@bifos/nhncloud-cli 0.19.0 → 0.21.0

package/dist/index.js

@@ -333,6 +333,69 @@ async function warnLegacyDeployTargets() {
     )
   );
 }
+async function readJsonState(filePath) {
+  let raw;
+  try {
+    raw = await (0, import_promises.readFile)(filePath, "utf-8");
+  } catch (err) {
+    const code = err.code;
+    if (code === "ENOENT") return { state: "missing" };
+    return { state: "unreadable", reason: `\uD30C\uC77C\uC744 \uC77D\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4 (${code ?? "UNKNOWN"})` };
+  }
+  try {
+    return { state: "ok", parsed: JSON.parse(raw) };
+  } catch {
+    return { state: "invalid", reason: "JSON \uD615\uC2DD\uC774 \uC544\uB2D9\uB2C8\uB2E4" };
+  }
+}
+async function inspectPermissions(filePath) {
+  try {
+    const { mode } = await (0, import_promises.stat)(filePath);
+    if (process.platform === "win32") return "unknown";
+    return (mode & 63) === 0 ? "ok" : "too-open";
+  } catch {
+    return void 0;
+  }
+}
+function summarizeProfile(name, value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) {
+    return { name, environment: "invalid", blocks: [] };
+  }
+  const profile = value;
+  const env = profile["environment"];
+  const environment = env === void 0 ? "real" : env === "gov" ? "gov" : "invalid";
+  const blocks = Object.keys(profile).filter((key) => key !== "environment").sort();
+  return { name, environment, blocks };
+}
+async function inspectCredentialsFile() {
+  const result = await readJsonState(CREDENTIALS_PATH);
+  const permissions = result.state === "missing" ? void 0 : await inspectPermissions(CREDENTIALS_PATH);
+  const base = { path: CREDENTIALS_PATH, ...permissions ? { permissions } : {}, profiles: [] };
+  if (result.state !== "ok") {
+    return { ...base, state: result.state, ...result.reason ? { reason: result.reason } : {} };
+  }
+  if (!isCredentials(result.parsed)) {
+    return { ...base, state: "invalid", reason: "version: 1 \uACFC profiles \uD544\uB4DC\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4" };
+  }
+  const profiles = Object.entries(result.parsed.profiles).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([name, value]) => summarizeProfile(name, value));
+  return { ...base, state: "ok", profiles };
+}
+async function inspectConfigFile() {
+  const result = await readJsonState(CONFIG_PATH);
+  const base = { path: CONFIG_PATH, defaultProfile: null };
+  if (result.state !== "ok") {
+    return { ...base, state: result.state, ...result.reason ? { reason: result.reason } : {} };
+  }
+  if (!isConfig(result.parsed)) {
+    return { ...base, state: "invalid", reason: "version: 1 \uC774 \uD544\uC694\uD569\uB2C8\uB2E4" };
+  }
+  const defaultProfile = result.parsed.defaultProfile;
+  return {
+    ...base,
+    state: "ok",
+    defaultProfile: typeof defaultProfile === "string" && defaultProfile !== "" ? defaultProfile : null
+  };
+}
 
 // src/utils/terminal.ts
 function sanitizeForTerminal(value) {
@@ -357,6 +420,71 @@ function getRequestTimeoutMs() {
   return DEFAULT_TIMEOUT_MS;
 }
 
+// src/api/proxy.ts
+function nonEmpty(value) {
+  return value === void 0 || value === "" ? void 0 : value;
+}
+function readEnvPair(env, lower, upper) {
+  const lowerValue = nonEmpty(env[lower]);
+  if (lowerValue !== void 0) {
+    return { source: lower, value: lowerValue };
+  }
+  const upperValue = nonEmpty(env[upper]);
+  if (upperValue !== void 0) {
+    return { source: upper, value: upperValue };
+  }
+  return void 0;
+}
+function validateProxyUrl({ source, value }) {
+  let protocol;
+  try {
+    protocol = new URL(value).protocol;
+  } catch {
+    protocol = void 0;
+  }
+  if (protocol !== "http:" && protocol !== "https:") {
+    throw new NhnCloudCliError(
+      `${source} \uAC12\uC774 \uD504\uB85D\uC2DC URL \uD615\uC2DD\uC774 \uC544\uB2D9\uB2C8\uB2E4. http:// \uB610\uB294 https:// \uB85C \uC2DC\uC791\uD558\uB294 URL \uC744 \uC9C0\uC815\uD558\uC138\uC694.`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return value;
+}
+function resolveProxySettings(option, env) {
+  const noProxy = readEnvPair(env, "no_proxy", "NO_PROXY")?.value;
+  const optionValue = nonEmpty(option);
+  let settings;
+  if (optionValue !== void 0) {
+    const proxy = validateProxyUrl({ source: "--proxy", value: optionValue });
+    settings = { httpProxy: proxy, httpsProxy: proxy };
+  } else {
+    const https = readEnvPair(env, "https_proxy", "HTTPS_PROXY");
+    const http = readEnvPair(env, "http_proxy", "HTTP_PROXY");
+    if (https === void 0 && http === void 0) {
+      return void 0;
+    }
+    settings = {};
+    if (https !== void 0) {
+      settings.httpsProxy = validateProxyUrl(https);
+    }
+    if (http !== void 0) {
+      settings.httpProxy = validateProxyUrl(http);
+    }
+  }
+  if (noProxy !== void 0) {
+    settings.noProxy = noProxy;
+  }
+  return settings;
+}
+async function installProxy(settings) {
+  const { EnvHttpProxyAgent, setGlobalDispatcher } = await import("undici");
+  const options = {};
+  if (settings.httpProxy !== void 0) options.httpProxy = settings.httpProxy;
+  if (settings.httpsProxy !== void 0) options.httpsProxy = settings.httpsProxy;
+  if (settings.noProxy !== void 0) options.noProxy = settings.noProxy;
+  setGlobalDispatcher(new EnvHttpProxyAgent(options));
+}
+
 // src/commands/parse-options.ts
 var POSITIVE_INTEGER_PATTERN = /^[1-9]\d*$/;
 var NON_NEGATIVE_INTEGER_PATTERN = /^(0|[1-9]\d*)$/;
@@ -400,14 +528,97 @@ function parseNonNegativeIntegerOption(value, flag) {
 
 // src/commands/commander-errors.ts
 var import_commander = require("commander");
-function throwWithNormalizedExitCode(error) {
+
+// src/commands/unknown-option-hint.ts
+function normalizeName(name) {
+  return name.replace(/([a-z0-9])([A-Z])/g, "$1-$2").toLowerCase();
+}
+function parseUnknownOptionName(message) {
+  return /unknown option '--([^'=]+)/.exec(message)?.[1];
+}
+function findReferencedArgument(optionName, commandPath2, argumentNames) {
+  const option = normalizeName(optionName);
+  const normalized = argumentNames.map(normalizeName);
+  const exact = normalized.indexOf(option);
+  if (exact !== -1) {
+    return argumentNames[exact];
+  }
+  const prefixed = argumentNames.filter((_, i) => normalized[i].startsWith(`${option}-`));
+  const candidates = new Set(prefixed.length === 1 ? prefixed : []);
+  const segments = commandPath2.slice(1).map(normalizeName);
+  argumentNames.forEach((name, i) => {
+    const otherArguments = normalized.filter((_, j) => j !== i);
+    const matched = segments.some(
+      (segment) => !otherArguments.includes(segment) && option === `${segment}-${normalized[i]}`
+    );
+    if (matched) {
+      candidates.add(name);
+    }
+  });
+  return candidates.size === 1 ? [...candidates][0] : void 0;
+}
+function formatArgument(argument) {
+  const name = argument.variadic ? `${argument.name}...` : argument.name;
+  return argument.required ? `<${name}>` : `[${name}]`;
+}
+function buildUnknownOptionHint(input) {
+  if (input.message.includes("(Did you mean")) {
+    return "";
+  }
+  const optionName = parseUnknownOptionName(input.message);
+  if (optionName === void 0) {
+    return "";
+  }
+  const referenced = findReferencedArgument(
+    optionName,
+    input.commandPath,
+    input.arguments.map((argument2) => argument2.name)
+  );
+  const argument = input.arguments.find((candidate) => candidate.name === referenced);
+  if (argument === void 0) {
+    return "";
+  }
+  return `\uC548\uB0B4: --${optionName} \uB294 \uC635\uC158\uC774 \uC544\uB2D9\uB2C8\uB2E4. \uC704\uCE58 \uC778\uC218 ${formatArgument(argument)} \uB85C \uC804\uB2EC\uD558\uC138\uC694.
+\uC0AC\uC6A9\uBC95: ${input.commandPath.join(" ")} ${input.usage}
+`;
+}
+
+// src/commands/commander-errors.ts
+function writeUnknownOptionHint(command, error) {
+  const commandPath2 = [];
+  for (let current2 = command; current2 !== null; current2 = current2.parent) {
+    commandPath2.unshift(current2.name());
+  }
+  const hint = buildUnknownOptionHint({
+    message: error.message,
+    commandPath: commandPath2,
+    usage: command.usage(),
+    arguments: command.registeredArguments.map((argument) => ({
+      name: argument.name(),
+      required: argument.required,
+      variadic: argument.variadic
+    }))
+  });
+  if (hint === "") {
+    return;
+  }
+  const writeErr = command.configureOutput().writeErr;
+  if (writeErr) {
+    writeErr(hint);
+  } else {
+    process.stderr.write(hint);
+  }
+}
+function handleCommanderError(command, error) {
   if (error.code === "commander.missingMandatoryOptionValue") {
     error.exitCode = EXIT_PARAM_ERROR;
+  } else if (error.code === "commander.unknownOption") {
+    writeUnknownOptionHint(command, error);
   }
   throw error;
 }
 function configureCommanderExitCodes(root) {
-  root.exitOverride(throwWithNormalizedExitCode);
+  root.exitOverride((error) => handleCommanderError(root, error));
   for (const command of root.commands) {
     configureCommanderExitCodes(command);
   }
@@ -422,7 +633,7 @@ function configureGlobalOptionsHelp(root) {
 }
 
 // src/version.ts
-var CLI_VERSION = true ? "0.19.0" : "0.0.0-dev";
+var CLI_VERSION = true ? "0.21.0" : "0.0.0-dev";
 
