@fitlab-ai/agent-infra 0.9.2 → 0.9.4

package/lib/internal/platform-pr-review.ts

@@ -0,0 +1,104 @@
+import fs from 'node:fs';
+import path from 'node:path';
+
+import { inspectPlatformPullRequestByNumber } from '../platform/pull-requests.ts';
+import { listPrReviews, publishPrReview } from '../platform/pr-review.ts';
+import type { PrReviewEvent } from '../platform/pr-review.ts';
+import type { PlatformResult } from '../platform/types.ts';
+
+const USAGE = `Usage: agent-infra-internal platform-pr-review inspect --pr <N> [--cwd <path>]
+       agent-infra-internal platform-pr-review list --pr <N> [--cwd <path>]
+       agent-infra-internal platform-pr-review publish --pr <N> --scope <taskId|pr{N}> --round <N> --commit <sha> --event <COMMENT|APPROVE|REQUEST_CHANGES> --body-file <path|-> [--dry-run] [--cwd <path>]
+`;
+
+const BOOLEAN_FLAGS = new Set(['--dry-run']);
+const VALUE_FLAGS = new Set(['--cwd', '--pr', '--scope', '--round', '--commit', '--event', '--body-file']);
+
+function key(flag: string): string {
+  return flag.slice(2).replace(/-([a-z])/g, (_, letter: string) => letter.toUpperCase());
+}
+
+function fail(message: string): void {
+  process.stdout.write(`${JSON.stringify({ status: 'failed', changed: false, error: { code: 'PR_REVIEW_PAYLOAD_INVALID', message } })}\n`);
+  process.stderr.write(USAGE);
+  process.exitCode = 1;
+}
+
+function finish(output: PlatformResult): void {
+  process.stdout.write(`${JSON.stringify(output)}\n`);
+  if (output.status === 'failed') process.exitCode = 1;
+  if (output.status === 'blocked') process.exitCode = 2;
+}
+
+function parse(args: string[], start: number) {
+  const values: Record<string, string | boolean> = {};
+  const seen = new Set<string>();
+  for (let index = start; index < args.length; index += 1) {
+    const flag = args[index]!;
+    if (!BOOLEAN_FLAGS.has(flag) && !VALUE_FLAGS.has(flag)) return { values, error: `unknown option '${flag}'` };
+    if (seen.has(flag)) return { values, error: `duplicate option '${flag}'` };
+    seen.add(flag);
+    if (BOOLEAN_FLAGS.has(flag)) { values[key(flag)] = true; continue; }
+    const value = args[++index];
+    if (value === undefined || value.startsWith('--')) return { values, error: `option '${flag}' requires a value` };
+    values[key(flag)] = value;
+  }
+  return { values };
+}
+
+function readBodyFile(value: string, cwd: string): string {
+  return value === '-' ? fs.readFileSync(0, 'utf8') : fs.readFileSync(path.resolve(cwd, value), 'utf8');
+}
+
+function platformPrReview(args: string[] = []): void {
+  if (args[0] === '--help' || args[0] === '-h') { process.stdout.write(USAGE); return; }
+  const operation = args[0];
+  if (!operation || !['inspect', 'list', 'publish'].includes(operation)) { fail('a valid operation is required'); return; }
+  const parsed = parse(args, 1);
+  if (parsed.error) { fail(parsed.error); return; }
+  const values = parsed.values;
+  const cwd = path.resolve(typeof values.cwd === 'string' ? values.cwd : process.cwd());
+  const allowed: Record<string, string[]> = {
+    inspect: ['cwd', 'pr'],
+    list: ['cwd', 'pr'],
+    publish: ['cwd', 'pr', 'scope', 'round', 'commit', 'event', 'bodyFile', 'dryRun']
+  };
+  const unexpected = Object.keys(values).find((name) => !allowed[operation]!.includes(name));
+  if (unexpected) { fail(`${operation} does not accept --${unexpected}`); return; }
+  const pr = Number(values.pr);
+  if (!Number.isInteger(pr) || pr <= 0) { fail(`${operation} requires a positive --pr`); return; }
+  if (operation === 'inspect') {
+    finish(inspectPlatformPullRequestByNumber(pr, { cwd }));
+    return;
+  }
+  if (operation === 'list') {
+    finish(listPrReviews(pr, { cwd }));
+    return;
+  }
+  const scope = typeof values.scope === 'string' ? values.scope : '';
+  const round = Number(values.round);
+  const commit = typeof values.commit === 'string' ? values.commit : '';
+  const event = values.event as string;
+  if (!scope || !/^(?:pr\d+|TASK-\d{8}-\d{6})$/.test(scope)) { fail('publish requires --scope <taskId|pr{N}>'); return; }
+  if (!Number.isInteger(round) || round <= 0) { fail('publish requires a positive --round'); return; }
+  if (!/^[0-9a-f]{7,40}$/i.test(commit)) { fail('publish requires --commit <sha>'); return; }
+  if (!['COMMENT', 'APPROVE', 'REQUEST_CHANGES'].includes(event)) { fail('publish requires --event <COMMENT|APPROVE|REQUEST_CHANGES>'); return; }
+  if (typeof values.bodyFile !== 'string') { fail('publish requires --body-file'); return; }
+  let body: string;
+  try {
+    body = readBodyFile(values.bodyFile, cwd);
+  } catch (error) {
+    fail(`unable to read body file: ${error instanceof Error ? error.message : String(error)}`);
+    return;
+  }
+  finish(publishPrReview({
+    cwd,
+    prNumber: pr,
+    identity: { scope, round, commitSha: commit },
+    event: event as PrReviewEvent,
+    body,
+    dryRun: values.dryRun === true
+  }));
+}
+
+export { platformPrReview };

