@bifos/nhncloud-cli 0.18.0 → 0.20.0

package/dist/index.js

@@ -24,7 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 
 // src/index.ts
-var import_commander64 = require("commander");
+var import_commander72 = require("commander");
 var import_chalk18 = __toESM(require("chalk"));
 
 // src/utils/spinner.ts
@@ -333,6 +333,69 @@ async function warnLegacyDeployTargets() {
     )
   );
 }
+async function readJsonState(filePath) {
+  let raw;
+  try {
+    raw = await (0, import_promises.readFile)(filePath, "utf-8");
+  } catch (err) {
+    const code = err.code;
+    if (code === "ENOENT") return { state: "missing" };
+    return { state: "unreadable", reason: `\uD30C\uC77C\uC744 \uC77D\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4 (${code ?? "UNKNOWN"})` };
+  }
+  try {
+    return { state: "ok", parsed: JSON.parse(raw) };
+  } catch {
+    return { state: "invalid", reason: "JSON \uD615\uC2DD\uC774 \uC544\uB2D9\uB2C8\uB2E4" };
+  }
+}
+async function inspectPermissions(filePath) {
+  try {
+    const { mode } = await (0, import_promises.stat)(filePath);
+    if (process.platform === "win32") return "unknown";
+    return (mode & 63) === 0 ? "ok" : "too-open";
+  } catch {
+    return void 0;
+  }
+}
+function summarizeProfile(name, value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) {
+    return { name, environment: "invalid", blocks: [] };
+  }
+  const profile = value;
+  const env = profile["environment"];
+  const environment = env === void 0 ? "real" : env === "gov" ? "gov" : "invalid";
+  const blocks = Object.keys(profile).filter((key) => key !== "environment").sort();
+  return { name, environment, blocks };
+}
+async function inspectCredentialsFile() {
+  const result = await readJsonState(CREDENTIALS_PATH);
+  const permissions = result.state === "missing" ? void 0 : await inspectPermissions(CREDENTIALS_PATH);
+  const base = { path: CREDENTIALS_PATH, ...permissions ? { permissions } : {}, profiles: [] };
+  if (result.state !== "ok") {
+    return { ...base, state: result.state, ...result.reason ? { reason: result.reason } : {} };
+  }
+  if (!isCredentials(result.parsed)) {
+    return { ...base, state: "invalid", reason: "version: 1 \uACFC profiles \uD544\uB4DC\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4" };
+  }
+  const profiles = Object.entries(result.parsed.profiles).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([name, value]) => summarizeProfile(name, value));
+  return { ...base, state: "ok", profiles };
+}
+async function inspectConfigFile() {
+  const result = await readJsonState(CONFIG_PATH);
+  const base = { path: CONFIG_PATH, defaultProfile: null };
+  if (result.state !== "ok") {
+    return { ...base, state: result.state, ...result.reason ? { reason: result.reason } : {} };
+  }
+  if (!isConfig(result.parsed)) {
+    return { ...base, state: "invalid", reason: "version: 1 \uC774 \uD544\uC694\uD569\uB2C8\uB2E4" };
+  }
+  const defaultProfile = result.parsed.defaultProfile;
+  return {
+    ...base,
+    state: "ok",
+    defaultProfile: typeof defaultProfile === "string" && defaultProfile !== "" ? defaultProfile : null
+  };
+}
 
 // src/utils/terminal.ts
 function sanitizeForTerminal(value) {
@@ -400,19 +463,113 @@ function parseNonNegativeIntegerOption(value, flag) {
 
 // src/commands/commander-errors.ts
 var import_commander = require("commander");
-function throwWithNormalizedExitCode(error) {
+
+// src/commands/unknown-option-hint.ts
+function normalizeName(name) {
+  return name.replace(/([a-z0-9])([A-Z])/g, "$1-$2").toLowerCase();
+}
+function parseUnknownOptionName(message) {
+  return /unknown option '--([^'=]+)/.exec(message)?.[1];
+}
+function findReferencedArgument(optionName, commandPath2, argumentNames) {
+  const option = normalizeName(optionName);
+  const normalized = argumentNames.map(normalizeName);
+  const exact = normalized.indexOf(option);
+  if (exact !== -1) {
+    return argumentNames[exact];
+  }
+  const prefixed = argumentNames.filter((_, i) => normalized[i].startsWith(`${option}-`));
+  const candidates = new Set(prefixed.length === 1 ? prefixed : []);
+  const segments = commandPath2.slice(1).map(normalizeName);
+  argumentNames.forEach((name, i) => {
+    const otherArguments = normalized.filter((_, j) => j !== i);
+    const matched = segments.some(
+      (segment) => !otherArguments.includes(segment) && option === `${segment}-${normalized[i]}`
+    );
+    if (matched) {
+      candidates.add(name);
+    }
+  });
+  return candidates.size === 1 ? [...candidates][0] : void 0;
+}
+function formatArgument(argument) {
+  const name = argument.variadic ? `${argument.name}...` : argument.name;
+  return argument.required ? `<${name}>` : `[${name}]`;
+}
+function buildUnknownOptionHint(input) {
+  if (input.message.includes("(Did you mean")) {
+    return "";
+  }
+  const optionName = parseUnknownOptionName(input.message);
+  if (optionName === void 0) {
+    return "";
+  }
+  const referenced = findReferencedArgument(
+    optionName,
+    input.commandPath,
+    input.arguments.map((argument2) => argument2.name)
+  );
+  const argument = input.arguments.find((candidate) => candidate.name === referenced);
+  if (argument === void 0) {
+    return "";
+  }
+  return `\uC548\uB0B4: --${optionName} \uB294 \uC635\uC158\uC774 \uC544\uB2D9\uB2C8\uB2E4. \uC704\uCE58 \uC778\uC218 ${formatArgument(argument)} \uB85C \uC804\uB2EC\uD558\uC138\uC694.
+\uC0AC\uC6A9\uBC95: ${input.commandPath.join(" ")} ${input.usage}
+`;
+}
+
+// src/commands/commander-errors.ts
+function writeUnknownOptionHint(command, error) {
+  const commandPath2 = [];
+  for (let current2 = command; current2 !== null; current2 = current2.parent) {
+    commandPath2.unshift(current2.name());
+  }
+  const hint = buildUnknownOptionHint({
+    message: error.message,
+    commandPath: commandPath2,
+    usage: command.usage(),
+    arguments: command.registeredArguments.map((argument) => ({
+      name: argument.name(),
+      required: argument.required,
+      variadic: argument.variadic
+    }))
+  });
+  if (hint === "") {
+    return;
+  }
+  const writeErr = command.configureOutput().writeErr;
+  if (writeErr) {
+    writeErr(hint);
+  } else {
+    process.stderr.write(hint);
+  }
+}
+function handleCommanderError(command, error) {
   if (error.code === "commander.missingMandatoryOptionValue") {
     error.exitCode = EXIT_PARAM_ERROR;
+  } else if (error.code === "commander.unknownOption") {
+    writeUnknownOptionHint(command, error);
   }
   throw error;
 }
 function configureCommanderExitCodes(root) {
-  root.exitOverride(throwWithNormalizedExitCode);
+  root.exitOverride((error) => handleCommanderError(root, error));
   for (const command of root.commands) {
     configureCommanderExitCodes(command);
   }
 }
 
+// src/commands/help.ts
+function configureGlobalOptionsHelp(root) {
+  root.configureHelp({ showGlobalOptions: true });
+  for (const child of root.commands) {
+    configureGlobalOptionsHelp(child);
+  }
+}
+
+// src/version.ts
+var CLI_VERSION = true ? "0.20.0" : "0.0.0-dev";
+
 // src/commands/configure.ts
 var import_commander2 = require("commander");
 var import_chalk2 = __toESM(require("chalk"));
@@ -517,6 +674,13 @@ async function writeToken(profile, accessToken, expiresAt, credentialHash) {
 
 // src/api/httpError.ts
 var import_ky = require("ky");
+async function readHttpErrorBody(err) {
+  try {
+    return await err.response.clone().json();
+  } catch {
+    return void 0;
+  }
+}
 function toNhnCloudCliError(err) {
   if (err instanceof NhnCloudCliError) {
     return err;
@@ -592,10 +756,12 @@ var import_ky3 = __toESM(require("ky"));
 var ENDPOINTS = {
   logncrash: "https://api-lncs-search.nhncloudservice.com",
   "logncrash-collector": "https://api-logncrash.nhncloudservice.com",
-  deploy: "https://api-deploy.nhncloudservice.com"
+  deploy: "https://api-deploy.nhncloudservice.com",
+  skm: "https://api-keymanager.nhncloudservice.com"
 };
 var GOV_ENDPOINTS = {
-  deploy: "https://api-tcd.gov-nhncloudservice.com"
+  deploy: "https://api-tcd.gov-nhncloudservice.com",
+  skm: "https://api-keymanager.gov-nhncloudservice.com"
 };
 function endpointFor(service, environment = "real") {
   const endpoints = environment === "gov" ? GOV_ENDPOINTS : ENDPOINTS;
@@ -875,12 +1041,9 @@ async function toLogncrashError(err) {
     return toNhnCloudCliError(err);
   }
   let requestId = null;
-  try {
-    const body = await err.response.json();
-    if (typeof body === "object" && body !== null && "requestId" in body && typeof body.requestId === "string") {
-      requestId = body.requestId;
-    }
-  } catch {
+  const body = await readHttpErrorBody(err);
+  if (typeof body === "object" && body !== null && "requestId" in body && typeof body.requestId === "string") {
+    requestId = body.requestId;
   }
   return new LogncrashServerError(
     `API \uD638\uCD9C \uC2E4\uD328 (500): ${err.message}`,
@@ -2009,7 +2172,7 @@ async function verifyLogncrash(uak, appkey) {
 }
 
