@carthooks/arcubase-cli 0.1.24 → 0.1.25

package/dist/runtime/dev_sdk_gen.js

@@ -1,319 +1,13 @@
+import { ArcubaseCodeGenError, generateArcubaseProjectSDK as generateArcubaseProjectSDKCore, } from '@arcubase/code-gen';
 import { CLIError } from './errors.js';
-function isRecord(value) {
-    return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
-}
-function unwrapData(payload) {
-    return isRecord(payload) && 'data' in payload ? payload.data : payload;
-}
-function toPascalCase(value) {
-    const words = value
-        .replace(/([a-z0-9])([A-Z])/g, '$1 $2')
-        .split(/[^A-Za-z0-9]+/)
-        .filter(Boolean);
-    if (words.length === 0)
-        return 'Entity';
-    return words.map((word) => `${word[0].toUpperCase()}${word.slice(1)}`).join('');
-}
-function toCamelCase(value) {
-    const pascal = toPascalCase(value);
-    return `${pascal[0].toLowerCase()}${pascal.slice(1)}`;
-}
-function sanitizeEntityKey(entity) {
-    const fallback = entity.sdkName || `entity_${entity.id}`;
-    return toCamelCase(fallback) === 'entity' ? `entity${entity.id}` : toCamelCase(fallback);
-}
-function normalizeFieldType(type) {
-    switch (type) {
-        case 'number':
-            return 'number';
-        case 'boolean':
-            return 'boolean';
-        case 'select':
-        case 'radio':
-        case 'checkbox':
-        case 'status':
-            return 'number | string';
-        case 'file':
-        case 'image':
-        case 'member':
-        case 'members':
-        case 'department':
-        case 'departments':
-        case 'linkto':
-        case 'relation':
-        case 'relationfield':
-        case 'subform':
-            return 'unknown';
-        default:
-            return 'string';
-    }
-}
-function normalizeEntities(payload) {
-    const root = unwrapData(payload);
-    if (!isRecord(root)) {
-        throw new CLIError('SDK_GEN_INVALID_SCHEMA', 'sdk-gen expected an app detail object', 2);
-    }
-    const appId = typeof root.id === 'number' ? root.id : typeof root.app_id === 'number' ? root.app_id : undefined;
-    if (!appId) {
-        throw new CLIError('SDK_GEN_APP_ID_REQUIRED', 'sdk-gen expected app id in app detail response', 2);
-    }
-    const sourceEntities = Array.isArray(root.entities)
-        ? root.entities
-        : Array.isArray(root.tables)
-            ? root.tables
-            : Array.isArray(root.entitys)
-                ? root.entitys
-                : [];
-    const entities = sourceEntities
-        .filter((item) => isRecord(item))
-        .filter((item) => typeof item.id === 'number' && typeof item.name === 'string')
-        .map((item) => {
-        const fields = Array.isArray(item.fields)
-            ? item.fields
-                .filter((field) => isRecord(field))
-                .filter((field) => typeof field.id === 'number' && typeof field.label === 'string' && typeof field.type === 'string')
-                .map((field) => ({
-                id: field.id,
-                label: field.label,
-                key: typeof field.key === 'string' ? field.key.trim() : '',
-                type: field.type,
-                required: field.required === true,
-                options: isRecord(field.options) ? field.options : undefined,
-            }))
-            : [];
-        const entity = {
-            appId,
-            id: item.id,
-            name: item.name,
-            sdkName: typeof item.key === 'string' && item.key.trim() ? item.key.trim() : '',
-            fields,
-        };
-        entity.sdkName = sanitizeEntityKey(entity);
-        return entity;
-    });
-    if (entities.length === 0) {
