@lumoai/cli 1.9.0 → 1.10.0

package/assets/skill.md

@@ -1,6 +1,6 @@
 ---
 name: lumo
-description: 'Use the Lumo CLI to load task context, manage session bindings, inspect projects and milestones, and create/update/list/show/comment on tasks from the terminal. Activate when: user mentions a Lumo task identifier (LUM-42, LUM-12, etc.), asks to load task background or context, wants to bind, check, or detach a Claude Code session''s task binding, is about to start development work on a specific task, wants to create a new task, list their tasks, view a task, comment on a task, list projects, list milestones, attach a task to a milestone, or update a task''s status/title/description/priority/assignee/milestone. Triggers on: "LUM-", "task context", "load context", "session start", "session attach", "session status", "session detach", "bind session", "unbind session", "which task", "what task am I on", "work on LUM", "create task", "new task", "add task", "file a task", "log a task", "list tasks", "my tasks", "show task", "view task", "comment on task", "leave a comment", "list projects", "what projects", "update task", "change task status", "rename task", "reassign task", "mark task as done", "milestone", "里程碑", "list milestones", "set milestone", "挂到 milestone", "attach milestone", "unbind milestone", "create milestone", "new milestone", "update milestone", "change milestone status", "delete milestone", "show milestone", "view milestone", "tasks in milestone", "milestone tasks", "新建里程碑", "更新里程碑", "删除里程碑", "查看里程碑", "auth login", "log in", "login", "auth logout", "log out", "logout", "sign out", "switch account", "switch identity", "whoami", "who am I", "current identity", "current user", "current workspace", "登录", "登出", "切换账号", "当前身份", "create doc", "new doc", "new document", "write doc", "写文档", "新建文档", "update doc", "edit doc", "修改文档", "更新文档", "list docs", "my docs", "我的文档", "show doc", "view doc", "查看文档", "delete doc", "删除文档", "bind doc", "attach doc to task", "把文档关联到任务", "文档绑定到任务", "unbind doc", "解绑文档", "personal doc", "workspace doc", "个人文档", "workspace 文档", "doc scope", "tag", "add tag", "remove tag", "标签", "添加标签", "移除标签", "doc tag", "task tag", "share doc", "doc share", "share document", "分享文档", "文档分享", "unshare doc", "remove share", "取消分享", "share list", "list doc shares", "who has access", "viewer", "editor", "manager", "shared with", "doc tree", "doc move", "move doc", "reparent doc", "文档树", "移动文档", "sprint", "start sprint", "close sprint", "add to sprint", "active sprints", "冲刺", "迭代", "开始冲刺", "关闭冲刺", "create sprint", "new sprint", "list sprints", "show sprint", "update sprint", "delete sprint", "sprint summary", "sprint retro", "把任务挂到冲刺", "冲刺里有什么", "lumo update", "update cli", "upgrade lumo", "update lumo", "upgrade cli", "升级 lumo", "更新 cli", "new lumo version", "是否有新版本", "lumo setup", "install lumo skill", "install lumo hooks", "wire up lumo", "set up lumo", "onboard lumo", "npx @lumoai/cli", "安装 lumo", "配置 lumo", "lumo 初始化", "task artifact", "artifact add", "artifact list", "artifact show", "artifact rm", "artifact delete", "artifact update", "update artifact", "edit artifact", "change artifact kind", "change artifact source", "remove artifact", "delete artifact", "spec artifact", "record spec", "attach spec", "attach plan", "记录 spec", "挂 spec", "查看 artifact", "编辑 artifact", "修改 artifact", "删除 artifact", figma, attach figma, figma link, 关联 figma, 设计稿, figma design, "memory", "记忆", "remember", "record a memory", "记一条", "promote memory", "promote to project", "沉淀", "task memory", "project memory", "lumo memory", "retrieval", "取全文", "load full content", "拉全文", "task slack show", "看 thread", "看 slack thread", "show slack thread", "slack 全文", "task web show", "show web link body", "web 正文", "抓网页正文", "task figma context", "figma metadata", "figma 元数据", "figma 设计上下文", "task comments list", "list comments", "看评论", "评论流", "task pr show", "查看 PR", "show pr", "PR 详情", "pr metadata", "import google doc", "sync google doc", "google drive", "doc import-gdoc", "doc sync", "导入 google 文档", "同步 google 文档", "session wrap", "wrap up session", "收尾", "post progress", "把进度发出去", "progress comment", "进度评论".'
