@kodocagent/cli 0.4.4 → 0.5.0

package/dist/index.js

@@ -9739,9 +9739,9 @@ var require_load = __commonJS({
 var require_lib3 = __commonJS({
   "../../node_modules/.pnpm/jszip@3.10.1/node_modules/jszip/lib/index.js"(exports, module) {
     "use strict";
-    function JSZip5() {
-      if (!(this instanceof JSZip5)) {
-        return new JSZip5();
+    function JSZip7() {
+      if (!(this instanceof JSZip7)) {
+        return new JSZip7();
       }
       if (arguments.length) {
         throw new Error("The constructor with parameters has been removed in JSZip 3.0, please check the upgrade guide.");
@@ -9750,7 +9750,7 @@ var require_lib3 = __commonJS({
       this.comment = null;
       this.root = "";
       this.clone = function() {
-        var newObj = new JSZip5();
+        var newObj = new JSZip7();
         for (var i in this) {
           if (typeof this[i] !== "function") {
             newObj[i] = this[i];
@@ -9759,16 +9759,16 @@ var require_lib3 = __commonJS({
         return newObj;
       };
     }
-    JSZip5.prototype = require_object();
-    JSZip5.prototype.loadAsync = require_load();
-    JSZip5.support = require_support();
-    JSZip5.defaults = require_defaults();
-    JSZip5.version = "3.10.1";
-    JSZip5.loadAsync = function(content, options) {
-      return new JSZip5().loadAsync(content, options);
+    JSZip7.prototype = require_object();
+    JSZip7.prototype.loadAsync = require_load();
+    JSZip7.support = require_support();
+    JSZip7.defaults = require_defaults();
+    JSZip7.version = "3.10.1";
+    JSZip7.loadAsync = function(content, options) {
+      return new JSZip7().loadAsync(content, options);
     };
-    JSZip5.external = require_external();
-    module.exports = JSZip5;
+    JSZip7.external = require_external();
+    module.exports = JSZip7;
   }
 });
 
@@ -9851,6 +9851,58 @@ var KODOC_PATHS = {
 function projectMcpConfigPath(cwd) {
   return join(cwd, ".kodocagent", "mcp.json");
 }
+var PATTERNS = [
+  {
+    type: "\uC8FC\uBBFC\uB4F1\uB85D\uBC88\uD638",
+    re: /\b\d{6}-[1-4]\d{6}\b/g,
+    mask: (m) => `${m.slice(0, 8)}******`
+  },
+  {
+    type: "\uC2E0\uC6A9\uCE74\uB4DC\uBC88\uD638",
+    re: /\b\d{4}-\d{4}-\d{4}-\d{4}\b/g,
+    mask: (m) => `${m.slice(0, 4)}-****-****-${m.slice(-4)}`
+  },
+  {
+    type: "\uC804\uD654\uBC88\uD638",
+    re: /\b0\d{1,2}-\d{3,4}-\d{4}\b/g,
+    mask: (m) => {
+      const p = m.split("-");
+      return `${p[0]}-${"*".repeat((p[1] ?? "").length)}-${p[2]}`;
+    }
+  },
+  {
+    type: "\uC774\uBA54\uC77C",
+    re: /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g,
+    mask: (m) => {
+      const [u, d] = m.split("@");
+      return `${u?.[0] ?? ""}***@${d}`;
+    }
+  }
+];
+function detectPii(text3) {
+  if (!text3) return [];
+  const out = [];
+  for (const { type, re, mask } of PATTERNS) {
+    const matches = text3.match(re);
+    if (matches && matches.length > 0) {
+      const uniq = [...new Set(matches)];
+      out.push({ type, count: matches.length, masked: uniq.slice(0, 5).map(mask) });
+    }
+  }
+  return out;
+}
+function summarizePii(findings) {
+  return findings.map((f) => `${f.type} ${f.count}\uAC74`).join(", ");
+}
+function redactText(text3) {
+  if (!text3) return { text: text3 ?? "", findings: [] };
+  let result = text3;
+  const findings = detectPii(text3);
+  for (const { re, mask } of PATTERNS) {
+    result = result.replace(new RegExp(re.source, re.flags), (m) => mask(m));
+  }
+  return { text: result, findings };
+}
 
 // ../core/dist/index.js
 import { stepCountIs, streamText } from "ai";
@@ -9869,7 +9921,12 @@ import { appendFile, mkdir as mkdir2, readdir, readFile as readFile2, stat } fro
 import { join as join2 } from "path";
 import { tool } from "ai";
 function buildSystemPrompt(ctx) {
-  const stable = [ROLE_SECTION, DOCUMENT_RULES_SECTION, LAW_RULES_SECTION].join("\n\n");
+  const stable = [
+    ROLE_SECTION,
+    DOCUMENT_RULES_SECTION,
+    EDIT_SAFETY_SECTION,
+    LAW_RULES_SECTION
+  ].join("\n\n");
   const dynamic = buildDynamicContext(ctx);
   return `${stable}
 
@@ -9892,6 +9949,15 @@ var DOCUMENT_RULES_SECTION = `## \uBB38\uC11C \uADDC\uCE59
 6. \uC0AC\uC6A9\uC790\uAC00 \uC218\uC815\uC548\uC744 \uAC70\uC808\uD558\uBA74 \uAC19\uC740 \uC81C\uC548\uC744 \uC790\uB3D9\uC73C\uB85C \uBC18\uBCF5\uD558\uC9C0 \uB9D0\uACE0, \uC0AC\uC6A9\uC790\uC758 \uB2E4\uC74C \uC9C0\uC2DC\uB97C \uAE30\uB2E4\uB9AC\uC138\uC694.
 7. \uD070 \uBB38\uC11C\uB294 \uBA3C\uC800 \`outline\`\uC73C\uB85C \uAD6C\uC870\uB97C \uD30C\uC545\uD558\uACE0, \`search\`\uB098 \`pages\`\uB85C \uD544\uC694\uD55C \uBD80\uBD84\uB9CC \uC77D\uC5B4 \uCEE8\uD14D\uC2A4\uD2B8\uB97C \uC544\uB07C\uC138\uC694.
 8. \uC0AC\uC6A9\uC790\uAC00 \uC9C1\uC804 \uBCC0\uACBD\uC744 \uB418\uB3CC\uB9AC\uAE38 \uC6D0\uD558\uBA74 \`list_backups\`\uB85C \uBC31\uC5C5\uC744 \uD655\uC778\uD558\uACE0 \`restore_backup\`\uC73C\uB85C \uBCF5\uC6D0\uD558\uC138\uC694. \uBCF5\uC6D0\uB3C4 \uC2B9\uC778\uC744 \uAC70\uCE58\uBA70, \uBCF5\uC6D0 \uC804 \uD604\uC7AC \uC0C1\uD0DC\uAC00 \uC790\uB3D9 \uBC31\uC5C5\uB429\uB2C8\uB2E4.`;
+var EDIT_SAFETY_SECTION = `## \uD3B8\uC9D1 \uC548\uC804 \uADDC\uCE59
+
+1. \uC694\uCCAD\uBC1B\uC740 \uBD80\uBD84\uB9CC \uC218\uC815\uD558\uACE0, \uC694\uCCAD\uD558\uC9C0 \uC54A\uC740 \uBB38\uC7A5\xB7\uC11C\uC2DD\xB7\uAD6C\uC870\xB7\uD45C\uD604\uC740 \uADF8\uB300\uB85C \uB461\uB2C8\uB2E4. \uBB38\uC11C \uC804\uCCB4\uB97C \uC784\uC758\uB85C \uC7AC\uC791\uC131\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.
+2. \uBB38\uC11C\uC5D0 \uC5C6\uB294 \uC815\uBCF4\uB97C \uB9CC\uB4E4\uC5B4\uB0B4\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. \uC218\uCE58\xB7\uAE08\uC561\xB7\uB0A0\uC9DC\xB7\uC778\uBA85\xB7\uAE30\uAD00\uBA85\xB7\uACC4\uC57D \uC870\uD56D \uB4F1\uC744 \uCD94\uCE21\uD574 \uC0C8\uB85C \uC4F0\uAC70\uB098 \uBC14\uAFB8\uC9C0 \uC54A\uC73C\uBA70, \uBD88\uD655\uC2E4\uD558\uBA74 \uC0AC\uC6A9\uC790\uC5D0\uAC8C \uD655\uC778\uD569\uB2C8\uB2E4.
+3. \uC0AC\uC6A9\uC790\uAC00 \uBA85\uC2DC\uC801\uC73C\uB85C \uBC14\uAFB8\uB77C\uACE0 \uD558\uC9C0 \uC54A\uC740 \uD55C \uC22B\uC790\xB7\uAE08\uC561\xB7\uB0A0\uC9DC\xB7\uB2E8\uC704\xB7\uACE0\uC720\uBA85\uC0AC\xB7\uBC95\uB839 \uC870\uBB38 \uBC88\uD638\uC640 \uC778\uC6A9\uBD80\uD638(" ", ' ', \u300C \u300D) \uB0B4\uBD80 \uB0B4\uC6A9\uC740 \uBCF4\uC874\uD569\uB2C8\uB2E4.
+4. \uC804\uBB38 \uC6A9\uC5B4\uB294 \uC784\uC758\uB85C \uB2E4\uB978 \uD45C\uD604\uC73C\uB85C \uBC14\uAFB8\uC9C0 \uC54A\uACE0 \uBB38\uC11C \uC804\uCCB4\uC5D0\uC11C \uC77C\uAD00\uB418\uAC8C \uC720\uC9C0\uD569\uB2C8\uB2E4.
+5. \uACC4\uC57D\uC11C\xB7\uC57D\uAD00\xB7\uACF5\uC2DC\xB7\uB17C\uBB38 \uB4F1 \uBC95\uC801\xB7\uACF5\uC2DD \uBB38\uC11C\uB294 \uB2E8\uC5B4 \uD558\uB098\uAC00 \uC758\uBBF8\uB97C \uBC14\uAFC0 \uC218 \uC788\uC73C\uBBC0\uB85C, \uD45C\uD604\uC744 \uC790\uB3D9\uC73C\uB85C \uB2E4\uB4EC\uC9C0 \uB9D0\uACE0 \uC0AC\uC6A9\uC790\uAC00 \uC9C0\uC815\uD55C \uBCC0\uACBD\uB9CC \uC218\uD589\uD569\uB2C8\uB2E4.
+6. \uC758\uBBF8\uAC00 \uBC14\uB014 \uC218 \uC788\uB294 \uC218\uC815\uC740 \uC2E4\uD589 \uC804\uC5D0 \uADF8 \uC0AC\uC2E4\uC744 \uC0AC\uC6A9\uC790\uC5D0\uAC8C \uC54C\uB9AC\uACE0, \uC218\uC815 \uC81C\uC548\uC758 \uC694\uC57D(summary)\uC5D0\uB294 \uBB34\uC5C7\uC744\xB7\uC65C \uBC14\uAFB8\uB294\uC9C0 \uD568\uAED8 \uC801\uC2B5\uB2C8\uB2E4.
+7. \uAC1C\uC778\uC815\uBCF4(\uC8FC\uBBFC\uB4F1\uB85D\uBC88\uD638\xB7\uC804\uD654\uBC88\uD638\xB7\uC774\uBA54\uC77C\xB7\uACC4\uC88C\xB7\uCE74\uB4DC\uBC88\uD638 \uB4F1) \uCC98\uB9AC: \uC0AC\uC6A9\uC790\uAC00 **\uD655\uC778\xB7\uC810\uAC80\uB9CC** \uC6D0\uD558\uBA74 \`scan_pii\`(\uC77D\uAE30 \uC804\uC6A9)\uB85C \uBCF4\uC5EC\uC8FC\uACE0, **\uAC00\uB9AC\uAE30\xB7\uB9C8\uC2A4\uD0B9\xB7\uBE44\uC2DD\uBCC4\xB7\uAC1C\uC778\uC815\uBCF4 \uC0AD\uC81C**\uB97C \uC6D0\uD558\uBA74 \`scan_pii\`\uC5D0\uC11C \uBA48\uCD94\uC9C0 \uB9D0\uACE0 \`propose_redact_pii\`\uB85C \uBC14\uB85C \uC218\uC815\uC548\uC744 \uC81C\uC548\uD558\uC138\uC694(\uC774 \uB3C4\uAD6C\uB3C4 \uC2B9\uC778\uC744 \uAC70\uCE58\uBBC0\uB85C \uC548\uC804\uD569\uB2C8\uB2E4).`;
 var LAW_RULES_SECTION = `## \uBC95\uB839 \uADDC\uCE59
 
 1. \uBC95\uB839 \uC778\uC6A9 \uD615\uC2DD: \u300C\uBC95\uB839\uBA85\u300D \uC81CN\uC870 \uC81CN\uD56D \uC81CN\uD638
@@ -10017,6 +10083,26 @@ var AgentSession = class {
       this.openDocuments.push(p);
     }
   }
+  /**
+   * 저장된 메시지(어시스턴트 tool-call 파트)에서 열람·작성한 문서 경로를 도출해 기록한다.
+   * 세션이 턴마다 재생성되므로, 시스템 프롬프트("열람한 문서")가 이전 턴의 열람 기록을
+   * 반영하려면 히스토리에서 다시 복원해야 한다.
+   */
+  recordOpenDocumentsFromMessage(msg) {
+    const content = msg.content;
+    if (!Array.isArray(content)) return;
+    for (const part of content) {
+      if (!part || typeof part !== "object") continue;
+      const p = part;
+      if (p.type !== "tool-call" || !p.input) continue;
+      if (p.toolName === "read_document" || p.toolName === "write_new_document" || p.toolName === "write_new_spreadsheet") {
+        this.recordOpenDocument(p.input.path);
+      } else if (p.toolName === "compare_documents") {
+        this.recordOpenDocument(p.input.pathA);
+        this.recordOpenDocument(p.input.pathB);
+      }
+    }
+  }
   /** approval-required 이벤트를 run() 스트림에 전달하기 위한 큐 */
   pendingApprovalEvents = [];
   /**
@@ -10025,6 +10111,9 @@ var AgentSession = class {
   async loadHistory() {
     const msgs = await this.opts.store.loadMessages();
     this.messages.push(...msgs);
+    for (const msg of msgs) {
+      this.recordOpenDocumentsFromMessage(msg);
+    }
   }
   /**
    * 사용자 메시지를 처리하고 에이전트 이벤트를 스트리밍한다.
@@ -10079,7 +10168,7 @@ var AgentSession = class {
               } else if (part.toolName === "compare_documents") {
                 this.recordOpenDocument(inp.pathA);
                 this.recordOpenDocument(inp.pathB);
-              } else if (part.toolName === "write_new_document") {
+              } else if (part.toolName === "write_new_document" || part.toolName === "write_new_spreadsheet") {
                 this.recordOpenDocument(inp.path);
               }
             } catch {
@@ -10788,6 +10877,13 @@ var ToolRegistry = class {
               return outcome;
             }
             const { proposal, commit } = outcome;
+            const piiFindings = detectPii(proposal.diff ?? "");
+            if (piiFindings.length > 0) {
+              proposal.warnings = [
+                ...proposal.warnings ?? [],
+                `\uAC1C\uC778\uC815\uBCF4 \uD3EC\uD568: \uC774\uBC88 \uBCC0\uACBD \uC601\uC5ED\uC5D0 ${summarizePii(piiFindings)}\uC774(\uAC00) \uC788\uC2B5\uB2C8\uB2E4. \uC678\uBD80 \uACF5\uC720 \uC2DC \uC8FC\uC758\uD558\uC138\uC694.`
+              ];
+            }
             getEventEmitter()?.(proposal);
             const approvalResult = await approvalHandler(proposal);
             if (!approvalResult.approved) {
@@ -10832,23 +10928,27 @@ import { basename as basename3, extname as extname2, join as join32 } from "path
 var import_jszip = __toESM(require_lib3(), 1);
 var import_jszip2 = __toESM(require_lib3(), 1);
 var import_jszip3 = __toESM(require_lib3(), 1);
+var import_jszip4 = __toESM(require_lib3(), 1);
 import { z as z3 } from "zod";
 import { readFile as readFile32 } from "fs/promises";
 import { blocksToMarkdown, compare } from "@clazic/kordoc";
 import { z as z22 } from "zod";
+import { readFile as readFile5 } from "fs/promises";
+import { extname as extname4 } from "path";
+import { z as z4 } from "zod";
 import { readFile as readFile4 } from "fs/promises";
 import { extname as extname3 } from "path";
 import { z as z32 } from "zod";
-import { readdir as readdir3, stat as stat3 } from "fs/promises";
-import { extname as extname4, join as join4, relative as relative2 } from "path";
-import { z as z4 } from "zod";
-import { readFile as readFile5 } from "fs/promises";
+import { readFile as readFile6 } from "fs/promises";
 import { extname as extname5 } from "path";
 import { z as z5 } from "zod";
-import { readFile as readFile6 } from "fs/promises";
-import { extname as extname6 } from "path";
-import { compare as compare2, markdownToHwpx, parse } from "@clazic/kordoc";
+import { readdir as readdir3, stat as stat3 } from "fs/promises";
+import { extname as extname6, join as join4, relative as relative2 } from "path";
 import { z as z6 } from "zod";
+import { readFile as readFile7 } from "fs/promises";
+import { extname as extname7 } from "path";
+import { compare as compare2, markdownToHwpx, parse } from "@clazic/kordoc";
+import { z as z7 } from "zod";
 import {
   Document,
   HeadingLevel,
@@ -10860,37 +10960,45 @@ import {
   TextRun,
   WidthType
 } from "docx";
-import { readFile as readFile7 } from "fs/promises";
-import { extname as extname7 } from "path";
-import { parse as parse2 } from "@clazic/kordoc";
-import { z as z7 } from "zod";
 import { readFile as readFile8 } from "fs/promises";
 import { extname as extname8 } from "path";
-import { extractFormFields, markdownToHwpx as markdownToHwpx2, parse as parse3 } from "@clazic/kordoc";
-var import_jszip4 = __toESM(require_lib3(), 1);
+import { parse as parse2 } from "@clazic/kordoc";
 import { z as z8 } from "zod";
 import { readFile as readFile9 } from "fs/promises";
 import { extname as extname9 } from "path";
-import ExcelJS from "exceljs";
+import { extractFormFields, markdownToHwpx as markdownToHwpx2, parse as parse3 } from "@clazic/kordoc";
 import { z as z9 } from "zod";
 import { readFile as readFile10 } from "fs/promises";
-import { extname as extname10 } from "path";
-import { parse as parse4 } from "@clazic/kordoc";
+import { basename as basename4, extname as extname10 } from "path";
+var import_jszip5 = __toESM(require_lib3(), 1);
+var import_jszip6 = __toESM(require_lib3(), 1);
 import { z as z10 } from "zod";
-import { readFile as readFile11, stat as stat4 } from "fs/promises";
+import { readFile as readFile11 } from "fs/promises";
 import { extname as extname11 } from "path";
-import { parse as parse5 } from "@clazic/kordoc";
+import ExcelJS from "exceljs";
 import { z as z11 } from "zod";
-import { readFile as fsReadFile, stat as stat5 } from "fs/promises";
+import { readFile as readFile12 } from "fs/promises";
+import { extname as extname12 } from "path";
+import { parse as parse4 } from "@clazic/kordoc";
 import { z as z12 } from "zod";
+import { readFile as readFile13, stat as stat4 } from "fs/promises";
+import { extname as extname13 } from "path";
+import { parse as parse5 } from "@clazic/kordoc";
+import { z as z13 } from "zod";
+import { readFile as fsReadFile, stat as stat5 } from "fs/promises";
+import { z as z14 } from "zod";
+import { readFile as readFile14 } from "fs/promises";
+import { extname as extname14 } from "path";
+import { parse as parse6 } from "@clazic/kordoc";
+import { z as z15 } from "zod";
 import { stat as stat6 } from "fs/promises";
-import { extname as extname12 } from "path";
+import { extname as extname15 } from "path";
 import { markdownToHwpx as markdownToHwpx3 } from "@clazic/kordoc";
-import { z as z13 } from "zod";
+import { z as z16 } from "zod";
 import { stat as stat7 } from "fs/promises";
-import { extname as extname13 } from "path";
+import { extname as extname16 } from "path";
 import ExcelJS2 from "exceljs";
-import { z as z14 } from "zod";
+import { z as z17 } from "zod";
 async function resolveSafePath(cwd, p) {
   const normalizedCwd = normalize(cwd).normalize("NFC");
   const normalizedP = p.normalize("NFC");
@@ -11155,19 +11263,29 @@ var restoreBackupTool = {
     if (candidates.length === 0) {
       return `\uBC31\uC5C5\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${targetBase}. list_backups\uB85C \uC0AC\uC6A9 \uAC00\uB2A5\uD55C \uBC31\uC5C5\uC744 \uBA3C\uC800 \uD655\uC778\uD558\uC138\uC694.`;
     }
+    const byNewest = (a, b) => b.mtimeMs !== a.mtimeMs ? b.mtimeMs - a.mtimeMs : b.tsToken.localeCompare(a.tsToken);
     let chosen;
-    if (input.backup) {
-      const found = candidates.find(
-        (c) => c.filename === input.backup || c.fullPath.endsWith(input.backup)
-      );
-      if (!found) {
-        return `\uC9C0\uC815\uD55C \uBC31\uC5C5\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${input.backup}. list_backups\uB85C \uC0AC\uC6A9 \uAC00\uB2A5\uD55C \uBC31\uC5C5\uC744 \uBA3C\uC800 \uD655\uC778\uD558\uC138\uC694.`;
+    let ambiguityNote = null;
+    const requested = input.backup?.trim();
+    if (requested) {
+      const exact = candidates.find((c) => c.filename === requested);
+      if (exact) {
+        chosen = exact;
+      } else {
+        const matches = candidates.filter(
+          (c) => c.filename.endsWith(requested) || c.fullPath.endsWith(requested)
+        );
+        if (matches.length === 0) {
+          return `\uC9C0\uC815\uD55C \uBC31\uC5C5\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${input.backup}. list_backups\uB85C \uC0AC\uC6A9 \uAC00\uB2A5\uD55C \uBC31\uC5C5\uC758 \uC815\uD655\uD55C \uD30C\uC77C\uBA85\uC744 \uD655\uC778\uD558\uC138\uC694.`;
+        }
+        matches.sort(byNewest);
+        chosen = matches[0];
+        if (matches.length > 1) {
+          ambiguityNote = `'${input.backup}'\uC640 \uC77C\uCE58\uD558\uB294 \uBC31\uC5C5\uC774 ${matches.length}\uAC1C\uC5EC\uC11C \uAC00\uC7A5 \uCD5C\uADFC(${formatTimestamp(chosen.tsToken)}) \uAC83\uC744 \uC120\uD0DD\uD588\uC2B5\uB2C8\uB2E4. \uD2B9\uC815 \uBC31\uC5C5\uC744 \uC6D0\uD558\uBA74 list_backups\uC758 \uC804\uCCB4 \uD30C\uC77C\uBA85\uC744 \uC9C0\uC815\uD558\uC138\uC694.`;
+        }
       }
-      chosen = found;
     } else {
-      candidates.sort(
-        (a, b) => b.mtimeMs !== a.mtimeMs ? b.mtimeMs - a.mtimeMs : b.tsToken.localeCompare(a.tsToken)
-      );
+      candidates.sort(byNewest);
       chosen = candidates[0];
     }
     let backupBytes;
@@ -11208,12 +11326,15 @@ var restoreBackupTool = {
       ].join("\n");
     }
     const warnings = [];
-    const autoSelected = !input.backup && candidates.length > 1;
+    const autoSelected = !requested && candidates.length > 1;
     if (autoSelected) {
       warnings.push(
         `\uBC31\uC5C5\uC744 \uC9C0\uC815\uD558\uC9C0 \uC54A\uC544 \uAC00\uC7A5 \uCD5C\uADFC \uBC31\uC5C5(${formatTimestamp(chosen.tsToken)})\uC744 \uC790\uB3D9\uC73C\uB85C \uC120\uD0DD\uD588\uC2B5\uB2C8\uB2E4. \uB2E4\uB978 \uBC31\uC5C5\uC744 \uC6D0\uD558\uBA74 list_backups\uB85C \uD655\uC778 \uD6C4 backup \uD30C\uB77C\uBBF8\uD130\uB97C \uC9C0\uC815\uD558\uC138\uC694.`
       );
     }
+    if (ambiguityNote) {
+      warnings.push(ambiguityNote);
+    }
     warnings.push(
       "\uBCF5\uC6D0\uC744 \uC2E4\uD589\uD558\uBA74 \uD604\uC7AC \uD30C\uC77C\uB3C4 \uBC31\uC5C5\uB41C \uB4A4 \uB36E\uC5B4\uC4F0\uC5EC\uC9D1\uB2C8\uB2E4(\uBCF5\uC6D0 \uC790\uCCB4\uB3C4 \uB418\uB3CC\uB9B4 \uC218 \uC788\uC74C)."
     );
@@ -11377,458 +11498,357 @@ var compareDocumentsTool = {
     return output;
   }
 };
-function escapeXml(text3) {
-  return text3.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
-}
-function decodeXml(text3) {
-  return text3.replace(/&amp;/g, "&").replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&quot;/g, '"').replace(/&apos;/g, "'");
+var cellEditItemSchema = z32.object({
+  tableIndex: z32.number().int().nonnegative().optional().describe(
+    "\uC88C\uD45C \uBAA8\uB4DC: 0-based \uD45C \uC778\uB371\uC2A4(read_document\uC758 kordoc \uBE14\uB85D \uC21C\uC11C, \uC911\uCCA9\uD45C \uC81C\uC678). \uB808\uC774\uBE14 \uBAA8\uB4DC\uC5D0\uC120 \uD0D0\uC0C9 \uBC94\uC704 \uC81C\uD55C\uC6A9(\uC120\uD0DD)."
+  ),
+  row: z32.number().int().nonnegative().optional().describe("\uC88C\uD45C \uBAA8\uB4DC: \uC140\uC758 rowAddr (0-based)"),
+  col: z32.number().int().nonnegative().optional().describe("\uC88C\uD45C \uBAA8\uB4DC: \uC140\uC758 colAddr (0-based)"),
+  label: z32.string().optional().describe(
+    "\uB808\uC774\uBE14 \uBAA8\uB4DC: \uAE30\uC900 \uC140 \uD14D\uC2A4\uD2B8(\uD2B8\uB9BC \uBE44\uAD50). \uC774 \uC140\uC758 direction \uBC29\uD5A5 \uC778\uC811 \uC140\uC5D0 newText\uB97C \uAE30\uB85D. \uC88C\uD45C \uBAA8\uB4DC\uBA74 \uC0DD\uB7B5."
+  ),
+  direction: z32.enum(["right", "below"]).optional().describe("\uB808\uC774\uBE14 \uBAA8\uB4DC \uBC29\uD5A5. \uAE30\uBCF8 right(\uC624\uB978\uCABD \uC140), below(\uC544\uB798 \uC140). \uBCD1\uD569 span \uACE0\uB824."),
+  newText: z32.string().describe("\uC140\uC5D0 \uC4F8 \uC0C8 \uD14D\uC2A4\uD2B8"),
+  expectedText: z32.string().optional().describe(
+    "\uD604\uC7AC \uC140 \uD14D\uC2A4\uD2B8(\uC548\uC804 \uAC80\uC99D\uC6A9). \uBD88\uC77C\uCE58 \uC2DC \uC218\uC815\uD558\uC9C0 \uC54A\uC74C. \uC798\uBABB\uB41C \uC140 \uC218\uC815 \uBC29\uC9C0\uB97C \uC704\uD574 \uAD8C\uC7A5."
+  )
+}).describe(
+  "\uD3B8\uC9D1 \uD56D\uBAA9. \uC88C\uD45C \uBAA8\uB4DC(tableIndex+row+col) \uB610\uB294 \uB808\uC774\uBE14 \uBAA8\uB4DC(label[+direction]) \uC911 \uD558\uB098\uB97C \uC0AC\uC6A9\uD558\uC138\uC694. \uB458 \uB2E4 \uC9C0\uC815\uD558\uAC70\uB098 \uB458 \uB2E4 \uC0DD\uB7B5\uD558\uBA74 \uC624\uB958\uC785\uB2C8\uB2E4."
