loopengine 0.3.9 → 0.3.11

package/dist/web/agents-config-page.js

@@ -728,7 +728,7 @@ ${consoleShellScript}
         '<span><a href="?agent=' + encodeURIComponent(agentName) + '&amp;tab=schedules#schedule-' + escapeHtml(x.taskId) + '" class="workflow-schedule-link" data-task="' + escapeHtml(x.taskId) + '" title="See it in the Schedules tab">' +
           escapeHtml(x.describe.charAt(0).toUpperCase() + x.describe.slice(1)) + '</a></span>' + state +
         (values ? '<span class="hint">' + values + '</span>' : '') +
-        (x.notify ? '<span class="hint">results go to your messaging app</span>' : '') +
+        (x.notify ? '<span class="hint">messages you the result when it finishes</span>' : '') +
         '<span style="display:flex;gap:6px;margin-left:auto">' +
           (x.status === 'paused' ? '<button type="button" class="workflow-schedule-action" data-id="' + escapeHtml(x.taskId) + '" data-action="resume">Resume</button>'
             : x.status === 'scheduled' ? '<button type="button" class="workflow-schedule-action" data-id="' + escapeHtml(x.taskId) + '" data-action="pause">Pause</button>' : '') +
@@ -1023,7 +1023,7 @@ ${consoleShellScript}
     if (t.filter) rules.push('only when ' + escapeHtml(t.filter.path) + ' is ' + t.filter.values.map(escapeHtml).join(' or '));
     if (t.mapping) rules.push(Object.keys(t.mapping).map(function (p) { return escapeHtml(p) + ' ' + String.fromCharCode(8592) + ' ' + escapeHtml(t.mapping[p]); }).join(', '));
     if (t.payload_param) rules.push('the whole payload goes to ' + escapeHtml(t.payload_param));
-    if (t.notify) rules.push('sends each result to you');
+    if (t.notify) rules.push('messages you the result when it finishes');
     if (t.callback_url) rules.push('reports to ' + escapeHtml(t.callback_url));
     // Made by the workflow planner without its secret: it turns on once
     // the sender's signing secret is added.
@@ -1069,7 +1069,7 @@ ${consoleShellScript}
             params.map(function (p) { return '<div class="workflow-param-row"><code class="wp-name">' + escapeHtml(p) + '</code><input name="map:' + escapeHtml(p) + '" placeholder="data.object.id" style="flex:1"></div>'; }).join('') + '</div>' +
           '<label>Or give the whole payload to <select name="payload_param"><option value="">(none)</option>' + params.map(function (p) { return '<option>' + escapeHtml(p) + '</option>'; }).join('') + '</select></label>'
         : '<p class="hint" style="margin:0">This workflow takes no parameters, so the payload isn' + String.fromCharCode(8217) + 't passed on. Add one in Edit to use it.</p>') +
-      '<label class="http-tool-inline-label"><input type="checkbox" name="notify"> Send each run' + String.fromCharCode(8217) + 's result to you through the agent' + String.fromCharCode(8217) + 's messaging app</label>' +
+      '<label class="http-tool-inline-label"><input type="checkbox" name="notify"> Message me the result when it finishes <span class="hint">(through its Messaging tab: Slack, email, Lark or a webhook)</span></label>' +
       '<label>Post each run' + String.fromCharCode(8217) + 's result to <span class="hint">(optional, an https URL)</span><input name="callback_url" placeholder="https://example.com/hooks/loopengine"></label>' +
       '<div style="display:flex;gap:8px"><button type="submit" class="primary">Make the URL</button></div>' +
       '<div class="hint hook-form-result"></div></form>';
@@ -2431,8 +2431,8 @@ ${consoleShellScript}
             ? '<div><span class="le-pill bad">Workflow removed</span> <span class="hint">' + escapeHtml(t.workflow_id) + '</span></div>'
             : '<div class="schedule-result hint">' + escapeHtml(t.message) + '</div>') +
         (t.status !== 'cancelled' && t.status !== 'done'
-          ? '<label class="schedule-notify hint" title="Send each run&#39;s result through this agent&#39;s messaging connection (Messaging tab)"><input type="checkbox" class="schedule-notify-toggle" data-id="' + escapeHtml(t.task_id) + '"' + (t.notify ? ' checked' : '') + '> Send each result to you</label>'
-          : (t.notify ? '<div class="hint">Sent each result to you</div>' : '')) + '</td>' +
+          ? '<label class="schedule-notify hint" title="Sent through its Messaging tab: Slack, email, Lark or a webhook"><input type="checkbox" class="schedule-notify-toggle" data-id="' + escapeHtml(t.task_id) + '"' + (t.notify ? ' checked' : '') + '> Message me the result when it finishes</label>'
+          : (t.notify ? '<div class="hint">Messaged you the result when it finished</div>' : '')) + '</td>' +
       '<td>' + scheduleText(t.schedule) + (t.next_run_at ? '<div class="hint">next ' + escapeHtml(fmtScheduleTime(t.next_run_at)) + '</div>' : '') + '</td>' +
       '<td><span class="le-pill ' + (SCHEDULE_PILLS[t.status] || 'neutral') + '">' + escapeHtml(SCHEDULE_LABELS[t.status] || t.status) + '</span>' +
         (t.status === 'awaiting_approval' ? '<div class="hint"><a href="#" class="schedule-to-approvals">Decide in Messaging</a></div>' : '') + '</td>' +
@@ -2474,7 +2474,7 @@ ${consoleShellScript}
               '<input type="datetime-local" name="runAt" aria-label="Date and time"></div>' +
           '</div>' +
           '<label>Name <span class="hint">(optional)</span><input name="task_name" placeholder="Daily ticket summary"></label>' +
-          '<label class="http-tool-inline-label"><input type="checkbox" name="notify"> Send each result through this agent&#39;s messaging connection (set in the Messaging tab)</label>' +
+          '<label class="http-tool-inline-label"><input type="checkbox" name="notify"> Message me the result when it finishes <span class="hint">(through its Messaging tab: Slack, email, Lark or a webhook)</span></label>' +
           '<div style="display:flex;gap:8px"><button type="submit">Schedule</button></div>' +
           '<div id="scheduleResult" class="hint"></div>' +
         '</form></section>';
@@ -3040,7 +3040,7 @@ ${consoleShellScript}
   }
 