+description: 'Use the Lumo CLI to load task context, manage session bindings, inspect projects and milestones, and create/update/list/show/comment on tasks from the terminal. Activate when: user mentions a Lumo task identifier (LUM-42, LUM-12, etc.), asks to load task background or context, wants to bind, check, or detach a Claude Code session''s task binding, is about to start development work on a specific task, wants to create a new task, list their tasks, view a task, comment on a task, list projects, list milestones, attach a task to a milestone, or update a task''s status/title/description/priority/assignee/milestone. Triggers on: "LUM-", "task context", "load context", "session start", "session attach", "session status", "session detach", "bind session", "unbind session", "which task", "what task am I on", "work on LUM", "create task", "new task", "add task", "file a task", "log a task", "list tasks", "my tasks", "show task", "view task", "comment on task", "leave a comment", "list projects", "what projects", "update task", "change task status", "rename task", "reassign task", "mark task as done", "milestone", "里程碑", "list milestones", "set milestone", "挂到 milestone", "attach milestone", "unbind milestone", "create milestone", "new milestone", "update milestone", "change milestone status", "delete milestone", "show milestone", "view milestone", "tasks in milestone", "milestone tasks", "新建里程碑", "更新里程碑", "删除里程碑", "查看里程碑", "milestone summary", "milestone retro", "summarize milestone", "里程碑总结", "里程碑复盘", "milestone add", "milestone remove", "add tasks to milestone", "remove tasks from milestone", "batch milestone", "bulk milestone", "挂任务到里程碑", "批量挂里程碑", "从里程碑移除任务", "auth login", "log in", "login", "auth logout", "log out", "logout", "sign out", "switch account", "switch identity", "whoami", "who am I", "current identity", "current user", "current workspace", "登录", "登出", "切换账号", "当前身份", "create doc", "new doc", "new document", "write doc", "写文档", "新建文档", "update doc", "edit doc", "修改文档", "更新文档", "list docs", "my docs", "我的文档", "show doc", "view doc", "查看文档", "delete doc", "删除文档", "bind doc", "attach doc to task", "把文档关联到任务", "文档绑定到任务", "unbind doc", "解绑文档", "personal doc", "workspace doc", "个人文档", "workspace 文档", "doc scope", "tag", "add tag", "remove tag", "标签", "添加标签", "移除标签", "doc tag", "task tag", "share doc", "doc share", "share document", "分享文档", "文档分享", "unshare doc", "remove share", "取消分享", "share list", "list doc shares", "who has access", "viewer", "editor", "manager", "shared with", "doc tree", "doc move", "move doc", "reparent doc", "文档树", "移动文档", "sprint", "start sprint", "close sprint", "add to sprint", "active sprints", "冲刺", "迭代", "开始冲刺", "关闭冲刺", "create sprint", "new sprint", "list sprints", "show sprint", "update sprint", "delete sprint", "sprint summary", "sprint retro", "把任务挂到冲刺", "冲刺里有什么", "lumo update", "update cli", "upgrade lumo", "update lumo", "upgrade cli", "升级 lumo", "更新 cli", "new lumo version", "是否有新版本", "lumo setup", "install lumo skill", "install lumo hooks", "wire up lumo", "set up lumo", "onboard lumo", "npx @lumoai/cli", "安装 lumo", "配置 lumo", "lumo 初始化", "task artifact", "artifact add", "artifact list", "artifact show", "artifact rm", "artifact delete", "artifact update", "update artifact", "edit artifact", "change artifact kind", "change artifact source", "remove artifact", "delete artifact", "spec artifact", "record spec", "attach spec", "attach plan", "记录 spec", "挂 spec", "查看 artifact", "编辑 artifact", "修改 artifact", "删除 artifact", figma, attach figma, figma link, 关联 figma, 设计稿, figma design, "memory", "记忆", "remember", "record a memory", "记一条", "promote memory", "promote to project", "沉淀", "task memory", "project memory", "lumo memory", "retrieval", "取全文", "load full content", "拉全文", "task slack show", "看 thread", "看 slack thread", "show slack thread", "slack 全文", "task web show", "show web link body", "web 正文", "抓网页正文", "task figma context", "figma metadata", "figma 元数据", "figma 设计上下文", "task comments list", "list comments", "看评论", "评论流", "task pr show", "查看 PR", "show pr", "PR 详情", "pr metadata", "import google doc", "sync google doc", "google drive", "doc import-gdoc", "doc sync", "导入 google 文档", "同步 google 文档", "session wrap", "wrap up session", "收尾", "post progress", "把进度发出去", "progress comment", "进度评论".'
 ---
 
