busa-cli 0.11.0 → 0.11.3

package/dist/{chunk-QJJMAA3K.js → chunk-CEH54HWM.js}

@@ -126,6 +126,11 @@ import { basename as basename2, extname as extname2 } from "path";
 
 // ../../packages/busabase-contract/src/tasks/base-field.ts
 var OPERATIONS = ["add", "update", "delete", "convert", "reorder", "restore"];
+var mergeIntent = (input) => {
+  if (input.requireReview) return { autoMerge: false };
+  if (input.autoMerge) return { autoMerge: true };
+  return {};
+};
 var REQUIRED_BY_OPERATION = {
   add: ["slug", "name"],
   update: ["fieldId", "patch"],
@@ -147,7 +152,7 @@ var baseFieldChangeTask = {
   name: "base_field_change_request",
   cliPath: ["bases", "field-change-request"],
   summary: "Propose a Base schema change (add / update / delete / convert / reorder / restore)",
-  guidance: "Approval-first: proposes a ChangeRequest, it does not alter the schema directly. Pick `operation` first, then supply only that operation's arguments \u2014 add needs slug+name; update needs fieldId+patch; delete/restore need fieldId; convert needs fieldId+newType; reorder needs the complete fieldIds order. Before a convert, `bases_preview_field_conversion` shows what the data would become.",
+  guidance: "Review is permission-aware for add / update / reorder / restore, decided server-side: the change merges immediately when your key has write access on the Base's node and lands as a pending ChangeRequest otherwise \u2014 check the response's `status`. Pass requireReview to always propose instead. `delete` and `convert` are ALWAYS review-first regardless of permission, by design: delete soft-deletes the field's stored values with it, and convert can drop values. Pick `operation` first, then supply only that operation's arguments \u2014 add needs slug+name; update needs fieldId+patch; delete/restore need fieldId; convert needs fieldId+newType; reorder needs the complete fieldIds order. Before a convert, `bases_preview_field_conversion` shows what the data would become.",
   annotations: { readOnly: false, destructive: false },
   params: [
     { name: "baseId", kind: "string", required: true, description: "Base to change." },
@@ -220,7 +225,19 @@ var baseFieldChangeTask = {
       description: "Complete field order (reorder only). Repeat the flag per field."
     },
     { name: "message", kind: "string", description: "Explanation for the reviewer." },
-    { name: "submittedBy", kind: "string", description: "Producer label recorded on the change." }
+    { name: "submittedBy", kind: "string", description: "Producer label recorded on the change." },
+    {
+      name: "autoMerge",
+      kind: "boolean",
+      appliesWhen: { param: "operation", values: ["add", "update", "reorder", "restore"] },
+      description: "Skip review and apply the schema change immediately if you have write access. Not a permission override \u2014 a changeRequest-level key still gets a pending CR. Default is permission-aware: merge when you can, otherwise propose."
+    },
+    {
+      name: "requireReview",
+      kind: "boolean",
+      appliesWhen: { param: "operation", values: ["add", "update", "reorder", "restore"] },
+      description: "Always propose a pending ChangeRequest, even with write access. delete and convert are review-first regardless."
+    }
   ],
   examples: [
     "busabase-cli bases field-change-request --base-id bas_1 --operation add --slug status --name Status --field-type select",
@@ -232,7 +249,8 @@ var baseFieldChangeTask = {
     const common = {
       baseId: input.baseId,
       ...input.message ? { message: input.message } : {},
-      ...input.submittedBy ? { submittedBy: input.submittedBy } : {}
+      ...input.submittedBy ? { submittedBy: input.submittedBy } : {},
+      ...mergeIntent(input)
     };
     switch (input.operation) {
       case "add":
@@ -557,6 +575,11 @@ var nodeReadFileTask = {
     type: resolveKind(input.kind)
   })
 };
+var mergeIntent2 = (input) => {
+  if (input.requireReview) return { autoMerge: false };
+  if (input.autoMerge) return { autoMerge: true };
+  return {};
+};
 var nodeFilesChangeRequestTask = {
   name: "node_files_change_request",
   cliPath: ["nodes", "files-change-request"],
@@ -578,7 +601,7 @@ var nodeFilesChangeRequestTask = {
     }
   ],
   summary: "Propose file changes inside a Skill, Drive, or AirApp node",
-  guidance: 'Approval-first: this proposes a ChangeRequest for a human to review, it does not write directly. Each operation is one of create / update / delete / metadata_update. Include `baseContentHash` (from `node_file_read`) on an update so a concurrent edit is caught. For kind "airapp", keep the project runnable by `npm run dev` \u2014 editing package.json must leave a "dev" script starting a plain Node server, not a bundler dev server.',
+  guidance: 'Review is permission-aware, decided server-side: the change merges immediately when your key has write access on the node and lands as a pending ChangeRequest otherwise \u2014 check the response\'s `status`. Pass requireReview to always propose instead. A batch containing a `delete` is ALWAYS review-first regardless of permission, by design \u2014 deleting a mounted file destroys content, and a batch is never partially merged. Each operation is one of create / update / delete / metadata_update. Include `baseContentHash` (from `node_file_read`) on an update so a concurrent edit is caught. For kind "airapp", keep the project runnable by `npm run dev` \u2014 editing package.json must leave a "dev" script starting a plain Node server, not a bundler dev server.',
   annotations: { readOnly: false, destructive: false },
   params: [
     kindParam,
@@ -594,10 +617,21 @@ var nodeFilesChangeRequestTask = {
       kind: "string",
       description: 'Explanation for the reviewer. Conventional-commit style, e.g. "Rewrite README quickstart for the new auth flow".'
     },
-    { name: "submittedBy", kind: "string", description: "Producer label recorded on the change." }
+    { name: "submittedBy", kind: "string", description: "Producer label recorded on the change." },
+    {
+      name: "autoMerge",
+      kind: "boolean",
+      description: "Skip review and apply the file changes immediately if you have write access. Not a permission override, and ignored for a batch containing a delete. Default is permission-aware: merge when you can, otherwise propose."
+    },
+    {
+      name: "requireReview",
+      kind: "boolean",
+      description: "Always propose a pending ChangeRequest, even with write access."
+    }
   ],
   examples: [
-    `busabase-cli nodes files-change-request --kind skill --node-id nod_123 --operations-json '[{"kind":"update","path":"SKILL.md","content":"# Hi"}]'`
+    `busabase-cli nodes files-change-request --kind skill --node-id nod_123 --operations-json '[{"kind":"update","path":"SKILL.md","content":"# Hi"}]'`,
+    "busabase-cli nodes files-change-request --kind skill --node-id nod_123 --operations-json @ops.json --require-review"
   ],
   execute: async (client, input) => {
     if (!Array.isArray(input.operations) || input.operations.length === 0) {
@@ -608,7 +642,8 @@ var nodeFilesChangeRequestTask = {
       type: resolveKind(input.kind),
       operations: input.operations,
       ...input.message ? { message: input.message } : {},
-      ...input.submittedBy ? { submittedBy: input.submittedBy } : {}
+      ...input.submittedBy ? { submittedBy: input.submittedBy } : {},
+      ...mergeIntent2(input)
     };
     return client.fileTrees.createChangeRequest(payload);
   }
@@ -1119,7 +1154,7 @@ var rejectMismatchedPayload = (input) => {
     );
   }
 };
-var mergeIntent = (input) => {
+var mergeIntent3 = (input) => {
   if (input.requireReview) return { autoMerge: false };
   if (input.autoMerge) return { autoMerge: true };
   return {};
@@ -1248,7 +1283,7 @@ var nodeCreateTask = {
       name: input.name,
       description: input.description,
       parentNodeId: input.parentNodeId,
-      ...mergeIntent(input)
+      ...mergeIntent3(input)
     };
     if (FILE_TREE_TYPES.has(type)) {
       const payload = {
@@ -1279,7 +1314,7 @@ var nodeCreateTask = {
     return client.nodes.createChangeRequest({
       message: input.message ?? `Create ${type} ${input.name}`,
       submittedBy: input.submittedBy,
-      ...mergeIntent(input),
+      ...mergeIntent3(input),
       operations: [
         {
           kind: "create",
@@ -1296,11 +1331,16 @@ var nodeCreateTask = {
 
 // ../../packages/busabase-contract/src/tasks/record-change.ts
 var OPERATIONS2 = ["update", "delete", "restore"];
+var mergeIntent4 = (input) => {
+  if (input.requireReview) return { autoMerge: false };
+  if (input.autoMerge) return { autoMerge: true };
+  return {};
+};
 var recordChangeTask = {
   name: "record_change_request",
   cliPath: ["records", "change-request"],
   summary: "Propose a change to an existing record (update / delete / restore)",
-  guidance: "Approval-first: proposes a ChangeRequest for a human, it does not write directly. `delete` ARCHIVES the record \u2014 it is reversible with `restore`, not an erase. For update, `fields` is keyed by field slug and only needs the fields you are changing; if you set the Base's PRIMARY (first) field, keep it a short human-readable title.",
+  guidance: "Review is permission-aware, decided server-side: `update` merges immediately when your key has write access on the Base's node and lands as a pending ChangeRequest otherwise \u2014 check the response's `materialized` field to see which happened. Pass explicit `autoMerge: false` to force review even when you could write directly. `delete` and `restore` are always review-first regardless of permission, by design. `delete` ARCHIVES the record \u2014 it is reversible with `restore`, not an erase. For update, `fields` is keyed by field slug and only needs the fields you are changing; if you set the Base's PRIMARY (first) field, keep it a short human-readable title.",
   annotations: { readOnly: false, destructive: false },
   params: [
     { name: "recordId", kind: "string", required: true, description: "Record to change." },
@@ -1322,10 +1362,23 @@ var recordChangeTask = {
       kind: "string",
       description: 'Explanation for the reviewer \u2014 imperative verb + what + why, e.g. "Update deal stage to qualified \u2014 demo booked".'
     },
-    { name: "submittedBy", kind: "string", description: "Producer label recorded on the change." }
+    { name: "submittedBy", kind: "string", description: "Producer label recorded on the change." },
+    {
+      name: "autoMerge",
+      kind: "boolean",
+      appliesWhen: { param: "operation", values: ["update"] },
+      description: "Skip review and apply the update immediately if you have write access. Not a permission override \u2014 a changeRequest-level key still gets a pending CR. Default is permission-aware: merge when you can, otherwise propose."
+    },
+    {
+      name: "requireReview",
+      kind: "boolean",
+      appliesWhen: { param: "operation", values: ["update"] },
+      description: "Always propose a pending ChangeRequest for this update, even with write access. delete/restore are review-first regardless."
+    }
   ],
   examples: [
     `busabase-cli records change-request --record-id rec_1 --operation update --fields-json '{"status":"published"}'`,
+    `busabase-cli records change-request --record-id rec_1 --operation update --fields-json '{"status":"published"}' --require-review`,
     "busabase-cli records change-request --record-id rec_1 --operation delete"
   ],
   execute: async (client, input) => {
@@ -1341,7 +1394,10 @@ var recordChangeTask = {
       return client.records.changeRequest({
         ...common,
         operation: "update",
-        fields: input.fields
+        fields: input.fields,
+        // Only `update` carries the merge intent — the endpoint's delete/restore
+        // branches have no `autoMerge` in their schema at all, by design.