   // ---- Apps tab: what's already installed for this agent, a
-  // search box over public (npm, tagged loopengine-ability) packages,
+  // search box over official (@loopengine-co on npm) abilities,
   // and a plain spec field for a private ability (a git URL, a local
   // file:../path, or a private registry name) — both installs go
   // through the same POST .../abilities, since installAbility itself
@@ -3085,7 +3085,7 @@ ${consoleShellScript}
       '</tr>';
   }
 
-  // A public (npm) or private ability not installed here yet: its
+  // An official or private ability not installed here yet: its
   // details show the permissions it ships with.
   function renderAbilitySearchResultRow(pkg, installedNames, spec) {
     var installSpec = spec || pkg.name;
@@ -3108,15 +3108,15 @@ ${consoleShellScript}
       : '<p class="hint">Nothing added to this agent yet.</p>';
 
     // What this agent has first; then the workspace's connected apps (each
-    // with the tools this agent gets), then public and private abilities.
+    // with the tools this agent gets), then official and private abilities.
     return '<h3 style="justify-content:flex-start;align-items:baseline;gap:8px">Installed <span class="hint" style="font-weight:400">the apps and abilities this agent has</span></h3>' + installedHtml +
       // Installing by name or spec is on the console's Abilities page.
       '<p id="abilityInstallStatus" class="hint"></p>' +
       '<h3 style="margin-top:24px;justify-content:flex-start;align-items:baseline;gap:8px">Apps <span class="hint" style="font-weight:400">connected in this workspace; choose which of their tools this agent gets, and each one' + String.fromCharCode(8217) + 's permission</span></h3>' +
       '<div id="agentApps" style="margin-bottom:32px"><p class="hint">Loading&hellip;</p></div>' +
-      '<h3 style="margin-top:24px;justify-content:flex-start;align-items:baseline;gap:8px">Public abilities <span class="hint" style="font-weight:400">npm packages tagged loopengine-ability</span></h3>' +
+      '<h3 style="margin-top:24px;justify-content:flex-start;align-items:baseline;gap:8px">Official abilities <span class="hint" style="font-weight:400">published by LoopEngine</span></h3>' +
       '<form id="abilitySearchForm" style="display:flex;gap:6px;margin:0 0 10px;max-width:560px">' +
-        '<input type="search" name="q" placeholder="Search abilities, e.g. gmail" aria-label="Search public abilities" style="flex:1">' +
+        '<input type="search" name="q" placeholder="Search abilities, e.g. gmail" aria-label="Search official abilities" style="flex:1">' +
         '<button type="submit">Search</button>' +
       '</form>' +
       '<div id="abilitySearchResults" style="margin-bottom:32px"></div>' +
@@ -3334,7 +3334,7 @@ ${consoleShellScript}
         var results = result.body.results || [];
         resultsEl.innerHTML = results.length
           ? '<table><thead><tr><th>Package</th><th>Description</th><th></th></tr></thead><tbody>' + results.map(function (pkg) { return renderAbilitySearchResultRow(pkg, installedNames); }).join('') + '</tbody></table>'
-          : '<p class="hint">No public abilities found.</p>';
+          : '<p class="hint">No official abilities found.</p>';
         var installBtns = resultsEl.querySelectorAll('.ability-install-btn');
         for (var i = 0; i < installBtns.length; i++) {
           installBtns[i].addEventListener('click', function (ev2) {

package/dist/web/agents-list-page.js

@@ -50,13 +50,13 @@ ${consoleSidebarHtml}
       <div class="le-title"><button type="button" class="le-menu-btn" data-le-menu aria-label="Open navigation">&#9776;</button>
         <div><h1>Agents</h1><p>Every agent under agents/ in this project. Open one to chat with it or change its tools, permissions and settings.</p></div>
       </div>
-      <div style="display:flex;gap:8px;flex-wrap:wrap"><a href="/templates" style="padding:6px 12px;border:1px solid var(--line);border-radius:6px;text-decoration:none;color:var(--ink);font-size:13px">Templates</a><a href="/interview" style="padding:6px 12px;border:1px solid var(--line);border-radius:6px;text-decoration:none;color:var(--ink);font-size:13px">Find your first agent</a>
+      <div style="display:flex;gap:8px;flex-wrap:wrap"><a href="/workflows/new#examples" style="padding:6px 12px;border:1px solid var(--line);border-radius:6px;text-decoration:none;color:var(--ink);font-size:13px">Workflow examples</a><a href="/interview" style="padding:6px 12px;border:1px solid var(--line);border-radius:6px;text-decoration:none;color:var(--ink);font-size:13px">Find your first agent</a>
       <button type="button" id="newAgentBtn" class="primary">New agent</button></div>
     </div>
   </div>
   <div class="le-scroll"><div class="le-page">
     <form id="newAgentForm" style="display:none">
-      <p class="hint" style="margin:0">Not sure what to build? <a href="/templates">Start from a template</a>, or <a href="/interview">find your first agent</a>: a short interview that suggests one and creates it.</p>
+      <p class="hint" style="margin:0">Not sure what to build? <a href="/workflows/new#examples">Start from a workflow example</a>, or <a href="/interview">find your first agent</a>: a short interview that suggests one and creates it.</p>
       <h2>New agent</h2>
       <label>Name <span class="hint">(lowercase, hyphens allowed: becomes agents/&lt;name&gt;/)</span>
         <input type="text" name="name" placeholder="weather-agent" pattern="[a-z0-9]+(-[a-z0-9]+)*" required>

