loop-task 2.1.12 → 2.1.14

package/README.md

@@ -145,6 +145,7 @@ Colors can be a name (`white`, `cyan`, `green`, `yellow`, `orange`, `pink`) or a
 | `loop-task export [file]` | Export all configs to JSON file (or stdout) |
 | `loop-task import <file>` | Import configs from file (triggers hot-reload) |
 | `loop-task api` | Show HTTP API endpoints (base URL, Swagger UI, OpenAPI spec) |
+| `loop-task http-host [address]` | Show or set the HTTP API bind host (default `0.0.0.0`; `local` to lock to loopback) |
 | `loop-task project list` | List all projects |
 | `loop-task project new <name> [--color <color>]` | Create a project |
 | `loop-task project rename <id\|name> <new-name>` | Rename a project |
@@ -215,7 +216,7 @@ Destructive actions (pause, force run, delete) prompt a confirmation before exec
 
 ### Copy & paste in the command bar
 
-The bottom command bar is a normal terminal input, so use your terminal's own clipboard gestures — they work in every terminal (including the VS Code integrated terminal, where Ctrl+C/V are captured by the editor):
+The bottom command bar is a normal terminal input, so use your terminal's own clipboard gestures, they work in every terminal (including the VS Code integrated terminal, where Ctrl+C/V are captured by the editor):
 
 - **Paste** with **Ctrl+Shift+V** (Windows/Linux), **Cmd+V** (macOS), or **right-click**. Multi-line pastes collapse to a single line.
 - **Ctrl+U** clears the command bar (select-all + delete).
@@ -395,7 +396,7 @@ docker run -v ~/.loop-cli:/root/.loop-cli loop-task new 30m -- npm test
 
 ## HTTP API
 
-The daemon exposes a REST + SSE API on `localhost:8845` (configurable via `LOOP_CLI_HTTP_PORT`). It starts automatically with the daemon — no extra flags needed.
+The daemon exposes a REST + SSE API on `localhost:8845` (configurable via `LOOP_CLI_HTTP_PORT`). It starts automatically with the daemon, no extra flags needed.
 
 ### Quick reference
 
@@ -439,8 +440,8 @@ curl http://127.0.0.1:8845/api/projects
 
 ### From the CLI/TUI
 
-- `loop-task api` — prints all API endpoints to stdout
-- Board: press **Ctrl+G** or type `api` — shows a toast with API info
+- `loop-task api`, prints all API endpoints to stdout
+- Board: press **Ctrl+G** or type `api`, shows a toast with API info
 
 ### Response format
 
@@ -451,7 +452,24 @@ All responses use a consistent JSON envelope:
 {"ok": false, "error": {"message": "..."}}  // error (400/404/405/500)
 ```
 
-The API binds to `127.0.0.1` only — it is not reachable from the network. If the port is already in use, the daemon skips the HTTP server and continues with IPC only.
+If the port is already in use, the daemon skips the HTTP server and continues with IPC only.
+
+### Network access (remote / VMs)
+
+The HTTP API (8845) and MCP server (8846) bind to **`0.0.0.0` (all interfaces) by default**, so a daemon on a VM or homelab box is reachable f,  other machines out of the box — connect over SSH, [Tailscale](https://tailscale.com), or your LAN. `loop-task http-host` governs the bind for both.
+
+> **The HTTP API is unauthenticated.** Anything that can reach the bound port can create and trigger loops, i.e. run commands on the host. Because the default is `0.0.0.0`, **securing access is your responsibility at the network layer**: run the box behind a VPN (Tailscale), reach it only via an SSH tunnel, and/or block the port at the cloud firewall so it isn't exposed to the public internet.
+
+Change the bind host at any time (persisted in daemon settings, not an env var, and the daemon **rebinds live**, no restart):
+
+```bash
+loop-task http-host                 # show the current bind host + reachable URL
+loop-task http-host local           # 127.0.0.1, loopback only (lock it down)
+loop-task http-host 100.99.155.102  # bind a single interface (e.g. a Tailscale IP)
+loop-task http-host all             # 0.0.0.0, all interfaces (the default)
+```
+
+**Locking it down:** if the box isn't behind a firewall/VPN you trust, either set `loop-task http-host local` and reach it through an SSH tunnel (`ssh -L 8845:127.0.0.1:8845 <host>`), or expose it tailnet-only with `tailscale serve --bg 8845` (HTTPS at `https://<node>.<tailnet>.ts.net`, restrict further with Tailscale ACLs; never `tailscale funnel`).
 
 ## Development
 
@@ -481,11 +499,11 @@ pnpm run build       # tsc -p tsconfig.build.json
 
 ### Testing the board in a browser (ttyd)
 
-> **Agents: Do NOT use ttyd unless the user explicitly asks you to check the CLI in a browser.** It is never the default. Do not start a ttyd server on your own for "manual pass" tasks or visual QA — those are for the human. Reach for ttyd only when the user says "check the board in the browser", "use ttyd", or similar.
+> **Agents: Do NOT use ttyd unless the user explicitly asks you to check the CLI in a browser.** It is never the default. Do not start a ttyd server on your own for "manual pass" tasks or visual QA, those are for the human. Reach for ttyd only when the user says "check the board in the browser", "use ttyd", or similar.
 
-The board is an interactive TUI, so it needs a real terminal — you can't drive it from a piped/captured shell (and neither can an AI agent). [`ttyd`](https://github.com/tsl0922/ttyd) shares a terminal over HTTP, which makes the board reachable from a browser and scriptable by browser-automation agents — but only when explicitly requested.
+The board is an interactive TUI, so it needs a real terminal, you can't drive it from a piped/captured shell (and neither can an AI agent). [`ttyd`](https://github.com/tsl0922/ttyd) shares a terminal over HTTP, which makes the board reachable from a browser and scriptable by browser-automation agents, but only when explicitly requested.
 
-Install ttyd (see the [ttyd README](https://github.com/tsl0922/ttyd#installation) — e.g. `winget install tsl0922.ttyd`, `brew install ttyd`, or `apt install ttyd`), then serve the board from an interactive terminal:
+Install ttyd (see the [ttyd README](https://github.com/tsl0922/ttyd#installation), e.g. `winget install tsl0922.ttyd`, `brew install ttyd`, or `apt install ttyd`), then serve the board from an interactive terminal:
 