+        ...mergeIntent4(input)
       });
     }
     if (input.operation === "delete") {
@@ -1402,7 +1458,7 @@ var recordQueryTask = {
     { path: ["records", "count"], preset: { countOnly: true }, summary: "Count records" }
   ],
   summary: "List records with pagination, or count them",
-  guidance: "Always keyset-paginated: when `nextCursor` comes back non-null there ARE more records \u2014 page with it instead of raising `limit` (capped at 100). Pass countOnly to get the total without fetching rows. To find records by a field value use `record_find_by_field`; to search content use `search` or `grep`.",
+  guidance: 'Always keyset-paginated: when `nextCursor` comes back non-null there ARE more records \u2014 page with it instead of raising `limit` (capped at 100). Pass countOnly to get the total without fetching rows \u2014 it is a real, exact SQL count (never an estimate), so it is the right tool for a dashboard total instead of paging through everything and counting client-side. countOnly accepts viewId and/or filters to count a scoped subset (e.g. "PRs on the main branch"); both require baseId. To find records by a field value use `record_find_by_field`; to search content use `search` or `grep`.',
   annotations: { readOnly: true, destructive: false },
   params: [
     { name: "baseId", kind: "string", description: "Restrict to one Base. Omit for the space." },
@@ -1417,20 +1473,29 @@ var recordQueryTask = {
     {
       name: "filters",
       kind: "json",
-      description: "View filters pushed down to the server."
+      description: "View filters pushed down to the server. With countOnly, requires baseId; not every filter is a cheap SQL count (see the records.count API description) but the result is always exact."
     },
     { name: "sort", kind: "json", description: "View sort (number/date fields only)." },
-    { name: "countOnly", kind: "boolean", description: "Return the total instead of rows." }
+    { name: "countOnly", kind: "boolean", description: "Return the total instead of rows." },
+    {
+      name: "viewId",
+      kind: "string",
+      description: "countOnly only: count the rows this saved View displays. Requires baseId."
+    }
   ],
   examples: [
     "busabase-cli records query --base-id bas_123 --limit 100",
-    "busabase-cli records count --base-id bas_123"
+    "busabase-cli records count --base-id bas_123",
+    `busabase-cli records count --base-id bas_123 --filters '[{"fieldSlug":"branch","fieldType":"text","operator":"equals","value":"main"}]'`,
+    "busabase-cli records count --base-id bas_123 --view-id viw_456"
   ],
   execute: async (client, input) => {
     if (input.countOnly) {
-      return client.records.count(
-        input.baseId ? { baseId: input.baseId } : {}
-      );
+      return client.records.count({
+        ...input.baseId ? { baseId: input.baseId } : {},
+        ...input.viewId ? { viewId: input.viewId } : {},
+        ...Array.isArray(input.filters) ? { filters: input.filters } : {}
+      });
     }
     return client.records.list({
       ...input.limit !== void 0 ? { limit: input.limit } : {},
@@ -1444,7 +1509,7 @@ var recordQueryTask = {
 
 // ../../packages/busabase-contract/src/tasks/view-change.ts
 var ACTIONS = ["create", "update", "delete", "restore"];
-var mergeIntent2 = (input) => {
+var mergeIntent5 = (input) => {
   if (input.requireReview) return { autoMerge: false };
   if (input.autoMerge) return { autoMerge: true };
   return {};
@@ -1523,7 +1588,7 @@ var viewChangeTask = {
       ...input.submittedBy ? { submittedBy: input.submittedBy } : {},
       // Tri-state, like node_create's: omitted keeps the endpoint's
       // permission-aware default, explicit true/false forces the branch.
-      ...mergeIntent2(input)
+      ...mergeIntent5(input)
     };
     if (input.action === "create") {
       if (!input.baseId || !input.name) {
@@ -2692,9 +2757,15 @@ async function ask2(question) {
 function openBrowser(url) {
   const platform = process.platform;
   const [command, args] = platform === "darwin" ? ["open", [url]] : platform === "win32" ? ["cmd", ["/c", "start", "", url]] : ["xdg-open", [url]];
+  const reportFailure = () => {
+    say2("Could not open a browser automatically. Open the URL above manually.");
+  };
   try {
-    spawn(command, args, { stdio: "ignore", detached: true }).unref();
+    const child = spawn(command, args, { stdio: "ignore", detached: true });
+    child.once("error", reportFailure);
+    child.unref();
   } catch {
+    reportFailure();
   }
 }
 async function verifyAuth(baseUrl, token) {
@@ -3203,7 +3274,7 @@ import { readFile } from "fs/promises";
 import { join as join3 } from "path";
 
 // ../../packages/busabase-contract/src/domains/package/types.ts
-import { z as z9 } from "zod";
+import { z as z10 } from "zod";
 
 // ../../packages/openlib/i18n/i-string.ts
 import { z as z5 } from "zod";
@@ -3222,15 +3293,21 @@ var iStringRecordSchema = z5.partialRecord(LocaleSchema, z5.string());
 var iStringSchema = z5.union([z5.string(), iStringRecordSchema]).describe("i18n string");
 
 // ../../packages/busabase-contract/src/domains/base/contract/base-schemas.ts
+import { z as z7 } from "zod";
+
+// ../../packages/busabase-contract/src/contract/auto-merge.ts
 import { z as z6 } from "zod";
-var fieldNameSchema = z6.union([
-  z6.string().min(1),
+var autoMergeNotAccepted = (reason) => z6.literal(false, { error: `\`autoMerge: true\` is not accepted here: ${reason}` }).optional().describe(`Only \`false\` (or omitted) is accepted. ${reason}`);
+
+// ../../packages/busabase-contract/src/domains/base/contract/base-schemas.ts
+var fieldNameSchema = z7.union([
+  z7.string().min(1),
   iStringRecordSchema.refine(
     (record) => Object.values(record).some((value) => value && value.trim().length > 0),
     "field name must have at least one non-empty locale value"
   )
 ]);
-var fieldTypeSchema = z6.enum([
+var fieldTypeSchema = z7.enum([
   "text",
   "longtext",
   "markdown",
@@ -3260,105 +3337,105 @@ var fieldTypeSchema = z6.enum([
   "lookup",
   "whiteboard"
 ]);
-var lookupRollupSchema = z6.enum(["values", "count", "sum", "average", "min", "max", "concatenate"]).default("values");
-var fieldOptionsSchema = z6.object({
-  ai: z6.object({
-    model: z6.string().optional(),
-    prompt: z6.string().optional(),
-    reviewRequired: z6.boolean().optional(),
-    sourceFieldIds: z6.array(z6.string()).optional()
+var lookupRollupSchema = z7.enum(["values", "count", "sum", "average", "min", "max", "concatenate"]).default("values");
+var fieldOptionsSchema = z7.object({
+  ai: z7.object({
+    model: z7.string().optional(),
+    prompt: z7.string().optional(),
+    reviewRequired: z7.boolean().optional(),
+    sourceFieldIds: z7.array(z7.string()).optional()
   }).optional(),
   // Per-field config for `attachment` columns (all optional; logic enforces a
   // 25MB ceiling regardless).
-  attachment: z6.object({
-    maxFiles: z6.number().int().positive().optional(),
-    allowedMimeTypes: z6.array(z6.string()).optional(),
-    maxFileSize: z6.number().int().positive().optional()
+  attachment: z7.object({
+    maxFiles: z7.number().int().positive().optional(),
+    allowedMimeTypes: z7.array(z7.string()).optional(),
+    maxFileSize: z7.number().int().positive().optional()
   }).optional(),
-  choices: z6.array(
-    z6.object({
-      color: z6.string().optional(),
-      id: z6.string(),
-      name: z6.string()
+  choices: z7.array(
+    z7.object({
+      color: z7.string().optional(),
+      id: z7.string(),
+      name: z7.string()
     })
   ).optional(),
-  code: z6.object({
-    language: z6.string().optional()
+  code: z7.object({
+    language: z7.string().optional()
   }).optional(),
-  embed: z6.object({
-    aspectRatio: z6.enum(["16:9", "4:3", "1:1"]).optional(),
-    height: z6.number().int().positive().max(1200).optional(),
-    providers: z6.array(z6.string()).optional()
+  embed: z7.object({
+    aspectRatio: z7.enum(["16:9", "4:3", "1:1"]).optional(),
+    height: z7.number().int().positive().max(1200).optional(),
+    providers: z7.array(z7.string()).optional()
   }).optional(),
   // `formula` fields are server-computed (like the other computed types) from
   // `expression` at record write time — see packages/busabase-core's
   // domains/base/formula/ engine. `{slug}` references a sibling field, including
   // another `formula` field (chained formulas) — a dependency graph orders
   // computation and rejects cycles at field create/edit time.
-  formula: z6.object({
-    expression: z6.string().min(1)
+  formula: z7.object({
+    expression: z7.string().min(1)
   }).optional(),
-  inverseFieldId: z6.string().optional(),
+  inverseFieldId: z7.string().optional(),
   // `lookup` fields pull a field's values across a `relation` field on the same
   // Base, optionally rolling them up into one scalar. Unlike every other computed
   // type they are NOT stored on the commit: a lookup's value depends on OTHER
   // records, which can change without this record ever being written, so it is
   // resolved at read time (see busabase-core's domains/base/logic/lookup-values.ts).
-  lookup: z6.object({
-    relationFieldSlug: z6.string().min(1).describe("Slug of a `relation` field on THIS Base \u2014 the hop to follow."),
-    targetFieldSlug: z6.string().min(1).describe("Slug of the field on the related Base whose values are pulled over."),
+  lookup: z7.object({
+    relationFieldSlug: z7.string().min(1).describe("Slug of a `relation` field on THIS Base \u2014 the hop to follow."),
+    targetFieldSlug: z7.string().min(1).describe("Slug of the field on the related Base whose values are pulled over."),
     rollup: lookupRollupSchema.optional(),
-    limit: z6.enum(["all", "first"]).optional().describe("`first` looks at only the first linked record; default `all`.")
+    limit: z7.enum(["all", "first"]).optional().describe("`first` looks at only the first linked record; default `all`.")
   }).optional(),
-  multiple: z6.boolean().optional(),
+  multiple: z7.boolean().optional(),
   // Display formatting for `number` columns (Notion-style: one number type,
   // a format option). `currency` renders via Intl.NumberFormat.
-  number: z6.object({
-    format: z6.enum(["plain", "currency"]).optional(),
-    currency: z6.string().optional(),
-    locale: z6.string().optional()
+  number: z7.object({
+    format: z7.enum(["plain", "currency"]).optional(),
+    currency: z7.string().optional(),
+    locale: z7.string().optional()
   }).optional(),
-  targetBaseId: z6.string().optional().describe("Relation target Base id (bse_\u2026). Or pass targetBaseSlug to name it by slug."),
-  targetBaseSlug: z6.string().optional().describe(
+  targetBaseId: z7.string().optional().describe("Relation target Base id (bse_\u2026). Or pass targetBaseSlug to name it by slug."),
+  targetBaseSlug: z7.string().optional().describe(
     "Relation target Base by slug \u2014 a convenience alias for targetBaseId, resolved server-side (active bases in the current space). If both are given, targetBaseId wins."
