@agent-native/core 0.157.7 → 0.157.9

package/dist/notifications/routes.d.ts

@@ -28,6 +28,6 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
 } | {
     count?: undefined;
     updated?: undefined;
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;

package/dist/observability/feedback.js

@@ -30,6 +30,16 @@ export async function submitFeedback(opts) {
     await insertFeedback(entry);
     return entry;
 }
+function unwrapPersistedThreadMessage(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        return null;
+    }
+    const record = value;
+    const nested = record.message;
+    return nested && typeof nested === "object" && !Array.isArray(nested)
+        ? nested
+        : record;
+}
 async function getThreadMessages(threadId) {
     await ensureObservabilityTables();
     const client = getDbExec();
@@ -47,22 +57,36 @@ async function getThreadMessages(threadId) {
         const messages = data.messages ?? data;
         if (!Array.isArray(messages))
             return [];
-        return messages
-            .filter((m) => m &&
-            typeof m.role === "string" &&
-            (typeof m.content === "string" ||
-                (Array.isArray(m.content) &&
-                    m.content.some((p) => p.type === "text"))))
-            .map((m) => ({
-            role: m.role,
-            content: typeof m.content === "string"
-                ? m.content
-                : m.content
-                    .filter((p) => p.type === "text")
-                    .map((p) => p.text ?? "")
-                    .join(""),
-            createdAt: m.createdAt ? Number(m.createdAt) : undefined,
-        }));
+        return messages.flatMap((value) => {
+            const message = unwrapPersistedThreadMessage(value);
+            if (!message)
+                return [];
+            const content = message.content;
+            if ((message.role !== "user" && message.role !== "assistant") ||
+                (typeof content !== "string" && !Array.isArray(content))) {
+                return [];
+            }
+            const text = typeof content === "string"
+                ? content
+                : content
+                    .filter((part) => Boolean(part) &&
+                    typeof part === "object" &&
+                    !Array.isArray(part) &&
+                    part.type === "text")
+                    .map((part) => (typeof part.text === "string" ? part.text : ""))
+                    .join("");
+            if (!text)
+                return [];
+            return [
+                {
+                    role: message.role,
+                    content: text,
+                    createdAt: typeof message.createdAt === "number"
+                        ? message.createdAt
+                        : undefined,
+                },
+            ];
+        });
     }
     catch {
         return [];

package/dist/observability/routes.d.ts

@@ -8,7 +8,7 @@
  *   GET    /traces/:runId              — get trace detail (spans + summary)
  *   GET    /traces/:runId/evals        — get evals for a run
  *   POST   /feedback                   — submit feedback
- *   GET    /feedback?since=N&limit=N   — list feedback entries
+ *   GET    /feedback?since=N&limit=N&feedbackType=text — list feedback entries
  *   GET    /feedback/stats?since=N     — feedback aggregation stats
  *   GET    /satisfaction?since=N       — satisfaction scores
  *   GET    /evals/stats?since=N        — eval stats

