@carthooks/arcubase-cli 0.1.24 → 0.1.26

package/bundle/arcubase-admin.mjs

@@ -16529,10 +16529,10 @@ var PermitFieldPermitSchema = external_exports.lazy(() => external_exports.objec
 var PermitPolicySchema = external_exports.lazy(() => external_exports.object({ "actions": external_exports.array(external_exports.string()).optional(), "all_fields_read": external_exports.boolean().optional(), "all_fields_write": external_exports.boolean().optional(), "condition": PermitConditionSetSchema.optional(), "description": external_exports.string().optional(), "fields": external_exports.array(PermitFieldPermitSchema).optional(), "id": external_exports.string().optional(), "key": external_exports.string().optional(), "name": external_exports.string().optional() }).strict());
 var PermitUserScopeSchema = external_exports.lazy(() => external_exports.object({ "data": external_exports.object({ "name": external_exports.string().optional() }).strict().optional(), "id": external_exports.number().optional(), "type": external_exports.string().optional() }).strict());
 var EntityIngressOptionsSchema = external_exports.lazy(() => external_exports.object({ "i18n_name": I18NTextSchema.optional(), "list_options": PermitEntityListOptionsSchema.optional(), "policy": PermitPolicySchema.optional(), "user_scope": external_exports.array(PermitUserScopeSchema).optional() }).strict());
-var AppIngressBulkApplyItemVOSchema = external_exports.lazy(() => external_exports.object({ "enabled": external_exports.boolean().optional(), "name": external_exports.string().optional(), "options": EntityIngressOptionsSchema.optional(), "rule_id": external_exports.number().optional(), "table_id": external_exports.number().optional(), "type": external_exports.string().optional() }).strict());
+var AppIngressBulkApplyItemVOSchema = external_exports.lazy(() => external_exports.object({ "enabled": external_exports.boolean().optional(), "key": external_exports.string().optional(), "name": external_exports.string().optional(), "options": EntityIngressOptionsSchema.optional(), "rule_id": external_exports.number().optional(), "table_id": external_exports.number().optional(), "type": external_exports.string().optional() }).strict());
 var AppIngressBulkApplyReqVOSchema = external_exports.lazy(() => external_exports.object({ "dry_run": external_exports.boolean().optional(), "items": external_exports.array(AppIngressBulkApplyItemVOSchema).optional(), "mode": external_exports.string().optional() }).strict());
-var AppIngressCreateReqVOSchema = external_exports.lazy(() => external_exports.object({ "enabled": external_exports.boolean().optional(), "entity_id": external_exports.number().optional(), "icon_name": external_exports.string().optional(), "name": external_exports.string().optional(), "options": EntityIngressOptionsSchema.optional(), "type": external_exports.string().optional(), "url": external_exports.string().optional() }).strict());
-var AppIngressUpdateReqVOSchema = external_exports.lazy(() => external_exports.object({ "enabled": external_exports.boolean().optional(), "name": external_exports.string().optional(), "options": EntityIngressOptionsSchema.optional(), "update": external_exports.array(external_exports.string()).optional() }).strict());
+var AppIngressCreateReqVOSchema = external_exports.lazy(() => external_exports.object({ "enabled": external_exports.boolean().optional(), "entity_id": external_exports.number().optional(), "icon_name": external_exports.string().optional(), "key": external_exports.string().optional(), "name": external_exports.string().optional(), "options": EntityIngressOptionsSchema.optional(), "type": external_exports.string().optional(), "url": external_exports.string().optional() }).strict());
+var AppIngressUpdateReqVOSchema = external_exports.lazy(() => external_exports.object({ "enabled": external_exports.boolean().optional(), "key": external_exports.string().optional(), "name": external_exports.string().optional(), "options": EntityIngressOptionsSchema.optional(), "update": external_exports.array(external_exports.string()).optional() }).strict());
 var WidgetsTypeCodeSchema = external_exports.lazy(() => external_exports.union([external_exports.literal(1), external_exports.literal(2)]));
 var WidgetsTypeSchema = external_exports.lazy(() => external_exports.object({ "dashboard_id": external_exports.number().optional(), "ingress_id": external_exports.number().optional(), "type": WidgetsTypeCodeSchema.optional() }).strict());
 var AppNewWidgetsReqVOSchema = external_exports.lazy(() => external_exports.object({ "options": WidgetsTypeSchema.optional(), "type": external_exports.string().optional() }).strict());
@@ -18690,6 +18690,7 @@ function renderCommandHelpExamples(scope, command) {
 }
 