 // src/commands/configure.ts
 var import_commander2 = require("commander");
@@ -555,6 +766,13 @@ function toNhnCloudCliError(err) {
     );
   }
   if (err instanceof Error) {
+    const cause = err.cause;
+    if (cause instanceof Error && cause.message !== "" && cause.message !== err.message) {
+      return new NhnCloudCliError(
+        `${err.message} (${sanitizeForTerminal(cause.message)})`,
+        EXIT_API_ERROR
+      );
+    }
     return new NhnCloudCliError(err.message, EXIT_API_ERROR);
   }
   return new NhnCloudCliError(String(err), EXIT_API_ERROR);
@@ -2523,14 +2741,14 @@ function compareByCodePoint(left, right) {
   return leftPoints.length - rightPoints.length;
 }
 function ensureRegularFile(filePath) {
-  let stat3;
+  let stat4;
   try {
-    stat3 = (0, import_node_fs2.lstatSync)(filePath);
+    stat4 = (0, import_node_fs2.lstatSync)(filePath);
   } catch (error) {
     const reason = error instanceof Error ? error.message : String(error);
     throw new NhnCloudCliError(`\uC2A4\uD0AC \uD30C\uC77C\uC744 \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${filePath} (${reason})`, EXIT_PARAM_ERROR);
   }
-  if (stat3.isSymbolicLink() || !stat3.isFile()) {
+  if (stat4.isSymbolicLink() || !stat4.isFile()) {
     throw new NhnCloudCliError(`\uC2A4\uD0AC \uCF58\uD150\uCE20\uB294 \uC815\uADDC \uD30C\uC77C\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4: ${filePath}`, EXIT_PARAM_ERROR);
   }
 }
@@ -2547,21 +2765,21 @@ function collectReferenceFiles(referencesRoot, currentDir, files) {
   }
   for (const entry of entries) {
     const entryPath = import_node_path4.default.join(currentDir, entry.name);
-    let stat3;
+    let stat4;
     try {
-      stat3 = (0, import_node_fs2.lstatSync)(entryPath);
+      stat4 = (0, import_node_fs2.lstatSync)(entryPath);
     } catch (error) {
       const reason = error instanceof Error ? error.message : String(error);
       throw new NhnCloudCliError(`\uC2A4\uD0AC \uCF58\uD150\uCE20\uB97C \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${entryPath} (${reason})`, EXIT_PARAM_ERROR);
     }
-    if (stat3.isSymbolicLink()) {
+    if (stat4.isSymbolicLink()) {
       throw new NhnCloudCliError(`\uC2A4\uD0AC \uCF58\uD150\uCE20\uC5D0 \uC2EC\uBCFC\uB9AD \uB9C1\uD06C\uB97C \uC0AC\uC6A9\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${entryPath}`, EXIT_PARAM_ERROR);
     }
-    if (stat3.isDirectory()) {
+    if (stat4.isDirectory()) {
       collectReferenceFiles(referencesRoot, entryPath, files);
       continue;
     }
-    if (!stat3.isFile()) {
+    if (!stat4.isFile()) {
       throw new NhnCloudCliError(`\uC2A4\uD0AC \uCF58\uD150\uCE20\uB294 \uC815\uADDC \uD30C\uC77C \uB610\uB294 \uB514\uB809\uD130\uB9AC\uC5EC\uC57C \uD569\uB2C8\uB2E4: ${entryPath}`, EXIT_PARAM_ERROR);
     }
     files.push(`references/${import_node_path4.default.relative(referencesRoot, entryPath).split(import_node_path4.default.sep).join("/")}`);
@@ -2609,12 +2827,24 @@ function calculateSkillContentDigest(skillRoot) {
 var PACKAGE_NAME3 = "@bifos/nhncloud-cli";
 var SKILL_NAME2 = "nhncloud-cli";
 var DIGEST_HEX_PATTERN = /^[0-9a-f]{64}$/;
-var defaultOperations = { rename: import_promises3.rename };
+var SKILL_AGENTS = ["claude", "codex"];
+var SKILL_AGENT_NAMES = { claude: "Claude Code", codex: "Codex" };
+var STATUS_PRIORITY = [
+  "corrupt",
+  "modified",
+  "unmanaged",
+  "broken",
+  "outdated",
+  "missing",
+  "current"
+];
+var PROTECTED_STATUSES = ["unmanaged", "modified", "corrupt"];
+var defaultOperations = { rename: import_promises3.rename, rm: import_promises3.rm };
 function sourcePath(context) {
   return import_node_path5.default.join(context.packageRoot, "skills", SKILL_NAME2);
 }
-function destinationPath(context) {
-  return import_node_path5.default.join(context.homeDir, ".claude", "skills", SKILL_NAME2);
+function destinationPath(context, agent) {
+  return agent === "claude" ? import_node_path5.default.join(context.homeDir, ".claude", "skills", SKILL_NAME2) : import_node_path5.default.join(context.homeDir, ".agents", "skills", SKILL_NAME2);
 }
 function resolveLinkTarget(linkPath, rawTarget) {
   return import_node_path5.default.isAbsolute(rawTarget) ? import_node_path5.default.normalize(rawTarget) : import_node_path5.default.resolve(import_node_path5.default.dirname(linkPath), rawTarget);
@@ -2725,16 +2955,74 @@ async function inspectRepository(targetPath, expected) {
   }
   return { status: "valid", installedVersion: manifest.packageVersion };
 }
-function statusBase(context) {
+function statusBase(context, agent) {
   return {
     schemaVersion: 1,
-    destination: destinationPath(context),
+    destination: destinationPath(context, agent),
     source: sourcePath(context),
     currentVersion: context.currentVersion
   };
 }
-async function inspectSkill(context) {
-  const base = statusBase(context);
+async function managedRepositoryStatus(context, base, linkTarget, repositoryLocation, isExpectedPath) {
+  const repositoryName = parseRepositoryName(repositoryLocation);
+  if (!repositoryName) {
+    return { ...base, status: "corrupt", linkTarget, managed: true };
+  }
+  const repository = await inspectRepository(repositoryLocation, repositoryName);
+  if (repository.status === "modified" || repository.status === "corrupt") {
+    return {
+      ...base,
+      status: repository.status,
+      installedVersion: repository.installedVersion ?? repositoryName.version,
+      linkTarget,
+      managed: true
+    };
+  }
+  if (repository.status === "missing") {
+    return {
+      ...base,
+      status: "broken",
+      installedVersion: repositoryName.version,
+      linkTarget,
+      managed: true
+    };
+  }
+  const currentDigest = calculateSkillContentDigest(base.source);
+  const isCurrent = repositoryName.version === context.currentVersion && repositoryName.digest === currentDigest && await isExpectedPath(repositoryPath(context, currentDigest));
+  return {
+    ...base,
+    status: isCurrent ? "current" : "outdated",
+    installedVersion: repository.installedVersion,
+    linkTarget,
+    managed: true
+  };
+}
+async function optionalRealpath(targetPath) {
+  try {
+    return await (0, import_promises3.realpath)(targetPath);
+  } catch (error) {
+    if (isNodeError(error, "ENOENT")) {
+      return void 0;
+    }
+    throw managerError(`\uC2A4\uD0AC \uACBD\uB85C\uB97C \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${targetPath}`, error);
+  }
+}
+async function inspectIndirectManagedLink(context, base, linkTarget) {
+  const realRoot = await optionalRealpath(repositoryRoot(context));
+  if (!realRoot) {
+    return void 0;
+  }
+  const realTarget = await optionalRealpath(linkTarget);
+  if (!realTarget || import_node_path5.default.dirname(realTarget) !== realRoot) {
+    return void 0;
+  }
+  return managedRepositoryStatus(context, base, linkTarget, realTarget, async (expectedPath) => {
+    const realExpected = await optionalRealpath(expectedPath);
+    return realExpected !== void 0 && realExpected === realTarget;
+  });
+}
+async function inspectAgentSkill(context, agent) {
+  const base = statusBase(context, agent);
   const destinationStat = await optionalLstat(base.destination);
   if (!destinationStat) {
     return { ...base, status: "missing", managed: false };
@@ -2767,38 +3055,17 @@ async function inspectSkill(context) {
     };
   }
   if (isManagedRepositoryLocation(context, linkTarget)) {
-    if (!repositoryName) {
-      return { ...base, status: "corrupt", linkTarget, managed: true };
-    }
-    const repository = await inspectRepository(linkTarget, repositoryName);
-    if (repository.status === "modified" || repository.status === "corrupt") {
-      return {
-        ...base,
-        status: repository.status,
-        installedVersion: repository.installedVersion ?? repositoryName.version,
-        linkTarget,
-        managed: true
-      };
-    }
-    if (repository.status === "missing") {
-      return {
-        ...base,
-        status: "broken",
-        installedVersion: repositoryName.version,
-        linkTarget,
-        managed: true
-      };
-    }
-    const currentDigest = calculateSkillContentDigest(base.source);
-    const expectedPath = repositoryPath(context, currentDigest);
-    const isCurrent = repositoryName.version === context.currentVersion && repositoryName.digest === currentDigest && import_node_path5.default.resolve(linkTarget) === import_node_path5.default.resolve(expectedPath);
-    return {
-      ...base,
-      status: isCurrent ? "current" : "outdated",
-      installedVersion: repository.installedVersion,
+    return managedRepositoryStatus(
+      context,
+      base,
       linkTarget,
-      managed: true
-    };
+      linkTarget,
+      async (expectedPath) => import_node_path5.default.resolve(linkTarget) === import_node_path5.default.resolve(expectedPath)
+    );
+  }
+  const indirect = await inspectIndirectManagedLink(context, base, linkTarget);
+  if (indirect) {
+    return indirect;
   }
   const legacyPackage = targetStat.isDirectory() ? await readLegacyPackageMetadata(linkTarget) : void 0;
   if (legacyPackage) {
@@ -2812,6 +3079,14 @@ async function inspectSkill(context) {
   }
   return { ...base, status: "unmanaged", linkTarget, managed: false };
 }
+function aggregateStatus(statuses) {
+  return STATUS_PRIORITY.find((token) => statuses.some((status) => status.status === token)) ?? "current";
+}
+async function inspectSkill(context) {
+  const claude = await inspectAgentSkill(context, "claude");
+  const codex = await inspectAgentSkill(context, "codex");
+  return { ...claude, status: aggregateStatus([claude, codex]), agents: { claude, codex } };
+}
 function utcBackupSuffix() {
   return `${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}-${(0, import_node_crypto3.randomUUID)()}`;
 }
@@ -2908,35 +3183,123 @@ async function prepareRepository(context, force, operations) {
     await (0, import_promises3.rm)(staging, { recursive: true, force: true });
   }
 }
-async function switchActiveLink(context, repository, previousStatus, force, operations) {
-  const destination = destinationPath(context);
-  const parent = import_node_path5.default.dirname(destination);
-  await (0, import_promises3.mkdir)(parent, { recursive: true });
-  const temporaryLink = import_node_path5.default.join(parent, `.${SKILL_NAME2}.link-${(0, import_node_crypto3.randomUUID)()}`);
-  const backupPaths = [];
-  await (0, import_promises3.symlink)(repository, temporaryLink);
-  try {
-    if (previousStatus.status === "unmanaged") {
-      if (!force) {
-        throw managerError(`\uAD00\uB9AC\uB418\uC9C0 \uC54A\uC740 \uC2A4\uD0AC \uD56D\uBAA9\uC774 \uC788\uC2B5\uB2C8\uB2E4. --force\uB85C \uBC31\uC5C5 \uD6C4 \uAD50\uCCB4\uD558\uC138\uC694: ${destination}`);
-      }
-      const backup = await backupPath(destination, operations);
-      backupPaths.push(backup);
+function temporaryLinkPath(destination) {
+  return import_node_path5.default.join(import_node_path5.default.dirname(destination), `.${SKILL_NAME2}.link-${(0, import_node_crypto3.randomUUID)()}`);
+}
+async function planLinkSwitches(context, previous) {
+  const switches = [];
+  for (const agent of SKILL_AGENTS) {
+    const agentStatus = previous.agents[agent];
+    if (agentStatus.status === "current") {
+      continue;
+    }
+    const destination = destinationPath(context, agent);
+    const parent = import_node_path5.default.dirname(destination);
+    await (0, import_promises3.mkdir)(parent, { recursive: true });
+    const resolvedDestination = import_node_path5.default.join(await (0, import_promises3.realpath)(parent), import_node_path5.default.basename(destination));
+    const sameTarget = switches.find((entry) => entry.resolvedDestination === resolvedDestination);
+    if (sameTarget) {
+      sameTarget.agents.push(agent);
+      continue;
+    }
+    let previousRawTarget;
+    if (agentStatus.status !== "missing" && agentStatus.status !== "unmanaged") {
       try {
-        await operations.rename(temporaryLink, destination);
+        previousRawTarget = await (0, import_promises3.readlink)(destination);
       } catch (error) {
-        return await restoreBackup(backup, destination, operations, error);
+        throw managerError(`\uC2A4\uD0AC \uB9C1\uD06C\uB97C \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${destination}`, error);
       }
-      return backupPaths;
     }
+    switches.push({
+      agents: [agent],
+      destination,
+      resolvedDestination,
+      previous: agentStatus,
+      previousRawTarget,
+      temporaryLink: temporaryLinkPath(destination),
+      activated: false
+    });
+  }
+  return switches;
+}
+async function rollbackLinkSwitches(switches, operations, temporaryLinks) {
+  const failed = [];
+  const preservedBackups = [];
+  const removeEntry = operations.rm ?? defaultOperations.rm;
+  let firstError;
+  for (const entry of [...switches].reverse()) {
+    try {
+      if (entry.activated && entry.backup) {
+        await removeEntry(entry.destination, { force: true });
+        await operations.rename(entry.backup, entry.destination);
+      } else if (entry.activated && entry.previousRawTarget !== void 0) {
+        const restoreLink = temporaryLinkPath(entry.destination);
+        temporaryLinks.push(restoreLink);
+        await (0, import_promises3.symlink)(entry.previousRawTarget, restoreLink);
+        await operations.rename(restoreLink, entry.destination);
+      } else if (entry.activated && entry.previous.status === "missing") {
+        await removeEntry(entry.destination, { force: true });
+      } else if (!entry.activated && entry.backup) {
+        await operations.rename(entry.backup, entry.destination);
+      }
+    } catch (error) {
+      failed.push(entry.destination);
+      if (entry.backup) {
+        preservedBackups.push(entry.backup);
+      }
+      firstError ??= error;
+    }
+  }
+  return { failed, preservedBackups, firstError };
+}
+async function switchActiveLinks(context, repository, previous, operations) {
+  const switches = await planLinkSwitches(context, previous);
+  const temporaryLinks = switches.map((entry) => entry.temporaryLink);
+  const backupPaths = [];
+  try {
+    let failure;
+    let failedAfterVerification = false;
     try {
-      await operations.rename(temporaryLink, destination);
+      for (const entry of switches) {
+        await (0, import_promises3.symlink)(repository, entry.temporaryLink);
+      }
+      for (const entry of switches) {
+        if (entry.previous.status === "unmanaged") {
+          entry.backup = await backupPath(entry.destination, operations);
+          backupPaths.push(entry.backup);
+        }
+        await operations.rename(entry.temporaryLink, entry.destination);
+        entry.activated = true;
+      }
+      const status = await inspectSkill(context);
+      if (status.status === "current") {
+        return { backupPaths, status };
+      }
+      failure = managerError(`\uC2A4\uD0AC \uC124\uCE58 \uD6C4 \uC0C1\uD0DC\uAC00 current\uAC00 \uC544\uB2D9\uB2C8\uB2E4: ${status.status}`);
+      failedAfterVerification = true;
     } catch (error) {
-      throw managerError(`\uD65C\uC131 \uC2A4\uD0AC \uB9C1\uD06C\uB97C \uC804\uD658\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${destination}`, error);
+      failure = error;
+    }
+    const rollback = await rollbackLinkSwitches(switches, operations, temporaryLinks);
+    if (rollback.failed.length > 0) {
+      throw managerError(
+        `\uC2A4\uD0AC \uC804\uD658\uC5D0 \uC2E4\uD328\uD588\uACE0 \uC77C\uBD80 \uACBD\uB85C\uB97C \uB418\uB3CC\uB9AC\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4: ${rollback.failed.join(", ")}; \uBCF4\uC874\uD55C \uBC31\uC5C5: ${rollback.preservedBackups.join(", ") || "\uC5C6\uC74C"}; \uC804\uD658 \uC624\uB958: ${toReason(failure)}`,
+        rollback.firstError
+      );
+    }
+    if (failedAfterVerification) {
+      throw failure;
     }
-    return backupPaths;
+    const changed = switches.filter((entry) => entry.activated || entry.backup !== void 0);
+    if (changed.length === 0) {
+      throw managerError("\uC2A4\uD0AC \uC804\uD658\uC744 \uC2DC\uC791\uD558\uC9C0 \uBABB\uD574 \uC5B4\uB5A4 \uACBD\uB85C\uB3C4 \uBC14\uAFB8\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4", failure);
+    }
+    throw managerError(
+      `\uC2A4\uD0AC \uC804\uD658\uC5D0 \uC2E4\uD328\uD574 \uBC14\uAFBC \uACBD\uB85C\uB97C \uC774\uC804 \uC0C1\uD0DC\uB85C \uB418\uB3CC\uB838\uC2B5\uB2C8\uB2E4: ${changed.map((entry) => entry.destination).join(", ")}`,
+      failure
+    );
   } finally {
-    await (0, import_promises3.rm)(temporaryLink, { force: true });
+    await Promise.all(temporaryLinks.map((link) => (0, import_promises3.rm)(link, { force: true })));
   }
 }
 function installAction(status) {
@@ -2971,23 +3334,26 @@ async function installSkillInternal(context, options = {}, operations = defaultO
       backupPaths: []
     };
   }
-  if ((previousStatus.status === "unmanaged" || previousStatus.status === "modified" || previousStatus.status === "corrupt") && !force) {
-    throw managerError(`\uC2A4\uD0AC \uC0C1\uD0DC\uAC00 ${previousStatus.status}\uC785\uB2C8\uB2E4. --force\uB85C \uBC31\uC5C5 \uD6C4 \uAD50\uCCB4\uD558\uC138\uC694: ${previousStatus.destination}`);
+  if (!force) {
+    for (const agent of SKILL_AGENTS) {
+      const agentStatus = previousStatus.agents[agent];
+      if (PROTECTED_STATUSES.includes(agentStatus.status)) {
+        throw managerError(
+          `${SKILL_AGENT_NAMES[agent]} \uC2A4\uD0AC \uC0C1\uD0DC\uAC00 ${agentStatus.status}\uC785\uB2C8\uB2E4. --force\uB85C \uBC31\uC5C5 \uD6C4 \uAD50\uCCB4\uD558\uC138\uC694: ${agentStatus.destination}`
+        );
+      }
+    }
   }
   const prepared = await prepareRepository(context, force, operations);
-  const linkBackups = await switchActiveLink(context, prepared.repository, previousStatus, force, operations);
-  const status = await inspectSkill(context);
-  if (status.status !== "current") {
-    throw managerError(`\uC2A4\uD0AC \uC124\uCE58 \uD6C4 \uC0C1\uD0DC\uAC00 current\uAC00 \uC544\uB2D9\uB2C8\uB2E4: ${status.status}`);
-  }
+  const switched = await switchActiveLinks(context, prepared.repository, previousStatus, operations);
   return {
     schemaVersion: 1,
     action: installAction(previousStatus.status),
     changed: true,
     previousStatus,
-    status,
+    status: switched.status,
     repositoryPath: prepared.repository,
-    backupPaths: [...prepared.backupPaths, ...linkBackups]
+    backupPaths: [...prepared.backupPaths, ...switched.backupPaths]
   };
 }
 async function installSkill(context, options = {}, operations = defaultOperations) {
@@ -3000,73 +3366,185 @@ async function installSkill(context, options = {}, operations = defaultOperation
     throw managerError("\uC2A4\uD0AC\uC744 \uC124\uCE58\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.", error);
   }
 }
+async function tryRestoreCandidate(candidate, destination, operations) {
+  try {
+    if (await optionalLstat(destination)) {
+      return { restored: false, preserved: candidate };
+    }
+    await operations.rename(candidate, destination);
+    return { restored: true };
+  } catch (error) {
+    return { restored: false, error, preserved: candidate };
+  }
+}
 async function restoreUninstallCandidate(candidate, destination, operations, originalError) {
-  if (await optionalLstat(destination)) {
+  const result = await tryRestoreCandidate(candidate, destination, operations);
+  if (result.restored) {
+    throw managerError(`\uD65C\uC131 \uC2A4\uD0AC \uB9C1\uD06C\uB97C \uC81C\uAC70\uD558\uC9C0 \uC54A\uACE0 \uC6D0\uB798 \uC704\uCE58\uB85C \uBCF5\uC6D0\uD588\uC2B5\uB2C8\uB2E4: ${destination}`, originalError);
+  }
+  if (result.error === void 0) {
     throw managerError(
       `\uD65C\uC131 \uC2A4\uD0AC \uACBD\uB85C\uAC00 \uB3D9\uC2DC\uC5D0 \uBCC0\uACBD\uB418\uC5B4 \uC81C\uAC70\uD558\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4. \uC774\uB3D9\uB41C \uD56D\uBAA9\uC744 \uBCF4\uC874\uD588\uC2B5\uB2C8\uB2E4: ${candidate}`,
       originalError
     );
   }
+  throw managerError(
+    `\uD65C\uC131 \uC2A4\uD0AC \uB9C1\uD06C\uB97C \uC81C\uAC70\uD558\uC9C0 \uBABB\uD588\uACE0 \uC6D0\uB798 \uC704\uCE58\uB85C \uBCF5\uC6D0\uD558\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4. \uC774\uB3D9\uB41C \uD56D\uBAA9: ${candidate}; \uC81C\uAC70 \uC624\uB958: ${toReason(originalError)}`,
+    result.error
+  );
+}
+async function tryRestoreRemovedLink(destination, rawTarget, operations) {
+  const restoreLink = temporaryLinkPath(destination);
   try {
-    await operations.rename(candidate, destination);
-  } catch (restoreError) {
-    throw managerError(
-      `\uD65C\uC131 \uC2A4\uD0AC \uB9C1\uD06C\uB97C \uC81C\uAC70\uD558\uC9C0 \uBABB\uD588\uACE0 \uC6D0\uB798 \uC704\uCE58\uB85C \uBCF5\uC6D0\uD558\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4. \uC774\uB3D9\uB41C \uD56D\uBAA9: ${candidate}; \uC81C\uAC70 \uC624\uB958: ${toReason(originalError)}`,
-      restoreError
-    );
+    if (await optionalLstat(destination)) {
+      return { restored: false };
+    }
+    await (0, import_promises3.symlink)(rawTarget, restoreLink);
+    await operations.rename(restoreLink, destination);
+    return { restored: true };
+  } catch (error) {
+    return { restored: false, error };
+  } finally {
+    await (0, import_promises3.rm)(restoreLink, { force: true });
   }
-  throw managerError(`\uD65C\uC131 \uC2A4\uD0AC \uB9C1\uD06C\uB97C \uC81C\uAC70\uD558\uC9C0 \uC54A\uACE0 \uC6D0\uB798 \uC704\uCE58\uB85C \uBCF5\uC6D0\uD588\uC2B5\uB2C8\uB2E4: ${destination}`, originalError);
 }
-async function uninstallSkill(context, operations = defaultOperations) {
-  const destination = destinationPath(context);
-  const status = await inspectSkill(context);
-  if (status.status === "missing") {
-    return "absent";
+async function planUninstallTargets(context) {
+  const statuses = [];
+  for (const agent of SKILL_AGENTS) {
+    const status = await inspectAgentSkill(context, agent);
+    if (status.status !== "missing" && (!status.managed || !status.linkTarget)) {
+      throw managerError(`\uAD00\uB9AC\uB418\uC9C0 \uC54A\uC740 \uC2A4\uD0AC \uD56D\uBAA9\uC774\uBBC0\uB85C \uC5B4\uB290 \uACBD\uB85C\uB3C4 \uC81C\uAC70\uD558\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4: ${status.destination}`);
+    }
+    statuses.push({ agent, status });
   }
-  if (!status.managed || !status.linkTarget) {
-    throw managerError(`\uAD00\uB9AC\uB418\uC9C0 \uC54A\uC740 \uC2A4\uD0AC \uD56D\uBAA9\uC774\uBBC0\uB85C \uC81C\uAC70\uD558\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4: ${destination}`);
+  const targets = [];
+  for (const { agent, status } of statuses) {
+    if (status.status === "missing" || !status.linkTarget) {
+      continue;
+    }
+    const realParent = await optionalRealpath(import_node_path5.default.dirname(status.destination));
+    if (!realParent) {
+      continue;
+    }
+    const resolvedDestination = import_node_path5.default.join(realParent, import_node_path5.default.basename(status.destination));
+    const sameTarget = targets.find((entry) => entry.resolvedDestination === resolvedDestination);
+    if (sameTarget) {
+      sameTarget.agents.push(agent);
+      continue;
+    }
+    targets.push({
+      agents: [agent],
+      destination: status.destination,
+      resolvedDestination,
+      linkTarget: status.linkTarget
+    });
   }
+  return targets;
+}
+function uninstallRollbackError(results, originalError, handledLabel) {
+  const failed = results.filter(({ result }) => !result.restored);
+  if (failed.length === 0) {
+    return managerError(
+      `\uC2A4\uD0AC \uC81C\uAC70\uC5D0 \uC2E4\uD328\uD574 ${handledLabel}\uB97C \uC774\uC804 \uC0C1\uD0DC\uB85C \uB418\uB3CC\uB838\uC2B5\uB2C8\uB2E4: ${results.map(({ destination }) => destination).join(", ")}`,
+      originalError
+    );
+  }
+  const failedText = failed.map(
+    ({ destination, result }) => result.preserved ? `${destination} (\uC774\uB3D9\uB41C \uD56D\uBAA9: ${result.preserved})` : destination
+  ).join(", ");
+  return managerError(
+    `\uC2A4\uD0AC \uC81C\uAC70\uC5D0 \uC2E4\uD328\uD588\uACE0 \uC77C\uBD80 \uACBD\uB85C\uB97C \uB418\uB3CC\uB9AC\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4: ${failedText}; \uC81C\uAC70 \uC624\uB958: ${toReason(originalError)}`,
+    failed.find(({ result }) => result.error !== void 0)?.result.error
+  );
+}
+async function rollbackMovedCandidates(moved, operations, originalError) {
+  const results = [];
+  for (const target of [...moved].reverse()) {
+    results.push({
+      destination: target.destination,
+      result: await tryRestoreCandidate(target.candidate, target.destination, operations)
+    });
+  }
+  throw uninstallRollbackError(results, originalError, "\uC62E\uAE34 \uACBD\uB85C");
+}
+async function moveUninstallCandidate(target, moved, operations) {
+  const { destination } = target;
   const candidate = import_node_path5.default.join(import_node_path5.default.dirname(destination), `.${SKILL_NAME2}.uninstall-${(0, import_node_crypto3.randomUUID)()}`);
   try {
     await operations.rename(destination, candidate);
   } catch (error) {
     if (isNodeError(error, "ENOENT")) {
-      return "absent";
+      return void 0;
+    }
+    const moveError = managerError(`\uD65C\uC131 \uC2A4\uD0AC \uB9C1\uD06C\uB97C \uC81C\uAC70\uC6A9 \uC784\uC2DC \uACBD\uB85C\uB85C \uC774\uB3D9\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${destination}`, error);
+    if (moved.length === 0) {
+      throw moveError;
     }
-    throw managerError(`\uD65C\uC131 \uC2A4\uD0AC \uB9C1\uD06C\uB97C \uC81C\uAC70\uC6A9 \uC784\uC2DC \uACBD\uB85C\uB85C \uC774\uB3D9\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${destination}`, error);
+    return await rollbackMovedCandidates(moved, operations, moveError);
   }
-  let candidateTarget;
+  let rawTarget;
+  let verificationError;
   try {
     const candidateStat = await (0, import_promises3.lstat)(candidate);
     if (!candidateStat.isSymbolicLink()) {
-      return await restoreUninstallCandidate(
-        candidate,
-        destination,
-        operations,
-        new Error("\uAC80\uC0AC \uD6C4 \uD65C\uC131 \uACBD\uB85C\uAC00 \uC2EC\uBCFC\uB9AD \uB9C1\uD06C\uAC00 \uC544\uB2CC \uD56D\uBAA9\uC73C\uB85C \uBCC0\uACBD\uB418\uC5C8\uC2B5\uB2C8\uB2E4.")
-      );
+      verificationError = new Error("\uAC80\uC0AC \uD6C4 \uD65C\uC131 \uACBD\uB85C\uAC00 \uC2EC\uBCFC\uB9AD \uB9C1\uD06C\uAC00 \uC544\uB2CC \uD56D\uBAA9\uC73C\uB85C \uBCC0\uACBD\uB418\uC5C8\uC2B5\uB2C8\uB2E4.");
+    } else {
+      rawTarget = await (0, import_promises3.readlink)(candidate);
+      if (resolveLinkTarget(destination, rawTarget) !== target.linkTarget) {
+        verificationError = new Error("\uAC80\uC0AC \uD6C4 \uD65C\uC131 \uC2A4\uD0AC \uB9C1\uD06C \uB300\uC0C1\uC774 \uBCC0\uACBD\uB418\uC5C8\uC2B5\uB2C8\uB2E4.");
+      }
     }
-    candidateTarget = resolveLinkTarget(destination, await (0, import_promises3.readlink)(candidate));
   } catch (error) {
-    if (error instanceof NhnCloudCliError) {
-      throw error;
+    verificationError = error;
+  }
+  if (verificationError !== void 0 || rawTarget === void 0) {
+    if (moved.length === 0) {
+      return await restoreUninstallCandidate(candidate, destination, operations, verificationError);
     }
-    return await restoreUninstallCandidate(candidate, destination, operations, error);
+    return await rollbackMovedCandidates([...moved, { destination, candidate }], operations, verificationError);
   }
-  if (candidateTarget !== status.linkTarget) {
-    return await restoreUninstallCandidate(
-      candidate,
-      destination,
-      operations,
-      new Error("\uAC80\uC0AC \uD6C4 \uD65C\uC131 \uC2A4\uD0AC \uB9C1\uD06C \uB300\uC0C1\uC774 \uBCC0\uACBD\uB418\uC5C8\uC2B5\uB2C8\uB2E4.")
-    );
+  return { ...target, candidate, rawTarget };
+}
+async function removeUninstallCandidates(moved, operations) {
+  const removeEntry = operations.rm ?? defaultOperations.rm;
+  for (const [index, target] of moved.entries()) {
+    try {
+      await removeEntry(target.candidate, { force: true });
+    } catch (originalError) {
+      if (index === 0) {
+        if (moved.length === 1) {
+          return await restoreUninstallCandidate(target.candidate, target.destination, operations, originalError);
+        }
+        return await rollbackMovedCandidates(moved, operations, originalError);
+      }
+      const results = [];
+      for (const [restoreIndex, entry] of moved.entries()) {
+        const result = restoreIndex < index ? await tryRestoreRemovedLink(entry.destination, entry.rawTarget, operations) : await tryRestoreCandidate(entry.candidate, entry.destination, operations);
+        results.push({ destination: entry.destination, result });
+      }
+      throw uninstallRollbackError(results, originalError, "\uC9C0\uC6B4 \uACBD\uB85C");
+    }
   }
-  try {
-    await (0, import_promises3.rm)(candidate);
-  } catch (error) {
-    return await restoreUninstallCandidate(candidate, destination, operations, error);
+}
+async function uninstallSkill(context, operations = defaultOperations) {
+  const targets = await planUninstallTargets(context);
+  const moved = [];
+  for (const target of targets) {
+    const movedTarget = await moveUninstallCandidate(target, moved, operations);
+    if (movedTarget) {
+      moved.push(movedTarget);
+    }
   }
-  return "removed";
+  await removeUninstallCandidates(moved, operations);
+  const agentResult = (agent) => ({
+    action: moved.some((target) => target.agents.includes(agent)) ? "removed" : "absent",
+    destination: destinationPath(context, agent)
+  });
+  const agents = { claude: agentResult("claude"), codex: agentResult("codex") };
+  return {
+    action: SKILL_AGENTS.some((agent) => agents[agent].action === "removed") ? "removed" : "absent",
+    agents
+  };
 }
 
