@clack-platform/cli 0.1.0 → 0.1.1

package/README.md

@@ -19,7 +19,7 @@ clack whoami --json
 clack logout
 ```
 
-`login`이 표시한 코드를 앱 **마이페이지 → 계정 → 내 정보 수정하기 → 외부 도구 연결 → 코드로 승인**에서 입력한다. 요청한 권한을 확인하고 승인하면 CLI에 연결된다. 기본 요청 권한은 `profile:read` 하나다. `profile`, `product`, `content`, `creator-content`, `skill`, `platform` 묶음은 각각 읽기·쓰기를 모두 요청한다(`creator-content:publish`, `skill:publish`는 별도 명시가 필요하다). `platform`은 내 콘텐츠의 서버 키·공유 문서 관리 전용 권한이다(아래 "플랫폼 전용 PAT 도구" 절 참고). 소셜 로그인 사용자도 앱에서 승인할 수 있다. 웹 승인 화면은 별도 후속 단계이므로 현재는 앱 승인을 사용한다.
+`login`이 표시한 코드를 앱 **마이페이지 → 계정 → 내 정보 수정하기 → 외부 도구 연결 → 코드로 승인**에서 입력한다. 요청한 권한을 확인하고 승인하면 CLI에 연결된다. 기본 요청 권한은 `profile:read` 하나다. `profile`, `product`, `content`, `creator-content`, `skill`, `platform`, `custom-page` 묶음은 각각 읽기·쓰기를 모두 요청한다(`creator-content:publish`, `skill:publish`, `custom-page:publish`는 별도 명시가 필요하다). 명령별 필요 권한은 각 명령의 `--help`와 아래 절의 권한 표에 적혀 있다. `platform`은 내 콘텐츠의 서버 키·공유 문서 관리 전용 권한이다(아래 "플랫폼 전용 PAT 도구" 절 참고). 소셜 로그인 사용자도 앱에서 승인할 수 있다. 웹 승인 화면은 별도 후속 단계이므로 현재는 앱 승인을 사용한다.
 
 수동 발급한 토큰은 `clack login --token`의 숨김 프롬프트에 붙여 넣는다. 비대화형 실행에서는 이 명령의 표준 입력으로 전달할 수 있다. `--token <값>`도 지원하지만 셸 기록을 피하려면 프롬프트나 `CLACK_TOKEN` 환경변수를 사용한다. 토큰 원문은 정상 결과·오류·상세 로그에 출력하지 않는다.
 
@@ -31,6 +31,22 @@ clack token list --json
 clack token revoke 123 --yes
 ```
 
+### 승인 대기 중 실행이 끊기는 경우(에이전트용)
+
+`login`은 코드를 발급한 즉시(폴링을 시작하기 전에) 그 요청을 자격 저장소 옆에 0600 권한으로 저장해 둔다. 그래서 승인을 기다리는 도중에 프로세스가 끝나도(에이전트가 턴을 종료하는 경우 등) 승인 자체는 유실되지 않는다 — 다음 실행에서 `clack login --resume`으로 같은 코드를 이어서 기다리면 된다.
+
+```sh
+clack login --no-wait --json   # 코드만 발급하고 즉시 반환 (user_code·주소·만료 시각을 JSON으로 출력)
+# … 사용자가 앱에서 승인할 시간을 준다(턴 종료 등) …
+clack login --resume           # 같은 요청을 이어서 기다리다가 승인되면 저장한다
+```
+
+`--no-wait` 없이 그냥 `clack login`을 실행했다가 대기 중 중단된 경우에도 `clack login --resume`으로 이어받을 수 있다. `--resume`은 새 코드를 발급하지 않으며, 저장된 요청이 이미 만료·거부·소비됐으면(`EXPIRED_TOKEN`·`ACCESS_DENIED`·`DEVICE_CODE_CONSUMED`) 그 사실을 분명한 오류 코드로 알리고 자동으로 새 요청을 만들지 않는다 — 이때는 `clack login`을 다시 실행한다. 저장된 요청이 없으면 `DEVICE_REQUEST_NOT_FOUND`, 발급 당시와 다른 `--env`·`--base-url`로 재개를 시도하면 `DEVICE_REQUEST_ORIGIN_MISMATCH`를 반환한다(둘 다 요청을 지우지 않으므로 `--env`를 바로잡아 다시 시도할 수 있다). `--resume`은 `--token`과 함께 쓸 수 없다.
+
+```sh
+clack login --resume --env dev   # 발급 당시와 같은 환경이어야 한다. 다르면 DEVICE_REQUEST_ORIGIN_MISMATCH
+```
+
 ## 주요 명령
 
 세부 필드·선택지는 각 명령의 `--help`에서 확인한다.
@@ -89,7 +105,7 @@ clack channel post create --from-markdown draft.md --status draft
 
 CLI 안내는 한국어다. `lang`은 API 콘텐츠 언어에 사용한다. `--verbose`는 메서드·경로·시간 계약만 표준 오류로 표시한다. `doctor`는 현재 연결·권한·만료와 서버 메타 API의 한도·읽기/쓰기·MCP·디바이스 연결 상태를 검사한다. 메타 조회 실패는 오류로 반환한다.
 
-`--json` 성공 결과는 `{ok:true,data,pagination?,time_contract}`, 실패 결과는 `{ok:false,status,code,message,retry_after?}`다. 시간 문자열은 API 원문과 `time_contract`를 함께 유지한다. 사람용 출력은 알려진 시각 필드에 중앙 파서를 적용하며 `--time utc`로 실제 UTC를 표시할 수 있다. 생년월일과 본문은 시간으로 변환하지 않는다.
+`--json` 성공 결과는 `{ok:true,data,pagination?,time_contract}`, 실패 결과는 `{ok:false,status,code,message,retry_after?}`다. 시간 문자열은 API 원문과 `time_contract`를 함께 유지한다. 사람용 출력은 알려진 시각 필드에 중앙 파서를 적용하며 `--time utc`로 실제 UTC를 표시할 수 있다. 생년월일과 본문은 시간으로 변환하지 않는다. 기본값(`--time local`)은 실행 환경의 로캘·타임존과 무관하게 `YYYY-MM-DD HH:MM KST` 고정 형식으로 표시한다(클랙 서비스는 항상 한국 시간 기준이다).
 
 | 종료 코드 | 의미 |
 |---|---|
@@ -124,7 +140,7 @@ clack skills --json
 
 원격 MCP는 프로필·상품·게시글·채널 도구 외에 스킬 목록·상세·업로드(`create_skill`→`request_skill_version_upload`→`complete_skill_version`)·심사 제출·공개(`submit_skill_version`, `release_skill_version`, `get_skill_version`), 승인된 HTML 콘텐츠 공개(`publish_creator_content`), 공유 문서 조회·숨김·삭제(`list_shared_documents`, `hide_shared_document`, `delete_shared_document` 등)도 제공한다. 각 도구는 해당 스코프(`skill:*`, `creator-content:publish`, `platform:read`/`platform:write`)를 가진 토큰에만 노출되며, 파괴적 도구는 `confirm:true` 전에는 미리보기만 반환한다. 원격 MCP는 로컬 파일을 읽지 못하므로 스킬 ZIP 전송은 `clack skill push` 또는 로컬 플랫폼 MCP의 `platform_skill_push`를 사용한다.
 
-에이전트 스킬은 별도 공개 저장소 [clack-project/skills](https://github.com/clack-project/skills)에서 `npx skills add clack-project/skills`로 설치한다. 설치·상품·콘텐츠·채널·프로필·MCP 6종을 제공하며 `clack skills`는 안내만 출력한다. 스킬만 선택 설치할 때는 `-s clack-products`, 전역 설치에는 `-g`를 사용한다.
+에이전트 스킬은 별도 공개 저장소 [clack-project/skills](https://github.com/clack-project/skills)에서 `npx skills add clack-project/skills`로 설치한다. 모두 10종으로, 일반 계정 관리용 6종(`clack-setup`·`clack-products`·`clack-content`·`clack-channel`·`clack-profile`·`clack-mcp`)과 크리에이터용 4종(`clack-creator-content`·`clack-page`·`clack-skill-package`·`clack-platform-data`)이다. 스킬에 필요한 CLI는 0.1.1 이상이다(`clack-mcp`는 CLI 없이도 쓸 수 있고, 설정 출력에 CLI를 쓸 때는 0.1.0 이상). `clack skills`는 설치를 실행하지 않고 안내만 출력한다. 스킬 목록과 스킬별 요구 CLI 버전도 함께 보여 준다. 스킬 하나만 선택 설치할 때는 `-s clack-products`, 여러 개는 `--skill clack-setup clack-creator-content clack-page`처럼 나열하고, 전역 설치에는 `-g`를 사용한다.
 
 ## 검증과 배포
 
@@ -140,7 +156,17 @@ GitHub Actions는 Linux·macOS·Windows × Node 20·22에서 `pnpm check`와 패
 
 ## HTML 콘텐츠 개발 테스트
 
-크리에이터 콘텐츠는 기존 게시글·포켓과 별도 권한을 사용합니다. 개발 환경에서 초안 등록·HTML/ZIP 업로드를 검증할 수 있습니다. 앱 확인·AI 심사 후 공개·채팅 제작은 아직 준비 중이며 CLI로 확인 요건을 우회할 수 없습니다.
+크리에이터 콘텐츠는 기존 게시글·포켓과 별도 권한을 사용합니다. 앱 확인·심사·공개 기능의 제공 여부는 환경마다 다르며 `clack content config`의 `app_preview_enabled`·`review_enabled`·`publication_enabled`로 확인합니다. CLI로 앱 확인 요건을 우회할 수 없습니다.
+
+| 명령 | 필요한 PAT 권한 |
+|---|---|
+| `config` | 없음(로그인 불필요) |
+| `list`, `status`, `preview` | `creator-content:read` |
+| `create`, `upload`, `complete`, `withdraw` | `creator-content:write` |
+| `submit` | `creator-content:write`와 `creator-content:publish` 모두 |
+| `publish`, `unpublish` | `creator-content:publish` |
+
+제출 순서는 `upload` → `preview`(같은 계정의 앱에서 열어 확인 완료) → `submit`입니다. 앱 확인 전에 제출하면 `PREVIEW_CONFIRMATION_REQUIRED`(409)가 반환됩니다.
 
 ```bash
 clack login --env dev --scopes creator-content:read,creator-content:write,creator-content:publish
@@ -151,7 +177,7 @@ clack content status --env dev <콘텐츠-UUID>
 clack content preview --env dev <콘텐츠-UUID> <버전-UUID>
 ```
 
-`content upload`는 최대 30 MiB의 HTML/ZIP을 체크섬과 함께 비공개 저장소에 전송합니다. 전송 후 완료 응답만 실패하면 출력된 `content complete` 명령으로 같은 업로드를 재처리할 수 있습니다. `--dry-run`은 파일·입력 검사만 수행합니다. `creator-content` 약식 scope는 읽기·쓰기만 요청하며 공개 권한은 명시적으로 요청해야 합니다. 정책 내용을 크리에이터 센터에서 확인한 뒤 `--policy-version`으로 동의한 버전을 지정하세요.
+`content upload`는 최대 30 MiB의 HTML/ZIP을 체크섬과 함께 비공개 저장소에 전송합니다. 전송 후 완료 응답만 실패하면 출력된 `content complete` 명령으로 같은 업로드를 재처리할 수 있습니다. `--dry-run`은 파일·입력 검사만 수행합니다. `creator-content` 약식 scope는 읽기·쓰기만 요청하며 `submit`·`publish`·`unpublish`에 필요한 `creator-content:publish`는 명시적으로 요청해야 합니다. 정책 내용을 크리에이터 센터에서 확인한 뒤 `--policy-version`으로 동의한 버전을 지정하세요.
 
 ZIP에 `clack.content.json` 또는 `.clack/`가 있으면 업로드 전에 선언·경로·크기와 프로필 파일 대응을 확인하고 표준 오류에 경고합니다. 선언이 없는 기존 정적 ZIP도 계속 업로드할 수 있습니다. 경고는 업로드를 막지 않으며 서버의 최종 검증·심사 결과를 대신하지 않습니다. 전송 없이 확인하려면 `content upload ... --dry-run`을 사용하세요.
 