package/dist/web/console-shell.js

@@ -15,7 +15,7 @@
 //   leShell.wireModelPicker(form)  model dropdown for a provider select
 //   leShell.loadProviderKeys()     Promise of {provider: key saved?}, or null
 //   leShell.applyProviderKeys(form, keys, keep)  only providers with a key
-//   leShell.abilityOriginBadge(origin)    Public/Private badge for an ability
+//   leShell.abilityOriginBadge(origin)    Official/Public/Private badge for an ability
 //   leShell.toggleAbilityDetails(btn)     an ability's tools, skills and settings
 // Same embedded-string conventions as the pages themselves: plain
 // string concatenation and no backslashes inside the script, so nothing
@@ -28,8 +28,7 @@ export const consoleSidebarHtml = `<aside class="le-sidebar" aria-label="Console
   <div class="le-nav-label"><span>Agents</span><a href="/agents?new=1">+ New</a></div>
   <ul class="le-agent-list" id="leAgentList"></ul>
   <a class="le-find" href="/interview" data-le-nav="interview">Find your first agent</a>
-  <a class="le-find" href="/templates" data-le-nav="templates">Start from a template</a>
-  <a class="le-find" href="/workflows/new" data-le-nav="workflows">Describe a workflow</a>
+  <a class="le-find" href="/workflows/new" data-le-nav="workflows">New workflow</a>
   <nav class="le-foot" aria-label="Settings">
     <a href="/config?section=models" data-le-nav="models">Models</a>
     <a href="/config?section=apps" data-le-nav="apps">Apps</a>
@@ -174,7 +173,7 @@ export const consoleShellScript = `<script>
   }
 
   var section = params.get('section');
-  var foot = page === 'config' ? (section === 'abilities' || section === 'gateways' ? 'abilities' : section === 'apps' ? 'apps' : section === 'settings' ? 'settings' : 'models') : page === 'interview' || page === 'templates' ? page : '';
+  var foot = page === 'config' ? (section === 'abilities' || section === 'gateways' ? 'abilities' : section === 'apps' ? 'apps' : section === 'settings' ? 'settings' : 'models') : page === 'interview' || page === 'workflows' ? page : '';
   var footLinks = document.querySelectorAll('[data-le-nav]');
   for (var i = 0; i < footLinks.length; i++) {
     if (footLinks[i].getAttribute('data-le-nav') === foot) footLinks[i].setAttribute('aria-current', 'page');
@@ -360,11 +359,12 @@ export const consoleShellScript = `<script>
     return decision ? '<span class="le-pill ' + decision + '">' + DECISION_LABELS[decision] + '</span>' : '<span class="hint">No rule</span>';
   }
 
-  // Public (npm) or Private, with where it came from on hover.
+  // Official (@loopengine-co), Public (other npm) or Private, with where
+  // it came from on hover.
   function abilityOriginBadge(origin) {
     if (!origin) return '';
     return '<span class="le-pill ' + (origin.kind === 'private' ? 'accent' : '') + '" title="' + esc(origin.label) + '">' +
-      (origin.kind === 'private' ? 'Private' : 'Public') + '</span> <span class="hint">' + esc(origin.label) + '</span>';
+      (origin.kind === 'private' ? 'Private' : origin.kind === 'official' ? 'Official' : 'Public') + '</span> <span class="hint">' + esc(origin.label) + '</span>';
   }
 
 

package/dist/web/global-config-page.js

@@ -251,7 +251,7 @@ ${consoleShellScript}
   }
 
   // ---- Abilities section ----
-  // How agents reach outside apps. Public abilities (npm) are browsed
+  // How agents reach outside apps. Official abilities (npm) are browsed
   // here and installed from an agent's own Apps tab. A private one
   // (from the sources in Settings) is installed here into the workspace
   // (core/workspace-abilities.ts), then added to any agent from its tab.
@@ -271,9 +271,9 @@ ${consoleShellScript}
   function renderAbilities() {
     var content = document.getElementById('abilitiesContent');
     content.innerHTML = '<section>' +
-      '<h4>Public <span class="hint">npm packages tagged loopengine-ability; add one to an agent from its Apps tab</span></h4>' +
+      '<h4>Official <span class="hint">published by LoopEngine; add one to an agent from its Apps tab</span></h4>' +
       '<form id="abilitySearchForm" style="display:flex;gap:6px;margin:0 0 10px;max-width:560px">' +
-        '<input type="search" name="q" placeholder="Search abilities, e.g. gmail" aria-label="Search public abilities" style="flex:1">' +
+        '<input type="search" name="q" placeholder="Search abilities, e.g. gmail" aria-label="Search official abilities" style="flex:1">' +
         '<button type="submit">Search</button>' +
       '</form>' +
       '<div id="abilitySearchResults"><p class="hint">Loading&hellip;</p></div>' +
@@ -443,7 +443,7 @@ ${consoleShellScript}
   }
 
