@bifos/nhncloud-cli 0.4.0 → 0.5.0

package/README.md

@@ -1,7 +1,7 @@
 # nhncloud-cli
 
 NHN Cloud 서비스를 AWS CLI 방식으로 호출하는 통합 CLI.
-현재 `configure`, `logncrash search/send` (Log & Crash 로그 검색·전송), `deploy` (배포·바이너리 조회·업로드·다운로드), `instance` (Compute 인스턴스 목록·발급·전원 제어·타입 변경·키페어 관리·이미지·가용성 영역 조회·볼륨 연결 포함), `network` (VPC·서브넷 목록 조회), `volume` (Block Storage 볼륨 목록·조회·생성) 명령을 지원한다.
+현재 `configure`, `logncrash search/send` (Log & Crash 로그 검색·전송), `deploy` (배포·바이너리 조회·업로드·다운로드), `instance` (Compute 인스턴스 목록·발급·전원 제어·타입 변경·키페어 관리·이미지·가용성 영역 조회·볼륨 연결 포함), `network` (VPC·서브넷 목록 조회), `volume` (Block Storage 볼륨 목록·조회·생성), `ncr` (NHN Container Registry 레지스트리 목록·조회·이미지 목록·태그 목록) 명령을 지원한다.
 
 ## 설치
 
@@ -17,7 +17,7 @@ npm install -g @bifos/nhncloud-cli
 nhncloud configure
 ```
 
-- profile → UAK(id/secret) → logncrash appkey/secret → iaas 자격증명 순으로 입력한다.
+- profile → UAK(id/secret) → logncrash appkey/secret → iaas 자격증명 → ncr appkey 순으로 입력한다.
 - 저장 전 연결 테스트를 자동으로 수행한다 (`--no-verify` 로 생략 가능).
 - CI/자동화는 flag 로 비대화형 설정이 가능하다.
 
@@ -437,6 +437,58 @@ nhncloud floatingip delete <floatingip-id> --yes
 > **associate**: `floatingip associate <floatingip-id> <instance-id>` 는 instance→port_id 매핑 경로 미확정으로 보류 중.
 > 실측으로 경로가 확정되면 후속 task 에서 추가한다.
 
+### NHN Container Registry (NCR)
+
+NCR Management API 로 레지스트리를 조회한다.
+인증은 공통 UAK(`X-TC-AUTHENTICATION-ID/SECRET` 정적 헤더)를 재사용하며 OAuth 토큰 교환이 없다.
+appKey 는 NHN Cloud 콘솔 → Container Registry 서비스에서 확인한다.
+
+```bash
+# ncr appkey 설정 (비대화형)
+nhncloud configure --ncr-appkey <appkey>
+
+# 레지스트리 목록 조회
+nhncloud ncr list --app-key <appkey>
+
+# region 지정 (기본: kr1)
+nhncloud ncr list --region kr2 --app-key <appkey>
+
+# JSON 출력
+nhncloud ncr list --app-key <appkey> --json
+
+# 단일 레지스트리 조회 (이름 또는 ID)
+nhncloud ncr get <registry-name> --app-key <appkey>
+```
+
+appKey 를 `nhncloud configure --ncr-appkey <appkey>` 로 저장해 두면 `--app-key` 없이도 호출할 수 있다.
+
+```bash
+# configure 로 저장 후 --app-key 생략
+nhncloud configure --ncr-appkey <appkey>
+nhncloud ncr list
+nhncloud ncr get <registry-name>
+```
+
+이미지(repository)·태그는 레지스트리 데이터플레인 Harbor REST API 를 직접 호출한다.
+UAK 를 Basic Auth 로 사용하며 추가 설정은 없다.
+
+```bash
+# 이미지(repository) 목록 조회
+nhncloud ncr images <registry>
+
+# region 지정
+nhncloud ncr images <registry> --region kr2
+
+# JSON 출력
+nhncloud ncr images <registry> --json
+
+# 특정 이미지의 태그 목록 조회
+nhncloud ncr tags <registry> <repository>
+
+# JSON 출력 (태그·push_time·size)
+nhncloud ncr tags <registry> <repository> --json
+```
+
 ## 개발
 
 ```bash
@@ -445,4 +497,5 @@ pnpm run build        # tsup 단일 번들 (dist/index.js)
 pnpm tsc --noEmit     # 타입 체크
 node dist/index.js instance --help
 node dist/index.js logncrash search --help
+node dist/index.js ncr --help
 ```

package/dist/index.js

@@ -24,7 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 
 // src/index.ts
-var import_commander34 = require("commander");
+var import_commander38 = require("commander");
 var import_chalk12 = __toESM(require("chalk"));
 
 // src/utils/spinner.ts
@@ -495,6 +495,21 @@ var BLOCKSTORAGE_HOST = {
   jp1: "jp1-api-block-storage-infrastructure.nhncloudservice.com"
 };
 var IAAS_REGIONS = Object.keys(INSTANCE_HOST).join(", ");
+var NCR_HOST = {
+  kr1: "kr1-ncr.api.nhncloudservice.com",
+  kr2: "kr2-ncr.api.nhncloudservice.com",
+  kr3: "kr3-ncr.api.nhncloudservice.com"
+};
+function ncrHost(region) {
+  const host = NCR_HOST[region];
+  if (!host) {
+    throw new NhnCloudCliError(
+      `\uC9C0\uC6D0\uD558\uC9C0 \uC54A\uB294 NCR region \uC785\uB2C8\uB2E4: "${region}". \uC0AC\uC6A9 \uAC00\uB2A5\uD55C region: ${Object.keys(NCR_HOST).join(", ")}`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return host;
+}
 function instanceHost(region) {
   const host = INSTANCE_HOST[region];
   if (!host) {
@@ -740,6 +755,96 @@ var LogncrashClient = class {
   }
 };
 
+// src/services/ncr/client.ts
+var import_ky5 = __toESM(require("ky"));
+
+// src/services/ncr/types.ts
+function isRegistry(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return typeof obj["name"] === "string";
+}
+function isRepository(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return typeof obj["name"] === "string";
+}
+function isArtifact(val) {
+  return typeof val === "object" && val !== null;
+}
+
+// src/services/ncr/client.ts
+var DEFAULT_TIMEOUT_MS = 3e4;
+var NcrClient = class {
+  uakId;
+  uakSecret;
+  baseUrl;
+  constructor(uakId, uakSecret, region) {
+    this.uakId = uakId;
+    this.uakSecret = uakSecret;
+    this.baseUrl = `https://${ncrHost(region)}`;
+  }
+  authHeaders() {
+    return {
+      "X-TC-AUTHENTICATION-ID": this.uakId,
+      "X-TC-AUTHENTICATION-SECRET": this.uakSecret
+    };
+  }
+  /**
+   * 레지스트리 목록을 반환한다.
+   * GET /ncr/v2.0/appkeys/{appKey}/registries
+   * 응답: { header, registries: [...] } — body 가 아니라 named 필드.
+   */
+  async listRegistries(appKey) {
+    const url = `${this.baseUrl}/ncr/v2.0/appkeys/${encodeURIComponent(appKey)}/registries`;
+    try {
+      const res = await import_ky5.default.get(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS
+      }).json();
+      unwrapHeader(res);
+      if (!Array.isArray(res.registries)) {
+        if (res.registries === void 0) return [];
+        throw new NhnCloudCliError(
+          "NCR API \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: registries \uAC00 \uBC30\uC5F4\uC774 \uC544\uB2D9\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return res.registries.filter(isRegistry);
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 단일 레지스트리를 반환한다.
+   * GET /ncr/v2.0/appkeys/{appKey}/registries/{registryNameOrId}
+   * 응답: { header, registry: {...} } — body 가 아니라 named 필드.