+);
+var proposeCellEditSchema = z32.object({
+  path: z32.string().describe("\uC218\uC815\uD560 .hwpx \uD30C\uC77C \uACBD\uB85C (cwd \uAE30\uC900 \uC0C1\uB300 \uACBD\uB85C \uB610\uB294 \uC808\uB300 \uACBD\uB85C)"),
+  edits: z32.array(cellEditItemSchema).min(1).describe(
+    "\uD3B8\uC9D1 \uBAA9\uB85D. \uAC01 \uD56D\uBAA9\uC740 \uC88C\uD45C \uBAA8\uB4DC(tableIndex+row+col) \uB610\uB294 \uB808\uC774\uBE14 \uBAA8\uB4DC(label+direction) \uC911 \uD558\uB098"
+  ),
+  summary: z32.string().describe("\uBCC0\uACBD \uC694\uC57D (\uD55C\uAD6D\uC5B4 1-2\uBB38\uC7A5)")
+});
+function tokenizeHwpxXml(xml) {
+  const tokens = [];
+  const re = /<hp:tbl[\s>]|<\/hp:tbl>|<hp:tc[\s>]|<\/hp:tc>|<hp:t\/>|<hp:t>|<hp:cellAddr[^/>]*|<hp:cellSpan[^/>]*/g;
+  let startPos = 0;
+  let m = re.exec(xml);
+  while (m !== null) {
+    const raw = m[0];
+    const pos = m.index;
+    if (raw.startsWith("<hp:tbl")) {
+      tokens.push({ kind: "tbl_open", pos, end: pos + raw.length });
+    } else if (raw === "</hp:tbl>") {
+      tokens.push({ kind: "tbl_close", pos, end: pos + raw.length });
+    } else if (raw.startsWith("<hp:tc")) {
+      tokens.push({ kind: "tc_open", pos, end: pos + raw.length });
+    } else if (raw === "</hp:tc>") {
+      tokens.push({ kind: "tc_close", pos, end: pos + raw.length });
+    } else if (raw === "<hp:t/>") {
+      tokens.push({ kind: "t_empty", pos, end: pos + raw.length });
+    } else if (raw === "<hp:t>") {
+      tokens.push({ kind: "t_open", pos, end: pos + raw.length });
+    } else if (raw.startsWith("<hp:cellAddr")) {
+      const colM = raw.match(/colAddr="(\d+)"/);
+      const rowM = raw.match(/rowAddr="(\d+)"/);
+      if (colM && rowM) {
+        const selfClose = xml.indexOf("/>", pos);
+        const end = selfClose >= 0 ? selfClose + 2 : pos + raw.length;
+        tokens.push({
+          kind: "cell_addr",
+          pos,
+          end,
+          colAddr: Number(colM[1]),
+          rowAddr: Number(rowM[1])
+        });
+      }
+    } else if (raw.startsWith("<hp:cellSpan")) {
+      const colM = raw.match(/colSpan="(\d+)"/);
+      const rowM = raw.match(/rowSpan="(\d+)"/);
+      const selfClose = xml.indexOf("/>", pos);
+      const end = selfClose >= 0 ? selfClose + 2 : pos + raw.length;
+      tokens.push({
+        kind: "cell_span",
+        pos,
+        end,
+        colSpan: colM ? Number(colM[1]) : 1,
+        rowSpan: rowM ? Number(rowM[1]) : 1
+      });
+    }
+    startPos = re.lastIndex;
+    m = re.exec(xml);
+  }
+  void startPos;
+  return tokens;
 }
-function getAttr(openTag, attr) {
-  const re = new RegExp(`\\b${attr}="([^"]*)"`, "");
-  const m = re.exec(openTag);
-  return m ? decodeXml(m[1] ?? "") : "";
+function escapeXml(text3) {
+  return text3.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
-function parseFormObjects(xml, sectionFile, startIndex = 0) {
-  const results = [];
-  let idx = startIndex;
-  const tagSpecs = [
-    { xmlTag: "hp:btn", type: "button" },
-    { xmlTag: "hp:checkBtn", type: "checkBox" },
-    { xmlTag: "hp:radioBtn", type: "radioButton" },
-    { xmlTag: "hp:comboBox", type: "comboBox" },
-    { xmlTag: "hp:edit", type: "edit" }
-  ];
-  const hits = [];
-  for (const spec of tagSpecs) {
-    const re = new RegExp(`<${spec.xmlTag}\\b`, "g");
-    for (let m = re.exec(xml); m !== null; m = re.exec(xml)) {
-      hits.push({ pos: m.index, xmlTag: spec.xmlTag, type: spec.type });
+function collectDirectTcRanges(tokens, tblStart, tblEnd) {
+  const tblTokens = tokens.filter((t) => t.pos > tblStart && t.pos < tblEnd);
+  const tcRanges = [];
+  const tcStack = [];
+  let innerDepth = 0;
+  for (const tok of tblTokens) {
+    if (tok.kind === "tbl_open") {
+      innerDepth++;
+    } else if (tok.kind === "tbl_close") {
+      innerDepth--;
+    } else if (tok.kind === "tc_open") {
+      tcStack.push({ pos: tok.pos, depth: innerDepth });
+    } else if (tok.kind === "tc_close") {
+      const entry = tcStack.pop();
+      if (entry !== void 0) {
+        tcRanges.push({ start: entry.pos, end: tok.end, depth: entry.depth });
+      }
     }
   }
-  hits.sort((a, b) => a.pos - b.pos);
-  for (const hit of hits) {
-    const { pos, xmlTag, type } = hit;
-    const openTagEnd = xml.indexOf(">", pos);
-    if (openTagEnd < 0) continue;
-    const openTag = xml.slice(pos, openTagEnd + 1);
-    const closeTag = `</${xmlTag}>`;
-    const closeIdx = xml.indexOf(closeTag, openTagEnd);
-    if (closeIdx < 0) continue;
-    const elementEnd = closeIdx + closeTag.length;
-    const elementXml = xml.slice(pos, elementEnd);
-    const name = getAttr(openTag, "name");
-    let currentValue;
-    let comboItems;
-    switch (type) {
-      case "button":
-        currentValue = getAttr(openTag, "caption");
-        break;
-      case "checkBox":
-      case "radioButton":
-        currentValue = getAttr(openTag, "value") === "CHECKED";
-        break;
-      case "comboBox": {
-        currentValue = getAttr(openTag, "selectedValue");
-        const listItemRe = /<hp:listItem\b[^>]*/g;
-        const items = [];
-        for (let lm = listItemRe.exec(elementXml); lm !== null; lm = listItemRe.exec(elementXml)) {
-          const itemValue = getAttr(lm[0] ?? "", "value");
-          items.push(itemValue);
-        }
-        comboItems = items;
-        break;
-      }
-      case "edit": {
-        const textSelfClose = /<hp:text\s*\/>/;
-        const textOpen = /<hp:text>/;
-        const textClose = "</hp:text>";
-        if (textSelfClose.test(elementXml)) {
-          currentValue = "";
-        } else {
-          const tOpenIdx = elementXml.search(textOpen);
-          if (tOpenIdx >= 0) {
-            const afterOpen = elementXml.indexOf(">", tOpenIdx) + 1;
-            const closePos = elementXml.indexOf(textClose, afterOpen);
-            currentValue = closePos >= 0 ? decodeXml(elementXml.slice(afterOpen, closePos)) : "";
-          } else {
-            currentValue = "";
-          }
-        }
-        break;
+  return tcRanges.filter((tc) => tc.depth === 0);
+}
+function readOwnTextFromTc(xml, tokens, tcStart, tcEnd) {
+  const tcTokens = tokens.filter((t) => t.pos >= tcStart && t.pos < tcEnd);
+  let innerDepth = 0;
+  let text3 = "";
+  for (const t of tcTokens) {
+    if (t.kind === "tbl_open") innerDepth++;
+    else if (t.kind === "tbl_close") innerDepth--;
+    else if (t.kind === "t_empty" && innerDepth === 0) {
+    } else if (t.kind === "t_open" && innerDepth === 0) {
+      const closePos = xml.indexOf("</hp:t>", t.end);
+      if (closePos >= 0) {
+        text3 += xml.substring(t.end, closePos);
       }
     }
-    results.push({
-      index: idx++,
-      name,
-      type,
-      currentValue,
-      comboItems,
-      sectionFile,
-      posInSection: pos
-    });
   }
-  return results;
+  return text3.replace(/&amp;/g, "&").replace(/&lt;/g, "<").replace(/&gt;/g, ">");
 }
-function applyFormObjectEdits(xml, edits) {
-  const results = edits.map(() => ({ success: false }));
-  const patches = [];
+function findTopLevelTableRange(tokens, tableIndex) {
+  let topLevelCount = 0;
+  let depth = 0;
+  let targetStart = -1;
+  for (const tok of tokens) {
+    if (tok.kind === "tbl_open") {
+      if (depth === 0) {
+        if (topLevelCount === tableIndex) {
+          targetStart = tok.pos;
+        }
+        topLevelCount++;
+      }
+      depth++;
+    } else if (tok.kind === "tbl_close") {
+      depth--;
+      if (depth === 0 && topLevelCount === tableIndex + 1 && targetStart >= 0) {
+        return { start: targetStart, end: tok.end };
+      }
+    }
+  }
+  return null;
+}
+function readCellAddrSpan(tokens, tcStart, tcEnd) {
+  const tcTokens = tokens.filter((t) => t.pos >= tcStart && t.pos < tcEnd);
+  let addr = null;
+  let span = { colSpan: 1, rowSpan: 1 };
+  for (const t of tcTokens) {
+    if (t.kind === "cell_addr" && t.colAddr !== void 0 && t.rowAddr !== void 0) {
+      addr = { colAddr: t.colAddr, rowAddr: t.rowAddr };
+    } else if (t.kind === "cell_span" && t.colSpan !== void 0 && t.rowSpan !== void 0) {
+      span = { colSpan: t.colSpan, rowSpan: t.rowSpan };
+    }
+  }
+  if (!addr) return null;
+  return { ...addr, ...span };
+}
+function applyCellEditsToSectionXml(xml, edits) {
+  const tokens = tokenizeHwpxXml(xml);
+  const results = edits.map(() => ({ success: false }));
+  let totalTopLevelTbls = 0;
+  {
+    let d = 0;
+    for (const tok of tokens) {
+      if (tok.kind === "tbl_open") {
+        if (d === 0) totalTopLevelTbls++;
+        d++;
+      } else if (tok.kind === "tbl_close") {
+        d--;
+      }
+    }
+  }
+  const replacements = [];
   for (let ei = 0; ei < edits.length; ei++) {
     const edit = edits[ei];
-    const { target, set, expected } = edit;
-    const pos = target.posInSection;
-    const xmlTag = typeToXmlTag(target.type);
-    const openTagEnd = xml.indexOf(">", pos);
-    if (openTagEnd < 0) {
-      results[ei] = {
-        success: false,
-        error: `\uC591\uC2DD \uAC1C\uCCB4 "${target.name}" \uC5EC\uB294 \uD0DC\uADF8 \uB05D\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.`
-      };
-      continue;
-    }
-    const _openTag = xml.slice(pos, openTagEnd + 1);
-    const closeTag = `</${xmlTag}>`;
-    const closeIdx = xml.indexOf(closeTag, openTagEnd);
-    if (closeIdx < 0) {
+    const tblRange = findTopLevelTableRange(tokens, edit.tableIndex);
+    if (!tblRange) {
       results[ei] = {
         success: false,
-        error: `\uC591\uC2DD \uAC1C\uCCB4 "${target.name}" \uB2EB\uB294 \uD0DC\uADF8\uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.`
+        error: `\uD45C ${edit.tableIndex}\uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. \uC774 \uC139\uC158\uC5D0 \uCD1D ${totalTopLevelTbls}\uAC1C\uC758 \uCD5C\uC0C1\uC704 \uD45C\uAC00 \uC788\uC2B5\uB2C8\uB2E4.`
       };
       continue;
     }
-    const elementEnd = closeIdx + closeTag.length;
-    const typeError = validateSetForType(target.type, set);
-    if (typeError) {
-      results[ei] = { success: false, error: typeError };
-      continue;
-    }
-    const currentRaw = readCurrentValue(
-      xml,
-      pos,
-      openTagEnd,
-      openTagEnd + 1,
-      elementEnd,
-      target.type
-    );
-    if (expected !== void 0) {
-      const mismatch = checkExpected(expected, currentRaw, target);
-      if (mismatch) {
-        results[ei] = { success: false, error: mismatch };
-        continue;
-      }
-    }
-    if (target.type === "comboBox" && set.selected !== void 0) {
-      const items = target.comboItems ?? [];
-      if (!items.includes(set.selected)) {
-        const validList = items.map((v) => `"${v}"`).join(", ");
-        results[ei] = {
-          success: false,
-          error: `comboBox "${target.name}"\uC758 selected \uAC12 "${set.selected}"\uC774 \uC720\uD6A8\uD55C \uD56D\uBAA9\uC774 \uC544\uB2D9\uB2C8\uB2E4. \uC720\uD6A8\uD55C \uD56D\uBAA9: ${validList || "(\uC5C6\uC74C)"}`
-        };
-        continue;
+    const directTcs = collectDirectTcRanges(tokens, tblRange.start, tblRange.end);
+    const tblTokens = tokens.filter((t) => t.pos >= tblRange.start && t.pos < tblRange.end);
+    let found = false;
+    for (const tc of directTcs) {
+      const tcTokens = tblTokens.filter((t) => t.pos >= tc.start && t.pos < tc.end);
+      const hasAddr = tcTokens.some(
+        (t) => t.kind === "cell_addr" && t.colAddr === edit.col && t.rowAddr === edit.row
+      );
+      if (!hasAddr) continue;
+      let innerDepth = 0;
+      const ownTRuns = [];
+      for (const t of tokens.filter((x) => x.pos >= tc.start && x.pos < tc.end)) {
+        if (t.kind === "tbl_open") innerDepth++;
+        else if (t.kind === "tbl_close") innerDepth--;
+        else if (t.kind === "t_empty" && innerDepth === 0) {
+          ownTRuns.push({ isEmpty: true, tagPos: t.pos, tagEnd: t.end });
+        } else if (t.kind === "t_open" && innerDepth === 0) {
+          const closePos = xml.indexOf("</hp:t>", t.end);
+          if (closePos >= 0) {
+            ownTRuns.push({ isEmpty: false, openEnd: t.end, closePos });
+          }
+        }
       }
-    }
-    let patchCreated = false;
-    if (set.caption !== void 0) {
-      const patch = replaceAttrInOpenTag(xml, pos, openTagEnd, "caption", escapeXml(set.caption));
-      if (!patch) {
+      const currentText = ownTRuns.map((r) => r.isEmpty ? "" : xml.substring(r.openEnd, r.closePos)).join("").replace(/&amp;/g, "&").replace(/&lt;/g, "<").replace(/&gt;/g, ">");
+      if (edit.expectedText !== void 0 && edit.expectedText !== currentText) {
         results[ei] = {
           success: false,
-          error: `\uC591\uC2DD \uAC1C\uCCB4 "${target.name}"\uC758 caption \uC18D\uC131\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.`
+          oldText: currentText,
+          error: `\uC140 (\uD45C ${edit.tableIndex}, \uD589 ${edit.row}, \uC5F4 ${edit.col})\uC758 \uD604\uC7AC \uD14D\uC2A4\uD2B8\uAC00 \uC608\uC0C1\uAC12\uACFC \uB2E4\uB985\uB2C8\uB2E4. \uC608\uC0C1: "${edit.expectedText}", \uC2E4\uC81C: "${currentText}". \uC218\uC815\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.`
         };
-        continue;
+        found = true;
+        break;
       }
-      patches.push(patch);
-      patchCreated = true;
-    } else if (set.checked !== void 0) {
-      const newValue = set.checked ? "CHECKED" : "UNCHECKED";
-      const patch = replaceAttrInOpenTag(xml, pos, openTagEnd, "value", newValue);
-      if (!patch) {
+      if (ownTRuns.length === 0) {
         results[ei] = {
           success: false,
-          error: `\uC591\uC2DD \uAC1C\uCCB4 "${target.name}"\uC758 value \uC18D\uC131\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.`
+          oldText: currentText,
+          error: `\uC140 (\uD45C ${edit.tableIndex}, \uD589 ${edit.row}, \uC5F4 ${edit.col})\uC5D0 \uD14D\uC2A4\uD2B8 \uB7F0\uC774 \uC5C6\uC2B5\uB2C8\uB2E4. <hp:t> \uB610\uB294 <hp:t/> \uB7F0\uC774 \uBC1C\uACAC\uB418\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4. \uC140 \uAD6C\uC870\uB97C \uD655\uC778\uD558\uC138\uC694.`
         };
-        continue;
+        found = true;
+        break;
       }
-      patches.push(patch);
-      patchCreated = true;
-    } else if (set.selected !== void 0) {
-      const patch = replaceAttrInOpenTag(
-        xml,
-        pos,
-        openTagEnd,
-        "selectedValue",
-        escapeXml(set.selected)
-      );
-      if (!patch) {
-        results[ei] = {
-          success: false,
-          error: `\uC591\uC2DD \uAC1C\uCCB4 "${target.name}"\uC758 selectedValue \uC18D\uC131\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.`
-        };
-        continue;
+      const escapedNew = escapeXml(edit.newText);
+      const patches = [];
+      const firstRun = ownTRuns[0];
+      if (firstRun.isEmpty) {
+        patches.push({
+          from: firstRun.tagPos,
+          to: firstRun.tagEnd,
+          text: `<hp:t>${escapedNew}</hp:t>`
+        });
+      } else {
+        patches.push({ from: firstRun.openEnd, to: firstRun.closePos, text: escapedNew });
       }
-      patches.push(patch);
-      patchCreated = true;
-    } else if (set.text !== void 0) {
-      const elementContent = xml.slice(pos, elementEnd);
-      const textPatch = replaceEditText(xml, pos, elementContent, set.text);
-      if (!textPatch) {
-        results[ei] = {
-          success: false,
-          error: `\uC591\uC2DD \uAC1C\uCCB4 "${target.name}"\uC758 <hp:text> \uC694\uC18C\uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.`
-        };
-        continue;
+      for (let ri = 1; ri < ownTRuns.length; ri++) {
+        const run = ownTRuns[ri];
+        if (!run.isEmpty) {
+          patches.push({ from: run.openEnd, to: run.closePos, text: "" });
+        }
       }
-      patches.push(textPatch);
-      patchCreated = true;
+      replacements.push({ editIdx: ei, patches });
+      results[ei] = { success: true, oldText: currentText };
+      found = true;
+      break;
     }
-    if (!patchCreated) {
-      results[ei] = { success: false, error: `\uD3B8\uC9D1 #${ei + 1}: set \uD544\uB4DC\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.` };
-      continue;
+    if (!found) {
+      results[ei] = {
+        success: false,
+        error: `\uD45C ${edit.tableIndex}\uC5D0\uC11C \uC140 (\uD589 ${edit.row}, \uC5F4 ${edit.col})\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. cellAddr colAddr="${edit.col}" rowAddr="${edit.row}"\uC5D0 \uD574\uB2F9\uD558\uB294 \uC140\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.`
+      };
     }
-    results[ei] = { success: true, oldValue: currentRaw };
   }
   if (results.some((r) => !r.success)) {
     return { newXml: xml, results };
   }
-  const sortedPatches = [...patches].sort((a, b) => b.from - a.from);
+  const allPatches = replacements.flatMap((r) => r.patches).sort((a, b) => b.from - a.from);
   let result = xml;
-  for (const patch of sortedPatches) {
-    result = result.slice(0, patch.from) + patch.text + result.slice(patch.to);
+  for (const patch of allPatches) {
+    result = result.substring(0, patch.from) + patch.text + result.substring(patch.to);
   }
   return { newXml: result, results };
 }
-function typeToXmlTag(type) {
-  switch (type) {
-    case "button":
-      return "hp:btn";
-    case "checkBox":
-      return "hp:checkBtn";
-    case "radioButton":
-      return "hp:radioBtn";
-    case "comboBox":
-      return "hp:comboBox";
-    case "edit":
-      return "hp:edit";
+async function applyEditsToHwpx(hwpxBuffer, edits) {
+  const zip = await import_jszip2.default.loadAsync(hwpxBuffer);
+  const sectionFiles = Object.keys(zip.files).filter((name) => /^Contents\/section\d+\.xml$/.test(name)).sort();
+  const sectionXmls = [];
+  const sectionTblCounts = [];
+  for (const sf of sectionFiles) {
+    const entry = zip.file(sf);
+    const xml = entry ? await entry.async("string") : "";
+    sectionXmls.push(xml);
+    const tokens = tokenizeHwpxXml(xml);
+    let count = 0;
+    let depth = 0;
+    for (const tok of tokens) {
+      if (tok.kind === "tbl_open") {
+        if (depth === 0) count++;
+        depth++;
+      } else if (tok.kind === "tbl_close") {
+        depth--;
+      }
+    }
+    sectionTblCounts.push(count);
   }
-}
-function validateSetForType(type, set) {
-  const key = Object.keys(set).find((k) => set[k] !== void 0);
-  if (!key) return "set \uD544\uB4DC\uAC00 \uBE44\uC5B4\uC788\uC2B5\uB2C8\uB2E4. caption/checked/selected/text \uC911 \uD558\uB098\uB97C \uC9C0\uC815\uD558\uC138\uC694.";
-  const allowed = {
-    button: "caption",
-    checkBox: "checked",
-    radioButton: "checked",
-    comboBox: "selected",
-    edit: "text"
-  };
-  if (key !== allowed[type]) {
-    const typeKo = {
-      button: "PushButton",
-      checkBox: "CheckBox",
-      radioButton: "RadioButton",
-      comboBox: "ComboBox",
-      edit: "Edit"
-    };
-    return `\uD0C0\uC785 \uBD88\uC77C\uCE58: ${typeKo[type]} \uC591\uC2DD \uAC1C\uCCB4\uC5D0\uB294 "${allowed[type]}" \uD544\uB4DC\uB9CC \uC0AC\uC6A9 \uAC00\uB2A5\uD558\uC9C0\uB9CC "${key}"\uC774(\uAC00) \uC9C0\uC815\uB418\uC5C8\uC2B5\uB2C8\uB2E4.`;
-  }
-  return null;
-}
-function readCurrentValue(xml, pos, openTagEnd, _afterOpen, elementEnd, type) {
-  const openTag = xml.slice(pos, openTagEnd + 1);
-  switch (type) {
-    case "button":
-      return decodeXml(getAttr(openTag, "caption"));
-    case "checkBox":
-    case "radioButton":
-      return getAttr(openTag, "value") === "CHECKED";
-    case "comboBox":
-      return decodeXml(getAttr(openTag, "selectedValue"));
-    case "edit": {
-      const elementContent = xml.slice(pos, elementEnd);
-      if (/<hp:text\s*\/>/.test(elementContent)) return "";
-      const tOpenIdx = elementContent.search(/<hp:text>/);
-      if (tOpenIdx >= 0) {
-        const afterOpen = elementContent.indexOf(">", tOpenIdx) + 1;
-        const closePos = elementContent.indexOf("</hp:text>", afterOpen);
-        return closePos >= 0 ? decodeXml(elementContent.slice(afterOpen, closePos)) : "";
+  const sectionEdits = sectionFiles.map(() => []);
+  let offset = 0;
+  for (let si = 0; si < sectionFiles.length; si++) {
+    const count = sectionTblCounts[si] ?? 0;
+    for (let ei = 0; ei < edits.length; ei++) {
+      const edit = edits[ei];
+      if (edit.tableIndex >= offset && edit.tableIndex < offset + count) {
+        const secEdits = sectionEdits[si];
+        if (secEdits) {
+          secEdits.push({
+            tableIndex: edit.tableIndex - offset,
+            // 섹션 내 상대 인덱스
+            row: edit.row,
+            col: edit.col,
+            newText: edit.newText,
+            expectedText: edit.expectedText,
+            originalEditIdx: ei
+          });
+        }
       }
-      return "";
     }
+    offset += count;
   }
-}
-function checkExpected(expected, currentRaw, target) {
-  let expectedVal;
-  if (expected.caption !== void 0) expectedVal = expected.caption;
-  else if (expected.checked !== void 0) expectedVal = expected.checked;
-  else if (expected.selected !== void 0) expectedVal = expected.selected;
-  else if (expected.text !== void 0) expectedVal = expected.text;
-  if (expectedVal === void 0) return null;
-  const matches = typeof expectedVal === "boolean" ? currentRaw === expectedVal : String(currentRaw) === String(expectedVal);
-  if (!matches) {
-    return `\uC591\uC2DD \uAC1C\uCCB4 "${target.name}" \uD604\uC7AC \uAC12\uC774 \uC608\uC0C1\uAC12\uACFC \uB2E4\uB985\uB2C8\uB2E4. \uC608\uC0C1: ${JSON.stringify(expectedVal)}, \uC2E4\uC81C: ${JSON.stringify(currentRaw)}. \uC218\uC815\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.`;
-  }
-  return null;
-}
-function replaceAttrInOpenTag(xml, tagStart, tagEnd, attr, newValue) {
-  const tagStr = xml.slice(tagStart, tagEnd + 1);
-  const re = new RegExp(`\\b(${attr}=")([^"]*)(")`, "");
-  const m = re.exec(tagStr);
-  if (!m) return null;
-  const relFrom = m.index + (m[1]?.length ?? 0);
-  const relTo = relFrom + (m[2]?.length ?? 0);
-  return {
-    from: tagStart + relFrom,
-    to: tagStart + relTo,
-    text: newValue
-  };
-}
-function replaceEditText(_xml, pos, elementContent, newText) {
-  const escaped = escapeXml(newText);
-  const selfCloseRe = /<hp:text\s*\/>/;
-  const scm = selfCloseRe.exec(elementContent);
-  if (scm) {
-    return {
-      from: pos + scm.index,
-      to: pos + scm.index + scm[0].length,
-      text: `<hp:text>${escaped}</hp:text>`
-    };
-  }
-  const openRe = /<hp:text>/;
-  const om = openRe.exec(elementContent);
-  if (om) {
-    const afterOpen = om.index + om[0].length;
-    const closePos = elementContent.indexOf("</hp:text>", afterOpen);
-    if (closePos < 0) return null;
-    return {
-      from: pos + afterOpen,
-      to: pos + closePos,
-      text: escaped
-    };
-  }
-  return null;
-}
-async function listFormObjectsFromZip(zip) {
-  const sectionFiles = Object.keys(zip.files).filter((name) => /^Contents\/section\d+\.xml$/.test(name)).sort();
-  const sectionXmls = [];
-  const objects = [];
-  let globalIndex = 0;
-  for (const sf of sectionFiles) {
-    const entry = zip.file(sf);
-    const xml = entry ? await entry.async("string") : "";
-    sectionXmls.push(xml);
-    const parsed = parseFormObjects(xml, sf, globalIndex);
-    objects.push(...parsed);
-    globalIndex += parsed.length;
-  }
-  return { objects, sectionFiles, sectionXmls };
-}
-function validateHwpxBuffer(ext, buffer) {
-  if (ext === ".hwp") {
-    return "\uC624\uB958: \uC774 \uD234\uC740 .hwpx \uD30C\uC77C\uB9CC \uC9C0\uC6D0\uD569\uB2C8\uB2E4. .hwp(\uAD6C\uD615 OLE \uBC14\uC774\uB108\uB9AC)\uB294 \uC9C1\uC811 \uD3B8\uC9D1\uC774 \uBD88\uAC00\uD569\uB2C8\uB2E4. \uD55C\uAE00 \uD504\uB85C\uADF8\uB7A8\uC5D0\uC11C '\uB2E4\uB978 \uC774\uB984\uC73C\uB85C \uC800\uC7A5 \u2192 .hwpx'\uB85C \uC800\uC7A5\uD55C \uD6C4 \uB2E4\uC2DC \uC2DC\uB3C4\uD558\uC138\uC694.";
+  const totalTables = sectionTblCounts.reduce((a, b) => a + b, 0);
+  const allResults = edits.map((edit, ei) => ({
+    success: false,
+    error: `\uD45C ${edit?.tableIndex ?? ei}\uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. \uBB38\uC11C\uC5D0 \uCD1D ${totalTables}\uAC1C\uC758 \uCD5C\uC0C1\uC704 \uD45C\uAC00 \uC788\uC2B5\uB2C8\uB2E4.`
+  }));
+  const newSectionXmls = [...sectionXmls];
+  for (let si = 0; si < sectionFiles.length; si++) {
+    const sEdits = sectionEdits[si] ?? [];
+    if (sEdits.length === 0) continue;
+    const srcXml = sectionXmls[si] ?? "";
+    const { newXml, results } = applyCellEditsToSectionXml(srcXml, sEdits);
+    newSectionXmls[si] = newXml;
+    for (let i = 0; i < sEdits.length; i++) {
+      const sEdit = sEdits[i];
+      const res = results[i];
+      if (sEdit && res) {
+        allResults[sEdit.originalEditIdx] = res;
+      }
+    }
   }
-  if (ext !== ".hwpx") {
-    return `\uC624\uB958: \uC774 \uD234\uC740 .hwpx \uD30C\uC77C\uB9CC \uC9C0\uC6D0\uD569\uB2C8\uB2E4. \uD604\uC7AC \uD30C\uC77C \uD655\uC7A5\uC790: ${ext}`;
+  if (allResults.some((r) => !r.success)) {
+    return { buffer: hwpxBuffer, results: allResults };
   }
-  if (buffer[0] !== 80 || buffer[1] !== 75) {
-    return "\uC624\uB958: \uD30C\uC77C\uC774 \uC720\uD6A8\uD55C .hwpx(ZIP) \uD3EC\uB9F7\uC774 \uC544\uB2D9\uB2C8\uB2E4. \uD30C\uC77C\uC774 \uC190\uC0C1\uB418\uC5C8\uAC70\uB098 \uAD6C\uD615 .hwp(OLE \uBC14\uC774\uB108\uB9AC) \uD3EC\uB9F7\uC785\uB2C8\uB2E4.";
+  const out = new import_jszip2.default();
+  const mimetypeEntry = zip.file("mimetype");
+  if (mimetypeEntry) {
+    out.file("mimetype", await mimetypeEntry.async("uint8array"), { compression: "STORE" });
   }
-  return null;
-}
-var listFormObjectsSchema = z32.object({
-  path: z32.string().describe("\uC77D\uC744 .hwpx \uD30C\uC77C \uACBD\uB85C")
-});
-var formEditSetSchema = z32.object({
-  caption: z32.string().optional().describe("PushButton \uCEA1\uC158 \uD14D\uC2A4\uD2B8"),
-  checked: z32.boolean().optional().describe("CheckBox/RadioButton \uCCB4\uD06C \uC0C1\uD0DC (true=CHECKED)"),
-  selected: z32.string().optional().describe("ComboBox \uC120\uD0DD \uAC12 (listItem \uC911 \uD558\uB098\uC5EC\uC57C \uD568)"),
-  text: z32.string().optional().describe("Edit \uD14D\uC2A4\uD2B8 \uB0B4\uC6A9")
-}).refine(
-  (v) => {
-    const keys = ["caption", "checked", "selected", "text"].filter(
-      (k) => v[k] !== void 0
-    );
-    return keys.length === 1;
-  },
-  { message: "set \uD544\uB4DC\uB294 caption/checked/selected/text \uC911 \uC815\uD655\uD788 \uD558\uB098\uB9CC \uC9C0\uC815\uD574\uC57C \uD569\uB2C8\uB2E4." }
-);
-var formEditExpectedSchema = z32.object({
-  caption: z32.string().optional(),
-  checked: z32.boolean().optional(),
-  selected: z32.string().optional(),
-  text: z32.string().optional()
-}).optional();
-var formEditItemSchema = z32.object({
-  name: z32.string().describe("\uC591\uC2DD \uAC1C\uCCB4\uC758 name \uC18D\uC131 \uAC12"),
-  index: z32.number().int().nonnegative().optional().describe("\uB3D9\uC77C name\uC774 \uC5EC\uB7FF\uC778 \uACBD\uC6B0 \uBB38\uC11C \uC804\uCCB4 0-based \uC778\uB371\uC2A4\uB85C \uAD6C\uBD84"),
-  set: formEditSetSchema.describe("\uBCC0\uACBD\uD560 \uAC12 (caption/checked/selected/text \uC911 \uD558\uB098)"),
-  expected: formEditExpectedSchema.describe(
-    "\uD604\uC7AC \uAC12 \uC0AC\uC804 \uAC80\uC99D (\uC548\uC804 \uC635\uC158). \uC2E4\uC81C \uAC12\uC774 \uB2E4\uB974\uBA74 \uC774 \uD3B8\uC9D1\uC744 \uCDE8\uC18C\uD558\uACE0 \uC624\uB958 \uBC18\uD658."
