@carthooks/arcubase-cli 0.1.20 → 0.1.22

package/bundle/arcubase-admin.mjs

@@ -297,6 +297,148 @@ var adminCommands = [
     "queryParams": [],
     "responseType": "boolean"
   },
+  {
+    "scope": "admin",
+    "module": "dashboard",
+    "functionName": "getDashboardList",
+    "commandPath": [
+      "dashboard",
+      "list"
+    ],
+    "method": "GET",
+    "endpoint": "/api/apps/:app_id/dashboard",
+    "pathParams": [
+      {
+        "param": "app_id",
+        "flag": "app-id"
+      }
+    ],
+    "controller": "Dashboard.GetList",
+    "requestType": null,
+    "queryParams": [],
+    "responseType": "DashboardGetListRespVO"
+  },
+  {
+    "scope": "admin",
+    "module": "dashboard",
+    "functionName": "createDashboard",
+    "commandPath": [
+      "dashboard",
+      "create"
+    ],
+    "method": "POST",
+    "endpoint": "/api/apps/:app_id/dashboard",
+    "pathParams": [
+      {
+        "param": "app_id",
+        "flag": "app-id"
+      }
+    ],
+    "controller": "Dashboard.Create",
+    "requestType": "DashboardCreateReqVO",
+    "queryParams": [],
+    "responseType": "DashboardCreateRespVO"
+  },
+  {
+    "scope": "admin",
+    "module": "dashboard",
+    "functionName": "getDashboardOptions",
+    "commandPath": [
+      "dashboard",
+      "get-options"
+    ],
+    "method": "GET",
+    "endpoint": "/api/apps/:app_id/dashboard/:dashboard_id/options",
+    "pathParams": [
+      {
+        "param": "app_id",
+        "flag": "app-id"
+      },
+      {
+        "param": "dashboard_id",
+        "flag": "dashboard-id"
+      }
+    ],
+    "controller": "Dashboard.FetchOptions",
+    "requestType": null,
+    "queryParams": [],
+    "responseType": "DashboardFetchOptionsRespVO"
+  },
+  {
+    "scope": "admin",
+    "module": "dashboard",
+    "functionName": "updateDashboardOptions",
+    "commandPath": [
+      "dashboard",
+      "update-options"
+    ],
+    "method": "PUT",
+    "endpoint": "/api/apps/:app_id/dashboard/:dashboard_id/options",
+    "pathParams": [
+      {
+        "param": "app_id",
+        "flag": "app-id"
+      },
+      {
+        "param": "dashboard_id",
+        "flag": "dashboard-id"
+      }
+    ],
+    "controller": "Dashboard.UpdateOptions",
+    "requestType": "DashboardUpdateOptionsReqVO",
+    "queryParams": [],
+    "responseType": "DashboardUpdateOptionsRespVO"
+  },
+  {
+    "scope": "admin",
+    "module": "dashboard",
+    "functionName": "updateDashboardLayout",
+    "commandPath": [
+      "dashboard",
+      "update-layout"
+    ],
+    "method": "PUT",
+    "endpoint": "/api/apps/:app_id/dashboard/:dashboard_id/layout",
+    "pathParams": [
+      {
+        "param": "app_id",
+        "flag": "app-id"
+      },
+      {
+        "param": "dashboard_id",
+        "flag": "dashboard-id"
+      }
+    ],
+    "controller": "Dashboard.UpdateLayout",
+    "requestType": "DashboardUpdateLayoutReqVO",
+    "queryParams": [],
+    "responseType": "DashboardUpdateLayoutRespVO"
+  },
+  {
+    "scope": "admin",
+    "module": "dashboard",
+    "functionName": "updateDashboardTitle",
+    "commandPath": [
+      "dashboard",
+      "rename"
+    ],
+    "method": "PUT",
+    "endpoint": "/api/apps/:app_id/dashboard/:dashboard_id/label",
+    "pathParams": [
+      {
+        "param": "app_id",
+        "flag": "app-id"
+      },
+      {
+        "param": "dashboard_id",
+        "flag": "dashboard-id"
+      }
+    ],
+    "controller": "Dashboard.UpdateTitle",
+    "requestType": "DashboardUpdateTitleReqVO",
+    "queryParams": [],
+    "responseType": "DashboardUpdateTitleRespVO"
+  },
   {
     "scope": "admin",
     "module": "table",
@@ -605,6 +747,27 @@ var adminCommands = [
     "queryParams": [],
     "responseType": "AppIngressUpdateRespVO"
   },
+  {
+    "scope": "admin",
+    "module": "access-rule",
+    "functionName": "bulkApplyEntityIngress",
+    "commandPath": [
+      "access-rule",
+      "bulk-apply"
+    ],
+    "method": "POST",
+    "endpoint": "/api/apps/:app_id/access-rules/bulk-apply",
+    "pathParams": [
+      {
+        "param": "app_id",
+        "flag": "app-id"
+      }
+    ],
+    "controller": "App.IngressBulkApply",
+    "requestType": "AppIngressBulkApplyReqVO",
+    "queryParams": [],
+    "responseType": "AppIngressBulkApplyRespVO"
+  },
   {
     "scope": "admin",
     "module": "workflow",
@@ -711,6 +874,188 @@ var adminCommands = [
     "requestType": "EntityWorkflowUpdateReqVO",
     "queryParams": [],
     "responseType": "EntityWorkflowUpdateRespVO"
+  },
+  {
+    "scope": "admin",
+    "module": "widget",
+    "functionName": "widgetsList",
+    "commandPath": [
+      "widget",
+      "list"
+    ],
+    "method": "GET",
+    "endpoint": "/api/apps/:app_id/widgets",
+    "pathParams": [
+      {
+        "param": "app_id",
+        "flag": "app-id"
+      }
+    ],
+    "controller": "App.WidgetsList",
+    "requestType": null,
+    "queryParams": [
+      {
+        "key": "type",
+        "flag": "type",
+        "type": "string",
+        "hasDefault": true
+      },
+      {
+        "key": "dashboard_id",
+        "flag": "dashboard-id",
+        "type": "number",
+        "hasDefault": true
+      },
+      {
+        "key": "ingress_id",
+        "flag": "ingress-id",
+        "type": "number",
+        "hasDefault": true
+      }
+    ],
+    "responseType": "AppWidgetsListRespVO"
+  },
+  {
+    "scope": "admin",
+    "module": "widget",
+    "functionName": "getWidgets",
+    "commandPath": [
+      "widget",
+      "get"
+    ],
+    "method": "GET",
+    "endpoint": "/api/apps/:app_id/widgets/:widgets_id",
+    "pathParams": [
+      {
+        "param": "app_id",
+        "flag": "app-id"
+      },
+      {
+        "param": "widgets_id",
+        "flag": "widget-id"
+      }
+    ],
+    "controller": "App.GetWidgets",
+    "requestType": null,
+    "queryParams": [],
+    "responseType": "AppGetWidgetsRespVO"
+  },
+  {
+    "scope": "admin",
+    "module": "widget",
+    "functionName": "newWidgets",
+    "commandPath": [
+      "widget",
+      "create"
+    ],
+    "method": "POST",
+    "endpoint": "/api/apps/:app_id/widgets",
+    "pathParams": [
+      {
+        "param": "app_id",
+        "flag": "app-id"
+      }
+    ],
+    "controller": "App.NewWidgets",
+    "requestType": "AppNewWidgetsReqVO",
+    "queryParams": [],
+    "responseType": "AppNewWidgetsRespVO"
+  },
+  {
+    "scope": "admin",
+    "module": "widget",
+    "functionName": "updateWidgets",
+    "commandPath": [
+      "widget",
+      "update"
+    ],
+    "method": "PUT",
+    "endpoint": "/api/apps/:app_id/widgets/:widgets_id",
+    "pathParams": [
+      {
+        "param": "app_id",
+        "flag": "app-id"
+      },
+      {
+        "param": "widgets_id",
+        "flag": "widget-id"
+      }
+    ],
+    "controller": "App.UpdateWidgets",
+    "requestType": "AppUpdateWidgetsReqVO",
+    "queryParams": [],
+    "responseType": "AppUpdateWidgetsRespVO"
+  },
+  {
+    "scope": "admin",
+    "module": "widget",
+    "functionName": "updateWidgetsIngressOptions",
+    "commandPath": [
+      "widget",
+      "update-ingress-options"
+    ],
+    "method": "PUT",
+    "endpoint": "/api/apps/:app_id/widgets/:widgets_id/ingress-options",
+    "pathParams": [
+      {
+        "param": "app_id",
+        "flag": "app-id"
+      },
+      {
+        "param": "widgets_id",
+        "flag": "widget-id"
+      }
+    ],
+    "controller": "App.UpdateWidgetsIngressOptions",
+    "requestType": "AppUpdateWidgetsIngressOptionsReqVO",
+    "queryParams": [],
+    "responseType": "AppUpdateWidgetsIngressOptionsRespVO"
+  },
+  {
+    "scope": "admin",
+    "module": "widget",
+    "functionName": "previewWidgetsData",
+    "commandPath": [
+      "widget",
+      "preview-data"
+    ],
+    "method": "POST",
+    "endpoint": "/api/apps/:app_id/widgets-preview",
+    "pathParams": [
+      {
+        "param": "app_id",
+        "flag": "app-id"
+      }
+    ],
+    "controller": "App.PreviewWidgetsData",
+    "requestType": "AppPreviewWidgetsDataReqVO",
+    "queryParams": [],
+    "responseType": "AppPreviewWidgetsDataRespVO"
+  },
+  {
+    "scope": "admin",
+    "module": "widget",
+    "functionName": "deleteWidgets",
+    "commandPath": [
+      "widget",
+      "delete"
+    ],
+    "method": "DELETE",
+    "endpoint": "/api/apps/:app_id/widgets/:widgets_id",
+    "pathParams": [
+      {
+        "param": "app_id",
+        "flag": "app-id"
+      },
+      {
+        "param": "widgets_id",
+        "flag": "widget-id"
+      }
+    ],
+    "controller": "App.DeleteWidgets",
+    "requestType": null,
+    "queryParams": [],
+    "responseType": "boolean"
   }
 ];
 var userCommands = [
@@ -737,6 +1082,56 @@ var userCommands = [
     ],
     "responseType": "GlobalActionEntryRespVO"
   },
+  {
+    "scope": "user",
+    "module": "dashboard",
+    "functionName": "getDashboard",
+    "commandPath": [
+      "dashboard",
+      "get"
+    ],
+    "method": "GET",
+    "endpoint": "/api/dashboard/:app_id/:dashboard_id",
+    "pathParams": [
+      {
+        "param": "app_id",
+        "flag": "app-id"
+      },
+      {
+        "param": "dashboard_id",
+        "flag": "dashboard-id"
+      }
+    ],
+    "controller": "UserAction.DashboardGet",
+    "requestType": null,
+    "queryParams": [],
+    "responseType": "DashboardGetRespVO"
+  },
+  {
+    "scope": "user",
+    "module": "dashboard",
+    "functionName": "getDashboardWidgets",
+    "commandPath": [
+      "dashboard",
+      "widgets"
+    ],
+    "method": "GET",
+    "endpoint": "/api/dashboard/:app_id/:dashboard_id/widgets",
+    "pathParams": [
+      {
+        "param": "app_id",
+        "flag": "app-id"
+      },
+      {
+        "param": "dashboard_id",
+        "flag": "dashboard-id"
+      }
+    ],
+    "controller": "UserAction.DashboardWidgets",
+    "requestType": null,
+    "queryParams": [],
+    "responseType": "DashboardWidgets[]"
+  },
   {
     "scope": "user",
     "module": "table",
@@ -1150,13 +1545,34 @@ var userCommands = [
       "upload",
       "check-mobile"
     ],
-    "method": "POST",
-    "endpoint": "/api/upload/mobile-upload/check",
-    "pathParams": [],
-    "controller": "UserAction.MobileUploadCheck",
-    "requestType": "MobileUploadCheckReqVO",
+    "method": "POST",
+    "endpoint": "/api/upload/mobile-upload/check",
+    "pathParams": [],
+    "controller": "UserAction.MobileUploadCheck",
+    "requestType": "MobileUploadCheckReqVO",
+    "queryParams": [],
+    "responseType": "MobileUploadCheckRespVO"
+  },
+  {
+    "scope": "user",
+    "module": "widget",
+    "functionName": "fetchWidgetsData",
+    "commandPath": [
+      "widget",
+      "data"
+    ],
+    "method": "POST",
+    "endpoint": "/api/apps/:app_id/widgets-data",
+    "pathParams": [
+      {
+        "param": "app_id",
+        "flag": "app-id"
+      }
+    ],
+    "controller": "UserAction.FetchWidgetsData",
+    "requestType": "FetchWidgetsDataReqVO",
     "queryParams": [],
-    "responseType": "MobileUploadCheckRespVO"
+    "responseType": "FetchWidgetsDataRespVO"
   },
   {
     "scope": "user",
@@ -16092,11 +16508,30 @@ var PermitFieldPermitSchema = external_exports.lazy(() => external_exports.objec
 var PermitPolicySchema = external_exports.lazy(() => external_exports.object({ "actions": external_exports.array(external_exports.string()).optional(), "all_fields_read": external_exports.boolean().optional(), "all_fields_write": external_exports.boolean().optional(), "condition": PermitConditionSetSchema.optional(), "description": external_exports.string().optional(), "fields": external_exports.array(PermitFieldPermitSchema).optional(), "id": external_exports.string().optional(), "key": external_exports.string().optional(), "name": external_exports.string().optional() }).strict());