-        throw new CLIError('SDK_GEN_NO_ENTITIES', 'sdk-gen could not find entities in app detail response', 2);
+export function generateArcubaseProjectSDK(payload) {
+    try {
+        return generateArcubaseProjectSDKCore(payload);
     }
-    validateEntities(entities);
-    return entities;
-}
-function validateEntities(entities) {
-    const entityKeys = new Set();
-    for (const entity of entities) {
-        if (entityKeys.has(entity.sdkName)) {
-            throw new CLIError('SDK_GEN_DUPLICATE_ENTITY_KEY', `duplicate generated entity key: ${entity.sdkName}`, 2);
-        }
-        entityKeys.add(entity.sdkName);
-        const fieldKeys = new Set();
-        for (const field of entity.fields) {
-            if (!field.key) {
-                throw new CLIError('SDK_GEN_FIELD_KEY_REQUIRED', `field.key is required for ${entity.name}.${field.label} (${field.id})`, 2);
-            }
-            if (!/^[A-Za-z][A-Za-z0-9_]*$/.test(field.key)) {
-                throw new CLIError('SDK_GEN_INVALID_FIELD_KEY', `field.key must be a TypeScript identifier: ${entity.name}.${field.key}`, 2);
-            }
-            if (fieldKeys.has(field.key)) {
-                throw new CLIError('SDK_GEN_DUPLICATE_FIELD_KEY', `duplicate field.key in ${entity.name}: ${field.key}`, 2);
-            }
-            fieldKeys.add(field.key);
+    catch (error) {
+        if (error instanceof ArcubaseCodeGenError) {
+            throw new CLIError(error.code, error.message, 2);
         }
+        throw error;
     }
 }
-function emitRuntime() {
-    return `export type ArcubaseSdkConfig = {
-  baseURL: string
-  accessToken?: string
-  refreshToken?: string
-}
-
-export type ArcubaseRow<TFields> = {
-  id: number
-  title?: string
-  fields: TFields
-  raw: Record<string, any>
-}
-
-export type ArcubaseRuntime = {
-  config: ArcubaseSdkConfig
-  request<T>(method: string, endpoint: string, body?: unknown): Promise<T>
-}
-
-type ArcubaseEnvelope<T> = {
-  data?: T
-  error?: { message?: string; key?: string; type?: string }
-}
-
-export function createRuntime(config: ArcubaseSdkConfig): ArcubaseRuntime {
-  let accessToken = config.accessToken ?? ''
-  let refreshToken = config.refreshToken ?? ''
-
-  async function request<T>(method: string, endpoint: string, body?: unknown): Promise<T> {
-    const baseURL = config.baseURL.endsWith('/') ? config.baseURL : \`\${config.baseURL}/\`
-    const response = await fetch(new URL(endpoint.replace(/^\\/+/, ''), baseURL).toString(), {
-      method,
-      headers: {
-        'Content-Type': 'application/json',
-        ...(accessToken ? { Authorization: \`Bearer \${accessToken}\` } : {}),
-      },
-      body: body === undefined ? undefined : JSON.stringify(body),
-    })
-    const payload = await response.json().catch(() => null) as ArcubaseEnvelope<T> | null
-    if (!response.ok || payload?.error) {
-      throw new Error(payload?.error?.message ?? \`Arcubase request failed: \${response.status}\`)
-    }
-    return payload?.data as T
-  }
-
-  return {
-    config: { ...config, accessToken, refreshToken },
-    request,
-  }
-}
-`;
-}
-function emitSchema(entities) {
-    const schema = {
-        entities: Object.fromEntries(entities.map((entity) => [
-            entity.sdkName,
-            {
-                entityId: entity.id,
-                name: entity.name,
-                fields: Object.fromEntries(entity.fields.map((field) => [
-                    field.key,
-                    {
-                        fieldId: field.id,
-                        label: field.label,
-                        type: field.type,
-                        required: field.required,
