loopengine 0.1.95 → 0.1.97

package/dist/index.d.ts

@@ -21,7 +21,7 @@ export { parseSlackEvent, createSlackConnector, verifySlackRequest, parseSlackIn
 export { createDecisionToken, verifyDecisionToken, decidePath, decideLinkMaker, decisionLinkTtlMs, type DecisionKind } from '#core/approval-links.js';
 export { renderDecidePage, renderDecideGonePage, renderDecideInvalidPage, type DecidePageItem } from './web/decide-page.js';
 export { sendTestWebhook } from '#core/http-notify-triggers/webhook.js';
-export { describeAgentNotifier, saveAgentNotifier, removeAgentNotifier, testAgentNotifier, listAgentPending, slackCredentialsFor, slackConversationsOn, slackClickAllowed, agentApprovers, setAgentApprovers, listAgentSlackMembers, listAgentSlackChannels, announceToNotifier, type DefaultWebhook } from './web/notifier-admin.js';
+export { describeAgentNotifier, saveAgentNotifier, removeAgentNotifier, setAgentPrimaryNotifier, testAgentNotifier, listAgentPending, slackCredentialsFor, slackConversationsOn, slackClickAllowed, agentApprovers, setAgentApprovers, listAgentSlackMembers, listAgentSlackChannels, announceToNotifier, type DefaultWebhook } from './web/notifier-admin.js';
 export type * from './core/loop-events.js';
 export { streamMessage, streamMessageWithCallbacks, sendMessage, approveCall, denyCall, answerQuestion, getSessionHistory, } from './core/client.js';
 export type { RequestOptions, SendMessageResult, PendingApprovalResult, PendingQuestionResult, PendingResult, MessageResult, StreamMessageCallbacks, } from './core/client.js';
@@ -45,6 +45,10 @@ export { createGlmModelCall } from './core/model-calls/glm-model-call.js';
 export type { GlmModelCallOptions } from './core/model-calls/glm-model-call.js';
 export { createGeminiModelCall } from './core/model-calls/gemini-model-call.js';
 export type { GeminiModelCallOptions } from './core/model-calls/gemini-model-call.js';
+export { createXaiModelCall } from './core/model-calls/xai-model-call.js';
+export type { XaiModelCallOptions } from './core/model-calls/xai-model-call.js';
+export { createMetaModelCall } from './core/model-calls/meta-model-call.js';
+export type { MetaModelCallOptions } from './core/model-calls/meta-model-call.js';
 export { discoverAgents, loadAgentModule, synthesizeCreateModelCall } from './core/discover-agents.js';
 export type { AgentModule } from './core/discover-agents.js';
 export { agentAsTool } from './core/agent-as-tool.js';
@@ -74,8 +78,12 @@ export { interviewPageHtml } from './web/interview-page.js';
 export { InterviewError, answerInterview, createFromCandidate, createAgentFromCandidate, describeCandidate, deleteInterview, finishInterview, getInterview, interviewTools, listInterviews, pickAgentModel, pickInterviewModel, previewCandidate, startInterview, setInterviewProject, setupChecklist, type Interview, type InterviewAgentSource, type CandidatePreview, type CreatedAgent, type ChecklistItem, type CreateDeps, } from './web/interview-admin.js';
 export { runInterviewTurn, rankCandidates, validateCandidate, INTERVIEWER_PROMPT, type AgentCandidate, type InterviewStage } from './core/system-agents/interviewer.js';
 export { templatesPageHtml } from './web/templates-page.js';
-export { TemplateError, createFromTemplate, describeTemplateSchedule, listTemplates, previewTemplate, templateChecklist, type CreatedTemplateAgent, type LegacyTemplateCreateDeps, type TemplateChecklistItem, type TemplateCreateDeps, type TemplatePreview, type TemplateSummary, } from './web/templates-admin.js';
+export { TemplateError, createFromTemplate, createFromTemplateObject, describeTemplateSchedule, listTemplates, previewTemplate, templateChecklist, type CreatedTemplateAgent, type LegacyTemplateCreateDeps, type TemplateChecklistItem, type TemplateCreateDeps, type TemplatePreview, type TemplateSummary, } from './web/templates-admin.js';
