@smartsoft001-mobilems/claude-plugins 2.83.0 → 2.85.0

package/README.md

@@ -0,0 +1,97 @@
+# @smartsoft001-mobilems/claude-plugins
+
+Claude Code plugins for MobileMS / MuzaCMS projects. Ships three variants:
+
+- `flow` — modern Angular 20+ projects (primary plugin)
+- `flow-legacy` — Angular 14 projects
+- `flow-external` — standalone Angular 6–11 projects
+
+## MuzaCMS API access (required for `mobilems-docs-reader` skill)
+
+The `mobilems-docs-reader` skill answers questions about the MuzaCMS / MobileMS indexer API by fetching its Swagger spec from a live MuzaCMS instance. The MuzaCMS docs page is behind a Symfony form-login, so the skill needs credentials. The refresh script lives next to the skill (`plugins/<variant>/skills/mobilems-docs-reader/refresh-mobilems-api-spec.sh`) and caches fetches per Claude Code session (with an 8-hour TTL) — see [Caching](#caching) below for details.
+
+Set these two environment variables in every environment where the skill runs:
+
+| Variable | Value |
+| --- | --- |
+| `MOBILEMS_LOGIN` | MuzaCMS username |
+| `MOBILEMS_PASSWORD` | MuzaCMS password |
+
+These are not vault-grade secrets, but they are still credentials — do not commit them to source control.
+
+### Local setup
+
+The simplest path: put the two variables in a `.env` file at your project root. The refresh script **auto-loads `.env` from the current working directory** every time it runs — no `set -a; source .env; set +a` ritual, no `direnv`, no `dotenv-cli`. Example `.env` entry:
+
+```
+MOBILEMS_LOGIN=your.username
+MOBILEMS_PASSWORD=your-password
+```
+
+Only `.env` is loaded (not `.env.local`, `.env.dev`, or any other variant) — keep your MuzaCMS credentials in the single canonical file. Already-set shell environment variables take precedence over `.env` values, so you can override individual keys with an inline export when needed:
+
+```
+MOBILEMS_LOGIN=other-user bash ./node_modules/@smartsoft001-mobilems/claude-plugins/plugins/flow/scripts/refresh-mobilems-api-spec.sh
+```
+
+The script's first action is to validate that both `MOBILEMS_LOGIN` and `MOBILEMS_PASSWORD` are present (in your shell or loaded from `.env`). If either is missing it exits with a clear instruction on what to set, before attempting any HTTP call.
+
+### Tool dependencies
+
+The shell script uses `curl` and `jq`. Both are usually preinstalled on macOS (with Homebrew) and most Linux distros, but the script does a pre-flight check and tells you how to install whichever is missing (`brew install jq` / `sudo apt install jq`).
+
+### Manual refresh
+
+Run the refresh script directly:
+
+```
+bash ./node_modules/@smartsoft001-mobilems/claude-plugins/plugins/flow/scripts/refresh-mobilems-api-spec.sh
+```
+
+You should see a `✓ Refreshed N bytes — <Title> <Version>` line and a new `mobilems-api.json` inside `node_modules/@smartsoft001-mobilems/claude-plugins/shared-assets/`.
+
+The same script ships under `plugins/flow-external/...` and `plugins/flow-legacy/...` for the other two plugin variants — pick the path that matches the plugin your project uses.
+
+### Claude Code permission
+
+The `mobilems-docs-reader` skill invokes the refresh script via the `Bash` tool. Claude Code prompts before running unknown Bash commands; depending on your permission mode, the call may be auto-denied without a prompt. To pre-approve, add the entry below to your project's `.claude/settings.json` (committed) or `.claude/settings.local.json` (per-dev, gitignored), under `permissions.allow`:
+
+```json
+{
+  "permissions": {
+    "allow": [
+      "Bash(bash ./node_modules/@smartsoft001-mobilems/claude-plugins/plugins/flow/scripts/refresh-mobilems-api-spec.sh:*)"
+    ]
+  }
+}
+```
+
+If the call is denied, the skill stops and tells you which rule to add — it does not fabricate an answer.