   // Linked from an agent's Apps tab (/config?section=abilities#private-abilities):
-  // once every list has loaded, so the public results don't push it down.
+  // once every list has loaded, so the official results don't push it down.
   var scrolledToPrivate = false;
   function scrollToPrivateIfLinked() {
     if (scrolledToPrivate || location.hash !== '#private-abilities' || !lastPrivate || !workspaceAbilities || lastSearch.q === null) return;
@@ -547,6 +547,8 @@ ${consoleShellScript}
   // Open tool panels, by ability: { tools, filter, error, busy }.
   var openTools = {};
   var appSearch = { q: '', servers: null, error: '' };
+  // The "Add your own server" form: open, and what's typed in it.
+  var ownForm = { open: false };
 
   function appLetter(title) {
     return '<span class="app-letter" aria-hidden="true">' + escapeHtml((title || '?').charAt(0).toUpperCase()) + '</span>';
@@ -572,6 +574,37 @@ ${consoleShellScript}
       '<p class="hint app-msg" style="margin:0"></p></form>';
   }
 
+  // Your company's own servers (mcp-servers.yml): each connects like any
+  // app; a saved one not connected can be connected again or removed.
+  function renderOwnServers() {
+    var saved = apps.saved || [];
+    var rows = saved.map(function (s) {
+      var connected = apps.connected.some(function (c) { return c.url === s.url; });
+      return '<div class="app-row" data-app="' + escapeHtml(s.id) + '"><div class="app-head">' + appLetter(s.title) + '</div>' +
+        '<div class="app-row-main"><div><strong>' + escapeHtml(s.title) + '</strong> <span class="badge badge-default">Private</span></div>' +
+          '<div class="hint">' + escapeHtml(s.url) + (s.description ? ' &middot; ' + escapeHtml(s.description) : '') + (s.header ? ' &middot; key sent in ' + escapeHtml(s.header) : '') + '</div></div>' +
+        '<div class="app-slot">' + (connected
+          ? '<span class="badge badge-custom">Connected</span>'
+          : '<button type="button" class="app-connect" data-id="' + escapeHtml(s.id) + '"' + (apps.canConnect ? '' : ' disabled') + '>Connect</button> <button type="button" class="delete-btn app-forget" data-id="' + escapeHtml(s.id) + '"' + (apps.canConnect ? '' : ' disabled') + '>Remove</button>') + '</div></div>';
+    }).join('');
+    var form = ownForm.open
+      ? '<form id="ownServerForm" class="app-form" style="max-width:560px">' +
+          '<label>Name<input name="title" required maxlength="60" placeholder="Acme CRM"></label>' +
+          '<label>Address<input name="url" type="url" required placeholder="https://mcp.yourcompany.com/mcp"></label>' +
+          '<label>What it does <span class="hint">(optional)</span><input name="description" maxlength="200" placeholder="Our customers, orders and support tickets"></label>' +
+          '<label>API key <span class="hint">(if it needs one; saved in this workspace' + String.fromCharCode(8217) + 's settings)</span><input name="key" type="password" autocomplete="off"></label>' +
+          '<label>Header for the key <span class="hint">(optional; empty sends it as Authorization: Bearer ' + String.fromCharCode(8230) + ')</span><input name="header" placeholder="X-Api-Key" pattern="[A-Za-z0-9-]+"></label>' +
+          '<div class="app-foot"><button type="submit">Connect</button><button type="button" class="own-cancel">Cancel</button></div>' +
+          '<p class="hint app-msg" style="margin:0"></p></form>'
+      : '<button type="button" class="own-add"' + (apps.canConnect ? '' : ' disabled') + '>Add your own server</button>';
+    return '<section id="own-servers"><h3>Your own servers</h3>' +
+      '<p class="hint">Your company' + String.fromCharCode(8217) + 's own MCP server, by its address: it connects like any app, and only this workspace sees it. Servers that only offer a sign-in (OAuth) can' + String.fromCharCode(8217) + 't be connected yet.</p>' +
+      (rows ? '<div class="app-list" style="margin-bottom:10px">' + rows + '</div>' : '') + form + '</section>';
+  }
+
+  // By name: form.title is the form's own title attribute.
+  function ownField(form, name) { return form.querySelector('[name=' + name + ']').value; }
+
   function renderApps() {
     var el = document.getElementById('appsContent');
     if (!apps) return;
@@ -601,6 +634,7 @@ ${consoleShellScript}
         }).join('') + '</div>' +
         '<p class="hint">Each is the app' + String.fromCharCode(8217) + 's own MCP server. Apps that only offer a sign-in (OAuth) can' + String.fromCharCode(8217) + 't be connected yet; their Connect says so.</p>' +
       '</section>' +
+      renderOwnServers() +
       '<section><h3>More apps</h3>' +
         '<form id="appSearchForm" style="display:flex;gap:6px;margin:0 0 10px;max-width:560px"><input type="search" name="q" placeholder="Search the MCP Registry, e.g. calendly" aria-label="Search apps" style="flex:1" value="' + escapeHtml(appSearch.q) + '"><button type="submit">Search</button></form>' +
         '<div id="appSearchResults">' + renderAppSearch() + '</div>' +
@@ -716,6 +750,26 @@ ${consoleShellScript}
       return;
     }
     if (t.classList.contains('app-cancel')) { renderApps(); return; }
+    if (t.classList.contains('own-add')) {
+      ownForm.open = true;
+      renderApps();
+      document.querySelector('#ownServerForm input[name=title]').focus();
+      return;
+    }
+    if (t.classList.contains('own-cancel')) { ownForm.open = false; renderApps(); return; }
+    if (t.classList.contains('app-forget')) {
+      if (t.dataset.confirming !== '1') { t.dataset.confirming = '1'; t.textContent = 'Click again to remove'; return; }
+      t.disabled = true;
+      fetch('/config/apps/servers?id=' + encodeURIComponent(t.dataset.id), { method: 'DELETE' })
+        .then(function (r) { return r.json().then(function (j) { return { ok: r.ok, body: j }; }); })
+        .then(function (r) {
+          if (!r.ok) throw new Error(r.body.error || 'request failed');
+          apps = r.body;
+          renderApps();
+        })
+        .catch(function (err) { t.disabled = false; t.textContent = 'Could not remove: ' + err.message; });
+      return;
+    }
     if (t.classList.contains('app-disconnect')) {
       if (t.dataset.confirming !== '1') { t.dataset.confirming = '1'; t.textContent = 'Click again to disconnect'; return; }
       t.disabled = true;
@@ -760,6 +814,28 @@ ${consoleShellScript}
         .catch(function (err) { appSearch.error = 'Could not search: ' + err.message; document.getElementById('appSearchResults').innerHTML = renderAppSearch(); });
       return;
     }
+    if (form.id === 'ownServerForm') {
+      var ownBtn = form.querySelector('button[type=submit]');
+      var ownMsg = form.querySelector('.app-msg');
+      ownBtn.disabled = true;
+      ownMsg.className = 'hint app-msg';
+      ownMsg.textContent = 'Connecting' + String.fromCharCode(8230) + ' it asks the server for its tools and sets their permissions, which can take a minute.';
+      fetch('/config/apps/servers', { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ title: ownField(form, 'title'), url: ownField(form, 'url'), description: ownField(form, 'description'), key: ownField(form, 'key'), header: ownField(form, 'header') }) })
+        .then(function (r) { return r.json().then(function (j) { return { ok: r.ok, body: j }; }); })
+        .then(function (r) {
+          if (!r.ok) throw new Error(r.body.error || 'request failed');
+          apps = r.body;
+          ownForm.open = false;
+          if (r.body.connectedAbility) loadTools(r.body.connectedAbility, false);
+          else renderApps();
+        })
+        .catch(function (err) {
+          ownBtn.disabled = false;
+          ownMsg.className = 'error app-msg';
+          ownMsg.textContent = err.message;
+        });
+      return;
+    }
     if (!form.dataset.connect) return;
     var btn = form.querySelector('button[type=submit]');
     var msg = form.querySelector('.app-msg');
@@ -805,12 +881,12 @@ ${consoleShellScript}
       rows.map(function (r) { return '<tr><td>' + r[0] + '</td><td>' + r[1] + '</td></tr>'; }).join('') +
       '</tbody></table></section>' +
       (d.timeZone ? '<section><h3>Time zone</h3><div class="source" id="timeZoneBox"><p class="hint">Loading' + String.fromCharCode(8230) + '</p></div></section>' : '') +
-      '<section><h3>Private ability sources</h3><p class="muted" style="margin:0 0 10px">Where your own abilities come from, listed under Private on the Abilities page next to the public ones on npm.</p><div class="source" id="abilitySourcesBox"><p class="hint">Loading' + String.fromCharCode(8230) + '</p></div></section>' +
+      '<section><h3>Private ability sources</h3><p class="muted" style="margin:0 0 10px">Where your own abilities come from, listed under Private on the Abilities page next to LoopEngine&#39;s official ones.</p><div class="source" id="abilitySourcesBox"><p class="hint">Loading' + String.fromCharCode(8230) + '</p></div></section>' +
       '<section><h3>Updates</h3><div class="source" id="upgradeBox"><p class="hint">Checking for a newer LoopEngine' + String.fromCharCode(8230) + '</p></div></section>';
   }
 