 // src/formatters/table.ts
@@ -3142,9 +3620,16 @@ function outputSkillStatus(opts, status) {
     rows: [
       ["\uC0C1\uD0DC", status.status],
       ["\uD604\uC7AC \uBC84\uC804", status.currentVersion],
-      ["\uC124\uCE58 \uBC84\uC804", terminalText(status.installedVersion)],
-      ["\uC124\uCE58 \uACBD\uB85C", terminalText(status.destination)],
-      ["\uB9C1\uD06C \uB300\uC0C1", terminalText(status.linkTarget)],
+      ...SKILL_AGENTS.flatMap((agent) => {
+        const name = SKILL_AGENT_NAMES[agent];
+        const agentStatus = status.agents[agent];
+        return [
+          [`${name} \uC0C1\uD0DC`, agentStatus.status],
+          [`${name} \uC124\uCE58 \uBC84\uC804`, terminalText(agentStatus.installedVersion)],
+          [`${name} \uC124\uCE58 \uACBD\uB85C`, terminalText(agentStatus.destination)],
+          [`${name} \uB9C1\uD06C \uB300\uC0C1`, terminalText(agentStatus.linkTarget)]
+        ];
+      }),
       ["\uBCF5\uAD6C \uBA85\uB839", skillRecoveryCommand(status.status) ?? "\uC870\uCE58 \uC5C6\uC74C"]
     ],
     raw: status,
@@ -3159,7 +3644,10 @@ function outputSkillInstallResult(opts, result) {
       ["\uBCC0\uACBD \uC5EC\uBD80", result.changed ? "\uBCC0\uACBD\uB428" : "\uBCC0\uACBD \uC5C6\uC74C"],
       ["\uC774\uC804 \uC0C1\uD0DC", result.previousStatus.status],
       ["\uD604\uC7AC \uC0C1\uD0DC", result.status.status],
-      ["\uC124\uCE58 \uACBD\uB85C", terminalText(result.status.destination)],
+      ...SKILL_AGENTS.map((agent) => [
+        `${SKILL_AGENT_NAMES[agent]} \uC124\uCE58 \uACBD\uB85C`,
+        terminalText(result.status.agents[agent].destination)
+      ]),
       ["\uAD00\uB9AC \uC800\uC7A5\uC18C", terminalText(result.repositoryPath)],
       [
         "\uBC31\uC5C5 \uACBD\uB85C",
@@ -3175,7 +3663,14 @@ function outputSkillUninstallResult(opts, result) {
     headers: ["\uD56D\uBAA9", "\uAC12"],
     rows: [
       ["\uC791\uC5C5", result.action === "removed" ? "\uD65C\uC131 \uB9C1\uD06C \uC81C\uAC70 \uC644\uB8CC" : "\uD65C\uC131 \uB9C1\uD06C \uC5C6\uC74C"],
-      ["\uC124\uCE58 \uACBD\uB85C", terminalText(result.destination)],
+      ...SKILL_AGENTS.flatMap((agent) => {
+        const name = SKILL_AGENT_NAMES[agent];
+        const agentResult = result.agents[agent];
+        return [
+          [`${name} \uC124\uCE58 \uACBD\uB85C`, terminalText(agentResult.destination)],
+          [`${name} \uACB0\uACFC`, agentResult.action === "removed" ? "\uD65C\uC131 \uB9C1\uD06C \uC81C\uAC70" : "\uD65C\uC131 \uB9C1\uD06C \uC5C6\uC74C"]
+        ];
+      }),
       ["\uAD00\uB9AC \uC800\uC7A5\uC18C", "\uBCF4\uC874\uB428"]
     ],
     raw: result,
@@ -3198,7 +3693,7 @@ async function showStatus(cmd, dependencies) {
 }
 function createInstallCommand(name, dependencies) {
   return new import_commander3.Command(name).description(
-    name === "install" ? "Claude Code \uC2A4\uD0AC\uC744 \uAD00\uB9AC \uC800\uC7A5\uC18C\uC5D0 \uC124\uCE58\uD55C\uB2E4" : "Claude Code \uC2A4\uD0AC\uC744 \uD604\uC7AC CLI \uBC84\uC804\uC73C\uB85C \uAC31\uC2E0\uD55C\uB2E4"
+    name === "install" ? "Claude Code\xB7Codex \uC2A4\uD0AC\uC744 \uAD00\uB9AC \uC800\uC7A5\uC18C\uC5D0 \uC124\uCE58\uD55C\uB2E4" : "Claude Code\xB7Codex \uC2A4\uD0AC\uC744 \uD604\uC7AC CLI \uBC84\uC804\uC73C\uB85C \uAC31\uC2E0\uD55C\uB2E4"
   ).option("--force", "\uC0AC\uC6A9\uC790 \uD56D\uBAA9\uC774\uB098 \uC218\uC815\xB7\uC190\uC0C1\uB41C \uAD00\uB9AC \uC800\uC7A5\uC18C\uB97C \uBC31\uC5C5 \uD6C4 \uAD50\uCCB4\uD55C\uB2E4").action(async (_localOpts, cmd) => {
     const opts = cmd.optsWithGlobals();
     const context = dependencies.createContext();
@@ -3207,96 +3702,280 @@ function createInstallCommand(name, dependencies) {
   });
 }
 function createSkillsCommand(dependencies = defaultDependencies) {
-  const statusCommand = new import_commander3.Command("status").description("Claude Code \uC2A4\uD0AC\uC758 \uAD00\uB9AC \uC0C1\uD0DC\uB97C \uC870\uD68C\uD55C\uB2E4").action(async (_opts, cmd) => showStatus(cmd, dependencies));
-  const uninstallCommand = new import_commander3.Command("uninstall").description("\uD65C\uC131 Claude Code \uC2A4\uD0AC \uB9C1\uD06C\uB97C \uC81C\uAC70\uD55C\uB2E4").action(async (_opts, cmd) => {
+  const statusCommand = new import_commander3.Command("status").description("Claude Code\xB7Codex \uC2A4\uD0AC\uC758 \uAD00\uB9AC \uC0C1\uD0DC\uB97C \uC870\uD68C\uD55C\uB2E4").action(async (_opts, cmd) => showStatus(cmd, dependencies));
+  const uninstallCommand = new import_commander3.Command("uninstall").description("\uD65C\uC131 Claude Code\xB7Codex \uC2A4\uD0AC \uB9C1\uD06C\uB97C \uC81C\uAC70\uD55C\uB2E4").action(async (_opts, cmd) => {
     const opts = cmd.optsWithGlobals();
     const context = dependencies.createContext();
-    const previousStatus = await dependencies.inspect(context);
-    const action = await dependencies.uninstall(context);
+    const uninstalled = await dependencies.uninstall(context);
     const result = {
       schemaVersion: 1,
-      action,
-      changed: action === "removed",
+      action: uninstalled.action,
+      changed: uninstalled.action === "removed",
       status: "missing",
-      destination: previousStatus.destination,
-      repositoryPreserved: true
+      destination: uninstalled.agents.claude.destination,
+      repositoryPreserved: true,
+      agents: uninstalled.agents
     };
     outputSkillUninstallResult(opts, result);
   });
-  return new import_commander3.Command("skills").description(`Claude Code \uC2A4\uD0AC(${SKILL_NAME3}) \uC124\uCE58 \uAD00\uB9AC`).addCommand(statusCommand).addCommand(createInstallCommand("install", dependencies)).addCommand(createInstallCommand("update", dependencies)).addCommand(uninstallCommand).action(async (_opts, cmd) => showStatus(cmd, dependencies));
+  return new import_commander3.Command("skills").description(`Claude Code\xB7Codex \uC2A4\uD0AC(${SKILL_NAME3}) \uC124\uCE58 \uAD00\uB9AC`).addCommand(statusCommand).addCommand(createInstallCommand("install", dependencies)).addCommand(createInstallCommand("update", dependencies)).addCommand(uninstallCommand).action(async (_opts, cmd) => showStatus(cmd, dependencies));
 }
 var skillsCommand = createSkillsCommand();
 
