@lumoai/cli 1.24.0 → 1.25.1

package/assets/skill/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: lumo
-description: 'Use the Lumo CLI to load task context, manage session bindings, and run tasks / projects / milestones / sprints / docs / memory from the terminal. Activate when: the user mentions a Lumo task identifier (LUM-42 etc.), asks to load task background/context, wants to bind/check/detach a Claude Code session''s task, is about to start work on a task, or wants to create/update/list/show/comment on tasks, projects, milestones, sprints, documents, artifacts, Figma links, or memory. Triggers on: "LUM-", "task context", "load context", "session start", "session attach", "session status", "session detach", "which task", "what task am I on", "work on LUM", "session wrap", "wrap up session", "进度评论", "卡住检测", "fragment usage vote", "mark used fragments", "which fragments did I use", "--used", "上下文使用投票", "标记用过的记忆", "create task", "new task", "file a task", "list tasks", "my tasks", "show task", "view task", "comment on task", "update task", "change task status", "rename task", "reassign task", "mark task as done", "lumo next", "next task", "what should I work on", "推荐下一个任务", "list projects", "what projects", "milestone", "里程碑", "list/create/update/delete/show milestone", "set milestone", "attach/unbind milestone", "tasks in milestone", "search milestones", "find milestone", "milestone health", "at-risk", "overdue", "archive/unarchive milestone", "归档里程碑", "milestone summary", "里程碑复盘", "reorder/move milestone", "排序里程碑", "milestone add/remove", "挂任务到里程碑", "auth login", "log in", "logout", "sign out", "switch account", "whoami", "who am I", "current workspace", "登录", "切换账号", "create/update/list/show/delete doc", "write doc", "写文档", "新建文档", "修改文档", "查看文档", "bind/unbind doc", "把文档关联到任务", "doc scope", "personal/workspace doc", "tag", "add/remove tag", "标签", "share/unshare doc", "分享文档", "doc share-list", "viewer/editor/manager", "doc tree", "doc move", "move/reparent doc", "移动文档", "sprint", "冲刺", "迭代", "create/list/show/update/delete sprint", "start/close sprint", "开始/关闭冲刺", "add to sprint", "active sprints", "sprint summary", "冲刺总结", "把任务挂到冲刺", "sprint health", "sprint risk", "is this sprint at risk", "冲刺风险", "冲刺健康度", "sprint blockers", "冲刺阻塞", "lumo update", "upgrade lumo", "升级 lumo", "new lumo version", "lumo setup", "install lumo skill/hooks", "wire up lumo", "set up lumo", "安装 lumo", "配置 lumo", "task artifact", "artifact add/list/show/update/rm", "spec artifact", "record/attach spec", "attach plan", "记录 spec", "查看 artifact", figma, attach figma, figma link, 关联 figma, 设计稿, figma design, "memory", "记忆", "remember", "record a memory", "记一条", "promote memory", "promote to project", "沉淀", "task/project memory", "retrieval", "取全文", "拉全文", "task slack show", "看 thread", "show slack thread", "task web show", "web 正文", "task figma context", "figma metadata", "task comments list", "list comments", "看评论", "task pr show", "查看 PR", "show pr", "PR 详情", "task deps", "dependency", "dependencies", "依赖", "依赖边", "blocked by", "blocker", "confirm dependency", "dismiss dependency", "确认依赖", "忽略依赖", "import google doc", "sync google doc", "google drive", "doc import-gdoc", "doc sync", "导入/同步 google 文档", "mark blocked", "blocked tag", "标记 blocked", "stuck", "repeatedly failing", "worktree", "git worktree", "并行 worktree", "scaffold worktree", "新建 worktree", "node_modules 软链", "worktree 隔离", "lumo worktree add/rm/list", "task criteria", "criteria set", "criteria list", "acceptance criteria", "验收标准", "验收合约", "draft criteria", "草拟验收", "definition of done", "lumo verify", "verify task", "machine verification", "verification round", "机器验收", "自验", "验收轮", "claim done", "宣称完成", "--cause", "contract drift", "合约漂移", "task lineage", "lineage", "causal trail", "审计", "因果链", "成本归因", "trace context", "--signal", "usage signal health", "auto usage audit", "自动使用审计", "signal-health".'
+description: 'Use the Lumo CLI to work with Lumo (project management for dev teams) from the terminal: load task context, bind/wrap Claude Code sessions, and create/update/list/show/comment on tasks, projects, milestones, sprints, documents, artifacts, Figma links, dependencies, and team memory — plus acceptance criteria, machine verification (verify / task status), lineage audit, worktree scaffolding, and CLI setup/auth/update. Activate when the user mentions a Lumo task identifier (LUM-N) or the lumo CLI; asks to load task background or bind/check/wrap a session; manages any of the resources above in Lumo; is starting, resuming, or about to claim completion of a task; or asks what to work on next. Key triggers: "LUM-", "lumo", "task context", "session attach", "session wrap", "验收", "verify", "task status", "milestone", "里程碑", "sprint", "冲刺", "文档", "记忆", "memory", "依赖", "deps", "lineage", "worktree", "下一个任务", "what should I work on", "设计稿", "验收标准", "机器验收", "恢复任务".'
 ---
 