package/lib/internal/platform-pr.ts

@@ -1,10 +1,12 @@
 import fs from 'node:fs';
 import path from 'node:path';
 
+import { normalizeAgentToken, AGENT_USAGE_HINT } from '../agent-clients/tokens.ts';
 import {
   bindPlatformPullRequest,
   createPlatformPullRequest,
   inspectPlatformPullRequest,
+  resolveExternalPullRequest,
   syncPlatformPullRequest
 } from '../platform/pull-requests.ts';
 import type { PullRequestResult } from '../platform/pull-requests.ts';
@@ -12,6 +14,7 @@ import { summaryContext, syncPullRequestSummary } from '../platform/pr-summary.t
 import type { PlatformResult } from '../platform/types.ts';
 
 const USAGE = `Usage: agent-infra-internal platform-pr inspect <task-ref> [--cwd <path>]
+       agent-infra-internal platform-pr resolve-external <task-ref> --agent <agent> [--pr <N>] [--dry-run] [--cwd <path>]
        agent-infra-internal platform-pr create <task-ref> --agent <agent> --base <branch> --head <branch> --title-file <path|-> --body-file <path|-> [--draft] [--dry-run] [--cwd <path>]
        agent-infra-internal platform-pr bind <task-ref> --pr <N> --agent <agent> [--dry-run] [--cwd <path>]
        agent-infra-internal platform-pr sync <task-ref> --agent <agent> [--metadata] [--closing-issue] [--dry-run] [--cwd <path>]
@@ -61,7 +64,7 @@ function readFile(value: string, cwd: string): string {
 function platformPr(args: string[] = []): void {
   if (args[0] === '--help' || args[0] === '-h') { process.stdout.write(USAGE); return; }
   const operation = args[0];
-  if (!operation || !['inspect', 'create', 'bind', 'sync', 'summary-context', 'summary-sync'].includes(operation)) { fail('a valid operation is required'); return; }
+  if (!operation || !['inspect', 'resolve-external', 'create', 'bind', 'sync', 'summary-context', 'summary-sync'].includes(operation)) { fail('a valid operation is required'); return; }
   const taskRef = args[1];
   if (!taskRef || taskRef.startsWith('--')) { fail(`${operation} requires a task ref`); return; }
   const parsed = parse(args, 2);
@@ -70,6 +73,7 @@ function platformPr(args: string[] = []): void {
   const cwd = path.resolve(typeof values.cwd === 'string' ? values.cwd : process.cwd());
   const allowed: Record<string, string[]> = {
     inspect: ['cwd'],
+    'resolve-external': ['cwd', 'agent', 'pr', 'dryRun'],
     create: ['cwd', 'agent', 'base', 'head', 'titleFile', 'bodyFile', 'draft', 'dryRun'],
     bind: ['cwd', 'agent', 'pr', 'dryRun'],
     sync: ['cwd', 'agent', 'metadata', 'closingIssue', 'dryRun'],
@@ -81,6 +85,15 @@ function platformPr(args: string[] = []): void {
   if (operation === 'inspect') { finish(inspectPlatformPullRequest(taskRef, { cwd })); return; }
   if (operation === 'summary-context') { finish(summaryContext(taskRef, { cwd })); return; }
   if (typeof values.agent !== 'string' || !values.agent) { fail(`${operation} requires --agent`); return; }
+  const agent = normalizeAgentToken(values.agent);
+  if (!agent) { fail(`invalid --agent '${values.agent}': ${AGENT_USAGE_HINT}`); return; }
+  values.agent = agent;
+  if (operation === 'resolve-external') {
+    const pr = values.pr === undefined ? undefined : Number(values.pr);
+    if (pr !== undefined && (!Number.isInteger(pr) || pr <= 0)) { fail('resolve-external requires a positive --pr'); return; }
+    finish(resolveExternalPullRequest(taskRef, { cwd, agent: values.agent, pr, dryRun: values.dryRun === true }));
+    return;
+  }
   if (operation === 'bind') {
     const pr = Number(values.pr);
     if (!Number.isInteger(pr) || pr <= 0) { fail('bind requires a positive --pr'); return; }

