loopengine 0.3.8 → 0.3.10

package/dist/web/agents-config-page.js

@@ -438,10 +438,6 @@ ${consoleShellScript}
     return attempt().catch(function () { return attempt(); });
   }
 
-  function badge(label) {
-    return '<span class="badge ' + (label === 'custom' ? 'badge-custom' : 'badge-default') + '">' + escapeHtml(label) + '</span>';
-  }
-
   // A small, deliberately non-CommonMark markdown-to-HTML renderer for
   // the skill Body field's Preview toggle (see wireSkillsHandlers) — this
   // page stays a self-contained string, no build step, no CDN (same
@@ -732,7 +728,7 @@ ${consoleShellScript}
         '<span><a href="?agent=' + encodeURIComponent(agentName) + '&amp;tab=schedules#schedule-' + escapeHtml(x.taskId) + '" class="workflow-schedule-link" data-task="' + escapeHtml(x.taskId) + '" title="See it in the Schedules tab">' +
           escapeHtml(x.describe.charAt(0).toUpperCase() + x.describe.slice(1)) + '</a></span>' + state +
         (values ? '<span class="hint">' + values + '</span>' : '') +
-        (x.notify ? '<span class="hint">results go to your messaging app</span>' : '') +
+        (x.notify ? '<span class="hint">messages you the result when it finishes</span>' : '') +
         '<span style="display:flex;gap:6px;margin-left:auto">' +
           (x.status === 'paused' ? '<button type="button" class="workflow-schedule-action" data-id="' + escapeHtml(x.taskId) + '" data-action="resume">Resume</button>'
             : x.status === 'scheduled' ? '<button type="button" class="workflow-schedule-action" data-id="' + escapeHtml(x.taskId) + '" data-action="pause">Pause</button>' : '') +
@@ -899,6 +895,7 @@ ${consoleShellScript}
       if (!r.ok) { el.innerHTML = '<p class="error">Could not load workflows: ' + escapeHtml(r.body.error || 'unknown error') + '</p>'; return; }
       var workflows = r.body.workflows || [];
       fillWorkflowsCard(workflows);
+      leShell.setCount('workflows', workflows.length);
       workflowsById = {};
       workflows.forEach(function (w) { workflowsById[w.id] = w; });
       el.innerHTML = renderWorkflowsHtml(name, workflows);
@@ -1026,7 +1023,7 @@ ${consoleShellScript}
     if (t.filter) rules.push('only when ' + escapeHtml(t.filter.path) + ' is ' + t.filter.values.map(escapeHtml).join(' or '));
     if (t.mapping) rules.push(Object.keys(t.mapping).map(function (p) { return escapeHtml(p) + ' ' + String.fromCharCode(8592) + ' ' + escapeHtml(t.mapping[p]); }).join(', '));
     if (t.payload_param) rules.push('the whole payload goes to ' + escapeHtml(t.payload_param));
-    if (t.notify) rules.push('sends each result to you');
+    if (t.notify) rules.push('messages you the result when it finishes');
     if (t.callback_url) rules.push('reports to ' + escapeHtml(t.callback_url));
     // Made by the workflow planner without its secret: it turns on once
     // the sender's signing secret is added.
@@ -1072,7 +1069,7 @@ ${consoleShellScript}
             params.map(function (p) { return '<div class="workflow-param-row"><code class="wp-name">' + escapeHtml(p) + '</code><input name="map:' + escapeHtml(p) + '" placeholder="data.object.id" style="flex:1"></div>'; }).join('') + '</div>' +
           '<label>Or give the whole payload to <select name="payload_param"><option value="">(none)</option>' + params.map(function (p) { return '<option>' + escapeHtml(p) + '</option>'; }).join('') + '</select></label>'
         : '<p class="hint" style="margin:0">This workflow takes no parameters, so the payload isn' + String.fromCharCode(8217) + 't passed on. Add one in Edit to use it.</p>') +
-      '<label class="http-tool-inline-label"><input type="checkbox" name="notify"> Send each run' + String.fromCharCode(8217) + 's result to you through the agent' + String.fromCharCode(8217) + 's messaging app</label>' +
+      '<label class="http-tool-inline-label"><input type="checkbox" name="notify"> Message me the result when it finishes <span class="hint">(through its Messaging tab: Slack, email, Lark or a webhook)</span></label>' +
       '<label>Post each run' + String.fromCharCode(8217) + 's result to <span class="hint">(optional, an https URL)</span><input name="callback_url" placeholder="https://example.com/hooks/loopengine"></label>' +
       '<div style="display:flex;gap:8px"><button type="submit" class="primary">Make the URL</button></div>' +
       '<div class="hint hook-form-result"></div></form>';
@@ -1224,7 +1221,11 @@ ${consoleShellScript}
         var action = btn.dataset.action;
         if (action === 'cancel' && btn.dataset.confirming !== '1') { btn.dataset.confirming = '1'; btn.textContent = 'Click again to remove'; return; }
         btn.disabled = true;
-        fetchJsonRetryOnce('/schedules/' + encodeURIComponent(btn.dataset.id) + '/' + action, { method: 'POST' }).then(function () { loadWorkflowsSection(name); });
+        fetchJsonRetryOnce('/schedules/' + encodeURIComponent(btn.dataset.id) + '/' + action, { method: 'POST' }).then(function () {
+          loadWorkflowsSection(name);
+          // The Schedules tab's count, and the Overview's tile.
+          fillOverviewCards(name);
+        });
       });
     }
     card.querySelector('.workflow-run').addEventListener('click', function (ev) {
@@ -1277,6 +1278,7 @@ ${consoleShellScript}
       var waiting = active.filter(function (t) { return t.status === 'awaiting_approval'; }).length;
       var next = active.map(function (t) { return t.next_run_at; }).filter(Boolean).sort()[0];
       set('ovSchedulesValue', String(active.length));
+      leShell.setCount('schedules', active.length);
       var schedulesDetail = [];
       if (waiting) schedulesDetail.push(waiting + ' waiting for approval');
       if (next) schedulesDetail.push('Next run ' + escapeHtml(new Date(next).toLocaleString()));
@@ -1310,7 +1312,10 @@ ${consoleShellScript}
           '<dt>Provider</dt><dd>' + escapeHtml(cfg.model.provider) + '</dd>' +
           '<dt>Model</dt><dd>' + escapeHtml(cfg.model.model || '(provider default)') + '</dd>' +
           '<dt>Max tokens</dt><dd>' + escapeHtml(cfg.model.maxTokens != null ? cfg.model.maxTokens : '(default)') + '</dd>' +
-          '<dt>Reasoning effort</dt><dd>' + escapeHtml(cfg.model.reasoningEffort || (REASONING_PROVIDERS.indexOf(cfg.model.provider) !== -1 ? '(model default)' : 'n/a')) + '</dd>' +
+          // Unset is low for OpenAI's reasoning models (core/model-calls/openai-model-call.ts).
+          '<dt>Reasoning effort</dt><dd>' + escapeHtml(cfg.model.reasoningEffort ||
+            (cfg.model.provider === 'openai' && /^(gpt-[5-9]|o[0-9])/i.test(cfg.model.model || '') ? 'low (default)'
+              : REASONING_PROVIDERS.indexOf(cfg.model.provider) !== -1 ? '(model default)' : 'n/a')) + '</dd>' +
         '</dl>' +
         '<form class="add-source" id="modelForm" style="display:none">' +
           '<label>Provider' +
@@ -1326,7 +1331,7 @@ ${consoleShellScript}
           '<label>Max tokens <span class="hint">(blank for provider default)</span>' +
             '<input type="number" name="maxTokens" min="1" step="1" value="' + (cfg.model.maxTokens != null ? escapeHtml(cfg.model.maxTokens) : '') + '">' +
           '</label>' +
-          '<label id="reasoningEffortField">Reasoning effort <span class="hint">(how much the model thinks before answering: none turns it off, unset uses the model\\\'s default)</span>' +
+          '<label id="reasoningEffortField">Reasoning effort <span class="hint">(how much the model thinks before answering: none turns it off, unset uses the model\\\'s default, and low for OpenAI\\\'s reasoning models)</span>' +
             '<select name="reasoningEffort">' +
               ['', 'none', 'minimal', 'low', 'medium', 'high', 'xhigh', 'max'].map(function (v) {
                 return '<option value="' + v + '"' + (v === (cfg.model.reasoningEffort || '') ? ' selected' : '') + '>' + (v || '(unset)') + '</option>';
@@ -1342,11 +1347,6 @@ ${consoleShellScript}
     return renderOverviewCards(cfg) +
       '<section>' + systemPromptSection + '</section>' +
       '<section>' + modelSection + '</section>' +
-      '<section><h3>Hooks</h3><dl class="kv">' +
-        '<dt>sessionIdFor</dt><dd>' + badge(cfg.sessionIdFor.indexOf('custom') === 0 ? 'custom' : 'default') + ' <span class="muted">' + escapeHtml(cfg.sessionIdFor) + '</span></dd>' +
-        '<dt>tenantFor</dt><dd>' + badge(cfg.tenantFor.indexOf('custom') === 0 ? 'custom' : 'default') + ' <span class="muted">' + escapeHtml(cfg.tenantFor) + '</span></dd>' +
-        '<dt>isSafeTool</dt><dd>' + badge(cfg.isSafeTool === 'custom' ? 'custom' : 'default') + ' <span class="muted">' + escapeHtml(cfg.isSafeTool) + '</span></dd>' +
-        '</dl></section>' +
       '<section><h3>Limits &amp; budgets <button type="button" class="edit-btn" id="editLimitsBtn">Edit</button></h3>' +
         '<dl class="kv" id="limitsDisplay">' +
           '<dt>maxTurns</dt><dd>' + escapeHtml(cfg.maxTurns) + '</dd>' +
@@ -1367,7 +1367,6 @@ ${consoleShellScript}
           '<button type="button" id="cancelLimitsBtn">Cancel</button>' +
           '<div class="error" id="limitsError"></div>' +
         '</form>' +
-        '<dl class="kv"><dt>skillsDirs</dt><dd>' + escapeHtml(cfg.skillsDirs.join(', ') || '(none)') + '</dd></dl>' +
       '</section>';
   }
 
