@agent-native/core 0.145.7 → 0.145.8

package/dist/db/migrations.d.ts

@@ -19,6 +19,13 @@ export declare function isDuplicateColumnError(err: unknown): boolean;
  */
 export declare function isPermissionError(err: unknown): boolean;
 export interface RunMigrationsOptions {
+    /**
+     * Run migrations even inside a serverless request runtime. Off by default:
+     * see the guard in {@link runMigrations} for why request-path DDL is what
+     * took analytics down. Only set this when the caller has no scheduled or
+     * background runtime that could migrate instead.
+     */
+    runInServerlessRequest?: boolean;
     /**
      * Name of the migrations bookkeeping table. REQUIRED — there is intentionally
      * no default. Two templates that share a database (e.g. via the same Neon URL)
@@ -85,61 +92,11 @@ export interface MigrationEntry {
     run?: () => Promise<MigrationRunResult>;
 }
 /**
- * Runs a list of migrations against the configured database, gated by a
- * per-table bookkeeping row (`options.table`) so repeated boots only apply
- * new migrations.
- *
- * ## Name-based tracking (why it exists)
- *
- * The legacy gate is purely numeric: `SELECT MAX(version)` from the
- * bookkeeping table, then apply every entry whose `version` is greater. That
- * scheme silently breaks down when **two independent branches each extend the
- * same migration list with different DDL under the same version numbers** —
- * exactly what happened to the analytics template's v75-v83 range. Branch A
- * shipped alert-rule tables as v75-v78; branch B shipped unrelated DDL as its
- * own v75-v83. Whichever branch deployed first recorded "v75..v83 applied"
- * in the bookkeeping table. When the other branch merged and deployed, its
- * migrations at those same version numbers were never applied — `MAX(version)`
- * was already ≥ their version, so the gate treated them as done even though
- * their actual DDL had never run. The result: `analytics_migrations` showed
- * rows for 1..83 with no gaps, yet `analytics_alert_rules`,
- * `analytics_alert_incidents`, and `session_recordings.network_error_count`
- * did not exist in production. Version numbers are not a stable identity —
- * they're just sequence position, and sequence position collides across
- * branches.
- *
- * Name-based tracking fixes this by keying application on a stable, unique
- * **string slug** instead of a position in a shared integer sequence:
- *
- * - Entries with a `name` are recorded in a companion table,
- *   `${table}_named` (`name TEXT PRIMARY KEY`), and APPLY IFF their name is
- *   absent from that table — completely independent of version numbers or
- *   the legacy `MAX(version)` gate. Two branches can both ship a migration
- *   named `"analytics-alert-rules-table"` at version 75, or one at version 75
- *   and the other at version 90 after a rebase — either way it applies
- *   exactly once per database, keyed on the name.
- * - Entries WITHOUT a `name` keep the exact legacy behavior
- *   (`version > MAX(recorded version)`), so nothing changes for existing
- *   unnamed migrations.
- * - Named migrations still execute in list order, interleaved with unnamed
- *   ones exactly as written.
- * - When a named migration's DDL runs, we record BOTH the named row (always)
- *   and — if its `version` is greater than the current legacy max — the
- *   legacy version row too, in the SAME atomic batch/transaction as the DDL.
- *   This keeps the legacy `MAX(version)` gate monotonically advancing for
- *   any unnamed migrations that come after it in the list, while ensuring a
- *   named migration is never "double recorded" in a way that would let it
- *   re-apply.
- * - A duplicate `name` across the migration list throws at startup — that's
- *   a programmer error (copy-paste or merge mistake), not a runtime data
- *   problem, and failing loud beats silently tracking the wrong row.
+ * Run an explicit release-time migration job with migration duty enabled.
  *
- * New migrations should always set a `name`. Legacy unnamed migrations don't
- * need to be renamed retroactively — the two gating strategies coexist in the
- * same list — but if a table is EVER at risk of being shared across parallel
- * branches (any template's own migrations qualify, since branches routinely
- * extend the same list concurrently), giving new entries a name is what makes
- * them immune to the collision class described above.
+ * The flag is process-local and restored even when the job fails, so a build
+ * step can opt in without creating a permanent escape hatch for request code.
  */
+export declare function withMigrationRuntime<T>(run: () => Promise<T>): Promise<T>;
 export declare function runMigrations(migrations: Array<MigrationEntry>, options: RunMigrationsOptions): NitroPluginDef;
 export {};

