@bifos/nhncloud-cli 0.18.0 → 0.19.0

package/dist/index.js

@@ -24,7 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 
 // src/index.ts
-var import_commander64 = require("commander");
+var import_commander72 = require("commander");
 var import_chalk18 = __toESM(require("chalk"));
 
 // src/utils/spinner.ts
@@ -413,6 +413,17 @@ function configureCommanderExitCodes(root) {
   }
 }
 
+// src/commands/help.ts
+function configureGlobalOptionsHelp(root) {
+  root.configureHelp({ showGlobalOptions: true });
+  for (const child of root.commands) {
+    configureGlobalOptionsHelp(child);
+  }
+}
+
+// src/version.ts
+var CLI_VERSION = true ? "0.19.0" : "0.0.0-dev";
+
 // src/commands/configure.ts
 var import_commander2 = require("commander");
 var import_chalk2 = __toESM(require("chalk"));
@@ -517,6 +528,13 @@ async function writeToken(profile, accessToken, expiresAt, credentialHash) {
 
 // src/api/httpError.ts
 var import_ky = require("ky");
+async function readHttpErrorBody(err) {
+  try {
+    return await err.response.clone().json();
+  } catch {
+    return void 0;
+  }
+}
 function toNhnCloudCliError(err) {
   if (err instanceof NhnCloudCliError) {
     return err;
@@ -592,10 +610,12 @@ var import_ky3 = __toESM(require("ky"));
 var ENDPOINTS = {
   logncrash: "https://api-lncs-search.nhncloudservice.com",
   "logncrash-collector": "https://api-logncrash.nhncloudservice.com",
-  deploy: "https://api-deploy.nhncloudservice.com"
+  deploy: "https://api-deploy.nhncloudservice.com",
+  skm: "https://api-keymanager.nhncloudservice.com"
 };
 var GOV_ENDPOINTS = {
-  deploy: "https://api-tcd.gov-nhncloudservice.com"
+  deploy: "https://api-tcd.gov-nhncloudservice.com",
+  skm: "https://api-keymanager.gov-nhncloudservice.com"
 };
 function endpointFor(service, environment = "real") {
   const endpoints = environment === "gov" ? GOV_ENDPOINTS : ENDPOINTS;
@@ -875,12 +895,9 @@ async function toLogncrashError(err) {
     return toNhnCloudCliError(err);
   }
   let requestId = null;
-  try {
-    const body = await err.response.json();
-    if (typeof body === "object" && body !== null && "requestId" in body && typeof body.requestId === "string") {
-      requestId = body.requestId;
-    }
-  } catch {
+  const body = await readHttpErrorBody(err);
+  if (typeof body === "object" && body !== null && "requestId" in body && typeof body.requestId === "string") {
+    requestId = body.requestId;
   }
   return new LogncrashServerError(
     `API \uD638\uCD9C \uC2E4\uD328 (500): ${err.message}`,
@@ -2009,7 +2026,7 @@ async function verifyLogncrash(uak, appkey) {
 }
 
 // src/commands/configure.ts
-async function saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, apigateway, deploy, doVerify, logncrashUak = uak) {
+async function saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, apigateway, skm, deploy, doVerify, logncrashUak = uak) {
   if (doVerify) {
     if (await getProfileEnvironment(profileName, true) === "gov") {
       throw new NhnCloudCliError(
@@ -2115,6 +2132,9 @@ async function saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, apigat
   if (apigateway) {
     await setServiceCredential(profileName, "apigateway", apigateway);
   }
+  if (skm) {
+    await setServiceCredential(profileName, "skm", skm);
+  }
   if (deploy) {
     await setServiceCredential(profileName, "deploy", deploy);
   }
@@ -2244,7 +2264,7 @@ async function runInteractive(opts) {
   }
   if (opts.verify) {
     try {
-      await saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, void 0, deploy, true, uak);
+      await saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, void 0, void 0, deploy, true, uak);
     } catch (err) {
       if (err instanceof NhnCloudCliError && err.exitCode === EXIT_AUTH_ERROR) {
         process.stderr.write(import_chalk2.default.red(`  \u2717 ${sanitizeMultilineForTerminal(err.message)}
@@ -2257,13 +2277,13 @@ async function runInteractive(opts) {
           process.stderr.write(import_chalk2.default.yellow("\uC800\uC7A5\uC774 \uCDE8\uC18C\uB418\uC5C8\uC2B5\uB2C8\uB2E4.\n"));
           return;
         }
-        await saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, void 0, deploy, false, uak);
+        await saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, void 0, void 0, deploy, false, uak);
       } else {
         throw err;
       }
     }
   } else {
-    await saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, void 0, deploy, false, uak);
+    await saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, void 0, void 0, deploy, false, uak);
   }
 }
 async function runNonInteractive(opts) {
@@ -2287,6 +2307,9 @@ async function runNonInteractive(opts) {
   if (opts.apigatewayAppkey !== void 0 && opts.apigatewayAppkey.trim().length === 0) {
     throw new NhnCloudCliError("--apigateway-appkey \uAC12\uC740 \uBE44\uC5B4 \uC788\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
   }
+  if (opts.skmAppkey !== void 0 && opts.skmAppkey.trim().length === 0) {
+    throw new NhnCloudCliError("--skm-appkey \uAC12\uC740 \uBE44\uC5B4 \uC788\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
   if (opts.deployAppkey !== void 0 && opts.deployAppkey.trim().length === 0) {
     throw new NhnCloudCliError("--deploy-appkey \uAC12\uC740 \uBE44\uC5B4 \uC788\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
   }
@@ -2309,10 +2332,11 @@ async function runNonInteractive(opts) {
   const ncr = opts.ncrAppkey?.trim() ? { appkey: opts.ncrAppkey.trim() } : void 0;
   const ncs = opts.ncsAppkey?.trim() ? { appkey: opts.ncsAppkey.trim() } : void 0;
   const apigateway = opts.apigatewayAppkey?.trim() ? { appkey: opts.apigatewayAppkey.trim() } : void 0;
+  const skm = opts.skmAppkey?.trim() ? { appkey: opts.skmAppkey.trim() } : void 0;
   const deploy = opts.deployAppkey?.trim() ? { appkey: opts.deployAppkey.trim() } : void 0;
-  if (!uak && !logncrash && !iaas && !ncr && !ncs && !apigateway && !deploy) {
+  if (!uak && !logncrash && !iaas && !ncr && !ncs && !apigateway && !skm && !deploy) {
     throw new NhnCloudCliError(
-      "\uBE44\uB300\uD654\uD615 \uBAA8\uB4DC: --uak-id + UAK secret, --logncrash-appkey,\n--iaas-tenant-id + --iaas-username + iaas password,\n--ncr-appkey, --ncs-appkey, --apigateway-appkey, \uB610\uB294 --deploy-appkey\n\uC911 \uD558\uB098\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.\nsecret/password \uB294 \uB178\uCD9C \uBC29\uC9C0\uB97C \uC704\uD574 \uD658\uACBD\uBCC0\uC218 \uAD8C\uC7A5:\nNHNCLOUD_UAK_SECRET / NHNCLOUD_IAAS_PASSWORD.",
+      "\uBE44\uB300\uD654\uD615 \uBAA8\uB4DC: --uak-id + UAK secret, --logncrash-appkey,\n--iaas-tenant-id + --iaas-username + iaas password,\n--ncr-appkey, --ncs-appkey, --apigateway-appkey, --skm-appkey, \uB610\uB294 --deploy-appkey\n\uC911 \uD558\uB098\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.\nsecret/password \uB294 \uB178\uCD9C \uBC29\uC9C0\uB97C \uC704\uD574 \uD658\uACBD\uBCC0\uC218 \uAD8C\uC7A5:\nNHNCLOUD_UAK_SECRET / NHNCLOUD_IAAS_PASSWORD.",
       EXIT_PARAM_ERROR
     );
   }
@@ -2331,6 +2355,7 @@ async function runNonInteractive(opts) {
     ncr,
     ncs,
     apigateway,
+    skm,
     deploy,
     opts.verify,
     logncrashUak
@@ -2339,8 +2364,8 @@ async function runNonInteractive(opts) {
 var configureCommand = new import_commander2.Command("configure").description("\uC790\uACA9\uC99D\uBA85 \uC124\uC815 \uB9C8\uBC95\uC0AC (\uB300\uD654\uD615 + flag)").option("--profile <name>", "\uB300\uC0C1 profile \uC774\uB984 (\uAE30\uBCF8: default)").option("--uak-id <id>", "\uAC1C\uC778 UAK ID (\uBE44\uB300\uD654\uD615)").option("--uak-secret <secret>", "\uAC1C\uC778 UAK Secret (\uBE44\uB300\uD654\uD615, \uB178\uCD9C \uBC29\uC9C0\uB85C env NHNCLOUD_UAK_SECRET \uAD8C\uC7A5)").option("--logncrash-appkey <key>", "logncrash appkey (\uBE44\uB300\uD654\uD615)").option("--logncrash-secret <secret>", "\uD3D0\uAE30 \uC608\uC815: Search v3\uC5D0\uC11C\uB294 \uC0AC\uC6A9\xB7\uC800\uC7A5\uD558\uC9C0 \uC54A\uC74C").option("--iaas-tenant-id <id>", "iaas tenantId / \uD504\uB85C\uC81D\uD2B8 ID (\uBE44\uB300\uD654\uD615)").option("--iaas-username <user>", "iaas IAM username (\uBE44\uB300\uD654\uD615)").option(
   "--iaas-password <pass>",
   "iaas API \uBE44\uBC00\uBC88\uD638 (\uBE44\uB300\uD654\uD615, \uB178\uCD9C \uBC29\uC9C0\uB85C env NHNCLOUD_IAAS_PASSWORD \uAD8C\uC7A5)"
-).option("--iaas-region <region>", "iaas region (\uAE30\uBCF8: kr1)", "kr1").option("--ncr-appkey <key>", "ncr appkey (\uBE44\uB300\uD654\uD615)").option("--ncs-appkey <key>", "ncs appkey (\uBE44\uB300\uD654\uD615)").option("--apigateway-appkey <key>", "API Gateway appkey (\uBE44\uB300\uD654\uD615)").option("--deploy-appkey <key>", "deploy appkey (\uBE44\uB300\uD654\uD615)").option("--no-verify", "\uC5F0\uACB0 \uD14C\uC2A4\uD2B8 \uC0DD\uB7B5").action(async (opts) => {
-  const hasFlag = opts.uakId !== void 0 || opts.uakSecret !== void 0 || opts.logncrashAppkey !== void 0 || opts.logncrashSecret !== void 0 || opts.iaasTenantId !== void 0 || opts.iaasUsername !== void 0 || opts.iaasPassword !== void 0 || opts.ncrAppkey !== void 0 || opts.ncsAppkey !== void 0 || opts.apigatewayAppkey !== void 0 || opts.deployAppkey !== void 0;
+).option("--iaas-region <region>", "iaas region (\uAE30\uBCF8: kr1)", "kr1").option("--ncr-appkey <key>", "ncr appkey (\uBE44\uB300\uD654\uD615)").option("--ncs-appkey <key>", "ncs appkey (\uBE44\uB300\uD654\uD615)").option("--apigateway-appkey <key>", "API Gateway appkey (\uBE44\uB300\uD654\uD615)").option("--skm-appkey <key>", "Secure Key Manager appkey (\uBE44\uB300\uD654\uD615)").option("--deploy-appkey <key>", "deploy appkey (\uBE44\uB300\uD654\uD615)").option("--no-verify", "\uC5F0\uACB0 \uD14C\uC2A4\uD2B8 \uC0DD\uB7B5").action(async (opts) => {
+  const hasFlag = opts.uakId !== void 0 || opts.uakSecret !== void 0 || opts.logncrashAppkey !== void 0 || opts.logncrashSecret !== void 0 || opts.iaasTenantId !== void 0 || opts.iaasUsername !== void 0 || opts.iaasPassword !== void 0 || opts.ncrAppkey !== void 0 || opts.ncsAppkey !== void 0 || opts.apigatewayAppkey !== void 0 || opts.skmAppkey !== void 0 || opts.deployAppkey !== void 0;
   try {
     if (hasFlag) {
       await runNonInteractive(opts);
@@ -5405,13 +5430,10 @@ async function toNetworkWriteError(err) {
     return base;
   }
   let reason = null;
-  try {
-    const body = await err.response.json();
-    const neutron = typeof body === "object" && body !== null ? body["NeutronError"] : void 0;
-    const message = typeof neutron === "object" && neutron !== null ? neutron["message"] : void 0;
-    if (typeof message === "string") reason = message;
-  } catch {
-  }
+  const body = await readHttpErrorBody(err);
+  const neutron = typeof body === "object" && body !== null ? body["NeutronError"] : void 0;
+  const message = typeof neutron === "object" && neutron !== null ? neutron["message"] : void 0;
+  if (typeof message === "string") reason = message;
   if (reason === null) return base;
   return new NhnCloudCliError(
     `${base.message}
@@ -11200,19 +11222,1343 @@ var importResourcesCommand = addApiGatewayOptions3(
 });
 var stageCommand = new import_commander58.Command("stage").description("API Gateway stage \uC870\uD68C \uBC0F \uBCC0\uACBD \uBA85\uB839").addCommand(listCommand15).addCommand(swaggerCommand).addCommand(resourcesCommand).addCommand(updateCommand3).addCommand(importResourcesCommand).addCommand(deployCommand);
 
-// src/commands/loadbalancer/list.ts
+// src/commands/skm/confirm.ts
 var import_commander59 = require("commander");
 
-// src/commands/loadbalancer/helpers.ts
+// src/commands/skm/helpers.ts
 var import_node_net2 = require("net");
 
-// src/services/loadbalancer/client.ts
+// src/services/skm/client.ts
 var import_ky16 = __toESM(require("ky"));
 
