@app-vitals/agent-admin 0.16.1 → 1.0.0

package/e2e/agents-page.e2e.ts

@@ -304,7 +304,7 @@ test.describe("GET /admin/agents/new — type picker", () => {
     await expect(typeSelect).toHaveAttribute("required", "");
   });
 
-  test('the select lists "Coding Agent" (value coding)', async ({
+  test('the select lists the configured default type "coding"', async ({
     page,
     context,
   }) => {
@@ -313,7 +313,7 @@ test.describe("GET /admin/agents/new — type picker", () => {
       'select[name="type"] option[value="coding"]',
     );
     await expect(codingOption).toBeAttached();
-    await expect(codingOption).toHaveText("Coding Agent");
+    await expect(codingOption).toHaveText("coding");
   });
 });
 

package/openapi.json

@@ -3521,7 +3521,7 @@
     "/agents/{id}": {
       "get": {
         "summary": "Get an agent",
-        "description": "Admin-only. Returns the full agent record including `selfHosted`, `repos`, `reviewAuthorAllowlist`, `patchAuthorAllowlist`, `restrictSlackToMembers`, `specialty`, `accountId` (null for unassigned agents), and `missingRequiredEnv` — required env keys declared by the agent's type manifest with no corresponding AgentEnv row yet (informational only).",
+        "description": "Admin-only. Returns the full agent record including `selfHosted`, `repos`, `reviewAuthorAllowlist`, `patchAuthorAllowlist`, `restrictSlackToMembers`, `specialty`, `accountId` (null for unassigned agents), and `missingRequiredEnv` — required env keys declared by the agent's type with no corresponding AgentEnv row yet (informational only).",
         "parameters": [
           {
             "schema": {
@@ -3742,7 +3742,7 @@
       },
       "post": {
         "summary": "Create an agent",
-        "description": "Admin-only. Validates name/specialty, creates the Agent row, seeds AgentTool/AgentPlugin rows from the resolved type manifest, attaches repos/allowlists/members, patches Claude credentials, and provisions Kubernetes when `runtime` is \"in-cluster\" — the same createAgent() implementation (APA-1.1) the web UI form at /admin/agents/new uses. Transactional: on any failure zero rows persist, and this route never returns a partial-success 200. Returns the created agent in the same shape as GET /agents/:id.",
+        "description": "Admin-only. Validates name/specialty, creates the Agent row, seeds AgentTool/AgentPlugin rows from the resolved type, attaches repos/allowlists/members, patches Claude credentials, and provisions Kubernetes when `runtime` is \"in-cluster\" — the same createAgent() implementation (APA-1.1) the web UI form at /admin/agents/new uses. Transactional: on any failure zero rows persist, and this route never returns a partial-success 200. Returns the created agent in the same shape as GET /agents/:id.",
         "requestBody": {
           "content": {
             "application/json": {
@@ -4047,7 +4047,7 @@
     "/agents/{id}/crons/reconcile": {
       "post": {
         "summary": "Reconcile system crons",
-        "description": "Reconciles the agent's system crons against the cron list declared by its Specialty manifest. Runs in three passes within a single transaction: create-or-update matched-by-name system crons (preserving IDs so run history survives), link/unlink parent-child cron relationships, and delete orphaned system crons no longer in the manifest. Called automatically on agent startup; returns created/updated/deleted counts.",
+        "description": "Reconciles the agent's system crons against the cron list supplied by the AdminExtension for its specialty. Runs in three passes within a single transaction: create-or-update matched-by-name system crons (preserving IDs so run history survives), link/unlink parent-child cron relationships, and delete orphaned system crons no longer in the defaults. Called automatically on agent startup; returns created/updated/deleted counts.",
         "parameters": [
           {
             "schema": {

package/openapi.platform.json

@@ -537,7 +537,7 @@
           },
           "specialty": {
             "type": "string",
-            "example": "coding"
+            "example": "specialist"
           }
         },
         "required": [
@@ -558,7 +558,7 @@
           "specialty": {
             "type": "string",
             "minLength": 1,
-            "example": "coding"
+            "example": "specialist"
           },
           "runtime": {
             "type": "string",
@@ -3091,11 +3091,11 @@
           },
           "specialty": {
             "type": "string",
-            "example": "coding"
+            "example": "specialist"
           },
           "typeName": {
             "type": "string",
-            "example": "coding",
+            "example": "specialist",
             "deprecated": true
           },
           "phaseMethodology": {
@@ -3349,7 +3349,7 @@
     "/agents/{id}": {
       "get": {
         "summary": "Get an agent",
-        "description": "Admin-only. Returns the full agent record including `selfHosted`, `repos`, `reviewAuthorAllowlist`, `patchAuthorAllowlist`, `restrictSlackToMembers`, `specialty`, `accountId` (null for unassigned agents), and `missingRequiredEnv` — required env keys declared by the agent's type manifest with no corresponding AgentEnv row yet (informational only).",
+        "description": "Admin-only. Returns the full agent record including `selfHosted`, `repos`, `reviewAuthorAllowlist`, `patchAuthorAllowlist`, `restrictSlackToMembers`, `specialty`, `accountId` (null for unassigned agents), and `missingRequiredEnv` — required env keys declared by the agent's type with no corresponding AgentEnv row yet (informational only).",
         "parameters": [
           {
             "schema": {
@@ -3705,7 +3705,7 @@
       },
       "post": {
         "summary": "Create an agent",
-        "description": "Admin-only. Validates name/specialty, creates the Agent row, seeds AgentTool/AgentPlugin rows from the resolved type manifest, attaches repos/allowlists/members, patches Claude credentials, and provisions Kubernetes when `runtime` is \"in-cluster\" — the same createAgent() implementation (APA-1.1) the web UI form at /admin/agents/new uses. Transactional: on any failure zero rows persist, and this route never returns a partial-success 200. Returns the created agent in the same shape as GET /agents/:id.",
+        "description": "Admin-only. Validates name/specialty, creates the Agent row, seeds AgentTool/AgentPlugin rows from the resolved type, attaches repos/allowlists/members, patches Claude credentials, and provisions Kubernetes when `runtime` is \"in-cluster\" — the same createAgent() implementation (APA-1.1) the web UI form at /admin/agents/new uses. Transactional: on any failure zero rows persist, and this route never returns a partial-success 200. Returns the created agent in the same shape as GET /agents/:id.",
         "requestBody": {
           "content": {
             "application/json": {
@@ -4010,7 +4010,7 @@
     "/agents/{id}/crons/reconcile": {
       "post": {
         "summary": "Reconcile system crons",
-        "description": "Reconciles the agent's system crons against the cron list declared by its Specialty manifest. Runs in three passes within a single transaction: create-or-update matched-by-name system crons (preserving IDs so run history survives), link/unlink parent-child cron relationships, and delete orphaned system crons no longer in the manifest. Called automatically on agent startup; returns created/updated/deleted counts.",
+        "description": "Reconciles the agent's system crons against the cron list supplied by the AdminExtension for its specialty. Runs in three passes within a single transaction: create-or-update matched-by-name system crons (preserving IDs so run history survives), link/unlink parent-child cron relationships, and delete orphaned system crons no longer in the defaults. Called automatically on agent startup; returns created/updated/deleted counts.",
         "parameters": [
           {
             "schema": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@app-vitals/agent-admin",
-  "version": "0.16.1",
+  "version": "1.0.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/app-vitals/agent.git",
@@ -21,8 +21,7 @@
     "./main": "./src/main.ts",
     "./openapi-schemas": "./src/openapi-schemas.ts",
     "./prisma-client": "./src/prisma-client.ts",
-    "./specialty-manifest-loader": "./src/specialty-manifest-loader.ts",
-    "./specialty-registry": "./src/specialty-registry.ts",
+    "./specialty-types": "./src/specialty-types.ts",
     "./theme-tokens.json": "./src/theme-tokens.json",
     "./*": "./src/*.ts",
     "./prisma/client/*": "./prisma/client/*",
@@ -43,7 +42,7 @@
   },
   "dependencies": {
     "@anthropic-ai/sdk": "0.135.0",
-    "@app-vitals/agent-lib": "0.16.1",
+    "@app-vitals/agent-lib": "1.0.0",
     "@hono/zod-openapi": "^1.0.0",
     "@prisma/adapter-pg": "^7.10.0",
     "@prisma/client": "^7.10.0",
@@ -52,7 +51,6 @@
     "@slack/web-api": "^8.1.0",
     "hono": "^4.13.1",
     "pg": "^8.16.3",
-    "yaml": "^2.9.0",
     "zod": "^4"
   },
   "devDependencies": {

