@bifos/nhncloud-cli 0.7.0 → 0.8.0

package/dist/index.js

@@ -24,8 +24,8 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 
 // src/index.ts
-var import_commander43 = require("commander");
-var import_chalk14 = __toESM(require("chalk"));
+var import_commander46 = require("commander");
+var import_chalk16 = __toESM(require("chalk"));
 
 // src/utils/spinner.ts
 var import_ora = __toESM(require("ora"));
@@ -567,6 +567,20 @@ function nksHost(region) {
   }
   return host;
 }
+var NCS_HOST = {
+  kr1: "kr1-ncs.api.nhncloudservice.com",
+  kr3: "kr3-ncs.api.nhncloudservice.com"
+};
+function ncsHost(region) {
+  const host = NCS_HOST[region];
+  if (!host) {
+    throw new NhnCloudCliError(
+      `\uC9C0\uC6D0\uD558\uC9C0 \uC54A\uB294 NCS region \uC785\uB2C8\uB2E4: "${region}". \uC0AC\uC6A9 \uAC00\uB2A5\uD55C region: ${Object.keys(NCS_HOST).join(", ")}`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  return host;
+}
 
 // src/api/keystone.ts
 function isKeystoneTokenResponse(val) {
@@ -4315,7 +4329,13 @@ var import_ky11 = __toESM(require("ky"));
 function isNksClusterSummary(val) {
   if (typeof val !== "object" || val === null) return false;
   const obj = val;
-  return typeof obj["uuid"] === "string" && typeof obj["name"] === "string" && typeof obj["status"] === "string" && typeof obj["health_status"] === "string" && (typeof obj["node_count"] === "number" || typeof obj["node_count"] === "string") && typeof obj["kube_tag"] === "string";
+  return typeof obj["uuid"] === "string" && typeof obj["name"] === "string" && typeof obj["status"] === "string" && typeof obj["health_status"] === "string" && (typeof obj["node_count"] === "number" || typeof obj["node_count"] === "string");
+}
+function nksClusterKubeTag(cluster) {
+  const fromLabels = cluster.labels?.["kube_tag"];
+  if (typeof fromLabels === "string") return fromLabels;
+  if (typeof cluster.kube_tag === "string") return cluster.kube_tag;
+  return "-";
 }
 function isNksSupports(val) {
   if (typeof val !== "object" || val === null) return false;
@@ -4893,7 +4913,7 @@ var listCommand6 = new import_commander40.Command("list").description("NKS \uD07
       cluster.status,
       cluster.health_status,
       String(cluster.node_count),
-      cluster.kube_tag
+      nksClusterKubeTag(cluster)
     ]),
     raw: clusters,
     ids: clusters.map((cluster) => cluster.uuid)
@@ -5645,77 +5665,1672 @@ var addonGetCommand = new import_commander42.Command("get").description("NKS \uC
 });
 var addonCommand = new import_commander42.Command("addon").description("NKS \uC560\uB4DC\uC628 \uAD00\uB828 \uBA85\uB839").addCommand(addonListCommand).addCommand(addonGetCommand);
 
-// src/index.ts
-var rootAgentHints = `
-Agent hints:
-  - Prefer --json for structured output.
-  - Use --quiet only when the command documents an identifier output.
-  - Use --profile <name> to avoid relying on default profile.
-  - For IaaS/NKS commands, use --region <region> when region matters.
-  - Run "nhncloud commands --json" to inspect command paths and options.
-`;
-var logncrashAgentWorkflow = `
-Agent workflow:
-  1. nhncloud logncrash search --query '*' --from 1h --to now --json
-  2. nhncloud logncrash export --query '<lucene>' --from 1h --to now --output logs.jsonl
-`;
-var deployAgentWorkflow = `
-Agent workflow:
-  1. nhncloud deploy artifacts <target> --json
-  2. nhncloud deploy server-groups <target> --json
-  3. nhncloud deploy run <target>
-`;
-var instanceAgentWorkflow = `
-Agent workflow:
-  1. nhncloud instance images --json
-  2. nhncloud instance flavors --detail --json
-  3. nhncloud instance list --json
-`;
-var networkAgentWorkflow = `
-Agent workflow:
-  1. nhncloud network list --json
-  2. nhncloud network subnet list --json
-`;
-var volumeAgentWorkflow = `
-Agent workflow:
-  1. nhncloud volume list --json
-  2. nhncloud volume get <volume-id> --json
-`;
-var floatingIpAgentWorkflow = `
-Agent workflow:
-  1. nhncloud floatingip list --json
-  2. nhncloud floatingip create --json
-`;
-var ncrAgentWorkflow = `
-Agent workflow:
-  1. nhncloud ncr list --json
-  2. nhncloud ncr images <registry> --json
-  3. nhncloud ncr tags <registry> <repository> --json
-`;
-var nksAgentWorkflow = `
-Agent workflow:
-  1. nhncloud nks supports --json
-  2. nhncloud nks cluster list --json
-  3. nhncloud nks cluster get <cluster> --json
+// src/commands/ncs/template.ts
+var import_commander43 = require("commander");
+var import_chalk14 = __toESM(require("chalk"));
+
+// src/commands/ncs/helpers.ts
+var import_node_fs7 = require("fs");
+
+// src/services/ncs/client.ts
+var import_ky12 = __toESM(require("ky"));
+
+// src/services/ncs/types.ts
+function isNcsTemplateSummary(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return typeof obj["id"] === "string" && typeof obj["name"] === "string";
+}
+function isNcsTemplateDetail(val) {
+  return isNcsTemplateSummary(val);
+}
+function isNcsTemplateVersionSummary(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return typeof obj["id"] === "string" && typeof obj["version"] === "string";
+}
+function isNcsTemplateVersionDetail(val) {
+  return isNcsTemplateVersionSummary(val);
+}
+function isNcsWorkloadSummary(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return typeof obj["id"] === "string" && typeof obj["name"] === "string" && typeof obj["status"] === "string";
+}
+function isNcsWorkloadDetail(val) {
+  return isNcsWorkloadSummary(val);
+}
+function isNcsWorkloadLog(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return typeof obj["log"] === "string" && typeof obj["time"] === "string";
+}
+function isNcsWorkloadEvent(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return typeof obj["type"] === "string" && typeof obj["reason"] === "string" && typeof obj["message"] === "string";
+}
+function isNcsWorkloadHistorySummary(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return typeof obj["id"] === "number" && typeof obj["status"] === "string";
+}
+function isNcsWorkloadHistoryDetail(val) {
+  return isNcsWorkloadHistorySummary(val);
+}
+function isNcsWorkloadScheduleHistory(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return typeof obj["id"] === "string" && typeof obj["status"] === "string";
+}
+function isNcsMalwareConfig(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return typeof obj["enabled"] === "boolean";
+}
+function isNcsMalwareReport(val) {
+  if (typeof val !== "object" || val === null) return false;
+  const obj = val;
+  return typeof obj["image"] === "string" && typeof obj["result"] === "string";
+}
+
+// src/services/ncs/client.ts
+var DEFAULT_TIMEOUT_MS8 = 3e4;
+var DEFAULT_WAIT_POLL_INTERVAL_MS = 5e3;
+var NcsClient = class {
+  accessToken;
+  baseUrl;
+  constructor(accessToken, region, appKey) {
+    this.accessToken = accessToken;
+    this.baseUrl = `https://${ncsHost(region)}/ncs/v1.0/appkeys/${encodeURIComponent(appKey)}`;
+  }
+  authHeaders() {
+    return { "x-nhn-authorization": `Bearer ${this.accessToken}` };
+  }
+  /**
+   * 설계도(template) 목록을 반환한다.
+   * GET /ncs/v1.0/appkeys/{appKey}/templates
+   * 응답: { header, templates: [...] } — body 가 아니라 named 필드(docs 예제 확정).
+   *
+   * pagination: 기본 page size 10(docs 확정). 목록이 앞부분만 조용히 반환(silent truncation)하지
+   * 않도록 page/size 를 그대로 노출한다. 총 개수는 응답 헤더 X-Total-Count 로 온다(docs 확정) —
+   * body/JSON 필드가 아니므로 ky Response 에서 header 를 직접 읽는다(harbor-client.ts 의
+   * .json()+.headers.get() 분리 패턴과 동일 — .json<T>() 체이닝으로는 헤더를 못 본다).
+   */
+  async listTemplates(query = {}) {
+    const url = `${this.baseUrl}/templates`;
+    const searchParams = {};
+    if (query.page !== void 0) searchParams["page"] = query.page;
+    if (query.size !== void 0) searchParams["size"] = query.size;
+    if (query.disableContainers !== void 0) {
+      searchParams["disable_containers"] = query.disableContainers;
+    }
+    try {
+      const res = await import_ky12.default.get(url, {
+        headers: this.authHeaders(),
+        searchParams,
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS8
+      });
+      const body = await res.json();
+      unwrapHeader(body);
+      if (!Array.isArray(body.templates)) {
+        if (body.templates === void 0) return { totalCount: 0, templates: [] };
+        throw new NhnCloudCliError(
+          "NCS API \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: templates \uAC00 \uBC30\uC5F4\uC774 \uC544\uB2D9\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      const templates = body.templates.filter(isNcsTemplateSummary);
+      const headerTotal = res.headers.get("x-total-count");
+      const totalCount = headerTotal !== null && /^\d+$/.test(headerTotal) ? Number(headerTotal) : templates.length;
+      return { totalCount, templates };
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 설계도(template) 단건을 반환한다.
+   * GET /ncs/v1.0/appkeys/{appKey}/templates/{id}
+   * 응답: { header, template: {...} } — named 필드(listTemplates 와 같은 패턴).
+   */
+  async getTemplate(id) {
+    const url = `${this.baseUrl}/templates/${encodeURIComponent(id)}`;
+    try {
+      const res = await import_ky12.default.get(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS8
+      });
+      const body = await res.json();
+      unwrapHeader(body);
+      if (!isNcsTemplateDetail(body.template)) {
+        throw new NhnCloudCliError(
+          "NCS API \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: template \uD544\uB4DC\uAC00 \uC5C6\uAC70\uB098 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return body.template;
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 설계도(template) 의 버전 목록을 반환한다.
+   * GET /ncs/v1.0/appkeys/{appKey}/templates/{id}/versions
+   * 응답: { header, versions: [...] } — named 필드. pagination 은 listTemplates 와 동일하게
+   * X-Total-Count 응답 헤더 + page/size 노출(silent truncation 방지).
