loopengine 0.3.9 → 0.3.10

package/dist/bin/ability-manager.js

@@ -26,6 +26,7 @@ import { parse as parseYaml } from 'yaml';
 import semver from 'semver';
 import { agentDir } from '../core/gateway-tools.js';
 import { abilityFetchAuth } from '../core/ability-sources.js';
+import { assertOfficialAbility } from '../core/official-abilities.js';
 import { clearMcpSchemaCache, resolveMcpManifest, McpManifestError } from '../core/mcp-abilities.js';
 import { appRuleName } from '../core/mcp-ability-generator.js';
 import { addToolToIndex, removeToolFromIndex, toCamelCase } from '../web/http-tool-admin.js';
@@ -363,6 +364,8 @@ function resolveMcp(manifest) {
     }
 }
 export async function installAbility(agentName, spec, options = {}) {
+    // A public ability only if LoopEngine publishes it (core/official-abilities.ts).
+    assertOfficialAbility(spec);
     const fetch = options.fetchAbilityDir ?? fetchAbilityDir;
     const abilityDir = fetch(spec);
     const manifest = readManifest(abilityDir);
@@ -635,6 +638,8 @@ export async function upgradeAbility(agentName, abilityName, options = {}) {
         throw new AbilityNotInstalledError(`Ability '${abilityName}' isn't installed for '${agentName}'.`);
     }
     const spec = options.spec ?? abilityName;
+    // New code is fetched: the same check as an install.
+    assertOfficialAbility(spec);
     const oldDir = fetch(oldContentSpec(record.spec, abilityName, record.version));
     const newDir = fetch(spec);
     const oldManifest = readManifest(oldDir);

package/dist/core/ability-sources.d.ts

@@ -20,7 +20,9 @@ export interface SourceAbility {
     spec: string;
 }
 export interface AbilityOrigin {
-    kind: 'public' | 'private';
+    /** official: under LoopEngine's @loopengine-co scope; public: any
+     * other npm package (an older lp-* one, say). */
+    kind: 'official' | 'public' | 'private';
     /** Where it came from, for the console's badge: "npm", "GitHub
      * loopengine-co/lp-github", "Folder ../loopengine-abilities", ... */
     label: string;

package/dist/core/ability-sources.js

@@ -260,7 +260,7 @@ export function abilityOrigin(spec, name, sources = safeReadSources()) {
     const npmSource = scope ? sources.find((s) => s.type === 'npm' && s.scope === scope) : undefined;
     if (npmSource)
         return { kind: 'private', label: describeSource(npmSource) };
-    return { kind: 'public', label: 'npm' };
+    return { kind: target.toLowerCase().startsWith('@loopengine-co/') ? 'official' : 'public', label: 'npm' };
 }
 function safeReadSources() {
     try {

package/dist/core/mcp-directory.d.ts

@@ -26,6 +26,22 @@ export declare const MCP_REGISTRY_URL_ENV = "LOOPENGINE_MCP_REGISTRY_URL";
 export declare const MCP_SERVERS_FILE_ENV = "LOOPENGINE_MCP_SERVERS_FILE";
 /** The workspace's saved servers. A malformed entry is skipped. */
 export declare function savedMcpServers(): McpDirectoryServer[];
+export declare class McpServerInputError extends Error {
+}
+/** A server the workspace adds by its address, checked and given an id
+ * from its name (the same id again for an address already saved). Not
+ * saved yet: saveMcpServer, once it has connected. */
+export declare function ownMcpServer(input: {
+    title?: unknown;
+    url?: unknown;
+    description?: unknown;
+    header?: unknown;
+}, saved?: McpDirectoryServer[]): McpDirectoryServer;
+/** Adds a server to the saved servers, or replaces the one with its id.
+ * The file's other entries are kept as they are. */
+export declare function saveMcpServer(server: McpDirectoryServer): void;
+/** Removes a saved server; false when there's none with that id. */
+export declare function removeSavedMcpServer(id: string): boolean;
 /** Saved servers matching `query`, then registry ones, verified first. */
 export declare function searchMcpServers(query: string, limit?: number): Promise<McpDirectoryServer[]>;
 /** One server by id: a saved one, else the registry's latest entry. */

package/dist/core/mcp-directory.js

@@ -11,12 +11,15 @@
 //       url: https://mcp.acme.internal/mcp
 //       auth: { header: X-Api-Key }     # optional; default Authorization: Bearer
 //
+// The console's Apps page adds to the same file ("Add your own server"):
+// a company's own server, connected like any app.
+//
 // A registry server counts as verified when its URL is on the domain its
 // registry name was verified for (com.stripe/mcp at mcp.stripe.com); the
 // rest are shown as unverified.
-import { existsSync, readFileSync } from 'node:fs';
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
 import { resolve } from 'node:path';
-import { parse as parseYaml } from 'yaml';
+import { parse as parseYaml, stringify as stringifyYaml } from 'yaml';
 export const MCP_REGISTRY_URL_ENV = 'LOOPENGINE_MCP_REGISTRY_URL';
 export const MCP_SERVERS_FILE_ENV = 'LOOPENGINE_MCP_SERVERS_FILE';
 const DEFAULT_REGISTRY = 'https://registry.modelcontextprotocol.io';
@@ -27,9 +30,12 @@ function registryBase() {
         return undefined;
     return (value || DEFAULT_REGISTRY).replace(/\/+$/, '');
 }
+function savedServersPath() {
+    return resolve(process.cwd(), process.env[MCP_SERVERS_FILE_ENV]?.trim() || 'mcp-servers.yml');
+}
 /** The workspace's saved servers. A malformed entry is skipped. */
 export function savedMcpServers() {
-    const path = resolve(process.cwd(), process.env[MCP_SERVERS_FILE_ENV]?.trim() || 'mcp-servers.yml');
+    const path = savedServersPath();
     if (!existsSync(path))
         return [];
     let raw;
@@ -71,6 +77,93 @@ function isRemoteUrl(url) {
         return false;
     }
 }
+export class McpServerInputError extends Error {
+}
+const HEADER_NAME = /^[A-Za-z0-9-]{1,64}$/;
+/** A server the workspace adds by its address, checked and given an id
+ * from its name (the same id again for an address already saved). Not
+ * saved yet: saveMcpServer, once it has connected. */
+export function ownMcpServer(input, saved = savedMcpServers()) {
+    const text = (v) => (typeof v === 'string' ? v.trim() : '');
+    const title = text(input.title);
+    const url = text(input.url);
+    const description = text(input.description);
+    const header = text(input.header);
+    if (!title)
+        throw new McpServerInputError('Give the server a name, e.g. "Acme CRM".');
+    if (title.length > 60)
+        throw new McpServerInputError('Keep the name under 60 characters.');
+    if (description.length > 200)
+        throw new McpServerInputError('Keep the description under 200 characters.');
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        throw new McpServerInputError('Enter the server\'s full address, e.g. https://mcp.yourcompany.com/mcp.');
+    }
+    if (!isRemoteUrl(parsed.href)) {
+        throw new McpServerInputError(parsed.protocol === 'http:'
+            ? 'Use the server\'s https address: its key would otherwise be sent unencrypted.'
+            : 'Enter the server\'s full https address, with nothing left to fill in, e.g. https://mcp.yourcompany.com/mcp.');
+    }
+    if (header && !HEADER_NAME.test(header))
+        throw new McpServerInputError('A header name is letters, digits and dashes, e.g. X-Api-Key.');
+    const same = saved.find((s) => s.url === url);
+    let id = same?.id;
+    if (!id) {
+        const base = title.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '').slice(0, 40) || 'server';
+        id = base;
+        for (let n = 2; saved.some((s) => s.id === id); n++)
+            id = `${base}-${n}`;
+    }
+    return {
+        id,
+        title,
+        description,
+        url,
+        transport: 'streamable-http',
+        source: 'saved',
+        verified: true,
+        ...(header && header.toLowerCase() !== 'authorization' ? { auth: { header } } : {}),
+    };
+}
+/** Adds a server to the saved servers, or replaces the one with its id.
+ * The file's other entries are kept as they are. */
+export function saveMcpServer(server) {
+    const path = savedServersPath();
+    let doc = {};
+    if (existsSync(path)) {
+        try {
+            doc = parseYaml(readFileSync(path, 'utf8')) ?? {};
+        }
+        catch (err) {
+            throw new McpServerInputError(`${path} couldn't be read, so the server wasn't saved: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    const servers = Array.isArray(doc.servers) ? doc.servers.filter((e) => e?.id !== server.id) : [];
+    servers.push({
+        id: server.id,
+        title: server.title,
+        ...(server.description ? { description: server.description } : {}),
+        url: server.url,
+        ...(server.auth?.header ? { auth: { header: server.auth.header } } : {}),
+    });
+    writeFileSync(path, stringifyYaml({ ...doc, servers }));
+}
+/** Removes a saved server; false when there's none with that id. */
+export function removeSavedMcpServer(id) {
+    const path = savedServersPath();
+    if (!existsSync(path))
+        return false;
+    const doc = parseYaml(readFileSync(path, 'utf8')) ?? {};
+    const servers = Array.isArray(doc.servers) ? doc.servers : [];
+    const kept = servers.filter((e) => e?.id !== id);
+    if (kept.length === servers.length)
+        return false;
+    writeFileSync(path, stringifyYaml({ ...doc, servers: kept }));
+    return true;
+}
 /** io.github.firecrawl/… → firecrawl: the GitHub organisation the
  * registry verified the name for. */
 function githubOrg(name) {