 ## Prerequisites
@@ -21,6 +21,16 @@ which lumo && lumo whoami
 
 Bootstraps Lumo into a coding-agent installation. Copies the bundled `SKILL.md` into `<scope>/.claude/skills/lumo/` and idempotently merges 25 hook entries into `<scope>/.claude/settings.json`. Existing user permissions and non-Lumo hook entries are preserved.
 
+On `--project` scope, setup also installs a `prepare-commit-msg` git hook that
+auto-appends the branch's task ID (`[LUM-N]`, parsed from a `lumo/LUM-N-...`
+branch name) to any commit subject that lacks it. The hook is pure sh + git
+(no network, no `lumo` call) and is merged idempotently between
+`# >>> lumo prepare-commit-msg >>>` / `# <<< lumo <<<` markers, preserving any
+existing hook content. When `core.hooksPath` is set (husky or a custom hooks
+dir), setup does **not** write the file — it prints the block plus instructions
+to add it manually (e.g. to `.husky/prepare-commit-msg`). `--user` scope does
+not touch git hooks.
+
 `--agent <token>` records which coding agent these hooks run under and is **baked into every hook command** (`lumo hook <slug> --agent <token>`). Each hook then sends the agent to the server, where it's stored on the Session and inherited by auto-sedimented memories — so a memory is attributed to the agent that produced it instead of the default. Valid tokens: `claude-code | codex | cursor | gemini-cli | github-copilot | windsurf` (case-insensitive; `gemini` and `copilot` are accepted aliases). **Defaults to `claude-code`.** Re-running setup with a different `--agent` rewrites the token in place (no duplicate hook entries), and a legacy flagless entry is upgraded on the next run.
 
 ```bash
@@ -333,7 +343,7 @@ Task LUM-48 has no sprint binding   # noop (already unbound)
 
 The CLI does **not** currently update due date or parent task. Those need to be edited in the web UI.
 
-Milestone updates (`--milestone`) and sprint binding (`--sprint`) both work. Full milestone CRUD is available via `lumo milestone create / show / update / delete` (see below). Full sprint CRUD is available via `lumo sprint create / show / update / delete / start / close / add / remove` (see below).
+Milestone updates (`--milestone`) and sprint binding (`--sprint`) both work. Full milestone CRUD is available via `lumo milestone create / show / update / delete`, and tasks can be bound/unbound in bulk via `lumo milestone add / remove <identifier> <task...>` (see below). Full sprint CRUD is available via `lumo sprint create / show / update / delete / start / close / add / remove` (see below).
 
 ### `lumo task list [flags]` — list tasks assigned to you
 
@@ -585,6 +595,67 @@ Requires `--yes`. No interactive prompt — CLI is agent-friendly. Tasks under t
 lumo milestone delete "Q3 Launch" --yes
 ```
 
+### `lumo milestone add <identifier> <task...>` — bind tasks to a milestone (batch)
+
+Binds **one or more** tasks to a milestone in a single call — the batch counterpart of `task update --milestone <ref>` (which only takes one task at a time). `<identifier>` accepts a milestone name or UUID; each `<task>` accepts `LUM-N` or a task UUID. `--project <ref>` is required when the identifier is a name and the workspace has >1 project.
+
+Task refs are deduped (case-insensitive, order preserved). Each task is PATCHed independently — **partial failures do not roll back**: a task that fails (e.g. not found, or its project has no milestone of that name) is reported on its own line while the rest still bind. Exit code is non-zero if **any** task failed.
+
+```bash
+lumo milestone add "Q3 Launch" LUM-1 LUM-2 LUM-3
+lumo milestone add 11111111-2222-3333-4444-555555555555 LUM-1 LUM-2
+```
+
+Output — a tally header (zero categories omitted) plus one line per task:
+
+```
+Q3 Launch: 2 added, 1 failed
+  ✓ LUM-1
+  ✓ LUM-2
+  ✗ LUM-3  no milestone matches "Q3 Launch" in this project. Try `lumo milestone list`.
+```
+
+### `lumo milestone remove <identifier> <task...>` — unbind tasks from a milestone (batch)
+
+Unbinds **one or more** tasks from a milestone in one call. A task that is **not currently in this milestone is skipped** (idempotent) — it is never reassigned away from a different milestone. `<identifier>` accepts a name or UUID; each `<task>` accepts `LUM-N` or a task UUID. `--project <ref>` is required when the identifier is a name and the workspace has >1 project.
+
+```bash
+lumo milestone remove "Q3 Launch" LUM-1 LUM-5
+```
+
+Output — `✓` removed, `-` skipped (not in milestone), `✗` failed:
+
+```
+Q3 Launch: 1 removed, 1 skipped
+  ✓ LUM-1
+  - LUM-5  not in this milestone
+```
+
+### When to suggest `milestone add` / `milestone remove`
+
+- The user wants to attach/detach **several** tasks to a milestone at once ("挂这几个任务到 Q3", "把 LUM-1 LUM-2 LUM-3 都放进里程碑", "remove these from the milestone"). For a single task, `task update --milestone <ref>` (or `--milestone ""` to clear) is equally fine.
+- `remove` only clears the binding for tasks actually in the named milestone, so it's safe to pass a broad list — anything not in it is reported as skipped, not clobbered.
+- For one-at-a-time sprint binding see `lumo sprint add / remove` (sprint batch is not yet supported).
+
+### `lumo milestone summary <identifier> [--retry]` — fetch AI-generated milestone retro
+
+Prints the AI-generated retrospective summary for a milestone (mirrors `sprint summary`). `<identifier>` accepts a milestone name or UUID; `--project <ref>` is required when the identifier is a name and the workspace has more than one project. When no summary exists yet the command prints `(no summary generated yet)`.
+
+A summary is generated automatically when a milestone transitions to `COMPLETED` (e.g. via `lumo milestone update <id> --status completed`). The generated report has sections `## Summary`, `## Delivered`, `## Outstanding` plus a one-line `tldr`. Use `--retry` to queue regeneration (e.g. after a failed generation) before fetching — regeneration is async, so the printed result may still be the previous summary or `(no summary generated yet)`.
+
+| Flag              | Type    | Notes                                                            |
+| ----------------- | ------- | ---------------------------------------------------------------- |
+| `--project <ref>` | string  | Project name or slug. Required when identifier is a name and the workspace has >1 project. |
+| `--retry`         | boolean | Queue a regeneration (async, server returns 202) before fetching. Only valid on a COMPLETED milestone. |
+
+```bash
+lumo milestone summary "Q3 Launch"
+lumo milestone summary "Q3 Launch" --retry
+lumo milestone summary 11111111-2222-3333-4444-555555555555
+```
+
+When to suggest: user asks "summarize the milestone", "milestone retro", "give me a summary of the Q3 milestone", "里程碑总结", "里程碑复盘".
+
 ## Document Management
 
