     const guidance = reason === "EEXIST" ? " \uB36E\uC5B4\uC4F0\uB824\uBA74 --force \uB97C \uC9C0\uC815\uD558\uC138\uC694." : "";
     throw new NhnCloudCliError(
       `Swagger \uD30C\uC77C \uC800\uC7A5 \uC2E4\uD328: ${JSON.stringify(path5)} (${JSON.stringify(reason)}).${guidance}`,
@@ -9194,7 +10083,79 @@ var resourcesCommand = addApiGatewayOptions3(
     ids: resources.map((resource) => sanitizeForTerminal(resource.stageResourceId))
   });
 });
-var stageCommand = new import_commander51.Command("stage").description("API Gateway stage \uC870\uD68C \uBA85\uB839").addCommand(listCommand13).addCommand(swaggerCommand).addCommand(resourcesCommand).addCommand(deployCommand);
+var updateCommand2 = addApiGatewayOptions3(
+  new import_commander51.Command("update").description("API Gateway stage\uC758 backend endpoint URL\uACFC \uC124\uBA85\uC744 \uC218\uC815\uD55C\uB2E4").argument("<service-id>", "API Gateway service ID").argument("<stage-id>", "API Gateway stage ID").option("--backend-endpoint-url <url>", "\uBCC0\uACBD\uD560 backend endpoint URL").option("--description <text>", "\uBCC0\uACBD\uD560 stage \uC124\uBA85").option("--yes", "\uC2A4\uD14C\uC774\uC9C0 \uC218\uC815\uC744 \uD655\uC778\uD55C\uB2E4")
+).action(async (serviceId, stageId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedServiceId = parseRequiredArgument(serviceId, "service-id");
+  const parsedStageId = parseRequiredArgument(stageId, "stage-id");
+  if (opts.backendEndpointUrl === void 0 && opts.description === void 0) {
+    throw new NhnCloudCliError(
+      "\uC2A4\uD14C\uC774\uC9C0 \uC218\uC815\uC5D0\uC11C \uBC14\uAFC0 \uAC12\uC774 \uC5C6\uC2B5\uB2C8\uB2E4. --backend-endpoint-url \uB610\uB294 --description\uC744 \uC9C0\uC815\uD558\uC138\uC694.",
+      EXIT_PARAM_ERROR
+    );
+  }
+  requireYes(opts.yes, "\uC2A4\uD14C\uC774\uC9C0 \uC218\uC815");
+  const displayStageId = sanitizeForTerminal(parsedStageId);
+  const { client } = await resolveApiGatewayClient(opts);
+  startSpinner(`API Gateway stage "${displayStageId}" \uC218\uC815 \uC911...`);
+  let updatedStage;
+  try {
+    const stages = await client.listStages(parsedServiceId);
+    const existingStage = stages.find((stage) => stage.stageId === parsedStageId);
+    if (existingStage === void 0) {
+      throw new NhnCloudCliError(
+        `API Gateway stage "${displayStageId}"\uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.`,
+        EXIT_PARAM_ERROR
+      );
+    }
+    updatedStage = await client.updateStage(parsedServiceId, parsedStageId, {
+      backendEndpointUrl: opts.backendEndpointUrl ?? existingStage.backendEndpointUrl,
+      stageDescription: opts.description ?? existingStage.stageDescription
+    });
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["stageId", "stageName", "stageUrl", "backendEndpointUrl", "updatedAt"],
+    rows: [[
+      sanitizeForTerminal(updatedStage.stageId),
+      updatedStage.stageName === null ? "-" : sanitizeForTerminal(updatedStage.stageName),
+      sanitizeForTerminal(updatedStage.stageUrl),
+      sanitizeForTerminal(updatedStage.backendEndpointUrl),
+      sanitizeForTerminal(updatedStage.updatedAt)
+    ]],
+    raw: updatedStage,
+    ids: [sanitizeForTerminal(updatedStage.stageId)]
