@carthooks/arcubase-cli 0.1.7 → 0.1.8

package/dist/tests/execute_validation.test.js

@@ -19,104 +19,8 @@ function tempJSONFile(payload) {
     fs.writeFileSync(filePath, JSON.stringify(payload, null, 2));
     return filePath;
 }
-test('admin save entity rejects invalid body file', async () => {
-    const invalidFile = tempJSONFile({ name: '订单', layout: 'bad-layout' });
-    await assert.rejects(async () => {
-        await executeCLI('admin', ['entity', 'admin-save-entity', '--app-id', 'app_1', '--entity-id', 'entity_1', '--body-file', invalidFile], env, async () => new Response('{}'));
-    }, (error) => {
-        assert.ok(error instanceof CLIError);
-        assert.equal(error.code, 'BODY_VALIDATION_FAILED');
-        assert.equal(error.details?.requestType, 'EntitySaveReqVO');
-        assert.ok((error.details?.issues ?? []).some((item) => item.path.startsWith('body.layout')));
-        assert.ok((error.details?.tsHints ?? []).some((item) => item.file.startsWith('/opt/arcubase-sdk/')));
-        assert.ok((error.details?.docHints ?? []).some((item) => item.file.endsWith('/docs/runtime-reference/entity-schema.md')));
-        return true;
-    });
-});
-test('admin create app by tenants rejects name longer than 20 chars', async () => {
-    const bodyFile = tempJSONFile({ name: 'CLI Verify Happy Path' });
-    await assert.rejects(async () => {
-        await executeCLI('admin', ['app', 'create-app-by-tenants', '--body-file', bodyFile], env, async () => new Response('{}', { status: 200 }));
-    }, (error) => {
-        assert.ok(error instanceof CLIError);
-        assert.equal(error.code, 'BODY_VALIDATION_FAILED');
-        assert.ok((error.details?.issues ?? []).some((item) => item.path === 'body.name'));
-        assert.ok((error.details?.docHints ?? []).some((item) => item.file.endsWith('/docs/runtime-reference/table-lifecycle.md')));
-        return true;
-    });
-});
-test('admin create entity executes with valid body file', async () => {
-    const bodyFile = tempJSONFile({ name: '订单', parent: 0 });
-    const out = await executeCLI('admin', ['app', 'create-entity', '--id', 'app_1', '--body-file', bodyFile], env, async (url, init) => new Response(JSON.stringify({ ok: true, url, method: init?.method, headers: init?.headers }), { status: 200 }));
-    assert.equal(out.kind, 'result');
-    assert.equal(out.status, 200);
-    assert.equal(out.data.url, 'https://arcubase.example.com/apps/app_1/entities');
-    assert.equal(out.data.headers['Authorization'], 'Bearer tok');
-    assert.equal(out.data.headers['X-Host'], undefined);
-    assert.equal(out.data.headers['X-Tenant-Id'], undefined);
-});
-test('admin api-prefixed command executes against external root path', async () => {
-    const out = await executeCLI('admin', ['app-entity-share', 'get-app-entity-shares', '--app-id', 'app_1'], env, async (url, init) => new Response(JSON.stringify({ ok: true, url, method: init?.method }), { status: 200 }));
-    assert.equal(out.kind, 'result');
-    assert.equal(out.data.url, 'https://arcubase.example.com/apps/app_1/entity-shares');
-});
-test('app inventory returns apps with entity lists', async () => {
-    const calls = [];
-    const out = await executeCLI('admin', ['app', 'inventory'], env, async (url, init) => {
-        calls.push(`${init?.method ?? 'GET'} ${String(url)}`);
-        if (String(url) === 'https://arcubase.example.com/apps') {
-            return new Response(JSON.stringify({
-                data: [
-                    { id: 101, name: 'Workspace' },
-                    { id: 102, name: 'CRM' },
-                ],
-            }), { status: 200 });
-        }
-        if (String(url) === 'https://arcubase.example.com/apps/101/entities') {
-            return new Response(JSON.stringify({
-                data: [
-                    { id: 201, name: 'Orders' },
-                    { id: 202, name: 'Customers' },
-                ],
-            }), { status: 200 });
-        }
-        if (String(url) === 'https://arcubase.example.com/apps/102/entities') {
-            return new Response(JSON.stringify({
-                data: [
-                    { id: 203, name: 'Leads' },
-                ],
-            }), { status: 200 });
-        }
-        return new Response('{}', { status: 404 });
-    });
-    assert.equal(out.kind, 'result');
-    assert.deepEqual(out.data, {
-        apps: [
-            {
-                id: '101',
-                name: 'Workspace',
-                entities: [
-                    { id: '201', name: 'Orders' },
-                    { id: '202', name: 'Customers' },
-                ],
-            },
-            {
-                id: '102',
-                name: 'CRM',
-                entities: [
-                    { id: '203', name: 'Leads' },
-                ],
-            },
-        ],
-    });
-    assert.deepEqual(calls, [
-        'GET https://arcubase.example.com/apps',
-        'POST https://arcubase.example.com/apps/101/entities',
-        'POST https://arcubase.example.com/apps/102/entities',
-    ]);
-});
-test('admin save entity treats top-level error body as failure even on http 200', async () => {
-    const bodyFile = tempJSONFile({
+function validEntitySavePayload(overrides = {}) {
+    return {
         id: 2188889845,
         app_id: 2188889844,
         name: '订单',
@@ -141,83 +45,141 @@ test('admin save entity treats top-level error body as failure even on http 200'
                 depends: [],
                 key: 'order_id',