package/dist/core/official-abilities.d.ts

@@ -0,0 +1,14 @@
+/** LoopEngine's npm organisation: its scope is official by itself. */
+export declare const OFFICIAL_ABILITY_SCOPE = "@loopengine-co";
+/** Whether a package name is under LoopEngine's npm organisation. */
+export declare function isOfficialScope(name: string): boolean;
+export declare class UnofficialAbilityError extends Error {
+}
+export declare function unofficialAbilitiesAllowed(): boolean;
+/** The package name when a spec installs from the public npm registry:
+ * a bare name or @scope/name, with an optional @version, whose scope isn't
+ * one of the workspace's private registries. Undefined for anything else. */
+export declare function publicNpmPackage(spec: string): string | undefined;
+/** Refuses a public npm ability that isn't official, before anything is
+ * fetched. */
+export declare function assertOfficialAbility(spec: string): void;

package/dist/core/official-abilities.js

@@ -0,0 +1,58 @@
+// Official abilities: of the public ones on npm, only those LoopEngine
+// publishes are listed and installed. Anyone can publish a package with the
+// loopengine-ability keyword, or an lp-* name, and an ability runs code in
+// the agent's server with the agent's keys; so "official" is decided by who
+// can publish it: anything under the @loopengine-co scope, which only
+// members of LoopEngine's npm organisation can publish to. The older
+// unscoped ones (lp-gmail and the rest) aren't, and can't be installed or
+// upgraded; their official versions are under the scope.
+//
+// Private abilities are the workspace's own and stay allowed: a workspace
+// ability (file:), one from a GitHub source (github:owner/repo, git URLs),
+// and one from a private npm registry the workspace set up for a scope
+// (core/ability-sources.ts).
+//
+// LOOPENGINE_ALLOW_UNOFFICIAL_ABILITIES=1 turns the check off, for someone
+// developing their own public ability on a self-hosted server.
+import { readAbilitySources } from './ability-sources.js';
+/** LoopEngine's npm organisation: its scope is official by itself. */
+export const OFFICIAL_ABILITY_SCOPE = '@loopengine-co';
+/** Whether a package name is under LoopEngine's npm organisation. */
+export function isOfficialScope(name) {
+    return name.toLowerCase().startsWith(`${OFFICIAL_ABILITY_SCOPE}/`);
+}
+export class UnofficialAbilityError extends Error {
+}
+export function unofficialAbilitiesAllowed() {
+    return process.env.LOOPENGINE_ALLOW_UNOFFICIAL_ABILITIES === '1';
+}
+/** The package name when a spec installs from the public npm registry:
+ * a bare name or @scope/name, with an optional @version, whose scope isn't
+ * one of the workspace's private registries. Undefined for anything else. */
+export function publicNpmPackage(spec) {
+    const match = /^((?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*)(?:@[^/]+)?$/i.exec(spec.trim());
+    if (!match)
+        return undefined;
+    const name = match[1];
+    if (name.startsWith('@')) {
+        const scope = name.split('/')[0].toLowerCase();
+        let privateScopes = [];
+        try {
+            privateScopes = readAbilitySources().flatMap((s) => (s.type === 'npm' ? [s.scope.toLowerCase()] : []));
+        }
+        catch { }
+        if (privateScopes.includes(scope))
+            return undefined;
+    }
+    return name;
+}
+/** Refuses a public npm ability that isn't official, before anything is
+ * fetched. */
+export function assertOfficialAbility(spec) {
+    if (unofficialAbilitiesAllowed())
+        return;
+    const name = publicNpmPackage(spec);
+    if (!name || isOfficialScope(name))
+        return;
+    throw new UnofficialAbilityError(`${name} isn't an official LoopEngine ability, so it can't be installed: official abilities are under ${OFFICIAL_ABILITY_SCOPE} on npm (search them on the Abilities page). To use your own, add it as a private ability (Settings → Private ability sources, or upload it on the Abilities page).`);
+}

package/dist/core/system-agents/templates.d.ts

@@ -1,4 +1,5 @@
 import type { AgentCandidate } from './interviewer.js';
+import type { WorkflowParameter } from '../workflows.js';
 export interface TemplateRule {
     name: string;
     tool: string;
@@ -9,6 +10,14 @@ export interface TemplateSkill {
     id: string;
     description: string;
     body: string;
+    /** Makes it a workflow, with `body` as its instructions. `webhook`: its
+     * checklist says to add a webhook that sends each result (the URL and
+     * the sender's signing secret are set up with the sender). */
+    workflow?: {
+        title: string;
+        parameters?: Record<string, WorkflowParameter>;
+        webhook?: boolean;
+    };
 }
 export interface TemplateSchedule {
     /** How often, in the scheduler's terms: "10m", "1h", "7d". */

package/dist/core/system-agents/templates.js

@@ -2,9 +2,8 @@ import { nextTimeOfDay, parseTimeOfDay, workspaceTimeZone } from '../time-zone.j
 const GMAIL_KEYS = ['GMAIL_CLIENT_ID', 'GMAIL_CLIENT_SECRET', 'GMAIL_REFRESH_TOKEN'];
 const SHOPIFY_KEYS = ['SHOPIFY_STORE_DOMAIN', 'SHOPIFY_ADMIN_TOKEN'];
 const GITHUB_APP = 'io.github.github/github-mcp-server';
-const SLACK_KEYS = ['SLACK_BOT_TOKEN', 'SLACK_DEFAULT_CHANNEL'];
-const WEB_SEARCH_KEYS = [['TAVILY_API_KEY', 'BRAVE_API_KEY', 'FIRECRAWL_API_KEY']];
-const DOCS_NOTE = 'Put your policies and help articles in the project\'s docs folder, as Markdown or text files (or point DOCS_SEARCH_PATH at another folder)';
+const FIRECRAWL_APP = 'io.github.firecrawl/firecrawl-mcp-server';
+const policiesNote = (what, skill) => `Write ${what} into its ${skill} skill (Advanced → Skills): the agent answers from it and nothing else`;
 export const STARTER_TEMPLATES = [
     {
         id: 'customer-email-replies',
@@ -18,9 +17,9 @@ export const STARTER_TEMPLATES = [
             risk: 'medium',
             asksFirst: ['sending a reply'],
             needs: [
-                { kind: 'ability', name: 'lp-gmail', description: 'your support inbox' },
-                { kind: 'ability', name: 'lp-shopify', description: 'your store\'s orders' },
-                { kind: 'ability', name: 'lp-docs-search', description: 'your help articles and policies' },
+                { kind: 'ability', name: '@loopengine-co/gmail', description: 'your support inbox' },
+                { kind: 'ability', name: '@loopengine-co/shopify', description: 'your store\'s orders' },
+                { kind: 'other', name: 'Your policies', description: 'shipping, returns and the rest, in its support-policies skill' },
             ],
             agent: {
                 name: 'customer-email-replies',
@@ -30,7 +29,7 @@ When asked to handle new emails:
 1. Find them with gmail_search, query "is:unread in:inbox". Skip newsletters, receipts, automatic notifications and "no-reply" senders: mark those read and move on.
 2. For each customer email, read the whole conversation with gmail_get_thread first.
 3. Work out what they want: order status, a product question, a return or refund, a complaint, or something else.
-4. Look up what you need before answering: the order with shopify_find_orders (by the order number they give, or their email) and shopify_get_order, and our policies with search_docs. Never guess an order detail, a date or a policy.
+4. Look up what you need before answering: the order with shopify_find_orders (by the order number they give, or their email) and shopify_get_order, and our policies in the support-policies skill (open it with Skill). Never guess an order detail, a date or a policy.
 5. Reply with gmail_send, passing reply_to_message_id so it stays in the same thread: short, friendly, in the customer's language, using their name, answering the question first and saying what happens next.
 6. Mark the email read with gmail_modify_labels (remove "UNREAD").
 