package/dist/db/migrations.js

@@ -226,6 +226,56 @@ function resolveMigrationSql(sql, pg) {
  * extend the same list concurrently), giving new entries a name is what makes
  * them immune to the collision class described above.
  */
+/**
+ * True in a production serverless runtime that serves user REQUESTS.
+ *
+ * Deliberately mirrors the analytics template's own predicate rather than
+ * importing it: `packages/core/src/db` must not depend on a template, and the
+ * agent/background modules that carry the sibling predicates would introduce a
+ * cycle here.
+ */
+function isServerlessRequestRuntime() {
+    if (process.env.NODE_ENV !== "production")
+        return false;
+    return (process.env.NETLIFY === "true" ||
+        Boolean(process.env.NETLIFY_FUNCTION_NAME) ||
+        Boolean(process.env.AWS_LAMBDA_FUNCTION_NAME) ||
+        Boolean(process.env.LAMBDA_TASK_ROOT) ||
+        process.env.AWS_EXECUTION_ENV?.startsWith("AWS_Lambda") === true ||
+        process.env.VERCEL === "1");
+}
+/**
+ * A runtime that is ALLOWED to migrate: scheduled jobs and durable background
+ * workers, which are off the request path and may take as long as they need.
+ *
+ * Set by whichever runtime claims migration duty. Analytics sets its own
+ * equivalent flag before running the scheduled rollup.
+ */
+function isMigrationAuthorizedRuntime() {
+    return (globalThis.__AGENT_NATIVE_MIGRATION_RUNTIME__ === true);
+}
+/**
+ * Run an explicit release-time migration job with migration duty enabled.
+ *
+ * The flag is process-local and restored even when the job fails, so a build
+ * step can opt in without creating a permanent escape hatch for request code.
+ */
+export async function withMigrationRuntime(run) {
+    const runtime = globalThis;
+    const previous = runtime.__AGENT_NATIVE_MIGRATION_RUNTIME__;
+    runtime.__AGENT_NATIVE_MIGRATION_RUNTIME__ = true;
+    try {
+        return await run();
+    }
+    finally {
+        if (previous === undefined) {
+            delete runtime.__AGENT_NATIVE_MIGRATION_RUNTIME__;
+        }
+        else {
+            runtime.__AGENT_NATIVE_MIGRATION_RUNTIME__ = previous;
+        }
+    }
+}
 export function runMigrations(migrations, options) {
     const table = options?.table;
     if (!table ||
@@ -256,6 +306,26 @@ export function runMigrations(migrations, options) {
         return async () => { };
     const namedTable = `${table}_named`;
     return async () => {
+        // Migrations are schema DDL plus an introspection pass. On serverless
+        // "first touch" is EVERY cold start, so this lands on the critical path of
+        // a user request — measured at ~5.5-8.6s for the version check alone on a
+        // 180-table database, with 4-6 copies running concurrently under load.
+        //
+        // Guarded HERE rather than at each call site on purpose. The analytics
+        // template guarded its own runner in #2708; three core plugins
+        // (org, context-xray, observational-memory) kept calling this unguarded,
+        // so the probe storm survived the fix that was supposed to end it. A
+        // fourth special case would have shipped the same bug a fourth time.
+        //
+        // Schema still has to exist: a scheduled/background runtime sets
+        // `__AGENT_NATIVE_MIGRATION_RUNTIME__`, and `runInServerlessRequest` is
+        // the explicit opt-in for a caller that genuinely cannot defer.
+        if (options?.runInServerlessRequest !== true &&
+            isServerlessRequestRuntime() &&
+            !isMigrationAuthorizedRuntime()) {
+            console.info(`[migrations] Skipping "${table}" migrations in a serverless request runtime`);
+            return;
+        }
         try {
             // Check for Cloudflare D1 binding (only if DATABASE_URL not set)
             const d1 = getDialect() === "d1"

