@bstage-sdk/cli 0.1.0 → 0.3.0

package/dist/index.js

@@ -1,7 +1,11 @@
 #!/usr/bin/env node
 import {
+  APP_KEY_VAR,
   DEFAULT_TRANSLATION_TIER,
+  LEGACY_APP_KEY_VAR,
   LOGIN_PATH,
+  PORTAL_HOSTS,
+  PORTAL_HOST_ENV_KEY,
   TRANSLATION_CDN_BASE_KEY,
   TRANSLATION_CDN_BUCKET_PREFIX,
   TRANSLATION_CDN_ORIGIN,
@@ -9,13 +13,14 @@ import {
   bstageDevPlugin,
   createViteConfig,
   describePhase,
+  isPublicPhase,
   resolvePhase,
   resolveProjectTarget
-} from "./chunk-S6HGR2U3.js";
+} from "./chunk-COUDGZIA.js";
 
 // src/index.ts
 import { readFileSync as readFileSync2 } from "fs";
-import { dirname as dirname3, join as join7 } from "path";
+import { dirname as dirname5, join as join9 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { Command } from "commander";
 
@@ -154,10 +159,11 @@ __reg__.forEach(__registerTemplate__);
 // src/build/credentialCheck.ts
 var CLIENT_MARKER = "X-BSTAGE-APP-ID";
 var APP_ID_PREFIX = "bsa_";
-var APP_SECRET_PREFIX = "bsp_";
+var APP_KEY_PREFIX = "bsp_";
 var CREDENTIAL_ENV_VARS = [
   "VITE_BSTAGE_APP_ID",
-  "VITE_BSTAGE_APP_SECRET",
+  APP_KEY_VAR,
+  LEGACY_APP_KEY_VAR,
   "VITE_BSTAGE_TENANT_ID"
 ];
 function usesBstageClient(bundle) {
@@ -177,54 +183,77 @@ function collectReferencedVars(sources) {
   return referenced;
 }
 function checkCredentials(env2, referenced) {
-  const issues = [];
-  for (const varName of CREDENTIAL_ENV_VARS) {
-    if (!referenced.has(varName)) continue;
-    const value = env2[varName]?.trim();
+  const appId = referenced.has("VITE_BSTAGE_APP_ID") ? env2.VITE_BSTAGE_APP_ID?.trim() : void 0;
+  const appKeys = resolveAppKeys(env2, referenced);
+  const targets = [
+    ...referenced.has("VITE_BSTAGE_APP_ID") ? [{ varName: "VITE_BSTAGE_APP_ID", value: appId }] : [],
+    ...appKeys,
+    ...referenced.has("VITE_BSTAGE_TENANT_ID") ? [{ varName: "VITE_BSTAGE_TENANT_ID", value: env2.VITE_BSTAGE_TENANT_ID?.trim() }] : []
+  ];
+  const presenceIssues = targets.flatMap(({ varName, value }) => {
     if (!value) {
-      issues.push({
-        level: "error",
-        varName,
-        message: "\uAC12\uC774 \uC5C6\uC2B5\uB2C8\uB2E4 \u2014 \uBC88\uB4E4\uC5D0 undefined\uAC00 \uBC15\uD600 \uBC30\uD3EC \uD6C4 401\uC774 \uB0A9\uB2C8\uB2E4."
-      });
-      continue;
+      return [
+        {
+          level: "error",
+          varName,
+          message: "\uAC12\uC774 \uC5C6\uC2B5\uB2C8\uB2E4 \u2014 \uBC88\uB4E4\uC5D0 undefined\uAC00 \uBC15\uD600 \uBC30\uD3EC \uD6C4 401\uC774 \uB0A9\uB2C8\uB2E4."
+        }
+      ];
     }
     if (isPlaceholderValue(value)) {
-      issues.push({
-        level: "error",
-        varName,
-        message: "\uC790\uB9AC\uD45C\uC2DC\uC790\uAC00 \uADF8\uB300\uB85C\uC785\uB2C8\uB2E4 \u2014 \uD30C\uD2B8\uB108 \uCF58\uC194\uC5D0\uC11C \uBC1C\uAE09\uBC1B\uC740 \uAC12\uC73C\uB85C \uBC14\uAFB8\uC138\uC694."
-      });
+      return [
+        {
+          level: "error",
+          varName,
+          message: "\uC790\uB9AC\uD45C\uC2DC\uC790\uAC00 \uADF8\uB300\uB85C\uC785\uB2C8\uB2E4 \u2014 \uD30C\uD2B8\uB108 \uCF58\uC194\uC5D0\uC11C \uBC1C\uAE09\uBC1B\uC740 \uAC12\uC73C\uB85C \uBC14\uAFB8\uC138\uC694."
+        }
+      ];
     }
-  }
-  const appId = referenced.has("VITE_BSTAGE_APP_ID") ? env2.VITE_BSTAGE_APP_ID?.trim() : void 0;
-  const appSecret = referenced.has("VITE_BSTAGE_APP_SECRET") ? env2.VITE_BSTAGE_APP_SECRET?.trim() : void 0;
-  const appIdUsable = !!appId && !isPlaceholderValue(appId);
-  const appSecretUsable = !!appSecret && !isPlaceholderValue(appSecret);
-  const swapped = appIdUsable && appId.startsWith(APP_SECRET_PREFIX) || appSecretUsable && appSecret.startsWith(APP_ID_PREFIX);
+    return [];
+  });
+  const usableAppId = appId && !isPlaceholderValue(appId) ? appId : void 0;
+  const usableAppKeys = appKeys.filter(
+    (k) => !!k.value && !isPlaceholderValue(k.value)
+  );
+  const swappedKey = usableAppKeys.find((k) => k.value.startsWith(APP_ID_PREFIX));
+  const swapped = usableAppId?.startsWith(APP_KEY_PREFIX) || swappedKey !== void 0;
   if (swapped) {
-    issues.push({
-      level: "error",
-      varName: "VITE_BSTAGE_APP_ID",
-      message: `APP_ID\uC640 APP_SECRET\uC774 \uC11C\uB85C \uBC14\uB010 \uAC83 \uAC19\uC2B5\uB2C8\uB2E4 \u2014 APP_ID\uB294 "${APP_ID_PREFIX}", APP_SECRET\uC740 "${APP_SECRET_PREFIX}"\uB85C \uC2DC\uC791\uD574\uC57C \uD569\uB2C8\uB2E4.`
-    });
-    return issues;
-  }
-  if (appIdUsable && !appId.startsWith(APP_ID_PREFIX)) {
-    issues.push({
-      level: "warn",
-      varName: "VITE_BSTAGE_APP_ID",
-      message: `"${APP_ID_PREFIX}"\uB85C \uC2DC\uC791\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 \uD30C\uD2B8\uB108 \uCF58\uC194 \uBC1C\uAE09 \uAC12\uC774 \uB9DE\uB294\uC9C0 \uD655\uC778\uD558\uC138\uC694.`
-    });
-  }
-  if (appSecretUsable && !appSecret.startsWith(APP_SECRET_PREFIX)) {
-    issues.push({
-      level: "warn",
-      varName: "VITE_BSTAGE_APP_SECRET",
-      message: `"${APP_SECRET_PREFIX}"\uB85C \uC2DC\uC791\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 \uD30C\uD2B8\uB108 \uCF58\uC194 \uBC1C\uAE09 \uAC12\uC774 \uB9DE\uB294\uC9C0 \uD655\uC778\uD558\uC138\uC694.`
-    });
+    const keyLabel = shortName(swappedKey?.varName ?? appKeys[0]?.varName ?? APP_KEY_VAR);
+    return [
+      ...presenceIssues,
+      {
+        level: "error",
+        varName: "VITE_BSTAGE_APP_ID",
+        message: `APP_ID\uC640 ${keyLabel}\uAC00 \uC11C\uB85C \uBC14\uB010 \uAC83 \uAC19\uC2B5\uB2C8\uB2E4 \u2014 APP_ID\uB294 "${APP_ID_PREFIX}", ${keyLabel}\uB294 "${APP_KEY_PREFIX}"\uB85C \uC2DC\uC791\uD574\uC57C \uD569\uB2C8\uB2E4.`
+      }
+    ];
   }
-  return issues;
+  const prefixWarnings = [
+    ...usableAppId && !usableAppId.startsWith(APP_ID_PREFIX) ? [
+      {
+        level: "warn",
+        varName: "VITE_BSTAGE_APP_ID",
+        message: `"${APP_ID_PREFIX}"\uB85C \uC2DC\uC791\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 \uD30C\uD2B8\uB108 \uCF58\uC194 \uBC1C\uAE09 \uAC12\uC774 \uB9DE\uB294\uC9C0 \uD655\uC778\uD558\uC138\uC694.`
+      }
+    ] : [],
+    ...usableAppKeys.filter((k) => !k.value.startsWith(APP_KEY_PREFIX)).map(
+      (k) => ({
+        level: "warn",
+        varName: k.varName,
+        message: `"${APP_KEY_PREFIX}"\uB85C \uC2DC\uC791\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 \uD30C\uD2B8\uB108 \uCF58\uC194 \uBC1C\uAE09 \uAC12\uC774 \uB9DE\uB294\uC9C0 \uD655\uC778\uD558\uC138\uC694.`
+      })
+    )
+  ];
+  return [...presenceIssues, ...prefixWarnings];
+}
+function resolveAppKeys(env2, referenced) {
+  return [APP_KEY_VAR, LEGACY_APP_KEY_VAR].filter((varName) => referenced.has(varName)).map((varName) => {
+    const other = varName === APP_KEY_VAR ? LEGACY_APP_KEY_VAR : APP_KEY_VAR;
+    return { varName, value: env2[varName]?.trim() || env2[other]?.trim() || void 0 };
+  });
+}
+function shortName(varName) {
+  return varName.replace(/^VITE_BSTAGE_/, "");
 }
 