package/prisma/client/internal/class.ts

@@ -20,7 +20,7 @@ const config: runtime.GetPrismaClientConfig = {
   "clientVersion": "7.10.0",
   "engineVersion": "0edf323efd1d98336f3f0a68684b56f689b900d3",
   "activeProvider": "postgresql",
-  "inlineSchema": "// Shipwright — Admin Service Schema: coding-owned models (AEP-3.4)\n//\n// Part of the admin Prisma multi-file schema (prisma/schema/). These models\n// belong to the coding feature surface and are isolated here so the coding\n// code can later be extracted. They share the single `db` datasource and\n// generator declared in schema.prisma, so the generated client and the\n// migrations are unchanged by this split.\n//\n// Coding-owned columns that live on the shared Agent model (schema.prisma)\n// and are grouped/commented there: reviewAuthorAllowlist, patchAuthorAllowlist,\n// autoPostReviews, allowSelfReview, minConfidence, maxFindings.\n\n// ─── Agent Work Queue Snapshot ────────────────────────────────────────────────\n// One row per agent, holding the agent's most recently pushed work-queue\n// snapshot (its ranked view of pending tasks/PRs across pipeline phases).\n// POST /agents/:id/work-queue upserts this single row, overwriting any prior\n// snapshot — there is no history, only the latest state.\n\nmodel AgentWorkQueueSnapshot {\n  id         String   @id @default(cuid())\n  agentId    String   @unique\n  agent      Agent    @relation(fields: [agentId], references: [id], onDelete: Cascade)\n  computedAt DateTime\n  items      Json // RankedWorkItem[]\n  createdAt  DateTime @default(now())\n}\n\n// ─── Agent Phase Methodology ──────────────────────────────────────────────────\n// Per-phase subagent-type override. Each row records which subagent type\n// (e.g. a custom Specialty name) should handle one pipeline phase — prd,\n// plan-session, review, patch, deploy, or dev-task — for a given agent,\n// overriding that phase's default methodology. `subagentType` is nullable:\n// a row with a null value (or the absence of a row) means \"use the default\".\n// The `phase` value is constrained to the six-value enum at the service/route\n// layer (Zod), not here — Postgres/Prisma has no native enum-column\n// requirement in this schema style (mirrors AgentTool.pattern / AgentCronJob\n// validation living at the service layer). The unique constraint on\n// [agentId, phase] makes upsert-based writes idempotent (one override row per\n// phase per agent), mirroring AgentTool's [agentId, pattern] and AgentPlugin's\n// [agentId, name].\n\nmodel AgentPhaseMethodology {\n  id           String   @id @default(cuid())\n  agentId      String\n  agent        Agent    @relation(fields: [agentId], references: [id], onDelete: Cascade)\n  phase        String\n  subagentType String?\n  updatedAt    DateTime @updatedAt\n\n  @@unique([agentId, phase])\n}\n\n// ─── Session Follow ───────────────────────────────────────────────────────────\n// Records that a user is \"following\" a planning session (identified by its\n// slug) so they can receive reminders/notifications about it. `muted` lets a\n// user stay following (kept in listByUser) while suppressing alerts, distinct\n// from unfollowing (row deleted entirely). The unique constraint on\n// [userEmail, sessionSlug] makes follow() idempotent via upsert.\nmodel SessionFollow {\n  id          String   @id @default(cuid())\n  userEmail   String\n  sessionSlug String\n  muted       Boolean  @default(false)\n  createdAt   DateTime @default(now())\n  updatedAt   DateTime @updatedAt\n\n  @@unique([userEmail, sessionSlug])\n  @@index([sessionSlug])\n}\n\n// ─── Session Alert State ─────────────────────────────────────────────────────\n// Tracks the last time a user was alerted about a given session, so a\n// reminder job can avoid re-alerting the same user/session pair within a\n// cooldown window. The unique constraint on [userEmail, sessionSlug] allows\n// upsert semantics (one state row per user per session).\nmodel SessionAlertState {\n  id            String    @id @default(cuid())\n  userEmail     String\n  sessionSlug   String\n  lastAlertedAt DateTime?\n  createdAt     DateTime  @default(now())\n  updatedAt     DateTime  @updatedAt\n\n  @@unique([userEmail, sessionSlug])\n}\n\n// Shipwright — Admin Service Schema\n// Owns: Agent, AgentEnv, AgentCronJob, AgentTool, AgentToken, AgentPlugin,\n// plus the coding-owned models in coding.prisma (AgentWorkQueueSnapshot,\n// AgentPhaseMethodology, SessionFollow, SessionAlertState).\n// Agent is a first-class model (standalone, not embedded in a User model).\n//\n// WARNING: This schema uses DATABASE_URL_SHIPWRIGHT_ADMIN — a dedicated database\n// for the admin service. Do NOT point this at a shared database.\n\n// Prisma 7: the `prisma-client` generator (ESM, driver-adapter based) replaces\n// `prisma-client-js`, and the datasource block no longer accepts `url` — the\n// connection string for CLI/Migrate lives in ../../prisma.config.ts, and the\n// runtime client connects through a PrismaPg driver adapter (see\n// admin/src/prisma-client.ts).\ngenerator client {\n  provider = \"prisma-client\"\n  output   = \"../client\"\n}\n\ndatasource db {\n  provider = \"postgresql\"\n}\n\n// ─── Agent ────────────────────────────────────────────────────────────────────\n// A Shipwright agent: an autonomous runner that picks tasks, builds, and ships PRs.\n\nmodel Agent {\n  id                        String    @id @default(cuid())\n  name                      String\n  slackId                   String?   @unique\n  slackBotToken             String? // AES-256-GCM encrypted at the service layer\n  anthropicApiKey           String? // AES-256-GCM encrypted at the service layer\n  selfHosted                Boolean   @default(false)\n  repos                     String[]  @default([])\n  // DBR-2.1→2.4: renamed from authorAllowlist. DBR-2.1 added this column as\n  // a dual-written/dual-read twin of the old authorAllowlist column and\n  // backfilled it; DBR-2.2/2.3 migrated the admin UI and the agent's\n  // runtime read path onto this field exclusively; DBR-2.4 dropped the old\n  // authorAllowlist column now that nothing reads or writes it.\n  // CODING-OWNED (AEP-3.4): reviewAuthorAllowlist and patchAuthorAllowlist are\n  // read by the coding review/patch flows. Kept on Agent (no column move).\n  reviewAuthorAllowlist     String[]  @default([])\n  patchAuthorAllowlist      String[]  @default([])\n  restrictSlackToMembers    Boolean   @default(false)\n  // The agent's Specialty name (manifest key). AGR-6.3 made it required and\n  // dropped the legacy typeName column.\n  specialty                 String    @default(\"coding\")\n  // SSP-1.2: owning account. Nullable/additive — existing agents keep NULL.\n  accountId                 String?\n  account                   Account?  @relation(fields: [accountId], references: [id], onDelete: Restrict)\n  // ATE-1.1: trial expiry tracking. Both nullable/additive — null means \"no\n  // trial configured\" / \"no warning sent yet\". trialExpiresAt is settable via\n  // PATCH /agents/:id like other nullable scalar fields; trialExpiryWarnedAt\n  // is written internally by ATE-2.1's warning check (not user-editable via\n  // the PATCH route) but is included in GET/PATCH responses.\n  trialExpiresAt            DateTime?\n  trialExpiryWarnedAt       DateTime?\n  // PAI-1.1: owner and Anthropic identity. All nullable/additive — existing\n  // agents keep NULL. anthropicIdentityName is unique across agents.\n  ownerEmail                String?\n  anthropicIdentityName     String?   @unique\n  anthropicServiceAccountId String?\n  anthropicFederationRuleId String?\n  k8sServiceAccountName     String?\n  // COS-48.1: the pod's own Kubernetes ServiceAccount (cluster identity). A\n  // separate column from k8sServiceAccountName, which is the Anthropic-\n  // federation KSA. Only rendered when the pod-SA flag is on.\n  podServiceAccountName     String?\n  // APM-1.1: the 6 agent policy fields (auto_post_reviews, allow_self_review,\n  // min_confidence, max_findings, cleanup_merged_worktrees,\n  // cleanup_after_days). Originally mirrored from the legacy\n  // state/agent-policy.md; the DB is now the only source and each column\n  // carries its documented default.\n  // CODING-OWNED (AEP-3.4): autoPostReviews, allowSelfReview, minConfidence,\n  // maxFindings configure the coding review flow; cleanupMergedWorktrees and\n  // cleanupAfterDays below are runtime-owned.\n  autoPostReviews           Boolean   @default(true)\n  allowSelfReview           Boolean   @default(false)\n  minConfidence             Int       @default(75)\n  maxFindings               Int       @default(5)\n  cleanupMergedWorktrees    Boolean   @default(true)\n  cleanupAfterDays          Int       @default(14)\n  createdAt                 DateTime  @default(now())\n  updatedAt                 DateTime  @updatedAt\n\n  envVars                     AgentEnv[]\n  cronJobs                    AgentCronJob[]\n  tools                       AgentTool[]\n  tokens                      AgentToken[]\n  plugins                     AgentPlugin[]\n  members                     AgentMember[]\n  chatTokenUsage              AgentChatTokenUsageDailyByModel[]\n  workQueueSnapshot           AgentWorkQueueSnapshot?\n  githubInstallationsSnapshot AgentGitHubInstallationsSnapshot?\n  phaseMethodologies          AgentPhaseMethodology[]\n\n  @@index([accountId])\n}\n\n// ─── Agent Env ────────────────────────────────────────────────────────────────\n// Generic key/value env var store for deployed agents.\n// Keys are env var names (e.g. ANTHROPIC_API_KEY). Values are AES-256-GCM encrypted.\n\nmodel AgentEnv {\n  id        String   @id @default(cuid())\n  agentId   String\n  agent     Agent    @relation(fields: [agentId], references: [id], onDelete: Cascade)\n  key       String // env var name\n  value     String // AES-256-GCM encrypted\n  secret    Boolean  @default(false) // when true, GET /agents/:id/envs masks the value as ***\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([agentId, key])\n}\n\n// ─── Agent Cron Jobs ──────────────────────────────────────────────────────────\n// Scheduled prompts per agent.\n// Delivery target is either a Slack channel ID or a Slack user ID (DM).\n// Validation that exactly one of channel/user is set happens in the service layer.\n\nmodel AgentCronJob {\n  id                 String    @id @default(cuid())\n  agentId            String\n  agent              Agent     @relation(fields: [agentId], references: [id], onDelete: Cascade)\n  schedule           String // cron expression e.g. \"0 9 * * 1-5\"\n  prompt             String\n  channel            String? // Slack channel ID (mutually exclusive with user)\n  user               String? // Slack user ID for DMs\n  silent             Boolean   @default(false)\n  enabled            Boolean   @default(true)\n  preCheck           String? // optional pre-check script e.g. \"shipwright:check-docs-freshness.ts\"\n  name               String? // stable key for system crons; null for user-created crons\n  system             Boolean   @default(false)\n  // Set when the trial-expiry lockdown (not the user) disabled this cron, so\n  // restoreLockdownDisabled() can re-enable exactly those crons. Null for\n  // enabled crons and for crons the user disabled manually.\n  lockdownDisabledAt DateTime?\n  // Run-now request (COS-42.1): stamped by POST .../run-now, cleared when the\n  // runtime creates the run (commandVariant \"run-now\"). The runtime honours a\n  // stamp at most once and only while it is fresh (15 minutes).\n  runRequestedAt     DateTime?\n  runRequestedBy     String?\n  createdAt          DateTime  @default(now())\n  updatedAt          DateTime  @updatedAt\n\n  // Self-relation: a parent cron can have child \"phase\" crons (e.g. dev-task/\n  // review/patch/deploy phases of a single logical loop). Null for top-level\n  // crons. Deleting a parent cascades to its phase children.\n  parentCronId String?\n  parentCron   AgentCronJob?  @relation(\"CronPhases\", fields: [parentCronId], references: [id], onDelete: Cascade)\n  phases       AgentCronJob[] @relation(\"CronPhases\")\n\n  runs      AgentCronRun[]\n  phaseRuns AgentCronRun[] @relation(\"PhaseRuns\")\n\n  @@index([parentCronId])\n}\n\n// ─── Agent Tools ──────────────────────────────────────────────────────────────\n// Allowed tool patterns per agent. Each row grants an agent permission to use\n// a specific tool pattern (e.g. \"Read\", \"Bash\", \"Write\"). The unique constraint\n// on [agentId, pattern] prevents duplicates.\n\nmodel AgentTool {\n  id        String   @id @default(cuid())\n  agentId   String\n  agent     Agent    @relation(fields: [agentId], references: [id], onDelete: Cascade)\n  pattern   String\n  enabled   Boolean  @default(true)\n  createdAt DateTime @default(now())\n\n  @@unique([agentId, pattern])\n}\n\n// ─── Agent Tokens ─────────────────────────────────────────────────────────────\n// Scoped API tokens for agent authentication. The raw token is returned once at\n// creation; only the SHA-256 hash is stored. Token validation is O(1) via the\n// hash index.\n\nmodel AgentToken {\n  id        String    @id @default(cuid())\n  agentId   String\n  agent     Agent     @relation(fields: [agentId], references: [id], onDelete: Cascade)\n  token     String    @unique // SHA-256 hash of the raw token (hex)\n  label     String?\n  createdAt DateTime  @default(now())\n  revokedAt DateTime?\n}\n\n// ─── Agent Plugins ────────────────────────────────────────────────────────────\n// Claude Code plugins installed per agent. Each row represents one installed\n// plugin package. The unique constraint on [agentId, name] prevents duplicates.\n\nmodel AgentPlugin {\n  id        String   @id @default(cuid())\n  agentId   String\n  agent     Agent    @relation(fields: [agentId], references: [id], onDelete: Cascade)\n  name      String // plugin package name e.g. \"@shipwright/plugin\"\n  version   String? // pinned version; null = latest\n  enabled   Boolean  @default(true)\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([agentId, name])\n}\n\n// ─── Agent Members ────────────────────────────────────────────────────────────\n// Non-admin users granted web UI access to a specific agent.\n// Admins (SHIPWRIGHT_ADMIN_ALLOWED_EMAILS) bypass this table entirely.\n// Members can view and edit only the agents they are listed on.\n\nmodel AgentMember {\n  id        String   @id @default(cuid())\n  agentId   String\n  email     String\n  createdAt DateTime @default(now())\n  agent     Agent    @relation(fields: [agentId], references: [id], onDelete: Cascade)\n\n  @@unique([agentId, email])\n  @@index([email])\n}\n\n// ─── Accounts ─────────────────────────────────────────────────────────────────\n// SSP-1.2: self-serve agent provisioning. An Account owns agents and has\n// members (email-keyed) and pending invites. Phase 1: one account per email\n// (UNIQUE(email) on AccountMember). Enum-like strings are validated in the\n// service layer, matching the rest of this schema.\n\nmodel Account {\n  id                  String    @id @default(cuid())\n  name                String\n  status              String    @default(\"active\") // 'active' | 'suspended' | 'trial_expired'\n  maxAgents           Int       @default(0)\n  plan                String?\n  trialExpiresAt      DateTime?\n  trialExpiryWarnedAt DateTime?\n  createdAt           DateTime  @default(now())\n  updatedAt           DateTime  @updatedAt\n\n  agents  Agent[]\n  members AccountMember[]\n  invites AccountInvite[]\n}\n\nmodel AccountMember {\n  id        String   @id @default(cuid())\n  accountId String\n  email     String   @unique // lowercased; one account per email in Phase 1\n  role      String // 'owner' | 'member'\n  createdAt DateTime @default(now())\n  account   Account  @relation(fields: [accountId], references: [id], onDelete: Cascade)\n\n  @@unique([accountId, email])\n}\n\nmodel AccountInvite {\n  id         String    @id @default(cuid())\n  accountId  String\n  email      String // lowercased\n  invitedBy  String\n  createdAt  DateTime  @default(now())\n  acceptedAt DateTime?\n  account    Account   @relation(fields: [accountId], references: [id], onDelete: Cascade)\n\n  @@unique([accountId, email])\n  @@index([email])\n}\n\n// ─── Agent Cron Runs ──────────────────────────────────────────────────────────\n// Execution history for AgentCronJob firings. Each row records one cron invocation:\n// whether it was skipped (pre-check returned false), the outcome, and any error.\n// agentId is denormalized for efficient agent-level history queries.\n\nmodel AgentCronRun {\n  id              String       @id @default(cuid())\n  cronId          String\n  cron            AgentCronJob @relation(fields: [cronId], references: [id], onDelete: Cascade)\n  agentId         String // denormalized from cron.agentId for efficient queries\n  startedAt       DateTime\n  completedAt     DateTime?\n  skipped         Boolean      @default(false)\n  skipReason      String?\n  outcome         String?\n  error           String?\n  itemType        String? // work item type this run was dispatched against (\"task\" | \"pr\");\n  // null when the tick had no dispatch (skipped tick, empty queue)\n  itemId          String? // work item id this run was dispatched against (e.g. \"WLS-2.2\" or\n  // \"acme/x#123\"); null when the tick had no dispatch\n  commandVariant  String? // which slash-command variant a loop dispatch ran (\"default\" | \"alternate\");\n  // null for runs with no variant attribution\n  sessionId       String? // Claude session id this cron run corresponds to\n  lastHeartbeatAt DateTime? // Most recent debounced progress-push (recordProgress())\n  // timestamp, sourced from the agent's injected Clock. Null\n  // for runs that never reported progress (short/legacy runs).\n  // Lets the admin UI show a \"last checked in\" signal — and a\n  // best-effort in-progress duration — for a run that stalls\n  // or crashes before reaching completedAt. Additive/nullable;\n  // no backfill for existing rows.\n  createdAt       DateTime     @default(now())\n\n  // Secondary/denormalized pointer to the phase cron (a child AgentCronJob)\n  // this run was dispatched by, distinct from cronId which always points at\n  // the top-level cron. Null until phase crons are wired up (LPC-1.2+).\n  // SetNull (not Cascade) on delete: deleting a phase cron shouldn't delete\n  // the parent cron's run history, which cronId's own Cascade already owns.\n  phaseId   String?\n  phaseCron AgentCronJob? @relation(\"PhaseRuns\", fields: [phaseId], references: [id], onDelete: SetNull)\n\n  // ── Run telemetry (prompt-audit metrics; all additive/nullable) ──────────\n  // First-turn context baseline: the usage of the run's first assistant\n  // message. baselineContextTokens = input + cacheCreation + cacheRead of\n  // that turn — the full always-loaded context (system prompt, tool schemas,\n  // CLAUDE.md/rules, skill listing, cron prompt) independent of cache\n  // warmth. Null for resumed sessions (their first turn replays history)\n  // and for runs reported by older agent builds.\n  baselineModel               String?\n  baselineContextTokens       Int?\n  baselineInputTokens         Int?\n  baselineCacheCreationTokens Int?\n  baselineCacheReadTokens     Int?\n  // Distinct usage-bearing assistant turns / distinct tool_use blocks.\n  turns                       Int?\n  toolCalls                   Int?\n  // sha256[:12] over the workspace's always-loaded markdown (CLAUDE.md, its\n  // @imports, no-`paths` rules) + plugin version — groups runs by what the\n  // model was given, so before/after series for a markdown change key on\n  // content rather than merge date. Computed agent-side.\n  contextFingerprint          String?\n  pluginVersion               String?\n  claudeCodeVersion           String?\n\n  modelBreakdown AgentCronRunModelBreakdown[]\n  skillUsage     AgentCronRunSkillUsage[]\n\n  @@index([cronId])\n  @@index([agentId, startedAt])\n  @@index([phaseId])\n  @@index([startedAt])\n  @@index([contextFingerprint])\n}\n\n// ─── Agent Cron Run Skill Usage ──────────────────────────────────────────────\n// Per-skill / per-subagent token attribution for a cron run, derived from the\n// Claude CLI stream by the agent. `kind` is \"skill\" (a plugin\n// skill invoked via the Skill tool), \"agent\" (a subagent type invoked via the\n// Agent tool), or \"root\" (turns before any skill was invoked). Attribution is\n// last-wins: every turn after an invoke is charged to the most recently\n// invoked skill. invokeContextDelta is input + cacheCreation of the first\n// turn after the skill's first invoke — the new context admitted when its\n// body loaded. The unique constraint on [cronRunId, kind, name] allows upsert.\n\nmodel AgentCronRunSkillUsage {\n  id                  String       @id @default(cuid())\n  cronRunId           String\n  kind                String\n  name                String\n  invocations         Int          @default(0)\n  turns               Int          @default(0)\n  inputTokens         Int          @default(0)\n  outputTokens        Int          @default(0)\n  cacheReadTokens     Int          @default(0)\n  cacheCreationTokens Int          @default(0)\n  invokeContextDelta  Int?\n  cronRun             AgentCronRun @relation(fields: [cronRunId], references: [id], onDelete: Cascade)\n\n  @@unique([cronRunId, kind, name])\n  @@index([kind, name])\n}\n\n// ─── Agent Cron Run Model Breakdown ──────────────────────────────────────────\n// Per-model token breakdown for a cron run. Populated when sub-agents use\n// different models in a single run. The unique constraint on [cronRunId, model]\n// allows upsert semantics.\n\nmodel AgentCronRunModelBreakdown {\n  id                  String       @id @default(cuid())\n  cronRunId           String\n  model               String\n  inputTokens         Int          @default(0)\n  outputTokens        Int          @default(0)\n  cacheReadTokens     Int          @default(0)\n  cacheCreationTokens Int          @default(0)\n  costUsd             Float        @default(0)\n  cronRun             AgentCronRun @relation(fields: [cronRunId], references: [id], onDelete: Cascade)\n\n  @@unique([cronRunId, model])\n}\n\n// ─── Agent Chat Token Usage (Daily, per Model) ───────────────────────────────\n// Daily rollup table for Slack/chat session token usage per agent per model.\n// Accumulated atomically via INSERT ... ON CONFLICT ... DO UPDATE (no read-modify-write).\n// Totals and byAgent aggregations are computed by summing across models.\n\nmodel AgentChatTokenUsageDailyByModel {\n  id                  String   @id @default(cuid())\n  agentId             String\n  agent               Agent    @relation(fields: [agentId], references: [id], onDelete: Cascade)\n  date                String // YYYY-MM-DD\n  model               String // e.g. \"claude-sonnet-4-5\"\n  inputTokens         BigInt   @default(0)\n  outputTokens        BigInt   @default(0)\n  cacheReadTokens     BigInt   @default(0)\n  cacheCreationTokens BigInt   @default(0)\n  costUsd             Float    @default(0)\n  createdAt           DateTime @default(now())\n  updatedAt           DateTime @updatedAt\n\n  @@unique([agentId, date, model])\n}\n\n// ─── Agent Ask ──────────────────────────────────────────────────────────────\n// Audit row per agent-to-agent ask (COS-31.1, POST /agents/:id/ask). Written\n// before the chat call and updated after it. The question text is never\n// stored. No relation to Agent on purpose: the audit trail outlives either\n// agent. threadId is null until the chat thread is created (and stays null\n// when that call fails). status: created | pending | replied | failed.\n\nmodel AgentAsk {\n  id          String    @id @default(cuid())\n  fromAgentId String\n  toAgentId   String\n  threadId    String?\n  depth       Int\n  waitMs      Int\n  ttlSeconds  Int\n  status      String\n  callerLabel String\n  createdAt   DateTime  @default(now())\n  repliedAt   DateTime?