@lumoai/cli 1.9.0 → 1.11.0

package/assets/skill.md

@@ -1,6 +1,6 @@
 ---
 name: lumo
-description: 'Use the Lumo CLI to load task context, manage session bindings, inspect projects and milestones, and create/update/list/show/comment on tasks from the terminal. Activate when: user mentions a Lumo task identifier (LUM-42, LUM-12, etc.), asks to load task background or context, wants to bind, check, or detach a Claude Code session''s task binding, is about to start development work on a specific task, wants to create a new task, list their tasks, view a task, comment on a task, list projects, list milestones, attach a task to a milestone, or update a task''s status/title/description/priority/assignee/milestone. Triggers on: "LUM-", "task context", "load context", "session start", "session attach", "session status", "session detach", "bind session", "unbind session", "which task", "what task am I on", "work on LUM", "create task", "new task", "add task", "file a task", "log a task", "list tasks", "my tasks", "show task", "view task", "comment on task", "leave a comment", "list projects", "what projects", "update task", "change task status", "rename task", "reassign task", "mark task as done", "milestone", "里程碑", "list milestones", "set milestone", "挂到 milestone", "attach milestone", "unbind milestone", "create milestone", "new milestone", "update milestone", "change milestone status", "delete milestone", "show milestone", "view milestone", "tasks in milestone", "milestone tasks", "新建里程碑", "更新里程碑", "删除里程碑", "查看里程碑", "auth login", "log in", "login", "auth logout", "log out", "logout", "sign out", "switch account", "switch identity", "whoami", "who am I", "current identity", "current user", "current workspace", "登录", "登出", "切换账号", "当前身份", "create doc", "new doc", "new document", "write doc", "写文档", "新建文档", "update doc", "edit doc", "修改文档", "更新文档", "list docs", "my docs", "我的文档", "show doc", "view doc", "查看文档", "delete doc", "删除文档", "bind doc", "attach doc to task", "把文档关联到任务", "文档绑定到任务", "unbind doc", "解绑文档", "personal doc", "workspace doc", "个人文档", "workspace 文档", "doc scope", "tag", "add tag", "remove tag", "标签", "添加标签", "移除标签", "doc tag", "task tag", "share doc", "doc share", "share document", "分享文档", "文档分享", "unshare doc", "remove share", "取消分享", "share list", "list doc shares", "who has access", "viewer", "editor", "manager", "shared with", "doc tree", "doc move", "move doc", "reparent doc", "文档树", "移动文档", "sprint", "start sprint", "close sprint", "add to sprint", "active sprints", "冲刺", "迭代", "开始冲刺", "关闭冲刺", "create sprint", "new sprint", "list sprints", "show sprint", "update sprint", "delete sprint", "sprint summary", "sprint retro", "把任务挂到冲刺", "冲刺里有什么", "lumo update", "update cli", "upgrade lumo", "update lumo", "upgrade cli", "升级 lumo", "更新 cli", "new lumo version", "是否有新版本", "lumo setup", "install lumo skill", "install lumo hooks", "wire up lumo", "set up lumo", "onboard lumo", "npx @lumoai/cli", "安装 lumo", "配置 lumo", "lumo 初始化", "task artifact", "artifact add", "artifact list", "artifact show", "artifact rm", "artifact delete", "artifact update", "update artifact", "edit artifact", "change artifact kind", "change artifact source", "remove artifact", "delete artifact", "spec artifact", "record spec", "attach spec", "attach plan", "记录 spec", "挂 spec", "查看 artifact", "编辑 artifact", "修改 artifact", "删除 artifact", figma, attach figma, figma link, 关联 figma, 设计稿, figma design, "memory", "记忆", "remember", "record a memory", "记一条", "promote memory", "promote to project", "沉淀", "task memory", "project memory", "lumo memory", "retrieval", "取全文", "load full content", "拉全文", "task slack show", "看 thread", "看 slack thread", "show slack thread", "slack 全文", "task web show", "show web link body", "web 正文", "抓网页正文", "task figma context", "figma metadata", "figma 元数据", "figma 设计上下文", "task comments list", "list comments", "看评论", "评论流", "task pr show", "查看 PR", "show pr", "PR 详情", "pr metadata", "import google doc", "sync google doc", "google drive", "doc import-gdoc", "doc sync", "导入 google 文档", "同步 google 文档", "session wrap", "wrap up session", "收尾", "post progress", "把进度发出去", "progress comment", "进度评论".'
+description: 'Use the Lumo CLI to load task context, manage session bindings, inspect projects and milestones, and create/update/list/show/comment on tasks from the terminal. Activate when: user mentions a Lumo task identifier (LUM-42, LUM-12, etc.), asks to load task background or context, wants to bind, check, or detach a Claude Code session''s task binding, is about to start development work on a specific task, wants to create a new task, list their tasks, view a task, comment on a task, list projects, list milestones, attach a task to a milestone, or update a task''s status/title/description/priority/assignee/milestone. Triggers on: "LUM-", "task context", "load context", "session start", "session attach", "session status", "session detach", "bind session", "unbind session", "which task", "what task am I on", "work on LUM", "create task", "new task", "add task", "file a task", "log a task", "list tasks", "my tasks", "show task", "view task", "comment on task", "leave a comment", "list projects", "what projects", "update task", "change task status", "rename task", "reassign task", "mark task as done", "milestone", "里程碑", "list milestones", "set milestone", "挂到 milestone", "attach milestone", "unbind milestone", "create milestone", "new milestone", "update milestone", "change milestone status", "delete milestone", "show milestone", "view milestone", "tasks in milestone", "milestone tasks", "新建里程碑", "更新里程碑", "删除里程碑", "查看里程碑", "milestone summary", "milestone retro", "summarize milestone", "里程碑总结", "里程碑复盘", "milestone add", "milestone remove", "add tasks to milestone", "remove tasks from milestone", "batch milestone", "bulk milestone", "挂任务到里程碑", "批量挂里程碑", "从里程碑移除任务", "auth login", "log in", "login", "auth logout", "log out", "logout", "sign out", "switch account", "switch identity", "whoami", "who am I", "current identity", "current user", "current workspace", "登录", "登出", "切换账号", "当前身份", "create doc", "new doc", "new document", "write doc", "写文档", "新建文档", "update doc", "edit doc", "修改文档", "更新文档", "list docs", "my docs", "我的文档", "show doc", "view doc", "查看文档", "delete doc", "删除文档", "bind doc", "attach doc to task", "把文档关联到任务", "文档绑定到任务", "unbind doc", "解绑文档", "personal doc", "workspace doc", "个人文档", "workspace 文档", "doc scope", "tag", "add tag", "remove tag", "标签", "添加标签", "移除标签", "doc tag", "task tag", "share doc", "doc share", "share document", "分享文档", "文档分享", "unshare doc", "remove share", "取消分享", "share list", "list doc shares", "who has access", "viewer", "editor", "manager", "shared with", "doc tree", "doc move", "move doc", "reparent doc", "文档树", "移动文档", "sprint", "start sprint", "close sprint", "add to sprint", "active sprints", "冲刺", "迭代", "开始冲刺", "关闭冲刺", "create sprint", "new sprint", "list sprints", "show sprint", "update sprint", "delete sprint", "sprint summary", "sprint retro", "把任务挂到冲刺", "冲刺里有什么", "lumo update", "update cli", "upgrade lumo", "update lumo", "upgrade cli", "升级 lumo", "更新 cli", "new lumo version", "是否有新版本", "lumo setup", "install lumo skill", "install lumo hooks", "wire up lumo", "set up lumo", "onboard lumo", "npx @lumoai/cli", "安装 lumo", "配置 lumo", "lumo 初始化", "task artifact", "artifact add", "artifact list", "artifact show", "artifact rm", "artifact delete", "artifact update", "update artifact", "edit artifact", "change artifact kind", "change artifact source", "remove artifact", "delete artifact", "spec artifact", "record spec", "attach spec", "attach plan", "记录 spec", "挂 spec", "查看 artifact", "编辑 artifact", "修改 artifact", "删除 artifact", figma, attach figma, figma link, 关联 figma, 设计稿, figma design, "memory", "记忆", "remember", "record a memory", "记一条", "promote memory", "promote to project", "沉淀", "task memory", "project memory", "lumo memory", "retrieval", "取全文", "load full content", "拉全文", "task slack show", "看 thread", "看 slack thread", "show slack thread", "slack 全文", "task web show", "show web link body", "web 正文", "抓网页正文", "task figma context", "figma metadata", "figma 元数据", "figma 设计上下文", "task comments list", "list comments", "看评论", "评论流", "task pr show", "查看 PR", "show pr", "PR 详情", "pr metadata", "import google doc", "sync google doc", "google drive", "doc import-gdoc", "doc sync", "导入 google 文档", "同步 google 文档", "session wrap", "wrap up session", "收尾", "post progress", "把进度发出去", "progress comment", "进度评论", "lumo next", "next task", "what''s next", "what should I work on", "recommend a task", "推荐下一个任务", "pick my next task".'
 ---
 