-// src/services/loadbalancer/types.ts
+// src/services/skm/types.ts
 function isRecord3(value) {
   return typeof value === "object" && value !== null;
 }
+function hasStrings(obj, keys) {
+  return keys.every((key) => typeof obj[key] === "string");
+}
+function hasNumbers(obj, keys) {
+  return keys.every((key) => typeof obj[key] === "number");
+}
+function hasOptional(obj, keys, type) {
+  return keys.every((key) => obj[key] === void 0 || obj[key] === null || typeof obj[key] === type);
+}
+var AUDIT_FIELDS = ["creationUser", "creationDatetime", "lastChangeUser", "lastChangeDatetime"];
+function isSkmClientInfo(value) {
+  if (!isRecord3(value)) return false;
+  return typeof value["clientIp"] === "string" && typeof value["clientSentCertificate"] === "boolean" && hasOptional(value, ["clientMacHeader"], "string");
+}
+function isSkmKeyStore(value) {
+  if (!isRecord3(value)) return false;
+  return typeof value["keyStoreId"] === "number" && hasStrings(value, ["name", "ip4AuthUse", "macAuthUse", "certificateAuthUse"]) && hasOptional(value, ["description", ...AUDIT_FIELDS], "string");
+}
+function isSkmKey(value) {
+  if (!isRecord3(value)) return false;
+  return hasStrings(value, ["keyId", "name", "keyType"]) && typeof value["currentKeyValueVersion"] === "number" && hasOptional(value, ["autoRotationPeriod"], "number") && hasOptional(
+    value,
+    ["description", "nextAutoRotationDate", "lastAccessDatetime", "deletionDatetime", ...AUDIT_FIELDS],
+    "string"
+  );
+}
+function isSkmAuthDetail(value) {
+  if (!isRecord3(value)) return false;
+  return (typeof value["value"] === "string" || typeof value["name"] === "string") && hasOptional(
+    value,
+    [
+      "value",
+      "name",
+      "password",
+      "description",
+      "expirationDate",
+      "lastAccessDatetime",
+      "deletionDatetime",
+      ...AUDIT_FIELDS
+    ],
+    "string"
+  );
+}
+function isSkmEncryptResult(value) {
+  return isRecord3(value) && hasStrings(value, ["ciphertext"]) && hasNumbers(value, ["keyVersion"]);
+}
+function isSkmDecryptResult(value) {
+  return isRecord3(value) && hasStrings(value, ["plaintext"]) && hasNumbers(value, ["keyVersion"]);
+}
+function isSkmLocalKey(value) {
+  return isRecord3(value) && hasStrings(value, ["localKeyPlaintext", "localKeyCiphertext"]) && hasNumbers(value, ["keyVersion"]);
+}
+function isSkmSymmetricKey(value) {
+  return isRecord3(value) && hasStrings(value, ["symmetricKey"]) && hasNumbers(value, ["keyVersion"]);
+}
+function isSkmSignResult(value) {
+  return isRecord3(value) && hasStrings(value, ["signature"]) && hasNumbers(value, ["keyVersion"]);
+}
+function isSkmStandardSignResult(value) {
+  return isRecord3(value) && hasStrings(value, ["signature", "algorithm", "hashAlgorithm", "mgfAlgorithm"]) && hasNumbers(value, ["keyVersion", "saltLength"]);
+}
+function isSkmVerifyResult(value) {
+  return isRecord3(value) && typeof value["result"] === "boolean" && hasNumbers(value, ["keyVersion"]);
+}
+function isSkmAsymmetricKeyMaterial(value) {
+  return isRecord3(value) && hasStrings(value, ["keyType", "key", "encodedKey"]) && hasOptional(value, ["standardEncodedKey"], "string") && hasNumbers(value, ["keyVersion"]);
+}
+function isSkmCreatedKey(value) {
+  return isRecord3(value) && hasStrings(value, ["keyId", "keyStatus"]);
+}
+function isSkmCreatedKeyStore(value) {
+  if (!isRecord3(value)) return false;
+  return typeof value["keyStoreId"] === "number" && hasStrings(value, ["name", "ip4AuthUse", "macAuthUse", "certificateAuthUse"]) && hasOptional(value, ["description", "authMode"], "string");
+}
+function isSkmUpdatedSecret(value) {
+  if (!isRecord3(value)) return false;
+  return hasStrings(value, ["keyId", "name"]) && hasOptional(value, ["description", "secretValue", ...AUDIT_FIELDS], "string");
+}
+function isSkmDeletion(value) {
+  return isRecord3(value) && hasStrings(value, ["keyId", "deletionDateTime"]);
+}
+function hasAuthIdentifier(obj) {
+  return (typeof obj["value"] === "string" || typeof obj["name"] === "string") && hasOptional(obj, ["value", "name"], "string");
+}
+function isSkmAuthAdded(value) {
+  return isRecord3(value) && hasAuthIdentifier(value) && hasOptional(value, ["description"], "string");
+}
+function isSkmAuthDeletion(value) {
+  return isRecord3(value) && hasAuthIdentifier(value) && hasStrings(value, ["deletionDateTime"]);
+}
+
+// src/services/skm/client.ts
+var KEY_PAGE_SIZE = 100;
+var STANDARD_SIGN_ALGORITHM = "RSASSA-PSS";
+var AUTH_PATHS = {
+  ipv4: { path: "ips", field: "ipv4List" },
+  mac: { path: "macs", field: "macList" },
+  certificate: { path: "certificates", field: "certificateList" }
+};
+var AUTH_WRITE_PATH = {
+  ipv4: "ipv4s",
+  mac: "macs",
+  certificate: "certificates"
+};
+function isRecord4(value) {
+  return typeof value === "object" && value !== null;
+}
+function isEnvelope(value) {
+  if (!isRecord4(value)) return false;
+  const header = value["header"];
+  return isRecord4(header) && typeof header["isSuccessful"] === "boolean";
+}
+function arrayOf(guard) {
+  return (value) => Array.isArray(value) && value.every(guard);
+}
+function isString(value) {
+  return typeof value === "string";
+}
+function withDescription(body, description) {
+  return description === void 0 ? body : { ...body, description };
+}
+function authDeletionBody(type, keyStoreName, value) {
+  return type === "certificate" ? { keyStoreName, name: value } : { keyStoreName, value };
+}
+function keyStoreBody(input) {
+  const { name, description, ip4AuthUse, macAuthUse, certificateAuthUse, authMode } = input;
+  return withDescription({ name, ip4AuthUse, macAuthUse, certificateAuthUse, authMode }, description);
+}
+function keyVersionParams(keyVersion) {
+  return keyVersion === void 0 ? {} : { searchParams: { keyVersion } };
+}
+async function toSkmError(err) {
+  if (!(err instanceof import_ky16.HTTPError)) return toNhnCloudCliError(err);
+  let resultMessage = null;
+  const body = await readHttpErrorBody(err);
+  const header = isRecord4(body) ? body["header"] : void 0;
+  const message = isRecord4(header) ? header["resultMessage"] : void 0;
+  if (typeof message === "string") resultMessage = message;
+  if (resultMessage === null) return toNhnCloudCliError(err);
+  const status = err.response.status;
+  return new NhnCloudCliError(
+    `API \uD638\uCD9C \uC2E4\uD328 (${status}): ${sanitizeForTerminal(resultMessage)}`,
+    status === 401 || status === 403 ? EXIT_AUTH_ERROR : EXIT_API_ERROR
+  );
+}
+var SkmClient = class {
+  baseUrl;
+  headers;
+  constructor(accessToken, environment, appKey, macAddress) {
+    this.baseUrl = `${endpointFor("skm", environment)}/keymanager/v1.3/appkey/${encodeURIComponent(appKey)}`;
+    this.headers = { "X-NHN-Authorization": `Bearer ${accessToken}` };
+    if (macAddress !== void 0) {
+      this.headers["X-TOAST-CLIENT-MAC-ADDR"] = macAddress;
+    }
+  }
+  /**
+   * 요청을 보내고 봉투 형태인지만 확인해 반환한다. 성공 판정은 호출부가 한다.
+   * 쓰기 요청도 중복 실행을 막으려고 재시도하지 않는다.
+   */
+  async send(method, path5, options) {
+    let response;
+    try {
+      response = await import_ky16.default[method](`${this.baseUrl}${path5}`, {
+        headers: this.headers,
+        ...options,
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS
+      }).json();
+    } catch (err) {
+      throw await toSkmError(err);
+    }
+    if (!isEnvelope(response)) {
+      throw new NhnCloudCliError("Secure Key Manager \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: header", EXIT_API_ERROR);
+    }
+    return response;
+  }
+  /**
+   * 요청을 보내고 봉투를 벗긴 뒤 body 또는 body[field] 를 가드로 검사해 반환한다.
+   * field 가 null 이면 body 전체를 검사한다.
+   */
+  async request(method, path5, field, guard, options = {}) {
+    const body = unwrap(await this.send(method, path5, options));
+    const value = field === null ? body : isRecord4(body) ? body[field] : void 0;
+    if (!guard(value)) {
+      throw new NhnCloudCliError(`Secure Key Manager \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: ${field ?? "body"}`, EXIT_API_ERROR);
+    }
+    return value;
+  }
+  /**
+   * body 가 null 이거나 없는 응답(키 저장소 수정·삭제)은 검사할 필드가 없어 헤더만 본다 (ADR-040).
+   * isSuccessful 이 false 면 unwrapHeader 가 NhnEnvelopeError 를 던진다.
+   */
+  async requestHeaderOnly(method, path5, options = {}) {
+    unwrapHeader(await this.send(method, path5, options));
+  }
+  keyPath(prefix, keyId, action) {
+    return `/${prefix}/${encodeURIComponent(keyId)}/${action}`;
+  }
+  /** 호출 클라이언트의 IP·MAC·인증서 전송 여부를 확인한다. */
+  confirm() {
+    return this.request("get", "/confirm", null, isSkmClientInfo);
+  }
+  listKeyStores() {
+    return this.request("get", "/keystores", "keyStoreList", arrayOf(isSkmKeyStore), {
+      searchParams: { detail: "true" }
+    });
+  }
+  getKeyStore(keyStoreId) {
+    return this.request("get", `/keystores/${keyStoreId}`, null, isSkmKeyStore);
+  }
+  /**
+   * 모든 페이지의 키를 모은다.
+   * 서버가 pageNumber 를 무시하면 같은 페이지가 반복되므로, 첫 keyId 가 직전 페이지와 같으면 중단한다.
+   */
+  async listKeys(keyStoreId, filter = {}) {
+    const keys = [];
+    let previousFirstKeyId;
+    for (let pageNumber = 1; ; pageNumber++) {
+      const searchParams = { detail: "true", pageNumber, pageSize: KEY_PAGE_SIZE };
+      if (filter.type) searchParams["type"] = filter.type;
+      if (filter.name) searchParams["name"] = filter.name;
+      if (filter.status) searchParams["status"] = filter.status;
+      const page = await this.request("get", `/keystores/${keyStoreId}/keys`, "keyList", arrayOf(isSkmKey), {
+        searchParams
+      });
+      const firstKeyId = page[0]?.keyId;
+      if (firstKeyId !== void 0 && firstKeyId === previousFirstKeyId) {
+        throw new NhnCloudCliError(
+          `Secure Key Manager \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: ${pageNumber} \uD398\uC774\uC9C0\uAC00 \uC9C1\uC804 \uD398\uC774\uC9C0\uC640 \uAC19\uC740 \uD0A4\uB85C \uC2DC\uC791\uD569\uB2C8\uB2E4.`,
+          EXIT_API_ERROR
+        );
+      }
+      keys.push(...page);
+      if (page.length < KEY_PAGE_SIZE) return keys;
+      previousFirstKeyId = firstKeyId;
+    }
+  }
+  getKey(keyStoreId, keyId) {
+    return this.request("get", `/keystores/${keyStoreId}/keys/${encodeURIComponent(keyId)}`, null, isSkmKey);
+  }
+  listAuths(keyStoreId, type) {
+    const { path: path5, field } = AUTH_PATHS[type];
+    return this.request("get", `/keystores/${keyStoreId}/${path5}`, field, arrayOf(isString));
+  }
+  getAuth(keyStoreId, type, value) {
+    const { path: path5, field } = AUTH_PATHS[type];
+    return this.request("get", `/keystores/${keyStoreId}/${path5}`, field, arrayOf(isSkmAuthDetail), {
+      searchParams: { value }
+    });
+  }
+  getSecret(keyId) {
+    return this.request("get", `/secrets/${encodeURIComponent(keyId)}`, "secret", isString);
+  }
+  encrypt(keyId, plaintext) {
+    return this.request("post", this.keyPath("symmetric-keys", keyId, "encrypt"), null, isSkmEncryptResult, {
+      json: { plaintext }
+    });
+  }
+  decrypt(keyId, ciphertext) {
+    return this.request("post", this.keyPath("symmetric-keys", keyId, "decrypt"), null, isSkmDecryptResult, {
+      json: { ciphertext }
+    });
+  }
+  createLocalKey(keyId) {
+    return this.request("post", this.keyPath("symmetric-keys", keyId, "create-local-key"), null, isSkmLocalKey);
+  }
+  getSymmetricKey(keyId, keyVersion) {
+    return this.request(
+      "get",
+      this.keyPath("symmetric-keys", keyId, "symmetric-key"),
+      null,
+      isSkmSymmetricKey,
+      keyVersionParams(keyVersion)
+    );
+  }
+  sign(keyId, plaintext) {
+    return this.request("post", this.keyPath("asymmetric-keys", keyId, "sign"), null, isSkmSignResult, {
+      json: { plaintext }
+    });
+  }
+  verify(keyId, plaintext, signature) {
+    return this.request("post", this.keyPath("asymmetric-keys", keyId, "verify"), null, isSkmVerifyResult, {
+      json: { plaintext, signature }
+    });
+  }
+  signStandard(keyId, plaintextBase64) {
+    return this.request(
+      "post",
+      this.keyPath("asymmetric-keys", keyId, "sign-standard"),
+      null,
+      isSkmStandardSignResult,
+      { json: { plaintext: plaintextBase64, algorithm: STANDARD_SIGN_ALGORITHM } }
+    );
+  }
+  verifyStandard(keyId, plaintextBase64, signature, keyVersion) {
+    return this.request("post", this.keyPath("asymmetric-keys", keyId, "verify-standard"), null, isSkmVerifyResult, {
+      json: { plaintext: plaintextBase64, signature, algorithm: STANDARD_SIGN_ALGORITHM, keyVersion }
+    });
+  }
+  getPrivateKey(keyId, keyVersion) {
+    return this.request(
+      "get",
+      this.keyPath("asymmetric-keys", keyId, "privateKey"),
+      null,
+      isSkmAsymmetricKeyMaterial,
+      keyVersionParams(keyVersion)
+    );
+  }
+  getPublicKey(keyId, keyVersion) {
+    return this.request(
+      "get",
+      this.keyPath("asymmetric-keys", keyId, "publicKey"),
+      null,
+      isSkmAsymmetricKeyMaterial,
+      keyVersionParams(keyVersion)
+    );
+  }
+  createSecret(keyStoreName, name, description, secretValue) {
+    return this.request("post", "/keys/secrets/create", null, isSkmCreatedKey, {
+      json: withDescription({ keyStoreName, name, secretValue }, description)
+    });
+  }
+  /** 자동 회전 주기의 단위가 문서에 없어 항상 0(자동 회전 안 함)을 보낸다 (ADR-040). */
+  createSymmetricKey(keyStoreName, name, description) {
+    return this.request("post", "/keys/symmetric-keys/create", null, isSkmCreatedKey, {
+      json: withDescription({ keyStoreName, name, autoRotationPeriod: 0 }, description)
+    });
+  }
+  /** 자동 회전 주기의 단위가 문서에 없어 항상 0(자동 회전 안 함)을 보낸다 (ADR-040). */
+  createAsymmetricKey(keyStoreName, name, description) {
+    return this.request("post", "/keys/asymmetric-keys/create", null, isSkmCreatedKey, {
+      json: withDescription({ keyStoreName, name, autoRotationPeriod: 0 }, description)
+    });
+  }
+  updateSecret(keyId, secretValue) {
+    return this.request("put", `/secrets/${encodeURIComponent(keyId)}`, null, isSkmUpdatedSecret, {
+      json: { secretValue }
+    });
+  }
+  /** 7일 뒤 삭제를 예약한다. */
+  scheduleKeyDeletion(keyId) {
+    return this.request("put", this.keyPath("keys", keyId, "delete"), null, isSkmDeletion);
+  }
+  /** 삭제 예약된 키를 즉시 삭제한다. 되돌릴 수 없다. */
+  deleteKeyNow(keyId) {
+    return this.request("delete", `/keys/${encodeURIComponent(keyId)}`, null, isSkmDeletion);
+  }
+  createKeyStore(input) {
+    return this.request("post", "/keystores", null, isSkmCreatedKeyStore, { json: keyStoreBody(input) });
+  }
+  /** 전체 교체 API 라 주지 않은 값은 호출부가 현재 값으로 채워 넘긴다 (ADR-040). */
+  updateKeyStore(keyStoreId, input) {
+    return this.requestHeaderOnly("put", `/keystores/${keyStoreId}`, { json: keyStoreBody(input) });
+  }
+  deleteKeyStore(keyStoreId) {
+    return this.requestHeaderOnly("delete", `/keystores/${keyStoreId}`);
+  }
+  addAuth(type, keyStoreName, value, description) {
+    return this.request("post", `/auths/${AUTH_WRITE_PATH[type]}`, null, isSkmAuthAdded, {
+      json: withDescription({ keyStoreName, value }, description)
+    });
+  }
+  addCertificate(keyStoreName, name, password, lifeTime, description) {
+    return this.request("post", `/auths/${AUTH_WRITE_PATH.certificate}`, null, isSkmAuthAdded, {
+      json: withDescription({ keyStoreName, name, password, lifeTime }, description)
+    });
+  }
+  /** 7일 뒤 삭제를 예약한다. */
+  scheduleAuthDeletion(type, keyStoreName, value) {
+    return this.request("put", `/auths/${AUTH_WRITE_PATH[type]}/delete`, null, isSkmAuthDeletion, {
+      json: authDeletionBody(type, keyStoreName, value)
+    });
+  }
+  /** 삭제 예약된 인증 정보를 즉시 삭제한다. 되돌릴 수 없다. */
+  deleteAuthNow(type, keyStoreName, value) {
+    return this.request("post", `/auths/${AUTH_WRITE_PATH[type]}/delete`, null, isSkmAuthDeletion, {
+      json: authDeletionBody(type, keyStoreName, value)
+    });
+  }
+};
+
+// src/commands/skm/helpers.ts
+var MAC_ADDRESS_PATTERN = /^[0-9A-Fa-f]{2}(:[0-9A-Fa-f]{2}){5}$/;
+var KEY_NAME_MAX_LENGTH = 100;
+var KEY_TYPES = {
+  secret: "SECRET",
+  "symmetric-key": "SYMMETRIC_KEY",
+  "asymmetric-key": "ASYMMETRIC_KEY"
+};
+var AUTH_TYPES = ["ipv4", "mac", "certificate"];
+function withSkmOptions(command) {
+  return command.option("--mac-address <mac>", "\uD0A4 \uC800\uC7A5\uC18C MAC \uC778\uC99D\uC5D0 \uC4F8 \uD074\uB77C\uC774\uC5B8\uD2B8 MAC \uC8FC\uC18C (X-TOAST-CLIENT-MAC-ADDR)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984");
+}
+function withTypeOption(command) {
+  return command.requiredOption("--type <type>", "\uC778\uC99D \uC815\uBCF4 \uC885\uB958 (ipv4|mac|certificate)");
+}
+function parseMacAddressOption(value) {
+  if (value === void 0) return void 0;
+  if (!MAC_ADDRESS_PATTERN.test(value)) {
+    throw new NhnCloudCliError(
+      `--mac-address\uB294 aa:bb:cc:dd:ee:ff \uD615\uC2DD\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4 (\uC785\uB825: ${JSON.stringify(value)}).`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return value.toLowerCase();
+}
+function parseKeyStoreId(value) {
+  return parseNonNegativeIntegerOption(parseRequiredArgument(value, "keystore-id"), "<keystore-id>");
+}
+function parseAuthTypeOption(value) {
+  const found = AUTH_TYPES.find((type) => type === value);
+  if (!found) {
+    throw new NhnCloudCliError(
+      `--type\uC740 ipv4, mac, certificate \uC911 \uD558\uB098\uC5EC\uC57C \uD569\uB2C8\uB2E4 (\uC785\uB825: ${JSON.stringify(value)}).`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return found;
+}
+function parseAuthListOption(value) {
+  const items = value.split(",").map((item) => item.trim());
+  if (items.some((item) => !AUTH_TYPES.some((type) => type === item))) {
+    throw new NhnCloudCliError(
+      `--auth\uB294 ipv4, mac, certificate\uB97C \uC27C\uD45C\uB85C \uB098\uC5F4\uD574\uC57C \uD569\uB2C8\uB2E4 (\uC785\uB825: ${JSON.stringify(value)}).`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  const flag = (type) => items.includes(type) ? "Y" : "N";
+  return { ip4AuthUse: flag("ipv4"), macAuthUse: flag("mac"), certificateAuthUse: flag("certificate") };
+}
+function parseAuthModeOption(value) {
+  const upper = value.toUpperCase();
+  if (upper !== "AND" && upper !== "OR") {
+    throw new NhnCloudCliError(
+      `--auth-mode\uB294 and \uB610\uB294 or\uC5EC\uC57C \uD569\uB2C8\uB2E4 (\uC785\uB825: ${JSON.stringify(value)}).`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return upper;
+}
+function parseDescriptionOption(value, maxLength) {
+  const trimmed = value?.trim();
+  if (!trimmed) return void 0;
+  if (trimmed.length > maxLength) {
+    throw new NhnCloudCliError(`--description\uC740 ${maxLength}\uC790 \uC774\uD558\uC5EC\uC57C \uD569\uB2C8\uB2E4.`, EXIT_PARAM_ERROR);
+  }
+  return trimmed;
+}
+function isIpv4OrCidr2(value) {
+  const [address, prefix, ...rest] = value.split("/");
+  if (rest.length > 0 || address === void 0 || (0, import_node_net2.isIP)(address) !== 4) return false;
+  return prefix === void 0 || /^(\d|[12]\d|3[0-2])$/.test(prefix);
+}
+function parseAuthValue(type, value) {
+  if (type === "ipv4") {
+    if (!isIpv4OrCidr2(value)) {
+      throw new NhnCloudCliError(
+        `IPv4 \uC8FC\uC18C\uB098 CIDR \uB300\uC5ED \uD615\uC2DD\uC774 \uC544\uB2D9\uB2C8\uB2E4 (\uC785\uB825: ${JSON.stringify(value)}).`,
+        EXIT_PARAM_ERROR
+      );
+    }
+    return value;
+  }
+  if (type === "mac") {
+    if (!MAC_ADDRESS_PATTERN.test(value)) {
+      throw new NhnCloudCliError(
+        `MAC \uC8FC\uC18C\uB294 aa:bb:cc:dd:ee:ff \uD615\uC2DD\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4 (\uC785\uB825: ${JSON.stringify(value)}).`,
+        EXIT_PARAM_ERROR
+      );
+    }
+    return value.toLowerCase();
+  }
+  const name = value.trim();
+  if (!name) {
+    throw new NhnCloudCliError("\uC778\uC99D\uC11C \uC774\uB984\uC774 \uBE44\uC5B4 \uC788\uC2B5\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  return name;
+}
+function parseKeyTypeOption(value) {
+  if (value === void 0) return void 0;
+  const found = Object.hasOwn(KEY_TYPES, value) ? KEY_TYPES[value] : void 0;
+  if (!found) {
+    throw new NhnCloudCliError(
+      `--type\uC740 secret, symmetric-key, asymmetric-key \uC911 \uD558\uB098\uC5EC\uC57C \uD569\uB2C8\uB2E4 (\uC785\uB825: ${JSON.stringify(value)}).`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return found;
+}
+function parseKeyStatusOption(value) {
+  if (value === void 0) return void 0;
+  if (value !== "active" && value !== "inactive") {
+    throw new NhnCloudCliError(
+      `--status\uB294 active \uB610\uB294 inactive\uC5EC\uC57C \uD569\uB2C8\uB2E4 (\uC785\uB825: ${JSON.stringify(value)}).`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return value;
+}
+function parseKeyNameOption(value) {
+  if (value === void 0) return void 0;
+  const trimmed = value.trim();
+  if (!trimmed) {
+    throw new NhnCloudCliError("--name\uC740 \uBE44\uC5B4 \uC788\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  if (trimmed.length > KEY_NAME_MAX_LENGTH) {
+    throw new NhnCloudCliError(`--name\uC740 ${KEY_NAME_MAX_LENGTH}\uC790 \uC774\uD558\uC5EC\uC57C \uD569\uB2C8\uB2E4.`, EXIT_PARAM_ERROR);
+  }
+  return trimmed;
+}
+async function resolveSkmClient(opts) {
+  const profileName = await resolveProfileName(opts.profile);
+  const appKey = await resolveServiceAppKey(
+    "skm",
+    profileName,
+    "Secure Key Manager appkey\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4. nhncloud configure --skm-appkey <key>\uB85C \uC124\uC815\uD558\uC138\uC694."
+  );
+  const uak = await getUserAccessKey(profileName);
+  const environment = await getProfileEnvironment(profileName);
+  const accessToken = await getAccessToken(profileName, uak.id, uak.secret, false, environment);
+  return { client: new SkmClient(accessToken, environment, appKey, opts.macAddress), profileName };
+}
+function maskAuthDetail(detail) {
+  if (typeof detail.password !== "string") return detail;
+  return { ...detail, password: "***" };
+}
+function formatCell(value) {
+  if (value === null || value === void 0) return "-";
+  return sanitizeForTerminal(String(value));
+}
+function printSkmValue(opts, value, raw) {
+  if (opts.json) {
+    printJson(raw);
+  } else if (opts.quiet) {
+    process.stdout.write(value + "\n");