+  });
+  process.stderr.write("\uC548\uB0B4: \uC2A4\uD14C\uC774\uC9C0 \uBCC0\uACBD \uD6C4 \uC2E4\uC81C \uD2B8\uB798\uD53D \uBC18\uC601 \uC0C1\uD0DC\uB97C \uD655\uC778\uD558\uC138\uC694.\n");
+});
+var importResourcesCommand = addApiGatewayOptions3(
+  new import_commander51.Command("import-resources").description("API Gateway service \uC758 \uB9AC\uC18C\uC2A4\uB97C stage \uB85C \uAC00\uC838\uC628\uB2E4").argument("<service-id>", "API Gateway service ID").argument("<stage-id>", "API Gateway stage ID").option("--yes", "\uC2A4\uD14C\uC774\uC9C0 \uBC18\uC601\uC744 \uD655\uC778\uD55C\uB2E4")
+).action(async (serviceId, stageId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedServiceId = parseRequiredArgument(serviceId, "service-id");
+  const parsedStageId = parseRequiredArgument(stageId, "stage-id");
+  requireYes(opts.yes, "\uC2A4\uD14C\uC774\uC9C0 \uBC18\uC601");
+  const displayStageId = sanitizeForTerminal(parsedStageId);
+  const { client } = await resolveApiGatewayClient(opts);
+  startSpinner(`API Gateway stage "${displayStageId}" \uB9AC\uC18C\uC2A4 \uBC18\uC601 \uC911...`);
+  let resources;
+  try {
+    resources = await client.importStageResources(parsedServiceId, parsedStageId);
+  } catch (error) {
+    stopSpinner(false);
+    throw error;
+  }
+  stopSpinner(true);
+  output(opts, writtenStageResourceOutput(resources));
+  process.stderr.write(
+    "\uC548\uB0B4: \uBC18\uC601\uC740 \uC2A4\uD14C\uC774\uC9C0 \uC124\uC815\uB9CC \uBC14\uAFC9\uB2C8\uB2E4. \uC11C\uBE44\uC2A4\uC5D0 \uC801\uC6A9\uD558\uB824\uBA74 apigateway stage deploy create \uB97C \uC2E4\uD589\uD558\uC138\uC694.\n"
+  );
+});
+var stageCommand = new import_commander51.Command("stage").description("API Gateway stage \uC870\uD68C \uBC0F \uBCC0\uACBD \uBA85\uB839").addCommand(listCommand13).addCommand(swaggerCommand).addCommand(resourcesCommand).addCommand(updateCommand2).addCommand(importResourcesCommand).addCommand(deployCommand);
 
 // src/commands/loadbalancer/list.ts
 var import_commander52 = require("commander");
@@ -9203,10 +10164,10 @@ var import_commander52 = require("commander");
 var import_node_net = require("net");
 
 // src/services/loadbalancer/client.ts
-var import_ky14 = __toESM(require("ky"));
+var import_ky15 = __toESM(require("ky"));
 
 // src/services/loadbalancer/types.ts
-function isRecord2(value) {
+function isRecord3(value) {
   return typeof value === "object" && value !== null;
 }
 function isNonEmptyString(value) {
@@ -9216,29 +10177,29 @@ function isIpAclAction(value) {
   return value === "ALLOW" || value === "DENY";
 }
 function isLoadBalancerIpAclGroup(value) {
-  return isRecord2(value) && isNonEmptyString(value["ipacl_group_id"]);
+  return isRecord3(value) && isNonEmptyString(value["ipacl_group_id"]);
 }
 function isIpAclGroupLoadBalancer(value) {
-  return isRecord2(value) && isNonEmptyString(value["loadbalancer_id"]);
+  return isRecord3(value) && isNonEmptyString(value["loadbalancer_id"]);
 }
 function isLoadBalancer(value) {
-  if (!isRecord2(value)) return false;
+  if (!isRecord3(value)) return false;
