feat(cli): add deterministic task preflight checks

[ChinmayK0607]

What changed

• Added live task manifest validation to hud task list, start, and grade, including deployed environment support.
• Added hud task grade --dry-run with separate environment, task, grader, and reward-shape results plus per-phase timeouts and cleanup.
• Added pre-upload environment/task manifest and source-fixture validation to hud sync tasks, including verifier task IDs.
• Reused the task source/runtime resolver from hud eval, updated CLI docs, and added behavioral regression coverage. There are no UI changes.
• Supersedes the broader standalone-check design in Add production Task lifecycle check command #531.

Why

Deterministic lifecycle failures were discovered only after task upload or rollout. The previous standalone checker duplicated execution lifecycle code and included nondeterministic agent behavior beyond this requirement. These checks now live in the existing commands that own each lifecycle stage.

Impact

Environment and task authors can catch invalid sources, missing deployed tasks, startup failures, broken graders, and malformed rewards before syncing or running agent evaluations. CI can use the existing command exit status without adopting a separate check protocol.

Validation

• uv run pytest -q (1042 passed, 9 deselected)
• uv run ruff check .
• uv run ruff format --check .
• uv run --extra dev --extra train ty check

Made with Cursor

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Want reviews to match your repository better? Bugbot Learning can learn team-specific rules from PR activity. A team admin can enable Learning in the Cursor dashboard.

^{Reviewed by Cursor Bugbot for commit 49dfac2. Configure here.}

[cursor]

Task prefix ignored for local source

Medium Severity

_task_id strips a leading task/ for --env and --url placements, but the local --source path passes the raw argument into select_local_task. The same task/… form documented for deployed checks therefore fails to match local slugs or ids and exits as unresolved.

Additional Locations (2)

• hud/cli/task.py#L83-L85
• hud/cli/task_runtime.py#L73-L89

 

^{Reviewed by Cursor Bugbot for commit 49dfac2. Configure here.}