 // src/runtime/dev_sdk_gen.ts
+var identifierPattern = /^[A-Za-z][A-Za-z0-9_]*$/;
 function isRecord3(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
@@ -18698,17 +18699,9 @@ function unwrapData(payload) {
 }
 function toPascalCase(value) {
   const words = value.replace(/([a-z0-9])([A-Z])/g, "$1 $2").split(/[^A-Za-z0-9]+/).filter(Boolean);
-  if (words.length === 0) return "Entity";
+  if (words.length === 0) return "Ingress";
   return words.map((word) => `${word[0].toUpperCase()}${word.slice(1)}`).join("");
 }
-function toCamelCase(value) {
-  const pascal = toPascalCase(value);
-  return `${pascal[0].toLowerCase()}${pascal.slice(1)}`;
-}
-function sanitizeEntityKey(entity) {
-  const fallback = entity.sdkName || `entity_${entity.id}`;
-  return toCamelCase(fallback) === "entity" ? `entity${entity.id}` : toCamelCase(fallback);
-}
 function normalizeFieldType(type) {
   switch (type) {
     case "number":
@@ -18735,65 +18728,122 @@ function normalizeFieldType(type) {
       return "string";
   }
 }
-function normalizeEntities(payload) {
+function normalizeField(field) {
+  if (typeof field.id !== "number" || typeof field.label !== "string" || typeof field.type !== "string") {
+    return void 0;
+  }
+  const children = Array.isArray(field.children) ? field.children.filter((child) => isRecord3(child)).map(normalizeField).filter((child) => Boolean(child)) : void 0;
+  return {
+    id: field.id,
+    label: field.label,
+    key: typeof field.key === "string" ? field.key.trim() : "",
+    type: field.type,
+    required: field.required === true,
+    options: isRecord3(field.options) ? field.options : void 0,
+    children
+  };
+}
+function normalizeEntity(payload, appId) {
+  if (!isRecord3(payload) || typeof payload.id !== "number" || typeof payload.name !== "string") {
+    throw new CLIError("SDK_GEN_INVALID_SCHEMA", "sdk-gen expected ingress.entity with id and name", 2);
+  }
+  const fields = Array.isArray(payload.fields) ? payload.fields.filter((field) => isRecord3(field)).map(normalizeField).filter((field) => Boolean(field)) : [];
+  return {
+    appId,
+    id: payload.id,
+    name: payload.name,
+    fields
+  };
+}
+function normalizeActions(ingress) {
+  const policy = isRecord3(ingress.policy) ? ingress.policy : isRecord3(ingress.options) && isRecord3(ingress.options.policy) ? ingress.options.policy : void 0;
+  const source = Array.isArray(ingress.actions) ? ingress.actions : Array.isArray(policy?.actions) ? policy.actions : [];
+  return source.filter((action) => typeof action === "string" && action.trim() !== "").map((action) => action.trim());
+}
+function normalizeIngresses(payload) {
   const root = unwrapData(payload);
   if (!isRecord3(root)) {
-    throw new CLIError("SDK_GEN_INVALID_SCHEMA", "sdk-gen expected an app detail object", 2);
+    throw new CLIError("SDK_GEN_INVALID_SCHEMA", "sdk-gen expected an app ingress schema object", 2);
   }
   const appId = typeof root.id === "number" ? root.id : typeof root.app_id === "number" ? root.app_id : void 0;
   if (!appId) {
-    throw new CLIError("SDK_GEN_APP_ID_REQUIRED", "sdk-gen expected app id in app detail response", 2);
+    throw new CLIError("SDK_GEN_APP_ID_REQUIRED", "sdk-gen expected app id in schema payload", 2);
   }
-  const sourceEntities = Array.isArray(root.entities) ? root.entities : Array.isArray(root.tables) ? root.tables : Array.isArray(root.entitys) ? root.entitys : [];
-  const entities = sourceEntities.filter((item) => isRecord3(item)).filter((item) => typeof item.id === "number" && typeof item.name === "string").map((item) => {
-    const fields = Array.isArray(item.fields) ? item.fields.filter((field) => isRecord3(field)).filter((field) => typeof field.id === "number" && typeof field.label === "string" && typeof field.type === "string").map((field) => ({
-      id: field.id,
-      label: field.label,
-      key: typeof field.key === "string" ? field.key.trim() : "",
-      type: field.type,
-      required: field.required === true,
-      options: isRecord3(field.options) ? field.options : void 0
-    })) : [];
-    const entity = {
+  const sourceIngresses = Array.isArray(root.ingresses) ? root.ingresses : [];
+  if (sourceIngresses.length === 0) {
+    throw new CLIError("SDK_GEN_NO_INGRESSES", "sdk-gen could not find ingresses in schema payload", 2);
+  }
+  const ingresses = sourceIngresses.filter((item) => isRecord3(item)).map((item) => {
+    const entity = normalizeEntity(item.entity, appId);
+    const options = isRecord3(item.options) ? item.options : {};
+    const hashId = typeof item.hash_id === "string" ? item.hash_id.trim() : typeof item.hashId === "string" ? item.hashId.trim() : "";
+    return {
       appId,
-      id: item.id,
-      name: item.name,
-      sdkName: typeof item.key === "string" && item.key.trim() ? item.key.trim() : "",
-      fields
+      id: typeof item.id === "number" ? item.id : void 0,
+      hashId,
+      key: typeof item.key === "string" ? item.key.trim() : "",
+      name: typeof item.name === "string" && item.name.trim() ? item.name.trim() : String(item.key ?? ""),
+      actions: normalizeActions(item),
+      entity,
+      listOptions: isRecord3(options.list_options) ? options.list_options : isRecord3(item.list_options) ? item.list_options : void 0
     };
-    entity.sdkName = sanitizeEntityKey(entity);
-    return entity;
   });
-  if (entities.length === 0) {
-    throw new CLIError("SDK_GEN_NO_ENTITIES", "sdk-gen could not find entities in app detail response", 2);
+  validateIngresses(ingresses);
+  return ingresses;
+}
+function walkFields(fields, visit) {
+  for (const field of fields) {
+    visit(field);
+    if (field.children && field.children.length > 0) {
+      walkFields(field.children, visit);
+    }
   }
-  validateEntities(entities);
-  return entities;
 }
-function validateEntities(entities) {
-  const entityKeys = /* @__PURE__ */ new Set();
-  for (const entity of entities) {
-    if (entityKeys.has(entity.sdkName)) {
-      throw new CLIError("SDK_GEN_DUPLICATE_ENTITY_KEY", `duplicate generated entity key: ${entity.sdkName}`, 2);
+function allFields(entity) {
+  const out = [];
+  walkFields(entity.fields, (field) => out.push(field));
+  return out;
+}
+function validateIngresses(ingresses) {
+  const ingressKeys = /* @__PURE__ */ new Set();
+  for (const ingress of ingresses) {
+    if (!ingress.key) {
+      throw new CLIError("SDK_GEN_INGRESS_KEY_REQUIRED", `ingress.key is required for ${ingress.name || "unnamed ingress"}`, 2);
+    }
+    if (!identifierPattern.test(ingress.key)) {
+      throw new CLIError("SDK_GEN_INVALID_INGRESS_KEY", `ingress.key must be a TypeScript identifier: ${ingress.key}`, 2);
+    }
+    if (ingressKeys.has(ingress.key)) {
+      throw new CLIError("SDK_GEN_DUPLICATE_INGRESS_KEY", `duplicate ingress.key: ${ingress.key}`, 2);
+    }
+    ingressKeys.add(ingress.key);
+    if (!ingress.hashId) {
+      throw new CLIError("SDK_GEN_INGRESS_HASH_ID_REQUIRED", `ingress.hash_id is required for ${ingress.key}`, 2);
     }
-    entityKeys.add(entity.sdkName);
     const fieldKeys = /* @__PURE__ */ new Set();
-    for (const field of entity.fields) {
+    for (const field of allFields(ingress.entity)) {
       if (!field.key) {
-        throw new CLIError("SDK_GEN_FIELD_KEY_REQUIRED", `field.key is required for ${entity.name}.${field.label} (${field.id})`, 2);
+        throw new CLIError("SDK_GEN_FIELD_KEY_REQUIRED", `field.key is required for ${ingress.entity.name}.${field.label} (${field.id})`, 2);
       }
-      if (!/^[A-Za-z][A-Za-z0-9_]*$/.test(field.key)) {
-        throw new CLIError("SDK_GEN_INVALID_FIELD_KEY", `field.key must be a TypeScript identifier: ${entity.name}.${field.key}`, 2);
+      if (!identifierPattern.test(field.key)) {
+        throw new CLIError("SDK_GEN_INVALID_FIELD_KEY", `field.key must be a TypeScript identifier: ${ingress.entity.name}.${field.key}`, 2);
       }
       if (fieldKeys.has(field.key)) {
-        throw new CLIError("SDK_GEN_DUPLICATE_FIELD_KEY", `duplicate field.key in ${entity.name}: ${field.key}`, 2);
+        throw new CLIError("SDK_GEN_DUPLICATE_FIELD_KEY", `duplicate field.key in ${ingress.entity.name}: ${field.key}`, 2);
       }
       fieldKeys.add(field.key);
     }
   }
 }
+function hasAction(ingress, action) {
+  return ingress.actions.includes(action);
+}
+function methodLines(lines) {
+  return lines.length > 0 ? `${lines.join("\n\n")}
+` : "";
+}
 function emitRuntime() {
-  return `export type ArcubaseSdkConfig = {
+  return `export type ArcubaseClientConfig = {
   baseURL: string
   accessToken?: string
   refreshToken?: string
@@ -18807,7 +18857,6 @@ export type ArcubaseRow<TFields> = {
 }
 