-                    },
-                ])),
-            },
-        ])),
-    };
-    return `export const arcubaseSchema = ${JSON.stringify(schema, null, 2)} as const
-
-export type ArcubaseEntityKey = keyof typeof arcubaseSchema.entities
-`;
-}
-function emitEntity(entity) {
-    const typeName = toPascalCase(entity.sdkName);
-    const fieldLines = entity.fields.map((field) => {
-        const optional = field.required ? '' : '?';
-        return `  ${field.key}${optional}: ${normalizeFieldType(field.type)}`;
-    });
-    const fieldMapLines = entity.fields.map((field) => `  ${field.key}: ${field.id},`);
-    return `import type { ArcubaseRuntime, ArcubaseRow } from '../runtime.js'
-
-export type ${typeName}Fields = {
-${fieldLines.join('\n')}
-}
-
-export type ${typeName}CreateInput = ${typeName}Fields
-export type ${typeName}UpdateInput = Partial<${typeName}Fields>
-
-const entityId = ${entity.id}
-const fieldIds = {
-${fieldMapLines.join('\n')}
-} as const
-
-function toArcubaseFields(fields: Partial<${typeName}Fields>): Record<string, any> {
-  const out: Record<string, any> = {}
-  for (const [key, value] of Object.entries(fields)) {
-    if (value === undefined) continue
-    const fieldId = fieldIds[key as keyof typeof fieldIds]
-    if (!fieldId) {
-      throw new Error(\`Unknown ${entity.sdkName} field: \${key}\`)
-    }
-    out[String(fieldId)] = value
-  }
-  return out
-}
-
-function fromArcubaseFields(raw: Record<string, any> | undefined): ${typeName}Fields {
-  const out: Record<string, any> = {}
-  const source = raw ?? {}
-  for (const [key, fieldId] of Object.entries(fieldIds)) {
-    if (String(fieldId) in source) {
-      out[key] = source[String(fieldId)]
-    }
-  }
-  return out as ${typeName}Fields
-}
-
-function mapRow(raw: Record<string, any>): ArcubaseRow<${typeName}Fields> {
-  return {
-    id: Number(raw.id),
-    title: typeof raw.title === 'string' ? raw.title : undefined,
-    fields: fromArcubaseFields(raw.fields),
-    raw,
-  }
-}
-
-export function create${typeName}SDK(runtime: ArcubaseRuntime) {
-  return {
-    async create(fields: ${typeName}CreateInput): Promise<number> {
-      return runtime.request<number>('POST', \`/entity/${entity.appId}/\${entityId}/insert\`, {
-        fields: toArcubaseFields(fields),
-      })
-    },
-
-    async update(rowId: string | number, fields: ${typeName}UpdateInput): Promise<boolean> {
-      const data = toArcubaseFields(fields)
-      return runtime.request<boolean>('PUT', \`/entity/${entity.appId}/\${entityId}/row/\${rowId}\`, {
-        data,
-        changed_fields: Object.keys(data).map((fieldId) => Number(fieldId)),
-      })
-    },
-
-    async get(rowId: string | number): Promise<ArcubaseRow<${typeName}Fields>> {
-      const data = await runtime.request<{ record?: Record<string, any> }>('GET', \`/entity/${entity.appId}/\${entityId}/row/\${rowId}\`)
-      return mapRow(data.record ?? {})
-    },
-
-    async query(params: { limit?: number; offset?: number; search?: Record<string, any> } = {}): Promise<{ items: ArcubaseRow<${typeName}Fields>[]; total?: number }> {
-      const data = await runtime.request<{ items?: Record<string, any>[]; total?: number }>('POST', \`/entity/${entity.appId}/\${entityId}/data-query\`, params)
-      return {
-        items: (data.items ?? []).map(mapRow),
-        total: data.total,
-      }
-    },
-  }
-}
-`;
-}
-function emitClient(entities) {
-    const imports = entities.map((entity) => {
-        const typeName = toPascalCase(entity.sdkName);
-        return `import { create${typeName}SDK } from './entities/${entity.sdkName}.js'`;
-    });
