loopengine 0.1.62 → 0.1.64

package/dist/web/env-admin.d.ts

@@ -65,31 +65,32 @@ export interface DeclaredEnvVar {
  * live (process.env for a shared row, the agent's own .env file for an
  * agent row), not cached. */
 export declare function listDeclaredEnvVars(agentName: string): DeclaredEnvVar[];
-/** Upserts `NAME=VALUE` into the project's `.env` file and applies it to
- * *this* running process immediately via `process.env`, so a
- * newly-installed ability's tools work without a restart. Callers (the
- * PUT route in adapters/http.ts) are responsible for refusing to call
- * this at all when `LOOPENGINE_ADMIN_AUTH` isn't set — this function
- * itself has no notion of HTTP auth, it just writes. */
-export declare function setEnvVar(name: string, value: string): void;
-/** Removes NAME= entirely from the project's .env file (not just
- * blanking its value — an empty string is itself a real, distinct
- * value some vars would treat differently from "unset," e.g. falling
- * through to a default only when truly absent) and clears it from
- * *this* running process's own process.env immediately, the same
- * "no restart needed" promise setEnvVar already makes. A no-op,
- * not an error, when the var was never set in .env to begin with —
- * the end state ("not set") is identical either way. */
-export declare function unsetEnvVar(name: string): void;
-/** Upserts `NAME=VALUE` into `agentName`'s own agents/<name>/.env — read
- * by that agent's tools through ToolContext.env (core/agent-env.ts),
- * which reads the file fresh on every lookup, so no restart is needed.
+/** Persists a project-wide value through the secret store (the project's
+ * `.env` by default — see core/secret-store.ts) and applies it to *this*
+ * running process immediately via `process.env`, so a newly-installed
+ * ability's tools work without a restart. Callers (the PUT route in
+ * adapters/http.ts) are responsible for refusing to call this at all
+ * when the server has no auth configured — this function itself has no
+ * notion of HTTP auth, it just writes. */
+export declare function setEnvVar(name: string, value: string): Promise<void>;
+/** Removes a project-wide value entirely (not just blanking it — an
+ * empty string is itself a real, distinct value some vars would treat
+ * differently from "unset," e.g. falling through to a default only when
+ * truly absent) and clears it from *this* running process's own
+ * process.env immediately, the same "no restart needed" promise
+ * setEnvVar already makes. A no-op, not an error, when the var was
+ * never set to begin with — the end state ("not set") is identical
+ * either way. */
+export declare function unsetEnvVar(name: string): Promise<void>;
+/** Persists `agentName`'s own value (agents/<name>/.env by default) —
+ * read by that agent's tools through ToolContext.env (core/agent-env.ts),
+ * which reads it fresh on every lookup, so no restart is needed.
  * Deliberately never copied into process.env: that's shared by every
  * agent in the process, which is exactly what a per-agent value must
  * not be. Same auth responsibility for callers as setEnvVar. */
-export declare function setAgentEnvVar(agentName: string, name: string, value: string): void;
-/** Removes NAME= from `agentName`'s own .env — and the legacy prefixed
- * project var for it too (see agentScopedEnvVarName), since createAgentEnv
- * still falls back to that one, and "Remove" on this agent's row should
- * leave the agent with no value of its own either way. */
-export declare function unsetAgentEnvVar(agentName: string, name: string): void;
+export declare function setAgentEnvVar(agentName: string, name: string, value: string): Promise<void>;
+/** Removes `agentName`'s own value — and the legacy prefixed project var
+ * for it too (see agentScopedEnvVarName), since createAgentEnv still
+ * falls back to that one, and "Remove" on this agent's row should leave
+ * the agent with no value of its own either way. */
+export declare function unsetAgentEnvVar(agentName: string, name: string): Promise<void>;

package/dist/web/env-admin.js

@@ -6,10 +6,11 @@
 // `secret` is never echoed back once set — same never-echo-a-secret rule
 // web/http-tool-admin.ts's own `{{ENV_VAR}}` header handling already
 // establishes for a tool's own secrets.