 // src/commands/doctor.ts
 var import_commander4 = require("commander");
 var import_chalk3 = __toESM(require("chalk"));
-var import_promises4 = require("fs/promises");
-var import_node_os4 = require("os");
-var import_node_path6 = __toESM(require("path"));
-var SKILL_NAME4 = "nhncloud-cli";
-var CREDENTIALS_PATH2 = import_node_path6.default.join((0, import_node_os4.homedir)(), ".nhncloud", "credentials.json");
-var CONFIG_PATH2 = import_node_path6.default.join((0, import_node_os4.homedir)(), ".nhncloud", "config.json");
-async function readProfiles() {
-  let raw;
+var SKILL_ERROR_REASON = "\uACF5\uAC1C \uC2A4\uD0AC \uC0C1\uD0DC\uB97C \uD310\uC815\uD558\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4";
+var defaultDependencies2 = {
+  inspectCredentials: inspectCredentialsFile,
+  inspectConfig: inspectConfigFile,
+  resolveProfile: resolveProfileName,
+  createSkillContext: createSkillManagerContext,
+  inspectSkill: inspectAgentSkill,
+  connection: {
+    getUserAccessKey,
+    getIaasCredential,
+    getOptionalServiceCredential,
+    verifyUserAccessKey,
+    verifyIaas,
+    verifyLogncrash,
+    verifyNcr,
+    verifyNcs
+  }
+};
+async function resolveTargetProfile(cliProfile, dependencies) {
   try {
-    raw = await (0, import_promises4.readFile)(CREDENTIALS_PATH2, "utf-8");
-  } catch {
-    return { profiles: [], parseError: false, missing: true };
+    return await dependencies.resolveProfile(cliProfile);
+  } catch (err) {
+    if (err instanceof NhnCloudCliError) return null;
+    throw err;
   }
+}
+async function inspectAgentSkillForDoctor(dependencies, agent) {
   try {
-    const parsed = JSON.parse(raw);
-    return { profiles: Object.keys(parsed.profiles ?? {}), parseError: false, missing: false };
-  } catch {
-    return { profiles: [], parseError: true, missing: false };
+    const status = await dependencies.inspectSkill(dependencies.createSkillContext(), agent);
+    return { ...status, recoveryCommand: skillRecoveryCommand(status.status) ?? null };
+  } catch (err) {
+    const code = typeof err === "object" && err !== null && "code" in err && typeof err.code === "string" ? err.code : void 0;
+    return { status: "error", reason: code ? `${SKILL_ERROR_REASON}: ${code}` : SKILL_ERROR_REASON };
   }
 }
-async function readDefaultProfile() {
+function connectionHasFailure(connection) {
+  return connection.checked && Object.values(connection.targets).some((target) => target.status === "failed");
+}
+var CONNECTION_TARGETS = ["userAccessKey", "iaas", "logncrash", "ncr", "ncs"];
+function skipAll(reason) {
+  return Object.fromEntries(
+    CONNECTION_TARGETS.map((target) => [target, { status: "skipped", reason }])
+  );
+}
+async function runVerify(verify) {
   try {
-    const raw = await (0, import_promises4.readFile)(CONFIG_PATH2, "utf-8");
-    const parsed = JSON.parse(raw);
-    return parsed.defaultProfile ?? null;
-  } catch {
-    return null;
+    return await verify() ? { status: "ok" } : { status: "failed", reason: "auth" };
+  } catch (err) {
+    const exitCode = err instanceof NhnCloudCliError ? err.exitCode : EXIT_API_ERROR;
+    return { status: "failed", reason: "error", exitCode };
   }
 }
-var doctorCommand = new import_commander4.Command("doctor").description("\uC790\uACA9\uC99D\uBA85\xB7\uC2A4\uD0AC \uC124\uCE58 \uC0C1\uD0DC\uB97C \uC9C4\uB2E8\uD55C\uB2E4(\uC624\uD504\uB77C\uC778 \u2014 \uC5F0\uACB0 \uD14C\uC2A4\uD2B8\uB294 configure \uB85C)").action(async () => {
-  console.log(import_chalk3.default.bold("\n\u{1F50D} nhncloud-cli \uC9C4\uB2E8\n"));
-  const creds = await readProfiles();
-  const defaultProfile = await readDefaultProfile();
-  console.log(import_chalk3.default.bold("\uC790\uACA9\uC99D\uBA85"));
-  if (creds.missing) {
-    console.log(`  ${import_chalk3.default.red("\u274C \uBBF8\uC124\uC815")} \u2014 ${CREDENTIALS_PATH2} \uC5C6\uC74C. nhncloud configure \uB85C \uC124\uC815\uD558\uC138\uC694.`);
-  } else if (creds.parseError) {
-    console.log(`  ${import_chalk3.default.red("\u274C \uD30C\uC2F1 \uC624\uB958")} \u2014 ${CREDENTIALS_PATH2} \uAC00 \uC62C\uBC14\uB978 JSON \uC778\uC9C0 \uD655\uC778\uD558\uC138\uC694.`);
-  } else if (creds.profiles.length === 0) {
-    console.log(`  ${import_chalk3.default.yellow("\u26A0 profile \uC5C6\uC74C")} \u2014 nhncloud configure \uB85C \uC124\uC815\uD558\uC138\uC694.`);
-  } else {
-    console.log(`  ${import_chalk3.default.green("\u2713 \uC124\uC815\uB428")} \u2014 profile: ${creds.profiles.join(", ")}`);
-    console.log(`  \uAE30\uBCF8 profile: ${defaultProfile ? import_chalk3.default.green(defaultProfile) : import_chalk3.default.gray("\uBBF8\uC9C0\uC815 (default \uC0AC\uC6A9)")}`);
+async function readRequired(read) {
+  try {
+    return { value: await read() };
+  } catch (err) {
+    const reason = err instanceof NhnCloudCliError ? "not-configured" : "profile-unavailable";
+    return { skipped: { status: "skipped", reason } };
   }
-  console.log(import_chalk3.default.bold("\nClaude Code \uC2A4\uD0AC"));
-  const skillStatus = await inspectSkill(createSkillManagerContext());
-  if (skillStatus.status === "current") {
-    console.log(
-      `  ${SKILL_NAME4}: ${import_chalk3.default.green(`\u2713 current (${skillStatus.installedVersion ?? skillStatus.currentVersion})`)}`
-    );
-  } else if (skillStatus.status === "missing") {
-    console.log(
-      `  ${SKILL_NAME4}: ${import_chalk3.default.gray(`\uBBF8\uC124\uCE58 \u2014 ${skillRecoveryCommand(skillStatus.status)}`)}`
+}
+async function readAppkey(service, profileName, deps) {
+  try {
+    const credential = await deps.getOptionalServiceCredential(service, profileName);
+    if (!credential?.appkey) return { skipped: { status: "skipped", reason: "not-configured" } };
+    return { appkey: credential.appkey };
+  } catch {
+    return { skipped: { status: "skipped", reason: "profile-unavailable" } };
+  }
+}
+async function checkConnection(profileName, credentials, profileSummary, deps) {
+  if (credentials.state !== "ok" || profileName === null || profileSummary === void 0 || profileSummary.environment === "invalid") {
+    return skipAll("profile-unavailable");
+  }
+  if (profileSummary.environment === "gov") return skipAll("gov-unsupported");
+  const uakRead = await readRequired(() => deps.getUserAccessKey(profileName));
+  const uak = "value" in uakRead ? uakRead.value : void 0;
+  const userAccessKey = "value" in uakRead ? await runVerify(() => deps.verifyUserAccessKey(uakRead.value)) : uakRead.skipped;
+  const iaasRead = await readRequired(() => deps.getIaasCredential(profileName));
+  const iaasResult = "value" in iaasRead ? await runVerify(() => deps.verifyIaas(iaasRead.value)) : iaasRead.skipped;
+  const checkAppkeyService = async (service, verify, usesOAuth) => {
+    const read = await readAppkey(service, profileName, deps);
+    if ("skipped" in read) return read.skipped;
+    if (uak === void 0) return { status: "skipped", reason: "uak-missing" };
+    if (usesOAuth && userAccessKey.status !== "ok") return { status: "skipped", reason: "uak-failed" };
+    return runVerify(() => verify(uak, read.appkey));
+  };
+  const logncrash = await checkAppkeyService("logncrash", deps.verifyLogncrash, true);
+  const ncr = await checkAppkeyService("ncr", deps.verifyNcr, false);
+  const ncs = await checkAppkeyService("ncs", deps.verifyNcs, true);
+  return { userAccessKey, iaas: iaasResult, logncrash, ncr, ncs };
+}
+async function buildDoctorReport(options, dependencies) {
+  const credentials = await dependencies.inspectCredentials();
+  const config = await dependencies.inspectConfig();
+  const profileName = await resolveTargetProfile(options.profile, dependencies);
+  const profileSummary = credentials.state === "ok" && profileName !== null ? credentials.profiles.find((summary) => summary.name === profileName) : void 0;
+  const connection = options.checkConnection ? {
+    checked: true,
+    profile: profileName,
+    targets: await checkConnection(profileName, credentials, profileSummary, dependencies.connection)
+  } : { checked: false };
+  const claude = await inspectAgentSkillForDoctor(dependencies, "claude");
+  const codex = await inspectAgentSkillForDoctor(dependencies, "codex");
+  const ready = profileSummary !== void 0 && profileSummary.environment !== "invalid" && profileSummary.blocks.length > 0 && !connectionHasFailure(connection);
+  return {
+    schemaVersion: 1,
+    ready,
+    credentials,
+    config,
+    profile: { name: profileName, exists: profileSummary !== void 0 },
+    connection,
+    skills: { agents: { claude, codex } }
+  };
+}
+function line(text = "") {
+  process.stdout.write(`${text}
+`);
+}
+function printCredentialsSection(credentials) {
+  const filePath = sanitizeForTerminal(credentials.path);
+  const reason = sanitizeForTerminal(credentials.reason ?? "");
+  line(import_chalk3.default.bold("\uC790\uACA9\uC99D\uBA85"));
+  switch (credentials.state) {
+    case "missing":
+      line(`  ${import_chalk3.default.red("\u274C \uBBF8\uC124\uC815")} \u2014 ${filePath} \uC5C6\uC74C. nhncloud configure \uB85C \uC124\uC815\uD558\uC138\uC694.`);
+      break;
+    case "invalid":
+      line(`  ${import_chalk3.default.red("\u274C \uD615\uC2DD \uC624\uB958")} \u2014 ${filePath}: ${reason}`);
+      break;
+    case "unreadable":
+      line(`  ${import_chalk3.default.red("\u274C \uC77D\uAE30 \uC2E4\uD328")} \u2014 ${filePath}: ${reason}`);
+      break;
+    case "ok":
+      if (credentials.profiles.length === 0) {
+        line(`  ${import_chalk3.default.yellow("\u26A0 profile \uC5C6\uC74C")} \u2014 nhncloud configure \uB85C \uC124\uC815\uD558\uC138\uC694.`);
+        break;
+      }
+      line(`  ${import_chalk3.default.green("\u2713 \uC124\uC815\uB428")} \u2014 profile:`);
+      for (const summary of credentials.profiles) {
+        const name = sanitizeForTerminal(summary.name);
+        const blocks = summary.blocks.map(sanitizeForTerminal).join(", ") || "-";
+        if (summary.environment === "invalid") {
+          line(`    ${name} ${import_chalk3.default.yellow("\u26A0 environment \uAC12\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4")} [${blocks}]`);
+        } else {
+          line(`    ${name}${summary.environment === "gov" ? " (gov)" : ""} [${blocks}]`);
+        }
+      }
+      break;
+  }
+  if (credentials.permissions === "too-open") {
+    line(`  ${import_chalk3.default.yellow("\u26A0 \uD30C\uC77C \uAD8C\uD55C\uC774 \uB113\uC2B5\uB2C8\uB2E4")} \u2014 chmod 600 ${filePath}`);
+  }
+}
+function printConfigSection(config) {
+  line(import_chalk3.default.bold("\n\uC124\uC815 \uD30C\uC77C"));
+  if (config.state === "invalid" || config.state === "unreadable") {
+    line(
+      `  ${import_chalk3.default.red(config.state === "invalid" ? "\u274C \uD615\uC2DD \uC624\uB958" : "\u274C \uC77D\uAE30 \uC2E4\uD328")} \u2014 ${sanitizeForTerminal(config.path)}: ${sanitizeForTerminal(config.reason ?? "")}`
     );
+  }
+  line(
+    `  \uAE30\uBCF8 profile: ${config.defaultProfile ? import_chalk3.default.green(sanitizeForTerminal(config.defaultProfile)) : import_chalk3.default.gray("\uBBF8\uC9C0\uC815 (default \uC0AC\uC6A9)")}`
+  );
+}
+function printProfileSection(profile) {
+  line(import_chalk3.default.bold("\n\uB300\uC0C1 profile"));
+  if (profile.name === null) {
+    line(`  ${import_chalk3.default.red("\u274C \uD574\uC11D \uC2E4\uD328")} \u2014 config.json \uC744 \uBA3C\uC800 \uACE0\uCE58\uC138\uC694.`);
+  } else if (profile.exists) {
+    line(`  ${import_chalk3.default.green(`\u2713 ${sanitizeForTerminal(profile.name)}`)}`);
   } else {
-    console.log(
-      `  ${SKILL_NAME4}: ${import_chalk3.default.yellow(`\u26A0 ${skillStatus.status}`)} \u2014 ${skillRecoveryCommand(skillStatus.status)}`
+    line(
+      `  ${import_chalk3.default.yellow(`\u26A0 ${sanitizeForTerminal(profile.name)} \uC5C6\uC74C`)} \u2014 nhncloud configure \uB85C \uC124\uC815\uD558\uC138\uC694.`
     );
   }
-  console.log();
-  if (!creds.missing && !creds.parseError && creds.profiles.length > 0) {
-    console.log(import_chalk3.default.green("\u2713 \uAE30\uBCF8 \uC124\uC815\uC774 \uC644\uB8CC\uB418\uC5C8\uC2B5\uB2C8\uB2E4."));
+}
+function printSkillLine(agent, skill) {
+  const name = SKILL_AGENT_NAMES[agent];
+  if (skill.status === "error") {
+    line(`  ${name}: ${import_chalk3.default.yellow("\u26A0 error")} \u2014 ${sanitizeForTerminal(skill.reason)}`);
+  } else if (skill.status === "current") {
+    const version = sanitizeForTerminal(skill.installedVersion ?? skill.currentVersion);
+    line(`  ${name}: ${import_chalk3.default.green(`\u2713 current (${version})`)}`);
+  } else if (skill.status === "missing") {
+    line(`  ${name}: ${import_chalk3.default.gray(`\uBBF8\uC124\uCE58 \u2014 ${skill.recoveryCommand}`)}`);
   } else {
-    console.log(import_chalk3.default.yellow("\u26A0 \uC124\uC815\uC774 \uD544\uC694\uD569\uB2C8\uB2E4: nhncloud configure"));
+    line(`  ${name}: ${import_chalk3.default.yellow(`\u26A0 ${skill.status}`)} \u2014 ${skill.recoveryCommand}`);
   }
-  console.log();
-});
+}
+function printSkillSection(agents) {
+  line(import_chalk3.default.bold("\n\uACF5\uAC1C \uC2A4\uD0AC"));
+  for (const agent of SKILL_AGENTS) printSkillLine(agent, agents[agent]);
+}
+var SKIP_REASONS = {
+  "not-configured": "\uC124\uC815 \uC5C6\uC74C",
+  "uak-missing": "\uACF5\uD1B5 userAccessKey \uC5C6\uC74C",
+  "uak-failed": "userAccessKey \uD655\uC778\uC774 \uC131\uACF5\uD558\uC9C0 \uC54A\uC544 \uAC74\uB108\uB700",
+  "gov-unsupported": "\uACF5\uACF5\uB9DD profile \uC740 \uC5F0\uACB0 \uD655\uC778\uC744 \uC9C0\uC6D0\uD558\uC9C0 \uC54A\uC74C",
+  "profile-unavailable": "\uB300\uC0C1 profile \uC744 \uC77D\uC744 \uC218 \uC5C6\uC74C"
+};
+function printConnectionSection(connection) {
+  if (!connection.checked) return;
+  line(import_chalk3.default.bold("\n\uC5F0\uACB0 \uD655\uC778"));
+  for (const target of CONNECTION_TARGETS) {
+    const result = connection.targets[target];
+    const label = `  ${target}:`;
+    if (result.status === "ok") {
+      const region = target === "ncr" || target === "ncs" ? " (kr1)" : "";
+      line(`${label} ${import_chalk3.default.green(`\u2713 \uC131\uACF5${region}`)}`);
+    } else if (result.status === "failed" && result.reason === "auth") {
+      line(`${label} ${import_chalk3.default.red("\u274C \uC778\uC99D \uC2E4\uD328")} \u2014 \uD0A4\uB098 appkey \uB97C \uD655\uC778\uD558\uC138\uC694.`);
+    } else if (result.status === "failed") {
+      line(`${label} ${import_chalk3.default.red(`\u274C \uC624\uB958 (\uC885\uB8CC \uCF54\uB4DC ${result.exitCode ?? EXIT_API_ERROR})`)}`);
+    } else {
+      const reason = result.reason ? SKIP_REASONS[result.reason] ?? result.reason : "";
+      line(`${label} ${import_chalk3.default.gray(`\uAC74\uB108\uB700 \u2014 ${reason}`)}`);
+    }
+  }
+}
+function printText(report) {
+  line(import_chalk3.default.bold("\n\u{1F50D} nhncloud-cli \uC9C4\uB2E8\n"));
+  printCredentialsSection(report.credentials);
+  printConfigSection(report.config);
+  printProfileSection(report.profile);
+  printConnectionSection(report.connection);
+  printSkillSection(report.skills.agents);
+  line();
+  if (report.ready) {
+    line(import_chalk3.default.green("\u2713 \uAE30\uBCF8 \uC124\uC815\uC774 \uC644\uB8CC\uB418\uC5C8\uC2B5\uB2C8\uB2E4."));
+  } else {
+    line(import_chalk3.default.yellow("\u26A0 \uC124\uC815\uC774 \uD544\uC694\uD569\uB2C8\uB2E4: nhncloud configure"));
+  }
+  line();
+}
+function createDoctorCommand(dependencies = defaultDependencies2) {
+  return new import_commander4.Command("doctor").description("\uC790\uACA9\uC99D\uBA85\xB7\uC124\uC815\xB7\uC2A4\uD0AC \uC0C1\uD0DC\uB97C \uC9C4\uB2E8\uD55C\uB2E4(\uAE30\uBCF8 \uC624\uD504\uB77C\uC778, --check-connection \uC73C\uB85C \uC5F0\uACB0 \uD655\uC778)").option("--profile <name>", "\uC9C4\uB2E8\uD560 profile \uC774\uB984").option("--check-connection", "\uB300\uC0C1 profile \uC758 \uC790\uACA9\uC99D\uBA85\uC73C\uB85C \uC2E4\uC81C \uC5F0\uACB0\uC744 \uD655\uC778\uD55C\uB2E4 (\uC678\uBD80 API \uD638\uCD9C)").action(async (_opts, cmd) => {
+    const opts = cmd.optsWithGlobals();
+    const report = await buildDoctorReport(
+      { profile: opts.profile, checkConnection: opts.checkConnection },
+      dependencies
+    );
+    if (opts.json) {
+      printJson(report);
+    } else if (opts.quiet) {
+      process.stdout.write(report.ready ? "ready\n" : "not-ready\n");
+    } else {
+      printText(report);
+    }
+  });
+}
+var doctorCommand = createDoctorCommand();
 