@@ -44,9 +43,31 @@ Rules:
             },
         },
         setup: {
-            abilities: ['lp-gmail', 'lp-shopify', 'lp-docs-search'],
+            abilities: ['@loopengine-co/gmail', '@loopengine-co/shopify'],
             keys: [...GMAIL_KEYS, ...SHOPIFY_KEYS],
-            env: { DOCS_SEARCH_PATH: 'docs' },
+            skills: [{
+                    id: 'support-policies',
+                    description: 'Our shipping, returns, refunds and other customer policies. Read it before telling a customer anything about a policy.',
+                    body: `# Our customer policies
+
+Edit this: replace each [bracket] with your own policy. The agent answers customers from this and nothing else.
+
+## Shipping
+- Where we ship: [countries]
+- How long it takes: [e.g. 3–5 business days]
+- Tracking: [when and how customers get it]
+
+## Returns and refunds
+- Return window: [e.g. 30 days from delivery]
+- What can't be returned: [e.g. sale items, opened cosmetics]
+- How refunds are paid: [e.g. to the original payment method, in 5–10 business days]
+
+## Other questions
+- [Order changes and cancellations]
+- [Warranty]
+- [Anything customers often ask]
+`,
+                }],
             rules: [
                 { name: 'template-read-mail-allowed', tool: 'gmail_search', decision: 'allow' },
                 { name: 'template-read-thread-allowed', tool: 'gmail_get_thread', decision: 'allow' },
@@ -57,7 +78,7 @@ Rules:
             ],
             schedule: { every: '10m', name: 'Check the support inbox', message: 'Handle new customer emails in the support inbox.' },
             needsApprovals: true,
-            notes: [DOCS_NOTE],
+            notes: [policiesNote('your policies', 'support-policies')],
         },
     },
     {
@@ -72,9 +93,9 @@ Rules:
             risk: 'high',
             asksFirst: ['issuing a refund', 'sending the reply'],
             needs: [
-                { kind: 'ability', name: 'lp-gmail', description: 'your support inbox' },
-                { kind: 'ability', name: 'lp-shopify', description: 'your store\'s orders and refunds' },
-                { kind: 'ability', name: 'lp-docs-search', description: 'your return policy' },
+                { kind: 'ability', name: '@loopengine-co/gmail', description: 'your support inbox' },
+                { kind: 'ability', name: '@loopengine-co/shopify', description: 'your store\'s orders and refunds' },
+                { kind: 'other', name: 'Your return policy', description: 'in its return-policy skill' },
             ],
             agent: {
                 name: 'refund-approvals',
@@ -83,7 +104,7 @@ Rules:
 When asked to handle new refund requests:
 1. Find them with gmail_search, query "is:unread in:inbox (refund OR return OR damaged OR broken OR "money back")". Read each conversation with gmail_get_thread. If an email isn't really a refund or return request, leave it unread for the support team.
 2. Find the order with shopify_find_orders (the order number they give, or their email) and read it with shopify_get_order: what was bought, when, how much, what's already been refunded, whether it was delivered.
-3. Check the request against our return policy with search_docs: the return window, whether the item is eligible, and whether the reason is covered.
+3. Check the request against our return policy in the return-policy skill (open it with Skill): the return window, whether the item is eligible, and whether the reason is covered.
 4. Decide what to propose: a full refund, a partial refund, refunding shipping, or no refund (and which part of the policy says so).
 5. Work out the exact amount with shopify_preview_refund. Never state an amount you haven't previewed.
 6. Issue it with shopify_create_refund, with a note giving the policy rule and the facts from the order. A person approves it first.
@@ -99,9 +120,24 @@ Rules:
             },
         },
         setup: {
-            abilities: ['lp-gmail', 'lp-shopify', 'lp-docs-search'],
+            abilities: ['@loopengine-co/gmail', '@loopengine-co/shopify'],
             keys: [...GMAIL_KEYS, ...SHOPIFY_KEYS],
-            env: { DOCS_SEARCH_PATH: 'docs' },
+            skills: [{
+                    id: 'return-policy',
+                    description: 'Our return and refund policy: the window, what qualifies, and how much is refunded. Read it before proposing any refund.',
+                    body: `# Our return policy
+
+Edit this: replace each [bracket] with your own policy. The agent proposes refunds from this and nothing else.
+
+- Return window: [e.g. 30 days from delivery]
+- Eligible items: [e.g. unused, in the original packaging]
+- Not eligible: [e.g. sale items, gift cards, personalised items]
+- Damaged or wrong items: [e.g. full refund including shipping, no return needed]
+- Change of mind: [e.g. refund of the item price, customer pays return shipping]
+- Shipping costs: [when they're refunded]
+- Partial refunds: [when you offer one, and how much]
+`,
+                }],
             rules: [
                 { name: 'template-read-mail-allowed', tool: 'gmail_search', decision: 'allow' },
                 { name: 'template-read-thread-allowed', tool: 'gmail_get_thread', decision: 'allow' },
@@ -113,7 +149,7 @@ Rules:
             ],
             schedule: { every: '10m', name: 'Check for refund requests', message: 'Handle new refund and return requests in the support inbox.' },
             needsApprovals: true,
-            notes: [DOCS_NOTE + ' — especially your return policy'],
+            notes: [policiesNote('your return policy', 'return-policy')],
         },
     },
     {
@@ -121,15 +157,15 @@ Rules:
         category: 'Operations',
         candidate: {
             title: 'Triage incidents',
-            summary: 'Takes an alert or a bug report, works out what broke and how bad it is, finds the deploys and changes that likely caused it, and posts a summary to Slack. Opening or commenting on issues waits for approval.',
-            trigger: { kind: 'on_request', description: 'when an alert or report is passed to it in Chat, Slack or over HTTP' },
+            summary: 'Takes an alert or a bug report, works out what broke and how bad it is, finds the deploys and changes that likely caused it, and sends a summary to Slack. Opening or commenting on issues waits for approval.',
+            trigger: { kind: 'event', description: 'when your alerting tool calls its webhook, or someone passes it an alert in Chat or Slack' },
             hoursPerWeek: 3,
             fit: 6,
             risk: 'medium',
             asksFirst: ['opening or commenting on issues'],
             needs: [
                 { kind: 'app', name: 'GitHub', description: 'your repository\'s commits, deploys and issues' },
-                { kind: 'ability', name: 'lp-slack-notifier', description: 'posting the summary to Slack' },
+                { kind: 'messaging', name: 'Slack', description: 'where each summary is sent (its Messaging tab)' },
             ],
             agent: {
                 name: 'incident-triage',
@@ -137,32 +173,38 @@ Rules:
 
 Our repository on GitHub: [owner/name] (edit this). Pass its owner and repo to every GitHub tool.
 
-When you get an alert, error or bug report:
-1. Summarise it in two sentences: what is failing and who is affected.
-2. Rate the severity: SEV1 (customers can't use the product), SEV2 (a major feature is broken), SEV3 (degraded or a workaround exists), SEV4 (minor).
-3. Find what changed shortly before it started: github_actions_list (method list_workflow_runs) for recent deploys and failed builds, github_list_pull_requests (state closed) for recently merged changes, and github_list_commits (narrowed with since and path) for detail. Match times carefully.
-4. Check whether it's already known with github_search_issues; read a match with github_issue_read (method get).
-5. Post a short summary to Slack with post_to_slack: what's broken, severity, the most likely cause with links, and one next step (who should look, what to check, or whether to roll back).
-6. If an issue already tracks it, add your findings with github_add_issue_comment; otherwise, for SEV1 or SEV2, open one with github_issue_write (method create). Both ask a person first.
+When you get an alert, error or bug report, follow your triage-incident workflow.
 
 Rules:
 - Only read on your own; never roll anything back yourself.
 - Say how sure you are. If the evidence is thin, say what would confirm it instead of guessing.
-- Keep the Slack summary short enough to read on a phone.`,
+- Keep the summary short enough to read on a phone.`,
                 exampleMessage: 'Alert: checkout-api error rate 18% (normally under 1%) since 14:05 UTC. Errors: "timeout connecting to payments".',
             },
         },
         setup: {
-            abilities: ['lp-slack-notifier'],
+            abilities: [],
             apps: [{ id: GITHUB_APP, title: 'GitHub', tools: ['list_commits', 'list_pull_requests', 'actions_list', 'search_issues', 'issue_read', 'issue_write', 'add_issue_comment'] }],
-            keys: [...SLACK_KEYS],
+            keys: [],
+            skills: [{
+                    id: 'triage-incident',
+                    description: 'Triage an alert, error or bug report: what broke, how bad it is, and the change that likely caused it.',
+                    workflow: { title: 'Triage an incident', parameters: { alert: { description: 'The alert, error or bug report', required: true } }, webhook: true },
+                    body: `Triage the alert you were given.
+
+1. Summarise it in two sentences: what is failing and who is affected.
+2. Rate the severity: SEV1 (customers can't use the product), SEV2 (a major feature is broken), SEV3 (degraded or a workaround exists), SEV4 (minor).
+3. Find what changed shortly before it started: github_actions_list (method list_workflow_runs) for recent deploys and failed builds, github_list_pull_requests (state closed) for recently merged changes, and github_list_commits (narrowed with since and path) for detail. Match times carefully.
+4. Check whether it's already known with github_search_issues; read a match with github_issue_read (method get).
+5. If an issue already tracks it, add your findings with github_add_issue_comment; otherwise, for SEV1 or SEV2, open one with github_issue_write (method create). Both ask a person first.
+6. End with the summary, which is sent to Slack: what's broken, severity, the most likely cause with links, and one next step (who should look, what to check, or whether to roll back).`,
+                }],
             rules: [
-                { name: 'template-slack-summary-allowed', tool: 'post_to_slack', decision: 'allow' },
                 { name: 'template-new-issues-need-approval', tool: 'github_issue_write', decision: 'ask' },
                 { name: 'template-comments-need-approval', tool: 'github_add_issue_comment', decision: 'ask' },
             ],
             needsApprovals: true,
-            notes: ['Send it alerts: paste one into Chat, have your alerting tool call it over HTTP, or reply to it in Slack'],
+            notes: ['Send it alerts: paste one into Chat, mention it in Slack, or have your alerting tool call its webhook'],
         },
     },
     {
@@ -177,8 +219,8 @@ Rules:
             risk: 'high',
             asksFirst: ['replying to the claimant'],
             needs: [
-                { kind: 'ability', name: 'lp-gmail', description: 'the inbox where claims arrive' },
-                { kind: 'ability', name: 'lp-docs-search', description: 'your expense policy' },
+                { kind: 'ability', name: '@loopengine-co/gmail', description: 'the inbox where claims arrive' },
+                { kind: 'other', name: 'Your expense policy', description: 'in its expense-policy skill' },
             ],
             agent: {
                 name: 'expense-approvals',
@@ -187,7 +229,7 @@ Rules:
 When asked to check new claims:
 1. Find them with gmail_search, query "is:unread in:inbox". Read each with gmail_get_thread.
 2. Read the amount, currency, date, merchant, category and who submitted it, from the email and its receipt (the attachment names show whether a receipt is there).
-3. Check it against the expense policy with search_docs: the category is allowed, it's under the limit, the receipt matches the amount and date, and it isn't a duplicate of an earlier claim (search the inbox for the same merchant and amount).
+3. Check it against our expense policy in the expense-policy skill (open it with Skill): the category is allowed, it's under the limit, the receipt matches the amount and date, and it isn't a duplicate of an earlier claim (search the inbox for the same merchant and amount).
 4. Write a one-line verdict: "Within policy" or "Outside policy: <reason>", then the details you checked.
 5. Email the verdict to the approver at the address in the EXPENSE_APPROVER_EMAIL setting with gmail_send, then mark the claim read with gmail_modify_labels.
 