   )
 }).default({});
-var baseFieldSchema = z6.object({
-  id: z6.string(),
-  baseId: z6.string(),
-  slug: z6.string(),
+var baseFieldSchema = z7.object({
+  id: z7.string(),
+  baseId: z7.string(),
+  slug: z7.string(),
   name: fieldNameSchema,
   type: fieldTypeSchema,
-  required: z6.boolean(),
-  position: z6.number(),
+  required: z7.boolean(),
+  position: z7.number(),
   options: fieldOptionsSchema
 });
-var baseSchema = z6.object({
-  id: z6.string(),
-  nodeId: z6.string(),
-  slug: z6.string(),
-  name: z6.string(),
-  description: z6.string(),
-  reviewPolicy: z6.object({
-    kind: z6.literal("single"),
-    requiredApprovals: z6.number()
+var baseSchema = z7.object({
+  id: z7.string(),
+  nodeId: z7.string(),
+  slug: z7.string(),
+  name: z7.string(),
+  description: z7.string(),
+  reviewPolicy: z7.object({
+    kind: z7.literal("single"),
+    requiredApprovals: z7.number()
   }),
-  createdAt: z6.string(),
-  fields: z6.array(baseFieldSchema)
+  createdAt: z7.string(),
+  fields: z7.array(baseFieldSchema)
 });
-var createBaseInputSchema = z6.object({
-  parentNodeId: z6.string().optional().describe(
+var createBaseInputSchema = z7.object({
+  parentNodeId: z7.string().optional().describe(
     "Parent node id. Must be a folder or the space root; container-incapable node types (Base, Doc, AirApp, etc.) cannot hold children."
   ),
-  slug: z6.string().min(1).regex(/^[a-z0-9-]+$/),
-  name: z6.string().min(1),
-  description: z6.string().optional().default(""),
-  fields: z6.array(
-    z6.object({
-      slug: z6.string().min(1),
+  slug: z7.string().min(1).regex(/^[a-z0-9-]+$/),
+  name: z7.string().min(1),
+  description: z7.string().optional().default(""),
+  fields: z7.array(
+    z7.object({
+      slug: z7.string().min(1),
       name: fieldNameSchema,
       type: fieldTypeSchema.default("text"),
-      required: z6.boolean().default(false),
+      required: z7.boolean().default(false),
       options: fieldOptionsSchema.optional().default({})
     })
   ).default([]),
@@ -3366,131 +3443,157 @@ var createBaseInputSchema = z6.object({
   // write access on the parent node, otherwise falls back to a pending
   // ChangeRequest (status "in_review"). Pass explicit `autoMerge: false` to
   // force review even with write access.
-  autoMerge: z6.boolean().optional()
+  autoMerge: z7.boolean().optional()
 });
-var createBaseFieldInputSchema = z6.object({
+var createBaseFieldInputSchema = z7.object({
   name: fieldNameSchema,
   // Field slugs are snake_case identifiers (e.g. `cover_image`, `publish_date`) — the
   // seed and the inline-fields path on `POST /bases` already allow underscores, so the
   // add-field endpoint must too. (Base/folder/view slugs stay kebab-case: they go in URLs.)
-  slug: z6.string().min(1).regex(/^[a-z0-9_-]+$/),
+  slug: z7.string().min(1).regex(/^[a-z0-9_-]+$/),
   type: fieldTypeSchema.default("text"),
-  required: z6.boolean().optional().default(false),
+  required: z7.boolean().optional().default(false),
   options: fieldOptionsSchema.optional().default({})
 });
+var fieldAutoMergeSchema = z7.boolean().optional().describe(
+  "Whether to approve and merge this field change immediately. Omitted defaults to merging immediately if the actor has write access on the Base's node, otherwise falling back to a pending Change Request; pass explicit false to force review even with write access. Not accepted by the delete and convert operations, which always require review."
+);
 var createFieldChangeRequestInputSchema = createBaseFieldInputSchema.extend({
-  message: z6.string().optional().default("Add field"),
-  submittedBy: z6.string().optional().default("local-editor")
+  message: z7.string().optional().default("Add field"),
+  submittedBy: z7.string().optional().default("local-editor"),
+  autoMerge: fieldAutoMergeSchema
 });
-var deleteFieldChangeRequestInputSchema = z6.object({
-  fieldId: z6.string().min(1),
-  message: z6.string().optional(),
-  submittedBy: z6.string().optional().default("local-editor")
+var deleteFieldChangeRequestInputSchema = z7.object({
+  fieldId: z7.string().min(1),
+  message: z7.string().optional(),
+  submittedBy: z7.string().optional().default("local-editor"),
+  autoMerge: autoMergeNotAccepted(
+    "deleting a field soft-deletes its stored values with it, so it always requires review. Omit the flag."
+  )
 });
-var updateFieldChangeRequestInputSchema = z6.object({
-  fieldId: z6.string().min(1),
-  patch: z6.object({
+var updateFieldChangeRequestInputSchema = z7.object({
+  fieldId: z7.string().min(1),
+  patch: z7.object({
     name: fieldNameSchema.optional(),
-    required: z6.boolean().optional(),
+    required: z7.boolean().optional(),
     options: fieldOptionsSchema.optional()
   }),
-  message: z6.string().optional(),
-  submittedBy: z6.string().optional().default("local-editor")
+  message: z7.string().optional(),
+  submittedBy: z7.string().optional().default("local-editor"),
+  autoMerge: fieldAutoMergeSchema
 });
-var previewFieldConversionInputSchema = z6.object({
-  fieldId: z6.string().min(1),
+var previewFieldConversionInputSchema = z7.object({
+  fieldId: z7.string().min(1),
   newType: fieldTypeSchema
 });
-var previewFieldConversionOutputSchema = z6.object({
-  totalCount: z6.number(),
-  convertibleCount: z6.number(),
-  nullCount: z6.number(),
-  conflicts: z6.array(z6.object({ recordId: z6.string(), currentValue: z6.unknown() }))
+var previewFieldConversionOutputSchema = z7.object({
+  totalCount: z7.number(),
+  convertibleCount: z7.number(),
+  nullCount: z7.number(),
+  conflicts: z7.array(z7.object({ recordId: z7.string(), currentValue: z7.unknown() }))
 });
-var convertFieldChangeRequestInputSchema = z6.object({
-  fieldId: z6.string().min(1),
+var convertFieldChangeRequestInputSchema = z7.object({
+  fieldId: z7.string().min(1),
   newType: fieldTypeSchema,
-  selectChoiceMode: z6.enum(["auto_create", "null_on_missing"]).default("null_on_missing"),
-  message: z6.string().optional(),
-  submittedBy: z6.string().optional().default("local-editor")
+  selectChoiceMode: z7.enum(["auto_create", "null_on_missing"]).default("null_on_missing"),
+  message: z7.string().optional(),
+  submittedBy: z7.string().optional().default("local-editor"),
+  autoMerge: autoMergeNotAccepted(
+    "converting a field's type can drop values, so it always requires review. Run previewFieldConversion first to see what would change, then omit the flag."
+  )
 });
-var reorderFieldsChangeRequestInputSchema = z6.object({
-  fieldIds: z6.array(z6.string()).min(1),
-  message: z6.string().optional(),
-  submittedBy: z6.string().optional().default("local-editor")
+var reorderFieldsChangeRequestInputSchema = z7.object({
+  fieldIds: z7.array(z7.string()).min(1),
+  message: z7.string().optional(),
+  submittedBy: z7.string().optional().default("local-editor"),
+  autoMerge: fieldAutoMergeSchema
 });
-var archiveBaseInputSchema = z6.object({
-  message: z6.string().optional(),
-  submittedBy: z6.string().optional().default("local-editor")
+var archiveBaseInputSchema = z7.object({
+  message: z7.string().optional(),
+  submittedBy: z7.string().optional().default("local-editor"),
+  autoMerge: autoMergeNotAccepted(
+    "archiving a Base removes it and every record in it from every listing at once, so it always requires review. Omit the flag."
+  )
 });
-var restoreBaseInputSchema = z6.object({
-  message: z6.string().optional(),
-  submittedBy: z6.string().optional().default("local-editor")
+var restoreBaseInputSchema = z7.object({
+  message: z7.string().optional(),
+  submittedBy: z7.string().optional().default("local-editor"),
+  // Restoring an archived Base is the undo of a destructive act — nothing is at
+  // risk, so it takes the same permission-aware default as everything else.
+  // `archiveBaseInputSchema` above deliberately has no `autoMerge`: archiving
+  // takes a whole Base and every record in it out of every listing at once,
+  // which is strictly larger than the record `delete` that is already review-only.
+  autoMerge: z7.boolean().optional()
 });
-var restoreFieldChangeRequestInputSchema = z6.object({
-  fieldId: z6.string().min(1),
-  message: z6.string().optional(),
-  submittedBy: z6.string().optional().default("local-editor")
+var restoreFieldChangeRequestInputSchema = z7.object({
+  fieldId: z7.string().min(1),
+  message: z7.string().optional(),
+  submittedBy: z7.string().optional().default("local-editor"),
+  autoMerge: fieldAutoMergeSchema
 });
-var withBaseId = { baseId: z6.string().min(1) };
-var fieldChangeRequestInputSchema = z6.discriminatedUnion("operation", [
-  createFieldChangeRequestInputSchema.extend({ operation: z6.literal("create"), ...withBaseId }),
-  updateFieldChangeRequestInputSchema.extend({ operation: z6.literal("update"), ...withBaseId }),
-  deleteFieldChangeRequestInputSchema.extend({ operation: z6.literal("delete"), ...withBaseId }),
-  convertFieldChangeRequestInputSchema.extend({ operation: z6.literal("convert"), ...withBaseId }),
-  reorderFieldsChangeRequestInputSchema.extend({ operation: z6.literal("reorder"), ...withBaseId }),
-  restoreFieldChangeRequestInputSchema.extend({ operation: z6.literal("restore"), ...withBaseId })
+var withBaseId = { baseId: z7.string().min(1) };
+var fieldChangeRequestInputSchema = z7.discriminatedUnion("operation", [
+  createFieldChangeRequestInputSchema.extend({ operation: z7.literal("create"), ...withBaseId }),
+  updateFieldChangeRequestInputSchema.extend({ operation: z7.literal("update"), ...withBaseId }),
+  deleteFieldChangeRequestInputSchema.extend({ operation: z7.literal("delete"), ...withBaseId }),
+  convertFieldChangeRequestInputSchema.extend({ operation: z7.literal("convert"), ...withBaseId }),
+  reorderFieldsChangeRequestInputSchema.extend({ operation: z7.literal("reorder"), ...withBaseId }),
+  restoreFieldChangeRequestInputSchema.extend({ operation: z7.literal("restore"), ...withBaseId })
+]);
+var baseLifecycleChangeRequestInputSchema = z7.discriminatedUnion("operation", [
+  archiveBaseInputSchema.extend({ operation: z7.literal("archive"), ...withBaseId }),
+  restoreBaseInputSchema.extend({ operation: z7.literal("restore"), ...withBaseId })
 ]);
 
 // ../../packages/busabase-contract/src/domains/base/contract/view-schemas.ts
-import { z as z8 } from "zod";
+import { z as z9 } from "zod";
 
 // ../../packages/busabase-contract/src/contract/schemas.ts
-import { z as z7 } from "zod";
-var nodeSchema = z7.lazy(
-  () => z7.object({
-    id: z7.string(),
-    parentId: z7.string().nullable(),
-    type: z7.enum(NODE_TYPES),
-    slug: z7.string(),
-    name: z7.string(),
-    description: z7.string(),
-    metadata: z7.object({
-      entryFile: z7.string().optional(),
-      visibility: z7.enum(["private", "workspace", "public"]).optional(),
-      version: z7.string().optional(),
-      assetId: z7.string().optional()
-    }).catchall(z7.unknown()).default({}),
-    position: z7.number(),
-    createdAt: z7.string(),
-    updatedAt: z7.string(),
-    baseId: z7.string().nullable(),
-    children: z7.array(nodeSchema),
-    hasChildren: z7.boolean().optional()
+import { z as z8 } from "zod";
+var nodeSchema = z8.lazy(
+  () => z8.object({
+    id: z8.string(),
+    parentId: z8.string().nullable(),
+    type: z8.enum(NODE_TYPES),
+    slug: z8.string(),
+    name: z8.string(),
+    description: z8.string(),
+    metadata: z8.object({
+      entryFile: z8.string().optional(),
+      visibility: z8.enum(["private", "workspace", "public"]).optional(),
+      version: z8.string().optional(),
+      assetId: z8.string().optional()
+    }).catchall(z8.unknown()).default({}),
+    position: z8.number(),
+    createdAt: z8.string(),
+    updatedAt: z8.string(),
+    baseId: z8.string().nullable(),
+    children: z8.array(nodeSchema),
+    hasChildren: z8.boolean().optional()
   })
 );
-var nodePrincipalSchema = z7.object({
-  id: z7.string(),
-  nodeId: z7.string(),
-  principalType: z7.enum(["user", "team", "space"]),
-  principalId: z7.string(),
-  role: z7.enum(["read", "changeRequest", "write", "manage"]),
-  grantedBy: z7.string(),
-  createdAt: z7.string(),
-  updatedAt: z7.string()
+var nodePrincipalSchema = z8.object({
+  id: z8.string(),
+  nodeId: z8.string(),
+  principalType: z8.enum(["user", "team", "space"]),
+  principalId: z8.string(),
+  role: z8.enum(["read", "changeRequest", "write", "manage"]),
+  grantedBy: z8.string(),
+  createdAt: z8.string(),
+  updatedAt: z8.string()
 });
-var nodeShareSchema = z7.object({
-  nodeId: z7.string(),
-  scope: z7.enum(["none", "public"]),
-  capability: z7.enum(["read", "submit"]),
+var nodeShareSchema = z8.object({
+  nodeId: z8.string(),
+  scope: z8.enum(["none", "public"]),
+  capability: z8.enum(["read", "submit"]),
   // Derived from `passwordHash != null` — the hash itself is never serialized.