-    const properties = entities.map((entity) => `    ${entity.sdkName}: create${toPascalCase(entity.sdkName)}SDK(runtime),`);
-    return `import { createRuntime, type ArcubaseSdkConfig } from './runtime.js'
-${imports.join('\n')}
-
-export function createArcubaseSdk(config: ArcubaseSdkConfig) {
-  const runtime = createRuntime(config)
-  return {
-${properties.join('\n')}
-  }
-}
-`;
-}
-function emitIndex(entities) {
-    return `export { createArcubaseSdk } from './client.js'
-export type { ArcubaseSdkConfig, ArcubaseRow } from './runtime.js'
-export { arcubaseSchema } from './schema.js'
-${entities.map((entity) => `export type { ${toPascalCase(entity.sdkName)}Fields, ${toPascalCase(entity.sdkName)}CreateInput, ${toPascalCase(entity.sdkName)}UpdateInput } from './entities/${entity.sdkName}.js'`).join('\n')}
-`;
-}
-export function generateArcubaseProjectSDK(payload) {
-    const entities = normalizeEntities(payload);
-    return {
-        files: [
-            { path: 'runtime.ts', contents: emitRuntime() },
-            { path: 'schema.ts', contents: emitSchema(entities) },
-            ...entities.map((entity) => ({ path: `entities/${entity.sdkName}.ts`, contents: emitEntity(entity) })),
-            { path: 'client.ts', contents: emitClient(entities) },
-            { path: 'index.ts', contents: emitIndex(entities) },
-        ],
-    };
-}

package/dist/runtime/execute.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execute.d.ts","sourceRoot":"","sources":["../../src/runtime/execute.ts"],"names":[],"mappings":"AAGA,OAAO,EAAkB,KAAK,UAAU,EAAE,MAAM,UAAU,CAAA;AAG1D,OAAO,EAAyF,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAShJ,MAAM,MAAM,uBAAuB,GAAG;IACpC,KAAK,EAAE,YAAY,CAAA;IACnB,WAAW,EAAE,SAAS,MAAM,EAAE,CAAA;IAC9B,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;IAC5B,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;CAC9B,CAAA;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAe1D;AAaD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,GAAE,QAAsB,GAAG,MAAM,CAoB7G;AA8BD,KAAK,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;AAUlD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,GAAE,QAAsB,GAAG,MAAM,CA8HpI;AAquED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,uBAAuB,CActH;AAED,wBAAsB,UAAU,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,SAAS,GAAE,OAAO,KAAa,GAAG,OAAO,CAAC,GAAG,CAAC,CAyOrI"}
+{"version":3,"file":"execute.d.ts","sourceRoot":"","sources":["../../src/runtime/execute.ts"],"names":[],"mappings":"AAGA,OAAO,EAAkB,KAAK,UAAU,EAAE,MAAM,UAAU,CAAA;AAG1D,OAAO,EAAyF,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAShJ,MAAM,MAAM,uBAAuB,GAAG;IACpC,KAAK,EAAE,YAAY,CAAA;IACnB,WAAW,EAAE,SAAS,MAAM,EAAE,CAAA;IAC9B,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;IAC5B,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;CAC9B,CAAA;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAe1D;AAaD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,GAAE,QAAsB,GAAG,MAAM,CAoB7G;AA8BD,KAAK,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;AAUlD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,GAAE,QAAsB,GAAG,MAAM,CA8HpI;AA6sED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,uBAAuB,CActH;AAED,wBAAsB,UAAU,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,SAAS,GAAE,OAAO,KAAa,GAAG,OAAO,CAAC,GAAG,CAAC,CAyOrI"}

package/dist/runtime/execute.js

@@ -267,7 +267,7 @@ function renderDevSDKGenHelp() {
         '  - arcubase-admin dev sdk-gen --app-id <app_id> --out src/arcubase',
         '',
         'requirements:',
-        '  - missing field.key values are initialized through admin auth as field<id>',
+        '  - every generated field must have a configured field.key; sdk-gen fails fast when keys are missing',
