@bifos/nhncloud-cli 0.3.0 → 0.5.0

package/dist/index.js

@@ -24,8 +24,8 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 
 // src/index.ts
-var import_commander11 = require("commander");
-var import_chalk4 = __toESM(require("chalk"));
+var import_commander38 = require("commander");
+var import_chalk12 = __toESM(require("chalk"));
 
 // src/utils/spinner.ts
 var import_ora = __toESM(require("ora"));
@@ -317,7 +317,7 @@ function iaasCachePath(profile, region) {
 function isIaasTokenCache(val) {
   if (typeof val !== "object" || val === null) return false;
   const obj = val;
-  return typeof obj["tokenId"] === "string" && typeof obj["expiresAt"] === "string" && typeof obj["computeEndpoint"] === "string";
+  return typeof obj["tokenId"] === "string" && typeof obj["expiresAt"] === "string" && typeof obj["computeEndpoint"] === "string" && typeof obj["imageEndpoint"] === "string" && typeof obj["networkEndpoint"] === "string" && typeof obj["blockStorageEndpoint"] === "string";
 }
 async function readIaasToken(profile, region) {
   const filePath = iaasCachePath(profile, region);
@@ -331,7 +331,10 @@ async function readIaasToken(profile, region) {
     return {
       tokenId: parsed.tokenId,
       expiresAt: parsed.expiresAt,
-      computeEndpoint: parsed.computeEndpoint
+      computeEndpoint: parsed.computeEndpoint,
+      imageEndpoint: parsed.imageEndpoint,
+      networkEndpoint: parsed.networkEndpoint,
+      blockStorageEndpoint: parsed.blockStorageEndpoint
     };
   } catch {
     return null;
@@ -343,7 +346,10 @@ async function writeIaasToken(profile, region, data) {
   const cache = {
     tokenId: data.tokenId,
     expiresAt: data.expiresAt,
-    computeEndpoint: data.computeEndpoint
+    computeEndpoint: data.computeEndpoint,
+    imageEndpoint: data.imageEndpoint,
+    networkEndpoint: data.networkEndpoint,
+    blockStorageEndpoint: data.blockStorageEndpoint
   };
   const tmp = filePath + "." + (0, import_node_crypto.randomBytes)(4).toString("hex") + ".tmp";
   await (0, import_promises2.writeFile)(tmp, JSON.stringify(cache, null, 2), { encoding: "utf-8", mode: 384 });
@@ -448,6 +454,7 @@ var import_ky3 = __toESM(require("ky"));
 // src/api/endpoints.ts
 var ENDPOINTS = {
   logncrash: "https://api-lncs-search.nhncloudservice.com",
+  "logncrash-collector": "https://api-logncrash.nhncloudservice.com",
   deploy: "https://api-deploy.nhncloudservice.com"
 };
 function endpointFor(service) {
@@ -469,11 +476,75 @@ var INSTANCE_HOST = {
   kr3: "kr3-api-instance-infrastructure.nhncloudservice.com",
   jp1: "jp1-api-instance-infrastructure.nhncloudservice.com"
 };
+var IMAGE_HOST = {
+  kr1: "kr1-api-image-infrastructure.nhncloudservice.com",
+  kr2: "kr2-api-image-infrastructure.nhncloudservice.com",
+  kr3: "kr3-api-image-infrastructure.nhncloudservice.com",
+  jp1: "jp1-api-image-infrastructure.nhncloudservice.com"
+};
+var NETWORK_HOST = {
+  kr1: "kr1-api-network-infrastructure.nhncloudservice.com",
+  kr2: "kr2-api-network-infrastructure.nhncloudservice.com",
+  kr3: "kr3-api-network-infrastructure.nhncloudservice.com",
+  jp1: "jp1-api-network-infrastructure.nhncloudservice.com"
+};
+var BLOCKSTORAGE_HOST = {
+  kr1: "kr1-api-block-storage-infrastructure.nhncloudservice.com",
+  kr2: "kr2-api-block-storage-infrastructure.nhncloudservice.com",
+  kr3: "kr3-api-block-storage-infrastructure.nhncloudservice.com",
+  jp1: "jp1-api-block-storage-infrastructure.nhncloudservice.com"
+};
+var IAAS_REGIONS = Object.keys(INSTANCE_HOST).join(", ");
+var NCR_HOST = {
+  kr1: "kr1-ncr.api.nhncloudservice.com",
+  kr2: "kr2-ncr.api.nhncloudservice.com",
+  kr3: "kr3-ncr.api.nhncloudservice.com"
+};
+function ncrHost(region) {
+  const host = NCR_HOST[region];
+  if (!host) {
+    throw new NhnCloudCliError(
+      `\uC9C0\uC6D0\uD558\uC9C0 \uC54A\uB294 NCR region \uC785\uB2C8\uB2E4: "${region}". \uC0AC\uC6A9 \uAC00\uB2A5\uD55C region: ${Object.keys(NCR_HOST).join(", ")}`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return host;
+}
 function instanceHost(region) {
   const host = INSTANCE_HOST[region];
   if (!host) {
     throw new NhnCloudCliError(
-      `\uC9C0\uC6D0\uD558\uC9C0 \uC54A\uB294 region \uC785\uB2C8\uB2E4: "${region}". \uC0AC\uC6A9 \uAC00\uB2A5\uD55C region: ${Object.keys(INSTANCE_HOST).join(", ")}`,
+      `\uC9C0\uC6D0\uD558\uC9C0 \uC54A\uB294 region \uC785\uB2C8\uB2E4: "${region}". \uC0AC\uC6A9 \uAC00\uB2A5\uD55C region: ${IAAS_REGIONS}`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return host;
+}
+function imageHost(region) {
+  const host = IMAGE_HOST[region];
+  if (!host) {
+    throw new NhnCloudCliError(
+      `\uC9C0\uC6D0\uD558\uC9C0 \uC54A\uB294 region \uC785\uB2C8\uB2E4: "${region}". \uC0AC\uC6A9 \uAC00\uB2A5\uD55C region: ${IAAS_REGIONS}`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return host;
+}
+function networkHost(region) {
+  const host = NETWORK_HOST[region];
+  if (!host) {
+    throw new NhnCloudCliError(
+      `\uC9C0\uC6D0\uD558\uC9C0 \uC54A\uB294 region \uC785\uB2C8\uB2E4: "${region}". \uC0AC\uC6A9 \uAC00\uB2A5\uD55C region: ${IAAS_REGIONS}`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return host;
+}
+function blockStorageHost(region) {
+  const host = BLOCKSTORAGE_HOST[region];
+  if (!host) {
+    throw new NhnCloudCliError(
+      `\uC9C0\uC6D0\uD558\uC9C0 \uC54A\uB294 region \uC785\uB2C8\uB2E4: "${region}". \uC0AC\uC6A9 \uAC00\uB2A5\uD55C region: ${IAAS_REGIONS}`,
       EXIT_PARAM_ERROR
     );
   }
@@ -494,11 +565,20 @@ async function getIaasToken(profile, iaas, forceRefresh = false) {
   if (!forceRefresh) {
     const cached = await readIaasToken(profile, iaas.region);
     if (cached !== null) {
-      return { tokenId: cached.tokenId, computeEndpoint: cached.computeEndpoint };
+      return {
+        tokenId: cached.tokenId,
+        computeEndpoint: cached.computeEndpoint,
+        imageEndpoint: cached.imageEndpoint,
+        networkEndpoint: cached.networkEndpoint,
+        blockStorageEndpoint: cached.blockStorageEndpoint
+      };
     }
   }
   const host = instanceHost(iaas.region);
   const computeEndpoint = `https://${host}/v2/${encodeURIComponent(iaas.tenantId)}`;
+  const imageEndpoint = `https://${imageHost(iaas.region)}/v2`;
+  const networkEndpoint = `https://${networkHost(iaas.region)}/v2.0`;
+  const blockStorageEndpoint = `https://${blockStorageHost(iaas.region)}/v2/${encodeURIComponent(iaas.tenantId)}`;
   let raw;
   try {
     raw = await import_ky3.default.post(keystoneIdentityUrl(), {
@@ -525,22 +605,25 @@ async function getIaasToken(profile, iaas, forceRefresh = false) {
   const tokenId = raw.access.token.id;
   const expiresAt = raw.access.token.expires;
   if (!forceRefresh) {
-    await writeIaasToken(profile, iaas.region, { tokenId, expiresAt, computeEndpoint });
+    await writeIaasToken(profile, iaas.region, { tokenId, expiresAt, computeEndpoint, imageEndpoint, networkEndpoint, blockStorageEndpoint });
   }
-  return { tokenId, computeEndpoint };
+  return { tokenId, computeEndpoint, imageEndpoint, networkEndpoint, blockStorageEndpoint };
 }
 
 // src/services/logncrash/client.ts
 var import_ky4 = __toESM(require("ky"));
 
 // src/api/envelope.ts
-function unwrap(res) {
+function unwrapHeader(res) {
   if (!res.header.isSuccessful) {
     throw new NhnCloudCliError(
       `API \uC624\uB958: ${res.header.resultMessage}`,
       EXIT_API_ERROR
     );
   }
+}
+function unwrap(res) {
+  unwrapHeader(res);
   if (res.body === void 0) {
     throw new NhnCloudCliError("API \uC751\uB2F5\uC5D0 body \uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.", EXIT_API_ERROR);
   }
@@ -550,12 +633,19 @@ function unwrap(res) {
 // src/services/logncrash/client.ts
 var LogncrashClient = class {
   appkey;
+  /** 검색(X-LNCS-SECRET)에만 필요. collector send 는 secret 을 쓰지 않으므로 옵셔널 (ADR-014). */
   secret;
   constructor(appkey, secret) {
     this.appkey = appkey;
     this.secret = secret;
   }
   async search(params) {
+    if (!this.secret) {
+      throw new NhnCloudCliError(
+        "logncrash search \uC5D0\uB294 secret \uC774 \uD544\uC694\uD569\uB2C8\uB2E4. configure \uB85C logncrash secret \uC744 \uC124\uC815\uD558\uC138\uC694.",
+        EXIT_CONFIG_ERROR
+      );
+    }
     const endpoint = endpointFor("logncrash");
     const url = `${endpoint}/api/v2/search/${encodeURIComponent(this.appkey)}`;
     try {
@@ -577,6 +667,182 @@ var LogncrashClient = class {
       throw toNhnCloudCliError(err);
     }
   }
+  /**
+   * scroll 검색을 시작한다. POST /api/v2/search/scroll/{appkey}.
+   * body 는 search 와 동일(query/from/to/pageSize). 응답 scrollKey 로 scrollNext 를 이어 호출한다.
+   */
+  async scrollStart(params) {
+    if (!this.secret) {
+      throw new NhnCloudCliError(
+        "logncrash scroll \uC5D0\uB294 secret \uC774 \uD544\uC694\uD569\uB2C8\uB2E4. configure \uB85C logncrash secret \uC744 \uC124\uC815\uD558\uC138\uC694.",
+        EXIT_CONFIG_ERROR
+      );
+    }
+    const endpoint = endpointFor("logncrash");
+    const url = `${endpoint}/api/v2/search/scroll/${encodeURIComponent(this.appkey)}`;
+    try {
+      const res = await import_ky4.default.post(url, {
+        headers: {
+          "X-LNCS-SECRET": this.secret,
+          "Content-Type": "application/json"
+        },
+        json: {
+          query: params.query,
+          from: params.from,
+          to: params.to,
+          pageSize: params.pageSize ?? 100
+        }
+      }).json();
+      return unwrap(res);
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * scroll 다음 페이지를 가져온다. POST /api/v2/search/scroll/{appkey}/{scrollKey}.
+   * body 는 보내지 않는다(scrollKey 가 좌표). scrollKey 만료 시 API 가 실패 봉투를 주며,
+   * unwrap 이 EXIT_API_ERROR 로 변환한다 — 호출부에서 만료 안내 메시지로 감싼다.
+   */
+  async scrollNext(scrollKey) {
+    if (!this.secret) {
+      throw new NhnCloudCliError(
+        "logncrash scroll \uC5D0\uB294 secret \uC774 \uD544\uC694\uD569\uB2C8\uB2E4. configure \uB85C logncrash secret \uC744 \uC124\uC815\uD558\uC138\uC694.",
+        EXIT_CONFIG_ERROR
+      );
+    }
+    const endpoint = endpointFor("logncrash");
+    const url = `${endpoint}/api/v2/search/scroll/${encodeURIComponent(this.appkey)}/${encodeURIComponent(scrollKey)}`;
+    try {
+      const res = await import_ky4.default.post(url, {
+        headers: {
+          "X-LNCS-SECRET": this.secret,
+          "Content-Type": "application/json"
+        }
+      }).json();
+      return unwrap(res);
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 로그 한 건을 Log & Crash collector 로 전송한다 (ADR-014).
+   * - host: api-logncrash (검색의 api-lncs-search 와 별도)
+   * - 인증: 헤더 없음 — body 의 projectName=appkey 로 식별 (secret 불요)
+   * - logVersion 은 "v2" 고정. logSource/logType 미지정 시 collector 기본값("http"/"log") 적용.
+   */
+  async send(params) {
+    const endpoint = endpointFor("logncrash-collector");
+    const url = `${endpoint}/v2/log`;
+    const payload = {
+      projectName: this.appkey,
+      projectVersion: params.projectVersion,
+      logVersion: "v2",
+      body: params.body
+    };
+    if (params.logLevel !== void 0) payload["logLevel"] = params.logLevel;
+    if (params.logSource !== void 0) payload["logSource"] = params.logSource;
+    if (params.logType !== void 0) payload["logType"] = params.logType;
+    if (params.host !== void 0) payload["host"] = params.host;
+    try {
+      const res = await import_ky4.default.post(url, {
+        headers: { "Content-Type": "application/json" },
+        json: payload
+      }).json();
+      unwrapHeader(res);
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+};
+
+// src/services/ncr/client.ts
+var import_ky5 = __toESM(require("ky"));
+
+// src/services/ncr/types.ts
+function isRegistry(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return typeof obj["name"] === "string";
+}
+function isRepository(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return typeof obj["name"] === "string";
+}
+function isArtifact(val) {
+  return typeof val === "object" && val !== null;
+}
+
+// src/services/ncr/client.ts
+var DEFAULT_TIMEOUT_MS = 3e4;
+var NcrClient = class {
+  uakId;
+  uakSecret;
+  baseUrl;
+  constructor(uakId, uakSecret, region) {
+    this.uakId = uakId;
+    this.uakSecret = uakSecret;
+    this.baseUrl = `https://${ncrHost(region)}`;
+  }
+  authHeaders() {
+    return {
+      "X-TC-AUTHENTICATION-ID": this.uakId,
+      "X-TC-AUTHENTICATION-SECRET": this.uakSecret
+    };
+  }
+  /**
+   * 레지스트리 목록을 반환한다.
+   * GET /ncr/v2.0/appkeys/{appKey}/registries
+   * 응답: { header, registries: [...] } — body 가 아니라 named 필드.
+   */
+  async listRegistries(appKey) {
+    const url = `${this.baseUrl}/ncr/v2.0/appkeys/${encodeURIComponent(appKey)}/registries`;
+    try {
+      const res = await import_ky5.default.get(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS
+      }).json();
+      unwrapHeader(res);
+      if (!Array.isArray(res.registries)) {
+        if (res.registries === void 0) return [];
+        throw new NhnCloudCliError(
+          "NCR API \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: registries \uAC00 \uBC30\uC5F4\uC774 \uC544\uB2D9\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return res.registries.filter(isRegistry);
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 단일 레지스트리를 반환한다.
+   * GET /ncr/v2.0/appkeys/{appKey}/registries/{registryNameOrId}
+   * 응답: { header, registry: {...} } — body 가 아니라 named 필드.
+   */
+  async getRegistry(appKey, registry) {
+    const url = `${this.baseUrl}/ncr/v2.0/appkeys/${encodeURIComponent(appKey)}/registries/${encodeURIComponent(registry)}`;
+    try {
+      const res = await import_ky5.default.get(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS
+      }).json();
+      unwrapHeader(res);
+      if (res.registry && isRegistry(res.registry)) {
+        return res.registry;
+      }
+      throw new NhnCloudCliError(
+        "NCR API \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: registry \uAC1D\uCCB4\uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.",
+        EXIT_API_ERROR
+      );
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
 };
 
 // src/commands/configure-verify.ts
@@ -602,6 +868,19 @@ async function verifyIaas(iaas) {
     throw err;
   }
 }
+async function verifyNcr(uak, appkey) {
+  if (!appkey) return false;
+  const client = new NcrClient(uak.id, uak.secret, "kr1");
+  try {
+    await client.listRegistries(appkey);
+    return true;
+  } catch (err) {
+    if (err instanceof NhnCloudCliError && err.exitCode === EXIT_AUTH_ERROR) {
+      return false;
+    }
+    throw err;
+  }
+}
 async function verifyLogncrash(cred) {
   if (!cred.appkey || !cred.secret) return false;
   const client = new LogncrashClient(cred.appkey, cred.secret);
@@ -625,7 +904,7 @@ async function verifyLogncrash(cred) {
 }
 
 // src/commands/configure.ts
-async function saveAndVerify(profileName, uak, logncrash, iaas, doVerify) {
+async function saveAndVerify(profileName, uak, logncrash, iaas, ncr, doVerify) {
   if (doVerify) {
     if (uak) {
       const ok = await verifyUserAccessKey(uak);
@@ -660,6 +939,26 @@ async function saveAndVerify(profileName, uak, logncrash, iaas, doVerify) {
         );
       }
     }
+    if (ncr) {
+      if (uak) {
+        const appkey = ncr.appkey ?? "";
+        const ok = await verifyNcr(uak, appkey);
+        if (ok) {
+          process.stderr.write(import_chalk.default.green("  \u2713 ncr \uC5F0\uACB0 \uC131\uACF5 (kr1)\n"));
+        } else {
+          throw new NhnCloudCliError(
+            "ncr \uC778\uC99D \uC2E4\uD328 \u2014 appkey \uB610\uB294 UAK \uB97C \uD655\uC778\uD558\uC138\uC694.",
+            EXIT_AUTH_ERROR
+          );
+        }
+      } else {
+        process.stderr.write(
+          import_chalk.default.yellow(
+            "  \u26A0 ncr verify \uAC74\uB108\uB700 \u2014 \uC774\uBC88 \uC124\uC815\uC5D0 UAK \uAC00 \uC5C6\uC2B5\uB2C8\uB2E4. ncr \uBA85\uB839\uC740 \uACF5\uD1B5 UAK \uAC00 \uD544\uC694\uD558\uB2C8 \uBA3C\uC800 \uC124\uC815\uD558\uC138\uC694.\n"
+          )
+        );
+      }
+    }
   }
   if (uak) {
     await setUserAccessKey(profileName, uak);
@@ -670,6 +969,9 @@ async function saveAndVerify(profileName, uak, logncrash, iaas, doVerify) {
   if (iaas) {
     await setIaasCredential(profileName, iaas);
   }
+  if (ncr) {
+    await setServiceCredential(profileName, "ncr", ncr);
+  }
   process.stderr.write(import_chalk.default.green(`
 \u2713 profile "${profileName}" \uC124\uC815\uC774 \uC800\uC7A5\uB418\uC5C8\uC2B5\uB2C8\uB2E4.
 `));
@@ -729,12 +1031,25 @@ async function runInteractive(opts) {
     });
     iaas = { tenantId, username: iaasUsername, password: iaasPassword, region };
   }
+  let ncr;
+  const setupNcr = await confirm({
+    message: "ncr \uC790\uACA9\uC99D\uBA85\uB3C4 \uC124\uC815\uD558\uC2DC\uACA0\uC2B5\uB2C8\uAE4C?",
+    default: false
+  });
+  if (setupNcr) {
+    process.stderr.write(import_chalk.default.gray("\n\u2014 ncr (Container Registry) \uC790\uACA9\uC99D\uBA85 \u2014\n"));
+    const ncrAppkey = await input({
+      message: "ncr appkey",
+      validate: (v) => v.trim().length > 0 || "ncr appkey \uB97C \uC785\uB825\uD558\uC138\uC694"
+    });
+    ncr = { appkey: ncrAppkey.trim() };
+  }
   if (opts.verify) {
     process.stderr.write(import_chalk.default.gray("\n\u2014 \uC5F0\uACB0 \uD14C\uC2A4\uD2B8 \uC911\u2026 \u2014\n"));
   }
   if (opts.verify) {
     try {
-      await saveAndVerify(profileName, uak, logncrash, iaas, true);
+      await saveAndVerify(profileName, uak, logncrash, iaas, ncr, true);
     } catch (err) {
       if (err instanceof NhnCloudCliError && err.exitCode === EXIT_AUTH_ERROR) {
         process.stderr.write(import_chalk.default.red(`  \u2717 ${err.message}
@@ -747,13 +1062,13 @@ async function runInteractive(opts) {
           process.stderr.write(import_chalk.default.yellow("\uC800\uC7A5\uC774 \uCDE8\uC18C\uB418\uC5C8\uC2B5\uB2C8\uB2E4.\n"));
           return;
         }
-        await saveAndVerify(profileName, uak, logncrash, iaas, false);
+        await saveAndVerify(profileName, uak, logncrash, iaas, ncr, false);
       } else {
         throw err;
       }
     }
   } else {
-    await saveAndVerify(profileName, uak, logncrash, iaas, false);
+    await saveAndVerify(profileName, uak, logncrash, iaas, ncr, false);
   }
 }
 async function runNonInteractive(opts) {
@@ -769,22 +1084,23 @@ async function runNonInteractive(opts) {
     password: iaasPassword,
     region: opts.iaasRegion ?? "kr1"
   } : void 0;
-  if (!uak && !logncrash && !iaas) {
+  const ncr = opts.ncrAppkey?.trim() ? { appkey: opts.ncrAppkey.trim() } : void 0;
+  if (!uak && !logncrash && !iaas && !ncr) {
     throw new NhnCloudCliError(
-      "\uBE44\uB300\uD654\uD615 \uBAA8\uB4DC: --uak-id + UAK secret, --logncrash-appkey + logncrash secret,\n\uB610\uB294 --iaas-tenant-id + --iaas-username + iaas password \uC911 \uD558\uB098\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.\nsecret/password \uB294 \uB178\uCD9C \uBC29\uC9C0\uB97C \uC704\uD574 \uD658\uACBD\uBCC0\uC218 \uAD8C\uC7A5:\nNHNCLOUD_UAK_SECRET / NHNCLOUD_LOGNCRASH_SECRET / NHNCLOUD_IAAS_PASSWORD.",
+      "\uBE44\uB300\uD654\uD615 \uBAA8\uB4DC: --uak-id + UAK secret, --logncrash-appkey + logncrash secret,\n--iaas-tenant-id + --iaas-username + iaas password,\n\uB610\uB294 --ncr-appkey \uC911 \uD558\uB098\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.\nsecret/password \uB294 \uB178\uCD9C \uBC29\uC9C0\uB97C \uC704\uD574 \uD658\uACBD\uBCC0\uC218 \uAD8C\uC7A5:\nNHNCLOUD_UAK_SECRET / NHNCLOUD_LOGNCRASH_SECRET / NHNCLOUD_IAAS_PASSWORD.",
       EXIT_PARAM_ERROR
     );
   }
   if (opts.verify) {
     process.stderr.write(import_chalk.default.gray("\uC5F0\uACB0 \uD14C\uC2A4\uD2B8 \uC911\u2026\n"));
   }
-  await saveAndVerify(profileName, uak, logncrash, iaas, opts.verify);
+  await saveAndVerify(profileName, uak, logncrash, iaas, ncr, opts.verify);
 }
 var configureCommand = new import_commander.Command("configure").description("\uC790\uACA9\uC99D\uBA85 \uC124\uC815 \uB9C8\uBC95\uC0AC (\uB300\uD654\uD615 + flag)").option("--profile <name>", "\uB300\uC0C1 profile \uC774\uB984 (\uAE30\uBCF8: default)").option("--uak-id <id>", "\uAC1C\uC778 UAK ID (\uBE44\uB300\uD654\uD615)").option("--uak-secret <secret>", "\uAC1C\uC778 UAK Secret (\uBE44\uB300\uD654\uD615, \uB178\uCD9C \uBC29\uC9C0\uB85C env NHNCLOUD_UAK_SECRET \uAD8C\uC7A5)").option("--logncrash-appkey <key>", "logncrash appkey (\uBE44\uB300\uD654\uD615)").option("--logncrash-secret <secret>", "logncrash secret (\uBE44\uB300\uD654\uD615, env NHNCLOUD_LOGNCRASH_SECRET \uAD8C\uC7A5)").option("--iaas-tenant-id <id>", "iaas tenantId / \uD504\uB85C\uC81D\uD2B8 ID (\uBE44\uB300\uD654\uD615)").option("--iaas-username <user>", "iaas IAM username (\uBE44\uB300\uD654\uD615)").option(
   "--iaas-password <pass>",
   "iaas API \uBE44\uBC00\uBC88\uD638 (\uBE44\uB300\uD654\uD615, \uB178\uCD9C \uBC29\uC9C0\uB85C env NHNCLOUD_IAAS_PASSWORD \uAD8C\uC7A5)"
-).option("--iaas-region <region>", "iaas region (\uAE30\uBCF8: kr1)", "kr1").option("--no-verify", "\uC5F0\uACB0 \uD14C\uC2A4\uD2B8 \uC0DD\uB7B5").action(async (opts) => {
-  const hasFlag = opts.uakId || opts.uakSecret || opts.logncrashAppkey || opts.logncrashSecret || opts.iaasTenantId || opts.iaasUsername || opts.iaasPassword;
+).option("--iaas-region <region>", "iaas region (\uAE30\uBCF8: kr1)", "kr1").option("--ncr-appkey <key>", "ncr appkey (\uBE44\uB300\uD654\uD615)").option("--no-verify", "\uC5F0\uACB0 \uD14C\uC2A4\uD2B8 \uC0DD\uB7B5").action(async (opts) => {
+  const hasFlag = opts.uakId || opts.uakSecret || opts.logncrashAppkey || opts.logncrashSecret || opts.iaasTenantId || opts.iaasUsername || opts.iaasPassword || opts.ncrAppkey;
   try {
     if (hasFlag) {
       await runNonInteractive(opts);
@@ -985,106 +1301,469 @@ credentials.json \uC5D0 "secret": "<secretkey>" \uB97C \uCD94\uAC00\uD558\uC138\
   });
 });
 
