diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
deleted file mode 100644
index 2b74a68..0000000
--- a/.github/workflows/deploy.yml
+++ /dev/null
@@ -1,61 +0,0 @@
-name: Deploy
-
-on:
-    push:
-        branches: [main]
-
-jobs:
-    check-changes:
-        name: Check Changed Files
-        runs-on: ubuntu-latest
-        permissions:
-            contents: read
-        outputs:
-            build-affected: ${{ steps.filter.outputs.build-affected }}
-        steps:
-            - name: Checkout
-              uses: actions/checkout@v4
-
-            - name: Filter paths
-              uses: dorny/paths-filter@v3
-              id: filter
-              with:
-                  filters: |
-                      build-affected:
-                        - "src/**"
-                        - "static/**"
-                        - "package.json"
-                        - "bun.lock"
-                        - "vite.config.*"
-                        - "svelte.config.*"
-                        - "tsconfig.json"
-                        - "wrangler.toml"
-                        - "wrangler.json"
-                        - "drizzle.config.*"
-                        - "eslint.config.*"
-                        - ".prettierrc*"
-
-    deploy:
-        name: Build & Deploy to Cloudflare Workers
-        runs-on: ubuntu-latest
-        needs: check-changes
-        if: needs.check-changes.outputs.build-affected == 'true'
-
-        steps:
-            - name: Checkout
-              uses: actions/checkout@v4
-
-            - name: Setup Bun
-              uses: oven-sh/setup-bun@v2
-
-            - name: Install dependencies
-              run: bun install
-
-            - name: Build
-              run: bun run build
-
-            - name: Deploy
-              run: bun run deploy
-              env:
-                  CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
-                  CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
diff --git a/.prettierrc b/.prettierrc
index ecf8f6b..70018b8 100644
--- a/.prettierrc
+++ b/.prettierrc
@@ -3,7 +3,7 @@
     "tabWidth": 4,
     "singleQuote": false,
     "trailingComma": "all",
-    "printWidth": 200,
+    "printWidth": 100,
     "plugins": ["prettier-plugin-svelte", "prettier-plugin-tailwindcss"],
     "overrides": [
         {
diff --git a/.vscode/extensions.json b/.vscode/extensions.json
index 61ce9aa..dd687d1 100644
--- a/.vscode/extensions.json
+++ b/.vscode/extensions.json
@@ -1,3 +1,8 @@
 {
-    "recommendations": ["svelte.svelte-vscode", "esbenp.prettier-vscode", "dbaeumer.vscode-eslint", "bradlc.vscode-tailwindcss"]
+    "recommendations": [
+        "svelte.svelte-vscode",
+        "esbenp.prettier-vscode",
+        "dbaeumer.vscode-eslint",
+        "bradlc.vscode-tailwindcss"
+    ]
 }
diff --git a/docs/audit1.md b/docs/audit1.md
index ce3b237..cdc2fee 100644
--- a/docs/audit1.md
+++ b/docs/audit1.md
@@ -113,7 +113,9 @@ AuthnRequest에서 **AssertionConsumerServiceURL을 받아서 바로 사용**. 
 ### 🔥 HTML Injection → XSS (RelayState)
 
 ```typescript
-const relayStateInput = relayState ? `<input type="hidden" name="RelayState" value="${relayState.replace(/"/g, "&quot;")}">` : "";
+const relayStateInput = relayState
+    ? `<input type="hidden" name="RelayState" value="${relayState.replace(/"/g, "&quot;")}">`
+    : "";
 ```
 
 `"`만 escape하고 `<`, `>`, `&`는 그대로. `RelayState=abc"><script>alert(1)</script>`로 주면 `"`는 escape되지만, 근데 input value 안이라 ... 확인하자. `value="abc&quot;><script>"` → **quot로 escape 되니까 value는 `abc">...` 문자열이 되긴 함**. 즉 innerHTML이 아니라 value라 실제 script 실행은 안됨. 근데:
diff --git a/drizzle.config.ts b/drizzle.config.ts
index 7ebe4d2..3b9653e 100644
--- a/drizzle.config.ts
+++ b/drizzle.config.ts
@@ -3,7 +3,10 @@ import { defineConfig } from "drizzle-kit";
 // db:generate 는 스키마만 읽으므로 자격증명 불필요.
 // db:migrate / db:push 실행 시 드리즐이 자체적으로 검증.
 const accountId = process.env.CLOUDFLARE_ACCOUNT_ID ?? "";
-const databaseId = (process.env.CLOUDFLARE_IS_PREVIEW === "true" ? process.env.CLOUDFLARE_D1_PREVIEW_DATABASE_ID : process.env.CLOUDFLARE_D1_DATABASE_ID) ?? "58033cb8-96f7-46f0-bfc2-057e3f903d3c";
+const databaseId =
+    (process.env.CLOUDFLARE_IS_PREVIEW === "true"
+        ? process.env.CLOUDFLARE_D1_PREVIEW_DATABASE_ID
+        : process.env.CLOUDFLARE_D1_DATABASE_ID) ?? "58033cb8-96f7-46f0-bfc2-057e3f903d3c";
 const token = process.env.CLOUDFLARE_D1_TOKEN ?? process.env.CLOUDFLARE_API_TOKEN ?? "";
 
 export default defineConfig({
diff --git a/scripts/setup.ts b/scripts/setup.ts
index 9c67090..b6fab31 100644
--- a/scripts/setup.ts
+++ b/scripts/setup.ts
@@ -181,7 +181,10 @@ function closeRL() {
 }
 
 async function ask(prompt: string, defaultVal?: string): Promise<string> {
-    const displayPrompt = defaultVal !== undefined ? `${yellow(prompt)} [기본값: ${defaultVal}]: ` : `${yellow(prompt)}: `;
+    const displayPrompt =
+        defaultVal !== undefined
+            ? `${yellow(prompt)} [기본값: ${defaultVal}]: `
+            : `${yellow(prompt)}: `;
 
     return new Promise((resolve) => {
         getRL().question(displayPrompt, (answer: string) => {
@@ -308,13 +311,19 @@ async function wranglerWhoami(): Promise<{ loggedIn: boolean; accountId: string
 }
 
 async function createD1Database(name: string): Promise<string | null> {
-    const result = await runWithSpinner(`D1 DB 생성 중: ${name}`, "wrangler", ["d1", "create", name]);
+    const result = await runWithSpinner(`D1 DB 생성 중: ${name}`, "wrangler", [
+        "d1",
+        "create",
+        name,
+    ]);
     if (!result.success) {
         console.error(red(`  D1 DB 생성 실패:\n${result.stderr}`));
         return null;
     }
     const combined = result.stdout + result.stderr;
-    const match = combined.match(/"?database_id"?\s*[=:]\s*"([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})"/i);
+    const match = combined.match(
+        /"?database_id"?\s*[=:]\s*"([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})"/i,
+    );
     if (!match) {
         console.error(red(`  D1 생성 결과에서 database_id를 찾을 수 없습니다:\n${combined}`));
         return null;
@@ -326,7 +335,11 @@ let _cachedDbList: D1Database[] | null | undefined = undefined;
 
 async function listD1Databases(): Promise<D1Database[] | null> {
     if (_cachedDbList !== undefined) return _cachedDbList;
-    const result = await runWithSpinner("D1 DB 목록 조회 중...", "wrangler", ["d1", "list", "--json"]);
+    const result = await runWithSpinner("D1 DB 목록 조회 중...", "wrangler", [
+        "d1",
+        "list",
+        "--json",
+    ]);
     if (!result.success) {
         console.error(red(`  D1 목록 조회 실패:\n${result.stderr}`));
         _cachedDbList = null;
@@ -356,7 +369,10 @@ function writeFile(filePath: string, content: string) {
 }
 
 /** mkdtempSync으로 안전한 임시 파일 생성 (symlink attack 방지) */
-function createTempFile(prefix: string, content: string): { filePath: string; cleanup: () => void } {
+function createTempFile(
+    prefix: string,
+    content: string,
+): { filePath: string; cleanup: () => void } {
     const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), prefix));
     const filePath = path.join(tmpDir, "content.sql");
     fs.writeFileSync(filePath, content, { mode: 0o600 });
@@ -392,7 +408,10 @@ function loadEnvFile(envPath: string): Record<string, string> {
         if (eq < 0) continue;
         const key = trimmed.slice(0, eq).trim();
         let val = trimmed.slice(eq + 1).trim();
-        if ((val.startsWith('"') && val.endsWith('"')) || (val.startsWith("'") && val.endsWith("'"))) {
+        if (
+            (val.startsWith('"') && val.endsWith('"')) ||
+            (val.startsWith("'") && val.endsWith("'"))
+        ) {
             val = val.slice(1, -1);
         }
         if (key) env[key] = val;
@@ -478,7 +497,13 @@ async function step2_createEnv(args: Args) {
     console.log(green("  ✓ .env 생성 완료"));
 }
 
-async function setupDb(label: string, nameArg: string | undefined, idArg: string | undefined, defaultName: string, isPreview = false): Promise<{ id: string; name: string } | null> {
+async function setupDb(
+    label: string,
+    nameArg: string | undefined,
+    idArg: string | undefined,
+    defaultName: string,
+    isPreview = false,
+): Promise<{ id: string; name: string } | null> {
     // If ID directly provided
     if (idArg) {
         console.log(green(`  ✓ ${label} ID: ${idArg}`));
@@ -486,7 +511,11 @@ async function setupDb(label: string, nameArg: string | undefined, idArg: string
     }
 
     const thirdOption = isPreview ? "미사용" : "나중에 직접 설정 (종료)";
-    const choice = await select(`${label} 설정`, ["지금 새로 생성", "이미 생성된 DB 사용", thirdOption]);
+    const choice = await select(`${label} 설정`, [
+        "지금 새로 생성",
+        "이미 생성된 DB 사용",
+        thirdOption,
+    ]);
 
     if (choice === 3) {
         if (isPreview) {
@@ -548,7 +577,13 @@ async function step3_dbSetup(args: Args): Promise<{
             previewDbName = args.previewDbName ?? `${db.name}-preview`;
             console.log(green(`  ✓ 프리뷰 DB ID: ${previewDbId}`));
         } else {
-            const previewDb = await setupDb("프리뷰 D1 데이터베이스", args.previewDbName, undefined, `${db.name}-preview`, true);
+            const previewDb = await setupDb(
+                "프리뷰 D1 데이터베이스",
+                args.previewDbName,
+                undefined,
+                `${db.name}-preview`,
+                true,
+            );
             previewDbId = previewDb?.id ?? null;
             previewDbName = previewDb?.name ?? null;
         }
@@ -557,7 +592,11 @@ async function step3_dbSetup(args: Args): Promise<{
     return { dbId: db.id, dbName: db.name, previewDbId, previewDbName };
 }
 
-async function step4_updateFiles(dbId: string, previewDbId: string | null, accountId: string | null) {
+async function step4_updateFiles(
+    dbId: string,
+    previewDbId: string | null,
+    accountId: string | null,
+) {
     console.log(`\n${cyan("─── 4. 파일 업데이트 ──────────────────────────────────────")}`);
 
     // Update wrangler.jsonc
@@ -567,7 +606,10 @@ async function step4_updateFiles(dbId: string, previewDbId: string | null, accou
     if (previewDbId) {
         wranglerContent = replaceAll(wranglerContent, "YOUR_D1_PREVIEW_DATABASE_ID", previewDbId);
         // Uncomment the preview_database_id line if it's commented out
-        wranglerContent = wranglerContent.replace(/\/\/\s*"preview_database_id":\s*"([^"]+)"/g, `"preview_database_id": "$1"`);
+        wranglerContent = wranglerContent.replace(
+            /\/\/\s*"preview_database_id":\s*"([^"]+)"/g,
+            `"preview_database_id": "$1"`,
+        );
     }
 
     writeFile(WRANGLER_JSONC, wranglerContent);
@@ -576,12 +618,21 @@ async function step4_updateFiles(dbId: string, previewDbId: string | null, accou
     // Update .env
     let envContent = readFile(ENV_FILE);
     if (accountId) {
-        envContent = envContent.replace(/^CLOUDFLARE_ACCOUNT_ID=".*"$/m, `CLOUDFLARE_ACCOUNT_ID="${accountId}"`);
+        envContent = envContent.replace(
+            /^CLOUDFLARE_ACCOUNT_ID=".*"$/m,
+            `CLOUDFLARE_ACCOUNT_ID="${accountId}"`,
+        );
     }
-    envContent = envContent.replace(/^CLOUDFLARE_D1_DATABASE_ID=".*"$/m, `CLOUDFLARE_D1_DATABASE_ID="${dbId}"`);
+    envContent = envContent.replace(
+        /^CLOUDFLARE_D1_DATABASE_ID=".*"$/m,
+        `CLOUDFLARE_D1_DATABASE_ID="${dbId}"`,
+    );
 
     if (previewDbId) {
-        envContent = envContent.replace(/^CLOUDFLARE_D1_PREVIEW_DATABASE_ID=".*"$/m, `CLOUDFLARE_D1_PREVIEW_DATABASE_ID="${previewDbId}"`);
+        envContent = envContent.replace(
+            /^CLOUDFLARE_D1_PREVIEW_DATABASE_ID=".*"$/m,
+            `CLOUDFLARE_D1_PREVIEW_DATABASE_ID="${previewDbId}"`,
+        );
     }
 
     writeFile(ENV_FILE, envContent);
@@ -590,11 +641,22 @@ async function step4_updateFiles(dbId: string, previewDbId: string | null, accou
 
 // ─── Migration Conflict Detection ────────────────────────────────────────────
 
-async function getExistingTables(dbName: string, env: Record<string, string>): Promise<string[] | null> {
+async function getExistingTables(
+    dbName: string,
+    env: Record<string, string>,
+): Promise<string[] | null> {
     const result = await runWithSpinner(
         `기존 테이블 조회 중 (${dbName})...`,
         "wrangler",
-        ["d1", "execute", dbName, "--remote", "--json", "--command", "SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%' ORDER BY name"],
+        [
+            "d1",
+            "execute",
+            dbName,
+            "--remote",
+            "--json",
+            "--command",
+            "SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%' ORDER BY name",
+        ],
         { env },
     );
     if (!result.success) {
@@ -649,19 +711,27 @@ function buildFilteredMigrationSQL(conflicting: Set<string>): string {
 function buildDrizzleTrackingSQL(): string {
     const drizzleDir = path.join(ROOT, "drizzle");
     const now = Date.now();
-    const lines = [`CREATE TABLE IF NOT EXISTS "__drizzle_migrations" (id INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, hash TEXT NOT NULL, created_at NUMERIC);`];
+    const lines = [
+        `CREATE TABLE IF NOT EXISTS "__drizzle_migrations" (id INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, hash TEXT NOT NULL, created_at NUMERIC);`,
+    ];
     for (const file of fs
         .readdirSync(drizzleDir)
         .filter((f) => f.endsWith(".sql"))
         .sort()) {
         const content = readFile(path.join(drizzleDir, file));
         const hash = createHash("sha256").update(content).digest("hex");
-        lines.push(`INSERT INTO "__drizzle_migrations" (hash, created_at) SELECT '${hash}', ${now} WHERE NOT EXISTS (SELECT 1 FROM "__drizzle_migrations" WHERE hash = '${hash}');`);
+        lines.push(
+            `INSERT INTO "__drizzle_migrations" (hash, created_at) SELECT '${hash}', ${now} WHERE NOT EXISTS (SELECT 1 FROM "__drizzle_migrations" WHERE hash = '${hash}');`,
+        );
     }
     return lines.join("\n");
 }
 
-async function handleMigrationConflicts(dbName: string, env: Record<string, string>, args: Args): Promise<"proceed" | "done"> {
+async function handleMigrationConflicts(
+    dbName: string,
+    env: Record<string, string>,
+    args: Args,
+): Promise<"proceed" | "done"> {
     const existing = await getExistingTables(dbName, env);
     if (!existing || existing.length === 0) return "proceed";
 
@@ -677,15 +747,30 @@ async function handleMigrationConflicts(dbName: string, env: Record<string, stri
         choice = 2;
         console.log(yellow("  (--yes 모드) 겹치는 테이블은 건너뜀으로 자동 선택"));
     } else {
-        choice = await select("마이그레이션 방식을 선택하세요", ["겹치는 테이블 삭제 후 전체 마이그레이션 (데이터 손실 주의)", "겹치는 테이블은 건너뛰고 나머지만 마이그레이션"]);
+        choice = await select("마이그레이션 방식을 선택하세요", [
+            "겹치는 테이블 삭제 후 전체 마이그레이션 (데이터 손실 주의)",
+            "겹치는 테이블은 건너뛰고 나머지만 마이그레이션",
+        ]);
     }
 
     if (choice === 1) {
-        const dropSQL = ["PRAGMA foreign_keys = OFF;", ...conflicts.map((t) => `DROP TABLE IF EXISTS \`${t}\`;`), "PRAGMA foreign_keys = ON;"].join("\n");
-
-        const { filePath: dropTmpFile, cleanup: dropCleanup } = createTempFile("idp-drop-", dropSQL);
+        const dropSQL = [
+            "PRAGMA foreign_keys = OFF;",
+            ...conflicts.map((t) => `DROP TABLE IF EXISTS \`${t}\`;`),
+            "PRAGMA foreign_keys = ON;",
+        ].join("\n");
+
+        const { filePath: dropTmpFile, cleanup: dropCleanup } = createTempFile(
+            "idp-drop-",
+            dropSQL,
+        );
         try {
-            const dropResult = await runWithSpinner(`겹치는 테이블 삭제 중 (${dbName})...`, "wrangler", ["d1", "execute", dbName, "--remote", "--file", dropTmpFile], { env });
+            const dropResult = await runWithSpinner(
+                `겹치는 테이블 삭제 중 (${dbName})...`,
+                "wrangler",
+                ["d1", "execute", dbName, "--remote", "--file", dropTmpFile],
+                { env },
+            );
             if (!dropResult.success) {
                 console.error(red(`  테이블 삭제 실패:\n${dropResult.stderr}`));
                 closeRL();
@@ -699,10 +784,19 @@ async function handleMigrationConflicts(dbName: string, env: Record<string, stri
     }
 
     // Option 2: 필터링된 SQL + drizzle tracking
-    const combinedSQL = buildFilteredMigrationSQL(new Set(conflicts)) + "\n" + buildDrizzleTrackingSQL();
-    const { filePath: filteredTmpFile, cleanup: filteredCleanup } = createTempFile("idp-migrate-", combinedSQL);
+    const combinedSQL =
+        buildFilteredMigrationSQL(new Set(conflicts)) + "\n" + buildDrizzleTrackingSQL();
+    const { filePath: filteredTmpFile, cleanup: filteredCleanup } = createTempFile(
+        "idp-migrate-",
+        combinedSQL,
+    );
     try {
-        const runResult = await runWithSpinner(`필터링된 마이그레이션 실행 중 (${dbName})...`, "wrangler", ["d1", "execute", dbName, "--remote", "--file", filteredTmpFile], { env });
+        const runResult = await runWithSpinner(
+            `필터링된 마이그레이션 실행 중 (${dbName})...`,
+            "wrangler",
+            ["d1", "execute", dbName, "--remote", "--file", filteredTmpFile],
+            { env },
+        );
         if (!runResult.success) {
             console.error(red(`  필터링된 마이그레이션 실패:\n${runResult.stderr}`));
             closeRL();
@@ -717,7 +811,12 @@ async function handleMigrationConflicts(dbName: string, env: Record<string, stri
 
 // ─────────────────────────────────────────────────────────────────────────────
 
-async function step5_migrate(args: Args, hasPreviewDb: boolean, dbName: string, previewDbName: string | null) {
+async function step5_migrate(
+    args: Args,
+    hasPreviewDb: boolean,
+    dbName: string,
+    previewDbName: string | null,
+) {
     console.log(`\n${cyan("─── 5. 마이그레이션 ────────────────────────────────────────")}`);
 
     let doMigrate = args.migrate;
@@ -743,7 +842,10 @@ async function step5_migrate(args: Args, hasPreviewDb: boolean, dbName: string,
         }
         envVars.CLOUDFLARE_ACCOUNT_ID = id;
         let envContent = readFile(ENV_FILE);
-        envContent = envContent.replace(/^CLOUDFLARE_ACCOUNT_ID=".*"$/m, `CLOUDFLARE_ACCOUNT_ID="${id}"`);
+        envContent = envContent.replace(
+            /^CLOUDFLARE_ACCOUNT_ID=".*"$/m,
+            `CLOUDFLARE_ACCOUNT_ID="${id}"`,
+        );
         writeFile(ENV_FILE, envContent);
     }
 
@@ -769,7 +871,10 @@ async function step5_migrate(args: Args, hasPreviewDb: boolean, dbName: string,
         }
         let envContent = readFile(ENV_FILE);
         if (/^CLOUDFLARE_D1_TOKEN=/m.test(envContent)) {
-            envContent = envContent.replace(/^CLOUDFLARE_D1_TOKEN=".*"$/m, `CLOUDFLARE_D1_TOKEN="${token}"`);
+            envContent = envContent.replace(
+                /^CLOUDFLARE_D1_TOKEN=".*"$/m,
+                `CLOUDFLARE_D1_TOKEN="${token}"`,
+            );
         } else {
             envContent += `\nCLOUDFLARE_API_TOKEN="${token}"\n`;
         }
@@ -782,8 +887,12 @@ async function step5_migrate(args: Args, hasPreviewDb: boolean, dbName: string,
         CLOUDFLARE_ACCOUNT_ID: freshEnv.CLOUDFLARE_ACCOUNT_ID ?? "",
         CLOUDFLARE_D1_DATABASE_ID: freshEnv.CLOUDFLARE_D1_DATABASE_ID ?? "",
         CLOUDFLARE_D1_PREVIEW_DATABASE_ID: freshEnv.CLOUDFLARE_D1_PREVIEW_DATABASE_ID ?? "",
-        ...(hasToken(freshEnv.CLOUDFLARE_D1_TOKEN) ? { CLOUDFLARE_D1_TOKEN: freshEnv.CLOUDFLARE_D1_TOKEN! } : {}),
-        ...(hasToken(freshEnv.CLOUDFLARE_API_TOKEN) ? { CLOUDFLARE_API_TOKEN: freshEnv.CLOUDFLARE_API_TOKEN! } : {}),
+        ...(hasToken(freshEnv.CLOUDFLARE_D1_TOKEN)
+            ? { CLOUDFLARE_D1_TOKEN: freshEnv.CLOUDFLARE_D1_TOKEN! }
+            : {}),
+        ...(hasToken(freshEnv.CLOUDFLARE_API_TOKEN)
+            ? { CLOUDFLARE_API_TOKEN: freshEnv.CLOUDFLARE_API_TOKEN! }
+            : {}),
     };
 
     // Generate migrations
@@ -819,7 +928,10 @@ async function step5_migrate(args: Args, hasPreviewDb: boolean, dbName: string,
     if (hasPreviewDb && previewDbName) {
         let doMigratePreview = args.migratePreview;
         if (doMigratePreview === undefined) {
-            doMigratePreview = await confirm("프리뷰 DB에도 마이그레이션을 진행하시겠습니까?", true);
+            doMigratePreview = await confirm(
+                "프리뷰 DB에도 마이그레이션을 진행하시겠습니까?",
+                true,
+            );
         }
 
         if (doMigratePreview) {
@@ -848,8 +960,18 @@ async function step5_migrate(args: Args, hasPreviewDb: boolean, dbName: string,
 
 async function hashPasswordForSetup(password: string): Promise<string> {
     const salt = crypto.getRandomValues(new Uint8Array(16));
-    const keyMaterial = await crypto.subtle.importKey("raw", new TextEncoder().encode(password), "PBKDF2", false, ["deriveBits"]);
-    const derived = await crypto.subtle.deriveBits({ name: "PBKDF2", hash: "SHA-256", salt, iterations: 100_000 }, keyMaterial, 256);
+    const keyMaterial = await crypto.subtle.importKey(
+        "raw",
+        new TextEncoder().encode(password),
+        "PBKDF2",
+        false,
+        ["deriveBits"],
+    );
+    const derived = await crypto.subtle.deriveBits(
+        { name: "PBKDF2", hash: "SHA-256", salt, iterations: 100_000 },
+        keyMaterial,
+        256,
+    );
     const saltB64 = btoa(String.fromCharCode(...salt));
     const hashB64 = btoa(String.fromCharCode(...new Uint8Array(derived)));
     return `pbkdf2:sha256:100000:${saltB64}:${hashB64}`;
@@ -871,7 +993,12 @@ interface AdminSeedData {
     hashedPassword: string;
 }
 
-async function seedAdminToDb(dbName: string, data: AdminSeedData, env: Record<string, string>, isPreview = false): Promise<boolean> {
+async function seedAdminToDb(
+    dbName: string,
+    data: AdminSeedData,
+    env: Record<string, string>,
+    isPreview = false,
+): Promise<boolean> {
     const now = Date.now();
     const tenantId = crypto.randomUUID();
     const userId = crypto.randomUUID();
@@ -896,7 +1023,12 @@ async function seedAdminToDb(dbName: string, data: AdminSeedData, env: Record<st
     const label = `관리자 계정 생성 중 (${dbName}${isPreview ? " preview" : ""})...`;
 
     try {
-        const result = await runWithSpinner(label, "wrangler", ["d1", "execute", dbName, "--remote", "--file", seedTmpFile], { env: actualEnv });
+        const result = await runWithSpinner(
+            label,
+            "wrangler",
+            ["d1", "execute", dbName, "--remote", "--file", seedTmpFile],
+            { env: actualEnv },
+        );
 
         if (!result.success) {
             console.error(red(`  관리자 계정 생성 실패:\n${result.stderr}`));
@@ -908,7 +1040,11 @@ async function seedAdminToDb(dbName: string, data: AdminSeedData, env: Record<st
     }
 }
 
-async function step5b_bootstrapConfig(args: Args, dbName: string, previewDbName: string | null): Promise<{ email: string; password: string; generated: boolean } | null> {
+async function step5b_bootstrapConfig(
+    args: Args,
+    dbName: string,
+    previewDbName: string | null,
+): Promise<{ email: string; password: string; generated: boolean } | null> {
     console.log(`\n${cyan("─── 5b. 초기 관리자 계정 생성 ─────────────────────────────────")}`);
 
     const tenantName = args.tenantName ?? (await ask("조직(테넌트) 이름", "My Organization"));
@@ -937,7 +1073,10 @@ async function step5b_bootstrapConfig(args: Args, dbName: string, previewDbName:
     // .env에 민감하지 않은 값만 저장
     if (fs.existsSync(ENV_FILE)) {
         let envContent = readFile(ENV_FILE);
-        envContent = envContent.replace(/^IDP_DEFAULT_TENANT_NAME=".*"$/m, `IDP_DEFAULT_TENANT_NAME="${tenantName}"`);
+        envContent = envContent.replace(
+            /^IDP_DEFAULT_TENANT_NAME=".*"$/m,
+            `IDP_DEFAULT_TENANT_NAME="${tenantName}"`,
+        );
         envContent = envContent.replace(/^IDP_ISSUER_URL=".*"$/m, `IDP_ISSUER_URL="${issuerUrl}"`);
         writeFile(ENV_FILE, envContent);
         console.log(green("  ✓ .env 업데이트 완료 (테넌트 이름, Issuer URL)"));
@@ -946,8 +1085,12 @@ async function step5b_bootstrapConfig(args: Args, dbName: string, previewDbName:
     const envVars = loadEnvFile(ENV_FILE);
     const wranglerEnv: Record<string, string> = {
         CLOUDFLARE_ACCOUNT_ID: envVars.CLOUDFLARE_ACCOUNT_ID ?? "",
-        ...(envVars.CLOUDFLARE_D1_TOKEN ? { CLOUDFLARE_D1_TOKEN: envVars.CLOUDFLARE_D1_TOKEN } : {}),
-        ...(envVars.CLOUDFLARE_API_TOKEN ? { CLOUDFLARE_API_TOKEN: envVars.CLOUDFLARE_API_TOKEN } : {}),
+        ...(envVars.CLOUDFLARE_D1_TOKEN
+            ? { CLOUDFLARE_D1_TOKEN: envVars.CLOUDFLARE_D1_TOKEN }
+            : {}),
+        ...(envVars.CLOUDFLARE_API_TOKEN
+            ? { CLOUDFLARE_API_TOKEN: envVars.CLOUDFLARE_API_TOKEN }
+            : {}),
     };
 
     const data: AdminSeedData = { tenantName, email, username, displayName, hashedPassword };
@@ -955,7 +1098,8 @@ async function step5b_bootstrapConfig(args: Args, dbName: string, previewDbName:
     if (!ok) return null;
 
     if (previewDbName) {
-        const doPreview = args.yes || (await confirm("프리뷰 DB에도 관리자 계정을 생성하시겠습니까?", true));
+        const doPreview =
+            args.yes || (await confirm("프리뷰 DB에도 관리자 계정을 생성하시겠습니까?", true));
         if (doPreview) {
             await seedAdminToDb(previewDbName, data, wranglerEnv, true);
         }
@@ -971,7 +1115,10 @@ async function step6_signingKey(args: Args) {
 
     if (!signingKey) {
         console.log(`  ${cyan("IDP_SIGNING_KEY_SECRET")} 을 설정합니다.`);
-        const input = await ask("직접 입력하거나 엔터를 누르면 자동 생성합니다 (openssl rand -base64 32)", "");
+        const input = await ask(
+            "직접 입력하거나 엔터를 누르면 자동 생성합니다 (openssl rand -base64 32)",
+            "",
+        );
 
         if (input === "") {
             const result = runCommand("openssl", ["rand", "-base64", "32"]);
@@ -988,12 +1135,17 @@ async function step6_signingKey(args: Args) {
 
     // Update .env
     let envContent = readFile(ENV_FILE);
-    envContent = envContent.replace(/^IDP_SIGNING_KEY_SECRET=".*"$/m, `IDP_SIGNING_KEY_SECRET="${signingKey}"`);
+    envContent = envContent.replace(
+        /^IDP_SIGNING_KEY_SECRET=".*"$/m,
+        `IDP_SIGNING_KEY_SECRET="${signingKey}"`,
+    );
     writeFile(ENV_FILE, envContent);
     console.log(green("  ✓ IDP_SIGNING_KEY_SECRET .env 업데이트 완료"));
 }
 
-function printComplete(adminResult?: { email: string; password: string; generated: boolean } | null) {
+function printComplete(
+    adminResult?: { email: string; password: string; generated: boolean } | null,
+) {
     console.log(`\n${green("✓ 셋업 완료!")}`);
 
     if (adminResult) {
diff --git a/src/hooks.server.ts b/src/hooks.server.ts
index 10d0a16..17ab8a0 100644
--- a/src/hooks.server.ts
+++ b/src/hooks.server.ts
@@ -15,13 +15,19 @@ export const handle: Handle = async ({ event, resolve }) => {
 
     // baseline 쿼리가 불필요한 경로 (정적 메타데이터, 헬스체크)
     const path = event.url.pathname;
-    const skipBaseline = path.startsWith("/.well-known/") || path === "/api/health" || path === "/favicon.ico" || path === "/robots.txt";
+    const skipBaseline =
+        path.startsWith("/.well-known/") ||
+        path === "/api/health" ||
+        path === "/favicon.ico" ||
+        path === "/robots.txt";
 
     try {
         if (event.platform?.env?.DB) {
             const db = await getDb(event.platform);
             event.locals.db = db;
-            event.locals.tenant = skipBaseline ? null : await ensureAuthBaseline(db, event.platform);
+            event.locals.tenant = skipBaseline
+                ? null
+                : await ensureAuthBaseline(db, event.platform);
 
             const sessionToken = event.cookies.get(SESSION_COOKIE_NAME);
 
@@ -32,7 +38,10 @@ export const handle: Handle = async ({ event, resolve }) => {
                     event.locals.session = sessionContext.session;
                     event.locals.user = sessionContext.user;
 
-                    if (Date.now() - sessionContext.session.lastSeenAt.getTime() >= SESSION_TOUCH_INTERVAL_MS) {
+                    if (
+                        Date.now() - sessionContext.session.lastSeenAt.getTime() >=
+                        SESSION_TOUCH_INTERVAL_MS
+                    ) {
                         const now = new Date();
                         await touchSession(db, sessionContext.session.id, now);
                         event.locals.session.lastSeenAt = now;
@@ -43,7 +52,8 @@ export const handle: Handle = async ({ event, resolve }) => {
             }
         }
     } catch (error) {
-        event.locals.runtimeError = error instanceof Error ? error.message : "인증 컨텍스트 초기화 중 오류가 발생했습니다.";
+        event.locals.runtimeError =
+            error instanceof Error ? error.message : "인증 컨텍스트 초기화 중 오류가 발생했습니다.";
         console.error(event.locals.runtimeError, error);
     }
 
@@ -61,7 +71,10 @@ export const handle: Handle = async ({ event, resolve }) => {
     response.headers.set("Strict-Transport-Security", "max-age=31536000; includeSubDomains");
 
     // Permissions Policy — 불필요한 브라우저 기능 비활성화
-    response.headers.set("Permissions-Policy", "camera=(), microphone=(), geolocation=(), payment=()");
+    response.headers.set(
+        "Permissions-Policy",
+        "camera=(), microphone=(), geolocation=(), payment=()",
+    );
 
     // Content-Security-Policy
     // - 기본 self only
diff --git a/src/lib/server/audit/index.ts b/src/lib/server/audit/index.ts
index 58d55c8..69ebd2f 100644
--- a/src/lib/server/audit/index.ts
+++ b/src/lib/server/audit/index.ts
@@ -16,7 +16,10 @@ export interface AuditEventInput {
 
 export function getRequestMetadata(event: RequestEvent) {
     const forwardedFor = event.request.headers.get("x-forwarded-for");
-    const ip = event.request.headers.get("cf-connecting-ip") ?? forwardedFor?.split(",")[0]?.trim() ?? null;
+    const ip =
+        event.request.headers.get("cf-connecting-ip") ??
+        forwardedFor?.split(",")[0]?.trim() ??
+        null;
 
     return {
         ip,
diff --git a/src/lib/server/auth/bootstrap.ts b/src/lib/server/auth/bootstrap.ts
index 68811f5..9bf072a 100644
--- a/src/lib/server/auth/bootstrap.ts
+++ b/src/lib/server/auth/bootstrap.ts
@@ -3,14 +3,26 @@ import type { DB } from "$lib/server/db";
 import { signingKeys, type Tenant, tenants } from "$lib/server/db/schema";
 import { DEFAULT_TENANT_SLUG } from "./constants";
 import { getRuntimeConfig } from "./runtime";
-import { generateRsaSigningKey, generateSelfSignedCert, unwrapPrivateKey, wrapPrivateKey } from "$lib/server/crypto/keys";
+import {
+    generateRsaSigningKey,
+    generateSelfSignedCert,
+    unwrapPrivateKey,
+    wrapPrivateKey,
+} from "$lib/server/crypto/keys";
 
 function isUniqueConstraintError(error: unknown): boolean {
     return error instanceof Error && /unique constraint failed/i.test(error.message);
 }
 
-export async function ensureDefaultTenant(db: DB, platform: App.Platform | undefined): Promise<Tenant> {
-    const [existingTenant] = await db.select().from(tenants).where(eq(tenants.slug, DEFAULT_TENANT_SLUG)).limit(1);
+export async function ensureDefaultTenant(
+    db: DB,
+    platform: App.Platform | undefined,
+): Promise<Tenant> {
+    const [existingTenant] = await db
+        .select()
+        .from(tenants)
+        .where(eq(tenants.slug, DEFAULT_TENANT_SLUG))
+        .limit(1);
 
     if (existingTenant) {
         return existingTenant;
@@ -29,7 +41,11 @@ export async function ensureDefaultTenant(db: DB, platform: App.Platform | undef
         }
     }
 
-    const [tenant] = await db.select().from(tenants).where(eq(tenants.slug, DEFAULT_TENANT_SLUG)).limit(1);
+    const [tenant] = await db
+        .select()
+        .from(tenants)
+        .where(eq(tenants.slug, DEFAULT_TENANT_SLUG))
+        .limit(1);
 
     if (!tenant) {
         throw new Error("기본 tenant 를 초기화하지 못했습니다.");
@@ -38,7 +54,12 @@ export async function ensureDefaultTenant(db: DB, platform: App.Platform | undef
     return tenant;
 }
 
-export async function ensureSigningKey(db: DB, tenant: Tenant, signingKeySecret: string, issuerUrl?: string): Promise<void> {
+export async function ensureSigningKey(
+    db: DB,
+    tenant: Tenant,
+    signingKeySecret: string,
+    issuerUrl?: string,
+): Promise<void> {
     // SAML KeyDescriptor 용 CN
     let cn = "idp";
     if (issuerUrl) {
@@ -58,9 +79,18 @@ export async function ensureSigningKey(db: DB, tenant: Tenant, signingKeySecret:
     // 키가 있지만 cert_pem 이 없는 경우 (M1 → M2 업그레이드): backfill
     if (existing) {
         if (!existing.certPem) {
-            const privateKey = await unwrapPrivateKey(existing.privateJwkEncrypted, signingKeySecret);
+            const privateKey = await unwrapPrivateKey(
+                existing.privateJwkEncrypted,
+                signingKeySecret,
+            );
             const publicJwk = JSON.parse(existing.publicJwk) as JsonWebKey;
-            const publicKey = await crypto.subtle.importKey("jwk", publicJwk, { name: "RSASSA-PKCS1-v1_5", hash: "SHA-256" }, true, ["verify"]);
+            const publicKey = await crypto.subtle.importKey(
+                "jwk",
+                publicJwk,
+                { name: "RSASSA-PKCS1-v1_5", hash: "SHA-256" },
+                true,
+                ["verify"],
+            );
             const certPem = await generateSelfSignedCert(publicKey, privateKey, cn);
             await db.update(signingKeys).set({ certPem }).where(eq(signingKeys.id, existing.id));
         }
diff --git a/src/lib/server/auth/constants.ts b/src/lib/server/auth/constants.ts
index b711c5b..3303353 100644
--- a/src/lib/server/auth/constants.ts
+++ b/src/lib/server/auth/constants.ts
@@ -19,12 +19,16 @@ export const AMR_WEBAUTHN = "hwk"; // hardware key (RFC 8176)
 export const WEBAUTHN_CREDENTIAL_TYPE = "webauthn";
 
 // ACR (Authentication Context Class Reference) 값
-export const ACR_PASSWORD_TRANSPORT = "urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport";
+export const ACR_PASSWORD_TRANSPORT =
+    "urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport";
 export const ACR_MFA = "https://refeds.org/profile/mfa";
 
 /** AMR 배열로부터 ACR 을 결정한다. */
 export function amrToAcr(amr: string[]): string {
-    if (amr.includes(AMR_WEBAUTHN) || (amr.includes(AMR_PASSWORD) && (amr.includes(AMR_TOTP) || amr.includes(AMR_BACKUP_CODE)))) {
+    if (
+        amr.includes(AMR_WEBAUTHN) ||
+        (amr.includes(AMR_PASSWORD) && (amr.includes(AMR_TOTP) || amr.includes(AMR_BACKUP_CODE)))
+    ) {
         return ACR_MFA;
     }
     return ACR_PASSWORD_TRANSPORT;
@@ -58,12 +62,17 @@ function acrSubsumes(sessionAcr: string | null, requestedRef: string): boolean {
  * 세션 ACR 이 SP 가 요구하는 RequestedAuthnContext 를 만족하는지 검사한다.
  * comparison: exact | minimum | maximum | better
  */
-export function acrSatisfies(sessionAcr: string | null, requested: { comparison: string; classRefs: string[] }): boolean {
+export function acrSatisfies(
+    sessionAcr: string | null,
+    requested: { comparison: string; classRefs: string[] },
+): boolean {
     const level = acrLevel(sessionAcr);
     switch (requested.comparison) {
         case "exact":
             // 정확히 일치하거나, 상위 ACR 이 해당 수준을 포함(subsume)하는 경우 허용
-            return requested.classRefs.some((ref) => ref === sessionAcr || acrSubsumes(sessionAcr, ref));
+            return requested.classRefs.some(
+                (ref) => ref === sessionAcr || acrSubsumes(sessionAcr, ref),
+            );
         case "minimum":
             return requested.classRefs.some((ref) => level >= acrLevel(ref));
         case "maximum":
@@ -71,6 +80,8 @@ export function acrSatisfies(sessionAcr: string | null, requested: { comparison:
         case "better":
             return requested.classRefs.some((ref) => level > acrLevel(ref));
         default:
-            return requested.classRefs.some((ref) => ref === sessionAcr || acrSubsumes(sessionAcr, ref));
+            return requested.classRefs.some(
+                (ref) => ref === sessionAcr || acrSubsumes(sessionAcr, ref),
+            );
     }
 }
diff --git a/src/lib/server/auth/guards.ts b/src/lib/server/auth/guards.ts
index 89364e8..925de2b 100644
--- a/src/lib/server/auth/guards.ts
+++ b/src/lib/server/auth/guards.ts
@@ -2,7 +2,11 @@ import { error } from "@sveltejs/kit";
 
 export function requireDbContext(locals: App.Locals) {
     if (!locals.db || !locals.tenant) {
-        throw error(503, locals.runtimeError ?? 'D1 binding "DB" 를 찾을 수 없습니다. Wrangler preview/dev 환경에서 실행 중인지 확인해 주세요.');
+        throw error(
+            503,
+            locals.runtimeError ??
+                'D1 binding "DB" 를 찾을 수 없습니다. Wrangler preview/dev 환경에서 실행 중인지 확인해 주세요.',
+        );
     }
 
     return { db: locals.db, tenant: locals.tenant };
diff --git a/src/lib/server/auth/mfa.ts b/src/lib/server/auth/mfa.ts
index f244e1f..74c4391 100644
--- a/src/lib/server/auth/mfa.ts
+++ b/src/lib/server/auth/mfa.ts
@@ -43,13 +43,22 @@ function b64uDecode(str: string): Uint8Array<ArrayBuffer> {
 
 async function deriveHmacKey(secret: string): Promise<CryptoKey> {
     const enc = new TextEncoder();
-    return crypto.subtle.importKey("raw", enc.encode(secret), { name: "HMAC", hash: "SHA-256" }, false, ["sign", "verify"]);
+    return crypto.subtle.importKey(
+        "raw",
+        enc.encode(secret),
+        { name: "HMAC", hash: "SHA-256" },
+        false,
+        ["sign", "verify"],
+    );
 }
 
 /**
  * MFA pending 토큰 생성. 쿠키 value 로 사용한다.
  */
-export async function createMfaPendingToken(claims: MfaPendingClaims, signingKeySecret: string): Promise<string> {
+export async function createMfaPendingToken(
+    claims: MfaPendingClaims,
+    signingKeySecret: string,
+): Promise<string> {
     const enc = new TextEncoder();
     const payload: MfaPendingPayload = {
         uid: claims.userId,
@@ -68,7 +77,10 @@ export async function createMfaPendingToken(claims: MfaPendingClaims, signingKey
  * MFA pending 토큰을 검증하고 claims 를 반환한다.
  * 만료되었거나 서명이 유효하지 않으면 null 반환.
  */
-export async function verifyMfaPendingToken(token: string, signingKeySecret: string): Promise<MfaPendingClaims | null> {
+export async function verifyMfaPendingToken(
+    token: string,
+    signingKeySecret: string,
+): Promise<MfaPendingClaims | null> {
     try {
         const lastDot = token.lastIndexOf(".");
         if (lastDot === -1) return null;
diff --git a/src/lib/server/auth/password.ts b/src/lib/server/auth/password.ts
index d2ebbfc..40392a5 100644
--- a/src/lib/server/auth/password.ts
+++ b/src/lib/server/auth/password.ts
@@ -36,15 +36,33 @@ function timingSafeEqual(left: Uint8Array, right: Uint8Array): boolean {
     return difference === 0;
 }
 
-async function derivePasswordHash(password: string, salt: Uint8Array, iterations: number): Promise<Uint8Array> {
+async function derivePasswordHash(
+    password: string,
+    salt: Uint8Array,
+    iterations: number,
+): Promise<Uint8Array> {
     const normalizedSalt = new Uint8Array(salt);
-    const keyMaterial = await crypto.subtle.importKey("raw", new TextEncoder().encode(password), { name: "PBKDF2" }, false, ["deriveBits"]);
-    const bits = await crypto.subtle.deriveBits({ name: "PBKDF2", hash: "SHA-256", salt: normalizedSalt.buffer, iterations }, keyMaterial, 256);
+    const keyMaterial = await crypto.subtle.importKey(
+        "raw",
+        new TextEncoder().encode(password),
+        { name: "PBKDF2" },
+        false,
+        ["deriveBits"],
+    );
+    const bits = await crypto.subtle.deriveBits(
+        { name: "PBKDF2", hash: "SHA-256", salt: normalizedSalt.buffer, iterations },
+        keyMaterial,
+        256,
+    );
 
     return new Uint8Array(bits);
 }
 
-function formatHashRecord(salt: Uint8Array, hash: Uint8Array, iterations = PASSWORD_ITERATIONS): string {
+function formatHashRecord(
+    salt: Uint8Array,
+    hash: Uint8Array,
+    iterations = PASSWORD_ITERATIONS,
+): string {
     return `${PASSWORD_ALGORITHM}$${PASSWORD_DIGEST}:${iterations}$${bytesToBase64(salt)}$${bytesToBase64(hash)}`;
 }
 
@@ -53,7 +71,13 @@ function parseHashRecord(record: string) {
     const [digest, iterationsString] = params?.split(":") ?? [];
     const iterations = Number(iterationsString);
 