@@ -1956,7 +1955,10 @@ ${consoleShellScript}
           (saved ? '<button type="button" class="delete-btn notifier-remove"' + (locked ? ' disabled' : '') + '>Remove</button>' : '') + '</div>' +
         (isWebhook ? '<p class="hint" style="margin:0">A webhook always sends once saved, alongside the primary messaging app.</p>' : '') +
         '<div class="hint notifier-result"></div>' +
-      '</form></details>';
+      '</form>' +
+      // Who can decide and give jobs here: part of this app's settings.
+      (channel === 'slack' || channel === 'telegram' ? renderApproversHtml(n, channel) : '') +
+      '</details>';
   }
 
   function renderConnectionsHtml(n) {
@@ -2011,7 +2013,7 @@ ${consoleShellScript}
         '<td><button type="button" class="delete-btn approver-remove" data-user="' + escapeHtml(a.user) + '"' + (n.canSave === false ? ' disabled' : '') + '>Remove</button></td></tr>';
     }).join('');
     var where = app === 'telegram' ? 'by replying to it' : 'by replying in its thread';
-    return '<section class="approvers-section" data-app="' + app + '"><h3>' + title + ' approvers</h3>' +
+    return '<section class="approvers-section" data-app="' + app + '" style="max-width:560px;margin-top:18px;padding-top:14px;border-top:1px solid var(--le-line, #e5e7eb)"><h4 style="margin:0 0 6px">Approvers</h4>' +
       (n.primary !== app ? '<p class="hint" style="margin:0 0 8px">' + title + ' isn&#39;t primary, so requests aren&#39;t sent there until it is. Jobs started there still use this list.</p>' : '') +
       '<p class="muted" style="margin:0 0 10px">People who can approve, deny, change or answer a request ' + where + ', like &ldquo;yes, go ahead&rdquo; or &ldquo;make it $40&rdquo;. A plain &ldquo;yes&rdquo; runs it; a reply that&#39;s less clear (&ldquo;sure, send it&rdquo;, &ldquo;yes but check the amount&rdquo;) shows exactly what will run with a Confirm button first, and a change is shown to approve first. Once anyone is listed, only approvers&#39; button clicks count, and only approvers can give the agent jobs. Anyone can still ask about a request.</p>' +
       (approvers.length
@@ -2101,8 +2103,7 @@ ${consoleShellScript}
       '<p class="muted" style="margin:0 0 12px">' + renderNotifierStatus(n) + '</p>' +
         (n.error ? '<p class="error">' + escapeHtml(n.error) + '</p>' : '') +
         (n.source === 'code' ? '' : renderConnectionsHtml(n)) + '</section>' +
-      renderApproversHtml(n, 'slack') +
-      renderApproversHtml(n, 'telegram') +
+
       '<section><h3>Recent deliveries</h3>' + renderDeliveries(n.deliveries || []) + '</section>';
   }
 