   // ---- Private ability sources (Settings) ----
-  // Where this project's own abilities come from, next to the public ones
+  // Where this project's own abilities come from, next to the official ones
   // on npm: a GitHub org or user, or a private npm registry
   // (core/ability-sources.ts). There's no folder kind here: this server
   // may run in the cloud, so local files are uploaded on the Abilities

package/dist/web/templates-admin.js

@@ -15,6 +15,8 @@ import { ActauthRuleExistsError, addActauthRule, applyPlannedRules, setDefaultDe
 import { setAgentEnvVar } from './env-admin.js';
 import { freeAgentName } from './interview-admin.js';
 import { writeSkill } from './skills-admin.js';
+import { agentDir } from '../core/gateway-tools.js';
+import { setWorkflowFields } from '../core/workflows.js';
 /** What a template's schedule runs (its workflow, when it comes from one,
  * or its message), and whether it sends each result. */
 function scheduleRuns(schedule) {
@@ -84,7 +86,7 @@ export function previewTemplate(id, deps) {
         // A key set for the whole project already counts for a new agent.
         keys: keyGroups(template).map((names) => ({ names, set: names.some((n) => Boolean(envValue(name, n))) })),
         settings: setup.env ?? {},
-        schedule: setup.schedule ? `${describeTemplateSchedule(setup.schedule)} (created paused)` : null,
+        schedule: setup.schedule ? `${describeTemplateSchedule(setup.schedule)} (created paused)${setup.schedule.notify ? '; it messages you the result when it finishes, through its Messaging tab: Slack, email, Lark or a webhook' : ''}` : null,
         needsApprovals: setup.needsApprovals,
         notes: setup.notes ?? [],
     };
@@ -104,8 +106,19 @@ export function templateChecklist(template, name, deps, failed = [], appsToConne
     for (const group of missing.filter((g) => g.length > 1)) {
         items.push({ label: `Add one of ${group.slice(0, -1).join(', ')} or ${group.at(-1)}`, href: tab('env') });
     }
-    if (template.setup.needsApprovals && !deps.messagingConfigured(name)) {
-        items.push({ label: 'Choose where approval requests go: Slack, email, Lark or a webhook', href: tab('messaging') });
+    // A schedule or webhook that sends each result needs the same connection.
+    const webhookWorkflows = (template.setup.skills ?? []).filter((s) => s.workflow?.webhook);
+    const sendsResults = Boolean(template.setup.schedule?.notify) || webhookWorkflows.length > 0;
+    if ((template.setup.needsApprovals || sendsResults) && !deps.messagingConfigured(name)) {
+        items.push({
+            label: template.setup.needsApprovals
+                ? `Choose where approval requests${sendsResults ? ' and results' : ''} go: Slack, email, Lark or a webhook`
+                : 'Choose where its results go: Slack, email, Lark or a webhook',
+            href: tab('messaging'),
+        });
+    }
+    for (const skill of webhookWorkflows) {
+        items.push({ label: `Add a webhook to the "${skill.workflow.title}" workflow with "Message me the result when it finishes" on, then paste its URL into the app that sends the alerts`, href: tab('workflows') });
     }
     for (const note of template.setup.notes ?? [])
         items.push({ label: note });
@@ -179,8 +192,11 @@ export async function createFromTemplateObject(template, deps) {
     // none twice, a stricter one placed so it counts, none loosened.
     applyPlannedRules(name, setup.rules.map((r) => ({ name: r.name, tool: r.tool, decision: r.decision })));
     // 3. Its own skills and non-secret settings.
-    for (const skill of setup.skills ?? [])
+    for (const skill of setup.skills ?? []) {
         writeSkill(name, skill.id, { description: skill.description, body: skill.body });
+        if (skill.workflow)
+            setWorkflowFields(agentDir(name), skill.id, { title: skill.workflow.title, instructions: skill.body, ...(skill.workflow.parameters ? { parameters: skill.workflow.parameters } : {}) });
+    }
     for (const [variable, value] of Object.entries(setup.env ?? {}))
         await setAgentEnvVar(name, variable, value);
     // 4. Load it, now that everything is in place.

package/dist/web/templates-page.d.ts

@@ -1 +1,2 @@
+/** @deprecated The console redirects /templates to the workflow examples. */
 export declare const templatesPageHtml: string;