-    if (algorithm !== PASSWORD_ALGORITHM || digest !== PASSWORD_DIGEST || !Number.isFinite(iterations) || !saltB64 || !hashB64) {
+    if (
+        algorithm !== PASSWORD_ALGORITHM ||
+        digest !== PASSWORD_DIGEST ||
+        !Number.isFinite(iterations) ||
+        !saltB64 ||
+        !hashB64
+    ) {
         return null;
     }
 
diff --git a/src/lib/server/auth/session.ts b/src/lib/server/auth/session.ts
index dc7612f..d133e16 100644
--- a/src/lib/server/auth/session.ts
+++ b/src/lib/server/auth/session.ts
@@ -64,7 +64,14 @@ export async function getSessionContext(db: DB, sessionToken: string) {
         .select({ session: sessions, user: users })
         .from(sessions)
         .innerJoin(users, eq(sessions.userId, users.id))
-        .where(and(eq(sessions.idpSessionId, sessionToken), gt(sessions.expiresAt, now), isNull(sessions.revokedAt), eq(users.status, "active")))
+        .where(
+            and(
+                eq(sessions.idpSessionId, sessionToken),
+                gt(sessions.expiresAt, now),
+                isNull(sessions.revokedAt),
+                eq(users.status, "active"),
+            ),
+        )
         .limit(1);
 
     return row ?? null;
@@ -88,7 +95,12 @@ export async function revokeAllUserSessions(db: DB, userId: string, revokedAt =
         .where(and(eq(sessions.userId, userId), isNull(sessions.revokedAt)));
 }
 
-export function setSessionCookie(cookies: Cookies, url: URL, sessionToken: string, expiresAt: Date) {
+export function setSessionCookie(
+    cookies: Cookies,
+    url: URL,
+    sessionToken: string,
+    expiresAt: Date,
+) {
     cookies.set(SESSION_COOKIE_NAME, sessionToken, cookieOptions(url, expiresAt));
 }
 
diff --git a/src/lib/server/auth/totp.ts b/src/lib/server/auth/totp.ts
index 9be06bb..14c594a 100644
--- a/src/lib/server/auth/totp.ts
+++ b/src/lib/server/auth/totp.ts
@@ -51,7 +51,13 @@ export function base32Decode(input: string): Uint8Array<ArrayBuffer> {
 // ── HOTP / TOTP ───────────────────────────────────────────────────────────────
 
 async function hotp(key: Uint8Array<ArrayBuffer>, counter: number): Promise<number> {
-    const cryptoKey = await crypto.subtle.importKey("raw", key, { name: "HMAC", hash: "SHA-1" }, false, ["sign"]);
+    const cryptoKey = await crypto.subtle.importKey(
+        "raw",
+        key,
+        { name: "HMAC", hash: "SHA-1" },
+        false,
+        ["sign"],
+    );
     const counterBuf = new Uint8Array(8);
     // counter를 빅엔디안 8바이트로 기록
     let c = counter;
@@ -62,7 +68,11 @@ async function hotp(key: Uint8Array<ArrayBuffer>, counter: number): Promise<numb
     const sig = await crypto.subtle.sign("HMAC", cryptoKey, counterBuf);
     const hash = new Uint8Array(sig);
     const offset = hash[19] & 0xf;
-    const code = ((hash[offset] & 0x7f) << 24) | (hash[offset + 1] << 16) | (hash[offset + 2] << 8) | hash[offset + 3];
+    const code =
+        ((hash[offset] & 0x7f) << 24) |
+        (hash[offset + 1] << 16) |
+        (hash[offset + 2] << 8) |
+        hash[offset + 3];
     return code % 1_000_000;
 }
 
@@ -81,7 +91,11 @@ export async function generateTotpCode(base32Secret: string, stepOffset = 0): Pr
  * lastUsedStep 을 지정하면 해당 스텝 이하는 거부하여 재사용 공격을 방지한다.
  * 검증 성공 시 매칭된 스텝을 반환하고, 실패 시 null 을 반환한다.
  */
-export async function verifyTotp(code: string, base32Secret: string, lastUsedStep?: number): Promise<number | null> {
+export async function verifyTotp(
+    code: string,
+    base32Secret: string,
+    lastUsedStep?: number,
+): Promise<number | null> {
     if (!/^\d{6}$/.test(code)) return null;
     const key = base32Decode(base32Secret);
     const t = Math.floor(Date.now() / 30_000);
@@ -96,22 +110,44 @@ export async function verifyTotp(code: string, base32Secret: string, lastUsedSte
 
 // ── TOTP 시크릿 암호화/복호화 ──────────────────────────────────────────────────
 
-async function deriveTotpWrapKey(signingKeySecret: string, salt: Uint8Array<ArrayBuffer>): Promise<CryptoKey> {
+async function deriveTotpWrapKey(
+    signingKeySecret: string,
+    salt: Uint8Array<ArrayBuffer>,
+): Promise<CryptoKey> {
     const enc = new TextEncoder();
-    const keyMaterial = await crypto.subtle.importKey("raw", enc.encode(signingKeySecret), "HKDF", false, ["deriveKey"]);
-    return crypto.subtle.deriveKey({ name: "HKDF", hash: "SHA-256", salt, info: enc.encode("idp-totp-secret-wrap-v1") }, keyMaterial, { name: "AES-GCM", length: 256 }, false, ["encrypt", "decrypt"]);
+    const keyMaterial = await crypto.subtle.importKey(
+        "raw",
+        enc.encode(signingKeySecret),
+        "HKDF",
+        false,
+        ["deriveKey"],
+    );
+    return crypto.subtle.deriveKey(
+        { name: "HKDF", hash: "SHA-256", salt, info: enc.encode("idp-totp-secret-wrap-v1") },
+        keyMaterial,
+        { name: "AES-GCM", length: 256 },
+        false,
+        ["encrypt", "decrypt"],
+    );
 }
 
 /**
  * TOTP base32 시크릿을 AES-256-GCM 으로 암호화한다.
  * 형식: `<salt_b64u>.<iv_b64u>.<ciphertext_b64u>`
  */
-export async function encryptTotpSecret(base32Secret: string, signingKeySecret: string): Promise<string> {
+export async function encryptTotpSecret(
+    base32Secret: string,
+    signingKeySecret: string,
+): Promise<string> {
     const salt = crypto.getRandomValues(new Uint8Array(16));
     const iv = crypto.getRandomValues(new Uint8Array(12));
     const wrapKey = await deriveTotpWrapKey(signingKeySecret, salt);
     const enc = new TextEncoder();
-    const ct = await crypto.subtle.encrypt({ name: "AES-GCM", iv }, wrapKey, enc.encode(base32Secret));
+    const ct = await crypto.subtle.encrypt(
+        { name: "AES-GCM", iv },
+        wrapKey,
+        enc.encode(base32Secret),
+    );
     const b64u = (buf: Uint8Array) =>
         btoa(String.fromCharCode(...buf))
             .replace(/\+/g, "-")
@@ -123,7 +159,10 @@ export async function encryptTotpSecret(base32Secret: string, signingKeySecret:
 /**
  * `encryptTotpSecret` 역연산. 복호화된 base32 시크릿 반환.
  */
-export async function decryptTotpSecret(encrypted: string, signingKeySecret: string): Promise<string> {
+export async function decryptTotpSecret(
+    encrypted: string,
+    signingKeySecret: string,
+): Promise<string> {
     const parts = encrypted.split(".");
     if (parts.length !== 3) throw new Error("Invalid encrypted TOTP secret format");
     const [saltB64, ivB64, ctB64] = parts;
@@ -135,7 +174,11 @@ export async function decryptTotpSecret(encrypted: string, signingKeySecret: str
         return arr;
     };
     const wrapKey = await deriveTotpWrapKey(signingKeySecret, b64uDec(saltB64));
-    const plaintext = await crypto.subtle.decrypt({ name: "AES-GCM", iv: b64uDec(ivB64) }, wrapKey, b64uDec(ctB64));
+    const plaintext = await crypto.subtle.decrypt(
+        { name: "AES-GCM", iv: b64uDec(ivB64) },
+        wrapKey,
+        b64uDec(ctB64),
+    );
     return new TextDecoder().decode(plaintext);
 }
 
diff --git a/src/lib/server/auth/users.ts b/src/lib/server/auth/users.ts
index ef29ab9..1f66920 100644
--- a/src/lib/server/auth/users.ts
+++ b/src/lib/server/auth/users.ts
@@ -12,7 +12,11 @@ export function normalizeUsername(username: string): string {
     return username.trim().toLowerCase();
 }
 
-export async function findUserByEmail(db: DB, tenantId: string, email: string): Promise<User | null> {
+export async function findUserByEmail(
+    db: DB,
+    tenantId: string,
+    email: string,
+): Promise<User | null> {
     const [user] = await db
         .select()
         .from(users)
@@ -22,7 +26,11 @@ export async function findUserByEmail(db: DB, tenantId: string, email: string):
     return user ?? null;
 }
 
-export async function findUserByUsername(db: DB, tenantId: string, username: string): Promise<User | null> {
+export async function findUserByUsername(
+    db: DB,
+    tenantId: string,
+    username: string,
+): Promise<User | null> {
     const [user] = await db
         .select()
         .from(users)
@@ -42,7 +50,12 @@ export async function findPasswordCredential(db: DB, userId: string): Promise<Cr
     return credential ?? null;
 }
 
-export async function authenticateLocalUser(db: DB, tenantId: string, username: string, password: string): Promise<User | null> {
+export async function authenticateLocalUser(
+    db: DB,
+    tenantId: string,
+    username: string,
+    password: string,
+): Promise<User | null> {
     const user = await findUserByUsername(db, tenantId, username);
 
     if (!user || user.status !== "active") {
@@ -62,7 +75,10 @@ export async function authenticateLocalUser(db: DB, tenantId: string, username:
     }
 
     if (result.rehash) {
-        await db.update(credentials).set({ secret: result.rehash, lastUsedAt: new Date() }).where(eq(credentials.id, credential.id));
+        await db
+            .update(credentials)
+            .set({ secret: result.rehash, lastUsedAt: new Date() })
+            .where(eq(credentials.id, credential.id));
     }
 
     return user;
diff --git a/src/lib/server/auth/webauthn.ts b/src/lib/server/auth/webauthn.ts
index 679a6e4..b25fde8 100644
--- a/src/lib/server/auth/webauthn.ts
+++ b/src/lib/server/auth/webauthn.ts
@@ -6,8 +6,17 @@
  * - residentKey: 'required' → username-less(discoverable) 로그인 지원
  */
 
-import { generateRegistrationOptions, verifyRegistrationResponse, generateAuthenticationOptions, verifyAuthenticationResponse } from "@simplewebauthn/server";
-import type { AuthenticatorTransportFuture, AuthenticationResponseJSON, RegistrationResponseJSON } from "@simplewebauthn/server";
+import {
+    generateRegistrationOptions,
+    verifyRegistrationResponse,
+    generateAuthenticationOptions,
+    verifyAuthenticationResponse,
+} from "@simplewebauthn/server";
+import type {
+    AuthenticatorTransportFuture,
+    AuthenticationResponseJSON,
+    RegistrationResponseJSON,
+} from "@simplewebauthn/server";
 import type { DB } from "$lib/server/db";
 import { credentials, users, webauthnChallenges } from "$lib/server/db/schema";
 import { eq, and, isNull, gt, sql } from "drizzle-orm";
@@ -42,10 +51,19 @@ interface ChallengeCookiePayload {
 }
 
 async function importHmacKey(secret: string, usage: "sign" | "verify"): Promise<CryptoKey> {
-    return crypto.subtle.importKey("raw", new TextEncoder().encode(secret), { name: "HMAC", hash: "SHA-256" }, false, [usage]);
+    return crypto.subtle.importKey(
+        "raw",
+        new TextEncoder().encode(secret),
+        { name: "HMAC", hash: "SHA-256" },
+        false,
+        [usage],
+    );
 }
 
-export async function createChallengeCookie(payload: Omit<ChallengeCookiePayload, "exp">, signingKeySecret: string): Promise<string> {
+export async function createChallengeCookie(
+    payload: Omit<ChallengeCookiePayload, "exp">,
+    signingKeySecret: string,
+): Promise<string> {
     const enc = new TextEncoder();
     const full: ChallengeCookiePayload = { ...payload, exp: Date.now() + CHALLENGE_TTL_MS };
     const data = b64uEncode(enc.encode(JSON.stringify(full)));
@@ -54,7 +72,11 @@ export async function createChallengeCookie(payload: Omit<ChallengeCookiePayload
     return `${data}.${b64uEncode(new Uint8Array(sig))}`;
 }
 
-export async function verifyChallengeCookie(token: string, signingKeySecret: string, expectedType: "register" | "authenticate"): Promise<ChallengeCookiePayload | null> {
+export async function verifyChallengeCookie(
+    token: string,
+    signingKeySecret: string,
+    expectedType: "register" | "authenticate",
+): Promise<ChallengeCookiePayload | null> {
     try {
         const lastDot = token.lastIndexOf(".");
         if (lastDot === -1) return null;
@@ -62,9 +84,16 @@ export async function verifyChallengeCookie(token: string, signingKeySecret: str
         const sigPart = token.slice(lastDot + 1);
         const enc = new TextEncoder();
         const key = await importHmacKey(signingKeySecret, "verify");
-        const valid = await crypto.subtle.verify("HMAC", key, b64uDecode(sigPart), enc.encode(data));
+        const valid = await crypto.subtle.verify(
+            "HMAC",
+            key,
+            b64uDecode(sigPart),
+            enc.encode(data),
+        );
         if (!valid) return null;
-        const payload = JSON.parse(new TextDecoder().decode(b64uDecode(data))) as ChallengeCookiePayload;
+        const payload = JSON.parse(
+            new TextDecoder().decode(b64uDecode(data)),
+        ) as ChallengeCookiePayload;
         if (payload.exp < Date.now()) return null;
         if (payload.type !== expectedType) return null;
         return payload;
@@ -85,14 +114,23 @@ export function getWebAuthnConfig(url: URL) {
 
 // ── 등록 (Registration) ────────────────────────────────────────────────────────
 
-export async function buildRegistrationOptions(db: DB, userId: string, userEmail: string, userDisplayName: string | null, rpID: string, rpName: string) {
+export async function buildRegistrationOptions(
+    db: DB,
+    userId: string,
+    userEmail: string,
+    userDisplayName: string | null,
+    rpID: string,
+    rpName: string,
+) {
     // 이미 등록된 passkeys → excludeCredentials 에 포함(중복 방지)
     const existing = await db
         .select({ credentialId: credentials.credentialId })
         .from(credentials)
         .where(and(eq(credentials.userId, userId), eq(credentials.type, "webauthn")));
 
-    const excludeCredentials = existing.filter((c) => c.credentialId !== null).map((c) => ({ id: c.credentialId! }));
+    const excludeCredentials = existing
+        .filter((c) => c.credentialId !== null)
+        .map((c) => ({ id: c.credentialId! }));
 
     return generateRegistrationOptions({
         rpID,
@@ -109,7 +147,12 @@ export async function buildRegistrationOptions(db: DB, userId: string, userEmail
     });
 }
 
-export async function savePasskey(db: DB, userId: string, label: string, verificationResult: Awaited<ReturnType<typeof verifyRegistrationResponse>>): Promise<void> {
+export async function savePasskey(
+    db: DB,
+    userId: string,
+    label: string,
+    verificationResult: Awaited<ReturnType<typeof verifyRegistrationResponse>>,
+): Promise<void> {
     const info = verificationResult.registrationInfo;
     if (!info) throw new Error("registrationInfo 가 없습니다");
     const { credential } = info;
@@ -155,14 +198,22 @@ export async function consumeChallenge(db: DB, challenge: string): Promise<boole
     const rows = await db
         .update(webauthnChallenges)
         .set({ usedAt: now })
-        .where(and(eq(webauthnChallenges.challenge, challenge), isNull(webauthnChallenges.usedAt), gt(webauthnChallenges.expiresAt, now)))
+        .where(
+            and(
+                eq(webauthnChallenges.challenge, challenge),
+                isNull(webauthnChallenges.usedAt),
+                gt(webauthnChallenges.expiresAt, now),
+            ),
+        )
         .returning({ id: webauthnChallenges.id });
     return rows.length > 0;
 }
 
 /** 만료된 챌린지 정리 (필요 시 주기적 호출). */
 export async function purgeExpiredChallenges(db: DB): Promise<void> {
-    await db.delete(webauthnChallenges).where(sql`${webauthnChallenges.expiresAt} <= ${Date.now()}`);
+    await db
+        .delete(webauthnChallenges)
+        .where(sql`${webauthnChallenges.expiresAt} <= ${Date.now()}`);
 }
 
 export interface PasskeyVerifyResult {
@@ -189,7 +240,13 @@ export async function verifyPasskeyAuthentication(
         })
         .from(credentials)
         .innerJoin(users, eq(credentials.userId, users.id))
-        .where(and(eq(credentials.credentialId, credentialId), eq(credentials.type, "webauthn"), eq(users.tenantId, tenantId)))
+        .where(
+            and(
+                eq(credentials.credentialId, credentialId),
+                eq(credentials.type, "webauthn"),
+                eq(users.tenantId, tenantId),
+            ),
+        )
         .limit(1);
 
     const cred = row?.cred ?? null;
@@ -197,7 +254,10 @@ export async function verifyPasskeyAuthentication(
 
     // 타이밍 누출 방지: credential 이 없거나 잘못 매칭되더라도 동일한 검증 비용을 지불한다.
     const publicKey = valid ? b64uDecode(cred.publicKey!) : DUMMY_PUBLIC_KEY;
-    const transports = valid && cred.transports ? (JSON.parse(cred.transports) as AuthenticatorTransportFuture[]) : undefined;
+    const transports =
+        valid && cred.transports
+            ? (JSON.parse(cred.transports) as AuthenticatorTransportFuture[])
+            : undefined;
 
     let verified: boolean;
     let newCounter = 0;
@@ -222,7 +282,10 @@ export async function verifyPasskeyAuthentication(
 
     if (!valid || !verified) return null;
 
-    await db.update(credentials).set({ counter: newCounter, lastUsedAt: new Date() }).where(eq(credentials.id, cred.id));
+    await db
+        .update(credentials)
+        .set({ counter: newCounter, lastUsedAt: new Date() })
+        .where(eq(credentials.id, cred.id));
 
     return { userId: cred.userId, credentialDbId: cred.id, newCounter };
 }
diff --git a/src/lib/server/crypto/keys.ts b/src/lib/server/crypto/keys.ts
index 66d2024..44c4ddd 100644
--- a/src/lib/server/crypto/keys.ts
+++ b/src/lib/server/crypto/keys.ts
@@ -34,10 +34,21 @@ export function b64uDecode(str: string): Uint8Array<ArrayBuffer> {
 
 // ── private key wrapping ──────────────────────────────────────────────────────
 
-async function deriveWrappingKey(secret: string, salt: Uint8Array<ArrayBuffer>): Promise<CryptoKey> {
+async function deriveWrappingKey(
+    secret: string,
+    salt: Uint8Array<ArrayBuffer>,
+): Promise<CryptoKey> {
     const enc = new TextEncoder();
-    const keyMaterial = await crypto.subtle.importKey("raw", enc.encode(secret), "HKDF", false, ["deriveKey"]);
-    return crypto.subtle.deriveKey({ name: "HKDF", hash: "SHA-256", salt, info: enc.encode("idp-signing-key-wrap-v1") }, keyMaterial, { name: "AES-GCM", length: 256 }, false, ["encrypt", "decrypt"]);
+    const keyMaterial = await crypto.subtle.importKey("raw", enc.encode(secret), "HKDF", false, [
+        "deriveKey",
+    ]);
+    return crypto.subtle.deriveKey(
+        { name: "HKDF", hash: "SHA-256", salt, info: enc.encode("idp-signing-key-wrap-v1") },
+        keyMaterial,
+        { name: "AES-GCM", length: 256 },
+        false,
+        ["encrypt", "decrypt"],
+    );
 }
 
 /**
@@ -50,7 +61,11 @@ export async function wrapPrivateKey(privateKey: CryptoKey, secret: string): Pro
     const wrappingKey = await deriveWrappingKey(secret, salt);
     const jwk = await crypto.subtle.exportKey("jwk", privateKey);
     const enc = new TextEncoder();
-    const ciphertext = await crypto.subtle.encrypt({ name: "AES-GCM", iv }, wrappingKey, enc.encode(JSON.stringify(jwk)));
+    const ciphertext = await crypto.subtle.encrypt(
+        { name: "AES-GCM", iv },
+        wrappingKey,
+        enc.encode(JSON.stringify(jwk)),
+    );
     return `${b64uEncode(salt)}.${b64uEncode(iv)}.${b64uEncode(ciphertext)}`;
 }
 
@@ -63,9 +78,19 @@ export async function unwrapPrivateKey(encrypted: string, secret: string): Promi
     const [saltB64, ivB64, ctB64] = parts;
     const wrappingKey = await deriveWrappingKey(secret, b64uDecode(saltB64));
     const dec = new TextDecoder();
-    const plaintext = await crypto.subtle.decrypt({ name: "AES-GCM", iv: b64uDecode(ivB64) }, wrappingKey, b64uDecode(ctB64));
+    const plaintext = await crypto.subtle.decrypt(
+        { name: "AES-GCM", iv: b64uDecode(ivB64) },
+        wrappingKey,
+        b64uDecode(ctB64),
+    );
     const jwk = JSON.parse(dec.decode(plaintext)) as JsonWebKey;
-    return crypto.subtle.importKey("jwk", jwk, { name: "RSASSA-PKCS1-v1_5", hash: "SHA-256" }, false, ["sign"]);
+    return crypto.subtle.importKey(
+        "jwk",
+        jwk,
+        { name: "RSASSA-PKCS1-v1_5", hash: "SHA-256" },
+        false,
+        ["sign"],
+    );
 }
 
 // ── X.509 self-signed cert ────────────────────────────────────────────────────
@@ -75,7 +100,11 @@ export async function unwrapPrivateKey(encrypted: string, secret: string): Promi
  * SAML IdP Metadata 의 <KeyDescriptor> 에 사용.
  * @param commonName 인증서 CN (보통 IDP_ISSUER_URL 의 hostname)
  */
-export async function generateSelfSignedCert(publicKey: CryptoKey, privateKey: CryptoKey, commonName: string): Promise<string> {
+export async function generateSelfSignedCert(
+    publicKey: CryptoKey,
+    privateKey: CryptoKey,
+    commonName: string,
+): Promise<string> {
     const cert = await X509CertificateGenerator.createSelfSigned(
         {
             keys: { publicKey, privateKey },
@@ -114,7 +143,11 @@ export async function generateRsaSigningKey(): Promise<{
 
 // ── JWT signing (RS256) ───────────────────────────────────────────────────────
 
-export async function signJwt(payload: Record<string, unknown>, privateKey: CryptoKey, kid: string): Promise<string> {
+export async function signJwt(
+    payload: Record<string, unknown>,
+    privateKey: CryptoKey,
+    kid: string,
+): Promise<string> {
     const enc = new TextEncoder();
     const header = { alg: "RS256", typ: "JWT", kid };
     const headerB64 = b64uEncode(enc.encode(JSON.stringify(header)));
@@ -137,10 +170,19 @@ export interface AccessTokenClaims {
 
 async function deriveHmacKey(secret: string): Promise<CryptoKey> {
     const enc = new TextEncoder();
-    return crypto.subtle.importKey("raw", enc.encode(secret), { name: "HMAC", hash: "SHA-256" }, false, ["sign", "verify"]);
+    return crypto.subtle.importKey(
+        "raw",
+        enc.encode(secret),
+        { name: "HMAC", hash: "SHA-256" },
+        false,
+        ["sign", "verify"],
+    );
 }
 
-export async function generateAccessToken(claims: AccessTokenClaims, secret: string): Promise<string> {
+export async function generateAccessToken(
+    claims: AccessTokenClaims,
+    secret: string,
+): Promise<string> {
     const enc = new TextEncoder();
     const data = b64uEncode(enc.encode(JSON.stringify(claims)));
     const key = await deriveHmacKey(secret);
@@ -148,7 +190,10 @@ export async function generateAccessToken(claims: AccessTokenClaims, secret: str
     return `${data}.${b64uEncode(sig)}`;
 }
 
-export async function verifyAccessToken(token: string, secret: string): Promise<AccessTokenClaims | null> {
+export async function verifyAccessToken(
+    token: string,
+    secret: string,
+): Promise<AccessTokenClaims | null> {
     try {
         const lastDot = token.lastIndexOf(".");
         if (lastDot === -1) return null;
@@ -173,27 +218,61 @@ export async function verifyAccessToken(token: string, secret: string): Promise<
  * 임의의 문자열을 AES-256-GCM 으로 암호화한다.
  * 형식: `<salt_b64u>.<iv_b64u>.<ciphertext_b64u>`
  */
-export async function encryptSecret(plaintext: string, masterSecret: string, context = "idp-secret-v1"): Promise<string> {
+export async function encryptSecret(
+    plaintext: string,
+    masterSecret: string,
+    context = "idp-secret-v1",
+): Promise<string> {
     const salt = crypto.getRandomValues(new Uint8Array(16));
     const iv = crypto.getRandomValues(new Uint8Array(12));
     const enc = new TextEncoder();
-    const keyMaterial = await crypto.subtle.importKey("raw", enc.encode(masterSecret), "HKDF", false, ["deriveKey"]);
-    const key = await crypto.subtle.deriveKey({ name: "HKDF", hash: "SHA-256", salt, info: enc.encode(context) }, keyMaterial, { name: "AES-GCM", length: 256 }, false, ["encrypt"]);
+    const keyMaterial = await crypto.subtle.importKey(
+        "raw",
+        enc.encode(masterSecret),
+        "HKDF",
+        false,
+        ["deriveKey"],
+    );
+    const key = await crypto.subtle.deriveKey(
+        { name: "HKDF", hash: "SHA-256", salt, info: enc.encode(context) },
+        keyMaterial,
+        { name: "AES-GCM", length: 256 },
+        false,
+        ["encrypt"],
+    );
     const ct = await crypto.subtle.encrypt({ name: "AES-GCM", iv }, key, enc.encode(plaintext));
     return `${b64uEncode(salt)}.${b64uEncode(iv)}.${b64uEncode(new Uint8Array(ct))}`;
 }
 
 /** `encryptSecret` 역연산. */
-export async function decryptSecret(encrypted: string, masterSecret: string, context = "idp-secret-v1"): Promise<string> {
+export async function decryptSecret(
+    encrypted: string,
+    masterSecret: string,
+    context = "idp-secret-v1",
+): Promise<string> {
     const parts = encrypted.split(".");
     if (parts.length !== 3) throw new Error("Invalid encrypted secret format");
     const [saltB64, ivB64, ctB64] = parts;
     const enc = new TextEncoder();
-    const keyMaterial = await crypto.subtle.importKey("raw", enc.encode(masterSecret), "HKDF", false, ["deriveKey"]);
-    const key = await crypto.subtle.deriveKey({ name: "HKDF", hash: "SHA-256", salt: b64uDecode(saltB64), info: enc.encode(context) }, keyMaterial, { name: "AES-GCM", length: 256 }, false, [
-        "decrypt",
-    ]);
-    const pt = await crypto.subtle.decrypt({ name: "AES-GCM", iv: b64uDecode(ivB64) }, key, b64uDecode(ctB64));
+    const keyMaterial = await crypto.subtle.importKey(
+        "raw",
+        enc.encode(masterSecret),
+        "HKDF",
+        false,
+        ["deriveKey"],
+    );
+    const key = await crypto.subtle.deriveKey(
+        { name: "HKDF", hash: "SHA-256", salt: b64uDecode(saltB64), info: enc.encode(context) },
+        keyMaterial,
+        { name: "AES-GCM", length: 256 },
+        false,
+        ["decrypt"],
+    );
+    const pt = await crypto.subtle.decrypt(
+        { name: "AES-GCM", iv: b64uDecode(ivB64) },
+        key,
+        b64uDecode(ctB64),
+    );
     return new TextDecoder().decode(pt);
 }
 
@@ -212,7 +291,13 @@ export async function getActiveSigningKey(
     const [row] = await db
         .select()
         .from(signingKeys)
-        .where(and(eq(signingKeys.tenantId, tenantId), eq(signingKeys.active, true), isNull(signingKeys.rotatedAt)))
+        .where(
+            and(
+                eq(signingKeys.tenantId, tenantId),
+                eq(signingKeys.active, true),
+                isNull(signingKeys.rotatedAt),
+            ),
+        )
         .limit(1);
     if (!row) return null;
     const privateKey = await unwrapPrivateKey(row.privateJwkEncrypted, secret);
@@ -224,7 +309,10 @@ export async function getActiveSigningKey(
     };
 }
 
-export async function getPublicJwks(db: DB, tenantId: string): Promise<Array<Record<string, unknown>>> {
+export async function getPublicJwks(
+    db: DB,
+    tenantId: string,
+): Promise<Array<Record<string, unknown>>> {
     const rows = await db
         .select({
             kid: signingKeys.kid,
diff --git a/src/lib/server/db/schema.ts b/src/lib/server/db/schema.ts
index 6ba326a..81d2125 100644
--- a/src/lib/server/db/schema.ts
+++ b/src/lib/server/db/schema.ts
@@ -1,5 +1,12 @@
 import { sql } from "drizzle-orm";
-import { type AnySQLiteColumn, integer, sqliteTable, text, index, uniqueIndex } from "drizzle-orm/sqlite-core";
+import {
+    type AnySQLiteColumn,
+    integer,
+    sqliteTable,
+    text,
+    index,
+    uniqueIndex,
+} from "drizzle-orm/sqlite-core";
 
 // ---------- Tenancy ----------
 
@@ -62,7 +69,11 @@ export const users = sqliteTable(
             .notNull()
             .default(sql`(unixepoch() * 1000)`),
     },
-    (t) => [uniqueIndex("users_tenant_email_uidx").on(t.tenantId, t.email), uniqueIndex("users_tenant_username_uidx").on(t.tenantId, t.username), index("users_tenant_idx").on(t.tenantId)],
+    (t) => [
+        uniqueIndex("users_tenant_email_uidx").on(t.tenantId, t.email),
+        uniqueIndex("users_tenant_username_uidx").on(t.tenantId, t.username),
+        index("users_tenant_idx").on(t.tenantId),
+    ],
 );
 
 /**
@@ -94,7 +105,11 @@ export const credentials = sqliteTable(
             .notNull()
             .default(sql`(unixepoch() * 1000)`),
     },
-    (t) => [index("credentials_user_idx").on(t.userId), index("credentials_user_type_idx").on(t.userId, t.type), uniqueIndex("credentials_webauthn_credential_id_uidx").on(t.credentialId)],
+    (t) => [
+        index("credentials_user_idx").on(t.userId),
+        index("credentials_user_type_idx").on(t.userId, t.type),
+        uniqueIndex("credentials_webauthn_credential_id_uidx").on(t.credentialId),
+    ],
 );
 
 /**
@@ -122,7 +137,14 @@ export const identities = sqliteTable(
             .default(sql`(unixepoch() * 1000)`),
         lastLoginAt: integer("last_login_at", { mode: "timestamp_ms" }),
     },
-    (t) => [uniqueIndex("identities_tenant_provider_subject_uidx").on(t.tenantId, t.provider, t.subject), index("identities_user_idx").on(t.userId)],
+    (t) => [
+        uniqueIndex("identities_tenant_provider_subject_uidx").on(
+            t.tenantId,
+            t.provider,
+            t.subject,
+        ),
+        index("identities_user_idx").on(t.userId),
+    ],
 );
 
 /**
@@ -153,7 +175,10 @@ export const identityProviders = sqliteTable(
             .notNull()
             .default(sql`(unixepoch() * 1000)`),
     },
-    (t) => [index("idp_tenant_idx").on(t.tenantId), uniqueIndex("idp_tenant_name_uidx").on(t.tenantId, t.name)],
+    (t) => [
+        index("idp_tenant_idx").on(t.tenantId),
+        uniqueIndex("idp_tenant_name_uidx").on(t.tenantId, t.name),
+    ],
 );
 
 // ---------- Session ----------
@@ -189,7 +214,11 @@ export const sessions = sqliteTable(
         expiresAt: integer("expires_at", { mode: "timestamp_ms" }).notNull(),
         revokedAt: integer("revoked_at", { mode: "timestamp_ms" }),
     },
-    (t) => [uniqueIndex("sessions_idp_session_id_uidx").on(t.idpSessionId), index("sessions_user_idx").on(t.userId), index("sessions_expires_idx").on(t.expiresAt)],
+    (t) => [
+        uniqueIndex("sessions_idp_session_id_uidx").on(t.idpSessionId),
+        index("sessions_user_idx").on(t.userId),
+        index("sessions_expires_idx").on(t.expiresAt),
+    ],
 );
 
 // ---------- OIDC ----------
@@ -228,7 +257,10 @@ export const oidcClients = sqliteTable(
             .notNull()
             .default(sql`(unixepoch() * 1000)`),
     },
-    (t) => [uniqueIndex("oidc_clients_tenant_client_id_uidx").on(t.tenantId, t.clientId), index("oidc_clients_tenant_idx").on(t.tenantId)],
+    (t) => [
+        uniqueIndex("oidc_clients_tenant_client_id_uidx").on(t.tenantId, t.clientId),
+        index("oidc_clients_tenant_idx").on(t.tenantId),
+    ],
 );
 
 export const oidcGrants = sqliteTable(
@@ -259,7 +291,11 @@ export const oidcGrants = sqliteTable(
             .notNull()
             .default(sql`(unixepoch() * 1000)`),
     },
-    (t) => [uniqueIndex("oidc_grants_code_uidx").on(t.code), index("oidc_grants_tenant_client_idx").on(t.tenantId, t.clientId), index("oidc_grants_expires_idx").on(t.expiresAt)],
+    (t) => [
+        uniqueIndex("oidc_grants_code_uidx").on(t.code),
+        index("oidc_grants_tenant_client_idx").on(t.tenantId, t.clientId),
+        index("oidc_grants_expires_idx").on(t.expiresAt),
+    ],
 );
 
 export const oidcRefreshTokens = sqliteTable(
@@ -285,7 +321,10 @@ export const oidcRefreshTokens = sqliteTable(
             .notNull()
             .default(sql`(unixepoch() * 1000)`),
     },
-    (t) => [uniqueIndex("oidc_refresh_tokens_hash_uidx").on(t.tokenHash), index("oidc_refresh_tokens_user_idx").on(t.userId)],
+    (t) => [
+        uniqueIndex("oidc_refresh_tokens_hash_uidx").on(t.tokenHash),
+        index("oidc_refresh_tokens_user_idx").on(t.userId),
+    ],
 );
 
 // ---------- SAML ----------
@@ -302,15 +341,23 @@ export const samlSps = sqliteTable(
         entityId: text("entity_id").notNull(),
         name: text("name").notNull(),
         acsUrl: text("acs_url").notNull(),
-        acsBinding: text("acs_binding").notNull().default("urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"),
+        acsBinding: text("acs_binding")
+            .notNull()
+            .default("urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"),
         sloUrl: text("slo_url"),
         sloBinding: text("slo_binding"),
         cert: text("cert"),
-        nameIdFormat: text("name_id_format").notNull().default("urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"),
+        nameIdFormat: text("name_id_format")
+            .notNull()
+            .default("urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"),
         signAssertion: integer("sign_assertion", { mode: "boolean" }).notNull().default(true),
         signResponse: integer("sign_response", { mode: "boolean" }).notNull().default(false),
-        encryptAssertion: integer("encrypt_assertion", { mode: "boolean" }).notNull().default(false),
-        wantAuthnRequestsSigned: integer("want_authn_requests_signed", { mode: "boolean" }).notNull().default(false),
+        encryptAssertion: integer("encrypt_assertion", { mode: "boolean" })
+            .notNull()
+            .default(false),
+        wantAuthnRequestsSigned: integer("want_authn_requests_signed", { mode: "boolean" })
+            .notNull()
+            .default(false),
         attributeMappingJson: text("attribute_mapping_json"),
         // JSON 배열 문자열 (예: ["email","department"]). NULL 이면 기본 최소 집합만 허용.
         allowedAttributes: text("allowed_attributes"),
@@ -322,7 +369,10 @@ export const samlSps = sqliteTable(
             .notNull()
             .default(sql`(unixepoch() * 1000)`),
     },
-    (t) => [uniqueIndex("saml_sps_tenant_entity_id_uidx").on(t.tenantId, t.entityId), index("saml_sps_tenant_idx").on(t.tenantId)],
+    (t) => [
+        uniqueIndex("saml_sps_tenant_entity_id_uidx").on(t.tenantId, t.entityId),
+        index("saml_sps_tenant_idx").on(t.tenantId),
+    ],
 );
 
 export const samlSessions = sqliteTable(
@@ -350,7 +400,10 @@ export const samlSessions = sqliteTable(
             .default(sql`(unixepoch() * 1000)`),
         endedAt: integer("ended_at", { mode: "timestamp_ms" }),
     },
-    (t) => [uniqueIndex("saml_sessions_session_index_uidx").on(t.sessionIndex), index("saml_sessions_tenant_sp_idx").on(t.tenantId, t.spId)],
+    (t) => [
+        uniqueIndex("saml_sessions_session_index_uidx").on(t.sessionIndex),
+        index("saml_sessions_tenant_sp_idx").on(t.tenantId, t.spId),
+    ],
 );
 
 // ---------- Keys & Audit ----------
@@ -383,7 +436,10 @@ export const signingKeys = sqliteTable(
         rotatedAt: integer("rotated_at", { mode: "timestamp_ms" }),
         notAfter: integer("not_after", { mode: "timestamp_ms" }),
     },
-    (t) => [uniqueIndex("signing_keys_tenant_kid_uidx").on(t.tenantId, t.kid), index("signing_keys_tenant_active_idx").on(t.tenantId, t.active)],
+    (t) => [
+        uniqueIndex("signing_keys_tenant_kid_uidx").on(t.tenantId, t.kid),
+        index("signing_keys_tenant_active_idx").on(t.tenantId, t.active),
+    ],
 );
 
 export const auditEvents = sqliteTable(
@@ -407,7 +463,11 @@ export const auditEvents = sqliteTable(
             .notNull()
             .default(sql`(unixepoch() * 1000)`),
     },
-    (t) => [index("audit_events_tenant_kind_idx").on(t.tenantId, t.kind), index("audit_events_tenant_created_idx").on(t.tenantId, t.createdAt), index("audit_events_user_idx").on(t.userId)],
+    (t) => [
+        index("audit_events_tenant_kind_idx").on(t.tenantId, t.kind),
+        index("audit_events_tenant_created_idx").on(t.tenantId, t.createdAt),
+        index("audit_events_user_idx").on(t.userId),
+    ],
 );
 
 // ---------- Organization ----------
@@ -435,7 +495,10 @@ export const positions = sqliteTable(
             .notNull()
             .default(sql`(unixepoch() * 1000)`),
     },
-    (t) => [index("positions_tenant_idx").on(t.tenantId), uniqueIndex("positions_tenant_code_uidx").on(t.tenantId, t.code)],
+    (t) => [
+        index("positions_tenant_idx").on(t.tenantId),
+        uniqueIndex("positions_tenant_code_uidx").on(t.tenantId, t.code),
+    ],
 );
 
 /**
@@ -469,7 +532,11 @@ export const departments = sqliteTable(
             .notNull()
             .default(sql`(unixepoch() * 1000)`),
     },
-    (t) => [index("departments_tenant_idx").on(t.tenantId), index("departments_parent_idx").on(t.parentId), uniqueIndex("departments_tenant_code_uidx").on(t.tenantId, t.code)],
+    (t) => [
+        index("departments_tenant_idx").on(t.tenantId),
+        index("departments_parent_idx").on(t.parentId),
+        uniqueIndex("departments_tenant_code_uidx").on(t.tenantId, t.code),
+    ],
 );
 
 /**
@@ -501,7 +568,11 @@ export const teams = sqliteTable(
             .notNull()
             .default(sql`(unixepoch() * 1000)`),
     },
-    (t) => [index("teams_tenant_idx").on(t.tenantId), index("teams_department_idx").on(t.departmentId), uniqueIndex("teams_tenant_code_uidx").on(t.tenantId, t.code)],
+    (t) => [
+        index("teams_tenant_idx").on(t.tenantId),
+        index("teams_department_idx").on(t.departmentId),
+        uniqueIndex("teams_tenant_code_uidx").on(t.tenantId, t.code),
+    ],
 );
 
 /**
@@ -535,7 +606,11 @@ export const userDepartments = sqliteTable(
             .notNull()
             .default(sql`(unixepoch() * 1000)`),
     },
-    (t) => [index("user_departments_user_idx").on(t.userId), index("user_departments_dept_idx").on(t.departmentId), index("user_departments_tenant_idx").on(t.tenantId)],
+    (t) => [
+        index("user_departments_user_idx").on(t.userId),
+        index("user_departments_dept_idx").on(t.departmentId),
+        index("user_departments_tenant_idx").on(t.tenantId),
+    ],
 );
 
 /**
@@ -565,7 +640,11 @@ export const parts = sqliteTable(
             .notNull()
             .default(sql`(unixepoch() * 1000)`),
     },
-    (t) => [index("parts_tenant_idx").on(t.tenantId), index("parts_team_idx").on(t.teamId), uniqueIndex("parts_tenant_code_uidx").on(t.tenantId, t.code)],
+    (t) => [
+        index("parts_tenant_idx").on(t.tenantId),
+        index("parts_team_idx").on(t.teamId),
+        uniqueIndex("parts_tenant_code_uidx").on(t.tenantId, t.code),
+    ],
 );
 
 /**
@@ -596,7 +675,11 @@ export const userParts = sqliteTable(
             .notNull()
             .default(sql`(unixepoch() * 1000)`),
     },
-    (t) => [index("user_parts_user_idx").on(t.userId), index("user_parts_part_idx").on(t.partId), index("user_parts_tenant_idx").on(t.tenantId)],
+    (t) => [
+        index("user_parts_user_idx").on(t.userId),
+        index("user_parts_part_idx").on(t.partId),
+        index("user_parts_tenant_idx").on(t.tenantId),
+    ],
 );
 
 /**
@@ -629,7 +712,11 @@ export const userTeams = sqliteTable(
             .notNull()
             .default(sql`(unixepoch() * 1000)`),
     },
-    (t) => [index("user_teams_user_idx").on(t.userId), index("user_teams_team_idx").on(t.teamId), index("user_teams_tenant_idx").on(t.tenantId)],
+    (t) => [
+        index("user_teams_user_idx").on(t.userId),
+        index("user_teams_team_idx").on(t.teamId),
+        index("user_teams_tenant_idx").on(t.tenantId),
+    ],
 );
 
 // ---------- WebAuthn Challenges ----------
@@ -648,7 +735,10 @@ export const webauthnChallenges = sqliteTable(
         expiresAt: integer("expires_at", { mode: "timestamp_ms" }).notNull(),
         usedAt: integer("used_at", { mode: "timestamp_ms" }),
     },
-    (t) => [uniqueIndex("webauthn_challenges_challenge_uidx").on(t.challenge), index("webauthn_challenges_expires_idx").on(t.expiresAt)],
+    (t) => [
+        uniqueIndex("webauthn_challenges_challenge_uidx").on(t.challenge),
+        index("webauthn_challenges_expires_idx").on(t.expiresAt),
+    ],
 );
 
 // ---------- Types ----------
diff --git a/src/lib/server/ldap/auth.ts b/src/lib/server/ldap/auth.ts
index 14c25fb..b6dc499 100644
--- a/src/lib/server/ldap/auth.ts
+++ b/src/lib/server/ldap/auth.ts
@@ -37,12 +37,19 @@ function escapeLdapDn(input: string): string {
  *
  * 인증 실패 시 null 반환, 서버 오류는 throw.
  */
-export async function authenticateLdap(config: LdapProviderConfig, username: string, password: string): Promise<LdapUserAttrs | null> {
+export async function authenticateLdap(
+    config: LdapProviderConfig,
+    username: string,
+    password: string,
+): Promise<LdapUserAttrs | null> {
     let userDn: string;
 
     if (config.bindDN && config.bindPassword) {
         // Search 방식: admin bind → uid 검색으로 실제 DN 확정
-        const filter = (config.userSearchFilter ?? "(uid={username})").replace("{username}", escapeLdapFilter(username));
+        const filter = (config.userSearchFilter ?? "(uid={username})").replace(
+            "{username}",
+            escapeLdapFilter(username),
+        );
         const found = await ldapSearchDn(config, config.bindDN, config.bindPassword, filter);
         if (!found) return null; // 유저 없음
         userDn = found;
@@ -68,7 +75,12 @@ export async function authenticateLdap(config: LdapProviderConfig, username: str
 
     let entry: Record<string, string> | null = null;
     try {
-        entry = await ldapFetchEntry(config, userDn, password, userDn, [emailAttr, displayNameAttr, givenNameAttr, familyNameAttr]);
+        entry = await ldapFetchEntry(config, userDn, password, userDn, [
+            emailAttr,
+            displayNameAttr,
+            givenNameAttr,
+            familyNameAttr,
+        ]);
     } catch {
         // 속성 조회 실패해도 인증은 성공으로 처리
     }
diff --git a/src/lib/server/ldap/client.ts b/src/lib/server/ldap/client.ts
index df4db0d..30316ba 100644
--- a/src/lib/server/ldap/client.ts
+++ b/src/lib/server/ldap/client.ts
@@ -16,7 +16,11 @@ function createLdapClient(config: LdapProviderConfig): ldap.Client {
 }
 
 /** DN + 패스워드로 LDAP bind. 실패 시 throw. */
-export async function ldapBind(config: LdapProviderConfig, dn: string, password: string): Promise<void> {
+export async function ldapBind(
+    config: LdapProviderConfig,
+    dn: string,
+    password: string,
+): Promise<void> {
     return new Promise((resolve, reject) => {
         const client = createLdapClient(config);
 