 var PermitUserScopeSchema = external_exports.lazy(() => external_exports.object({ "data": external_exports.object({ "name": external_exports.string().optional() }).strict().optional(), "id": external_exports.number().optional(), "type": external_exports.string().optional() }).strict());
 var EntityIngressOptionsSchema = external_exports.lazy(() => external_exports.object({ "i18n_name": I18NTextSchema.optional(), "list_options": PermitEntityListOptionsSchema.optional(), "policy": PermitPolicySchema.optional(), "user_scope": external_exports.array(PermitUserScopeSchema).optional() }).strict());
+var AppIngressBulkApplyItemVOSchema = external_exports.lazy(() => external_exports.object({ "enabled": external_exports.boolean().optional(), "name": external_exports.string().optional(), "options": EntityIngressOptionsSchema.optional(), "rule_id": external_exports.number().optional(), "table_id": external_exports.number().optional(), "type": external_exports.string().optional() }).strict());
+var AppIngressBulkApplyReqVOSchema = external_exports.lazy(() => external_exports.object({ "dry_run": external_exports.boolean().optional(), "items": external_exports.array(AppIngressBulkApplyItemVOSchema).optional(), "mode": external_exports.string().optional() }).strict());
 var AppIngressCreateReqVOSchema = external_exports.lazy(() => external_exports.object({ "enabled": external_exports.boolean().optional(), "entity_id": external_exports.number().optional(), "icon_name": external_exports.string().optional(), "name": external_exports.string().optional(), "options": EntityIngressOptionsSchema.optional(), "type": external_exports.string().optional(), "url": external_exports.string().optional() }).strict());
 var AppIngressUpdateReqVOSchema = external_exports.lazy(() => external_exports.object({ "enabled": external_exports.boolean().optional(), "name": external_exports.string().optional(), "options": EntityIngressOptionsSchema.optional(), "update": external_exports.array(external_exports.string()).optional() }).strict());
+var WidgetsTypeCodeSchema = external_exports.lazy(() => external_exports.union([external_exports.literal(1), external_exports.literal(2)]));
+var WidgetsTypeSchema = external_exports.lazy(() => external_exports.object({ "dashboard_id": external_exports.number().optional(), "ingress_id": external_exports.number().optional(), "type": WidgetsTypeCodeSchema.optional() }).strict());
+var AppNewWidgetsReqVOSchema = external_exports.lazy(() => external_exports.object({ "options": WidgetsTypeSchema.optional(), "type": external_exports.string().optional() }).strict());
+var CubeDimensionSchema = external_exports.lazy(() => external_exports.object({ "FieldID": external_exports.number().optional(), "IsField": external_exports.boolean().optional(), "Label": external_exports.string().optional(), "Name": external_exports.string().optional(), "Options": external_exports.record(external_exports.string(), external_exports.any()).optional(), "OrderBy": external_exports.string().optional(), "PropName": external_exports.string().optional() }).strict());
+var CubeMeasureAggregateSchema = external_exports.lazy(() => external_exports.union([external_exports.literal("sum"), external_exports.literal("avg"), external_exports.literal("max"), external_exports.literal("min"), external_exports.literal("count"), external_exports.literal("distinct_count")]));
+var CubeMeasureSchema = external_exports.lazy(() => external_exports.object({ "Aggregate": CubeMeasureAggregateSchema.optional(), "FieldID": external_exports.number().optional(), "Label": external_exports.string().optional(), "Name": external_exports.string().optional(), "Options": external_exports.record(external_exports.string(), external_exports.any()).optional(), "OrderBy": external_exports.string().optional() }).strict());
+var AppPreviewWidgetsDataReqVOSchema = external_exports.lazy(() => external_exports.object({ "conditions": PermitConditionSetSchema.optional(), "dataSource": external_exports.number().optional(), "dataSourceType": external_exports.string().optional(), "dimensions": external_exports.array(CubeDimensionSchema).optional(), "measures": external_exports.array(CubeMeasureSchema).optional() }).strict());
 var GormDeletedAtSchema = external_exports.lazy(() => external_exports.object({ "Time": external_exports.string().optional(), "Valid": external_exports.boolean().optional() }).strict());
 var AppOptionsSchema = external_exports.lazy(() => external_exports.object({ "use_home_dashboard": external_exports.boolean().optional() }).strict());
 var AppUpdateAppReqVOSchema = external_exports.lazy(() => external_exports.object({ "CreatedAt": external_exports.string().optional(), "DeletedAt": GormDeletedAtSchema.optional(), "ID": external_exports.number().optional(), "Options": AppOptionsSchema.optional(), "UpdatedAt": external_exports.string().optional(), "changed": external_exports.array(external_exports.string()).optional(), "has_workflow": external_exports.boolean().optional(), "icon_color": external_exports.string().optional(), "icon_name": external_exports.string().optional(), "name": external_exports.string().optional(), "tenant_id": external_exports.number().optional(), "use_home_dashboard": external_exports.boolean().optional() }).strict());
+var WidgetsListViewOptionsSchema = external_exports.lazy(() => external_exports.object({ "cond_follow": external_exports.boolean().optional(), "cond_follow_cols": external_exports.array(external_exports.string()).optional(), "cond_follow_tab": external_exports.boolean().optional(), "link": external_exports.record(external_exports.string(), external_exports.any()).optional() }).strict());
+var AppUpdateWidgetsIngressOptionsReqVOSchema = external_exports.lazy(() => external_exports.object({ "options": WidgetsListViewOptionsSchema.optional() }).strict());
+var ChartOptionSchema = external_exports.lazy(() => external_exports.object({ "conditions": PermitConditionSetSchema.optional(), "dimensions": external_exports.array(CubeDimensionSchema).optional(), "entity_id": external_exports.number().optional(), "measures": external_exports.array(CubeMeasureSchema).optional(), "options": external_exports.record(external_exports.string(), external_exports.any()).optional(), "type": external_exports.string().optional() }).strict());
+var WidgetsOptionSchema = external_exports.lazy(() => external_exports.object({ "charts": ChartOptionSchema.optional(), "ingress": WidgetsListViewOptionsSchema.optional(), "render": external_exports.record(external_exports.string(), external_exports.any()).optional() }).strict());
+var AppUpdateWidgetsReqVOSchema = external_exports.lazy(() => external_exports.object({ "entity_id": external_exports.number().optional(), "options": WidgetsOptionSchema.optional() }).strict());
+var DashboardCreateReqVOSchema = external_exports.lazy(() => external_exports.object({ "name": external_exports.string().optional() }).strict());
+var LayoutPositionSchema = external_exports.lazy(() => external_exports.object({ "h": external_exports.number().optional(), "id": external_exports.number().optional(), "w": external_exports.number().optional(), "x": external_exports.number().optional(), "y": external_exports.number().optional() }).strict());
+var DashboardUpdateLayoutReqVOSchema = external_exports.lazy(() => external_exports.array(LayoutPositionSchema));
+var DashboardUpdateOptionsReqVOSchema = external_exports.lazy(() => external_exports.object({ "changed": external_exports.array(external_exports.string()).optional(), "i18n_name": external_exports.record(external_exports.string(), external_exports.string()).optional(), "theme": external_exports.object({ "gutter": external_exports.number().optional(), "has_shadow": external_exports.boolean().optional(), "round_corners": external_exports.number().optional() }).strict().optional(), "users": external_exports.array(PermitUserScopeSchema).optional() }).strict());
+var DashboardUpdateTitleReqVOSchema = external_exports.lazy(() => external_exports.object({ "name": external_exports.string().optional() }).strict());
 var EntityBulkUpdateActionVOSchema = external_exports.lazy(() => external_exports.object({ "number_add": external_exports.number().optional(), "number_mul": external_exports.number().optional(), "number_sub": external_exports.number().optional(), "text_append": external_exports.string().optional(), "text_prepend": external_exports.string().optional(), "text_replace": external_exports.string().optional(), "text_search": external_exports.string().optional(), "type": external_exports.string().optional(), "value": external_exports.any().optional() }).strict());
 var EntityBulkUpdateFieldVOSchema = external_exports.lazy(() => external_exports.object({ "action": EntityBulkUpdateActionVOSchema.optional(), "id": external_exports.number().optional() }).strict());
 var EntityBulkUpdateReqVOSchema = external_exports.lazy(() => external_exports.object({ "fields": external_exports.array(EntityBulkUpdateFieldVOSchema).optional(), "policy_id": external_exports.string().optional() }).strict());
@@ -16145,6 +16580,8 @@ var WorkflowSLAConfigSchema = external_exports.lazy(() => external_exports.objec
 var WorkflowOptionsSchema = external_exports.lazy(() => external_exports.object({ "allow_urge": external_exports.boolean().optional(), "allow_view_diagram": external_exports.boolean().optional(), "auto_approve_rule": WorkflowAutoApproveRuleSchema.optional(), "retract_rule": WorkflowRetractRuleSchema.optional(), "sla": external_exports.array(WorkflowSLAConfigSchema).optional() }).strict());
 var EntityWorkflowDeployReqVOSchema = external_exports.lazy(() => external_exports.object({ "diagram": WorkflowConfigDiagramSchema.optional(), "id": external_exports.number().optional(), "options": WorkflowOptionsSchema.optional() }).strict());
 var EntityWorkflowUpdateReqVOSchema = external_exports.lazy(() => external_exports.object({ "diagram": WorkflowConfigDiagramSchema.optional(), "id": external_exports.number().optional(), "options": WorkflowOptionsSchema.optional() }).strict());
+var EntityUtilsQueryOrderSchema = external_exports.lazy(() => external_exports.object({ "column": external_exports.string().optional(), "order": external_exports.string().optional() }).strict());
+var FetchWidgetsDataReqVOSchema = external_exports.lazy(() => external_exports.object({ "dashboard_id": external_exports.number().optional(), "ingress_hash_id": external_exports.string().optional(), "ingress_id": external_exports.number().optional(), "querys": external_exports.object({ "search": external_exports.record(external_exports.string(), external_exports.any()).optional(), "sorts": external_exports.array(EntityUtilsQueryOrderSchema).optional() }).strict().optional(), "type": WidgetsTypeCodeSchema.optional() }).strict());
 var GetUploadTokenReqVOSchema = external_exports.lazy(() => external_exports.object({ "global": external_exports.boolean().optional() }).strict());
 var InsertReqVOSchema = external_exports.lazy(() => external_exports.object({ "fields": external_exports.record(external_exports.string(), external_exports.any()).optional(), "policy_id": external_exports.string().optional() }).strict());
 var MobileUploadCheckReqVOSchema = external_exports.lazy(() => external_exports.object({ "id": external_exports.number().optional(), "ignored": external_exports.record(external_exports.string(), external_exports.boolean()).optional(), "secret": external_exports.string().optional() }).strict());
@@ -16159,9 +16596,18 @@ var UserProfileUpdateReqVOSchema = external_exports.lazy(() => external_exports.