                 code_index: false,
-                options: {},
+                options: {
+                    placeholder: '',
+                    type: 'text',
+                    lengthLimit: false,
+                    lengthMin: 0,
+                    lengthMax: 255,
+                },
                 transfers: null,
                 children: null,
             },
         ],
+        options: {
+            Buttons: [],
+            CustomActions: [],
+            FrontendEvents: [],
+            TitleFormat: {
+                Fields: [],
+                Parts: [],
+                Body: '',
+            },
+            misc: {},
+        },
         workflow_enabled: false,
+        ...overrides,
+    };
+}
+test('table update-schema rejects invalid body file', async () => {
+    const invalidFile = tempJSONFile({ name: '订单', layout: 'bad-layout' });
+    await assert.rejects(async () => {
+        await executeCLI('admin', ['table', 'update-schema', '--app-id', 'app_1', '--table-id', 'table_1', '--body-file', invalidFile], env, async () => new Response('{}'));
+    }, (error) => {
+        assert.ok(error instanceof CLIError);
+        assert.equal(error.code, 'BODY_VALIDATION_FAILED');
+        assert.equal(error.details?.requestType, 'EntitySaveReqVO');
+        assert.ok((error.details?.issues ?? []).some((item) => item.path.startsWith('body.layout')));
+        return true;
     });
+});
+test('app create rejects name longer than 20 chars', async () => {
+    const bodyFile = tempJSONFile({ name: 'CLI Verify Happy Path' });
     await assert.rejects(async () => {
-        await executeCLI('admin', ['entity', 'admin-save-entity', '--app-id', 'app_1', '--entity-id', 'entity_1', '--body-file', bodyFile], env, async () => new Response(JSON.stringify({
-            error: {
-                message: 'json: cannot unmarshal object into Go struct field .EntityVO.fields of type []models.Field',
-                type: 'system',
-                key: 'error.system',
-            },
+        await executeCLI('admin', ['app', 'create', '--body-file', bodyFile], env, async () => new Response('{}', { status: 200 }));
+    }, (error) => {
+        assert.ok(error instanceof CLIError);
+        assert.equal(error.code, 'BODY_VALIDATION_FAILED');
+        assert.ok((error.details?.issues ?? []).some((item) => item.path === 'body.name'));
+        return true;
+    });
+});
+test('table create executes with valid body file', async () => {
+    const bodyFile = tempJSONFile({ name: '订单', parent: 0 });
+    const out = await executeCLI('admin', ['table', 'create', '--app-id', 'app_1', '--body-file', bodyFile], env, async (url, init) => new Response(JSON.stringify({
+        url,
+        method: init?.method,
+        hasTenantHeader: Object.prototype.hasOwnProperty.call(init?.headers ?? {}, 'X-Tenant-Id'),
+        hasHostHeader: Object.prototype.hasOwnProperty.call(init?.headers ?? {}, 'X-Host'),
+    }), { status: 200 }));
+    assert.equal(out.kind, 'result');
+    assert.equal(out.data.url, 'https://arcubase.example.com/api/apps/app_1/entities');
+    assert.equal(out.data.hasTenantHeader, false);
+    assert.equal(out.data.hasHostHeader, false);
+});
+test('table create executes with valid body json', async () => {
+    const out = await executeCLI('admin', ['table', 'create', '--app-id', 'app_1', '--body-json', '{"name":"订单","parent":0}'], env, async (url, init) => new Response(JSON.stringify({
+        url,
+        method: init?.method,
+        body: init?.body ? JSON.parse(String(init.body)) : null,
+    }), { status: 200 }));
+    assert.equal(out.kind, 'result');
+    assert.equal(out.data.url, 'https://arcubase.example.com/api/apps/app_1/entities');
+    assert.deepEqual(out.data.body, { name: '订单', parent: 0 });
+});
+test('body json conflicts with body file', async () => {
+    const bodyFile = tempJSONFile({ name: '订单', parent: 0 });
+    await assert.rejects(async () => {
+        await executeCLI('admin', ['table', 'create', '--app-id', 'app_1', '--body-file', bodyFile, '--body-json', '{"name":"订单"}'], env, async () => new Response('{}', { status: 200 }));
+    }, (error) => {
+        assert.ok(error instanceof CLIError);
+        assert.equal(error.code, 'BODY_JSON_CONFLICT');
+        return true;
+    });
+});
+test('body json is rejected for commands without request type', async () => {
+    await assert.rejects(async () => {
+        await executeCLI('admin', ['app', 'list', '--body-json', '{"name":"ignored"}'], env, async () => new Response('{}', { status: 200 }));
+    }, (error) => {
+        assert.ok(error instanceof CLIError);
+        assert.equal(error.code, 'BODY_JSON_NOT_SUPPORTED');
+        return true;
+    });
+});
+test('body json parse errors fail fast', async () => {
+    await assert.rejects(async () => {
+        await executeCLI('admin', ['table', 'create', '--app-id', 'app_1', '--body-json', '{"name":'], env, async () => new Response('{}', { status: 200 }));
+    }, (error) => {
+        assert.ok(error instanceof CLIError);
+        assert.equal(error.code, 'INVALID_BODY_JSON');
+        return true;
+    });
+});
+test('access-rule list executes against external root path', async () => {
+    const out = await executeCLI('admin', ['access-rule', 'list', '--app-id', 'app_1', '--table-id', 'table_1'], env, async (url, init) => new Response(JSON.stringify({ url, method: init?.method }), { status: 200 }));
+    assert.equal(out.kind, 'result');