@@ -2251,8 +2252,16 @@ ${consoleShellScript}
         fetchJsonRetryOnce(url).then(function (r) {
           if (!r.ok) { out.textContent = r.body.error || 'Could not check'; return; }
           var b = r.body;
+          // Telegram keeps its last error until a newer one, so it says when.
+          var when = '';
+          if (b.lastErrorAt) {
+            var mins = Math.max(0, Math.round((Date.now() - Date.parse(b.lastErrorAt)) / 60000));
+            when = mins < 2 ? 'just now' : mins < 120 ? mins + ' minutes ago' : mins < 2880 ? Math.round(mins / 60) + ' hours ago' : Math.round(mins / 1440) + ' days ago';
+            when = ' (' + when + ', ' + new Date(b.lastErrorAt).toLocaleString() + ')';
+          }
           out.textContent = (b.pointsHere ? 'Connected' + (b.botUsername ? ' (@' + b.botUsername + ')' : '') + '.' : b.url ? 'The bot sends its updates somewhere else: ' + b.url + '. Connect again to point it here.' : 'The bot isn' + String.fromCharCode(8217) + 't sending its updates anywhere. Connect again.') +
-            (b.lastError ? ' Telegram' + String.fromCharCode(8217) + 's last delivery error: ' + b.lastError : '');
+            (b.pending ? ' ' + b.pending + ' update' + (b.pending === 1 ? '' : 's') + ' waiting to be delivered.' : '') +
+            (b.lastError ? ' Telegram' + String.fromCharCode(8217) + 's last delivery error' + when + ': ' + b.lastError + (b.pointsHere && !b.pending ? ' Nothing is waiting, so it' + String.fromCharCode(8217) + 's likely from before and since fixed.' : '') : '');
         });
       });
     }
@@ -2422,8 +2431,8 @@ ${consoleShellScript}
             ? '<div><span class="le-pill bad">Workflow removed</span> <span class="hint">' + escapeHtml(t.workflow_id) + '</span></div>'
             : '<div class="schedule-result hint">' + escapeHtml(t.message) + '</div>') +
         (t.status !== 'cancelled' && t.status !== 'done'
-          ? '<label class="schedule-notify hint" title="Send each run&#39;s result through this agent&#39;s messaging connection (Messaging tab)"><input type="checkbox" class="schedule-notify-toggle" data-id="' + escapeHtml(t.task_id) + '"' + (t.notify ? ' checked' : '') + '> Send each result to you</label>'
-          : (t.notify ? '<div class="hint">Sent each result to you</div>' : '')) + '</td>' +
+          ? '<label class="schedule-notify hint" title="Sent through its Messaging tab: Slack, email, Lark or a webhook"><input type="checkbox" class="schedule-notify-toggle" data-id="' + escapeHtml(t.task_id) + '"' + (t.notify ? ' checked' : '') + '> Message me the result when it finishes</label>'
+          : (t.notify ? '<div class="hint">Messaged you the result when it finished</div>' : '')) + '</td>' +
       '<td>' + scheduleText(t.schedule) + (t.next_run_at ? '<div class="hint">next ' + escapeHtml(fmtScheduleTime(t.next_run_at)) + '</div>' : '') + '</td>' +
       '<td><span class="le-pill ' + (SCHEDULE_PILLS[t.status] || 'neutral') + '">' + escapeHtml(SCHEDULE_LABELS[t.status] || t.status) + '</span>' +
         (t.status === 'awaiting_approval' ? '<div class="hint"><a href="#" class="schedule-to-approvals">Decide in Messaging</a></div>' : '') + '</td>' +
@@ -2465,7 +2474,7 @@ ${consoleShellScript}
               '<input type="datetime-local" name="runAt" aria-label="Date and time"></div>' +
           '</div>' +
           '<label>Name <span class="hint">(optional)</span><input name="task_name" placeholder="Daily ticket summary"></label>' +
-          '<label class="http-tool-inline-label"><input type="checkbox" name="notify"> Send each result through this agent&#39;s messaging connection (set in the Messaging tab)</label>' +
+          '<label class="http-tool-inline-label"><input type="checkbox" name="notify"> Message me the result when it finishes <span class="hint">(through its Messaging tab: Slack, email, Lark or a webhook)</span></label>' +
           '<div style="display:flex;gap:8px"><button type="submit">Schedule</button></div>' +
           '<div id="scheduleResult" class="hint"></div>' +
         '</form></section>';
@@ -3031,7 +3040,7 @@ ${consoleShellScript}
   }
 
   // ---- Apps tab: what's already installed for this agent, a
-  // search box over public (npm, tagged loopengine-ability) packages,
+  // search box over official (@loopengine-co on npm) abilities,
   // and a plain spec field for a private ability (a git URL, a local
   // file:../path, or a private registry name) — both installs go
   // through the same POST .../abilities, since installAbility itself
@@ -3076,7 +3085,7 @@ ${consoleShellScript}
       '</tr>';
   }
 
-  // A public (npm) or private ability not installed here yet: its
+  // An official or private ability not installed here yet: its
   // details show the permissions it ships with.
   function renderAbilitySearchResultRow(pkg, installedNames, spec) {
     var installSpec = spec || pkg.name;
@@ -3099,15 +3108,15 @@ ${consoleShellScript}
       : '<p class="hint">Nothing added to this agent yet.</p>';
 