@@ -36,7 +40,12 @@ export async function ldapBind(config: LdapProviderConfig, dn: string, password:
  * Admin bind 후 baseDN 아래에서 filter 에 맞는 첫 번째 엔트리의 DN 을 반환한다.
  * ou 가 여러 개인 서버에서 유저 DN 을 찾을 때 사용.
  */
-export async function ldapSearchDn(config: LdapProviderConfig, bindDn: string, bindPassword: string, filter: string): Promise<string | null> {
+export async function ldapSearchDn(
+    config: LdapProviderConfig,
+    bindDn: string,
+    bindPassword: string,
+    filter: string,
+): Promise<string | null> {
     return new Promise((resolve, reject) => {
         const client = createLdapClient(config);
 
@@ -51,35 +60,45 @@ export async function ldapSearchDn(config: LdapProviderConfig, bindDn: string, b
                 return;
             }
 
-            client.search(config.baseDN, { scope: "sub", filter, attributes: ["dn"] }, (searchErr: Error | null, res: ldap.SearchCallbackResponse) => {
-                if (searchErr) {
-                    client.unbind();
-                    reject(searchErr);
-                    return;
-                }
-
-                let foundDn: string | null = null;
-
-                res.on("searchEntry", (e: ldap.SearchEntry) => {
-                    if (!foundDn) foundDn = e.dn.toString();
-                });
-
-                res.on("error", (err: Error) => {
-                    client.unbind();
-                    reject(err);
-                });
-
-                res.on("end", () => {
-                    client.unbind();
-                    resolve(foundDn);
-                });
-            });
+            client.search(
+                config.baseDN,
+                { scope: "sub", filter, attributes: ["dn"] },
+                (searchErr: Error | null, res: ldap.SearchCallbackResponse) => {
+                    if (searchErr) {
+                        client.unbind();
+                        reject(searchErr);
+                        return;
+                    }
+
+                    let foundDn: string | null = null;
+
+                    res.on("searchEntry", (e: ldap.SearchEntry) => {
+                        if (!foundDn) foundDn = e.dn.toString();
+                    });
+
+                    res.on("error", (err: Error) => {
+                        client.unbind();
+                        reject(err);
+                    });
+
+                    res.on("end", () => {
+                        client.unbind();
+                        resolve(foundDn);
+                    });
+                },
+            );
         });
     });
 }
 
 /** bind 후 단일 엔트리의 속성을 조회한다. */
-export async function ldapFetchEntry(config: LdapProviderConfig, bindDn: string, bindPassword: string, entryDn: string, attributes: string[]): Promise<Record<string, string> | null> {
+export async function ldapFetchEntry(
+    config: LdapProviderConfig,
+    bindDn: string,
+    bindPassword: string,
+    entryDn: string,
+    attributes: string[],
+): Promise<Record<string, string> | null> {
     return new Promise((resolve, reject) => {
         const client = createLdapClient(config);
 
@@ -94,33 +113,37 @@ export async function ldapFetchEntry(config: LdapProviderConfig, bindDn: string,
                 return;
             }
 
-            client.search(entryDn, { scope: "base", filter: "(objectClass=*)", attributes }, (searchErr: Error | null, res: ldap.SearchCallbackResponse) => {
-                if (searchErr) {
-                    client.unbind();
-                    reject(searchErr);
-                    return;
-                }
-
-                let entry: Record<string, string> | null = null;
-
-                res.on("searchEntry", (e: ldap.SearchEntry) => {
-                    const obj: Record<string, string> = {};
-                    for (const attr of e.attributes) {
-                        obj[attr.type] = Array.isArray(attr.vals) ? (attr.vals[0] ?? "") : "";
+            client.search(
+                entryDn,
+                { scope: "base", filter: "(objectClass=*)", attributes },
+                (searchErr: Error | null, res: ldap.SearchCallbackResponse) => {
+                    if (searchErr) {
+                        client.unbind();
+                        reject(searchErr);
+                        return;
                     }
-                    entry = obj;
-                });
-
-                res.on("error", (err: Error) => {
-                    client.unbind();
-                    reject(err);
-                });
-
-                res.on("end", () => {
-                    client.unbind();
-                    resolve(entry);
-                });
-            });
+
+                    let entry: Record<string, string> | null = null;
+
+                    res.on("searchEntry", (e: ldap.SearchEntry) => {
+                        const obj: Record<string, string> = {};
+                        for (const attr of e.attributes) {
+                            obj[attr.type] = Array.isArray(attr.vals) ? (attr.vals[0] ?? "") : "";
+                        }
+                        entry = obj;
+                    });
+
+                    res.on("error", (err: Error) => {
+                        client.unbind();
+                        reject(err);
+                    });
+
+                    res.on("end", () => {
+                        client.unbind();
+                        resolve(entry);
+                    });
+                },
+            );
         });
     });
 }
diff --git a/src/lib/server/ldap/provision.ts b/src/lib/server/ldap/provision.ts
index 451f19e..32f3a4d 100644
--- a/src/lib/server/ldap/provision.ts
+++ b/src/lib/server/ldap/provision.ts
@@ -11,14 +11,25 @@ import type { LdapUserAttrs } from "./types";
  * 2. 같은 이메일의 로컬 유저 존재 → identity 연결 후 반환
  * 3. 완전 신규 → users + identities 생성
  */
-export async function provisionLdapUser(db: DB, tenantId: string, providerId: string, attrs: LdapUserAttrs): Promise<User> {
+export async function provisionLdapUser(
+    db: DB,
+    tenantId: string,
+    providerId: string,
+    attrs: LdapUserAttrs,
+): Promise<User> {
     const provider = `ldap:${providerId}`;
 
     // 1. 기존 LDAP identity 확인
     const [existingIdentity] = await db
         .select({ userId: identities.userId })
         .from(identities)
-        .where(and(eq(identities.tenantId, tenantId), eq(identities.provider, provider), eq(identities.subject, attrs.dn)))
+        .where(
+            and(
+                eq(identities.tenantId, tenantId),
+                eq(identities.provider, provider),
+                eq(identities.subject, attrs.dn),
+            ),
+        )
         .limit(1);
 
     if (existingIdentity) {
@@ -36,7 +47,13 @@ export async function provisionLdapUser(db: DB, tenantId: string, providerId: st
         await db
             .update(identities)
             .set({ email: attrs.email, lastLoginAt: new Date() })
-            .where(and(eq(identities.tenantId, tenantId), eq(identities.provider, provider), eq(identities.subject, attrs.dn)));
+            .where(
+                and(
+                    eq(identities.tenantId, tenantId),
+                    eq(identities.provider, provider),
+                    eq(identities.subject, attrs.dn),
+                ),
+            );
 
         const [user] = await db
             .select()
@@ -54,11 +71,20 @@ export async function provisionLdapUser(db: DB, tenantId: string, providerId: st
     const [existingUser] = await db
         .select()
         .from(users)
-        .where(and(eq(users.tenantId, tenantId), eq(users.email, attrs.email), eq(users.status, "active")))
+        .where(
+            and(
+                eq(users.tenantId, tenantId),
+                eq(users.email, attrs.email),
+                eq(users.status, "active"),
+            ),
+        )
         .limit(1);
 
     if (existingUser) {
-        throw new Error(`이미 동일한 이메일(${attrs.email})의 로컬 계정이 존재합니다. ` + "LDAP 계정 연결은 관리자에게 문의하세요.");
+        throw new Error(
+            `이미 동일한 이메일(${attrs.email})의 로컬 계정이 존재합니다. ` +
+                "LDAP 계정 연결은 관리자에게 문의하세요.",
+        );
     }
 
     // 3. 완전 신규 유저 생성
diff --git a/src/lib/server/oidc/client.ts b/src/lib/server/oidc/client.ts
index 9ba0fb9..19e007f 100644
--- a/src/lib/server/oidc/client.ts
+++ b/src/lib/server/oidc/client.ts
@@ -5,16 +5,28 @@ import { verifyPassword } from "$lib/server/auth/password";
 
 export type OidcClientRecord = typeof oidcClients.$inferSelect;
 
-export async function findOidcClient(db: DB, tenantId: string, clientId: string): Promise<OidcClientRecord | null> {
+export async function findOidcClient(
+    db: DB,
+    tenantId: string,
+    clientId: string,
+): Promise<OidcClientRecord | null> {
     const [client] = await db
         .select()
         .from(oidcClients)
-        .where(and(eq(oidcClients.tenantId, tenantId), eq(oidcClients.clientId, clientId), eq(oidcClients.enabled, true)))
+        .where(
+            and(
+                eq(oidcClients.tenantId, tenantId),
+                eq(oidcClients.clientId, clientId),
+                eq(oidcClients.enabled, true),
+            ),
+        )
         .limit(1);
     return client ?? null;
 }
 
-export function parseBasicAuth(authHeader: string): { clientId: string; clientSecret: string } | null {
+export function parseBasicAuth(
+    authHeader: string,
+): { clientId: string; clientSecret: string } | null {
     if (!authHeader.startsWith("Basic ")) return null;
     const decoded = atob(authHeader.slice(6));
     const sep = decoded.indexOf(":");
@@ -28,7 +40,10 @@ export function parseBasicAuth(authHeader: string): { clientId: string; clientSe
     }
 }
 
-export async function isValidClientSecret(client: OidcClientRecord, clientSecret: string): Promise<boolean> {
+export async function isValidClientSecret(
+    client: OidcClientRecord,
+    clientSecret: string,
+): Promise<boolean> {
     if (client.tokenEndpointAuthMethod === "none") return true;
     if (!client.clientSecretHash || !clientSecret) return false;
     const result = await verifyPassword(clientSecret, client.clientSecretHash);
diff --git a/src/lib/server/oidc/grant.ts b/src/lib/server/oidc/grant.ts
index 5fde518..41535cc 100644
--- a/src/lib/server/oidc/grant.ts
+++ b/src/lib/server/oidc/grant.ts
@@ -29,12 +29,25 @@ export async function createGrant(db: DB, params: CreateGrantParams): Promise<vo
     });
 }
 
-export async function findGrant(db: DB, tenantId: string, clientId: string, code: string): Promise<OidcGrantRecord | null> {
+export async function findGrant(
+    db: DB,
+    tenantId: string,
+    clientId: string,
+    code: string,
+): Promise<OidcGrantRecord | null> {
     const now = new Date();
     const [grant] = await db
         .select()
         .from(oidcGrants)
-        .where(and(eq(oidcGrants.code, code), eq(oidcGrants.tenantId, tenantId), eq(oidcGrants.clientId, clientId), isNull(oidcGrants.usedAt), gt(oidcGrants.expiresAt, now)))
+        .where(
+            and(
+                eq(oidcGrants.code, code),
+                eq(oidcGrants.tenantId, tenantId),
+                eq(oidcGrants.clientId, clientId),
+                isNull(oidcGrants.usedAt),
+                gt(oidcGrants.expiresAt, now),
+            ),
+        )
         .limit(1);
     return grant ?? null;
 }
@@ -47,12 +60,25 @@ export async function consumeGrant(db: DB, grantId: string): Promise<void> {
  * grant 를 원자적으로 조회 + 소진한다.
  * UPDATE ... WHERE usedAt IS NULL RETURNING 으로 경쟁 조건 없이 1회만 사용 가능.
  */
-export async function findAndConsumeGrant(db: DB, tenantId: string, clientId: string, code: string): Promise<OidcGrantRecord | null> {
+export async function findAndConsumeGrant(
+    db: DB,
+    tenantId: string,
+    clientId: string,
+    code: string,
+): Promise<OidcGrantRecord | null> {
     const now = new Date();
     const [grant] = await db
         .update(oidcGrants)
         .set({ usedAt: now })
-        .where(and(eq(oidcGrants.code, code), eq(oidcGrants.tenantId, tenantId), eq(oidcGrants.clientId, clientId), isNull(oidcGrants.usedAt), gt(oidcGrants.expiresAt, now)))
+        .where(
+            and(
+                eq(oidcGrants.code, code),
+                eq(oidcGrants.tenantId, tenantId),
+                eq(oidcGrants.clientId, clientId),
+                isNull(oidcGrants.usedAt),
+                gt(oidcGrants.expiresAt, now),
+            ),
+        )
         .returning();
     return grant ?? null;
 }
diff --git a/src/lib/server/oidc/pkce.ts b/src/lib/server/oidc/pkce.ts
index 9abac72..6e9bd26 100644
--- a/src/lib/server/oidc/pkce.ts
+++ b/src/lib/server/oidc/pkce.ts
@@ -1,6 +1,10 @@
 import { b64uEncode } from "$lib/server/crypto/keys";
 
-export async function verifyPkce(codeChallenge: string, codeChallengeMethod: string, codeVerifier: string): Promise<boolean> {
+export async function verifyPkce(
+    codeChallenge: string,
+    codeChallengeMethod: string,
+    codeVerifier: string,
+): Promise<boolean> {
     if (codeChallengeMethod === "S256") {
         const enc = new TextEncoder();
         const hash = await crypto.subtle.digest("SHA-256", enc.encode(codeVerifier));
diff --git a/src/lib/server/org/membership.ts b/src/lib/server/org/membership.ts
index 5027a59..211943c 100644
--- a/src/lib/server/org/membership.ts
+++ b/src/lib/server/org/membership.ts
@@ -1,6 +1,14 @@
 import { and, eq, isNull } from "drizzle-orm";
 import type { DB } from "$lib/server/db";
-import { departments, parts, positions, teams, userDepartments, userParts, userTeams } from "$lib/server/db/schema";
+import {
+    departments,
+    parts,
+    positions,
+    teams,
+    userDepartments,
+    userParts,
+    userTeams,
+} from "$lib/server/db/schema";
 
 export interface DepartmentMembership {
     id: string;
@@ -82,7 +90,10 @@ export async function getUserMembership(db: DB, userId: string): Promise<UserMem
         code: r.deptCode,
         isPrimary: Boolean(r.isPrimary),
         jobTitle: r.jobTitle,
-        position: r.posId != null ? { id: r.posId, name: r.posName!, code: r.posCode, level: r.posLevel! } : null,
+        position:
+            r.posId != null
+                ? { id: r.posId, name: r.posName!, code: r.posCode, level: r.posLevel! }
+                : null,
     }));
 
     const mappedTeams: TeamMembership[] = teamRows.map((r) => ({
diff --git a/src/lib/server/ratelimit/index.ts b/src/lib/server/ratelimit/index.ts
index b7f36a4..3808fc3 100644
--- a/src/lib/server/ratelimit/index.ts
+++ b/src/lib/server/ratelimit/index.ts
@@ -29,7 +29,11 @@ export interface RateLimitOptions {
  * SELECT→UPDATE 분리 대신 단일 INSERT...ON CONFLICT DO UPDATE...RETURNING 으로
  * 원자적으로 처리해 동시 요청 race condition 을 제거한다.
  */
-export async function checkRateLimit(db: DB, key: string, options: RateLimitOptions): Promise<RateLimitResult> {
+export async function checkRateLimit(
+    db: DB,
+    key: string,
+    options: RateLimitOptions,
+): Promise<RateLimitResult> {
     const now = Date.now();
     const newExpiresAt = new Date(now + options.windowMs);
 
diff --git a/src/lib/server/saml/metadata.ts b/src/lib/server/saml/metadata.ts
index 925601b..c59036c 100644
--- a/src/lib/server/saml/metadata.ts
+++ b/src/lib/server/saml/metadata.ts
@@ -15,14 +15,28 @@ function pemToBase64(pem: string): string {
 }
 
 function xmlEscape(str: string): string {
-    return str.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+    return str
+        .replace(/&/g, "&amp;")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;");
 }
 
-export async function generateIdpMetadataXml(db: DB, tenantId: string, issuerUrl: string): Promise<string> {
+export async function generateIdpMetadataXml(
+    db: DB,
+    tenantId: string,
+    issuerUrl: string,
+): Promise<string> {
     const [keyRow] = await db
         .select({ certPem: signingKeys.certPem })
         .from(signingKeys)
-        .where(and(eq(signingKeys.tenantId, tenantId), eq(signingKeys.active, true), isNull(signingKeys.rotatedAt)))
+        .where(
+            and(
+                eq(signingKeys.tenantId, tenantId),
+                eq(signingKeys.active, true),
+                isNull(signingKeys.rotatedAt),
+            ),
+        )
         .limit(1);
 
     const ssoUrl = `${issuerUrl}/saml/sso`;
diff --git a/src/lib/server/saml/parse-authn-request.ts b/src/lib/server/saml/parse-authn-request.ts
index 2a10b14..4afadb6 100644
--- a/src/lib/server/saml/parse-authn-request.ts
+++ b/src/lib/server/saml/parse-authn-request.ts
@@ -14,7 +14,9 @@ const MAX_DECOMPRESSED_BYTES = 64 * 1024; // 64 KB
 
 async function inflateRaw(compressed: Uint8Array<ArrayBuffer>): Promise<string> {
     if (compressed.length > MAX_COMPRESSED_BYTES) {
-        throw new Error(`SAMLRequest 압축 데이터가 너무 큽니다 (${compressed.length} > ${MAX_COMPRESSED_BYTES})`);
+        throw new Error(
+            `SAMLRequest 압축 데이터가 너무 큽니다 (${compressed.length} > ${MAX_COMPRESSED_BYTES})`,
+        );
     }
 
     const ds = new DecompressionStream("deflate-raw");
@@ -32,7 +34,9 @@ async function inflateRaw(compressed: Uint8Array<ArrayBuffer>): Promise<string>
         if (value) {
             totalSize += value.length;
             if (totalSize > MAX_DECOMPRESSED_BYTES) {
-                throw new Error(`SAMLRequest 압축 해제 크기가 너무 큽니다 (> ${MAX_DECOMPRESSED_BYTES})`);
+                throw new Error(
+                    `SAMLRequest 압축 해제 크기가 너무 큽니다 (> ${MAX_DECOMPRESSED_BYTES})`,
+                );
             }
             chunks.push(value);
         }
@@ -54,7 +58,10 @@ async function inflateRaw(compressed: Uint8Array<ArrayBuffer>): Promise<string>
  * SP 인증서의 공개 키로 SigAlg + 서명을 확인한다.
  * rawQueryString: URL 의 '?' 이후 문자열 (URL 인코딩 그대로)
  */
-export async function verifySamlRedirectSignature(rawQueryString: string, certPem: string): Promise<boolean> {
+export async function verifySamlRedirectSignature(
+    rawQueryString: string,
+    certPem: string,
+): Promise<boolean> {
     try {
         const params = rawQueryString.split("&");
         const samlRequestPart = params.find((p) => p.startsWith("SAMLRequest="));
@@ -65,7 +72,9 @@ export async function verifySamlRedirectSignature(rawQueryString: string, certPe
         if (!samlRequestPart || !sigAlgPart || !signaturePart) return false;
 
         const sigAlgValue = decodeURIComponent(sigAlgPart.slice(sigAlgPart.indexOf("=") + 1));
-        const signatureB64 = decodeURIComponent(signaturePart.slice(signaturePart.indexOf("=") + 1));
+        const signatureB64 = decodeURIComponent(
+            signaturePart.slice(signaturePart.indexOf("=") + 1),
+        );
 
         // 서명 대상 문자열: SAMLRequest[&RelayState]&SigAlg (원본 URL 인코딩 유지)
         const signedParts = [samlRequestPart];
@@ -86,7 +95,9 @@ export async function verifySamlRedirectSignature(rawQueryString: string, certPe
         // SP 인증서에서 공개 키(SPKI) 추출
         const cert = new X509Certificate(certPem);
         const spkiDer = cert.publicKey.rawData;
-        const publicKey = await crypto.subtle.importKey("spki", spkiDer, algorithm, false, ["verify"]);
+        const publicKey = await crypto.subtle.importKey("spki", spkiDer, algorithm, false, [
+            "verify",
+        ]);
 
         const sigBytes = Uint8Array.from(atob(signatureB64), (c) => c.charCodeAt(0));
         const enc = new TextEncoder();
@@ -126,7 +137,10 @@ function parseBoolAttr(val: string | null): boolean {
     return val === "true" || val === "1";
 }
 
-export async function parseAuthnRequest(samlRequestB64: string, relayState: string | null): Promise<ParsedAuthnRequest> {
+export async function parseAuthnRequest(
+    samlRequestB64: string,
+    relayState: string | null,
+): Promise<ParsedAuthnRequest> {
     // HTTP-Redirect 바인딩은 표준 base64 (base64url 이 아님)
     const raw = atob(samlRequestB64);
     const binary = new Uint8Array(raw.length) as Uint8Array<ArrayBuffer>;
@@ -152,12 +166,18 @@ export async function parseAuthnRequest(samlRequestB64: string, relayState: stri
     const issuer = issuerEls[0]?.textContent?.trim() ?? "";
 
     // RequestedAuthnContext 파싱
-    const racEls = doc.getElementsByTagNameNS("urn:oasis:names:tc:SAML:2.0:protocol", "RequestedAuthnContext");
+    const racEls = doc.getElementsByTagNameNS(
+        "urn:oasis:names:tc:SAML:2.0:protocol",
+        "RequestedAuthnContext",
+    );
     let requestedAuthnContext: RequestedAuthnContext | null = null;
     const racEl = racEls[0];
     if (racEl) {
         const comparison = racEl.getAttribute("Comparison") ?? "exact";
-        const classRefEls = racEl.getElementsByTagNameNS("urn:oasis:names:tc:SAML:2.0:assertion", "AuthnContextClassRef");
+        const classRefEls = racEl.getElementsByTagNameNS(
+            "urn:oasis:names:tc:SAML:2.0:assertion",
+            "AuthnContextClassRef",
+        );
         const classRefs: string[] = [];
         for (let i = 0; i < classRefEls.length; i++) {
             const text = classRefEls[i]?.textContent?.trim();
diff --git a/src/lib/server/saml/response.ts b/src/lib/server/saml/response.ts
index 7ff389a..633a637 100644
--- a/src/lib/server/saml/response.ts
+++ b/src/lib/server/saml/response.ts
@@ -11,7 +11,12 @@
 import { ensureXmlEngine, xmldsigjs } from "./xml-setup";
 
 function xmlEscape(str: string): string {
-    return str.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
+    return str
+        .replace(/&/g, "&amp;")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;")
+        .replace(/'/g, "&apos;");
 }
 
 function toIso(d: Date): string {
@@ -115,7 +120,10 @@ export async function buildSignedSamlResponse(params: BuildSamlResponseParams):
     const responseDoc = xmldsigjs.Parse(fullXml);
 
     // Assertion 엘리먼트 찾기
-    const assertionEls = responseDoc.getElementsByTagNameNS("urn:oasis:names:tc:SAML:2.0:assertion", "Assertion");
+    const assertionEls = responseDoc.getElementsByTagNameNS(
+        "urn:oasis:names:tc:SAML:2.0:assertion",
+        "Assertion",
+    );
     const assertionEl = assertionEls[0] as Element & {
         setIdAttribute?: (name: string, flag: boolean) => void;
     };
@@ -127,7 +135,8 @@ export async function buildSignedSamlResponse(params: BuildSamlResponseParams):
     const signedXml = new xmldsigjs.SignedXml();
     // SignedInfo CanonicalizationMethod 을 exc-c14n 으로 교체 (기본값 standard c14n 은
     // signxml 등 검증기에서 거부되는 경우가 있음)
-    signedXml.XmlSignature.SignedInfo.CanonicalizationMethod.Algorithm = "http://www.w3.org/2001/10/xml-exc-c14n#";
+    signedXml.XmlSignature.SignedInfo.CanonicalizationMethod.Algorithm =
+        "http://www.w3.org/2001/10/xml-exc-c14n#";
     await signedXml.Sign({ name: "RSASSA-PKCS1-v1_5" }, params.privateKey, responseDoc, {
         x509: [certB64],
         references: [
@@ -142,7 +151,10 @@ export async function buildSignedSamlResponse(params: BuildSamlResponseParams):
     // ── 4. Signature 를 Assertion 의 <saml:Issuer> 바로 뒤에 삽입 ────────────
     const sigNode = signedXml.XmlSignature.GetXml();
     if (sigNode) {
-        const issuerEls = assertionEl.getElementsByTagNameNS("urn:oasis:names:tc:SAML:2.0:assertion", "Issuer");
+        const issuerEls = assertionEl.getElementsByTagNameNS(
+            "urn:oasis:names:tc:SAML:2.0:assertion",
+            "Issuer",
+        );
         const issuerEl = issuerEls[0];
         if (issuerEl?.nextSibling) {
             assertionEl.insertBefore(sigNode, issuerEl.nextSibling);
@@ -160,22 +172,30 @@ export async function buildSignedSamlResponse(params: BuildSamlResponseParams):
         responseEl.setIdAttribute?.("ID", true);
 
         const signedXmlResponse = new xmldsigjs.SignedXml();
-        signedXmlResponse.XmlSignature.SignedInfo.CanonicalizationMethod.Algorithm = "http://www.w3.org/2001/10/xml-exc-c14n#";
-        await signedXmlResponse.Sign({ name: "RSASSA-PKCS1-v1_5" }, params.privateKey, responseDoc, {
-            x509: [certB64],
-            references: [
-                {
-                    uri: `#${responseId}`,
-                    hash: "SHA-256",
-                    transforms: ["enveloped", "exc-c14n"],
-                },
-            ],
-        });
+        signedXmlResponse.XmlSignature.SignedInfo.CanonicalizationMethod.Algorithm =
+            "http://www.w3.org/2001/10/xml-exc-c14n#";
+        await signedXmlResponse.Sign(
+            { name: "RSASSA-PKCS1-v1_5" },
+            params.privateKey,
+            responseDoc,
+            {
+                x509: [certB64],
+                references: [
+                    {
+                        uri: `#${responseId}`,
+                        hash: "SHA-256",
+                        transforms: ["enveloped", "exc-c14n"],
+                    },
+                ],
+            },
+        );
 
         const responseSigNode = signedXmlResponse.XmlSignature.GetXml();
         if (responseSigNode) {
             // Response 의 직계 자식 <saml:Issuer> 바로 뒤에 삽입
-            const directIssuer = Array.from(responseDoc.documentElement.childNodes).find((n) => n.nodeType === 1 && (n as Element).localName === "Issuer") as Element | undefined;
+            const directIssuer = Array.from(responseDoc.documentElement.childNodes).find(
+                (n) => n.nodeType === 1 && (n as Element).localName === "Issuer",
+            ) as Element | undefined;
             if (directIssuer?.nextSibling) {
                 responseDoc.documentElement.insertBefore(responseSigNode, directIssuer.nextSibling);
             } else {
@@ -207,7 +227,9 @@ export interface BuildSamlErrorResponseParams {
  * SAML 오류 Response 를 서명하여 base64 인코딩한다.
  * Assertion 없이 Status 만 포함하며, Response 요소를 서명한다.
  */
-export async function buildSignedSamlErrorResponse(params: BuildSamlErrorResponseParams): Promise<string> {
+export async function buildSignedSamlErrorResponse(
+    params: BuildSamlErrorResponseParams,
+): Promise<string> {
     ensureXmlEngine();
 
     const responseId = `_r${crypto.randomUUID().replace(/-/g, "")}`;
@@ -236,15 +258,20 @@ export async function buildSignedSamlErrorResponse(params: BuildSamlErrorRespons
     responseEl.setIdAttribute?.("ID", true);
 
     const signedXml = new xmldsigjs.SignedXml();
-    signedXml.XmlSignature.SignedInfo.CanonicalizationMethod.Algorithm = "http://www.w3.org/2001/10/xml-exc-c14n#";
+    signedXml.XmlSignature.SignedInfo.CanonicalizationMethod.Algorithm =
+        "http://www.w3.org/2001/10/xml-exc-c14n#";
     await signedXml.Sign({ name: "RSASSA-PKCS1-v1_5" }, params.privateKey, responseDoc, {
         x509: [certB64],
-        references: [{ uri: `#${responseId}`, hash: "SHA-256", transforms: ["enveloped", "exc-c14n"] }],
+        references: [
+            { uri: `#${responseId}`, hash: "SHA-256", transforms: ["enveloped", "exc-c14n"] },
+        ],
     });
 
     const sigNode = signedXml.XmlSignature.GetXml();
     if (sigNode) {
-        const issuerEl = Array.from(responseDoc.documentElement.childNodes).find((n) => n.nodeType === 1 && (n as Element).localName === "Issuer") as Element | undefined;
+        const issuerEl = Array.from(responseDoc.documentElement.childNodes).find(
+            (n) => n.nodeType === 1 && (n as Element).localName === "Issuer",
+        ) as Element | undefined;
         if (issuerEl?.nextSibling) {
             responseDoc.documentElement.insertBefore(sigNode, issuerEl.nextSibling);
         } else {
diff --git a/src/lib/server/saml/sp.ts b/src/lib/server/saml/sp.ts
index 3490e47..76438d3 100644
--- a/src/lib/server/saml/sp.ts
+++ b/src/lib/server/saml/sp.ts
@@ -6,11 +6,21 @@ export type SamlSpRecord = typeof samlSps.$inferSelect;
 
 const SAML_SESSION_TTL_MS = 8 * 60 * 60 * 1000; // 8시간
 
-export async function findSp(db: DB, tenantId: string, entityId: string): Promise<SamlSpRecord | null> {
+export async function findSp(
+    db: DB,
+    tenantId: string,
+    entityId: string,
+): Promise<SamlSpRecord | null> {
     const [sp] = await db
         .select()
         .from(samlSps)
-        .where(and(eq(samlSps.tenantId, tenantId), eq(samlSps.entityId, entityId), eq(samlSps.enabled, true)))
+        .where(
+            and(
+                eq(samlSps.tenantId, tenantId),
+                eq(samlSps.entityId, entityId),
+                eq(samlSps.enabled, true),
+            ),
+        )
         .limit(1);
     return sp ?? null;
 }
diff --git a/src/routes/(auth)/login/+page.server.ts b/src/routes/(auth)/login/+page.server.ts
index 82a3a61..2b40bb0 100644
--- a/src/routes/(auth)/login/+page.server.ts
+++ b/src/routes/(auth)/login/+page.server.ts
@@ -3,7 +3,11 @@ import type { Actions, PageServerLoad } from "./$types";
 import { getRequestMetadata, recordAuditEvent } from "$lib/server/audit";
 import { requireDbContext } from "$lib/server/auth/guards";
 import { createSessionRecord, setSessionCookie } from "$lib/server/auth/session";
-import { authenticateLocalUser, hasTotpCredential, normalizeUsername } from "$lib/server/auth/users";
+import {
+    authenticateLocalUser,
+    hasTotpCredential,
+    normalizeUsername,
+} from "$lib/server/auth/users";
 import { createMfaPendingToken, MFA_PENDING_COOKIE } from "$lib/server/auth/mfa";
 import { AMR_PASSWORD, amrToAcr } from "$lib/server/auth/constants";
 import { getRuntimeConfig } from "$lib/server/auth/runtime";
@@ -63,7 +67,9 @@ export const actions: Actions = {
             return fail(503, {
                 username,
                 redirectTo,
-                error: event.locals.runtimeError ?? 'D1 binding "DB" 가 준비되지 않았습니다. Wrangler preview/dev 환경에서 실행해 주세요.',
+                error:
+                    event.locals.runtimeError ??
+                    'D1 binding "DB" 가 준비되지 않았습니다. Wrangler preview/dev 환경에서 실행해 주세요.',
             });
         }
 
@@ -85,7 +91,13 @@ export const actions: Actions = {
         const [ldapProvider] = await db
             .select()
             .from(identityProviders)
-            .where(and(eq(identityProviders.tenantId, tenant.id), eq(identityProviders.kind, "ldap"), eq(identityProviders.enabled, true)))
+            .where(
+                and(
+                    eq(identityProviders.tenantId, tenant.id),
+                    eq(identityProviders.kind, "ldap"),
+                    eq(identityProviders.enabled, true),
+                ),
+            )
             .limit(1);
 
         let user = null;
@@ -97,7 +109,11 @@ export const actions: Actions = {
             const config = getRuntimeConfig(event.platform);
             if (ldapConfig.bindPasswordEnc && !ldapConfig.bindPassword && config.signingKeySecret) {
                 try {
-                    ldapConfig.bindPassword = await decryptSecret(ldapConfig.bindPasswordEnc, config.signingKeySecret, "idp-ldap-bind-password-v1");
+                    ldapConfig.bindPassword = await decryptSecret(
+                        ldapConfig.bindPasswordEnc,
+                        config.signingKeySecret,
+                        "idp-ldap-bind-password-v1",
+                    );
                 } catch {
                     // 복호화 실패 시 인증 진행 불가 — bindPassword 없이 진행하면 null 반환됨
                 }
@@ -143,7 +159,10 @@ export const actions: Actions = {
                 });
             }
 
-            const mfaToken = await createMfaPendingToken({ userId: user.id, tenantId: tenant.id, redirectTo, ip: requestMetadata.ip }, config.signingKeySecret);
+            const mfaToken = await createMfaPendingToken(
+                { userId: user.id, tenantId: tenant.id, redirectTo, ip: requestMetadata.ip },
+                config.signingKeySecret,
+            );
 
             event.cookies.set(MFA_PENDING_COOKIE, mfaToken, {
                 path: "/",
diff --git a/src/routes/(auth)/login/+page.svelte b/src/routes/(auth)/login/+page.svelte
index a4107b2..e08961c 100644
--- a/src/routes/(auth)/login/+page.svelte
+++ b/src/routes/(auth)/login/+page.svelte
@@ -56,25 +56,31 @@ async function loginWithPasskey() {
         </div>
 
         {#if !data.dbReady && data.runtimeError}
-            <div class="mb-4 rounded-xl border border-amber-200 bg-amber-50 px-4 py-3 text-sm text-amber-900">
+            <div
+                class="mb-4 rounded-xl border border-amber-200 bg-amber-50 px-4 py-3 text-sm text-amber-900">
                 {data.runtimeError}
             </div>
         {/if}
 
         {#if form?.error}
-            <div class="mb-4 rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700">
+            <div
+                class="mb-4 rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700">
                 {form.error}
             </div>
         {/if}
 
         {#if passkeyError}
-            <div class="mb-4 rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700">
+            <div
+                class="mb-4 rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700">
                 {passkeyError}
             </div>
         {/if}
 
         <form method="POST" class="space-y-4">
-            <input type="hidden" name="redirectTo" value={form?.redirectTo ?? data.redirectTo ?? ""} />
+            <input
+                type="hidden"
+                name="redirectTo"
+                value={form?.redirectTo ?? data.redirectTo ?? ""} />
 
             <div>
                 <label for="username" class="block text-sm font-medium text-gray-700">
@@ -123,12 +129,25 @@ async function loginWithPasskey() {
             class="mt-4 flex w-full items-center justify-center gap-2 rounded-md border border-gray-300 bg-white px-4 py-2 text-sm font-medium text-gray-700 shadow-sm transition hover:bg-gray-50 disabled:opacity-60">
             {#if passkeyLoading}
                 <svg class="h-4 w-4 animate-spin text-gray-500" fill="none" viewBox="0 0 24 24">
-                    <circle class="opacity-25" cx="12" cy="12" r="10" stroke="currentColor" stroke-width="4"></circle>
-                    <path class="opacity-75" fill="currentColor" d="M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4z"></path>
+                    <circle
+                        class="opacity-25"
+                        cx="12"
+                        cy="12"
+                        r="10"
+                        stroke="currentColor"
+                        stroke-width="4"></circle>
+                    <path
+                        class="opacity-75"
+                        fill="currentColor"
+                        d="M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4z"></path>
                 </svg>
                 인증 중...
             {:else}
-                <svg class="h-4 w-4 text-gray-500" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+                <svg
+                    class="h-4 w-4 text-gray-500"
+                    fill="none"
+                    stroke="currentColor"
+                    viewBox="0 0 24 24">
                     <path
                         stroke-linecap="round"
                         stroke-linejoin="round"
diff --git a/src/routes/(auth)/mfa/+page.server.ts b/src/routes/(auth)/mfa/+page.server.ts
index 21f2ff7..7477323 100644
--- a/src/routes/(auth)/mfa/+page.server.ts
+++ b/src/routes/(auth)/mfa/+page.server.ts
@@ -7,7 +7,14 @@ import { createSessionRecord, setSessionCookie } from "$lib/server/auth/session"
 import { verifyMfaPendingToken, MFA_PENDING_COOKIE } from "$lib/server/auth/mfa";
 import { verifyTotp, decryptTotpSecret, verifyBackupCode } from "$lib/server/auth/totp";
 import { checkRateLimit } from "$lib/server/ratelimit";
-import { AMR_PASSWORD, AMR_TOTP, AMR_BACKUP_CODE, amrToAcr, TOTP_CREDENTIAL_TYPE, BACKUP_CODE_CREDENTIAL_TYPE } from "$lib/server/auth/constants";
+import {
+    AMR_PASSWORD,
+    AMR_TOTP,
+    AMR_BACKUP_CODE,
+    amrToAcr,
+    TOTP_CREDENTIAL_TYPE,
+    BACKUP_CODE_CREDENTIAL_TYPE,
+} from "$lib/server/auth/constants";
 import { getRuntimeConfig } from "$lib/server/auth/runtime";
 import { credentials, users } from "$lib/server/db/schema";
 
@@ -103,14 +110,23 @@ export const actions: Actions = {
             const backupCreds = await db
                 .select()
                 .from(credentials)
-                .where(and(eq(credentials.userId, user.id), eq(credentials.type, BACKUP_CODE_CREDENTIAL_TYPE), isNull(credentials.usedAt)));
+                .where(
+                    and(
+                        eq(credentials.userId, user.id),
+                        eq(credentials.type, BACKUP_CODE_CREDENTIAL_TYPE),
+                        isNull(credentials.usedAt),
+                    ),
+                );
 
             for (const cred of backupCreds) {
                 if (!cred.secret) continue;
                 const match = await verifyBackupCode(code, cred.secret);
                 if (match) {
                     // 소진 처리
-                    await db.update(credentials).set({ usedAt: new Date() }).where(eq(credentials.id, cred.id));
+                    await db
+                        .update(credentials)
+                        .set({ usedAt: new Date() })
+                        .where(eq(credentials.id, cred.id));
                     amrMethod = AMR_BACKUP_CODE;
                     verified = true;
                     break;
@@ -121,17 +137,28 @@ export const actions: Actions = {
             const [totpCred] = await db
                 .select()
                 .from(credentials)
-                .where(and(eq(credentials.userId, user.id), eq(credentials.type, TOTP_CREDENTIAL_TYPE)))
+                .where(
+                    and(
+                        eq(credentials.userId, user.id),
+                        eq(credentials.type, TOTP_CREDENTIAL_TYPE),
+                    ),
+                )
                 .limit(1);
 
             if (totpCred?.secret) {
-                const plainSecret = await decryptTotpSecret(totpCred.secret, config.signingKeySecret);
+                const plainSecret = await decryptTotpSecret(
+                    totpCred.secret,
+                    config.signingKeySecret,
+                );
                 // counter 컬럼을 마지막으로 사용된 TOTP 스텝으로 활용 (재사용 방지)
                 const lastUsedStep = totpCred.counter ?? undefined;
                 const matchedStep = await verifyTotp(code, plainSecret, lastUsedStep);
                 if (matchedStep !== null) {
                     verified = true;
-                    await db.update(credentials).set({ lastUsedAt: new Date(), counter: matchedStep }).where(eq(credentials.id, totpCred.id));
+                    await db
+                        .update(credentials)
+                        .set({ lastUsedAt: new Date(), counter: matchedStep })
+                        .where(eq(credentials.id, totpCred.id));
                 }
             }
         }
@@ -149,7 +176,9 @@ export const actions: Actions = {
             });
 
             return fail(400, {
-                error: useBackup ? "백업 코드가 올바르지 않거나 이미 사용되었습니다." : "인증 코드가 올바르지 않습니다. 시간이 맞는지 확인해 주세요.",
+                error: useBackup
+                    ? "백업 코드가 올바르지 않거나 이미 사용되었습니다."
+                    : "인증 코드가 올바르지 않습니다. 시간이 맞는지 확인해 주세요.",
             });
         }
 
diff --git a/src/routes/(auth)/mfa/+page.svelte b/src/routes/(auth)/mfa/+page.svelte
index 1609fc6..aa71707 100644
--- a/src/routes/(auth)/mfa/+page.svelte
+++ b/src/routes/(auth)/mfa/+page.svelte
@@ -9,9 +9,18 @@ let useBackup = $state(false);
 <div class="flex min-h-screen items-center justify-center bg-gray-50 p-4">
     <div class="w-full max-w-105 rounded-2xl border border-gray-200 bg-white p-8 shadow-sm">
         <div class="mb-6 space-y-2 text-center">
-            <div class="mx-auto mb-3 flex h-12 w-12 items-center justify-center rounded-full bg-blue-50">
-                <svg class="h-6 w-6 text-blue-600" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-                    <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 15v2m-6 4h12a2 2 0 002-2v-6a2 2 0 00-2-2H6a2 2 0 00-2 2v6a2 2 0 002 2zm10-10V7a4 4 0 00-8 0v4h8z" />
+            <div
+                class="mx-auto mb-3 flex h-12 w-12 items-center justify-center rounded-full bg-blue-50">
+                <svg
+                    class="h-6 w-6 text-blue-600"
+                    fill="none"
+                    stroke="currentColor"
+                    viewBox="0 0 24 24">
+                    <path
+                        stroke-linecap="round"
+                        stroke-linejoin="round"
+                        stroke-width="2"
+                        d="M12 15v2m-6 4h12a2 2 0 002-2v-6a2 2 0 00-2-2H6a2 2 0 00-2 2v6a2 2 0 002 2zm10-10V7a4 4 0 00-8 0v4h8z" />
                 </svg>
             </div>
             <h1 class="text-2xl font-bold text-gray-900">2단계 인증</h1>
@@ -25,7 +34,8 @@ let useBackup = $state(false);
         </div>
 
         {#if form?.error}
-            <div class="mb-4 rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700">
+            <div
+                class="mb-4 rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700">
                 {form.error}
             </div>
         {/if}
@@ -57,14 +67,19 @@ let useBackup = $state(false);
         </form>
 
         <div class="mt-4 text-center">
-            <button type="button" onclick={() => (useBackup = !useBackup)} class="text-sm text-blue-600 hover:underline">
+            <button
+                type="button"
+                onclick={() => (useBackup = !useBackup)}
+                class="text-sm text-blue-600 hover:underline">
                 {useBackup ? "인증 앱 코드로 로그인" : "백업 코드로 로그인"}
             </button>
         </div>
 
         <div class="mt-3 text-center">
             <!-- eslint-disable-next-line svelte/no-navigation-without-resolve -->
-            <a href="/login" class="text-sm text-gray-500 hover:underline"> ← 로그인으로 돌아가기 </a>
+            <a href="/login" class="text-sm text-gray-500 hover:underline">
+                ← 로그인으로 돌아가기
+            </a>
         </div>
     </div>
 </div>
diff --git a/src/routes/+page.svelte b/src/routes/+page.svelte
index da3aa10..97869fd 100644
--- a/src/routes/+page.svelte
+++ b/src/routes/+page.svelte
@@ -15,13 +15,16 @@ const quickLinks = [
             <p class="text-sm tracking-[0.3em] text-cyan-300 uppercase">IdP Project</p>
             <h1 class="max-w-3xl text-4xl font-semibold sm:text-5xl">{t("app.title")}</h1>
             <p class="max-w-2xl text-base leading-7 text-gray-300 sm:text-lg">
-                Cloudflare Workers + SvelteKit 기반 자체 IdP. 현재는 M0 범위인 로그인, 세션, 관리자 보호 흐름을 우선 정리하는 단계입니다.
+                Cloudflare Workers + SvelteKit 기반 자체 IdP. 현재는 M0 범위인 로그인, 세션, 관리자
+                보호 흐름을 우선 정리하는 단계입니다.
             </p>
         </div>
 