 export { STARTER_TEMPLATES, starterTemplate, templateScheduleStart, type StarterTemplate, type TemplateRule, type TemplateSchedule, type TemplateSetup, type TemplateSkill, } from './core/system-agents/templates.js';
+export { workflowPageHtml } from './web/workflow-page.js';
+export { WorkflowError, checkWorkflowForAgent, createWorkflow, forgetWorkflow, getPlanJob, listAgentWorkflows, planWorkflow, resolveConnections, runWorkflowNow, startPlanJob, type AgentWorkflowView, type CreatedWorkflow, type PlanJob, type PlannedWorkflow, type WorkflowAgentInfo, type WorkflowCheck, type WorkflowConflict, type WorkflowCreateDeps, } from './web/workflow-admin.js';
+export { WORKFLOW_PLANNER_PROMPT, planWorkflowWithModel, validateWorkflowPlan, workflowTemplate, type WorkflowPlan, type WorkflowPlannerTools, type WorkflowStep } from './core/system-agents/workflow-planner.js';
+export { readWorkflows, removeWorkflow, saveWorkflow, type WorkflowRecord } from './core/workflows.js';
 export { globalConfigPageHtml } from './web/global-config-page.js';
 export { playgroundHtml } from './web/playground.js';
 export { readSkill, writeSkill, deleteSkill, SkillInvalidIdError, SkillNotFoundError } from './web/skills-admin.js';
@@ -88,10 +96,16 @@ export { installAbility, upgradeAbility, removeAbility, listInstalledAbilities,
 export type { InstalledAbilityRecord, AbilityEnvDecl, UpgradeFileResult } from './bin/ability-manager.js';
 export { searchPublicAbilities, fetchLatestAbilityVersion } from './web/abilities-admin.js';
 export type { PublicAbilitySearchResult } from './web/abilities-admin.js';
-export { describeModelProviders, describeGateways, setModelProviderKey, clearModelProviderKey, ModelKeyError, describeTimeZone, setWorkspaceTimeZone, TimeZoneError } from './web/global-config.js';
+export { AbilitySourceError, abilityOrigin, readAbilitySources, saveAbilitySource, removeAbilitySource, listSourceAbilities, sourceTokenVar, type AbilitySource, type SourceAbility, type AbilityOrigin } from './core/ability-sources.js';
+export { describeAbilitySources, listPrivateAbilities, saveAbilitySourceFromConsole, removeAbilitySourceFromConsole } from './web/ability-sources-admin.js';
+export { readAbilityDetails, readToolDefinitions, type AbilityDetails } from './core/ability-details.js';
+export { abilityDetails } from './web/ability-details-admin.js';
+export { WorkspaceAbilityError, listWorkspaceAbilities, addWorkspaceAbility, removeWorkspaceAbility, workspaceAbilitiesDir, type WorkspaceAbility } from './core/workspace-abilities.js';
+export { installWorkspaceAbility, installUploadedAbility, MAX_UPLOAD_BYTES, type AbilityUpload } from './web/workspace-abilities-admin.js';
+export { describeModelProviders, describeGateways, setModelProviderKey, clearModelProviderKey, listProviderModels, ModelKeyError, describeTimeZone, setWorkspaceTimeZone, TimeZoneError } from './web/global-config.js';
 export { loopengineVersion } from './core/version.js';
 export { describeUpgrade, runUpgrade, UpgradeError } from './web/upgrade-admin.js';
-export type { ModelProviderInfo, AgentModelUsage, ModelsView, GatewayProviderInfo, GatewaysView, TimeZoneView } from './web/global-config.js';
+export type { ModelProviderInfo, AgentModelUsage, ModelsView, ProviderModelsView, GatewayProviderInfo, GatewaysView, TimeZoneView } from './web/global-config.js';
 export { workspaceTimeZone, serverTimeZone, isValidTimeZone, TIME_ZONE_ENV } from '#core/time-zone.js';
 export { createTrackedApprover, listApprovals, decideApproval, findApproval } from './web/web-approver.js';
 export { scaffoldAgent, scaffoldSubagent, AgentNameError, AgentExistsError, AgentNotFoundError, AgentModelError } from './bin/cli.js';