+    assert.equal(out.data.url, 'https://arcubase.example.com/api/apps/app_1/entity/table_1/ingress');
+});
+test('table update-schema treats top-level error body as failure even on http 200', async () => {
+    const bodyFile = tempJSONFile(validEntitySavePayload());
+    await assert.rejects(async () => {
+        await executeCLI('admin', ['table', 'update-schema', '--app-id', 'app_1', '--table-id', 'table_1', '--body-file', bodyFile], env, async () => new Response(JSON.stringify({
+            error: { message: 'json: cannot unmarshal object into Go struct field .EntityVO.fields of type []models.Field', type: 'system', key: 'error.system' },
             trace_id: 'req_xxx',
         }), { status: 200 }));
     }, (error) => {
         assert.ok(error instanceof CLIError);
         assert.equal(error.code, 'UPSTREAM_BODY_ERROR');
-        assert.equal(error.details?.endpoint, '/apps/app_1/entity/entity_1');
+        assert.equal(error.details?.endpoint, '/api/apps/app_1/entity/table_1');
         assert.equal(error.details?.method, 'PUT');
         assert.equal(error.details?.traceId, 'req_xxx');
         return true;
     });
 });
-test('admin save entity normalizes shell null placeholders before validation', async () => {
-    const bodyFile = tempJSONFile({
-        id: 2188889845,
-        app_id: 2188889844,
-        name: '订单',
+test('table update-schema normalizes shell null placeholders before validation', async () => {
+    const bodyFile = tempJSONFile(validEntitySavePayload({
         schema_version: 0,
-        field_id_seq: 1002,
         layout: null,
         current_serial: null,
-        fields: [
-            {
-                id: 1001,
-                label: '订单号',
-                type: 'text',
-                required: true,
-                unique: false,
-                editable: true,
-                visible: true,
-                show_label: true,
-                scannable: false,
-                default_value_mode: 0,
-                description: '',
-                value: null,
-                number_decimal: 0,
-                depends: [],
-                key: 'order_id',
-                code_index: false,
-                options: {
-                    placeholder: '',
-                    type: 'text',
-                    lengthLimit: false,
-                    lengthMin: 0,
-                    lengthMax: 255,
-                },
-                transfers: null,
-                children: null,
-            },
-        ],
         options: {
             Buttons: null,
             CustomActions: null,
             FrontendEvents: null,
-            TitleFormat: {
-                Fields: null,
-                Parts: null,
-                Body: '',
-            },
+            TitleFormat: { Fields: null, Parts: null, Body: '' },
             misc: null,
         },
-        workflow_enabled: false,
-    });
-    const out = await executeCLI('admin', ['entity', 'admin-save-entity', '--app-id', 'app_1', '--entity-id', 'entity_1', '--body-file', bodyFile], env, async (_url, init) => new Response(String(init?.body ?? '{}'), { status: 200 }));
+    }));
+    const out = await executeCLI('admin', ['table', 'update-schema', '--app-id', 'app_1', '--table-id', 'table_1', '--body-file', bodyFile], env, async (_url, init) => new Response(String(init?.body ?? '{}'), { status: 200 }));
     assert.equal(out.kind, 'result');
     const requestBody = out.data;
     assert.deepEqual(requestBody.layout, []);
@@ -229,119 +191,45 @@ test('admin save entity normalizes shell null placeholders before validation', a
     assert.deepEqual(requestBody.options.TitleFormat.Parts, []);
     assert.deepEqual(requestBody.options.misc, {});
 });
-test('delete entity row rejects selection type outside ids', async () => {
-    const bodyFile = tempJSONFile({
-        selection: {
-            type: 'selection',
-            ids: [4000000003],
-            length: 1,
-        },
-    });
+test('row delete rejects selection type outside ids', async () => {
+    const bodyFile = tempJSONFile({ selection: { type: 'selection', ids: [4000000003], length: 1 } });
     await assert.rejects(async () => {
-        await executeCLI('user', ['rows', 'delete-entity-row', '--app-id', 'app_1', '--entity-id', 'entity_1', '--body-file', bodyFile], env, async () => new Response('{}', { status: 200 }));
+        await executeCLI('user', ['row', 'delete', '--app-id', 'app_1', '--table-id', 'table_1', '--body-file', bodyFile], env, async () => new Response('{}', { status: 200 }));
     }, (error) => {
         assert.ok(error instanceof CLIError);
         assert.equal(error.code, 'BODY_VALIDATION_FAILED');
         assert.ok((error.details?.issues ?? []).some((item) => item.path === 'body.selection'));
-        assert.ok((error.details?.docHints ?? []).some((item) => item.file.endsWith('/docs/runtime-reference/search-and-bulk-actions.md')));
         return true;
     });
 });
-test('bulk update accepts ids selection with number_add action', async () => {
+test('row bulk-update accepts ids selection with number_add action', async () => {
     const bodyFile = tempJSONFile({
-        selection: {
-            type: 'ids',
-            ids: [4000000003],
-            length: 1,
-        },
-        fields: [
-            {
-                id: 1002,
-                action: {
-                    type: 'number_add',
-                    number_add: 10,
-                },
-            },
-        ],
