@kylecheng3146/agent-ops 0.4.0 → 0.5.0

package/LICENSE

@@ -1,21 +1,91 @@
-MIT License
-
-Copyright (c) 2026 Kyle Cheng
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+Required Notice: Copyright (c) 2026 Kyle Cheng (https://github.com/kylecheng3146/agent-ops)
+
+# PolyForm Shield License 1.0.0
+
+<https://polyformproject.org/licenses/shield/1.0.0>
+
+## Acceptance
+
+In order to get any license under these terms, you must agree to them as both strict obligations and conditions to all your licenses.
+
+## Copyright License
+
+The licensor grants you a copyright license for the software to do everything you might do with the software that would otherwise infringe the licensor's copyright in it for any permitted purpose.  However, you may only distribute the software according to [Distribution License](#distribution-license) and make changes or new works based on the software according to [Changes and New Works License](#changes-and-new-works-license).
+
+## Distribution License
+
+The licensor grants you an additional copyright license to distribute copies of the software.  Your license to distribute covers distributing the software with changes and new works permitted by [Changes and New Works License](#changes-and-new-works-license).
+
+## Notices
+
+You must ensure that anyone who gets a copy of any part of the software from you also gets a copy of these terms or the URL for them above, as well as copies of any plain-text lines beginning with `Required Notice:` that the licensor provided with the software.  For example:
+
+> Required Notice: Copyright Yoyodyne, Inc. (http://example.com)
+
+## Changes and New Works License
+
+The licensor grants you an additional copyright license to make changes and new works based on the software for any permitted purpose.
+
+## Patent License
+
+The licensor grants you a patent license for the software that covers patent claims the licensor can license, or becomes able to license, that you would infringe by using the software.
+
+## Noncompete
+
+Any purpose is a permitted purpose, except for providing any product that competes with the software or any product the licensor or any of its affiliates provides using the software.
+
+## Competition
+
+Goods and services compete even when they provide functionality through different kinds of interfaces or for different technical platforms.  Applications can compete with services, libraries with plugins, frameworks with development tools, and so on, even if they're written in different programming languages or for different computer architectures.  Goods and services compete even when provided free of charge.  If you market a product as a practical substitute for the software or another product, it definitely competes.
+
+## New Products
+
+If you are using the software to provide a product that does not compete, but the licensor or any of its affiliates brings your product into competition by providing a new version of the software or another product using the software, you may continue using versions of the software available under these terms beforehand to provide your competing product, but not any later versions.
+
+## Discontinued Products
+
+You may begin using the software to compete with a product or service that the licensor or any of its affiliates has stopped providing, unless the licensor includes a plain-text line beginning with `Licensor Line of Business:` with the software that mentions that line of business.  For example:
+
+> Licensor Line of Business: YoyodyneCMS Content Management System (http://example.com/cms)
+
+## Sales of Business
+
+If the licensor or any of its affiliates sells a line of business developing the software or using the software to provide a product, the buyer can also enforce [Noncompete](#noncompete) for that product.
+
+## Fair Use
+
+You may have "fair use" rights for the software under the law. These terms do not limit them.
+
+## No Other Rights
+
+These terms do not allow you to sublicense or transfer any of your licenses to anyone else, or prevent the licensor from granting licenses to anyone else.  These terms do not imply any other licenses.
+
+## Patent Defense
+
+If you make any written claim that the software infringes or contributes to infringement of any patent, your patent license for the software granted under these terms ends immediately. If your company makes such a claim, your patent license ends immediately for work on behalf of your company.
+
+## Violations
+
+The first time you are notified in writing that you have violated any of these terms, or done anything with the software not covered by your licenses, your licenses can nonetheless continue if you come into full compliance with these terms, and take practical steps to correct past violations, within 32 days of receiving notice.  Otherwise, all your licenses end immediately.
+
+## No Liability
+
+***As far as the law allows, the software comes as is, without any warranty or condition, and the licensor will not be liable to you for any damages arising out of these terms or the use or nature of the software, under any kind of legal claim.***
+
+## Definitions
+
+The **licensor** is the individual or entity offering these terms, and the **software** is the software the licensor makes available under these terms.