package/dist/index.js

@@ -22,7 +22,7 @@ export { parseSlackEvent, createSlackConnector, verifySlackRequest, parseSlackIn
 export { createDecisionToken, verifyDecisionToken, decidePath, decideLinkMaker, decisionLinkTtlMs } from '#core/approval-links.js';
 export { renderDecidePage, renderDecideGonePage, renderDecideInvalidPage } from './web/decide-page.js';
 export { sendTestWebhook } from '#core/http-notify-triggers/webhook.js';
-export { describeAgentNotifier, saveAgentNotifier, removeAgentNotifier, testAgentNotifier, listAgentPending, slackCredentialsFor, slackConversationsOn, slackClickAllowed, agentApprovers, setAgentApprovers, listAgentSlackMembers, listAgentSlackChannels, announceToNotifier } from './web/notifier-admin.js';
+export { describeAgentNotifier, saveAgentNotifier, removeAgentNotifier, setAgentPrimaryNotifier, testAgentNotifier, listAgentPending, slackCredentialsFor, slackConversationsOn, slackClickAllowed, agentApprovers, setAgentApprovers, listAgentSlackMembers, listAgentSlackChannels, announceToNotifier } from './web/notifier-admin.js';
 // The framework-agnostic browser client for adapters/http.ts's own wire
 // protocol (see client.ts's own header comment) — this, not a deep
 // subpath import, is how a consumer's React/Vue/etc. chat UI is meant to
@@ -40,6 +40,8 @@ export { createDeepSeekModelCall } from './core/model-calls/deepseek-model-call.
 export { createKimiModelCall } from './core/model-calls/kimi-model-call.js';
 export { createGlmModelCall } from './core/model-calls/glm-model-call.js';
 export { createGeminiModelCall } from './core/model-calls/gemini-model-call.js';
+export { createXaiModelCall } from './core/model-calls/xai-model-call.js';
+export { createMetaModelCall } from './core/model-calls/meta-model-call.js';
 export { discoverAgents, loadAgentModule, synthesizeCreateModelCall } from './core/discover-agents.js';
 export { agentAsTool } from './core/agent-as-tool.js';
 // Everything below backs the Admin UI (agents-config/list/global-config
@@ -69,8 +71,12 @@ export { interviewPageHtml } from './web/interview-page.js';
 export { InterviewError, answerInterview, createFromCandidate, createAgentFromCandidate, describeCandidate, deleteInterview, finishInterview, getInterview, interviewTools, listInterviews, pickAgentModel, pickInterviewModel, previewCandidate, startInterview, setInterviewProject, setupChecklist, } from './web/interview-admin.js';
 export { runInterviewTurn, rankCandidates, validateCandidate, INTERVIEWER_PROMPT } from './core/system-agents/interviewer.js';
 export { templatesPageHtml } from './web/templates-page.js';
-export { TemplateError, createFromTemplate, describeTemplateSchedule, listTemplates, previewTemplate, templateChecklist, } from './web/templates-admin.js';
+export { TemplateError, createFromTemplate, createFromTemplateObject, describeTemplateSchedule, listTemplates, previewTemplate, templateChecklist, } from './web/templates-admin.js';
 export { STARTER_TEMPLATES, starterTemplate, templateScheduleStart, } from './core/system-agents/templates.js';
+export { workflowPageHtml } from './web/workflow-page.js';
+export { WorkflowError, checkWorkflowForAgent, createWorkflow, forgetWorkflow, getPlanJob, listAgentWorkflows, planWorkflow, resolveConnections, runWorkflowNow, startPlanJob, } from './web/workflow-admin.js';
+export { WORKFLOW_PLANNER_PROMPT, planWorkflowWithModel, validateWorkflowPlan, workflowTemplate } from './core/system-agents/workflow-planner.js';