package/dist/file-upload/actions/upload-image.d.ts

@@ -17,11 +17,11 @@ declare const _default: import("../../action.js").ActionDefinition<{
     id?: undefined;
     provider?: undefined;
 } | {
+    error?: undefined;
     configured?: undefined;
     connectPath?: undefined;
     url: string;
     id: string;
     provider: string;
-    error?: undefined;
 }>;
 export default _default;

package/dist/jobs/index.d.ts

@@ -3,3 +3,4 @@ export { processRecurringJobs, parseJobFrontmatter, buildJobContent, type JobFro
 export { getAutomationSchedulerHealth, recordAutomationSchedulerHealth, type AutomationSchedulerHealth, } from "./scheduler-health.js";
 export { RECURRING_JOBS_SWEEP_PATH, RECURRING_JOBS_SWEEP_TOKEN_SUBJECT, } from "./scheduler-dispatch.js";
 export { createJobTools } from "./tools.js";
+export { AUTOMATION_RUN_MIGRATIONS, runAutomationRunMigrations, } from "./run-history.js";

package/dist/jobs/index.js

@@ -3,3 +3,4 @@ export { processRecurringJobs, parseJobFrontmatter, buildJobContent, } from "./s
 export { getAutomationSchedulerHealth, recordAutomationSchedulerHealth, } from "./scheduler-health.js";
 export { RECURRING_JOBS_SWEEP_PATH, RECURRING_JOBS_SWEEP_TOKEN_SUBJECT, } from "./scheduler-dispatch.js";
 export { createJobTools } from "./tools.js";
+export { AUTOMATION_RUN_MIGRATIONS, runAutomationRunMigrations, } from "./run-history.js";

package/dist/jobs/run-history.d.ts

@@ -1,3 +1,4 @@
+import { type MigrationEntry } from "../db/migrations.js";
 /**
  * "interrupted" is derived at read time, never stored: a process killed
  * mid-run cannot write its own outcome, so a row left running long past the
@@ -30,6 +31,9 @@ export interface StartAutomationRunInput {
     /** A pre-created row still waiting for its background worker handoff. */
     dispatchPending?: boolean;
 }
+/** Authoritative release-time schema for durable automation history. */
+export declare const AUTOMATION_RUN_MIGRATIONS: MigrationEntry[];
+export declare function runAutomationRunMigrations(nitroApp: unknown): Promise<void>;
 /**
  * Record an automation execution. Manual runs create the row before dispatch,
  * so `dispatchPending` distinguishes that durable handoff from a run that has

package/dist/jobs/run-history.js

@@ -2,6 +2,7 @@ import { randomUUID } from "node:crypto";
 import { z } from "zod";
 import { getDbExec, intType, isPostgres } from "../db/client.js";
 import { ensureColumnExists, ensureIndexExists, ensureTableExists, } from "../db/ddl-guard.js";
+import { runMigrations } from "../db/migrations.js";
 import { emit as emitBusEvent, registerEvent } from "../event-bus/index.js";
 registerEvent({
     name: "automation.run.finished",
@@ -32,6 +33,49 @@ const INTERRUPTED_RUN_MESSAGE = "Worker stopped before a terminal result was rec
 const CLAIM_LEASE_MS = RUN_LIVENESS_CEILING_MS;
 /** Rows kept per automation, so a per-minute schedule cannot grow forever. */
 const RUNS_RETAINED_PER_AUTOMATION = 50;
+/** Authoritative release-time schema for durable automation history. */
+export const AUTOMATION_RUN_MIGRATIONS = [
+    {
+        version: 1,
+        name: "automation-runs-table",
+        sql: `
+      CREATE TABLE IF NOT EXISTS ${TABLE} (
+        id TEXT PRIMARY KEY,
+        owner TEXT NOT NULL,
+        automation TEXT NOT NULL,
+        path TEXT NOT NULL,
+        scope TEXT,
+        org_id TEXT,
+        run_id TEXT,
+        thread_id TEXT,
+        status TEXT NOT NULL DEFAULT 'running',
+        started_at INTEGER NOT NULL,
+        finished_at INTEGER,
+        error TEXT,
+        claimed_at INTEGER,
+        dispatch_pending INTEGER NOT NULL DEFAULT 0
+      );
+      CREATE INDEX IF NOT EXISTS idx_${TABLE}_owner_automation
+        ON ${TABLE} (owner, automation, started_at)
+    `,
+    },
+    {
+        version: 2,
+        name: "automation-runs-claimed-at",
+        sql: `ALTER TABLE ${TABLE} ADD COLUMN IF NOT EXISTS claimed_at INTEGER`,
+    },
+    {
+        version: 3,
+        name: "automation-runs-dispatch-pending",
+        sql: `ALTER TABLE ${TABLE}
+      ADD COLUMN IF NOT EXISTS dispatch_pending INTEGER NOT NULL DEFAULT 0`,
+    },
+];
+export async function runAutomationRunMigrations(nitroApp) {
+    await runMigrations(AUTOMATION_RUN_MIGRATIONS, {
+        table: "_automation_run_migrations",
+    })(nitroApp);
+}
 let _initPromise;
 async function ensureTable() {
     if (!_initPromise) {