 ## Prerequisites
@@ -21,6 +21,16 @@ which lumo && lumo whoami
 
 Bootstraps Lumo into a coding-agent installation. Copies the bundled `SKILL.md` into `<scope>/.claude/skills/lumo/` and idempotently merges 25 hook entries into `<scope>/.claude/settings.json`. Existing user permissions and non-Lumo hook entries are preserved.
 
+On `--project` scope, setup also installs a `prepare-commit-msg` git hook that
+auto-appends the branch's task ID (`[LUM-N]`, parsed from a `lumo/LUM-N-...`
+branch name) to any commit subject that lacks it. The hook is pure sh + git
+(no network, no `lumo` call) and is merged idempotently between
+`# >>> lumo prepare-commit-msg >>>` / `# <<< lumo <<<` markers, preserving any
+existing hook content. When `core.hooksPath` is set (husky or a custom hooks
+dir), setup does **not** write the file — it prints the block plus instructions
+to add it manually (e.g. to `.husky/prepare-commit-msg`). `--user` scope does
+not touch git hooks.
+
 `--agent <token>` records which coding agent these hooks run under and is **baked into every hook command** (`lumo hook <slug> --agent <token>`). Each hook then sends the agent to the server, where it's stored on the Session and inherited by auto-sedimented memories — so a memory is attributed to the agent that produced it instead of the default. Valid tokens: `claude-code | codex | cursor | gemini-cli | github-copilot | windsurf` (case-insensitive; `gemini` and `copilot` are accepted aliases). **Defaults to `claude-code`.** Re-running setup with a different `--agent` rewrites the token in place (no duplicate hook entries), and a legacy flagless entry is upgraded on the next run.
 
 ```bash
@@ -333,7 +343,7 @@ Task LUM-48 has no sprint binding   # noop (already unbound)
 
 The CLI does **not** currently update due date or parent task. Those need to be edited in the web UI.
 
-Milestone updates (`--milestone`) and sprint binding (`--sprint`) both work. Full milestone CRUD is available via `lumo milestone create / show / update / delete` (see below). Full sprint CRUD is available via `lumo sprint create / show / update / delete / start / close / add / remove` (see below).
+Milestone updates (`--milestone`) and sprint binding (`--sprint`) both work. Full milestone CRUD is available via `lumo milestone create / show / update / delete`, and tasks can be bound/unbound in bulk via `lumo milestone add / remove <identifier> <task...>` (see below). Full sprint CRUD is available via `lumo sprint create / show / update / delete / start / close / add / remove` (see below).
 
 ### `lumo task list [flags]` — list tasks assigned to you
 
@@ -360,6 +370,44 @@ Filtering is currently client-side — the server returns the full "my tasks" se
 - The user asks "what am I working on", "what tasks do I have", "list my tasks", "show me my queue".
 - Before suggesting a status change ("mark something as done"), if no task ID is in context — run `task list` first to surface candidates.
 
+### `lumo next [--count <N>]` — recommend the next task to work on
+
+Ranks the tasks assigned to you and prints the top N (default 3), each with a
+one-line reason. Read-only — it does **not** bind or load context. Pick one from
+the list, then run `lumo session attach <LUM-N>` + `lumo task context <LUM-N>`.
+
+Ranking is lexicographic: **priority** (URGENT→LOW) first, then **active-sprint
+membership**, then **due date** (earlier first), then in-flight status
+(IN_PROGRESS / IN_REVIEW ahead of TODO). DONE tasks are excluded. The active
+sprint lookup is best-effort — if it fails the command still recommends, just
+without the sprint boost.
+
+| Flag | Type | Notes |
+| ---- | ---- | ----- |
+| `-n, --count <N>` | integer | How many tasks to recommend. Defaults to 3. Must be a positive integer. |
+
+```bash
+lumo next
+lumo next --count 1
+```
+
+Output:
+
+```
+Top 3 recommended tasks (of 12 open):
+
+1. LUM-42  IN_PROGRESS  URGENT  Fix Slack OAuth redirect
+     ↳ URGENT · active sprint · due 2026-06-03 (overdue) · in progress
+2. LUM-48  TODO         HIGH    Investigate slow query
+     ↳ HIGH · active sprint
+3. LUM-12  TODO         MEDIUM  Add rate limiting
+     ↳ MEDIUM · due 2026-06-10
+
+Next: lumo session attach LUM-42 && lumo task context LUM-42
+```
+
+When to suggest: the user asks "what should I work on", "what's next", "推荐下一个任务", "pick my next task", or starts a session without a task in mind. After they choose, run `session attach` + `task context` for the picked task.
+
 ### `lumo task show <identifier>` — print one task's detail
 
 Returns a key:value block for a single task — title, status, priority, project, assignee (with display name from Clerk), URL, and the full description below. Lighter than `task context` because it does not load prior session summaries or memory.
@@ -585,6 +633,67 @@ Requires `--yes`. No interactive prompt — CLI is agent-friendly. Tasks under t
 lumo milestone delete "Q3 Launch" --yes
 ```
 
+### `lumo milestone add <identifier> <task...>` — bind tasks to a milestone (batch)
+
+Binds **one or more** tasks to a milestone in a single call — the batch counterpart of `task update --milestone <ref>` (which only takes one task at a time). `<identifier>` accepts a milestone name or UUID; each `<task>` accepts `LUM-N` or a task UUID. `--project <ref>` is required when the identifier is a name and the workspace has >1 project.
+
+Task refs are deduped (case-insensitive, order preserved). Each task is PATCHed independently — **partial failures do not roll back**: a task that fails (e.g. not found, or its project has no milestone of that name) is reported on its own line while the rest still bind. Exit code is non-zero if **any** task failed.
+
+```bash
+lumo milestone add "Q3 Launch" LUM-1 LUM-2 LUM-3
+lumo milestone add 11111111-2222-3333-4444-555555555555 LUM-1 LUM-2
+```
+
+Output — a tally header (zero categories omitted) plus one line per task:
+
+```
+Q3 Launch: 2 added, 1 failed
+  ✓ LUM-1
+  ✓ LUM-2
+  ✗ LUM-3  no milestone matches "Q3 Launch" in this project. Try `lumo milestone list`.
+```
+
+### `lumo milestone remove <identifier> <task...>` — unbind tasks from a milestone (batch)
+
+Unbinds **one or more** tasks from a milestone in one call. A task that is **not currently in this milestone is skipped** (idempotent) — it is never reassigned away from a different milestone. `<identifier>` accepts a name or UUID; each `<task>` accepts `LUM-N` or a task UUID. `--project <ref>` is required when the identifier is a name and the workspace has >1 project.
+
+```bash
+lumo milestone remove "Q3 Launch" LUM-1 LUM-5
+```
+
+Output — `✓` removed, `-` skipped (not in milestone), `✗` failed:
+
+```
+Q3 Launch: 1 removed, 1 skipped
+  ✓ LUM-1
+  - LUM-5  not in this milestone
+```
+
+### When to suggest `milestone add` / `milestone remove`
+
+- The user wants to attach/detach **several** tasks to a milestone at once ("挂这几个任务到 Q3", "把 LUM-1 LUM-2 LUM-3 都放进里程碑", "remove these from the milestone"). For a single task, `task update --milestone <ref>` (or `--milestone ""` to clear) is equally fine.
+- `remove` only clears the binding for tasks actually in the named milestone, so it's safe to pass a broad list — anything not in it is reported as skipped, not clobbered.
+- For one-at-a-time sprint binding see `lumo sprint add / remove` (sprint batch is not yet supported).
+
+### `lumo milestone summary <identifier> [--retry]` — fetch AI-generated milestone retro
+
+Prints the AI-generated retrospective summary for a milestone (mirrors `sprint summary`). `<identifier>` accepts a milestone name or UUID; `--project <ref>` is required when the identifier is a name and the workspace has more than one project. When no summary exists yet the command prints `(no summary generated yet)`.
+
+A summary is generated automatically when a milestone transitions to `COMPLETED` (e.g. via `lumo milestone update <id> --status completed`). The generated report has sections `## Summary`, `## Delivered`, `## Outstanding` plus a one-line `tldr`. Use `--retry` to queue regeneration (e.g. after a failed generation) before fetching — regeneration is async, so the printed result may still be the previous summary or `(no summary generated yet)`.
+
+| Flag              | Type    | Notes                                                            |
+| ----------------- | ------- | ---------------------------------------------------------------- |
+| `--project <ref>` | string  | Project name or slug. Required when identifier is a name and the workspace has >1 project. |
+| `--retry`         | boolean | Queue a regeneration (async, server returns 202) before fetching. Only valid on a COMPLETED milestone. |
+
+```bash
+lumo milestone summary "Q3 Launch"
+lumo milestone summary "Q3 Launch" --retry
+lumo milestone summary 11111111-2222-3333-4444-555555555555
+```
+
+When to suggest: user asks "summarize the milestone", "milestone retro", "give me a summary of the Q3 milestone", "里程碑总结", "里程碑复盘".
+
 ## Document Management
 