+export { readWorkflows, removeWorkflow, saveWorkflow } from './core/workflows.js';
 export { globalConfigPageHtml } from './web/global-config-page.js';
 export { playgroundHtml } from './web/playground.js';
 export { readSkill, writeSkill, deleteSkill, SkillInvalidIdError, SkillNotFoundError } from './web/skills-admin.js';
@@ -78,7 +84,15 @@ export { listDeclaredEnvVars, setEnvVar, unsetEnvVar, setAgentEnvVar, unsetAgent
 export { readActauthConfig, addActauthRule, updateActauthRule, removeActauthRule, setDefaultDecision, ActauthRuleExistsError, ActauthRuleNotFoundError, } from './web/actauth-admin.js';
 export { installAbility, upgradeAbility, removeAbility, listInstalledAbilities, backfillDependencies, AbilityManifestError, AbilityVersionError, AbilityCollisionError, AbilityAlreadyInstalledError, AbilityNotInstalledError, } from './bin/ability-manager.js';
 export { searchPublicAbilities, fetchLatestAbilityVersion } from './web/abilities-admin.js';
-export { describeModelProviders, describeGateways, setModelProviderKey, clearModelProviderKey, ModelKeyError, describeTimeZone, setWorkspaceTimeZone, TimeZoneError } from './web/global-config.js';
+// Private ability sources, the workspace's own abilities and each
+// ability's details: the console's Abilities page and agent Abilities tab.
+export { AbilitySourceError, abilityOrigin, readAbilitySources, saveAbilitySource, removeAbilitySource, listSourceAbilities, sourceTokenVar } from './core/ability-sources.js';
+export { describeAbilitySources, listPrivateAbilities, saveAbilitySourceFromConsole, removeAbilitySourceFromConsole } from './web/ability-sources-admin.js';
+export { readAbilityDetails, readToolDefinitions } from './core/ability-details.js';
+export { abilityDetails } from './web/ability-details-admin.js';
+export { WorkspaceAbilityError, listWorkspaceAbilities, addWorkspaceAbility, removeWorkspaceAbility, workspaceAbilitiesDir } from './core/workspace-abilities.js';
+export { installWorkspaceAbility, installUploadedAbility, MAX_UPLOAD_BYTES } from './web/workspace-abilities-admin.js';
+export { describeModelProviders, describeGateways, setModelProviderKey, clearModelProviderKey, listProviderModels, ModelKeyError, describeTimeZone, setWorkspaceTimeZone, TimeZoneError } from './web/global-config.js';
 export { loopengineVersion } from './core/version.js';
 export { describeUpgrade, runUpgrade, UpgradeError } from './web/upgrade-admin.js';
 export { workspaceTimeZone, serverTimeZone, isValidTimeZone, TIME_ZONE_ENV } from '#core/time-zone.js';

package/dist/web/ability-details-admin.d.ts

@@ -0,0 +1,17 @@
+import { type AbilityDetails, type Decision } from '../core/ability-details.js';
+export interface AbilityDetailsView extends AbilityDetails {
+    tools: Array<AbilityDetails['tools'][number] & {
+        agentDecision?: Decision;
+    }>;
+    /** Set when the permissions shown are this agent's own. */
+    agent?: string;
+}
+/** What the ability at `spec` can do. A local folder (file:) is read in
+ * place, fresh each time; anything else is fetched like an install would
+ * (a private source's token included) and cached for ten minutes. With
+ * `agent`, each tool also carries that agent's current decision: its
+ * first rule for the tool, else its default. */
+export declare function abilityDetails(spec: string, options?: {
+    agent?: string;
+    fetchDir?: (spec: string) => Promise<string>;
+}): Promise<AbilityDetailsView>;