 // src/commands/build.ts
@@ -474,20 +503,966 @@ async function buildCommand() {
   for (const entry of entries) {
     results.push(await buildEntry(ctx, entry));
   }
-  await rm(join(cwd, DIST_DIR, STAGING_DIR), { recursive: true, force: true });
-  console.log(`
-Build complete.`);
-  if (results.some((r) => r.usesClient)) {
-    const referenced = collectReferencedVars(await readProjectSources(cwd));
-    printCredentialReport(loadEnv("production", cwd, "VITE_"), referenced);
+  await rm(join(cwd, DIST_DIR, STAGING_DIR), { recursive: true, force: true });
+  console.log(`
+Build complete.`);
+  if (results.some((r) => r.usesClient)) {
+    const referenced = collectReferencedVars(await readProjectSources(cwd));
+    printCredentialReport(loadEnv("production", cwd, "VITE_"), referenced);
+  }
+}
+function formatSize(bytes) {
+  if (bytes < 1024) return `${bytes} B`;
+  const kb = bytes / 1024;
+  if (kb < 1024) return `${kb.toFixed(1)} KB`;
+  const mb = kb / 1024;
+  return `${mb.toFixed(2)} MB`;
+}
+
+// src/commands/deploy.ts
+import pc5 from "picocolors";
+
+// src/portal/applyPlacements.ts
+import pc3 from "picocolors";
+
+// src/portal/client.ts
+var PortalError = class extends Error {
+  constructor(status, message, retryAfter) {
+    super(message);
+    this.status = status;
+    this.retryAfter = retryAfter;
+    this.name = "PortalError";
+  }
+};
+var MAX_RETRY = 3;
+var DEFAULT_BACKOFF_MS = [5e3, 1e4, 2e4];
+var MAX_RETRY_AFTER_MS = 6e4;
+var DEFAULT_TIMEOUT_MS = 3e4;
+var PortalClient = class {
+  constructor(opts) {
+    this.base = opts.portalUrl.replace(/\/+$/, "") + "/api/v1";
+    this.token = opts.token;
+    this.fetchFn = opts.fetch ?? globalThis.fetch;
+    this.sleep = opts.sleep ?? ((ms) => new Promise((resolve4) => setTimeout(resolve4, ms)));
+    this.timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  }
+  /**
+   * 429는 `Retry-After`(초)가 있으면 그만큼, 없으면 5/10/20초로 최대 3회 재시도한다.
+   * 그 외 실패(4xx/5xx)는 즉시 `PortalError`로 던진다.
+   */
+  async request(method, path, body) {
+    for (let attempt = 0; ; attempt++) {
+      const res = await this.sendWithNetworkRetry(method, path, body);
+      if (res.status !== 429 || attempt >= MAX_RETRY) {
+        if (!res.ok) throw await toError(res);
+        return res;
+      }
+      await this.sleep(backoffMs(res.headers.get("Retry-After"), attempt));
+    }
+  }
+  /**
+   * 네트워크 계층 실패(`fetch failed`, 예: keep-alive 소켓이 서버 쪽에서 닫힌 뒤 재사용된
+   * UND_ERR_SOCKET)는 재시도해도 안전한 요청에 한해 한 번만 즉시 다시 보낸다. sandbox 실측:
+   * 디바이스 코드 폴링이 5초 간격이라 그 사이 유휴 연결이 닫혀 첫 재사용에서 실패했다.
+   * GET과 디바이스 흐름(code·token)만 대상이다 — deploy 같은 비멱등 POST는 재시도하지 않는다.
+   */
+  async sendWithNetworkRetry(method, path, body) {
+    try {
+      return await this.send(method, path, body);
+    } catch (err) {
+      if (!isNetworkError(err)) throw err;
+      if (!isSafeToRetry(method, path)) throw toNetworkError(err, method, path);
+      await this.sleep(NETWORK_RETRY_DELAY_MS);
+      try {
+        return await this.send(method, path, body);
+      } catch (again) {
+        throw isNetworkError(again) ? toNetworkError(again, method, path) : again;
+      }
+    }
+  }
+  /** fetch 한 번. 응답이 없는 실패(타임아웃·네트워크)는 `PortalError`로 바꿔 종료코드 1이 되게 한다. */
+  async send(method, path, body) {
+    try {
+      return await this.fetchFn(this.base + path, {
+        method,
+        headers: {
+          ...this.token ? { Authorization: `Bearer ${this.token}` } : {},
+          Accept: "application/json, text/plain",
+          ...body !== void 0 ? { "Content-Type": "application/json" } : {}
+        },
+        body: body !== void 0 ? JSON.stringify(body) : void 0,
+        signal: AbortSignal.timeout(this.timeoutMs)
+      });
+    } catch (err) {
+      if (isAbortError(err)) {
+        throw new PortalError(
+          0,
+          `\uD3EC\uD138 \uC751\uB2F5\uC774 ${Math.round(this.timeoutMs / 1e3)}\uCD08 \uC548\uC5D0 \uC624\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4 (${method} ${path}). \uB124\uD2B8\uC6CC\uD06C\xB7\uD3EC\uD138 \uC0C1\uD0DC\uB97C \uD655\uC778\uD558\uACE0 \uB2E4\uC2DC \uC2DC\uB3C4\uD558\uC138\uC694.`
+        );
+      }
+      throw err;
+    }
+  }
+  async json(method, path, body) {
+    return (await this.request(method, path, body)).json();
+  }
+  stage(org, space) {
+    return `/organizations/${enc(org)}/stages/${enc(space)}`;
+  }
+  me() {
+    return this.json("GET", "/auth/me");
+  }
+  async listSpaces(org) {
+    const body = await this.json(
+      "GET",
+      `/organizations/${enc(org)}/spaces`
+    );
+    return unwrap(body, "spaces");
+  }
+  async listRepos(org, space) {
+    const body = await this.json(
+      "GET",
+      `${this.stage(org, space)}/repos`
+    );
+    return unwrap(body, "repos").map((r) => ({ ...r, spaceId: r.spaceId ?? space }));
+  }
+  async listBuilds(org, space, limit = 20) {
+    const body = await this.json(
+      "GET",
+      `${this.stage(org, space)}/builds?limit=${limit}`
+    );
+    return unwrap(body, "builds").map((b) => ({ ...b, spaceId: b.spaceId ?? space }));
+  }
+  async getBuild(org, space, buildId) {
+    const b = await this.json("GET", `${this.stage(org, space)}/builds/${enc(buildId)}`);
+    return { ...b, spaceId: b.spaceId ?? space };
+  }
+  async getBuildLog(org, space, buildId) {
+    return (await this.request("GET", `${this.stage(org, space)}/builds/${enc(buildId)}/log`)).text();
+  }
+  createBuild(org, space, repoId) {
+    return this.json("POST", `${this.stage(org, space)}/builds`, { repoId });
+  }
+  async listPlacements(org, space, surface) {
+    const body = await this.json(
+      "GET",
+      `${this.stage(org, space)}/placements?surface=${surface}`
+    );
+    return unwrap(body, "placements");
+  }
+  /**
+   * `expectedLiveBuildId`는 CAS(compare-and-swap) — 서버 측 live 빌드와 다르면 409.
+   * 응답은 배치 전체가 아니라 `{id, liveBuildId}`만 온다(포털 핸들러 그대로).
+   */
+  deployPlacement(org, space, placementId, buildId, expectedLiveBuildId) {
+    return this.json(
+      "POST",
+      `${this.stage(org, space)}/placements/${enc(placementId)}/deploy`,
+      { buildId, expectedLiveBuildId }
+    );
+  }
+  async setPlacementEnabled(org, space, placementId, enabled) {
+    const r = await this.json(
+      "PATCH",
+      `${this.stage(org, space)}/placements/${enc(placementId)}`,
+      { enabled }
+    );
+    return r.placement;
+  }
+  // ── 디바이스 코드 흐름(RFC 8628) — 토큰 없이 호출된다 ─────────────────────
+  startDeviceAuth(deviceName, cliVersion) {
+    return this.json("POST", "/cli/device/code", { deviceName, cliVersion });
+  }
+  /**
+   * `authorization_pending`·`slow_down`은 정상 흐름의 결과로 돌려준다(폴링 계속).
+   * `expired_token`·`access_denied`는 더 폴링해도 회복되지 않으므로 `PortalError(400, 코드)`로 던진다.
+   */
+  async pollDeviceToken(deviceCode) {
+    try {
+      const issued = await this.json("POST", "/cli/device/token", { deviceCode });
+      return { status: "ok", ...issued };
+    } catch (err) {
+      if (err instanceof PortalError && err.status === 400) {
+        if (err.message === "authorization_pending") return { status: "pending" };
+        if (err.message === "slow_down") {
+          return err.retryAfter === void 0 ? { status: "slow_down" } : { status: "slow_down", retryAfter: err.retryAfter };
+        }
+      }
+      throw err;
+    }
+  }
+};
+function enc(s) {
+  return encodeURIComponent(s);
+}
+function backoffMs(retryAfterHeader, attempt) {
+  const seconds = Number(retryAfterHeader);
+  if (Number.isFinite(seconds) && seconds > 0) {
+    return Math.min(seconds * 1e3, MAX_RETRY_AFTER_MS);
+  }
+  return DEFAULT_BACKOFF_MS[attempt] ?? 2e4;
+}
+var NETWORK_RETRY_DELAY_MS = 500;
+function isNetworkError(err) {
+  return err instanceof TypeError && !isAbortError(err);
+}
+function toNetworkError(err, method, path) {
+  const code = err.cause?.code;
+  return new PortalError(
+    0,
+    `\uD3EC\uD138\uC5D0 \uC5F0\uACB0\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4 (${method} ${path}${code ? `, ${code}` : ""}). \uB124\uD2B8\uC6CC\uD06C\xB7\uD3EC\uD138 \uC8FC\uC18C\uB97C \uD655\uC778\uD558\uACE0 \uB2E4\uC2DC \uC2DC\uB3C4\uD558\uC138\uC694.`
+  );
+}
+function isSafeToRetry(method, path) {
+  return method === "GET" || path === "/cli/device/token" || path === "/cli/device/code";
+}
+function isAbortError(err) {
+  return err instanceof Error && (err.name === "TimeoutError" || err.name === "AbortError");
+}
+function unwrap(body, key) {
+  if (Array.isArray(body)) return body;
+  return body[key] ?? [];
+}
+async function toError(res) {
+  const text2 = await res.text().catch(() => "");
+  let message = `HTTP ${res.status}`;
+  try {
+    const parsed = JSON.parse(text2);
+    message = parsed.error ?? parsed.message ?? message;
+  } catch {
+    if (text2.trim()) message = text2.trim().slice(0, 300);
+  }
+  const retryAfter = Number(res.headers.get("Retry-After"));
+  return new PortalError(res.status, message, retryAfter > 0 ? retryAfter : void 0);
+}
+
+// src/portal/output.ts
+import pc2 from "picocolors";
+var ExitCode = {
+  OK: 0,
+  FAILURE: 1,
+  PRECONDITION: 2,
+  AUTH: 3,
+  CONFLICT: 4,
+  RATE_LIMIT: 5
+};
+var CliExit = class extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "CliExit";
+  }
+};
+function fail(code, message) {
+  throw new CliExit(code, message);
+}
+function exitCodeFor(err) {
+  if (err instanceof CliExit) return err.code;
+  if (err instanceof PortalError) {
+    if (err.status === 401 || err.status === 403) return ExitCode.AUTH;
+    if (err.status === 409) return ExitCode.CONFLICT;
+    if (err.status === 429) return ExitCode.RATE_LIMIT;
+  }
+  return ExitCode.FAILURE;
+}
+function printJson(v) {
+  process.stdout.write(JSON.stringify(v, null, 2) + "\n");
+}
+function toEntry(i) {
+  return { id: i.id, label: i.label, from: i.from, to: i.to, message: i.message };
+}
+function jsonSummary(items, extra = {}) {
+  const pick2 = (status) => items.filter((i) => i.status === status).map(toEntry);
+  return {
+    ...extra,
+    changed: pick2("changed"),
+    unchanged: pick2("unchanged"),
+    conflicts: pick2("conflict"),
+    failed: pick2("failed")
+  };
+}
+function table(rows) {
+  const widths = [];
+  for (const row of rows) {
+    row.forEach((cell, i) => {
+      widths[i] = Math.max(widths[i] ?? 0, cell.length);
+    });
+  }
+  return rows.map(
+    (row) => row.map((cell, i) => i === row.length - 1 ? cell : cell.padEnd(widths[i])).join("  ")
+  ).join("\n");
+}
+function shortSha(sha) {
+  return sha ? sha.slice(0, 7) : "-";
+}
+function scrub(message) {
+  return message.replace(/bsc_[0-9a-f]{6,}/g, "bsc_****");
+}
+async function runCommand(fn) {
+  try {
+    await fn();
+  } catch (err) {
+    const code = exitCodeFor(err);
+    const message = err instanceof Error ? err.message : String(err);
+    console.error(pc2.red(`[bstage] ${scrub(message)}`));
+    if (code === ExitCode.AUTH) {
+      console.error(
+        pc2.dim(
+          "  bstage login \uC73C\uB85C \uD1A0\uD070\uC744 \uB2E4\uC2DC \uB4F1\uB85D\uD558\uAC70\uB098, \uD1A0\uD070 \uB4F1\uAE09\xB7\uC2A4\uD14C\uC774\uC9C0 \uC2A4\uCF54\uD504\uB97C \uD655\uC778\uD558\uC138\uC694."
+        )
+      );
+    }
+    process.exit(code);
+  }
+}
+
+// src/portal/applyPlacements.ts
+function publishHint(placement) {
+  return placement.enabled === false ? "\uAC8C\uC2DC \uAEBC\uC9D0 \u2014 bstage publish \uB85C \uAC8C\uC2DC\uD574\uC57C \uC0AC\uC6A9\uC790\uC5D0\uAC8C \uBCF4\uC785\uB2C8\uB2E4." : void 0;
+}
+async function applyPlacements(ctx, plan) {
+  const { organizationId: org, spaceId: space } = ctx.link;
+  const results = [];
+  for (const row of plan) {
+    const base = { id: row.placement.id, label: row.label, from: row.from, to: row.to };
+    if (row.unchanged) {
+      results.push({ ...base, status: "unchanged", message: "\uBCC0\uACBD \uC5C6\uC74C" });
+      continue;
+    }
+    try {
+      await ctx.client.deployPlacement(org, space, row.placement.id, row.to, row.from ?? "");
+      results.push({ ...base, status: "changed", message: publishHint(row.placement) });
+    } catch (err) {
+      results.push({ ...base, ...failureOf(err) });
+    }
+  }
+  return results;
+}
+function failureOf(err) {
+  if (err instanceof PortalError && err.status === 409) {
+    return {
+      status: "conflict",
+      message: `\uB2E4\uB978 \uBC30\uD3EC\uAC00 \uBA3C\uC800 \uC801\uC6A9\uB410\uC2B5\uB2C8\uB2E4(${err.message}) \u2014 \uB77C\uC774\uBE0C \uC0C1\uD0DC\uAC00 \uBC14\uB00C\uC5C8\uC2B5\uB2C8\uB2E4.`
+    };
+  }
+  return { status: "failed", message: err instanceof Error ? err.message : String(err) };
+}
+var MARKS = {
+  changed: pc3.green("\u2713"),
+  unchanged: pc3.dim("="),
+  conflict: pc3.yellow("!"),
+  failed: pc3.red("\u2717")
+};
+function printResults(results, out) {
+  for (const r of results) {
+    const suffix = r.message ? pc3.dim(`  ${r.message}`) : "";
+    out(`${MARKS[r.status]} ${r.label}  ${shortSha(r.from)} \u2192 ${shortSha(r.to)}${suffix}`);
+  }
+}
+function reportOutcome(results, options, out, extra = {}) {
+  if (options.json) printJson(jsonSummary(results, extra));
+  else printResults(results, out);
+  const conflicts = results.filter((r) => r.status === "conflict");
+  const errors = results.filter((r) => r.status === "failed");
+  if (conflicts.length > 0) {
+    const names = conflicts.map((r) => r.label).join(", ");
+    const errSuffix = errors.length > 0 ? ` (\uADF8 \uC678 \uC2E4\uD328: ${errors.map((r) => r.label).join(", ")})` : "";
+    fail(
+      ExitCode.CONFLICT,
+      `\uB2E4\uB978 \uBC30\uD3EC\uAC00 \uBA3C\uC800 \uC801\uC6A9\uB41C \uBC30\uCE58\uAC00 \uC788\uC2B5\uB2C8\uB2E4: ${names}.${errSuffix} bstage list \uB85C \uD655\uC778\uD558\uACE0 \uB2E4\uC2DC \uC2E4\uD589\uD558\uC138\uC694.`
+    );
+  }
+  if (errors.length > 0) {
+    fail(
+      ExitCode.FAILURE,
+      `\uC77C\uBD80 \uBC30\uCE58 \uC801\uC6A9\uC5D0 \uC2E4\uD328\uD588\uC2B5\uB2C8\uB2E4: ${errors.map((r) => r.label).join(", ")}`
+    );
+  }
+}
+
+// src/portal/confirm.ts
+import * as p from "@clack/prompts";
+var clackConfirm = async (message) => {
+  const v = await p.confirm({ message });
+  return !p.isCancel(v) && v === true;
+};
+async function askConfirm(deps, message) {
+  if (deps.confirm) return deps.confirm(message);
+  assertCanConfirm(deps);
+  return clackConfirm(message);
+}
+function canConfirm(deps) {
+  if (deps.confirm) return true;
+  return (deps.isTTY ?? (() => Boolean(process.stdin.isTTY)))();
+}
+function assertCanConfirm(deps) {
+  if (canConfirm(deps)) return;
+  fail(
+    ExitCode.PRECONDITION,
+    "\uD130\uBBF8\uB110\uC774 \uC544\uB2C8\uB77C \uD655\uC778\uC744 \uBB3C\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. --yes \uB85C \uD655\uC778\uC744 \uAC74\uB108\uB6F0\uC138\uC694."
+  );
+}
+
+// src/portal/git.ts
+import { execFile } from "child_process";
+import { promisify } from "util";
+var execFileP = promisify(execFile);
+function gitExec(cwd) {
+  return async (args) => (await execFileP("git", args, { cwd })).stdout;
+}
+async function tryExec(exec, args) {
+  try {
+    return (await exec(args)).trim();
+  } catch {
+    return null;
+  }
+}
+async function readGitState(exec) {
+  const branch = (await exec(["rev-parse", "--abbrev-ref", "HEAD"])).trim();
+  const head = (await exec(["rev-parse", "HEAD"])).trim();
+  const dirty = (await exec(["status", "--porcelain"])).trim().length > 0;
+  const upstream = await tryExec(exec, [
+    "rev-parse",
+    "--abbrev-ref",
+    "--symbolic-full-name",
+    "@{u}"
+  ]);
+  let ahead = 0;
+  let behind = 0;
+  if (upstream) {
+    const counts = await tryExec(exec, ["rev-list", "--left-right", "--count", "HEAD...@{u}"]);
+    const [a, b] = (counts ?? "0	0").split(/\s+/).map((n) => parseInt(n, 10) || 0);
+    ahead = a;
+    behind = b;
+  }
+  return { branch, head, dirty, upstream, ahead, behind };
+}
+function assertDeployable(state, defaultBranch) {
+  if (state.dirty) {
+    fail(
+      ExitCode.PRECONDITION,
+      "\uCEE4\uBC0B\uB418\uC9C0 \uC54A\uC740 \uBCC0\uACBD\uC774 \uC788\uC2B5\uB2C8\uB2E4. \uD3EC\uD138\uC740 push\uB41C \uCEE4\uBC0B\uB9CC \uBE4C\uB4DC\uD569\uB2C8\uB2E4 \u2014 \uCEE4\uBC0B\xB7push \uD6C4 \uB2E4\uC2DC \uC2E4\uD589\uD558\uC138\uC694. (--skip-git-check \uB85C \uBB34\uC2DC \uAC00\uB2A5)"
+    );
+  }
+  if (state.branch !== defaultBranch) {
+    fail(
+      ExitCode.PRECONDITION,
+      `\uD3EC\uD138\uC740 ${defaultBranch} \uBE0C\uB79C\uCE58 HEAD\uB97C \uBE4C\uB4DC\uD569\uB2C8\uB2E4. \uD604\uC7AC \uBE0C\uB79C\uCE58\uB294 ${state.branch} \uC785\uB2C8\uB2E4 \u2014 ${defaultBranch} \uC5D0 \uBA38\uC9C0\xB7push \uD6C4 \uB2E4\uC2DC \uC2E4\uD589\uD558\uC138\uC694.`
+    );
+  }
+  if (!state.upstream || state.ahead > 0) {
+    fail(
+      ExitCode.PRECONDITION,
+      "push\uB418\uC9C0 \uC54A\uC740 \uCEE4\uBC0B\uC774 \uC788\uC2B5\uB2C8\uB2E4. git push \uD6C4 \uB2E4\uC2DC \uC2E4\uD589\uD558\uC138\uC694. (--skip-git-check \uB85C \uBB34\uC2DC \uAC00\uB2A5)"
+    );
+  }
+}
+
+// src/portal/config.ts
+import { mkdir as mkdir2, readFile as readFile2, writeFile } from "fs/promises";
+import { dirname, join as join2 } from "path";
+import { loadEnv as loadEnv2 } from "vite";
+var LOCAL_HOSTS = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "[::1]"]);
+function normalizePortalUrl(url) {
+  const u = new URL(url);
+  if (u.protocol !== "https:" && !(u.protocol === "http:" && LOCAL_HOSTS.has(u.hostname))) {
+    fail(
+      ExitCode.PRECONDITION,
+      `\uD3EC\uD138 \uC8FC\uC18C\uB294 https \uC5EC\uC57C \uD569\uB2C8\uB2E4 (\uBC1B\uC740 \uAC12: ${url}). http\uB294 localhost\xB7127.0.0.1 \uC5D0\uC11C\uB9CC \uD5C8\uC6A9\uD569\uB2C8\uB2E4.`
+    );
+  }
+  const path = u.pathname.replace(/\/+$/, "");
+  return u.origin + path;
+}
+function linkPath(cwd) {
+  return join2(cwd, ".bstage", "project.json");
+}
+async function saveLink(cwd, link) {
+  await mkdir2(dirname(linkPath(cwd)), { recursive: true });
+  await writeFile(linkPath(cwd), JSON.stringify(link, null, 2) + "\n");
+}
+function linkFromEnv(env2) {
+  const { BSTAGE_PORTAL_URL, BSTAGE_ORG, BSTAGE_SPACE, BSTAGE_REPO, BSTAGE_SURFACE } = env2;
+  if (!BSTAGE_PORTAL_URL || !BSTAGE_ORG || !BSTAGE_SPACE || !BSTAGE_REPO || !BSTAGE_SURFACE) {
+    return null;
+  }
+  if (BSTAGE_SURFACE !== "USER" && BSTAGE_SURFACE !== "ADMIN") return null;
+  return {
+    portalUrl: BSTAGE_PORTAL_URL,
+    organizationId: BSTAGE_ORG,
+    spaceId: BSTAGE_SPACE,
+    repoId: BSTAGE_REPO,
+    surface: BSTAGE_SURFACE
+  };
+}
+async function loadLink(cwd, env2 = process.env) {
+  const fromEnv = linkFromEnv(env2);
+  if (fromEnv) return fromEnv;
+  try {
+    return JSON.parse(await readFile2(linkPath(cwd), "utf-8"));
+  } catch {
+    return null;
+  }
+}
+function portalUrlForPhase(phase, cwd, env2 = process.env) {
+  if (isPublicPhase(phase) && PORTAL_HOSTS[phase]) return `https://${PORTAL_HOSTS[phase]}`;
+  const host = internalPortalHost(cwd, env2);
+  if (!host) {
+    throw new Error(
+      `${phase}\uB294 \uC0AC\uB0B4 \uC804\uC6A9 \uD658\uACBD\uC774\uB77C \uD3EC\uD138 \uC8FC\uC18C\uAC00 SDK\uC5D0 \uB4E4\uC5B4 \uC788\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.
+  \uC124\uC815\uB418\uC9C0 \uC54A\uC740 \uAC12: ${PORTAL_HOST_ENV_KEY}
+  \xB7 \uC0AC\uB0B4: \uC704 \uAC12\uC744 .env\uC5D0 \uC124\uC815\uD558\uC138\uC694 (\uD638\uC2A4\uD2B8 \uAC12\uC740 \uC0AC\uB0B4 \uBB38\uC11C\uB97C \uCC38\uACE0\uD558\uC138\uC694)
+  \xB7 \uADF8 \uC678: --phase sandbox \uB610\uB294 --portal <url> \uC744 \uC9C0\uC815\uD558\uC138\uC694`
+    );
+  }
+  return normalizePortalUrl(host);
+}
+function allowedPortalOrigins(cwd, env2 = process.env, explicit) {
+  const origins = new Set(Object.values(PORTAL_HOSTS).map((host) => `https://${host}`));
+  if (explicit) origins.add(originOf(explicit));
+  if (env2.BSTAGE_PORTAL_URL) origins.add(originOf(env2.BSTAGE_PORTAL_URL));
+  if (!env2.BSTAGE_TOKEN) {
+    const internal = internalPortalHost(cwd, env2);
+    if (internal) origins.add(originOf(internal));
+  }
+  return origins;
+}
+function internalPortalHost(cwd, env2) {
+  const fileEnv = loadEnv2("development", cwd, "");
+  const host = (env2[PORTAL_HOST_ENV_KEY] || fileEnv[PORTAL_HOST_ENV_KEY] || "").trim();
+  if (!host) return null;
+  return host.startsWith("http") ? host : `https://${host}`;
+}
+function originOf(url) {
+  return new URL(normalizePortalUrl(url)).origin;
+}
+var TOKEN_ENV_HINT = "BSTAGE_TOKEN \uC774 \uC124\uC815\uB41C \uD658\uACBD\uC5D0\uC11C\uB294 \uD3EC\uD138 \uC8FC\uC18C\uB97C --portal, BSTAGE_PORTAL_URL, \uB610\uB294 \uACF5\uAC1C phase \uB9E4\uD551\uC73C\uB85C\uB9CC \uC815\uD569\uB2C8\uB2E4.";
+function portalUrlFromLink(raw, cwd, env2) {
+  const url = normalizePortalUrl(raw);
+  if (env2.BSTAGE_TOKEN) {
+    fail(
+      ExitCode.PRECONDITION,
+      `${TOKEN_ENV_HINT} .bstage/project.json \uC758 \uC8FC\uC18C\uB294 \uC4F0\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 --portal \uB610\uB294 BSTAGE_PORTAL_URL \uB85C \uBA85\uC2DC\uD558\uC138\uC694.`
+    );
+  }
+  const origin = new URL(url).origin;
+  if (!allowedPortalOrigins(cwd, env2).has(origin)) {
+    fail(
+      ExitCode.PRECONDITION,
+      `.bstage/project.json \uC758 \uD3EC\uD138 \uC8FC\uC18C(${origin})\uAC00 \uD5C8\uC6A9 \uBAA9\uB85D\uC5D0 \uC5C6\uC2B5\uB2C8\uB2E4. --portal \uB610\uB294 BSTAGE_PORTAL_URL \uB85C \uBA85\uC2DC\uD558\uAC70\uB098 bstage link \uB97C \uB2E4\uC2DC \uC2E4\uD589\uD558\uC138\uC694`
+    );
+  }
+  return url;
+}
+function portalUrlFromPhase(phaseFlag, cwd, env2) {
+  const { phase } = resolvePhase(phaseFlag, cwd, env2);
+  const url = portalUrlForPhase(phase, cwd, env2);
+  if (env2.BSTAGE_TOKEN && !allowedPortalOrigins(cwd, env2).has(new URL(url).origin)) {
+    fail(
+      ExitCode.PRECONDITION,
+      `${TOKEN_ENV_HINT} .env \uC758 ${PORTAL_HOST_ENV_KEY}(${phase})\uB294 \uC4F0\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 \u2014 --portal \uB610\uB294 BSTAGE_PORTAL_URL \uB85C \uBA85\uC2DC\uD558\uC138\uC694.`
+    );
+  }
+  return url;
+}
+async function resolvePortalUrl(explicit, cwd, env2 = process.env, phaseFlag, options = {}) {
+  if (explicit) return normalizePortalUrl(explicit);
+  if (env2.BSTAGE_PORTAL_URL) return normalizePortalUrl(env2.BSTAGE_PORTAL_URL);
+  const link = options.allowLink === false ? null : await loadLink(cwd, env2);
+  if (link) return portalUrlFromLink(link.portalUrl, cwd, env2);
+  return portalUrlFromPhase(phaseFlag, cwd, env2);
+}
+
+// src/portal/credentials.ts
+import { chmod, mkdir as mkdir3, readFile as readFile3, rename as rename2, rm as rm2, writeFile as writeFile2 } from "fs/promises";
+import { homedir } from "os";
+import { dirname as dirname2, join as join3 } from "path";
+var UNKNOWN_ORG = "*";
+function credentialsPath(env2 = process.env) {
+  const base = env2.XDG_CONFIG_HOME || join3(homedir(), ".config");
+  return join3(base, "bstage", "credentials.json");
+}
+function hasEntry(bucket, org) {
+  return Object.prototype.hasOwnProperty.call(bucket, org);
+}
+function isEntry(v) {
+  if (!v || typeof v !== "object") return false;
+  const token = v.token;
+  return typeof token === "string" && token.length > 0;
+}
+function sanitize(tokens) {
+  const buckets = Object.entries(tokens).map(([portal, bucket]) => {
+    if (!bucket || typeof bucket !== "object") return [portal, {}];
+    const kept = Object.entries(bucket).filter(([, v]) => isEntry(v));
+    return [portal, Object.fromEntries(kept)];
+  });
+  return Object.fromEntries(buckets.filter(([, bucket]) => Object.keys(bucket).length > 0));
+}
+function migrate(raw) {
+  if (!raw || typeof raw !== "object") return { version: 2, tokens: {} };
+  const obj = raw;
+  if (obj.version === 2 && obj.tokens && typeof obj.tokens === "object") {
+    return { version: 2, tokens: sanitize(obj.tokens) };
+  }
+  const tokens = Object.entries(obj).filter(([, v]) => isEntry(v)).map(([portal, v]) => [portal, { [UNKNOWN_ORG]: v }]);
+  return { version: 2, tokens: Object.fromEntries(tokens) };
+}
+async function readCredentialFile(env2) {
+  try {
+    return migrate(JSON.parse(await readFile3(credentialsPath(env2), "utf-8")));
+  } catch {
+    return { version: 2, tokens: {} };
+  }
+}
+async function writeCredentialFile(env2, data) {
+  const p4 = credentialsPath(env2);
+  await mkdir3(dirname2(p4), { recursive: true, mode: 448 });
+  await chmod(dirname2(p4), 448);
+  const tmp = `${p4}.${process.pid}.${Date.now()}.tmp`;
+  await writeFile2(tmp, JSON.stringify(data, null, 2) + "\n", { mode: 384 });
+  await chmod(tmp, 384);
+  await rename2(tmp, p4);
+}
+function entryOf(c) {
+  return {
+    token: c.token,
+    savedAt: c.savedAt,
+    permission: c.permission,
+    allSpaces: c.allSpaces,
+    spaceIds: c.spaceIds,
+    expiresAt: c.expiresAt
+  };
+}
+async function saveCredential(c, env2 = process.env) {
+  const key = normalizePortalUrl(c.portalUrl);
+  const org = c.organizationId || UNKNOWN_ORG;
+  const data = await readCredentialFile(env2);
+  const kept = Object.entries(data.tokens[key] ?? {}).filter(
+    ([o]) => org === UNKNOWN_ORG || o !== UNKNOWN_ORG
+  );
+  const bucket = { ...Object.fromEntries(kept), [org]: entryOf(c) };
+  await writeCredentialFile(env2, { version: 2, tokens: { ...data.tokens, [key]: bucket } });
+}
+async function bucketOf(portalUrl, env2) {
+  return (await readCredentialFile(env2)).tokens[normalizePortalUrl(portalUrl)] ?? {};
+}
+function pickOrg(bucket, organizationId) {
+  const orgs = Object.keys(bucket);
+  if (organizationId) {
+    if (hasEntry(bucket, organizationId)) return organizationId;
+    return orgs.length === 1 && orgs[0] === UNKNOWN_ORG ? UNKNOWN_ORG : null;
+  }
+  if (hasEntry(bucket, UNKNOWN_ORG)) return UNKNOWN_ORG;
+  return orgs.length === 1 ? orgs[0] : null;
+}
+async function loadCredential(portalUrl, organizationId, env2 = process.env) {
+  const bucket = await bucketOf(portalUrl, env2);
+  const picked = pickOrg(bucket, organizationId);
+  if (!picked) return null;
+  return { portalUrl: normalizePortalUrl(portalUrl), organizationId: picked, ...bucket[picked] };
+}
+async function listCredentialOrgs(portalUrl, env2 = process.env) {
+  return Object.keys(await bucketOf(portalUrl, env2)).sort();
+}
+async function listCredentials(portalUrl, env2 = process.env) {
+  const bucket = await bucketOf(portalUrl, env2);
+  const key = normalizePortalUrl(portalUrl);
+  return Object.keys(bucket).sort().map((organizationId) => ({ portalUrl: key, organizationId, ...bucket[organizationId] }));
+}
+async function deleteCredential(portalUrl, organizationId, env2 = process.env) {
+  const data = await readCredentialFile(env2);
+  const key = normalizePortalUrl(portalUrl);
+  const bucket = data.tokens[key];
+  if (!bucket) return [];
+  const resolved = organizationId ? pickOrg(bucket, organizationId) : null;
+  const legacy = resolved && hasEntry(bucket, UNKNOWN_ORG) ? [UNKNOWN_ORG] : [];
+  const removed = organizationId ? resolved ? [.../* @__PURE__ */ new Set([resolved, ...legacy])] : [] : Object.keys(bucket).sort();
+  if (removed.length === 0) return [];
+  const rest = Object.entries(bucket).filter(([org]) => !removed.includes(org));
+  const tokens = Object.fromEntries(
+    Object.entries(data.tokens).filter(([portal]) => portal !== key).concat(rest.length > 0 ? [[key, Object.fromEntries(rest)]] : [])
+  );
+  if (Object.keys(tokens).length === 0) {
+    await rm2(credentialsPath(env2), { force: true });
+  } else {
+    await writeCredentialFile(env2, { version: 2, tokens });
+  }
+  return removed;
+}
+async function resolveToken(portalUrl, env2 = process.env, organizationId) {
+  if (env2.BSTAGE_TOKEN) return env2.BSTAGE_TOKEN;
+  return (await loadCredential(portalUrl, organizationId, env2))?.token ?? null;
+}
+function scopeLabel(allSpaces, spaceIds = []) {
+  if (allSpaces) return "\uC774 \uC870\uC9C1\uC758 \uBAA8\uB4E0 \uC2A4\uD14C\uC774\uC9C0";
+  if (spaceIds.length === 0) return "\uC2A4\uD14C\uC774\uC9C0 \uC5C6\uC74C";
+  return `\uC2A4\uD14C\uC774\uC9C0 ${spaceIds.length}\uAC1C (${spaceIds.join(", ")})`;
+}
+function orgLabel(organizationId) {
+  return organizationId === UNKNOWN_ORG ? "\uC870\uC9C1 \uBBF8\uC0C1" : organizationId;
+}
+
+// src/portal/resolveContext.ts
+function failNoToken(portalUrl, organizationId, storedOrgs) {
+  const named = storedOrgs.filter((o) => o !== UNKNOWN_ORG);
+  const listed = named.length > 0 ? `
+  \uC800\uC7A5\uB41C \uC870\uC9C1: ${named.join(", ")}` : "";
+  if (organizationId) {
+    fail(
+      ExitCode.AUTH,
+      `${portalUrl} \uC758 \uC870\uC9C1 ${organizationId} \uD1A0\uD070\uC774 \uC5C6\uC2B5\uB2C8\uB2E4. \uC774 \uC870\uC9C1\uC73C\uB85C bstage login \uD558\uC138\uC694.${listed}`
+    );
+  }
+  if (named.length > 1) {
+    fail(
+      ExitCode.AUTH,
+      `${portalUrl} \uC5D0 \uC5EC\uB7EC \uC870\uC9C1\uC758 \uD1A0\uD070\uC774 \uC800\uC7A5\uB3FC \uC788\uC5B4 \uD558\uB098\uB97C \uACE0\uB97C \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. --org <id> \uB610\uB294 BSTAGE_ORG \uB85C \uC870\uC9C1\uC744 \uC9C0\uC815\uD558\uAC70\uB098, \uC4F0\uB824\uB294 \uC870\uC9C1\uC73C\uB85C bstage login \uD558\uC138\uC694.${listed}`
+    );
+  }
+  fail(
+    ExitCode.AUTH,
+    `${portalUrl} \uC5D0 \uB85C\uADF8\uC778\uB418\uC5B4 \uC788\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. bstage login --portal ${portalUrl} \uC744 \uBA3C\uC800 \uC2E4\uD589\uD558\uC138\uC694.`
+  );
+}
+async function resolveClientOnly(opts = {}) {
+  const cwd = opts.cwd ?? process.cwd();
+  const env2 = opts.env ?? process.env;
+  const portalUrl = await resolvePortalUrl(opts.portal, cwd, env2, opts.phase);
+  if (!portalUrl) {
+    fail(
+      ExitCode.PRECONDITION,
+      "\uD3EC\uD138 \uC8FC\uC18C\uB97C \uC815\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. --portal <url> \uB610\uB294 --phase \uB97C \uC9C0\uC815\uD558\uC138\uC694."
+    );
+  }
+  const organizationId = opts.organizationId ?? env2.BSTAGE_ORG ?? (await loadLink(cwd, env2))?.organizationId;
+  const token = await resolveToken(portalUrl, env2, organizationId);
+  if (!token) failNoToken(portalUrl, organizationId, await listCredentialOrgs(portalUrl, env2));
+  return {
+    client: new PortalClient({ portalUrl, token, fetch: opts.fetch }),
+    portalUrl,
+    organizationId
+  };
+}
+async function resolveContext(opts = {}) {
+  const cwd = opts.cwd ?? process.cwd();
+  const env2 = opts.env ?? process.env;
+  const link = await loadLink(cwd, env2);
+  if (!link) {
+    fail(
+      ExitCode.PRECONDITION,
+      "\uC774 \uB514\uB809\uD130\uB9AC\uB294 \uD3EC\uD138 \uD504\uB85C\uC81D\uD2B8\uC5D0 \uC5F0\uACB0\uB418\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4. bstage link \uB97C \uBA3C\uC800 \uC2E4\uD589\uD558\uC138\uC694."
+    );
+  }
+  const portalUrl = await resolvePortalUrl(opts.portal, cwd, env2);
+  if (!portalUrl) {
+    fail(
+      ExitCode.PRECONDITION,
+      "\uD3EC\uD138 \uC8FC\uC18C\uB97C \uC815\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. --portal <url> \uB610\uB294 BSTAGE_PORTAL_URL \uC744 \uC9C0\uC815\uD558\uC138\uC694."
+    );
+  }
+  const organizationId = opts.organizationId ?? link.organizationId;
+  const token = await resolveToken(portalUrl, env2, organizationId);
+  if (!token) failNoToken(portalUrl, organizationId, await listCredentialOrgs(portalUrl, env2));
+  return {
+    client: new PortalClient({ portalUrl, token, fetch: opts.fetch }),
+    link: { ...link, portalUrl },
+    organizationId
+  };
+}
+
+// src/portal/types.ts
+var TERMINAL_STATUSES = /* @__PURE__ */ new Set([
+  "SUCCEEDED",
+  "FAILED",
+  "TIMED_OUT",
+  "CANCELED"
+]);
+function placementLabel(p4) {
+  return p4.kind === "SLOT" ? p4.slotId ?? p4.artifact ?? p4.id : p4.path ?? p4.artifact ?? p4.id;
+}
+
+// src/portal/selectPlacements.ts
+function selectPlacements(all, repoId, filter) {
+  const mine = all.filter((p4) => p4.stageRepoId === repoId);
+  if (!filter) return mine;
+  return mine.filter((p4) => p4.id === filter || p4.path === filter || p4.slotId === filter);
+}
+function applyPlan(placements, buildId) {
+  return placements.map((p4) => ({
+    placement: p4,
+    label: placementLabel(p4),
+    from: p4.liveBuildId || void 0,
+    to: buildId,
+    unchanged: p4.liveBuildId === buildId
+  }));
+}
+function requireTargets(all, repoId, filter, buildIdHint) {
+  const mine = selectPlacements(all, repoId, filter);
+  if (mine.length > 0) return mine;
+  const base = filter ? `\uBC30\uCE58 '${filter}' \uC744(\uB97C) \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. bstage list \uB85C \uD655\uC778\uD558\uC138\uC694.` : "\uC774 \uB808\uD3EC\uC5D0 \uC5F0\uACB0\uB41C \uBC30\uCE58\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4. \uD3EC\uD138 > \uC2A4\uD14C\uC774\uC9C0 > \uD398\uC774\uC9C0\uC5D0\uC11C \uBC30\uCE58\uB97C \uBA3C\uC800 \uB9CC\uB4DC\uC138\uC694.";
+  const hint = buildIdHint ? ` \uBE4C\uB4DC ${buildIdHint} \uB294 \uB0A8\uC544 \uC788\uC73C\uB2C8 \uBC30\uCE58\uB97C \uD655\uC778\uD55C \uB4A4 \uB2E4\uC2DC \uC2E4\uD589\uD574 \uC801\uC6A9\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4.` : "";
+  return fail(ExitCode.PRECONDITION, base + hint);
+}
+async function fetchTargets(ctx, filter, buildIdHint) {
+  const all = await ctx.client.listPlacements(
+    ctx.link.organizationId,
+    ctx.link.spaceId,
+    ctx.link.surface
+  );
+  return requireTargets(all, ctx.link.repoId, filter, buildIdHint);
+}
+
+// src/portal/waitBuild.ts
+import pc4 from "picocolors";
+var DEFAULT_INTERVAL = 3e3;
+var DEFAULT_TIMEOUT = 20 * 60 * 1e3;
+async function waitForBuild(client, org, space, buildId, o = {}) {
+  const interval = o.intervalMs ?? DEFAULT_INTERVAL;
+  const timeout = o.timeoutMs ?? DEFAULT_TIMEOUT;
+  const sleep = o.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const started = Date.now();
+  let seen = 0;
+  let logFailing = false;
+  const flushLog = async () => {
+    if (!o.onLog) return;
+    let log2;
+    try {
+      log2 = await client.getBuildLog(org, space, buildId);
+    } catch {
+      if (!logFailing) {
+        console.error(pc4.dim("[bstage] \uB85C\uADF8 \uC870\uD68C \uC2E4\uD328, \uB2E4\uC74C \uD3F4\uB9C1\uC5D0\uC11C \uC7AC\uC2DC\uB3C4\uD569\uB2C8\uB2E4."));
+        logFailing = true;
+      }
+      return;
+    }
+    logFailing = false;
+    if (log2.length < seen) {
+      o.onLog("\n[bstage] \uB85C\uADF8\uAC00 \uC7AC\uC2DC\uC791\uB41C \uAC83\uC73C\uB85C \uBCF4\uC785\uB2C8\uB2E4 \u2014 \uCC98\uC74C\uBD80\uD130 \uB2E4\uC2DC \uCD9C\uB825\uD569\uB2C8\uB2E4.\n");
+      seen = 0;
+    }
+    if (log2.length > seen) {
+      o.onLog(log2.slice(seen));
+      seen = log2.length;
+    }
+  };
+  for (; ; ) {
+    const build = await client.getBuild(org, space, buildId);
+    await flushLog();
+    if (TERMINAL_STATUSES.has(build.status)) return build;
+    if (Date.now() - started > timeout) {
+      fail(
+        ExitCode.FAILURE,
+        `\uBE4C\uB4DC ${buildId} \uAC00 ${Math.round(timeout / 6e4)}\uBD84 \uC548\uC5D0 \uB05D\uB098\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4. \uD3EC\uD138\uC5D0\uC11C \uC0C1\uD0DC\uB97C \uD655\uC778\uD558\uC138\uC694.`
+      );
+    }
+    await sleep(interval);
+  }
+}
+
+// src/commands/deploy.ts
+async function repoDefaultBranch(ctx) {
+  const repos = await ctx.client.listRepos(ctx.link.organizationId, ctx.link.spaceId);
+  const repo = repos.find((r) => r.id === ctx.link.repoId);
+  if (!repo) {
+    fail(
+      ExitCode.PRECONDITION,
+      `\uC5F0\uACB0\uB41C \uB808\uD3EC ${ctx.link.repoId} \uB97C \uD3EC\uD138\uC5D0\uC11C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. bstage link \uB97C \uB2E4\uC2DC \uC2E4\uD589\uD558\uC138\uC694.`
+    );
+  }
+  return repo.defaultBranch;
+}
+async function precheckGit(deps, defaultBranch) {
+  const exec = deps.exec ?? gitExec(deps.cwd ?? process.cwd());
+  let state;
+  try {
+    state = await readGitState(exec);
+  } catch (err) {
+    fail(
+      ExitCode.PRECONDITION,
+      `git \uC0C1\uD0DC\uB97C \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${err instanceof Error ? err.message : String(err)}. git\uC774 \uC124\uCE58\uB3FC \uC788\uACE0 \uC774 \uB514\uB809\uD130\uB9AC\uAC00 git \uC800\uC7A5\uC18C\uC778\uC9C0 \uD655\uC778\uD558\uAC70\uB098 --skip-git-check \uB85C \uAC74\uB108\uB6F0\uC138\uC694.`
+    );
+  }
+  assertDeployable(state, defaultBranch);
+}
+async function createAndAnnounceBuild(ctx, options) {
+  const created = await ctx.client.createBuild(
+    ctx.link.organizationId,
+    ctx.link.spaceId,
+    ctx.link.repoId
+  );
+  if (!options.json) {
+    console.error(pc5.dim(`[bstage] \uBE4C\uB4DC ${created.id} \uC2DC\uC791 (${shortSha(created.commitSha)})`));
+  }
+  return created;
+}
+function reportNoWait(build, options, out) {
+  if (options.json) {
+    printJson(jsonSummary([], { build }));
+    return;
+  }
+  out(
+    `\uBE4C\uB4DC ${build.id} \uB97C \uC2DC\uC791\uD588\uC2B5\uB2C8\uB2E4. bstage logs ${build.id} --follow \uB85C \uC9C4\uD589 \uC0C1\uD669\uC744 \uD655\uC778\uD558\uC138\uC694.`
+  );
+}
+async function waitForCompletedBuild(ctx, deps, build, json) {
+  const { organizationId: org, spaceId: space } = ctx.link;
+  const done = await waitForBuild(ctx.client, org, space, build.id, {
+    sleep: deps.sleep,
+    onLog: json ? void 0 : (delta) => process.stderr.write(pc5.dim(delta))
+  });
+  if (done.status !== "SUCCEEDED") {
+    fail(
+      ExitCode.FAILURE,
+      `\uBE4C\uB4DC ${done.id} \uC2E4\uD328: ${done.status}${done.failureReason ? ` (${done.failureReason})` : ""}. bstage logs ${done.id} \uB85C \uB85C\uADF8\uB97C \uD655\uC778\uD558\uC138\uC694.`
+    );
+  }
+  return done;
+}
+function renderPlanTable(plan, build) {
+  const header = `\uBE4C\uB4DC ${build.id} (\uCEE4\uBC0B ${shortSha(build.commitSha)})`;
+  const rows = table([
+    ["\uC790\uB9AC", "\uD604\uC7AC", "\u2192 \uC801\uC6A9"],
+    ...plan.map((row) => {
+      const to = shortSha(build.commitSha) + (row.unchanged ? " (\uBCC0\uACBD \uC5C6\uC74C)" : "");
+      return [row.label, shortSha(row.placement.liveCommit), to];
+    })
+  ]);
+  return `${header}
+${rows}`;
+}
+async function confirmPlan(plan, build, options, deps) {
+  if (options.yes) return;
+  const out = deps.out ?? console.log;
+  out(renderPlanTable(plan, build));
+  const ok = await askConfirm(
+    deps,
+    `${plan.length}\uAC1C \uBC30\uCE58\uB97C \uBE4C\uB4DC ${build.id} \uB85C \uB77C\uC774\uBE0C \uC804\uD658\uD569\uB2C8\uB2E4. \uC9C4\uD589\uD560\uAE4C\uC694?`
+  );
+  if (!ok) {
+    fail(ExitCode.PRECONDITION, "\uCDE8\uC18C\uD588\uC2B5\uB2C8\uB2E4. \uBE4C\uB4DC\uB294 \uB0A8\uC544 \uC788\uC73C\uB2C8 \uD544\uC694\uD558\uBA74 \uB2E4\uC2DC \uC2E4\uD589\uD574 \uC801\uC6A9\uD558\uC138\uC694.");
   }
 }
-function formatSize(bytes) {
-  if (bytes < 1024) return `${bytes} B`;
-  const kb = bytes / 1024;
-  if (kb < 1024) return `${kb.toFixed(1)} KB`;
-  const mb = kb / 1024;
-  return `${mb.toFixed(2)} MB`;
+async function deployCommand(options, deps = {}) {
+  if (options.json && !options.yes) {
+    fail(ExitCode.PRECONDITION, "--json \uC740 --yes \uC640 \uD568\uAED8 \uC4F0\uC138\uC694.");
+  }
+  if (!options.yes) assertCanConfirm(deps);
+  const out = deps.out ?? console.log;
+  const ctx = await resolveContext({ cwd: deps.cwd, env: deps.env, fetch: deps.fetch });
+  const defaultBranch = await repoDefaultBranch(ctx);
+  if (!options.skipGitCheck) await precheckGit(deps, defaultBranch);
+  await fetchTargets(ctx, options.placement);
+  const created = await createAndAnnounceBuild(ctx, options);
+  if (options.noWait) {
+    reportNoWait(created, options, out);
+    return;
+  }
+  const build = await waitForCompletedBuild(ctx, deps, created, options.json);
+  const fresh = await fetchTargets(ctx, options.placement, build.id);
+  const plan = applyPlan(fresh, build.id);
+  await confirmPlan(plan, build, options, deps);
+  const results = await applyPlacements(ctx, plan);
+  reportOutcome(results, options, out, { build });
 }
 