 ```bash
 # Point -w at the repo (absolute path) and run the dev board:
@@ -497,7 +515,7 @@ ttyd -W -w "C:\Projects\Personal\loop-cli" -p 7681 node dist/entry.js
 
 Open `http://localhost:7681` in a browser and use the board as normal. `-W` makes it writable so keystrokes reach the TUI. Handy for demos, for testing on a machine without a good local terminal, and for letting an AI agent drive the board (navigate, send keys, screenshot; ttyd renders via xterm.js on a `<canvas>`, so read state from screenshots, not page text).
 
-> **Windows note:** always pass `-w "<absolute repo path>"`. Without it, ttyd gives the spawned command no valid working directory and it fails with `CreateProcessW failed with error 267` — for *every* command (`pnpm`, `npx`, `node` all fail the same way; it is not a `.cmd`-shim issue). On macOS/Linux `-w` is optional but harmless. Start ttyd from a real interactive terminal; a detached/console-less launch can crash its ConPTY on Windows.
+> **Windows note:** always pass `-w "<absolute repo path>"`. Without it, ttyd gives the spawned command no valid working directory and it fails with `CreateProcessW failed with error 267`, for *every* command (`pnpm`, `npx`, `node` all fail the same way; it is not a `.cmd`-shim issue). On macOS/Linux `-w` is optional but harmless. Start ttyd from a real interactive terminal; a detached/console-less launch can crash its ConPTY on Windows.
 