         '  - existing field.key values must be stable unique TypeScript identifiers',
         '  - entity property names use entity.key when available, otherwise a stable entity<id> fallback',
         '  - generated code accepts createArcubaseSdk({ baseURL, accessToken, refreshToken })',
@@ -1647,45 +1647,37 @@ function walkSDKGenFields(fields, visit) {
         walkSDKGenFields(field.children, visit);
     }
 }
-function collectExistingSDKGenFieldKeys(entity) {
-    const keys = new Set();
-    walkSDKGenFields(entity.fields, (field) => {
-        if (typeof field.key === 'string' && field.key.trim() !== '') {
-            keys.add(field.key.trim());
-        }
-    });
-    return keys;
-}
-function nextSDKGenFallbackFieldKey(fieldId, usedKeys) {
-    const base = `field${fieldId}`;
-    if (!usedKeys.has(base)) {
-        usedKeys.add(base);
-        return base;
-    }
-    let index = 2;
-    while (usedKeys.has(`${base}_${index}`)) {
-        index++;
-    }
-    const key = `${base}_${index}`;
-    usedKeys.add(key);
-    return key;
-}
-function initializeMissingSDKGenFieldKeys(entity) {
-    const usedKeys = collectExistingSDKGenFieldKeys(entity);
-    const updates = [];
+function assertSDKGenFieldKeysPresent(entity) {
+    const missing = [];
     walkSDKGenFields(entity.fields, (field) => {
         if (typeof field.id !== 'number') {
             return;
         }
         if (typeof field.key === 'string' && field.key.trim() !== '') {
-            field.key = field.key.trim();
             return;
         }
-        const key = nextSDKGenFallbackFieldKey(field.id, usedKeys);
-        field.key = key;
-        updates.push({ id: field.id, key });
+        missing.push({
+            id: field.id,
+            label: typeof field.label === 'string' && field.label.trim() ? field.label.trim() : `field ${field.id}`,
+        });
+    });
+    if (missing.length === 0) {
+        return;
+    }
+    const entityName = typeof entity.name === 'string' && entity.name.trim() ? entity.name.trim() : `entity ${String(entity.id ?? '')}`.trim();
+    const preview = missing.slice(0, 8).map((field) => `${entityName}.${field.label} (${field.id})`);
+    const suffix = missing.length > preview.length ? `, and ${missing.length - preview.length} more` : '';
+    throw new CLIError('SDK_GEN_FIELD_KEY_REQUIRED', `missing field.key values: ${preview.join(', ')}${suffix}`, 2, {
+        operation: 'dev sdk-gen',
+        issues: missing.map((field) => ({
+            path: `entity.${String(entity.id ?? 'unknown')}.field.${field.id}.key`,
+            message: `field.key is required for ${entityName}.${field.label}`,
+        })),
+        suggestions: [
+            'set stable field.key values in Arcubase admin before running sdk-gen',
+            'rerun arcubase-admin dev sdk-gen after the schema keys are complete',
+        ],
     });
-    return updates;
 }
 async function executeDevSDKGen(runtimeEnv, flags, fetchImpl) {
     validateDevSDKGenFlags(flags);
@@ -1714,7 +1706,6 @@ async function executeDevSDKGen(runtimeEnv, flags, fetchImpl) {
         throw new CLIError('SDK_GEN_NO_ENTITIES', 'sdk-gen could not find entities in app detail response', 2);
     }
     const entities = [];
-    const initializedFieldKeys = [];
     for (const entityRef of entityRefs) {
         const entityEndpoint = `/api/apps/${encodeURIComponent(appId)}/entity/${encodeURIComponent(entityRef.id)}`;
         const entityDetail = await requestJSON(runtimeEnv, 'GET', entityEndpoint, undefined, fetchImpl);
@@ -1722,15 +1713,7 @@ async function executeDevSDKGen(runtimeEnv, flags, fetchImpl) {