         <div class="grid gap-4 sm:grid-cols-3">
             {#each quickLinks as link (link.route)}
-                <a href={resolve(link.route)} class="rounded-2xl border border-white/10 bg-white/5 p-5 transition hover:border-cyan-300/60 hover:bg-cyan-300/10">
+                <a
+                    href={resolve(link.route)}
+                    class="rounded-2xl border border-white/10 bg-white/5 p-5 transition hover:border-cyan-300/60 hover:bg-cyan-300/10">
                     <p class="text-lg font-medium">{link.label}</p>
                     <p class="mt-2 text-sm text-gray-400">{resolve(link.route)}</p>
                 </a>
diff --git a/src/routes/.well-known/openid-configuration/+server.ts b/src/routes/.well-known/openid-configuration/+server.ts
index 2331984..2eac60d 100644
--- a/src/routes/.well-known/openid-configuration/+server.ts
+++ b/src/routes/.well-known/openid-configuration/+server.ts
@@ -17,9 +17,28 @@ export const GET: RequestHandler = async ({ locals, url }) => {
             grant_types_supported: ["authorization_code"],
             subject_types_supported: ["public"],
             id_token_signing_alg_values_supported: ["RS256"],
-            token_endpoint_auth_methods_supported: ["client_secret_basic", "client_secret_post", "none"],
+            token_endpoint_auth_methods_supported: [
+                "client_secret_basic",
+                "client_secret_post",
+                "none",
+            ],
             code_challenge_methods_supported: ["S256"],
-            claims_supported: ["sub", "iss", "aud", "exp", "iat", "nonce", "sid", "email", "name", "preferred_username", "department", "team", "position", "title"],
+            claims_supported: [
+                "sub",
+                "iss",
+                "aud",
+                "exp",
+                "iat",
+                "nonce",
+                "sid",
+                "email",
+                "name",
+                "preferred_username",
+                "department",
+                "team",
+                "position",
+                "title",
+            ],
         },
         {
             headers: {
diff --git a/src/routes/account/mfa/+page.server.ts b/src/routes/account/mfa/+page.server.ts
index c8e88d5..251b1af 100644
--- a/src/routes/account/mfa/+page.server.ts
+++ b/src/routes/account/mfa/+page.server.ts
@@ -3,7 +3,15 @@ import { eq, and, isNull } from "drizzle-orm";
 import type { Actions, PageServerLoad } from "./$types";
 import { requireDbContext } from "$lib/server/auth/guards";
 import { getRuntimeConfig } from "$lib/server/auth/runtime";
-import { generateTotpSecret, buildOtpAuthUri, verifyTotp, encryptTotpSecret, decryptTotpSecret, generateBackupCodes, hashBackupCode } from "$lib/server/auth/totp";
+import {
+    generateTotpSecret,
+    buildOtpAuthUri,
+    verifyTotp,
+    encryptTotpSecret,
+    decryptTotpSecret,
+    generateBackupCodes,
+    hashBackupCode,
+} from "$lib/server/auth/totp";
 import { TOTP_CREDENTIAL_TYPE, BACKUP_CODE_CREDENTIAL_TYPE } from "$lib/server/auth/constants";
 import { credentials } from "$lib/server/db/schema";
 import { recordAuditEvent, getRequestMetadata } from "$lib/server/audit";
@@ -20,8 +28,16 @@ async function createSetupToken(base32Secret: string, signingKeySecret: string):
             .replace(/\+/g, "-")
             .replace(/\//g, "_")
             .replace(/=+$/, "");
-    const data = b64u(enc.encode(JSON.stringify({ s: base32Secret, exp: Date.now() + TOTP_SETUP_TTL_MS })));
-    const key = await crypto.subtle.importKey("raw", enc.encode(signingKeySecret), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+    const data = b64u(
+        enc.encode(JSON.stringify({ s: base32Secret, exp: Date.now() + TOTP_SETUP_TTL_MS })),
+    );
+    const key = await crypto.subtle.importKey(
+        "raw",
+        enc.encode(signingKeySecret),
+        { name: "HMAC", hash: "SHA-256" },
+        false,
+        ["sign"],
+    );
     const sig = await crypto.subtle.sign("HMAC", key, enc.encode(data));
     return `${data}.${b64u(new Uint8Array(sig))}`;
 }
@@ -40,7 +56,13 @@ async function verifySetupToken(token: string, signingKeySecret: string): Promis
             return arr;
         };
         const enc = new TextEncoder();
-        const key = await crypto.subtle.importKey("raw", enc.encode(signingKeySecret), { name: "HMAC", hash: "SHA-256" }, false, ["verify"]);
+        const key = await crypto.subtle.importKey(
+            "raw",
+            enc.encode(signingKeySecret),
+            { name: "HMAC", hash: "SHA-256" },
+            false,
+            ["verify"],
+        );
         const valid = await crypto.subtle.verify("HMAC", key, b64uDec(sigB64), enc.encode(data));
         if (!valid) return null;
         const payload = JSON.parse(new TextDecoder().decode(b64uDec(data))) as {
@@ -68,14 +90,22 @@ export const load: PageServerLoad = async ({ locals, cookies, platform, url }) =
     const [totpCred] = await db
         .select({ id: credentials.id, createdAt: credentials.createdAt })
         .from(credentials)
-        .where(and(eq(credentials.userId, locals.user.id), eq(credentials.type, TOTP_CREDENTIAL_TYPE)))
+        .where(
+            and(eq(credentials.userId, locals.user.id), eq(credentials.type, TOTP_CREDENTIAL_TYPE)),
+        )
         .limit(1);
 
     // 미사용 백업 코드 수
     const backupCreds = await db
         .select({ id: credentials.id })
         .from(credentials)
-        .where(and(eq(credentials.userId, locals.user.id), eq(credentials.type, BACKUP_CODE_CREDENTIAL_TYPE), isNull(credentials.usedAt)));
+        .where(
+            and(
+                eq(credentials.userId, locals.user.id),
+                eq(credentials.type, BACKUP_CODE_CREDENTIAL_TYPE),
+                isNull(credentials.usedAt),
+            ),
+        );
 
     // 등록 진행 중인지 확인
     let pendingUri: string | null = null;
@@ -107,7 +137,10 @@ export const actions: Actions = {
         if (!locals.user) throw redirect(303, "/login");
         const config = getRuntimeConfig(platform);
         if (!config.signingKeySecret) {
-            return fail(503, { setup: true, error: "IDP_SIGNING_KEY_SECRET 이 설정되지 않았습니다." });
+            return fail(503, {
+                setup: true,
+                error: "IDP_SIGNING_KEY_SECRET 이 설정되지 않았습니다.",
+            });
         }
 
         const secret = generateTotpSecret();
@@ -133,18 +166,27 @@ export const actions: Actions = {
 
         const config = getRuntimeConfig(platform);
         if (!config.signingKeySecret) {
-            return fail(503, { confirm: true, error: "IDP_SIGNING_KEY_SECRET 이 설정되지 않았습니다." });
+            return fail(503, {
+                confirm: true,
+                error: "IDP_SIGNING_KEY_SECRET 이 설정되지 않았습니다.",
+            });
         }
 
         const setupToken = cookies.get(TOTP_SETUP_COOKIE);
         if (!setupToken) {
-            return fail(400, { confirm: true, error: "등록 세션이 만료되었습니다. 다시 시작해 주세요." });
+            return fail(400, {
+                confirm: true,
+                error: "등록 세션이 만료되었습니다. 다시 시작해 주세요.",
+            });
         }
 
         const plainSecret = await verifySetupToken(setupToken, config.signingKeySecret);
         if (!plainSecret) {
             cookies.delete(TOTP_SETUP_COOKIE, { path: "/" });
-            return fail(400, { confirm: true, error: "등록 세션이 만료되었습니다. 다시 시작해 주세요." });
+            return fail(400, {
+                confirm: true,
+                error: "등록 세션이 만료되었습니다. 다시 시작해 주세요.",
+            });
         }
 
         const formData = await event.request.formData();
@@ -156,7 +198,10 @@ export const actions: Actions = {
 
         const valid = await verifyTotp(code, plainSecret);
         if (!valid) {
-            return fail(400, { confirm: true, error: "코드가 올바르지 않습니다. 다시 확인해 주세요." });
+            return fail(400, {
+                confirm: true,
+                error: "코드가 올바르지 않습니다. 다시 확인해 주세요.",
+            });
         }
 
         const { db, tenant } = requireDbContext(locals);
@@ -165,7 +210,12 @@ export const actions: Actions = {
         const [existing] = await db
             .select({ id: credentials.id })
             .from(credentials)
-            .where(and(eq(credentials.userId, locals.user.id), eq(credentials.type, TOTP_CREDENTIAL_TYPE)))
+            .where(
+                and(
+                    eq(credentials.userId, locals.user.id),
+                    eq(credentials.type, TOTP_CREDENTIAL_TYPE),
+                ),
+            )
             .limit(1);
 
         if (existing) {
@@ -219,7 +269,10 @@ export const actions: Actions = {
 
         const config = getRuntimeConfig(platform);
         if (!config.signingKeySecret) {
-            return fail(503, { delete: true, error: "IDP_SIGNING_KEY_SECRET 이 설정되지 않았습니다." });
+            return fail(503, {
+                delete: true,
+                error: "IDP_SIGNING_KEY_SECRET 이 설정되지 않았습니다.",
+            });
         }
 
         const formData = await event.request.formData();
@@ -233,7 +286,12 @@ export const actions: Actions = {
         const [totpCred] = await db
             .select()
             .from(credentials)
-            .where(and(eq(credentials.userId, locals.user.id), eq(credentials.type, TOTP_CREDENTIAL_TYPE)))
+            .where(
+                and(
+                    eq(credentials.userId, locals.user.id),
+                    eq(credentials.type, TOTP_CREDENTIAL_TYPE),
+                ),
+            )
             .limit(1);
 
         if (!totpCred?.secret) {
@@ -246,9 +304,23 @@ export const actions: Actions = {
             return fail(400, { delete: true, error: "인증 코드가 올바르지 않습니다." });
         }
 
-        await db.delete(credentials).where(and(eq(credentials.userId, locals.user.id), eq(credentials.type, TOTP_CREDENTIAL_TYPE)));
-
-        await db.delete(credentials).where(and(eq(credentials.userId, locals.user.id), eq(credentials.type, BACKUP_CODE_CREDENTIAL_TYPE)));
+        await db
+            .delete(credentials)
+            .where(
+                and(
+                    eq(credentials.userId, locals.user.id),
+                    eq(credentials.type, TOTP_CREDENTIAL_TYPE),
+                ),
+            );
+
+        await db
+            .delete(credentials)
+            .where(
+                and(
+                    eq(credentials.userId, locals.user.id),
+                    eq(credentials.type, BACKUP_CODE_CREDENTIAL_TYPE),
+                ),
+            );
 
         const requestMetadata = getRequestMetadata(event);
         await recordAuditEvent(db, {
@@ -289,7 +361,12 @@ export const actions: Actions = {
         const [totpCred] = await db
             .select()
             .from(credentials)
-            .where(and(eq(credentials.userId, locals.user.id), eq(credentials.type, TOTP_CREDENTIAL_TYPE)))
+            .where(
+                and(
+                    eq(credentials.userId, locals.user.id),
+                    eq(credentials.type, TOTP_CREDENTIAL_TYPE),
+                ),
+            )
             .limit(1);
 
         if (!totpCred?.secret) {
@@ -303,7 +380,14 @@ export const actions: Actions = {
         }
 
         // 기존 백업 코드 전체 삭제
-        await db.delete(credentials).where(and(eq(credentials.userId, locals.user.id), eq(credentials.type, BACKUP_CODE_CREDENTIAL_TYPE)));
+        await db
+            .delete(credentials)
+            .where(
+                and(
+                    eq(credentials.userId, locals.user.id),
+                    eq(credentials.type, BACKUP_CODE_CREDENTIAL_TYPE),
+                ),
+            );
 
         // 새 백업 코드 10개 생성
         const codes = generateBackupCodes();
diff --git a/src/routes/account/mfa/+page.svelte b/src/routes/account/mfa/+page.svelte
index b4cebff..e0f5ffc 100644
--- a/src/routes/account/mfa/+page.svelte
+++ b/src/routes/account/mfa/+page.svelte
@@ -9,7 +9,9 @@ let qrDataUrl = $state("");
 let qrError = $state(false);
 
 // QR 코드 렌더링 (클라이언트 전용)
-const otpauthUri = $derived((form as { otpauthUri?: string } | null)?.otpauthUri ?? data.pendingUri ?? null);
+const otpauthUri = $derived(
+    (form as { otpauthUri?: string } | null)?.otpauthUri ?? data.pendingUri ?? null,
+);
 
 onMount(async () => {
     if (otpauthUri) {
@@ -57,7 +59,8 @@ const isSetupMode = $derived(!!otpauthUri);
 
             <!-- 에러 -->
             {#if formError}
-                <div class="mb-4 rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700">
+                <div
+                    class="mb-4 rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700">
                     {formError}
                 </div>
             {/if}
@@ -66,10 +69,14 @@ const isSetupMode = $derived(!!otpauthUri);
             {#if backupCodes}
                 <div class="mb-6 rounded-xl border border-green-200 bg-green-50 p-5">
                     <h2 class="mb-2 font-semibold text-green-900">백업 코드가 생성되었습니다</h2>
-                    <p class="mb-4 text-sm text-green-700">이 코드는 지금만 표시됩니다. 안전한 곳에 저장해 두세요. 코드 하나당 1회만 사용 가능합니다.</p>
+                    <p class="mb-4 text-sm text-green-700">
+                        이 코드는 지금만 표시됩니다. 안전한 곳에 저장해 두세요. 코드 하나당 1회만
+                        사용 가능합니다.
+                    </p>
                     <div class="grid grid-cols-2 gap-2">
                         {#each backupCodes as code (code)}
-                            <code class="rounded-md bg-white px-3 py-1.5 text-center font-mono text-sm text-gray-800 shadow-sm">
+                            <code
+                                class="rounded-md bg-white px-3 py-1.5 text-center font-mono text-sm text-gray-800 shadow-sm">
                                 {code}
                             </code>
                         {/each}
@@ -82,23 +89,33 @@ const isSetupMode = $derived(!!otpauthUri);
                 <div class="space-y-5">
                     <div class="rounded-xl border border-blue-100 bg-blue-50 p-4">
                         <h2 class="mb-2 font-semibold text-blue-900">인증 앱 등록</h2>
-                        <p class="text-sm text-blue-700">Google Authenticator, Authy 등 TOTP 앱으로 QR 코드를 스캔하세요.</p>
+                        <p class="text-sm text-blue-700">
+                            Google Authenticator, Authy 등 TOTP 앱으로 QR 코드를 스캔하세요.
+                        </p>
                     </div>
 
                     <div class="flex flex-col items-center gap-3">
                         {#if qrDataUrl}
-                            <img src={qrDataUrl} alt="TOTP QR 코드" class="rounded-lg border border-gray-200" />
+                            <img
+                                src={qrDataUrl}
+                                alt="TOTP QR 코드"
+                                class="rounded-lg border border-gray-200" />
                         {:else if qrError}
                             <p class="text-sm text-gray-500">QR 코드 생성 실패</p>
                         {:else}
-                            <div class="flex h-50 w-50 items-center justify-center rounded-lg border border-gray-200 bg-gray-50">
+                            <div
+                                class="flex h-50 w-50 items-center justify-center rounded-lg border border-gray-200 bg-gray-50">
                                 <span class="text-xs text-gray-400">로딩 중...</span>
                             </div>
                         {/if}
 
                         <details class="w-full">
-                            <summary class="cursor-pointer text-xs text-gray-500 hover:text-gray-700"> 직접 입력 (키 보기) </summary>
-                            <div class="mt-2 rounded-md bg-gray-100 px-3 py-2 font-mono text-xs break-all text-gray-600">
+                            <summary
+                                class="cursor-pointer text-xs text-gray-500 hover:text-gray-700">
+                                직접 입력 (키 보기)
+                            </summary>
+                            <div
+                                class="mt-2 rounded-md bg-gray-100 px-3 py-2 font-mono text-xs break-all text-gray-600">
                                 {otpauthUri}
                             </div>
                         </details>
@@ -106,7 +123,9 @@ const isSetupMode = $derived(!!otpauthUri);
 
                     <form method="POST" action="?/confirm" use:enhance class="space-y-3">
                         <div>
-                            <label for="code" class="block text-sm font-medium text-gray-700"> 앱에 표시된 6자리 코드 입력 </label>
+                            <label for="code" class="block text-sm font-medium text-gray-700">
+                                앱에 표시된 6자리 코드 입력
+                            </label>
                             <input
                                 type="text"
                                 name="code"
@@ -117,25 +136,40 @@ const isSetupMode = $derived(!!otpauthUri);
                                 placeholder="000000"
                                 class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-2 text-center text-lg tracking-widest shadow-sm focus:border-blue-500 focus:outline-none" />
                         </div>
-                        <button type="submit" class="flex w-full justify-center rounded-md bg-blue-600 px-4 py-2 text-sm font-medium text-white shadow-sm transition hover:bg-blue-700">
+                        <button
+                            type="submit"
+                            class="flex w-full justify-center rounded-md bg-blue-600 px-4 py-2 text-sm font-medium text-white shadow-sm transition hover:bg-blue-700">
                             등록 완료
                         </button>
                     </form>
 
                     <form method="POST" action="?/setup" use:enhance>
-                        <button type="submit" class="w-full text-center text-sm text-gray-500 hover:underline"> 새 QR 코드 생성 </button>
+                        <button
+                            type="submit"
+                            class="w-full text-center text-sm text-gray-500 hover:underline">
+                            새 QR 코드 생성
+                        </button>
                     </form>
                 </div>
 
                 <!-- 등록된 상태 -->
             {:else if data.enrolled}
                 <div class="space-y-5">
-                    <div class="flex items-center gap-3 rounded-xl border border-green-200 bg-green-50 p-4">
-                        <svg class="h-5 w-5 shrink-0 text-green-600" fill="currentColor" viewBox="0 0 20 20">
-                            <path fill-rule="evenodd" d="M16.707 5.293a1 1 0 010 1.414l-8 8a1 1 0 01-1.414 0l-4-4a1 1 0 011.414-1.414L8 12.586l7.293-7.293a1 1 0 011.414 0z" clip-rule="evenodd" />
+                    <div
+                        class="flex items-center gap-3 rounded-xl border border-green-200 bg-green-50 p-4">
+                        <svg
+                            class="h-5 w-5 shrink-0 text-green-600"
+                            fill="currentColor"
+                            viewBox="0 0 20 20">
+                            <path
+                                fill-rule="evenodd"
+                                d="M16.707 5.293a1 1 0 010 1.414l-8 8a1 1 0 01-1.414 0l-4-4a1 1 0 011.414-1.414L8 12.586l7.293-7.293a1 1 0 011.414 0z"
+                                clip-rule="evenodd" />
                         </svg>
                         <div>
-                            <p class="font-medium text-green-900">TOTP 인증기가 등록되어 있습니다.</p>
+                            <p class="font-medium text-green-900">
+                                TOTP 인증기가 등록되어 있습니다.
+                            </p>
                             {#if data.enrolledAt}
                                 <p class="text-xs text-green-700">
                                     등록일: {new Date(data.enrolledAt).toLocaleDateString("ko-KR")}
@@ -158,7 +192,11 @@ const isSetupMode = $derived(!!otpauthUri);
                                     {/if}
                                 </p>
                             </div>
-                            <form method="POST" action="?/regenerate" use:enhance class="flex items-center gap-2">
+                            <form
+                                method="POST"
+                                action="?/regenerate"
+                                use:enhance
+                                class="flex items-center gap-2">
                                 <input
                                     type="text"
                                     name="code"
@@ -171,7 +209,11 @@ const isSetupMode = $derived(!!otpauthUri);
                                     type="submit"
                                     class="rounded-md border border-gray-300 px-3 py-1.5 text-sm text-gray-700 transition hover:bg-gray-50"
                                     onclick={(e) => {
-                                        if (!confirm("기존 백업 코드가 모두 삭제되고 새로 발급됩니다. 계속하시겠습니까?")) {
+                                        if (
+                                            !confirm(
+                                                "기존 백업 코드가 모두 삭제되고 새로 발급됩니다. 계속하시겠습니까?",
+                                            )
+                                        ) {
                                             e.preventDefault();
                                         }
                                     }}>
@@ -195,7 +237,11 @@ const isSetupMode = $derived(!!otpauthUri);
                             type="submit"
                             class="flex w-full justify-center rounded-md border border-red-300 px-4 py-2 text-sm font-medium text-red-700 transition hover:bg-red-50"
                             onclick={(e) => {
-                                if (!confirm("TOTP 인증기와 모든 백업 코드가 삭제됩니다. 계속하시겠습니까?")) {
+                                if (
+                                    !confirm(
+                                        "TOTP 인증기와 모든 백업 코드가 삭제됩니다. 계속하시겠습니까?",
+                                    )
+                                ) {
                                     e.preventDefault();
                                 }
                             }}>
@@ -208,11 +254,16 @@ const isSetupMode = $derived(!!otpauthUri);
             {:else}
                 <div class="space-y-5">
                     <div class="rounded-xl border border-gray-200 bg-gray-50 p-4">
-                        <p class="text-sm text-gray-600">2단계 인증을 활성화하면 계정 보안이 강화됩니다. Google Authenticator, Authy 등의 인증 앱이 필요합니다.</p>
+                        <p class="text-sm text-gray-600">
+                            2단계 인증을 활성화하면 계정 보안이 강화됩니다. Google Authenticator,
+                            Authy 등의 인증 앱이 필요합니다.
+                        </p>
                     </div>
 
                     <form method="POST" action="?/setup" use:enhance>
-                        <button type="submit" class="flex w-full justify-center rounded-md bg-blue-600 px-4 py-2 text-sm font-medium text-white shadow-sm transition hover:bg-blue-700">
+                        <button
+                            type="submit"
+                            class="flex w-full justify-center rounded-md bg-blue-600 px-4 py-2 text-sm font-medium text-white shadow-sm transition hover:bg-blue-700">
                             인증기 등록 시작
                         </button>
                     </form>
diff --git a/src/routes/account/passkeys/+page.server.ts b/src/routes/account/passkeys/+page.server.ts
index 3ed9f9b..4cb58c6 100644
--- a/src/routes/account/passkeys/+page.server.ts
+++ b/src/routes/account/passkeys/+page.server.ts
@@ -22,7 +22,12 @@ export const load: PageServerLoad = async ({ locals, url }) => {
             transports: credentials.transports,
         })
         .from(credentials)
-        .where(and(eq(credentials.userId, locals.user.id), eq(credentials.type, WEBAUTHN_CREDENTIAL_TYPE)));
+        .where(
+            and(
+                eq(credentials.userId, locals.user.id),
+                eq(credentials.type, WEBAUTHN_CREDENTIAL_TYPE),
+            ),
+        );
 
     return {
         passkeys,
@@ -44,7 +49,15 @@ export const actions: Actions = {
         const { db, tenant } = requireDbContext(locals);
 
         // 본인 소유 확인 후 삭제
-        const deleted = await db.delete(credentials).where(and(eq(credentials.id, credentialId), eq(credentials.userId, locals.user.id), eq(credentials.type, WEBAUTHN_CREDENTIAL_TYPE)));
+        const deleted = await db
+            .delete(credentials)
+            .where(
+                and(
+                    eq(credentials.id, credentialId),
+                    eq(credentials.userId, locals.user.id),
+                    eq(credentials.type, WEBAUTHN_CREDENTIAL_TYPE),
+                ),
+            );
 
         if (!deleted) {
             return fail(404, { error: "패스키를 찾을 수 없습니다." });
diff --git a/src/routes/account/passkeys/+page.svelte b/src/routes/account/passkeys/+page.svelte
index 58fd976..6198422 100644
--- a/src/routes/account/passkeys/+page.svelte
+++ b/src/routes/account/passkeys/+page.svelte
@@ -64,17 +64,21 @@ const formError = $derived((form as { error?: string } | null)?.error ?? null);
 
         <div class="rounded-2xl border border-gray-200 bg-white p-8 shadow-sm">
             <h1 class="mb-1 text-2xl font-bold text-gray-900">패스키 관리</h1>
-            <p class="mb-6 text-sm text-gray-500">지문, Face ID, 보안 키 등으로 비밀번호 없이 로그인할 수 있습니다.</p>
+            <p class="mb-6 text-sm text-gray-500">
+                지문, Face ID, 보안 키 등으로 비밀번호 없이 로그인할 수 있습니다.
+            </p>
 
             <!-- 에러 -->
             {#if formError}
-                <div class="mb-4 rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700">
+                <div
+                    class="mb-4 rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700">
                     {formError}
                 </div>
             {/if}
 
             {#if registerError}
-                <div class="mb-4 rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700">
+                <div
+                    class="mb-4 rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700">
                     {registerError}
                 </div>
             {/if}
@@ -83,9 +87,14 @@ const formError = $derived((form as { error?: string } | null)?.error ?? null);
             {#if data.passkeys.length > 0}
                 <div class="mb-6 space-y-2">
                     {#each data.passkeys as pk (pk.id)}
-                        <div class="flex items-center justify-between rounded-xl border border-gray-200 px-4 py-3">
+                        <div
+                            class="flex items-center justify-between rounded-xl border border-gray-200 px-4 py-3">
                             <div class="flex items-center gap-3">
-                                <svg class="h-5 w-5 shrink-0 text-gray-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+                                <svg
+                                    class="h-5 w-5 shrink-0 text-gray-400"
+                                    fill="none"
+                                    stroke="currentColor"
+                                    viewBox="0 0 24 24">
                                     <path
                                         stroke-linecap="round"
                                         stroke-linejoin="round"
@@ -93,11 +102,15 @@ const formError = $derived((form as { error?: string } | null)?.error ?? null);
                                         d="M15 7a2 2 0 012 2m4 0a6 6 0 01-7.743 5.743L11 17H9v2H7v2H4a1 1 0 01-1-1v-2.586a1 1 0 01.293-.707l5.964-5.964A6 6 0 1121 9z" />
                                 </svg>
                                 <div>
-                                    <p class="text-sm font-medium text-gray-900">{pk.label ?? "패스키"}</p>
+                                    <p class="text-sm font-medium text-gray-900">
+                                        {pk.label ?? "패스키"}
+                                    </p>
                                     <p class="text-xs text-gray-400">
                                         등록: {new Date(pk.createdAt).toLocaleDateString("ko-KR")}
                                         {#if pk.lastUsedAt}
-                                            · 마지막 사용: {new Date(pk.lastUsedAt).toLocaleDateString("ko-KR")}
+                                            · 마지막 사용: {new Date(
+                                                pk.lastUsedAt,
+                                            ).toLocaleDateString("ko-KR")}
                                         {/if}
                                     </p>
                                 </div>
@@ -109,7 +122,8 @@ const formError = $derived((form as { error?: string } | null)?.error ?? null);
                                     type="submit"
                                     class="text-sm text-red-500 hover:text-red-700"
                                     onclick={(e) => {
-                                        if (!confirm("이 패스키를 삭제하시겠습니까?")) e.preventDefault();
+                                        if (!confirm("이 패스키를 삭제하시겠습니까?"))
+                                            e.preventDefault();
                                     }}>
                                     삭제
                                 </button>
@@ -126,7 +140,9 @@ const formError = $derived((form as { error?: string } | null)?.error ?? null);
             <!-- 새 패스키 등록 -->
             <div class="space-y-3">
                 <div>
-                    <label for="passkey-label" class="block text-sm font-medium text-gray-700"> 패스키 이름 (선택) </label>
+                    <label for="passkey-label" class="block text-sm font-medium text-gray-700">
+                        패스키 이름 (선택)
+                    </label>
                     <input
                         type="text"
                         id="passkey-label"
@@ -143,8 +159,17 @@ const formError = $derived((form as { error?: string } | null)?.error ?? null);
                     class="flex w-full items-center justify-center gap-2 rounded-md bg-blue-600 px-4 py-2 text-sm font-medium text-white shadow-sm transition hover:bg-blue-700 disabled:opacity-60">
                     {#if registering}
                         <svg class="h-4 w-4 animate-spin" fill="none" viewBox="0 0 24 24">
-                            <circle class="opacity-25" cx="12" cy="12" r="10" stroke="currentColor" stroke-width="4"></circle>
-                            <path class="opacity-75" fill="currentColor" d="M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4z"></path>
+                            <circle
+                                class="opacity-25"
+                                cx="12"
+                                cy="12"
+                                r="10"
+                                stroke="currentColor"
+                                stroke-width="4"></circle>
+                            <path
+                                class="opacity-75"
+                                fill="currentColor"
+                                d="M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4z"></path>
                         </svg>
                         등록 중...
                     {:else}
diff --git a/src/routes/account/profile/+page.svelte b/src/routes/account/profile/+page.svelte
index 91c7f07..08fa954 100644
--- a/src/routes/account/profile/+page.svelte
+++ b/src/routes/account/profile/+page.svelte
@@ -25,7 +25,10 @@ const TIMEZONE_OPTIONS = [
     <h1 class="text-2xl font-bold text-gray-900">내 프로필</h1>
 
     {#if success}
-        <div class="rounded-lg border border-green-200 bg-green-50 px-4 py-3 text-sm text-green-700">프로필이 저장되었습니다.</div>
+        <div
+            class="rounded-lg border border-green-200 bg-green-50 px-4 py-3 text-sm text-green-700">
+            프로필이 저장되었습니다.
+        </div>
     {/if}
     {#if err}
         <div class="rounded-lg border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700">
@@ -39,7 +42,8 @@ const TIMEZONE_OPTIONS = [
             <h2 class="mb-4 text-sm font-semibold text-gray-700">기본 정보</h2>
             <div class="grid grid-cols-1 gap-4 sm:grid-cols-2">
                 <div>
-                    <label for="givenName" class="block text-xs font-medium text-gray-700">이름 (Given Name)</label>
+                    <label for="givenName" class="block text-xs font-medium text-gray-700"
+                        >이름 (Given Name)</label>
                     <input
                         id="givenName"
                         type="text"
@@ -48,7 +52,8 @@ const TIMEZONE_OPTIONS = [
                         class="mt-1 w-full rounded-md border border-gray-300 px-3 py-2 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div>
-                    <label for="familyName" class="block text-xs font-medium text-gray-700">성 (Family Name)</label>
+                    <label for="familyName" class="block text-xs font-medium text-gray-700"
+                        >성 (Family Name)</label>
                     <input
                         id="familyName"
                         type="text"
@@ -57,7 +62,8 @@ const TIMEZONE_OPTIONS = [
                         class="mt-1 w-full rounded-md border border-gray-300 px-3 py-2 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div class="sm:col-span-2">
-                    <label for="displayName" class="block text-xs font-medium text-gray-700">표시 이름</label>
+                    <label for="displayName" class="block text-xs font-medium text-gray-700"
+                        >표시 이름</label>
                     <input
                         id="displayName"
                         type="text"
@@ -66,7 +72,8 @@ const TIMEZONE_OPTIONS = [
                         class="mt-1 w-full rounded-md border border-gray-300 px-3 py-2 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div>
-                    <label for="birthdate" class="block text-xs font-medium text-gray-700">생년월일</label>
+                    <label for="birthdate" class="block text-xs font-medium text-gray-700"
+                        >생년월일</label>
                     <input
                         id="birthdate"
                         type="date"
@@ -75,7 +82,8 @@ const TIMEZONE_OPTIONS = [
                         class="mt-1 w-full rounded-md border border-gray-300 px-3 py-2 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div>
-                    <label for="phoneNumber" class="block text-xs font-medium text-gray-700">전화번호</label>
+                    <label for="phoneNumber" class="block text-xs font-medium text-gray-700"
+                        >전화번호</label>
                     <input
                         id="phoneNumber"
                         type="tel"
@@ -86,7 +94,11 @@ const TIMEZONE_OPTIONS = [
                 </div>
                 <div class="sm:col-span-2">
                     <label for="bio" class="block text-xs font-medium text-gray-700">소개</label>
-                    <textarea id="bio" name="bio" rows="3" class="mt-1 w-full resize-none rounded-md border border-gray-300 px-3 py-2 text-sm focus:border-blue-500 focus:outline-none"
+                    <textarea
+                        id="bio"
+                        name="bio"
+                        rows="3"
+                        class="mt-1 w-full resize-none rounded-md border border-gray-300 px-3 py-2 text-sm focus:border-blue-500 focus:outline-none"
                         >{data.profile.bio ?? ""}</textarea>
                 </div>
             </div>
@@ -98,17 +110,26 @@ const TIMEZONE_OPTIONS = [
             <div class="grid grid-cols-1 gap-4 sm:grid-cols-2">
                 <div>
                     <label for="locale" class="block text-xs font-medium text-gray-700">언어</label>
-                    <select id="locale" name="locale" class="mt-1 w-full rounded-md border border-gray-300 px-3 py-2 text-sm focus:border-blue-500 focus:outline-none">
+                    <select
+                        id="locale"
+                        name="locale"
+                        class="mt-1 w-full rounded-md border border-gray-300 px-3 py-2 text-sm focus:border-blue-500 focus:outline-none">
                         {#each LOCALE_OPTIONS as opt (opt.value)}
-                            <option value={opt.value} selected={data.profile.locale === opt.value}>{opt.label}</option>
+                            <option value={opt.value} selected={data.profile.locale === opt.value}
+                                >{opt.label}</option>
                         {/each}
                     </select>
                 </div>
                 <div>
-                    <label for="zoneinfo" class="block text-xs font-medium text-gray-700">시간대</label>
-                    <select id="zoneinfo" name="zoneinfo" class="mt-1 w-full rounded-md border border-gray-300 px-3 py-2 text-sm focus:border-blue-500 focus:outline-none">
+                    <label for="zoneinfo" class="block text-xs font-medium text-gray-700"
+                        >시간대</label>
+                    <select
+                        id="zoneinfo"
+                        name="zoneinfo"
+                        class="mt-1 w-full rounded-md border border-gray-300 px-3 py-2 text-sm focus:border-blue-500 focus:outline-none">
                         {#each TIMEZONE_OPTIONS as opt (opt.value)}
-                            <option value={opt.value} selected={data.profile.zoneinfo === opt.value}>{opt.label}</option>
+                            <option value={opt.value} selected={data.profile.zoneinfo === opt.value}
+                                >{opt.label}</option>
                         {/each}
                     </select>
                 </div>
@@ -121,29 +142,50 @@ const TIMEZONE_OPTIONS = [
                 <h2 class="mb-4 text-sm font-semibold text-gray-700">조직 소속</h2>
                 <div class="space-y-3">
                     {#each data.membership.departments as dept (dept.name)}
-                        <div class="flex items-center gap-3 rounded-lg bg-gray-50 px-4 py-2.5 text-sm">
+                        <div
+                            class="flex items-center gap-3 rounded-lg bg-gray-50 px-4 py-2.5 text-sm">
                             <span class="font-medium text-gray-900">{dept.name}</span>
-                            {#if dept.isPrimary}<span class="rounded-full bg-blue-100 px-1.5 py-0.5 text-xs text-blue-700">주소속</span>{/if}
-                            {#if dept.jobTitle}<span class="text-gray-500">/ {dept.jobTitle}</span>{/if}
-                            {#if dept.position}<span class="text-gray-400">({dept.position.name})</span>{/if}
+                            {#if dept.isPrimary}<span
+                                    class="rounded-full bg-blue-100 px-1.5 py-0.5 text-xs text-blue-700"
+                                    >주소속</span
+                                >{/if}
+                            {#if dept.jobTitle}<span class="text-gray-500">/ {dept.jobTitle}</span
+                                >{/if}
+                            {#if dept.position}<span class="text-gray-400"
+                                    >({dept.position.name})</span
+                                >{/if}
                         </div>
                     {/each}
                     {#each data.membership.teams as team (team.name)}
-                        <div class="flex items-center gap-3 rounded-lg bg-gray-50 px-4 py-2.5 text-sm">
+                        <div
+                            class="flex items-center gap-3 rounded-lg bg-gray-50 px-4 py-2.5 text-sm">
                             <span class="text-xs text-gray-500">팀</span>
                             <span class="font-medium text-gray-900">{team.name}</span>
-                            {#if team.departmentName}<span class="text-xs text-gray-400">({team.departmentName})</span>{/if}
-                            {#if team.isPrimary}<span class="rounded-full bg-indigo-100 px-1.5 py-0.5 text-xs text-indigo-700">주소속</span>{/if}
-                            {#if team.jobTitle}<span class="text-gray-500">/ {team.jobTitle}</span>{/if}
+                            {#if team.departmentName}<span class="text-xs text-gray-400"
+                                    >({team.departmentName})</span
+                                >{/if}
+                            {#if team.isPrimary}<span
+                                    class="rounded-full bg-indigo-100 px-1.5 py-0.5 text-xs text-indigo-700"
+                                    >주소속</span
+                                >{/if}
+                            {#if team.jobTitle}<span class="text-gray-500">/ {team.jobTitle}</span
+                                >{/if}
                         </div>
                     {/each}
                     {#each data.membership.parts as part (part.name)}
-                        <div class="flex items-center gap-3 rounded-lg bg-gray-50 px-4 py-2.5 text-sm">
+                        <div
+                            class="flex items-center gap-3 rounded-lg bg-gray-50 px-4 py-2.5 text-sm">
                             <span class="text-xs text-gray-500">파트</span>
                             <span class="font-medium text-gray-900">{part.name}</span>
-                            {#if part.teamName}<span class="text-xs text-gray-400">({part.teamName})</span>{/if}
-                            {#if part.isPrimary}<span class="rounded-full bg-violet-100 px-1.5 py-0.5 text-xs text-violet-700">주소속</span>{/if}
-                            {#if part.jobTitle}<span class="text-gray-500">/ {part.jobTitle}</span>{/if}
+                            {#if part.teamName}<span class="text-xs text-gray-400"
+                                    >({part.teamName})</span
+                                >{/if}
+                            {#if part.isPrimary}<span
+                                    class="rounded-full bg-violet-100 px-1.5 py-0.5 text-xs text-violet-700"
+                                    >주소속</span
+                                >{/if}
+                            {#if part.jobTitle}<span class="text-gray-500">/ {part.jobTitle}</span
+                                >{/if}
                         </div>
                     {/each}
                 </div>
@@ -151,7 +193,11 @@ const TIMEZONE_OPTIONS = [
         {/if}
 
         <div class="flex justify-end">
-            <button type="submit" class="rounded-md bg-blue-600 px-6 py-2 text-sm font-medium text-white hover:bg-blue-700"> 저장 </button>
+            <button
+                type="submit"
+                class="rounded-md bg-blue-600 px-6 py-2 text-sm font-medium text-white hover:bg-blue-700">
+                저장
+            </button>
         </div>
     </form>
 </div>
diff --git a/src/routes/admin/+layout.server.ts b/src/routes/admin/+layout.server.ts
index f87932a..001859d 100644
--- a/src/routes/admin/+layout.server.ts
+++ b/src/routes/admin/+layout.server.ts
@@ -11,7 +11,10 @@ export const load: LayoutServerLoad = async ({ locals, url }) => {
     requireDbContext(locals);
 
     if (!locals.user) {
-        throw redirect(303, `/admin/login?redirectTo=${encodeURIComponent(url.pathname + url.search)}`);
+        throw redirect(
+            303,
+            `/admin/login?redirectTo=${encodeURIComponent(url.pathname + url.search)}`,
+        );
     }
 
     if (locals.user.role !== "admin") {
diff --git a/src/routes/admin/+layout.svelte b/src/routes/admin/+layout.svelte
index db4d7e3..eb24ea9 100644
--- a/src/routes/admin/+layout.svelte
+++ b/src/routes/admin/+layout.svelte
@@ -37,7 +37,9 @@ const orgMenuItems = [
             </div>
 
             <div class="border-b border-gray-200 px-6 py-4">
-                <p class="text-sm font-medium text-gray-900">{data.currentUser.displayName ?? "관리자"}</p>
+                <p class="text-sm font-medium text-gray-900">
+                    {data.currentUser.displayName ?? "관리자"}
+                </p>
                 <p class="text-sm text-gray-500">{data.currentUser.email}</p>
             </div>
 
@@ -47,7 +49,8 @@ const orgMenuItems = [
                         <li>
                             <a
                                 href={resolve(item.route)}
-                                class="block rounded-md px-3 py-2 text-sm font-medium transition-colors {page.url.pathname === resolve(item.route)
+                                class="block rounded-md px-3 py-2 text-sm font-medium transition-colors {page
+                                    .url.pathname === resolve(item.route)
                                     ? 'bg-blue-50 text-blue-700'
                                     : 'text-gray-700 hover:bg-gray-100'}">
                                 {t(item.key)}
@@ -57,7 +60,8 @@ const orgMenuItems = [
                 </ul>
 
                 <div>
-                    <p class="px-3 pb-1 text-xs font-semibold tracking-wider text-gray-400 uppercase">
+                    <p
+                        class="px-3 pb-1 text-xs font-semibold tracking-wider text-gray-400 uppercase">
                         {t("admin.org")}
                     </p>
                     <ul class="space-y-1">
@@ -65,7 +69,8 @@ const orgMenuItems = [
                             <li>
                                 <a
                                     href={resolve(item.route)}
-                                    class="block rounded-md px-3 py-2 text-sm font-medium transition-colors {page.url.pathname === resolve(item.route)
+                                    class="block rounded-md px-3 py-2 text-sm font-medium transition-colors {page
+                                        .url.pathname === resolve(item.route)
                                         ? 'bg-blue-50 text-blue-700'
                                         : 'text-gray-700 hover:bg-gray-100'}">
                                     {t(item.key)}
@@ -78,7 +83,9 @@ const orgMenuItems = [
 
             <div class="mt-auto p-4">
                 <form method="POST" action={resolve("/logout")}>
-                    <button type="submit" class="w-full rounded-md border border-gray-300 px-3 py-2 text-sm font-medium text-gray-700 transition hover:bg-gray-100">
+                    <button
+                        type="submit"
+                        class="w-full rounded-md border border-gray-300 px-3 py-2 text-sm font-medium text-gray-700 transition hover:bg-gray-100">
                         {t("admin.logout")}
                     </button>
                 </form>
diff --git a/src/routes/admin/+page.server.ts b/src/routes/admin/+page.server.ts
index b1e72c1..1e35688 100644
--- a/src/routes/admin/+page.server.ts
+++ b/src/routes/admin/+page.server.ts
@@ -1,11 +1,29 @@
 import { count, eq } from "drizzle-orm";
 import type { PageServerLoad } from "./$types";
 import { requireDbContext } from "$lib/server/auth/guards";
-import { auditEvents, departments, oidcClients, positions, samlSps, signingKeys, teams, users } from "$lib/server/db/schema";
+import {
+    auditEvents,
+    departments,
+    oidcClients,
+    positions,
+    samlSps,
+    signingKeys,
+    teams,
+    users,
+} from "$lib/server/db/schema";
 
 export const load: PageServerLoad = async ({ locals }) => {
     const { db, tenant } = requireDbContext(locals);
-    const [userCount, oidcClientCount, samlSpCount, signingKeyCount, auditEventCount, deptCount, teamCount, positionCount] = await Promise.all([
+    const [
+        userCount,
+        oidcClientCount,
+        samlSpCount,
+        signingKeyCount,
+        auditEventCount,
+        deptCount,
+        teamCount,
+        positionCount,
+    ] = await Promise.all([
         db.select({ count: count() }).from(users).where(eq(users.tenantId, tenant.id)),
         db.select({ count: count() }).from(oidcClients).where(eq(oidcClients.tenantId, tenant.id)),
         db.select({ count: count() }).from(samlSps).where(eq(samlSps.tenantId, tenant.id)),
diff --git a/src/routes/admin/+page.svelte b/src/routes/admin/+page.svelte
index 2ef7d41..d1cce5e 100644
--- a/src/routes/admin/+page.svelte
+++ b/src/routes/admin/+page.svelte
@@ -8,11 +8,15 @@ const { data } = $props<{ data: PageData }>();
 <div class="space-y-6">
     <div class="space-y-2">
         <h1 class="text-2xl font-bold text-gray-900">{t("admin.title")}</h1>
-        <p class="text-sm text-gray-500">기본 tenant 의 현재 운영 현황을 빠르게 확인할 수 있습니다.</p>
+        <p class="text-sm text-gray-500">
+            기본 tenant 의 현재 운영 현황을 빠르게 확인할 수 있습니다.
+        </p>
     </div>
 
     <div>
-        <p class="mb-3 text-xs font-semibold tracking-wider text-gray-400 uppercase">인증 프로토콜</p>
+        <p class="mb-3 text-xs font-semibold tracking-wider text-gray-400 uppercase">
+            인증 프로토콜
+        </p>
         <div class="grid grid-cols-2 gap-4 sm:grid-cols-3 xl:grid-cols-5">
             <div class="rounded-lg border border-gray-200 bg-white p-5 shadow-sm">
                 <h3 class="text-sm font-medium text-gray-500">{t("admin.users")}</h3>
diff --git a/src/routes/admin/audit/+page.server.ts b/src/routes/admin/audit/+page.server.ts
index ed78236..a9b2141 100644
--- a/src/routes/admin/audit/+page.server.ts
+++ b/src/routes/admin/audit/+page.server.ts
@@ -13,7 +13,9 @@ export const load: PageServerLoad = async ({ locals, url }) => {
     const outcomeFilter = url.searchParams.get("outcome")?.trim() || null;
     const cursorParam = url.searchParams.get("cursor")?.trim() || null;
 
-    const outcome = VALID_OUTCOMES.includes(outcomeFilter as (typeof VALID_OUTCOMES)[number]) ? (outcomeFilter as "success" | "failure") : null;
+    const outcome = VALID_OUTCOMES.includes(outcomeFilter as (typeof VALID_OUTCOMES)[number])
+        ? (outcomeFilter as "success" | "failure")
+        : null;
 
     const cursorMs = cursorParam ? Number.parseInt(cursorParam, 10) : NaN;
     const cursor = Number.isFinite(cursorMs) ? new Date(cursorMs) : null;
@@ -42,10 +44,15 @@ export const load: PageServerLoad = async ({ locals, url }) => {
 
     const hasMore = rowsPlusOne.length > PAGE_SIZE;
     const rows = hasMore ? rowsPlusOne.slice(0, PAGE_SIZE) : rowsPlusOne;
-    const nextCursor = hasMore && rows.length > 0 ? rows[rows.length - 1].createdAt.getTime() : null;
+    const nextCursor =
+        hasMore && rows.length > 0 ? rows[rows.length - 1].createdAt.getTime() : null;
 
     // 필터 선택지용 kind 목록
-    const kindRows = await db.selectDistinct({ kind: auditEvents.kind }).from(auditEvents).where(eq(auditEvents.tenantId, tenant.id)).orderBy(auditEvents.kind);
+    const kindRows = await db
+        .selectDistinct({ kind: auditEvents.kind })
+        .from(auditEvents)
+        .where(eq(auditEvents.tenantId, tenant.id))
+        .orderBy(auditEvents.kind);
 
     return {
         events: rows,
diff --git a/src/routes/admin/audit/+page.svelte b/src/routes/admin/audit/+page.svelte
index b1f51ec..b663853 100644
--- a/src/routes/admin/audit/+page.svelte
+++ b/src/routes/admin/audit/+page.svelte
@@ -55,15 +55,20 @@ function formatDetail(detailJson: string | null): string {
 <div class="space-y-6">
     <div class="flex items-center justify-between">
         <h1 class="text-2xl font-bold text-gray-900">감사 로그</h1>
-        <span class="text-sm text-gray-500">{data.events.length}건 표시 (페이지 {data.pageSize}건)</span>
+        <span class="text-sm text-gray-500"
+            >{data.events.length}건 표시 (페이지 {data.pageSize}건)</span>
     </div>
 