+  } else {
+    process.stdout.write(sanitizeMultilineForTerminal(value) + "\n");
+  }
+}
+async function resolveKeyStoreName(client, keyStoreId) {
+  const keyStore = await client.getKeyStore(keyStoreId);
+  return keyStore.name;
+}
+function outputSkmWriteResult(opts, result, ids) {
+  output(opts, {
+    headers: ["field", "value"],
+    rows: Object.entries(result).map(([key, value]) => [key, formatCell(value)]),
+    raw: result,
+    ids
+  });
+}
+function parseKeyVersionOption(value) {
+  return parseNonNegativeIntegerOption(value, "--key-version");
+}
+async function withSkmSpinner(text, call) {
+  startSpinner(text);
+  let result;
+  try {
+    result = await call();
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  return result;
+}
+
+// src/commands/skm/confirm.ts
+var confirmCommand = withSkmOptions(
+  new import_commander59.Command("confirm").description("SKM \uC11C\uBC84\uAC00 \uBCF8 \uD074\uB77C\uC774\uC5B8\uD2B8 IP, MAC \uD5E4\uB354\uC640 \uC778\uC99D\uC11C \uC0AC\uC6A9 \uC5EC\uBD80\uB97C \uC870\uD68C\uD55C\uB2E4")
+).action(async (_opts, command) => {
+  const opts = command.optsWithGlobals();
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const info = await withSkmSpinner("SKM \uD074\uB77C\uC774\uC5B8\uD2B8 \uC815\uBCF4 \uC870\uD68C \uC911...", () => client.confirm());
+  output(opts, {
+    headers: ["field", "value"],
+    rows: [
+      ["clientIp", formatCell(info.clientIp)],
+      ["clientMacHeader", formatCell(info.clientMacHeader)],
+      ["clientSentCertificate", formatCell(info.clientSentCertificate)]
+    ],
+    raw: info,
+    ids: [formatCell(info.clientIp)]
+  });
+});
+
+// src/commands/skm/keystore.ts
+var import_commander61 = require("commander");
+
+// src/commands/skm/keystore-manage.ts
+var import_commander60 = require("commander");
+
+// src/commands/skm/input.ts
+var import_node_fs10 = require("fs");
+var processStdin = {
+  get isTTY() {
+    return process.stdin.isTTY;
+  },
+  read: () => (0, import_node_fs10.readFileSync)(0)
+};
+function assertWithinLimit(size, spec) {
+  if (size > spec.maxBytes) {
+    throw new NhnCloudCliError(
+      `${spec.label}\uAC00 \uB108\uBB34 \uD07D\uB2C8\uB2E4: ${size}\uBC14\uC774\uD2B8 (\uD55C\uB3C4 ${spec.maxBytes}\uBC14\uC774\uD2B8).`,
+      EXIT_PARAM_ERROR
+    );
+  }
+}
+function readInputFile(file, spec) {
+  let stat3;
+  try {
+    stat3 = (0, import_node_fs10.statSync)(file);
+  } catch (e) {
+    const reason = e.code ?? (e instanceof Error ? e.message : String(e));
+    throw new NhnCloudCliError(`${spec.label} \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${file} (${reason})`, EXIT_PARAM_ERROR);
+  }
+  if (!stat3.isFile()) {
+    throw new NhnCloudCliError(`${spec.label} \uD30C\uC77C\uC774 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${file}`, EXIT_PARAM_ERROR);
+  }
+  assertWithinLimit(stat3.size, spec);
+  return (0, import_node_fs10.readFileSync)(file);
+}
+function readStdin(stdin, spec) {
+  try {
+    return stdin.read();
+  } catch (e) {
+    const reason = e.code ?? (e instanceof Error ? e.message : String(e));
+    throw new NhnCloudCliError(`${spec.label}\uB97C \uD45C\uC900 \uC785\uB825\uC5D0\uC11C \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4 (${reason}).`, EXIT_PARAM_ERROR);
+  }
+}
+function readSkmInput(source, spec, stdin = processStdin) {
+  const fileFlag = spec.fileFlag ?? "--file";
+  if (source.text !== void 0 && source.file !== void 0) {
+    throw new NhnCloudCliError(`${spec.textFlag}\uC640 ${fileFlag}\uC740 \uD568\uAED8 \uC9C0\uC815\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.`, EXIT_PARAM_ERROR);
+  }
+  let input;
+  if (source.text !== void 0) {
+    input = Buffer.from(source.text, "utf-8");
+  } else if (source.file !== void 0) {
+    input = readInputFile(source.file, spec);
+  } else if (!stdin.isTTY) {
+    input = readStdin(stdin, spec);
+  } else {
+    throw new NhnCloudCliError(
+      `${spec.label}\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4. ${spec.textFlag} <\uAC12>, ${fileFlag} <\uACBD\uB85C>, \uD45C\uC900 \uC785\uB825(\uD30C\uC774\uD504) \uC911 \uD558\uB098\uB85C \uC804\uB2EC\uD558\uC138\uC694.`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  assertWithinLimit(input.length, spec);
+  if (input.length === 0) {
+    throw new NhnCloudCliError(`${spec.label}\uAC00 \uBE44\uC5B4 \uC788\uC2B5\uB2C8\uB2E4.`, EXIT_PARAM_ERROR);
+  }
+  return input;
+}
+function decodeUtf8Input(input, label, hint) {
+  try {
+    return new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(input);
+  } catch {
+    throw new NhnCloudCliError(`${label}\uB294 UTF-8 \uD14D\uC2A4\uD2B8\uC5EC\uC57C \uD569\uB2C8\uB2E4. ${hint}`, EXIT_PARAM_ERROR);
+  }
+}
+
+// src/commands/skm/keystore-manage.ts
+var DESCRIPTION_MAX_LENGTH = 1e3;
+var PASSWORD_MAX_BYTES = 1024;
+var LOCKOUT_WARNING = "(\uC2E4\uD589 \uC704\uCE58\uAC00 \uD0A4\uB97C \uC4F0\uC9C0 \uBABB\uD558\uAC8C \uB420 \uC218 \uC788\uC74C, \uBA3C\uC800 skm confirm\uC73C\uB85C \uD655\uC778)";
+var createCommand11 = withSkmOptions(
+  new import_commander60.Command("create").description("\uD0A4 \uC800\uC7A5\uC18C\uB97C \uB9CC\uB4E0\uB2E4").requiredOption("--name <name>", "\uD0A4 \uC800\uC7A5\uC18C \uC774\uB984 (100\uC790 \uC774\uD558)").requiredOption("--auth <list>", "\uC0AC\uC6A9\uD560 \uC778\uC99D (ipv4,mac,certificate \uC911 \uD558\uB098 \uC774\uC0C1\uC744 \uC27C\uD45C\uB85C)").option("--auth-mode <mode>", "\uC778\uC99D \uACB0\uD569 \uBC29\uC2DD (and|or)", "and").option("--description <text>", "\uD0A4 \uC800\uC7A5\uC18C \uC124\uBA85 (1000\uC790 \uC774\uD558)")
+).action(async (_opts, command) => {
+  const opts = command.optsWithGlobals();
+  const name = parseKeyNameOption(opts.name);
+  const auths = parseAuthListOption(opts.auth);
+  const authMode = parseAuthModeOption(opts.authMode);
+  const description = parseDescriptionOption(opts.description, DESCRIPTION_MAX_LENGTH);
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const input = { name, ...auths, authMode };
+  if (description !== void 0) input.description = description;
+  const created = await withSkmSpinner(
+    `SKM \uD0A4 \uC800\uC7A5\uC18C ${formatCell(name)} \uC0DD\uC131 \uC911...`,
+    () => client.createKeyStore(input)
+  );
+  outputSkmWriteResult(opts, { ...created }, [String(created.keyStoreId)]);
+});
+var updateCommand4 = withSkmOptions(
+  new import_commander60.Command("update").description(`\uD0A4 \uC800\uC7A5\uC18C\uB97C \uC218\uC815\uD55C\uB2E4. \uC8FC\uC9C0 \uC54A\uC740 \uD56D\uBAA9\uC740 \uD604\uC7AC \uAC12\uC744 \uC720\uC9C0\uD55C\uB2E4 ${LOCKOUT_WARNING}`).argument("<keystore-id>", "\uD0A4 \uC800\uC7A5\uC18C ID").requiredOption("--auth-mode <mode>", "\uC778\uC99D \uACB0\uD569 \uBC29\uC2DD (and|or). \uC870\uD68C \uC751\uB2F5\uC5D0 \uC5C6\uC5B4 \uB9E4\uBC88 \uC9C0\uC815\uD55C\uB2E4").option("--name <name>", "\uD0A4 \uC800\uC7A5\uC18C \uC774\uB984 (100\uC790 \uC774\uD558)").option("--description <text>", "\uD0A4 \uC800\uC7A5\uC18C \uC124\uBA85 (1000\uC790 \uC774\uD558)").option("--auth <list>", "\uC0AC\uC6A9\uD560 \uC778\uC99D (ipv4,mac,certificate \uC911 \uD558\uB098 \uC774\uC0C1\uC744 \uC27C\uD45C\uB85C)")
+).action(async (keyStoreId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedId = parseKeyStoreId(keyStoreId);
+  const authMode = parseAuthModeOption(opts.authMode);
+  const name = parseKeyNameOption(opts.name);
+  const description = parseDescriptionOption(opts.description, DESCRIPTION_MAX_LENGTH);
+  const auths = opts.auth === void 0 ? void 0 : parseAuthListOption(opts.auth);
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const current2 = await withSkmSpinner(`SKM \uD0A4 \uC800\uC7A5\uC18C ${parsedId} \uC870\uD68C \uC911...`, () => client.getKeyStore(parsedId));
+  const currentDescription = typeof current2.description === "string" ? current2.description : void 0;
+  const yesNo = (value) => value === "Y" ? "Y" : "N";
+  const input = {
+    name: name ?? current2.name,
+    ...auths ?? {
+      ip4AuthUse: yesNo(current2.ip4AuthUse),
+      macAuthUse: yesNo(current2.macAuthUse),
+      certificateAuthUse: yesNo(current2.certificateAuthUse)
+    },
+    authMode
+  };
+  const nextDescription = description ?? currentDescription;
+  if (nextDescription !== void 0) input.description = nextDescription;
+  if (input.ip4AuthUse === "N" && input.macAuthUse === "N" && input.certificateAuthUse === "N") {
+    throw new NhnCloudCliError("\uD0A4 \uC800\uC7A5\uC18C \uC778\uC99D\uC740 \uD558\uB098 \uC774\uC0C1 \uCF1C\uC57C \uD569\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  await withSkmSpinner(`SKM \uD0A4 \uC800\uC7A5\uC18C ${parsedId} \uC218\uC815 \uC911...`, () => client.updateKeyStore(parsedId, input));
+  outputSkmWriteResult(
+    opts,
+    { operation: "keystore-update", status: "succeeded", keyStoreId: parsedId, ...input },
+    [String(parsedId)]
+  );
+});
+var deleteCommand9 = withSkmOptions(
+  new import_commander60.Command("delete").description("\uD0A4 \uC800\uC7A5\uC18C\uB97C \uC0AD\uC81C(\uBE44\uD65C\uC131\uD654)\uD55C\uB2E4").argument("<keystore-id>", "\uD0A4 \uC800\uC7A5\uC18C ID").option("--yes", "\uC0AD\uC81C \uD655\uC778")
+).action(async (keyStoreId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  requireYes(opts.yes, "\uD0A4 \uC800\uC7A5\uC18C \uC0AD\uC81C");
+  const parsedId = parseKeyStoreId(keyStoreId);
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  await withSkmSpinner(`SKM \uD0A4 \uC800\uC7A5\uC18C ${parsedId} \uC0AD\uC81C \uC911...`, () => client.deleteKeyStore(parsedId));
+  outputSkmWriteResult(
+    opts,
+    { operation: "keystore-delete", status: "succeeded", keyStoreId: parsedId },
+    [String(parsedId)]
+  );
+});
+function readCertificateOptions(opts) {
+  if (opts.lifeTime === void 0) {
+    throw new NhnCloudCliError("\uC778\uC99D\uC11C \uCD94\uAC00\uC5D0\uB294 --life-time\uC774 \uD544\uC694\uD569\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  const lifeTime = parsePositiveIntegerOption(opts.lifeTime, "--life-time");
+  const input = readSkmInput(
+    { text: opts.password, file: opts.passwordFile },
+    { textFlag: "--password", fileFlag: "--password-file", label: "\uC778\uC99D\uC11C \uBE44\uBC00\uBC88\uD638", maxBytes: PASSWORD_MAX_BYTES }
+  );
+  const password = decodeUtf8Input(input, "\uC778\uC99D\uC11C \uBE44\uBC00\uBC88\uD638", "\uD30C\uC77C \uC778\uCF54\uB529\uC744 \uD655\uC778\uD558\uC138\uC694.").replace(/\r?\n$/, "");
+  if (!password) {
+    throw new NhnCloudCliError("\uC778\uC99D\uC11C \uBE44\uBC00\uBC88\uD638\uAC00 \uBE44\uC5B4 \uC788\uC2B5\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  return { lifeTime, password };
+}
+function rejectCertificateOptions(opts) {
+  if (opts.lifeTime !== void 0 || opts.password !== void 0 || opts.passwordFile !== void 0) {
+    throw new NhnCloudCliError("--life-time\uACFC --password\uB294 --type certificate\uC5D0\uC11C\uB9CC \uC501\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+}
+function authAddedFields(added) {
+  return { value: added.value, name: added.name, description: added.description };
+}
+var authAddCommand = withTypeOption(
+  withSkmOptions(
+    new import_commander60.Command("add").description("\uD0A4 \uC800\uC7A5\uC18C\uC5D0 \uC778\uC99D \uC815\uBCF4\uB97C \uCD94\uAC00\uD55C\uB2E4 (\uC778\uC99D\uC11C \uBE44\uBC00\uBC88\uD638\uB294 --password, --password-file, \uD45C\uC900 \uC785\uB825 \uC911 \uD558\uB098)").argument("<keystore-id>", "\uD0A4 \uC800\uC7A5\uC18C ID").argument("<value>", "IPv4\xB7MAC \uAC12 \uB610\uB294 \uC778\uC99D\uC11C \uC774\uB984").option("--description <text>", "\uC778\uC99D \uC815\uBCF4 \uC124\uBA85 (1000\uC790 \uC774\uD558)").option("--life-time <days>", "\uC778\uC99D\uC11C \uC720\uD6A8 \uAE30\uAC04(\uC77C) (--type certificate \uC804\uC6A9, \uD544\uC218)").option("--password <pw>", "\uC778\uC99D\uC11C \uBE44\uBC00\uBC88\uD638 (--type certificate \uC804\uC6A9)").option("--password-file <path>", "\uC778\uC99D\uC11C \uBE44\uBC00\uBC88\uD638\uB97C \uC77D\uC744 \uD30C\uC77C (--type certificate \uC804\uC6A9)")
+  )
+).action(async (keyStoreId, value, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedId = parseKeyStoreId(keyStoreId);
+  const type = parseAuthTypeOption(opts.type);
+  const parsedValue = parseAuthValue(type, value);
+  const description = parseDescriptionOption(opts.description, DESCRIPTION_MAX_LENGTH);
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  if (type !== "certificate") rejectCertificateOptions(opts);
+  const target = type === "certificate" ? { type, ...readCertificateOptions(opts) } : { type };
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const added = await withSkmSpinner(`SKM ${type} \uC778\uC99D \uC815\uBCF4 ${formatCell(parsedValue)} \uCD94\uAC00 \uC911...`, async () => {
+    const keyStoreName = await resolveKeyStoreName(client, parsedId);
+    if (target.type === "certificate") {
+      return client.addCertificate(keyStoreName, parsedValue, target.password, target.lifeTime, description);
+    }
+    return client.addAuth(target.type, keyStoreName, parsedValue, description);
+  });
+  outputSkmWriteResult(
+    opts,
+    { operation: "auth-add", type, keyStoreId: parsedId, ...authAddedFields(added) },
+    [formatCell(parsedValue)]
+  );
+});
+var authDeleteCommand = withTypeOption(
+  withSkmOptions(
+    new import_commander60.Command("delete").description(`\uC778\uC99D \uC815\uBCF4 \uC0AD\uC81C\uB97C \uC608\uC57D\uD55C\uB2E4 (7\uC77C \uB4A4 \uC0AD\uC81C) ${LOCKOUT_WARNING}`).argument("<keystore-id>", "\uD0A4 \uC800\uC7A5\uC18C ID").argument("<value>", "IPv4\xB7MAC \uAC12 \uB610\uB294 \uC778\uC99D\uC11C \uC774\uB984").option("--yes", "\uC0AD\uC81C \uC608\uC57D \uD655\uC778")
+  )
+).action(async (keyStoreId, value, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  requireYes(opts.yes, "\uC778\uC99D \uC815\uBCF4 \uC0AD\uC81C \uC608\uC57D");
+  const parsedId = parseKeyStoreId(keyStoreId);
+  const type = parseAuthTypeOption(opts.type);
+  const parsedValue = parseAuthValue(type, value);
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const deletion = await withSkmSpinner(`SKM ${type} \uC778\uC99D \uC815\uBCF4 ${formatCell(parsedValue)} \uC0AD\uC81C \uC608\uC57D \uC911...`, async () => {
+    const keyStoreName = await resolveKeyStoreName(client, parsedId);
+    return client.scheduleAuthDeletion(type, keyStoreName, parsedValue);
+  });
+  outputSkmWriteResult(
+    opts,
+    {
+      operation: "auth-delete-scheduled",
+      type,
+      keyStoreId: parsedId,
+      value: deletion.value,
+      name: deletion.name,
+      deletionDateTime: deletion.deletionDateTime
+    },
+    [formatCell(parsedValue)]
+  );
+});
+var authPurgeCommand = withTypeOption(
+  withSkmOptions(
+    new import_commander60.Command("purge").description(`\uC778\uC99D \uC815\uBCF4\uB97C \uC989\uC2DC \uC0AD\uC81C\uD55C\uB2E4 (\uC0AD\uC81C \uC608\uC57D\uB41C \uAC83\uB9CC, \uB418\uB3CC\uB9B4 \uC218 \uC5C6\uC74C) ${LOCKOUT_WARNING}`).argument("<keystore-id>", "\uD0A4 \uC800\uC7A5\uC18C ID").argument("<value>", "IPv4\xB7MAC \uAC12 \uB610\uB294 \uC778\uC99D\uC11C \uC774\uB984").option("--yes", "\uC989\uC2DC \uC0AD\uC81C \uD655\uC778")
+  )
+).action(async (keyStoreId, value, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  requireYes(opts.yes, "\uC778\uC99D \uC815\uBCF4 \uC989\uC2DC \uC0AD\uC81C");
+  const parsedId = parseKeyStoreId(keyStoreId);
+  const type = parseAuthTypeOption(opts.type);
+  const parsedValue = parseAuthValue(type, value);
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const deletion = await withSkmSpinner(`SKM ${type} \uC778\uC99D \uC815\uBCF4 ${formatCell(parsedValue)} \uC989\uC2DC \uC0AD\uC81C \uC911...`, async () => {
+    const keyStoreName = await resolveKeyStoreName(client, parsedId);
+    return client.deleteAuthNow(type, keyStoreName, parsedValue);
+  });
+  outputSkmWriteResult(
+    opts,
+    {
+      operation: "auth-purge",
+      type,
+      keyStoreId: parsedId,
+      value: deletion.value,
+      name: deletion.name,
+      deletionDateTime: deletion.deletionDateTime
+    },
+    [formatCell(parsedValue)]
+  );
+});
+
+// src/commands/skm/keystore.ts
+var KEYSTORE_FIELDS = [
+  "keyStoreId",
+  "name",
+  "description",
+  "ip4AuthUse",
+  "macAuthUse",
+  "certificateAuthUse",
+  "creationUser",
+  "creationDatetime",
+  "lastChangeUser",
+  "lastChangeDatetime"
+];
+var listCommand16 = withSkmOptions(new import_commander61.Command("list").description("\uD0A4 \uC800\uC7A5\uC18C \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4 (\uC804\uCCB4 \uD544\uB4DC\uB294 --json)")).action(async (_opts, command) => {
+  const opts = command.optsWithGlobals();
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const stores = await withSkmSpinner("SKM \uD0A4 \uC800\uC7A5\uC18C \uBAA9\uB85D \uC870\uD68C \uC911...", () => client.listKeyStores());
+  output(opts, {
+    headers: ["keyStoreId", "name", "ip4AuthUse", "macAuthUse", "certificateAuthUse", "lastChangeDatetime"],
+    rows: stores.map((s) => [
+      formatCell(s.keyStoreId),
+      formatCell(s.name),
+      formatCell(s.ip4AuthUse),
+      formatCell(s.macAuthUse),
+      formatCell(s.certificateAuthUse),
+      formatCell(s.lastChangeDatetime)
+    ]),
+    raw: stores,
+    ids: stores.map((s) => String(s.keyStoreId))
+  });
+});
+var getCommand11 = withSkmOptions(
+  new import_commander61.Command("get").description("\uD0A4 \uC800\uC7A5\uC18C \uD55C \uAC74\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<keystore-id>", "\uD0A4 \uC800\uC7A5\uC18C ID")
+).action(async (keyStoreId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedId = parseKeyStoreId(keyStoreId);
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const store = await withSkmSpinner(`SKM \uD0A4 \uC800\uC7A5\uC18C ${parsedId} \uC870\uD68C \uC911...`, () => client.getKeyStore(parsedId));
+  output(opts, {
+    headers: ["field", "value"],
+    rows: KEYSTORE_FIELDS.map((field) => [field, formatCell(store[field])]),
+    raw: store,
+    ids: [String(store.keyStoreId)]
+  });
+});
+var authListCommand = withTypeOption(
+  withSkmOptions(
+    new import_commander61.Command("list").description("\uD0A4 \uC800\uC7A5\uC18C \uC778\uC99D \uC815\uBCF4 \uAC12 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<keystore-id>", "\uD0A4 \uC800\uC7A5\uC18C ID")
+  )
+).action(async (keyStoreId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedId = parseKeyStoreId(keyStoreId);
+  const type = parseAuthTypeOption(opts.type);
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const values = await withSkmSpinner(`SKM ${type} \uC778\uC99D \uC815\uBCF4 \uBAA9\uB85D \uC870\uD68C \uC911...`, () => client.listAuths(parsedId, type));
+  output(opts, {
+    headers: ["value"],
+    rows: values.map((v) => [formatCell(v)]),
+    raw: values,
+    ids: values.map((v) => formatCell(v))
+  });
+});
+var authGetCommand = withTypeOption(
+  withSkmOptions(
+    new import_commander61.Command("get").description("\uD0A4 \uC800\uC7A5\uC18C \uC778\uC99D \uC815\uBCF4 \uC0C1\uC138\uB97C \uC870\uD68C\uD55C\uB2E4 (\uC778\uC99D\uC11C \uBE44\uBC00\uBC88\uD638\uB294 \uAC00\uB9B0\uB2E4)").argument("<keystore-id>", "\uD0A4 \uC800\uC7A5\uC18C ID").argument("<value>", "IPv4\xB7MAC \uAC12 \uB610\uB294 \uC778\uC99D\uC11C \uC774\uB984")
+  )
+).action(async (keyStoreId, value, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedId = parseKeyStoreId(keyStoreId);
+  const parsedValue = parseRequiredArgument(value, "value");
+  const type = parseAuthTypeOption(opts.type);
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const details = await withSkmSpinner(
+    `SKM ${type} \uC778\uC99D \uC815\uBCF4 \uC870\uD68C \uC911...`,
+    () => client.getAuth(parsedId, type, parsedValue)
+  );
+  const masked = details.map(maskAuthDetail);
+  const keys = masked.map((d) => formatCell(d.value ?? d.name));
+  output(opts, {
+    headers: ["value", "description", "expirationDate", "lastAccessDatetime", "deletionDatetime", "lastChangeDatetime"],
+    rows: masked.map((d, i) => [
+      keys[i] ?? "-",
+      formatCell(d.description),
+      formatCell(d.expirationDate),
+      formatCell(d.lastAccessDatetime),
+      formatCell(d.deletionDatetime),
+      formatCell(d.lastChangeDatetime)
+    ]),
+    raw: masked,
+    ids: keys
+  });
+});
+var authCommand = new import_commander61.Command("auth").description("\uD0A4 \uC800\uC7A5\uC18C IPv4\xB7MAC\xB7\uC778\uC99D\uC11C \uC778\uC99D \uC815\uBCF4 \uC870\uD68C\xB7\uAD00\uB9AC").addCommand(authListCommand).addCommand(authGetCommand).addCommand(authAddCommand).addCommand(authDeleteCommand).addCommand(authPurgeCommand);
+var keystoreCommand = new import_commander61.Command("keystore").description("SKM \uD0A4 \uC800\uC7A5\uC18C\uC640 \uC778\uC99D \uC815\uBCF4 \uC870\uD68C\xB7\uAD00\uB9AC").addCommand(listCommand16).addCommand(getCommand11).addCommand(createCommand11).addCommand(updateCommand4).addCommand(deleteCommand9).addCommand(authCommand);
+
+// src/commands/skm/key.ts
+var import_commander63 = require("commander");
+
+// src/commands/skm/key-manage.ts
+var import_commander62 = require("commander");
+var createCommand12 = withSkmOptions(
+  new import_commander62.Command("create").description("\uD0A4 \uC800\uC7A5\uC18C\uC5D0 \uD0A4\uB97C \uB9CC\uB4E0\uB2E4 (\uAE30\uBC00 \uB370\uC774\uD130 \uAC12\uC740 --value, --file, \uD45C\uC900 \uC785\uB825 \uC911 \uD558\uB098)").argument("<keystore-id>", "\uD0A4 \uC800\uC7A5\uC18C ID").requiredOption("--type <type>", "\uD0A4 \uC885\uB958 (secret|symmetric-key|asymmetric-key)").requiredOption("--name <name>", "\uD0A4 \uC774\uB984 (100\uC790 \uC774\uD558)").option("--description <text>", "\uD0A4 \uC124\uBA85").option("--value <value>", "\uAE30\uBC00 \uB370\uC774\uD130 \uAC12 (--type secret \uC804\uC6A9)").option("--file <path>", "\uAE30\uBC00 \uB370\uC774\uD130 \uAC12\uC744 \uC77D\uC744 \uD30C\uC77C (--type secret \uC804\uC6A9)")
+).action(async (keyStoreId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedId = parseKeyStoreId(keyStoreId);
+  const type = parseKeyTypeOption(opts.type);
+  const name = parseKeyNameOption(opts.name);
+  const description = opts.description?.trim() || void 0;
