@swarmclawai/swarmclaw 1.9.2 → 1.9.3

package/src/lib/server/extensions.ts

@@ -11,6 +11,7 @@ import type {
   ExtensionUIDefinition,
   ExtensionProviderDefinition,
   ExtensionConnectorDefinition,
+  ExtensionManagedResources,
   Session,
   ExtensionPackageManager,
   ExtensionDependencyInstallStatus,
@@ -467,11 +468,60 @@ function coerceTools(rawTools: unknown): ExtensionToolDef[] {
   return []
 }
 
+function coerceManagedResources(raw: Record<string, unknown>): ExtensionManagedResources | undefined {
+  const explicit = isRecord(raw.managedResources)
+    ? raw.managedResources as Record<string, unknown>
+    : {}
+  const agents = Array.isArray(explicit.agents)
+    ? explicit.agents
+    : Array.isArray(raw.agents)
+      ? raw.agents
+      : undefined
+  const schedules = Array.isArray(explicit.schedules)
+    ? explicit.schedules
+    : Array.isArray(raw.schedules)
+      ? raw.schedules
+      : undefined
+  const routines = Array.isArray(explicit.routines)
+    ? explicit.routines
+    : Array.isArray(raw.routines)
+      ? raw.routines
+      : undefined
+  const localFolders = Array.isArray(explicit.localFolders)
+    ? explicit.localFolders
+    : Array.isArray(raw.localFolders)
+      ? raw.localFolders
+      : undefined
+  const gatewayPlatforms = Array.isArray(explicit.gatewayPlatforms)
+    ? explicit.gatewayPlatforms
+    : Array.isArray(raw.gatewayPlatforms)
+      ? raw.gatewayPlatforms
+      : undefined
+  const setupChecks = Array.isArray(explicit.setupChecks)
+    ? explicit.setupChecks
+    : Array.isArray(raw.setupChecks)
+      ? raw.setupChecks
+      : undefined
+
+  const managedResources: ExtensionManagedResources = {
+    agents: agents as ExtensionManagedResources['agents'],
+    schedules: schedules as ExtensionManagedResources['schedules'],
+    routines: routines as ExtensionManagedResources['routines'],
+    localFolders: localFolders as ExtensionManagedResources['localFolders'],
+    gatewayPlatforms: gatewayPlatforms as ExtensionManagedResources['gatewayPlatforms'],
+    setupChecks: setupChecks as ExtensionManagedResources['setupChecks'],
+  }
+
+  return Object.values(managedResources).some((value) => Array.isArray(value) && value.length > 0)
+    ? managedResources
+    : undefined
+}
+
 function normalizeExtension(mod: unknown): Extension | null {
   const modObj = mod as Record<string, unknown>
   const raw: Record<string, unknown> = (modObj?.default as Record<string, unknown>) || modObj
 
-  if (raw.name && (raw.hooks || raw.tools || raw.ui || raw.providers || raw.connectors)) {
+  if (raw.name && (raw.hooks || raw.tools || raw.ui || raw.providers || raw.connectors || raw.managedResources || raw.agents || raw.schedules || raw.routines || raw.localFolders || raw.gatewayPlatforms || raw.setupChecks)) {
     const hooks = isRecord(raw.hooks) ? (raw.hooks as ExtensionHooks) : {}
     return {
       name: raw.name as string,
@@ -484,6 +534,7 @@ function normalizeExtension(mod: unknown): Extension | null {
       ui: isRecord(raw.ui) ? (raw.ui as ExtensionUIDefinition) : undefined,
       providers: Array.isArray(raw.providers) ? (raw.providers as ExtensionProviderDefinition[]) : undefined,
       connectors: Array.isArray(raw.connectors) ? (raw.connectors as ExtensionConnectorDefinition[]) : undefined,
+      managedResources: coerceManagedResources(raw),
     } as Extension
   }
 