@@ -163,7 +189,7 @@ clack content publish --env dev <콘텐츠-UUID> <버전-UUID>
 
 ## 스킬 패키지 개발 검증
 
-`clack.skill.json`과 `SKILL.md`가 있는 디렉터리 또는 ZIP을 검사합니다. 로컬 검증은 로그인 없이 실행할 수 있습니다. 서버 경로는 현재 개발 환경에서 기능 플래그가 켜진 계정과 `skill:write` 권한의 개인 액세스 토큰이 필요합니다.
+`clack.skill.json`과 `SKILL.md`가 있는 디렉터리 또는 ZIP을 검사합니다. 로컬 검증은 로그인 없이 실행할 수 있습니다. 서버 경로(`validate --remote`, `push` 등)는 현재 개발 환경에서 기능 플래그가 켜진 계정과 아래 표의 권한을 가진 개인 액세스 토큰이 필요합니다.
 
 ```sh
 clack skill validate ./my-skill
@@ -184,7 +210,15 @@ clack skill deprecate <스킬-UUID> --env dev
 
 `push`는 서버 사전 검증 후 새 스킬 또는 기존 스킬의 버전을 예약하고, 서명된 URL에 ZIP을 전송한 뒤 완료 처리합니다. 완료 응답만 실패하면 출력된 `skill complete` 명령으로 같은 버전을 재처리합니다. `--dry-run`은 서버를 변경하지 않습니다.
 
-`list`·`get`·`form`·`status`는 `skill:read`, `cancel`·`deprecate`는 `skill:write`, `submit`은 `skill:write`와 `skill:publish`, `release`는 `skill:publish` 권한이 필요합니다. 변경 명령은 개인 액세스 토큰(PAT)만 사용합니다. `submit`은 서버에서 검증 완료 상태와 패키지 해시를 조회한 뒤 확인을 받고 심사를 요청합니다. `--dry-run`은 제출 요청 없이 상태만 확인합니다. `release`는 심사를 통과한 버전만 허용하고, `--visibility public`은 별도 라이브러리 등재 승인이 필요합니다. 심사 판정은 관리자 화면에서 처리합니다. `deprecate`는 스킬 전체를 지원 종료 상태로 바꾸며 되돌릴 수 없습니다. 확인 후에만 실행되고(비대화형은 `--yes` 필요), 새 설치·새 제작은 막히지만 기존 콘텐츠가 고정한 버전은 계속 동작합니다.
+| 명령 | 필요한 PAT 권한 |
+|---|---|
+| `validate`(로컬) | 없음(로그인 불필요) |
+| `list`, `get`, `form`, `status` | `skill:read` |
+| `validate --remote`, `push`, `complete`, `cancel` | `skill:write` |
+| `submit` | `skill:write`와 `skill:publish` 모두 |
+| `release`, `deprecate` | `skill:publish` |
+
+`clack login --scopes skill` 약식은 읽기·쓰기만 요청하므로 제출·게시·지원 종료에는 `skill:publish`를 추가해야 합니다. 변경 명령은 개인 액세스 토큰(PAT)만 사용합니다. `submit`은 서버에서 검증 완료 상태와 패키지 해시를 조회한 뒤 확인을 받고 심사를 요청합니다. `--dry-run`은 제출 요청 없이 상태만 확인합니다. `release`는 심사를 통과한 버전만 허용하고, `--visibility public`은 별도 라이브러리 등재 승인이 필요합니다. 심사 판정은 관리자 화면에서 처리합니다. `deprecate`는 스킬 전체를 지원 종료 상태로 바꾸며 되돌릴 수 없습니다. 확인 후에만 실행되고(비대화형은 `--yes` 필요), 새 설치·새 제작은 막히지만 기존 콘텐츠가 고정한 버전은 계속 동작합니다.
 
 ### 스킬 플러그인 정적 검사(plugin-static-v2)
 
@@ -236,14 +270,14 @@ clack platform data patch scores slot --file ./score-patch.json --if-rev 1 --env
 clack platform data delete scores slot --env dev
 ```
 
-`clack mcp config --platform --env dev`는 서버 키 조회와 PAT 개인 도구를 함께 쓸 수 있는 로컬 stdio MCP 설정을 출력합니다. 에이전트 실행 환경에 서버 키 도구용 `CLACK_SERVER_KEY`, 스킬·콘텐츠 공개·공유 문서 도구용 `CLACK_TOKEN`(`platform:read`/`platform:write`, 필요 시 `skill:*`·`creator-content:publish`)을 각각 필요한 만큼만 설정합니다. 둘 다 로컬 프로세스 환경변수로만 전달되며 CLI 자격 파일에서 자동으로 읽지 않습니다. Claude 설정 조각은 기본 출력, Codex 설정 조각은 `--codex`로 받습니다. 설정에는 키·토큰 원문이 들어가지 않습니다.
+`clack mcp config --platform --env dev`는 서버 키 조회와 PAT 개인 도구를 함께 쓸 수 있는 로컬 stdio MCP 설정을 출력합니다. 에이전트 실행 환경에 서버 키 도구용 `CLACK_SERVER_KEY`, 스킬·제작·콘텐츠 공개·공유 문서 도구용 `CLACK_TOKEN`(`platform:read`/`platform:write`, 필요 시 `skill:*`, 제작은 `creator-content:write`, 콘텐츠 공개는 `creator-content:publish`)을 각각 필요한 만큼만 설정합니다. 둘 다 로컬 프로세스 환경변수로만 전달되며 CLI 자격 파일에서 자동으로 읽지 않습니다. Claude 설정 조각은 기본 출력, Codex 설정 조각은 `--codex`로 받습니다. 설정에는 키·토큰 원문이 들어가지 않습니다.
 
 ```sh
 clack mcp config --platform --env dev
 clack mcp config --platform --codex --env dev
 ```
 
-서버 키(`CLACK_SERVER_KEY`) 도구는 `platform_usage_get`, `platform_server_data_get/list/leaderboard/put/patch/delete`입니다. PAT(`CLACK_TOKEN`) 도구는 `platform_skill_list/get/push/status/submit/release`, `platform_content_publish`, `platform_shared_collections_list`, `platform_shared_documents_list`, `platform_shared_document_get/hide/delete`입니다. `platform_skill_push`는 `dir`(생략 시 현재 디렉터리)의 로컬 스킬 패키지를 검증·업로드합니다. 파괴적 도구(단일 문서 변경, 스킬 심사 제출·공개, 콘텐츠 공개, 공유 문서 숨김·삭제)는 먼저 미리보기와 `confirmation_required`를 반환하고, 입력에 `confirm: true`를 명시해야 실제 요청을 보냅니다. `mcp serve-platform`은 MCP 클라이언트가 실행하는 명령으로, 표준 출력은 JSON-RPC 메시지 전용입니다. 서버 키·PAT의 인증·스코프·테넌트 검사는 모두 API에서 수행합니다.
+서버 키(`CLACK_SERVER_KEY`) 도구는 `platform_usage_get`, `platform_server_data_get/list/leaderboard/put/patch/delete`입니다. PAT(`CLACK_TOKEN`) 도구는 `platform_authoring`, `platform_skill_list/get/push/status/submit/release`, `platform_content_publish`, `platform_shared_collections_list`, `platform_shared_documents_list`, `platform_shared_document_get/hide/delete`입니다. `platform_skill_push`는 `dir`(생략 시 현재 디렉터리)의 로컬 스킬 패키지를 검증·업로드합니다. 파괴적 도구(단일 문서 변경, 스킬 심사 제출·공개, 콘텐츠 공개, 공유 문서 숨김·삭제)는 먼저 미리보기와 `confirmation_required`를 반환하고, 입력에 `confirm: true`를 명시해야 실제 요청을 보냅니다. `mcp serve-platform`은 MCP 클라이언트가 실행하는 명령으로, 표준 출력은 JSON-RPC 메시지 전용입니다. 서버 키·PAT의 인증·스코프·테넌트 검사는 모두 API에서 수행합니다.
 