 ## Prerequisites
@@ -26,7 +26,7 @@ The command catalog below is a **map**: it lists every command grouped by domain
 | `task create/update/list/show/comment`, `next`                                    | [references/tasks.md](references/tasks.md)                     |
 | `task artifact*`, `task figma*`                                                   | [references/artifacts-figma.md](references/artifacts-figma.md) |
 | `task criteria set/list`, drafting the acceptance contract                        | [references/criteria.md](references/criteria.md)               |
-| `verify` — machine verification loop, claim-done flow                             | [references/verify.md](references/verify.md)                   |
+| `verify`, `task status` — machine verification loop, claim-done flow, 自查/恢复   | [references/verify.md](references/verify.md)                   |
 | `project list`, `milestone*`                                                      | [references/milestones.md](references/milestones.md)           |
 | `doc*`                                                                            | [references/docs.md](references/docs.md)                       |
 | `sprint*`                                                                         | [references/sprints.md](references/sprints.md)                 |
@@ -79,6 +79,7 @@ The command catalog below is a **map**: it lists every command grouped by domain
 **Verification（机器验收循环）** — see [verify.md](references/verify.md)
 
 - `lumo verify [task] [--timeout <seconds>]` — run every MACHINE criterion's checkpointer locally, report one structured PASS/FAIL verdict per criterion to the server, print next actions. Defaults to the session-bound task. Round cap 3: an all-pass round moves the task to IN_REVIEW (agent stops there); a round-3 fail escalates to a human (stop retrying). **Run this before claiming a task is done.**
+- `lumo task status [task] [--json]` — read-only acceptance self-check (no LLM, milliseconds): the contract with each criterion's latest verdict (REVIEW_ADDED provenance visible), verification history, current round, last round's failure reasons, and `nextActions` = the unmet criteria (the declarative "what's next" — no separate plan). Defaults to the session-bound task; `--json` emits a versioned payload (`version` field). **Run it first when resuming a task in a new session or after a verification round was rejected.**
 
 **Artifacts & Figma** — see [artifacts-figma.md](references/artifacts-figma.md)
 
@@ -127,6 +128,20 @@ The command catalog below is a **map**: it lists every command grouped by domain
 - `lumo worktree rm <LUM-N> --yes` — remove a worktree (keeps the branch unless `--delete-branch`)
 - `lumo worktree list` — list `.worktrees/` worktrees (task id, branch, dirty, node_modules link)
 