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  let secretValue;
+  if (type === "SECRET") {
+    const input = readSkmInput(
+      { text: opts.value, file: opts.file },
+      { textFlag: "--value", label: "\uAE30\uBC00 \uB370\uC774\uD130", maxBytes: MAX_JSON_INPUT_BYTES }
+    );
+    secretValue = decodeUtf8Input(input, "\uAE30\uBC00 \uB370\uC774\uD130", "\uBC14\uC774\uB108\uB9AC\uB294 base64\uB85C \uC778\uCF54\uB529\uD574 \uC804\uB2EC\uD558\uC138\uC694.");
+  } else if (opts.value !== void 0 || opts.file !== void 0) {
+    throw new NhnCloudCliError("--value\uC640 --file\uC740 --type secret\uC5D0\uC11C\uB9CC \uC501\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const created = await withSkmSpinner(`SKM \uD0A4 ${formatCell(name)} \uC0DD\uC131 \uC911...`, async () => {
+    const keyStoreName = await resolveKeyStoreName(client, parsedId);
+    if (secretValue !== void 0) {
+      return client.createSecret(keyStoreName, name, description, secretValue);
+    }
+    if (type === "SYMMETRIC_KEY") {
+      return client.createSymmetricKey(keyStoreName, name, description);
+    }
+    return client.createAsymmetricKey(keyStoreName, name, description);
+  });
+  outputSkmWriteResult(
+    opts,
+    { keyId: created.keyId, keyStatus: created.keyStatus, keyStoreId: parsedId, name },
+    [formatCell(created.keyId)]
+  );
+});
+var deleteCommand10 = withSkmOptions(
+  new import_commander62.Command("delete").description("\uD0A4 \uC0AD\uC81C\uB97C \uC608\uC57D\uD55C\uB2E4 (7\uC77C \uB4A4 \uC0AD\uC81C, \uADF8 \uC804\uC5D0\uB294 \uCF58\uC194\uC5D0\uC11C \uCDE8\uC18C \uAC00\uB2A5)").argument("<key-id>", "\uD0A4 ID").option("--yes", "\uC0AD\uC81C \uC608\uC57D \uD655\uC778")
+).action(async (keyId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  requireYes(opts.yes, "\uD0A4 \uC0AD\uC81C \uC608\uC57D");
+  const parsedKeyId = parseRequiredArgument(keyId, "key-id");
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const deletion = await withSkmSpinner(
+    `SKM \uD0A4 ${formatCell(parsedKeyId)} \uC0AD\uC81C \uC608\uC57D \uC911...`,
+    () => client.scheduleKeyDeletion(parsedKeyId)
+  );
+  outputSkmWriteResult(
+    opts,
+    {
+      operation: "key-delete-scheduled",
+      status: "succeeded",
+      keyId: deletion.keyId,
+      deletionDateTime: deletion.deletionDateTime
+    },
+    [formatCell(deletion.keyId)]
+  );
+});
+var purgeCommand = withSkmOptions(
+  new import_commander62.Command("purge").description("\uD0A4\uB97C \uC989\uC2DC \uC0AD\uC81C\uD55C\uB2E4 (\uC0AD\uC81C \uC608\uC57D\uB41C \uD0A4\uB9CC, \uB418\uB3CC\uB9B4 \uC218 \uC5C6\uC74C)").argument("<key-id>", "\uD0A4 ID").option("--yes", "\uC989\uC2DC \uC0AD\uC81C \uD655\uC778")
+).action(async (keyId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  requireYes(opts.yes, "\uD0A4 \uC989\uC2DC \uC0AD\uC81C");
+  const parsedKeyId = parseRequiredArgument(keyId, "key-id");
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const deletion = await withSkmSpinner(
+    `SKM \uD0A4 ${formatCell(parsedKeyId)} \uC989\uC2DC \uC0AD\uC81C \uC911...`,
+    () => client.deleteKeyNow(parsedKeyId)
+  );
+  outputSkmWriteResult(
+    opts,
+    { operation: "key-purge", status: "succeeded", keyId: deletion.keyId, deletionDateTime: deletion.deletionDateTime },
+    [formatCell(deletion.keyId)]
+  );
+});
+
+// src/commands/skm/key.ts
+var KEY_FIELDS = [
+  "keyId",
+  "name",
+  "description",
+  "keyType",
+  "currentKeyValueVersion",
+  "autoRotationPeriod",
+  "nextAutoRotationDate",
+  "lastAccessDatetime",
+  "deletionDatetime",
+  "creationUser",
+  "creationDatetime",
+  "lastChangeUser",
+  "lastChangeDatetime"
+];
+var listCommand17 = withSkmOptions(
+  new import_commander63.Command("list").description("\uD0A4 \uC800\uC7A5\uC18C\uC758 \uD0A4 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4 (\uC804\uCCB4 \uD544\uB4DC\uB294 --json)").argument("<keystore-id>", "\uD0A4 \uC800\uC7A5\uC18C ID").option("--type <type>", "\uD0A4 \uC885\uB958 (secret|symmetric-key|asymmetric-key)").option("--name <name>", "\uD0A4 \uC774\uB984 \uD544\uD130 (100\uC790 \uC774\uD558)").option("--status <status>", "\uD0A4 \uC0C1\uD0DC \uD544\uD130 (active|inactive)")
+).action(async (keyStoreId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedId = parseKeyStoreId(keyStoreId);
+  const type = parseKeyTypeOption(opts.type);
+  const name = parseKeyNameOption(opts.name);
+  const status = parseKeyStatusOption(opts.status);
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const filter = {
+    ...type !== void 0 && { type },
+    ...name !== void 0 && { name },
+    ...status !== void 0 && { status }
+  };
+  const keys = await withSkmSpinner(
+    `SKM \uD0A4 \uC800\uC7A5\uC18C ${parsedId} \uD0A4 \uBAA9\uB85D \uC870\uD68C \uC911...`,
+    () => client.listKeys(parsedId, filter)
+  );
+  output(opts, {
+    headers: ["keyId", "name", "keyType", "currentKeyValueVersion", "lastAccessDatetime", "deletionDatetime"],
+    rows: keys.map((k) => [
+      formatCell(k.keyId),
+      formatCell(k.name),
+      formatCell(k.keyType),
+      formatCell(k.currentKeyValueVersion),
+      formatCell(k.lastAccessDatetime),
+      formatCell(k.deletionDatetime)
+    ]),
+    raw: keys,
+    ids: keys.map((k) => formatCell(k.keyId))
+  });
+});
+var getCommand12 = withSkmOptions(
+  new import_commander63.Command("get").description("\uD0A4 \uD55C \uAC74\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<keystore-id>", "\uD0A4 \uC800\uC7A5\uC18C ID").argument("<key-id>", "\uD0A4 ID")
+).action(async (keyStoreId, keyId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedId = parseKeyStoreId(keyStoreId);
+  const parsedKeyId = parseRequiredArgument(keyId, "key-id");
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const key = await withSkmSpinner(
+    `SKM \uD0A4 ${formatCell(parsedKeyId)} \uC870\uD68C \uC911...`,
+    () => client.getKey(parsedId, parsedKeyId)
+  );
+  output(opts, {
+    headers: ["field", "value"],
+    rows: KEY_FIELDS.map((field) => [field, formatCell(key[field])]),
+    raw: key,
+    ids: [formatCell(key.keyId)]
+  });
+});
+var keyCommand = new import_commander63.Command("key").description("SKM \uD0A4 \uC870\uD68C\uC640 \uAD00\uB9AC").addCommand(listCommand17).addCommand(getCommand12).addCommand(createCommand12).addCommand(deleteCommand10).addCommand(purgeCommand);
+
+// src/commands/skm/secret.ts
+var import_commander64 = require("commander");
+var getCommand13 = withSkmOptions(
+  new import_commander64.Command("get").description("\uAE30\uBC00 \uB370\uC774\uD130\uB97C \uC870\uD68C\uD55C\uB2E4 (\uC6D0\uBB38\uC744 stdout\uC5D0 \uCD9C\uB825)").argument("<key-id>", "\uD0A4 ID")
+).action(async (keyId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedKeyId = parseRequiredArgument(keyId, "key-id");
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const secret = await withSkmSpinner(
+    `SKM \uAE30\uBC00 \uB370\uC774\uD130 ${formatCell(parsedKeyId)} \uC870\uD68C \uC911...`,
+    () => client.getSecret(parsedKeyId)
+  );
+  printSkmValue(opts, secret, { secret });
+});
+var updateCommand5 = withSkmOptions(
+  new import_commander64.Command("update").description("\uAE30\uBC00 \uB370\uC774\uD130 \uAC12\uC744 \uBC14\uAFBC\uB2E4 (\uAC12\uC740 --value, --file, \uD45C\uC900 \uC785\uB825 \uC911 \uD558\uB098)").argument("<key-id>", "\uD0A4 ID").option("--value <value>", "\uC0C8 \uAE30\uBC00 \uB370\uC774\uD130 \uAC12").option("--file <path>", "\uC0C8 \uAE30\uBC00 \uB370\uC774\uD130 \uAC12\uC744 \uC77D\uC744 \uD30C\uC77C")
+).action(async (keyId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedKeyId = parseRequiredArgument(keyId, "key-id");
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const input = readSkmInput(
+    { text: opts.value, file: opts.file },
+    { textFlag: "--value", label: "\uAE30\uBC00 \uB370\uC774\uD130", maxBytes: MAX_JSON_INPUT_BYTES }
+  );
+  const secretValue = decodeUtf8Input(input, "\uAE30\uBC00 \uB370\uC774\uD130", "\uBC14\uC774\uB108\uB9AC\uB294 base64\uB85C \uC778\uCF54\uB529\uD574 \uC804\uB2EC\uD558\uC138\uC694.");
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const updated = await withSkmSpinner(
+    `SKM \uAE30\uBC00 \uB370\uC774\uD130 ${formatCell(parsedKeyId)} \uC218\uC815 \uC911...`,
+    () => client.updateSecret(parsedKeyId, secretValue)
+  );
+  const { secretValue: _omitted, ...result } = updated;
+  outputSkmWriteResult(opts, result, [formatCell(updated.keyId)]);
+});
+var secretCommand = new import_commander64.Command("secret").description("SKM \uAE30\uBC00 \uB370\uC774\uD130 \uC870\uD68C\uC640 \uC218\uC815").addCommand(getCommand13).addCommand(updateCommand5);
+
+// src/commands/skm/symmetric-key.ts
+var import_commander65 = require("commander");
+var MAX_ENCRYPT_BYTES = 32768;
+var encryptCommand = withSkmOptions(
+  new import_commander65.Command("encrypt").description("\uB300\uCE6D\uD0A4\uB85C \uB370\uC774\uD130\uB97C \uC554\uD638\uD654\uD55C\uB2E4 (--plaintext / --file / stdin, UTF-8 \uD14D\uC2A4\uD2B8 32KB \uC774\uD558)").argument("<key-id>", "\uD0A4 ID").option("--plaintext <text>", "\uC554\uD638\uD654\uD560 \uB370\uC774\uD130").option("--file <path>", "\uC554\uD638\uD654\uD560 \uB370\uC774\uD130\uB97C \uC77D\uC744 \uD30C\uC77C \uACBD\uB85C")
+).action(async (keyId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedKeyId = parseRequiredArgument(keyId, "key-id");
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const label = "\uC554\uD638\uD654\uD560 \uB370\uC774\uD130";
+  const input = readSkmInput(
+    { text: opts.plaintext, file: opts.file },
+    { textFlag: "--plaintext", label, maxBytes: MAX_ENCRYPT_BYTES }
+  );
+  const plaintext = decodeUtf8Input(input, label, "\uBC14\uC774\uB108\uB9AC\uB294 base64\uB85C \uC778\uCF54\uB529\uD574 \uC804\uB2EC\uD558\uC138\uC694.");
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const body = await withSkmSpinner(
+    `SKM \uB300\uCE6D\uD0A4 ${formatCell(parsedKeyId)}\uB85C \uC554\uD638\uD654 \uC911...`,
+    () => client.encrypt(parsedKeyId, plaintext)
+  );
+  printSkmValue(opts, body.ciphertext, body);
+});
+var decryptCommand = withSkmOptions(
+  new import_commander65.Command("decrypt").description("\uB300\uCE6D\uD0A4\uB85C \uC554\uD638\uBB38\uC744 \uBCF5\uD638\uD654\uD55C\uB2E4 (--ciphertext / --file / stdin, \uD3C9\uBB38\uC744 stdout\uC5D0 \uCD9C\uB825)").argument("<key-id>", "\uD0A4 ID").option("--ciphertext <text>", "\uBCF5\uD638\uD654\uD560 \uC554\uD638\uBB38 (base64)").option("--file <path>", "\uBCF5\uD638\uD654\uD560 \uC554\uD638\uBB38\uC744 \uC77D\uC744 \uD30C\uC77C \uACBD\uB85C")
+).action(async (keyId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedKeyId = parseRequiredArgument(keyId, "key-id");
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const label = "\uBCF5\uD638\uD654\uD560 \uC554\uD638\uBB38";
+  const input = readSkmInput(
+    { text: opts.ciphertext, file: opts.file },
+    { textFlag: "--ciphertext", label, maxBytes: MAX_JSON_INPUT_BYTES }
+  );
+  const ciphertext = decodeUtf8Input(input, label, "\uC554\uD638\uBB38\uC740 base64 \uBB38\uC790\uC5F4\uC785\uB2C8\uB2E4.").trim();
+  if (!ciphertext) {
+    throw new NhnCloudCliError(`${label}\uC774 \uBE44\uC5B4 \uC788\uC2B5\uB2C8\uB2E4.`, EXIT_PARAM_ERROR);
+  }
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const body = await withSkmSpinner(
+    `SKM \uB300\uCE6D\uD0A4 ${formatCell(parsedKeyId)}\uB85C \uBCF5\uD638\uD654 \uC911...`,
+    () => client.decrypt(parsedKeyId, ciphertext)
+  );
+  printSkmValue(opts, body.plaintext, body);
+});
+var getCommand14 = withSkmOptions(
+  new import_commander65.Command("get").description("\uB300\uCE6D\uD0A4 \uC6D0\uBB38\uC744 \uC870\uD68C\uD55C\uB2E4 (\uC6D0\uBB38\uC744 stdout\uC5D0 \uCD9C\uB825)").argument("<key-id>", "\uD0A4 ID").option("--key-version <n>", "\uC870\uD68C\uD560 \uD0A4 \uBC84\uC804 (0 \uC774\uC0C1, \uC0DD\uB7B5\uD558\uBA74 \uBC84\uC804\uC744 \uC9C0\uC815\uD558\uC9C0 \uC54A\uACE0 \uC694\uCCAD)")
+).action(async (keyId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedKeyId = parseRequiredArgument(keyId, "key-id");
+  const keyVersion = parseKeyVersionOption(opts.keyVersion);
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const body = await withSkmSpinner(
+    `SKM \uB300\uCE6D\uD0A4 ${formatCell(parsedKeyId)} \uC870\uD68C \uC911...`,
+    () => client.getSymmetricKey(parsedKeyId, keyVersion)
+  );
+  printSkmValue(opts, body.symmetricKey, body);
+});
+var createLocalKeyCommand = withSkmOptions(
+  new import_commander65.Command("create-local-key").description("\uB85C\uCEEC \uC554\uD638\uD654\uC5D0 \uC4F8 \uB370\uC774\uD130 \uD0A4\uB97C \uB9CC\uB4E0\uB2E4 (\uD3C9\uBB38 \uD0A4\uB294 \uC774 \uC751\uB2F5\uC5D0\uC11C\uB9CC \uBC1B\uC744 \uC218 \uC788\uB2E4)").argument("<key-id>", "\uD0A4 ID")
+).action(async (keyId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedKeyId = parseRequiredArgument(keyId, "key-id");
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const body = await withSkmSpinner(
+    `SKM \uB300\uCE6D\uD0A4 ${formatCell(parsedKeyId)}\uB85C \uB85C\uCEEC \uD0A4 \uC0DD\uC131 \uC911...`,
+    () => client.createLocalKey(parsedKeyId)
+  );
+  output(opts, {
+    headers: ["field", "value"],
+    rows: [
+      ["localKeyPlaintext", formatCell(body.localKeyPlaintext)],
+      ["localKeyCiphertext", formatCell(body.localKeyCiphertext)],
+      ["keyVersion", formatCell(body.keyVersion)]
+    ],
+    raw: body,
+    ids: [body.localKeyPlaintext, body.localKeyCiphertext]
+  });
+});
+var symmetricKeyCommand = new import_commander65.Command("symmetric-key").description("SKM \uB300\uCE6D\uD0A4 \uC554\uBCF5\uD638\uD654\uC640 \uD0A4 \uC870\uD68C").addCommand(encryptCommand).addCommand(decryptCommand).addCommand(getCommand14).addCommand(createLocalKeyCommand);
+
+// src/commands/skm/asymmetric-key.ts
+var import_commander66 = require("commander");
+var MAX_SIGN_BYTES = 245;
+var MAX_STANDARD_SIGN_BYTES = 65536;
+function readSignPayload(opts, label) {
+  const input = readSkmInput(
+    { text: opts.plaintext, file: opts.file },
+    { textFlag: "--plaintext", label, maxBytes: opts.standard ? MAX_STANDARD_SIGN_BYTES : MAX_SIGN_BYTES }
+  );
+  if (opts.standard) return input.toString("base64");
+  return decodeUtf8Input(input, label, "\uBC14\uC774\uB108\uB9AC\uB294 --standard\uB85C \uC11C\uBA85\uD558\uC138\uC694.");
+}
+function withSignInputOptions(command) {
+  return command.argument("<key-id>", "\uD0A4 ID").option("--plaintext <text>", "\uB370\uC774\uD130 (\uBBF8\uC9C0\uC815 \uC2DC --file \uB610\uB294 stdin)").option("--file <path>", "\uB370\uC774\uD130\uB97C \uC77D\uC744 \uD30C\uC77C \uACBD\uB85C").option("--standard", "\uD45C\uC900 \uC2A4\uD0B4(RSASSA-PSS)\uC73C\uB85C \uCC98\uB9AC\uD55C\uB2E4 (\uBC14\uC774\uB108\uB9AC \uAC00\uB2A5, 64KB \uC774\uD558)");
+}
+var signCommand = withSkmOptions(
+  withSignInputOptions(
+    new import_commander66.Command("sign").description("\uBE44\uB300\uCE6D\uD0A4\uB85C \uB370\uC774\uD130\uC5D0 \uC11C\uBA85\uD55C\uB2E4 (\uC77C\uBC18 \uC11C\uBA85\uC740 UTF-8 \uD14D\uC2A4\uD2B8 245\uBC14\uC774\uD2B8 \uC774\uD558)")
+  )
+).action(async (keyId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedKeyId = parseRequiredArgument(keyId, "key-id");
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const payload = readSignPayload(opts, "\uC11C\uBA85\uD560 \uB370\uC774\uD130");
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const body = await withSkmSpinner(
+    `SKM \uBE44\uB300\uCE6D\uD0A4 ${formatCell(parsedKeyId)}\uB85C \uC11C\uBA85 \uC911...`,
+    () => opts.standard ? client.signStandard(parsedKeyId, payload) : client.sign(parsedKeyId, payload)
+  );
+  printSkmValue(opts, body.signature, body);
+});
+var verifyCommand = withSkmOptions(
+  withSignInputOptions(
+    new import_commander66.Command("verify").description("\uBE44\uB300\uCE6D\uD0A4\uB85C \uC11C\uBA85\uC744 \uAC80\uC99D\uD55C\uB2E4 (\uAC80\uC99D \uC2E4\uD328\uB294 \uC885\uB8CC \uCF54\uB4DC 1)")
+  ).requiredOption("--signature <sig>", "\uAC80\uC99D\uD560 \uC11C\uBA85\uAC12 (base64)").option("--key-version <n>", "\uC11C\uBA85\uD55C \uD0A4 \uBC84\uC804 (--standard \uAC80\uC99D\uC5D0 \uD544\uC218)")
+).action(async (keyId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedKeyId = parseRequiredArgument(keyId, "key-id");
+  const signature = opts.signature.trim();
+  if (!signature) {
+    throw new NhnCloudCliError("--signature\uAC00 \uBE44\uC5B4 \uC788\uC2B5\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  const keyVersion = parseKeyVersionOption(opts.keyVersion);
+  if (opts.standard && keyVersion === void 0) {
+    throw new NhnCloudCliError("--standard \uAC80\uC99D\uC5D0\uB294 --key-version\uC774 \uD544\uC694\uD569\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  if (!opts.standard && keyVersion !== void 0) {
+    throw new NhnCloudCliError("--key-version\uC740 --standard\uC640 \uD568\uAED8 \uC9C0\uC815\uD569\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const payload = readSignPayload(opts, "\uAC80\uC99D\uD560 \uB370\uC774\uD130");
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const body = await withSkmSpinner(
+    `SKM \uBE44\uB300\uCE6D\uD0A4 ${formatCell(parsedKeyId)}\uB85C \uC11C\uBA85 \uAC80\uC99D \uC911...`,
+    () => keyVersion !== void 0 ? client.verifyStandard(parsedKeyId, payload, signature, keyVersion) : client.verify(parsedKeyId, payload, signature)
+  );
+  if (opts.json) {
+    printJson(body);
+  } else if (!opts.quiet) {
+    const verdict = body.result ? "\uAC80\uC99D \uC131\uACF5" : "\uAC80\uC99D \uC2E4\uD328";
+    process.stdout.write(`${verdict} (keyVersion ${body.keyVersion})
+`);
+  }
+  if (!body.result) {
+    throw new NhnCloudCliError("\uC11C\uBA85 \uAC80\uC99D\uC5D0 \uC2E4\uD328\uD588\uC2B5\uB2C8\uB2E4.", EXIT_API_ERROR);
+  }
+});
+function keyMaterialCommand(name, description, fetch, spinnerLabel) {
+  return withSkmOptions(
+    new import_commander66.Command(name).description(description).argument("<key-id>", "\uD0A4 ID").option("--key-version <n>", "\uC870\uD68C\uD560 \uD0A4 \uBC84\uC804 (0 \uC774\uC0C1, \uC0DD\uB7B5\uD558\uBA74 \uBC84\uC804\uC744 \uC9C0\uC815\uD558\uC9C0 \uC54A\uACE0 \uC694\uCCAD)")
+  ).action(async (keyId, _opts, command) => {
+    const opts = command.optsWithGlobals();
+    const parsedKeyId = parseRequiredArgument(keyId, "key-id");
+    const keyVersion = parseKeyVersionOption(opts.keyVersion);
+    const macAddress = parseMacAddressOption(opts.macAddress);
+    const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+    const body = await withSkmSpinner(
+      `SKM \uBE44\uB300\uCE6D\uD0A4 ${formatCell(parsedKeyId)} ${spinnerLabel} \uC870\uD68C \uC911...`,
+      () => fetch(client, parsedKeyId, keyVersion)
+    );
+    printSkmValue(opts, body.standardEncodedKey ?? body.encodedKey, body);
+  });
+}
+var publicKeyCommand = keyMaterialCommand(
+  "public-key",
+  "\uACF5\uAC1C\uD0A4\uB97C \uC870\uD68C\uD55C\uB2E4 (standardEncodedKey\uB97C, \uC5C6\uC73C\uBA74 encodedKey\uB97C stdout\uC5D0 \uCD9C\uB825)",
+  (client, keyId, keyVersion) => client.getPublicKey(keyId, keyVersion),
+  "\uACF5\uAC1C\uD0A4"
+);
+var privateKeyCommand = keyMaterialCommand(
+  "private-key",
+  "\uAC1C\uC778\uD0A4 \uC6D0\uBB38\uC744 \uC870\uD68C\uD55C\uB2E4 (standardEncodedKey\uB97C, \uC5C6\uC73C\uBA74 encodedKey\uB97C stdout\uC5D0 \uCD9C\uB825)",
+  (client, keyId, keyVersion) => client.getPrivateKey(keyId, keyVersion),
+  "\uAC1C\uC778\uD0A4"
+);
+var asymmetricKeyCommand = new import_commander66.Command("asymmetric-key").description("SKM \uBE44\uB300\uCE6D\uD0A4 \uC11C\uBA85\xB7\uAC80\uC99D\uACFC \uD0A4 \uC870\uD68C").addCommand(signCommand).addCommand(verifyCommand).addCommand(publicKeyCommand).addCommand(privateKeyCommand);
+
+// src/commands/loadbalancer/list.ts
+var import_commander67 = require("commander");
+
+// src/commands/loadbalancer/helpers.ts
+var import_node_net3 = require("net");
+
+// src/services/loadbalancer/client.ts
+var import_ky17 = __toESM(require("ky"));
+
+// src/services/loadbalancer/types.ts
+function isRecord5(value) {
+  return typeof value === "object" && value !== null;
+}
 function isNonEmptyString(value) {
   return typeof value === "string" && value.length > 0;
 }
@@ -11220,29 +12566,29 @@ function isIpAclAction(value) {
   return value === "ALLOW" || value === "DENY";
 }
 function isLoadBalancerIpAclGroup(value) {
-  return isRecord3(value) && isNonEmptyString(value["ipacl_group_id"]);
+  return isRecord5(value) && isNonEmptyString(value["ipacl_group_id"]);
 }
 function isIpAclGroupLoadBalancer(value) {
-  return isRecord3(value) && isNonEmptyString(value["loadbalancer_id"]);
+  return isRecord5(value) && isNonEmptyString(value["loadbalancer_id"]);
 }
 function isLoadBalancer(value) {
-  if (!isRecord3(value)) return false;
+  if (!isRecord5(value)) return false;
   return isNonEmptyString(value["id"]) && typeof value["name"] === "string" && typeof value["vip_address"] === "string" && typeof value["provisioning_status"] === "string" && typeof value["operating_status"] === "string" && (value["ipacl_group_action"] === null || isIpAclAction(value["ipacl_group_action"])) && Array.isArray(value["ipacl_groups"]) && value["ipacl_groups"].every(isLoadBalancerIpAclGroup);
 }
 function isIpAclGroup(value) {
-  if (!isRecord3(value)) return false;
+  if (!isRecord5(value)) return false;
   return isNonEmptyString(value["id"]) && typeof value["name"] === "string" && isIpAclAction(value["action"]) && typeof value["ipacl_target_count"] === "string" && Array.isArray(value["loadbalancers"]) && value["loadbalancers"].every(isIpAclGroupLoadBalancer);
 }
 function isIpAclTarget(value) {
-  if (!isRecord3(value)) return false;
+  if (!isRecord5(value)) return false;
   return isNonEmptyString(value["id"]) && typeof value["cidr_address"] === "string" && typeof value["description"] === "string" && isNonEmptyString(value["ipacl_group_id"]);
 }
 function isIpAclBinding(value) {
-  return isRecord3(value) && isNonEmptyString(value["loadbalancer_id"]) && isNonEmptyString(value["ipacl_group_id"]);
+  return isRecord5(value) && isNonEmptyString(value["loadbalancer_id"]) && isNonEmptyString(value["ipacl_group_id"]);
 }
 