   return isNonEmptyString(value["id"]) && typeof value["name"] === "string" && typeof value["vip_address"] === "string" && typeof value["provisioning_status"] === "string" && typeof value["operating_status"] === "string" && (value["ipacl_group_action"] === null || isIpAclAction(value["ipacl_group_action"])) && Array.isArray(value["ipacl_groups"]) && value["ipacl_groups"].every(isLoadBalancerIpAclGroup);
 }
 function isIpAclGroup(value) {
-  if (!isRecord2(value)) return false;
+  if (!isRecord3(value)) return false;
   return isNonEmptyString(value["id"]) && typeof value["name"] === "string" && isIpAclAction(value["action"]) && typeof value["ipacl_target_count"] === "string" && Array.isArray(value["loadbalancers"]) && value["loadbalancers"].every(isIpAclGroupLoadBalancer);
 }
 function isIpAclTarget(value) {
-  if (!isRecord2(value)) return false;
+  if (!isRecord3(value)) return false;
   return isNonEmptyString(value["id"]) && typeof value["cidr_address"] === "string" && typeof value["description"] === "string" && isNonEmptyString(value["ipacl_group_id"]);
 }
 function isIpAclBinding(value) {
-  return isRecord2(value) && isNonEmptyString(value["loadbalancer_id"]) && isNonEmptyString(value["ipacl_group_id"]);
+  return isRecord3(value) && isNonEmptyString(value["loadbalancer_id"]) && isNonEmptyString(value["ipacl_group_id"]);
 }
 
 // src/services/loadbalancer/client.ts
-function isRecord3(value) {
+function isRecord4(value) {
   return typeof value === "object" && value !== null;
 }
 function requireNonEmptyId(id, label) {
@@ -9249,7 +10210,7 @@ function requireNonEmptyId(id, label) {
   return normalized;
 }
 function readArrayField(response, key, itemGuard, missingKeyMessage, invalidItemMessage) {
-  if (!isRecord3(response) || !Array.isArray(response[key])) {
+  if (!isRecord4(response) || !Array.isArray(response[key])) {
     throw new NhnCloudCliError(missingKeyMessage, EXIT_API_ERROR);
   }
   const items = response[key];
@@ -9259,7 +10220,7 @@ function readArrayField(response, key, itemGuard, missingKeyMessage, invalidItem
   return items;
 }
 function readObjectField(response, key, itemGuard, missingKeyMessage, invalidItemMessage) {
-  if (!isRecord3(response) || !(key in response)) {
+  if (!isRecord4(response) || !(key in response)) {
     throw new NhnCloudCliError(missingKeyMessage, EXIT_API_ERROR);
   }
   const item = response[key];
@@ -9400,7 +10361,7 @@ var LoadBalancerClient = class {
   async getJson(path5, searchParams) {
     const url = `${this.endpoint}${path5}`;
     try {
-      return await import_ky14.default.get(url, {
+      return await import_ky15.default.get(url, {
         headers: this.authHeaders(),
         searchParams,
         retry: 0,
@@ -9413,7 +10374,7 @@ var LoadBalancerClient = class {
   async postJson(path5, json) {
     const url = `${this.endpoint}${path5}`;
     try {
-      return await import_ky14.default.post(url, {
+      return await import_ky15.default.post(url, {
         headers: this.authHeaders(),
         json,
         retry: 0,
@@ -9426,7 +10387,7 @@ var LoadBalancerClient = class {
   async putJson(path5, json) {
     const url = `${this.endpoint}${path5}`;
     try {
-      return await import_ky14.default.put(url, {
+      return await import_ky15.default.put(url, {
         headers: this.authHeaders(),
         json,