 // src/commands/logncrash/search.ts
 var import_commander5 = require("commander");
@@ -3545,19 +4224,19 @@ var VALID_LEVELS = ["DEBUG", "INFO", "WARN", "ERROR", "FATAL"];
 function resolveBody(opts) {
   if (opts.body !== void 0) return opts.body;
   if (opts.file !== void 0) {
-    let stat3;
+    let stat4;
     try {
-      stat3 = (0, import_node_fs3.statSync)(opts.file);
+      stat4 = (0, import_node_fs3.statSync)(opts.file);
     } catch (e) {
       const reason = e.code ?? (e instanceof Error ? e.message : String(e));
       throw new NhnCloudCliError(`\uB85C\uADF8 \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${opts.file} (${reason})`, EXIT_PARAM_ERROR);
     }
-    if (!stat3.isFile()) {
+    if (!stat4.isFile()) {
       throw new NhnCloudCliError(`\uB85C\uADF8 \uD30C\uC77C\uC774 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${opts.file}`, EXIT_PARAM_ERROR);
     }
-    if (stat3.size > MAX_LOG_BYTES) {
+    if (stat4.size > MAX_LOG_BYTES) {
       throw new NhnCloudCliError(
-        `\uB85C\uADF8 \uD30C\uC77C\uC774 \uB108\uBB34 \uD07D\uB2C8\uB2E4: ${stat3.size} \uBC14\uC774\uD2B8 (\uD55C\uB3C4 ${MAX_LOG_BYTES} \uBC14\uC774\uD2B8).`,
+        `\uB85C\uADF8 \uD30C\uC77C\uC774 \uB108\uBB34 \uD07D\uB2C8\uB2E4: ${stat4.size} \uBC14\uC774\uD2B8 (\uD55C\uB3C4 ${MAX_LOG_BYTES} \uBC14\uC774\uD2B8).`,
         EXIT_PARAM_ERROR
       );
     }
@@ -3628,22 +4307,22 @@ credentials.json \uC5D0 "appkey": "<appkey>" \uB97C \uCD94\uAC00\uD558\uC138\uC6
 