+
+A **product** can be a good or service, or a combination of them.
+
+**You** refers to the individual or entity agreeing to these terms.
+
+**Your company** is any legal entity, sole proprietorship, or other kind of organization that you work for, plus all its affiliates.
+
+**Affiliates** means the other organizations than an organization has control over, is under the control of, or is under common control with.
+
+**Control** means ownership of substantially all the assets of an entity, or the power to direct its management and policies by vote, contract, or otherwise.  Control can be direct or indirect.
+
+**Your licenses** are all the licenses granted to you for the software under these terms.
+
+**Use** means anything you do with the software requiring one of your licenses.

package/README.md

@@ -345,6 +345,41 @@ agent-ops doctor              # presence only: no tokens, no network
 agent-ops doctor --check-auth # one real print call per configured target
 ```
 
+### Batch review
+
+A change split into subtasks needs one verify and one review per subtask.
+`agent-ops batch --parent <task-id> --yes` runs them together for the parent's
+active subtasks and the parent itself, instead of one `review` at a time:
+
+```bash
+agent-ops batch --parent <task-id> --yes --output batch.json
+agent-ops batch --parent <task-id> --yes --base <ref> --parent-base <ref> --width 3
+```
+
+- Each task is verified and reviewed against its own base: `--base` for the
+  subtasks and `--parent-base` for the parent, otherwise the base recorded by
+  its last PASS review, otherwise the worktree base.
+- A task that already has fresh PASS verification evidence skips verify. The
+  rest are verified one at a time, and each task's review starts as soon as its
+  own verify passes, so the next verify overlaps it. A task whose verify fails
+  gets no review; the others continue.
+- At most `--width` reviews run at once (default 2). A transient `NOT_RUN`
+  (`probe-failed`, `stalled`, `timeout`, `quota-exhausted`,
+  `network-unreachable`) lowers the width to 1 for the rest and earns that task
+  one retry, alone, after the others finish. Other results are final.
+- Each review target is probed once per batch while the probe succeeds; a
+  failed probe is forgotten so the retry probes again.
+- Nothing may commit or edit the worktree while it runs. HEAD is part of every
+  fingerprint, so a change aborts the batch and reports the unfinished tasks
+  as `aborted`.
+- Exit code 0 means every task passed, 1 means a review or verify failed, and 2
+  means the rest could not run and may be retried. The JSON envelope lists each
+  task; the full reports stay under `.agent-ops/reviews/`.
+
+`batch` is started exactly like `review`: through the trusted outer host runner
+as its first and only invocation, with `--output` instead of a shell redirect.
+`agent-ops init` and `update` pre-authorize it beside `review`.
+
 See [Configuration](docs/en/guides/configuration.md) for the full contract.
 
 ## Project principles
@@ -377,4 +412,7 @@ Documentation:
 
 ## License
 
-Copyright (c) 2026 Kyle Cheng. Released under the [MIT License](LICENSE).
+Copyright (c) 2026 Kyle Cheng. Released under the
+[PolyForm Shield License 1.0.0](LICENSE): free to use, change and share,
+including inside a company, but not to build a product or service that competes
+with agent-ops. Versions up to 0.4.1 were released under, and remain under, the MIT License.