+## Commands & flags that do NOT exist (common mistakes)
+
+Measured from real agent sessions (LUM-392) — don't guess these:
+
+- No `lumo session start` — binding is `lumo session attach <LUM-N>`
+- No `lumo task delete` — tasks can't be deleted from the CLI (web UI only)
+- No `lumo task artifact edit` — it's `lumo task artifact update`
+- No `lumo auth status` — identity check is `lumo whoami`
+- No `--body` on `lumo task comment` — the body is a positional arg: `lumo task comment LUM-N "text"`
+- No `--content` on `task/project memory add` — memory is structured fields (`--category` + per-category flags), see [memory.md](references/memory.md)
+- No global `--verbose` flag on any command
+- `lumo task comments list` (plural) **reads** the thread; `lumo task comment` (singular) **writes** one
+- Status updates: `lumo task update LUM-N --status done` is one direct call — do **not** walk `in_progress → in_review → done` step by step (see [tasks.md](references/tasks.md) for the transition matrix; under the verify flow you shouldn't be setting `in_review`/`done` yourself at all)
+
 ## Core workflow
 
 Typical flow when a user says "help me with LUM-42":
@@ -138,4 +153,6 @@ Typical flow when a user says "help me with LUM-42":
 5. Begin working on the task
 6. **Before claiming the work is done: run `lumo verify`** — the machine half of the acceptance loop. Fix failures and re-run (round cap 3). On all-pass the task moves to IN_REVIEW and you stop; never set DONE yourself after a verify loop — that adjudication is human-only. See [verify.md](references/verify.md)
 
+**Status-first recovery:** when you pick a task back up — a new session resuming earlier work, or a task that came back after a rejected verification round / review findings — run `lumo task status` **before** re-reading code or planning. It tells you where the loop stands (current round, what passed, what's unmet and why, any REVIEW_ADDED criteria appended during review) so you don't redo finished work or miss the reason it bounced. See [verify.md](references/verify.md)
+
 **Git-suggest at start:** when the session is unbound, session-start may infer the task from the git branch / recent commits and print a suggestion — `检测到 LUM-N … 运行 lumo session attach LUM-N 绑定。` — **without** binding. Confirm it's the right task, then run `lumo session attach <LUM-N>` yourself (binding only happens on an explicit attach). See [sessions.md](references/sessions.md) for the full session-start behavior.

package/assets/skill/references/tasks.md

@@ -95,6 +95,23 @@ Tags: urgent
 
 The `Tags:` line is omitted when the resulting tag set is empty.
 
+### Status transitions — direct moves are legal
+
+The server's transition matrix (`lib/task/state-machine.ts`):
+
+| From        | Allowed targets                                     |
+| ----------- | --------------------------------------------------- |
+| TODO        | IN_PROGRESS, IN_REVIEW, DONE                        |
+| IN_PROGRESS | TODO, IN_REVIEW, DONE                               |
+| IN_REVIEW   | TODO, IN_PROGRESS, DONE                             |
+| DONE        | TODO, IN_PROGRESS (reopen only — **not** IN_REVIEW) |
+
+Practical rules:
+
+- **One call suffices.** `--status done` straight from TODO or IN_PROGRESS is legal — never walk `in_progress → in_review → done` as a ritual (measured in LUM-392: 70 such chains wasted ~75 calls).
+- **Under the verify flow you don't set `in_review`/`done` at all** — `lumo verify` moves the task to IN_REVIEW on all-pass and the DONE adjudication is human-only.
+- **DONE → IN_REVIEW is rejected (409).** To attach follow-up context to a DONE task, use `lumo task comment` instead of reopening.
+
 ### When to suggest `task update`
 
 - The user describes a state change in natural language (e.g. "mark LUM-48 as in progress", "rename LUM-12 to ...", "assign LUM-30 to me", "bump the priority on LUM-7").
@@ -237,11 +254,13 @@ DISMISSED
 CONFIRMED and SUGGESTED rows show the other task's identifier, title, current status, and source/evidence. DISMISSED rows render as `[shortId] <direction> <identifier> · 已忽略` only — no title, status, or source.
 
 When there are no edges at all the output is:
+
 ```
 Dependencies for LUM-42: 无依赖边。
 ```
 
 **Evidence fields by detection signal:**
+
 - `shared_files` — `shared_files(N 个共享文件: path1, path2, …)` — number of shared write-touched files in the 14-day window, plus up to 5 sample paths.
 - `task_mention` — `task_mention(description)` or `task_mention(comment)` — the surface where the mention appeared.
 