-import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { agentDir } from '../core/gateway-tools.js';
-import { agentEnvFilePath, agentScopedEnvVarName, envScopeOf, readAgentEnvFile } from '../core/agent-env.js';
+import { agentScopedEnvVarName, envScopeOf } from '../core/agent-env.js';
+import { getSecretStore } from '../core/secret-store.js';
 export { agentScopedEnvVarName };
 export class EnvVarNameError extends Error {
 }
@@ -50,7 +51,7 @@ export function listDeclaredEnvVars(agentName) {
     if (!existsSync(path))
         return [];
     const provenance = JSON.parse(readFileSync(path, 'utf8'));
-    const agentValues = readAgentEnvFile(agentDir(agentName));
+    const agentValues = getSecretStore().readAgentValues(agentName, agentDir(agentName));
     const rows = new Map();
     function upsert(slot, abilityName, decl, description) {
         const scope = envScopeOf(decl);
@@ -103,12 +104,10 @@ export function listDeclaredEnvVars(agentName) {
             const scope = envScopeOf(decl);
             if (scope !== 'agent')
                 upsert('shared', abilityName, decl, decl.description);
-            if (scope === 'overridable') {
-                upsert('agent', abilityName, decl, `This agent's own value — if unset, falls back to the shared value.${decl.description ? ` ${decl.description}` : ''}`);
-            }
-            else if (scope === 'agent') {
-                upsert('agent', abilityName, decl, `Set per agent — never shared with or borrowed from other agents.${decl.description ? ` ${decl.description}` : ''}`);
-            }
+            // `slot` and `scope` already say whose value a row is and whether
+            // it falls back, so the agent row keeps the ability's own words.
+            if (scope !== 'shared')
+                upsert('agent', abilityName, decl, decl.description);
         }
     }
     // A name that's `agent`-scoped by any declaring ability is never read
@@ -120,115 +119,52 @@ export function listDeclaredEnvVars(agentName) {
     }
     return [...rows.values()];
 }
-// process.cwd(), matching exactly where bin/cli.ts's own runTsx passes
-// --env-file-if-exists=.env (Node's own --env-file resolves relative to
-// cwd too) — not core/agent-registry.ts's projectDir(), which resolves
-// relative to *that compiled file's own location* and would point at
-// node_modules/loopengine/dist/ in a real scaffolded project, not the
-// project's own root where .env actually lives.
-function envFilePath() {
-    return join(process.cwd(), '.env');
-}
-// Node's own --env-file parser (what bin/cli.ts's runTsx already passes
-// as --env-file-if-exists=.env) needs a value containing whitespace, '#',
-// or a quote character quoted, so it reads back as one value instead of
-// being reinterpreted as a comment or truncated at the first space.
-// Single-quoting wins over double — confirmed live against Node's actual
-// parser that a single-quoted value reads back fully literally, with no
-// backslash-escape processing inside it at all: a real embedded newline,
-// a literal double-quote, or a literal backslash (a JSON secret like
-// GOOGLE_APPLICATION_CREDENTIALS_JSON has all three at once) all survive
-// untouched. Double-quoting a value with an *escaped* embedded quote does
-// NOT round-trip — confirmed live that Node's parser has no support for
-// \" as an escaped literal quote inside a double-quoted value; it just
-// ends the value there instead (`X="a\"b"` reads back as only `a\`,
-// silently dropping `b"` entirely). The double-quote fallback below is
-// only reached when the value itself contains a literal single quote —
-// the one character single-quoting can't represent at all.
-function serializeEnvValue(value) {
-    if (!/[\s#"'\\]/.test(value) && value !== '')
-        return value;
-    if (!value.includes("'"))
-        return `'${value}'`;
-    return `"${value.replace(/\\/g, '\\\\').replace(/"/g, '\\"')}"`;
-}
 function assertEnvVarName(name) {
     if (!ENV_VAR_NAME_PATTERN.test(name)) {
         throw new EnvVarNameError(`"${name}" isn't a valid env var name (uppercase letters, digits, underscore, not starting with a digit).`);
     }
 }
-/** Upserts `NAME=VALUE` into the .env file at `path`, preserving every
- * other line (comments, blank lines, unrelated keys). */
-function upsertEnvFileLine(path, name, value) {
-    const lines = existsSync(path) ? readFileSync(path, 'utf8').split('\n') : [];
-    const newLine = `${name}=${serializeEnvValue(value)}`;
-    const existingIndex = lines.findIndex((line) => line.startsWith(`${name}=`));
-    if (existingIndex === -1) {
-        // Drop a single trailing blank line (from the file's own final
-        // newline splitting into an empty last element) before appending,
-        // so this doesn't accumulate a growing gap of blank lines across
-        // repeated calls.