@@ -200,9 +242,30 @@ Rules:
             },
         },
         setup: {
-            abilities: ['lp-gmail', 'lp-docs-search'],
+            abilities: ['@loopengine-co/gmail'],
             keys: [...GMAIL_KEYS],
-            env: { DOCS_SEARCH_PATH: 'docs' },
+            skills: [{
+                    id: 'expense-policy',
+                    description: 'Our expense policy: what can be claimed, the limits, and what a claim needs. Read it before giving any verdict.',
+                    body: `# Our expense policy
+
+Edit this: replace each [bracket] with your own policy. The agent checks claims against this and nothing else.
+
+## What can be claimed, and the limits
+- Travel: [e.g. economy flights and trains; taxis when there's no public transport]
+- Hotels: [e.g. up to 150 per night]
+- Meals: [e.g. up to 50 per day when travelling]
+- Equipment and software: [e.g. up to 200 without pre-approval]
+
+## What can't be claimed
+- [e.g. alcohol, fines, personal entertainment]
+
+## What every claim needs
+- An itemised receipt showing the amount, date and merchant
+- [Pre-approval for anything over a limit]
+- Submitted within [e.g. 60 days]
+`,
+                }],
             rules: [
                 { name: 'template-read-mail-allowed', tool: 'gmail_search', decision: 'allow' },
                 { name: 'template-read-thread-allowed', tool: 'gmail_get_thread', decision: 'allow' },
@@ -212,7 +275,7 @@ Rules:
             ],
             schedule: { every: '15m', name: 'Check for new claims', message: 'Check the new expense claims in the inbox.' },
             needsApprovals: true,
-            notes: [DOCS_NOTE + ' — especially your expense policy', 'Set EXPENSE_APPROVER_EMAIL (Environment tab) to the approver\'s address'],
+            notes: [policiesNote('your expense policy', 'expense-policy'), 'Set EXPENSE_APPROVER_EMAIL (Environment tab) to the approver\'s address'],
         },
     },
     {
@@ -227,9 +290,9 @@ Rules:
             risk: 'medium',
             asksFirst: ['sending the first email', 'updating the lead'],
             needs: [
-                { kind: 'ability', name: 'lp-hubspot', description: 'your leads in HubSpot' },
-                { kind: 'ability', name: 'lp-web-search', description: 'researching each lead' },
-                { kind: 'ability', name: 'lp-gmail', description: 'the inbox to send from' },
+                { kind: 'ability', name: '@loopengine-co/hubspot', description: 'your leads in HubSpot' },
+                { kind: 'app', name: 'Firecrawl', description: 'researching each lead on the web' },
+                { kind: 'ability', name: '@loopengine-co/gmail', description: 'the inbox to send from' },
             ],
             agent: {
                 name: 'lead-follow-up',
@@ -243,7 +306,7 @@ What we sell (edit this):
 When asked to follow up with new leads:
 1. Find them with hubspot_find_contacts: lead_status "NEW", created_in_last_days 2.
 2. For each, read hubspot_get_contact. Skip anyone with an owner, recent notes, or a last-contacted date: someone is already on it.
-3. Research them with web_search and web_fetch: what their company does, its size, and anything recent that matters (funding, hiring, a launch). Note your sources.
+3. Research them with firecrawl_search and firecrawl_scrape: what their company does, its size, and anything recent that matters (funding, hiring, a launch). Note your sources.
 4. Work out what they most likely need from us, in one sentence.
 5. Send a short first email (under 120 words) with gmail_send: a specific opening based on your research, one sentence on how we help with that need, and one easy question to reply to. A person approves it first.
 6. Log what you sent and found with hubspot_add_note, and set the lead to "ATTEMPTED_TO_CONTACT" with hubspot_update_contact.
@@ -257,9 +320,12 @@ Rules:
             },
         },
         setup: {
-            abilities: ['lp-hubspot', 'lp-web-search', 'lp-gmail'],
-            keys: ['HUBSPOT_ACCESS_TOKEN', ...WEB_SEARCH_KEYS, ...GMAIL_KEYS],
+            abilities: ['@loopengine-co/hubspot', '@loopengine-co/gmail'],
+            apps: [{ id: FIRECRAWL_APP, title: 'Firecrawl', tools: ['firecrawl_search', 'firecrawl_scrape'] }],
+            keys: ['HUBSPOT_ACCESS_TOKEN', ...GMAIL_KEYS],
             rules: [
+                { name: 'template-search-allowed', tool: 'firecrawl_search', decision: 'allow' },
+                { name: 'template-read-pages-allowed', tool: 'firecrawl_scrape', decision: 'allow' },
                 { name: 'template-notes-allowed', tool: 'hubspot_add_note', decision: 'allow' },
                 { name: 'template-lead-updates-need-approval', tool: 'hubspot_update_contact', decision: 'ask' },
                 { name: 'template-no-new-contacts', tool: 'hubspot_create_contact', decision: 'deny' },
@@ -282,7 +348,7 @@ Rules:
             risk: 'low',
             asksFirst: ['replying to the sender'],
             needs: [
-                { kind: 'ability', name: 'lp-gmail', description: 'the shared inbox' },
+                { kind: 'ability', name: '@loopengine-co/gmail', description: 'the shared inbox' },
                 { kind: 'app', name: 'GitHub', description: 'tasks, as GitHub issues' },
             ],
             agent: {
@@ -312,7 +378,7 @@ Rules:
             },
         },
         setup: {
-            abilities: ['lp-gmail'],
+            abilities: ['@loopengine-co/gmail'],
             apps: [{ id: GITHUB_APP, title: 'GitHub', tools: ['search_issues', 'issue_write', 'add_issue_comment'] }],
             keys: [...GMAIL_KEYS],
             rules: [
@@ -333,19 +399,19 @@ Rules:
         category: 'Research',
         candidate: {
             title: 'Weekly research digest',
-            summary: 'Every Monday morning, searches the web for news on the topics you choose and posts a short digest with links to Slack.',
+            summary: 'Every Monday morning, searches the web for news on the topics you choose and sends a short digest with links to Slack.',
             trigger: { kind: 'schedule', description: 'Mondays at 9:00', every: '7d' },
             hoursPerWeek: 2,
             fit: 6,
             risk: 'low',
             asksFirst: [],
             needs: [
-                { kind: 'ability', name: 'lp-web-search', description: 'web search' },
-                { kind: 'ability', name: 'lp-slack-notifier', description: 'posting the digest to Slack' },
+                { kind: 'app', name: 'Firecrawl', description: 'searching the web and reading pages' },
+                { kind: 'messaging', name: 'Slack', description: 'where each digest is sent (its Messaging tab)' },
             ],
             agent: {
                 name: 'weekly-research-digest',
-                systemPrompt: `You write a weekly research digest and post it to Slack.
+                systemPrompt: `You write a weekly research digest. Your answer is the digest: it's sent to Slack as it is.
 
 Topics to follow (edit this list):
 - [Your industry or market]
@@ -353,29 +419,29 @@ Topics to follow (edit this list):
 - [Technologies or regulations you care about]
 
 Each week:
-1. Search the web with web_search for what happened in the last 7 days on each topic.
-2. Open the most relevant pages with web_fetch and read them; don't rely on search snippets.
+1. Search the web with firecrawl_search for what happened in the last 7 days on each topic.
+2. Open the most relevant pages with firecrawl_scrape and read them; don't rely on search snippets.
 3. Write the digest: for each topic, up to three items, each with a one-sentence summary, why it matters to us, and the link.
 4. End with "Worth a closer look": the single most important item, and why.
-5. Post it with post_to_slack.
+5. Answer with the digest alone, nothing before or after it.
 