package/dist/notifications/routes.d.ts

@@ -13,13 +13,13 @@
 export declare function createNotificationsHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<"" | import("./types.js").Notification[] | {
     count: number;
     updated?: undefined;
-    error?: undefined;
     ok?: undefined;
+    error?: undefined;
 } | {
     count?: undefined;
     updated: number;
-    error?: undefined;
     ok?: undefined;
+    error?: undefined;
 } | {
     count?: undefined;
     updated?: undefined;

package/dist/observability/routes.d.ts

@@ -62,6 +62,6 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
-    ok: boolean;
     error?: undefined;
+    ok: boolean;
 }>>;

package/dist/progress/routes.d.ts

@@ -15,6 +15,6 @@ export declare function createProgressHandler(): import("h3").EventHandlerWithFe
     error: string;
     ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;

package/dist/provider-api/actions/custom-provider-registration.d.ts

@@ -75,8 +75,9 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         user: "user";
     }>>;
 }, z.core.$strip>>, {
-    id?: undefined;
+    message?: undefined;
     deleted?: undefined;
+    found?: undefined;
     providers: {
         id: string;
         label: string;
@@ -88,21 +89,21 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     }[];
     count: number;
     provider?: undefined;
-    found?: undefined;
     registered?: undefined;
+    id?: undefined;
     label?: undefined;
-    message?: undefined;
 } | {
-    id?: undefined;
+    message?: undefined;
     deleted?: undefined;
     providers?: undefined;
     count?: undefined;
     found: boolean;
     provider: import("../custom-registry.js").CustomProviderConfig;
     registered?: undefined;
+    id?: undefined;
     label?: undefined;
-    message?: undefined;
 } | {
+    message?: undefined;
     deleted?: undefined;
     providers?: undefined;
     count?: undefined;
@@ -111,23 +112,22 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     id: string;
     registered?: undefined;
     label?: undefined;
-    message?: undefined;
 } | {
+    message?: undefined;
+    found?: undefined;
     providers?: undefined;
     count?: undefined;
     provider?: undefined;
-    found?: undefined;
     deleted: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
-    message?: undefined;
 } | {
     deleted?: undefined;
+    found?: undefined;
     providers?: undefined;
     count?: undefined;
     provider?: undefined;
-    found?: undefined;
     registered: boolean;
     id: string;
     label: string;

package/dist/provider-api/actions/provider-api.d.ts

@@ -311,9 +311,11 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         notes?: string | undefined;
         scope?: "org" | "user" | undefined;
     }, {
+        deleted?: undefined;
         id?: undefined;
         provider?: undefined;
-        deleted?: undefined;
+        found?: undefined;
+        message?: undefined;
         providers: {
             id: string;
             label: string;
@@ -324,46 +326,44 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
             updatedAt: number;
         }[];
         count: number;
-        found?: undefined;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
-        id?: undefined;
-        count?: undefined;
         deleted?: undefined;
+        count?: undefined;
+        id?: undefined;
+        message?: undefined;
         providers?: undefined;
         found: boolean;
         provider: import("../custom-registry.js").CustomProviderConfig;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
+        deleted?: undefined;
         count?: undefined;
         provider?: undefined;
-        deleted?: undefined;
+        message?: undefined;
         providers?: undefined;
         found: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
         count?: undefined;
         provider?: undefined;
-        providers?: undefined;
         found?: undefined;
+        message?: undefined;
+        providers?: undefined;
         deleted: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
+        deleted?: undefined;
         count?: undefined;
         provider?: undefined;
-        deleted?: undefined;
-        providers?: undefined;
         found?: undefined;
+        providers?: undefined;
         registered: boolean;
         id: string;
         label: string;