-  )
-});
-var proposeFormObjectSchema = z32.object({
-  path: z32.string().describe("\uC218\uC815\uD560 .hwpx \uD30C\uC77C \uACBD\uB85C"),
-  edits: z32.array(formEditItemSchema).min(1).describe("\uC591\uC2DD \uAC1C\uCCB4 \uD3B8\uC9D1 \uBAA9\uB85D"),
-  summary: z32.string().describe("\uBCC0\uACBD \uC694\uC57D (\uD55C\uAD6D\uC5B4 1-2\uBB38\uC7A5)")
-});
-var listFormObjectsTool = {
-  name: "list_form_objects",
-  description: "HWPX \uBB38\uC11C\uC758 \uC591\uC2DD \uAC1C\uCCB4(form object) \uBAA9\uB85D\uC744 \uC5F4\uAC70\uD569\uB2C8\uB2E4. PushButton, CheckBox, RadioButton, ComboBox, Edit \uB2E4\uC12F \uAC00\uC9C0 \uD0C0\uC785\uC744 \uC9C0\uC6D0\uD569\uB2C8\uB2E4. \uAC01 \uC591\uC2DD \uAC1C\uCCB4\uC758 \uC774\uB984(name), \uD0C0\uC785, \uD604\uC7AC \uAC12, ComboBox\uC758 \uACBD\uC6B0 \uC120\uD0DD \uAC00\uB2A5\uD55C \uD56D\uBAA9 \uBAA9\uB85D\uC744 \uBC18\uD658\uD569\uB2C8\uB2E4. propose_form_object\uB85C \uAC12\uC744 \uC218\uC815\uD558\uAE30 \uC804\uC5D0 \uC774 \uD234\uB85C \uBA3C\uC800 \uD604\uC7AC \uC0C1\uD0DC\uB97C \uD655\uC778\uD558\uC138\uC694. .hwpx \uD30C\uC77C \uC804\uC6A9\uC785\uB2C8\uB2E4.",
-  inputSchema: listFormObjectsSchema,
-  requiresApproval: false,
-  execute: async ({
-    input,
-    ctx
-  }) => {
-    const safePath = await resolveSafePath(ctx.cwd, input.path);
-    const ext = extname3(safePath).toLowerCase();
-    let buffer;
-    try {
-      buffer = await readFile4(safePath);
-    } catch {
-      return `\uC624\uB958: \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${input.path}`;
-    }
-    const validationError = validateHwpxBuffer(ext, new Uint8Array(buffer.buffer));
-    if (validationError) return validationError;
-    let zip;
-    try {
-      zip = await import_jszip.default.loadAsync(new Uint8Array(buffer.buffer));
-    } catch {
-      return "\uC624\uB958: .hwpx(ZIP) \uD30C\uC77C\uC744 \uC5F4 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. \uD30C\uC77C\uC774 \uC190\uC0C1\uB418\uC5C8\uC744 \uC218 \uC788\uC2B5\uB2C8\uB2E4.";
-    }
-    const { objects } = await listFormObjectsFromZip(zip);
-    if (objects.length === 0) {
-      return "\uC774 \uBB38\uC11C\uC5D0\uB294 \uC591\uC2DD \uAC1C\uCCB4(form object)\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.";
-    }
-    const lines = [`\uCD1D ${objects.length}\uAC1C\uC758 \uC591\uC2DD \uAC1C\uCCB4\uAC00 \uBC1C\uACAC\uB418\uC5C8\uC2B5\uB2C8\uB2E4.
-`];
-    const typeKo = {
-      button: "PushButton",
-      checkBox: "CheckBox",
-      radioButton: "RadioButton",
-      comboBox: "ComboBox",
-      edit: "Edit"
-    };
-    for (const obj of objects) {
-      let valueStr;
-      if (typeof obj.currentValue === "boolean") {
-        valueStr = obj.currentValue ? "\uCCB4\uD06C\uB428 (CHECKED)" : "\uCCB4\uD06C \uD574\uC81C\uB428 (UNCHECKED)";
-      } else {
-        valueStr = `"${obj.currentValue}"`;
-      }
-      let line = `[${obj.index}] name="${obj.name}" | \uD0C0\uC785: ${typeKo[obj.type]} | \uD604\uC7AC \uAC12: ${valueStr}`;
-      if (obj.type === "comboBox" && obj.comboItems) {
-        const itemList = obj.comboItems.map((v) => `"${v}"`).join(", ");
-        line += ` | \uD56D\uBAA9: [${itemList}]`;
-      }
-      lines.push(line);
+  for (const [name, entry] of Object.entries(zip.files)) {
+    if (name === "mimetype" || entry.dir) continue;
+    const sectionIdx = sectionFiles.indexOf(name);
+    if (sectionIdx >= 0) {
+      out.file(name, newSectionXmls[sectionIdx] ?? "");
+    } else {
+      out.file(name, await entry.async("uint8array"));
     }
-    return lines.join("\n");
   }
-};
-var proposeFormObjectTool = {
-  name: "propose_form_object",
-  description: "HWPX \uBB38\uC11C\uC758 \uC591\uC2DD \uAC1C\uCCB4(form object) \uAC12\uC744 XML \uC9C1\uC811 \uD328\uCE58 \uBC29\uC2DD\uC73C\uB85C \uC218\uC815\uD569\uB2C8\uB2E4. PushButton(caption), CheckBox/RadioButton(checked), ComboBox(selected), Edit(text)\uB97C \uC218\uC815\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4. kordoc IR\uC5D0 \uC591\uC2DD \uAC1C\uCCB4 \uD0C0\uC785\uC774 \uC5C6\uC73C\uBBC0\uB85C section XML\uC744 \uC9C1\uC811 \uD328\uCE58\uD569\uB2C8\uB2E4. \uC218\uC815 \uC804\uC5D0 list_form_objects\uB85C \uD604\uC7AC \uC0C1\uD0DC\uB97C \uD655\uC778\uD558\uC138\uC694. name\uC774 \uC911\uBCF5\uB41C \uACBD\uC6B0 index\uB85C \uB300\uC0C1\uC744 \uC9C0\uC815\uD558\uC138\uC694. \uBCC0\uACBD \uC0AC\uD56D\uC740 \uC0AC\uC6A9\uC790 \uC2B9\uC778 \uD6C4\uC5D0\uB9CC \uC800\uC7A5\uB429\uB2C8\uB2E4. .hwpx \uD30C\uC77C \uC804\uC6A9\uC785\uB2C8\uB2E4.",
-  inputSchema: proposeFormObjectSchema,
+  const buf = await out.generateAsync({ type: "nodebuffer", compression: "DEFLATE" });
+  return { buffer: new Uint8Array(buf), results: allResults };
+}
+var proposeCellEditTool = {
+  name: "propose_cell_edit",
+  description: "HWPX \uBB38\uC11C\uC758 \uD45C \uC140 \uB0B4\uC6A9\uC744 XML \uC9C1\uC811 \uD328\uCE58 \uBC29\uC2DD\uC73C\uB85C \uC218\uC815\uD569\uB2C8\uB2E4. \uBCD1\uD569 \uC140(cellSpan/rowSpan)\uC774 \uC788\uB294 \uD45C\uC5D0\uC11C\uB3C4 \uBCD1\uD569 \uAD6C\uC870\uB97C \uC644\uC804\uD788 \uBCF4\uC874\uD569\uB2C8\uB2E4. \uBE48 \uC140(<hp:t/> self-closing \uB7F0)\uB3C4 \uCC44\uC6B8 \uC218 \uC788\uC5B4 \uC591\uC2DD(form) \uD3B8\uC9D1\uC5D0 \uC801\uD569\uD569\uB2C8\uB2E4. \uC140 \uC8FC\uC18C \uC9C0\uC815 \uBC29\uBC95: (1) \uC88C\uD45C \uBAA8\uB4DC \u2014 tableIndex + row + col \uC9C1\uC811 \uC9C0\uC815. (2) \uB808\uC774\uBE14 \uBAA8\uB4DC \u2014 label(\uC778\uC811 \uB808\uC774\uBE14 \uC140 \uD14D\uC2A4\uD2B8) + direction(right/below, \uAE30\uBCF8 right) + \uC120\uD0DD\uC801 tableIndex\uB85C \uB808\uC774\uBE14 \uC606/\uC544\uB798 \uC140\uC744 \uC790\uB3D9\uC73C\uB85C \uCC3E\uC544 \uD3B8\uC9D1. \uBCD1\uD569 \uB808\uC774\uBE14 \uC140\uB3C4 colSpan/rowSpan\uC744 \uBC18\uC601\uD558\uC5EC \uB300\uC0C1 \uC140\uC744 \uACC4\uC0B0\uD569\uB2C8\uB2E4. propose_edit/propose_form_fill\uC740 \uB9C8\uD06C\uB2E4\uC6B4 \uB77C\uC6B4\uB4DC\uD2B8\uB9BD\uC73C\uB85C \uBCD1\uD569 \uC140\uC744 \uC18C\uC2E4\uC2DC\uD0A4\uBBC0\uB85C, \uBCD1\uD569 \uC140\uC774 \uC788\uB294 \uD45C\uB97C \uC218\uC815\uD560 \uB54C\uB294 \uC774 \uD234\uC744 \uC0AC\uC6A9\uD558\uC138\uC694. .hwpx \uD30C\uC77C \uC804\uC6A9\uC785\uB2C8\uB2E4. .hwp\uB294 \uC9C0\uC6D0\uD558\uC9C0 \uC54A\uC73C\uBA70 Hancom\uC5D0\uC11C .hwpx\uB85C \uC800\uC7A5 \uD6C4 \uC0AC\uC6A9\uD558\uC138\uC694. \uC218\uC815 \uC804\uC5D0 \uBC18\uB4DC\uC2DC read_document\uB85C \uC6D0\uBCF8\uC744 \uC77D\uACE0, expectedText\uB97C \uC9C0\uC815\uD558\uC5EC \uC548\uC804\uD558\uAC8C \uC218\uC815\uD558\uC138\uC694. \uBCC0\uACBD \uC0AC\uD56D\uC740 diff \uBBF8\uB9AC\uBCF4\uAE30\uC640 \uD568\uAED8 \uC0AC\uC6A9\uC790 \uC2B9\uC778\uC744 \uBC1B\uC740 \uD6C4\uC5D0\uB9CC \uC800\uC7A5\uB429\uB2C8\uB2E4.",
+  inputSchema: proposeCellEditSchema,
   requiresApproval: true,
   propose: async ({
     input,
@@ -11836,145 +11856,196 @@ var proposeFormObjectTool = {
   }) => {
     const safePath = await resolveSafePath(ctx.cwd, input.path);
     const ext = extname3(safePath).toLowerCase();
+    if (ext === ".hwp") {
+      return "\uC624\uB958: propose_cell_edit\uC740 .hwpx \uD30C\uC77C\uB9CC \uC9C0\uC6D0\uD569\uB2C8\uB2E4. .hwp(\uAD6C\uD615 OLE \uBC14\uC774\uB108\uB9AC)\uB294 \uC9C1\uC811 \uD3B8\uC9D1\uC774 \uBD88\uAC00\uD569\uB2C8\uB2E4. \uD55C\uAE00 \uD504\uB85C\uADF8\uB7A8\uC5D0\uC11C '\uB2E4\uB978 \uC774\uB984\uC73C\uB85C \uC800\uC7A5 \u2192 .hwpx'\uB85C \uC800\uC7A5\uD55C \uD6C4 \uB2E4\uC2DC \uC2DC\uB3C4\uD558\uC138\uC694. \uB610\uB294 propose_edit\uC744 \uC0AC\uC6A9\uD560 \uC218 \uC788\uC73C\uB098, \uBCD1\uD569 \uC140\uC774 \uC18C\uC2E4\uB420 \uC218 \uC788\uC2B5\uB2C8\uB2E4.";
+    }
+    if (ext !== ".hwpx") {
+      return `\uC624\uB958: propose_cell_edit\uC740 .hwpx \uD30C\uC77C\uB9CC \uC9C0\uC6D0\uD569\uB2C8\uB2E4. \uD604\uC7AC \uD30C\uC77C: ${ext}. \uD45C \uC140 \uC9C1\uC811 \uD3B8\uC9D1\uC740 .hwpx \uD3EC\uB9F7\uC5D0\uC11C\uB9CC \uAC00\uB2A5\uD569\uB2C8\uB2E4.`;
+    }
     let originalBuffer;
     try {
       originalBuffer = await readFile4(safePath);
     } catch {
-      return `\uC624\uB958: \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${input.path}`;
+      return `\uC624\uB958: \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${input.path}. \uACBD\uB85C\uB97C \uD655\uC778\uD558\uAC70\uB098 read_document\uB85C \uBA3C\uC800 \uD655\uC778\uD558\uC138\uC694.`;
     }
-    const bufArray = new Uint8Array(originalBuffer.buffer);
-    const validationError = validateHwpxBuffer(ext, bufArray);
-    if (validationError) return validationError;
-    let zip;
-    try {
-      zip = await import_jszip.default.loadAsync(bufArray);
-    } catch {
-      return "\uC624\uB958: .hwpx(ZIP) \uD30C\uC77C\uC744 \uC5F4 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. \uD30C\uC77C\uC774 \uC190\uC0C1\uB418\uC5C8\uC744 \uC218 \uC788\uC2B5\uB2C8\uB2E4.";
+    if (originalBuffer[0] !== 80 || originalBuffer[1] !== 75) {
+      return "\uC624\uB958: \uD30C\uC77C\uC774 \uC720\uD6A8\uD55C .hwpx(ZIP) \uD3EC\uB9F7\uC774 \uC544\uB2D9\uB2C8\uB2E4. \uD30C\uC77C\uC774 \uC190\uC0C1\uB418\uC5C8\uAC70\uB098 \uAD6C\uD615 .hwp(OLE \uBC14\uC774\uB108\uB9AC) \uD3EC\uB9F7\uC785\uB2C8\uB2E4. \uD55C\uAE00 \uD504\uB85C\uADF8\uB7A8\uC5D0\uC11C .hwpx\uB85C \uC800\uC7A5 \uD6C4 \uB2E4\uC2DC \uC2DC\uB3C4\uD558\uC138\uC694.";
     }
-    const { objects, sectionFiles, sectionXmls } = await listFormObjectsFromZip(zip);
-    const resolvedEdits = [];
-    const resolveErrors = [];
-    for (let ei = 0; ei < input.edits.length; ei++) {
-      const edit = input.edits[ei];
-      if (!edit) continue;
-      const candidates = objects.filter((o) => o.name === edit.name);
-      if (candidates.length === 0) {
-        resolveErrors.push(
-          `\uD3B8\uC9D1 #${ei + 1}: name="${edit.name}"\uC778 \uC591\uC2DD \uAC1C\uCCB4\uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. list_form_objects\uB85C \uBB38\uC11C\uC758 \uC591\uC2DD \uAC1C\uCCB4 \uBAA9\uB85D\uC744 \uD655\uC778\uD558\uC138\uC694.`
-        );
-        continue;
+    const zipForLabel = await import_jszip2.default.loadAsync(new Uint8Array(originalBuffer.buffer));
+    const sectionFilesForLabel = Object.keys(zipForLabel.files).filter((name) => /^Contents\/section\d+\.xml$/.test(name)).sort();
+    const sectionInfos = [];
+    let globalTblOffset = 0;
+    for (const sf of sectionFilesForLabel) {
+      const entry = zipForLabel.file(sf);
+      const xml = entry ? await entry.async("string") : "";
+      const tokens = tokenizeHwpxXml(xml);
+      let count = 0;
+      let d = 0;
+      for (const tok of tokens) {
+        if (tok.kind === "tbl_open") {
+          if (d === 0) count++;
+          d++;
+        } else if (tok.kind === "tbl_close") {
+          d--;
+        }
       }
-      let target;
-      if (candidates.length > 1) {
-        if (edit.index === void 0) {
-          const indices = candidates.map((c) => c.index).join(", ");
-          resolveErrors.push(
-            `\uD3B8\uC9D1 #${ei + 1}: name="${edit.name}"\uC778 \uC591\uC2DD \uAC1C\uCCB4\uAC00 ${candidates.length}\uAC1C \uBC1C\uACAC\uB418\uC5C8\uC2B5\uB2C8\uB2E4 (\uBB38\uC11C \uC778\uB371\uC2A4: ${indices}). index \uD544\uB4DC\uB85C \uB300\uC0C1\uC744 \uC9C0\uC815\uD558\uC138\uC694.`
-          );
-          continue;
+      sectionInfos.push({ xml, tblCount: count, globalOffset: globalTblOffset });
+      globalTblOffset += count;
+    }
+    function resolveLabelAcrossSections(label, direction, scopedTableIndex) {
+      const trimmedLabel = label.trim();
+      const allMatches = [];
+      for (const si of sectionInfos) {
+        const tokens = tokenizeHwpxXml(si.xml);
+        let localStart = 0;
+        let localEnd = si.tblCount - 1;
+        if (scopedTableIndex !== void 0) {
+          const localIdx2 = scopedTableIndex - si.globalOffset;
+          if (localIdx2 < 0 || localIdx2 >= si.tblCount) continue;
+          localStart = localIdx2;
+          localEnd = localIdx2;
         }
-        const byIndex = candidates.find((c) => c.index === edit.index);
-        if (!byIndex) {
-          resolveErrors.push(
-            `\uD3B8\uC9D1 #${ei + 1}: name="${edit.name}", index=${edit.index}\uC778 \uC591\uC2DD \uAC1C\uCCB4\uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.`
-          );
-          continue;
+        for (let li = localStart; li <= localEnd; li++) {
+          const tblRange = findTopLevelTableRange(tokens, li);
+          if (!tblRange) continue;
+          const directTcs = collectDirectTcRanges(tokens, tblRange.start, tblRange.end);
+          for (const tc of directTcs) {
+            const cellText = readOwnTextFromTc(si.xml, tokens, tc.start, tc.end).trim();
+            if (cellText === trimmedLabel) {
+              const addrSpan2 = readCellAddrSpan(tokens, tc.start, tc.end);
+              if (addrSpan2) {
+                allMatches.push({
+                  globalTableIndex: si.globalOffset + li,
+                  addrSpan: addrSpan2,
+                  sectionXml: si.xml,
+                  sectionOffset: si.globalOffset
+                });
+              }
+            }
+          }
         }
-        target = byIndex;
+      }
+      if (allMatches.length === 0) {
+        const scope = scopedTableIndex !== void 0 ? `\uD45C ${scopedTableIndex}` : "\uBB38\uC11C \uB0B4 \uBAA8\uB4E0 \uD45C";
+        return {
+          error: `\uB808\uC774\uBE14 "${label}"\uC744(\uB97C) ${scope}\uC5D0\uC11C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. read_document\uB85C \uD45C \uB0B4\uC6A9\uC744 \uD655\uC778\uD558\uC138\uC694.`
+        };
+      }
+      if (allMatches.length > 1) {
+        const locs = allMatches.map(
+          (m) => `\uD45C ${m.globalTableIndex} (\uD589 ${m.addrSpan.rowAddr}, \uC5F4 ${m.addrSpan.colAddr})`
+        ).join(", ");
+        return {
+          error: `\uB808\uC774\uBE14 "${label}"\uC774(\uAC00) \uC5EC\uB7EC \uC140\uC5D0\uC11C \uBC1C\uACAC\uB418\uC5C8\uC2B5\uB2C8\uB2E4: ${locs}. tableIndex\uB85C \uD0D0\uC0C9 \uBC94\uC704\uB97C \uC881\uD788\uAC70\uB098 \uC88C\uD45C(row/col)\uB97C \uC9C1\uC811 \uC9C0\uC815\uD558\uC138\uC694.`
+        };
+      }
+      const match = allMatches[0];
+      const { addrSpan, globalTableIndex, sectionXml, sectionOffset } = match;
+      let targetRow;
+      let targetCol;
+      if (direction === "right") {
+        targetRow = addrSpan.rowAddr;
+        targetCol = addrSpan.colAddr + addrSpan.colSpan;
       } else {
-        target = candidates[0];
-        if (edit.index !== void 0 && edit.index !== target.index) {
-          resolveErrors.push(
-            `\uD3B8\uC9D1 #${ei + 1}: name="${edit.name}"\uC758 \uBB38\uC11C \uC778\uB371\uC2A4\uB294 ${target.index}\uC774\uC9C0\uB9CC index=${edit.index}\uAC00 \uC9C0\uC815\uB418\uC5C8\uC2B5\uB2C8\uB2E4.`
-          );
-          continue;
+        targetRow = addrSpan.rowAddr + addrSpan.rowSpan;
+        targetCol = addrSpan.colAddr;
+      }
+      const localIdx = globalTableIndex - sectionOffset;
+      const tokens2 = tokenizeHwpxXml(sectionXml);
+      const tblRange2 = findTopLevelTableRange(tokens2, localIdx);
+      if (!tblRange2) {
+        return { error: `\uD45C ${globalTableIndex}\uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4 (\uB0B4\uBD80 \uC624\uB958).` };
+      }
+      const directTcs2 = collectDirectTcRanges(tokens2, tblRange2.start, tblRange2.end);
+      const tblTokens2 = tokens2.filter((t) => t.pos >= tblRange2.start && t.pos < tblRange2.end);
+      let targetExists = false;
+      for (const tc of directTcs2) {
+        const tcTokens = tblTokens2.filter((t) => t.pos >= tc.start && t.pos < tc.end);
+        if (tcTokens.some(
+          (t) => t.kind === "cell_addr" && t.colAddr === targetCol && t.rowAddr === targetRow
+        )) {
+          targetExists = true;
+          break;
         }
       }
-      resolvedEdits.push({
-        target,
-        set: edit.set,
-        expected: edit.expected,
-        editIdx: ei
-      });
+      if (!targetExists) {
+        const dirLabel = direction === "right" ? "\uC624\uB978\uCABD" : "\uC544\uB798";
+        return {
+          error: `\uB808\uC774\uBE14 "${label}" (\uD45C ${globalTableIndex}, \uD589 ${addrSpan.rowAddr}, \uC5F4 ${addrSpan.colAddr})\uC758 ${dirLabel} \uC140 (\uD589 ${targetRow}, \uC5F4 ${targetCol})\uC774 \uC874\uC7AC\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. direction \uB610\uB294 \uC88C\uD45C\uB97C \uD655\uC778\uD558\uC138\uC694.`
+        };
+      }
+      return { tableIndex: globalTableIndex, row: targetRow, col: targetCol };
+    }
+    const resolvedEdits = [];
+    const resolveErrors = [];
+    for (let i = 0; i < input.edits.length; i++) {
+      const e = input.edits[i];
+      if (!e) continue;
+      if (e.label !== void 0 && (e.row !== void 0 || e.col !== void 0)) {
+        resolveErrors.push(
+          `\uD3B8\uC9D1 #${i + 1}: label\uACFC row/col\uC744 \uB3D9\uC2DC\uC5D0 \uC9C0\uC815\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. \uC88C\uD45C \uBAA8\uB4DC(tableIndex+row+col) \uB610\uB294 \uB808\uC774\uBE14 \uBAA8\uB4DC(label) \uC911 \uD558\uB098\uB9CC \uC0AC\uC6A9\uD558\uC138\uC694.`
+        );
+      } else if (e.label !== void 0) {
+        const direction = e.direction ?? "right";
+        const resolved = resolveLabelAcrossSections(e.label, direction, e.tableIndex);
+        if ("error" in resolved) {
+          resolveErrors.push(`\uD3B8\uC9D1 #${i + 1} (\uB808\uC774\uBE14 "${e.label}"): ${resolved.error}`);
+        } else {
+          resolvedEdits.push({
+            tableIndex: resolved.tableIndex,
+            row: resolved.row,
+            col: resolved.col,
+            newText: e.newText,
+            expectedText: e.expectedText,
+            label: e.label
+          });
+        }
+      } else if (e.tableIndex !== void 0 && e.row !== void 0 && e.col !== void 0) {
+        resolvedEdits.push({
+          tableIndex: e.tableIndex,
+          row: e.row,
+          col: e.col,
+          newText: e.newText,
+          expectedText: e.expectedText
+        });
+      } else {
+        resolveErrors.push(
+          `\uD3B8\uC9D1 #${i + 1}: \uC88C\uD45C \uBAA8\uB4DC(tableIndex+row+col) \uB610\uB294 \uB808\uC774\uBE14 \uBAA8\uB4DC(label) \uC911 \uD558\uB098\uB97C \uC644\uC804\uD788 \uC9C0\uC815\uD558\uC138\uC694. read_document\uB85C \uD45C \uB0B4\uC6A9\uC744 \uBA3C\uC800 \uD655\uC778\uD558\uC138\uC694.`
+        );
+      }
     }
     if (resolveErrors.length > 0) {
-      return `\uC624\uB958: \uB2E4\uC74C \uD3B8\uC9D1 \uB300\uC0C1\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC5B4 \uD30C\uC77C\uC744 \uC218\uC815\uD558\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4.
+      return `\uC624\uB958: \uB2E4\uC74C \uB808\uC774\uBE14\uC744 \uD574\uC11D\uD560 \uC218 \uC5C6\uC5B4 \uD30C\uC77C\uC744 \uC218\uC815\uD558\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4.
