loopengine 0.1.36 → 0.1.37

package/dist/web/agents-config-page.js

@@ -1138,10 +1138,21 @@ export const agentsConfigPageHtml = `<!doctype html>
     var sharedNote = v.abilityNames.length > 1
       ? ' <span class="hint" title="Also declared by: ' + escapeHtml(v.abilityNames.join(', ')) + '. There is only one value for it project-wide, so check whether they actually need the same one.">(shared)</span>'
       : '';
+    // A secret's value is never sent to the browser at all (see
+    // env-admin.ts) — "set" is the most this tab can ever say about one.
+    // A non-secret var's actual value comes through, so show it instead
+    // of a bare "set", since the whole point of looking here is usually
+    // to check *what* something is currently configured to, not just
+    // whether it has a value.
+    var statusHtml = !v.set
+      ? '<span class="error">not set</span>'
+      : v.secret
+        ? '<span class="hint">set</span>'
+        : '<code>' + escapeHtml(v.value || '') + '</code>';
     return '<tr>' +
       '<td><code>' + escapeHtml(v.name) + '</code>' + sharedNote + '</td>' +
       '<td style="max-width:320px">' + escapeHtml(v.description || '') + '</td>' +
-      '<td>' + (v.set ? '<span class="hint">set</span>' : '<span class="error">not set</span>') + '</td>' +
+      '<td>' + statusHtml + '</td>' +
       '<td><form class="add-source env-var-form" data-name="' + escapeHtml(v.name) + '">' +
         '<input type="' + (v.secret ? 'password' : 'text') + '" name="value" placeholder="' + (v.set ? 'unchanged unless you type a new value' : 'value') + '" required>' +
         '<button type="submit">Save</button>' +
@@ -1163,7 +1174,7 @@ export const agentsConfigPageHtml = `<!doctype html>
     var rows = vars.map(renderEnvRow).join('');
     return '<div class="source">' +
       '<div class="source-head"><h4>' + escapeHtml(abilityName) + '</h4>' + statusHtml + '</div>' +
-      '<table><thead><tr><th>Name</th><th style="max-width:320px">Description</th><th>Status</th><th>Set value</th></tr></thead><tbody>' + rows + '</tbody></table>' +
+      '<table><thead><tr><th>Name</th><th style="max-width:320px">Description</th><th>Current value</th><th>Set value</th></tr></thead><tbody>' + rows + '</tbody></table>' +
       '</div>';
   }
 

package/dist/web/env-admin.d.ts

@@ -9,6 +9,11 @@ export interface DeclaredEnvVar {
      * an array, not a single name. */
     abilityNames: string[];
     set: boolean;
+    /** The live value, but only when `secret` is false — a secret is never
+     * echoed back once set, same rule this file's own top comment and
+     * web/http-tool-admin.ts's `{{ENV_VAR}}` header handling already
+     * follow. Undefined whenever `secret` is true or `set` is false. */
+    value?: string;
 }
 /** Every env var any ability installed for `agentName` declared it
  * needs, merged by name. There's one .env per *project*, not per agent

package/dist/web/env-admin.js

@@ -1,9 +1,11 @@
 // Backs the Admin UI's "Environment" section — every env var an ability
 // (see ABILITIES.md, bin/ability-manager.ts) declared as required,
 // across every ability installed for an agent, with set/not-set status
-// only. A value marked `secret` is never echoed back once set — same
-// never-echo-a-secret rule web/http-tool-admin.ts's own `{{ENV_VAR}}`
-// header handling already establishes for a tool's own secrets.
+// and, for a non-secret var, its live value (so an operator can actually
+// tell what's configured, not just that something is). A value marked
+// `secret` is never echoed back once set — same never-echo-a-secret rule
+// web/http-tool-admin.ts's own `{{ENV_VAR}}` header handling already
+// establishes for a tool's own secrets.
 import { existsSync, readFileSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { agentDir } from '../core/gateway-tools.js';
@@ -51,14 +53,18 @@ export function listDeclaredEnvVars(agentName) {
             if (existing) {
                 existing.abilityNames.push(abilityName);
                 existing.secret = existing.secret || decl.secret === true;
+                if (existing.secret)
+                    existing.value = undefined;
                 continue;
             }
+            const rawValue = process.env[decl.name];
             byName.set(decl.name, {
                 name: decl.name,
                 description: decl.description,
                 secret: decl.secret === true,
                 abilityNames: [abilityName],
-                set: process.env[decl.name] !== undefined,
+                set: rawValue !== undefined,
+                value: decl.secret === true ? undefined : rawValue,
             });
         }
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "loopengine",
-  "version": "0.1.36",
+  "version": "0.1.37",
   "type": "module",
   "description": "Runtime for tool-using AI agents with a transparent ReAct loop.",
   "license": "MIT",