@lumoai/cli 1.5.1 → 1.7.0

package/assets/skill.md

@@ -1,6 +1,6 @@
 ---
 name: lumo
-description: 'Use the Lumo CLI to load task context, manage session bindings, inspect projects and milestones, and create/update/list/show/comment on tasks from the terminal. Activate when: user mentions a Lumo task identifier (LUM-42, LUM-12, etc.), asks to load task background or context, wants to bind, check, or detach a Claude Code session''s task binding, is about to start development work on a specific task, wants to create a new task, list their tasks, view a task, comment on a task, list projects, list milestones, attach a task to a milestone, or update a task''s status/title/description/priority/assignee/milestone. Triggers on: "LUM-", "task context", "load context", "session start", "session attach", "session status", "session detach", "bind session", "unbind session", "which task", "what task am I on", "work on LUM", "create task", "new task", "add task", "file a task", "log a task", "list tasks", "my tasks", "show task", "view task", "comment on task", "leave a comment", "list projects", "what projects", "update task", "change task status", "rename task", "reassign task", "mark task as done", "milestone", "里程碑", "list milestones", "set milestone", "挂到 milestone", "attach milestone", "unbind milestone", "create milestone", "new milestone", "update milestone", "change milestone status", "delete milestone", "show milestone", "view milestone", "tasks in milestone", "milestone tasks", "新建里程碑", "更新里程碑", "删除里程碑", "查看里程碑", "auth login", "log in", "login", "auth logout", "log out", "logout", "sign out", "switch account", "switch identity", "whoami", "who am I", "current identity", "current user", "current workspace", "登录", "登出", "切换账号", "当前身份", "create doc", "new doc", "new document", "write doc", "写文档", "新建文档", "update doc", "edit doc", "修改文档", "更新文档", "list docs", "my docs", "我的文档", "show doc", "view doc", "查看文档", "delete doc", "删除文档", "bind doc", "attach doc to task", "把文档关联到任务", "文档绑定到任务", "unbind doc", "解绑文档", "personal doc", "workspace doc", "个人文档", "workspace 文档", "doc scope", "tag", "add tag", "remove tag", "标签", "添加标签", "移除标签", "doc tag", "task tag", "share doc", "doc share", "share document", "分享文档", "文档分享", "unshare doc", "remove share", "取消分享", "share list", "list doc shares", "who has access", "viewer", "editor", "manager", "shared with", "doc tree", "doc move", "move doc", "reparent doc", "文档树", "移动文档", "sprint", "start sprint", "close sprint", "add to sprint", "active sprints", "冲刺", "迭代", "开始冲刺", "关闭冲刺", "create sprint", "new sprint", "list sprints", "show sprint", "update sprint", "delete sprint", "sprint summary", "sprint retro", "把任务挂到冲刺", "冲刺里有什么", "lumo update", "update cli", "upgrade lumo", "update lumo", "upgrade cli", "升级 lumo", "更新 cli", "new lumo version", "是否有新版本", "lumo setup", "install lumo skill", "install lumo hooks", "wire up lumo", "set up lumo", "onboard lumo", "npx @lumoai/cli", "安装 lumo", "配置 lumo", "lumo 初始化", "task artifact", "artifact add", "artifact list", "artifact show", "artifact rm", "artifact delete", "artifact update", "update artifact", "edit artifact", "change artifact kind", "change artifact source", "remove artifact", "delete artifact", "spec artifact", "record spec", "attach spec", "attach plan", "记录 spec", "挂 spec", "查看 artifact", "编辑 artifact", "修改 artifact", "删除 artifact", figma, attach figma, figma link, 关联 figma, 设计稿, figma design, "memory", "记忆", "remember", "record a memory", "记一条", "promote memory", "promote to project", "沉淀", "task memory", "project memory", "lumo memory", "retrieval", "取全文", "load full content", "拉全文", "task slack show", "看 thread", "看 slack thread", "show slack thread", "slack 全文", "task web show", "show web link body", "web 正文", "抓网页正文", "task figma context", "figma metadata", "figma 元数据", "figma 设计上下文", "task comments list", "list comments", "看评论", "评论流", "task pr show", "查看 PR", "show pr", "PR 详情", "pr metadata", "import google doc", "sync google doc", "google drive", "doc import-gdoc", "doc sync", "导入 google 文档", "同步 google 文档".'
+description: 'Use the Lumo CLI to load task context, manage session bindings, inspect projects and milestones, and create/update/list/show/comment on tasks from the terminal. Activate when: user mentions a Lumo task identifier (LUM-42, LUM-12, etc.), asks to load task background or context, wants to bind, check, or detach a Claude Code session''s task binding, is about to start development work on a specific task, wants to create a new task, list their tasks, view a task, comment on a task, list projects, list milestones, attach a task to a milestone, or update a task''s status/title/description/priority/assignee/milestone. Triggers on: "LUM-", "task context", "load context", "session start", "session attach", "session status", "session detach", "bind session", "unbind session", "which task", "what task am I on", "work on LUM", "create task", "new task", "add task", "file a task", "log a task", "list tasks", "my tasks", "show task", "view task", "comment on task", "leave a comment", "list projects", "what projects", "update task", "change task status", "rename task", "reassign task", "mark task as done", "milestone", "里程碑", "list milestones", "set milestone", "挂到 milestone", "attach milestone", "unbind milestone", "create milestone", "new milestone", "update milestone", "change milestone status", "delete milestone", "show milestone", "view milestone", "tasks in milestone", "milestone tasks", "新建里程碑", "更新里程碑", "删除里程碑", "查看里程碑", "auth login", "log in", "login", "auth logout", "log out", "logout", "sign out", "switch account", "switch identity", "whoami", "who am I", "current identity", "current user", "current workspace", "登录", "登出", "切换账号", "当前身份", "create doc", "new doc", "new document", "write doc", "写文档", "新建文档", "update doc", "edit doc", "修改文档", "更新文档", "list docs", "my docs", "我的文档", "show doc", "view doc", "查看文档", "delete doc", "删除文档", "bind doc", "attach doc to task", "把文档关联到任务", "文档绑定到任务", "unbind doc", "解绑文档", "personal doc", "workspace doc", "个人文档", "workspace 文档", "doc scope", "tag", "add tag", "remove tag", "标签", "添加标签", "移除标签", "doc tag", "task tag", "share doc", "doc share", "share document", "分享文档", "文档分享", "unshare doc", "remove share", "取消分享", "share list", "list doc shares", "who has access", "viewer", "editor", "manager", "shared with", "doc tree", "doc move", "move doc", "reparent doc", "文档树", "移动文档", "sprint", "start sprint", "close sprint", "add to sprint", "active sprints", "冲刺", "迭代", "开始冲刺", "关闭冲刺", "create sprint", "new sprint", "list sprints", "show sprint", "update sprint", "delete sprint", "sprint summary", "sprint retro", "把任务挂到冲刺", "冲刺里有什么", "lumo update", "update cli", "upgrade lumo", "update lumo", "upgrade cli", "升级 lumo", "更新 cli", "new lumo version", "是否有新版本", "lumo setup", "install lumo skill", "install lumo hooks", "wire up lumo", "set up lumo", "onboard lumo", "npx @lumoai/cli", "安装 lumo", "配置 lumo", "lumo 初始化", "task artifact", "artifact add", "artifact list", "artifact show", "artifact rm", "artifact delete", "artifact update", "update artifact", "edit artifact", "change artifact kind", "change artifact source", "remove artifact", "delete artifact", "spec artifact", "record spec", "attach spec", "attach plan", "记录 spec", "挂 spec", "查看 artifact", "编辑 artifact", "修改 artifact", "删除 artifact", figma, attach figma, figma link, 关联 figma, 设计稿, figma design, "memory", "记忆", "remember", "record a memory", "记一条", "promote memory", "promote to project", "沉淀", "task memory", "project memory", "lumo memory", "retrieval", "取全文", "load full content", "拉全文", "task slack show", "看 thread", "看 slack thread", "show slack thread", "slack 全文", "task web show", "show web link body", "web 正文", "抓网页正文", "task figma context", "figma metadata", "figma 元数据", "figma 设计上下文", "task comments list", "list comments", "看评论", "评论流", "task pr show", "查看 PR", "show pr", "PR 详情", "pr metadata", "import google doc", "sync google doc", "google drive", "doc import-gdoc", "doc sync", "导入 google 文档", "同步 google 文档", "session wrap", "wrap up session", "收尾", "post progress", "把进度发出去", "progress comment", "进度评论".'
 ---
 