-// src/commands/deploy/run.ts
+// src/commands/logncrash/send.ts
 var import_commander3 = require("commander");
-
-// src/services/deploy/client.ts
-var import_ky5 = __toESM(require("ky"));
-var SYNC_TIMEOUT_MS = 6e5;
-var DEFAULT_TIMEOUT_MS = 3e4;
-var DeployClient = class {
-  accessToken;
-  baseUrl;
-  constructor(accessToken) {
-    this.accessToken = accessToken;
-    this.baseUrl = endpointFor("deploy");
-  }
-  authHeaders() {
-    return {
-      "X-NHN-AUTHORIZATION": `Bearer ${this.accessToken}`
-    };
-  }
-  /**
-   * 배포를 실행한다.
-   * - targetHosts 가 비어있으면 payload 에서 targetServerHostnames 를 제외한다 (서버그룹 전체 배포).
-   * - async=false(기본) 일 때 서버가 완료까지 응답을 보류하므로 ky timeout 을 600s 로 설정한다.
-   */
-  async run(params) {
-    const url = `${this.baseUrl}/api/v2.1/projects/${params.appKey}/artifacts/${params.artifactId}/server-group/${params.serverGroupId}/deploy`;
-    const isAsync = params.async ?? false;
-    const payload = {
-      concurrentNum: params.concurrentNum ?? 1,
-      nextWhenFail: params.nextWhenFail ?? false,
-      scenarioIds: params.scenarioIds,
-      deployNote: params.deployNote ?? `CLI deploy ${(/* @__PURE__ */ new Date()).toISOString()}`,
-      async: isAsync
-    };
-    if (params.targetHosts) {
-      payload["targetServerHostnames"] = params.targetHosts;
-    }
+var import_node_fs = require("fs");
+var MAX_LOG_BYTES = 8 * 1024 * 1024;
+var VALID_LEVELS = ["DEBUG", "INFO", "WARN", "ERROR", "FATAL"];
+function resolveBody(opts) {
+  if (opts.body !== void 0) return opts.body;
+  if (opts.file !== void 0) {
+    let stat;
     try {
-      const res = await import_ky5.default.post(url, {
-        headers: {
-          ...this.authHeaders(),
-          "Content-Type": "application/json"
-        },
-        json: payload,
-        retry: 0,
-        timeout: isAsync ? DEFAULT_TIMEOUT_MS : SYNC_TIMEOUT_MS
-      }).json();
-      return unwrap(res);
-    } catch (err) {
-      throw toNhnCloudCliError(err);
+      stat = (0, import_node_fs.statSync)(opts.file);
+    } catch (e) {
+      const reason = e.code ?? (e instanceof Error ? e.message : String(e));
+      throw new NhnCloudCliError(`\uB85C\uADF8 \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${opts.file} (${reason})`, EXIT_PARAM_ERROR);
     }
-  }
-  /**
-   * 아티팩트 목록을 조회한다.
-   */
-  async artifacts(appKey) {
-    const url = `${this.baseUrl}/api/v2.1/projects/${appKey}/artifacts`;
-    try {
-      const res = await import_ky5.default.get(url, {
-        headers: this.authHeaders(),
-        retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS
-      }).json();
-      return unwrap(res);
-    } catch (err) {
-      throw toNhnCloudCliError(err);
+    if (!stat.isFile()) {
+      throw new NhnCloudCliError(`\uB85C\uADF8 \uD30C\uC77C\uC774 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${opts.file}`, EXIT_PARAM_ERROR);
     }
-  }
-  /**
-   * 서버그룹 목록을 조회한다.
-   */
-  async serverGroups(appKey, artifactId) {
-    const url = `${this.baseUrl}/api/v2.1/projects/${appKey}/artifacts/${artifactId}/server-groups`;
-    try {
-      const res = await import_ky5.default.get(url, {
-        headers: this.authHeaders(),
-        retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS
-      }).json();
-      return unwrap(res);
-    } catch (err) {
-      throw toNhnCloudCliError(err);
+    if (stat.size > MAX_LOG_BYTES) {
+      throw new NhnCloudCliError(
+        `\uB85C\uADF8 \uD30C\uC77C\uC774 \uB108\uBB34 \uD07D\uB2C8\uB2E4: ${stat.size} \uBC14\uC774\uD2B8 (\uD55C\uB3C4 ${MAX_LOG_BYTES} \uBC14\uC774\uD2B8).`,
+        EXIT_PARAM_ERROR
+      );
     }
+    return (0, import_node_fs.readFileSync)(opts.file, "utf-8");
   }
-  /**
-   * 배포 이력을 조회한다.
-   */
-  async histories(appKey, artifactId) {
-    const url = `${this.baseUrl}/api/v2.1/projects/${appKey}/artifacts/${artifactId}/deploy-histories`;
-    try {
-      const res = await import_ky5.default.get(url, {
-        headers: this.authHeaders(),
-        retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS
-      }).json();
+  if (!process.stdin.isTTY) {
+    return (0, import_node_fs.readFileSync)(0, "utf-8");
+  }
+  throw new NhnCloudCliError(
+    "\uB85C\uADF8 \uBCF8\uBB38\uC774 \uD544\uC694\uD569\uB2C8\uB2E4. --body <text> \uB610\uB294 --file <path> \uB610\uB294 \uD45C\uC900\uC785\uB825(\uD30C\uC774\uD504)\uC73C\uB85C \uC804\uB2EC\uD558\uC138\uC694.",
+    EXIT_PARAM_ERROR
+  );
+}
+var sendCommand = new import_commander3.Command("send").description("\uB85C\uADF8 \uD55C \uAC74\uC744 Log & Crash \uB85C \uC804\uC1A1\uD55C\uB2E4 (--body / --file / stdin)").option("--body <text>", "\uB85C\uADF8 \uBA54\uC2DC\uC9C0 \uBCF8\uBB38 (\uBBF8\uC9C0\uC815 \uC2DC --file \uB610\uB294 stdin)").option("--file <path>", "\uB85C\uADF8 \uBCF8\uBB38\uC744 \uC77D\uC744 \uD30C\uC77C \uACBD\uB85C").option("--level <level>", "\uB85C\uADF8 \uB808\uBCA8 (DEBUG/INFO/WARN/ERROR/FATAL)").option("--app-version <ver>", "projectVersion (\uBBF8\uC9C0\uC815 \uC2DC \uAE30\uBCF8 '1.0.0')").option("--source <source>", "logSource (collector \uAE30\uBCF8 'http')").option("--type <type>", "logType (collector \uAE30\uBCF8 'log')").option("--host <host>", "\uB85C\uADF8\uB97C \uBCF4\uB0B8 host \uC2DD\uBCC4").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const body = resolveBody(opts);
+  const bytes = Buffer.byteLength(body, "utf-8");
+  if (bytes === 0) {
+    throw new NhnCloudCliError("\uB85C\uADF8 \uBCF8\uBB38\uC774 \uBE44\uC5B4 \uC788\uC2B5\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  if (bytes > MAX_LOG_BYTES) {
+    throw new NhnCloudCliError(
+      `\uB85C\uADF8 \uBCF8\uBB38\uC774 \uB108\uBB34 \uD07D\uB2C8\uB2E4: ${bytes} \uBC14\uC774\uD2B8 (\uD55C\uB3C4 ${MAX_LOG_BYTES} \uBC14\uC774\uD2B8).`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  let logLevel;
+  if (opts.level !== void 0) {
+    const upper = opts.level.toUpperCase();
+    if (!VALID_LEVELS.includes(upper)) {
+      throw new NhnCloudCliError(
+        `--level \uC740 ${VALID_LEVELS.join("/")} \uC911 \uD558\uB098\uC5EC\uC57C \uD569\uB2C8\uB2E4 (\uC785\uB825: ${opts.level}).`,
+        EXIT_PARAM_ERROR
+      );
+    }
+    logLevel = upper;
+  }
+  const profileName = await resolveProfileName(opts.profile);
+  const cred = await getServiceCredential("logncrash", profileName);
+  if (!cred.appkey) {
+    throw new NhnCloudCliError(
+      `profile "${profileName}" \uC758 logncrash \uC790\uACA9\uC99D\uBA85\uC5D0 appkey \uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.
+credentials.json \uC5D0 "appkey": "<appkey>" \uB97C \uCD94\uAC00\uD558\uC138\uC694.`,
+      EXIT_CONFIG_ERROR
+    );
+  }
+  const client = new LogncrashClient(cred.appkey);
+  startSpinner("\uB85C\uADF8 \uC804\uC1A1 \uC911...");
+  try {
+    await client.send({
+      body,
+      projectVersion: opts.appVersion ?? "1.0.0",
+      logLevel,
+      logSource: opts.source,
+      logType: opts.type,
+      host: opts.host
+    });
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true, "\uB85C\uADF8\uB97C \uC804\uC1A1\uD588\uC2B5\uB2C8\uB2E4.");
+  if (opts.json) {
+    process.stdout.write(JSON.stringify({ ok: true, bytes }) + "\n");
+  }
+});
+
+// src/commands/logncrash/export.ts
+var import_commander4 = require("commander");
+var import_promises3 = require("fs/promises");
+var import_node_fs2 = require("fs");
+var import_node_crypto2 = require("crypto");
+var MAX_TOTAL = 1e5;
+function assertWritable(path, force) {
+  if (force) return;
+  try {
+    (0, import_node_fs2.statSync)(path);
+  } catch (e) {
+    if (e.code === "ENOENT") return;
+    const reason = e.code ?? (e instanceof Error ? e.message : String(e));
+    throw new NhnCloudCliError(`--output \uACBD\uB85C\uB97C \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${path} (${reason})`, EXIT_PARAM_ERROR);
+  }
+  throw new NhnCloudCliError(
+    `--output \uB300\uC0C1\uC774 \uC774\uBBF8 \uC874\uC7AC\uD569\uB2C8\uB2E4: ${path}. \uB36E\uC5B4\uC4F0\uB824\uBA74 --force \uB97C \uC4F0\uC138\uC694.`,
+    EXIT_PARAM_ERROR
+  );
+}
+var exportCommand = new import_commander4.Command("export").description("Log & Crash \uB85C\uADF8\uB97C scroll \uB85C \uC804\uCCB4 \uCD94\uCD9C\uD574 \uD30C\uC77C\uB85C \uC800\uC7A5 (\uB300\uB7C9 \uCD94\uCD9C)").option("--query <lucene>", "Lucene \uC9C8\uC758 \uBB38\uC790\uC5F4 (\uD544\uC218)").option("--from <time>", "\uAC80\uC0C9 \uC2DC\uC791: ISO8601 \uB610\uB294 \uC0C1\uB300\uC2DC\uAC04 (1h/30m/2d/now) (\uD544\uC218)").option("--to <time>", "\uAC80\uC0C9 \uB05D: ISO8601 \uB610\uB294 \uC0C1\uB300\uC2DC\uAC04 (\uD544\uC218)").option("--output <file>", "\uCD9C\uB825 \uD30C\uC77C \uACBD\uB85C (\uD544\uC218)").option("--format <fmt>", "\uCD9C\uB825 \uD615\uC2DD: jsonl(\uAE30\uBCF8, \uD55C \uC904\uB2F9 \uD55C \uB85C\uADF8) \uB610\uB294 json(\uBC30\uC5F4)", "jsonl").option("--size <n>", "scroll \uD398\uC774\uC9C0 \uD06C\uAE30 (docs \uBC94\uC704 10~100, \uAE30\uBCF8 100)", "100").option("--force", "\uCD9C\uB825 \uD30C\uC77C\uC774 \uC788\uC73C\uBA74 \uB36E\uC5B4\uC4F4\uB2E4").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  if (!opts.query) {
+    throw new NhnCloudCliError(`--query \uC635\uC158\uC740 \uD544\uC218\uC785\uB2C8\uB2E4. \uC608: --query 'logType:"NORMAL"'`, EXIT_PARAM_ERROR);
+  }
+  if (!opts.from) {
+    throw new NhnCloudCliError("--from \uC635\uC158\uC740 \uD544\uC218\uC785\uB2C8\uB2E4. \uC608: --from 1h", EXIT_PARAM_ERROR);
+  }
+  if (!opts.to) {
+    throw new NhnCloudCliError("--to \uC635\uC158\uC740 \uD544\uC218\uC785\uB2C8\uB2E4. \uC608: --to now", EXIT_PARAM_ERROR);
+  }
+  if (!opts.output) {
+    throw new NhnCloudCliError("--output \uC635\uC158\uC740 \uD544\uC218\uC785\uB2C8\uB2E4. \uC608: --output logs.jsonl", EXIT_PARAM_ERROR);
+  }
+  const format = opts.format ?? "jsonl";
+  if (format !== "jsonl" && format !== "json") {
+    throw new NhnCloudCliError("--format \uC740 jsonl \uB610\uB294 json \uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  const sizeRaw = opts.size ?? "100";
+  if (!/^[1-9]\d*$/.test(sizeRaw)) {
+    throw new NhnCloudCliError("--size \uB294 \uC591\uC758 \uC815\uC218\uC5EC\uC57C \uD569\uB2C8\uB2E4 (docs \uBC94\uC704 10~100).", EXIT_PARAM_ERROR);
+  }
+  const size = parseInt(sizeRaw, 10);
+  if (size < 10 || size > 100) {
+    throw new NhnCloudCliError("--size \uB294 10~100 \uC0AC\uC774\uC5EC\uC57C \uD569\uB2C8\uB2E4 (Log & Crash scroll pageSize \uD55C\uB3C4).", EXIT_PARAM_ERROR);
+  }
+  const fromIso = resolveTime(opts.from);
+  const toIso = resolveTime(opts.to);
+  assertSearchRange(fromIso, toIso);
+  assertWritable(opts.output, opts.force ?? false);
+  const profileName = await resolveProfileName(opts.profile);
+  const cred = await getServiceCredential("logncrash", profileName);
+  if (!cred.appkey) {
+    throw new NhnCloudCliError(
+      `profile "${profileName}" \uC758 logncrash \uC790\uACA9\uC99D\uBA85\uC5D0 appkey \uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.
+credentials.json \uC5D0 "appkey": "<appkey>" \uB97C \uCD94\uAC00\uD558\uC138\uC694.`,
+      EXIT_CONFIG_ERROR
+    );
+  }
+  if (!cred.secret) {
+    throw new NhnCloudCliError(
+      `profile "${profileName}" \uC758 logncrash \uC790\uACA9\uC99D\uBA85\uC5D0 secret \uC774 \uC5C6\uC2B5\uB2C8\uB2E4.
+credentials.json \uC5D0 "secret": "<secret>" \uB97C \uCD94\uAC00\uD558\uC138\uC694.`,
+      EXIT_CONFIG_ERROR
+    );
+  }
+  const client = new LogncrashClient(cred.appkey, cred.secret);
+  const tmp = opts.output + "." + (0, import_node_crypto2.randomBytes)(4).toString("hex") + ".tmp";
+  const stream = (0, import_node_fs2.createWriteStream)(tmp, { encoding: "utf-8" });
+  const spinner = startSpinner("\uB85C\uADF8 \uCD94\uCD9C \uC911...");
+  let count = 0;
+  let total = 0;
+  let first = true;
+  const writePage = (data) => {
+    for (const log of data) {
+      if (count >= MAX_TOTAL) break;
+      const json = JSON.stringify(log);
+      stream.write(format === "json" ? first ? json : "," + json : json + "\n");
+      first = false;
+      count++;
+    }
+  };
+  try {
+    if (format === "json") stream.write("[");
+    let res = await client.scrollStart({ query: opts.query, from: fromIso, to: toIso, pageSize: size });
+    total = res.totalItems;
+    writePage(res.data);
+    spinner.text = `\uB85C\uADF8 \uCD94\uCD9C \uC911... ${count}/${total}`;
+    while (res.data.length > 0 && res.scrollKey && count < Math.min(total, MAX_TOTAL)) {
+      res = await scrollNextOrExpire(client, res.scrollKey);
+      writePage(res.data);
+      spinner.text = `\uB85C\uADF8 \uCD94\uCD9C \uC911... ${count}/${total}`;
+    }
+    if (format === "json") stream.write("]\n");
+    await new Promise((resolve, reject) => {
+      stream.once("error", reject);
+      stream.end(resolve);
+    });
+  } catch (err) {
+    stopSpinner(false);
+    stream.destroy();
+    await (0, import_promises3.rm)(tmp, { force: true }).catch(() => {
+    });
+    throw err;
+  }
+  stopSpinner(true, `${count}\uAC74 \uCD94\uCD9C \uC644\uB8CC`);
+  try {
+    await (0, import_promises3.rename)(tmp, opts.output);
+  } catch (err) {
+    await (0, import_promises3.rm)(tmp, { force: true }).catch(() => {
+    });
+    const reason = err.code ?? (err instanceof Error ? err.message : String(err));
+    throw new NhnCloudCliError(`\uCD9C\uB825 \uD30C\uC77C\uC744 \uC4F8 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${opts.output} (${reason})`, EXIT_PARAM_ERROR);
+  }
+  if (count >= MAX_TOTAL && total > MAX_TOTAL) {
+    process.stderr.write(
+      `\uACBD\uACE0: \uC804\uCCB4 ${total}\uAC74 \uC911 \uC0C1\uD55C ${MAX_TOTAL}\uAC74\uAE4C\uC9C0\uB9CC \uCD94\uCD9C\uD588\uC2B5\uB2C8\uB2E4. \uAC80\uC0C9 \uBC94\uC704\uB97C \uC881\uD600 \uB098\uB220 \uCD94\uCD9C\uD558\uC138\uC694.
+`
+    );
+  }
+  process.stderr.write(`${opts.output} \uC5D0 ${count}\uAC74 \uC800\uC7A5
+`);
+});
+async function scrollNextOrExpire(client, scrollKey) {
+  try {
+    return await client.scrollNext(scrollKey);
+  } catch (err) {
+    if (err instanceof NhnCloudCliError && err.exitCode === EXIT_API_ERROR) {
+      throw new NhnCloudCliError(
+        `scroll \uB2E4\uC74C \uD398\uC774\uC9C0 \uC694\uCCAD\uC774 \uC2E4\uD328\uD588\uC2B5\uB2C8\uB2E4 (\uC6D0\uC778: ${err.message}). scrollKey \uB9CC\uB8CC(\uC720\uD6A8 1\uBD84)\uC77C \uC218 \uC788\uC73C\uB2C8, \uB9CC\uB8CC\uB77C\uBA74 \uAC80\uC0C9 \uBC94\uC704\uB97C \uC881\uD788\uAC70\uB098 --size \uB97C \uD0A4\uC6CC \uD398\uC774\uC9C0 \uC218\uB97C \uC904\uC778 \uB4A4 \uB2E4\uC2DC \uC2DC\uB3C4\uD558\uC138\uC694.`,
+        EXIT_API_ERROR
+      );
+    }
+    throw err;
+  }
+}
+
+// src/commands/deploy/run.ts
+var import_commander5 = require("commander");
+
+// src/services/deploy/client.ts
+var import_ky6 = __toESM(require("ky"));
+function isBinaryGroup(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  const keyType = typeof obj["key"];
+  return (keyType === "number" || keyType === "string") && typeof obj["name"] === "string";
+}
+function isBinary(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  const binaryKeyType = typeof obj["binaryKey"];
+  const binarySizeType = typeof obj["binarySize"];
+  return (binaryKeyType === "number" || binaryKeyType === "string") && (binarySizeType === "number" || binarySizeType === "string");
+}
+var SYNC_TIMEOUT_MS = 6e5;
+var DEFAULT_TIMEOUT_MS2 = 3e4;
+var DeployClient = class {
+  accessToken;
+  baseUrl;
+  constructor(accessToken) {
+    this.accessToken = accessToken;
+    this.baseUrl = endpointFor("deploy");
+  }
+  authHeaders() {
+    return {
+      "X-NHN-AUTHORIZATION": `Bearer ${this.accessToken}`
+    };
+  }
+  /**
+   * 배포를 실행한다.
+   * - targetHosts 가 비어있으면 payload 에서 targetServerHostnames 를 제외한다 (서버그룹 전체 배포).
+   * - async=false(기본) 일 때 서버가 완료까지 응답을 보류하므로 ky timeout 을 600s 로 설정한다.
+   */
+  async run(params) {
+    const url = `${this.baseUrl}/api/v2.1/projects/${encodeURIComponent(params.appKey)}/artifacts/${encodeURIComponent(params.artifactId)}/server-group/${encodeURIComponent(params.serverGroupId)}/deploy`;
+    const isAsync = params.async ?? false;
+    const payload = {
+      concurrentNum: params.concurrentNum ?? 1,
+      nextWhenFail: params.nextWhenFail ?? false,
+      scenarioIds: params.scenarioIds,
+      deployNote: params.deployNote ?? `CLI deploy ${(/* @__PURE__ */ new Date()).toISOString()}`,
+      async: isAsync
+    };
+    if (params.targetHosts) {
+      payload["targetServerHostnames"] = params.targetHosts;
+    }
+    try {
+      const res = await import_ky6.default.post(url, {
+        headers: {
+          ...this.authHeaders(),
+          "Content-Type": "application/json"
+        },
+        json: payload,
+        retry: 0,
+        timeout: isAsync ? DEFAULT_TIMEOUT_MS2 : SYNC_TIMEOUT_MS
+      }).json();
+      return unwrap(res);
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 아티팩트 목록을 조회한다.
+   */
+  async artifacts(appKey) {
+    const url = `${this.baseUrl}/api/v2.1/projects/${encodeURIComponent(appKey)}/artifacts`;
+    try {
+      const res = await import_ky6.default.get(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS2
+      }).json();
+      return unwrap(res);
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 서버그룹 목록을 조회한다.
+   */
+  async serverGroups(appKey, artifactId) {
+    const url = `${this.baseUrl}/api/v2.1/projects/${encodeURIComponent(appKey)}/artifacts/${encodeURIComponent(artifactId)}/server-groups`;
+    try {
+      const res = await import_ky6.default.get(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS2
+      }).json();
+      return unwrap(res);
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 배포 이력을 조회한다.
+   */
+  async histories(appKey, artifactId) {
+    const url = `${this.baseUrl}/api/v2.1/projects/${encodeURIComponent(appKey)}/artifacts/${encodeURIComponent(artifactId)}/deploy-histories`;
+    try {
+      const res = await import_ky6.default.get(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS2
+      }).json();
       return unwrap(res);
     } catch (err) {
       throw toNhnCloudCliError(err);
     }
   }
+  /**
+   * 바이너리 그룹 목록을 조회한다.
+   */
+  async binaryGroups(appKey, artifactId) {
+    const url = `${this.baseUrl}/api/v2.1/projects/${encodeURIComponent(appKey)}/artifacts/${encodeURIComponent(artifactId)}/binary-groups`;
+    try {
+      const res = await import_ky6.default.get(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS2
+      }).json();
+      const body = unwrap(res);
+      const list = body.binaryGroups;
+      if (!Array.isArray(list) || !list.every(isBinaryGroup)) {
+        throw new NhnCloudCliError(
+          "binary-groups \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 binaryGroups \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return list;
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 특정 바이너리 그룹의 바이너리 목록을 조회한다.
+   * pageNum/pageSize/sortKey/sortDirection 은 NHN docs 의 쿼리 파라미터로 그대로 전달한다.
+   */
+  async binaries(appKey, artifactId, binaryGroupKey, params = {}) {
+    const url = `${this.baseUrl}/api/v2.1/projects/${encodeURIComponent(appKey)}/artifacts/${encodeURIComponent(artifactId)}/binary-groups/${binaryGroupKey}/binaries`;
+    const searchParams = {};
+    if (params.pageNum !== void 0) searchParams["pageNum"] = params.pageNum;
+    if (params.pageSize !== void 0) searchParams["pageSize"] = params.pageSize;
+    if (params.sortKey !== void 0) searchParams["sortKey"] = params.sortKey;
+    if (params.sortDirection !== void 0) searchParams["sortDirection"] = params.sortDirection;
+    try {
+      const res = await import_ky6.default.get(url, {
+        headers: this.authHeaders(),
+        searchParams,
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS2
+      }).json();
+      const body = unwrap(res);
+      const list = body.binaries;
+      if (!Array.isArray(list) || !list.every(isBinary)) {
+        throw new NhnCloudCliError(
+          "binaries \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 binaries \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      const tc = body.totalCount;
+      const totalCount = typeof tc === "number" ? tc : typeof tc === "string" && /^\d+$/.test(tc) ? Number(tc) : list.length;
+      return { totalCount, binaries: list };
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 바이너리를 multipart/form-data 로 업로드한다.
+   *
+   * 신규 전송 경로 — 기존 메서드는 ky `json:`(JSON body) 만 쓴다 (ADR-015).
+   * - 파일 파트(binaryFile)는 command 에서 statSync 가드 후 읽은 Buffer 를 Blob 으로 감싼다.
+   * - Content-Type 은 수동으로 박지 않는다 — ky 가 FormData 에서 multipart boundary 를 자동 설정한다.
+   *
+   * ⚠️ 실측 pending — 수동 QA 로 확정 필요:
+   *   - endpoint 경로 세그먼트 단/복수(`binary-group` vs `binary-groups`) — 404 시 복수형으로 교체.
+   *   - 응답 binaryKey 타입(number|string) — 코드는 둘 다 수용 후 Number() 정규화.
+   */
+  async uploadBinary(params) {
+    const url = `${this.baseUrl}/api/v2.1/projects/${encodeURIComponent(params.appKey)}/artifacts/${encodeURIComponent(params.artifactId)}/binary-group/${params.binaryGroupKey}`;
+    const form = new FormData();
+    const blob = new Blob([new Uint8Array(params.fileBuffer)]);
+    form.append("binaryFile", blob, params.fileName);
+    form.append("applicationType", params.applicationType);
+    if (params.description !== void 0) {
+      form.append("description", params.description);
+    }
+    try {
+      const res = await import_ky6.default.post(url, {
+        headers: this.authHeaders(),
+        // 인증 헤더만 — multipart boundary 는 ky 가 자동 설정
+        body: form,
+        retry: 0,
+        timeout: SYNC_TIMEOUT_MS
+        // 업로드는 파일 크기에 따라 길 수 있어 긴 timeout
+      }).json();
+      const body = unwrap(res);
+      const normalizedKey = Number(body.binaryKey);
+      if (typeof body.downloadUrl !== "string" || !Number.isFinite(normalizedKey)) {
+        throw new NhnCloudCliError(
+          "upload \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 downloadUrl/binaryKey \uB204\uB77D \uB610\uB294 \uBE44\uC22B\uC790.",
+          EXIT_API_ERROR
+        );
+      }
+      return { downloadUrl: body.downloadUrl, binaryKey: normalizedKey };
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 바이너리를 다운로드해 내용(Buffer)을 반환한다.
+   *
+   * 신규 수신 경로 — 응답이 봉투 JSON 이 아니라 파일 바이너리 스트림이다 (ADR-015).
+   * 다른 메서드처럼 .json()/unwrap 을 쓰면 바이너리를 JSON 으로 파싱하다 깨진다 —
+   * 반드시 .arrayBuffer() 로 받는다. 성공/실패는 HTTP status(ky throwHttpErrors)로만 판정.
+   * 파일 쓰기는 command 가 담당한다 (client 는 내용만 반환 — 테스트 용이).
+   *
+   * ⚠️ 실측 pending — 수동 QA round-trip 으로 확정 필요:
+   *   - endpoint 단/복수(`binary-group` vs `binary-groups`) — 404 시 복수형으로 교체.
+   *   - 응답이 raw 바이너리인지 downloadUrl JSON 인지 — QA step 5 diff 로 확인.
+   */
+  async downloadBinary(appKey, artifactId, binaryGroupKey, binaryKey) {
+    const url = `${this.baseUrl}/api/v2.1/projects/${encodeURIComponent(appKey)}/artifacts/${encodeURIComponent(artifactId)}/binary-group/${binaryGroupKey}/binaries/${binaryKey}`;
+    try {
+      const ab = await import_ky6.default.get(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: SYNC_TIMEOUT_MS
+        // 큰 파일 다운로드 — 긴 timeout
+      }).arrayBuffer();
+      return Buffer.from(ab);
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
 };
 