 ${resolveErrors.join("\n")}`;
     }
-    const sectionEditMap = /* @__PURE__ */ new Map();
-    for (const re of resolvedEdits) {
-      const si = sectionFiles.indexOf(re.target.sectionFile);
-      if (si < 0) continue;
-      if (!sectionEditMap.has(si)) sectionEditMap.set(si, []);
-      sectionEditMap.get(si).push({
-        target: re.target,
-        set: re.set,
-        expected: re.expected
+    const editRequests = resolvedEdits.map((e) => ({
+      tableIndex: e.tableIndex,
+      row: e.row,
+      col: e.col,
+      newText: e.newText,
+      expectedText: e.expectedText
+    }));
+    const { buffer: newBuffer, results } = await applyEditsToHwpx(
+      new Uint8Array(originalBuffer.buffer),
+      editRequests
+    );
+    const failedResults = results.map((r, i) => ({ r, i })).filter(({ r }) => !r.success);
+    if (failedResults.length > 0) {
+      const messages = failedResults.map(({ r, i }) => {
+        const e = resolvedEdits[i];
+        const label = e?.label ? `\uB808\uC774\uBE14 "${e.label}" \u2192 ` : "";
+        return `\uD3B8\uC9D1 #${i + 1} (${label}\uD45C ${e?.tableIndex ?? "?"}, \uD589 ${e?.row ?? "?"}, \uC5F4 ${e?.col ?? "?"}): ${r.error}`;
       });
-    }
-    const sectionResults = [];
-    const newSectionXmls = [...sectionXmls];
-    for (const [si, edits] of sectionEditMap) {
-      const xml = sectionXmls[si] ?? "";
-      const { newXml, results } = applyFormObjectEdits(xml, edits);
-      newSectionXmls[si] = newXml;
-      sectionResults.push({ si, results, edits });
-    }
-    const failMessages = [];
-    const successMap = /* @__PURE__ */ new Map();
-    for (const sr of sectionResults) {
-      for (let i = 0; i < sr.edits.length; i++) {
-        const editReq = sr.edits[i];
-        const result = sr.results[i];
-        const resolved = resolvedEdits.find((r) => r.target === editReq.target);
-        if (resolved) {
-          successMap.set(resolved.editIdx, result);
-          if (!result.success) {
-            failMessages.push(
-              `\uD3B8\uC9D1 #${resolved.editIdx + 1} (name="${editReq.target.name}"): ${result.error}`
-            );
-          }
-        }
-      }
-    }
-    if (failMessages.length > 0) {
       return `\uC624\uB958: \uB2E4\uC74C \uD3B8\uC9D1\uC744 \uC801\uC6A9\uD560 \uC218 \uC5C6\uC5B4 \uD30C\uC77C\uC744 \uC218\uC815\uD558\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4.
-${failMessages.join("\n")}`;
-    }
-    const out = new import_jszip.default();
-    const mimetypeEntry = zip.file("mimetype");
-    if (mimetypeEntry) {
-      out.file("mimetype", await mimetypeEntry.async("uint8array"), { compression: "STORE" });
-    }
-    for (const [name, entry] of Object.entries(zip.files)) {
-      if (name === "mimetype" || entry.dir) continue;
-      const si = sectionFiles.indexOf(name);
-      if (si >= 0) {
-        out.file(name, newSectionXmls[si] ?? "");
-      } else {
-        out.file(name, await entry.async("uint8array"));
-      }
+${messages.join("\n")}`;
     }
-    const buf = await out.generateAsync({ type: "nodebuffer", compression: "DEFLATE" });
-    const newBuffer = new Uint8Array(buf);
-    const typeKo = {
-      button: "PushButton",
-      checkBox: "CheckBox",
-      radioButton: "RadioButton",
-      comboBox: "ComboBox",
-      edit: "Edit"
-    };
-    const diffLines = ["| \uC591\uC2DD \uAC1C\uCCB4 | \uC774\uC804 | \uC774\uD6C4 |", "| --- | --- | --- |"];
-    for (const re of resolvedEdits) {
-      const result = successMap.get(re.editIdx);
-      const oldVal = result?.oldValue ?? "";
-      const oldStr = typeof oldVal === "boolean" ? oldVal ? "CHECKED" : "UNCHECKED" : String(oldVal);
-      let newStr;
-      if (re.set.caption !== void 0) newStr = re.set.caption;
-      else if (re.set.checked !== void 0) newStr = re.set.checked ? "CHECKED" : "UNCHECKED";
-      else if (re.set.selected !== void 0) newStr = re.set.selected;
-      else newStr = re.set.text ?? "";
-      diffLines.push(`| ${re.target.name}(${typeKo[re.target.type]}) | ${oldStr} | ${newStr} |`);
+    const diffLines = ["| \uD45C\xB7\uC140 | \uC774\uC804 | \uC774\uD6C4 |", "| --- | --- | --- |"];
+    for (let i = 0; i < resolvedEdits.length; i++) {
+      const e = resolvedEdits[i];
+      if (!e) continue;
+      const oldText = results[i]?.oldText ?? "";
+      const addr = e.label ? `\uB808\uC774\uBE14 "${e.label}" \u2192 #${e.tableIndex} (${e.row},${e.col})` : `#${e.tableIndex} (${e.row},${e.col})`;
+      diffLines.push(`| ${addr} | ${oldText} | ${e.newText} |`);
     }
     const diff = diffLines.join("\n");
     const { outputPath, willConvertFormat } = resolveOutputPath(safePath);
@@ -11983,7 +12054,7 @@ ${failMessages.join("\n")}`;
     return {
       proposal: {
         id: proposalId,
-        kind: "form-object",
+        kind: "cell-edit",
         targetPath: outputPath,
         stagedPath,
         summary: input.summary,
@@ -12000,640 +12071,790 @@ ${failMessages.join("\n")}`;
     };
   }
 };
-var DOC_EXTENSIONS = /* @__PURE__ */ new Set([
-  ".hwp",
-  ".hwpx",
-  ".hwpml",
-  ".docx",
-  ".doc",
-  ".xlsx",
-  ".xls",
-  ".pdf",
-  ".pptx",
-  ".ppt",
-  ".md",
-  ".txt"
-]);
-var SKIP_DIRS = /* @__PURE__ */ new Set([
-  "node_modules",
-  ".git",
-  ".DS_Store",
-  "__pycache__",
-  "dist",
-  "build",
-  ".next"
-]);
-var MAX_DEPTH = 4;
-var MAX_FILES = 500;
-var listFilesSchema = z4.object({
-  dir: z4.string().optional().describe("\uBAA9\uB85D\uC744 \uC870\uD68C\uD560 \uB514\uB809\uD130\uB9AC (\uBBF8\uC9C0\uC815 \uC2DC cwd \uC804\uCCB4)")
+var findInDocumentSchema = z4.object({
+  path: z4.string().describe("\uAC80\uC0C9\uD560 .hwpx \uBB38\uC11C \uACBD\uB85C"),
+  query: z4.string().min(1).describe("\uCC3E\uC744 \uD14D\uC2A4\uD2B8"),
+  caseSensitive: z4.boolean().optional().describe("\uB300\uC18C\uBB38\uC790 \uAD6C\uBD84 (\uAE30\uBCF8 false)")
 });
-async function collectFiles(dir, cwd, depth, entries) {
-  if (depth > MAX_DEPTH || entries.length >= MAX_FILES) return;
-  let items;
-  try {
-    items = await readdir3(dir);
-  } catch {
-    return;
-  }
-  for (const item of items) {
-    if (entries.length >= MAX_FILES) break;
-    if (item.startsWith(".")) continue;
-    if (SKIP_DIRS.has(item)) continue;
-    const fullPath = join4(dir, item);
-    let info;
-    try {
-      info = await stat3(fullPath);
-    } catch {
-      continue;
+function unescapeXml(text3) {
+  return text3.replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&amp;/g, "&");
+}
+function windowText(text3, query, caseSensitive, maxLen = 60) {
+  const compare3 = caseSensitive ? text3 : text3.toLowerCase();
+  const compareQuery = caseSensitive ? query : query.toLowerCase();
+  const idx = compare3.indexOf(compareQuery);
+  if (idx < 0) return text3.slice(0, maxLen);
+  const half = Math.floor((maxLen - query.length) / 2);
+  const start = Math.max(0, idx - half);
+  const end = Math.min(text3.length, idx + query.length + half);
+  const prefix = start > 0 ? "\u2026" : "";
+  const suffix = end < text3.length ? "\u2026" : "";
+  return prefix + text3.slice(start, end) + suffix;
+}
+function findInSectionXmls(xmls, query, caseSensitive) {
+  const hits = [];
+  let globalOffset = 0;
+  for (let si = 0; si < xmls.length; si++) {
+    const xml = xmls[si] ?? "";
+    const tokens = tokenizeHwpxXml(xml);
+    let localCount = 0;
+    {
+      let depth = 0;
+      for (const tok of tokens) {
+        if (tok.kind === "tbl_open") {
+          if (depth === 0) localCount++;
+          depth++;
+        } else if (tok.kind === "tbl_close") {
+          depth--;
+        }
+      }
+    }
+    for (let ti = 0; ti < localCount; ti++) {
+      const range = findTopLevelTableRange(tokens, ti);
+      if (!range) continue;
+      const cells = collectDirectTcRanges(tokens, range.start, range.end);
+      const tblTokens = tokens.filter((t) => t.pos >= range.start && t.pos < range.end);
+      for (const cell of cells) {
+        const cellText = readOwnTextFromTc(xml, tokens, cell.start, cell.end);
+        const compare3 = caseSensitive ? cellText : cellText.toLowerCase();
+        const compareQuery = caseSensitive ? query : query.toLowerCase();
+        if (!compare3.includes(compareQuery)) continue;
+        const cellTokens = tblTokens.filter((t) => t.pos >= cell.start && t.pos < cell.end);
+        const addrTok = cellTokens.find((t) => t.kind === "cell_addr");
+        if (addrTok === void 0) continue;
+        const row = addrTok.rowAddr ?? 0;
+        const col = addrTok.colAddr ?? 0;
+        const truncated = cellText.length > 60 ? `${cellText.slice(0, 57)}\u2026` : cellText;
+        hits.push({
+          kind: "\uD45C",
+          tableIndex: globalOffset + ti,
+          row,
+          col,
+          text: truncated
+        });
+      }
     }
-    const relPath = relative2(cwd, fullPath);
-    const ext = extname4(item).toLowerCase();
-    const isDoc = DOC_EXTENSIONS.has(ext);
-    if (info.isDirectory()) {
-      entries.push({ path: relPath + "/", isDir: true, isDoc: false });
-      await collectFiles(fullPath, cwd, depth + 1, entries);
-    } else if (info.isFile()) {
-      entries.push({ path: relPath, isDir: false, isDoc });
+    {
+      const bodySegments = [];
+      let tblDepth = 0;
+      let segStart = 0;
+      for (const tok of tokens) {
+        if (tok.kind === "tbl_open") {
+          if (tblDepth === 0) {
+            if (tok.pos > segStart) {
+              bodySegments.push({ start: segStart, end: tok.pos });
+            }
+          }
+          tblDepth++;
+        } else if (tok.kind === "tbl_close") {
+          tblDepth--;
+          if (tblDepth === 0) {
+            segStart = tok.end;
+          }
+        }
+      }
+      if (segStart < xml.length) {
+        bodySegments.push({ start: segStart, end: xml.length });
+      }
+      const tRe = /<hp:t>([\s\S]*?)<\/hp:t>/g;
+      for (const seg of bodySegments) {
+        const slice = xml.slice(seg.start, seg.end);
+        tRe.lastIndex = 0;
+        let m = tRe.exec(slice);
+        while (m !== null) {
+          const rawText = m[1] ?? "";
+          const decodedText = unescapeXml(rawText);
+          const compare3 = caseSensitive ? decodedText : decodedText.toLowerCase();
+          const compareQuery = caseSensitive ? query : query.toLowerCase();
+          if (compare3.includes(compareQuery)) {
+            hits.push({
+              kind: "\uBCF8\uBB38",
+              section: si,
+              text: windowText(decodedText, query, caseSensitive)
+            });
+          }
+          m = tRe.exec(slice);
+        }
+      }
     }
+    globalOffset += localCount;
   }
+  return hits;
 }
-var listFilesTool = {
-  name: "list_files",
-  description: "\uD604\uC7AC \uC791\uC5C5 \uB514\uB809\uD130\uB9AC(cwd) \uC774\uD558\uC758 \uD30C\uC77C \uBAA9\uB85D\uC744 \uBC18\uD658\uD569\uB2C8\uB2E4. \uBB38\uC11C \uD30C\uC77C(.hwp/.hwpx/.docx/.xlsx/.pdf \uB4F1)\uC774 \uCD5C\uC0C1\uB2E8\uC5D0 \uD45C\uC2DC\uB429\uB2C8\uB2E4. \uAE4A\uC774\uB294 \uCD5C\uB300 4\uB2E8\uACC4\uAE4C\uC9C0\uC785\uB2C8\uB2E4.",
-  inputSchema: listFilesSchema,
+var MAX_HITS = 50;
+function formatHits(hits, query) {
+  const shown = hits.slice(0, MAX_HITS);
+  const lines = shown.map((h) => {
+    if (h.kind === "\uD45C") {
+      return `[\uD45C] tableIndex=${h.tableIndex}, row=${h.row}, col=${h.col} \u2014 "${h.text}"  (propose_cell_edit\uC73C\uB85C \uC218\uC815 \uAC00\uB2A5)`;
+    }
+    return `[\uBCF8\uBB38] \uC139\uC158 ${h.section} \u2014 "\u2026${h.text}\u2026"  (propose_find_replace\uB85C \uC218\uC815 \uAC00\uB2A5)`;
+  });
+  const notice = hits.length > MAX_HITS ? `
+(\uCD1D ${hits.length}\uAC1C \uB9E4\uCE6D \uC911 ${MAX_HITS}\uAC1C\uB9CC \uD45C\uC2DC\uB429\uB2C8\uB2E4.)` : "";
+  return `"${query}" \uAC80\uC0C9 \uACB0\uACFC: ${hits.length}\uAC1C
+
+${lines.join("\n")}${notice}`;
+}
+var findInDocumentTool = {
+  name: "find_in_document",
+  description: "\uBB38\uC11C\uC5D0\uC11C \uD2B9\uC815 \uD14D\uC2A4\uD2B8\uAC00 **\uC5B4\uB514\uC5D0 \uC788\uB294\uC9C0** \uC704\uCE58\uB97C \uCC3E\uC544 \uC90D\uB2C8\uB2E4. \uD45C \uC548\uC758 \uC140\uC774\uBA74 propose_cell_edit\uC5D0\uC11C \uBC14\uB85C \uC4F8 \uC218 \uC788\uB294 tableIndex\xB7row\xB7col \uC88C\uD45C\uB97C, \uBCF8\uBB38\uC774\uBA74 \uC8FC\uBCC0 \uB9E5\uB77D\uC744 \uBC18\uD658\uD569\uB2C8\uB2E4. \uD070 \uBB38\uC11C\uC5D0\uC11C \uC804\uCCB4\uB97C \uC77D\uC9C0 \uC54A\uACE0 \uC218\uC815 \uB300\uC0C1\uC744 \uC815\uD655\uD788 \uC9C0\uC815\uD560 \uB54C \uC0AC\uC6A9\uD558\uC138\uC694. .hwpx \uC804\uC6A9.",
+  inputSchema: findInDocumentSchema,
   requiresApproval: false,
   execute: async ({
     input,
     ctx
   }) => {
-    const targetDir = input.dir ? await resolveSafePath(ctx.cwd, input.dir) : ctx.cwd;
-    const entries = [];
-    await collectFiles(targetDir, ctx.cwd, 0, entries);
-    if (entries.length === 0) {
-      return "\uD30C\uC77C\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.";
+    let safePath;
+    try {
+      safePath = await resolveSafePath(ctx.cwd, input.path);
+    } catch (err) {
+      return `\uC624\uB958: \uACBD\uB85C\uB97C \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${input.path}. ${String(err)}`;
     }
-    const docs = entries.filter((e) => e.isDoc);
-    const dirs = entries.filter((e) => e.isDir);
-    const others = entries.filter((e) => !e.isDoc && !e.isDir);
-    const allSorted = [...docs, ...dirs, ...others];
-    const lines = allSorted.map((e) => {
-      const icon = e.isDir ? "\u{1F4C1}" : e.isDoc ? "\u{1F4C4}" : "  ";
-      return `${icon} ${e.path}`;
-    });
-    const truncateNotice = entries.length >= MAX_FILES ? `
-(\uCD5C\uB300 ${MAX_FILES}\uAC1C\uAE4C\uC9C0 \uD45C\uC2DC\uB429\uB2C8\uB2E4. \uB354 \uC881\uC740 \uBC94\uC704\uB97C \uC9C0\uC815\uD558\uC138\uC694.)` : "";
-    return lines.join("\n") + truncateNotice;
-  }
-};
-var cellEditItemSchema = z5.object({
-  tableIndex: z5.number().int().nonnegative().optional().describe(
-    "\uC88C\uD45C \uBAA8\uB4DC: 0-based \uD45C \uC778\uB371\uC2A4(read_document\uC758 kordoc \uBE14\uB85D \uC21C\uC11C, \uC911\uCCA9\uD45C \uC81C\uC678). \uB808\uC774\uBE14 \uBAA8\uB4DC\uC5D0\uC120 \uD0D0\uC0C9 \uBC94\uC704 \uC81C\uD55C\uC6A9(\uC120\uD0DD)."
-  ),
-  row: z5.number().int().nonnegative().optional().describe("\uC88C\uD45C \uBAA8\uB4DC: \uC140\uC758 rowAddr (0-based)"),
-  col: z5.number().int().nonnegative().optional().describe("\uC88C\uD45C \uBAA8\uB4DC: \uC140\uC758 colAddr (0-based)"),
-  label: z5.string().optional().describe(
-    "\uB808\uC774\uBE14 \uBAA8\uB4DC: \uAE30\uC900 \uC140 \uD14D\uC2A4\uD2B8(\uD2B8\uB9BC \uBE44\uAD50). \uC774 \uC140\uC758 direction \uBC29\uD5A5 \uC778\uC811 \uC140\uC5D0 newText\uB97C \uAE30\uB85D. \uC88C\uD45C \uBAA8\uB4DC\uBA74 \uC0DD\uB7B5."
-  ),
-  direction: z5.enum(["right", "below"]).optional().describe("\uB808\uC774\uBE14 \uBAA8\uB4DC \uBC29\uD5A5. \uAE30\uBCF8 right(\uC624\uB978\uCABD \uC140), below(\uC544\uB798 \uC140). \uBCD1\uD569 span \uACE0\uB824."),
-  newText: z5.string().describe("\uC140\uC5D0 \uC4F8 \uC0C8 \uD14D\uC2A4\uD2B8"),
-  expectedText: z5.string().optional().describe(
-    "\uD604\uC7AC \uC140 \uD14D\uC2A4\uD2B8(\uC548\uC804 \uAC80\uC99D\uC6A9). \uBD88\uC77C\uCE58 \uC2DC \uC218\uC815\uD558\uC9C0 \uC54A\uC74C. \uC798\uBABB\uB41C \uC140 \uC218\uC815 \uBC29\uC9C0\uB97C \uC704\uD574 \uAD8C\uC7A5."
-  )
-}).describe(
-  "\uD3B8\uC9D1 \uD56D\uBAA9. \uC88C\uD45C \uBAA8\uB4DC(tableIndex+row+col) \uB610\uB294 \uB808\uC774\uBE14 \uBAA8\uB4DC(label[+direction]) \uC911 \uD558\uB098\uB97C \uC0AC\uC6A9\uD558\uC138\uC694. \uB458 \uB2E4 \uC9C0\uC815\uD558\uAC70\uB098 \uB458 \uB2E4 \uC0DD\uB7B5\uD558\uBA74 \uC624\uB958\uC785\uB2C8\uB2E4."
-);
-var proposeCellEditSchema = z5.object({
-  path: z5.string().describe("\uC218\uC815\uD560 .hwpx \uD30C\uC77C \uACBD\uB85C (cwd \uAE30\uC900 \uC0C1\uB300 \uACBD\uB85C \uB610\uB294 \uC808\uB300 \uACBD\uB85C)"),
-  edits: z5.array(cellEditItemSchema).min(1).describe(
-    "\uD3B8\uC9D1 \uBAA9\uB85D. \uAC01 \uD56D\uBAA9\uC740 \uC88C\uD45C \uBAA8\uB4DC(tableIndex+row+col) \uB610\uB294 \uB808\uC774\uBE14 \uBAA8\uB4DC(label+direction) \uC911 \uD558\uB098"
-  ),
-  summary: z5.string().describe("\uBCC0\uACBD \uC694\uC57D (\uD55C\uAD6D\uC5B4 1-2\uBB38\uC7A5)")
-});
-function tokenizeHwpxXml(xml) {
-  const tokens = [];
-  const re = /<hp:tbl[\s>]|<\/hp:tbl>|<hp:tc[\s>]|<\/hp:tc>|<hp:t\/>|<hp:t>|<hp:cellAddr[^/>]*|<hp:cellSpan[^/>]*/g;
-  let startPos = 0;
-  let m = re.exec(xml);
-  while (m !== null) {
-    const raw = m[0];
-    const pos = m.index;
-    if (raw.startsWith("<hp:tbl")) {
-      tokens.push({ kind: "tbl_open", pos, end: pos + raw.length });
-    } else if (raw === "</hp:tbl>") {
-      tokens.push({ kind: "tbl_close", pos, end: pos + raw.length });
-    } else if (raw.startsWith("<hp:tc")) {
-      tokens.push({ kind: "tc_open", pos, end: pos + raw.length });
-    } else if (raw === "</hp:tc>") {
-      tokens.push({ kind: "tc_close", pos, end: pos + raw.length });
-    } else if (raw === "<hp:t/>") {
-      tokens.push({ kind: "t_empty", pos, end: pos + raw.length });
-    } else if (raw === "<hp:t>") {
-      tokens.push({ kind: "t_open", pos, end: pos + raw.length });
-    } else if (raw.startsWith("<hp:cellAddr")) {
-      const colM = raw.match(/colAddr="(\d+)"/);
-      const rowM = raw.match(/rowAddr="(\d+)"/);
-      if (colM && rowM) {
-        const selfClose = xml.indexOf("/>", pos);
-        const end = selfClose >= 0 ? selfClose + 2 : pos + raw.length;
-        tokens.push({
-          kind: "cell_addr",
-          pos,
-          end,
-          colAddr: Number(colM[1]),
-          rowAddr: Number(rowM[1])
-        });
+    const ext = extname4(safePath).toLowerCase();
+    if (ext !== ".hwpx") {
+      return "find_in_document\uB294 .hwpx \uC804\uC6A9\uC785\uB2C8\uB2E4. \uBCF8\uBB38 \uD14D\uC2A4\uD2B8 \uAC80\uC0C9\uC740 read_document\uC758 search \uBAA8\uB4DC\uB97C \uC0AC\uC6A9\uD558\uC138\uC694. (.hwp \uD30C\uC77C\uC740 \uD55C\uAE00\uC5D0\uC11C \uB2E4\uB978 \uC774\uB984\uC73C\uB85C \uC800\uC7A5 \u2192 .hwpx\uB85C \uBCC0\uD658 \uD6C4 \uC0AC\uC6A9\uD558\uC138\uC694.)";
+    }
+    let bytes;
+    try {
+      bytes = await readFile5(safePath);
+    } catch {
+      return `\uC624\uB958: \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${input.path}. \uACBD\uB85C\uB97C \uD655\uC778\uD558\uC138\uC694.`;
+    }
+    if (bytes[0] !== 80 || bytes[1] !== 75) {
+      return "\uC624\uB958: \uD30C\uC77C\uC774 \uC720\uD6A8\uD55C .hwpx(ZIP) \uD3EC\uB9F7\uC774 \uC544\uB2D9\uB2C8\uB2E4. \uD30C\uC77C\uC774 \uC190\uC0C1\uB418\uC5C8\uAC70\uB098 \uAD6C\uD615 .hwp(OLE \uBC14\uC774\uB108\uB9AC) \uD3EC\uB9F7\uC785\uB2C8\uB2E4. \uD55C\uAE00 \uD504\uB85C\uADF8\uB7A8\uC5D0\uC11C .hwpx\uB85C \uC800\uC7A5 \uD6C4 \uB2E4\uC2DC \uC2DC\uB3C4\uD558\uC138\uC694.";
+    }
+    let zip;
+    try {
+      zip = await import_jszip.default.loadAsync(bytes);
+    } catch (err) {
+      return `\uC624\uB958: .hwpx ZIP\uC744 \uC5F4 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${String(err)}`;
+    }
+    const sectionNames = Object.keys(zip.files).filter((name) => /^Contents\/section\d+\.xml$/.test(name)).sort();
+    const xmls = [];
+    for (const name of sectionNames) {
+      try {
+        const entry = zip.file(name);
+        const xml = entry ? await entry.async("string") : "";
+        xmls.push(xml);
+      } catch {
+        xmls.push("");
       }
-    } else if (raw.startsWith("<hp:cellSpan")) {
-      const colM = raw.match(/colSpan="(\d+)"/);
-      const rowM = raw.match(/rowSpan="(\d+)"/);
-      const selfClose = xml.indexOf("/>", pos);
-      const end = selfClose >= 0 ? selfClose + 2 : pos + raw.length;
-      tokens.push({
-        kind: "cell_span",
-        pos,
-        end,
-        colSpan: colM ? Number(colM[1]) : 1,
-        rowSpan: rowM ? Number(rowM[1]) : 1
-      });
     }
-    startPos = re.lastIndex;
-    m = re.exec(xml);
+    if (xmls.length === 0) {
+      return `\uC624\uB958: .hwpx \uD30C\uC77C\uC5D0\uC11C \uC139\uC158 XML\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${input.path}`;
+    }
+    const caseSensitive = input.caseSensitive ?? false;
+    let hits;
+    try {
+      hits = findInSectionXmls(xmls, input.query, caseSensitive);
+    } catch (err) {
+      return `\uC624\uB958: \uBB38\uC11C \uD0D0\uC0C9 \uC911 \uC608\uC678\uAC00 \uBC1C\uC0DD\uD588\uC2B5\uB2C8\uB2E4: ${String(err)}`;
+    }
+    if (hits.length === 0) {
+      return `\uBB38\uC11C\uC5D0\uC11C "${input.query}"\uB97C \uCC3E\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4: ${input.path}`;
+    }
+    return formatHits(hits, input.query);
   }
-  void startPos;
-  return tokens;
-}
+};
 function escapeXml2(text3) {
-  return text3.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+  return text3.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
 }
-function collectDirectTcRanges(tokens, tblStart, tblEnd) {
-  const tblTokens = tokens.filter((t) => t.pos > tblStart && t.pos < tblEnd);
-  const tcRanges = [];
-  const tcStack = [];
-  let innerDepth = 0;
-  for (const tok of tblTokens) {
-    if (tok.kind === "tbl_open") {
-      innerDepth++;
-    } else if (tok.kind === "tbl_close") {
-      innerDepth--;
-    } else if (tok.kind === "tc_open") {
-      tcStack.push({ pos: tok.pos, depth: innerDepth });
-    } else if (tok.kind === "tc_close") {
-      const entry = tcStack.pop();
-      if (entry !== void 0) {
-        tcRanges.push({ start: entry.pos, end: tok.end, depth: entry.depth });
-      }
-    }
-  }
-  return tcRanges.filter((tc) => tc.depth === 0);
+function decodeXml(text3) {
+  return text3.replace(/&amp;/g, "&").replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&quot;/g, '"').replace(/&apos;/g, "'");
 }
-function readOwnTextFromTc(xml, tokens, tcStart, tcEnd) {
-  const tcTokens = tokens.filter((t) => t.pos >= tcStart && t.pos < tcEnd);
-  let innerDepth = 0;
-  let text3 = "";
-  for (const t of tcTokens) {
-    if (t.kind === "tbl_open") innerDepth++;
-    else if (t.kind === "tbl_close") innerDepth--;
-    else if (t.kind === "t_empty" && innerDepth === 0) {
-    } else if (t.kind === "t_open" && innerDepth === 0) {
-      const closePos = xml.indexOf("</hp:t>", t.end);
-      if (closePos >= 0) {
-        text3 += xml.substring(t.end, closePos);
-      }