-  hasPassword: z7.boolean(),
-  expiresAt: z7.string().nullable(),
-  updatedAt: z7.string()
+  hasPassword: z8.boolean(),
+  expiresAt: z8.string().nullable(),
+  updatedAt: z8.string()
 });
-var listNodesInputSchema = z7.object({
-  parentId: z7.string().nullable().optional().describe("Node to start from. Omit or null to start from the space root."),
-  depth: z7.coerce.number().int().min(1).max(5).optional().describe(
+var listNodesInputSchema = z8.object({
+  parentId: z8.string().nullable().optional().describe("Node to start from. Omit or null to start from the space root."),
+  depth: z8.coerce.number().int().min(1).max(5).optional().describe(
     "How many levels beneath the start point to eagerly include (default 2 once either field is set). Capped at 5."
   ),
   /**
@@ -3498,7 +3601,7 @@ var listNodesInputSchema = z7.object({
    * soft-archived nodes for the Trash view — no `parentId`/`depth` walk, since
    * archived nodes are shown as a list, not a tree.
    */
-  status: z7.enum(["active", "archived"]).optional().default("active"),
+  status: z8.enum(["active", "archived"]).optional().default("active"),
   /**
    * Narrow to specific node types and return a FLAT list of lightweight node
    * summaries (`children: []`) instead of walking the tree. This is what
@@ -3522,110 +3625,110 @@ var listNodesInputSchema = z7.object({
    * bare string, not a 1-element array — only a REPEATED occurrence
    * (`?types=doc&types=file`) becomes an array. Accept both and normalize.
    */
-  types: z7.union([z7.array(z7.enum(NODE_TYPES)), z7.enum(NODE_TYPES)]).transform((value) => Array.isArray(value) ? value : [value]).optional().describe(
+  types: z8.union([z8.array(z8.enum(NODE_TYPES)), z8.enum(NODE_TYPES)]).transform((value) => Array.isArray(value) ? value : [value]).optional().describe(
     "Return a flat list of lightweight summaries for these node types instead of the tree. Read one node's full detail with GET /nodes/{nodeId}."
   )
 }).optional();
-var isDescendantInputSchema = z7.object({
-  nodeId: z7.string(),
-  potentialAncestorId: z7.string()
+var isDescendantInputSchema = z8.object({
+  nodeId: z8.string(),
+  potentialAncestorId: z8.string()
 });
-var isDescendantOutputSchema = z7.object({
-  isDescendant: z7.boolean()
+var isDescendantOutputSchema = z8.object({
+  isDescendant: z8.boolean()
 });
-var updateNodeMetadataInputSchema = z7.object({
-  nodeId: z7.string(),
-  metadata: z7.record(z7.string(), z7.unknown())
+var updateNodeMetadataInputSchema = z8.object({
+  nodeId: z8.string(),
+  metadata: z8.record(z8.string(), z8.unknown())
 });
-var searchNodesByNameInputSchema = z7.object({
-  query: z7.string().min(1),
-  limit: z7.number().int().min(1).max(50).optional().default(20)
+var searchNodesByNameInputSchema = z8.object({
+  query: z8.string().min(1),
+  limit: z8.number().int().min(1).max(50).optional().default(20)
 });
-var nodeSearchResultSchema = z7.object({
-  id: z7.string(),
-  type: z7.enum(NODE_TYPES),
-  name: z7.string(),
-  slug: z7.string(),
-  path: z7.string(),
-  updatedAt: z7.string()
+var nodeSearchResultSchema = z8.object({
+  id: z8.string(),
+  type: z8.enum(NODE_TYPES),
+  name: z8.string(),
+  slug: z8.string(),
+  path: z8.string(),
+  updatedAt: z8.string()
 });
-var userRefSchema = z7.object({
-  id: z7.string(),
-  name: z7.string().nullable(),
-  email: z7.string().nullable(),
-  image: z7.string().nullable(),
-  role: z7.string().nullable().optional()
+var userRefSchema = z8.object({
+  id: z8.string(),
+  name: z8.string().nullable(),
+  email: z8.string().nullable(),
+  image: z8.string().nullable(),
+  role: z8.string().nullable().optional()
 });
-var commitSchema = z7.object({
-  id: z7.string(),
-  baseId: z7.string().nullable(),
-  targetType: z7.enum(["base", "node"]),
-  nodeId: z7.string().nullable(),
-  operationId: z7.string().nullable(),
-  parentCommitId: z7.string().nullable(),
-  fields: z7.record(z7.string(), z7.unknown()),
-  operation: z7.enum(OPERATION_KINDS),
-  message: z7.string(),
-  author: z7.string(),
+var commitSchema = z8.object({
+  id: z8.string(),
+  baseId: z8.string().nullable(),
+  targetType: z8.enum(["base", "node"]),
+  nodeId: z8.string().nullable(),
+  operationId: z8.string().nullable(),
+  parentCommitId: z8.string().nullable(),
+  fields: z8.record(z8.string(), z8.unknown()),
+  operation: z8.enum(OPERATION_KINDS),
+  message: z8.string(),
+  author: z8.string(),
   authorUser: userRefSchema.nullable().optional().default(null),
-  createdAt: z7.string()
+  createdAt: z8.string()
 });
-var operationSchema = z7.object({
-  id: z7.string(),
-  changeRequestId: z7.string(),
-  baseId: z7.string().nullable(),
-  targetType: z7.enum(["base", "node"]),
-  nodeId: z7.string().nullable(),
-  operation: z7.enum(OPERATION_KINDS),
-  status: z7.enum(["pending", "merged", "archived", "failed"]),
-  targetRecordId: z7.string().nullable(),
-  targetViewId: z7.string().nullable(),
-  filePath: z7.string().nullable(),
-  sourceRecordId: z7.string().nullable(),
-  sourceCommitId: z7.string().nullable(),
-  baseCommitId: z7.string().nullable(),
-  headCommitId: z7.string(),
-  deleteMode: z7.enum(["archive"]),
-  mergedRecordId: z7.string().nullable(),
-  mergedViewId: z7.string().nullable(),
-  position: z7.number(),
-  createdAt: z7.string(),
-  updatedAt: z7.string(),
+var operationSchema = z8.object({
+  id: z8.string(),
+  changeRequestId: z8.string(),
+  baseId: z8.string().nullable(),
+  targetType: z8.enum(["base", "node"]),
+  nodeId: z8.string().nullable(),
+  operation: z8.enum(OPERATION_KINDS),
+  status: z8.enum(["pending", "merged", "archived", "failed"]),
+  targetRecordId: z8.string().nullable(),
+  targetViewId: z8.string().nullable(),
+  filePath: z8.string().nullable(),
+  sourceRecordId: z8.string().nullable(),
+  sourceCommitId: z8.string().nullable(),
+  baseCommitId: z8.string().nullable(),
+  headCommitId: z8.string(),
+  deleteMode: z8.enum(["archive"]),
+  mergedRecordId: z8.string().nullable(),
+  mergedViewId: z8.string().nullable(),
+  position: z8.number(),
+  createdAt: z8.string(),
+  updatedAt: z8.string(),
   headCommit: commitSchema,
   // Resolved canonical "before" values for the operation's target, so the UI can
   // render a true before → after field diff. Null for creations (no prior state)
   // and for kinds whose prior state isn't a field map (e.g. skill files, whose
   // previous content lives in storage). Records resolve from the base commit;
   // views resolve from the current view row ({ name, description, config }).