 Rules:
 - Only include things published in the last 7 days, and give each item's date.
 - Prefer original sources over aggregators. Never invent a link.
 - If a topic had no real news, say so in one line.`,
-                scheduleMessage: 'Write and post this week\'s research digest.',
-                exampleMessage: 'Write and post this week\'s research digest.',
+                scheduleMessage: 'Write this week\'s research digest.',
+                exampleMessage: 'Write this week\'s research digest.',
             },
         },
         setup: {
-            abilities: ['lp-web-search', 'lp-slack-notifier'],
-            keys: [...WEB_SEARCH_KEYS, ...SLACK_KEYS],
+            abilities: [],
+            apps: [{ id: FIRECRAWL_APP, title: 'Firecrawl', tools: ['firecrawl_search', 'firecrawl_scrape'] }],
+            keys: [],
             rules: [
-                { name: 'template-search-allowed', tool: 'web_search', decision: 'allow' },
-                { name: 'template-fetch-allowed', tool: 'web_fetch', decision: 'allow' },
-                { name: 'template-digest-post-allowed', tool: 'post_to_slack', decision: 'allow' },
+                { name: 'template-search-allowed', tool: 'firecrawl_search', decision: 'allow' },
+                { name: 'template-read-pages-allowed', tool: 'firecrawl_scrape', decision: 'allow' },
             ],
-            schedule: { every: '7d', at: '09:00', weekday: 1, name: 'Weekly research digest', message: 'Write and post this week\'s research digest.' },
+            schedule: { every: '7d', at: '09:00', weekday: 1, name: 'Weekly research digest', message: 'Write this week\'s research digest.', notify: true },
             needsApprovals: false,
             notes: ['Edit "Topics to follow" at the top of its instructions (Overview tab)'],
         },

package/dist/index.d.ts

@@ -108,7 +108,7 @@ export { AbilitySourceError, abilityOrigin, readAbilitySources, saveAbilitySourc
 export { describeAbilitySources, listPrivateAbilities, saveAbilitySourceFromConsole, removeAbilitySourceFromConsole } from './web/ability-sources-admin.js';
 export { readAbilityDetails, readToolDefinitions, type AbilityDetails } from './core/ability-details.js';
 export { loadMcpAbilityTools, mcpAbilityLoadError, closeMcpConnections, resolveMcpManifest, listMcpServerTools, isMcpAuthError, type McpServerManifest, type McpAuth, type InstalledMcpRecord, type McpToolInfo } from './core/mcp-abilities.js';
-export { searchMcpServers, getMcpServer, savedMcpServers, type McpDirectoryServer } from './core/mcp-directory.js';
+export { searchMcpServers, getMcpServer, savedMcpServers, ownMcpServer, saveMcpServer, removeSavedMcpServer, McpServerInputError, type McpDirectoryServer } from './core/mcp-directory.js';
 export { generateMcpAbility, mcpAbilityNames, McpAbilityGenerationError, type GeneratedMcpAbility, type McpAbilityRequest } from './core/mcp-ability-generator.js';
 export { abilityDetails } from './web/ability-details-admin.js';
 export { WorkspaceAbilityError, listWorkspaceAbilities, addWorkspaceAbility, removeWorkspaceAbility, workspaceAbilitiesDir, type WorkspaceAbility } from './core/workspace-abilities.js';

package/dist/index.js

@@ -98,7 +98,7 @@ export { AbilitySourceError, abilityOrigin, readAbilitySources, saveAbilitySourc
 export { describeAbilitySources, listPrivateAbilities, saveAbilitySourceFromConsole, removeAbilitySourceFromConsole } from './web/ability-sources-admin.js';
 export { readAbilityDetails, readToolDefinitions } from './core/ability-details.js';
 export { loadMcpAbilityTools, mcpAbilityLoadError, closeMcpConnections, resolveMcpManifest, listMcpServerTools, isMcpAuthError } from './core/mcp-abilities.js';
-export { searchMcpServers, getMcpServer, savedMcpServers } from './core/mcp-directory.js';
+export { searchMcpServers, getMcpServer, savedMcpServers, ownMcpServer, saveMcpServer, removeSavedMcpServer, McpServerInputError } from './core/mcp-directory.js';
 export { generateMcpAbility, mcpAbilityNames, McpAbilityGenerationError } from './core/mcp-ability-generator.js';
 export { abilityDetails } from './web/ability-details-admin.js';
 export { WorkspaceAbilityError, listWorkspaceAbilities, addWorkspaceAbility, removeWorkspaceAbility, workspaceAbilitiesDir } from './core/workspace-abilities.js';

package/dist/web/abilities-admin.js

@@ -1,5 +1,16 @@
+// Backs the Admin UI's official abilities search box: the npm packages
+// under LoopEngine's @loopengine-co scope, tagged with the
+// loopengine-ability keyword (core/official-abilities.ts). A fresh call on
+// every search, no caching: this is an on-demand lookup the operator
+// explicitly asked for, not data the tab needs hot the way
+// gateway-tools.ts's own live-reconnect data is — same "only pay the
+// live cost when actually asked for" split, just with nothing worth
+// remembering afterward here.
+import { isOfficialScope, unofficialAbilitiesAllowed } from '../core/official-abilities.js';
 const NPM_SEARCH_TIMEOUT_MS = 10000;
-const NPM_SEARCH_SIZE = 20;
+// npm's most per page: the official ones are filtered out of everything
+// tagged with the keyword, so ask for all of it.
+const NPM_SEARCH_SIZE = 250;
 export async function searchPublicAbilities(query) {
     const text = query ? `keywords:loopengine-ability ${query}` : 'keywords:loopengine-ability';
     const url = `https://registry.npmjs.org/-/v1/search?text=${encodeURIComponent(text)}&size=${NPM_SEARCH_SIZE}`;
@@ -18,7 +29,12 @@ export async function searchPublicAbilities(query) {
     if (!res.ok)
         throw new Error(`npm registry search failed (HTTP ${res.status})`);
     const data = (await res.json());
-    const results = (data.objects ?? []).map((o) => ({
+    // Only LoopEngine's own scope, unless unofficial abilities are turned
+    // on: anyone can publish with the keyword. (npm's scope: qualifier
+    // only ranks, it doesn't filter.)
+    const all = unofficialAbilitiesAllowed();
+    const official = (data.objects ?? []).filter((o) => all || isOfficialScope(o.package.name));
+    const results = official.map((o) => ({
         name: o.package.name,
         description: o.package.description ?? '',
         version: o.package.version,

package/dist/web/agents-config-page.js

@@ -728,7 +728,7 @@ ${consoleShellScript}
         '<span><a href="?agent=' + encodeURIComponent(agentName) + '&amp;tab=schedules#schedule-' + escapeHtml(x.taskId) + '" class="workflow-schedule-link" data-task="' + escapeHtml(x.taskId) + '" title="See it in the Schedules tab">' +
           escapeHtml(x.describe.charAt(0).toUpperCase() + x.describe.slice(1)) + '</a></span>' + state +
         (values ? '<span class="hint">' + values + '</span>' : '') +
-        (x.notify ? '<span class="hint">results go to your messaging app</span>' : '') +
+        (x.notify ? '<span class="hint">messages you the result when it finishes</span>' : '') +
         '<span style="display:flex;gap:6px;margin-left:auto">' +
           (x.status === 'paused' ? '<button type="button" class="workflow-schedule-action" data-id="' + escapeHtml(x.taskId) + '" data-action="resume">Resume</button>'
             : x.status === 'scheduled' ? '<button type="button" class="workflow-schedule-action" data-id="' + escapeHtml(x.taskId) + '" data-action="pause">Pause</button>' : '') +
@@ -1023,7 +1023,7 @@ ${consoleShellScript}
     if (t.filter) rules.push('only when ' + escapeHtml(t.filter.path) + ' is ' + t.filter.values.map(escapeHtml).join(' or '));
     if (t.mapping) rules.push(Object.keys(t.mapping).map(function (p) { return escapeHtml(p) + ' ' + String.fromCharCode(8592) + ' ' + escapeHtml(t.mapping[p]); }).join(', '));
     if (t.payload_param) rules.push('the whole payload goes to ' + escapeHtml(t.payload_param));
-    if (t.notify) rules.push('sends each result to you');
+    if (t.notify) rules.push('messages you the result when it finishes');
     if (t.callback_url) rules.push('reports to ' + escapeHtml(t.callback_url));
     // Made by the workflow planner without its secret: it turns on once
     // the sender's signing secret is added.
@@ -1069,7 +1069,7 @@ ${consoleShellScript}
             params.map(function (p) { return '<div class="workflow-param-row"><code class="wp-name">' + escapeHtml(p) + '</code><input name="map:' + escapeHtml(p) + '" placeholder="data.object.id" style="flex:1"></div>'; }).join('') + '</div>' +
           '<label>Or give the whole payload to <select name="payload_param"><option value="">(none)</option>' + params.map(function (p) { return '<option>' + escapeHtml(p) + '</option>'; }).join('') + '</select></label>'
         : '<p class="hint" style="margin:0">This workflow takes no parameters, so the payload isn' + String.fromCharCode(8217) + 't passed on. Add one in Edit to use it.</p>') +
-      '<label class="http-tool-inline-label"><input type="checkbox" name="notify"> Send each run' + String.fromCharCode(8217) + 's result to you through the agent' + String.fromCharCode(8217) + 's messaging app</label>' +
+      '<label class="http-tool-inline-label"><input type="checkbox" name="notify"> Message me the result when it finishes <span class="hint">(through its Messaging tab: Slack, email, Lark or a webhook)</span></label>' +
       '<label>Post each run' + String.fromCharCode(8217) + 's result to <span class="hint">(optional, an https URL)</span><input name="callback_url" placeholder="https://example.com/hooks/loopengine"></label>' +
       '<div style="display:flex;gap:8px"><button type="submit" class="primary">Make the URL</button></div>' +
       '<div class="hint hook-form-result"></div></form>';
@@ -2431,8 +2431,8 @@ ${consoleShellScript}
             ? '<div><span class="le-pill bad">Workflow removed</span> <span class="hint">' + escapeHtml(t.workflow_id) + '</span></div>'
             : '<div class="schedule-result hint">' + escapeHtml(t.message) + '</div>') +
         (t.status !== 'cancelled' && t.status !== 'done'
-          ? '<label class="schedule-notify hint" title="Send each run&#39;s result through this agent&#39;s messaging connection (Messaging tab)"><input type="checkbox" class="schedule-notify-toggle" data-id="' + escapeHtml(t.task_id) + '"' + (t.notify ? ' checked' : '') + '> Send each result to you</label>'
-          : (t.notify ? '<div class="hint">Sent each result to you</div>' : '')) + '</td>' +
+          ? '<label class="schedule-notify hint" title="Sent through its Messaging tab: Slack, email, Lark or a webhook"><input type="checkbox" class="schedule-notify-toggle" data-id="' + escapeHtml(t.task_id) + '"' + (t.notify ? ' checked' : '') + '> Message me the result when it finishes</label>'
+          : (t.notify ? '<div class="hint">Messaged you the result when it finished</div>' : '')) + '</td>' +
       '<td>' + scheduleText(t.schedule) + (t.next_run_at ? '<div class="hint">next ' + escapeHtml(fmtScheduleTime(t.next_run_at)) + '</div>' : '') + '</td>' +
       '<td><span class="le-pill ' + (SCHEDULE_PILLS[t.status] || 'neutral') + '">' + escapeHtml(SCHEDULE_LABELS[t.status] || t.status) + '</span>' +
         (t.status === 'awaiting_approval' ? '<div class="hint"><a href="#" class="schedule-to-approvals">Decide in Messaging</a></div>' : '') + '</td>' +
@@ -2474,7 +2474,7 @@ ${consoleShellScript}
               '<input type="datetime-local" name="runAt" aria-label="Date and time"></div>' +
           '</div>' +
           '<label>Name <span class="hint">(optional)</span><input name="task_name" placeholder="Daily ticket summary"></label>' +
-          '<label class="http-tool-inline-label"><input type="checkbox" name="notify"> Send each result through this agent&#39;s messaging connection (set in the Messaging tab)</label>' +
+          '<label class="http-tool-inline-label"><input type="checkbox" name="notify"> Message me the result when it finishes <span class="hint">(through its Messaging tab: Slack, email, Lark or a webhook)</span></label>' +
           '<div style="display:flex;gap:8px"><button type="submit">Schedule</button></div>' +
           '<div id="scheduleResult" class="hint"></div>' +
         '</form></section>';
@@ -3040,7 +3040,7 @@ ${consoleShellScript}
   }
 