 ## 세계관·공개 홈 꾸미기
 
@@ -286,7 +320,7 @@ clack page submit PAGE_ID NEW_VERSION_ID
 clack page status PAGE_ID
 ```
 
-`presentation`은 재호출하면 다른 버전을 만들므로 응답이 유실되면 `status`의 버전 이력을 먼저 확인한다. 같은 업로드를 확정하는 `complete`의 멱등 재시도와 구분한다. 파일은 재사용해도 새 버전은 일일 업로드·논리 저장 한도에 포함된다. 외부 MCP에서도 `revise_custom_page_presentation`으로 같은 작업을 수행하며 상세 계약은 [HTML·페이지 제작 가이드](../clack-developer/content/guide/reference/content/upload-html.md)를 참조한다.
+`presentation`은 재호출하면 다른 버전을 만들므로 응답이 유실되면 `status`의 버전 이력을 먼저 확인한다. 같은 업로드를 확정하는 `complete`의 멱등 재시도와 구분한다. 파일은 재사용해도 새 버전은 일일 업로드·논리 저장 한도에 포함된다. 외부 MCP에서도 `revise_custom_page_presentation`으로 같은 작업을 수행한다. 헤더 값과 화면 표시·안전 영역 규칙은 스킬 저장소의 [페이지 헤더·화면 표시 규칙](https://github.com/clack-project/skills/blob/main/clack-page/references/presentation.md)을 참고한다.
 
 ### 이미지 화보·캐릭터 가져오기 제작
 

package/dist/cli.js

@@ -86,6 +86,20 @@ function requestTimeContract(method, path) {
   ].includes(path) || /^\/v4\/posts\/\d+(?:\/comments|\/merchandises)?$/.test(path) || /^\/v4\/merchandises\/\d+$/.test(path) || /^\/v4\/channels\/[^/]+(?:\/posts|\/series)?$/.test(path) || /^\/v4\/(?:channel-posts|channel-series)\/\d+$/.test(path) || /^\/v4\/search\/(?:posts|merchandises-with-post|merchandises-without-post|channel-posts|channels)$/.test(path)) return "utc-v1";
   return "legacy-kst";
 }
+var KST_PARTS = new Intl.DateTimeFormat("en-CA", {
+  timeZone: "Asia/Seoul",
+  year: "numeric",
+  month: "2-digit",
+  day: "2-digit",
+  hour: "2-digit",
+  minute: "2-digit",
+  hour12: false
+});
+function formatKst(date) {
+  const parts = Object.fromEntries(KST_PARTS.formatToParts(date).map((part) => [part.type, part.value]));
+  const hour = parts.hour === "24" ? "00" : parts.hour;
+  return `${parts.year}-${parts.month}-${parts.day} ${hour}:${parts.minute} KST`;
+}
 function formatInstant(value2, contract, mode) {
   const iso = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{3})?Z$/.test(value2);
   const legacyWallClock = contract === "legacy-kst" && /^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}(?:\.\d{3})?$/.test(value2);
@@ -93,10 +107,7 @@ function formatInstant(value2, contract, mode) {
   const source = contract === "legacy-kst" ? (iso ? value2.slice(0, -1) : value2.replace(" ", "T")) + "+09:00" : value2;
   const date = new Date(source);
   if (!Number.isFinite(date.getTime())) return value2;
-  return mode === "utc" ? date.toISOString() : new Intl.DateTimeFormat("ko-KR", {
-    dateStyle: "medium",
-    timeStyle: "long"
-  }).format(date);
+  return mode === "utc" ? date.toISOString() : formatKst(date);
 }
 var instantKeys = /* @__PURE__ */ new Set(["created_at", "updated_at", "published_at", "hidden_at", "owner_hidden_at", "delete_available_at", "lastBulkBumpedAt", "deleted_at", "expires_at", "revoked_at", "suspended_at", "last_used_at"]);
 function displayData(value2, contract, mode) {
@@ -139,7 +150,7 @@ function redact(value2) {
 // package.json
 var package_default = {
   name: "@clack-platform/cli",
-  version: "0.1.0",
+  version: "0.1.1",
   description: "\uD074\uB799 \uACC4\uC815\uC758 \uC0C1\uD488\xB7\uCF58\uD150\uCE20\xB7\uD504\uB85C\uD544\uC744 \uAD00\uB9AC\uD558\uB294 CLI",
   type: "module",
   bin: {
@@ -606,7 +617,7 @@ async function authoringRequest(client, raw, surface = "cli") {
   return client.request(action === "save" ? "PATCH" : "POST", `${path}/${action === "save" ? "form" : action}`, { body });
 }
 function registerAuthoringCommands(program2, runtime2) {
-  runtime2.action(program2.command("authoring").description("\uACF5\uAC1C \uC2A4\uD0AC\uB85C \uC81C\uC791\xB7\uC790\uC0B0 \uC5C5\uB85C\uB4DC\xB7\uC774\uBBF8\uC9C0 \uC0DD\uC131\xB7\uD328\uD0A4\uC9D5").requiredOption("--input <file>", "action\uACFC \uC694\uCCAD \uAC12\uC774 \uC788\uB294 JSON \uD30C\uC77C"), async (ctx, _args, opts) => {
+  runtime2.action(program2.command("authoring").description("\uACF5\uAC1C \uC2A4\uD0AC\uB85C \uC81C\uC791\xB7\uC790\uC0B0 \uC5C5\uB85C\uB4DC\xB7\uC774\uBBF8\uC9C0 \uC0DD\uC131\xB7\uD328\uD0A4\uC9D5 (creator-content:write)").requiredOption("--input <file>", "action\uACFC \uC694\uCCAD \uAC12\uC774 \uC788\uB294 JSON \uD30C\uC77C"), async (ctx, _args, opts) => {
     const input = await readPlatformBodyFile(opts.input);
     if (ctx.options.dryRun) {
       const parsed = authoringInput.safeParse(input);
@@ -667,7 +678,7 @@ var ConfigStore = class {
     try {
       const stat3 = await lstat3(path);
       if (!stat3.isFile() || stat3.isSymbolicLink()) throw new CliError("\uC124\uC815 \uD30C\uC77C\uC740 \uC77C\uBC18 \uD30C\uC77C\uC774\uC5B4\uC57C \uD569\uB2C8\uB2E4.", "CONFIG_UNSAFE");
-      if (name2 === "credentials.json" && process.platform !== "win32") await chmod(path, 384);
+      if ((name2 === "credentials.json" || name2 === "device-request.json") && process.platform !== "win32") await chmod(path, 384);
       const body = JSON.parse(await readFile3(path, "utf8"));
       if (!body || typeof body !== "object" || !("profiles" in body) || !body.profiles || typeof body.profiles !== "object" || Array.isArray(body.profiles)) throw new Error("\uD615\uC2DD");
       return body;
@@ -737,6 +748,21 @@ var ConfigStore = class {
     delete all.profiles[validateProfile(profile)];
     await this.write("credentials.json", all);
   }
+  /** 발급한 디바이스 요청을 저장해 `login`이 같은 턴에서 끝나도 `login --resume`으로 이어받을 수 있게 한다(E1). */
+  async savePendingDeviceRequest(profile, request) {
+    const all = await this.read("device-request.json");
+    all.profiles[validateProfile(profile)] = request;
+    await this.write("device-request.json", all);
+  }
+  async getPendingDeviceRequest(profile) {
+    return (await this.read("device-request.json")).profiles[validateProfile(profile)];
+  }
+  /** 만료·거부·소비 등으로 더 이상 재개할 수 없는 요청을 정리한다. 네트워크 오류처럼 일시적인 실패에는 호출하지 않는다. */
+  async removePendingDeviceRequest(profile) {
+    const all = await this.read("device-request.json");
+    delete all.profiles[validateProfile(profile)];
+    await this.write("device-request.json", all);
+  }
   async getConfig(profile) {
     return (await this.read("config.json")).profiles[validateProfile(profile)] ?? {};
   }
@@ -846,6 +872,57 @@ async function pollDevice(api, request, deps = {
   }
   throw new CliError("\uC2B9\uC778 \uCF54\uB4DC\uAC00 \uB9CC\uB8CC\uB418\uC5C8\uC2B5\uB2C8\uB2E4. clack login\uC744 \uB2E4\uC2DC \uC2E4\uD589\uD558\uC138\uC694.", "EXPIRED_TOKEN", 410);
 }
+var TERMINAL_DEVICE_FAILURE_CODES = ["EXPIRED_TOKEN", "ACCESS_DENIED", "DEVICE_CODE_CONSUMED", "DEVICE_AUTHORIZATION_NOT_FOUND"];
+function validateVerificationUrl(href2) {
+  let verification;
+  try {
+    verification = new URL(href2);
+  } catch {
+    throw new CliError("\uC2B9\uC778 \uD398\uC774\uC9C0 \uC8FC\uC18C\uAC00 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.", "INVALID_RESPONSE", 0);
+  }
+  if (verification.protocol !== "https:" || !["clack.kr", "dev.clack.kr", "www.clack.kr"].includes(verification.hostname) || verification.username || verification.password || verification.port) throw new CliError("\uC2B9\uC778 \uD398\uC774\uC9C0 \uC8FC\uC18C\uAC00 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.", "INVALID_RESPONSE", 0);
+  return verification;
+}
+function validateFreshDeviceRequest(request) {
+  if (!/^dvc_[a-f0-9]{64}$/.test(request.device_code) || !/^[A-Z2-9]{4}-[A-Z2-9]{4}$/.test(request.user_code) || !Number.isFinite(request.expires_in) || request.expires_in <= 0 || request.expires_in > 600 || !Number.isFinite(request.interval) || request.interval < 1) throw new CliError("\uC2B9\uC778 \uC694\uCCAD \uC751\uB2F5\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.", "INVALID_RESPONSE", 0);
+  return validateVerificationUrl(request.verification_uri_complete);
+}
+function validatePendingRequest(pending) {
+  if (!/^dvc_[a-f0-9]{64}$/.test(pending.device_code) || !/^[A-Z2-9]{4}-[A-Z2-9]{4}$/.test(pending.user_code) || !Number.isFinite(pending.interval) || pending.interval < 1 || !Number.isFinite(Date.parse(pending.expires_at))) {
+    throw new CliError("\uC800\uC7A5\uB41C \uB85C\uADF8\uC778 \uC694\uCCAD \uC815\uBCF4\uB97C \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. clack login\uC73C\uB85C \uC0C8\uB85C \uC2DC\uC791\uD558\uC138\uC694.", "CONFIG_UNSAFE");
+  }
+  return validateVerificationUrl(pending.verification_uri_complete);
+}
+function newPendingRequest(request, scopes, baseUrl) {
+  return {
+    device_code: request.device_code,
+    user_code: request.user_code,
+    verification_uri: request.verification_uri,
+    verification_uri_complete: request.verification_uri_complete,
+    interval: request.interval,
+    scopes,
+    base_url: baseUrl,
+    expires_at: new Date(Date.now() + request.expires_in * 1e3).toISOString(),
+    created_at: (/* @__PURE__ */ new Date()).toISOString()
+  };
+}
+function remainingDeviceRequest(pending) {
+  return {
+    device_code: pending.device_code,
+    user_code: pending.user_code,
+    verification_uri: pending.verification_uri,
+    verification_uri_complete: pending.verification_uri_complete,
+    interval: pending.interval,
+    expires_in: Math.max(0, Math.floor((Date.parse(pending.expires_at) - Date.now()) / 1e3))
+  };
+}
+async function announceDeviceCode(verification, userCode, opts, json2) {
+  process.stderr.write(redactText(`\uC571 \uB9C8\uC774\uD398\uC774\uC9C0 \u2192 \uACC4\uC815 \u2192 \uB0B4 \uC815\uBCF4 \uC218\uC815\uD558\uAE30 \u2192 \uC678\uBD80 \uB3C4\uAD6C \uC5F0\uACB0 \u2192 \uCF54\uB4DC\uB85C \uC2B9\uC778\uC5D0\uC11C ${userCode} \uC785\uB825
+${verification.href}
+`));
+  if (opts.qr !== false && process.stderr.isTTY && !json2) qr.generate(verification.href, { small: true }, (value2) => process.stderr.write(value2 + "\n"));
+  if (opts.browser && process.stdin.isTTY && !json2) await open2(verification.href).catch(() => process.stderr.write("\uBE0C\uB77C\uC6B0\uC800\uB97C \uC5F4\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4. \uC704 \uC8FC\uC18C\uB098 \uC571\uC5D0\uC11C \uC2B9\uC778\uD558\uC138\uC694.\n"));
+}
 async function tokenInput(option) {
   if (typeof option === "string") return validateToken(option);
   if (process.env.CLACK_TOKEN) return validateToken(process.env.CLACK_TOKEN);
@@ -858,11 +935,12 @@ async function tokenInput(option) {
   return validateToken(value2);
 }
 function registerAuthCommands(program2, runtime2, store2) {
-  runtime2.action(program2.command("login").description("\uC571\uC5D0\uC11C \uC2B9\uC778\uD558\uAC70\uB098 \uAC1C\uC778 \uC561\uC138\uC2A4 \uD1A0\uD070\uC73C\uB85C \uC5F0\uACB0").option("--token [pat]", "\uD1A0\uD070 \uC785\uB825. \uAC12\uC744 \uC0DD\uB7B5\uD558\uBA74 \uC228\uAE40 \uD504\uB86C\uD504\uD2B8 \uB610\uB294 \uD45C\uC900 \uC785\uB825 \uC0AC\uC6A9").option("--scopes <scopes>", "\uC694\uCCAD \uAD8C\uD55C (\uC27C\uD45C \uAD6C\uBD84)", "profile:read").option("--no-browser", "\uBE0C\uB77C\uC6B0\uC800 \uC790\uB3D9 \uC5F4\uAE30 \uC0DD\uB7B5").option("--no-qr", "QR \uCF54\uB4DC \uCD9C\uB825 \uC0DD\uB7B5 (\uC5D0\uC774\uC804\uD2B8\xB7\uBE44\uB300\uD654\uD615 \uD658\uACBD\uC5D0 \uC801\uD569)").option("--label <name>", "\uAE30\uAE30 \uC774\uB984", hostname()), async (ctx, _args, opts) => {