package/dist/provider-api/corpus-jobs.d.ts

@@ -73,6 +73,7 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
     offset?: unknown;
     limit?: unknown;
 }, {
+    deleted?: undefined;
     jobs: {
         id: string;
         name: string;
@@ -83,7 +84,6 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
         updatedAt: string;
     }[];
     total: number;
-    deleted?: undefined;
     jobId?: undefined;
 } | {
     jobs?: undefined;
@@ -91,9 +91,9 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
     deleted: boolean;
     jobId: string;
 } | {
+    deleted?: undefined;
     jobs?: undefined;
     total?: undefined;
-    deleted?: undefined;
     jobId?: undefined;
     hits: Record<string, unknown>[];
     offset: number;

package/dist/resources/handlers.d.ts

@@ -48,8 +48,8 @@ export declare function handleUpdateResource(event: any): Promise<import("./stor
 }>;
 /** DELETE /_agent-native/resources/:id — delete a resource */
 export declare function handleDeleteResource(event: any): Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/secrets/routes.d.ts

@@ -37,17 +37,17 @@ export declare function createWriteSecretHandler(): import("h3").EventHandlerWit
     ok?: undefined;
     status?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     status: string;
-    error?: undefined;
 } | {
     ok?: undefined;
     error: string;
     removed?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     removed: boolean;
-    error?: undefined;
 }>>;
 /**
  * POST /_agent-native/secrets/:key/test — validate an optional candidate value
@@ -58,13 +58,13 @@ export declare function createTestSecretHandler(): import("h3").EventHandlerWith
     error: string;
     note?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     note?: undefined;
-    error?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     note: string;
-    error?: undefined;
 } | {
     note?: undefined;
     ok: boolean;
@@ -95,11 +95,11 @@ export interface AdHocSecretPayload {
 export declare function createAdHocSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<AdHocSecretPayload[] | {
     error: string;
 } | {
+    error?: undefined;
     ok: boolean;
     key: string;
-    error?: undefined;
 } | {
+    error?: undefined;
     ok: boolean;
     removed: boolean;
-    error?: undefined;
 }>>;

package/dist/server/agent-chat-plugin.js

@@ -4885,10 +4885,12 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
             catch (error) {
                 console.warn("[recurring-jobs] Scheduler module unavailable:", error instanceof Error ? error.message : error);
             }
-            // A non-Netlify self-dispatch only waits for the request to leave the
-            // current invocation. Keep the durable history row as a retryable queue
-            // so a frozen serverless handoff is recovered on the next sweep.
-            if (!isBackgroundRuntime && !sweepsDisabled) {
+            // A synchronous self-dispatch only waits for the request to leave the
+            // current invocation. Long-lived runtimes keep this retryable-queue
+            // backstop; serverless runtimes use their durable scheduler instead.
+            if (!isBackgroundRuntime &&
+                !disableRecurringJobsRuntime &&
+                !sweepsDisabled) {
                 (() => {
                     let inFlight = false;
                     const sweep = async () => {

package/dist/server/auth-plugin.js

@@ -1,10 +1,15 @@
 import { autoMountAuth } from "./auth.js";
+import { runBetterAuthMigrations } from "./better-auth-migrations.js";
 import { getH3App, awaitBootstrap, markDefaultPluginProvided, trackPluginInit, } from "./framework-request-handler.js";
 export function createAuthPlugin(options) {
     return (nitroApp) => {
         markDefaultPluginProvided(nitroApp, "auth");
         const initPromise = (async () => {
             await awaitBootstrap(nitroApp);
+            // guard:allow-boot-data-work — local/long-lived runtimes provision auth
+            // before mounting routes; production functions are rejected by the
+            // migration runner and use the release job instead.
+            await runBetterAuthMigrations(nitroApp);
             await autoMountAuth(getH3App(nitroApp), options);
         })();
         trackPluginInit(nitroApp, initPromise, {