package/dist/packages/cli/src/args.js

@@ -9,6 +9,7 @@ export const COMMAND_NAMES = [
     "task",
     "verify",
     "review",
+    "batch",
     "allow-stop",
     "worktree"
 ];
@@ -71,6 +72,8 @@ export function parseArgs(argv) {
     let title;
     let sessionId;
     let base;
+    let parentBase;
+    let width;
     const profiles = [];
     const reviewTargets = [];
     const criteria = [];
@@ -210,6 +213,26 @@ export function parseArgs(argv) {
                 index += 1;
                 break;
             }
+            case "--parent-base": {
+                if (parentBase !== undefined) {
+                    duplicate(token);
+                }
+                parentBase = readOptionValue(argv, index, token);
+                index += 1;
+                break;
+            }
+            case "--width": {
+                if (width !== undefined) {
+                    duplicate(token);
+                }
+                const value = readOptionValue(argv, index, token);
+                if (!/^[1-9][0-9]{0,2}$/u.test(value)) {
+                    invalidValue(token, value);
+                }
+                width = Number(value);
+                index += 1;
+                break;
+            }
             case "--check-auth":
                 if (checkAuth) {
                     duplicate(token);
@@ -416,6 +439,8 @@ export function parseArgs(argv) {
             completionGate !== undefined ||
             sessionId !== undefined ||
             base !== undefined ||
+            parentBase !== undefined ||
+            width !== undefined ||
             checkAuth ||
             checkAuthTargets.length > 0 ||
             dryRun ||
@@ -465,15 +490,18 @@ export function parseArgs(argv) {
         (hasTaskTargetOptions || hasTaskMutationOptions)) {
         throw new CliArgumentError("CLI_OPTION_NOT_ALLOWED", "Task target options may be used only with task or verify.");
     }
-    if (command !== "task" && parentTaskId !== undefined) {
-        throw new CliArgumentError("CLI_OPTION_NOT_ALLOWED", "--parent may be used only with task create or task status.");
+    if (command !== "task" && command !== "batch" && parentTaskId !== undefined) {
+        throw new CliArgumentError("CLI_OPTION_NOT_ALLOWED", "--parent may be used only with task create, task status or batch.");
     }
     if (command !== "update" && targetVersion !== undefined) {
         throw new CliArgumentError("CLI_OPTION_NOT_ALLOWED", "--target-version may be used only with update.");
     }
     if (base !== undefined && command !== "verify" && command !== "review" &&
-        !(command === "task" && action === "complete")) {
-        throw new CliArgumentError("CLI_OPTION_NOT_ALLOWED", "--base may be used only with verify, review or task complete.");
+        command !== "batch" && !(command === "task" && action === "complete")) {
+        throw new CliArgumentError("CLI_OPTION_NOT_ALLOWED", "--base may be used only with verify, review, batch or task complete.");
+    }
+    if ((parentBase !== undefined || width !== undefined) && command !== "batch") {
+        throw new CliArgumentError("CLI_OPTION_NOT_ALLOWED", `${parentBase !== undefined ? "--parent-base" : "--width"} may be used only with batch.`);
     }
     if (hookTargets.length > 0 &&
         command !== "init" &&
@@ -566,6 +594,16 @@ export function parseArgs(argv) {
     if (command === "review" && (criteria.length > 0 || evidence.length > 0)) {
         throw new CliArgumentError("CLI_OPTION_NOT_ALLOWED", "Complete review covers every task criterion; omit --criterion and --evidence.");
     }
+    if (command === "batch" && parentTaskId === undefined) {
+        throw new CliArgumentError("CLI_OPTION_NOT_ALLOWED", "Batch requires --parent to name the task whose subtasks it covers.");
+    }
+    if (command === "batch" && !yes) {
+        throw new CliArgumentError("CLI_OPTION_NOT_ALLOWED", "Batch requires --yes to authorize the reviewer sessions.");
+    }
+    if (command === "batch" &&
+        (harness !== undefined || profiles.length > 0 || dryRun || rerun)) {
+        throw new CliArgumentError("CLI_OPTION_NOT_ALLOWED", "Batch accepts parent, base, parent-base, width, json, output and yes options.");
+    }
     if (command === "allow-stop" &&
         (sessionId === undefined ||
             scope !== undefined ||
@@ -589,8 +627,8 @@ export function parseArgs(argv) {