 // src/services/loadbalancer/client.ts
-function isRecord4(value) {
+function isRecord6(value) {
   return typeof value === "object" && value !== null;
 }
 function requireNonEmptyId(id, label) {
@@ -11253,7 +12599,7 @@ function requireNonEmptyId(id, label) {
   return normalized;
 }
 function readArrayField(response, key, itemGuard, missingKeyMessage, invalidItemMessage) {
-  if (!isRecord4(response) || !Array.isArray(response[key])) {
+  if (!isRecord6(response) || !Array.isArray(response[key])) {
     throw new NhnCloudCliError(missingKeyMessage, EXIT_API_ERROR);
   }
   const items = response[key];
@@ -11263,7 +12609,7 @@ function readArrayField(response, key, itemGuard, missingKeyMessage, invalidItem
   return items;
 }
 function readObjectField(response, key, itemGuard, missingKeyMessage, invalidItemMessage) {
-  if (!isRecord4(response) || !(key in response)) {
+  if (!isRecord6(response) || !(key in response)) {
     throw new NhnCloudCliError(missingKeyMessage, EXIT_API_ERROR);
   }
   const item = response[key];
@@ -11404,7 +12750,7 @@ var LoadBalancerClient = class {
   async getJson(path5, searchParams) {
     const url = `${this.endpoint}${path5}`;
     try {
-      return await import_ky16.default.get(url, {
+      return await import_ky17.default.get(url, {
         headers: this.authHeaders(),
         searchParams,
         retry: 0,
@@ -11417,7 +12763,7 @@ var LoadBalancerClient = class {
   async postJson(path5, json) {
     const url = `${this.endpoint}${path5}`;
     try {
-      return await import_ky16.default.post(url, {
+      return await import_ky17.default.post(url, {
         headers: this.authHeaders(),
         json,
         retry: 0,
@@ -11430,7 +12776,7 @@ var LoadBalancerClient = class {
   async putJson(path5, json) {
     const url = `${this.endpoint}${path5}`;
     try {
-      return await import_ky16.default.put(url, {
+      return await import_ky17.default.put(url, {
         headers: this.authHeaders(),
         json,
         retry: 0,
@@ -11443,7 +12789,7 @@ var LoadBalancerClient = class {
   async deleteNoContent(path5) {
     const url = `${this.endpoint}${path5}`;
     try {
-      await import_ky16.default.delete(url, {
+      await import_ky17.default.delete(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -11481,7 +12827,7 @@ function parseIpOrCidr(value) {
   const normalized = value.trim();
   const parts = normalized.split("/");
   const address = parts[0] ?? "";
-  const version = (0, import_node_net2.isIP)(address);
+  const version = (0, import_node_net3.isIP)(address);
   if (version === 0 || parts.length > 2) {
     throw new NhnCloudCliError(
       `--cidr\uC740 IP \uC8FC\uC18C \uB610\uB294 CIDR\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4: ${JSON.stringify(value)}`,
@@ -11534,7 +12880,7 @@ async function resolveLoadBalancerClient(opts) {
 }
 