\n\n  @@index([toAgentId, createdAt])\n  @@index([fromAgentId, createdAt])\n}\n\n// ─── Agent Cron Run Requests ────────────────────────────────────────────────\n// Audit row per POST /agents/{id}/crons/{cronId}/run-now (COS-42.1), written\n// before the 202 returns. status: requested | honoured | expired. Holds no\n// prompt text. honouredRunId links the AgentCronRun the runtime created.\n\nmodel AgentCronRunRequest {\n  id            String   @id @default(cuid())\n  cronId        String\n  agentId       String\n  requestedBy   String\n  requestedAt   DateTime\n  status        String   @default(\"requested\")\n  honouredRunId String?\n  createdAt     DateTime @default(now())\n\n  @@index([cronId, requestedAt])\n  @@index([agentId, requestedAt])\n}\n\n// ─── Cron-run transcripts (COS-43.1) ────────────────────────────────────────\n// One redacted session transcript per cron run, uploaded by the agent runtime\n// (already redacted + tail-truncated to 1 MiB) and served only to admin /\n// platform callers behind SHIPWRIGHT_TRANSCRIPT_API_ENABLED. No FK on runId:\n// the retention sweep (newest 200 per agent) is the only lifecycle. The body\n// is never logged. AgentTranscriptRead is the audit row written before every\n// transcript read.\n\nmodel AgentCronRunTranscript {\n  id         String   @id @default(cuid())\n  runId      String   @unique\n  agentId    String\n  cronId     String\n  sessionId  String?\n  bytes      Int\n  truncated  Boolean\n  redactions Int\n  body       String   @db.Text\n  createdAt  DateTime @default(now())\n\n  @@index([agentId, createdAt])\n}\n\nmodel AgentTranscriptRead {\n  id        String   @id @default(cuid())\n  runId     String\n  agentId   String\n  reader    String\n  scopeKind String\n  at        DateTime @default(now())\n\n  @@index([agentId, at])\n}\n\n// ─── Agent GitHub Installations Snapshot ────────────────────────────────────\n// One row per agent holding the agent's most recently reported GitHub App\n// installations (owner, installation id, state, sanitized lastError). PUT\n// replaces the whole list — a dropped installation disappears. No tokens or\n// other credentials are ever stored here.\n\nmodel AgentGitHubInstallationsSnapshot {\n  id            String   @id @default(cuid())\n  agentId       String   @unique\n  agent         Agent    @relation(fields: [agentId], references: [id], onDelete: Cascade)\n  reportedAt    DateTime\n  installations Json // GitHubInstallation[]\n  repoAccess    Json? // RepoAccessEntry[] — per-repo read/write probe (COS-44.1); null until a flagged runtime reports it\n  createdAt     DateTime @default(now())\n}\n\n// ─── Push Subscription ──────────────────────────────────────────────────────\n// A single browser/device Web Push subscription (RFC 8291) belonging to a\n// user. One user may have many rows (multi-device). Keyed by the unique push\n// `endpoint`; `p256dh` and `auth` are the subscription's public key + auth\n// secret used to encrypt the payload. `detailOptIn` is the USER'S opt-in for\n// how much notification detail they want on a locked screen — the effective\n// level is min(operator ceiling SHIPWRIGHT_ADMIN_PUSH_MAX_DETAIL, detailOptIn).\n// Values: \"generic\" | \"title\" | \"preview\". Never carries an agentId — targeting\n// is by userEmail via ChatThreadWatch, so a subscription is agent-agnostic.\nmodel PushSubscription {\n  id          String   @id @default(cuid())\n  userEmail   String\n  endpoint    String   @unique\n  p256dh      String // base64url of the UA public key\n  auth        String // base64url of the UA auth secret\n  detailOptIn String   @default(\"generic\") // user opt-in: generic | title | preview\n  createdAt   DateTime @default(now())\n  updatedAt   DateTime @updatedAt\n\n  @@index([userEmail])\n}\n\n// ─── Chat Thread Watch ──────────────────────────────────────────────────────\n// Records that a user is \"watching\" a chat thread so the agent's reply can be\n// targeted to exactly the right subscriber(s) without fanning out to every\n// member of the agent. Upserted whenever a user sends a message in a thread.\n// The chat Message model has no author column, and admin is the only web front\n// door that knows both userEmail and threadId at send time — so authorship\n// targeting lives here, not in the chat service.\nmodel ChatThreadWatch {\n  id        String   @id @default(cuid())\n  userEmail String\n  threadId  String\n  agentId   String\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([userEmail, threadId])\n  @@index([threadId])\n}\n\n// ─── User Notification Prefs ─────────────────────────────────────────────────\n// One row per user, holding their notification preferences. `userEmail` is\n// the primary key (one row per user, not per session). `autoFollowSessions`\n// controls whether sessions *visible to* the user (any session in an agent or\n// repo they can see — not only sessions they started) are auto-followed by\n// session-alert-sweeper.ts; `autoFollowSince` records when that behavior was\n// turned on (null if never explicitly set), and the sweeper skips\n// auto-following sessions that were already waiting before that moment. When\n// it is null the sweeper falls back to this row's `createdAt` as the boundary\n// — `autoFollowSessions` defaults to true and a row is created just by loading\n// the settings page, so \"null\" must not mean \"no boundary\", or the first sweep\n// would back-follow and immediately push the whole waiting backlog. Rows that\n// predate the sweeper were stamped once by\n// 20260911000000_backfill_auto_follow_since.\n// `reminderHourLocal` is validated to be an integer in\n// [0, 23] at the service layer (session-follow-service.ts), not here — Prisma\n// has no native CHECK constraint support in this schema style.\nmodel UserNotificationPrefs {\n  userEmail          String    @id\n  autoFollowSessions Boolean   @default(true)\n  reminderHourLocal  Int       @default(9)\n  autoFollowSince    DateTime?\n  createdAt          DateTime  @default(now())\n  updatedAt          DateTime  @updatedAt\n}\n",
+  "inlineSchema": "// Shipwright — Admin Service Schema: coding-owned models (AEP-3.4)\n//\n// Part of the admin Prisma multi-file schema (prisma/schema/). These models\n// belong to the coding feature surface and are isolated here so the coding\n// code can later be extracted. They share the single `db` datasource and\n// generator declared in schema.prisma, so the generated client and the\n// migrations are unchanged by this split.\n//\n// Coding-owned columns that live on the shared Agent model (schema.prisma)\n// and are grouped/commented there: reviewAuthorAllowlist, patchAuthorAllowlist,\n// autoPostReviews, allowSelfReview, minConfidence, maxFindings.\n\n// ─── Agent Work Queue Snapshot ────────────────────────────────────────────────\n// One row per agent, holding the agent's most recently pushed work-queue\n// snapshot (its ranked view of pending tasks/PRs across pipeline phases).\n// POST /agents/:id/work-queue upserts this single row, overwriting any prior\n// snapshot — there is no history, only the latest state.\n\nmodel AgentWorkQueueSnapshot {\n  id         String   @id @default(cuid())\n  agentId    String   @unique\n  agent      Agent    @relation(fields: [agentId], references: [id], onDelete: Cascade)\n  computedAt DateTime\n  items      Json // RankedWorkItem[]\n  createdAt  DateTime @default(now())\n}\n\n// ─── Agent Phase Methodology ──────────────────────────────────────────────────\n// Per-phase subagent-type override. Each row records which subagent type\n// (e.g. a custom Specialty name) should handle one pipeline phase — prd,\n// plan-session, review, patch, deploy, or dev-task — for a given agent,\n// overriding that phase's default methodology. `subagentType` is nullable:\n// a row with a null value (or the absence of a row) means \"use the default\".\n// The `phase` value is constrained to the six-value enum at the service/route\n// layer (Zod), not here — Postgres/Prisma has no native enum-column\n// requirement in this schema style (mirrors AgentTool.pattern / AgentCronJob\n// validation living at the service layer). The unique constraint on\n// [agentId, phase] makes upsert-based writes idempotent (one override row per\n// phase per agent), mirroring AgentTool's [agentId, pattern] and AgentPlugin's\n// [agentId, name].\n\nmodel AgentPhaseMethodology {\n  id           String   @id @default(cuid())\n  agentId      String\n  agent        Agent    @relation(fields: [agentId], references: [id], onDelete: Cascade)\n  phase        String\n  subagentType String?\n  updatedAt    DateTime @updatedAt\n\n  @@unique([agentId, phase])\n}\n\n// ─── Session Follow ───────────────────────────────────────────────────────────\n// Records that a user is \"following\" a planning session (identified by its\n// slug) so they can receive reminders/notifications about it. `muted` lets a\n// user stay following (kept in listByUser) while suppressing alerts, distinct\n// from unfollowing (row deleted entirely). The unique constraint on\n// [userEmail, sessionSlug] makes follow() idempotent via upsert.\nmodel SessionFollow {\n  id          String   @id @default(cuid())\n  userEmail   String\n  sessionSlug String\n  muted       Boolean  @default(false)\n  createdAt   DateTime @default(now())\n  updatedAt   DateTime @updatedAt\n\n  @@unique([userEmail, sessionSlug])\n  @@index([sessionSlug])\n}\n\n// ─── Session Alert State ─────────────────────────────────────────────────────\n// Tracks the last time a user was alerted about a given session, so a\n// reminder job can avoid re-alerting the same user/session pair within a\n// cooldown window. The unique constraint on [userEmail, sessionSlug] allows\n// upsert semantics (one state row per user per session).\nmodel SessionAlertState {\n  id            String    @id @default(cuid())\n  userEmail     String\n  sessionSlug   String\n  lastAlertedAt DateTime?\n  createdAt     DateTime  @default(now())\n  updatedAt     DateTime  @updatedAt\n\n  @@unique([userEmail, sessionSlug])\n}\n\n// Shipwright — Admin Service Schema\n// Owns: Agent, AgentEnv, AgentCronJob, AgentTool, AgentToken, AgentPlugin,\n// plus the coding-owned models in coding.prisma (AgentWorkQueueSnapshot,\n// AgentPhaseMethodology, SessionFollow, SessionAlertState).\n// Agent is a first-class model (standalone, not embedded in a User model).\n//\n// WARNING: This schema uses DATABASE_URL_SHIPWRIGHT_ADMIN — a dedicated database\n// for the admin service. Do NOT point this at a shared database.\n\n// Prisma 7: the `prisma-client` generator (ESM, driver-adapter based) replaces\n// `prisma-client-js`, and the datasource block no longer accepts `url` — the\n// connection string for CLI/Migrate lives in ../../prisma.config.ts, and the\n// runtime client connects through a PrismaPg driver adapter (see\n// admin/src/prisma-client.ts).\ngenerator client {\n  provider = \"prisma-client\"\n  output   = \"../client\"\n}\n\ndatasource db {\n  provider = \"postgresql\"\n}\n\n// ─── Agent ────────────────────────────────────────────────────────────────────\n// A Shipwright agent: an autonomous runner that picks tasks, builds, and ships PRs.\n\nmodel Agent {\n  id                        String    @id @default(cuid())\n  name                      String\n  slackId                   String?   @unique\n  slackBotToken             String? // AES-256-GCM encrypted at the service layer\n  anthropicApiKey           String? // AES-256-GCM encrypted at the service layer\n  selfHosted                Boolean   @default(false)\n  repos                     String[]  @default([])\n  // DBR-2.1→2.4: renamed from authorAllowlist. DBR-2.1 added this column as\n  // a dual-written/dual-read twin of the old authorAllowlist column and\n  // backfilled it; DBR-2.2/2.3 migrated the admin UI and the agent's\n  // runtime read path onto this field exclusively; DBR-2.4 dropped the old\n  // authorAllowlist column now that nothing reads or writes it.