         retry: 0,
@@ -9439,7 +10400,7 @@ var LoadBalancerClient = class {
   async deleteNoContent(path5) {
     const url = `${this.endpoint}${path5}`;
     try {
-      await import_ky14.default.delete(url, {
+      await import_ky15.default.delete(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -9462,7 +10423,7 @@ function optionalTrimmed(value) {
   if (value === void 0) return void 0;
   return value.trim();
 }
-function requireYes(yes, operation) {
+function requireYes2(yes, operation) {
   if (!yes) {
     throw new NhnCloudCliError(
       `${operation}\uC5D0\uB294 --yes \uD50C\uB798\uADF8\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.`,
@@ -9652,9 +10613,6 @@ var import_commander55 = require("commander");
 var import_commander54 = require("commander");
 
 // src/commands/loadbalancer/rebind.ts
-function sanitizeForTerminal2(value) {
-  return value.replace(/[\x00-\x1F\x7F]/g, "?");
-}
 function shellQuote(value) {
   return `'${value.replace(/'/g, `'"'"'`)}'`;
 }
@@ -9765,9 +10723,9 @@ function writeTargetWarnings(group, result) {
 `
     );
     for (const failure of result.rebind.failed) {
-      process.stderr.write(`${sanitizeForTerminal2(failure.retry_command)}
+      process.stderr.write(`${sanitizeForTerminal(failure.retry_command)}
 `);
-      process.stderr.write(`  \uC624\uB958: ${sanitizeForTerminal2(failure.error)}
+      process.stderr.write(`  \uC624\uB958: ${sanitizeForTerminal(failure.error)}
 `);
     }
   }
@@ -9814,7 +10772,7 @@ var listCommand15 = new import_commander54.Command("list").description("IP ACL \
 });
 var addCommand = new import_commander54.Command("add").description("IP ACL \uB300\uC0C1\uC744 \uCD94\uAC00\uD558\uACE0 \uC5F0\uACB0\uB41C Load Balancer\uB97C \uC7AC\uBC14\uC778\uB529\uD55C\uB2E4").argument("<group>", "IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID").requiredOption("--cidr <ip-or-cidr>", "\uCD94\uAC00\uD560 IP \uC8FC\uC18C \uB610\uB294 CIDR").option("--description <text>", "IP ACL \uB300\uC0C1 \uC124\uBA85").option("--no-rebind", "\uB300\uC0C1 \uCD94\uAC00 \uD6C4 Load Balancer \uC7AC\uBC14\uC778\uB529 \uC0DD\uB7B5").option("--yes", "\uB300\uC0C1 \uCD94\uAC00 \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (groupInput, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
-  requireYes(opts.yes, "IP ACL \uB300\uC0C1 \uCD94\uAC00");
+  requireYes2(opts.yes, "IP ACL \uB300\uC0C1 \uCD94\uAC00");
   const parsedGroup = requireResourceInput(groupInput, "IP ACL \uADF8\uB8F9");
   const parsedCidr = parseIpOrCidr(opts.cidr ?? "");
   const parsedDescription = optionalTrimmed(opts.description);
@@ -9851,7 +10809,7 @@ var addCommand = new import_commander54.Command("add").description("IP ACL \uB30
 });
 var removeCommand = new import_commander54.Command("remove").description("IP ACL \uB300\uC0C1\uC744 \uC0AD\uC81C\uD558\uACE0 \uC5F0\uACB0\uB41C Load Balancer\uB97C \uC7AC\uBC14\uC778\uB529\uD55C\uB2E4").argument("<target-id>", "\uC0AD\uC81C\uD560 IP ACL \uB300\uC0C1 UUID").option("--no-rebind", "\uB300\uC0C1 \uC0AD\uC81C \uD6C4 Load Balancer \uC7AC\uBC14\uC778\uB529 \uC0DD\uB7B5").option("--yes", "\uB300\uC0C1 \uC0AD\uC81C \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (targetInput, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