     // What this agent has first; then the workspace's connected apps (each
-    // with the tools this agent gets), then public and private abilities.
+    // with the tools this agent gets), then official and private abilities.
     return '<h3 style="justify-content:flex-start;align-items:baseline;gap:8px">Installed <span class="hint" style="font-weight:400">the apps and abilities this agent has</span></h3>' + installedHtml +
       // Installing by name or spec is on the console's Abilities page.
       '<p id="abilityInstallStatus" class="hint"></p>' +
       '<h3 style="margin-top:24px;justify-content:flex-start;align-items:baseline;gap:8px">Apps <span class="hint" style="font-weight:400">connected in this workspace; choose which of their tools this agent gets, and each one' + String.fromCharCode(8217) + 's permission</span></h3>' +
       '<div id="agentApps" style="margin-bottom:32px"><p class="hint">Loading&hellip;</p></div>' +
-      '<h3 style="margin-top:24px;justify-content:flex-start;align-items:baseline;gap:8px">Public abilities <span class="hint" style="font-weight:400">npm packages tagged loopengine-ability</span></h3>' +
+      '<h3 style="margin-top:24px;justify-content:flex-start;align-items:baseline;gap:8px">Official abilities <span class="hint" style="font-weight:400">published by LoopEngine</span></h3>' +
       '<form id="abilitySearchForm" style="display:flex;gap:6px;margin:0 0 10px;max-width:560px">' +
-        '<input type="search" name="q" placeholder="Search abilities, e.g. gmail" aria-label="Search public abilities" style="flex:1">' +
+        '<input type="search" name="q" placeholder="Search abilities, e.g. gmail" aria-label="Search official abilities" style="flex:1">' +
         '<button type="submit">Search</button>' +
       '</form>' +
       '<div id="abilitySearchResults" style="margin-bottom:32px"></div>' +
@@ -3325,7 +3334,7 @@ ${consoleShellScript}
         var results = result.body.results || [];
         resultsEl.innerHTML = results.length
           ? '<table><thead><tr><th>Package</th><th>Description</th><th></th></tr></thead><tbody>' + results.map(function (pkg) { return renderAbilitySearchResultRow(pkg, installedNames); }).join('') + '</tbody></table>'
-          : '<p class="hint">No public abilities found.</p>';
+          : '<p class="hint">No official abilities found.</p>';
         var installBtns = resultsEl.querySelectorAll('.ability-install-btn');
         for (var i = 0; i < installBtns.length; i++) {
           installBtns[i].addEventListener('click', function (ev2) {
@@ -3610,11 +3619,7 @@ ${consoleShellScript}
 
   function renderSkillsTabHtml(cfg) {
     var listHtml = cfg.skills.length ? cfg.skills.map(renderSkillCard).join('') : '<p class="hint">No skills yet.</p>';
-    return '<section><h3>Skills dirs</h3><dl class="kv">' +
-        '<dt>skillsDirs</dt><dd>' + escapeHtml(cfg.skillsDirs.join(', ') || '(none)') + '</dd>' +
-        '<dt>skillIndexBudgetTokens</dt><dd>' + escapeHtml(cfg.skillIndexBudgetTokens) + '</dd>' +
-        '</dl></section>' +
-      '<section><h3>Skills (' + cfg.skills.length + ')</h3><div id="skillList">' + listHtml + '</div></section>' +
+    return '<section><h3>Skills (' + cfg.skills.length + ')</h3><div id="skillList">' + listHtml + '</div></section>' +
       '<section><h3 id="skillFormHeading">Add a skill</h3>' +
         '<form class="add-source" id="skillForm">' +
           '<label>Id <span class="hint">(lowercase, hyphen-separated — becomes the SKILL.md folder name; nested skills aren\\'t editable here)</span>' +
@@ -4501,7 +4506,7 @@ ${consoleShellScript}
         prompt: cfg.systemPrompt,
         chips: [modelChip(cfg), { text: 'unmatched calls: ' + cfg.permissions.defaultDecision }],
         tab: currentTab,
-        counts: { tools: cfg.tools.length, skills: cfg.skills.length, abilities: cfg.abilityCount, actauth: cfg.permissions.rules.length },
+        counts: { tools: cfg.tools.length, skills: cfg.skills.length, abilities: cfg.abilityCount, workflows: cfg.skills.filter(function (s) { return s.workflow; }).length },
       }) +
       '<div class="le-scroll"><div class="le-page" style="display:block">' +
       '<div class="tab-panel" data-tab-panel="overview">' + renderOverviewHtml(cfg) + '</div>' +

package/dist/web/console-shell.js

@@ -15,7 +15,7 @@
 //   leShell.wireModelPicker(form)  model dropdown for a provider select
 //   leShell.loadProviderKeys()     Promise of {provider: key saved?}, or null
 //   leShell.applyProviderKeys(form, keys, keep)  only providers with a key
-//   leShell.abilityOriginBadge(origin)    Public/Private badge for an ability
+//   leShell.abilityOriginBadge(origin)    Official/Public/Private badge for an ability
 //   leShell.toggleAbilityDetails(btn)     an ability's tools, skills and settings
 // Same embedded-string conventions as the pages themselves: plain
 // string concatenation and no backslashes inside the script, so nothing
@@ -56,8 +56,8 @@ export const consoleShellScript = `<script>
   // ability on the Apps tab (id 'abilities', so older links still work).
   // ?tab=tools and ?tab=skills still open Advanced.
   var TABS = [
-    ['overview', 'Overview'], ['workflows', 'Workflows'], ['abilities', 'Apps'], ['actauth', 'Permissions'],
-    ['messaging', 'Messaging'], ['schedules', 'Schedules'], ['env', 'Environment'], ['advanced', 'Advanced'], ['chat', 'Chat']
+    ['overview', 'Overview'], ['workflows', 'Workflows'], ['abilities', 'Apps'], ['chat', 'Chat'],
+    ['messaging', 'Messaging'], ['schedules', 'Schedules'], ['actauth', 'Permissions'], ['env', 'Environment'], ['advanced', 'Advanced']
   ];
 
   function esc(s) {
@@ -360,11 +360,12 @@ export const consoleShellScript = `<script>
     return decision ? '<span class="le-pill ' + decision + '">' + DECISION_LABELS[decision] + '</span>' : '<span class="hint">No rule</span>';
   }
 
