refactor: final CLI cleanup — manager split + dedup + constants

Manager split (926 → ~350 lines):
- manager-actions.ts: response parsing, action execution, validation
- manager-prompt.ts: system prompt, codebase summary, conversation history

Dedup:
- summarizeTool: removed from llm-provider, import from agent-engine
- createAuthHeaders: consolidated 10 manual header constructions
- Validation constants: VALID_OWNERS etc. consolidated in manager-actions

Fixes:
- setup.ts: removed duplicate fetchAndResetToRemote import

All 71 tests pass. Build succeeds.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: recuu-pfeg

src/agent-engine.ts

@@ -438,7 +438,7 @@ function parseStreamJsonEvents(event: Record<string, unknown>): AgentActivity[]
   return activities;
 }
 
-function summarizeToolInput(toolName: string, input?: Record<string, unknown>): string {
+export function summarizeToolInput(toolName: string, input?: Record<string, unknown>): string {
   if (!input) return toolName;
   switch (toolName) {
     case "Read":

src/agent-templates.ts

@@ -6,6 +6,7 @@
  * templates can be loaded from the API or a YAML config file.
  */
 
+import { execSync } from "node:child_process";
 import type { ApiClient, Task } from "./api-client.js";
 import * as ui from "./ui.js";
 import { logError, CLI_ERR } from "./error-logger.js";
@@ -447,7 +448,7 @@ export async function executeActions(
           break;
         }
         case "git_auth_check": {
-          const { execSync: exec } = await import("node:child_process");
+          const exec = execSync;
           try {
             // Use ls-remote without --exit-code (empty repos return exit 2 with --exit-code)
             exec("git ls-remote origin", {
@@ -502,7 +503,6 @@ export async function executeActions(
         case "shell": {
           const cmd = action.params?.command as string | undefined;
           if (cmd) {
-            const { execSync } = await import("node:child_process");
             execSync(cmd, { cwd: ctx.config.workingDir, stdio: "pipe" });
             ui.info( `[${phase}] ${label}`);
           }
@@ -535,11 +535,3 @@ export function getDefaultTemplates(): AgentTemplate[] {
   return DEFAULT_TEMPLATES;
 }
 
-/**
- * Get the list of default templates.
- * In the future, this will merge system defaults with user-defined templates
- * loaded from the API or a config file.
- */
-export function getTemplates(): AgentTemplate[] {
-  return DEFAULT_TEMPLATES;
-}

src/api-client.ts

@@ -117,6 +117,11 @@ export interface ApiClient {
   recordFailure(data: { task_id: string; failure_type: string; summary: string; agent_name?: string; sprint?: number; review_comment?: string; files_involved?: string }): Promise<void>;
 }
 
+/** Create standard auth headers for API requests. */
+export function createAuthHeaders(apiKey: string): Record<string, string> {
+  return { "Content-Type": "application/json", Authorization: `Bearer ${apiKey}` };
+}
+
 /** Retry a fetch call on 5xx errors (D1 transient failures) */
 export async function fetchWithRetry(url: string, options: RequestInit, maxRetries = 2): Promise<Response> {
   for (let attempt = 0; attempt <= maxRetries; attempt++) {
@@ -128,10 +133,7 @@ export async function fetchWithRetry(url: string, options: RequestInit, maxRetri
 }
 
 export function createApiClient(apiUrl: string, apiKey: string): ApiClient {
-  const headers = {
-    "Content-Type": "application/json",
-    Authorization: `Bearer ${apiKey}`,
-  };
+  const headers = createAuthHeaders(apiKey);
 
   return {
     async fetchWorkspace(): Promise<WorkspaceInfo> {

src/commands/plan.ts

@@ -2,7 +2,7 @@
  * Sprint Plan command (Strategist agent)
  */
 
-import { createApiClient, type Task } from "../api-client.js";
+import { createApiClient, createAuthHeaders, type Task } from "../api-client.js";
 import { resolveModelForRole } from "../agent-engine.js";
 import * as ui from "../ui.js";
 
@@ -20,7 +20,7 @@ export async function handleSprintPlan(apiUrl: string, apiKey: string): Promise<
 
     ui.info(`[strategist] Planning Sprint #${sprint.number}...`);
 