 // src/commands/dev.ts
@@ -535,11 +1510,11 @@ async function devCommand(options) {
 }
 
 // src/commands/init.ts
-import * as p from "@clack/prompts";
-import pc2 from "picocolors";
+import * as p2 from "@clack/prompts";
+import pc6 from "picocolors";
 import { existsSync, mkdirSync, writeFileSync } from "fs";
 import { execSync } from "child_process";
-import { resolve as resolve2, join as join2 } from "path";
+import { resolve as resolve2, join as join4 } from "path";
 
 // src/templates/agentsMdRegion.ts
 var AGENTS_MANAGED_VERSION = 10;
@@ -790,7 +1765,7 @@ ${commandsSection}
 - \uC804\uC5ED CSS \uD30C\uC77C(\`<link>\`, \uC678\uBD80 \uC2A4\uD0C0\uC77C\uC2DC\uD2B8)\uC744 \uC0AC\uC6A9\uD558\uC9C0 \uC54A\uB294\uB2E4 \u2014 Shadow DOM \uB0B4\uBD80\uC5D0 \uC801\uC6A9\uB418\uC9C0 \uC54A\uB294\uB2E4.
 - **\`import './style.css'\`\uB85C \uC2A4\uD0C0\uC77C\uC744 \uB123\uC9C0 \uC54A\uB294\uB2E4 \u2014 \uBC30\uD3EC \uC0B0\uCD9C\uBB3C\uC5D0\uC11C \uC0AC\uB77C\uC9C4\uB2E4.** \uB85C\uCEEC \uAC1C\uBC1C \uD654\uBA74\uC5D0\uC11C\uB294 \uC801\uC6A9\uB418\uC5B4 \uB208\uCE58\uCC44\uAE30 \uC5B4\uB835\uB2E4. CSS \uD30C\uC77C\uC744 \uC4F0\uB824\uBA74 \`import css from './style.css?inline'\`\uC73C\uB85C \uBB38\uC790\uC5F4\uC744 \uAC00\uC838\uC640 \`createTemplate(..., { styles: css })\`\uC5D0 \uB118\uAE30\uAC70\uB098 \uCEF4\uD3EC\uB10C\uD2B8 \uC548 \`<style>{css}</style>\`\uB85C \uB80C\uB354\uD55C\uB2E4. inline \`style={{}}\`\uB3C4 \uB41C\uB2E4
 - UI \uC0C9\xB7\uD0C0\uC774\uD3EC\xB7\uADF8\uB9BC\uC790\uB97C hex/rgb\uB85C \uD558\uB4DC\uCF54\uB529\uD558\uC9C0 \uC54A\uB294\uB2E4 \u2014 \uC704 '\uB514\uC790\uC778' \uC139\uC158\uC758 \uB514\uC790\uC778 \uD1A0\uD070\uC744 \uC0AC\uC6A9
-- \uC571\uD0A4(APP-ID \`bsa_\u2026\`\xB7Secret \`bsp_\u2026\`, \uC5B4\uB4DC\uBBFC \uAC8C\uC774\uD2B8\uC6E8\uC774 \`bsm_\u2026\`)\uB97C \uC18C\uC2A4 \uCF54\uB4DC\uC5D0 \uB9AC\uD130\uB7F4\uB85C \uB123\uC9C0 \uC54A\uB294\uB2E4 \u2014 \uC778\uC99D \uAC12\uC740 \`.env\`(\uCEE4\uBC0B \uC548 \uB428)\uC5D0\uC11C \`import.meta.env.VITE_BSTAGE_*\`\uB85C\uB9CC \uC8FC\uC785\uD55C\uB2E4. pre-commit \uD6C5\uC774 \uCEE4\uBC0B \uC804 \uAC80\uCD9C\xB7\uCC28\uB2E8\uD558\uBA70 \`--no-verify\`\uB85C \uC6B0\uD68C\uD558\uC9C0 \uC54A\uB294\uB2E4
+- \uC571\uD0A4(APP-ID \`bsa_\u2026\`\xB7APP KEY \`bsp_\u2026\`, \uC5B4\uB4DC\uBBFC \uAC8C\uC774\uD2B8\uC6E8\uC774 \`bsm_\u2026\`)\uB97C \uC18C\uC2A4 \uCF54\uB4DC\uC5D0 \uB9AC\uD130\uB7F4\uB85C \uB123\uC9C0 \uC54A\uB294\uB2E4 \u2014 \uC778\uC99D \uAC12\uC740 \`.env\`(\uCEE4\uBC0B \uC548 \uB428)\uC5D0\uC11C \`import.meta.env.VITE_BSTAGE_*\`\uB85C\uB9CC \uC8FC\uC785\uD55C\uB2E4. pre-commit \uD6C5\uC774 \uCEE4\uBC0B \uC804 \uAC80\uCD9C\xB7\uCC28\uB2E8\uD558\uBA70 \`--no-verify\`\uB85C \uC6B0\uD68C\uD558\uC9C0 \uC54A\uB294\uB2E4
 ${apiForbidBullet}
 `;
 }
@@ -812,14 +1787,15 @@ function claudeMd() {
 }
 
 // src/templates/env.ts
-function env({ phase, appId, appSecret, tenantId }) {
+function env({ phase, appId, appKey, tenantId }) {
   return `VITE_BSTAGE_PHASE=${phase}
 
 # \uC778\uC99D \uC815\uBCF4(\uC120\uD0DD) \u2014 BstageClient\uB85C API\uB97C \uD638\uCD9C\uD560 \uB54C\uB9CC \uD544\uC694\uD569\uB2C8\uB2E4.
 # API \uC5C6\uC774 UI\uB9CC \uB80C\uB354\uD558\uB294 \uD15C\uD50C\uB9BF\uC740 \uAC12\uC744 \uCC44\uC6B0\uC9C0 \uC54A\uC544\uB3C4 \uB429\uB2C8\uB2E4.
 # .env\uB294 \uCEE4\uBC0B\uB418\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4(.gitignore). \uAC12\uC740 b.stage \uD30C\uD2B8\uB108 \uCF58\uC194\uC5D0\uC11C \uBC1C\uAE09.
+# APP_KEY\uB294 \uD3EC\uD138\uC758 "APP KEY"\uC640 \uAC19\uC740 \uAC12\uC785\uB2C8\uB2E4. \uBE0C\uB77C\uC6B0\uC800\uC5D0 \uB178\uCD9C\uB418\uB294 \uAC12\uC774\uB77C \uBE44\uBC00\uAC12\uC774 \uC544\uB2D9\uB2C8\uB2E4.
 VITE_BSTAGE_APP_ID=${appId}
-VITE_BSTAGE_APP_SECRET=${appSecret}
+VITE_BSTAGE_APP_KEY=${appKey}
 VITE_BSTAGE_TENANT_ID=${tenantId}
 
 # CF Access \uC790\uACA9\uC99D\uBA85 \u2014 dev\xB7qa phase\uB85C \uAC1C\uBC1C\uD560 \uB54C\uB9CC \uD544\uC694\uD569\uB2C8\uB2E4.
@@ -943,9 +1919,9 @@ createTemplate(MyWidget, {
 VITE_BSTAGE_PHASE=dev   # dev | qa | real | sandbox
 \`\`\`
 
-API \uD0A4(APP-ID/Secret)\uB294 \`.env\`\uC5D0\uC11C \uC124\uC815\uD569\uB2C8\uB2E4. \`.env\`\uB294 \uCEE4\uBC0B\uB418\uC9C0 \uC54A\uC73C\uB2C8, clone \uD6C4 \`.env.example\`\uC744 \`.env\`\uB85C \uBCF5\uC0AC\uD574 \uAC12\uC744 \uCC44\uC6B0\uC138\uC694.
+API \uD0A4(APP-ID/APP KEY)\uB294 \`.env\`\uC5D0\uC11C \uC124\uC815\uD569\uB2C8\uB2E4. \`.env\`\uB294 \uCEE4\uBC0B\uB418\uC9C0 \uC54A\uC73C\uB2C8, clone \uD6C4 \`.env.example\`\uC744 \`.env\`\uB85C \uBCF5\uC0AC\uD574 \uAC12\uC744 \uCC44\uC6B0\uC138\uC694.
 
-> **\uBCF4\uC548**: \uC571\uD0A4 \uAC12\uC744 \uC18C\uC2A4 \uCF54\uB4DC(\uC608: \`client.ts\`)\uC5D0 \uC9C1\uC811 \uB123\uC9C0 \uB9C8\uC138\uC694 \u2014 \uBC18\uB4DC\uC2DC \`.env\`\uB85C\uB9CC \uC8FC\uC785\uD569\uB2C8\uB2E4. \`bstage init\`\uC774 \uC124\uCE58\uD55C pre-commit \uD6C5\uC774 \uCEE4\uBC0B \uC804 \uD0A4 \uB9AC\uD130\uB7F4\uC744 \uCC28\uB2E8\uD558\uBA70, \`--no-verify\`\uB85C \uC6B0\uD68C\uD558\uC9C0 \uB9C8\uC138\uC694.
+> **\uADDC\uCE59**: \uC571\uD0A4 \uAC12\uC744 \uC18C\uC2A4 \uCF54\uB4DC(\uC608: \`client.ts\`)\uC5D0 \uC9C1\uC811 \uB123\uC9C0 \uB9C8\uC138\uC694 \u2014 \uBC18\uB4DC\uC2DC \`.env\`\uB85C\uB9CC \uC8FC\uC785\uD569\uB2C8\uB2E4. APP KEY\uB294 \uBE0C\uB77C\uC6B0\uC800\uC5D0 \uB178\uCD9C\uB418\uB294 \uAC12\uC774\uB77C \uBE44\uBC00\uC740 \uC544\uB2C8\uC9C0\uB9CC, \uD658\uACBD\uB9C8\uB2E4 \uAC12\uC774 \uB2E4\uB974\uACE0 \uC800\uC7A5\uC18C\uC5D0 \uBC15\uD788\uBA74 \uC7AC\uBC1C\uAE09 \uB54C \uCF54\uB4DC \uC218\uC815\uC774 \uB530\uB77C\uC635\uB2C8\uB2E4. \`bstage init\`\uC774 \uC124\uCE58\uD55C pre-commit \uD6C5\uC774 \uCEE4\uBC0B \uC804 \uD0A4 \uB9AC\uD130\uB7F4\uC744 \uCC28\uB2E8\uD558\uBA70, \`--no-verify\`\uB85C \uC6B0\uD68C\uD558\uC9C0 \uB9C8\uC138\uC694.
 
 ## SDK \uC5C5\uB370\uC774\uD2B8
 
@@ -1592,7 +2568,7 @@ function viteEnvDts() {
 interface ImportMetaEnv {
   readonly VITE_BSTAGE_PHASE: string
   readonly VITE_BSTAGE_APP_ID: string
-  readonly VITE_BSTAGE_APP_SECRET: string
+  readonly VITE_BSTAGE_APP_KEY: string
   readonly VITE_BSTAGE_TENANT_ID: string
 }
 
