@app-vitals/agent-admin 0.2.1 → 0.4.0

package/prisma/client/models.ts

@@ -27,6 +27,9 @@ export type * from './models/AgentCronRunSkillUsage.ts'
 export type * from './models/AgentCronRunModelBreakdown.ts'
 export type * from './models/AgentChatTokenUsageDailyByModel.ts'
 export type * from './models/AgentAsk.ts'
+export type * from './models/AgentCronRunRequest.ts'
+export type * from './models/AgentCronRunTranscript.ts'
+export type * from './models/AgentTranscriptRead.ts'
 export type * from './models/AgentGitHubInstallationsSnapshot.ts'
 export type * from './models/PushSubscription.ts'
 export type * from './models/ChatThreadWatch.ts'

package/prisma/migrations/20261027000000_add_cron_run_transcripts/migration.sql

@@ -0,0 +1,37 @@
+-- COS-43.1: redacted cron-run transcripts + per-read audit rows (additive only).
+-- CreateTable
+CREATE TABLE "AgentCronRunTranscript" (
+    "id" TEXT NOT NULL,
+    "runId" TEXT NOT NULL,
+    "agentId" TEXT NOT NULL,
+    "cronId" TEXT NOT NULL,
+    "sessionId" TEXT,
+    "bytes" INTEGER NOT NULL,
+    "truncated" BOOLEAN NOT NULL,
+    "redactions" INTEGER NOT NULL,
+    "body" TEXT NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "AgentCronRunTranscript_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "AgentTranscriptRead" (
+    "id" TEXT NOT NULL,
+    "runId" TEXT NOT NULL,
+    "agentId" TEXT NOT NULL,
+    "reader" TEXT NOT NULL,
+    "scopeKind" TEXT NOT NULL,
+    "at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "AgentTranscriptRead_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "AgentCronRunTranscript_runId_key" ON "AgentCronRunTranscript"("runId");
+
+-- CreateIndex
+CREATE INDEX "AgentCronRunTranscript_agentId_createdAt_idx" ON "AgentCronRunTranscript"("agentId", "createdAt");
+
+-- CreateIndex
+CREATE INDEX "AgentTranscriptRead_agentId_at_idx" ON "AgentTranscriptRead"("agentId", "at");

package/prisma/migrations/20261028000000_add_cron_run_now/migration.sql

@@ -0,0 +1,24 @@
+-- COS-42.1: cron run-now request columns and audit table (additive only).
+-- AlterTable
+ALTER TABLE "AgentCronJob" ADD COLUMN "runRequestedAt" TIMESTAMP(3),
+ADD COLUMN "runRequestedBy" TEXT;
+
+-- CreateTable
+CREATE TABLE "AgentCronRunRequest" (
+    "id" TEXT NOT NULL,
+    "cronId" TEXT NOT NULL,
+    "agentId" TEXT NOT NULL,
+    "requestedBy" TEXT NOT NULL,
+    "requestedAt" TIMESTAMP(3) NOT NULL,
+    "status" TEXT NOT NULL DEFAULT 'requested',
+    "honouredRunId" TEXT,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "AgentCronRunRequest_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE INDEX "AgentCronRunRequest_cronId_requestedAt_idx" ON "AgentCronRunRequest"("cronId", "requestedAt");
+
+-- CreateIndex
+CREATE INDEX "AgentCronRunRequest_agentId_requestedAt_idx" ON "AgentCronRunRequest"("agentId", "requestedAt");

package/prisma/schema/schema.prisma

@@ -134,6 +134,11 @@ model AgentCronJob {
   // restoreLockdownDisabled() can re-enable exactly those crons. Null for
   // enabled crons and for crons the user disabled manually.
   lockdownDisabledAt DateTime?
+  // Run-now request (COS-42.1): stamped by POST .../run-now, cleared when the
+  // runtime creates the run (commandVariant "run-now"). The runtime honours a
+  // stamp at most once and only while it is fresh (15 minutes).
+  runRequestedAt DateTime?
+  runRequestedBy String?
   createdAt DateTime @default(now())
   updatedAt DateTime @updatedAt
 