+
+### CI setup
+
+Add `MOBILEMS_LOGIN` and `MOBILEMS_PASSWORD` to your CI provider's repository secrets, then expose them in the `env:` block of any job that may invoke a Claude skill. No scheduled refresh job is needed — each CI job runs without a `CLAUDE_CODE_SESSION_ID`, so the script treats it as a manual/terminal invocation and always re-fetches a fresh spec.
+
+### Caching
+
+To avoid re-downloading the ~400 KB spec on every follow-up question inside a single Claude Code session, the script caches the fetched spec and skips the network call when the cache is still valid.
+
+A small sidecar `mobilems-api.meta.json` is written next to the spec containing two fields:
+
+```json
+{
+  "sessionId": "<CLAUDE_CODE_SESSION_ID at time of fetch>",
+  "fetchedAt": "<ISO 8601 timestamp>"
+}
+```
+
+The script fetches afresh when **any** of these holds:
+
+- `CLAUDE_CODE_SESSION_ID` is set but differs from the cached `sessionId` → new Claude Code session.
+- The cached `fetchedAt` is more than **8 hours** old.
+- The spec file or meta file is missing.
+- `CLAUDE_CODE_SESSION_ID` is not set → the call is treated as manual/terminal and always re-fetches.
+
+Manual/terminal fetches **preserve the existing `sessionId`** in the meta file (only `fetchedAt` is updated). That way, if you run the script from your shell and later resume the same Claude Code session, the in-session cache is still valid.
+
+The skill itself doesn't read the meta — it simply runs the script and reads `mobilems-api.json`. The caching is entirely script-internal.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smartsoft001-mobilems/claude-plugins",
-  "version": "2.83.0",
+  "version": "2.85.0",
   "publishConfig": {
     "access": "public"
   },

package/plugins/flow/.claude-plugin/plugin.json

@@ -1,5 +1,5 @@
 {
   "name": "flow",
   "description": "Development flow skills for Linear-driven development workflow",
-  "version": "2.83.0"
+  "version": "2.85.0"
 }

package/plugins/flow/agents/shared-impl-reporter.md

@@ -1,9 +1,9 @@
 ---
 name: shared-impl-reporter
 description: Generate implementation reports for Linear comments. Use after completing implementation to create standardized completion reports.
-tools: Read, Glob, Grep
+tools: Read, Glob, Grep, Bash
 model: sonnet
-color: "#2563EB"
+color: '#2563EB'
 ---
 
 You are an implementation reporter responsible for generating standardized completion reports for Linear task comments.
@@ -17,6 +17,35 @@ Generate well-formatted implementation reports that document:
 - Test status
 - Translation changes
 - Any issues or blockers
+- Token usage for the current session
+
+## Token Usage Step (MANDATORY)
+
+Every report you emit MUST end with exactly one Polish token-usage block — the one defined below. Append it after the report's existing `_Implementation report generated by Claude Code_` footer; do NOT embed the block inside any of the report templates that follow.
+
+1. Run the token-summing script once:
+
+   ```bash
+   bash "$CLAUDE_PLUGIN_ROOT/scripts/compute-session-tokens.sh"
+   ```
+
+   It prints four whitespace-separated integers on one line: `<INPUT> <OUTPUT> <CACHE_CREATE> <CACHE_READ>`. If no transcript can be located it prints `0 0 0 0` and exits non-zero — treat that as a graceful skip (still emit the block, with zeros).
+
+2. Compute `<TOTAL> = <INPUT> + <OUTPUT> + <CACHE_CREATE> + <CACHE_READ>`.