 var bodySchemas = {
   "AppCreateByTenantsReqVO": AppCreateByTenantsReqVOSchema,
   "AppCreateEntityReqVO": AppCreateEntityReqVOSchema,
+  "AppIngressBulkApplyReqVO": AppIngressBulkApplyReqVOSchema,
   "AppIngressCreateReqVO": AppIngressCreateReqVOSchema,
   "AppIngressUpdateReqVO": AppIngressUpdateReqVOSchema,
+  "AppNewWidgetsReqVO": AppNewWidgetsReqVOSchema,
+  "AppPreviewWidgetsDataReqVO": AppPreviewWidgetsDataReqVOSchema,
   "AppUpdateAppReqVO": AppUpdateAppReqVOSchema,
+  "AppUpdateWidgetsIngressOptionsReqVO": AppUpdateWidgetsIngressOptionsReqVOSchema,
+  "AppUpdateWidgetsReqVO": AppUpdateWidgetsReqVOSchema,
+  "DashboardCreateReqVO": DashboardCreateReqVOSchema,
+  "DashboardUpdateLayoutReqVO": DashboardUpdateLayoutReqVOSchema,
+  "DashboardUpdateOptionsReqVO": DashboardUpdateOptionsReqVOSchema,
+  "DashboardUpdateTitleReqVO": DashboardUpdateTitleReqVOSchema,
   "EntityBulkUpdateReqVO": EntityBulkUpdateReqVOSchema,
   "EntityDoActionReqVO": EntityDoActionReqVOSchema,
   "EntityQueryRelationReqVO": EntityQueryRelationReqVOSchema,
@@ -16174,6 +16620,7 @@ var bodySchemas = {
   "EntityWorkflowApproveUsersReqVO": EntityWorkflowApproveUsersReqVOSchema,
   "EntityWorkflowDeployReqVO": EntityWorkflowDeployReqVOSchema,
   "EntityWorkflowUpdateReqVO": EntityWorkflowUpdateReqVOSchema,
+  "FetchWidgetsDataReqVO": FetchWidgetsDataReqVOSchema,
   "GetUploadTokenReqVO": GetUploadTokenReqVOSchema,
   "InsertReqVO": InsertReqVOSchema,
   "MobileUploadCheckReqVO": MobileUploadCheckReqVOSchema,
@@ -16193,6 +16640,10 @@ var typeIndex = {
     "file": "types/app.ts",
     "dependencies": []
   },
+  "AppIngressBulkApplyReqVO": {
+    "file": "types/ingress.ts",
+    "dependencies": []
+  },
   "AppIngressCreateReqVO": {
     "file": "types/ingress.ts",
     "dependencies": []
@@ -16201,10 +16652,47 @@ var typeIndex = {
     "file": "types/ingress.ts",
     "dependencies": []
   },
+  "AppNewWidgetsReqVO": {
+    "file": "types/widgets.ts",
+    "dependencies": []
+  },
+  "AppPreviewWidgetsDataReqVO": {
+    "file": "types/widgets.ts",
+    "dependencies": []
+  },
   "AppUpdateAppReqVO": {
     "file": "types/app.ts",
     "dependencies": []
   },
+  "AppUpdateWidgetsIngressOptionsReqVO": {
+    "file": "types/widgets.ts",
+    "dependencies": []
+  },
+  "AppUpdateWidgetsReqVO": {
+    "file": "types/widgets.ts",
+    "dependencies": []
+  },
+  "DashboardCreateReqVO": {
+    "file": "types/dashboard.ts",
+    "dependencies": []
+  },
+  "DashboardUpdateLayoutReqVO": {
+    "file": "types/dashboard.ts",
+    "dependencies": [
+      {
+        "symbol": "LayoutPosition",
+        "file": "types/dashboard.ts"
+      }
+    ]
+  },
+  "DashboardUpdateOptionsReqVO": {
+    "file": "types/dashboard.ts",
+    "dependencies": []
+  },
+  "DashboardUpdateTitleReqVO": {
+    "file": "types/dashboard.ts",
+    "dependencies": []
+  },
   "EntityBulkUpdateReqVO": {
     "file": "types/user-action.ts",
     "dependencies": []
@@ -16214,7 +16702,7 @@ var typeIndex = {
     "dependencies": []
   },
   "EntityQueryRelationReqVO": {
-    "file": "types/user-action.ts",
+    "file": "types/common.ts",
     "dependencies": []
   },
   "EntityQueryReqVO": {
@@ -16253,6 +16741,10 @@ var typeIndex = {
     "file": "types/workflow.ts",
     "dependencies": []
   },
+  "FetchWidgetsDataReqVO": {
+    "file": "types/user-action.ts",
+    "dependencies": []
+  },
   "GetUploadTokenReqVO": {
     "file": "types/user-action.ts",
     "dependencies": []
@@ -17034,11 +17526,31 @@ var conditionDocHint = {
   title: "Condition",
   file: "docs/runtime-reference/condition.md"
 };
+var dashboardDocHint = {
+  title: "Dashboard",
+  file: "docs/runtime-reference/dashboard.md"
+};
+var widgetsDocHint = {
+  title: "Widgets",
+  file: "docs/runtime-reference/widgets.md"
+};
 var docHintIndex = {
   AppCreateByTenantsReqVO: [
     { title: "Table lifecycle", file: "docs/runtime-reference/table-lifecycle.md" },
     examplesIndexDocHint
   ],
+  AppNewWidgetsReqVO: [
+    widgetsDocHint
+  ],
+  AppPreviewWidgetsDataReqVO: [
+    widgetsDocHint
+  ],
+  AppUpdateWidgetsIngressOptionsReqVO: [
+    widgetsDocHint
+  ],
+  AppUpdateWidgetsReqVO: [
+    widgetsDocHint
+  ],
   AppCreateEntityReqVO: [
     { title: "Table lifecycle", file: "docs/runtime-reference/table-lifecycle.md" },
     { title: "Table schema cheatsheet", file: "docs/runtime-reference/entity-schema.md" },
@@ -17053,6 +17565,23 @@ var docHintIndex = {
     { title: "Access rule", file: "docs/runtime-reference/access-rule.md" },
     examplesIndexDocHint
   ],
+  AppIngressBulkApplyReqVO: [
+    { title: "Access rule", file: "docs/runtime-reference/access-rule.md" },
+    examplesIndexDocHint
+  ],
+  DashboardCreateReqVO: [
+    dashboardDocHint
+  ],
+  DashboardUpdateLayoutReqVO: [
+    dashboardDocHint,
+    widgetsDocHint
+  ],
+  DashboardUpdateOptionsReqVO: [
+    dashboardDocHint
+  ],
+  DashboardUpdateTitleReqVO: [
+    dashboardDocHint
+  ],
   EntitySaveReqVO: [
     { title: "Table schema cheatsheet", file: "docs/runtime-reference/entity-schema.md" },
     { title: "Field type index", file: "docs/runtime-reference/entity-schema/README.md" },
@@ -17092,6 +17621,9 @@ var docHintIndex = {
     { title: "Search and bulk actions", file: "docs/runtime-reference/search-and-bulk-actions.md" },
     examplesIndexDocHint
   ],
+  FetchWidgetsDataReqVO: [
+    widgetsDocHint
+  ],
   "EntityInvokeBatchOperatorReqVO & InvokeRequestVO": [
     selectionDocHint,
     conditionDocHint,
@@ -17143,6 +17675,21 @@ var commandDocHintIndex = {
     { title: "Table lifecycle", file: "docs/runtime-reference/table-lifecycle.md" },
     examplesIndexDocHint
   ],
+  "admin.dashboard.getDashboardList": [
+    dashboardDocHint
+  ],
+  "admin.dashboard.getDashboardOptions": [
+    dashboardDocHint
+  ],
+  "admin.widget.widgetsList": [
+    widgetsDocHint
+  ],
+  "admin.widget.getWidgets": [
+    widgetsDocHint
+  ],
+  "admin.widget.deleteWidgets": [
+    widgetsDocHint
+  ],
   "admin.app.createEntity": [
     { title: "Table lifecycle", file: "docs/runtime-reference/table-lifecycle.md" },
     examplesIndexDocHint
@@ -17166,6 +17713,10 @@ var commandDocHintIndex = {
     { title: "Access rule", file: "docs/runtime-reference/access-rule.md" },
     examplesIndexDocHint
   ],
+  "admin.access-rule.bulkApplyEntityIngress": [
+    { title: "Access rule", file: "docs/runtime-reference/access-rule.md" },
+    examplesIndexDocHint
+  ],
   "user.row.insertEntity": [
     { title: "Row CRUD", file: "docs/runtime-reference/row-crud.md" },
     { title: "Uploads", file: "docs/runtime-reference/uploads.md" },
@@ -17205,6 +17756,13 @@ var commandDocHintIndex = {
     conditionDocHint,
     { title: "Search and bulk actions", file: "docs/runtime-reference/search-and-bulk-actions.md" },
     examplesIndexDocHint
+  ],
+  "user.dashboard.getDashboard": [
+    dashboardDocHint
+  ],
+  "user.dashboard.getDashboardWidgets": [
+    dashboardDocHint,
+    widgetsDocHint
   ]
 };
 function getCommandDocHints(operation, env = process.env) {
@@ -17454,6 +18012,161 @@ var helpExamplesIndex = {
       }
     ]
   },
+  "admin.access-rule.bulk-apply": {
+    "command": [
+      "access-rule",
+      "bulk-apply"
+    ],
+    "examples": [
+      {
+        "title": "upsert permission matrix by rule name in one transaction",
+        "body": {
+          "mode": "upsert_by_name",
+          "items": [
+            {
+              "table_id": 2188893443,
+              "name": "Customer archive - sales owns rows",
+              "enabled": true,
+              "type": "form",
+              "options": {
+                "user_scope": [
+                  {
+                    "type": "department",
+                    "id": 2188881201
+                  }
+                ],
+                "policy": {
+                  "key": "custom",
+                  "actions": [
+                    "view",
+                    "add",
+                    "edit"
+                  ],
+                  "all_fields_read": true,
+                  "all_fields_write": true,
+                  "condition": {
+                    "mode": "and",
+                    "conditions": [
+                      {
+                        "column": "creator",
+                        "operator": "$eq",
+                        "value": "[[current_user]]",
+                        "value_from": 0,
+                        "value_relation": ""
+                      }
+                    ]
+                  }
+                },
+                "list_options": {}
+              }
+            },
+            {
+              "table_id": 2188893444,
+              "name": "Lead review - manager queue",
+              "enabled": true,
+              "type": "form",
+              "options": {
+                "user_scope": [
+                  {
+                    "type": "actor",
+                    "id": 2188883301
+                  }
+                ],
+                "policy": {
+                  "key": "custom",
+                  "actions": [
+                    "view",
+                    "edit"
+                  ],
+                  "all_fields_read": true,
+                  "all_fields_write": true,
+                  "condition": {
+                    "mode": "and",
+                    "conditions": [
+                      {
+                        "column": ":1004",
+                        "operator": "$eq",
+                        "value": "pending",
+                        "value_from": 0,
+                        "value_relation": ""
+                      },
+                      {
+                        "column": "",
+                        "operator": "",
+                        "value": null,
+                        "value_from": 0,
+                        "value_relation": "",
+                        "subset": {
+                          "mode": "or",
+                          "conditions": [
+                            {
+                              "column": "creator",
+                              "operator": "$eq",
+                              "value": "[[current_user]]",
+                              "value_from": 0,
+                              "value_relation": ""
+                            },
+                            {
+                              "column": ":1005",
+                              "operator": "$eq",
+                              "value": "high",
+                              "value_from": 0,
+                              "value_relation": ""
+                            }
+                          ]
+                        }
+                      }
+                    ]
+                  }
+                },
+                "list_options": {}
+              }
+            }
+          ]
+        },
+        "notes": [
+          "mode upsert_by_name is for idempotent setup; rule names must be unique within each table",
+          "department, actor, and specific user scopes all use options.user_scope",
+          "row-owner isolation uses [[current_user]] in policy.condition"
+        ]
+      },
+      {
+        "title": "preview updates for existing rule ids",
+        "body": {
+          "mode": "update_existing",
+          "dry_run": true,
+          "items": [
+            {
+              "table_id": 2188893443,
+              "rule_id": 2188893557,
+              "enabled": true,
+              "options": {
+                "user_scope": [
+                  {
+                    "type": "user",
+                    "id": 2188889901
+                  }
+                ],
+                "policy": {
+                  "key": "custom",
+                  "actions": [
+                    "view"
+                  ],
+                  "all_fields_read": true,
+                  "all_fields_write": false
+                },
+                "list_options": {}
+              }
+            }
+          ]
+        },
+        "notes": [
+          "dry_run true returns the planned operations without writing",
+          "update_existing requires rule_id on every item"
+        ]
+      }
+    ]
+  },
   "admin.access-rule.create": {
     "command": [
       "access-rule",
@@ -17602,6 +18315,128 @@ var helpExamplesIndex = {
       }
     ]
   },
+  "admin.dashboard.update-layout": {
+    "command": [
+      "dashboard",
+      "update-layout"
+    ],
+    "examples": [
+      {
+        "title": "place one dashboard widget in the top-left area",
+        "body": [
+          {
+            "id": 2188892001,
+            "x": 0,
+            "y": 0,
+            "w": 12,
+            "h": 6
+          }
+        ],
+        "notes": [
+          "the request body is a top-level array",
+          'do not wrap the array as {"layout":[...]}'
+        ]