 export type ArcubaseRuntime = {
-  config: ArcubaseSdkConfig
   request<T>(method: string, endpoint: string, body?: unknown): Promise<T>
 }
 
@@ -18816,7 +18865,7 @@ type ArcubaseEnvelope<T> = {
   error?: { message?: string; key?: string; type?: string }
 }
 
-export function createRuntime(config: ArcubaseSdkConfig): ArcubaseRuntime {
+export function createRuntime(config: ArcubaseClientConfig): ArcubaseRuntime {
   let accessToken = config.accessToken ?? ''
   let refreshToken = config.refreshToken ?? ''
 
@@ -18827,6 +18876,7 @@ export function createRuntime(config: ArcubaseSdkConfig): ArcubaseRuntime {
       headers: {
         'Content-Type': 'application/json',
         ...(accessToken ? { Authorization: \`Bearer \${accessToken}\` } : {}),
+        ...(refreshToken ? { 'X-Arcubase-Refresh-Token': refreshToken } : {}),
       },
       body: body === undefined ? undefined : JSON.stringify(body),
     })
@@ -18837,21 +18887,72 @@ export function createRuntime(config: ArcubaseSdkConfig): ArcubaseRuntime {
     return payload?.data as T
   }
 
-  return {
-    config: { ...config, accessToken, refreshToken },
-    request,
+  return { request }
+}
+
+export function toArcubaseFields<T extends Record<string, any>>(fields: Partial<T>, fieldIds: Record<string, number>): Record<string, any> {
+  const out: Record<string, any> = {}
+  for (const [key, value] of Object.entries(fields)) {
+    if (value === undefined) continue
+    const fieldId = fieldIds[key]
+    if (!fieldId) {
+      throw new Error(\`Unknown Arcubase field: \${key}\`)
+    }
+    out[String(fieldId)] = value
+  }
+  return out
+}
+
+export function fromArcubaseFields<T>(raw: Record<string, any> | undefined, fieldIds: Record<string, number>): T {
+  const out: Record<string, any> = {}
+  const source = raw ?? {}
+  for (const [key, fieldId] of Object.entries(fieldIds)) {
+    if (String(fieldId) in source) {
+      out[key] = source[String(fieldId)]
+    }
+  }
+  return out as T
+}
+
+export function toArcubaseColumn(column: string, fieldIds: Record<string, number>): string {
+  return fieldIds[column] ? \`:\${fieldIds[column]}\` : column
+}
+
+export function mapArcubaseCondition(value: unknown, fieldIds: Record<string, number>): unknown {
+  if (Array.isArray(value)) {
+    return value.map((item) => mapArcubaseCondition(item, fieldIds))
+  }
+  if (!value || typeof value !== 'object') {
+    return value
   }
+  const out: Record<string, unknown> = {}
+  for (const [key, child] of Object.entries(value as Record<string, unknown>)) {
+    if (key === 'column' && typeof child === 'string') {
+      out[key] = toArcubaseColumn(child, fieldIds)
+    } else {
+      const mappedKey = fieldIds[key] ? \`:\${fieldIds[key]}\` : key
+      out[mappedKey] = mapArcubaseCondition(child, fieldIds)
+    }
+  }
+  return out
+}
+
+export function mapArcubaseSorts<T extends { column: string; order?: string }>(sorts: T[] | undefined, fieldIds: Record<string, number>): T[] | undefined {
+  return sorts?.map((sort) => ({ ...sort, column: toArcubaseColumn(sort.column, fieldIds) }))
 }
 `;
 }
-function emitSchema(entities) {
+function emitSchema(ingresses) {
   const schema = {
-    entities: Object.fromEntries(entities.map((entity) => [
-      entity.sdkName,
+    ingresses: Object.fromEntries(ingresses.map((ingress) => [
+      ingress.key,
       {
-        entityId: entity.id,
-        name: entity.name,
-        fields: Object.fromEntries(entity.fields.map((field) => [
+        appId: ingress.appId,
+        ingressId: ingress.hashId,
+        entityId: ingress.entity.id,
+        name: ingress.name,
+        actions: ingress.actions,
+        fields: Object.fromEntries(allFields(ingress.entity).map((field) => [
           field.key,
           {
             fieldId: field.id,
@@ -18865,17 +18966,177 @@ function emitSchema(entities) {
   };
   return `export const arcubaseSchema = ${JSON.stringify(schema, null, 2)} as const
 