@@ -639,6 +690,7 @@ interface LoadedExtension {
   ui?: ExtensionUIDefinition
   providers?: ExtensionProviderDefinition[]
   connectors?: ExtensionConnectorDefinition[]
+  managedResources?: ExtensionManagedResources
   isBuiltin?: boolean
 }
 
@@ -1017,6 +1069,7 @@ class ExtensionManager {
           ui: p.ui,
           providers: p.providers,
           connectors: p.connectors,
+          managedResources: p.managedResources || coerceManagedResources(p as unknown as Record<string, unknown>),
           isBuiltin: true
         })
         this.markExtensionSuccess(id)
@@ -1064,6 +1117,7 @@ class ExtensionManager {
               ui: ext.ui,
               providers: ext.providers,
               connectors: ext.connectors,
+              managedResources: ext.managedResources,
             })
             this.markExtensionSuccess(file)
           } catch (err: unknown) {
@@ -1145,6 +1199,55 @@ class ExtensionManager {
     return allUI
   }
 
+  getManagedResourceExtensions(): Array<{
+    extensionId: string
+    extensionName: string
+    enabled: boolean
+    isBuiltin: boolean
+    source?: ExtensionMeta['source']
+    managedResources: ExtensionManagedResources
+  }> {
+    this.load()
+    const result: Array<{
+      extensionId: string
+      extensionName: string
+      enabled: boolean
+      isBuiltin: boolean
+      source?: ExtensionMeta['source']
+      managedResources: ExtensionManagedResources
+    }> = []
+
+    for (const [id, entry] of this.extensions.entries()) {
+      const managedResources = entry.managedResources
+      if (!managedResources) continue
+      if (!Object.values(managedResources).some((value) => Array.isArray(value) && value.length > 0)) continue
+      result.push({
+        extensionId: id,
+        extensionName: entry.meta.name,
+        enabled: entry.meta.enabled,
+        isBuiltin: entry.isBuiltin === true,
+        source: entry.meta.source,
+        managedResources,
+      })
+    }
+
+    return result
+  }
+
+  getManagedResources(extensionId: string): ExtensionManagedResources | null {
+    this.load()
+    const candidateIds = expandExtensionIds([extensionId])
+    for (const id of candidateIds) {
+      const loaded = this.extensions.get(id)
+      if (loaded?.managedResources) return loaded.managedResources
+      const builtin = this.builtins.get(id)
+      if (builtin) {
+        return builtin.managedResources || coerceManagedResources(builtin as unknown as Record<string, unknown>) || null
+      }
+    }
+    return null
+  }
+
   listExtensionIds(): string[] {
     this.load()
     return Array.from(this.extensions.keys())
@@ -1842,11 +1945,14 @@ class ExtensionManager {
       const failures = this.readFailureState()
       const metas: ExtensionMeta[] = []
 
-      const describeCapabilities = (loaded?: LoadedExtension, fallback?: Extension): Pick<ExtensionMeta, 'toolCount' | 'hookCount' | 'hasUI' | 'providerCount' | 'connectorCount' | 'settingsFields'> => {
+      const describeCapabilities = (loaded?: LoadedExtension, fallback?: Extension): Pick<ExtensionMeta, 'toolCount' | 'hookCount' | 'hasUI' | 'providerCount' | 'connectorCount' | 'settingsFields' | 'managedAgentCount' | 'managedScheduleCount' | 'localFolderCount' | 'gatewayPlatformCount' | 'setupCheckCount'> => {
         const tools = loaded?.tools || fallback?.tools || []
         const hooks = loaded?.hooks || fallback?.hooks || {}
         const providers = loaded?.providers || fallback?.providers || []
         const connectors = loaded?.connectors || fallback?.connectors || []
+        const managedResources = loaded?.managedResources
+          || fallback?.managedResources
+          || (fallback ? coerceManagedResources(fallback as unknown as Record<string, unknown>) : undefined)
         const hasUi = !!(loaded?.ui || fallback?.ui)
         const settingsFields = loaded?.ui?.settingsFields || fallback?.ui?.settingsFields
         return {
@@ -1855,6 +1961,11 @@ class ExtensionManager {
           hasUI: hasUi,
           providerCount: Array.isArray(providers) ? providers.length : 0,
           connectorCount: Array.isArray(connectors) ? connectors.length : 0,
+          managedAgentCount: managedResources?.agents?.length || 0,
+          managedScheduleCount: (managedResources?.schedules?.length || 0) + (managedResources?.routines?.length || 0),
+          localFolderCount: managedResources?.localFolders?.length || 0,
+          gatewayPlatformCount: managedResources?.gatewayPlatforms?.length || 0,
+          setupCheckCount: managedResources?.setupChecks?.length || 0,
           settingsFields: settingsFields?.length ? settingsFields : undefined,
         }
       }