 ## License
 

package/dist/app/App.js

@@ -2,6 +2,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useMemo, useCallback } from "react";
 import { Box, useApp } from "ink";
 import { useLoopPolling } from "../shared/hooks/useLoopPolling.js";
+import { useDaemonSettings } from "../shared/hooks/useDaemonSettings.js";
 import { useLogStream } from "../shared/hooks/useLogStream.js";
 import { useBreakpoint } from "../shared/hooks/useBreakpoint.js";
 import { useToasts } from "../shared/ui/Toast.js";
@@ -42,6 +43,7 @@ export function App(props) {
     const logService = useInject(TYPES.LogService);
     const exportService = useInject(TYPES.ExportService);
     const { loops, daemonStatus, refresh } = useLoopPolling();
+    const daemonSettings = useDaemonSettings();
     const { view, push, pop } = useRouter("board");
     const { toasts, push: pushToast } = useToasts();
     const breakpoint = useBreakpoint();
@@ -113,7 +115,7 @@ export function App(props) {
         pushToast("success", updated ? t("project.toastUpdated", { name }) : t("project.toastCreated", { name }));
     };
     const commandContext = useMemo(() => ({ activeTab: s.activeTab, selectedLoop: s.selected, selectedTask: s.selectedTask, selectedProject: s.selectedProjectEntity }), [s.activeTab, s.selected, s.selectedTask]);
-    return (_jsxs(Box, { flexDirection: "column", width: "100%", height: process.stdout.rows || 24, backgroundColor: theme.bg.base, children: [_jsx(Header, { daemonStatus: daemonStatus, counts: s.counts, activeTab: s.activeTab, onTabChange: s.setActiveTab, tabCounts: s.tabCounts }), _jsx(Box, { flexGrow: 1, children: isBoardView(view) ? (_jsxs(Box, { flexDirection: breakpoint === "narrow" ? "column" : "row", flexGrow: 1, children: [_jsx(LeftPanel, { isFocused: s.focusedPanel === "left" && !anyModalOpen, navActive: inputOwner === "panel", activeTab: s.activeTab, query: s.leftPanelQuery, loops: s.visible, selectedIndex: s.clampedIndex, filters: s.filters, sort: s.sort, breakpoint: breakpoint, projects: s.projects, onSelect: (i) => s.setSelectedIndex(i), onActivate: (i) => { s.setSelectedIndex(i); }, tasks: s.filteredTasks, taskSelectedIndex: s.taskClampedIndex, onTaskSelect: (i) => s.setTaskSelectedIndex(i), onTaskActivate: (i) => { s.setTaskSelectedIndex(i); s.setEditTask(s.filteredTasks[i] ?? null); push("task-edit"); }, onStatusCycle: () => s.setFilters((prev) => ({ ...prev, status: cycleStatusFilter(prev.status) })), onSortCycle: () => s.setSort(cycleSortMode(s.sort)), onSelectProject: () => s.setActiveTab("projects"), currentProjectName: s.currentProjectId === "all" ? t("project.showAll") : (s.projects.find(p => p.id === s.currentProjectId)?.name ?? "Default"), projectFilters: s.projectFilters, projectSelectedIndex: s.projectClampedIndex, onProjectSelect: (i) => s.setProjectSelectedIndex(i), onProjectActivate: (i) => { s.setProjectSelectedIndex(i); }, projectLoops: loops }), _jsx(RightPanel, { isFocused: s.focusedPanel === "right" && !anyModalOpen, navActive: inputOwner === "panel", activeTab: s.activeTab, loop: s.selected, selectedRunIndex: s.selectedRunIndex, onSelectRun: (i) => s.setSelectedRunIndex(i), onOpenRun: s.handleOpenRunLog, selectedTask: s.selectedTask, allTasks: s.tasks, selectedProject: s.selectedProjectEntity, projectLoopCount: s.projectLoopCount, projects: s.projects, onProjectEdit: () => { if (s.selectedProjectEntity && !s.selectedProjectEntity.isSystem)
+    return (_jsxs(Box, { flexDirection: "column", width: "100%", height: process.stdout.rows || 24, backgroundColor: theme.bg.base, children: [_jsx(Header, { daemonStatus: daemonStatus, httpApiEnabled: daemonSettings.reachable ? daemonSettings.httpApiEnabled : undefined, mcpApiEnabled: daemonSettings.reachable ? daemonSettings.mcpApiEnabled : undefined, counts: s.counts, activeTab: s.activeTab, onTabChange: s.setActiveTab, tabCounts: s.tabCounts }), _jsx(Box, { flexGrow: 1, children: isBoardView(view) ? (_jsxs(Box, { flexDirection: breakpoint === "narrow" ? "column" : "row", flexGrow: 1, children: [_jsx(LeftPanel, { isFocused: s.focusedPanel === "left" && !anyModalOpen, navActive: inputOwner === "panel", activeTab: s.activeTab, query: s.leftPanelQuery, loops: s.visible, selectedIndex: s.clampedIndex, filters: s.filters, sort: s.sort, breakpoint: breakpoint, projects: s.projects, onSelect: (i) => s.setSelectedIndex(i), onActivate: (i) => { s.setSelectedIndex(i); }, tasks: s.filteredTasks, taskSelectedIndex: s.taskClampedIndex, onTaskSelect: (i) => s.setTaskSelectedIndex(i), onTaskActivate: (i) => { s.setTaskSelectedIndex(i); s.setEditTask(s.filteredTasks[i] ?? null); push("task-edit"); }, onStatusCycle: () => s.setFilters((prev) => ({ ...prev, status: cycleStatusFilter(prev.status) })), onSortCycle: () => s.setSort(cycleSortMode(s.sort)), onSelectProject: () => s.setActiveTab("projects"), currentProjectName: s.currentProjectId === "all" ? t("project.showAll") : (s.projects.find(p => p.id === s.currentProjectId)?.name ?? "Default"), projectFilters: s.projectFilters, projectSelectedIndex: s.projectClampedIndex, onProjectSelect: (i) => s.setProjectSelectedIndex(i), onProjectActivate: (i) => { s.setProjectSelectedIndex(i); }, projectLoops: loops }), _jsx(RightPanel, { isFocused: s.focusedPanel === "right" && !anyModalOpen, navActive: inputOwner === "panel", activeTab: s.activeTab, loop: s.selected, selectedRunIndex: s.selectedRunIndex, onSelectRun: (i) => s.setSelectedRunIndex(i), onOpenRun: s.handleOpenRunLog, selectedTask: s.selectedTask, allTasks: s.tasks, selectedProject: s.selectedProjectEntity, projectLoopCount: s.projectLoopCount, projects: s.projects, onProjectEdit: () => { if (s.selectedProjectEntity && !s.selectedProjectEntity.isSystem)
                                 handleCommand("edit"); }, onProjectDelete: () => { if (s.selectedProjectEntity && !s.selectedProjectEntity.isSystem)
                                 handleCommand("delete"); } }), s.debugMode ? _jsx(DebugPanel, { entries: s.debugEntries }) : null] })) : (_jsx(FormRouter, { view: view, editTarget: s.editTarget, cloneMode: s.cloneMode, editTask: s.editTask, editProject: s.editProject, pendingTaskSelection: s.pendingTaskSelection, tasks: s.tasks, projects: s.projects, currentProjectId: s.currentProjectId, cancelCreate: cancelCreate, onCreateDone: onCreateDone, handleChooseTask: handleChooseTask, cancelTask: cancelTask, onTaskDone: onTaskDone, cancelProject: cancelProject, onProjectDone: onProjectDone })) }, viewKey(view, s.editTarget, s.editTask)), isBoardView(view) ? (_jsx(CommandInput, { context: commandContext, onCommand: handleCommand, confirmState: s.confirmState, searchState: s.searchState, searchValue: s.searchValue, onSearchChange: s.handleSearchChange, onSearchSubmit: s.handleSearchSubmit, onSearchCancel: s.handleSearchCancel, onConfirmYes: handleConfirmYes, onConfirmCancel: handleConfirmCancel, onCopy: handleContextualCopy, onPanelAction: triggerContextualAction, disabled: commandInputDisabled, navOwner: inputOwner, onInputStateChange: (hasText, dropdownOpen) => { s.setCommandBarHasText(hasText); s.setCommandBarDropdownOpen(dropdownOpen); } })) : null, _jsx(OverlayStack, { commandsBrowserOpen: s.commandsBrowserOpen, commandContext: commandContext, onCommandsBrowserClose: () => s.setCommandsBrowserOpen(false), onCommandsBrowserExecute: (v) => { s.setCommandsBrowserOpen(false); handleCommand(v); }, contextHelpOpen: s.contextHelpOpen, onContextHelpClose: () => s.setContextHelpOpen(false), exportModal: s.exportModal, onExportModalClose: () => s.setExportModal(null), onExportCopy: () => pushToast("success", t("board.toastCopied")), logModalRun: s.logModalRun, logModalLoopId: s.logModalLoopId, logModalLines: s.logModalLines, logModalLoading: s.logModalLoading, onLogModalClose: () => { s.setLogModalRun(null); s.setLogModalLoopId(null); }, onLogCopy: () => pushToast("success", t("board.toastCopied")), toasts: toasts })] }));
 }