package/dist/observability/routes.js

@@ -8,7 +8,7 @@
  *   GET    /traces/:runId              — get trace detail (spans + summary)
  *   GET    /traces/:runId/evals        — get evals for a run
  *   POST   /feedback                   — submit feedback
- *   GET    /feedback?since=N&limit=N   — list feedback entries
+ *   GET    /feedback?since=N&limit=N&feedbackType=text — list feedback entries
  *   GET    /feedback/stats?since=N     — feedback aggregation stats
  *   GET    /satisfaction?since=N       — satisfaction scores
  *   GET    /evals/stats?since=N        — eval stats
@@ -27,6 +27,16 @@ import { track } from "../tracking/registry.js";
 import { emitAiFeedbackSurveyEvent } from "./posthog-ai.js";
 import { getObservabilityOverview, getTraceSummaries, getTraceSummary, getTraceSpansForRun, getEvalsForRun, insertFeedback, getFeedback, getFeedbackStats, getSatisfactionScores, getEvalStats, listExperiments, insertExperiment, getExperiment, updateExperiment, getExperimentResults, } from "./store.js";
 import { trackingIdentityProperties } from "./tracking-identity.js";
+const FEEDBACK_TYPES = [
+    "thumbs_up",
+    "thumbs_down",
+    "category",
+    "text",
+];
+function isFeedbackType(value) {
+    return (typeof value === "string" &&
+        FEEDBACK_TYPES.includes(value));
+}
 function nanoid(size = 21) {
     const alphabet = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
     let id = "";
@@ -143,8 +153,7 @@ export function createObservabilityHandler() {
                 return { error: "Invalid JSON body" };
             }
             const feedbackType = body?.feedbackType;
-            if (!feedbackType ||
-                !["thumbs_up", "thumbs_down", "category", "text"].includes(feedbackType)) {
+            if (!isFeedbackType(feedbackType)) {
                 setResponseStatus(event, 400);
                 return { error: "feedbackType is required" };
             }
@@ -229,6 +238,9 @@ export function createObservabilityHandler() {
             return getFeedback({
                 sinceMs: parseSince(q),
                 limit: parseLimit(q),
+                feedbackType: isFeedbackType(q.feedbackType)
+                    ? q.feedbackType
+                    : undefined,
                 userId: owner,
             });
         }

package/dist/observability/store.js

@@ -197,6 +197,7 @@ export async function ensureObservabilityTables() {
                 await ensureIndexExists("idx_feedback_thread", `CREATE INDEX IF NOT EXISTS idx_feedback_thread ON agent_feedback (thread_id)`);
                 await ensureIndexExists("idx_feedback_created", `CREATE INDEX IF NOT EXISTS idx_feedback_created ON agent_feedback (created_at)`);
                 await ensureIndexExists("idx_feedback_user", `CREATE INDEX IF NOT EXISTS idx_feedback_user ON agent_feedback (user_id, created_at)`);
+                await ensureIndexExists("idx_feedback_type_created", `CREATE INDEX IF NOT EXISTS idx_feedback_type_created ON agent_feedback (feedback_type, created_at)`);
                 await ensureIndexExists("idx_satisfaction_thread", `CREATE INDEX IF NOT EXISTS idx_satisfaction_thread ON agent_satisfaction_scores (thread_id)`);
                 await ensureIndexExists("idx_satisfaction_user", `CREATE INDEX IF NOT EXISTS idx_satisfaction_user ON agent_satisfaction_scores (user_id, computed_at)`);
                 await ensureIndexExists("idx_evals_run", `CREATE INDEX IF NOT EXISTS idx_evals_run ON agent_evals (run_id)`);
@@ -252,6 +253,7 @@ export async function ensureObservabilityTables() {
                 `CREATE INDEX IF NOT EXISTS idx_feedback_thread ON agent_feedback (thread_id)`,
                 `CREATE INDEX IF NOT EXISTS idx_feedback_created ON agent_feedback (created_at)`,
                 `CREATE INDEX IF NOT EXISTS idx_feedback_user ON agent_feedback (user_id, created_at)`,
+                `CREATE INDEX IF NOT EXISTS idx_feedback_type_created ON agent_feedback (feedback_type, created_at)`,
                 `CREATE INDEX IF NOT EXISTS idx_satisfaction_thread ON agent_satisfaction_scores (thread_id)`,
                 `CREATE INDEX IF NOT EXISTS idx_satisfaction_user ON agent_satisfaction_scores (user_id, computed_at)`,
                 `CREATE INDEX IF NOT EXISTS idx_evals_run ON agent_evals (run_id)`,

package/dist/observability/traces.js

@@ -637,7 +637,11 @@ export async function instrumentAgentLoop(opts) {
         catch { }
         let llmCallCount = 0;
         if (usage || runStatus === "error") {
-            llmCallCount = 1;
+            llmCallCount =
+                usage?.llmCalls ??
+                    // Compatibility for custom loop implementations that predate the
+                    // attempt counter: a measured run still counts as one call.
+                    1;
             const generationUsage = usage ?? {
                 inputTokens: 0,
                 outputTokens: 0,

