busabase-sdk 0.11.2 → 0.11.3

package/dist/index.d.ts

@@ -7967,6 +7967,7 @@ declare const cloudContract: {
             message: z.ZodDefault<z.ZodOptional<z.ZodString>>;
             submittedBy: z.ZodDefault<z.ZodOptional<z.ZodString>>;
             idempotencyKey: z.ZodOptional<z.ZodString>;
+            autoMerge: z.ZodOptional<z.ZodBoolean>;
             baseId: z.ZodString;
         }, z.core.$strip>, z.ZodObject<{
             id: z.ZodString;
@@ -8706,6 +8707,7 @@ declare const cloudContract: {
             }, z.core.$strip>>>>;
             message: z.ZodDefault<z.ZodOptional<z.ZodString>>;
             submittedBy: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            autoMerge: z.ZodOptional<z.ZodBoolean>;
             baseId: z.ZodString;
             operation: z.ZodLiteral<"create">;
         }, z.core.$strip>, z.ZodObject<{
@@ -8788,12 +8790,14 @@ declare const cloudContract: {
             }, z.core.$strip>;
             message: z.ZodOptional<z.ZodString>;
             submittedBy: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            autoMerge: z.ZodOptional<z.ZodBoolean>;
             baseId: z.ZodString;
             operation: z.ZodLiteral<"update">;
         }, z.core.$strip>, z.ZodObject<{
             fieldId: z.ZodString;
             message: z.ZodOptional<z.ZodString>;
             submittedBy: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            autoMerge: z.ZodOptional<z.ZodLiteral<false>>;
             baseId: z.ZodString;
             operation: z.ZodLiteral<"delete">;
         }, z.core.$strip>, z.ZodObject<{
@@ -8834,18 +8838,21 @@ declare const cloudContract: {
             }>>;
             message: z.ZodOptional<z.ZodString>;
             submittedBy: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            autoMerge: z.ZodOptional<z.ZodLiteral<false>>;
             baseId: z.ZodString;
             operation: z.ZodLiteral<"convert">;
         }, z.core.$strip>, z.ZodObject<{
             fieldIds: z.ZodArray<z.ZodString>;
             message: z.ZodOptional<z.ZodString>;
             submittedBy: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            autoMerge: z.ZodOptional<z.ZodBoolean>;
             baseId: z.ZodString;
             operation: z.ZodLiteral<"reorder">;
         }, z.core.$strip>, z.ZodObject<{
             fieldId: z.ZodString;
             message: z.ZodOptional<z.ZodString>;
             submittedBy: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            autoMerge: z.ZodOptional<z.ZodBoolean>;
             baseId: z.ZodString;
             operation: z.ZodLiteral<"restore">;
         }, z.core.$strip>], "operation">, z.ZodObject<{
@@ -9294,11 +9301,13 @@ declare const cloudContract: {
         lifecycleChangeRequest: _orpc_contract.ContractProcedure<z.ZodDiscriminatedUnion<[z.ZodObject<{
             message: z.ZodOptional<z.ZodString>;
             submittedBy: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            autoMerge: z.ZodOptional<z.ZodLiteral<false>>;
             baseId: z.ZodString;
             operation: z.ZodLiteral<"archive">;
         }, z.core.$strip>, z.ZodObject<{
             message: z.ZodOptional<z.ZodString>;
             submittedBy: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            autoMerge: z.ZodOptional<z.ZodBoolean>;
             baseId: z.ZodString;
             operation: z.ZodLiteral<"restore">;
         }, z.core.$strip>], "operation">, z.ZodObject<{
@@ -10233,6 +10242,7 @@ declare const cloudContract: {
                     version: z.ZodOptional<z.ZodString>;
                 }, z.core.$strip>>;
             }, z.core.$strict>]>>;
+            autoMerge: z.ZodOptional<z.ZodBoolean>;
             nodeId: z.ZodString;
             type: z.ZodOptional<z.ZodEnum<{
                 skill: "skill";