         if (!isRecord(entityPayload)) {
             throw new CLIError('SDK_GEN_INVALID_SCHEMA', 'sdk-gen expected entity detail response data', 2);
         }
-        const customKeyUpdates = initializeMissingSDKGenFieldKeys(entityPayload);
-        if (customKeyUpdates.length > 0) {
-            const customKeysEndpoint = `/api/apps/${encodeURIComponent(appId)}/entity/${encodeURIComponent(entityRef.id)}/custom-keys`;
-            await requestJSON(runtimeEnv, 'PUT', customKeysEndpoint, customKeyUpdates, fetchImpl);
-            initializedFieldKeys.push({
-                entityId: typeof entityPayload.id === 'number' ? entityPayload.id : Number(entityRef.id),
-                fields: customKeyUpdates.map((item) => item.key),
-            });
-        }
+        assertSDKGenFieldKeysPresent(entityPayload);
         entities.push(entityPayload);
     }
     const generated = generateArcubaseProjectSDK({
@@ -1754,7 +1737,6 @@ async function executeDevSDKGen(runtimeEnv, flags, fetchImpl) {
         data: {
             out: absoluteOutDir,
             files: generated.files.map((file) => file.path),
-            initializedFieldKeys,
         },
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@carthooks/arcubase-cli",
-  "version": "0.1.24",
+  "version": "0.1.25",
   "description": "Arcubase runtime CLI for admin and user command execution",
   "type": "module",
   "main": "./dist/index.js",
@@ -31,6 +31,7 @@
     "docs:llms": "node -e \"\""
   },
   "dependencies": {
+    "@arcubase/code-gen": "^0.1.0",
     "@carthooks/client-ts": "0.8.0",
     "zod": "^4.4.3"
   },

package/sdk-dist/docs/runtime-reference/dev-sdk-gen.md

@@ -8,10 +8,16 @@ arcubase-admin dev sdk-gen \
   --out src/arcubase
 ```
 
-The command reads the app schema from Arcubase through the normal `arcubase-admin` runtime auth and writes project-local source files under `--out`.
+The command reads the app schema from Arcubase through the normal
+`arcubase-admin` runtime auth and writes project-local source files under
+`--out`. This is the direct Arcubase admin/runtime path.
+
+Workbench local ordinary-user codegen must not receive Arcubase admin tokens.
+It should use the BotWorks Host/JCode schema flow documented in
+`docs/design/workbench/03-workbench-vibe-coding-arcubase-codegen.md`.
 
 Generated code is key based. Application code uses stable `field.key` names, while generated runtime code converts those keys to internal numeric field ids.
-If a field is missing `field.key`, the command initializes it through `PUT /api/apps/:app_id/entity/:entity_id/custom-keys` with a stable `field<id>` fallback before generation.
+If any field is missing `field.key`, the command fails before generation and prints the missing fields. Set stable keys in Arcubase admin, then rerun the command.
 
 ```ts
 import { createArcubaseSdk } from './arcubase'
@@ -31,9 +37,14 @@ await sdk.story.update(rowId, {
 })
 ```
 
+The direct `baseURL` and token construction above is for direct Arcubase
+runtime consumers. Workbench browser runtime should wrap generated SDK calls
+with BotWorks Workbench auth and the Host Arcubase proxy instead of exposing
+Arcubase runtime credentials in browser code.
+
 Rules:
 
-- missing `field.key` values are initialized through admin auth as `field<id>`
+- every visible SDK field must have a configured `field.key`; sdk-gen does not invent fallback keys
 - existing `field.key` values must be stable unique TypeScript identifiers
 - `field.key` is a developer API contract and should not track display labels
 - entity property names use `entity.key` when available, otherwise a stable `entity<id>` fallback