package/dist/provider-api/actions/custom-provider-registration.d.ts

@@ -75,10 +75,9 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         user: "user";
     }>>;
 }, z.core.$strip>>, {
-    message?: undefined;
+    deleted?: undefined;
     id?: undefined;
     provider?: undefined;
-    deleted?: undefined;
     providers: {
         id: string;
         label: string;
@@ -92,41 +91,42 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
     found?: undefined;
     registered?: undefined;
     label?: undefined;
-} | {
     message?: undefined;
-    count?: undefined;
-    id?: undefined;
+} | {
     deleted?: undefined;
+    id?: undefined;
     providers?: undefined;
+    count?: undefined;
     found: boolean;
     provider: import("../custom-registry.js").CustomProviderConfig;
     registered?: undefined;
     label?: undefined;
-} | {
     message?: undefined;
-    count?: undefined;
-    provider?: undefined;
+} | {
     deleted?: undefined;
+    provider?: undefined;
     providers?: undefined;
+    count?: undefined;
     found: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
-} | {
     message?: undefined;
-    count?: undefined;
+} | {
     provider?: undefined;
     providers?: undefined;
+    count?: undefined;
     found?: undefined;
     deleted: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
+    message?: undefined;
 } | {
-    count?: undefined;
-    provider?: undefined;
     deleted?: undefined;
+    provider?: undefined;
     providers?: undefined;
+    count?: undefined;
     found?: undefined;
     registered: boolean;
     id: string;

package/dist/provider-api/actions/provider-api.d.ts

@@ -311,8 +311,9 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         notes?: string | undefined;
         scope?: "org" | "user" | undefined;
     }, {
-        deleted?: undefined;
+        message?: undefined;
         id?: undefined;
+        deleted?: undefined;
         providers: {
             id: string;
             label: string;
@@ -327,41 +328,40 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         found?: undefined;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
-        deleted?: undefined;
+        message?: undefined;
+        count?: undefined;
         id?: undefined;
+        deleted?: undefined;
         providers?: undefined;
-        count?: undefined;
         found: boolean;
         provider: import("../custom-registry.js").CustomProviderConfig;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
+        message?: undefined;
+        count?: undefined;
         deleted?: undefined;
         providers?: undefined;
-        count?: undefined;
         provider?: undefined;
         found: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
-        providers?: undefined;
+        message?: undefined;
         count?: undefined;
+        providers?: undefined;
         provider?: undefined;
         found?: undefined;
         deleted: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
-        message?: undefined;
     } | {
+        count?: undefined;
         deleted?: undefined;
         providers?: undefined;
-        count?: undefined;
         provider?: undefined;
         found?: undefined;
         registered: boolean;

package/dist/resources/handlers.d.ts

@@ -48,8 +48,8 @@ export declare function handleUpdateResource(event: any): Promise<import("./stor
 }>;
 /** DELETE /_agent-native/resources/:id — delete a resource */
 export declare function handleDeleteResource(event: any): Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/server/action-routes.d.ts

@@ -14,12 +14,14 @@ export type ActionRouteResolvedCaller = AgentRunOwnerContext & {
      * Org to scope the request to, verified from the same credential as the
      * caller identity (e.g. the A2A token's org claim). When omitted, the org
      * is derived from the verified owner email via the framework's owner→org
-     * membership lookup. The ambient session/org state on the request is never
-     * consulted for adapter-resolved callers: a request can carry both a valid
-     * A2A bearer and an unrelated browser cookie, and the cookie user's org
-     * must not leak into the token caller's request context.
+     * membership lookup. An explicit `null` means the verified caller has no
+     * org and must not fall back to another membership. The ambient session/org
+     * state on the request is never consulted for adapter-resolved callers: a
+     * request can carry both a valid A2A bearer and an unrelated browser cookie,
+     * and the cookie user's org must not leak into the token caller's request
+     * context.
      */
-    orgId?: string;
+    orgId?: string | null;
     /** Verified A2A correlation and issuer metadata for the audit row. */
     delegationJti?: string;
     delegationIssuer?: string;

