@fitlab-ai/agent-infra 0.9.12 → 0.9.13

package/dist/lib/internal/platform-pr.js

@@ -1,19 +1,21 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { normalizeAgentToken, AGENT_USAGE_HINT } from '../agent-clients/tokens.js';
-import { bindPlatformPullRequest, createPlatformPullRequest, inspectPlatformPullRequest, resolveExternalPullRequest, skipPlatformPullRequestFact, syncPlatformPullRequest } from '../platform/pull-requests.js';
-import { summaryContext, syncPullRequestSummary } from '../platform/pr-summary.js';
+import { bindPlatformPullRequest, createPlatformPullRequest, inspectPlatformPullRequest, resolveExternalPullRequest, skipPlatformPullRequestFact, syncPlatformPullRequest, syncPlatformPullRequestInLabels } from '../platform/pull-requests.js';
+import { reportWrite, summaryContext, syncPullRequestSummary } from '../platform/pr-summary.js';
 const USAGE = `Usage: agent-infra-internal platform-pr inspect <task-ref> [--cwd <path>]
-       agent-infra-internal platform-pr resolve-external <task-ref> --agent <agent> [--pr <N>] [--dry-run] [--cwd <path>]
+       agent-infra-internal platform-pr resolve-external <task-ref> --agent <agent> [--pr <token>] [--dry-run] [--cwd <path>]
        agent-infra-internal platform-pr create <task-ref> --agent <agent> --base <branch> --head <branch> --title-file <path|-> --body-file <path|-> [--draft] [--dry-run] [--cwd <path>]
-       agent-infra-internal platform-pr bind <task-ref> --pr <N> --agent <agent> [--dry-run] [--cwd <path>]
+       agent-infra-internal platform-pr bind <task-ref> --pr <token> --agent <agent> [--dry-run] [--cwd <path>]
        agent-infra-internal platform-pr skip <task-ref> --agent <agent> [--dry-run] [--cwd <path>]
        agent-infra-internal platform-pr sync <task-ref> --agent <agent> [--metadata] [--closing-issue] --result <pr_created|pr_reused|no_op> [--dry-run] [--cwd <path>]
+       agent-infra-internal platform-pr sync-in-labels --pr <N> [--dry-run] [--cwd <path>]
        agent-infra-internal platform-pr summary-context <task-ref> [--cwd <path>]
-       agent-infra-internal platform-pr summary-sync <task-ref> --agent <agent> --body-file <path|-> --result <pr_created|pr_reused|no_op> [--dry-run] [--cwd <path>]
+       agent-infra-internal platform-pr change-report <task-ref> --agent <agent> --mechanical-file <path> --precheck-file <path> [--dry-run] [--cwd <path>]
+       agent-infra-internal platform-pr summary-sync <task-ref> --agent <agent> --body-file <path|-> --change-report-file <path> --result <pr_created|pr_reused|no_op> [--strict] [--dry-run] [--cwd <path>]
 `;
-const BOOLEAN_FLAGS = new Set(['--draft', '--dry-run', '--metadata', '--closing-issue']);
-const VALUE_FLAGS = new Set(['--cwd', '--agent', '--base', '--head', '--title-file', '--body-file', '--pr', '--result']);
+const BOOLEAN_FLAGS = new Set(['--draft', '--dry-run', '--metadata', '--closing-issue', '--strict']);
+const VALUE_FLAGS = new Set(['--cwd', '--agent', '--base', '--head', '--title-file', '--body-file', '--change-report-file', '--mechanical-file', '--precheck-file', '--pr', '--result']);
 function key(flag) {
     return flag.slice(2).replace(/-([a-z])/g, (_, letter) => letter.toUpperCase());
 }
@@ -53,16 +55,37 @@ function parse(args, start) {
 function readFile(value, cwd) {
     return value === '-' ? fs.readFileSync(0, 'utf8') : fs.readFileSync(path.resolve(cwd, value), 'utf8');
 }
-function platformPr(args = []) {
+async function platformPr(args = []) {
     if (args[0] === '--help' || args[0] === '-h') {
         process.stdout.write(USAGE);
         return;
     }
     const operation = args[0];
-    if (!operation || !['inspect', 'resolve-external', 'create', 'bind', 'skip', 'sync', 'summary-context', 'summary-sync'].includes(operation)) {
+    if (!operation || !['inspect', 'resolve-external', 'create', 'bind', 'skip', 'sync', 'sync-in-labels', 'summary-context', 'change-report', 'summary-sync'].includes(operation)) {
         fail('a valid operation is required');
         return;
     }
+    if (operation === 'sync-in-labels') {
+        const parsed = parse(args, 1);
+        if (parsed.error) {
+            fail(parsed.error);
+            return;
+        }
+        const values = parsed.values;
+        const unexpected = Object.keys(values).find((name) => !['cwd', 'pr', 'dryRun'].includes(name));
+        if (unexpected) {
+            fail(`sync-in-labels does not accept --${unexpected}`);
+            return;
+        }
+        const pr = Number(values.pr);
+        if (!Number.isInteger(pr) || pr <= 0) {
+            fail('sync-in-labels requires a positive --pr');
+            return;
+        }
+        const cwd = path.resolve(typeof values.cwd === 'string' ? values.cwd : process.cwd());
+        finish(await syncPlatformPullRequestInLabels(pr, { cwd, dryRun: values.dryRun === true }));
+        return;
+    }
     const taskRef = args[1];
     if (!taskRef || taskRef.startsWith('--')) {
         fail(`${operation} requires a task ref`);
@@ -82,8 +105,10 @@ function platformPr(args = []) {
         bind: ['cwd', 'agent', 'pr', 'dryRun'],
         skip: ['cwd', 'agent', 'dryRun'],
         sync: ['cwd', 'agent', 'metadata', 'closingIssue', 'result', 'dryRun'],
+        'sync-in-labels': ['cwd', 'pr', 'dryRun'],
         'summary-context': ['cwd'],
-        'summary-sync': ['cwd', 'agent', 'bodyFile', 'result', 'dryRun']