+
+3. Append this block to the end of the report:
+
+   ```markdown
+   ## Zużycie tokenów — etap /impl
+
+   | Metryka        | Wartość        |
+   | -------------- | -------------- |
+   | Input          | <INPUT>        |
+   | Output         | <OUTPUT>       |
+   | Cache creation | <CACHE_CREATE> |
+   | Cache read     | <CACHE_READ>   |
+   | **Łącznie**    | **<TOTAL>**    |
+   ```
 
 ## Input Requirements
 

package/plugins/flow/scripts/compute-session-tokens.sh

@@ -0,0 +1,39 @@
+#!/usr/bin/env bash
+# Sum token usage from the current Claude Code session's JSONL transcript.
+# Prints four whitespace-separated integers on one line:
+#   <input> <output> <cache_creation> <cache_read>
+# Prints "0 0 0 0" and exits non-zero if no transcript can be found.
+#
+# Resolution order:
+#   1. $CLAUDE_CONFIG_DIR (set by Claude Code) or ~/.claude as fallback.
+#   2. Inside <config>/projects/<encoded-cwd>/, pick the file matching
+#      $CLAUDE_CODE_SESSION_ID.jsonl when that env var is set.
+#   3. Otherwise pick the most-recently-modified *.jsonl (current session).
+
+set -u
+
+CONFIG_DIR="${CLAUDE_CONFIG_DIR:-$HOME/.claude}"
+ENCODED_CWD="$(pwd | sed 's|/|-|g')"
+TRANSCRIPT_DIR="$CONFIG_DIR/projects/$ENCODED_CWD"
+
+if [[ -n "${CLAUDE_CODE_SESSION_ID:-}" && -f "$TRANSCRIPT_DIR/$CLAUDE_CODE_SESSION_ID.jsonl" ]]; then
+  TRANSCRIPT_FILE="$TRANSCRIPT_DIR/$CLAUDE_CODE_SESSION_ID.jsonl"
+else
+  TRANSCRIPT_FILE="$(ls -t "$TRANSCRIPT_DIR"/*.jsonl 2>/dev/null | head -1)"
+fi
+
+if [[ -z "${TRANSCRIPT_FILE:-}" || ! -f "$TRANSCRIPT_FILE" ]]; then
+  echo "0 0 0 0"
+  exit 1
+fi
+
+jq -s '
+  reduce .[] as $m (
+    {i:0, o:0, cc:0, cr:0};
+    .i  += ($m.message.usage.input_tokens                // 0)
+  | .o  += ($m.message.usage.output_tokens               // 0)
+  | .cc += ($m.message.usage.cache_creation_input_tokens // 0)
+  | .cr += ($m.message.usage.cache_read_input_tokens     // 0)
+  )
+  | "\(.i) \(.o) \(.cc) \(.cr)"
+' "$TRANSCRIPT_FILE" | tr -d '"'

package/plugins/flow/scripts/refresh-mobilems-api-spec.sh

@@ -0,0 +1,372 @@
+#!/usr/bin/env bash
+# Refresh the MuzaCMS / MobileMS indexer OpenAPI spec.
+#
+# Logs in to https://develop-indexer.mobilems.pl via Symfony form-login,
+# scrapes the Swagger 2.0 JSON from /docs/api, and writes it next to this
+# skill's owning package under shared-assets/mobilems-api.json.
+#
+# Required tools: bash, curl, jq.
+# Required env vars (read from shell or auto-loaded from $PWD/.env):
+#   MOBILEMS_LOGIN     — MuzaCMS username
+#   MOBILEMS_PASSWORD  — MuzaCMS password
+#
+# Cache: a sibling mobilems-api.meta.json stores { sessionId, fetchedAt }.
+# The script skips the network call when the same Claude Code session
+# (CLAUDE_CODE_SESSION_ID) already fetched the spec less than 8h ago.