package/dist/web/ability-details-admin.js

@@ -0,0 +1,45 @@
+// Backs the console's ability details: what an ability can do (its tools,
+// what each one does and its permission, and its skills), for one found
+// on npm or in a private source, or one already installed in an agent.
+import { rmSync } from 'node:fs';
+import { dirname } from 'node:path';
+import { fetchAbilityDirAsync } from '../bin/ability-manager.js';
+import { readAbilityDetails } from '../core/ability-details.js';
+import { readActauthConfig } from './actauth-admin.js';
+const TTL_MS = 10 * 60 * 1000;
+const cache = new Map();
+/** What the ability at `spec` can do. A local folder (file:) is read in
+ * place, fresh each time; anything else is fetched like an install would
+ * (a private source's token included) and cached for ten minutes. With
+ * `agent`, each tool also carries that agent's current decision: its
+ * first rule for the tool, else its default. */
+export async function abilityDetails(spec, options = {}) {
+    let details;
+    if (spec.startsWith('file:')) {
+        details = readAbilityDetails(spec.slice('file:'.length));
+    }
+    else {
+        const cached = cache.get(spec);
+        if (cached && Date.now() - cached.at < TTL_MS) {
+            details = cached.details;
+        }
+        else {
+            const dir = await (options.fetchDir ?? fetchAbilityDirAsync)(spec);
+            try {
+                details = readAbilityDetails(dir);
+            }
+            finally {
+                rmSync(dirname(dir), { recursive: true, force: true });
+            }
+            cache.set(spec, { at: Date.now(), details });
+        }
+    }
+    if (!options.agent)
+        return details;
+    const { rules, defaultDecision } = readActauthConfig(options.agent);
+    return {
+        ...details,
+        agent: options.agent,
+        tools: details.tools.map((tool) => ({ ...tool, agentDecision: (rules.find((r) => r.tool === tool.name)?.decision ?? defaultDecision) })),
+    };
+}

package/dist/web/ability-sources-admin.d.ts

@@ -0,0 +1,33 @@
+import { type AbilitySource, type SourceAbility } from '../core/ability-sources.js';
+export interface AbilitySourceView {
+    source: AbilitySource;
+    label: string;
+    /** The env var its token lives in; null for a folder, which has none. */
+    tokenVar: string | null;
+    tokenSet: boolean;
+}
+export declare function describeAbilitySources(): {
+    sources: AbilitySourceView[];
+    error?: string;
+};
+/** Saves a source from the console, and its token when one is given
+ * (applied to this process at once). Throws AbilitySourceError for an
+ * invalid source or token. */
+export declare function saveAbilitySourceFromConsole(body: Record<string, unknown>): Promise<AbilitySource>;
+/** Removes a source and its saved token. Installed abilities stay. */
+export declare function removeAbilitySourceFromConsole(id: string): Promise<void>;
+export interface PrivateAbilitiesView {
+    sources: Array<{
+        id: string;
+        type: AbilitySource['type'];
+        label: string;
+        abilities: SourceAbility[];
+        error?: string;
+    }>;
+    error?: string;
+}
+/** Every private source's abilities, listed side by side; a source that
+ * can't be read reports why instead of failing the rest. */
+export declare function listPrivateAbilities(options?: {
+    fetch?: typeof fetch;
+}): Promise<PrivateAbilitiesView>;