+      }
+    ]
+  },
+  "admin.widget.create": {
+    "command": [
+      "widget",
+      "create"
+    ],
+    "examples": [
+      {
+        "title": "create a dashboard chart widget",
+        "body": {
+          "type": "chart",
+          "options": {
+            "dashboard_id": 2188892001
+          }
+        },
+        "notes": [
+          "do not set options.type by hand",
+          "dashboard_id selects a dashboard widget",
+          "use widget update next to save chart options"
+        ]
+      },
+      {
+        "title": "create an ingress list widget",
+        "body": {
+          "type": "list",
+          "options": {
+            "ingress_id": 2188893001
+          }
+        },
+        "notes": [
+          "ingress_id selects an ingress widget",
+          "do not place ingress widgets with dashboard update-layout"
+        ]
+      }
+    ]
+  },
+  "admin.widget.preview-data": {
+    "command": [
+      "widget",
+      "preview-data"
+    ],
+    "examples": [
+      {
+        "title": "preview dashboard chart data from a table",
+        "body": {
+          "dataSource": 2188891001,
+          "dataSourceType": "entity",
+          "dimensions": [
+            {
+              "IsField": true,
+              "FieldID": 1004,
+              "Name": "Source"
+            }
+          ],
+          "measures": [
+            {
+              "FieldID": 1005,
+              "Aggregate": "sum",
+              "Name": "Total Amount"
+            }
+          ]
+        },
+        "notes": [
+          "preview-data does not accept --widget-id",
+          "do not send widget_id or id in the request body",
+          "copy dimensions and measures from the chart query you want to preview"
+        ]
+      },
+      {
+        "title": "preview count and distinct_count in one grouped chart",
+        "body": {
+          "dataSource": 2188891001,
+          "dataSourceType": "entity",
+          "dimensions": [
+            {
+              "IsField": true,
+              "FieldID": 1004,
+              "Name": "Source"
+            }
+          ],
+          "measures": [
+            {
+              "Aggregate": "count",
+              "Name": "Lead Count"
+            },
+            {
+              "FieldID": 1002,
+              "Aggregate": "distinct_count",
+              "Name": "Distinct Customers"
+            }
+          ]
+        },
+        "notes": [
+          "supported Aggregate values are sum, avg, max, min, count, and distinct_count",
+          "unsupported aggregate names fail local body validation before the request is sent"
+        ]
+      }
+    ]
+  },
   "user.row.bulk-update": {
     "command": [
       "row",
@@ -17699,55 +18534,358 @@ var helpExamplesIndex = {
   }
 };
 
-// src/runtime/help_examples.ts
-function binaryForScope(scope) {
-  return scope === "admin" ? "arcubase-admin" : "arcubase";
+// src/runtime/help_examples.ts
+function binaryForScope(scope) {
+  return scope === "admin" ? "arcubase-admin" : "arcubase";
+}
+function getFixedValue(value) {
+  if (!("fixedValue" in value)) {
+    return void 0;
+  }
+  const fixedValue = value.fixedValue;
+  return typeof fixedValue === "string" ? fixedValue : void 0;
+}
+function pathFlagPlaceholders(command) {
+  const parts = command.pathParams.filter((item) => !getFixedValue(item)).map((item) => `--${item.flag} <${item.flag.replace(/-/g, "_")}>`);
+  return parts.length > 0 ? `${parts.join(" ")} ` : "";
+}
+function helpExampleKey(scope, command) {
+  return `${scope}.${command.commandPath.join(".")}`;
+}
+function getCommandHelpExamples(scope, command) {
+  return helpExamplesIndex[helpExampleKey(scope, command)]?.examples ?? [];
+}
+function renderCommandHelpExamples(scope, command) {
+  const binary = binaryForScope(scope);
+  const examples = getCommandHelpExamples(scope, command);
+  const header = `${binary} ${command.commandPath.join(" ")} --help-examples`;
+  if (examples.length === 0) {
+    return [
+      header,
+      "",
+      "No dedicated examples for this final command yet.",
+      `Use ${binary} ${command.commandPath.join(" ")} --help for flags, docs, and type paths.`
+    ].join("\n");
+  }
+  return [
+    header,
+    "",
+    ...examples.flatMap((example) => [
+      `${example.title}:`,
+      ...example.body === void 0 ? [] : [`  ${binary} ${command.commandPath.join(" ")} ${pathFlagPlaceholders(command)}--body-json '${JSON.stringify(example.body)}'`.replace(/\s+/g, " ").trim()],
+      ...(example.notes ?? []).map((note) => `  - ${note}`),
+      ""
+    ])
+  ].join("\n").trimEnd();
+}
+
+// src/runtime/dev_sdk_gen.ts
+function isRecord3(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function unwrapData(payload) {
+  return isRecord3(payload) && "data" in payload ? payload.data : payload;
+}
+function toPascalCase(value) {
+  const words = value.replace(/([a-z0-9])([A-Z])/g, "$1 $2").split(/[^A-Za-z0-9]+/).filter(Boolean);
+  if (words.length === 0) return "Entity";
+  return words.map((word) => `${word[0].toUpperCase()}${word.slice(1)}`).join("");
+}
+function toCamelCase(value) {
+  const pascal = toPascalCase(value);
+  return `${pascal[0].toLowerCase()}${pascal.slice(1)}`;
+}
+function sanitizeEntityKey(entity) {
+  const fallback = entity.sdkName || `entity_${entity.id}`;
+  return toCamelCase(fallback) === "entity" ? `entity${entity.id}` : toCamelCase(fallback);
+}
+function normalizeFieldType(type) {
+  switch (type) {
+    case "number":
+      return "number";
+    case "boolean":
+      return "boolean";
+    case "select":
+    case "radio":
+    case "checkbox":
+    case "status":
+      return "number | string";
+    case "file":
+    case "image":
+    case "member":
+    case "members":
+    case "department":
+    case "departments":
+    case "linkto":
+    case "relation":
+    case "relationfield":
+    case "subform":
+      return "unknown";
+    default:
+      return "string";
+  }
+}
+function normalizeEntities(payload) {
+  const root = unwrapData(payload);
+  if (!isRecord3(root)) {
+    throw new CLIError("SDK_GEN_INVALID_SCHEMA", "sdk-gen expected an app detail object", 2);
+  }
+  const appId = typeof root.id === "number" ? root.id : typeof root.app_id === "number" ? root.app_id : void 0;
+  if (!appId) {
+    throw new CLIError("SDK_GEN_APP_ID_REQUIRED", "sdk-gen expected app id in app detail response", 2);
+  }
+  const sourceEntities = Array.isArray(root.entities) ? root.entities : Array.isArray(root.tables) ? root.tables : Array.isArray(root.entitys) ? root.entitys : [];
+  const entities = sourceEntities.filter((item) => isRecord3(item)).filter((item) => typeof item.id === "number" && typeof item.name === "string").map((item) => {
+    const fields = Array.isArray(item.fields) ? item.fields.filter((field) => isRecord3(field)).filter((field) => typeof field.id === "number" && typeof field.label === "string" && typeof field.type === "string").map((field) => ({
+      id: field.id,
+      label: field.label,
+      key: typeof field.key === "string" ? field.key.trim() : "",
+      type: field.type,
+      required: field.required === true,
+      options: isRecord3(field.options) ? field.options : void 0
+    })) : [];
+    const entity = {
+      appId,
+      id: item.id,
+      name: item.name,
+      sdkName: typeof item.key === "string" && item.key.trim() ? item.key.trim() : "",
+      fields
+    };
+    entity.sdkName = sanitizeEntityKey(entity);
+    return entity;
+  });
+  if (entities.length === 0) {
+    throw new CLIError("SDK_GEN_NO_ENTITIES", "sdk-gen could not find entities in app detail response", 2);
+  }
+  validateEntities(entities);
+  return entities;
+}
+function validateEntities(entities) {
+  const entityKeys = /* @__PURE__ */ new Set();
+  for (const entity of entities) {
+    if (entityKeys.has(entity.sdkName)) {
+      throw new CLIError("SDK_GEN_DUPLICATE_ENTITY_KEY", `duplicate generated entity key: ${entity.sdkName}`, 2);
+    }
+    entityKeys.add(entity.sdkName);
+    const fieldKeys = /* @__PURE__ */ new Set();
+    for (const field of entity.fields) {
+      if (!field.key) {
+        throw new CLIError("SDK_GEN_FIELD_KEY_REQUIRED", `field.key is required for ${entity.name}.${field.label} (${field.id})`, 2);
+      }
+      if (!/^[A-Za-z][A-Za-z0-9_]*$/.test(field.key)) {
+        throw new CLIError("SDK_GEN_INVALID_FIELD_KEY", `field.key must be a TypeScript identifier: ${entity.name}.${field.key}`, 2);
+      }
+      if (fieldKeys.has(field.key)) {
+        throw new CLIError("SDK_GEN_DUPLICATE_FIELD_KEY", `duplicate field.key in ${entity.name}: ${field.key}`, 2);
+      }
+      fieldKeys.add(field.key);
+    }
+  }
+}
+function emitRuntime() {
+  return `export type ArcubaseSdkConfig = {
+  baseURL: string
+  accessToken?: string
+  refreshToken?: string
+}
+
+export type ArcubaseRow<TFields> = {
+  id: number
+  title?: string
+  fields: TFields
+  raw: Record<string, any>
+}
+
+export type ArcubaseRuntime = {
+  config: ArcubaseSdkConfig
+  request<T>(method: string, endpoint: string, body?: unknown): Promise<T>
+}
+
+type ArcubaseEnvelope<T> = {
+  data?: T
+  error?: { message?: string; key?: string; type?: string }
+}
+
+export function createRuntime(config: ArcubaseSdkConfig): ArcubaseRuntime {
+  let accessToken = config.accessToken ?? ''
+  let refreshToken = config.refreshToken ?? ''
+
+  async function request<T>(method: string, endpoint: string, body?: unknown): Promise<T> {
+    const baseURL = config.baseURL.endsWith('/') ? config.baseURL : \`\${config.baseURL}/\`
+    const response = await fetch(new URL(endpoint.replace(/^\\/+/, ''), baseURL).toString(), {
+      method,
+      headers: {
+        'Content-Type': 'application/json',
+        ...(accessToken ? { Authorization: \`Bearer \${accessToken}\` } : {}),
+      },
+      body: body === undefined ? undefined : JSON.stringify(body),
+    })
+    const payload = await response.json().catch(() => null) as ArcubaseEnvelope<T> | null
+    if (!response.ok || payload?.error) {
+      throw new Error(payload?.error?.message ?? \`Arcubase request failed: \${response.status}\`)
+    }
+    return payload?.data as T
+  }
+
+  return {
+    config: { ...config, accessToken, refreshToken },
+    request,
+  }
+}
+`;
+}
+function emitSchema(entities) {
+  const schema = {
+    entities: Object.fromEntries(entities.map((entity) => [
+      entity.sdkName,
+      {
+        entityId: entity.id,
+        name: entity.name,
+        fields: Object.fromEntries(entity.fields.map((field) => [
+          field.key,
+          {
+            fieldId: field.id,
+            label: field.label,
+            type: field.type,
+            required: field.required
+          }
+        ]))
+      }
+    ]))
+  };
+  return `export const arcubaseSchema = ${JSON.stringify(schema, null, 2)} as const
+
+export type ArcubaseEntityKey = keyof typeof arcubaseSchema.entities
+`;
+}
+function emitEntity(entity) {
+  const typeName = toPascalCase(entity.sdkName);
+  const fieldLines = entity.fields.map((field) => {
+    const optional2 = field.required ? "" : "?";
+    return `  ${field.key}${optional2}: ${normalizeFieldType(field.type)}`;
+  });
+  const fieldMapLines = entity.fields.map((field) => `  ${field.key}: ${field.id},`);
+  return `import type { ArcubaseRuntime, ArcubaseRow } from '../runtime.js'
+
+export type ${typeName}Fields = {
+${fieldLines.join("\n")}
 }
-function getFixedValue(value) {
-  if (!("fixedValue" in value)) {
-    return void 0;
+
+export type ${typeName}CreateInput = ${typeName}Fields
+export type ${typeName}UpdateInput = Partial<${typeName}Fields>
+
+const entityId = ${entity.id}
+const fieldIds = {
+${fieldMapLines.join("\n")}
+} as const
+
+function toArcubaseFields(fields: Partial<${typeName}Fields>): Record<string, any> {
+  const out: Record<string, any> = {}
+  for (const [key, value] of Object.entries(fields)) {
+    if (value === undefined) continue
+    const fieldId = fieldIds[key as keyof typeof fieldIds]
+    if (!fieldId) {
+      throw new Error(\`Unknown ${entity.sdkName} field: \${key}\`)
+    }
+    out[String(fieldId)] = value
   }
-  const fixedValue = value.fixedValue;
-  return typeof fixedValue === "string" ? fixedValue : void 0;
+  return out
 }
-function pathFlagPlaceholders(command) {
-  const parts = command.pathParams.filter((item) => !getFixedValue(item)).map((item) => `--${item.flag} <${item.flag.replace(/-/g, "_")}>`);
-  return parts.length > 0 ? `${parts.join(" ")} ` : "";
+
+function fromArcubaseFields(raw: Record<string, any> | undefined): ${typeName}Fields {
+  const out: Record<string, any> = {}
+  const source = raw ?? {}
+  for (const [key, fieldId] of Object.entries(fieldIds)) {
+    if (String(fieldId) in source) {
+      out[key] = source[String(fieldId)]
+    }
+  }