@@ -258,6 +277,7 @@ lumo task deps add LUM-42 --blocked-by LUM-9
 Both `<LUM-N>` and `--blocked-by` are required. The command errors on usage if either is missing.
 
 **Service semantics (read before using):**
+
 - **Self-edge** → 400 ("A task cannot depend on itself").
 - **CONFIRMED edge in the same direction already exists** → 409 ("Dependency already exists").
 - **CONFIRMED edge in the reverse direction already exists** → the cycle guard fires and returns 409 ("Dependency would create a cycle").
@@ -275,11 +295,13 @@ lumo task deps confirm LUM-42 e5f6a7b8 --reverse  # flip direction before confir
 ```
 
 **Edge selector semantics** (shared by `confirm`, `dismiss`, `rm`):
+
 - **Other task's identifier** (e.g., `LUM-55`) — case-insensitive exact match against the edge's other-task identifier. Resolves unambiguously when there is exactly one edge to that task.
 - **Edge-id prefix** — at least 6 characters of the short id (e.g., `e5f6a7`). Must match exactly one edge.
 - If zero or more than one edge matches → prints all candidate edges with short ids and exits 1. Retry with a more specific selector.
 
 **`--reverse` semantics:**
+
 - The detector's direction heuristic is best-effort. If the suggested direction is backwards (e.g., the detector says "LUM-42 blocks LUM-55" but actually LUM-55 blocks LUM-42), confirm with `--reverse` to flip before writing.
 - The service checks that the reversed pair does not already have an edge (→ 409), and re-runs the cycle guard with the flipped direction.
 

package/assets/skill/references/verify.md

@@ -70,3 +70,55 @@ Rounds are a hard budget of 3, not a retry loop. Between rounds, actually fix
 the failures — re-running without changes burns a round and (at round 3)
 pages a human. A FAIL round never changes task status; only an all-pass round
 moves it (to IN_REVIEW, never further).
+
+## lumo task status — the read half（自查入口）
+
+`lumo task status [task] [--json]` is the read-only counterpart of the loop
+(LUM-344): pure read, milliseconds, no LLM, never writes — running it costs
+nothing and burns no round. Defaults to the session-bound task; an explicit
+identifier overrides.
+
+```
+lumo task status            # session-bound task
+lumo task status LUM-42     # explicit task
+lumo task status --json     # versioned machine-readable payload
+```
+
+### When to run it
+
+**Status-first recovery:** run it FIRST — before re-reading code or
+planning — whenever you:
+
+- resume a task in a new session (yours or another agent's earlier work);
+- come back after a verification round was rejected (`lumo verify` failed);
+- were told the task bounced in review (REVIEW_ADDED criteria may have been
+  appended at the round they surfaced — they show up here automatically).
+
+It answers "where does the loop stand": what already passed (don't redo it),
+what's unmet and why (the exact failure tails), and how many rounds are left.
+
+### What it prints
+
+- Header: task identifier/title/status + `verification round N/3` (round 0 =
+  never verified) + an escalation warning when the machine loop is exhausted.
+- **Criteria** — every criterion as `<glyph> <id>  [TYPE]  SOURCE@rN
+  statement` (✓ latest verdict passed / ✗ failed / ○ no verdict yet) with its
+  checkpointer and latest verdict line (evidence pointer on pass, failure
+  tail on fail). `REVIEW_ADDED@rN` provenance is visible per row.
+- **History** — one line per recorded round: `rN · timestamp · X PASS / Y FAIL`.
+- **Last round failures** — the most recent round's FAIL verdicts with their
+  rejection reasons (why the last round bounced).
+- **Next actions** — the unmet criteria (latest verdict is not a pass:
+  failed or never verified, HUMAN ones included). This list IS the plan —
+  it is recomputed from the event log on every read, never maintained
+  separately. Empty + rounds recorded = awaiting human adjudication.
+
+### --json contract
+
+`--json` emits the full read model with a top-level `version` field