+function getAttr(openTag, attr) {
+  const re = new RegExp(`\\b${attr}="([^"]*)"`, "");
+  const m = re.exec(openTag);
+  return m ? decodeXml(m[1] ?? "") : "";
+}
+function parseFormObjects(xml, sectionFile, startIndex = 0) {
+  const results = [];
+  let idx = startIndex;
+  const tagSpecs = [
+    { xmlTag: "hp:btn", type: "button" },
+    { xmlTag: "hp:checkBtn", type: "checkBox" },
+    { xmlTag: "hp:radioBtn", type: "radioButton" },
+    { xmlTag: "hp:comboBox", type: "comboBox" },
+    { xmlTag: "hp:edit", type: "edit" }
+  ];
+  const hits = [];
+  for (const spec of tagSpecs) {
+    const re = new RegExp(`<${spec.xmlTag}\\b`, "g");
+    for (let m = re.exec(xml); m !== null; m = re.exec(xml)) {
+      hits.push({ pos: m.index, xmlTag: spec.xmlTag, type: spec.type });
     }
   }
-  return text3.replace(/&amp;/g, "&").replace(/&lt;/g, "<").replace(/&gt;/g, ">");
-}
-function findTopLevelTableRange(tokens, tableIndex) {
-  let topLevelCount = 0;
-  let depth = 0;
-  let targetStart = -1;
-  for (const tok of tokens) {
-    if (tok.kind === "tbl_open") {
-      if (depth === 0) {
-        if (topLevelCount === tableIndex) {
-          targetStart = tok.pos;
+  hits.sort((a, b) => a.pos - b.pos);
+  for (const hit of hits) {
+    const { pos, xmlTag, type } = hit;
+    const openTagEnd = xml.indexOf(">", pos);
+    if (openTagEnd < 0) continue;
+    const openTag = xml.slice(pos, openTagEnd + 1);
+    const closeTag = `</${xmlTag}>`;
+    const closeIdx = xml.indexOf(closeTag, openTagEnd);
+    if (closeIdx < 0) continue;
+    const elementEnd = closeIdx + closeTag.length;
+    const elementXml = xml.slice(pos, elementEnd);
+    const name = getAttr(openTag, "name");
+    let currentValue;
+    let comboItems;
+    switch (type) {
+      case "button":
+        currentValue = getAttr(openTag, "caption");
+        break;
+      case "checkBox":
+      case "radioButton":
+        currentValue = getAttr(openTag, "value") === "CHECKED";
+        break;
+      case "comboBox": {
+        currentValue = getAttr(openTag, "selectedValue");
+        const listItemRe = /<hp:listItem\b[^>]*/g;
+        const items = [];
+        for (let lm = listItemRe.exec(elementXml); lm !== null; lm = listItemRe.exec(elementXml)) {
+          const itemValue = getAttr(lm[0] ?? "", "value");
+          items.push(itemValue);
         }
-        topLevelCount++;
-      }
-      depth++;
-    } else if (tok.kind === "tbl_close") {
-      depth--;
-      if (depth === 0 && topLevelCount === tableIndex + 1 && targetStart >= 0) {
-        return { start: targetStart, end: tok.end };
+        comboItems = items;
+        break;
+      }
+      case "edit": {
+        const textSelfClose = /<hp:text\s*\/>/;
+        const textOpen = /<hp:text>/;
+        const textClose = "</hp:text>";
+        if (textSelfClose.test(elementXml)) {
+          currentValue = "";
+        } else {
+          const tOpenIdx = elementXml.search(textOpen);
+          if (tOpenIdx >= 0) {
+            const afterOpen = elementXml.indexOf(">", tOpenIdx) + 1;
+            const closePos = elementXml.indexOf(textClose, afterOpen);
+            currentValue = closePos >= 0 ? decodeXml(elementXml.slice(afterOpen, closePos)) : "";
+          } else {
+            currentValue = "";
+          }
+        }
+        break;
       }
     }
+    results.push({
+      index: idx++,
+      name,
+      type,
+      currentValue,
+      comboItems,
+      sectionFile,
+      posInSection: pos
+    });
   }
-  return null;
-}
-function readCellAddrSpan(tokens, tcStart, tcEnd) {
-  const tcTokens = tokens.filter((t) => t.pos >= tcStart && t.pos < tcEnd);
-  let addr = null;
-  let span = { colSpan: 1, rowSpan: 1 };
-  for (const t of tcTokens) {
-    if (t.kind === "cell_addr" && t.colAddr !== void 0 && t.rowAddr !== void 0) {
-      addr = { colAddr: t.colAddr, rowAddr: t.rowAddr };
-    } else if (t.kind === "cell_span" && t.colSpan !== void 0 && t.rowSpan !== void 0) {
-      span = { colSpan: t.colSpan, rowSpan: t.rowSpan };
-    }
-  }
-  if (!addr) return null;
-  return { ...addr, ...span };
+  return results;
 }
-function applyCellEditsToSectionXml(xml, edits) {
-  const tokens = tokenizeHwpxXml(xml);
+function applyFormObjectEdits(xml, edits) {
   const results = edits.map(() => ({ success: false }));
-  let totalTopLevelTbls = 0;
-  {
-    let d = 0;
-    for (const tok of tokens) {
-      if (tok.kind === "tbl_open") {
-        if (d === 0) totalTopLevelTbls++;
-        d++;
-      } else if (tok.kind === "tbl_close") {
-        d--;
-      }
-    }
-  }
-  const replacements = [];
+  const patches = [];
   for (let ei = 0; ei < edits.length; ei++) {
     const edit = edits[ei];
-    const tblRange = findTopLevelTableRange(tokens, edit.tableIndex);
-    if (!tblRange) {
+    const { target, set, expected } = edit;
+    const pos = target.posInSection;
+    const xmlTag = typeToXmlTag(target.type);
+    const openTagEnd = xml.indexOf(">", pos);
+    if (openTagEnd < 0) {
       results[ei] = {
         success: false,
-        error: `\uD45C ${edit.tableIndex}\uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. \uC774 \uC139\uC158\uC5D0 \uCD1D ${totalTopLevelTbls}\uAC1C\uC758 \uCD5C\uC0C1\uC704 \uD45C\uAC00 \uC788\uC2B5\uB2C8\uB2E4.`
+        error: `\uC591\uC2DD \uAC1C\uCCB4 "${target.name}" \uC5EC\uB294 \uD0DC\uADF8 \uB05D\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.`
       };
       continue;
     }
-    const directTcs = collectDirectTcRanges(tokens, tblRange.start, tblRange.end);
-    const tblTokens = tokens.filter((t) => t.pos >= tblRange.start && t.pos < tblRange.end);
-    let found = false;
-    for (const tc of directTcs) {
-      const tcTokens = tblTokens.filter((t) => t.pos >= tc.start && t.pos < tc.end);
-      const hasAddr = tcTokens.some(
-        (t) => t.kind === "cell_addr" && t.colAddr === edit.col && t.rowAddr === edit.row
-      );
-      if (!hasAddr) continue;
-      let innerDepth = 0;
-      const ownTRuns = [];
-      for (const t of tokens.filter((x) => x.pos >= tc.start && x.pos < tc.end)) {
-        if (t.kind === "tbl_open") innerDepth++;
-        else if (t.kind === "tbl_close") innerDepth--;
-        else if (t.kind === "t_empty" && innerDepth === 0) {
-          ownTRuns.push({ isEmpty: true, tagPos: t.pos, tagEnd: t.end });
-        } else if (t.kind === "t_open" && innerDepth === 0) {
-          const closePos = xml.indexOf("</hp:t>", t.end);
-          if (closePos >= 0) {
-            ownTRuns.push({ isEmpty: false, openEnd: t.end, closePos });
-          }
-        }
+    const _openTag = xml.slice(pos, openTagEnd + 1);
+    const closeTag = `</${xmlTag}>`;
+    const closeIdx = xml.indexOf(closeTag, openTagEnd);
+    if (closeIdx < 0) {
+      results[ei] = {
+        success: false,
+        error: `\uC591\uC2DD \uAC1C\uCCB4 "${target.name}" \uB2EB\uB294 \uD0DC\uADF8\uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.`
+      };
+      continue;
+    }
+    const elementEnd = closeIdx + closeTag.length;
+    const typeError = validateSetForType(target.type, set);
+    if (typeError) {
+      results[ei] = { success: false, error: typeError };
+      continue;
+    }
+    const currentRaw = readCurrentValue(
+      xml,
+      pos,
+      openTagEnd,
+      openTagEnd + 1,
+      elementEnd,
+      target.type
+    );
+    if (expected !== void 0) {
+      const mismatch = checkExpected(expected, currentRaw, target);
+      if (mismatch) {
+        results[ei] = { success: false, error: mismatch };
+        continue;
       }
-      const currentText = ownTRuns.map((r) => r.isEmpty ? "" : xml.substring(r.openEnd, r.closePos)).join("").replace(/&amp;/g, "&").replace(/&lt;/g, "<").replace(/&gt;/g, ">");
-      if (edit.expectedText !== void 0 && edit.expectedText !== currentText) {
+    }
+    if (target.type === "comboBox" && set.selected !== void 0) {
+      const items = target.comboItems ?? [];
+      if (!items.includes(set.selected)) {
+        const validList = items.map((v) => `"${v}"`).join(", ");
         results[ei] = {
           success: false,
-          oldText: currentText,
-          error: `\uC140 (\uD45C ${edit.tableIndex}, \uD589 ${edit.row}, \uC5F4 ${edit.col})\uC758 \uD604\uC7AC \uD14D\uC2A4\uD2B8\uAC00 \uC608\uC0C1\uAC12\uACFC \uB2E4\uB985\uB2C8\uB2E4. \uC608\uC0C1: "${edit.expectedText}", \uC2E4\uC81C: "${currentText}". \uC218\uC815\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.`
+          error: `comboBox "${target.name}"\uC758 selected \uAC12 "${set.selected}"\uC774 \uC720\uD6A8\uD55C \uD56D\uBAA9\uC774 \uC544\uB2D9\uB2C8\uB2E4. \uC720\uD6A8\uD55C \uD56D\uBAA9: ${validList || "(\uC5C6\uC74C)"}`
         };
-        found = true;
-        break;
+        continue;
       }
-      if (ownTRuns.length === 0) {
+    }
+    let patchCreated = false;
+    if (set.caption !== void 0) {
+      const patch = replaceAttrInOpenTag(xml, pos, openTagEnd, "caption", escapeXml2(set.caption));
+      if (!patch) {
         results[ei] = {
           success: false,
-          oldText: currentText,
-          error: `\uC140 (\uD45C ${edit.tableIndex}, \uD589 ${edit.row}, \uC5F4 ${edit.col})\uC5D0 \uD14D\uC2A4\uD2B8 \uB7F0\uC774 \uC5C6\uC2B5\uB2C8\uB2E4. <hp:t> \uB610\uB294 <hp:t/> \uB7F0\uC774 \uBC1C\uACAC\uB418\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4. \uC140 \uAD6C\uC870\uB97C \uD655\uC778\uD558\uC138\uC694.`
+          error: `\uC591\uC2DD \uAC1C\uCCB4 "${target.name}"\uC758 caption \uC18D\uC131\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.`
         };
-        found = true;
-        break;
+        continue;
       }
-      const escapedNew = escapeXml2(edit.newText);
-      const patches = [];
-      const firstRun = ownTRuns[0];
-      if (firstRun.isEmpty) {
-        patches.push({
-          from: firstRun.tagPos,
-          to: firstRun.tagEnd,
-          text: `<hp:t>${escapedNew}</hp:t>`
-        });
-      } else {
-        patches.push({ from: firstRun.openEnd, to: firstRun.closePos, text: escapedNew });
+      patches.push(patch);
+      patchCreated = true;
+    } else if (set.checked !== void 0) {
+      const newValue = set.checked ? "CHECKED" : "UNCHECKED";
+      const patch = replaceAttrInOpenTag(xml, pos, openTagEnd, "value", newValue);
+      if (!patch) {
+        results[ei] = {
+          success: false,
+          error: `\uC591\uC2DD \uAC1C\uCCB4 "${target.name}"\uC758 value \uC18D\uC131\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.`
+        };
+        continue;
       }
-      for (let ri = 1; ri < ownTRuns.length; ri++) {
-        const run = ownTRuns[ri];
-        if (!run.isEmpty) {
-          patches.push({ from: run.openEnd, to: run.closePos, text: "" });
-        }
+      patches.push(patch);
+      patchCreated = true;
+    } else if (set.selected !== void 0) {
+      const patch = replaceAttrInOpenTag(
+        xml,
+        pos,
+        openTagEnd,
+        "selectedValue",
+        escapeXml2(set.selected)
+      );
+      if (!patch) {
+        results[ei] = {
+          success: false,
+          error: `\uC591\uC2DD \uAC1C\uCCB4 "${target.name}"\uC758 selectedValue \uC18D\uC131\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.`
+        };
+        continue;
       }
-      replacements.push({ editIdx: ei, patches });
-      results[ei] = { success: true, oldText: currentText };
-      found = true;
-      break;
+      patches.push(patch);
+      patchCreated = true;
+    } else if (set.text !== void 0) {
+      const elementContent = xml.slice(pos, elementEnd);
+      const textPatch = replaceEditText(xml, pos, elementContent, set.text);
+      if (!textPatch) {
+        results[ei] = {
+          success: false,
+          error: `\uC591\uC2DD \uAC1C\uCCB4 "${target.name}"\uC758 <hp:text> \uC694\uC18C\uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.`
+        };
+        continue;
+      }
+      patches.push(textPatch);
+      patchCreated = true;
     }
-    if (!found) {
-      results[ei] = {
-        success: false,
-        error: `\uD45C ${edit.tableIndex}\uC5D0\uC11C \uC140 (\uD589 ${edit.row}, \uC5F4 ${edit.col})\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. cellAddr colAddr="${edit.col}" rowAddr="${edit.row}"\uC5D0 \uD574\uB2F9\uD558\uB294 \uC140\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.`
-      };
+    if (!patchCreated) {
+      results[ei] = { success: false, error: `\uD3B8\uC9D1 #${ei + 1}: set \uD544\uB4DC\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.` };
+      continue;
+    }
+    results[ei] = { success: true, oldValue: currentRaw };
+  }
+  if (results.some((r) => !r.success)) {
+    return { newXml: xml, results };
+  }
+  const sortedPatches = [...patches].sort((a, b) => b.from - a.from);
+  let result = xml;
+  for (const patch of sortedPatches) {
+    result = result.slice(0, patch.from) + patch.text + result.slice(patch.to);
+  }
+  return { newXml: result, results };
+}
+function typeToXmlTag(type) {
+  switch (type) {
+    case "button":
+      return "hp:btn";
+    case "checkBox":
+      return "hp:checkBtn";
+    case "radioButton":
+      return "hp:radioBtn";
+    case "comboBox":
+      return "hp:comboBox";
+    case "edit":
+      return "hp:edit";
+  }
+}
+function validateSetForType(type, set) {
+  const key = Object.keys(set).find((k) => set[k] !== void 0);
+  if (!key) return "set \uD544\uB4DC\uAC00 \uBE44\uC5B4\uC788\uC2B5\uB2C8\uB2E4. caption/checked/selected/text \uC911 \uD558\uB098\uB97C \uC9C0\uC815\uD558\uC138\uC694.";
+  const allowed = {
+    button: "caption",
+    checkBox: "checked",
+    radioButton: "checked",
+    comboBox: "selected",
+    edit: "text"
+  };
+  if (key !== allowed[type]) {
+    const typeKo = {
+      button: "PushButton",
+      checkBox: "CheckBox",
+      radioButton: "RadioButton",
+      comboBox: "ComboBox",
+      edit: "Edit"
+    };
+    return `\uD0C0\uC785 \uBD88\uC77C\uCE58: ${typeKo[type]} \uC591\uC2DD \uAC1C\uCCB4\uC5D0\uB294 "${allowed[type]}" \uD544\uB4DC\uB9CC \uC0AC\uC6A9 \uAC00\uB2A5\uD558\uC9C0\uB9CC "${key}"\uC774(\uAC00) \uC9C0\uC815\uB418\uC5C8\uC2B5\uB2C8\uB2E4.`;
+  }
+  return null;
+}
+function readCurrentValue(xml, pos, openTagEnd, _afterOpen, elementEnd, type) {
+  const openTag = xml.slice(pos, openTagEnd + 1);
+  switch (type) {
+    case "button":
+      return decodeXml(getAttr(openTag, "caption"));
+    case "checkBox":
+    case "radioButton":
+      return getAttr(openTag, "value") === "CHECKED";
+    case "comboBox":
+      return decodeXml(getAttr(openTag, "selectedValue"));
+    case "edit": {
+      const elementContent = xml.slice(pos, elementEnd);
+      if (/<hp:text\s*\/>/.test(elementContent)) return "";
+      const tOpenIdx = elementContent.search(/<hp:text>/);
+      if (tOpenIdx >= 0) {
+        const afterOpen = elementContent.indexOf(">", tOpenIdx) + 1;
+        const closePos = elementContent.indexOf("</hp:text>", afterOpen);
+        return closePos >= 0 ? decodeXml(elementContent.slice(afterOpen, closePos)) : "";
+      }
+      return "";
     }
   }
-  if (results.some((r) => !r.success)) {
-    return { newXml: xml, results };
+}
+function checkExpected(expected, currentRaw, target) {
+  let expectedVal;
+  if (expected.caption !== void 0) expectedVal = expected.caption;
+  else if (expected.checked !== void 0) expectedVal = expected.checked;
+  else if (expected.selected !== void 0) expectedVal = expected.selected;
+  else if (expected.text !== void 0) expectedVal = expected.text;
+  if (expectedVal === void 0) return null;
+  const matches = typeof expectedVal === "boolean" ? currentRaw === expectedVal : String(currentRaw) === String(expectedVal);
+  if (!matches) {
+    return `\uC591\uC2DD \uAC1C\uCCB4 "${target.name}" \uD604\uC7AC \uAC12\uC774 \uC608\uC0C1\uAC12\uACFC \uB2E4\uB985\uB2C8\uB2E4. \uC608\uC0C1: ${JSON.stringify(expectedVal)}, \uC2E4\uC81C: ${JSON.stringify(currentRaw)}. \uC218\uC815\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.`;
   }
-  const allPatches = replacements.flatMap((r) => r.patches).sort((a, b) => b.from - a.from);
-  let result = xml;
-  for (const patch of allPatches) {
-    result = result.substring(0, patch.from) + patch.text + result.substring(patch.to);
+  return null;
+}
+function replaceAttrInOpenTag(xml, tagStart, tagEnd, attr, newValue) {
+  const tagStr = xml.slice(tagStart, tagEnd + 1);
+  const re = new RegExp(`\\b(${attr}=")([^"]*)(")`, "");
+  const m = re.exec(tagStr);
+  if (!m) return null;
+  const relFrom = m.index + (m[1]?.length ?? 0);
+  const relTo = relFrom + (m[2]?.length ?? 0);
+  return {
+    from: tagStart + relFrom,
+    to: tagStart + relTo,
+    text: newValue
+  };
+}
+function replaceEditText(_xml, pos, elementContent, newText) {
+  const escaped = escapeXml2(newText);
+  const selfCloseRe = /<hp:text\s*\/>/;
+  const scm = selfCloseRe.exec(elementContent);
+  if (scm) {
+    return {
+      from: pos + scm.index,
+      to: pos + scm.index + scm[0].length,
+      text: `<hp:text>${escaped}</hp:text>`
+    };
   }
-  return { newXml: result, results };
+  const openRe = /<hp:text>/;
+  const om = openRe.exec(elementContent);
+  if (om) {
+    const afterOpen = om.index + om[0].length;
+    const closePos = elementContent.indexOf("</hp:text>", afterOpen);
+    if (closePos < 0) return null;
+    return {
+      from: pos + afterOpen,
+      to: pos + closePos,
+      text: escaped
+    };
+  }
+  return null;
 }
-async function applyEditsToHwpx(hwpxBuffer, edits) {
-  const zip = await import_jszip2.default.loadAsync(hwpxBuffer);
+async function listFormObjectsFromZip(zip) {
   const sectionFiles = Object.keys(zip.files).filter((name) => /^Contents\/section\d+\.xml$/.test(name)).sort();
   const sectionXmls = [];
-  const sectionTblCounts = [];
+  const objects = [];
+  let globalIndex = 0;
   for (const sf of sectionFiles) {
     const entry = zip.file(sf);
     const xml = entry ? await entry.async("string") : "";
     sectionXmls.push(xml);
-    const tokens = tokenizeHwpxXml(xml);
-    let count = 0;
-    let depth = 0;
-    for (const tok of tokens) {
-      if (tok.kind === "tbl_open") {
-        if (depth === 0) count++;
-        depth++;
-      } else if (tok.kind === "tbl_close") {
-        depth--;
-      }
-    }
-    sectionTblCounts.push(count);
-  }
-  const sectionEdits = sectionFiles.map(() => []);
-  let offset = 0;
-  for (let si = 0; si < sectionFiles.length; si++) {
-    const count = sectionTblCounts[si] ?? 0;
-    for (let ei = 0; ei < edits.length; ei++) {
-      const edit = edits[ei];
-      if (edit.tableIndex >= offset && edit.tableIndex < offset + count) {
-        const secEdits = sectionEdits[si];
-        if (secEdits) {
-          secEdits.push({
-            tableIndex: edit.tableIndex - offset,
-            // 섹션 내 상대 인덱스
-            row: edit.row,
-            col: edit.col,
-            newText: edit.newText,
-            expectedText: edit.expectedText,
-            originalEditIdx: ei
-          });
-        }
-      }
-    }
-    offset += count;
-  }
-  const totalTables = sectionTblCounts.reduce((a, b) => a + b, 0);
-  const allResults = edits.map((edit, ei) => ({
-    success: false,
-    error: `\uD45C ${edit?.tableIndex ?? ei}\uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. \uBB38\uC11C\uC5D0 \uCD1D ${totalTables}\uAC1C\uC758 \uCD5C\uC0C1\uC704 \uD45C\uAC00 \uC788\uC2B5\uB2C8\uB2E4.`
-  }));
-  const newSectionXmls = [...sectionXmls];
-  for (let si = 0; si < sectionFiles.length; si++) {
-    const sEdits = sectionEdits[si] ?? [];
-    if (sEdits.length === 0) continue;
-    const srcXml = sectionXmls[si] ?? "";
-    const { newXml, results } = applyCellEditsToSectionXml(srcXml, sEdits);
-    newSectionXmls[si] = newXml;
-    for (let i = 0; i < sEdits.length; i++) {
-      const sEdit = sEdits[i];
-      const res = results[i];
-      if (sEdit && res) {
-        allResults[sEdit.originalEditIdx] = res;
-      }
-    }
+    const parsed = parseFormObjects(xml, sf, globalIndex);
+    objects.push(...parsed);
+    globalIndex += parsed.length;
   }
-  if (allResults.some((r) => !r.success)) {
-    return { buffer: hwpxBuffer, results: allResults };
+  return { objects, sectionFiles, sectionXmls };
+}
+function validateHwpxBuffer(ext, buffer) {
+  if (ext === ".hwp") {
+    return "\uC624\uB958: \uC774 \uD234\uC740 .hwpx \uD30C\uC77C\uB9CC \uC9C0\uC6D0\uD569\uB2C8\uB2E4. .hwp(\uAD6C\uD615 OLE \uBC14\uC774\uB108\uB9AC)\uB294 \uC9C1\uC811 \uD3B8\uC9D1\uC774 \uBD88\uAC00\uD569\uB2C8\uB2E4. \uD55C\uAE00 \uD504\uB85C\uADF8\uB7A8\uC5D0\uC11C '\uB2E4\uB978 \uC774\uB984\uC73C\uB85C \uC800\uC7A5 \u2192 .hwpx'\uB85C \uC800\uC7A5\uD55C \uD6C4 \uB2E4\uC2DC \uC2DC\uB3C4\uD558\uC138\uC694.";
   }
-  const out = new import_jszip2.default();
-  const mimetypeEntry = zip.file("mimetype");
-  if (mimetypeEntry) {
-    out.file("mimetype", await mimetypeEntry.async("uint8array"), { compression: "STORE" });
+  if (ext !== ".hwpx") {
+    return `\uC624\uB958: \uC774 \uD234\uC740 .hwpx \uD30C\uC77C\uB9CC \uC9C0\uC6D0\uD569\uB2C8\uB2E4. \uD604\uC7AC \uD30C\uC77C \uD655\uC7A5\uC790: ${ext}`;
   }
-  for (const [name, entry] of Object.entries(zip.files)) {
-    if (name === "mimetype" || entry.dir) continue;
-    const sectionIdx = sectionFiles.indexOf(name);
-    if (sectionIdx >= 0) {
-      out.file(name, newSectionXmls[sectionIdx] ?? "");
-    } else {
-      out.file(name, await entry.async("uint8array"));
-    }
+  if (buffer[0] !== 80 || buffer[1] !== 75) {
+    return "\uC624\uB958: \uD30C\uC77C\uC774 \uC720\uD6A8\uD55C .hwpx(ZIP) \uD3EC\uB9F7\uC774 \uC544\uB2D9\uB2C8\uB2E4. \uD30C\uC77C\uC774 \uC190\uC0C1\uB418\uC5C8\uAC70\uB098 \uAD6C\uD615 .hwp(OLE \uBC14\uC774\uB108\uB9AC) \uD3EC\uB9F7\uC785\uB2C8\uB2E4.";
   }
-  const buf = await out.generateAsync({ type: "nodebuffer", compression: "DEFLATE" });
-  return { buffer: new Uint8Array(buf), results: allResults };
+  return null;
 }
-var proposeCellEditTool = {
-  name: "propose_cell_edit",