+  runtime2.action(program2.command("login").description("\uC571\uC5D0\uC11C \uC2B9\uC778\uD558\uAC70\uB098 \uAC1C\uC778 \uC561\uC138\uC2A4 \uD1A0\uD070\uC73C\uB85C \uC5F0\uACB0").option("--token [pat]", "\uD1A0\uD070 \uC785\uB825. \uAC12\uC744 \uC0DD\uB7B5\uD558\uBA74 \uC228\uAE40 \uD504\uB86C\uD504\uD2B8 \uB610\uB294 \uD45C\uC900 \uC785\uB825 \uC0AC\uC6A9").option("--scopes <scopes>", "\uC694\uCCAD \uAD8C\uD55C (\uC27C\uD45C \uAD6C\uBD84). product \uAC19\uC740 \uBB36\uC74C \uC774\uB984\uC740 :read\xB7:write\uB9CC \uC694\uCCAD\uD558\uBA70, \uC81C\uCD9C\xB7\uAC8C\uC2DC\uC5D0 \uD544\uC694\uD55C *:publish\uB294 \uB530\uB85C \uC801\uB294\uB2E4", "profile:read").option("--no-browser", "\uBE0C\uB77C\uC6B0\uC800 \uC790\uB3D9 \uC5F4\uAE30 \uC0DD\uB7B5").option("--no-qr", "QR \uCF54\uB4DC \uCD9C\uB825 \uC0DD\uB7B5 (\uC5D0\uC774\uC804\uD2B8\xB7\uBE44\uB300\uD654\uD615 \uD658\uACBD\uC5D0 \uC801\uD569)").option("--label <name>", "\uAE30\uAE30 \uC774\uB984", hostname()).option("--no-wait", "\uCF54\uB4DC\uB9CC \uBC1C\uAE09\uD558\uACE0 \uC2B9\uC778\uC744 \uAE30\uB2E4\uB9AC\uC9C0 \uC54A\uC74C (\uAC19\uC740 \uD134\uC744 \uB05D\uB0B4\uC57C \uD558\uB294 \uC5D0\uC774\uC804\uD2B8\uC5D0 \uC801\uD569, \uC774\uD6C4 clack login --resume\uC73C\uB85C \uC774\uC5B4\uBC1B\uC74C)").option("--resume", "\uC774\uC804\uC5D0 \uBC1C\uAE09\uD588\uC9C0\uB9CC \uC544\uC9C1 \uB9CC\uB8CC\uB418\uC9C0 \uC54A\uC740 \uC694\uCCAD\uC744 \uC774\uC5B4\uC11C \uAE30\uB2E4\uB9BC (\uC0C8 \uCF54\uB4DC\uB97C \uBC1C\uAE09\uD558\uC9C0 \uC54A\uC74C)"), async (ctx, _args, opts) => {
     if (ctx.options.dryRun) throw new CliError("login\uC740 --dry-run\uC744 \uC9C0\uC6D0\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.");
     const resolved = await store2.resolve(ctx.options, true);
     let credential;
     if (opts.token !== void 0 || process.env.CLACK_TOKEN) {
+      if (opts.resume) throw new CliError("--resume\uC740 --token\uACFC \uD568\uAED8 \uC4F8 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.");
       const token = await tokenInput(opts.token);
       const api = new ApiClient({ baseUrl: resolved.baseUrl, token, verbose: ctx.options.verbose });
       const row = await currentToken(api, token);
@@ -873,36 +951,77 @@ function registerAuthCommands(program2, runtime2, store2) {
         credential.user = { id: result.data.id, name: result.data.name, avatar: result.data.avatar };
       }
     } else {
-      const scopes = parseScopes(opts.scopes);
-      if (typeof opts.label !== "string" || !opts.label.trim() || opts.label.length > 120) throw new CliError("\uAE30\uAE30 \uC774\uB984\uC740 1~120\uC790\uC5EC\uC57C \uD569\uB2C8\uB2E4.");
-      const { data: request } = await ctx.api.request("POST", "/v4/auth/device/code", { auth: false, body: {
-        client_name: "cli",
-        client_version: VERSION,
-        device_name: opts.label,
-        scopes
-      } });
-      rememberSecret(request.device_code);
-      if (!/^dvc_[a-f0-9]{64}$/.test(request.device_code) || !/^[A-Z2-9]{4}-[A-Z2-9]{4}$/.test(request.user_code) || !Number.isFinite(request.expires_in) || request.expires_in <= 0 || request.expires_in > 600 || !Number.isFinite(request.interval) || request.interval < 1) throw new CliError("\uC2B9\uC778 \uC694\uCCAD \uC751\uB2F5\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.", "INVALID_RESPONSE", 0);
-      const verification = new URL(request.verification_uri_complete);
-      if (verification.protocol !== "https:" || !["clack.kr", "dev.clack.kr", "www.clack.kr"].includes(verification.hostname) || verification.username || verification.password || verification.port) throw new CliError("\uC2B9\uC778 \uD398\uC774\uC9C0 \uC8FC\uC18C\uAC00 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.", "INVALID_RESPONSE", 0);
-      process.stderr.write(redactText(`\uC571 \uB9C8\uC774\uD398\uC774\uC9C0 \u2192 \uACC4\uC815 \u2192 \uB0B4 \uC815\uBCF4 \uC218\uC815\uD558\uAE30 \u2192 \uC678\uBD80 \uB3C4\uAD6C \uC5F0\uACB0 \u2192 \uCF54\uB4DC\uB85C \uC2B9\uC778\uC5D0\uC11C ${request.user_code} \uC785\uB825
-${verification.href}
-`));
-      if (opts.qr !== false && process.stderr.isTTY && !ctx.options.json) qr.generate(verification.href, { small: true }, (value2) => process.stderr.write(value2 + "\n"));
-      if (opts.browser && process.stdin.isTTY && !ctx.options.json) await open2(verification.href).catch(() => process.stderr.write("\uBE0C\uB77C\uC6B0\uC800\uB97C \uC5F4\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4. \uC704 \uC8FC\uC18C\uB098 \uC571\uC5D0\uC11C \uC2B9\uC778\uD558\uC138\uC694.\n"));
-      const grant = await pollDevice(ctx.api, request);
+      let pending;
+      if (opts.resume) {
+        const stored = await store2.getPendingDeviceRequest(resolved.profile);
+        if (!stored) throw new CliError("\uB300\uAE30 \uC911\uC778 \uB85C\uADF8\uC778 \uC694\uCCAD\uC774 \uC5C6\uC2B5\uB2C8\uB2E4. clack login\uC73C\uB85C \uC0C8\uB85C \uC2DC\uC791\uD558\uC138\uC694.", "DEVICE_REQUEST_NOT_FOUND", 404);
+        if ((ctx.options.env || ctx.options.baseUrl) && resolved.baseUrl !== stored.base_url) {
+          throw new CliError(`\uB300\uAE30 \uC911\uC778 \uC694\uCCAD\uC740 ${stored.base_url}\uC5D0 \uBC1C\uAE09\uB418\uC5C8\uC2B5\uB2C8\uB2E4. --env\xB7--base-url \uC5C6\uC774 clack login --resume\uC744 \uC2E4\uD589\uD558\uC138\uC694.`, "DEVICE_REQUEST_ORIGIN_MISMATCH", 401);
+        }
+        pending = stored;
+      } else {
+        const scopes = parseScopes(opts.scopes);
+        if (typeof opts.label !== "string" || !opts.label.trim() || opts.label.length > 120) throw new CliError("\uAE30\uAE30 \uC774\uB984\uC740 1~120\uC790\uC5EC\uC57C \uD569\uB2C8\uB2E4.");
+        const { data: request } = await ctx.api.request("POST", "/v4/auth/device/code", { auth: false, body: {
+          client_name: "cli",
+          client_version: VERSION,
+          device_name: opts.label,
+          scopes
+        } });
+        rememberSecret(request.device_code);
+        validateFreshDeviceRequest(request);
+        pending = newPendingRequest(request, scopes, resolved.baseUrl);
+        await store2.savePendingDeviceRequest(resolved.profile, pending);
+      }
+      rememberSecret(pending.device_code);
+      const verification = validatePendingRequest(pending);
+      await announceDeviceCode(verification, pending.user_code, opts, Boolean(ctx.options.json));
+      if (opts.wait === false) {
+        const expiry = formatInstant(pending.expires_at, "utc-v1", ctx.options.time ?? "local");
+        if (ctx.options.json) {
+          ctx.output({
+            status: "pending",
+            user_code: pending.user_code,
+            verification_uri: pending.verification_uri,
+            verification_uri_complete: pending.verification_uri_complete,
+            expires_at: pending.expires_at,
+            interval: pending.interval,
+            message: "\uC571\uC5D0\uC11C \uC2B9\uC778\uD55C \uB4A4 \uC774\uC5B4\uC11C \uBC1B\uC73C\uB824\uBA74 clack login --resume\uC744 \uC2E4\uD589\uD558\uC138\uC694."
+          });
+        } else {
+          process.stdout.write(redactText([
+            `\uC2B9\uC778\uC744 \uAE30\uB2E4\uB9AC\uC9C0 \uC54A\uACE0 \uBC18\uD658\uD569\uB2C8\uB2E4. (\uD504\uB85C\uD544: ${resolved.profile}, \uC8FC\uC18C: ${pending.base_url})`,
+            `\uCF54\uB4DC\uB294 ${expiry}\uAE4C\uC9C0 \uC720\uD6A8\uD569\uB2C8\uB2E4.`,
+            "\uC571\uC5D0\uC11C \uC2B9\uC778\uD55C \uB4A4 \uC774\uC5B4\uC11C \uBC1B\uC73C\uB824\uBA74: clack login --resume"
+          ].join("\n") + "\n"));
+        }
+        return;
+      }
+      const api = opts.resume ? new ApiClient({ baseUrl: pending.base_url, verbose: ctx.options.verbose }) : ctx.api;
+      let grant;
+      try {
+        grant = await pollDevice(api, remainingDeviceRequest(pending));
+      } catch (error2) {
+        if (error2 instanceof CliError && TERMINAL_DEVICE_FAILURE_CODES.includes(error2.code)) {
+          await store2.removePendingDeviceRequest(resolved.profile).catch(() => {
+          });
+        }
+        throw error2;
+      }
       const token = validateToken(grant.token);
-      if (!Array.isArray(grant.scopes) || grant.scopes.some((scope) => !scopes.includes(scope)) || !Number.isFinite(Date.parse(grant.expires_at)) || !grant.user || !Number.isSafeInteger(grant.user.id)) throw new CliError("\uAD50\uBD80 \uC751\uB2F5\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. \uC571\uC5D0\uC11C \uC5F0\uACB0 \uBAA9\uB85D\uC744 \uD655\uC778\uD558\uC138\uC694.", "INVALID_RESPONSE", 0);
-      credential = { token, base_url: resolved.baseUrl, scopes: grant.scopes, expires_at: grant.expires_at, user: grant.user };
+      if (!Array.isArray(grant.scopes) || grant.scopes.some((scope) => !pending.scopes.includes(scope)) || !Number.isFinite(Date.parse(grant.expires_at)) || !grant.user || !Number.isSafeInteger(grant.user.id)) throw new CliError("\uAD50\uBD80 \uC751\uB2F5\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. \uC571\uC5D0\uC11C \uC5F0\uACB0 \uBAA9\uB85D\uC744 \uD655\uC778\uD558\uC138\uC694.", "INVALID_RESPONSE", 0);
+      credential = { token, base_url: pending.base_url, scopes: grant.scopes, expires_at: grant.expires_at, user: grant.user };
+      await store2.removePendingDeviceRequest(resolved.profile).catch(() => {
+      });
     }
     await store2.saveCredential(resolved.profile, credential);
-    await store2.setConfig(resolved.profile, "base_url", resolved.baseUrl);
+    await store2.setConfig(resolved.profile, "base_url", credential.base_url);
     if (ctx.options.json) {
       ctx.output({ profile: resolved.profile, user: credential.user ?? null, scopes: credential.scopes, expires_at: credential.expires_at, message: "\uC5F0\uACB0\uB418\uC5C8\uC2B5\uB2C8\uB2E4." });
     } else {
       const expiry = formatInstant(credential.expires_at, "utc-v1", ctx.options.time ?? "local");
       process.stdout.write(redactText([
-        `\uC5F0\uACB0\uB418\uC5C8\uC2B5\uB2C8\uB2E4. (\uD504\uB85C\uD544: ${resolved.profile}, \uC8FC\uC18C: ${resolved.baseUrl})`,
+        `\uC5F0\uACB0\uB418\uC5C8\uC2B5\uB2C8\uB2E4. (\uD504\uB85C\uD544: ${resolved.profile}, \uC8FC\uC18C: ${credential.base_url})`,
         credential.user ? `\uC0AC\uC6A9\uC790: ${credential.user.name ?? "\uC774\uB984 \uC5C6\uC74C"} (#${credential.user.id})` : "\uC0AC\uC6A9\uC790: profile:read \uAD8C\uD55C\uC774 \uC5C6\uC5B4 \uC870\uD68C\uD558\uC9C0 \uC54A\uC74C",
         `\uAD8C\uD55C: ${credential.scopes.join(", ")}`,
         `\uB9CC\uB8CC: ${expiry}`
@@ -2086,15 +2205,15 @@ var keyId = (value2) => {
   return id2;
 };
 function registerContentCommands(program2, runtime2) {
-  const content = program2.command("content").description("HTML \uCF58\uD150\uCE20 \uB4F1\uB85D\xB7\uC571 \uD655\uC778\xB7\uC2EC\uC0AC \uAD00\uB9AC");
-  runtime2.action(content.command("config"), async (ctx) => ctx.output(await ctx.api.request("GET", "/v4/creator/config", { auth: false })));
-  runtime2.action(content.command("list"), async (ctx) => ctx.output(await ctx.api.request("GET", "/v4/creator/contents")));