 ## Prerequisites
@@ -122,13 +122,16 @@ The command prints a markdown document to stdout containing:
 
 1. **Task header** — identifier, title, status, description
 2. **Memory section** — cross-session learnings accumulated over prior sessions; treat as trusted background context
-3. **Previous sessions** — ordered newest-first, each with:
+3. **Inline source cards** — Slack / web / Figma / artifacts / documents / comments / Pull Requests (see "Context Retrieval" below)
+4. **PR Review 待办** — mirrored PR review comments as a checkbox todo list: each line-level reviewer comment (shown as `` `file:line` `` + the reviewer's ask + a link to the GitHub comment) and each `changes_requested` review summary (shown as "🛑 整体要求改动"). Present only when the task's PR(s) have review comments. This same block is **auto-injected at session start** (alongside the memory section) when the session is bound to a task — so reviewer asks surface without re-running `task context`.
+5. **Previous sessions** — ordered newest-first, each with:
    - A headline summary of what was done
    - Unresolved items (carry-over TODOs from that session)
 
 ### How to use the context
 
 - **Unresolved items** from the most recent session are the highest-priority carry-overs — address them before starting new work unless the user says otherwise
+- **PR Review 待办** items are reviewer-requested changes — treat each unchecked box as a TODO to resolve, then reply on the PR (a Lumo comment mirrors back to GitHub)
 - **Memory section** provides validated context that persists across sessions — use it to avoid re-learning decisions or constraints
 - Focus on the **most recent 1–2 sessions** for relevant state; older sessions are for historical reference only
 - If there are **no prior sessions**, this is a fresh start — read the task description carefully and ask clarifying questions if needed
@@ -1099,6 +1102,27 @@ across multiple tasks → consider `lumo memory promote`.
 
 ## Session Management
 
+### Auto-bind at session start (from local git)
+
+When a session starts **without** a bound task, the `session-start` hook tries to
+infer the task from local git before falling back to the "请告诉我任务编号" prompt:
+
+- It reads the **current branch name** first (e.g. `lumo/LUM-145-...`), then the
+  **most recent commit subjects** (e.g. `... [LUM-145]`), extracting the first
+  `LUM-<n>`.
+- On a hit it binds the session to that task automatically (same `bind-task`
+  endpoint as `session attach`) and prints a single line:
+  `已自动绑定 LUM-145 - <title>（依据分支名/最近 commit）。如果不对，回复"不是"我就帮你解绑。`
+  The freshly-bound task's memory is injected too.
+- No match (detached HEAD, a non-lumo branch with no tagged commits, not a git
+  repo) or a failed bind (unknown task) → it degrades silently to the normal
+  unbound prompt.
+
+**Agent guidance:** if the user responds "不是" / "不对" / "wrong task" to an
+auto-bind line, run `lumo session detach` to clear the binding (then `session
+attach <LUM-N>` if they name the right one). No detach is needed when the
+auto-bound task is correct.
+
 ### `lumo session attach <identifier>` — bind the current session to a task
 
 Use this whenever the user mentions a task ID. The command is the only way to bind a session to a task.
@@ -1139,6 +1163,32 @@ lumo session detach
 
 When to suggest: the user wants to stop tagging the current session with the active task (e.g., switching to unrelated exploratory work without binding to a different task).
 
+### `lumo session wrap [--yes] [--dry-run]` — draft + post a progress comment at wrap-up
+
+Session-end wrap-up panel. Reads back the current Claude Code session's per-turn
+`turnSummary` rows (the one-line Chinese summaries written each STOP), aggregates
+every turn **since the last progress comment** into one bulleted body, and — after
+a `[y] 发送 / [e] 编辑 / [s] 跳过` confirmation — posts it as a comment on the
+session's bound task. A server-side watermark (`Session.lastProgressCommentAt`)
+means re-running never re-posts the same turns.
+
+```bash
+lumo session wrap            # interactive: preview draft, choose y / e / s
+lumo session wrap --yes      # post the drafted body without prompting (agent-friendly)
+lumo session wrap --dry-run  # print the draft only; never posts, never advances watermark
+```
+
+- Requires `$CLAUDE_CODE_SESSION_ID` (must run inside Claude Code) and a bound
+  task (`lumo session attach <LUM-N>` first). With no bound task or no new turn
+  summaries, the panel prints "(无内容)" and posts nothing.
+- `[e] 编辑` opens `$EDITOR` (fallback vi/nano) on the drafted body; the edited
+  text is posted and the watermark still advances to the turns the draft covered.
+- Non-TTY without `--yes`: prints the draft and does **not** post (safe default).
+
+When to suggest: at the end of a working session on a bound task, to record what
+was done as a progress comment — offer `lumo session wrap` rather than composing
+a `task comment` by hand.
+
 ### When to suggest session binding
 
 - If the user mentions a task ID (e.g., "let's work on LUM-42") and no session is currently bound, **suggest running `lumo session attach`**.