 // src/commands/loadbalancer/list.ts
-var listCommand16 = new import_commander59.Command("list").description("Load Balancer \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4 (\uC804\uCCB4 \uD544\uB4DC\uB294 --json)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+var listCommand18 = new import_commander67.Command("list").description("Load Balancer \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4 (\uC804\uCCB4 \uD544\uB4DC\uB294 --json)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   const { client } = await resolveLoadBalancerClient(opts);
   startSpinner("Load Balancer \uBAA9\uB85D \uC870\uD68C \uC911...");
@@ -11572,8 +12918,8 @@ var listCommand16 = new import_commander59.Command("list").description("Load Bal
 });
 
 // src/commands/loadbalancer/get.ts
-var import_commander60 = require("commander");
-var getCommand11 = new import_commander60.Command("get").description("Load Balancer\uB97C \uC774\uB984 \uB610\uB294 UUID\uB85C \uC870\uD68C\uD55C\uB2E4").argument("<loadbalancer>", "Load Balancer \uC774\uB984 \uB610\uB294 UUID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (loadBalancerInput, _opts, cmd) => {
+var import_commander68 = require("commander");
+var getCommand15 = new import_commander68.Command("get").description("Load Balancer\uB97C \uC774\uB984 \uB610\uB294 UUID\uB85C \uC870\uD68C\uD55C\uB2E4").argument("<loadbalancer>", "Load Balancer \uC774\uB984 \uB610\uB294 UUID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (loadBalancerInput, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   const input = requireResourceInput(loadBalancerInput, "Load Balancer");
   const { client } = await resolveLoadBalancerClient(opts);
@@ -11610,10 +12956,10 @@ var getCommand11 = new import_commander60.Command("get").description("Load Balan
 });
 