+   */
+  async getRegistry(appKey, registry) {
+    const url = `${this.baseUrl}/ncr/v2.0/appkeys/${encodeURIComponent(appKey)}/registries/${encodeURIComponent(registry)}`;
+    try {
+      const res = await import_ky5.default.get(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS
+      }).json();
+      unwrapHeader(res);
+      if (res.registry && isRegistry(res.registry)) {
+        return res.registry;
+      }
+      throw new NhnCloudCliError(
+        "NCR API \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: registry \uAC1D\uCCB4\uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.",
+        EXIT_API_ERROR
+      );
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+};
+
 // src/commands/configure-verify.ts
 async function verifyUserAccessKey(uak) {
   try {
@@ -763,6 +868,19 @@ async function verifyIaas(iaas) {
     throw err;
   }
 }
+async function verifyNcr(uak, appkey) {
+  if (!appkey) return false;
+  const client = new NcrClient(uak.id, uak.secret, "kr1");
+  try {
+    await client.listRegistries(appkey);
+    return true;
+  } catch (err) {
+    if (err instanceof NhnCloudCliError && err.exitCode === EXIT_AUTH_ERROR) {
+      return false;
+    }
+    throw err;
+  }
+}
 async function verifyLogncrash(cred) {
   if (!cred.appkey || !cred.secret) return false;
   const client = new LogncrashClient(cred.appkey, cred.secret);
@@ -786,7 +904,7 @@ async function verifyLogncrash(cred) {
 }
 
 // src/commands/configure.ts
-async function saveAndVerify(profileName, uak, logncrash, iaas, doVerify) {
+async function saveAndVerify(profileName, uak, logncrash, iaas, ncr, doVerify) {
   if (doVerify) {
     if (uak) {
       const ok = await verifyUserAccessKey(uak);
@@ -821,6 +939,26 @@ async function saveAndVerify(profileName, uak, logncrash, iaas, doVerify) {
         );
       }
     }
+    if (ncr) {
+      if (uak) {
+        const appkey = ncr.appkey ?? "";
+        const ok = await verifyNcr(uak, appkey);
+        if (ok) {
+          process.stderr.write(import_chalk.default.green("  \u2713 ncr \uC5F0\uACB0 \uC131\uACF5 (kr1)\n"));
+        } else {
+          throw new NhnCloudCliError(
+            "ncr \uC778\uC99D \uC2E4\uD328 \u2014 appkey \uB610\uB294 UAK \uB97C \uD655\uC778\uD558\uC138\uC694.",
+            EXIT_AUTH_ERROR
+          );
+        }
+      } else {
+        process.stderr.write(
+          import_chalk.default.yellow(
+            "  \u26A0 ncr verify \uAC74\uB108\uB700 \u2014 \uC774\uBC88 \uC124\uC815\uC5D0 UAK \uAC00 \uC5C6\uC2B5\uB2C8\uB2E4. ncr \uBA85\uB839\uC740 \uACF5\uD1B5 UAK \uAC00 \uD544\uC694\uD558\uB2C8 \uBA3C\uC800 \uC124\uC815\uD558\uC138\uC694.\n"
+          )
+        );
+      }
+    }
   }
   if (uak) {
     await setUserAccessKey(profileName, uak);
@@ -831,6 +969,9 @@ async function saveAndVerify(profileName, uak, logncrash, iaas, doVerify) {
   if (iaas) {
     await setIaasCredential(profileName, iaas);
   }
+  if (ncr) {
+    await setServiceCredential(profileName, "ncr", ncr);
+  }
   process.stderr.write(import_chalk.default.green(`
 \u2713 profile "${profileName}" \uC124\uC815\uC774 \uC800\uC7A5\uB418\uC5C8\uC2B5\uB2C8\uB2E4.
 `));
@@ -890,12 +1031,25 @@ async function runInteractive(opts) {
     });
     iaas = { tenantId, username: iaasUsername, password: iaasPassword, region };
   }
+  let ncr;
+  const setupNcr = await confirm({
+    message: "ncr \uC790\uACA9\uC99D\uBA85\uB3C4 \uC124\uC815\uD558\uC2DC\uACA0\uC2B5\uB2C8\uAE4C?",
+    default: false
+  });
+  if (setupNcr) {
+    process.stderr.write(import_chalk.default.gray("\n\u2014 ncr (Container Registry) \uC790\uACA9\uC99D\uBA85 \u2014\n"));
+    const ncrAppkey = await input({
+      message: "ncr appkey",
+      validate: (v) => v.trim().length > 0 || "ncr appkey \uB97C \uC785\uB825\uD558\uC138\uC694"
+    });
+    ncr = { appkey: ncrAppkey.trim() };
+  }
   if (opts.verify) {
     process.stderr.write(import_chalk.default.gray("\n\u2014 \uC5F0\uACB0 \uD14C\uC2A4\uD2B8 \uC911\u2026 \u2014\n"));
   }
   if (opts.verify) {
     try {
-      await saveAndVerify(profileName, uak, logncrash, iaas, true);
+      await saveAndVerify(profileName, uak, logncrash, iaas, ncr, true);
     } catch (err) {
       if (err instanceof NhnCloudCliError && err.exitCode === EXIT_AUTH_ERROR) {
         process.stderr.write(import_chalk.default.red(`  \u2717 ${err.message}
@@ -908,13 +1062,13 @@ async function runInteractive(opts) {
           process.stderr.write(import_chalk.default.yellow("\uC800\uC7A5\uC774 \uCDE8\uC18C\uB418\uC5C8\uC2B5\uB2C8\uB2E4.\n"));
           return;
         }
-        await saveAndVerify(profileName, uak, logncrash, iaas, false);
+        await saveAndVerify(profileName, uak, logncrash, iaas, ncr, false);
       } else {
         throw err;
       }
     }
   } else {
-    await saveAndVerify(profileName, uak, logncrash, iaas, false);
+    await saveAndVerify(profileName, uak, logncrash, iaas, ncr, false);
   }
 }
 async function runNonInteractive(opts) {
@@ -930,22 +1084,23 @@ async function runNonInteractive(opts) {
     password: iaasPassword,
     region: opts.iaasRegion ?? "kr1"
   } : void 0;
-  if (!uak && !logncrash && !iaas) {
+  const ncr = opts.ncrAppkey?.trim() ? { appkey: opts.ncrAppkey.trim() } : void 0;
+  if (!uak && !logncrash && !iaas && !ncr) {
     throw new NhnCloudCliError(
-      "\uBE44\uB300\uD654\uD615 \uBAA8\uB4DC: --uak-id + UAK secret, --logncrash-appkey + logncrash secret,\n\uB610\uB294 --iaas-tenant-id + --iaas-username + iaas password \uC911 \uD558\uB098\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.\nsecret/password \uB294 \uB178\uCD9C \uBC29\uC9C0\uB97C \uC704\uD574 \uD658\uACBD\uBCC0\uC218 \uAD8C\uC7A5:\nNHNCLOUD_UAK_SECRET / NHNCLOUD_LOGNCRASH_SECRET / NHNCLOUD_IAAS_PASSWORD.",
+      "\uBE44\uB300\uD654\uD615 \uBAA8\uB4DC: --uak-id + UAK secret, --logncrash-appkey + logncrash secret,\n--iaas-tenant-id + --iaas-username + iaas password,\n\uB610\uB294 --ncr-appkey \uC911 \uD558\uB098\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.\nsecret/password \uB294 \uB178\uCD9C \uBC29\uC9C0\uB97C \uC704\uD574 \uD658\uACBD\uBCC0\uC218 \uAD8C\uC7A5:\nNHNCLOUD_UAK_SECRET / NHNCLOUD_LOGNCRASH_SECRET / NHNCLOUD_IAAS_PASSWORD.",
       EXIT_PARAM_ERROR
     );
   }
   if (opts.verify) {
     process.stderr.write(import_chalk.default.gray("\uC5F0\uACB0 \uD14C\uC2A4\uD2B8 \uC911\u2026\n"));
   }
-  await saveAndVerify(profileName, uak, logncrash, iaas, opts.verify);
+  await saveAndVerify(profileName, uak, logncrash, iaas, ncr, opts.verify);
 }
 var configureCommand = new import_commander.Command("configure").description("\uC790\uACA9\uC99D\uBA85 \uC124\uC815 \uB9C8\uBC95\uC0AC (\uB300\uD654\uD615 + flag)").option("--profile <name>", "\uB300\uC0C1 profile \uC774\uB984 (\uAE30\uBCF8: default)").option("--uak-id <id>", "\uAC1C\uC778 UAK ID (\uBE44\uB300\uD654\uD615)").option("--uak-secret <secret>", "\uAC1C\uC778 UAK Secret (\uBE44\uB300\uD654\uD615, \uB178\uCD9C \uBC29\uC9C0\uB85C env NHNCLOUD_UAK_SECRET \uAD8C\uC7A5)").option("--logncrash-appkey <key>", "logncrash appkey (\uBE44\uB300\uD654\uD615)").option("--logncrash-secret <secret>", "logncrash secret (\uBE44\uB300\uD654\uD615, env NHNCLOUD_LOGNCRASH_SECRET \uAD8C\uC7A5)").option("--iaas-tenant-id <id>", "iaas tenantId / \uD504\uB85C\uC81D\uD2B8 ID (\uBE44\uB300\uD654\uD615)").option("--iaas-username <user>", "iaas IAM username (\uBE44\uB300\uD654\uD615)").option(