 // src/commands/configure.ts
-async function saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, apigateway, deploy, doVerify, logncrashUak = uak) {
+async function saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, apigateway, skm, deploy, doVerify, logncrashUak = uak) {
   if (doVerify) {
     if (await getProfileEnvironment(profileName, true) === "gov") {
       throw new NhnCloudCliError(
@@ -2115,6 +2278,9 @@ async function saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, apigat
   if (apigateway) {
     await setServiceCredential(profileName, "apigateway", apigateway);
   }
+  if (skm) {
+    await setServiceCredential(profileName, "skm", skm);
+  }
   if (deploy) {
     await setServiceCredential(profileName, "deploy", deploy);
   }
@@ -2244,7 +2410,7 @@ async function runInteractive(opts) {
   }
   if (opts.verify) {
     try {
-      await saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, void 0, deploy, true, uak);
+      await saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, void 0, void 0, deploy, true, uak);
     } catch (err) {
       if (err instanceof NhnCloudCliError && err.exitCode === EXIT_AUTH_ERROR) {
         process.stderr.write(import_chalk2.default.red(`  \u2717 ${sanitizeMultilineForTerminal(err.message)}
@@ -2257,13 +2423,13 @@ async function runInteractive(opts) {
           process.stderr.write(import_chalk2.default.yellow("\uC800\uC7A5\uC774 \uCDE8\uC18C\uB418\uC5C8\uC2B5\uB2C8\uB2E4.\n"));
           return;
         }
-        await saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, void 0, deploy, false, uak);
+        await saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, void 0, void 0, deploy, false, uak);
       } else {
         throw err;
       }
     }
   } else {
-    await saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, void 0, deploy, false, uak);
+    await saveAndVerify(profileName, uak, logncrash, iaas, ncr, ncs, void 0, void 0, deploy, false, uak);
   }
 }
 async function runNonInteractive(opts) {
@@ -2287,6 +2453,9 @@ async function runNonInteractive(opts) {
   if (opts.apigatewayAppkey !== void 0 && opts.apigatewayAppkey.trim().length === 0) {
     throw new NhnCloudCliError("--apigateway-appkey \uAC12\uC740 \uBE44\uC5B4 \uC788\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
   }
+  if (opts.skmAppkey !== void 0 && opts.skmAppkey.trim().length === 0) {
+    throw new NhnCloudCliError("--skm-appkey \uAC12\uC740 \uBE44\uC5B4 \uC788\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
   if (opts.deployAppkey !== void 0 && opts.deployAppkey.trim().length === 0) {
     throw new NhnCloudCliError("--deploy-appkey \uAC12\uC740 \uBE44\uC5B4 \uC788\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
   }
@@ -2309,10 +2478,11 @@ async function runNonInteractive(opts) {
   const ncr = opts.ncrAppkey?.trim() ? { appkey: opts.ncrAppkey.trim() } : void 0;
   const ncs = opts.ncsAppkey?.trim() ? { appkey: opts.ncsAppkey.trim() } : void 0;
   const apigateway = opts.apigatewayAppkey?.trim() ? { appkey: opts.apigatewayAppkey.trim() } : void 0;
+  const skm = opts.skmAppkey?.trim() ? { appkey: opts.skmAppkey.trim() } : void 0;
   const deploy = opts.deployAppkey?.trim() ? { appkey: opts.deployAppkey.trim() } : void 0;
-  if (!uak && !logncrash && !iaas && !ncr && !ncs && !apigateway && !deploy) {
+  if (!uak && !logncrash && !iaas && !ncr && !ncs && !apigateway && !skm && !deploy) {
     throw new NhnCloudCliError(
-      "\uBE44\uB300\uD654\uD615 \uBAA8\uB4DC: --uak-id + UAK secret, --logncrash-appkey,\n--iaas-tenant-id + --iaas-username + iaas password,\n--ncr-appkey, --ncs-appkey, --apigateway-appkey, \uB610\uB294 --deploy-appkey\n\uC911 \uD558\uB098\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.\nsecret/password \uB294 \uB178\uCD9C \uBC29\uC9C0\uB97C \uC704\uD574 \uD658\uACBD\uBCC0\uC218 \uAD8C\uC7A5:\nNHNCLOUD_UAK_SECRET / NHNCLOUD_IAAS_PASSWORD.",
+      "\uBE44\uB300\uD654\uD615 \uBAA8\uB4DC: --uak-id + UAK secret, --logncrash-appkey,\n--iaas-tenant-id + --iaas-username + iaas password,\n--ncr-appkey, --ncs-appkey, --apigateway-appkey, --skm-appkey, \uB610\uB294 --deploy-appkey\n\uC911 \uD558\uB098\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.\nsecret/password \uB294 \uB178\uCD9C \uBC29\uC9C0\uB97C \uC704\uD574 \uD658\uACBD\uBCC0\uC218 \uAD8C\uC7A5:\nNHNCLOUD_UAK_SECRET / NHNCLOUD_IAAS_PASSWORD.",
       EXIT_PARAM_ERROR
     );
   }
@@ -2331,6 +2501,7 @@ async function runNonInteractive(opts) {
     ncr,
     ncs,
     apigateway,
+    skm,
     deploy,
     opts.verify,
     logncrashUak
@@ -2339,8 +2510,8 @@ async function runNonInteractive(opts) {
 var configureCommand = new import_commander2.Command("configure").description("\uC790\uACA9\uC99D\uBA85 \uC124\uC815 \uB9C8\uBC95\uC0AC (\uB300\uD654\uD615 + flag)").option("--profile <name>", "\uB300\uC0C1 profile \uC774\uB984 (\uAE30\uBCF8: default)").option("--uak-id <id>", "\uAC1C\uC778 UAK ID (\uBE44\uB300\uD654\uD615)").option("--uak-secret <secret>", "\uAC1C\uC778 UAK Secret (\uBE44\uB300\uD654\uD615, \uB178\uCD9C \uBC29\uC9C0\uB85C env NHNCLOUD_UAK_SECRET \uAD8C\uC7A5)").option("--logncrash-appkey <key>", "logncrash appkey (\uBE44\uB300\uD654\uD615)").option("--logncrash-secret <secret>", "\uD3D0\uAE30 \uC608\uC815: Search v3\uC5D0\uC11C\uB294 \uC0AC\uC6A9\xB7\uC800\uC7A5\uD558\uC9C0 \uC54A\uC74C").option("--iaas-tenant-id <id>", "iaas tenantId / \uD504\uB85C\uC81D\uD2B8 ID (\uBE44\uB300\uD654\uD615)").option("--iaas-username <user>", "iaas IAM username (\uBE44\uB300\uD654\uD615)").option(
   "--iaas-password <pass>",
   "iaas API \uBE44\uBC00\uBC88\uD638 (\uBE44\uB300\uD654\uD615, \uB178\uCD9C \uBC29\uC9C0\uB85C env NHNCLOUD_IAAS_PASSWORD \uAD8C\uC7A5)"
-).option("--iaas-region <region>", "iaas region (\uAE30\uBCF8: kr1)", "kr1").option("--ncr-appkey <key>", "ncr appkey (\uBE44\uB300\uD654\uD615)").option("--ncs-appkey <key>", "ncs appkey (\uBE44\uB300\uD654\uD615)").option("--apigateway-appkey <key>", "API Gateway appkey (\uBE44\uB300\uD654\uD615)").option("--deploy-appkey <key>", "deploy appkey (\uBE44\uB300\uD654\uD615)").option("--no-verify", "\uC5F0\uACB0 \uD14C\uC2A4\uD2B8 \uC0DD\uB7B5").action(async (opts) => {
-  const hasFlag = opts.uakId !== void 0 || opts.uakSecret !== void 0 || opts.logncrashAppkey !== void 0 || opts.logncrashSecret !== void 0 || opts.iaasTenantId !== void 0 || opts.iaasUsername !== void 0 || opts.iaasPassword !== void 0 || opts.ncrAppkey !== void 0 || opts.ncsAppkey !== void 0 || opts.apigatewayAppkey !== void 0 || opts.deployAppkey !== void 0;
+).option("--iaas-region <region>", "iaas region (\uAE30\uBCF8: kr1)", "kr1").option("--ncr-appkey <key>", "ncr appkey (\uBE44\uB300\uD654\uD615)").option("--ncs-appkey <key>", "ncs appkey (\uBE44\uB300\uD654\uD615)").option("--apigateway-appkey <key>", "API Gateway appkey (\uBE44\uB300\uD654\uD615)").option("--skm-appkey <key>", "Secure Key Manager appkey (\uBE44\uB300\uD654\uD615)").option("--deploy-appkey <key>", "deploy appkey (\uBE44\uB300\uD654\uD615)").option("--no-verify", "\uC5F0\uACB0 \uD14C\uC2A4\uD2B8 \uC0DD\uB7B5").action(async (opts) => {
+  const hasFlag = opts.uakId !== void 0 || opts.uakSecret !== void 0 || opts.logncrashAppkey !== void 0 || opts.logncrashSecret !== void 0 || opts.iaasTenantId !== void 0 || opts.iaasUsername !== void 0 || opts.iaasPassword !== void 0 || opts.ncrAppkey !== void 0 || opts.ncsAppkey !== void 0 || opts.apigatewayAppkey !== void 0 || opts.skmAppkey !== void 0 || opts.deployAppkey !== void 0;
   try {
     if (hasFlag) {
       await runNonInteractive(opts);
@@ -2498,14 +2669,14 @@ function compareByCodePoint(left, right) {
   return leftPoints.length - rightPoints.length;
 }
 function ensureRegularFile(filePath) {
-  let stat3;
+  let stat4;
   try {
-    stat3 = (0, import_node_fs2.lstatSync)(filePath);
+    stat4 = (0, import_node_fs2.lstatSync)(filePath);
   } catch (error) {
     const reason = error instanceof Error ? error.message : String(error);
     throw new NhnCloudCliError(`\uC2A4\uD0AC \uD30C\uC77C\uC744 \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${filePath} (${reason})`, EXIT_PARAM_ERROR);
   }
-  if (stat3.isSymbolicLink() || !stat3.isFile()) {
+  if (stat4.isSymbolicLink() || !stat4.isFile()) {
     throw new NhnCloudCliError(`\uC2A4\uD0AC \uCF58\uD150\uCE20\uB294 \uC815\uADDC \uD30C\uC77C\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4: ${filePath}`, EXIT_PARAM_ERROR);
   }
 }
@@ -2522,21 +2693,21 @@ function collectReferenceFiles(referencesRoot, currentDir, files) {
   }
   for (const entry of entries) {
     const entryPath = import_node_path4.default.join(currentDir, entry.name);
-    let stat3;
+    let stat4;
     try {
-      stat3 = (0, import_node_fs2.lstatSync)(entryPath);
+      stat4 = (0, import_node_fs2.lstatSync)(entryPath);
     } catch (error) {
       const reason = error instanceof Error ? error.message : String(error);
       throw new NhnCloudCliError(`\uC2A4\uD0AC \uCF58\uD150\uCE20\uB97C \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${entryPath} (${reason})`, EXIT_PARAM_ERROR);
     }
-    if (stat3.isSymbolicLink()) {
+    if (stat4.isSymbolicLink()) {
       throw new NhnCloudCliError(`\uC2A4\uD0AC \uCF58\uD150\uCE20\uC5D0 \uC2EC\uBCFC\uB9AD \uB9C1\uD06C\uB97C \uC0AC\uC6A9\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${entryPath}`, EXIT_PARAM_ERROR);
     }
-    if (stat3.isDirectory()) {
+    if (stat4.isDirectory()) {
       collectReferenceFiles(referencesRoot, entryPath, files);
       continue;
     }
-    if (!stat3.isFile()) {
+    if (!stat4.isFile()) {
       throw new NhnCloudCliError(`\uC2A4\uD0AC \uCF58\uD150\uCE20\uB294 \uC815\uADDC \uD30C\uC77C \uB610\uB294 \uB514\uB809\uD130\uB9AC\uC5EC\uC57C \uD569\uB2C8\uB2E4: ${entryPath}`, EXIT_PARAM_ERROR);
     }
     files.push(`references/${import_node_path4.default.relative(referencesRoot, entryPath).split(import_node_path4.default.sep).join("/")}`);
@@ -2584,12 +2755,24 @@ function calculateSkillContentDigest(skillRoot) {
 var PACKAGE_NAME3 = "@bifos/nhncloud-cli";
 var SKILL_NAME2 = "nhncloud-cli";
 var DIGEST_HEX_PATTERN = /^[0-9a-f]{64}$/;
-var defaultOperations = { rename: import_promises3.rename };
+var SKILL_AGENTS = ["claude", "codex"];
+var SKILL_AGENT_NAMES = { claude: "Claude Code", codex: "Codex" };
+var STATUS_PRIORITY = [
+  "corrupt",
+  "modified",
+  "unmanaged",
+  "broken",
+  "outdated",
+  "missing",
+  "current"
+];
+var PROTECTED_STATUSES = ["unmanaged", "modified", "corrupt"];
+var defaultOperations = { rename: import_promises3.rename, rm: import_promises3.rm };
 function sourcePath(context) {
   return import_node_path5.default.join(context.packageRoot, "skills", SKILL_NAME2);
 }
-function destinationPath(context) {
-  return import_node_path5.default.join(context.homeDir, ".claude", "skills", SKILL_NAME2);
+function destinationPath(context, agent) {
+  return agent === "claude" ? import_node_path5.default.join(context.homeDir, ".claude", "skills", SKILL_NAME2) : import_node_path5.default.join(context.homeDir, ".agents", "skills", SKILL_NAME2);
 }
 function resolveLinkTarget(linkPath, rawTarget) {
   return import_node_path5.default.isAbsolute(rawTarget) ? import_node_path5.default.normalize(rawTarget) : import_node_path5.default.resolve(import_node_path5.default.dirname(linkPath), rawTarget);
@@ -2700,16 +2883,74 @@ async function inspectRepository(targetPath, expected) {
   }
   return { status: "valid", installedVersion: manifest.packageVersion };
 }
-function statusBase(context) {
+function statusBase(context, agent) {
   return {
     schemaVersion: 1,
-    destination: destinationPath(context),
+    destination: destinationPath(context, agent),
     source: sourcePath(context),
     currentVersion: context.currentVersion
   };
 }
-async function inspectSkill(context) {
-  const base = statusBase(context);
+async function managedRepositoryStatus(context, base, linkTarget, repositoryLocation, isExpectedPath) {
+  const repositoryName = parseRepositoryName(repositoryLocation);
+  if (!repositoryName) {
+    return { ...base, status: "corrupt", linkTarget, managed: true };
+  }
+  const repository = await inspectRepository(repositoryLocation, repositoryName);
+  if (repository.status === "modified" || repository.status === "corrupt") {
+    return {
+      ...base,
+      status: repository.status,
+      installedVersion: repository.installedVersion ?? repositoryName.version,
+      linkTarget,
+      managed: true
+    };
+  }
+  if (repository.status === "missing") {
+    return {
+      ...base,
+      status: "broken",
+      installedVersion: repositoryName.version,
+      linkTarget,
+      managed: true
+    };
+  }
+  const currentDigest = calculateSkillContentDigest(base.source);
+  const isCurrent = repositoryName.version === context.currentVersion && repositoryName.digest === currentDigest && await isExpectedPath(repositoryPath(context, currentDigest));
+  return {
+    ...base,
+    status: isCurrent ? "current" : "outdated",
+    installedVersion: repository.installedVersion,
+    linkTarget,
+    managed: true
+  };
+}
+async function optionalRealpath(targetPath) {
+  try {
+    return await (0, import_promises3.realpath)(targetPath);
+  } catch (error) {
+    if (isNodeError(error, "ENOENT")) {
+      return void 0;
+    }
+    throw managerError(`\uC2A4\uD0AC \uACBD\uB85C\uB97C \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${targetPath}`, error);
+  }
+}
+async function inspectIndirectManagedLink(context, base, linkTarget) {
+  const realRoot = await optionalRealpath(repositoryRoot(context));
+  if (!realRoot) {
+    return void 0;
+  }
+  const realTarget = await optionalRealpath(linkTarget);
+  if (!realTarget || import_node_path5.default.dirname(realTarget) !== realRoot) {
+    return void 0;
+  }
+  return managedRepositoryStatus(context, base, linkTarget, realTarget, async (expectedPath) => {
+    const realExpected = await optionalRealpath(expectedPath);
+    return realExpected !== void 0 && realExpected === realTarget;
+  });
+}
+async function inspectAgentSkill(context, agent) {
+  const base = statusBase(context, agent);
   const destinationStat = await optionalLstat(base.destination);
   if (!destinationStat) {
     return { ...base, status: "missing", managed: false };
@@ -2742,38 +2983,17 @@ async function inspectSkill(context) {
     };
   }
   if (isManagedRepositoryLocation(context, linkTarget)) {
-    if (!repositoryName) {
-      return { ...base, status: "corrupt", linkTarget, managed: true };
-    }
-    const repository = await inspectRepository(linkTarget, repositoryName);
-    if (repository.status === "modified" || repository.status === "corrupt") {
-      return {
-        ...base,
-        status: repository.status,
-        installedVersion: repository.installedVersion ?? repositoryName.version,
-        linkTarget,
-        managed: true
-      };
-    }
-    if (repository.status === "missing") {
-      return {
-        ...base,
-        status: "broken",
-        installedVersion: repositoryName.version,
-        linkTarget,
-        managed: true
-      };
-    }
-    const currentDigest = calculateSkillContentDigest(base.source);
-    const expectedPath = repositoryPath(context, currentDigest);
-    const isCurrent = repositoryName.version === context.currentVersion && repositoryName.digest === currentDigest && import_node_path5.default.resolve(linkTarget) === import_node_path5.default.resolve(expectedPath);
-    return {
-      ...base,
-      status: isCurrent ? "current" : "outdated",
-      installedVersion: repository.installedVersion,
+    return managedRepositoryStatus(
+      context,
+      base,
       linkTarget,
-      managed: true
-    };
+      linkTarget,
+      async (expectedPath) => import_node_path5.default.resolve(linkTarget) === import_node_path5.default.resolve(expectedPath)
+    );
+  }
+  const indirect = await inspectIndirectManagedLink(context, base, linkTarget);
+  if (indirect) {
+    return indirect;
   }
   const legacyPackage = targetStat.isDirectory() ? await readLegacyPackageMetadata(linkTarget) : void 0;
   if (legacyPackage) {
@@ -2787,6 +3007,14 @@ async function inspectSkill(context) {
   }
   return { ...base, status: "unmanaged", linkTarget, managed: false };
 }
+function aggregateStatus(statuses) {
+  return STATUS_PRIORITY.find((token) => statuses.some((status) => status.status === token)) ?? "current";
+}
+async function inspectSkill(context) {
+  const claude = await inspectAgentSkill(context, "claude");
+  const codex = await inspectAgentSkill(context, "codex");
+  return { ...claude, status: aggregateStatus([claude, codex]), agents: { claude, codex } };
+}
 function utcBackupSuffix() {
   return `${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}-${(0, import_node_crypto3.randomUUID)()}`;
 }
@@ -2883,35 +3111,123 @@ async function prepareRepository(context, force, operations) {
     await (0, import_promises3.rm)(staging, { recursive: true, force: true });
   }
 }
-async function switchActiveLink(context, repository, previousStatus, force, operations) {
-  const destination = destinationPath(context);
-  const parent = import_node_path5.default.dirname(destination);
-  await (0, import_promises3.mkdir)(parent, { recursive: true });
-  const temporaryLink = import_node_path5.default.join(parent, `.${SKILL_NAME2}.link-${(0, import_node_crypto3.randomUUID)()}`);
-  const backupPaths = [];
-  await (0, import_promises3.symlink)(repository, temporaryLink);
-  try {
-    if (previousStatus.status === "unmanaged") {
-      if (!force) {
-        throw managerError(`\uAD00\uB9AC\uB418\uC9C0 \uC54A\uC740 \uC2A4\uD0AC \uD56D\uBAA9\uC774 \uC788\uC2B5\uB2C8\uB2E4. --force\uB85C \uBC31\uC5C5 \uD6C4 \uAD50\uCCB4\uD558\uC138\uC694: ${destination}`);
-      }
-      const backup = await backupPath(destination, operations);
-      backupPaths.push(backup);
+function temporaryLinkPath(destination) {
+  return import_node_path5.default.join(import_node_path5.default.dirname(destination), `.${SKILL_NAME2}.link-${(0, import_node_crypto3.randomUUID)()}`);
+}
+async function planLinkSwitches(context, previous) {
+  const switches = [];
+  for (const agent of SKILL_AGENTS) {
+    const agentStatus = previous.agents[agent];
+    if (agentStatus.status === "current") {
+      continue;
+    }
+    const destination = destinationPath(context, agent);
+    const parent = import_node_path5.default.dirname(destination);
+    await (0, import_promises3.mkdir)(parent, { recursive: true });
+    const resolvedDestination = import_node_path5.default.join(await (0, import_promises3.realpath)(parent), import_node_path5.default.basename(destination));
+    const sameTarget = switches.find((entry) => entry.resolvedDestination === resolvedDestination);
+    if (sameTarget) {
+      sameTarget.agents.push(agent);
+      continue;
+    }
+    let previousRawTarget;
+    if (agentStatus.status !== "missing" && agentStatus.status !== "unmanaged") {
       try {
-        await operations.rename(temporaryLink, destination);
+        previousRawTarget = await (0, import_promises3.readlink)(destination);
       } catch (error) {
-        return await restoreBackup(backup, destination, operations, error);
+        throw managerError(`\uC2A4\uD0AC \uB9C1\uD06C\uB97C \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${destination}`, error);
+      }
+    }
+    switches.push({
+      agents: [agent],
+      destination,
+      resolvedDestination,
+      previous: agentStatus,
+      previousRawTarget,
+      temporaryLink: temporaryLinkPath(destination),
+      activated: false
+    });
+  }
+  return switches;
+}
+async function rollbackLinkSwitches(switches, operations, temporaryLinks) {
+  const failed = [];
+  const preservedBackups = [];
+  const removeEntry = operations.rm ?? defaultOperations.rm;
+  let firstError;
+  for (const entry of [...switches].reverse()) {
+    try {
+      if (entry.activated && entry.backup) {
+        await removeEntry(entry.destination, { force: true });
+        await operations.rename(entry.backup, entry.destination);
+      } else if (entry.activated && entry.previousRawTarget !== void 0) {
+        const restoreLink = temporaryLinkPath(entry.destination);
+        temporaryLinks.push(restoreLink);
+        await (0, import_promises3.symlink)(entry.previousRawTarget, restoreLink);
+        await operations.rename(restoreLink, entry.destination);
+      } else if (entry.activated && entry.previous.status === "missing") {
+        await removeEntry(entry.destination, { force: true });
+      } else if (!entry.activated && entry.backup) {
+        await operations.rename(entry.backup, entry.destination);
+      }
+    } catch (error) {
+      failed.push(entry.destination);
+      if (entry.backup) {
+        preservedBackups.push(entry.backup);
       }
-      return backupPaths;
+      firstError ??= error;
     }
+  }
+  return { failed, preservedBackups, firstError };
+}
+async function switchActiveLinks(context, repository, previous, operations) {
+  const switches = await planLinkSwitches(context, previous);
+  const temporaryLinks = switches.map((entry) => entry.temporaryLink);
+  const backupPaths = [];
+  try {
+    let failure;
+    let failedAfterVerification = false;
     try {
-      await operations.rename(temporaryLink, destination);
+      for (const entry of switches) {
+        await (0, import_promises3.symlink)(repository, entry.temporaryLink);
+      }
+      for (const entry of switches) {
+        if (entry.previous.status === "unmanaged") {
+          entry.backup = await backupPath(entry.destination, operations);
+          backupPaths.push(entry.backup);
+        }
+        await operations.rename(entry.temporaryLink, entry.destination);
+        entry.activated = true;
+      }
+      const status = await inspectSkill(context);
+      if (status.status === "current") {
+        return { backupPaths, status };
+      }
+      failure = managerError(`\uC2A4\uD0AC \uC124\uCE58 \uD6C4 \uC0C1\uD0DC\uAC00 current\uAC00 \uC544\uB2D9\uB2C8\uB2E4: ${status.status}`);
+      failedAfterVerification = true;
     } catch (error) {
-      throw managerError(`\uD65C\uC131 \uC2A4\uD0AC \uB9C1\uD06C\uB97C \uC804\uD658\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${destination}`, error);
+      failure = error;
     }
-    return backupPaths;
+    const rollback = await rollbackLinkSwitches(switches, operations, temporaryLinks);
+    if (rollback.failed.length > 0) {
+      throw managerError(
+        `\uC2A4\uD0AC \uC804\uD658\uC5D0 \uC2E4\uD328\uD588\uACE0 \uC77C\uBD80 \uACBD\uB85C\uB97C \uB418\uB3CC\uB9AC\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4: ${rollback.failed.join(", ")}; \uBCF4\uC874\uD55C \uBC31\uC5C5: ${rollback.preservedBackups.join(", ") || "\uC5C6\uC74C"}; \uC804\uD658 \uC624\uB958: ${toReason(failure)}`,
+        rollback.firstError
+      );
+    }
+    if (failedAfterVerification) {
+      throw failure;
+    }
+    const changed = switches.filter((entry) => entry.activated || entry.backup !== void 0);
+    if (changed.length === 0) {
+      throw managerError("\uC2A4\uD0AC \uC804\uD658\uC744 \uC2DC\uC791\uD558\uC9C0 \uBABB\uD574 \uC5B4\uB5A4 \uACBD\uB85C\uB3C4 \uBC14\uAFB8\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4", failure);
+    }
+    throw managerError(
+      `\uC2A4\uD0AC \uC804\uD658\uC5D0 \uC2E4\uD328\uD574 \uBC14\uAFBC \uACBD\uB85C\uB97C \uC774\uC804 \uC0C1\uD0DC\uB85C \uB418\uB3CC\uB838\uC2B5\uB2C8\uB2E4: ${changed.map((entry) => entry.destination).join(", ")}`,
+      failure
+    );
   } finally {
-    await (0, import_promises3.rm)(temporaryLink, { force: true });
+    await Promise.all(temporaryLinks.map((link) => (0, import_promises3.rm)(link, { force: true })));
   }
 }
 function installAction(status) {
@@ -2946,23 +3262,26 @@ async function installSkillInternal(context, options = {}, operations = defaultO
       backupPaths: []
     };
   }
-  if ((previousStatus.status === "unmanaged" || previousStatus.status === "modified" || previousStatus.status === "corrupt") && !force) {
-    throw managerError(`\uC2A4\uD0AC \uC0C1\uD0DC\uAC00 ${previousStatus.status}\uC785\uB2C8\uB2E4. --force\uB85C \uBC31\uC5C5 \uD6C4 \uAD50\uCCB4\uD558\uC138\uC694: ${previousStatus.destination}`);
+  if (!force) {
+    for (const agent of SKILL_AGENTS) {
+      const agentStatus = previousStatus.agents[agent];
+      if (PROTECTED_STATUSES.includes(agentStatus.status)) {
+        throw managerError(
+          `${SKILL_AGENT_NAMES[agent]} \uC2A4\uD0AC \uC0C1\uD0DC\uAC00 ${agentStatus.status}\uC785\uB2C8\uB2E4. --force\uB85C \uBC31\uC5C5 \uD6C4 \uAD50\uCCB4\uD558\uC138\uC694: ${agentStatus.destination}`
+        );
+      }
+    }
   }
   const prepared = await prepareRepository(context, force, operations);
-  const linkBackups = await switchActiveLink(context, prepared.repository, previousStatus, force, operations);
-  const status = await inspectSkill(context);
-  if (status.status !== "current") {
-    throw managerError(`\uC2A4\uD0AC \uC124\uCE58 \uD6C4 \uC0C1\uD0DC\uAC00 current\uAC00 \uC544\uB2D9\uB2C8\uB2E4: ${status.status}`);
-  }
+  const switched = await switchActiveLinks(context, prepared.repository, previousStatus, operations);
   return {
     schemaVersion: 1,
     action: installAction(previousStatus.status),
     changed: true,
     previousStatus,
-    status,
+    status: switched.status,
     repositoryPath: prepared.repository,
-    backupPaths: [...prepared.backupPaths, ...linkBackups]
+    backupPaths: [...prepared.backupPaths, ...switched.backupPaths]
   };
 }
 async function installSkill(context, options = {}, operations = defaultOperations) {
@@ -2975,73 +3294,185 @@ async function installSkill(context, options = {}, operations = defaultOperation
     throw managerError("\uC2A4\uD0AC\uC744 \uC124\uCE58\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.", error);
   }
 }
+async function tryRestoreCandidate(candidate, destination, operations) {
+  try {
+    if (await optionalLstat(destination)) {
+      return { restored: false, preserved: candidate };
+    }
+    await operations.rename(candidate, destination);
+    return { restored: true };
+  } catch (error) {
+    return { restored: false, error, preserved: candidate };
+  }
+}
 async function restoreUninstallCandidate(candidate, destination, operations, originalError) {
-  if (await optionalLstat(destination)) {
+  const result = await tryRestoreCandidate(candidate, destination, operations);
+  if (result.restored) {
+    throw managerError(`\uD65C\uC131 \uC2A4\uD0AC \uB9C1\uD06C\uB97C \uC81C\uAC70\uD558\uC9C0 \uC54A\uACE0 \uC6D0\uB798 \uC704\uCE58\uB85C \uBCF5\uC6D0\uD588\uC2B5\uB2C8\uB2E4: ${destination}`, originalError);
+  }
+  if (result.error === void 0) {
     throw managerError(
       `\uD65C\uC131 \uC2A4\uD0AC \uACBD\uB85C\uAC00 \uB3D9\uC2DC\uC5D0 \uBCC0\uACBD\uB418\uC5B4 \uC81C\uAC70\uD558\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4. \uC774\uB3D9\uB41C \uD56D\uBAA9\uC744 \uBCF4\uC874\uD588\uC2B5\uB2C8\uB2E4: ${candidate}`,
       originalError
     );
   }
+  throw managerError(
+    `\uD65C\uC131 \uC2A4\uD0AC \uB9C1\uD06C\uB97C \uC81C\uAC70\uD558\uC9C0 \uBABB\uD588\uACE0 \uC6D0\uB798 \uC704\uCE58\uB85C \uBCF5\uC6D0\uD558\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4. \uC774\uB3D9\uB41C \uD56D\uBAA9: ${candidate}; \uC81C\uAC70 \uC624\uB958: ${toReason(originalError)}`,
+    result.error
+  );
+}
+async function tryRestoreRemovedLink(destination, rawTarget, operations) {
+  const restoreLink = temporaryLinkPath(destination);
   try {
-    await operations.rename(candidate, destination);
-  } catch (restoreError) {
-    throw managerError(
-      `\uD65C\uC131 \uC2A4\uD0AC \uB9C1\uD06C\uB97C \uC81C\uAC70\uD558\uC9C0 \uBABB\uD588\uACE0 \uC6D0\uB798 \uC704\uCE58\uB85C \uBCF5\uC6D0\uD558\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4. \uC774\uB3D9\uB41C \uD56D\uBAA9: ${candidate}; \uC81C\uAC70 \uC624\uB958: ${toReason(originalError)}`,
-      restoreError
-    );
+    if (await optionalLstat(destination)) {
+      return { restored: false };
+    }
+    await (0, import_promises3.symlink)(rawTarget, restoreLink);
+    await operations.rename(restoreLink, destination);
+    return { restored: true };
+  } catch (error) {
+    return { restored: false, error };
+  } finally {
+    await (0, import_promises3.rm)(restoreLink, { force: true });
   }
-  throw managerError(`\uD65C\uC131 \uC2A4\uD0AC \uB9C1\uD06C\uB97C \uC81C\uAC70\uD558\uC9C0 \uC54A\uACE0 \uC6D0\uB798 \uC704\uCE58\uB85C \uBCF5\uC6D0\uD588\uC2B5\uB2C8\uB2E4: ${destination}`, originalError);
 }
-async function uninstallSkill(context, operations = defaultOperations) {
-  const destination = destinationPath(context);
-  const status = await inspectSkill(context);
-  if (status.status === "missing") {
-    return "absent";
+async function planUninstallTargets(context) {
+  const statuses = [];
+  for (const agent of SKILL_AGENTS) {
+    const status = await inspectAgentSkill(context, agent);
+    if (status.status !== "missing" && (!status.managed || !status.linkTarget)) {
+      throw managerError(`\uAD00\uB9AC\uB418\uC9C0 \uC54A\uC740 \uC2A4\uD0AC \uD56D\uBAA9\uC774\uBBC0\uB85C \uC5B4\uB290 \uACBD\uB85C\uB3C4 \uC81C\uAC70\uD558\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4: ${status.destination}`);
+    }
+    statuses.push({ agent, status });
+  }
+  const targets = [];
+  for (const { agent, status } of statuses) {
+    if (status.status === "missing" || !status.linkTarget) {
+      continue;
+    }
+    const realParent = await optionalRealpath(import_node_path5.default.dirname(status.destination));
+    if (!realParent) {
+      continue;
+    }
+    const resolvedDestination = import_node_path5.default.join(realParent, import_node_path5.default.basename(status.destination));
+    const sameTarget = targets.find((entry) => entry.resolvedDestination === resolvedDestination);
+    if (sameTarget) {
+      sameTarget.agents.push(agent);
+      continue;
+    }
+    targets.push({
+      agents: [agent],
+      destination: status.destination,
+      resolvedDestination,
+      linkTarget: status.linkTarget
+    });
+  }
+  return targets;
+}
+function uninstallRollbackError(results, originalError, handledLabel) {
+  const failed = results.filter(({ result }) => !result.restored);
+  if (failed.length === 0) {
+    return managerError(
+      `\uC2A4\uD0AC \uC81C\uAC70\uC5D0 \uC2E4\uD328\uD574 ${handledLabel}\uB97C \uC774\uC804 \uC0C1\uD0DC\uB85C \uB418\uB3CC\uB838\uC2B5\uB2C8\uB2E4: ${results.map(({ destination }) => destination).join(", ")}`,
+      originalError
+    );
   }
-  if (!status.managed || !status.linkTarget) {
-    throw managerError(`\uAD00\uB9AC\uB418\uC9C0 \uC54A\uC740 \uC2A4\uD0AC \uD56D\uBAA9\uC774\uBBC0\uB85C \uC81C\uAC70\uD558\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4: ${destination}`);
+  const failedText = failed.map(
+    ({ destination, result }) => result.preserved ? `${destination} (\uC774\uB3D9\uB41C \uD56D\uBAA9: ${result.preserved})` : destination
+  ).join(", ");
+  return managerError(
+    `\uC2A4\uD0AC \uC81C\uAC70\uC5D0 \uC2E4\uD328\uD588\uACE0 \uC77C\uBD80 \uACBD\uB85C\uB97C \uB418\uB3CC\uB9AC\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4: ${failedText}; \uC81C\uAC70 \uC624\uB958: ${toReason(originalError)}`,
+    failed.find(({ result }) => result.error !== void 0)?.result.error
+  );
+}
+async function rollbackMovedCandidates(moved, operations, originalError) {
+  const results = [];
+  for (const target of [...moved].reverse()) {
+    results.push({
+      destination: target.destination,
+      result: await tryRestoreCandidate(target.candidate, target.destination, operations)
+    });
   }
+  throw uninstallRollbackError(results, originalError, "\uC62E\uAE34 \uACBD\uB85C");
+}
+async function moveUninstallCandidate(target, moved, operations) {
+  const { destination } = target;
   const candidate = import_node_path5.default.join(import_node_path5.default.dirname(destination), `.${SKILL_NAME2}.uninstall-${(0, import_node_crypto3.randomUUID)()}`);
   try {
     await operations.rename(destination, candidate);
   } catch (error) {
     if (isNodeError(error, "ENOENT")) {
-      return "absent";
+      return void 0;
+    }
+    const moveError = managerError(`\uD65C\uC131 \uC2A4\uD0AC \uB9C1\uD06C\uB97C \uC81C\uAC70\uC6A9 \uC784\uC2DC \uACBD\uB85C\uB85C \uC774\uB3D9\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${destination}`, error);
+    if (moved.length === 0) {
+      throw moveError;
     }
-    throw managerError(`\uD65C\uC131 \uC2A4\uD0AC \uB9C1\uD06C\uB97C \uC81C\uAC70\uC6A9 \uC784\uC2DC \uACBD\uB85C\uB85C \uC774\uB3D9\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${destination}`, error);
+    return await rollbackMovedCandidates(moved, operations, moveError);
   }
-  let candidateTarget;
+  let rawTarget;
+  let verificationError;
   try {
     const candidateStat = await (0, import_promises3.lstat)(candidate);
     if (!candidateStat.isSymbolicLink()) {
-      return await restoreUninstallCandidate(
-        candidate,
-        destination,
-        operations,
-        new Error("\uAC80\uC0AC \uD6C4 \uD65C\uC131 \uACBD\uB85C\uAC00 \uC2EC\uBCFC\uB9AD \uB9C1\uD06C\uAC00 \uC544\uB2CC \uD56D\uBAA9\uC73C\uB85C \uBCC0\uACBD\uB418\uC5C8\uC2B5\uB2C8\uB2E4.")
-      );
+      verificationError = new Error("\uAC80\uC0AC \uD6C4 \uD65C\uC131 \uACBD\uB85C\uAC00 \uC2EC\uBCFC\uB9AD \uB9C1\uD06C\uAC00 \uC544\uB2CC \uD56D\uBAA9\uC73C\uB85C \uBCC0\uACBD\uB418\uC5C8\uC2B5\uB2C8\uB2E4.");
+    } else {
+      rawTarget = await (0, import_promises3.readlink)(candidate);
+      if (resolveLinkTarget(destination, rawTarget) !== target.linkTarget) {
+        verificationError = new Error("\uAC80\uC0AC \uD6C4 \uD65C\uC131 \uC2A4\uD0AC \uB9C1\uD06C \uB300\uC0C1\uC774 \uBCC0\uACBD\uB418\uC5C8\uC2B5\uB2C8\uB2E4.");
+      }
     }
-    candidateTarget = resolveLinkTarget(destination, await (0, import_promises3.readlink)(candidate));
   } catch (error) {
-    if (error instanceof NhnCloudCliError) {
-      throw error;
-    }
-    return await restoreUninstallCandidate(candidate, destination, operations, error);
+    verificationError = error;
   }
-  if (candidateTarget !== status.linkTarget) {
-    return await restoreUninstallCandidate(
-      candidate,
-      destination,
-      operations,
-      new Error("\uAC80\uC0AC \uD6C4 \uD65C\uC131 \uC2A4\uD0AC \uB9C1\uD06C \uB300\uC0C1\uC774 \uBCC0\uACBD\uB418\uC5C8\uC2B5\uB2C8\uB2E4.")
-    );
+  if (verificationError !== void 0 || rawTarget === void 0) {
+    if (moved.length === 0) {
+      return await restoreUninstallCandidate(candidate, destination, operations, verificationError);
+    }
+    return await rollbackMovedCandidates([...moved, { destination, candidate }], operations, verificationError);
   }
-  try {
-    await (0, import_promises3.rm)(candidate);
-  } catch (error) {
-    return await restoreUninstallCandidate(candidate, destination, operations, error);
+  return { ...target, candidate, rawTarget };
+}
+async function removeUninstallCandidates(moved, operations) {
+  const removeEntry = operations.rm ?? defaultOperations.rm;
+  for (const [index, target] of moved.entries()) {
+    try {
+      await removeEntry(target.candidate, { force: true });
+    } catch (originalError) {
+      if (index === 0) {
+        if (moved.length === 1) {
+          return await restoreUninstallCandidate(target.candidate, target.destination, operations, originalError);
+        }
+        return await rollbackMovedCandidates(moved, operations, originalError);
+      }
+      const results = [];
+      for (const [restoreIndex, entry] of moved.entries()) {
+        const result = restoreIndex < index ? await tryRestoreRemovedLink(entry.destination, entry.rawTarget, operations) : await tryRestoreCandidate(entry.candidate, entry.destination, operations);
+        results.push({ destination: entry.destination, result });
+      }
+      throw uninstallRollbackError(results, originalError, "\uC9C0\uC6B4 \uACBD\uB85C");
+    }
   }
-  return "removed";
+}
+async function uninstallSkill(context, operations = defaultOperations) {
+  const targets = await planUninstallTargets(context);
+  const moved = [];
+  for (const target of targets) {
+    const movedTarget = await moveUninstallCandidate(target, moved, operations);
+    if (movedTarget) {
+      moved.push(movedTarget);
+    }
+  }
+  await removeUninstallCandidates(moved, operations);
+  const agentResult = (agent) => ({
+    action: moved.some((target) => target.agents.includes(agent)) ? "removed" : "absent",
+    destination: destinationPath(context, agent)
+  });
+  const agents = { claude: agentResult("claude"), codex: agentResult("codex") };
+  return {
+    action: SKILL_AGENTS.some((agent) => agents[agent].action === "removed") ? "removed" : "absent",
+    agents
+  };
 }
 