+  return out as ${typeName}Fields
 }
-function helpExampleKey(scope, command) {
-  return `${scope}.${command.commandPath.join(".")}`;
+
+function mapRow(raw: Record<string, any>): ArcubaseRow<${typeName}Fields> {
+  return {
+    id: Number(raw.id),
+    title: typeof raw.title === 'string' ? raw.title : undefined,
+    fields: fromArcubaseFields(raw.fields),
+    raw,
+  }
 }
-function getCommandHelpExamples(scope, command) {
-  return helpExamplesIndex[helpExampleKey(scope, command)]?.examples ?? [];
+
+export function create${typeName}SDK(runtime: ArcubaseRuntime) {
+  return {
+    async create(fields: ${typeName}CreateInput): Promise<number> {
+      return runtime.request<number>('POST', \`/entity/${entity.appId}/\${entityId}/insert\`, {
+        fields: toArcubaseFields(fields),
+      })
+    },
+
+    async update(rowId: string | number, fields: ${typeName}UpdateInput): Promise<boolean> {
+      const data = toArcubaseFields(fields)
+      return runtime.request<boolean>('PUT', \`/entity/${entity.appId}/\${entityId}/row/\${rowId}\`, {
+        data,
+        changed_fields: Object.keys(data).map((fieldId) => Number(fieldId)),
+      })
+    },
+
+    async get(rowId: string | number): Promise<ArcubaseRow<${typeName}Fields>> {
+      const data = await runtime.request<{ record?: Record<string, any> }>('GET', \`/entity/${entity.appId}/\${entityId}/row/\${rowId}\`)
+      return mapRow(data.record ?? {})
+    },
+
+    async query(params: { limit?: number; offset?: number; search?: Record<string, any> } = {}): Promise<{ items: ArcubaseRow<${typeName}Fields>[]; total?: number }> {
+      const data = await runtime.request<{ items?: Record<string, any>[]; total?: number }>('POST', \`/entity/${entity.appId}/\${entityId}/data-query\`, params)
+      return {
+        items: (data.items ?? []).map(mapRow),
+        total: data.total,
+      }
+    },
+  }
 }
-function renderCommandHelpExamples(scope, command) {
-  const binary = binaryForScope(scope);
-  const examples = getCommandHelpExamples(scope, command);
-  const header = `${binary} ${command.commandPath.join(" ")} --help-examples`;
-  if (examples.length === 0) {
-    return [
-      header,
-      "",
-      "No dedicated examples for this final command yet.",
-      `Use ${binary} ${command.commandPath.join(" ")} --help for flags, docs, and type paths.`
-    ].join("\n");
+`;
+}
+function emitClient(entities) {
+  const imports = entities.map((entity) => {
+    const typeName = toPascalCase(entity.sdkName);
+    return `import { create${typeName}SDK } from './entities/${entity.sdkName}.js'`;
+  });
+  const properties = entities.map((entity) => `    ${entity.sdkName}: create${toPascalCase(entity.sdkName)}SDK(runtime),`);
+  return `import { createRuntime, type ArcubaseSdkConfig } from './runtime.js'
+${imports.join("\n")}
+
+export function createArcubaseSdk(config: ArcubaseSdkConfig) {
+  const runtime = createRuntime(config)
+  return {
+${properties.join("\n")}
   }
-  return [
-    header,
-    "",
-    ...examples.flatMap((example) => [
-      `${example.title}:`,
-      ...example.body === void 0 ? [] : [`  ${binary} ${command.commandPath.join(" ")} ${pathFlagPlaceholders(command)}--body-json '${JSON.stringify(example.body)}'`.replace(/\s+/g, " ").trim()],
-      ...(example.notes ?? []).map((note) => `  - ${note}`),
-      ""
-    ])
-  ].join("\n").trimEnd();
+}
+`;
+}
+function emitIndex(entities) {
+  return `export { createArcubaseSdk } from './client.js'
+export type { ArcubaseSdkConfig, ArcubaseRow } from './runtime.js'
+export { arcubaseSchema } from './schema.js'
+${entities.map((entity) => `export type { ${toPascalCase(entity.sdkName)}Fields, ${toPascalCase(entity.sdkName)}CreateInput, ${toPascalCase(entity.sdkName)}UpdateInput } from './entities/${entity.sdkName}.js'`).join("\n")}
+`;
+}
+function generateArcubaseProjectSDK(payload) {
+  const entities = normalizeEntities(payload);
+  return {
+    files: [
+      { path: "runtime.ts", contents: emitRuntime() },
+      { path: "schema.ts", contents: emitSchema(entities) },
+      ...entities.map((entity) => ({ path: `entities/${entity.sdkName}.ts`, contents: emitEntity(entity) })),
+      { path: "client.ts", contents: emitClient(entities) },
+      { path: "index.ts", contents: emitIndex(entities) }
+    ]
+  };
 }
 
 // src/runtime/execute.ts
 function renderRootHelp(scope) {
   const binary = scope === "admin" ? "arcubase-admin" : "arcubase";
-  const items = listModules(scope).map((item) => `  - ${item}`);
+  const modules = scope === "admin" ? [...listModules(scope), "dev"].sort() : listModules(scope);
+  const items = modules.map((item) => `  - ${item}`);
   return [
     `${binary} <command> [subcommand] [flags]`,
     "",
@@ -17758,6 +18896,16 @@ function renderRootHelp(scope) {
     ...items
   ].join("\n");
 }
+function renderDevModuleHelp() {
+  return [
+    "arcubase-admin dev <command> [flags]",
+    "",
+    "developer commands for local project tooling",
+    "",
+    "commands:",
+    "  - sdk-gen"
+  ].join("\n");
+}
 function renderModuleHelp(scope, moduleName, env = process.env) {
   const items = listModuleCommands(scope, moduleName);
   if (items.length === 0) {
@@ -17935,6 +19083,41 @@ function getFixedValue2(value) {
   const fixedValue = value.fixedValue;
   return typeof fixedValue === "string" ? fixedValue : void 0;
 }
+function isDevSDKGenCommand(scope, moduleName, commandName) {
+  return scope === "admin" && moduleName === "dev" && commandName === "sdk-gen";
+}
+function validateDevSDKGenFlags(flags) {
+  const allowed = /* @__PURE__ */ new Set(["help", "app-id", "out"]);
+  for (const flag of Object.keys(flags)) {
+    if (!allowed.has(flag)) {
+      throw new CLIError("UNKNOWN_FLAG", `unknown flag --${flag} for dev sdk-gen`, 2, {
+        operation: "dev sdk-gen",
+        hint: "run dev sdk-gen --help for the supported flags"
+      });
+    }
+  }
+}
+function renderDevSDKGenHelp() {
+  return [
+    "arcubase-admin dev sdk-gen",
+    "method: local generator",
+    "endpoint: /apps/:app_id",
+    "body: none",
+    "path flags: --app-id",
+    "flags: --out",
+    "",
+    "generates typed TypeScript source for the current Web project",
+    "",
+    "example:",
+    "  - arcubase-admin dev sdk-gen --app-id <app_id> --out src/arcubase",
+    "",
+    "requirements:",
+    "  - missing field.key values are initialized through admin auth as field<id>",
+    "  - existing field.key values must be stable unique TypeScript identifiers",
+    "  - entity property names use entity.key when available, otherwise a stable entity<id> fallback",
+    "  - generated code accepts createArcubaseSdk({ baseURL, accessToken, refreshToken })"
+  ].join("\n");
+}
 function resolveEndpoint(command, flags) {
   let resolved = command.endpoint;
   for (const mapping of command.pathParams) {
@@ -18031,7 +19214,7 @@ function effectiveQueryParams(command) {
     return true;
   });
 }
-function isRecord3(value) {
+function isRecord4(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function stringifyUpstreamBody(value) {
@@ -18044,18 +19227,18 @@ function stringifyUpstreamBody(value) {
   }
 }
 function extractTraceID(value) {
-  if (!isRecord3(value)) return void 0;
+  if (!isRecord4(value)) return void 0;
   if (typeof value.trace_id === "string") return value.trace_id;
   if (typeof value.request_id === "string") return value.request_id;
   return void 0;
 }
 function upstreamErrorMessage(value) {
-  if (isRecord3(value) && typeof value.message === "string") return value.message;
+  if (isRecord4(value) && typeof value.message === "string") return value.message;
   if (typeof value === "string") return value;
   return stringifyUpstreamBody(value);
 }
 function throwUpstreamHTTPError(endpoint, method, response, parsedResponse) {
-  const upstreamError = isRecord3(parsedResponse) && parsedResponse.error ? parsedResponse.error : void 0;
+  const upstreamError = isRecord4(parsedResponse) && parsedResponse.error ? parsedResponse.error : void 0;
   const body = stringifyUpstreamBody(parsedResponse);
   throw new CLIError(
     "UPSTREAM_REQUEST_FAILED",
@@ -18083,11 +19266,11 @@ async function fetchUpstream(url2, init, endpoint, method, fetchImpl) {
   }
 }
 function extractEntityFields(payload) {
-  const candidate = isRecord3(payload) && isRecord3(payload.data) ? payload.data : payload;
-  if (!isRecord3(candidate) || !Array.isArray(candidate.fields)) {
+  const candidate = isRecord4(payload) && isRecord4(payload.data) ? payload.data : payload;
+  if (!isRecord4(candidate) || !Array.isArray(candidate.fields)) {
     return [];
   }
-  return candidate.fields.filter((item) => isRecord3(item)).filter((item) => typeof item.id === "number" && typeof item.type === "string").map((item) => ({
+  return candidate.fields.filter((item) => isRecord4(item)).filter((item) => typeof item.id === "number" && typeof item.type === "string").map((item) => ({
     id: item.id,
     type: item.type,
     label: typeof item.label === "string" ? item.label : void 0
@@ -18110,7 +19293,7 @@ async function fetchEntityFields(runtimeEnv, appId, entityId, fetchImpl) {
   if (!response.ok) {
     throwUpstreamHTTPError(endpoint, "GET", response, parsedResponse);
   }
-  if (isRecord3(parsedResponse) && parsedResponse.error) {
+  if (isRecord4(parsedResponse) && parsedResponse.error) {
     const upstreamError = parsedResponse.error;
     const upstreamMessage = upstreamErrorMessage(upstreamError);
     throw new CLIError("UPSTREAM_BODY_ERROR", upstreamMessage, 1, {
@@ -18127,7 +19310,7 @@ function looksLikeLocalFilePath(value) {
   return value.startsWith("./") || value.startsWith("../") || value.startsWith("/") || value.startsWith("~/") || /\.(pdf|png|jpe?g|gif|webp|bmp|svg|heic|txt|csv|xlsx?|docx?|pptx?|zip)$/i.test(value);
 }
 function isValidUploadEntry(value) {
-  if (!isRecord3(value)) {
+  if (!isRecord4(value)) {
     return false;
   }
   const hasUploadId = typeof value.upload_id === "number" || typeof value.upload_id === "string";
@@ -18135,11 +19318,11 @@ function isValidUploadEntry(value) {
   return (hasUploadId || hasAssetsId) && typeof value.file === "string" && typeof value.file_name === "string";
 }
 async function validateFileFieldPayloads(scope, command, runtimeEnv, flags, body, fetchImpl) {
-  if (!isRecord3(body)) {
+  if (!isRecord4(body)) {
     return;
   }
   const container = command.functionName === "updateEntityRow" ? body.data : body.fields;
-  if (!isRecord3(container)) {
+  if (!isRecord4(container)) {
     return;
   }
   const appId = flagValue(flags, "app-id");
@@ -18171,7 +19354,7 @@ async function validateFileFieldPayloads(scope, command, runtimeEnv, flags, body
         ]
       });
     }
-    if (isRecord3(value)) {
+    if (isRecord4(value)) {
       const guidance = `${fieldName} must be an upload value array. Use the upload token flow and pass the returned array directly`;
       throw new CLIError("BODY_VALIDATION_FAILED", guidance, 2, {
         operation: `${scope}.${command.module}.${command.functionName}`,
@@ -18269,6 +19452,9 @@ function buildTableCreateExampleBody() {
 function isAssignUsersCommand(scope, command) {
   return scope === "admin" && command.commandPath[0] === "access-rule" && command.commandPath[1] === "assign-users";
 }
+function isAccessRuleBulkApplyCommand(scope, command) {
+  return scope === "admin" && command.commandPath[0] === "access-rule" && command.commandPath[1] === "bulk-apply";
+}
 function isTableCreateCommand(scope, command) {
   return scope === "admin" && command.commandPath[0] === "table" && command.commandPath[1] === "create";
 }
@@ -18281,6 +19467,12 @@ function isTableSchemaCommand(scope, command) {
 function isAccessRuleCommand(scope, command) {
   return scope === "admin" && command.commandPath[0] === "access-rule";
 }
+function isWidgetPreviewDataCommand(scope, command) {
+  return scope === "admin" && command.commandPath[0] === "widget" && command.commandPath[1] === "preview-data";
+}
+function isWidgetUpdateCommand(scope, command) {
+  return scope === "admin" && command.commandPath[0] === "widget" && command.commandPath[1] === "update";
+}
 function isAccessRuleUpdateCommand(scope, command) {
   return scope === "admin" && command.commandPath[0] === "access-rule" && command.commandPath[1] === "update";
 }
@@ -18577,6 +19769,45 @@ function buildBodyGuidance(requestType) {
       ]
     };
   }
+  if (requestType === "AppPreviewWidgetsDataReqVO") {
+    return {
+      shapeHint: {
+        dataSource: 2188891001,
+        dataSourceType: "entity",
+        dimensions: [{ IsField: true, FieldID: 1004, Name: "Source" }],
+        measures: [{ FieldID: 1005, Aggregate: "sum", Name: "Total Amount" }]
+      },
+      commonMistakes: [
+        "widget preview-data body is the chart query itself",