 ### `lumo doc create [title] [flags]` — create a new document

package/dist/cli/src/commands/milestone-add.js

@@ -0,0 +1,81 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.milestoneAdd = milestoneAdd;
+const config_1 = require("../lib/config");
+const api_1 = require("../lib/api");
+const resolve_1 = require("../lib/resolve");
+const milestone_batch_1 = require("../lib/milestone-batch");
+/**
+ * Look up the milestone's canonical name. `resolveMilestoneId` already
+ * returns the name when the identifier is a name; for a UUID it returns an
+ * empty name, so we GET the milestone to fill it in.
+ */
+async function resolveMilestoneName(base, token, id, knownName) {
+    if (knownName)
+        return knownName;
+    const res = await fetch(`${base}/api/milestones/${id}`, {
+        headers: { Authorization: `Bearer ${token}` },
+    });
+    if (!res.ok) {
+        throw new Error(`milestone ${id} not found (HTTP ${res.status})`);
+    }
+    const { milestone } = (await res.json());
+    return milestone.name;
+}
+async function milestoneAdd(identifier, tasks, opts) {
+    const refs = (0, milestone_batch_1.dedupeTaskRefs)(tasks);
+    if (refs.length === 0) {
+        console.error('Error: provide at least one task (e.g. `LUM-1 LUM-2`).');
+        return 1;
+    }
+    const creds = (0, config_1.readCredentials)();
+    if (!creds) {
+        console.error('Error: not logged in. Run `lumo auth login` first.');
+        return 1;
+    }
+    const apiUrl = (0, api_1.resolveAuthedApiUrl)(creds.apiUrl);
+    const base = (0, api_1.trimTrailingSlash)(apiUrl);
+    let milestoneName;
+    try {
+        const resolved = await (0, resolve_1.resolveMilestoneId)(base, creds.token, identifier, opts.project);
+        milestoneName = await resolveMilestoneName(base, creds.token, resolved.id, resolved.name);
+    }
+    catch (err) {
+        console.error(`Error: ${err instanceof Error ? err.message : String(err)}`);
+        return 1;
+    }
+    const outcomes = [];
+    for (const ref of refs) {
+        try {
+            const res = await fetch(`${base}/api/tasks/by-identifier/${encodeURIComponent(ref)}`, {
+                method: 'PATCH',
+                headers: {
+                    Authorization: `Bearer ${creds.token}`,
+                    'Content-Type': 'application/json',
+                },
+                body: JSON.stringify({ milestoneRef: milestoneName }),
+            });
+            if (res.ok) {
+                outcomes.push({ task: ref, status: 'ok' });
+            }
+            else {
+                let msg = `add failed (HTTP ${res.status})`;
+                try {
+                    const body = (await res.json());
+                    if (body.error)
+                        msg = body.error;
+                }
+                catch {
+                    // non-JSON body; keep the status-only message
+                }
+                outcomes.push({ task: ref, status: 'fail', detail: msg });
+            }
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            outcomes.push({ task: ref, status: 'fail', detail: msg });
+        }
+    }
+    process.stdout.write((0, milestone_batch_1.formatBatchSummary)({ milestoneName, verb: 'added', outcomes }) + '\n');
+    return outcomes.some(o => o.status === 'fail') ? 1 : undefined;
+}

package/dist/cli/src/commands/milestone-remove.js

@@ -0,0 +1,94 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.milestoneRemove = milestoneRemove;
+const config_1 = require("../lib/config");
+const api_1 = require("../lib/api");
+const resolve_1 = require("../lib/resolve");
+const milestone_batch_1 = require("../lib/milestone-batch");
+/** GET the milestone's canonical name; needed only when a UUID was passed. */
+async function resolveMilestoneName(base, token, id, knownName) {
+    if (knownName)
+        return knownName;
+    const res = await fetch(`${base}/api/milestones/${id}`, {
+        headers: { Authorization: `Bearer ${token}` },
+    });
+    if (!res.ok) {
+        throw new Error(`milestone ${id} not found (HTTP ${res.status})`);
+    }
+    const { milestone } = (await res.json());
+    return milestone.name;
+}
+async function milestoneRemove(identifier, tasks, opts) {
+    const refs = (0, milestone_batch_1.dedupeTaskRefs)(tasks);
+    if (refs.length === 0) {
+        console.error('Error: provide at least one task (e.g. `LUM-1 LUM-2`).');
+        return 1;
+    }
+    const creds = (0, config_1.readCredentials)();
+    if (!creds) {
+        console.error('Error: not logged in. Run `lumo auth login` first.');
+        return 1;
+    }
+    const apiUrl = (0, api_1.resolveAuthedApiUrl)(creds.apiUrl);
+    const base = (0, api_1.trimTrailingSlash)(apiUrl);
+    let milestoneId;
+    let milestoneName;
+    let milestoneTasks;
+    try {
+        const resolved = await (0, resolve_1.resolveMilestoneId)(base, creds.token, identifier, opts.project);
+        milestoneId = resolved.id;
+        milestoneName = await resolveMilestoneName(base, creds.token, resolved.id, resolved.name);
+        const tasksRes = await fetch(`${base}/api/milestones/${milestoneId}/tasks`, { headers: { Authorization: `Bearer ${creds.token}` } });
+        if (!tasksRes.ok) {
+            throw new Error(`milestone tasks fetch failed (HTTP ${tasksRes.status})`);
+        }
+        const body = (await tasksRes.json());
+        milestoneTasks = body.tasks;
+    }
+    catch (err) {
+        console.error(`Error: ${err instanceof Error ? err.message : String(err)}`);
+        return 1;
+    }
+    const { present, absent } = (0, milestone_batch_1.partitionMembership)(refs, milestoneTasks);
+    const outcomes = [];
+    for (const ref of present) {
+        try {
+            const res = await fetch(`${base}/api/tasks/by-identifier/${encodeURIComponent(ref)}`, {
+                method: 'PATCH',
+                headers: {
+                    Authorization: `Bearer ${creds.token}`,
+                    'Content-Type': 'application/json',
+                },
+                body: JSON.stringify({ milestoneRef: null }),
+            });
+            if (res.ok) {
+                outcomes.push({ task: ref, status: 'ok' });
+            }
+            else {
+                let msg = `remove failed (HTTP ${res.status})`;
+                try {
+                    const errBody = (await res.json());
+                    if (errBody.error)
+                        msg = errBody.error;
+                }
+                catch {
+                    // non-JSON body; keep the status-only message
+                }
+                outcomes.push({ task: ref, status: 'fail', detail: msg });
+            }
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            outcomes.push({ task: ref, status: 'fail', detail: msg });
+        }
+    }
+    for (const ref of absent) {
+        outcomes.push({
+            task: ref,
+            status: 'skip',
+            detail: 'not in this milestone',
+        });
+    }
+    process.stdout.write((0, milestone_batch_1.formatBatchSummary)({ milestoneName, verb: 'removed', outcomes }) + '\n');
+    return outcomes.some(o => o.status === 'fail') ? 1 : undefined;
+}