   "--iaas-password <pass>",
   "iaas API \uBE44\uBC00\uBC88\uD638 (\uBE44\uB300\uD654\uD615, \uB178\uCD9C \uBC29\uC9C0\uB85C env NHNCLOUD_IAAS_PASSWORD \uAD8C\uC7A5)"
-).option("--iaas-region <region>", "iaas region (\uAE30\uBCF8: kr1)", "kr1").option("--no-verify", "\uC5F0\uACB0 \uD14C\uC2A4\uD2B8 \uC0DD\uB7B5").action(async (opts) => {
-  const hasFlag = opts.uakId || opts.uakSecret || opts.logncrashAppkey || opts.logncrashSecret || opts.iaasTenantId || opts.iaasUsername || opts.iaasPassword;
+).option("--iaas-region <region>", "iaas region (\uAE30\uBCF8: kr1)", "kr1").option("--ncr-appkey <key>", "ncr appkey (\uBE44\uB300\uD654\uD615)").option("--no-verify", "\uC5F0\uACB0 \uD14C\uC2A4\uD2B8 \uC0DD\uB7B5").action(async (opts) => {
+  const hasFlag = opts.uakId || opts.uakSecret || opts.logncrashAppkey || opts.logncrashSecret || opts.iaasTenantId || opts.iaasUsername || opts.iaasPassword || opts.ncrAppkey;
   try {
     if (hasFlag) {
       await runNonInteractive(opts);
@@ -1375,7 +1530,7 @@ async function scrollNextOrExpire(client, scrollKey) {
 var import_commander5 = require("commander");
 
 // src/services/deploy/client.ts
-var import_ky5 = __toESM(require("ky"));
+var import_ky6 = __toESM(require("ky"));
 function isBinaryGroup(val) {
   if (typeof val !== "object" || val === null) return false;
   const obj = val;
@@ -1390,7 +1545,7 @@ function isBinary(val) {
   return (binaryKeyType === "number" || binaryKeyType === "string") && (binarySizeType === "number" || binarySizeType === "string");
 }
 var SYNC_TIMEOUT_MS = 6e5;
-var DEFAULT_TIMEOUT_MS = 3e4;
+var DEFAULT_TIMEOUT_MS2 = 3e4;
 var DeployClient = class {
   accessToken;
   baseUrl;
@@ -1422,14 +1577,14 @@ var DeployClient = class {
       payload["targetServerHostnames"] = params.targetHosts;
     }
     try {
-      const res = await import_ky5.default.post(url, {
+      const res = await import_ky6.default.post(url, {
         headers: {
           ...this.authHeaders(),
           "Content-Type": "application/json"
         },
         json: payload,
         retry: 0,
-        timeout: isAsync ? DEFAULT_TIMEOUT_MS : SYNC_TIMEOUT_MS
+        timeout: isAsync ? DEFAULT_TIMEOUT_MS2 : SYNC_TIMEOUT_MS
       }).json();
       return unwrap(res);
     } catch (err) {
@@ -1442,10 +1597,10 @@ var DeployClient = class {
   async artifacts(appKey) {
     const url = `${this.baseUrl}/api/v2.1/projects/${encodeURIComponent(appKey)}/artifacts`;
     try {
-      const res = await import_ky5.default.get(url, {
+      const res = await import_ky6.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS
+        timeout: DEFAULT_TIMEOUT_MS2
       }).json();
       return unwrap(res);
     } catch (err) {
@@ -1458,10 +1613,10 @@ var DeployClient = class {
   async serverGroups(appKey, artifactId) {
     const url = `${this.baseUrl}/api/v2.1/projects/${encodeURIComponent(appKey)}/artifacts/${encodeURIComponent(artifactId)}/server-groups`;
     try {
-      const res = await import_ky5.default.get(url, {
+      const res = await import_ky6.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS
+        timeout: DEFAULT_TIMEOUT_MS2
       }).json();
       return unwrap(res);
     } catch (err) {
@@ -1474,10 +1629,10 @@ var DeployClient = class {
   async histories(appKey, artifactId) {
     const url = `${this.baseUrl}/api/v2.1/projects/${encodeURIComponent(appKey)}/artifacts/${encodeURIComponent(artifactId)}/deploy-histories`;
     try {
-      const res = await import_ky5.default.get(url, {
+      const res = await import_ky6.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS
+        timeout: DEFAULT_TIMEOUT_MS2
       }).json();
       return unwrap(res);
     } catch (err) {
@@ -1490,10 +1645,10 @@ var DeployClient = class {
   async binaryGroups(appKey, artifactId) {
     const url = `${this.baseUrl}/api/v2.1/projects/${encodeURIComponent(appKey)}/artifacts/${encodeURIComponent(artifactId)}/binary-groups`;
     try {
-      const res = await import_ky5.default.get(url, {
+      const res = await import_ky6.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS
+        timeout: DEFAULT_TIMEOUT_MS2
       }).json();
       const body = unwrap(res);
       const list = body.binaryGroups;
@@ -1520,11 +1675,11 @@ var DeployClient = class {
     if (params.sortKey !== void 0) searchParams["sortKey"] = params.sortKey;
     if (params.sortDirection !== void 0) searchParams["sortDirection"] = params.sortDirection;
     try {
-      const res = await import_ky5.default.get(url, {
+      const res = await import_ky6.default.get(url, {
         headers: this.authHeaders(),
         searchParams,
         retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS
+        timeout: DEFAULT_TIMEOUT_MS2
       }).json();
       const body = unwrap(res);
       const list = body.binaries;
@@ -1562,7 +1717,7 @@ var DeployClient = class {
       form.append("description", params.description);
     }
     try {
-      const res = await import_ky5.default.post(url, {
+      const res = await import_ky6.default.post(url, {
         headers: this.authHeaders(),
         // 인증 헤더만 — multipart boundary 는 ky 가 자동 설정
         body: form,
@@ -1598,7 +1753,7 @@ var DeployClient = class {
   async downloadBinary(appKey, artifactId, binaryGroupKey, binaryKey) {
     const url = `${this.baseUrl}/api/v2.1/projects/${encodeURIComponent(appKey)}/artifacts/${encodeURIComponent(artifactId)}/binary-group/${binaryGroupKey}/binaries/${binaryKey}`;
     try {
-      const ab = await import_ky5.default.get(url, {
+      const ab = await import_ky6.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
         timeout: SYNC_TIMEOUT_MS
@@ -1974,8 +2129,8 @@ var downloadCommand = new import_commander12.Command("download").description("\u
 var import_commander13 = require("commander");
 
 // src/services/instance/client.ts
-var import_ky6 = __toESM(require("ky"));
-var DEFAULT_TIMEOUT_MS2 = 3e4;
+var import_ky7 = __toESM(require("ky"));
+var DEFAULT_TIMEOUT_MS3 = 3e4;
 var DEFAULT_POLL_INTERVAL_MS = 5e3;
 function isServer(val) {
   if (typeof val !== "object" || val === null) return false;
@@ -2104,10 +2259,10 @@ var InstanceClient = class {
   async list() {
     const url = `${this.computeEndpoint}/servers/detail`;
     try {
-      const raw = await import_ky6.default.get(url, {
+      const raw = await import_ky7.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS2
+        timeout: DEFAULT_TIMEOUT_MS3
       }).json();
       if (!isServersResponse(raw)) {
         throw new NhnCloudCliError(
@@ -2126,10 +2281,10 @@ var InstanceClient = class {
   async get(id) {
     const url = `${this.computeEndpoint}/servers/${encodeURIComponent(id)}`;
     try {
-      const raw = await import_ky6.default.get(url, {
+      const raw = await import_ky7.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS2
+        timeout: DEFAULT_TIMEOUT_MS3
       }).json();
       if (!isServerResponse(raw)) {
         throw new NhnCloudCliError(
@@ -2185,11 +2340,11 @@ var InstanceClient = class {
     }
     let raw;
     try {
-      raw = await import_ky6.default.post(url, {
+      raw = await import_ky7.default.post(url, {
         headers: this.authHeaders(),
         json: { server: serverBody },
         retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS2
+        timeout: DEFAULT_TIMEOUT_MS3
       }).json();
     } catch (err) {
       throw toNhnCloudCliError(err);