@@ -1610,7 +2586,7 @@ function clientTs() {
 // clone \uD6C4 .env.example\uC744 .env\uB85C \uBCF5\uC0AC\uD574 \uAC12\uC744 \uCC44\uC6B0\uC138\uC694.
 export const client = new BstageClient({
   appId: import.meta.env.VITE_BSTAGE_APP_ID,
-  appSecret: import.meta.env.VITE_BSTAGE_APP_SECRET,
+  appKey: import.meta.env.VITE_BSTAGE_APP_KEY,
   tenantId: import.meta.env.VITE_BSTAGE_TENANT_ID,
 })
 `;
@@ -1709,56 +2685,56 @@ npx bstage docs   # SLOT_CATALOG_V2.md
 var PHASES = ["dev", "qa", "real", "sandbox"];
 var TARGETS = ["user", "admin"];
 async function initCommand(options) {
-  p.intro(`${pc2.cyan(pc2.bold("bstage init"))} ${pc2.dim("\u2014 b.stage Template Project Setup")}`);
+  p2.intro(`${pc6.cyan(pc6.bold("bstage init"))} ${pc6.dim("\u2014 b.stage Template Project Setup")}`);
   let space;
   let templateName;
   let packageManager;
   let phase;
   let target;
   let appId = "";
-  let appSecret = "";
+  let appKey = "";
   let tenantId = "";
   if (options.yes) {
     const targetOpt = options.target ?? "user";
     if (!TARGETS.includes(targetOpt)) {
-      p.log.error(`--target \uAC12\uC740 ${TARGETS.join(" | ")} \uC911 \uD558\uB098\uC5EC\uC57C \uD569\uB2C8\uB2E4.`);
-      p.outro(pc2.red("\uC911\uB2E8\uB418\uC5C8\uC2B5\uB2C8\uB2E4."));
+      p2.log.error(`--target \uAC12\uC740 ${TARGETS.join(" | ")} \uC911 \uD558\uB098\uC5EC\uC57C \uD569\uB2C8\uB2E4.`);
+      p2.outro(pc6.red("\uC911\uB2E8\uB418\uC5C8\uC2B5\uB2C8\uB2E4."));
       process.exit(1);
     }
     target = targetOpt;
     if (!options.space) {
-      p.log.error("--yes \uBAA8\uB4DC\uC5D0\uC11C\uB294 --space\uAC00 \uD544\uC218\uC785\uB2C8\uB2E4.");
-      p.outro(pc2.red("\uC911\uB2E8\uB418\uC5C8\uC2B5\uB2C8\uB2E4."));
+      p2.log.error("--yes \uBAA8\uB4DC\uC5D0\uC11C\uB294 --space\uAC00 \uD544\uC218\uC785\uB2C8\uB2E4.");
+      p2.outro(pc6.red("\uC911\uB2E8\uB418\uC5C8\uC2B5\uB2C8\uB2E4."));
       process.exit(1);
     }
     const slugPattern = /^[a-zA-Z][a-zA-Z0-9-]*$/;
     if (!slugPattern.test(options.space)) {
-      p.log.error(
-        `${pc2.red("--space")} \uAC12\uC740 \uC601\uBB38\uC790\uB85C \uC2DC\uC791\uD574\uC57C \uD558\uBA70, \uC601\uBB38, \uC22B\uC790, \uD558\uC774\uD508\uB9CC \uC0AC\uC6A9\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4.`
+      p2.log.error(
+        `${pc6.red("--space")} \uAC12\uC740 \uC601\uBB38\uC790\uB85C \uC2DC\uC791\uD574\uC57C \uD558\uBA70, \uC601\uBB38, \uC22B\uC790, \uD558\uC774\uD508\uB9CC \uC0AC\uC6A9\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4.`
       );
-      p.outro(pc2.red("\uC911\uB2E8\uB418\uC5C8\uC2B5\uB2C8\uB2E4."));
+      p2.outro(pc6.red("\uC911\uB2E8\uB418\uC5C8\uC2B5\uB2C8\uB2E4."));
       process.exit(1);
     }
     space = options.space;
     const templateOpt = resolveTemplateName(space, options.template);
     if (!ELEMENT_NAME_RE2.test(templateOpt)) {
-      p.log.error(
-        `${pc2.red("--template")} \uAC12\uC740 Custom Element \uC2A4\uD399\uC744 \uB530\uB77C\uC57C \uD569\uB2C8\uB2E4: \uC18C\uBB38\uC790 \uC2DC\uC791, \uD558\uC774\uD508 1\uAC1C \uC774\uC0C1, \uC18C\uBB38\uC790\xB7\uC22B\uC790\xB7\uD558\uC774\uD508\uB9CC.`
+      p2.log.error(
+        `${pc6.red("--template")} \uAC12\uC740 Custom Element \uC2A4\uD399\uC744 \uB530\uB77C\uC57C \uD569\uB2C8\uB2E4: \uC18C\uBB38\uC790 \uC2DC\uC791, \uD558\uC774\uD508 1\uAC1C \uC774\uC0C1, \uC18C\uBB38\uC790\xB7\uC22B\uC790\xB7\uD558\uC774\uD508\uB9CC.`
       );
-      p.outro(pc2.red("\uC911\uB2E8\uB418\uC5C8\uC2B5\uB2C8\uB2E4."));
+      p2.outro(pc6.red("\uC911\uB2E8\uB418\uC5C8\uC2B5\uB2C8\uB2E4."));
       process.exit(1);
     }
     templateName = templateOpt;
     packageManager = options.pm ?? "npm";
     const phaseOpt = options.phase ?? "sandbox";
     if (!PHASES.includes(phaseOpt)) {
-      p.log.error(`--phase \uAC12\uC740 ${PHASES.join(" | ")} \uC911 \uD558\uB098\uC5EC\uC57C \uD569\uB2C8\uB2E4.`);
-      p.outro(pc2.red("\uC911\uB2E8\uB418\uC5C8\uC2B5\uB2C8\uB2E4."));
+      p2.log.error(`--phase \uAC12\uC740 ${PHASES.join(" | ")} \uC911 \uD558\uB098\uC5EC\uC57C \uD569\uB2C8\uB2E4.`);
+      p2.outro(pc6.red("\uC911\uB2E8\uB418\uC5C8\uC2B5\uB2C8\uB2E4."));
       process.exit(1);
     }
     phase = phaseOpt;
   } else {
-    target = await p.select({
+    target = await p2.select({
       message: "\uCCAB \uBC88\uC9F8 \uD15C\uD50C\uB9BF\uC740 \uC5B4\uB290 \uD50C\uB7AB\uD3FC\uC6A9\uC778\uAC00\uC694? (\uB808\uD3EC\uC5D0 \uB450 \uC885\uB958\uB97C \uC11E\uC744 \uC218 \uC788\uC2B5\uB2C8\uB2E4)",
       options: [
         { value: "user", label: "user (b.stage \uC720\uC800 \uD50C\uB7AB\uD3FC)" },
@@ -1766,13 +2742,13 @@ async function initCommand(options) {
       ],
       initialValue: options.target === "admin" ? "admin" : "user"
     });
-    if (p.isCancel(target)) return cancelled();
-    space = await p.text({
+    if (p2.isCancel(target)) return cancelled();
+    space = await p2.text({
       message: "\uD15C\uD50C\uB9BF\uC744 \uC801\uC6A9\uD560 Space ID\uB97C \uC785\uB825\uD574 \uC8FC\uC138\uC694.",
       validate: validateSlug("Space ID\uB294 \uD544\uC218\uC785\uB2C8\uB2E4.")
     });
-    if (p.isCancel(space)) return cancelled();
-    phase = await p.select({
+    if (p2.isCancel(space)) return cancelled();
+    phase = await p2.select({
       message: "\uD15C\uD50C\uB9BF\uC744 \uBC30\uD3EC\uD560 \uD658\uACBD\uC744 \uC120\uD0DD\uD574 \uC8FC\uC138\uC694.",
       options: [
         { value: "sandbox", label: "sandbox", hint: "\uAE30\uBCF8" },
@@ -1782,14 +2758,14 @@ async function initCommand(options) {
       ],
       initialValue: "sandbox"
     });
-    if (p.isCancel(phase)) return cancelled();
-    templateName = await p.text({
-      message: `\uCCAB \uBC88\uC9F8 \uD15C\uD50C\uB9BF \uC774\uB984\uC744 \uC785\uB825\uD574 \uC8FC\uC138\uC694. ${pc2.dim(`(\uC608: ${space}-hello \u2014 \uD558\uC774\uD508 \uD544\uC218)`)}`,
+    if (p2.isCancel(phase)) return cancelled();
+    templateName = await p2.text({
+      message: `\uCCAB \uBC88\uC9F8 \uD15C\uD50C\uB9BF \uC774\uB984\uC744 \uC785\uB825\uD574 \uC8FC\uC138\uC694. ${pc6.dim(`(\uC608: ${space}-hello \u2014 \uD558\uC774\uD508 \uD544\uC218)`)}`,
       placeholder: resolveTemplateName(space, void 0),
       validate: validateElementName
     });
-    if (p.isCancel(templateName)) return cancelled();
-    packageManager = await p.select({
+    if (p2.isCancel(templateName)) return cancelled();
+    packageManager = await p2.select({
       message: "\uC0AC\uC6A9\uD560 \uD328\uD0A4\uC9C0 \uB9E4\uB2C8\uC800\uB97C \uC120\uD0DD\uD574 \uC8FC\uC138\uC694.",
       options: [
         { value: "npm", label: "npm" },
@@ -1797,36 +2773,36 @@ async function initCommand(options) {
       ],
       initialValue: "npm"
     });
-    if (p.isCancel(packageManager)) return cancelled();
-    const configureAuth = await p.confirm({
+    if (p2.isCancel(packageManager)) return cancelled();
+    const configureAuth = await p2.confirm({
       message: "b.stage \uD30C\uD2B8\uB108\uC2A4\uC5D0\uC11C \uBC1C\uAE09\uBC1B\uC740 API \uD0A4\uAC00 \uC788\uC73C\uC2E0\uAC00\uC694? (\uC5C6\uC5B4\uB3C4 \uC2DC\uC791\uD560 \uC218 \uC788\uC5B4\uC694)",
       initialValue: false
     });
-    if (p.isCancel(configureAuth)) return cancelled();
+    if (p2.isCancel(configureAuth)) return cancelled();
     if (configureAuth) {
-      p.log.info(pc2.dim("API \uC778\uC99D \uC124\uC815 (\uC120\uD0DD)"));
-      appId = await p.text({
+      p2.log.info(pc6.dim("API \uC778\uC99D \uC124\uC815 (\uC120\uD0DD)"));
+      appId = await p2.text({
         message: "\uD30C\uD2B8\uB108 \uCF58\uC194\uC5D0\uC11C \uBC1C\uAE09\uBC1B\uC740 APP-ID\uB97C \uC785\uB825\uD574 \uC8FC\uC138\uC694."
       }) ?? "";
-      if (p.isCancel(appId)) return cancelled();
-      appSecret = await p.text({
-        message: "\uD30C\uD2B8\uB108 \uCF58\uC194\uC5D0\uC11C \uBC1C\uAE09\uBC1B\uC740 Secret \uAC12\uC744 \uC785\uB825\uD574 \uC8FC\uC138\uC694."
+      if (p2.isCancel(appId)) return cancelled();
+      appKey = await p2.text({
+        message: "\uD30C\uD2B8\uB108 \uCF58\uC194\uC5D0\uC11C \uBC1C\uAE09\uBC1B\uC740 APP KEY\uB97C \uC785\uB825\uD574 \uC8FC\uC138\uC694."
       }) ?? "";
-      if (p.isCancel(appSecret)) return cancelled();
-      warnIfCredentialsSwapped(appId, appSecret);
+      if (p2.isCancel(appKey)) return cancelled();
+      warnIfCredentialsSwapped(appId, appKey);
       tenantId = space;
     }
   }
   const projectName = `${space}-custom-templates-${phase}`;
   const projectDir = resolve2(process.cwd(), projectName);
   if (existsSync(projectDir)) {
-    p.log.error(
-      `${pc2.red(projectDir)} \uB514\uB809\uD1A0\uB9AC\uAC00 \uC774\uBBF8 \uC874\uC7AC\uD569\uB2C8\uB2E4. \uD574\uB2F9 \uB514\uB809\uD1A0\uB9AC\uB97C \uC815\uB9AC\uD55C \uB4A4 \uB2E4\uC2DC \uC2E4\uD589\uD574 \uC8FC\uC138\uC694.`
+    p2.log.error(
+      `${pc6.red(projectDir)} \uB514\uB809\uD1A0\uB9AC\uAC00 \uC774\uBBF8 \uC874\uC7AC\uD569\uB2C8\uB2E4. \uD574\uB2F9 \uB514\uB809\uD1A0\uB9AC\uB97C \uC815\uB9AC\uD55C \uB4A4 \uB2E4\uC2DC \uC2E4\uD589\uD574 \uC8FC\uC138\uC694.`
     );
-    p.outro(pc2.red("\uC911\uB2E8\uB418\uC5C8\uC2B5\uB2C8\uB2E4."));
+    p2.outro(pc6.red("\uC911\uB2E8\uB418\uC5C8\uC2B5\uB2C8\uB2E4."));
     process.exit(1);
   }
-  const s = p.spinner();
+  const s = p2.spinner();
   s.start("SDK \uCD5C\uC2E0 \uBC84\uC804 \uC870\uD68C \uC911...");
   let sdkVersions;
   try {
@@ -1839,12 +2815,12 @@ async function initCommand(options) {
     sdkVersions = { cli, core, react: react2, design };
     s.stop(`SDK \uBC84\uC804 \uD655\uC815 \u2014 cli@${cli}, core@${core}, react@${react2}, design@${design}`);
   } catch (err) {
-    s.stop(pc2.red("SDK \uCD5C\uC2E0 \uBC84\uC804 \uC870\uD68C \uC2E4\uD328"));
-    p.log.error(
+    s.stop(pc6.red("SDK \uCD5C\uC2E0 \uBC84\uC804 \uC870\uD68C \uC2E4\uD328"));
+    p2.log.error(
       (err instanceof Error ? err.message : String(err)) + `
-  ${pc2.dim("\uB124\uD2B8\uC6CC\uD06C \uC5F0\uACB0\uACFC registry.npmjs.org \uC811\uADFC\uC774 \uAC00\uB2A5\uD55C\uC9C0 \uD655\uC778\uD574 \uC8FC\uC138\uC694.")}`
+  ${pc6.dim("\uB124\uD2B8\uC6CC\uD06C \uC5F0\uACB0\uACFC registry.npmjs.org \uC811\uADFC\uC774 \uAC00\uB2A5\uD55C\uC9C0 \uD655\uC778\uD574 \uC8FC\uC138\uC694.")}`
     );
-    p.outro(pc2.red("\uC911\uB2E8\uB418\uC5C8\uC2B5\uB2C8\uB2E4."));
+    p2.outro(pc6.red("\uC911\uB2E8\uB418\uC5C8\uC2B5\uB2C8\uB2E4."));
     process.exit(1);
   }
   s.start("\uD504\uB85C\uC81D\uD2B8 \uD30C\uC77C \uC0DD\uC131 \uC911...");
@@ -1858,7 +2834,7 @@ async function initCommand(options) {
     ...BSTAGE_SKILLS.map((s2) => `.claude/skills/${s2.name}`)
   ];
   for (const dir of dirs) {
-    mkdirSync(join2(projectDir, dir), { recursive: true });
+    mkdirSync(join4(projectDir, dir), { recursive: true });
   }
   const envFiles = [
     // .env(실제 값)는 커밋되지 않음(.gitignore). .env.example은 커밋되어 팀원 세팅 안내.
@@ -1867,7 +2843,7 @@ async function initCommand(options) {
       env({
         phase,
         appId: appId || "YOUR_APP_ID",
-        appSecret: appSecret || "YOUR_APP_SECRET",
+        appKey: appKey || "YOUR_APP_KEY",
         tenantId: tenantId || "YOUR_TENANT_ID"
       })
     ],
@@ -1876,7 +2852,7 @@ async function initCommand(options) {
       env({
         phase,
         appId: "YOUR_APP_ID",
-        appSecret: "YOUR_APP_SECRET",
+        appKey: "YOUR_APP_KEY",
         tenantId: "YOUR_TENANT_ID"
       })
     ]
@@ -1912,7 +2888,7 @@ async function initCommand(options) {
     )
   ];
   for (const [filePath, content] of files) {
-    writeFileSync(join2(projectDir, filePath), content, "utf-8");
+    writeFileSync(join4(projectDir, filePath), content, "utf-8");
   }
   s.stop("\uD504\uB85C\uC81D\uD2B8 \uD30C\uC77C \uC0DD\uC131 \uC644\uB8CC");
   s.start("Git \uCD08\uAE30\uD654 \uC911...");
@@ -1925,7 +2901,7 @@ async function initCommand(options) {
     });
     s.stop("Git \uCD08\uAE30\uD654 \uC644\uB8CC");
   } catch {
-    s.stop(pc2.yellow("Git \uCD08\uAE30\uD654 \uAC74\uB108\uB700 (git\uC774 \uC124\uCE58\uB418\uC9C0 \uC54A\uC558\uC744 \uC218 \uC788\uC2B5\uB2C8\uB2E4)"));
+    s.stop(pc6.yellow("Git \uCD08\uAE30\uD654 \uAC74\uB108\uB700 (git\uC774 \uC124\uCE58\uB418\uC9C0 \uC54A\uC558\uC744 \uC218 \uC788\uC2B5\uB2C8\uB2E4)"));
   }
   s.start(`\uC758\uC874\uC131 \uC124\uCE58 \uC911... (${packageManager} install)`);
   try {
@@ -1933,16 +2909,16 @@ async function initCommand(options) {
     execSync(installCmd, { cwd: projectDir, stdio: "ignore", env: { ...process.env } });
     s.stop("\uC758\uC874\uC131 \uC124\uCE58 \uC644\uB8CC");
   } catch {
-    s.stop(pc2.yellow("\uC758\uC874\uC131 \uC124\uCE58 \uC2E4\uD328 \u2014 \uC9C1\uC811 \uC124\uCE58\uD574 \uC8FC\uC138\uC694"));
+    s.stop(pc6.yellow("\uC758\uC874\uC131 \uC124\uCE58 \uC2E4\uD328 \u2014 \uC9C1\uC811 \uC124\uCE58\uD574 \uC8FC\uC138\uC694"));
   }
   const runCmd = packageManager === "pnpm" ? "pnpm dev" : "npm run dev";
   const label = target === "admin" ? "\uC5B4\uB4DC\uBBFC \uD15C\uD50C\uB9BF \uD504\uB85C\uC81D\uD2B8" : "\uD504\uB85C\uC81D\uD2B8";
-  p.outro(`${pc2.green(`${label}\uAC00 \uC0DD\uC131\uB418\uC5C8\uC2B5\uB2C8\uB2E4!`)}
+  p2.outro(`${pc6.green(`${label}\uAC00 \uC0DD\uC131\uB418\uC5C8\uC2B5\uB2C8\uB2E4!`)}
 
   \uB2E4\uC74C \uB2E8\uACC4:
-  ${pc2.cyan(`cd ${projectName}`)}
-  ${pc2.cyan(runCmd)}
-  ${pc2.dim("# \uBE0C\uB77C\uC6B0\uC800: http://localhost:5173")}`);
+  ${pc6.cyan(`cd ${projectName}`)}
+  ${pc6.cyan(runCmd)}
+  ${pc6.dim("# \uBE0C\uB77C\uC6B0\uC800: http://localhost:5173")}`);
 }
 async function fetchLatestVersion(packageName) {
   const res = await fetch(`https://registry.npmjs.org/${packageName}`, {
@@ -1976,24 +2952,24 @@ function validateElementName(v) {
   }
 }
 var APP_ID_PREFIX2 = "bsa_";
-var APP_SECRET_PREFIX2 = "bsp_";
-function warnIfCredentialsSwapped(appId, appSecret) {
-  if (!appId.startsWith(APP_SECRET_PREFIX2) && !appSecret.startsWith(APP_ID_PREFIX2)) return;
-  p.log.warn(
-    `APP-ID\uC640 Secret\uC774 \uC11C\uB85C \uBC14\uB010 \uAC83 \uAC19\uC2B5\uB2C8\uB2E4.
-  APP-ID\uB294 "${APP_ID_PREFIX2}", Secret\uC740 "${APP_SECRET_PREFIX2}"\uB85C \uC2DC\uC791\uD569\uB2C8\uB2E4.
+var APP_KEY_PREFIX2 = "bsp_";
+function warnIfCredentialsSwapped(appId, appKey) {
+  if (!appId.startsWith(APP_KEY_PREFIX2) && !appKey.startsWith(APP_ID_PREFIX2)) return;
+  p2.log.warn(
+    `APP-ID\uC640 APP KEY\uAC00 \uC11C\uB85C \uBC14\uB010 \uAC83 \uAC19\uC2B5\uB2C8\uB2E4.
+  APP-ID\uB294 "${APP_ID_PREFIX2}", APP KEY\uB294 "${APP_KEY_PREFIX2}"\uB85C \uC2DC\uC791\uD569\uB2C8\uB2E4.
   \uD30C\uD2B8\uB108 \uCF58\uC194\uC5D0\uC11C \uBC1C\uAE09\uBC1B\uC740 \uAC12\uC744 \uB2E4\uC2DC \uD655\uC778\uD574 \uC8FC\uC138\uC694.`
   );
 }
 function cancelled() {
-  p.outro(pc2.red("\uCDE8\uC18C\uB418\uC5C8\uC2B5\uB2C8\uB2E4."));
+  p2.outro(pc6.red("\uCDE8\uC18C\uB418\uC5C8\uC2B5\uB2C8\uB2E4."));
   process.exit(0);
 }
 
 // src/commands/i18n.ts
 import { mkdirSync as mkdirSync2, writeFileSync as writeFileSync2 } from "fs";
-import { dirname, join as join3, resolve as resolve3 } from "path";
-import pc3 from "picocolors";
+import { dirname as dirname3, join as join5, resolve as resolve3 } from "path";
+import pc7 from "picocolors";
 function latestKey(phase, tier, target) {
   const segments = tier === DEFAULT_TRANSLATION_TIER ? [TRANSLATION_CDN_BASE_KEY, phase, target] : [TRANSLATION_CDN_BASE_KEY, phase, target, tier];
   return [...segments, "latest.json"].join("/");
@@ -2040,87 +3016,87 @@ async function i18nPullCommand(options) {
   const tier = options.tier || DEFAULT_TRANSLATION_TIER;
   const target = options.target || "user";
   const latestUrl = `${TRANSLATION_CDN_ORIGIN}/${latestKey(options.phase, tier, target)}?date=${cacheStamp(/* @__PURE__ */ new Date())}`;
-  console.log(pc3.cyan(`[bstage] \uBC88\uC5ED pull: ${options.phase}/${target} (tier=${tier})`));
+  console.log(pc7.cyan(`[bstage] \uBC88\uC5ED pull: ${options.phase}/${target} (tier=${tier})`));
   let latest;
   try {
     latest = await fetchJson(latestUrl);
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(pc3.red(`[bstage] latest.json \uC870\uD68C \uC2E4\uD328: ${msg}
+    console.error(pc7.red(`[bstage] latest.json \uC870\uD68C \uC2E4\uD328: ${msg}
   ${latestUrl}`));
     process.exit(1);
   }
   const versionBase = `${TRANSLATION_CDN_ORIGIN}/${latest.cdnPath.replace(TRANSLATION_CDN_BUCKET_PREFIX, "")}`;
-  console.log(pc3.dim(`  version: ${latest.version}`));
-  const cacheDir = join3(root, ".bstage", "i18n", target);
+  console.log(pc7.dim(`  version: ${latest.version}`));
+  const cacheDir = join5(root, ".bstage", "i18n", target);
   mkdirSync2(cacheDir, { recursive: true });
   let refDict = null;
   const fetched = [];
   for (const locale of TRANSLATION_LANGUAGES) {
     try {
       const dict = await fetchJson(`${versionBase}/${locale}/translation.json`);
-      writeFileSync2(join3(cacheDir, `${locale}.json`), JSON.stringify(dict, null, 2));
+      writeFileSync2(join5(cacheDir, `${locale}.json`), JSON.stringify(dict, null, 2));
       fetched.push(locale);
       if (locale === options.ref) refDict = dict;
-      console.log(pc3.green(`  \u2713 ${locale} (${Object.keys(dict).length})`));
+      console.log(pc7.green(`  \u2713 ${locale} (${Object.keys(dict).length})`));
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
-      console.warn(pc3.yellow(`  - ${locale}: ${msg} \u2014 \uAC74\uB108\uB700`));
+      console.warn(pc7.yellow(`  - ${locale}: ${msg} \u2014 \uAC74\uB108\uB700`));
     }
   }
   if (fetched.length === 0) {
-    console.error(pc3.red("[bstage] \uBC1B\uC740 \uBC88\uC5ED\uC774 \uC5C6\uC2B5\uB2C8\uB2E4."));
+    console.error(pc7.red("[bstage] \uBC1B\uC740 \uBC88\uC5ED\uC774 \uC5C6\uC2B5\uB2C8\uB2E4."));
     process.exit(1);
   }
   if (!refDict) {
     console.warn(
-      pc3.yellow(`[bstage] ref \uB85C\uCF00\uC77C(${options.ref}) \uC0AC\uC804\uC774 \uC5C6\uC5B4 \uD0C0\uC785 \uC0DD\uC131\uC744 \uAC74\uB108\uB701\uB2C8\uB2E4.`)
+      pc7.yellow(`[bstage] ref \uB85C\uCF00\uC77C(${options.ref}) \uC0AC\uC804\uC774 \uC5C6\uC5B4 \uD0C0\uC785 \uC0DD\uC131\uC744 \uAC74\uB108\uB701\uB2C8\uB2E4.`)
     );
     return;
   }
   const outPath = resolve3(root, options.out);
-  mkdirSync2(dirname(outPath), { recursive: true });
+  mkdirSync2(dirname3(outPath), { recursive: true });
   writeFileSync2(outPath, generateTypeModule(refDict, { version: latest.version, ref: options.ref }));
-  console.log(pc3.green(`[bstage] \uD0C0\uC785 \uC0DD\uC131: ${options.out} (${Object.keys(refDict).length} \uD0A4)`));
+  console.log(pc7.green(`[bstage] \uD0C0\uC785 \uC0DD\uC131: ${options.out} (${Object.keys(refDict).length} \uD0A4)`));
   console.log(
-    pc3.dim(
+    pc7.dim(
       `  \uCE90\uC2DC: .bstage/i18n/${target}/*.json \u2014 \uD0C0\uC785 \uC0DD\uC131 \uC785\uB825 + \uC6D0\uBB38 \uAC80\uC0C9\uC6A9(\uB7F0\uD0C0\uC784\uC740 CDN\uC5D0\uC11C \uC9C1\uC811 \uBC1B\uB294\uB2E4)`
     )
   );
-  console.log(pc3.dim("  \uC0DD\uC131 \uD30C\uC77C\uC744 \uD55C \uBC88 import\uD558\uBA74 useBstageTranslations().t() \uD0A4\uAC00 \uC881\uD600\uC9D1\uB2C8\uB2E4."));
+  console.log(pc7.dim("  \uC0DD\uC131 \uD30C\uC77C\uC744 \uD55C \uBC88 import\uD558\uBA74 useBstageTranslations().t() \uD0A4\uAC00 \uC881\uD600\uC9D1\uB2C8\uB2E4."));
 }
 
 // src/commands/doctor.ts
 import { existsSync as existsSync3 } from "fs";
-import { readFile as readFile2, readdir as readdir2 } from "fs/promises";
-import { dirname as dirname2, join as join5 } from "path";
+import { readFile as readFile4, readdir as readdir2 } from "fs/promises";
+import { dirname as dirname4, join as join7 } from "path";
 import { fileURLToPath } from "url";
-import pc5 from "picocolors";
+import pc9 from "picocolors";
 