+   */
+  async listTemplateVersions(id, query = {}) {
+    const url = `${this.baseUrl}/templates/${encodeURIComponent(id)}/versions`;
+    const searchParams = {};
+    if (query.q !== void 0) searchParams["q"] = query.q;
+    if (query.sort !== void 0) searchParams["sort"] = query.sort;
+    if (query.page !== void 0) searchParams["page"] = query.page;
+    if (query.size !== void 0) searchParams["size"] = query.size;
+    try {
+      const res = await import_ky12.default.get(url, {
+        headers: this.authHeaders(),
+        searchParams,
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS8
+      });
+      const body = await res.json();
+      unwrapHeader(body);
+      if (!Array.isArray(body.versions)) {
+        if (body.versions === void 0) return { totalCount: 0, versions: [] };
+        throw new NhnCloudCliError(
+          "NCS API \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: versions \uAC00 \uBC30\uC5F4\uC774 \uC544\uB2D9\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      const versions = body.versions.filter(isNcsTemplateVersionSummary);
+      const headerTotal = res.headers.get("x-total-count");
+      const totalCount = headerTotal !== null && /^\d+$/.test(headerTotal) ? Number(headerTotal) : versions.length;
+      return { totalCount, versions };
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 설계도(template) 버전 단건을 반환한다.
+   * GET /ncs/v1.0/appkeys/{appKey}/templates/{id}/versions/{version}
+   * 응답: { header, version: {...} } — named 필드.
+   */
+  async getTemplateVersion(id, version) {
+    const url = `${this.baseUrl}/templates/${encodeURIComponent(id)}/versions/${encodeURIComponent(version)}`;
+    try {
+      const res = await import_ky12.default.get(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS8
+      });
+      const body = await res.json();
+      unwrapHeader(body);
+      if (!isNcsTemplateVersionDetail(body.version)) {
+        throw new NhnCloudCliError(
+          "NCS API \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: version \uD544\uB4DC\uAC00 \uC5C6\uAC70\uB098 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return body.version;
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * workload(런타임 실행) 목록을 반환한다.
+   * GET /ncs/v1.0/appkeys/{appKey}/workloads
+   * 응답: { header, workloads: [...] } — named 필드(listTemplates 와 동일 패턴).
+   * pagination: X-Total-Count 응답 헤더 + page/size 노출(listTemplates 와 동일 규약).
+   */
+  async listWorkloads(query = {}) {
+    const url = `${this.baseUrl}/workloads`;
+    const searchParams = {};
+    if (query.q !== void 0) searchParams["q"] = query.q;
+    if (query.page !== void 0) searchParams["page"] = query.page;
+    if (query.size !== void 0) searchParams["size"] = query.size;
+    try {
+      const res = await import_ky12.default.get(url, {
+        headers: this.authHeaders(),
+        searchParams,
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS8
+      });
+      const body = await res.json();
+      unwrapHeader(body);
+      if (!Array.isArray(body.workloads)) {
+        if (body.workloads === void 0) return { totalCount: 0, workloads: [] };
+        throw new NhnCloudCliError(
+          "NCS API \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: workloads \uAC00 \uBC30\uC5F4\uC774 \uC544\uB2D9\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      const workloads = body.workloads.filter(isNcsWorkloadSummary);
+      const headerTotal = res.headers.get("x-total-count");
+      const totalCount = headerTotal !== null && /^\d+$/.test(headerTotal) ? Number(headerTotal) : workloads.length;
+      return { totalCount, workloads };
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * workload 단건을 반환한다 (tasks[] 런타임 상태 포함).
+   * GET /ncs/v1.0/appkeys/{appKey}/workloads/{workloadId}
+   * 응답: { header, workload: {...} } — named 필드.
+   */
+  async getWorkload(id) {
+    const url = `${this.baseUrl}/workloads/${encodeURIComponent(id)}`;
+    try {
+      const res = await import_ky12.default.get(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS8
+      });
+      const body = await res.json();
+      unwrapHeader(body);
+      if (!isNcsWorkloadDetail(body.workload)) {
+        throw new NhnCloudCliError(
+          "NCS API \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: workload \uD544\uB4DC\uAC00 \uC5C6\uAC70\uB098 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return body.workload;
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * workload task 의 컨테이너 로그를 반환한다.
+   * GET /ncs/v1.0/appkeys/{appKey}/workloads/{workloadId}/tasks/{taskId}/logs
+   * docs 확정 필수 쿼리는 `containerName` — CLI 시그니처 일관성을 위해 `container` 로 받고 여기서 매핑한다.
+   * container 누락(빈 문자열 포함) 시 EXIT_PARAM_ERROR — API 호출 전 파라미터 검증(1-3 회피).
+   * 응답: { header, logs: [...] } — named 필드. docs 에 X-Total-Count 헤더가 없어 totalCount 는 반환하지 않는다.
+   */
+  async getWorkloadLogs(id, taskId, query) {
+    if (!query.container || !query.container.trim()) {
+      throw new NhnCloudCliError(
+        "container \uCFFC\uB9AC\uAC00 \uBE44\uC5B4\uC788\uC2B5\uB2C8\uB2E4. \uCEE8\uD14C\uC774\uB108 \uC774\uB984\uC744 \uC9C0\uC815\uD558\uC138\uC694.",
+        EXIT_PARAM_ERROR
+      );
+    }
+    const url = `${this.baseUrl}/workloads/${encodeURIComponent(id)}/tasks/${encodeURIComponent(taskId)}/logs`;
+    const searchParams = { containerName: query.container };
+    if (query.from !== void 0) searchParams["from"] = query.from;
+    if (query.to !== void 0) searchParams["to"] = query.to;
+    if (query.page !== void 0) searchParams["page"] = query.page;
+    if (query.size !== void 0) searchParams["size"] = query.size;
+    try {
+      const res = await import_ky12.default.get(url, {
+        headers: this.authHeaders(),
+        searchParams,
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS8
+      });
+      const body = await res.json();
+      unwrapHeader(body);
+      if (!Array.isArray(body.logs)) {
+        if (body.logs === void 0) return { logs: [] };
+        throw new NhnCloudCliError(
+          "NCS API \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: logs \uAC00 \uBC30\uC5F4\uC774 \uC544\uB2D9\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return { logs: body.logs.filter(isNcsWorkloadLog) };
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * workload task 의 이벤트 목록을 반환한다.
+   * GET /ncs/v1.0/appkeys/{appKey}/workloads/{workloadId}/tasks/{taskId}/events
+   * 응답: { header, events: [...] } — named 필드.
+   * pagination: X-Total-Count 헤더가 docs 에 명시되진 않았으나, 있으면 정확히 반영하고 없으면
+   * 현재 페이지 길이로 fallback(listTemplates 와 동일한 방어적 패턴 — 실제 헤더 부재와도 호환).
+   */
+  async getWorkloadEvents(id, taskId, query = {}) {
+    const url = `${this.baseUrl}/workloads/${encodeURIComponent(id)}/tasks/${encodeURIComponent(taskId)}/events`;
+    const searchParams = {};
+    if (query.type !== void 0) searchParams["type"] = query.type;
+    if (query.q !== void 0) searchParams["q"] = query.q;
+    if (query.from !== void 0) searchParams["from"] = query.from;
+    if (query.to !== void 0) searchParams["to"] = query.to;
+    if (query.page !== void 0) searchParams["page"] = query.page;
+    if (query.size !== void 0) searchParams["size"] = query.size;
+    try {
+      const res = await import_ky12.default.get(url, {
+        headers: this.authHeaders(),
+        searchParams,
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS8
+      });
+      const body = await res.json();
+      unwrapHeader(body);
+      if (!Array.isArray(body.events)) {
+        if (body.events === void 0) return { totalCount: 0, events: [] };
+        throw new NhnCloudCliError(
+          "NCS API \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: events \uAC00 \uBC30\uC5F4\uC774 \uC544\uB2D9\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      const events = body.events.filter(isNcsWorkloadEvent);
+      const headerTotal = res.headers.get("x-total-count");
+      const totalCount = headerTotal !== null && /^\d+$/.test(headerTotal) ? Number(headerTotal) : events.length;
+      return { totalCount, events };
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * workload 의 실행 히스토리 목록을 반환한다.
+   * GET /ncs/v1.0/appkeys/{appKey}/workloads/{workloadId}/history
+   * 응답: { header, history: [...] } — named 필드.
+   * pagination: getWorkloadEvents 와 동일한 방어적 X-Total-Count fallback 패턴.
+   */
+  async listWorkloadHistory(id, query = {}) {
+    const url = `${this.baseUrl}/workloads/${encodeURIComponent(id)}/history`;
+    const searchParams = {};
+    if (query.page !== void 0) searchParams["page"] = query.page;
+    if (query.size !== void 0) searchParams["size"] = query.size;
+    if (query.sort !== void 0) searchParams["sort"] = query.sort;
+    try {
+      const res = await import_ky12.default.get(url, {
+        headers: this.authHeaders(),
+        searchParams,
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS8
+      });
+      const body = await res.json();
+      unwrapHeader(body);
+      if (!Array.isArray(body.history)) {
+        if (body.history === void 0) return { totalCount: 0, history: [] };
+        throw new NhnCloudCliError(
+          "NCS API \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: history \uAC00 \uBC30\uC5F4\uC774 \uC544\uB2D9\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      const history = body.history.filter(isNcsWorkloadHistorySummary);
+      const headerTotal = res.headers.get("x-total-count");
+      const totalCount = headerTotal !== null && /^\d+$/.test(headerTotal) ? Number(headerTotal) : history.length;
+      return { totalCount, history };
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * workload 실행 히스토리 단건을 반환한다 (당시 사용한 template 스냅샷 포함).
+   * GET /ncs/v1.0/appkeys/{appKey}/workloads/{workloadId}/history/{historyId}
+   * 응답: { header, history: {...}, template: {...} } — history/template 이 sibling named 필드(docs 예제 확정).
+   */
+  async getWorkloadHistory(id, historyId) {
+    const url = `${this.baseUrl}/workloads/${encodeURIComponent(id)}/history/${encodeURIComponent(historyId)}`;
+    try {
+      const res = await import_ky12.default.get(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS8
+      });
+      const body = await res.json();
+      unwrapHeader(body);
+      if (!isNcsWorkloadHistoryDetail(body.history)) {
+        throw new NhnCloudCliError(
+          "NCS API \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: history \uD544\uB4DC\uAC00 \uC5C6\uAC70\uB098 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return { ...body.history, template: body.template };
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * workload 의 예약 실행 히스토리 목록을 반환한다.