-export type ArcubaseEntityKey = keyof typeof arcubaseSchema.entities
+export type ArcubaseIngressKey = keyof typeof arcubaseSchema.ingresses
 `;
 }
-function emitEntity(entity) {
-  const typeName = toPascalCase(entity.sdkName);
-  const fieldLines = entity.fields.map((field) => {
+function emitIngress(ingress) {
+  const typeName = toPascalCase(ingress.key);
+  const fields = allFields(ingress.entity);
+  const fieldLines = fields.map((field) => {
     const optional2 = field.required ? "" : "?";
     return `  ${field.key}${optional2}: ${normalizeFieldType(field.type)}`;
   });
-  const fieldMapLines = entity.fields.map((field) => `  ${field.key}: ${field.id},`);
-  return `import type { ArcubaseRuntime, ArcubaseRow } from '../runtime.js'
+  const fieldMapLines = fields.map((field) => `  ${field.key}: ${field.id},`);
+  const methodChunks = [];
+  if (hasAction(ingress, "view")) {
+    methodChunks.push(`    async query(params: ${typeName}QueryParams = {}): Promise<{ items: ArcubaseRow<${typeName}Fields>[]; total?: number; offset?: number; limit?: number }> {
+      const data = await runtime.request<{ items?: Record<string, any>[]; total?: number; offset?: number; limit?: number }>('POST', \`/entity/${ingress.appId}/${ingress.entity.id}/data-query\`, {
+        ...params,
+        policy_id: ingressId,
+        search: mapArcubaseCondition(params.search, fieldIds),
+        sorts: mapArcubaseSorts(params.sorts, fieldIds),
+      })
+      return {
+        items: (data.items ?? []).map(mapRow),
+        total: data.total,
+        offset: data.offset,
+        limit: data.limit,
+      }
+    },
+
+    async get(rowId: string | number): Promise<ArcubaseRow<${typeName}Fields>> {
+      const data = await runtime.request<{ record?: Record<string, any> }>('GET', \`/entity/${ingress.appId}/${ingress.entity.id}/row/\${rowId}?policy_id=\${encodeURIComponent(ingressId)}\`)
+      return mapRow(data.record ?? {})
+    },`);
+  }
+  if (hasAction(ingress, "add")) {
+    methodChunks.push(`    async prepareCreate(): Promise<Record<string, any>> {
+      return runtime.request<Record<string, any>>('POST', \`/entity/${ingress.appId}/${ingress.entity.id}/prepare\`, {
+        policy_id: ingressId,
+      })
+    },
+
+    async create(fields: ${typeName}CreateInput): Promise<number> {
+      return runtime.request<number>('POST', \`/entity/${ingress.appId}/${ingress.entity.id}/insert\`, {
+        fields: toArcubaseFields(fields, fieldIds),
+        policy_id: ingressId,
+      })
+    },`);
+  }
+  if (hasAction(ingress, "edit")) {
+    methodChunks.push(`    async update(rowId: string | number, fields: ${typeName}UpdateInput): Promise<boolean> {
+      const data = toArcubaseFields(fields, fieldIds)
+      return runtime.request<boolean>('PUT', \`/entity/${ingress.appId}/${ingress.entity.id}/row/\${rowId}\`, {
+        data,
+        changed_fields: Object.keys(data).map((fieldId) => Number(fieldId)),
+        policy_id: ingressId,
+      })
+    },`);
+  }
+  if (hasAction(ingress, "delete")) {
+    methodChunks.push(`    async delete(selection: ${typeName}Selection): Promise<{ deleted?: number } | boolean> {
+      return runtime.request<{ deleted?: number } | boolean>('POST', \`/entity/${ingress.appId}/${ingress.entity.id}/delete-item\`, {
+        policy_id: ingressId,
+        selection: toArcubaseSelection(selection),
+      })
+    },`);
+  }
+  if (hasAction(ingress, "bulk_update")) {
+    methodChunks.push(`    async bulkUpdate(selection: ${typeName}Selection, fields: ${typeName}BulkUpdateField[]): Promise<{ updated: number }> {
+      return runtime.request<{ updated: number }>('POST', \`/entity/${ingress.appId}/${ingress.entity.id}/bulk-update\`, {
+        policy_id: ingressId,
+        selection: toArcubaseSelection(selection),
+        fields: fields.map((field) => ({
+          id: fieldIds[field.key],
+          action: field.action,
+        })),
+      })
+    },
+
+    async saveBulkUpdate(input: { name: string; subject: string; fields: ${typeName}BulkUpdateField[] }): Promise<string> {
+      return runtime.request<string>('POST', \`/entity/${ingress.appId}/${ingress.entity.id}/bulk-update-save-as\`, {
+        name: input.name,
+        subject: input.subject,
+        fields: input.fields.map((field) => ({
+          id: fieldIds[field.key],
+          action: field.action,
+        })),
+      })
+    },`);
+  }
+  if (hasAction(ingress, "export")) {
+    methodChunks.push(`    async exportRows(options: ${typeName}ExportOptions = {}): Promise<{ task_id: string }> {
+      const fieldKeys = options.fields ?? Object.keys(fieldIds) as ${typeName}FieldKey[]
+      return runtime.request<{ task_id: string }>('POST', \`/entity/${ingress.appId}/${ingress.entity.id}/export\`, {
+        policy_id: ingressId,
+        props: options.props ?? [],
+        fields: fieldKeys.map((key) => fieldIds[key]),
+        propnames: options.propNames ?? {},
+        options: { has_id: options.hasIdField ?? false },
+      })
+    },
+
+    async exportTask(taskId: string): Promise<Record<string, any>> {
+      return runtime.request<Record<string, any>>('GET', \`/export-task/\${taskId}\`)
+    },`);
+  }
+  if (hasAction(ingress, "batch_print")) {
+    methodChunks.push(`    async batchPrint(selection: ${typeName}Selection, params: { limit?: number; offset?: number } = {}): Promise<{ items?: Record<string, any>[]; total?: number }> {
+      return runtime.request<{ items?: Record<string, any>[]; total?: number }>('POST', \`/entity/${ingress.appId}/${ingress.entity.id}/selection-query/batch_print\`, {
+        ...params,
+        policy_id: ingressId,
+        selection: toArcubaseSelection(selection),
+      })
+    },`);
+  }
+  if (hasAction(ingress, "archive")) {
+    methodChunks.push(`    async archive(selection: ${typeName}Selection): Promise<{ archived?: number } | boolean> {
+      return runtime.request<{ archived?: number } | boolean>('POST', \`/entity/${ingress.appId}/${ingress.entity.id}/selection-query/archive\`, {
+        policy_id: ingressId,
+        selection: toArcubaseSelection(selection),
+      })
+    },`);
+  }
+  if (hasAction(ingress, "tag_manage")) {
+    methodChunks.push(`    tags: {
+      async list(): Promise<string[]> {
+        return runtime.request<string[]>('GET', \`/user-action-entity/${ingress.appId}/${ingress.entity.id}/tag-names\`)
+      },
+      async add(selection: ${typeName}Selection, tagNames: string[]): Promise<Record<string, any>> {
+        return runtime.request<Record<string, any>>('POST', \`/user-action-entity/${ingress.appId}/${ingress.entity.id}/batch-add-tags\`, {
+          policy_id: ingressId,
+          selection: toArcubaseSelection(selection),
+          tag_names: tagNames,
+        })
+      },
+      async remove(selection: ${typeName}Selection, tagNames: string[]): Promise<boolean> {
+        return runtime.request<boolean>('POST', \`/user-action-entity/${ingress.appId}/${ingress.entity.id}/batch-remove-tags\`, {
+          policy_id: ingressId,
+          selection: toArcubaseSelection(selection),
+          tag_names: tagNames,
+        })
+      },
+      async selection(selection: ${typeName}Selection): Promise<string[]> {
+        return runtime.request<string[]>('POST', \`/user-action-entity/${ingress.appId}/${ingress.entity.id}/get-selection-tags\`, {
+          policy_id: ingressId,
+          selection: toArcubaseSelection(selection),
+        })
+      },
+    },`);
+  }
+  const customActions = ingress.actions.filter((action) => !["view", "add", "edit", "delete", "bulk_update", "export", "batch_print", "archive", "tag_manage"].includes(action));
+  if (customActions.length > 0) {
+    methodChunks.push(`    async action(action: ${typeName}CustomAction, payload: Record<string, any> = {}): Promise<Record<string, any>> {
+      if (!allowedActions.includes(action)) {
+        throw new Error(\`Action is not allowed for ${ingress.key}: \${action}\`)
+      }
+      return runtime.request<Record<string, any>>('POST', \`/entity/${ingress.appId}/${ingress.entity.id}/selection-query/\${encodeURIComponent(action)}\`, {
+        ...payload,
+        policy_id: ingressId,
+        selection: payload.selection ? toArcubaseSelection(payload.selection) : undefined,
+      })
+    },`);
+  }
+  return `import {
+  fromArcubaseFields,
+  mapArcubaseCondition,
+  mapArcubaseSorts,
+  toArcubaseFields,
+  type ArcubaseRow,
+  type ArcubaseRuntime,
+} from '../runtime.js'
+
+export type ${typeName}FieldKey = ${fields.map((field) => `'${field.key}'`).join(" | ")}
 