 // src/commands/skills.ts
 import { existsSync as existsSync2, mkdirSync as mkdirSync3, readFileSync, writeFileSync as writeFileSync3 } from "fs";
-import { join as join4 } from "path";
-import pc4 from "picocolors";
+import { join as join6 } from "path";
+import pc8 from "picocolors";
 async function skillsInstallCommand(options) {
   const root = process.cwd();
   const baseDir = options.dir || ".claude/skills";
   const target = resolveProjectTarget(root);
-  console.log(pc4.cyan(`[bstage] \uC2A4\uD0AC \uC124\uCE58: ${baseDir}/`) + pc4.dim(` (\uB514\uC790\uC778 \uD0C0\uAE43: ${target})`));
+  console.log(pc8.cyan(`[bstage] \uC2A4\uD0AC \uC124\uCE58: ${baseDir}/`) + pc8.dim(` (\uB514\uC790\uC778 \uD0C0\uAE43: ${target})`));
   console.log(
-    pc4.dim(
+    pc8.dim(
       "  SDK\uAC00 \uC18C\uC720\uD558\uB294 \uC790\uC0B0\uC785\uB2C8\uB2E4. \uAC19\uC740 \uC774\uB984\uC758 \uAE30\uC874 SKILL.md\uB294 \uB36E\uC5B4\uC4F0\uC5EC \uCD5C\uC2E0\uC73C\uB85C \uB3D9\uAE30\uD654\uB429\uB2C8\uB2E4."
     )
   );
   for (const skill of BSTAGE_SKILLS) {
-    const dir = join4(root, baseDir, skill.name);
+    const dir = join6(root, baseDir, skill.name);
     mkdirSync3(dir, { recursive: true });
-    const file = join4(dir, "SKILL.md");
+    const file = join6(dir, "SKILL.md");
     const action = existsSync2(file) ? "\uAC31\uC2E0" : "\uC0DD\uC131";
     writeFileSync3(file, skill.content(target), "utf-8");
-    console.log(pc4.green(`  \u2713 ${skill.name} (${action})`));
+    console.log(pc8.green(`  \u2713 ${skill.name} (${action})`));
   }
   console.log(
-    pc4.dim(
+    pc8.dim(
       `  ${BSTAGE_SKILLS.length}\uAC1C \uC2A4\uD0AC \uC124\uCE58 \uC644\uB8CC. Claude Code\uAC00 ${baseDir}/ \uC758 \uC2A4\uD0AC\uC744 \uC790\uB3D9 \uC778\uC2DD\uD569\uB2C8\uB2E4.`
     )
   );
@@ -2128,16 +3104,16 @@ async function skillsInstallCommand(options) {
   installGuardHook(root);
 }
 function syncAgentsMd(root, target) {
-  const file = join4(root, "AGENTS.md");
+  const file = join6(root, "AGENTS.md");
   if (!existsSync2(file)) {
-    console.log(pc4.dim("  \xB7 AGENTS.md \uC5C6\uC74C \u2014 `bstage init` \uB610\uB294 \uB9C8\uC774\uADF8\uB808\uC774\uC158\uC73C\uB85C \uC0DD\uC131\uD558\uC138\uC694."));
+    console.log(pc8.dim("  \xB7 AGENTS.md \uC5C6\uC74C \u2014 `bstage init` \uB610\uB294 \uB9C8\uC774\uADF8\uB808\uC774\uC158\uC73C\uB85C \uC0DD\uC131\uD558\uC138\uC694."));
     return;
   }
   const content = readFileSync(file, "utf-8");
   const status = agentsMdStatus(content);
   if (status === "legacy") {
     console.log(
-      pc4.yellow("  ! AGENTS.md\uAC00 \uB808\uAC70\uC2DC \uD3EC\uB9F7\uC785\uB2C8\uB2E4(\uAD00\uB9AC \uC601\uC5ED \uB9C8\uCEE4 \uC5C6\uC74C).") + pc4.dim(" `bstage-migrate` \uC2A4\uD0AC\uB85C reconcile\uD558\uC138\uC694 \u2014 skills install\uC740 \uAC74\uB4DC\uB9AC\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.")
+      pc8.yellow("  ! AGENTS.md\uAC00 \uB808\uAC70\uC2DC \uD3EC\uB9F7\uC785\uB2C8\uB2E4(\uAD00\uB9AC \uC601\uC5ED \uB9C8\uCEE4 \uC5C6\uC74C).") + pc8.dim(" `bstage-migrate` \uC2A4\uD0AC\uB85C reconcile\uD558\uC138\uC694 \u2014 skills install\uC740 \uAC74\uB4DC\uB9AC\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.")
     );
     return;
   }
@@ -2146,20 +3122,20 @@ function syncAgentsMd(root, target) {
   const space = parsed.space ?? projectName.split("-custom-templates-")[0] ?? projectName;
   const swapped = swapManagedBlock(content, renderManagedBlock({ space, projectName, target }));
   if (swapped === null) {
-    console.log(pc4.dim("  \xB7 AGENTS.md \uAD00\uB9AC \uC601\uC5ED\uC744 \uCC3E\uC9C0 \uBABB\uD574 \uAC74\uB108\uB701\uB2C8\uB2E4."));
+    console.log(pc8.dim("  \xB7 AGENTS.md \uAD00\uB9AC \uC601\uC5ED\uC744 \uCC3E\uC9C0 \uBABB\uD574 \uAC74\uB108\uB701\uB2C8\uB2E4."));
     return;
   }
   if (swapped === content) {
-    console.log(pc4.green("  \u2713 AGENTS.md (\uAD00\uB9AC \uC601\uC5ED \uCD5C\uC2E0)"));
+    console.log(pc8.green("  \u2713 AGENTS.md (\uAD00\uB9AC \uC601\uC5ED \uCD5C\uC2E0)"));
     return;
   }
   writeFileSync3(file, swapped, "utf-8");
-  console.log(pc4.green("  \u2713 AGENTS.md (\uAD00\uB9AC \uC601\uC5ED \uAC31\uC2E0, \uC790\uC720 \uC601\uC5ED \uBCF4\uC874)"));
+  console.log(pc8.green("  \u2713 AGENTS.md (\uAD00\uB9AC \uC601\uC5ED \uAC31\uC2E0, \uC790\uC720 \uC601\uC5ED \uBCF4\uC874)"));
 }
 function installGuardHook(root) {
-  const pkgPath = join4(root, "package.json");
+  const pkgPath = join6(root, "package.json");
   if (!existsSync2(pkgPath)) {
-    console.log(pc4.dim("  \xB7 package.json \uC5C6\uC74C \u2014 pre-commit \uAC00\uB4DC \uC124\uCE58\uB97C \uAC74\uB108\uB701\uB2C8\uB2E4."));
+    console.log(pc8.dim("  \xB7 package.json \uC5C6\uC74C \u2014 pre-commit \uAC00\uB4DC \uC124\uCE58\uB97C \uAC74\uB108\uB701\uB2C8\uB2E4."));
     return;
   }
   let pkgChanged = false;
@@ -2182,39 +3158,39 @@ function installGuardHook(root) {
       writeFileSync3(pkgPath, JSON.stringify(pkg, null, 2) + "\n", "utf-8");
     }
   } catch {
-    console.log(pc4.yellow("  ! package.json \uD30C\uC2F1 \uC2E4\uD328 \u2014 pre-commit \uAC00\uB4DC \uC124\uCE58\uB97C \uAC74\uB108\uB701\uB2C8\uB2E4."));
+    console.log(pc8.yellow("  ! package.json \uD30C\uC2F1 \uC2E4\uD328 \u2014 pre-commit \uAC00\uB4DC \uC124\uCE58\uB97C \uAC74\uB108\uB701\uB2C8\uB2E4."));
     return;
   }
-  const huskyDir = join4(root, ".husky");
+  const huskyDir = join6(root, ".husky");
   mkdirSync3(huskyDir, { recursive: true });
-  const scriptFile = join4(huskyDir, "check-secrets.mjs");
+  const scriptFile = join6(huskyDir, "check-secrets.mjs");
   const scriptExisted = existsSync2(scriptFile);
   writeFileSync3(scriptFile, checkSecretsScript(), "utf-8");
-  console.log(pc4.green(`  \u2713 .husky/check-secrets.mjs (${scriptExisted ? "\uAC31\uC2E0" : "\uC0DD\uC131"})`));
-  const hookFile = join4(huskyDir, "pre-commit");
+  console.log(pc8.green(`  \u2713 .husky/check-secrets.mjs (${scriptExisted ? "\uAC31\uC2E0" : "\uC0DD\uC131"})`));
+  const hookFile = join6(huskyDir, "pre-commit");
   const body = huskyPreCommit();
   if (!existsSync2(hookFile)) {
     writeFileSync3(hookFile, body, "utf-8");
-    console.log(pc4.green("  \u2713 .husky/pre-commit (\uC0DD\uC131)"));
+    console.log(pc8.green("  \u2713 .husky/pre-commit (\uC0DD\uC131)"));
   } else {
     const cur = readFileSync(hookFile, "utf-8");
     if (cur.includes("check-secrets.mjs")) {
-      console.log(pc4.green("  \u2713 .husky/pre-commit (\uAC00\uB4DC \uC874\uC7AC)"));
+      console.log(pc8.green("  \u2713 .husky/pre-commit (\uAC00\uB4DC \uC874\uC7AC)"));
     } else {
       const sep = cur.endsWith("\n") ? "" : "\n";
       writeFileSync3(hookFile, cur + sep + body, "utf-8");
-      console.log(pc4.green("  \u2713 .husky/pre-commit (\uAC00\uB4DC \uB77C\uC778 \uCD94\uAC00)"));
+      console.log(pc8.green("  \u2713 .husky/pre-commit (\uAC00\uB4DC \uB77C\uC778 \uCD94\uAC00)"));
     }
   }
   if (pkgChanged) {
     console.log(
-      pc4.dim("  \xB7 husky\uB97C package.json\uC5D0 \uCD94\uAC00\uD588\uC2B5\uB2C8\uB2E4 \u2014 install \uD6C4 pre-commit \uD6C5\uC774 \uD65C\uC131\uD654\uB429\uB2C8\uB2E4.")
+      pc8.dim("  \xB7 husky\uB97C package.json\uC5D0 \uCD94\uAC00\uD588\uC2B5\uB2C8\uB2E4 \u2014 install \uD6C4 pre-commit \uD6C5\uC774 \uD65C\uC131\uD654\uB429\uB2C8\uB2E4.")
     );
   }
 }
 function readPkgName(root) {
   try {
-    return JSON.parse(readFileSync(join4(root, "package.json"), "utf-8")).name ?? null;
+    return JSON.parse(readFileSync(join6(root, "package.json"), "utf-8")).name ?? null;
   } catch {
     return null;
   }
@@ -2255,23 +3231,23 @@ var EXPECTED_FILES = [
 ];
 async function doctorCommand(options) {
   const root = process.cwd();
-  const report = await diagnose(root);
+  const report2 = await diagnose(root);
   if (options.json) {
-    console.log(JSON.stringify(report, null, 2));
+    console.log(JSON.stringify(report2, null, 2));
     return;
   }
-  printReport(report);
-  await autoSyncSkills(report);
+  printReport(report2);
+  await autoSyncSkills(report2);
 }
-async function autoSyncSkills(report) {
-  if (!report.isBstageProject) return;
-  if (!report.skills.some((s) => s.status !== "ok")) return;
+async function autoSyncSkills(report2) {
+  if (!report2.isBstageProject) return;
+  if (!report2.skills.some((s) => s.status !== "ok")) return;
   await skillsInstallCommand({ dir: ".claude/skills" });
 }
 async function diagnose(root) {
   let pkgJson = null;
   try {
-    pkgJson = JSON.parse(await readFile2(join5(root, "package.json"), "utf-8"));
+    pkgJson = JSON.parse(await readFile4(join7(root, "package.json"), "utf-8"));
   } catch {
   }
   const deps = {
@@ -2280,7 +3256,7 @@ async function diagnose(root) {
     ...pkgJson?.peerDependencies,
     ...pkgJson?.optionalDependencies
   };
-  const isBstageProject = SDK_PACKAGES.some((p2) => p2 in deps);
+  const isBstageProject = SDK_PACKAGES.some((p4) => p4 in deps);
   const installed = /* @__PURE__ */ new Map();
   for (const pkg of SDK_PACKAGES) {
     installed.set(pkg, await readInstalledVersion(root, pkg) ?? cleanRange(deps[pkg]));
@@ -2309,9 +3285,9 @@ async function diagnose(root) {
   const files = EXPECTED_FILES.map((f) => ({
     path: f.path,
     note: f.note,
-    present: existsSync3(join5(root, f.path))
+    present: existsSync3(join7(root, f.path))
   }));
-  const isPnpmProject = existsSync3(join5(root, "pnpm-lock.yaml"));
+  const isPnpmProject = existsSync3(join7(root, "pnpm-lock.yaml"));
   let pnpmWorkspace2 = {
     relevant: false,
     allowBuildsDeclared: false,
@@ -2321,7 +3297,7 @@ async function diagnose(root) {
   if (isPnpmProject) {
     let yaml = null;
     try {
-      yaml = await readFile2(join5(root, "pnpm-workspace.yaml"), "utf-8");
+      yaml = await readFile4(join7(root, "pnpm-workspace.yaml"), "utf-8");
     } catch {
     }
     pnpmWorkspace2 = {
@@ -2367,7 +3343,7 @@ async function diagnose(root) {
   };
 }
 async function diagnoseLayout(root) {
-  const legacyRoot = join5(root, "src", "templates");
+  const legacyRoot = join7(root, "src", "templates");
   let legacyTemplates = [];
   let legacyPresent = false;
   try {
@@ -2379,8 +3355,8 @@ async function diagnoseLayout(root) {
   return {
     legacyPresent,
     legacyTemplates,
-    pagesPresent: existsSync3(join5(root, "src", "pages")),
-    slotsPresent: existsSync3(join5(root, "src", "slots"))
+    pagesPresent: existsSync3(join7(root, "src", "pages")),
+    slotsPresent: existsSync3(join7(root, "src", "slots"))
   };
 }
 async function diagnoseSkills(root) {
@@ -2389,7 +3365,7 @@ async function diagnoseSkills(root) {
     BSTAGE_SKILLS.map(async (skill) => {
       let installed;
       try {
-        installed = await readFile2(join5(root, ".claude", "skills", skill.name, "SKILL.md"), "utf-8");
+        installed = await readFile4(join7(root, ".claude", "skills", skill.name, "SKILL.md"), "utf-8");
       } catch {
         return { name: skill.name, status: "missing" };
       }
@@ -2400,7 +3376,7 @@ async function diagnoseSkills(root) {
 async function diagnoseAgentsMd(root, pkgName) {
   let content;
   try {
-    content = await readFile2(join5(root, "AGENTS.md"), "utf-8");
+    content = await readFile4(join7(root, "AGENTS.md"), "utf-8");
   } catch {
     return { status: "missing", managedBlock: null };
   }
@@ -2414,7 +3390,7 @@ async function diagnoseAgentsMd(root, pkgName) {
 }
 async function readInstalledVersion(root, pkg) {
   try {
-    const raw = await readFile2(join5(root, "node_modules", pkg, "package.json"), "utf-8");
+    const raw = await readFile4(join7(root, "node_modules", pkg, "package.json"), "utf-8");
     const parsed = JSON.parse(raw);
     return parsed.version ?? null;
   } catch {
@@ -2489,18 +3465,18 @@ function normalizeMigrationPkg(short) {
   return short.startsWith("@") ? short : `@bstage-sdk/${short}`;
 }
 async function readBundledMigrationDoc() {
-  const here = dirname2(fileURLToPath(import.meta.url));
+  const here = dirname4(fileURLToPath(import.meta.url));
   const candidates = [
-    join5(here, "MIGRATION.md"),
+    join7(here, "MIGRATION.md"),
     // 배포물: dist/ 옆 (cli/dist/MIGRATION.md)
-    join5(here, "..", "..", "..", "docs", "MIGRATION.md"),
+    join7(here, "..", "..", "..", "docs", "MIGRATION.md"),
     // dev(dist): cli/dist → repo/docs
-    join5(here, "..", "..", "..", "..", "docs", "MIGRATION.md")
+    join7(here, "..", "..", "..", "..", "docs", "MIGRATION.md")
     // dev(src): cli/src/commands → repo/docs
   ];
   for (const path of candidates) {
     try {
-      return await readFile2(path, "utf-8");
+      return await readFile4(path, "utf-8");
     } catch {
     }
   }
@@ -2522,172 +3498,172 @@ function compareSemver(a, b) {
 }
 function printReport(r) {
   console.log("");
-  console.log(`${pc5.cyan(pc5.bold("bstage doctor"))} ${pc5.dim(`\u2014 ${r.project ?? "(\uC774\uB984 \uC5C6\uC74C)"}`)}`);
+  console.log(`${pc9.cyan(pc9.bold("bstage doctor"))} ${pc9.dim(`\u2014 ${r.project ?? "(\uC774\uB984 \uC5C6\uC74C)"}`)}`);
   console.log("");
   if (!r.isBstageProject) {
-    console.log(pc5.yellow("\uC774 \uB514\uB809\uD1A0\uB9AC\uB294 bstage \uD15C\uD50C\uB9BF \uD504\uB85C\uC81D\uD2B8\uAC00 \uC544\uB2CC \uAC83 \uAC19\uC2B5\uB2C8\uB2E4."));
-    console.log(pc5.dim("  package.json\uC5D0 @bstage-sdk/* \uC758\uC874\uC131\uC774 \uC5C6\uC2B5\uB2C8\uB2E4."));
+    console.log(pc9.yellow("\uC774 \uB514\uB809\uD1A0\uB9AC\uB294 bstage \uD15C\uD50C\uB9BF \uD504\uB85C\uC81D\uD2B8\uAC00 \uC544\uB2CC \uAC83 \uAC19\uC2B5\uB2C8\uB2E4."));
+    console.log(pc9.dim("  package.json\uC5D0 @bstage-sdk/* \uC758\uC874\uC131\uC774 \uC5C6\uC2B5\uB2C8\uB2E4."));
     return;
   }
-  console.log(pc5.bold("\u{1F4E6} SDK \uBC84\uC804"));
+  console.log(pc9.bold("\u{1F4E6} SDK \uBC84\uC804"));
   if (!r.latestChecked) {
-    console.log(pc5.dim("  \uB808\uC9C0\uC2A4\uD2B8\uB9AC \uC870\uD68C\uB97C \uAC74\uB108\uB6F0\uC5B4 \uC124\uCE58 \uBC84\uC804\uB9CC \uD45C\uC2DC\uD569\uB2C8\uB2E4."));
+    console.log(pc9.dim("  \uB808\uC9C0\uC2A4\uD2B8\uB9AC \uC870\uD68C\uB97C \uAC74\uB108\uB6F0\uC5B4 \uC124\uCE58 \uBC84\uC804\uB9CC \uD45C\uC2DC\uD569\uB2C8\uB2E4."));
   }
   const nameWidth = Math.max(12, ...r.versions.map((v) => v.pkg.replace("@bstage-sdk/", "").length));
   for (const v of r.versions) {
     const name = v.pkg.replace("@bstage-sdk/", "").padEnd(nameWidth);
     const inst = v.installed ?? "?";
     if (v.latest && v.installed) {
-      const arrow = v.outdated ? pc5.yellow(`\u2192  ${v.latest}  (\uB4A4\uCC98\uC9D0)`) : pc5.green("(\uCD5C\uC2E0)");
+      const arrow = v.outdated ? pc9.yellow(`\u2192  ${v.latest}  (\uB4A4\uCC98\uC9D0)`) : pc9.green("(\uCD5C\uC2E0)");
       console.log(`  ${name} ${inst.padEnd(8)} ${arrow}`);
     } else {
       console.log(`  ${name} ${inst}`);
     }
   }
   console.log("");
-  console.log(pc5.bold("\u{1F4C1} init \uAE30\uBCF8 \uD30C\uC77C (\uCC38\uACE0)"));
+  console.log(pc9.bold("\u{1F4C1} init \uAE30\uBCF8 \uD30C\uC77C (\uCC38\uACE0)"));
   const absent = r.files.filter((f) => !f.present);
   if (absent.length === 0) {
-    console.log(pc5.green("  \u2713 init \uAE30\uBCF8 \uAD6C\uC131\uACFC \uB3D9\uC77C"));
+    console.log(pc9.green("  \u2713 init \uAE30\uBCF8 \uAD6C\uC131\uACFC \uB3D9\uC77C"));
   } else {
-    console.log(pc5.dim("  init \uAE30\uBCF8\uAC12\uACFC\uC758 \uCC28\uC774\uC77C \uBFD0 \u2014 \uD504\uB85C\uC81D\uD2B8\uAC00 \uB2E4\uB974\uAC8C \uCC98\uB9AC \uC911\uC774\uBA74 \uBB34\uC2DC\uD558\uC138\uC694."));
+    console.log(pc9.dim("  init \uAE30\uBCF8\uAC12\uACFC\uC758 \uCC28\uC774\uC77C \uBFD0 \u2014 \uD504\uB85C\uC81D\uD2B8\uAC00 \uB2E4\uB974\uAC8C \uCC98\uB9AC \uC911\uC774\uBA74 \uBB34\uC2DC\uD558\uC138\uC694."));
     for (const f of r.files) {
-      if (f.present) console.log(`  ${pc5.green("\u2713")} ${f.path}`);
-      else console.log(`  ${pc5.dim("\xB7")} ${f.path.padEnd(20)} ${pc5.dim(`\uC5C6\uC74C (${f.note})`)}`);
+      if (f.present) console.log(`  ${pc9.green("\u2713")} ${f.path}`);
+      else console.log(`  ${pc9.dim("\xB7")} ${f.path.padEnd(20)} ${pc9.dim(`\uC5C6\uC74C (${f.note})`)}`);
     }
   }
   console.log("");
-  console.log(pc5.bold("\u{1F5C2}  \uD15C\uD50C\uB9BF \uB514\uB809\uD1A0\uB9AC"));
+  console.log(pc9.bold("\u{1F5C2}  \uD15C\uD50C\uB9BF \uB514\uB809\uD1A0\uB9AC"));
   if (r.layout.legacyPresent) {
-    console.log(`  ${pc5.yellow("\u2192")} ${pc5.yellow("src/templates/ \uAC00 \uB0A8\uC544 \uC788\uC2B5\uB2C8\uB2E4 (\uC61B \uAD6C\uC870)")}`);
-    console.log(pc5.dim("      \uBE4C\uB4DC \uC0B0\uCD9C\uBB3C \uACBD\uB85C\uAC00 \uD3F4\uB354 \uAD6C\uC870\uB97C \uB530\uB77C\uAC00\uB3C4\uB85D \uBC14\uB00C\uC5C8\uC2B5\uB2C8\uB2E4."));
-    console.log(pc5.dim("      \uD398\uC774\uC9C0 \u2192 src/pages/{\uACBD\uB85C}/  \xB7  \uC704\uC82F \u2192 src/slots/{\uC544\uBB34\uC774\uB984}/"));
+    console.log(`  ${pc9.yellow("\u2192")} ${pc9.yellow("src/templates/ \uAC00 \uB0A8\uC544 \uC788\uC2B5\uB2C8\uB2E4 (\uC61B \uAD6C\uC870)")}`);
+    console.log(pc9.dim("      \uBE4C\uB4DC \uC0B0\uCD9C\uBB3C \uACBD\uB85C\uAC00 \uD3F4\uB354 \uAD6C\uC870\uB97C \uB530\uB77C\uAC00\uB3C4\uB85D \uBC14\uB00C\uC5C8\uC2B5\uB2C8\uB2E4."));
+    console.log(pc9.dim("      \uD398\uC774\uC9C0 \u2192 src/pages/{\uACBD\uB85C}/  \xB7  \uC704\uC82F \u2192 src/slots/{\uC544\uBB34\uC774\uB984}/"));
     if (r.layout.legacyTemplates.length > 0) {
-      console.log(pc5.dim(`      \uC62E\uACA8\uC57C \uD560 \uD15C\uD50C\uB9BF: ${r.layout.legacyTemplates.join(", ")}`));
+      console.log(pc9.dim(`      \uC62E\uACA8\uC57C \uD560 \uD15C\uD50C\uB9BF: ${r.layout.legacyTemplates.join(", ")}`));
     }
-    console.log(pc5.dim('      \uBCC0\uD658: \uC5D0\uC774\uC804\uD2B8\uC5D0\uAC8C "bstage \uB9C8\uC774\uADF8\uB808\uC774\uC158" \uC694\uCCAD'));
+    console.log(pc9.dim('      \uBCC0\uD658: \uC5D0\uC774\uC804\uD2B8\uC5D0\uAC8C "bstage \uB9C8\uC774\uADF8\uB808\uC774\uC158" \uC694\uCCAD'));
   } else if (!r.layout.pagesPresent && !r.layout.slotsPresent) {
-    console.log(`  ${pc5.dim("\xB7")} src/pages/ \xB7 src/slots/ \uB458 \uB2E4 \uC5C6\uC74C`);
+    console.log(`  ${pc9.dim("\xB7")} src/pages/ \xB7 src/slots/ \uB458 \uB2E4 \uC5C6\uC74C`);
   } else {
-    console.log(pc5.green("  \u2713 src/pages/ \xB7 src/slots/ \uAD6C\uC870"));
+    console.log(pc9.green("  \u2713 src/pages/ \xB7 src/slots/ \uAD6C\uC870"));
   }
   console.log("");
   if (r.pnpmWorkspace.relevant) {
-    console.log(pc5.bold("\u{1F4E6} pnpm workspace \uC124\uC815"));
+    console.log(pc9.bold("\u{1F4E6} pnpm workspace \uC124\uC815"));
     if (r.pnpmWorkspace.allowBuildsDeclared) {
-      console.log(pc5.green("  \u2713 pnpm-workspace.yaml\uC5D0 allowBuilds \uC120\uC5B8\uB428"));
+      console.log(pc9.green("  \u2713 pnpm-workspace.yaml\uC5D0 allowBuilds \uC120\uC5B8\uB428"));
     } else {
-      console.log(`  ${pc5.yellow("\u2192")} ${pc5.yellow("pnpm-workspace.yaml\uC5D0 allowBuilds \uC5C6\uC74C")}`);
+      console.log(`  ${pc9.yellow("\u2192")} ${pc9.yellow("pnpm-workspace.yaml\uC5D0 allowBuilds \uC5C6\uC74C")}`);
       console.log(
-        pc5.dim("      pnpm\uC740 \uC758\uC874\uC131 build script\uB97C \uAE30\uBCF8 \uCC28\uB2E8\uD558\uACE0, pnpm 11\uC740 \uADF8\uAC83\uC744 \uC5D0\uB7EC\uB85C \uB0B8\uB2E4")
+        pc9.dim("      pnpm\uC740 \uC758\uC874\uC131 build script\uB97C \uAE30\uBCF8 \uCC28\uB2E8\uD558\uACE0, pnpm 11\uC740 \uADF8\uAC83\uC744 \uC5D0\uB7EC\uB85C \uB0B8\uB2E4")
       );
       console.log(
-        pc5.dim("      \u2192 `pnpm install`\uC774 ERR_PNPM_IGNORED_BUILDS\uB85C \uC2E4\uD328\uD558\uACE0 `pnpm dev`\uB3C4 \uC8FD\uB294\uB2E4")
+        pc9.dim("      \u2192 `pnpm install`\uC774 ERR_PNPM_IGNORED_BUILDS\uB85C \uC2E4\uD328\uD558\uACE0 `pnpm dev`\uB3C4 \uC8FD\uB294\uB2E4")
       );
-      console.log(pc5.dim("      \uCD94\uAC00: pnpm-workspace.yaml\uC5D0 `allowBuilds:` + `esbuild: true`"));
-      console.log(pc5.dim("      \uB610\uB294 `pnpm approve-builds`\uB85C \uB300\uD654\uC2DD \uC120\uD0DD"));
+      console.log(pc9.dim("      \uCD94\uAC00: pnpm-workspace.yaml\uC5D0 `allowBuilds:` + `esbuild: true`"));
+      console.log(pc9.dim("      \uB610\uB294 `pnpm approve-builds`\uB85C \uB300\uD654\uC2DD \uC120\uD0DD"));
     }
     if (r.pnpmWorkspace.filePresent && !r.pnpmWorkspace.packagesDeclared) {
-      console.log(`  ${pc5.yellow("\u2192")} ${pc5.yellow("pnpm-workspace.yaml\uC5D0 packages \uC5C6\uC74C")}`);
+      console.log(`  ${pc9.yellow("\u2192")} ${pc9.yellow("pnpm-workspace.yaml\uC5D0 packages \uC5C6\uC74C")}`);
       console.log(
-        pc5.dim("      pnpm 9\uB294 \uC774 \uD30C\uC77C\uC774 \uC788\uC73C\uBA74 workspace \uB8E8\uD2B8\uB85C \uBCF4\uACE0 packages\uB97C \uC694\uAD6C\uD55C\uB2E4")
+        pc9.dim("      pnpm 9\uB294 \uC774 \uD30C\uC77C\uC774 \uC788\uC73C\uBA74 workspace \uB8E8\uD2B8\uB85C \uBCF4\uACE0 packages\uB97C \uC694\uAD6C\uD55C\uB2E4")
       );
-      console.log(pc5.dim("      \u2192 pnpm 9\uC5D0\uC11C `ERROR packages field missing or empty`\uB85C \uC8FD\uB294\uB2E4"));
-      console.log(pc5.dim("      \uCD94\uAC00: pnpm-workspace.yaml \uB9E8 \uC704\uC5D0 `packages:` + `- '.'`"));
+      console.log(pc9.dim("      \u2192 pnpm 9\uC5D0\uC11C `ERROR packages field missing or empty`\uB85C \uC8FD\uB294\uB2E4"));
+      console.log(pc9.dim("      \uCD94\uAC00: pnpm-workspace.yaml \uB9E8 \uC704\uC5D0 `packages:` + `- '.'`"));
     } else if (r.pnpmWorkspace.packagesDeclared) {
-      console.log(pc5.green("  \u2713 pnpm-workspace.yaml\uC5D0 packages \uC120\uC5B8\uB428"));
+      console.log(pc9.green("  \u2713 pnpm-workspace.yaml\uC5D0 packages \uC120\uC5B8\uB428"));
     }
     console.log("");
   }
-  console.log(pc5.bold("\u{1F6E0}  package.json \uC2A4\uD06C\uB9BD\uD2B8"));
+  console.log(pc9.bold("\u{1F6E0}  package.json \uC2A4\uD06C\uB9BD\uD2B8"));
   const scriptIssues = r.scripts.filter((sc) => sc.actual !== sc.expected);
   if (scriptIssues.length === 0) {
-    console.log(pc5.green("  \u2713 init \uAE30\uBCF8 \uAD6C\uC131\uACFC \uB3D9\uC77C"));
+    console.log(pc9.green("  \u2713 init \uAE30\uBCF8 \uAD6C\uC131\uACFC \uB3D9\uC77C"));
   } else {
     for (const sc of r.scripts) {
       if (sc.actual === sc.expected) {
-        console.log(`  ${pc5.green("\u2713")} ${sc.name}`);
+        console.log(`  ${pc9.green("\u2713")} ${sc.name}`);
         continue;
       }
       if (sc.actual === null) {
-        console.log(`  ${pc5.yellow("\u2192")} ${sc.name} ${pc5.yellow("\uC5C6\uC74C")}`);
+        console.log(`  ${pc9.yellow("\u2192")} ${sc.name} ${pc9.yellow("\uC5C6\uC74C")}`);
       } else {
         console.log(
-          `  ${pc5.yellow("\u2192")} ${sc.name} ${pc5.yellow("\uB2E4\uB984")} ${pc5.dim(`\u2014 \uD604\uC7AC \`${sc.actual}\``)}`
+          `  ${pc9.yellow("\u2192")} ${sc.name} ${pc9.yellow("\uB2E4\uB984")} ${pc9.dim(`\u2014 \uD604\uC7AC \`${sc.actual}\``)}`
         );
         if (sc.actual.includes("--noEmit") && !sc.actual.includes("-p ")) {
           console.log(
-            pc5.dim(
+            pc9.dim(
               "      \uC8FC\uC758: solution-style tsconfig\uC5D0\uC11C `tsc --noEmit`\uC740 \uC544\uBB34 \uD30C\uC77C\uB3C4 \uAC80\uC0AC\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4."
             )
           );
         }
       }
-      console.log(pc5.dim(`      ${sc.why}`));
-      console.log(pc5.dim(`      \uAD8C\uC7A5: "${sc.name}": "${sc.expected}"`));
+      console.log(pc9.dim(`      ${sc.why}`));
+      console.log(pc9.dim(`      \uAD8C\uC7A5: "${sc.name}": "${sc.expected}"`));
     }
   }
   console.log("");
-  console.log(pc5.bold("\u{1F9F1} \uAD8C\uC7A5 \uC758\uC874\uC131"));
+  console.log(pc9.bold("\u{1F9F1} \uAD8C\uC7A5 \uC758\uC874\uC131"));
   if (r.recommendedDeps.every((d) => d.declared)) {
-    console.log(pc5.green("  \u2713 \uBAA8\uB450 \uC120\uC5B8\uB428"));
+    console.log(pc9.green("  \u2713 \uBAA8\uB450 \uC120\uC5B8\uB428"));
   } else {
     for (const d of r.recommendedDeps) {
       if (d.declared) {
-        console.log(`  ${pc5.green("\u2713")} ${d.pkg}`);
+        console.log(`  ${pc9.green("\u2713")} ${d.pkg}`);
         continue;
       }
-      console.log(`  ${pc5.yellow("\u2192")} ${d.pkg} ${pc5.yellow("\uBBF8\uC120\uC5B8")} ${pc5.dim(`\u2014 ${d.note}`)}`);
-      console.log(pc5.dim(`      ${d.why}`));
-      console.log(pc5.dim(`      \uCD94\uAC00: npm i ${d.pkg} (\uD504\uB85C\uC81D\uD2B8 \uD328\uD0A4\uC9C0 \uB9E4\uB2C8\uC800\uB85C)`));
+      console.log(`  ${pc9.yellow("\u2192")} ${d.pkg} ${pc9.yellow("\uBBF8\uC120\uC5B8")} ${pc9.dim(`\u2014 ${d.note}`)}`);
+      console.log(pc9.dim(`      ${d.why}`));
+      console.log(pc9.dim(`      \uCD94\uAC00: npm i ${d.pkg} (\uD504\uB85C\uC81D\uD2B8 \uD328\uD0A4\uC9C0 \uB9E4\uB2C8\uC800\uB85C)`));
     }
   }
   console.log("");
-  console.log(pc5.bold("\u{1F4D6} \uC801\uC6A9 \uAC00\uB2A5\uD55C \uB9C8\uC774\uADF8\uB808\uC774\uC158"));
+  console.log(pc9.bold("\u{1F4D6} \uC801\uC6A9 \uAC00\uB2A5\uD55C \uB9C8\uC774\uADF8\uB808\uC774\uC158"));
   if (r.migrations.length === 0) {
-    console.log(pc5.dim("  \uD574\uB2F9 \uD56D\uBAA9 \uC5C6\uC74C."));
+    console.log(pc9.dim("  \uD574\uB2F9 \uD56D\uBAA9 \uC5C6\uC74C."));
   } else {
     for (const m of r.migrations) {
-      console.log(`  ${pc5.cyan(`\u2192 ${m.label}`)}`);
+      console.log(`  ${pc9.cyan(`\u2192 ${m.label}`)}`);
       for (const item of m.items) console.log(`    \u2022 ${item}`);
     }
   }
   console.log("");
-  console.log(pc5.bold("\u{1F4DD} AGENTS.md"));
+  console.log(pc9.bold("\u{1F4DD} AGENTS.md"));
   switch (r.agentsMd.status) {
     case "ok":
-      console.log(pc5.green("  \u2713 \uAD00\uB9AC \uC601\uC5ED \uCD5C\uC2E0"));
+      console.log(pc9.green("  \u2713 \uAD00\uB9AC \uC601\uC5ED \uCD5C\uC2E0"));
       break;
     case "missing":
-      console.log(pc5.dim("  \xB7 \uD30C\uC77C \uC5C6\uC74C \u2014 bstage \uD504\uB85C\uC81D\uD2B8\uB77C\uBA74 init/\uB9C8\uC774\uADF8\uB808\uC774\uC158\uC73C\uB85C \uC0DD\uC131\uD558\uC138\uC694."));
+      console.log(pc9.dim("  \xB7 \uD30C\uC77C \uC5C6\uC74C \u2014 bstage \uD504\uB85C\uC81D\uD2B8\uB77C\uBA74 init/\uB9C8\uC774\uADF8\uB808\uC774\uC158\uC73C\uB85C \uC0DD\uC131\uD558\uC138\uC694."));
       break;
     case "stale":
       console.log(
-        pc5.yellow("  \u2192 \uAD00\uB9AC \uC601\uC5ED\uC774 \uC624\uB798\uB428") + pc5.dim(" \u2014 `bstage skills install`\uB85C \uAC31\uC2E0(\uC790\uC720 \uC601\uC5ED\uC740 \uBCF4\uC874).")
+        pc9.yellow("  \u2192 \uAD00\uB9AC \uC601\uC5ED\uC774 \uC624\uB798\uB428") + pc9.dim(" \u2014 `bstage skills install`\uB85C \uAC31\uC2E0(\uC790\uC720 \uC601\uC5ED\uC740 \uBCF4\uC874).")
       );
       break;
     case "legacy":
       console.log(
-        pc5.yellow("  \u2192 \uB808\uAC70\uC2DC \uD3EC\uB9F7(\uAD00\uB9AC \uC601\uC5ED \uB9C8\uCEE4 \uC5C6\uC74C)") + pc5.dim(
+        pc9.yellow("  \u2192 \uB808\uAC70\uC2DC \uD3EC\uB9F7(\uAD00\uB9AC \uC601\uC5ED \uB9C8\uCEE4 \uC5C6\uC74C)") + pc9.dim(
           " \u2014 `bstage skills install`\uB85C \uC2A4\uD0AC\uC744 \uBA3C\uC800 \uC124\uCE58\uD55C \uB4A4, `bstage-migrate` \uC2A4\uD0AC\uB85C reconcile(SDK \uC601\uC5ED \uAD50\uCCB4 + \uC0AC\uC6A9\uC790 \uB0B4\uC6A9 \uBCF4\uC874)."
         )
       );
       break;
   }
   console.log("");
-  console.log(pc5.bold("\u{1F9E9} \uC5D0\uC774\uC804\uD2B8 \uC2A4\uD0AC (.claude/skills/)"));
+  console.log(pc9.bold("\u{1F9E9} \uC5D0\uC774\uC804\uD2B8 \uC2A4\uD0AC (.claude/skills/)"));
   const skillsNeedWork = r.skills.filter((s) => s.status !== "ok");
   if (skillsNeedWork.length === 0) {
-    console.log(pc5.green("  \u2713 \uBAA8\uB4E0 \uC2A4\uD0AC \uCD5C\uC2E0"));
+    console.log(pc9.green("  \u2713 \uBAA8\uB4E0 \uC2A4\uD0AC \uCD5C\uC2E0"));
   } else {
     for (const s of r.skills) {
-      if (s.status === "ok") console.log(`  ${pc5.green("\u2713")} ${s.name}`);
+      if (s.status === "ok") console.log(`  ${pc9.green("\u2713")} ${s.name}`);
       else if (s.status === "missing")
-        console.log(`  ${pc5.yellow("\u2192")} ${s.name.padEnd(16)} ${pc5.yellow("\uBBF8\uC124\uCE58")}`);
-      else console.log(`  ${pc5.yellow("\u2192")} ${s.name.padEnd(16)} ${pc5.yellow("\uAD6C\uBC84\uC804/\uC218\uC815\uB428")}`);
+        console.log(`  ${pc9.yellow("\u2192")} ${s.name.padEnd(16)} ${pc9.yellow("\uBBF8\uC124\uCE58")}`);
+      else console.log(`  ${pc9.yellow("\u2192")} ${s.name.padEnd(16)} ${pc9.yellow("\uAD6C\uBC84\uC804/\uC218\uC815\uB428")}`);
     }
     console.log(
-      pc5.dim(
+      pc9.dim(
         "  \uC544\uB798\uC5D0\uC11C \uC790\uB3D9 \uB3D9\uAE30\uD654\uD569\uB2C8\uB2E4 \u2014 bstage-* \uC2A4\uD0AC\uB9CC \uB36E\uC5B4\uC4F0\uBA70, \uADF8 \uC678 \uC0AC\uC6A9\uC790 \uC2A4\uD0AC\uC740 \uAC74\uB4DC\uB9AC\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4."
       )
     );
@@ -2697,26 +3673,741 @@ function printReport(r) {
   const hasWork = r.versions.some((v) => v.outdated) || r.migrations.length > 0 || agentsNeedsWork;
   if (hasWork) {
     console.log(
-      pc5.dim(
+      pc9.dim(
         "\uB2E4\uC74C \uB2E8\uACC4: \uB9C8\uC774\uADF8\uB808\uC774\uC158 \uC2A4\uD0AC\uC744 \uC2E4\uD589\uD574 \uC704 \uD56D\uBAA9\uC744 \uD504\uB85C\uC81D\uD2B8\uC5D0 \uB9DE\uCDB0 \uC801\uC6A9\uD558\uC138\uC694.\n  \uC0C1\uC138 \uAC00\uC774\uB4DC: SDK \uBB38\uC11C\uC758 MIGRATION.md (\uC704 \uD56D\uBAA9\uBCC4 \uC801\uC6A9 \uC808\uCC28)"
       )
     );
   } else {
-    console.log(pc5.green("\u2713 \uCD5C\uC2E0 \uC0C1\uD0DC\uC785\uB2C8\uB2E4. \uB9C8\uC774\uADF8\uB808\uC774\uC158\uC774 \uD544\uC694 \uC5C6\uC2B5\uB2C8\uB2E4."));
+    console.log(pc9.green("\u2713 \uCD5C\uC2E0 \uC0C1\uD0DC\uC785\uB2C8\uB2E4. \uB9C8\uC774\uADF8\uB808\uC774\uC158\uC774 \uD544\uC694 \uC5C6\uC2B5\uB2C8\uB2E4."));
     if (absent.length > 0) {
-      console.log(pc5.dim("  (\uC704 init \uAE30\uBCF8 \uD30C\uC77C \uCC28\uC774\uB294 \uC120\uD0DD \uC0AC\uD56D\uC785\uB2C8\uB2E4.)"));
+      console.log(pc9.dim("  (\uC704 init \uAE30\uBCF8 \uD30C\uC77C \uCC28\uC774\uB294 \uC120\uD0DD \uC0AC\uD56D\uC785\uB2C8\uB2E4.)"));
     }
     if (r.recommendedDeps.some((d) => !d.declared)) {