-  // Public (npm) or Private, with where it came from on hover.
+  // Official (@loopengine-co), Public (other npm) or Private, with where
+  // it came from on hover.
   function abilityOriginBadge(origin) {
     if (!origin) return '';
     return '<span class="le-pill ' + (origin.kind === 'private' ? 'accent' : '') + '" title="' + esc(origin.label) + '">' +
-      (origin.kind === 'private' ? 'Private' : 'Public') + '</span> <span class="hint">' + esc(origin.label) + '</span>';
+      (origin.kind === 'private' ? 'Private' : origin.kind === 'official' ? 'Official' : 'Public') + '</span> <span class="hint">' + esc(origin.label) + '</span>';
   }
 
 

package/dist/web/global-config-page.js

@@ -251,7 +251,7 @@ ${consoleShellScript}
   }
 
   // ---- Abilities section ----
-  // How agents reach outside apps. Public abilities (npm) are browsed
+  // How agents reach outside apps. Official abilities (npm) are browsed
   // here and installed from an agent's own Apps tab. A private one
   // (from the sources in Settings) is installed here into the workspace
   // (core/workspace-abilities.ts), then added to any agent from its tab.
@@ -271,9 +271,9 @@ ${consoleShellScript}
   function renderAbilities() {
     var content = document.getElementById('abilitiesContent');
     content.innerHTML = '<section>' +
-      '<h4>Public <span class="hint">npm packages tagged loopengine-ability; add one to an agent from its Apps tab</span></h4>' +
+      '<h4>Official <span class="hint">published by LoopEngine; add one to an agent from its Apps tab</span></h4>' +
       '<form id="abilitySearchForm" style="display:flex;gap:6px;margin:0 0 10px;max-width:560px">' +
-        '<input type="search" name="q" placeholder="Search abilities, e.g. gmail" aria-label="Search public abilities" style="flex:1">' +
+        '<input type="search" name="q" placeholder="Search abilities, e.g. gmail" aria-label="Search official abilities" style="flex:1">' +
         '<button type="submit">Search</button>' +
       '</form>' +
       '<div id="abilitySearchResults"><p class="hint">Loading&hellip;</p></div>' +
@@ -443,7 +443,7 @@ ${consoleShellScript}
   }
 
   // Linked from an agent's Apps tab (/config?section=abilities#private-abilities):
-  // once every list has loaded, so the public results don't push it down.
+  // once every list has loaded, so the official results don't push it down.
   var scrolledToPrivate = false;
   function scrollToPrivateIfLinked() {
     if (scrolledToPrivate || location.hash !== '#private-abilities' || !lastPrivate || !workspaceAbilities || lastSearch.q === null) return;
@@ -547,6 +547,8 @@ ${consoleShellScript}
   // Open tool panels, by ability: { tools, filter, error, busy }.
   var openTools = {};
   var appSearch = { q: '', servers: null, error: '' };
+  // The "Add your own server" form: open, and what's typed in it.
+  var ownForm = { open: false };
 
   function appLetter(title) {
     return '<span class="app-letter" aria-hidden="true">' + escapeHtml((title || '?').charAt(0).toUpperCase()) + '</span>';
@@ -572,6 +574,37 @@ ${consoleShellScript}
       '<p class="hint app-msg" style="margin:0"></p></form>';
   }
 