             rerun)) {
         throw new CliArgumentError("CLI_OPTION_NOT_ALLOWED", "worktree accepts only a name, --session, --from, --target-branch, --message and --json.");
     }
-    if (output !== undefined && command !== "review" && command !== "doctor") {
-        throw new CliArgumentError("CLI_OPTION_NOT_ALLOWED", "--output may be used only with review or doctor.", "--output");
+    if (output !== undefined && command !== "review" && command !== "batch" && command !== "doctor") {
+        throw new CliArgumentError("CLI_OPTION_NOT_ALLOWED", "--output may be used only with review, batch or doctor.", "--output");
     }
     if (output !== undefined && (output.trim() === "" || output.includes("\0"))) {
         throw new CliArgumentError("CLI_INVALID_VALUE", "Invalid value for --output.", "--output");
@@ -636,6 +674,8 @@ export function parseArgs(argv) {
         ...(evidence.length === 0 ? {} : { evidence }),
         ...(sessionId === undefined ? {} : { sessionId }),
         ...(base === undefined ? {} : { base }),
+        ...(parentBase === undefined ? {} : { parentBase }),
+        ...(width === undefined ? {} : { width }),
         ...(worktreeFrom === undefined ? {} : { worktreeFrom }),
         ...(worktreeMessage === undefined ? {} : { worktreeMessage }),
         ...(output === undefined ? {} : { output }),

package/dist/packages/cli/src/bin.js

@@ -18,6 +18,7 @@ import { FileEvidenceStore } from "../../../runtime/src/verify/evidence.js";
 import { calculateSourceFingerprint } from "../../../runtime/src/verify/source-fingerprint.js";
 import { VerificationService } from "../../../runtime/src/verify/service.js";
 import { NodeVerificationProcessRunner } from "../../../runtime/src/verify/spawn.js";
+import { COMMAND_NAMES, parseArgs } from "./args.js";
 import { runCli } from "./cli.js";
 import { loadEffectiveConfig, repositoryTrust, repositoryTrustBinding } from "./context.js";
 import { runHookProcess } from "./hook-process.js";
@@ -30,7 +31,10 @@ import { runDoctorCommand } from "./commands/doctor.js";
 import { formatInstallPlan, runInitCommand } from "./commands/init.js";
 import { formatUninstallPlan, runUninstallCommand } from "./commands/uninstall.js";
 import { runTaskCommand } from "./commands/task.js";
-import { runReviewCommand } from "./commands/review.js";
+import { hasFreshVerification, runReviewCommand } from "./commands/review.js";
+import { runBatchCommand } from "./commands/batch.js";
+import { createSourceGuard } from "../../../runtime/src/review/batch-guard.js";
+import { memoizePreflight } from "../../../runtime/src/review/batch.js";
 import { createReviewExecutor, ReviewInterruptedError } from "../../../runtime/src/review/execute.js";
 import { probeReviewTargetDetailed } from "../../../runtime/src/review/probe.js";
 import { resolveReviewScope } from "../../../runtime/src/review/scope.js";
@@ -43,7 +47,7 @@ import { formatUpdatePlan, runUpdateCommand } from "./commands/update.js";
 import { errorEnvelope } from "./output.js";
 import { runAgyHeadless } from "./agy-headless.js";
 import { runWorktreeCommand } from "./commands/parallel.js";
-import { ensureSessionWorktree, resolveCheckouts } from "../../../runtime/src/parallel/service.js";
+import { ensureSessionWorktree, readWorktreeRecord, resolveCheckouts } from "../../../runtime/src/parallel/service.js";
 import { listWorktrees, branchLockDoctorResult, worktreeDoctorResult } from "../../../runtime/src/parallel/manage.js";
 import { detectGhostFiles, ghostFilesDoctorResult } from "../../../runtime/src/install/doctor.js";
 const HOOK_RUNTIME_PATH = fileURLToPath(new URL("./hook-entry.js", import.meta.url));
@@ -207,19 +211,10 @@ else {
         writeStderr: (value) => process.stderr.write(value)
     }, {
         version: CLI_VERSION,
-        registry: createCommandRegistry(Object.fromEntries([
-            "init",
-            "config",
-            "trust",
-            "doctor",
-            "update",
-            "uninstall",
-            "task",
-            "verify",
-            "review",
-            "allow-stop",
-            "worktree"
-        ].map((command) => [command, async (args) => {
+        registry: createCommandRegistry(Object.fromEntries(
+        // Every command the parser knows is registered: a hand-kept list here
+        // once left a parsed command answering CLI_COMMAND_UNAVAILABLE.