-  baseFields: z7.record(z7.string(), z7.unknown()).nullable()
+  baseFields: z8.record(z8.string(), z8.unknown()).nullable()
 });
-var reviewSchema = z7.object({
-  id: z7.string(),
-  changeRequestId: z7.string(),
-  reviewerId: z7.string(),
+var reviewSchema = z8.object({
+  id: z8.string(),
+  changeRequestId: z8.string(),
+  reviewerId: z8.string(),
   reviewer: userRefSchema.nullable().optional().default(null),
-  verdict: z7.enum(["approved", "rejected"]),
-  reason: z7.string().nullable(),
-  visibleOperationHeads: z7.record(z7.string(), z7.string()),
-  createdAt: z7.string()
+  verdict: z8.enum(["approved", "rejected"]),
+  reason: z8.string().nullable(),
+  visibleOperationHeads: z8.record(z8.string(), z8.string()),
+  createdAt: z8.string()
 });
-var commentSubjectTypeSchema = z7.enum(["record", "change_request", "operation", "commit"]);
-var commentSchema = z7.object({
-  id: z7.string(),
+var commentSubjectTypeSchema = z8.enum(["record", "change_request", "operation", "commit"]);
+var commentSchema = z8.object({
+  id: z8.string(),
   subjectType: commentSubjectTypeSchema,
-  subjectId: z7.string(),
-  recordId: z7.string().nullable(),
-  changeRequestId: z7.string().nullable(),
-  operationId: z7.string().nullable(),
-  commitId: z7.string().nullable(),
-  authorId: z7.string(),
+  subjectId: z8.string(),
+  recordId: z8.string().nullable(),
+  changeRequestId: z8.string().nullable(),
+  operationId: z8.string().nullable(),
+  commitId: z8.string().nullable(),
+  authorId: z8.string(),
   author: userRefSchema.nullable().optional().default(null),
-  body: z7.string(),
-  mentionsAi: z7.boolean(),
-  createdAt: z7.string(),
-  updatedAt: z7.string()
+  body: z8.string(),
+  mentionsAi: z8.boolean(),
+  createdAt: z8.string(),
+  updatedAt: z8.string()
 });
-var changeRequestStatusSchema = z7.enum([
+var changeRequestStatusSchema = z8.enum([
   "in_review",
   "changes_requested",
   "approved",
@@ -3634,53 +3737,53 @@ var changeRequestStatusSchema = z7.enum([
   "abandoned",
   "conflict"
 ]);
-var changeRequestSchema = z7.object({
-  id: z7.string(),
-  baseId: z7.string().nullable(),
-  targetType: z7.enum(["base", "node"]),
-  nodeId: z7.string().nullable(),
+var changeRequestSchema = z8.object({
+  id: z8.string(),
+  baseId: z8.string().nullable(),
+  targetType: z8.enum(["base", "node"]),
+  nodeId: z8.string().nullable(),
   status: changeRequestStatusSchema,
-  submittedBy: z7.string(),
+  submittedBy: z8.string(),
   submittedByUser: userRefSchema.nullable().optional().default(null),
-  sourceMeta: z7.record(z7.string(), z7.unknown()),
-  reviewPolicySnapshot: z7.record(z7.string(), z7.unknown()),
-  mergeSummary: z7.record(z7.string(), z7.unknown()),
-  rejectedReason: z7.string().nullable(),
-  reviewedAt: z7.string().nullable(),
-  mergedAt: z7.string().nullable(),
-  createdAt: z7.string(),
-  updatedAt: z7.string(),
+  sourceMeta: z8.record(z8.string(), z8.unknown()),
+  reviewPolicySnapshot: z8.record(z8.string(), z8.unknown()),
+  mergeSummary: z8.record(z8.string(), z8.unknown()),
+  rejectedReason: z8.string().nullable(),
+  reviewedAt: z8.string().nullable(),
+  mergedAt: z8.string().nullable(),
+  createdAt: z8.string(),
+  updatedAt: z8.string(),
   base: baseSchema.nullable(),
   node: nodeSchema.nullable(),
-  operations: z7.array(operationSchema),
+  operations: z8.array(operationSchema),
   primaryOperation: operationSchema.nullable(),
-  operationCount: z7.number(),
-  reviews: z7.array(reviewSchema)
+  operationCount: z8.number(),
+  reviews: z8.array(reviewSchema)
 });
-var agentTaskSchema = z7.object({
+var agentTaskSchema = z8.object({
   changeRequest: changeRequestSchema,
-  trigger: z7.enum(["changes_requested", "ai_mention"]),
-  reviewReason: z7.string().nullable(),
-  aiComments: z7.array(commentSchema)
+  trigger: z8.enum(["changes_requested", "ai_mention"]),
+  reviewReason: z8.string().nullable(),
+  aiComments: z8.array(commentSchema)
 });
-var searchResultSchema = z7.object({
-  id: z7.string(),
-  kind: z7.enum(["record", "change_request", "base", "file"]),
-  title: z7.string(),
-  body: z7.string(),
-  eyebrow: z7.string(),
-  href: z7.string(),
-  updatedAt: z7.string().nullable()
+var searchResultSchema = z8.object({
+  id: z8.string(),
+  kind: z8.enum(["record", "change_request", "base", "file"]),
+  title: z8.string(),
+  body: z8.string(),
+  eyebrow: z8.string(),
+  href: z8.string(),
+  updatedAt: z8.string().nullable()
 });
-var searchResponseSchema = z7.object({
-  query: z7.string(),
-  limit: z7.number(),
-  offset: z7.number(),
-  hasMore: z7.boolean(),
-  results: z7.array(searchResultSchema)
+var searchResponseSchema = z8.object({
+  query: z8.string(),
+  limit: z8.number(),
+  offset: z8.number(),
+  hasMore: z8.boolean(),
+  results: z8.array(searchResultSchema)
 });
-var liveEventSchema = z7.object({
-  kind: z7.enum([
+var liveEventSchema = z8.object({
+  kind: z8.enum([
     "change_request.created",
     "change_request.updated",
     "change_request.deleted",
@@ -3700,18 +3803,18 @@ var liveEventSchema = z7.object({
     // stale whiteboard/workflow/HTML document until the next reload.
     "node.metadata_updated"
   ]),
-  spaceId: z7.string(),
-  actorId: z7.string(),
+  spaceId: z8.string(),
+  actorId: z8.string(),
   // Null for events that aren't about a change request at all
   // (`node.metadata_updated`), which is every direct, auto-audited write.
-  changeRequestId: z7.string().nullable(),
-  baseId: z7.string().nullable(),
-  nodeIds: z7.array(z7.string()),
-  recordIds: z7.array(z7.string()),
-  viewIds: z7.array(z7.string()),
-  operationCount: z7.number()
+  changeRequestId: z8.string().nullable(),
+  baseId: z8.string().nullable(),
+  nodeIds: z8.array(z8.string()),
+  recordIds: z8.array(z8.string()),
+  viewIds: z8.array(z8.string()),
+  operationCount: z8.number()
 });
-var auditActionSchema = z7.enum([
+var auditActionSchema = z8.enum([
   "record.viewed",
   "change_request.created",
   "change_request.updated",
@@ -3736,158 +3839,174 @@ var auditActionSchema = z7.enum([
   "node.metadata_updated",
   "node.purged"
 ]);
-var auditEventSchema = z7.object({
-  id: z7.string(),
+var auditEventSchema = z8.object({
+  id: z8.string(),
   action: auditActionSchema,
-  actorId: z7.string(),
+  actorId: z8.string(),
   actor: userRefSchema.nullable().optional().default(null),
-  baseId: z7.string().nullable(),
-  recordId: z7.string().nullable(),
-  changeRequestId: z7.string().nullable(),
-  operationId: z7.string().nullable(),
-  commitId: z7.string().nullable(),
-  metadata: z7.record(z7.string(), z7.unknown()),
-  createdAt: z7.string()
+  baseId: z8.string().nullable(),
+  recordId: z8.string().nullable(),
+  changeRequestId: z8.string().nullable(),
+  operationId: z8.string().nullable(),
+  commitId: z8.string().nullable(),
+  metadata: z8.record(z8.string(), z8.unknown()),
+  createdAt: z8.string()
 });
-var createAuditEventInputSchema = z7.object({
+var createAuditEventInputSchema = z8.object({
   action: auditActionSchema,
-  actorId: z7.string().optional().default("local-viewer"),
-  baseId: z7.string().optional().nullable(),
-  recordId: z7.string().optional().nullable(),
-  changeRequestId: z7.string().optional().nullable(),
-  operationId: z7.string().optional().nullable(),
-  commitId: z7.string().optional().nullable(),
-  metadata: z7.record(z7.string(), z7.unknown()).optional().default({})
+  actorId: z8.string().optional().default("local-viewer"),
+  baseId: z8.string().optional().nullable(),
+  recordId: z8.string().optional().nullable(),
+  changeRequestId: z8.string().optional().nullable(),
+  operationId: z8.string().optional().nullable(),
+  commitId: z8.string().optional().nullable(),
+  metadata: z8.record(z8.string(), z8.unknown()).optional().default({})
 });
-var nodeOperationInputSchema = z7.discriminatedUnion("kind", [
-  z7.object({
-    kind: z7.literal("create"),
-    ref: z7.string().min(1).optional().describe(
+var nodeOperationInputSchema = z8.discriminatedUnion("kind", [
+  z8.object({
+    kind: z8.literal("create"),
+    ref: z8.string().min(1).optional().describe(
       'Optional in-change-request temp id for this node. A later operation can set parentNodeRef to this value to nest under it \u2014 e.g. create a folder with ref "growth", then create Bases with parentNodeRef "growth", all in one change request.'
     ),
-    parentNodeId: z7.string().optional(),
-    parentNodeRef: z7.string().min(1).optional().describe(
+    parentNodeId: z8.string().optional(),
+    parentNodeRef: z8.string().min(1).optional().describe(
       "Parent this node under a node an EARLIER operation in the same change request created (matched by its ref). Mutually exclusive with parentNodeId."
     ),
-    nodeType: z7.enum(CREATABLE_NODE_TYPES),
-    slug: z7.string().min(1).regex(/^[a-z0-9-]+$/),
-    name: z7.string().min(1),
-    description: z7.string().optional().default(""),
-    metadata: z7.record(z7.string(), z7.unknown()).optional().default({}),
+    nodeType: z8.enum(CREATABLE_NODE_TYPES),
+    slug: z8.string().min(1).regex(/^[a-z0-9-]+$/),
+    name: z8.string().min(1),
+    description: z8.string().optional().default(""),
+    metadata: z8.record(z8.string(), z8.unknown()).optional().default({}),
     // Base fields (nodeType "base" only); a base needs at least one field.
-    fields: z7.array(
-      z7.object({
-        slug: z7.string().min(1).regex(/^[a-z0-9-]+$/),
+    fields: z8.array(
+      z8.object({
+        slug: z8.string().min(1).regex(/^[a-z0-9-]+$/),
         name: fieldNameSchema,
         type: fieldTypeSchema.default("text"),
-        required: z7.boolean().optional().default(false),
+        required: z8.boolean().optional().default(false),
         options: fieldOptionsSchema.optional().default({})
       })
     ).optional()
   }),
-  z7.object({
-    kind: z7.literal("rename"),
-    nodeId: z7.string(),
-    slug: z7.string().min(1).regex(/^[a-z0-9-]+$/).optional(),
-    name: z7.string().min(1).optional(),
-    description: z7.string().optional()
+  z8.object({
+    kind: z8.literal("rename"),
+    nodeId: z8.string(),
+    slug: z8.string().min(1).regex(/^[a-z0-9-]+$/).optional(),
+    name: z8.string().min(1).optional(),
+    description: z8.string().optional()
   }),
-  z7.object({
-    kind: z7.literal("delete"),
-    nodeId: z7.string()
+  z8.object({
+    kind: z8.literal("delete"),
+    nodeId: z8.string()
   }),
-  z7.object({
-    kind: z7.literal("restore"),
-    nodeId: z7.string()
+  z8.object({
+    kind: z8.literal("restore"),
+    nodeId: z8.string()
   }),
-  z7.object({
-    kind: z7.literal("move"),
-    nodeId: z7.string(),
+  z8.object({
+    kind: z8.literal("move"),
+    nodeId: z8.string(),
     // Exactly one of parentNodeId / parentNodeRef (a ref created earlier in this CR).