-      console.log(pc5.dim("  (\uC704 \uAD8C\uC7A5 \uC758\uC874\uC131\uC740 \uBC84\uC804\uACFC \uBB34\uAD00\uD569\uB2C8\uB2E4 \u2014 \uC4F8 \uAC70\uBA74 \uB530\uB85C \uCD94\uAC00\uD558\uC138\uC694.)"));
+      console.log(pc9.dim("  (\uC704 \uAD8C\uC7A5 \uC758\uC874\uC131\uC740 \uBC84\uC804\uACFC \uBB34\uAD00\uD569\uB2C8\uB2E4 \u2014 \uC4F8 \uAC70\uBA74 \uB530\uB85C \uCD94\uAC00\uD558\uC138\uC694.)"));
+    }
+  }
+  console.log("");
+}
+
+// src/commands/link.ts
+import * as p3 from "@clack/prompts";
+import pc10 from "picocolors";
+var clackSelect = async (message, items) => {
+  const options = items.map((i) => ({
+    value: i.value,
+    label: i.label
+  }));
+  const v = await p3.select({ message, options });
+  if (p3.isCancel(v)) fail(ExitCode.PRECONDITION, "\uCDE8\uC18C\uD588\uC2B5\uB2C8\uB2E4.");
+  return v;
+};
+async function originOwnerRepo(exec) {
+  try {
+    const stdout = await exec(["remote", "get-url", "origin"]);
+    const m = stdout.trim().match(/[/:]([^/:]+)\/([^/]+?)(?:\.git)?$/);
+    return m ? `${m[1]}/${m[2]}` : null;
+  } catch {
+    return null;
+  }
+}
+function findUniqueOriginMatch(repos, origin) {
+  const lower = origin.toLowerCase();
+  const matches = repos.filter((r) => `${r.owner}/${r.repo}`.toLowerCase() === lower);
+  return matches.length === 1 ? matches[0] : null;
+}
+async function pick(label, flag, items, explicit, yes, interactive, select3) {
+  if (items.length === 0)
+    fail(ExitCode.PRECONDITION, `\uC120\uD0DD\uD560 ${label} \uD56D\uBAA9\uC774 \uC5C6\uC2B5\uB2C8\uB2E4. \uD3EC\uD138\uC5D0\uC11C \uBA3C\uC800 \uC5F0\uACB0\uD558\uC138\uC694.`);
+  if (explicit) {
+    const hit = items.find((i) => i.match.includes(explicit));
+    if (!hit) {
+      fail(
+        ExitCode.PRECONDITION,
+        `${label} '${explicit}' \uC744(\uB97C) \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. \uD6C4\uBCF4: ${items.map((i) => i.label).join(", ")}`
+      );
+    }
+    return hit.value;
+  }
+  if (items.length === 1) return items[0].value;
+  if (yes || !interactive) {
+    fail(
+      ExitCode.PRECONDITION,
+      `${label} \uD6C4\uBCF4\uAC00 \uC5EC\uB7EC \uAC1C\uC785\uB2C8\uB2E4. --${flag} \uB85C \uC9C0\uC815\uD558\uC138\uC694: ${items.map((i) => i.label).join(", ")}`
+    );
+  }
+  return select3(`${label}\uC744(\uB97C) \uC120\uD0DD\uD558\uC138\uC694`, items);
+}
+async function resolveRepoSelection(repos, ctx) {
+  const explicit = ctx.options.repo ?? ctx.env.BSTAGE_REPO;
+  if (!explicit && repos.length > 1) {
+    const origin = await originOwnerRepo(ctx.exec);
+    const match = origin ? findUniqueOriginMatch(repos, origin) : null;
+    if (match) return { repo: match, fromOrigin: true };
+  }
+  const items = repos.map((r) => ({
+    value: r,
+    label: `${r.owner}/${r.repo} [${r.surface}] (${r.defaultBranch})`,
+    match: [r.id, `${r.owner}/${r.repo}`]
+  }));
+  const repo = await pick(
+    "\uB808\uD3EC",
+    "repo",
+    items,
+    explicit,
+    ctx.options.yes,
+    ctx.interactive,
+    ctx.select
+  );
+  return { repo, fromOrigin: false };
+}
+async function resolveSelections(ctx) {
+  const { client, options, env: env2, interactive, select: select3 } = ctx;
+  const me = await client.me();
+  const organizationId = await pick(
+    "\uC870\uC9C1",
+    "org",
+    me.memberships.map((m) => ({
+      value: m.organizationId,
+      label: m.organizationId,
+      match: [m.organizationId]
+    })),
+    options.org ?? env2.BSTAGE_ORG,
+    options.yes,
+    interactive,
+    select3
+  );
+  const spaces = await client.listSpaces(organizationId);
+  const spaceId = await pick(
+    "\uC2A4\uD14C\uC774\uC9C0",
+    "space",
+    spaces.map((s) => ({
+      value: s.spaceId,
+      label: `${s.spaceId} (${s.tier})`,
+      match: [s.spaceId]
+    })),
+    options.space ?? env2.BSTAGE_SPACE,
+    options.yes,
+    interactive,
+    select3
+  );
+  const repos = await client.listRepos(organizationId, spaceId);
+  const { repo, fromOrigin } = await resolveRepoSelection(repos, ctx);
+  return { organizationId, spaceId, repo, repoFromOrigin: fromOrigin };
+}
+function printLinked(link, repoLabel, repoFromOrigin, json) {
+  if (json) {
+    printJson(link);
+    return;
+  }
+  if (repoFromOrigin) {
+    console.log(pc10.dim(`  git origin(${repoLabel})\uACFC \uC77C\uCE58\uD558\uB294 \uB808\uD3EC\uB97C \uAE30\uBCF8\uAC12\uC73C\uB85C \uC120\uD0DD\uD588\uC2B5\uB2C8\uB2E4.`));
+  }
+  console.log(
+    pc10.green(
+      `\u2713 \uC5F0\uACB0\uD588\uC2B5\uB2C8\uB2E4: ${link.organizationId} / ${link.spaceId} / ${repoLabel} [${link.surface}]`
+    )
+  );
+  console.log(
+    pc10.dim(
+      "  .bstage/project.json \uC5D0 \uC800\uC7A5 (gitignore \uB300\uC0C1). CI\uC5D0\uC11C\uB294 BSTAGE_ORG\xB7BSTAGE_SPACE\xB7BSTAGE_REPO\xB7BSTAGE_SURFACE\xB7BSTAGE_PORTAL_URL \uD658\uACBD\uBCC0\uC218\uB97C \uC4F0\uC138\uC694."
+    )
+  );
+}
+async function linkCommand(options, deps = {}) {
+  if (options.json && !options.yes) {
+    fail(ExitCode.PRECONDITION, "--json \uC740 --yes \uC640 \uD568\uAED8 \uC4F0\uC138\uC694.");
+  }
+  const cwd = deps.cwd ?? process.cwd();
+  const env2 = deps.env ?? process.env;
+  const interactive = deps.select !== void 0 || p3.isTTY(process.stdout);
+  const select3 = deps.select ?? clackSelect;
+  const exec = deps.exec ?? gitExec(cwd);
+  const { client, portalUrl } = await resolveClientOnly({
+    portal: options.portal,
+    phase: options.phase,
+    // 링크 파일이 아직 없을 수 있으니 조직은 사람이 준 값으로 정한다 — 여러 조직 토큰이
+    // 저장돼 있을 때 --org 안내가 실제로 통하게 하는 자리다.
+    organizationId: options.org ?? env2.BSTAGE_ORG,
+    cwd,
+    env: env2,
+    fetch: deps.fetch
+  });
+  const { organizationId, spaceId, repo, repoFromOrigin } = await resolveSelections({
+    client,
+    exec,
+    env: env2,
+    options,
+    interactive,
+    select: select3
+  });
+  const link = {
+    portalUrl,
+    organizationId,
+    spaceId,
+    repoId: repo.id,
+    surface: repo.surface
+  };
+  await saveLink(cwd, link);
+  printLinked(link, `${repo.owner}/${repo.repo}`, repoFromOrigin, options.json);
+}
+
+// src/commands/list.ts
+import pc11 from "picocolors";
+
+// src/portal/buildRepo.ts
+function buildMatchesRepo(b, repo) {
+  if (b.stageRepoId) return b.stageRepoId === repo.id;
+  if (!b.owner || !b.repo) return false;
+  if (b.owner.toLowerCase() !== repo.owner.toLowerCase()) return false;
+  if (b.repo.toLowerCase() !== repo.repo.toLowerCase()) return false;
+  if (!b.surface || b.surface !== repo.surface) return false;
+  if (!b.spaceId || b.spaceId !== repo.spaceId) return false;
+  return true;
+}
+async function resolveLinkedRepo(ctx) {
+  const repos = await ctx.client.listRepos(ctx.link.organizationId, ctx.link.spaceId);
+  const repo = repos.find((r) => r.id === ctx.link.repoId);
+  if (!repo) {
+    fail(
+      ExitCode.PRECONDITION,
+      "\uC5F0\uACB0\uB41C \uB808\uD3EC\uB97C \uC2A4\uD14C\uC774\uC9C0\uC5D0\uC11C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. bstage link \uB97C \uB2E4\uC2DC \uC2E4\uD589\uD558\uC138\uC694."
+    );
+  }
+  return repo;
+}
+
+// src/commands/list.ts
+function renderList(placements, builds, repo) {
+  const mine = placements.filter((p4) => p4.stageRepoId === repo.id);
+  const lines = [];
+  lines.push(pc11.bold("\uBC30\uCE58"));
+  if (mine.length === 0) {
+    lines.push(
+      pc11.yellow(
+        "  \uC774 \uB808\uD3EC\uC5D0 \uC5F0\uACB0\uB41C \uBC30\uCE58\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4. \uD3EC\uD138 > \uC2A4\uD14C\uC774\uC9C0 > \uD398\uC774\uC9C0\uC5D0\uC11C \uBC30\uCE58\uB97C \uBA3C\uC800 \uB9CC\uB4DC\uC138\uC694."
+      )
+    );
+  } else {
+    lines.push(
+      table([
+        ["\uC885\uB958", "\uC790\uB9AC", "\uC0C1\uD0DC", "\uB77C\uC774\uBE0C \uCEE4\uBC0B", "\uAC8C\uC2DC"],
+        ...mine.map((p4) => [
+          p4.kind,
+          placementLabel(p4),
+          p4.status,
+          shortSha(p4.liveCommit),
+          p4.enabled === false ? "off" : "on"
+        ])
+      ])
+    );
+  }
+  lines.push("");
+  lines.push(pc11.bold("\uCD5C\uADFC \uBE4C\uB4DC"));
+  const recent = builds.filter((b) => buildMatchesRepo(b, repo));
+  lines.push(
+    recent.length === 0 ? pc11.dim("  \uBE4C\uB4DC \uC774\uB825\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.") : table([
+      ["\uBE4C\uB4DC", "\uC0C1\uD0DC", "\uCEE4\uBC0B", "\uC694\uCCAD \uC2DC\uAC01"],
+      ...recent.map((b) => [b.id, b.status, shortSha(b.commitSha), b.requestedAt])
+    ])
+  );
+  return lines.join("\n");
+}
+async function listCommand(options, deps = {}) {
+  const out = deps.out ?? console.log;
+  const { client, link } = await resolveContext({
+    cwd: deps.cwd,
+    env: deps.env,
+    fetch: deps.fetch
+  });
+  const limit = parseInt(options.builds ?? "5", 10) || 5;
+  const [placements, builds, repo] = await Promise.all([
+    client.listPlacements(link.organizationId, link.spaceId, link.surface),
+    client.listBuilds(link.organizationId, link.spaceId, limit),
+    resolveLinkedRepo({ client, link })
+  ]);
+  const mine = placements.filter((p4) => p4.stageRepoId === repo.id);
+  const myBuilds = builds.filter((b) => buildMatchesRepo(b, repo));
+  if (options.json) {
+    printJson({ link, placements: mine, builds: myBuilds });
+    return;
+  }
+  out(pc11.dim(`${link.organizationId} / ${link.spaceId} [${link.surface}]`));
+  out(renderList(placements, builds, repo));
+}
+
+// src/commands/logs.ts
+import pc12 from "picocolors";
+function statusLine(build) {
+  return `[bstage] \uBE4C\uB4DC ${build.id} \xB7 ${build.status}${build.failureReason ? ` \xB7 ${build.failureReason}` : ""}`;
+}
+async function latestBuildId(ctx) {
+  const { organizationId: org, spaceId: space } = ctx.link;
+  const repo = await resolveLinkedRepo(ctx);
+  const latest = (await ctx.client.listBuilds(org, space, 20)).find(
+    (b) => buildMatchesRepo(b, repo)
+  );
+  if (!latest) fail(ExitCode.PRECONDITION, "\uC774 \uB808\uD3EC\uC758 \uBE4C\uB4DC \uC774\uB825\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.");
+  return latest.id;
+}
+function logSink(json) {
+  return json ? (delta) => void process.stderr.write(pc12.dim(delta)) : (delta) => void process.stdout.write(delta);
+}
+async function logsCommand(buildId, options, deps = {}) {
+  const out = deps.out ?? ((s) => void process.stdout.write(s));
+  const ctx = await resolveContext({ cwd: deps.cwd, env: deps.env, fetch: deps.fetch });
+  const { organizationId: org, spaceId: space } = ctx.link;
+  const id = buildId ?? await latestBuildId(ctx);
+  const initial = await ctx.client.getBuild(org, space, id);
+  const following = Boolean(options.follow) && !TERMINAL_STATUSES.has(initial.status);
+  const build = following ? await waitForBuild(ctx.client, org, space, id, {
+    sleep: deps.sleep,
+    onLog: logSink(options.json)
+  }) : initial;
+  await report(ctx.client, org, space, id, build, options, out, following);
+  if (TERMINAL_STATUSES.has(build.status) && build.status !== "SUCCEEDED") {
+    process.exitCode = ExitCode.FAILURE;
+  }
+}
+async function report(client, org, space, id, build, options, out, following) {
+  if (options.json) {
+    printJson({ build, log: await client.getBuildLog(org, space, id) });
+    return;
+  }
+  if (following) {
+    console.error(pc12.dim(`
+${statusLine(build)}`));
+    return;
+  }
+  const log2 = await client.getBuildLog(org, space, id);
+  out(log2.endsWith("\n") ? log2 : log2 + "\n");
+  console.error(pc12.dim(statusLine(build)));
+}
+
+// src/commands/login.ts
+import { hostname as osHostname } from "os";
+import pc13 from "picocolors";
+
+// src/portal/openBrowser.ts
+import { execFile as execFile2 } from "child_process";
+var SHELL_METACHARS = /[&|^<>%!"'`\\]/;
+function isWebUrl(url) {
+  try {
+    const u = new URL(url);
+    return u.protocol === "http:" || u.protocol === "https:";
+  } catch {
+    return false;
+  }
+}
+function openBrowser(url) {
+  if (!isWebUrl(url) || SHELL_METACHARS.test(url)) return Promise.resolve(false);
+  const [cmd, args] = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["rundll32", ["url.dll,FileProtocolHandler", url]] : ["xdg-open", [url]];
+  return new Promise((resolve4) => {
+    try {
+      execFile2(cmd, args, { timeout: 5e3 }, (err) => resolve4(!err));
+    } catch {
+      resolve4(false);
+    }
+  });
+}
+
+// src/commands/login.ts
+var SLOW_DOWN_STEP_MS = 5e3;
+async function verifyToken(client) {
+  try {
+    return await client.me();
+  } catch (err) {
+    if (err instanceof PortalError && (err.status === 401 || err.status === 403)) {
+      fail(
+        ExitCode.AUTH,
+        "\uD1A0\uD070\uC774 \uC720\uD6A8\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. \uD3EC\uD138 \uC124\uC815 \u203A CLI \uD1A0\uD070\uC5D0\uC11C \uC0C8 \uD1A0\uD070\uC744 \uBC1C\uAE09\uD558\uC138\uC694."
+      );
     }
+    throw err;
+  }
+}
+async function loginWithToken(portalUrl, token, options, deps, env2) {
+  if (!token.startsWith("bsc_")) {
+    fail(
+      ExitCode.PRECONDITION,
+      "CLI \uD1A0\uD070\uC740 bsc_ \uB85C \uC2DC\uC791\uD569\uB2C8\uB2E4. \uD3EC\uD138 \uC124\uC815 \u203A CLI \uD1A0\uD070\uC5D0\uC11C \uBC1C\uAE09\uD55C \uAC12\uC778\uC9C0 \uD655\uC778\uD558\uC138\uC694."
+    );
   }
+  const organizationId = options.org ?? env2.BSTAGE_ORG;
+  if (!organizationId) {
+    fail(
+      ExitCode.PRECONDITION,
+      "\uBD99\uC5EC \uB123\uC740 \uD1A0\uD070\uC774 \uC5B4\uB290 \uC870\uC9C1 \uAC83\uC778\uC9C0 \uC54C \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. --org <id> \uB610\uB294 BSTAGE_ORG \uB85C \uC870\uC9C1\uC744 \uC9C0\uC815\uD558\uC138\uC694."
+    );
+  }
+  const client = new PortalClient({ portalUrl, token, fetch: deps.fetch });
+  const me = await verifyToken(client);
+  await saveCredential({ portalUrl, organizationId, token, savedAt: (/* @__PURE__ */ new Date()).toISOString() }, env2);
+  if (options.json) {
+    printJson({
+      portalUrl,
+      method: "token",
+      organizationId,
+      email: me.user.email,
+      organizations: me.memberships.map((m) => m.organizationId)
+    });
+    return;
+  }
+  console.log(
+    pc13.green(`\u2713 ${portalUrl} \uC5D0 ${me.user.email} \uB85C \uB85C\uADF8\uC778\uD588\uC2B5\uB2C8\uB2E4 (\uC870\uC9C1 ${organizationId}).`)
+  );
+}
+function nextIntervalOnSlowDown(interval, retryAfterSec) {
+  const bumped = interval + SLOW_DOWN_STEP_MS;
+  return retryAfterSec !== void 0 ? Math.max(bumped, retryAfterSec * 1e3) : bumped;
+}
+function printDeviceCodePrompt(userCode, verificationUriComplete, expiresIn) {
+  console.log("");
+  console.log(`  \uBE0C\uB77C\uC6B0\uC800\uC5D0\uC11C \uC544\uB798 \uCF54\uB4DC\uB97C \uD655\uC778\uD558\uACE0 \uC2B9\uC778\uD558\uC138\uC694.`);
+  console.log("");
+  console.log(`    \uCF54\uB4DC  ${pc13.bold(userCode)}`);
+  console.log(`    \uC8FC\uC18C  ${pc13.underline(verificationUriComplete)}`);
   console.log("");
+  console.log(
+    pc13.dim(
+      `  \uD130\uBBF8\uB110\uC758 \uCF54\uB4DC\uC640 \uBE0C\uB77C\uC6B0\uC800\uC758 \uCF54\uB4DC\uAC00 \uAC19\uC740\uC9C0 \uAF2D \uD655\uC778\uD558\uC138\uC694. ${Math.round(expiresIn / 60)}\uBD84 \uC548\uC5D0 \uC2B9\uC778\uB418\uC9C0 \uC54A\uC73C\uBA74 \uB9CC\uB8CC\uB429\uB2C8\uB2E4.`
+    )
+  );
+}
+async function pollUntilIssued(client, deviceCode, startInterval, expiresIn, sleep, now) {
+  let interval = startInterval;
+  const deadline = now() + expiresIn * 1e3;
+  for (; ; ) {
+    const remaining = deadline - now();
+    if (remaining <= 0) {
+      fail(ExitCode.PRECONDITION, "\uC2B9\uC778 \uC2DC\uAC04\uC774 \uC9C0\uB0AC\uC2B5\uB2C8\uB2E4. bstage login \uC744 \uB2E4\uC2DC \uC2E4\uD589\uD558\uC138\uC694");
+    }
+    await sleep(Math.min(interval, remaining));
+    let result;
+    try {
+      result = await client.pollDeviceToken(deviceCode);
+    } catch (err) {
+      if (err instanceof PortalError && err.message === "access_denied") {
+        fail(ExitCode.AUTH, "\uD3EC\uD138\uC5D0\uC11C \uC774 \uB85C\uADF8\uC778 \uC694\uCCAD\uC744 \uAC70\uBD80\uD588\uC2B5\uB2C8\uB2E4.");
+      }
+      if (err instanceof PortalError && err.message === "expired_token") {
+        fail(
+          ExitCode.PRECONDITION,
+          "10\uBD84 \uC548\uC5D0 \uC2B9\uC778\uB418\uC9C0 \uC54A\uC544 \uCF54\uB4DC\uAC00 \uB9CC\uB8CC\uB410\uC2B5\uB2C8\uB2E4. bstage login \uC744 \uB2E4\uC2DC \uC2E4\uD589\uD558\uC138\uC694."
+        );
+      }
+      throw err;
+    }
+    if (result.status === "slow_down") {
+      interval = nextIntervalOnSlowDown(interval, result.retryAfter);
+      continue;
+    }
+    if (result.status === "pending") continue;
+    return result;
+  }
+}
+async function openVerificationUri(portalUrl, verificationUriComplete, options, deps) {
+  if (!sameOrigin(portalUrl, verificationUriComplete)) {
+    if (!options.json) {
+      console.log(
+        pc13.yellow(
+          "  \uC2B9\uC778 \uC8FC\uC18C\uAC00 \uD3EC\uD138\uACFC \uB2E4\uB978 \uC0AC\uC774\uD2B8\uC785\uB2C8\uB2E4. \uBE0C\uB77C\uC6B0\uC800\uB97C \uC5F4\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4 \u2014 \uC8FC\uC18C\uB97C \uD655\uC778\uD55C \uB4A4 \uC9C1\uC811 \uC5F4\uC5B4 \uC8FC\uC138\uC694."
+        )
+      );
+    }
+    return;
+  }
+  const opened = await (deps.openBrowser ?? openBrowser)(verificationUriComplete);
+  if (!opened && !options.json) {
+    console.log(pc13.dim("  \uBE0C\uB77C\uC6B0\uC800\uB97C \uC790\uB3D9\uC73C\uB85C \uC5F4\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4. \uC704 \uC8FC\uC18C\uB97C \uC9C1\uC811 \uC5F4\uC5B4 \uC8FC\uC138\uC694."));
+  }
+}
+function sameOrigin(a, b) {
+  try {
+    return new URL(a).origin === new URL(b).origin;
+  } catch {
+    return false;
+  }
+}
+async function loginWithDevice(portalUrl, options, deps, env2) {
+  const sleep = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const anon = new PortalClient({ portalUrl, token: "", fetch: deps.fetch });
+  const code = await anon.startDeviceAuth(
+    (deps.hostname ?? osHostname)(),
+    deps.cliVersion ?? "unknown"
+  );
+  if (!options.json)
+    printDeviceCodePrompt(code.userCode, code.verificationUriComplete, code.expiresIn);
+  if (!options.noBrowser) {
+    await openVerificationUri(portalUrl, code.verificationUriComplete, options, deps);
+  }
+  const now = deps.now ?? Date.now;
+  const issued = await pollUntilIssued(
+    anon,
+    code.deviceCode,
+    code.interval * 1e3,
+    code.expiresIn,
+    sleep,
+    now
+  );
+  const organizationId = issued.organizationId ?? options.org ?? env2.BSTAGE_ORG;
+  await storeIssued(portalUrl, issued, organizationId, env2);
+  reportIssued(portalUrl, issued, organizationId, options.json);
+}
+async function storeIssued(portalUrl, issued, organizationId, env2) {
+  await saveCredential(
+    {
+      portalUrl,
+      organizationId,
+      token: issued.token,
+      savedAt: (/* @__PURE__ */ new Date()).toISOString(),
+      permission: issued.permission,
+      allSpaces: issued.allSpaces,
+      spaceIds: issued.spaceIds,
+      expiresAt: issued.expiresAt
+    },
+    env2
+  );
+}
+function reportIssued(portalUrl, issued, organizationId, json) {
+  if (json) {
+    printJson({
+      portalUrl,
+      method: "device",
+      tokenId: issued.id,
+      prefix: issued.prefix,
+      organizationId: organizationId ?? null,
+      permission: issued.permission,
+      allSpaces: issued.allSpaces ?? false,
+      spaceIds: issued.spaceIds,
+      expiresAt: issued.expiresAt
+    });
+    return;
+  }
+  console.log(pc13.green(`\u2713 ${portalUrl} \uC5D0 \uB85C\uADF8\uC778\uD588\uC2B5\uB2C8\uB2E4.`));
+  console.log(
+    pc13.dim(
+      `  \uC870\uC9C1 ${orgLabel(organizationId ?? UNKNOWN_ORG)} \xB7 \uD1A0\uD070 ${issued.prefix}\u2026 \xB7 \uB4F1\uAE09 ${issued.permission} \xB7 ${scopeLabel(issued.allSpaces, issued.spaceIds)} \xB7 \uB9CC\uB8CC ${issued.expiresAt.slice(0, 10)}`
+    )
+  );
+  console.log(pc13.dim("  \uB2E4\uC74C: \uD504\uB85C\uC81D\uD2B8 \uB514\uB809\uD130\uB9AC\uC5D0\uC11C bstage link"));
+}
+async function loginCommand(options, deps = {}) {
+  const env2 = deps.env ?? process.env;
+  const portalUrl = await resolvePortalUrl(
+    options.portal,
+    deps.cwd ?? process.cwd(),
+    env2,
+    options.phase,
+    { allowLink: false }
+  );
+  const pasted = (options.token ?? env2.BSTAGE_TOKEN ?? "").trim();
+  if (pasted) return loginWithToken(portalUrl, pasted, options, deps, env2);
+  return loginWithDevice(portalUrl, options, deps, env2);
+}
+
+// src/commands/logout.ts
+import pc14 from "picocolors";
+async function logoutCommand(options, deps = {}) {
+  const cwd = deps.cwd ?? process.cwd();
+  const env2 = deps.env ?? process.env;
+  const portalUrl = await resolvePortalUrl(options.portal, cwd, env2, options.phase);
+  if (!portalUrl) {
+    fail(
+      ExitCode.PRECONDITION,
+      "\uD3EC\uD138 \uC8FC\uC18C\uB97C \uC815\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: bstage logout --phase <phase> \uB610\uB294 --portal <url>"
+    );
+  }
+  const removed = await deleteCredential(portalUrl, options.org, env2);
+  if (removed.length === 0) {
+    const scope = options.org ? `\uC870\uC9C1 ${options.org} \uC758 ` : "";
+    console.log(pc14.yellow(`${portalUrl} \uC5D0 \uC800\uC7A5\uB41C ${scope}\uC790\uACA9\uC99D\uBA85\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.`));
+  } else {
+    const orgs = removed.map(orgLabel).join(", ");
+    console.log(pc14.green(`\u2713 ${portalUrl} \uC790\uACA9\uC99D\uBA85\uC744 \uC0AD\uC81C\uD588\uC2B5\uB2C8\uB2E4 \u2014 \uC870\uC9C1 ${orgs}`));
+  }
+  console.log(pc14.dim("  \uD3EC\uD138 \uD654\uBA74\uC5D0\uC11C \uD1A0\uD070 \uC790\uCCB4\uB97C \uD3D0\uAE30\uD558\uBA74 \uB2E4\uB978 \uAE30\uAE30\uC5D0\uC11C\uB3C4 \uBB34\uD6A8\uAC00 \uB429\uB2C8\uB2E4."));
+}
+
+// src/commands/publish.ts
+import pc15 from "picocolors";
+function parseOnOff(v) {
+  const s = v.toLowerCase();
+  if (s === "on") return true;
+  if (s === "off") return false;
+  return fail(ExitCode.PRECONDITION, `publish \uC778\uC790\uB294 on \uB610\uB294 off \uC5EC\uC57C \uD569\uB2C8\uB2E4 (\uBC1B\uC740 \uAC12: ${v})`);
+}
+function isPublished(p4) {
+  return p4.enabled !== false;
+}
+async function confirmToggle(toChange, enabled, options, deps) {
+  if (options.yes) return;
+  const names = toChange.map(placementLabel).join(", ");
+  const ok = await askConfirm(deps, `${names} \uAC8C\uC2DC\uB97C ${enabled ? "\uCF2D\uB2C8\uB2E4" : "\uB055\uB2C8\uB2E4"}. \uC9C4\uD589\uD560\uAE4C\uC694?`);
+  if (!ok) fail(ExitCode.PRECONDITION, "\uCDE8\uC18C\uD588\uC2B5\uB2C8\uB2E4.");
+}
+async function togglePlacement(ctx, p4, enabled) {
+  const base = { id: p4.id, label: placementLabel(p4) };
+  if (isPublished(p4) === enabled) {
+    return { ...base, enabled, status: "unchanged", message: "\uBCC0\uACBD \uC5C6\uC74C" };
+  }
+  try {
+    const { organizationId: org, spaceId: space } = ctx.link;
+    const updated = await ctx.client.setPlacementEnabled(org, space, p4.id, enabled);
+    return { ...base, enabled: updated.enabled !== false, status: "changed" };
+  } catch (err) {
+    if (err instanceof PortalError && err.status === 409) {
+      return { ...base, enabled: isPublished(p4), status: "conflict", message: err.message };
+    }
+    return {
+      ...base,
+      enabled: isPublished(p4),
+      status: "failed",
+      message: err instanceof Error ? err.message : String(err)
+    };
+  }
+}
+function printResults2(results, enabled, out) {
+  for (const r of results) {
+    const mark = r.status === "failed" ? pc15.red("\u2717") : r.status === "conflict" ? pc15.yellow("!") : pc15.green("\u2713");
+    const stateLabel = r.status === "unchanged" ? "\uBCC0\uACBD \uC5C6\uC74C" : `\uAC8C\uC2DC ${r.enabled ? "on" : "off"}`;
+    const suffix = r.message && r.status !== "unchanged" ? pc15.dim(`  ${r.message}`) : "";
+    out(`${mark} ${r.label}  ${stateLabel}${suffix}`);
+  }
+  if (!enabled) {
+    out(pc15.dim("  \uB77C\uC774\uBE0C \uBC84\uC804 \uD3EC\uC778\uD130\uB294 \uC720\uC9C0\uB429\uB2C8\uB2E4 \u2014 \uB2E4\uC2DC \uCF1C\uBA74 \uAC19\uC740 \uBE4C\uB4DC\uAC00 \uC989\uC2DC \uC11C\uBE59\uB429\uB2C8\uB2E4."));
+  }
+}
+function reportOutcome2(results, options, enabled, out) {
+  if (options.json) printJson(jsonSummary(results));
+  else printResults2(results, enabled, out);
+  const conflicts = results.filter((r) => r.status === "conflict");
+  const errors = results.filter((r) => r.status === "failed");
+  if (conflicts.length > 0) {
+    fail(
+      ExitCode.CONFLICT,
+      `\uB2E4\uB978 \uBCC0\uACBD\uC774 \uBA3C\uC800 \uC801\uC6A9\uB41C \uBC30\uCE58\uAC00 \uC788\uC2B5\uB2C8\uB2E4: ${conflicts.map((r) => r.label).join(", ")}. bstage list \uB85C \uD655\uC778\uD558\uACE0 \uB2E4\uC2DC \uC2E4\uD589\uD558\uC138\uC694.`
+    );
+  }
+  if (errors.length > 0) {
+    fail(
+      ExitCode.FAILURE,
+      `\uC77C\uBD80 \uBC30\uCE58 \uC801\uC6A9\uC5D0 \uC2E4\uD328\uD588\uC2B5\uB2C8\uB2E4: ${errors.map((r) => r.label).join(", ")}`
+    );
+  }
+}
+async function publishCommand(state, options, deps = {}) {
+  if (options.json && !options.yes) {
+    fail(ExitCode.PRECONDITION, "--json \uC740 --yes \uC640 \uD568\uAED8 \uC4F0\uC138\uC694.");
+  }
+  const enabled = parseOnOff(state);
+  if (!options.yes) assertCanConfirm(deps);
+  const out = deps.out ?? console.log;
+  const ctx = await resolveContext({ cwd: deps.cwd, env: deps.env, fetch: deps.fetch });
+  const targets = await fetchTargets(ctx, options.placement);
+  const toChange = targets.filter((p4) => isPublished(p4) !== enabled);
+  if (toChange.length > 0) await confirmToggle(toChange, enabled, options, deps);
+  const results = [];
+  for (const p4 of targets) {
+    results.push(await togglePlacement(ctx, p4, enabled));
+  }
+  reportOutcome2(results, options, enabled, out);
+}
+
+// src/commands/rollback.ts
+import pc16 from "picocolors";
+function pickRollbackTarget(builds, repo, currentLive) {
+  const ok = builds.filter((b) => buildMatchesRepo(b, repo) && b.status === "SUCCEEDED").sort((a, b) => a.requestedAt < b.requestedAt ? 1 : -1);
+  if (!currentLive) return ok[0] ?? null;
+  const idx = ok.findIndex((b) => b.id === currentLive);
+  if (idx === -1) return ok[0] ?? null;
+  return ok[idx + 1] ?? null;
+}
+async function resolveExplicitTarget(ctx, builds, repo, buildId) {
+  const { organizationId: org, spaceId: space } = ctx.link;
+  let target = builds.find((b) => b.id === buildId);
+  if (!target) {
+    try {
+      target = await ctx.client.getBuild(org, space, buildId);
+    } catch (err) {
+      if (err instanceof PortalError && err.status === 404) {
+        fail(
+          ExitCode.PRECONDITION,
+          `\uBE4C\uB4DC ${buildId} \uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. bstage list \uB85C \uCD5C\uADFC \uBE4C\uB4DC\uB97C \uD655\uC778\uD558\uC138\uC694.`
+        );
+      }
+      throw err;
+    }
+  }
+  if (target.status !== "SUCCEEDED" || !buildMatchesRepo(target, repo)) {
+    fail(ExitCode.PRECONDITION, `\uBE4C\uB4DC ${buildId} \uB294 \uC774 \uB808\uD3EC\uC758 \uC131\uACF5\uD55C \uBE4C\uB4DC\uAC00 \uC544\uB2D9\uB2C8\uB2E4.`);
+  }
+  return target;
+}
+function pickOrFail(builds, repo, currentLive, label) {
+  const target = pickRollbackTarget(builds, repo, currentLive);
+  if (!target) fail(ExitCode.PRECONDITION, `${label}: \uB418\uB3CC\uB9B4 \uC774\uC804 \uC131\uACF5 \uBE4C\uB4DC\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.`);
+  return target;
+}
+async function buildRollbackPlan(ctx, placements, builds, repo, buildId) {
+  const sharedTarget = buildId ? await resolveExplicitTarget(ctx, builds, repo, buildId) : void 0;
+  return placements.map((pl) => {
+    const target = sharedTarget ?? pickOrFail(builds, repo, pl.liveBuildId, placementLabel(pl));
+    return {
+      placement: pl,
+      label: placementLabel(pl),
+      from: pl.liveBuildId || void 0,
+      to: target.id,
+      unchanged: pl.liveBuildId === target.id,
+      targetCommit: target.commitSha
+    };
+  });
+}
+function renderConfirmTable(changing) {
+  const header = `\uBE4C\uB4DC ${changing[0].to} (\uCEE4\uBC0B ${shortSha(changing[0].targetCommit)})`;
+  const rows = table([
+    ["\uC790\uB9AC", "\uD604\uC7AC", "\u2192 \uB418\uB3CC\uB9B4 \uBE4C\uB4DC"],
+    ...changing.map((r) => [r.label, shortSha(r.placement.liveCommit), shortSha(r.targetCommit)])
+  ]);
+  return `${header}
+${rows}`;
+}
+async function confirmRollback(changing, out, deps) {
+  out(renderConfirmTable(changing));
+  const ok = await askConfirm(deps, `${changing.length}\uAC1C \uBC30\uCE58\uB97C \uB418\uB3CC\uB9BD\uB2C8\uB2E4. \uC9C4\uD589\uD560\uAE4C\uC694?`);
+  if (!ok) fail(ExitCode.PRECONDITION, "\uCDE8\uC18C\uD588\uC2B5\uB2C8\uB2E4.");
+}
+async function rollbackCommand(buildId, options, deps = {}) {
+  if (options.json && !options.yes) {
+    fail(ExitCode.PRECONDITION, "--json \uC740 --yes \uC640 \uD568\uAED8 \uC4F0\uC138\uC694.");
+  }
+  if (!options.yes) assertCanConfirm(deps);
+  const out = deps.out ?? console.log;
+  const ctx = await resolveContext({ cwd: deps.cwd, env: deps.env, fetch: deps.fetch });
+  const { organizationId: org, spaceId: space } = ctx.link;
+  const [placements, builds, repo] = await Promise.all([
+    fetchTargets(ctx, options.placement),
+    ctx.client.listBuilds(org, space, 50),
+    resolveLinkedRepo(ctx)
+  ]);
+  const plan = await buildRollbackPlan(ctx, placements, builds, repo, buildId);
+  const changing = plan.filter((r) => !r.unchanged);
+  if (changing.length === 0) {
+    fail(ExitCode.PRECONDITION, "\uC774\uBBF8 \uD574\uB2F9 \uBE4C\uB4DC\uAC00 \uB77C\uC774\uBE0C\uC785\uB2C8\uB2E4.");
+  }
+  if (!options.yes) await confirmRollback(changing, out, deps);
+  const results = await applyPlacements(ctx, plan);
+  reportOutcome(results, options, out);
+  if (!options.json) {
+    out(
+      pc16.dim("  \uB418\uB3CC\uB9B0 \uB4A4\uC5D0\uB3C4 \uCD5C\uC2E0 \uBE4C\uB4DC\uB294 \uB0A8\uC544 \uC788\uC2B5\uB2C8\uB2E4 \u2014 bstage deploy \uB85C \uB2E4\uC2DC \uC62C\uB9B4 \uC218 \uC788\uC2B5\uB2C8\uB2E4.")
+    );
+  }
 }
 