 // src/commands/loadbalancer/ipacl.ts
-var import_commander62 = require("commander");
+var import_commander70 = require("commander");
 
 // src/commands/loadbalancer/target.ts
-var import_commander61 = require("commander");
+var import_commander69 = require("commander");
 
 // src/commands/loadbalancer/rebind.ts
 function shellQuote(value) {
@@ -11744,7 +13090,7 @@ function targetWriteResult(operation, target, rebind) {
     rebind
   };
 }
-var listCommand17 = new import_commander61.Command("list").description("IP ACL \uB300\uC0C1 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<group>", "IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (groupInput, _opts, cmd) => {
+var listCommand19 = new import_commander69.Command("list").description("IP ACL \uB300\uC0C1 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<group>", "IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (groupInput, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   const input = requireResourceInput(groupInput, "IP ACL \uADF8\uB8F9");
   const { client } = await resolveLoadBalancerClient(opts);
@@ -11773,7 +13119,7 @@ var listCommand17 = new import_commander61.Command("list").description("IP ACL \
     ids: targets.map((target) => target.id)
   });
 });
-var addCommand = new import_commander61.Command("add").description("IP ACL \uB300\uC0C1\uC744 \uCD94\uAC00\uD558\uACE0 \uC5F0\uACB0\uB41C Load Balancer\uB97C \uC7AC\uBC14\uC778\uB529\uD55C\uB2E4").argument("<group>", "IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID").requiredOption("--cidr <ip-or-cidr>", "\uCD94\uAC00\uD560 IP \uC8FC\uC18C \uB610\uB294 CIDR").option("--description <text>", "IP ACL \uB300\uC0C1 \uC124\uBA85").option("--no-rebind", "\uB300\uC0C1 \uCD94\uAC00 \uD6C4 Load Balancer \uC7AC\uBC14\uC778\uB529 \uC0DD\uB7B5").option("--yes", "\uB300\uC0C1 \uCD94\uAC00 \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (groupInput, _opts, cmd) => {
+var addCommand = new import_commander69.Command("add").description("IP ACL \uB300\uC0C1\uC744 \uCD94\uAC00\uD558\uACE0 \uC5F0\uACB0\uB41C Load Balancer\uB97C \uC7AC\uBC14\uC778\uB529\uD55C\uB2E4").argument("<group>", "IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID").requiredOption("--cidr <ip-or-cidr>", "\uCD94\uAC00\uD560 IP \uC8FC\uC18C \uB610\uB294 CIDR").option("--description <text>", "IP ACL \uB300\uC0C1 \uC124\uBA85").option("--no-rebind", "\uB300\uC0C1 \uCD94\uAC00 \uD6C4 Load Balancer \uC7AC\uBC14\uC778\uB529 \uC0DD\uB7B5").option("--yes", "\uB300\uC0C1 \uCD94\uAC00 \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (groupInput, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   requireYes(opts.yes, "IP ACL \uB300\uC0C1 \uCD94\uAC00");
   const parsedGroup = requireResourceInput(groupInput, "IP ACL \uADF8\uB8F9");
@@ -11810,7 +13156,7 @@ var addCommand = new import_commander61.Command("add").description("IP ACL \uB30
   writeTargetWarnings(group, result);
   if (result.status === "partial") process.exitCode = EXIT_API_ERROR;
 });
-var removeCommand = new import_commander61.Command("remove").description("IP ACL \uB300\uC0C1\uC744 \uC0AD\uC81C\uD558\uACE0 \uC5F0\uACB0\uB41C Load Balancer\uB97C \uC7AC\uBC14\uC778\uB529\uD55C\uB2E4").argument("<target-id>", "\uC0AD\uC81C\uD560 IP ACL \uB300\uC0C1 UUID").option("--no-rebind", "\uB300\uC0C1 \uC0AD\uC81C \uD6C4 Load Balancer \uC7AC\uBC14\uC778\uB529 \uC0DD\uB7B5").option("--yes", "\uB300\uC0C1 \uC0AD\uC81C \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (targetInput, _opts, cmd) => {
+var removeCommand = new import_commander69.Command("remove").description("IP ACL \uB300\uC0C1\uC744 \uC0AD\uC81C\uD558\uACE0 \uC5F0\uACB0\uB41C Load Balancer\uB97C \uC7AC\uBC14\uC778\uB529\uD55C\uB2E4").argument("<target-id>", "\uC0AD\uC81C\uD560 IP ACL \uB300\uC0C1 UUID").option("--no-rebind", "\uB300\uC0C1 \uC0AD\uC81C \uD6C4 Load Balancer \uC7AC\uBC14\uC778\uB529 \uC0DD\uB7B5").option("--yes", "\uB300\uC0C1 \uC0AD\uC81C \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (targetInput, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   requireYes(opts.yes, "IP ACL \uB300\uC0C1 \uC0AD\uC81C");
   const parsedTargetId = requireResourceInput(targetInput, "IP ACL \uB300\uC0C1");
@@ -11841,13 +13187,13 @@ var removeCommand = new import_commander61.Command("remove").description("IP ACL
   writeTargetWarnings(group, result);
   if (result.status === "partial") process.exitCode = EXIT_API_ERROR;
 });
-var targetCommand = new import_commander61.Command("target").description("IP ACL \uB300\uC0C1 \uC870\uD68C\xB7\uAD00\uB9AC");
-targetCommand.addCommand(listCommand17);
+var targetCommand = new import_commander69.Command("target").description("IP ACL \uB300\uC0C1 \uC870\uD68C\xB7\uAD00\uB9AC");
+targetCommand.addCommand(listCommand19);
 targetCommand.addCommand(addCommand);
 targetCommand.addCommand(removeCommand);
 
 // src/commands/loadbalancer/ipacl.ts
-var listCommand18 = new import_commander62.Command("list").description("IP ACL \uADF8\uB8F9 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4 (\uC804\uCCB4 \uD544\uB4DC\uB294 --json)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+var listCommand20 = new import_commander70.Command("list").description("IP ACL \uADF8\uB8F9 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4 (\uC804\uCCB4 \uD544\uB4DC\uB294 --json)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   const { client } = await resolveLoadBalancerClient(opts);
   startSpinner("IP ACL \uADF8\uB8F9 \uBAA9\uB85D \uC870\uD68C \uC911...");
@@ -11875,7 +13221,7 @@ var listCommand18 = new import_commander62.Command("list").description("IP ACL \
     ids: groups.map((group) => group.id)
   });
 });
-var getCommand12 = new import_commander62.Command("get").description("IP ACL \uADF8\uB8F9\uC744 \uC774\uB984 \uB610\uB294 UUID\uB85C \uC870\uD68C\uD55C\uB2E4").argument("<group>", "IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (groupInput, _opts, cmd) => {
+var getCommand16 = new import_commander70.Command("get").description("IP ACL \uADF8\uB8F9\uC744 \uC774\uB984 \uB610\uB294 UUID\uB85C \uC870\uD68C\uD55C\uB2E4").argument("<group>", "IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (groupInput, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   const input = requireResourceInput(groupInput, "IP ACL \uADF8\uB8F9");
   const { client } = await resolveLoadBalancerClient(opts);
@@ -11908,7 +13254,7 @@ var getCommand12 = new import_commander62.Command("get").description("IP ACL \uA
     ids: [group.id]
   });
 });
-var createCommand11 = new import_commander62.Command("create").description("IP ACL \uADF8\uB8F9\uC744 \uC0DD\uC131\uD55C\uB2E4").requiredOption("--name <name>", "IP ACL \uADF8\uB8F9 \uC774\uB984").requiredOption("--action <ALLOW|DENY>", "IP \uC811\uADFC \uC81C\uC5B4 \uB3D9\uC791").option("--description <text>", "IP ACL \uADF8\uB8F9 \uC124\uBA85").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+var createCommand13 = new import_commander70.Command("create").description("IP ACL \uADF8\uB8F9\uC744 \uC0DD\uC131\uD55C\uB2E4").requiredOption("--name <name>", "IP ACL \uADF8\uB8F9 \uC774\uB984").requiredOption("--action <ALLOW|DENY>", "IP \uC811\uADFC \uC81C\uC5B4 \uB3D9\uC791").option("--description <text>", "IP ACL \uADF8\uB8F9 \uC124\uBA85").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   const parsedName = requireResourceInput(opts.name ?? "", "IP ACL \uADF8\uB8F9");
   const parsedAction = parseIpAclAction(opts.action ?? "");
@@ -11939,7 +13285,7 @@ var createCommand11 = new import_commander62.Command("create").description("IP A
     ids: [group.id]
   });
 });
-var deleteCommand9 = new import_commander62.Command("delete").description("IP ACL \uADF8\uB8F9\uACFC \uD558\uC704 \uB300\uC0C1\uC744 \uC0AD\uC81C\uD55C\uB2E4").argument("<group>", "IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID").option("--yes", "\uC0AD\uC81C\uC640 \uC5F0\uACB0 \uADDC\uCE59 \uC81C\uAC70 \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (groupInput, _opts, cmd) => {
+var deleteCommand11 = new import_commander70.Command("delete").description("IP ACL \uADF8\uB8F9\uACFC \uD558\uC704 \uB300\uC0C1\uC744 \uC0AD\uC81C\uD55C\uB2E4").argument("<group>", "IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID").option("--yes", "\uC0AD\uC81C\uC640 \uC5F0\uACB0 \uADDC\uCE59 \uC81C\uAC70 \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (groupInput, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   const confirmedYes = requireYes(opts.yes, "IP ACL \uADF8\uB8F9 \uC0AD\uC81C");
   const parsedGroup = requireResourceInput(groupInput, "IP ACL \uADF8\uB8F9");
@@ -11971,23 +13317,15 @@ var deleteCommand9 = new import_commander62.Command("delete").description("IP AC
     ids: [groupId]
   });
 });
-var ipaclCommand = new import_commander62.Command("ipacl").description("IP ACL \uADF8\uB8F9\xB7\uB300\uC0C1 \uC870\uD68C");
-ipaclCommand.addCommand(listCommand18);
-ipaclCommand.addCommand(getCommand12);
-ipaclCommand.addCommand(createCommand11);
-ipaclCommand.addCommand(deleteCommand9);
+var ipaclCommand = new import_commander70.Command("ipacl").description("IP ACL \uADF8\uB8F9\xB7\uB300\uC0C1 \uC870\uD68C");
+ipaclCommand.addCommand(listCommand20);
+ipaclCommand.addCommand(getCommand16);
+ipaclCommand.addCommand(createCommand13);
+ipaclCommand.addCommand(deleteCommand11);
 ipaclCommand.addCommand(targetCommand);
 