+(currently `1`). The schema is versioned: breaking shape changes bump the
+major; additive fields don't. Pin on `version` when scripting against it.
+
+`status` reads; `verify` judges. Running status never starts a round, never
+escalates, and never changes task state — loop rules (cap 3, IN_REVIEW on
+all-pass, human-only DONE) live entirely in `lumo verify` and the server.

package/dist/cli/src/commands/doc-list.js

@@ -9,6 +9,10 @@ const doc_create_1 = require("./doc-create");
 const doc_tree_1 = require("../lib/doc-tree");
 const sanitize_1 = require("../lib/sanitize");
 function visibilityLabel(v) {
+    // Some routes (e.g. /api/tasks/<id>/documents) have returned rows without a
+    // visibility field at runtime — fall back instead of crashing on .padEnd.
+    if (!v)
+        return '-';
     if (v === 'PRIVATE')
         return 'PERSONAL';
     return v;

package/dist/cli/src/commands/memory-promote.js

@@ -20,7 +20,10 @@ async function memoryPromote(memoryId) {
     try {
         res = await fetch(`${base}/api/memories/${encodeURIComponent(memoryId)}`, {
             method: 'PATCH',
-            headers: { Authorization: `Bearer ${creds.token}`, 'Content-Type': 'application/json' },
+            headers: {
+                Authorization: `Bearer ${creds.token}`,
+                'Content-Type': 'application/json',
+            },
             body: JSON.stringify({ scope: 'PROJECT' }),
         });
     }
@@ -29,7 +32,7 @@ async function memoryPromote(memoryId) {
         return 1;
     }
     if (res.status === 404) {
-        console.error(`Error: memory ${memoryId} not found`);
+        console.error(`Error: memory ${memoryId} not found — pass the full memory id (cuid) from \`lumo task memory list\` / \`lumo project memory list\`; truncated id prefixes are not resolved`);
         return 1;
     }
     if (res.status === 409) {
@@ -43,8 +46,12 @@ async function memoryPromote(memoryId) {
             if (typeof b.error === 'string')
                 m = b.error;
         }
-        catch { /* */ }
-        console.error(m ? `Error: ${(0, sanitize_1.sanitizeField)(m)}` : `Error: promote failed (HTTP ${res.status})`);
+        catch {
+            /* */
+        }
+        console.error(m
+            ? `Error: ${(0, sanitize_1.sanitizeField)(m)}`
+            : `Error: promote failed (HTTP ${res.status})`);
         return 1;
     }
     process.stdout.write(`Promoted ${memoryId} to PROJECT — every agent on this project now sees it.\n` +

package/dist/cli/src/commands/memory-rm.js

@@ -31,7 +31,7 @@ async function memoryRm(memoryId, options) {
         return 1;
     }
     if (res.status === 404) {
-        console.error(`Error: memory ${memoryId} not found`);
+        console.error(`Error: memory ${memoryId} not found — pass the full memory id (cuid) from \`lumo task memory list\` / \`lumo project memory list\`; truncated id prefixes are not resolved`);
         return 1;
     }
     if (res.status !== 204) {

package/dist/cli/src/commands/task-artifact-add.js

@@ -44,7 +44,7 @@ async function taskArtifactAdd(identifier, options) {
     const verdict = (0, path_guard_1.checkArtifactFilePath)(options.file);
     if (!verdict.ok) {
         if (verdict.reason === 'unreadable') {
-            console.error(`Error: could not read file ${options.file}`);
+            console.error(`Error: ${(0, doc_input_1.unreadableFileMessage)(options.file)}`);
         }
         else {
             console.error(`Error: refusing to read ${options.file} — ${verdict.detail}. ` +
@@ -57,7 +57,7 @@ async function taskArtifactAdd(identifier, options) {
         content = await (0, doc_input_1.readFileUtf8)(verdict.resolved);
     }
     catch {
-        console.error(`Error: could not read file ${options.file}`);
+        console.error(`Error: ${(0, doc_input_1.unreadableFileMessage)(options.file)}`);
         return 1;
     }
     if (content.trim().length === 0) {

package/dist/cli/src/commands/task-criteria-set.js