package/dist/server/better-auth-instance.js

@@ -17,7 +17,6 @@ import { sqliteTable, text as sqliteText, integer as sqliteInteger, } from "driz
 import { TEMPLATES } from "../cli/templates-meta.js";
 import { getDbExec, isPostgres } from "../db/client.js";
 import { getDialect, getDatabaseUrl, getDatabaseAuthToken, closePgliteClients, getPgliteClient, isPgliteUrl, loadPgliteDrizzle, pgPoolOptions, neonPoolOptions, attachNeonPoolErrorLogger, sharedDbPool, onSharedDbPoolsClosed, onSharedDbPoolReplaced, } from "../db/client.js";
-import { ensureTableExists } from "../db/ddl-guard.js";
 import { CORE_RESET_PASSWORD_EMAIL_ID, CORE_VERIFY_SIGNUP_EMAIL_ID, } from "../email-catalog/system-emails.js";
 import { saveOAuthTokens } from "../oauth-tokens/store.js";
 import { acceptPendingInvitationsForEmail } from "../org/accept-pending.js";
@@ -518,65 +517,6 @@ async function mirrorGoogleAccountToOAuthTokens(account) {
         tokens.id_token = account.idToken;
     await saveOAuthTokens("google", email, tokens, email);
 }
-async function ensureBetterAuthTables() {
-    const db = getDbExec();
-    // PG guard: probe information_schema first (no lock) for each table; run
-    // DDL only when missing, bounded by a transaction-scoped lock_timeout.
-    // Probe names are UNQUOTED (what information_schema.tables.table_name stores);
-    // createSql keeps the QUOTED "user"/"session"/… form required by Postgres.
-    if (isPostgres()) {
-        const pgTables = [
-            [
-                "user",
-                `CREATE TABLE IF NOT EXISTS "user" (id TEXT PRIMARY KEY, name TEXT NOT NULL, email TEXT NOT NULL UNIQUE, email_verified BOOLEAN NOT NULL DEFAULT FALSE, image TEXT, created_at TIMESTAMPTZ NOT NULL, updated_at TIMESTAMPTZ NOT NULL)`,
-            ],
-            [
-                "session",
-                `CREATE TABLE IF NOT EXISTS "session" (id TEXT PRIMARY KEY, expires_at TIMESTAMPTZ NOT NULL, token TEXT NOT NULL UNIQUE, created_at TIMESTAMPTZ NOT NULL, updated_at TIMESTAMPTZ NOT NULL, ip_address TEXT, user_agent TEXT, user_id TEXT NOT NULL, active_organization_id TEXT)`,
-            ],
-            [
-                "account",
-                `CREATE TABLE IF NOT EXISTS "account" (id TEXT PRIMARY KEY, account_id TEXT NOT NULL, provider_id TEXT NOT NULL, user_id TEXT NOT NULL, access_token TEXT, refresh_token TEXT, id_token TEXT, access_token_expires_at TIMESTAMPTZ, refresh_token_expires_at TIMESTAMPTZ, scope TEXT, password TEXT, created_at TIMESTAMPTZ NOT NULL, updated_at TIMESTAMPTZ NOT NULL)`,
-            ],
-            [
-                "verification",
-                `CREATE TABLE IF NOT EXISTS "verification" (id TEXT PRIMARY KEY, identifier TEXT NOT NULL, value TEXT NOT NULL, expires_at TIMESTAMPTZ NOT NULL, created_at TIMESTAMPTZ NOT NULL, updated_at TIMESTAMPTZ NOT NULL)`,
-            ],
-            [
-                "organization",
-                `CREATE TABLE IF NOT EXISTS "organization" (id TEXT PRIMARY KEY, name TEXT NOT NULL, slug TEXT NOT NULL UNIQUE, logo TEXT, metadata TEXT, created_at TIMESTAMPTZ NOT NULL, updated_at TIMESTAMPTZ NOT NULL)`,
-            ],
-            [
-                "member",
-                `CREATE TABLE IF NOT EXISTS "member" (id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, user_id TEXT NOT NULL, role TEXT NOT NULL DEFAULT 'member', created_at TIMESTAMPTZ NOT NULL, updated_at TIMESTAMPTZ NOT NULL)`,
-            ],
-            [
-                "invitation",
-                `CREATE TABLE IF NOT EXISTS "invitation" (id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, email TEXT NOT NULL, role TEXT, status TEXT NOT NULL DEFAULT 'pending', expires_at TIMESTAMPTZ NOT NULL, inviter_id TEXT NOT NULL, created_at TIMESTAMPTZ NOT NULL, updated_at TIMESTAMPTZ NOT NULL)`,