-        if (lines.length > 0 && lines[lines.length - 1] === '')
-            lines.pop();
-        lines.push(newLine);
-    }
-    else {
-        lines[existingIndex] = newLine;
-    }
-    writeFileSync(path, lines.join('\n') + '\n');
-}
-/** Removes NAME= from the .env file at `path`, if present. Only
- * rewrites the file when something actually changed — a no-op removal
- * shouldn't still touch the file's own mtime/trailing-newline shape for
- * no reason. */
-function removeEnvFileLine(path, name) {
-    if (!existsSync(path))
-        return;
-    const lines = readFileSync(path, 'utf8').split('\n');
-    const filtered = lines.filter((line) => !line.startsWith(`${name}=`));
-    if (filtered.length !== lines.length)
-        writeFileSync(path, filtered.join('\n').replace(/\n*$/, '\n'));
-}
-/** Upserts `NAME=VALUE` into the project's `.env` file and applies it to
- * *this* running process immediately via `process.env`, so a
- * newly-installed ability's tools work without a restart. Callers (the
- * PUT route in adapters/http.ts) are responsible for refusing to call
- * this at all when `LOOPENGINE_ADMIN_AUTH` isn't set — this function
- * itself has no notion of HTTP auth, it just writes. */
-export function setEnvVar(name, value) {
+/** Persists a project-wide value through the secret store (the project's
+ * `.env` by default — see core/secret-store.ts) and applies it to *this*
+ * running process immediately via `process.env`, so a newly-installed
+ * ability's tools work without a restart. Callers (the PUT route in
+ * adapters/http.ts) are responsible for refusing to call this at all
+ * when the server has no auth configured — this function itself has no
+ * notion of HTTP auth, it just writes. */
+export async function setEnvVar(name, value) {
     assertEnvVarName(name);
-    upsertEnvFileLine(envFilePath(), name, value);
+    await getSecretStore().setShared(name, value);
     process.env[name] = value;
 }
-/** Removes NAME= entirely from the project's .env file (not just
- * blanking its value — an empty string is itself a real, distinct
- * value some vars would treat differently from "unset," e.g. falling
- * through to a default only when truly absent) and clears it from
- * *this* running process's own process.env immediately, the same
- * "no restart needed" promise setEnvVar already makes. A no-op,
- * not an error, when the var was never set in .env to begin with —
- * the end state ("not set") is identical either way. */
-export function unsetEnvVar(name) {
+/** Removes a project-wide value entirely (not just blanking it — an
+ * empty string is itself a real, distinct value some vars would treat
+ * differently from "unset," e.g. falling through to a default only when
+ * truly absent) and clears it from *this* running process's own
+ * process.env immediately, the same "no restart needed" promise
+ * setEnvVar already makes. A no-op, not an error, when the var was
+ * never set to begin with — the end state ("not set") is identical
+ * either way. */
+export async function unsetEnvVar(name) {
     assertEnvVarName(name);
-    removeEnvFileLine(envFilePath(), name);
+    await getSecretStore().unsetShared(name);
     delete process.env[name];
 }
-/** Upserts `NAME=VALUE` into `agentName`'s own agents/<name>/.env — read
- * by that agent's tools through ToolContext.env (core/agent-env.ts),
- * which reads the file fresh on every lookup, so no restart is needed.
+/** Persists `agentName`'s own value (agents/<name>/.env by default) —
+ * read by that agent's tools through ToolContext.env (core/agent-env.ts),
+ * which reads it fresh on every lookup, so no restart is needed.