@@ -426,6 +431,59 @@ model AgentAsk {
   @@index([fromAgentId, createdAt])
 }
 
+// ─── Agent Cron Run Requests ────────────────────────────────────────────────
+// Audit row per POST /agents/{id}/crons/{cronId}/run-now (COS-42.1), written
+// before the 202 returns. status: requested | honoured | expired. Holds no
+// prompt text. honouredRunId links the AgentCronRun the runtime created.
+
+model AgentCronRunRequest {
+  id             String   @id @default(cuid())
+  cronId         String
+  agentId        String
+  requestedBy    String
+  requestedAt    DateTime
+  status         String   @default("requested")
+  honouredRunId  String?
+  createdAt      DateTime @default(now())
+
+  @@index([cronId, requestedAt])
+  @@index([agentId, requestedAt])
+}
+
+// ─── Cron-run transcripts (COS-43.1) ────────────────────────────────────────
+// One redacted session transcript per cron run, uploaded by the agent runtime
+// (already redacted + tail-truncated to 1 MiB) and served only to admin /
+// platform callers behind SHIPWRIGHT_TRANSCRIPT_API_ENABLED. No FK on runId:
+// the retention sweep (newest 200 per agent) is the only lifecycle. The body
+// is never logged. AgentTranscriptRead is the audit row written before every
+// transcript read.
+
+model AgentCronRunTranscript {
+  id         String   @id @default(cuid())
+  runId      String   @unique
+  agentId    String
+  cronId     String
+  sessionId  String?
+  bytes      Int
+  truncated  Boolean
+  redactions Int
+  body       String   @db.Text
+  createdAt  DateTime @default(now())
+
+  @@index([agentId, createdAt])
+}
+
+model AgentTranscriptRead {
+  id        String   @id @default(cuid())
+  runId     String
+  agentId   String
+  reader    String
+  scopeKind String
+  at        DateTime @default(now())
+
+  @@index([agentId, at])
+}
+
 // ─── Agent GitHub Installations Snapshot ────────────────────────────────────
 // One row per agent holding the agent's most recently reported GitHub App
 // installations (owner, installation id, state, sanitized lastError). PUT

package/src/admin-boot.ts

@@ -72,6 +72,8 @@ import {
 import { createAdminUIApp } from "./admin-ui.ts";
 import { AgentAskService } from "./agent-ask.ts";
 import { parseAgentAskConfig } from "./agent-ask-config.ts";
+import { CronRunNowService } from "./cron-run-now.ts";
+import { parseCronRunNowConfig } from "./cron-run-now-config.ts";
 import { AgentChatTokenService } from "./agent-chat-tokens.ts";
 import { AgentCronJobService } from "./agent-cron-jobs.ts";
 import { AgentCronRunStatsService } from "./agent-cron-run-stats.ts";
@@ -92,6 +94,7 @@ import {
 } from "./caller-scope.ts";
 import { parseChatCredentialConfig } from "./chat-credential-config.ts";
 import { HttpChatServiceProvisioningClient } from "./chat-service-provisioning-client.ts";
+import { CronRunTranscriptService } from "./cron-run-transcripts.ts";
 import { isDevAuthAllowed } from "./dev-auth-guard.ts";
 import { HttpGithubAppProvisioningClient } from "./github-app-provisioning-client.ts";
 import { HttpGoogleAuthClient } from "./google-auth-client.ts";
@@ -106,6 +109,7 @@ import { HttpSlackProvisioningClient } from "./slack-provisioning-client.ts";
 import { SpecialtyRegistry } from "./specialty-manifest-loader.ts";
 import { runStartupPolicyReconcile } from "./startup-policy-reconcile.ts";
 import { makeTokenCrypto } from "./token-crypto.ts";
+import { parseTranscriptConfig } from "./transcript-config.ts";
 import {
   resolveTrialExpirySweepIntervalMs,
   TrialExpirySweeper,
@@ -290,6 +294,11 @@ export async function startAdmin(
 
   // Agent-to-agent ask (COS-31.1). Throws at boot on a malformed allowlist.
   const agentAskConfig = parseAgentAskConfig(process.env);
+  // Cron run-now (COS-42.1).
+  const cronRunNowConfig = parseCronRunNowConfig(process.env);
+
+  // Cron-run transcript API (COS-43.1): flag off by default.
+  const transcriptConfig = parseTranscriptConfig(process.env);
 