package/dist/server/action-routes.js

@@ -3,6 +3,7 @@ import { verifyA2ATokenWithClaims } from "../a2a-claims.js";
 import { isActionContractError, isAgentActionStopError } from "../action.js";
 import { isTransientDatabaseError } from "../db/client.js";
 import { declaresFeatureFlagDelegation } from "../feature-flags/a2a-action-route.js";
+import { isFeatureFlagAdminEmail } from "../feature-flags/permissions.js";
 import { resolveOrgByDomain, resolveOrgIdForEmail } from "../org/context.js";
 import { readBody } from "../server/h3-helpers.js";
 import { EMBED_TARGET_HEADER } from "../shared/embed-auth.js";
@@ -55,7 +56,7 @@ async function resolveFeatureFlagA2ACaller(event, actionName) {
     if (!claims || !claims.scope.includes(required))
         throw new Error("Invalid feature flag delegation");
     const localOrg = await resolveOrgByDomain(claims.orgDomain);
-    if (!localOrg)
+    if (!localOrg && !isFeatureFlagAdminEmail(claims.email))
         throw new Error("Invalid feature flag delegation");
     if (actionName === "set-feature-flag" &&
         (await consumeOneTimeJti(claims.jti))) {
@@ -63,7 +64,7 @@ async function resolveFeatureFlagA2ACaller(event, actionName) {
     }
     return {
         owner: claims.email,
-        orgId: localOrg.orgId,
+        orgId: localOrg?.orgId ?? null,
         anonymous: false,
         delegationJti: claims.jti,
         delegationIssuer: claims.issuer,
@@ -362,7 +363,8 @@ export function mountActionRoutes(nitroApp, actions, options) {
             }
             // Org scoping. For adapter-resolved callers the org must come
             // exclusively from the verified credential: the adapter-asserted
-            // orgId when present, otherwise the owner-email membership lookup.
+            // orgId when present, explicit null when the caller has no org,
+            // otherwise the owner-email membership lookup.
             // The request's ambient session/org state (`resolveOrgId`, usually
             // getSession-backed) is deliberately NOT consulted — a request can
             // carry both a valid A2A bearer and an unrelated same-origin browser
@@ -372,7 +374,10 @@ export function mountActionRoutes(nitroApp, actions, options) {
             let orgId;
             if (resolvedCaller) {
                 orgId = normalizeOrgId(resolvedCaller.orgId);
-                if (!orgId && resolvedCaller.owner && !resolvedCaller.anonymous) {
+                if (resolvedCaller.orgId !== null &&
+                    !orgId &&
+                    resolvedCaller.owner &&
+                    !resolvedCaller.anonymous) {
                     orgId = await storedActiveOrgId(resolvedCaller.owner);
                 }
             }

package/dist/server/better-auth-instance.js

@@ -854,6 +854,10 @@ async function createBetterAuthInstance(config) {
         basePath,
         baseURL: appUrl,
         database,
+        // Auth schema relations are intentionally not registered here. Keep the
+        // experimental relational-query path off so a bundled Drizzle adapter
+        // cannot recurse while resolving a session or account join.
+        experimental: { joins: false },
         secret,
         emailAndPassword: {
             enabled: true,

package/dist/server/poll.d.ts

@@ -233,10 +233,10 @@ export declare class AppSyncState {
      *     bounded index range scan.
      *
      * The `lastDurablePrune` throttle below is per-process, so every serverless
-     * worker prunes on its first poll. That was survivable only once the work
-     * itself became bounded and indexed; if concurrency is still a problem,
-     * the next step is a `pg_try_advisory_xact_lock` so one worker prunes at a
-     * time. Deliberately not done yet — measure before adding a lock.
+     * worker prunes on its first poll. Postgres workers also take a
+     * transaction-scoped advisory lease for each batch: only one worker deletes
+     * at a time, but each batch still commits independently so a killed worker
+     * cannot hold a long transaction open.
      */
     private pruneDurableEvents;
     persistSyncEvent(event: ChangeEvent, dedupeKey?: string, presetId?: string): Promise<void>;