-  runtime2.action(content.command("status <id>"), async (ctx, [id2]) => ctx.output(await ctx.api.request("GET", `/v4/creator/contents/${uuid(id2)}`)));
-  runtime2.action(content.command("create").requiredOption("--title <text>", "\uC81C\uBAA9").option("--description <text>", "\uC124\uBA85", "").option("--kind <kind>", "html|gallery|slideshow|video", "html").requiredOption("--policy-version <version>", "\uB3D9\uC758\uD55C \uCF58\uD150\uCE20 \uC81C\uACF5 \uC815\uCC45 \uBC84\uC804"), async (ctx, _args, opts) => {
+  const content = program2.command("content").description("HTML \uCF58\uD150\uCE20 \uB4F1\uB85D\xB7\uC571 \uD655\uC778\xB7\uC2EC\uC0AC \uAD00\uB9AC (creator-content:read\xB7write\xB7publish)");
+  runtime2.action(content.command("config").description("\uCF58\uD150\uCE20 \uAE30\uB2A5 \uC81C\uACF5 \uC5EC\uBD80\xB7\uC124\uC815 \uC870\uD68C (\uB85C\uADF8\uC778 \uBD88\uD544\uC694)"), async (ctx) => ctx.output(await ctx.api.request("GET", "/v4/creator/config", { auth: false })));
+  runtime2.action(content.command("list").description("\uB0B4 \uCF58\uD150\uCE20 \uBAA9\uB85D (creator-content:read)"), async (ctx) => ctx.output(await ctx.api.request("GET", "/v4/creator/contents")));
+  runtime2.action(content.command("status <id>").description("\uCF58\uD150\uCE20\uC640 \uBC84\uC804\uBCC4 \uC5C5\uB85C\uB4DC\xB7\uC2EC\uC0AC\xB7\uACF5\uAC1C \uC0C1\uD0DC (creator-content:read)"), async (ctx, [id2]) => ctx.output(await ctx.api.request("GET", `/v4/creator/contents/${uuid(id2)}`)));
+  runtime2.action(content.command("create").description("\uCF58\uD150\uCE20 \uCD08\uC548 \uB4F1\uB85D (creator-content:write)").requiredOption("--title <text>", "\uC81C\uBAA9").option("--description <text>", "\uC124\uBA85", "").option("--kind <kind>", "html|gallery|slideshow|video", "html").requiredOption("--policy-version <version>", "\uB3D9\uC758\uD55C \uCF58\uD150\uCE20 \uC81C\uACF5 \uC815\uCC45 \uBC84\uC804"), async (ctx, _args, opts) => {
     const body = parse(createSchema, { title: opts.title, description: opts.description, kind: opts.kind, policy_version: opts.policyVersion });
     await mutate(ctx, "POST", "/v4/creator/contents", body);
   });
-  runtime2.action(content.command("upload <id> <file>").addOption(new Option("--header <mode>", "\uD5E4\uB354 \uD45C\uC2DC").choices(["fixed", "scroll_hide", "translucent_scroll_hide", "floating_close"])).addOption(new Option("--color <scheme>", "\uD5E4\uB354 \uC0C9\uC0C1").choices(["light", "dark"])), async (ctx, [id2, file], opts) => {
+  runtime2.action(content.command("upload <id> <file>").description("HTML/ZIP \uC5C5\uB85C\uB4DC\uB85C \uC0C8 \uBE44\uACF5\uAC1C \uBC84\uC804 \uC0DD\uC131 (creator-content:write)").addOption(new Option("--header <mode>", "\uD5E4\uB354 \uD45C\uC2DC").choices(["fixed", "scroll_hide", "translucent_scroll_hide", "floating_close"])).addOption(new Option("--color <scheme>", "\uD5E4\uB354 \uC0C9\uC0C1").choices(["light", "dark"])), async (ctx, [id2, file], opts) => {
     const path = `/v4/creator/contents/${uuid(id2)}`;
     const prepared = await prepareContentFile(file);
     for (const warning of prepared.warnings) process.stderr.write(`\uD328\uD0A4\uC9C0 \uACBD\uACE0: ${warning}
@@ -2110,39 +2229,39 @@ function registerContentCommands(program2, runtime2) {
       throw error2;
     }
   });
-  runtime2.action(content.command("complete <id> <upload-id>"), async (ctx, [id2, uploadId]) => mutate(ctx, "POST", `/v4/creator/contents/${uuid(id2)}/uploads/${uuid(uploadId)}/complete`));
-  runtime2.action(content.command("preview <id> <version-id>"), async (ctx, [id2, versionId]) => ctx.output(await ctx.api.request("GET", `/v4/creator/contents/${uuid(id2)}/versions/${uuid(versionId)}/preview`)));
-  runtime2.action(content.command("submit <id> <version-id>"), async (ctx, [id2, versionId]) => mutate(ctx, "POST", `/v4/creator/contents/${uuid(id2)}/versions/${uuid(versionId)}/submit`, { publish_on_approval: true }, "\uC774 \uBC84\uC804\uC744 \uC2EC\uC0AC\uD558\uACE0 \uD1B5\uACFC\uD558\uBA74 \uACF5\uAC1C\uD560\uAE4C\uC694?"));
-  runtime2.action(content.command("withdraw <id> <version-id>"), async (ctx, [id2, versionId]) => mutate(ctx, "POST", `/v4/creator/contents/${uuid(id2)}/versions/${uuid(versionId)}/review/cancel`, void 0, "\uC774 \uBC84\uC804\uC758 \uC2EC\uC0AC\uB97C \uCDE8\uC18C\uD560\uAE4C\uC694?"));
-  runtime2.action(content.command("publish <id> <version-id>"), async (ctx, [id2, versionId]) => mutate(ctx, "POST", `/v4/creator/contents/${uuid(id2)}/versions/${uuid(versionId)}/publish`, void 0, "\uC2B9\uC778\uB41C \uC774 \uBC84\uC804\uC744 \uACF5\uAC1C\uD560\uAE4C\uC694?"));
-  runtime2.action(content.command("unpublish <id>"), async (ctx, [id2]) => mutate(ctx, "POST", `/v4/creator/contents/${uuid(id2)}/unpublish`, void 0, "\uCF58\uD150\uCE20 \uAC8C\uC2DC\uB97C \uC911\uB2E8\uD560\uAE4C\uC694?"));
+  runtime2.action(content.command("complete <id> <upload-id>").description("\uC5C5\uB85C\uB4DC \uC644\uB8CC \uCC98\uB9AC \uC7AC\uC2DC\uB3C4 (creator-content:write)"), async (ctx, [id2, uploadId]) => mutate(ctx, "POST", `/v4/creator/contents/${uuid(id2)}/uploads/${uuid(uploadId)}/complete`));
+  runtime2.action(content.command("preview <id> <version-id>").description("\uC571 \uD655\uC778\uC6A9 \uBBF8\uB9AC\uBCF4\uAE30 \uB9C1\uD06C \uC870\uD68C (creator-content:read)"), async (ctx, [id2, versionId]) => ctx.output(await ctx.api.request("GET", `/v4/creator/contents/${uuid(id2)}/versions/${uuid(versionId)}/preview`)));
+  runtime2.action(content.command("submit <id> <version-id>").description("\uC571\uC5D0\uC11C \uD655\uC778 \uC644\uB8CC\uD55C \uBC84\uC804\uC758 \uC2EC\uC0AC \uC81C\uCD9C, \uD1B5\uACFC \uC2DC \uACF5\uAC1C (creator-content:write\uC640 creator-content:publish \uB458 \uB2E4 \uD544\uC694)"), async (ctx, [id2, versionId]) => mutate(ctx, "POST", `/v4/creator/contents/${uuid(id2)}/versions/${uuid(versionId)}/submit`, { publish_on_approval: true }, "\uC774 \uBC84\uC804\uC744 \uC2EC\uC0AC\uD558\uACE0 \uD1B5\uACFC\uD558\uBA74 \uACF5\uAC1C\uD560\uAE4C\uC694?"));
+  runtime2.action(content.command("withdraw <id> <version-id>").description("\uC9C4\uD589 \uC911\uC778 \uC2EC\uC0AC \uCDE8\uC18C (creator-content:write)"), async (ctx, [id2, versionId]) => mutate(ctx, "POST", `/v4/creator/contents/${uuid(id2)}/versions/${uuid(versionId)}/review/cancel`, void 0, "\uC774 \uBC84\uC804\uC758 \uC2EC\uC0AC\uB97C \uCDE8\uC18C\uD560\uAE4C\uC694?"));
+  runtime2.action(content.command("publish <id> <version-id>").description("\uC2B9\uC778\uB410\uC9C0\uB9CC \uACF5\uAC1C\uD558\uC9C0 \uC54A\uC740 \uBC84\uC804 \uACF5\uAC1C (creator-content:publish)"), async (ctx, [id2, versionId]) => mutate(ctx, "POST", `/v4/creator/contents/${uuid(id2)}/versions/${uuid(versionId)}/publish`, void 0, "\uC2B9\uC778\uB41C \uC774 \uBC84\uC804\uC744 \uACF5\uAC1C\uD560\uAE4C\uC694?"));
+  runtime2.action(content.command("unpublish <id>").description("\uCF58\uD150\uCE20 \uAC8C\uC2DC \uC911\uB2E8 (creator-content:publish)"), async (ctx, [id2]) => mutate(ctx, "POST", `/v4/creator/contents/${uuid(id2)}/unpublish`, void 0, "\uCF58\uD150\uCE20 \uAC8C\uC2DC\uB97C \uC911\uB2E8\uD560\uAE4C\uC694?"));
   const serverKeys = content.command("server-keys").description("\uCF58\uD150\uCE20 \uC11C\uBC84 \uD0A4 \uC870\uD68C\xB7\uD3D0\uAE30 (platform:read\xB7platform:write, \uBC1C\uAE09\xB7\uD68C\uC804\uC740 \uD06C\uB9AC\uC5D0\uC774\uD130 \uC13C\uD130)");
-  runtime2.action(serverKeys.command("list <id>"), async (ctx, [id2]) => ctx.output(await ctx.api.request("GET", `/v4/creator/contents/${uuid(id2)}/server-keys`)));
+  runtime2.action(serverKeys.command("list <id>").description("\uC11C\uBC84 \uD0A4 \uBAA9\uB85D (platform:read)"), async (ctx, [id2]) => ctx.output(await ctx.api.request("GET", `/v4/creator/contents/${uuid(id2)}/server-keys`)));
   for (const name2 of ["issue", "rotate"]) {
     runtime2.action(serverKeys.command(name2).description("\uD06C\uB9AC\uC5D0\uC774\uD130 \uC13C\uD130 \uC804\uC6A9 \uC548\uB0B4").argument("[args...]").allowUnknownOption(), async () => {
       throw new CliError(SERVER_KEY_CENTER_ONLY, "SERVER_KEY_CENTER_ONLY", 403);
     });
   }
-  runtime2.action(serverKeys.command("revoke <id> <key-id>"), async (ctx, [id2, keyIdValue]) => mutate(ctx, "DELETE", `/v4/creator/contents/${uuid(id2)}/server-keys/${keyId(keyIdValue)}`, void 0, "\uC774 \uC11C\uBC84 \uD0A4\uB97C \uC989\uC2DC \uD3D0\uAE30\uD560\uAE4C\uC694?"));
+  runtime2.action(serverKeys.command("revoke <id> <key-id>").description("\uC11C\uBC84 \uD0A4 \uC989\uC2DC \uD3D0\uAE30 (platform:write)"), async (ctx, [id2, keyIdValue]) => mutate(ctx, "DELETE", `/v4/creator/contents/${uuid(id2)}/server-keys/${keyId(keyIdValue)}`, void 0, "\uC774 \uC11C\uBC84 \uD0A4\uB97C \uC989\uC2DC \uD3D0\uAE30\uD560\uAE4C\uC694?"));
   const shared = content.command("shared").description("\uACF5\uC720 \uBB38\uC11C \uC870\uD68C\xB7\uC228\uAE40\xB7\uC0AD\uC81C (platform:read\xB7platform:write)");
-  runtime2.action(shared.command("collections <id>"), async (ctx, [id2]) => ctx.output(await ctx.api.request("GET", `/v4/creator/contents/${uuid(id2)}/shared-document-collections`)));
-  runtime2.action(shared.command("list <id> <collection>").option("--limit <count>", "1~100\uAC1C, \uAE30\uBCF8 50"), async (ctx, [id2, collectionValue], opts) => ctx.output(await ctx.api.request(
+  runtime2.action(shared.command("collections <id>").description("\uACF5\uC720 \uBB38\uC11C \uCEEC\uB809\uC158 \uC774\uB984 (platform:read)"), async (ctx, [id2]) => ctx.output(await ctx.api.request("GET", `/v4/creator/contents/${uuid(id2)}/shared-document-collections`)));
+  runtime2.action(shared.command("list <id> <collection>").description("\uACF5\uC720 \uBB38\uC11C \uBAA9\uB85D (platform:read)").option("--limit <count>", "1~100\uAC1C, \uAE30\uBCF8 50"), async (ctx, [id2, collectionValue], opts) => ctx.output(await ctx.api.request(
     "GET",
     `/v4/creator/contents/${uuid(id2)}/shared-documents/${parse(collection, collectionValue)}`,
     { query: { limit: opts.limit } }
   )));
-  runtime2.action(shared.command("get <id> <collection> <key>"), async (ctx, [id2, collectionValue, keyValue]) => ctx.output(await ctx.api.request(
+  runtime2.action(shared.command("get <id> <collection> <key>").description("\uACF5\uC720 \uBB38\uC11C \uD558\uB098 \uC870\uD68C (platform:read)"), async (ctx, [id2, collectionValue, keyValue]) => ctx.output(await ctx.api.request(
     "GET",
     `/v4/creator/contents/${uuid(id2)}/shared-documents/${parse(collection, collectionValue)}/${parse(documentKey, keyValue)}`
   )));
-  runtime2.action(shared.command("hide <id> <collection> <key>"), async (ctx, [id2, collectionValue, keyValue]) => mutate(
+  runtime2.action(shared.command("hide <id> <collection> <key>").description("\uACF5\uC720 \uBB38\uC11C \uC228\uAE40 (platform:write)"), async (ctx, [id2, collectionValue, keyValue]) => mutate(
     ctx,
     "POST",
     `/v4/creator/contents/${uuid(id2)}/shared-documents/${parse(collection, collectionValue)}/${parse(documentKey, keyValue)}/hide`,
     void 0,