@@ -11554,6 +11564,7 @@ declare const cloudContract: {
             body: z.ZodString;
             message: z.ZodDefault<z.ZodOptional<z.ZodString>>;
             submittedBy: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            autoMerge: z.ZodOptional<z.ZodBoolean>;
             nodeId: z.ZodString;
         }, z.core.$strip>, z.ZodObject<{
             id: z.ZodString;
@@ -12351,6 +12362,7 @@ declare const cloudContract: {
             }, z.core.$strict>>;
             message: z.ZodDefault<z.ZodOptional<z.ZodString>>;
             submittedBy: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            autoMerge: z.ZodOptional<z.ZodLiteral<false>>;
         }, z.core.$strip>, z.ZodObject<{
             id: z.ZodString;
             baseId: z.ZodNullable<z.ZodString>;
@@ -16993,6 +17005,20 @@ declare const cloudContract: {
         }, z.core.$strip>, _orpc_contract.MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
         count: _orpc_contract.ContractProcedure<z.ZodDefault<z.ZodOptional<z.ZodObject<{
             baseId: z.ZodOptional<z.ZodString>;
+            viewId: z.ZodOptional<z.ZodString>;
+            filters: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                fieldSlug: z.ZodString;
+                fieldType: z.ZodOptional<z.ZodString>;
+                operator: z.ZodEnum<{
+                    contains: "contains";
+                    equals: "equals";
+                    not_empty: "not_empty";
+                    is_empty: "is_empty";
+                    is_true: "is_true";
+                    is_false: "is_false";
+                }>;
+                value: z.ZodOptional<z.ZodUnknown>;
+            }, z.core.$strip>>>;
         }, z.core.$strip>>>, z.ZodObject<{
             total: z.ZodNumber;
         }, z.core.$strip>, _orpc_contract.MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
@@ -17420,11 +17446,13 @@ declare const cloudContract: {
             deleteMode: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
                 archive: "archive";
             }>>>;
+            autoMerge: z.ZodOptional<z.ZodLiteral<false>>;
             recordId: z.ZodString;
             operation: z.ZodLiteral<"delete">;
         }, z.core.$strip>, z.ZodObject<{
             message: z.ZodOptional<z.ZodString>;
             submittedBy: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            autoMerge: z.ZodOptional<z.ZodLiteral<false>>;
             recordId: z.ZodString;
             operation: z.ZodLiteral<"restore">;
         }, z.core.$strip>], "operation">, z.ZodUnion<readonly [z.ZodObject<{

package/dist/index.js

@@ -36,6 +36,9 @@ var LocaleSchema = z.enum(i18n.locales);
 // ../../packages/openlib/i18n/i-string.ts
 var iStringRecordSchema = z.partialRecord(LocaleSchema, z.string());
 z.union([z.string(), iStringRecordSchema]).describe("i18n string");
+var autoMergeNotAccepted = (reason) => z.literal(false, { error: `\`autoMerge: true\` is not accepted here: ${reason}` }).optional().describe(`Only \`false\` (or omitted) is accepted. ${reason}`);
+
+// ../../packages/busabase-contract/src/domains/base/contract/base-schemas.ts
 var fieldNameSchema = z.union([
   z.string().min(1),
   iStringRecordSchema.refine(
@@ -191,14 +194,21 @@ var createBaseFieldInputSchema = z.object({
   required: z.boolean().optional().default(false),
   options: fieldOptionsSchema.optional().default({})
 });
+var fieldAutoMergeSchema = z.boolean().optional().describe(
+  "Whether to approve and merge this field change immediately. Omitted defaults to merging immediately if the actor has write access on the Base's node, otherwise falling back to a pending Change Request; pass explicit false to force review even with write access. Not accepted by the delete and convert operations, which always require review."