 export type ${typeName}Fields = {
 ${fieldLines.join("\n")}
@@ -18883,110 +19144,123 @@ ${fieldLines.join("\n")}
 
 export type ${typeName}CreateInput = ${typeName}Fields
 export type ${typeName}UpdateInput = Partial<${typeName}Fields>
+export type ${typeName}Action = ${ingress.actions.map((action) => `'${action}'`).join(" | ") || "never"}
+export type ${typeName}CustomAction = ${customActions.map((action) => `'${action}'`).join(" | ") || "never"}
 
-const entityId = ${entity.id}
-const fieldIds = {
-${fieldMapLines.join("\n")}
-} as const
+export type ${typeName}Sort = {
+  column: ${typeName}FieldKey | 'id' | 'created_at' | 'updated_at' | 'creator' | string
+  order: 'asc' | 'desc'
+}
 
-function toArcubaseFields(fields: Partial<${typeName}Fields>): Record<string, any> {
-  const out: Record<string, any> = {}
-  for (const [key, value] of Object.entries(fields)) {
-    if (value === undefined) continue
-    const fieldId = fieldIds[key as keyof typeof fieldIds]
-    if (!fieldId) {
-      throw new Error(\`Unknown ${entity.sdkName} field: \${key}\`)
-    }
-    out[String(fieldId)] = value
-  }
-  return out
+export type ${typeName}QueryParams = {
+  limit?: number
+  offset?: number
+  search?: Record<string, any>
+  sorts?: ${typeName}Sort[]
+  view_mode?: 'normal' | 'deleted' | 'archived'
+  withSubForm?: boolean
 }
 