 // src/formatters/table.ts
@@ -3117,9 +3548,16 @@ function outputSkillStatus(opts, status) {
     rows: [
       ["\uC0C1\uD0DC", status.status],
       ["\uD604\uC7AC \uBC84\uC804", status.currentVersion],
-      ["\uC124\uCE58 \uBC84\uC804", terminalText(status.installedVersion)],
-      ["\uC124\uCE58 \uACBD\uB85C", terminalText(status.destination)],
-      ["\uB9C1\uD06C \uB300\uC0C1", terminalText(status.linkTarget)],
+      ...SKILL_AGENTS.flatMap((agent) => {
+        const name = SKILL_AGENT_NAMES[agent];
+        const agentStatus = status.agents[agent];
+        return [
+          [`${name} \uC0C1\uD0DC`, agentStatus.status],
+          [`${name} \uC124\uCE58 \uBC84\uC804`, terminalText(agentStatus.installedVersion)],
+          [`${name} \uC124\uCE58 \uACBD\uB85C`, terminalText(agentStatus.destination)],
+          [`${name} \uB9C1\uD06C \uB300\uC0C1`, terminalText(agentStatus.linkTarget)]
+        ];
+      }),
       ["\uBCF5\uAD6C \uBA85\uB839", skillRecoveryCommand(status.status) ?? "\uC870\uCE58 \uC5C6\uC74C"]
     ],
     raw: status,
@@ -3134,7 +3572,10 @@ function outputSkillInstallResult(opts, result) {
       ["\uBCC0\uACBD \uC5EC\uBD80", result.changed ? "\uBCC0\uACBD\uB428" : "\uBCC0\uACBD \uC5C6\uC74C"],
       ["\uC774\uC804 \uC0C1\uD0DC", result.previousStatus.status],
       ["\uD604\uC7AC \uC0C1\uD0DC", result.status.status],
-      ["\uC124\uCE58 \uACBD\uB85C", terminalText(result.status.destination)],
+      ...SKILL_AGENTS.map((agent) => [
+        `${SKILL_AGENT_NAMES[agent]} \uC124\uCE58 \uACBD\uB85C`,
+        terminalText(result.status.agents[agent].destination)
+      ]),
       ["\uAD00\uB9AC \uC800\uC7A5\uC18C", terminalText(result.repositoryPath)],
       [
         "\uBC31\uC5C5 \uACBD\uB85C",
@@ -3150,7 +3591,14 @@ function outputSkillUninstallResult(opts, result) {
     headers: ["\uD56D\uBAA9", "\uAC12"],
     rows: [
       ["\uC791\uC5C5", result.action === "removed" ? "\uD65C\uC131 \uB9C1\uD06C \uC81C\uAC70 \uC644\uB8CC" : "\uD65C\uC131 \uB9C1\uD06C \uC5C6\uC74C"],
-      ["\uC124\uCE58 \uACBD\uB85C", terminalText(result.destination)],
+      ...SKILL_AGENTS.flatMap((agent) => {
+        const name = SKILL_AGENT_NAMES[agent];
+        const agentResult = result.agents[agent];
+        return [
+          [`${name} \uC124\uCE58 \uACBD\uB85C`, terminalText(agentResult.destination)],
+          [`${name} \uACB0\uACFC`, agentResult.action === "removed" ? "\uD65C\uC131 \uB9C1\uD06C \uC81C\uAC70" : "\uD65C\uC131 \uB9C1\uD06C \uC5C6\uC74C"]
+        ];
+      }),
       ["\uAD00\uB9AC \uC800\uC7A5\uC18C", "\uBCF4\uC874\uB428"]
     ],
     raw: result,
@@ -3173,7 +3621,7 @@ async function showStatus(cmd, dependencies) {
 }
 function createInstallCommand(name, dependencies) {
   return new import_commander3.Command(name).description(
-    name === "install" ? "Claude Code \uC2A4\uD0AC\uC744 \uAD00\uB9AC \uC800\uC7A5\uC18C\uC5D0 \uC124\uCE58\uD55C\uB2E4" : "Claude Code \uC2A4\uD0AC\uC744 \uD604\uC7AC CLI \uBC84\uC804\uC73C\uB85C \uAC31\uC2E0\uD55C\uB2E4"
+    name === "install" ? "Claude Code\xB7Codex \uC2A4\uD0AC\uC744 \uAD00\uB9AC \uC800\uC7A5\uC18C\uC5D0 \uC124\uCE58\uD55C\uB2E4" : "Claude Code\xB7Codex \uC2A4\uD0AC\uC744 \uD604\uC7AC CLI \uBC84\uC804\uC73C\uB85C \uAC31\uC2E0\uD55C\uB2E4"
   ).option("--force", "\uC0AC\uC6A9\uC790 \uD56D\uBAA9\uC774\uB098 \uC218\uC815\xB7\uC190\uC0C1\uB41C \uAD00\uB9AC \uC800\uC7A5\uC18C\uB97C \uBC31\uC5C5 \uD6C4 \uAD50\uCCB4\uD55C\uB2E4").action(async (_localOpts, cmd) => {
     const opts = cmd.optsWithGlobals();
     const context = dependencies.createContext();
@@ -3182,98 +3630,282 @@ function createInstallCommand(name, dependencies) {
   });
 }
 function createSkillsCommand(dependencies = defaultDependencies) {
-  const statusCommand = new import_commander3.Command("status").description("Claude Code \uC2A4\uD0AC\uC758 \uAD00\uB9AC \uC0C1\uD0DC\uB97C \uC870\uD68C\uD55C\uB2E4").action(async (_opts, cmd) => showStatus(cmd, dependencies));
-  const uninstallCommand = new import_commander3.Command("uninstall").description("\uD65C\uC131 Claude Code \uC2A4\uD0AC \uB9C1\uD06C\uB97C \uC81C\uAC70\uD55C\uB2E4").action(async (_opts, cmd) => {
+  const statusCommand = new import_commander3.Command("status").description("Claude Code\xB7Codex \uC2A4\uD0AC\uC758 \uAD00\uB9AC \uC0C1\uD0DC\uB97C \uC870\uD68C\uD55C\uB2E4").action(async (_opts, cmd) => showStatus(cmd, dependencies));
+  const uninstallCommand = new import_commander3.Command("uninstall").description("\uD65C\uC131 Claude Code\xB7Codex \uC2A4\uD0AC \uB9C1\uD06C\uB97C \uC81C\uAC70\uD55C\uB2E4").action(async (_opts, cmd) => {
     const opts = cmd.optsWithGlobals();
     const context = dependencies.createContext();
-    const previousStatus = await dependencies.inspect(context);
-    const action = await dependencies.uninstall(context);
+    const uninstalled = await dependencies.uninstall(context);
     const result = {
       schemaVersion: 1,
-      action,
-      changed: action === "removed",
+      action: uninstalled.action,
+      changed: uninstalled.action === "removed",
       status: "missing",
-      destination: previousStatus.destination,
-      repositoryPreserved: true
+      destination: uninstalled.agents.claude.destination,
+      repositoryPreserved: true,
+      agents: uninstalled.agents
     };
     outputSkillUninstallResult(opts, result);
   });
-  return new import_commander3.Command("skills").description(`Claude Code \uC2A4\uD0AC(${SKILL_NAME3}) \uC124\uCE58 \uAD00\uB9AC`).addCommand(statusCommand).addCommand(createInstallCommand("install", dependencies)).addCommand(createInstallCommand("update", dependencies)).addCommand(uninstallCommand).action(async (_opts, cmd) => showStatus(cmd, dependencies));
+  return new import_commander3.Command("skills").description(`Claude Code\xB7Codex \uC2A4\uD0AC(${SKILL_NAME3}) \uC124\uCE58 \uAD00\uB9AC`).addCommand(statusCommand).addCommand(createInstallCommand("install", dependencies)).addCommand(createInstallCommand("update", dependencies)).addCommand(uninstallCommand).action(async (_opts, cmd) => showStatus(cmd, dependencies));
 }
 var skillsCommand = createSkillsCommand();
 
 // src/commands/doctor.ts
 var import_commander4 = require("commander");
 var import_chalk3 = __toESM(require("chalk"));
-var import_promises4 = require("fs/promises");
-var import_node_os4 = require("os");
-var import_node_path6 = __toESM(require("path"));
-var SKILL_NAME4 = "nhncloud-cli";
-var CREDENTIALS_PATH2 = import_node_path6.default.join((0, import_node_os4.homedir)(), ".nhncloud", "credentials.json");
-var CONFIG_PATH2 = import_node_path6.default.join((0, import_node_os4.homedir)(), ".nhncloud", "config.json");
-async function readProfiles() {
-  let raw;
+var SKILL_ERROR_REASON = "\uACF5\uAC1C \uC2A4\uD0AC \uC0C1\uD0DC\uB97C \uD310\uC815\uD558\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4";
+var defaultDependencies2 = {
+  inspectCredentials: inspectCredentialsFile,
+  inspectConfig: inspectConfigFile,
+  resolveProfile: resolveProfileName,
+  createSkillContext: createSkillManagerContext,
+  inspectSkill: inspectAgentSkill,
+  connection: {
+    getUserAccessKey,
+    getIaasCredential,
+    getOptionalServiceCredential,
+    verifyUserAccessKey,
+    verifyIaas,
+    verifyLogncrash,
+    verifyNcr,
+    verifyNcs
+  }
+};
+async function resolveTargetProfile(cliProfile, dependencies) {
   try {
-    raw = await (0, import_promises4.readFile)(CREDENTIALS_PATH2, "utf-8");
-  } catch {
-    return { profiles: [], parseError: false, missing: true };
+    return await dependencies.resolveProfile(cliProfile);
+  } catch (err) {
+    if (err instanceof NhnCloudCliError) return null;
+    throw err;
   }
+}
+async function inspectAgentSkillForDoctor(dependencies, agent) {
   try {
-    const parsed = JSON.parse(raw);
-    return { profiles: Object.keys(parsed.profiles ?? {}), parseError: false, missing: false };
-  } catch {
-    return { profiles: [], parseError: true, missing: false };
+    const status = await dependencies.inspectSkill(dependencies.createSkillContext(), agent);
+    return { ...status, recoveryCommand: skillRecoveryCommand(status.status) ?? null };
+  } catch (err) {
+    const code = typeof err === "object" && err !== null && "code" in err && typeof err.code === "string" ? err.code : void 0;
+    return { status: "error", reason: code ? `${SKILL_ERROR_REASON}: ${code}` : SKILL_ERROR_REASON };
   }
 }
-async function readDefaultProfile() {
+function connectionHasFailure(connection) {
+  return connection.checked && Object.values(connection.targets).some((target) => target.status === "failed");
+}
+var CONNECTION_TARGETS = ["userAccessKey", "iaas", "logncrash", "ncr", "ncs"];
+function skipAll(reason) {
+  return Object.fromEntries(
+    CONNECTION_TARGETS.map((target) => [target, { status: "skipped", reason }])
+  );
+}
+async function runVerify(verify) {
   try {
-    const raw = await (0, import_promises4.readFile)(CONFIG_PATH2, "utf-8");
-    const parsed = JSON.parse(raw);
-    return parsed.defaultProfile ?? null;
-  } catch {
-    return null;
+    return await verify() ? { status: "ok" } : { status: "failed", reason: "auth" };
+  } catch (err) {
+    const exitCode = err instanceof NhnCloudCliError ? err.exitCode : EXIT_API_ERROR;
+    return { status: "failed", reason: "error", exitCode };
   }
 }
-var doctorCommand = new import_commander4.Command("doctor").description("\uC790\uACA9\uC99D\uBA85\xB7\uC2A4\uD0AC \uC124\uCE58 \uC0C1\uD0DC\uB97C \uC9C4\uB2E8\uD55C\uB2E4(\uC624\uD504\uB77C\uC778 \u2014 \uC5F0\uACB0 \uD14C\uC2A4\uD2B8\uB294 configure \uB85C)").action(async () => {
-  console.log(import_chalk3.default.bold("\n\u{1F50D} nhncloud-cli \uC9C4\uB2E8\n"));
-  const creds = await readProfiles();
-  const defaultProfile = await readDefaultProfile();
-  console.log(import_chalk3.default.bold("\uC790\uACA9\uC99D\uBA85"));
-  if (creds.missing) {
-    console.log(`  ${import_chalk3.default.red("\u274C \uBBF8\uC124\uC815")} \u2014 ${CREDENTIALS_PATH2} \uC5C6\uC74C. nhncloud configure \uB85C \uC124\uC815\uD558\uC138\uC694.`);
-  } else if (creds.parseError) {
-    console.log(`  ${import_chalk3.default.red("\u274C \uD30C\uC2F1 \uC624\uB958")} \u2014 ${CREDENTIALS_PATH2} \uAC00 \uC62C\uBC14\uB978 JSON \uC778\uC9C0 \uD655\uC778\uD558\uC138\uC694.`);
-  } else if (creds.profiles.length === 0) {
-    console.log(`  ${import_chalk3.default.yellow("\u26A0 profile \uC5C6\uC74C")} \u2014 nhncloud configure \uB85C \uC124\uC815\uD558\uC138\uC694.`);
-  } else {
-    console.log(`  ${import_chalk3.default.green("\u2713 \uC124\uC815\uB428")} \u2014 profile: ${creds.profiles.join(", ")}`);
-    console.log(`  \uAE30\uBCF8 profile: ${defaultProfile ? import_chalk3.default.green(defaultProfile) : import_chalk3.default.gray("\uBBF8\uC9C0\uC815 (default \uC0AC\uC6A9)")}`);
+async function readRequired(read) {
+  try {
+    return { value: await read() };
+  } catch (err) {
+    const reason = err instanceof NhnCloudCliError ? "not-configured" : "profile-unavailable";
+    return { skipped: { status: "skipped", reason } };
   }
-  console.log(import_chalk3.default.bold("\nClaude Code \uC2A4\uD0AC"));
-  const skillStatus = await inspectSkill(createSkillManagerContext());
-  if (skillStatus.status === "current") {
-    console.log(
-      `  ${SKILL_NAME4}: ${import_chalk3.default.green(`\u2713 current (${skillStatus.installedVersion ?? skillStatus.currentVersion})`)}`
-    );
-  } else if (skillStatus.status === "missing") {
-    console.log(
-      `  ${SKILL_NAME4}: ${import_chalk3.default.gray(`\uBBF8\uC124\uCE58 \u2014 ${skillRecoveryCommand(skillStatus.status)}`)}`
+}
+async function readAppkey(service, profileName, deps) {
+  try {
+    const credential = await deps.getOptionalServiceCredential(service, profileName);
+    if (!credential?.appkey) return { skipped: { status: "skipped", reason: "not-configured" } };
+    return { appkey: credential.appkey };
+  } catch {
+    return { skipped: { status: "skipped", reason: "profile-unavailable" } };
+  }
+}
+async function checkConnection(profileName, credentials, profileSummary, deps) {
+  if (credentials.state !== "ok" || profileName === null || profileSummary === void 0 || profileSummary.environment === "invalid") {
+    return skipAll("profile-unavailable");
+  }
+  if (profileSummary.environment === "gov") return skipAll("gov-unsupported");
+  const uakRead = await readRequired(() => deps.getUserAccessKey(profileName));
+  const uak = "value" in uakRead ? uakRead.value : void 0;
+  const userAccessKey = "value" in uakRead ? await runVerify(() => deps.verifyUserAccessKey(uakRead.value)) : uakRead.skipped;
+  const iaasRead = await readRequired(() => deps.getIaasCredential(profileName));
+  const iaasResult = "value" in iaasRead ? await runVerify(() => deps.verifyIaas(iaasRead.value)) : iaasRead.skipped;
+  const checkAppkeyService = async (service, verify, usesOAuth) => {
+    const read = await readAppkey(service, profileName, deps);
+    if ("skipped" in read) return read.skipped;
+    if (uak === void 0) return { status: "skipped", reason: "uak-missing" };
+    if (usesOAuth && userAccessKey.status !== "ok") return { status: "skipped", reason: "uak-failed" };
+    return runVerify(() => verify(uak, read.appkey));
+  };
+  const logncrash = await checkAppkeyService("logncrash", deps.verifyLogncrash, true);
+  const ncr = await checkAppkeyService("ncr", deps.verifyNcr, false);
+  const ncs = await checkAppkeyService("ncs", deps.verifyNcs, true);
+  return { userAccessKey, iaas: iaasResult, logncrash, ncr, ncs };
+}
+async function buildDoctorReport(options, dependencies) {
+  const credentials = await dependencies.inspectCredentials();
+  const config = await dependencies.inspectConfig();
+  const profileName = await resolveTargetProfile(options.profile, dependencies);
+  const profileSummary = credentials.state === "ok" && profileName !== null ? credentials.profiles.find((summary) => summary.name === profileName) : void 0;
+  const connection = options.checkConnection ? {
+    checked: true,
+    profile: profileName,
+    targets: await checkConnection(profileName, credentials, profileSummary, dependencies.connection)
+  } : { checked: false };
+  const claude = await inspectAgentSkillForDoctor(dependencies, "claude");
+  const codex = await inspectAgentSkillForDoctor(dependencies, "codex");
+  const ready = profileSummary !== void 0 && profileSummary.environment !== "invalid" && profileSummary.blocks.length > 0 && !connectionHasFailure(connection);
+  return {
+    schemaVersion: 1,
+    ready,
+    credentials,
+    config,
+    profile: { name: profileName, exists: profileSummary !== void 0 },
+    connection,
+    skills: { agents: { claude, codex } }
+  };
+}
+function line(text = "") {
+  process.stdout.write(`${text}
+`);
+}
+function printCredentialsSection(credentials) {
+  const filePath = sanitizeForTerminal(credentials.path);
+  const reason = sanitizeForTerminal(credentials.reason ?? "");
+  line(import_chalk3.default.bold("\uC790\uACA9\uC99D\uBA85"));
+  switch (credentials.state) {
+    case "missing":
+      line(`  ${import_chalk3.default.red("\u274C \uBBF8\uC124\uC815")} \u2014 ${filePath} \uC5C6\uC74C. nhncloud configure \uB85C \uC124\uC815\uD558\uC138\uC694.`);
+      break;
+    case "invalid":
+      line(`  ${import_chalk3.default.red("\u274C \uD615\uC2DD \uC624\uB958")} \u2014 ${filePath}: ${reason}`);
+      break;
+    case "unreadable":
+      line(`  ${import_chalk3.default.red("\u274C \uC77D\uAE30 \uC2E4\uD328")} \u2014 ${filePath}: ${reason}`);
+      break;
+    case "ok":
+      if (credentials.profiles.length === 0) {
+        line(`  ${import_chalk3.default.yellow("\u26A0 profile \uC5C6\uC74C")} \u2014 nhncloud configure \uB85C \uC124\uC815\uD558\uC138\uC694.`);
+        break;
+      }
+      line(`  ${import_chalk3.default.green("\u2713 \uC124\uC815\uB428")} \u2014 profile:`);
+      for (const summary of credentials.profiles) {
+        const name = sanitizeForTerminal(summary.name);
+        const blocks = summary.blocks.map(sanitizeForTerminal).join(", ") || "-";
+        if (summary.environment === "invalid") {
+          line(`    ${name} ${import_chalk3.default.yellow("\u26A0 environment \uAC12\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4")} [${blocks}]`);
+        } else {
+          line(`    ${name}${summary.environment === "gov" ? " (gov)" : ""} [${blocks}]`);
+        }
+      }
+      break;
+  }
+  if (credentials.permissions === "too-open") {
+    line(`  ${import_chalk3.default.yellow("\u26A0 \uD30C\uC77C \uAD8C\uD55C\uC774 \uB113\uC2B5\uB2C8\uB2E4")} \u2014 chmod 600 ${filePath}`);
+  }
+}
+function printConfigSection(config) {
+  line(import_chalk3.default.bold("\n\uC124\uC815 \uD30C\uC77C"));
+  if (config.state === "invalid" || config.state === "unreadable") {
+    line(
+      `  ${import_chalk3.default.red(config.state === "invalid" ? "\u274C \uD615\uC2DD \uC624\uB958" : "\u274C \uC77D\uAE30 \uC2E4\uD328")} \u2014 ${sanitizeForTerminal(config.path)}: ${sanitizeForTerminal(config.reason ?? "")}`
     );
+  }
+  line(
+    `  \uAE30\uBCF8 profile: ${config.defaultProfile ? import_chalk3.default.green(sanitizeForTerminal(config.defaultProfile)) : import_chalk3.default.gray("\uBBF8\uC9C0\uC815 (default \uC0AC\uC6A9)")}`
+  );
+}
+function printProfileSection(profile) {
+  line(import_chalk3.default.bold("\n\uB300\uC0C1 profile"));
+  if (profile.name === null) {
+    line(`  ${import_chalk3.default.red("\u274C \uD574\uC11D \uC2E4\uD328")} \u2014 config.json \uC744 \uBA3C\uC800 \uACE0\uCE58\uC138\uC694.`);
+  } else if (profile.exists) {
+    line(`  ${import_chalk3.default.green(`\u2713 ${sanitizeForTerminal(profile.name)}`)}`);
   } else {
-    console.log(
-      `  ${SKILL_NAME4}: ${import_chalk3.default.yellow(`\u26A0 ${skillStatus.status}`)} \u2014 ${skillRecoveryCommand(skillStatus.status)}`
+    line(
+      `  ${import_chalk3.default.yellow(`\u26A0 ${sanitizeForTerminal(profile.name)} \uC5C6\uC74C`)} \u2014 nhncloud configure \uB85C \uC124\uC815\uD558\uC138\uC694.`
     );
   }
-  console.log();
-  if (!creds.missing && !creds.parseError && creds.profiles.length > 0) {
-    console.log(import_chalk3.default.green("\u2713 \uAE30\uBCF8 \uC124\uC815\uC774 \uC644\uB8CC\uB418\uC5C8\uC2B5\uB2C8\uB2E4."));
+}
+function printSkillLine(agent, skill) {
+  const name = SKILL_AGENT_NAMES[agent];
+  if (skill.status === "error") {
+    line(`  ${name}: ${import_chalk3.default.yellow("\u26A0 error")} \u2014 ${sanitizeForTerminal(skill.reason)}`);
+  } else if (skill.status === "current") {
+    const version = sanitizeForTerminal(skill.installedVersion ?? skill.currentVersion);
+    line(`  ${name}: ${import_chalk3.default.green(`\u2713 current (${version})`)}`);
+  } else if (skill.status === "missing") {
+    line(`  ${name}: ${import_chalk3.default.gray(`\uBBF8\uC124\uCE58 \u2014 ${skill.recoveryCommand}`)}`);
   } else {
-    console.log(import_chalk3.default.yellow("\u26A0 \uC124\uC815\uC774 \uD544\uC694\uD569\uB2C8\uB2E4: nhncloud configure"));
+    line(`  ${name}: ${import_chalk3.default.yellow(`\u26A0 ${skill.status}`)} \u2014 ${skill.recoveryCommand}`);
   }
-  console.log();
-});
-
-// src/commands/logncrash/search.ts
+}
+function printSkillSection(agents) {
+  line(import_chalk3.default.bold("\n\uACF5\uAC1C \uC2A4\uD0AC"));
+  for (const agent of SKILL_AGENTS) printSkillLine(agent, agents[agent]);
+}
+var SKIP_REASONS = {
+  "not-configured": "\uC124\uC815 \uC5C6\uC74C",
+  "uak-missing": "\uACF5\uD1B5 userAccessKey \uC5C6\uC74C",
+  "uak-failed": "userAccessKey \uD655\uC778\uC774 \uC131\uACF5\uD558\uC9C0 \uC54A\uC544 \uAC74\uB108\uB700",
+  "gov-unsupported": "\uACF5\uACF5\uB9DD profile \uC740 \uC5F0\uACB0 \uD655\uC778\uC744 \uC9C0\uC6D0\uD558\uC9C0 \uC54A\uC74C",
+  "profile-unavailable": "\uB300\uC0C1 profile \uC744 \uC77D\uC744 \uC218 \uC5C6\uC74C"
+};
+function printConnectionSection(connection) {
+  if (!connection.checked) return;
+  line(import_chalk3.default.bold("\n\uC5F0\uACB0 \uD655\uC778"));
+  for (const target of CONNECTION_TARGETS) {
+    const result = connection.targets[target];
+    const label = `  ${target}:`;
+    if (result.status === "ok") {
+      const region = target === "ncr" || target === "ncs" ? " (kr1)" : "";
+      line(`${label} ${import_chalk3.default.green(`\u2713 \uC131\uACF5${region}`)}`);
+    } else if (result.status === "failed" && result.reason === "auth") {
+      line(`${label} ${import_chalk3.default.red("\u274C \uC778\uC99D \uC2E4\uD328")} \u2014 \uD0A4\uB098 appkey \uB97C \uD655\uC778\uD558\uC138\uC694.`);
+    } else if (result.status === "failed") {
+      line(`${label} ${import_chalk3.default.red(`\u274C \uC624\uB958 (\uC885\uB8CC \uCF54\uB4DC ${result.exitCode ?? EXIT_API_ERROR})`)}`);
+    } else {
+      const reason = result.reason ? SKIP_REASONS[result.reason] ?? result.reason : "";
+      line(`${label} ${import_chalk3.default.gray(`\uAC74\uB108\uB700 \u2014 ${reason}`)}`);
+    }
+  }
+}
+function printText(report) {
+  line(import_chalk3.default.bold("\n\u{1F50D} nhncloud-cli \uC9C4\uB2E8\n"));
+  printCredentialsSection(report.credentials);
+  printConfigSection(report.config);
+  printProfileSection(report.profile);
+  printConnectionSection(report.connection);
+  printSkillSection(report.skills.agents);
+  line();
+  if (report.ready) {
+    line(import_chalk3.default.green("\u2713 \uAE30\uBCF8 \uC124\uC815\uC774 \uC644\uB8CC\uB418\uC5C8\uC2B5\uB2C8\uB2E4."));
+  } else {
+    line(import_chalk3.default.yellow("\u26A0 \uC124\uC815\uC774 \uD544\uC694\uD569\uB2C8\uB2E4: nhncloud configure"));
+  }
+  line();
+}
+function createDoctorCommand(dependencies = defaultDependencies2) {
+  return new import_commander4.Command("doctor").description("\uC790\uACA9\uC99D\uBA85\xB7\uC124\uC815\xB7\uC2A4\uD0AC \uC0C1\uD0DC\uB97C \uC9C4\uB2E8\uD55C\uB2E4(\uAE30\uBCF8 \uC624\uD504\uB77C\uC778, --check-connection \uC73C\uB85C \uC5F0\uACB0 \uD655\uC778)").option("--profile <name>", "\uC9C4\uB2E8\uD560 profile \uC774\uB984").option("--check-connection", "\uB300\uC0C1 profile \uC758 \uC790\uACA9\uC99D\uBA85\uC73C\uB85C \uC2E4\uC81C \uC5F0\uACB0\uC744 \uD655\uC778\uD55C\uB2E4 (\uC678\uBD80 API \uD638\uCD9C)").action(async (_opts, cmd) => {
+    const opts = cmd.optsWithGlobals();
+    const report = await buildDoctorReport(
+      { profile: opts.profile, checkConnection: opts.checkConnection },
+      dependencies
+    );
+    if (opts.json) {
+      printJson(report);
+    } else if (opts.quiet) {
+      process.stdout.write(report.ready ? "ready\n" : "not-ready\n");
+    } else {
+      printText(report);
+    }
+  });
+}
+var doctorCommand = createDoctorCommand();
+
+// src/commands/logncrash/search.ts
 var import_commander5 = require("commander");
 
 // src/utils/time.ts
@@ -3520,19 +4152,19 @@ var VALID_LEVELS = ["DEBUG", "INFO", "WARN", "ERROR", "FATAL"];
 function resolveBody(opts) {
   if (opts.body !== void 0) return opts.body;
   if (opts.file !== void 0) {
-    let stat3;
+    let stat4;
     try {
-      stat3 = (0, import_node_fs3.statSync)(opts.file);
+      stat4 = (0, import_node_fs3.statSync)(opts.file);
     } catch (e) {
       const reason = e.code ?? (e instanceof Error ? e.message : String(e));
       throw new NhnCloudCliError(`\uB85C\uADF8 \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${opts.file} (${reason})`, EXIT_PARAM_ERROR);
     }
-    if (!stat3.isFile()) {
+    if (!stat4.isFile()) {
       throw new NhnCloudCliError(`\uB85C\uADF8 \uD30C\uC77C\uC774 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${opts.file}`, EXIT_PARAM_ERROR);
     }
-    if (stat3.size > MAX_LOG_BYTES) {
+    if (stat4.size > MAX_LOG_BYTES) {
       throw new NhnCloudCliError(
-        `\uB85C\uADF8 \uD30C\uC77C\uC774 \uB108\uBB34 \uD07D\uB2C8\uB2E4: ${stat3.size} \uBC14\uC774\uD2B8 (\uD55C\uB3C4 ${MAX_LOG_BYTES} \uBC14\uC774\uD2B8).`,
+        `\uB85C\uADF8 \uD30C\uC77C\uC774 \uB108\uBB34 \uD07D\uB2C8\uB2E4: ${stat4.size} \uBC14\uC774\uD2B8 (\uD55C\uB3C4 ${MAX_LOG_BYTES} \uBC14\uC774\uD2B8).`,
         EXIT_PARAM_ERROR
       );
     }
@@ -3603,22 +4235,22 @@ credentials.json \uC5D0 "appkey": "<appkey>" \uB97C \uCD94\uAC00\uD558\uC138\uC6
 