@@ -2208,10 +2363,10 @@ var InstanceClient = class {
   async delete(id) {
     const url = `${this.computeEndpoint}/servers/${encodeURIComponent(id)}`;
     try {
-      await import_ky6.default.delete(url, {
+      await import_ky7.default.delete(url, {
         headers: this.authHeaders(),
         retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS2
+        timeout: DEFAULT_TIMEOUT_MS3
       });
     } catch (err) {
       throw toNhnCloudCliError(err);
@@ -2226,11 +2381,11 @@ var InstanceClient = class {
   async serverAction(id, payload) {
     const url = `${this.computeEndpoint}/servers/${encodeURIComponent(id)}/action`;
     try {
-      await import_ky6.default.post(url, {
+      await import_ky7.default.post(url, {
         headers: this.authHeaders(),
         json: payload,
         retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS2
+        timeout: DEFAULT_TIMEOUT_MS3
       });
     } catch (err) {
       throw toNhnCloudCliError(err);
@@ -2271,11 +2426,11 @@ var InstanceClient = class {
     if (params.minDisk !== void 0) searchParams["minDisk"] = params.minDisk;
     if (params.minRam !== void 0) searchParams["minRam"] = params.minRam;
     try {
-      const raw = await import_ky6.default.get(url, {
+      const raw = await import_ky7.default.get(url, {
         headers: this.authHeaders(),
         searchParams,
         retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS2
+        timeout: DEFAULT_TIMEOUT_MS3
       }).json();
       if (params.detail) {
         if (!isFlavorDetailsResponse(raw)) {
@@ -2304,10 +2459,10 @@ var InstanceClient = class {
   async listAvailabilityZones() {
     const url = `${this.computeEndpoint}/os-availability-zone`;
     try {
-      const raw = await import_ky6.default.get(url, {
+      const raw = await import_ky7.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS2
+        timeout: DEFAULT_TIMEOUT_MS3
       }).json();
       if (!isAvailabilityZonesResponse(raw)) {
         throw new NhnCloudCliError(
@@ -2324,7 +2479,7 @@ var InstanceClient = class {
   async listKeypairs() {
     const url = `${this.computeEndpoint}/os-keypairs`;
     try {
-      const raw = await import_ky6.default.get(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS2 }).json();
+      const raw = await import_ky7.default.get(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS3 }).json();
       if (!isKeypairsResponse(raw)) {
         throw new NhnCloudCliError(
           "instance keypairs \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 keypairs \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
@@ -2340,7 +2495,7 @@ var InstanceClient = class {
   async getKeypair(name) {
     const url = `${this.computeEndpoint}/os-keypairs/${encodeURIComponent(name)}`;
     try {
-      const raw = await import_ky6.default.get(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS2 }).json();
+      const raw = await import_ky7.default.get(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS3 }).json();
       if (!isKeypairDetailResponse(raw)) {
         throw new NhnCloudCliError(
           `instance keypair get(${name}) \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 keypair \uC0C1\uC138 \uD544\uB4DC\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.`,
@@ -2365,11 +2520,11 @@ var InstanceClient = class {
     }
     let raw;
     try {
-      raw = await import_ky6.default.post(url, {
+      raw = await import_ky7.default.post(url, {
         headers: this.authHeaders(),
         json: { keypair: keypairBody },
         retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS2
+        timeout: DEFAULT_TIMEOUT_MS3
       }).json();
     } catch (err) {
       throw toNhnCloudCliError(err);
@@ -2394,7 +2549,7 @@ var InstanceClient = class {
   async deleteKeypair(name) {
     const url = `${this.computeEndpoint}/os-keypairs/${encodeURIComponent(name)}`;
     try {
-      await import_ky6.default.delete(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS2 });
+      await import_ky7.default.delete(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS3 });
     } catch (err) {
       throw toNhnCloudCliError(err);
     }
@@ -2414,11 +2569,11 @@ var InstanceClient = class {
     if (params.owner !== void 0) searchParams["owner"] = params.owner;
     if (params.status !== void 0) searchParams["status"] = params.status;
     try {
-      const raw = await import_ky6.default.get(url, {
+      const raw = await import_ky7.default.get(url, {
         headers: this.authHeaders(),
         searchParams,
         retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS2
+        timeout: DEFAULT_TIMEOUT_MS3
       }).json();
       if (!isImagesResponse(raw)) {
         throw new NhnCloudCliError(
@@ -2438,7 +2593,7 @@ var InstanceClient = class {
   async listVolumeAttachments(serverId) {
     const url = `${this.computeEndpoint}/servers/${encodeURIComponent(serverId)}/os-volume_attachments`;
     try {
-      const raw = await import_ky6.default.get(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS2 }).json();
+      const raw = await import_ky7.default.get(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS3 }).json();
       if (!isVolumeAttachmentsResponse(raw)) {
         throw new NhnCloudCliError(
           "instance volumes \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 volumeAttachments \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
@@ -2457,11 +2612,11 @@ var InstanceClient = class {
   async attachVolume(serverId, volumeId) {
     const url = `${this.computeEndpoint}/servers/${encodeURIComponent(serverId)}/os-volume_attachments`;
     try {
-      const res = await import_ky6.default.post(url, {
+      const res = await import_ky7.default.post(url, {
         headers: this.authHeaders(),
         json: { volumeAttachment: { volumeId } },
         retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS2
+        timeout: DEFAULT_TIMEOUT_MS3
       });
       if (res.status === 202 || res.headers.get("content-length") === "0") {
         return { id: volumeId, volumeId, serverId, device: "" };
@@ -2485,7 +2640,7 @@ var InstanceClient = class {
   async detachVolume(serverId, volumeId) {
     const url = `${this.computeEndpoint}/servers/${encodeURIComponent(serverId)}/os-volume_attachments/${encodeURIComponent(volumeId)}`;
     try {
-      await import_ky6.default.delete(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS2 });
+      await import_ky7.default.delete(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS3 });
     } catch (err) {
       throw toNhnCloudCliError(err);
     }
@@ -2555,8 +2710,8 @@ var listCommand = new import_commander13.Command("list").description("\uC778\uC2
 var import_commander14 = require("commander");
 
 // src/services/blockstorage/client.ts
-var import_ky7 = __toESM(require("ky"));
-var DEFAULT_TIMEOUT_MS3 = 3e4;
+var import_ky8 = __toESM(require("ky"));
+var DEFAULT_TIMEOUT_MS4 = 3e4;
 function isVolume(val) {
   if (typeof val !== "object" || val === null) return false;
   const obj = val;
@@ -2592,7 +2747,7 @@ var BlockStorageClient = class {
     if (params?.offset !== void 0) searchParams["offset"] = params.offset;
     if (params?.marker !== void 0) searchParams["marker"] = params.marker;
     try {
-      const raw = await import_ky7.default.get(url, { headers: this.authHeaders(), searchParams, retry: 0, timeout: DEFAULT_TIMEOUT_MS3 }).json();