+        selection: { type: 'ids', ids: [4000000003], length: 1 },
+        fields: [{ id: 1002, action: { type: 'number_add', number_add: 10 } }],
     });
-    const out = await executeCLI('user', ['entity', 'update-entity-bulk', '--app-id', 'app_1', '--entity-id', 'entity_1', '--body-file', bodyFile], env, async (_url, init) => new Response(String(init?.body ?? '{}'), { status: 200 }));
+    const out = await executeCLI('user', ['row', 'bulk-update', '--app-id', 'app_1', '--table-id', 'table_1', '--body-file', bodyFile], env, async (_url, init) => new Response(String(init?.body ?? '{}'), { status: 200 }));
     assert.equal(out.kind, 'result');
     assert.deepEqual(out.data.selection, { type: 'ids', ids: [4000000003], length: 1 });
     assert.equal(out.data.fields[0].action.type, 'number_add');
 });
-test('selection action accepts condition selection with selectAll', async () => {
+test('row selection-action accepts condition selection with selectAll', async () => {
     const bodyFile = tempJSONFile({
         selection: {
             type: 'condition',
             length: 1,
-            condition: {
-                q: 'A-100',
-                selectAll: true,
-            },
-            sorts: [
-                { column: ':1002', order: 'desc' },
-            ],
+            condition: { q: 'A-100', selectAll: true },
+            sorts: [{ column: ':1002', order: 'desc' }],
         },
     });
-    const out = await executeCLI('user', ['rows', 'query-entity-selection', '--app-id', 'app_1', '--entity-id', 'entity_1', '--action', 'archive', '--body-file', bodyFile], env, async (_url, init) => new Response(String(init?.body ?? '{}'), { status: 200 }));
+    const out = await executeCLI('user', ['row', 'selection-action', '--app-id', 'app_1', '--table-id', 'table_1', '--action', 'archive', '--body-file', bodyFile], env, async (_url, init) => new Response(String(init?.body ?? '{}'), { status: 200 }));
     assert.equal(out.kind, 'result');
     assert.equal(out.data.selection.type, 'condition');
     assert.equal(out.data.selection.condition.selectAll, true);
 });
-test('selection action accepts condition selection with filter_* keys', async () => {
-    const bodyFile = tempJSONFile({
-        selection: {
-            type: 'condition',
-            length: 1,
-            condition: {
-                'filter_:1001': '%7B%22is%22%3A%22A-100%22%7D',
-                selectAll: true,
-            },
-        },
-    });
-    const out = await executeCLI('user', ['rows', 'query-entity-selection', '--app-id', 'app_1', '--entity-id', 'entity_1', '--action', 'archive', '--body-file', bodyFile], env, async (_url, init) => new Response(String(init?.body ?? '{}'), { status: 200 }));
-    assert.equal(out.kind, 'result');
-    assert.equal(out.data.selection.type, 'condition');
-    assert.equal(out.data.selection.condition.selectAll, true);
-});
-test('selection action accepts condition selection with selectAll only for batch_print', async () => {
-    const bodyFile = tempJSONFile({
-        selection: {
-            type: 'condition',
-            length: 1,
-            condition: {
-                selectAll: true,
-            },
-        },
-    });
-    const out = await executeCLI('user', ['rows', 'query-entity-selection', '--app-id', 'app_1', '--entity-id', 'entity_1', '--action', 'batch_print', '--body-file', bodyFile], env, async (_url, init) => new Response(String(init?.body ?? '{}'), { status: 200 }));
-    assert.equal(out.kind, 'result');
-    assert.equal(out.data.selection.type, 'condition');
-    assert.equal(out.data.selection.condition.selectAll, true);
-});
-test('selection action accepts all selection for query-style actions', async () => {
-    const bodyFile = tempJSONFile({
-        selection: {
-            type: 'all',
-        },
-    });
-    const out = await executeCLI('user', ['rows', 'query-entity-selection', '--app-id', 'app_1', '--entity-id', 'entity_1', '--action', 'query', '--body-file', bodyFile], env, async (_url, init) => new Response(String(init?.body ?? '{}'), { status: 200 }));
-    assert.equal(out.kind, 'result');
-    assert.equal(out.data.selection.type, 'all');
-});
-test('selection action rejects condition selection for query action', async () => {
-    const bodyFile = tempJSONFile({
-        selection: {
-            type: 'condition',
-            length: 1,
-            condition: {
-                q: 'A-100',
-                selectAll: true,
-            },
-        },
-    });
+test('row selection-action rejects condition selection for query action', async () => {
+    const bodyFile = tempJSONFile({ selection: { type: 'condition', length: 1, condition: { q: 'A-100', selectAll: true } } });
     await assert.rejects(async () => {
-        await executeCLI('user', ['rows', 'query-entity-selection', '--app-id', 'app_1', '--entity-id', 'entity_1', '--action', 'query', '--body-file', bodyFile], env, async () => new Response('{}', { status: 200 }));
+        await executeCLI('user', ['row', 'selection-action', '--app-id', 'app_1', '--table-id', 'table_1', '--action', 'query', '--body-file', bodyFile], env, async () => new Response('{}', { status: 200 }));
     }, (error) => {
         assert.ok(error instanceof CLIError);
         assert.equal(error.code, 'BODY_VALIDATION_FAILED');
@@ -349,62 +237,14 @@ test('selection action rejects condition selection for query action', async () =
         return true;
     });
 });
-test('selection action rejects all selection for archive action', async () => {