 // src/commands/deploy/helpers.ts
@@ -1096,7 +1775,7 @@ async function createDeployClient(profileOpt) {
 }
 
 // src/commands/deploy/run.ts
-var runCommand = new import_commander3.Command("run").description("\uBC30\uD3EC\uB97C \uC2E4\uD589\uD55C\uB2E4").argument("<target>", "config.json \uC5D0 \uC815\uC758\uB41C deploy target \uC774\uB984").option("--app-key <k>", "target \uC758 appKey override").option("--artifact-id <id>", "target \uC758 artifactId override").option("--server-group-id <id>", "target \uC758 serverGroupId override").option("--scenario-ids <csv>", "target \uC758 scenarioIds override").option("--target-hosts <csv>", "\uB300\uC0C1 \uD638\uC2A4\uD2B8 (\uC0DD\uB7B5 \uC2DC \uC11C\uBC84\uADF8\uB8F9 \uC804\uCCB4)").option("--concurrent <n>", "\uBCD1\uB82C \uBC30\uD3EC \uC218 (\uAE30\uBCF8 1)", "1").option("--next-when-fail", "\uC2DC\uB098\uB9AC\uC624 \uC2E4\uD328 \uC2DC\uC5D0\uB3C4 \uC9C4\uD589").option("--note <s>", "\uBC30\uD3EC \uBA54\uBAA8").option("--async", "\uC989\uC2DC \uBC18\uD658 (\uAE30\uBCF8\uC740 \uC644\uB8CC \uB300\uAE30)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (targetName, _opts, cmd) => {
+var runCommand = new import_commander5.Command("run").description("\uBC30\uD3EC\uB97C \uC2E4\uD589\uD55C\uB2E4").argument("<target>", "config.json \uC5D0 \uC815\uC758\uB41C deploy target \uC774\uB984").option("--app-key <k>", "target \uC758 appKey override").option("--artifact-id <id>", "target \uC758 artifactId override").option("--server-group-id <id>", "target \uC758 serverGroupId override").option("--scenario-ids <csv>", "target \uC758 scenarioIds override").option("--target-hosts <csv>", "\uB300\uC0C1 \uD638\uC2A4\uD2B8 (\uC0DD\uB7B5 \uC2DC \uC11C\uBC84\uADF8\uB8F9 \uC804\uCCB4)").option("--concurrent <n>", "\uBCD1\uB82C \uBC30\uD3EC \uC218 (\uAE30\uBCF8 1)", "1").option("--next-when-fail", "\uC2DC\uB098\uB9AC\uC624 \uC2E4\uD328 \uC2DC\uC5D0\uB3C4 \uC9C4\uD589").option("--note <s>", "\uBC30\uD3EC \uBA54\uBAA8").option("--async", "\uC989\uC2DC \uBC18\uD658 (\uAE30\uBCF8\uC740 \uC644\uB8CC \uB300\uAE30)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (targetName, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   const target = await getDeployTarget(targetName);
   const appKey = opts.appKey ?? target.appKey;
@@ -1132,8 +1811,8 @@ var runCommand = new import_commander3.Command("run").description("\uBC30\uD3EC\
 });
 
 // src/commands/deploy/artifacts.ts
-var import_commander4 = require("commander");
-var artifactsCommand = new import_commander4.Command("artifacts").description("\uC544\uD2F0\uD329\uD2B8 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").argument("[target]", "config.json \uC5D0 \uC815\uC758\uB41C deploy target \uC774\uB984 (--app-key \uB85C \uB300\uCCB4 \uAC00\uB2A5)").option("--app-key <k>", "appKey \uC9C1\uC811 \uC9C0\uC815 (target \uC5C6\uC774 \uC0AC\uC6A9 \uAC00\uB2A5)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (targetName, _opts, cmd) => {
+var import_commander6 = require("commander");
+var artifactsCommand = new import_commander6.Command("artifacts").description("\uC544\uD2F0\uD329\uD2B8 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").argument("[target]", "config.json \uC5D0 \uC815\uC758\uB41C deploy target \uC774\uB984 (--app-key \uB85C \uB300\uCCB4 \uAC00\uB2A5)").option("--app-key <k>", "appKey \uC9C1\uC811 \uC9C0\uC815 (target \uC5C6\uC774 \uC0AC\uC6A9 \uAC00\uB2A5)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (targetName, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   let appKey;
   if (opts.appKey) {
@@ -1173,8 +1852,8 @@ var artifactsCommand = new import_commander4.Command("artifacts").description("\
 });
 
 // src/commands/deploy/server-groups.ts
-var import_commander5 = require("commander");
-var serverGroupsCommand = new import_commander5.Command("server-groups").description("\uC11C\uBC84\uADF8\uB8F9 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<target>", "config.json \uC5D0 \uC815\uC758\uB41C deploy target \uC774\uB984").option("--app-key <k>", "target \uC758 appKey override").option("--artifact-id <id>", "target \uC758 artifactId override").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (targetName, _opts, cmd) => {
+var import_commander7 = require("commander");
+var serverGroupsCommand = new import_commander7.Command("server-groups").description("\uC11C\uBC84\uADF8\uB8F9 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<target>", "config.json \uC5D0 \uC815\uC758\uB41C deploy target \uC774\uB984").option("--app-key <k>", "target \uC758 appKey override").option("--artifact-id <id>", "target \uC758 artifactId override").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (targetName, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   const target = await getDeployTarget(targetName);
   const appKey = opts.appKey ?? target.appKey;
@@ -1198,8 +1877,8 @@ var serverGroupsCommand = new import_commander5.Command("server-groups").descrip
 });
 
 // src/commands/deploy/histories.ts
-var import_commander6 = require("commander");
-var historiesCommand = new import_commander6.Command("histories").description("\uBC30\uD3EC \uC774\uB825\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<target>", "config.json \uC5D0 \uC815\uC758\uB41C deploy target \uC774\uB984").option("--app-key <k>", "target \uC758 appKey override").option("--artifact-id <id>", "target \uC758 artifactId override").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (targetName, _opts, cmd) => {
+var import_commander8 = require("commander");
+var historiesCommand = new import_commander8.Command("histories").description("\uBC30\uD3EC \uC774\uB825\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<target>", "config.json \uC5D0 \uC815\uC758\uB41C deploy target \uC774\uB984").option("--app-key <k>", "target \uC758 appKey override").option("--artifact-id <id>", "target \uC758 artifactId override").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (targetName, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   const target = await getDeployTarget(targetName);
   const appKey = opts.appKey ?? target.appKey;
@@ -1222,12 +1901,236 @@ var historiesCommand = new import_commander6.Command("histories").description("\
   });
 });
 