package/dist/cli/src/commands/milestone-summary.js

@@ -0,0 +1,139 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.formatMilestoneSummary = formatMilestoneSummary;
+exports.milestoneSummary = milestoneSummary;
+const config_1 = require("../lib/config");
+const api_1 = require("../lib/api");
+const resolve_1 = require("../lib/resolve");
+const sanitize_1 = require("../lib/sanitize");
+function formatMilestoneSummary(input) {
+    const { name, stats, tldr, report } = input;
+    const lines = [`Milestone: ${(0, sanitize_1.sanitizeField)(name)}`];
+    if (stats === null && tldr === null && report === null) {
+        lines.push('', '(no summary generated yet)');
+        return lines.join('\n');
+    }
+    if (stats !== null) {
+        lines.push(`Done:      ${stats.done} / ${stats.total}`);
+    }
+    if (tldr) {
+        lines.push('', (0, sanitize_1.sanitizeField)(tldr));
+    }
+    if (report) {
+        lines.push('', (0, sanitize_1.sanitizeField)(report));
+    }
+    return lines.join('\n');
+}
+async function milestoneSummary(identifier, opts) {
+    const creds = (0, config_1.readCredentials)();
+    if (!creds) {
+        console.error('Error: not logged in. Run `lumo auth login` first.');
+        return 1;
+    }
+    const apiUrl = (0, api_1.resolveAuthedApiUrl)(creds.apiUrl);
+    const base = (0, api_1.trimTrailingSlash)(apiUrl);
+    let resolved;
+    try {
+        resolved = await (0, resolve_1.resolveMilestoneId)(base, creds.token, identifier, opts.project);
+    }
+    catch (err) {
+        console.error(`Error: ${err instanceof Error ? err.message : String(err)}`);
+        return 1;
+    }
+    // Fill in name if identifier was a UUID (resolveMilestoneId returns '' then).
+    let displayName = resolved.name;
+    if (!displayName) {
+        const r = await fetch(`${base}/api/milestones/${resolved.id}`, {
+            headers: { Authorization: `Bearer ${creds.token}` },
+        });
+        if (r.ok) {
+            const { milestone } = (await r.json());
+            displayName = milestone.name;
+        }
+    }
+    // Optional retry: POST to /summary/retry first. Expect 202 (queued).
+    if (opts.retry) {
+        let retryRes;
+        try {
+            retryRes = await fetch(`${base}/api/milestones/${resolved.id}/summary/retry`, {
+                method: 'POST',
+                headers: { Authorization: `Bearer ${creds.token}` },
+            });
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            console.error(`Error: could not reach Lumo API at ${apiUrl} (${msg})`);
+            return 1;
+        }
+        if (retryRes.status === 401) {
+            console.error('Error: API key invalid or revoked. Run `lumo auth login`.');
+            return 1;
+        }
+        if (!retryRes.ok && retryRes.status !== 202) {
+            let errMsg = `summary retry failed (HTTP ${retryRes.status})`;
+            try {
+                const errBody = (await retryRes.json());
+                if (errBody.error)
+                    errMsg = errBody.error;
+            }
+            catch {
+                // ignore
+            }
+            console.error(`Error: ${(0, sanitize_1.sanitizeField)(errMsg)}`);
+            return 1;
+        }
+        // 202 means queued; regeneration is async. The GET below may still return
+        // the old summary or 404 — warn the user.
+        console.error('Note: summary regeneration queued. Result below may still be the previous summary.');
+    }
+    // GET /api/milestones/<id>/summary — returns MilestoneSummary row or 404.
+    let summaryRes;
+    try {
+        summaryRes = await fetch(`${base}/api/milestones/${resolved.id}/summary`, {
+            headers: { Authorization: `Bearer ${creds.token}` },
+        });
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`Error: could not reach Lumo API at ${apiUrl} (${msg})`);
+        return 1;
+    }
+    if (summaryRes.status === 401) {
+        console.error('Error: API key invalid or revoked. Run `lumo auth login`.');
+        return 1;
+    }
+    let stats = null;
+    let tldr = null;
+    let report = null;
+    if (summaryRes.ok) {
+        const body = (await summaryRes.json());
+        if (body.stats) {
+            stats = {
+                done: body.stats.done ?? 0,
+                total: body.stats.totalTasks ?? 0,
+            };
+        }
+        tldr = body.tldr ?? null;
+        report = body.report ?? null;
+    }
+    else if (summaryRes.status !== 404) {
+        let errMsg = `milestone summary failed (HTTP ${summaryRes.status})`;
+        try {
+            const errBody = (await summaryRes.json());
+            if (errBody.error)
+                errMsg = errBody.error;
+        }
+        catch {
+            // ignore
+        }
+        console.error(`Error: ${(0, sanitize_1.sanitizeField)(errMsg)}`);
+        return 1;
+    }
+    // 404 → fall through with all-null; formatMilestoneSummary renders the marker.
+    process.stdout.write(formatMilestoneSummary({
+        name: displayName,
+        stats,
+        tldr,
+        report,
+    }) + '\n');
+}