+        COMMAND_NAMES.map((command) => [command, async (args) => {
                 const root = args.scope === "user"
                     ? process.env.AGENT_OPS_HOME ?? homedir()
                     : process.cwd();
@@ -442,12 +437,68 @@ else {
                             : {})
                     });
                 }
-                if (args.command === "review") {
+                const probeTarget = async (target, budget) => await probeReviewTargetDetailed(target, {
+                    cwd: root,
+                    deep: true,
+                    // The probe answers within the chain's remaining budget
+                    // or not at all; its own default would outlast it.
+                    ...(budget === undefined ? {} : { timeoutMs: budget.timeoutMs })
+                });
+                // One place builds a review's options, so `review` and each task of
+                // a `batch` are reviewed identically.
+                const buildReviewOptions = async (reviewArgs, signal, preflightTarget = probeTarget, progressPrefix = "") => {
                     const reviewSessionId = process.env.AGENT_OPS_SESSION_ID;
                     const reviewGit = gitRunner(root);
-                    const reviewConfig = (await loadEffectiveConfig(root, args.scope === "user" ? "user" : "project")).config;
+                    const reviewConfig = (await loadEffectiveConfig(root, reviewArgs.scope === "user" ? "user" : "project")).config;
                     const reviewRole = resolveReviewRole("independent-review", reviewConfig.reviewRoles ?? []);
                     const configuredReviewTargets = reviewRole?.targets ?? [];
+                    return {
+                        args: reviewArgs,
+                        authorized: reviewArgs.yes,
+                        tasks: taskService,
+                        ...(reviewArgs.taskId === undefined ? {} : { taskId: reviewArgs.taskId }),
+                        ...(reviewSessionId === undefined
+                            ? {}
+                            : { sessionId: reviewSessionId }),
+                        ...(reviewConfig.reviewRoles === undefined
+                            ? {}
+                            : { roles: reviewConfig.reviewRoles }),
+                        targets: configuredReviewTargets,
+                        root,
+                        gitRunner: reviewGit,
+                        policyConfigHash: calculateConfigHash(reviewConfig),
+                        currentPolicyConfigHash: async () => calculateConfigHash((await loadEffectiveConfig(root, reviewArgs.scope === "user" ? "user" : "project")).config),
+                        config: reviewConfig,
+                        evidenceStore: new FileEvidenceStore(root, root),
+                        execute: createReviewExecutor({
+                            targets: configuredReviewTargets,
+                            cwd: root,
+                            ...(reviewRole?.model === undefined
+                                ? {}
+                                : { model: reviewRole.model }),
+                            ...(reviewRole?.effort === undefined
+                                ? {}
+                                : { effort: reviewRole.effort }),
+                            ...(reviewRole?.timeoutMs === undefined
+                                ? {}
+                                : { timeoutMs: reviewRole.timeoutMs }),
+                            preflightTarget,
+                            verifySourceFingerprint: async (expected) => {
+                                const currentScope = await resolveReviewScope({
+                                    root,
+                                    runner: reviewGit,
+                                    ...(reviewArgs.base === undefined ? {} : { base: reviewArgs.base })
+                                });
+                                return await calculateSourceFingerprint(root, currentScope, reviewGit) === expected;
+                            },
+                            signal,
+                            onProgress: (line) => {
+                                process.stderr.write(`${progressPrefix}${line}\n`);
+                            }
+                        })
+                    };
+                };
+                if (args.command === "review") {
                     const controller = new AbortController();
                     let interruptedBy;
                     const interrupt = (signal) => {
@@ -459,59 +510,7 @@ else {
                     process.once("SIGINT", onSigint);
                     process.once("SIGTERM", onSigterm);
                     try {
-                        return await runReviewCommand({
-                            args,
-                            authorized: args.yes,
-                            tasks: taskService,
-                            ...(args.taskId === undefined ? {} : { taskId: args.taskId }),
-                            ...(reviewSessionId === undefined
-                                ? {}
-                                : { sessionId: reviewSessionId }),
-                            ...(reviewConfig.reviewRoles === undefined
-                                ? {}
-                                : { roles: reviewConfig.reviewRoles }),
-                            targets: configuredReviewTargets,
-                            root,
-                            gitRunner: reviewGit,
-                            policyConfigHash: calculateConfigHash(reviewConfig),
-                            currentPolicyConfigHash: async () => calculateConfigHash((await loadEffectiveConfig(root, args.scope === "user" ? "user" : "project")).config),
-                            config: reviewConfig,
-                            evidenceStore: new FileEvidenceStore(root, root),
-                            execute: createReviewExecutor({
-                                targets: configuredReviewTargets,
-                                cwd: root,
-                                ...(reviewRole?.model === undefined
-                                    ? {}
-                                    : { model: reviewRole.model }),
-                                ...(reviewRole?.effort === undefined
-                                    ? {}
-                                    : { effort: reviewRole.effort }),
-                                ...(reviewRole?.timeoutMs === undefined
-                                    ? {}
-                                    : { timeoutMs: reviewRole.timeoutMs }),
-                                preflightTarget: async (target, budget) => await probeReviewTargetDetailed(target, {
-                                    cwd: root,
-                                    deep: true,
-                                    // The probe answers within the chain's remaining budget
-                                    // or not at all; its own default would outlast it.