+   * GET /ncs/v1.0/appkeys/{appKey}/workloads/{workloadId}/schedulehistory
+   * 응답: { header, schedulehistory: [...] } — named 필드. docs 에 X-Total-Count 헤더가 없어
+   * totalCount 는 반환하지 않는다(phase 범위 — page/size 는 후속 필요 시 추가, ADR-020 표 갱신 불필요한 범위 내 결정).
+   */
+  async getWorkloadScheduleHistory(id) {
+    const url = `${this.baseUrl}/workloads/${encodeURIComponent(id)}/schedulehistory`;
+    try {
+      const res = await import_ky12.default.get(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS8
+      });
+      const body = await res.json();
+      unwrapHeader(body);
+      if (!Array.isArray(body.schedulehistory)) {
+        if (body.schedulehistory === void 0) return { scheduleHistory: [] };
+        throw new NhnCloudCliError(
+          "NCS API \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: schedulehistory \uAC00 \uBC30\uC5F4\uC774 \uC544\uB2D9\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return { scheduleHistory: body.schedulehistory.filter(isNcsWorkloadScheduleHistory) };
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 설계도(template) 를 생성한다.
+   * POST /ncs/v1.0/appkeys/{appKey}/templates
+   * 요청 body 는 `--file <json>` 로 읽은 값을 그대로 전달한다(필수값 검증은 API 오류에 위임).
+   * 응답: { header, template: {...} } — named 필드(getTemplate 과 동일 패턴).
+   */
+  async createTemplate(body) {
+    const url = `${this.baseUrl}/templates`;
+    try {
+      const res = await import_ky12.default.post(url, {
+        headers: this.authHeaders(),
+        json: body,
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS8
+      });
+      const resBody = await res.json();
+      unwrapHeader(resBody);
+      if (!isNcsTemplateDetail(resBody.template)) {
+        throw new NhnCloudCliError(
+          "NCS API \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: template \uD544\uB4DC\uAC00 \uC5C6\uAC70\uB098 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return resBody.template;
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 설계도(template) 를 삭제한다.
+   * DELETE /ncs/v1.0/appkeys/{appKey}/templates/{id}
+   */
+  async deleteTemplate(id) {
+    const url = `${this.baseUrl}/templates/${encodeURIComponent(id)}`;
+    try {
+      const res = await import_ky12.default.delete(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS8
+      });
+      unwrapHeader(await res.json());
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 설계도(template) 의 새 버전을 생성한다.
+   * POST /ncs/v1.0/appkeys/{appKey}/templates/{id}/versions
+   * body 에 `sourceVersion` 이 필수(docs 확정)이나 클라이언트는 그대로 전달하고
+   * 필수값 검증은 API 응답 오류에 위임한다(1-3 회피 — API 경로에서 EXIT_PARAM_ERROR 를 만들지 않음).
+   * 응답: { header, version: {...} } — named 필드(getTemplateVersion 과 동일 패턴).
+   */
+  async createTemplateVersion(id, body) {
+    const url = `${this.baseUrl}/templates/${encodeURIComponent(id)}/versions`;
+    try {
+      const res = await import_ky12.default.post(url, {
+        headers: this.authHeaders(),
+        json: body,
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS8
+      });
+      const resBody = await res.json();
+      unwrapHeader(resBody);
+      if (!isNcsTemplateVersionDetail(resBody.version)) {
+        throw new NhnCloudCliError(
+          "NCS API \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: version \uD544\uB4DC\uAC00 \uC5C6\uAC70\uB098 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return resBody.version;
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 설계도(template) 버전을 삭제한다.
+   * DELETE /ncs/v1.0/appkeys/{appKey}/templates/{id}/versions/{version}
+   */
+  async deleteTemplateVersion(id, version) {
+    const url = `${this.baseUrl}/templates/${encodeURIComponent(id)}/versions/${encodeURIComponent(version)}`;
+    try {
+      const res = await import_ky12.default.delete(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS8
+      });
+      unwrapHeader(await res.json());
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * workload 를 일시정지한다.
+   * POST /ncs/v1.0/appkeys/{appKey}/workloads/{id}/pause
+   */
+  async pauseWorkload(id) {
+    const url = `${this.baseUrl}/workloads/${encodeURIComponent(id)}/pause`;
+    try {
+      const res = await import_ky12.default.post(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS8
+      });
+      unwrapHeader(await res.json());
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * workload 를 재개한다.
+   * POST /ncs/v1.0/appkeys/{appKey}/workloads/{id}/resume
+   */
+  async resumeWorkload(id) {
+    const url = `${this.baseUrl}/workloads/${encodeURIComponent(id)}/resume`;
+    try {
+      const res = await import_ky12.default.post(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS8
+      });
+      unwrapHeader(await res.json());
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * workload task 를 재시작한다.
+   * POST /ncs/v1.0/appkeys/{appKey}/workloads/{id}/tasks/{taskId}/restart
+   */
+  async restartWorkloadTask(id, taskId) {
+    const url = `${this.baseUrl}/workloads/${encodeURIComponent(id)}/tasks/${encodeURIComponent(taskId)}/restart`;
+    try {
+      const res = await import_ky12.default.post(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS8
+      });
+      unwrapHeader(await res.json());
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * workload 를 생성한다.
+   * POST /ncs/v1.0/appkeys/{appKey}/workloads
+   * 요청 body 는 `--file <json>` 로 읽은 값을 그대로 전달한다(필수값 검증은 API 오류에 위임 — createTemplate 과 동일).
+   * 응답: { header, workload: {...} } — 생성된 workload 전체 객체(id 만 반환하는 축약 응답 아님, docs 예제 실측 확정).
+   */
+  async createWorkload(body) {
+    const url = `${this.baseUrl}/workloads`;
+    try {
+      const res = await import_ky12.default.post(url, {
+        headers: this.authHeaders(),
+        json: body,
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS8
+      });
+      const resBody = await res.json();
+      unwrapHeader(resBody);
+      if (!isNcsWorkloadDetail(resBody.workload)) {
+        throw new NhnCloudCliError(
+          "NCS API \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: workload \uD544\uB4DC\uAC00 \uC5C6\uAC70\uB098 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return resBody.workload;
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * workload 를 전체 교체한다.
+   * PUT /ncs/v1.0/appkeys/{appKey}/workloads/{id}
+   * 응답: { header, workload: {...} } — createWorkload 와 동일한 전체 객체 응답(docs 예제 실측 확정).
+   */
+  async updateWorkload(id, body) {
+    const url = `${this.baseUrl}/workloads/${encodeURIComponent(id)}`;
+    try {
+      const res = await import_ky12.default.put(url, {
+        headers: this.authHeaders(),
+        json: body,
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS8
+      });
+      const resBody = await res.json();
+      unwrapHeader(resBody);
+      if (!isNcsWorkloadDetail(resBody.workload)) {
+        throw new NhnCloudCliError(
+          "NCS API \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: workload \uD544\uB4DC\uAC00 \uC5C6\uAC70\uB098 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return resBody.workload;
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * workload 를 부분 변경한다 (JSON Patch 배열, RFC 6902).
+   * PATCH /ncs/v1.0/appkeys/{appKey}/workloads/{id}
+   * Content-Type 이 application/json-patch+json 이어야 한다(docs 확정) — authHeaders() 에 덮어써서 명시 지정.
+   * 응답: { header, workload: {...} } — createWorkload 와 동일한 전체 객체 응답(docs 예제 실측 확정).
+   * redirect/status 분기 불필요 — 공통 봉투 응답(HTTP 200 고정, ADR-006).
+   */
+  async patchWorkload(id, patch) {
+    const url = `${this.baseUrl}/workloads/${encodeURIComponent(id)}`;
+    try {
+      const res = await import_ky12.default.patch(url, {
+        headers: { ...this.authHeaders(), "Content-Type": "application/json-patch+json" },
+        json: patch,
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS8
+      });
+      const resBody = await res.json();
+      unwrapHeader(resBody);
+      if (!isNcsWorkloadDetail(resBody.workload)) {
+        throw new NhnCloudCliError(
+          "NCS API \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: workload \uD544\uB4DC\uAC00 \uC5C6\uAC70\uB098 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return resBody.workload;
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * workload 가 `Running` 상태에 도달할 때까지 폴링한다 (instance client 의 waitForActive 선례, ADR-011).
+   * 데드라인을 고정해두고 매 반복 남은 시간만큼만 대기해 timeoutMs 를 초과하지 않는다.
+   * 타임아웃 시 마지막으로 조회한 상태를 메시지에 포함해 NhnCloudCliError(EXIT_API_ERROR) 를 던진다.
+   */
+  async waitForRunning(id, opts) {
+    const intervalMs = opts.intervalMs ?? DEFAULT_WAIT_POLL_INTERVAL_MS;
+    const deadline = Date.now() + opts.timeoutMs;
+    let lastWorkload = null;
+    while (Date.now() < deadline) {
+      const workload = await this.getWorkload(id);
+      lastWorkload = workload;
+      if (workload.status === "Running") {
+        return workload;
+      }
+      const remaining = deadline - Date.now();
+      if (remaining <= 0) break;
+      await new Promise((resolve) => setTimeout(resolve, Math.min(intervalMs, remaining)));
+    }
+    const lastStatus = lastWorkload ? lastWorkload.status : "unknown";
+    throw new NhnCloudCliError(
+      `NCS workload ${id} \uAC00 Running \uC0C1\uD0DC\uAC00 \uB418\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4 (\uB9C8\uC9C0\uB9C9 \uC0C1\uD0DC: ${lastStatus}). --wait \uD0C0\uC784\uC544\uC6C3(${Math.round(opts.timeoutMs / 1e3)}\uCD08) \uCD08\uACFC.`,
+      EXIT_API_ERROR
+    );
+  }
+  /**
+   * workload 를 삭제한다.
+   * DELETE /ncs/v1.0/appkeys/{appKey}/workloads/{id}
+   */
+  async deleteWorkload(id) {
+    const url = `${this.baseUrl}/workloads/${encodeURIComponent(id)}`;
+    try {
+      const res = await import_ky12.default.delete(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS8
+      });
+      unwrapHeader(await res.json());
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 악성코드 검사 설정을 조회한다.