package/dist/cli/src/commands/session-wrap.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sessionWrap = sessionWrap;
+const config_1 = require("../lib/config");
+const wrap_panel_1 = require("../lib/wrap-panel");
+const progress_comment_section_1 = require("./wrap/progress-comment-section");
+/**
+ * `lumo session wrap [--yes] [--dry-run]`
+ *
+ * Session-end wrap-up panel. v1 has a single section: draft a progress comment
+ * from this session's unposted turnSummaries and post it (after y/e/s
+ * confirmation) to the bound task. Designed as a multi-section panel so
+ * LUM-152's memory-review section slots in without touching this command.
+ */
+async function sessionWrap(options) {
+    const sessionId = process.env.CLAUDE_CODE_SESSION_ID;
+    if (!sessionId) {
+        console.error('Error: $CLAUDE_CODE_SESSION_ID is not set.\n' +
+            '`lumo session wrap` must be run inside a Claude Code session.');
+        return 1;
+    }
+    const creds = (0, config_1.readCredentials)();
+    if (!creds) {
+        console.error('Error: not logged in. Run `lumo auth login` first.');
+        return 1;
+    }
+    const sections = [new progress_comment_section_1.ProgressCommentSection({ creds, sessionId })];
+    await (0, wrap_panel_1.runWrapPanel)(sections, {
+        yes: options.yes === true,
+        dryRun: options.dryRun === true,
+    });
+}

package/dist/cli/src/commands/task-context.js

@@ -99,6 +99,11 @@ function formatTaskContextMarkdown(data, now) {
         lines.push((0, sanitize_1.sanitizeField)(data.prSection.trimEnd()));
         lines.push('');
     }
+    if (data.prReviewTodosSection &&
+        data.prReviewTodosSection.trim().length > 0) {
+        lines.push((0, sanitize_1.sanitizeField)(data.prReviewTodosSection.trimEnd()));
+        lines.push('');
+    }
     if (data.sessions.length === 0) {
         lines.push('## Previous Sessions (0)');
         lines.push('');

package/dist/cli/src/commands/wrap/progress-comment-section.js

@@ -0,0 +1,81 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProgressCommentSection = void 0;
+exports.formatProgressBody = formatProgressBody;
+const sanitize_1 = require("../../lib/sanitize");
+const line_prompt_1 = require("../../lib/line-prompt");
+const editor_1 = require("../../lib/editor");
+const progress_comment_api_1 = require("../../lib/progress-comment-api");
+const HEADER = '本次会话进度';
+/** Join turn summaries into a bulleted progress comment body under a header. */
+function formatProgressBody(summaries) {
+    return [HEADER, ...summaries.map(s => `- ${s}`)].join('\n');
+}
+/**
+ * Wrap-panel section that drafts a progress comment from the session's
+ * unposted turnSummaries and posts it after y/e/s confirmation. Holds its own
+ * draft + body state between prepare() and run().
+ */
+class ProgressCommentSection {
+    deps;
+    title = '进度评论';
+    draft = null;
+    body = '';
+    constructor(deps) {
+        this.deps = deps;
+    }
+    async prepare() {
+        this.draft = await (0, progress_comment_api_1.fetchProgressDraft)(this.deps.creds, this.deps.sessionId);
+        if (!this.draft.taskIdentifier || this.draft.summaries.length === 0) {
+            return false;
+        }
+        this.body = formatProgressBody(this.draft.summaries.map(s => s.turnSummary));
+        return true;
+    }
+    async run(opts) {
+        const draft = this.draft;
+        if (!draft || !draft.watermark)
+            return;
+        // Preview: sanitize the server free-text before it hits the terminal.
+        process.stdout.write(`将发到 ${draft.taskIdentifier} "${(0, sanitize_1.sanitizeField)(draft.taskTitle ?? '')}":\n`);
+        process.stdout.write(`${(0, sanitize_1.sanitizeField)(this.body)}\n`);
+        if (opts.dryRun) {
+            process.stdout.write('(dry-run，未发送)\n');
+            return;
+        }
+        if (opts.yes) {
+            await this.post(draft.watermark, this.body);
+            return;
+        }
+        const choice = (await (0, line_prompt_1.promptLine)('[y] 发送  [e] 编辑  [s] 跳过 > ')).toLowerCase();
+        if (choice === 's' || choice === '') {
+            process.stdout.write('已跳过。\n');
+            return;
+        }
+        if (choice === 'e') {
+            const edited = (await (0, editor_1.editInEditor)(this.body)).trim();
+            if (edited.length === 0) {
+                process.stdout.write('正文为空，已跳过。\n');
+                return;
+            }
+            process.stdout.write(`${(0, sanitize_1.sanitizeField)(edited)}\n`);
+            const confirm = (await (0, line_prompt_1.promptLine)('[y] 发送  [s] 跳过 > ')).toLowerCase();
+            if (confirm !== 'y') {
+                process.stdout.write('已跳过。\n');
+                return;
+            }
+            await this.post(draft.watermark, edited);
+            return;
+        }
+        if (choice === 'y') {
+            await this.post(draft.watermark, this.body);
+            return;
+        }
+        process.stdout.write('无法识别的选择，已跳过。\n');
+    }
+    async post(watermark, body) {
+        const { commentId } = await (0, progress_comment_api_1.postProgressComment)(this.deps.creds, this.deps.sessionId, { body, watermark });
+        process.stdout.write(`已发送进度评论 (comment ${commentId})\n`);
+    }
+}
+exports.ProgressCommentSection = ProgressCommentSection;