-                                    ...(budget === undefined
-                                        ? {}
-                                        : { timeoutMs: budget.timeoutMs })
-                                }),
-                                verifySourceFingerprint: async (expected) => {
-                                    const currentScope = await resolveReviewScope({
-                                        root,
-                                        runner: reviewGit,
-                                        ...(args.base === undefined ? {} : { base: args.base })
-                                    });
-                                    return await calculateSourceFingerprint(root, currentScope, reviewGit) === expected;
-                                },
-                                signal: controller.signal,
-                                onProgress: (line) => {
-                                    process.stderr.write(`${line}\n`);
-                                }
-                            })
-                        });
+                        return await runReviewCommand(await buildReviewOptions(args, controller.signal));
                     }
                     catch (error) {
                         if (error instanceof ReviewInterruptedError &&
@@ -525,6 +524,72 @@ else {
                         process.removeListener("SIGTERM", onSigterm);
                     }
                 }
+                if (args.command === "batch") {
+                    const controller = new AbortController();
+                    let interruptedBy;
+                    const interrupt = (signal) => {
+                        interruptedBy ??= signal;
+                        controller.abort(signal);
+                    };
+                    const onSigint = () => interrupt("SIGINT");
+                    const onSigterm = () => interrupt("SIGTERM");
+                    process.once("SIGINT", onSigint);
+                    process.once("SIGTERM", onSigterm);
+                    try {
+                        const batchScope = args.scope === "user" ? "user" : "project";
+                        const batchConfig = (await loadEffectiveConfig(root, batchScope)).config;
+                        const batchGit = gitRunner(root);
+                        const trusted = await repositoryTrust(root, batchConfig, CLI_VERSION) === "TRUSTED";
+                        const guard = await createSourceGuard(batchGit);
+                        const preflight = memoizePreflight(probeTarget);
+                        const taskArgs = (taskId, base) => parseArgs(["review", "--task", taskId, "--base", base, "--yes"]);
+                        const worktreeRecord = await readWorktreeRecord(root);
+                        const envelope = await runBatchCommand({
+                            args,
+                            tasks: taskService,
+                            ...(worktreeRecord === null ? {} : { worktreeBase: worktreeRecord.base }),
+                            guard,
+                            isVerified: async (taskId, base) => await hasFreshVerification(await buildReviewOptions(taskArgs(taskId, base), controller.signal, preflight), taskId, base),
+                            verify: async (taskId, base) => {
+                                const report = await new VerificationService({
+                                    root,
+                                    scope: batchScope,
+                                    config: batchConfig,
+                                    gitRunner: batchGit,
+                                    processRunner: new NodeVerificationProcessRunner(),
+                                    taskService,
+                                    evidenceStore: new FileEvidenceStore(root, root),
+                                    trusted,
+                                    base
+                                }).verify(taskId);
+                                return report.status === "PASS" ? "PASS" : "FAIL";
+                            },
+                            review: async (taskId, base, signal) => {
+                                const reviewed = await runReviewCommand(await buildReviewOptions(taskArgs(taskId, base), signal, preflight, `${taskId.slice(5, 13)}: `));
+                                const result = reviewed.data?.result;
+                                return result === undefined
+                                    ? { status: "NOT_RUN", reason: reviewed.errors[0]?.code ?? "review-error" }