+        'change-report': ['cwd', 'agent', 'mechanicalFile', 'precheckFile', 'dryRun'],
+        'summary-sync': ['cwd', 'agent', 'bodyFile', 'changeReportFile', 'result', 'dryRun', 'strict']
     };
     const unexpected = Object.keys(values).find((name) => !allowed[operation].includes(name));
     if (unexpected) {
@@ -91,11 +116,11 @@ function platformPr(args = []) {
         return;
     }
     if (operation === 'inspect') {
-        finish(inspectPlatformPullRequest(taskRef, { cwd }));
+        finish(await inspectPlatformPullRequest(taskRef, { cwd }));
         return;
     }
     if (operation === 'summary-context') {
-        finish(summaryContext(taskRef, { cwd }));
+        finish(await summaryContext(taskRef, { cwd }));
         return;
     }
     if (typeof values.agent !== 'string' || !values.agent) {
@@ -108,8 +133,18 @@ function platformPr(args = []) {
         return;
     }
     values.agent = agent;
+    if (operation === 'change-report') {
+        if (typeof values.mechanicalFile !== 'string' || typeof values.precheckFile !== 'string') {
+            fail('change-report requires --mechanical-file and --precheck-file');
+            return;
+        }
+        finish(await reportWrite(taskRef, {
+            cwd, agent: values.agent, mechanicalFile: values.mechanicalFile, precheckFile: values.precheckFile, dryRun: values.dryRun === true
+        }));
+        return;
+    }
     if (operation === 'skip') {
-        finish(skipPlatformPullRequestFact(taskRef, { cwd, agent, dryRun: values.dryRun === true }));
+        finish(await skipPlatformPullRequestFact(taskRef, { cwd, agent, dryRun: values.dryRun === true }));
         return;
     }
     const primaryResult = values.result === undefined ? undefined : values.result;
@@ -118,21 +153,21 @@ function platformPr(args = []) {
         return;
     }
     if (operation === 'resolve-external') {
-        const pr = values.pr === undefined ? undefined : Number(values.pr);
-        if (pr !== undefined && (!Number.isInteger(pr) || pr <= 0)) {
-            fail('resolve-external requires a positive --pr');
+        const pr = values.pr === undefined ? undefined : values.pr;
+        if (pr !== undefined && (typeof pr !== 'string' || !pr)) {
+            fail('resolve-external requires --pr <token>');
             return;
         }
-        finish(resolveExternalPullRequest(taskRef, { cwd, agent: values.agent, pr, dryRun: values.dryRun === true }));
+        finish(await resolveExternalPullRequest(taskRef, { cwd, agent: values.agent, pr, dryRun: values.dryRun === true }));
         return;
     }
     if (operation === 'bind') {
-        const pr = Number(values.pr);
-        if (!Number.isInteger(pr) || pr <= 0) {
-            fail('bind requires a positive --pr');
+        const pr = values.pr;
+        if (typeof pr !== 'string' || !pr) {
+            fail('bind requires --pr <token>');
             return;
         }
-        finish(bindPlatformPullRequest(taskRef, { cwd, agent: values.agent, pr, dryRun: values.dryRun === true }));
+        finish(await bindPlatformPullRequest(taskRef, { cwd, agent: values.agent, pr, dryRun: values.dryRun === true }));
         return;
     }
     if (operation === 'sync') {
@@ -144,7 +179,7 @@ function platformPr(args = []) {
             fail('sync requires --result pr_created, pr_reused, or no_op');
             return;
         }
-        finish(syncPlatformPullRequest(taskRef, { cwd, agent: values.agent, metadata: values.metadata === true, closingIssue: values.closingIssue === true, primaryResult: primaryResult, dryRun: values.dryRun === true }));
+        finish(await syncPlatformPullRequest(taskRef, { cwd, agent: values.agent, metadata: values.metadata === true, closingIssue: values.closingIssue === true, primaryResult: primaryResult, dryRun: values.dryRun === true }));
         return;
     }
     if (operation === 'summary-sync') {
@@ -152,12 +187,16 @@ function platformPr(args = []) {
             fail('summary-sync requires --body-file');
             return;
         }
+        if (typeof values.changeReportFile !== 'string') {
+            fail('summary-sync requires --change-report-file');
+            return;
+        }
         if (!primaryResult) {
             fail('summary-sync requires --result pr_created, pr_reused, or no_op');
             return;
         }
         try {
-            finish(syncPullRequestSummary(taskRef, { cwd, agent: values.agent, body: readFile(values.bodyFile, cwd), primaryResult: primaryResult, dryRun: values.dryRun === true }));
+            finish(await syncPullRequestSummary(taskRef, { cwd, agent: values.agent, body: readFile(values.bodyFile, cwd), changeReportFile: values.changeReportFile, primaryResult: primaryResult, dryRun: values.dryRun === true, strict: values.strict === true }));
         }
         catch (error) {
             fail(`unable to read body file: ${error instanceof Error ? error.message : String(error)}`);
@@ -169,7 +208,7 @@ function platformPr(args = []) {
         return;
     }
     try {
-        finish(createPlatformPullRequest(taskRef, {
+        finish(await createPlatformPullRequest(taskRef, {
             cwd, agent: values.agent, base: values.base, head: values.head,
             title: readFile(values.titleFile, cwd), body: readFile(values.bodyFile, cwd),
             draft: values.draft === true, dryRun: values.dryRun === true