package/lib/internal/platform-release-notes.ts

@@ -1,11 +1,34 @@
 import fs from 'node:fs';
 import path from 'node:path';
 
-import { publishReleaseNotes, releaseNoteContext } from '../platform/release-notes.ts';
+import { publishReleaseNotes, releaseNoteContext, stageReleaseNotes } from '../platform/release-notes.ts';
 
-function option(args: string[], name: string): string | null {
-  const index = args.indexOf(name);
-  return index >= 0 && args[index + 1] ? args[index + 1]! : null;
+type ParsedOptions = Readonly<{ values: ReadonlyMap<string, string>; switches: ReadonlySet<string> }>;
+
+function parseOptions(
+  args: string[],
+  valueFlags: readonly string[],
+  switchFlags: readonly string[] = []
+): ParsedOptions | null {
+  const values = new Map<string, string>();
+  const switches = new Set<string>();
+  for (let index = 0; index < args.length; index += 1) {
+    const flag = args[index]!;
+    if (values.has(flag) || switches.has(flag)) return null;
+    if (switchFlags.includes(flag)) {
+      switches.add(flag);
+      continue;
+    }
+    if (!valueFlags.includes(flag)) return null;
+    const value = args[++index];
+    if (!value || value.startsWith('--')) return null;
+    values.set(flag, value);
+  }
+  return { values, switches };
+}
+
+function invalidInput(message: string) {
+  return { status: 'failed', changed: false, error: { code: 'RELEASE_NOTES_INPUT_INVALID', message, retryable: false } };
 }
 
 function finish(result: { status: string; [key: string]: unknown }): void {
@@ -15,21 +38,40 @@ function finish(result: { status: string; [key: string]: unknown }): void {
 