-    const bodyFile = tempJSONFile({
-        selection: {
-            type: 'all',
-        },
-    });
-    await assert.rejects(async () => {
-        await executeCLI('user', ['rows', 'query-entity-selection', '--app-id', 'app_1', '--entity-id', 'entity_1', '--action', 'archive', '--body-file', bodyFile], env, async () => new Response('{}', { status: 200 }));
-    }, (error) => {
-        assert.ok(error instanceof CLIError);
-        assert.equal(error.code, 'BODY_VALIDATION_FAILED');
-        assert.ok((error.details?.issues ?? []).some((item) => item.path === 'body.selection.type'));
-        return true;
-    });
-});
-test('selection action rejects selectAll-only condition for archive action', async () => {
-    const bodyFile = tempJSONFile({
-        selection: {
-            type: 'condition',
-            length: 1,
-            condition: {
-                selectAll: true,
-            },
-        },
-    });
-    await assert.rejects(async () => {
-        await executeCLI('user', ['rows', 'query-entity-selection', '--app-id', 'app_1', '--entity-id', 'entity_1', '--action', 'archive', '--body-file', bodyFile], env, async () => new Response('{}', { status: 200 }));
-    }, (error) => {
-        assert.ok(error instanceof CLIError);
-        assert.equal(error.code, 'BODY_VALIDATION_FAILED');
-        assert.ok((error.details?.issues ?? []).some((item) => item.path === 'body.selection.condition'));
-        return true;
-    });
-});
-test('insert entity rejects local file path for file field and points to arcubase upload', async () => {
-    const bodyFile = tempJSONFile({
-        fields: {
-            1001: 'Lead A',
-            1007: './contract.pdf',
-        },
-    });
+test('row create rejects local file path for file field and points to arcubase upload', async () => {
+    const bodyFile = tempJSONFile({ fields: { 1001: 'Lead A', 1007: './contract.pdf' } });
     const calls = [];
     await assert.rejects(async () => {
-        await executeCLI('user', ['rows', 'insert-entity', '--app-id', 'app_1', '--entity-id', 'entity_1', '--body-file', bodyFile], env, async (url, init) => {
+        await executeCLI('user', ['row', 'create', '--app-id', 'app_1', '--table-id', 'table_1', '--body-file', bodyFile], env, async (url, init) => {
             calls.push({ url: String(url), method: init?.method });
-            if (String(url) === 'https://arcubase.example.com/entity/app_1/entity_1' && init?.method === 'GET') {
-                return new Response(JSON.stringify({
-                    data: {
-                        id: 1,
-                        app_id: 1,
-                        fields: [
-                            { id: 1001, type: 'text', label: 'Lead Name' },
-                            { id: 1007, type: 'file', label: 'Contract File' },
-                        ],
-                    },
-                }), { status: 200 });
+            if (String(url) === 'https://arcubase.example.com/api/entity/app_1/table_1' && init?.method === 'GET') {
+                return new Response(JSON.stringify({ data: { id: 1, app_id: 1, fields: [{ id: 1001, type: 'text', label: 'Lead Name' }, { id: 1007, type: 'file', label: 'Contract File' }] } }), { status: 200 });
             }
             return new Response('{}', { status: 200 });
         });
@@ -413,37 +253,16 @@ test('insert entity rejects local file path for file field and points to arcubas
         assert.equal(error.code, 'BODY_VALIDATION_FAILED');
         assert.ok((error.details?.issues ?? []).some((item) => item.path === 'body.fields.1007'));
         assert.match(error.message, /arcubase upload \.\/contract\.pdf/);
-        assert.ok((error.details?.docHints ?? []).some((item) => item.file.endsWith('/docs/runtime-reference/uploads.md')));
         return true;
     });
-    assert.deepEqual(calls, [
-        { url: 'https://arcubase.example.com/entity/app_1/entity_1', method: 'GET' },
-    ]);
+    assert.deepEqual(calls, [{ url: 'https://arcubase.example.com/api/entity/app_1/table_1', method: 'GET' }]);
 });
-test('update row rejects object value for image field and requires upload array', async () => {
-    const bodyFile = tempJSONFile({
-        changed_fields: [1008],
-        data: {
-            1008: {
-                upload_id: 123456,
-                file: 'lead-photo.jpg',
-                file_name: 'lead-photo.jpg',
-                meta: {},
-            },
-        },
-    });
+test('row update rejects object value for image field and requires upload array', async () => {
+    const bodyFile = tempJSONFile({ changed_fields: [1008], data: { 1008: { upload_id: 123456, file: 'lead-photo.jpg', file_name: 'lead-photo.jpg', meta: {} } } });
     await assert.rejects(async () => {
-        await executeCLI('user', ['rows', 'update-entity-row', '--app-id', 'app_1', '--entity-id', 'entity_1', '--row-id', 'row_1', '--body-file', bodyFile], env, async (url, init) => {
-            if (String(url) === 'https://arcubase.example.com/entity/app_1/entity_1' && init?.method === 'GET') {
-                return new Response(JSON.stringify({
-                    data: {
-                        id: 1,
-                        app_id: 1,
-                        fields: [
-                            { id: 1008, type: 'image', label: 'Lead Photo' },
-                        ],
-                    },
-                }), { status: 200 });