 ### `lumo doc create [title] [flags]` — create a new document
@@ -1164,27 +1273,46 @@ lumo session detach
 
 When to suggest: the user wants to stop tagging the current session with the active task (e.g., switching to unrelated exploratory work without binding to a different task).
 
-### `lumo session wrap [--yes] [--dry-run]` — draft + post a progress comment at wrap-up
+### `lumo session wrap [--yes] [--dry-run]` — wrap-up panel: progress comment + memory review
 
-Session-end wrap-up panel. Reads back the current Claude Code session's per-turn
+Session-end wrap-up panel with **two sections, run in order**:
+
+**1. 进度评论** — reads back the current Claude Code session's per-turn
 `turnSummary` rows (the one-line Chinese summaries written each STOP), aggregates
 every turn **since the last progress comment** into one bulleted body, and — after
 a `[y] 发送 / [e] 编辑 / [s] 跳过` confirmation — posts it as a comment on the
 session's bound task. A server-side watermark (`Session.lastProgressCommentAt`)
 means re-running never re-posts the same turns.
 
+**2. 记忆审阅** — lists the Layer1 memories this session sedimented since the
+last review (deduped by a per-session watermark `Session.lastMemoryReviewAt`).
+Each new memory is shown as `[SCOPE] CATEGORY  headline`, numbered from 1. You
+curate with a single line: `d 1,3` deletes rows 1 and 3, `p 2` promotes row 2 to
+project scope, and they combine (`d 1,3 p 2`). **回车 (empty) keeps all**; `s`
+skips the section. Keeping all (回车 or `--yes`) still **advances the watermark**
+so the next wrap won't re-list reviewed memories; `s` leaves them for next time.
+Out-of-range indices are ignored. Deletes/promotes run server-side, scoped to
+memories this session created (you can't touch other sessions' memories through
+this panel). With no new memories the section prints "(无内容)" and does nothing.
+
 ```bash
-lumo session wrap            # interactive: preview draft, choose y / e / s
-lumo session wrap --yes      # post the drafted body without prompting (agent-friendly)
-lumo session wrap --dry-run  # print the draft only; never posts, never advances watermark
+lumo session wrap            # interactive: preview each section, choose per-section
+lumo session wrap --yes      # progress comment posted + memories all kept, no prompting (agent-friendly)
+lumo session wrap --dry-run  # print both drafts only; never posts, never mutates, never advances watermarks
 ```
 
 - Requires `$CLAUDE_CODE_SESSION_ID` (must run inside Claude Code) and a bound
   task (`lumo session attach <LUM-N>` first). With no bound task or no new turn
-  summaries, the panel prints "(无内容)" and posts nothing.
-- `[e] 编辑` opens `$EDITOR` (fallback vi/nano) on the drafted body; the edited
-  text is posted and the watermark still advances to the turns the draft covered.
-- Non-TTY without `--yes`: prints the draft and does **not** post (safe default).
+  summaries, the 进度评论 section prints "(无内容)" and posts nothing.
+- `[e] 编辑` (进度评论) opens `$EDITOR` (fallback vi/nano) on the drafted body;
+  the edited text is posted and the watermark still advances to the turns the
+  draft covered.
+- `--yes` applies to both sections: posts the progress comment AND keeps all
+  memories (no deletes/promotes) while advancing the memory-review watermark.
+- `--dry-run` prints both drafts; never posts, never mutates memories, never
+  advances either watermark.
+- Non-TTY without `--yes`: prints the drafts and does **not** post or mutate
+  (safe default).
 
 When to suggest: at the end of a working session on a bound task, to record what
 was done as a progress comment — offer `lumo session wrap` rather than composing

package/dist/cli/src/commands/milestone-add.js

@@ -0,0 +1,81 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.milestoneAdd = milestoneAdd;
+const config_1 = require("../lib/config");
+const api_1 = require("../lib/api");
+const resolve_1 = require("../lib/resolve");
+const milestone_batch_1 = require("../lib/milestone-batch");
+/**
+ * Look up the milestone's canonical name. `resolveMilestoneId` already
+ * returns the name when the identifier is a name; for a UUID it returns an
+ * empty name, so we GET the milestone to fill it in.
+ */
+async function resolveMilestoneName(base, token, id, knownName) {
+    if (knownName)
+        return knownName;
+    const res = await fetch(`${base}/api/milestones/${id}`, {
+        headers: { Authorization: `Bearer ${token}` },
+    });
+    if (!res.ok) {
+        throw new Error(`milestone ${id} not found (HTTP ${res.status})`);
+    }
+    const { milestone } = (await res.json());
+    return milestone.name;
+}
+async function milestoneAdd(identifier, tasks, opts) {
+    const refs = (0, milestone_batch_1.dedupeTaskRefs)(tasks);
+    if (refs.length === 0) {
+        console.error('Error: provide at least one task (e.g. `LUM-1 LUM-2`).');
+        return 1;
+    }
+    const creds = (0, config_1.readCredentials)();
+    if (!creds) {
+        console.error('Error: not logged in. Run `lumo auth login` first.');
+        return 1;
+    }
+    const apiUrl = (0, api_1.resolveAuthedApiUrl)(creds.apiUrl);
+    const base = (0, api_1.trimTrailingSlash)(apiUrl);
+    let milestoneName;
+    try {
+        const resolved = await (0, resolve_1.resolveMilestoneId)(base, creds.token, identifier, opts.project);
+        milestoneName = await resolveMilestoneName(base, creds.token, resolved.id, resolved.name);
+    }
+    catch (err) {
+        console.error(`Error: ${err instanceof Error ? err.message : String(err)}`);
+        return 1;
+    }
+    const outcomes = [];
+    for (const ref of refs) {
+        try {
+            const res = await fetch(`${base}/api/tasks/by-identifier/${encodeURIComponent(ref)}`, {
+                method: 'PATCH',
+                headers: {
+                    Authorization: `Bearer ${creds.token}`,
+                    'Content-Type': 'application/json',
+                },
+                body: JSON.stringify({ milestoneRef: milestoneName }),
+            });
+            if (res.ok) {
+                outcomes.push({ task: ref, status: 'ok' });
+            }
+            else {
+                let msg = `add failed (HTTP ${res.status})`;
+                try {
+                    const body = (await res.json());
+                    if (body.error)
+                        msg = body.error;
+                }
+                catch {
+                    // non-JSON body; keep the status-only message
+                }
+                outcomes.push({ task: ref, status: 'fail', detail: msg });
+            }
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            outcomes.push({ task: ref, status: 'fail', detail: msg });
+        }
+    }
+    process.stdout.write((0, milestone_batch_1.formatBatchSummary)({ milestoneName, verb: 'added', outcomes }) + '\n');
+    return outcomes.some(o => o.status === 'fail') ? 1 : undefined;
+}

