loopengine 0.1.57 → 0.1.58

package/dist/core/system-skills/system-skills/composio-large-outputs/SKILL.md

@@ -0,0 +1,25 @@
+---
+name: composio-large-outputs
+description: How to retrieve a gateway tool's real output when its result says storedInFile is true instead of returning the data inline.
+---
+
+# Gateway tools with a large result
+
+Some gateway tools (Composio-sourced ones in particular) return a small
+pointer object instead of their real output when the actual result is
+too large to return inline:
+
+```
+{
+  "successful": true,
+  "storedInFile": true,
+  "tokenCount": 10234,
+  "outputFilePath": "/tmp/.../SOME_TOOL_OUTPUT_xxxxx.json"
+}
+```
+
+When you see `storedInFile: true` in a tool result, the real data is
+**not** in that object — it's in the file at `outputFilePath`. Call
+`system_read_file` with that exact path to retrieve the actual content
+before answering. Don't guess at an answer, summarize from the pointer
+alone, or claim you don't have the data — read the file first.

package/dist/index.d.ts

@@ -55,7 +55,7 @@ export { globalConfigPageHtml } from './web/global-config-page.js';
 export { playgroundHtml } from './web/playground.js';
 export { readSkill, writeSkill, deleteSkill, SkillInvalidIdError, SkillNotFoundError } from './web/skills-admin.js';
 export type { SkillContent } from './web/skills-admin.js';
-export { listDeclaredEnvVars, setEnvVar, EnvVarNameError } from './web/env-admin.js';
+export { listDeclaredEnvVars, setEnvVar, unsetEnvVar, EnvVarNameError } from './web/env-admin.js';
 export type { DeclaredEnvVar } from './web/env-admin.js';
 export { readActauthConfig, addActauthRule, updateActauthRule, removeActauthRule, setDefaultDecision, ActauthRuleExistsError, ActauthRuleNotFoundError, } from './web/actauth-admin.js';
 export type { ActauthRuleInput, ActauthConfigView } from './web/actauth-admin.js';

package/dist/index.js

@@ -50,7 +50,7 @@ export { agentsListPageHtml } from './web/agents-list-page.js';
 export { globalConfigPageHtml } from './web/global-config-page.js';
 export { playgroundHtml } from './web/playground.js';
 export { readSkill, writeSkill, deleteSkill, SkillInvalidIdError, SkillNotFoundError } from './web/skills-admin.js';
-export { listDeclaredEnvVars, setEnvVar, EnvVarNameError } from './web/env-admin.js';
+export { listDeclaredEnvVars, setEnvVar, unsetEnvVar, EnvVarNameError } from './web/env-admin.js';
 export { readActauthConfig, addActauthRule, updateActauthRule, removeActauthRule, setDefaultDecision, ActauthRuleExistsError, ActauthRuleNotFoundError, } from './web/actauth-admin.js';
 export { installAbility, upgradeAbility, listInstalledAbilities, backfillDependencies, AbilityManifestError, AbilityVersionError, AbilityCollisionError, AbilityAlreadyInstalledError, AbilityNotInstalledError, } from './bin/ability-manager.js';
 export { searchPublicAbilities, fetchLatestAbilityVersion } from './web/abilities-admin.js';

package/dist/web/agents-config-page.js

@@ -1202,6 +1202,14 @@ export const agentsConfigPageHtml = `<!doctype html>
       : v.multiline
         ? '<textarea name="value" rows="8" placeholder="' + (v.set ? 'unchanged unless you paste a new value' : 'paste the full value') + '" required></textarea>'
         : '<input type="' + (v.secret ? 'password' : 'text') + '" name="value" placeholder="' + (v.set ? 'unchanged unless you type a new value' : 'value') + '" required>';
+    // Only offered once something is actually set — removing what's
+    // already absent has nothing to do, and the button would just be
+    // clutter for every var an operator hasn't touched yet (most of
+    // them, on a freshly installed ability — see renderEnvConfigHtml's
+    // own comment on why "not set" isn't itself treated as a problem).
+    var removeHtml = v.set
+      ? ' <button type="button" class="env-var-remove" data-name="' + escapeHtml(v.name) + '">Remove</button>'
+      : '';
     return '<tr>' +
       '<td><code>' + escapeHtml(v.name) + '</code>' + sharedNote + '</td>' +
       '<td style="max-width:320px">' + escapeHtml(v.description || '') + '</td>' +
@@ -1209,7 +1217,7 @@ export const agentsConfigPageHtml = `<!doctype html>
       '<td><form class="add-source env-var-form" data-name="' + escapeHtml(v.name) + '">' +
         fieldHtml +
         '<button type="submit">Save</button>' +
-      '</form></td>' +
+      '</form>' + removeHtml + '</td>' +
       '</tr>';
   }
 