package/src/lib/server/session-tools/extension-creator.ts

@@ -138,6 +138,54 @@ module.exports = {
     }
   ],
 
+  // --- Managed Resources (Paperclip-compatible) ---
+  managedResources: {
+    agents: [
+      {
+        agentKey: 'researcher',
+        displayName: 'Managed Researcher',
+        description: 'Reusable agent this extension can provision.',
+        systemPrompt: 'Research carefully and cite durable evidence.',
+        provider: 'openai',
+        model: 'gpt-4o-mini',
+        capabilities: ['research', 'analysis'],
+        extensions: ['web', 'memory']
+      }
+    ],
+    schedules: [
+      {
+        scheduleKey: 'daily-digest',
+        displayName: 'Daily Digest',
+        agentRef: { resourceKind: 'agent', resourceKey: 'researcher' },
+        taskPrompt: 'Prepare the daily digest.',
+        scheduleType: 'cron',
+        cron: '0 9 * * *',
+        timezone: 'UTC',
+        status: 'paused'
+      }
+    ],
+    localFolders: [
+      {
+        folderKey: 'workspace',
+        displayName: 'Workspace Folder',
+        access: 'readWrite',
+        requiredDirectories: ['inputs', 'outputs']
+      }
+    ],
+    gatewayPlatforms: [
+      {
+        platformKey: 'openai-compatible-api',
+        displayName: 'OpenAI-compatible API',
+        transport: 'http',
+        endpoint: 'http://127.0.0.1:8642/v1',
+        authMode: 'bearer'
+      }
+    ],
+    setupChecks: [
+      { checkKey: 'api-key', displayName: 'API key configured', kind: 'env', target: 'OPENAI_API_KEY', required: true }
+    ]
+  },
+
   // --- Real OpenClaw Format (register API) ---
   register(api) {
     api.registerHook('agent:start', (ctx) => {
@@ -162,6 +210,8 @@ Key rules:
 - If your extension needs npm/pnpm/yarn/bun packages, include a packageJson object during scaffold or call install_dependencies later.
 - Dependency installs are run by the extension manager inside a per-extension workspace using the selected package manager with scripts disabled.
 - Extension settings are declared through ui.settingsFields and stored per extension ID
+- Managed resources let an extension declare provisionable agents, schedules/routines, trusted local folders, gateway platforms, and setup checks. Operators reconcile them through Extensions > Managed Resources or /api/extensions/managed-resources.
+- Paperclip-compatible top-level agents, routines, and localFolders are also accepted; SwarmClaw reconciles routines as schedules when they include schedule timing.
 - Keep extensions focused: one clear purpose per extension
 `
     }

package/src/types/agent.ts

@@ -2,6 +2,7 @@ import type { ProviderId, ProviderType, OllamaMode } from './provider'
 import type { SessionResetMode, IdentityContinuityState } from './session'
 import type { SkillAllowlistMode } from './skill'
 import type { DreamConfig } from './dream'
+import type { ExtensionManagedResourceMarker } from './extension'
 
