@lumoai/cli 1.35.0 → 1.36.0

package/assets/skill/SKILL.md

@@ -51,7 +51,7 @@ The command catalog below is a **map**: it lists every command grouped by domain
 - `lumo task figma context <id> <linkId>` — Figma link metadata (v1)
 - `lumo task comments list <id>` — comment thread, capped to the output budget (`--full` prints every comment; read-only; ≠ `task comment`)
 - `lumo task pr show <id> <number>` — synced PR metadata (v1)
-- `lumo task lineage <id>` — show the causal trail: fragments that fed the task + each one's outcome + the run's token/loop cost (read-only audit view); `lumo task lineage <id> --signal` also appends workspace-level usage signal-health (used distribution, per-session variance, used-vs-base merge rate)
+- `lumo task lineage <id>` — show the causal trail: fragments that fed the task + each one's outcome + the run's token/loop cost (read-only audit view); `lumo task lineage <id> --signal` also appends workspace-level usage signal-health (used distribution, per-session variance, used-vs-base merge rate via iteration-taint fold — tasks with a send-back/reopen/PR-close count as the negative class even if later merged; shows negative-class size per side; prints "metric cannot discriminate" when no failure outcomes exist yet)
 
 **Tasks** — see [tasks.md](references/tasks.md)
 
@@ -126,7 +126,7 @@ The command catalog below is a **map**: it lists every command grouped by domain
 
 - `lumo session attach <id>` — bind this session to a task (then run `task context`). **Lifetime lock**: re-attaching to the same task is a no-op; attaching to a _different_ task is refused with 409 — start a new Claude Code session instead. No `--force`, no `session detach`.
 - `lumo session status` — show current binding
-- `lumo session wrap [--yes] [--dry-run] [--used <indices>]` — end-of-session panel: progress comment + memory review + fragment-usage vote (`--used`, LUM-300) + blocked-tag prompt, then a read-only reminder when the bound task has ≥1 OPEN boundary crossing still undispositioned (silent only on a genuine empty read — no wrap-up noise; a crossings-check failure prints a "could not confirm" warning instead of staying silent, LUM-480; pointer is web + human-only, LUM-448). Usage is now also audited automatically when a task reaches DONE (evidence-gated, true-only — confident fragments marked used, the rest left NULL); `session wrap --used` remains the manual override and takes precedence for a session.
+- `lumo session wrap [--yes] [--dry-run] [--used <indices>]` — end-of-session panel: memory review + fragment-usage vote (`--used`, LUM-300) + blocked-tag prompt, then a read-only reminder when the bound task has ≥1 OPEN boundary crossing still undispositioned (silent only on a genuine empty read — no wrap-up noise; a crossings-check failure prints a "could not confirm" warning instead of staying silent, LUM-480; pointer is web + human-only, LUM-448). Usage is now also audited automatically when a task reaches DONE (evidence-gated, true-only — confident fragments marked used, the rest left NULL); `session wrap --used` remains the manual override and takes precedence for a session.
 - Git-suggest at session start (suggests `session attach`, never auto-binds) + Layer-2 project-memory review — see the reference
 
 **Worktrees (local dev tooling)** — see [worktree.md](references/worktree.md)

package/assets/skill/references/sessions.md

@@ -125,18 +125,11 @@ lumo session status
 
 When to suggest: the user asks "which task am I on", "what's this session bound to", or you need to decide whether to suggest `session attach` for a mentioned task ID.
 
-### `lumo session wrap [--yes] [--dry-run] [--used <indices>]` — wrap-up panel: progress comment + memory review + fragment-usage vote + blocked-tag prompt
+### `lumo session wrap [--yes] [--dry-run] [--used <indices>]` — wrap-up panel: memory review + fragment-usage vote + blocked-tag prompt
 
-Session-end wrap-up panel with **four sections, run in order**:
+Session-end wrap-up panel with **three sections, run in order**:
 
-**1. Progress comment** — reads back the current Claude Code session's per-turn
-`turnSummary` rows (the one-line summaries written each STOP), aggregates
-every turn **since the last progress comment** into one bulleted body, and — after
-a `[y] post / [e] edit / [s] skip` confirmation — posts it as a comment on the
-session's bound task. A server-side watermark (`Session.lastProgressCommentAt`)
-means re-running never re-posts the same turns.
-
-**2. Memory review** — lists the Layer1 memories this session sedimented since the
+**1. Memory review** — lists the Layer1 memories this session sedimented since the
 last review (deduped by a per-session watermark `Session.lastMemoryReviewAt`).
 Each new memory is shown as `[SCOPE] CATEGORY  headline`, numbered from 1. You
 curate with a single line: `d 1,3` deletes rows 1 and 3, `p 2` promotes row 2 to
@@ -147,7 +140,7 @@ Out-of-range indices are ignored. Deletes/promotes run server-side, scoped to
 memories this session created (you can't touch other sessions' memories through
 this panel). With no new memories the section prints "(no content)" and does nothing.
 