+// src/commands/deploy/binary-groups.ts
+var import_commander9 = require("commander");
+var binaryGroupsCommand = new import_commander9.Command("binary-groups").description("\uBC14\uC774\uB108\uB9AC \uADF8\uB8F9 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<target>", "config.json \uC5D0 \uC815\uC758\uB41C deploy target \uC774\uB984").option("--app-key <k>", "target \uC758 appKey override").option("--artifact-id <id>", "target \uC758 artifactId override").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (targetName, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const target = await getDeployTarget(targetName);
+  const appKey = opts.appKey ?? target.appKey;
+  const artifactId = opts.artifactId ?? target.artifactId;
+  const { client } = await createDeployClient(opts.profile);
+  startSpinner("\uBC14\uC774\uB108\uB9AC \uADF8\uB8F9 \uBAA9\uB85D \uC870\uD68C \uC911...");
+  let groups;
+  try {
+    groups = await client.binaryGroups(appKey, artifactId);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["key", "name", "regionCode", "createDate", "description"],
+    // 가드는 key·name 만 검증 — 나머지 필드는 누락 시 "undefined" 가 박히지 않게 ?? "" 방어.
+    rows: groups.map((g) => [
+      String(g.key),
+      g.name ?? "",
+      g.regionCode ?? "",
+      g.createDate ?? "",
+      g.description ?? ""
+    ]),
+    raw: groups,
+    // ids 에 key 를 넣어 --quiet 시 그룹 key 만 출력 → binaries --binary-group 에 파이프 가능
+    ids: groups.map((g) => String(g.key))
+  });
+});
+
+// src/commands/deploy/binaries.ts
+var import_commander10 = require("commander");
+function parsePositiveInt(value, flag) {
+  if (value === void 0) return void 0;
+  if (!/^[1-9]\d*$/.test(value)) {
+    throw new NhnCloudCliError(
+      `${flag} \uB294 1 \uC774\uC0C1\uC758 \uC815\uC218\uC5EC\uC57C \uD569\uB2C8\uB2E4 (\uC785\uB825: ${JSON.stringify(value)}).`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return Number(value);
+}
+var binariesCommand = new import_commander10.Command("binaries").description("\uD2B9\uC815 \uBC14\uC774\uB108\uB9AC \uADF8\uB8F9\uC758 \uBC14\uC774\uB108\uB9AC \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<target>", "config.json \uC5D0 \uC815\uC758\uB41C deploy target \uC774\uB984").requiredOption("--binary-group <key>", "\uC870\uD68C\uD560 \uBC14\uC774\uB108\uB9AC \uADF8\uB8F9 key (binary-groups \uB85C \uD655\uC778)").option("--page-num <n>", "\uD398\uC774\uC9C0 \uBC88\uD638 (1 \uC774\uC0C1)").option("--page-size <n>", "\uD398\uC774\uC9C0 \uD06C\uAE30 (1 \uC774\uC0C1)").option("--sort-key <k>", "\uC815\uB82C \uAE30\uC900 (\uC608: UPLOAD_DATE)").option("--sort-direction <d>", "\uC815\uB82C \uBC29\uD5A5 (\uC608: DESC)").option("--app-key <k>", "target \uC758 appKey override").option("--artifact-id <id>", "target \uC758 artifactId override").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (targetName, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const binaryGroupKey = parsePositiveInt(opts.binaryGroup, "--binary-group");
+  if (binaryGroupKey === void 0) {
+    throw new NhnCloudCliError("--binary-group \uC774 \uD544\uC694\uD569\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  const pageNum = parsePositiveInt(opts.pageNum, "--page-num");
+  const pageSize = parsePositiveInt(opts.pageSize, "--page-size");
+  const target = await getDeployTarget(targetName);
+  const appKey = opts.appKey ?? target.appKey;
+  const artifactId = opts.artifactId ?? target.artifactId;
+  const { client } = await createDeployClient(opts.profile);
+  startSpinner("\uBC14\uC774\uB108\uB9AC \uBAA9\uB85D \uC870\uD68C \uC911...");
+  let result;
+  try {
+    result = await client.binaries(appKey, artifactId, binaryGroupKey, {
+      pageNum,
+      pageSize,
+      sortKey: opts.sortKey,
+      sortDirection: opts.sortDirection
+    });
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["binaryKey", "version", "binaryName", "size(bytes)", "uploadDate", "uploader"],
+    // 가드는 binaryKey·binarySize 만 검증 — 나머지 필드는 응답에서 누락 시 "undefined" 가
+    // 표에 박히지 않게 ?? "" 로 방어한다 (타입 정합성 실측은 후속 이슈).
+    rows: result.binaries.map((b) => [
+      String(b.binaryKey),
+      b.version ?? "",
+      b.binaryName ?? "",
+      String(b.binarySize),
+      b.uploadDate ?? "",
+      b.uploader ?? ""
+    ]),
+    // raw 에 totalCount 포함 → --json 으로 페이지 정보 확인 가능
+    raw: result,
+    ids: result.binaries.map((b) => String(b.binaryKey))
+  });
+});
+
+// src/commands/deploy/upload.ts
+var import_commander11 = require("commander");
+var import_node_fs3 = require("fs");
+var import_node_path3 = require("path");
+var MAX_UPLOAD_BYTES = 512 * 1024 * 1024;
+function parsePositiveInt2(value, flag) {
+  if (value === void 0) return void 0;
+  if (!/^[1-9]\d*$/.test(value)) {
+    throw new NhnCloudCliError(
+      `${flag} \uB294 1 \uC774\uC0C1\uC758 \uC815\uC218\uC5EC\uC57C \uD569\uB2C8\uB2E4 (\uC785\uB825: ${JSON.stringify(value)}).`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return Number(value);
+}
+var uploadCommand = new import_commander11.Command("upload").description("\uB85C\uCEEC \uD30C\uC77C\uC744 \uBC14\uC774\uB108\uB9AC \uADF8\uB8F9\uC5D0 \uC5C5\uB85C\uB4DC\uD55C\uB2E4").argument("<target>", "config.json \uC5D0 \uC815\uC758\uB41C deploy target \uC774\uB984").requiredOption("--file <path>", "\uC5C5\uB85C\uB4DC\uD560 \uD30C\uC77C \uACBD\uB85C").requiredOption("--binary-group <key>", "\uC5C5\uB85C\uB4DC \uB300\uC0C1 \uBC14\uC774\uB108\uB9AC \uADF8\uB8F9 key (binary-groups \uB85C \uD655\uC778)").option("--application-type <type>", "applicationType (\uC608: server)", "server").option("--description <text>", "\uBC14\uC774\uB108\uB9AC \uC124\uBA85").option("--app-key <k>", "target \uC758 appKey override").option("--artifact-id <id>", "target \uC758 artifactId override").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (targetName, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const binaryGroupKey = parsePositiveInt2(opts.binaryGroup, "--binary-group");
+  if (binaryGroupKey === void 0) {
+    throw new NhnCloudCliError("--binary-group \uC774 \uD544\uC694\uD569\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  const filePath = opts.file;
+  let stat;
+  try {
+    stat = (0, import_node_fs3.statSync)(filePath);
+  } catch (e) {
+    const reason = e.code ?? (e instanceof Error ? e.message : String(e));
+    throw new NhnCloudCliError(
+      `--file \uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${filePath} (${reason})`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  if (!stat.isFile()) {
+    throw new NhnCloudCliError(`--file \uC774 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${filePath}`, EXIT_PARAM_ERROR);
+  }
+  if (stat.size > MAX_UPLOAD_BYTES) {
+    throw new NhnCloudCliError(
+      `--file \uC774 \uB108\uBB34 \uD07D\uB2C8\uB2E4 (${stat.size} \uBC14\uC774\uD2B8). \uC5C5\uB85C\uB4DC \uD55C\uB3C4 ${MAX_UPLOAD_BYTES} \uBC14\uC774\uD2B8.`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  const fileBuffer = (0, import_node_fs3.readFileSync)(filePath);
+  const fileName = (0, import_node_path3.basename)(filePath);
+  const target = await getDeployTarget(targetName);
+  const appKey = opts.appKey ?? target.appKey;
+  const artifactId = opts.artifactId ?? target.artifactId;
+  const { client } = await createDeployClient(opts.profile);
+  startSpinner("\uBC14\uC774\uB108\uB9AC \uC5C5\uB85C\uB4DC \uC911...");
+  let result;
+  try {
+    result = await client.uploadBinary({
+      appKey,
+      artifactId,
+      binaryGroupKey,
+      fileBuffer,
+      fileName,
+      applicationType: opts.applicationType,
+      // Commander 옵션 기본값 "server" 가 SSOT — dead fallback 제거
+      description: opts.description
+    });
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["field", "value"],
+    rows: [
+      ["binaryKey", String(result.binaryKey)],
+      ["downloadUrl", result.downloadUrl]
+    ],
+    raw: result,
+    ids: [String(result.binaryKey)]
+  });
+});
+
+// src/commands/deploy/download.ts
+var import_commander12 = require("commander");
+var import_node_fs4 = require("fs");
+var import_chalk2 = __toESM(require("chalk"));
+function parsePositiveInt3(value, flag) {
+  if (value === void 0) return void 0;
+  if (!/^[1-9]\d*$/.test(value)) {
+    throw new NhnCloudCliError(
+      `${flag} \uB294 1 \uC774\uC0C1\uC758 \uC815\uC218\uC5EC\uC57C \uD569\uB2C8\uB2E4 (\uC785\uB825: ${JSON.stringify(value)}).`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return Number(value);
+}
+function assertWritable2(path, force) {
+  if (force) return;
+  try {
+    (0, import_node_fs4.statSync)(path);
+  } catch (e) {
+    if (e.code === "ENOENT") return;
+    const reason = e.code ?? (e instanceof Error ? e.message : String(e));
+    throw new NhnCloudCliError(
+      `-o \uACBD\uB85C\uB97C \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${path} (${reason})`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  throw new NhnCloudCliError(
+    `-o \uB300\uC0C1\uC774 \uC774\uBBF8 \uC874\uC7AC\uD569\uB2C8\uB2E4: ${path}. \uB36E\uC5B4\uC4F0\uB824\uBA74 --force \uB97C \uC4F0\uC138\uC694.`,
+    EXIT_PARAM_ERROR
+  );
+}
+var downloadCommand = new import_commander12.Command("download").description("\uBC14\uC774\uB108\uB9AC\uB97C \uB85C\uCEEC \uD30C\uC77C\uB85C \uB2E4\uC6B4\uB85C\uB4DC\uD55C\uB2E4").argument("<target>", "config.json \uC5D0 \uC815\uC758\uB41C deploy target \uC774\uB984").requiredOption("--binary-group <key>", "\uBC14\uC774\uB108\uB9AC \uADF8\uB8F9 key (binary-groups \uB85C \uD655\uC778)").requiredOption("--binary-key <key>", "\uB2E4\uC6B4\uB85C\uB4DC\uD560 \uBC14\uC774\uB108\uB9AC key (binaries \uB610\uB294 upload \uB85C \uD655\uC778)").requiredOption("-o, --output <file>", "\uC800\uC7A5\uD560 \uD30C\uC77C \uACBD\uB85C").option("--force", "\uB300\uC0C1 \uD30C\uC77C\uC774 \uC788\uC73C\uBA74 \uB36E\uC5B4\uC4F4\uB2E4").option("--app-key <k>", "target \uC758 appKey override").option("--artifact-id <id>", "target \uC758 artifactId override").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (targetName, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const binaryGroupKey = parsePositiveInt3(opts.binaryGroup, "--binary-group");
+  const binaryKey = parsePositiveInt3(opts.binaryKey, "--binary-key");
+  if (binaryGroupKey === void 0 || binaryKey === void 0) {
+    throw new NhnCloudCliError("--binary-group / --binary-key \uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.", EXIT_PARAM_ERROR);
+  }
+  const outPath = opts.output;
+  assertWritable2(outPath, opts.force ?? false);
+  const target = await getDeployTarget(targetName);
+  const appKey = opts.appKey ?? target.appKey;
+  const artifactId = opts.artifactId ?? target.artifactId;
+  const { client } = await createDeployClient(opts.profile);
+  startSpinner("\uBC14\uC774\uB108\uB9AC \uB2E4\uC6B4\uB85C\uB4DC \uC911...");
+  try {
+    const buffer = await client.downloadBinary(appKey, artifactId, binaryGroupKey, binaryKey);
+    (0, import_node_fs4.writeFileSync)(outPath, buffer);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  if (!opts.quiet) {
+    process.stderr.write(import_chalk2.default.green(`  \uC800\uC7A5\uB428: ${outPath}
+`));
+  }
+});
+
 // src/commands/instance/list.ts
-var import_commander7 = require("commander");
+var import_commander13 = require("commander");
 