package/dist/cli/src/index.js

@@ -45,6 +45,7 @@ const hook_1 = require("./commands/hook");
 const session_attach_1 = require("./commands/session-attach");
 const session_detach_1 = require("./commands/session-detach");
 const session_status_1 = require("./commands/session-status");
+const session_wrap_1 = require("./commands/session-wrap");
 const task_context_1 = require("./commands/task-context");
 const task_create_1 = require("./commands/task-create");
 const task_update_1 = require("./commands/task-update");
@@ -195,6 +196,12 @@ session
     .command('detach')
     .description('Clear the task binding on the current Claude Code session. Past hook events keep their taskId; only future events become untagged.')
     .action(wrap(() => (0, session_detach_1.sessionDetach)()));
+session
+    .command('wrap')
+    .description("Session-end wrap-up: draft a progress comment from this session's turn summaries and post it to the bound task after confirmation.")
+    .option('-y, --yes', 'Post the drafted comment without prompting (agent-friendly)')
+    .option('--dry-run', 'Print the draft but do not post or advance the watermark')
+    .action(wrap(options => (0, session_wrap_1.sessionWrap)(options)));
 const task = program
     .command('task')
     .description('Inspect tasks from the terminal');

package/dist/cli/src/lib/editor.js

@@ -0,0 +1,66 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.editInEditor = editInEditor;
+const child_process_1 = require("child_process");
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+/**
+ * Open `initial` in the user's $EDITOR (fallback vi → nano), return the edited
+ * text. Degrades gracefully: when stdin is not a TTY (piped / agent) or the
+ * editor exits non-zero, the original text is returned unchanged so the caller
+ * can proceed without an interactive editor.
+ */
+async function editInEditor(initial) {
+    if (!process.stdin.isTTY)
+        return initial;
+    const editor = process.env.EDITOR || process.env.VISUAL || 'vi';
+    const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'lumo-wrap-'));
+    const file = path.join(dir, 'progress.md');
+    try {
+        fs.writeFileSync(file, initial, 'utf8');
+        const result = (0, child_process_1.spawnSync)(editor, [file], { stdio: 'inherit' });
+        if (result.status !== 0)
+            return initial;
+        return fs.readFileSync(file, 'utf8');
+    }
+    catch {
+        return initial;
+    }
+    finally {
+        fs.rmSync(dir, { recursive: true, force: true });
+    }
+}