   // ---- Apps tab: what's already installed for this agent, a
-  // search box over public (npm, tagged loopengine-ability) packages,
+  // search box over official (@loopengine-co on npm) abilities,
   // and a plain spec field for a private ability (a git URL, a local
   // file:../path, or a private registry name) — both installs go
   // through the same POST .../abilities, since installAbility itself
@@ -3085,7 +3085,7 @@ ${consoleShellScript}
       '</tr>';
   }
 
-  // A public (npm) or private ability not installed here yet: its
+  // An official or private ability not installed here yet: its
   // details show the permissions it ships with.
   function renderAbilitySearchResultRow(pkg, installedNames, spec) {
     var installSpec = spec || pkg.name;
@@ -3108,15 +3108,15 @@ ${consoleShellScript}
       : '<p class="hint">Nothing added to this agent yet.</p>';
 
     // What this agent has first; then the workspace's connected apps (each
-    // with the tools this agent gets), then public and private abilities.
+    // with the tools this agent gets), then official and private abilities.
     return '<h3 style="justify-content:flex-start;align-items:baseline;gap:8px">Installed <span class="hint" style="font-weight:400">the apps and abilities this agent has</span></h3>' + installedHtml +
       // Installing by name or spec is on the console's Abilities page.
       '<p id="abilityInstallStatus" class="hint"></p>' +
       '<h3 style="margin-top:24px;justify-content:flex-start;align-items:baseline;gap:8px">Apps <span class="hint" style="font-weight:400">connected in this workspace; choose which of their tools this agent gets, and each one' + String.fromCharCode(8217) + 's permission</span></h3>' +
       '<div id="agentApps" style="margin-bottom:32px"><p class="hint">Loading&hellip;</p></div>' +
-      '<h3 style="margin-top:24px;justify-content:flex-start;align-items:baseline;gap:8px">Public abilities <span class="hint" style="font-weight:400">npm packages tagged loopengine-ability</span></h3>' +
+      '<h3 style="margin-top:24px;justify-content:flex-start;align-items:baseline;gap:8px">Official abilities <span class="hint" style="font-weight:400">published by LoopEngine</span></h3>' +
       '<form id="abilitySearchForm" style="display:flex;gap:6px;margin:0 0 10px;max-width:560px">' +
-        '<input type="search" name="q" placeholder="Search abilities, e.g. gmail" aria-label="Search public abilities" style="flex:1">' +
+        '<input type="search" name="q" placeholder="Search abilities, e.g. gmail" aria-label="Search official abilities" style="flex:1">' +
         '<button type="submit">Search</button>' +
       '</form>' +
       '<div id="abilitySearchResults" style="margin-bottom:32px"></div>' +
@@ -3334,7 +3334,7 @@ ${consoleShellScript}
         var results = result.body.results || [];
         resultsEl.innerHTML = results.length
           ? '<table><thead><tr><th>Package</th><th>Description</th><th></th></tr></thead><tbody>' + results.map(function (pkg) { return renderAbilitySearchResultRow(pkg, installedNames); }).join('') + '</tbody></table>'
-          : '<p class="hint">No public abilities found.</p>';
+          : '<p class="hint">No official abilities found.</p>';
         var installBtns = resultsEl.querySelectorAll('.ability-install-btn');
         for (var i = 0; i < installBtns.length; i++) {
           installBtns[i].addEventListener('click', function (ev2) {

package/dist/web/console-shell.js

@@ -15,7 +15,7 @@
 //   leShell.wireModelPicker(form)  model dropdown for a provider select
 //   leShell.loadProviderKeys()     Promise of {provider: key saved?}, or null
 //   leShell.applyProviderKeys(form, keys, keep)  only providers with a key
-//   leShell.abilityOriginBadge(origin)    Public/Private badge for an ability
+//   leShell.abilityOriginBadge(origin)    Official/Public/Private badge for an ability
 //   leShell.toggleAbilityDetails(btn)     an ability's tools, skills and settings
 // Same embedded-string conventions as the pages themselves: plain
 // string concatenation and no backslashes inside the script, so nothing
@@ -360,11 +360,12 @@ export const consoleShellScript = `<script>
     return decision ? '<span class="le-pill ' + decision + '">' + DECISION_LABELS[decision] + '</span>' : '<span class="hint">No rule</span>';
   }
 
-  // Public (npm) or Private, with where it came from on hover.
+  // Official (@loopengine-co), Public (other npm) or Private, with where
+  // it came from on hover.
   function abilityOriginBadge(origin) {
     if (!origin) return '';
     return '<span class="le-pill ' + (origin.kind === 'private' ? 'accent' : '') + '" title="' + esc(origin.label) + '">' +
-      (origin.kind === 'private' ? 'Private' : 'Public') + '</span> <span class="hint">' + esc(origin.label) + '</span>';
+      (origin.kind === 'private' ? 'Private' : origin.kind === 'official' ? 'Official' : 'Public') + '</span> <span class="hint">' + esc(origin.label) + '</span>';
   }
 
 

package/dist/web/global-config-page.js

@@ -251,7 +251,7 @@ ${consoleShellScript}
   }
 
   // ---- Abilities section ----
-  // How agents reach outside apps. Public abilities (npm) are browsed
+  // How agents reach outside apps. Official abilities (npm) are browsed
   // here and installed from an agent's own Apps tab. A private one
   // (from the sources in Settings) is installed here into the workspace
   // (core/workspace-abilities.ts), then added to any agent from its tab.
@@ -271,9 +271,9 @@ ${consoleShellScript}
   function renderAbilities() {
     var content = document.getElementById('abilitiesContent');
     content.innerHTML = '<section>' +
-      '<h4>Public <span class="hint">npm packages tagged loopengine-ability; add one to an agent from its Apps tab</span></h4>' +
+      '<h4>Official <span class="hint">published by LoopEngine; add one to an agent from its Apps tab</span></h4>' +
       '<form id="abilitySearchForm" style="display:flex;gap:6px;margin:0 0 10px;max-width:560px">' +
-        '<input type="search" name="q" placeholder="Search abilities, e.g. gmail" aria-label="Search public abilities" style="flex:1">' +
+        '<input type="search" name="q" placeholder="Search abilities, e.g. gmail" aria-label="Search official abilities" style="flex:1">' +
         '<button type="submit">Search</button>' +
       '</form>' +
       '<div id="abilitySearchResults"><p class="hint">Loading&hellip;</p></div>' +
@@ -443,7 +443,7 @@ ${consoleShellScript}
   }
 
   // Linked from an agent's Apps tab (/config?section=abilities#private-abilities):
-  // once every list has loaded, so the public results don't push it down.
+  // once every list has loaded, so the official results don't push it down.
   var scrolledToPrivate = false;
   function scrollToPrivateIfLinked() {
     if (scrolledToPrivate || location.hash !== '#private-abilities' || !lastPrivate || !workspaceAbilities || lastSearch.q === null) return;
@@ -547,6 +547,8 @@ ${consoleShellScript}
   // Open tool panels, by ability: { tools, filter, error, busy }.
   var openTools = {};
   var appSearch = { q: '', servers: null, error: '' };
+  // The "Add your own server" form: open, and what's typed in it.
+  var ownForm = { open: false };
 
   function appLetter(title) {
     return '<span class="app-letter" aria-hidden="true">' + escapeHtml((title || '?').charAt(0).toUpperCase()) + '</span>';
@@ -572,6 +574,37 @@ ${consoleShellScript}
       '<p class="hint app-msg" style="margin:0"></p></form>';
   }
 