+        await executeCLI('user', ['row', 'update', '--app-id', 'app_1', '--table-id', 'table_1', '--row-id', 'row_1', '--body-file', bodyFile], env, async (url, init) => {
+            if (String(url) === 'https://arcubase.example.com/api/entity/app_1/table_1' && init?.method === 'GET') {
+                return new Response(JSON.stringify({ data: { id: 1, app_id: 1, fields: [{ id: 1008, type: 'image', label: 'Lead Photo' }] } }), { status: 200 });
             }
             return new Response('{}', { status: 200 });
         });
@@ -452,74 +271,36 @@ test('update row rejects object value for image field and requires upload array'
         assert.equal(error.code, 'BODY_VALIDATION_FAILED');
         assert.ok((error.details?.issues ?? []).some((item) => item.path === 'body.data.1008'));
         assert.match(error.message, /must be an array/);
-        assert.match(error.message, /arcubase upload <local-file>/);
         return true;
     });
 });
-test('insert entity accepts upload array for file field after schema preflight', async () => {
-    const bodyFile = tempJSONFile({
-        fields: {
-            1001: 'Lead A',
-            1007: [
-                {
-                    upload_id: 123456,
-                    file: 'contract.pdf',
-                    file_name: 'contract.pdf',
-                    meta: {},
-                },
-            ],
-        },
-    });
+test('row create accepts upload array for file field after schema preflight', async () => {
+    const bodyFile = tempJSONFile({ fields: { 1001: 'Lead A', 1007: [{ upload_id: 123456, file: 'contract.pdf', file_name: 'contract.pdf', meta: {} }] } });
     const calls = [];
-    const out = await executeCLI('user', ['rows', 'insert-entity', '--app-id', 'app_1', '--entity-id', 'entity_1', '--body-file', bodyFile], env, async (url, init) => {
+    const out = await executeCLI('user', ['row', 'create', '--app-id', 'app_1', '--table-id', 'table_1', '--body-file', bodyFile], env, async (url, init) => {
         calls.push({ url: String(url), method: init?.method });
-        if (String(url) === 'https://arcubase.example.com/entity/app_1/entity_1' && init?.method === 'GET') {
-            return new Response(JSON.stringify({
-                data: {
-                    id: 1,
-                    app_id: 1,
-                    fields: [
-                        { id: 1001, type: 'text', label: 'Lead Name' },
-                        { id: 1007, type: 'file', label: 'Contract File' },
-                    ],
-                },
-            }), { status: 200 });
+        if (String(url) === 'https://arcubase.example.com/api/entity/app_1/table_1' && init?.method === 'GET') {
+            return new Response(JSON.stringify({ data: { id: 1, app_id: 1, fields: [{ id: 1001, type: 'text', label: 'Lead Name' }, { id: 1007, type: 'file', label: 'Contract File' }] } }), { status: 200 });
         }
         return new Response(String(init?.body ?? '{}'), { status: 200 });
     });
     assert.equal(out.kind, 'result');
     assert.deepEqual(calls, [
-        { url: 'https://arcubase.example.com/entity/app_1/entity_1', method: 'GET' },
-        { url: 'https://arcubase.example.com/entity/app_1/entity_1/insert', method: 'POST' },
+        { url: 'https://arcubase.example.com/api/entity/app_1/table_1', method: 'GET' },
+        { url: 'https://arcubase.example.com/api/entity/app_1/table_1/insert', method: 'POST' },
     ]);
     assert.equal(out.data.fields['1007'][0].upload_id, 123456);
 });
-test('insert entity decorates upload bind failures with actionable guidance', async () => {
-    const bodyFile = tempJSONFile({
-        fields: {
-            1001: 'Lead A',
-            1007: [
-                {
-                    upload_id: 123456,
-                    file: 'contract.pdf',
-                    file_name: 'contract.pdf',
-                    meta: {},
-                },
-            ],
-        },
-    });
+test('row create decorates upload bind failures with actionable guidance', async () => {
+    const bodyFile = tempJSONFile({ fields: { 1001: 'Lead A', 1007: [{ upload_id: 123456, file: 'contract.pdf', file_name: 'contract.pdf', meta: {} }] } });
     await assert.rejects(async () => {
-        await executeCLI('user', ['rows', 'insert-entity', '--app-id', 'app_1', '--entity-id', 'entity_1', '--body-file', bodyFile], env, async (url, init) => {
-            if (String(url) === 'https://arcubase.example.com/entity/app_1/entity_1' && init?.method === 'GET') {
-                return new Response(JSON.stringify({
-                    data: {
-                        fields: [{ id: 1007, type: 'file', label: 'Contract File' }],
-                    },
-                }), { status: 200 });
+        await executeCLI('user', ['row', 'create', '--app-id', 'app_1', '--table-id', 'table_1', '--body-file', bodyFile], env, async (url, init) => {
+            if (String(url) === 'https://arcubase.example.com/api/entity/app_1/table_1' && init?.method === 'GET') {
+                return new Response(JSON.stringify({ data: { fields: [{ id: 1007, type: 'file', label: 'Contract File' }] } }), { status: 200 });
             }
             return new Response(JSON.stringify({
                 error: {
-                    message: 'failed to bind upload to assets: Head \"http://test-bucket.test.aliyuncs.com/upload/123456/contract.pdf\": dial tcp: lookup test-bucket.test.aliyuncs.com: no such host',
+                    message: 'failed to bind upload to assets: Head "http://test-bucket.test.aliyuncs.com/upload/123456/contract.pdf": dial tcp: lookup test-bucket.test.aliyuncs.com: no such host',