     <!-- 필터 -->
     <div class="rounded-xl border border-gray-200 bg-white p-4 shadow-sm">
         <div class="flex flex-wrap items-end gap-3">
             <div>
-                <label for="f-kind" class="block text-xs font-medium text-gray-600">이벤트 종류</label>
-                <select id="f-kind" bind:value={kindFilter} class="mt-1 rounded-md border border-gray-300 px-2 py-1.5 text-sm focus:border-blue-500 focus:outline-none">
+                <label for="f-kind" class="block text-xs font-medium text-gray-600"
+                    >이벤트 종류</label>
+                <select
+                    id="f-kind"
+                    bind:value={kindFilter}
+                    class="mt-1 rounded-md border border-gray-300 px-2 py-1.5 text-sm focus:border-blue-500 focus:outline-none">
                     <option value="">전체</option>
                     {#each data.kinds as k (k)}
                         <option value={k}>{k}</option>
@@ -72,15 +77,28 @@ function formatDetail(detailJson: string | null): string {
             </div>
             <div>
                 <label for="f-outcome" class="block text-xs font-medium text-gray-600">결과</label>
-                <select id="f-outcome" bind:value={outcomeFilter} class="mt-1 rounded-md border border-gray-300 px-2 py-1.5 text-sm focus:border-blue-500 focus:outline-none">
+                <select
+                    id="f-outcome"
+                    bind:value={outcomeFilter}
+                    class="mt-1 rounded-md border border-gray-300 px-2 py-1.5 text-sm focus:border-blue-500 focus:outline-none">
                     <option value="">전체</option>
                     <option value="success">성공</option>
                     <option value="failure">실패</option>
                 </select>
             </div>
             <div class="flex gap-2">
-                <button type="button" onclick={applyFilters} class="rounded-md bg-blue-600 px-3 py-1.5 text-sm font-medium text-white hover:bg-blue-700"> 적용 </button>
-                <button type="button" onclick={resetFilters} class="rounded-md border border-gray-300 px-3 py-1.5 text-sm text-gray-600 hover:bg-gray-50"> 초기화 </button>
+                <button
+                    type="button"
+                    onclick={applyFilters}
+                    class="rounded-md bg-blue-600 px-3 py-1.5 text-sm font-medium text-white hover:bg-blue-700">
+                    적용
+                </button>
+                <button
+                    type="button"
+                    onclick={resetFilters}
+                    class="rounded-md border border-gray-300 px-3 py-1.5 text-sm text-gray-600 hover:bg-gray-50">
+                    초기화
+                </button>
             </div>
         </div>
     </div>
@@ -90,32 +108,53 @@ function formatDetail(detailJson: string | null): string {
         <table class="min-w-full divide-y divide-gray-200">
             <thead class="bg-gray-50">
                 <tr>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">시각</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">사용자</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">이벤트</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">결과</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">IP</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">상세</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >시각</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >사용자</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >이벤트</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >결과</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >IP</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >상세</th>
                 </tr>
             </thead>
             <tbody class="divide-y divide-gray-200">
                 {#if data.events.length === 0}
                     <tr>
-                        <td colspan="6" class="px-6 py-8 text-center text-sm text-gray-500">감사 로그가 없습니다.</td>
+                        <td colspan="6" class="px-6 py-8 text-center text-sm text-gray-500"
+                            >감사 로그가 없습니다.</td>
                     </tr>
                 {:else}
                     {#each data.events as ev (ev.id)}
                         <tr class="hover:bg-gray-50">
-                            <td class="px-4 py-3 text-xs whitespace-nowrap text-gray-500">{dateTimeFormatter.format(ev.createdAt)}</td>
+                            <td class="px-4 py-3 text-xs whitespace-nowrap text-gray-500"
+                                >{dateTimeFormatter.format(ev.createdAt)}</td>
                             <td class="px-4 py-3 text-xs text-gray-600">{ev.userEmail ?? "—"}</td>
                             <td class="px-4 py-3 font-mono text-xs text-gray-800">{ev.kind}</td>
                             <td class="px-4 py-3">
-                                <span class="rounded-full px-2 py-0.5 text-xs font-medium {ev.outcome === 'success' ? 'bg-green-100 text-green-700' : 'bg-red-100 text-red-600'}">
+                                <span
+                                    class="rounded-full px-2 py-0.5 text-xs font-medium {ev.outcome ===
+                                    'success'
+                                        ? 'bg-green-100 text-green-700'
+                                        : 'bg-red-100 text-red-600'}">
                                     {ev.outcome === "success" ? "성공" : "실패"}
                                 </span>
                             </td>
-                            <td class="px-4 py-3 font-mono text-xs text-gray-400">{ev.ip ?? "—"}</td>
-                            <td class="max-w-70 truncate px-4 py-3 font-mono text-xs text-gray-500" title={ev.detailJson ?? ""}>
+                            <td class="px-4 py-3 font-mono text-xs text-gray-400"
+                                >{ev.ip ?? "—"}</td>
+                            <td
+                                class="max-w-70 truncate px-4 py-3 font-mono text-xs text-gray-500"
+                                title={ev.detailJson ?? ""}>
                                 {formatDetail(ev.detailJson)}
                             </td>
                         </tr>
@@ -127,7 +166,12 @@ function formatDetail(detailJson: string | null): string {
 
     {#if data.nextCursor !== null}
         <div class="flex justify-end">
-            <button type="button" onclick={goNext} class="rounded-md border border-gray-300 px-3 py-1.5 text-sm text-gray-700 hover:bg-gray-50"> 다음 페이지 → </button>
+            <button
+                type="button"
+                onclick={goNext}
+                class="rounded-md border border-gray-300 px-3 py-1.5 text-sm text-gray-700 hover:bg-gray-50">
+                다음 페이지 →
+            </button>
         </div>
     {/if}
 </div>
diff --git a/src/routes/admin/departments/+page.server.ts b/src/routes/admin/departments/+page.server.ts
index 53514c8..015e13f 100644
--- a/src/routes/admin/departments/+page.server.ts
+++ b/src/routes/admin/departments/+page.server.ts
@@ -7,7 +7,11 @@ import { departments } from "$lib/server/db/schema";
 export const load: PageServerLoad = async ({ locals }) => {
     const { db, tenant } = requireDbContext(locals);
 
-    const rows = await db.select().from(departments).where(eq(departments.tenantId, tenant.id)).orderBy(asc(departments.displayOrder), asc(departments.name));
+    const rows = await db
+        .select()
+        .from(departments)
+        .where(eq(departments.tenantId, tenant.id))
+        .orderBy(asc(departments.displayOrder), asc(departments.name));
 
     // 부모 이름을 서버에서 매핑
     const nameById = new Map(rows.map((r) => [r.id, r.name]));
@@ -17,7 +21,9 @@ export const load: PageServerLoad = async ({ locals }) => {
     }));
 
     // 상위 부서 선택용 목록 (활성 부서만)
-    const allDepts = rows.filter((r) => r.status === "active").map((r) => ({ id: r.id, name: r.name }));
+    const allDepts = rows
+        .filter((r) => r.status === "active")
+        .map((r) => ({ id: r.id, name: r.name }));
 
     return { departments: depts, allDepts };
 };
@@ -57,7 +63,8 @@ export const actions: Actions = {
         const status = String(fd.get("status") ?? "active") as "active" | "inactive";
 
         if (!id || !name) return fail(400, { error: "잘못된 요청입니다." });
-        if (parentId === id) return fail(400, { error: "자기 자신을 상위 부서로 설정할 수 없습니다." });
+        if (parentId === id)
+            return fail(400, { error: "자기 자신을 상위 부서로 설정할 수 없습니다." });
 
         await db
             .update(departments)
@@ -80,7 +87,9 @@ export const actions: Actions = {
         const id = String(fd.get("id") ?? "");
         if (!id) return fail(400, { error: "잘못된 요청입니다." });
 
-        await db.delete(departments).where(and(eq(departments.id, id), eq(departments.tenantId, tenant.id)));
+        await db
+            .delete(departments)
+            .where(and(eq(departments.id, id), eq(departments.tenantId, tenant.id)));
         return { deleted: true };
     },
 };
diff --git a/src/routes/admin/departments/+page.svelte b/src/routes/admin/departments/+page.svelte
index c3e3e7c..9e3d322 100644
--- a/src/routes/admin/departments/+page.svelte
+++ b/src/routes/admin/departments/+page.svelte
@@ -8,7 +8,9 @@ let showCreate = $state(false);
 let editId = $state<string | null>(null);
 
 const err = $derived((form as { error?: string } | null)?.error ?? null);
-const createErr = $derived((form as { create?: boolean; error?: string } | null)?.create ? err : null);
+const createErr = $derived(
+    (form as { create?: boolean; error?: string } | null)?.create ? err : null,
+);
 
 const STATUS_LABEL: Record<string, string> = { active: "활성", inactive: "비활성" };
 const STATUS_COLOR: Record<string, string> = {
@@ -20,7 +22,10 @@ const STATUS_COLOR: Record<string, string> = {
 <div class="space-y-6">
     <div class="flex items-center justify-between">
         <h1 class="text-2xl font-bold text-gray-900">부서 관리</h1>
-        <button type="button" onclick={() => (showCreate = !showCreate)} class="rounded-md bg-blue-600 px-4 py-2 text-sm font-medium text-white transition hover:bg-blue-700">
+        <button
+            type="button"
+            onclick={() => (showCreate = !showCreate)}
+            class="rounded-md bg-blue-600 px-4 py-2 text-sm font-medium text-white transition hover:bg-blue-700">
             {showCreate ? "취소" : "+ 부서 추가"}
         </button>
     </div>
@@ -29,7 +34,8 @@ const STATUS_COLOR: Record<string, string> = {
         <div class="rounded-xl border border-blue-100 bg-blue-50 p-5">
             <h2 class="mb-4 font-semibold text-blue-900">새 부서 추가</h2>
             {#if createErr}
-                <p class="mb-3 rounded-lg border border-red-200 bg-red-50 px-3 py-2 text-sm text-red-700">
+                <p
+                    class="mb-3 rounded-lg border border-red-200 bg-red-50 px-3 py-2 text-sm text-red-700">
                     {createErr}
                 </p>
             {/if}
@@ -43,7 +49,8 @@ const STATUS_COLOR: Record<string, string> = {
                     }}
                 class="grid grid-cols-1 gap-3 sm:grid-cols-2">
                 <div>
-                    <label for="dept-name" class="block text-xs font-medium text-gray-700">부서명 *</label>
+                    <label for="dept-name" class="block text-xs font-medium text-gray-700"
+                        >부서명 *</label>
                     <input
                         id="dept-name"
                         type="text"
@@ -53,7 +60,8 @@ const STATUS_COLOR: Record<string, string> = {
                         class="mt-1 w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div>
-                    <label for="dept-code" class="block text-xs font-medium text-gray-700">코드</label>
+                    <label for="dept-code" class="block text-xs font-medium text-gray-700"
+                        >코드</label>
                     <input
                         id="dept-code"
                         type="text"
@@ -62,8 +70,12 @@ const STATUS_COLOR: Record<string, string> = {
                         class="mt-1 w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div>
-                    <label for="dept-parentId" class="block text-xs font-medium text-gray-700">상위 부서</label>
-                    <select id="dept-parentId" name="parentId" class="mt-1 w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none">
+                    <label for="dept-parentId" class="block text-xs font-medium text-gray-700"
+                        >상위 부서</label>
+                    <select
+                        id="dept-parentId"
+                        name="parentId"
+                        class="mt-1 w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none">
                         <option value="">없음 (최상위)</option>
                         {#each data.allDepts as dept (dept.id)}
                             <option value={dept.id}>{dept.name}</option>
@@ -71,7 +83,8 @@ const STATUS_COLOR: Record<string, string> = {
                     </select>
                 </div>
                 <div>
-                    <label for="dept-displayOrder" class="block text-xs font-medium text-gray-700">표시 순서</label>
+                    <label for="dept-displayOrder" class="block text-xs font-medium text-gray-700"
+                        >표시 순서</label>
                     <input
                         id="dept-displayOrder"
                         type="number"
@@ -80,34 +93,57 @@ const STATUS_COLOR: Record<string, string> = {
                         class="mt-1 w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div class="sm:col-span-2">
-                    <label for="dept-description" class="block text-xs font-medium text-gray-700">설명</label>
-                    <input id="dept-description" type="text" name="description" class="mt-1 w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
+                    <label for="dept-description" class="block text-xs font-medium text-gray-700"
+                        >설명</label>
+                    <input
+                        id="dept-description"
+                        type="text"
+                        name="description"
+                        class="mt-1 w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div class="flex justify-end sm:col-span-2">
-                    <button type="submit" class="rounded-md bg-blue-600 px-4 py-1.5 text-sm font-medium text-white hover:bg-blue-700">추가</button>
+                    <button
+                        type="submit"
+                        class="rounded-md bg-blue-600 px-4 py-1.5 text-sm font-medium text-white hover:bg-blue-700"
+                        >추가</button>
                 </div>
             </form>
         </div>
     {/if}
 
     {#if err && !createErr}
-        <p class="rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700">{err}</p>
+        <p class="rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700">
+            {err}
+        </p>
     {/if}
 
     <div class="overflow-x-auto rounded-xl border border-gray-200 bg-white shadow-sm">
         <table class="min-w-full divide-y divide-gray-200">
             <thead class="bg-gray-50">
                 <tr>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">부서명</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">코드</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">상위 부서</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">상태</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">작업</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >부서명</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >코드</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >상위 부서</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >상태</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >작업</th>
                 </tr>
             </thead>
             <tbody class="divide-y divide-gray-200">
                 {#if data.departments.length === 0}
-                    <tr><td colspan="5" class="px-6 py-8 text-center text-sm text-gray-500">등록된 부서가 없습니다.</td></tr>
+                    <tr
+                        ><td colspan="5" class="px-6 py-8 text-center text-sm text-gray-500"
+                            >등록된 부서가 없습니다.</td
+                        ></tr>
                 {:else}
                     {#each data.departments as dept (dept.id)}
                         <tr class="hover:bg-gray-50">
@@ -123,21 +159,51 @@ const STATUS_COLOR: Record<string, string> = {
                                             }}
                                         class="grid grid-cols-2 gap-2 sm:grid-cols-4">
                                         <input type="hidden" name="id" value={dept.id} />
-                                        <input type="text" name="name" value={dept.name} required placeholder="부서명" class="rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none" />
-                                        <input type="text" name="code" value={dept.code ?? ""} placeholder="코드" class="rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none" />
-                                        <select name="parentId" class="rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none">
+                                        <input
+                                            type="text"
+                                            name="name"
+                                            value={dept.name}
+                                            required
+                                            placeholder="부서명"
+                                            class="rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none" />
+                                        <input
+                                            type="text"
+                                            name="code"
+                                            value={dept.code ?? ""}
+                                            placeholder="코드"
+                                            class="rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none" />
+                                        <select
+                                            name="parentId"
+                                            class="rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none">
                                             <option value="">없음 (최상위)</option>
                                             {#each data.allDepts.filter((d: { id: string; name: string }) => d.id !== dept.id) as d (d.id)}
-                                                <option value={d.id} selected={dept.parentId === d.id}>{d.name}</option>
+                                                <option
+                                                    value={d.id}
+                                                    selected={dept.parentId === d.id}
+                                                    >{d.name}</option>
                                             {/each}
                                         </select>
-                                        <select name="status" class="rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none">
-                                            <option value="active" selected={dept.status === "active"}>활성</option>
-                                            <option value="inactive" selected={dept.status === "inactive"}>비활성</option>
+                                        <select
+                                            name="status"
+                                            class="rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none">
+                                            <option
+                                                value="active"
+                                                selected={dept.status === "active"}>활성</option>
+                                            <option
+                                                value="inactive"
+                                                selected={dept.status === "inactive"}
+                                                >비활성</option>
                                         </select>
                                         <div class="col-span-2 flex gap-2 sm:col-span-4">
-                                            <button type="submit" class="rounded bg-blue-600 px-3 py-1 text-xs text-white hover:bg-blue-700">저장</button>
-                                            <button type="button" onclick={() => (editId = null)} class="text-xs text-gray-400 hover:text-gray-600">취소</button>
+                                            <button
+                                                type="submit"
+                                                class="rounded bg-blue-600 px-3 py-1 text-xs text-white hover:bg-blue-700"
+                                                >저장</button>
+                                            <button
+                                                type="button"
+                                                onclick={() => (editId = null)}
+                                                class="text-xs text-gray-400 hover:text-gray-600"
+                                                >취소</button>
                                         </div>
                                     </form>
                                 </td>
@@ -148,21 +214,35 @@ const STATUS_COLOR: Record<string, string> = {
                                     </p>
                                 </td>
                                 <td class="px-4 py-3 text-sm text-gray-500">{dept.code ?? "-"}</td>
-                                <td class="px-4 py-3 text-sm text-gray-500">{dept.parentName ?? "-"}</td>
+                                <td class="px-4 py-3 text-sm text-gray-500"
+                                    >{dept.parentName ?? "-"}</td>
                                 <td class="px-4 py-3">
-                                    <span class="rounded-full px-2 py-0.5 text-xs font-medium {STATUS_COLOR[dept.status]}">{STATUS_LABEL[dept.status]}</span>
+                                    <span
+                                        class="rounded-full px-2 py-0.5 text-xs font-medium {STATUS_COLOR[
+                                            dept.status
+                                        ]}">{STATUS_LABEL[dept.status]}</span>
                                 </td>
                             {/if}
                             <td class="px-4 py-3">
                                 <div class="flex gap-2">
-                                    <button type="button" onclick={() => (editId = editId === dept.id ? null : dept.id)} class="text-xs text-blue-500 hover:text-blue-700">수정</button>
+                                    <button
+                                        type="button"
+                                        onclick={() =>
+                                            (editId = editId === dept.id ? null : dept.id)}
+                                        class="text-xs text-blue-500 hover:text-blue-700"
+                                        >수정</button>
                                     <form method="POST" action="?/delete" use:enhance>
                                         <input type="hidden" name="id" value={dept.id} />
                                         <button
                                             type="submit"
                                             class="text-xs text-red-400 hover:text-red-600"
                                             onclick={(e) => {
-                                                if (!confirm("삭제하시겠습니까? 하위 부서의 상위 부서 연결이 해제됩니다.")) e.preventDefault();
+                                                if (
+                                                    !confirm(
+                                                        "삭제하시겠습니까? 하위 부서의 상위 부서 연결이 해제됩니다.",
+                                                    )
+                                                )
+                                                    e.preventDefault();
                                             }}>삭제</button>
                                     </form>
                                 </div>
diff --git a/src/routes/admin/ldap-providers/+page.server.ts b/src/routes/admin/ldap-providers/+page.server.ts
index aa3bbd8..273cc25 100644
--- a/src/routes/admin/ldap-providers/+page.server.ts
+++ b/src/routes/admin/ldap-providers/+page.server.ts
@@ -49,9 +49,16 @@ function buildConfig(fd: FormData): LdapProviderConfig {
     return config;
 }
 
-async function encryptBindPassword(config: LdapProviderConfig, signingKeySecret: string | undefined): Promise<LdapProviderConfig> {
+async function encryptBindPassword(
+    config: LdapProviderConfig,
+    signingKeySecret: string | undefined,
+): Promise<LdapProviderConfig> {
     if (!config.bindPassword || !signingKeySecret) return config;
-    const enc = await encryptSecret(config.bindPassword, signingKeySecret, "idp-ldap-bind-password-v1");
+    const enc = await encryptSecret(
+        config.bindPassword,
+        signingKeySecret,
+        "idp-ldap-bind-password-v1",
+    );
     // eslint-disable-next-line @typescript-eslint/no-unused-vars
     const { bindPassword: _, ...rest } = config;
     return { ...rest, bindPasswordEnc: enc };
@@ -140,7 +147,9 @@ export const actions: Actions = {
 
         if (!id) return fail(400, { error: "잘못된 요청입니다." });
 
-        await db.delete(identityProviders).where(and(eq(identityProviders.id, id), eq(identityProviders.tenantId, tenant.id)));
+        await db
+            .delete(identityProviders)
+            .where(and(eq(identityProviders.id, id), eq(identityProviders.tenantId, tenant.id)));
 
         const meta = getRequestMetadata(event);
         await recordAuditEvent(db, {
diff --git a/src/routes/admin/ldap-providers/+page.svelte b/src/routes/admin/ldap-providers/+page.svelte
index 0e268c9..5664061 100644
--- a/src/routes/admin/ldap-providers/+page.svelte
+++ b/src/routes/admin/ldap-providers/+page.svelte
@@ -10,7 +10,11 @@ const dateFormatter = new Intl.DateTimeFormat("ko-KR", { dateStyle: "medium" });
 let showCreate = $state(false);
 let editingId = $state<string | null>(null);
 
-const createErr = $derived((form as { create?: boolean; error?: string } | null)?.create ? ((form as { error?: string } | null)?.error ?? null) : null);
+const createErr = $derived(
+    (form as { create?: boolean; error?: string } | null)?.create
+        ? ((form as { error?: string } | null)?.error ?? null)
+        : null,
+);
 const globalErr = $derived(createErr ? null : ((form as { error?: string } | null)?.error ?? null));
 
 function parseConfig(configJson: string | null): LdapProviderConfig {
@@ -37,11 +41,17 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
     </div>
 
     {#if (form as { create?: boolean } | null)?.create && !createErr}
-        <div class="rounded-xl border border-green-200 bg-green-50 px-4 py-3 text-sm text-green-800">LDAP 프로바이더가 추가되었습니다. 테스트 후 활성화하세요.</div>
+        <div
+            class="rounded-xl border border-green-200 bg-green-50 px-4 py-3 text-sm text-green-800">
+            LDAP 프로바이더가 추가되었습니다. 테스트 후 활성화하세요.
+        </div>
     {/if}
 
     {#if (form as { update?: boolean } | null)?.update}
-        <div class="rounded-xl border border-green-200 bg-green-50 px-4 py-3 text-sm text-green-800">저장되었습니다.</div>
+        <div
+            class="rounded-xl border border-green-200 bg-green-50 px-4 py-3 text-sm text-green-800">
+            저장되었습니다.
+        </div>
     {/if}
 
     {#if globalErr}
@@ -55,7 +65,8 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
         <div class="rounded-xl border border-blue-100 bg-blue-50 p-5">
             <h2 class="mb-4 font-semibold text-blue-900">새 LDAP 프로바이더</h2>
             {#if createErr}
-                <div class="mb-3 rounded-lg border border-red-200 bg-red-50 px-3 py-2 text-sm text-red-700">
+                <div
+                    class="mb-3 rounded-lg border border-red-200 bg-red-50 px-3 py-2 text-sm text-red-700">
                     {createErr}
                 </div>
             {/if}
@@ -71,7 +82,8 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
                 <!-- 기본 정보 -->
                 <div class="grid grid-cols-1 gap-3 sm:grid-cols-2">
                     <div>
-                        <label for="c-name" class="block text-xs font-medium text-gray-700">이름 *</label>
+                        <label for="c-name" class="block text-xs font-medium text-gray-700"
+                            >이름 *</label>
                         <input
                             id="c-name"
                             type="text"
@@ -81,15 +93,20 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
                             class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                     </div>
                     <div>
-                        <label for="c-tlsMode" class="block text-xs font-medium text-gray-700">TLS 모드</label>
-                        <select id="c-tlsMode" name="tlsMode" class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none">
+                        <label for="c-tlsMode" class="block text-xs font-medium text-gray-700"
+                            >TLS 모드</label>
+                        <select
+                            id="c-tlsMode"
+                            name="tlsMode"
+                            class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none">
                             <option value="none">없음 (ldap://)</option>
                             <option value="tls">TLS (ldaps://)</option>
                             <option value="starttls">STARTTLS</option>
                         </select>
                     </div>
                     <div>
-                        <label for="c-host" class="block text-xs font-medium text-gray-700">호스트 *</label>
+                        <label for="c-host" class="block text-xs font-medium text-gray-700"
+                            >호스트 *</label>
                         <input
                             id="c-host"
                             type="text"
@@ -99,7 +116,8 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
                             class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                     </div>
                     <div>
-                        <label for="c-port" class="block text-xs font-medium text-gray-700">포트</label>
+                        <label for="c-port" class="block text-xs font-medium text-gray-700"
+                            >포트</label>
                         <input
                             id="c-port"
                             type="number"
@@ -108,7 +126,8 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
                             class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                     </div>
                     <div>
-                        <label for="c-baseDN" class="block text-xs font-medium text-gray-700">Base DN</label>
+                        <label for="c-baseDN" class="block text-xs font-medium text-gray-700"
+                            >Base DN</label>
                         <input
                             id="c-baseDN"
                             type="text"
@@ -120,12 +139,21 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
 
                 <!-- 인증 방식 (접이식) -->
                 <details class="rounded-lg border border-gray-200 bg-white" open>
-                    <summary class="cursor-pointer px-4 py-2 text-xs font-medium text-gray-600 hover:bg-gray-50"> 인증 방식 — Admin Bind + Search (ou가 여러 개인 경우) 또는 DN 패턴 </summary>
+                    <summary
+                        class="cursor-pointer px-4 py-2 text-xs font-medium text-gray-600 hover:bg-gray-50">
+                        인증 방식 — Admin Bind + Search (ou가 여러 개인 경우) 또는 DN 패턴
+                    </summary>
                     <div class="space-y-3 p-4">
-                        <p class="text-xs text-gray-500">Admin Bind DN을 입력하면 Search 방식을 사용합니다. 비워두면 유저 DN 패턴을 사용합니다.</p>
+                        <p class="text-xs text-gray-500">
+                            Admin Bind DN을 입력하면 Search 방식을 사용합니다. 비워두면 유저 DN
+                            패턴을 사용합니다.
+                        </p>
                         <div class="grid grid-cols-1 gap-3 sm:grid-cols-2">
                             <div>
-                                <label for="c-bindDN" class="block text-xs font-medium text-gray-700">Admin Bind DN</label>
+                                <label
+                                    for="c-bindDN"
+                                    class="block text-xs font-medium text-gray-700"
+                                    >Admin Bind DN</label>
                                 <input
                                     id="c-bindDN"
                                     type="text"
@@ -134,7 +162,10 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
                                     class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                             </div>
                             <div>
-                                <label for="c-bindPw" class="block text-xs font-medium text-gray-700">Admin Bind 패스워드</label>
+                                <label
+                                    for="c-bindPw"
+                                    class="block text-xs font-medium text-gray-700"
+                                    >Admin Bind 패스워드</label>
                                 <input
                                     id="c-bindPw"
                                     type="password"
@@ -142,8 +173,11 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
                                     class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                             </div>
                             <div>
-                                <label for="c-filter" class="block text-xs font-medium text-gray-700">
-                                    유저 검색 필터 <span class="text-gray-400">(기본: (uid=&#123;username&#125;))</span>
+                                <label
+                                    for="c-filter"
+                                    class="block text-xs font-medium text-gray-700">
+                                    유저 검색 필터 <span class="text-gray-400"
+                                        >(기본: (uid=&#123;username&#125;))</span>
                                 </label>
                                 <input
                                     id="c-filter"
@@ -153,8 +187,11 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
                                     class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                             </div>
                             <div>
-                                <label for="c-pattern2" class="block text-xs font-medium text-gray-700">
-                                    유저 DN 패턴 <span class="text-gray-400">(Admin Bind 미사용 시)</span>
+                                <label
+                                    for="c-pattern2"
+                                    class="block text-xs font-medium text-gray-700">
+                                    유저 DN 패턴 <span class="text-gray-400"
+                                        >(Admin Bind 미사용 시)</span>
                                 </label>
                                 <input
                                     id="c-pattern2"
@@ -169,10 +206,13 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
 
                 <!-- 속성 매핑 (접이식) -->
                 <details class="rounded-lg border border-gray-200 bg-white">
-                    <summary class="cursor-pointer px-4 py-2 text-xs font-medium text-gray-600 hover:bg-gray-50">속성 매핑 (기본값: mail, cn, givenName, sn)</summary>
+                    <summary
+                        class="cursor-pointer px-4 py-2 text-xs font-medium text-gray-600 hover:bg-gray-50"
+                        >속성 매핑 (기본값: mail, cn, givenName, sn)</summary>
                     <div class="grid grid-cols-2 gap-3 p-4">
                         <div>
-                            <label for="c-attrEmail" class="block text-xs font-medium text-gray-700">이메일 속성</label>
+                            <label for="c-attrEmail" class="block text-xs font-medium text-gray-700"
+                                >이메일 속성</label>
                             <input
                                 id="c-attrEmail"
                                 type="text"
@@ -181,7 +221,10 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
                                 class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                         </div>
                         <div>
-                            <label for="c-attrDisplay" class="block text-xs font-medium text-gray-700">표시 이름 속성</label>
+                            <label
+                                for="c-attrDisplay"
+                                class="block text-xs font-medium text-gray-700"
+                                >표시 이름 속성</label>
                             <input
                                 id="c-attrDisplay"
                                 type="text"
@@ -190,7 +233,8 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
                                 class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                         </div>
                         <div>
-                            <label for="c-attrGiven" class="block text-xs font-medium text-gray-700">이름 속성</label>
+                            <label for="c-attrGiven" class="block text-xs font-medium text-gray-700"
+                                >이름 속성</label>
                             <input
                                 id="c-attrGiven"
                                 type="text"
@@ -199,7 +243,9 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
                                 class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                         </div>
                         <div>
-                            <label for="c-attrFamily" class="block text-xs font-medium text-gray-700">성 속성</label>
+                            <label
+                                for="c-attrFamily"
+                                class="block text-xs font-medium text-gray-700">성 속성</label>
                             <input
                                 id="c-attrFamily"
                                 type="text"
@@ -211,7 +257,10 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
                 </details>
 
                 <div class="flex justify-end">
-                    <button type="submit" class="rounded-md bg-blue-600 px-4 py-1.5 text-sm font-medium text-white hover:bg-blue-700">추가</button>
+                    <button
+                        type="submit"
+                        class="rounded-md bg-blue-600 px-4 py-1.5 text-sm font-medium text-white hover:bg-blue-700"
+                        >추가</button>
                 </div>
             </form>
         </div>
@@ -222,18 +271,32 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
         <table class="min-w-full divide-y divide-gray-200">
             <thead class="bg-gray-50">
                 <tr>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">이름</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">호스트</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">유저 DN 패턴</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">상태</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">생성</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">작업</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >이름</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >호스트</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >유저 DN 패턴</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >상태</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >생성</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >작업</th>
                 </tr>
             </thead>
             <tbody class="divide-y divide-gray-200">
                 {#if data.providers.length === 0}
                     <tr>
-                        <td colspan="6" class="px-6 py-8 text-center text-sm text-gray-500"> 등록된 LDAP 프로바이더가 없습니다. </td>
+                        <td colspan="6" class="px-6 py-8 text-center text-sm text-gray-500">
+                            등록된 LDAP 프로바이더가 없습니다.
+                        </td>
                     </tr>
                 {:else}
                     {#each data.providers as provider (provider.id)}
@@ -249,14 +312,23 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
                                 {cfg.userDnPattern}
                             </td>
                             <td class="px-4 py-3">
-                                <span class="rounded-full px-2 py-0.5 text-xs font-medium {provider.enabled ? 'bg-green-100 text-green-700' : 'bg-gray-100 text-gray-500'}">
+                                <span
+                                    class="rounded-full px-2 py-0.5 text-xs font-medium {provider.enabled
+                                        ? 'bg-green-100 text-green-700'
+                                        : 'bg-gray-100 text-gray-500'}">
                                     {provider.enabled ? "활성" : "비활성"}
                                 </span>
                             </td>
-                            <td class="px-4 py-3 text-xs text-gray-400">{dateFormatter.format(provider.createdAt)}</td>
+                            <td class="px-4 py-3 text-xs text-gray-400"
+                                >{dateFormatter.format(provider.createdAt)}</td>
                             <td class="px-4 py-3">
                                 <div class="flex items-center gap-2">
-                                    <button type="button" onclick={() => (editingId = editingId === provider.id ? null : provider.id)} class="text-xs text-blue-500 hover:text-blue-700">
+                                    <button
+                                        type="button"
+                                        onclick={() =>
+                                            (editingId =
+                                                editingId === provider.id ? null : provider.id)}
+                                        class="text-xs text-blue-500 hover:text-blue-700">
                                         {editingId === provider.id ? "접기" : "편집"}
                                     </button>
                                     <form method="POST" action="?/delete" use:enhance>
@@ -265,7 +337,8 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
                                             type="submit"
                                             class="text-xs text-red-400 hover:text-red-600"
                                             onclick={(e) => {
-                                                if (!confirm("LDAP 프로바이더를 삭제하시겠습니까?")) e.preventDefault();
+                                                if (!confirm("LDAP 프로바이더를 삭제하시겠습니까?"))
+                                                    e.preventDefault();
                                             }}>
                                             삭제
                                         </button>
@@ -291,7 +364,10 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
                                         <input type="hidden" name="id" value={provider.id} />
                                         <div class="grid grid-cols-1 gap-3 sm:grid-cols-2">
                                             <div>
-                                                <label for="e-name-{provider.id}" class="block text-xs font-medium text-gray-700">이름 *</label>
+                                                <label
+                                                    for="e-name-{provider.id}"
+                                                    class="block text-xs font-medium text-gray-700"
+                                                    >이름 *</label>
                                                 <input
                                                     id="e-name-{provider.id}"
                                                     type="text"
@@ -301,18 +377,33 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
                                                     class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                                             </div>
                                             <div>
-                                                <label for="e-tls-{provider.id}" class="block text-xs font-medium text-gray-700">TLS 모드</label>
+                                                <label
+                                                    for="e-tls-{provider.id}"
+                                                    class="block text-xs font-medium text-gray-700"
+                                                    >TLS 모드</label>
                                                 <select
                                                     id="e-tls-{provider.id}"
                                                     name="tlsMode"
                                                     class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none">
-                                                    <option value="none" selected={c.tlsMode === "none"}>없음 (ldap://)</option>
-                                                    <option value="tls" selected={c.tlsMode === "tls"}>TLS (ldaps://)</option>
-                                                    <option value="starttls" selected={c.tlsMode === "starttls"}>STARTTLS</option>
+                                                    <option
+                                                        value="none"
+                                                        selected={c.tlsMode === "none"}
+                                                        >없음 (ldap://)</option>
+                                                    <option
+                                                        value="tls"
+                                                        selected={c.tlsMode === "tls"}
+                                                        >TLS (ldaps://)</option>
+                                                    <option
+                                                        value="starttls"
+                                                        selected={c.tlsMode === "starttls"}
+                                                        >STARTTLS</option>
                                                 </select>
                                             </div>
                                             <div>
-                                                <label for="e-host-{provider.id}" class="block text-xs font-medium text-gray-700">호스트 *</label>
+                                                <label
+                                                    for="e-host-{provider.id}"
+                                                    class="block text-xs font-medium text-gray-700"
+                                                    >호스트 *</label>
                                                 <input
                                                     id="e-host-{provider.id}"
                                                     type="text"
@@ -322,7 +413,10 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
                                                     class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                                             </div>
                                             <div>
-                                                <label for="e-port-{provider.id}" class="block text-xs font-medium text-gray-700">포트</label>
+                                                <label
+                                                    for="e-port-{provider.id}"
+                                                    class="block text-xs font-medium text-gray-700"
+                                                    >포트</label>
                                                 <input
                                                     id="e-port-{provider.id}"
                                                     type="number"
@@ -331,7 +425,10 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
                                                     class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                                             </div>
                                             <div>
-                                                <label for="e-base-{provider.id}" class="block text-xs font-medium text-gray-700">Base DN</label>
+                                                <label
+                                                    for="e-base-{provider.id}"
+                                                    class="block text-xs font-medium text-gray-700"
+                                                    >Base DN</label>
                                                 <input
                                                     id="e-base-{provider.id}"
                                                     type="text"
@@ -341,12 +438,20 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
                                             </div>
                                         </div>
 
-                                        <details class="rounded-lg border border-gray-200 bg-white" open>
-                                            <summary class="cursor-pointer px-4 py-2 text-xs font-medium text-gray-600 hover:bg-gray-50"> 인증 방식 </summary>
+                                        <details
+                                            class="rounded-lg border border-gray-200 bg-white"
+                                            open>
+                                            <summary
+                                                class="cursor-pointer px-4 py-2 text-xs font-medium text-gray-600 hover:bg-gray-50">
+                                                인증 방식
+                                            </summary>
                                             <div class="space-y-3 p-4">
                                                 <div class="grid grid-cols-1 gap-3 sm:grid-cols-2">
                                                     <div>
-                                                        <label for="e-bindDN-{provider.id}" class="block text-xs font-medium text-gray-700">Admin Bind DN</label>
+                                                        <label
+                                                            for="e-bindDN-{provider.id}"
+                                                            class="block text-xs font-medium text-gray-700"
+                                                            >Admin Bind DN</label>
                                                         <input
                                                             id="e-bindDN-{provider.id}"
                                                             type="text"
@@ -356,7 +461,10 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
                                                             class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                                                     </div>
                                                     <div>
-                                                        <label for="e-bindPw-{provider.id}" class="block text-xs font-medium text-gray-700">Admin Bind 패스워드</label>
+                                                        <label
+                                                            for="e-bindPw-{provider.id}"
+                                                            class="block text-xs font-medium text-gray-700"
+                                                            >Admin Bind 패스워드</label>
                                                         <input
                                                             id="e-bindPw-{provider.id}"
                                                             type="password"
@@ -365,7 +473,11 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
                                                             class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                                                     </div>
                                                     <div>
-                                                        <label for="e-filter-{provider.id}" class="block text-xs font-medium text-gray-700"> 유저 검색 필터 </label>
+                                                        <label
+                                                            for="e-filter-{provider.id}"
+                                                            class="block text-xs font-medium text-gray-700">
+                                                            유저 검색 필터
+                                                        </label>
                                                         <input
                                                             id="e-filter-{provider.id}"
                                                             type="text"
@@ -375,8 +487,11 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
                                                             class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                                                     </div>
                                                     <div>
-                                                        <label for="e-pattern-{provider.id}" class="block text-xs font-medium text-gray-700">
-                                                            유저 DN 패턴 <span class="text-gray-400">(Admin Bind 미사용 시)</span>
+                                                        <label
+                                                            for="e-pattern-{provider.id}"
+                                                            class="block text-xs font-medium text-gray-700">
+                                                            유저 DN 패턴 <span class="text-gray-400"
+                                                                >(Admin Bind 미사용 시)</span>
                                                         </label>
                                                         <input
                                                             id="e-pattern-{provider.id}"
@@ -391,10 +506,15 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
                                         </details>
 
                                         <details class="rounded-lg border border-gray-200 bg-white">
-                                            <summary class="cursor-pointer px-4 py-2 text-xs font-medium text-gray-600 hover:bg-gray-50">속성 매핑</summary>
+                                            <summary
+                                                class="cursor-pointer px-4 py-2 text-xs font-medium text-gray-600 hover:bg-gray-50"
+                                                >속성 매핑</summary>
                                             <div class="grid grid-cols-2 gap-3 p-4">
                                                 <div>
-                                                    <label for="e-attrEmail-{provider.id}" class="block text-xs font-medium text-gray-700">이메일 속성</label>
+                                                    <label
+                                                        for="e-attrEmail-{provider.id}"
+                                                        class="block text-xs font-medium text-gray-700"
+                                                        >이메일 속성</label>
                                                     <input
                                                         id="e-attrEmail-{provider.id}"
                                                         type="text"
@@ -404,7 +524,10 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
                                                         class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                                                 </div>
                                                 <div>
-                                                    <label for="e-attrDisplay-{provider.id}" class="block text-xs font-medium text-gray-700">표시 이름 속성</label>
+                                                    <label
+                                                        for="e-attrDisplay-{provider.id}"
+                                                        class="block text-xs font-medium text-gray-700"
+                                                        >표시 이름 속성</label>
                                                     <input
                                                         id="e-attrDisplay-{provider.id}"
                                                         type="text"
@@ -414,7 +537,10 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
                                                         class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                                                 </div>
                                                 <div>
-                                                    <label for="e-attrGiven-{provider.id}" class="block text-xs font-medium text-gray-700">이름 속성</label>
+                                                    <label
+                                                        for="e-attrGiven-{provider.id}"
+                                                        class="block text-xs font-medium text-gray-700"
+                                                        >이름 속성</label>
                                                     <input
                                                         id="e-attrGiven-{provider.id}"
                                                         type="text"
@@ -424,7 +550,10 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
                                                         class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                                                 </div>
                                                 <div>
-                                                    <label for="e-attrFamily-{provider.id}" class="block text-xs font-medium text-gray-700">성 속성</label>
+                                                    <label
+                                                        for="e-attrFamily-{provider.id}"
+                                                        class="block text-xs font-medium text-gray-700"
+                                                        >성 속성</label>
                                                     <input
                                                         id="e-attrFamily-{provider.id}"
                                                         type="text"
@@ -445,12 +574,20 @@ function parseConfig(configJson: string | null): LdapProviderConfig {
                                                     value="true"
                                                     checked={provider.enabled}
                                                     class="h-4 w-4 rounded border-gray-300 text-blue-600" />
-                                                <label for="e-enabled-{provider.id}" class="text-xs text-gray-700">활성화</label>
+                                                <label
+                                                    for="e-enabled-{provider.id}"
+                                                    class="text-xs text-gray-700">활성화</label>
                                             </div>
                                             <div class="flex gap-2">
-                                                <button type="button" onclick={() => (editingId = null)} class="rounded-md border border-gray-300 px-3 py-1.5 text-xs text-gray-600 hover:bg-gray-50"
+                                                <button
+                                                    type="button"
+                                                    onclick={() => (editingId = null)}
+                                                    class="rounded-md border border-gray-300 px-3 py-1.5 text-xs text-gray-600 hover:bg-gray-50"
                                                     >취소</button>
-                                                <button type="submit" class="rounded-md bg-blue-600 px-3 py-1.5 text-xs font-medium text-white hover:bg-blue-700">저장</button>
+                                                <button
+                                                    type="submit"
+                                                    class="rounded-md bg-blue-600 px-3 py-1.5 text-xs font-medium text-white hover:bg-blue-700"
+                                                    >저장</button>
                                             </div>
                                         </div>
                                     </form>
diff --git a/src/routes/admin/login/+page.server.ts b/src/routes/admin/login/+page.server.ts
index d59b533..9b0bb29 100644
--- a/src/routes/admin/login/+page.server.ts
+++ b/src/routes/admin/login/+page.server.ts
@@ -2,7 +2,11 @@ import { fail, redirect } from "@sveltejs/kit";
 import type { Actions, PageServerLoad } from "./$types";
 import { getRequestMetadata, recordAuditEvent } from "$lib/server/audit";
 import { requireDbContext } from "$lib/server/auth/guards";
-import { authenticateLocalUser, hasTotpCredential, normalizeUsername } from "$lib/server/auth/users";
+import {
+    authenticateLocalUser,
+    hasTotpCredential,
+    normalizeUsername,
+} from "$lib/server/auth/users";
 import { createMfaPendingToken, MFA_PENDING_COOKIE } from "$lib/server/auth/mfa";
 import { getRuntimeConfig } from "$lib/server/auth/runtime";
 import { checkRateLimit } from "$lib/server/ratelimit";
@@ -52,7 +56,9 @@ export const actions: Actions = {
             return fail(503, {
                 username,
                 redirectTo,
-                error: event.locals.runtimeError ?? 'D1 binding "DB" 가 준비되지 않았습니다. Wrangler preview/dev 환경에서 실행해 주세요.',
+                error:
+                    event.locals.runtimeError ??
+                    'D1 binding "DB" 가 준비되지 않았습니다. Wrangler preview/dev 환경에서 실행해 주세요.',
             });
         }
 
diff --git a/src/routes/admin/login/+page.svelte b/src/routes/admin/login/+page.svelte
index e644342..5f9b11d 100644
--- a/src/routes/admin/login/+page.svelte
+++ b/src/routes/admin/login/+page.svelte
@@ -53,19 +53,24 @@ async function loginWithPasskey() {
         </div>
 
         {#if !data.dbReady && data.runtimeError}
-            <div class="mb-4 rounded-xl border border-amber-200 bg-amber-50 px-4 py-3 text-sm text-amber-900">
+            <div
+                class="mb-4 rounded-xl border border-amber-200 bg-amber-50 px-4 py-3 text-sm text-amber-900">
                 {data.runtimeError}
             </div>
         {/if}
 
         {#if form?.error}
-            <div class="mb-4 rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700">
+            <div
+                class="mb-4 rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700">
                 {form.error}
             </div>
         {/if}
 
         <form method="POST" class="space-y-4">
-            <input type="hidden" name="redirectTo" value={form?.redirectTo ?? data.redirectTo ?? ""} />
+            <input
+                type="hidden"
+                name="redirectTo"
+                value={form?.redirectTo ?? data.redirectTo ?? ""} />
 
             <div>
                 <label for="username" class="block text-sm font-medium text-gray-700">
@@ -108,7 +113,8 @@ async function loginWithPasskey() {
         </div>
 