   // Web Push (CFB-4.2). Enabled ONLY when public + private + subject are all
   // set — a partial config must not half-enable the feature. When disabled,
@@ -415,6 +424,7 @@ export async function startAdmin(
     adminApiKeys,
     agentTokenService,
     anthropicFederationEnabled,
+    transcriptUploadEnabled: transcriptConfig.enabled,
   });
 
   root.route("/agents", runtimeApp);
@@ -456,7 +466,15 @@ export async function startAdmin(
       config: agentAskConfig,
       store: new AgentAskService(prisma),
     },
+    cronRunNow: {
+      config: cronRunNowConfig,
+      store: new CronRunNowService(prisma),
+    },
     ...(chatClient ? { chatClient } : {}),
+    transcripts: {
+      config: transcriptConfig,
+      store: new CronRunTranscriptService(prisma),
+    },
     ...resolvedExtensions.apiDeps,
   });
   root.route("/", adminApiApp);

package/src/admin-ui.fixtures.ts

@@ -51,6 +51,8 @@ export const MOCK_CRON = {
   system: false,
   parentCronId: null,
   lockdownDisabledAt: null,
+  runRequestedAt: null,
+  runRequestedBy: null,
   silent: false,
   preCheck: null,
   createdAt: new Date("2024-01-01"),

package/src/admin-ui.smoke.test.ts

@@ -1060,6 +1060,8 @@ describe("admin UI — authenticated pages", () => {
       system: true,
       parentCronId: null,
       lockdownDisabledAt: null,
+      runRequestedAt: null,
+      runRequestedBy: null,
       lastRun: null,
       runCountToday: 0,
     };

package/src/agent-cron-jobs.unit.test.ts

@@ -116,6 +116,8 @@ function makeFakePrisma(opts: {
       system: true,
       parentCronId: null,
       lockdownDisabledAt: null,
+      runRequestedAt: null,
+      runRequestedBy: null,
       createdAt: new Date("2024-01-01"),
       updatedAt: new Date("2024-01-01"),
       ...seed,
@@ -156,6 +158,8 @@ function makeFakePrisma(opts: {
         system: true,
         parentCronId: null,
         lockdownDisabledAt: null,
+        runRequestedAt: null,
+        runRequestedBy: null,
         createdAt: new Date("2024-01-01"),
         updatedAt: new Date("2024-01-01"),
         ...data,

package/src/agent-cron-run-stats.smoke.test.ts

@@ -276,6 +276,8 @@ function makeMockDeps(): AdminDeps {
         system: false,
         parentCronId: null,
         lockdownDisabledAt: null,
+        runRequestedAt: null,
+        runRequestedBy: null,
         createdAt: new Date("2024-01-01"),
         updatedAt: new Date("2024-01-01"),
       }),
@@ -293,6 +295,8 @@ function makeMockDeps(): AdminDeps {
         system: false,
         parentCronId: null,
         lockdownDisabledAt: null,
+        runRequestedAt: null,
+        runRequestedBy: null,
         createdAt: new Date("2024-01-01"),
         updatedAt: new Date("2024-01-01"),
       }),
@@ -311,6 +315,8 @@ function makeMockDeps(): AdminDeps {
         system: false,
         parentCronId: null,
         lockdownDisabledAt: null,
+        runRequestedAt: null,
+        runRequestedBy: null,
         createdAt: new Date("2024-01-01"),
         updatedAt: new Date("2024-01-01"),
       }),
@@ -328,6 +334,8 @@ function makeMockDeps(): AdminDeps {
         system: false,
         parentCronId: null,
         lockdownDisabledAt: null,
+        runRequestedAt: null,
+        runRequestedBy: null,
         createdAt: new Date("2024-01-01"),
         updatedAt: new Date("2024-01-01"),
       }),
@@ -345,6 +353,8 @@ function makeMockDeps(): AdminDeps {
         system: false,
         parentCronId: null,
         lockdownDisabledAt: null,
+        runRequestedAt: null,
+        runRequestedBy: null,
         createdAt: new Date("2024-01-01"),
         updatedAt: new Date("2024-01-01"),
       }),