package/dist/cli.js

@@ -187,8 +187,10 @@ projectCmd
     .description(t("cli.projectNewDescription"))
     .argument("<name>", t("cli.projectArgName"))
     .option("--color <color>", t("cli.optProjectColor"))
+    .option("--directory <path>", t("cli.optProjectDirectory"))
+    .option("--github-source <owner/repo>", t("cli.optProjectGithubSource"))
     .action(async (name, opts) => {
-    await createProjectCli(name, opts.color);
+    await createProjectCli(name, opts.color, opts.directory, opts.githubSource);
 });
 projectCmd
     .command("rename")
@@ -221,6 +223,7 @@ program
     .command("status")
     .description("Show status of all loops")
     .option("--json", "Output as JSON")
+    .option("--verbose", "Show extra details (skipped, silent-chain counts)")
     .action(async (opts) => {
     const { sendRequest } = await import("./client/ipc.js");
     const response = await sendRequest({ type: "list" });
@@ -235,7 +238,17 @@ program
     else {
         for (const loop of loops) {
             const { describeLoop, statusLabel } = await import("./shared/ui/format.js");
-            console.log(`${loop.id}  ${statusLabel(loop.status)}  ${describeLoop(loop)}`);
+            let line = `${loop.id}  ${statusLabel(loop.status)}  ${describeLoop(loop)}`;
+            if (opts.verbose) {
+                const extra = [];
+                if (loop.skippedCount > 0)
+                    extra.push(`skipped=${loop.skippedCount}`);
+                if ((loop.silentChainCount ?? 0) > 0)
+                    extra.push(`silent=${loop.silentChainCount}`);
+                if (extra.length)
+                    line += `  [${extra.join(", ")}]`;
+            }
+            console.log(line);
         }
     }
 });
@@ -323,4 +336,78 @@ program
     console.log(`  OpenAPI:    ${baseUrl}/api/openapi.json`);
     console.log(`  Events:     ${baseUrl}/api/events (SSE)`);
 });
+program
+    .command("http-host")
+    .description("Show or set the network interface the HTTP API + MCP server bind to (default 0.0.0.0)")
+    .argument("[address]", "IP to bind — or 'local' (127.0.0.1) / 'all' (0.0.0.0)")
+    .action(async (address) => {
+    const { ensureDaemon } = await import("./daemon/spawner/index.js");
+    const { sendRequest } = await import("./client/ipc.js");
+    const port = process.env.LOOP_CLI_HTTP_PORT ?? String(HTTP_API_PORT);
+    try {
+        ensureDaemon();
+        if (!address) {
+            const res = await sendRequest({ type: "settings-get" });
+            const host = res.type === "ok" ? res.data.httpApiHost : HTTP_API_HOST;
+            const shown = host === "0.0.0.0" ? "<this-machine-ip>" : host;
+            const mcpPort = process.env.LOOP_CLI_MCP_PORT ?? "8846";
+            console.log(`API bind host: ${host}`);
+            console.log(`  HTTP API: http://${shown}:${port}`);
+            console.log(`  MCP SSE:  http://${shown}:${mcpPort}/sse`);
+            return;
+        }
+        const normalized = address === "local" || address === "localhost"
+            ? "127.0.0.1"
+            : address === "all" || address === "any"
+                ? "0.0.0.0"
+                : address;
+        const res = await sendRequest({ type: "settings-set", settings: { httpApiHost: normalized } });
+        if (res.type !== "ok") {
+            console.error(res.type === "error" ? res.message : "Failed to update setting");
+            process.exit(1);
+        }
+        console.log(`HTTP API + MCP server now binding to ${normalized}`);
+        if (normalized !== "127.0.0.1") {
+            console.log("");
+            console.log("Note: the API is unauthenticated — anything that can reach this");
+            console.log("interface can create and trigger loops. Secure access at the network");
+            console.log("layer (SSH/Tailscale/firewall). Use `loop-task http-host local` for");
+            console.log("loopback-only.");
+        }
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        console.error(t("cli.error", { message }));
+        process.exit(1);
+    }
+});
+program
+    .command("mcp")
+    .description("Show MCP server info and how to connect an MCP client")
+    .action(() => {
+    const transport = process.env.LOOP_CLI_MCP_TRANSPORT === "stdio" ? "stdio" : "sse";
+    const port = process.env.LOOP_CLI_MCP_PORT ?? "8846";
+    const sseUrl = `http://${HTTP_API_HOST}:${port}/sse`;
+    console.log(`MCP Server`);
+    console.log(`  Transport:  ${transport}`);
+    console.log(`  SSE URL:    ${sseUrl}`);
+    console.log("");
+    console.log(`  Connect an MCP client to the SSE URL above.`);
+    console.log("");
+    if (transport === "stdio") {
+        console.log(`  Currently using stdio transport. To switch to SSE (default),`);
+        console.log(`  restart without LOOP_CLI_MCP_TRANSPORT=stdio.`);
+        console.log("");
+    }
+    console.log(`  Example MCP client configs:`);
+    console.log("");
+    console.log(`  OpenCode (opencode.json):`);
+    console.log(`    { "mcp": { "loop-task": { "type": "remote", "url": "${sseUrl}" } } }`);
+    console.log("");
+    console.log(`  Claude Code (.claude/mcp.json):`);
+    console.log(`    { "mcpServers": { "loop-task": { "type": "sse", "url": "${sseUrl}" } } }`);
+    console.log("");
+    console.log(`  Cursor (.cursor/mcp.json):`);
+    console.log(`    { "mcpServers": { "loop-task": { "type": "sse", "url": "${sseUrl}" } } }`);
+});
 await program.parseAsync(process.argv);

package/dist/client/commands.js

@@ -24,7 +24,7 @@ export async function startLoop(options, intervalHuman) {
     console.log(t("cli.startedInterval", { interval: intervalHuman }));
     console.log(t("cli.startedStatus"));
     if (options.interval === 0) {
-        console.log("  Note: manual loop — use 'trigger' to run on demand");
+        console.log("  Note: manual loop  use 'trigger' to run on demand");
     }
     console.log();
     console.log(t("cli.startedHint"));
@@ -80,6 +80,9 @@ export async function showStatus(id) {
     console.log(t("cli.statusInterval", { interval: loop.intervalHuman, duration: intervalDisplay }));
     console.log(t("cli.statusStatus", { status: loop.status }));
     console.log(t("cli.statusRuns", { runs: loop.runCount, maxRuns }));
+    if ((loop.silentChainCount ?? 0) > 0) {
+        console.log(t("cli.statusSilentChains", { count: loop.silentChainCount.toLocaleString() }));
+    }
     console.log(t("cli.statusCreated", { created: loop.createdAt }));
     if (loop.lastRunAt) {
         const exitInfo = loop.lastExitCode !== null ? t("cli.exitInfo", { code: loop.lastExitCode }) : "";