+  // Your company's own servers (mcp-servers.yml): each connects like any
+  // app; a saved one not connected can be connected again or removed.
+  function renderOwnServers() {
+    var saved = apps.saved || [];
+    var rows = saved.map(function (s) {
+      var connected = apps.connected.some(function (c) { return c.url === s.url; });
+      return '<div class="app-row" data-app="' + escapeHtml(s.id) + '"><div class="app-head">' + appLetter(s.title) + '</div>' +
+        '<div class="app-row-main"><div><strong>' + escapeHtml(s.title) + '</strong> <span class="badge badge-default">Private</span></div>' +
+          '<div class="hint">' + escapeHtml(s.url) + (s.description ? ' &middot; ' + escapeHtml(s.description) : '') + (s.header ? ' &middot; key sent in ' + escapeHtml(s.header) : '') + '</div></div>' +
+        '<div class="app-slot">' + (connected
+          ? '<span class="badge badge-custom">Connected</span>'
+          : '<button type="button" class="app-connect" data-id="' + escapeHtml(s.id) + '"' + (apps.canConnect ? '' : ' disabled') + '>Connect</button> <button type="button" class="delete-btn app-forget" data-id="' + escapeHtml(s.id) + '"' + (apps.canConnect ? '' : ' disabled') + '>Remove</button>') + '</div></div>';
+    }).join('');
+    var form = ownForm.open
+      ? '<form id="ownServerForm" class="app-form" style="max-width:560px">' +
+          '<label>Name<input name="title" required maxlength="60" placeholder="Acme CRM"></label>' +
+          '<label>Address<input name="url" type="url" required placeholder="https://mcp.yourcompany.com/mcp"></label>' +
+          '<label>What it does <span class="hint">(optional)</span><input name="description" maxlength="200" placeholder="Our customers, orders and support tickets"></label>' +
+          '<label>API key <span class="hint">(if it needs one; saved in this workspace' + String.fromCharCode(8217) + 's settings)</span><input name="key" type="password" autocomplete="off"></label>' +
+          '<label>Header for the key <span class="hint">(optional; empty sends it as Authorization: Bearer ' + String.fromCharCode(8230) + ')</span><input name="header" placeholder="X-Api-Key" pattern="[A-Za-z0-9-]+"></label>' +
+          '<div class="app-foot"><button type="submit">Connect</button><button type="button" class="own-cancel">Cancel</button></div>' +
+          '<p class="hint app-msg" style="margin:0"></p></form>'
+      : '<button type="button" class="own-add"' + (apps.canConnect ? '' : ' disabled') + '>Add your own server</button>';
+    return '<section id="own-servers"><h3>Your own servers</h3>' +
+      '<p class="hint">Your company' + String.fromCharCode(8217) + 's own MCP server, by its address: it connects like any app, and only this workspace sees it. Servers that only offer a sign-in (OAuth) can' + String.fromCharCode(8217) + 't be connected yet.</p>' +
+      (rows ? '<div class="app-list" style="margin-bottom:10px">' + rows + '</div>' : '') + form + '</section>';
+  }
+
+  // By name: form.title is the form's own title attribute.
+  function ownField(form, name) { return form.querySelector('[name=' + name + ']').value; }
+
   function renderApps() {
     var el = document.getElementById('appsContent');
     if (!apps) return;
@@ -601,6 +634,7 @@ ${consoleShellScript}
         }).join('') + '</div>' +
         '<p class="hint">Each is the app' + String.fromCharCode(8217) + 's own MCP server. Apps that only offer a sign-in (OAuth) can' + String.fromCharCode(8217) + 't be connected yet; their Connect says so.</p>' +
       '</section>' +
+      renderOwnServers() +
       '<section><h3>More apps</h3>' +
         '<form id="appSearchForm" style="display:flex;gap:6px;margin:0 0 10px;max-width:560px"><input type="search" name="q" placeholder="Search the MCP Registry, e.g. calendly" aria-label="Search apps" style="flex:1" value="' + escapeHtml(appSearch.q) + '"><button type="submit">Search</button></form>' +
         '<div id="appSearchResults">' + renderAppSearch() + '</div>' +
@@ -716,6 +750,26 @@ ${consoleShellScript}
       return;
     }
     if (t.classList.contains('app-cancel')) { renderApps(); return; }
+    if (t.classList.contains('own-add')) {
+      ownForm.open = true;
+      renderApps();
+      document.querySelector('#ownServerForm input[name=title]').focus();
+      return;
+    }
+    if (t.classList.contains('own-cancel')) { ownForm.open = false; renderApps(); return; }
+    if (t.classList.contains('app-forget')) {
+      if (t.dataset.confirming !== '1') { t.dataset.confirming = '1'; t.textContent = 'Click again to remove'; return; }
+      t.disabled = true;
+      fetch('/config/apps/servers?id=' + encodeURIComponent(t.dataset.id), { method: 'DELETE' })
+        .then(function (r) { return r.json().then(function (j) { return { ok: r.ok, body: j }; }); })
+        .then(function (r) {
+          if (!r.ok) throw new Error(r.body.error || 'request failed');
+          apps = r.body;
+          renderApps();
+        })
+        .catch(function (err) { t.disabled = false; t.textContent = 'Could not remove: ' + err.message; });
+      return;
+    }
     if (t.classList.contains('app-disconnect')) {
       if (t.dataset.confirming !== '1') { t.dataset.confirming = '1'; t.textContent = 'Click again to disconnect'; return; }
       t.disabled = true;
@@ -760,6 +814,28 @@ ${consoleShellScript}
         .catch(function (err) { appSearch.error = 'Could not search: ' + err.message; document.getElementById('appSearchResults').innerHTML = renderAppSearch(); });
       return;
     }
+    if (form.id === 'ownServerForm') {
+      var ownBtn = form.querySelector('button[type=submit]');
+      var ownMsg = form.querySelector('.app-msg');
+      ownBtn.disabled = true;
+      ownMsg.className = 'hint app-msg';
+      ownMsg.textContent = 'Connecting' + String.fromCharCode(8230) + ' it asks the server for its tools and sets their permissions, which can take a minute.';
+      fetch('/config/apps/servers', { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ title: ownField(form, 'title'), url: ownField(form, 'url'), description: ownField(form, 'description'), key: ownField(form, 'key'), header: ownField(form, 'header') }) })
+        .then(function (r) { return r.json().then(function (j) { return { ok: r.ok, body: j }; }); })
+        .then(function (r) {
+          if (!r.ok) throw new Error(r.body.error || 'request failed');
+          apps = r.body;
+          ownForm.open = false;
+          if (r.body.connectedAbility) loadTools(r.body.connectedAbility, false);
+          else renderApps();
+        })
+        .catch(function (err) {
+          ownBtn.disabled = false;
+          ownMsg.className = 'error app-msg';
+          ownMsg.textContent = err.message;
+        });
+      return;
+    }
     if (!form.dataset.connect) return;
     var btn = form.querySelector('button[type=submit]');
     var msg = form.querySelector('.app-msg');
@@ -805,12 +881,12 @@ ${consoleShellScript}
       rows.map(function (r) { return '<tr><td>' + r[0] + '</td><td>' + r[1] + '</td></tr>'; }).join('') +
       '</tbody></table></section>' +
       (d.timeZone ? '<section><h3>Time zone</h3><div class="source" id="timeZoneBox"><p class="hint">Loading' + String.fromCharCode(8230) + '</p></div></section>' : '') +
-      '<section><h3>Private ability sources</h3><p class="muted" style="margin:0 0 10px">Where your own abilities come from, listed under Private on the Abilities page next to the public ones on npm.</p><div class="source" id="abilitySourcesBox"><p class="hint">Loading' + String.fromCharCode(8230) + '</p></div></section>' +
+      '<section><h3>Private ability sources</h3><p class="muted" style="margin:0 0 10px">Where your own abilities come from, listed under Private on the Abilities page next to LoopEngine&#39;s official ones.</p><div class="source" id="abilitySourcesBox"><p class="hint">Loading' + String.fromCharCode(8230) + '</p></div></section>' +
       '<section><h3>Updates</h3><div class="source" id="upgradeBox"><p class="hint">Checking for a newer LoopEngine' + String.fromCharCode(8230) + '</p></div></section>';
   }
 
