@app-vitals/agent-admin 1.4.0 → 1.5.0

package/openapi.json

@@ -2808,6 +2808,12 @@
               "$ref": "#/components/schemas/AgentConfigPlugin"
             }
           },
+          "marketplaces": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/AgentConfigMarketplace"
+            }
+          },
           "repos": {
             "type": "array",
             "items": {
@@ -3362,6 +3368,128 @@
           "transcriptUpload",
           "repoAccessCheck"
         ]
+      },
+      "AgentMarketplace": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string",
+            "example": "clx1234567890"
+          },
+          "agentId": {
+            "type": "string",
+            "example": "clx1234567890"
+          },
+          "name": {
+            "type": "string",
+            "example": "shipwright"
+          },
+          "source": {
+            "type": "string",
+            "example": "app-vitals/shipwright"
+          },
+          "ref": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "example": "main"
+          },
+          "createdAt": {
+            "type": "string",
+            "format": "date-time",
+            "example": "2026-01-01T00:00:00.000Z"
+          },
+          "updatedAt": {
+            "type": "string",
+            "format": "date-time",
+            "example": "2026-01-01T00:00:00.000Z"
+          }
+        },
+        "required": [
+          "id",
+          "agentId",
+          "name",
+          "source",
+          "ref",
+          "createdAt",
+          "updatedAt"
+        ]
+      },
+      "UpsertAgentMarketplaceBody": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string",
+            "example": "shipwright"
+          },
+          "source": {
+            "type": "string",
+            "description": "GitHub `owner/repo` or an https git URL",
+            "example": "app-vitals/shipwright"
+          },
+          "ref": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "example": "main"
+          }
+        },
+        "required": [
+          "name",
+          "source"
+        ]
+      },
+      "MarketplaceWrapper": {
+        "type": "object",
+        "properties": {
+          "marketplace": {
+            "$ref": "#/components/schemas/AgentMarketplace"
+          }
+        },
+        "required": [
+          "marketplace"
+        ]
+      },
+      "MarketplacesWrapper": {
+        "type": "object",
+        "properties": {
+          "marketplaces": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/AgentMarketplace"
+            }
+          }
+        },
+        "required": [
+          "marketplaces"
+        ]
+      },
+      "AgentConfigMarketplace": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string",
+            "example": "shipwright"
+          },
+          "source": {
+            "type": "string",
+            "example": "app-vitals/shipwright"
+          },
+          "ref": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "example": "main"
+          }
+        },
+        "required": [
+          "name",
+          "source",
+          "ref"
+        ]
       }
     },
     "parameters": {}
@@ -6497,6 +6625,132 @@
           }
         }
       }
+    },
+    "/agents/{id}/marketplaces": {
+      "get": {
+        "summary": "List marketplaces",
+        "description": "Returns every remote plugin marketplace configured for the agent.",
+        "parameters": [
+          {
+            "schema": {
+              "type": "string",
+              "example": "clx1234567890"
+            },
+            "required": true,
+            "name": "id",
+            "in": "path"
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "List of marketplaces",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/MarketplacesWrapper"
+                }
+              }
+            }
+          }
+        }
+      },
+      "post": {
+        "summary": "Add or update a marketplace",
+        "description": "Upserts a remote plugin marketplace by `name`. `source` must be a GitHub `owner/repo` or an https git URL (no credentials); `ref` optionally pins a branch, tag or sha. 422 on an invalid `name`, `source` or `ref`.",
+        "parameters": [
+          {
+            "schema": {
+              "type": "string",
+              "example": "clx1234567890"
+            },
+            "required": true,
+            "name": "id",
+            "in": "path"
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/UpsertAgentMarketplaceBody"
+              }
+            }
+          }
+        },
+        "responses": {
+          "201": {
+            "description": "Marketplace added or updated",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/MarketplaceWrapper"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Bad request",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Error"
+                }
+              }
+            }
+          },
+          "422": {
+            "description": "Invalid name, source or ref",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Error"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/agents/{id}/marketplaces/{marketplaceId}": {
+      "delete": {
+        "summary": "Remove a marketplace",
+        "description": "Removes the marketplace row by id. 404 when the id does not exist or belongs to a different agent.",
+        "parameters": [
+          {
+            "schema": {
+              "type": "string",
+              "example": "clx1234567890"
+            },
+            "required": true,
+            "name": "id",
+            "in": "path"
+          },
+          {
+            "schema": {
+              "type": "string",
+              "example": "clx0987654321"
+            },
+            "required": true,
+            "name": "marketplaceId",
+            "in": "path"
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "Marketplace removed"
+          },
+          "404": {
+            "description": "Marketplace not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Error"
+                }
+              }
+            }
+          }
+        }
+      }
     }
   },
   "webhooks": {}