+      const raw = await import_ky8.default.get(url, { headers: this.authHeaders(), searchParams, retry: 0, timeout: DEFAULT_TIMEOUT_MS4 }).json();
       if (!isVolumesResponse(raw)) {
         throw new NhnCloudCliError(
           "volume list \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 volumes \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
@@ -2607,7 +2762,7 @@ var BlockStorageClient = class {
   async get(id) {
     const url = `${this.endpoint}/volumes/${encodeURIComponent(id)}`;
     try {
-      const raw = await import_ky7.default.get(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS3 }).json();
+      const raw = await import_ky8.default.get(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS4 }).json();
       if (!isVolumeResponse(raw)) {
         throw new NhnCloudCliError(
           "volume get \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 volume \uAC1D\uCCB4\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.",
@@ -2627,11 +2782,11 @@ var BlockStorageClient = class {
     if (params.volume_type !== void 0) volumeBody["volume_type"] = params.volume_type;
     if (params.snapshot_id !== void 0) volumeBody["snapshot_id"] = params.snapshot_id;
     try {
-      const raw = await import_ky7.default.post(url, {
+      const raw = await import_ky8.default.post(url, {
         headers: this.authHeaders(),
         json: { volume: volumeBody },
         retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS3
+        timeout: DEFAULT_TIMEOUT_MS4
       }).json();
       if (!isVolumeResponse(raw)) {
         throw new NhnCloudCliError(
@@ -2780,8 +2935,8 @@ var createCommand = new import_commander16.Command("create").description("\uBCFC
 var import_commander17 = require("commander");
 
 // src/services/network/client.ts
-var import_ky8 = __toESM(require("ky"));
-var DEFAULT_TIMEOUT_MS4 = 3e4;
+var import_ky9 = __toESM(require("ky"));
+var DEFAULT_TIMEOUT_MS5 = 3e4;
 function isVpc(val) {
   if (typeof val !== "object" || val === null) return false;
   const obj = val;
@@ -2834,10 +2989,10 @@ var NetworkClient = class {
   async listVpcs() {
     const url = `${this.networkEndpoint}/vpcs`;
     try {
-      const raw = await import_ky8.default.get(url, {
+      const raw = await import_ky9.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS4
+        timeout: DEFAULT_TIMEOUT_MS5
       }).json();
       if (!isVpcsResponse(raw)) {
         throw new NhnCloudCliError(
@@ -2856,10 +3011,10 @@ var NetworkClient = class {
   async listSubnets() {
     const url = `${this.networkEndpoint}/vpcsubnets`;
     try {
-      const raw = await import_ky8.default.get(url, {
+      const raw = await import_ky9.default.get(url, {
         headers: this.authHeaders(),
         retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS4
+        timeout: DEFAULT_TIMEOUT_MS5
       }).json();
       if (!isSubnetsResponse(raw)) {
         throw new NhnCloudCliError(
@@ -2876,7 +3031,7 @@ var NetworkClient = class {
   async listFloatingIps() {
     const url = `${this.networkEndpoint}/floatingips`;
     try {
-      const raw = await import_ky8.default.get(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS4 }).json();
+      const raw = await import_ky9.default.get(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS5 }).json();
       if (!isFloatingIpsResponse(raw)) {
         throw new NhnCloudCliError(
           "floatingip list \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 floatingips \uBC30\uC5F4\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
@@ -2892,11 +3047,11 @@ var NetworkClient = class {
   async createFloatingIp(params) {
     const url = `${this.networkEndpoint}/floatingips`;
     try {
-      const raw = await import_ky8.default.post(url, {
+      const raw = await import_ky9.default.post(url, {
         headers: this.authHeaders(),
         json: { floatingip: { floating_network_id: params.floating_network_id } },
         retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS4
+        timeout: DEFAULT_TIMEOUT_MS5
       }).json();
       if (!isFloatingIpResponse(raw)) {
         throw new NhnCloudCliError(
@@ -2913,7 +3068,7 @@ var NetworkClient = class {
   async deleteFloatingIp(id) {
     const url = `${this.networkEndpoint}/floatingips/${encodeURIComponent(id)}`;
     try {
-      await import_ky8.default.delete(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS4 });
+      await import_ky9.default.delete(url, { headers: this.authHeaders(), retry: 0, timeout: DEFAULT_TIMEOUT_MS5 });
     } catch (err) {
       throw toNhnCloudCliError(err);
     }
@@ -2927,11 +3082,11 @@ var NetworkClient = class {
   async findExternalNetworkId() {
     const url = `${this.networkEndpoint}/vpcs`;
     try {
-      const raw = await import_ky8.default.get(url, {
+      const raw = await import_ky9.default.get(url, {
         headers: this.authHeaders(),
         searchParams: { "router:external": "true" },
         retry: 0,
-        timeout: DEFAULT_TIMEOUT_MS4
+        timeout: DEFAULT_TIMEOUT_MS5
       }).json();
       if (typeof raw !== "object" || raw === null) return null;
       const vpcs = raw["vpcs"];
@@ -3779,9 +3934,280 @@ var volumesCommand = new import_commander33.Command("volumes").description("\uC7
   });
 });
 
+// src/commands/ncr/list.ts
+var import_commander34 = require("commander");
+
+// src/services/ncr/harbor-client.ts
+var import_ky10 = __toESM(require("ky"));
+var DEFAULT_TIMEOUT_MS6 = 3e4;
+var PAGE_SIZE = 100;
+var MAX_PAGES = 1e3;
+var HarborClient = class {
+  uakId;
+  uakSecret;
+  host;
+  constructor(uakId, uakSecret, host) {
+    this.uakId = uakId;
+    this.uakSecret = uakSecret;
+    this.host = host;
+  }
+  basicAuthHeaders() {
+    const token = Buffer.from(`${this.uakId}:${this.uakSecret}`).toString("base64");
+    return { Authorization: `Basic ${token}` };
+  }
+  /**
+   * Harbor REST 페이지네이션 전수 수집 (ADR-017 — silent truncation 방지).
+   *
+   * Harbor 응답 Link: <...?page=N+1...>; rel="next" 헤더가 없으면 종료.
+   * ky.get() 이 Response 를 반환하므로 .json() 과 .headers.get("link") 를 함께 사용한다
+   * (체이닝하면 헤더를 못 본다 — 기존 NCR client 의 .json<T>() 체이닝 패턴과 다름).
+   */
+  async getAllPages(path) {
+    const acc = [];
+    let page = 1;
+    try {
+      for (; ; ) {
+        const url = `https://${this.host}${path}?page=${page}&page_size=${PAGE_SIZE}`;
+        const res = await import_ky10.default.get(url, {
+          headers: this.basicAuthHeaders(),
+          retry: 0,
+          timeout: DEFAULT_TIMEOUT_MS6
+        });
+        const data = await res.json();
+        if (!Array.isArray(data)) {
+          throw new NhnCloudCliError(
+            "Harbor REST \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: \uBC30\uC5F4\uC774 \uC544\uB2D9\uB2C8\uB2E4.",
+            EXIT_API_ERROR
+          );
+        }
+        acc.push(...data);
+        const link = res.headers.get("link");
+        if (!link || !link.includes('rel="next"')) break;
+        page++;
+        if (page > MAX_PAGES) {
+          throw new NhnCloudCliError(
+            `Harbor pagination \uCD5C\uB300 \uD398\uC774\uC9C0(${MAX_PAGES}) \uCD08\uACFC \u2014 \uBE44\uC815\uC0C1 \uC751\uB2F5\uC73C\uB85C \uC911\uB2E8\uD569\uB2C8\uB2E4.`,
+            EXIT_API_ERROR
+          );
+        }
+      }
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+    return acc;
+  }
+  /**
+   * 프로젝트(레지스트리)의 repository(이미지) 목록을 반환한다.