+        "do not send a saved widget object with id, entity_id, or options",
+        "field dimensions with FieldID must set IsField:true",
+        "unsupported aggregates are invalid; use sum, avg, max, min, count, or distinct_count"
+      ],
+      suggestions: [
+        `retry with: arcubase-admin widget preview-data --app-id <app_id> --body-json '{"dataSource":<table_id>,"dataSourceType":"entity","dimensions":[{"IsField":true,"FieldID":<field_id>,"Name":"Source"}],"measures":[{"FieldID":<number_field_id>,"Aggregate":"sum","Name":"Total Amount"}]}'`
+      ]
+    };
+  }
+  if (requestType === "AppUpdateWidgetsReqVO") {
+    return {
+      shapeHint: {
+        entity_id: 2188891001,
+        options: {
+          charts: {
+            entity_id: 2188891001,
+            dimensions: [{ IsField: true, FieldID: 1004, Name: "Source" }],
+            measures: [{ FieldID: 1005, Aggregate: "sum", Name: "Total Amount" }],
+            type: "bar"
+          }
+        }
+      },
+      commonMistakes: [
+        "dashboard chart config belongs in body.options.charts",
+        "field dimensions with FieldID must set IsField:true",
+        "verify persistence with widget get or widget list after update"
+      ]
+    };
+  }
   return {};
 }
 function buildBodyValidationDetails(scope, command, requestType, issues, env = process.env) {
@@ -18596,7 +19827,7 @@ function throwBodyValidationFailure(message, requestType, path3, scope, command,
   throw new CLIError("BODY_VALIDATION_FAILED", message, 2, buildBodyValidationDetails(scope, command, requestType, [{ path: path3, message }], env));
 }
 function requireTableCreateSchemaBody(scope, command, body, env) {
-  if (!isRecord3(body)) {
+  if (!isRecord4(body)) {
     throwBodyValidationFailure(
       "table create requires a JSON object with name, fields, field_id_seq, layout, options, and workflow_enabled",
       "AppCreateEntityReqVO",
@@ -18644,7 +19875,7 @@ function validateAccessRuleUserScope(scope, command, requestType, userScope, env
   }
   const allowedTypes = /* @__PURE__ */ new Set(["user", "department", "actor"]);
   for (const [index, item] of userScope.entries()) {
-    if (!isRecord3(item)) {
+    if (!isRecord4(item)) {
       throwBodyValidationFailure(
         "access-rule user_scope item must be an object",
         requestType,
@@ -18677,30 +19908,111 @@ function validateAccessRuleUserScope(scope, command, requestType, userScope, env
   }
 }
 function normalizeNumericAccessRuleUserScopeIDs(scope, command, body) {
-  if (!isAccessRuleCommand(scope, command) || !isRecord3(body) || !isRecord3(body.options) || !Array.isArray(body.options.user_scope)) {
+  if (!isAccessRuleCommand(scope, command) || !isRecord4(body)) {
     return body;
   }
-  let changed = false;
-  const userScope = body.options.user_scope.map((item) => {
-    if (!isRecord3(item) || typeof item.id !== "string" || !/^\d+$/.test(item.id)) {
-      return item;
-    }
-    const id = Number(item.id);
-    if (!Number.isFinite(id) || !Number.isInteger(id)) {
-      return item;
-    }
-    changed = true;
-    return { ...item, id };
-  });
-  if (!changed) return body;
+  const normalizeUserScope = (userScope) => {
+    if (!Array.isArray(userScope)) return { value: userScope, changed: false };
+    let changed = false;
+    const value = userScope.map((item) => {
+      if (!isRecord4(item) || typeof item.id !== "string" || !/^\d+$/.test(item.id)) {
+        return item;
+      }
+      const id = Number(item.id);
+      if (!Number.isFinite(id) || !Number.isInteger(id)) {
+        return item;
+      }
+      changed = true;
+      return { ...item, id };
+    });
+    return { value, changed };
+  };
+  const normalizeNumericID = (value) => {
+    if (typeof value !== "string" || !/^\d+$/.test(value)) return { value, changed: false };
+    const id = Number(value);
+    if (!Number.isFinite(id) || !Number.isInteger(id)) return { value, changed: false };
+    return { value: id, changed: true };
+  };
+  if (isAccessRuleBulkApplyCommand(scope, command) && Array.isArray(body.items)) {
+    let changed = false;
+    const items = body.items.map((item) => {
+      if (!isRecord4(item)) return item;
+      let nextItem = item;
+      for (const key of ["table_id", "rule_id"]) {
+        const normalized = normalizeNumericID(nextItem[key]);
+        if (normalized.changed) {
+          nextItem = { ...nextItem, [key]: normalized.value };
+          changed = true;
+        }
+      }
+      if (isRecord4(nextItem.options)) {
+        const normalizedUserScope2 = normalizeUserScope(nextItem.options.user_scope);
+        if (normalizedUserScope2.changed) {
+          nextItem = {
+            ...nextItem,
+            options: {
+              ...nextItem.options,
+              user_scope: normalizedUserScope2.value
+            }
+          };
+          changed = true;
+        }
+      }
+      return nextItem;
+    });
+    return changed ? { ...body, items } : body;
+  }
+  if (!isRecord4(body.options)) {
+    return body;
+  }
+  const normalizedUserScope = normalizeUserScope(body.options.user_scope);
+  if (!normalizedUserScope.changed) return body;
   return {
     ...body,
     options: {
       ...body.options,
-      user_scope: userScope
+      user_scope: normalizedUserScope.value
     }
   };
 }
+function validateAccessRulePolicyShape(scope, command, requestType, policy, env, pathPrefix) {
+  const actions = policy && Array.isArray(policy.actions) ? policy.actions : [];
+  if (actions.includes("read") || actions.includes("write")) {
+    throwBodyValidationFailure(
+      'access-rule policy.actions must use Arcubase action codes: use "view" for read and "add","edit" for write; do not use "read", "write", or "insert"',
+      requestType,
+      `${pathPrefix}.actions`,
+      scope,
+      command,
+      env
+    );
+  }
+  const fields = policy && Array.isArray(policy.fields) ? policy.fields : [];
+  const allowedSystemFieldKeys = /* @__PURE__ */ new Set(["created", "updated", "creator"]);
+  for (const [index, field] of fields.entries()) {
+    if (!isRecord4(field)) continue;
+    if (typeof field.key === "number" || typeof field.key === "string" && /^\d+$/.test(field.key)) {
+      throwBodyValidationFailure(
+        'access-rule policy.fields[].key must be a string prefixed with colon, for example ":1002"; do not use raw numbers',
+        requestType,
+        `${pathPrefix}.fields.${index}.key`,
+        scope,
+        command,
+        env
+      );
+    }
+    if (typeof field.key === "string" && !field.key.startsWith(":") && !allowedSystemFieldKeys.has(field.key)) {
+      throwBodyValidationFailure(
+        'access-rule policy.fields[].key must use Arcubase permission keys such as ":1002"; do not use FieldVO.key values such as "vote_name"',
+        requestType,
+        `${pathPrefix}.fields.${index}.key`,
+        scope,
+        command,
+        env
+      );
+    }
+  }
+}
 function requireUpdateContains(scope, command, body, field, env) {
   if (!(field in body)) return;
   const update = stringArray(body.update);
@@ -18715,8 +20027,26 @@ function requireUpdateContains(scope, command, body, field, env) {
     );
   }
 }
+function validateChartFieldDimensions(scope, command, requestType, dimensions, pathPrefix, env) {
+  if (!Array.isArray(dimensions)) return;
+  for (const [index, dimension] of dimensions.entries()) {
+    if (!isRecord4(dimension) || typeof dimension.FieldID !== "number") {
+      continue;
+    }
+    if (dimension.IsField !== true) {
+      throwBodyValidationFailure(
+        "widget chart field dimensions require IsField:true when FieldID is present; otherwise grouped statistics collapse into total rows",
+        requestType,
+        `${pathPrefix}.${index}.IsField`,
+        scope,
+        command,
+        env
+      );
+    }
+  }
+}
 function validateActionSpecificRawBody(scope, command, body, env) {
-  if (!isRecord3(body) || !command.requestType) {
+  if (!isRecord4(body) || !command.requestType) {
     return;
   }
   if (isAssignUsersCommand(scope, command)) {
@@ -18733,7 +20063,7 @@ function validateActionSpecificRawBody(scope, command, body, env) {
   }
   if (isTableSchemaCommand(scope, command)) {
     const fields = Array.isArray(body.fields) ? body.fields : [];
-    const hasPermissionPatch = fields.some((field) => isRecord3(field) && ("permission" in field || "permissions" in field || "field_visibility" in field));
+    const hasPermissionPatch = fields.some((field) => isRecord4(field) && ("permission" in field || "permissions" in field || "field_visibility" in field));
     if (hasPermissionPatch) {
       throwBodyValidationFailure(
         "table schema cannot configure per-user permissions. Use access-rule create/update with options.policy.fields for hidden fields",
@@ -18746,6 +20076,54 @@ function validateActionSpecificRawBody(scope, command, body, env) {
     }
   }
   if (isAccessRuleCommand(scope, command)) {
+    if (isAccessRuleBulkApplyCommand(scope, command)) {
+      if (!Array.isArray(body.items) || body.items.length === 0) {
+        throwBodyValidationFailure(
+          "access-rule bulk-apply requires non-empty body.items; put every table/rule assignment in body.items",
+          command.requestType,
+          "body.items",
+          scope,
+          command,
+          env
+        );
+      }
+      if (body.mode !== void 0 && body.mode !== "update_existing" && body.mode !== "upsert_by_name") {
+        throwBodyValidationFailure(
+          'access-rule bulk-apply body.mode must be "update_existing" or "upsert_by_name"',
+          command.requestType,
+          "body.mode",
+          scope,
+          command,
+          env
+        );
+      }
+      for (const [index, item] of body.items.entries()) {
+        if (!isRecord4(item)) {
+          throwBodyValidationFailure(
+            "access-rule bulk-apply body.items[] must be an object",
+            command.requestType,
+            `body.items.${index}`,
+            scope,
+            command,
+            env
+          );
+        }
+        const options2 = isRecord4(item.options) ? item.options : void 0;
+        if (!options2) {
+          throwBodyValidationFailure(
+            "access-rule bulk-apply body.items[].options is required and must include the full canonical options object",
+            command.requestType,
+            `body.items.${index}.options`,
+            scope,
+            command,
+            env
+          );
+        }
+        validateAccessRuleUserScope(scope, command, command.requestType, options2.user_scope, env, `body.items.${index}.options.user_scope`);
+        validateAccessRulePolicyShape(scope, command, command.requestType, isRecord4(options2.policy) ? options2.policy : void 0, env, `body.items.${index}.options.policy`);
+      }
+      return;
+    }
     const update = stringArray(body.update);
     if (isAccessRuleUpdateCommand(scope, command) && update.some((item) => item.startsWith("options."))) {
       throwBodyValidationFailure(
@@ -18767,7 +20145,7 @@ function validateActionSpecificRawBody(scope, command, body, env) {
         env
       );
     }
-    const options = isRecord3(body.options) ? body.options : void 0;
+    const options = isRecord4(body.options) ? body.options : void 0;
     if (options && ("permissions" in options || "field_visibility" in options)) {
       throwBodyValidationFailure(
         "access-rule options only supports user_scope, policy, list_options, i18n_name; use options.policy.actions and options.policy.fields",
@@ -18778,7 +20156,7 @@ function validateActionSpecificRawBody(scope, command, body, env) {
         env
       );
     }
-    const policy = options && isRecord3(options.policy) ? options.policy : void 0;
+    const policy = options && isRecord4(options.policy) ? options.policy : void 0;
     if (isAccessRuleUpdateCommand(scope, command) && update.includes("options") && options?.user_scope !== void 0 && !policy) {
       throwBodyValidationFailure(
         'access-rule update with update:["options"] cannot change only options.user_scope because it overwrites policy. Use access-rule assign-users for user assignment, or include the full options.policy and options.list_options.',
@@ -18790,46 +20168,19 @@ function validateActionSpecificRawBody(scope, command, body, env) {
       );
     }
     validateAccessRuleUserScope(scope, command, command.requestType, options?.user_scope, env);
-    const actions = policy && Array.isArray(policy.actions) ? policy.actions : [];
-    if (actions.includes("read") || actions.includes("write")) {
-      throwBodyValidationFailure(
-        'access-rule policy.actions must use Arcubase action codes: use "view" for read and "add","edit" for write; do not use "read", "write", or "insert"',
-        command.requestType,