package/dist/cli/src/commands/milestone-remove.js

@@ -0,0 +1,94 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.milestoneRemove = milestoneRemove;
+const config_1 = require("../lib/config");
+const api_1 = require("../lib/api");
+const resolve_1 = require("../lib/resolve");
+const milestone_batch_1 = require("../lib/milestone-batch");
+/** GET the milestone's canonical name; needed only when a UUID was passed. */
+async function resolveMilestoneName(base, token, id, knownName) {
+    if (knownName)
+        return knownName;
+    const res = await fetch(`${base}/api/milestones/${id}`, {
+        headers: { Authorization: `Bearer ${token}` },
+    });
+    if (!res.ok) {
+        throw new Error(`milestone ${id} not found (HTTP ${res.status})`);
+    }
+    const { milestone } = (await res.json());
+    return milestone.name;
+}
+async function milestoneRemove(identifier, tasks, opts) {
+    const refs = (0, milestone_batch_1.dedupeTaskRefs)(tasks);
+    if (refs.length === 0) {
+        console.error('Error: provide at least one task (e.g. `LUM-1 LUM-2`).');
+        return 1;
+    }
+    const creds = (0, config_1.readCredentials)();
+    if (!creds) {
+        console.error('Error: not logged in. Run `lumo auth login` first.');
+        return 1;
+    }
+    const apiUrl = (0, api_1.resolveAuthedApiUrl)(creds.apiUrl);
+    const base = (0, api_1.trimTrailingSlash)(apiUrl);
+    let milestoneId;
+    let milestoneName;
+    let milestoneTasks;
+    try {
+        const resolved = await (0, resolve_1.resolveMilestoneId)(base, creds.token, identifier, opts.project);
+        milestoneId = resolved.id;
+        milestoneName = await resolveMilestoneName(base, creds.token, resolved.id, resolved.name);
+        const tasksRes = await fetch(`${base}/api/milestones/${milestoneId}/tasks`, { headers: { Authorization: `Bearer ${creds.token}` } });
+        if (!tasksRes.ok) {
+            throw new Error(`milestone tasks fetch failed (HTTP ${tasksRes.status})`);
+        }
+        const body = (await tasksRes.json());
+        milestoneTasks = body.tasks;
+    }
+    catch (err) {
+        console.error(`Error: ${err instanceof Error ? err.message : String(err)}`);
+        return 1;
+    }
+    const { present, absent } = (0, milestone_batch_1.partitionMembership)(refs, milestoneTasks);
+    const outcomes = [];
+    for (const ref of present) {
+        try {
+            const res = await fetch(`${base}/api/tasks/by-identifier/${encodeURIComponent(ref)}`, {
+                method: 'PATCH',
+                headers: {
+                    Authorization: `Bearer ${creds.token}`,
+                    'Content-Type': 'application/json',
+                },
+                body: JSON.stringify({ milestoneRef: null }),
+            });
+            if (res.ok) {
+                outcomes.push({ task: ref, status: 'ok' });
+            }
+            else {
+                let msg = `remove failed (HTTP ${res.status})`;
+                try {
+                    const errBody = (await res.json());
+                    if (errBody.error)
+                        msg = errBody.error;
+                }
+                catch {
+                    // non-JSON body; keep the status-only message
+                }
+                outcomes.push({ task: ref, status: 'fail', detail: msg });
+            }
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            outcomes.push({ task: ref, status: 'fail', detail: msg });
+        }
+    }
+    for (const ref of absent) {
+        outcomes.push({
+            task: ref,
+            status: 'skip',
+            detail: 'not in this milestone',
+        });
+    }
+    process.stdout.write((0, milestone_batch_1.formatBatchSummary)({ milestoneName, verb: 'removed', outcomes }) + '\n');
+    return outcomes.some(o => o.status === 'fail') ? 1 : undefined;
+}

package/dist/cli/src/commands/milestone-summary.js

@@ -0,0 +1,139 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.formatMilestoneSummary = formatMilestoneSummary;
+exports.milestoneSummary = milestoneSummary;
+const config_1 = require("../lib/config");
+const api_1 = require("../lib/api");
+const resolve_1 = require("../lib/resolve");
+const sanitize_1 = require("../lib/sanitize");
+function formatMilestoneSummary(input) {
+    const { name, stats, tldr, report } = input;
+    const lines = [`Milestone: ${(0, sanitize_1.sanitizeField)(name)}`];
+    if (stats === null && tldr === null && report === null) {
+        lines.push('', '(no summary generated yet)');
+        return lines.join('\n');
+    }
+    if (stats !== null) {
+        lines.push(`Done:      ${stats.done} / ${stats.total}`);
+    }
+    if (tldr) {
+        lines.push('', (0, sanitize_1.sanitizeField)(tldr));
+    }
+    if (report) {
+        lines.push('', (0, sanitize_1.sanitizeField)(report));
+    }
+    return lines.join('\n');
+}
+async function milestoneSummary(identifier, opts) {
+    const creds = (0, config_1.readCredentials)();
+    if (!creds) {
+        console.error('Error: not logged in. Run `lumo auth login` first.');
+        return 1;
+    }
+    const apiUrl = (0, api_1.resolveAuthedApiUrl)(creds.apiUrl);
+    const base = (0, api_1.trimTrailingSlash)(apiUrl);
+    let resolved;
+    try {
+        resolved = await (0, resolve_1.resolveMilestoneId)(base, creds.token, identifier, opts.project);
+    }
+    catch (err) {
+        console.error(`Error: ${err instanceof Error ? err.message : String(err)}`);
+        return 1;
+    }
+    // Fill in name if identifier was a UUID (resolveMilestoneId returns '' then).
+    let displayName = resolved.name;
+    if (!displayName) {
+        const r = await fetch(`${base}/api/milestones/${resolved.id}`, {
+            headers: { Authorization: `Bearer ${creds.token}` },
+        });
+        if (r.ok) {
+            const { milestone } = (await r.json());
+            displayName = milestone.name;
+        }
+    }
+    // Optional retry: POST to /summary/retry first. Expect 202 (queued).
+    if (opts.retry) {
+        let retryRes;
+        try {
+            retryRes = await fetch(`${base}/api/milestones/${resolved.id}/summary/retry`, {
+                method: 'POST',
+                headers: { Authorization: `Bearer ${creds.token}` },
+            });
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            console.error(`Error: could not reach Lumo API at ${apiUrl} (${msg})`);
+            return 1;
+        }
+        if (retryRes.status === 401) {
+            console.error('Error: API key invalid or revoked. Run `lumo auth login`.');
+            return 1;
+        }
+        if (!retryRes.ok && retryRes.status !== 202) {
+            let errMsg = `summary retry failed (HTTP ${retryRes.status})`;
+            try {
+                const errBody = (await retryRes.json());
+                if (errBody.error)
+                    errMsg = errBody.error;
+            }
+            catch {
+                // ignore
+            }
+            console.error(`Error: ${(0, sanitize_1.sanitizeField)(errMsg)}`);
+            return 1;
+        }
+        // 202 means queued; regeneration is async. The GET below may still return
+        // the old summary or 404 — warn the user.
+        console.error('Note: summary regeneration queued. Result below may still be the previous summary.');
+    }
+    // GET /api/milestones/<id>/summary — returns MilestoneSummary row or 404.
+    let summaryRes;
+    try {
+        summaryRes = await fetch(`${base}/api/milestones/${resolved.id}/summary`, {
+            headers: { Authorization: `Bearer ${creds.token}` },
+        });
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`Error: could not reach Lumo API at ${apiUrl} (${msg})`);
+        return 1;
+    }
+    if (summaryRes.status === 401) {
+        console.error('Error: API key invalid or revoked. Run `lumo auth login`.');
+        return 1;
+    }
+    let stats = null;
+    let tldr = null;
+    let report = null;
+    if (summaryRes.ok) {
+        const body = (await summaryRes.json());
+        if (body.stats) {
+            stats = {
+                done: body.stats.done ?? 0,
+                total: body.stats.totalTasks ?? 0,
+            };
+        }
+        tldr = body.tldr ?? null;
+        report = body.report ?? null;
+    }
+    else if (summaryRes.status !== 404) {
+        let errMsg = `milestone summary failed (HTTP ${summaryRes.status})`;
+        try {
+            const errBody = (await summaryRes.json());
+            if (errBody.error)
+                errMsg = errBody.error;
+        }
+        catch {
+            // ignore
+        }
+        console.error(`Error: ${(0, sanitize_1.sanitizeField)(errMsg)}`);
+        return 1;
+    }
+    // 404 → fall through with all-null; formatMilestoneSummary renders the marker.
+    process.stdout.write(formatMilestoneSummary({
+        name: displayName,
+        stats,
+        tldr,
+        report,
+    }) + '\n');
+}