+   * GET /api/v2.0/projects/{project}/repositories
+   */
+  async listRepositories(project) {
+    const enc = encodeURIComponent(project);
+    const data = await this.getAllPages(`/api/v2.0/projects/${enc}/repositories`);
+    return data.filter(isRepository);
+  }
+  /**
+   * repository 의 artifact 목록을 반환한다.
+   * GET /api/v2.0/projects/{project}/repositories/{repository}/artifacts
+   * repository 의 '/' 는 %2F 로 인코딩(path-traversal 방지).
+   */
+  async listArtifacts(project, repository) {
+    const encProject = encodeURIComponent(project);
+    const encRepo = encodeURIComponent(repository);
+    const data = await this.getAllPages(
+      `/api/v2.0/projects/${encProject}/repositories/${encRepo}/artifacts`
+    );
+    return data.filter(isArtifact);
+  }
+};
+
+// src/commands/ncr/helpers.ts
+async function createNcrClient(opts) {
+  const profileName = await resolveProfileName(opts.profile);
+  const uak = await getUserAccessKey(profileName);
+  const region = opts.region ?? "kr1";
+  return { client: new NcrClient(uak.id, uak.secret, region), profileName };
+}
+async function resolveAppKey(profileName, appKeyOpt) {
+  if (appKeyOpt) return appKeyOpt;
+  let cred;
+  try {
+    cred = await getServiceCredential("ncr", profileName);
+  } catch (err) {
+    if (!(err instanceof NhnCloudCliError) || err.exitCode !== EXIT_CONFIG_ERROR) {
+      throw err;
+    }
+  }
+  if (!cred?.appkey) {
+    throw new NhnCloudCliError(
+      "NCR appKey \uAC00 \uC5C6\uC2B5\uB2C8\uB2E4. --app-key \uC635\uC158\uC73C\uB85C \uC9C0\uC815\uD558\uAC70\uB098\nnhncloud configure --ncr-appkey <key> \uB97C \uC2E4\uD589\uD574 \uC124\uC815\uD558\uC138\uC694.",
+      EXIT_CONFIG_ERROR
+    );
+  }
+  return cred.appkey;
+}
+async function createHarborClient(opts, registryArg) {
+  const { client: ncrClient, profileName } = await createNcrClient(opts);
+  const appKey = await resolveAppKey(profileName, opts.appKey);
+  const uak = await getUserAccessKey(profileName);
+  const reg = await ncrClient.getRegistry(appKey, registryArg);
+  const host = parseHarborHost(reg.uri);
+  const project = typeof reg.name === "string" ? reg.name : registryArg;
+  return { harbor: new HarborClient(uak.id, uak.secret, host), project };
+}
+function parseHarborHost(uri) {
+  if (!uri) {
+    throw new NhnCloudCliError(
+      "\uB808\uC9C0\uC2A4\uD2B8\uB9AC uri \uAC00 \uC5C6\uC5B4 \uC774\uBBF8\uC9C0 host \uB97C \uD574\uC11D\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.",
+      EXIT_API_ERROR
+    );
+  }
+  const noScheme = uri.replace(/^https?:\/\//, "");
+  const host = noScheme.split("/")[0];
+  if (!host) {
+    throw new NhnCloudCliError(
+      "\uB808\uC9C0\uC2A4\uD2B8\uB9AC uri \uD615\uC2DD \uC624\uB958 \u2014 host \uCD94\uCD9C \uC2E4\uD328.",
+      EXIT_API_ERROR
+    );
+  }
+  return host;
+}
+
+// src/commands/ncr/list.ts
+var listCommand5 = new import_commander34.Command("list").description("NCR \uB808\uC9C0\uC2A4\uD2B8\uB9AC \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").option("--region <region>", "NCR region (\uAE30\uBCF8: kr1)", "kr1").option("--app-key <key>", "NCR appKey (profile \uC758 ncr.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client, profileName } = await createNcrClient(opts);
+  const appKey = await resolveAppKey(profileName, opts.appKey);
+  startSpinner("\uB808\uC9C0\uC2A4\uD2B8\uB9AC \uBAA9\uB85D \uC870\uD68C \uC911...");
+  let registries;
+  try {
+    registries = await client.listRegistries(appKey);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["name", "repo_count", "uri"],
+    rows: registries.map((r) => [
+      r.name,
+      String(r.repo_count ?? ""),
+      r.uri ?? ""
+    ]),
+    raw: registries,
+    ids: registries.map((r) => r.name)
+  });
+});
+
+// src/commands/ncr/get.ts
+var import_commander35 = require("commander");
+var getCommand3 = new import_commander35.Command("get").description("\uB2E8\uC77C NCR \uB808\uC9C0\uC2A4\uD2B8\uB9AC\uB97C \uC870\uD68C\uD55C\uB2E4").argument("<registry>", "\uB808\uC9C0\uC2A4\uD2B8\uB9AC \uC774\uB984 \uB610\uB294 ID").option("--region <region>", "NCR region (\uAE30\uBCF8: kr1)", "kr1").option("--app-key <key>", "NCR appKey (profile \uC758 ncr.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (registry, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  if (!registry.trim()) {
+    throw new NhnCloudCliError(
+      "registry \uC778\uC218\uAC00 \uBE44\uC5B4\uC788\uC2B5\uB2C8\uB2E4. \uB808\uC9C0\uC2A4\uD2B8\uB9AC \uC774\uB984 \uB610\uB294 ID \uB97C \uC9C0\uC815\uD558\uC138\uC694.",
+      EXIT_PARAM_ERROR
+    );
+  }
+  const { client, profileName } = await createNcrClient(opts);
+  const appKey = await resolveAppKey(profileName, opts.appKey);
+  startSpinner(`\uB808\uC9C0\uC2A4\uD2B8\uB9AC "${registry}" \uC870\uD68C \uC911...`);
+  let reg;
+  try {
+    reg = await client.getRegistry(appKey, registry);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["name", "repo_count", "uri", "private_uri"],
+    rows: [[reg.name, String(reg.repo_count ?? ""), reg.uri ?? "", reg.private_uri ?? ""]],
+    raw: reg,
+    ids: [reg.name]
+  });
+});
+
+// src/commands/ncr/images.ts
+var import_commander36 = require("commander");
+var imagesCommand2 = new import_commander36.Command("images").description("\uB808\uC9C0\uC2A4\uD2B8\uB9AC\uC758 \uC774\uBBF8\uC9C0(repository) \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<registry>", "\uB808\uC9C0\uC2A4\uD2B8\uB9AC \uC774\uB984").option("--region <region>", "NCR region (\uAE30\uBCF8: kr1)", "kr1").option("--app-key <key>", "NCR appKey (profile \uC758 ncr.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (registry, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  if (!registry.trim()) {
+    throw new NhnCloudCliError(
+      "registry \uC778\uC218\uAC00 \uBE44\uC5B4\uC788\uC2B5\uB2C8\uB2E4. \uB808\uC9C0\uC2A4\uD2B8\uB9AC \uC774\uB984\uC744 \uC9C0\uC815\uD558\uC138\uC694.",
+      EXIT_PARAM_ERROR
+    );
+  }
+  const { harbor, project } = await createHarborClient(opts, registry);
+  startSpinner(`"${registry}" \uC774\uBBF8\uC9C0 \uBAA9\uB85D \uC870\uD68C \uC911...`);
+  let repos;
+  try {
+    repos = await harbor.listRepositories(project);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  const rows = repos.map((r) => {
+    const short = r.name.startsWith(project + "/") ? r.name.slice(project.length + 1) : r.name;
+    return [short, String(r.artifact_count ?? ""), String(r.pull_count ?? "")];
+  });
+  const ids = repos.map(
+    (r) => r.name.startsWith(project + "/") ? r.name.slice(project.length + 1) : r.name
+  );
+  output(opts, {
+    headers: ["repository", "artifact_count", "pull_count"],
+    rows,
+    raw: repos,
+    ids
+  });
+});
+
+// src/commands/ncr/tags.ts
+var import_commander37 = require("commander");