-**3. Fragment-usage vote (LUM-300)** — lists the context
+**2. Fragment-usage vote (LUM-300)** — lists the context
 fragments this session **consumed** (its lineage edges: memory / slack / web /
 figma / PR / review-todo / session), numbered from 1 with a content snippet
 label. The agent records which it **actually used** via
@@ -161,7 +154,7 @@ upgrades the flywheel signal from "co-loaded" (constant, no information) to
 fragment's usage-based merge rate, falling back to the weaker presence rate when
 usage samples are thin. With no consumed fragments the section prints "(no content)".
 
-**4. Blocked check (blocked-tag prompt, LUM-153)** — if the **same kind of failure
+**3. Blocked check (blocked-tag prompt, LUM-153)** — if the **same kind of failure
 recurred ≥ 3 times** in this session (server-aggregated from
 `POST_TOOL_USE_FAILURE` events grouped by tool name, plus `STOP_FAILURE`
 turn-level failures), the section surfaces the dominant failure (`This session looks repeatedly stuck on <tool> (N failures).` + last error summary) and prompts `[y] tag / [s] skip` whether to
@@ -177,7 +170,7 @@ shared board requires an interactive `y`, so `--yes` (and non-TTY) prints the
 suggestion and moves on rather than silently flipping board state. When there's
 nothing to prompt, the section prints "(no content)".
 
-**After the panel — open-crossings reminder (LUM-448).** Once the four sections
+**After the panel — open-crossings reminder (LUM-448).** Once the three sections
 finish, `session wrap` prints a one-shot read-only reminder **if** the bound
 task has ≥1 OPEN (undispositioned) boundary crossing: `⚠ N open boundary
 crossing(s) on LUM-N still undispositioned:` then a line per crossing `• [SEVERITY]
@@ -194,31 +187,27 @@ clear its own crossing from the terminal.
 
 ```bash
 lumo session wrap                  # interactive: preview each section, choose per-section
-lumo session wrap --yes            # progress posted + memories kept; blocked tag NOT auto-applied (needs interactive y)
+lumo session wrap --yes            # memories kept; blocked tag NOT auto-applied (needs interactive y)
 lumo session wrap --yes --used 1,3 # also record fragments 1 & 3 as used (the rest used=false)
 lumo session wrap --used none      # record that none of the injected fragments were used
-lumo session wrap --dry-run        # print all drafts only; never posts, never mutates, never advances watermarks
+lumo session wrap --dry-run        # print all drafts only; never mutates, never advances watermarks
 ```
 
 The usage vote is a two-step flow for agents: run `lumo session wrap` once to
 see the numbered fragment list, decide which you actually used, then re-run with
 `--used <indices>`. Re-running is safe — the other sections are watermark-guarded
-(progress won't double-post, reviewed memories won't re-list).
+(reviewed memories won't re-list).
 
 - Requires `$CLAUDE_CODE_SESSION_ID` (must run inside Claude Code) and a bound
-  task (`lumo session attach <LUM-N>` first). With no bound task or no new turn
-  summaries, the Progress comment section prints "(no content)" and posts nothing.
-- `[e] edit` (Progress comment) opens `$EDITOR` (fallback vi/nano) on the drafted body;
-  the edited text is posted and the watermark still advances to the turns the
-  draft covered.
-- `--yes` posts the progress comment AND keeps all memories (no
-  deletes/promotes) while advancing the memory-review watermark; for the
-  blocked-tag section it prints the suggestion but does **not** apply the tag.
-- `--dry-run` prints all drafts; never posts, never mutates memories/tags, never
-  advances either watermark.
-- Non-TTY without `--yes`: prints the drafts and does **not** post, mutate, or
-  tag (safe default).
-
-When to suggest: at the end of a working session on a bound task, to record what
-was done as a progress comment — offer `lumo session wrap` rather than composing
-a `task comment` by hand.
+  task (`lumo session attach <LUM-N>` first).
+- `--yes` keeps all memories (no deletes/promotes) while advancing the
+  memory-review watermark; for the blocked-tag section it prints the suggestion
+  but does **not** apply the tag.
+- `--dry-run` prints all drafts; never mutates memories/tags, never advances the
+  memory-review watermark.
+- Non-TTY without `--yes`: prints the drafts and does **not** mutate or tag (safe
+  default).
+
+When to suggest: at the end of a working session on a bound task, to review the
+memories it sedimented, vote which injected fragments were actually used, and
+flag the task `blocked` if it got repeatedly stuck — offer `lumo session wrap`.