         {#if passkeyError}
-            <div class="mt-3 rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700">
+            <div
+                class="mt-3 rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700">
                 {passkeyError}
             </div>
         {/if}
@@ -120,12 +126,25 @@ async function loginWithPasskey() {
             class="mt-4 flex w-full items-center justify-center gap-2 rounded-md border border-gray-300 bg-white px-4 py-2 text-sm font-medium text-gray-700 shadow-sm transition hover:bg-gray-50 disabled:opacity-60">
             {#if passkeyLoading}
                 <svg class="h-4 w-4 animate-spin text-gray-500" fill="none" viewBox="0 0 24 24">
-                    <circle class="opacity-25" cx="12" cy="12" r="10" stroke="currentColor" stroke-width="4"></circle>
-                    <path class="opacity-75" fill="currentColor" d="M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4z"></path>
+                    <circle
+                        class="opacity-25"
+                        cx="12"
+                        cy="12"
+                        r="10"
+                        stroke="currentColor"
+                        stroke-width="4"></circle>
+                    <path
+                        class="opacity-75"
+                        fill="currentColor"
+                        d="M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4z"></path>
                 </svg>
                 인증 중...
             {:else}
-                <svg class="h-4 w-4 text-gray-500" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+                <svg
+                    class="h-4 w-4 text-gray-500"
+                    fill="none"
+                    stroke="currentColor"
+                    viewBox="0 0 24 24">
                     <path
                         stroke-linecap="round"
                         stroke-linejoin="round"
@@ -138,7 +157,8 @@ async function loginWithPasskey() {
 
         <p class="mt-6 text-center text-xs text-gray-400">
             <!-- eslint-disable-next-line svelte/no-navigation-without-resolve -->
-            일반 사용자는 <a href="/login" class="text-blue-600 hover:underline">여기</a>에서 로그인하세요.
+            일반 사용자는 <a href="/login" class="text-blue-600 hover:underline">여기</a>에서
+            로그인하세요.
         </p>
     </div>
 </div>
diff --git a/src/routes/admin/oidc-clients/+page.server.ts b/src/routes/admin/oidc-clients/+page.server.ts
index 56073ca..b706d95 100644
--- a/src/routes/admin/oidc-clients/+page.server.ts
+++ b/src/routes/admin/oidc-clients/+page.server.ts
@@ -60,12 +60,16 @@ export const actions: Actions = {
         const redirectUrisRaw = String(fd.get("redirectUris") ?? "").trim();
         const postLogoutUrisRaw = String(fd.get("postLogoutRedirectUris") ?? "").trim();
         const scopes = String(fd.get("scopes") ?? "openid").trim();
-        const tokenMethod = String(fd.get("tokenEndpointAuthMethod") ?? "client_secret_basic") as "client_secret_basic" | "client_secret_post" | "none";
+        const tokenMethod = String(fd.get("tokenEndpointAuthMethod") ?? "client_secret_basic") as
+            | "client_secret_basic"
+            | "client_secret_post"
+            | "none";
         // public client(none)는 PKCE 필수
         const requirePkce = tokenMethod === "none" ? true : fd.get("requirePkce") === "true";
 
         if (!name) return fail(400, { create: true, error: "이름은 필수입니다." });
-        if (!redirectUrisRaw) return fail(400, { create: true, error: "Redirect URI 는 필수입니다." });
+        if (!redirectUrisRaw)
+            return fail(400, { create: true, error: "Redirect URI 는 필수입니다." });
 
         const clientId = generateClientId();
         const clientSecret = tokenMethod !== "none" ? generateClientSecret() : null;
@@ -183,7 +187,9 @@ export const actions: Actions = {
         const id = String(fd.get("id") ?? "");
         if (!id) return fail(400, { error: "잘못된 요청입니다." });
 
-        await db.delete(oidcClients).where(and(eq(oidcClients.id, id), eq(oidcClients.tenantId, tenant.id)));
+        await db
+            .delete(oidcClients)
+            .where(and(eq(oidcClients.id, id), eq(oidcClients.tenantId, tenant.id)));
 
         const requestMetadata = getRequestMetadata(event);
         await recordAuditEvent(db, {
diff --git a/src/routes/admin/oidc-clients/+page.svelte b/src/routes/admin/oidc-clients/+page.svelte
index 3e9d665..fb79d24 100644
--- a/src/routes/admin/oidc-clients/+page.svelte
+++ b/src/routes/admin/oidc-clients/+page.svelte
@@ -12,7 +12,11 @@ let editingId = $state<string | null>(null);
 // 생성/시크릿 재생성 직후 노출
 const newSecret = $derived((form as { clientSecret?: string } | null)?.clientSecret ?? null);
 const newClientId = $derived((form as { clientId?: string } | null)?.clientId ?? null);
-const createErr = $derived((form as { create?: boolean; error?: string } | null)?.create ? ((form as { error?: string } | null)?.error ?? null) : null);
+const createErr = $derived(
+    (form as { create?: boolean; error?: string } | null)?.create
+        ? ((form as { error?: string } | null)?.error ?? null)
+        : null,
+);
 const globalErr = $derived(createErr ? null : ((form as { error?: string } | null)?.error ?? null));
 
 function urisToText(json: string | null): string {
@@ -43,15 +47,20 @@ function urisToText(json: string | null): string {
     {#if newSecret && newClientId}
         <div class="rounded-xl border border-green-200 bg-green-50 p-4">
             <p class="mb-1 font-semibold text-green-900">클라이언트가 생성되었습니다</p>
-            <p class="mb-2 text-xs text-green-700">시크릿은 지금만 표시됩니다. 안전한 곳에 저장해 두세요.</p>
+            <p class="mb-2 text-xs text-green-700">
+                시크릿은 지금만 표시됩니다. 안전한 곳에 저장해 두세요.
+            </p>
             <div class="space-y-1">
                 <div class="flex items-center gap-2">
                     <span class="w-28 text-xs text-gray-500">Client ID</span>
-                    <code class="rounded bg-white px-2 py-1 font-mono text-sm text-gray-800">{newClientId}</code>
+                    <code class="rounded bg-white px-2 py-1 font-mono text-sm text-gray-800"
+                        >{newClientId}</code>
                 </div>
                 <div class="flex items-center gap-2">
                     <span class="w-28 text-xs text-gray-500">Client Secret</span>
-                    <code class="rounded bg-white px-2 py-1 font-mono text-sm break-all text-gray-800">{newSecret}</code>
+                    <code
+                        class="rounded bg-white px-2 py-1 font-mono text-sm break-all text-gray-800"
+                        >{newSecret}</code>
                 </div>
             </div>
         </div>
@@ -59,7 +68,8 @@ function urisToText(json: string | null): string {
         <div class="rounded-xl border border-amber-200 bg-amber-50 p-4">
             <p class="mb-1 font-semibold text-amber-900">시크릿이 재생성되었습니다</p>
             <p class="mb-2 text-xs text-amber-700">기존 시크릿은 더 이상 사용할 수 없습니다.</p>
-            <code class="rounded bg-white px-2 py-1 font-mono text-sm break-all text-gray-800">{newSecret}</code>
+            <code class="rounded bg-white px-2 py-1 font-mono text-sm break-all text-gray-800"
+                >{newSecret}</code>
         </div>
     {/if}
 
@@ -75,7 +85,8 @@ function urisToText(json: string | null): string {
         <div class="rounded-xl border border-blue-100 bg-blue-50 p-5">
             <h2 class="mb-4 font-semibold text-blue-900">새 OIDC 클라이언트</h2>
             {#if createErr}
-                <div class="mb-3 rounded-lg border border-red-200 bg-red-50 px-3 py-2 text-sm text-red-700">
+                <div
+                    class="mb-3 rounded-lg border border-red-200 bg-red-50 px-3 py-2 text-sm text-red-700">
                     {createErr}
                 </div>
             {/if}
@@ -89,11 +100,18 @@ function urisToText(json: string | null): string {
                     }}
                 class="grid grid-cols-1 gap-3 sm:grid-cols-2">
                 <div>
-                    <label for="c-name" class="block text-xs font-medium text-gray-700">이름 *</label>
-                    <input id="c-name" type="text" name="name" required class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
+                    <label for="c-name" class="block text-xs font-medium text-gray-700"
+                        >이름 *</label>
+                    <input
+                        id="c-name"
+                        type="text"
+                        name="name"
+                        required
+                        class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div>
-                    <label for="c-scopes" class="block text-xs font-medium text-gray-700">Scopes</label>
+                    <label for="c-scopes" class="block text-xs font-medium text-gray-700"
+                        >Scopes</label>
                     <input
                         id="c-scopes"
                         type="text"
@@ -102,36 +120,53 @@ function urisToText(json: string | null): string {
                         class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div class="sm:col-span-2">
-                    <label for="c-redirectUris" class="block text-xs font-medium text-gray-700">Redirect URIs * (줄바꿈 구분)</label>
+                    <label for="c-redirectUris" class="block text-xs font-medium text-gray-700"
+                        >Redirect URIs * (줄바꿈 구분)</label>
                     <textarea
                         id="c-redirectUris"
                         name="redirectUris"
                         required
                         rows="3"
-                        class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none"></textarea>
+                        class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none"
+                    ></textarea>
                 </div>
                 <div class="sm:col-span-2">
-                    <label for="c-postLogout" class="block text-xs font-medium text-gray-700">Post-Logout Redirect URIs (줄바꿈 구분)</label>
+                    <label for="c-postLogout" class="block text-xs font-medium text-gray-700"
+                        >Post-Logout Redirect URIs (줄바꿈 구분)</label>
                     <textarea
                         id="c-postLogout"
                         name="postLogoutRedirectUris"
                         rows="2"
-                        class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none"></textarea>
+                        class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none"
+                    ></textarea>
                 </div>
                 <div>
-                    <label for="c-authMethod" class="block text-xs font-medium text-gray-700">인증 방식</label>
-                    <select id="c-authMethod" name="tokenEndpointAuthMethod" class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none">
+                    <label for="c-authMethod" class="block text-xs font-medium text-gray-700"
+                        >인증 방식</label>
+                    <select
+                        id="c-authMethod"
+                        name="tokenEndpointAuthMethod"
+                        class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none">
                         <option value="client_secret_basic">client_secret_basic</option>
                         <option value="client_secret_post">client_secret_post</option>
                         <option value="none">none (공개 클라이언트)</option>
                     </select>
                 </div>
                 <div class="flex items-center gap-2 pt-5">
-                    <input id="c-pkce" type="checkbox" name="requirePkce" value="true" checked class="h-4 w-4 rounded border-gray-300 text-blue-600" />
+                    <input
+                        id="c-pkce"
+                        type="checkbox"
+                        name="requirePkce"
+                        value="true"
+                        checked
+                        class="h-4 w-4 rounded border-gray-300 text-blue-600" />
                     <label for="c-pkce" class="text-xs text-gray-700">PKCE 필수</label>
                 </div>
                 <div class="flex justify-end sm:col-span-2">
-                    <button type="submit" class="rounded-md bg-blue-600 px-4 py-1.5 text-sm font-medium text-white hover:bg-blue-700">추가</button>
+                    <button
+                        type="submit"
+                        class="rounded-md bg-blue-600 px-4 py-1.5 text-sm font-medium text-white hover:bg-blue-700"
+                        >추가</button>
                 </div>
             </form>
         </div>
@@ -142,18 +177,31 @@ function urisToText(json: string | null): string {
         <table class="min-w-full divide-y divide-gray-200">
             <thead class="bg-gray-50">
                 <tr>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">이름 / Client ID</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">Scopes</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">인증</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">상태</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">생성</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">작업</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >이름 / Client ID</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >Scopes</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >인증</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >상태</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >생성</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >작업</th>
                 </tr>
             </thead>
             <tbody class="divide-y divide-gray-200">
                 {#if data.clients.length === 0}
                     <tr>
-                        <td colspan="6" class="px-6 py-8 text-center text-sm text-gray-500">등록된 클라이언트가 없습니다.</td>
+                        <td colspan="6" class="px-6 py-8 text-center text-sm text-gray-500"
+                            >등록된 클라이언트가 없습니다.</td>
                     </tr>
                 {:else}
                     {#each data.clients as client (client.id)}
@@ -163,16 +211,26 @@ function urisToText(json: string | null): string {
                                 <p class="font-mono text-xs text-gray-400">{client.clientId}</p>
                             </td>
                             <td class="px-4 py-3 text-xs text-gray-600">{client.scopes}</td>
-                            <td class="px-4 py-3 text-xs text-gray-500">{client.tokenEndpointAuthMethod}</td>
+                            <td class="px-4 py-3 text-xs text-gray-500"
+                                >{client.tokenEndpointAuthMethod}</td>
                             <td class="px-4 py-3">
-                                <span class="rounded-full px-2 py-0.5 text-xs font-medium {client.enabled ? 'bg-green-100 text-green-700' : 'bg-gray-100 text-gray-500'}">
+                                <span
+                                    class="rounded-full px-2 py-0.5 text-xs font-medium {client.enabled
+                                        ? 'bg-green-100 text-green-700'
+                                        : 'bg-gray-100 text-gray-500'}">
                                     {client.enabled ? "활성" : "비활성"}
                                 </span>
                             </td>
-                            <td class="px-4 py-3 text-xs text-gray-400">{dateFormatter.format(client.createdAt)}</td>
+                            <td class="px-4 py-3 text-xs text-gray-400"
+                                >{dateFormatter.format(client.createdAt)}</td>
                             <td class="px-4 py-3">
                                 <div class="flex items-center gap-2">
-                                    <button type="button" onclick={() => (editingId = editingId === client.id ? null : client.id)} class="text-xs text-blue-500 hover:text-blue-700">
+                                    <button
+                                        type="button"
+                                        onclick={() =>
+                                            (editingId =
+                                                editingId === client.id ? null : client.id)}
+                                        class="text-xs text-blue-500 hover:text-blue-700">
                                         {editingId === client.id ? "접기" : "편집"}
                                     </button>
                                     <form method="POST" action="?/regenerateSecret" use:enhance>
@@ -181,7 +239,12 @@ function urisToText(json: string | null): string {
                                             type="submit"
                                             class="text-xs text-amber-500 hover:text-amber-700"
                                             onclick={(e) => {
-                                                if (!confirm("시크릿을 재생성하시겠습니까? 기존 시크릿은 즉시 무효화됩니다.")) e.preventDefault();
+                                                if (
+                                                    !confirm(
+                                                        "시크릿을 재생성하시겠습니까? 기존 시크릿은 즉시 무효화됩니다.",
+                                                    )
+                                                )
+                                                    e.preventDefault();
                                             }}>
                                             시크릿 재생성
                                         </button>
@@ -192,7 +255,8 @@ function urisToText(json: string | null): string {
                                             type="submit"
                                             class="text-xs text-red-400 hover:text-red-600"
                                             onclick={(e) => {
-                                                if (!confirm("클라이언트를 삭제하시겠습니까?")) e.preventDefault();
+                                                if (!confirm("클라이언트를 삭제하시겠습니까?"))
+                                                    e.preventDefault();
                                             }}>
                                             삭제
                                         </button>
@@ -216,7 +280,10 @@ function urisToText(json: string | null): string {
                                         class="grid grid-cols-1 gap-3 sm:grid-cols-2">
                                         <input type="hidden" name="id" value={client.id} />
                                         <div>
-                                            <label for="e-name-{client.id}" class="block text-xs font-medium text-gray-700">이름 *</label>
+                                            <label
+                                                for="e-name-{client.id}"
+                                                class="block text-xs font-medium text-gray-700"
+                                                >이름 *</label>
                                             <input
                                                 id="e-name-{client.id}"
                                                 type="text"
@@ -226,7 +293,10 @@ function urisToText(json: string | null): string {
                                                 class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                                         </div>
                                         <div>
-                                            <label for="e-scopes-{client.id}" class="block text-xs font-medium text-gray-700">Scopes</label>
+                                            <label
+                                                for="e-scopes-{client.id}"
+                                                class="block text-xs font-medium text-gray-700"
+                                                >Scopes</label>
                                             <input
                                                 id="e-scopes-{client.id}"
                                                 type="text"
@@ -235,7 +305,10 @@ function urisToText(json: string | null): string {
                                                 class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                                         </div>
                                         <div class="sm:col-span-2">
-                                            <label for="e-redirectUris-{client.id}" class="block text-xs font-medium text-gray-700">Redirect URIs * (줄바꿈 구분)</label>
+                                            <label
+                                                for="e-redirectUris-{client.id}"
+                                                class="block text-xs font-medium text-gray-700"
+                                                >Redirect URIs * (줄바꿈 구분)</label>
                                             <textarea
                                                 id="e-redirectUris-{client.id}"
                                                 name="redirectUris"
@@ -245,28 +318,55 @@ function urisToText(json: string | null): string {
                                                 >{urisToText(client.redirectUris)}</textarea>
                                         </div>
                                         <div class="sm:col-span-2">
-                                            <label for="e-postLogout-{client.id}" class="block text-xs font-medium text-gray-700">Post-Logout Redirect URIs</label>
+                                            <label
+                                                for="e-postLogout-{client.id}"
+                                                class="block text-xs font-medium text-gray-700"
+                                                >Post-Logout Redirect URIs</label>
                                             <textarea
                                                 id="e-postLogout-{client.id}"
                                                 name="postLogoutRedirectUris"
                                                 rows="2"
                                                 class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none"
-                                                >{urisToText(client.postLogoutRedirectUris)}</textarea>
+                                                >{urisToText(
+                                                    client.postLogoutRedirectUris,
+                                                )}</textarea>
                                         </div>
                                         <div class="flex items-center gap-4">
                                             <div class="flex items-center gap-2">
-                                                <input id="e-pkce-{client.id}" type="checkbox" name="requirePkce" value="true" checked={client.requirePkce} class="h-4 w-4 rounded border-gray-300" />
-                                                <label for="e-pkce-{client.id}" class="text-xs text-gray-700">PKCE 필수</label>
+                                                <input
+                                                    id="e-pkce-{client.id}"
+                                                    type="checkbox"
+                                                    name="requirePkce"
+                                                    value="true"
+                                                    checked={client.requirePkce}
+                                                    class="h-4 w-4 rounded border-gray-300" />
+                                                <label
+                                                    for="e-pkce-{client.id}"
+                                                    class="text-xs text-gray-700">PKCE 필수</label>
                                             </div>
                                             <div class="flex items-center gap-2">
-                                                <input id="e-enabled-{client.id}" type="checkbox" name="enabled" value="true" checked={client.enabled} class="h-4 w-4 rounded border-gray-300" />
-                                                <label for="e-enabled-{client.id}" class="text-xs text-gray-700">활성</label>
+                                                <input
+                                                    id="e-enabled-{client.id}"
+                                                    type="checkbox"
+                                                    name="enabled"
+                                                    value="true"
+                                                    checked={client.enabled}
+                                                    class="h-4 w-4 rounded border-gray-300" />
+                                                <label
+                                                    for="e-enabled-{client.id}"
+                                                    class="text-xs text-gray-700">활성</label>
                                             </div>
                                         </div>
                                         <div class="flex justify-end gap-2">
-                                            <button type="button" onclick={() => (editingId = null)} class="rounded-md border border-gray-300 px-3 py-1.5 text-xs text-gray-600 hover:bg-gray-50"
+                                            <button
+                                                type="button"
+                                                onclick={() => (editingId = null)}
+                                                class="rounded-md border border-gray-300 px-3 py-1.5 text-xs text-gray-600 hover:bg-gray-50"
                                                 >취소</button>
-                                            <button type="submit" class="rounded-md bg-blue-600 px-3 py-1.5 text-xs font-medium text-white hover:bg-blue-700">저장</button>
+                                            <button
+                                                type="submit"
+                                                class="rounded-md bg-blue-600 px-3 py-1.5 text-xs font-medium text-white hover:bg-blue-700"
+                                                >저장</button>
                                         </div>
                                     </form>
                                 </td>
diff --git a/src/routes/admin/parts/+page.svelte b/src/routes/admin/parts/+page.svelte
index abedf46..941a2b3 100644
--- a/src/routes/admin/parts/+page.svelte
+++ b/src/routes/admin/parts/+page.svelte
@@ -8,7 +8,9 @@ let showCreate = $state(false);
 let editId = $state<string | null>(null);
 
 const err = $derived((form as { error?: string } | null)?.error ?? null);
-const createErr = $derived((form as { create?: boolean; error?: string } | null)?.create ? err : null);
+const createErr = $derived(
+    (form as { create?: boolean; error?: string } | null)?.create ? err : null,
+);
 
 const STATUS_COLOR: Record<string, string> = {
     active: "bg-green-100 text-green-700",
@@ -24,7 +26,10 @@ function teamLabel(t: { name: string; departmentName: string | null }) {
 <div class="space-y-6">
     <div class="flex items-center justify-between">
         <h1 class="text-2xl font-bold text-gray-900">파트 관리</h1>
-        <button type="button" onclick={() => (showCreate = !showCreate)} class="rounded-md bg-blue-600 px-4 py-2 text-sm font-medium text-white transition hover:bg-blue-700">
+        <button
+            type="button"
+            onclick={() => (showCreate = !showCreate)}
+            class="rounded-md bg-blue-600 px-4 py-2 text-sm font-medium text-white transition hover:bg-blue-700">
             {showCreate ? "취소" : "+ 파트 추가"}
         </button>
     </div>
@@ -33,7 +38,8 @@ function teamLabel(t: { name: string; departmentName: string | null }) {
         <div class="rounded-xl border border-blue-100 bg-blue-50 p-5">
             <h2 class="mb-4 font-semibold text-blue-900">새 파트 추가</h2>
             {#if createErr}
-                <p class="mb-3 rounded-lg border border-red-200 bg-red-50 px-3 py-2 text-sm text-red-700">
+                <p
+                    class="mb-3 rounded-lg border border-red-200 bg-red-50 px-3 py-2 text-sm text-red-700">
                     {createErr}
                 </p>
             {/if}
@@ -47,7 +53,8 @@ function teamLabel(t: { name: string; departmentName: string | null }) {
                     }}
                 class="grid grid-cols-1 gap-3 sm:grid-cols-2">
                 <div>
-                    <label for="part-name" class="block text-xs font-medium text-gray-700">파트명 *</label>
+                    <label for="part-name" class="block text-xs font-medium text-gray-700"
+                        >파트명 *</label>
                     <input
                         id="part-name"
                         type="text"
@@ -57,7 +64,8 @@ function teamLabel(t: { name: string; departmentName: string | null }) {
                         class="mt-1 w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div>
-                    <label for="part-code" class="block text-xs font-medium text-gray-700">코드</label>
+                    <label for="part-code" class="block text-xs font-medium text-gray-700"
+                        >코드</label>
                     <input
                         id="part-code"
                         type="text"
@@ -66,8 +74,12 @@ function teamLabel(t: { name: string; departmentName: string | null }) {
                         class="mt-1 w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div>
-                    <label for="part-teamId" class="block text-xs font-medium text-gray-700">소속 팀</label>
-                    <select id="part-teamId" name="teamId" class="mt-1 w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none">
+                    <label for="part-teamId" class="block text-xs font-medium text-gray-700"
+                        >소속 팀</label>
+                    <select
+                        id="part-teamId"
+                        name="teamId"
+                        class="mt-1 w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none">
                         <option value="">없음 (독립 파트)</option>
                         {#each data.allTeams as t (t.id)}
                             <option value={t.id}>{teamLabel(t)}</option>
@@ -75,35 +87,60 @@ function teamLabel(t: { name: string; departmentName: string | null }) {
                     </select>
                 </div>
                 <div>
-                    <label for="part-description" class="block text-xs font-medium text-gray-700">설명</label>
-                    <input id="part-description" type="text" name="description" class="mt-1 w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
+                    <label for="part-description" class="block text-xs font-medium text-gray-700"
+                        >설명</label>
+                    <input
+                        id="part-description"
+                        type="text"
+                        name="description"
+                        class="mt-1 w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div class="flex justify-end sm:col-span-2">
-                    <button type="submit" class="rounded-md bg-blue-600 px-4 py-1.5 text-sm font-medium text-white hover:bg-blue-700">추가</button>
+                    <button
+                        type="submit"
+                        class="rounded-md bg-blue-600 px-4 py-1.5 text-sm font-medium text-white hover:bg-blue-700"
+                        >추가</button>
                 </div>
             </form>
         </div>
     {/if}
 
     {#if err && !createErr}
-        <p class="rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700">{err}</p>
+        <p class="rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700">
+            {err}
+        </p>
     {/if}
 
     <div class="overflow-x-auto rounded-xl border border-gray-200 bg-white shadow-sm">
         <table class="min-w-full divide-y divide-gray-200">
             <thead class="bg-gray-50">
                 <tr>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">파트명</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">코드</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">소속 팀</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">부서</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">상태</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">작업</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >파트명</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >코드</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >소속 팀</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >부서</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >상태</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >작업</th>
                 </tr>
             </thead>
             <tbody class="divide-y divide-gray-200">
                 {#if data.parts.length === 0}
-                    <tr><td colspan="6" class="px-6 py-8 text-center text-sm text-gray-500">등록된 파트가 없습니다.</td></tr>
+                    <tr
+                        ><td colspan="6" class="px-6 py-8 text-center text-sm text-gray-500"
+                            >등록된 파트가 없습니다.</td
+                        ></tr>
                 {:else}
                     {#each data.parts as part (part.id)}
                         <tr class="hover:bg-gray-50">
@@ -119,43 +156,83 @@ function teamLabel(t: { name: string; departmentName: string | null }) {
                                             }}
                                         class="grid grid-cols-2 gap-2 sm:grid-cols-4">
                                         <input type="hidden" name="id" value={part.id} />
-                                        <input type="text" name="name" value={part.name} required placeholder="파트명" class="rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none" />
-                                        <input type="text" name="code" value={part.code ?? ""} placeholder="코드" class="rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none" />
-                                        <select name="teamId" class="rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none">
+                                        <input
+                                            type="text"
+                                            name="name"
+                                            value={part.name}
+                                            required
+                                            placeholder="파트명"
+                                            class="rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none" />
+                                        <input
+                                            type="text"
+                                            name="code"
+                                            value={part.code ?? ""}
+                                            placeholder="코드"
+                                            class="rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none" />
+                                        <select
+                                            name="teamId"
+                                            class="rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none">
                                             <option value="">없음 (독립 파트)</option>
                                             {#each data.allTeams as t (t.id)}
-                                                <option value={t.id} selected={part.teamId === t.id}>{teamLabel(t)}</option>
+                                                <option value={t.id} selected={part.teamId === t.id}
+                                                    >{teamLabel(t)}</option>
                                             {/each}
                                         </select>
-                                        <select name="status" class="rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none">
-                                            <option value="active" selected={part.status === "active"}>활성</option>
-                                            <option value="inactive" selected={part.status === "inactive"}>비활성</option>
+                                        <select
+                                            name="status"
+                                            class="rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none">
+                                            <option
+                                                value="active"
+                                                selected={part.status === "active"}>활성</option>
+                                            <option
+                                                value="inactive"
+                                                selected={part.status === "inactive"}
+                                                >비활성</option>
                                         </select>
                                         <div class="col-span-2 flex gap-2 sm:col-span-4">
-                                            <button type="submit" class="rounded bg-blue-600 px-3 py-1 text-xs text-white hover:bg-blue-700">저장</button>
-                                            <button type="button" onclick={() => (editId = null)} class="text-xs text-gray-400 hover:text-gray-600">취소</button>
+                                            <button
+                                                type="submit"
+                                                class="rounded bg-blue-600 px-3 py-1 text-xs text-white hover:bg-blue-700"
+                                                >저장</button>
+                                            <button
+                                                type="button"
+                                                onclick={() => (editId = null)}
+                                                class="text-xs text-gray-400 hover:text-gray-600"
+                                                >취소</button>
                                         </div>
                                     </form>
                                 </td>
                             {:else}
-                                <td class="px-4 py-3 text-sm font-medium text-gray-900">{part.name}</td>
+                                <td class="px-4 py-3 text-sm font-medium text-gray-900"
+                                    >{part.name}</td>
                                 <td class="px-4 py-3 text-sm text-gray-500">{part.code ?? "-"}</td>
-                                <td class="px-4 py-3 text-sm text-gray-500">{part.teamName ?? "-"}</td>
-                                <td class="px-4 py-3 text-sm text-gray-500">{part.departmentName ?? "-"}</td>
+                                <td class="px-4 py-3 text-sm text-gray-500"
+                                    >{part.teamName ?? "-"}</td>
+                                <td class="px-4 py-3 text-sm text-gray-500"
+                                    >{part.departmentName ?? "-"}</td>
                                 <td class="px-4 py-3">
-                                    <span class="rounded-full px-2 py-0.5 text-xs font-medium {STATUS_COLOR[part.status]}">{STATUS_LABEL[part.status]}</span>
+                                    <span
+                                        class="rounded-full px-2 py-0.5 text-xs font-medium {STATUS_COLOR[
+                                            part.status
+                                        ]}">{STATUS_LABEL[part.status]}</span>
                                 </td>
                             {/if}
                             <td class="px-4 py-3">
                                 <div class="flex gap-2">
-                                    <button type="button" onclick={() => (editId = editId === part.id ? null : part.id)} class="text-xs text-blue-500 hover:text-blue-700">수정</button>
+                                    <button
+                                        type="button"
+                                        onclick={() =>
+                                            (editId = editId === part.id ? null : part.id)}
+                                        class="text-xs text-blue-500 hover:text-blue-700"
+                                        >수정</button>
                                     <form method="POST" action="?/delete" use:enhance>
                                         <input type="hidden" name="id" value={part.id} />
                                         <button
                                             type="submit"
                                             class="text-xs text-red-400 hover:text-red-600"
                                             onclick={(e) => {
-                                                if (!confirm("삭제하시겠습니까?")) e.preventDefault();
+                                                if (!confirm("삭제하시겠습니까?"))
+                                                    e.preventDefault();
                                             }}>삭제</button>
                                     </form>
                                 </div>
diff --git a/src/routes/admin/positions/+page.server.ts b/src/routes/admin/positions/+page.server.ts
index e09ce6a..ad26b19 100644
--- a/src/routes/admin/positions/+page.server.ts
+++ b/src/routes/admin/positions/+page.server.ts
@@ -6,7 +6,11 @@ import { positions } from "$lib/server/db/schema";
 
 export const load: PageServerLoad = async ({ locals }) => {
     const { db, tenant } = requireDbContext(locals);
-    const rows = await db.select().from(positions).where(eq(positions.tenantId, tenant.id)).orderBy(asc(positions.level), asc(positions.name));
+    const rows = await db
+        .select()
+        .from(positions)
+        .where(eq(positions.tenantId, tenant.id))
+        .orderBy(asc(positions.level), asc(positions.name));
     return { positions: rows };
 };
 
@@ -53,7 +57,9 @@ export const actions: Actions = {
         const id = String(fd.get("id") ?? "");
         if (!id) return fail(400, { error: "잘못된 요청입니다." });
 
-        await db.delete(positions).where(and(eq(positions.id, id), eq(positions.tenantId, tenant.id)));
+        await db
+            .delete(positions)
+            .where(and(eq(positions.id, id), eq(positions.tenantId, tenant.id)));
         return { deleted: true };
     },
 };
diff --git a/src/routes/admin/positions/+page.svelte b/src/routes/admin/positions/+page.svelte
index 00158ea..ba0c07c 100644
--- a/src/routes/admin/positions/+page.svelte
+++ b/src/routes/admin/positions/+page.svelte
@@ -8,13 +8,18 @@ let showCreate = $state(false);
 let editId = $state<string | null>(null);
 
 const err = $derived((form as { error?: string } | null)?.error ?? null);
-const createErr = $derived((form as { create?: boolean; error?: string } | null)?.create ? err : null);
+const createErr = $derived(
+    (form as { create?: boolean; error?: string } | null)?.create ? err : null,
+);
 </script>
 
 <div class="space-y-6">
     <div class="flex items-center justify-between">
         <h1 class="text-2xl font-bold text-gray-900">직급 관리</h1>
-        <button type="button" onclick={() => (showCreate = !showCreate)} class="rounded-md bg-blue-600 px-4 py-2 text-sm font-medium text-white transition hover:bg-blue-700">
+        <button
+            type="button"
+            onclick={() => (showCreate = !showCreate)}
+            class="rounded-md bg-blue-600 px-4 py-2 text-sm font-medium text-white transition hover:bg-blue-700">
             {showCreate ? "취소" : "+ 직급 추가"}
         </button>
     </div>
@@ -23,7 +28,8 @@ const createErr = $derived((form as { create?: boolean; error?: string } | null)
         <div class="rounded-xl border border-blue-100 bg-blue-50 p-5">
             <h2 class="mb-4 font-semibold text-blue-900">새 직급 추가</h2>
             {#if createErr}
-                <p class="mb-3 rounded-lg border border-red-200 bg-red-50 px-3 py-2 text-sm text-red-700">
+                <p
+                    class="mb-3 rounded-lg border border-red-200 bg-red-50 px-3 py-2 text-sm text-red-700">
                     {createErr}
                 </p>
             {/if}
@@ -37,7 +43,8 @@ const createErr = $derived((form as { create?: boolean; error?: string } | null)
                     }}
                 class="grid grid-cols-1 gap-3 sm:grid-cols-3">
                 <div>
-                    <label for="pos-name" class="block text-xs font-medium text-gray-700">직급명 *</label>
+                    <label for="pos-name" class="block text-xs font-medium text-gray-700"
+                        >직급명 *</label>
                     <input
                         id="pos-name"
                         type="text"
@@ -47,7 +54,8 @@ const createErr = $derived((form as { create?: boolean; error?: string } | null)
                         class="mt-1 w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div>
-                    <label for="pos-code" class="block text-xs font-medium text-gray-700">코드</label>
+                    <label for="pos-code" class="block text-xs font-medium text-gray-700"
+                        >코드</label>
                     <input
                         id="pos-code"
                         type="text"
@@ -56,11 +64,20 @@ const createErr = $derived((form as { create?: boolean; error?: string } | null)
                         class="mt-1 w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div>
-                    <label for="pos-level" class="block text-xs font-medium text-gray-700">레벨 (높을수록 고위)</label>
-                    <input id="pos-level" type="number" name="level" value="0" class="mt-1 w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
+                    <label for="pos-level" class="block text-xs font-medium text-gray-700"
+                        >레벨 (높을수록 고위)</label>
+                    <input
+                        id="pos-level"
+                        type="number"
+                        name="level"
+                        value="0"
+                        class="mt-1 w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div class="flex justify-end sm:col-span-3">
-                    <button type="submit" class="rounded-md bg-blue-600 px-4 py-1.5 text-sm font-medium text-white hover:bg-blue-700">추가</button>
+                    <button
+                        type="submit"
+                        class="rounded-md bg-blue-600 px-4 py-1.5 text-sm font-medium text-white hover:bg-blue-700"
+                        >추가</button>
                 </div>
             </form>
         </div>
@@ -70,15 +87,26 @@ const createErr = $derived((form as { create?: boolean; error?: string } | null)
         <table class="min-w-full divide-y divide-gray-200">
             <thead class="bg-gray-50">
                 <tr>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">직급명</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">코드</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">레벨</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">작업</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >직급명</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >코드</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >레벨</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >작업</th>
                 </tr>
             </thead>
             <tbody class="divide-y divide-gray-200">
                 {#if data.positions.length === 0}
-                    <tr><td colspan="4" class="px-6 py-8 text-center text-sm text-gray-500">등록된 직급이 없습니다.</td></tr>
+                    <tr
+                        ><td colspan="4" class="px-6 py-8 text-center text-sm text-gray-500"
+                            >등록된 직급이 없습니다.</td
+                        ></tr>
                 {:else}
                     {#each data.positions as pos (pos.id)}
                         <tr class="hover:bg-gray-50">
@@ -94,28 +122,55 @@ const createErr = $derived((form as { create?: boolean; error?: string } | null)
                                             }}
                                         class="flex flex-wrap items-center gap-2">
                                         <input type="hidden" name="id" value={pos.id} />
-                                        <input type="text" name="name" value={pos.name} required class="w-32 rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none" />
-                                        <input type="text" name="code" value={pos.code ?? ""} placeholder="코드" class="w-24 rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none" />
-                                        <input type="number" name="level" value={pos.level} class="w-20 rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none" />
-                                        <button type="submit" class="rounded bg-blue-600 px-3 py-1 text-xs text-white hover:bg-blue-700">저장</button>
-                                        <button type="button" onclick={() => (editId = null)} class="text-xs text-gray-400 hover:text-gray-600">취소</button>
+                                        <input
+                                            type="text"
+                                            name="name"
+                                            value={pos.name}
+                                            required
+                                            class="w-32 rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none" />
+                                        <input
+                                            type="text"
+                                            name="code"
+                                            value={pos.code ?? ""}
+                                            placeholder="코드"
+                                            class="w-24 rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none" />
+                                        <input
+                                            type="number"
+                                            name="level"
+                                            value={pos.level}
+                                            class="w-20 rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none" />
+                                        <button
+                                            type="submit"
+                                            class="rounded bg-blue-600 px-3 py-1 text-xs text-white hover:bg-blue-700"
+                                            >저장</button>
+                                        <button
+                                            type="button"
+                                            onclick={() => (editId = null)}
+                                            class="text-xs text-gray-400 hover:text-gray-600"
+                                            >취소</button>
                                     </form>
                                 </td>
                             {:else}
-                                <td class="px-4 py-3 text-sm font-medium text-gray-900">{pos.name}</td>
+                                <td class="px-4 py-3 text-sm font-medium text-gray-900"
+                                    >{pos.name}</td>
                                 <td class="px-4 py-3 text-sm text-gray-500">{pos.code ?? "-"}</td>
                                 <td class="px-4 py-3 text-sm text-gray-500">{pos.level}</td>
                             {/if}
                             <td class="px-4 py-3">
                                 <div class="flex gap-2">
-                                    <button type="button" onclick={() => (editId = editId === pos.id ? null : pos.id)} class="text-xs text-blue-500 hover:text-blue-700">수정</button>
+                                    <button
+                                        type="button"
+                                        onclick={() => (editId = editId === pos.id ? null : pos.id)}
+                                        class="text-xs text-blue-500 hover:text-blue-700"
+                                        >수정</button>
                                     <form method="POST" action="?/delete" use:enhance>
                                         <input type="hidden" name="id" value={pos.id} />
                                         <button
                                             type="submit"
                                             class="text-xs text-red-400 hover:text-red-600"
                                             onclick={(e) => {
-                                                if (!confirm("삭제하시겠습니까?")) e.preventDefault();
+                                                if (!confirm("삭제하시겠습니까?"))
+                                                    e.preventDefault();
                                             }}>삭제</button>
                                     </form>
                                 </div>
diff --git a/src/routes/admin/saml-sps/+page.server.ts b/src/routes/admin/saml-sps/+page.server.ts
index fa145a5..6786dad 100644
--- a/src/routes/admin/saml-sps/+page.server.ts
+++ b/src/routes/admin/saml-sps/+page.server.ts
@@ -32,7 +32,19 @@ export const load: PageServerLoad = async ({ locals }) => {
     return { sps: rows };
 };
 
-const ATTRIBUTE_KEYS = ["email", "username", "displayName", "givenName", "familyName", "surName", "phoneNumber", "department", "team", "jobTitle", "position"] as const;
+const ATTRIBUTE_KEYS = [
+    "email",
+    "username",
+    "displayName",
+    "givenName",
+    "familyName",
+    "surName",
+    "phoneNumber",
+    "department",
+    "team",
+    "jobTitle",
+    "position",
+] as const;
 
 function parseAllowedAttributes(raw: string): string | null {
     const trimmed = raw.trim();
@@ -41,7 +53,9 @@ function parseAllowedAttributes(raw: string): string | null {
         .split(",")
         .map((s) => s.trim())
         .filter((s) => s.length > 0)
-        .filter((s): s is (typeof ATTRIBUTE_KEYS)[number] => (ATTRIBUTE_KEYS as readonly string[]).includes(s));
+        .filter((s): s is (typeof ATTRIBUTE_KEYS)[number] =>
+            (ATTRIBUTE_KEYS as readonly string[]).includes(s),
+        );
     if (parts.length === 0) return null;
     return JSON.stringify([...new Set(parts)]);
 }
@@ -57,7 +71,9 @@ export const actions: Actions = {
         const entityId = String(fd.get("entityId") ?? "").trim();
         const acsUrl = String(fd.get("acsUrl") ?? "").trim();
         const sloUrl = String(fd.get("sloUrl") ?? "").trim();
-        const nameIdFormat = String(fd.get("nameIdFormat") ?? "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress").trim();
+        const nameIdFormat = String(
+            fd.get("nameIdFormat") ?? "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress",
+        ).trim();
         const cert = String(fd.get("cert") ?? "").trim();
         const signAssertion = fd.get("signAssertion") === "true";
         const signResponse = fd.get("signResponse") === "true";
diff --git a/src/routes/admin/saml-sps/+page.svelte b/src/routes/admin/saml-sps/+page.svelte
index 59e9a3a..47df3cf 100644
--- a/src/routes/admin/saml-sps/+page.svelte
+++ b/src/routes/admin/saml-sps/+page.svelte
@@ -62,7 +62,9 @@ function parseSpMetadata() {
         if (nameIdEl?.textContent) createNameIdFormat = nameIdEl.textContent.trim();
 
         // 서명용 인증서
-        const certEl = doc.querySelector("KeyDescriptor[use='signing'] X509Certificate") ?? doc.querySelector("X509Certificate");
+        const certEl =
+            doc.querySelector("KeyDescriptor[use='signing'] X509Certificate") ??
+            doc.querySelector("X509Certificate");
         if (certEl?.textContent) {
             const raw = certEl.textContent.trim().replace(/\s/g, "");
             const lines = raw.match(/.{1,64}/g)?.join("\n") ?? raw;
@@ -97,7 +99,11 @@ function resetCreateForm() {
     metaParseError = null;
 }
 
-const createErr = $derived((form as { create?: boolean; error?: string } | null)?.create ? ((form as { error?: string } | null)?.error ?? null) : null);
+const createErr = $derived(
+    (form as { create?: boolean; error?: string } | null)?.create
+        ? ((form as { error?: string } | null)?.error ?? null)
+        : null,
+);
 const globalErr = $derived(createErr ? null : ((form as { error?: string } | null)?.error ?? null));
 
 function formatAllowedAttributes(raw: string | null): string {
@@ -147,10 +153,12 @@ const NAME_ID_OPTIONS = [
             <!-- 메타데이터 붙여넣기 -->
             <div class="space-y-2 rounded-lg border border-blue-200 bg-white p-4">
                 <p class="text-xs font-medium text-gray-700">
-                    SP 메타데이터 XML로 자동 입력 <span class="font-normal text-gray-400">(선택)</span>
+                    SP 메타데이터 XML로 자동 입력 <span class="font-normal text-gray-400"
+                        >(선택)</span>
                 </p>
                 {#if metaParseError}
-                    <div class="rounded border border-red-200 bg-red-50 px-3 py-1.5 text-xs text-red-600">
+                    <div
+                        class="rounded border border-red-200 bg-red-50 px-3 py-1.5 text-xs text-red-600">
                         {metaParseError}
                     </div>
                 {/if}
@@ -158,12 +166,19 @@ const NAME_ID_OPTIONS = [
                     bind:value={metadataXml}
                     rows="4"
                     placeholder="<md:EntityDescriptor ...> 를 붙여넣으세요"
-                    class="block w-full rounded-md border border-gray-300 px-3 py-1.5 font-mono text-xs focus:border-blue-500 focus:outline-none"></textarea>
-                <button type="button" onclick={parseSpMetadata} class="rounded-md bg-gray-700 px-3 py-1.5 text-xs font-medium text-white hover:bg-gray-800"> 메타데이터 파싱 → </button>
+                    class="block w-full rounded-md border border-gray-300 px-3 py-1.5 font-mono text-xs focus:border-blue-500 focus:outline-none"
+                ></textarea>
+                <button
+                    type="button"
+                    onclick={parseSpMetadata}
+                    class="rounded-md bg-gray-700 px-3 py-1.5 text-xs font-medium text-white hover:bg-gray-800">
+                    메타데이터 파싱 →
+                </button>
             </div>
 