 function platformReleaseNotes(args: string[] = []): void {
   const [action, ...rest] = args;
-  const cwd = path.resolve(option(rest, '--cwd') || process.cwd());
   if (action === 'context') {
-    const historyRaw = option(rest, '--history-limit');
+    const parsed = parseOptions(rest, ['--cwd', '--history-limit', '--from-tag', '--to-tag', '--branch']);
+    if (!parsed) return finish(invalidInput('invalid context options'));
+    const cwd = path.resolve(parsed.values.get('--cwd') || process.cwd());
+    const historyRaw = parsed.values.get('--history-limit') ?? null;
     finish(releaseNoteContext({
-      fromTag: option(rest, '--from-tag') || '',
-      toTag: option(rest, '--to-tag') || '',
-      branch: option(rest, '--branch') || '',
+      fromTag: parsed.values.get('--from-tag') || '',
+      toTag: parsed.values.get('--to-tag') || '',
+      branch: parsed.values.get('--branch') || '',
       historyLimit: historyRaw === null ? undefined : Number(historyRaw)
     }, { cwd }));
     return;
   }
+  if (action === 'stage') {
+    const parsed = parseOptions(rest, ['--cwd', '--notes-file']);
+    if (!parsed) return finish(invalidInput('invalid stage options'));
+    const notesFile = parsed.values.get('--notes-file');
+    if (!notesFile) return finish(invalidInput('notes-file is required'));
+    finish(stageReleaseNotes(
+      { notesFile },
+      { cwd: path.resolve(parsed.values.get('--cwd') || process.cwd()) }
+    ));
+    return;
+  }
   if (action === 'publish') {
-    const notesPath = option(rest, '--notes-file');
+    const parsed = parseOptions(
+      rest,
+      ['--cwd', '--notes-file', '--tag', '--title', '--expected-sha256'],
+      ['--dry-run']
+    );
+    if (!parsed) return finish(invalidInput('invalid publish options'));
+    const notesPath = parsed.values.get('--notes-file');
     if (!notesPath) {
-      finish({ status: 'failed', changed: false, error: { code: 'RELEASE_NOTES_INPUT_INVALID', message: 'notes-file is required', retryable: false } });
+      finish(invalidInput('notes-file is required'));
       return;
     }
     let resolvedNotesPath = notesPath;
@@ -39,17 +81,18 @@ function platformReleaseNotes(args: string[] = []): void {
     }
     try {
       finish(publishReleaseNotes({
-        tag: option(rest, '--tag') || '',
-        title: option(rest, '--title') || option(rest, '--tag') || '',
+        tag: parsed.values.get('--tag') || '',
+        title: parsed.values.get('--title') || parsed.values.get('--tag') || '',
         notesFile: resolvedNotesPath,
-        dryRun: rest.includes('--dry-run')
-      }, { cwd }));
+        expectedSha256: parsed.values.get('--expected-sha256') || '',
+        dryRun: parsed.switches.has('--dry-run')
+      }, { cwd: path.resolve(parsed.values.get('--cwd') || process.cwd()) }));
     } finally {
       if (notesPath === '-') fs.rmSync(resolvedNotesPath, { force: true });
     }
     return;
   }
-  finish({ status: 'failed', changed: false, error: { code: 'RELEASE_NOTES_INPUT_INVALID', message: 'Usage: platform-release-notes context|publish', retryable: false } });
+  finish(invalidInput('Usage: platform-release-notes context|stage|publish'));
 }
 
 export { platformReleaseNotes };