package/dist/web/templates-page.js

@@ -1,156 +1,15 @@
-// The console's Templates page (/templates): ready-made agents
-// (core/system-agents/templates.ts) a person can preview and create in
-// one click (web/templates-admin.ts behind /starter-templates/*). Same
-// shell and styles as the other console pages. Like them, its inline
-// script avoids backslashes and template placeholders, since it lives
-// inside a template literal.
-import { devUiCss } from './dev-ui-styles.js';
-import { consoleShellScript, consoleSidebarHtml } from './console-shell.js';
+// Templates are now workflow examples, on the new-workflow page
+// (web/workflow-page.ts). This page only sends a project server from an
+// older template, which still serves it at /templates, there.
+/** @deprecated The console redirects /templates to the workflow examples. */
 export const templatesPageHtml = `<!doctype html>
 <html lang="en">
 <head>
 <meta charset="utf-8">
-<meta name="viewport" content="width=device-width, initial-scale=1">
-<title>Templates</title>
-<style>${devUiCss}
-  .tp-grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(300px, 1fr)); gap: 12px; max-width: 1000px; }
-  .tp-card { border: 1px solid var(--line); border-radius: var(--radius); padding: 14px 16px; display: grid; gap: 8px; align-content: start; }
-  .tp-card h3 { margin: 0; font-size: 15px; }
-  .tp-cat { justify-self: start; font-size: 11.5px; font-weight: 600; color: var(--ink-muted); background: var(--surface); padding: 2px 8px; border-radius: 999px; }
-  .tp-card .meta { font-size: 12.5px; color: var(--ink-muted); display: grid; gap: 4px; }
-  .tp-card .row { display: flex; gap: 8px; flex-wrap: wrap; }
-  .tp-preview { border-top: 1px solid var(--line); padding-top: 10px; display: grid; gap: 8px; font-size: 13px; }
-  .tp-preview pre { white-space: pre-wrap; max-height: 220px; overflow: auto; margin: 0; }
-  .tp-btn { display: inline-block; padding: 6px 12px; border-radius: 6px; text-decoration: none; font-size: 13px; font-weight: 500; background: var(--accent); color: var(--on-accent); }
-  .tp-btn.plain { background: none; color: var(--ink); border: 1px solid var(--line); }
-  .hint { font-size: 12px; color: var(--ink-muted); }
-  .error { font-size: 13px; color: var(--bad); }
-</style>
+<meta http-equiv="refresh" content="0; url=/workflows/new#examples">
+<title>Workflow examples</title>
 </head>
-<body data-le-page="templates">
-<div class="le-app">
-${consoleSidebarHtml}
-<main class="le-main">
-  <div class="le-head plain">
-    <div class="le-head-row">
-      <div class="le-title"><button type="button" class="le-menu-btn" data-le-menu aria-label="Open navigation">&#9776;</button>
-        <div><h1>Templates</h1><p>Ready-made agents to start from. Each one asks you before it sends, pays, changes or deletes anything.</p></div>
-      </div>
-    </div>
-  </div>
-  <div class="le-scroll"><div class="le-page" id="tpPage"><p class="hint">Loading&hellip;</p></div></div>
-</main>
-</div>
-${consoleShellScript}
-<script>
-(function () {
-  var page = document.getElementById('tpPage');
-  var ELLIPSIS = String.fromCharCode(8230);
-
-  function esc(s) {
-    return String(s == null ? '' : s).replace(/[&<>"']/g, function (c) {
-      return { '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c];
-    });
-  }
-  function api(method, path) {
-    return fetch(path, { method: method, cache: 'no-store' })
-      .then(function (r) { return r.json().then(function (j) { return { ok: r.ok, body: j }; }); });
-  }
-  function checklistHtml(items) {
-    if (!items.length) return '<p>Nothing else to set up.</p>';
-    return '<ul style="margin:0;padding-left:18px">' + items.map(function (it) {
-      return '<li>' + (it.href ? '<a href="' + esc(it.href) + '">' + esc(it.label) + '</a>' : esc(it.label)) + '</li>';
-    }).join('') + '</ul>';
-  }
-
-  var canInstall = true;
-  var DECISIONS = { allow: 'runs on its own', ask: 'asks you first', deny: 'never' };
-  var CHECK = String.fromCharCode(10003);
-
-  function cardHtml(t) {
-    return '<div class="tp-card" data-id="' + esc(t.id) + '">' +
-      '<span class="tp-cat">' + esc(t.category) + '</span>' +
-      '<h3>' + esc(t.title) + '</h3>' +
-      '<div>' + esc(t.summary) + '</div>' +
-      '<div class="meta">' +
-        '<div><strong>Runs:</strong> ' + esc(t.trigger) + '</div>' +
-        (t.asksFirst.length ? '<div><strong>Asks you first:</strong> ' + esc(t.asksFirst.join(', ')) + '</div>' : '') +
-        '<div><strong>Installs:</strong> ' + t.abilities.map(function (a) { return '<code>' + esc(a) + '</code>'; }).join(' ') + '</div>' +
-      '</div>' +
-      '<div class="row"><button type="button" class="primary tp-use">Use this template</button></div>' +
-      '<div class="tp-slot"></div></div>';
-  }
-
-  function listHtml(items) {
-    return '<ul style="margin:4px 0 0;padding-left:18px">' + items.join('') + '</ul>';
-  }
-
-  function show() {
-    api('GET', '/starter-templates').then(function (r) {
-      if (!r.ok) { page.innerHTML = '<p class="error">' + esc(r.body.error || 'Could not load the templates') + '</p>'; return; }
-      canInstall = r.body.canInstallAbilities !== false;
-      page.innerHTML = '<div class="tp-grid">' + r.body.templates.map(cardHtml).join('') + '</div>' +
-        '<p class="hint" style="margin-top:16px">Not what you need? <a href="/interview">Find your first agent</a> suggests one from your own work, or <a href="/agents?new=1">start from a blank agent</a>.</p>';
-      Array.prototype.forEach.call(page.querySelectorAll('.tp-use'), function (btn) {
-        btn.addEventListener('click', function () { preview(btn.closest('.tp-card')); });