   // ---- Private ability sources (Settings) ----
-  // Where this project's own abilities come from, next to the public ones
+  // Where this project's own abilities come from, next to the official ones
   // on npm: a GitHub org or user, or a private npm registry
   // (core/ability-sources.ts). There's no folder kind here: this server
   // may run in the cloud, so local files are uploaded on the Abilities

package/dist/web/templates-admin.js

@@ -15,6 +15,8 @@ import { ActauthRuleExistsError, addActauthRule, applyPlannedRules, setDefaultDe
 import { setAgentEnvVar } from './env-admin.js';
 import { freeAgentName } from './interview-admin.js';
 import { writeSkill } from './skills-admin.js';
+import { agentDir } from '../core/gateway-tools.js';
+import { setWorkflowFields } from '../core/workflows.js';
 /** What a template's schedule runs (its workflow, when it comes from one,
  * or its message), and whether it sends each result. */
 function scheduleRuns(schedule) {
@@ -84,7 +86,7 @@ export function previewTemplate(id, deps) {
         // A key set for the whole project already counts for a new agent.
         keys: keyGroups(template).map((names) => ({ names, set: names.some((n) => Boolean(envValue(name, n))) })),
         settings: setup.env ?? {},
-        schedule: setup.schedule ? `${describeTemplateSchedule(setup.schedule)} (created paused)` : null,
+        schedule: setup.schedule ? `${describeTemplateSchedule(setup.schedule)} (created paused)${setup.schedule.notify ? '; it messages you the result when it finishes, through its Messaging tab: Slack, email, Lark or a webhook' : ''}` : null,
         needsApprovals: setup.needsApprovals,
         notes: setup.notes ?? [],
     };
@@ -104,8 +106,19 @@ export function templateChecklist(template, name, deps, failed = [], appsToConne
     for (const group of missing.filter((g) => g.length > 1)) {
         items.push({ label: `Add one of ${group.slice(0, -1).join(', ')} or ${group.at(-1)}`, href: tab('env') });
     }
-    if (template.setup.needsApprovals && !deps.messagingConfigured(name)) {
-        items.push({ label: 'Choose where approval requests go: Slack, email, Lark or a webhook', href: tab('messaging') });
+    // A schedule or webhook that sends each result needs the same connection.
+    const webhookWorkflows = (template.setup.skills ?? []).filter((s) => s.workflow?.webhook);
+    const sendsResults = Boolean(template.setup.schedule?.notify) || webhookWorkflows.length > 0;
+    if ((template.setup.needsApprovals || sendsResults) && !deps.messagingConfigured(name)) {
+        items.push({
+            label: template.setup.needsApprovals
+                ? `Choose where approval requests${sendsResults ? ' and results' : ''} go: Slack, email, Lark or a webhook`
+                : 'Choose where its results go: Slack, email, Lark or a webhook',
+            href: tab('messaging'),
+        });
+    }
+    for (const skill of webhookWorkflows) {
+        items.push({ label: `Add a webhook to the "${skill.workflow.title}" workflow with "Message me the result when it finishes" on, then paste its URL into the app that sends the alerts`, href: tab('workflows') });
     }
     for (const note of template.setup.notes ?? [])
         items.push({ label: note });
@@ -179,8 +192,11 @@ export async function createFromTemplateObject(template, deps) {
     // none twice, a stricter one placed so it counts, none loosened.
     applyPlannedRules(name, setup.rules.map((r) => ({ name: r.name, tool: r.tool, decision: r.decision })));
     // 3. Its own skills and non-secret settings.
-    for (const skill of setup.skills ?? [])
+    for (const skill of setup.skills ?? []) {
         writeSkill(name, skill.id, { description: skill.description, body: skill.body });
+        if (skill.workflow)
+            setWorkflowFields(agentDir(name), skill.id, { title: skill.workflow.title, instructions: skill.body, ...(skill.workflow.parameters ? { parameters: skill.workflow.parameters } : {}) });
+    }
     for (const [variable, value] of Object.entries(setup.env ?? {}))
         await setAgentEnvVar(name, variable, value);
     // 4. Load it, now that everything is in place.

package/dist/web/templates-page.js

@@ -75,7 +75,7 @@ ${consoleShellScript}
       '<div class="meta">' +
         '<div><strong>Runs:</strong> ' + esc(t.trigger) + '</div>' +
         (t.asksFirst.length ? '<div><strong>Asks you first:</strong> ' + esc(t.asksFirst.join(', ')) + '</div>' : '') +
-        '<div><strong>Installs:</strong> ' + t.abilities.map(function (a) { return '<code>' + esc(a) + '</code>'; }).join(' ') + '</div>' +
+        (t.abilities.length || (t.apps || []).length ? '<div><strong>Uses:</strong> ' + t.abilities.map(function (a) { return '<code>' + esc(a) + '</code>'; }).concat((t.apps || []).map(function (a) { return esc(a); })).join(' ') + '</div>' : '') +
       '</div>' +
       '<div class="row"><button type="button" class="primary tp-use">Use this template</button></div>' +
       '<div class="tp-slot"></div></div>';
@@ -108,17 +108,18 @@ ${consoleShellScript}
       slot.innerHTML = '<div class="tp-preview">' +
         '<div><strong>Agent:</strong> <code>' + esc(p.name) + '</code></div>' +
         '<div><strong>Instructions</strong> <span class="hint">(edit them later in its Overview tab)</span><pre>' + esc(p.systemPrompt) + '</pre></div>' +
-        '<div><strong>Installs</strong> <span class="hint">(abilities: their tools, skills and permission rules)</span>' +
+        (p.abilities.length ? '<div><strong>Installs</strong> <span class="hint">(abilities: their tools, skills and permission rules)</span>' +
           listHtml(p.abilities.map(function (a) { return '<li><code>' + esc(a) + '</code></li>'; })) +
-          (canInstall ? '' : '<p class="error" style="margin:4px 0 0">Installing abilities needs <code>LOOPENGINE_ADMIN_AUTH</code> set on the server. Without it, the agent is created and its abilities head the checklist.</p>') + '</div>' +
+          (canInstall ? '' : '<p class="error" style="margin:4px 0 0">Installing abilities needs <code>LOOPENGINE_ADMIN_AUTH</code> set on the server. Without it, the agent is created and its abilities head the checklist.</p>') + '</div>' : '') +
         (p.apps && p.apps.length ? '<div><strong>Apps it uses</strong> <span class="hint">(connected on the <a href="/config?section=apps">Apps</a> page; one that isn' + String.fromCharCode(8217) + 't connected yet heads the checklist)</span>' + listHtml(p.apps.map(function (a) { return '<li>' + esc(a) + '</li>'; })) + '</div>' : '') +
         '<div><strong>Permissions</strong> <span class="hint">(anything not listed asks you first)</span>' +
           listHtml(p.rules.map(function (rule) { return '<li><code>' + esc(rule.tool) + '</code>: ' + esc(DECISIONS[rule.decision] || rule.decision) + '</li>'; })) + '</div>' +
-        '<div><strong>Keys it needs</strong>' +
+        (p.skills && p.skills.length ? '<div><strong>Skills it starts with</strong> <span class="hint">(edit them later in Advanced ' + String.fromCharCode(8594) + ' Skills)</span>' + listHtml(p.skills.map(function (sk) { return '<li><code>' + esc(sk) + '</code></li>'; })) + '</div>' : '') +
+        (p.keys.length ? '<div><strong>Keys it needs</strong>' +
           listHtml(p.keys.map(function (k) {
             var names = k.names.length > 1 ? 'one of ' + k.names.join(', ') : k.names[0];
             return '<li>' + esc(names) + (k.set ? ' <span class="hint">' + CHECK + ' already set</span>' : '') + '</li>';
-          })) + '</div>' +
+          })) + '</div>' : '') +
         (settings.length ? '<div><strong>Settings filled in:</strong> ' + settings.map(function (s) { return '<code>' + esc(s) + '=' + esc(p.settings[s]) + '</code>'; }).join(', ') + '</div>' : '') +
         (p.schedule ? '<div><strong>Schedule:</strong> ' + esc(p.schedule) + '</div>' : '') +
         (p.needsApprovals ? '<div><strong>Approvals:</strong> requests reach you wherever its Messaging tab sends them (Slack, email, Lark or a webhook).</div>' : '') +

package/dist/web/workflow-page.js

@@ -263,7 +263,7 @@ ${consoleShellScript}
         '<p class="hint" style="margin:0"><strong>Starts:</strong> ' + esc(p.trigger.description) + (p.trigger.kind === 'schedule' ? ' (created paused; you turn it on)' : '') + '</p>' +
         webhookPlanHtml(p) +
         (p.trigger.kind === 'schedule' || p.trigger.kind === 'webhook'
-          ? '<label class="wf-notify"><input type="checkbox" id="wfNotify"' + (p.notify && p.notify.on ? ' checked' : '') + '> Send each run' + String.fromCharCode(8217) + 's result to you through the agent' + String.fromCharCode(8217) + 's messaging app</label>' +
+          ? '<label class="wf-notify"><input type="checkbox" id="wfNotify"' + (p.notify && p.notify.on ? ' checked' : '') + '> Message me the result when it finishes <span class="hint">(through its Messaging tab: Slack, email, Lark or a webhook)</span></label>' +
             (p.notify && p.notify.reason ? '<p class="hint" style="margin:0 0 0 24px">' + esc(p.notify.reason) + '</p>' : '')
           : '') +
         paramsSectionHtml(p) +

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "loopengine",
-  "version": "0.3.9",
+  "version": "0.3.10",
   "type": "module",
   "description": "Runtime for tool-using AI agents with a transparent ReAct loop.",
   "license": "MIT",
@@ -48,6 +48,8 @@
     "dist/core/usage.d.ts",
     "dist/core/run-events.js",
     "dist/core/run-events.d.ts",
+    "dist/core/official-abilities.js",
+    "dist/core/official-abilities.d.ts",
     "dist/core/email-senders.js",
     "dist/core/email-senders.d.ts",
     "dist/core/notifier-file.js",