package/lib/internal/pr-review-grade.ts

@@ -0,0 +1,130 @@
+import fs from 'node:fs';
+import path from 'node:path';
+
+import {
+  collectHostCandidates,
+  decide,
+  deriveTaskIssueMatches,
+  extractClosingIssueNumbers,
+  resolveHostFromCandidates
+} from '../pr-review/evidence-grading.ts';
+import type { DecisionRecord, HostResolution } from '../pr-review/evidence-grading.ts';
+import { inspectPlatformPullRequestByNumber } from '../platform/pull-requests.ts';
+import { verifyInProcess } from '../task/verification-engine.ts';
+
+const USAGE = `Usage: agent-infra-internal pr-review-grade decide --input-file <path|-> [--cwd <path>]
+       agent-infra-internal pr-review-grade resolve-host --pr <N> [--cwd <path>]
+       agent-infra-internal pr-review-grade verify-artifact --artifact-file <path> [--cwd <path>]
+`;
+
+function fail(message: string): void {
+  process.stdout.write(`${JSON.stringify({ status: 'failed', changed: false, error: { code: 'PR_REVIEW_GRADE_INVALID', message } })}\n`);
+  process.stderr.write(USAGE);
+  process.exitCode = 1;
+}
+
+function finish(result: unknown, exitCode = 0): void {
+  process.stdout.write(`${JSON.stringify(result)}\n`);
+  if (exitCode !== 0) process.exitCode = exitCode;
+}
+
+function parseFlags(args: string[], start: number): { values: Record<string, string | boolean>; error?: string } {
+  const values: Record<string, string | boolean> = {};
+  const seen = new Set<string>();
+  for (let index = start; index < args.length; index += 1) {
+    const flag = args[index]!;
+    if (!['--input-file', '--artifact-file', '--cwd', '--pr'].includes(flag)) {
+      return { values, error: `unknown option '${flag}'` };
+    }
+    if (seen.has(flag)) return { values, error: `duplicate option '${flag}'` };
+    seen.add(flag);
+    const value = args[++index];
+    if (value === undefined || value.startsWith('--')) return { values, error: `option '${flag}' requires a value` };
+    values[flag.slice(2).replace(/-([a-z])/g, (_, letter: string) => letter.toUpperCase())] = value;
+  }
+  return { values };
+}
+
+function readInput(value: string, cwd: string): string {
+  return value === '-' ? fs.readFileSync(0, 'utf8') : fs.readFileSync(path.resolve(cwd, value), 'utf8');
+}
+
+function prReviewGrade(args: string[] = []): void {
+  if (args[0] === '--help' || args[0] === '-h') { process.stdout.write(USAGE); return; }
+  const operation = args[0];
+  if (!operation || !['decide', 'resolve-host', 'verify-artifact'].includes(operation)) { fail('a valid operation is required'); return; }
+  const parsed = parseFlags(args, 1);
+  if (parsed.error) { fail(parsed.error); return; }
+  const values = parsed.values;
+  const cwd = path.resolve(typeof values.cwd === 'string' ? values.cwd : process.cwd());
+  const allowed: Record<string, string[]> = {
+    decide: ['cwd', 'inputFile'],
+    'resolve-host': ['cwd', 'pr'],
+    'verify-artifact': ['cwd', 'artifactFile']
+  };
+  const unexpected = Object.keys(values).find((key) => !allowed[operation]!.includes(key));
+  if (unexpected) { fail(`${operation} does not accept '--${unexpected}'`); return; }
+
+  if (operation === 'decide') {
+    if (typeof values.inputFile !== 'string') { fail('decide requires --input-file'); return; }
+    let input: unknown;
+    try {
+      input = JSON.parse(readInput(values.inputFile, cwd));
+    } catch (error) {
+      fail(`unable to read decide input: ${error instanceof Error ? error.message : String(error)}`);
+      return;
+    }
+    try {
+      const record: DecisionRecord = decide(input as Parameters<typeof decide>[0]);
+      finish(record);
+    } catch (error) {
+      const code = error && typeof error === 'object' && 'code' in error ? String(error.code) : 'DECIDE_FAILED';
+      finish({ status: 'failed', changed: false, error: { code, message: error instanceof Error ? error.message : String(error) } }, 1);
+    }
+    return;
+  }
+
+  if (operation === 'resolve-host') {
+    const pr = Number(values.pr);
+    if (!Number.isInteger(pr) || pr <= 0) { fail('resolve-host requires a positive --pr'); return; }
+    const inspected = inspectPlatformPullRequestByNumber(pr, { cwd });
+    if (!inspected.pullRequest) {
+      finish({
+        status: 'failed', changed: false, host: null, candidates: [], closingIssues: [],
+        error: inspected.error ?? { code: 'PR_INSPECTION_INVALID', message: 'unable to inspect the pull request', retryable: false }
+      }, inspected.status === 'blocked' ? 2 : 1);
+      return;
+    }
+    const closingIssues = extractClosingIssueNumbers(inspected.pullRequest.body);
+    const candidates = collectHostCandidates({ prNumber: pr, closingIssues, workspaceRoot: cwd });
+    const host: HostResolution = resolveHostFromCandidates(candidates);
+    finish({
+      status: 'ok', changed: false,
+      pr: { number: pr, baseSha: inspected.pullRequest.base.sha, headSha: inspected.pullRequest.head.sha, state: inspected.pullRequest.state },
+      closingIssues, candidates, host,
+      taskIssueMatches: deriveTaskIssueMatches(host, closingIssues), error: null
+    });
+    return;
+  }
+
+  if (typeof values.artifactFile !== 'string') { fail('verify-artifact requires --artifact-file'); return; }
+  const artifactPath = path.resolve(cwd, values.artifactFile);
+  let result: Record<string, unknown>;
+  try {
+    result = verifyInProcess({
+      mode: 'checks',
+      skillName: 'review-pr',
+      taskDir: path.dirname(artifactPath),
+      artifactFile: path.basename(artifactPath),
+      checks: ['artifact'],
+      repositoryRoot: cwd
+    }) as Record<string, unknown>;
+  } catch (error) {
+    finish({ status: 'failed', changed: false, error: { code: 'VERIFY_ARTIFACT_INVALID', message: error instanceof Error ? error.message : String(error) } }, 1);
+    return;
+  }
+  const status = result.status as 'pass' | 'fail' | 'blocked';
+  finish(result, ({ pass: 0, fail: 1, blocked: 2 } as const)[status]);
+}
+
+export { prReviewGrade };

package/lib/internal/release-workflow.ts

@@ -150,9 +150,10 @@ function runOptionalDemo(cwd: string, run: CommandRunner = command): DemoResult
   return { status: 'recorded', reasonCode: null, message: null, outputPath };
 }
 