     "\uC774 \uACF5\uC720 \uBB38\uC11C\uB97C \uC228\uAE38\uAE4C\uC694? \uBAA9\uB85D\xB7\uC21C\uC704\uC5D0\uC11C \uC81C\uC678\uB418\uBA70 \uBB38\uC11C \uC790\uCCB4\uB294 \uB0A8\uC2B5\uB2C8\uB2E4."
   ));
-  runtime2.action(shared.command("delete <id> <collection> <key>"), async (ctx, [id2, collectionValue, keyValue]) => mutate(
+  runtime2.action(shared.command("delete <id> <collection> <key>").description("\uACF5\uC720 \uBB38\uC11C \uC601\uAD6C \uC0AD\uC81C (platform:write)"), async (ctx, [id2, collectionValue, keyValue]) => mutate(
     ctx,
     "DELETE",
     `/v4/creator/contents/${uuid(id2)}/shared-documents/${parse(collection, collectionValue)}/${parse(documentKey, keyValue)}`,
@@ -4061,7 +4180,12 @@ function serverData(schema, value2) {
   if (!parsed.success) throw new CliError("\uC2A4\uD0AC API \uC751\uB2F5 \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.", "INVALID_RESPONSE", 502);
   return parsed.data;
 }
-function ensurePat(client, message = "\uC2A4\uD0AC \uC5C5\uB85C\uB4DC\uC5D0\uB294 skill:write \uAD8C\uD55C\uC758 \uAC1C\uC778 \uC561\uC138\uC2A4 \uD1A0\uD070(pat_)\uC774 \uD544\uC694\uD569\uB2C8\uB2E4.") {
+var PAT_FOR_WRITE = "\uC2A4\uD0AC \uC11C\uBC84 \uAC80\uC99D\xB7\uC5C5\uB85C\uB4DC\xB7\uC644\uB8CC \uCC98\uB9AC\uC5D0\uB294 skill:write \uAD8C\uD55C\uC758 \uAC1C\uC778 \uC561\uC138\uC2A4 \uD1A0\uD070(pat_)\uC774 \uD544\uC694\uD569\uB2C8\uB2E4.";
+var PAT_FOR_SUBMIT = "\uC2A4\uD0AC \uC2EC\uC0AC \uC81C\uCD9C\uC5D0\uB294 skill:write\uC640 skill:publish \uAD8C\uD55C(\uB458 \uB2E4)\uC758 \uAC1C\uC778 \uC561\uC138\uC2A4 \uD1A0\uD070(pat_)\uC774 \uD544\uC694\uD569\uB2C8\uB2E4.";
+var PAT_FOR_CANCEL = "\uC2A4\uD0AC \uC5C5\uB85C\uB4DC\xB7\uC2EC\uC0AC \uCDE8\uC18C\uC5D0\uB294 skill:write \uAD8C\uD55C\uC758 \uAC1C\uC778 \uC561\uC138\uC2A4 \uD1A0\uD070(pat_)\uC774 \uD544\uC694\uD569\uB2C8\uB2E4.";
+var PAT_FOR_RELEASE = "\uC2A4\uD0AC \uAC8C\uC2DC\uC5D0\uB294 skill:publish \uAD8C\uD55C\uC758 \uAC1C\uC778 \uC561\uC138\uC2A4 \uD1A0\uD070(pat_)\uC774 \uD544\uC694\uD569\uB2C8\uB2E4.";
+var PAT_FOR_DEPRECATE = "\uC2A4\uD0AC \uC9C0\uC6D0 \uC885\uB8CC\uC5D0\uB294 skill:publish \uAD8C\uD55C\uC758 \uAC1C\uC778 \uC561\uC138\uC2A4 \uD1A0\uD070(pat_)\uC774 \uD544\uC694\uD569\uB2C8\uB2E4.";
+function ensurePat(client, message = PAT_FOR_WRITE) {
   const token = client.settings.token;
   if (!token || !/^pat_[a-f0-9]{64}$/.test(token)) {
     throw new CliError(message, "SKILL_PAT_REQUIRED", 401);
@@ -4146,8 +4270,8 @@ async function pushSkillVersion(client, prepared, skillId) {
   }
 }
 function registerSkillCommands(program2, runtime2) {
-  const skill = program2.command("skill").description("\uC2A4\uD0AC \uD328\uD0A4\uC9C0 \uAC80\uC0AC\xB7\uC5C5\uB85C\uB4DC");
-  runtime2.action(skill.command("list").option("-q, --query <text>", "\uC2A4\uD0AC \uC774\uB984 \uAC80\uC0C9").option("--category <category>", "\uBD84\uB958").option("--entity <entity>", "\uC0B0\uCD9C\uBB3C \uC5D4\uD2F0\uD2F0(character)").option("--type <type>", "\uC2A4\uD0AC \uC720\uD615(template|instruction|tool)").option("--official <value>", "\uACF5\uC2DD \uC2A4\uD0AC\uB9CC true \uB610\uB294 false").option("--cursor <id>", "\uB2E4\uC74C \uD398\uC774\uC9C0 UUID").option("--all", "\uBAA8\uB4E0 \uD398\uC774\uC9C0 \uC870\uD68C"), async (ctx, _args, opts) => {
+  const skill = program2.command("skill").description("\uC2A4\uD0AC \uD328\uD0A4\uC9C0 \uAC80\uC0AC\xB7\uC5C5\uB85C\uB4DC\xB7\uC2EC\uC0AC\xB7\uAC8C\uC2DC (skill:read\xB7write\xB7publish)");
+  runtime2.action(skill.command("list").description("\uC2A4\uD0AC \uBAA9\uB85D \uAC80\uC0C9 (skill:read)").option("-q, --query <text>", "\uC2A4\uD0AC \uC774\uB984 \uAC80\uC0C9").option("--category <category>", "\uBD84\uB958").option("--entity <entity>", "\uC0B0\uCD9C\uBB3C \uC5D4\uD2F0\uD2F0(character)").option("--type <type>", "\uC2A4\uD0AC \uC720\uD615(template|instruction|tool)").option("--official <value>", "\uACF5\uC2DD \uC2A4\uD0AC\uB9CC true \uB610\uB294 false").option("--cursor <id>", "\uB2E4\uC74C \uD398\uC774\uC9C0 UUID").option("--all", "\uBAA8\uB4E0 \uD398\uC774\uC9C0 \uC870\uD68C"), async (ctx, _args, opts) => {
     const query = opts.query === void 0 ? void 0 : z9.string().trim().min(1).max(100).safeParse(opts.query);
     if (query && !query.success) throw new CliError("\uAC80\uC0C9\uC5B4\uB294 1~100\uC790\uC5EC\uC57C \uD569\uB2C8\uB2E4.");
     const selectedCategory = opts.category === void 0 ? void 0 : category.safeParse(opts.category);
@@ -4189,22 +4313,22 @@ function registerSkillCommands(program2, runtime2) {
       cursor = next;
     }
   });
-  runtime2.action(skill.command("get <slug>"), async (ctx, [value2]) => {
+  runtime2.action(skill.command("get <slug>").description("\uC2A4\uD0AC \uC0C1\uC138 \uC870\uD68C (skill:read)"), async (ctx, [value2]) => {
     const parsed = skillSlug.safeParse(value2);
     if (!parsed.success) throw new CliError("\uC2A4\uD0AC \uC774\uB984\uC744 \uD655\uC778\uD558\uC138\uC694.");
     ctx.output(await ctx.api.request("GET", `/v4/skills/${parsed.data}`));
   });
-  runtime2.action(skill.command("form <slug> <version>"), async (ctx, [value2, version]) => {
+  runtime2.action(skill.command("form <slug> <version>").description("\uC2A4\uD0AC \uBC84\uC804 \uC785\uB825 \uC591\uC2DD \uC870\uD68C (skill:read)"), async (ctx, [value2, version]) => {
     const parsed = skillSlug.safeParse(value2);
     const parsedVersion = semver.safeParse(version);
     if (!parsed.success || !parsedVersion.success) throw new CliError("\uC2A4\uD0AC \uC774\uB984\uACFC \uBC84\uC804\uC744 \uD655\uC778\uD558\uC138\uC694.");
     ctx.output(await ctx.api.request("GET", `/v4/skills/${parsed.data}/versions/${parsedVersion.data}/form`));
   });
-  runtime2.action(skill.command("status <skill-id> <version-id>"), async (ctx, [skillId, versionId]) => {
+  runtime2.action(skill.command("status <skill-id> <version-id>").description("\uB0B4 \uC2A4\uD0AC \uBC84\uC804\uC758 \uC2EC\uC0AC\xB7\uAC8C\uC2DC \uC0C1\uD0DC \uC870\uD68C (skill:read)"), async (ctx, [skillId, versionId]) => {
     const ids = skillVersionIds(skillId, versionId);
     ctx.output(await ctx.api.request("GET", `/v4/creator/skills/${ids.skillId}/versions/${ids.versionId}`));
   });
-  runtime2.action(skill.command("validate [dir]").option("--remote", "\uC11C\uBC84\uC5D0\uC11C\uB3C4 \uD328\uD0A4\uC9C0\uB97C \uB4DC\uB77C\uC774\uB7F0 \uAC80\uC99D"), async (ctx, [dir], opts) => {
+  runtime2.action(skill.command("validate [dir]").description("\uC2A4\uD0AC \uD328\uD0A4\uC9C0 \uB85C\uCEEC \uAC80\uC0AC (\uB85C\uADF8\uC778 \uBD88\uD544\uC694, --remote\uB294 skill:write)").option("--remote", "\uC11C\uBC84\uC5D0\uC11C\uB3C4 \uD328\uD0A4\uC9C0\uB97C \uB4DC\uB77C\uC774\uB7F0 \uAC80\uC99D (skill:write)"), async (ctx, [dir], opts) => {
     const prepared = await prepareSkillPackage(dir ?? ".");
     if (opts.remote && !ctx.options.dryRun) {
       const remote = await validateSkillRemotely(ctx.api, prepared.bytes);
@@ -4225,7 +4349,7 @@ function registerSkillCommands(program2, runtime2) {
       ...opts.remote ? { remote_skipped: true } : {}
     });
   });
-  runtime2.action(skill.command("push [dir]").option("--skill-id <id>", "\uAE30\uC874 \uC2A4\uD0AC ID\uC5D0 \uC0C8 \uBC84\uC804 \uCD94\uAC00"), async (ctx, [dir], opts) => {
+  runtime2.action(skill.command("push [dir]").description("\uC2A4\uD0AC \uD328\uD0A4\uC9C0 \uAC80\uC99D \uD6C4 \uC0C8 \uBC84\uC804 \uC5C5\uB85C\uB4DC (skill:write)").option("--skill-id <id>", "\uAE30\uC874 \uC2A4\uD0AC ID\uC5D0 \uC0C8 \uBC84\uC804 \uCD94\uAC00"), async (ctx, [dir], opts) => {
     const prepared = await prepareSkillPackage(dir ?? ".");
     if (prepared.manifest.type !== "instruction" && prepared.manifest.type !== "template") {
       throw new CliError("\uD604\uC7AC \uC2A4\uD0AC \uC5C5\uB85C\uB4DC\uB294 instruction\xB7template \uC720\uD615\uB9CC \uC9C0\uC6D0\uD569\uB2C8\uB2E4.", "SKILL_TYPE_UNSUPPORTED");
@@ -4247,7 +4371,7 @@ function registerSkillCommands(program2, runtime2) {
     }
     ctx.output(await pushSkillVersion(ctx.api, prepared, skillIdOption?.data));
   });
-  runtime2.action(skill.command("complete <skill-id> <version-id>"), async (ctx, [skillId, versionId]) => {
+  runtime2.action(skill.command("complete <skill-id> <version-id>").description("\uC5C5\uB85C\uB4DC\uD55C \uC2A4\uD0AC \uBC84\uC804 \uC644\uB8CC \uCC98\uB9AC \uC7AC\uC2DC\uB3C4 (skill:write)"), async (ctx, [skillId, versionId]) => {
     ensurePat(ctx.api);
     const parsedSkillId = uuid2.safeParse(skillId);
     const parsedVersionId = uuid2.safeParse(versionId);
@@ -4258,8 +4382,8 @@ function registerSkillCommands(program2, runtime2) {
     }
     ctx.output(await ctx.api.request("POST", `/v4/creator/skills/${parsedSkillId.data}/versions/${parsedVersionId.data}/complete`));
   });
-  runtime2.action(skill.command("submit <skill-id> <version-id>"), async (ctx, [skillId, versionId]) => {
-    ensurePat(ctx.api, "\uC2A4\uD0AC \uC2EC\uC0AC \uC81C\uCD9C\uC5D0\uB294 skill:write\uC640 skill:publish \uAD8C\uD55C\uC758 \uAC1C\uC778 \uC561\uC138\uC2A4 \uD1A0\uD070(pat_)\uC774 \uD544\uC694\uD569\uB2C8\uB2E4.");
+  runtime2.action(skill.command("submit <skill-id> <version-id>").description("\uAC80\uC99D \uC644\uB8CC\uD55C \uC2A4\uD0AC \uBC84\uC804 \uC2EC\uC0AC \uC81C\uCD9C (skill:write\uC640 skill:publish \uB458 \uB2E4 \uD544\uC694)"), async (ctx, [skillId, versionId]) => {
+    ensurePat(ctx.api, PAT_FOR_SUBMIT);
     const ids = skillVersionIds(skillId, versionId);
     const path = `/v4/creator/skills/${ids.skillId}/versions/${ids.versionId}`;
     const current = serverData(managedVersionSchema, (await ctx.api.request("GET", path)).data);
@@ -4279,8 +4403,8 @@ function registerSkillCommands(program2, runtime2) {
     await ctx.confirm(`${current.version} \uBC84\uC804(\uD328\uD0A4\uC9C0 ${current.package_hash})\uC744 \uC2EC\uC0AC\uC5D0 \uC81C\uCD9C\uD560\uAE4C\uC694?`);
     ctx.output(await ctx.api.request("POST", `${path}/submit`));
   });
-  runtime2.action(skill.command("deprecate <skill-id>").description("\uC2A4\uD0AC\uC744 \uC9C0\uC6D0 \uC885\uB8CC\uD55C\uB2E4 (\uB418\uB3CC\uB9B4 \uC218 \uC5C6\uC74C, \uC0C8 \uC124\uCE58\xB7\uC0C8 \uC81C\uC791 \uBD88\uAC00)"), async (ctx, [skillId]) => {
-    ensurePat(ctx.api);
+  runtime2.action(skill.command("deprecate <skill-id>").description("\uC2A4\uD0AC\uC744 \uC9C0\uC6D0 \uC885\uB8CC\uD55C\uB2E4 (\uB418\uB3CC\uB9B4 \uC218 \uC5C6\uC74C, \uC0C8 \uC124\uCE58\xB7\uC0C8 \uC81C\uC791 \uBD88\uAC00, skill:publish)"), async (ctx, [skillId]) => {
+    ensurePat(ctx.api, PAT_FOR_DEPRECATE);
     const parsedSkillId = uuid2.safeParse(skillId);
     if (!parsedSkillId.success) throw new CliError("\uC2A4\uD0AC ID\uB294 UUID\uC5EC\uC57C \uD569\uB2C8\uB2E4.");
     const path = `/v4/creator/skills/${parsedSkillId.data}/deprecate`;
@@ -4291,8 +4415,8 @@ function registerSkillCommands(program2, runtime2) {
     await ctx.confirm("\uC774 \uC2A4\uD0AC\uC744 \uC9C0\uC6D0 \uC885\uB8CC\uD560\uAE4C\uC694? \uB418\uB3CC\uB9B4 \uC218 \uC5C6\uC73C\uBA70 \uC0C8 \uC124\uCE58\xB7\uC0C8 \uC81C\uC791\uC774 \uBD88\uAC00\uB2A5\uD569\uB2C8\uB2E4(\uAE30\uC874 \uCF58\uD150\uCE20\uC758 \uACE0\uC815 \uBC84\uC804\uC740 \uC720\uC9C0\uB429\uB2C8\uB2E4).");