package/dist/client/project-commands.js

@@ -70,12 +70,17 @@ export async function listProjectsCli() {
         process.exit(1);
     }
 }
-export async function createProjectCli(name, colorInput) {
+export async function createProjectCli(name, colorInput, directory, githubSource) {
     try {
+        if (githubSource !== undefined && githubSource !== "") {
+            if (!/^[a-zA-Z0-9_.\-]+\/[a-zA-Z0-9_.\-]+$/.test(githubSource)) {
+                throw new Error(`Invalid github-source format: "${githubSource}". Expected owner/repo (e.g. CKGrafico/loop-task)`);
+            }
+        }
         const color = colorInput ? resolveColor(colorInput) : PROJECT_COLORS.cyan;
         const response = await sendRequest({
             type: "project-create",
-            payload: { name, color },
+            payload: { name, color, directory, githubSource },
         });
         if (response.type !== "ok") {
             throw new Error(response.message);

package/dist/core/context/template.js

@@ -5,7 +5,7 @@ function shellEscape(value) {
     if (/^[A-Za-z0-9_\-=:./,@]+$/.test(value))
         return value;
     // Escape characters that are dangerous inside double quotes, then wrap
-    // the whole value in single quotes — the strongest shell quoting.
+    // the whole value in single quotes  the strongest shell quoting.
     // Single quotes preserve everything literally (newlines, backticks,
     // $, ", \, parens) except single quotes themselves.
     return "'" + value.replace(/'/g, "'\\''") + "'";

package/dist/core/context/validate-context.js

@@ -9,10 +9,10 @@ export function validateContext(value) {
     for (const key of Object.keys(obj)) {
         const v = obj[key];
         if (Array.isArray(v)) {
-            return { valid: false, error: `Context key "${key}" has an array — only string values are allowed` };
+            return { valid: false, error: `Context key "${key}" has an array  only string values are allowed` };
         }
         if (typeof v === "object" && v !== null) {
-            return { valid: false, error: `Context key "${key}" has a nested object — only string values are allowed` };
+            return { valid: false, error: `Context key "${key}" has a nested object  only string values are allowed` };
         }
     }
     return { valid: true, context: obj };

package/dist/core/loop/chain-executor.js

@@ -1,11 +1,13 @@
 import crypto from "node:crypto";
 import fs from "node:fs";
+import { Writable } from "node:stream";
 import { executeCommand } from "../command/command-runner.js";
 import { t } from "../../shared/i18n/index.js";
 import { parseStdout } from "../context/context-parser.js";
 import { interpolate } from "../context/template.js";
 export function executeChain(options) {
     const { chainTargetId, exitCode, task, chainContext, cwd, signal, runCount, logPath, runHistory, logStream, controller } = options;
+    const nullStream = new Writable({ write(_chunk, _enc, cb) { cb(); } });
     if (!chainTargetId) {
         return Promise.resolve({ runHistory, lastExitCode: exitCode, lastDuration: 0 });
     }
@@ -23,11 +25,15 @@ export function executeChain(options) {
             const chainTask = controller.taskResolver(currentTargetId);
             if (!chainTask)
                 break;
-            if (logStream) {
+            const isSilent = chainTask.silentChain === true;
+            if (isSilent) {
+                controller.incrementSilentChainCount();
+            }
+            if (logStream && !isSilent) {
                 logStream.write(t("loop.chainHeader", { name: chainTask.name, branch: prevBranch, prevExit }));
             }
             const chainStartedAt = new Date().toISOString();
-            const chainOffset = fs.existsSync(logPath) ? fs.statSync(logPath).size : 0;
+            const chainOffset = !isSilent && fs.existsSync(logPath) ? fs.statSync(logPath).size : 0;
             runHistory.push({
                 runNumber: runCount,
                 startedAt: chainStartedAt,
@@ -51,8 +57,9 @@ export function executeChain(options) {
             const shouldCaptureStdout = chainTaskHasChains || taskSteps.length > 1 || taskSteps[0].commands.length > 1;
             let chainExitCode = 0;
             let chainDuration = 0;
+            const effectiveStream = isSilent ? nullStream : (logStream ?? nullStream);
             for (const step of taskSteps) {
-                const stepResults = await Promise.allSettled(step.commands.map((cmd) => executeCommand(interpolate(cmd.command, chainContext), cmd.commandArgs.map(a => interpolate(a, chainContext)), cwd, logStream, signal, runCount, shouldCaptureStdout)));
+                const stepResults = await Promise.allSettled(step.commands.map((cmd) => executeCommand(interpolate(cmd.command, chainContext), cmd.commandArgs.map(a => interpolate(a, chainContext)), cwd, effectiveStream, signal, runCount, shouldCaptureStdout)));
                 let stepStdout = "";
                 for (const r of stepResults) {
                     if (r.status === "fulfilled") {
@@ -74,7 +81,7 @@ export function executeChain(options) {
                     break;
                 }
             }
-            const chainLogSize = fs.existsSync(logPath) ? fs.statSync(logPath).size - chainOffset : 0;
+            const chainLogSize = !isSilent && fs.existsSync(logPath) ? fs.statSync(logPath).size - chainOffset : 0;
             const chainRecord = runHistory.find(r => r.chainGroupId === chainGroupId && r.status === "running" && r.chainName === chainTask.name);
             if (chainRecord) {
                 chainRecord.exitCode = chainExitCode;