package/dist/cli/src/commands/setup.js

@@ -35,11 +35,13 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.resolveAgentToken = resolveAgentToken;
 exports.setup = setup;
+exports.installGitHook = installGitHook;
 const fs = __importStar(require("fs"));
 const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 const child_process_1 = require("child_process");
 const hooks_template_1 = require("../lib/hooks-template");
+const git_hook_template_1 = require("../lib/git-hook-template");
 const line_prompt_1 = require("../lib/line-prompt");
 const agent_1 = require("../lib/agent");
 const config_1 = require("../lib/config");
@@ -78,6 +80,9 @@ async function setup(options) {
     process.stdout.write(`\nInstalling Lumo for ${scope} scope: ${claudeDir}\n\n`);
     installSkill(claudeDir, options.force === true);
     mergeSettings(claudeDir, agentResult.token);
+    if (scope === 'project') {
+        installGitHook(root);
+    }
     printPostInstall();
     return 0;
 }
@@ -151,6 +156,64 @@ function mergeSettings(claudeDir, agentToken) {
         process.stdout.write(`✓ merged hooks into ${settingsPath} (agent=${agentToken}; added ${stats.addedEvents.length}, updated ${stats.updatedEvents.length}, kept ${stats.alreadyPresent.length})\n`);
     }
 }
+function gitCapture(cwd, args) {
+    const res = (0, child_process_1.spawnSync)('git', args, { cwd, encoding: 'utf8' });
+    if (res.error || res.status !== 0)
+        return null;
+    return res.stdout.trim();
+}
+function installGitHook(projectRoot) {
+    if (gitCapture(projectRoot, ['rev-parse', '--is-inside-work-tree']) !== 'true') {
+        process.stdout.write('⚠ Not a git repository (or git unavailable) — skipped prepare-commit-msg hook.\n');
+        return;
+    }
+    const coreHooksPath = gitCapture(projectRoot, ['config', 'core.hooksPath']) || null;
+    if ((0, git_hook_template_1.resolveHookInstall)(coreHooksPath).mode === 'degrade') {
+        printGitHookManualInstructions(coreHooksPath);
+        return;
+    }
+    const hooksDirRaw = gitCapture(projectRoot, ['rev-parse', '--git-path', 'hooks']);
+    if (!hooksDirRaw) {
+        process.stdout.write('⚠ could not resolve git hooks dir — skipped prepare-commit-msg hook.\n');
+        return;
+    }
+    const absHooksDir = path.isAbsolute(hooksDirRaw)
+        ? hooksDirRaw
+        : path.join(projectRoot, hooksDirRaw);
+    const hookPath = path.join(absHooksDir, 'prepare-commit-msg');
+    const existing = fs.existsSync(hookPath)
+        ? fs.readFileSync(hookPath, 'utf8')
+        : null;
+    const { content, status } = (0, git_hook_template_1.mergeGitHook)(existing);
+    if (status === 'unchanged') {
+        process.stdout.write(`✓ prepare-commit-msg hook already up to date: ${hookPath}\n`);
+        return;
+    }
+    try {
+        fs.mkdirSync(absHooksDir, { recursive: true });
+        fs.writeFileSync(hookPath, content);
+        fs.chmodSync(hookPath, 0o755);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        process.stdout.write(`⚠ could not write prepare-commit-msg hook: ${msg}\n`);
+        return;
+    }
+    const verb = status === 'created'
+        ? 'wrote'
+        : status === 'appended'
+            ? 'appended to'
+            : 'updated';
+    process.stdout.write(`✓ ${verb} prepare-commit-msg hook: ${hookPath}\n`);
+}
+function printGitHookManualInstructions(coreHooksPath) {
+    process.stdout.write(`\n⚠ core.hooksPath is set to "${coreHooksPath}" (husky or a custom hooks dir).\n` +
+        `  Skipped auto-install to avoid clobbering it. To auto-tag commits with\n` +
+        `  [LUM-N], add this block to your prepare-commit-msg hook\n` +
+        `  (e.g. .husky/prepare-commit-msg), then make it executable:\n\n` +
+        git_hook_template_1.HOOK_SCRIPT_BLOCK +
+        `\n\n`);
+}
 function printPostInstall() {
     const onPath = isLumoOnPath();
     const credsPath = path.join((0, config_1.configDir)(), 'credentials.json');