package/dist/cli/src/commands/next.js

@@ -0,0 +1,103 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.nextCommand = nextCommand;
+exports.formatNextOutput = formatNextOutput;
+const config_1 = require("../lib/config");
+const api_1 = require("../lib/api");
+const sanitize_1 = require("../lib/sanitize");
+const rank_tasks_1 = require("../lib/rank-tasks");
+/**
+ * `lumo next [-n, --count <N>]` — recommend the next task(s) to work on.
+ *
+ * Chains two read-only endpoints: active sprint ids (for a ranking boost) and
+ * "my tasks". The active-sprints call is non-fatal — if it fails we warn and
+ * rank without the sprint boost rather than aborting.
+ */
+async function nextCommand(opts) {
+    const count = opts.count !== undefined ? parseInt(opts.count, 10) : 3;
+    if (Number.isNaN(count) || count < 1) {
+        console.error(`Error: invalid --count "${opts.count}" (expected a positive integer)`);
+        return 1;
+    }
+    const creds = (0, config_1.readCredentials)();
+    if (!creds) {
+        console.error('Error: not logged in. Run `lumo auth login` first.');
+        return 1;
+    }
+    const apiUrl = (0, api_1.resolveAuthedApiUrl)(creds.apiUrl);
+    const base = (0, api_1.trimTrailingSlash)(apiUrl);
+    const authHeaders = { Authorization: `Bearer ${creds.token}` };
+    // 1. Active sprint ids — non-fatal. Failure just drops the sprint boost.
+    let activeSprintIds = new Set();
+    try {
+        const res = await fetch(`${base}/api/me/active-sprints`, {
+            headers: authHeaders,
+        });
+        if (res.ok) {
+            const data = (await res.json());
+            activeSprintIds = new Set(data.sprintIds);
+        }
+        else {
+            console.error(`Warning: could not load active sprints (HTTP ${res.status}); ranking without sprint boost.`);
+        }
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`Warning: could not load active sprints (${msg}); ranking without sprint boost.`);
+    }
+    // 2. My tasks — fatal on failure.
+    let res;
+    try {
+        res = await fetch(`${base}/api/tasks/me`, { headers: authHeaders });
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`Error: could not reach Lumo API at ${apiUrl} (${msg})`);
+        return 1;
+    }
+    if (res.status === 401) {
+        console.error('Error: API key invalid or revoked. Run `lumo auth login`.');
+        return 1;
+    }
+    if (!res.ok) {
+        console.error(`Error: task fetch failed (HTTP ${res.status})`);
+        return 1;
+    }
+    const data = (await res.json());
+    const open = data.tasks.filter(t => t.status !== 'DONE');
+    const ranked = (0, rank_tasks_1.rankTasks)(open, activeSprintIds, new Date()).slice(0, count);
+    process.stdout.write(formatNextOutput(ranked, open.length) + '\n');
+}
+/**
+ * Render the ranked recommendation block. `ranked` is already sliced to the
+ * requested count; `totalOpen` is the count of all non-DONE tasks (for the
+ * "(of N open)" header). Pure — no I/O.
+ */
+function formatNextOutput(ranked, totalOpen) {
+    const first = ranked[0];
+    if (!first)
+        return 'No open tasks assigned to you. 🎉';
+    const widths = {
+        identifier: Math.max(...ranked.map(r => r.identifier.length)),
+        status: Math.max(...ranked.map(r => r.task.status.length)),
+        priority: Math.max(...ranked.map(r => r.task.priority.length)),
+    };
+    const plural = ranked.length === 1 ? '' : 's';
+    const lines = [
+        `Top ${ranked.length} recommended task${plural} (of ${totalOpen} open):`,
+        '',
+    ];
+    ranked.forEach((r, i) => {
+        lines.push(`${i + 1}. ${r.identifier.padEnd(widths.identifier)}  ` +
+            `${r.task.status.padEnd(widths.status)}  ` +
+            `${r.task.priority.padEnd(widths.priority)}  ` +
+            (0, sanitize_1.sanitizeField)(r.task.title));
+        lines.push(`     ↳ ${r.reasons.join(' · ')}`);
+    });
+    lines.push('');
+    lines.push(`Next: lumo session attach ${first.identifier} && lumo task context ${first.identifier}`);
+    if (ranked.length > 1) {
+        lines.push('（也可换成列表里任意一个 LUM-N）');
+    }
+    return lines.join('\n');
+}

package/dist/cli/src/commands/session-wrap.js

@@ -4,13 +4,15 @@ exports.sessionWrap = sessionWrap;
 const config_1 = require("../lib/config");
 const wrap_panel_1 = require("../lib/wrap-panel");
 const progress_comment_section_1 = require("./wrap/progress-comment-section");
+const memory_review_section_1 = require("./wrap/memory-review-section");
 /**
  * `lumo session wrap [--yes] [--dry-run]`
  *
- * Session-end wrap-up panel. v1 has a single section: draft a progress comment
- * from this session's unposted turnSummaries and post it (after y/e/s
- * confirmation) to the bound task. Designed as a multi-section panel so
- * LUM-152's memory-review section slots in without touching this command.
+ * Session-end wrap-up panel with two sections, run in order: (1) draft a
+ * progress comment from this session's unposted turnSummaries and post it
+ * (after y/e/s confirmation) to the bound task; (2) review the Layer1 memories
+ * this session sedimented — keep/delete/promote, deduped by a per-session
+ * watermark.
  */
 async function sessionWrap(options) {
     const sessionId = process.env.CLAUDE_CODE_SESSION_ID;
@@ -24,7 +26,10 @@ async function sessionWrap(options) {
         console.error('Error: not logged in. Run `lumo auth login` first.');
         return 1;
     }
-    const sections = [new progress_comment_section_1.ProgressCommentSection({ creds, sessionId })];
+    const sections = [
+        new progress_comment_section_1.ProgressCommentSection({ creds, sessionId }),
+        new memory_review_section_1.MemoryReviewSection({ creds, sessionId }),
+    ];
     await (0, wrap_panel_1.runWrapPanel)(sections, {
         yes: options.yes === true,
         dryRun: options.dryRun === true,