 // src/services/instance/client.ts
-var import_ky6 = __toESM(require("ky"));
-var DEFAULT_TIMEOUT_MS2 = 3e4;
+var import_ky7 = __toESM(require("ky"));
+var DEFAULT_TIMEOUT_MS3 = 3e4;
 var DEFAULT_POLL_INTERVAL_MS = 5e3;
 function isServer(val) {
   if (typeof val !== "object" || val === null) return false;
@@ -1244,21 +2147,108 @@ function isServersResponse(val) {
   const obj = val;
   return Array.isArray(obj["servers"]);
 }
+function isFlavor(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return typeof obj["id"] === "string" && typeof obj["name"] === "string";
+}
+function isImage(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return typeof obj["id"] === "string" && // Glance v2 스펙상 name 은 nullable — null 인 private 이미지 하나가 페이지 전체를 거부하지 않게 허용.
+  (typeof obj["name"] === "string" || obj["name"] === null) && typeof obj["status"] === "string" && typeof obj["visibility"] === "string";
+}
+function isImagesResponse(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  const nextOk = obj["next"] === void 0 || typeof obj["next"] === "string";
+  return Array.isArray(obj["images"]) && obj["images"].every(isImage) && nextOk;
+}
+function isFlavorsResponse(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return Array.isArray(obj["flavors"]) && obj["flavors"].every(isFlavor);
+}
+function isFlavorDetail(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return typeof obj["id"] === "string" && typeof obj["name"] === "string" && typeof obj["vcpus"] === "number" && typeof obj["ram"] === "number" && typeof obj["disk"] === "number";
+}
+function isFlavorDetailsResponse(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return Array.isArray(obj["flavors"]) && obj["flavors"].every(isFlavorDetail);
+}
 function isCreateResponse(val) {
   if (typeof val !== "object" || val === null) return false;
   const server = val["server"];
   if (typeof server !== "object" || server === null) return false;
   return typeof server["id"] === "string";
 }
+function isKeypair(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return typeof obj["name"] === "string" && typeof obj["public_key"] === "string" && typeof obj["fingerprint"] === "string";
+}
+function isKeypairsResponse(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return Array.isArray(obj["keypairs"]) && obj["keypairs"].every((e) => {
+    if (typeof e !== "object" || e === null) return false;
+    return isKeypair(e["keypair"]);
+  });
+}
+function isCreateKeypairResponse(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return isKeypair(obj["keypair"]);
+}
+function isKeypairDetail(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return typeof obj["name"] === "string" && typeof obj["public_key"] === "string" && typeof obj["fingerprint"] === "string" && typeof obj["user_id"] === "string" && typeof obj["id"] === "string" && typeof obj["created_at"] === "string";
+}
+function isKeypairDetailResponse(val) {
+  if (typeof val !== "object" || val === null) return false;
+  return isKeypairDetail(val["keypair"]);
+}
+function isAvailabilityZone(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  const state = obj["zoneState"];
+  if (typeof state !== "object" || state === null) return false;
+  return typeof obj["zoneName"] === "string" && typeof state["available"] === "boolean";
+}
+function isAvailabilityZonesResponse(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return Array.isArray(obj["availabilityZoneInfo"]) && obj["availabilityZoneInfo"].every(isAvailabilityZone);
+}
+function isServerVolumeAttachment(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const o = val;
+  return typeof o["id"] === "string" && typeof o["volumeId"] === "string" && typeof o["serverId"] === "string" && typeof o["device"] === "string";
+}
+function isVolumeAttachmentsResponse(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const arr = val["volumeAttachments"];
+  return Array.isArray(arr) && arr.every(isServerVolumeAttachment);
+}
+function isVolumeAttachmentResponse(val) {
+  if (typeof val !== "object" || val === null) return false;
+  return isServerVolumeAttachment(val["volumeAttachment"]);
+}
 function hasIpAddress(server) {
   return Object.values(server.addresses).some((list) => list.length > 0);
 }
 var InstanceClient = class {
   tokenId;
   computeEndpoint;
-  constructor(tokenId, computeEndpoint) {
+  imageEndpoint;
+  constructor(tokenId, computeEndpoint, imageEndpoint) {
     this.tokenId = tokenId;
     this.computeEndpoint = computeEndpoint;
+    this.imageEndpoint = imageEndpoint;
   }
   authHeaders() {
     return { "X-Auth-Token": this.tokenId };
@@ -1269,10 +2259,10 @@ var InstanceClient = class {
   async list() {
     const url = `${this.computeEndpoint}/servers/detail`;
     try {
-      const raw = await import_ky6.default.get(url, {
+      const raw = await import_ky7.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS2
+        timeout: DEFAULT_TIMEOUT_MS3
       }).json();
       if (!isServersResponse(raw)) {
         throw new NhnCloudCliError(
@@ -1291,10 +2281,10 @@ var InstanceClient = class {
   async get(id) {
     const url = `${this.computeEndpoint}/servers/${encodeURIComponent(id)}`;
     try {
-      const raw = await import_ky6.default.get(url, {
+      const raw = await import_ky7.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS2
+        timeout: DEFAULT_TIMEOUT_MS3
       }).json();
       if (!isServerResponse(raw)) {
         throw new NhnCloudCliError(
@@ -1350,11 +2340,11 @@ var InstanceClient = class {
     }
     let raw;
     try {
-      raw = await import_ky6.default.post(url, {
+      raw = await import_ky7.default.post(url, {
         headers: this.authHeaders(),
         json: { server: serverBody },
         retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS2
+        timeout: DEFAULT_TIMEOUT_MS3
       }).json();
     } catch (err) {
       throw toNhnCloudCliError(err);
@@ -1373,109 +2363,1023 @@ var InstanceClient = class {
   async delete(id) {
     const url = `${this.computeEndpoint}/servers/${encodeURIComponent(id)}`;
     try {
-      await import_ky6.default.delete(url, {
+      await import_ky7.default.delete(url, {
         headers: this.authHeaders(),
         retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS2
+        timeout: DEFAULT_TIMEOUT_MS3
       });
     } catch (err) {
       throw toNhnCloudCliError(err);
     }
   }
   /**
-   * 인스턴스가 ACTIVE 상태 + IP 1개 이상이 될 때까지 폴링한다.
-   *
-   * - status === "ACTIVE" + addresses 에 IP 1개 이상: 즉시 반환
-   * - timeout 초과: 마지막 status 를 포함한 NhnCloudCliError(EXIT_API_ERROR)
+   * 서버 action 을 실행한다 (POST /servers/{id}/action, 202 무본문).
+   * NHN Cloud(OpenStack Nova)의 모든 전원·라이프사이클 action 의 공용 경로다.
+   * payload 는 호출자가 action 별로 구성한다 (예: { "os-start": null }).
+   * start/stop/reboot 가 이 helper 를 재사용하며, resize/shelve 등 향후 action 도 동일.
    */
-  async waitForActive(id, opts) {
-    const intervalMs = opts.intervalMs ?? DEFAULT_POLL_INTERVAL_MS;
-    const deadline = Date.now() + opts.timeoutMs;
-    let lastServer = null;
-    while (Date.now() < deadline) {
-      const server = await this.get(id);
-      lastServer = server;
-      if (server.status === "ACTIVE" && hasIpAddress(server)) {
-        return server;
-      }
-      const remaining = deadline - Date.now();
-      if (remaining <= 0) break;
-      await new Promise((resolve) => setTimeout(resolve, Math.min(intervalMs, remaining)));
+  async serverAction(id, payload) {
+    const url = `${this.computeEndpoint}/servers/${encodeURIComponent(id)}/action`;
+    try {
+      await import_ky7.default.post(url, {
+        headers: this.authHeaders(),
+        json: payload,
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS3
+      });
+    } catch (err) {
+      throw toNhnCloudCliError(err);
     }
-    const lastStatus = lastServer ? lastServer.status : "unknown";
-    throw new NhnCloudCliError(
-      `\uC778\uC2A4\uD134\uC2A4 ${id} \uAC00 ACTIVE \uAC00 \uB418\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4 (\uB9C8\uC9C0\uB9C9 \uC0C1\uD0DC: ${lastStatus}). --wait \uD0C0\uC784\uC544\uC6C3(${Math.round(opts.timeoutMs / 1e3)}\uCD08) \uCD08\uACFC.`,
-      EXIT_API_ERROR
-    );
   }
-};
-
-// src/commands/instance/helpers.ts
-async function resolveInstanceClient(opts) {
-  const profileName = await resolveProfileName(opts.profile);
-  const iaas = await getIaasCredential(profileName);
-  const effectiveIaas = opts.region ? { ...iaas, region: opts.region } : iaas;
-  const { tokenId, computeEndpoint } = await getIaasToken(profileName, effectiveIaas);
-  return { client: new InstanceClient(tokenId, computeEndpoint), profileName };
-}
-
-// src/commands/instance/list.ts
-function getIps(server) {
-  return Object.values(server.addresses).flat().map((a) => a.addr).join(", ");
-}
-var listCommand = new import_commander7.Command("list").description("\uC778\uC2A4\uD134\uC2A4 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
-  const opts = cmd.optsWithGlobals();
-  const { client } = await resolveInstanceClient(opts);
-  startSpinner("\uC778\uC2A4\uD134\uC2A4 \uBAA9\uB85D \uC870\uD68C \uC911...");
-  let servers;
-  try {
-    servers = await client.list();
-  } catch (err) {
-    stopSpinner(false);
-    throw err;
+  /** 인스턴스를 시작한다 (SHUTOFF → ACTIVE). */
+  async start(id) {
+    return this.serverAction(id, { "os-start": null });
   }
-  stopSpinner(true);
-  output(opts, {
-    headers: ["id", "name", "status", "IPs", "flavor"],
-    rows: servers.map((s) => [s.id, s.name, s.status, getIps(s), s.flavor.id]),
-    raw: servers,
-    ids: servers.map((s) => s.id)
-  });
-});
-
-// src/commands/instance/get.ts
-var import_commander8 = require("commander");
-function getIps2(server) {
-  return Object.values(server.addresses).flat().map((a) => a.addr).join(", ");
-}
-function getImageId(server) {
-  return typeof server.image === "object" ? server.image.id : "";
-}
-var getCommand = new import_commander8.Command("get").description("\uB2E8\uC77C \uC778\uC2A4\uD134\uC2A4 \uC0C1\uD0DC\uB97C \uC870\uD68C\uD55C\uB2E4").argument("<id>", "\uC778\uC2A4\uD134\uC2A4 ID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, _opts, cmd) => {
-  const opts = cmd.optsWithGlobals();
-  const { client } = await resolveInstanceClient(opts);
-  startSpinner("\uC778\uC2A4\uD134\uC2A4 \uC870\uD68C \uC911...");
-  let server;
-  try {
-    server = await client.get(id);
-  } catch (err) {
-    stopSpinner(false);
-    throw err;
+  /** 인스턴스를 정지한다 (ACTIVE/ERROR → SHUTOFF). */
+  async stop(id) {
+    return this.serverAction(id, { "os-stop": null });
   }
-  stopSpinner(true);
-  const rows = [
-    ["id", server.id],
-    ["name", server.name],
-    ["status", server.status],
-    ["IPs", getIps2(server)],
-    ["flavor", server.flavor.id],
-    ["image", getImageId(server)],
-    ["key_name", server.key_name ?? ""],
-    ["created", server.created],
-    ["updated", server.updated]
-  ];
-  output(opts, {
-    headers: ["field", "value"],
+  /** 인스턴스를 재부팅한다. type 기본 SOFT, HARD 는 강제 전원 cycle. */
+  async reboot(id, type = "SOFT") {
+    return this.serverAction(id, { reboot: { type } });
+  }
+  /**
+   * 인스턴스 타입(flavor)을 변경한다 (resize action).
+   * POST /servers/{id}/action body { "resize": { "flavorRef": "<flavor-id>" } }, 202 무본문.
+   * 사전 상태는 ACTIVE 또는 SHUTOFF (ACTIVE 면 NHN 측에서 중지 후 재시작).
+   */
+  async resize(id, flavorRef) {
+    return this.serverAction(id, { resize: { flavorRef } });
+  }
+  /** resize 를 확정한다 (VERIFY_RESIZE → ACTIVE, 새 flavor 로 고정). */
+  async confirmResize(id) {
+    return this.serverAction(id, { confirmResize: null });
+  }
+  /** resize 를 롤백한다 (VERIFY_RESIZE → ACTIVE, 이전 flavor 로 복귀). */
+  async revertResize(id) {
+    return this.serverAction(id, { revertResize: null });
+  }
+  async listFlavors(params = {}) {
+    const path = params.detail ? "/flavors/detail" : "/flavors";
+    const url = `${this.computeEndpoint}${path}`;
+    const searchParams = {};
+    if (params.minDisk !== void 0) searchParams["minDisk"] = params.minDisk;
+    if (params.minRam !== void 0) searchParams["minRam"] = params.minRam;
+    try {
+      const raw = await import_ky7.default.get(url, {
+        headers: this.authHeaders(),
+        searchParams,
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS3
+      }).json();
+      if (params.detail) {
+        if (!isFlavorDetailsResponse(raw)) {
+          throw new NhnCloudCliError(
+            "instance flavors --detail \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 vcpus\xB7ram\xB7disk \uD544\uB4DC\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.",
+            EXIT_API_ERROR
+          );
+        }
+        return raw.flavors;
+      }
+      if (!isFlavorsResponse(raw)) {
+        throw new NhnCloudCliError(
+          "instance flavors \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 flavors \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return raw.flavors;
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 가용성 영역(availability zone) 목록을 조회한다 (GET /os-availability-zone).
+   * zoneName·가용 여부(available)를 반환하며 페이지네이션·필터 없음.
+   */
+  async listAvailabilityZones() {
+    const url = `${this.computeEndpoint}/os-availability-zone`;
+    try {
+      const raw = await import_ky7.default.get(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS3
+      }).json();
+      if (!isAvailabilityZonesResponse(raw)) {
+        throw new NhnCloudCliError(
+          "instance availability-zones \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 availabilityZoneInfo \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return raw.availabilityZoneInfo;
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /** 키페어 목록을 조회한다 (GET /os-keypairs). 응답 원소의 한겹(keypair)을 풀어 반환. */
+  async listKeypairs() {
+    const url = `${this.computeEndpoint}/os-keypairs`;
+    try {
+      const raw = await import_ky7.default.get(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS3 }).json();
+      if (!isKeypairsResponse(raw)) {
+        throw new NhnCloudCliError(
+          "instance keypairs \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 keypairs \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return raw.keypairs.map((e) => e.keypair);
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /** 단일 키페어를 조회한다 (GET /os-keypairs/{name}). */
+  async getKeypair(name) {
+    const url = `${this.computeEndpoint}/os-keypairs/${encodeURIComponent(name)}`;
+    try {
+      const raw = await import_ky7.default.get(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS3 }).json();
+      if (!isKeypairDetailResponse(raw)) {
+        throw new NhnCloudCliError(
+          `instance keypair get(${name}) \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 keypair \uC0C1\uC138 \uD544\uB4DC\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.`,
+          EXIT_API_ERROR
+        );
+      }
+      return raw.keypair;
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 키페어를 생성한다 (POST /os-keypairs).
+   * publicKey 미지정이면 NHN 이 키쌍을 생성하고 응답 keypair 에 private_key 가 1회성으로 포함된다.
+   * publicKey 지정이면 기존 공개키를 등록하고 private_key 는 응답에 없다.
+   */
+  async createKeypair(params) {
+    const url = `${this.computeEndpoint}/os-keypairs`;
+    const keypairBody = { name: params.name };
+    if (params.publicKey !== void 0) {
+      keypairBody["public_key"] = params.publicKey;
+    }
+    let raw;
+    try {
+      raw = await import_ky7.default.post(url, {
+        headers: this.authHeaders(),
+        json: { keypair: keypairBody },
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS3
+      }).json();
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+    if (!isCreateKeypairResponse(raw)) {
+      throw new NhnCloudCliError(
+        "instance keypair create \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 keypair \uAC1D\uCCB4\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.",
+        EXIT_API_ERROR
+      );
+    }
+    const kp = raw.keypair;
+    return {
+      name: kp.name,
+      public_key: kp.public_key,
+      fingerprint: kp.fingerprint,
+      user_id: kp.user_id ?? "",
+      // 빈 문자열은 정의되지 않은 것과 동일 취급 — 빈 키 파일 저장/빈 줄 출력 방지.
+      private_key: kp.private_key !== void 0 && kp.private_key.length > 0 ? kp.private_key : void 0
+    };
+  }
+  /** 키페어를 삭제한다 (DELETE /os-keypairs/{name}, 202/204 무응답). */
+  async deleteKeypair(name) {
+    const url = `${this.computeEndpoint}/os-keypairs/${encodeURIComponent(name)}`;
+    try {
+      await import_ky7.default.delete(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS3 });
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 이미지 목록을 조회한다 (GET /v2/images, Glance v2).
+   * compute 와 다른 host(imageEndpoint)지만 같은 Keystone 토큰을 쓴다.
+   * 한 페이지(기본 limit 25)만 반환한다 — next 가 있으면 호출부가 marker 로 이어 받는다.
+   */
+  async listImages(params = {}) {
+    const url = `${this.imageEndpoint}/images`;
+    const searchParams = {};
+    if (params.limit !== void 0) searchParams["limit"] = params.limit;
+    if (params.marker !== void 0) searchParams["marker"] = params.marker;
+    if (params.name !== void 0) searchParams["name"] = params.name;
+    if (params.visibility !== void 0) searchParams["visibility"] = params.visibility;
+    if (params.owner !== void 0) searchParams["owner"] = params.owner;
+    if (params.status !== void 0) searchParams["status"] = params.status;
+    try {
+      const raw = await import_ky7.default.get(url, {
+        headers: this.authHeaders(),
+        searchParams,
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS3
+      }).json();
+      if (!isImagesResponse(raw)) {
+        throw new NhnCloudCliError(
+          "instance images \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 images \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return { images: raw.images, next: raw.next };
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 인스턴스에 연결된 볼륨 목록을 조회한다 (GET .../os-volume_attachments).
+   * Nova 표준 확장 — NHN Instance(Nova v2 호환, ADR-010). 실측 200 확인 (2026-06-11).
+   */
+  async listVolumeAttachments(serverId) {
+    const url = `${this.computeEndpoint}/servers/${encodeURIComponent(serverId)}/os-volume_attachments`;
+    try {
+      const raw = await import_ky7.default.get(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS3 }).json();
+      if (!isVolumeAttachmentsResponse(raw)) {
+        throw new NhnCloudCliError(
+          "instance volumes \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 volumeAttachments \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return raw.volumeAttachments;
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 볼륨을 인스턴스에 연결한다 (POST .../os-volume_attachments).
+   * 요청 body: { volumeAttachment: { volumeId } }. 실제 연결은 수동 QA 확정 (1-26).
+   */
+  async attachVolume(serverId, volumeId) {
+    const url = `${this.computeEndpoint}/servers/${encodeURIComponent(serverId)}/os-volume_attachments`;
+    try {
+      const res = await import_ky7.default.post(url, {
+        headers: this.authHeaders(),
+        json: { volumeAttachment: { volumeId } },
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS3
+      });
+      if (res.status === 202 || res.headers.get("content-length") === "0") {
+        return { id: volumeId, volumeId, serverId, device: "" };
+      }
+      const raw = await res.json();
+      if (!isVolumeAttachmentResponse(raw)) {
+        throw new NhnCloudCliError(
+          "instance volume attach \uC751\uB2F5\uC5D0 volumeAttachment \uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return raw.volumeAttachment;
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 볼륨 연결을 해제한다 (DELETE .../os-volume_attachments/{volumeId}, 202 무응답).
+   * 실제 해제는 수동 QA 확정 (1-26).
+   */
+  async detachVolume(serverId, volumeId) {
+    const url = `${this.computeEndpoint}/servers/${encodeURIComponent(serverId)}/os-volume_attachments/${encodeURIComponent(volumeId)}`;
+    try {
+      await import_ky7.default.delete(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS3 });
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 인스턴스가 ACTIVE 상태 + IP 1개 이상이 될 때까지 폴링한다.
+   *
+   * - status === "ACTIVE" + addresses 에 IP 1개 이상: 즉시 반환
+   * - timeout 초과: 마지막 status 를 포함한 NhnCloudCliError(EXIT_API_ERROR)
+   */
+  async waitForActive(id, opts) {
+    const intervalMs = opts.intervalMs ?? DEFAULT_POLL_INTERVAL_MS;
+    const deadline = Date.now() + opts.timeoutMs;
+    let lastServer = null;
+    while (Date.now() < deadline) {
+      const server = await this.get(id);
+      lastServer = server;
+      if (server.status === "ACTIVE" && hasIpAddress(server)) {
+        return server;
+      }
+      const remaining = deadline - Date.now();
+      if (remaining <= 0) break;
+      await new Promise((resolve) => setTimeout(resolve, Math.min(intervalMs, remaining)));
+    }
+    const lastStatus = lastServer ? lastServer.status : "unknown";
+    throw new NhnCloudCliError(
+      `\uC778\uC2A4\uD134\uC2A4 ${id} \uAC00 ACTIVE \uAC00 \uB418\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4 (\uB9C8\uC9C0\uB9C9 \uC0C1\uD0DC: ${lastStatus}). --wait \uD0C0\uC784\uC544\uC6C3(${Math.round(opts.timeoutMs / 1e3)}\uCD08) \uCD08\uACFC.`,
+      EXIT_API_ERROR
+    );
+  }
+};
+
+// src/commands/instance/helpers.ts
+async function resolveInstanceClient(opts) {
+  const profileName = await resolveProfileName(opts.profile);
+  const iaas = await getIaasCredential(profileName);
+  const effectiveIaas = opts.region ? { ...iaas, region: opts.region } : iaas;
+  const { tokenId, computeEndpoint, imageEndpoint } = await getIaasToken(profileName, effectiveIaas);
+  return { client: new InstanceClient(tokenId, computeEndpoint, imageEndpoint), profileName };
+}
+
+// src/commands/instance/list.ts
+function getIps(server) {
+  return Object.values(server.addresses).flat().map((a) => a.addr).join(", ");
+}
+var listCommand = new import_commander13.Command("list").description("\uC778\uC2A4\uD134\uC2A4 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client } = await resolveInstanceClient(opts);
+  startSpinner("\uC778\uC2A4\uD134\uC2A4 \uBAA9\uB85D \uC870\uD68C \uC911...");
+  let servers;
+  try {
+    servers = await client.list();
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["id", "name", "status", "IPs", "flavor"],
+    rows: servers.map((s) => [s.id, s.name, s.status, getIps(s), s.flavor.id]),
+    raw: servers,
+    ids: servers.map((s) => s.id)
+  });
+});
+
+// src/commands/volume/list.ts
+var import_commander14 = require("commander");
+
+// src/services/blockstorage/client.ts
+var import_ky8 = __toESM(require("ky"));
+var DEFAULT_TIMEOUT_MS4 = 3e4;
+function isVolume(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return typeof obj["id"] === "string" && // Cinder 는 --name 미지정 시 null — null 인 볼륨 하나가 list 전체를 거부하지 않게 허용 (isImage 선례).
+  (typeof obj["name"] === "string" || obj["name"] === null) && typeof obj["size"] === "number" && typeof obj["status"] === "string" && Array.isArray(obj["attachments"]);
+}
+function isVolumesResponse(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return Array.isArray(obj["volumes"]) && obj["volumes"].every(isVolume);
+}
+function isVolumeResponse(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return isVolume(obj["volume"]);
+}
+var BlockStorageClient = class {
+  tokenId;
+  endpoint;
+  // blockStorageEndpoint (/v2/{tenantId} 까지 포함)
+  constructor(tokenId, blockStorageEndpoint) {
+    this.tokenId = tokenId;
+    this.endpoint = blockStorageEndpoint;
+  }
+  authHeaders() {
+    return { "X-Auth-Token": this.tokenId };
+  }
+  async list(params) {
+    const url = `${this.endpoint}/volumes`;
+    const searchParams = {};
+    if (params?.sort !== void 0) searchParams["sort"] = params.sort;
+    if (params?.limit !== void 0) searchParams["limit"] = params.limit;
+    if (params?.offset !== void 0) searchParams["offset"] = params.offset;
+    if (params?.marker !== void 0) searchParams["marker"] = params.marker;
+    try {
+      const raw = await import_ky8.default.get(url, { headers: this.authHeaders(), searchParams, retry: 0, timeout: DEFAULT_TIMEOUT_MS4 }).json();
+      if (!isVolumesResponse(raw)) {
+        throw new NhnCloudCliError(
+          "volume list \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 volumes \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return raw.volumes;
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+  async get(id) {
+    const url = `${this.endpoint}/volumes/${encodeURIComponent(id)}`;
+    try {
+      const raw = await import_ky8.default.get(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS4 }).json();
+      if (!isVolumeResponse(raw)) {
+        throw new NhnCloudCliError(
+          "volume get \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 volume \uAC1D\uCCB4\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return raw.volume;
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+  async create(params) {
+    const url = `${this.endpoint}/volumes`;
+    const volumeBody = { size: params.size };
+    if (params.name !== void 0) volumeBody["name"] = params.name;
+    if (params.description !== void 0) volumeBody["description"] = params.description;
+    if (params.volume_type !== void 0) volumeBody["volume_type"] = params.volume_type;
+    if (params.snapshot_id !== void 0) volumeBody["snapshot_id"] = params.snapshot_id;
+    try {
+      const raw = await import_ky8.default.post(url, {
+        headers: this.authHeaders(),
+        json: { volume: volumeBody },
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS4
+      }).json();
+      if (!isVolumeResponse(raw)) {
+        throw new NhnCloudCliError(
+          "volume create \uC751\uB2F5\uC5D0 volume \uAC1D\uCCB4\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return raw.volume;
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+};
+
+// src/commands/volume/helpers.ts
+async function resolveVolumeClient(opts) {
+  const profileName = await resolveProfileName(opts.profile);
+  const iaas = await getIaasCredential(profileName);
+  const effectiveIaas = opts.region ? { ...iaas, region: opts.region } : iaas;
+  const { tokenId, blockStorageEndpoint } = await getIaasToken(profileName, effectiveIaas);
+  return { client: new BlockStorageClient(tokenId, blockStorageEndpoint), profileName };
+}
+
+// src/commands/volume/list.ts
+function parsePositiveInt4(value, flag) {
+  if (!/^[1-9]\d*$/.test(value)) {
+    throw new NhnCloudCliError(
+      `${flag} \uB294 \uC591\uC758 \uC815\uC218\uC5EC\uC57C \uD569\uB2C8\uB2E4: ${JSON.stringify(value)}`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return Number(value);
+}
+var listCommand2 = new import_commander14.Command("list").description("\uBCFC\uB968 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").option("--sort <key:dir>", "\uC815\uB82C \uAE30\uC900 (\uC608: created_at:desc)").option("--limit <n>", "\uCD5C\uB300 \uBC18\uD658 \uAC1C\uC218").option("--offset <n>", "\uD398\uC774\uC9C0 \uC2DC\uC791 \uC624\uD504\uC14B").option("--marker <id>", "\uD398\uC774\uC9C0\uB124\uC774\uC158 \uB9C8\uCEE4 \uBCFC\uB968 ID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const limitNum = opts.limit !== void 0 ? parsePositiveInt4(opts.limit, "--limit") : void 0;
+  const offsetNum = opts.offset !== void 0 ? parsePositiveInt4(opts.offset, "--offset") : void 0;
+  const { client } = await resolveVolumeClient(opts);
+  startSpinner("\uBCFC\uB968 \uBAA9\uB85D \uC870\uD68C \uC911...");
+  let volumes;
+  try {
+    volumes = await client.list({
+      sort: opts.sort,
+      limit: limitNum,
+      offset: offsetNum,
+      marker: opts.marker
+    });
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["id", "name", "size", "status", "type"],
+    rows: volumes.map((v) => [
+      v.id,
+      v.name ?? "",
+      String(v.size),
+      v.status,
+      v.volume_type ?? ""
+    ]),
+    raw: volumes,
+    ids: volumes.map((v) => v.id)
+  });
+});
+
+// src/commands/volume/get.ts
+var import_commander15 = require("commander");
+var getCommand = new import_commander15.Command("get").description("\uB2E8\uC77C \uBCFC\uB968 \uC0C1\uD0DC\uB97C \uC870\uD68C\uD55C\uB2E4").argument("<id>", "\uBCFC\uB968 ID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client } = await resolveVolumeClient(opts);
+  startSpinner("\uBCFC\uB968 \uC870\uD68C \uC911...");
+  let volume;
+  try {
+    volume = await client.get(id);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  const attachmentSummary = Array.isArray(volume.attachments) ? volume.attachments.filter((a) => typeof a === "object" && a !== null).map((a) => String(a.server_id)).join(", ") : "";
+  const rows = [
+    ["id", volume.id],
+    ["name", volume.name ?? ""],
+    ["size", String(volume.size)],
+    ["status", volume.status],
+    ["volume_type", volume.volume_type ?? ""],
+    ["created_at", volume.created_at],
+    ["attachments", attachmentSummary]
+  ];
+  output(opts, {
+    headers: ["field", "value"],
+    rows,
+    raw: volume,
+    ids: [volume.id]
+  });
+});
+
+// src/commands/volume/create.ts
+var import_commander16 = require("commander");
+var import_chalk3 = __toESM(require("chalk"));
+var createCommand = new import_commander16.Command("create").description("\uBCFC\uB968\uC744 \uBC1C\uAE09\uD55C\uB2E4").requiredOption("--size <gb>", "\uBCFC\uB968 \uD06C\uAE30(GB) \u2014 \uD544\uC218").option("--name <name>", "\uBCFC\uB968 \uC774\uB984").option("--description <text>", "\uBCFC\uB968 \uC124\uBA85").option("--volume-type <type>", "\uBCFC\uB968 \uD0C0\uC785").option("--snapshot-id <id>", "\uC2A4\uB0C5\uC0F7 ID (\uC2A4\uB0C5\uC0F7\uC5D0\uC11C \uBCFC\uB968 \uC0DD\uC131)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  if (!/^[1-9]\d*$/.test(opts.size)) {
+    throw new NhnCloudCliError(
+      `--size \uB294 \uC591\uC758 \uC815\uC218(GB)\uC5EC\uC57C \uD569\uB2C8\uB2E4: ${JSON.stringify(opts.size)}`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  const sizeNum = Number(opts.size);
+  const { client } = await resolveVolumeClient(opts);
+  startSpinner("\uBCFC\uB968 \uBC1C\uAE09 \uC911...");
+  let volume;
+  try {
+    volume = await client.create({
+      size: sizeNum,
+      name: opts.name,
+      description: opts.description,
+      volume_type: opts.volumeType,
+      snapshot_id: opts.snapshotId
+    });
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  process.stderr.write(import_chalk3.default.green(`\uBCFC\uB968 \uBC1C\uAE09 \uC694\uCCAD \uC644\uB8CC (id: ${volume.id}, status: ${volume.status})
+`));
+  const rows = [
+    ["id", volume.id],
+    ["name", volume.name ?? ""],
+    ["size", String(volume.size)],
+    ["status", volume.status],
+    ["volume_type", volume.volume_type ?? ""],
+    ["created_at", volume.created_at]
+  ];
+  output(opts, {
+    headers: ["field", "value"],
+    rows,
+    raw: volume,
+    ids: [volume.id]
+  });
+});
+
+// src/commands/network/list.ts
+var import_commander17 = require("commander");
+
+// src/services/network/client.ts
+var import_ky9 = __toESM(require("ky"));
+var DEFAULT_TIMEOUT_MS5 = 3e4;
+function isVpc(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return typeof obj["id"] === "string" && typeof obj["name"] === "string" && typeof obj["cidrv4"] === "string" && typeof obj["state"] === "string" && typeof obj["router:external"] === "boolean";
+}
+function isVpcsResponse(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return Array.isArray(obj["vpcs"]) && obj["vpcs"].every(isVpc);
+}
+function isSubnet(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return typeof obj["id"] === "string" && typeof obj["cidr"] === "string" && typeof obj["vpc_id"] === "string" && typeof obj["gateway"] === "string" && typeof obj["available_ip_count"] === "number";
+}
+function isSubnetsResponse(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return Array.isArray(obj["vpcsubnets"]) && obj["vpcsubnets"].every(isSubnet);
+}
+function isFloatingIp(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return typeof obj["id"] === "string" && typeof obj["floating_ip_address"] === "string" && typeof obj["status"] === "string" && typeof obj["floating_network_id"] === "string" && (obj["port_id"] === null || typeof obj["port_id"] === "string") && (obj["fixed_ip_address"] === null || typeof obj["fixed_ip_address"] === "string");
+}
+function isFloatingIpsResponse(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return Array.isArray(obj["floatingips"]) && obj["floatingips"].every(isFloatingIp);
+}
+function isFloatingIpResponse(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return isFloatingIp(obj["floatingip"]);
+}
+var NetworkClient = class {
+  tokenId;
+  networkEndpoint;
+  constructor(tokenId, networkEndpoint) {
+    this.tokenId = tokenId;
+    this.networkEndpoint = networkEndpoint;
+  }
+  authHeaders() {
+    return { "X-Auth-Token": this.tokenId };
+  }
+  /**
+   * VPC 목록을 조회한다 (GET /v2.0/vpcs, NHN VPC).
+   * instance 와 다른 host(networkEndpoint)지만 같은 Keystone 토큰을 쓴다.
+   */
+  async listVpcs() {
+    const url = `${this.networkEndpoint}/vpcs`;
+    try {
+      const raw = await import_ky9.default.get(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS5
+      }).json();
+      if (!isVpcsResponse(raw)) {
+        throw new NhnCloudCliError(
+          "network list \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 vpcs \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return raw.vpcs;
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 서브넷 목록을 조회한다 (GET /v2.0/vpcsubnets, NHN VPC).
+   */
+  async listSubnets() {
+    const url = `${this.networkEndpoint}/vpcsubnets`;
+    try {
+      const raw = await import_ky9.default.get(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS5
+      }).json();
+      if (!isSubnetsResponse(raw)) {
+        throw new NhnCloudCliError(
+          "network subnet list \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 vpcsubnets \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return raw.vpcsubnets;
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /** Floating IP 목록을 조회한다 (GET /v2.0/floatingips). */
+  async listFloatingIps() {
+    const url = `${this.networkEndpoint}/floatingips`;
+    try {
+      const raw = await import_ky9.default.get(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS5 }).json();
+      if (!isFloatingIpsResponse(raw)) {
+        throw new NhnCloudCliError(
+          "floatingip list \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 floatingips \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return raw.floatingips;
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /** Floating IP 를 발급한다 (POST /v2.0/floatingips). */
+  async createFloatingIp(params) {
+    const url = `${this.networkEndpoint}/floatingips`;
+    try {
+      const raw = await import_ky9.default.post(url, {
+        headers: this.authHeaders(),
+        json: { floatingip: { floating_network_id: params.floating_network_id } },
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS5
+      }).json();
+      if (!isFloatingIpResponse(raw)) {
+        throw new NhnCloudCliError(
+          "floatingip create \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 floatingip \uAC1D\uCCB4\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return raw.floatingip;
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /** Floating IP 를 삭제한다 (DELETE /v2.0/floatingips/{id}, 무본문). */
+  async deleteFloatingIp(id) {
+    const url = `${this.networkEndpoint}/floatingips/${encodeURIComponent(id)}`;
+    try {
+      await import_ky9.default.delete(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS5 });
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 외부(external) VPC id 를 찾는다 — create 의 floating_network_id 기본 소스.
+   * `router:external` 은 콜론 포함 리터럴 키 — bracket 접근 필수.
+   * external VPC 가 둘 이상이면 첫 매칭을 반환한다.
+   * 사용자는 `--network <id>` 로 명시 지정 가능하므로 create 의 stderr 에 그 사실을 안내한다.
+   */
+  async findExternalNetworkId() {
+    const url = `${this.networkEndpoint}/vpcs`;
+    try {
+      const raw = await import_ky9.default.get(url, {
+        headers: this.authHeaders(),
+        searchParams: { "router:external": "true" },
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS5
+      }).json();
+      if (typeof raw !== "object" || raw === null) return null;
+      const vpcs = raw["vpcs"];
+      if (!Array.isArray(vpcs)) return null;
+      for (const v of vpcs) {
+        if (typeof v !== "object" || v === null) continue;
+        const obj = v;
+        if (obj["router:external"] === true && typeof obj["id"] === "string") {
+          return obj["id"];
+        }
+      }
+      return null;
+    } catch (err) {
+      throw toNhnCloudCliError(err);
+    }
+  }
+};
+
+// src/commands/network/helpers.ts
+async function resolveNetworkClient(opts) {
+  const profileName = await resolveProfileName(opts.profile);
+  const iaas = await getIaasCredential(profileName);
+  const effectiveIaas = opts.region ? { ...iaas, region: opts.region } : iaas;
+  const { tokenId, networkEndpoint } = await getIaasToken(profileName, effectiveIaas);
+  return { client: new NetworkClient(tokenId, networkEndpoint), profileName };
+}
+
+// src/commands/network/list.ts
+var listCommand3 = new import_commander17.Command("list").description("VPC \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4 (\uC804\uCCB4 \uD544\uB4DC\uB294 --json)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client } = await resolveNetworkClient(opts);
+  startSpinner("VPC \uBAA9\uB85D \uC870\uD68C \uC911...");
+  let vpcs;
+  try {
+    vpcs = await client.listVpcs();
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["id", "name", "cidrv4", "state", "external"],
+    rows: vpcs.map((v) => [v.id, v.name, v.cidrv4, v.state, String(v["router:external"])]),
+    raw: vpcs,
+    ids: vpcs.map((v) => v.id)
+  });
+});
+
+// src/commands/network/subnet.ts
+var import_commander18 = require("commander");
+var subnetListCommand = new import_commander18.Command("list").description("\uC11C\uBE0C\uB137 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4 (\uC804\uCCB4 \uD544\uB4DC\uB294 --json)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client } = await resolveNetworkClient(opts);
+  startSpinner("\uC11C\uBE0C\uB137 \uBAA9\uB85D \uC870\uD68C \uC911...");
+  let subnets;
+  try {
+    subnets = await client.listSubnets();
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["id", "cidr", "vpc_id", "gateway", "available_ip"],
+    rows: subnets.map((s) => [
+      s.id,
+      s.cidr,
+      s.vpc_id,
+      s.gateway,
+      String(s.available_ip_count)
+    ]),
+    raw: subnets,
+    ids: subnets.map((s) => s.id)
+  });
+});
+var subnetCommand = new import_commander18.Command("subnet").description("\uC11C\uBE0C\uB137 \uAD00\uB828 \uBA85\uB839").addCommand(subnetListCommand);
+
+// src/commands/floatingip/list.ts
+var import_commander19 = require("commander");
+var listCommand4 = new import_commander19.Command("list").description("Floating IP \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client } = await resolveNetworkClient(opts);
+  startSpinner("Floating IP \uBAA9\uB85D \uC870\uD68C \uC911...");
+  let fips;
+  try {
+    fips = await client.listFloatingIps();
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["id", "floating_ip_address", "status", "port_id", "fixed_ip_address"],
+    rows: fips.map((f) => [
+      f.id,
+      f.floating_ip_address,
+      f.status,
+      f.port_id ?? "-",
+      f.fixed_ip_address ?? "-"
+    ]),
+    raw: fips,
+    ids: fips.map((f) => f.id)
+  });
+});
+
+// src/commands/floatingip/create.ts
+var import_commander20 = require("commander");
+var import_chalk4 = __toESM(require("chalk"));
+var createCommand2 = new import_commander20.Command("create").description("Floating IP \uB97C \uBC1C\uAE09\uD55C\uB2E4 (--network \uBBF8\uC9C0\uC815 \uC2DC \uC678\uBD80 VPC \uC790\uB3D9 \uC870\uD68C)").option("--network <id>", "\uC678\uBD80 \uB124\uD2B8\uC6CC\uD06C(VPC) id (\uBBF8\uC9C0\uC815 \uC2DC router:external=true \uC790\uB3D9 \uC870\uD68C)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client } = await resolveNetworkClient(opts);
+  let networkId = opts.network;
+  if (networkId === void 0) {
+    startSpinner("\uC678\uBD80 \uB124\uD2B8\uC6CC\uD06C \uC870\uD68C \uC911...");
+    try {
+      const found = await client.findExternalNetworkId();
+      if (found === null) {
+        throw new NhnCloudCliError(
+          "\uC678\uBD80 \uB124\uD2B8\uC6CC\uD06C(router:external=true)\uB97C \uCC3E\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4. --network <id> \uB85C \uC9C1\uC811 \uC9C0\uC815\uD558\uC138\uC694.",
+          EXIT_PARAM_ERROR
+        );
+      }
+      networkId = found;
+    } catch (err) {
+      stopSpinner(false);
+      throw err;
+    }
+    stopSpinner(true);
+  }
+  startSpinner(`Floating IP \uBC1C\uAE09 \uC911... (network: ${networkId})`);
+  let fip;
+  try {
+    fip = await client.createFloatingIp({ floating_network_id: networkId });
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  process.stderr.write(
+    import_chalk4.default.green(`\u2713 Floating IP "${fip.floating_ip_address}" \uB97C \uBC1C\uAE09\uD588\uC2B5\uB2C8\uB2E4 (id: ${fip.id}).
+`)
+  );
+  output(opts, {
+    headers: ["id", "floating_ip_address", "status", "floating_network_id"],
+    rows: [[fip.id, fip.floating_ip_address, fip.status, fip.floating_network_id]],
+    raw: fip,
+    ids: [fip.id]
+  });
+});
+
+// src/commands/floatingip/delete.ts
+var import_commander21 = require("commander");
+var import_chalk5 = __toESM(require("chalk"));
+var deleteCommand = new import_commander21.Command("delete").description("Floating IP \uB97C \uC0AD\uC81C\uD55C\uB2E4").argument("<id>", "Floating IP ID").option("--yes", "\uD655\uC778 \uD504\uB86C\uD504\uD2B8 \uC0DD\uB7B5 (CI/\uBE44\uB300\uD654\uD615 \uD544\uC218)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const isTTY = process.stdin.isTTY;
+  if (!isTTY && !opts.yes) {
+    throw new NhnCloudCliError(
+      "\uBE44\uB300\uD654\uD615 \uD658\uACBD\uC5D0\uC11C Floating IP \uC0AD\uC81C\uB294 --yes \uD50C\uB798\uADF8\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.",
+      EXIT_PARAM_ERROR
+    );
+  }
+  if (isTTY && !opts.yes) {
+    const { confirm } = await import("@inquirer/prompts");
+    const ok = await confirm({
+      message: `Floating IP "${id}" \uB97C \uC0AD\uC81C\uD558\uC2DC\uACA0\uC2B5\uB2C8\uAE4C?`,
+      default: false
+    });
+    if (!ok) {
+      process.stderr.write(import_chalk5.default.yellow("\uC0AD\uC81C\uAC00 \uCDE8\uC18C\uB418\uC5C8\uC2B5\uB2C8\uB2E4.\n"));
+      return;
+    }
+  }
+  const { client } = await resolveNetworkClient(opts);
+  startSpinner(`Floating IP \uC0AD\uC81C \uC911... (id: ${id})`);
+  try {
+    await client.deleteFloatingIp(id);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  process.stderr.write(import_chalk5.default.green(`\u2713 Floating IP "${id}" \uAC00 \uC0AD\uC81C\uB418\uC5C8\uC2B5\uB2C8\uB2E4.
+`));
+});
+
+// src/commands/instance/flavors.ts
+var import_commander22 = require("commander");
+function parseNonNegInt(value, flag) {
+  if (value === void 0) return void 0;
+  const n = Number(value);
+  if (!Number.isInteger(n) || n < 0) {
+    throw new NhnCloudCliError(`${flag} \uB294 0 \uC774\uC0C1\uC758 \uC815\uC218\uC5EC\uC57C \uD569\uB2C8\uB2E4 (\uC785\uB825: ${value}).`, EXIT_PARAM_ERROR);
+  }
+  return n;
+}
+var flavorsCommand = new import_commander22.Command("flavors").description("\uC778\uC2A4\uD134\uC2A4 \uD0C0\uC785(flavor)\uC744 \uC870\uD68C\uD55C\uB2E4 (\uAE30\uBCF8 id\xB7name, --detail \uB85C \uC2A4\uD399, \uC804\uCCB4 \uD544\uB4DC\uB294 --json)").option("--detail", "vcpus\xB7ram\xB7disk \uB4F1 \uC2A4\uD399 \uD3EC\uD568 (GET /flavors/detail)").option("--min-disk <gb>", "\uCD5C\uC18C \uBE14\uB85D \uC2A4\uD1A0\uB9AC\uC9C0 \uD06C\uAE30(GB) \uC774\uC0C1\uB9CC \uD544\uD130").option("--min-ram <mb>", "\uCD5C\uC18C RAM \uD06C\uAE30(MB) \uC774\uC0C1\uB9CC \uD544\uD130").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const minDisk = parseNonNegInt(opts.minDisk, "--min-disk");
+  const minRam = parseNonNegInt(opts.minRam, "--min-ram");
+  const { client } = await resolveInstanceClient(opts);
+  startSpinner("\uC778\uC2A4\uD134\uC2A4 \uD0C0\uC785 \uC870\uD68C \uC911...");
+  try {
+    if (opts.detail) {
+      const flavors = await client.listFlavors({ detail: true, minDisk, minRam });
+      stopSpinner(true);
+      printFlavors(opts, flavors);
+    } else {
+      const flavors = await client.listFlavors({ minDisk, minRam });
+      stopSpinner(true);
+      printFlavors(opts, flavors);
+    }
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+});
+function printFlavors(opts, flavors) {
+  if (isDetailList(flavors)) {
+    output(opts, {
+      headers: ["id", "name", "vcpus", "ram(MB)", "disk(GB)"],
+      rows: flavors.map((f) => [f.id, f.name, String(f.vcpus), String(f.ram), String(f.disk)]),
+      raw: flavors,
+      ids: flavors.map((f) => f.id)
+    });
+  } else {
+    output(opts, {
+      headers: ["id", "name"],
+      rows: flavors.map((f) => [f.id, f.name]),
+      raw: flavors,
+      ids: flavors.map((f) => f.id)
+    });
+  }
+}
+function isDetailList(flavors) {
+  return flavors.length > 0 && "vcpus" in flavors[0];
+}
+
+// src/commands/instance/availability-zones.ts
+var import_commander23 = require("commander");
+var availabilityZonesCommand = new import_commander23.Command("availability-zones").description("\uAC00\uC6A9\uC131 \uC601\uC5ED(availability zone) \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4 (zoneName\xB7available)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client } = await resolveInstanceClient(opts);
+  startSpinner("\uAC00\uC6A9\uC131 \uC601\uC5ED \uC870\uD68C \uC911...");
+  let zones;
+  try {
+    zones = await client.listAvailabilityZones();
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["zoneName", "available"],
+    rows: zones.map((z) => [z.zoneName, String(z.zoneState.available)]),
+    raw: zones,
+    ids: zones.map((z) => z.zoneName)
+  });
+});
+
+// src/commands/instance/get.ts
+var import_commander24 = require("commander");
+function getIps2(server) {
+  return Object.values(server.addresses).flat().map((a) => a.addr).join(", ");
+}
+function getImageId(server) {
+  return typeof server.image === "object" ? server.image.id : "";
+}
+var getCommand2 = new import_commander24.Command("get").description("\uB2E8\uC77C \uC778\uC2A4\uD134\uC2A4 \uC0C1\uD0DC\uB97C \uC870\uD68C\uD55C\uB2E4").argument("<id>", "\uC778\uC2A4\uD134\uC2A4 ID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client } = await resolveInstanceClient(opts);
+  startSpinner("\uC778\uC2A4\uD134\uC2A4 \uC870\uD68C \uC911...");
+  let server;
+  try {
+    server = await client.get(id);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  const rows = [
+    ["id", server.id],
+    ["name", server.name],
+    ["status", server.status],
+    ["IPs", getIps2(server)],
+    ["flavor", server.flavor.id],
+    ["image", getImageId(server)],
+    ["key_name", server.key_name ?? ""],
+    ["created", server.created],
+    ["updated", server.updated]
+  ];
+  output(opts, {
+    headers: ["field", "value"],
     rows,
     raw: server,
     ids: [server.id]
@@ -1483,9 +3387,9 @@ var getCommand = new import_commander8.Command("get").description("\uB2E8\uC77C
 });
 