package/dist/core/loop/loop-controller.js

@@ -27,6 +27,7 @@ export class LoopController extends EventEmitter {
         this.runHistory = [];
         this.currentRunStartOffset = 0;
         this.skippedCount = 0;
+        this._silentChainCount = 0;
         this.id = id;
         this.options = options;
         this.logPath = logPath;
@@ -46,10 +47,17 @@ export class LoopController extends EventEmitter {
         this._paused = state?.status === "paused" || state?.status === "idle";
         this.runHistory = (state?.runHistory ?? []).map((r) => r.status === "running" ? { ...r, status: "completed" } : r).map((r) => ({ ...r, logOffset: r.logOffset ?? 0 }));
         this.skippedCount = state?.skippedCount ?? 0;
+        this._silentChainCount = state?.silentChainCount ?? 0;
     }
     get status() {
         return this._status;
     }
+    get silentChainCount() {
+        return this._silentChainCount;
+    }
+    incrementSilentChainCount() {
+        this._silentChainCount += 1;
+    }
     start() {
         if (this._loopActive)
             return;
@@ -185,6 +193,7 @@ export class LoopController extends EventEmitter {
             remainingDelayMs: this.remainingDelayMs,
             runHistory: this.runHistory,
             skippedCount: this.skippedCount,
+            silentChainCount: this._silentChainCount,
         };
     }
     clearMaxRunsReached() {