-function git(cwd: string, args: string[], run: CommandRunner = command): string | null {
+function git(cwd: string, args: string[], run: CommandRunner = command, trim = true): string | null {
   const result = run(cwd, 'git', args);
-  return result.status === 0 ? String(result.stdout).trim() : null;
+  const stdout = String(result.stdout);
+  return result.status === 0 ? (trim ? stdout.trim() : stdout) : null;
 }
 
 function inspectLocalReleaseFacts(cwd: string, version: string, run: CommandRunner = command) {
@@ -228,9 +229,15 @@ async function inspectFacts(cwd: string, version: string): Promise<ReleaseFacts>
   };
 }
 
-function changedPaths(cwd: string): string[] {
-  const output = git(cwd, ['status', '--porcelain=v1']) || '';
-  return output.split('\n').filter(Boolean).map((line) => line.slice(3)).filter((value, index, all) => all.indexOf(value) === index);
+function parsePorcelainPath(record: string): string {
+  const match = /^.. (.+)$/.exec(record);
+  if (!match) throw new Error('Invalid git status --porcelain=v1 record');
+  return match[1]!;
+}
+
+function changedPaths(cwd: string, run: CommandRunner = command): string[] {
+  const output = git(cwd, ['status', '--porcelain=v1'], run, false) || '';
+  return output.split(/\r?\n/).filter(Boolean).map(parsePorcelainPath).filter((value, index, all) => all.indexOf(value) === index);
 }
 
 function updateReleaseMetadata(cwd: string, version: string): void {
@@ -336,5 +343,5 @@ async function releaseWorkflow(args: string[] = []): Promise<void> {
   process.stdout.write(`${JSON.stringify({ ...pushed, demo, snapshot: releaseSnapshot(version, await inspectFacts(cwd, version)) })}\n`); process.exitCode = pushed.status === 'failed' ? 1 : pushed.status === 'degraded' ? 2 : 0;
 }
 
-export { computeDemoInputDigest, inspectFacts, inspectLocalReleaseFacts, inspectPostWorktree, releaseSmokeStatus, releaseWorkflow, runOptionalDemo };
+export { changedPaths, computeDemoInputDigest, inspectFacts, inspectLocalReleaseFacts, inspectPostWorktree, releaseSmokeStatus, releaseWorkflow, runOptionalDemo };
 export type { CommandRunner, DemoResult };

package/lib/internal/sandbox-control.ts

@@ -0,0 +1,24 @@
+import { requestSandboxControl } from '../sandbox/control/client.ts';
+import { serveSandboxControl } from '../sandbox/control/server.ts';
+
+function sandboxControl(args: string[]): void {
+  const [operation, ...rest] = args;
+  if (operation === 'serve') {
+    const manifestIndex = rest.indexOf('--manifest');
+    const manifest = manifestIndex >= 0 ? rest[manifestIndex + 1] : undefined;
+    if (!manifest) throw new Error('sandbox-control serve requires --manifest');
+    serveSandboxControl(manifest);
+    return;
+  }
+  if (operation === 'client') {
+    const [family = '', ...commandArgs] = rest;
+    const response = requestSandboxControl({ family, args: commandArgs });
+    process.stdout.write(response.stdout);
+    process.stderr.write(response.stderr);
+    process.exitCode = response.exitCode;
+    return;
+  }
+  throw new Error('Usage: agent-infra-internal sandbox-control serve --manifest <path> | client <family> [args...]');
+}
+
+export { sandboxControl };