package/dist/cli/src/lib/git-task.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.matchTaskIdentifier = matchTaskIdentifier;
+exports.extractTaskFromGit = extractTaskFromGit;
+const child_process_1 = require("child_process");
+/**
+ * How many recent commit subjects to scan when the branch name carries no
+ * task id (e.g. on a generic feature branch or detached HEAD).
+ */
+const DEFAULT_COMMIT_DEPTH = 20;
+const TASK_RE = /LUM-(\d+)/i;
+/**
+ * Pull the first `LUM-<n>` token out of arbitrary text (a branch name or a
+ * commit subject) and normalize it to upper case. Returns null when no task
+ * id is present. The leading `-` in the pattern means the bare word `lumo`
+ * never matches.
+ */
+function matchTaskIdentifier(text) {
+    const m = text.match(TASK_RE);
+    return m ? `LUM-${m[1]}` : null;
+}
+/**
+ * Run a git subcommand and return trimmed stdout, or '' on any failure
+ * (non-zero exit, spawn error, not a repository, timeout). Never throws.
+ */
+function gitOutput(args, cwd) {
+    try {
+        const r = (0, child_process_1.spawnSync)('git', args, {
+            cwd,
+            encoding: 'utf8',
+            timeout: 2000,
+        });
+        if (r.error || r.status !== 0)
+            return '';
+        return (r.stdout ?? '').trim();
+    }
+    catch {
+        return '';
+    }
+}
+/**
+ * Infer the task to work on from local git: prefer the current branch name
+ * (e.g. `lumo/LUM-145-...`), then fall back to the most recent commit
+ * subjects (e.g. `... [LUM-145]`). Returns null when nothing matches —
+ * detached HEAD (branch reads `HEAD`), a non-lumo branch with no tagged
+ * commits, or a directory that is not a git repository all degrade to null.
+ */
+function extractTaskFromGit(cwd, commitDepth = DEFAULT_COMMIT_DEPTH) {
+    const branch = gitOutput(['rev-parse', '--abbrev-ref', 'HEAD'], cwd);
+    const fromBranch = matchTaskIdentifier(branch);
+    if (fromBranch)
+        return { identifier: fromBranch, source: 'branch' };
+    const log = gitOutput(['log', '-n', String(commitDepth), '--format=%s'], cwd);
+    const fromLog = matchTaskIdentifier(log);
+    if (fromLog)
+        return { identifier: fromLog, source: 'commit' };
+    return null;
+}