package/dist/server/poll.js

@@ -42,6 +42,12 @@ const DURABLE_RETENTION_MS = 24 * 60 * 60 * 1000;
  */
 const DURABLE_PRUNE_BATCH = 10_000;
 const DURABLE_PRUNE_MAX_BATCHES = 40;
+/**
+ * Postgres advisory-lock key for the per-database retention worker. The lock
+ * is transaction-scoped so a serverless worker that is killed cannot leave a
+ * lease behind for another worker to clear.
+ */
+const DURABLE_PRUNE_LOCK_KEY = "agent-native:sync-events-prune";
 /**
  * How far back a cold-started process replays durable action markers.
  * Covers the gap between a separate action process writing its marker and this
@@ -455,10 +461,10 @@ export class AppSyncState {
      *     bounded index range scan.
      *
      * The `lastDurablePrune` throttle below is per-process, so every serverless
-     * worker prunes on its first poll. That was survivable only once the work
-     * itself became bounded and indexed; if concurrency is still a problem,
-     * the next step is a `pg_try_advisory_xact_lock` so one worker prunes at a
-     * time. Deliberately not done yet — measure before adding a lock.
+     * worker prunes on its first poll. Postgres workers also take a
+     * transaction-scoped advisory lease for each batch: only one worker deletes
+     * at a time, but each batch still commits independently so a killed worker
+     * cannot hold a long transaction open.
      */
     async pruneDurableEvents(client) {
         const now = Date.now();
@@ -469,17 +475,43 @@ export class AppSyncState {
         let deleted = 0;
         try {
             for (let batch = 0; batch < DURABLE_PRUNE_MAX_BATCHES; batch++) {
-                const result = await client.execute({
+                const runBatch = async (tx) => {
+                    if (this.isPg()) {
+                        const lockResult = await tx.execute({
+                            sql: "SELECT pg_try_advisory_xact_lock(hashtextextended(?, 0::bigint)) AS acquired",
+                            args: [DURABLE_PRUNE_LOCK_KEY],
+                        });
+                        const acquired = lockResult.rows[0]?.acquired;
+                        if (acquired !== true && acquired !== "t")
+                            return null;
+                    }
                     // `id IN (...)` rather than ctid/rowid: both are dialect-specific,
                     // and the primary key is indexed on every dialect we ship.
-                    sql: `DELETE FROM sync_events WHERE id IN (
-                  SELECT id FROM sync_events WHERE created_at < ?
-                  ORDER BY created_at, id LIMIT ?
-                )`,
-                    args: [cutoff, DURABLE_PRUNE_BATCH],
-                });
-                deleted += result.rowsAffected;
-                if (result.rowsAffected < DURABLE_PRUNE_BATCH)
+                    const result = await tx.execute({
+                        sql: `DELETE FROM sync_events WHERE id IN (
+                    SELECT id FROM sync_events WHERE created_at < ?
+                    ORDER BY created_at, id LIMIT ?
+                  )`,
+                        args: [cutoff, DURABLE_PRUNE_BATCH],
+                    });
+                    return result.rowsAffected;
+                };
+                // A Postgres advisory transaction lock is only useful when the lock
+                // and delete share a connection and transaction. Never fall back to
+                // an uncoordinated delete on a transactionless client.
+                const rowsAffected = this.isPg()
+                    ? client.transaction
+                        ? await client.transaction(runBatch)
+                        : null
+                    : await runBatch(client);
+                if (rowsAffected == null) {
+                    if (this.isPg() && !client.transaction) {
+                        throw new Error("Postgres prune requires a database transaction");
+                    }
+                    break;
+                }
+                deleted += rowsAffected;
+                if (rowsAffected < DURABLE_PRUNE_BATCH)
                     break;
             }
             this.durablePruneFailures = 0;