package/lib/internal/task-activity.ts

@@ -0,0 +1,91 @@
+import {
+  applyPrReviewActivityIntent,
+  inspectPrReviewActivity
+} from '../task/activity-intent.ts';
+import type {
+  PrReviewActivityIntent,
+  PrReviewInspectIntent
+} from '../task/activity-intent.ts';
+
+const USAGE = `Usage: agent-infra-internal task-activity <task-ref> pr-review-inspect
+       agent-infra-internal task-activity <task-ref> pr-review-start --agent <agent> --artifact <canonical.md> --head <40hex> [--dry-run]
+       agent-infra-internal task-activity <task-ref> pr-review-complete --agent <agent> --artifact <canonical.md> --head <40hex> --verdict <approved|changes-requested|commented> --blockers <N> --major <N> --minor <N> [--dry-run]
+       agent-infra-internal task-activity <task-ref> pr-review-terminate --agent <agent> --artifact <canonical.md> --head <40hex> --outcome <aborted|superseded> --reason <single-line> [--dry-run]
+`;
+
+const OPERATIONS = new Set(['pr-review-inspect', 'pr-review-start', 'pr-review-complete', 'pr-review-terminate']);
+const FLAGS: Record<string, string> = {
+  '--agent': 'agent',
+  '--artifact': 'artifact',
+  '--head': 'head',
+  '--verdict': 'verdict',
+  '--blockers': 'blockers',
+  '--major': 'major',
+  '--minor': 'minor',
+  '--outcome': 'outcome',
+  '--reason': 'reason'
+};
+const COMMON = ['agent', 'artifact', 'head'] as const;
+const ALLOWED: Record<string, ReadonlySet<string>> = {
+  'pr-review-inspect': new Set(['kind', 'taskRef']),
+  'pr-review-start': new Set(['kind', 'taskRef', 'agent', 'artifact', 'head', 'dryRun']),
+  'pr-review-complete': new Set(['kind', 'taskRef', 'agent', 'artifact', 'head', 'verdict', 'blockers', 'major', 'minor', 'dryRun']),
+  'pr-review-terminate': new Set(['kind', 'taskRef', 'agent', 'artifact', 'head', 'outcome', 'reason', 'dryRun'])
+};
+
+function usageFailure(message: string): void {
+  process.stdout.write(`${JSON.stringify({ status: 'failed', changed: false, error: { code: 'ACTIVITY_PAYLOAD_INVALID', message } })}\n`);
+  process.stderr.write(USAGE);
+  process.exitCode = 1;
+}
+
+function taskActivity(args: string[] = []): void {
+  if (args[0] === '--help' || args[0] === '-h') { process.stdout.write(USAGE); return; }
+  const [taskRef, kind] = args;
+  if (!taskRef || taskRef.startsWith('--') || !kind || !OPERATIONS.has(kind)) {
+    usageFailure('task ref and a supported PR review intent are required');
+    return;
+  }
+  const values: Record<string, unknown> = { kind, taskRef };
+  const seen = new Set<string>();
+  for (let index = 2; index < args.length; index += 1) {
+    const flag = args[index]!;
+    if (flag === '--dry-run') {
+      if (seen.has(flag)) { usageFailure(`duplicate option '${flag}'`); return; }
+      seen.add(flag);
+      values.dryRun = true;
+      continue;
+    }
+    const key = FLAGS[flag];
+    if (!key) { usageFailure(`unknown option '${flag}'`); return; }
+    if (seen.has(flag)) { usageFailure(`duplicate option '${flag}'`); return; }
+    const value = args[++index];
+    if (value === undefined || value.startsWith('--')) { usageFailure(`option '${flag}' requires a value`); return; }
+    seen.add(flag);
+    values[key] = ['blockers', 'major', 'minor'].includes(key) ? Number(value) : value;
+  }
+
+  const allowed = ALLOWED[kind]!;
+  const unexpected = Object.keys(values).find((key) => !allowed.has(key));
+  if (unexpected) { usageFailure(`${kind} does not accept '${unexpected}'`); return; }
+  if (kind === 'pr-review-inspect') {
+    const result = inspectPrReviewActivity(values as PrReviewInspectIntent);
+    process.stdout.write(`${JSON.stringify(result)}\n`);
+    if (result.status === 'failed') process.exitCode = 1;
+    return;
+  }
+  for (const key of COMMON) {
+    if (values[key] === undefined) { usageFailure(`${kind} requires '${key}'`); return; }
+  }
+  const operationRequired = kind === 'pr-review-complete'
+    ? ['verdict', 'blockers', 'major', 'minor']
+    : kind === 'pr-review-terminate' ? ['outcome', 'reason'] : [];
+  for (const key of operationRequired) {
+    if (values[key] === undefined) { usageFailure(`${kind} requires '${key}'`); return; }
+  }
+  const result = applyPrReviewActivityIntent(values as PrReviewActivityIntent);
+  process.stdout.write(`${JSON.stringify(result)}\n`);
+  if (result.status === 'failed') process.exitCode = 1;
+}
+
+export { taskActivity };

package/lib/internal/task-event.ts

@@ -1,7 +1,8 @@
+import { normalizeAgentToken, AGENT_USAGE_HINT } from '../agent-clients/tokens.ts';
 import { applyTaskEvent, eventCatalog } from '../task/events.ts';
 import type { TaskEventRequest, Verdict } from '../task/events.ts';
 