     ctx.output(await ctx.api.request("POST", path));
   });
-  runtime2.action(skill.command("cancel <skill-id> <version-id>"), async (ctx, [skillId, versionId]) => {
-    ensurePat(ctx.api);
+  runtime2.action(skill.command("cancel <skill-id> <version-id>").description("\uC2A4\uD0AC \uBC84\uC804\uC758 \uC5C5\uB85C\uB4DC \uB610\uB294 \uC2EC\uC0AC \uCDE8\uC18C (skill:write)"), async (ctx, [skillId, versionId]) => {
+    ensurePat(ctx.api, PAT_FOR_CANCEL);
     const ids = skillVersionIds(skillId, versionId);
     const path = `/v4/creator/skills/${ids.skillId}/versions/${ids.versionId}`;
     if (ctx.options.dryRun) {
@@ -4303,9 +4427,9 @@ function registerSkillCommands(program2, runtime2) {
     ctx.output(await ctx.api.request("POST", `${path}/cancel`));
   });
   runtime2.action(
-    skill.command("release <skill-id> <version-id>").requiredOption("--visibility <value>", "private|unlisted|public"),
+    skill.command("release <skill-id> <version-id>").description("\uC2B9\uC778\uB41C \uC2A4\uD0AC \uBC84\uC804\uC744 \uACF5\uAC1C \uBC94\uC704\uB85C \uAC8C\uC2DC (skill:publish)").requiredOption("--visibility <value>", "private|unlisted|public"),
     async (ctx, [skillId, versionId], opts) => {
-      ensurePat(ctx.api);
+      ensurePat(ctx.api, PAT_FOR_RELEASE);
       const ids = skillVersionIds(skillId, versionId);
       const selected = visibility.safeParse(opts.visibility);
       if (!selected.success) throw new CliError("\uACF5\uAC1C \uBC94\uC704\uB294 private, unlisted, public \uC911 \uD558\uB098\uC5EC\uC57C \uD569\uB2C8\uB2E4.");
@@ -4387,7 +4511,7 @@ function parsePat(schema, input, label) {
   return parsed.data;
 }
 var toolDefinitions = [
-  { name: "platform_authoring", description: "\uACF5\uAC1C \uC2A4\uD0AC \uC81C\uC791 \uC138\uC158\xB7\uD3FC\xB7\uC790\uC0B0\xB7\uC774\uBBF8\uC9C0 \uC0DD\uC131\xB7\uD328\uD0A4\uC9D5\uC744 \uCC98\uB9AC\uD569\uB2C8\uB2E4. \uC774\uBBF8\uC9C0 \uC0DD\uC131\uC5D0\uB294 \uACAC\uC801 \uC2B9\uC778 \uAC00\uACA9\uACFC \uBA71\uB4F1\uC131 \uD0A4\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.", inputSchema: { type: "object", ...z10.toJSONSchema(authoringInput) }, annotations: { readOnlyHint: false, destructiveHint: false } },
+  { name: "platform_authoring", description: "\uACF5\uAC1C \uC2A4\uD0AC \uC81C\uC791 \uC138\uC158\xB7\uD3FC\xB7\uC790\uC0B0\xB7\uC774\uBBF8\uC9C0 \uC0DD\uC131\xB7\uD328\uD0A4\uC9D5\uC744 \uCC98\uB9AC\uD569\uB2C8\uB2E4. \uC774\uBBF8\uC9C0 \uC0DD\uC131\uC5D0\uB294 \uACAC\uC801 \uC2B9\uC778 \uAC00\uACA9\uACFC \uBA71\uB4F1\uC131 \uD0A4\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4. creator-content:write \uAD8C\uD55C\uC774 \uD544\uC694\uD569\uB2C8\uB2E4.", inputSchema: { type: "object", ...z10.toJSONSchema(authoringInput) }, annotations: { readOnlyHint: false, destructiveHint: false } },
   {
     name: "platform_usage_get",
     description: "\uC11C\uBC84 \uD0A4\uAC00 \uC18D\uD55C \uCF58\uD150\uCE20\uC758 \uD50C\uB7AB\uD3FC \uC0AC\uC6A9\uB7C9\uC744 \uC870\uD68C\uD569\uB2C8\uB2E4.",
@@ -4433,13 +4557,13 @@ var toolDefinitions = [
   // 아래는 개인 액세스 토큰(CLACK_TOKEN, pat_)으로 동작하는 개인 도구다. 서버 키 도구와 인증 평면이 다르다.
   {
     name: "platform_skill_list",
-    description: "\uACF5\uAC1C \uC2A4\uD0AC \uBAA9\uB85D\uC744 \uC774\uB984\uC73C\uB85C \uAC80\uC0C9\uD569\uB2C8\uB2E4.",
+    description: "\uACF5\uAC1C \uC2A4\uD0AC \uBAA9\uB85D\uC744 \uC774\uB984\uC73C\uB85C \uAC80\uC0C9\uD569\uB2C8\uB2E4. skill:read \uAD8C\uD55C\uC774 \uD544\uC694\uD569\uB2C8\uB2E4.",
     inputSchema: z10.toJSONSchema(patSchemas.skillList),
     annotations: { readOnlyHint: true, destructiveHint: false }
   },
   {
     name: "platform_skill_get",
-    description: "\uC2A4\uD0AC \uC0C1\uC138\uB97C \uC774\uB984(slug)\uC73C\uB85C \uC870\uD68C\uD569\uB2C8\uB2E4.",
+    description: "\uC2A4\uD0AC \uC0C1\uC138\uB97C \uC774\uB984(slug)\uC73C\uB85C \uC870\uD68C\uD569\uB2C8\uB2E4. skill:read \uAD8C\uD55C\uC774 \uD544\uC694\uD569\uB2C8\uB2E4.",
     inputSchema: z10.toJSONSchema(patSchemas.skillGet),
     annotations: { readOnlyHint: true, destructiveHint: false }
   },
@@ -4451,13 +4575,13 @@ var toolDefinitions = [
   },
   {
     name: "platform_skill_status",
-    description: "\uB0B4 \uC2A4\uD0AC \uBC84\uC804\uC758 \uC2EC\uC0AC\xB7\uAC8C\uC2DC \uC0C1\uD0DC\uB97C \uC870\uD68C\uD569\uB2C8\uB2E4.",
+    description: "\uB0B4 \uC2A4\uD0AC \uBC84\uC804\uC758 \uC2EC\uC0AC\xB7\uAC8C\uC2DC \uC0C1\uD0DC\uB97C \uC870\uD68C\uD569\uB2C8\uB2E4. skill:read \uAD8C\uD55C\uC774 \uD544\uC694\uD569\uB2C8\uB2E4.",
     inputSchema: z10.toJSONSchema(patSchemas.skillVersionRef),
     annotations: { readOnlyHint: true, destructiveHint: false }
   },
   {
     name: "platform_skill_submit",
-    description: "\uAC80\uC99D \uC644\uB8CC\uD55C \uC2A4\uD0AC \uBC84\uC804\uC744 \uC2EC\uC0AC\uC5D0 \uC81C\uCD9C\uD569\uB2C8\uB2E4. skill:write\xB7skill:publish \uAD8C\uD55C\uACFC confirm:true\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.",
+    description: "\uAC80\uC99D \uC644\uB8CC\uD55C \uC2A4\uD0AC \uBC84\uC804\uC744 \uC2EC\uC0AC\uC5D0 \uC81C\uCD9C\uD569\uB2C8\uB2E4. skill:write\uC640 skill:publish \uAD8C\uD55C(\uB458 \uB2E4)\uACFC confirm:true\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4.",
     inputSchema: z10.toJSONSchema(patSchemas.skillSubmit),
     annotations: { readOnlyHint: false, destructiveHint: true }
   },
@@ -4574,7 +4698,7 @@ var PlatformMcpServer = class {
       return { jsonrpc: "2.0", id: request.id, result: toolResult({ error: failure }, true) };
     }
   }
-  /** 개인 액세스 토큰(platform:read·platform:write와 skill:*, creator-content:publish 스코프) 기반 도구. */
+  /** 개인 액세스 토큰(platform:read·platform:write, skill:*, creator-content:write·publish 스코프) 기반 도구. */
   async callPatTool(name2, args) {
     if (patDestructiveToolNames.has(name2) && (!isObject2(args) || args.confirm !== true)) {
       return { preview: true, confirmation_required: true, tool: name2, arguments: redact(args) };
@@ -4655,6 +4779,19 @@ async function servePlatformMcp(settings, env = process.env) {
 
 // src/commands/integrations.ts
 var SKILLS_REPOSITORY = "https://github.com/clack-project/skills";
+var AGENT_SKILLS = [
+  { name: "clack-setup", audience: "general", minimum_cli_version: "0.1.1", cli_required: true },
+  { name: "clack-products", audience: "general", minimum_cli_version: "0.1.1", cli_required: true },
+  { name: "clack-content", audience: "general", minimum_cli_version: "0.1.1", cli_required: true },
+  { name: "clack-channel", audience: "general", minimum_cli_version: "0.1.1", cli_required: true },
+  { name: "clack-profile", audience: "general", minimum_cli_version: "0.1.1", cli_required: true },
+  { name: "clack-mcp", audience: "general", minimum_cli_version: "0.1.0", cli_required: false },
+  { name: "clack-creator-content", audience: "creator", minimum_cli_version: "0.1.1", cli_required: true },
+  { name: "clack-page", audience: "creator", minimum_cli_version: "0.1.1", cli_required: true },
+  { name: "clack-skill-package", audience: "creator", minimum_cli_version: "0.1.1", cli_required: true },
+  { name: "clack-platform-data", audience: "creator", minimum_cli_version: "0.1.1", cli_required: true }
+];
+var SKILLS_MINIMUM_CLI_VERSION = "0.1.1";
 function quoteArgument(value2) {
   return `'${value2.replaceAll("'", "'\\''")}'`;
 }
@@ -4687,7 +4824,7 @@ function registerIntegrationCommands(program2, runtime2) {
   const mcp = program2.command("mcp").description("MCP \uD074\uB77C\uC774\uC5B8\uD2B8 \uC5F0\uACB0\xB7\uD50C\uB7AB\uD3FC \uC870\uD68C \uB3C4\uAD6C");
   runtime2.action(mcp.command("config").description("\uD1A0\uD070 \uC5C6\uB294 MCP \uC124\uC815 \uCD9C\uB825 (\uD30C\uC77C \uBCC0\uACBD\xB7\uC11C\uBC84 \uC694\uCCAD \uC5C6\uC74C)").option("--platform", "CLACK_SERVER_KEY\uB97C \uC0AC\uC6A9\uD558\uB294 \uB85C\uCEEC \uD50C\uB7AB\uD3FC \uC870\uD68C \uC11C\uBC84 \uC124\uC815").addOption(new Option2("--print", "Claude Code .mcp.json \uC870\uAC01 \uCD9C\uB825 (\uAE30\uBCF8)").conflicts(["claude", "codex"])).addOption(new Option2("--claude", "Claude Code \uB4F1\uB85D \uBA85\uB839 \uCD9C\uB825").conflicts(["print", "codex"])).addOption(new Option2("--codex", "Codex config.toml \uC870\uAC01 \uCD9C\uB825").conflicts(["print", "claude"])), async (ctx, _args, opts) => {
     const config = opts.platform ? platformMcpConfiguration(ctx.api.settings.baseUrl) : mcpConfiguration(ctx.api.settings.baseUrl);
-    const instructions = opts.platform ? "\uC5D0\uC774\uC804\uD2B8 \uC2E4\uD589 \uD658\uACBD\uC5D0 \uCF58\uD150\uCE20 \uC11C\uBC84 \uD0A4 \uB3C4\uAD6C\uB294 \uBC1C\uAE09\uBC1B\uC740 \uC11C\uBC84 \uD0A4\uB97C CLACK_SERVER_KEY\uB85C, \uC2A4\uD0AC\xB7\uCF58\uD150\uCE20 \uACF5\uAC1C\xB7\uACF5\uC720 \uBB38\uC11C \uB3C4\uAD6C\uB294 platform:read\xB7platform:write(\uD544\uC694 \uC2DC skill:*\xB7creator-content:publish) \uAD8C\uD55C\uC758 \uAC1C\uC778 \uC561\uC138\uC2A4 \uD1A0\uD070\uC744 CLACK_TOKEN\uC73C\uB85C \uC124\uC815\uD558\uC138\uC694. \uD544\uC694\uD55C \uB3C4\uAD6C\uB9CC\uD07C\uB9CC \uC124\uC815\uD558\uBA74 \uB429\uB2C8\uB2E4. \uC124\uC815 \uCD9C\uB825\uC5D0\uB294 \uD0A4\xB7\uD1A0\uD070 \uC6D0\uBB38\uC744 \uB123\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. \uD658\uACBD\uACFC \uC124\uC815 \uC6D0\uC810\uC774 \uC77C\uCE58\uD558\uB294\uC9C0 \uD655\uC778\uD558\uC138\uC694." : "\uC571\uC5D0\uC11C \uBC1C\uAE09\uD55C \uAC1C\uC778 \uC561\uC138\uC2A4 \uD1A0\uD070\uC744 \uC5D0\uC774\uC804\uD2B8 \uC2E4\uD589 \uD658\uACBD\uC758 CLACK_TOKEN\uC5D0 \uC548\uC804\uD558\uAC8C \uC124\uC815\uD558\uC138\uC694. CLI\uC5D0 \uC800\uC7A5\uB41C \uD1A0\uD070\uC740 \uC790\uB3D9 \uC804\uB2EC\uB418\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. \uD1A0\uD070\uC744 \uB300\uD654\xB7\uBA85\uB839 \uAE30\uB85D\xB7\uC124\uC815 \uD30C\uC77C\uC5D0 \uBD99\uC5EC \uB123\uC9C0 \uB9C8\uC138\uC694. CLI \uD504\uB85C\uD544\uC744 \uBC14\uAFB8\uC5B4\uB3C4 \uAE30\uC874 MCP \uC124\uC815\uC740 \uAC31\uC2E0\uB418\uC9C0 \uC54A\uC73C\uBBC0\uB85C URL\uACFC \uD1A0\uD070\uC758 \uACC4\uC815\uC744 \uD655\uC778\uD558\uC138\uC694.";
+    const instructions = opts.platform ? "\uC5D0\uC774\uC804\uD2B8 \uC2E4\uD589 \uD658\uACBD\uC5D0 \uCF58\uD150\uCE20 \uC11C\uBC84 \uD0A4 \uB3C4\uAD6C\uB294 \uBC1C\uAE09\uBC1B\uC740 \uC11C\uBC84 \uD0A4\uB97C CLACK_SERVER_KEY\uB85C, \uC2A4\uD0AC\xB7\uC81C\uC791\xB7\uCF58\uD150\uCE20 \uACF5\uAC1C\xB7\uACF5\uC720 \uBB38\uC11C \uB3C4\uAD6C\uB294 platform:read\xB7platform:write(\uD544\uC694 \uC2DC skill:*, \uC81C\uC791\uC740 creator-content:write, \uCF58\uD150\uCE20 \uACF5\uAC1C\uB294 creator-content:publish) \uAD8C\uD55C\uC758 \uAC1C\uC778 \uC561\uC138\uC2A4 \uD1A0\uD070\uC744 CLACK_TOKEN\uC73C\uB85C \uC124\uC815\uD558\uC138\uC694. \uD544\uC694\uD55C \uB3C4\uAD6C\uB9CC\uD07C\uB9CC \uC124\uC815\uD558\uBA74 \uB429\uB2C8\uB2E4. \uC124\uC815 \uCD9C\uB825\uC5D0\uB294 \uD0A4\xB7\uD1A0\uD070 \uC6D0\uBB38\uC744 \uB123\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. \uD658\uACBD\uACFC \uC124\uC815 \uC6D0\uC810\uC774 \uC77C\uCE58\uD558\uB294\uC9C0 \uD655\uC778\uD558\uC138\uC694." : "\uC571\uC5D0\uC11C \uBC1C\uAE09\uD55C \uAC1C\uC778 \uC561\uC138\uC2A4 \uD1A0\uD070\uC744 \uC5D0\uC774\uC804\uD2B8 \uC2E4\uD589 \uD658\uACBD\uC758 CLACK_TOKEN\uC5D0 \uC548\uC804\uD558\uAC8C \uC124\uC815\uD558\uC138\uC694. CLI\uC5D0 \uC800\uC7A5\uB41C \uD1A0\uD070\uC740 \uC790\uB3D9 \uC804\uB2EC\uB418\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. \uD1A0\uD070\uC744 \uB300\uD654\xB7\uBA85\uB839 \uAE30\uB85D\xB7\uC124\uC815 \uD30C\uC77C\uC5D0 \uBD99\uC5EC \uB123\uC9C0 \uB9C8\uC138\uC694. CLI \uD504\uB85C\uD544\uC744 \uBC14\uAFB8\uC5B4\uB3C4 \uAE30\uC874 MCP \uC124\uC815\uC740 \uAC31\uC2E0\uB418\uC9C0 \uC54A\uC73C\uBBC0\uB85C URL\uACFC \uD1A0\uD070\uC758 \uACC4\uC815\uC744 \uD655\uC778\uD558\uC138\uC694.";