 // src/commands/logncrash/export.ts
 var import_commander7 = require("commander");
-var import_promises5 = require("fs/promises");
+var import_promises4 = require("fs/promises");
 var import_node_fs4 = require("fs");
 var import_node_crypto4 = require("crypto");
 var MAX_TOTAL = 1e5;
-var defaultExportFileOps = { appendFile: import_promises5.appendFile, rename: import_promises5.rename };
-function assertWritable(path5, force) {
+var defaultExportFileOps = { appendFile: import_promises4.appendFile, rename: import_promises4.rename };
+function assertWritable(path4, force) {
   if (force) return;
   try {
-    (0, import_node_fs4.statSync)(path5);
+    (0, import_node_fs4.statSync)(path4);
   } catch (e) {
     if (e.code === "ENOENT") return;
     const reason = e.code ?? (e instanceof Error ? e.message : String(e));
-    throw new NhnCloudCliError(`--output \uACBD\uB85C\uB97C \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${path5} (${reason})`, EXIT_PARAM_ERROR);
+    throw new NhnCloudCliError(`--output \uACBD\uB85C\uB97C \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${path4} (${reason})`, EXIT_PARAM_ERROR);
   }
   throw new NhnCloudCliError(
-    `--output \uB300\uC0C1\uC774 \uC774\uBBF8 \uC874\uC7AC\uD569\uB2C8\uB2E4: ${path5}. \uB36E\uC5B4\uC4F0\uB824\uBA74 --force \uB97C \uC4F0\uC138\uC694.`,
+    `--output \uB300\uC0C1\uC774 \uC774\uBBF8 \uC874\uC7AC\uD569\uB2C8\uB2E4: ${path4}. \uB36E\uC5B4\uC4F0\uB824\uBA74 --force \uB97C \uC4F0\uC138\uC694.`,
     EXIT_PARAM_ERROR
   );
 }
@@ -3729,7 +4361,7 @@ function createExportCommand(finalizeOps) {
         } catch (err) {
           if (failureOrigin !== "search" || !(err instanceof LogncrashServerError)) throw err;
           await endAndClose(stream);
-          await (0, import_promises5.truncate)(tmp, checkpoint.bytesWritten);
+          await (0, import_promises4.truncate)(tmp, checkpoint.bytesWritten);
           stream = (0, import_node_fs4.createWriteStream)(tmp, { encoding: "utf-8", flags: "a" });
           bytePosition = checkpoint.bytesWritten;
           count = checkpoint.count;
@@ -3756,14 +4388,14 @@ function createExportCommand(finalizeOps) {
         stream.end();
       });
       if (count === 0) {
-        await (0, import_promises5.rm)(tmp, { force: true }).catch(() => {
+        await (0, import_promises4.rm)(tmp, { force: true }).catch(() => {
         });
         throw failure;
       }
       const partial = `${opts.output}.partial`;
       try {
-        if (format === "json") await (0, import_promises5.appendFile)(tmp, "]\n");
-        await (0, import_promises5.rename)(tmp, partial);
+        if (format === "json") await (0, import_promises4.appendFile)(tmp, "]\n");
+        await (0, import_promises4.rename)(tmp, partial);
       } catch {
         process.stderr.write(
           `\uACBD\uACE0: \uBD80\uBD84 \uACB0\uACFC\uB97C ${partial} \uC5D0 \uB0A8\uAE30\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4. \uC784\uC2DC \uD30C\uC77C: ${tmp}
@@ -3805,7 +4437,7 @@ function createExportCommand(finalizeOps) {
       throw new NhnCloudCliError(message, EXIT_PARAM_ERROR);
     }
     stopSpinner(true, `${count}\uAC74 \uCD94\uCD9C \uC644\uB8CC`);
-    await (0, import_promises5.rm)(`${opts.output}.partial`, { force: true }).catch(() => {
+    await (0, import_promises4.rm)(`${opts.output}.partial`, { force: true }).catch(() => {
     });
     if (count >= MAX_TOTAL && (total > MAX_TOTAL || hasUnqueriedWindows)) {
       const totalDescription = hasUnqueriedWindows ? `\uC870\uD68C\uD55C \uCC3D\uC5D0\uC11C ${total}\uAC74\uC744 \uD655\uC778\uD588\uACE0 \uB0A8\uC740 \uCC3D\uC744 \uC870\uD68C\uD558\uC9C0 \uC54A\uC740 \uCC44` : `\uC804\uCCB4 ${total}\uAC74 \uC911`;
@@ -4423,7 +5055,7 @@ var binariesCommand = new import_commander15.Command("binaries").description("\u
 // src/commands/deploy/upload.ts
 var import_commander16 = require("commander");
 var import_node_fs5 = require("fs");
-var import_node_path7 = require("path");
+var import_node_path6 = require("path");
 var MAX_UPLOAD_BYTES = 512 * 1024 * 1024;
 function parsePositiveInt2(value, flag) {
   if (value === void 0) return void 0;
@@ -4443,9 +5075,9 @@ var uploadCommand = new import_commander16.Command("upload").description("\uB85C
   }
   const artifactId = requireCoordinate(opts.artifactId, "--artifact-id");
   const filePath = opts.file;
-  let stat3;
+  let stat4;
   try {
-    stat3 = (0, import_node_fs5.statSync)(filePath);
+    stat4 = (0, import_node_fs5.statSync)(filePath);
   } catch (e) {
     const reason = e.code ?? (e instanceof Error ? e.message : String(e));
     throw new NhnCloudCliError(
@@ -4453,17 +5085,17 @@ var uploadCommand = new import_commander16.Command("upload").description("\uB85C
       EXIT_PARAM_ERROR
     );
   }
-  if (!stat3.isFile()) {
+  if (!stat4.isFile()) {
     throw new NhnCloudCliError(`--file \uC774 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${filePath}`, EXIT_PARAM_ERROR);
   }
-  if (stat3.size > MAX_UPLOAD_BYTES) {
+  if (stat4.size > MAX_UPLOAD_BYTES) {
     throw new NhnCloudCliError(
-      `--file \uC774 \uB108\uBB34 \uD07D\uB2C8\uB2E4 (${stat3.size} \uBC14\uC774\uD2B8). \uC5C5\uB85C\uB4DC \uD55C\uB3C4 ${MAX_UPLOAD_BYTES} \uBC14\uC774\uD2B8.`,
+      `--file \uC774 \uB108\uBB34 \uD07D\uB2C8\uB2E4 (${stat4.size} \uBC14\uC774\uD2B8). \uC5C5\uB85C\uB4DC \uD55C\uB3C4 ${MAX_UPLOAD_BYTES} \uBC14\uC774\uD2B8.`,
       EXIT_PARAM_ERROR
     );
   }
   const fileBuffer = (0, import_node_fs5.readFileSync)(filePath);
-  const fileName = (0, import_node_path7.basename)(filePath);
+  const fileName = (0, import_node_path6.basename)(filePath);
   const { client, profileName } = await createDeployClient(opts.profile);
   const appKey = await resolveDeployAppKey(profileName);
   startSpinner("\uBC14\uC774\uB108\uB9AC \uC5C5\uB85C\uB4DC \uC911...");
@@ -4509,20 +5141,20 @@ function parsePositiveInt3(value, flag) {
   }
   return Number(value);
 }
-function assertWritable2(path5, force) {
+function assertWritable2(path4, force) {
   if (force) return;
   try {
-    (0, import_node_fs6.statSync)(path5);
+    (0, import_node_fs6.statSync)(path4);
   } catch (e) {
     if (e.code === "ENOENT") return;
     const reason = e.code ?? (e instanceof Error ? e.message : String(e));
     throw new NhnCloudCliError(
-      `-o \uACBD\uB85C\uB97C \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${path5} (${reason})`,
+      `-o \uACBD\uB85C\uB97C \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${path4} (${reason})`,
       EXIT_PARAM_ERROR
     );
   }
   throw new NhnCloudCliError(
-    `-o \uB300\uC0C1\uC774 \uC774\uBBF8 \uC874\uC7AC\uD569\uB2C8\uB2E4: ${path5}. \uB36E\uC5B4\uC4F0\uB824\uBA74 --force \uB97C \uC4F0\uC138\uC694.`,
+    `-o \uB300\uC0C1\uC774 \uC774\uBBF8 \uC874\uC7AC\uD569\uB2C8\uB2E4: ${path4}. \uB36E\uC5B4\uC4F0\uB824\uBA74 --force \uB97C \uC4F0\uC138\uC694.`,
     EXIT_PARAM_ERROR
   );
 }
@@ -4865,8 +5497,8 @@ var InstanceClient = class {
     return this.serverAction(id, { revertResize: null });
   }
   async listFlavors(params = {}) {
-    const path5 = params.detail ? "/flavors/detail" : "/flavors";
-    const url = `${this.computeEndpoint}${path5}`;
+    const path4 = params.detail ? "/flavors/detail" : "/flavors";
+    const url = `${this.computeEndpoint}${path4}`;
     const searchParams = {};
     if (params.minDisk !== void 0) searchParams["minDisk"] = params.minDisk;
     if (params.minRam !== void 0) searchParams["minRam"] = params.minRam;
@@ -5405,13 +6037,10 @@ async function toNetworkWriteError(err) {
     return base;
   }
   let reason = null;
-  try {
-    const body = await err.response.json();
-    const neutron = typeof body === "object" && body !== null ? body["NeutronError"] : void 0;
-    const message = typeof neutron === "object" && neutron !== null ? neutron["message"] : void 0;
-    if (typeof message === "string") reason = message;
-  } catch {
-  }
+  const body = await readHttpErrorBody(err);
+  const neutron = typeof body === "object" && body !== null ? body["NeutronError"] : void 0;
+  const message = typeof neutron === "object" && neutron !== null ? neutron["message"] : void 0;
+  if (typeof message === "string") reason = message;
   if (reason === null) return base;
   return new NhnCloudCliError(
     `${base.message}
@@ -6549,9 +7178,9 @@ var createCommand5 = new import_commander33.Command("create").description("\uC77
   }
   let userDataBase64;
   if (opts.userData !== void 0) {
-    let stat3;
+    let stat4;
     try {
-      stat3 = (0, import_node_fs7.statSync)(opts.userData);
+      stat4 = (0, import_node_fs7.statSync)(opts.userData);
     } catch (e) {
       const reason = e.code ?? (e instanceof Error ? e.message : String(e));
       throw new NhnCloudCliError(
@@ -6559,15 +7188,15 @@ var createCommand5 = new import_commander33.Command("create").description("\uC77
         EXIT_PARAM_ERROR
       );
     }
-    if (!stat3.isFile()) {
+    if (!stat4.isFile()) {
       throw new NhnCloudCliError(
         `--user-data \uAC00 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${opts.userData}`,
         EXIT_PARAM_ERROR
       );
     }
-    if (stat3.size > 49149) {
+    if (stat4.size > 49149) {
       throw new NhnCloudCliError(
-        `--user-data \uAC00 \uB108\uBB34 \uD07D\uB2C8\uB2E4 (${stat3.size} \uBC14\uC774\uD2B8). base64 \uC778\uCF54\uB529 \uD6C4 65535 \uBC14\uC774\uD2B8 \uD55C\uB3C4\uB77C raw 49149 \uBC14\uC774\uD2B8\uAE4C\uC9C0\uB9CC \uD5C8\uC6A9\uB429\uB2C8\uB2E4.`,
+        `--user-data \uAC00 \uB108\uBB34 \uD07D\uB2C8\uB2E4 (${stat4.size} \uBC14\uC774\uD2B8). base64 \uC778\uCF54\uB529 \uD6C4 65535 \uBC14\uC774\uD2B8 \uD55C\uB3C4\uB77C raw 49149 \uBC14\uC774\uD2B8\uAE4C\uC9C0\uB9CC \uD5C8\uC6A9\uB429\uB2C8\uB2E4.`,
         EXIT_PARAM_ERROR
       );
     }
@@ -6852,9 +7481,9 @@ var import_node_fs8 = require("fs");
 var import_node_crypto5 = require("crypto");
 var import_chalk12 = __toESM(require("chalk"));
 function resolvePublicKey(value) {
-  let stat3;
+  let stat4;
   try {
-    stat3 = (0, import_node_fs8.statSync)(value);
+    stat4 = (0, import_node_fs8.statSync)(value);
   } catch (e) {
     const err = e;
     if (err.code && err.code !== "ENOENT") {
@@ -6865,7 +7494,7 @@ function resolvePublicKey(value) {
     }
     return value;
   }
-  if (!stat3.isFile()) {
+  if (!stat4.isFile()) {
     throw new NhnCloudCliError(`--public-key \uAC00 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${value}`, EXIT_PARAM_ERROR);
   }
   return (0, import_node_fs8.readFileSync)(value, "utf-8").trim();
@@ -7172,12 +7801,12 @@ var HarborClient = class {
    * ky.get() 이 Response 를 반환하므로 .json() 과 .headers.get("link") 를 함께 사용한다
    * (체이닝하면 헤더를 못 본다 — 기존 NCR client 의 .json<T>() 체이닝 패턴과 다름).
    */
-  async getAllPages(path5) {
+  async getAllPages(path4) {
     const acc = [];
     let page = 1;
     try {
       for (; ; ) {
-        const url = `https://${this.host}${path5}?page=${page}&page_size=${PAGE_SIZE}`;
+        const url = `https://${this.host}${path4}?page=${page}&page_size=${PAGE_SIZE}`;
         const res = await import_ky13.default.get(url, {
           headers: this.basicAuthHeaders(),
           retry: 0,
@@ -7417,15 +8046,15 @@ function commandPath(command) {
   return names.join(" ");
 }
 function collectCommand(command) {
-  const path5 = commandPath(command);
-  if (!path5 || path5 === "help") return null;
+  const path4 = commandPath(command);
+  if (!path4 || path4 === "help") return null;
   return {
-    path: path5,
+    path: path4,
     description: command.description() || command.summary() || "",
     arguments: command.registeredArguments.map((arg) => arg.name()),
     options: command.options.filter((option) => !option.hidden).map((option) => option.flags),
     subcommands: command.commands.map((subcommand) => subcommand.name()).filter((name) => name !== "help"),
-    ...path5 === "commands" ? { metadata: true } : {}
+    ...path4 === "commands" ? { metadata: true } : {}
   };
 }
 function collectCommandCatalog(program2) {
@@ -7464,7 +8093,7 @@ function createCommandsCommand(program2) {
 var import_commander48 = require("commander");
 
 // src/commands/nks/helpers.ts
-var import_promises6 = require("fs/promises");
+var import_promises5 = require("fs/promises");
 
 // src/services/nks/client.ts
 var import_ky14 = __toESM(require("ky"));
@@ -7914,15 +8543,15 @@ var NksClient = class {
       throw toNhnCloudCliError(err);
     }
   }
-  async getFlatNamedResource(path5, errorMessage) {
-    const raw = await this.getJson(path5);
+  async getFlatNamedResource(path4, errorMessage) {
+    const raw = await this.getJson(path4);
     if (!isNksNamedResource(raw)) {
       throw new NhnCloudCliError(errorMessage, EXIT_API_ERROR);
     }
     return raw;
   }
-  async getJson(path5, searchParams) {
-    const url = `${this.nksEndpoint}${path5}`;
+  async getJson(path4, searchParams) {
+    const url = `${this.nksEndpoint}${path4}`;
     try {
       return await import_ky14.default.get(url, {
         headers: this.authHeaders(),
@@ -7934,15 +8563,15 @@ var NksClient = class {
       throw toNhnCloudCliError(err);
     }
   }
-  async requestUuid(method, path5, payload, errorMessage) {
-    const raw = await this.requestJson(method, path5, payload);
+  async requestUuid(method, path4, payload, errorMessage) {
+    const raw = await this.requestJson(method, path4, payload);
     if (!isNksUuidResponse(raw)) {
       throw new NhnCloudCliError(errorMessage, EXIT_API_ERROR);
     }
     return raw;
   }
-  async requestNoBody(method, path5, payload) {
-    const url = `${this.nksEndpoint}${path5}`;
+  async requestNoBody(method, path4, payload) {
+    const url = `${this.nksEndpoint}${path4}`;
     try {
       if (method === "delete") {
         await import_ky14.default.delete(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS });
@@ -7953,8 +8582,8 @@ var NksClient = class {
       throw toNhnCloudCliError(err);
     }
   }
-  async requestJson(method, path5, payload) {
-    const url = `${this.nksEndpoint}${path5}`;
+  async requestJson(method, path4, payload) {
+    const url = `${this.nksEndpoint}${path4}`;
     try {
       const options = { headers: this.authHeaders(), json: payload, retry: 0, timeout: DEFAULT_TIMEOUT_MS };
       return method === "post" ? await import_ky14.default.post(url, options).json() : await import_ky14.default.patch(url, options).json();
@@ -7993,13 +8622,13 @@ async function resolveClusterUuid(client, cluster) {
   }
   return uuid;
 }
-async function readJsonFile(path5) {
+async function readJsonFile(path4) {
   let raw;
   try {
-    raw = await (0, import_promises6.readFile)(path5, "utf-8");
+    raw = await (0, import_promises5.readFile)(path4, "utf-8");
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    throw new NhnCloudCliError(`JSON \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${path5} (${message})`, EXIT_PARAM_ERROR);
+    throw new NhnCloudCliError(`JSON \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${path4} (${message})`, EXIT_PARAM_ERROR);
   }
   try {
     const parsed = JSON.parse(raw);
@@ -8009,15 +8638,15 @@ async function readJsonFile(path5) {
     return parsed;
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    throw new NhnCloudCliError(`JSON \uD30C\uC77C \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4: ${path5} (${message})`, EXIT_PARAM_ERROR);
+    throw new NhnCloudCliError(`JSON \uD30C\uC77C \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4: ${path4} (${message})`, EXIT_PARAM_ERROR);
   }
 }
-async function readTextFile(path5) {
+async function readTextFile(path4) {
   try {
-    return await (0, import_promises6.readFile)(path5, "utf-8");
+    return await (0, import_promises5.readFile)(path4, "utf-8");
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    throw new NhnCloudCliError(`\uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${path5} (${message})`, EXIT_PARAM_ERROR);
+    throw new NhnCloudCliError(`\uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${path4} (${message})`, EXIT_PARAM_ERROR);
   }
 }
 function parsePositiveInteger(value, optionName) {
@@ -8058,7 +8687,7 @@ var supportsCommand = new import_commander48.Command("supports").description("NK
 });
 
 // src/commands/nks/cluster.ts
-var import_promises7 = require("fs/promises");
+var import_promises6 = require("fs/promises");
 var import_commander49 = require("commander");
 var import_chalk14 = __toESM(require("chalk"));
 var listCommand8 = new import_commander49.Command("list").description("NKS \uD074\uB7EC\uC2A4\uD130 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
@@ -8149,18 +8778,18 @@ async function confirmDangerousAction(message, yes) {
   }
   return ok;
 }
-async function writeKubeconfigFile(path5, contents, force) {
+async function writeKubeconfigFile(path4, contents, force) {
   try {
-    await (0, import_promises7.writeFile)(path5, contents, {
+    await (0, import_promises6.writeFile)(path4, contents, {
       encoding: "utf-8",
       mode: 384,
       flag: force ? "w" : "wx"
     });
-    await (0, import_promises7.chmod)(path5, 384);
+    await (0, import_promises6.chmod)(path4, 384);
   } catch (err) {
     if (err instanceof Error && "code" in err && err.code === "EEXIST") {
       throw new NhnCloudCliError(
-        `\uD30C\uC77C\uC774 \uC774\uBBF8 \uC874\uC7AC\uD569\uB2C8\uB2E4: ${path5}. \uB36E\uC5B4\uC4F0\uB824\uBA74 --force \uB97C \uC9C0\uC815\uD558\uC138\uC694.`,
+        `\uD30C\uC77C\uC774 \uC774\uBBF8 \uC874\uC7AC\uD569\uB2C8\uB2E4: ${path4}. \uB36E\uC5B4\uC4F0\uB824\uBA74 --force \uB97C \uC9C0\uC815\uD558\uC138\uC694.`,
         EXIT_PARAM_ERROR
       );
     }
@@ -8979,9 +9608,9 @@ async function resolveNcsClient(opts) {
   return { client: new NcsClient(accessToken, region, appKey), profileName };
 }
 function readJsonPayload(filePath) {
-  let stat3;
+  let stat4;
   try {
-    stat3 = (0, import_node_fs9.statSync)(filePath);
+    stat4 = (0, import_node_fs9.statSync)(filePath);
   } catch (err) {
     const reason = err.code ?? (err instanceof Error ? err.message : String(err));
     throw new NhnCloudCliError(
@@ -8989,12 +9618,12 @@ function readJsonPayload(filePath) {
       EXIT_PARAM_ERROR
     );
   }
-  if (!stat3.isFile()) {
+  if (!stat4.isFile()) {
     throw new NhnCloudCliError(`--file \uC774 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${filePath}`, EXIT_PARAM_ERROR);
   }
-  if (stat3.size > MAX_JSON_INPUT_BYTES) {
+  if (stat4.size > MAX_JSON_INPUT_BYTES) {
     throw new NhnCloudCliError(
-      `--file \uC774 \uB108\uBB34 \uD07D\uB2C8\uB2E4 (${stat3.size} \uBC14\uC774\uD2B8). JSON spec \uD55C\uB3C4 ${MAX_JSON_INPUT_BYTES} \uBC14\uC774\uD2B8.`,
+      `--file \uC774 \uB108\uBB34 \uD07D\uB2C8\uB2E4 (${stat4.size} \uBC14\uC774\uD2B8). JSON spec \uD55C\uB3C4 ${MAX_JSON_INPUT_BYTES} \uBC14\uC774\uD2B8.`,
       EXIT_PARAM_ERROR
     );
   }
@@ -9725,7 +10354,7 @@ var malwareCommand = new import_commander54.Command("malware").description("NCS
 var import_commander55 = require("commander");
 
 // src/commands/apigateway/helpers.ts
-var import_promises8 = require("fs/promises");
+var import_promises7 = require("fs/promises");
 
 // src/services/apigateway/client.ts
 var import_ky15 = __toESM(require("ky"));
@@ -10336,21 +10965,21 @@ function requireYes2(yes, operation) {
   }
   return true;
 }
-async function readPluginConfigFile(path5) {
+async function readPluginConfigFile(path4) {
   let fileStat;
   try {
-    fileStat = await (0, import_promises8.stat)(path5);
+    fileStat = await (0, import_promises7.stat)(path4);
   } catch (error) {
     const reason = fileErrorReason(error);
     throw new NhnCloudCliError(
-      `\uD50C\uB7EC\uADF8\uC778 \uC124\uC815 \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${JSON.stringify(path5)} (${JSON.stringify(reason)}).`,
+      `\uD50C\uB7EC\uADF8\uC778 \uC124\uC815 \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${JSON.stringify(path4)} (${JSON.stringify(reason)}).`,
       EXIT_PARAM_ERROR
     );
   }
   if (!fileStat.isFile()) {
     const reason = fileStat.isDirectory() ? "EISDIR" : "EINVAL";
     throw new NhnCloudCliError(
-      `\uD50C\uB7EC\uADF8\uC778 \uC124\uC815 \uACBD\uB85C\uAC00 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${JSON.stringify(path5)} (${reason}).`,
+      `\uD50C\uB7EC\uADF8\uC778 \uC124\uC815 \uACBD\uB85C\uAC00 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${JSON.stringify(path4)} (${reason}).`,
       EXIT_PARAM_ERROR
     );
   }
@@ -10362,11 +10991,11 @@ async function readPluginConfigFile(path5) {
   }
   let raw;
   try {
-    raw = await (0, import_promises8.readFile)(path5, "utf-8");
+    raw = await (0, import_promises7.readFile)(path4, "utf-8");
   } catch (error) {
     const reason = fileErrorReason(error);
     throw new NhnCloudCliError(
-      `\uD50C\uB7EC\uADF8\uC778 \uC124\uC815 \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${JSON.stringify(path5)} (${JSON.stringify(reason)}).`,
+      `\uD50C\uB7EC\uADF8\uC778 \uC124\uC815 \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${JSON.stringify(path4)} (${JSON.stringify(reason)}).`,
       EXIT_PARAM_ERROR
     );
   }
@@ -10377,7 +11006,7 @@ async function readPluginConfigFile(path5) {
       error instanceof Error ? error.message : String(error)
     );
     throw new NhnCloudCliError(
-      `\uD50C\uB7EC\uADF8\uC778 \uC124\uC815 JSON \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4: ${JSON.stringify(path5)} (${reason}).`,
+      `\uD50C\uB7EC\uADF8\uC778 \uC124\uC815 JSON \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4: ${JSON.stringify(path4)} (${reason}).`,
       EXIT_PARAM_ERROR
     );
   }
@@ -10821,7 +11450,7 @@ var setMethodPluginCommand = addApiGatewayOptions(
 var resourceCommand = new import_commander56.Command("resource").description("API Gateway resource \uC870\uD68C \uBC0F \uBCC0\uACBD \uBA85\uB839").addCommand(listCommand13).addCommand(parametersCommand).addCommand(responsesCommand).addCommand(setPathPluginCommand).addCommand(setMethodPluginCommand);
 
 // src/commands/apigateway/stage.ts
-var import_promises9 = require("fs/promises");
+var import_promises8 = require("fs/promises");
 var import_commander58 = require("commander");
 
 // src/commands/apigateway/deploy.ts
@@ -11028,9 +11657,9 @@ function fileErrorReason2(error) {
   }
   return error instanceof Error ? error.message : String(error);
 }
-async function writeStageSwaggerFile(path5, swagger, force) {
+async function writeStageSwaggerFile(path4, swagger, force) {
   try {
-    await (0, import_promises9.writeFile)(path5, JSON.stringify(swagger, null, 2) + "\n", {
+    await (0, import_promises8.writeFile)(path4, JSON.stringify(swagger, null, 2) + "\n", {
       encoding: "utf-8",
       flag: force ? "w" : "wx"
     });
@@ -11038,7 +11667,7 @@ async function writeStageSwaggerFile(path5, swagger, force) {
     const reason = fileErrorReason2(error);
     const guidance = reason === "EEXIST" ? " \uB36E\uC5B4\uC4F0\uB824\uBA74 --force \uB97C \uC9C0\uC815\uD558\uC138\uC694." : "";
     throw new NhnCloudCliError(
-      `Swagger \uD30C\uC77C \uC800\uC7A5 \uC2E4\uD328: ${JSON.stringify(path5)} (${JSON.stringify(reason)}).${guidance}`,
+      `Swagger \uD30C\uC77C \uC800\uC7A5 \uC2E4\uD328: ${JSON.stringify(path4)} (${JSON.stringify(reason)}).${guidance}`,
       EXIT_PARAM_ERROR
     );
   }
@@ -11200,19 +11829,1343 @@ var importResourcesCommand = addApiGatewayOptions3(
 });
 var stageCommand = new import_commander58.Command("stage").description("API Gateway stage \uC870\uD68C \uBC0F \uBCC0\uACBD \uBA85\uB839").addCommand(listCommand15).addCommand(swaggerCommand).addCommand(resourcesCommand).addCommand(updateCommand3).addCommand(importResourcesCommand).addCommand(deployCommand);
 
-// src/commands/loadbalancer/list.ts
+// src/commands/skm/confirm.ts
 var import_commander59 = require("commander");
 
-// src/commands/loadbalancer/helpers.ts
+// src/commands/skm/helpers.ts
 var import_node_net2 = require("net");
 
-// src/services/loadbalancer/client.ts
+// src/services/skm/client.ts
 var import_ky16 = __toESM(require("ky"));
 