package/dist/cli/src/lib/hook-runner.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.formatHookStdoutLines = formatHookStdoutLines;
+exports.formatAutoBindLine = formatAutoBindLine;
+exports.resolveSessionStartStdout = resolveSessionStartStdout;
 exports.runHook = runHook;
 exports.runHookWithBody = runHookWithBody;
 const config_1 = require("./config");
@@ -8,6 +10,7 @@ const api_1 = require("./api");
 const hook_log_1 = require("./hook-log");
 const sanitize_1 = require("./sanitize");
 const agent_1 = require("./agent");
+const git_task_1 = require("./git-task");
 /**
  * Hard timeout for the hook POST. On timeout the request is aborted,
  * logged, and `runHook` exits 0 — Claude Code is never blocked beyond
@@ -51,16 +54,40 @@ function readStdin() {
 }
 /**
  * Build the array of stdout lines to emit for a given hook path + response
- * body. Returns an empty array for any path other than 'session-start'.
+ * body. Returns an empty array for any path that emits nothing.
  *
  * For 'session-start' the array contains:
  *   [0] plain-text bind/unbound status line (always present when taskBinding exists)
- *   [1] (optional) hookSpecificOutput JSON when memorySection is a non-empty string
+ *   [1] (optional) hookSpecificOutput JSON when there is any additionalContext —
+ *       the memory section and the PR-review-todos section, concatenated.
  *
- * The JSON on line [1] conforms to Claude Code's hookSpecificOutput envelope so
- * the runtime injects additionalContext into the conversation automatically.
+ * For 'pre-tool-use' the array contains:
+ *   [0] (optional) a PreToolUse hookSpecificOutput JSON carrying the parallel-
+ *       edit collision warning as additionalContext, when the server returned a
+ *       `collisionWarning` (LUM-150 step ③). Empty otherwise.
+ *
+ * The JSON lines conform to Claude Code's hookSpecificOutput envelope so the
+ * runtime injects additionalContext into the conversation automatically.
  */
 function formatHookStdoutLines(path, responseBody) {
+    if (path === 'pre-tool-use') {
+        if (responseBody == null || typeof responseBody !== 'object')
+            return [];
+        const warning = responseBody
+            .collisionWarning;
+        if (typeof warning !== 'string' || warning === '')
+            return [];
+        return [
+            JSON.stringify({
+                hookSpecificOutput: {
+                    hookEventName: 'PreToolUse',
+                    // Server-built text routed back to stdout — sanitize untrusted free
+                    // text before Claude Code consumes it (ANSI/control-char injection).
+                    additionalContext: (0, sanitize_1.sanitizeField)(warning),
+                },
+            }),
+        ];
+    }
     if (path !== 'session-start')
         return [];
     if (responseBody == null || typeof responseBody !== 'object')
@@ -75,18 +102,121 @@ function formatHookStdoutLines(path, responseBody) {
         lines.push(`[Lumo] session_id=${sessionId} | 当前任务: ${tb.taskIdentifier} - ${(0, sanitize_1.sanitizeField)(tb.taskTitle ?? '')}`);
     }
     else if (tb && tb.bound === false) {
-        lines.push(`[Lumo] session_id=${sessionId} | 当前未绑定任务。请告诉我你要处理的任务编号（如 LUM-42），或说"跳过"。`);
+        lines.push(unboundPromptLine(sessionId));
     }
-    if (typeof body.memorySection === 'string' && body.memorySection !== '') {
-        lines.push(JSON.stringify({
-            hookSpecificOutput: {
-                hookEventName: 'SessionStart',
-                additionalContext: body.memorySection,
-            },
-        }));
+    // Memory + PR-review todos share one additionalContext block so Claude Code
+    // injects a single coherent context payload at session start.
+    const envelope = sessionContextEnvelope([
+        body.memorySection,
+        body.reviewTodosSection,
+    ]);
+    if (envelope)
+        lines.push(envelope);
+    return lines;
+}
+/**
+ * The plain-text line shown when a session starts without a bound task and
+ * no task could be inferred from local git — the user is asked to name one.
+ */
+function unboundPromptLine(sessionId) {
+    return `[Lumo] session_id=${sessionId} | 当前未绑定任务。请告诉我你要处理的任务编号（如 LUM-42），或说"跳过"。`;
+}
+/**
+ * Wrap any non-empty context parts into a single SessionStart
+ * hookSpecificOutput envelope so Claude Code injects one coherent
+ * additionalContext payload. Returns null when there is nothing to inject.
+ */
+function sessionContextEnvelope(parts) {
+    const filled = parts.filter((s) => typeof s === 'string' && s !== '');
+    if (filled.length === 0)
+        return null;
+    return JSON.stringify({
+        hookSpecificOutput: {
+            hookEventName: 'SessionStart',
+            additionalContext: filled.join('\n\n'),
+        },
+    });
+}
+/**
+ * The single status line printed after a successful auto-bind. Explains which
+ * git signal (branch name vs recent commit) it relied on and how to undo it.