-  description: "HWPX \uBB38\uC11C\uC758 \uD45C \uC140 \uB0B4\uC6A9\uC744 XML \uC9C1\uC811 \uD328\uCE58 \uBC29\uC2DD\uC73C\uB85C \uC218\uC815\uD569\uB2C8\uB2E4. \uBCD1\uD569 \uC140(cellSpan/rowSpan)\uC774 \uC788\uB294 \uD45C\uC5D0\uC11C\uB3C4 \uBCD1\uD569 \uAD6C\uC870\uB97C \uC644\uC804\uD788 \uBCF4\uC874\uD569\uB2C8\uB2E4. \uBE48 \uC140(<hp:t/> self-closing \uB7F0)\uB3C4 \uCC44\uC6B8 \uC218 \uC788\uC5B4 \uC591\uC2DD(form) \uD3B8\uC9D1\uC5D0 \uC801\uD569\uD569\uB2C8\uB2E4. \uC140 \uC8FC\uC18C \uC9C0\uC815 \uBC29\uBC95: (1) \uC88C\uD45C \uBAA8\uB4DC \u2014 tableIndex + row + col \uC9C1\uC811 \uC9C0\uC815. (2) \uB808\uC774\uBE14 \uBAA8\uB4DC \u2014 label(\uC778\uC811 \uB808\uC774\uBE14 \uC140 \uD14D\uC2A4\uD2B8) + direction(right/below, \uAE30\uBCF8 right) + \uC120\uD0DD\uC801 tableIndex\uB85C \uB808\uC774\uBE14 \uC606/\uC544\uB798 \uC140\uC744 \uC790\uB3D9\uC73C\uB85C \uCC3E\uC544 \uD3B8\uC9D1. \uBCD1\uD569 \uB808\uC774\uBE14 \uC140\uB3C4 colSpan/rowSpan\uC744 \uBC18\uC601\uD558\uC5EC \uB300\uC0C1 \uC140\uC744 \uACC4\uC0B0\uD569\uB2C8\uB2E4. propose_edit/propose_form_fill\uC740 \uB9C8\uD06C\uB2E4\uC6B4 \uB77C\uC6B4\uB4DC\uD2B8\uB9BD\uC73C\uB85C \uBCD1\uD569 \uC140\uC744 \uC18C\uC2E4\uC2DC\uD0A4\uBBC0\uB85C, \uBCD1\uD569 \uC140\uC774 \uC788\uB294 \uD45C\uB97C \uC218\uC815\uD560 \uB54C\uB294 \uC774 \uD234\uC744 \uC0AC\uC6A9\uD558\uC138\uC694. .hwpx \uD30C\uC77C \uC804\uC6A9\uC785\uB2C8\uB2E4. .hwp\uB294 \uC9C0\uC6D0\uD558\uC9C0 \uC54A\uC73C\uBA70 Hancom\uC5D0\uC11C .hwpx\uB85C \uC800\uC7A5 \uD6C4 \uC0AC\uC6A9\uD558\uC138\uC694. \uC218\uC815 \uC804\uC5D0 \uBC18\uB4DC\uC2DC read_document\uB85C \uC6D0\uBCF8\uC744 \uC77D\uACE0, expectedText\uB97C \uC9C0\uC815\uD558\uC5EC \uC548\uC804\uD558\uAC8C \uC218\uC815\uD558\uC138\uC694. \uBCC0\uACBD \uC0AC\uD56D\uC740 diff \uBBF8\uB9AC\uBCF4\uAE30\uC640 \uD568\uAED8 \uC0AC\uC6A9\uC790 \uC2B9\uC778\uC744 \uBC1B\uC740 \uD6C4\uC5D0\uB9CC \uC800\uC7A5\uB429\uB2C8\uB2E4.",
-  inputSchema: proposeCellEditSchema,
-  requiresApproval: true,
-  propose: async ({
-    input,
-    ctx
-  }) => {
-    const safePath = await resolveSafePath(ctx.cwd, input.path);
-    const ext = extname5(safePath).toLowerCase();
-    if (ext === ".hwp") {
-      return "\uC624\uB958: propose_cell_edit\uC740 .hwpx \uD30C\uC77C\uB9CC \uC9C0\uC6D0\uD569\uB2C8\uB2E4. .hwp(\uAD6C\uD615 OLE \uBC14\uC774\uB108\uB9AC)\uB294 \uC9C1\uC811 \uD3B8\uC9D1\uC774 \uBD88\uAC00\uD569\uB2C8\uB2E4. \uD55C\uAE00 \uD504\uB85C\uADF8\uB7A8\uC5D0\uC11C '\uB2E4\uB978 \uC774\uB984\uC73C\uB85C \uC800\uC7A5 \u2192 .hwpx'\uB85C \uC800\uC7A5\uD55C \uD6C4 \uB2E4\uC2DC \uC2DC\uB3C4\uD558\uC138\uC694. \uB610\uB294 propose_edit\uC744 \uC0AC\uC6A9\uD560 \uC218 \uC788\uC73C\uB098, \uBCD1\uD569 \uC140\uC774 \uC18C\uC2E4\uB420 \uC218 \uC788\uC2B5\uB2C8\uB2E4.";
-    }
-    if (ext !== ".hwpx") {
-      return `\uC624\uB958: propose_cell_edit\uC740 .hwpx \uD30C\uC77C\uB9CC \uC9C0\uC6D0\uD569\uB2C8\uB2E4. \uD604\uC7AC \uD30C\uC77C: ${ext}. \uD45C \uC140 \uC9C1\uC811 \uD3B8\uC9D1\uC740 .hwpx \uD3EC\uB9F7\uC5D0\uC11C\uB9CC \uAC00\uB2A5\uD569\uB2C8\uB2E4.`;
-    }
-    let originalBuffer;
-    try {
-      originalBuffer = await readFile5(safePath);
-    } catch {
-      return `\uC624\uB958: \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${input.path}. \uACBD\uB85C\uB97C \uD655\uC778\uD558\uAC70\uB098 read_document\uB85C \uBA3C\uC800 \uD655\uC778\uD558\uC138\uC694.`;
-    }
-    if (originalBuffer[0] !== 80 || originalBuffer[1] !== 75) {
-      return "\uC624\uB958: \uD30C\uC77C\uC774 \uC720\uD6A8\uD55C .hwpx(ZIP) \uD3EC\uB9F7\uC774 \uC544\uB2D9\uB2C8\uB2E4. \uD30C\uC77C\uC774 \uC190\uC0C1\uB418\uC5C8\uAC70\uB098 \uAD6C\uD615 .hwp(OLE \uBC14\uC774\uB108\uB9AC) \uD3EC\uB9F7\uC785\uB2C8\uB2E4. \uD55C\uAE00 \uD504\uB85C\uADF8\uB7A8\uC5D0\uC11C .hwpx\uB85C \uC800\uC7A5 \uD6C4 \uB2E4\uC2DC \uC2DC\uB3C4\uD558\uC138\uC694.";
-    }
-    const zipForLabel = await import_jszip2.default.loadAsync(new Uint8Array(originalBuffer.buffer));
-    const sectionFilesForLabel = Object.keys(zipForLabel.files).filter((name) => /^Contents\/section\d+\.xml$/.test(name)).sort();
-    const sectionInfos = [];
-    let globalTblOffset = 0;
-    for (const sf of sectionFilesForLabel) {
-      const entry = zipForLabel.file(sf);
-      const xml = entry ? await entry.async("string") : "";
-      const tokens = tokenizeHwpxXml(xml);
-      let count = 0;
-      let d = 0;
-      for (const tok of tokens) {
-        if (tok.kind === "tbl_open") {
-          if (d === 0) count++;
-          d++;
-        } else if (tok.kind === "tbl_close") {
-          d--;
-        }
-      }
-      sectionInfos.push({ xml, tblCount: count, globalOffset: globalTblOffset });
-      globalTblOffset += count;
-    }
-    function resolveLabelAcrossSections(label, direction, scopedTableIndex) {
-      const trimmedLabel = label.trim();
-      const allMatches = [];
-      for (const si of sectionInfos) {
-        const tokens = tokenizeHwpxXml(si.xml);
-        let localStart = 0;
-        let localEnd = si.tblCount - 1;
-        if (scopedTableIndex !== void 0) {
-          const localIdx2 = scopedTableIndex - si.globalOffset;
-          if (localIdx2 < 0 || localIdx2 >= si.tblCount) continue;
-          localStart = localIdx2;
-          localEnd = localIdx2;
-        }
-        for (let li = localStart; li <= localEnd; li++) {
-          const tblRange = findTopLevelTableRange(tokens, li);
-          if (!tblRange) continue;
-          const directTcs = collectDirectTcRanges(tokens, tblRange.start, tblRange.end);
-          for (const tc of directTcs) {
-            const cellText = readOwnTextFromTc(si.xml, tokens, tc.start, tc.end).trim();
-            if (cellText === trimmedLabel) {
-              const addrSpan2 = readCellAddrSpan(tokens, tc.start, tc.end);
-              if (addrSpan2) {
-                allMatches.push({
-                  globalTableIndex: si.globalOffset + li,
-                  addrSpan: addrSpan2,
-                  sectionXml: si.xml,
-                  sectionOffset: si.globalOffset
-                });
-              }
-            }
-          }
-        }
-      }
-      if (allMatches.length === 0) {
-        const scope = scopedTableIndex !== void 0 ? `\uD45C ${scopedTableIndex}` : "\uBB38\uC11C \uB0B4 \uBAA8\uB4E0 \uD45C";
-        return {
-          error: `\uB808\uC774\uBE14 "${label}"\uC744(\uB97C) ${scope}\uC5D0\uC11C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. read_document\uB85C \uD45C \uB0B4\uC6A9\uC744 \uD655\uC778\uD558\uC138\uC694.`
-        };
-      }
-      if (allMatches.length > 1) {
-        const locs = allMatches.map(
-          (m) => `\uD45C ${m.globalTableIndex} (\uD589 ${m.addrSpan.rowAddr}, \uC5F4 ${m.addrSpan.colAddr})`
-        ).join(", ");
-        return {
-          error: `\uB808\uC774\uBE14 "${label}"\uC774(\uAC00) \uC5EC\uB7EC \uC140\uC5D0\uC11C \uBC1C\uACAC\uB418\uC5C8\uC2B5\uB2C8\uB2E4: ${locs}. tableIndex\uB85C \uD0D0\uC0C9 \uBC94\uC704\uB97C \uC881\uD788\uAC70\uB098 \uC88C\uD45C(row/col)\uB97C \uC9C1\uC811 \uC9C0\uC815\uD558\uC138\uC694.`
-        };
-      }
-      const match = allMatches[0];
-      const { addrSpan, globalTableIndex, sectionXml, sectionOffset } = match;
-      let targetRow;
-      let targetCol;
-      if (direction === "right") {
-        targetRow = addrSpan.rowAddr;
-        targetCol = addrSpan.colAddr + addrSpan.colSpan;
+var listFormObjectsSchema = z5.object({
+  path: z5.string().describe("\uC77D\uC744 .hwpx \uD30C\uC77C \uACBD\uB85C")
+});
+var formEditSetSchema = z5.object({
+  caption: z5.string().optional().describe("PushButton \uCEA1\uC158 \uD14D\uC2A4\uD2B8"),
+  checked: z5.boolean().optional().describe("CheckBox/RadioButton \uCCB4\uD06C \uC0C1\uD0DC (true=CHECKED)"),
+  selected: z5.string().optional().describe("ComboBox \uC120\uD0DD \uAC12 (listItem \uC911 \uD558\uB098\uC5EC\uC57C \uD568)"),
+  text: z5.string().optional().describe("Edit \uD14D\uC2A4\uD2B8 \uB0B4\uC6A9")
+}).refine(
+  (v) => {
+    const keys = ["caption", "checked", "selected", "text"].filter(
+      (k) => v[k] !== void 0
+    );
+    return keys.length === 1;
+  },
+  { message: "set \uD544\uB4DC\uB294 caption/checked/selected/text \uC911 \uC815\uD655\uD788 \uD558\uB098\uB9CC \uC9C0\uC815\uD574\uC57C \uD569\uB2C8\uB2E4." }
+);
+var formEditExpectedSchema = z5.object({
+  caption: z5.string().optional(),
+  checked: z5.boolean().optional(),
+  selected: z5.string().optional(),
+  text: z5.string().optional()
+}).optional();
+var formEditItemSchema = z5.object({
+  name: z5.string().describe("\uC591\uC2DD \uAC1C\uCCB4\uC758 name \uC18D\uC131 \uAC12"),
+  index: z5.number().int().nonnegative().optional().describe("\uB3D9\uC77C name\uC774 \uC5EC\uB7FF\uC778 \uACBD\uC6B0 \uBB38\uC11C \uC804\uCCB4 0-based \uC778\uB371\uC2A4\uB85C \uAD6C\uBD84"),
+  set: formEditSetSchema.describe("\uBCC0\uACBD\uD560 \uAC12 (caption/checked/selected/text \uC911 \uD558\uB098)"),
+  expected: formEditExpectedSchema.describe(
+    "\uD604\uC7AC \uAC12 \uC0AC\uC804 \uAC80\uC99D (\uC548\uC804 \uC635\uC158). \uC2E4\uC81C \uAC12\uC774 \uB2E4\uB974\uBA74 \uC774 \uD3B8\uC9D1\uC744 \uCDE8\uC18C\uD558\uACE0 \uC624\uB958 \uBC18\uD658."
+  )
+});
+var proposeFormObjectSchema = z5.object({
+  path: z5.string().describe("\uC218\uC815\uD560 .hwpx \uD30C\uC77C \uACBD\uB85C"),
+  edits: z5.array(formEditItemSchema).min(1).describe("\uC591\uC2DD \uAC1C\uCCB4 \uD3B8\uC9D1 \uBAA9\uB85D"),
+  summary: z5.string().describe("\uBCC0\uACBD \uC694\uC57D (\uD55C\uAD6D\uC5B4 1-2\uBB38\uC7A5)")
+});
+var listFormObjectsTool = {
+  name: "list_form_objects",
+  description: "HWPX \uBB38\uC11C\uC758 \uC591\uC2DD \uAC1C\uCCB4(form object) \uBAA9\uB85D\uC744 \uC5F4\uAC70\uD569\uB2C8\uB2E4. PushButton, CheckBox, RadioButton, ComboBox, Edit \uB2E4\uC12F \uAC00\uC9C0 \uD0C0\uC785\uC744 \uC9C0\uC6D0\uD569\uB2C8\uB2E4. \uAC01 \uC591\uC2DD \uAC1C\uCCB4\uC758 \uC774\uB984(name), \uD0C0\uC785, \uD604\uC7AC \uAC12, ComboBox\uC758 \uACBD\uC6B0 \uC120\uD0DD \uAC00\uB2A5\uD55C \uD56D\uBAA9 \uBAA9\uB85D\uC744 \uBC18\uD658\uD569\uB2C8\uB2E4. propose_form_object\uB85C \uAC12\uC744 \uC218\uC815\uD558\uAE30 \uC804\uC5D0 \uC774 \uD234\uB85C \uBA3C\uC800 \uD604\uC7AC \uC0C1\uD0DC\uB97C \uD655\uC778\uD558\uC138\uC694. .hwpx \uD30C\uC77C \uC804\uC6A9\uC785\uB2C8\uB2E4.",
+  inputSchema: listFormObjectsSchema,
+  requiresApproval: false,
+  execute: async ({
+    input,
+    ctx
+  }) => {
+    const safePath = await resolveSafePath(ctx.cwd, input.path);
+    const ext = extname5(safePath).toLowerCase();
+    let buffer;
+    try {
+      buffer = await readFile6(safePath);
+    } catch {
+      return `\uC624\uB958: \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${input.path}`;
+    }
+    const validationError = validateHwpxBuffer(ext, new Uint8Array(buffer.buffer));
+    if (validationError) return validationError;
+    let zip;
+    try {
+      zip = await import_jszip3.default.loadAsync(new Uint8Array(buffer.buffer));
+    } catch {
+      return "\uC624\uB958: .hwpx(ZIP) \uD30C\uC77C\uC744 \uC5F4 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. \uD30C\uC77C\uC774 \uC190\uC0C1\uB418\uC5C8\uC744 \uC218 \uC788\uC2B5\uB2C8\uB2E4.";
+    }
+    const { objects } = await listFormObjectsFromZip(zip);
+    if (objects.length === 0) {
+      return "\uC774 \uBB38\uC11C\uC5D0\uB294 \uC591\uC2DD \uAC1C\uCCB4(form object)\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.";
+    }
+    const lines = [`\uCD1D ${objects.length}\uAC1C\uC758 \uC591\uC2DD \uAC1C\uCCB4\uAC00 \uBC1C\uACAC\uB418\uC5C8\uC2B5\uB2C8\uB2E4.
+`];
+    const typeKo = {
+      button: "PushButton",
+      checkBox: "CheckBox",
+      radioButton: "RadioButton",
+      comboBox: "ComboBox",
+      edit: "Edit"
+    };
+    for (const obj of objects) {
+      let valueStr;
+      if (typeof obj.currentValue === "boolean") {
+        valueStr = obj.currentValue ? "\uCCB4\uD06C\uB428 (CHECKED)" : "\uCCB4\uD06C \uD574\uC81C\uB428 (UNCHECKED)";
       } else {
-        targetRow = addrSpan.rowAddr + addrSpan.rowSpan;
-        targetCol = addrSpan.colAddr;
-      }
-      const localIdx = globalTableIndex - sectionOffset;
-      const tokens2 = tokenizeHwpxXml(sectionXml);
-      const tblRange2 = findTopLevelTableRange(tokens2, localIdx);
-      if (!tblRange2) {
-        return { error: `\uD45C ${globalTableIndex}\uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4 (\uB0B4\uBD80 \uC624\uB958).` };
-      }
-      const directTcs2 = collectDirectTcRanges(tokens2, tblRange2.start, tblRange2.end);
-      const tblTokens2 = tokens2.filter((t) => t.pos >= tblRange2.start && t.pos < tblRange2.end);
-      let targetExists = false;
-      for (const tc of directTcs2) {
-        const tcTokens = tblTokens2.filter((t) => t.pos >= tc.start && t.pos < tc.end);
-        if (tcTokens.some(
-          (t) => t.kind === "cell_addr" && t.colAddr === targetCol && t.rowAddr === targetRow
-        )) {
-          targetExists = true;
-          break;
-        }
+        valueStr = `"${obj.currentValue}"`;
       }
-      if (!targetExists) {
-        const dirLabel = direction === "right" ? "\uC624\uB978\uCABD" : "\uC544\uB798";
-        return {
-          error: `\uB808\uC774\uBE14 "${label}" (\uD45C ${globalTableIndex}, \uD589 ${addrSpan.rowAddr}, \uC5F4 ${addrSpan.colAddr})\uC758 ${dirLabel} \uC140 (\uD589 ${targetRow}, \uC5F4 ${targetCol})\uC774 \uC874\uC7AC\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. direction \uB610\uB294 \uC88C\uD45C\uB97C \uD655\uC778\uD558\uC138\uC694.`
-        };
+      let line = `[${obj.index}] name="${obj.name}" | \uD0C0\uC785: ${typeKo[obj.type]} | \uD604\uC7AC \uAC12: ${valueStr}`;
+      if (obj.type === "comboBox" && obj.comboItems) {
+        const itemList = obj.comboItems.map((v) => `"${v}"`).join(", ");
+        line += ` | \uD56D\uBAA9: [${itemList}]`;
       }
-      return { tableIndex: globalTableIndex, row: targetRow, col: targetCol };
+      lines.push(line);
+    }
+    return lines.join("\n");
+  }
+};
+var proposeFormObjectTool = {
+  name: "propose_form_object",
+  description: "HWPX \uBB38\uC11C\uC758 \uC591\uC2DD \uAC1C\uCCB4(form object) \uAC12\uC744 XML \uC9C1\uC811 \uD328\uCE58 \uBC29\uC2DD\uC73C\uB85C \uC218\uC815\uD569\uB2C8\uB2E4. PushButton(caption), CheckBox/RadioButton(checked), ComboBox(selected), Edit(text)\uB97C \uC218\uC815\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4. kordoc IR\uC5D0 \uC591\uC2DD \uAC1C\uCCB4 \uD0C0\uC785\uC774 \uC5C6\uC73C\uBBC0\uB85C section XML\uC744 \uC9C1\uC811 \uD328\uCE58\uD569\uB2C8\uB2E4. \uC218\uC815 \uC804\uC5D0 list_form_objects\uB85C \uD604\uC7AC \uC0C1\uD0DC\uB97C \uD655\uC778\uD558\uC138\uC694. name\uC774 \uC911\uBCF5\uB41C \uACBD\uC6B0 index\uB85C \uB300\uC0C1\uC744 \uC9C0\uC815\uD558\uC138\uC694. \uBCC0\uACBD \uC0AC\uD56D\uC740 \uC0AC\uC6A9\uC790 \uC2B9\uC778 \uD6C4\uC5D0\uB9CC \uC800\uC7A5\uB429\uB2C8\uB2E4. .hwpx \uD30C\uC77C \uC804\uC6A9\uC785\uB2C8\uB2E4.",
+  inputSchema: proposeFormObjectSchema,
+  requiresApproval: true,
+  propose: async ({
+    input,
+    ctx
+  }) => {
+    const safePath = await resolveSafePath(ctx.cwd, input.path);
+    const ext = extname5(safePath).toLowerCase();
+    let originalBuffer;
+    try {
+      originalBuffer = await readFile6(safePath);
+    } catch {
+      return `\uC624\uB958: \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${input.path}`;
+    }
+    const bufArray = new Uint8Array(originalBuffer.buffer);
+    const validationError = validateHwpxBuffer(ext, bufArray);
+    if (validationError) return validationError;
+    let zip;
+    try {
+      zip = await import_jszip3.default.loadAsync(bufArray);
+    } catch {
+      return "\uC624\uB958: .hwpx(ZIP) \uD30C\uC77C\uC744 \uC5F4 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. \uD30C\uC77C\uC774 \uC190\uC0C1\uB418\uC5C8\uC744 \uC218 \uC788\uC2B5\uB2C8\uB2E4.";
     }
+    const { objects, sectionFiles, sectionXmls } = await listFormObjectsFromZip(zip);
     const resolvedEdits = [];
     const resolveErrors = [];
-    for (let i = 0; i < input.edits.length; i++) {
-      const e = input.edits[i];
-      if (!e) continue;
-      if (e.label !== void 0 && (e.row !== void 0 || e.col !== void 0)) {
+    for (let ei = 0; ei < input.edits.length; ei++) {
+      const edit = input.edits[ei];
+      if (!edit) continue;
+      const candidates = objects.filter((o) => o.name === edit.name);
+      if (candidates.length === 0) {
         resolveErrors.push(
-          `\uD3B8\uC9D1 #${i + 1}: label\uACFC row/col\uC744 \uB3D9\uC2DC\uC5D0 \uC9C0\uC815\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. \uC88C\uD45C \uBAA8\uB4DC(tableIndex+row+col) \uB610\uB294 \uB808\uC774\uBE14 \uBAA8\uB4DC(label) \uC911 \uD558\uB098\uB9CC \uC0AC\uC6A9\uD558\uC138\uC694.`
+          `\uD3B8\uC9D1 #${ei + 1}: name="${edit.name}"\uC778 \uC591\uC2DD \uAC1C\uCCB4\uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. list_form_objects\uB85C \uBB38\uC11C\uC758 \uC591\uC2DD \uAC1C\uCCB4 \uBAA9\uB85D\uC744 \uD655\uC778\uD558\uC138\uC694.`
         );
-      } else if (e.label !== void 0) {
-        const direction = e.direction ?? "right";
-        const resolved = resolveLabelAcrossSections(e.label, direction, e.tableIndex);
-        if ("error" in resolved) {
-          resolveErrors.push(`\uD3B8\uC9D1 #${i + 1} (\uB808\uC774\uBE14 "${e.label}"): ${resolved.error}`);
-        } else {
-          resolvedEdits.push({
-            tableIndex: resolved.tableIndex,
-            row: resolved.row,
-            col: resolved.col,
-            newText: e.newText,
-            expectedText: e.expectedText,
-            label: e.label
-          });
+        continue;
+      }
+      let target;
+      if (candidates.length > 1) {
+        if (edit.index === void 0) {
+          const indices = candidates.map((c) => c.index).join(", ");
+          resolveErrors.push(
+            `\uD3B8\uC9D1 #${ei + 1}: name="${edit.name}"\uC778 \uC591\uC2DD \uAC1C\uCCB4\uAC00 ${candidates.length}\uAC1C \uBC1C\uACAC\uB418\uC5C8\uC2B5\uB2C8\uB2E4 (\uBB38\uC11C \uC778\uB371\uC2A4: ${indices}). index \uD544\uB4DC\uB85C \uB300\uC0C1\uC744 \uC9C0\uC815\uD558\uC138\uC694.`
+          );
+          continue;
         }
-      } else if (e.tableIndex !== void 0 && e.row !== void 0 && e.col !== void 0) {
-        resolvedEdits.push({
-          tableIndex: e.tableIndex,
-          row: e.row,
-          col: e.col,
-          newText: e.newText,
-          expectedText: e.expectedText
-        });
+        const byIndex = candidates.find((c) => c.index === edit.index);
+        if (!byIndex) {
+          resolveErrors.push(
+            `\uD3B8\uC9D1 #${ei + 1}: name="${edit.name}", index=${edit.index}\uC778 \uC591\uC2DD \uAC1C\uCCB4\uB97C \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4.`
+          );
+          continue;
+        }
+        target = byIndex;
       } else {
-        resolveErrors.push(
-          `\uD3B8\uC9D1 #${i + 1}: \uC88C\uD45C \uBAA8\uB4DC(tableIndex+row+col) \uB610\uB294 \uB808\uC774\uBE14 \uBAA8\uB4DC(label) \uC911 \uD558\uB098\uB97C \uC644\uC804\uD788 \uC9C0\uC815\uD558\uC138\uC694. read_document\uB85C \uD45C \uB0B4\uC6A9\uC744 \uBA3C\uC800 \uD655\uC778\uD558\uC138\uC694.`
-        );
+        target = candidates[0];
+        if (edit.index !== void 0 && edit.index !== target.index) {
+          resolveErrors.push(
+            `\uD3B8\uC9D1 #${ei + 1}: name="${edit.name}"\uC758 \uBB38\uC11C \uC778\uB371\uC2A4\uB294 ${target.index}\uC774\uC9C0\uB9CC index=${edit.index}\uAC00 \uC9C0\uC815\uB418\uC5C8\uC2B5\uB2C8\uB2E4.`
+          );
+          continue;
+        }
       }
+      resolvedEdits.push({
+        target,
+        set: edit.set,
+        expected: edit.expected,
+        editIdx: ei
+      });
     }
     if (resolveErrors.length > 0) {
-      return `\uC624\uB958: \uB2E4\uC74C \uB808\uC774\uBE14\uC744 \uD574\uC11D\uD560 \uC218 \uC5C6\uC5B4 \uD30C\uC77C\uC744 \uC218\uC815\uD558\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4.
+      return `\uC624\uB958: \uB2E4\uC74C \uD3B8\uC9D1 \uB300\uC0C1\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC5B4 \uD30C\uC77C\uC744 \uC218\uC815\uD558\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4.
 ${resolveErrors.join("\n")}`;
     }
-    const editRequests = resolvedEdits.map((e) => ({
-      tableIndex: e.tableIndex,
-      row: e.row,
-      col: e.col,
-      newText: e.newText,
-      expectedText: e.expectedText
-    }));
-    const { buffer: newBuffer, results } = await applyEditsToHwpx(
-      new Uint8Array(originalBuffer.buffer),
-      editRequests
-    );
-    const failedResults = results.map((r, i) => ({ r, i })).filter(({ r }) => !r.success);
-    if (failedResults.length > 0) {
-      const messages = failedResults.map(({ r, i }) => {
-        const e = resolvedEdits[i];
-        const label = e?.label ? `\uB808\uC774\uBE14 "${e.label}" \u2192 ` : "";
-        return `\uD3B8\uC9D1 #${i + 1} (${label}\uD45C ${e?.tableIndex ?? "?"}, \uD589 ${e?.row ?? "?"}, \uC5F4 ${e?.col ?? "?"}): ${r.error}`;
+    const sectionEditMap = /* @__PURE__ */ new Map();
+    for (const re of resolvedEdits) {
+      const si = sectionFiles.indexOf(re.target.sectionFile);
+      if (si < 0) continue;
+      if (!sectionEditMap.has(si)) sectionEditMap.set(si, []);
+      sectionEditMap.get(si).push({
+        target: re.target,
+        set: re.set,
+        expected: re.expected
       });
+    }
+    const sectionResults = [];
+    const newSectionXmls = [...sectionXmls];
+    for (const [si, edits] of sectionEditMap) {
+      const xml = sectionXmls[si] ?? "";
+      const { newXml, results } = applyFormObjectEdits(xml, edits);
+      newSectionXmls[si] = newXml;
+      sectionResults.push({ si, results, edits });
+    }
+    const failMessages = [];
+    const successMap = /* @__PURE__ */ new Map();
+    for (const sr of sectionResults) {
+      for (let i = 0; i < sr.edits.length; i++) {
+        const editReq = sr.edits[i];
+        const result = sr.results[i];
+        const resolved = resolvedEdits.find((r) => r.target === editReq.target);
+        if (resolved) {
+          successMap.set(resolved.editIdx, result);
+          if (!result.success) {
+            failMessages.push(
+              `\uD3B8\uC9D1 #${resolved.editIdx + 1} (name="${editReq.target.name}"): ${result.error}`
+            );
+          }
+        }
+      }
+    }
+    if (failMessages.length > 0) {
       return `\uC624\uB958: \uB2E4\uC74C \uD3B8\uC9D1\uC744 \uC801\uC6A9\uD560 \uC218 \uC5C6\uC5B4 \uD30C\uC77C\uC744 \uC218\uC815\uD558\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4.