-// src/services/loadbalancer/types.ts
+// src/services/skm/types.ts
 function isRecord3(value) {
   return typeof value === "object" && value !== null;
 }
+function hasStrings(obj, keys) {
+  return keys.every((key) => typeof obj[key] === "string");
+}
+function hasNumbers(obj, keys) {
+  return keys.every((key) => typeof obj[key] === "number");
+}
+function hasOptional(obj, keys, type) {
+  return keys.every((key) => obj[key] === void 0 || obj[key] === null || typeof obj[key] === type);
+}
+var AUDIT_FIELDS = ["creationUser", "creationDatetime", "lastChangeUser", "lastChangeDatetime"];
+function isSkmClientInfo(value) {
+  if (!isRecord3(value)) return false;
+  return typeof value["clientIp"] === "string" && typeof value["clientSentCertificate"] === "boolean" && hasOptional(value, ["clientMacHeader"], "string");
+}
+function isSkmKeyStore(value) {
+  if (!isRecord3(value)) return false;
+  return typeof value["keyStoreId"] === "number" && hasStrings(value, ["name", "ip4AuthUse", "macAuthUse", "certificateAuthUse"]) && hasOptional(value, ["description", ...AUDIT_FIELDS], "string");
+}
+function isSkmKey(value) {
+  if (!isRecord3(value)) return false;
+  return hasStrings(value, ["keyId", "name", "keyType"]) && typeof value["currentKeyValueVersion"] === "number" && hasOptional(value, ["autoRotationPeriod"], "number") && hasOptional(
+    value,
+    ["description", "nextAutoRotationDate", "lastAccessDatetime", "deletionDatetime", ...AUDIT_FIELDS],
+    "string"
+  );
+}
+function isSkmAuthDetail(value) {
+  if (!isRecord3(value)) return false;
+  return (typeof value["value"] === "string" || typeof value["name"] === "string") && hasOptional(
+    value,
+    [
+      "value",
+      "name",
+      "password",
+      "description",
+      "expirationDate",
+      "lastAccessDatetime",
+      "deletionDatetime",
+      ...AUDIT_FIELDS
+    ],
+    "string"
+  );
+}
+function isSkmEncryptResult(value) {
+  return isRecord3(value) && hasStrings(value, ["ciphertext"]) && hasNumbers(value, ["keyVersion"]);
+}
+function isSkmDecryptResult(value) {
+  return isRecord3(value) && hasStrings(value, ["plaintext"]) && hasNumbers(value, ["keyVersion"]);
+}
+function isSkmLocalKey(value) {
+  return isRecord3(value) && hasStrings(value, ["localKeyPlaintext", "localKeyCiphertext"]) && hasNumbers(value, ["keyVersion"]);
+}
+function isSkmSymmetricKey(value) {
+  return isRecord3(value) && hasStrings(value, ["symmetricKey"]) && hasNumbers(value, ["keyVersion"]);
+}
+function isSkmSignResult(value) {
+  return isRecord3(value) && hasStrings(value, ["signature"]) && hasNumbers(value, ["keyVersion"]);
+}
+function isSkmStandardSignResult(value) {
+  return isRecord3(value) && hasStrings(value, ["signature", "algorithm", "hashAlgorithm", "mgfAlgorithm"]) && hasNumbers(value, ["keyVersion", "saltLength"]);
+}
+function isSkmVerifyResult(value) {
+  return isRecord3(value) && typeof value["result"] === "boolean" && hasNumbers(value, ["keyVersion"]);
+}
+function isSkmAsymmetricKeyMaterial(value) {
+  return isRecord3(value) && hasStrings(value, ["keyType", "key", "encodedKey"]) && hasOptional(value, ["standardEncodedKey"], "string") && hasNumbers(value, ["keyVersion"]);
+}
+function isSkmCreatedKey(value) {
+  return isRecord3(value) && hasStrings(value, ["keyId", "keyStatus"]);
+}
+function isSkmCreatedKeyStore(value) {
+  if (!isRecord3(value)) return false;
+  return typeof value["keyStoreId"] === "number" && hasStrings(value, ["name", "ip4AuthUse", "macAuthUse", "certificateAuthUse"]) && hasOptional(value, ["description", "authMode"], "string");
+}
+function isSkmUpdatedSecret(value) {
+  if (!isRecord3(value)) return false;
+  return hasStrings(value, ["keyId", "name"]) && hasOptional(value, ["description", "secretValue", ...AUDIT_FIELDS], "string");
+}
+function isSkmDeletion(value) {
+  return isRecord3(value) && hasStrings(value, ["keyId", "deletionDateTime"]);
+}
+function hasAuthIdentifier(obj) {
+  return (typeof obj["value"] === "string" || typeof obj["name"] === "string") && hasOptional(obj, ["value", "name"], "string");
+}
+function isSkmAuthAdded(value) {
+  return isRecord3(value) && hasAuthIdentifier(value) && hasOptional(value, ["description"], "string");
+}
+function isSkmAuthDeletion(value) {
+  return isRecord3(value) && hasAuthIdentifier(value) && hasStrings(value, ["deletionDateTime"]);
+}
+
+// src/services/skm/client.ts
+var KEY_PAGE_SIZE = 100;
+var STANDARD_SIGN_ALGORITHM = "RSASSA-PSS";
+var AUTH_PATHS = {
+  ipv4: { path: "ips", field: "ipv4List" },
+  mac: { path: "macs", field: "macList" },
+  certificate: { path: "certificates", field: "certificateList" }
+};
+var AUTH_WRITE_PATH = {
+  ipv4: "ipv4s",
+  mac: "macs",
+  certificate: "certificates"
+};
+function isRecord4(value) {
+  return typeof value === "object" && value !== null;
+}
+function isEnvelope(value) {
+  if (!isRecord4(value)) return false;
+  const header = value["header"];
+  return isRecord4(header) && typeof header["isSuccessful"] === "boolean";
+}
+function arrayOf(guard) {
+  return (value) => Array.isArray(value) && value.every(guard);
+}
+function isString(value) {
+  return typeof value === "string";
+}
+function withDescription(body, description) {
+  return description === void 0 ? body : { ...body, description };
+}
+function authDeletionBody(type, keyStoreName, value) {
+  return type === "certificate" ? { keyStoreName, name: value } : { keyStoreName, value };
+}
+function keyStoreBody(input) {
+  const { name, description, ip4AuthUse, macAuthUse, certificateAuthUse, authMode } = input;
+  return withDescription({ name, ip4AuthUse, macAuthUse, certificateAuthUse, authMode }, description);
+}
+function keyVersionParams(keyVersion) {
+  return keyVersion === void 0 ? {} : { searchParams: { keyVersion } };
+}
+async function toSkmError(err) {
+  if (!(err instanceof import_ky16.HTTPError)) return toNhnCloudCliError(err);
+  let resultMessage = null;
+  const body = await readHttpErrorBody(err);
+  const header = isRecord4(body) ? body["header"] : void 0;
+  const message = isRecord4(header) ? header["resultMessage"] : void 0;
+  if (typeof message === "string") resultMessage = message;
+  if (resultMessage === null) return toNhnCloudCliError(err);
+  const status = err.response.status;
+  return new NhnCloudCliError(
+    `API \uD638\uCD9C \uC2E4\uD328 (${status}): ${sanitizeForTerminal(resultMessage)}`,
+    status === 401 || status === 403 ? EXIT_AUTH_ERROR : EXIT_API_ERROR
+  );
+}
+var SkmClient = class {
+  baseUrl;
+  headers;
+  constructor(accessToken, environment, appKey, macAddress) {
+    this.baseUrl = `${endpointFor("skm", environment)}/keymanager/v1.3/appkey/${encodeURIComponent(appKey)}`;
+    this.headers = { "X-NHN-Authorization": `Bearer ${accessToken}` };
+    if (macAddress !== void 0) {
+      this.headers["X-TOAST-CLIENT-MAC-ADDR"] = macAddress;
+    }
+  }
+  /**
+   * 요청을 보내고 봉투 형태인지만 확인해 반환한다. 성공 판정은 호출부가 한다.
+   * 쓰기 요청도 중복 실행을 막으려고 재시도하지 않는다.
+   */
+  async send(method, path4, options) {
+    let response;
+    try {
+      response = await import_ky16.default[method](`${this.baseUrl}${path4}`, {
+        headers: this.headers,
+        ...options,
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS
+      }).json();
+    } catch (err) {
+      throw await toSkmError(err);
+    }
+    if (!isEnvelope(response)) {
+      throw new NhnCloudCliError("Secure Key Manager \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: header", EXIT_API_ERROR);
+    }
+    return response;
+  }
+  /**
+   * 요청을 보내고 봉투를 벗긴 뒤 body 또는 body[field] 를 가드로 검사해 반환한다.
+   * field 가 null 이면 body 전체를 검사한다.
+   */
+  async request(method, path4, field, guard, options = {}) {
+    const body = unwrap(await this.send(method, path4, options));
+    const value = field === null ? body : isRecord4(body) ? body[field] : void 0;
+    if (!guard(value)) {
+      throw new NhnCloudCliError(`Secure Key Manager \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: ${field ?? "body"}`, EXIT_API_ERROR);
+    }
+    return value;
+  }
+  /**
+   * body 가 null 이거나 없는 응답(키 저장소 수정·삭제)은 검사할 필드가 없어 헤더만 본다 (ADR-040).
+   * isSuccessful 이 false 면 unwrapHeader 가 NhnEnvelopeError 를 던진다.
+   */
+  async requestHeaderOnly(method, path4, options = {}) {
+    unwrapHeader(await this.send(method, path4, options));
+  }
+  keyPath(prefix, keyId, action) {
+    return `/${prefix}/${encodeURIComponent(keyId)}/${action}`;
+  }
+  /** 호출 클라이언트의 IP·MAC·인증서 전송 여부를 확인한다. */
+  confirm() {
+    return this.request("get", "/confirm", null, isSkmClientInfo);
+  }
+  listKeyStores() {
+    return this.request("get", "/keystores", "keyStoreList", arrayOf(isSkmKeyStore), {
+      searchParams: { detail: "true" }
+    });
+  }
+  getKeyStore(keyStoreId) {
+    return this.request("get", `/keystores/${keyStoreId}`, null, isSkmKeyStore);
+  }
+  /**
+   * 모든 페이지의 키를 모은다.
+   * 서버가 pageNumber 를 무시하면 같은 페이지가 반복되므로, 첫 keyId 가 직전 페이지와 같으면 중단한다.
+   */
+  async listKeys(keyStoreId, filter = {}) {
+    const keys = [];
+    let previousFirstKeyId;
+    for (let pageNumber = 1; ; pageNumber++) {
+      const searchParams = { detail: "true", pageNumber, pageSize: KEY_PAGE_SIZE };
+      if (filter.type) searchParams["type"] = filter.type;
+      if (filter.name) searchParams["name"] = filter.name;
+      if (filter.status) searchParams["status"] = filter.status;
+      const page = await this.request("get", `/keystores/${keyStoreId}/keys`, "keyList", arrayOf(isSkmKey), {
+        searchParams
+      });
+      const firstKeyId = page[0]?.keyId;
+      if (firstKeyId !== void 0 && firstKeyId === previousFirstKeyId) {
+        throw new NhnCloudCliError(
+          `Secure Key Manager \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: ${pageNumber} \uD398\uC774\uC9C0\uAC00 \uC9C1\uC804 \uD398\uC774\uC9C0\uC640 \uAC19\uC740 \uD0A4\uB85C \uC2DC\uC791\uD569\uB2C8\uB2E4.`,
+          EXIT_API_ERROR
+        );
+      }
+      keys.push(...page);
+      if (page.length < KEY_PAGE_SIZE) return keys;
+      previousFirstKeyId = firstKeyId;
+    }
+  }
+  getKey(keyStoreId, keyId) {
+    return this.request("get", `/keystores/${keyStoreId}/keys/${encodeURIComponent(keyId)}`, null, isSkmKey);
+  }
+  listAuths(keyStoreId, type) {
+    const { path: path4, field } = AUTH_PATHS[type];
+    return this.request("get", `/keystores/${keyStoreId}/${path4}`, field, arrayOf(isString));
+  }
+  getAuth(keyStoreId, type, value) {
+    const { path: path4, field } = AUTH_PATHS[type];
+    return this.request("get", `/keystores/${keyStoreId}/${path4}`, field, arrayOf(isSkmAuthDetail), {
+      searchParams: { value }
+    });
+  }
+  getSecret(keyId) {
+    return this.request("get", `/secrets/${encodeURIComponent(keyId)}`, "secret", isString);
+  }
+  encrypt(keyId, plaintext) {
+    return this.request("post", this.keyPath("symmetric-keys", keyId, "encrypt"), null, isSkmEncryptResult, {
+      json: { plaintext }
+    });
+  }
+  decrypt(keyId, ciphertext) {
+    return this.request("post", this.keyPath("symmetric-keys", keyId, "decrypt"), null, isSkmDecryptResult, {
+      json: { ciphertext }
+    });
+  }
+  createLocalKey(keyId) {
+    return this.request("post", this.keyPath("symmetric-keys", keyId, "create-local-key"), null, isSkmLocalKey);
+  }
+  getSymmetricKey(keyId, keyVersion) {
+    return this.request(
+      "get",
+      this.keyPath("symmetric-keys", keyId, "symmetric-key"),
+      null,
+      isSkmSymmetricKey,
+      keyVersionParams(keyVersion)
+    );
+  }
+  sign(keyId, plaintext) {
+    return this.request("post", this.keyPath("asymmetric-keys", keyId, "sign"), null, isSkmSignResult, {
+      json: { plaintext }
+    });
+  }
+  verify(keyId, plaintext, signature) {
+    return this.request("post", this.keyPath("asymmetric-keys", keyId, "verify"), null, isSkmVerifyResult, {
+      json: { plaintext, signature }
+    });
+  }
+  signStandard(keyId, plaintextBase64) {
+    return this.request(
+      "post",
+      this.keyPath("asymmetric-keys", keyId, "sign-standard"),
+      null,
+      isSkmStandardSignResult,
+      { json: { plaintext: plaintextBase64, algorithm: STANDARD_SIGN_ALGORITHM } }
+    );
+  }
+  verifyStandard(keyId, plaintextBase64, signature, keyVersion) {
+    return this.request("post", this.keyPath("asymmetric-keys", keyId, "verify-standard"), null, isSkmVerifyResult, {
+      json: { plaintext: plaintextBase64, signature, algorithm: STANDARD_SIGN_ALGORITHM, keyVersion }
+    });
+  }
+  getPrivateKey(keyId, keyVersion) {
+    return this.request(
+      "get",
+      this.keyPath("asymmetric-keys", keyId, "privateKey"),
+      null,
+      isSkmAsymmetricKeyMaterial,
+      keyVersionParams(keyVersion)
+    );
+  }
+  getPublicKey(keyId, keyVersion) {
+    return this.request(
+      "get",
+      this.keyPath("asymmetric-keys", keyId, "publicKey"),
+      null,
+      isSkmAsymmetricKeyMaterial,
+      keyVersionParams(keyVersion)
+    );
+  }
+  createSecret(keyStoreName, name, description, secretValue) {
+    return this.request("post", "/keys/secrets/create", null, isSkmCreatedKey, {
+      json: withDescription({ keyStoreName, name, secretValue }, description)
+    });
+  }
+  /** 자동 회전 주기의 단위가 문서에 없어 항상 0(자동 회전 안 함)을 보낸다 (ADR-040). */
+  createSymmetricKey(keyStoreName, name, description) {
+    return this.request("post", "/keys/symmetric-keys/create", null, isSkmCreatedKey, {
+      json: withDescription({ keyStoreName, name, autoRotationPeriod: 0 }, description)
+    });
+  }
+  /** 자동 회전 주기의 단위가 문서에 없어 항상 0(자동 회전 안 함)을 보낸다 (ADR-040). */
+  createAsymmetricKey(keyStoreName, name, description) {
+    return this.request("post", "/keys/asymmetric-keys/create", null, isSkmCreatedKey, {
+      json: withDescription({ keyStoreName, name, autoRotationPeriod: 0 }, description)
+    });
+  }
+  updateSecret(keyId, secretValue) {
+    return this.request("put", `/secrets/${encodeURIComponent(keyId)}`, null, isSkmUpdatedSecret, {
+      json: { secretValue }
+    });
+  }
+  /** 7일 뒤 삭제를 예약한다. */
+  scheduleKeyDeletion(keyId) {
+    return this.request("put", this.keyPath("keys", keyId, "delete"), null, isSkmDeletion);
+  }
+  /** 삭제 예약된 키를 즉시 삭제한다. 되돌릴 수 없다. */
+  deleteKeyNow(keyId) {
+    return this.request("delete", `/keys/${encodeURIComponent(keyId)}`, null, isSkmDeletion);
+  }
+  createKeyStore(input) {
+    return this.request("post", "/keystores", null, isSkmCreatedKeyStore, { json: keyStoreBody(input) });
+  }
+  /** 전체 교체 API 라 주지 않은 값은 호출부가 현재 값으로 채워 넘긴다 (ADR-040). */
+  updateKeyStore(keyStoreId, input) {
+    return this.requestHeaderOnly("put", `/keystores/${keyStoreId}`, { json: keyStoreBody(input) });
+  }
+  deleteKeyStore(keyStoreId) {
+    return this.requestHeaderOnly("delete", `/keystores/${keyStoreId}`);
+  }
+  addAuth(type, keyStoreName, value, description) {
+    return this.request("post", `/auths/${AUTH_WRITE_PATH[type]}`, null, isSkmAuthAdded, {
+      json: withDescription({ keyStoreName, value }, description)
+    });
+  }
+  addCertificate(keyStoreName, name, password, lifeTime, description) {
+    return this.request("post", `/auths/${AUTH_WRITE_PATH.certificate}`, null, isSkmAuthAdded, {
+      json: withDescription({ keyStoreName, name, password, lifeTime }, description)
+    });
+  }
+  /** 7일 뒤 삭제를 예약한다. */
+  scheduleAuthDeletion(type, keyStoreName, value) {
+    return this.request("put", `/auths/${AUTH_WRITE_PATH[type]}/delete`, null, isSkmAuthDeletion, {
+      json: authDeletionBody(type, keyStoreName, value)
+    });
+  }
+  /** 삭제 예약된 인증 정보를 즉시 삭제한다. 되돌릴 수 없다. */
+  deleteAuthNow(type, keyStoreName, value) {
+    return this.request("post", `/auths/${AUTH_WRITE_PATH[type]}/delete`, null, isSkmAuthDeletion, {
+      json: authDeletionBody(type, keyStoreName, value)
+    });
+  }
+};
+
+// src/commands/skm/helpers.ts
+var MAC_ADDRESS_PATTERN = /^[0-9A-Fa-f]{2}(:[0-9A-Fa-f]{2}){5}$/;
+var KEY_NAME_MAX_LENGTH = 100;
+var KEY_TYPES = {
+  secret: "SECRET",
+  "symmetric-key": "SYMMETRIC_KEY",
+  "asymmetric-key": "ASYMMETRIC_KEY"
+};
+var AUTH_TYPES = ["ipv4", "mac", "certificate"];
+function withSkmOptions(command) {
+  return command.option("--mac-address <mac>", "\uD0A4 \uC800\uC7A5\uC18C MAC \uC778\uC99D\uC5D0 \uC4F8 \uD074\uB77C\uC774\uC5B8\uD2B8 MAC \uC8FC\uC18C (X-TOAST-CLIENT-MAC-ADDR)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984");
+}
+function withTypeOption(command) {
+  return command.requiredOption("--type <type>", "\uC778\uC99D \uC815\uBCF4 \uC885\uB958 (ipv4|mac|certificate)");
+}
+function parseMacAddressOption(value) {
+  if (value === void 0) return void 0;
+  if (!MAC_ADDRESS_PATTERN.test(value)) {
+    throw new NhnCloudCliError(
+      `--mac-address\uB294 aa:bb:cc:dd:ee:ff \uD615\uC2DD\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4 (\uC785\uB825: ${JSON.stringify(value)}).`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return value.toLowerCase();
+}
+function parseKeyStoreId(value) {
+  return parseNonNegativeIntegerOption(parseRequiredArgument(value, "keystore-id"), "<keystore-id>");
+}
+function parseAuthTypeOption(value) {
+  const found = AUTH_TYPES.find((type) => type === value);
+  if (!found) {
+    throw new NhnCloudCliError(
+      `--type\uC740 ipv4, mac, certificate \uC911 \uD558\uB098\uC5EC\uC57C \uD569\uB2C8\uB2E4 (\uC785\uB825: ${JSON.stringify(value)}).`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return found;
+}
+function parseAuthListOption(value) {
+  const items = value.split(",").map((item) => item.trim());
+  if (items.some((item) => !AUTH_TYPES.some((type) => type === item))) {
+    throw new NhnCloudCliError(
+      `--auth\uB294 ipv4, mac, certificate\uB97C \uC27C\uD45C\uB85C \uB098\uC5F4\uD574\uC57C \uD569\uB2C8\uB2E4 (\uC785\uB825: ${JSON.stringify(value)}).`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  const flag = (type) => items.includes(type) ? "Y" : "N";
+  return { ip4AuthUse: flag("ipv4"), macAuthUse: flag("mac"), certificateAuthUse: flag("certificate") };
+}
+function parseAuthModeOption(value) {
+  const upper = value.toUpperCase();
+  if (upper !== "AND" && upper !== "OR") {
+    throw new NhnCloudCliError(
+      `--auth-mode\uB294 and \uB610\uB294 or\uC5EC\uC57C \uD569\uB2C8\uB2E4 (\uC785\uB825: ${JSON.stringify(value)}).`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return upper;
+}
+function parseDescriptionOption(value, maxLength) {
+  const trimmed = value?.trim();
+  if (!trimmed) return void 0;
+  if (trimmed.length > maxLength) {
+    throw new NhnCloudCliError(`--description\uC740 ${maxLength}\uC790 \uC774\uD558\uC5EC\uC57C \uD569\uB2C8\uB2E4.`, EXIT_PARAM_ERROR);
+  }
+  return trimmed;
+}
+function isIpv4OrCidr2(value) {
+  const [address, prefix, ...rest] = value.split("/");
+  if (rest.length > 0 || address === void 0 || (0, import_node_net2.isIP)(address) !== 4) return false;
+  return prefix === void 0 || /^(\d|[12]\d|3[0-2])$/.test(prefix);
+}
+function parseAuthValue(type, value) {
+  if (type === "ipv4") {
+    if (!isIpv4OrCidr2(value)) {
+      throw new NhnCloudCliError(
+        `IPv4 \uC8FC\uC18C\uB098 CIDR \uB300\uC5ED \uD615\uC2DD\uC774 \uC544\uB2D9\uB2C8\uB2E4 (\uC785\uB825: ${JSON.stringify(value)}).`,
+        EXIT_PARAM_ERROR
+      );
+    }
+    return value;
+  }
+  if (type === "mac") {
+    if (!MAC_ADDRESS_PATTERN.test(value)) {
+      throw new NhnCloudCliError(
+        `MAC \uC8FC\uC18C\uB294 aa:bb:cc:dd:ee:ff \uD615\uC2DD\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4 (\uC785\uB825: ${JSON.stringify(value)}).`,
+        EXIT_PARAM_ERROR
+      );
+    }
+    return value.toLowerCase();
+  }
+  const name = value.trim();
+  if (!name) {
+    throw new NhnCloudCliError("\uC778\uC99D\uC11C \uC774\uB984\uC774 \uBE44\uC5B4 \uC788\uC2B5\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  return name;
+}
+function parseKeyTypeOption(value) {
+  if (value === void 0) return void 0;
+  const found = Object.hasOwn(KEY_TYPES, value) ? KEY_TYPES[value] : void 0;
+  if (!found) {
+    throw new NhnCloudCliError(
+      `--type\uC740 secret, symmetric-key, asymmetric-key \uC911 \uD558\uB098\uC5EC\uC57C \uD569\uB2C8\uB2E4 (\uC785\uB825: ${JSON.stringify(value)}).`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return found;
+}
+function parseKeyStatusOption(value) {
+  if (value === void 0) return void 0;
+  if (value !== "active" && value !== "inactive") {
+    throw new NhnCloudCliError(
+      `--status\uB294 active \uB610\uB294 inactive\uC5EC\uC57C \uD569\uB2C8\uB2E4 (\uC785\uB825: ${JSON.stringify(value)}).`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return value;
+}
+function parseKeyNameOption(value) {
+  if (value === void 0) return void 0;
+  const trimmed = value.trim();
+  if (!trimmed) {
+    throw new NhnCloudCliError("--name\uC740 \uBE44\uC5B4 \uC788\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  if (trimmed.length > KEY_NAME_MAX_LENGTH) {
+    throw new NhnCloudCliError(`--name\uC740 ${KEY_NAME_MAX_LENGTH}\uC790 \uC774\uD558\uC5EC\uC57C \uD569\uB2C8\uB2E4.`, EXIT_PARAM_ERROR);
+  }
+  return trimmed;
+}
+async function resolveSkmClient(opts) {
+  const profileName = await resolveProfileName(opts.profile);
+  const appKey = await resolveServiceAppKey(
+    "skm",
+    profileName,
+    "Secure Key Manager appkey\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4. nhncloud configure --skm-appkey <key>\uB85C \uC124\uC815\uD558\uC138\uC694."
+  );
+  const uak = await getUserAccessKey(profileName);
+  const environment = await getProfileEnvironment(profileName);
+  const accessToken = await getAccessToken(profileName, uak.id, uak.secret, false, environment);
+  return { client: new SkmClient(accessToken, environment, appKey, opts.macAddress), profileName };
+}
+function maskAuthDetail(detail) {
+  if (typeof detail.password !== "string") return detail;
+  return { ...detail, password: "***" };
+}
+function formatCell(value) {
+  if (value === null || value === void 0) return "-";
+  return sanitizeForTerminal(String(value));
+}
+function printSkmValue(opts, value, raw) {
+  if (opts.json) {
+    printJson(raw);
+  } else if (opts.quiet) {
+    process.stdout.write(value + "\n");
+  } else {
+    process.stdout.write(sanitizeMultilineForTerminal(value) + "\n");
+  }
+}
+async function resolveKeyStoreName(client, keyStoreId) {
+  const keyStore = await client.getKeyStore(keyStoreId);
+  return keyStore.name;
+}
+function outputSkmWriteResult(opts, result, ids) {
+  output(opts, {
+    headers: ["field", "value"],
+    rows: Object.entries(result).map(([key, value]) => [key, formatCell(value)]),
+    raw: result,
+    ids
+  });
+}
+function parseKeyVersionOption(value) {
+  return parseNonNegativeIntegerOption(value, "--key-version");
+}
+async function withSkmSpinner(text, call) {
+  startSpinner(text);
+  let result;
+  try {
+    result = await call();
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  return result;
+}
+
+// src/commands/skm/confirm.ts
+var confirmCommand = withSkmOptions(
+  new import_commander59.Command("confirm").description("SKM \uC11C\uBC84\uAC00 \uBCF8 \uD074\uB77C\uC774\uC5B8\uD2B8 IP, MAC \uD5E4\uB354\uC640 \uC778\uC99D\uC11C \uC0AC\uC6A9 \uC5EC\uBD80\uB97C \uC870\uD68C\uD55C\uB2E4")
+).action(async (_opts, command) => {
+  const opts = command.optsWithGlobals();
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const info = await withSkmSpinner("SKM \uD074\uB77C\uC774\uC5B8\uD2B8 \uC815\uBCF4 \uC870\uD68C \uC911...", () => client.confirm());
+  output(opts, {
+    headers: ["field", "value"],
+    rows: [
+      ["clientIp", formatCell(info.clientIp)],
+      ["clientMacHeader", formatCell(info.clientMacHeader)],
+      ["clientSentCertificate", formatCell(info.clientSentCertificate)]
+    ],
+    raw: info,
+    ids: [formatCell(info.clientIp)]
+  });
+});
+
+// src/commands/skm/keystore.ts
+var import_commander61 = require("commander");
+
+// src/commands/skm/keystore-manage.ts
+var import_commander60 = require("commander");
+
+// src/commands/skm/input.ts
+var import_node_fs10 = require("fs");
+var processStdin = {
+  get isTTY() {
+    return process.stdin.isTTY;
+  },
+  read: () => (0, import_node_fs10.readFileSync)(0)
+};
+function assertWithinLimit(size, spec) {
+  if (size > spec.maxBytes) {
+    throw new NhnCloudCliError(
+      `${spec.label}\uAC00 \uB108\uBB34 \uD07D\uB2C8\uB2E4: ${size}\uBC14\uC774\uD2B8 (\uD55C\uB3C4 ${spec.maxBytes}\uBC14\uC774\uD2B8).`,
+      EXIT_PARAM_ERROR
+    );
+  }
+}
+function readInputFile(file, spec) {
+  let stat4;
+  try {
+    stat4 = (0, import_node_fs10.statSync)(file);
+  } catch (e) {
+    const reason = e.code ?? (e instanceof Error ? e.message : String(e));
+    throw new NhnCloudCliError(`${spec.label} \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${file} (${reason})`, EXIT_PARAM_ERROR);
+  }
+  if (!stat4.isFile()) {
+    throw new NhnCloudCliError(`${spec.label} \uD30C\uC77C\uC774 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${file}`, EXIT_PARAM_ERROR);
+  }
+  assertWithinLimit(stat4.size, spec);
+  return (0, import_node_fs10.readFileSync)(file);
+}
+function readStdin(stdin, spec) {
+  try {
+    return stdin.read();
+  } catch (e) {
+    const reason = e.code ?? (e instanceof Error ? e.message : String(e));
+    throw new NhnCloudCliError(`${spec.label}\uB97C \uD45C\uC900 \uC785\uB825\uC5D0\uC11C \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4 (${reason}).`, EXIT_PARAM_ERROR);
+  }
+}
+function readSkmInput(source, spec, stdin = processStdin) {
+  const fileFlag = spec.fileFlag ?? "--file";
+  if (source.text !== void 0 && source.file !== void 0) {
+    throw new NhnCloudCliError(`${spec.textFlag}\uC640 ${fileFlag}\uC740 \uD568\uAED8 \uC9C0\uC815\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.`, EXIT_PARAM_ERROR);
+  }
+  let input;
+  if (source.text !== void 0) {
+    input = Buffer.from(source.text, "utf-8");
+  } else if (source.file !== void 0) {
+    input = readInputFile(source.file, spec);
+  } else if (!stdin.isTTY) {
+    input = readStdin(stdin, spec);
+  } else {
+    throw new NhnCloudCliError(
+      `${spec.label}\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4. ${spec.textFlag} <\uAC12>, ${fileFlag} <\uACBD\uB85C>, \uD45C\uC900 \uC785\uB825(\uD30C\uC774\uD504) \uC911 \uD558\uB098\uB85C \uC804\uB2EC\uD558\uC138\uC694.`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  assertWithinLimit(input.length, spec);
+  if (input.length === 0) {
+    throw new NhnCloudCliError(`${spec.label}\uAC00 \uBE44\uC5B4 \uC788\uC2B5\uB2C8\uB2E4.`, EXIT_PARAM_ERROR);
+  }
+  return input;
+}
+function decodeUtf8Input(input, label, hint) {
+  try {
+    return new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(input);
+  } catch {
+    throw new NhnCloudCliError(`${label}\uB294 UTF-8 \uD14D\uC2A4\uD2B8\uC5EC\uC57C \uD569\uB2C8\uB2E4. ${hint}`, EXIT_PARAM_ERROR);
+  }
+}
+
+// src/commands/skm/keystore-manage.ts
+var DESCRIPTION_MAX_LENGTH = 1e3;
+var PASSWORD_MAX_BYTES = 1024;
+var LOCKOUT_WARNING = "(\uC2E4\uD589 \uC704\uCE58\uAC00 \uD0A4\uB97C \uC4F0\uC9C0 \uBABB\uD558\uAC8C \uB420 \uC218 \uC788\uC74C, \uBA3C\uC800 skm confirm\uC73C\uB85C \uD655\uC778)";
+var createCommand11 = withSkmOptions(
+  new import_commander60.Command("create").description("\uD0A4 \uC800\uC7A5\uC18C\uB97C \uB9CC\uB4E0\uB2E4").requiredOption("--name <name>", "\uD0A4 \uC800\uC7A5\uC18C \uC774\uB984 (100\uC790 \uC774\uD558)").requiredOption("--auth <list>", "\uC0AC\uC6A9\uD560 \uC778\uC99D (ipv4,mac,certificate \uC911 \uD558\uB098 \uC774\uC0C1\uC744 \uC27C\uD45C\uB85C)").option("--auth-mode <mode>", "\uC778\uC99D \uACB0\uD569 \uBC29\uC2DD (and|or)", "and").option("--description <text>", "\uD0A4 \uC800\uC7A5\uC18C \uC124\uBA85 (1000\uC790 \uC774\uD558)")
+).action(async (_opts, command) => {
+  const opts = command.optsWithGlobals();
+  const name = parseKeyNameOption(opts.name);
+  const auths = parseAuthListOption(opts.auth);
+  const authMode = parseAuthModeOption(opts.authMode);
+  const description = parseDescriptionOption(opts.description, DESCRIPTION_MAX_LENGTH);
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const input = { name, ...auths, authMode };
+  if (description !== void 0) input.description = description;
+  const created = await withSkmSpinner(
+    `SKM \uD0A4 \uC800\uC7A5\uC18C ${formatCell(name)} \uC0DD\uC131 \uC911...`,
+    () => client.createKeyStore(input)
+  );
+  outputSkmWriteResult(opts, { ...created }, [String(created.keyStoreId)]);
+});
+var updateCommand4 = withSkmOptions(
+  new import_commander60.Command("update").description(`\uD0A4 \uC800\uC7A5\uC18C\uB97C \uC218\uC815\uD55C\uB2E4. \uC8FC\uC9C0 \uC54A\uC740 \uD56D\uBAA9\uC740 \uD604\uC7AC \uAC12\uC744 \uC720\uC9C0\uD55C\uB2E4 ${LOCKOUT_WARNING}`).argument("<keystore-id>", "\uD0A4 \uC800\uC7A5\uC18C ID").requiredOption("--auth-mode <mode>", "\uC778\uC99D \uACB0\uD569 \uBC29\uC2DD (and|or). \uC870\uD68C \uC751\uB2F5\uC5D0 \uC5C6\uC5B4 \uB9E4\uBC88 \uC9C0\uC815\uD55C\uB2E4").option("--name <name>", "\uD0A4 \uC800\uC7A5\uC18C \uC774\uB984 (100\uC790 \uC774\uD558)").option("--description <text>", "\uD0A4 \uC800\uC7A5\uC18C \uC124\uBA85 (1000\uC790 \uC774\uD558)").option("--auth <list>", "\uC0AC\uC6A9\uD560 \uC778\uC99D (ipv4,mac,certificate \uC911 \uD558\uB098 \uC774\uC0C1\uC744 \uC27C\uD45C\uB85C)")
+).action(async (keyStoreId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedId = parseKeyStoreId(keyStoreId);
+  const authMode = parseAuthModeOption(opts.authMode);
+  const name = parseKeyNameOption(opts.name);
+  const description = parseDescriptionOption(opts.description, DESCRIPTION_MAX_LENGTH);
+  const auths = opts.auth === void 0 ? void 0 : parseAuthListOption(opts.auth);
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const current2 = await withSkmSpinner(`SKM \uD0A4 \uC800\uC7A5\uC18C ${parsedId} \uC870\uD68C \uC911...`, () => client.getKeyStore(parsedId));
+  const currentDescription = typeof current2.description === "string" ? current2.description : void 0;
+  const yesNo = (value) => value === "Y" ? "Y" : "N";
+  const input = {
+    name: name ?? current2.name,
+    ...auths ?? {
+      ip4AuthUse: yesNo(current2.ip4AuthUse),
+      macAuthUse: yesNo(current2.macAuthUse),
+      certificateAuthUse: yesNo(current2.certificateAuthUse)
+    },
+    authMode
+  };
+  const nextDescription = description ?? currentDescription;
+  if (nextDescription !== void 0) input.description = nextDescription;
+  if (input.ip4AuthUse === "N" && input.macAuthUse === "N" && input.certificateAuthUse === "N") {
+    throw new NhnCloudCliError("\uD0A4 \uC800\uC7A5\uC18C \uC778\uC99D\uC740 \uD558\uB098 \uC774\uC0C1 \uCF1C\uC57C \uD569\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  await withSkmSpinner(`SKM \uD0A4 \uC800\uC7A5\uC18C ${parsedId} \uC218\uC815 \uC911...`, () => client.updateKeyStore(parsedId, input));
+  outputSkmWriteResult(
+    opts,
+    { operation: "keystore-update", status: "succeeded", keyStoreId: parsedId, ...input },
+    [String(parsedId)]
+  );
+});
+var deleteCommand9 = withSkmOptions(
+  new import_commander60.Command("delete").description("\uD0A4 \uC800\uC7A5\uC18C\uB97C \uC0AD\uC81C(\uBE44\uD65C\uC131\uD654)\uD55C\uB2E4").argument("<keystore-id>", "\uD0A4 \uC800\uC7A5\uC18C ID").option("--yes", "\uC0AD\uC81C \uD655\uC778")
+).action(async (keyStoreId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  requireYes(opts.yes, "\uD0A4 \uC800\uC7A5\uC18C \uC0AD\uC81C");
+  const parsedId = parseKeyStoreId(keyStoreId);
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  await withSkmSpinner(`SKM \uD0A4 \uC800\uC7A5\uC18C ${parsedId} \uC0AD\uC81C \uC911...`, () => client.deleteKeyStore(parsedId));
+  outputSkmWriteResult(
+    opts,
+    { operation: "keystore-delete", status: "succeeded", keyStoreId: parsedId },
+    [String(parsedId)]
+  );
+});
+function readCertificateOptions(opts) {
+  if (opts.lifeTime === void 0) {
+    throw new NhnCloudCliError("\uC778\uC99D\uC11C \uCD94\uAC00\uC5D0\uB294 --life-time\uC774 \uD544\uC694\uD569\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  const lifeTime = parsePositiveIntegerOption(opts.lifeTime, "--life-time");
+  const input = readSkmInput(
+    { text: opts.password, file: opts.passwordFile },
+    { textFlag: "--password", fileFlag: "--password-file", label: "\uC778\uC99D\uC11C \uBE44\uBC00\uBC88\uD638", maxBytes: PASSWORD_MAX_BYTES }
+  );
+  const password = decodeUtf8Input(input, "\uC778\uC99D\uC11C \uBE44\uBC00\uBC88\uD638", "\uD30C\uC77C \uC778\uCF54\uB529\uC744 \uD655\uC778\uD558\uC138\uC694.").replace(/\r?\n$/, "");
+  if (!password) {
+    throw new NhnCloudCliError("\uC778\uC99D\uC11C \uBE44\uBC00\uBC88\uD638\uAC00 \uBE44\uC5B4 \uC788\uC2B5\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  return { lifeTime, password };
+}
+function rejectCertificateOptions(opts) {
+  if (opts.lifeTime !== void 0 || opts.password !== void 0 || opts.passwordFile !== void 0) {
+    throw new NhnCloudCliError("--life-time\uACFC --password\uB294 --type certificate\uC5D0\uC11C\uB9CC \uC501\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+}
+function authAddedFields(added) {
+  return { value: added.value, name: added.name, description: added.description };
+}