+
+set -u
+
+BASE='https://develop-indexer.mobilems.pl'
+LOGIN_URL="${BASE}/admin/login"
+DOCS_URL="${BASE}/docs/api"
+
+QUIET=0
+for arg in "$@"; do
+  case "$arg" in
+    --quiet) QUIET=1 ;;
+  esac
+done
+if [[ "${CLAUDE_AGENT_INVOCATION:-0}" == "1" ]]; then
+  QUIET=1
+fi
+
+log() {
+  if [[ "$QUIET" -eq 0 ]]; then
+    printf '%s\n' "$*"
+  fi
+}
+
+err() {
+  printf '%s\n' "$*" >&2
+}
+
+die() {
+  err "$*"
+  exit 1
+}
+
+# --- dependency check --------------------------------------------------------
+
+check_deps() {
+  local missing=()
+  command -v curl >/dev/null 2>&1 || missing+=("curl")
+  command -v jq   >/dev/null 2>&1 || missing+=("jq")
+  if [[ ${#missing[@]} -gt 0 ]]; then
+    err "✗ Brak wymaganych narzędzi: ${missing[*]}"
+    err ""
+    err "Zainstaluj:"
+    err "  macOS:  brew install ${missing[*]}"
+    err "  Debian/Ubuntu:  sudo apt install ${missing[*]}"
+    exit 1
+  fi
+}
+
+# --- .env loader -------------------------------------------------------------
+# Minimal KEY=value parser. Ignores blank lines and #-comments, strips matching
+# surrounding quotes, and never overrides already-set env vars (parity with the
+# old refresh-mobilems-api-spec.js loader).
+
+load_dotenv() {
+  local env_path="${PWD}/.env"
+  [[ -f "$env_path" ]] || return 0
+  local line key value first last
+  while IFS= read -r line || [[ -n "$line" ]]; do
+    # trim leading/trailing whitespace
+    line="${line#"${line%%[![:space:]]*}"}"
+    line="${line%"${line##*[![:space:]]}"}"
+    [[ -z "$line" ]] && continue
+    [[ "${line:0:1}" == "#" ]] && continue
+    [[ "$line" != *"="* ]] && continue
+    key="${line%%=*}"
+    value="${line#*=}"
+    # trim whitespace around key/value
+    key="${key#"${key%%[![:space:]]*}"}"
+    key="${key%"${key##*[![:space:]]}"}"
+    value="${value#"${value%%[![:space:]]*}"}"
+    value="${value%"${value##*[![:space:]]}"}"
+    [[ -z "$key" ]] && continue
+    # strip matching surrounding quotes (single or double)
+    first="${value:0:1}"
+    last="${value: -1}"
+    if [[ ${#value} -ge 2 ]] && { [[ "$first" == '"' && "$last" == '"' ]] || [[ "$first" == "'" && "$last" == "'" ]]; }; then
+      value="${value:1:${#value}-2}"
+    fi
+    # only set if not already in env
+    if [[ -z "${!key+x}" ]]; then
+      export "$key=$value"
+    fi
+  done < "$env_path"
+  log "→ loaded .env from $env_path"
+}
+
+# --- env-var validation (per Linear FRA-95 — Emil's request) ----------------
+# This runs as the very first step after .env loading. We MUST NOT attempt any
+# HTTP call until both credentials are present.
+
+validate_env_vars() {
+  if [[ -z "${MOBILEMS_LOGIN:-}" || -z "${MOBILEMS_PASSWORD:-}" ]]; then
+    err "✗ Brak wymaganych zmiennych środowiskowych dla MuzaCMS API:"
+    err "    MOBILEMS_LOGIN, MOBILEMS_PASSWORD"
+    err ""
+    err "Ustaw je w shellu:"
+    err "    export MOBILEMS_LOGIN=..."
+    err "    export MOBILEMS_PASSWORD=..."
+    err ""
+    err "Lub w pliku .env w katalogu głównym projektu:"
+    err "    MOBILEMS_LOGIN=..."
+    err "    MOBILEMS_PASSWORD=..."
