create-loopengine 0.1.58 → 0.1.60

package/README.md

@@ -16,7 +16,7 @@ clone of loopengine's own source repo.
 npx create-loopengine@latest my-agents
 cd my-agents
 npm install
-cp .env.example .env   # fill in ANTHROPIC_API_KEY
+cp .env.example .env   # fill in OPENAI_API_KEY (or set it later on the Models page)
 npm run dev             # HTTP server on :8787
 ```
 

package/dist/cli.js

@@ -285,7 +285,7 @@ export function main(argv = process.argv.slice(2)) {
         console.log();
         console.log(`  cd ${destination}`);
         console.log('  npm install');
-        console.log('  cp .env.example .env   # fill in ANTHROPIC_API_KEY');
+        console.log('  cp .env.example .env   # fill in OPENAI_API_KEY (or set it on the Models page)');
         console.log('  npm run dev');
     }
     catch (err) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-loopengine",
-  "version": "0.1.58",
+  "version": "0.1.60",
   "description": "Scaffold a new loopengine agent project — a runnable HTTP server with one example agent, in your own repo.",
   "license": "MIT",
   "type": "module",

package/template/.env.example

@@ -1,7 +1,8 @@
-ANTHROPIC_API_KEY=
-# Using OpenAI instead? Swap agents/example-agent/index.ts's createModelCall
-# for createOpenAIModelCall({ model: '...' }) and set this instead:
-# OPENAI_API_KEY=
+# The example agent uses OpenAI (agents/example-agent/index.ts's `model`).
+# Set the key here, or on the console's Models page once the server runs.
+OPENAI_API_KEY=
+# Switching the agent to another provider? Set its key instead, e.g.:
+# ANTHROPIC_API_KEY=
 
 PORT=8787
 

package/template/README.md

@@ -6,7 +6,7 @@ An agent server built with [loopengine](https://www.npmjs.com/package/loopengine
 
 ```bash
 npm install
-cp .env.example .env   # fill in ANTHROPIC_API_KEY
+cp .env.example .env   # fill in OPENAI_API_KEY (or set it later on the Models page)
 ```
 
 ## Run

package/template/adapters/http.ts

@@ -153,6 +153,10 @@ import {
   searchPublicAbilities,
   fetchLatestAbilityVersion,
   describeModelProviders,
+  loopengineVersion,
+  setModelProviderKey,
+  clearModelProviderKey,
+  ModelKeyError,
   describeGateways,
   scaffoldAgent,
   AgentNameError,
@@ -2981,8 +2985,55 @@ const server = createServer(async (req, res) => {
       res.writeHead(200, { 'content-type': 'text/html' }).end(globalConfigPageHtml)
       return
     }
+    // What the sidebar's sign-in line and the Settings section show. In
+    // hosted mode the email and dashboard link come from the router's
+    // signed identity, so they can't be set by the caller.
+    if (req.method === 'GET' && pathname === '/config/settings') {
+      const identity = trustedProxySecret ? verifyProxyIdentity(req.headers[TRUSTED_PROXY_IDENTITY_HEADER], trustedProxySecret) : undefined
+      const signIn = identity
+        ? {
+            mode: 'hosted',
+            email: identity.email ?? null,
+            dashboardUrl: identity.dashboardUrl && /^https?:\/\//.test(identity.dashboardUrl) ? identity.dashboardUrl : null,
+          }
+        : { mode: adminAuth ? 'basic' : 'open' }
+      res.writeHead(200, { 'content-type': 'application/json', 'cache-control': 'no-store' }).end(
+        JSON.stringify({
+          signIn,
+          version: loopengineVersion(),
+          environment: process.env.LOOPENGINE_ENV ?? 'production',
+          publicUrl: process.env.LOOPENGINE_PUBLIC_URL ?? null,
+          scheduler: process.env.LOOPENGINE_SCHEDULER === 'off' ? 'off' : 'on',
+        }),
+      )
+      return
+    }
     if (req.method === 'GET' && pathname === '/config/models') {
-      res.writeHead(200, { 'content-type': 'application/json' }).end(JSON.stringify(describeModelProviders(listAgents(), (name) => getEntry(name)?.config)))
+      res.writeHead(200, { 'content-type': 'application/json' }).end(
+        JSON.stringify({ ...describeModelProviders(listAgents(), (name) => getEntry(name)?.config), canSave: secretsProtected }),
+      )
+      return
+    }
+    // A provider's API key, from the Models page: write-only, never read
+    // back. Same rule as the Environment tab: refused on a server with no
+    // auth, since anyone who could reach it could replace the key.
+    const modelKeyMatch = (req.method === 'PUT' || req.method === 'DELETE') && pathname.match(/^\/config\/models\/([a-z]+)\/key$/)
+    if (modelKeyMatch) {
+      if (!secretsProtected) {
+        res.writeHead(403, { 'content-type': 'application/json' }).end(
+          JSON.stringify({ error: 'Refusing to store an API key without LOOPENGINE_ADMIN_AUTH configured: set it first, or put the key in .env.' }),
+        )
+        return
+      }
+      try {
+        if (req.method === 'PUT') await setModelProviderKey(modelKeyMatch[1], (await readJsonBody(req)).key)
+        else await clearModelProviderKey(modelKeyMatch[1])
+      } catch (err) {
+        const status = err instanceof ModelKeyError ? 400 : 500
+        res.writeHead(status, { 'content-type': 'application/json' }).end(JSON.stringify({ error: err instanceof Error ? err.message : String(err) }))
+        return
+      }
+      res.writeHead(200, { 'content-type': 'application/json' }).end(JSON.stringify({ ok: true }))
       return
     }
     if (req.method === 'GET' && pathname === '/config/gateways') {

package/template/agents/example-agent/index.ts

@@ -12,18 +12,17 @@
 // resolves relative to loopengine's own installed location, not your
 // project, so it only works inside loopengine's own repo — see
 // tools/index.ts's own comment.
-import { createAnthropicModelCall, type AgentConfig, type ModelCall } from 'loopengine'
+import type { AgentConfig } from 'loopengine'
 import { tools } from './tools/index.js'
 
 export const config: AgentConfig = {
   name: 'example-agent',
   systemPrompt: 'You are a helpful assistant.',
   tools,
-}
-
-// Reads ANTHROPIC_API_KEY from the env. Swap for
-// createOpenAIModelCall({ model: '...' }) to use OpenAI instead — see
-// node_modules/loopengine/README.md's "Wiring a real model" section.
-export function createModelCall(): ModelCall {
-  return createAnthropicModelCall({ model: 'claude-sonnet-5' })
+  // Reads OPENAI_API_KEY: set it on the console's Models page, or in .env.
+  // For another provider, change `provider` and `model` (e.g.
+  // { provider: 'anthropic', model: 'claude-sonnet-5' } with
+  // ANTHROPIC_API_KEY). reasoningEffort 'none' lets this gpt-5.x model use
+  // function tools; see AgentModelConfig in loopengine's agent-config.
+  model: { provider: 'openai', model: 'gpt-5.6-luna', reasoningEffort: 'none' },
 }

package/template/package.json

@@ -9,7 +9,7 @@
     "cli": "tsx adapters/cli.ts"
   },
   "dependencies": {
-    "loopengine": "^0.1.73",
+    "loopengine": "^0.1.75",
     "actauth": "^0.0.12"
   },
   "devDependencies": {