package/dist/cli/src/commands/setup.js

@@ -35,11 +35,13 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.resolveAgentToken = resolveAgentToken;
 exports.setup = setup;
+exports.installGitHook = installGitHook;
 const fs = __importStar(require("fs"));
 const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 const child_process_1 = require("child_process");
 const hooks_template_1 = require("../lib/hooks-template");
+const git_hook_template_1 = require("../lib/git-hook-template");
 const line_prompt_1 = require("../lib/line-prompt");
 const agent_1 = require("../lib/agent");
 const config_1 = require("../lib/config");
@@ -78,6 +80,9 @@ async function setup(options) {
     process.stdout.write(`\nInstalling Lumo for ${scope} scope: ${claudeDir}\n\n`);
     installSkill(claudeDir, options.force === true);
     mergeSettings(claudeDir, agentResult.token);
+    if (scope === 'project') {
+        installGitHook(root);
+    }
     printPostInstall();
     return 0;
 }
@@ -151,6 +156,64 @@ function mergeSettings(claudeDir, agentToken) {
         process.stdout.write(`✓ merged hooks into ${settingsPath} (agent=${agentToken}; added ${stats.addedEvents.length}, updated ${stats.updatedEvents.length}, kept ${stats.alreadyPresent.length})\n`);
     }
 }
+function gitCapture(cwd, args) {
+    const res = (0, child_process_1.spawnSync)('git', args, { cwd, encoding: 'utf8' });
+    if (res.error || res.status !== 0)
+        return null;
+    return res.stdout.trim();
+}
+function installGitHook(projectRoot) {
+    if (gitCapture(projectRoot, ['rev-parse', '--is-inside-work-tree']) !== 'true') {
+        process.stdout.write('⚠ Not a git repository (or git unavailable) — skipped prepare-commit-msg hook.\n');
+        return;
+    }
+    const coreHooksPath = gitCapture(projectRoot, ['config', 'core.hooksPath']) || null;
+    if ((0, git_hook_template_1.resolveHookInstall)(coreHooksPath).mode === 'degrade') {
+        printGitHookManualInstructions(coreHooksPath);
+        return;
+    }
+    const hooksDirRaw = gitCapture(projectRoot, ['rev-parse', '--git-path', 'hooks']);
+    if (!hooksDirRaw) {
+        process.stdout.write('⚠ could not resolve git hooks dir — skipped prepare-commit-msg hook.\n');
+        return;
+    }
+    const absHooksDir = path.isAbsolute(hooksDirRaw)
+        ? hooksDirRaw
+        : path.join(projectRoot, hooksDirRaw);
+    const hookPath = path.join(absHooksDir, 'prepare-commit-msg');
+    const existing = fs.existsSync(hookPath)
+        ? fs.readFileSync(hookPath, 'utf8')
+        : null;
+    const { content, status } = (0, git_hook_template_1.mergeGitHook)(existing);
+    if (status === 'unchanged') {
+        process.stdout.write(`✓ prepare-commit-msg hook already up to date: ${hookPath}\n`);
+        return;
+    }
+    try {
+        fs.mkdirSync(absHooksDir, { recursive: true });
+        fs.writeFileSync(hookPath, content);
+        fs.chmodSync(hookPath, 0o755);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        process.stdout.write(`⚠ could not write prepare-commit-msg hook: ${msg}\n`);
+        return;
+    }
+    const verb = status === 'created'
+        ? 'wrote'
+        : status === 'appended'
+            ? 'appended to'
+            : 'updated';
+    process.stdout.write(`✓ ${verb} prepare-commit-msg hook: ${hookPath}\n`);
+}
+function printGitHookManualInstructions(coreHooksPath) {
+    process.stdout.write(`\n⚠ core.hooksPath is set to "${coreHooksPath}" (husky or a custom hooks dir).\n` +
+        `  Skipped auto-install to avoid clobbering it. To auto-tag commits with\n` +
+        `  [LUM-N], add this block to your prepare-commit-msg hook\n` +
+        `  (e.g. .husky/prepare-commit-msg), then make it executable:\n\n` +
+        git_hook_template_1.HOOK_SCRIPT_BLOCK +
+        `\n\n`);
+}
 function printPostInstall() {
     const onPath = isLumoOnPath();
     const credsPath = path.join((0, config_1.configDir)(), 'credentials.json');

package/dist/cli/src/commands/wrap/memory-review-section.js

@@ -0,0 +1,81 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MemoryReviewSection = void 0;
+exports.parseReviewInstruction = parseReviewInstruction;
+const sanitize_1 = require("../../lib/sanitize");
+const line_prompt_1 = require("../../lib/line-prompt");
+const memory_content_1 = require("../../lib/memory-content");
+const session_memory_api_1 = require("../../lib/session-memory-api");
+/** Parse a one-line review instruction into 0-based row indices. */
+function parseReviewInstruction(line) {
+    const result = { deleteIdx: [], promoteIdx: [] };
+    const re = /([dp])\s*([\d,\s]+)/gi;
+    let m;
+    while ((m = re.exec(line)) !== null) {
+        const nums = m[2]
+            .split(/[\s,]+/)
+            .map(s => s.trim())
+            .filter(Boolean)
+            .map(s => parseInt(s, 10) - 1)
+            .filter(n => Number.isInteger(n) && n >= 0);
+        if (m[1].toLowerCase() === 'd')
+            result.deleteIdx.push(...nums);
+        else
+            result.promoteIdx.push(...nums);
+    }
+    return result;
+}
+/**
+ * Wrap-panel section that lists the Layer1 memories this session sedimented and
+ * lets the user delete noise / promote keepers to project scope. Keeps its own
+ * draft state between prepare() and run(). Dedup is server-side via watermark.
+ */
+class MemoryReviewSection {
+    deps;
+    title = '记忆审阅';
+    draft = null;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    async prepare() {
+        this.draft = await (0, session_memory_api_1.fetchMemoryDraft)(this.deps.creds, this.deps.sessionId);
+        return this.draft.memories.length > 0;
+    }
+    async run(opts) {
+        const draft = this.draft;
+        if (!draft || !draft.watermark || draft.memories.length === 0)
+            return;
+        process.stdout.write(`本次会话新增了这 ${draft.memories.length} 条 memory：\n`);
+        process.stdout.write(`${(0, sanitize_1.sanitizeField)((0, memory_content_1.formatMemoryReviewList)(draft.memories))}\n`);
+        if (opts.dryRun) {
+            process.stdout.write('(dry-run，未改动)\n');
+            return;
+        }
+        if (opts.yes) {
+            await this.apply(draft.watermark, [], []);
+            return;
+        }
+        const line = (await (0, line_prompt_1.promptLine)('[回车] 全部保留  [d 1,3] 删除  [p 2] 提升到项目级  [s] 跳过 > ')).trim();
+        if (line.toLowerCase() === 's') {
+            process.stdout.write('已跳过本节。\n');
+            return;
+        }
+        if (line === '') {
+            await this.apply(draft.watermark, [], []);
+            return;
+        }
+        const { deleteIdx, promoteIdx } = parseReviewInstruction(line);
+        const inRange = (n) => n >= 0 && n < draft.memories.length;
+        const deleteIds = deleteIdx.filter(inRange).map(i => draft.memories[i].id);
+        const promoteIds = promoteIdx
+            .filter(inRange)
+            .map(i => draft.memories[i].id)
+            .filter(id => !deleteIds.includes(id));
+        await this.apply(draft.watermark, deleteIds, promoteIds);
+    }
+    async apply(watermark, deleteIds, promoteIds) {
+        const { deleted, promoted } = await (0, session_memory_api_1.applyMemoryReview)(this.deps.creds, this.deps.sessionId, { watermark, deleteIds, promoteIds });
+        process.stdout.write(`已删除 ${deleted} 条，提升 ${promoted} 条到项目级。\n`);
+    }
+}
+exports.MemoryReviewSection = MemoryReviewSection;