package/src/agent-cron-runs.integration.test.ts

@@ -1489,3 +1489,96 @@ describeOrSkip("AgentCronRunService — run telemetry (integration)", () => {
     ).toBe(0);
   });
 });
+
+describeOrSkip(
+  "AgentCronRunService run-now clear-on-create (integration)",
+  () => {
+    let prisma: PrismaClient;
+    let agentId: string;
+    let cronId: string;
+    let runService: AgentCronRunService;
+
+    async function stamp(requestedAt: Date) {
+      await prisma.agentCronJob.update({
+        where: { id: cronId },
+        data: { runRequestedAt: requestedAt, runRequestedBy: "tester" },
+      });
+      return prisma.agentCronRunRequest.create({
+        data: {
+          cronId,
+          agentId,
+          requestedBy: "tester",
+          requestedAt,
+          status: "requested",
+        },
+      });
+    }
+
+    beforeEach(async () => {
+      prisma = makePrisma();
+      await prisma.agentCronRunRequest.deleteMany();
+      await prisma.agentCronRun.deleteMany();
+      await prisma.agentCronJob.deleteMany();
+      agentId = await createAgent(prisma, "Run-now Agent");
+      cronId = await createCron(new AgentCronJobService(prisma), agentId);
+      runService = new AgentCronRunService(prisma);
+    });
+
+    afterEach(async () => {
+      await prisma.agentCronRunRequest.deleteMany();
+      await prisma.agentCronRun.deleteMany();
+      await prisma.agentCronJob.deleteMany();
+      await prisma.agent.deleteMany({ where: { id: agentId } });
+      await prisma.$disconnect();
+    });
+
+    it("commandVariant run-now clears the stamp and honours the newest request", async () => {
+      await stamp(new Date("2026-10-26T11:00:00Z"));
+      const newest = await stamp(new Date("2026-10-26T11:30:00Z"));
+
+      const run = await runService.create(cronId, agentId, {
+        startedAt: new Date("2026-10-26T11:31:00Z"),
+        commandVariant: "run-now",
+      });
+
+      const job = await prisma.agentCronJob.findUniqueOrThrow({
+        where: { id: cronId },
+      });
+      expect(job.runRequestedAt).toBeNull();
+      expect(job.runRequestedBy).toBeNull();
+      const honoured = await prisma.agentCronRunRequest.findUniqueOrThrow({
+        where: { id: newest.id },
+      });
+      expect(honoured.status).toBe("honoured");
+      expect(honoured.honouredRunId).toBe(run.id);
+      const stillRequested = await prisma.agentCronRunRequest.count({
+        where: { cronId, status: "requested" },
+      });
+      expect(stillRequested).toBe(0);
+      const superseded = await prisma.agentCronRunRequest.count({
+        where: { cronId, status: "expired" },
+      });
+      expect(superseded).toBe(1);
+    });
+
+    it("any other variant leaves the stamp and the request alone", async () => {
+      const req = await stamp(new Date("2026-10-26T11:30:00Z"));
+      await runService.create(cronId, agentId, {
+        startedAt: new Date("2026-10-26T11:31:00Z"),
+        commandVariant: "default",
+      });
+      await runService.create(cronId, agentId, {
+        startedAt: new Date("2026-10-26T11:32:00Z"),
+      });
+      const job = await prisma.agentCronJob.findUniqueOrThrow({
+        where: { id: cronId },
+      });
+      expect(job.runRequestedAt).not.toBeNull();
+      const row = await prisma.agentCronRunRequest.findUniqueOrThrow({
+        where: { id: req.id },
+      });
+      expect(row.status).toBe("requested");
+      expect(row.honouredRunId).toBeNull();
+    });
+  },
+);

package/src/agent-cron-runs.ts

@@ -15,6 +15,9 @@ import { NotFoundError } from "./errors.ts";
 
 export type { AgentCronRun };
 
+/** commandVariant a runtime reports when it honours a run-now request. */
+const RUN_NOW_VARIANT = "run-now";
+
 /** An AgentCronRun with its per-model token/cost breakdown rows attached. */
 type AgentCronRunWithModelBreakdown = Prisma.AgentCronRunGetPayload<{
   include: { modelBreakdown: true };
@@ -193,21 +196,50 @@ export class AgentCronRunService {
       throw new NotFoundError(`cron job ${cronId} not found`);
     }
 