-// src/commands/loadbalancer/help.ts
-function configureLoadBalancerHelp(command) {
-  command.configureHelp({ showGlobalOptions: true });
-  for (const child of command.commands) {
-    configureLoadBalancerHelp(child);
-  }
-}
-
 // src/commands/loadbalancer/binding.ts
-var import_commander63 = require("commander");
+var import_commander71 = require("commander");
 function bindingResult(operation, loadBalancerId, groupIds) {
   return {
     operation,
@@ -12009,7 +13347,7 @@ function outputBindingResult(opts, result) {
     ids: [result.loadbalancer_id]
   });
 }
-var setIpAclCommand2 = new import_commander63.Command("set-ipacl").description("Load Balancer\uC758 IP ACL \uADF8\uB8F9 \uC5F0\uACB0\uC744 \uC804\uCCB4 \uAD50\uCCB4\uD55C\uB2E4").argument("<loadbalancer>", "Load Balancer \uC774\uB984 \uB610\uB294 UUID").requiredOption(
+var setIpAclCommand2 = new import_commander71.Command("set-ipacl").description("Load Balancer\uC758 IP ACL \uADF8\uB8F9 \uC5F0\uACB0\uC744 \uC804\uCCB4 \uAD50\uCCB4\uD55C\uB2E4").argument("<loadbalancer>", "Load Balancer \uC774\uB984 \uB610\uB294 UUID").requiredOption(
   "--group <group>",
   "\uC801\uC6A9\uD560 IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID (\uBC18\uBCF5 \uAC00\uB2A5)",
   collectOption
@@ -12049,7 +13387,7 @@ var setIpAclCommand2 = new import_commander63.Command("set-ipacl").description("
     bindingResult("loadbalancer-set-ipacl", loadBalancerId, groupIds)
   );
 });
-var clearIpAclCommand = new import_commander63.Command("clear-ipacl").description("Load Balancer\uC758 \uBAA8\uB4E0 IP ACL \uADF8\uB8F9 \uC5F0\uACB0\uC744 \uD574\uC81C\uD55C\uB2E4").argument("<loadbalancer>", "Load Balancer \uC774\uB984 \uB610\uB294 UUID").option("--yes", "\uBAA8\uB4E0 IP ACL \uC5F0\uACB0 \uD574\uC81C \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (loadBalancerInput, _opts, cmd) => {
+var clearIpAclCommand = new import_commander71.Command("clear-ipacl").description("Load Balancer\uC758 \uBAA8\uB4E0 IP ACL \uADF8\uB8F9 \uC5F0\uACB0\uC744 \uD574\uC81C\uD55C\uB2E4").argument("<loadbalancer>", "Load Balancer \uC774\uB984 \uB610\uB294 UUID").option("--yes", "\uBAA8\uB4E0 IP ACL \uC5F0\uACB0 \uD574\uC81C \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (loadBalancerInput, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   const confirmedYes = requireYes(opts.yes, "Load Balancer IP ACL \uC5F0\uACB0 \uD574\uC81C");
   const parsedLoadBalancer = requireResourceInput(loadBalancerInput, "Load Balancer");
@@ -12140,8 +13478,8 @@ Agent workflow:
   2. nhncloud ncs workload list --json
   3. nhncloud ncs workload get <id> --json
 `;
-var program = new import_commander64.Command();
-program.name("nhncloud").description("NHN Cloud CLI \u2014 AI agent & terminal friendly").version("0.18.0").option("--json", "JSON \uD615\uC2DD\uC73C\uB85C \uCD9C\uB825").option("--quiet", "\uCD5C\uC18C \uCD9C\uB825 (\uC790\uB3D9\uD654\uC6A9)").option("--no-color", "\uC0C9\uC0C1 \uBE44\uD65C\uC131\uD654").option("--request-timeout <sec>", "HTTP \uC694\uCCAD \uD0C0\uC784\uC544\uC6C3 (\uCD08, \uAE30\uBCF8 30, \uBC94\uC704 1~3600). NHNCLOUD_REQUEST_TIMEOUT \uB85C\uB3C4 \uC9C0\uC815").addHelpText("after", rootAgentHints);
+var program = new import_commander72.Command();
+program.name("nhncloud").description("NHN Cloud CLI \u2014 AI agent & terminal friendly").version(CLI_VERSION).option("--json", "JSON \uD615\uC2DD\uC73C\uB85C \uCD9C\uB825").option("--quiet", "\uCD5C\uC18C \uCD9C\uB825 (\uC790\uB3D9\uD654\uC6A9)").option("--no-color", "\uC0C9\uC0C1 \uBE44\uD65C\uC131\uD654").option("--request-timeout <sec>", "HTTP \uC694\uCCAD \uD0C0\uC784\uC544\uC6C3 (\uCD08, \uAE30\uBCF8 30, \uBC94\uC704 1~3600). NHNCLOUD_REQUEST_TIMEOUT \uB85C\uB3C4 \uC9C0\uC815").addHelpText("after", rootAgentHints);
 program.hook("preAction", () => {
   const opts = program.opts();
   const rawTimeout = opts.requestTimeout ?? process.env["NHNCLOUD_REQUEST_TIMEOUT"];
@@ -12162,13 +13500,13 @@ program.hook("preAction", () => {
   }
 });
 program.addCommand(configureCommand);
-var logncrashCommand = new import_commander64.Command("logncrash").description("Log & Crash \uAD00\uB828 \uBA85\uB839").addHelpText("after", logncrashAgentWorkflow);
+var logncrashCommand = new import_commander72.Command("logncrash").description("Log & Crash \uAD00\uB828 \uBA85\uB839").addHelpText("after", logncrashAgentWorkflow);
 logncrashCommand.addCommand(availableTokenCommand);
 logncrashCommand.addCommand(searchCommand);
 logncrashCommand.addCommand(sendCommand);
 logncrashCommand.addCommand(exportCommand);
 program.addCommand(logncrashCommand);
-var deployCommand2 = new import_commander64.Command("deploy").description("NHN Cloud Deploy \uAD00\uB828 \uBA85\uB839").addHelpText("after", deployAgentWorkflow);
+var deployCommand2 = new import_commander72.Command("deploy").description("NHN Cloud Deploy \uAD00\uB828 \uBA85\uB839").addHelpText("after", deployAgentWorkflow);
 deployCommand2.hook("preSubcommand", async () => {
   await warnLegacyDeployTargets();
 });
@@ -12182,7 +13520,7 @@ deployCommand2.addCommand(binariesCommand);
 deployCommand2.addCommand(uploadCommand);
 deployCommand2.addCommand(downloadCommand);
 program.addCommand(deployCommand2);
-var instanceCommand = new import_commander64.Command("instance").description("Compute \uC778\uC2A4\uD134\uC2A4 \uAD00\uB828 \uBA85\uB839").addHelpText("after", instanceAgentWorkflow);
+var instanceCommand = new import_commander72.Command("instance").description("Compute \uC778\uC2A4\uD134\uC2A4 \uAD00\uB828 \uBA85\uB839").addHelpText("after", instanceAgentWorkflow);
 instanceCommand.addCommand(listCommand);
 instanceCommand.addCommand(flavorsCommand);
 instanceCommand.addCommand(availabilityZonesCommand);
@@ -12202,60 +13540,68 @@ instanceCommand.addCommand(volumeCommand);
 instanceCommand.addCommand(volumesCommand);
 instanceCommand.addCommand(securityGroupCommand2);
 program.addCommand(instanceCommand);
-var networkCommand = new import_commander64.Command("network").description("VPC\xB7\uC11C\uBE0C\uB137 \uC870\uD68C\uC640 \uBCF4\uC548\uADF8\uB8F9 \uAD00\uB9AC").addHelpText("after", networkAgentWorkflow);
+var networkCommand = new import_commander72.Command("network").description("VPC\xB7\uC11C\uBE0C\uB137 \uC870\uD68C\uC640 \uBCF4\uC548\uADF8\uB8F9 \uAD00\uB9AC").addHelpText("after", networkAgentWorkflow);
 networkCommand.addCommand(listCommand3);
 networkCommand.addCommand(subnetCommand);
 networkCommand.addCommand(securityGroupCommand);
 program.addCommand(networkCommand);
-var volumeCommand2 = new import_commander64.Command("volume").description("Block Storage \uBCFC\uB968 \uAD00\uB828 \uBA85\uB839").addHelpText("after", volumeAgentWorkflow);
+var volumeCommand2 = new import_commander72.Command("volume").description("Block Storage \uBCFC\uB968 \uAD00\uB828 \uBA85\uB839").addHelpText("after", volumeAgentWorkflow);
 volumeCommand2.addCommand(listCommand2);
 volumeCommand2.addCommand(getCommand);
 volumeCommand2.addCommand(createCommand);
 program.addCommand(volumeCommand2);
-var floatingipCommand = new import_commander64.Command("floatingip").description(
+var floatingipCommand = new import_commander72.Command("floatingip").description(
   "Floating IP(\uC778\uC2A4\uD134\uC2A4 \uACF5\uC778 IP) \uAD00\uB9AC"
 ).addHelpText("after", floatingIpAgentWorkflow);
 floatingipCommand.addCommand(listCommand6);
 floatingipCommand.addCommand(createCommand4);
 floatingipCommand.addCommand(deleteCommand3);
 program.addCommand(floatingipCommand);
-var loadbalancerCommand = new import_commander64.Command("loadbalancer").description("Load Balancer\xB7IP ACL \uC870\uD68C\xB7\uAD00\uB9AC").addHelpText("after", loadbalancerAgentWorkflow);
-loadbalancerCommand.addCommand(listCommand16);
-loadbalancerCommand.addCommand(getCommand11);
+var loadbalancerCommand = new import_commander72.Command("loadbalancer").description("Load Balancer\xB7IP ACL \uC870\uD68C\xB7\uAD00\uB9AC").addHelpText("after", loadbalancerAgentWorkflow);
+loadbalancerCommand.addCommand(listCommand18);
+loadbalancerCommand.addCommand(getCommand15);
 loadbalancerCommand.addCommand(ipaclCommand);
 loadbalancerCommand.addCommand(setIpAclCommand2);
 loadbalancerCommand.addCommand(clearIpAclCommand);
-configureLoadBalancerHelp(loadbalancerCommand);
 program.addCommand(loadbalancerCommand);
-var ncrCommand = new import_commander64.Command("ncr").description("NHN Container Registry \uAD00\uB828 \uBA85\uB839").addHelpText("after", ncrAgentWorkflow);
+var ncrCommand = new import_commander72.Command("ncr").description("NHN Container Registry \uAD00\uB828 \uBA85\uB839").addHelpText("after", ncrAgentWorkflow);
 ncrCommand.addCommand(listCommand7);
 ncrCommand.addCommand(getCommand5);
 ncrCommand.addCommand(imagesCommand2);
 ncrCommand.addCommand(tagsCommand);
 program.addCommand(ncrCommand);
-var nksCommand = new import_commander64.Command("nks").description("NHN Kubernetes Service \uAD00\uB828 \uBA85\uB839").addHelpText("after", nksAgentWorkflow);
+var nksCommand = new import_commander72.Command("nks").description("NHN Kubernetes Service \uAD00\uB828 \uBA85\uB839").addHelpText("after", nksAgentWorkflow);
 nksCommand.addCommand(supportsCommand);
 nksCommand.addCommand(clusterCommand);
 nksCommand.addCommand(nodegroupCommand);
 nksCommand.addCommand(addonTypeCommand);
 nksCommand.addCommand(addonCommand);
 program.addCommand(nksCommand);
-var ncsCommand = new import_commander64.Command("ncs").description("NHN Container Service \uAD00\uB828 \uBA85\uB839").addHelpText("after", ncsAgentWorkflow);
+var ncsCommand = new import_commander72.Command("ncs").description("NHN Container Service \uAD00\uB828 \uBA85\uB839").addHelpText("after", ncsAgentWorkflow);
 ncsCommand.addCommand(templateCommand);
 ncsCommand.addCommand(workloadCommand);
 ncsCommand.addCommand(malwareCommand);
 program.addCommand(ncsCommand);
-var apiGatewayCommand = new import_commander64.Command("apigateway").description("NHN API Gateway \uC870\uD68C \uBA85\uB839");
+var apiGatewayCommand = new import_commander72.Command("apigateway").description("NHN API Gateway \uC870\uD68C \uBA85\uB839");
 apiGatewayCommand.addCommand(serviceCommand);
 apiGatewayCommand.addCommand(resourceCommand);
 apiGatewayCommand.addCommand(stageCommand);
 program.addCommand(apiGatewayCommand);
+var skmCommand = new import_commander72.Command("skm").description("NHN Secure Key Manager \uD0A4 \uC800\uC7A5\uC18C\xB7\uD0A4 \uAD00\uB9AC\uC640 \uAE30\uBC00 \uB370\uC774\uD130\xB7\uC554\uBCF5\uD638\uD654\xB7\uC11C\uBA85 \uBA85\uB839");
+skmCommand.addCommand(confirmCommand);
+skmCommand.addCommand(keystoreCommand);
+skmCommand.addCommand(keyCommand);
+skmCommand.addCommand(secretCommand);
+skmCommand.addCommand(symmetricKeyCommand);
+skmCommand.addCommand(asymmetricKeyCommand);
+program.addCommand(skmCommand);
 program.addCommand(skillsCommand);
 program.addCommand(doctorCommand);
 program.addCommand(createCommandsCommand(program));
 configureCommanderExitCodes(program);
+configureGlobalOptionsHelp(program);
 program.parseAsync().catch((err) => {
-  if (err instanceof import_commander64.CommanderError) {
+  if (err instanceof import_commander72.CommanderError) {
     process.exit(err.exitCode);
   }
   const message = sanitizeMultilineForTerminal(