+);
 var createFieldChangeRequestInputSchema = createBaseFieldInputSchema.extend({
   message: z.string().optional().default("Add field"),
-  submittedBy: z.string().optional().default("local-editor")
+  submittedBy: z.string().optional().default("local-editor"),
+  autoMerge: fieldAutoMergeSchema
 });
 var deleteFieldChangeRequestInputSchema = z.object({
   fieldId: z.string().min(1),
   message: z.string().optional(),
-  submittedBy: z.string().optional().default("local-editor")
+  submittedBy: z.string().optional().default("local-editor"),
+  autoMerge: autoMergeNotAccepted(
+    "deleting a field soft-deletes its stored values with it, so it always requires review. Omit the flag."
+  )
 });
 var updateFieldChangeRequestInputSchema = z.object({
   fieldId: z.string().min(1),
@@ -208,7 +218,8 @@ var updateFieldChangeRequestInputSchema = z.object({
     options: fieldOptionsSchema.optional()
   }),
   message: z.string().optional(),
-  submittedBy: z.string().optional().default("local-editor")
+  submittedBy: z.string().optional().default("local-editor"),
+  autoMerge: fieldAutoMergeSchema
 });
 var previewFieldConversionInputSchema = z.object({
   fieldId: z.string().min(1),
@@ -225,25 +236,39 @@ var convertFieldChangeRequestInputSchema = z.object({
   newType: fieldTypeSchema,
   selectChoiceMode: z.enum(["auto_create", "null_on_missing"]).default("null_on_missing"),
   message: z.string().optional(),
-  submittedBy: z.string().optional().default("local-editor")
+  submittedBy: z.string().optional().default("local-editor"),
+  autoMerge: autoMergeNotAccepted(
+    "converting a field's type can drop values, so it always requires review. Run previewFieldConversion first to see what would change, then omit the flag."
+  )
 });
 var reorderFieldsChangeRequestInputSchema = z.object({
   fieldIds: z.array(z.string()).min(1),
   message: z.string().optional(),
-  submittedBy: z.string().optional().default("local-editor")
+  submittedBy: z.string().optional().default("local-editor"),
+  autoMerge: fieldAutoMergeSchema
 });
 var archiveBaseInputSchema = z.object({
   message: z.string().optional(),
-  submittedBy: z.string().optional().default("local-editor")
+  submittedBy: z.string().optional().default("local-editor"),
+  autoMerge: autoMergeNotAccepted(
+    "archiving a Base removes it and every record in it from every listing at once, so it always requires review. Omit the flag."
+  )
 });
 var restoreBaseInputSchema = z.object({
   message: z.string().optional(),
-  submittedBy: z.string().optional().default("local-editor")
+  submittedBy: z.string().optional().default("local-editor"),
+  // Restoring an archived Base is the undo of a destructive act — nothing is at
+  // risk, so it takes the same permission-aware default as everything else.
+  // `archiveBaseInputSchema` above deliberately has no `autoMerge`: archiving
+  // takes a whole Base and every record in it out of every listing at once,
+  // which is strictly larger than the record `delete` that is already review-only.
+  autoMerge: z.boolean().optional()
 });
 var restoreFieldChangeRequestInputSchema = z.object({
   fieldId: z.string().min(1),
   message: z.string().optional(),
-  submittedBy: z.string().optional().default("local-editor")
+  submittedBy: z.string().optional().default("local-editor"),
+  autoMerge: fieldAutoMergeSchema
 });
 var withBaseId = { baseId: z.string().min(1) };
 var fieldChangeRequestInputSchema = z.discriminatedUnion("operation", [
@@ -900,7 +925,10 @@ var createDeleteChangeRequestInputSchema = z.object({
   submittedBy: z.string().optional().default("local-producer"),
   // Only "archive" is supported — hard delete after retention was never
   // implemented, so the API no longer accepts it (breaking change).
-  deleteMode: z.enum(["archive"]).optional().default("archive")
+  deleteMode: z.enum(["archive"]).optional().default("archive"),
+  autoMerge: autoMergeNotAccepted(
+    "archiving a record removes user content from every listing, so it always requires review. Omit the flag."