\n  // CODING-OWNED (AEP-3.4): reviewAuthorAllowlist and patchAuthorAllowlist are\n  // read by the coding review/patch flows. Kept on Agent (no column move).\n  reviewAuthorAllowlist     String[]  @default([])\n  patchAuthorAllowlist      String[]  @default([])\n  restrictSlackToMembers    Boolean   @default(false)\n  // The agent's Specialty name (manifest key). AGR-6.3 made it required and\n  // dropped the legacy typeName column.\n  specialty                 String    @default(\"specialist\")\n  // SSP-1.2: owning account. Nullable/additive — existing agents keep NULL.\n  accountId                 String?\n  account                   Account?  @relation(fields: [accountId], references: [id], onDelete: Restrict)\n  // ATE-1.1: trial expiry tracking. Both nullable/additive — null means \"no\n  // trial configured\" / \"no warning sent yet\". trialExpiresAt is settable via\n  // PATCH /agents/:id like other nullable scalar fields; trialExpiryWarnedAt\n  // is written internally by ATE-2.1's warning check (not user-editable via\n  // the PATCH route) but is included in GET/PATCH responses.\n  trialExpiresAt            DateTime?\n  trialExpiryWarnedAt       DateTime?\n  // PAI-1.1: owner and Anthropic identity. All nullable/additive — existing\n  // agents keep NULL. anthropicIdentityName is unique across agents.\n  ownerEmail                String?\n  anthropicIdentityName     String?   @unique\n  anthropicServiceAccountId String?\n  anthropicFederationRuleId String?\n  k8sServiceAccountName     String?\n  // COS-48.1: the pod's own Kubernetes ServiceAccount (cluster identity). A\n  // separate column from k8sServiceAccountName, which is the Anthropic-\n  // federation KSA. Only rendered when the pod-SA flag is on.\n  podServiceAccountName     String?\n  // APM-1.1: the 6 agent policy fields (auto_post_reviews, allow_self_review,\n  // min_confidence, max_findings, cleanup_merged_worktrees,\n  // cleanup_after_days). Originally mirrored from the legacy\n  // state/agent-policy.md; the DB is now the only source and each column\n  // carries its documented default.\n  // CODING-OWNED (AEP-3.4): autoPostReviews, allowSelfReview, minConfidence,\n  // maxFindings configure the coding review flow; cleanupMergedWorktrees and\n  // cleanupAfterDays below are runtime-owned.\n  autoPostReviews           Boolean   @default(true)\n  allowSelfReview           Boolean   @default(false)\n  minConfidence             Int       @default(75)\n  maxFindings               Int       @default(5)\n  cleanupMergedWorktrees    Boolean   @default(true)\n  cleanupAfterDays          Int       @default(14)\n  createdAt                 DateTime  @default(now())\n  updatedAt                 DateTime  @updatedAt\n\n  envVars                     AgentEnv[]\n  cronJobs                    AgentCronJob[]\n  tools                       AgentTool[]\n  tokens                      AgentToken[]\n  plugins                     AgentPlugin[]\n  members                     AgentMember[]\n  chatTokenUsage              AgentChatTokenUsageDailyByModel[]\n  workQueueSnapshot           AgentWorkQueueSnapshot?\n  githubInstallationsSnapshot AgentGitHubInstallationsSnapshot?\n  phaseMethodologies          AgentPhaseMethodology[]\n\n  @@index([accountId])\n}\n\n// ─── Agent Env ────────────────────────────────────────────────────────────────\n// Generic key/value env var store for deployed agents.\n// Keys are env var names (e.g. ANTHROPIC_API_KEY). Values are AES-256-GCM encrypted.\n\nmodel AgentEnv {\n  id        String   @id @default(cuid())\n  agentId   String\n  agent     Agent    @relation(fields: [agentId], references: [id], onDelete: Cascade)\n  key       String // env var name\n  value     String // AES-256-GCM encrypted\n  secret    Boolean  @default(false) // when true, GET /agents/:id/envs masks the value as ***\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([agentId, key])\n}\n\n// ─── Agent Cron Jobs ──────────────────────────────────────────────────────────\n// Scheduled prompts per agent.\n// Delivery target is either a Slack channel ID or a Slack user ID (DM).\n// Validation that exactly one of channel/user is set happens in the service layer.\n\nmodel AgentCronJob {\n  id                 String    @id @default(cuid())\n  agentId            String\n  agent              Agent     @relation(fields: [agentId], references: [id], onDelete: Cascade)\n  schedule           String // cron expression e.g. \"0 9 * * 1-5\"\n  prompt             String\n  channel            String? // Slack channel ID (mutually exclusive with user)\n  user               String? // Slack user ID for DMs\n  silent             Boolean   @default(false)\n  enabled            Boolean   @default(true)\n  preCheck           String? // optional pre-check script e.g. \"shipwright:check-docs-freshness.ts\"\n  name               String? // stable key for system crons; null for user-created crons\n  system             Boolean   @default(false)\n  // Set when the trial-expiry lockdown (not the user) disabled this cron, so\n  // restoreLockdownDisabled() can re-enable exactly those crons. Null for\n  // enabled crons and for crons the user disabled manually.\n  lockdownDisabledAt DateTime?\n  // Run-now request (COS-42.1): stamped by POST .../run-now, cleared when the\n  // runtime creates the run (commandVariant \"run-now\"). The runtime honours a\n  // stamp at most once and only while it is fresh (15 minutes).\n  runRequestedAt     DateTime?\n  runRequestedBy     String?\n  createdAt          DateTime  @default(now())\n  updatedAt          DateTime  @updatedAt\n\n  // Self-relation: a parent cron can have child \"phase\" crons (e.g. dev-task/\n  // review/patch/deploy phases of a single logical loop). Null for top-level\n  // crons. Deleting a parent cascades to its phase children.\n  parentCronId String?\n  parentCron   AgentCronJob?  @relation(\"CronPhases\", fields: [parentCronId], references: [id], onDelete: Cascade)\n  phases       AgentCronJob[] @relation(\"CronPhases\")\n\n  runs      AgentCronRun[]\n  phaseRuns AgentCronRun[] @relation(\"PhaseRuns\")\n\n  @@index([parentCronId])\n}\n\n// ─── Agent Tools ──────────────────────────────────────────────────────────────\n// Allowed tool patterns per agent. Each row grants an agent permission to use\n// a specific tool pattern (e.g. \"Read\", \"Bash\", \"Write\"). The unique constraint\n// on [agentId, pattern] prevents duplicates.\n\nmodel AgentTool {\n  id        String   @id @default(cuid())\n  agentId   String\n  agent     Agent    @relation(fields: [agentId], references: [id], onDelete: Cascade)\n  pattern   String\n  enabled   Boolean  @default(true)\n  createdAt DateTime @default(now())\n\n  @@unique([agentId, pattern])\n}\n\n// ─── Agent Tokens ─────────────────────────────────────────────────────────────\n// Scoped API tokens for agent authentication. The raw token is returned once at\n// creation; only the SHA-256 hash is stored. Token validation is O(1) via the\n// hash index.\n\nmodel AgentToken {\n  id        String    @id @default(cuid())\n  agentId   String\n  agent     Agent     @relation(fields: [agentId], references: [id], onDelete: Cascade)\n  token     String    @unique // SHA-256 hash of the raw token (hex)\n  label     String?\n  createdAt DateTime  @default(now())\n  revokedAt DateTime?\n}\n\n// ─── Agent Plugins ────────────────────────────────────────────────────────────\n// Claude Code plugins installed per agent. Each row represents one installed\n// plugin package. The unique constraint on [agentId, name] prevents duplicates.\n\nmodel AgentPlugin {\n  id        String   @id @default(cuid())\n  agentId   String\n  agent     Agent    @relation(fields: [agentId], references: [id], onDelete: Cascade)\n  name      String // plugin package name e.g. \"@shipwright/plugin\"\n  version   String? // pinned version; null = latest\n  enabled   Boolean  @default(true)\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([agentId, name])\n}\n\n// ─── Agent Members ────────────────────────────────────────────────────────────\n// Non-admin users granted web UI access to a specific agent.\n// Admins (SHIPWRIGHT_ADMIN_ALLOWED_EMAILS) bypass this table entirely.\n// Members can view and edit only the agents they are listed on.\n\nmodel AgentMember {\n  id        String   @id @default(cuid())\n  agentId   String\n  email     String\n  createdAt DateTime @default(now())\n  agent     Agent    @relation(fields: [agentId], references: [id], onDelete: Cascade)\n\n  @@unique([agentId, email])\n  @@index([email])\n}\n\n// ─── Accounts ─────────────────────────────────────────────────────────────────\n// SSP-1.2: self-serve agent provisioning. An Account owns agents and has\n// members (email-keyed) and pending invites. Phase 1: one account per email\n// (UNIQUE(email) on AccountMember). Enum-like strings are validated in the\n// service layer, matching the rest of this schema.\n\nmodel Account {\n  id                  String    @id @default(cuid())\n  name                String\n  status              String    @default(\"active\") // 'active' | 'suspended' | 'trial_expired'\n  maxAgents           Int       @default(0)\n  plan                String?\n  trialExpiresAt      DateTime?\n  trialExpiryWarnedAt DateTime?\n  createdAt           DateTime  @default(now())\n  updatedAt           DateTime  @updatedAt\n\n  agents  Agent[]\n  members AccountMember[]\n  invites AccountInvite[]\n}\n\nmodel AccountMember {\n  id        String   @id @default(cuid())\n  accountId String\n  email     String   @unique // lowercased; one account per email in Phase 1\n  role      String // 'owner' | 'member'\n  createdAt DateTime @default(now())\n  account   Account  @relation(fields: [accountId], references: [id], onDelete: Cascade)\n\n  @@unique([accountId, email])\n}\n\nmodel AccountInvite {\n  id         String    @id @default(cuid())\n  accountId  String\n  email      String // lowercased\n  invitedBy  String\n  createdAt  DateTime  @default(now())\n  acceptedAt DateTime?\n  account    Account   @relation(fields: [accountId], references: [id], onDelete: Cascade)\n\n  @@unique([accountId, email])\n  @@index([email])\n}\n\n// ─── Agent Cron Runs ──────────────────────────────────────────────────────────\n// Execution history for AgentCronJob firings. Each row records one cron invocation:\n// whether it was skipped (pre-check returned false), the outcome, and any error.\n// agentId is denormalized for efficient agent-level history queries.\n\nmodel AgentCronRun {\n  id              String       @id @default(cuid())\n  cronId          String\n  cron            AgentCronJob @relation(fields: [cronId], references: [id], onDelete: Cascade)\n  agentId         String // denormalized from cron.agentId for efficient queries\n  startedAt       DateTime\n  completedAt     DateTime?\n  skipped         Boolean      @default(false)\n  skipReason      String?\n  outcome         String?\n  error           String?\n  itemType        String? // work item type this run was dispatched against (\"task\" | \"pr\");\n  // null when the tick had no dispatch (skipped tick, empty queue)\n  itemId          String? // work item id this run was dispatched against (e.g. \"WLS-2.2\" or\n  // \"acme/x#123\"); null when the tick had no dispatch\n  commandVariant  String? // which slash-command variant a loop dispatch ran (\"default\" | \"alternate\");\n  // null for runs with no variant attribution\n  sessionId       String? // Claude session id this cron run corresponds to\n  lastHeartbeatAt DateTime? // Most recent debounced progress-push (recordProgress())\n  // timestamp, sourced from the agent's injected Clock. Null\n  // for runs that never reported progress (short/legacy runs).\n  // Lets the admin UI show a \"last checked in\" signal — and a\n  // best-effort in-progress duration — for a run that stalls\n  // or crashes before reaching completedAt. Additive/nullable;\n  // no backfill for existing rows.