+  // Your company's own servers (mcp-servers.yml): each connects like any
+  // app; a saved one not connected can be connected again or removed.
+  function renderOwnServers() {
+    var saved = apps.saved || [];
+    var rows = saved.map(function (s) {
+      var connected = apps.connected.some(function (c) { return c.url === s.url; });
+      return '<div class="app-row" data-app="' + escapeHtml(s.id) + '"><div class="app-head">' + appLetter(s.title) + '</div>' +
+        '<div class="app-row-main"><div><strong>' + escapeHtml(s.title) + '</strong> <span class="badge badge-default">Private</span></div>' +
+          '<div class="hint">' + escapeHtml(s.url) + (s.description ? ' &middot; ' + escapeHtml(s.description) : '') + (s.header ? ' &middot; key sent in ' + escapeHtml(s.header) : '') + '</div></div>' +
+        '<div class="app-slot">' + (connected
+          ? '<span class="badge badge-custom">Connected</span>'
+          : '<button type="button" class="app-connect" data-id="' + escapeHtml(s.id) + '"' + (apps.canConnect ? '' : ' disabled') + '>Connect</button> <button type="button" class="delete-btn app-forget" data-id="' + escapeHtml(s.id) + '"' + (apps.canConnect ? '' : ' disabled') + '>Remove</button>') + '</div></div>';
+    }).join('');
+    var form = ownForm.open
+      ? '<form id="ownServerForm" class="app-form" style="max-width:560px">' +
+          '<label>Name<input name="title" required maxlength="60" placeholder="Acme CRM"></label>' +
+          '<label>Address<input name="url" type="url" required placeholder="https://mcp.yourcompany.com/mcp"></label>' +
+          '<label>What it does <span class="hint">(optional)</span><input name="description" maxlength="200" placeholder="Our customers, orders and support tickets"></label>' +
+          '<label>API key <span class="hint">(if it needs one; saved in this workspace' + String.fromCharCode(8217) + 's settings)</span><input name="key" type="password" autocomplete="off"></label>' +
+          '<label>Header for the key <span class="hint">(optional; empty sends it as Authorization: Bearer ' + String.fromCharCode(8230) + ')</span><input name="header" placeholder="X-Api-Key" pattern="[A-Za-z0-9-]+"></label>' +
+          '<div class="app-foot"><button type="submit">Connect</button><button type="button" class="own-cancel">Cancel</button></div>' +
+          '<p class="hint app-msg" style="margin:0"></p></form>'
+      : '<button type="button" class="own-add"' + (apps.canConnect ? '' : ' disabled') + '>Add your own server</button>';
+    return '<section id="own-servers"><h3>Your own servers</h3>' +
+      '<p class="hint">Your company' + String.fromCharCode(8217) + 's own MCP server, by its address: it connects like any app, and only this workspace sees it. Servers that only offer a sign-in (OAuth) can' + String.fromCharCode(8217) + 't be connected yet.</p>' +
+      (rows ? '<div class="app-list" style="margin-bottom:10px">' + rows + '</div>' : '') + form + '</section>';
+  }
+
+  // By name: form.title is the form's own title attribute.
+  function ownField(form, name) { return form.querySelector('[name=' + name + ']').value; }
+
   function renderApps() {
     var el = document.getElementById('appsContent');
     if (!apps) return;
@@ -601,6 +634,7 @@ ${consoleShellScript}
         }).join('') + '</div>' +
         '<p class="hint">Each is the app' + String.fromCharCode(8217) + 's own MCP server. Apps that only offer a sign-in (OAuth) can' + String.fromCharCode(8217) + 't be connected yet; their Connect says so.</p>' +
       '</section>' +
+      renderOwnServers() +
       '<section><h3>More apps</h3>' +
         '<form id="appSearchForm" style="display:flex;gap:6px;margin:0 0 10px;max-width:560px"><input type="search" name="q" placeholder="Search the MCP Registry, e.g. calendly" aria-label="Search apps" style="flex:1" value="' + escapeHtml(appSearch.q) + '"><button type="submit">Search</button></form>' +
         '<div id="appSearchResults">' + renderAppSearch() + '</div>' +
@@ -716,6 +750,26 @@ ${consoleShellScript}
       return;
     }
     if (t.classList.contains('app-cancel')) { renderApps(); return; }
+    if (t.classList.contains('own-add')) {
+      ownForm.open = true;
+      renderApps();
+      document.querySelector('#ownServerForm input[name=title]').focus();
+      return;
+    }
+    if (t.classList.contains('own-cancel')) { ownForm.open = false; renderApps(); return; }
+    if (t.classList.contains('app-forget')) {
+      if (t.dataset.confirming !== '1') { t.dataset.confirming = '1'; t.textContent = 'Click again to remove'; return; }
+      t.disabled = true;
+      fetch('/config/apps/servers?id=' + encodeURIComponent(t.dataset.id), { method: 'DELETE' })
+        .then(function (r) { return r.json().then(function (j) { return { ok: r.ok, body: j }; }); })
+        .then(function (r) {
+          if (!r.ok) throw new Error(r.body.error || 'request failed');
+          apps = r.body;
+          renderApps();
+        })
+        .catch(function (err) { t.disabled = false; t.textContent = 'Could not remove: ' + err.message; });
+      return;
+    }
     if (t.classList.contains('app-disconnect')) {
       if (t.dataset.confirming !== '1') { t.dataset.confirming = '1'; t.textContent = 'Click again to disconnect'; return; }
       t.disabled = true;
@@ -760,6 +814,28 @@ ${consoleShellScript}
         .catch(function (err) { appSearch.error = 'Could not search: ' + err.message; document.getElementById('appSearchResults').innerHTML = renderAppSearch(); });
       return;
     }
+    if (form.id === 'ownServerForm') {
+      var ownBtn = form.querySelector('button[type=submit]');
+      var ownMsg = form.querySelector('.app-msg');
+      ownBtn.disabled = true;
+      ownMsg.className = 'hint app-msg';
+      ownMsg.textContent = 'Connecting' + String.fromCharCode(8230) + ' it asks the server for its tools and sets their permissions, which can take a minute.';
+      fetch('/config/apps/servers', { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ title: ownField(form, 'title'), url: ownField(form, 'url'), description: ownField(form, 'description'), key: ownField(form, 'key'), header: ownField(form, 'header') }) })
+        .then(function (r) { return r.json().then(function (j) { return { ok: r.ok, body: j }; }); })
+        .then(function (r) {
+          if (!r.ok) throw new Error(r.body.error || 'request failed');
+          apps = r.body;
+          ownForm.open = false;
+          if (r.body.connectedAbility) loadTools(r.body.connectedAbility, false);
+          else renderApps();
+        })
+        .catch(function (err) {
+          ownBtn.disabled = false;
+          ownMsg.className = 'error app-msg';
+          ownMsg.textContent = err.message;
+        });
+      return;
+    }
     if (!form.dataset.connect) return;
     var btn = form.querySelector('button[type=submit]');
     var msg = form.querySelector('.app-msg');
@@ -805,12 +881,12 @@ ${consoleShellScript}
       rows.map(function (r) { return '<tr><td>' + r[0] + '</td><td>' + r[1] + '</td></tr>'; }).join('') +
       '</tbody></table></section>' +
       (d.timeZone ? '<section><h3>Time zone</h3><div class="source" id="timeZoneBox"><p class="hint">Loading' + String.fromCharCode(8230) + '</p></div></section>' : '') +
-      '<section><h3>Private ability sources</h3><p class="muted" style="margin:0 0 10px">Where your own abilities come from, listed under Private on the Abilities page next to the public ones on npm.</p><div class="source" id="abilitySourcesBox"><p class="hint">Loading' + String.fromCharCode(8230) + '</p></div></section>' +
+      '<section><h3>Private ability sources</h3><p class="muted" style="margin:0 0 10px">Where your own abilities come from, listed under Private on the Abilities page next to LoopEngine&#39;s official ones.</p><div class="source" id="abilitySourcesBox"><p class="hint">Loading' + String.fromCharCode(8230) + '</p></div></section>' +
       '<section><h3>Updates</h3><div class="source" id="upgradeBox"><p class="hint">Checking for a newer LoopEngine' + String.fromCharCode(8230) + '</p></div></section>';
   }
 