-      });
-    });
-  }
-
-  function preview(card) {
-    var id = card.getAttribute('data-id');
-    var slot = card.querySelector('.tp-slot');
-    slot.innerHTML = '<p class="hint">Loading' + ELLIPSIS + '</p>';
-    api('GET', '/starter-templates/' + encodeURIComponent(id) + '/preview').then(function (r) {
-      if (!r.ok) { slot.innerHTML = '<p class="error">' + esc(r.body.error || 'Could not prepare it') + '</p>'; return; }
-      var p = r.body;
-      var settings = Object.keys(p.settings || {});
-      slot.innerHTML = '<div class="tp-preview">' +
-        '<div><strong>Agent:</strong> <code>' + esc(p.name) + '</code></div>' +
-        '<div><strong>Instructions</strong> <span class="hint">(edit them later in its Overview tab)</span><pre>' + esc(p.systemPrompt) + '</pre></div>' +
-        '<div><strong>Installs</strong> <span class="hint">(abilities: their tools, skills and permission rules)</span>' +
-          listHtml(p.abilities.map(function (a) { return '<li><code>' + esc(a) + '</code></li>'; })) +
-          (canInstall ? '' : '<p class="error" style="margin:4px 0 0">Installing abilities needs <code>LOOPENGINE_ADMIN_AUTH</code> set on the server. Without it, the agent is created and its abilities head the checklist.</p>') + '</div>' +
-        (p.apps && p.apps.length ? '<div><strong>Apps it uses</strong> <span class="hint">(connected on the <a href="/config?section=apps">Apps</a> page; one that isn' + String.fromCharCode(8217) + 't connected yet heads the checklist)</span>' + listHtml(p.apps.map(function (a) { return '<li>' + esc(a) + '</li>'; })) + '</div>' : '') +
-        '<div><strong>Permissions</strong> <span class="hint">(anything not listed asks you first)</span>' +
-          listHtml(p.rules.map(function (rule) { return '<li><code>' + esc(rule.tool) + '</code>: ' + esc(DECISIONS[rule.decision] || rule.decision) + '</li>'; })) + '</div>' +
-        '<div><strong>Keys it needs</strong>' +
-          listHtml(p.keys.map(function (k) {
-            var names = k.names.length > 1 ? 'one of ' + k.names.join(', ') : k.names[0];
-            return '<li>' + esc(names) + (k.set ? ' <span class="hint">' + CHECK + ' already set</span>' : '') + '</li>';
-          })) + '</div>' +
-        (settings.length ? '<div><strong>Settings filled in:</strong> ' + settings.map(function (s) { return '<code>' + esc(s) + '=' + esc(p.settings[s]) + '</code>'; }).join(', ') + '</div>' : '') +
-        (p.schedule ? '<div><strong>Schedule:</strong> ' + esc(p.schedule) + '</div>' : '') +
-        (p.needsApprovals ? '<div><strong>Approvals:</strong> requests reach you wherever its Messaging tab sends them (Slack, email, Lark or a webhook).</div>' : '') +
-        (p.notes.length ? '<div><strong>You also</strong>' + listHtml(p.notes.map(function (n) { return '<li>' + esc(n) + '</li>'; })) + '</div>' : '') +
-        '<div class="row"><button type="button" class="primary tp-create">Create it</button><button type="button" class="tp-cancel">Cancel</button></div>' +
-        '<div class="hint tp-status"></div></div>';
-      slot.querySelector('.tp-cancel').addEventListener('click', function () { slot.innerHTML = ''; });
-      slot.querySelector('.tp-create').addEventListener('click', function (ev) {
-        var btn = ev.currentTarget;
-        btn.disabled = true;
-        slot.querySelector('.tp-status').textContent = 'Creating it and installing its abilities' + ELLIPSIS + ' (this can take a minute)';
-        api('POST', '/starter-templates/' + encodeURIComponent(id) + '/create').then(function (r2) {
-          if (!r2.ok) { btn.disabled = false; slot.querySelector('.tp-status').textContent = r2.body.error || 'Could not create it'; return; }
-          var c = r2.body;
-          var installed = c.abilities.installed.map(function (a) { return '<code>' + esc(a) + '</code>'; }).join(' ');
-          slot.innerHTML = '<div class="tp-preview">' +
-            '<div><strong>Created <code>' + esc(c.name) + '</code>.</strong> Anything its permissions don' + String.fromCharCode(8217) + 't cover asks you first.</div>' +
-            (installed ? '<div>' + CHECK + ' Installed ' + installed + '</div>' : '') +
-            (c.schedule ? '<div>' + CHECK + ' Schedule created, paused: ' + esc(c.schedule.description) + (c.schedule.next_run_at ? ' (first run ' + esc(new Date(c.schedule.next_run_at).toLocaleString(undefined, c.schedule.timeZone ? { timeZone: c.schedule.timeZone, timeZoneName: 'short' } : undefined)) + ' once turned on)' : '') + '</div>' : '') +
-            (c.loadError ? '<div class="error">It was written but couldn' + String.fromCharCode(8217) + 't be loaded: ' + esc(c.loadError) + '</div>' : '') +
-            (c.scheduleError ? '<div class="error">Its schedule wasn' + String.fromCharCode(8217) + 't created: ' + esc(c.scheduleError) + '. Add one in its Schedules tab.</div>' : '') +
-            '<div><strong>Finish setup:</strong>' + checklistHtml(c.checklist) + '</div>' +
-            (c.exampleMessage ? '<div><strong>Try it</strong> in Chat with: <em>' + esc(c.exampleMessage) + '</em></div>' : '') +
-            '<div class="row"><a class="tp-btn" href="/agents/config?agent=' + encodeURIComponent(c.name) + '">Open ' + esc(c.name) + '</a>' +
-            '<a class="tp-btn plain" href="' + esc(leShell.tabHref(c.name, 'chat')) + '">Try it in Chat</a></div></div>';
-        }).catch(function () { btn.disabled = false; slot.querySelector('.tp-status').textContent = 'Could not reach the server; try again.'; });
-      });
-    });
-  }
-
-  show();
-})();
-</script>
+<body>
+<p>Templates are now workflow examples: <a href="/workflows/new#examples">open them</a>.</p>
 </body>
 </html>`;