\n  createdAt       DateTime     @default(now())\n\n  // Secondary/denormalized pointer to the phase cron (a child AgentCronJob)\n  // this run was dispatched by, distinct from cronId which always points at\n  // the top-level cron. Null until phase crons are wired up (LPC-1.2+).\n  // SetNull (not Cascade) on delete: deleting a phase cron shouldn't delete\n  // the parent cron's run history, which cronId's own Cascade already owns.\n  phaseId   String?\n  phaseCron AgentCronJob? @relation(\"PhaseRuns\", fields: [phaseId], references: [id], onDelete: SetNull)\n\n  // ── Run telemetry (prompt-audit metrics; all additive/nullable) ──────────\n  // First-turn context baseline: the usage of the run's first assistant\n  // message. baselineContextTokens = input + cacheCreation + cacheRead of\n  // that turn — the full always-loaded context (system prompt, tool schemas,\n  // CLAUDE.md/rules, skill listing, cron prompt) independent of cache\n  // warmth. Null for resumed sessions (their first turn replays history)\n  // and for runs reported by older agent builds.\n  baselineModel               String?\n  baselineContextTokens       Int?\n  baselineInputTokens         Int?\n  baselineCacheCreationTokens Int?\n  baselineCacheReadTokens     Int?\n  // Distinct usage-bearing assistant turns / distinct tool_use blocks.\n  turns                       Int?\n  toolCalls                   Int?\n  // sha256[:12] over the workspace's always-loaded markdown (CLAUDE.md, its\n  // @imports, no-`paths` rules) + plugin version — groups runs by what the\n  // model was given, so before/after series for a markdown change key on\n  // content rather than merge date. Computed agent-side.\n  contextFingerprint          String?\n  pluginVersion               String?\n  claudeCodeVersion           String?\n\n  modelBreakdown AgentCronRunModelBreakdown[]\n  skillUsage     AgentCronRunSkillUsage[]\n\n  @@index([cronId])\n  @@index([agentId, startedAt])\n  @@index([phaseId])\n  @@index([startedAt])\n  @@index([contextFingerprint])\n}\n\n// ─── Agent Cron Run Skill Usage ──────────────────────────────────────────────\n// Per-skill / per-subagent token attribution for a cron run, derived from the\n// Claude CLI stream by the agent. `kind` is \"skill\" (a plugin\n// skill invoked via the Skill tool), \"agent\" (a subagent type invoked via the\n// Agent tool), or \"root\" (turns before any skill was invoked). Attribution is\n// last-wins: every turn after an invoke is charged to the most recently\n// invoked skill. invokeContextDelta is input + cacheCreation of the first\n// turn after the skill's first invoke — the new context admitted when its\n// body loaded. The unique constraint on [cronRunId, kind, name] allows upsert.\n\nmodel AgentCronRunSkillUsage {\n  id                  String       @id @default(cuid())\n  cronRunId           String\n  kind                String\n  name                String\n  invocations         Int          @default(0)\n  turns               Int          @default(0)\n  inputTokens         Int          @default(0)\n  outputTokens        Int          @default(0)\n  cacheReadTokens     Int          @default(0)\n  cacheCreationTokens Int          @default(0)\n  invokeContextDelta  Int?\n  cronRun             AgentCronRun @relation(fields: [cronRunId], references: [id], onDelete: Cascade)\n\n  @@unique([cronRunId, kind, name])\n  @@index([kind, name])\n}\n\n// ─── Agent Cron Run Model Breakdown ──────────────────────────────────────────\n// Per-model token breakdown for a cron run. Populated when sub-agents use\n// different models in a single run. The unique constraint on [cronRunId, model]\n// allows upsert semantics.\n\nmodel AgentCronRunModelBreakdown {\n  id                  String       @id @default(cuid())\n  cronRunId           String\n  model               String\n  inputTokens         Int          @default(0)\n  outputTokens        Int          @default(0)\n  cacheReadTokens     Int          @default(0)\n  cacheCreationTokens Int          @default(0)\n  costUsd             Float        @default(0)\n  cronRun             AgentCronRun @relation(fields: [cronRunId], references: [id], onDelete: Cascade)\n\n  @@unique([cronRunId, model])\n}\n\n// ─── Agent Chat Token Usage (Daily, per Model) ───────────────────────────────\n// Daily rollup table for Slack/chat session token usage per agent per model.\n// Accumulated atomically via INSERT ... ON CONFLICT ... DO UPDATE (no read-modify-write).\n// Totals and byAgent aggregations are computed by summing across models.\n\nmodel AgentChatTokenUsageDailyByModel {\n  id                  String   @id @default(cuid())\n  agentId             String\n  agent               Agent    @relation(fields: [agentId], references: [id], onDelete: Cascade)\n  date                String // YYYY-MM-DD\n  model               String // e.g. \"claude-sonnet-4-5\"\n  inputTokens         BigInt   @default(0)\n  outputTokens        BigInt   @default(0)\n  cacheReadTokens     BigInt   @default(0)\n  cacheCreationTokens BigInt   @default(0)\n  costUsd             Float    @default(0)\n  createdAt           DateTime @default(now())\n  updatedAt           DateTime @updatedAt\n\n  @@unique([agentId, date, model])\n}\n\n// ─── Agent Ask ──────────────────────────────────────────────────────────────\n// Audit row per agent-to-agent ask (COS-31.1, POST /agents/:id/ask). Written\n// before the chat call and updated after it. The question text is never\n// stored. No relation to Agent on purpose: the audit trail outlives either\n// agent. threadId is null until the chat thread is created (and stays null\n// when that call fails). status: created | pending | replied | failed.\n\nmodel AgentAsk {\n  id          String    @id @default(cuid())\n  fromAgentId String\n  toAgentId   String\n  threadId    String?\n  depth       Int\n  waitMs      Int\n  ttlSeconds  Int\n  status      String\n  callerLabel String\n  createdAt   DateTime  @default(now())\n  repliedAt   DateTime?\n\n  @@index([toAgentId, createdAt])\n  @@index([fromAgentId, createdAt])\n}\n\n// ─── Agent Cron Run Requests ────────────────────────────────────────────────\n// Audit row per POST /agents/{id}/crons/{cronId}/run-now (COS-42.1), written\n// before the 202 returns. status: requested | honoured | expired. Holds no\n// prompt text. honouredRunId links the AgentCronRun the runtime created.\n\nmodel AgentCronRunRequest {\n  id            String   @id @default(cuid())\n  cronId        String\n  agentId       String\n  requestedBy   String\n  requestedAt   DateTime\n  status        String   @default(\"requested\")\n  honouredRunId String?\n  createdAt     DateTime @default(now())\n\n  @@index([cronId, requestedAt])\n  @@index([agentId, requestedAt])\n}\n\n// ─── Cron-run transcripts (COS-43.1) ────────────────────────────────────────\n// One redacted session transcript per cron run, uploaded by the agent runtime\n// (already redacted + tail-truncated to 1 MiB) and served only to admin /\n// platform callers behind SHIPWRIGHT_TRANSCRIPT_API_ENABLED. No FK on runId:\n// the retention sweep (newest 200 per agent) is the only lifecycle. The body\n// is never logged. AgentTranscriptRead is the audit row written before every\n// transcript read.\n\nmodel AgentCronRunTranscript {\n  id         String   @id @default(cuid())\n  runId      String   @unique\n  agentId    String\n  cronId     String\n  sessionId  String?\n  bytes      Int\n  truncated  Boolean\n  redactions Int\n  body       String   @db.Text\n  createdAt  DateTime @default(now())\n\n  @@index([agentId, createdAt])\n}\n\nmodel AgentTranscriptRead {\n  id        String   @id @default(cuid())\n  runId     String\n  agentId   String\n  reader    String\n  scopeKind String\n  at        DateTime @default(now())\n\n  @@index([agentId, at])\n}\n\n// ─── Agent GitHub Installations Snapshot ────────────────────────────────────\n// One row per agent holding the agent's most recently reported GitHub App\n// installations (owner, installation id, state, sanitized lastError). PUT\n// replaces the whole list — a dropped installation disappears. No tokens or\n// other credentials are ever stored here.\n\nmodel AgentGitHubInstallationsSnapshot {\n  id            String   @id @default(cuid())\n  agentId       String   @unique\n  agent         Agent    @relation(fields: [agentId], references: [id], onDelete: Cascade)\n  reportedAt    DateTime\n  installations Json // GitHubInstallation[]\n  repoAccess    Json? // RepoAccessEntry[] — per-repo read/write probe (COS-44.1); null until a flagged runtime reports it\n  createdAt     DateTime @default(now())\n}\n\n// ─── Push Subscription ──────────────────────────────────────────────────────\n// A single browser/device Web Push subscription (RFC 8291) belonging to a\n// user. One user may have many rows (multi-device). Keyed by the unique push\n// `endpoint`; `p256dh` and `auth` are the subscription's public key + auth\n// secret used to encrypt the payload. `detailOptIn` is the USER'S opt-in for\n// how much notification detail they want on a locked screen — the effective\n// level is min(operator ceiling SHIPWRIGHT_ADMIN_PUSH_MAX_DETAIL, detailOptIn).\n// Values: \"generic\" | \"title\" | \"preview\". Never carries an agentId — targeting\n// is by userEmail via ChatThreadWatch, so a subscription is agent-agnostic.\nmodel PushSubscription {\n  id          String   @id @default(cuid())\n  userEmail   String\n  endpoint    String   @unique\n  p256dh      String // base64url of the UA public key\n  auth        String // base64url of the UA auth secret\n  detailOptIn String   @default(\"generic\") // user opt-in: generic | title | preview\n  createdAt   DateTime @default(now())\n  updatedAt   DateTime @updatedAt\n\n  @@index([userEmail])\n}\n\n// ─── Chat Thread Watch ──────────────────────────────────────────────────────\n// Records that a user is \"watching\" a chat thread so the agent's reply can be\n// targeted to exactly the right subscriber(s) without fanning out to every\n// member of the agent. Upserted whenever a user sends a message in a thread.\n// The chat Message model has no author column, and admin is the only web front\n// door that knows both userEmail and threadId at send time — so authorship\n// targeting lives here, not in the chat service.\nmodel ChatThreadWatch {\n  id        String   @id @default(cuid())\n  userEmail String\n  threadId  String\n  agentId   String\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([userEmail, threadId])\n  @@index([threadId])\n}\n\n// ─── User Notification Prefs ─────────────────────────────────────────────────\n// One row per user, holding their notification preferences. `userEmail` is\n// the primary key (one row per user, not per session). `autoFollowSessions`\n// controls whether sessions *visible to* the user (any session in an agent or\n// repo they can see — not only sessions they started) are auto-followed by\n// session-alert-sweeper.ts; `autoFollowSince` records when that behavior was\n// turned on (null if never explicitly set), and the sweeper skips\n// auto-following sessions that were already waiting before that moment. When\n// it is null the sweeper falls back to this row's `createdAt` as the boundary\n// — `autoFollowSessions` defaults to true and a row is created just by loading\n// the settings page, so \"null\" must not mean \"no boundary\", or the first sweep\n// would back-follow and immediately push the whole waiting backlog. Rows that\n// predate the sweeper were stamped once by\n// 20260911000000_backfill_auto_follow_since.\n// `reminderHourLocal` is validated to be an integer in\n// [0, 23] at the service layer (session-follow-service.ts), not here — Prisma\n// has no native CHECK constraint support in this schema style.\nmodel UserNotificationPrefs {\n  userEmail          String    @id\n  autoFollowSessions Boolean   @default(true)\n  reminderHourLocal  Int       @default(9)\n  autoFollowSince    DateTime?\n  createdAt          DateTime  @default(now())\n  updatedAt          DateTime  @updatedAt\n}\n",
   "runtimeDataModel": {
     "models": {},
     "enums": {},