+   * GET /ncs/v1.0/appkeys/{appKey}/malware/config (appkey-scoped, docs 예제 실측 확정 — 계정 레벨 아님)
+   * 응답: { header, enabled: true|false } — named 필드 없이 header 와 나란히 flat 필드(docs 예제 실측 확정).
+   */
+  async getMalwareConfig() {
+    const url = `${this.baseUrl}/malware/config`;
+    try {
+      const res = await import_ky12.default.get(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS8
+      });
+      const body = await res.json();
+      unwrapHeader(body);
+      if (!isNcsMalwareConfig(body)) {
+        throw new NhnCloudCliError(
+          "NCS API \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: enabled \uD544\uB4DC\uAC00 \uC5C6\uAC70\uB098 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return { enabled: body.enabled };
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * 악성코드 검사 설정을 변경한다.
+   * POST /ncs/v1.0/appkeys/{appKey}/malware/config (method 는 POST — docs 예제 실측 확정, PUT 아님)
+   * 요청 body: { enabled: boolean } — docs 필드 표기는 "String" 이나 예제 JSON 이 quote 없는 boolean
+   * 리터럴이라 실제 wire 타입은 boolean(malware.enabled 실측 확정, ADR-020 트레이드오프 절 참조).
+   * 응답: { header, enabled: true|false } — getMalwareConfig 와 동일한 flat 패턴.
+   */
+  async setMalwareConfig(enabled) {
+    const url = `${this.baseUrl}/malware/config`;
+    try {
+      const res = await import_ky12.default.post(url, {
+        headers: this.authHeaders(),
+        json: { enabled },
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS8
+      });
+      const body = await res.json();
+      unwrapHeader(body);
+      if (!isNcsMalwareConfig(body)) {
+        throw new NhnCloudCliError(
+          "NCS API \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: enabled \uD544\uB4DC\uAC00 \uC5C6\uAC70\uB098 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return { enabled: body.enabled };
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+  /**
+   * workload 실행 히스토리의 악성코드 검사 결과를 조회한다.
+   * GET /ncs/v1.0/appkeys/{appKey}/workloads/{workloadId}/history/{historyId}/malware
+   * 응답: { header, scannedAt, infectedFiles, scannedDirectories, scannedFiles, reports: [...] } —
+   * named 필드로 감싸지 않고 header 와 나란히 flat 필드(docs 예제 실측 확정, malware config 와 동일 패턴).
+   * 모든 top-level 필드가 docs 상 optional(미검사 워크로드는 누락 가능) — 존재하면 그대로 통과시킨다.
+   */
+  async getMalwareResult(workloadId, historyId) {
+    const url = `${this.baseUrl}/workloads/${encodeURIComponent(workloadId)}/history/${encodeURIComponent(historyId)}/malware`;
+    try {
+      const res = await import_ky12.default.get(url, {
+        headers: this.authHeaders(),
+        retry: 0,
+        timeout: DEFAULT_TIMEOUT_MS8
+      });
+      const body = await res.json();
+      unwrapHeader(body);
+      if (body.reports !== void 0 && !Array.isArray(body.reports)) {
+        throw new NhnCloudCliError(
+          "NCS API \uC751\uB2F5 \uD615\uC2DD \uC624\uB958: reports \uAC00 \uBC30\uC5F4\uC774 \uC544\uB2D9\uB2C8\uB2E4.",
+          EXIT_API_ERROR
+        );
+      }
+      return {
+        scannedAt: body.scannedAt,
+        infectedFiles: body.infectedFiles,
+        scannedDirectories: body.scannedDirectories,
+        scannedFiles: body.scannedFiles,
+        reports: body.reports?.filter(isNcsMalwareReport) ?? []
+      };
+    } catch (err) {
+      if (err instanceof NhnCloudCliError) throw err;
+      throw toNhnCloudCliError(err);
+    }
+  }
+};
+
+// src/commands/ncs/helpers.ts
+var MAX_JSON_PAYLOAD_BYTES = 1e6;
+async function resolveNcsAppKey(profileName, appKeyOpt) {
+  if (appKeyOpt) return appKeyOpt;
+  let cred;
+  try {
+    cred = await getServiceCredential("ncs", profileName);
+  } catch (err) {
+    if (!(err instanceof NhnCloudCliError) || err.exitCode !== EXIT_CONFIG_ERROR) {
+      throw err;
+    }
+  }
+  if (!cred?.appkey) {
+    throw new NhnCloudCliError(
+      "NCS appKey \uAC00 \uC5C6\uC2B5\uB2C8\uB2E4. --app-key \uC635\uC158\uC73C\uB85C \uC9C0\uC815\uD558\uAC70\uB098\n~/.nhncloud/credentials.json \uC758 profiles.<profile>.ncs.appkey \uB97C \uC9C1\uC811 \uCD94\uAC00\uD558\uC138\uC694.\n(nhncloud configure \uB294 \uC544\uC9C1 ncs \uB97C \uC9C0\uC6D0\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.)",
+      EXIT_CONFIG_ERROR
+    );
+  }
+  return cred.appkey;
+}
+async function resolveNcsClient(opts) {
+  const profileName = await resolveProfileName(opts.profile);
+  const uak = await getUserAccessKey(profileName);
+  const accessToken = await getAccessToken(profileName, uak.id, uak.secret);
+  const appKey = await resolveNcsAppKey(profileName, opts.appKey);
+  const region = opts.region ?? "kr1";
+  return { client: new NcsClient(accessToken, region, appKey), profileName };
+}
+function readJsonPayload(filePath) {
+  let stat;
+  try {
+    stat = (0, import_node_fs7.statSync)(filePath);
+  } catch (err) {
+    const reason = err.code ?? (err instanceof Error ? err.message : String(err));
+    throw new NhnCloudCliError(
+      `\uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${filePath} (${reason})`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  if (!stat.isFile()) {
+    throw new NhnCloudCliError(`--file \uC774 \uC77C\uBC18 \uD30C\uC77C\uC774 \uC544\uB2D9\uB2C8\uB2E4: ${filePath}`, EXIT_PARAM_ERROR);
+  }
+  if (stat.size > MAX_JSON_PAYLOAD_BYTES) {
+    throw new NhnCloudCliError(
+      `--file \uC774 \uB108\uBB34 \uD07D\uB2C8\uB2E4 (${stat.size} \uBC14\uC774\uD2B8). JSON spec \uD55C\uB3C4 ${MAX_JSON_PAYLOAD_BYTES} \uBC14\uC774\uD2B8.`,
+      EXIT_PARAM_ERROR
+    );
+  }
+  const raw = (0, import_node_fs7.readFileSync)(filePath, "utf-8");
+  try {
+    return JSON.parse(raw);
+  } catch (err) {
+    const detail = err instanceof Error ? err.message : String(err);
+    throw new NhnCloudCliError(
+      `JSON \uD30C\uC2F1\uC5D0 \uC2E4\uD328\uD588\uC2B5\uB2C8\uB2E4: ${filePath} (${detail})`,
+      EXIT_PARAM_ERROR
+    );
+  }
+}
+function requireNonEmpty(value, label) {
+  if (!value.trim()) {
+    throw new NhnCloudCliError(`${label} \uC778\uC218\uAC00 \uBE44\uC5B4\uC788\uC2B5\uB2C8\uB2E4.`, EXIT_PARAM_ERROR);
+  }
+}
+async function confirmDestructive(message, yes) {
+  const isTTY = process.stdin.isTTY;
+  if (!isTTY && !yes) {
+    throw new NhnCloudCliError(
+      "\uBE44\uB300\uD654\uD615 \uD658\uACBD\uC5D0\uC11C\uB294 --yes \uD50C\uB798\uADF8\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.",
+      EXIT_PARAM_ERROR
+    );
+  }
+  if (isTTY && !yes) {
+    const { confirm } = await import("@inquirer/prompts");
+    return confirm({ message, default: false });
+  }
+  return true;
+}
+
+// src/commands/ncs/template.ts
+var listCommand8 = new import_commander43.Command("list").description("NCS \uC124\uACC4\uB3C4(template) \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").option("--page <page>", "\uC870\uD68C\uD560 page \uBC88\uD638").option("--size <size>", "page \uB2F9 \uD56D\uBAA9 \uC218 (\uAE30\uBCF8: API \uAE30\uBCF8\uAC12 10)").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client } = await resolveNcsClient(opts);
+  startSpinner("NCS \uC124\uACC4\uB3C4 \uBAA9\uB85D \uC870\uD68C \uC911...");
+  let totalCount;
+  let templates;
+  try {
+    const result = await client.listTemplates({
+      page: parsePositiveIntegerOption(opts.page, "--page"),
+      size: parsePositiveIntegerOption(opts.size, "--size")
+    });
+    totalCount = result.totalCount;
+    templates = result.templates;
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["id", "name", "version", "versionCount", "workloadCount"],
+    rows: templates.map((t) => [
+      t.id,
+      t.name,
+      t.version ?? "",
+      String(t.versionCount ?? ""),
+      String(t.workloadCount ?? "")
+    ]),
+    raw: { totalCount, templates },
+    ids: templates.map((t) => t.id)
+  });
+});
+var getCommand6 = new import_commander43.Command("get").description("NCS \uC124\uACC4\uB3C4(template) \uB2E8\uAC74\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<id>", "template ID").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  requireNonEmpty(id, "id");
+  const { client } = await resolveNcsClient(opts);
+  startSpinner(`NCS \uC124\uACC4\uB3C4 "${id}" \uC870\uD68C \uC911...`);
+  let template;
+  try {
+    template = await client.getTemplate(id);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["id", "name", "version", "versionCount", "workloadCount"],
+    rows: [
+      [
+        template.id,
+        template.name,
+        template.version ?? "",
+        String(template.versionCount ?? ""),
+        String(template.workloadCount ?? "")
+      ]
+    ],
+    raw: template,
+    ids: [template.id]
+  });
+});
+var createCommand6 = new import_commander43.Command("create").description("NCS \uC124\uACC4\uB3C4(template) \uB97C \uC0DD\uC131\uD55C\uB2E4 (--file \uB85C JSON spec \uC804\uB2EC)").requiredOption("--file <path>", "template \uC0DD\uC131 spec \uC774 \uB2F4\uAE34 JSON \uD30C\uC77C \uACBD\uB85C").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const payload = readJsonPayload(opts.file);
+  const { client } = await resolveNcsClient(opts);
+  startSpinner("NCS \uC124\uACC4\uB3C4 \uC0DD\uC131 \uC911...");
+  let template;
+  try {
+    template = await client.createTemplate(payload);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["id", "name", "version", "versionCount", "workloadCount"],
+    rows: [
+      [
+        template.id,
+        template.name,
+        template.version ?? "",
+        String(template.versionCount ?? ""),
+        String(template.workloadCount ?? "")
+      ]
+    ],
+    raw: template,
+    ids: [template.id]
+  });
+});
+var deleteCommand5 = new import_commander43.Command("delete").description("NCS \uC124\uACC4\uB3C4(template) \uB97C \uC0AD\uC81C\uD55C\uB2E4").argument("<id>", "template ID").option("--yes", "\uD655\uC778 \uD504\uB86C\uD504\uD2B8 \uC0DD\uB7B5 (CI/\uBE44\uB300\uD654\uD615 \uD544\uC218)").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  requireNonEmpty(id, "id");
+  const ok = await confirmDestructive(`NCS \uC124\uACC4\uB3C4 "${id}" \uB97C \uC0AD\uC81C\uD558\uC2DC\uACA0\uC2B5\uB2C8\uAE4C?`, opts.yes);
+  if (!ok) {
+    process.stderr.write(import_chalk14.default.yellow("\uC0AD\uC81C\uAC00 \uCDE8\uC18C\uB418\uC5C8\uC2B5\uB2C8\uB2E4.\n"));
+    return;
+  }
+  const { client } = await resolveNcsClient(opts);
+  startSpinner(`NCS \uC124\uACC4\uB3C4 \uC0AD\uC81C \uC911... (id: ${id})`);
+  try {
+    await client.deleteTemplate(id);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  process.stderr.write(import_chalk14.default.green(`\u2713 NCS \uC124\uACC4\uB3C4 "${id}" \uAC00 \uC0AD\uC81C\uB418\uC5C8\uC2B5\uB2C8\uB2E4.