+var tagsCommand = new import_commander37.Command("tags").description("\uD2B9\uC815 \uC774\uBBF8\uC9C0\uC758 \uD0DC\uADF8 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<registry>", "\uB808\uC9C0\uC2A4\uD2B8\uB9AC \uC774\uB984").argument("<repository>", "\uC774\uBBF8\uC9C0(repository) \uC774\uB984 (\uC9E7\uC740 \uC774\uB984 \uB610\uB294 {project}/{repo})").option("--region <region>", "NCR region (\uAE30\uBCF8: kr1)", "kr1").option("--app-key <key>", "NCR appKey (profile \uC758 ncr.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (registry, repository, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  if (!registry.trim()) {
+    throw new NhnCloudCliError(
+      "registry \uC778\uC218\uAC00 \uBE44\uC5B4\uC788\uC2B5\uB2C8\uB2E4. \uB808\uC9C0\uC2A4\uD2B8\uB9AC \uC774\uB984\uC744 \uC9C0\uC815\uD558\uC138\uC694.",
+      EXIT_PARAM_ERROR
+    );
+  }
+  if (!repository.trim()) {
+    throw new NhnCloudCliError(
+      "repository \uC778\uC218\uAC00 \uBE44\uC5B4\uC788\uC2B5\uB2C8\uB2E4. \uC774\uBBF8\uC9C0 \uC774\uB984\uC744 \uC9C0\uC815\uD558\uC138\uC694.",
+      EXIT_PARAM_ERROR
+    );
+  }
+  const { harbor, project } = await createHarborClient(opts, registry);
+  const repo = repository.startsWith(project + "/") ? repository.slice(project.length + 1) : repository;
+  startSpinner(`"${registry}/${repo}" \uD0DC\uADF8 \uBAA9\uB85D \uC870\uD68C \uC911...`);
+  let tagRows;
+  try {
+    const artifacts = await harbor.listArtifacts(project, repo);
+    tagRows = artifacts.flatMap(
+      (a) => (a.tags ?? []).map((t) => ({
+        tag: t.name,
+        push_time: t.push_time ?? a.push_time,
+        size: String(a.size ?? "")
+      }))
+    );
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["tag", "push_time", "size"],
+    rows: tagRows.map((r) => [r.tag, r.push_time ?? "", r.size]),
+    raw: tagRows,
+    ids: tagRows.map((r) => r.tag)
+  });
+});
+
 // src/index.ts
-var program = new import_commander34.Command();
-program.name("nhncloud").description("NHN Cloud CLI \u2014 AI agent & terminal friendly").version("0.4.0").option("--json", "JSON \uD615\uC2DD\uC73C\uB85C \uCD9C\uB825").option("--quiet", "\uCD5C\uC18C \uCD9C\uB825 (\uC790\uB3D9\uD654\uC6A9)").option("--no-color", "\uC0C9\uC0C1 \uBE44\uD65C\uC131\uD654");
+var program = new import_commander38.Command();
+program.name("nhncloud").description("NHN Cloud CLI \u2014 AI agent & terminal friendly").version("0.5.0").option("--json", "JSON \uD615\uC2DD\uC73C\uB85C \uCD9C\uB825").option("--quiet", "\uCD5C\uC18C \uCD9C\uB825 (\uC790\uB3D9\uD654\uC6A9)").option("--no-color", "\uC0C9\uC0C1 \uBE44\uD65C\uC131\uD654");
 program.hook("preAction", () => {
   const opts = program.opts();
   if (!opts.color || process.env["NO_COLOR"]) {
@@ -3792,12 +4218,12 @@ program.hook("preAction", () => {
   }
 });
 program.addCommand(configureCommand);
-var logncrashCommand = new import_commander34.Command("logncrash").description("Log & Crash \uAD00\uB828 \uBA85\uB839");
+var logncrashCommand = new import_commander38.Command("logncrash").description("Log & Crash \uAD00\uB828 \uBA85\uB839");
 logncrashCommand.addCommand(searchCommand);
 logncrashCommand.addCommand(sendCommand);
 logncrashCommand.addCommand(exportCommand);
 program.addCommand(logncrashCommand);
-var deployCommand = new import_commander34.Command("deploy").description("NHN Cloud Deploy \uAD00\uB828 \uBA85\uB839");
+var deployCommand = new import_commander38.Command("deploy").description("NHN Cloud Deploy \uAD00\uB828 \uBA85\uB839");
 deployCommand.addCommand(runCommand);
 deployCommand.addCommand(artifactsCommand);
 deployCommand.addCommand(serverGroupsCommand);
@@ -3807,7 +4233,7 @@ deployCommand.addCommand(binariesCommand);
 deployCommand.addCommand(uploadCommand);
 deployCommand.addCommand(downloadCommand);
 program.addCommand(deployCommand);
-var instanceCommand = new import_commander34.Command("instance").description("Compute \uC778\uC2A4\uD134\uC2A4 \uAD00\uB828 \uBA85\uB839");
+var instanceCommand = new import_commander38.Command("instance").description("Compute \uC778\uC2A4\uD134\uC2A4 \uAD00\uB828 \uBA85\uB839");
 instanceCommand.addCommand(listCommand);
 instanceCommand.addCommand(flavorsCommand);
 instanceCommand.addCommand(availabilityZonesCommand);
@@ -3826,22 +4252,28 @@ instanceCommand.addCommand(keypairCommand);
 instanceCommand.addCommand(volumeCommand);
 instanceCommand.addCommand(volumesCommand);
 program.addCommand(instanceCommand);
-var networkCommand = new import_commander34.Command("network").description("VPC\xB7\uC11C\uBE0C\uB137 \uC870\uD68C");
+var networkCommand = new import_commander38.Command("network").description("VPC\xB7\uC11C\uBE0C\uB137 \uC870\uD68C");
 networkCommand.addCommand(listCommand3);
 networkCommand.addCommand(subnetCommand);
 program.addCommand(networkCommand);
-var volumeCommand2 = new import_commander34.Command("volume").description("Block Storage \uBCFC\uB968 \uAD00\uB828 \uBA85\uB839");
+var volumeCommand2 = new import_commander38.Command("volume").description("Block Storage \uBCFC\uB968 \uAD00\uB828 \uBA85\uB839");
 volumeCommand2.addCommand(listCommand2);
 volumeCommand2.addCommand(getCommand);
 volumeCommand2.addCommand(createCommand);
 program.addCommand(volumeCommand2);
-var floatingipCommand = new import_commander34.Command("floatingip").description(
+var floatingipCommand = new import_commander38.Command("floatingip").description(
   "Floating IP(\uC778\uC2A4\uD134\uC2A4 \uACF5\uC778 IP) \uAD00\uB9AC"
 );
 floatingipCommand.addCommand(listCommand4);
 floatingipCommand.addCommand(createCommand2);
 floatingipCommand.addCommand(deleteCommand);
 program.addCommand(floatingipCommand);
+var ncrCommand = new import_commander38.Command("ncr").description("NHN Container Registry \uAD00\uB828 \uBA85\uB839");
+ncrCommand.addCommand(listCommand5);
+ncrCommand.addCommand(getCommand3);
+ncrCommand.addCommand(imagesCommand2);
+ncrCommand.addCommand(tagsCommand);
+program.addCommand(ncrCommand);
 program.parseAsync().catch((err) => {
   const message = err instanceof Error ? err.message : String(err);
   const exitCode = err instanceof NhnCloudCliError ? err.exitCode : 1;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bifos/nhncloud-cli",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "CLI tool for NHN Cloud services — AI agent & terminal friendly",
   "keywords": [
     "nhncloud",

package/skills/nhncloud-cli/SKILL.md

@@ -1,12 +1,12 @@
 ---
 name: nhncloud-cli
-description: NHN Cloud 서비스 CLI. 자격증명 설정(configure), Log & Crash 로그 검색·전송(logncrash search/send), Deploy 배포 실행·바이너리 그룹·바이너리 목록 조회·업로드·다운로드(deploy upload/download), Compute 인스턴스 관리(instance — 목록·발급·전원 제어·타입 변경(resize/resize-confirm/resize-revert)·키페어·이미지·가용성 영역 조회·볼륨 연결(instance volume attach/detach, instance volumes)), VPC·서브넷 조회(network list/subnet list), Block Storage 볼륨 관리(volume list/get/create), Floating IP 관리(floatingip list/create/delete) 등 NHN Cloud PaaS API 를 터미널·AI 에이전트에서 호출한다.