-function fromArcubaseFields(raw: Record<string, any> | undefined): ${typeName}Fields {
-  const out: Record<string, any> = {}
-  const source = raw ?? {}
-  for (const [key, fieldId] of Object.entries(fieldIds)) {
-    if (String(fieldId) in source) {
-      out[key] = source[String(fieldId)]
-    }
-  }
-  return out as ${typeName}Fields
+export type ${typeName}Selection = {
+  type: 'ids' | 'condition'
+  length?: number
+  ids?: Array<number | string>
+  condition?: Record<string, any>
+  sorts?: ${typeName}Sort[]
+}
+
+export type ${typeName}BulkUpdateField = {
+  key: ${typeName}FieldKey
+  action: Record<string, any>
+}
+
+export type ${typeName}ExportOptions = {
+  fields?: ${typeName}FieldKey[]
+  props?: string[]
+  propNames?: Record<string, string>
+  hasIdField?: boolean
 }
 
+const ingressId = ${JSON.stringify(ingress.hashId)}
+const fieldIds = {
+${fieldMapLines.join("\n")}
+} as const
+const allowedActions = ${JSON.stringify(customActions)} as const
+
 function mapRow(raw: Record<string, any>): ArcubaseRow<${typeName}Fields> {
   return {
     id: Number(raw.id),
     title: typeof raw.title === 'string' ? raw.title : undefined,
-    fields: fromArcubaseFields(raw.fields),
+    fields: fromArcubaseFields<${typeName}Fields>(raw.fields, fieldIds),
     raw,
   }
 }
 
-export function create${typeName}SDK(runtime: ArcubaseRuntime) {
+function toArcubaseSelection(selection: ${typeName}Selection): Record<string, any> {
   return {
-    async create(fields: ${typeName}CreateInput): Promise<number> {
-      return runtime.request<number>('POST', \`/entity/${entity.appId}/\${entityId}/insert\`, {
-        fields: toArcubaseFields(fields),
-      })
-    },
-
-    async update(rowId: string | number, fields: ${typeName}UpdateInput): Promise<boolean> {
-      const data = toArcubaseFields(fields)
-      return runtime.request<boolean>('PUT', \`/entity/${entity.appId}/\${entityId}/row/\${rowId}\`, {
-        data,
-        changed_fields: Object.keys(data).map((fieldId) => Number(fieldId)),
-      })
-    },
-
-    async get(rowId: string | number): Promise<ArcubaseRow<${typeName}Fields>> {
-      const data = await runtime.request<{ record?: Record<string, any> }>('GET', \`/entity/${entity.appId}/\${entityId}/row/\${rowId}\`)
-      return mapRow(data.record ?? {})
-    },
-
-    async query(params: { limit?: number; offset?: number; search?: Record<string, any> } = {}): Promise<{ items: ArcubaseRow<${typeName}Fields>[]; total?: number }> {
-      const data = await runtime.request<{ items?: Record<string, any>[]; total?: number }>('POST', \`/entity/${entity.appId}/\${entityId}/data-query\`, params)
-      return {
-        items: (data.items ?? []).map(mapRow),
-        total: data.total,
-      }
-    },
+    ...selection,
+    condition: mapArcubaseCondition(selection.condition ?? {}, fieldIds),
+    sorts: mapArcubaseSorts(selection.sorts, fieldIds),
   }
 }
+
+export function create${typeName}Ingress(runtime: ArcubaseRuntime) {
+  return {
+${methodLines(methodChunks)}  }
+}
 `;
 }
-function emitClient(entities) {
-  const imports = entities.map((entity) => {
-    const typeName = toPascalCase(entity.sdkName);
-    return `import { create${typeName}SDK } from './entities/${entity.sdkName}.js'`;
+function emitClient(ingresses) {
+  const imports = ingresses.map((ingress) => {
+    const typeName = toPascalCase(ingress.key);
+    return `import { create${typeName}Ingress } from './ingresses/${ingress.key}.js'`;
   });
-  const properties = entities.map((entity) => `    ${entity.sdkName}: create${toPascalCase(entity.sdkName)}SDK(runtime),`);
-  return `import { createRuntime, type ArcubaseSdkConfig } from './runtime.js'
+  const mapLines = ingresses.map((ingress) => `  ${JSON.stringify(ingress.key)}: ReturnType<typeof create${toPascalCase(ingress.key)}Ingress>`);
+  const cases = ingresses.map((ingress) => `        case ${JSON.stringify(ingress.key)}:
+          return create${toPascalCase(ingress.key)}Ingress(runtime) as ArcubaseIngressMap[K]`);
+  return `import { createRuntime, type ArcubaseClientConfig } from './runtime.js'
 ${imports.join("\n")}
 