+`));
+});
+var versionListCommand = new import_commander43.Command("list").description("NCS \uC124\uACC4\uB3C4(template) \uC758 \uBC84\uC804 \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<id>", "template ID").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").option("--q <query>", "\uAC80\uC0C9\uC5B4").option("--sort <sort>", "\uC815\uB82C \uC870\uAC74").option("--page <page>", "\uC870\uD68C\uD560 page \uBC88\uD638").option("--size <size>", "page \uB2F9 \uD56D\uBAA9 \uC218 (\uAE30\uBCF8: API \uAE30\uBCF8\uAC12 10)").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  requireNonEmpty(id, "id");
+  const { client } = await resolveNcsClient(opts);
+  startSpinner(`NCS \uC124\uACC4\uB3C4 "${id}" \uBC84\uC804 \uBAA9\uB85D \uC870\uD68C \uC911...`);
+  let totalCount;
+  let versions;
+  try {
+    const result = await client.listTemplateVersions(id, {
+      q: opts.q,
+      sort: opts.sort,
+      page: parsePositiveIntegerOption(opts.page, "--page"),
+      size: parsePositiveIntegerOption(opts.size, "--size")
+    });
+    totalCount = result.totalCount;
+    versions = result.versions;
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["id", "version", "workloadCount", "createdAt"],
+    rows: versions.map((v) => [
+      v.id,
+      v.version,
+      String(v.workloadCount ?? ""),
+      v.createdAt ?? ""
+    ]),
+    raw: { totalCount, versions },
+    ids: versions.map((v) => v.id)
+  });
+});
+var versionGetCommand = new import_commander43.Command("get").description("NCS \uC124\uACC4\uB3C4(template) \uBC84\uC804 \uB2E8\uAC74\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<id>", "template ID").argument("<version>", "\uBC84\uC804 \uAC12").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, version, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  requireNonEmpty(id, "id");
+  requireNonEmpty(version, "version");
+  const { client } = await resolveNcsClient(opts);
+  startSpinner(`NCS \uC124\uACC4\uB3C4 "${id}" \uBC84\uC804 "${version}" \uC870\uD68C \uC911...`);
+  let detail;
+  try {
+    detail = await client.getTemplateVersion(id, version);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["id", "version", "workloadCount", "createdAt"],
+    rows: [[detail.id, detail.version, String(detail.workloadCount ?? ""), detail.createdAt ?? ""]],
+    raw: detail,
+    ids: [detail.id]
+  });
+});
+var versionCreateCommand = new import_commander43.Command("create").description("NCS \uC124\uACC4\uB3C4(template) \uC758 \uC0C8 \uBC84\uC804\uC744 \uC0DD\uC131\uD55C\uB2E4 (--file \uB85C JSON spec \uC804\uB2EC, sourceVersion \uD544\uC218)").argument("<id>", "template ID").requiredOption("--file <path>", "\uBC84\uC804 \uC0DD\uC131 spec \uC774 \uB2F4\uAE34 JSON \uD30C\uC77C \uACBD\uB85C (sourceVersion \uD544\uB4DC \uD544\uC218)").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  requireNonEmpty(id, "id");
+  const payload = readJsonPayload(opts.file);
+  const { client } = await resolveNcsClient(opts);
+  startSpinner(`NCS \uC124\uACC4\uB3C4 "${id}" \uBC84\uC804 \uC0DD\uC131 \uC911...`);
+  let version;
+  try {
+    version = await client.createTemplateVersion(id, payload);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["id", "version", "workloadCount", "createdAt"],
+    rows: [[version.id, version.version, String(version.workloadCount ?? ""), version.createdAt ?? ""]],
+    raw: version,
+    ids: [version.id]
+  });
+});
+var versionDeleteCommand = new import_commander43.Command("delete").description("NCS \uC124\uACC4\uB3C4(template) \uBC84\uC804\uC744 \uC0AD\uC81C\uD55C\uB2E4").argument("<id>", "template ID").argument("<version>", "\uBC84\uC804 \uAC12").option("--yes", "\uD655\uC778 \uD504\uB86C\uD504\uD2B8 \uC0DD\uB7B5 (CI/\uBE44\uB300\uD654\uD615 \uD544\uC218)").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, version, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  requireNonEmpty(id, "id");
+  requireNonEmpty(version, "version");
+  const ok = await confirmDestructive(
+    `NCS \uC124\uACC4\uB3C4 "${id}" \uBC84\uC804 "${version}" \uC744 \uC0AD\uC81C\uD558\uC2DC\uACA0\uC2B5\uB2C8\uAE4C?`,
+    opts.yes
+  );
+  if (!ok) {
+    process.stderr.write(import_chalk14.default.yellow("\uC0AD\uC81C\uAC00 \uCDE8\uC18C\uB418\uC5C8\uC2B5\uB2C8\uB2E4.\n"));
+    return;
+  }
+  const { client } = await resolveNcsClient(opts);
+  startSpinner(`NCS \uC124\uACC4\uB3C4 "${id}" \uBC84\uC804 "${version}" \uC0AD\uC81C \uC911...`);
+  try {
+    await client.deleteTemplateVersion(id, version);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  process.stderr.write(
+    import_chalk14.default.green(`\u2713 NCS \uC124\uACC4\uB3C4 "${id}" \uBC84\uC804 "${version}" \uC774 \uC0AD\uC81C\uB418\uC5C8\uC2B5\uB2C8\uB2E4.
+`)
+  );
+});
+var versionCommand = new import_commander43.Command("version").description("NCS \uC124\uACC4\uB3C4(template) \uBC84\uC804 \uAD00\uB9AC").addCommand(versionListCommand).addCommand(versionGetCommand).addCommand(versionCreateCommand).addCommand(versionDeleteCommand);
+var templateCommand = new import_commander43.Command("template").description("NCS \uC124\uACC4\uB3C4(template) \uAD00\uB9AC").addCommand(listCommand8).addCommand(getCommand6).addCommand(createCommand6).addCommand(deleteCommand5).addCommand(versionCommand);
+
+// src/commands/ncs/workload.ts
+var import_commander44 = require("commander");
+var import_chalk15 = __toESM(require("chalk"));
+function workloadRows(w) {
+  return [
+    [
+      w.id,
+      w.name,
+      w.type ?? "",
+      w.status,
+      String(w.desired ?? ""),
+      String(w.available ?? "")
+    ]
+  ];
+}
+var WORKLOAD_HEADERS = ["id", "name", "type", "status", "desired", "available"];
+var listCommand9 = new import_commander44.Command("list").description("NCS workload(\uB7F0\uD0C0\uC784 \uC2E4\uD589) \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").option("--q <query>", "\uC6CC\uD06C\uB85C\uB4DC \uC774\uB984\xB7\uD15C\uD50C\uB9BF ID\xB7\uD15C\uD50C\uB9BF \uBC84\uC804\uC73C\uB85C \uD544\uD130\uB9C1").option("--page <page>", "\uC870\uD68C\uD560 page \uBC88\uD638").option("--size <size>", "page \uB2F9 \uD56D\uBAA9 \uC218 (\uAE30\uBCF8: API \uAE30\uBCF8\uAC12 10)").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client } = await resolveNcsClient(opts);
+  startSpinner("NCS workload \uBAA9\uB85D \uC870\uD68C \uC911...");
+  let totalCount;
+  let workloads;
+  try {
+    const result = await client.listWorkloads({
+      q: opts.q,
+      page: parsePositiveIntegerOption(opts.page, "--page"),
+      size: parsePositiveIntegerOption(opts.size, "--size")
+    });
+    totalCount = result.totalCount;
+    workloads = result.workloads;
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["id", "name", "type", "status", "desired", "available"],
+    rows: workloads.map((w) => [
+      w.id,
+      w.name,
+      w.type ?? "",
+      w.status,
+      String(w.desired ?? ""),
+      String(w.available ?? "")
+    ]),
+    raw: { totalCount, workloads },
+    ids: workloads.map((w) => w.id)
+  });
+});
+var getCommand7 = new import_commander44.Command("get").description("NCS workload \uB2E8\uAC74\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<id>", "workload ID").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  requireNonEmpty(id, "id");
+  const { client } = await resolveNcsClient(opts);
+  startSpinner(`NCS workload "${id}" \uC870\uD68C \uC911...`);
+  let workload;
+  try {
+    workload = await client.getWorkload(id);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["id", "name", "type", "status", "desired", "available", "tasks"],
+    rows: [
+      [
+        workload.id,
+        workload.name,
+        workload.type ?? "",
+        workload.status,
+        String(workload.desired ?? ""),
+        String(workload.available ?? ""),
+        String(workload.tasks?.length ?? 0)
+      ]
+    ],
+    raw: workload,
+    ids: [workload.id]
+  });
+});
+var logsCommand = new import_commander44.Command("logs").description("NCS workload task \uC758 \uCEE8\uD14C\uC774\uB108 \uB85C\uADF8\uB97C \uC870\uD68C\uD55C\uB2E4").argument("<id>", "workload ID").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").option("--task <taskId>", "task ID (\uD544\uC218)").option("--container <name>", "\uCEE8\uD14C\uC774\uB108 \uC774\uB984 (\uD544\uC218)").option("--from <time>", "\uB85C\uADF8 \uC2DC\uC791 \uC2DC\uAC04 (\uAE30\uBCF8: \uD604\uC7AC\uB85C\uBD80\uD130 5\uBD84 \uC804)").option("--to <time>", "\uB85C\uADF8 \uC885\uB8CC \uC2DC\uAC04 (\uAE30\uBCF8: \uD604\uC7AC \uC2DC\uAC04)").option("--page <page>", "\uC870\uD68C\uD560 page \uBC88\uD638").option("--size <size>", "page \uB2F9 \uD56D\uBAA9 \uC218 (\uAE30\uBCF8: API \uAE30\uBCF8\uAC12 100)").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  requireNonEmpty(id, "id");