package/assets/skill/references/task-context.md

@@ -132,7 +132,7 @@ identifier (`LUM-N`), prints the causal trail:
 
 ```bash
 lumo task lineage LUM-42            # per-session causal trail + cost
-lumo task lineage LUM-42 --signal   # append workspace-level usage signal-health
+lumo task lineage LUM-42 --signal   # append workspace-level usage signal-health; used-vs-base merge rate uses iteration-taint fold (send-back/reopen/PR-close = negative class even if later merged); shows negative-class size per side; prints "metric cannot discriminate" when no failure outcomes exist yet
 ```
 
 - **Totals banner** — distinct sessions, fragment count, edge count,

package/assets/skill/references/verify.md

@@ -63,6 +63,18 @@ only).
   them; the server rejects partial rounds.
 - Criteria added during review (`REVIEW_ADDED`) appear in the contract and
   are picked up automatically by the next round.
+- **Session bound to a different task (LUM-459)** → the server returns 409,
+  which the command surfaces as an error. No advisory is printed; the verify
+  round is rejected outright.
+- **Provably-unbound session** → the server includes `bindingAdvisory: 'unbound'`
+  in the round response, and the command prints:
+  `⚠ Working unbound — this verify ran from a Claude Code session not attached to the task.`
+  The run is recorded as a `SESSION_BINDING_MISSING` boundary crossing visible in
+  `lumo task status` open crossings. Run `lumo session attach <LUM-N>` before the
+  next verify to bind the session.
+- **Unconfirmed session binding** → `bindingAdvisory: 'unconfirmed'` causes a
+  softer advisory: `⚠ Could not confirm this session is attached to the task.`
+  Same remediation: `lumo session attach <LUM-N>`.
 
 ## Round discipline
 

package/dist/cli/src/commands/session-wrap.js

@@ -3,7 +3,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.sessionWrap = sessionWrap;
 const config_1 = require("../lib/config");
 const wrap_panel_1 = require("../lib/wrap-panel");
-const progress_comment_section_1 = require("./wrap/progress-comment-section");
 const memory_review_section_1 = require("./wrap/memory-review-section");
 const fragment_usage_section_1 = require("./wrap/fragment-usage-section");
 const blocked_prompt_section_1 = require("./wrap/blocked-prompt-section");
@@ -11,13 +10,12 @@ const crossings_reminder_1 = require("./wrap/crossings-reminder");
 /**
  * `lumo session wrap [--yes] [--dry-run]`
  *
- * Session-end wrap-up panel with four sections, run in order: (1) draft a
- * progress comment from this session's unposted turnSummaries and post it
- * (after y/e/s confirmation) to the bound task; (2) review the Layer1 memories
- * this session sedimented — keep/delete/promote, deduped by a per-session
- * watermark; (3) vote which injected context fragments were actually used
- * (LUM-300, via `--used`); (4) if the session repeatedly hit the same failure,
- * prompt whether to flag the bound task with a `blocked` tag (LUM-153).
+ * Session-end wrap-up panel with three sections, run in order: (1) review the
+ * Layer1 memories this session sedimented — keep/delete/promote, deduped by a
+ * per-session watermark; (2) vote which injected context fragments were
+ * actually used (LUM-300, via `--used`); (3) if the session repeatedly hit the
+ * same failure, prompt whether to flag the bound task with a `blocked` tag
+ * (LUM-153).
  */
 async function sessionWrap(options) {
     const sessionId = process.env.CLAUDE_CODE_SESSION_ID;
@@ -32,7 +30,6 @@ async function sessionWrap(options) {
         return 1;
     }
     const sections = [
-        new progress_comment_section_1.ProgressCommentSection({ creds, sessionId }),
         new memory_review_section_1.MemoryReviewSection({ creds, sessionId }),
         new fragment_usage_section_1.FragmentUsageSection({ creds, sessionId, used: options.used }),
         new blocked_prompt_section_1.BlockedPromptSection({ creds, sessionId }),