@@ -55,7 +55,7 @@ async function taskCriteriaSet(identifier, options) {
     const verdict = (0, path_guard_1.checkArtifactFilePath)(options.file);
     if (!verdict.ok) {
         if (verdict.reason === 'unreadable') {
-            console.error(`Error: could not read file ${options.file}`);
+            console.error(`Error: ${(0, doc_input_1.unreadableFileMessage)(options.file)}`);
         }
         else {
             console.error(`Error: refusing to read ${options.file} — ${verdict.detail}. ` +
@@ -68,7 +68,7 @@ async function taskCriteriaSet(identifier, options) {
         raw = await (0, doc_input_1.readFileUtf8)(verdict.resolved);
     }
     catch {
-        console.error(`Error: could not read file ${options.file}`);
+        console.error(`Error: ${(0, doc_input_1.unreadableFileMessage)(options.file)}`);
         return 1;
     }
     const parsed = parseCriteriaJson(raw);

package/dist/cli/src/commands/task-status.js

@@ -0,0 +1,166 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.formatTaskStatus = formatTaskStatus;
+exports.taskStatus = taskStatus;
+const config_1 = require("../lib/config");
+const api_1 = require("../lib/api");
+const resolve_bound_task_1 = require("../lib/resolve-bound-task");
+const sanitize_1 = require("../lib/sanitize");
+const REASON_TAIL = 400;
+function tail(s, max) {
+    return s.length > max ? `…${s.slice(-max)}` : s;
+}
+/**
+ * Render the acceptance status as prose. Same row grammar as
+ * `criteria list` (`<id>  [TYPE]  SOURCE@rN  statement`) with a verdict
+ * glyph in front — ✓ pass, ✗ fail, ○ no verdict yet — so REVIEW_ADDED
+ * provenance stays explicitly visible in every row.
+ */
+function formatTaskStatus(data) {
+    const lines = [];
+    const t = data.task;
+    lines.push(`${t.identifier}  ${(0, sanitize_1.sanitizeField)(t.title)}`);
+    const roundLabel = data.currentRound === 0
+        ? 'no verification rounds yet'
+        : `verification round ${data.currentRound}/${data.maxRounds}`;
+    lines.push(`Status: ${t.status} · ${roundLabel}`);
+    if (data.escalated) {
+        lines.push('⚠ Escalated: the machine loop is exhausted — a human has been paged. Stop retrying lumo verify.');
+    }
+    if (data.criteria.length === 0) {
+        lines.push('');
+        lines.push(`No acceptance criteria on ${t.identifier} — draft 3–7 and submit with lumo task criteria set ${t.identifier} --file <criteria.json>`);
+        return lines.join('\n') + '\n';
+    }
+    lines.push('');
+    lines.push(`Criteria (${data.criteria.length} total, ${data.nextActions.length} unmet):`);
+    for (const c of data.criteria) {
+        const glyph = c.latestVerdict == null
+            ? '○'
+            : c.latestVerdict.verdict === 'FAIL'
+                ? '✗'
+                : '✓';
+        const provenance = `${c.source}@r${c.addedAtRound}`;
+        const evidence = c.evidenceRequired ? '  [evidence]' : '';
+        lines.push(`  ${glyph} ${c.id}  [${c.verifierType}]  ${provenance}${evidence}  ${(0, sanitize_1.sanitizeField)(c.statement)}`);
+        if (c.checkpointer) {
+            lines.push(`      ↳ check: ${(0, sanitize_1.sanitizeField)(c.checkpointer)}`);
+        }
+        const v = c.latestVerdict;
+        if (v == null) {
+            lines.push('      (no verdict yet)');
+        }
+        else if (v.verdict === 'FAIL') {
+            const why = v.rejectionReason
+                ? ` — ${(0, sanitize_1.sanitizeField)(tail(v.rejectionReason, REASON_TAIL))}`
+                : '';
+            lines.push(`      ✗ FAIL@r${v.round}${why}`);
+        }
+        else {
+            const evidencePart = v.evidencePointer
+                ? ` · ${(0, sanitize_1.sanitizeField)(v.evidencePointer)}`
+                : '';
+            lines.push(`      ✓ ${v.verdict}@r${v.round}${evidencePart}`);
+        }
+    }
+    if (data.verificationHistory.length > 0) {
+        lines.push('');
+        lines.push('History:');
+        for (const h of data.verificationHistory) {