+  if (!opts.task || !opts.task.trim()) {
+    throw new NhnCloudCliError(
+      "--task \uC635\uC158\uC774 \uBE44\uC5B4\uC788\uC2B5\uB2C8\uB2E4. task ID \uB97C \uC9C0\uC815\uD558\uC138\uC694.",
+      EXIT_PARAM_ERROR
+    );
+  }
+  if (!opts.container || !opts.container.trim()) {
+    throw new NhnCloudCliError(
+      "--container \uC635\uC158\uC774 \uBE44\uC5B4\uC788\uC2B5\uB2C8\uB2E4. \uCEE8\uD14C\uC774\uB108 \uC774\uB984\uC744 \uC9C0\uC815\uD558\uC138\uC694.",
+      EXIT_PARAM_ERROR
+    );
+  }
+  const { client } = await resolveNcsClient(opts);
+  startSpinner(`NCS workload "${id}" task "${opts.task}" \uB85C\uADF8 \uC870\uD68C \uC911...`);
+  let logs;
+  try {
+    const result = await client.getWorkloadLogs(id, opts.task, {
+      container: opts.container,
+      from: opts.from,
+      to: opts.to,
+      page: parsePositiveIntegerOption(opts.page, "--page"),
+      size: parsePositiveIntegerOption(opts.size, "--size")
+    });
+    logs = result.logs;
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["time", "log"],
+    rows: logs.map((l) => [l.time, l.log]),
+    raw: { logs },
+    ids: []
+  });
+});
+var eventsCommand2 = new import_commander44.Command("events").description("NCS workload task \uC758 \uC774\uBCA4\uD2B8\uB97C \uC870\uD68C\uD55C\uB2E4").argument("<id>", "workload ID").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").option("--task <taskId>", "task ID (\uD544\uC218)").option("--type <type>", "\uC774\uBCA4\uD2B8 \uD0C0\uC785 (Normal | Warning)").option("--q <query>", "\uC774\uBCA4\uD2B8 \uB0B4\uC6A9 \uD544\uD130\uB9C1").option("--from <time>", "\uC774\uBCA4\uD2B8 \uB9C8\uC9C0\uB9C9 \uBC1C\uC0DD \uC2DC\uC791 \uC2DC\uAC04 (\uAE30\uBCF8: \uD604\uC7AC\uB85C\uBD80\uD130 1\uC2DC\uAC04 \uC804)").option("--to <time>", "\uC774\uBCA4\uD2B8 \uB9C8\uC9C0\uB9C9 \uBC1C\uC0DD \uC885\uB8CC \uC2DC\uAC04 (\uAE30\uBCF8: \uD604\uC7AC \uC2DC\uAC04)").option("--page <page>", "\uC870\uD68C\uD560 page \uBC88\uD638").option("--size <size>", "page \uB2F9 \uD56D\uBAA9 \uC218 (\uAE30\uBCF8: API \uAE30\uBCF8\uAC12 10)").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  requireNonEmpty(id, "id");
+  if (!opts.task || !opts.task.trim()) {
+    throw new NhnCloudCliError(
+      "--task \uC635\uC158\uC774 \uBE44\uC5B4\uC788\uC2B5\uB2C8\uB2E4. task ID \uB97C \uC9C0\uC815\uD558\uC138\uC694.",
+      EXIT_PARAM_ERROR
+    );
+  }
+  const { client } = await resolveNcsClient(opts);
+  startSpinner(`NCS workload "${id}" task "${opts.task}" \uC774\uBCA4\uD2B8 \uC870\uD68C \uC911...`);
+  let totalCount;
+  let events;
+  try {
+    const result = await client.getWorkloadEvents(id, opts.task, {
+      type: opts.type,
+      q: opts.q,
+      from: opts.from,
+      to: opts.to,
+      page: parsePositiveIntegerOption(opts.page, "--page"),
+      size: parsePositiveIntegerOption(opts.size, "--size")
+    });
+    totalCount = result.totalCount;
+    events = result.events;
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["type", "reason", "message", "count", "lastTimestamp"],
+    rows: events.map((e) => [e.type, e.reason, e.message, String(e.count), e.lastTimestamp]),
+    raw: { totalCount, events },
+    ids: []
+  });
+});
+var historyGetCommand = new import_commander44.Command("get").description("NCS workload \uC2E4\uD589 \uD788\uC2A4\uD1A0\uB9AC \uB2E8\uAC74\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<id>", "workload ID").argument("<historyId>", "\uD788\uC2A4\uD1A0\uB9AC ID").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, historyId, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  requireNonEmpty(id, "id");
+  requireNonEmpty(historyId, "historyId");
+  const { client } = await resolveNcsClient(opts);
+  startSpinner(`NCS workload "${id}" \uD788\uC2A4\uD1A0\uB9AC "${historyId}" \uC870\uD68C \uC911...`);
+  let detail;
+  try {
+    detail = await client.getWorkloadHistory(id, historyId);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["id", "status", "templateId", "createdAt", "deletedAt"],
+    rows: [
+      [
+        String(detail.id),
+        detail.status,
+        detail.templateId ?? "",
+        detail.createdAt,
+        detail.deletedAt ?? ""
+      ]
+    ],
+    raw: detail,
+    ids: [String(detail.id)]
+  });
+});
+var historyCommand = new import_commander44.Command("history").description("NCS workload \uC2E4\uD589 \uD788\uC2A4\uD1A0\uB9AC \uBAA9\uB85D\uC744 \uC870\uD68C\uD55C\uB2E4").argument("<id>", "workload ID").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").option("--page <page>", "\uC870\uD68C\uD560 page \uBC88\uD638").option("--size <size>", "page \uB2F9 \uD56D\uBAA9 \uC218 (\uAE30\uBCF8: API \uAE30\uBCF8\uAC12 10)").option("--sort <sort>", "\uC815\uB82C \uAE30\uC900 \uD544\uB4DC\uBA85 (\uC5ED\uC21C\uC740 \uD544\uB4DC\uBA85 \uC55E\uC5D0 - \uB97C \uBD99\uC784, \uC608: -id)").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  requireNonEmpty(id, "id");
+  const { client } = await resolveNcsClient(opts);
+  startSpinner(`NCS workload "${id}" \uD788\uC2A4\uD1A0\uB9AC \uBAA9\uB85D \uC870\uD68C \uC911...`);
+  let totalCount;
+  let history;
+  try {
+    const result = await client.listWorkloadHistory(id, {
+      page: parsePositiveIntegerOption(opts.page, "--page"),
+      size: parsePositiveIntegerOption(opts.size, "--size"),
+      sort: opts.sort
+    });
+    totalCount = result.totalCount;
+    history = result.history;
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["id", "status", "templateId", "createdAt", "deletedAt"],
+    rows: history.map((h) => [
+      String(h.id),
+      h.status,
+      h.templateId ?? "",
+      h.createdAt,
+      h.deletedAt ?? ""
+    ]),
+    raw: { totalCount, history },
+    ids: history.map((h) => String(h.id))
+  });
+}).addCommand(historyGetCommand);
+var scheduleHistoryCommand = new import_commander44.Command("schedule-history").description("NCS workload \uC608\uC57D \uC2E4\uD589 \uD788\uC2A4\uD1A0\uB9AC\uB97C \uC870\uD68C\uD55C\uB2E4").argument("<id>", "workload ID").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  requireNonEmpty(id, "id");
+  const { client } = await resolveNcsClient(opts);
+  startSpinner(`NCS workload "${id}" \uC608\uC57D \uC2E4\uD589 \uD788\uC2A4\uD1A0\uB9AC \uC870\uD68C \uC911...`);
+  let scheduleHistory;
+  try {
+    const result = await client.getWorkloadScheduleHistory(id);
+    scheduleHistory = result.scheduleHistory;
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["id", "status", "createdAt", "finishedAt"],
+    rows: scheduleHistory.map((s) => [s.id, s.status, s.createdAt, s.finishedAt ?? ""]),
+    raw: { scheduleHistory },
+    ids: scheduleHistory.map((s) => s.id)
+  });
+});
+var createCommand7 = new import_commander44.Command("create").description("NCS workload(\uB7F0\uD0C0\uC784 \uC2E4\uD589) \uB97C \uC0DD\uC131\uD55C\uB2E4 (--file \uB85C JSON spec \uC804\uB2EC)").requiredOption("--file <path>", "workload \uC0DD\uC131 spec \uC774 \uB2F4\uAE34 JSON \uD30C\uC77C \uACBD\uB85C").option("--wait", "workload \uAC00 Running \uC0C1\uD0DC\uAC00 \uB420 \uB54C\uAE4C\uC9C0 \uB300\uAE30").option("--timeout <sec>", "wait \uD0C0\uC784\uC544\uC6C3 (\uCD08, \uAE30\uBCF8 300)", "300").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const payload = readJsonPayload(opts.file);
+  const timeoutMs = parsePositiveIntegerOption(opts.timeout ?? "300", "--timeout") * 1e3;
+  const { client } = await resolveNcsClient(opts);
+  startSpinner("NCS workload \uC0DD\uC131 \uC911...");
+  let workload;
+  try {
+    workload = await client.createWorkload(payload);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  if (opts.wait) {
+    startSpinner(`NCS workload "${workload.id}" Running \uB300\uAE30 \uC911...`);
+    try {
+      workload = await client.waitForRunning(workload.id, { timeoutMs });
+    } catch (err) {
+      stopSpinner(false);
+      throw err;
+    }
+    stopSpinner(true, `Running \uD655\uC778 (id: ${workload.id})`);
+  }
+  output(opts, {
+    headers: WORKLOAD_HEADERS,
+    rows: workloadRows(workload),
+    raw: workload,
+    ids: [workload.id]
+  });
+});
+var updateCommand = new import_commander44.Command("update").description("NCS workload \uB97C \uC804\uCCB4 \uAD50\uCCB4\uD55C\uB2E4 (--file \uB85C JSON spec \uC804\uB2EC, PUT)").argument("<id>", "workload ID").requiredOption("--file <path>", "workload \uAD50\uCCB4 spec \uC774 \uB2F4\uAE34 JSON \uD30C\uC77C \uACBD\uB85C").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  requireNonEmpty(id, "id");
+  const payload = readJsonPayload(opts.file);
+  const { client } = await resolveNcsClient(opts);
+  startSpinner(`NCS workload "${id}" \uAD50\uCCB4 \uC911...`);