package/dist/cli/src/index.js

@@ -78,6 +78,9 @@ const milestone_create_1 = require("./commands/milestone-create");
 const milestone_show_1 = require("./commands/milestone-show");
 const milestone_update_1 = require("./commands/milestone-update");
 const milestone_delete_1 = require("./commands/milestone-delete");
+const milestone_add_1 = require("./commands/milestone-add");
+const milestone_remove_1 = require("./commands/milestone-remove");
+const milestone_summary_1 = require("./commands/milestone-summary");
 const sprint_create_1 = require("./commands/sprint-create");
 const sprint_list_1 = require("./commands/sprint-list");
 const sprint_show_1 = require("./commands/sprint-show");
@@ -434,6 +437,22 @@ milestoneCmd
     .option('--project <ref>', 'Project name or slug (when identifier is a name)')
     .option('--yes', 'Required: confirm deletion without TTY prompt')
     .action(wrap((identifier, options) => (0, milestone_delete_1.milestoneDelete)(identifier, options)));
+milestoneCmd
+    .command('add <identifier> <tasks...>')
+    .description('Bind one or more tasks to a milestone in one call. <identifier> accepts a name or UUID; each <task> accepts LUM-N or UUID. Per-task result with a tally; partial failures do not roll back.')
+    .option('--project <ref>', 'Project name or slug (when identifier is a name)')
+    .action(wrap((identifier, tasks, options) => (0, milestone_add_1.milestoneAdd)(identifier, tasks, options)));
+milestoneCmd
+    .command('remove <identifier> <tasks...>')
+    .description('Unbind one or more tasks from a milestone in one call. Tasks not currently in the milestone are skipped (idempotent), never reassigned. <identifier> accepts a name or UUID; each <task> accepts LUM-N or UUID.')
+    .option('--project <ref>', 'Project name or slug (when identifier is a name)')
+    .action(wrap((identifier, tasks, options) => (0, milestone_remove_1.milestoneRemove)(identifier, tasks, options)));
+milestoneCmd
+    .command('summary <identifier>')
+    .description('Show the AI-generated summary for a milestone. Identifier accepts a milestone name or UUID. Prints "(no summary generated yet)" when none exists. Use --retry to queue regeneration before fetching.')
+    .option('--project <ref>', 'Project name or slug (when identifier is a name)')
+    .option('--retry', 'Trigger summary regeneration before fetching')
+    .action(wrap((identifier, options) => (0, milestone_summary_1.milestoneSummary)(identifier, options)));
 const sprintCmd = program
     .command('sprint')
     .description('Inspect sprints from the terminal');