+var authAddCommand = withTypeOption(
+  withSkmOptions(
+    new import_commander60.Command("add").description("\uD0A4 \uC800\uC7A5\uC18C\uC5D0 \uC778\uC99D \uC815\uBCF4\uB97C \uCD94\uAC00\uD55C\uB2E4 (\uC778\uC99D\uC11C \uBE44\uBC00\uBC88\uD638\uB294 --password, --password-file, \uD45C\uC900 \uC785\uB825 \uC911 \uD558\uB098)").argument("<keystore-id>", "\uD0A4 \uC800\uC7A5\uC18C ID").argument("<value>", "IPv4\xB7MAC \uAC12 \uB610\uB294 \uC778\uC99D\uC11C \uC774\uB984").option("--description <text>", "\uC778\uC99D \uC815\uBCF4 \uC124\uBA85 (1000\uC790 \uC774\uD558)").option("--life-time <days>", "\uC778\uC99D\uC11C \uC720\uD6A8 \uAE30\uAC04(\uC77C) (--type certificate \uC804\uC6A9, \uD544\uC218)").option("--password <pw>", "\uC778\uC99D\uC11C \uBE44\uBC00\uBC88\uD638 (--type certificate \uC804\uC6A9)").option("--password-file <path>", "\uC778\uC99D\uC11C \uBE44\uBC00\uBC88\uD638\uB97C \uC77D\uC744 \uD30C\uC77C (--type certificate \uC804\uC6A9)")
+  )
+).action(async (keyStoreId, value, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedId = parseKeyStoreId(keyStoreId);
+  const type = parseAuthTypeOption(opts.type);
+  const parsedValue = parseAuthValue(type, value);
+  const description = parseDescriptionOption(opts.description, DESCRIPTION_MAX_LENGTH);
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  if (type !== "certificate") rejectCertificateOptions(opts);
+  const target = type === "certificate" ? { type, ...readCertificateOptions(opts) } : { type };
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const added = await withSkmSpinner(`SKM ${type} \uC778\uC99D \uC815\uBCF4 ${formatCell(parsedValue)} \uCD94\uAC00 \uC911...`, async () => {
+    const keyStoreName = await resolveKeyStoreName(client, parsedId);
+    if (target.type === "certificate") {
+      return client.addCertificate(keyStoreName, parsedValue, target.password, target.lifeTime, description);
+    }
+    return client.addAuth(target.type, keyStoreName, parsedValue, description);
+  });
+  outputSkmWriteResult(
+    opts,
+    { operation: "auth-add", type, keyStoreId: parsedId, ...authAddedFields(added) },
+    [formatCell(parsedValue)]
+  );
+});
+var authDeleteCommand = withTypeOption(
+  withSkmOptions(
+    new import_commander60.Command("delete").description(`\uC778\uC99D \uC815\uBCF4 \uC0AD\uC81C\uB97C \uC608\uC57D\uD55C\uB2E4 (7\uC77C \uB4A4 \uC0AD\uC81C) ${LOCKOUT_WARNING}`).argument("<keystore-id>", "\uD0A4 \uC800\uC7A5\uC18C ID").argument("<value>", "IPv4\xB7MAC \uAC12 \uB610\uB294 \uC778\uC99D\uC11C \uC774\uB984").option("--yes", "\uC0AD\uC81C \uC608\uC57D \uD655\uC778")
+  )
+).action(async (keyStoreId, value, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  requireYes(opts.yes, "\uC778\uC99D \uC815\uBCF4 \uC0AD\uC81C \uC608\uC57D");
+  const parsedId = parseKeyStoreId(keyStoreId);
+  const type = parseAuthTypeOption(opts.type);
+  const parsedValue = parseAuthValue(type, value);
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const deletion = await withSkmSpinner(`SKM ${type} \uC778\uC99D \uC815\uBCF4 ${formatCell(parsedValue)} \uC0AD\uC81C \uC608\uC57D \uC911...`, async () => {
+    const keyStoreName = await resolveKeyStoreName(client, parsedId);
+    return client.scheduleAuthDeletion(type, keyStoreName, parsedValue);
+  });
+  outputSkmWriteResult(
+    opts,
+    {
+      operation: "auth-delete-scheduled",
+      type,
+      keyStoreId: parsedId,
+      value: deletion.value,
+      name: deletion.name,
+      deletionDateTime: deletion.deletionDateTime
+    },
+    [formatCell(parsedValue)]
+  );
+});
+var authPurgeCommand = withTypeOption(
+  withSkmOptions(
+    new import_commander60.Command("purge").description(`\uC778\uC99D \uC815\uBCF4\uB97C \uC989\uC2DC \uC0AD\uC81C\uD55C\uB2E4 (\uC0AD\uC81C \uC608\uC57D\uB41C \uAC83\uB9CC, \uB418\uB3CC\uB9B4 \uC218 \uC5C6\uC74C) ${LOCKOUT_WARNING}`).argument("<keystore-id>", "\uD0A4 \uC800\uC7A5\uC18C ID").argument("<value>", "IPv4\xB7MAC \uAC12 \uB610\uB294 \uC778\uC99D\uC11C \uC774\uB984").option("--yes", "\uC989\uC2DC \uC0AD\uC81C \uD655\uC778")
+  )
+).action(async (keyStoreId, value, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  requireYes(opts.yes, "\uC778\uC99D \uC815\uBCF4 \uC989\uC2DC \uC0AD\uC81C");
+  const parsedId = parseKeyStoreId(keyStoreId);
+  const type = parseAuthTypeOption(opts.type);
+  const parsedValue = parseAuthValue(type, value);
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const deletion = await withSkmSpinner(`SKM ${type} \uC778\uC99D \uC815\uBCF4 ${formatCell(parsedValue)} \uC989\uC2DC \uC0AD\uC81C \uC911...`, async () => {
+    const keyStoreName = await resolveKeyStoreName(client, parsedId);
+    return client.deleteAuthNow(type, keyStoreName, parsedValue);
+  });
+  outputSkmWriteResult(
+    opts,
+    {
+      operation: "auth-purge",
+      type,
+      keyStoreId: parsedId,
+      value: deletion.value,
+      name: deletion.name,
+      deletionDateTime: deletion.deletionDateTime
+    },
+    [formatCell(parsedValue)]
+  );
+});
+
+// src/commands/skm/keystore.ts
+var KEYSTORE_FIELDS = [
+  "keyStoreId",
+  "name",
+  "description",
+  "ip4AuthUse",
+  "macAuthUse",
+  "certificateAuthUse",
+  "creationUser",
+  "creationDatetime",
+  "lastChangeUser",
+  "lastChangeDatetime"
+];
+var listCommand16 = withSkmOptions(new import_commander61.Command("list").description("\uD0A4 \uC800\uC7A5\uC18C \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4 (\uC804\uCCB4 \uD544\uB4DC\uB294 --json)")).action(async (_opts, command) => {
+  const opts = command.optsWithGlobals();
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const stores = await withSkmSpinner("SKM \uD0A4 \uC800\uC7A5\uC18C \uBAA9\uB85D \uC870\uD68C \uC911...", () => client.listKeyStores());
+  output(opts, {
+    headers: ["keyStoreId", "name", "ip4AuthUse", "macAuthUse", "certificateAuthUse", "lastChangeDatetime"],
+    rows: stores.map((s) => [
+      formatCell(s.keyStoreId),
+      formatCell(s.name),
+      formatCell(s.ip4AuthUse),
+      formatCell(s.macAuthUse),
+      formatCell(s.certificateAuthUse),
+      formatCell(s.lastChangeDatetime)
+    ]),
+    raw: stores,
+    ids: stores.map((s) => String(s.keyStoreId))
+  });
+});
+var getCommand11 = withSkmOptions(
+  new import_commander61.Command("get").description("\uD0A4 \uC800\uC7A5\uC18C \uD55C \uAC74\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<keystore-id>", "\uD0A4 \uC800\uC7A5\uC18C ID")
+).action(async (keyStoreId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedId = parseKeyStoreId(keyStoreId);
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const store = await withSkmSpinner(`SKM \uD0A4 \uC800\uC7A5\uC18C ${parsedId} \uC870\uD68C \uC911...`, () => client.getKeyStore(parsedId));
+  output(opts, {
+    headers: ["field", "value"],
+    rows: KEYSTORE_FIELDS.map((field) => [field, formatCell(store[field])]),
+    raw: store,
+    ids: [String(store.keyStoreId)]
+  });
+});
+var authListCommand = withTypeOption(
+  withSkmOptions(
+    new import_commander61.Command("list").description("\uD0A4 \uC800\uC7A5\uC18C \uC778\uC99D \uC815\uBCF4 \uAC12 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<keystore-id>", "\uD0A4 \uC800\uC7A5\uC18C ID")
+  )
+).action(async (keyStoreId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedId = parseKeyStoreId(keyStoreId);
+  const type = parseAuthTypeOption(opts.type);
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const values = await withSkmSpinner(`SKM ${type} \uC778\uC99D \uC815\uBCF4 \uBAA9\uB85D \uC870\uD68C \uC911...`, () => client.listAuths(parsedId, type));
+  output(opts, {
+    headers: ["value"],
+    rows: values.map((v) => [formatCell(v)]),
+    raw: values,
+    ids: values.map((v) => formatCell(v))
+  });
+});
+var authGetCommand = withTypeOption(
+  withSkmOptions(
+    new import_commander61.Command("get").description("\uD0A4 \uC800\uC7A5\uC18C \uC778\uC99D \uC815\uBCF4 \uC0C1\uC138\uB97C \uC870\uD68C\uD55C\uB2E4 (\uC778\uC99D\uC11C \uBE44\uBC00\uBC88\uD638\uB294 \uAC00\uB9B0\uB2E4)").argument("<keystore-id>", "\uD0A4 \uC800\uC7A5\uC18C ID").argument("<value>", "IPv4\xB7MAC \uAC12 \uB610\uB294 \uC778\uC99D\uC11C \uC774\uB984")
+  )
+).action(async (keyStoreId, value, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedId = parseKeyStoreId(keyStoreId);
+  const parsedValue = parseRequiredArgument(value, "value");
+  const type = parseAuthTypeOption(opts.type);
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const details = await withSkmSpinner(
+    `SKM ${type} \uC778\uC99D \uC815\uBCF4 \uC870\uD68C \uC911...`,
+    () => client.getAuth(parsedId, type, parsedValue)
+  );
+  const masked = details.map(maskAuthDetail);
+  const keys = masked.map((d) => formatCell(d.value ?? d.name));
+  output(opts, {
+    headers: ["value", "description", "expirationDate", "lastAccessDatetime", "deletionDatetime", "lastChangeDatetime"],
+    rows: masked.map((d, i) => [
+      keys[i] ?? "-",
+      formatCell(d.description),
+      formatCell(d.expirationDate),
+      formatCell(d.lastAccessDatetime),
+      formatCell(d.deletionDatetime),
+      formatCell(d.lastChangeDatetime)
+    ]),
+    raw: masked,
+    ids: keys
+  });
+});
+var authCommand = new import_commander61.Command("auth").description("\uD0A4 \uC800\uC7A5\uC18C IPv4\xB7MAC\xB7\uC778\uC99D\uC11C \uC778\uC99D \uC815\uBCF4 \uC870\uD68C\xB7\uAD00\uB9AC").addCommand(authListCommand).addCommand(authGetCommand).addCommand(authAddCommand).addCommand(authDeleteCommand).addCommand(authPurgeCommand);
+var keystoreCommand = new import_commander61.Command("keystore").description("SKM \uD0A4 \uC800\uC7A5\uC18C\uC640 \uC778\uC99D \uC815\uBCF4 \uC870\uD68C\xB7\uAD00\uB9AC").addCommand(listCommand16).addCommand(getCommand11).addCommand(createCommand11).addCommand(updateCommand4).addCommand(deleteCommand9).addCommand(authCommand);
+
+// src/commands/skm/key.ts
+var import_commander63 = require("commander");
+
+// src/commands/skm/key-manage.ts
+var import_commander62 = require("commander");
+var createCommand12 = withSkmOptions(
+  new import_commander62.Command("create").description("\uD0A4 \uC800\uC7A5\uC18C\uC5D0 \uD0A4\uB97C \uB9CC\uB4E0\uB2E4 (\uAE30\uBC00 \uB370\uC774\uD130 \uAC12\uC740 --value, --file, \uD45C\uC900 \uC785\uB825 \uC911 \uD558\uB098)").argument("<keystore-id>", "\uD0A4 \uC800\uC7A5\uC18C ID").requiredOption("--type <type>", "\uD0A4 \uC885\uB958 (secret|symmetric-key|asymmetric-key)").requiredOption("--name <name>", "\uD0A4 \uC774\uB984 (100\uC790 \uC774\uD558)").option("--description <text>", "\uD0A4 \uC124\uBA85").option("--value <value>", "\uAE30\uBC00 \uB370\uC774\uD130 \uAC12 (--type secret \uC804\uC6A9)").option("--file <path>", "\uAE30\uBC00 \uB370\uC774\uD130 \uAC12\uC744 \uC77D\uC744 \uD30C\uC77C (--type secret \uC804\uC6A9)")
+).action(async (keyStoreId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedId = parseKeyStoreId(keyStoreId);
+  const type = parseKeyTypeOption(opts.type);
+  const name = parseKeyNameOption(opts.name);
+  const description = opts.description?.trim() || void 0;
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  let secretValue;
+  if (type === "SECRET") {
+    const input = readSkmInput(
+      { text: opts.value, file: opts.file },
+      { textFlag: "--value", label: "\uAE30\uBC00 \uB370\uC774\uD130", maxBytes: MAX_JSON_INPUT_BYTES }
+    );
+    secretValue = decodeUtf8Input(input, "\uAE30\uBC00 \uB370\uC774\uD130", "\uBC14\uC774\uB108\uB9AC\uB294 base64\uB85C \uC778\uCF54\uB529\uD574 \uC804\uB2EC\uD558\uC138\uC694.");
+  } else if (opts.value !== void 0 || opts.file !== void 0) {
+    throw new NhnCloudCliError("--value\uC640 --file\uC740 --type secret\uC5D0\uC11C\uB9CC \uC501\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const created = await withSkmSpinner(`SKM \uD0A4 ${formatCell(name)} \uC0DD\uC131 \uC911...`, async () => {
+    const keyStoreName = await resolveKeyStoreName(client, parsedId);
+    if (secretValue !== void 0) {
+      return client.createSecret(keyStoreName, name, description, secretValue);
+    }
+    if (type === "SYMMETRIC_KEY") {
+      return client.createSymmetricKey(keyStoreName, name, description);
+    }
+    return client.createAsymmetricKey(keyStoreName, name, description);
+  });
+  outputSkmWriteResult(
+    opts,
+    { keyId: created.keyId, keyStatus: created.keyStatus, keyStoreId: parsedId, name },
+    [formatCell(created.keyId)]
+  );
+});
+var deleteCommand10 = withSkmOptions(
+  new import_commander62.Command("delete").description("\uD0A4 \uC0AD\uC81C\uB97C \uC608\uC57D\uD55C\uB2E4 (7\uC77C \uB4A4 \uC0AD\uC81C, \uADF8 \uC804\uC5D0\uB294 \uCF58\uC194\uC5D0\uC11C \uCDE8\uC18C \uAC00\uB2A5)").argument("<key-id>", "\uD0A4 ID").option("--yes", "\uC0AD\uC81C \uC608\uC57D \uD655\uC778")
+).action(async (keyId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  requireYes(opts.yes, "\uD0A4 \uC0AD\uC81C \uC608\uC57D");
+  const parsedKeyId = parseRequiredArgument(keyId, "key-id");
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const deletion = await withSkmSpinner(
+    `SKM \uD0A4 ${formatCell(parsedKeyId)} \uC0AD\uC81C \uC608\uC57D \uC911...`,
+    () => client.scheduleKeyDeletion(parsedKeyId)
+  );
+  outputSkmWriteResult(
+    opts,
+    {
+      operation: "key-delete-scheduled",
+      status: "succeeded",
+      keyId: deletion.keyId,
+      deletionDateTime: deletion.deletionDateTime
+    },
+    [formatCell(deletion.keyId)]
+  );
+});
+var purgeCommand = withSkmOptions(
+  new import_commander62.Command("purge").description("\uD0A4\uB97C \uC989\uC2DC \uC0AD\uC81C\uD55C\uB2E4 (\uC0AD\uC81C \uC608\uC57D\uB41C \uD0A4\uB9CC, \uB418\uB3CC\uB9B4 \uC218 \uC5C6\uC74C)").argument("<key-id>", "\uD0A4 ID").option("--yes", "\uC989\uC2DC \uC0AD\uC81C \uD655\uC778")
+).action(async (keyId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  requireYes(opts.yes, "\uD0A4 \uC989\uC2DC \uC0AD\uC81C");
+  const parsedKeyId = parseRequiredArgument(keyId, "key-id");
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const deletion = await withSkmSpinner(
+    `SKM \uD0A4 ${formatCell(parsedKeyId)} \uC989\uC2DC \uC0AD\uC81C \uC911...`,
+    () => client.deleteKeyNow(parsedKeyId)
+  );
+  outputSkmWriteResult(
+    opts,
+    { operation: "key-purge", status: "succeeded", keyId: deletion.keyId, deletionDateTime: deletion.deletionDateTime },
+    [formatCell(deletion.keyId)]
+  );
+});
+
+// src/commands/skm/key.ts
+var KEY_FIELDS = [
+  "keyId",
+  "name",
+  "description",
+  "keyType",
+  "currentKeyValueVersion",
+  "autoRotationPeriod",
+  "nextAutoRotationDate",
+  "lastAccessDatetime",
+  "deletionDatetime",
+  "creationUser",
+  "creationDatetime",
+  "lastChangeUser",
+  "lastChangeDatetime"
+];
+var listCommand17 = withSkmOptions(
+  new import_commander63.Command("list").description("\uD0A4 \uC800\uC7A5\uC18C\uC758 \uD0A4 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4 (\uC804\uCCB4 \uD544\uB4DC\uB294 --json)").argument("<keystore-id>", "\uD0A4 \uC800\uC7A5\uC18C ID").option("--type <type>", "\uD0A4 \uC885\uB958 (secret|symmetric-key|asymmetric-key)").option("--name <name>", "\uD0A4 \uC774\uB984 \uD544\uD130 (100\uC790 \uC774\uD558)").option("--status <status>", "\uD0A4 \uC0C1\uD0DC \uD544\uD130 (active|inactive)")
+).action(async (keyStoreId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedId = parseKeyStoreId(keyStoreId);
+  const type = parseKeyTypeOption(opts.type);
+  const name = parseKeyNameOption(opts.name);
+  const status = parseKeyStatusOption(opts.status);
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const filter = {
+    ...type !== void 0 && { type },
+    ...name !== void 0 && { name },
+    ...status !== void 0 && { status }
+  };
+  const keys = await withSkmSpinner(
+    `SKM \uD0A4 \uC800\uC7A5\uC18C ${parsedId} \uD0A4 \uBAA9\uB85D \uC870\uD68C \uC911...`,
+    () => client.listKeys(parsedId, filter)
+  );
+  output(opts, {
+    headers: ["keyId", "name", "keyType", "currentKeyValueVersion", "lastAccessDatetime", "deletionDatetime"],
+    rows: keys.map((k) => [
+      formatCell(k.keyId),
+      formatCell(k.name),
+      formatCell(k.keyType),
+      formatCell(k.currentKeyValueVersion),
+      formatCell(k.lastAccessDatetime),
+      formatCell(k.deletionDatetime)
+    ]),
+    raw: keys,
+    ids: keys.map((k) => formatCell(k.keyId))
+  });
+});
+var getCommand12 = withSkmOptions(
+  new import_commander63.Command("get").description("\uD0A4 \uD55C \uAC74\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<keystore-id>", "\uD0A4 \uC800\uC7A5\uC18C ID").argument("<key-id>", "\uD0A4 ID")
+).action(async (keyStoreId, keyId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedId = parseKeyStoreId(keyStoreId);
+  const parsedKeyId = parseRequiredArgument(keyId, "key-id");
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const key = await withSkmSpinner(
+    `SKM \uD0A4 ${formatCell(parsedKeyId)} \uC870\uD68C \uC911...`,
+    () => client.getKey(parsedId, parsedKeyId)
+  );
+  output(opts, {
+    headers: ["field", "value"],
+    rows: KEY_FIELDS.map((field) => [field, formatCell(key[field])]),
+    raw: key,
+    ids: [formatCell(key.keyId)]
+  });
+});
+var keyCommand = new import_commander63.Command("key").description("SKM \uD0A4 \uC870\uD68C\uC640 \uAD00\uB9AC").addCommand(listCommand17).addCommand(getCommand12).addCommand(createCommand12).addCommand(deleteCommand10).addCommand(purgeCommand);
+
+// src/commands/skm/secret.ts
+var import_commander64 = require("commander");
+var getCommand13 = withSkmOptions(
+  new import_commander64.Command("get").description("\uAE30\uBC00 \uB370\uC774\uD130\uB97C \uC870\uD68C\uD55C\uB2E4 (\uC6D0\uBB38\uC744 stdout\uC5D0 \uCD9C\uB825)").argument("<key-id>", "\uD0A4 ID")
+).action(async (keyId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedKeyId = parseRequiredArgument(keyId, "key-id");
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const secret = await withSkmSpinner(
+    `SKM \uAE30\uBC00 \uB370\uC774\uD130 ${formatCell(parsedKeyId)} \uC870\uD68C \uC911...`,
+    () => client.getSecret(parsedKeyId)
+  );
+  printSkmValue(opts, secret, { secret });
+});
+var updateCommand5 = withSkmOptions(
+  new import_commander64.Command("update").description("\uAE30\uBC00 \uB370\uC774\uD130 \uAC12\uC744 \uBC14\uAFBC\uB2E4 (\uAC12\uC740 --value, --file, \uD45C\uC900 \uC785\uB825 \uC911 \uD558\uB098)").argument("<key-id>", "\uD0A4 ID").option("--value <value>", "\uC0C8 \uAE30\uBC00 \uB370\uC774\uD130 \uAC12").option("--file <path>", "\uC0C8 \uAE30\uBC00 \uB370\uC774\uD130 \uAC12\uC744 \uC77D\uC744 \uD30C\uC77C")
+).action(async (keyId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedKeyId = parseRequiredArgument(keyId, "key-id");
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const input = readSkmInput(
+    { text: opts.value, file: opts.file },
+    { textFlag: "--value", label: "\uAE30\uBC00 \uB370\uC774\uD130", maxBytes: MAX_JSON_INPUT_BYTES }
+  );
+  const secretValue = decodeUtf8Input(input, "\uAE30\uBC00 \uB370\uC774\uD130", "\uBC14\uC774\uB108\uB9AC\uB294 base64\uB85C \uC778\uCF54\uB529\uD574 \uC804\uB2EC\uD558\uC138\uC694.");
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const updated = await withSkmSpinner(
+    `SKM \uAE30\uBC00 \uB370\uC774\uD130 ${formatCell(parsedKeyId)} \uC218\uC815 \uC911...`,
+    () => client.updateSecret(parsedKeyId, secretValue)
+  );
+  const { secretValue: _omitted, ...result } = updated;
+  outputSkmWriteResult(opts, result, [formatCell(updated.keyId)]);
+});
+var secretCommand = new import_commander64.Command("secret").description("SKM \uAE30\uBC00 \uB370\uC774\uD130 \uC870\uD68C\uC640 \uC218\uC815").addCommand(getCommand13).addCommand(updateCommand5);
+
+// src/commands/skm/symmetric-key.ts
+var import_commander65 = require("commander");
+var MAX_ENCRYPT_BYTES = 32768;
+var encryptCommand = withSkmOptions(
+  new import_commander65.Command("encrypt").description("\uB300\uCE6D\uD0A4\uB85C \uB370\uC774\uD130\uB97C \uC554\uD638\uD654\uD55C\uB2E4 (--plaintext / --file / stdin, UTF-8 \uD14D\uC2A4\uD2B8 32KB \uC774\uD558)").argument("<key-id>", "\uD0A4 ID").option("--plaintext <text>", "\uC554\uD638\uD654\uD560 \uB370\uC774\uD130").option("--file <path>", "\uC554\uD638\uD654\uD560 \uB370\uC774\uD130\uB97C \uC77D\uC744 \uD30C\uC77C \uACBD\uB85C")
+).action(async (keyId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedKeyId = parseRequiredArgument(keyId, "key-id");
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const label = "\uC554\uD638\uD654\uD560 \uB370\uC774\uD130";
+  const input = readSkmInput(
+    { text: opts.plaintext, file: opts.file },
+    { textFlag: "--plaintext", label, maxBytes: MAX_ENCRYPT_BYTES }
+  );
+  const plaintext = decodeUtf8Input(input, label, "\uBC14\uC774\uB108\uB9AC\uB294 base64\uB85C \uC778\uCF54\uB529\uD574 \uC804\uB2EC\uD558\uC138\uC694.");
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const body = await withSkmSpinner(
+    `SKM \uB300\uCE6D\uD0A4 ${formatCell(parsedKeyId)}\uB85C \uC554\uD638\uD654 \uC911...`,
+    () => client.encrypt(parsedKeyId, plaintext)
+  );
+  printSkmValue(opts, body.ciphertext, body);
+});
+var decryptCommand = withSkmOptions(
+  new import_commander65.Command("decrypt").description("\uB300\uCE6D\uD0A4\uB85C \uC554\uD638\uBB38\uC744 \uBCF5\uD638\uD654\uD55C\uB2E4 (--ciphertext / --file / stdin, \uD3C9\uBB38\uC744 stdout\uC5D0 \uCD9C\uB825)").argument("<key-id>", "\uD0A4 ID").option("--ciphertext <text>", "\uBCF5\uD638\uD654\uD560 \uC554\uD638\uBB38 (base64)").option("--file <path>", "\uBCF5\uD638\uD654\uD560 \uC554\uD638\uBB38\uC744 \uC77D\uC744 \uD30C\uC77C \uACBD\uB85C")
+).action(async (keyId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedKeyId = parseRequiredArgument(keyId, "key-id");
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const label = "\uBCF5\uD638\uD654\uD560 \uC554\uD638\uBB38";
+  const input = readSkmInput(
+    { text: opts.ciphertext, file: opts.file },
+    { textFlag: "--ciphertext", label, maxBytes: MAX_JSON_INPUT_BYTES }
+  );
+  const ciphertext = decodeUtf8Input(input, label, "\uC554\uD638\uBB38\uC740 base64 \uBB38\uC790\uC5F4\uC785\uB2C8\uB2E4.").trim();
+  if (!ciphertext) {
+    throw new NhnCloudCliError(`${label}\uC774 \uBE44\uC5B4 \uC788\uC2B5\uB2C8\uB2E4.`, EXIT_PARAM_ERROR);
+  }
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const body = await withSkmSpinner(
+    `SKM \uB300\uCE6D\uD0A4 ${formatCell(parsedKeyId)}\uB85C \uBCF5\uD638\uD654 \uC911...`,
+    () => client.decrypt(parsedKeyId, ciphertext)
+  );
+  printSkmValue(opts, body.plaintext, body);
+});
+var getCommand14 = withSkmOptions(
+  new import_commander65.Command("get").description("\uB300\uCE6D\uD0A4 \uC6D0\uBB38\uC744 \uC870\uD68C\uD55C\uB2E4 (\uC6D0\uBB38\uC744 stdout\uC5D0 \uCD9C\uB825)").argument("<key-id>", "\uD0A4 ID").option("--key-version <n>", "\uC870\uD68C\uD560 \uD0A4 \uBC84\uC804 (0 \uC774\uC0C1, \uC0DD\uB7B5\uD558\uBA74 \uBC84\uC804\uC744 \uC9C0\uC815\uD558\uC9C0 \uC54A\uACE0 \uC694\uCCAD)")
+).action(async (keyId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedKeyId = parseRequiredArgument(keyId, "key-id");
+  const keyVersion = parseKeyVersionOption(opts.keyVersion);
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const body = await withSkmSpinner(
+    `SKM \uB300\uCE6D\uD0A4 ${formatCell(parsedKeyId)} \uC870\uD68C \uC911...`,
+    () => client.getSymmetricKey(parsedKeyId, keyVersion)
+  );
+  printSkmValue(opts, body.symmetricKey, body);
+});
+var createLocalKeyCommand = withSkmOptions(
+  new import_commander65.Command("create-local-key").description("\uB85C\uCEEC \uC554\uD638\uD654\uC5D0 \uC4F8 \uB370\uC774\uD130 \uD0A4\uB97C \uB9CC\uB4E0\uB2E4 (\uD3C9\uBB38 \uD0A4\uB294 \uC774 \uC751\uB2F5\uC5D0\uC11C\uB9CC \uBC1B\uC744 \uC218 \uC788\uB2E4)").argument("<key-id>", "\uD0A4 ID")
+).action(async (keyId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedKeyId = parseRequiredArgument(keyId, "key-id");
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const body = await withSkmSpinner(
+    `SKM \uB300\uCE6D\uD0A4 ${formatCell(parsedKeyId)}\uB85C \uB85C\uCEEC \uD0A4 \uC0DD\uC131 \uC911...`,
+    () => client.createLocalKey(parsedKeyId)
+  );
+  output(opts, {
+    headers: ["field", "value"],
+    rows: [
+      ["localKeyPlaintext", formatCell(body.localKeyPlaintext)],
+      ["localKeyCiphertext", formatCell(body.localKeyCiphertext)],
+      ["keyVersion", formatCell(body.keyVersion)]
+    ],
+    raw: body,
+    ids: [body.localKeyPlaintext, body.localKeyCiphertext]
+  });
+});
+var symmetricKeyCommand = new import_commander65.Command("symmetric-key").description("SKM \uB300\uCE6D\uD0A4 \uC554\uBCF5\uD638\uD654\uC640 \uD0A4 \uC870\uD68C").addCommand(encryptCommand).addCommand(decryptCommand).addCommand(getCommand14).addCommand(createLocalKeyCommand);
+
+// src/commands/skm/asymmetric-key.ts
+var import_commander66 = require("commander");
+var MAX_SIGN_BYTES = 245;
+var MAX_STANDARD_SIGN_BYTES = 65536;
+function readSignPayload(opts, label) {
+  const input = readSkmInput(
+    { text: opts.plaintext, file: opts.file },
+    { textFlag: "--plaintext", label, maxBytes: opts.standard ? MAX_STANDARD_SIGN_BYTES : MAX_SIGN_BYTES }
+  );
+  if (opts.standard) return input.toString("base64");
+  return decodeUtf8Input(input, label, "\uBC14\uC774\uB108\uB9AC\uB294 --standard\uB85C \uC11C\uBA85\uD558\uC138\uC694.");
+}
+function withSignInputOptions(command) {
+  return command.argument("<key-id>", "\uD0A4 ID").option("--plaintext <text>", "\uB370\uC774\uD130 (\uBBF8\uC9C0\uC815 \uC2DC --file \uB610\uB294 stdin)").option("--file <path>", "\uB370\uC774\uD130\uB97C \uC77D\uC744 \uD30C\uC77C \uACBD\uB85C").option("--standard", "\uD45C\uC900 \uC2A4\uD0B4(RSASSA-PSS)\uC73C\uB85C \uCC98\uB9AC\uD55C\uB2E4 (\uBC14\uC774\uB108\uB9AC \uAC00\uB2A5, 64KB \uC774\uD558)");
+}
+var signCommand = withSkmOptions(
+  withSignInputOptions(
+    new import_commander66.Command("sign").description("\uBE44\uB300\uCE6D\uD0A4\uB85C \uB370\uC774\uD130\uC5D0 \uC11C\uBA85\uD55C\uB2E4 (\uC77C\uBC18 \uC11C\uBA85\uC740 UTF-8 \uD14D\uC2A4\uD2B8 245\uBC14\uC774\uD2B8 \uC774\uD558)")
+  )
+).action(async (keyId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedKeyId = parseRequiredArgument(keyId, "key-id");
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const payload = readSignPayload(opts, "\uC11C\uBA85\uD560 \uB370\uC774\uD130");
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const body = await withSkmSpinner(
+    `SKM \uBE44\uB300\uCE6D\uD0A4 ${formatCell(parsedKeyId)}\uB85C \uC11C\uBA85 \uC911...`,
+    () => opts.standard ? client.signStandard(parsedKeyId, payload) : client.sign(parsedKeyId, payload)
+  );
+  printSkmValue(opts, body.signature, body);
+});
+var verifyCommand = withSkmOptions(
+  withSignInputOptions(
+    new import_commander66.Command("verify").description("\uBE44\uB300\uCE6D\uD0A4\uB85C \uC11C\uBA85\uC744 \uAC80\uC99D\uD55C\uB2E4 (\uAC80\uC99D \uC2E4\uD328\uB294 \uC885\uB8CC \uCF54\uB4DC 1)")
+  ).requiredOption("--signature <sig>", "\uAC80\uC99D\uD560 \uC11C\uBA85\uAC12 (base64)").option("--key-version <n>", "\uC11C\uBA85\uD55C \uD0A4 \uBC84\uC804 (--standard \uAC80\uC99D\uC5D0 \uD544\uC218)")
+).action(async (keyId, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedKeyId = parseRequiredArgument(keyId, "key-id");
+  const signature = opts.signature.trim();
+  if (!signature) {
+    throw new NhnCloudCliError("--signature\uAC00 \uBE44\uC5B4 \uC788\uC2B5\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  const keyVersion = parseKeyVersionOption(opts.keyVersion);
+  if (opts.standard && keyVersion === void 0) {
+    throw new NhnCloudCliError("--standard \uAC80\uC99D\uC5D0\uB294 --key-version\uC774 \uD544\uC694\uD569\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  if (!opts.standard && keyVersion !== void 0) {
+    throw new NhnCloudCliError("--key-version\uC740 --standard\uC640 \uD568\uAED8 \uC9C0\uC815\uD569\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  const payload = readSignPayload(opts, "\uAC80\uC99D\uD560 \uB370\uC774\uD130");
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const body = await withSkmSpinner(
+    `SKM \uBE44\uB300\uCE6D\uD0A4 ${formatCell(parsedKeyId)}\uB85C \uC11C\uBA85 \uAC80\uC99D \uC911...`,
+    () => keyVersion !== void 0 ? client.verifyStandard(parsedKeyId, payload, signature, keyVersion) : client.verify(parsedKeyId, payload, signature)
+  );
+  if (opts.json) {
+    printJson(body);
+  } else if (!opts.quiet) {
+    const verdict = body.result ? "\uAC80\uC99D \uC131\uACF5" : "\uAC80\uC99D \uC2E4\uD328";
+    process.stdout.write(`${verdict} (keyVersion ${body.keyVersion})
+`);
+  }
+  if (!body.result) {
+    throw new NhnCloudCliError("\uC11C\uBA85 \uAC80\uC99D\uC5D0 \uC2E4\uD328\uD588\uC2B5\uB2C8\uB2E4.", EXIT_API_ERROR);
+  }
+});
+function keyMaterialCommand(name, description, fetch, spinnerLabel) {
+  return withSkmOptions(
+    new import_commander66.Command(name).description(description).argument("<key-id>", "\uD0A4 ID").option("--key-version <n>", "\uC870\uD68C\uD560 \uD0A4 \uBC84\uC804 (0 \uC774\uC0C1, \uC0DD\uB7B5\uD558\uBA74 \uBC84\uC804\uC744 \uC9C0\uC815\uD558\uC9C0 \uC54A\uACE0 \uC694\uCCAD)")
+  ).action(async (keyId, _opts, command) => {
+    const opts = command.optsWithGlobals();
+    const parsedKeyId = parseRequiredArgument(keyId, "key-id");
+    const keyVersion = parseKeyVersionOption(opts.keyVersion);
+    const macAddress = parseMacAddressOption(opts.macAddress);
+    const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+    const body = await withSkmSpinner(
+      `SKM \uBE44\uB300\uCE6D\uD0A4 ${formatCell(parsedKeyId)} ${spinnerLabel} \uC870\uD68C \uC911...`,
+      () => fetch(client, parsedKeyId, keyVersion)
+    );
+    printSkmValue(opts, body.standardEncodedKey ?? body.encodedKey, body);
+  });
+}
+var publicKeyCommand = keyMaterialCommand(
+  "public-key",
+  "\uACF5\uAC1C\uD0A4\uB97C \uC870\uD68C\uD55C\uB2E4 (standardEncodedKey\uB97C, \uC5C6\uC73C\uBA74 encodedKey\uB97C stdout\uC5D0 \uCD9C\uB825)",
+  (client, keyId, keyVersion) => client.getPublicKey(keyId, keyVersion),
+  "\uACF5\uAC1C\uD0A4"
+);
+var privateKeyCommand = keyMaterialCommand(
+  "private-key",
+  "\uAC1C\uC778\uD0A4 \uC6D0\uBB38\uC744 \uC870\uD68C\uD55C\uB2E4 (standardEncodedKey\uB97C, \uC5C6\uC73C\uBA74 encodedKey\uB97C stdout\uC5D0 \uCD9C\uB825)",
+  (client, keyId, keyVersion) => client.getPrivateKey(keyId, keyVersion),
+  "\uAC1C\uC778\uD0A4"
+);
+var asymmetricKeyCommand = new import_commander66.Command("asymmetric-key").description("SKM \uBE44\uB300\uCE6D\uD0A4 \uC11C\uBA85\xB7\uAC80\uC99D\uACFC \uD0A4 \uC870\uD68C").addCommand(signCommand).addCommand(verifyCommand).addCommand(publicKeyCommand).addCommand(privateKeyCommand);
+
+// src/commands/loadbalancer/list.ts
+var import_commander67 = require("commander");
+
+// src/commands/loadbalancer/helpers.ts
+var import_node_net3 = require("net");
+
+// src/services/loadbalancer/client.ts
+var import_ky17 = __toESM(require("ky"));
+
+// src/services/loadbalancer/types.ts
+function isRecord5(value) {
+  return typeof value === "object" && value !== null;
+}
 function isNonEmptyString(value) {
   return typeof value === "string" && value.length > 0;
 }
@@ -11220,29 +13173,29 @@ function isIpAclAction(value) {
   return value === "ALLOW" || value === "DENY";
 }
 function isLoadBalancerIpAclGroup(value) {
-  return isRecord3(value) && isNonEmptyString(value["ipacl_group_id"]);
+  return isRecord5(value) && isNonEmptyString(value["ipacl_group_id"]);
 }
 function isIpAclGroupLoadBalancer(value) {
-  return isRecord3(value) && isNonEmptyString(value["loadbalancer_id"]);
+  return isRecord5(value) && isNonEmptyString(value["loadbalancer_id"]);
 }
 function isLoadBalancer(value) {
-  if (!isRecord3(value)) return false;
+  if (!isRecord5(value)) return false;
   return isNonEmptyString(value["id"]) && typeof value["name"] === "string" && typeof value["vip_address"] === "string" && typeof value["provisioning_status"] === "string" && typeof value["operating_status"] === "string" && (value["ipacl_group_action"] === null || isIpAclAction(value["ipacl_group_action"])) && Array.isArray(value["ipacl_groups"]) && value["ipacl_groups"].every(isLoadBalancerIpAclGroup);
 }
 function isIpAclGroup(value) {
-  if (!isRecord3(value)) return false;
+  if (!isRecord5(value)) return false;
   return isNonEmptyString(value["id"]) && typeof value["name"] === "string" && isIpAclAction(value["action"]) && typeof value["ipacl_target_count"] === "string" && Array.isArray(value["loadbalancers"]) && value["loadbalancers"].every(isIpAclGroupLoadBalancer);
 }
 function isIpAclTarget(value) {
-  if (!isRecord3(value)) return false;
+  if (!isRecord5(value)) return false;
   return isNonEmptyString(value["id"]) && typeof value["cidr_address"] === "string" && typeof value["description"] === "string" && isNonEmptyString(value["ipacl_group_id"]);
 }
 function isIpAclBinding(value) {
-  return isRecord3(value) && isNonEmptyString(value["loadbalancer_id"]) && isNonEmptyString(value["ipacl_group_id"]);
+  return isRecord5(value) && isNonEmptyString(value["loadbalancer_id"]) && isNonEmptyString(value["ipacl_group_id"]);
 }
 