 // --- SwarmFeed Heartbeat ---
 
@@ -237,6 +238,7 @@ export interface Agent {
   swarmfeedLastAutoPostAt?: number | null
   origin?: 'swarmdock' | 'swarmfeed' | 'swarmclaw' | 'external'
   swarmfeedHeartbeat?: SwarmFeedHeartbeatConfig | null
+  managedByExtension?: ExtensionManagedResourceMarker | null
 
   // SwarmDock (marketplace integration)
   swarmdockEnabled?: boolean

package/src/types/app-settings.ts

@@ -1,4 +1,5 @@
 import type { SessionResetMode } from './session'
+import type { ExtensionManagedLocalFolderDeclaration } from './extension'
 
 // --- App Settings ---
 export type LoopMode = 'bounded' | 'ongoing'
@@ -150,6 +151,13 @@ export interface AppSettings {
   toolLoopCircuitBreaker?: number
   // Per-extension settings (keyed by extensionId)
   extensionSettings?: Record<string, Record<string, unknown>>
+  // Extension-managed resource settings such as trusted local folder roots.
+  extensionManagedResources?: Record<string, {
+    localFolders?: Record<string, ExtensionManagedLocalFolderDeclaration & {
+      path?: string | null
+      updatedAt?: number
+    }>
+  }>
   // Approval policies — opt-in governance gates for sensitive operations
   approvalPolicies?: {
     requireApprovalForAgentCreate?: boolean