@@ -1291,6 +1299,29 @@ export const agentsConfigPageHtml = `<!doctype html>
           });
       });
     }
+    var removeButtons = content.querySelectorAll('.env-var-remove');
+    for (var j = 0; j < removeButtons.length; j++) {
+      removeButtons[j].addEventListener('click', function (ev) {
+        var btn = ev.currentTarget;
+        var varName = btn.getAttribute('data-name');
+        // A destructive action (clearing a configured value, possibly a
+        // secret nothing else has a copy of) gets the one confirm() this
+        // whole tab uses — every other action here is a plain upsert,
+        // nothing else to lose by clicking it again.
+        if (!confirm('Remove ' + varName + '? Any tool/ability relying on it falls back to its own default (if it has one) or starts failing until it\'s set again.')) return;
+        btn.disabled = true;
+        fetch('/agents/' + encodeURIComponent(name) + '/env/' + encodeURIComponent(varName), { method: 'DELETE' })
+          .then(function (r) { return r.json().then(function (j) { return { ok: r.ok, body: j }; }); })
+          .then(function (result) {
+            if (!result.ok) throw new Error(result.body.error || 'request failed');
+            loadEnvTab(name);
+          })
+          .catch(function (err) {
+            alert('Could not remove value: ' + err.message);
+            btn.disabled = false;
+          });
+      });
+    }
   }
 
   function applyEnvConfig(name, vars) {

package/dist/web/env-admin.d.ts

@@ -57,3 +57,15 @@ export declare function listDeclaredEnvVars(agentName: string): DeclaredEnvVar[]
  * call this at all when `LOOPENGINE_ADMIN_AUTH` isn't set — this
  * function itself has no notion of HTTP auth, it just writes. */
 export declare function setEnvVar(name: string, value: string): void;
+/** Removes NAME= entirely from the project's .env file (not just
+ * blanking its value — an empty string is itself a real, distinct
+ * value some vars would treat differently from "unset," e.g. falling
+ * through to a default only when truly absent) and clears it from
+ * *this* running process's own process.env immediately, the same
+ * "no restart needed" promise setEnvVar already makes. A no-op,
+ * not an error, when the var was never set in .env to begin with —
+ * same reasoning the DELETE route calling this treats a missing name
+ * as success rather than a 404: the end state ("not set") is identical
+ * either way, and the caller has no way to distinguish "I removed it"
+ * from "it was already gone" that would actually matter to them. */
+export declare function unsetEnvVar(name: string): void;

package/dist/web/env-admin.js

@@ -134,3 +134,31 @@ export function setEnvVar(name, value) {
     writeFileSync(path, lines.join('\n') + '\n');
     process.env[name] = value;
 }
+/** Removes NAME= entirely from the project's .env file (not just
+ * blanking its value — an empty string is itself a real, distinct
+ * value some vars would treat differently from "unset," e.g. falling
+ * through to a default only when truly absent) and clears it from
+ * *this* running process's own process.env immediately, the same
+ * "no restart needed" promise setEnvVar already makes. A no-op,
+ * not an error, when the var was never set in .env to begin with —
+ * same reasoning the DELETE route calling this treats a missing name
+ * as success rather than a 404: the end state ("not set") is identical
+ * either way, and the caller has no way to distinguish "I removed it"
+ * from "it was already gone" that would actually matter to them. */
+export function unsetEnvVar(name) {
+    if (!ENV_VAR_NAME_PATTERN.test(name)) {
+        throw new EnvVarNameError(`"${name}" isn't a valid env var name (uppercase letters, digits, underscore, not starting with a digit).`);
+    }
+    const path = envFilePath();
+    if (existsSync(path)) {
+        const lines = readFileSync(path, 'utf8').split('\n');
+        const filtered = lines.filter((line) => !line.startsWith(`${name}=`));
+        // Only rewrites the file when something actually changed — a
+        // no-op removal shouldn't still touch the file's own mtime/trailing-
+        // newline shape for no reason. Matches setEnvVar's own exactly-one-
+        // trailing-newline convention when it does.
+        if (filtered.length !== lines.length)
+            writeFileSync(path, filtered.join('\n').replace(/\n*$/, '\n'));
+    }
+    delete process.env[name];
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "loopengine",
-  "version": "0.1.57",
+  "version": "0.1.58",
   "type": "module",
   "description": "Runtime for tool-using AI agents with a transparent ReAct loop.",
   "license": "MIT",