-const USAGE = `Usage: agent-infra-internal task-event <N | TASK-id> <event> --agent <agent> [event options] [--dry-run]
+const USAGE = `Usage: agent-infra-internal task-event <N | TASK-id> <event> --agent <agent> [event options] [--orchestrated] [--dry-run]
 
 Apply one closed-set task lifecycle event and print a structured JSON result.
 Events: ${eventCatalog.join(', ')}
@@ -29,6 +30,10 @@ function taskEvent(args: string[] = []): void {
   const seen = new Set<string>();
   for (let index = 2; index < args.length; index += 1) {
     const flag = args[index]!;
+    if (flag === '--orchestrated') {
+      if (seen.has(flag)) { usageFailure(`duplicate option '${flag}'`); return; }
+      seen.add(flag); request.orchestrated = true; continue;
+    }
     if (flag === '--dry-run') {
       if (seen.has(flag)) { usageFailure(`duplicate option '${flag}'`); return; }
       seen.add(flag); request.dryRun = true; continue;
@@ -43,6 +48,9 @@ function taskEvent(args: string[] = []): void {
     else if (key === 'verdict') request.verdict = value as Verdict;
     else (request as Record<string, unknown>)[key] = value;
   }
+  const agent = normalizeAgentToken(String(request.agent ?? ''));
+  if (!agent) { usageFailure(`invalid --agent '${request.agent}': ${AGENT_USAGE_HINT}`); return; }
+  request.agent = agent;
   const result = applyTaskEvent(request);
   process.stdout.write(`${JSON.stringify(result)}\n`);
   if (result.status === 'failed') process.exitCode = 1;

package/lib/internal/task-ledger.ts

@@ -9,9 +9,10 @@ const USAGE = `Usage: agent-infra-internal task-ledger <task-ref> <intent> [inte
 const FLAGS: Record<string, string> = {
   '--stage': 'stage', '--review-artifact': 'reviewArtifact', '--ordinal': 'ordinal',
   '--severity': 'severity', '--evidence': 'evidence', '--id': 'id', '--round': 'round',
-  '--status': 'status', '--artifact': 'artifact'
+  '--status': 'status', '--artifact': 'artifact', '--needs-implementation': 'needsImplementation'
 };
 const NUMERIC = new Set(['ordinal', 'round']);
+const BOOLEAN = new Set(['needsImplementation']);
 
 function usageFailure(message: string): void {
   process.stdout.write(`${JSON.stringify({ status: 'failed', changed: false, error: { code: 'LEDGER_PAYLOAD_INVALID', message } })}\n`);
@@ -39,7 +40,11 @@ function taskLedger(args: string[] = []): void {
     if (seen.has(flag)) { usageFailure(`duplicate option '${flag}'`); return; }
     const value = args[++index];
     if (value === undefined || value.startsWith('--')) { usageFailure(`option '${flag}' requires a value`); return; }
-    seen.add(flag); values[key] = NUMERIC.has(key) ? Number(value) : value;
+    if (BOOLEAN.has(key) && value !== 'true' && value !== 'false') {
+      usageFailure(`option '${flag}' must be true or false`); return;
+    }
+    seen.add(flag);
+    values[key] = NUMERIC.has(key) ? Number(value) : BOOLEAN.has(key) ? value === 'true' : value;
   }
   const required: Record<string, string[]> = {
     'finding-upsert': ['stage', 'reviewArtifact', 'ordinal', 'severity', 'evidence'],
@@ -49,7 +54,11 @@ function taskLedger(args: string[] = []): void {
     'decision-upsert': ['id', 'stage', 'artifact'],
     'stage-status': ['stage']
   };
-  const allowed = new Set(['kind', 'taskRef', 'dryRun', ...required[kind]!]);
+  const optional: Record<string, string[]> = {
+    'finding-review': ['needsImplementation'],
+    'decision-upsert': ['needsImplementation']
+  };
+  const allowed = new Set(['kind', 'taskRef', 'dryRun', ...required[kind]!, ...(optional[kind] ?? [])]);
   const unexpected = Object.keys(values).find((key) => !allowed.has(key));
   const missing = required[kind]!.find((key) => values[key] === undefined);
   if (unexpected) { usageFailure(`${kind} does not accept '${unexpected}'`); return; }