+  )
 });
 var reviseOperationInputSchema = z.object({
   fields: z.record(z.string(), z.unknown()).describe(
@@ -1124,7 +1152,16 @@ var createFileTreeChangeRequestInputSchema = z.object({
     'Explanation shown to the human reviewer. Write a conventional-commit style subject \u2014 imperative verb + what + why, e.g. "Rewrite README.md quickstart for the new auth flow".'
   ),
   submittedBy: z.string().optional().default("local-producer"),
-  operations: z.array(fileTreeFileOperationInputSchema).min(1)
+  operations: z.array(fileTreeFileOperationInputSchema).min(1),
+  // Honoured only when EVERY operation in the batch is non-destructive
+  // (create / update / metadata_update). A batch containing a `delete` stays
+  // review-first no matter what this says, because deleting a mounted file
+  // destroys content — the same line that keeps record `delete` review-only.
+  // Server-side enforcement lives in the filetree handler, not here: the check
+  // is over the operations array, which a per-field schema cannot express.
+  autoMerge: z.boolean().optional().describe(
+    "Whether to approve and merge these file changes immediately. Omitted defaults to merging immediately if the actor has write access on the node, otherwise falling back to a pending Change Request; pass explicit false to force review even with write access. IGNORED when any operation is a delete \u2014 those batches always require review."
+  )
 });
 var FILE_TREE_NODE_TYPES = ["skill", "drive", "airapp"];
 var fileTreeNodeTypeSchema = z.enum(FILE_TREE_NODE_TYPES);
@@ -1408,7 +1445,10 @@ var EditAssetContentInputSchema = z.object({
   message: z.string().optional().default("Edit file content").describe(
     'Explanation shown to the human reviewer. Write a conventional-commit style subject \u2014 imperative verb + what + why, e.g. "Fix typo in setup instructions".'
   ),
-  submittedBy: z.string().optional().default("agent")
+  submittedBy: z.string().optional().default("agent"),
+  autoMerge: autoMergeNotAccepted(
+    "editContent rewrites the real mounted file bytes, so it always requires review. Omit the flag."
+  )
 });
 var AssetDownloadInputSchema = z.object({ assetId: z.string() });
 var AssetDownloadVOSchema = z.object({
@@ -1691,9 +1731,42 @@ var listRecordsPageResponseSchema = z.object({
   page: z.number().int().min(1),
   pageSize: z.number().int().min(1).max(100)
 });
-var countRecordsInputSchema = z.object({
-  baseId: z.string().optional()
-}).optional().default({});
+var countRecordsShapeSchema = z.object({
+  baseId: z.string().optional(),
+  /**
+   * Count only the rows a saved View would display (the View's filters
+   * applied; its sort is ignored — a count doesn't need an order). A View
+   * belongs to exactly one Base, so this requires `baseId`.
+   */
+  viewId: z.string().optional(),
+  /**
+   * Ad-hoc filter conditions — same shape `records.list`'s `filters` uses —
+   * for composing a condition set without a saved View (e.g. an AirApp
+   * summary tile like "main-branch PRs"). Combined with the View's own
+   * filters (AND) when `viewId` is also given. Requires `baseId`: a field
+   * slug is only unambiguous within one Base, and proving a filter exact
+   * (see `countRecords`) requires that Base's real field definitions —
+   * never the caller-supplied `fieldType` hint, which elsewhere is only a
+   * pushdown hint and isn't trustworthy enough for an exact count.
+   */
+  filters: z.array(listRecordsFilterSchema).optional()
+}).superRefine((value, ctx) => {
+  if (value.viewId && !value.baseId) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["baseId"],
+      message: "baseId is required when viewId is given"
+    });
+  }
+  if (value.filters?.length && !value.baseId) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["baseId"],
+      message: "baseId is required when filters is given"
+    });
+  }
+});
+var countRecordsInputSchema = countRecordsShapeSchema.optional().default({});
 var countRecordsResponseSchema = z.object({
   /** Total active records in the space (optionally scoped to a base). */
   total: z.number().int().nonnegative()
@@ -1728,7 +1801,13 @@ var createBulkChangeRequestInputSchema = z.object({
   submittedBy: z.string().optional().default("local-producer"),
   idempotencyKey: z.string().optional().describe(
     "Optional client-supplied key that dedupes retries. Scoped per base + submitter: calling this endpoint again with the SAME idempotencyKey returns the bulk change request created by the first call instead of creating a duplicate. Omit for normal one-shot calls; only set it when you might retry."