-  requireYes(opts.yes, "IP ACL \uB300\uC0C1 \uC0AD\uC81C");
+  requireYes2(opts.yes, "IP ACL \uB300\uC0C1 \uC0AD\uC81C");
   const parsedTargetId = requireResourceInput(targetInput, "IP ACL \uB300\uC0C1");
   const { client } = await resolveLoadBalancerClient(opts);
   startSpinner("IP ACL \uB300\uC0C1 \uC0AD\uC81C\uC640 Load Balancer \uC7AC\uBC14\uC778\uB529 \uC911...");
@@ -9947,7 +10905,7 @@ var getCommand10 = new import_commander55.Command("get").description("IP ACL \uA
     ids: [group.id]
   });
 });
-var createCommand8 = new import_commander55.Command("create").description("IP ACL \uADF8\uB8F9\uC744 \uC0DD\uC131\uD55C\uB2E4").requiredOption("--name <name>", "IP ACL \uADF8\uB8F9 \uC774\uB984").requiredOption("--action <ALLOW|DENY>", "IP \uC811\uADFC \uC81C\uC5B4 \uB3D9\uC791").option("--description <text>", "IP ACL \uADF8\uB8F9 \uC124\uBA85").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+var createCommand9 = new import_commander55.Command("create").description("IP ACL \uADF8\uB8F9\uC744 \uC0DD\uC131\uD55C\uB2E4").requiredOption("--name <name>", "IP ACL \uADF8\uB8F9 \uC774\uB984").requiredOption("--action <ALLOW|DENY>", "IP \uC811\uADFC \uC81C\uC5B4 \uB3D9\uC791").option("--description <text>", "IP ACL \uADF8\uB8F9 \uC124\uBA85").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   const parsedName = requireResourceInput(opts.name ?? "", "IP ACL \uADF8\uB8F9");
   const parsedAction = parseIpAclAction(opts.action ?? "");
@@ -9980,7 +10938,7 @@ var createCommand8 = new import_commander55.Command("create").description("IP AC
 });
 var deleteCommand7 = new import_commander55.Command("delete").description("IP ACL \uADF8\uB8F9\uACFC \uD558\uC704 \uB300\uC0C1\uC744 \uC0AD\uC81C\uD55C\uB2E4").argument("<group>", "IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID").option("--yes", "\uC0AD\uC81C\uC640 \uC5F0\uACB0 \uADDC\uCE59 \uC81C\uAC70 \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (groupInput, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
-  const confirmedYes = requireYes(opts.yes, "IP ACL \uADF8\uB8F9 \uC0AD\uC81C");
+  const confirmedYes = requireYes2(opts.yes, "IP ACL \uADF8\uB8F9 \uC0AD\uC81C");
   const parsedGroup = requireResourceInput(groupInput, "IP ACL \uADF8\uB8F9");
   if (confirmedYes) {
     process.stderr.write(
@@ -10013,7 +10971,7 @@ var deleteCommand7 = new import_commander55.Command("delete").description("IP AC
 var ipaclCommand = new import_commander55.Command("ipacl").description("IP ACL \uADF8\uB8F9\xB7\uB300\uC0C1 \uC870\uD68C");
 ipaclCommand.addCommand(listCommand16);
 ipaclCommand.addCommand(getCommand10);
-ipaclCommand.addCommand(createCommand8);
+ipaclCommand.addCommand(createCommand9);
 ipaclCommand.addCommand(deleteCommand7);
 ipaclCommand.addCommand(targetCommand);
 
@@ -10054,7 +11012,7 @@ var setIpAclCommand2 = new import_commander56.Command("set-ipacl").description("
   collectOption
 ).option("--yes", "\uAE30\uC874 \uC5F0\uACB0 \uC804\uCCB4 \uAD50\uCCB4 \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (loadBalancerInput, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
-  const confirmedYes = requireYes(opts.yes, "Load Balancer IP ACL \uC5F0\uACB0 \uAD50\uCCB4");