package/dist/web/workflow-admin.js

@@ -4,10 +4,12 @@
 // agent it would go into, and creates it: as a new agent through the same
 // path as a template (web/templates-admin.ts), or added to an existing
 // one without changing anything that agent already does.
+import { existsSync } from 'node:fs';
 import { join } from 'node:path';
 import { addGatewayTool, readGatewayToolsFromDir } from '../core/gateway-tools.js';
 import { applyPlannedRules } from './actauth-admin.js';
 import { writeSkill } from './skills-admin.js';
+import { setAgentEnvVar } from './env-admin.js';
 import { createFromTemplateObject, installFailureReason, templateChecklist } from './templates-admin.js';
 import { templateScheduleStart } from '../core/system-agents/templates.js';
 import { planParameters, planWebhook, planWorkflowWithModel, workflowTemplate } from '../core/system-agents/workflow-planner.js';
@@ -436,6 +438,17 @@ export async function createWorkflow(input, deps) {
     const ruled = applyPlannedRules(agent.name, plan.rules);
     // 3. Its steps, as a skill; then load the agent again with all of it.
     writeSkill(agent.name, plan.id, { description: plan.skill.description, body: plan.skill.body });
+    // The skills and settings it comes with, where the agent has none:
+    // its own policies and values stay as they are.
+    for (const skill of plan.skills ?? []) {
+        if (skill.id === plan.id || existsSync(join(deps.agentDir(agent.name), 'skills', skill.id, 'SKILL.md')))
+            continue;
+        writeSkill(agent.name, skill.id, { description: skill.description, body: skill.body });
+    }
+    for (const [variable, value] of Object.entries(plan.env ?? {})) {
+        if (!deps.envValue(agent.name, variable))
+            await setAgentEnvVar(agent.name, variable, value);
+    }
     let loadError;
     try {
         await deps.reloadAgent(agent.name);