-        "body.options.policy.actions",
-        scope,
-        command,
-        env
-      );
-    }
-    const fields = policy && Array.isArray(policy.fields) ? policy.fields : [];
-    const allowedSystemFieldKeys = /* @__PURE__ */ new Set(["created", "updated", "creator"]);
-    for (const [index, field] of fields.entries()) {
-      if (!isRecord3(field)) continue;
-      if (typeof field.key === "number" || typeof field.key === "string" && /^\d+$/.test(field.key)) {
-        throwBodyValidationFailure(
-          'access-rule policy.fields[].key must be a string prefixed with colon, for example ":1002"; do not use raw numbers',
-          command.requestType,
-          `body.options.policy.fields.${index}.key`,
-          scope,
-          command,
-          env
-        );
-      }
-      if (typeof field.key === "string" && !field.key.startsWith(":") && !allowedSystemFieldKeys.has(field.key)) {
-        throwBodyValidationFailure(
-          'access-rule policy.fields[].key must use Arcubase permission keys such as ":1002"; do not use FieldVO.key values such as "vote_name"',
-          command.requestType,
-          `body.options.policy.fields.${index}.key`,
-          scope,
-          command,
-          env
-        );
-      }
-    }
+    validateAccessRulePolicyShape(scope, command, command.requestType, policy, env, "body.options.policy");
+  }
+  if (isWidgetPreviewDataCommand(scope, command)) {
+    validateChartFieldDimensions(scope, command, command.requestType, body.dimensions, "body.dimensions", env);
+  }
+  if (isWidgetUpdateCommand(scope, command)) {
+    const options = isRecord4(body.options) ? body.options : void 0;
+    const charts = options && isRecord4(options.charts) ? options.charts : void 0;
+    validateChartFieldDimensions(scope, command, command.requestType, charts?.dimensions, "body.options.charts.dimensions", env);
   }
 }
 function validateActionSpecificBody(scope, command, flags, body, env) {
-  if (!isRecord3(body) || !command.requestType) {
+  if (!isRecord4(body) || !command.requestType) {
     return;
   }
   if (scope === "admin" && command.commandPath[0] === "access-rule" && command.commandPath[1] === "update") {
@@ -18839,7 +20190,7 @@ function validateActionSpecificBody(scope, command, flags, body, env) {
   }
   if (isAssignUsersCommand(scope, command)) {
     const update = stringArray(body.update);
-    const options = isRecord3(body.options) ? body.options : void 0;
+    const options = isRecord4(body.options) ? body.options : void 0;
     const userScope = options && Array.isArray(options.user_scope) ? options.user_scope : void 0;
     if ("users" in body || "allowedUsers" in body) {
       throwBodyValidationFailure(
@@ -18874,7 +20225,7 @@ function validateActionSpecificBody(scope, command, flags, body, env) {
     validateAccessRuleUserScope(scope, command, command.requestType, userScope, env);
     const assignedUserScope = userScope;
     for (const [index, item] of assignedUserScope.entries()) {
-      if (!isRecord3(item)) {
+      if (!isRecord4(item)) {
         throwBodyValidationFailure(
           "access-rule assign-users requires each body.options.user_scope item to be an object",
           command.requestType,
@@ -18899,11 +20250,11 @@ function validateActionSpecificBody(scope, command, flags, body, env) {
   if (command.commandPath[0] === "row" && command.commandPath[1] === "selection-action") {
     const action = flagValue(flags, "action");
     const selection = body.selection;
-    if (!isRecord3(selection) || typeof selection.type !== "string") {
+    if (!isRecord4(selection) || typeof selection.type !== "string") {
       return;
     }
     const type = selection.type;
-    const condition = isRecord3(selection.condition) ? selection.condition : void 0;
+    const condition = isRecord4(selection.condition) ? selection.condition : void 0;
     const conditionKeys = condition ? Object.keys(condition).filter((key) => key !== "selectAll") : [];
     if (action === "query") {
       if (type === "condition") {
@@ -18940,10 +20291,10 @@ function validateActionSpecificBody(scope, command, flags, body, env) {
     }
   }
 }
-function unwrapData(value) {
+function unwrapData2(value) {
   let current = value;
   for (let i = 0; i < 3; i += 1) {
-    if (isRecord3(current) && isRecord3(current.data)) {
+    if (isRecord4(current) && isRecord4(current.data)) {
       current = current.data;
       continue;
     }
@@ -18952,23 +20303,23 @@ function unwrapData(value) {
   return current;
 }
 function numericFieldKeys(fields) {
-  if (!isRecord3(fields)) return [];
+  if (!isRecord4(fields)) return [];
   return Object.keys(fields).filter((key) => /^\d+$/.test(key)).sort((left, right) => Number(left) - Number(right));
 }
 function permitFieldId(permit) {
-  if (!isRecord3(permit) || typeof permit.key !== "string") return void 0;
+  if (!isRecord4(permit) || typeof permit.key !== "string") return void 0;
   const match = /^:(\d+)$/.exec(permit.key);
   return match?.[1];
 }
 function rowFieldPermits(value) {
-  const data = unwrapData(value);
-  const fieldPermits = isRecord3(data) && isRecord3(data.fieldPermits) ? data.fieldPermits : void 0;
-  return fieldPermits && Array.isArray(fieldPermits.fields) ? fieldPermits.fields.filter((item) => isRecord3(item)) : [];
+  const data = unwrapData2(value);
+  const fieldPermits = isRecord4(data) && isRecord4(data.fieldPermits) ? data.fieldPermits : void 0;
+  return fieldPermits && Array.isArray(fieldPermits.fields) ? fieldPermits.fields.filter((item) => isRecord4(item)) : [];
 }
 function buildRowValueEvidence(command, responseBody) {
   if (command.scope !== "user" || command.commandPath[0] !== "row") return void 0;
   const action = command.commandPath[1];
-  const data = unwrapData(responseBody);
+  const data = unwrapData2(responseBody);
   const rules = [
     "current row values come only from row query fields or row get record.fields",
     "table schema fields[].value and default_value_mode are schema defaults, not returned row values",
@@ -18976,7 +20327,7 @@ function buildRowValueEvidence(command, responseBody) {
     "read visibility status is fieldPermits read:false; FIELD_PERMISSION_REQUIRED is only a write preflight error"
   ];
   if (action === "get") {
-    const record2 = isRecord3(data) && isRecord3(data.record) ? data.record : void 0;
+    const record2 = isRecord4(data) && isRecord4(data.record) ? data.record : void 0;
     const returnedFieldIds = numericFieldKeys(record2?.fields);
     const permits = rowFieldPermits(responseBody);
     const permitFieldIds = permits.map(permitFieldId).filter((id) => Boolean(id));
@@ -18992,10 +20343,10 @@ function buildRowValueEvidence(command, responseBody) {
     };
   }
   if (action === "query") {
-    const items = isRecord3(data) && Array.isArray(data.items) ? data.items : [];
+    const items = isRecord4(data) && Array.isArray(data.items) ? data.items : [];
     return {
       source: "row query items[].fields",
-      rows: items.filter((item) => isRecord3(item)).map((item) => ({
+      rows: items.filter((item) => isRecord4(item)).map((item) => ({
         rowId: item.id,
         returnedFieldIds: numericFieldKeys(item.fields)
       })),
@@ -19029,14 +20380,14 @@ function rowCommandNeedsPolicy(command) {
   return command.scope === "user" && command.commandPath[0] === "row";
 }
 function extractIngressItems(appDetail) {
-  const appData = unwrapData(appDetail);
-  const ingress = isRecord3(appData) ? appData.ingress : void 0;
-  const groups = isRecord3(ingress) && Array.isArray(ingress.groups) ? ingress.groups : [];
+  const appData = unwrapData2(appDetail);
+  const ingress = isRecord4(appData) ? appData.ingress : void 0;
+  const groups = isRecord4(ingress) && Array.isArray(ingress.groups) ? ingress.groups : [];
   const items = [];
   for (const group of groups) {
-    const groupItems = isRecord3(group) && Array.isArray(group.items) ? group.items : [];
+    const groupItems = isRecord4(group) && Array.isArray(group.items) ? group.items : [];
     for (const item of groupItems) {
-      if (!isRecord3(item)) continue;
+      if (!isRecord4(item)) continue;
       const id = typeof item.id === "string" ? item.id : typeof item.ID === "string" ? item.ID : "";
       if (id) {
         items.push({ id });
@@ -19046,29 +20397,29 @@ function extractIngressItems(appDetail) {
   return items;
 }
 function ingressMatchesTableAndAction(ingressDetail, tableId, action) {
-  const ingressData = unwrapData(ingressDetail);
-  if (!isRecord3(ingressData)) return void 0;
+  const ingressData = unwrapData2(ingressDetail);
+  if (!isRecord4(ingressData)) return void 0;
   const id = typeof ingressData.id === "number" || typeof ingressData.id === "string" ? ingressData.id : typeof ingressData.ID === "number" || typeof ingressData.ID === "string" ? ingressData.ID : void 0;
   if (String(id ?? "") !== tableId) return void 0;
   const policyID = typeof ingressData.hash_id === "string" ? ingressData.hash_id : typeof ingressData.hashId === "string" ? ingressData.hashId : void 0;
-  const policy = isRecord3(ingressData.policy) ? ingressData.policy : void 0;
+  const policy = isRecord4(ingressData.policy) ? ingressData.policy : void 0;
   if (!action) return { policyID: policyID || "", policy };
   const actions = policy && Array.isArray(policy.actions) ? policy.actions.filter((item) => typeof item === "string") : [];
   if (!actions.includes(action)) return void 0;
   return { policyID: policyID || "", policy };
 }
 function writtenRowFieldIds(command, body) {
-  if (!isRecord3(body)) return [];
+  if (!isRecord4(body)) return [];
   const source = command.commandPath[1] === "create" ? body.fields : command.commandPath[1] === "update" ? body.data : void 0;
-  if (!isRecord3(source)) return [];
+  if (!isRecord4(source)) return [];
   return Object.keys(source).filter((key) => /^\d+$/.test(key)).map((key) => Number(key));
 }
 function fieldWriteAllowedByPolicy(policy, fieldId) {
   if (!policy) return true;
   const fields = Array.isArray(policy.fields) ? policy.fields : [];
-  const explicit = fields.find((item) => isRecord3(item) && item.key === `:${fieldId}`);
-  if (isRecord3(explicit) && explicit.write === false) return false;
-  if (isRecord3(explicit) && explicit.write === true) return true;
+  const explicit = fields.find((item) => isRecord4(item) && item.key === `:${fieldId}`);
+  if (isRecord4(explicit) && explicit.write === false) return false;
+  if (isRecord4(explicit) && explicit.write === true) return true;
   if (policy.all_fields_write === false) return false;
   return true;
 }
@@ -19139,7 +20490,7 @@ async function injectResolvedPolicyID(command, runtimeEnv, flags, query, body, f
   if (typeof query.policy_id === "string" && query.policy_id) {
     return { query, body };
   }
-  if (isRecord3(body) && typeof body.policy_id === "string" && body.policy_id) {
+  if (isRecord4(body) && typeof body.policy_id === "string" && body.policy_id) {
     return { query, body };
   }
   const resolvedPolicy = await resolvePolicyIDForRowCommand(command, runtimeEnv, flags, fetchImpl);
@@ -19148,7 +20499,7 @@ async function injectResolvedPolicyID(command, runtimeEnv, flags, query, body, f
   if (command.commandPath[1] === "get") {
     return { query: { ...query, policy_id: policyID }, body };
   }
-  if (isRecord3(body)) {
+  if (isRecord4(body)) {
     return { query, body: { ...body, policy_id: policyID } };
   }
   return { query, body };
@@ -19157,7 +20508,7 @@ function assertNoUserPolicyIDInput(command, runtimeEnv, query, body) {
   if (!rowCommandNeedsPolicy(command)) {
     return;
   }
-  if ("policy_id" in query || isRecord3(body) && "policy_id" in body) {
+  if ("policy_id" in query || isRecord4(body) && "policy_id" in body) {
     throw new CLIError("INTERNAL_POLICY_ID_NOT_ALLOWED", "policy_id is an internal Arcubase ingress parameter; use app/table/row ids only", 2, {
       operation: `user.${command.module}.${command.functionName}`,
       issues: [{ path: "policy_id", message: "do not provide policy_id in flags, query file, or body JSON" }],
@@ -19194,6 +20545,151 @@ async function requestJSON(runtimeEnv, method, endpoint, body, fetchImpl) {
   }
   return { status: response.status, data: parsedResponse };
 }
+function unwrapResponseData(payload) {
+  return isRecord4(payload) && "data" in payload ? payload.data : payload;
+}
+function extractSDKGenAppPayload(payload) {
+  const appPayload = unwrapResponseData(payload);
+  if (!isRecord4(appPayload)) {
+    throw new CLIError("SDK_GEN_INVALID_SCHEMA", "sdk-gen expected app detail response data", 2);
+  }
+  return appPayload;
+}
+function extractSDKGenEntityRefs(appPayload) {
+  const sourceEntities = Array.isArray(appPayload.entities) ? appPayload.entities : Array.isArray(appPayload.tables) ? appPayload.tables : Array.isArray(appPayload.entitys) ? appPayload.entitys : [];