package/src/types/extension.ts

@@ -251,6 +251,125 @@ export interface ExtensionUIDefinition {
   }>
 }
 
+export type ExtensionManagedResourceKind = 'agent' | 'schedule' | 'local_folder'
+
+export interface ExtensionManagedResourceRef {
+  extensionId?: string
+  resourceKind: 'agent' | 'schedule'
+  resourceKey: string
+}
+
+export interface ExtensionManagedResourceMarker {
+  extensionId: string
+  extensionName?: string | null
+  resourceKind: ExtensionManagedResourceKind
+  resourceKey: string
+  declarationHash?: string | null
+  reconciledAt: number
+}
+
+export interface ExtensionManagedAgentDeclaration {
+  agentKey: string
+  displayName: string
+  description?: string | null
+  systemPrompt?: string | null
+  instructions?: {
+    content?: string | null
+    entryFile?: string | null
+    assetPath?: string | null
+  } | null
+  provider?: ProviderId | string | null
+  model?: string | null
+  apiEndpoint?: string | null
+  credentialId?: string | null
+  fallbackCredentialIds?: string[]
+  gatewayProfileId?: string | null
+  preferredGatewayTags?: string[]
+  preferredGatewayUseCase?: string | null
+  capabilities?: string[] | string | null
+  tools?: string[]
+  extensions?: string[]
+  skills?: string[]
+  skillIds?: string[]
+  mcpServerIds?: string[]
+  monthlyBudget?: number | null
+  dailyBudget?: number | null
+  hourlyBudget?: number | null
+  disabled?: boolean
+  heartbeatEnabled?: boolean
+  planningMode?: 'off' | 'strict' | null
+}
+
+export interface ExtensionManagedScheduleTrigger {
+  kind?: 'schedule' | 'api' | 'webhook'
+  label?: string | null
+  enabled?: boolean
+  cronExpression?: string | null
+  timezone?: string | null
+}
+
+export interface ExtensionManagedScheduleDeclaration {
+  scheduleKey?: string
+  routineKey?: string
+  displayName?: string
+  title?: string
+  description?: string | null
+  taskPrompt?: string | null
+  message?: string | null
+  taskMode?: 'task' | 'wake_only' | 'protocol'
+  agentId?: string | null
+  agentRef?: ExtensionManagedResourceRef | null
+  assigneeRef?: ExtensionManagedResourceRef | null
+  scheduleType?: 'cron' | 'interval' | 'once'
+  cron?: string | null
+  intervalMs?: number | null
+  runAt?: number | null
+  timezone?: string | null
+  status?: 'active' | 'paused' | 'completed' | 'failed' | 'archived'
+  priority?: string | null
+  triggers?: ExtensionManagedScheduleTrigger[]
+}
+
+export interface ExtensionManagedLocalFolderDeclaration {
+  folderKey: string
+  displayName: string
+  description?: string | null
+  access?: 'read' | 'readWrite'
+  requiredDirectories?: string[]
+  requiredFiles?: string[]
+}
+
+export interface ExtensionGatewayPlatformDeclaration {
+  platformKey: string
+  displayName: string
+  description?: string | null
+  transport?: 'http' | 'ws' | 'stdio' | 'cli' | 'gateway' | 'custom'
+  endpoint?: string | null
+  authMode?: 'none' | 'bearer' | 'api_key' | 'oauth' | 'custom'
+  setupCheckKey?: string | null
+  capabilities?: string[]
+}
+
+export interface ExtensionSetupCheckDeclaration {
+  checkKey: string
+  displayName: string
+  description?: string | null
+  kind: 'env' | 'command' | 'url' | 'manual'
+  target?: string | null
+  required?: boolean
+}
+
+export interface ExtensionManagedResources {
+  agents?: ExtensionManagedAgentDeclaration[]
+  schedules?: ExtensionManagedScheduleDeclaration[]
+  /** Paperclip-compatible alias. SwarmClaw reconciles routines as managed schedules. */
+  routines?: ExtensionManagedScheduleDeclaration[]
+  localFolders?: ExtensionManagedLocalFolderDeclaration[]
+  /** Hermes-style gateway/platform declaration metadata for setup and diagnostics surfaces. */
+  gatewayPlatforms?: ExtensionGatewayPlatformDeclaration[]
+  setupChecks?: ExtensionSetupCheckDeclaration[]
+}
+
 export interface ExtensionProviderDefinition {
   id: string
   name: string
@@ -300,6 +419,14 @@ export interface Extension {
   ui?: ExtensionUIDefinition
   providers?: ExtensionProviderDefinition[]
   connectors?: ExtensionConnectorDefinition[]
+  managedResources?: ExtensionManagedResources
+  /** Paperclip-compatible top-level aliases. Prefer managedResources for new SwarmClaw extensions. */
+  agents?: ExtensionManagedAgentDeclaration[]
+  schedules?: ExtensionManagedScheduleDeclaration[]
+  routines?: ExtensionManagedScheduleDeclaration[]
+  localFolders?: ExtensionManagedLocalFolderDeclaration[]
+  gatewayPlatforms?: ExtensionGatewayPlatformDeclaration[]
+  setupChecks?: ExtensionSetupCheckDeclaration[]
 }
 
 export interface ExtensionMeta {
@@ -325,6 +452,11 @@ export interface ExtensionMeta {
   hasUI?: boolean
   providerCount?: number
   connectorCount?: number
+  managedAgentCount?: number
+  managedScheduleCount?: number
+  localFolderCount?: number
+  gatewayPlatformCount?: number
+  setupCheckCount?: number
   createdByAgentId?: string | null
   settingsFields?: ExtensionSettingsField[]
   hasDependencyManifest?: boolean

package/src/types/schedule.ts

@@ -1,3 +1,5 @@
+import type { ExtensionManagedResourceMarker } from './extension'
+
 export type ScheduleType = 'cron' | 'interval' | 'once'
 export type ScheduleStatus = 'active' | 'paused' | 'completed' | 'failed' | 'archived'
 export type ScheduleTaskMode = 'task' | 'wake_only' | 'protocol'
@@ -54,6 +56,7 @@ export interface Schedule {
   followupThreadId?: string | null
   followupSenderId?: string | null
   followupSenderName?: string | null
+  managedByExtension?: ExtensionManagedResourceMarker | null
   createdAt: number
   updatedAt?: number
 }

package/src/views/settings/extension-manager.tsx

@@ -8,14 +8,43 @@ import { toast } from 'sonner'
 import { ConfirmDialog } from '@/components/shared/confirm-dialog'
 import { errorMessage } from '@/lib/shared-utils'
 