-            ],
-            [
-                "jwks",
-                `CREATE TABLE IF NOT EXISTS "jwks" (id TEXT PRIMARY KEY, public_key TEXT NOT NULL, private_key TEXT NOT NULL, created_at TIMESTAMPTZ NOT NULL, expires_at TIMESTAMPTZ)`,
-            ],
-        ];
-        for (const [name, sql] of pgTables)
-            await ensureTableExists(name, sql);
-        return;
-    }
-    // SQLite (local dev): no lock problem — keep the original behaviour.
-    const sqliteStatements = [
-        `CREATE TABLE IF NOT EXISTS user (id TEXT PRIMARY KEY, name TEXT NOT NULL, email TEXT NOT NULL UNIQUE, email_verified INTEGER NOT NULL DEFAULT 0, image TEXT, created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL)`,
-        `CREATE TABLE IF NOT EXISTS session (id TEXT PRIMARY KEY, expires_at INTEGER NOT NULL, token TEXT NOT NULL UNIQUE, created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL, ip_address TEXT, user_agent TEXT, user_id TEXT NOT NULL, active_organization_id TEXT)`,
-        `CREATE TABLE IF NOT EXISTS account (id TEXT PRIMARY KEY, account_id TEXT NOT NULL, provider_id TEXT NOT NULL, user_id TEXT NOT NULL, access_token TEXT, refresh_token TEXT, id_token TEXT, access_token_expires_at INTEGER, refresh_token_expires_at INTEGER, scope TEXT, password TEXT, created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL)`,
-        `CREATE TABLE IF NOT EXISTS verification (id TEXT PRIMARY KEY, identifier TEXT NOT NULL, value TEXT NOT NULL, expires_at INTEGER NOT NULL, created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL)`,
-        `CREATE TABLE IF NOT EXISTS organization (id TEXT PRIMARY KEY, name TEXT NOT NULL, slug TEXT NOT NULL UNIQUE, logo TEXT, metadata TEXT, created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL)`,
-        `CREATE TABLE IF NOT EXISTS member (id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, user_id TEXT NOT NULL, role TEXT NOT NULL DEFAULT 'member', created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL)`,
-        `CREATE TABLE IF NOT EXISTS invitation (id TEXT PRIMARY KEY, organization_id TEXT NOT NULL, email TEXT NOT NULL, role TEXT, status TEXT NOT NULL DEFAULT 'pending', expires_at INTEGER NOT NULL, inviter_id TEXT NOT NULL, created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL)`,
-        `CREATE TABLE IF NOT EXISTS jwks (id TEXT PRIMARY KEY, public_key TEXT NOT NULL, private_key TEXT NOT NULL, created_at INTEGER NOT NULL, expires_at INTEGER)`,
-    ];
-    for (const sql of sqliteStatements)
-        await db.execute(sql);
-}
 /**
  * Get or create the Better Auth instance.
  * Lazily initialized on first call — the database must be reachable by then.
@@ -860,7 +800,6 @@ function resetAuthOnPoolClose(driver, url) {
 async function createBetterAuthInstance(config) {
     const dialect = getDialect();
     const basePath = config?.basePath ?? "/_agent-native/auth/ba";
-    await ensureBetterAuthTables();
     // Build social providers from env vars
     const socialProviders = {
         ...config?.socialProviders,

package/dist/server/better-auth-migrations.d.ts

@@ -0,0 +1,8 @@
+import { type MigrationEntry } from "../db/migrations.js";
+/**
+ * Better Auth's framework-owned schema. This is deliberately a release
+ * migration, not a fallback inside `getBetterAuth()`: request functions must
+ * be able to construct the auth adapter without probing or creating tables.
+ */
+export declare const BETTER_AUTH_MIGRATIONS: MigrationEntry[];
+export declare function runBetterAuthMigrations(nitroApp: unknown): Promise<void>;