+  const refs = sourceEntities.filter((item) => isRecord4(item)).map((item) => item.id).filter((id) => typeof id === "string" || typeof id === "number").map((id) => ({ id: String(id) }));
+  return refs;
+}
+function resolveSDKGenAppId(flagAppId, appPayload) {
+  const fromPayload = typeof appPayload.id === "number" ? appPayload.id : typeof appPayload.app_id === "number" ? appPayload.app_id : void 0;
+  const fromFlag = Number(flagAppId);
+  if (Number.isFinite(fromFlag)) return fromFlag;
+  if (fromPayload) return fromPayload;
+  throw new CLIError("SDK_GEN_APP_ID_REQUIRED", "sdk-gen expected numeric app id", 2);
+}
+function walkSDKGenFields(fields, visit) {
+  if (!Array.isArray(fields)) {
+    return;
+  }
+  for (const field of fields) {
+    if (!isRecord4(field)) {
+      continue;
+    }
+    visit(field);
+    walkSDKGenFields(field.children, visit);
+  }
+}
+function collectExistingSDKGenFieldKeys(entity) {
+  const keys = /* @__PURE__ */ new Set();
+  walkSDKGenFields(entity.fields, (field) => {
+    if (typeof field.key === "string" && field.key.trim() !== "") {
+      keys.add(field.key.trim());
+    }
+  });
+  return keys;
+}
+function nextSDKGenFallbackFieldKey(fieldId, usedKeys) {
+  const base = `field${fieldId}`;
+  if (!usedKeys.has(base)) {
+    usedKeys.add(base);
+    return base;
+  }
+  let index = 2;
+  while (usedKeys.has(`${base}_${index}`)) {
+    index++;
+  }
+  const key = `${base}_${index}`;
+  usedKeys.add(key);
+  return key;
+}
+function initializeMissingSDKGenFieldKeys(entity) {
+  const usedKeys = collectExistingSDKGenFieldKeys(entity);
+  const updates = [];
+  walkSDKGenFields(entity.fields, (field) => {
+    if (typeof field.id !== "number") {
+      return;
+    }
+    if (typeof field.key === "string" && field.key.trim() !== "") {
+      field.key = field.key.trim();
+      return;
+    }
+    const key = nextSDKGenFallbackFieldKey(field.id, usedKeys);
+    field.key = key;
+    updates.push({ id: field.id, key });
+  });
+  return updates;
+}
+async function executeDevSDKGen(runtimeEnv, flags, fetchImpl) {
+  validateDevSDKGenFlags(flags);
+  const appId = flagValue(flags, "app-id");
+  const outDir = flagValue(flags, "out");
+  if (!appId) {
+    throw new CLIError("MISSING_PATH_FLAG", "missing required flag --app-id", 2);
+  }
+  if (!outDir) {
+    throw new CLIError("MISSING_FLAG", "missing required flag --out", 2, {
+      operation: "dev sdk-gen",
+      hint: "retry with --out src/arcubase"
+    });
+  }
+  const endpoint = `/api/apps/${encodeURIComponent(appId)}`;
+  const appDetail = await requestJSON(runtimeEnv, "GET", endpoint, void 0, fetchImpl);
+  const appPayload = extractSDKGenAppPayload(appDetail.data);
+  let entityRefs = extractSDKGenEntityRefs(appPayload);
+  if (entityRefs.length === 0) {
+    const entitiesEndpoint = `/api/apps/${encodeURIComponent(appId)}/entities`;
+    const entityList = await requestJSON(runtimeEnv, "GET", entitiesEndpoint, void 0, fetchImpl);
+    const entityListPayload = unwrapResponseData(entityList.data);
+    entityRefs = extractSDKGenEntityRefs({ entities: entityListPayload });
+  }
+  if (entityRefs.length === 0) {
+    throw new CLIError("SDK_GEN_NO_ENTITIES", "sdk-gen could not find entities in app detail response", 2);
+  }
+  const entities = [];
+  const initializedFieldKeys = [];
+  for (const entityRef of entityRefs) {
+    const entityEndpoint = `/api/apps/${encodeURIComponent(appId)}/entity/${encodeURIComponent(entityRef.id)}`;
+    const entityDetail = await requestJSON(runtimeEnv, "GET", entityEndpoint, void 0, fetchImpl);
+    const entityPayload = unwrapResponseData(entityDetail.data);
+    if (!isRecord4(entityPayload)) {
+      throw new CLIError("SDK_GEN_INVALID_SCHEMA", "sdk-gen expected entity detail response data", 2);
+    }
+    const customKeyUpdates = initializeMissingSDKGenFieldKeys(entityPayload);
+    if (customKeyUpdates.length > 0) {
+      const customKeysEndpoint = `/api/apps/${encodeURIComponent(appId)}/entity/${encodeURIComponent(entityRef.id)}/custom-keys`;
+      await requestJSON(runtimeEnv, "PUT", customKeysEndpoint, customKeyUpdates, fetchImpl);
+      initializedFieldKeys.push({
+        entityId: typeof entityPayload.id === "number" ? entityPayload.id : Number(entityRef.id),
+        fields: customKeyUpdates.map((item) => item.key)
+      });
+    }
+    entities.push(entityPayload);
+  }
+  const generated = generateArcubaseProjectSDK({
+    id: resolveSDKGenAppId(appId, appPayload),
+    name: typeof appPayload.name === "string" ? appPayload.name : void 0,
+    entities
+  });
+  const absoluteOutDir = path2.resolve(process.cwd(), outDir);
+  for (const file2 of generated.files) {
+    const targetPath = path2.resolve(absoluteOutDir, file2.path);
+    if (!targetPath.startsWith(`${absoluteOutDir}${path2.sep}`)) {
+      throw new CLIError("SDK_GEN_INVALID_OUTPUT_PATH", `invalid generated file path: ${file2.path}`, 2);
+    }
+    fs3.mkdirSync(path2.dirname(targetPath), { recursive: true });
+    fs3.writeFileSync(targetPath, file2.contents);
+  }
+  return {
+    kind: "result",
+    commandPath: ["dev", "sdk-gen"],
+    status: appDetail.status,
+    data: {
+      out: absoluteOutDir,
+      files: generated.files.map((file2) => file2.path),
+      initializedFieldKeys
+    }
+  };
+}
 function requiredStringFlag(flags, flag) {
   const value = flagValue(flags, flag);
   if (!value) {
@@ -19259,10 +20755,10 @@ async function executeWatchAppBundleImportTask(runtimeEnv, flags, fetchImpl) {
   while (Date.now() <= deadline) {
     const result = await requestJSON(runtimeEnv, "GET", endpoint, void 0, fetchImpl);
     latest = result.data;
-    const payload = isRecord3(latest) && isRecord3(latest.data) ? latest.data : latest;
-    const status = isRecord3(payload) ? payload.status : void 0;
+    const payload = isRecord4(latest) && isRecord4(latest.data) ? latest.data : latest;
+    const status = isRecord4(payload) ? payload.status : void 0;
     if (status === "finished") {
-      const appID = isRecord3(payload) ? Number(payload.app_id) : 0;
+      const appID = isRecord4(payload) ? Number(payload.app_id) : 0;
       if (!Number.isFinite(appID) || appID <= 0) {
         throw new CLIError("IMPORT_TASK_APP_ID_MISSING", "app bundle import task finished without app_id", 1, {
           endpoint,
@@ -19278,7 +20774,7 @@ async function executeWatchAppBundleImportTask(runtimeEnv, flags, fetchImpl) {
       };
     }
     if (status === "failed") {
-      throw new CLIError("IMPORT_TASK_FAILED", isRecord3(payload) && typeof payload.error === "string" ? payload.error : "app bundle import task failed", 1, {
+      throw new CLIError("IMPORT_TASK_FAILED", isRecord4(payload) && typeof payload.error === "string" ? payload.error : "app bundle import task failed", 1, {
         endpoint,
         responseBody: stringifyUpstreamBody(latest)
       });
@@ -19347,25 +20843,25 @@ async function postEntityImportAction(runtimeEnv, appId, entityId, body, fetchIm
 function extractImportTaskID(value) {
   const candidates = [
     value,
-    isRecord3(value) ? value.data : void 0
+    isRecord4(value) ? value.data : void 0
   ];
   for (const candidate of candidates) {
-    if (isRecord3(candidate) && typeof candidate.taskId === "string") return candidate.taskId;
-    if (isRecord3(candidate) && typeof candidate.task_id === "string") return candidate.task_id;
+    if (isRecord4(candidate) && typeof candidate.taskId === "string") return candidate.taskId;
+    if (isRecord4(candidate) && typeof candidate.task_id === "string") return candidate.task_id;
     if (typeof candidate === "string") return candidate;
   }
   throw new CLIError("UPSTREAM_RESPONSE_INVALID", "import response did not include taskId", 1);
 }
 function extractUploadToken(value) {
-  const payload = isRecord3(value) && isRecord3(value.data) ? value.data : value;
-  if (isRecord3(payload) && isRecord3(payload.token)) return payload.token;
+  const payload = isRecord4(value) && isRecord4(value.data) ? value.data : value;
+  if (isRecord4(payload) && isRecord4(payload.token)) return payload.token;
   throw new CLIError("UPSTREAM_RESPONSE_INVALID", "import init-token response did not include upload token", 1);
 }
 function compileEntityImportConfig(format, mapping, filePath) {
   if (format === "excel") {
     return compileExcelImportMapping(mapping);
   }
-  const delimiter = isRecord3(mapping) && typeof mapping.delimiter === "string" ? mapping.delimiter : ",";
+  const delimiter = isRecord4(mapping) && typeof mapping.delimiter === "string" ? mapping.delimiter : ",";
   return compileCSVImportMapping(mapping, csvHeadersFromLocalFile(filePath, delimiter));
 }
 async function executeEntityRecordImport(command, runtimeEnv, flags, fetchImpl) {
@@ -19392,8 +20888,8 @@ async function executeEntityRecordImport(command, runtimeEnv, flags, fetchImpl)
   let latest = null;
   while (Date.now() <= deadline) {
     latest = await postEntityImportAction(runtimeEnv, appId, entityId, { _import_action: "get-state", task_id: taskId }, fetchImpl);
-    const payload = isRecord3(latest) && isRecord3(latest.data) ? latest.data : latest;
-    const status = isRecord3(payload) ? payload.status : void 0;
+    const payload = isRecord4(latest) && isRecord4(latest.data) ? latest.data : latest;
+    const status = isRecord4(payload) ? payload.status : void 0;
     if (status === "finished") {
       return {
         kind: "result",
@@ -19416,11 +20912,11 @@ async function executeEntityRecordImport(command, runtimeEnv, flags, fetchImpl)
 function extractCreatedTableID(value) {
   const candidates = [
     value,
-    isRecord3(value) ? value.data : void 0,
-    isRecord3(value) && isRecord3(value.data) ? value.data.data : void 0
+    isRecord4(value) ? value.data : void 0,
+    isRecord4(value) && isRecord4(value.data) ? value.data.data : void 0
   ];
   for (const candidate of candidates) {
-    if (isRecord3(candidate) && typeof candidate.id === "number") {
+    if (isRecord4(candidate) && typeof candidate.id === "number") {
       return candidate.id;
     }
   }
@@ -19434,7 +20930,7 @@ function normalizeTableCreateSchemaBody(body, appId, tableId) {
     app_id: Number.isFinite(Number(appId)) ? Number(appId) : body.app_id,
     schema_version: typeof body.schema_version === "number" ? body.schema_version : 0,
     layout: Array.isArray(body.layout) ? body.layout : [],
-    options: isRecord3(body.options) ? body.options : { Buttons: [], CustomActions: [], FrontendEvents: [], TitleFormat: { Fields: [], Parts: [], Body: "" }, misc: {} },
+    options: isRecord4(body.options) ? body.options : { Buttons: [], CustomActions: [], FrontendEvents: [], TitleFormat: { Fields: [], Parts: [], Body: "" }, misc: {} },
     workflow_enabled: typeof body.workflow_enabled === "boolean" ? body.workflow_enabled : false
   };
 }
@@ -19443,7 +20939,7 @@ async function executeTableCreateWithSchema(command, runtimeEnv, flags, body, fe
   if (!appId) {
     throw new CLIError("MISSING_PATH_FLAG", "missing required flag --app-id", 2);
   }
-  if (!isRecord3(body)) {
+  if (!isRecord4(body)) {
     throw new CLIError("BODY_VALIDATION_FAILED", "table create body must be an object", 2);
   }
   const createBody = {
@@ -19513,6 +21009,16 @@ async function executeCLI(scope, argv, env, fetchImpl = fetch) {
     }
     return { kind: "help", text: renderRootHelp(scope) };
   }
+  if (isDevSDKGenCommand(scope, moduleName, commandName)) {
+    if (hasFlag(parsed.flags, "help")) {
+      return { kind: "help", text: renderDevSDKGenHelp() };
+    }
+    const runtimeEnv2 = env ?? loadRuntimeEnv(scope);
+    return executeDevSDKGen(runtimeEnv2, parsed.flags, fetchImpl);
+  }
+  if (scope === "admin" && moduleName === "dev" && !commandName) {
+    return { kind: "help", text: renderDevModuleHelp() };
+  }
   const singleTokenCommand = !commandName ? findCommand(scope, moduleName) : null;
   if (!commandName && !singleTokenCommand) {
     if (hasFlag(parsed.flags, "help-examples")) {
@@ -19575,7 +21081,7 @@ async function executeCLI(scope, argv, env, fetchImpl = fetch) {
     if (isTableCreateCommand(scope, command)) {
       requireTableCreateSchemaBody(scope, command, body, runtimeEnv);
       validateActionSpecificRawBody(scope, command, body, runtimeEnv);
-      const { parent: _parent, ...schemaBody } = isRecord3(body) ? body : {};
+      const { parent: _parent, ...schemaBody } = isRecord4(body) ? body : {};
       const parsedBody = getBodySchema("EntitySaveReqVO")?.safeParse(schemaBody);
       if (!parsedBody?.success) {
         const message = parsedBody ? parsedBody.error.issues.map((issue2) => `${issue2.path.join(".")}: ${issue2.message}`).join("; ") : "EntitySaveReqVO schema is not available";