 // src/services/loadbalancer/client.ts
-function isRecord4(value) {
+function isRecord6(value) {
   return typeof value === "object" && value !== null;
 }
 function requireNonEmptyId(id, label) {
@@ -11253,7 +13206,7 @@ function requireNonEmptyId(id, label) {
   return normalized;
 }
 function readArrayField(response, key, itemGuard, missingKeyMessage, invalidItemMessage) {
-  if (!isRecord4(response) || !Array.isArray(response[key])) {
+  if (!isRecord6(response) || !Array.isArray(response[key])) {
     throw new NhnCloudCliError(missingKeyMessage, EXIT_API_ERROR);
   }
   const items = response[key];
@@ -11263,7 +13216,7 @@ function readArrayField(response, key, itemGuard, missingKeyMessage, invalidItem
   return items;
 }
 function readObjectField(response, key, itemGuard, missingKeyMessage, invalidItemMessage) {
-  if (!isRecord4(response) || !(key in response)) {
+  if (!isRecord6(response) || !(key in response)) {
     throw new NhnCloudCliError(missingKeyMessage, EXIT_API_ERROR);
   }
   const item = response[key];
@@ -11401,10 +13354,10 @@ var LoadBalancerClient = class {
     }
     return raw;
   }
-  async getJson(path5, searchParams) {
-    const url = `${this.endpoint}${path5}`;
+  async getJson(path4, searchParams) {
+    const url = `${this.endpoint}${path4}`;
     try {
-      return await import_ky16.default.get(url, {
+      return await import_ky17.default.get(url, {
         headers: this.authHeaders(),
         searchParams,
         retry: 0,
@@ -11414,10 +13367,10 @@ var LoadBalancerClient = class {
       throw toNhnCloudCliError(error);
     }
   }
-  async postJson(path5, json) {
-    const url = `${this.endpoint}${path5}`;
+  async postJson(path4, json) {
+    const url = `${this.endpoint}${path4}`;
     try {
-      return await import_ky16.default.post(url, {
+      return await import_ky17.default.post(url, {
         headers: this.authHeaders(),
         json,
         retry: 0,
@@ -11427,10 +13380,10 @@ var LoadBalancerClient = class {
       throw toNhnCloudCliError(error);
     }
   }
-  async putJson(path5, json) {
-    const url = `${this.endpoint}${path5}`;
+  async putJson(path4, json) {
+    const url = `${this.endpoint}${path4}`;
     try {
-      return await import_ky16.default.put(url, {
+      return await import_ky17.default.put(url, {
         headers: this.authHeaders(),
         json,
         retry: 0,
@@ -11440,10 +13393,10 @@ var LoadBalancerClient = class {
       throw toNhnCloudCliError(error);
     }
   }
-  async deleteNoContent(path5) {
-    const url = `${this.endpoint}${path5}`;
+  async deleteNoContent(path4) {
+    const url = `${this.endpoint}${path4}`;
     try {
-      await import_ky16.default.delete(url, {
+      await import_ky17.default.delete(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: DEFAULT_TIMEOUT_MS
@@ -11481,7 +13434,7 @@ function parseIpOrCidr(value) {
   const normalized = value.trim();
   const parts = normalized.split("/");
   const address = parts[0] ?? "";
-  const version = (0, import_node_net2.isIP)(address);
+  const version = (0, import_node_net3.isIP)(address);
   if (version === 0 || parts.length > 2) {
     throw new NhnCloudCliError(
       `--cidr\uC740 IP \uC8FC\uC18C \uB610\uB294 CIDR\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4: ${JSON.stringify(value)}`,
@@ -11534,7 +13487,7 @@ async function resolveLoadBalancerClient(opts) {
 }
 