+    err ""
+    err "Szczegóły: @smartsoft001-mobilems/claude-plugins README.md"
+    exit 1
+  fi
+}
+
+# --- output dir resolution ---------------------------------------------------
+# Mirrors resolveOutDir() in the old JS. Looks for shared-assets/ walking up
+# from this script's directory.
+
+resolve_out_dir() {
+  local script_dir
+  script_dir="$(cd "$(dirname "$0")" && pwd)"
+  # Installed layout (per-variant copy made by nx build):
+  #   <pkg-root>/plugins/<variant>/scripts/refresh-mobilems-api-spec.sh
+  #   <pkg-root>/shared-assets/mobilems-api.json
+  # Source layout:
+  #   packages/shared/claude-plugins/scripts/refresh-mobilems-api-spec.sh
+  #   packages/shared/claude-plugins/src/shared-assets/
+  local candidates=(
+    "$script_dir/../../../shared-assets"
+    "$script_dir/../shared-assets"
+    "$script_dir/../src/shared-assets"
+  )
+  local c
+  for c in "${candidates[@]}"; do
+    if [[ -d "$c" ]]; then
+      (cd "$c" && pwd)
+      return 0
+    fi
+  done
+  # No existing dir — pick the first candidate whose parent exists so we can
+  # mkdir into it.
+  for c in "${candidates[@]}"; do
+    if [[ -d "$(dirname "$c")" ]]; then
+      mkdir -p "$c"
+      (cd "$c" && pwd)
+      return 0
+    fi
+  done
+  # Last resort: create alongside the script.
+  mkdir -p "$script_dir/shared-assets"
+  (cd "$script_dir/shared-assets" && pwd)
+}
+
+# --- cache decision ----------------------------------------------------------
+# Mirrors cacheDecision() in the old JS.
+
+MAX_CACHE_AGE_S=$((8 * 60 * 60))
+
+iso_to_epoch() {
+  # macOS BSD date and GNU date diverge — try both forms.
+  local iso="$1"
+  if date -j -f "%Y-%m-%dT%H:%M:%SZ" "${iso%%.*}Z" "+%s" >/dev/null 2>&1; then
+    date -j -f "%Y-%m-%dT%H:%M:%SZ" "${iso%%.*}Z" "+%s"
+  elif date -d "$iso" "+%s" >/dev/null 2>&1; then
+    date -d "$iso" "+%s"
+  else
+    echo "0"
+  fi
+}
+
+cache_decision() {
+  # Echoes either "fetch:<reason>" or "skip:<age_seconds>".
+  local session_id="$1"
+  if [[ -z "$session_id" ]]; then
+    echo "fetch:manual/terminal invocation"
+    return
+  fi
+  if [[ ! -f "$SPEC_PATH" ]]; then
+    echo "fetch:spec file missing"
+    return
+  fi
+  if [[ ! -f "$META_PATH" ]]; then
+    echo "fetch:meta file missing"
+    return
+  fi
+  local meta_session meta_fetched_at meta_epoch now age
+  meta_session="$(jq -r '.sessionId // ""' "$META_PATH" 2>/dev/null)"
+  meta_fetched_at="$(jq -r '.fetchedAt // ""' "$META_PATH" 2>/dev/null)"
+  if [[ "$meta_session" != "$session_id" ]]; then
+    echo "fetch:new Claude Code session"
+    return
+  fi
+  if [[ -z "$meta_fetched_at" ]]; then
+    echo "fetch:meta missing fetchedAt"
+    return
+  fi
+  meta_epoch="$(iso_to_epoch "$meta_fetched_at")"
+  now="$(date +%s)"
+  age=$((now - meta_epoch))
+  if [[ "$meta_epoch" -le 0 || "$age" -gt "$MAX_CACHE_AGE_S" ]]; then
+    echo "fetch:cache older than 8 hours"
+    return
+  fi
+  echo "skip:$age"
+}
+
+# --- HTML extraction helpers -------------------------------------------------
+
+extract_csrf() {
+  # Mirrors extractCsrf() in the old JS.