             {#if createErr}
-                <div class="rounded-lg border border-red-200 bg-red-50 px-3 py-2 text-sm text-red-700">
+                <div
+                    class="rounded-lg border border-red-200 bg-red-50 px-3 py-2 text-sm text-red-700">
                     {createErr}
                 </div>
             {/if}
@@ -181,7 +196,8 @@ const NAME_ID_OPTIONS = [
                     }}
                 class="grid grid-cols-1 gap-3 sm:grid-cols-2">
                 <div>
-                    <label for="s-name" class="block text-xs font-medium text-gray-700">이름 *</label>
+                    <label for="s-name" class="block text-xs font-medium text-gray-700"
+                        >이름 *</label>
                     <input
                         id="s-name"
                         type="text"
@@ -191,7 +207,8 @@ const NAME_ID_OPTIONS = [
                         class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div>
-                    <label for="s-entityId" class="block text-xs font-medium text-gray-700">Entity ID *</label>
+                    <label for="s-entityId" class="block text-xs font-medium text-gray-700"
+                        >Entity ID *</label>
                     <input
                         id="s-entityId"
                         type="text"
@@ -201,7 +218,8 @@ const NAME_ID_OPTIONS = [
                         class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 font-mono text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div class="sm:col-span-2">
-                    <label for="s-acsUrl" class="block text-xs font-medium text-gray-700">ACS URL *</label>
+                    <label for="s-acsUrl" class="block text-xs font-medium text-gray-700"
+                        >ACS URL *</label>
                     <input
                         id="s-acsUrl"
                         type="url"
@@ -211,7 +229,8 @@ const NAME_ID_OPTIONS = [
                         class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div class="sm:col-span-2">
-                    <label for="s-sloUrl" class="block text-xs font-medium text-gray-700">SLO URL</label>
+                    <label for="s-sloUrl" class="block text-xs font-medium text-gray-700"
+                        >SLO URL</label>
                     <input
                         id="s-sloUrl"
                         type="url"
@@ -220,7 +239,8 @@ const NAME_ID_OPTIONS = [
                         class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div>
-                    <label for="s-nameIdFormat" class="block text-xs font-medium text-gray-700">NameID Format</label>
+                    <label for="s-nameIdFormat" class="block text-xs font-medium text-gray-700"
+                        >NameID Format</label>
                     <select
                         id="s-nameIdFormat"
                         name="nameIdFormat"
@@ -233,30 +253,57 @@ const NAME_ID_OPTIONS = [
                 </div>
                 <div class="flex flex-col gap-2 pt-4">
                     <div class="flex items-center gap-2">
-                        <input id="s-signAssertion" type="checkbox" name="signAssertion" value="true" bind:checked={createSignAssertion} class="h-4 w-4 rounded border-gray-300" />
-                        <label for="s-signAssertion" class="text-xs text-gray-700">Assertion 서명</label>
+                        <input
+                            id="s-signAssertion"
+                            type="checkbox"
+                            name="signAssertion"
+                            value="true"
+                            bind:checked={createSignAssertion}
+                            class="h-4 w-4 rounded border-gray-300" />
+                        <label for="s-signAssertion" class="text-xs text-gray-700"
+                            >Assertion 서명</label>
                     </div>
                     <div class="flex items-center gap-2">
-                        <input id="s-signResponse" type="checkbox" name="signResponse" value="true" bind:checked={createSignResponse} class="h-4 w-4 rounded border-gray-300" />
-                        <label for="s-signResponse" class="text-xs text-gray-700">Response 서명</label>
+                        <input
+                            id="s-signResponse"
+                            type="checkbox"
+                            name="signResponse"
+                            value="true"
+                            bind:checked={createSignResponse}
+                            class="h-4 w-4 rounded border-gray-300" />
+                        <label for="s-signResponse" class="text-xs text-gray-700"
+                            >Response 서명</label>
                     </div>
                     <div class="flex items-center gap-2">
-                        <input id="s-wantSigned" type="checkbox" name="wantAuthnRequestsSigned" value="true" bind:checked={createWantSigned} class="h-4 w-4 rounded border-gray-300" />
-                        <label for="s-wantSigned" class="text-xs text-gray-700">AuthnRequest 서명 요구</label>
+                        <input
+                            id="s-wantSigned"
+                            type="checkbox"
+                            name="wantAuthnRequestsSigned"
+                            value="true"
+                            bind:checked={createWantSigned}
+                            class="h-4 w-4 rounded border-gray-300" />
+                        <label for="s-wantSigned" class="text-xs text-gray-700"
+                            >AuthnRequest 서명 요구</label>
                     </div>
                 </div>
                 <div class="sm:col-span-2">
-                    <label for="s-cert" class="block text-xs font-medium text-gray-700">SP 인증서 (PEM, 선택)</label>
+                    <label for="s-cert" class="block text-xs font-medium text-gray-700"
+                        >SP 인증서 (PEM, 선택)</label>
                     <textarea
                         id="s-cert"
                         name="cert"
                         rows="4"
                         bind:value={createCert}
                         placeholder="-----BEGIN CERTIFICATE-----"
-                        class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 font-mono text-xs focus:border-blue-500 focus:outline-none"></textarea>
+                        class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 font-mono text-xs focus:border-blue-500 focus:outline-none"
+                    ></textarea>
                 </div>
                 <div class="sm:col-span-2">
-                    <label for="s-allowedAttributes" class="block text-xs font-medium text-gray-700"> 허용 속성 (콤마 구분, 비우면 email,username,displayName 만 전송) </label>
+                    <label
+                        for="s-allowedAttributes"
+                        class="block text-xs font-medium text-gray-700">
+                        허용 속성 (콤마 구분, 비우면 email,username,displayName 만 전송)
+                    </label>
                     <input
                         id="s-allowedAttributes"
                         type="text"
@@ -266,7 +313,10 @@ const NAME_ID_OPTIONS = [
                         class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 font-mono text-xs focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div class="flex justify-end sm:col-span-2">
-                    <button type="submit" class="rounded-md bg-blue-600 px-4 py-1.5 text-sm font-medium text-white hover:bg-blue-700">추가</button>
+                    <button
+                        type="submit"
+                        class="rounded-md bg-blue-600 px-4 py-1.5 text-sm font-medium text-white hover:bg-blue-700"
+                        >추가</button>
                 </div>
             </form>
         </div>
@@ -277,40 +327,70 @@ const NAME_ID_OPTIONS = [
         <table class="min-w-full divide-y divide-gray-200">
             <thead class="bg-gray-50">
                 <tr>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">이름 / Entity ID</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">ACS URL</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">서명</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">상태</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">생성</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">작업</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >이름 / Entity ID</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >ACS URL</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >서명</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >상태</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >생성</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >작업</th>
                 </tr>
             </thead>
             <tbody class="divide-y divide-gray-200">
                 {#if data.sps.length === 0}
                     <tr>
-                        <td colspan="6" class="px-6 py-8 text-center text-sm text-gray-500">등록된 SAML SP 가 없습니다.</td>
+                        <td colspan="6" class="px-6 py-8 text-center text-sm text-gray-500"
+                            >등록된 SAML SP 가 없습니다.</td>
                     </tr>
                 {:else}
                     {#each data.sps as sp (sp.id)}
                         <tr class="hover:bg-gray-50">
                             <td class="px-4 py-3">
                                 <p class="text-sm font-medium text-gray-900">{sp.name}</p>
-                                <p class="font-mono text-xs break-all text-gray-400">{sp.entityId}</p>
+                                <p class="font-mono text-xs break-all text-gray-400">
+                                    {sp.entityId}
+                                </p>
                             </td>
-                            <td class="max-w-50 px-4 py-3 text-xs break-all text-gray-500">{sp.acsUrl}</td>
+                            <td class="max-w-50 px-4 py-3 text-xs break-all text-gray-500"
+                                >{sp.acsUrl}</td>
                             <td class="px-4 py-3 text-xs text-gray-500">
-                                {#if sp.signAssertion}<span class="mr-1 rounded bg-blue-50 px-1 py-0.5 text-blue-600">Assertion</span>{/if}
-                                {#if sp.signResponse}<span class="rounded bg-purple-50 px-1 py-0.5 text-purple-600">Response</span>{/if}
+                                {#if sp.signAssertion}<span
+                                        class="mr-1 rounded bg-blue-50 px-1 py-0.5 text-blue-600"
+                                        >Assertion</span
+                                    >{/if}
+                                {#if sp.signResponse}<span
+                                        class="rounded bg-purple-50 px-1 py-0.5 text-purple-600"
+                                        >Response</span
+                                    >{/if}
                             </td>
                             <td class="px-4 py-3">
-                                <span class="rounded-full px-2 py-0.5 text-xs font-medium {sp.enabled ? 'bg-green-100 text-green-700' : 'bg-gray-100 text-gray-500'}">
+                                <span
+                                    class="rounded-full px-2 py-0.5 text-xs font-medium {sp.enabled
+                                        ? 'bg-green-100 text-green-700'
+                                        : 'bg-gray-100 text-gray-500'}">
                                     {sp.enabled ? "활성" : "비활성"}
                                 </span>
                             </td>
-                            <td class="px-4 py-3 text-xs text-gray-400">{dateFormatter.format(sp.createdAt)}</td>
+                            <td class="px-4 py-3 text-xs text-gray-400"
+                                >{dateFormatter.format(sp.createdAt)}</td>
                             <td class="px-4 py-3">
                                 <div class="flex items-center gap-2">
-                                    <button type="button" onclick={() => (editingId = editingId === sp.id ? null : sp.id)} class="text-xs text-blue-500 hover:text-blue-700">
+                                    <button
+                                        type="button"
+                                        onclick={() =>
+                                            (editingId = editingId === sp.id ? null : sp.id)}
+                                        class="text-xs text-blue-500 hover:text-blue-700">
                                         {editingId === sp.id ? "접기" : "편집"}
                                     </button>
                                     <form method="POST" action="?/delete" use:enhance>
@@ -319,7 +399,8 @@ const NAME_ID_OPTIONS = [
                                             type="submit"
                                             class="text-xs text-red-400 hover:text-red-600"
                                             onclick={(e) => {
-                                                if (!confirm("SP를 삭제하시겠습니까?")) e.preventDefault();
+                                                if (!confirm("SP를 삭제하시겠습니까?"))
+                                                    e.preventDefault();
                                             }}>
                                             삭제
                                         </button>
@@ -343,7 +424,10 @@ const NAME_ID_OPTIONS = [
                                         class="grid grid-cols-1 gap-3 sm:grid-cols-2">
                                         <input type="hidden" name="id" value={sp.id} />
                                         <div>
-                                            <label for="e-name-{sp.id}" class="block text-xs font-medium text-gray-700">이름 *</label>
+                                            <label
+                                                for="e-name-{sp.id}"
+                                                class="block text-xs font-medium text-gray-700"
+                                                >이름 *</label>
                                             <input
                                                 id="e-name-{sp.id}"
                                                 type="text"
@@ -353,18 +437,27 @@ const NAME_ID_OPTIONS = [
                                                 class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                                         </div>
                                         <div>
-                                            <label for="e-nameIdFormat-{sp.id}" class="block text-xs font-medium text-gray-700">NameID Format</label>
+                                            <label
+                                                for="e-nameIdFormat-{sp.id}"
+                                                class="block text-xs font-medium text-gray-700"
+                                                >NameID Format</label>
                                             <select
                                                 id="e-nameIdFormat-{sp.id}"
                                                 name="nameIdFormat"
                                                 class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none">
                                                 {#each NAME_ID_OPTIONS as opt (opt.value)}
-                                                    <option value={opt.value} selected={sp.nameIdFormat === opt.value}>{opt.label}</option>
+                                                    <option
+                                                        value={opt.value}
+                                                        selected={sp.nameIdFormat === opt.value}
+                                                        >{opt.label}</option>
                                                 {/each}
                                             </select>
                                         </div>
                                         <div class="sm:col-span-2">
-                                            <label for="e-acsUrl-{sp.id}" class="block text-xs font-medium text-gray-700">ACS URL *</label>
+                                            <label
+                                                for="e-acsUrl-{sp.id}"
+                                                class="block text-xs font-medium text-gray-700"
+                                                >ACS URL *</label>
                                             <input
                                                 id="e-acsUrl-{sp.id}"
                                                 type="url"
@@ -374,7 +467,10 @@ const NAME_ID_OPTIONS = [
                                                 class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                                         </div>
                                         <div class="sm:col-span-2">
-                                            <label for="e-sloUrl-{sp.id}" class="block text-xs font-medium text-gray-700">SLO URL</label>
+                                            <label
+                                                for="e-sloUrl-{sp.id}"
+                                                class="block text-xs font-medium text-gray-700"
+                                                >SLO URL</label>
                                             <input
                                                 id="e-sloUrl-{sp.id}"
                                                 type="url"
@@ -391,11 +487,23 @@ const NAME_ID_OPTIONS = [
                                                     value="true"
                                                     checked={sp.signAssertion}
                                                     class="h-4 w-4 rounded border-gray-300" />
-                                                <label for="e-signAssertion-{sp.id}" class="text-xs text-gray-700">Assertion 서명</label>
+                                                <label
+                                                    for="e-signAssertion-{sp.id}"
+                                                    class="text-xs text-gray-700"
+                                                    >Assertion 서명</label>
                                             </div>
                                             <div class="flex items-center gap-2">
-                                                <input id="e-signResponse-{sp.id}" type="checkbox" name="signResponse" value="true" checked={sp.signResponse} class="h-4 w-4 rounded border-gray-300" />
-                                                <label for="e-signResponse-{sp.id}" class="text-xs text-gray-700">Response 서명</label>
+                                                <input
+                                                    id="e-signResponse-{sp.id}"
+                                                    type="checkbox"
+                                                    name="signResponse"
+                                                    value="true"
+                                                    checked={sp.signResponse}
+                                                    class="h-4 w-4 rounded border-gray-300" />
+                                                <label
+                                                    for="e-signResponse-{sp.id}"
+                                                    class="text-xs text-gray-700"
+                                                    >Response 서명</label>
                                             </div>
                                             <div class="flex items-center gap-2">
                                                 <input
@@ -405,15 +513,29 @@ const NAME_ID_OPTIONS = [
                                                     value="true"
                                                     checked={sp.wantAuthnRequestsSigned}
                                                     class="h-4 w-4 rounded border-gray-300" />
-                                                <label for="e-wantSigned-{sp.id}" class="text-xs text-gray-700">AuthnRequest 서명 요구</label>
+                                                <label
+                                                    for="e-wantSigned-{sp.id}"
+                                                    class="text-xs text-gray-700"
+                                                    >AuthnRequest 서명 요구</label>
                                             </div>
                                             <div class="flex items-center gap-2">
-                                                <input id="e-enabled-{sp.id}" type="checkbox" name="enabled" value="true" checked={sp.enabled} class="h-4 w-4 rounded border-gray-300" />
-                                                <label for="e-enabled-{sp.id}" class="text-xs text-gray-700">활성</label>
+                                                <input
+                                                    id="e-enabled-{sp.id}"
+                                                    type="checkbox"
+                                                    name="enabled"
+                                                    value="true"
+                                                    checked={sp.enabled}
+                                                    class="h-4 w-4 rounded border-gray-300" />
+                                                <label
+                                                    for="e-enabled-{sp.id}"
+                                                    class="text-xs text-gray-700">활성</label>
                                             </div>
                                         </div>
                                         <div class="sm:col-span-2">
-                                            <label for="e-cert-{sp.id}" class="block text-xs font-medium text-gray-700">SP 인증서 (PEM)</label>
+                                            <label
+                                                for="e-cert-{sp.id}"
+                                                class="block text-xs font-medium text-gray-700"
+                                                >SP 인증서 (PEM)</label>
                                             <textarea
                                                 id="e-cert-{sp.id}"
                                                 name="cert"
@@ -422,21 +544,32 @@ const NAME_ID_OPTIONS = [
                                                 >{sp.cert ?? ""}</textarea>
                                         </div>
                                         <div class="sm:col-span-2">
-                                            <label for="e-allowedAttributes-{sp.id}" class="block text-xs font-medium text-gray-700">
-                                                허용 속성 (콤마 구분, 비우면 email,username,displayName 만 전송)
+                                            <label
+                                                for="e-allowedAttributes-{sp.id}"
+                                                class="block text-xs font-medium text-gray-700">
+                                                허용 속성 (콤마 구분, 비우면
+                                                email,username,displayName 만 전송)
                                             </label>
                                             <input
                                                 id="e-allowedAttributes-{sp.id}"
                                                 type="text"
                                                 name="allowedAttributes"
-                                                value={formatAllowedAttributes(sp.allowedAttributes)}
+                                                value={formatAllowedAttributes(
+                                                    sp.allowedAttributes,
+                                                )}
                                                 placeholder="email,username,displayName"
                                                 class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 font-mono text-xs focus:border-blue-500 focus:outline-none" />
                                         </div>
                                         <div class="flex justify-end gap-2 sm:col-span-2">
-                                            <button type="button" onclick={() => (editingId = null)} class="rounded-md border border-gray-300 px-3 py-1.5 text-xs text-gray-600 hover:bg-gray-50"
+                                            <button
+                                                type="button"
+                                                onclick={() => (editingId = null)}
+                                                class="rounded-md border border-gray-300 px-3 py-1.5 text-xs text-gray-600 hover:bg-gray-50"
                                                 >취소</button>
-                                            <button type="submit" class="rounded-md bg-blue-600 px-3 py-1.5 text-xs font-medium text-white hover:bg-blue-700">저장</button>
+                                            <button
+                                                type="submit"
+                                                class="rounded-md bg-blue-600 px-3 py-1.5 text-xs font-medium text-white hover:bg-blue-700"
+                                                >저장</button>
                                         </div>
                                     </form>
                                 </td>
diff --git a/src/routes/admin/signing-keys/+page.server.ts b/src/routes/admin/signing-keys/+page.server.ts
index 778cf2c..bc42c17 100644
--- a/src/routes/admin/signing-keys/+page.server.ts
+++ b/src/routes/admin/signing-keys/+page.server.ts
@@ -5,7 +5,11 @@ import { requireDbContext } from "$lib/server/auth/guards";
 import { getRuntimeConfig } from "$lib/server/auth/runtime";
 import { recordAuditEvent, getRequestMetadata } from "$lib/server/audit/index";
 import { signingKeys } from "$lib/server/db/schema";
-import { generateRsaSigningKey, wrapPrivateKey, generateSelfSignedCert } from "$lib/server/crypto/keys";
+import {
+    generateRsaSigningKey,
+    wrapPrivateKey,
+    generateSelfSignedCert,
+} from "$lib/server/crypto/keys";
 
 export const load: PageServerLoad = async ({ locals }) => {
     const { db, tenant } = requireDbContext(locals);
@@ -47,7 +51,13 @@ export const actions: Actions = {
         await db
             .update(signingKeys)
             .set({ active: false, rotatedAt: new Date() })
-            .where(and(eq(signingKeys.tenantId, tenant.id), eq(signingKeys.active, true), isNull(signingKeys.rotatedAt)));
+            .where(
+                and(
+                    eq(signingKeys.tenantId, tenant.id),
+                    eq(signingKeys.active, true),
+                    isNull(signingKeys.rotatedAt),
+                ),
+            );
 
         // 새 키 생성
         const { kid, publicKey, privateKey, publicJwk } = await generateRsaSigningKey();
diff --git a/src/routes/admin/signing-keys/+page.svelte b/src/routes/admin/signing-keys/+page.svelte
index 262f5a5..0d1d3a6 100644
--- a/src/routes/admin/signing-keys/+page.svelte
+++ b/src/routes/admin/signing-keys/+page.svelte
@@ -23,7 +23,12 @@ const globalErr = $derived((form as { error?: string } | null)?.error ?? null);
                 type="submit"
                 class="rounded-md bg-blue-600 px-4 py-2 text-sm font-medium text-white transition hover:bg-blue-700"
                 onclick={(e) => {
-                    if (!confirm("새 키를 생성하고 기존 활성 키를 비활성화합니다.\n계속하시겠습니까?")) e.preventDefault();
+                    if (
+                        !confirm(
+                            "새 키를 생성하고 기존 활성 키를 비활성화합니다.\n계속하시겠습니까?",
+                        )
+                    )
+                        e.preventDefault();
                 }}>
                 키 로테이션
             </button>
@@ -49,40 +54,66 @@ const globalErr = $derived((form as { error?: string } | null)?.error ?? null);
         <table class="min-w-full divide-y divide-gray-200">
             <thead class="bg-gray-50">
                 <tr>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">KID</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">알고리즘</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">용도</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">인증서</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">상태</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">생성일</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">로테이션</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">만료일</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >KID</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >알고리즘</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >용도</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >인증서</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >상태</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >생성일</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >로테이션</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >만료일</th>
                 </tr>
             </thead>
             <tbody class="divide-y divide-gray-200">
                 {#if data.keys.length === 0}
                     <tr>
-                        <td colspan="8" class="px-6 py-8 text-center text-sm text-gray-500"> 등록된 서명 키가 없습니다. 키 로테이션 버튼을 눌러 첫 번째 키를 생성하세요. </td>
+                        <td colspan="8" class="px-6 py-8 text-center text-sm text-gray-500">
+                            등록된 서명 키가 없습니다. 키 로테이션 버튼을 눌러 첫 번째 키를
+                            생성하세요.
+                        </td>
                     </tr>
                 {:else}
                     {#each data.keys as key (key.id)}
                         <tr class="hover:bg-gray-50 {key.active ? '' : 'opacity-60'}">
-                            <td class="max-w-40 truncate px-4 py-3 font-mono text-xs text-gray-700" title={key.kid}>{key.kid}</td>
+                            <td
+                                class="max-w-40 truncate px-4 py-3 font-mono text-xs text-gray-700"
+                                title={key.kid}>{key.kid}</td>
                             <td class="px-4 py-3 text-xs text-gray-600">{key.alg}</td>
                             <td class="px-4 py-3 text-xs text-gray-600">{key.use ?? "sig"}</td>
                             <td class="px-4 py-3 text-xs">
                                 {#if key.hasCert}
-                                    <span class="rounded bg-blue-50 px-1.5 py-0.5 text-blue-600">있음</span>
+                                    <span class="rounded bg-blue-50 px-1.5 py-0.5 text-blue-600"
+                                        >있음</span>
                                 {:else}
                                     <span class="text-gray-400">없음</span>
                                 {/if}
                             </td>
                             <td class="px-4 py-3">
-                                <span class="rounded-full px-2 py-0.5 text-xs font-medium {key.active ? 'bg-green-100 text-green-700' : 'bg-gray-100 text-gray-500'}">
+                                <span
+                                    class="rounded-full px-2 py-0.5 text-xs font-medium {key.active
+                                        ? 'bg-green-100 text-green-700'
+                                        : 'bg-gray-100 text-gray-500'}">
                                     {key.active ? "활성" : "비활성"}
                                 </span>
                             </td>
-                            <td class="px-4 py-3 text-xs text-gray-400">{dateFormatter.format(key.createdAt)}</td>
+                            <td class="px-4 py-3 text-xs text-gray-400"
+                                >{dateFormatter.format(key.createdAt)}</td>
                             <td class="px-4 py-3 text-xs text-gray-400">
                                 {key.rotatedAt ? dateTimeFormatter.format(key.rotatedAt) : "—"}
                             </td>
diff --git a/src/routes/admin/teams/+page.svelte b/src/routes/admin/teams/+page.svelte
index 1d05599..489a12c 100644
--- a/src/routes/admin/teams/+page.svelte
+++ b/src/routes/admin/teams/+page.svelte
@@ -8,7 +8,9 @@ let showCreate = $state(false);
 let editId = $state<string | null>(null);
 
 const err = $derived((form as { error?: string } | null)?.error ?? null);
-const createErr = $derived((form as { create?: boolean; error?: string } | null)?.create ? err : null);
+const createErr = $derived(
+    (form as { create?: boolean; error?: string } | null)?.create ? err : null,
+);
 
 const STATUS_COLOR: Record<string, string> = {
     active: "bg-green-100 text-green-700",
@@ -20,7 +22,10 @@ const STATUS_LABEL: Record<string, string> = { active: "활성", inactive: "비
 <div class="space-y-6">
     <div class="flex items-center justify-between">
         <h1 class="text-2xl font-bold text-gray-900">팀 관리</h1>
-        <button type="button" onclick={() => (showCreate = !showCreate)} class="rounded-md bg-blue-600 px-4 py-2 text-sm font-medium text-white transition hover:bg-blue-700">
+        <button
+            type="button"
+            onclick={() => (showCreate = !showCreate)}
+            class="rounded-md bg-blue-600 px-4 py-2 text-sm font-medium text-white transition hover:bg-blue-700">
             {showCreate ? "취소" : "+ 팀 추가"}
         </button>
     </div>
@@ -29,7 +34,8 @@ const STATUS_LABEL: Record<string, string> = { active: "활성", inactive: "비
         <div class="rounded-xl border border-blue-100 bg-blue-50 p-5">
             <h2 class="mb-4 font-semibold text-blue-900">새 팀 추가</h2>
             {#if createErr}
-                <p class="mb-3 rounded-lg border border-red-200 bg-red-50 px-3 py-2 text-sm text-red-700">
+                <p
+                    class="mb-3 rounded-lg border border-red-200 bg-red-50 px-3 py-2 text-sm text-red-700">
                     {createErr}
                 </p>
             {/if}
@@ -43,7 +49,8 @@ const STATUS_LABEL: Record<string, string> = { active: "활성", inactive: "비
                     }}
                 class="grid grid-cols-1 gap-3 sm:grid-cols-2">
                 <div>
-                    <label for="team-name" class="block text-xs font-medium text-gray-700">팀명 *</label>
+                    <label for="team-name" class="block text-xs font-medium text-gray-700"
+                        >팀명 *</label>
                     <input
                         id="team-name"
                         type="text"
@@ -53,7 +60,8 @@ const STATUS_LABEL: Record<string, string> = { active: "활성", inactive: "비
                         class="mt-1 w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div>
-                    <label for="team-code" class="block text-xs font-medium text-gray-700">코드</label>
+                    <label for="team-code" class="block text-xs font-medium text-gray-700"
+                        >코드</label>
                     <input
                         id="team-code"
                         type="text"
@@ -62,8 +70,12 @@ const STATUS_LABEL: Record<string, string> = { active: "활성", inactive: "비
                         class="mt-1 w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div>
-                    <label for="team-departmentId" class="block text-xs font-medium text-gray-700">소속 부서</label>
-                    <select id="team-departmentId" name="departmentId" class="mt-1 w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none">
+                    <label for="team-departmentId" class="block text-xs font-medium text-gray-700"
+                        >소속 부서</label>
+                    <select
+                        id="team-departmentId"
+                        name="departmentId"
+                        class="mt-1 w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none">
                         <option value="">없음 (독립 팀)</option>
                         {#each data.allDepts as dept (dept.id)}
                             <option value={dept.id}>{dept.name}</option>
@@ -71,34 +83,57 @@ const STATUS_LABEL: Record<string, string> = { active: "활성", inactive: "비
                     </select>
                 </div>
                 <div>
-                    <label for="team-description" class="block text-xs font-medium text-gray-700">설명</label>
-                    <input id="team-description" type="text" name="description" class="mt-1 w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
+                    <label for="team-description" class="block text-xs font-medium text-gray-700"
+                        >설명</label>
+                    <input
+                        id="team-description"
+                        type="text"
+                        name="description"
+                        class="mt-1 w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div class="flex justify-end sm:col-span-2">
-                    <button type="submit" class="rounded-md bg-blue-600 px-4 py-1.5 text-sm font-medium text-white hover:bg-blue-700">추가</button>
+                    <button
+                        type="submit"
+                        class="rounded-md bg-blue-600 px-4 py-1.5 text-sm font-medium text-white hover:bg-blue-700"
+                        >추가</button>
                 </div>
             </form>
         </div>
     {/if}
 
     {#if err && !createErr}
-        <p class="rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700">{err}</p>
+        <p class="rounded-xl border border-red-200 bg-red-50 px-4 py-3 text-sm text-red-700">
+            {err}
+        </p>
     {/if}
 
     <div class="overflow-x-auto rounded-xl border border-gray-200 bg-white shadow-sm">
         <table class="min-w-full divide-y divide-gray-200">
             <thead class="bg-gray-50">
                 <tr>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">팀명</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">코드</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">소속 부서</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">상태</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">작업</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >팀명</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >코드</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >소속 부서</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >상태</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >작업</th>
                 </tr>
             </thead>
             <tbody class="divide-y divide-gray-200">
                 {#if data.teams.length === 0}
-                    <tr><td colspan="5" class="px-6 py-8 text-center text-sm text-gray-500">등록된 팀이 없습니다.</td></tr>
+                    <tr
+                        ><td colspan="5" class="px-6 py-8 text-center text-sm text-gray-500"
+                            >등록된 팀이 없습니다.</td
+                        ></tr>
                 {:else}
                     {#each data.teams as team (team.id)}
                         <tr class="hover:bg-gray-50">
@@ -114,42 +149,83 @@ const STATUS_LABEL: Record<string, string> = { active: "활성", inactive: "비
                                             }}
                                         class="grid grid-cols-2 gap-2 sm:grid-cols-4">
                                         <input type="hidden" name="id" value={team.id} />
-                                        <input type="text" name="name" value={team.name} required placeholder="팀명" class="rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none" />
-                                        <input type="text" name="code" value={team.code ?? ""} placeholder="코드" class="rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none" />
-                                        <select name="departmentId" class="rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none">
+                                        <input
+                                            type="text"
+                                            name="name"
+                                            value={team.name}
+                                            required
+                                            placeholder="팀명"
+                                            class="rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none" />
+                                        <input
+                                            type="text"
+                                            name="code"
+                                            value={team.code ?? ""}
+                                            placeholder="코드"
+                                            class="rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none" />
+                                        <select
+                                            name="departmentId"
+                                            class="rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none">
                                             <option value="">없음 (독립 팀)</option>
                                             {#each data.allDepts as d (d.id)}
-                                                <option value={d.id} selected={team.departmentId === d.id}>{d.name}</option>
+                                                <option
+                                                    value={d.id}
+                                                    selected={team.departmentId === d.id}
+                                                    >{d.name}</option>
                                             {/each}
                                         </select>
-                                        <select name="status" class="rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none">
-                                            <option value="active" selected={team.status === "active"}>활성</option>
-                                            <option value="inactive" selected={team.status === "inactive"}>비활성</option>
+                                        <select
+                                            name="status"
+                                            class="rounded border border-gray-300 px-2 py-1 text-sm focus:outline-none">
+                                            <option
+                                                value="active"
+                                                selected={team.status === "active"}>활성</option>
+                                            <option
+                                                value="inactive"
+                                                selected={team.status === "inactive"}
+                                                >비활성</option>
                                         </select>
                                         <div class="col-span-2 flex gap-2 sm:col-span-4">
-                                            <button type="submit" class="rounded bg-blue-600 px-3 py-1 text-xs text-white hover:bg-blue-700">저장</button>
-                                            <button type="button" onclick={() => (editId = null)} class="text-xs text-gray-400 hover:text-gray-600">취소</button>
+                                            <button
+                                                type="submit"
+                                                class="rounded bg-blue-600 px-3 py-1 text-xs text-white hover:bg-blue-700"
+                                                >저장</button>
+                                            <button
+                                                type="button"
+                                                onclick={() => (editId = null)}
+                                                class="text-xs text-gray-400 hover:text-gray-600"
+                                                >취소</button>
                                         </div>
                                     </form>
                                 </td>
                             {:else}
-                                <td class="px-4 py-3 text-sm font-medium text-gray-900">{team.name}</td>
+                                <td class="px-4 py-3 text-sm font-medium text-gray-900"
+                                    >{team.name}</td>
                                 <td class="px-4 py-3 text-sm text-gray-500">{team.code ?? "-"}</td>
-                                <td class="px-4 py-3 text-sm text-gray-500">{team.departmentName ?? "-"}</td>
+                                <td class="px-4 py-3 text-sm text-gray-500"
+                                    >{team.departmentName ?? "-"}</td>
                                 <td class="px-4 py-3">
-                                    <span class="rounded-full px-2 py-0.5 text-xs font-medium {STATUS_COLOR[team.status]}">{STATUS_LABEL[team.status]}</span>
+                                    <span
+                                        class="rounded-full px-2 py-0.5 text-xs font-medium {STATUS_COLOR[
+                                            team.status
+                                        ]}">{STATUS_LABEL[team.status]}</span>
                                 </td>
                             {/if}
                             <td class="px-4 py-3">
                                 <div class="flex gap-2">
-                                    <button type="button" onclick={() => (editId = editId === team.id ? null : team.id)} class="text-xs text-blue-500 hover:text-blue-700">수정</button>
+                                    <button
+                                        type="button"
+                                        onclick={() =>
+                                            (editId = editId === team.id ? null : team.id)}
+                                        class="text-xs text-blue-500 hover:text-blue-700"
+                                        >수정</button>
                                     <form method="POST" action="?/delete" use:enhance>
                                         <input type="hidden" name="id" value={team.id} />
                                         <button
                                             type="submit"
                                             class="text-xs text-red-400 hover:text-red-600"
                                             onclick={(e) => {
-                                                if (!confirm("삭제하시겠습니까?")) e.preventDefault();
+                                                if (!confirm("삭제하시겠습니까?"))
+                                                    e.preventDefault();
                                             }}>삭제</button>
                                     </form>
                                 </div>
diff --git a/src/routes/admin/users/+page.server.ts b/src/routes/admin/users/+page.server.ts
index 230d385..33a07ef 100644
--- a/src/routes/admin/users/+page.server.ts
+++ b/src/routes/admin/users/+page.server.ts
@@ -221,7 +221,10 @@ export const actions: Actions = {
             .limit(1);
 
         if (existing) {
-            await db.update(credentials).set({ secret: hashed }).where(eq(credentials.id, existing.id));
+            await db
+                .update(credentials)
+                .set({ secret: hashed })
+                .where(eq(credentials.id, existing.id));
         } else {
             await db.insert(credentials).values({
                 id: crypto.randomUUID(),
diff --git a/src/routes/admin/users/+page.svelte b/src/routes/admin/users/+page.svelte
index 4b311fc..a98eb8d 100644
--- a/src/routes/admin/users/+page.svelte
+++ b/src/routes/admin/users/+page.svelte
@@ -14,8 +14,12 @@ let showCreate = $state(false);
 let resetPasswordUserId = $state<string | null>(null);
 
 const formErr = $derived((form as { error?: string } | null)?.error ?? null);
-const createErr = $derived((form as { create?: boolean; error?: string } | null)?.create ? formErr : null);
-const resetErr = $derived((form as { resetPassword?: boolean; error?: string } | null)?.resetPassword ? formErr : null);
+const createErr = $derived(
+    (form as { create?: boolean; error?: string } | null)?.create ? formErr : null,
+);
+const resetErr = $derived(
+    (form as { resetPassword?: boolean; error?: string } | null)?.resetPassword ? formErr : null,
+);
 
 const STATUS_LABEL: Record<string, string> = {
     active: "활성",
@@ -37,7 +41,10 @@ const STATUS_COLOR: Record<string, string> = {
 <div class="space-y-6">
     <div class="flex items-center justify-between">
         <h1 class="text-2xl font-bold text-gray-900">사용자 관리</h1>
-        <button type="button" onclick={() => (showCreate = !showCreate)} class="rounded-md bg-blue-600 px-4 py-2 text-sm font-medium text-white transition hover:bg-blue-700">
+        <button
+            type="button"
+            onclick={() => (showCreate = !showCreate)}
+            class="rounded-md bg-blue-600 px-4 py-2 text-sm font-medium text-white transition hover:bg-blue-700">
             {showCreate ? "취소" : "+ 사용자 추가"}
         </button>
     </div>
@@ -48,7 +55,8 @@ const STATUS_COLOR: Record<string, string> = {
             <h2 class="mb-4 font-semibold text-blue-900">새 사용자 추가</h2>
 
             {#if createErr}
-                <div class="mb-3 rounded-lg border border-red-200 bg-red-50 px-3 py-2 text-sm text-red-700">
+                <div
+                    class="mb-3 rounded-lg border border-red-200 bg-red-50 px-3 py-2 text-sm text-red-700">
                     {createErr}
                 </div>
             {/if}
@@ -64,15 +72,27 @@ const STATUS_COLOR: Record<string, string> = {
                 }}
                 class="grid grid-cols-1 gap-3 sm:grid-cols-2">
                 <div>
-                    <label for="new-email" class="block text-xs font-medium text-gray-700">이메일 *</label>
-                    <input id="new-email" type="email" name="email" required class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
+                    <label for="new-email" class="block text-xs font-medium text-gray-700"
+                        >이메일 *</label>
+                    <input
+                        id="new-email"
+                        type="email"
+                        name="email"
+                        required
+                        class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div>
-                    <label for="new-username" class="block text-xs font-medium text-gray-700">아이디 (미입력 시 자동)</label>
-                    <input id="new-username" type="text" name="username" class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
+                    <label for="new-username" class="block text-xs font-medium text-gray-700"
+                        >아이디 (미입력 시 자동)</label>
+                    <input
+                        id="new-username"
+                        type="text"
+                        name="username"
+                        class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div>
-                    <label for="new-displayName" class="block text-xs font-medium text-gray-700">이름</label>
+                    <label for="new-displayName" class="block text-xs font-medium text-gray-700"
+                        >이름</label>
                     <input
                         id="new-displayName"
                         type="text"
@@ -80,14 +100,19 @@ const STATUS_COLOR: Record<string, string> = {
                         class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div>
-                    <label for="new-role" class="block text-xs font-medium text-gray-700">역할 *</label>
-                    <select id="new-role" name="role" class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none">
+                    <label for="new-role" class="block text-xs font-medium text-gray-700"
+                        >역할 *</label>
+                    <select
+                        id="new-role"
+                        name="role"
+                        class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none">
                         <option value="user">일반 사용자</option>
                         <option value="admin">관리자</option>
                     </select>
                 </div>
                 <div class="sm:col-span-2">
-                    <label for="new-password" class="block text-xs font-medium text-gray-700">비밀번호 * (8자 이상)</label>
+                    <label for="new-password" class="block text-xs font-medium text-gray-700"
+                        >비밀번호 * (8자 이상)</label>
                     <input
                         id="new-password"
                         type="password"
@@ -97,7 +122,11 @@ const STATUS_COLOR: Record<string, string> = {
                         class="mt-1 block w-full rounded-md border border-gray-300 px-3 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div class="flex justify-end sm:col-span-2">
-                    <button type="submit" class="rounded-md bg-blue-600 px-4 py-1.5 text-sm font-medium text-white hover:bg-blue-700"> 추가 </button>
+                    <button
+                        type="submit"
+                        class="rounded-md bg-blue-600 px-4 py-1.5 text-sm font-medium text-white hover:bg-blue-700">
+                        추가
+                    </button>
                 </div>
             </form>
         </div>
@@ -115,29 +144,47 @@ const STATUS_COLOR: Record<string, string> = {
         <table class="min-w-full divide-y divide-gray-200">
             <thead class="bg-gray-50">
                 <tr>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">아이디 / 이메일</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">이름</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">역할</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">상태</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">생성</th>
-                    <th class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase">작업</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >아이디 / 이메일</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >이름</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >역할</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >상태</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >생성</th>
+                    <th
+                        class="px-4 py-3 text-left text-xs font-medium tracking-wider text-gray-500 uppercase"
+                        >작업</th>
                 </tr>
             </thead>
             <tbody class="divide-y divide-gray-200">
                 {#if data.users.length === 0}
                     <tr>
-                        <td colspan="6" class="px-6 py-8 text-center text-sm text-gray-500">등록된 사용자가 없습니다.</td>
+                        <td colspan="6" class="px-6 py-8 text-center text-sm text-gray-500"
+                            >등록된 사용자가 없습니다.</td>
                     </tr>
                 {:else}
                     {#each data.users as user (user.id)}
                         <tr class="hover:bg-gray-50">
                             <td class="px-4 py-3">
-                                <a href={resolve(`/admin/users/${user.id}`)} class="block hover:underline">
-                                    <p class="text-sm font-medium text-gray-900">{user.username ?? "-"}</p>
+                                <a
+                                    href={resolve(`/admin/users/${user.id}`)}
+                                    class="block hover:underline">
+                                    <p class="text-sm font-medium text-gray-900">
+                                        {user.username ?? "-"}
+                                    </p>
                                     <p class="text-xs text-gray-500">{user.email}</p>
                                 </a>
                             </td>
-                            <td class="px-4 py-3 text-sm text-gray-600">{user.displayName ?? "-"}</td>
+                            <td class="px-4 py-3 text-sm text-gray-600"
+                                >{user.displayName ?? "-"}</td>
 
                             <!-- 역할 변경 -->
                             <td class="px-4 py-3">
@@ -145,10 +192,15 @@ const STATUS_COLOR: Record<string, string> = {
                                     <input type="hidden" name="id" value={user.id} />
                                     <select
                                         name="role"
-                                        onchange={(e) => (e.currentTarget.closest("form") as HTMLFormElement).requestSubmit()}
+                                        onchange={(e) =>
+                                            (
+                                                e.currentTarget.closest("form") as HTMLFormElement
+                                            ).requestSubmit()}
                                         class="rounded border border-gray-200 bg-transparent py-0.5 text-xs text-gray-700 focus:outline-none">
-                                        <option value="user" selected={user.role === "user"}>일반</option>
-                                        <option value="admin" selected={user.role === "admin"}>관리자</option>
+                                        <option value="user" selected={user.role === "user"}
+                                            >일반</option>
+                                        <option value="admin" selected={user.role === "admin"}
+                                            >관리자</option>
                                     </select>
                                 </form>
                             </td>
@@ -156,14 +208,22 @@ const STATUS_COLOR: Record<string, string> = {
                             <!-- 상태 배지 + 변경 -->
                             <td class="px-4 py-3">
                                 <div class="flex items-center gap-2">
-                                    <span class="rounded-full px-2 py-0.5 text-xs font-medium {STATUS_COLOR[user.status]}">
+                                    <span
+                                        class="rounded-full px-2 py-0.5 text-xs font-medium {STATUS_COLOR[
+                                            user.status
+                                        ]}">
                                         {STATUS_LABEL[user.status]}
                                     </span>
                                     {#if STATUS_NEXT[user.status]}
                                         <form method="POST" action="?/updateStatus" use:enhance>
                                             <input type="hidden" name="id" value={user.id} />
-                                            <input type="hidden" name="status" value={STATUS_NEXT[user.status].status} />
-                                            <button type="submit" class="text-xs text-gray-400 hover:text-gray-700 hover:underline">
+                                            <input
+                                                type="hidden"
+                                                name="status"
+                                                value={STATUS_NEXT[user.status].status} />
+                                            <button
+                                                type="submit"
+                                                class="text-xs text-gray-400 hover:text-gray-700 hover:underline">
                                                 {STATUS_NEXT[user.status].label}
                                             </button>
                                         </form>
@@ -171,12 +231,18 @@ const STATUS_COLOR: Record<string, string> = {
                                 </div>
                             </td>
 
-                            <td class="px-4 py-3 text-xs text-gray-400">{dateFormatter.format(user.createdAt)}</td>
+                            <td class="px-4 py-3 text-xs text-gray-400"
+                                >{dateFormatter.format(user.createdAt)}</td>
 
                             <!-- 작업 버튼 -->
                             <td class="px-4 py-3">
                                 <div class="flex items-center gap-2">
-                                    <button type="button" onclick={() => (resetPasswordUserId = resetPasswordUserId === user.id ? null : user.id)} class="text-xs text-blue-500 hover:text-blue-700">
+                                    <button
+                                        type="button"
+                                        onclick={() =>
+                                            (resetPasswordUserId =
+                                                resetPasswordUserId === user.id ? null : user.id)}
+                                        class="text-xs text-blue-500 hover:text-blue-700">
                                         비밀번호 초기화
                                     </button>
 
@@ -186,7 +252,8 @@ const STATUS_COLOR: Record<string, string> = {
                                             type="submit"
                                             class="text-xs text-red-400 hover:text-red-600"
                                             onclick={(e) => {
-                                                if (!confirm("사용자를 삭제하시겠습니까?")) e.preventDefault();
+                                                if (!confirm("사용자를 삭제하시겠습니까?"))
+                                                    e.preventDefault();
                                             }}>
                                             삭제
                                         </button>
@@ -208,7 +275,8 @@ const STATUS_COLOR: Record<string, string> = {
                                         use:enhance={() => {
                                             return ({ result, update }) => {
                                                 update();
-                                                if (result.type === "success") resetPasswordUserId = null;
+                                                if (result.type === "success")
+                                                    resetPasswordUserId = null;
                                             };
                                         }}
                                         class="flex items-center gap-2">
@@ -220,8 +288,17 @@ const STATUS_COLOR: Record<string, string> = {
                                             minlength="8"
                                             placeholder="새 비밀번호 (8자 이상)"
                                             class="rounded-md border border-gray-300 px-3 py-1 text-sm focus:border-blue-500 focus:outline-none" />
-                                        <button type="submit" class="rounded-md bg-blue-600 px-3 py-1 text-xs font-medium text-white hover:bg-blue-700"> 변경 </button>
-                                        <button type="button" onclick={() => (resetPasswordUserId = null)} class="text-xs text-gray-400 hover:text-gray-600"> 취소 </button>
+                                        <button
+                                            type="submit"
+                                            class="rounded-md bg-blue-600 px-3 py-1 text-xs font-medium text-white hover:bg-blue-700">
+                                            변경
+                                        </button>
+                                        <button
+                                            type="button"
+                                            onclick={() => (resetPasswordUserId = null)}
+                                            class="text-xs text-gray-400 hover:text-gray-600">
+                                            취소
+                                        </button>
                                     </form>
                                 </td>
                             </tr>
diff --git a/src/routes/admin/users/[id]/+page.server.ts b/src/routes/admin/users/[id]/+page.server.ts
index 3096511..d3c0c44 100644
--- a/src/routes/admin/users/[id]/+page.server.ts
+++ b/src/routes/admin/users/[id]/+page.server.ts
@@ -2,7 +2,16 @@ import { fail, error } from "@sveltejs/kit";
 import { and, asc, eq, isNull } from "drizzle-orm";
 import type { Actions, PageServerLoad } from "./$types";
 import { requireDbContext } from "$lib/server/auth/guards";
-import { departments, parts, positions, teams, userDepartments, userParts, userTeams, users } from "$lib/server/db/schema";
+import {
+    departments,
+    parts,
+    positions,
+    teams,
+    userDepartments,
+    userParts,
+    userTeams,
+    users,
+} from "$lib/server/db/schema";
 
 export const load: PageServerLoad = async ({ locals, params }) => {
     const { db, tenant } = requireDbContext(locals);
@@ -87,7 +96,11 @@ export const load: PageServerLoad = async ({ locals, params }) => {
         .where(and(eq(parts.tenantId, tenant.id), eq(parts.status, "active")))
         .orderBy(asc(teams.name), asc(parts.name));
 
-    const allPositions = await db.select({ id: positions.id, name: positions.name, level: positions.level }).from(positions).where(eq(positions.tenantId, tenant.id)).orderBy(asc(positions.level));
+    const allPositions = await db
+        .select({ id: positions.id, name: positions.name, level: positions.level })
+        .from(positions)
+        .where(eq(positions.tenantId, tenant.id))
+        .orderBy(asc(positions.level));
 
     return {
         user,
@@ -185,7 +198,9 @@ export const actions: Actions = {
             if (!pos) return fail(404, { error: "직책을 찾을 수 없습니다." });
         }
 