package/dist/cli/src/index.js

@@ -46,6 +46,7 @@ const session_attach_1 = require("./commands/session-attach");
 const session_detach_1 = require("./commands/session-detach");
 const session_status_1 = require("./commands/session-status");
 const session_wrap_1 = require("./commands/session-wrap");
+const next_1 = require("./commands/next");
 const task_context_1 = require("./commands/task-context");
 const task_create_1 = require("./commands/task-create");
 const task_update_1 = require("./commands/task-update");
@@ -78,6 +79,9 @@ const milestone_create_1 = require("./commands/milestone-create");
 const milestone_show_1 = require("./commands/milestone-show");
 const milestone_update_1 = require("./commands/milestone-update");
 const milestone_delete_1 = require("./commands/milestone-delete");
+const milestone_add_1 = require("./commands/milestone-add");
+const milestone_remove_1 = require("./commands/milestone-remove");
+const milestone_summary_1 = require("./commands/milestone-summary");
 const sprint_create_1 = require("./commands/sprint-create");
 const sprint_list_1 = require("./commands/sprint-list");
 const sprint_show_1 = require("./commands/sprint-show");
@@ -181,6 +185,11 @@ program
     .option('--force', 'Overwrite an existing SKILL.md when its contents differ from the bundled version')
     .option('--agent <token>', 'Coding agent these hooks run under (claude-code, codex, cursor, gemini-cli, github-copilot, windsurf). Baked into every hook command. Defaults to claude-code.')
     .action(wrap(options => (0, setup_1.setup)(options)));
+program
+    .command('next')
+    .description('Recommend the next task(s) to work on, ranked by priority, active sprint, and due date. Prints top N (default 3); pick one and run `session attach` + `task context`.')
+    .option('-n, --count <N>', 'Number of tasks to recommend (default 3)')
+    .action(wrap(options => (0, next_1.nextCommand)(options)));
 const session = program
     .command('session')
     .description('Manage per-terminal coding-session context');
@@ -434,6 +443,22 @@ milestoneCmd
     .option('--project <ref>', 'Project name or slug (when identifier is a name)')
     .option('--yes', 'Required: confirm deletion without TTY prompt')
     .action(wrap((identifier, options) => (0, milestone_delete_1.milestoneDelete)(identifier, options)));
+milestoneCmd
+    .command('add <identifier> <tasks...>')
+    .description('Bind one or more tasks to a milestone in one call. <identifier> accepts a name or UUID; each <task> accepts LUM-N or UUID. Per-task result with a tally; partial failures do not roll back.')
+    .option('--project <ref>', 'Project name or slug (when identifier is a name)')
+    .action(wrap((identifier, tasks, options) => (0, milestone_add_1.milestoneAdd)(identifier, tasks, options)));
+milestoneCmd
+    .command('remove <identifier> <tasks...>')
+    .description('Unbind one or more tasks from a milestone in one call. Tasks not currently in the milestone are skipped (idempotent), never reassigned. <identifier> accepts a name or UUID; each <task> accepts LUM-N or UUID.')
+    .option('--project <ref>', 'Project name or slug (when identifier is a name)')
+    .action(wrap((identifier, tasks, options) => (0, milestone_remove_1.milestoneRemove)(identifier, tasks, options)));
+milestoneCmd
+    .command('summary <identifier>')
+    .description('Show the AI-generated summary for a milestone. Identifier accepts a milestone name or UUID. Prints "(no summary generated yet)" when none exists. Use --retry to queue regeneration before fetching.')
+    .option('--project <ref>', 'Project name or slug (when identifier is a name)')
+    .option('--retry', 'Trigger summary regeneration before fetching')
+    .action(wrap((identifier, options) => (0, milestone_summary_1.milestoneSummary)(identifier, options)));
 const sprintCmd = program
     .command('sprint')
     .description('Inspect sprints from the terminal');

package/dist/cli/src/lib/git-hook-template.js

@@ -0,0 +1,75 @@
+"use strict";
+// Idempotent install + content management for the Lumo `prepare-commit-msg`
+// git hook. The hook block itself is pure POSIX sh + git — it extracts the
+// `LUM-N` tag from the current branch name and appends it to the commit
+// subject, with NO dependency on the `lumo` binary or any network call.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HOOK_SCRIPT_BLOCK = exports.LUMO_HOOK_END = exports.LUMO_HOOK_BEGIN = void 0;
+exports.mergeGitHook = mergeGitHook;
+exports.resolveHookInstall = resolveHookInstall;
+/** Markers delimiting the Lumo-managed block inside a prepare-commit-msg file. */
+exports.LUMO_HOOK_BEGIN = '# >>> lumo prepare-commit-msg >>>';
+exports.LUMO_HOOK_END = '# <<< lumo <<<';
+const SHEBANG = '#!/bin/sh';
+// The managed block. `$1` = commit-message file, `$2` = message source
+// (message|template|merge|squash|commit). awk is POSIX-required and present
+// wherever git runs. The grep guard makes the hook a no-op when the message
+// already carries any [LUM-x] tag.
+exports.HOOK_SCRIPT_BLOCK = `${exports.LUMO_HOOK_BEGIN}
+# Auto-append the branch's task ID ([LUM-N]) to the commit subject when absent.
+# Managed by \`lumo setup\` — edit between the markers at your own risk.
+case "$2" in
+  merge|squash) exit 0 ;;
+esac
+lumo_branch=$(git symbolic-ref --short HEAD 2>/dev/null) || exit 0
+lumo_id=$(printf '%s' "$lumo_branch" | grep -oE 'LUM-[0-9]+' | head -n1)
+[ -z "$lumo_id" ] && exit 0
+# Skip if the message already references any [LUM-x] anywhere (subject OR body)
+# — avoids double-tagging when a body line already cites the task.
+grep -qE '\\[LUM-[0-9]+\\]' "$1" && exit 0
+lumo_tmp="$1.lumo.tmp"
+awk -v id="$lumo_id" '
+  !done && $0 !~ /^#/ && $0 !~ /^[[:space:]]*$/ { $0 = $0 " [" id "]"; done = 1 }
+  { print }
+' "$1" > "$lumo_tmp" && mv "$lumo_tmp" "$1"
+${exports.LUMO_HOOK_END}`;
+/**
+ * Idempotently fold the Lumo block into an existing prepare-commit-msg file.
+ * - null/blank existing      → fresh file with shebang + block ('created')
+ * - existing has our markers  → replace block in place ('updated' / 'unchanged')
+ * - existing foreign content  → preserve it, append our block ('appended')
+ */
+function mergeGitHook(existing) {
+    if (existing === null || existing.trim() === '') {
+        return { content: `${SHEBANG}\n${exports.HOOK_SCRIPT_BLOCK}\n`, status: 'created' };
+    }
+    const beginIdx = existing.indexOf(exports.LUMO_HOOK_BEGIN);
+    if (beginIdx !== -1) {
+        const endIdx = existing.indexOf(exports.LUMO_HOOK_END, beginIdx);
+        if (endIdx !== -1) {
+            const before = existing.slice(0, beginIdx);
+            const after = existing.slice(endIdx + exports.LUMO_HOOK_END.length);
+            const content = before + exports.HOOK_SCRIPT_BLOCK + after;
+            return {
+                content,
+                status: content === existing ? 'unchanged' : 'updated',
+            };
+        }
+        // BEGIN without END: corrupt block — fall through and append a clean one.
+    }
+    const sep = existing.endsWith('\n') ? '\n' : '\n\n';
+    return {
+        content: `${existing}${sep}${exports.HOOK_SCRIPT_BLOCK}\n`,
+        status: 'appended',
+    };
+}
+/**
+ * Decide whether `lumo setup` can write the hook directly. When
+ * `core.hooksPath` is set (husky or a custom dir), writing into it risks being
+ * clobbered or landing where git won't run it — so we degrade to instructions.
+ */
+function resolveHookInstall(coreHooksPath) {
+    if (coreHooksPath && coreHooksPath.trim() !== '')
+        return { mode: 'degrade' };
+    return { mode: 'install' };
+}

package/dist/cli/src/lib/memory-content.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.buildMemoryContent = buildMemoryContent;
 exports.formatMemoryList = formatMemoryList;
+exports.formatMemoryReviewList = formatMemoryReviewList;
 // Category/field metadata + builders for the `lumo memory` commands.
 // Mirrors the four content shapes validated server-side by parseMemoryContent.
 const sanitize_1 = require("./sanitize");
@@ -86,3 +87,9 @@ function formatMemoryList(rows) {
     })
         .join('\n');
 }
+/** Numbered review list: `  N. [SCOPE] CATEGORY  headline`. 1-indexed. */
+function formatMemoryReviewList(rows) {
+    return rows
+        .map((r, i) => `  ${i + 1}. [${r.scope}] ${r.category}  ${headline(r.category, r.content)}`)
+        .join('\n');
+}