+ */
+function formatAutoBindLine(sessionId, match, result) {
+    const basis = match.source === 'branch' ? '分支名' : '最近 commit';
+    const identifier = result.taskIdentifier ?? match.identifier;
+    return `[Lumo] session_id=${sessionId} | 已自动绑定 ${identifier} - ${(0, sanitize_1.sanitizeField)(result.taskTitle ?? '')}（依据${basis}）。如果不对，回复"不是"我就帮你解绑。`;
+}
+/**
+ * Build the stdout lines for a session-start response, including the LUM-145
+ * auto-bind behavior: when the server reports no binding, infer the task from
+ * local git and bind it; on a hit, print the auto-bind line (plus the freshly
+ * bound task's memory). Falls back to the unbound prompt when nothing matches
+ * or the bind fails. Bound sessions reuse the existing formatting.
+ */
+async function resolveSessionStartStdout(responseBody, deps) {
+    if (responseBody == null || typeof responseBody !== 'object')
+        return [];
+    const body = responseBody;
+    if (!body.sessionId)
+        return [];
+    const sessionId = body.sessionId;
+    const tb = body.taskBinding;
+    if (tb && tb.bound === true) {
+        return formatHookStdoutLines('session-start', responseBody);
     }
+    if (!tb || tb.bound !== false)
+        return [];
+    const match = deps.extractTask();
+    if (!match)
+        return [unboundPromptLine(sessionId)];
+    const result = await deps.bindTask(sessionId, match.identifier);
+    if (!result.ok)
+        return [unboundPromptLine(sessionId)];
+    const lines = [formatAutoBindLine(sessionId, match, result)];
+    const envelope = sessionContextEnvelope([result.memorySection]);
+    if (envelope)
+        lines.push(envelope);
     return lines;
 }
+/**
+ * POST the inferred task binding to the same `bind-task` endpoint that
+ * `lumo session attach` uses. Guarded by the same short timeout as the hook
+ * POST so the extra round trip can never make session-start hang. Any
+ * failure (404 unknown task, network, timeout, non-2xx) returns
+ * `{ ok: false }`, which routes the caller back to the unbound prompt.
+ */
+async function postBindTask(sessionId, identifier, token, apiUrl) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), TIMEOUT_MS);
+    try {
+        const url = `${(0, api_1.trimTrailingSlash)(apiUrl)}/api/sessions/${encodeURIComponent(sessionId)}/bind-task`;
+        const res = await fetch(url, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                Authorization: `Bearer ${token}`,
+            },
+            body: JSON.stringify({ taskIdentifier: identifier }),
+            signal: controller.signal,
+        });
+        if (!res.ok)
+            return { ok: false };
+        const body = (await res.json());
+        return {
+            ok: true,
+            taskIdentifier: body.taskIdentifier,
+            taskTitle: body.taskTitle,
+            memorySection: body.memorySection,
+        };
+    }
+    catch (err) {
+        (0, hook_log_1.logHookError)('[session-start] auto-bind', err);
+        return { ok: false };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
 /**
  * POST the hook body to /api/hooks/<path> with a short timeout. All errors
  * — credential missing, network failure, timeout, non-2xx — are routed to
@@ -145,12 +275,21 @@ async function runHookWithBody(path, body, agentToken) {
             if (!res.ok) {
                 (0, hook_log_1.logHookError)(`[${path}]`, `HTTP ${res.status} from ${url}`);
             }
-            else if (path === 'session-start') {
-                // Per-hook side effects fire only after a 2xx response so a transient
-                // server failure doesn't desync local state from server state.
+            else if (path === 'session-start' || path === 'pre-tool-use') {
+                // Paths that turn the response body into stdout for Claude Code:
+                //   session-start → bind status + injected context (incl. LUM-145
+                //                   auto-bind from local git when unbound)
+                //   pre-tool-use  → parallel-edit collision warning (LUM-150 ③)
+                // Only after a 2xx so a transient server failure emits nothing.
                 try {
                     const responseBody = await res.json();
-                    for (const line of formatHookStdoutLines(path, responseBody)) {
+                    const lines = path === 'session-start'
+                        ? await resolveSessionStartStdout(responseBody, {
+                            extractTask: () => (0, git_task_1.extractTaskFromGit)(),
+                            bindTask: (sessionId, identifier) => postBindTask(sessionId, identifier, creds.token, apiUrl),
+                        })
+                        : formatHookStdoutLines(path, responseBody);
+                    for (const line of lines) {
                         process.stdout.write(line + '\n');
                     }
                 }