   // ---- Private ability sources (Settings) ----
-  // Where this project's own abilities come from, next to the public ones
+  // Where this project's own abilities come from, next to the official ones
   // on npm: a GitHub org or user, or a private npm registry
   // (core/ability-sources.ts). There's no folder kind here: this server
   // may run in the cloud, so local files are uploaded on the Abilities

package/dist/web/notifier-admin.d.ts

@@ -127,6 +127,8 @@ export declare function setupAgentTelegramWebhook(config: AgentConfig, baseUrl:
 export declare function agentTelegramWebhookInfo(config: AgentConfig): Promise<{
     url?: string;
     lastError?: string;
+    lastErrorAt?: string;
+    pending?: number;
     pointsHere: boolean;
     botUsername?: string;
 }>;

package/dist/web/notifier-admin.js

@@ -161,7 +161,7 @@ export function jobAllowed(config, app, message) {
     const home = app === 'slack' ? file?.channelId : file?.chatId;
     if (!message.direct && home && home === message.conversation)
         return { allowed: true };
-    return { allowed: false, message: `Jobs by direct message need approvers: add yourself in this agent's Messaging tab in LoopEngine (${APP_NAMES[app]} section).` };
+    return { allowed: false, message: `Jobs by direct message need approvers: in LoopEngine, open this agent's Messaging tab, then ${APP_NAMES[app]} → Approvers, and add yourself.` };
 }
 /** Replaces the approver list on the agent's saved connection for `app`,
  * primary or not. Throws NotifierFileError when there's no connection
@@ -224,6 +224,8 @@ export async function agentTelegramWebhookInfo(config) {
     return {
         ...(info.url ? { url: info.url } : {}),
         ...(info.lastError ? { lastError: info.lastError } : {}),
+        ...(info.lastErrorAt ? { lastErrorAt: info.lastErrorAt } : {}),
+        ...(info.pending ? { pending: info.pending } : {}),
         pointsHere: Boolean(info.url?.endsWith(`/hooks/telegram/${encodeURIComponent(config.name)}`)),
         ...(botUsername ? { botUsername } : {}),
     };

package/dist/web/playground.js

@@ -1433,7 +1433,7 @@ ${consoleShellScript}
       var counts = {};
       if (cfg) {
         chips.push({ text: typeof cfg.model === 'string' ? cfg.model : cfg.model.provider + ' \u00b7 ' + (cfg.model.model || 'default model'), mono: true });
-        counts = { tools: cfg.tools.length, skills: cfg.skills.length, abilities: cfg.abilityCount, actauth: cfg.permissions.rules.length };
+        counts = { tools: cfg.tools.length, skills: cfg.skills.length, abilities: cfg.abilityCount };
       }
       head.innerHTML = leShell.renderHead({ name: name, prompt: agent.systemPrompt, chips: chips, tab: 'chat', counts: counts });
     }

package/dist/web/templates-admin.js

@@ -11,10 +11,12 @@
 import { createScheduledTask, pauseScheduledTask } from '../core/scheduler.js';
 import { workspaceTimeZone } from '../core/time-zone.js';
 import { STARTER_TEMPLATES, starterTemplate, templateScheduleStart } from '../core/system-agents/templates.js';
-import { ActauthRuleExistsError, addActauthRule, setDefaultDecision } from './actauth-admin.js';
+import { ActauthRuleExistsError, addActauthRule, applyPlannedRules, setDefaultDecision } from './actauth-admin.js';
 import { setAgentEnvVar } from './env-admin.js';
 import { freeAgentName } from './interview-admin.js';
 import { writeSkill } from './skills-admin.js';
+import { agentDir } from '../core/gateway-tools.js';
+import { setWorkflowFields } from '../core/workflows.js';
 /** What a template's schedule runs (its workflow, when it comes from one,
  * or its message), and whether it sends each result. */
 function scheduleRuns(schedule) {
@@ -84,7 +86,7 @@ export function previewTemplate(id, deps) {
         // A key set for the whole project already counts for a new agent.
         keys: keyGroups(template).map((names) => ({ names, set: names.some((n) => Boolean(envValue(name, n))) })),
         settings: setup.env ?? {},
-        schedule: setup.schedule ? `${describeTemplateSchedule(setup.schedule)} (created paused)` : null,
+        schedule: setup.schedule ? `${describeTemplateSchedule(setup.schedule)} (created paused)${setup.schedule.notify ? '; it messages you the result when it finishes, through its Messaging tab: Slack, email, Lark or a webhook' : ''}` : null,
         needsApprovals: setup.needsApprovals,
         notes: setup.notes ?? [],
     };
@@ -104,8 +106,19 @@ export function templateChecklist(template, name, deps, failed = [], appsToConne
     for (const group of missing.filter((g) => g.length > 1)) {
         items.push({ label: `Add one of ${group.slice(0, -1).join(', ')} or ${group.at(-1)}`, href: tab('env') });
     }
-    if (template.setup.needsApprovals && !deps.messagingConfigured(name)) {
-        items.push({ label: 'Choose where approval requests go: Slack, email, Lark or a webhook', href: tab('messaging') });
+    // A schedule or webhook that sends each result needs the same connection.
+    const webhookWorkflows = (template.setup.skills ?? []).filter((s) => s.workflow?.webhook);
+    const sendsResults = Boolean(template.setup.schedule?.notify) || webhookWorkflows.length > 0;
+    if ((template.setup.needsApprovals || sendsResults) && !deps.messagingConfigured(name)) {
+        items.push({
+            label: template.setup.needsApprovals
+                ? `Choose where approval requests${sendsResults ? ' and results' : ''} go: Slack, email, Lark or a webhook`
+                : 'Choose where its results go: Slack, email, Lark or a webhook',
+            href: tab('messaging'),
+        });
+    }
+    for (const skill of webhookWorkflows) {
+        items.push({ label: `Add a webhook to the "${skill.workflow.title}" workflow with "Message me the result when it finishes" on, then paste its URL into the app that sends the alerts`, href: tab('workflows') });
     }
     for (const note of template.setup.notes ?? [])
         items.push({ label: note });
@@ -126,19 +139,9 @@ export async function createFromTemplate(id, deps) {
 export async function createFromTemplateObject(template, deps) {
     const { candidate, setup } = template;
     const name = freeAgentName(candidate.agent.name, deps.agentExists);
-    // 1. The agent, and its permissions: everything asks unless a rule says
-    //    otherwise, and the template's rules come first.
+    // 1. The agent: everything asks unless a rule says otherwise.
     await deps.scaffoldAgent(name, candidate.agent.systemPrompt);
     setDefaultDecision(name, 'ask');
-    for (const rule of setup.rules) {
-        try {
-            addActauthRule(name, { name: rule.name, scope: '*/*', tool: rule.tool, decision: rule.decision });
-        }
-        catch (err) {
-            if (!(err instanceof ActauthRuleExistsError))
-                throw err;
-        }
-    }
     // 2. Abilities: their tools, skills and rules. One failing doesn't stop
     //    the rest; it heads the checklist.
     const installed = [];
@@ -185,9 +188,15 @@ export async function createFromTemplateObject(template, deps) {
             failed.push({ name: app.title, error: installFailureReason(err) });
         }
     }
+    // The template's rules, now that abilities and apps have added theirs:
+    // none twice, a stricter one placed so it counts, none loosened.
+    applyPlannedRules(name, setup.rules.map((r) => ({ name: r.name, tool: r.tool, decision: r.decision })));
     // 3. Its own skills and non-secret settings.
-    for (const skill of setup.skills ?? [])
+    for (const skill of setup.skills ?? []) {
         writeSkill(name, skill.id, { description: skill.description, body: skill.body });
+        if (skill.workflow)
+            setWorkflowFields(agentDir(name), skill.id, { title: skill.workflow.title, instructions: skill.body, ...(skill.workflow.parameters ? { parameters: skill.workflow.parameters } : {}) });
+    }
     for (const [variable, value] of Object.entries(setup.env ?? {}))
         await setAgentEnvVar(name, variable, value);
     // 4. Load it, now that everything is in place.