package/dist/lib/internal/platform-release-notes.js

@@ -28,7 +28,7 @@ function finish(result) {
     process.stdout.write(`${JSON.stringify(result)}\n`);
     process.exitCode = result.status === 'blocked' ? 2 : result.status === 'failed' ? 1 : 0;
 }
-function platformReleaseNotes(args = []) {
+async function platformReleaseNotes(args = []) {
     const [action, ...rest] = args;
     if (action === 'context') {
         const parsed = parseOptions(rest, ['--cwd', '--history-limit', '--from-tag', '--to-tag', '--branch']);
@@ -36,7 +36,7 @@ function platformReleaseNotes(args = []) {
             return finish(invalidInput('invalid context options'));
         const cwd = path.resolve(parsed.values.get('--cwd') || process.cwd());
         const historyRaw = parsed.values.get('--history-limit') ?? null;
-        finish(releaseNoteContext({
+        finish(await releaseNoteContext({
             fromTag: parsed.values.get('--from-tag') || '',
             toTag: parsed.values.get('--to-tag') || '',
             branch: parsed.values.get('--branch') || '',
@@ -69,7 +69,7 @@ function platformReleaseNotes(args = []) {
             fs.writeFileSync(resolvedNotesPath, fs.readFileSync(0));
         }
         try {
-            finish(publishReleaseNotes({
+            finish(await publishReleaseNotes({
                 tag: parsed.values.get('--tag') || '',
                 title: parsed.values.get('--title') || parsed.values.get('--tag') || '',
                 notesFile: resolvedNotesPath,