package/prisma/migrations/20261030100000_set_agent_specialty_default_specialist/migration.sql

@@ -0,0 +1,4 @@
+-- PCD-3.4: change the Agent.specialty column default from 'coding' to 'specialist'.
+-- Default only: no row rewrites, no constraint, no backfill, so every existing
+-- agent keeps its stored value.
+ALTER TABLE "Agent" ALTER COLUMN "specialty" SET DEFAULT 'specialist';

package/prisma/schema/schema.prisma

@@ -44,7 +44,7 @@ model Agent {
   restrictSlackToMembers Boolean  @default(false)
   // The agent's Specialty name (manifest key). AGR-6.3 made it required and
   // dropped the legacy typeName column.
-  specialty              String   @default("coding")
+  specialty              String   @default("specialist")
   // SSP-1.2: owning account. Nullable/additive — existing agents keep NULL.
   accountId              String?
   account                Account? @relation(fields: [accountId], references: [id], onDelete: Restrict)

package/src/account-agent-create.ts

@@ -9,7 +9,7 @@
  */
 
 import type { CallerScope } from "./caller-scope.ts";
-import { resolveDefaultSpecialtyName } from "./specialty-manifest-loader.ts";
+import { resolveDefaultSpecialtyName } from "./specialty-types.ts";
 
 /**
  * The only specialty account users may create: SHIPWRIGHT_SELF_SERVE_AGENT_TYPE