 // src/commands/docs.ts
 import { existsSync as existsSync4, readdirSync } from "fs";
-import { join as join6 } from "path";
-import pc6 from "picocolors";
+import { join as join8 } from "path";
+import pc17 from "picocolors";
 var DOC_ORDER = [
   ["GETTING_STARTED.md", "\uBE60\uB978 \uC2DC\uC791 \uAC00\uC774\uB4DC"],
   ["API_REFERENCE.md", "createTemplate, hooks, BstageClient, PlatformBridge API"],
@@ -2733,10 +4424,10 @@ var DOC_ORDER = [
   ["SDK_ARCHITECTURE.md", "\uD328\uD0A4\uC9C0 \uAD6C\uC870, \uC124\uACC4 \uACB0\uC815"]
 ];
 async function docsCommand() {
-  const docsDir = join6(process.cwd(), "node_modules", "@bstage-sdk", "core", "docs");
+  const docsDir = join8(process.cwd(), "node_modules", "@bstage-sdk", "core", "docs");
   if (!existsSync4(docsDir)) {
-    console.log(pc6.yellow("SDK \uBB38\uC11C\uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4."));
-    console.log(pc6.dim("  @bstage-sdk/core\uAC00 \uC124\uCE58\uB418\uC5B4 \uC788\uB294\uC9C0 \uD655\uC778\uD558\uC138\uC694 (npm install \uD6C4 \uC7AC\uC2DC\uB3C4)."));
+    console.log(pc17.yellow("SDK \uBB38\uC11C\uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4."));
+    console.log(pc17.dim("  @bstage-sdk/core\uAC00 \uC124\uCE58\uB418\uC5B4 \uC788\uB294\uC9C0 \uD655\uC778\uD558\uC138\uC694 (npm install \uD6C4 \uC7AC\uC2DC\uB3C4)."));
     return;
   }
   const present = new Set(readdirSync(docsDir).filter((f) => f.endsWith(".md")));
@@ -2744,27 +4435,119 @@ async function docsCommand() {
   const known = new Set(DOC_ORDER.map(([f]) => f));
   const extras = [...present].filter((f) => !known.has(f)).sort();
   console.log("");
-  console.log(pc6.bold("bstage SDK \uBB38\uC11C"));
-  console.log(pc6.dim(`  ${docsDir}`));
+  console.log(pc17.bold("bstage SDK \uBB38\uC11C"));
+  console.log(pc17.dim(`  ${docsDir}`));
   console.log("");
   for (const [file, desc] of ordered) {
-    console.log(`  ${pc6.cyan(file.padEnd(22))} ${pc6.dim(desc)}`);
+    console.log(`  ${pc17.cyan(file.padEnd(22))} ${pc17.dim(desc)}`);
   }
   for (const file of extras) {
-    console.log(`  ${pc6.cyan(file.padEnd(22))}`);
+    console.log(`  ${pc17.cyan(file.padEnd(22))}`);
   }
   console.log("");
   console.log(
-    pc6.dim("\uD30C\uC77C\uC744 \uC5F4\uC5B4 \uC0C1\uC138 \uB0B4\uC6A9\uC744 \uD655\uC778\uD558\uC138\uC694. \uCEE4\uB9E8\uB4DC \uB3C4\uC6C0\uB9D0\uC740 `bstage <command> --help`.")
+    pc17.dim("\uD30C\uC77C\uC744 \uC5F4\uC5B4 \uC0C1\uC138 \uB0B4\uC6A9\uC744 \uD655\uC778\uD558\uC138\uC694. \uCEE4\uB9E8\uB4DC \uB3C4\uC6C0\uB9D0\uC740 `bstage <command> --help`.")
   );
   console.log("");
 }
 