+type ManagedResourceStatus = 'declared' | 'resolved' | 'missing' | 'missing_ref' | 'unsupported_trigger'
+type ManagedResourceSummary = {
+  extensions: Array<{
+    extensionId: string
+    extensionName: string
+    enabled: boolean
+    isBuiltin: boolean
+    agents: Array<{ resourceKey: string; displayName: string; status: ManagedResourceStatus; resourceId: string | null }>
+    schedules: Array<{ resourceKey: string; displayName: string; status: ManagedResourceStatus; resourceId: string | null }>
+    localFolders: Array<{ resourceKey: string; displayName: string; status: ManagedResourceStatus; configured?: boolean; healthy?: boolean }>
+    gatewayPlatforms: Array<{ platformKey: string; displayName: string; transport?: string; endpoint?: string | null }>
+    setupChecks: Array<{ checkKey: string; displayName: string; kind: string; required: boolean }>
+  }>
+  totals: {
+    extensions: number
+    agents: number
+    schedules: number
+    localFolders: number
+    gatewayPlatforms: number
+    setupChecks: number
+    resolvedAgents: number
+    resolvedSchedules: number
+    healthyLocalFolders: number
+  }
+}
+
 export function ExtensionManager() {
-  const [tab, setTab] = useState<'installed' | 'marketplace' | 'url'>('installed')
+  const [tab, setTab] = useState<'installed' | 'managed' | 'marketplace' | 'url'>('installed')
   const [extensions, setExtensions] = useState<ExtensionMeta[]>([])
+  const [managedResources, setManagedResources] = useState<ManagedResourceSummary | null>(null)
   const [marketplace, setMarketplace] = useState<MarketplaceExtension[]>([])
   const [loading, setLoading] = useState(false)
+  const [managedLoading, setManagedLoading] = useState(false)
   const [installing, setInstalling] = useState<string | null>(null)
   const [updating, setUpdating] = useState<string | null>(null)
   const [updatingAll, setUpdatingAll] = useState(false)
+  const [reconciling, setReconciling] = useState<string | null>(null)
   const [urlInput, setUrlInput] = useState('')
   const [urlFilename, setUrlFilename] = useState('')
   const [urlStatus, setUrlStatus] = useState<{ ok: boolean; message: string } | null>(null)
@@ -29,6 +58,15 @@ export function ExtensionManager() {
     } catch { /* ignore */ }
   }, [])
 
+  const loadManagedResources = useCallback(async () => {
+    setManagedLoading(true)
+    try {
+      const data = await api<ManagedResourceSummary>('GET', '/extensions/managed-resources')
+      setManagedResources(data)
+    } catch { /* ignore */ }
+    setManagedLoading(false)
+  }, [])
+
   const loadMarketplace = useCallback(async (q = '') => {
     setLoading(true)
     try {
@@ -39,6 +77,7 @@ export function ExtensionManager() {
   }, [])
 
   useEffect(() => { loadExtensions() }, [loadExtensions])
+  useEffect(() => { if (tab === 'managed') loadManagedResources() }, [tab, loadManagedResources])
   useEffect(() => { if (tab === 'marketplace') loadMarketplace(marketplaceQuery) }, [tab, loadMarketplace, marketplaceQuery])
 
   const toggleExtension = async (filename: string, enabled: boolean) => {
@@ -87,6 +126,25 @@ export function ExtensionManager() {
     }
   }
 