-    parentNodeId: z7.string().optional(),
-    parentNodeRef: z7.string().min(1).optional(),
-    position: z7.number().int().optional()
+    parentNodeId: z8.string().optional(),
+    parentNodeRef: z8.string().min(1).optional(),
+    position: z8.number().int().optional()
   })
 ]);
-var createNodeChangeRequestInputSchema = z7.object({
-  message: z7.string().optional().default("Update node tree").describe(
+var createNodeChangeRequestInputSchema = z8.object({
+  message: z8.string().optional().default("Update node tree").describe(
     'Explanation shown to the human reviewer. Write a conventional-commit style subject \u2014 imperative verb + what + why, e.g. "Reorganize marketing docs under a Campaigns folder".'
   ),
-  submittedBy: z7.string().optional().default("local-producer"),
-  autoMerge: z7.boolean().optional().describe(
+  submittedBy: z8.string().optional().default("local-producer"),
+  autoMerge: z8.boolean().optional().describe(
     "Whether to approve and merge this structural node change immediately. Omitted defaults to merging immediately if the actor has write access on every target node, otherwise falling back to a pending Change Request; pass explicit false to force review even with write access."
   ),
-  operations: z7.array(nodeOperationInputSchema).min(1)
+  operations: z8.array(nodeOperationInputSchema).min(1)
 });
-var moveNodeInputSchema = z7.object({
-  nodeId: z7.string(),
-  parentNodeId: z7.string().optional().describe("New parent folder node id. Omit to keep the current parent and only reorder."),
-  position: z7.number().int().optional().describe("New position among the target parent's children."),
-  message: z7.string().optional().describe("Reviewer-facing Change Request message."),
-  submittedBy: z7.string().optional()
+var moveNodeInputSchema = z8.object({
+  nodeId: z8.string(),
+  parentNodeId: z8.string().optional().describe("New parent folder node id. Omit to keep the current parent and only reorder."),
+  position: z8.number().int().optional().describe("New position among the target parent's children."),
+  message: z8.string().optional().describe("Reviewer-facing Change Request message."),
+  submittedBy: z8.string().optional()
 });
-var createDeleteChangeRequestInputSchema = z7.object({
-  message: z7.string().optional().default("Delete record").describe(
+var createDeleteChangeRequestInputSchema = z8.object({
+  message: z8.string().optional().default("Delete record").describe(
     'Explanation shown to the human reviewer. Say what is being removed and why, e.g. "Archive duplicate contact \u2014 merged into Acme Corp".'
   ),
-  submittedBy: z7.string().optional().default("local-producer"),
+  submittedBy: z8.string().optional().default("local-producer"),
   // Only "archive" is supported — hard delete after retention was never
   // implemented, so the API no longer accepts it (breaking change).
-  deleteMode: z7.enum(["archive"]).optional().default("archive")
+  deleteMode: z8.enum(["archive"]).optional().default("archive"),
+  autoMerge: autoMergeNotAccepted(
+    "archiving a record removes user content from every listing, so it always requires review. Omit the flag."
+  )
 });
-var reviseOperationInputSchema = z7.object({
-  fields: z7.record(z7.string(), z7.unknown()).describe(
+var reviseOperationInputSchema = z8.object({
+  fields: z8.record(z8.string(), z8.unknown()).describe(
     "Updated field values keyed by field slug. If you set the base's PRIMARY field (its first field), keep it a short human-readable name \u2014 it is the record's display title everywhere."
   ),
-  message: z7.string().optional().default("Revise operation").describe(
+  message: z8.string().optional().default("Revise operation").describe(
     'Explanation shown to the human reviewer. Write a conventional-commit style subject \u2014 imperative verb + what + why, e.g. "Update deal stage to qualified \u2014 demo booked for July 8".'
   ),
-  author: z7.string().optional().default("local-producer"),
-  baseCommitId: z7.string().optional()
+  author: z8.string().optional().default("local-producer"),
+  baseCommitId: z8.string().optional()
 });
-var reviewChangeRequestInputSchema = z7.object({
-  verdict: z7.enum(["approved", "rejected"]),
-  reason: z7.string().optional()
+var reviewChangeRequestInputSchema = z8.object({
+  verdict: z8.enum(["approved", "rejected"]),
+  reason: z8.string().optional()
 });
-var commentSubjectInputSchema = z7.object({
+var commentSubjectInputSchema = z8.object({
   subjectType: commentSubjectTypeSchema,
-  subjectId: z7.string().min(1)
+  subjectId: z8.string().min(1)
 });
 var createCommentInputSchema = commentSubjectInputSchema.extend({
-  authorId: z7.string().optional().default("local-admin"),
-  body: z7.string().trim().min(1),
-  mentionsAi: z7.boolean().optional().default(false)
+  authorId: z8.string().optional().default("local-admin"),
+  body: z8.string().trim().min(1),
+  mentionsAi: z8.boolean().optional().default(false)
 });
-var listInputSchema = z7.object({
-  limit: z7.coerce.number().int().min(1).max(100).optional().default(50)
+var listInputSchema = z8.object({
+  limit: z8.coerce.number().int().min(1).max(100).optional().default(50)
 }).optional().default({ limit: 50 });
-var listByStatusInputSchema = z7.object({
-  status: z7.enum(["active", "archived"]).optional().default("active")
+var listByStatusInputSchema = z8.object({
+  status: z8.enum(["active", "archived"]).optional().default("active")
 });
-var listChangeRequestsPagedInputSchema = z7.object({
-  limit: z7.coerce.number().int().min(1).max(100).optional().default(50),
+var listChangeRequestsPagedInputSchema = z8.object({
+  limit: z8.coerce.number().int().min(1).max(100).optional().default(50),
   /** Opaque base64 cursor (`createdAt|id`) for keyset pagination. */
-  cursor: z7.string().optional(),
-  status: z7.array(changeRequestStatusSchema).optional(),
-  mine: z7.boolean().optional()
+  cursor: z8.string().optional(),
+  status: z8.array(changeRequestStatusSchema).optional(),
+  mine: z8.boolean().optional()
 }).optional().default({ limit: 50 });
-var listChangeRequestsResponseSchema = z7.object({
-  changeRequests: z7.array(changeRequestSchema),
-  nextCursor: z7.string().nullable()
+var listChangeRequestsResponseSchema = z8.object({
+  changeRequests: z8.array(changeRequestSchema),
+  nextCursor: z8.string().nullable()
 });
-var changeRequestCountsSchema = z7.object({
-  review: z7.number().int().nonnegative(),
-  changes: z7.number().int().nonnegative(),
-  created: z7.number().int().nonnegative(),
-  approved: z7.number().int().nonnegative(),
-  merged: z7.number().int().nonnegative(),
-  rejected: z7.number().int().nonnegative()
+var listChangeRequestsPageInputSchema = z8.object({
+  page: z8.coerce.number().int().min(1).optional().default(1),
+  pageSize: z8.coerce.number().int().min(1).max(100).optional().default(50),
+  status: z8.array(changeRequestStatusSchema).optional(),
+  mine: z8.boolean().optional()
+}).optional().default({ page: 1, pageSize: 50 });
+var listChangeRequestsPageResponseSchema = z8.object({
+  changeRequests: z8.array(changeRequestSchema),
+  total: z8.number().int().nonnegative(),
+  totalPages: z8.number().int().nonnegative(),
+  page: z8.number().int().min(1),
+  pageSize: z8.number().int().min(1).max(100)
+});
+var changeRequestCountsSchema = z8.object({
+  review: z8.number().int().nonnegative(),
+  changes: z8.number().int().nonnegative(),
+  created: z8.number().int().nonnegative(),
+  approved: z8.number().int().nonnegative(),
+  merged: z8.number().int().nonnegative(),
+  rejected: z8.number().int().nonnegative()
 });
 var SEARCH_SOURCES = ["records", "files", "names"];
-var searchInputSchema = z7.object({
-  query: z7.string().default(""),
-  limit: z7.coerce.number().int().min(1).max(100).optional().default(20),
-  offset: z7.coerce.number().int().min(0).optional().default(0),
+var searchInputSchema = z8.object({
+  query: z8.string().default(""),
+  limit: z8.coerce.number().int().min(1).max(100).optional().default(20),
+  offset: z8.coerce.number().int().min(0).optional().default(0),
   /**
    * Restrict which content this call searches. Omitted means all three
    * (unchanged behavior for every caller before this parameter existed).
@@ -3897,13 +4016,13 @@ var searchInputSchema = z7.object({
    * (`?sources=records&sources=files`) becomes an array. Accept both shapes
    * and normalize to an array.
    */
-  sources: z7.union([z7.array(z7.enum(SEARCH_SOURCES)), z7.enum(SEARCH_SOURCES)]).transform((value) => Array.isArray(value) ? value : [value]).optional()
+  sources: z8.union([z8.array(z8.enum(SEARCH_SOURCES)), z8.enum(SEARCH_SOURCES)]).transform((value) => Array.isArray(value) ? value : [value]).optional()
 });
-var authSpaceSchema = z7.object({
-  id: z7.string(),
-  name: z7.string(),
-  slug: z7.string().nullable(),
-  plan: z7.string().nullable(),
+var authSpaceSchema = z8.object({
+  id: z8.string(),
+  name: z8.string(),
+  slug: z8.string().nullable(),
+  plan: z8.string().nullable(),
   /**
    * The space's DEFAULT content visibility for its members — the same
    * `spaces.nodeVisibilityMode` the cloud dashboard reads. `"open"` = a node
@@ -3919,20 +4038,20 @@ var authSpaceSchema = z7.object({
    * (or a host that doesn't model a space default at all) simply omits it.
    * Treat an absent value as `"open"` — the historical behaviour.
    */
-  nodeVisibilityMode: z7.enum(["open", "restricted"]).optional()
+  nodeVisibilityMode: z8.enum(["open", "restricted"]).optional()
 });
-var authUserSchema = z7.object({
-  id: z7.string(),
-  name: z7.string(),
-  email: z7.string().nullable(),
-  image: z7.string().nullable()
+var authUserSchema = z8.object({
+  id: z8.string(),
+  name: z8.string(),
+  email: z8.string().nullable(),
+  image: z8.string().nullable()
 });
-var authMemberSchema = z7.object({
-  userId: z7.string(),
-  spaceId: z7.string(),
-  role: z7.string()
+var authMemberSchema = z8.object({
+  userId: z8.string(),
+  spaceId: z8.string(),
+  role: z8.string()
 });
-var authInfoSchema = z7.object({
+var authInfoSchema = z8.object({
   /** The space this request is scoped to (explicit `x-busabase-space` header, else the default). */
   space: authSpaceSchema,
   user: authUserSchema,
@@ -3942,11 +4061,11 @@ var authInfoSchema = z7.object({
    * space-scoped — when this has more than one entry, callers should confirm the
    * intended space and target it explicitly via the `x-busabase-space` header.