+description: NHN Cloud 서비스 CLI. 자격증명 설정(configure), Log & Crash 로그 검색·전송(logncrash search/send), Deploy 배포 실행·바이너리 그룹·바이너리 목록 조회·업로드·다운로드(deploy upload/download), Compute 인스턴스 관리(instance — 목록·발급·전원 제어·타입 변경(resize/resize-confirm/resize-revert)·키페어·이미지·가용성 영역 조회·볼륨 연결(instance volume attach/detach, instance volumes)), VPC·서브넷 조회(network list/subnet list), Block Storage 볼륨 관리(volume list/get/create), Floating IP 관리(floatingip list/create/delete), NHN Container Registry 레지스트리·이미지·태그 조회(ncr list/get/images/tags) 등 NHN Cloud PaaS API 를 터미널·AI 에이전트에서 호출한다.
 ---
 
 # nhncloud-cli
 
 NHN Cloud PaaS 서비스를 AWS CLI 방식으로 호출하는 TypeScript CLI.
-`configure`, `logncrash search/send`, `deploy`, `instance` (전원 제어·keypair·볼륨 연결 포함), `network` (VPC·서브넷 조회), `volume` (Block Storage 볼륨 목록·조회·생성), `floatingip` (공인 IP 관리) 명령을 지원한다.
+`configure`, `logncrash search/send`, `deploy`, `instance` (전원 제어·keypair·볼륨 연결 포함), `network` (VPC·서브넷 조회), `volume` (Block Storage 볼륨 목록·조회·생성), `floatingip` (공인 IP 관리), `ncr` (NHN Container Registry 레지스트리·이미지·태그 조회) 명령을 지원한다.
 
 ## 설치
 
@@ -42,6 +42,7 @@ nhncloud configure \
 | `--uak-secret <secret>` | 개인 UAK Secret |
 | `--logncrash-appkey <key>` | logncrash appkey |
 | `--logncrash-secret <secret>` | logncrash secret |
+| `--ncr-appkey <key>` | NCR(Container Registry) appkey |
 | `--no-verify` | 연결 테스트 생략 |
 
 저장 파일 구조 (`~/.nhncloud/credentials.json`, mode 0600):
@@ -101,6 +102,13 @@ logncrash appkey 와 secret 은 콘솔 → Log & Crash Search → 프로젝트
 | 다른 profile 사용 | `nhncloud logncrash search --query '*' --from 1h --to now --profile staging` |
 | 로그 대량 추출 (파일로) | `nhncloud logncrash export --query '<lucene>' --from 1h --to now --output logs.jsonl` |
 | Log & Crash 로그 전송 | `nhncloud logncrash send --body "<메시지>" --level INFO` |
+| NCR 레지스트리 목록 조회 | `nhncloud ncr list --app-key <appkey>` |
+| NCR 레지스트리 목록 (JSON 파싱용) | `nhncloud ncr list --app-key <appkey> --json` |
+| NCR 단일 레지스트리 조회 | `nhncloud ncr get <registry-name> --app-key <appkey>` |
+| NCR 이미지(repository) 목록 조회 | `nhncloud ncr images <registry>` |
+| NCR 이미지 목록 (JSON) | `nhncloud ncr images <registry> --json` |
+| NCR 태그 목록 조회 | `nhncloud ncr tags <registry> <repository>` |
+| NCR 태그 목록 (JSON) | `nhncloud ncr tags <registry> <repository> --json` |
 
 ## logncrash search 옵션
 
@@ -624,3 +632,76 @@ nhncloud floatingip delete <floatingip-id> --yes
 | 외부 네트워크 미발견 (create --network 미지정) | 3 (PARAM_ERROR) |
 | 비대화형 delete --yes 누락 | 3 (PARAM_ERROR) |
 | Floating IP API 오류 | 1 (API_ERROR) |
+
+## ncr — NHN Container Registry 레지스트리·이미지·태그 조회
+
+NCR Management API 로 레지스트리(Harbor 프로젝트)를 조회한다.
+이미지(repository)·태그는 레지스트리 데이터플레인 Harbor REST API 를 직접 호출한다.
+두 경로 모두 공통 UAK 를 사용하므로 추가 설정은 없다.
+appKey 는 `--app-key` 옵션 또는 `nhncloud configure --ncr-appkey <appkey>` 로 profile 에 저장한 값을 자동 사용한다.
+
+### 의도 → 커맨드 매핑
+
+| 의도 | 커맨드 |
+|------|--------|
+| 레지스트리 목록 조회 | `nhncloud ncr list --app-key <appkey>` |
+| 레지스트리 목록 (JSON) | `nhncloud ncr list --app-key <appkey> --json` |
+| 다른 region 조회 (기본 kr1) | `nhncloud ncr list --region kr2 --app-key <appkey>` |
+| 단일 레지스트리 조회 | `nhncloud ncr get <registry> --app-key <appkey>` |
+| appkey 저장 후 생략 | `nhncloud configure --ncr-appkey <appkey>` → `nhncloud ncr list` |
+| 이미지(repository) 목록 조회 | `nhncloud ncr images <registry>` |
+| 이미지 목록 (JSON) | `nhncloud ncr images <registry> --json` |
+| 특정 이미지의 태그 목록 조회 | `nhncloud ncr tags <registry> <repository>` |
+| 태그 목록 (JSON) | `nhncloud ncr tags <registry> <repository> --json` |
+
+### ncr list / get 옵션
+
+| 옵션 | 설명 |
+|------|------|
+| `--region <region>` | NCR region (기본: `kr1`). 지원: `kr1`, `kr2`, `kr3` |
+| `--app-key <key>` | NCR appKey (profile 의 `ncr.appkey` 보다 우선) |
+| `--profile <name>` | 사용할 profile 이름 |
+
+### ncr images / ncr tags 옵션
+
+| 옵션 | 설명 |
+|------|------|
+| `--region <region>` | NCR region (기본: `kr1`) |
+| `--app-key <key>` | NCR appKey (profile 의 `ncr.appkey` 보다 우선) |
+| `--profile <name>` | 사용할 profile 이름 |
+
+### 체이닝 예시
+
+```bash
+# 레지스트리 목록 (이름만 추출)
+nhncloud ncr list --app-key <appkey> --json | jq -r '.[].name'
+
+# 레지스트리 수 확인
+nhncloud ncr list --app-key <appkey> --json | jq length
+
+# 단일 레지스트리 상세 조회
+nhncloud ncr get <registry> --app-key <appkey> --json
+
+# 이미지 목록 (이름만 추출)
+nhncloud ncr images <registry> --json | jq -r '.[].repository'
+
+# 이미지별 artifact 수 확인
+nhncloud ncr images <registry> --json | jq '.[] | {repository, artifact_count}'
+
+# 특정 이미지의 태그 목록
+nhncloud ncr tags <registry> <repository> --json | jq -r '.[].tag'
+
+# 가장 최근 push 태그 확인
+nhncloud ncr tags <registry> <repository> --json | jq 'sort_by(.push_time) | last | .tag'
+```
+
+### ncr 에러 코드
+
+| 상황 | exit code |
+|------|-----------|
+| UAK 누락·불완전 | 4 (CONFIG_ERROR) |
+| NCR appkey 미설정 (`--app-key` 미지정 + configure 미설정) | 4 (CONFIG_ERROR) |
+| 지원하지 않는 region | 3 (PARAM_ERROR) |
+| registry / repository 인수 공백·빈값 | 3 (PARAM_ERROR) |
+| UAK 인증 실패 (401/403) | 2 (AUTH_ERROR) |
+| NCR API 오류 | 1 (API_ERROR) |