-export function createArcubaseSdk(config: ArcubaseSdkConfig) {
+export type ArcubaseIngressMap = {
+${mapLines.join("\n")}
+}
+
+export type ArcubaseIngressKey = keyof ArcubaseIngressMap
+
+export function createArcubaseClient(config: ArcubaseClientConfig) {
   const runtime = createRuntime(config)
   return {
-${properties.join("\n")}
+    ingress<K extends ArcubaseIngressKey>(key: K): ArcubaseIngressMap[K] {
+      switch (key) {
+${cases.join("\n")}
+        default:
+          throw new Error(\`Unknown Arcubase ingress: \${String(key)}\`)
+      }
+    },
   }
 }
 `;
 }
-function emitIndex(entities) {
-  return `export { createArcubaseSdk } from './client.js'
-export type { ArcubaseSdkConfig, ArcubaseRow } from './runtime.js'
+function emitIndex(ingresses) {
+  return `export { createArcubaseClient } from './client.js'
+export type { ArcubaseClientConfig, ArcubaseRow } from './runtime.js'
 export { arcubaseSchema } from './schema.js'
-${entities.map((entity) => `export type { ${toPascalCase(entity.sdkName)}Fields, ${toPascalCase(entity.sdkName)}CreateInput, ${toPascalCase(entity.sdkName)}UpdateInput } from './entities/${entity.sdkName}.js'`).join("\n")}
+export type { ArcubaseIngressKey, ArcubaseIngressMap } from './client.js'
+${ingresses.map((ingress) => {
+    const typeName = toPascalCase(ingress.key);
+    return `export type { ${typeName}Fields, ${typeName}CreateInput, ${typeName}UpdateInput, ${typeName}FieldKey, ${typeName}Selection } from './ingresses/${ingress.key}.js'`;
+  }).join("\n")}
 `;
 }
 function generateArcubaseProjectSDK(payload) {
-  const entities = normalizeEntities(payload);
+  const ingresses = normalizeIngresses(payload);
   return {
     files: [
       { path: "runtime.ts", contents: emitRuntime() },
-      { path: "schema.ts", contents: emitSchema(entities) },
-      ...entities.map((entity) => ({ path: `entities/${entity.sdkName}.ts`, contents: emitEntity(entity) })),
-      { path: "client.ts", contents: emitClient(entities) },
-      { path: "index.ts", contents: emitIndex(entities) }
+      { path: "schema.ts", contents: emitSchema(ingresses) },
+      ...ingresses.map((ingress) => ({ path: `ingresses/${ingress.key}.ts`, contents: emitIngress(ingress) })),
+      { path: "client.ts", contents: emitClient(ingresses) },
+      { path: "index.ts", contents: emitIndex(ingresses) }
     ]
   };
 }
@@ -19222,10 +19496,10 @@ function renderDevSDKGenHelp() {
     "  - arcubase-admin dev sdk-gen --app-id <app_id> --out src/arcubase",
     "",
     "requirements:",
-    "  - missing field.key values are initialized through admin auth as field<id>",
-    "  - existing field.key values must be stable unique TypeScript identifiers",
-    "  - entity property names use entity.key when available, otherwise a stable entity<id> fallback",
-    "  - generated code accepts createArcubaseSdk({ baseURL, accessToken, refreshToken })"
+    "  - every generated ingress must have a configured ingress.key; sdk-gen fails fast when keys are missing",
+    "  - every generated field must have a configured field.key; sdk-gen fails fast when keys are missing",
+    "  - ingress.key and field.key values must be stable unique TypeScript identifiers",
+    '  - generated code accepts createArcubaseClient({ baseURL, accessToken, refreshToken }).ingress("<IngressKey>")'
   ].join("\n");
 }
 function resolveEndpoint(command, flags) {
@@ -20735,45 +21009,116 @@ function walkSDKGenFields(fields, visit) {
     walkSDKGenFields(field.children, visit);
   }
 }
-function collectExistingSDKGenFieldKeys(entity) {
-  const keys = /* @__PURE__ */ new Set();
+function assertSDKGenFieldKeysPresent(entity) {
+  const missing = [];
   walkSDKGenFields(entity.fields, (field) => {
+    if (typeof field.id !== "number") {
+      return;
+    }
     if (typeof field.key === "string" && field.key.trim() !== "") {
-      keys.add(field.key.trim());
+      return;
     }
+    missing.push({
+      id: field.id,
+      label: typeof field.label === "string" && field.label.trim() ? field.label.trim() : `field ${field.id}`
+    });
+  });
+  if (missing.length === 0) {
+    return;
+  }
+  const entityName = typeof entity.name === "string" && entity.name.trim() ? entity.name.trim() : `entity ${String(entity.id ?? "")}`.trim();
+  const preview = missing.slice(0, 8).map((field) => `${entityName}.${field.label} (${field.id})`);
+  const suffix = missing.length > preview.length ? `, and ${missing.length - preview.length} more` : "";
+  throw new CLIError("SDK_GEN_FIELD_KEY_REQUIRED", `missing field.key values: ${preview.join(", ")}${suffix}`, 2, {
+    operation: "dev sdk-gen",
+    issues: missing.map((field) => ({
+      path: `entity.${String(entity.id ?? "unknown")}.field.${field.id}.key`,
+      message: `field.key is required for ${entityName}.${field.label}`
+    })),
+    suggestions: [
+      "set stable field.key values in Arcubase admin before running sdk-gen",
+      "rerun arcubase-admin dev sdk-gen after the schema keys are complete"
+    ]
   });
-  return keys;
 }
-function nextSDKGenFallbackFieldKey(fieldId, usedKeys) {
-  const base = `field${fieldId}`;
-  if (!usedKeys.has(base)) {
-    usedKeys.add(base);
-    return base;
+function extractSDKGenIngressRefs(payload) {
+  const data = unwrapResponseData(payload);
+  const source = Array.isArray(data) ? data : isRecord4(data) && Array.isArray(data.list) ? data.list : [];
+  return source.filter((item) => isRecord4(item));
+}
+function ingressKeyOf(ingress) {
+  return typeof ingress.key === "string" ? ingress.key.trim() : "";
+}
+function ingressHashIDOf(ingress) {
+  if (typeof ingress.hash_id === "string" && ingress.hash_id.trim()) {
+    return ingress.hash_id.trim();
   }
-  let index = 2;
-  while (usedKeys.has(`${base}_${index}`)) {
-    index++;
+  if (typeof ingress.hashId === "string" && ingress.hashId.trim()) {
+    return ingress.hashId.trim();