-        await db.insert(userDepartments).values({ tenantId: tenant.id, userId, departmentId, positionId, jobTitle, isPrimary });
+        await db
+            .insert(userDepartments)
+            .values({ tenantId: tenant.id, userId, departmentId, positionId, jobTitle, isPrimary });
         return { addedDept: true };
     },
 
@@ -199,7 +214,9 @@ export const actions: Actions = {
         await db
             .update(userDepartments)
             .set({ endedAt: new Date() })
-            .where(and(eq(userDepartments.id, membershipId), eq(userDepartments.tenantId, tenant.id)));
+            .where(
+                and(eq(userDepartments.id, membershipId), eq(userDepartments.tenantId, tenant.id)),
+            );
         return { removedDept: true };
     },
 
@@ -228,7 +245,9 @@ export const actions: Actions = {
             .limit(1);
         if (!team) return fail(404, { error: "팀을 찾을 수 없습니다." });
 
-        await db.insert(userTeams).values({ tenantId: tenant.id, userId, teamId, jobTitle, isPrimary });
+        await db
+            .insert(userTeams)
+            .values({ tenantId: tenant.id, userId, teamId, jobTitle, isPrimary });
         return { addedTeam: true };
     },
 
@@ -271,7 +290,9 @@ export const actions: Actions = {
             .limit(1);
         if (!part) return fail(404, { error: "파트를 찾을 수 없습니다." });
 
-        await db.insert(userParts).values({ tenantId: tenant.id, userId, partId, jobTitle, isPrimary });
+        await db
+            .insert(userParts)
+            .values({ tenantId: tenant.id, userId, partId, jobTitle, isPrimary });
         return { addedPart: true };
     },
 
diff --git a/src/routes/admin/users/[id]/+page.svelte b/src/routes/admin/users/[id]/+page.svelte
index b0c2ba6..22947e7 100644
--- a/src/routes/admin/users/[id]/+page.svelte
+++ b/src/routes/admin/users/[id]/+page.svelte
@@ -34,7 +34,8 @@ const TIMEZONE_OPTIONS = [
 <div class="max-w-3xl space-y-8">
     <!-- 헤더 -->
     <div class="flex items-center gap-3">
-        <a href={resolve("/admin/users")} class="text-sm text-gray-400 hover:text-gray-600">← 목록</a>
+        <a href={resolve("/admin/users")} class="text-sm text-gray-400 hover:text-gray-600"
+            >← 목록</a>
         <h1 class="text-2xl font-bold text-gray-900">{data.user.displayName ?? data.user.email}</h1>
         <span class="text-sm text-gray-400">{data.user.email}</span>
     </div>
@@ -45,7 +46,10 @@ const TIMEZONE_OPTIONS = [
         </div>
     {/if}
     {#if updated}
-        <div class="rounded-lg border border-green-200 bg-green-50 px-4 py-3 text-sm text-green-700">저장되었습니다.</div>
+        <div
+            class="rounded-lg border border-green-200 bg-green-50 px-4 py-3 text-sm text-green-700">
+            저장되었습니다.
+        </div>
     {/if}
 
     <!-- 프로필 수정 -->
@@ -54,7 +58,8 @@ const TIMEZONE_OPTIONS = [
         <form method="POST" action="?/updateProfile" use:enhance class="space-y-4">
             <div class="grid grid-cols-1 gap-4 sm:grid-cols-2">
                 <div>
-                    <label for="givenName" class="block text-xs font-medium text-gray-700">이름 (Given Name)</label>
+                    <label for="givenName" class="block text-xs font-medium text-gray-700"
+                        >이름 (Given Name)</label>
                     <input
                         id="givenName"
                         type="text"
@@ -63,7 +68,8 @@ const TIMEZONE_OPTIONS = [
                         class="mt-1 w-full rounded-md border border-gray-300 px-3 py-2 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div>
-                    <label for="familyName" class="block text-xs font-medium text-gray-700">성 (Family Name)</label>
+                    <label for="familyName" class="block text-xs font-medium text-gray-700"
+                        >성 (Family Name)</label>
                     <input
                         id="familyName"
                         type="text"
@@ -72,7 +78,8 @@ const TIMEZONE_OPTIONS = [
                         class="mt-1 w-full rounded-md border border-gray-300 px-3 py-2 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div class="sm:col-span-2">
-                    <label for="displayName" class="block text-xs font-medium text-gray-700">표시 이름</label>
+                    <label for="displayName" class="block text-xs font-medium text-gray-700"
+                        >표시 이름</label>
                     <input
                         id="displayName"
                         type="text"
@@ -81,7 +88,8 @@ const TIMEZONE_OPTIONS = [
                         class="mt-1 w-full rounded-md border border-gray-300 px-3 py-2 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div>
-                    <label for="phoneNumber" class="block text-xs font-medium text-gray-700">전화번호</label>
+                    <label for="phoneNumber" class="block text-xs font-medium text-gray-700"
+                        >전화번호</label>
                     <input
                         id="phoneNumber"
                         type="tel"
@@ -91,7 +99,8 @@ const TIMEZONE_OPTIONS = [
                         class="mt-1 w-full rounded-md border border-gray-300 px-3 py-2 text-sm focus:border-blue-500 focus:outline-none" />
                 </div>
                 <div>
-                    <label for="birthdate" class="block text-xs font-medium text-gray-700">생년월일</label>
+                    <label for="birthdate" class="block text-xs font-medium text-gray-700"
+                        >생년월일</label>
                     <input
                         id="birthdate"
                         type="date"
@@ -101,43 +110,69 @@ const TIMEZONE_OPTIONS = [
                 </div>
                 <div class="sm:col-span-2">
                     <label for="bio" class="block text-xs font-medium text-gray-700">소개</label>
-                    <textarea id="bio" name="bio" rows="2" class="mt-1 w-full resize-none rounded-md border border-gray-300 px-3 py-2 text-sm focus:border-blue-500 focus:outline-none"
+                    <textarea
+                        id="bio"
+                        name="bio"
+                        rows="2"
+                        class="mt-1 w-full resize-none rounded-md border border-gray-300 px-3 py-2 text-sm focus:border-blue-500 focus:outline-none"
                         >{data.user.bio ?? ""}</textarea>
                 </div>
                 <div>
                     <label for="locale" class="block text-xs font-medium text-gray-700">언어</label>
-                    <select id="locale" name="locale" class="mt-1 w-full rounded-md border border-gray-300 px-3 py-2 text-sm focus:border-blue-500 focus:outline-none">
+                    <select
+                        id="locale"
+                        name="locale"
+                        class="mt-1 w-full rounded-md border border-gray-300 px-3 py-2 text-sm focus:border-blue-500 focus:outline-none">
                         {#each LOCALE_OPTIONS as opt (opt.value)}
-                            <option value={opt.value} selected={data.user.locale === opt.value}>{opt.label}</option>
+                            <option value={opt.value} selected={data.user.locale === opt.value}
+                                >{opt.label}</option>
                         {/each}
                     </select>
                 </div>
                 <div>
-                    <label for="zoneinfo" class="block text-xs font-medium text-gray-700">시간대</label>
-                    <select id="zoneinfo" name="zoneinfo" class="mt-1 w-full rounded-md border border-gray-300 px-3 py-2 text-sm focus:border-blue-500 focus:outline-none">
+                    <label for="zoneinfo" class="block text-xs font-medium text-gray-700"
+                        >시간대</label>
+                    <select
+                        id="zoneinfo"
+                        name="zoneinfo"
+                        class="mt-1 w-full rounded-md border border-gray-300 px-3 py-2 text-sm focus:border-blue-500 focus:outline-none">
                         {#each TIMEZONE_OPTIONS as opt (opt.value)}
-                            <option value={opt.value} selected={data.user.zoneinfo === opt.value}>{opt.label}</option>
+                            <option value={opt.value} selected={data.user.zoneinfo === opt.value}
+                                >{opt.label}</option>
                         {/each}
                     </select>
                 </div>
                 <div>
                     <label for="role" class="block text-xs font-medium text-gray-700">역할</label>
-                    <select id="role" name="role" class="mt-1 w-full rounded-md border border-gray-300 px-3 py-2 text-sm focus:border-blue-500 focus:outline-none">
-                        <option value="user" selected={data.user.role === "user"}>일반 사용자</option>
+                    <select
+                        id="role"
+                        name="role"
+                        class="mt-1 w-full rounded-md border border-gray-300 px-3 py-2 text-sm focus:border-blue-500 focus:outline-none">
+                        <option value="user" selected={data.user.role === "user"}
+                            >일반 사용자</option>
                         <option value="admin" selected={data.user.role === "admin"}>관리자</option>
                     </select>
                 </div>
                 <div>
                     <label for="status" class="block text-xs font-medium text-gray-700">상태</label>
-                    <select id="status" name="status" class="mt-1 w-full rounded-md border border-gray-300 px-3 py-2 text-sm focus:border-blue-500 focus:outline-none">
-                        <option value="active" selected={data.user.status === "active"}>활성</option>
-                        <option value="disabled" selected={data.user.status === "disabled"}>비활성</option>
-                        <option value="locked" selected={data.user.status === "locked"}>잠김</option>
+                    <select
+                        id="status"
+                        name="status"
+                        class="mt-1 w-full rounded-md border border-gray-300 px-3 py-2 text-sm focus:border-blue-500 focus:outline-none">
+                        <option value="active" selected={data.user.status === "active"}
+                            >활성</option>
+                        <option value="disabled" selected={data.user.status === "disabled"}
+                            >비활성</option>
+                        <option value="locked" selected={data.user.status === "locked"}
+                            >잠김</option>
                     </select>
                 </div>
             </div>
             <div class="flex justify-end pt-2">
-                <button type="submit" class="rounded-md bg-blue-600 px-5 py-2 text-sm font-medium text-white hover:bg-blue-700">저장</button>
+                <button
+                    type="submit"
+                    class="rounded-md bg-blue-600 px-5 py-2 text-sm font-medium text-white hover:bg-blue-700"
+                    >저장</button>
             </div>
         </form>
     </section>
@@ -153,14 +188,20 @@ const TIMEZONE_OPTIONS = [
                     <div class="flex items-center justify-between px-4 py-2.5 text-sm">
                         <div class="flex flex-wrap items-center gap-2">
                             <span class="font-medium text-gray-900">{m.departmentName}</span>
-                            {#if m.isPrimary}<span class="rounded-full bg-blue-100 px-1.5 py-0.5 text-xs text-blue-700">주소속</span>{/if}
-                            {#if m.positionName}<span class="text-gray-500">{m.positionName}</span>{/if}
+                            {#if m.isPrimary}<span
+                                    class="rounded-full bg-blue-100 px-1.5 py-0.5 text-xs text-blue-700"
+                                    >주소속</span
+                                >{/if}
+                            {#if m.positionName}<span class="text-gray-500">{m.positionName}</span
+                                >{/if}
                             {#if m.jobTitle}<span class="text-gray-400">/ {m.jobTitle}</span>{/if}
-                            <span class="text-xs text-gray-300">{dateFormatter.format(m.startedAt)} ~</span>
+                            <span class="text-xs text-gray-300"
+                                >{dateFormatter.format(m.startedAt)} ~</span>
                         </div>
                         <form method="POST" action="?/removeDept" use:enhance>
                             <input type="hidden" name="membershipId" value={m.id} />
-                            <button type="submit" class="text-xs text-red-400 hover:text-red-600">제거</button>
+                            <button type="submit" class="text-xs text-red-400 hover:text-red-600"
+                                >제거</button>
                         </form>
                     </div>
                 {/each}
@@ -170,26 +211,42 @@ const TIMEZONE_OPTIONS = [
         {/if}
 
         <!-- 부서 추가 폼 -->
-        <form method="POST" action="?/addDept" use:enhance class="grid grid-cols-2 gap-2 border-t border-gray-100 pt-4 sm:grid-cols-4">
-            <select name="departmentId" required class="rounded-md border border-gray-300 px-2 py-1.5 text-sm focus:border-blue-500 focus:outline-none">
+        <form
+            method="POST"
+            action="?/addDept"
+            use:enhance
+            class="grid grid-cols-2 gap-2 border-t border-gray-100 pt-4 sm:grid-cols-4">
+            <select
+                name="departmentId"
+                required
+                class="rounded-md border border-gray-300 px-2 py-1.5 text-sm focus:border-blue-500 focus:outline-none">
                 <option value="">부서 선택</option>
                 {#each data.allDepts as d (d.id)}
                     <option value={d.id}>{d.name}</option>
                 {/each}
             </select>
-            <select name="positionId" class="rounded-md border border-gray-300 px-2 py-1.5 text-sm focus:border-blue-500 focus:outline-none">
+            <select
+                name="positionId"
+                class="rounded-md border border-gray-300 px-2 py-1.5 text-sm focus:border-blue-500 focus:outline-none">
                 <option value="">직급 없음</option>
                 {#each data.allPositions as p (p.id)}
                     <option value={p.id}>{p.name}</option>
                 {/each}
             </select>
-            <input type="text" name="jobTitle" placeholder="직책 (예: 팀장)" class="rounded-md border border-gray-300 px-2 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
+            <input
+                type="text"
+                name="jobTitle"
+                placeholder="직책 (예: 팀장)"
+                class="rounded-md border border-gray-300 px-2 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
             <div class="flex items-center gap-2">
                 <label class="flex items-center gap-1 text-xs text-gray-600">
                     <input type="checkbox" name="isPrimary" value="true" class="rounded" />
                     주소속
                 </label>
-                <button type="submit" class="ml-auto rounded-md bg-blue-600 px-3 py-1.5 text-xs font-medium text-white hover:bg-blue-700">추가</button>
+                <button
+                    type="submit"
+                    class="ml-auto rounded-md bg-blue-600 px-3 py-1.5 text-xs font-medium text-white hover:bg-blue-700"
+                    >추가</button>
             </div>
         </form>
     </section>
@@ -204,14 +261,21 @@ const TIMEZONE_OPTIONS = [
                     <div class="flex items-center justify-between px-4 py-2.5 text-sm">
                         <div class="flex flex-wrap items-center gap-2">
                             <span class="font-medium text-gray-900">{m.teamName}</span>
-                            {#if m.departmentName}<span class="text-xs text-gray-400">({m.departmentName})</span>{/if}
-                            {#if m.isPrimary}<span class="rounded-full bg-indigo-100 px-1.5 py-0.5 text-xs text-indigo-700">주소속</span>{/if}
+                            {#if m.departmentName}<span class="text-xs text-gray-400"
+                                    >({m.departmentName})</span
+                                >{/if}
+                            {#if m.isPrimary}<span
+                                    class="rounded-full bg-indigo-100 px-1.5 py-0.5 text-xs text-indigo-700"
+                                    >주소속</span
+                                >{/if}
                             {#if m.jobTitle}<span class="text-gray-400">/ {m.jobTitle}</span>{/if}
-                            <span class="text-xs text-gray-300">{dateFormatter.format(m.startedAt)} ~</span>
+                            <span class="text-xs text-gray-300"
+                                >{dateFormatter.format(m.startedAt)} ~</span>
                         </div>
                         <form method="POST" action="?/removeTeam" use:enhance>
                             <input type="hidden" name="membershipId" value={m.id} />
-                            <button type="submit" class="text-xs text-red-400 hover:text-red-600">제거</button>
+                            <button type="submit" class="text-xs text-red-400 hover:text-red-600"
+                                >제거</button>
                         </form>
                     </div>
                 {/each}
@@ -220,20 +284,34 @@ const TIMEZONE_OPTIONS = [
             <p class="mb-4 text-sm text-gray-400">소속된 팀이 없습니다.</p>
         {/if}
 
-        <form method="POST" action="?/addTeam" use:enhance class="grid grid-cols-2 gap-2 border-t border-gray-100 pt-4 sm:grid-cols-4">
-            <select name="teamId" required class="col-span-2 rounded-md border border-gray-300 px-2 py-1.5 text-sm focus:border-blue-500 focus:outline-none sm:col-span-1">
+        <form
+            method="POST"
+            action="?/addTeam"
+            use:enhance
+            class="grid grid-cols-2 gap-2 border-t border-gray-100 pt-4 sm:grid-cols-4">
+            <select
+                name="teamId"
+                required
+                class="col-span-2 rounded-md border border-gray-300 px-2 py-1.5 text-sm focus:border-blue-500 focus:outline-none sm:col-span-1">
                 <option value="">팀 선택</option>
                 {#each data.allTeams as t (t.id)}
                     <option value={t.id}>{teamLabel(t)}</option>
                 {/each}
             </select>
-            <input type="text" name="jobTitle" placeholder="직책 (예: 팀장)" class="rounded-md border border-gray-300 px-2 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
+            <input
+                type="text"
+                name="jobTitle"
+                placeholder="직책 (예: 팀장)"
+                class="rounded-md border border-gray-300 px-2 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
             <div class="flex items-center gap-2">
                 <label class="flex items-center gap-1 text-xs text-gray-600">
                     <input type="checkbox" name="isPrimary" value="true" class="rounded" />
                     주소속
                 </label>
-                <button type="submit" class="ml-auto rounded-md bg-blue-600 px-3 py-1.5 text-xs font-medium text-white hover:bg-blue-700">추가</button>
+                <button
+                    type="submit"
+                    class="ml-auto rounded-md bg-blue-600 px-3 py-1.5 text-xs font-medium text-white hover:bg-blue-700"
+                    >추가</button>
             </div>
         </form>
     </section>
@@ -248,14 +326,20 @@ const TIMEZONE_OPTIONS = [
                     <div class="flex items-center justify-between px-4 py-2.5 text-sm">
                         <div class="flex flex-wrap items-center gap-2">
                             <span class="font-medium text-gray-900">{m.partName}</span>
-                            {#if m.teamName}<span class="text-xs text-gray-400">({m.teamName})</span>{/if}
-                            {#if m.isPrimary}<span class="rounded-full bg-violet-100 px-1.5 py-0.5 text-xs text-violet-700">주소속</span>{/if}
+                            {#if m.teamName}<span class="text-xs text-gray-400">({m.teamName})</span
+                                >{/if}
+                            {#if m.isPrimary}<span
+                                    class="rounded-full bg-violet-100 px-1.5 py-0.5 text-xs text-violet-700"
+                                    >주소속</span
+                                >{/if}
                             {#if m.jobTitle}<span class="text-gray-400">/ {m.jobTitle}</span>{/if}
-                            <span class="text-xs text-gray-300">{dateFormatter.format(m.startedAt)} ~</span>
+                            <span class="text-xs text-gray-300"
+                                >{dateFormatter.format(m.startedAt)} ~</span>
                         </div>
                         <form method="POST" action="?/removePart" use:enhance>
                             <input type="hidden" name="membershipId" value={m.id} />
-                            <button type="submit" class="text-xs text-red-400 hover:text-red-600">제거</button>
+                            <button type="submit" class="text-xs text-red-400 hover:text-red-600"
+                                >제거</button>
                         </form>
                     </div>
                 {/each}
@@ -264,20 +348,34 @@ const TIMEZONE_OPTIONS = [
             <p class="mb-4 text-sm text-gray-400">소속된 파트가 없습니다.</p>
         {/if}
 
-        <form method="POST" action="?/addPart" use:enhance class="grid grid-cols-2 gap-2 border-t border-gray-100 pt-4 sm:grid-cols-4">
-            <select name="partId" required class="col-span-2 rounded-md border border-gray-300 px-2 py-1.5 text-sm focus:border-blue-500 focus:outline-none sm:col-span-1">
+        <form
+            method="POST"
+            action="?/addPart"
+            use:enhance
+            class="grid grid-cols-2 gap-2 border-t border-gray-100 pt-4 sm:grid-cols-4">
+            <select
+                name="partId"
+                required
+                class="col-span-2 rounded-md border border-gray-300 px-2 py-1.5 text-sm focus:border-blue-500 focus:outline-none sm:col-span-1">
                 <option value="">파트 선택</option>
                 {#each data.allParts as p (p.id)}
                     <option value={p.id}>{partLabel(p)}</option>
                 {/each}
             </select>
-            <input type="text" name="jobTitle" placeholder="직책 (예: 파트장)" class="rounded-md border border-gray-300 px-2 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
+            <input
+                type="text"
+                name="jobTitle"
+                placeholder="직책 (예: 파트장)"
+                class="rounded-md border border-gray-300 px-2 py-1.5 text-sm focus:border-blue-500 focus:outline-none" />
             <div class="flex items-center gap-2">
                 <label class="flex items-center gap-1 text-xs text-gray-600">
                     <input type="checkbox" name="isPrimary" value="true" class="rounded" />
                     주소속
                 </label>
-                <button type="submit" class="ml-auto rounded-md bg-blue-600 px-3 py-1.5 text-xs font-medium text-white hover:bg-blue-700">추가</button>
+                <button
+                    type="submit"
+                    class="ml-auto rounded-md bg-blue-600 px-3 py-1.5 text-xs font-medium text-white hover:bg-blue-700"
+                    >추가</button>
             </div>
         </form>
     </section>
diff --git a/src/routes/api/webauthn/authenticate/options/+server.ts b/src/routes/api/webauthn/authenticate/options/+server.ts
index 4f2d52d..b2efe49 100644
--- a/src/routes/api/webauthn/authenticate/options/+server.ts
+++ b/src/routes/api/webauthn/authenticate/options/+server.ts
@@ -1,7 +1,11 @@
 import { json } from "@sveltejs/kit";
 import type { RequestHandler } from "./$types";
 import { requireDbContext } from "$lib/server/auth/guards";
-import { buildAuthenticationOptions, getWebAuthnConfig, saveChallenge } from "$lib/server/auth/webauthn";
+import {
+    buildAuthenticationOptions,
+    getWebAuthnConfig,
+    saveChallenge,
+} from "$lib/server/auth/webauthn";
 
 export const POST: RequestHandler = async ({ url, locals }) => {
     const { db } = requireDbContext(locals);
diff --git a/src/routes/api/webauthn/authenticate/verify/+server.ts b/src/routes/api/webauthn/authenticate/verify/+server.ts
index f488ecf..c46aa73 100644
--- a/src/routes/api/webauthn/authenticate/verify/+server.ts
+++ b/src/routes/api/webauthn/authenticate/verify/+server.ts
@@ -6,7 +6,11 @@ import { recordAuditEvent, getRequestMetadata } from "$lib/server/audit/index";
 import { createSessionRecord, setSessionCookie } from "$lib/server/auth/session";
 import { AMR_WEBAUTHN, amrToAcr } from "$lib/server/auth/constants";
 import { checkRateLimit } from "$lib/server/ratelimit";
-import { verifyPasskeyAuthentication, consumeChallenge, getWebAuthnConfig } from "$lib/server/auth/webauthn";
+import {
+    verifyPasskeyAuthentication,
+    consumeChallenge,
+    getWebAuthnConfig,
+} from "$lib/server/auth/webauthn";
 import type { AuthenticationResponseJSON } from "$lib/server/auth/webauthn";
 import { users } from "$lib/server/db/schema";
 
@@ -39,7 +43,9 @@ export const POST: RequestHandler = async (event) => {
     }
 
     // 1회용 challenge 소진 (DB 기반)
-    const clientChallenge = body.response?.clientDataJSON ? extractChallengeFromClientData(body.response.clientDataJSON) : null;
+    const clientChallenge = body.response?.clientDataJSON
+        ? extractChallengeFromClientData(body.response.clientDataJSON)
+        : null;
     if (!clientChallenge) {
         throw error(400, "인증 세션이 유효하지 않습니다.");
     }
@@ -48,7 +54,14 @@ export const POST: RequestHandler = async (event) => {
         throw error(400, "인증 세션이 만료되었거나 이미 사용되었습니다.");
     }
 
-    const result = await verifyPasskeyAuthentication(db, body, clientChallenge, rpID, origin, tenant.id);
+    const result = await verifyPasskeyAuthentication(
+        db,
+        body,
+        clientChallenge,
+        rpID,
+        origin,
+        tenant.id,
+    );
 
     if (!result) {
         const requestMetadata = getRequestMetadata(event);
@@ -102,7 +115,15 @@ export const POST: RequestHandler = async (event) => {
     let safeRedirect: string;
     try {
         const decoded = decodeURIComponent(requested);
-        safeRedirect = decoded && decoded.startsWith("/") && !decoded.startsWith("//") && !decoded.includes("\\") ? requested : user.role === "admin" ? "/admin" : "/";
+        safeRedirect =
+            decoded &&
+            decoded.startsWith("/") &&
+            !decoded.startsWith("//") &&
+            !decoded.includes("\\")
+                ? requested
+                : user.role === "admin"
+                  ? "/admin"
+                  : "/";
     } catch {
         safeRedirect = user.role === "admin" ? "/admin" : "/";
     }
diff --git a/src/routes/api/webauthn/register/options/+server.ts b/src/routes/api/webauthn/register/options/+server.ts
index a419151..03fed63 100644
--- a/src/routes/api/webauthn/register/options/+server.ts
+++ b/src/routes/api/webauthn/register/options/+server.ts
@@ -2,7 +2,12 @@ import { json, error } from "@sveltejs/kit";
 import type { RequestHandler } from "./$types";
 import { requireDbContext } from "$lib/server/auth/guards";
 import { getRuntimeConfig } from "$lib/server/auth/runtime";
-import { buildRegistrationOptions, createChallengeCookie, getWebAuthnConfig, WEBAUTHN_CHALLENGE_COOKIE } from "$lib/server/auth/webauthn";
+import {
+    buildRegistrationOptions,
+    createChallengeCookie,
+    getWebAuthnConfig,
+    WEBAUTHN_CHALLENGE_COOKIE,
+} from "$lib/server/auth/webauthn";
 
 export const POST: RequestHandler = async (event) => {
     const { locals, cookies, url, platform } = event;
@@ -18,10 +23,20 @@ export const POST: RequestHandler = async (event) => {
     const { db } = requireDbContext(locals);
     const { rpID, rpName, origin } = getWebAuthnConfig(url);
 
-    const options = await buildRegistrationOptions(db, locals.user.id, locals.user.email, locals.user.displayName, rpID, rpName);
+    const options = await buildRegistrationOptions(
+        db,
+        locals.user.id,
+        locals.user.email,
+        locals.user.displayName,
+        rpID,
+        rpName,
+    );
 
     // challenge 를 HMAC-서명 쿠키에 저장
-    const cookieValue = await createChallengeCookie({ challenge: options.challenge, type: "register", userId: locals.user.id }, config.signingKeySecret);
+    const cookieValue = await createChallengeCookie(
+        { challenge: options.challenge, type: "register", userId: locals.user.id },
+        config.signingKeySecret,
+    );
 
     cookies.set(WEBAUTHN_CHALLENGE_COOKIE, cookieValue, {
         path: "/",
diff --git a/src/routes/api/webauthn/register/verify/+server.ts b/src/routes/api/webauthn/register/verify/+server.ts
index c489905..80aab48 100644
--- a/src/routes/api/webauthn/register/verify/+server.ts
+++ b/src/routes/api/webauthn/register/verify/+server.ts
@@ -3,7 +3,13 @@ import type { RequestHandler } from "./$types";
 import { requireDbContext } from "$lib/server/auth/guards";
 import { getRuntimeConfig } from "$lib/server/auth/runtime";
 import { recordAuditEvent, getRequestMetadata } from "$lib/server/audit/index";
-import { verifyChallengeCookie, verifyRegistrationResponse, savePasskey, getWebAuthnConfig, WEBAUTHN_CHALLENGE_COOKIE } from "$lib/server/auth/webauthn";
+import {
+    verifyChallengeCookie,
+    verifyRegistrationResponse,
+    savePasskey,
+    getWebAuthnConfig,
+    WEBAUTHN_CHALLENGE_COOKIE,
+} from "$lib/server/auth/webauthn";
 import type { RegistrationResponseJSON } from "$lib/server/auth/webauthn";
 
 export const POST: RequestHandler = async (event) => {
diff --git a/src/routes/oidc/authorize/+server.ts b/src/routes/oidc/authorize/+server.ts
index d618e11..8c50523 100644
--- a/src/routes/oidc/authorize/+server.ts
+++ b/src/routes/oidc/authorize/+server.ts
@@ -7,7 +7,12 @@ import { createGrant } from "$lib/server/oidc/grant";
 import { checkRateLimit } from "$lib/server/ratelimit";
 
 /** redirect_uri 가 확정된 이후에만 사용. 그 전 오류는 throw error() 로 직접 응답. */
-function authRedirectError(redirectUri: string, errorCode: string, description: string, state?: string | null): never {
+function authRedirectError(
+    redirectUri: string,
+    errorCode: string,
+    description: string,
+    state?: string | null,
+): never {
     const dest = new URL(redirectUri);
     dest.searchParams.set("error", errorCode);
     dest.searchParams.set("error_description", description);
@@ -58,10 +63,20 @@ export const GET: RequestHandler = async (event) => {
     // PKCE 검증
     if (client.requirePkce) {
         if (!codeChallenge) {
-            authRedirectError(redirectUri, "invalid_request", "PKCE code_challenge 가 필요합니다.", state);
+            authRedirectError(
+                redirectUri,
+                "invalid_request",
+                "PKCE code_challenge 가 필요합니다.",
+                state,
+            );
         }
         if (codeChallengeMethod !== "S256") {
-            authRedirectError(redirectUri, "invalid_request", "code_challenge_method=S256 만 지원합니다.", state);
+            authRedirectError(
+                redirectUri,
+                "invalid_request",
+                "code_challenge_method=S256 만 지원합니다.",
+                state,
+            );
         }
     }
 
diff --git a/src/routes/oidc/end-session/+server.ts b/src/routes/oidc/end-session/+server.ts
index a3fd4b9..1f99ba1 100644
--- a/src/routes/oidc/end-session/+server.ts
+++ b/src/routes/oidc/end-session/+server.ts
@@ -4,7 +4,11 @@ import { and, eq } from "drizzle-orm";
 import { oidcClients } from "$lib/server/db/schema";
 import { clearSessionCookie, revokeSession } from "$lib/server/auth/session";
 
-async function handleEndSession(locals: App.Locals, url: URL, cookies: Parameters<RequestHandler>[0]["cookies"]): Promise<never> {
+async function handleEndSession(
+    locals: App.Locals,
+    url: URL,
+    cookies: Parameters<RequestHandler>[0]["cookies"],
+): Promise<never> {
     const postLogoutRedirectUri = url.searchParams.get("post_logout_redirect_uri");
     const clientId = url.searchParams.get("client_id");
 
@@ -19,7 +23,13 @@ async function handleEndSession(locals: App.Locals, url: URL, cookies: Parameter
         const [client] = await locals.db
             .select({ postLogoutRedirectUris: oidcClients.postLogoutRedirectUris })
             .from(oidcClients)
-            .where(and(eq(oidcClients.tenantId, locals.tenant.id), eq(oidcClients.clientId, clientId), eq(oidcClients.enabled, true)))
+            .where(
+                and(
+                    eq(oidcClients.tenantId, locals.tenant.id),
+                    eq(oidcClients.clientId, clientId),
+                    eq(oidcClients.enabled, true),
+                ),
+            )
             .limit(1);
 
         if (client?.postLogoutRedirectUris) {
@@ -38,6 +48,8 @@ async function handleEndSession(locals: App.Locals, url: URL, cookies: Parameter
     throw redirect(302, "/");
 }
 
-export const GET: RequestHandler = ({ locals, url, cookies }) => handleEndSession(locals, url, cookies);
+export const GET: RequestHandler = ({ locals, url, cookies }) =>
+    handleEndSession(locals, url, cookies);
 
-export const POST: RequestHandler = ({ locals, url, cookies }) => handleEndSession(locals, url, cookies);
+export const POST: RequestHandler = ({ locals, url, cookies }) =>
+    handleEndSession(locals, url, cookies);
diff --git a/src/routes/oidc/token/+server.ts b/src/routes/oidc/token/+server.ts
index 8cc8a97..992ed4e 100644
--- a/src/routes/oidc/token/+server.ts
+++ b/src/routes/oidc/token/+server.ts
@@ -106,7 +106,11 @@ export const POST: RequestHandler = async (event) => {
         if (!codeVerifier) {
             return tokenError("invalid_grant", "code_verifier 가 필요합니다.");
         }
-        const valid = await verifyPkce(grant.codeChallenge, grant.codeChallengeMethod ?? "plain", codeVerifier);
+        const valid = await verifyPkce(
+            grant.codeChallenge,
+            grant.codeChallengeMethod ?? "plain",
+            codeVerifier,
+        );
         if (!valid) {
             return tokenError("invalid_grant", "code_verifier 검증에 실패했습니다.");
         }
diff --git a/src/routes/oidc/userinfo/+server.ts b/src/routes/oidc/userinfo/+server.ts
index aa012ce..6e02fdf 100644
--- a/src/routes/oidc/userinfo/+server.ts
+++ b/src/routes/oidc/userinfo/+server.ts
@@ -39,7 +39,13 @@ async function handleUserinfo(locals: App.Locals, request: Request): Promise<Res
     const [user] = await db
         .select()
         .from(users)
-        .where(and(eq(users.id, claims.sub), eq(users.tenantId, tenant.id), eq(users.status, "active")))
+        .where(
+            and(
+                eq(users.id, claims.sub),
+                eq(users.tenantId, tenant.id),
+                eq(users.status, "active"),
+            ),
+        )
         .limit(1);
 
     if (!user) {
@@ -63,7 +69,9 @@ async function handleUserinfo(locals: App.Locals, request: Request): Promise<Res
         response.locale = user.locale;
         response.zoneinfo = user.zoneinfo;
         response.birthdate = user.birthdate;
-        response.updated_at = user.updatedAt ? Math.floor(user.updatedAt.getTime() / 1000) : undefined;
+        response.updated_at = user.updatedAt
+            ? Math.floor(user.updatedAt.getTime() / 1000)
+            : undefined;
     }
 
     if (scopes.has("phone")) {
diff --git a/src/routes/poc/+page.svelte b/src/routes/poc/+page.svelte
index 6542220..481745f 100644
--- a/src/routes/poc/+page.svelte
+++ b/src/routes/poc/+page.svelte
@@ -18,13 +18,19 @@ const pocs = [
 
 <main class="mx-auto max-w-2xl p-8">
     <h1 class="mb-6 text-2xl font-semibold">Workers 환경 PoC</h1>
-    <p class="mb-4 text-sm text-gray-600">킥오프 M0 사전 점검. 각 엔드포인트는 GET 요청 시 JSON 으로 결과를 반환.</p>
+    <p class="mb-4 text-sm text-gray-600">
+        킥오프 M0 사전 점검. 각 엔드포인트는 GET 요청 시 JSON 으로 결과를 반환.
+    </p>
     <ul class="space-y-3">
         {#each pocs as p (p.route)}
             <li class="rounded border p-3">
-                <a href={resolve(p.route)} class="font-mono text-blue-600 hover:underline">{resolve(p.route)}</a>
+                <a href={resolve(p.route)} class="font-mono text-blue-600 hover:underline"
+                    >{resolve(p.route)}</a>
                 <span class="ml-2">{p.title}</span>
-                <span class="ml-2 rounded px-2 py-0.5 text-xs" class:bg-green-100={p.status === "ok"} class:bg-yellow-100={p.status === "partial"}>
+                <span
+                    class="ml-2 rounded px-2 py-0.5 text-xs"
+                    class:bg-green-100={p.status === "ok"}
+                    class:bg-yellow-100={p.status === "partial"}>
                     {p.status}
                 </span>
             </li>
diff --git a/src/routes/poc/rs256/+server.ts b/src/routes/poc/rs256/+server.ts
index 486af97..c6fc701 100644
--- a/src/routes/poc/rs256/+server.ts
+++ b/src/routes/poc/rs256/+server.ts
@@ -46,12 +46,23 @@ export const GET = async () => {
         }),
     );
     const signingInput = `${header}.${payload}`;
-    const sigBytes = new Uint8Array(await crypto.subtle.sign({ name: "RSASSA-PKCS1-v1_5" }, keyPair.privateKey, new TextEncoder().encode(signingInput)));
+    const sigBytes = new Uint8Array(
+        await crypto.subtle.sign(
+            { name: "RSASSA-PKCS1-v1_5" },
+            keyPair.privateKey,
+            new TextEncoder().encode(signingInput),
+        ),
+    );
     const jwt = `${signingInput}.${b64url(sigBytes)}`;
     const tSign = Date.now();
 
     // 4) 검증
-    const ok = await crypto.subtle.verify({ name: "RSASSA-PKCS1-v1_5" }, keyPair.publicKey, sigBytes, new TextEncoder().encode(signingInput));
+    const ok = await crypto.subtle.verify(
+        { name: "RSASSA-PKCS1-v1_5" },
+        keyPair.publicKey,
+        sigBytes,
+        new TextEncoder().encode(signingInput),
+    );
     const tVerify = Date.now();
 
     return json({
diff --git a/src/routes/poc/saml-sign/+server.ts b/src/routes/poc/saml-sign/+server.ts
index ba36d07..c1384ea 100644
--- a/src/routes/poc/saml-sign/+server.ts
+++ b/src/routes/poc/saml-sign/+server.ts
@@ -67,7 +67,10 @@ export const GET = async () => {
 
     // 검증 라운드트립
     const parsedAgain = xmldsigjs.Parse(signedString);
-    const sigEls = parsedAgain.getElementsByTagNameNS("http://www.w3.org/2000/09/xmldsig#", "Signature");
+    const sigEls = parsedAgain.getElementsByTagNameNS(
+        "http://www.w3.org/2000/09/xmldsig#",
+        "Signature",
+    );
     const verifier = new xmldsigjs.SignedXml(parsedAgain);
     verifier.LoadXml(sigEls[0]);
     const verified = await verifier.Verify();
diff --git a/src/routes/saml/slo/+server.ts b/src/routes/saml/slo/+server.ts
index 66d1e84..d71cb52 100644
--- a/src/routes/saml/slo/+server.ts
+++ b/src/routes/saml/slo/+server.ts
@@ -19,7 +19,10 @@ export const GET: RequestHandler = async (event) => {
     const { db, tenant } = requireDbContext(locals);
 
     if (locals.session) {
-        await db.update(sessions).set({ revokedAt: new Date() }).where(eq(sessions.id, locals.session.id));
+        await db
+            .update(sessions)
+            .set({ revokedAt: new Date() })
+            .where(eq(sessions.id, locals.session.id));
 
         if (locals.user) {
             const requestMetadata = getRequestMetadata(event);
diff --git a/src/routes/saml/sso/+server.ts b/src/routes/saml/sso/+server.ts
index 2c95972..d60ad36 100644
--- a/src/routes/saml/sso/+server.ts
+++ b/src/routes/saml/sso/+server.ts
@@ -12,7 +12,10 @@ import { getRuntimeConfig } from "$lib/server/auth/runtime";
 import { recordAuditEvent, getRequestMetadata } from "$lib/server/audit";
 import { getActiveSigningKey } from "$lib/server/crypto/keys";
 import { acrSatisfies } from "$lib/server/auth/constants";
-import { parseAuthnRequest, verifySamlRedirectSignature } from "$lib/server/saml/parse-authn-request";
+import {
+    parseAuthnRequest,
+    verifySamlRedirectSignature,
+} from "$lib/server/saml/parse-authn-request";
 import { buildSignedSamlErrorResponse, buildSignedSamlResponse } from "$lib/server/saml/response";
 import { findSp, recordSamlSession } from "$lib/server/saml/sp";
 import { getUserMembership } from "$lib/server/org/membership";
@@ -80,7 +83,9 @@ export const GET: RequestHandler = async (event) => {
             certPem: signingKey.certPem,
             privateKey: signingKey.privateKey,
         });
-        const relayStateInput = authnRequest.relayState ? `<input type="hidden" name="RelayState" value="${htmlEscape(authnRequest.relayState)}">` : "";
+        const relayStateInput = authnRequest.relayState
+            ? `<input type="hidden" name="RelayState" value="${htmlEscape(authnRequest.relayState)}">`
+            : "";
         return new Response(
             `<!DOCTYPE html><html lang="ko"><head><meta charset="UTF-8"><title>SSO 리다이렉트 중...</title></head>` +
                 `<body onload="document.getElementById('samlForm').submit()">` +
@@ -108,7 +113,10 @@ export const GET: RequestHandler = async (event) => {
     }
 
     // RequestedAuthnContext: 세션 ACR 이 SP 요구 수준을 만족하는지 검사한다.
-    if (authnRequest.requestedAuthnContext && !acrSatisfies(locals.session.acr, authnRequest.requestedAuthnContext)) {
+    if (
+        authnRequest.requestedAuthnContext &&
+        !acrSatisfies(locals.session.acr, authnRequest.requestedAuthnContext)
+    ) {
         // 세션이 issueInstant 이후에 생성됐다면 재인증을 이미 거쳤으나 ACR 이 여전히 부족한 것.
         // (예: MFA 미설정 사용자가 refeds/mfa 를 요구받은 경우) → NoAuthnContext 오류 반환.
         const isPostReauth = locals.session.createdAt >= authnRequest.issueInstant;
@@ -121,7 +129,9 @@ export const GET: RequestHandler = async (event) => {
                 certPem: signingKey.certPem,
                 privateKey: signingKey.privateKey,
             });
-            const relayStateInput = authnRequest.relayState ? `<input type="hidden" name="RelayState" value="${htmlEscape(authnRequest.relayState)}">` : "";
+            const relayStateInput = authnRequest.relayState
+                ? `<input type="hidden" name="RelayState" value="${htmlEscape(authnRequest.relayState)}">`
+                : "";
             return new Response(
                 `<!DOCTYPE html><html lang="ko"><head><meta charset="UTF-8"><title>SSO 리다이렉트 중...</title></head>` +
                     `<body onload="document.getElementById('samlForm').submit()">` +
@@ -155,7 +165,11 @@ export const GET: RequestHandler = async (event) => {
     if (sp.allowedAttributes) {
         try {
             const parsed = JSON.parse(sp.allowedAttributes) as unknown;
-            allowedSet = new Set(Array.isArray(parsed) ? parsed.filter((v): v is string => typeof v === "string") : DEFAULT_ALLOWED);
+            allowedSet = new Set(
+                Array.isArray(parsed)
+                    ? parsed.filter((v): v is string => typeof v === "string")
+                    : DEFAULT_ALLOWED,
+            );
         } catch {
             allowedSet = new Set(DEFAULT_ALLOWED);
         }
@@ -180,10 +194,15 @@ export const GET: RequestHandler = async (event) => {
     setAttr("phoneNumber", user.phoneNumber);
 
     // 조직 정보는 SP 가 명시적으로 허용한 경우에만 포함한다.
-    const wantsOrg = allowedSet.has("department") || allowedSet.has("team") || allowedSet.has("jobTitle") || allowedSet.has("position");
+    const wantsOrg =
+        allowedSet.has("department") ||
+        allowedSet.has("team") ||
+        allowedSet.has("jobTitle") ||
+        allowedSet.has("position");
     if (wantsOrg) {
         const membership = await getUserMembership(db, user.id);
-        const primaryDept = membership.departments.find((d) => d.isPrimary) ?? membership.departments[0];
+        const primaryDept =
+            membership.departments.find((d) => d.isPrimary) ?? membership.departments[0];
         const primaryTeam = membership.teams.find((t) => t.isPrimary) ?? membership.teams[0];
         if (primaryDept) {
             setAttr("department", primaryDept.name);
@@ -197,7 +216,10 @@ export const GET: RequestHandler = async (event) => {
 
     // NameID 결정
     const nameIdFormat = sp.nameIdFormat;
-    const nameId = nameIdFormat === "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" ? user.id : (user.email ?? user.id);
+    const nameId =
+        nameIdFormat === "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"
+            ? user.id
+            : (user.email ?? user.id);
 
     const sessionIndex = `_si${crypto.randomUUID().replace(/-/g, "")}`;
 
@@ -241,10 +263,17 @@ export const GET: RequestHandler = async (event) => {
 
     // HTTP-POST 바인딩: auto-submit 폼 렌더링
     function htmlEscape(s: string): string {
-        return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+        return s
+            .replace(/&/g, "&amp;")
+            .replace(/</g, "&lt;")
+            .replace(/>/g, "&gt;")
+            .replace(/"/g, "&quot;")
+            .replace(/'/g, "&#39;");
     }
 
-    const relayStateInput = relayState ? `<input type="hidden" name="RelayState" value="${htmlEscape(relayState)}">` : "";
+    const relayStateInput = relayState
+        ? `<input type="hidden" name="RelayState" value="${htmlEscape(relayState)}">`
+        : "";
 
     const html = `<!DOCTYPE html>
 <html lang="ko">
diff --git a/svelte.config.js b/svelte.config.js
index 357d916..ee03cfa 100644
--- a/svelte.config.js
+++ b/svelte.config.js
@@ -4,7 +4,8 @@ import adapter from "@sveltejs/adapter-cloudflare";
 const config = {
     compilerOptions: {
         // Force runes mode for the project, except for libraries. Can be removed in svelte 6.
-        runes: ({ filename }) => (filename.split(/[/\\]/).includes("node_modules") ? undefined : true),
+        runes: ({ filename }) =>
+            filename.split(/[/\\]/).includes("node_modules") ? undefined : true,
     },
     kit: {
         adapter: adapter(),
diff --git a/tsconfig.json b/tsconfig.json
index 1ab31ce..8b6ce84 100644
--- a/tsconfig.json
+++ b/tsconfig.json
@@ -13,7 +13,10 @@
         "moduleResolution": "bundler",
         "types": ["./worker-configuration.d.ts"]
     },
-    "files": ["src/routes/.well-known/openid-configuration/+server.ts", ".svelte-kit/types/src/routes/.well-known/openid-configuration/$types.d.ts"],
+    "files": [
+        "src/routes/.well-known/openid-configuration/+server.ts",
+        ".svelte-kit/types/src/routes/.well-known/openid-configuration/$types.d.ts"
+    ],
     "exclude": [
         "scripts/**",
         "node_modules/**",