+  local html="$1"
+  local token
+  token="$(printf '%s' "$html" | grep -oE 'name="_csrf_token"[[:space:]]+value="[^"]+"' | head -n 1 | sed -E 's/.*value="([^"]+)".*/\1/')"
+  if [[ -z "$token" ]]; then
+    die "✗ Could not find _csrf_token in login form HTML."
+  fi
+  printf '%s' "$token"
+}
+
+extract_swagger_data() {
+  # Mirrors extractSwaggerData() in the old JS.
+  # The <script id="swagger-data" type="application/json"> tag wraps a JSON blob.
+  local html="$1"
+  local json
+  # awk lets us span newlines safely, where sed's portability gets hairy.
+  json="$(printf '%s' "$html" | awk '
+    BEGIN { in_block = 0 }
+    {
+      line = $0
+      if (in_block == 0) {
+        idx = index(line, "<script id=\"swagger-data\" type=\"application/json\">")
+        if (idx > 0) {
+          in_block = 1
+          line = substr(line, idx + length("<script id=\"swagger-data\" type=\"application/json\">"))
+        } else {
+          next
+        }
+      }
+      end_idx = index(line, "</script>")
+      if (end_idx > 0) {
+        printf "%s", substr(line, 1, end_idx - 1)
+        exit
+      } else {
+        printf "%s\n", line
+      }
+    }
+  ')"
+  # trim leading/trailing whitespace
+  json="${json#"${json%%[![:space:]]*}"}"
+  json="${json%"${json##*[![:space:]]}"}"
+  if [[ -z "$json" ]]; then
+    die "✗ Could not find <script id=\"swagger-data\"> tag in /docs/api response. Login may have silently failed, or the docs page structure changed."
+  fi
+  printf '%s' "$json"
+}
+
+# --- main --------------------------------------------------------------------
+
+check_deps
+load_dotenv
+validate_env_vars
+
+OUT_DIR="$(resolve_out_dir)"
+SPEC_PATH="$OUT_DIR/mobilems-api.json"
+META_PATH="$OUT_DIR/mobilems-api.meta.json"
+
+SESSION_ID="${CLAUDE_CODE_SESSION_ID:-}"
+DECISION="$(cache_decision "$SESSION_ID")"
+
+if [[ "$DECISION" == skip:* ]]; then
+  age_s="${DECISION#skip:}"
+  age_min=$(( (age_s + 30) / 60 ))
+  fetched_at="$(jq -r '.fetchedAt // "unknown"' "$META_PATH" 2>/dev/null)"
+  log "✓ spec cached for this Claude Code session (refreshed ${age_min} min ago at ${fetched_at}), skipping fetch"
+  exit 0
+fi
+
+REASON="${DECISION#fetch:}"
+log "Refreshing MuzaCMS API spec from $BASE ($REASON)"
+
+JAR="$(mktemp -t mobilems-cookies.XXXXXX)"
+trap 'rm -f "$JAR"' EXIT
+
+log "→ GET /admin/login (CSRF + session)"
+LOGIN_HTML="$(curl --silent --show-error \
+  --cookie-jar "$JAR" \
+  "$LOGIN_URL")" || die "✗ Could not fetch $LOGIN_URL"
+
+CSRF="$(extract_csrf "$LOGIN_HTML")"
+
+log "→ POST /admin/login"
+# We need the HTTP status of the POST without following the redirect.
+LOGIN_POST_STATUS_BODY="$(curl --silent --show-error \
+  --output /dev/null \
+  --write-out '%{http_code} %{redirect_url}' \
+  --cookie-jar "$JAR" --cookie "$JAR" \
+  --data-urlencode "_username=${MOBILEMS_LOGIN}" \
+  --data-urlencode "_password=${MOBILEMS_PASSWORD}" \
+  --data-urlencode "_csrf_token=${CSRF}" \
+  --data-urlencode "_remember_me=on" \
+  -X POST \
+  "$LOGIN_URL")" || die "✗ POST $LOGIN_URL failed."