+            lines.push(`  r${h.round} · ${h.recordedAt} · ${h.passed} PASS / ${h.failed} FAIL`);
+        }
+    }
+    if (data.lastRoundFailures.length > 0) {
+        lines.push('');
+        lines.push(`Last round (r${data.currentRound}) failures:`);
+        for (const f of data.lastRoundFailures) {
+            lines.push(`  • ${(0, sanitize_1.sanitizeField)(f.statement)}`);
+            if (f.rejectionReason) {
+                lines.push(`    why: ${(0, sanitize_1.sanitizeField)(tail(f.rejectionReason, REASON_TAIL))}`);
+            }
+        }
+    }
+    lines.push('');
+    if (data.nextActions.length === 0) {
+        lines.push(data.currentRound > 0
+            ? 'All criteria met by their latest verdicts — awaiting human adjudication.'
+            : 'Nothing unmet — but no verification has run; run `lumo verify` to judge the contract.');
+    }
+    else {
+        lines.push(`Next actions (${data.nextActions.length} unmet):`);
+        for (const a of data.nextActions) {
+            lines.push(`  • [${a.verifierType}] ${(0, sanitize_1.sanitizeField)(a.statement)}`);
+            if (a.checkpointer) {
+                lines.push(`    check: ${(0, sanitize_1.sanitizeField)(a.checkpointer)}`);
+            }
+            if (a.rejectionReason) {
+                lines.push(`    why: ${(0, sanitize_1.sanitizeField)(tail(a.rejectionReason, REASON_TAIL))}`);
+            }
+        }
+        if (data.escalated) {
+            lines.push('Wait for human direction before touching these.');
+        }
+        else {
+            const hasMachine = data.nextActions.some(a => a.verifierType === 'MACHINE');
+            const left = data.maxRounds - data.currentRound;
+            lines.push(hasMachine
+                ? `Fix the unmet criteria, then run \`lumo verify\` (${left} round${left === 1 ? '' : 's'} left).`
+                : 'Remaining criteria are HUMAN-only — finish the work and hand off for human review.');
+        }
+    }
+    return lines.join('\n') + '\n';
+}
+/**
+ * `lumo task status [task] [--json]` — the agent's read-only self-check
+ * (LUM-344): contract + latest verdicts + verification history + next
+ * actions, straight from the server's derived read model. Run it first when
+ * resuming a task in a new session or after a round was rejected. Defaults
+ * to the session-bound task; an explicit identifier overrides.
+ */
+async function taskStatus(identifier, options = {}) {
+    const creds = (0, config_1.readCredentials)();
+    if (!creds) {
+        console.error('Error: not logged in. Run `lumo auth login` first.');
+        return 1;
+    }
+    const base = (0, api_1.trimTrailingSlash)((0, api_1.resolveAuthedApiUrl)(creds.apiUrl));
+    let taskId = identifier;
+    if (!taskId) {
+        taskId =
+            (await (0, resolve_bound_task_1.resolveBoundTaskIdentifier)(base, creds.token)) ?? undefined;
+        if (!taskId) {
+            console.error('Error: no task given and this session is not bound to one.\n' +
+                'Run `lumo task status <LUM-N>`, or bind first with `lumo session attach <LUM-N>`.');
+            return 1;
+        }
+    }
+    let res;
+    try {
+        res = await fetch(`${base}/api/tasks/${encodeURIComponent(taskId)}/status`, { headers: { Authorization: `Bearer ${creds.token}` } });
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`Error: could not reach Lumo API (${msg})`);
+        return 1;
+    }
+    if (res.status === 401) {
+        console.error('Error: API key invalid or revoked. Run `lumo auth login`.');
+        return 1;
+    }
+    if (res.status === 404) {
+        console.error(`Error: task ${taskId} not found in workspace ${creds.workspaceSlug}`);
+        return 1;
+    }
+    if (!res.ok) {
+        console.error(`Error: task status failed (HTTP ${res.status})`);
+        return 1;
+    }
+    const data = (await res.json());
+    if (options.json) {
+        // JSON.stringify escapes control chars (…), so the payload is safe