 // src/commands/logncrash/export.ts
 var import_commander7 = require("commander");
-var import_promises5 = require("fs/promises");
+var import_promises4 = require("fs/promises");
 var import_node_fs4 = require("fs");
 var import_node_crypto4 = require("crypto");
 var MAX_TOTAL = 1e5;
-var defaultExportFileOps = { appendFile: import_promises5.appendFile, rename: import_promises5.rename };
-function assertWritable(path5, force) {
+var defaultExportFileOps = { appendFile: import_promises4.appendFile, rename: import_promises4.rename };
+function assertWritable(path4, force) {
   if (force) return;
   try {
-    (0, import_node_fs4.statSync)(path5);
+    (0, import_node_fs4.statSync)(path4);
   } catch (e) {
     if (e.code === "ENOENT") return;
     const reason = e.code ?? (e instanceof Error ? e.message : String(e));
-    throw new NhnCloudCliError(`--output \uACBD\uB85C\uB97C \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${path5} (${reason})`, EXIT_PARAM_ERROR);
+    throw new NhnCloudCliError(`--output \uACBD\uB85C\uB97C \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${path4} (${reason})`, EXIT_PARAM_ERROR);
   }
   throw new NhnCloudCliError(
-    `--output \uB300\uC0C1\uC774 \uC774\uBBF8 \uC874\uC7AC\uD569\uB2C8\uB2E4: ${path5}. \uB36E\uC5B4\uC4F0\uB824\uBA74 --force \uB97C \uC4F0\uC138\uC694.`,
+    `--output \uB300\uC0C1\uC774 \uC774\uBBF8 \uC874\uC7AC\uD569\uB2C8\uB2E4: ${path4}. \uB36E\uC5B4\uC4F0\uB824\uBA74 --force \uB97C \uC4F0\uC138\uC694.`,
     EXIT_PARAM_ERROR
   );
 }
@@ -3754,7 +4433,7 @@ function createExportCommand(finalizeOps) {
         } catch (err) {
           if (failureOrigin !== "search" || !(err instanceof LogncrashServerError)) throw err;
           await endAndClose(stream);
-          await (0, import_promises5.truncate)(tmp, checkpoint.bytesWritten);
+          await (0, import_promises4.truncate)(tmp, checkpoint.bytesWritten);
           stream = (0, import_node_fs4.createWriteStream)(tmp, { encoding: "utf-8", flags: "a" });
           bytePosition = checkpoint.bytesWritten;
           count = checkpoint.count;
@@ -3781,14 +4460,14 @@ function createExportCommand(finalizeOps) {
         stream.end();
       });
       if (count === 0) {
-        await (0, import_promises5.rm)(tmp, { force: true }).catch(() => {
+        await (0, import_promises4.rm)(tmp, { force: true }).catch(() => {
         });
         throw failure;
       }
       const partial = `${opts.output}.partial`;
       try {
-        if (format === "json") await (0, import_promises5.appendFile)(tmp, "]\n");
-        await (0, import_promises5.rename)(tmp, partial);
+        if (format === "json") await (0, import_promises4.appendFile)(tmp, "]\n");
+        await (0, import_promises4.rename)(tmp, partial);
       } catch {
         process.stderr.write(
           `\uACBD\uACE0: \uBD80\uBD84 \uACB0\uACFC\uB97C ${partial} \uC5D0 \uB0A8\uAE30\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4. \uC784\uC2DC \uD30C\uC77C: ${tmp}
@@ -3830,7 +4509,7 @@ function createExportCommand(finalizeOps) {
       throw new NhnCloudCliError(message, EXIT_PARAM_ERROR);
     }
     stopSpinner(true, `${count}\uAC74 \uCD94\uCD9C \uC644\uB8CC`);
-    await (0, import_promises5.rm)(`${opts.output}.partial`, { force: true }).catch(() => {
+    await (0, import_promises4.rm)(`${opts.output}.partial`, { force: true }).catch(() => {
     });
     if (count >= MAX_TOTAL && (total > MAX_TOTAL || hasUnqueriedWindows)) {
       const totalDescription = hasUnqueriedWindows ? `\uC870\uD68C\uD55C \uCC3D\uC5D0\uC11C ${total}\uAC74\uC744 \uD655\uC778\uD588\uACE0 \uB0A8\uC740 \uCC3D\uC744 \uC870\uD68C\uD558\uC9C0 \uC54A\uC740 \uCC44` : `\uC804\uCCB4 ${total}\uAC74 \uC911`;
@@ -4448,7 +5127,7 @@ var binariesCommand = new import_commander15.Command("binaries").description("\u
 // src/commands/deploy/upload.ts
 var import_commander16 = require("commander");
 var import_node_fs5 = require("fs");
-var import_node_path7 = require("path");
+var import_node_path6 = require("path");
 var MAX_UPLOAD_BYTES = 512 * 1024 * 1024;
 function parsePositiveInt2(value, flag) {
   if (value === void 0) return void 0;
@@ -4468,9 +5147,9 @@ var uploadCommand = new import_commander16.Command("upload").description("\uB85C
   }
   const artifactId = requireCoordinate(opts.artifactId, "--artifact-id");
   const filePath = opts.file;
-  let stat3;
+  let stat4;
   try {
-    stat3 = (0, import_node_fs5.statSync)(filePath);
+    stat4 = (0, import_node_fs5.statSync)(filePath);
   } catch (e) {
     const reason = e.code ?? (e instanceof Error ? e.message : String(e));
     throw new NhnCloudCliError(
@@ -4478,17 +5157,17 @@ var uploadCommand = new import_commander16.Command("upload").description("\uB85C
       EXIT_PARAM_ERROR
     );
   }
-  if (!stat3.isFile()) {
+  if (!stat4.isFile()) {
     throw new NhnCloudCliError(`--file \uC774 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${filePath}`, EXIT_PARAM_ERROR);
   }
-  if (stat3.size > MAX_UPLOAD_BYTES) {
+  if (stat4.size > MAX_UPLOAD_BYTES) {
     throw new NhnCloudCliError(
-      `--file \uC774 \uB108\uBB34 \uD07D\uB2C8\uB2E4 (${stat3.size} \uBC14\uC774\uD2B8). \uC5C5\uB85C\uB4DC \uD55C\uB3C4 ${MAX_UPLOAD_BYTES} \uBC14\uC774\uD2B8.`,
+      `--file \uC774 \uB108\uBB34 \uD07D\uB2C8\uB2E4 (${stat4.size} \uBC14\uC774\uD2B8). \uC5C5\uB85C\uB4DC \uD55C\uB3C4 ${MAX_UPLOAD_BYTES} \uBC14\uC774\uD2B8.`,
       EXIT_PARAM_ERROR
     );
   }
   const fileBuffer = (0, import_node_fs5.readFileSync)(filePath);
-  const fileName = (0, import_node_path7.basename)(filePath);
+  const fileName = (0, import_node_path6.basename)(filePath);
   const { client, profileName } = await createDeployClient(opts.profile);
   const appKey = await resolveDeployAppKey(profileName);
   startSpinner("\uBC14\uC774\uB108\uB9AC \uC5C5\uB85C\uB4DC \uC911...");
@@ -4534,20 +5213,20 @@ function parsePositiveInt3(value, flag) {
   }
   return Number(value);
 }
-function assertWritable2(path5, force) {
+function assertWritable2(path4, force) {
   if (force) return;
   try {
-    (0, import_node_fs6.statSync)(path5);
+    (0, import_node_fs6.statSync)(path4);
   } catch (e) {
     if (e.code === "ENOENT") return;
     const reason = e.code ?? (e instanceof Error ? e.message : String(e));
     throw new NhnCloudCliError(
-      `-o \uACBD\uB85C\uB97C \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${path5} (${reason})`,
+      `-o \uACBD\uB85C\uB97C \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${path4} (${reason})`,
       EXIT_PARAM_ERROR
     );
   }
   throw new NhnCloudCliError(
-    `-o \uB300\uC0C1\uC774 \uC774\uBBF8 \uC874\uC7AC\uD569\uB2C8\uB2E4: ${path5}. \uB36E\uC5B4\uC4F0\uB824\uBA74 --force \uB97C \uC4F0\uC138\uC694.`,
+    `-o \uB300\uC0C1\uC774 \uC774\uBBF8 \uC874\uC7AC\uD569\uB2C8\uB2E4: ${path4}. \uB36E\uC5B4\uC4F0\uB824\uBA74 --force \uB97C \uC4F0\uC138\uC694.`,
     EXIT_PARAM_ERROR
   );
 }
@@ -4890,8 +5569,8 @@ var InstanceClient = class {
     return this.serverAction(id, { revertResize: null });
   }
   async listFlavors(params = {}) {
-    const path5 = params.detail ? "/flavors/detail" : "/flavors";
-    const url = `${this.computeEndpoint}${path5}`;
+    const path4 = params.detail ? "/flavors/detail" : "/flavors";
+    const url = `${this.computeEndpoint}${path4}`;
     const searchParams = {};
     if (params.minDisk !== void 0) searchParams["minDisk"] = params.minDisk;
     if (params.minRam !== void 0) searchParams["minRam"] = params.minRam;
@@ -6571,9 +7250,9 @@ var createCommand5 = new import_commander33.Command("create").description("\uC77
   }
   let userDataBase64;
   if (opts.userData !== void 0) {
-    let stat3;
+    let stat4;
     try {
-      stat3 = (0, import_node_fs7.statSync)(opts.userData);
+      stat4 = (0, import_node_fs7.statSync)(opts.userData);
     } catch (e) {
       const reason = e.code ?? (e instanceof Error ? e.message : String(e));
       throw new NhnCloudCliError(
@@ -6581,15 +7260,15 @@ var createCommand5 = new import_commander33.Command("create").description("\uC77
         EXIT_PARAM_ERROR
       );
     }
-    if (!stat3.isFile()) {
+    if (!stat4.isFile()) {
       throw new NhnCloudCliError(
         `--user-data \uAC00 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${opts.userData}`,
         EXIT_PARAM_ERROR
       );
     }
-    if (stat3.size > 49149) {
+    if (stat4.size > 49149) {
       throw new NhnCloudCliError(
-        `--user-data \uAC00 \uB108\uBB34 \uD07D\uB2C8\uB2E4 (${stat3.size} \uBC14\uC774\uD2B8). base64 \uC778\uCF54\uB529 \uD6C4 65535 \uBC14\uC774\uD2B8 \uD55C\uB3C4\uB77C raw 49149 \uBC14\uC774\uD2B8\uAE4C\uC9C0\uB9CC \uD5C8\uC6A9\uB429\uB2C8\uB2E4.`,
+        `--user-data \uAC00 \uB108\uBB34 \uD07D\uB2C8\uB2E4 (${stat4.size} \uBC14\uC774\uD2B8). base64 \uC778\uCF54\uB529 \uD6C4 65535 \uBC14\uC774\uD2B8 \uD55C\uB3C4\uB77C raw 49149 \uBC14\uC774\uD2B8\uAE4C\uC9C0\uB9CC \uD5C8\uC6A9\uB429\uB2C8\uB2E4.`,
         EXIT_PARAM_ERROR
       );
     }
@@ -6874,9 +7553,9 @@ var import_node_fs8 = require("fs");
 var import_node_crypto5 = require("crypto");
 var import_chalk12 = __toESM(require("chalk"));
 function resolvePublicKey(value) {
-  let stat3;
+  let stat4;
   try {
-    stat3 = (0, import_node_fs8.statSync)(value);
+    stat4 = (0, import_node_fs8.statSync)(value);
   } catch (e) {
     const err = e;
     if (err.code && err.code !== "ENOENT") {
@@ -6887,7 +7566,7 @@ function resolvePublicKey(value) {
     }
     return value;
   }
-  if (!stat3.isFile()) {
+  if (!stat4.isFile()) {
     throw new NhnCloudCliError(`--public-key \uAC00 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${value}`, EXIT_PARAM_ERROR);
   }
   return (0, import_node_fs8.readFileSync)(value, "utf-8").trim();
@@ -7194,12 +7873,12 @@ var HarborClient = class {
    * ky.get() 이 Response 를 반환하므로 .json() 과 .headers.get("link") 를 함께 사용한다
    * (체이닝하면 헤더를 못 본다 — 기존 NCR client 의 .json<T>() 체이닝 패턴과 다름).
    */
-  async getAllPages(path5) {
+  async getAllPages(path4) {
     const acc = [];
     let page = 1;
     try {
       for (; ; ) {
-        const url = `https://${this.host}${path5}?page=${page}&page_size=${PAGE_SIZE}`;
+        const url = `https://${this.host}${path4}?page=${page}&page_size=${PAGE_SIZE}`;
         const res = await import_ky13.default.get(url, {
           headers: this.basicAuthHeaders(),
           retry: 0,
@@ -7439,15 +8118,15 @@ function commandPath(command) {
   return names.join(" ");
 }
 function collectCommand(command) {
-  const path5 = commandPath(command);
-  if (!path5 || path5 === "help") return null;
+  const path4 = commandPath(command);
+  if (!path4 || path4 === "help") return null;
   return {
-    path: path5,
+    path: path4,
     description: command.description() || command.summary() || "",
     arguments: command.registeredArguments.map((arg) => arg.name()),
     options: command.options.filter((option) => !option.hidden).map((option) => option.flags),
     subcommands: command.commands.map((subcommand) => subcommand.name()).filter((name) => name !== "help"),
-    ...path5 === "commands" ? { metadata: true } : {}
+    ...path4 === "commands" ? { metadata: true } : {}
   };
 }
 function collectCommandCatalog(program2) {
@@ -7486,7 +8165,7 @@ function createCommandsCommand(program2) {
 var import_commander48 = require("commander");
 
 // src/commands/nks/helpers.ts
-var import_promises6 = require("fs/promises");
+var import_promises5 = require("fs/promises");
 
 // src/services/nks/client.ts
 var import_ky14 = __toESM(require("ky"));
@@ -7936,15 +8615,15 @@ var NksClient = class {
       throw toNhnCloudCliError(err);
     }
   }
-  async getFlatNamedResource(path5, errorMessage) {
-    const raw = await this.getJson(path5);
+  async getFlatNamedResource(path4, errorMessage) {
+    const raw = await this.getJson(path4);
     if (!isNksNamedResource(raw)) {
       throw new NhnCloudCliError(errorMessage, EXIT_API_ERROR);
     }
     return raw;
   }
-  async getJson(path5, searchParams) {
-    const url = `${this.nksEndpoint}${path5}`;
+  async getJson(path4, searchParams) {
+    const url = `${this.nksEndpoint}${path4}`;
     try {
       return await import_ky14.default.get(url, {
         headers: this.authHeaders(),
@@ -7956,15 +8635,15 @@ var NksClient = class {
       throw toNhnCloudCliError(err);
     }
   }
-  async requestUuid(method, path5, payload, errorMessage) {
-    const raw = await this.requestJson(method, path5, payload);
+  async requestUuid(method, path4, payload, errorMessage) {
+    const raw = await this.requestJson(method, path4, payload);
     if (!isNksUuidResponse(raw)) {
       throw new NhnCloudCliError(errorMessage, EXIT_API_ERROR);
     }
     return raw;
   }
-  async requestNoBody(method, path5, payload) {
-    const url = `${this.nksEndpoint}${path5}`;
+  async requestNoBody(method, path4, payload) {
+    const url = `${this.nksEndpoint}${path4}`;
     try {
       if (method === "delete") {
         await import_ky14.default.delete(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS });
@@ -7975,8 +8654,8 @@ var NksClient = class {
       throw toNhnCloudCliError(err);
     }
   }
-  async requestJson(method, path5, payload) {
-    const url = `${this.nksEndpoint}${path5}`;
+  async requestJson(method, path4, payload) {
+    const url = `${this.nksEndpoint}${path4}`;
     try {
       const options = { headers: this.authHeaders(), json: payload, retry: 0, timeout: DEFAULT_TIMEOUT_MS };
       return method === "post" ? await import_ky14.default.post(url, options).json() : await import_ky14.default.patch(url, options).json();
@@ -8015,13 +8694,13 @@ async function resolveClusterUuid(client, cluster) {
   }
   return uuid;
 }
-async function readJsonFile(path5) {
+async function readJsonFile(path4) {
   let raw;
   try {
-    raw = await (0, import_promises6.readFile)(path5, "utf-8");
+    raw = await (0, import_promises5.readFile)(path4, "utf-8");
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    throw new NhnCloudCliError(`JSON \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${path5} (${message})`, EXIT_PARAM_ERROR);
+    throw new NhnCloudCliError(`JSON \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${path4} (${message})`, EXIT_PARAM_ERROR);
   }
   try {
     const parsed = JSON.parse(raw);
@@ -8031,15 +8710,15 @@ async function readJsonFile(path5) {
     return parsed;
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    throw new NhnCloudCliError(`JSON \uD30C\uC77C \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4: ${path5} (${message})`, EXIT_PARAM_ERROR);
+    throw new NhnCloudCliError(`JSON \uD30C\uC77C \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4: ${path4} (${message})`, EXIT_PARAM_ERROR);
   }
 }
-async function readTextFile(path5) {
+async function readTextFile(path4) {
   try {
-    return await (0, import_promises6.readFile)(path5, "utf-8");
+    return await (0, import_promises5.readFile)(path4, "utf-8");
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    throw new NhnCloudCliError(`\uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${path5} (${message})`, EXIT_PARAM_ERROR);
+    throw new NhnCloudCliError(`\uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${path4} (${message})`, EXIT_PARAM_ERROR);
   }
 }
 function parsePositiveInteger(value, optionName) {
@@ -8080,7 +8759,7 @@ var supportsCommand = new import_commander48.Command("supports").description("NK
 });
 
 // src/commands/nks/cluster.ts
-var import_promises7 = require("fs/promises");
+var import_promises6 = require("fs/promises");
 var import_commander49 = require("commander");
 var import_chalk14 = __toESM(require("chalk"));
 var listCommand8 = new import_commander49.Command("list").description("NKS \uD074\uB7EC\uC2A4\uD130 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
@@ -8171,18 +8850,18 @@ async function confirmDangerousAction(message, yes) {
   }
   return ok;
 }
-async function writeKubeconfigFile(path5, contents, force) {
+async function writeKubeconfigFile(path4, contents, force) {
   try {
-    await (0, import_promises7.writeFile)(path5, contents, {
+    await (0, import_promises6.writeFile)(path4, contents, {
       encoding: "utf-8",
       mode: 384,
       flag: force ? "w" : "wx"
     });
-    await (0, import_promises7.chmod)(path5, 384);
+    await (0, import_promises6.chmod)(path4, 384);
   } catch (err) {
     if (err instanceof Error && "code" in err && err.code === "EEXIST") {
       throw new NhnCloudCliError(
-        `\uD30C\uC77C\uC774 \uC774\uBBF8 \uC874\uC7AC\uD569\uB2C8\uB2E4: ${path5}. \uB36E\uC5B4\uC4F0\uB824\uBA74 --force \uB97C \uC9C0\uC815\uD558\uC138\uC694.`,
+        `\uD30C\uC77C\uC774 \uC774\uBBF8 \uC874\uC7AC\uD569\uB2C8\uB2E4: ${path4}. \uB36E\uC5B4\uC4F0\uB824\uBA74 --force \uB97C \uC9C0\uC815\uD558\uC138\uC694.`,
         EXIT_PARAM_ERROR
       );
     }
@@ -9001,9 +9680,9 @@ async function resolveNcsClient(opts) {
   return { client: new NcsClient(accessToken, region, appKey), profileName };
 }
 function readJsonPayload(filePath) {
-  let stat3;
+  let stat4;
   try {
-    stat3 = (0, import_node_fs9.statSync)(filePath);
+    stat4 = (0, import_node_fs9.statSync)(filePath);
   } catch (err) {
     const reason = err.code ?? (err instanceof Error ? err.message : String(err));
     throw new NhnCloudCliError(
@@ -9011,12 +9690,12 @@ function readJsonPayload(filePath) {
       EXIT_PARAM_ERROR
     );
   }
-  if (!stat3.isFile()) {
+  if (!stat4.isFile()) {
     throw new NhnCloudCliError(`--file \uC774 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${filePath}`, EXIT_PARAM_ERROR);
   }
-  if (stat3.size > MAX_JSON_INPUT_BYTES) {
+  if (stat4.size > MAX_JSON_INPUT_BYTES) {
     throw new NhnCloudCliError(
-      `--file \uC774 \uB108\uBB34 \uD07D\uB2C8\uB2E4 (${stat3.size} \uBC14\uC774\uD2B8). JSON spec \uD55C\uB3C4 ${MAX_JSON_INPUT_BYTES} \uBC14\uC774\uD2B8.`,
+      `--file \uC774 \uB108\uBB34 \uD07D\uB2C8\uB2E4 (${stat4.size} \uBC14\uC774\uD2B8). JSON spec \uD55C\uB3C4 ${MAX_JSON_INPUT_BYTES} \uBC14\uC774\uD2B8.`,
       EXIT_PARAM_ERROR
     );
   }
@@ -9747,7 +10426,7 @@ var malwareCommand = new import_commander54.Command("malware").description("NCS
 var import_commander55 = require("commander");
 
 // src/commands/apigateway/helpers.ts
-var import_promises8 = require("fs/promises");
+var import_promises7 = require("fs/promises");
 