-${messages.join("\n")}`;
+${failMessages.join("\n")}`;
     }
-    const diffLines = ["| \uD45C\xB7\uC140 | \uC774\uC804 | \uC774\uD6C4 |", "| --- | --- | --- |"];
-    for (let i = 0; i < resolvedEdits.length; i++) {
-      const e = resolvedEdits[i];
-      if (!e) continue;
-      const oldText = results[i]?.oldText ?? "";
-      const addr = e.label ? `\uB808\uC774\uBE14 "${e.label}" \u2192 #${e.tableIndex} (${e.row},${e.col})` : `#${e.tableIndex} (${e.row},${e.col})`;
-      diffLines.push(`| ${addr} | ${oldText} | ${e.newText} |`);
+    const out = new import_jszip3.default();
+    const mimetypeEntry = zip.file("mimetype");
+    if (mimetypeEntry) {
+      out.file("mimetype", await mimetypeEntry.async("uint8array"), { compression: "STORE" });
+    }
+    for (const [name, entry] of Object.entries(zip.files)) {
+      if (name === "mimetype" || entry.dir) continue;
+      const si = sectionFiles.indexOf(name);
+      if (si >= 0) {
+        out.file(name, newSectionXmls[si] ?? "");
+      } else {
+        out.file(name, await entry.async("uint8array"));
+      }
+    }
+    const buf = await out.generateAsync({ type: "nodebuffer", compression: "DEFLATE" });
+    const newBuffer = new Uint8Array(buf);
+    const typeKo = {
+      button: "PushButton",
+      checkBox: "CheckBox",
+      radioButton: "RadioButton",
+      comboBox: "ComboBox",
+      edit: "Edit"
+    };
+    const diffLines = ["| \uC591\uC2DD \uAC1C\uCCB4 | \uC774\uC804 | \uC774\uD6C4 |", "| --- | --- | --- |"];
+    for (const re of resolvedEdits) {
+      const result = successMap.get(re.editIdx);
+      const oldVal = result?.oldValue ?? "";
+      const oldStr = typeof oldVal === "boolean" ? oldVal ? "CHECKED" : "UNCHECKED" : String(oldVal);
+      let newStr;
+      if (re.set.caption !== void 0) newStr = re.set.caption;
+      else if (re.set.checked !== void 0) newStr = re.set.checked ? "CHECKED" : "UNCHECKED";
+      else if (re.set.selected !== void 0) newStr = re.set.selected;
+      else newStr = re.set.text ?? "";
+      diffLines.push(`| ${re.target.name}(${typeKo[re.target.type]}) | ${oldStr} | ${newStr} |`);
     }
     const diff = diffLines.join("\n");
     const { outputPath, willConvertFormat } = resolveOutputPath(safePath);
@@ -12642,7 +12863,7 @@ ${messages.join("\n")}`;
     return {
       proposal: {
         id: proposalId,
-        kind: "cell-edit",
+        kind: "form-object",
         targetPath: outputPath,
         stagedPath,
         summary: input.summary,
@@ -12659,6 +12880,92 @@ ${messages.join("\n")}`;
     };
   }
 };
+var DOC_EXTENSIONS = /* @__PURE__ */ new Set([
+  ".hwp",
+  ".hwpx",
+  ".hwpml",
+  ".docx",
+  ".doc",
+  ".xlsx",
+  ".xls",
+  ".pdf",
+  ".pptx",
+  ".ppt",
+  ".md",
+  ".txt"
+]);
+var SKIP_DIRS = /* @__PURE__ */ new Set([
+  "node_modules",
+  ".git",
+  ".DS_Store",
+  "__pycache__",
+  "dist",
+  "build",
+  ".next"
+]);
+var MAX_DEPTH = 4;
+var MAX_FILES = 500;
+var listFilesSchema = z6.object({
+  dir: z6.string().optional().describe("\uBAA9\uB85D\uC744 \uC870\uD68C\uD560 \uB514\uB809\uD130\uB9AC (\uBBF8\uC9C0\uC815 \uC2DC cwd \uC804\uCCB4)")
+});
+async function collectFiles(dir, cwd, depth, entries) {
+  if (depth > MAX_DEPTH || entries.length >= MAX_FILES) return;
+  let items;
+  try {
+    items = await readdir3(dir);
+  } catch {
+    return;
+  }
+  for (const item of items) {
+    if (entries.length >= MAX_FILES) break;
+    if (item.startsWith(".")) continue;
+    if (SKIP_DIRS.has(item)) continue;
+    const fullPath = join4(dir, item);
+    let info;
+    try {
+      info = await stat3(fullPath);
+    } catch {
+      continue;
+    }
+    const relPath = relative2(cwd, fullPath);
+    const ext = extname6(item).toLowerCase();
+    const isDoc = DOC_EXTENSIONS.has(ext);
+    if (info.isDirectory()) {
+      entries.push({ path: relPath + "/", isDir: true, isDoc: false });
+      await collectFiles(fullPath, cwd, depth + 1, entries);
+    } else if (info.isFile()) {
+      entries.push({ path: relPath, isDir: false, isDoc });
+    }
+  }
+}
+var listFilesTool = {
+  name: "list_files",
+  description: "\uD604\uC7AC \uC791\uC5C5 \uB514\uB809\uD130\uB9AC(cwd) \uC774\uD558\uC758 \uD30C\uC77C \uBAA9\uB85D\uC744 \uBC18\uD658\uD569\uB2C8\uB2E4. \uBB38\uC11C \uD30C\uC77C(.hwp/.hwpx/.docx/.xlsx/.pdf \uB4F1)\uC774 \uCD5C\uC0C1\uB2E8\uC5D0 \uD45C\uC2DC\uB429\uB2C8\uB2E4. \uAE4A\uC774\uB294 \uCD5C\uB300 4\uB2E8\uACC4\uAE4C\uC9C0\uC785\uB2C8\uB2E4.",
+  inputSchema: listFilesSchema,
+  requiresApproval: false,
+  execute: async ({
+    input,
+    ctx
+  }) => {
+    const targetDir = input.dir ? await resolveSafePath(ctx.cwd, input.dir) : ctx.cwd;
+    const entries = [];
+    await collectFiles(targetDir, ctx.cwd, 0, entries);
+    if (entries.length === 0) {
+      return "\uD30C\uC77C\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.";
+    }
+    const docs = entries.filter((e) => e.isDoc);
+    const dirs = entries.filter((e) => e.isDir);
+    const others = entries.filter((e) => !e.isDoc && !e.isDir);
+    const allSorted = [...docs, ...dirs, ...others];
+    const lines = allSorted.map((e) => {
+      const icon = e.isDir ? "\u{1F4C1}" : e.isDoc ? "\u{1F4C4}" : "  ";
+      return `${icon} ${e.path}`;
+    });
+    const truncateNotice = entries.length >= MAX_FILES ? `
+(\uCD5C\uB300 ${MAX_FILES}\uAC1C\uAE4C\uC9C0 \uD45C\uC2DC\uB429\uB2C8\uB2E4. \uB354 \uC881\uC740 \uBC94\uC704\uB97C \uC9C0\uC815\uD558\uC138\uC694.)` : "";
+    return lines.join("\n") + truncateNotice;
+  }
+};
 var HEADING_LEVELS = {
   1: HeadingLevel.HEADING_1,
   2: HeadingLevel.HEADING_2,
@@ -12781,10 +13088,10 @@ async function markdownToDocx(markdown) {
   });
   return Packer.toBuffer(doc);
 }
-var proposeEditSchema = z6.object({
-  path: z6.string().describe("\uC218\uC815\uD560 \uBB38\uC11C \uACBD\uB85C (cwd \uAE30\uC900 \uC0C1\uB300 \uACBD\uB85C \uB610\uB294 \uC808\uB300 \uACBD\uB85C)"),
-  newMarkdown: z6.string().describe("\uC0C8 \uBB38\uC11C \uB0B4\uC6A9 (\uB9C8\uD06C\uB2E4\uC6B4 \uD615\uC2DD). read_document\uB85C \uC6D0\uBCF8\uC744 \uBA3C\uC800 \uC77D\uC5B4\uC57C \uD568"),
-  summary: z6.string().describe("\uBCC0\uACBD \uC694\uC57D (\uD55C\uAD6D\uC5B4 1-2\uBB38\uC7A5)")
+var proposeEditSchema = z7.object({
+  path: z7.string().describe("\uC218\uC815\uD560 \uBB38\uC11C \uACBD\uB85C (cwd \uAE30\uC900 \uC0C1\uB300 \uACBD\uB85C \uB610\uB294 \uC808\uB300 \uACBD\uB85C)"),
+  newMarkdown: z7.string().describe("\uC0C8 \uBB38\uC11C \uB0B4\uC6A9 (\uB9C8\uD06C\uB2E4\uC6B4 \uD615\uC2DD). read_document\uB85C \uC6D0\uBCF8\uC744 \uBA3C\uC800 \uC77D\uC5B4\uC57C \uD568"),
+  summary: z7.string().describe("\uBCC0\uACBD \uC694\uC57D (\uD55C\uAD6D\uC5B4 1-2\uBB38\uC7A5)")
 });
 var proposeEditTool = {
   name: "propose_edit",
@@ -12796,10 +13103,10 @@ var proposeEditTool = {
     ctx
   }) => {
     const safePath = await resolveSafePath(ctx.cwd, input.path);
-    const ext = extname6(safePath).toLowerCase();
+    const ext = extname7(safePath).toLowerCase();
     let originalBuffer;
     try {
-      originalBuffer = await readFile6(safePath);
+      originalBuffer = await readFile7(safePath);
     } catch {
       return `\uC624\uB958: \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${input.path}. \uACBD\uB85C\uB97C \uD655\uC778\uD558\uAC70\uB098 read_document\uB85C \uBA3C\uC800 \uD655\uC778\uD558\uC138\uC694.`;
     }
@@ -12870,19 +13177,19 @@ ${diff}`;
     };
   }
 };
-var proposeFindReplaceSchema = z7.object({
-  path: z7.string().describe("\uC218\uC815\uD560 .hwpx \uD30C\uC77C \uACBD\uB85C (cwd \uAE30\uC900 \uC0C1\uB300 \uACBD\uB85C \uB610\uB294 \uC808\uB300 \uACBD\uB85C)"),
-  find: z7.string().min(1).describe("\uCC3E\uC744 \uD14D\uC2A4\uD2B8"),
-  replace: z7.string().describe("\uBC14\uAFC0 \uD14D\uC2A4\uD2B8"),
-  caseSensitive: z7.boolean().optional().default(false).describe("\uB300\uC18C\uBB38\uC790 \uAD6C\uBD84 (\uAE30\uBCF8\uAC12: false)"),
-  all: z7.boolean().optional().default(true).describe("\uBAA8\uB4E0 \uD56D\uBAA9\uC744 \uAD50\uCCB4\uD560\uC9C0 \uC5EC\uBD80 (\uAE30\uBCF8\uAC12: true). false\uC774\uBA74 \uCCAB \uBC88\uC9F8 \uB9E4\uCE58\uB9CC \uAD50\uCCB4"),
-  summary: z7.string().describe("\uBCC0\uACBD \uC694\uC57D (\uD55C\uAD6D\uC5B4 1-2\uBB38\uC7A5)")
+var proposeFindReplaceSchema = z8.object({
+  path: z8.string().describe("\uC218\uC815\uD560 .hwpx \uD30C\uC77C \uACBD\uB85C (cwd \uAE30\uC900 \uC0C1\uB300 \uACBD\uB85C \uB610\uB294 \uC808\uB300 \uACBD\uB85C)"),
+  find: z8.string().min(1).describe("\uCC3E\uC744 \uD14D\uC2A4\uD2B8"),
+  replace: z8.string().describe("\uBC14\uAFC0 \uD14D\uC2A4\uD2B8"),
+  caseSensitive: z8.boolean().optional().default(false).describe("\uB300\uC18C\uBB38\uC790 \uAD6C\uBD84 (\uAE30\uBCF8\uAC12: false)"),
+  all: z8.boolean().optional().default(true).describe("\uBAA8\uB4E0 \uD56D\uBAA9\uC744 \uAD50\uCCB4\uD560\uC9C0 \uC5EC\uBD80 (\uAE30\uBCF8\uAC12: true). false\uC774\uBA74 \uCCAB \uBC88\uC9F8 \uB9E4\uCE58\uB9CC \uAD50\uCCB4"),
+  summary: z8.string().describe("\uBCC0\uACBD \uC694\uC57D (\uD55C\uAD6D\uC5B4 1-2\uBB38\uC7A5)")
 });
 var MAX_DIFF_SAMPLES = 20;
 function escapeXml3(text3) {
   return text3.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
-function unescapeXml(text3) {
+function unescapeXml2(text3) {
   return text3.replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&amp;/g, "&");
 }
 function makeChangeSnippet(before, after, ctx = 24) {
@@ -12906,7 +13213,7 @@ function collectChangedSnippets(beforeXml, afterXml, maxSamples) {
   const n = Math.min(beforeNodes.length, afterNodes.length);
   for (let i = 0; i < n && out.length < maxSamples; i++) {
     if (beforeNodes[i] !== afterNodes[i]) {
-      const snip = makeChangeSnippet(unescapeXml(beforeNodes[i]), unescapeXml(afterNodes[i]));
+      const snip = makeChangeSnippet(unescapeXml2(beforeNodes[i]), unescapeXml2(afterNodes[i]));
       out.push(snip);
     }
   }
@@ -12989,7 +13296,7 @@ function countOccurrences(str, sub) {
   return count;
 }
 async function applyFindReplaceToHwpx(hwpxBuffer, find, replace, caseSensitive, replaceAll) {
-  const zip = await import_jszip3.default.loadAsync(hwpxBuffer);
+  const zip = await import_jszip4.default.loadAsync(hwpxBuffer);
   const sectionFiles = Object.keys(zip.files).filter((name) => /^Contents\/section\d+\.xml$/.test(name)).sort();
   const sectionXmls = [];
   for (const sf of sectionFiles) {
@@ -13033,7 +13340,7 @@ async function applyFindReplaceToHwpx(hwpxBuffer, find, replace, caseSensitive,
       samples.push(snip);
     }
   }
-  const out = new import_jszip3.default();
+  const out = new import_jszip4.default();
   const mimetypeEntry = zip.file("mimetype");
   if (mimetypeEntry) {
     out.file("mimetype", await mimetypeEntry.async("uint8array"), { compression: "STORE" });
@@ -13064,7 +13371,7 @@ var proposeFindReplaceTool = {
     ctx
   }) => {
     const safePath = await resolveSafePath(ctx.cwd, input.path);
-    const ext = extname7(safePath).toLowerCase();
+    const ext = extname8(safePath).toLowerCase();
     if (ext === ".hwp") {
       return "\uC624\uB958: propose_find_replace\uB294 .hwpx \uD30C\uC77C\uB9CC \uC9C0\uC6D0\uD569\uB2C8\uB2E4. .hwp(\uAD6C\uD615 OLE \uBC14\uC774\uB108\uB9AC)\uB294 XML \uC9C1\uC811 \uD3B8\uC9D1\uC774 \uBD88\uAC00\uD569\uB2C8\uB2E4. \uD55C\uAE00 \uD504\uB85C\uADF8\uB7A8\uC5D0\uC11C '\uB2E4\uB978 \uC774\uB984\uC73C\uB85C \uC800\uC7A5 \u2192 .hwpx'\uB85C \uC800\uC7A5\uD55C \uD6C4 \uB2E4\uC2DC \uC2DC\uB3C4\uD558\uC138\uC694.";
     }
@@ -13073,7 +13380,7 @@ var proposeFindReplaceTool = {
     }
     let originalBuf;
     try {
-      originalBuf = await readFile7(safePath);
+      originalBuf = await readFile8(safePath);
     } catch {
       return `\uC624\uB958: \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${input.path}. \uACBD\uB85C\uB97C \uD655\uC778\uD558\uC138\uC694.`;
     }
@@ -13166,10 +13473,10 @@ var proposeFindReplaceTool = {
     };
   }
 };
-var proposeFormFillSchema = z8.object({
-  path: z8.string().describe("\uC591\uC2DD \uBB38\uC11C \uACBD\uB85C (cwd \uAE30\uC900 \uC0C1\uB300 \uACBD\uB85C \uB610\uB294 \uC808\uB300 \uACBD\uB85C)"),
-  fields: z8.record(z8.string(), z8.string()).describe("\uCC44\uC6B8 \uD544\uB4DC \uB9E4\uD551: { \uB77C\uBCA8: \uAC12 }. read_document\uB85C \uBA3C\uC800 \uD544\uB4DC \uBAA9\uB85D\uC744 \uD655\uC778\uD558\uC138\uC694"),
-  summary: z8.string().describe("\uBCC0\uACBD \uC694\uC57D (\uD55C\uAD6D\uC5B4 1-2\uBB38\uC7A5)")
+var proposeFormFillSchema = z9.object({
+  path: z9.string().describe("\uC591\uC2DD \uBB38\uC11C \uACBD\uB85C (cwd \uAE30\uC900 \uC0C1\uB300 \uACBD\uB85C \uB610\uB294 \uC808\uB300 \uACBD\uB85C)"),
+  fields: z9.record(z9.string(), z9.string()).describe("\uCC44\uC6B8 \uD544\uB4DC \uB9E4\uD551: { \uB77C\uBCA8: \uAC12 }. read_document\uB85C \uBA3C\uC800 \uD544\uB4DC \uBAA9\uB85D\uC744 \uD655\uC778\uD558\uC138\uC694"),
+  summary: z9.string().describe("\uBCC0\uACBD \uC694\uC57D (\uD55C\uAD6D\uC5B4 1-2\uBB38\uC7A5)")
 });
 var proposeFormFillTool = {
   name: "propose_form_fill",
@@ -13181,13 +13488,13 @@ var proposeFormFillTool = {
     ctx
   }) => {
     const safePath = await resolveSafePath(ctx.cwd, input.path);
-    const ext = extname8(safePath).toLowerCase();
+    const ext = extname9(safePath).toLowerCase();
     if (ext !== ".hwpx" && ext !== ".hwp") {
       return `\uC624\uB958: propose_form_fill\uC740 .hwp/.hwpx \uD30C\uC77C\uB9CC \uC9C0\uC6D0\uD569\uB2C8\uB2E4. \uD604\uC7AC \uD30C\uC77C: ${ext}. .docx \uD30C\uC77C\uC740 propose_edit\uC744 \uC0AC\uC6A9\uD558\uC138\uC694.`;
     }
     let originalBuffer;
     try {
-      originalBuffer = await readFile8(safePath);
+      originalBuffer = await readFile9(safePath);
     } catch {
       return `\uC624\uB958: \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${input.path}. \uACBD\uB85C\uB97C \uD655\uC778\uD558\uC138\uC694.`;
     }
@@ -13255,16 +13562,216 @@ var proposeFormFillTool = {
     };
   }
 };
-var proposeSheetEditSchema = z9.object({
-  path: z9.string().describe("\uC218\uC815\uD560 XLSX \uD30C\uC77C \uACBD\uB85C (cwd \uAE30\uC900 \uC0C1\uB300 \uACBD\uB85C \uB610\uB294 \uC808\uB300 \uACBD\uB85C)"),
-  updates: z9.array(
-    z9.object({
-      sheet: z9.string().describe("\uC2DC\uD2B8 \uC774\uB984"),
-      cell: z9.string().describe("\uC140 \uC8FC\uC18C (\uC608: A1, B3)"),
-      value: z9.union([z9.string(), z9.number()]).describe("\uC0C8 \uAC12")
+var proposeRedactPiiSchema = z10.object({
+  path: z10.string().describe("\uAC1C\uC778\uC815\uBCF4\uB97C \uBE44\uC2DD\uBCC4 \uCC98\uB9AC\uD560 \uBB38\uC11C \uACBD\uB85C"),
+  summary: z10.string().optional().describe("\uBCC0\uACBD \uC694\uC57D")
+});
+function mergeFindings(allFindings) {
+  const map = /* @__PURE__ */ new Map();
+  for (const findings of allFindings) {
+    for (const f of findings) {
+      const existing = map.get(f.type);
+      if (existing) {
+        existing.count += f.count;
+        for (const m of f.masked) {
+          if (!existing.masked.includes(m) && existing.masked.length < 5) {
+            existing.masked.push(m);
+          }
+        }
+      } else {
+        map.set(f.type, { type: f.type, count: f.count, masked: [...f.masked] });
+      }
+    }
+  }
+  return [...map.values()];
+}
+async function applyRedactToHwpx(hwpxBuffer) {
+  const zip = await import_jszip5.default.loadAsync(hwpxBuffer);
+  const sectionFiles = Object.keys(zip.files).filter((name) => /^Contents\/section\d+\.xml$/.test(name)).sort();
+  const sectionXmls = [];
+  for (const sf of sectionFiles) {
+    const entry = zip.file(sf);
+    const xml = entry ? await entry.async("string") : "";
+    sectionXmls.push(xml);
+  }
+  const newSectionXmls = [];
+  const allFindings = [];
+  let anyChanged = false;
+  for (const srcXml of sectionXmls) {
+    const tNodeRe = /<hp:t>([\s\S]*?)<\/hp:t>/g;
+    const sectionFindings = [];
+    let offset = 0;
+    let result = srcXml;
+    let m = tNodeRe.exec(srcXml);
+    while (m !== null) {
+      const content = m[1];
+      if (content.length === 0) {
+        m = tNodeRe.exec(srcXml);
+        continue;
+      }
+      const { text: redacted, findings } = redactText(content);
+      if (redacted !== content) {
+        const openTagLen = "<hp:t>".length;
+        const contentStart = m.index + offset + openTagLen;
+        const contentEnd = contentStart + content.length;
+        result = result.substring(0, contentStart) + redacted + result.substring(contentEnd);
+        offset += redacted.length - content.length;
+        anyChanged = true;
+      }
+      if (findings.length > 0) {
+        sectionFindings.push(findings);
+      }
+      m = tNodeRe.exec(srcXml);
+    }
+    newSectionXmls.push(result);
+    allFindings.push(...sectionFindings);
+  }
+  if (!anyChanged) {
+    return { buffer: hwpxBuffer, findings: mergeFindings(allFindings), changed: false };
+  }
+  const out = new import_jszip5.default();
+  const mimetypeEntry = zip.file("mimetype");
+  if (mimetypeEntry) {
+    out.file("mimetype", await mimetypeEntry.async("uint8array"), { compression: "STORE" });
+  }
+  for (const [name, entry] of Object.entries(zip.files)) {
+    if (name === "mimetype" || entry.dir) continue;
+    const sectionIdx = sectionFiles.indexOf(name);
+    if (sectionIdx >= 0) {
+      out.file(name, newSectionXmls[sectionIdx] ?? "");
+    } else {
+      out.file(name, await entry.async("uint8array"));
+    }
+  }
+  const buf = await out.generateAsync({ type: "nodebuffer", compression: "DEFLATE" });
+  return {
+    buffer: new Uint8Array(buf),
+    findings: mergeFindings(allFindings),
+    changed: true
+  };
+}
+function buildDiff(findings) {
+  const total = findings.reduce((s, f) => s + f.count, 0);
+  const lines = [`\uAC1C\uC778\uC815\uBCF4 ${total}\uAC74 \uBE44\uC2DD\uBCC4 \uCC98\uB9AC`];
+  for (const f of findings) {
+    const examples = f.masked.slice(0, 3).join(", ");
+    lines.push(`- ${f.type}: ${f.count}\uAC74 \u2192 ${examples}`);
+  }
+  return lines.join("\n");
+}
+var proposeRedactPiiTool = {
+  name: "propose_redact_pii",
+  description: "\uBB38\uC11C\uC758 \uAC1C\uC778\uC815\uBCF4(\uC8FC\uBBFC\uB4F1\uB85D\uBC88\uD638\xB7\uC804\uD654\uBC88\uD638\xB7\uC774\uBA54\uC77C\xB7\uC2E0\uC6A9\uCE74\uB4DC\uBC88\uD638)\uB97C \uAC00\uB9AC\uAE30/\uB9C8\uC2A4\uD0B9/\uBE44\uC2DD\uBCC4 \uCC98\uB9AC\uD569\uB2C8\uB2E4. \uC0AC\uC6A9\uC790\uAC00 '\uAC1C\uC778\uC815\uBCF4 \uAC00\uB824\uC918/\uC9C0\uC6CC\uC918/\uBE44\uC2DD\uBCC4 \uCC98\uB9AC\uD574\uC918/\uB9C8\uC2A4\uD0B9\uD574\uC918'\uB77C\uACE0 \uD558\uBA74 \uC774 \uB3C4\uAD6C\uB85C \uC218\uC815\uC548\uC744 \uC81C\uC548\uD558\uC138\uC694(scan_pii\uB294 \uD655\uC778\uC6A9\uC77C \uBFD0 \uC218\uC815\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4). .hwpx\uB294 XML \uC9C1\uC811 \uD328\uCE58\uB85C \uAD6C\uC870(\uD45C\xB7\uC774\uBBF8\uC9C0\xB7\uC11C\uC2DD)\uB97C \uBCF4\uC874\uD558\uBA70, .md/.txt\uB3C4 \uC9C0\uC6D0\uD569\uB2C8\uB2E4. \uBCC0\uACBD\uC740 \uC2B9\uC778 \uD6C4\uC5D0\uB9CC \uC800\uC7A5\uB429\uB2C8\uB2E4. \uC6D0\uBB38 \uAC12\uC740 \uD45C\uC2DC\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.",
+  inputSchema: proposeRedactPiiSchema,
+  requiresApproval: true,
+  propose: async ({
+    input,
+    ctx
+  }) => {
+    const safePath = await resolveSafePath(ctx.cwd, input.path);
+    const ext = extname10(safePath).toLowerCase();
+    if (ext === ".hwp") {
+      return "\uC624\uB958: propose_redact_pii\uB294 .hwpx \uD30C\uC77C\uB9CC \uC9C0\uC6D0\uD569\uB2C8\uB2E4. .hwp(\uAD6C\uD615 OLE \uBC14\uC774\uB108\uB9AC)\uB294 XML \uC9C1\uC811 \uD3B8\uC9D1\uC774 \uBD88\uAC00\uD569\uB2C8\uB2E4. \uD55C\uAE00 \uD504\uB85C\uADF8\uB7A8\uC5D0\uC11C '\uB2E4\uB978 \uC774\uB984\uC73C\uB85C \uC800\uC7A5 \u2192 .hwpx'\uB85C \uC800\uC7A5\uD55C \uD6C4 \uB2E4\uC2DC \uC2DC\uB3C4\uD558\uC138\uC694.";
+    }
+    if (ext !== ".hwpx" && ext !== ".md" && ext !== ".txt") {
+      const hint = ext === ".docx" || ext === ".xlsx" ? " .hwpx/.md/.txt\uB9CC \uC9C0\uC6D0\uD569\uB2C8\uB2E4." : " .hwpx/.md/.txt\uB9CC \uC9C0\uC6D0\uD569\uB2C8\uB2E4.";
+      return `\uC624\uB958: propose_redact_pii\uB294 .hwpx/.md/.txt \uD30C\uC77C\uB9CC \uC9C0\uC6D0\uD569\uB2C8\uB2E4. \uD604\uC7AC \uD30C\uC77C \uD655\uC7A5\uC790: ${ext}.${hint}`;
+    }
+    const { outputPath, willConvertFormat } = resolveOutputPath(safePath);
+    if (ext === ".hwpx") {
+      let originalBuf;
+      try {
+        originalBuf = await readFile10(safePath);
+      } catch {
+        return `\uC624\uB958: \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${input.path}`;
+      }
+      if (originalBuf[0] !== 80 || originalBuf[1] !== 75) {
+        return "\uC624\uB958: \uD30C\uC77C\uC774 \uC720\uD6A8\uD55C .hwpx(ZIP) \uD3EC\uB9F7\uC774 \uC544\uB2D9\uB2C8\uB2E4. \uD30C\uC77C\uC774 \uC190\uC0C1\uB418\uC5C8\uAC70\uB098 \uAD6C\uD615 .hwp(OLE \uBC14\uC774\uB108\uB9AC) \uD3EC\uB9F7\uC77C \uC218 \uC788\uC2B5\uB2C8\uB2E4.";
+      }
+      const originalBytes = new Uint8Array(
+        originalBuf.buffer,
+        originalBuf.byteOffset,
+        originalBuf.byteLength
+      );
+      let patchResult;
+      try {
+        patchResult = await applyRedactToHwpx(originalBytes);
+      } catch (e) {
+        return `\uC624\uB958: \uBE44\uC2DD\uBCC4 \uCC98\uB9AC \uC911 \uC624\uB958\uAC00 \uBC1C\uC0DD\uD588\uC2B5\uB2C8\uB2E4. ${String(e)}`;
+      }
+      const { buffer: newBytes, findings: findings2, changed } = patchResult;
+      const totalCount2 = findings2.reduce((s, f) => s + f.count, 0);
+      if (!changed || totalCount2 === 0) {
+        return `\uAC1C\uC778\uC815\uBCF4\uAC00 \uBC1C\uACAC\uB418\uC9C0 \uC54A\uC544 \uBCC0\uACBD\uD560 \uB0B4\uC6A9\uC774 \uC5C6\uC2B5\uB2C8\uB2E4: ${input.path}`;
+      }
+      const stagedPath2 = await stageFile(ctx.sessionId, outputPath, newBytes);
+      const proposalId2 = crypto.randomUUID();
+      const diff2 = buildDiff(findings2);
+      const summaryText2 = input.summary ?? `\uAC1C\uC778\uC815\uBCF4 \uBE44\uC2DD\uBCC4 \uCC98\uB9AC(\uB9C8\uC2A4\uD0B9): ${basename4(safePath)}`;
+      return {
+        proposal: {
+          id: proposalId2,
+          kind: "redact-pii",
+          targetPath: outputPath,
+          stagedPath: stagedPath2,
+          summary: summaryText2,
+          diff: diff2,
+          warnings: [],
+          willConvertFormat
+        },
+        commit: async () => {
+          const backupPath = await backupFile(outputPath);
+          await commitStaged(stagedPath2, outputPath);