+
+LOGIN_STATUS="${LOGIN_POST_STATUS_BODY%% *}"
+LOGIN_REDIRECT="${LOGIN_POST_STATUS_BODY#* }"
+
+if [[ "$LOGIN_STATUS" != "302" ]]; then
+  die "✗ Login failed: expected 302 redirect, got HTTP ${LOGIN_STATUS}. Check MOBILEMS_LOGIN and MOBILEMS_PASSWORD."
+fi
+if [[ "$LOGIN_REDIRECT" == *"/admin/login"* ]]; then
+  die "✗ Login failed: server redirected back to /admin/login. Credentials were likely rejected."
+fi
+
+log "→ GET /docs/api"
+DOCS_STATUS_FILE="$(mktemp -t mobilems-docs-status.XXXXXX)"
+trap 'rm -f "$JAR" "$DOCS_STATUS_FILE"' EXIT
+
+DOCS_HTML="$(curl --silent --show-error \
+  --write-out '%{http_code}' \
+  --cookie-jar "$JAR" --cookie "$JAR" \
+  --output - \
+  "$DOCS_URL" 2>/dev/null | tee >(tail -c 3 > "$DOCS_STATUS_FILE"))"
+
+# Strip the trailing 3-char status code from the body
+DOCS_STATUS="$(cat "$DOCS_STATUS_FILE")"
+DOCS_HTML="${DOCS_HTML%$DOCS_STATUS}"
+
+if [[ "$DOCS_STATUS" != "200" ]]; then
+  die "✗ Docs page returned HTTP ${DOCS_STATUS}. Session may not be authenticated."
+fi
+if [[ "$DOCS_HTML" == *"login-card-body"* ]]; then
+  die "✗ Docs page returned the login form — session not authenticated."
+fi
+
+SPEC_JSON="$(extract_swagger_data "$DOCS_HTML")"
+
+# Validate + pretty-print through jq.
+if ! printf '%s' "$SPEC_JSON" | jq '.' > "${SPEC_PATH}.tmp"; then
+  rm -f "${SPEC_PATH}.tmp"
+  die "✗ Swagger JSON failed to parse."
+fi
+mv -f "${SPEC_PATH}.tmp" "$SPEC_PATH"
+
+SPEC_TITLE="$(jq -r '.spec.info.title // .info.title // "unknown"' "$SPEC_PATH")"
+SPEC_VERSION="$(jq -r '.spec.info.version // .info.version // "unknown"' "$SPEC_PATH")"
+
+# Preserve cached sessionId when running outside Claude Code (manual/terminal)
+# so a future in-session call still hits the cache. In-Claude-Code calls always
+# overwrite with the current session id.
+EFFECTIVE_SESSION_ID="$SESSION_ID"
+if [[ -z "$EFFECTIVE_SESSION_ID" && -f "$META_PATH" ]]; then
+  EFFECTIVE_SESSION_ID="$(jq -r '.sessionId // ""' "$META_PATH" 2>/dev/null)"
+fi
+ISO_NOW="$(date -u +"%Y-%m-%dT%H:%M:%SZ")"
+jq -n \
+  --arg sid "$EFFECTIVE_SESSION_ID" \
+  --arg ts  "$ISO_NOW" \
+  '{sessionId: (if $sid == "" then null else $sid end), fetchedAt: $ts}' \
+  > "$META_PATH"
+
+BYTES="$(wc -c < "$SPEC_PATH" | tr -d ' ')"
+log "✓ Refreshed ${BYTES} bytes — ${SPEC_TITLE} ${SPEC_VERSION}"
+log "  $SPEC_PATH"