package/dist/cli/src/lib/milestone-batch.js

@@ -0,0 +1,76 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.dedupeTaskRefs = dedupeTaskRefs;
+exports.partitionMembership = partitionMembership;
+exports.formatBatchSummary = formatBatchSummary;
+const sanitize_1 = require("./sanitize");
+/**
+ * Trim, drop empties, and dedupe task refs case-insensitively while
+ * preserving input order and the first original spelling of each ref.
+ */
+function dedupeTaskRefs(refs) {
+    const seen = new Set();
+    const out = [];
+    for (const raw of refs) {
+        const trimmed = raw.trim();
+        if (!trimmed)
+            continue;
+        const key = trimmed.toLowerCase();
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        out.push(trimmed);
+    }
+    return out;
+}
+/**
+ * Split requested task refs into those currently bound to the milestone
+ * (`present`) and those that are not (`absent`). A ref matches either the
+ * `<teamIdentifier>-<number>` identifier (case-insensitive) or the task id.
+ */
+function partitionMembership(requested, milestoneTasks) {
+    const keys = new Set();
+    for (const t of milestoneTasks) {
+        keys.add(`${t.teamIdentifier}-${t.number}`.toUpperCase());
+        keys.add(t.id.toLowerCase());
+    }
+    const present = [];
+    const absent = [];
+    for (const ref of requested) {
+        const isMember = keys.has(ref.toUpperCase()) || keys.has(ref.toLowerCase());
+        if (isMember)
+            present.push(ref);
+        else
+            absent.push(ref);
+    }
+    return { present, absent };
+}
+const STATUS_GLYPH = {
+    ok: '✓',
+    skip: '-',
+    fail: '✗',
+};
+/**
+ * Render the batch result: a one-line tally header (omitting zero
+ * categories) followed by one line per task. Server-derived text (milestone
+ * name, failure detail) is sanitized to block ANSI injection.
+ */
+function formatBatchSummary(args) {
+    const { verb, outcomes } = args;
+    const name = (0, sanitize_1.sanitizeField)(args.milestoneName);
+    const okCount = outcomes.filter(o => o.status === 'ok').length;
+    const skipCount = outcomes.filter(o => o.status === 'skip').length;
+    const failCount = outcomes.filter(o => o.status === 'fail').length;
+    const parts = [`${okCount} ${verb}`];
+    if (skipCount > 0)
+        parts.push(`${skipCount} skipped`);
+    if (failCount > 0)
+        parts.push(`${failCount} failed`);
+    const lines = [`${name}: ${parts.join(', ')}`];
+    for (const o of outcomes) {
+        const glyph = STATUS_GLYPH[o.status];
+        const detail = o.detail ? `  ${(0, sanitize_1.sanitizeField)(o.detail)}` : '';
+        lines.push(`  ${glyph} ${o.task}${detail}`);
+    }
+    return lines.join('\n');
+}

package/dist/cli/src/lib/rank-tasks.js

@@ -0,0 +1,80 @@
+"use strict";
+/**
+ * Pure ranking logic for `lumo next`. Given the caller's open tasks plus the
+ * set of ACTIVE sprint ids, produce a recommendation order and a per-task list
+ * of human-readable reason factors.
+ *
+ * Ordering is lexicographic (explainable over a tunable magic score), honoring
+ * "priority first": priority → active-sprint membership → dueDate → in-flight
+ * status → updatedAt desc tiebreak.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rankTasks = rankTasks;
+const PRIORITY_WEIGHT = {
+    URGENT: 0,
+    HIGH: 1,
+    MEDIUM: 2,
+    LOW: 3,
+};
+function priorityWeight(priority) {
+    return PRIORITY_WEIGHT[priority] ?? 99;
+}
+/** Earlier due first; missing/invalid dueDate sorts last. */
+function dueValue(dueDate) {
+    if (!dueDate)
+        return Number.POSITIVE_INFINITY;
+    const t = new Date(dueDate).getTime();
+    return Number.isNaN(t) ? Number.POSITIVE_INFINITY : t;
+}
+const IN_FLIGHT = new Set(['IN_PROGRESS', 'IN_REVIEW']);
+/** in-flight (0) before TODO (1) before anything else (2). */
+function statusRank(status) {
+    if (IN_FLIGHT.has(status))
+        return 0;
+    if (status === 'TODO')
+        return 1;
+    return 2;
+}
+function inActiveSprint(task, activeSprintIds) {
+    return task.sprintId !== null && activeSprintIds.has(task.sprintId);
+}
+function deriveReasons(task, activeSprintIds, now) {
+    const reasons = [task.priority];
+    if (inActiveSprint(task, activeSprintIds)) {
+        reasons.push('active sprint');
+    }
+    if (task.dueDate) {
+        const day = task.dueDate.slice(0, 10);
+        const due = new Date(task.dueDate).getTime();
+        const overdue = !Number.isNaN(due) && due < now.getTime();
+        reasons.push(overdue ? `due ${day} (overdue)` : `due ${day}`);
+    }
+    if (task.status === 'IN_PROGRESS')
+        reasons.push('in progress');
+    else if (task.status === 'IN_REVIEW')
+        reasons.push('in review');
+    return reasons;
+}
+function rankTasks(tasks, activeSprintIds, now) {
+    const sorted = [...tasks].sort((a, b) => {
+        const pw = priorityWeight(a.priority) - priorityWeight(b.priority);
+        if (pw !== 0)
+            return pw;
+        const sa = inActiveSprint(a, activeSprintIds) ? 0 : 1;
+        const sb = inActiveSprint(b, activeSprintIds) ? 0 : 1;
+        if (sa !== sb)
+            return sa - sb;
+        const dv = dueValue(a.dueDate) - dueValue(b.dueDate);
+        if (dv !== 0 && !Number.isNaN(dv))
+            return dv;
+        const st = statusRank(a.status) - statusRank(b.status);
+        if (st !== 0)
+            return st;
+        return new Date(b.updatedAt).getTime() - new Date(a.updatedAt).getTime();
+    });
+    return sorted.map(task => ({
+        task,
+        identifier: `${task.teamIdentifier}-${task.number}`,
+        reasons: deriveReasons(task, activeSprintIds, now),
+    }));
+}

package/dist/cli/src/lib/session-memory-api.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fetchMemoryDraft = fetchMemoryDraft;
+exports.applyMemoryReview = applyMemoryReview;
+const api_1 = require("./api");
+function base(creds) {
+    return (0, api_1.trimTrailingSlash)((0, api_1.resolveAuthedApiUrl)(creds.apiUrl));
+}
+/** GET the memory-review draft for the session. Throws on transport / non-200. */
+async function fetchMemoryDraft(creds, sessionId) {
+    const url = `${base(creds)}/api/sessions/${encodeURIComponent(sessionId)}/session-memories`;
+    const res = await fetch(url, {
+        headers: { Authorization: `Bearer ${creds.token}` },
+    });
+    if (res.status === 401)
+        throw new Error('API key invalid or revoked. Run `lumo auth login`.');
+    if (!res.ok)
+        throw new Error(`memory draft fetch failed (HTTP ${res.status})`);
+    return (await res.json());
+}
+/** POST the review (deletes + promotes + watermark). Throws server message on non-2xx. */
+async function applyMemoryReview(creds, sessionId, payload) {
+    const url = `${base(creds)}/api/sessions/${encodeURIComponent(sessionId)}/memory-review`;
+    const res = await fetch(url, {
+        method: 'POST',
+        headers: {
+            Authorization: `Bearer ${creds.token}`,
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify(payload),
+    });
+    if (res.status === 401)
+        throw new Error('API key invalid or revoked. Run `lumo auth login`.');
+    if (!res.ok) {
+        let serverMsg = null;
+        try {
+            const errBody = (await res.json());
+            if (typeof errBody.error === 'string')
+                serverMsg = errBody.error;
+        }
+        catch {
+            // body wasn't JSON
+        }
+        throw new Error(serverMsg ?? `memory review failed (HTTP ${res.status})`);
+    }
+    return (await res.json());
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumoai/cli",
-  "version": "1.9.0",
+  "version": "1.11.0",
   "description": "Lumo CLI — manage tasks and sessions from the terminal",
   "license": "MIT",
   "author": "cli@uselumo.ai",