 // src/commands/instance/create.ts
-var import_commander9 = require("commander");
-var import_node_fs = require("fs");
-var import_chalk2 = __toESM(require("chalk"));
+var import_commander25 = require("commander");
+var import_node_fs5 = require("fs");
+var import_chalk6 = __toESM(require("chalk"));
 function getFirstIp(server) {
   for (const list of Object.values(server.addresses)) {
     for (const addr of list) {
@@ -1500,7 +3404,7 @@ function getIps3(server) {
 function getImageId2(server) {
   return typeof server.image === "object" ? server.image.id : "";
 }
-var createCommand = new import_commander9.Command("create").description("\uC778\uC2A4\uD134\uC2A4\uB97C \uC0DD\uC131\uD55C\uB2E4").requiredOption("--name <name>", "\uC778\uC2A4\uD134\uC2A4 \uC774\uB984").requiredOption("--flavor <id>", "flavor ID").requiredOption("--image <id>", "\uC774\uBBF8\uC9C0 ID").requiredOption("--network <uuid>", "\uB124\uD2B8\uC6CC\uD06C UUID (\uC5EC\uB7EC \uAC1C: \uBC18\uBCF5 \uC9C0\uC815)", (v, prev) => [...prev, v], []).option("--boot-volume-size <gb>", "boot-from-volume root \uBCFC\uB968 \uD06C\uAE30 (GB). GPU(g2) \uB4F1 boot-from-volume \uD544\uC218 flavor \uC5D0 \uC9C0\uC815").option("--key-name <name>", "\uD0A4\uD398\uC5B4 \uC774\uB984").option("--security-group <name>", "\uBCF4\uC548 \uADF8\uB8F9 \uC774\uB984 (\uC5EC\uB7EC \uAC1C: \uBC18\uBCF5 \uC9C0\uC815)", (v, prev) => [...prev, v], []).option("--ephemeral-disk-size <gb>", "\uC784\uC2DC \uB514\uC2A4\uD06C \uD06C\uAE30 (GB, NHN \uD655\uC7A5)").option("--protect", "\uC0AD\uC81C \uBC29\uC9C0 \uC124\uC815 (NHN \uD655\uC7A5)").option("--user-data <path>", "cloud-init user-data \uD30C\uC77C \uACBD\uB85C (base64 \uC778\uCF54\uB529\uD574 \uC8FC\uC785, \uC778\uCF54\uB529 \uD6C4 65535 \uBC14\uC774\uD2B8 \uD55C\uB3C4)").option("--wait", "ACTIVE \uC0C1\uD0DC\uAC00 \uB420 \uB54C\uAE4C\uC9C0 \uB300\uAE30").option("--timeout <sec>", "wait \uD0C0\uC784\uC544\uC6C3 (\uCD08, \uAE30\uBCF8 300)", "300").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+var createCommand3 = new import_commander25.Command("create").description("\uC778\uC2A4\uD134\uC2A4\uB97C \uC0DD\uC131\uD55C\uB2E4").requiredOption("--name <name>", "\uC778\uC2A4\uD134\uC2A4 \uC774\uB984").requiredOption("--flavor <id>", "flavor ID").requiredOption("--image <id>", "\uC774\uBBF8\uC9C0 ID").requiredOption("--network <uuid>", "\uB124\uD2B8\uC6CC\uD06C UUID (\uC5EC\uB7EC \uAC1C: \uBC18\uBCF5 \uC9C0\uC815)", (v, prev) => [...prev, v], []).option("--boot-volume-size <gb>", "boot-from-volume root \uBCFC\uB968 \uD06C\uAE30 (GB). GPU(g2) \uB4F1 boot-from-volume \uD544\uC218 flavor \uC5D0 \uC9C0\uC815").option("--key-name <name>", "\uD0A4\uD398\uC5B4 \uC774\uB984").option("--security-group <name>", "\uBCF4\uC548 \uADF8\uB8F9 \uC774\uB984 (\uC5EC\uB7EC \uAC1C: \uBC18\uBCF5 \uC9C0\uC815)", (v, prev) => [...prev, v], []).option("--ephemeral-disk-size <gb>", "\uC784\uC2DC \uB514\uC2A4\uD06C \uD06C\uAE30 (GB, NHN \uD655\uC7A5)").option("--protect", "\uC0AD\uC81C \uBC29\uC9C0 \uC124\uC815 (NHN \uD655\uC7A5)").option("--user-data <path>", "cloud-init user-data \uD30C\uC77C \uACBD\uB85C (base64 \uC778\uCF54\uB529\uD574 \uC8FC\uC785, \uC778\uCF54\uB529 \uD6C4 65535 \uBC14\uC774\uD2B8 \uD55C\uB3C4)").option("--wait", "ACTIVE \uC0C1\uD0DC\uAC00 \uB420 \uB54C\uAE4C\uC9C0 \uB300\uAE30").option("--timeout <sec>", "wait \uD0C0\uC784\uC544\uC6C3 (\uCD08, \uAE30\uBCF8 300)", "300").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
   const opts = cmd.optsWithGlobals();
   const networks = opts.network ?? [];
   if (networks.length === 0) {
@@ -1510,7 +3414,7 @@ var createCommand = new import_commander9.Command("create").description("\uC778\
   if (opts.userData !== void 0) {
     let stat;
     try {
-      stat = (0, import_node_fs.statSync)(opts.userData);
+      stat = (0, import_node_fs5.statSync)(opts.userData);
     } catch (e) {
       const reason = e.code ?? (e instanceof Error ? e.message : String(e));
       throw new NhnCloudCliError(
@@ -1520,149 +3424,859 @@ var createCommand = new import_commander9.Command("create").description("\uC778\
     }
     if (!stat.isFile()) {
       throw new NhnCloudCliError(
-        `--user-data \uAC00 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${opts.userData}`,
+        `--user-data \uAC00 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${opts.userData}`,
+        EXIT_PARAM_ERROR
+      );
+    }
+    if (stat.size > 49149) {
+      throw new NhnCloudCliError(
+        `--user-data \uAC00 \uB108\uBB34 \uD07D\uB2C8\uB2E4 (${stat.size} \uBC14\uC774\uD2B8). base64 \uC778\uCF54\uB529 \uD6C4 65535 \uBC14\uC774\uD2B8 \uD55C\uB3C4\uB77C raw 49149 \uBC14\uC774\uD2B8\uAE4C\uC9C0\uB9CC \uD5C8\uC6A9\uB429\uB2C8\uB2E4.`,
+        EXIT_PARAM_ERROR
+      );
+    }
+    const raw = (0, import_node_fs5.readFileSync)(opts.userData);
+    userDataBase64 = raw.toString("base64");
+    if (userDataBase64.length > 65535) {
+      throw new NhnCloudCliError(
+        `--user-data \uAC00 base64 \uC778\uCF54\uB529 \uD6C4 65535 \uBC14\uC774\uD2B8\uB97C \uCD08\uACFC\uD569\uB2C8\uB2E4 (${userDataBase64.length} \uBC14\uC774\uD2B8). cloud-init \uB0B4\uC6A9\uC744 \uC904\uC774\uC138\uC694.`,
+        EXIT_PARAM_ERROR
+      );
+    }
+  }
+  const timeoutMs = parseInt(opts.timeout ?? "300", 10) * 1e3;
+  const { client } = await resolveInstanceClient(opts);
+  startSpinner("\uC778\uC2A4\uD134\uC2A4 \uC0DD\uC131 \uC911...");
+  let server;
+  try {
+    server = await client.create({
+      name: opts.name,
+      flavorRef: opts.flavor,
+      imageRef: opts.image,
+      networks,
+      bootVolumeSize: opts.bootVolumeSize !== void 0 ? parseInt(opts.bootVolumeSize, 10) : void 0,
+      keyName: opts.keyName,
+      securityGroups: opts.securityGroup && opts.securityGroup.length > 0 ? opts.securityGroup : void 0,
+      ephemeralDiskSize: opts.ephemeralDiskSize !== void 0 ? parseInt(opts.ephemeralDiskSize, 10) : void 0,
+      protect: opts.protect,
+      userDataBase64
+    });
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  if (opts.wait) {
+    startSpinner(`ACTIVE \uB300\uAE30 \uC911... (id: ${server.id})`);
+    try {
+      server = await client.waitForActive(server.id, { timeoutMs });
+    } catch (err) {
+      stopSpinner(false);
+      throw err;
+    }
+    stopSpinner(true, `ACTIVE \uD655\uC778 (id: ${server.id})`);
+  }
+  if (opts.quiet && opts.wait) {
+    const ip = getFirstIp(server);
+    if (ip) process.stdout.write(ip + "\n");
+    return;
+  }
+  if (opts.wait) {
+    process.stderr.write(import_chalk6.default.green(`  IP: ${getIps3(server)}
+`));
+  }
+  const rows = [
+    ["id", server.id],
+    ["name", server.name],
+    ["status", server.status],
+    ["IPs", getIps3(server)],
+    ["flavor", server.flavor.id],
+    ["image", getImageId2(server)]
+  ];
+  output(opts, {
+    headers: ["field", "value"],
+    rows,
+    raw: server,
+    ids: [server.id]
+  });
+});
+
+// src/commands/instance/delete.ts
+var import_commander26 = require("commander");
+var import_chalk7 = __toESM(require("chalk"));
+var deleteCommand2 = new import_commander26.Command("delete").description("\uC778\uC2A4\uD134\uC2A4\uB97C \uC0AD\uC81C\uD55C\uB2E4").argument("<id>", "\uC778\uC2A4\uD134\uC2A4 ID").option("--yes", "\uD655\uC778 \uD504\uB86C\uD504\uD2B8 \uC0DD\uB7B5 (CI/\uBE44\uB300\uD654\uD615 \uD544\uC218)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const isTTY = process.stdin.isTTY;
+  if (!isTTY && !opts.yes) {
+    throw new NhnCloudCliError(
+      "\uBE44\uB300\uD654\uD615 \uD658\uACBD\uC5D0\uC11C \uC778\uC2A4\uD134\uC2A4 \uC0AD\uC81C\uB294 --yes \uD50C\uB798\uADF8\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.",
+      EXIT_PARAM_ERROR
+    );
+  }
+  if (isTTY && !opts.yes) {
+    const { confirm } = await import("@inquirer/prompts");
+    const ok = await confirm({
+      message: `\uC778\uC2A4\uD134\uC2A4 "${id}" \uB97C \uC0AD\uC81C\uD558\uC2DC\uACA0\uC2B5\uB2C8\uAE4C?`,
+      default: false
+    });
+    if (!ok) {
+      process.stderr.write(import_chalk7.default.yellow("\uC0AD\uC81C\uAC00 \uCDE8\uC18C\uB418\uC5C8\uC2B5\uB2C8\uB2E4.\n"));
+      return;
+    }
+  }
+  const { client } = await resolveInstanceClient(opts);
+  startSpinner(`\uC778\uC2A4\uD134\uC2A4 \uC0AD\uC81C \uC911... (id: ${id})`);
+  try {
+    await client.delete(id);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  process.stderr.write(import_chalk7.default.green(`\u2713 \uC778\uC2A4\uD134\uC2A4 "${id}" \uAC00 \uC0AD\uC81C\uB418\uC5C8\uC2B5\uB2C8\uB2E4.
+`));
+});
+
+// src/commands/instance/power.ts
+var import_commander27 = require("commander");
+var import_chalk8 = __toESM(require("chalk"));
+var startCommand = new import_commander27.Command("start").description("\uC778\uC2A4\uD134\uC2A4\uB97C \uC2DC\uC791\uD55C\uB2E4 (SHUTOFF \u2192 ACTIVE)").argument("<id>", "\uC778\uC2A4\uD134\uC2A4 ID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client } = await resolveInstanceClient(opts);
+  startSpinner(`\uC778\uC2A4\uD134\uC2A4 \uC2DC\uC791 \uC911... (id: ${id})`);
+  try {
+    await client.start(id);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  process.stderr.write(import_chalk8.default.green(`\u2713 \uC778\uC2A4\uD134\uC2A4 "${id}" \uC2DC\uC791\uC744 \uC694\uCCAD\uD588\uC2B5\uB2C8\uB2E4 (\u2192 ACTIVE).
+`));
+});
+var stopCommand = new import_commander27.Command("stop").description("\uC778\uC2A4\uD134\uC2A4\uB97C \uC815\uC9C0\uD55C\uB2E4 (ACTIVE/ERROR \u2192 SHUTOFF)").argument("<id>", "\uC778\uC2A4\uD134\uC2A4 ID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client } = await resolveInstanceClient(opts);
+  startSpinner(`\uC778\uC2A4\uD134\uC2A4 \uC815\uC9C0 \uC911... (id: ${id})`);
+  try {
+    await client.stop(id);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  process.stderr.write(import_chalk8.default.green(`\u2713 \uC778\uC2A4\uD134\uC2A4 "${id}" \uC815\uC9C0\uB97C \uC694\uCCAD\uD588\uC2B5\uB2C8\uB2E4 (\u2192 SHUTOFF).
+`));
+});
+var rebootCommand = new import_commander27.Command("reboot").description("\uC778\uC2A4\uD134\uC2A4\uB97C \uC7AC\uBD80\uD305\uD55C\uB2E4 (\uAE30\uBCF8 SOFT, --hard \uB85C HARD)").argument("<id>", "\uC778\uC2A4\uD134\uC2A4 ID").option("--hard", "HARD \uC7AC\uBD80\uD305 (\uAC15\uC81C \uC804\uC6D0 cycle, \uAE30\uBCF8\uC740 SOFT)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client } = await resolveInstanceClient(opts);
+  const type = opts.hard ? "HARD" : "SOFT";
+  startSpinner(`\uC778\uC2A4\uD134\uC2A4 \uC7AC\uBD80\uD305 \uC911... (id: ${id}, ${type})`);
+  try {
+    await client.reboot(id, type);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  process.stderr.write(import_chalk8.default.green(`\u2713 \uC778\uC2A4\uD134\uC2A4 "${id}" ${type} \uC7AC\uBD80\uD305\uC744 \uC694\uCCAD\uD588\uC2B5\uB2C8\uB2E4.
+`));
+});
+
+// src/commands/instance/resize.ts
+var import_commander28 = require("commander");
+var import_chalk9 = __toESM(require("chalk"));
+var resizeCommand = new import_commander28.Command("resize").description("\uC778\uC2A4\uD134\uC2A4 \uD0C0\uC785(flavor)\uC744 \uBCC0\uACBD\uD55C\uB2E4").argument("<id>", "\uC778\uC2A4\uD134\uC2A4 ID").requiredOption("--flavor <id>", "\uBCC0\uACBD\uD560 flavor ID (instance flavors \uB85C \uD6C4\uBCF4 \uC870\uD68C)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client } = await resolveInstanceClient(opts);
+  startSpinner(`\uC778\uC2A4\uD134\uC2A4 \uD0C0\uC785 \uBCC0\uACBD \uC911... (id: ${id})`);
+  try {
+    await client.resize(id, opts.flavor);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  process.stderr.write(
+    import_chalk9.default.green(
+      `\u2713 \uC778\uC2A4\uD134\uC2A4 "${id}" \uD0C0\uC785 \uBCC0\uACBD(flavor: ${opts.flavor}) \uC744 \uC694\uCCAD\uD588\uC2B5\uB2C8\uB2E4 (\u2192 VERIFY_RESIZE, instance get \uC73C\uB85C \uD655\uC778 \uD6C4 resize-confirm/resize-revert).
+`
+    )
+  );
+});
+var resizeConfirmCommand = new import_commander28.Command("resize-confirm").description("resize \uB97C \uD655\uC815\uD55C\uB2E4 (VERIFY_RESIZE \u2192 ACTIVE, \uC0C8 flavor \uB85C \uACE0\uC815)").argument("<id>", "\uC778\uC2A4\uD134\uC2A4 ID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client } = await resolveInstanceClient(opts);
+  startSpinner(`resize \uD655\uC815 \uC911... (id: ${id})`);
+  try {
+    await client.confirmResize(id);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  process.stderr.write(import_chalk9.default.green(`\u2713 \uC778\uC2A4\uD134\uC2A4 "${id}" resize \uD655\uC815\uC744 \uC694\uCCAD\uD588\uC2B5\uB2C8\uB2E4 (\u2192 ACTIVE).
+`));
+});
+var resizeRevertCommand = new import_commander28.Command("resize-revert").description("resize \uB97C \uB864\uBC31\uD55C\uB2E4 (VERIFY_RESIZE \u2192 ACTIVE, \uC774\uC804 flavor \uB85C \uBCF5\uADC0)").argument("<id>", "\uC778\uC2A4\uD134\uC2A4 ID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client } = await resolveInstanceClient(opts);
+  startSpinner(`resize \uB864\uBC31 \uC911... (id: ${id})`);
+  try {
+    await client.revertResize(id);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  process.stderr.write(
+    import_chalk9.default.green(`\u2713 \uC778\uC2A4\uD134\uC2A4 "${id}" resize \uB864\uBC31\uC744 \uC694\uCCAD\uD588\uC2B5\uB2C8\uB2E4 (\uC774\uC804 flavor \uB85C \uBCF5\uADC0).
+`)
+  );
+});
+
+// src/commands/instance/images.ts
+var import_commander29 = require("commander");
+var VISIBILITY_VALUES = ["public", "private", "shared"];
+function parsePositiveInt5(value, flag) {
+  if (value === void 0) return void 0;
+  const n = Number(value);
+  if (!Number.isInteger(n) || n < 1) {
+    throw new NhnCloudCliError(`${flag} \uB294 1 \uC774\uC0C1\uC758 \uC815\uC218\uC5EC\uC57C \uD569\uB2C8\uB2E4 (\uC785\uB825: ${value}).`, EXIT_PARAM_ERROR);
+  }
+  return n;
+}
+var imagesCommand = new import_commander29.Command("images").description("\uC774\uBBF8\uC9C0 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4 (create --image <id> \uC18C\uC2A4, \uC804\uCCB4 \uD544\uB4DC\uB294 --json)").option("--limit <n>", "\uD55C \uD398\uC774\uC9C0 \uCD5C\uB300 \uAC1C\uC218 (\uAE30\uBCF8: \uC11C\uBC84 \uAE30\uBCF8\uAC12 25)").option("--marker <id>", "\uC774 image id \uB2E4\uC74C\uBD80\uD130 \uC870\uD68C (\uD398\uC774\uC9C0\uB124\uC774\uC158)").option("--name <name>", "\uC774\uB984\uC73C\uB85C \uD544\uD130").option("--visibility <v>", `\uB178\uCD9C \uBC94\uC704 \uD544\uD130 (${VISIBILITY_VALUES.join("|")})`).option("--owner <id>", "\uC18C\uC720\uC790(\uD504\uB85C\uC81D\uD2B8 id)\uB85C \uD544\uD130").option("--status <status>", "\uC0C1\uD0DC\uB85C \uD544\uD130 (\uC608: active)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const limit = parsePositiveInt5(opts.limit, "--limit");
+  if (opts.visibility !== void 0 && !VISIBILITY_VALUES.includes(opts.visibility)) {
+    throw new NhnCloudCliError(
+      `--visibility \uB294 ${VISIBILITY_VALUES.join(" | ")} \uC911 \uD558\uB098\uC5EC\uC57C \uD569\uB2C8\uB2E4 (\uC785\uB825: ${opts.visibility}).`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  const { client } = await resolveInstanceClient(opts);
+  startSpinner("\uC774\uBBF8\uC9C0 \uBAA9\uB85D \uC870\uD68C \uC911...");
+  let result;
+  try {
+    result = await client.listImages({
+      limit,
+      marker: opts.marker,
+      name: opts.name,
+      visibility: opts.visibility,
+      owner: opts.owner,
+      status: opts.status
+    });
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["id", "name", "status", "visibility", "size"],
+    rows: result.images.map((img) => [
+      img.id,
+      img.name ?? "-",
+      img.status,
+      img.visibility,
+      img.size === void 0 ? "-" : String(img.size)
+    ]),
+    raw: result.images,
+    ids: result.images.map((img) => img.id)
+  });
+  if (result.next && !opts.json && !opts.quiet) {
+    const lastId = result.images.at(-1)?.id;
+    if (lastId) {
+      process.stderr.write(`\uB2E4\uC74C \uD398\uC774\uC9C0: --marker ${lastId}
+`);
+    }
+  }
+});
+
+// src/commands/instance/keypairs.ts
+var import_commander30 = require("commander");
+var keypairsCommand = new import_commander30.Command("keypairs").description("\uD0A4\uD398\uC5B4 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4 (name\xB7fingerprint, \uC804\uCCB4 \uD544\uB4DC\uB294 --json)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client } = await resolveInstanceClient(opts);
+  startSpinner("\uD0A4\uD398\uC5B4 \uBAA9\uB85D \uC870\uD68C \uC911...");
+  let keypairs;
+  try {
+    keypairs = await client.listKeypairs();
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["name", "fingerprint"],
+    rows: keypairs.map((k) => [k.name, k.fingerprint]),
+    raw: keypairs,
+    ids: keypairs.map((k) => k.name)
+  });
+});
+
+// src/commands/instance/keypair.ts
+var import_commander31 = require("commander");
+var import_node_fs6 = require("fs");
+var import_node_crypto3 = require("crypto");
+var import_chalk10 = __toESM(require("chalk"));
+function resolvePublicKey(value) {
+  let stat;
+  try {
+    stat = (0, import_node_fs6.statSync)(value);
+  } catch (e) {
+    const err = e;
+    if (err.code && err.code !== "ENOENT") {
+      throw new NhnCloudCliError(
+        `--public-key \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${value} (${err.code})`,
         EXIT_PARAM_ERROR
       );
     }
-    if (stat.size > 49149) {
-      throw new NhnCloudCliError(
-        `--user-data \uAC00 \uB108\uBB34 \uD07D\uB2C8\uB2E4 (${stat.size} \uBC14\uC774\uD2B8). base64 \uC778\uCF54\uB529 \uD6C4 65535 \uBC14\uC774\uD2B8 \uD55C\uB3C4\uB77C raw 49149 \uBC14\uC774\uD2B8\uAE4C\uC9C0\uB9CC \uD5C8\uC6A9\uB429\uB2C8\uB2E4.`,
-        EXIT_PARAM_ERROR
-      );
+    return value;
+  }
+  if (!stat.isFile()) {
+    throw new NhnCloudCliError(`--public-key \uAC00 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${value}`, EXIT_PARAM_ERROR);
+  }
+  return (0, import_node_fs6.readFileSync)(value, "utf-8").trim();
+}
+function savePrivateKey(filePath, privateKey) {
+  const tmp = `${filePath}.${(0, import_node_crypto3.randomBytes)(4).toString("hex")}.tmp`;
+  const content = privateKey.endsWith("\n") ? privateKey : privateKey + "\n";
+  try {
+    (0, import_node_fs6.writeFileSync)(tmp, content, { encoding: "utf-8", mode: 384 });
+    (0, import_node_fs6.renameSync)(tmp, filePath);
+  } catch (e) {
+    const reason = e.code ?? (e instanceof Error ? e.message : String(e));
+    let tmpNote = "";
+    try {
+      (0, import_node_fs6.unlinkSync)(tmp);
+    } catch {
+      tmpNote = ` \u2014 0600 \uC784\uC2DC \uD30C\uC77C\uC774 \uB0A8\uC558\uC744 \uC218 \uC788\uC2B5\uB2C8\uB2E4: ${tmp}`;
     }
-    const raw = (0, import_node_fs.readFileSync)(opts.userData);
-    userDataBase64 = raw.toString("base64");
-    if (userDataBase64.length > 65535) {
-      throw new NhnCloudCliError(
-        `--user-data \uAC00 base64 \uC778\uCF54\uB529 \uD6C4 65535 \uBC14\uC774\uD2B8\uB97C \uCD08\uACFC\uD569\uB2C8\uB2E4 (${userDataBase64.length} \uBC14\uC774\uD2B8). cloud-init \uB0B4\uC6A9\uC744 \uC904\uC774\uC138\uC694.`,
-        EXIT_PARAM_ERROR
+    throw new NhnCloudCliError(
+      `private_key \uD30C\uC77C\uC744 \uC800\uC7A5\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${filePath} (${reason})${tmpNote}`,
+      EXIT_PARAM_ERROR
+    );
+  }
+}
+var getKeypairCmd = new import_commander31.Command("get").description("\uB2E8\uC77C \uD0A4\uD398\uC5B4\uB97C \uC870\uD68C\uD55C\uB2E4").argument("<name>", "\uD0A4\uD398\uC5B4 \uC774\uB984").option("--region <region>", "region override").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (name, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client } = await resolveInstanceClient(opts);
+  startSpinner("\uD0A4\uD398\uC5B4 \uC870\uD68C \uC911...");
+  let kp;
+  try {
+    kp = await client.getKeypair(name);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["field", "value"],
+    rows: [
+      ["name", kp.name],
+      ["fingerprint", kp.fingerprint],
+      ["user_id", kp.user_id],
+      ["created_at", kp.created_at],
+      ["public_key", kp.public_key]
+    ],
+    raw: kp,
+    ids: [kp.name]
+  });
+});
+var createKeypairCmd = new import_commander31.Command("create").description("\uD0A4\uD398\uC5B4\uB97C \uC0DD\uC131\uD55C\uB2E4 (--public-key \uBBF8\uC9C0\uC815 \uC2DC NHN \uC774 \uD0A4\uC30D \uC0DD\uC131 \u2014 private_key 1\uD68C\uC131)").argument("<name>", "\uD0A4\uD398\uC5B4 \uC774\uB984").option("--public-key <path|key>", "\uAE30\uC874 \uACF5\uAC1C\uD0A4 (\uD30C\uC77C \uACBD\uB85C \uB610\uB294 \uD0A4 \uBB38\uC790\uC5F4). \uC9C0\uC815 \uC2DC private_key \uBBF8\uBC18\uD658").option("-o, --output <keyfile>", "\uC0DD\uC131\uB41C private_key \uB97C \uD30C\uC77C(mode 0600)\uB85C \uC800\uC7A5").option("--region <region>", "region override").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (name, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const publicKey = opts.publicKey !== void 0 ? resolvePublicKey(opts.publicKey) : void 0;
+  if (opts.output !== void 0 && publicKey !== void 0) {
+    throw new NhnCloudCliError(
+      "--output \uC740 NHN \uC774 \uD0A4\uB97C \uC0DD\uC131\uD560 \uB54C\uB9CC \uC758\uBBF8\uAC00 \uC788\uC2B5\uB2C8\uB2E4. --public-key \uC640 \uD568\uAED8 \uC4F8 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.",
+      EXIT_PARAM_ERROR
+    );
+  }
+  if (publicKey === void 0 && opts.quiet && opts.output === void 0) {
+    throw new NhnCloudCliError(
+      "NHN \uC774 \uC0DD\uC131\uD558\uB294 private_key \uB294 1\uD68C\uB9CC \uBC18\uD658\uB429\uB2C8\uB2E4. --quiet \uB85C \uC0DD\uC131\uD560 \uB54C\uB294 --output <keyfile> \uB85C \uC800\uC7A5 \uACBD\uB85C\uB97C \uC9C0\uC815\uD558\uC138\uC694 (\uBBF8\uC9C0\uC815 \uC2DC \uD0A4 \uC720\uC2E4).",
+      EXIT_PARAM_ERROR
+    );
+  }
+  const { client } = await resolveInstanceClient(opts);
+  startSpinner("\uD0A4\uD398\uC5B4 \uC0DD\uC131 \uC911...");
+  let result;
+  try {
+    result = await client.createKeypair({ name, publicKey });
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  if (result.private_key !== void 0) {
+    if (opts.output !== void 0) {
+      try {
+        savePrivateKey(opts.output, result.private_key);
+        process.stderr.write(import_chalk10.default.green(`  private_key \uB97C ${opts.output} \uC5D0 \uC800\uC7A5\uD588\uC2B5\uB2C8\uB2E4 (mode 0600).
+`));
+      } catch (saveErr) {
+        const reason = saveErr instanceof Error ? saveErr.message : String(saveErr);
+        process.stderr.write(
+          import_chalk10.default.red(`  \u26A0 private_key \uD30C\uC77C \uC800\uC7A5 \uC2E4\uD328 (${reason}). \uC720\uC2E4 \uBC29\uC9C0\uB97C \uC704\uD574 \uC544\uB798\uC5D0 \uCD9C\uB825\uD569\uB2C8\uB2E4 \u2014 \uC989\uC2DC \uC548\uC804\uD55C \uACF3\uC5D0 \uBCF4\uAD00\uD558\uC138\uC694.
+`)
+        );
+        process.stdout.write(result.private_key + "\n");
+      }
+    } else {
+      process.stderr.write(
+        import_chalk10.default.yellow("  \u26A0 private_key \uB294 \uC9C0\uAE08 \uD55C \uBC88\uB9CC \uD45C\uC2DC\uB429\uB2C8\uB2E4. \uBD84\uC2E4 \uC2DC \uBCF5\uAD6C \uBD88\uAC00 \u2014 \uC548\uC804\uD55C \uACF3\uC5D0 \uBCF4\uAD00\uD558\uC138\uC694.\n")
       );
+      process.stdout.write(result.private_key + "\n");
     }
   }
-  const timeoutMs = parseInt(opts.timeout ?? "300", 10) * 1e3;
+  const { private_key, ...meta } = result;
+  void private_key;
+  output(opts, {
+    headers: ["field", "value"],
+    rows: [
+      ["name", meta.name],
+      ["fingerprint", meta.fingerprint],
+      ["user_id", meta.user_id]
+    ],
+    raw: meta,
+    ids: [meta.name]
+  });
+});
+var deleteKeypairCmd = new import_commander31.Command("delete").description("\uD0A4\uD398\uC5B4\uB97C \uC0AD\uC81C\uD55C\uB2E4").argument("<name>", "\uD0A4\uD398\uC5B4 \uC774\uB984").option("--region <region>", "region override").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (name, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
   const { client } = await resolveInstanceClient(opts);
-  startSpinner("\uC778\uC2A4\uD134\uC2A4 \uC0DD\uC131 \uC911...");
-  let server;
+  startSpinner("\uD0A4\uD398\uC5B4 \uC0AD\uC81C \uC911...");
   try {
-    server = await client.create({
-      name: opts.name,
-      flavorRef: opts.flavor,
-      imageRef: opts.image,
-      networks,
-      bootVolumeSize: opts.bootVolumeSize !== void 0 ? parseInt(opts.bootVolumeSize, 10) : void 0,
-      keyName: opts.keyName,
-      securityGroups: opts.securityGroup && opts.securityGroup.length > 0 ? opts.securityGroup : void 0,
-      ephemeralDiskSize: opts.ephemeralDiskSize !== void 0 ? parseInt(opts.ephemeralDiskSize, 10) : void 0,
-      protect: opts.protect,
-      userDataBase64
-    });
+    await client.deleteKeypair(name);
   } catch (err) {
     stopSpinner(false);
     throw err;
   }
   stopSpinner(true);
-  if (opts.wait) {
-    startSpinner(`ACTIVE \uB300\uAE30 \uC911... (id: ${server.id})`);
+  process.stderr.write(import_chalk10.default.green(`\u2713 \uD0A4\uD398\uC5B4 "${name}" \uAC00 \uC0AD\uC81C\uB418\uC5C8\uC2B5\uB2C8\uB2E4.
+`));
+});
+var keypairCommand = new import_commander31.Command("keypair").description("\uD0A4\uD398\uC5B4 \uB2E8\uAC74 \uAD00\uB9AC (get / create / delete)").addCommand(getKeypairCmd).addCommand(createKeypairCmd).addCommand(deleteKeypairCmd);
+
+// src/commands/instance/volume.ts
+var import_commander32 = require("commander");
+var import_chalk11 = __toESM(require("chalk"));
+var attachCommand = new import_commander32.Command("attach").description("\uBCFC\uB968\uC744 \uC778\uC2A4\uD134\uC2A4\uC5D0 \uC5F0\uACB0\uD55C\uB2E4").argument("<id>", "\uC778\uC2A4\uD134\uC2A4 ID").requiredOption("--volume <volumeId>", "\uC5F0\uACB0\uD560 \uBCFC\uB968 ID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client } = await resolveInstanceClient(opts);
+  startSpinner("\uBCFC\uB968 \uC5F0\uACB0 \uC911...");
+  let att;
+  try {
+    att = await client.attachVolume(id, opts.volume);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  process.stderr.write(
+    import_chalk11.default.green(`\uBCFC\uB968 \uC5F0\uACB0 \uC644\uB8CC (volumeId: ${att.volumeId}, device: ${att.device})
+`)
+  );
+  output(opts, {
+    headers: ["field", "value"],
+    rows: [
+      ["id", att.id],
+      ["volumeId", att.volumeId],
+      ["serverId", att.serverId],
+      ["device", att.device]
+    ],
+    raw: att,
+    ids: [att.id]
+  });
+});
+var detachCommand = new import_commander32.Command("detach").description("\uBCFC\uB968 \uC5F0\uACB0\uC744 \uD574\uC81C\uD55C\uB2E4").argument("<id>", "\uC778\uC2A4\uD134\uC2A4 ID").argument("<volumeId>", "\uD574\uC81C\uD560 \uBCFC\uB968 ID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, volumeId, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client } = await resolveInstanceClient(opts);
+  startSpinner("\uBCFC\uB968 \uC5F0\uACB0 \uD574\uC81C \uC911...");
+  try {
+    await client.detachVolume(id, volumeId);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  process.stderr.write(
+    import_chalk11.default.green(`\uBCFC\uB968 \uC5F0\uACB0 \uD574\uC81C \uC694\uCCAD \uC644\uB8CC (volumeId: ${volumeId})
+`)
+  );
+});
+var volumeCommand = new import_commander32.Command("volume").description(
+  "\uC778\uC2A4\uD134\uC2A4 \uBCFC\uB968 \uC5F0\uACB0/\uD574\uC81C"
+);
+volumeCommand.addCommand(attachCommand);
+volumeCommand.addCommand(detachCommand);
+
+// src/commands/instance/volumes.ts
+var import_commander33 = require("commander");
+var volumesCommand = new import_commander33.Command("volumes").description("\uC778\uC2A4\uD134\uC2A4\uC5D0 \uC5F0\uACB0\uB41C \uBCFC\uB968 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<id>", "\uC778\uC2A4\uD134\uC2A4 ID").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client } = await resolveInstanceClient(opts);
+  startSpinner("\uBCFC\uB968 \uBAA9\uB85D \uC870\uD68C \uC911...");
+  let attachments;
+  try {
+    attachments = await client.listVolumeAttachments(id);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["id", "volumeId", "device"],
+    rows: attachments.map((a) => [a.id, a.volumeId, a.device]),
+    raw: attachments,
+    ids: attachments.map((a) => a.id)
+  });
+});
+
+// src/commands/ncr/list.ts
+var import_commander34 = require("commander");
+
+// src/services/ncr/harbor-client.ts
+var import_ky10 = __toESM(require("ky"));
+var DEFAULT_TIMEOUT_MS6 = 3e4;
+var PAGE_SIZE = 100;
+var MAX_PAGES = 1e3;
+var HarborClient = class {
+  uakId;
+  uakSecret;
+  host;
+  constructor(uakId, uakSecret, host) {
+    this.uakId = uakId;
+    this.uakSecret = uakSecret;
+    this.host = host;
+  }
+  basicAuthHeaders() {
+    const token = Buffer.from(`${this.uakId}:${this.uakSecret}`).toString("base64");
+    return { Authorization: `Basic ${token}` };
+  }
+  /**
+   * Harbor REST 페이지네이션 전수 수집 (ADR-017 — silent truncation 방지).
+   *
+   * Harbor 응답 Link: <...?page=N+1...>; rel="next" 헤더가 없으면 종료.
+   * ky.get() 이 Response 를 반환하므로 .json() 과 .headers.get("link") 를 함께 사용한다
+   * (체이닝하면 헤더를 못 본다 — 기존 NCR client 의 .json<T>() 체이닝 패턴과 다름).
+   */
+  async getAllPages(path) {
+    const acc = [];
+    let page = 1;
     try {
-      server = await client.waitForActive(server.id, { timeoutMs });
+      for (; ; ) {
+        const url = `https://${this.host}${path}?page=${page}&page_size=${PAGE_SIZE}`;
+        const res = await import_ky10.default.get(url, {
+          headers: this.basicAuthHeaders(),
+          retry: 0,
+          timeout: DEFAULT_TIMEOUT_MS6
+        });
+        const data = await res.json();
+        if (!Array.isArray(data)) {
+          throw new NhnCloudCliError(
+            "Harbor REST \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: \uBC30\uC5F4\uC774 \uC544\uB2D9\uB2C8\uB2E4.",
+            EXIT_API_ERROR
+          );
+        }
+        acc.push(...data);
+        const link = res.headers.get("link");
+        if (!link || !link.includes('rel="next"')) break;
+        page++;
+        if (page > MAX_PAGES) {
+          throw new NhnCloudCliError(
+            `Harbor pagination \uCD5C\uB300 \uD398\uC774\uC9C0(${MAX_PAGES}) \uCD08\uACFC \u2014 \uBE44\uC815\uC0C1 \uC751\uB2F5\uC73C\uB85C \uC911\uB2E8\uD569\uB2C8\uB2E4.`,
+            EXIT_API_ERROR
+          );
+        }
+      }
     } catch (err) {
-      stopSpinner(false);
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+    return acc;
+  }
+  /**
+   * 프로젝트(레지스트리)의 repository(이미지) 목록을 반환한다.
+   * GET /api/v2.0/projects/{project}/repositories
+   */
+  async listRepositories(project) {
+    const enc = encodeURIComponent(project);
+    const data = await this.getAllPages(`/api/v2.0/projects/${enc}/repositories`);
+    return data.filter(isRepository);
+  }
+  /**
+   * repository 의 artifact 목록을 반환한다.
+   * GET /api/v2.0/projects/{project}/repositories/{repository}/artifacts
+   * repository 의 '/' 는 %2F 로 인코딩(path-traversal 방지).
+   */
+  async listArtifacts(project, repository) {
+    const encProject = encodeURIComponent(project);
+    const encRepo = encodeURIComponent(repository);
+    const data = await this.getAllPages(
+      `/api/v2.0/projects/${encProject}/repositories/${encRepo}/artifacts`
+    );
+    return data.filter(isArtifact);
+  }
+};
+
+// src/commands/ncr/helpers.ts
+async function createNcrClient(opts) {
+  const profileName = await resolveProfileName(opts.profile);
+  const uak = await getUserAccessKey(profileName);
+  const region = opts.region ?? "kr1";
+  return { client: new NcrClient(uak.id, uak.secret, region), profileName };
+}
+async function resolveAppKey(profileName, appKeyOpt) {
+  if (appKeyOpt) return appKeyOpt;
+  let cred;
+  try {
+    cred = await getServiceCredential("ncr", profileName);
+  } catch (err) {
+    if (!(err instanceof NhnCloudCliError) || err.exitCode !== EXIT_CONFIG_ERROR) {
       throw err;
     }
-    stopSpinner(true, `ACTIVE \uD655\uC778 (id: ${server.id})`);
   }
-  if (opts.quiet && opts.wait) {
-    const ip = getFirstIp(server);
-    if (ip) process.stdout.write(ip + "\n");
-    return;
+  if (!cred?.appkey) {
+    throw new NhnCloudCliError(
+      "NCR appKey \uAC00 \uC5C6\uC2B5\uB2C8\uB2E4. --app-key \uC635\uC158\uC73C\uB85C \uC9C0\uC815\uD558\uAC70\uB098\nnhncloud configure --ncr-appkey <key> \uB97C \uC2E4\uD589\uD574 \uC124\uC815\uD558\uC138\uC694.",
+      EXIT_CONFIG_ERROR
+    );
   }
-  if (opts.wait) {
-    process.stderr.write(import_chalk2.default.green(`  IP: ${getIps3(server)}
-`));
+  return cred.appkey;
+}
+async function createHarborClient(opts, registryArg) {
+  const { client: ncrClient, profileName } = await createNcrClient(opts);
+  const appKey = await resolveAppKey(profileName, opts.appKey);
+  const uak = await getUserAccessKey(profileName);
+  const reg = await ncrClient.getRegistry(appKey, registryArg);
+  const host = parseHarborHost(reg.uri);
+  const project = typeof reg.name === "string" ? reg.name : registryArg;
+  return { harbor: new HarborClient(uak.id, uak.secret, host), project };
+}
+function parseHarborHost(uri) {
+  if (!uri) {
+    throw new NhnCloudCliError(
+      "\uB808\uC9C0\uC2A4\uD2B8\uB9AC uri \uAC00 \uC5C6\uC5B4 \uC774\uBBF8\uC9C0 host \uB97C \uD574\uC11D\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.",
+      EXIT_API_ERROR
+    );
   }
-  const rows = [
-    ["id", server.id],
-    ["name", server.name],
-    ["status", server.status],
-    ["IPs", getIps3(server)],
-    ["flavor", server.flavor.id],
-    ["image", getImageId2(server)]
-  ];
+  const noScheme = uri.replace(/^https?:\/\//, "");
+  const host = noScheme.split("/")[0];
+  if (!host) {
+    throw new NhnCloudCliError(
+      "\uB808\uC9C0\uC2A4\uD2B8\uB9AC uri \uD615\uC2DD \uC624\uB958 \u2014 host \uCD94\uCD9C \uC2E4\uD328.",
+      EXIT_API_ERROR
+    );
+  }
+  return host;
+}
+
+// src/commands/ncr/list.ts
+var listCommand5 = new import_commander34.Command("list").description("NCR \uB808\uC9C0\uC2A4\uD2B8\uB9AC \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").option("--region <region>", "NCR region (\uAE30\uBCF8: kr1)", "kr1").option("--app-key <key>", "NCR appKey (profile \uC758 ncr.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client, profileName } = await createNcrClient(opts);
+  const appKey = await resolveAppKey(profileName, opts.appKey);
+  startSpinner("\uB808\uC9C0\uC2A4\uD2B8\uB9AC \uBAA9\uB85D \uC870\uD68C \uC911...");
+  let registries;
+  try {
+    registries = await client.listRegistries(appKey);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
   output(opts, {
-    headers: ["field", "value"],
+    headers: ["name", "repo_count", "uri"],
+    rows: registries.map((r) => [
+      r.name,
+      String(r.repo_count ?? ""),
+      r.uri ?? ""
+    ]),
+    raw: registries,
+    ids: registries.map((r) => r.name)
+  });
+});
+
+// src/commands/ncr/get.ts
+var import_commander35 = require("commander");
+var getCommand3 = new import_commander35.Command("get").description("\uB2E8\uC77C NCR \uB808\uC9C0\uC2A4\uD2B8\uB9AC\uB97C \uC870\uD68C\uD55C\uB2E4").argument("<registry>", "\uB808\uC9C0\uC2A4\uD2B8\uB9AC \uC774\uB984 \uB610\uB294 ID").option("--region <region>", "NCR region (\uAE30\uBCF8: kr1)", "kr1").option("--app-key <key>", "NCR appKey (profile \uC758 ncr.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (registry, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  if (!registry.trim()) {
+    throw new NhnCloudCliError(
+      "registry \uC778\uC218\uAC00 \uBE44\uC5B4\uC788\uC2B5\uB2C8\uB2E4. \uB808\uC9C0\uC2A4\uD2B8\uB9AC \uC774\uB984 \uB610\uB294 ID \uB97C \uC9C0\uC815\uD558\uC138\uC694.",
+      EXIT_PARAM_ERROR
+    );
+  }
+  const { client, profileName } = await createNcrClient(opts);
+  const appKey = await resolveAppKey(profileName, opts.appKey);
+  startSpinner(`\uB808\uC9C0\uC2A4\uD2B8\uB9AC "${registry}" \uC870\uD68C \uC911...`);
+  let reg;
+  try {
+    reg = await client.getRegistry(appKey, registry);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["name", "repo_count", "uri", "private_uri"],
+    rows: [[reg.name, String(reg.repo_count ?? ""), reg.uri ?? "", reg.private_uri ?? ""]],
+    raw: reg,
+    ids: [reg.name]
+  });
+});
+
+// src/commands/ncr/images.ts
+var import_commander36 = require("commander");
+var imagesCommand2 = new import_commander36.Command("images").description("\uB808\uC9C0\uC2A4\uD2B8\uB9AC\uC758 \uC774\uBBF8\uC9C0(repository) \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<registry>", "\uB808\uC9C0\uC2A4\uD2B8\uB9AC \uC774\uB984").option("--region <region>", "NCR region (\uAE30\uBCF8: kr1)", "kr1").option("--app-key <key>", "NCR appKey (profile \uC758 ncr.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (registry, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  if (!registry.trim()) {
+    throw new NhnCloudCliError(
+      "registry \uC778\uC218\uAC00 \uBE44\uC5B4\uC788\uC2B5\uB2C8\uB2E4. \uB808\uC9C0\uC2A4\uD2B8\uB9AC \uC774\uB984\uC744 \uC9C0\uC815\uD558\uC138\uC694.",
+      EXIT_PARAM_ERROR
+    );
+  }
+  const { harbor, project } = await createHarborClient(opts, registry);
+  startSpinner(`"${registry}" \uC774\uBBF8\uC9C0 \uBAA9\uB85D \uC870\uD68C \uC911...`);
+  let repos;
+  try {
+    repos = await harbor.listRepositories(project);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  const rows = repos.map((r) => {
+    const short = r.name.startsWith(project + "/") ? r.name.slice(project.length + 1) : r.name;
+    return [short, String(r.artifact_count ?? ""), String(r.pull_count ?? "")];
+  });
+  const ids = repos.map(
+    (r) => r.name.startsWith(project + "/") ? r.name.slice(project.length + 1) : r.name
+  );
+  output(opts, {
+    headers: ["repository", "artifact_count", "pull_count"],
     rows,
-    raw: server,
-    ids: [server.id]
+    raw: repos,
+    ids
   });
 });
 