-  )
+  ),
+  // Same permission-aware tri-state as the single-record endpoint above. N record
+  // CREATES are purely additive, so there is nothing here the review gate is
+  // protecting — and until now the published skill doc told agents to send N
+  // separate single-record calls precisely because this one could not merge,
+  // which is slower and produces N change requests instead of one.
+  autoMerge: z.boolean().optional()
 });
 var recordFieldFilterInputSchema = z.object({
   baseId: z.string().optional(),
@@ -1749,7 +1828,10 @@ var recordGetInputSchema = z.union([
 ]);
 var restoreRecordInputSchema = z.object({
   message: z.string().optional(),
-  submittedBy: z.string().optional().default("local-editor")
+  submittedBy: z.string().optional().default("local-editor"),
+  autoMerge: autoMergeNotAccepted(
+    "restoring a record brings archived content back into every listing, so it always requires review. Omit the flag."
+  )
 });
 var withRecordId = { recordId: z.string().min(1) };
 var recordChangeRequestInputSchema = z.discriminatedUnion("operation", [
@@ -1887,7 +1969,8 @@ var recordContract = {
     path: "/records/count",
     tags: ["Records"],
     summary: "Count records",
-    successDescription: "Total active records in the space, optionally scoped to a base."
+    description: "A real SQL COUNT \u2014 always the exact total, never a partial or capped number, so it's safe to render as a canonical figure (e.g. a dashboard summary tile). Plain `baseId` scoping is always cheap. Adding `viewId` and/or `filters` is exact too \u2014 provably-exact conditions (e.g. text equals/contains, not_empty/is_empty, checkbox is_true/is_false) stay a cheap SQL COUNT; everything else falls back to evaluating every matching row server-side, which is exact but not free on a large Base. Both `viewId` and `filters` require `baseId`.",
+    successDescription: "Total active records matching the scope: the whole space, one Base, a saved View, an ad-hoc filter set, or a combination."
   }).input(countRecordsInputSchema).output(countRecordsResponseSchema),
   get: oc.route({
     method: "GET",
@@ -1982,7 +2065,12 @@ var createDocChangeRequestInputSchema = z.object({
   message: z.string().optional().default("Update doc").describe(
     'Explanation shown to the human reviewer. Write a conventional-commit style subject \u2014 imperative verb + what + why, e.g. "Add rollback steps to the deploy runbook".'
   ),
-  submittedBy: z.string().optional().default("local-producer")
+  submittedBy: z.string().optional().default("local-producer"),
+  // A Doc body update is the Doc-domain twin of a record `update`, which has taken
+  // the permission-aware default since #5712 — and this node type already has a
+  // direct-write bypass (`PUT /docs/{nodeId}/body`), so review-first here was never
+  // an actual guarantee, just a slower path to the same place.
+  autoMerge: z.boolean().optional()
 });
 var docContract = {
   create: oc.route({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "busabase-sdk",
-  "version": "0.11.2",
+  "version": "0.11.3",
   "description": "Typed TypeScript/JavaScript SDK for the Busabase OpenAPI REST API. Talks to a local or remote `busabase server` (or Busabase Cloud).",
   "license": "MIT",
   "homepage": "https://github.com/busabase/busabase/tree/main/apps/busabase-sdk",
@@ -49,9 +49,9 @@
     "tsx": "^4.20.5",
     "typescript": "^5.9.3",
     "vitest": "^2.1.8",
+    "busabase-contract": "0.11.3",
     "open-domains": "0.0.2",
-    "openlib": "0.1.1",
-    "busabase-contract": "0.11.2"
+    "openlib": "0.1.1"
   },
   "engines": {
     "node": ">=24.18.0"