+        // to emit raw — and consumers get byte-faithful server data.
+        process.stdout.write(JSON.stringify(data, null, 2) + '\n');
+        return;
+    }
+    process.stdout.write(formatTaskStatus(data));
+}

package/dist/cli/src/index.js

@@ -53,6 +53,7 @@ const task_create_1 = require("./commands/task-create");
 const task_update_1 = require("./commands/task-update");
 const task_list_1 = require("./commands/task-list");
 const task_show_1 = require("./commands/task-show");
+const task_status_1 = require("./commands/task-status");
 const task_comment_1 = require("./commands/task-comment");
 const task_figma_add_1 = require("./commands/task-figma-add");
 const task_figma_list_1 = require("./commands/task-figma-list");
@@ -171,7 +172,12 @@ function wrap(fn) {
 const program = new commander_1.Command()
     .name('lumo')
     .description('Lumo CLI — manage tasks and sessions from the terminal')
-    .version(pkg.version);
+    .version(pkg.version)
+    // Make usage errors actionable for agents: suggest near-miss spellings and
+    // point at --help instead of dead-ending on "unknown option". Subcommands
+    // created via .command() inherit these settings.
+    .showSuggestionAfterError(true)
+    .showHelpAfterError('(run the command with --help to list its valid flags and arguments)');
 const auth = program.command('auth').description('Manage Lumo authentication');
 auth
     .command('login')
@@ -249,6 +255,11 @@ task
     .command('show <identifier>')
     .description('Show a single task: title, status, priority, assignee, project, URL, description.')
     .action(wrap(identifier => (0, task_show_1.taskShow)(identifier)));
+task
+    .command('status [task]')
+    .description('Acceptance self-check (LUM-344): contract with latest verdicts, verification history, current round, and nextActions (unmet criteria). Read-only, no LLM. Defaults to the session-bound task. Run it first when resuming a task or after a verification round was rejected.')
+    .option('--json', 'Emit the versioned machine-readable payload (version field; breaking changes bump it)')
+    .action(wrap((taskArg, options) => (0, task_status_1.taskStatus)(taskArg, options)));
 task
     .command('comment <identifier> <body>')
     .description('Add a comment to a task. Body is plain text — quote it to pass spaces or newlines.')

package/dist/cli/src/lib/doc-input.js

@@ -33,6 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.unreadableFileMessage = unreadableFileMessage;
 exports.resolveDocContent = resolveDocContent;
 exports.readStdinToString = readStdinToString;
 exports.readFileUtf8 = readFileUtf8;
@@ -45,6 +46,14 @@ const path_guard_1 = require("./path-guard");
  * mutually exclusive. stdin is only consulted when neither flag is set
  * and the shell is non-TTY.
  */
+/**
+ * Actionable message for an unreadable --file path: agents most often pass a
+ * path that doesn't exist relative to the current working directory.
+ */
+function unreadableFileMessage(file) {
+    return (`could not read file ${file} (cwd: ${process.cwd()}) — ` +
+        `check the path exists; pass a project-local relative path`);
+}
 async function resolveDocContent(args) {
     const hasContent = args.content !== undefined;
     const hasFile = args.file !== undefined && args.file.length > 0;
@@ -62,7 +71,7 @@ async function resolveDocContent(args) {
             return {
                 kind: 'error',
                 message: check.reason === 'unreadable'
-                    ? `could not read file ${args.file}`
+                    ? unreadableFileMessage(args.file)
                     : `refusing to read ${args.file} — ${check.detail}. ` +
                         `--file must be a non-sensitive path inside the project directory.`,
             };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumoai/cli",
-  "version": "1.24.0",
+  "version": "1.25.1",
   "description": "Lumo CLI — manage tasks and sessions from the terminal",
   "license": "MIT",
   "author": "cli@uselumo.ai",