 // src/services/apigateway/client.ts
 var import_ky15 = __toESM(require("ky"));
@@ -10358,21 +11037,21 @@ function requireYes2(yes, operation) {
   }
   return true;
 }
-async function readPluginConfigFile(path5) {
+async function readPluginConfigFile(path4) {
   let fileStat;
   try {
-    fileStat = await (0, import_promises8.stat)(path5);
+    fileStat = await (0, import_promises7.stat)(path4);
   } catch (error) {
     const reason = fileErrorReason(error);
     throw new NhnCloudCliError(
-      `\uD50C\uB7EC\uADF8\uC778 \uC124\uC815 \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${JSON.stringify(path5)} (${JSON.stringify(reason)}).`,
+      `\uD50C\uB7EC\uADF8\uC778 \uC124\uC815 \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${JSON.stringify(path4)} (${JSON.stringify(reason)}).`,
       EXIT_PARAM_ERROR
     );
   }
   if (!fileStat.isFile()) {
     const reason = fileStat.isDirectory() ? "EISDIR" : "EINVAL";
     throw new NhnCloudCliError(
-      `\uD50C\uB7EC\uADF8\uC778 \uC124\uC815 \uACBD\uB85C\uAC00 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${JSON.stringify(path5)} (${reason}).`,
+      `\uD50C\uB7EC\uADF8\uC778 \uC124\uC815 \uACBD\uB85C\uAC00 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${JSON.stringify(path4)} (${reason}).`,
       EXIT_PARAM_ERROR
     );
   }
@@ -10384,11 +11063,11 @@ async function readPluginConfigFile(path5) {
   }
   let raw;
   try {
-    raw = await (0, import_promises8.readFile)(path5, "utf-8");
+    raw = await (0, import_promises7.readFile)(path4, "utf-8");
   } catch (error) {
     const reason = fileErrorReason(error);
     throw new NhnCloudCliError(
-      `\uD50C\uB7EC\uADF8\uC778 \uC124\uC815 \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${JSON.stringify(path5)} (${JSON.stringify(reason)}).`,
+      `\uD50C\uB7EC\uADF8\uC778 \uC124\uC815 \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${JSON.stringify(path4)} (${JSON.stringify(reason)}).`,
       EXIT_PARAM_ERROR
     );
   }
@@ -10399,7 +11078,7 @@ async function readPluginConfigFile(path5) {
       error instanceof Error ? error.message : String(error)
     );
     throw new NhnCloudCliError(
-      `\uD50C\uB7EC\uADF8\uC778 \uC124\uC815 JSON \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4: ${JSON.stringify(path5)} (${reason}).`,
+      `\uD50C\uB7EC\uADF8\uC778 \uC124\uC815 JSON \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4: ${JSON.stringify(path4)} (${reason}).`,
       EXIT_PARAM_ERROR
     );
   }
@@ -10843,7 +11522,7 @@ var setMethodPluginCommand = addApiGatewayOptions(
 var resourceCommand = new import_commander56.Command("resource").description("API Gateway resource \uC870\uD68C \uBC0F \uBCC0\uACBD \uBA85\uB839").addCommand(listCommand13).addCommand(parametersCommand).addCommand(responsesCommand).addCommand(setPathPluginCommand).addCommand(setMethodPluginCommand);
 
 // src/commands/apigateway/stage.ts
-var import_promises9 = require("fs/promises");
+var import_promises8 = require("fs/promises");
 var import_commander58 = require("commander");
 
 // src/commands/apigateway/deploy.ts
@@ -11050,9 +11729,9 @@ function fileErrorReason2(error) {
   }
   return error instanceof Error ? error.message : String(error);
 }
-async function writeStageSwaggerFile(path5, swagger, force) {
+async function writeStageSwaggerFile(path4, swagger, force) {
   try {
-    await (0, import_promises9.writeFile)(path5, JSON.stringify(swagger, null, 2) + "\n", {
+    await (0, import_promises8.writeFile)(path4, JSON.stringify(swagger, null, 2) + "\n", {
       encoding: "utf-8",
       flag: force ? "w" : "wx"
     });
@@ -11060,7 +11739,7 @@ async function writeStageSwaggerFile(path5, swagger, force) {
     const reason = fileErrorReason2(error);
     const guidance = reason === "EEXIST" ? " \uB36E\uC5B4\uC4F0\uB824\uBA74 --force \uB97C \uC9C0\uC815\uD558\uC138\uC694." : "";
     throw new NhnCloudCliError(
-      `Swagger \uD30C\uC77C \uC800\uC7A5 \uC2E4\uD328: ${JSON.stringify(path5)} (${JSON.stringify(reason)}).${guidance}`,
+      `Swagger \uD30C\uC77C \uC800\uC7A5 \uC2E4\uD328: ${JSON.stringify(path4)} (${JSON.stringify(reason)}).${guidance}`,
       EXIT_PARAM_ERROR
     );
   }
@@ -11394,10 +12073,10 @@ var SkmClient = class {
    * 요청을 보내고 봉투 형태인지만 확인해 반환한다. 성공 판정은 호출부가 한다.
    * 쓰기 요청도 중복 실행을 막으려고 재시도하지 않는다.
    */
-  async send(method, path5, options) {
+  async send(method, path4, options) {
     let response;
     try {
-      response = await import_ky16.default[method](`${this.baseUrl}${path5}`, {
+      response = await import_ky16.default[method](`${this.baseUrl}${path4}`, {
         headers: this.headers,
         ...options,
         retry: 0,
@@ -11415,8 +12094,8 @@ var SkmClient = class {
    * 요청을 보내고 봉투를 벗긴 뒤 body 또는 body[field] 를 가드로 검사해 반환한다.
    * field 가 null 이면 body 전체를 검사한다.
    */
-  async request(method, path5, field, guard, options = {}) {
-    const body = unwrap(await this.send(method, path5, options));
+  async request(method, path4, field, guard, options = {}) {
+    const body = unwrap(await this.send(method, path4, options));
     const value = field === null ? body : isRecord4(body) ? body[field] : void 0;
     if (!guard(value)) {
       throw new NhnCloudCliError(`Secure Key Manager \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: ${field ?? "body"}`, EXIT_API_ERROR);
@@ -11427,8 +12106,8 @@ var SkmClient = class {
    * body 가 null 이거나 없는 응답(키 저장소 수정·삭제)은 검사할 필드가 없어 헤더만 본다 (ADR-040).
    * isSuccessful 이 false 면 unwrapHeader 가 NhnEnvelopeError 를 던진다.
    */
-  async requestHeaderOnly(method, path5, options = {}) {
-    unwrapHeader(await this.send(method, path5, options));
+  async requestHeaderOnly(method, path4, options = {}) {
+    unwrapHeader(await this.send(method, path4, options));
   }
   keyPath(prefix, keyId, action) {
     return `/${prefix}/${encodeURIComponent(keyId)}/${action}`;
@@ -11476,12 +12155,12 @@ var SkmClient = class {
     return this.request("get", `/keystores/${keyStoreId}/keys/${encodeURIComponent(keyId)}`, null, isSkmKey);
   }
   listAuths(keyStoreId, type) {
-    const { path: path5, field } = AUTH_PATHS[type];
-    return this.request("get", `/keystores/${keyStoreId}/${path5}`, field, arrayOf(isString));
+    const { path: path4, field } = AUTH_PATHS[type];
+    return this.request("get", `/keystores/${keyStoreId}/${path4}`, field, arrayOf(isString));
   }
   getAuth(keyStoreId, type, value) {
-    const { path: path5, field } = AUTH_PATHS[type];
-    return this.request("get", `/keystores/${keyStoreId}/${path5}`, field, arrayOf(isSkmAuthDetail), {
+    const { path: path4, field } = AUTH_PATHS[type];
+    return this.request("get", `/keystores/${keyStoreId}/${path4}`, field, arrayOf(isSkmAuthDetail), {
       searchParams: { value }
     });
   }
@@ -11845,17 +12524,17 @@ function assertWithinLimit(size, spec) {
   }
 }
 function readInputFile(file, spec) {
-  let stat3;
+  let stat4;
   try {
-    stat3 = (0, import_node_fs10.statSync)(file);
+    stat4 = (0, import_node_fs10.statSync)(file);
   } catch (e) {
     const reason = e.code ?? (e instanceof Error ? e.message : String(e));
     throw new NhnCloudCliError(`${spec.label} \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${file} (${reason})`, EXIT_PARAM_ERROR);
   }
-  if (!stat3.isFile()) {
+  if (!stat4.isFile()) {
     throw new NhnCloudCliError(`${spec.label} \uD30C\uC77C\uC774 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${file}`, EXIT_PARAM_ERROR);
   }
-  assertWithinLimit(stat3.size, spec);
+  assertWithinLimit(stat4.size, spec);
   return (0, import_node_fs10.readFileSync)(file);
 }
 function readStdin(stdin, spec) {
@@ -11868,7 +12547,7 @@ function readStdin(stdin, spec) {
 }
 function readSkmInput(source, spec, stdin = processStdin) {
   const fileFlag = spec.fileFlag ?? "--file";
-  if (source.text !== void 0 && source.file !== void 0) {
+  if (spec.textFlag !== void 0 && source.text !== void 0 && source.file !== void 0) {
     throw new NhnCloudCliError(`${spec.textFlag}\uC640 ${fileFlag}\uC740 \uD568\uAED8 \uC9C0\uC815\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.`, EXIT_PARAM_ERROR);
   }
   let input;
@@ -11878,6 +12557,11 @@ function readSkmInput(source, spec, stdin = processStdin) {
     input = readInputFile(source.file, spec);
   } else if (!stdin.isTTY) {
     input = readStdin(stdin, spec);
+  } else if (spec.textFlag === void 0) {
+    throw new NhnCloudCliError(
+      `${spec.label}\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4. ${fileFlag} <\uACBD\uB85C>\uB098 \uD45C\uC900 \uC785\uB825(\uD30C\uC774\uD504)\uC73C\uB85C \uC804\uB2EC\uD558\uC138\uC694.`,
+      EXIT_PARAM_ERROR
+    );
   } else {
     throw new NhnCloudCliError(
       `${spec.label}\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4. ${spec.textFlag} <\uAC12>, ${fileFlag} <\uACBD\uB85C>, \uD45C\uC900 \uC785\uB825(\uD30C\uC774\uD504) \uC911 \uD558\uB098\uB85C \uC804\uB2EC\uD558\uC138\uC694.`,
@@ -12333,18 +13017,153 @@ var keyCommand = new import_commander63.Command("key").description("SKM \uD0A4 \
 