+          const backupInfo = backupPath ? ` (\uBC31\uC5C5: ${backupPath})` : "";
+          return `\uAC1C\uC778\uC815\uBCF4 \uBE44\uC2DD\uBCC4 \uC644\uB8CC: ${outputPath}${backupInfo}`;
+        }
+      };
+    }
+    let originalText;
+    try {
+      originalText = await readFile10(safePath, "utf-8");
+    } catch {
+      return `\uC624\uB958: \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${input.path}`;
+    }
+    const { text: redacted, findings } = redactText(originalText);
+    const totalCount = findings.reduce((s, f) => s + f.count, 0);
+    if (totalCount === 0) {
+      return `\uAC1C\uC778\uC815\uBCF4\uAC00 \uBC1C\uACAC\uB418\uC9C0 \uC54A\uC544 \uBCC0\uACBD\uD560 \uB0B4\uC6A9\uC774 \uC5C6\uC2B5\uB2C8\uB2E4: ${input.path}`;
+    }
+    const stagedPath = await stageFile(ctx.sessionId, outputPath, redacted);
+    const proposalId = crypto.randomUUID();
+    const diff = buildDiff(findings);
+    const summaryText = input.summary ?? `\uAC1C\uC778\uC815\uBCF4 \uBE44\uC2DD\uBCC4 \uCC98\uB9AC(\uB9C8\uC2A4\uD0B9): ${basename4(safePath)}`;
+    return {
+      proposal: {
+        id: proposalId,
+        kind: "redact-pii",
+        targetPath: outputPath,
+        stagedPath,
+        summary: summaryText,
+        diff,
+        warnings: [],
+        willConvertFormat
+      },
+      commit: async () => {
+        const backupPath = await backupFile(outputPath);
+        await commitStaged(stagedPath, outputPath);
+        const backupInfo = backupPath ? ` (\uBC31\uC5C5: ${backupPath})` : "";
+        return `\uAC1C\uC778\uC815\uBCF4 \uBE44\uC2DD\uBCC4 \uC644\uB8CC: ${outputPath}${backupInfo}`;
+      }
+    };
+  }
+};
+var proposeSheetEditSchema = z11.object({
+  path: z11.string().describe("\uC218\uC815\uD560 XLSX \uD30C\uC77C \uACBD\uB85C (cwd \uAE30\uC900 \uC0C1\uB300 \uACBD\uB85C \uB610\uB294 \uC808\uB300 \uACBD\uB85C)"),
+  updates: z11.array(
+    z11.object({
+      sheet: z11.string().describe("\uC2DC\uD2B8 \uC774\uB984"),
+      cell: z11.string().describe("\uC140 \uC8FC\uC18C (\uC608: A1, B3)"),
+      value: z11.union([z11.string(), z11.number()]).describe("\uC0C8 \uAC12")
     })
   ).min(1).describe("\uC218\uC815\uD560 \uC140 \uBAA9\uB85D. read_document\uB85C \uC6D0\uBCF8 \uC2DC\uD2B8 \uAD6C\uC870\uB97C \uBA3C\uC800 \uD655\uC778\uD558\uC138\uC694"),
-  summary: z9.string().describe("\uBCC0\uACBD \uC694\uC57D (\uD55C\uAD6D\uC5B4 1-2\uBB38\uC7A5)")
+  summary: z11.string().describe("\uBCC0\uACBD \uC694\uC57D (\uD55C\uAD6D\uC5B4 1-2\uBB38\uC7A5)")
 });
 var proposeSheetEditTool = {
   name: "propose_sheet_edit",
@@ -13276,13 +13783,13 @@ var proposeSheetEditTool = {
     ctx
   }) => {
     const safePath = await resolveSafePath(ctx.cwd, input.path);
-    const ext = extname9(safePath).toLowerCase();
+    const ext = extname11(safePath).toLowerCase();
     if (ext !== ".xlsx" && ext !== ".xls") {
       return `\uC624\uB958: propose_sheet_edit\uC740 .xlsx/.xls \uD30C\uC77C\uB9CC \uC9C0\uC6D0\uD569\uB2C8\uB2E4. \uD604\uC7AC \uD30C\uC77C: ${ext}.`;
     }
     let originalBuffer;
     try {
-      originalBuffer = await readFile9(safePath);
+      originalBuffer = await readFile11(safePath);
     } catch {
       return `\uC624\uB958: \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${input.path}. \uACBD\uB85C\uB97C \uD655\uC778\uD558\uC138\uC694.`;
     }
@@ -13375,47 +13882,47 @@ function detectStructuralLoss(beforeBlocks, afterBlocks) {
   }
   return { lost: false, detail: "" };
 }
-var insertRowOpSchema = z10.object({
-  type: z10.literal("insertRow"),
-  row: z10.number().int().nonnegative().describe("\uAE30\uC900 \uD589 \uC778\uB371\uC2A4 (0-based)"),
-  position: z10.enum(["above", "below"]).describe("\uC0BD\uC785 \uC704\uCE58: above=row \uC704\uC5D0, below=row \uC544\uB798\uC5D0")
+var insertRowOpSchema = z12.object({
+  type: z12.literal("insertRow"),
+  row: z12.number().int().nonnegative().describe("\uAE30\uC900 \uD589 \uC778\uB371\uC2A4 (0-based)"),
+  position: z12.enum(["above", "below"]).describe("\uC0BD\uC785 \uC704\uCE58: above=row \uC704\uC5D0, below=row \uC544\uB798\uC5D0")
 });
-var deleteRowOpSchema = z10.object({
-  type: z10.literal("deleteRow"),
-  row: z10.number().int().nonnegative().describe("\uC0AD\uC81C\uD560 \uD589 \uC778\uB371\uC2A4 (0-based)")
+var deleteRowOpSchema = z12.object({
+  type: z12.literal("deleteRow"),
+  row: z12.number().int().nonnegative().describe("\uC0AD\uC81C\uD560 \uD589 \uC778\uB371\uC2A4 (0-based)")
 });
-var insertColumnOpSchema = z10.object({
-  type: z10.literal("insertColumn"),
-  col: z10.number().int().nonnegative().describe("\uAE30\uC900 \uC5F4 \uC778\uB371\uC2A4 (0-based)"),
-  position: z10.enum(["left", "right"]).describe("\uC0BD\uC785 \uC704\uCE58: left=col \uC67C\uCABD\uC5D0, right=col \uC624\uB978\uCABD\uC5D0")
+var insertColumnOpSchema = z12.object({
+  type: z12.literal("insertColumn"),
+  col: z12.number().int().nonnegative().describe("\uAE30\uC900 \uC5F4 \uC778\uB371\uC2A4 (0-based)"),
+  position: z12.enum(["left", "right"]).describe("\uC0BD\uC785 \uC704\uCE58: left=col \uC67C\uCABD\uC5D0, right=col \uC624\uB978\uCABD\uC5D0")
 });
-var deleteColumnOpSchema = z10.object({
-  type: z10.literal("deleteColumn"),
-  col: z10.number().int().nonnegative().describe("\uC0AD\uC81C\uD560 \uC5F4 \uC778\uB371\uC2A4 (0-based)")
+var deleteColumnOpSchema = z12.object({
+  type: z12.literal("deleteColumn"),
+  col: z12.number().int().nonnegative().describe("\uC0AD\uC81C\uD560 \uC5F4 \uC778\uB371\uC2A4 (0-based)")
 });
-var mergeCellsOpSchema = z10.object({
-  type: z10.literal("mergeCells"),
-  startRow: z10.number().int().nonnegative().describe("\uBCD1\uD569 \uC2DC\uC791 \uD589 (0-based)"),
-  startCol: z10.number().int().nonnegative().describe("\uBCD1\uD569 \uC2DC\uC791 \uC5F4 (0-based)"),
-  endRow: z10.number().int().nonnegative().describe("\uBCD1\uD569 \uB05D \uD589 (0-based, \uD3EC\uD568)"),
-  endCol: z10.number().int().nonnegative().describe("\uBCD1\uD569 \uB05D \uC5F4 (0-based, \uD3EC\uD568)")
+var mergeCellsOpSchema = z12.object({
+  type: z12.literal("mergeCells"),
+  startRow: z12.number().int().nonnegative().describe("\uBCD1\uD569 \uC2DC\uC791 \uD589 (0-based)"),
+  startCol: z12.number().int().nonnegative().describe("\uBCD1\uD569 \uC2DC\uC791 \uC5F4 (0-based)"),
+  endRow: z12.number().int().nonnegative().describe("\uBCD1\uD569 \uB05D \uD589 (0-based, \uD3EC\uD568)"),
+  endCol: z12.number().int().nonnegative().describe("\uBCD1\uD569 \uB05D \uC5F4 (0-based, \uD3EC\uD568)")
 });
-var operationSchema = z10.discriminatedUnion("type", [
+var operationSchema = z12.discriminatedUnion("type", [
   insertRowOpSchema,
   deleteRowOpSchema,
   insertColumnOpSchema,
   deleteColumnOpSchema,
   mergeCellsOpSchema
 ]).describe("\uD45C \uAD6C\uC870 \uC5F0\uC0B0. \uB098\uC911 \uC5F0\uC0B0\uC758 row/col \uC778\uB371\uC2A4\uB294 \uC55E \uC5F0\uC0B0 \uC801\uC6A9 \uD6C4 \uC0C1\uD0DC\uB97C \uAE30\uC900\uC73C\uB85C \uD55C\uB2E4.");
-var proposeTableStructureSchema = z10.object({
-  path: z10.string().describe("\uC218\uC815\uD560 .hwpx \uD30C\uC77C \uACBD\uB85C (cwd \uAE30\uC900 \uC0C1\uB300 \uACBD\uB85C \uB610\uB294 \uC808\uB300 \uACBD\uB85C)"),
-  anchor: z10.string().min(1).describe(
+var proposeTableStructureSchema = z12.object({
+  path: z12.string().describe("\uC218\uC815\uD560 .hwpx \uD30C\uC77C \uACBD\uB85C (cwd \uAE30\uC900 \uC0C1\uB300 \uACBD\uB85C \uB610\uB294 \uC808\uB300 \uACBD\uB85C)"),
+  anchor: z12.string().min(1).describe(
     "\uB300\uC0C1 \uD45C\uB97C \uC2DD\uBCC4\uD558\uB294 \uC575\uCEE4 \uD14D\uC2A4\uD2B8. \uD45C \uC548\uC5D0\uB9CC \uC788\uB294 \uB3C5\uD2B9\uD55C \uC140 \uD14D\uC2A4\uD2B8\uB97C \uC9C0\uC815\uD558\uC138\uC694. (\uBD80\uBD84 \uC77C\uCE58, \uACF5\uBC31 \uD2B8\uB9BC) \u2014 read_document\uB85C \uD655\uC778 \uD6C4 \uC0AC\uC6A9 \uAD8C\uC7A5."
   ),
-  operations: z10.array(operationSchema).min(1).describe(
+  operations: z12.array(operationSchema).min(1).describe(
     "\uC801\uC6A9\uD560 \uD45C \uAD6C\uC870 \uC5F0\uC0B0 \uBAA9\uB85D (\uC21C\uC11C\uB300\uB85C \uC2E4\uD589). \uAC01 \uC5F0\uC0B0\uC740 \uC774\uC804 \uC5F0\uC0B0\uC774 \uC801\uC6A9\uB41C \uD6C4\uC758 \uD45C \uC0C1\uD0DC \uAE30\uC900\uC73C\uB85C row/col\uC744 \uC9C0\uC815\uD574\uC57C \uD569\uB2C8\uB2E4."
   ),
-  summary: z10.string().describe("\uBCC0\uACBD \uC694\uC57D (\uD55C\uAD6D\uC5B4 1-2\uBB38\uC7A5)")
+  summary: z12.string().describe("\uBCC0\uACBD \uC694\uC57D (\uD55C\uAD6D\uC5B4 1-2\uBB38\uC7A5)")
 });
 function tokenizeHwpxXml2(xml) {
   const tokens = [];
@@ -13972,7 +14479,7 @@ function getTblDims(tblXml) {
   return parseTblDimensions(tblXml, 0);
 }
 async function applyOpsToHwpx(hwpxBuffer, anchor, operations) {
-  const zip = await import_jszip4.default.loadAsync(hwpxBuffer);
+  const zip = await import_jszip6.default.loadAsync(hwpxBuffer);
   const sectionFiles = Object.keys(zip.files).filter((name) => /^Contents\/section\d+\.xml$/.test(name)).sort();
   let targetSectionIdx = -1;
   let targetRange = null;
@@ -14031,7 +14538,7 @@ async function applyOpsToHwpx(hwpxBuffer, anchor, operations) {
   const afterDims = getTblDims(tblBlock);
   const newSectionXml = sectionXml.substring(0, targetRange.start) + tblBlock + sectionXml.substring(targetRange.end);
   sectionXmls[targetSectionIdx] = newSectionXml;
-  const out = new import_jszip4.default();
+  const out = new import_jszip6.default();
   const mimetypeEntry = zip.file("mimetype");
   if (mimetypeEntry) {
     out.file("mimetype", await mimetypeEntry.async("uint8array"), { compression: "STORE" });
@@ -14055,7 +14562,7 @@ async function applyOpsToHwpx(hwpxBuffer, anchor, operations) {
   };
 }
 async function verifyOutputDims(newBytes, anchor, expectedRowCnt, expectedColCnt) {
-  const zip = await import_jszip4.default.loadAsync(newBytes);
+  const zip = await import_jszip6.default.loadAsync(newBytes);
   const sectionFiles = Object.keys(zip.files).filter((name) => /^Contents\/section\d+\.xml$/.test(name)).sort();
   for (const sf of sectionFiles) {
     const entry = zip.file(sf);
@@ -14090,7 +14597,7 @@ var proposeTableStructureTool = {
     ctx
   }) => {
     const safePath = await resolveSafePath(ctx.cwd, input.path);
-    const ext = extname10(safePath).toLowerCase();
+    const ext = extname12(safePath).toLowerCase();
     if (ext === ".hwp") {
       return "\uC624\uB958: propose_table_structure\uB294 .hwpx \uD30C\uC77C\uB9CC \uC9C0\uC6D0\uD569\uB2C8\uB2E4. .hwp(\uAD6C\uD615 OLE \uBC14\uC774\uB108\uB9AC)\uB294 XML \uC9C1\uC811 \uD3B8\uC9D1\uC774 \uBD88\uAC00\uD569\uB2C8\uB2E4. \uD55C\uAE00 \uD504\uB85C\uADF8\uB7A8\uC5D0\uC11C '\uB2E4\uB978 \uC774\uB984\uC73C\uB85C \uC800\uC7A5 \u2192 .hwpx'\uB85C \uC800\uC7A5\uD55C \uD6C4 \uB2E4\uC2DC \uC2DC\uB3C4\uD558\uC138\uC694.";
     }
@@ -14099,7 +14606,7 @@ var proposeTableStructureTool = {
     }
     let originalBuf;
     try {
-      originalBuf = await readFile10(safePath);
+      originalBuf = await readFile12(safePath);
     } catch {
       return `\uC624\uB958: \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${input.path}. \uACBD\uB85C\uB97C \uD655\uC778\uD558\uC138\uC694.`;
     }
@@ -14295,11 +14802,11 @@ function searchExcerpts(markdown, query) {
   }
   return result;
 }
-var readDocumentSchema = z11.object({
-  path: z11.string().describe("\uC77D\uC744 \uBB38\uC11C \uACBD\uB85C (cwd \uAE30\uC900 \uC0C1\uB300 \uACBD\uB85C \uB610\uB294 \uC808\uB300 \uACBD\uB85C)"),
-  pages: z11.string().optional().describe('\uC77D\uC744 \uD398\uC774\uC9C0 \uBC94\uC704 (\uC608: "1-3", "1,3,5") \u2014 \uBBF8\uC9C0\uC815 \uC2DC \uC804\uCCB4'),
-  outline: z11.boolean().optional().describe("\uD5E4\uB529(\uC81C\uBAA9) \uAD6C\uC870\uB9CC \uBC18\uD658\uD574 \uBB38\uC11C \uAC1C\uC694 \uD30C\uC545 (\uB300\uD615 \uBB38\uC11C \uD0D0\uC0C9\uC6A9)"),
-  search: z11.string().optional().describe("\uD0A4\uC6CC\uB4DC\uAC00 \uD3EC\uD568\uB41C \uBD80\uBD84\uACFC \uC8FC\uBCC0 \uB9E5\uB77D\uB9CC \uBC18\uD658 (\uB300\uD615 \uBB38\uC11C\uC5D0\uC11C \uD544\uC694\uD55C \uBD80\uBD84\uB9CC \uC77D\uAE30)")
+var readDocumentSchema = z13.object({
+  path: z13.string().describe("\uC77D\uC744 \uBB38\uC11C \uACBD\uB85C (cwd \uAE30\uC900 \uC0C1\uB300 \uACBD\uB85C \uB610\uB294 \uC808\uB300 \uACBD\uB85C)"),
+  pages: z13.string().optional().describe('\uC77D\uC744 \uD398\uC774\uC9C0 \uBC94\uC704 (\uC608: "1-3", "1,3,5") \u2014 \uBBF8\uC9C0\uC815 \uC2DC \uC804\uCCB4'),
+  outline: z13.boolean().optional().describe("\uD5E4\uB529(\uC81C\uBAA9) \uAD6C\uC870\uB9CC \uBC18\uD658\uD574 \uBB38\uC11C \uAC1C\uC694 \uD30C\uC545 (\uB300\uD615 \uBB38\uC11C \uD0D0\uC0C9\uC6A9)"),
+  search: z13.string().optional().describe("\uD0A4\uC6CC\uB4DC\uAC00 \uD3EC\uD568\uB41C \uBD80\uBD84\uACFC \uC8FC\uBCC0 \uB9E5\uB77D\uB9CC \uBC18\uD658 (\uB300\uD615 \uBB38\uC11C\uC5D0\uC11C \uD544\uC694\uD55C \uBD80\uBD84\uB9CC \uC77D\uAE30)")
 });
 function applyReadMode(body, outline, search) {
   if (outline === true) {
@@ -14328,11 +14835,11 @@ var readDocumentTool = {
       const msg = e instanceof Error ? e.message : String(e);
       return `\uC624\uB958: \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${msg}`;
     }
-    const ext = extname11(safePath).toLowerCase();
+    const ext = extname13(safePath).toLowerCase();
     if (PLAIN_TEXT_EXTS.has(ext)) {
       let raw;
       try {
-        raw = await readFile11(safePath, "utf-8");
+        raw = await readFile13(safePath, "utf-8");
       } catch (e) {
         const msg = e instanceof Error ? e.message : String(e);
         return `\uC624\uB958: \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${msg}`;
@@ -14432,8 +14939,8 @@ var TEXT_EXTENSIONS = /* @__PURE__ */ new Set([
   ".csv",
   ".log"
 ]);
-var readFileSchema = z12.object({
-  path: z12.string().describe("\uC77D\uC744 \uD30C\uC77C \uACBD\uB85C (cwd \uAE30\uC900 \uC0C1\uB300 \uACBD\uB85C \uB610\uB294 \uC808\uB300 \uACBD\uB85C)")
+var readFileSchema = z14.object({
+  path: z14.string().describe("\uC77D\uC744 \uD30C\uC77C \uACBD\uB85C (cwd \uAE30\uC900 \uC0C1\uB300 \uACBD\uB85C \uB610\uB294 \uC808\uB300 \uACBD\uB85C)")
 });
 var readFileTool = {
   name: "read_file",
@@ -14457,8 +14964,8 @@ var readFileTool = {
     if (info.size > MAX_SIZE) {
       return `\uC624\uB958: \uD30C\uC77C\uC774 \uB108\uBB34 \uD07D\uB2C8\uB2E4 (${Math.round(info.size / 1024)}KB). \uCD5C\uB300 256KB\uAE4C\uC9C0 \uC77D\uC744 \uC218 \uC788\uC2B5\uB2C8\uB2E4.`;
     }
-    const { extname: extname14 } = await import("path");
-    const ext = extname14(safePath).toLowerCase();
+    const { extname: extname17 } = await import("path");
+    const ext = extname17(safePath).toLowerCase();
     if (!TEXT_EXTENSIONS.has(ext) && ext !== "") {
       return `\uC624\uB958: '${ext}' \uD615\uC2DD\uC740 \uD14D\uC2A4\uD2B8 \uD30C\uC77C\uB85C \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4. \uBB38\uC11C \uD30C\uC77C\uC774\uB77C\uBA74 read_document \uD234\uC744 \uC0AC\uC6A9\uD558\uC138\uC694.`;
     }
@@ -14472,10 +14979,64 @@ var readFileTool = {
     return content;
   }
 };
+var PLAIN_TEXT_EXTS2 = /* @__PURE__ */ new Set([".md", ".markdown", ".txt", ".text"]);
+var scanPiiSchema = z15.object({
+  path: z15.string().describe("\uAC1C\uC778\uC815\uBCF4\uB97C \uC810\uAC80\uD560 \uBB38\uC11C \uACBD\uB85C")
+});
+var scanPiiTool = {
+  name: "scan_pii",
+  description: "\uBB38\uC11C\uC5D0\uC11C \uD55C\uAD6D \uAC1C\uC778\uC815\uBCF4(\uC8FC\uBBFC\uB4F1\uB85D\uBC88\uD638\xB7\uC2E0\uC6A9\uCE74\uB4DC\uBC88\uD638\xB7\uC804\uD654\uBC88\uD638\xB7\uC774\uBA54\uC77C)\uB97C \uD0D0\uC9C0\uD569\uB2C8\uB2E4. \uC6D0\uBB38 \uAC12\uC740 \uBC18\uD658\uD558\uC9C0 \uC54A\uACE0 \uB9C8\uC2A4\uD0B9\uB41C \uC608\uC2DC\uB9CC \uD45C\uC2DC\uD569\uB2C8\uB2E4. \uC678\uBD80 \uACF5\uC720 \uC804 \uAC80\uD1A0\uC5D0 \uD65C\uC6A9\uD558\uC138\uC694.",
+  inputSchema: scanPiiSchema,
+  requiresApproval: false,
+  execute: async ({
+    input,
+    ctx
+  }) => {
+    let safePath;
+    try {
+      safePath = await resolveSafePath(ctx.cwd, input.path);
+    } catch (e) {
+      const msg = e instanceof Error ? e.message : String(e);
+      return `\uC624\uB958: \uACBD\uB85C\uB97C \uD655\uC778\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${msg}`;
+    }
+    const ext = extname14(safePath).toLowerCase();
+    let text3;
+    if (PLAIN_TEXT_EXTS2.has(ext)) {
+      try {
+        text3 = await readFile14(safePath, "utf-8");
+      } catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        return `\uC624\uB958: \uD30C\uC77C\uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${msg}`;
+      }
+    } else {
+      let parseResult;
+      try {
+        parseResult = await parse6(safePath);
+      } catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        return `\uC624\uB958: \uBB38\uC11C\uB97C \uD30C\uC2F1\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${msg}`;
+      }
+      if (!parseResult.success) {
+        return `\uC624\uB958: \uBB38\uC11C\uB97C \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4: ${parseResult.error ?? "\uC54C \uC218 \uC5C6\uB294 \uC624\uB958"}`;
+      }
+      text3 = parseResult.markdown;
+    }
+    const findings = detectPii(text3);
+    if (findings.length === 0) {
+      return `\uAC1C\uC778\uC815\uBCF4\uAC00 \uBC1C\uACAC\uB418\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4: ${input.path}`;
+    }
+    const lines = [`\uBC1C\uACAC\uB41C \uAC1C\uC778\uC815\uBCF4 (${input.path}):`];
+    for (const f of findings) {
+      lines.push(`- ${f.type}: ${f.count}\uAC74 (\uC608: ${f.masked.join(", ")})`);
+    }
+    lines.push("\u203B \uB9C8\uC2A4\uD0B9\uB41C \uC608\uC2DC\uC774\uBA70 \uC6D0\uBB38 \uAC12\uC740 \uD45C\uC2DC\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. \uC678\uBD80 \uACF5\uC720 \uC804 \uD655\uC778\uD558\uC138\uC694.");
+    return lines.join("\n");
+  }
+};
 var MAX_PREVIEW_CHARS = 1e4;
-var writeNewDocumentSchema = z13.object({
-  path: z13.string().describe("\uC0DD\uC131\uD560 \uBB38\uC11C \uACBD\uB85C (cwd \uAE30\uC900 \uC0C1\uB300 \uACBD\uB85C \uB610\uB294 \uC808\uB300 \uACBD\uB85C)"),
-  markdown: z13.string().describe("\uC0C8 \uBB38\uC11C \uB0B4\uC6A9 (\uB9C8\uD06C\uB2E4\uC6B4 \uD615\uC2DD)")
+var writeNewDocumentSchema = z16.object({
+  path: z16.string().describe("\uC0DD\uC131\uD560 \uBB38\uC11C \uACBD\uB85C (cwd \uAE30\uC900 \uC0C1\uB300 \uACBD\uB85C \uB610\uB294 \uC808\uB300 \uACBD\uB85C)"),
+  markdown: z16.string().describe("\uC0C8 \uBB38\uC11C \uB0B4\uC6A9 (\uB9C8\uD06C\uB2E4\uC6B4 \uD615\uC2DD)")
 });
 var writeNewDocumentTool = {
   name: "write_new_document",
@@ -14487,7 +15048,7 @@ var writeNewDocumentTool = {
     ctx
   }) => {
     const safePath = await resolveSafePath(ctx.cwd, input.path);
-    const ext = extname12(safePath).toLowerCase();
+    const ext = extname15(safePath).toLowerCase();
     try {
       await stat6(safePath);
       return `\uC624\uB958: \uD30C\uC77C\uC774 \uC774\uBBF8 \uC874\uC7AC\uD569\uB2C8\uB2E4: ${input.path}. \uAE30\uC874 \uD30C\uC77C\uC744 \uC218\uC815\uD558\uB824\uBA74 propose_edit\uC744 \uC0AC\uC6A9\uD558\uC138\uC694.`;
@@ -14537,12 +15098,12 @@ ${preview}`,
     };
   }
 };
-var writeNewSpreadsheetSchema = z14.object({
-  path: z14.string().describe("\uC0DD\uC131\uD560 XLSX \uD30C\uC77C \uACBD\uB85C (cwd \uAE30\uC900 \uC0C1\uB300 \uACBD\uB85C \uB610\uB294 \uC808\uB300 \uACBD\uB85C)"),
-  sheets: z14.array(
-    z14.object({
-      name: z14.string().describe("\uC2DC\uD2B8 \uC774\uB984"),
-      rows: z14.array(z14.array(z14.string())).describe("\uD589 \uB370\uC774\uD130 \uBC30\uC5F4 (\uAC01 \uD589\uC740 \uC140 \uAC12 \uBC30\uC5F4)")
+var writeNewSpreadsheetSchema = z17.object({
+  path: z17.string().describe("\uC0DD\uC131\uD560 XLSX \uD30C\uC77C \uACBD\uB85C (cwd \uAE30\uC900 \uC0C1\uB300 \uACBD\uB85C \uB610\uB294 \uC808\uB300 \uACBD\uB85C)"),
+  sheets: z17.array(
+    z17.object({
+      name: z17.string().describe("\uC2DC\uD2B8 \uC774\uB984"),
+      rows: z17.array(z17.array(z17.string())).describe("\uD589 \uB370\uC774\uD130 \uBC30\uC5F4 (\uAC01 \uD589\uC740 \uC140 \uAC12 \uBC30\uC5F4)")
     })
   ).min(1).describe("\uC0DD\uC131\uD560 \uC2DC\uD2B8 \uBAA9\uB85D")
 });
@@ -14556,7 +15117,7 @@ var writeNewSpreadsheetTool = {
     ctx
   }) => {
     const safePath = await resolveSafePath(ctx.cwd, input.path);
-    const ext = extname13(safePath).toLowerCase();
+    const ext = extname16(safePath).toLowerCase();
     if (ext !== ".xlsx") {
       return `\uC624\uB958: write_new_spreadsheet\uC740 .xlsx \uD30C\uC77C\uB9CC \uC9C0\uC6D0\uD569\uB2C8\uB2E4. \uD604\uC7AC \uD655\uC7A5\uC790: ${ext}.`;
     }
@@ -14616,10 +15177,13 @@ function createDocTools(_ctx) {
     listFilesTool,
     listBackupsTool,
     readFileTool,
+    scanPiiTool,
+    findInDocumentTool,
     proposeEditTool,
     proposeFormFillTool,
     proposeCellEditTool,
     proposeFindReplaceTool,
+    proposeRedactPiiTool,
     proposeSheetEditTool,
     proposeTableStructureTool,
     listFormObjectsTool,
@@ -15443,10 +16007,10 @@ async function runOnboarding() {
 
 // src/update.ts
 import { spawn } from "child_process";
-import { mkdir as mkdir4, readFile as readFile12, writeFile as writeFile3 } from "fs/promises";
+import { mkdir as mkdir4, readFile as readFile15, writeFile as writeFile3 } from "fs/promises";
 import { dirname as dirname3 } from "path";
 function compareSemver(a, b) {
-  const parse6 = (v) => {
+  const parse7 = (v) => {
     const clean = v.replace(/^v/, "").split("-")[0] ?? "";
     const parts = clean.split(".").map((p) => {
       const n = parseInt(p, 10);
@@ -15454,8 +16018,8 @@ function compareSemver(a, b) {
     });
     return [parts[0] ?? 0, parts[1] ?? 0, parts[2] ?? 0];
   };
-  const [aMaj, aMin, aPat] = parse6(a);
-  const [bMaj, bMin, bPat] = parse6(b);
+  const [aMaj, aMin, aPat] = parse7(a);
+  const [bMaj, bMin, bPat] = parse7(b);
   if (aMaj !== bMaj) return aMaj < bMaj ? -1 : 1;
   if (aMin !== bMin) return aMin < bMin ? -1 : 1;
   if (aPat !== bPat) return aPat < bPat ? -1 : 1;
@@ -15464,7 +16028,7 @@ function compareSemver(a, b) {
 var CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
 async function readCache(cachePath) {
   try {
-    const raw = await readFile12(cachePath, "utf-8");
+    const raw = await readFile15(cachePath, "utf-8");
     const parsed = JSON.parse(raw);
     if (parsed !== null && typeof parsed === "object" && "checkedAt" in parsed && "latest" in parsed && typeof parsed.checkedAt === "string" && typeof parsed.latest === "string") {
       return parsed;