package/openapi.platform.json

@@ -2249,6 +2249,103 @@
           }
         }
       },
+      "MarketplacesWrapper": {
+        "type": "object",
+        "properties": {
+          "marketplaces": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/AgentMarketplace"
+            }
+          }
+        },
+        "required": [
+          "marketplaces"
+        ]
+      },
+      "AgentMarketplace": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string",
+            "example": "clx1234567890"
+          },
+          "agentId": {
+            "type": "string",
+            "example": "clx1234567890"
+          },
+          "name": {
+            "type": "string",
+            "example": "shipwright"
+          },
+          "source": {
+            "type": "string",
+            "example": "app-vitals/shipwright"
+          },
+          "ref": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "example": "main"
+          },
+          "createdAt": {
+            "type": "string",
+            "format": "date-time",
+            "example": "2026-01-01T00:00:00.000Z"
+          },
+          "updatedAt": {
+            "type": "string",
+            "format": "date-time",
+            "example": "2026-01-01T00:00:00.000Z"
+          }
+        },
+        "required": [
+          "id",
+          "agentId",
+          "name",
+          "source",
+          "ref",
+          "createdAt",
+          "updatedAt"
+        ]
+      },
+      "MarketplaceWrapper": {
+        "type": "object",
+        "properties": {
+          "marketplace": {
+            "$ref": "#/components/schemas/AgentMarketplace"
+          }
+        },
+        "required": [
+          "marketplace"
+        ]
+      },
+      "UpsertAgentMarketplaceBody": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string",
+            "example": "shipwright"
+          },
+          "source": {
+            "type": "string",
+            "description": "GitHub `owner/repo` or an https git URL",
+            "example": "app-vitals/shipwright"
+          },
+          "ref": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "example": "main"
+          }
+        },
+        "required": [
+          "name",
+          "source"
+        ]
+      },
       "CronRunTokenStats": {
         "type": "object",
         "properties": {
@@ -3014,6 +3111,12 @@
               "$ref": "#/components/schemas/AgentConfigPlugin"
             }
           },
+          "marketplaces": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/AgentConfigMarketplace"
+            }
+          },
           "repos": {
             "type": "array",
             "items": {
@@ -3160,6 +3263,31 @@
           "plugin"
         ]
       },
+      "AgentConfigMarketplace": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string",
+            "example": "shipwright"
+          },
+          "source": {
+            "type": "string",
+            "example": "app-vitals/shipwright"
+          },
+          "ref": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "example": "main"
+          }
+        },
+        "required": [
+          "name",
+          "source",
+          "ref"
+        ]
+      },
       "AgentConfigFeatures": {
         "type": "object",
         "properties": {
@@ -5426,6 +5554,132 @@
         }
       }
     },
+    "/agents/{id}/marketplaces": {
+      "get": {
+        "summary": "List marketplaces",
+        "description": "Returns every remote plugin marketplace configured for the agent.",
+        "parameters": [
+          {
+            "schema": {
+              "type": "string",
+              "example": "clx1234567890"
+            },
+            "required": true,
+            "name": "id",
+            "in": "path"
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "List of marketplaces",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/MarketplacesWrapper"
+                }
+              }
+            }
+          }
+        }
+      },
+      "post": {
+        "summary": "Add or update a marketplace",
+        "description": "Upserts a remote plugin marketplace by `name`. `source` must be a GitHub `owner/repo` or an https git URL (no credentials); `ref` optionally pins a branch, tag or sha. 422 on an invalid `name`, `source` or `ref`.",
+        "parameters": [
+          {
+            "schema": {
+              "type": "string",
+              "example": "clx1234567890"
+            },
+            "required": true,
+            "name": "id",
+            "in": "path"
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/UpsertAgentMarketplaceBody"
+              }
+            }
+          }
+        },
+        "responses": {
+          "201": {
+            "description": "Marketplace added or updated",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/MarketplaceWrapper"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Bad request",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Error"
+                }
+              }
+            }
+          },
+          "422": {
+            "description": "Invalid name, source or ref",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Error"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/agents/{id}/marketplaces/{marketplaceId}": {
+      "delete": {
+        "summary": "Remove a marketplace",
+        "description": "Removes the marketplace row by id. 404 when the id does not exist or belongs to a different agent.",
+        "parameters": [
+          {
+            "schema": {
+              "type": "string",
+              "example": "clx1234567890"
+            },
+            "required": true,
+            "name": "id",
+            "in": "path"
+          },
+          {
+            "schema": {
+              "type": "string",
+              "example": "clx0987654321"
+            },
+            "required": true,
+            "name": "marketplaceId",
+            "in": "path"
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "Marketplace removed"
+          },
+          "404": {
+            "description": "Marketplace not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Error"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
     "/agents/all/cron-runs/stats": {
       "get": {
         "summary": "Get aggregated cron-run token stats",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@app-vitals/agent-admin",
-  "version": "1.4.0",
+  "version": "1.5.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/app-vitals/agent.git",
@@ -42,7 +42,7 @@
   },
   "dependencies": {
     "@anthropic-ai/sdk": "0.135.0",
-    "@app-vitals/agent-lib": "1.4.0",
+    "@app-vitals/agent-lib": "1.5.0",
     "@hono/zod-openapi": "^1.0.0",
     "@prisma/adapter-pg": "^7.10.0",
     "@prisma/client": "^7.10.0",