+  const handleReconcileManaged = async (extensionId?: string) => {
+    const id = extensionId || 'all'
+    setReconciling(id)
+    try {
+      const result = await api<{ createdAgents: string[]; updatedAgents: string[]; createdSchedules: string[]; updatedSchedules: string[] }>(
+        'POST',
+        '/extensions/managed-resources',
+        { action: 'reconcile', ...(extensionId ? { extensionId } : {}) },
+        { timeoutMs: 30_000 },
+      )
+      await Promise.all([loadExtensions(), loadManagedResources()])
+      toast.success(`Reconciled ${result.createdAgents.length + result.updatedAgents.length} agents and ${result.createdSchedules.length + result.updatedSchedules.length} schedules`)
+    } catch (err: unknown) {
+      toast.error(errorMessage(err))
+    } finally {
+      setReconciling(null)
+    }
+  }
+
   const installFromMarketplace = async (p: MarketplaceExtension) => {
     setInstalling(p.id)
     const toastId = toast.loading(`Installing ${p.name}...`)
@@ -188,6 +246,14 @@ export function ExtensionManager() {
             </span>
           </div>
         )}
+        {((p.managedAgentCount || 0) + (p.managedScheduleCount || 0) + (p.localFolderCount || 0) + (p.gatewayPlatformCount || 0) + (p.setupCheckCount || 0)) > 0 && (
+          <div className="mt-1.5 flex items-center gap-1.5 text-[10px] font-700 uppercase tracking-[0.08em] flex-wrap">
+            {(p.managedAgentCount || 0) > 0 && <span className="px-1.5 py-0.5 rounded bg-emerald-500/10 text-emerald-300">{p.managedAgentCount} agents</span>}
+            {(p.managedScheduleCount || 0) > 0 && <span className="px-1.5 py-0.5 rounded bg-violet-500/10 text-violet-300">{p.managedScheduleCount} routines</span>}
+            {(p.localFolderCount || 0) > 0 && <span className="px-1.5 py-0.5 rounded bg-sky-500/10 text-sky-300">{p.localFolderCount} folders</span>}
+            {(p.gatewayPlatformCount || 0) > 0 && <span className="px-1.5 py-0.5 rounded bg-amber-500/10 text-amber-300">{p.gatewayPlatformCount} gateways</span>}
+          </div>
+        )}
         {p.autoDisabled && (
           <div className="text-[11px] text-amber-400/90 mt-1.5 p-2 rounded-[8px] bg-amber-500/[0.03] border border-amber-500/10">
             {p.lastFailureStage ? `Error at ${p.lastFailureStage}:` : 'Last error:'} {p.lastFailureError}
@@ -242,6 +308,7 @@ export function ExtensionManager() {
           </div>
           <div className="flex bg-surface p-1.5 rounded-[14px] border border-white/[0.04]">
             <button onClick={() => setTab('installed')} className={tabClass('installed')}>Installed</button>
+            <button onClick={() => setTab('managed')} className={tabClass('managed')}>Managed</button>
             <button onClick={() => setTab('marketplace')} className={tabClass('marketplace')}>Marketplace</button>
             <button onClick={() => setTab('url')} className={tabClass('url')}>Manual</button>
           </div>
@@ -302,6 +369,95 @@ export function ExtensionManager() {
           </div>
         )}
 