package/dist/server/realtime-voice.js

@@ -25,7 +25,7 @@ export const REALTIME_VOICE_CAPABILITY_HEADER = "X-Agent-Native-Realtime-Capabil
 const OPENAI_REALTIME_CALLS_URL = "https://api.openai.com/v1/realtime/calls";
 const DEFAULT_MODEL = "gpt-realtime-2.1";
 const DEFAULT_VOICE = "marin";
-const DEFAULT_INSTRUCTIONS = "You are the live voice interface for this Agent Native app. Speak naturally, briefly, and conversationally. Use the available function tools when the user asks you to navigate or take an action. Never claim an action succeeded until its tool result confirms success. If a tool requires approval, explain that the user must approve it in chat.";
+const DEFAULT_INSTRUCTIONS = "You are the live voice interface for this Agent Native app. Speak naturally, briefly, and conversationally. Use the available function tools when the user asks you to navigate or take an action. When the user asks about a previous conversation, saved chat details, or something they told you before, search with the `chat-history` tool before saying you cannot access it. Summarize a matching result and open a thread only when the user asks. If the user repeats a request, acknowledge the prior attempt and finish or correct the missing part instead of restarting from scratch or asking the same clarification again. Never claim an action succeeded until its tool result confirms success. If a tool requires approval, explain that the user must approve it in chat.";
 const MAX_INSTRUCTIONS_CHARS = 16_000;
 const MAX_TOOL_DESCRIPTION_CHARS = 2_000;
 const MAX_APPROVAL_KEY_CHARS = 1_024;
@@ -61,6 +61,7 @@ const REALTIME_VOICE_PRIORITY_TOOLS = [
     "set-url-path",
     "set-search-params",
     "view-screen",
+    "chat-history",
     TOOL_SEARCH_ACTION_NAME,
 ];
 function readSafeHeader(event, name) {

package/dist/server/release-migrations.js

@@ -1,11 +1,15 @@
 import { CONTEXT_XRAY_MIGRATIONS } from "../agent/context-xray/migrations.js";
+import { AGENT_HARNESS_SESSION_MIGRATIONS, AGENT_HARNESS_SESSION_MIGRATIONS_TABLE, } from "../agent/harness/migrations.js";
 import { OBSERVATIONAL_MEMORY_MIGRATIONS } from "../agent/observational-memory/migrations.js";
+import { AGENT_RUN_MIGRATIONS, AGENT_RUN_MIGRATIONS_TABLE, } from "../agent/run-migrations.js";
 import { AGENT_TOOL_APPROVAL_MIGRATIONS, AGENT_TOOL_APPROVAL_MIGRATIONS_TABLE, } from "../agent/tool-approval-migrations.js";
+import { CHAT_THREAD_SCHEMA_MIGRATIONS, CHAT_THREAD_SCHEMA_MIGRATIONS_TABLE, } from "../chat-threads/schema-migrations.js";
 import { runMigrations } from "../db/migrations.js";
 import { runAutomationRunMigrations } from "../jobs/run-history.js";
 import { runAutomationSchedulerHealthMigrations } from "../jobs/scheduler-health.js";
 import { OAUTH_TOKEN_MIGRATIONS, OAUTH_TOKEN_MIGRATIONS_TABLE, } from "../oauth-tokens/migrations.js";
 import { ORG_MIGRATIONS } from "../org/migrations.js";
+import { USAGE_ALERT_MIGRATIONS, USAGE_ALERT_MIGRATIONS_TABLE, } from "../usage/migrations.js";
 import { runBetterAuthMigrations } from "./better-auth-migrations.js";
 import { IDENTITY_SSO_MIGRATIONS } from "./identity-sso-migrations.js";
 /**
@@ -23,6 +27,18 @@ export async function runFrameworkReleaseMigrations(nitroApp) {
     await runMigrations(OAUTH_TOKEN_MIGRATIONS, {
         table: OAUTH_TOKEN_MIGRATIONS_TABLE,
     })(nitroApp);
+    await runMigrations(CHAT_THREAD_SCHEMA_MIGRATIONS, {
+        table: CHAT_THREAD_SCHEMA_MIGRATIONS_TABLE,
+    })(nitroApp);
+    await runMigrations(AGENT_RUN_MIGRATIONS, {
+        table: AGENT_RUN_MIGRATIONS_TABLE,
+    })(nitroApp);
+    await runMigrations(AGENT_HARNESS_SESSION_MIGRATIONS, {
+        table: AGENT_HARNESS_SESSION_MIGRATIONS_TABLE,
+    })(nitroApp);
+    await runMigrations(USAGE_ALERT_MIGRATIONS, {
+        table: USAGE_ALERT_MIGRATIONS_TABLE,
+    })(nitroApp);
     await runMigrations(ORG_MIGRATIONS, { table: "_org_migrations" })(nitroApp);
     await runMigrations(IDENTITY_SSO_MIGRATIONS, {
         table: "_identity_sso_migrations",