package/src/admin-boot.ts

@@ -69,13 +69,11 @@ import {
   mountRouteContributions,
   resolveAdminExtensions,
   startBackgroundPasses,
+  withExtensionAgentTypes,
 } from "./admin-extension.ts";
 import { createAdminUIApp } from "./admin-ui.ts";
 import { AgentAskService } from "./agent-ask.ts";
 import { parseAgentAskConfig } from "./agent-ask-config.ts";
-import { CronRunNowService } from "./cron-run-now.ts";
-import { parseCronRunNowConfig } from "./cron-run-now-config.ts";
-import { parsePodServiceAccountConfig } from "./pod-service-account-config.ts";
 import { AgentChatTokenService } from "./agent-chat-tokens.ts";
 import { AgentCronJobService } from "./agent-cron-jobs.ts";
 import { AgentCronRunStatsService } from "./agent-cron-run-stats.ts";
@@ -96,6 +94,8 @@ import {
 } from "./caller-scope.ts";
 import { parseChatCredentialConfig } from "./chat-credential-config.ts";
 import { HttpChatServiceProvisioningClient } from "./chat-service-provisioning-client.ts";
+import { CronRunNowService } from "./cron-run-now.ts";
+import { parseCronRunNowConfig } from "./cron-run-now-config.ts";
 import { CronRunTranscriptService } from "./cron-run-transcripts.ts";
 import { isDevAuthAllowed } from "./dev-auth-guard.ts";
 import { HttpGithubAppProvisioningClient } from "./github-app-provisioning-client.ts";
@@ -103,13 +103,14 @@ import { HttpGoogleAuthClient } from "./google-auth-client.ts";
 import { HttpChatClient } from "./http-chat-client.ts";
 import { HttpOktaAuthClient } from "./okta-auth-client.ts";
 import { mountPlatformDoc } from "./platform-doc-route.ts";
+import { parsePodServiceAccountConfig } from "./pod-service-account-config.ts";
 import { createAdminPrismaClient } from "./prisma-client.ts";
 import { isPushEnabled } from "./push-sender.ts";
 import { PushService } from "./push-service.ts";
 import { parseRepoAccessConfig } from "./repo-access-config.ts";
 import { parseSelfServeConfig } from "./self-serve-config.ts";
 import { HttpSlackProvisioningClient } from "./slack-provisioning-client.ts";
-import { SpecialtyRegistry } from "./specialty-manifest-loader.ts";
+import { SpecialtyTypes } from "./specialty-types.ts";
 import { runStartupPolicyReconcile } from "./startup-policy-reconcile.ts";
 import { makeTokenCrypto } from "./token-crypto.ts";
 import { parseTranscriptConfig } from "./transcript-config.ts";
@@ -180,8 +181,12 @@ export async function startAdmin(
     anthropicFederationEnabled,
   );
   // Extension-supplied specialty defaults (crons/tools/plugins), consulted by
-  // the cron reconcile and create-time seeding before the manifest.
+  // the cron reconcile and create-time seeding before the built-in type.
   const specialtyDefaults = collectSpecialtyDefaults(extensions);
+  const specialtyRegistry = withExtensionAgentTypes(
+    new SpecialtyTypes(),
+    extensions,
+  );
   const agentCronJobService = new AgentCronJobService(
     prisma,
     undefined,
@@ -458,7 +463,7 @@ export async function startAdmin(
     agentPluginService,
     agentMemberService,
     callerScopeResolver,
-    specialtyRegistry: new SpecialtyRegistry(),
+    specialtyRegistry,
     specialtyDefaults,
     agentChatTokenService,
     agentGitHubInstallationsService,
@@ -551,6 +556,7 @@ export async function startAdmin(
     agentService,
     provisioner,
     anthropicFederationEnabled,
+    specialtyRegistry,
     specialtyDefaults,
     serviceIntegrations,
     chatService: deletionChatService,

package/src/admin-extension.ts

@@ -28,8 +28,13 @@
  *                            serviceIntegrations it needs no context and is
  *                            collected before the services are built; the cron
  *                            reconcile and create-time seeding consult it
- *                            before the specialty manifest, which remains the
- *                            fallback when no extension returns anything
+ *                            before the built-in specialist type, which remains
+ *                            the fallback when no extension returns anything
+ *   agentTypes()           — agent types this extension offers in the new-agent
+ *                            picker and accepts in POST /admin/agents, for
+ *                            types beyond the built-in specialist. Extension
+ *                            entries win over a built-in of the same name; a type's
+ *                            crons still come from specialtyDefaults(name)
  *
  * openApi() is static (no context): scripts/generate-admin-spec.ts calls it to
  * fold extension routes/schemas into admin/openapi.json without booting.
@@ -62,6 +67,10 @@ import type {
   SpecialtyDefaults,
   SpecialtyDefaultsResolver,
 } from "./specialty-defaults.ts";
+import type {
+  SpecialtyOption,
+  SpecialtyTypeResolver,
+} from "./specialty-types.ts";
 
 /** The platform services an extension may build on. */
 export interface AdminPlatformServices {
@@ -178,8 +187,10 @@ export interface AdminExtension {
   name?: string;
   /** See the header: env-only, resolved before the provisioner is built. */
   serviceIntegrations?(env: NodeJS.ProcessEnv): ServiceIntegration[];
-  /** See the header: undefined means "no opinion" — the manifest applies. */
+  /** See the header: undefined means "no opinion" — the built-in type applies. */
   specialtyDefaults?(specialty: string): SpecialtyDefaults | undefined;
+  /** See the header: additive; merged over the built-in types. */
+  agentTypes?(): SpecialtyOption[];
   services?(ctx: AdminExtensionContext): AdminExtensionServices;
   apiRoutes?(ctx: AdminExtensionContext): AdminRouteContribution[];
   adminUiRoutes?(ctx: AdminExtensionContext): AdminRouteContribution[];
@@ -358,8 +369,9 @@ export function collectServiceIntegrations(
 
 /**
  * Builds the resolver the cron reconcile and create-time seeding consult
- * before the manifest. The first extension returning defaults wins; with none
- * registered (or none answering) it returns undefined and the manifest applies.
+ * before the built-in type. The first extension returning defaults wins; with none
+ * registered (or none answering) it returns undefined and the built-in type's
+ * tools floor applies.
  */
 export function collectSpecialtyDefaults(
   extensions: readonly AdminExtension[],
@@ -373,6 +385,40 @@ export function collectSpecialtyDefaults(
   };
 }
 
+/**
+ * Merges every extension's agentTypes() over the built-in `base`
+ * list. Order is base first, then new extension names; on a name collision the
+ * extension's entry replaces the base entry in place.
+ */
+export function mergeAgentTypes(
+  base: readonly SpecialtyOption[],
+  extensions: readonly AdminExtension[],
+): SpecialtyOption[] {
+  const byName = new Map(base.map((type) => [type.name, type]));
+  for (const ext of extensions) {
+    for (const type of ext.agentTypes?.() ?? []) byName.set(type.name, type);
+  }
+  return [...byName.values()];
+}
+
+/**
+ * Wraps the registry so the new-agent picker lists extension types and
+ * POST /admin/agents accepts them. With no extension declaring agentTypes()
+ * the wrapped registry behaves exactly like `registry`.
+ */
+export function withExtensionAgentTypes(
+  registry: SpecialtyTypeResolver,
+  extensions: readonly AdminExtension[],
+): SpecialtyTypeResolver {
+  return {
+    getType: (specialty) => registry.getType(specialty),
+    tryGetType: (specialty) => registry.tryGetType(specialty),
+    listTypes: () => mergeAgentTypes(registry.listTypes(), extensions),
+    hasExtensionType: (specialty) =>
+      mergeAgentTypes([], extensions).some((type) => type.name === specialty),
+  };
+}
+
 /** Mounts each contribution on root, in order. */
 export function mountRouteContributions(
   root: AnyHono,

package/src/admin-extension.unit.test.ts

@@ -10,11 +10,13 @@ import {
   collectOpenApiContributions,
   collectServiceIntegrations,
   collectSpecialtyDefaults,
+  mergeAgentTypes,
   mountRouteContributions,
   renderAgentDetailCardSlots,
   renderAgentDetailCards,
   resolveAdminExtensions,
   startBackgroundPasses,
+  withExtensionAgentTypes,
 } from "./admin-extension.ts";
 
 // The seam only hands the context through to hooks, so an opaque stand-in is
@@ -549,3 +551,62 @@ describe("collectSpecialtyDefaults", () => {
     expect(resolve("b")).toEqual({ tools: ["B"] });
   });
 });
+
+describe("mergeAgentTypes", () => {
+  const base = [
+    { name: "specialist", displayName: "Specialist" },
+    { name: "coding", displayName: "Manifest Coding" },
+  ];
+
+  it("returns the base list unchanged with no or hookless extensions", () => {
+    expect(mergeAgentTypes(base, [])).toEqual(base);
+    expect(mergeAgentTypes(base, [{ name: "bare" }])).toEqual(base);
+    expect(mergeAgentTypes([], [])).toEqual([]);
+  });
+
+  it("appends extension types, across multiple extensions", () => {
+    const merged = mergeAgentTypes(base, [
+      { agentTypes: () => [{ name: "a", displayName: "A" }] },
+      { agentTypes: () => [{ name: "b", displayName: "B" }] },
+    ]);
+    expect(merged.map((t) => t.name)).toEqual([
+      "specialist",
+      "coding",
+      "a",
+      "b",
+    ]);
+  });
+
+  it("lets the extension win on a name collision, keeping position", () => {
+    const merged = mergeAgentTypes(base, [
+      { agentTypes: () => [{ name: "coding", displayName: "Coding Agent" }] },
+      { agentTypes: () => [{ name: "coding", displayName: "Later Wins" }] },
+    ]);
+    expect(merged).toEqual([
+      { name: "specialist", displayName: "Specialist" },
+      { name: "coding", displayName: "Later Wins" },
+    ]);
+  });
+});
+
+describe("withExtensionAgentTypes", () => {
+  const registry = {
+    getType: () => {
+      throw new Error("unused");
+    },
+    tryGetType: () => undefined,
+    listTypes: () => [{ name: "specialist", displayName: "Specialist" }],
+  };
+
+  it("merges listTypes and reports extension-only types", () => {
+    const wrapped = withExtensionAgentTypes(registry, [
+      { agentTypes: () => [{ name: "coding", displayName: "Coding Agent" }] },
+    ]);
+    expect(wrapped.listTypes().map((t) => t.name)).toEqual([
+      "specialist",
+      "coding",
+    ]);
+    expect(wrapped.hasExtensionType?.("coding")).toBe(true);
+    expect(wrapped.hasExtensionType?.("specialist")).toBe(false);
+  });
+});

package/src/admin-local-agent.smoke.test.ts

@@ -20,15 +20,18 @@ import type {
   AdminUISlackClient,
 } from "./admin-ui.ts";
 import { createAdminUIApp } from "./admin-ui.ts";
-import { SpecialtyRegistry } from "./specialty-manifest-loader.ts";
 import type { GoogleAuthClient } from "./google-auth-client.ts";
+import {
+  resolveDefaultSpecialtyName,
+  SpecialtyTypes,
+} from "./specialty-types.ts";
 
 // The configured default specialty (the fixture under the platform test run,
 // "coding" in the monorepo).
-const TYPE_META = new SpecialtyRegistry().getManifest(
-  process.env.SHIPWRIGHT_DEFAULT_AGENT_TYPE || "coding",
-).metadata;
-const TYPE = TYPE_META.name;
+const TYPE = resolveDefaultSpecialtyName();
+const TYPE_META = new SpecialtyTypes()
+  .listTypes()
+  .find((t) => t.name === TYPE) as { name: string; displayName: string };
 
 // ─── Constants ────────────────────────────────────────────────────────────────