                     type: 'system',
                     key: 'error.system',
                 },
@@ -532,176 +313,60 @@ test('insert entity decorates upload bind failures with actionable guidance', as
         assert.equal(error.details?.traceId, 'req_upload_bind');
         assert.equal(error.details?.reason, 'the row payload used a file/image upload entry, but Arcubase could not bind that upload into an asset record');
         assert.match(error.details?.hint ?? '', /rerun arcubase upload/);
-        assert.ok((error.details?.docHints ?? []).some((item) => item.file.endsWith('/docs/runtime-reference/uploads.md')));
         return true;
     });
 });
-test('selection action rejects condition selection without selectAll', async () => {
-    const bodyFile = tempJSONFile({
-        selection: {
-            type: 'condition',
-            length: 1,
-            condition: {
-                q: 'A-100',
-            },
-        },
-    });
+test('row query rejects camelCase viewMode and points to row crud doc', async () => {
+    const bodyFile = tempJSONFile({ limit: 20, offset: 0, viewMode: 'grid' });
     await assert.rejects(async () => {
-        await executeCLI('user', ['rows', 'query-entity-selection', '--app-id', 'app_1', '--entity-id', 'entity_1', '--action', 'archive', '--body-file', bodyFile], env, async () => new Response('{}', { status: 200 }));
+        await executeCLI('user', ['row', 'query', '--app-id', 'app_1', '--table-id', 'table_1', '--body-file', bodyFile], env, async () => new Response('{}', { status: 200 }));
     }, (error) => {
         assert.ok(error instanceof CLIError);
         assert.equal(error.code, 'BODY_VALIDATION_FAILED');
-        assert.ok((error.details?.issues ?? []).some((item) => item.path === 'body.selection.condition.selectAll'));
+        assert.ok((error.details?.issues ?? []).some((item) => item.path === 'body.viewMode'));
         return true;
     });
 });
-test('selection action rejects condition selection that uses text_search instead of q/filter keys', async () => {
-    const bodyFile = tempJSONFile({
-        selection: {
-            type: 'condition',
-            length: 1,
-            condition: {
-                text_search: 'A-100',
-                selectAll: true,
-            },
-        },
-    });
+test('row update rejects fields key', async () => {
+    const bodyFile = tempJSONFile({ fields: { 1002: 99 }, data: { '1002': 99 }, changed_fields: [1002] });
     await assert.rejects(async () => {
-        await executeCLI('user', ['rows', 'query-entity-selection', '--app-id', 'app_1', '--entity-id', 'entity_1', '--action', 'archive', '--body-file', bodyFile], env, async () => new Response('{}', { status: 200 }));
+        await executeCLI('user', ['row', 'update', '--app-id', 'app_1', '--table-id', 'table_1', '--row-id', 'row_1', '--body-file', bodyFile], env, async () => new Response('{}', { status: 200 }));
     }, (error) => {
         assert.ok(error instanceof CLIError);
         assert.equal(error.code, 'BODY_VALIDATION_FAILED');
-        assert.ok((error.details?.issues ?? []).some((item) => item.path === 'body.selection.condition'));
-        assert.ok((error.details?.docHints ?? []).some((item) => item.file.endsWith('/docs/runtime-reference/search-and-bulk-actions.md')));
+        assert.ok((error.details?.issues ?? []).some((item) => item.path === 'body.fields'));
         return true;
     });
 });
-test('bulk update accepts condition selection with q', async () => {
-    const bodyFile = tempJSONFile({
-        selection: {
-            type: 'condition',
-            length: 1,
-            condition: {
-                q: 'A-100',
-                selectAll: true,
-            },
-            sorts: [
-                { column: ':1002', order: 'desc' },
-            ],
-        },
-        fields: [
-            {
-                id: 1002,
-                action: {
-                    type: 'number_add',
-                    number_add: 2,
-                },
-            },
-        ],
-    });
-    const out = await executeCLI('user', ['entity', 'update-entity-bulk', '--app-id', 'app_1', '--entity-id', 'entity_1', '--body-file', bodyFile], env, async (_url, init) => new Response(String(init?.body ?? '{}'), { status: 200 }));
-    assert.equal(out.kind, 'result');
-    assert.equal(out.data.selection.type, 'condition');
-    assert.equal(out.data.fields[0].action.type, 'number_add');
-});
-test('entity tags get-selection-tags accepts ids selection', async () => {
-    const bodyFile = tempJSONFile({
-        policy_id: '',
-        selection: {
-            type: 'ids',
-            ids: [4000000003],
-            length: 1,
-        },
-    });
-    const out = await executeCLI('admin', ['entity-tags', 'get-selection-tags', '--appId', 'app_1', '--entityId', 'entity_1', '--body-file', bodyFile], env, async (_url, init) => new Response(String(init?.body ?? '{}'), { status: 200 }));
-    assert.equal(out.kind, 'result');
-    assert.equal(out.data.selection.type, 'ids');
-});
-test('entity tags batch-add accepts tag_names and condition selection', async () => {
-    const bodyFile = tempJSONFile({
-        policy_id: '',
-        selection: {
-            type: 'condition',
-            length: 1,
-            condition: {
-                q: 'A-100',
-                selectAll: true,
-            },
-        },
-        tag_names: ['tag-a'],
-    });