package/dist/web/templates-page.js

@@ -75,7 +75,7 @@ ${consoleShellScript}
       '<div class="meta">' +
         '<div><strong>Runs:</strong> ' + esc(t.trigger) + '</div>' +
         (t.asksFirst.length ? '<div><strong>Asks you first:</strong> ' + esc(t.asksFirst.join(', ')) + '</div>' : '') +
-        '<div><strong>Installs:</strong> ' + t.abilities.map(function (a) { return '<code>' + esc(a) + '</code>'; }).join(' ') + '</div>' +
+        (t.abilities.length || (t.apps || []).length ? '<div><strong>Uses:</strong> ' + t.abilities.map(function (a) { return '<code>' + esc(a) + '</code>'; }).concat((t.apps || []).map(function (a) { return esc(a); })).join(' ') + '</div>' : '') +
       '</div>' +
       '<div class="row"><button type="button" class="primary tp-use">Use this template</button></div>' +
       '<div class="tp-slot"></div></div>';
@@ -108,17 +108,18 @@ ${consoleShellScript}
       slot.innerHTML = '<div class="tp-preview">' +
         '<div><strong>Agent:</strong> <code>' + esc(p.name) + '</code></div>' +
         '<div><strong>Instructions</strong> <span class="hint">(edit them later in its Overview tab)</span><pre>' + esc(p.systemPrompt) + '</pre></div>' +
-        '<div><strong>Installs</strong> <span class="hint">(abilities: their tools, skills and permission rules)</span>' +
+        (p.abilities.length ? '<div><strong>Installs</strong> <span class="hint">(abilities: their tools, skills and permission rules)</span>' +
           listHtml(p.abilities.map(function (a) { return '<li><code>' + esc(a) + '</code></li>'; })) +
-          (canInstall ? '' : '<p class="error" style="margin:4px 0 0">Installing abilities needs <code>LOOPENGINE_ADMIN_AUTH</code> set on the server. Without it, the agent is created and its abilities head the checklist.</p>') + '</div>' +
+          (canInstall ? '' : '<p class="error" style="margin:4px 0 0">Installing abilities needs <code>LOOPENGINE_ADMIN_AUTH</code> set on the server. Without it, the agent is created and its abilities head the checklist.</p>') + '</div>' : '') +
         (p.apps && p.apps.length ? '<div><strong>Apps it uses</strong> <span class="hint">(connected on the <a href="/config?section=apps">Apps</a> page; one that isn' + String.fromCharCode(8217) + 't connected yet heads the checklist)</span>' + listHtml(p.apps.map(function (a) { return '<li>' + esc(a) + '</li>'; })) + '</div>' : '') +
         '<div><strong>Permissions</strong> <span class="hint">(anything not listed asks you first)</span>' +
           listHtml(p.rules.map(function (rule) { return '<li><code>' + esc(rule.tool) + '</code>: ' + esc(DECISIONS[rule.decision] || rule.decision) + '</li>'; })) + '</div>' +
-        '<div><strong>Keys it needs</strong>' +
+        (p.skills && p.skills.length ? '<div><strong>Skills it starts with</strong> <span class="hint">(edit them later in Advanced ' + String.fromCharCode(8594) + ' Skills)</span>' + listHtml(p.skills.map(function (sk) { return '<li><code>' + esc(sk) + '</code></li>'; })) + '</div>' : '') +
+        (p.keys.length ? '<div><strong>Keys it needs</strong>' +
           listHtml(p.keys.map(function (k) {
             var names = k.names.length > 1 ? 'one of ' + k.names.join(', ') : k.names[0];
             return '<li>' + esc(names) + (k.set ? ' <span class="hint">' + CHECK + ' already set</span>' : '') + '</li>';
-          })) + '</div>' +
+          })) + '</div>' : '') +
         (settings.length ? '<div><strong>Settings filled in:</strong> ' + settings.map(function (s) { return '<code>' + esc(s) + '=' + esc(p.settings[s]) + '</code>'; }).join(', ') + '</div>' : '') +
         (p.schedule ? '<div><strong>Schedule:</strong> ' + esc(p.schedule) + '</div>' : '') +
         (p.needsApprovals ? '<div><strong>Approvals:</strong> requests reach you wherever its Messaging tab sends them (Slack, email, Lark or a webhook).</div>' : '') +