+                                    : {
+                                        status: result.status,
+                                        ...(result.reason === undefined ? {} : { reason: result.reason }),
+                                        ...(result.reused === true ? { reused: true } : {})
+                                    };
+                            },
+                            signal: controller.signal,
+                            onProgress: (line) => {
+                                process.stderr.write(`batch: ${line}\n`);
+                            }
+                        });
+                        if (interruptedBy !== undefined) {
+                            process.exit(interruptedBy === "SIGINT" ? 130 : 143);
+                        }
+                        return envelope;
+                    }
+                    finally {
+                        process.removeListener("SIGINT", onSigint);
+                        process.removeListener("SIGTERM", onSigterm);
+                    }
+                }
                 if (args.command === "config") {
                     return explainConfigCommand(await loadEffectiveConfig(root, args.scope === "user" ? "user" : "project"));
                 }

package/dist/packages/cli/src/cli.js

@@ -29,6 +29,7 @@ Commands:
              Manage independent task acceptance state
   verify     Run configured verification
   review     Run an independent review
+  batch      Verify and review a parent task's subtasks together
   allow-stop Grant one fingerprint-bound completion-gate Stop permit (requires --session)
   agy-run    Run headless agy with a process-exit completion recheck
   worktree <add|finish|list|resume|remove>
@@ -47,13 +48,16 @@ Options:
   --check-auth-target <target>        Repeatable doctor filter with --check-auth
   --task <id>
   --parent <task-id>                  Task create: record a subtask of this
-                                      task; task status: list its subtasks
+                                      task; task status: list its subtasks;
+                                      batch: the task whose subtasks it covers
+  --parent-base <git-ref>             Batch only: base for the parent task
+  --width <n>                         Batch only: reviews allowed at once (default 2)
   --target-version <version>          Update target version (offline-capable)
   --title <text>
   --criterion <json>                    Repeatable
   --evidence <criterion-id=reference>   Repeatable
   --session <id>
-  --base <git-ref>                    Verify/review/complete a clean committed range
+  --base <git-ref>                    Verify/review/batch/complete a clean committed range
   --dry-run
   --json
   --yes
@@ -181,6 +185,26 @@ Options:
                        one summary line, so no shell redirect is needed
   --json
   --yes                Required authorization for both reviewer sessions
+`,
+    batch: `Usage: agent-ops batch --parent <task-id> --yes [options]
+
+Verify and review the active subtasks of a parent task, and the parent itself,
+together. Verify runs one task at a time and skips a task that already has
+fresh PASS evidence; each review starts as soon as its own verify passes.
+Nothing may commit or edit the worktree while it runs.
+
+Options:
+  --parent <task-id>   Required task whose active subtasks and itself are covered
+  --base <git-ref>     Base for the subtasks (default: each task's recorded
+                       review base, then the worktree base)
+  --parent-base <git-ref>
+                       Base for the parent task (same default)
+  --width <n>          Reviews allowed at once (default 2); a transient
+                       NOT_RUN lowers it to 1 and earns one retry
+  --output <file>      Write the JSON envelope to <file> (mode 0600) and print
+                       one summary line, so no shell redirect is needed
+  --json
+  --yes                Required authorization for the reviewer sessions
 `,
     "allow-stop": `Usage: agent-ops allow-stop --session <id> [options]
 
@@ -289,7 +313,7 @@ export async function runCli(argv, io, services) {
         const result = await execute(args);
         const exitCode = result.status === "ok"
             ? 0
-            : result.code === "REVIEW_NOT_RUN"
+            : result.code === "REVIEW_NOT_RUN" || result.code === "BATCH_NOT_RUN"
                 ? 2
                 : 1;
         if (args.output !== undefined) {