   }
-  const key = `${base}_${index}`;
-  usedKeys.add(key);
-  return key;
+  return "";
 }
-function initializeMissingSDKGenFieldKeys(entity) {
-  const usedKeys = collectExistingSDKGenFieldKeys(entity);
-  const updates = [];
-  walkSDKGenFields(entity.fields, (field) => {
-    if (typeof field.id !== "number") {
-      return;
+function assertSDKGenIngressesReady(ingresses) {
+  if (ingresses.length === 0) {
+    throw new CLIError("SDK_GEN_NO_INGRESSES", "sdk-gen could not find ingress definitions for this app", 2, {
+      operation: "dev sdk-gen",
+      suggestions: ["create at least one access rule with a stable ingress.key before running sdk-gen"]
+    });
+  }
+  const seen = /* @__PURE__ */ new Set();
+  const missingKey = [];
+  const missingHash = [];
+  const invalidKey = [];
+  const duplicateKey = [];
+  for (const ingress of ingresses) {
+    const key = ingressKeyOf(ingress);
+    if (!key) {
+      missingKey.push(ingress);
+      continue;
     }
-    if (typeof field.key === "string" && field.key.trim() !== "") {
-      field.key = field.key.trim();
-      return;
+    if (!/^[A-Za-z][A-Za-z0-9_]*$/.test(key)) {
+      invalidKey.push(key);
     }
-    const key = nextSDKGenFallbackFieldKey(field.id, usedKeys);
-    field.key = key;
-    updates.push({ id: field.id, key });
-  });
-  return updates;
+    if (seen.has(key)) {
+      duplicateKey.push(key);
+    }
+    seen.add(key);
+    if (!ingressHashIDOf(ingress)) {
+      missingHash.push(ingress);
+    }
+  }
+  if (missingKey.length > 0) {
+    const preview = missingKey.slice(0, 8).map((ingress) => String(ingress.name ?? ingress.id ?? "unnamed ingress"));
+    const suffix = missingKey.length > preview.length ? `, and ${missingKey.length - preview.length} more` : "";
+    throw new CLIError("SDK_GEN_INGRESS_KEY_REQUIRED", `missing ingress.key values: ${preview.join(", ")}${suffix}`, 2, {
+      operation: "dev sdk-gen",
+      issues: missingKey.map((ingress) => ({
+        path: `ingress.${String(ingress.id ?? "unknown")}.key`,
+        message: `ingress.key is required for ${String(ingress.name ?? ingress.id ?? "unnamed ingress")}`
+      })),
+      suggestions: [
+        "set stable ingress.key values in Arcubase admin before running sdk-gen",
+        "rerun arcubase-admin dev sdk-gen after ingress keys are complete"
+      ]
+    });
+  }
+  if (invalidKey.length > 0) {
+    throw new CLIError("SDK_GEN_INVALID_INGRESS_KEY", `invalid ingress.key values: ${invalidKey.join(", ")}`, 2, {
+      operation: "dev sdk-gen",
+      suggestions: ["use TypeScript identifier keys such as publicEntry or customerPortal"]
+    });
+  }
+  if (duplicateKey.length > 0) {
+    throw new CLIError("SDK_GEN_DUPLICATE_INGRESS_KEY", `duplicate ingress.key values: ${duplicateKey.join(", ")}`, 2, {
+      operation: "dev sdk-gen"
+    });
+  }
+  if (missingHash.length > 0) {
+    throw new CLIError("SDK_GEN_INGRESS_HASH_ID_REQUIRED", "sdk-gen expected hash_id for every ingress definition", 2, {
+      operation: "dev sdk-gen",
+      suggestions: ["upgrade Arcubase server so admin access-rule list returns hash_id"]
+    });
+  }
 }
 async function executeDevSDKGen(runtimeEnv, flags, fetchImpl) {
   validateDevSDKGenFlags(flags);
@@ -20801,8 +21146,7 @@ async function executeDevSDKGen(runtimeEnv, flags, fetchImpl) {
   if (entityRefs.length === 0) {
     throw new CLIError("SDK_GEN_NO_ENTITIES", "sdk-gen could not find entities in app detail response", 2);
   }
-  const entities = [];
-  const initializedFieldKeys = [];
+  const ingresses = [];
   for (const entityRef of entityRefs) {
     const entityEndpoint = `/api/apps/${encodeURIComponent(appId)}/entity/${encodeURIComponent(entityRef.id)}`;
     const entityDetail = await requestJSON(runtimeEnv, "GET", entityEndpoint, void 0, fetchImpl);
@@ -20810,21 +21154,22 @@ async function executeDevSDKGen(runtimeEnv, flags, fetchImpl) {
     if (!isRecord4(entityPayload)) {
       throw new CLIError("SDK_GEN_INVALID_SCHEMA", "sdk-gen expected entity detail response data", 2);
     }
-    const customKeyUpdates = initializeMissingSDKGenFieldKeys(entityPayload);
-    if (customKeyUpdates.length > 0) {
-      const customKeysEndpoint = `/api/apps/${encodeURIComponent(appId)}/entity/${encodeURIComponent(entityRef.id)}/custom-keys`;
-      await requestJSON(runtimeEnv, "PUT", customKeysEndpoint, customKeyUpdates, fetchImpl);
-      initializedFieldKeys.push({
-        entityId: typeof entityPayload.id === "number" ? entityPayload.id : Number(entityRef.id),
-        fields: customKeyUpdates.map((item) => item.key)
-      });
-    }
-    entities.push(entityPayload);
-  }
+    assertSDKGenFieldKeysPresent(entityPayload);
+    const ingressEndpoint = `/api/apps/${encodeURIComponent(appId)}/entity/${encodeURIComponent(entityRef.id)}/ingress`;
+    const ingressList = await requestJSON(runtimeEnv, "GET", ingressEndpoint, void 0, fetchImpl);
+    const entityIngresses = extractSDKGenIngressRefs(ingressList.data).map((ingress) => ({
+      ...ingress,
+      hash_id: ingressHashIDOf(ingress),
+      key: ingressKeyOf(ingress),
+      entity: entityPayload
+    }));
+    ingresses.push(...entityIngresses);
+  }
+  assertSDKGenIngressesReady(ingresses);
   const generated = generateArcubaseProjectSDK({
     id: resolveSDKGenAppId(appId, appPayload),
     name: typeof appPayload.name === "string" ? appPayload.name : void 0,
-    entities
+    ingresses
   });
   const absoluteOutDir = path2.resolve(process.cwd(), outDir);
   for (const file2 of generated.files) {
@@ -20841,8 +21186,7 @@ async function executeDevSDKGen(runtimeEnv, flags, fetchImpl) {
     status: appDetail.status,
     data: {
       out: absoluteOutDir,
-      files: generated.files.map((file2) => file2.path),
-      initializedFieldKeys
+      files: generated.files.map((file2) => file2.path)
     }
   };
 }