+        {tab === 'managed' && (
+          <div className="space-y-6">
+            <div className="flex items-center justify-between gap-4 px-1">
+              <div>
+                <h3 className="text-[13px] font-700 text-text-2">Managed Resources</h3>
+                <p className="text-[12px] text-text-3/50 mt-0.5">Extension-declared agents, routines, folders, gateways, and setup checks.</p>
+              </div>
+              <button
+                onClick={() => handleReconcileManaged()}
+                disabled={!!reconciling || managedLoading}
+                className="h-9 px-4 rounded-[10px] bg-accent-bright text-white text-[11px] font-800 uppercase tracking-[0.08em] border-none cursor-pointer disabled:opacity-50"
+              >
+                {reconciling === 'all' ? 'Reconciling...' : 'Reconcile All'}
+              </button>
+            </div>
+
+            {managedLoading ? (
+              <div className="py-20 flex justify-center">
+                <div className="w-8 h-8 border-2 border-accent-bright/20 border-t-accent-bright rounded-full animate-spin" />
+              </div>
+            ) : !managedResources || managedResources.extensions.length === 0 ? (
+              <div className="py-20 text-center rounded-[24px] border border-dashed border-white/[0.06]">
+                <p className="text-[14px] text-text-3/50">No managed resource declarations found</p>
+              </div>
+            ) : (
+              <div className="space-y-4">
+                <div className="grid grid-cols-2 md:grid-cols-5 gap-3">
+                  {[
+                    ['Agents', `${managedResources.totals.resolvedAgents}/${managedResources.totals.agents}`],
+                    ['Routines', `${managedResources.totals.resolvedSchedules}/${managedResources.totals.schedules}`],
+                    ['Folders', `${managedResources.totals.healthyLocalFolders}/${managedResources.totals.localFolders}`],
+                    ['Gateways', String(managedResources.totals.gatewayPlatforms)],
+                    ['Setup', String(managedResources.totals.setupChecks)],
+                  ].map(([label, value]) => (
+                    <div key={label} className="rounded-[12px] bg-surface border border-white/[0.06] p-4">
+                      <div className="text-[10px] font-800 uppercase tracking-[0.12em] text-text-3/50">{label}</div>
+                      <div className="text-[22px] font-800 text-text mt-1">{value}</div>
+                    </div>
+                  ))}
+                </div>
+
+                {managedResources.extensions.map((entry) => (
+                  <div key={entry.extensionId} className="rounded-[18px] bg-surface border border-white/[0.06] p-5">
+                    <div className="flex items-center justify-between gap-4 mb-4">
+                      <div className="min-w-0">
+                        <div className="flex items-center gap-2">
+                          <h4 className="text-[14px] font-800 text-text truncate">{entry.extensionName}</h4>
+                          <span className="text-[10px] font-mono text-text-3/50 truncate">{entry.extensionId}</span>
+                        </div>
+                        <div className="text-[11px] text-text-3/50 mt-0.5">
+                          {entry.agents.length} agents, {entry.schedules.length} routines, {entry.localFolders.length} folders, {entry.gatewayPlatforms.length} gateways
+                        </div>
+                      </div>
+                      <button
+                        onClick={() => handleReconcileManaged(entry.extensionId)}
+                        disabled={!!reconciling}
+                        className="h-8 px-3 rounded-[9px] bg-white/[0.05] hover:bg-white/[0.08] text-text-2 text-[10px] font-800 uppercase tracking-[0.08em] border border-white/[0.06] cursor-pointer disabled:opacity-50"
+                      >
+                        {reconciling === entry.extensionId ? 'Reconciling...' : 'Reconcile'}
+                      </button>
+                    </div>
+
+                    <div className="grid grid-cols-1 md:grid-cols-3 gap-3">
+                      {[
+                        ['Agents', entry.agents.map((item) => `${item.displayName} - ${item.status}`)],
+                        ['Routines', entry.schedules.map((item) => `${item.displayName} - ${item.status}`)],
+                        ['Folders', entry.localFolders.map((item) => `${item.displayName} - ${item.configured ? 'configured' : 'missing'}`)],
+                      ].map(([label, rows]) => (
+                        <div key={label as string} className="rounded-[12px] bg-bg/60 border border-white/[0.04] p-3 min-h-[96px]">
+                          <div className="text-[10px] font-800 uppercase tracking-[0.12em] text-text-3/50 mb-2">{label as string}</div>
+                          {(rows as string[]).length > 0 ? (
+                            <div className="space-y-1">
+                              {(rows as string[]).slice(0, 4).map((row) => (
+                                <div key={row} className="text-[11px] text-text-3/80 truncate">{row}</div>
+                              ))}
+                            </div>
+                          ) : (
+                            <div className="text-[11px] text-text-3/35">None</div>
+                          )}
+                        </div>
+                      ))}
+                    </div>
+                  </div>
+                ))}
+              </div>
+            )}
+          </div>
+        )}
+
         {tab === 'marketplace' && (
           <div className="space-y-6">
             <div className="relative group">