    */
-  spaces: z7.array(authSpaceSchema),
+  spaces: z8.array(authSpaceSchema),
   /** Cloud only: the server created this user's first Space during this exact request. */
-  createdSpace: z7.boolean().optional(),
+  createdSpace: z8.boolean().optional(),
   /** Cloud only: this auto-created Space still needs its idempotent starter initialization. */
-  bootstrapRequired: z7.boolean().optional()
+  bootstrapRequired: z8.boolean().optional()
 });
 
 // ../../packages/busabase-contract/src/domains/base/types.ts
@@ -3954,7 +4073,7 @@ var VIEW_FIELD_MIN_WIDTH = 92;
 var VIEW_FIELD_MAX_WIDTH = 640;
 
 // ../../packages/busabase-contract/src/domains/base/contract/view-schemas.ts
-var viewFilterOperatorSchema = z8.enum([
+var viewFilterOperatorSchema = z9.enum([
   "contains",
   "equals",
   "not_empty",
@@ -3962,107 +4081,107 @@ var viewFilterOperatorSchema = z8.enum([
   "is_true",
   "is_false"
 ]);
-var viewFilterSchema = z8.object({
-  fieldSlug: z8.string(),
+var viewFilterSchema = z9.object({
+  fieldSlug: z9.string(),
   // Stable field identity — survives slug reuse; populated on merge.
-  fieldId: z8.string().optional(),
+  fieldId: z9.string().optional(),
   operator: viewFilterOperatorSchema,
-  value: z8.unknown().optional()
+  value: z9.unknown().optional()
 });
-var viewSortSchema = z8.object({
-  direction: z8.enum(["asc", "desc"]),
-  fieldSlug: z8.string(),
-  fieldId: z8.string().optional()
+var viewSortSchema = z9.object({
+  direction: z9.enum(["asc", "desc"]),
+  fieldSlug: z9.string(),
+  fieldId: z9.string().optional()
 });
-var viewTypeSchema = z8.enum(["table", "gallery", "kanban", "calendar", "gantt"]);
-var ganttScaleSchema = z8.enum(["week", "month"]);
-var galleryCoverFitSchema = z8.enum(["cover", "fit"]);
-var galleryCardSizeSchema = z8.enum(["small", "medium", "large"]);
-var viewConfigSchema = z8.object({
-  filters: z8.array(viewFilterSchema).default([]),
-  sorts: z8.array(viewSortSchema).default([]),
-  visibleFieldSlugs: z8.array(z8.string()).nullable().optional(),
-  fieldWidths: z8.record(z8.string().min(1), z8.number().int().min(VIEW_FIELD_MIN_WIDTH).max(VIEW_FIELD_MAX_WIDTH)).optional(),
+var viewTypeSchema = z9.enum(["table", "gallery", "kanban", "calendar", "gantt"]);
+var ganttScaleSchema = z9.enum(["week", "month"]);
+var galleryCoverFitSchema = z9.enum(["cover", "fit"]);
+var galleryCardSizeSchema = z9.enum(["small", "medium", "large"]);
+var viewConfigSchema = z9.object({
+  filters: z9.array(viewFilterSchema).default([]),
+  sorts: z9.array(viewSortSchema).default([]),
+  visibleFieldSlugs: z9.array(z9.string()).nullable().optional(),
+  fieldWidths: z9.record(z9.string().min(1), z9.number().int().min(VIEW_FIELD_MIN_WIDTH).max(VIEW_FIELD_MAX_WIDTH)).optional(),
   // ── Gallery-only presentation config (ignored by table views) ──
   // Which attachment field supplies the cover image (null = no cover).
-  coverFieldSlug: z8.string().nullable().optional(),
+  coverFieldSlug: z9.string().nullable().optional(),
   coverFit: galleryCoverFitSchema.optional(),
   cardSize: galleryCardSizeSchema.optional(),
   // Whether to render the field label above each value on a card.
-  showFieldLabels: z8.boolean().optional(),
+  showFieldLabels: z9.boolean().optional(),
   // ── Kanban-only: which single-select field stacks records into columns.
-  stackByFieldSlug: z8.string().nullable().optional(),
+  stackByFieldSlug: z9.string().nullable().optional(),
   // ── Calendar-only: which date field positions records on the month grid.
-  dateFieldSlug: z8.string().nullable().optional(),
+  dateFieldSlug: z9.string().nullable().optional(),
   // ── Gantt-only: the start/end date fields bounding each record's bar, plus
   // the time-axis granularity.
-  startFieldSlug: z8.string().nullable().optional(),
-  endFieldSlug: z8.string().nullable().optional(),
+  startFieldSlug: z9.string().nullable().optional(),
+  endFieldSlug: z9.string().nullable().optional(),
   ganttScale: ganttScaleSchema.optional()
 });
-var viewSchema = z8.object({
-  id: z8.string(),
-  baseId: z8.string(),
-  slug: z8.string(),
-  name: z8.string(),
-  description: z8.string(),
+var viewSchema = z9.object({
+  id: z9.string(),
+  baseId: z9.string(),
+  slug: z9.string(),
+  name: z9.string(),
+  description: z9.string(),
   type: viewTypeSchema,
   config: viewConfigSchema,
-  status: z8.enum(["active", "archived"]),
-  createdBy: z8.string(),
+  status: z9.enum(["active", "archived"]),
+  createdBy: z9.string(),
   createdByUser: userRefSchema.nullable().optional().default(null),
-  archivedAt: z8.string().nullable(),
-  createdAt: z8.string(),
-  updatedAt: z8.string()
+  archivedAt: z9.string().nullable(),
+  createdAt: z9.string(),
+  updatedAt: z9.string()
 });
-var autoMergeSchema = z8.boolean().optional().describe(
+var autoMergeSchema = z9.boolean().optional().describe(
   "Whether to approve and merge this view change immediately. Omitted defaults to merging immediately if the actor has write access on the Base's node, otherwise falling back to a pending Change Request; pass explicit false to force review even with write access."
 );
-var createViewInputSchema = z8.object({
+var createViewInputSchema = z9.object({
   config: viewConfigSchema.optional().default({ filters: [], sorts: [] }),
-  description: z8.string().optional().default(""),
-  message: z8.string().optional().default("Create view"),
-  name: z8.string().min(1),
+  description: z9.string().optional().default(""),
+  message: z9.string().optional().default("Create view"),
+  name: z9.string().min(1),
   type: viewTypeSchema.optional().default("table"),
-  slug: z8.string().min(1).regex(/^[a-z0-9-]+$/).optional(),
-  submittedBy: z8.string().optional().default("local-producer"),
+  slug: z9.string().min(1).regex(/^[a-z0-9-]+$/).optional(),
+  submittedBy: z9.string().optional().default("local-producer"),
   autoMerge: autoMergeSchema
 });
-var updateViewInputSchema = z8.object({
+var updateViewInputSchema = z9.object({
   config: viewConfigSchema.optional(),
-  description: z8.string().optional(),
-  message: z8.string().optional().default("Update view"),
-  name: z8.string().min(1).optional(),
+  description: z9.string().optional(),
+  message: z9.string().optional().default("Update view"),
+  name: z9.string().min(1).optional(),
   type: viewTypeSchema.optional(),
-  submittedBy: z8.string().optional().default("local-producer"),
+  submittedBy: z9.string().optional().default("local-producer"),
   autoMerge: autoMergeSchema
 });
-var deleteViewInputSchema = z8.object({
-  message: z8.string().optional().default("Delete view"),
-  submittedBy: z8.string().optional().default("local-producer"),
+var deleteViewInputSchema = z9.object({
+  message: z9.string().optional().default("Delete view"),
+  submittedBy: z9.string().optional().default("local-producer"),
   autoMerge: autoMergeSchema
 });
-var restoreViewInputSchema = z8.object({
-  message: z8.string().optional().default("Restore view"),
-  submittedBy: z8.string().optional().default("local-producer"),
+var restoreViewInputSchema = z9.object({
+  message: z9.string().optional().default("Restore view"),
+  submittedBy: z9.string().optional().default("local-producer"),
   autoMerge: autoMergeSchema
 });
-var viewChangeRequestInputSchema = z8.discriminatedUnion("operation", [
+var viewChangeRequestInputSchema = z9.discriminatedUnion("operation", [
   createViewInputSchema.extend({
-    operation: z8.literal("create"),
-    baseId: z8.string().min(1).describe("Base the new view belongs to.")
+    operation: z9.literal("create"),
+    baseId: z9.string().min(1).describe("Base the new view belongs to.")
   }),
   updateViewInputSchema.extend({
-    operation: z8.literal("update"),
-    viewId: z8.string().min(1)
+    operation: z9.literal("update"),
+    viewId: z9.string().min(1)
   }),
   deleteViewInputSchema.extend({
-    operation: z8.literal("delete"),
-    viewId: z8.string().min(1)
+    operation: z9.literal("delete"),
+    viewId: z9.string().min(1)
   }),
   restoreViewInputSchema.extend({
-    operation: z8.literal("restore"),
-    viewId: z8.string().min(1)
+    operation: z9.literal("restore"),
+    viewId: z9.string().min(1)
   })
 ]);
 
@@ -4104,141 +4223,141 @@ var PACKAGE_MAX_FILE_BYTES = 25 * 1024 * 1024;
 var PACKAGE_MAX_TOTAL_BYTES = 250 * 1024 * 1024;
 var PACKAGE_MAX_FILE_COUNT = 5e3;
 var PACKAGE_MAX_RECORDS_PER_BASE = 5e4;
-var PackageManifestSchema = z9.object({
-  format: z9.literal(PACKAGE_FORMAT),
+var PackageManifestSchema = z10.object({
+  format: z10.literal(PACKAGE_FORMAT),
   /** Default `--into-folder` name. Not the repo name — a repo can host many packages. */
-  name: z9.string().min(1),
-  description: z9.string().default(""),
+  name: z10.string().min(1),
+  description: z10.string().default(""),
   /**
    * Informational / reserved for a future marketplace index. The real version pin
    * is always the git ref in the install URL.