package/src/admin-boot.ts

@@ -23,7 +23,7 @@
  * They use non-overlapping sub-paths so Hono resolves them correctly:
  *   runtime  → GET  /agents/:id/config, GET /agents/:id/crons
  *   admin    → GET /agents/:id/crons/summary (enriched with run stats)
- *              POST/PATCH/DELETE /agents/:id/envs, /crons, /tools, /tokens, /plugins
+ *              POST/PATCH/DELETE /agents/:id/envs, /crons, /tools, /tokens, /plugins, /marketplaces
  *
  * This file must not import any coding module — main.ts is the only file
  * that wires a concrete extension in.
@@ -80,6 +80,7 @@ import { AgentCronRunStatsService } from "./agent-cron-run-stats.ts";
 import { AgentCronRunService } from "./agent-cron-runs.ts";
 import { AgentEnvService } from "./agent-envs.ts";
 import { AgentGitHubInstallationsService } from "./agent-github-installations.ts";
+import { AgentMarketplaceService } from "./agent-marketplaces.ts";
 import { AgentMemberService } from "./agent-members.ts";
 import { AgentPluginService } from "./agent-plugins.ts";
 import { AgentTokenService } from "./agent-tokens.ts";
@@ -197,6 +198,7 @@ export async function startAdmin(
   const agentToolService = new AgentToolService(prisma);
   const agentTokenService = new AgentTokenService(prisma);
   const agentPluginService = new AgentPluginService(prisma);
+  const agentMarketplaceService = new AgentMarketplaceService(prisma);
   const agentMemberService = new AgentMemberService(prisma);
   // Account-aware caller scope (SSP-2.1). Account membership contributes
   // agents only when the self-serve flag is on; off → AgentMember-only.
@@ -433,6 +435,7 @@ export async function startAdmin(
     agentCronJobService,
     agentService,
     agentPluginService,
+    agentMarketplaceService,
     ...(resolvedExtensions.agentPhaseMethodologyService
       ? {
           agentPhaseMethodologyService:
@@ -461,6 +464,7 @@ export async function startAdmin(
     agentToolService,
     agentTokenService,
     agentPluginService,
+    agentMarketplaceService,
     agentMemberService,
     callerScopeResolver,
     specialtyRegistry,