package/dist/lib/internal/pr-review-grade.js

@@ -4,7 +4,7 @@ import { collectHostCandidates, decide, deriveTaskIssueMatches, extractClosingIs
 import { inspectPlatformPullRequestByNumber } from '../platform/pull-requests.js';
 import { verifyInProcess } from '../task/verification-engine.js';
 const USAGE = `Usage: agent-infra-internal pr-review-grade decide --input-file <path|-> [--cwd <path>]
-       agent-infra-internal pr-review-grade resolve-host --pr <N> [--cwd <path>]
+       agent-infra-internal pr-review-grade resolve-host --pr <token> [--cwd <path>]
        agent-infra-internal pr-review-grade verify-artifact --artifact-file <path> [--cwd <path>]
 `;
 function fail(message) {
@@ -38,7 +38,7 @@ function parseFlags(args, start) {
 function readInput(value, cwd) {
     return value === '-' ? fs.readFileSync(0, 'utf8') : fs.readFileSync(path.resolve(cwd, value), 'utf8');
 }
-function prReviewGrade(args = []) {
+async function prReviewGrade(args = []) {
     if (args[0] === '--help' || args[0] === '-h') {
         process.stdout.write(USAGE);
         return;
@@ -89,12 +89,12 @@ function prReviewGrade(args = []) {
         return;
     }
     if (operation === 'resolve-host') {
-        const pr = Number(values.pr);
-        if (!Number.isInteger(pr) || pr <= 0) {
-            fail('resolve-host requires a positive --pr');
+        const pr = typeof values.pr === 'string' ? values.pr : '';
+        if (!pr) {
+            fail('resolve-host requires --pr <token>');
             return;
         }
-        const inspected = inspectPlatformPullRequestByNumber(pr, { cwd });
+        const inspected = await inspectPlatformPullRequestByNumber(pr, { cwd });
         if (!inspected.pullRequest) {
             finish({
                 status: 'failed', changed: false, host: null, candidates: [], closingIssues: [],
@@ -102,12 +102,14 @@ function prReviewGrade(args = []) {
             }, inspected.status === 'blocked' ? 2 : 1);
             return;
         }
+        const prNumber = inspected.pullRequest.number;
+        const prIdentity = inspected.pullRequest.identity || { kind: 'number', value: prNumber };
         const closingIssues = extractClosingIssueNumbers(inspected.pullRequest.body);
-        const candidates = collectHostCandidates({ prNumber: pr, closingIssues, workspaceRoot: cwd });
+        const candidates = collectHostCandidates({ prNumber, prIdentity, closingIssues, workspaceRoot: cwd });
         const host = resolveHostFromCandidates(candidates);
         finish({
             status: 'ok', changed: false,
-            pr: { number: pr, baseSha: inspected.pullRequest.base.sha, headSha: inspected.pullRequest.head.sha, state: inspected.pullRequest.state },
+            pr: { number: prNumber, identity: prIdentity, baseSha: inspected.pullRequest.base.sha, headSha: inspected.pullRequest.head.sha, state: inspected.pullRequest.state },
             closingIssues, candidates, host,
             taskIssueMatches: deriveTaskIssueMatches(host, closingIssues), error: null
         });
@@ -120,7 +122,7 @@ function prReviewGrade(args = []) {
     const artifactPath = path.resolve(cwd, values.artifactFile);
     let result;
     try {
-        result = verifyInProcess({
+        result = await verifyInProcess({
             mode: 'checks',
             skillName: 'review-pr',
             taskDir: path.dirname(artifactPath),