 // src/commands/loadbalancer/list.ts
-var listCommand16 = new import_commander59.Command("list").description("Load Balancer \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4 (\uC804\uCCB4 \uD544\uB4DC\uB294 --json)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+var listCommand18 = new import_commander67.Command("list").description("Load Balancer \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4 (\uC804\uCCB4 \uD544\uB4DC\uB294 --json)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   const { client } = await resolveLoadBalancerClient(opts);
   startSpinner("Load Balancer \uBAA9\uB85D \uC870\uD68C \uC911...");
@@ -11572,8 +13525,8 @@ var listCommand16 = new import_commander59.Command("list").description("Load Bal
 });
 
 // src/commands/loadbalancer/get.ts
-var import_commander60 = require("commander");
-var getCommand11 = new import_commander60.Command("get").description("Load Balancer\uB97C \uC774\uB984 \uB610\uB294 UUID\uB85C \uC870\uD68C\uD55C\uB2E4").argument("<loadbalancer>", "Load Balancer \uC774\uB984 \uB610\uB294 UUID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (loadBalancerInput, _opts, cmd) => {
+var import_commander68 = require("commander");
+var getCommand15 = new import_commander68.Command("get").description("Load Balancer\uB97C \uC774\uB984 \uB610\uB294 UUID\uB85C \uC870\uD68C\uD55C\uB2E4").argument("<loadbalancer>", "Load Balancer \uC774\uB984 \uB610\uB294 UUID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (loadBalancerInput, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   const input = requireResourceInput(loadBalancerInput, "Load Balancer");
   const { client } = await resolveLoadBalancerClient(opts);
@@ -11610,10 +13563,10 @@ var getCommand11 = new import_commander60.Command("get").description("Load Balan
 });
 
 // src/commands/loadbalancer/ipacl.ts
-var import_commander62 = require("commander");
+var import_commander70 = require("commander");
 
 // src/commands/loadbalancer/target.ts
-var import_commander61 = require("commander");
+var import_commander69 = require("commander");
 
 // src/commands/loadbalancer/rebind.ts
 function shellQuote(value) {
@@ -11744,7 +13697,7 @@ function targetWriteResult(operation, target, rebind) {
     rebind
   };
 }
-var listCommand17 = new import_commander61.Command("list").description("IP ACL \uB300\uC0C1 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<group>", "IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (groupInput, _opts, cmd) => {
+var listCommand19 = new import_commander69.Command("list").description("IP ACL \uB300\uC0C1 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<group>", "IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (groupInput, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   const input = requireResourceInput(groupInput, "IP ACL \uADF8\uB8F9");
   const { client } = await resolveLoadBalancerClient(opts);
@@ -11773,7 +13726,7 @@ var listCommand17 = new import_commander61.Command("list").description("IP ACL \
     ids: targets.map((target) => target.id)
   });
 });
-var addCommand = new import_commander61.Command("add").description("IP ACL \uB300\uC0C1\uC744 \uCD94\uAC00\uD558\uACE0 \uC5F0\uACB0\uB41C Load Balancer\uB97C \uC7AC\uBC14\uC778\uB529\uD55C\uB2E4").argument("<group>", "IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID").requiredOption("--cidr <ip-or-cidr>", "\uCD94\uAC00\uD560 IP \uC8FC\uC18C \uB610\uB294 CIDR").option("--description <text>", "IP ACL \uB300\uC0C1 \uC124\uBA85").option("--no-rebind", "\uB300\uC0C1 \uCD94\uAC00 \uD6C4 Load Balancer \uC7AC\uBC14\uC778\uB529 \uC0DD\uB7B5").option("--yes", "\uB300\uC0C1 \uCD94\uAC00 \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (groupInput, _opts, cmd) => {
+var addCommand = new import_commander69.Command("add").description("IP ACL \uB300\uC0C1\uC744 \uCD94\uAC00\uD558\uACE0 \uC5F0\uACB0\uB41C Load Balancer\uB97C \uC7AC\uBC14\uC778\uB529\uD55C\uB2E4").argument("<group>", "IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID").requiredOption("--cidr <ip-or-cidr>", "\uCD94\uAC00\uD560 IP \uC8FC\uC18C \uB610\uB294 CIDR").option("--description <text>", "IP ACL \uB300\uC0C1 \uC124\uBA85").option("--no-rebind", "\uB300\uC0C1 \uCD94\uAC00 \uD6C4 Load Balancer \uC7AC\uBC14\uC778\uB529 \uC0DD\uB7B5").option("--yes", "\uB300\uC0C1 \uCD94\uAC00 \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (groupInput, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   requireYes(opts.yes, "IP ACL \uB300\uC0C1 \uCD94\uAC00");
   const parsedGroup = requireResourceInput(groupInput, "IP ACL \uADF8\uB8F9");
@@ -11810,7 +13763,7 @@ var addCommand = new import_commander61.Command("add").description("IP ACL \uB30
   writeTargetWarnings(group, result);
   if (result.status === "partial") process.exitCode = EXIT_API_ERROR;
 });
-var removeCommand = new import_commander61.Command("remove").description("IP ACL \uB300\uC0C1\uC744 \uC0AD\uC81C\uD558\uACE0 \uC5F0\uACB0\uB41C Load Balancer\uB97C \uC7AC\uBC14\uC778\uB529\uD55C\uB2E4").argument("<target-id>", "\uC0AD\uC81C\uD560 IP ACL \uB300\uC0C1 UUID").option("--no-rebind", "\uB300\uC0C1 \uC0AD\uC81C \uD6C4 Load Balancer \uC7AC\uBC14\uC778\uB529 \uC0DD\uB7B5").option("--yes", "\uB300\uC0C1 \uC0AD\uC81C \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (targetInput, _opts, cmd) => {
+var removeCommand = new import_commander69.Command("remove").description("IP ACL \uB300\uC0C1\uC744 \uC0AD\uC81C\uD558\uACE0 \uC5F0\uACB0\uB41C Load Balancer\uB97C \uC7AC\uBC14\uC778\uB529\uD55C\uB2E4").argument("<target-id>", "\uC0AD\uC81C\uD560 IP ACL \uB300\uC0C1 UUID").option("--no-rebind", "\uB300\uC0C1 \uC0AD\uC81C \uD6C4 Load Balancer \uC7AC\uBC14\uC778\uB529 \uC0DD\uB7B5").option("--yes", "\uB300\uC0C1 \uC0AD\uC81C \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (targetInput, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   requireYes(opts.yes, "IP ACL \uB300\uC0C1 \uC0AD\uC81C");
   const parsedTargetId = requireResourceInput(targetInput, "IP ACL \uB300\uC0C1");
@@ -11841,13 +13794,13 @@ var removeCommand = new import_commander61.Command("remove").description("IP ACL
   writeTargetWarnings(group, result);
   if (result.status === "partial") process.exitCode = EXIT_API_ERROR;
 });
-var targetCommand = new import_commander61.Command("target").description("IP ACL \uB300\uC0C1 \uC870\uD68C\xB7\uAD00\uB9AC");
-targetCommand.addCommand(listCommand17);
+var targetCommand = new import_commander69.Command("target").description("IP ACL \uB300\uC0C1 \uC870\uD68C\xB7\uAD00\uB9AC");
+targetCommand.addCommand(listCommand19);
 targetCommand.addCommand(addCommand);
 targetCommand.addCommand(removeCommand);
 
 // src/commands/loadbalancer/ipacl.ts
-var listCommand18 = new import_commander62.Command("list").description("IP ACL \uADF8\uB8F9 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4 (\uC804\uCCB4 \uD544\uB4DC\uB294 --json)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+var listCommand20 = new import_commander70.Command("list").description("IP ACL \uADF8\uB8F9 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4 (\uC804\uCCB4 \uD544\uB4DC\uB294 --json)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   const { client } = await resolveLoadBalancerClient(opts);
   startSpinner("IP ACL \uADF8\uB8F9 \uBAA9\uB85D \uC870\uD68C \uC911...");
@@ -11875,7 +13828,7 @@ var listCommand18 = new import_commander62.Command("list").description("IP ACL \
     ids: groups.map((group) => group.id)
   });
 });
-var getCommand12 = new import_commander62.Command("get").description("IP ACL \uADF8\uB8F9\uC744 \uC774\uB984 \uB610\uB294 UUID\uB85C \uC870\uD68C\uD55C\uB2E4").argument("<group>", "IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (groupInput, _opts, cmd) => {
+var getCommand16 = new import_commander70.Command("get").description("IP ACL \uADF8\uB8F9\uC744 \uC774\uB984 \uB610\uB294 UUID\uB85C \uC870\uD68C\uD55C\uB2E4").argument("<group>", "IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (groupInput, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   const input = requireResourceInput(groupInput, "IP ACL \uADF8\uB8F9");
   const { client } = await resolveLoadBalancerClient(opts);
@@ -11908,7 +13861,7 @@ var getCommand12 = new import_commander62.Command("get").description("IP ACL \uA
     ids: [group.id]
   });
 });
-var createCommand11 = new import_commander62.Command("create").description("IP ACL \uADF8\uB8F9\uC744 \uC0DD\uC131\uD55C\uB2E4").requiredOption("--name <name>", "IP ACL \uADF8\uB8F9 \uC774\uB984").requiredOption("--action <ALLOW|DENY>", "IP \uC811\uADFC \uC81C\uC5B4 \uB3D9\uC791").option("--description <text>", "IP ACL \uADF8\uB8F9 \uC124\uBA85").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+var createCommand13 = new import_commander70.Command("create").description("IP ACL \uADF8\uB8F9\uC744 \uC0DD\uC131\uD55C\uB2E4").requiredOption("--name <name>", "IP ACL \uADF8\uB8F9 \uC774\uB984").requiredOption("--action <ALLOW|DENY>", "IP \uC811\uADFC \uC81C\uC5B4 \uB3D9\uC791").option("--description <text>", "IP ACL \uADF8\uB8F9 \uC124\uBA85").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   const parsedName = requireResourceInput(opts.name ?? "", "IP ACL \uADF8\uB8F9");
   const parsedAction = parseIpAclAction(opts.action ?? "");
@@ -11939,7 +13892,7 @@ var createCommand11 = new import_commander62.Command("create").description("IP A
     ids: [group.id]
   });
 });
-var deleteCommand9 = new import_commander62.Command("delete").description("IP ACL \uADF8\uB8F9\uACFC \uD558\uC704 \uB300\uC0C1\uC744 \uC0AD\uC81C\uD55C\uB2E4").argument("<group>", "IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID").option("--yes", "\uC0AD\uC81C\uC640 \uC5F0\uACB0 \uADDC\uCE59 \uC81C\uAC70 \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (groupInput, _opts, cmd) => {
+var deleteCommand11 = new import_commander70.Command("delete").description("IP ACL \uADF8\uB8F9\uACFC \uD558\uC704 \uB300\uC0C1\uC744 \uC0AD\uC81C\uD55C\uB2E4").argument("<group>", "IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID").option("--yes", "\uC0AD\uC81C\uC640 \uC5F0\uACB0 \uADDC\uCE59 \uC81C\uAC70 \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (groupInput, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   const confirmedYes = requireYes(opts.yes, "IP ACL \uADF8\uB8F9 \uC0AD\uC81C");
   const parsedGroup = requireResourceInput(groupInput, "IP ACL \uADF8\uB8F9");
@@ -11971,23 +13924,15 @@ var deleteCommand9 = new import_commander62.Command("delete").description("IP AC
     ids: [groupId]
   });
 });
-var ipaclCommand = new import_commander62.Command("ipacl").description("IP ACL \uADF8\uB8F9\xB7\uB300\uC0C1 \uC870\uD68C");
-ipaclCommand.addCommand(listCommand18);
-ipaclCommand.addCommand(getCommand12);
-ipaclCommand.addCommand(createCommand11);
-ipaclCommand.addCommand(deleteCommand9);
+var ipaclCommand = new import_commander70.Command("ipacl").description("IP ACL \uADF8\uB8F9\xB7\uB300\uC0C1 \uC870\uD68C");
+ipaclCommand.addCommand(listCommand20);
+ipaclCommand.addCommand(getCommand16);
+ipaclCommand.addCommand(createCommand13);
+ipaclCommand.addCommand(deleteCommand11);
 ipaclCommand.addCommand(targetCommand);
 
-// src/commands/loadbalancer/help.ts
-function configureLoadBalancerHelp(command) {
-  command.configureHelp({ showGlobalOptions: true });
-  for (const child of command.commands) {
-    configureLoadBalancerHelp(child);
-  }
-}
-
 // src/commands/loadbalancer/binding.ts
-var import_commander63 = require("commander");
+var import_commander71 = require("commander");
 function bindingResult(operation, loadBalancerId, groupIds) {
   return {
     operation,
@@ -12009,7 +13954,7 @@ function outputBindingResult(opts, result) {
     ids: [result.loadbalancer_id]
   });
 }
-var setIpAclCommand2 = new import_commander63.Command("set-ipacl").description("Load Balancer\uC758 IP ACL \uADF8\uB8F9 \uC5F0\uACB0\uC744 \uC804\uCCB4 \uAD50\uCCB4\uD55C\uB2E4").argument("<loadbalancer>", "Load Balancer \uC774\uB984 \uB610\uB294 UUID").requiredOption(
+var setIpAclCommand2 = new import_commander71.Command("set-ipacl").description("Load Balancer\uC758 IP ACL \uADF8\uB8F9 \uC5F0\uACB0\uC744 \uC804\uCCB4 \uAD50\uCCB4\uD55C\uB2E4").argument("<loadbalancer>", "Load Balancer \uC774\uB984 \uB610\uB294 UUID").requiredOption(
   "--group <group>",
   "\uC801\uC6A9\uD560 IP ACL \uADF8\uB8F9 \uC774\uB984 \uB610\uB294 UUID (\uBC18\uBCF5 \uAC00\uB2A5)",
   collectOption
@@ -12049,7 +13994,7 @@ var setIpAclCommand2 = new import_commander63.Command("set-ipacl").description("
     bindingResult("loadbalancer-set-ipacl", loadBalancerId, groupIds)
   );
 });
-var clearIpAclCommand = new import_commander63.Command("clear-ipacl").description("Load Balancer\uC758 \uBAA8\uB4E0 IP ACL \uADF8\uB8F9 \uC5F0\uACB0\uC744 \uD574\uC81C\uD55C\uB2E4").argument("<loadbalancer>", "Load Balancer \uC774\uB984 \uB610\uB294 UUID").option("--yes", "\uBAA8\uB4E0 IP ACL \uC5F0\uACB0 \uD574\uC81C \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (loadBalancerInput, _opts, cmd) => {
+var clearIpAclCommand = new import_commander71.Command("clear-ipacl").description("Load Balancer\uC758 \uBAA8\uB4E0 IP ACL \uADF8\uB8F9 \uC5F0\uACB0\uC744 \uD574\uC81C\uD55C\uB2E4").argument("<loadbalancer>", "Load Balancer \uC774\uB984 \uB610\uB294 UUID").option("--yes", "\uBAA8\uB4E0 IP ACL \uC5F0\uACB0 \uD574\uC81C \uD655\uC778").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (loadBalancerInput, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   const confirmedYes = requireYes(opts.yes, "Load Balancer IP ACL \uC5F0\uACB0 \uD574\uC81C");
   const parsedLoadBalancer = requireResourceInput(loadBalancerInput, "Load Balancer");
@@ -12140,8 +14085,8 @@ Agent workflow:
   2. nhncloud ncs workload list --json
   3. nhncloud ncs workload get <id> --json
 `;
-var program = new import_commander64.Command();
-program.name("nhncloud").description("NHN Cloud CLI \u2014 AI agent & terminal friendly").version("0.18.0").option("--json", "JSON \uD615\uC2DD\uC73C\uB85C \uCD9C\uB825").option("--quiet", "\uCD5C\uC18C \uCD9C\uB825 (\uC790\uB3D9\uD654\uC6A9)").option("--no-color", "\uC0C9\uC0C1 \uBE44\uD65C\uC131\uD654").option("--request-timeout <sec>", "HTTP \uC694\uCCAD \uD0C0\uC784\uC544\uC6C3 (\uCD08, \uAE30\uBCF8 30, \uBC94\uC704 1~3600). NHNCLOUD_REQUEST_TIMEOUT \uB85C\uB3C4 \uC9C0\uC815").addHelpText("after", rootAgentHints);
+var program = new import_commander72.Command();
+program.name("nhncloud").description("NHN Cloud CLI \u2014 AI agent & terminal friendly").version(CLI_VERSION).option("--json", "JSON \uD615\uC2DD\uC73C\uB85C \uCD9C\uB825").option("--quiet", "\uCD5C\uC18C \uCD9C\uB825 (\uC790\uB3D9\uD654\uC6A9)").option("--no-color", "\uC0C9\uC0C1 \uBE44\uD65C\uC131\uD654").option("--request-timeout <sec>", "HTTP \uC694\uCCAD \uD0C0\uC784\uC544\uC6C3 (\uCD08, \uAE30\uBCF8 30, \uBC94\uC704 1~3600). NHNCLOUD_REQUEST_TIMEOUT \uB85C\uB3C4 \uC9C0\uC815").addHelpText("after", rootAgentHints);
 program.hook("preAction", () => {
   const opts = program.opts();
   const rawTimeout = opts.requestTimeout ?? process.env["NHNCLOUD_REQUEST_TIMEOUT"];
@@ -12162,13 +14107,13 @@ program.hook("preAction", () => {
   }
 });
 program.addCommand(configureCommand);
-var logncrashCommand = new import_commander64.Command("logncrash").description("Log & Crash \uAD00\uB828 \uBA85\uB839").addHelpText("after", logncrashAgentWorkflow);
+var logncrashCommand = new import_commander72.Command("logncrash").description("Log & Crash \uAD00\uB828 \uBA85\uB839").addHelpText("after", logncrashAgentWorkflow);
 logncrashCommand.addCommand(availableTokenCommand);
 logncrashCommand.addCommand(searchCommand);
 logncrashCommand.addCommand(sendCommand);
 logncrashCommand.addCommand(exportCommand);
 program.addCommand(logncrashCommand);
-var deployCommand2 = new import_commander64.Command("deploy").description("NHN Cloud Deploy \uAD00\uB828 \uBA85\uB839").addHelpText("after", deployAgentWorkflow);
+var deployCommand2 = new import_commander72.Command("deploy").description("NHN Cloud Deploy \uAD00\uB828 \uBA85\uB839").addHelpText("after", deployAgentWorkflow);
 deployCommand2.hook("preSubcommand", async () => {
   await warnLegacyDeployTargets();
 });
@@ -12182,7 +14127,7 @@ deployCommand2.addCommand(binariesCommand);
 deployCommand2.addCommand(uploadCommand);
 deployCommand2.addCommand(downloadCommand);
 program.addCommand(deployCommand2);
-var instanceCommand = new import_commander64.Command("instance").description("Compute \uC778\uC2A4\uD134\uC2A4 \uAD00\uB828 \uBA85\uB839").addHelpText("after", instanceAgentWorkflow);
+var instanceCommand = new import_commander72.Command("instance").description("Compute \uC778\uC2A4\uD134\uC2A4 \uAD00\uB828 \uBA85\uB839").addHelpText("after", instanceAgentWorkflow);
 instanceCommand.addCommand(listCommand);
 instanceCommand.addCommand(flavorsCommand);
 instanceCommand.addCommand(availabilityZonesCommand);
@@ -12202,60 +14147,68 @@ instanceCommand.addCommand(volumeCommand);
 instanceCommand.addCommand(volumesCommand);
 instanceCommand.addCommand(securityGroupCommand2);
 program.addCommand(instanceCommand);
-var networkCommand = new import_commander64.Command("network").description("VPC\xB7\uC11C\uBE0C\uB137 \uC870\uD68C\uC640 \uBCF4\uC548\uADF8\uB8F9 \uAD00\uB9AC").addHelpText("after", networkAgentWorkflow);
+var networkCommand = new import_commander72.Command("network").description("VPC\xB7\uC11C\uBE0C\uB137 \uC870\uD68C\uC640 \uBCF4\uC548\uADF8\uB8F9 \uAD00\uB9AC").addHelpText("after", networkAgentWorkflow);
 networkCommand.addCommand(listCommand3);
 networkCommand.addCommand(subnetCommand);
 networkCommand.addCommand(securityGroupCommand);
 program.addCommand(networkCommand);
-var volumeCommand2 = new import_commander64.Command("volume").description("Block Storage \uBCFC\uB968 \uAD00\uB828 \uBA85\uB839").addHelpText("after", volumeAgentWorkflow);
+var volumeCommand2 = new import_commander72.Command("volume").description("Block Storage \uBCFC\uB968 \uAD00\uB828 \uBA85\uB839").addHelpText("after", volumeAgentWorkflow);
 volumeCommand2.addCommand(listCommand2);
 volumeCommand2.addCommand(getCommand);
 volumeCommand2.addCommand(createCommand);
 program.addCommand(volumeCommand2);
-var floatingipCommand = new import_commander64.Command("floatingip").description(
+var floatingipCommand = new import_commander72.Command("floatingip").description(
   "Floating IP(\uC778\uC2A4\uD134\uC2A4 \uACF5\uC778 IP) \uAD00\uB9AC"
 ).addHelpText("after", floatingIpAgentWorkflow);
 floatingipCommand.addCommand(listCommand6);
 floatingipCommand.addCommand(createCommand4);
 floatingipCommand.addCommand(deleteCommand3);
 program.addCommand(floatingipCommand);
-var loadbalancerCommand = new import_commander64.Command("loadbalancer").description("Load Balancer\xB7IP ACL \uC870\uD68C\xB7\uAD00\uB9AC").addHelpText("after", loadbalancerAgentWorkflow);
-loadbalancerCommand.addCommand(listCommand16);
-loadbalancerCommand.addCommand(getCommand11);
+var loadbalancerCommand = new import_commander72.Command("loadbalancer").description("Load Balancer\xB7IP ACL \uC870\uD68C\xB7\uAD00\uB9AC").addHelpText("after", loadbalancerAgentWorkflow);
+loadbalancerCommand.addCommand(listCommand18);
+loadbalancerCommand.addCommand(getCommand15);
 loadbalancerCommand.addCommand(ipaclCommand);
 loadbalancerCommand.addCommand(setIpAclCommand2);
 loadbalancerCommand.addCommand(clearIpAclCommand);
-configureLoadBalancerHelp(loadbalancerCommand);
 program.addCommand(loadbalancerCommand);
-var ncrCommand = new import_commander64.Command("ncr").description("NHN Container Registry \uAD00\uB828 \uBA85\uB839").addHelpText("after", ncrAgentWorkflow);
+var ncrCommand = new import_commander72.Command("ncr").description("NHN Container Registry \uAD00\uB828 \uBA85\uB839").addHelpText("after", ncrAgentWorkflow);
 ncrCommand.addCommand(listCommand7);
 ncrCommand.addCommand(getCommand5);
 ncrCommand.addCommand(imagesCommand2);
 ncrCommand.addCommand(tagsCommand);
 program.addCommand(ncrCommand);
-var nksCommand = new import_commander64.Command("nks").description("NHN Kubernetes Service \uAD00\uB828 \uBA85\uB839").addHelpText("after", nksAgentWorkflow);
+var nksCommand = new import_commander72.Command("nks").description("NHN Kubernetes Service \uAD00\uB828 \uBA85\uB839").addHelpText("after", nksAgentWorkflow);
 nksCommand.addCommand(supportsCommand);
 nksCommand.addCommand(clusterCommand);
 nksCommand.addCommand(nodegroupCommand);
 nksCommand.addCommand(addonTypeCommand);
 nksCommand.addCommand(addonCommand);
 program.addCommand(nksCommand);
-var ncsCommand = new import_commander64.Command("ncs").description("NHN Container Service \uAD00\uB828 \uBA85\uB839").addHelpText("after", ncsAgentWorkflow);
+var ncsCommand = new import_commander72.Command("ncs").description("NHN Container Service \uAD00\uB828 \uBA85\uB839").addHelpText("after", ncsAgentWorkflow);
 ncsCommand.addCommand(templateCommand);
 ncsCommand.addCommand(workloadCommand);
 ncsCommand.addCommand(malwareCommand);
 program.addCommand(ncsCommand);
-var apiGatewayCommand = new import_commander64.Command("apigateway").description("NHN API Gateway \uC870\uD68C \uBA85\uB839");
+var apiGatewayCommand = new import_commander72.Command("apigateway").description("NHN API Gateway \uC870\uD68C \uBA85\uB839");
 apiGatewayCommand.addCommand(serviceCommand);
 apiGatewayCommand.addCommand(resourceCommand);
 apiGatewayCommand.addCommand(stageCommand);
 program.addCommand(apiGatewayCommand);
+var skmCommand = new import_commander72.Command("skm").description("NHN Secure Key Manager \uD0A4 \uC800\uC7A5\uC18C\xB7\uD0A4 \uAD00\uB9AC\uC640 \uAE30\uBC00 \uB370\uC774\uD130\xB7\uC554\uBCF5\uD638\uD654\xB7\uC11C\uBA85 \uBA85\uB839");
+skmCommand.addCommand(confirmCommand);
+skmCommand.addCommand(keystoreCommand);
+skmCommand.addCommand(keyCommand);
+skmCommand.addCommand(secretCommand);
+skmCommand.addCommand(symmetricKeyCommand);
+skmCommand.addCommand(asymmetricKeyCommand);
+program.addCommand(skmCommand);
 program.addCommand(skillsCommand);
 program.addCommand(doctorCommand);
 program.addCommand(createCommandsCommand(program));
 configureCommanderExitCodes(program);
+configureGlobalOptionsHelp(program);
 program.parseAsync().catch((err) => {
-  if (err instanceof import_commander64.CommanderError) {
+  if (err instanceof import_commander72.CommanderError) {
     process.exit(err.exitCode);
   }
   const message = sanitizeMultilineForTerminal(