package/dist/cli/src/lib/git-hook-template.js

@@ -0,0 +1,75 @@
+"use strict";
+// Idempotent install + content management for the Lumo `prepare-commit-msg`
+// git hook. The hook block itself is pure POSIX sh + git — it extracts the
+// `LUM-N` tag from the current branch name and appends it to the commit
+// subject, with NO dependency on the `lumo` binary or any network call.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HOOK_SCRIPT_BLOCK = exports.LUMO_HOOK_END = exports.LUMO_HOOK_BEGIN = void 0;
+exports.mergeGitHook = mergeGitHook;
+exports.resolveHookInstall = resolveHookInstall;
+/** Markers delimiting the Lumo-managed block inside a prepare-commit-msg file. */
+exports.LUMO_HOOK_BEGIN = '# >>> lumo prepare-commit-msg >>>';
+exports.LUMO_HOOK_END = '# <<< lumo <<<';
+const SHEBANG = '#!/bin/sh';
+// The managed block. `$1` = commit-message file, `$2` = message source
+// (message|template|merge|squash|commit). awk is POSIX-required and present
+// wherever git runs. The grep guard makes the hook a no-op when the message
+// already carries any [LUM-x] tag.
+exports.HOOK_SCRIPT_BLOCK = `${exports.LUMO_HOOK_BEGIN}
+# Auto-append the branch's task ID ([LUM-N]) to the commit subject when absent.
+# Managed by \`lumo setup\` — edit between the markers at your own risk.
+case "$2" in
+  merge|squash) exit 0 ;;
+esac
+lumo_branch=$(git symbolic-ref --short HEAD 2>/dev/null) || exit 0
+lumo_id=$(printf '%s' "$lumo_branch" | grep -oE 'LUM-[0-9]+' | head -n1)
+[ -z "$lumo_id" ] && exit 0
+# Skip if the message already references any [LUM-x] anywhere (subject OR body)
+# — avoids double-tagging when a body line already cites the task.
+grep -qE '\\[LUM-[0-9]+\\]' "$1" && exit 0
+lumo_tmp="$1.lumo.tmp"
+awk -v id="$lumo_id" '
+  !done && $0 !~ /^#/ && $0 !~ /^[[:space:]]*$/ { $0 = $0 " [" id "]"; done = 1 }
+  { print }
+' "$1" > "$lumo_tmp" && mv "$lumo_tmp" "$1"
+${exports.LUMO_HOOK_END}`;
+/**
+ * Idempotently fold the Lumo block into an existing prepare-commit-msg file.
+ * - null/blank existing      → fresh file with shebang + block ('created')
+ * - existing has our markers  → replace block in place ('updated' / 'unchanged')
+ * - existing foreign content  → preserve it, append our block ('appended')
+ */
+function mergeGitHook(existing) {
+    if (existing === null || existing.trim() === '') {
+        return { content: `${SHEBANG}\n${exports.HOOK_SCRIPT_BLOCK}\n`, status: 'created' };
+    }
+    const beginIdx = existing.indexOf(exports.LUMO_HOOK_BEGIN);
+    if (beginIdx !== -1) {
+        const endIdx = existing.indexOf(exports.LUMO_HOOK_END, beginIdx);
+        if (endIdx !== -1) {
+            const before = existing.slice(0, beginIdx);
+            const after = existing.slice(endIdx + exports.LUMO_HOOK_END.length);
+            const content = before + exports.HOOK_SCRIPT_BLOCK + after;
+            return {
+                content,
+                status: content === existing ? 'unchanged' : 'updated',
+            };
+        }
+        // BEGIN without END: corrupt block — fall through and append a clean one.
+    }
+    const sep = existing.endsWith('\n') ? '\n' : '\n\n';
+    return {
+        content: `${existing}${sep}${exports.HOOK_SCRIPT_BLOCK}\n`,
+        status: 'appended',
+    };
+}
+/**
+ * Decide whether `lumo setup` can write the hook directly. When
+ * `core.hooksPath` is set (husky or a custom dir), writing into it risks being
+ * clobbered or landing where git won't run it — so we degrade to instructions.
+ */
+function resolveHookInstall(coreHooksPath) {
+    if (coreHooksPath && coreHooksPath.trim() !== '')
+        return { mode: 'degrade' };
+    return { mode: 'install' };
+}

package/dist/cli/src/lib/milestone-batch.js

@@ -0,0 +1,76 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.dedupeTaskRefs = dedupeTaskRefs;
+exports.partitionMembership = partitionMembership;
+exports.formatBatchSummary = formatBatchSummary;
+const sanitize_1 = require("./sanitize");
+/**
+ * Trim, drop empties, and dedupe task refs case-insensitively while
+ * preserving input order and the first original spelling of each ref.
+ */
+function dedupeTaskRefs(refs) {
+    const seen = new Set();
+    const out = [];
+    for (const raw of refs) {
+        const trimmed = raw.trim();
+        if (!trimmed)
+            continue;
+        const key = trimmed.toLowerCase();
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        out.push(trimmed);
+    }
+    return out;
+}
+/**
+ * Split requested task refs into those currently bound to the milestone
+ * (`present`) and those that are not (`absent`). A ref matches either the
+ * `<teamIdentifier>-<number>` identifier (case-insensitive) or the task id.
+ */
+function partitionMembership(requested, milestoneTasks) {
+    const keys = new Set();
+    for (const t of milestoneTasks) {
+        keys.add(`${t.teamIdentifier}-${t.number}`.toUpperCase());
+        keys.add(t.id.toLowerCase());
+    }
+    const present = [];
+    const absent = [];
+    for (const ref of requested) {
+        const isMember = keys.has(ref.toUpperCase()) || keys.has(ref.toLowerCase());
+        if (isMember)
+            present.push(ref);
+        else
+            absent.push(ref);
+    }
+    return { present, absent };
+}
+const STATUS_GLYPH = {
+    ok: '✓',
+    skip: '-',
+    fail: '✗',
+};
+/**
+ * Render the batch result: a one-line tally header (omitting zero
+ * categories) followed by one line per task. Server-derived text (milestone
+ * name, failure detail) is sanitized to block ANSI injection.
+ */
+function formatBatchSummary(args) {
+    const { verb, outcomes } = args;
+    const name = (0, sanitize_1.sanitizeField)(args.milestoneName);
+    const okCount = outcomes.filter(o => o.status === 'ok').length;
+    const skipCount = outcomes.filter(o => o.status === 'skip').length;
+    const failCount = outcomes.filter(o => o.status === 'fail').length;
+    const parts = [`${okCount} ${verb}`];
+    if (skipCount > 0)
+        parts.push(`${skipCount} skipped`);
+    if (failCount > 0)
+        parts.push(`${failCount} failed`);
+    const lines = [`${name}: ${parts.join(', ')}`];
+    for (const o of outcomes) {
+        const glyph = STATUS_GLYPH[o.status];
+        const detail = o.detail ? `  ${(0, sanitize_1.sanitizeField)(o.detail)}` : '';
+        lines.push(`  ${glyph} ${o.task}${detail}`);
+    }
+    return lines.join('\n');
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumoai/cli",
-  "version": "1.9.0",
+  "version": "1.10.0",
   "description": "Lumo CLI — manage tasks and sessions from the terminal",
   "license": "MIT",
   "author": "cli@uselumo.ai",