+  let workload;
+  try {
+    workload = await client.updateWorkload(id, payload);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: WORKLOAD_HEADERS,
+    rows: workloadRows(workload),
+    raw: workload,
+    ids: [workload.id]
+  });
+});
+var patchCommand = new import_commander44.Command("patch").description("NCS workload \uB97C \uBD80\uBD84 \uBCC0\uACBD\uD55C\uB2E4 (--file \uB85C JSON Patch \uBC30\uC5F4 \uC804\uB2EC, RFC 6902)").argument("<id>", "workload ID").requiredOption("--file <path>", "JSON Patch \uBC30\uC5F4(op/path/value)\uC774 \uB2F4\uAE34 \uD30C\uC77C \uACBD\uB85C").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  requireNonEmpty(id, "id");
+  const payload = readJsonPayload(opts.file);
+  const { client } = await resolveNcsClient(opts);
+  startSpinner(`NCS workload "${id}" \uBD80\uBD84 \uBCC0\uACBD \uC911...`);
+  let workload;
+  try {
+    workload = await client.patchWorkload(id, payload);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: WORKLOAD_HEADERS,
+    rows: workloadRows(workload),
+    raw: workload,
+    ids: [workload.id]
+  });
+});
+var pauseCommand = new import_commander44.Command("pause").description("NCS workload \uB97C \uC77C\uC2DC\uC815\uC9C0\uD55C\uB2E4").argument("<id>", "workload ID").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  requireNonEmpty(id, "id");
+  const { client } = await resolveNcsClient(opts);
+  startSpinner(`NCS workload "${id}" \uC77C\uC2DC\uC815\uC9C0 \uC911...`);
+  try {
+    await client.pauseWorkload(id);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  process.stderr.write(import_chalk15.default.green(`\u2713 NCS workload "${id}" \uAC00 \uC77C\uC2DC\uC815\uC9C0\uB418\uC5C8\uC2B5\uB2C8\uB2E4.
+`));
+});
+var resumeCommand = new import_commander44.Command("resume").description("NCS workload \uB97C \uC7AC\uAC1C\uD55C\uB2E4").argument("<id>", "workload ID").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  requireNonEmpty(id, "id");
+  const { client } = await resolveNcsClient(opts);
+  startSpinner(`NCS workload "${id}" \uC7AC\uAC1C \uC911...`);
+  try {
+    await client.resumeWorkload(id);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  process.stderr.write(import_chalk15.default.green(`\u2713 NCS workload "${id}" \uAC00 \uC7AC\uAC1C\uB418\uC5C8\uC2B5\uB2C8\uB2E4.
+`));
+});
+var restartCommand = new import_commander44.Command("restart").description("NCS workload task \uB97C \uC7AC\uC2DC\uC791\uD55C\uB2E4").argument("<id>", "workload ID").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").option("--task <taskId>", "task ID (\uD544\uC218)").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  requireNonEmpty(id, "id");
+  if (!opts.task || !opts.task.trim()) {
+    throw new NhnCloudCliError(
+      "--task \uC635\uC158\uC774 \uBE44\uC5B4\uC788\uC2B5\uB2C8\uB2E4. task ID \uB97C \uC9C0\uC815\uD558\uC138\uC694.",
+      EXIT_PARAM_ERROR
+    );
+  }
+  const { client } = await resolveNcsClient(opts);
+  startSpinner(`NCS workload "${id}" task "${opts.task}" \uC7AC\uC2DC\uC791 \uC911...`);
+  try {
+    await client.restartWorkloadTask(id, opts.task);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  process.stderr.write(
+    import_chalk15.default.green(`\u2713 NCS workload "${id}" task "${opts.task}" \uAC00 \uC7AC\uC2DC\uC791\uB418\uC5C8\uC2B5\uB2C8\uB2E4.
+`)
+  );
+});
+var deleteCommand6 = new import_commander44.Command("delete").description("NCS workload \uB97C \uC0AD\uC81C\uD55C\uB2E4").argument("<id>", "workload ID").option("--yes", "\uD655\uC778 \uD504\uB86C\uD504\uD2B8 \uC0DD\uB7B5 (CI/\uBE44\uB300\uD654\uD615 \uD544\uC218)").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (id, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  requireNonEmpty(id, "id");
+  const ok = await confirmDestructive(`NCS workload "${id}" \uB97C \uC0AD\uC81C\uD558\uC2DC\uACA0\uC2B5\uB2C8\uAE4C?`, opts.yes);
+  if (!ok) {
+    process.stderr.write(import_chalk15.default.yellow("\uC0AD\uC81C\uAC00 \uCDE8\uC18C\uB418\uC5C8\uC2B5\uB2C8\uB2E4.\n"));
+    return;
+  }
+  const { client } = await resolveNcsClient(opts);
+  startSpinner(`NCS workload \uC0AD\uC81C \uC911... (id: ${id})`);
+  try {
+    await client.deleteWorkload(id);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  process.stderr.write(import_chalk15.default.green(`\u2713 NCS workload "${id}" \uAC00 \uC0AD\uC81C\uB418\uC5C8\uC2B5\uB2C8\uB2E4.
+`));
+});
+var workloadCommand = new import_commander44.Command("workload").description("NCS workload(\uB7F0\uD0C0\uC784 \uC2E4\uD589) \uAD00\uB9AC").addCommand(listCommand9).addCommand(getCommand7).addCommand(logsCommand).addCommand(eventsCommand2).addCommand(historyCommand).addCommand(scheduleHistoryCommand).addCommand(createCommand7).addCommand(updateCommand).addCommand(patchCommand).addCommand(pauseCommand).addCommand(resumeCommand).addCommand(restartCommand).addCommand(deleteCommand6);
+
+// src/commands/ncs/malware.ts
+var import_commander45 = require("commander");
+function parseEnabledOption(value) {
+  if (value === "true") return true;
+  if (value === "false") return false;
+  throw new NhnCloudCliError(
+    `--enabled \uB294 true \uB610\uB294 false \uC5EC\uC57C \uD569\uB2C8\uB2E4 (\uC785\uB825: ${JSON.stringify(value)}).`,
+    EXIT_PARAM_ERROR
+  );
+}
+var configGetCommand = new import_commander45.Command("get").description("NCS \uC545\uC131\uCF54\uB4DC \uAC80\uC0AC \uC124\uC815\uC744 \uC870\uD68C\uD55C\uB2E4").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const { client } = await resolveNcsClient(opts);
+  startSpinner("NCS \uC545\uC131\uCF54\uB4DC \uAC80\uC0AC \uC124\uC815 \uC870\uD68C \uC911...");
+  let config;
+  try {
+    config = await client.getMalwareConfig();
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["enabled"],
+    rows: [[String(config.enabled)]],
+    raw: config,
+    ids: []
+  });
+});
+var configSetCommand = new import_commander45.Command("set").description("NCS \uC545\uC131\uCF54\uB4DC \uAC80\uC0AC \uC124\uC815\uC744 \uBCC0\uACBD\uD55C\uB2E4").requiredOption("--enabled <true|false>", "\uC545\uC131\uCF54\uB4DC \uAC80\uC0AC \uC0AC\uC6A9 \uC5EC\uBD80").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (_opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  const enabled = parseEnabledOption(opts.enabled);
+  const { client } = await resolveNcsClient(opts);
+  startSpinner("NCS \uC545\uC131\uCF54\uB4DC \uAC80\uC0AC \uC124\uC815 \uBCC0\uACBD \uC911...");
+  let config;
+  try {
+    config = await client.setMalwareConfig(enabled);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["enabled"],
+    rows: [[String(config.enabled)]],
+    raw: config,
+    ids: []
+  });
+});
+var configCommand = new import_commander45.Command("config").description("NCS \uC545\uC131\uCF54\uB4DC \uAC80\uC0AC \uC124\uC815 \uAD00\uB9AC").addCommand(configGetCommand).addCommand(configSetCommand);
+var resultCommand = new import_commander45.Command("result").description("NCS workload \uC2E4\uD589 \uD788\uC2A4\uD1A0\uB9AC\uC758 \uC545\uC131\uCF54\uB4DC \uAC80\uC0AC \uACB0\uACFC\uB97C \uC870\uD68C\uD55C\uB2E4").argument("<workloadId>", "workload ID").argument("<historyId>", "\uD788\uC2A4\uD1A0\uB9AC ID").option("--region <region>", "NCS region (\uAE30\uBCF8: kr1, kr1/kr3 \uB9CC \uC9C0\uC6D0)", "kr1").option("--app-key <key>", "NCS appKey (profile \uC758 ncs.appkey \uBCF4\uB2E4 \uC6B0\uC120)").option("--profile <name>", "\uC0AC\uC6A9\uD560 profile \uC774\uB984").action(async (workloadId, historyId, _opts, cmd) => {
+  const opts = cmd.optsWithGlobals();
+  requireNonEmpty(workloadId, "workloadId");
+  requireNonEmpty(historyId, "historyId");
+  const { client } = await resolveNcsClient(opts);
+  startSpinner(
+    `NCS workload "${workloadId}" \uD788\uC2A4\uD1A0\uB9AC "${historyId}" \uC545\uC131\uCF54\uB4DC \uAC80\uC0AC \uACB0\uACFC \uC870\uD68C \uC911...`
+  );
+  let result;
+  try {
+    result = await client.getMalwareResult(workloadId, historyId);
+  } catch (err) {
+    stopSpinner(false);
+    throw err;
+  }
+  stopSpinner(true);
+  output(opts, {
+    headers: ["scannedAt", "infectedFiles", "scannedDirectories", "scannedFiles", "reports"],
+    rows: [
+      [
+        result.scannedAt ?? "",
+        String(result.infectedFiles ?? ""),
+        String(result.scannedDirectories ?? ""),
+        String(result.scannedFiles ?? ""),
+        String(result.reports?.length ?? 0)
+      ]
+    ],
+    raw: result,
+    ids: []
+  });
+});
+var malwareCommand = new import_commander45.Command("malware").description("NCS \uC545\uC131\uCF54\uB4DC \uAC80\uC0AC \uAD00\uB9AC").addCommand(configCommand).addCommand(resultCommand);
+
+// src/index.ts
+var rootAgentHints = `
+Agent hints:
+  - Prefer --json for structured output.