package/dist/lib/internal/release-workflow.js

@@ -236,7 +236,7 @@ async function inspectFacts(cwd, version) {
     const local = inspectLocalReleaseFacts(cwd, version);
     const remoteBranch = branch ? git(cwd, ['ls-remote', '--heads', 'origin', branch]) : null;
     const remoteTag = git(cwd, ['ls-remote', '--tags', 'origin', `refs/tags/${tag}`]);
-    const platform = inspectPlatformRelease(tag, { cwd });
+    const platform = await inspectPlatformRelease(tag, { cwd });
     const npm = await inspectNpmChannel(pkg.name, version);
     const formulaUrl = `https://raw.githubusercontent.com/${config.org}/homebrew-tap/main/Formula/${config.project}.rb`;
     const homebrew = await inspectHomebrewChannel(formulaUrl, version);
@@ -247,7 +247,7 @@ async function inspectFacts(cwd, version) {
         localTagAncestor: local.localTagAncestor,
         localTagConflict: local.localTagConflict,
         remoteBranch: Boolean(remoteBranch && remoteBranch.split(/\s+/)[0] === head), remoteTag: Boolean(remoteTag),
-        githubRelease: platform.platform.type !== 'github'
+        githubRelease: platform.error?.code === 'PLATFORM_CAPABILITY_UNSUPPORTED'
             ? true
             : platform.status === 'blocked' ? null : Boolean(platform.release?.published),
         npm: npm.published, homebrew: homebrew.published, smoke,
@@ -312,7 +312,7 @@ async function releaseWorkflow(args = []) {
     }
     if (action === 'prepare') {
         if (before.phase !== 'unprepared') {
-            const milestones = reconcileReleaseMilestones(version, { cwd });
+            const milestones = await reconcileReleaseMilestones(version, { cwd });
             process.stdout.write(`${JSON.stringify({ ...milestones, snapshot: before })}\n`);
             process.exitCode = milestones.status === 'failed' ? 1 : milestones.status === 'blocked' ? 2 : 0;
             return;
@@ -354,7 +354,7 @@ async function releaseWorkflow(args = []) {
             return;
         }
         const tagged = command(cwd, 'git', ['tag', '-a', `v${version}`, '-m', `Release v${version}`]);
-        const milestones = tagged.status === 0 ? reconcileReleaseMilestones(version, { cwd }) : null;
+        const milestones = tagged.status === 0 ? await reconcileReleaseMilestones(version, { cwd }) : null;
         const snapshot = releaseSnapshot(version, await inspectFacts(cwd, version));
         const failed = tagged.status !== 0 || milestones?.status === 'failed';
         const blocked = milestones?.status === 'blocked';

package/dist/lib/internal/sandbox-control.js

@@ -1,4 +1,4 @@
-import { requestSandboxControl, requestSandboxTaskFinalization, requestSandboxTaskControl, SandboxControlClientError } from '../sandbox/control/client.js';
+import { recoverSandboxControl, requestSandboxControl, requestSandboxTaskFinalization, requestSandboxTaskControl, SandboxControlClientError } from '../sandbox/control/client.js';
 import { normalizeAgentToken, AGENT_USAGE_HINT } from '../agent-clients/tokens.js';
 import { serveSandboxControl } from '../sandbox/control/server.js';
 import { runSandboxControlExecutor } from '../sandbox/control/executor.js';
@@ -23,6 +23,11 @@ function finalizationErrorStatus(error) {
         return 'unknown';
     return error.retryable ? 'blocked' : 'failed';
 }
+function writeClientError(error) {
+    process.stderr.write(`${error.detail.message}\n`);
+    if (error.requestId)
+        process.stderr.write(`SANDBOX_CONTROL_REQUEST_ID: ${error.requestId}\n`);
+}
 function sandboxFinalizationClient(args) {
     if (args.length !== 4 || !args[0] || args[1] !== 'complete' || args[2] !== '--agent' || !args[3]) {
         const error = { code: 'TASK_FINALIZATION_PAYLOAD_INVALID', message: 'task ref, complete intent, and --agent are required', retryable: false };
@@ -46,7 +51,7 @@ function sandboxFinalizationClient(args) {
         if (!(error instanceof SandboxControlClientError))
             throw error;
         writeFinalizationEnvelope(finalizationErrorStatus(error.detail), error.accepted, error.detail);
-        process.stderr.write(`${error.detail.message}\n`);
+        writeClientError(error);
         process.exitCode = error.detail.code === 'SANDBOX_CONTROL_RESULT_UNKNOWN' ? 1 : error.detail.retryable ? 2 : 1;
         return;
     }
@@ -95,6 +100,27 @@ async function sandboxControl(args) {
         await runSandboxControlExecutor(request, nonce);
         return;
     }
+    if (operation === 'recover') {
+        if (rest.length !== 1 || !rest[0])
+            throw new Error('sandbox-control recover requires <request-id>');
+        let response;
+        try {
+            response = recoverSandboxControl(rest[0]);
+        }
+        catch (error) {
+            if (!(error instanceof SandboxControlClientError))
+                throw error;
+            writeClientError(error);
+            process.exitCode = error.detail.code === 'SANDBOX_CONTROL_RESULT_UNKNOWN' ? 1 : error.detail.retryable ? 75 : 1;
+            return;
+        }
+        process.stdout.write(response.stdout);
+        process.stderr.write(response.stderr);
+        process.exitCode = response.phase === 'rejected'
+            ? response.error?.retryable ? 75 : 1
+            : response.exitCode ?? 1;
+        return;
+    }
     if (operation === 'client') {
         const [family = '', ...commandArgs] = rest;
         if (family === 'task-finalization') {
@@ -117,7 +143,7 @@ async function sandboxControl(args) {
         catch (error) {
             if (!(error instanceof SandboxControlClientError))
                 throw error;
-            process.stderr.write(`${error.detail.message}\n`);
+            writeClientError(error);
             process.exitCode = error.detail.retryable ? 75 : 1;
             return;
         }
@@ -132,7 +158,7 @@ async function sandboxControl(args) {
         }
         return;
     }
-    throw new Error('Usage: agent-infra-internal sandbox-control serve --manifest <path> | execute --request <path> --nonce <nonce> | client <family> [args...]');
+    throw new Error('Usage: agent-infra-internal sandbox-control serve --manifest <path> | execute --request <path> --nonce <nonce> | client <family> [args...] | recover <request-id>');
 }
 export { sandboxControl };
 //# sourceMappingURL=sandbox-control.js.map