package/dist/cli/src/commands/task-lineage.js

@@ -141,7 +141,14 @@ function formatSignalHealth(h) {
     lines.push(`- Distribution: used ${h.distribution.used} · null ${h.distribution.abstained} · false ${h.distribution.unused}`);
     lines.push(`- Per-session variance: ${h.perSessionVariance.toFixed(2)} (${h.votedSessions} voted sessions)`);
     if (h.usedMergeRate !== null && h.baseMergeRate !== null) {
-        lines.push(`- Used × outcome: merge-rate(used) ${Math.round(h.usedMergeRate * 100)}% vs base ${Math.round(h.baseMergeRate * 100)}%`);
+        if (h.baseFailedTasks === 0) {
+            // No failure outcomes exist yet, so any rate is non-discriminating by
+            // construction — say so honestly instead of printing a misleading 100%.
+            lines.push('- Used × outcome: no failure outcomes yet — metric cannot discriminate');
+        }
+        else {
+            lines.push(`- Used × outcome: merge-rate(used) ${Math.round(h.usedMergeRate * 100)}% (${h.usedResolvedTasks} resolved, ${h.usedFailedTasks} failed) vs base ${Math.round(h.baseMergeRate * 100)}% (${h.baseResolvedTasks} resolved, ${h.baseFailedTasks} failed)`);
+        }
     }
     else {
         lines.push('- Used × outcome: insufficient resolved tasks');

package/dist/cli/src/commands/verify.js

@@ -181,6 +181,14 @@ async function verify(identifier, options = {}) {
     }
     const outcome = (await res.json());
     process.stdout.write(`\nRound ${outcome.round}/${outcome.maxRounds} recorded.\n`);
+    if (outcome.bindingAdvisory === 'unbound') {
+        process.stdout.write('⚠ Working unbound — this verify ran from a Claude Code session not attached to the task. ' +
+            'Run `lumo session attach <LUM-N>` to bind (recorded as a boundary crossing).\n');
+    }
+    else if (outcome.bindingAdvisory === 'unconfirmed') {
+        process.stdout.write('⚠ Could not confirm this session is attached to the task. ' +
+            'If you are working with Claude Code, run `lumo session attach <LUM-N>`.\n');
+    }
     if (outcome.allPassed) {
         process.stdout.write(`✓ All MACHINE criteria passed — task is now ${outcome.taskStatus}.\n` +
             `Stop here: human adjudication (and any HUMAN criteria) take over from this point.\n`);

package/dist/cli/src/index.js

@@ -247,9 +247,9 @@ session
     .action(wrap(() => (0, session_status_1.sessionStatus)()));
 session
     .command('wrap')
-    .description("Session-end wrap-up: draft a progress comment from this session's turn summaries and post it to the bound task after confirmation.")
-    .option('-y, --yes', 'Post the drafted comment without prompting (agent-friendly)')
-    .option('--dry-run', 'Print the draft but do not post or advance the watermark')
+    .description('Session-end wrap-up: review the memories sedimented this session, vote which injected context fragments were actually used, and optionally flag the bound task blocked.')
+    .option('-y, --yes', 'Keep all memories without prompting (agent-friendly); does not auto-apply the blocked tag')
+    .option('--dry-run', 'Print the section drafts but do not mutate memories/tags or advance watermarks')
     .option('--used <indices>', 'Mark which injected context fragments you actually used (1-based indices, comma/space separated; "none" for all-unused). Omit to skip recording.')
     .action(wrap(options => (0, session_wrap_1.sessionWrap)(options)));
 const task = program

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumoai/cli",
-  "version": "1.35.0",
+  "version": "1.36.0",
   "description": "Lumo CLI — manage tasks and sessions from the terminal",
   "license": "MIT",
   "author": "cli@uselumo.ai",