+  - Use --quiet only when the command documents an identifier output.
+  - Use --profile <name> to avoid relying on default profile.
+  - For IaaS/NKS commands, use --region <region> when region matters.
+  - Run "nhncloud commands --json" to inspect command paths and options.
+`;
+var logncrashAgentWorkflow = `
+Agent workflow:
+  1. nhncloud logncrash search --query '*' --from 1h --to now --json
+  2. nhncloud logncrash export --query '<lucene>' --from 1h --to now --output logs.jsonl
+`;
+var deployAgentWorkflow = `
+Agent workflow:
+  1. nhncloud deploy artifacts <target> --json
+  2. nhncloud deploy server-groups <target> --json
+  3. nhncloud deploy run <target>
+`;
+var instanceAgentWorkflow = `
+Agent workflow:
+  1. nhncloud instance images --json
+  2. nhncloud instance flavors --detail --json
+  3. nhncloud instance list --json
+`;
+var networkAgentWorkflow = `
+Agent workflow:
+  1. nhncloud network list --json
+  2. nhncloud network subnet list --json
+`;
+var volumeAgentWorkflow = `
+Agent workflow:
+  1. nhncloud volume list --json
+  2. nhncloud volume get <volume-id> --json
+`;
+var floatingIpAgentWorkflow = `
+Agent workflow:
+  1. nhncloud floatingip list --json
+  2. nhncloud floatingip create --json
+`;
+var ncrAgentWorkflow = `
+Agent workflow:
+  1. nhncloud ncr list --json
+  2. nhncloud ncr images <registry> --json
+  3. nhncloud ncr tags <registry> <repository> --json
+`;
+var nksAgentWorkflow = `
+Agent workflow:
+  1. nhncloud nks supports --json
+  2. nhncloud nks cluster list --json
+  3. nhncloud nks cluster get <cluster> --json
+`;
+var ncsAgentWorkflow = `
+Agent workflow:
+  1. nhncloud ncs template list --json
+  2. nhncloud ncs workload list --json
+  3. nhncloud ncs workload get <id> --json
 `;
-var program = new import_commander43.Command();
-program.name("nhncloud").description("NHN Cloud CLI \u2014 AI agent & terminal friendly").version("0.7.0").option("--json", "JSON \uD615\uC2DD\uC73C\uB85C \uCD9C\uB825").option("--quiet", "\uCD5C\uC18C \uCD9C\uB825 (\uC790\uB3D9\uD654\uC6A9)").option("--no-color", "\uC0C9\uC0C1 \uBE44\uD65C\uC131\uD654").addHelpText("after", rootAgentHints);
+var program = new import_commander46.Command();
+program.name("nhncloud").description("NHN Cloud CLI \u2014 AI agent & terminal friendly").version("0.8.0").option("--json", "JSON \uD615\uC2DD\uC73C\uB85C \uCD9C\uB825").option("--quiet", "\uCD5C\uC18C \uCD9C\uB825 (\uC790\uB3D9\uD654\uC6A9)").option("--no-color", "\uC0C9\uC0C1 \uBE44\uD65C\uC131\uD654").addHelpText("after", rootAgentHints);
 program.hook("preAction", () => {
   const opts = program.opts();
   if (!opts.color || process.env["NO_COLOR"]) {
-    import_chalk14.default.level = 0;
+    import_chalk16.default.level = 0;
   }
   if (opts.json || opts.quiet) {
     setQuiet(true);
   }
 });
 program.addCommand(configureCommand);
-var logncrashCommand = new import_commander43.Command("logncrash").description("Log & Crash \uAD00\uB828 \uBA85\uB839").addHelpText("after", logncrashAgentWorkflow);
+var logncrashCommand = new import_commander46.Command("logncrash").description("Log & Crash \uAD00\uB828 \uBA85\uB839").addHelpText("after", logncrashAgentWorkflow);
 logncrashCommand.addCommand(searchCommand);
 logncrashCommand.addCommand(sendCommand);
 logncrashCommand.addCommand(exportCommand);
 program.addCommand(logncrashCommand);
-var deployCommand = new import_commander43.Command("deploy").description("NHN Cloud Deploy \uAD00\uB828 \uBA85\uB839").addHelpText("after", deployAgentWorkflow);
+var deployCommand = new import_commander46.Command("deploy").description("NHN Cloud Deploy \uAD00\uB828 \uBA85\uB839").addHelpText("after", deployAgentWorkflow);
 deployCommand.addCommand(runCommand);
 deployCommand.addCommand(artifactsCommand);
 deployCommand.addCommand(serverGroupsCommand);
@@ -5725,7 +7340,7 @@ deployCommand.addCommand(binariesCommand);
 deployCommand.addCommand(uploadCommand);
 deployCommand.addCommand(downloadCommand);
 program.addCommand(deployCommand);
-var instanceCommand = new import_commander43.Command("instance").description("Compute \uC778\uC2A4\uD134\uC2A4 \uAD00\uB828 \uBA85\uB839").addHelpText("after", instanceAgentWorkflow);
+var instanceCommand = new import_commander46.Command("instance").description("Compute \uC778\uC2A4\uD134\uC2A4 \uAD00\uB828 \uBA85\uB839").addHelpText("after", instanceAgentWorkflow);
 instanceCommand.addCommand(listCommand);
 instanceCommand.addCommand(flavorsCommand);
 instanceCommand.addCommand(availabilityZonesCommand);
@@ -5744,39 +7359,44 @@ instanceCommand.addCommand(keypairCommand);
 instanceCommand.addCommand(volumeCommand);
 instanceCommand.addCommand(volumesCommand);
 program.addCommand(instanceCommand);
-var networkCommand = new import_commander43.Command("network").description("VPC\xB7\uC11C\uBE0C\uB137 \uC870\uD68C").addHelpText("after", networkAgentWorkflow);
+var networkCommand = new import_commander46.Command("network").description("VPC\xB7\uC11C\uBE0C\uB137 \uC870\uD68C").addHelpText("after", networkAgentWorkflow);
 networkCommand.addCommand(listCommand3);
 networkCommand.addCommand(subnetCommand);
 program.addCommand(networkCommand);
-var volumeCommand2 = new import_commander43.Command("volume").description("Block Storage \uBCFC\uB968 \uAD00\uB828 \uBA85\uB839").addHelpText("after", volumeAgentWorkflow);
+var volumeCommand2 = new import_commander46.Command("volume").description("Block Storage \uBCFC\uB968 \uAD00\uB828 \uBA85\uB839").addHelpText("after", volumeAgentWorkflow);
 volumeCommand2.addCommand(listCommand2);
 volumeCommand2.addCommand(getCommand);
 volumeCommand2.addCommand(createCommand);
 program.addCommand(volumeCommand2);
-var floatingipCommand = new import_commander43.Command("floatingip").description(
+var floatingipCommand = new import_commander46.Command("floatingip").description(
   "Floating IP(\uC778\uC2A4\uD134\uC2A4 \uACF5\uC778 IP) \uAD00\uB9AC"
 ).addHelpText("after", floatingIpAgentWorkflow);
 floatingipCommand.addCommand(listCommand4);
 floatingipCommand.addCommand(createCommand2);
 floatingipCommand.addCommand(deleteCommand);
 program.addCommand(floatingipCommand);
-var ncrCommand = new import_commander43.Command("ncr").description("NHN Container Registry \uAD00\uB828 \uBA85\uB839").addHelpText("after", ncrAgentWorkflow);
+var ncrCommand = new import_commander46.Command("ncr").description("NHN Container Registry \uAD00\uB828 \uBA85\uB839").addHelpText("after", ncrAgentWorkflow);
 ncrCommand.addCommand(listCommand5);
 ncrCommand.addCommand(getCommand3);
 ncrCommand.addCommand(imagesCommand2);
 ncrCommand.addCommand(tagsCommand);
 program.addCommand(ncrCommand);
-var nksCommand = new import_commander43.Command("nks").description("NHN Kubernetes Service \uAD00\uB828 \uBA85\uB839").addHelpText("after", nksAgentWorkflow);
+var nksCommand = new import_commander46.Command("nks").description("NHN Kubernetes Service \uAD00\uB828 \uBA85\uB839").addHelpText("after", nksAgentWorkflow);
 nksCommand.addCommand(supportsCommand);
 nksCommand.addCommand(clusterCommand);
 nksCommand.addCommand(nodegroupCommand);
 nksCommand.addCommand(addonTypeCommand);
 nksCommand.addCommand(addonCommand);
 program.addCommand(nksCommand);
+var ncsCommand = new import_commander46.Command("ncs").description("NHN Container Service \uAD00\uB828 \uBA85\uB839").addHelpText("after", ncsAgentWorkflow);
+ncsCommand.addCommand(templateCommand);
+ncsCommand.addCommand(workloadCommand);
+ncsCommand.addCommand(malwareCommand);
+program.addCommand(ncsCommand);
 program.addCommand(createCommandsCommand(program));
 program.parseAsync().catch((err) => {
   const message = err instanceof Error ? err.message : String(err);
   const exitCode = err instanceof NhnCloudCliError ? err.exitCode : 1;
-  process.stderr.write(import_chalk14.default.red(`\uC624\uB958: ${message}`) + "\n");
+  process.stderr.write(import_chalk16.default.red(`\uC624\uB958: ${message}`) + "\n");
   process.exit(exitCode);
 });