package/dist/lib/internal/task-activity.js

@@ -32,7 +32,7 @@ function usageFailure(message) {
     process.stderr.write(USAGE);
     process.exitCode = 1;
 }
-function taskActivity(args = []) {
+async function taskActivity(args = []) {
     if (args[0] === '--help' || args[0] === '-h') {
         process.stdout.write(USAGE);
         return;
@@ -113,7 +113,7 @@ function taskActivity(args = []) {
     let result;
     let humanOverride = null;
     try {
-        result = withTaskExecutionLock(resolved.repoRoot, resolved.taskId, `task-activity.${kind}`, () => {
+        result = await withTaskExecutionLock(resolved.repoRoot, resolved.taskId, `task-activity.${kind}`, async () => {
             let current = applyPrReviewActivityIntent(values, { lockAlreadyHeld: true });
             if (current.status !== 'failed' || !values.overrideTicket)
                 return current;
@@ -121,7 +121,7 @@ function taskActivity(args = []) {
                 usageFailure('override ticket requires target and scope');
                 return current;
             }
-            const consumed = consumeHumanOverride({
+            const consumed = await consumeHumanOverride({
                 taskRef, ticketId: String(values.overrideTicket),
                 failureId: failureId('activity-intent', current.error?.code ?? 'TASK_STATE_MISMATCH'),
                 target: String(values.overrideTarget), scope: String(values.overrideScope)