package/dist/cli/src/commands/wrap/progress-comment-section.js

@@ -1,81 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ProgressCommentSection = void 0;
-exports.formatProgressBody = formatProgressBody;
-const sanitize_1 = require("../../lib/sanitize");
-const line_prompt_1 = require("../../lib/line-prompt");
-const editor_1 = require("../../lib/editor");
-const progress_comment_api_1 = require("../../lib/progress-comment-api");
-const HEADER = 'Session progress';
-/** Join turn summaries into a bulleted progress comment body under a header. */
-function formatProgressBody(summaries) {
-    return [HEADER, ...summaries.map(s => `- ${s}`)].join('\n');
-}
-/**
- * Wrap-panel section that drafts a progress comment from the session's
- * unposted turnSummaries and posts it after y/e/s confirmation. Holds its own
- * draft + body state between prepare() and run().
- */
-class ProgressCommentSection {
-    deps;
-    title = 'Progress comment';
-    draft = null;
-    body = '';
-    constructor(deps) {
-        this.deps = deps;
-    }
-    async prepare() {
-        this.draft = await (0, progress_comment_api_1.fetchProgressDraft)(this.deps.creds, this.deps.sessionId);
-        if (!this.draft.taskIdentifier || this.draft.summaries.length === 0) {
-            return false;
-        }
-        this.body = formatProgressBody(this.draft.summaries.map(s => s.turnSummary));
-        return true;
-    }
-    async run(opts) {
-        const draft = this.draft;
-        if (!draft || !draft.watermark)
-            return;
-        // Preview: sanitize the server free-text before it hits the terminal.
-        process.stdout.write(`Will post to ${draft.taskIdentifier} "${(0, sanitize_1.sanitizeField)(draft.taskTitle ?? '')}":\n`);
-        process.stdout.write(`${(0, sanitize_1.sanitizeField)(this.body)}\n`);
-        if (opts.dryRun) {
-            process.stdout.write('(dry-run, not posted)\n');
-            return;
-        }
-        if (opts.yes) {
-            await this.post(draft.watermark, this.body);
-            return;
-        }
-        const choice = (await (0, line_prompt_1.promptLine)('[y] post  [e] edit  [s] skip > ')).toLowerCase();
-        if (choice === 's' || choice === '') {
-            process.stdout.write('Skipped.\n');
-            return;
-        }
-        if (choice === 'e') {
-            const edited = (await (0, editor_1.editInEditor)(this.body)).trim();
-            if (edited.length === 0) {
-                process.stdout.write('Empty body — skipped.\n');
-                return;
-            }
-            process.stdout.write(`${(0, sanitize_1.sanitizeField)(edited)}\n`);
-            const confirm = (await (0, line_prompt_1.promptLine)('[y] post  [s] skip > ')).toLowerCase();
-            if (confirm !== 'y') {
-                process.stdout.write('Skipped.\n');
-                return;
-            }
-            await this.post(draft.watermark, edited);
-            return;
-        }
-        if (choice === 'y') {
-            await this.post(draft.watermark, this.body);
-            return;
-        }
-        process.stdout.write('Unrecognized choice — skipped.\n');
-    }
-    async post(watermark, body) {
-        const { commentId } = await (0, progress_comment_api_1.postProgressComment)(this.deps.creds, this.deps.sessionId, { body, watermark });
-        process.stdout.write(`Posted progress comment (comment ${commentId})\n`);
-    }
-}
-exports.ProgressCommentSection = ProgressCommentSection;

package/dist/cli/src/lib/progress-comment-api.js

@@ -1,47 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.fetchProgressDraft = fetchProgressDraft;
-exports.postProgressComment = postProgressComment;
-const api_1 = require("./api");
-function base(creds) {
-    return (0, api_1.trimTrailingSlash)((0, api_1.resolveAuthedApiUrl)(creds.apiUrl));
-}
-/** GET the unposted progress draft for the session. Throws on transport / non-200. */
-async function fetchProgressDraft(creds, sessionId) {
-    const url = `${base(creds)}/api/sessions/${encodeURIComponent(sessionId)}/turn-summaries`;
-    const res = await fetch(url, {
-        headers: { Authorization: `Bearer ${creds.token}` },
-    });
-    if (res.status === 401)
-        throw new Error('API key invalid or revoked. Run `lumo auth login`.');
-    if (!res.ok)
-        throw new Error(`progress draft fetch failed (HTTP ${res.status})`);
-    return (await res.json());
-}
-/** POST the (possibly edited) body + watermark. Throws the server message on non-201. */
-async function postProgressComment(creds, sessionId, payload) {
-    const url = `${base(creds)}/api/sessions/${encodeURIComponent(sessionId)}/progress-comment`;
-    const res = await fetch(url, {
-        method: 'POST',
-        headers: {
-            Authorization: `Bearer ${creds.token}`,
-            'Content-Type': 'application/json',
-        },
-        body: JSON.stringify(payload),
-    });
-    if (res.status === 401)
-        throw new Error('API key invalid or revoked. Run `lumo auth login`.');
-    if (res.status !== 201) {
-        let serverMsg = null;
-        try {
-            const errBody = (await res.json());
-            if (typeof errBody.error === 'string')
-                serverMsg = errBody.error;
-        }
-        catch {
-            // body wasn't JSON
-        }
-        throw new Error(serverMsg ?? `progress comment failed (HTTP ${res.status})`);
-    }
-    return (await res.json());
-}