  * Deliberately never copied into process.env: that's shared by every
  * agent in the process, which is exactly what a per-agent value must
  * not be. Same auth responsibility for callers as setEnvVar. */
-export function setAgentEnvVar(agentName, name, value) {
+export async function setAgentEnvVar(agentName, name, value) {
     assertEnvVarName(name);
-    upsertEnvFileLine(agentEnvFilePath(agentDir(agentName)), name, value);
+    await getSecretStore().setAgent(agentName, agentDir(agentName), name, value);
 }
-/** Removes NAME= from `agentName`'s own .env — and the legacy prefixed
- * project var for it too (see agentScopedEnvVarName), since createAgentEnv
- * still falls back to that one, and "Remove" on this agent's row should
- * leave the agent with no value of its own either way. */
-export function unsetAgentEnvVar(agentName, name) {
+/** Removes `agentName`'s own value — and the legacy prefixed project var
+ * for it too (see agentScopedEnvVarName), since createAgentEnv still
+ * falls back to that one, and "Remove" on this agent's row should leave
+ * the agent with no value of its own either way. */
+export async function unsetAgentEnvVar(agentName, name) {
     assertEnvVarName(name);
-    removeEnvFileLine(agentEnvFilePath(agentDir(agentName)), name);
-    unsetEnvVar(agentScopedEnvVarName(agentName, name));
+    await getSecretStore().unsetAgent(agentName, agentDir(agentName), name);
+    await unsetEnvVar(agentScopedEnvVarName(agentName, name));
 }

package/dist/web/global-config-page.js

@@ -20,67 +20,19 @@
 // hazard (template-literal escapes run twice: once when this constant
 // is built, once when a browser parses the served <script> as JS).
 import { devUiCss } from './dev-ui-styles.js';
+import { consoleShellScript, consoleSidebarHtml } from './console-shell.js';
 export const globalConfigPageHtml = `<!doctype html>
 <html lang="en">
 <head>
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1">
-<title>LoopEngine Config</title>
+<title>LoopEngine Settings</title>
 <style>${devUiCss}
-  body {
-    display: flex;
-    flex-direction: column;
-    height: 100vh;
-  }
-  .layout { flex: 1; display: flex; min-height: 0; }
-  nav.sidebar {
-    width: 180px;
-    flex-shrink: 0;
-    border-right: 1px solid light-dark(#ddd, #333);
-    padding: 6px;
-  }
-  nav.sidebar button, nav.sidebar a {
-    display: block;
-    width: 100%;
-    text-align: left;
-    background: none;
-    border: none;
-    border-radius: 6px;
-    padding: 8px 10px;
-    font-size: 13px;
-    cursor: pointer;
-    text-decoration: none;
-    color: inherit;
-    box-sizing: border-box;
-  }
-  nav.sidebar button:hover, nav.sidebar a:hover { background: light-dark(#eee, #26262b); }
-  nav.sidebar button.active { background: light-dark(#dbeafe, #1e3a5f); font-weight: 600; }
-  main {
-    flex: 1;
-    overflow-y: auto;
-    padding: 20px 28px;
-  }
-  h2 { font-size: 20px; margin: 0 0 4px; font-family: ui-monospace, monospace; }
-  section { margin-bottom: 22px; }
-  section h3 {
-    font-size: 12px;
-    text-transform: uppercase;
-    letter-spacing: 0.04em;
-    color: light-dark(#666, #999);
-    margin: 0 0 8px;
-    border-bottom: 1px solid light-dark(#eee, #2a2a2e);
-    padding-bottom: 4px;
-  }
-  table { width: 100%; border-collapse: collapse; font-size: 12px; }
-  th, td {
-    text-align: left;
-    padding: 6px 8px;
-    border-bottom: 1px solid light-dark(#eee, #2a2a2e);
-    vertical-align: top;
-  }
-  th { color: light-dark(#666, #999); font-weight: 600; }
+  section { margin-bottom: 28px; }
+  section h3 { font-size: 15px; font-weight: 600; margin: 0 0 10px; }
+  section > table { border: 1px solid var(--line); border-radius: var(--radius); border-collapse: separate; border-spacing: 0; overflow: hidden; }
   .source {