package/dist/daemon/http/openapi.js

@@ -5,11 +5,22 @@ export function buildOpenApiSpec() {
         info: {
             title: "loop-task HTTP API",
             version: "1.0.0",
-            description: "REST + SSE API for managing loops, tasks, projects, and logs. All endpoints are localhost-only (127.0.0.1).",
+            description: "REST + SSE API for managing loops, tasks, projects, and logs. Binds to all interfaces (0.0.0.0) by default so it is reachable remotely; the bind host is configurable via `loop-task http-host`. The API is unauthenticated, secure access at the network layer (SSH/Tailscale/firewall), or restrict the bind to 127.0.0.1.",
         },
         servers: [
             { url: `http://${HTTP_API_HOST}:${HTTP_API_PORT}`, description: "Local daemon" },
         ],
+        tags: [
+            { name: "Loops", description: "Loop management" },
+            { name: "Tasks", description: "Task management" },
+            { name: "Task Chains", description: "Create chained tasks" },
+            { name: "Projects", description: "Project management" },
+            { name: "Logs", description: "Log retrieval" },
+            { name: "Events", description: "Server-sent events" },
+            { name: "Settings", description: "Daemon settings" },
+            { name: "MCP", description: "Model Context Protocol server" },
+            { name: "Docs", description: "API documentation" },
+        ],
         paths: {
             "/api/loops": {
                 get: { summary: "List all loops", tags: ["Loops"], responses: { "200": { description: "Array of loops", content: { "application/json": { schema: { type: "array" } } } } } },
@@ -22,9 +33,12 @@ export function buildOpenApiSpec() {
             },
             "/api/loops/{id}/pause": { post: { summary: "Pause a loop", tags: ["Loops"], parameters: [{ name: "id", in: "path", required: true, schema: { type: "string" } }], responses: { "200": { description: "Paused" }, "404": { description: "Not found" } } } },
             "/api/loops/{id}/resume": { post: { summary: "Resume a loop", tags: ["Loops"], parameters: [{ name: "id", in: "path", required: true, schema: { type: "string" } }], responses: { "200": { description: "Resumed" }, "404": { description: "Not found" } } } },
+            "/api/loops/{id}/play": { post: { summary: "Play (start) a loop", tags: ["Loops"], parameters: [{ name: "id", in: "path", required: true, schema: { type: "string" } }], responses: { "200": { description: "Playing", content: { "application/json": { schema: { type: "object" } } } }, "404": { description: "Not found" }, "409": { description: "Already running or max runs blocked" } } } },
             "/api/loops/{id}/trigger": { post: { summary: "Trigger a loop now", tags: ["Loops"], parameters: [{ name: "id", in: "path", required: true, schema: { type: "string" } }], responses: { "200": { description: "Triggered" }, "404": { description: "Not found" }, "400": { description: "Max runs reached" }, "409": { description: "Already running" } } } },
             "/api/loops/{id}/stop": { post: { summary: "Stop a loop", tags: ["Loops"], parameters: [{ name: "id", in: "path", required: true, schema: { type: "string" } }], responses: { "200": { description: "Stopped" }, "404": { description: "Not found" } } } },
             "/api/loops/stop-all": { post: { summary: "Stop all loops", tags: ["Loops"], responses: { "200": { description: "All stopped", content: { "application/json": { schema: { type: "object", properties: { count: { type: "integer" } } } } } } } } },
+            "/api/loops/{id}/runs": { get: { summary: "List run history", tags: ["Loops"], parameters: [{ name: "id", in: "path", required: true, schema: { type: "string" } }, { name: "from", in: "query", schema: { type: "string", description: "ISO 8601 date" } }, { name: "to", in: "query", schema: { type: "string", description: "ISO 8601 date" } }], responses: { "200": { description: "Run records", content: { "application/json": { schema: { type: "array" } } } }, "404": { description: "Not found" } } } },
+            "/api/loops/{id}/logs/date": { get: { summary: "Date-filtered logs", tags: ["Logs"], parameters: [{ name: "id", in: "path", required: true, schema: { type: "string" } }, { name: "from", in: "query", required: true, schema: { type: "string", description: "ISO 8601 start date" } }, { name: "to", in: "query", required: true, schema: { type: "string", description: "ISO 8601 end date" } }], responses: { "200": { description: "Filtered log content" }, "404": { description: "Not found" }, "400": { description: "Missing or invalid date params" } } } },
             "/api/loops/{id}/logs": { get: { summary: "Fetch loop logs", tags: ["Logs"], parameters: [{ name: "id", in: "path", required: true, schema: { type: "string" } }, { name: "tail", in: "query", schema: { type: "integer", default: 50 } }], responses: { "200": { description: "Log content" }, "404": { description: "Not found" } } } },
             "/api/loops/{id}/logs/stream": { get: { summary: "Stream logs via SSE", tags: ["Logs"], parameters: [{ name: "id", in: "path", required: true, schema: { type: "string" } }, { name: "tail", in: "query", schema: { type: "integer" } }], responses: { "200": { description: "SSE stream" }, "404": { description: "Not found" } } } },
             "/api/loops/{id}/runs/{num}": { get: { summary: "Get run-specific log", tags: ["Logs"], parameters: [{ name: "id", in: "path", required: true, schema: { type: "string" } }, { name: "num", in: "path", required: true, schema: { type: "integer" } }], responses: { "200": { description: "Run log content" } } } },
@@ -37,18 +51,31 @@ export function buildOpenApiSpec() {
                 patch: { summary: "Update a task", tags: ["Tasks"], parameters: [{ name: "id", in: "path", required: true, schema: { type: "string" } }], requestBody: { content: { "application/json": { schema: { type: "object" } } } }, responses: { "200": { description: "Updated" }, "404": { description: "Not found" } } },
                 delete: { summary: "Delete a task", tags: ["Tasks"], parameters: [{ name: "id", in: "path", required: true, schema: { type: "string" } }], responses: { "200": { description: "Deleted" }, "404": { description: "Not found" } } },
             },
+            "/api/task-chains": { post: { summary: "Create a chain of tasks", tags: ["Task Chains"], requestBody: { content: { "application/json": { schema: { type: "object", required: ["tasks"], properties: { tasks: { type: "array", items: { type: "object", properties: { id: { type: "string" }, name: { type: "string" }, command: { type: "string" }, commandArgs: { type: "array", items: { type: "string" } }, onSuccessTaskId: { type: "string" }, onFailureTaskId: { type: "string" } } } }, chain: { type: "string", enum: ["sequential-success", "sequential-failure", "none"], description: "How to wire tasks together" } } } } } }, responses: { "201": { description: "Chain created", content: { "application/json": { schema: { type: "object", properties: { taskIds: { type: "array", items: { type: "string" } } } } } } }, "400": { description: "Validation error or rollback" } } } },
             "/api/projects": {
                 get: { summary: "List all projects", tags: ["Projects"], responses: { "200": { description: "Array of projects" } } },
-                post: { summary: "Create a project", tags: ["Projects"], requestBody: { content: { "application/json": { schema: { type: "object", properties: { name: { type: "string" }, color: { type: "string" } } } } } }, responses: { "201": { description: "Project created" }, "400": { description: "Validation error" } } },
+                post: { summary: "Create a project", tags: ["Projects"], requestBody: { content: { "application/json": { schema: { type: "object", properties: { name: { type: "string" }, color: { type: "string" }, directory: { type: "string", description: "Optional local working directory for loops" }, githubSource: { type: "string", description: "Optional GitHub repository in owner/repo format (e.g. CKGrafico/loop-task)" } } } } } }, responses: { "201": { description: "Project created" }, "400": { description: "Validation error" } } },
             },
             "/api/projects/{id}": {
-                patch: { summary: "Update a project", tags: ["Projects"], parameters: [{ name: "id", in: "path", required: true, schema: { type: "string" } }], requestBody: { content: { "application/json": { schema: { type: "object", properties: { name: { type: "string" }, color: { type: "string" } } } } } }, responses: { "200": { description: "Updated" }, "404": { description: "Not found" }, "400": { description: "Validation error" } } },
+                patch: { summary: "Update a project", tags: ["Projects"], parameters: [{ name: "id", in: "path", required: true, schema: { type: "string" } }], requestBody: { content: { "application/json": { schema: { type: "object", properties: { name: { type: "string" }, color: { type: "string" }, directory: { type: "string", description: "Optional local working directory for loops" }, githubSource: { type: "string", description: "Optional GitHub repository in owner/repo format (e.g. CKGrafico/loop-task)" } } } } } }, responses: { "200": { description: "Updated" }, "404": { description: "Not found" }, "400": { description: "Validation error" } } },
                 delete: { summary: "Delete a project", tags: ["Projects"], parameters: [{ name: "id", in: "path", required: true, schema: { type: "string" } }], responses: { "200": { description: "Deleted" }, "400": { description: "Cannot delete system project" } } },
             },
+            "/api/settings": { get: { summary: "Get daemon settings", tags: ["Settings"], responses: { "200": { description: "Current settings", content: { "application/json": { schema: { type: "object", properties: { httpApiEnabled: { type: "boolean" }, mcpApiEnabled: { type: "boolean" } } } } } } } }, patch: { summary: "Update daemon settings", tags: ["Settings"], requestBody: { content: { "application/json": { schema: { type: "object", properties: { httpApiEnabled: { type: "boolean" }, mcpApiEnabled: { type: "boolean" } } } } } }, responses: { "200": { description: "Updated settings", content: { "application/json": { schema: { type: "object", properties: { httpApiEnabled: { type: "boolean" }, mcpApiEnabled: { type: "boolean" } } } } } }, "400": { description: "Validation error" } } } },
             "/api/events": { get: { summary: "Subscribe to daemon events via SSE", tags: ["Events"], responses: { "200": { description: "SSE event stream" } } } },
             "/api/openapi.json": { get: { summary: "OpenAPI 3.0 spec", tags: ["Docs"], responses: { "200": { description: "OpenAPI JSON spec" } } } },
             "/api/docs": { get: { summary: "Swagger UI", tags: ["Docs"], responses: { "200": { description: "HTML page" } } } },
         },
+        components: {
+            schemas: {
+                DaemonSettings: {
+                    type: "object",
+                    properties: {
+                        httpApiEnabled: { type: "boolean", description: "Whether the HTTP API server is enabled" },
+                        mcpApiEnabled: { type: "boolean", description: "Whether the MCP server is enabled" },
+                    },
+                },
+            },
+        },
     };
 }
 export function buildSwaggerHtml() {