-    return this.prisma.agentCronRun.create({
-      data: {
-        cronId,
-        agentId,
-        startedAt: input.startedAt,
-        completedAt: input.completedAt ?? null,
-        skipped: input.skipped ?? false,
-        skipReason: input.skipReason ?? null,
-        outcome: input.outcome ?? null,
-        error: input.error ?? null,
-        phaseId: input.phaseId ?? null,
-        itemType: input.itemType ?? null,
-        itemId: input.itemId ?? null,
-        commandVariant: input.commandVariant ?? null,
-      },
+    const data = {
+      cronId,
+      agentId,
+      startedAt: input.startedAt,
+      completedAt: input.completedAt ?? null,
+      skipped: input.skipped ?? false,
+      skipReason: input.skipReason ?? null,
+      outcome: input.outcome ?? null,
+      error: input.error ?? null,
+      phaseId: input.phaseId ?? null,
+      itemType: input.itemType ?? null,
+      itemId: input.itemId ?? null,
+      commandVariant: input.commandVariant ?? null,
+    };
+
+    if (input.commandVariant !== RUN_NOW_VARIANT) {
+      return this.prisma.agentCronRun.create({ data });
+    }
+
+    // Run-now (COS-42.1): creating the run honours the pending request, so
+    // clear the stamp and link the newest requested audit row to this run.
+    return this.prisma.$transaction(async (tx) => {
+      const run = await tx.agentCronRun.create({ data });
+      await tx.agentCronJob.update({
+        where: { id: cronId },
+        data: { runRequestedAt: null, runRequestedBy: null },
+      });
+      const request = await tx.agentCronRunRequest.findFirst({
+        where: { cronId, status: "requested" },
+        orderBy: [{ requestedAt: "desc" }, { createdAt: "desc" }],
+      });
+      if (request) {
+        await tx.agentCronRunRequest.update({
+          where: { id: request.id },
+          data: { status: "honoured", honouredRunId: run.id },
+        });
+        // Older still-pending requests were superseded by this one and can
+        // never be honoured: record them as expired rather than pending.
+        await tx.agentCronRunRequest.updateMany({
+          where: { cronId, status: "requested", id: { not: request.id } },
+          data: { status: "expired" },
+        });
+      }
+      return run;
     });
   }
 

package/src/agents-api.smoke.test.ts

@@ -183,6 +183,8 @@ const MOCK_CRON = {
   system: false,
   parentCronId: null as string | null,
   lockdownDisabledAt: null,
+  runRequestedAt: null,
+  runRequestedBy: null,
   createdAt: new Date("2024-01-01"),
   updatedAt: new Date("2024-01-01"),
 };
@@ -380,6 +382,8 @@ function makeMockDeps(): AdminDeps {
         system: false,
         parentCronId: null,
         lockdownDisabledAt: null,
+        runRequestedAt: null,
+        runRequestedBy: null,
         createdAt: new Date("2024-01-01"),
         updatedAt: new Date("2024-01-01"),
       }),
@@ -397,6 +401,8 @@ function makeMockDeps(): AdminDeps {
         system: false,
         parentCronId: null,
         lockdownDisabledAt: null,
+        runRequestedAt: null,
+        runRequestedBy: null,
         createdAt: new Date("2024-01-01"),
         updatedAt: new Date("2024-01-01"),
       }),
@@ -415,6 +421,8 @@ function makeMockDeps(): AdminDeps {
         system: false,
         parentCronId: null,
         lockdownDisabledAt: null,
+        runRequestedAt: null,
+        runRequestedBy: null,
         createdAt: new Date("2024-01-01"),
         updatedAt: new Date("2024-01-01"),
       }),
@@ -432,6 +440,8 @@ function makeMockDeps(): AdminDeps {
         system: false,
         parentCronId: null,
         lockdownDisabledAt: null,
+        runRequestedAt: null,
+        runRequestedBy: null,
         createdAt: new Date("2024-01-01"),
         updatedAt: new Date("2024-01-01"),
       }),
@@ -449,6 +459,8 @@ function makeMockDeps(): AdminDeps {
         system: false,
         parentCronId: null,
         lockdownDisabledAt: null,
+        runRequestedAt: null,
+        runRequestedBy: null,
         createdAt: new Date("2024-01-01"),
         updatedAt: new Date("2024-01-01"),
       }),
@@ -4631,6 +4643,8 @@ describe("admin API — cron runs", () => {
             system: false,
             parentCronId: null,
             lockdownDisabledAt: null,
+            runRequestedAt: null,
+            runRequestedBy: null,
             createdAt: new Date("2024-01-01"),
             updatedAt: new Date("2024-01-01"),
             lastRun: null,
@@ -4649,6 +4663,8 @@ describe("admin API — cron runs", () => {
             name: "shipwright-dev-task",
             system: true,
             lockdownDisabledAt: null,
+            runRequestedAt: null,
+            runRequestedBy: null,
             parentCronId: CRON_ID,
             createdAt: new Date("2024-01-01"),
             updatedAt: new Date("2024-01-01"),
@@ -4936,6 +4952,8 @@ function makeMockDepsWithRunSummary(): AdminDeps {
           system: false,
           parentCronId: null,
           lockdownDisabledAt: null,
+          runRequestedAt: null,
+          runRequestedBy: null,
           createdAt: new Date("2024-01-01"),
           updatedAt: new Date("2024-01-01"),
           lastRun: {