-// src/commands/instance/delete.ts
-var import_commander10 = require("commander");
-var import_chalk3 = __toESM(require("chalk"));
-var deleteCommand = new import_commander10.Command("delete").description("\uC778\uC2A4\uD134\uC2A4\uB97C \uC0AD\uC81C\uD55C\uB2E4").argument("<id>", "\uC778\uC2A4\uD134\uC2A4 ID").option("--yes", "\uD655\uC778 \uD504\uB86C\uD504\uD2B8 \uC0DD\uB7B5 (CI/\uBE44\uB300\uD654\uD615 \uD544\uC218)").option("--region <region>", "region override (\uAE30\uBCF8: iaas \uC790\uACA9\uC99D\uBA85\uC758 region)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, _opts, cmd) => {
+// src/commands/ncr/tags.ts
+var import_commander37 = require("commander");
+var tagsCommand = new import_commander37.Command("tags").description("\uD2B9\uC815 \uC774\uBBF8\uC9C0\uC758 \uD0DC\uADF8 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<registry>", "\uB808\uC9C0\uC2A4\uD2B8\uB9AC \uC774\uB984").argument("<repository>", "\uC774\uBBF8\uC9C0(repository) \uC774\uB984 (\uC9E7\uC740 \uC774\uB984 \uB610\uB294 {project}/{repo})").option("--region <region>", "NCR region (\uAE30\uBCF8: kr1)", "kr1").option("--app-key <key>", "NCR appKey (profile \uC758 ncr.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (registry, repository, _opts, cmd) => {
   const opts = cmd.optsWithGlobals();
-  const isTTY = process.stdin.isTTY;
-  if (!isTTY && !opts.yes) {
+  if (!registry.trim()) {
     throw new NhnCloudCliError(
-      "\uBE44\uB300\uD654\uD615 \uD658\uACBD\uC5D0\uC11C \uC778\uC2A4\uD134\uC2A4 \uC0AD\uC81C\uB294 --yes \uD50C\uB798\uADF8\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.",
+      "registry \uC778\uC218\uAC00 \uBE44\uC5B4\uC788\uC2B5\uB2C8\uB2E4. \uB808\uC9C0\uC2A4\uD2B8\uB9AC \uC774\uB984\uC744 \uC9C0\uC815\uD558\uC138\uC694.",
       EXIT_PARAM_ERROR
     );
   }
-  if (isTTY && !opts.yes) {
-    const { confirm } = await import("@inquirer/prompts");
-    const ok = await confirm({
-      message: `\uC778\uC2A4\uD134\uC2A4 "${id}" \uB97C \uC0AD\uC81C\uD558\uC2DC\uACA0\uC2B5\uB2C8\uAE4C?`,
-      default: false
-    });
-    if (!ok) {
-      process.stderr.write(import_chalk3.default.yellow("\uC0AD\uC81C\uAC00 \uCDE8\uC18C\uB418\uC5C8\uC2B5\uB2C8\uB2E4.\n"));
-      return;
-    }
+  if (!repository.trim()) {
+    throw new NhnCloudCliError(
+      "repository \uC778\uC218\uAC00 \uBE44\uC5B4\uC788\uC2B5\uB2C8\uB2E4. \uC774\uBBF8\uC9C0 \uC774\uB984\uC744 \uC9C0\uC815\uD558\uC138\uC694.",
+      EXIT_PARAM_ERROR
+    );
   }
-  const { client } = await resolveInstanceClient(opts);
-  startSpinner(`\uC778\uC2A4\uD134\uC2A4 \uC0AD\uC81C \uC911... (id: ${id})`);
+  const { harbor, project } = await createHarborClient(opts, registry);
+  const repo = repository.startsWith(project + "/") ? repository.slice(project.length + 1) : repository;
+  startSpinner(`"${registry}/${repo}" \uD0DC\uADF8 \uBAA9\uB85D \uC870\uD68C \uC911...`);
+  let tagRows;
   try {
-    await client.delete(id);
+    const artifacts = await harbor.listArtifacts(project, repo);
+    tagRows = artifacts.flatMap(
+      (a) => (a.tags ?? []).map((t) => ({
+        tag: t.name,
+        push_time: t.push_time ?? a.push_time,
+        size: String(a.size ?? "")
+      }))
+    );
   } catch (err) {
     stopSpinner(false);
     throw err;
   }
   stopSpinner(true);
-  process.stderr.write(import_chalk3.default.green(`\u2713 \uC778\uC2A4\uD134\uC2A4 "${id}" \uAC00 \uC0AD\uC81C\uB418\uC5C8\uC2B5\uB2C8\uB2E4.
-`));
+  output(opts, {
+    headers: ["tag", "push_time", "size"],
+    rows: tagRows.map((r) => [r.tag, r.push_time ?? "", r.size]),
+    raw: tagRows,
+    ids: tagRows.map((r) => r.tag)
+  });
 });
 