-    const out = await executeCLI('admin', ['entity-tags', 'batch-add-entity-tags', '--appId', 'app_1', '--entityId', 'entity_1', '--body-file', bodyFile], env, async (_url, init) => new Response(String(init?.body ?? '{}'), { status: 200 }));
-    assert.equal(out.kind, 'result');
-    assert.equal(out.data.tag_names[0], 'tag-a');
-});
-test('invoke batch operator accepts backend request shape', async () => {
-    const bodyFile = tempJSONFile({
-        id: 'event_1',
-        data: {
-            action_id: 'action_1',
-            policy_id: '',
-            selection: {
-                type: 'all',
-            },
-        },
-        params: {},
-    });
-    const out = await executeCLI('user', ['entity', 'invoke-entity-batch-operator', '--app-id', 'app_1', '--entity-id', 'entity_1', '--body-file', bodyFile], env, async (_url, init) => new Response(String(init?.body ?? '{}'), { status: 200 }));
-    assert.equal(out.kind, 'result');
-    assert.equal(out.data.id, 'event_1');
-    assert.equal(out.data.data.action_id, 'action_1');
-    assert.equal(out.data.data.selection.type, 'all');
-});
-test('query entity rejects camelCase viewMode and points to row crud doc', async () => {
-    const bodyFile = tempJSONFile({
-        limit: 20,
-        offset: 0,
-        viewMode: 'grid',
-    });
+test('row update rejects changed_fields that are missing from data', async () => {
+    const bodyFile = tempJSONFile({ data: { '1002': 99 }, changed_fields: [1003] });
     await assert.rejects(async () => {
-        await executeCLI('user', ['rows', 'query-entity', '--app-id', 'app_1', '--entity-id', 'entity_1', '--body-file', bodyFile], env, async () => new Response('{}', { status: 200 }));
+        await executeCLI('user', ['row', 'update', '--app-id', 'app_1', '--table-id', 'table_1', '--row-id', 'row_1', '--body-file', bodyFile], env, async () => new Response('{}', { status: 200 }));
     }, (error) => {
         assert.ok(error instanceof CLIError);
         assert.equal(error.code, 'BODY_VALIDATION_FAILED');
-        assert.ok((error.details?.issues ?? []).some((item) => item.path === 'body.viewMode'));
-        assert.ok((error.details?.docHints ?? []).some((item) => item.file.endsWith('/docs/runtime-reference/row-crud.md')));
+        assert.ok((error.details?.issues ?? []).some((item) => item.path === 'body.changed_fields.0'));
         return true;
     });
 });
-test('update entity row rejects fields key', async () => {
-    const bodyFile = tempJSONFile({
-        fields: {
-            1002: 99,
-        },
-        data: {
-            '1002': 99,
-        },
-        changed_fields: [1002],
-    });
-    await assert.rejects(async () => {
-        await executeCLI('user', ['rows', 'update-entity-row', '--app-id', 'app_1', '--entity-id', 'entity_1', '--row-id', 'row_1', '--body-file', bodyFile], env, async () => new Response('{}', { status: 200 }));
-    }, (error) => {
-        assert.ok(error instanceof CLIError);
-        assert.equal(error.code, 'BODY_VALIDATION_FAILED');
-        assert.ok((error.details?.issues ?? []).some((item) => item.path === 'body.fields'));
-        assert.ok((error.details?.docHints ?? []).some((item) => item.file.endsWith('/docs/runtime-reference/row-crud.md')));
-        return true;
-    });
+test('workflow approve maps to fixed action path', async () => {
+    const bodyFile = tempJSONFile({ task_id: 1001, fields: {}, changed: [] });
+    const out = await executeCLI('user', ['workflow', 'approve', '--app-id', 'app_1', '--table-id', 'table_1', '--row-id', 'row_1', '--body-file', bodyFile], env, async (url, init) => new Response(JSON.stringify({ url, method: init?.method, body: init?.body ? JSON.parse(String(init.body)) : null }), { status: 200 }));
+    assert.equal(out.kind, 'result');
+    assert.equal(out.data.url, 'https://arcubase.example.com/api/entity/app_1/table_1/row/row_1/action/2');
+    assert.equal(out.data.body.task_id, 1001);
 });
-test('update entity row rejects changed_fields that are missing from data', async () => {
-    const bodyFile = tempJSONFile({
-        data: {
-            '1002': 99,
-        },
-        changed_fields: [1003],
-    });
+test('workflow query-approve-users requires request body', async () => {
     await assert.rejects(async () => {
-        await executeCLI('user', ['rows', 'update-entity-row', '--app-id', 'app_1', '--entity-id', 'entity_1', '--row-id', 'row_1', '--body-file', bodyFile], env, async () => new Response('{}', { status: 200 }));
+        await executeCLI('user', ['workflow', 'query-approve-users', '--app-id', 'app_1', '--table-id', 'table_1'], env, async () => new Response('{}', { status: 200 }));
     }, (error) => {
         assert.ok(error instanceof CLIError);
-        assert.equal(error.code, 'BODY_VALIDATION_FAILED');
-        assert.ok((error.details?.issues ?? []).some((item) => item.path === 'body.changed_fields.0'));
-        assert.ok((error.details?.docHints ?? []).some((item) => item.file.endsWith('/docs/runtime-reference/row-crud.md')));
+        assert.equal(error.code, 'MISSING_BODY_FILE');
         return true;
     });
 });
+test('entry passes include_app_tables query flag', async () => {
+    const out = await executeCLI('user', ['entry', '--include-app-tables', 'true'], env, async (url, init) => new Response(JSON.stringify({ url, method: init?.method }), { status: 200 }));
+    assert.equal(out.kind, 'result');
+    assert.equal(out.data.url, 'https://arcubase.example.com/api/entry?include_app_tables=true');
+});