package/dist/daemon/http/route-loops.js

@@ -108,6 +108,22 @@ export function registerLoopRoutes(manager, routes, r) {
         }
         sendOk(res);
     });
+    r("POST", "/api/loops/:id/play", (_req, res, params) => {
+        if (manager.isMaxRunsBlocked(params.id)) {
+            sendError(res, 409, "Max runs reached");
+            return;
+        }
+        if (manager.isRunning(params.id)) {
+            sendError(res, 409, "Loop is already running");
+            return;
+        }
+        if (!manager.playLoop(params.id)) {
+            sendNotFound(res, params.id);
+            return;
+        }
+        const meta = manager.status(params.id);
+        sendOk(res, meta);
+    });
     r("POST", "/api/loops/:id/trigger", (_req, res, params) => {
         if (manager.isMaxRunsBlocked(params.id)) {
             sendError(res, 400, "Max runs reached");
@@ -134,6 +150,75 @@ export function registerLoopRoutes(manager, routes, r) {
         const count = manager.stopAllLoops();
         sendOk(res, { count });
     });
+    // --- Run History ---
+    r("GET", "/api/loops/:id/runs", (_req, res, params) => {
+        const meta = manager.status(params.id);
+        if (!meta) {
+            sendNotFound(res, params.id);
+            return;
+        }
+        const query = parseQuery(_req.url);
+        const fromStr = query.get("from");
+        const toStr = query.get("to");
+        let runs = meta.runHistory;
+        if (fromStr) {
+            const fromMs = new Date(fromStr).getTime();
+            if (!Number.isNaN(fromMs)) {
+                runs = runs.filter((r) => new Date(r.startedAt).getTime() >= fromMs);
+            }
+        }
+        if (toStr) {
+            const toMs = new Date(toStr).getTime();
+            if (!Number.isNaN(toMs)) {
+                runs = runs.filter((r) => new Date(r.startedAt).getTime() <= toMs);
+            }
+        }
+        sendOk(res, runs);
+    });
+    // --- Date-Filtered Logs ---
+    r("GET", "/api/loops/:id/logs/date", (_req, res, params) => {
+        const meta = manager.status(params.id);
+        if (!meta) {
+            sendNotFound(res, params.id);
+            return;
+        }
+        const query = parseQuery(_req.url);
+        const fromStr = query.get("from");
+        const toStr = query.get("to");
+        if (!fromStr || !toStr) {
+            sendError(res, 400, "Both 'from' and 'to' query parameters are required (ISO 8601)");
+            return;
+        }
+        const fromMs = new Date(fromStr).getTime();
+        const toMs = new Date(toStr).getTime();
+        if (Number.isNaN(fromMs) || Number.isNaN(toMs)) {
+            sendError(res, 400, "Invalid date format for 'from' or 'to' (use ISO 8601)");
+            return;
+        }
+        const logPath = manager.getLogPath(params.id);
+        if (!logPath || !fs.existsSync(logPath)) {
+            sendOk(res, "");
+            return;
+        }
+        const matching = meta.runHistory.filter((r) => {
+            const t = new Date(r.startedAt).getTime();
+            return t >= fromMs && t <= toMs;
+        });
+        if (matching.length === 0) {
+            sendOk(res, "");
+            return;
+        }
+        matching.sort((a, b) => a.logOffset - b.logOffset);
+        const buffer = fs.readFileSync(logPath);
+        const allSorted = meta.runHistory.slice().sort((a, b) => a.logOffset - b.logOffset);
+        const parts = matching.map((record) => {
+            const start = record.logOffset;
+            const idx = allSorted.indexOf(record);
+            const end = idx < allSorted.length - 1 ? allSorted[idx + 1].logOffset : buffer.length;
+            return buffer.toString("utf-8", start, end);
+        });
+        sendOk(res, parts.join(""));
+    });
     // --- Logs ---
     r("GET", "/api/loops/:id/logs", (_req, res, params) => {
         const logPath = manager.getLogPath(params.id);

package/dist/daemon/http/route-misc.js

@@ -1,5 +1,6 @@
 import { initSseResponse } from "./sse.js";
 import { buildOpenApiSpec, buildSwaggerHtml } from "./openapi.js";
+import { sendOk, sendError, readBody } from "./helpers.js";
 export function registerMiscRoutes(sseClients, r) {
     r("GET", "/api/openapi.json", (_req, res) => {
         const spec = buildOpenApiSpec();
@@ -34,3 +35,18 @@ export function registerMiscRoutes(sseClients, r) {
         });
     });
 }
+export function registerSettingsRoutes(settingsManager, r) {
+    r("GET", "/api/settings", (_req, res) => {
+        sendOk(res, settingsManager.get());
+    });
+    r("PATCH", "/api/settings", async (req, res) => {
+        try {
+            const body = await readBody(req);
+            const updated = settingsManager.set(body);
+            sendOk(res, updated);
+        }
+        catch (err) {
+            sendError(res, 400, err instanceof Error ? err.message : String(err));
+        }
+    });
+}

package/dist/daemon/http/route-projects.js

@@ -10,7 +10,7 @@ export function registerProjectRoutes(projectManager, r) {
                 sendError(res, 400, "Project name is required");
                 return;
             }
-            const project = projectManager.create(body.name.trim(), body.color ?? "#ffffff");
+            const project = projectManager.create(body.name.trim(), body.color ?? "#ffffff", body.directory, body.githubSource);
             sendOk(res, project, 201);
         }
         catch (err) {
@@ -24,7 +24,7 @@ export function registerProjectRoutes(projectManager, r) {
                 sendError(res, 400, "Project name is required");
                 return;
             }
-            projectManager.update(params.id, body.name.trim(), body.color);
+            projectManager.update(params.id, body.name.trim(), body.color, body.directory, body.githubSource);
             sendOk(res);
         }
         catch (err) {