+  const confirmedYes = requireYes2(opts.yes, "Load Balancer IP ACL \uC5F0\uACB0 \uAD50\uCCB4");
   const parsedLoadBalancer = requireResourceInput(loadBalancerInput, "Load Balancer");
   const parsedGroups = requireResourceInputs(opts.group ?? [], "IP ACL \uADF8\uB8F9");
   const { client } = await resolveLoadBalancerClient(opts);
@@ -10090,7 +11048,7 @@ var setIpAclCommand2 = new import_commander56.Command("set-ipacl").description("
 });
 var clearIpAclCommand = new import_commander56.Command("clear-ipacl").description("Load Balancer\uC758 \uBAA8\uB4E0 IP ACL \uADF8\uB8F9 \uC5F0\uACB0\uC744 \uD574\uC81C\uD55C\uB2E4").argument("<loadbalancer>", "Load Balancer \uC774\uB984 \uB610\uB294 UUID").option("--yes", "\uBAA8\uB4E0 IP ACL \uC5F0\uACB0 \uD574\uC81C \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (loadBalancerInput, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
-  const confirmedYes = requireYes(opts.yes, "Load Balancer IP ACL \uC5F0\uACB0 \uD574\uC81C");
+  const confirmedYes = requireYes2(opts.yes, "Load Balancer IP ACL \uC5F0\uACB0 \uD574\uC81C");
   const parsedLoadBalancer = requireResourceInput(loadBalancerInput, "Load Balancer");
   const { client } = await resolveLoadBalancerClient(opts);
   startSpinner("Load Balancer IP ACL \uC5F0\uACB0 \uD574\uC81C \uC911...");
@@ -10177,7 +11135,7 @@ Agent workflow:
   3. nhncloud ncs workload get <id> --json
 `;
 var program = new import_commander57.Command();
-program.name("nhncloud").description("NHN Cloud CLI \u2014 AI agent & terminal friendly").version("0.13.0").option("--json", "JSON \uD615\uC2DD\uC73C\uB85C \uCD9C\uB825").option("--quiet", "\uCD5C\uC18C \uCD9C\uB825 (\uC790\uB3D9\uD654\uC6A9)").option("--no-color", "\uC0C9\uC0C1 \uBE44\uD65C\uC131\uD654").option("--request-timeout <sec>", "HTTP \uC694\uCCAD \uD0C0\uC784\uC544\uC6C3 (\uCD08, \uAE30\uBCF8 30, \uBC94\uC704 1~3600). NHNCLOUD_REQUEST_TIMEOUT \uB85C\uB3C4 \uC9C0\uC815").addHelpText("after", rootAgentHints);
+program.name("nhncloud").description("NHN Cloud CLI \u2014 AI agent & terminal friendly").version("0.14.0").option("--json", "JSON \uD615\uC2DD\uC73C\uB85C \uCD9C\uB825").option("--quiet", "\uCD5C\uC18C \uCD9C\uB825 (\uC790\uB3D9\uD654\uC6A9)").option("--no-color", "\uC0C9\uC0C1 \uBE44\uD65C\uC131\uD654").option("--request-timeout <sec>", "HTTP \uC694\uCCAD \uD0C0\uC784\uC544\uC6C3 (\uCD08, \uAE30\uBCF8 30, \uBC94\uC704 1~3600). NHNCLOUD_REQUEST_TIMEOUT \uB85C\uB3C4 \uC9C0\uC815").addHelpText("after", rootAgentHints);
 program.hook("preAction", () => {
   const opts = program.opts();
   const rawTimeout = opts.requestTimeout ?? process.env["NHNCLOUD_REQUEST_TIMEOUT"];
@@ -10283,7 +11241,9 @@ program.addCommand(skillsCommand);
 program.addCommand(doctorCommand);
 program.addCommand(createCommandsCommand(program));
 program.parseAsync().catch((err) => {
-  const message = err instanceof Error ? err.message : String(err);
+  const message = sanitizeMultilineForTerminal(
+    err instanceof Error ? err.message : String(err)
+  );
   const exitCode = err instanceof NhnCloudCliError ? err.exitCode : 1;
   process.stderr.write(import_chalk17.default.red(`\uC624\uB958: ${message}`) + "\n");
   process.exit(exitCode);