 // src/commands/skm/secret.ts
 var import_commander64 = require("commander");
+
+// src/commands/skm/secret-json.ts
+var import_node_crypto6 = require("crypto");
+var import_node_util = require("util");
+var NUMBER_LITERAL = /-?\d+(\.\d+)?([eE][+-]?\d+)?/y;
+var MAX_SIGNIFICANT_DIGITS = 15;
+function tryParseSecretObject(text) {
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch {
+    return null;
+  }
+  if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) return null;
+  return parsed;
+}
+function parseSecretObject(text, usage) {
+  const object = tryParseSecretObject(text);
+  if (object === null) {
+    throw new NhnCloudCliError(`\uAE30\uBC00 \uB370\uC774\uD130 \uAC12\uC774 JSON \uAC1D\uCCB4\uAC00 \uC544\uB2C8\uC5B4\uC11C ${usage}\uB97C \uC4F8 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.`, EXIT_PARAM_ERROR);
+  }
+  return object;
+}
+function isLossyLiteral(literal) {
+  const value = Number(literal);
+  if (!Number.isFinite(value) || Object.is(value, -0)) return true;
+  if (/^-?\d+$/.test(literal)) return !Number.isSafeInteger(value);
+  const mantissa = literal.replace(/^-/, "").replace(/[eE].*$/, "").replace(".", "");
+  return mantissa.replace(/^0+/, "").replace(/0+$/, "").length > MAX_SIGNIFICANT_DIGITS;
+}
+function hasLossyNumber(text) {
+  let i = 0;
+  while (i < text.length) {
+    const ch = text[i];
+    if (ch === '"') {
+      i += 1;
+      while (i < text.length && text[i] !== '"') i += text[i] === "\\" ? 2 : 1;
+      i += 1;
+      continue;
+    }
+    if (ch === "-" || ch >= "0" && ch <= "9") {
+      NUMBER_LITERAL.lastIndex = i;
+      const match = NUMBER_LITERAL.exec(text);
+      if (match === null) {
+        i += 1;
+        continue;
+      }
+      if (isLossyLiteral(match[0])) return true;
+      i += match[0].length;
+      continue;
+    }
+    i += 1;
+  }
+  return false;
+}
+function assertNoLossyNumber(text, usage) {
+  if (hasLossyNumber(text)) {
+    throw new NhnCloudCliError(
+      `\uAE30\uBC00 \uB370\uC774\uD130\uC5D0 \uB2E4\uC2DC \uC4F0\uBA74 \uAC12\uC774 \uBC14\uB00C\uB294 \uC22B\uC790\uAC00 \uC788\uC5B4 ${usage}\uB97C \uC4F8 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. \uC804\uCCB4 \uAC12\uC740 --field \uC5C6\uC774 secret get\uC73C\uB85C \uBC1B\uACE0, \uBC14\uAFC0 \uB54C\uB294 secret update\uB85C \uC804\uCCB4 \uAC12\uC744 \uBCF4\uB0B4\uC138\uC694.`,
+      EXIT_PARAM_ERROR
+    );
+  }
+}
+function formatFieldValue(value) {
+  return typeof value === "string" ? value : JSON.stringify(value);
+}
+function parseFieldName(value, label) {
+  if (value === "") {
+    throw new NhnCloudCliError(`${label}\uB294 \uBE44\uC5B4 \uC788\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.`, EXIT_PARAM_ERROR);
+  }
+  return value;
+}
+var DEFAULT_INDENT = "  ";
+function serializeSecretObject(object, originalText) {
+  if (!originalText.trimEnd().includes("\n")) return JSON.stringify(object);
+  const indent = /\n([ \t]+)\S/.exec(originalText)?.[1] ?? DEFAULT_INDENT;
+  const serialized = JSON.stringify(object, null, indent);
+  return originalText.endsWith("\n") ? serialized + "\n" : serialized;
+}
+function sha256Hex(text) {
+  return (0, import_node_crypto6.createHash)("sha256").update(text, "utf8").digest("hex");
+}
+function planSecretPatch(before, field, change) {
+  const exists = Object.hasOwn(before, field);
+  if (change.kind === "delete") {
+    if (!exists) return { action: "unchanged", after: before };
+    return { action: "deleted", after: Object.fromEntries(Object.entries(before).filter(([key]) => key !== field)) };
+  }
+  if (!exists) {
+    return { action: "added", after: Object.fromEntries([...Object.entries(before), [field, change.value]]) };
+  }
+  if (before[field] === change.value) return { action: "unchanged", after: before };
+  if (!change.replace) {
+    throw new NhnCloudCliError(
+      `\uD544\uB4DC ${JSON.stringify(field)}\uAC00 \uC774\uBBF8 \uC788\uC2B5\uB2C8\uB2E4. \uAC12\uC744 \uBC14\uAFB8\uB824\uBA74 --replace\uB97C \uBD99\uC774\uC138\uC694.`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return {
+    action: "replaced",
+    after: Object.fromEntries(
+      Object.entries(before).map(([key, value]) => [key, key === field ? change.value : value])
+    )
+  };
+}
+function entriesWithout(object, field) {
+  return Object.entries(object).filter(([key]) => key !== field);
+}
+function verifySecretPatch(before, fetched, field, change) {
+  if (fetched === null) return { fieldVerified: false, othersVerified: false };
+  let fieldVerified;
+  if (change.kind === "delete") {
+    fieldVerified = !Object.hasOwn(fetched, field);
+  } else {
+    const value = Object.hasOwn(fetched, field) ? fetched[field] : void 0;
+    fieldVerified = typeof value === "string" && sha256Hex(value) === sha256Hex(change.value);
+  }
+  const expected = entriesWithout(before, field);
+  const actual = new Map(entriesWithout(fetched, field));
+  const othersVerified = expected.length === actual.size && expected.every(([key, value]) => actual.has(key) && (0, import_node_util.isDeepStrictEqual)(actual.get(key), value));
+  return { fieldVerified, othersVerified };
+}
+
+// src/commands/skm/secret.ts
 var getCommand13 = withSkmOptions(
-  new import_commander64.Command("get").description("\uAE30\uBC00 \uB370\uC774\uD130\uB97C \uC870\uD68C\uD55C\uB2E4 (\uC6D0\uBB38\uC744 stdout\uC5D0 \uCD9C\uB825)").argument("<key-id>", "\uD0A4 ID")
+  new import_commander64.Command("get").description("\uAE30\uBC00 \uB370\uC774\uD130\uB97C \uC870\uD68C\uD55C\uB2E4 (\uC6D0\uBB38\uC744 stdout\uC5D0 \uCD9C\uB825, --field\uB85C JSON \uAC1D\uCCB4\uC758 \uD544\uB4DC \uD558\uB098\uB9CC)").argument("<key-id>", "\uD0A4 ID").option("--field <name>", "JSON \uAC1D\uCCB4 \uAC12\uC5D0\uC11C \uC774 \uD544\uB4DC\uC758 \uAC12\uB9CC \uCD9C\uB825\uD55C\uB2E4")
 ).action(async (keyId, _opts, command) => {
   const opts = command.optsWithGlobals();
   const parsedKeyId = parseRequiredArgument(keyId, "key-id");
   const macAddress = parseMacAddressOption(opts.macAddress);
+  const field = opts.field === void 0 ? void 0 : parseFieldName(opts.field, "--field");
   const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
   const secret = await withSkmSpinner(
     `SKM \uAE30\uBC00 \uB370\uC774\uD130 ${formatCell(parsedKeyId)} \uC870\uD68C \uC911...`,
     () => client.getSecret(parsedKeyId)
   );
-  printSkmValue(opts, secret, { secret });
+  if (field === void 0) {
+    printSkmValue(opts, secret, { secret });
+    return;
+  }
+  const object = parseSecretObject(secret, "--field");
+  if (!Object.hasOwn(object, field)) {
+    throw new NhnCloudCliError(`\uAE30\uBC00 \uB370\uC774\uD130\uC5D0 \uD544\uB4DC ${JSON.stringify(field)}\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.`, EXIT_PARAM_ERROR);
+  }
+  const value = object[field];
+  if (typeof value !== "string") assertNoLossyNumber(secret, "--field");
+  printSkmValue(opts, formatFieldValue(value), { keyId: parsedKeyId, field, value });
 });
 var updateCommand5 = withSkmOptions(
   new import_commander64.Command("update").description("\uAE30\uBC00 \uB370\uC774\uD130 \uAC12\uC744 \uBC14\uAFBC\uB2E4 (\uAC12\uC740 --value, --file, \uD45C\uC900 \uC785\uB825 \uC911 \uD558\uB098)").argument("<key-id>", "\uD0A4 ID").option("--value <value>", "\uC0C8 \uAE30\uBC00 \uB370\uC774\uD130 \uAC12").option("--file <path>", "\uC0C8 \uAE30\uBC00 \uB370\uC774\uD130 \uAC12\uC744 \uC77D\uC744 \uD30C\uC77C")
@@ -12365,7 +13184,94 @@ var updateCommand5 = withSkmOptions(
   const { secretValue: _omitted, ...result } = updated;
   outputSkmWriteResult(opts, result, [formatCell(updated.keyId)]);
 });
-var secretCommand = new import_commander64.Command("secret").description("SKM \uAE30\uBC00 \uB370\uC774\uD130 \uC870\uD68C\uC640 \uC218\uC815").addCommand(getCommand13).addCommand(updateCommand5);
+var patchCommand2 = withSkmOptions(
+  new import_commander64.Command("patch").description("JSON \uAC1D\uCCB4 \uAE30\uBC00 \uB370\uC774\uD130\uC758 \uD544\uB4DC \uD558\uB098\uB97C \uB354\uD558\uAC70\uB098 \uBC14\uAFB8\uAC70\uB098 \uC9C0\uC6B4\uB2E4 (\uAE30\uBCF8\uC740 \uBBF8\uB9AC\uBCF4\uAE30, --yes\uB85C \uBC18\uC601)").argument("<key-id>", "\uD0A4 ID").argument("<field>", "\uD544\uB4DC \uC774\uB984 (\uCD5C\uC0C1\uC704 \uD0A4)").option("--file <path>", "\uD544\uB4DC\uC5D0 \uB123\uC744 \uAC12\uC744 \uC77D\uC744 \uD30C\uC77C (\uC5C6\uC73C\uBA74 \uD45C\uC900 \uC785\uB825)").option("--replace", "\uC774\uBBF8 \uC788\uB294 \uD544\uB4DC\uC758 \uAC12\uC744 \uBC14\uAFBC\uB2E4").option("--delete", "\uD544\uB4DC\uB97C \uC9C0\uC6B4\uB2E4").option("--yes", "\uBBF8\uB9AC\uBCF4\uAE30 \uB300\uC2E0 \uBC18\uC601\uD55C\uB2E4")
+).action(async (keyId, field, _opts, command) => {
+  const opts = command.optsWithGlobals();
+  const parsedKeyId = parseRequiredArgument(keyId, "key-id");
+  const parsedField = parseFieldName(field, "<field>");
+  const macAddress = parseMacAddressOption(opts.macAddress);
+  if (opts.delete && opts.replace) {
+    throw new NhnCloudCliError("--delete\uC640 --replace\uB294 \uD568\uAED8 \uC9C0\uC815\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  if (opts.delete && opts.file !== void 0) {
+    throw new NhnCloudCliError("--delete\uC640 --file\uC740 \uD568\uAED8 \uC9C0\uC815\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  let change;
+  if (opts.delete) {
+    change = { kind: "delete" };
+  } else {
+    const label = "\uD544\uB4DC\uC5D0 \uB123\uC744 \uB370\uC774\uD130";
+    const input = readSkmInput({ file: opts.file }, { label, maxBytes: MAX_JSON_INPUT_BYTES });
+    const value = decodeUtf8Input(input, label, "\uBC14\uC774\uB108\uB9AC\uB294 base64\uB85C \uC778\uCF54\uB529\uD574 \uC804\uB2EC\uD558\uC138\uC694.");
+    if (value.endsWith("\n")) {
+      process.stderr.write(
+        "\uACBD\uACE0: \uD544\uB4DC\uC5D0 \uB123\uC744 \uB370\uC774\uD130\uAC00 \uC904\uBC14\uAFC8\uC73C\uB85C \uB05D\uB0A9\uB2C8\uB2E4. \uC904\uBC14\uAFC8\uB3C4 \uAC12\uC5D0 \uB4E4\uC5B4\uAC11\uB2C8\uB2E4. \uBE7C\uB824\uBA74 printf '%s'\uB85C \uB118\uAE30\uC138\uC694.\n"
+      );
+    }
+    change = { kind: "set", value, replace: opts.replace === true };
+  }
+  const { client } = await resolveSkmClient({ profile: opts.profile, macAddress });
+  const id = formatCell(parsedKeyId);
+  const current2 = await withSkmSpinner(`SKM \uAE30\uBC00 \uB370\uC774\uD130 ${id} \uC870\uD68C \uC911...`, () => client.getSecret(parsedKeyId));
+  const before = parseSecretObject(current2, "secret patch");
+  assertNoLossyNumber(current2, "secret patch");
+  const { action, after } = planSecretPatch(before, parsedField, change);
+  const report = (applied, verified2) => {
+    const result = {
+      keyId: parsedKeyId,
+      field: parsedField,
+      action,
+      applied,
+      fieldVerified: verified2?.fieldVerified ?? null,
+      othersVerified: verified2?.othersVerified ?? null
+    };
+    outputSkmWriteResult(opts, result, [action]);
+  };
+  if (!opts.yes || action === "unchanged") {
+    report(false, null);
+    if (!opts.yes && action !== "unchanged") {
+      process.stderr.write("\uBBF8\uB9AC\uBCF4\uAE30\uC785\uB2C8\uB2E4. \uBC18\uC601\uD558\uB824\uBA74 --yes\uB97C \uBD99\uC774\uC138\uC694.\n");
+    }
+    return;
+  }
+  try {
+    await withSkmSpinner(
+      `SKM \uAE30\uBC00 \uB370\uC774\uD130 ${id} \uC218\uC815 \uC911...`,
+      () => client.updateSecret(parsedKeyId, serializeSecretObject(after, current2))
+    );
+  } catch (err) {
+    const e = toNhnCloudCliError(err);
+    throw new NhnCloudCliError(
+      `\uAE30\uBC00 \uB370\uC774\uD130 \uC218\uC815 \uC694\uCCAD\uC774 \uC2E4\uD328\uD588\uC2B5\uB2C8\uB2E4: ${e.message} \uBC18\uC601\uB410\uB294\uC9C0\uB294 \uAC19\uC740 \uBA85\uB839\uC744 --yes \uC5C6\uC774 \uB2E4\uC2DC \uC2E4\uD589\uD574 action\uC73C\uB85C \uD655\uC778\uD558\uC138\uC694.`,
+      e.exitCode
+    );
+  }
+  let fetchedText;
+  try {
+    fetchedText = await withSkmSpinner(`SKM \uAE30\uBC00 \uB370\uC774\uD130 ${id} \uB2E4\uC2DC \uC870\uD68C \uC911...`, () => client.getSecret(parsedKeyId));
+  } catch (err) {
+    const e = toNhnCloudCliError(err);
+    report(true, null);
+    throw new NhnCloudCliError(
+      `\uAE30\uBC00 \uB370\uC774\uD130\uB294 \uBC14\uAFE8\uC9C0\uB9CC \uB2E4\uC2DC \uC870\uD68C\uD558\uC9C0 \uBABB\uD574 \uAC80\uC99D\uD558\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4: ${e.message} skm secret get\uC73C\uB85C \uD604\uC7AC \uAC12\uC744 \uD655\uC778\uD558\uC138\uC694.`,
+      EXIT_API_ERROR
+    );
+  }
+  const verified = verifySecretPatch(before, tryParseSecretObject(fetchedText), parsedField, change);
+  report(true, verified);
+  const mismatched = [
+    ...verified.fieldVerified ? [] : [`\uD544\uB4DC ${JSON.stringify(parsedField)}`],
+    ...verified.othersVerified ? [] : ["\uB2E4\uB978 \uD544\uB4DC"]
+  ];
+  if (mismatched.length > 0) {
+    throw new NhnCloudCliError(
+      `\uBC18\uC601 \uB4A4 \uB2E4\uC2DC \uC870\uD68C\uD55C \uAE30\uBC00 \uB370\uC774\uD130\uAC00 \uAE30\uB300\uC640 \uB2E4\uB985\uB2C8\uB2E4 (${mismatched.join(", ")}). \uB2E4\uB978 \uC4F0\uAE30\uAC00 \uB07C\uC5B4\uB4E4\uC5C8\uAC70\uB098 \uC2B9\uC778 \uAE30\uB2A5 \uB54C\uBB38\uC5D0 \uBCC0\uACBD\uC774 \uB300\uAE30 \uC911\uC77C \uC218 \uC788\uC2B5\uB2C8\uB2E4. skm secret get\uC73C\uB85C \uD604\uC7AC \uAC12\uC744 \uD655\uC778\uD558\uC138\uC694.`,
+      EXIT_API_ERROR
+    );
+  }
+});
+var secretCommand = new import_commander64.Command("secret").description("SKM \uAE30\uBC00 \uB370\uC774\uD130 \uC870\uD68C\uC640 \uC218\uC815").addCommand(getCommand13).addCommand(updateCommand5).addCommand(patchCommand2);
 
 // src/commands/skm/symmetric-key.ts
 var import_commander65 = require("commander");
@@ -12747,8 +13653,8 @@ var LoadBalancerClient = class {
     }
     return raw;
   }
-  async getJson(path5, searchParams) {
-    const url = `${this.endpoint}${path5}`;
+  async getJson(path4, searchParams) {
+    const url = `${this.endpoint}${path4}`;
     try {
       return await import_ky17.default.get(url, {
         headers: this.authHeaders(),
@@ -12760,8 +13666,8 @@ var LoadBalancerClient = class {
       throw toNhnCloudCliError(error);
     }
   }
-  async postJson(path5, json) {
-    const url = `${this.endpoint}${path5}`;
+  async postJson(path4, json) {
+    const url = `${this.endpoint}${path4}`;
     try {
       return await import_ky17.default.post(url, {
         headers: this.authHeaders(),
@@ -12773,8 +13679,8 @@ var LoadBalancerClient = class {
       throw toNhnCloudCliError(error);
     }
   }
-  async putJson(path5, json) {
-    const url = `${this.endpoint}${path5}`;
+  async putJson(path4, json) {
+    const url = `${this.endpoint}${path4}`;
     try {
       return await import_ky17.default.put(url, {
         headers: this.authHeaders(),
@@ -12786,8 +13692,8 @@ var LoadBalancerClient = class {
       throw toNhnCloudCliError(error);
     }
   }
-  async deleteNoContent(path5) {
-    const url = `${this.endpoint}${path5}`;
+  async deleteNoContent(path4) {
+    const url = `${this.endpoint}${path4}`;
     try {
       await import_ky17.default.delete(url, {
         headers: this.authHeaders(),
@@ -13479,8 +14385,8 @@ Agent workflow:
   3. nhncloud ncs workload get <id> --json
 `;
 var program = new import_commander72.Command();
-program.name("nhncloud").description("NHN Cloud CLI \u2014 AI agent & terminal friendly").version(CLI_VERSION).option("--json", "JSON \uD615\uC2DD\uC73C\uB85C \uCD9C\uB825").option("--quiet", "\uCD5C\uC18C \uCD9C\uB825 (\uC790\uB3D9\uD654\uC6A9)").option("--no-color", "\uC0C9\uC0C1 \uBE44\uD65C\uC131\uD654").option("--request-timeout <sec>", "HTTP \uC694\uCCAD \uD0C0\uC784\uC544\uC6C3 (\uCD08, \uAE30\uBCF8 30, \uBC94\uC704 1~3600). NHNCLOUD_REQUEST_TIMEOUT \uB85C\uB3C4 \uC9C0\uC815").addHelpText("after", rootAgentHints);
-program.hook("preAction", () => {
+program.name("nhncloud").description("NHN Cloud CLI \u2014 AI agent & terminal friendly").version(CLI_VERSION).option("--json", "JSON \uD615\uC2DD\uC73C\uB85C \uCD9C\uB825").option("--quiet", "\uCD5C\uC18C \uCD9C\uB825 (\uC790\uB3D9\uD654\uC6A9)").option("--no-color", "\uC0C9\uC0C1 \uBE44\uD65C\uC131\uD654").option("--request-timeout <sec>", "HTTP \uC694\uCCAD \uD0C0\uC784\uC544\uC6C3 (\uCD08, \uAE30\uBCF8 30, \uBC94\uC704 1~3600). NHNCLOUD_REQUEST_TIMEOUT \uB85C\uB3C4 \uC9C0\uC815").option("--proxy <url>", "HTTP \uC694\uCCAD\uC5D0 \uC4F8 \uD504\uB85D\uC2DC URL. HTTPS_PROXY\xB7HTTP_PROXY \uBCF4\uB2E4 \uC6B0\uC120\uD558\uACE0 NO_PROXY \uB294 \uADF8\uB300\uB85C \uB530\uB978\uB2E4").addHelpText("after", rootAgentHints);
+program.hook("preAction", async () => {
   const opts = program.opts();
   const rawTimeout = opts.requestTimeout ?? process.env["NHNCLOUD_REQUEST_TIMEOUT"];
   const timeoutValue = rawTimeout === "" ? void 0 : rawTimeout;
@@ -13489,6 +14395,7 @@ program.hook("preAction", () => {
     opts.requestTimeout !== void 0 ? "--request-timeout" : "NHNCLOUD_REQUEST_TIMEOUT",
     { min: 1, max: 3600 }
   );
+  const proxySettings = resolveProxySettings(opts.proxy, process.env);
   if (!opts.color || process.env["NO_COLOR"]) {
     import_chalk18.default.level = 0;
   }
@@ -13498,6 +14405,9 @@ program.hook("preAction", () => {
   if (timeoutSec !== void 0) {
     setRequestTimeoutMs(timeoutSec * 1e3);
   }
+  if (proxySettings) {
+    await installProxy(proxySettings);
+  }
 });
 program.addCommand(configureCommand);
 var logncrashCommand = new import_commander72.Command("logncrash").description("Log & Crash \uAD00\uB828 \uBA85\uB839").addHelpText("after", logncrashAgentWorkflow);