package/dist/usage/migrations.d.ts

@@ -0,0 +1,4 @@
+import type { MigrationEntry } from "../db/migrations.js";
+export declare const USAGE_ALERT_MIGRATIONS_TABLE = "_usage_alert_migrations";
+/** Authoritative release-time schema for usage alert rules and events. */
+export declare const USAGE_ALERT_MIGRATIONS: MigrationEntry[];

package/dist/usage/migrations.js

@@ -0,0 +1,45 @@
+export const USAGE_ALERT_MIGRATIONS_TABLE = "_usage_alert_migrations";
+/** Authoritative release-time schema for usage alert rules and events. */
+export const USAGE_ALERT_MIGRATIONS = [
+    {
+        version: 1,
+        name: "usage-alert-rules-and-events-tables",
+        sql: `
+      CREATE TABLE IF NOT EXISTS usage_alert_rules (
+        id TEXT PRIMARY KEY,
+        scope TEXT NOT NULL,
+        owner_email TEXT NOT NULL,
+        org_id TEXT,
+        app_id TEXT,
+        unit TEXT NOT NULL,
+        period TEXT NOT NULL,
+        limit_value INTEGER NOT NULL,
+        channels TEXT NOT NULL,
+        enabled INTEGER NOT NULL DEFAULT 1,
+        dismissed_window_start INTEGER,
+        created_at INTEGER NOT NULL,
+        updated_at INTEGER NOT NULL
+      );
+      CREATE TABLE IF NOT EXISTS usage_alert_events (
+        id TEXT PRIMARY KEY,
+        rule_id TEXT NOT NULL,
+        window_start INTEGER NOT NULL,
+        created_at INTEGER NOT NULL
+      );
+      CREATE INDEX IF NOT EXISTS idx_usage_alert_rules_owner
+        ON usage_alert_rules (owner_email, org_id, scope);
+      CREATE UNIQUE INDEX IF NOT EXISTS idx_usage_alert_events_rule_window
+        ON usage_alert_events (rule_id, window_start)
+    `,
+    },
+    {
+        version: 2,
+        name: "usage-alert-default-column",
+        sql: `ALTER TABLE usage_alert_rules ADD COLUMN IF NOT EXISTS is_default INTEGER NOT NULL DEFAULT 0`,
+    },
+    {
+        version: 3,
+        name: "usage-alert-notification-column",
+        sql: "ALTER TABLE usage_alert_events ADD COLUMN IF NOT EXISTS notification_id TEXT",
+    },
+];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.157.7",
+  "version": "0.157.9",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -385,7 +385,7 @@
     "@tanstack/react-table": "^8.21.3",
     "@uiw/react-codemirror": "^4.25.10",
     "ajv": "^8.20.0",
-    "better-auth": "1.6.16",
+    "better-auth": "1.6.28",
     "better-sqlite3": "^12.8.0",
     "botframework-connector": "^4.23.3",
     "clsx": "^2.1.1",
@@ -426,7 +426,7 @@
     "yjs": "^13.6.31",
     "zod": "^4.3.6",
     "@agent-native/recap-cli": "0.5.4",
-    "@agent-native/toolkit": "^0.16.1"
+    "@agent-native/toolkit": "^0.16.2"
   },
   "devDependencies": {
     "@ai-sdk/anthropic": "^3.0.71",