package/src/agents-api.ts

@@ -46,6 +46,10 @@ import {
   registerAgentAskRoutes,
 } from "./agent-ask.ts";
 import type { AgentChatTokenService } from "./agent-chat-tokens.ts";
+import {
+  type CronRunNowDeps,
+  registerCronRunNowRoutes,
+} from "./cron-run-now.ts";
 import type {
   AgentCronJobService,
   AgentCronJobWithRunSummary,
@@ -83,6 +87,10 @@ import {
   memberOnlyCallerScopeResolver,
 } from "./caller-scope.ts";
 import type { ChatServiceProvisioningClient } from "./chat-service-provisioning-client.ts";
+import {
+  type CronRunTranscriptDeps,
+  registerCronRunTranscriptRoutes,
+} from "./cron-run-transcripts.ts";
 import {
   ApiError,
   BadRequestError,
@@ -285,12 +293,23 @@ export interface AdminDeps {
    * 404. See agent-ask.ts.
    */
   agentAsk?: AgentAskDeps;
+  /**
+   * Cron run-now (COS-42.1): flag config, the stamp+audit store and an
+   * injectable clock. Absent or flag off -> the run-now route 404s. See
+   * cron-run-now.ts.
+   */
+  cronRunNow?: CronRunNowDeps;
   /**
    * Chat-service thread/message client behind POST /agents/:id/ask
    * (admin-boot wires the HttpChatClient the chat UI uses). Absent → the ask
    * route 503s, even with the flag on.
    */
   chatClient?: AskChatClient;
+  /**
+   * Cron-run transcripts (COS-43.1): flag config + store. Absent or flag off
+   * -> the transcript routes 404. See cron-run-transcripts.ts.
+   */
+  transcripts?: CronRunTranscriptDeps;
 }
 
 export type { AdminApiKey };
@@ -2335,6 +2354,14 @@ export function createAdminApp(deps: AdminDeps): OpenAPIHono<AdminAuthEnv> {
     agentService,
   });
 
+  // ─── Cron run-now (COS-42.1) ──────────────────────────────────────────────
+
+  registerCronRunNowRoutes(app, { cronRunNow: deps.cronRunNow });
+
+  // ─── Cron-run transcripts (COS-43.1) ──────────────────────────────────────
+
+  registerCronRunTranscriptRoutes(app, { transcripts: deps.transcripts });
+
   // ─── Plugins ───────────────────────────────────────────────────────────────
 
   // POST /agents/:id/plugins — add a plugin
@@ -2516,10 +2543,12 @@ export function createAdminApp(deps: AdminDeps): OpenAPIHono<AdminAuthEnv> {
 function serializeCron(cron: {
   createdAt: Date;
   updatedAt: Date;
+  runRequestedAt?: Date | null;
   [k: string]: unknown;
 }): z.infer<typeof AgentCronJobSchema> {
   return {
     ...cron,
+    runRequestedAt: cron.runRequestedAt?.toISOString() ?? null,
     createdAt: cron.createdAt.toISOString(),
     updatedAt: cron.updatedAt.toISOString(),
   } as z.infer<typeof AgentCronJobSchema>;
@@ -2549,6 +2578,7 @@ function serializeCronWithSummary(job: AgentCronJobWithRunSummary): z.infer<
     name: job.name,
     system: job.system,
     parentCronId: job.parentCronId,
+    runRequestedAt: job.runRequestedAt?.toISOString() ?? null,
     createdAt: job.createdAt.toISOString(),
     updatedAt: job.updatedAt.toISOString(),
     lastRun: job.lastRun

package/src/api-auth.ts

@@ -106,6 +106,7 @@ export const PLATFORM_OPS_ROUTES: readonly PlatformOpsRoute[] = [
   { method: "DELETE", path: "/agents/{id}/repos", subpaths: true },
   { method: "PATCH", path: "/agents/{id}/crons/{cronId}" },
   { method: "POST", path: "/agents/{id}/ask" },
+  { method: "POST", path: "/agents/{id}/crons/{cronId}/run-now" },
   { method: "POST", path: "/agents/{id}/chat-credentials", subpaths: true },
   { method: "DELETE", path: "/agents/{id}/chat-credentials", subpaths: true },
 ];