 // src/index.ts
-var program = new import_commander11.Command();
-program.name("nhncloud").description("NHN Cloud CLI \u2014 AI agent & terminal friendly").version("0.3.0").option("--json", "JSON \uD615\uC2DD\uC73C\uB85C \uCD9C\uB825").option("--quiet", "\uCD5C\uC18C \uCD9C\uB825 (\uC790\uB3D9\uD654\uC6A9)").option("--no-color", "\uC0C9\uC0C1 \uBE44\uD65C\uC131\uD654");
+var program = new import_commander38.Command();
+program.name("nhncloud").description("NHN Cloud CLI \u2014 AI agent & terminal friendly").version("0.5.0").option("--json", "JSON \uD615\uC2DD\uC73C\uB85C \uCD9C\uB825").option("--quiet", "\uCD5C\uC18C \uCD9C\uB825 (\uC790\uB3D9\uD654\uC6A9)").option("--no-color", "\uC0C9\uC0C1 \uBE44\uD65C\uC131\uD654");
 program.hook("preAction", () => {
   const opts = program.opts();
   if (!opts.color || process.env["NO_COLOR"]) {
-    import_chalk4.default.level = 0;
+    import_chalk12.default.level = 0;
   }
   if (opts.json || opts.quiet) {
     setQuiet(true);
   }
 });
 program.addCommand(configureCommand);
-var logncrashCommand = new import_commander11.Command("logncrash").description("Log & Crash \uAD00\uB828 \uBA85\uB839");
+var logncrashCommand = new import_commander38.Command("logncrash").description("Log & Crash \uAD00\uB828 \uBA85\uB839");
 logncrashCommand.addCommand(searchCommand);
+logncrashCommand.addCommand(sendCommand);
+logncrashCommand.addCommand(exportCommand);
 program.addCommand(logncrashCommand);
-var deployCommand = new import_commander11.Command("deploy").description("NHN Cloud Deploy \uAD00\uB828 \uBA85\uB839");
+var deployCommand = new import_commander38.Command("deploy").description("NHN Cloud Deploy \uAD00\uB828 \uBA85\uB839");
 deployCommand.addCommand(runCommand);
 deployCommand.addCommand(artifactsCommand);
 deployCommand.addCommand(serverGroupsCommand);
 deployCommand.addCommand(historiesCommand);
+deployCommand.addCommand(binaryGroupsCommand);
+deployCommand.addCommand(binariesCommand);
+deployCommand.addCommand(uploadCommand);
+deployCommand.addCommand(downloadCommand);
 program.addCommand(deployCommand);
-var instanceCommand = new import_commander11.Command("instance").description("Compute \uC778\uC2A4\uD134\uC2A4 \uAD00\uB828 \uBA85\uB839");
+var instanceCommand = new import_commander38.Command("instance").description("Compute \uC778\uC2A4\uD134\uC2A4 \uAD00\uB828 \uBA85\uB839");
 instanceCommand.addCommand(listCommand);
-instanceCommand.addCommand(getCommand);
-instanceCommand.addCommand(createCommand);
-instanceCommand.addCommand(deleteCommand);
+instanceCommand.addCommand(flavorsCommand);
+instanceCommand.addCommand(availabilityZonesCommand);
+instanceCommand.addCommand(getCommand2);
+instanceCommand.addCommand(createCommand3);
+instanceCommand.addCommand(deleteCommand2);
+instanceCommand.addCommand(startCommand);
+instanceCommand.addCommand(stopCommand);
+instanceCommand.addCommand(rebootCommand);
+instanceCommand.addCommand(resizeCommand);
+instanceCommand.addCommand(resizeConfirmCommand);
+instanceCommand.addCommand(resizeRevertCommand);
+instanceCommand.addCommand(imagesCommand);
+instanceCommand.addCommand(keypairsCommand);
+instanceCommand.addCommand(keypairCommand);
+instanceCommand.addCommand(volumeCommand);
+instanceCommand.addCommand(volumesCommand);
 program.addCommand(instanceCommand);
+var networkCommand = new import_commander38.Command("network").description("VPC\xB7\uC11C\uBE0C\uB137 \uC870\uD68C");
+networkCommand.addCommand(listCommand3);
+networkCommand.addCommand(subnetCommand);
+program.addCommand(networkCommand);
+var volumeCommand2 = new import_commander38.Command("volume").description("Block Storage \uBCFC\uB968 \uAD00\uB828 \uBA85\uB839");
+volumeCommand2.addCommand(listCommand2);
+volumeCommand2.addCommand(getCommand);
+volumeCommand2.addCommand(createCommand);
+program.addCommand(volumeCommand2);
+var floatingipCommand = new import_commander38.Command("floatingip").description(
+  "Floating IP(\uC778\uC2A4\uD134\uC2A4 \uACF5\uC778 IP) \uAD00\uB9AC"
+);
+floatingipCommand.addCommand(listCommand4);
+floatingipCommand.addCommand(createCommand2);
+floatingipCommand.addCommand(deleteCommand);
+program.addCommand(floatingipCommand);
+var ncrCommand = new import_commander38.Command("ncr").description("NHN Container Registry \uAD00\uB828 \uBA85\uB839");
+ncrCommand.addCommand(listCommand5);
+ncrCommand.addCommand(getCommand3);
+ncrCommand.addCommand(imagesCommand2);
+ncrCommand.addCommand(tagsCommand);
+program.addCommand(ncrCommand);
 program.parseAsync().catch((err) => {
   const message = err instanceof Error ? err.message : String(err);
   const exitCode = err instanceof NhnCloudCliError ? err.exitCode : 1;
-  process.stderr.write(import_chalk4.default.red(`\uC624\uB958: ${message}`) + "\n");
+  process.stderr.write(import_chalk12.default.red(`\uC624\uB958: ${message}`) + "\n");
   process.exit(exitCode);
 });