package/dist/web/ability-sources-admin.js

@@ -0,0 +1,65 @@
+// Backs Settings → Private ability sources and the Abilities page's
+// Private section: see core/ability-sources.ts for what a source is.
+// A token is saved through the same secret store as a model key (the
+// project's .env by default) and never sent back, only whether it's set.
+import { AbilitySourceError, describeSource, listSourceAbilities, readAbilitySources, removeAbilitySource, saveAbilitySource, sourceTokenVar, } from '../core/ability-sources.js';
+import { setEnvVar, unsetEnvVar } from './env-admin.js';
+export function describeAbilitySources() {
+    let sources;
+    try {
+        sources = readAbilitySources();
+    }
+    catch (err) {
+        return { sources: [], error: `ability-sources.yml is invalid: ${err instanceof Error ? err.message : String(err)}` };
+    }
+    return {
+        sources: sources.map((source) => {
+            const tokenVar = source.type === 'folder' ? null : sourceTokenVar(source.id);
+            return { source, label: describeSource(source), tokenVar, tokenSet: Boolean(tokenVar && process.env[tokenVar]) };
+        }),
+    };
+}
+/** Saves a source from the console, and its token when one is given
+ * (applied to this process at once). Throws AbilitySourceError for an
+ * invalid source or token. */
+export async function saveAbilitySourceFromConsole(body) {
+    const token = typeof body.token === 'string' ? body.token.trim() : '';
+    if (token && (token.length < 8 || token.length > 500 || /\s/.test(token))) {
+        throw new AbilitySourceError("That doesn't look like a token: paste the whole token, with no spaces or line breaks.");
+    }
+    const source = saveAbilitySource(body);
+    if (token && source.type !== 'folder')
+        await setEnvVar(sourceTokenVar(source.id), token);
+    return source;
+}
+/** Removes a source and its saved token. Installed abilities stay. */
+export async function removeAbilitySourceFromConsole(id) {
+    const source = readAbilitySources().find((s) => s.id === id);
+    if (!source)
+        throw new AbilitySourceError(`No source named ${id}`);
+    removeAbilitySource(id);
+    if (source.type !== 'folder')
+        await unsetEnvVar(sourceTokenVar(id));
+}
+/** Every private source's abilities, listed side by side; a source that
+ * can't be read reports why instead of failing the rest. */
+export async function listPrivateAbilities(options = {}) {
+    let sources;
+    try {
+        sources = readAbilitySources();
+    }
+    catch (err) {
+        return { sources: [], error: `ability-sources.yml is invalid: ${err instanceof Error ? err.message : String(err)}` };
+    }
+    return {
+        sources: await Promise.all(sources.map(async (source) => {
+            const base = { id: source.id, type: source.type, label: describeSource(source) };
+            try {
+                return { ...base, abilities: await listSourceAbilities(source, options) };
+            }
+            catch (err) {
+                return { ...base, abilities: [], error: err instanceof Error ? err.message : String(err) };
+            }
+        })),
+    };
+}

package/dist/web/agent-file-admin.d.ts

@@ -2,7 +2,7 @@ export declare class AgentEditNotSupportedError extends Error {
 }
 export declare class AgentFileNotFoundError extends Error {
 }
-type Provider = 'anthropic' | 'openai' | 'deepseek' | 'kimi' | 'glm' | 'gemini';
+type Provider = 'anthropic' | 'openai' | 'deepseek' | 'kimi' | 'glm' | 'gemini' | 'xai' | 'meta';
 export interface AgentEditableFields {
     systemPrompt?: string;
     model?: {

package/dist/web/agent-file-admin.js

@@ -57,6 +57,9 @@ const MODEL_ENV_VAR = {
     kimi: 'MOONSHOT_API_KEY',
     glm: 'GLM_API_KEY',
     gemini: 'GEMINI_API_KEY',
+    xai: 'XAI_API_KEY',
+    // LiteLLM's name; see core/model-calls/meta-model-call.ts.
+    meta: 'META_API_KEY',
 };
 // The exact shape agentIndexTemplate (bin/cli.ts) always generates for the
 // model field's trailing comment — used to recognize a comment this