    */
-  version: z9.string().optional(),
-  author: z9.string().optional(),
-  license: z9.string().optional(),
-  homepage: z9.string().url().optional(),
-  tags: z9.array(z9.string()).default([])
+  version: z10.string().optional(),
+  author: z10.string().optional(),
+  license: z10.string().optional(),
+  homepage: z10.string().url().optional(),
+  tags: z10.array(z10.string()).default([])
 });
-var PackageFileTreeNodeMetaSchema = z9.object({
-  type: z9.enum(PACKAGE_FILE_TREE_NODE_TYPES),
-  name: z9.string().min(1),
-  description: z9.string().default(""),
-  position: z9.number().int().optional()
+var PackageFileTreeNodeMetaSchema = z10.object({
+  type: z10.enum(PACKAGE_FILE_TREE_NODE_TYPES),
+  name: z10.string().min(1),
+  description: z10.string().default(""),
+  position: z10.number().int().optional()
 });
-var PackageFolderMetaSchema = z9.object({
+var PackageFolderMetaSchema = z10.object({
   /** Defaults to the humanized slug when absent. */
-  name: z9.string().optional(),
-  description: z9.string().default(""),
-  position: z9.number().int().optional()
+  name: z10.string().optional(),
+  description: z10.string().default(""),
+  position: z10.number().int().optional()
 });
 var PackageFileNodeMetaSchema = PackageFolderMetaSchema;
-var PackageDocFrontmatterSchema = z9.object({
-  name: z9.string().min(1),
-  description: z9.string().default(""),
-  position: z9.number().int().optional()
+var PackageDocFrontmatterSchema = z10.object({
+  name: z10.string().min(1),
+  description: z10.string().default(""),
+  position: z10.number().int().optional()
 });
-var PackageFieldOptionsSchema = z9.object({
-  ai: z9.object({
-    model: z9.string().optional(),
-    prompt: z9.string().optional(),
-    reviewRequired: z9.boolean().optional(),
+var PackageFieldOptionsSchema = z10.object({
+  ai: z10.object({
+    model: z10.string().optional(),
+    prompt: z10.string().optional(),
+    reviewRequired: z10.boolean().optional(),
     /** Package-only — replaces `ai.sourceFieldIds`. */
-    sourceFieldSlugs: z9.array(z9.string()).optional()
+    sourceFieldSlugs: z10.array(z10.string()).optional()
   }).optional(),
-  attachment: z9.object({
-    maxFiles: z9.number().int().positive().optional(),
-    allowedMimeTypes: z9.array(z9.string()).optional(),
-    maxFileSize: z9.number().int().positive().optional()
+  attachment: z10.object({
+    maxFiles: z10.number().int().positive().optional(),
+    allowedMimeTypes: z10.array(z10.string()).optional(),
+    maxFileSize: z10.number().int().positive().optional()
   }).optional(),
-  choices: z9.array(
-    z9.object({
-      color: z9.string().optional(),
-      id: z9.string(),
-      name: z9.string()
+  choices: z10.array(
+    z10.object({
+      color: z10.string().optional(),
+      id: z10.string(),
+      name: z10.string()
     })
   ).optional(),
-  code: z9.object({
-    language: z9.string().optional()
+  code: z10.object({
+    language: z10.string().optional()
   }).optional(),
-  embed: z9.object({
-    aspectRatio: z9.enum(["16:9", "4:3", "1:1"]).optional(),
-    height: z9.number().int().positive().max(1200).optional(),
-    providers: z9.array(z9.string()).optional()
+  embed: z10.object({
+    aspectRatio: z10.enum(["16:9", "4:3", "1:1"]).optional(),
+    height: z10.number().int().positive().max(1200).optional(),
+    providers: z10.array(z10.string()).optional()
   }).optional(),
   /** Mirrors the API's `formula.expression` verbatim — `{slug}` references carry
    *  over unchanged since the package format keys everything by slug already. */
-  formula: z9.object({
-    expression: z9.string().min(1)
+  formula: z10.object({
+    expression: z10.string().min(1)
   }).optional(),
   /** Package-only — replaces `inverseFieldId`. */
-  inverseFieldSlug: z9.string().optional(),
+  inverseFieldSlug: z10.string().optional(),
   /** Carried verbatim: the API's own `lookup` config is already keyed entirely
    *  by slug (`relationFieldSlug` / `targetFieldSlug`), so it survives a
    *  re-id'ing install with no package-only alias. The companion `number`
    *  snapshot rides along in the `number` key above. */
-  lookup: z9.object({
-    relationFieldSlug: z9.string().min(1),
-    targetFieldSlug: z9.string().min(1),
+  lookup: z10.object({
+    relationFieldSlug: z10.string().min(1),
+    targetFieldSlug: z10.string().min(1),
     rollup: lookupRollupSchema.optional(),
-    limit: z9.enum(["all", "first"]).optional()
+    limit: z10.enum(["all", "first"]).optional()
   }).optional(),
-  multiple: z9.boolean().optional(),
-  number: z9.object({
-    format: z9.enum(["plain", "currency"]).optional(),
-    currency: z9.string().optional(),
-    locale: z9.string().optional()
+  multiple: z10.boolean().optional(),
+  number: z10.object({
+    format: z10.enum(["plain", "currency"]).optional(),
+    currency: z10.string().optional(),
+    locale: z10.string().optional()
   }).optional(),
   /** Native API alias — the server resolves it to `targetBaseId`. */
-  targetBaseSlug: z9.string().optional()
+  targetBaseSlug: z10.string().optional()
 }).default({});
-var PackageBaseFieldSchema = z9.object({
-  slug: z9.string().min(1),
+var PackageBaseFieldSchema = z10.object({
+  slug: z10.string().min(1),
   name: fieldNameSchema,
   type: fieldTypeSchema,
-  required: z9.boolean().default(false),
-  position: z9.number().int(),
+  required: z10.boolean().default(false),
+  position: z10.number().int(),
   options: PackageFieldOptionsSchema
 });
-var PackageViewFilterSchema = z9.object({
-  fieldSlug: z9.string().min(1),
+var PackageViewFilterSchema = z10.object({
+  fieldSlug: z10.string().min(1),
   operator: viewFilterOperatorSchema,
-  value: z9.unknown().optional()
+  value: z10.unknown().optional()
 });
-var PackageViewSortSchema = z9.object({
-  direction: z9.enum(["asc", "desc"]),
-  fieldSlug: z9.string().min(1)
+var PackageViewSortSchema = z10.object({
+  direction: z10.enum(["asc", "desc"]),
+  fieldSlug: z10.string().min(1)
 });
-var PackageViewConfigSchema = z9.object({
-  filters: z9.array(PackageViewFilterSchema).default([]),
-  sorts: z9.array(PackageViewSortSchema).default([]),
-  visibleFieldSlugs: z9.array(z9.string()).nullable().optional(),
-  fieldWidths: z9.record(z9.string().min(1), z9.number().int().min(VIEW_FIELD_MIN_WIDTH).max(VIEW_FIELD_MAX_WIDTH)).optional()
+var PackageViewConfigSchema = z10.object({
+  filters: z10.array(PackageViewFilterSchema).default([]),
+  sorts: z10.array(PackageViewSortSchema).default([]),
+  visibleFieldSlugs: z10.array(z10.string()).nullable().optional(),
+  fieldWidths: z10.record(z10.string().min(1), z10.number().int().min(VIEW_FIELD_MIN_WIDTH).max(VIEW_FIELD_MAX_WIDTH)).optional()
 });
-var PackageViewSchema = z9.object({
-  slug: z9.string().min(1),
-  name: z9.string().min(1),
-  description: z9.string().default(""),
-  type: z9.literal("table").default("table"),
+var PackageViewSchema = z10.object({
+  slug: z10.string().min(1),
+  name: z10.string().min(1),
+  description: z10.string().default(""),
+  type: z10.literal("table").default("table"),
   config: PackageViewConfigSchema.default({ filters: [], sorts: [] })
 });
-var PackageBaseSchema = z9.object({
-  name: z9.string().min(1),
-  description: z9.string().default(""),
-  position: z9.number().int().optional(),
+var PackageBaseSchema = z10.object({
+  name: z10.string().min(1),
+  description: z10.string().default(""),
+  position: z10.number().int().optional(),
   /**
    * Informational only — `reviewPolicy` is NOT settable via `bases.create`, so
    * install cannot apply it and warns when it differs from the target's default.
    */
-  reviewPolicy: z9.object({
-    kind: z9.literal("single"),
-    requiredApprovals: z9.number()
+  reviewPolicy: z10.object({
+    kind: z10.literal("single"),
+    requiredApprovals: z10.number()
   }).optional(),
-  fields: z9.array(PackageBaseFieldSchema).default([]),
-  views: z9.array(PackageViewSchema).default([])
+  fields: z10.array(PackageBaseFieldSchema).default([]),
+  views: z10.array(PackageViewSchema).default([])
 });
-var PackageRecordLineSchema = z9.object({
-  key: z9.string().min(1),
-  fields: z9.record(z9.string(), z9.unknown()).default({})
+var PackageRecordLineSchema = z10.object({
+  key: z10.string().min(1),
+  fields: z10.record(z10.string(), z10.unknown()).default({})
 });
 
 // ../../packages/busabase-package/src/apply.ts
@@ -4414,9 +4533,18 @@ var applyInstall = async (client, plan, options) => {
         fieldId,
         patch: { options: patched },
         message: `Wire up ${base.node.slug}.${field.slug} references`,
-        submittedBy: options.submittedBy
+        submittedBy: options.submittedBy,
+        // Field wiring is STRUCTURE, like the Base and its views above — ask for it
+        // outright rather than proposing it and immediately approving our own
+        // proposal, which is what this used to do only because the endpoint had no
+        // `autoMerge`.
+        autoMerge: true
       });
-      await approveAndMerge(client, changeRequest.id);
+      if (changeRequest.status !== "merged") {
+        throw new Error(
+          `Field reference wiring for ${base.node.slug}.${field.slug} was requested immediately but came back "${changeRequest.status}"; install cannot leave a Base's relation fields unwired.`
+        );
+      }
     }
   }
   const recordIdsByKey = /* @__PURE__ */ new Map();
@@ -4741,7 +4869,13 @@ var createRecords = async (client, base, plan, options, state, recordIdsByKey) =
       records: batch.map((record) => toCreatableFields(base.node, record.fields)),
       message: `Install ${batch.length} record(s) into ${base.node.slug}`,
       submittedBy: options.submittedBy,
-      idempotencyKey: batchIdempotencyKey(plan.tree.manifest.name, batch[0].key)
+      idempotencyKey: batchIdempotencyKey(plan.tree.manifest.name, batch[0].key),
+      // Forwarded explicitly, load-bearing: `--auto-merge` is the ONLY thing that
+      // decides whether an install's records go live, and that promise is what the
+      // review-first install is. Leaving this to the endpoint's permission-aware
+      // default would silently merge a review-first install's records for any
+      // write-capable installer.
+      autoMerge: options.autoMerge
     });
     if (!options.autoMerge) {
       state.pendingChangeRequests++;
@@ -6344,21 +6478,21 @@ function parseJsonValue(raw, flagName) {
   JSON parse error: ${reason}`);
   }
 }
+function formatIssues(issues) {
+  if (!Array.isArray(issues) || issues.length === 0) return void 0;
+  return issues.map((issue) => {
+    if (!issue || typeof issue !== "object") return String(issue);
+    const { path, message } = issue;
+    const pathLabel = Array.isArray(path) && path.length > 0 ? path.join(".") : void 0;
+    return pathLabel ? `${pathLabel}: ${message}` : String(message ?? issue);
+  }).join("; ");
+}
 function formatRawErrorBody(status, statusText, text) {
   try {
     const parsed = JSON.parse(text);
     if (typeof parsed.error === "string") {
-      const issues = parsed.data?.issues;
-      let message = parsed.error;
-      if (Array.isArray(issues) && issues.length > 0) {
-        const details = issues.map((issue) => {
-          if (!issue || typeof issue !== "object") return String(issue);
-          const { path, message: issueMessage } = issue;
-          const pathLabel = Array.isArray(path) ? path.join(".") : void 0;
-          return pathLabel ? `${pathLabel}: ${issueMessage}` : String(issueMessage ?? issue);
-        }).join("; ");
-        message = `${message} \u2014 ${details}`;
-      }
+      const details = formatIssues(parsed.data?.issues);
+      const message = details ? `${parsed.error} \u2014 ${details}` : parsed.error;
       return `HTTP ${status} ${statusText}: ${message}`;
     }
   } catch {
@@ -7360,7 +7494,9 @@ function renderedHelp() {
 var HELP = renderedHelp();
 function explainError(error, config) {
   const base = config.baseUrl;
-  const msg = error instanceof Error ? error.message : String(error);
+  const rawMessage = error instanceof Error ? error.message : String(error);
+  const issueDetail = formatIssues(error.data?.issues);
+  const msg = issueDetail ? `${rawMessage} \u2014 ${issueDetail}` : rawMessage;
   const status = error.status;
   const lower = msg.toLowerCase();
   let body;