+// src/commands/whoami.ts
+import pc18 from "picocolors";
+function jsonEntry(c, active) {
+  return {
+    organizationId: c.organizationId,
+    permission: c.permission ?? null,
+    allSpaces: c.allSpaces ?? false,
+    spaceIds: c.spaceIds ?? [],
+    expiresAt: c.expiresAt ?? null,
+    savedAt: c.savedAt,
+    active
+  };
+}
+function printCredentials(stored, activeOrg) {
+  if (stored.length === 0) return;
+  console.log(pc18.dim("\uC800\uC7A5\uB41C \uD1A0\uD070"));
+  const rows = stored.map((c) => [
+    `  \uC870\uC9C1 ${orgLabel(c.organizationId)}`,
+    `\uB4F1\uAE09 ${c.permission ?? "-"}`,
+    scopeLabel(c.allSpaces, c.spaceIds),
+    `\uB9CC\uB8CC ${c.expiresAt ? c.expiresAt.slice(0, 10) : "-"}`,
+    c.organizationId === activeOrg ? pc18.dim("(\uC0AC\uC6A9 \uC911)") : ""
+  ]);
+  console.log(table(rows));
+}
+function printMe(me, portalUrl) {
+  console.log(`${pc18.bold(me.user.email)}  ${pc18.dim(portalUrl)}`);
+  for (const m of me.memberships) {
+    const stages = Object.entries(m.stageRoles ?? {}).map(([s, r]) => `${s}:${r}`).join(", ");
+    console.log(`  \uC870\uC9C1 ${m.organizationId}  ${m.organizationRole ?? ""}  ${pc18.dim(stages)}`);
+  }
+}
+async function whoamiCommand(options, deps = {}) {
+  const cwd = deps.cwd ?? process.cwd();
+  const env2 = deps.env ?? process.env;
+  const portalUrl = await resolvePortalUrl(options.portal, cwd, env2, options.phase);
+  if (!portalUrl) {
+    fail(
+      ExitCode.PRECONDITION,
+      "\uD3EC\uD138 \uC8FC\uC18C\uB97C \uC815\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. --portal <url> \uB610\uB294 --phase \uB97C \uC9C0\uC815\uD558\uC138\uC694."
+    );
+  }
+  const stored = await listCredentials(portalUrl, env2);
+  const organizationId = options.org ?? env2.BSTAGE_ORG;
+  const picked = await loadCredential(portalUrl, organizationId, env2);
+  const envToken = env2.BSTAGE_TOKEN || void 0;
+  const viaEnv = Boolean(envToken);
+  const token = envToken ?? picked?.token;
+  const activeOrg = viaEnv ? void 0 : picked?.organizationId;
+  if (!token) {
+    if (stored.length === 0) {
+      fail(
+        ExitCode.AUTH,
+        `${portalUrl} \uC5D0 \uB85C\uADF8\uC778\uB418\uC5B4 \uC788\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. bstage login --portal ${portalUrl} \uC744 \uBA3C\uC800 \uC2E4\uD589\uD558\uC138\uC694.`
+      );
+    }
+    return reportStoredOnly(portalUrl, stored, options.json);
+  }
+  const me = await new PortalClient({ portalUrl, token, fetch: deps.fetch }).me();
+  if (options.json) {
+    printJson({
+      portalUrl,
+      tokenSource: viaEnv ? "env" : "stored",
+      organizationId: activeOrg ?? null,
+      user: me.user,
+      memberships: me.memberships,
+      credentials: stored.map((c) => jsonEntry(c, !viaEnv && c.organizationId === activeOrg))
+    });
+    return;
+  }
+  printMe(me, portalUrl);
+  if (viaEnv) console.error("  \uD1A0\uD070 \uCD9C\uCC98: BSTAGE_TOKEN \uD658\uACBD\uBCC0\uC218 (\uC800\uC7A5\uB41C \uC790\uACA9\uC99D\uBA85\uC740 \uC0AC\uC6A9\uD558\uC9C0 \uC54A\uC74C)");
+  printCredentials(stored, activeOrg);
+}
+function reportStoredOnly(portalUrl, stored, json) {
+  if (json) {
+    printJson({
+      portalUrl,
+      organizationId: null,
+      user: null,
+      memberships: [],
+      credentials: stored.map((c) => jsonEntry(c, false))
+    });
+    return;
+  }
+  console.log(pc18.dim(portalUrl));
+  printCredentials(stored);
+  console.log(
+    pc18.yellow("  \uC5EC\uB7EC \uC870\uC9C1\uC758 \uD1A0\uD070\uC774 \uC788\uC2B5\uB2C8\uB2E4 \u2014 --org <id> \uB85C \uC870\uC9C1\uC744 \uC9C0\uC815\uD558\uBA74 \uACC4\uC815 \uC815\uBCF4\uB3C4 \uBD05\uB2C8\uB2E4.")
+  );
+}
+
 // src/index.ts
 function readVersion() {
   try {
-    const here = dirname3(fileURLToPath2(import.meta.url));
-    return JSON.parse(readFileSync2(join7(here, "..", "package.json"), "utf-8")).version || "0.0.0";
+    const here = dirname5(fileURLToPath2(import.meta.url));
+    return JSON.parse(readFileSync2(join9(here, "..", "package.json"), "utf-8")).version || "0.0.0";
   } catch {
     return "0.0.0";
   }
@@ -2782,6 +4565,28 @@ var skills = program.command("skills").description("\uC5D0\uC774\uC804\uD2B8\uC6
 skills.command("install").description("\uC5D0\uC774\uC804\uD2B8\uC6A9 \uC2A4\uD0AC\uC744 .claude/skills/\uC5D0 \uC124\uCE58\xB7\uB3D9\uAE30\uD654 (\uAE30\uC874 \uD504\uB85C\uC81D\uD2B8\uC6A9)").option("--dir <dir>", "\uC124\uCE58 \uC704\uCE58", ".claude/skills").action(skillsInstallCommand);
 var i18n = program.command("i18n").description("\uB2E4\uAD6D\uC5B4(\uBC88\uC5ED) \uC720\uD2F8");
 i18n.command("pull").description("\uD50C\uB7AB\uD3FC \uBC88\uC5ED \uC0AC\uC804\uC744 CDN\uC5D0\uC11C \uBC1B\uC544 \uD0C0\uC785 \uC0DD\uC131 + \uB85C\uCEEC \uCE90\uC2DC").option("--phase <phase>", "\uB300\uC0C1 phase (real, qa, dev)", "real").option("--target <target>", "\uBC88\uC5ED \uC2DC\uC2A4\uD15C (user, admin)", "user").option("--tier <tier>", "\uBC88\uC5ED tier (inhouse, mnetplus, hiand)", "inhouse").option("--ref <locale>", "\uD0C0\uC785 \uC6D0\uBB38 \uAE30\uC900 \uB85C\uCF00\uC77C", "ko").option("--out <file>", "\uC0DD\uC131 \uD0C0\uC785 \uD30C\uC77C \uACBD\uB85C", "src/bstage-i18n.ts").action(i18nPullCommand);
+program.command("login").description("\uD3EC\uD138 CLI \uD1A0\uD070 \uB4F1\uB85D (\uD3EC\uD138 \uC124\uC815 > CLI \uD1A0\uD070\uC5D0\uC11C \uBC1C\uAE09)").option(
+  "--phase <phase>",
+  "\uD3EC\uD138 \uD658\uACBD (real, sandbox, dev, qa). \uC0DD\uB7B5 \uC2DC .env\uC758 VITE_BSTAGE_PHASE, \uADF8\uAC83\uB3C4 \uC5C6\uC73C\uBA74 sandbox"
+).option(
+  "--portal <url>",
+  "\uD3EC\uD138 \uC8FC\uC18C \uC9C1\uC811 \uC9C0\uC815 (phase \uB9E4\uD551\uBCF4\uB2E4 \uC6B0\uC120, BSTAGE_PORTAL_URL). \uB9C1\uD06C \uD30C\uC77C\xB7.env \uC758 \uC8FC\uC18C\uB294 \uD5C8\uC6A9 \uBAA9\uB85D \uC548\uC77C \uB54C\uB9CC \uC4F0\uC774\uBBC0\uB85C \uBAA9\uB85D \uBC16 \uD3EC\uD138\uC740 \uC774 \uC635\uC158\uC73C\uB85C \uC9C0\uC815\uD55C\uB2E4"
+).option(
+  "--token <token>",
+  "\uBD99\uC5EC \uB123\uAE30 \uACBD\uB85C \u2014 CI\uC6A9 (BSTAGE_TOKEN). \uC0DD\uB7B5 \uC2DC \uBE0C\uB77C\uC6B0\uC800 \uC2B9\uC778(\uB514\uBC14\uC774\uC2A4 \uCF54\uB4DC)"
+).option("--org <id>", "\uBD99\uC5EC \uB123\uC740 \uD1A0\uD070\uC758 \uC870\uC9C1 (BSTAGE_ORG). \uB514\uBC14\uC774\uC2A4 \uC2B9\uC778 \uACBD\uB85C\uC5D0\uC11C\uB294 \uBD88\uD544\uC694").option("--no-browser", "\uBE0C\uB77C\uC6B0\uC800\uB97C \uC5F4\uC9C0 \uC54A\uACE0 \uCF54\uB4DC\xB7\uC8FC\uC18C\uB9CC \uCD9C\uB825").option("--json", "\uAD6C\uC870\uD654 \uCD9C\uB825").action(
+  (o) => runCommand(
+    () => loginCommand({ ...o, noBrowser: o.browser === false }, { cliVersion: readVersion() })
+  )
+);
+program.command("logout").description("\uC800\uC7A5\uB41C \uD3EC\uD138 \uC790\uACA9\uC99D\uBA85 \uC0AD\uC81C (\uAE30\uBCF8: \uADF8 \uD3EC\uD138\uC758 \uBAA8\uB4E0 \uC870\uC9C1)").option("--phase <phase>", "\uD3EC\uD138 \uD658\uACBD").option("--portal <url>", "\uD3EC\uD138 \uC8FC\uC18C \uC9C1\uC811 \uC9C0\uC815 (\uD5C8\uC6A9 \uBAA9\uB85D \uBC16 \uD3EC\uD138\uC740 \uC774 \uC635\uC158\uC73C\uB85C)").option("--org <id>", "\uC774 \uC870\uC9C1 \uD1A0\uD070\uB9CC \uC0AD\uC81C").action((o) => runCommand(() => logoutCommand(o)));
+program.command("link").description("\uC774 \uB514\uB809\uD130\uB9AC\uB97C \uD3EC\uD138 \uC870\uC9C1\xB7\uC2A4\uD14C\uC774\uC9C0\xB7\uB808\uD3EC\uC5D0 \uC5F0\uACB0 (.bstage/project.json)").option("--phase <phase>", "\uD3EC\uD138 \uD658\uACBD (\uC0DD\uB7B5 \uC2DC .env\uC758 VITE_BSTAGE_PHASE \u2192 sandbox)").option("--portal <url>", "\uD3EC\uD138 \uC8FC\uC18C \uC9C1\uC811 \uC9C0\uC815 (\uD5C8\uC6A9 \uBAA9\uB85D \uBC16 \uD3EC\uD138\uC740 \uC774 \uC635\uC158\uC73C\uB85C)").option("--org <id>", "\uC870\uC9C1 ID").option("--space <id>", "\uC2A4\uD14C\uC774\uC9C0(\uC2A4\uD398\uC774\uC2A4) ID").option("--repo <id|owner/repo>", "\uC5F0\uACB0 \uB808\uD3EC").option("-y, --yes", "\uD504\uB86C\uD504\uD2B8 \uC5C6\uC774 (\uD6C4\uBCF4\uAC00 \uC720\uC77C\uD558\uAC70\uB098 \uC635\uC158\uC73C\uB85C \uC9C0\uC815\uB3FC\uC57C \uD568)").option("--json", "\uAD6C\uC870\uD654 \uCD9C\uB825 (--yes \uC640 \uD568\uAED8)").action((o) => runCommand(() => linkCommand(o)));
+program.command("list").alias("ls").description("\uC774 \uB808\uD3EC\uC758 \uBC30\uCE58(\uB77C\uC774\uBE0C \uBC84\uC804\xB7\uAC8C\uC2DC \uC0C1\uD0DC)\uC640 \uCD5C\uADFC \uBE4C\uB4DC").option("--builds <n>", "\uD45C\uC2DC\uD560 \uBE4C\uB4DC \uC218", "5").option("--json", "\uAD6C\uC870\uD654 \uCD9C\uB825").action((o) => runCommand(() => listCommand(o)));
+program.command("deploy").description("push\uB41C \uCEE4\uBC0B\uC744 \uD3EC\uD138\uC5D0\uC11C \uBE4C\uB4DC\uD558\uACE0 \uC774 \uB808\uD3EC\uC758 \uBC30\uCE58\uC5D0 \uB77C\uC774\uBE0C \uC801\uC6A9").option("-y, --yes", "\uD655\uC778 \uC5C6\uC774 \uC801\uC6A9").option("--placement <id|path|slotId>", "\uD2B9\uC815 \uBC30\uCE58\uB9CC").option("--skip-git-check", "\uB354\uD2F0 \uD2B8\uB9AC\xB7\uBE0C\uB79C\uCE58\xB7push \uC810\uAC80 \uC0DD\uB7B5").option("--no-wait", "\uBE4C\uB4DC\uB9CC \uC2DC\uC791\uD558\uACE0 \uC885\uB8CC").option("--json", "\uAD6C\uC870\uD654 \uCD9C\uB825 (--yes \uC640 \uD568\uAED8)").action((o) => runCommand(() => deployCommand({ ...o, noWait: o.wait === false })));
+program.command("rollback [buildId]").description("\uC774\uC804 \uC131\uACF5 \uBE4C\uB4DC(\uB610\uB294 \uC9C0\uC815\uD55C \uBE4C\uB4DC)\uB97C \uB77C\uC774\uBE0C\uB85C \uC7AC\uC801\uC6A9").option("-y, --yes", "\uD655\uC778 \uC5C6\uC774 \uC801\uC6A9").option("--placement <id|path|slotId>", "\uD2B9\uC815 \uBC30\uCE58\uB9CC").option("--json", "\uAD6C\uC870\uD654 \uCD9C\uB825 (--yes \uC640 \uD568\uAED8)").action((id, o) => runCommand(() => rollbackCommand(id, o)));
+program.command("publish <on|off>").description("\uBC30\uCE58 \uAC8C\uC2DC \uCF1C\uAE30/\uB044\uAE30 (\uB77C\uC774\uBE0C \uBC84\uC804\uC740 \uC720\uC9C0)").option("--placement <id|path|slotId>", "\uD2B9\uC815 \uBC30\uCE58\uB9CC").option("-y, --yes", "\uD655\uC778 \uC5C6\uC774").option("--json", "\uAD6C\uC870\uD654 \uCD9C\uB825 (--yes \uC640 \uD568\uAED8)").action((state, o) => runCommand(() => publishCommand(state, o)));
+program.command("logs [buildId]").description("\uBE4C\uB4DC \uB85C\uADF8 (\uC0DD\uB7B5 \uC2DC \uCD5C\uADFC \uBE4C\uB4DC)").option("-f, --follow", "\uC9C4\uD589 \uC911\uC774\uBA74 \uB05D\uB0A0 \uB54C\uAE4C\uC9C0 \uC774\uC5B4\uC11C \uCD9C\uB825").option("--json", "\uAD6C\uC870\uD654 \uCD9C\uB825").action((id, o) => runCommand(() => logsCommand(id, o)));
+program.command("whoami").description("\uD604\uC7AC \uB85C\uADF8\uC778 \uC0AC\uC6A9\uC790\xB7\uC870\uC9C1\xB7\uC2A4\uD14C\uC774\uC9C0 \uC5ED\uD560\uACFC \uC800\uC7A5\uB41C \uC870\uC9C1\uBCC4 \uD1A0\uD070").option("--phase <phase>", "\uD3EC\uD138 \uD658\uACBD").option("--portal <url>", "\uD3EC\uD138 \uC8FC\uC18C \uC9C1\uC811 \uC9C0\uC815 (\uD5C8\uC6A9 \uBAA9\uB85D \uBC16 \uD3EC\uD138\uC740 \uC774 \uC635\uC158\uC73C\uB85C)").option("--org <id>", "\uC774 \uC870\uC9C1 \uD1A0\uD070\uC73C\uB85C \uC870\uD68C (BSTAGE_ORG)").option("--json", "\uAD6C\uC870\uD654 \uCD9C\uB825").action((o) => runCommand(() => whoamiCommand(o)));
 program.addHelpText(
   "after",
   `
@@ -2792,6 +4597,17 @@ program.addHelpText(
   $ bstage doctor                SDK \uBC84\uC804\xB7\uB4DC\uB9AC\uD504\uD2B8 \uC9C4\uB2E8
   $ bstage skills install        \uC5D0\uC774\uC804\uD2B8 \uC2A4\uD0AC \uC124\uCE58/\uB3D9\uAE30\uD654
   $ bstage i18n pull             \uD50C\uB7AB\uD3FC \uBC88\uC5ED \uBC1B\uAE30 + \uD0C0\uC785 \uC0DD\uC131
+  $ bstage login                  \uBE0C\uB77C\uC6B0\uC800\uC5D0\uC11C \uC2B9\uC778\uD574 \uB85C\uADF8\uC778 (CI: --token \uB610\uB294 BSTAGE_TOKEN)
+  $ bstage link                   \uB514\uB809\uD130\uB9AC\uB97C \uD3EC\uD138 \uC870\uC9C1\xB7\uC2A4\uD14C\uC774\uC9C0\xB7\uB808\uD3EC\uC5D0 \uC5F0\uACB0
+  $ bstage list                   \uC774 \uB808\uD3EC\uC758 \uBC30\uCE58\xB7\uCD5C\uADFC \uBE4C\uB4DC \uD655\uC778
+  $ bstage deploy                 push\uB41C \uCEE4\uBC0B\uC744 \uBE4C\uB4DC\uD574 \uC774 \uB808\uD3EC\uC758 \uBC30\uCE58\uC5D0 \uB77C\uC774\uBE0C \uC801\uC6A9
+  $ bstage rollback                \uC774\uC804 \uC131\uACF5 \uBE4C\uB4DC\uB85C \uB77C\uC774\uBE0C\uB97C \uB418\uB3CC\uB9BC
+  $ bstage publish off             \uAC8C\uC2DC \uB044\uAE30 (\uB77C\uC774\uBE0C \uBC84\uC804 \uC720\uC9C0)
+  $ bstage logs -f                \uCD5C\uADFC \uBE4C\uB4DC \uB85C\uADF8\uB97C \uB05D\uB0A0 \uB54C\uAE4C\uC9C0 \uC774\uC5B4\uC11C \uCD9C\uB825
+  $ bstage whoami                 \uD604\uC7AC \uB85C\uADF8\uC778 \uC0AC\uC6A9\uC790 \uD655\uC778
+  $ bstage logout                 \uC800\uC7A5\uB41C \uC790\uACA9\uC99D\uBA85 \uC0AD\uC81C
+
+\uC885\uB8CC \uCF54\uB4DC: 0 \uC131\uACF5 \xB7 1 \uC2E4\uD328 \xB7 2 \uC0AC\uC804\uC870\uAC74 \xB7 3 \uC778\uC99D \xB7 4 \uCDA9\uB3CC \xB7 5 \uC694\uCCAD \uC81C\uD55C
 
 \uBB38\uC11C:
   $ bstage docs                  \uC124\uCE58\uB41C SDK \uBB38\uC11C \uBAA9\uB85D\xB7\uACBD\uB85C