package/dist/cli/src/lib/progress-comment-api.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fetchProgressDraft = fetchProgressDraft;
+exports.postProgressComment = postProgressComment;
+const api_1 = require("./api");
+function base(creds) {
+    return (0, api_1.trimTrailingSlash)((0, api_1.resolveAuthedApiUrl)(creds.apiUrl));
+}
+/** GET the unposted progress draft for the session. Throws on transport / non-200. */
+async function fetchProgressDraft(creds, sessionId) {
+    const url = `${base(creds)}/api/sessions/${encodeURIComponent(sessionId)}/turn-summaries`;
+    const res = await fetch(url, {
+        headers: { Authorization: `Bearer ${creds.token}` },
+    });
+    if (res.status === 401)
+        throw new Error('API key invalid or revoked. Run `lumo auth login`.');
+    if (!res.ok)
+        throw new Error(`progress draft fetch failed (HTTP ${res.status})`);
+    return (await res.json());
+}
+/** POST the (possibly edited) body + watermark. Throws the server message on non-201. */
+async function postProgressComment(creds, sessionId, payload) {
+    const url = `${base(creds)}/api/sessions/${encodeURIComponent(sessionId)}/progress-comment`;
+    const res = await fetch(url, {
+        method: 'POST',
+        headers: {
+            Authorization: `Bearer ${creds.token}`,
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify(payload),
+    });
+    if (res.status === 401)
+        throw new Error('API key invalid or revoked. Run `lumo auth login`.');
+    if (res.status !== 201) {
+        let serverMsg = null;
+        try {
+            const errBody = (await res.json());
+            if (typeof errBody.error === 'string')
+                serverMsg = errBody.error;
+        }
+        catch {
+            // body wasn't JSON
+        }
+        throw new Error(serverMsg ?? `progress comment failed (HTTP ${res.status})`);
+    }
+    return (await res.json());
+}

package/dist/cli/src/lib/wrap-panel.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runWrapPanel = runWrapPanel;
+/** Run each section in order; print its title, prepare, then run if it has content. */
+async function runWrapPanel(sections, opts) {
+    for (const section of sections) {
+        process.stdout.write(`\n━━ ${section.title} ━━\n`);
+        const hasContent = await section.prepare();
+        if (!hasContent) {
+            process.stdout.write('(无内容)\n');
+            continue;
+        }
+        await section.run(opts);
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumoai/cli",
-  "version": "1.5.1",
+  "version": "1.7.0",
   "description": "Lumo CLI — manage tasks and sessions from the terminal",
   "license": "MIT",
   "author": "cli@uselumo.ai",