package/dist/lib/internal/task-artifact.js

@@ -1,5 +1,8 @@
 import { resolveArtifactContext } from '../task/artifact-lifecycle.js';
-const USAGE = `Usage: agent-infra-internal task-artifact <N | TASK-id> inspect --family <family>\n\nInspect one workflow artifact family and print a read-only JSON context.\n`;
+import { finalizeLocalArtifact } from '../task/local-artifact-finalization.js';
+import { resolveTaskRef } from '../task/resolve-ref.js';
+import { loadVerificationConfig } from '../task/verification-config.js';
+const USAGE = `Usage: agent-infra-internal task-artifact <N | TASK-id> inspect --family <family>\n       agent-infra-internal task-artifact <N | TASK-id> finalize-local --family <analysis|plan|code> --artifact <artifact>\n\nInspect workflow artifact context or finalize a local analysis/plan/code artifact without changing task state.\n`;
 function failUsage(message) {
     process.stdout.write(`${JSON.stringify({ status: 'failed', changed: false, error: { code: 'ARTIFACT_PAYLOAD_INVALID', message } })}\n`);
     process.stderr.write(USAGE);
@@ -14,15 +17,17 @@ function taskArtifact(args = []) {
         failUsage('task ref and operation are required');
         return;
     }
-    if (args[1] !== 'inspect') {
-        failUsage(`unknown operation '${args[1]}'`);
+    const operation = args[1];
+    if (operation !== 'inspect' && operation !== 'finalize-local') {
+        failUsage(`unknown operation '${operation}'`);
         return;
     }
     let family = '';
+    let artifact = '';
     const seen = new Set();
     for (let index = 2; index < args.length; index += 1) {
         const flag = args[index];
-        if (flag !== '--family') {
+        if (flag !== '--family' && flag !== '--artifact') {
             failUsage(`unknown option '${flag}'`);
             return;
         }
@@ -36,32 +41,79 @@ function taskArtifact(args = []) {
             return;
         }
         seen.add(flag);
-        family = value;
+        if (flag === '--family')
+            family = value;
+        else
+            artifact = value;
     }
     if (!family) {
         failUsage("option '--family' is required");
         return;
     }
-    const result = resolveArtifactContext(args[0], family);
-    const output = family === 'code' && result.codeMode ? {
-        ...result,
-        mode: result.codeMode.mode,
-        code_max: result.codeMode.codeMax,
-        rev_max: result.codeMode.reviewMax,
-        verdict: result.codeMode.verdict,
-        next_round: result.next?.round ?? null,
-        next_artifact: result.next?.name ?? null,
-        review_artifact: result.codeMode.reviewArtifact,
-        implementation_input: result.codeMode.implementationInput,
-        decision_id: result.codeMode.decisionId,
-        decision_evidence: result.codeMode.decisionEvidence,
-        message: result.codeMode.message
-    } : result;
-    process.stdout.write(`${JSON.stringify(output)}\n`);
-    if (result.status === 'refused')
+    if (operation === 'inspect') {
+        if (artifact) {
+            failUsage("option '--artifact' is only valid for finalize-local");
+            return;
+        }
+        const result = resolveArtifactContext(args[0], family);
+        const output = family === 'code' && result.codeMode ? {
+            ...result,
+            mode: result.codeMode.mode,
+            code_max: result.codeMode.codeMax,
+            rev_max: result.codeMode.reviewMax,
+            verdict: result.codeMode.verdict,
+            next_round: result.next?.round ?? null,
+            next_artifact: result.next?.name ?? null,
+            review_artifact: result.codeMode.reviewArtifact,
+            implementation_input: result.codeMode.implementationInput,
+            decision_id: result.codeMode.decisionId,
+            decision_evidence: result.codeMode.decisionEvidence,
+            message: result.codeMode.message
+        } : result;
+        process.stdout.write(`${JSON.stringify(output)}\n`);
+        if (result.status === 'refused')
+            process.exitCode = 1;
+        else if (result.status === 'failed')
+            process.exitCode = 2;
+        return;
+    }
+    const resolved = resolveTaskRef(args[0]);
+    const repositoryRoot = resolved.ok ? resolved.repoRoot : process.cwd();
+    if (!artifact) {
+        failUsage("option '--artifact' is required");
+        return;
+    }
+    if (family !== 'analysis' && family !== 'plan' && family !== 'code') {
+        failUsage("finalize-local only supports 'analysis', 'plan', and 'code'");
+        return;
+    }
+    const skillName = family === 'analysis' ? 'analyze-task' : family === 'plan' ? 'plan-task' : 'code-task';
+    let config = {};
+    try {
+        const loaded = loadVerificationConfig(repositoryRoot, skillName);
+        const artifactConfig = loaded.checks.artifact;
+        if (artifactConfig && typeof artifactConfig === 'object' && !Array.isArray(artifactConfig)) {
+            const sections = artifactConfig.required_sections;
+            const patterns = artifactConfig.required_patterns;
+            config = {
+                requiredSections: Array.isArray(sections) ? sections.filter((value) => typeof value === 'string') : undefined,
+                requiredPatterns: Array.isArray(patterns) ? patterns.filter((value) => typeof value === 'string') : undefined
+            };
+        }
+    }
+    catch {
+        // Isolated fixture repositories may not contain the project's verification config.
+    }
+    const result = finalizeLocalArtifact({
+        taskRef: args[0],
+        family: family,
+        artifact,
+        repoRoot: repositoryRoot,
+        ...config
+    });
+    process.stdout.write(`${JSON.stringify(result)}\n`);
+    if (result.status === 'failed')
         process.exitCode = 1;
-    else if (result.status === 'failed')
-        process.exitCode = 2;
 }
 export { taskArtifact };
 //# sourceMappingURL=task-artifact.js.map