-    border: 1px solid light-dark(#ddd, #3a3a3e);
+    border: 1px solid var(--line);
     border-radius: 8px;
     padding: 12px 14px;
     margin-bottom: 10px;
@@ -88,10 +40,10 @@ export const globalConfigPageHtml = `<!doctype html>
   .source.unsupported { opacity: 0.6; }
   .source-head { display: flex; align-items: center; justify-content: space-between; gap: 10px; }
   .source-head h4 { margin: 0; font-size: 14px; font-family: ui-monospace, monospace; }
-  .hint { font-size: 11px; color: light-dark(#666, #999); }
+  .hint { font-size: 11px; color: var(--ink-muted); }
   pre {
-    background: light-dark(#fff, #26262b);
-    border: 1px solid light-dark(#ddd, #3a3a3e);
+    background: var(--bg);
+    border: 1px solid var(--line);
     border-radius: 6px;
     padding: 8px 10px;
     font-size: 12px;
@@ -105,36 +57,30 @@ export const globalConfigPageHtml = `<!doctype html>
      this pink-for-destructive convention is meant to drift between them. */
   .delete-btn {
     font-size: 12px;
-    color: light-dark(#991b1b, #f87171);
-    background: light-dark(#fee2e2, #3a1f1f);
-    border-color: light-dark(#f3b4b4, #6b3232);
+    color: var(--bad);
+    background: var(--bad-soft);
+    border-color: var(--bad);
   }
-  .delete-btn:hover { background: light-dark(#fecaca, #4a1f1f); }
+  .delete-btn:hover { background: var(--bad-soft); }
 </style>
 </head>
-<body>
-<nav class="topnav">
-  <a href="/agents">Agents</a>
-  <a href="/agents/config" class="active">Config</a>
-  <a href="/playground">Playground</a>
-</nav>
-<div class="layout">
-<nav class="sidebar">
-  <a href="/agents/config">Agents</a>
-  <button class="section-btn active" data-section="models">Models</button>
-  <button class="section-btn" data-section="gateways">Gateways</button>
-</nav>
-<main>
-  <div class="section-panel" data-section-panel="models">
-    <h2>Models</h2>
-    <div id="modelsContent"><p class="hint">Loading&hellip;</p></div>
+<body data-le-page="config">
+<div class="le-app">
+${consoleSidebarHtml}
+<main class="le-main">
+  <div class="section-panel" data-section-panel="models" style="display:contents">
+    <div class="le-head plain"><div class="le-title"><button type="button" class="le-menu-btn" data-le-menu aria-label="Open navigation">&#9776;</button>
+      <div><h1>Models</h1><p>Which model providers have an API key set, and which agents use each one.</p></div></div></div>
+    <div class="le-scroll"><div class="le-page" style="display:block"><div id="modelsContent"><p class="hint">Loading&hellip;</p></div></div></div>
   </div>
   <div class="section-panel" data-section-panel="gateways" style="display:none">
-    <h2>Gateways</h2>
-    <div id="gatewaysContent"><p class="hint">Loading&hellip;</p></div>
+    <div class="le-head plain"><div class="le-title"><button type="button" class="le-menu-btn" data-le-menu aria-label="Open navigation">&#9776;</button>
+      <div><h1>Integrations</h1><p>Outside tool sources (such as Composio) that agents can add tools from.</p></div></div></div>
+    <div class="le-scroll"><div class="le-page" style="display:block"><div id="gatewaysContent"><p class="hint">Loading&hellip;</p></div></div></div>
   </div>
 </main>
 </div>
+${consoleShellScript}
 <script>
 (function () {
   var main = document.querySelector('main');
@@ -279,7 +225,7 @@ export const globalConfigPageHtml = `<!doctype html>
     }
     var panels = main.querySelectorAll('.section-panel');
     for (var j = 0; j < panels.length; j++) {
-      panels[j].style.display = panels[j].dataset.sectionPanel === section ? 'block' : 'none';
+      panels[j].style.display = panels[j].dataset.sectionPanel === section ? 'contents' : 'none';
     }
     if (section === 'models' && !loadedSections.models) loadModels();
     if (section === 'gateways' && !loadedSections.gateways) loadGateways();