     if (ctx.options.json) process.stdout.write(JSON.stringify({ ok: true, data: {
       ...config,
       token_env: opts.platform ? "CLACK_SERVER_KEY" : "CLACK_TOKEN",
@@ -4705,11 +4842,14 @@ function registerIntegrationCommands(program2, runtime2) {
   runtime2.action(program2.command("skills").description("\uC5D0\uC774\uC804\uD2B8 \uC2A4\uD0AC \uC124\uCE58 \uBC29\uBC95 \uC548\uB0B4"), async (ctx) => {
     ctx.output({
       repository: SKILLS_REPOSITORY,
-      minimum_cli_version: "0.1.0",
+      minimum_cli_version: SKILLS_MINIMUM_CLI_VERSION,
       cli_version: VERSION,
+      skill_count: AGENT_SKILLS.length,
+      skills: AGENT_SKILLS,
       install: "npx skills add clack-project/skills",
       install_global: "npx skills add clack-project/skills -g",
       install_selected: "npx skills add clack-project/skills -s clack-products",
+      install_selected_multiple: "npx skills add clack-project/skills --skill clack-setup clack-creator-content clack-page",
       update: "npx skills update",
       remove: "npx skills remove",
       message: `\uACF5\uAC1C \uC800\uC7A5\uC18C ${SKILLS_REPOSITORY}\uC5D0\uC11C npx skills\uB85C \uC124\uCE58\uD569\uB2C8\uB2E4. \uC774 \uBA85\uB839\uC740 \uC548\uB0B4\uB9CC \uCD9C\uB825\uD558\uBA70 \uC124\uCE58\uB098 \uB85C\uADF8\uC778\uC744 \uC2E4\uD589\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.`
@@ -4730,14 +4870,14 @@ var presentationSchema = z11.object({
 }).strict();
 function registerPageCommands(program2, runtime2) {
   const page = program2.command("page").description("\uC138\uACC4\uAD00\xB7\uB0B4 \uACF5\uAC1C \uD648 HTML \uAFB8\uBBF8\uAE30 (custom-page:read\xB7write\xB7publish)");
-  runtime2.action(page.command("list"), async (ctx) => ctx.output(await ctx.api.request("GET", base)));
-  runtime2.action(page.command("status <id>"), async (ctx, [id2]) => ctx.output(await ctx.api.request("GET", `${base}/${uuid3(id2)}`)));
-  runtime2.action(page.command("create").addOption(new Option3("--target <type>", "\uAFB8\uBC00 \uB300\uC0C1").choices(["profile", "space"]).makeOptionMandatory()).option("--space-id <uuid>", "\uC138\uACC4\uAD00 ID").requiredOption("--policy-version <version>", "\uB3D9\uC758\uD55C \uCF58\uD150\uCE20 \uC81C\uACF5 \uC815\uCC45 \uBC84\uC804"), async (ctx, _args, opts) => {
+  runtime2.action(page.command("list").description("\uB0B4 \uD398\uC774\uC9C0 \uBAA9\uB85D (custom-page:read)"), async (ctx) => ctx.output(await ctx.api.request("GET", base)));
+  runtime2.action(page.command("status <id>").description("\uD398\uC774\uC9C0\uC640 \uBC84\uC804\xB7\uC218\uC815 \uBC88\uD638 \uC0C1\uD0DC (custom-page:read)"), async (ctx, [id2]) => ctx.output(await ctx.api.request("GET", `${base}/${uuid3(id2)}`)));
+  runtime2.action(page.command("create").description("\uAFB8\uBC00 \uD398\uC774\uC9C0 \uB4F1\uB85D (custom-page:write)").addOption(new Option3("--target <type>", "\uAFB8\uBC00 \uB300\uC0C1").choices(["profile", "space"]).makeOptionMandatory()).option("--space-id <uuid>", "\uC138\uACC4\uAD00 ID").requiredOption("--policy-version <version>", "\uB3D9\uC758\uD55C \uCF58\uD150\uCE20 \uC81C\uACF5 \uC815\uCC45 \uBC84\uC804"), async (ctx, _args, opts) => {
     if (opts.target === "profile" && opts.spaceId) throw new CliError("\uB0B4 \uACF5\uAC1C \uD648\uC5D0\uB294 \uC138\uACC4\uAD00 ID\uB97C \uC9C0\uC815\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.");
     const policy = parse(z11.literal("2026-09-22"), opts.policyVersion);
     await mutate(ctx, "POST", base, { target_type: opts.target, ...opts.target === "space" ? { space_id: uuid3(opts.spaceId) } : {}, policy_version: policy });
   });
-  runtime2.action(page.command("upload <id> <file>").addOption(new Option3("--header <mode>", "\uD5E4\uB354 \uD45C\uC2DC").choices(["fixed", "scroll_hide", "translucent_scroll_hide", "floating_close"]).default("fixed")).addOption(new Option3("--color <scheme>", "\uD5E4\uB354 \uC0C9\uC0C1").choices(["light", "dark"]).default("light")), async (ctx, [id2, file], opts) => {
+  runtime2.action(page.command("upload <id> <file>").description("HTML/ZIP \uC5C5\uB85C\uB4DC\uB85C \uC0C8 \uBE44\uACF5\uAC1C \uBC84\uC804 \uC0DD\uC131 (custom-page:write)").addOption(new Option3("--header <mode>", "\uD5E4\uB354 \uD45C\uC2DC").choices(["fixed", "scroll_hide", "translucent_scroll_hide", "floating_close"]).default("fixed")).addOption(new Option3("--color <scheme>", "\uD5E4\uB354 \uC0C9\uC0C1").choices(["light", "dark"]).default("light")), async (ctx, [id2, file], opts) => {
     const path = `${base}/${uuid3(id2)}`;
     const prepared = await prepareContentFile(file);
     const presentation = parse(presentationSchema, { schema_version: 1, header_mode: opts.header, color_scheme: opts.color });
@@ -4754,16 +4894,16 @@ function registerPageCommands(program2, runtime2) {
       throw failure;
     }
   });
-  runtime2.action(page.command("complete <id> <upload-id>"), async (ctx, [id2, uploadId]) => mutate(ctx, "POST", `${base}/${uuid3(id2)}/uploads/${uuid3(uploadId)}/complete`, {}));
-  runtime2.action(page.command("presentation <id> <version-id>").addOption(new Option3("--header <mode>", "\uC0C8 \uBC84\uC804\uC758 \uD5E4\uB354 \uD45C\uC2DC").choices(["fixed", "scroll_hide", "translucent_scroll_hide", "floating_close"]).makeOptionMandatory()).addOption(new Option3("--color <scheme>", "\uC0C8 \uBC84\uC804\uC758 \uD5E4\uB354 \uC0C9\uC0C1").choices(["light", "dark"]).makeOptionMandatory()), async (ctx, [id2, versionId], opts) => mutate(ctx, "POST", `${base}/${uuid3(id2)}/versions/${uuid3(versionId)}/presentation`, {
+  runtime2.action(page.command("complete <id> <upload-id>").description("\uC5C5\uB85C\uB4DC \uC644\uB8CC \uCC98\uB9AC \uC7AC\uC2DC\uB3C4 (custom-page:write)"), async (ctx, [id2, uploadId]) => mutate(ctx, "POST", `${base}/${uuid3(id2)}/uploads/${uuid3(uploadId)}/complete`, {}));
+  runtime2.action(page.command("presentation <id> <version-id>").description("\uD30C\uC77C\uC740 \uB450\uACE0 \uD5E4\uB354 \uC124\uC815\uB9CC \uBC14\uAFBC \uC0C8 \uBC84\uC804 \uC0DD\uC131 (custom-page:write)").addOption(new Option3("--header <mode>", "\uC0C8 \uBC84\uC804\uC758 \uD5E4\uB354 \uD45C\uC2DC").choices(["fixed", "scroll_hide", "translucent_scroll_hide", "floating_close"]).makeOptionMandatory()).addOption(new Option3("--color <scheme>", "\uC0C8 \uBC84\uC804\uC758 \uD5E4\uB354 \uC0C9\uC0C1").choices(["light", "dark"]).makeOptionMandatory()), async (ctx, [id2, versionId], opts) => mutate(ctx, "POST", `${base}/${uuid3(id2)}/versions/${uuid3(versionId)}/presentation`, {
     presentation: parse(presentationSchema, { schema_version: 1, header_mode: opts.header, color_scheme: opts.color })
   }));
-  runtime2.action(page.command("preview <id> <version-id>"), async (ctx, [id2, versionId]) => ctx.output(await ctx.api.request("GET", `${base}/${uuid3(id2)}/versions/${uuid3(versionId)}/preview`)));
-  runtime2.action(page.command("submit <id> <version-id>"), async (ctx, [id2, versionId]) => mutate(ctx, "POST", `${base}/${uuid3(id2)}/versions/${uuid3(versionId)}/submit`, {}, "\uC571\uC5D0\uC11C \uD655\uC778\uD55C \uC774 \uBC84\uC804\uC758 \uC2EC\uC0AC\uB97C \uC694\uCCAD\uD560\uAE4C\uC694? \uC2B9\uC778 \uB4A4 \uC9C1\uC811 \uC801\uC6A9\uD574\uC57C \uD569\uB2C8\uB2E4."));
+  runtime2.action(page.command("preview <id> <version-id>").description("\uC571 \uD655\uC778\uC6A9 \uBBF8\uB9AC\uBCF4\uAE30 \uB9C1\uD06C \uC870\uD68C (custom-page:read)"), async (ctx, [id2, versionId]) => ctx.output(await ctx.api.request("GET", `${base}/${uuid3(id2)}/versions/${uuid3(versionId)}/preview`)));
+  runtime2.action(page.command("submit <id> <version-id>").description("\uC571\uC5D0\uC11C \uD655\uC778 \uC644\uB8CC\uD55C \uBC84\uC804\uC758 \uC2EC\uC0AC \uC694\uCCAD (custom-page:write\uC640 custom-page:publish \uB458 \uB2E4 \uD544\uC694)"), async (ctx, [id2, versionId]) => mutate(ctx, "POST", `${base}/${uuid3(id2)}/versions/${uuid3(versionId)}/submit`, {}, "\uC571\uC5D0\uC11C \uD655\uC778\uD55C \uC774 \uBC84\uC804\uC758 \uC2EC\uC0AC\uB97C \uC694\uCCAD\uD560\uAE4C\uC694? \uC2B9\uC778 \uB4A4 \uC9C1\uC811 \uC801\uC6A9\uD574\uC57C \uD569\uB2C8\uB2E4."));
   for (const name2 of ["apply", "restore"]) {
-    runtime2.action(page.command(`${name2} <id> <version-id>`).requiredOption("--revision <number>", "status\uC5D0\uC11C \uD655\uC778\uD55C \uD604\uC7AC \uC218\uC815 \uBC88\uD638"), async (ctx, [id2, versionId], opts) => mutate(ctx, "POST", `${base}/${uuid3(id2)}/apply`, { version_id: uuid3(versionId), revision: revision3(opts.revision) }, "\uC2B9\uC778\uB41C \uC774 \uBC84\uC804\uC758 \uD30C\uC77C\uACFC \uD5E4\uB354 \uC124\uC815\uC744 \uC801\uC6A9\uD560\uAE4C\uC694?"));
+    runtime2.action(page.command(`${name2} <id> <version-id>`).description(`${name2 === "apply" ? "\uC2B9\uC778\uB41C \uBC84\uC804 \uC801\uC6A9" : "\uC774\uC804 \uC2B9\uC778 \uBC84\uC804\uC73C\uB85C \uBCF5\uC6D0"} (custom-page:publish)`).requiredOption("--revision <number>", "status\uC5D0\uC11C \uD655\uC778\uD55C \uD604\uC7AC \uC218\uC815 \uBC88\uD638"), async (ctx, [id2, versionId], opts) => mutate(ctx, "POST", `${base}/${uuid3(id2)}/apply`, { version_id: uuid3(versionId), revision: revision3(opts.revision) }, "\uC2B9\uC778\uB41C \uC774 \uBC84\uC804\uC758 \uD30C\uC77C\uACFC \uD5E4\uB354 \uC124\uC815\uC744 \uC801\uC6A9\uD560\uAE4C\uC694?"));
   }
-  runtime2.action(page.command("disable <id>").requiredOption("--revision <number>", "status\uC5D0\uC11C \uD655\uC778\uD55C \uD604\uC7AC \uC218\uC815 \uBC88\uD638"), async (ctx, [id2], opts) => mutate(ctx, "POST", `${base}/${uuid3(id2)}/disable`, { revision: revision3(opts.revision) }, "\uAE30\uBCF8 \uD654\uBA74\uC73C\uB85C \uC804\uD658\uD560\uAE4C\uC694? \uC5C5\uB85C\uB4DC\uD55C \uBC84\uC804\uC740 \uBCF4\uC874\uB429\uB2C8\uB2E4."));
+  runtime2.action(page.command("disable <id>").description("\uAE30\uBCF8 \uD654\uBA74\uC73C\uB85C \uC804\uD658 (custom-page:publish)").requiredOption("--revision <number>", "status\uC5D0\uC11C \uD655\uC778\uD55C \uD604\uC7AC \uC218\uC815 \uBC88\uD638"), async (ctx, [id2], opts) => mutate(ctx, "POST", `${base}/${uuid3(id2)}/disable`, { revision: revision3(opts.revision) }, "\uAE30\uBCF8 \uD654\uBA74\uC73C\uB85C \uC804\uD658\uD560\uAE4C\uC694? \uC5C5\uB85C\uB4DC\uD55C \uBC84\uC804\uC740 \uBCF4\uC874\uB429\uB2C8\uB2E4."));
 }
 
 // src/cli.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clack-platform/cli",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "클랙 계정의 상품·콘텐츠·프로필을 관리하는 CLI",
   "type": "module",
   "bin": {