package/dist/lib/internal/task-create.js

@@ -14,7 +14,7 @@ function output(result) {
     process.stdout.write(`${JSON.stringify(result)}\n`);
     process.exitCode = result.status === 'blocked' ? 2 : result.status === 'failed' ? 1 : 0;
 }
-function taskCreate(args) {
+async function taskCreate(args) {
     const inputIndex = args.indexOf('--input');
     const input = inputIndex >= 0 ? args[inputIndex + 1] : undefined;
     if (!input || args.length !== 2 || inputIndex !== 0) {
@@ -40,7 +40,7 @@ function taskCreate(args) {
             process.exitCode = response.exitCode;
             return;
         }
-        output(createTask(candidate, { repoRoot: process.cwd() }));
+        output(await createTask(candidate, { repoRoot: process.cwd() }));
     }
     catch (error) {
         if (error instanceof SandboxControlClientError) {

package/dist/lib/internal/task-event.js

@@ -10,6 +10,9 @@ Events: ${eventCatalog.join(', ')}
 `;
 const FLAGS = {
     '--agent': 'agent', '--round': 'round', '--question': 'question', '--artifact': 'artifact',
+    '--artifact-sha256': 'artifactSha256', '--semantic-digest': 'semanticDigest',
+    '--initiator': 'initiator', '--request-id': 'requestId', '--reason-code': 'reasonCode',
+    '--source-finding': 'sourceFinding', '--source-artifact': 'sourceArtifact', '--source-sha256': 'sourceSha256',
     '--fix-for': 'fixFor', '--implementation-input': 'implementationInput',
     '--verdict': 'verdict', '--blockers': 'blockers', '--major': 'major',
     '--minor': 'minor', '--manual-validation': 'manualValidation', '--files-modified': 'filesModified',
@@ -22,7 +25,7 @@ function usageFailure(message) {
     process.stderr.write(USAGE);
     process.exitCode = 1;
 }
-function taskEvent(args = []) {
+async function taskEvent(args = []) {
     if (args[0] === '--help' || args[0] === '-h') {
         process.stdout.write(USAGE);
         return;
@@ -95,7 +98,7 @@ function taskEvent(args = []) {
     let result;
     let humanOverride = null;
     try {
-        result = withTaskExecutionLock(resolved.repoRoot, resolved.taskId, `task-event.${request.event}`, () => {
+        result = await withTaskExecutionLock(resolved.repoRoot, resolved.taskId, `task-event.${request.event}`, async () => {
             let current = applyTaskEvent(request, { lockAlreadyHeld: true });
             const values = request;
             if (current.status !== 'failed' || !values.overrideTicket)
@@ -103,7 +106,7 @@ function taskEvent(args = []) {
             if (!values.overrideTarget || !values.overrideScope) {
                 return { ...current, humanOverride: { status: 'failed', error: { code: 'OVERRIDE_PAYLOAD_INVALID', message: 'override ticket requires target and scope' } } };
             }
-            const consumed = consumeHumanOverride({
+            const consumed = await consumeHumanOverride({
                 taskRef: request.taskRef,
                 ticketId: String(values.overrideTicket),
                 failureId: failureId('task-event', current.error?.code ?? 'EVENT_TRANSITION_INVALID'),

package/dist/lib/internal/task-finalization.js

@@ -18,7 +18,7 @@ function parseFailure(error) {
     const message = error instanceof Error ? error.message : String(error);
     return message.replace(/^TASK_CONTROL_OPERATION_INVALID: /u, '');
 }
-function taskFinalization(args = []) {
+async function taskFinalization(args = []) {
     if (args[0] === '--help' || args[0] === '-h') {
         process.stdout.write(USAGE);
         return;
@@ -56,7 +56,7 @@ function taskFinalization(args = []) {
         ...operation,
         request: { ...operation.request, taskRef: resolved.taskId }
     };
-    const result = dispatchTaskControlOperation(createDirectHostExecutionContext({ repoRoot }), boundOperation);
+    const result = await dispatchTaskControlOperation(createDirectHostExecutionContext({ repoRoot }), boundOperation);
     process.stdout.write(envelope(result.status, result.changed, true, result, result.error));
     process.exitCode = exitCode(result.status);
 }