-    const headers = { "Content-Type": "application/json", Authorization: `Bearer ${apiKey}` };
+    const headers = createAuthHeaders(apiKey);
 
     // Fetch backlog, analytics, failures, retro
     const [backlogRes, analyticsRes, failuresRes] = await Promise.all([

src/commands/propose.ts

@@ -2,7 +2,7 @@
  * Propose command (Strategist agent — analyze data sources and suggest improvement tasks)
  */
 
-import { createApiClient, type Task } from "../api-client.js";
+import { createApiClient, createAuthHeaders, type Task } from "../api-client.js";
 import { resolveModelForRole } from "../agent-engine.js";
 import * as ui from "../ui.js";
 
@@ -12,7 +12,7 @@ export async function handlePropose(apiUrl: string, apiKey: string): Promise<voi
 
   try {
     ui.info("[strategist] Analyzing data sources for improvement proposals...");
-    const headers = { "Content-Type": "application/json", Authorization: `Bearer ${apiKey}` };
+    const headers = createAuthHeaders(apiKey);
 
     // Gather data sources
     const [failuresRes, backlogRes, analyticsRes] = await Promise.all([

src/commands/review.ts

@@ -2,7 +2,7 @@
  * Review command
  */
 
-import { createApiClient, type Task } from "../api-client.js";
+import { createApiClient, createAuthHeaders, type Task } from "../api-client.js";
 import * as ui from "../ui.js";
 import { parseTaskLabels } from "../utils/parse-labels.js";
 import { spawnClaudeOnce } from "../utils/spawn-claude.js";
@@ -92,7 +92,7 @@ export async function handleReview(apiUrl: string, apiKey: string, taskId?: stri
       try {
         await fetch(`${apiUrl}/api/v1/tasks/${task.id}/review-report`, {
           method: "POST",
-          headers: { "Content-Type": "application/json", Authorization: `Bearer ${apiKey}` },
+          headers: createAuthHeaders(apiKey),
           body: JSON.stringify(report),
         });
         console.log("\nReview saved to API.");

src/commands/run-loop.ts

@@ -3,7 +3,7 @@
  */
 
 import type { AgentRunner } from "../runner.js";
-import type { Task } from "../api-client.js";
+import { createAuthHeaders, type Task } from "../api-client.js";
 import { buildAgentPrompt } from "../prompt.js";
 import { getEngine, resolveModel, resolveModelForRole } from "../agent-engine.js";
 import { matchTemplate, executeActions, type ActionContext } from "../agent-templates.js";
@@ -141,7 +141,7 @@ export async function runLoop(cliArgs: CliArgs, runner: AgentRunner, shutdownSta
     // Auto-run Strategist proposals when sprint enters retrospective (once only)
     if (sprint?.status === "retrospective") {
       try {
-        const headers = { Authorization: `Bearer ${cliArgs.apiKey}`, "Content-Type": "application/json" };
+        const headers = createAuthHeaders(cliArgs.apiKey);
         const plansRes = await fetch(`${cliArgs.apiUrl}/api/v1/sprints/${sprint.number}/plan`, { headers });
         if (plansRes.ok) {
           const plan = (await plansRes.json()) as { status: string; id: string };
@@ -186,7 +186,7 @@ export async function runLoop(cliArgs: CliArgs, runner: AgentRunner, shutdownSta
         try {
           await fetch(`${cliArgs.apiUrl}/api/v1/sprints/${sprint.number}`, {
             method: "PATCH",
-            headers: { "Content-Type": "application/json", Authorization: `Bearer ${cliArgs.apiKey}` },
+            headers: createAuthHeaders(cliArgs.apiKey),
             body: JSON.stringify({ status: "review" }),
           });
           wsServer?.broadcast({ type: "data_update" as const, entity: "sprint", task_id: String(sprint.number), changes: { status: "review" }, timestamp: new Date().toISOString() });
@@ -220,7 +220,7 @@ export async function runLoop(cliArgs: CliArgs, runner: AgentRunner, shutdownSta
             for (const sub of subtasks) {
               await fetch(`${cliArgs.apiUrl}/api/v1/tasks`, {
                 method: "POST",
-                headers: { "Content-Type": "application/json", Authorization: `Bearer ${cliArgs.apiKey}` },
+                headers: createAuthHeaders(cliArgs.apiKey),
                 body: JSON.stringify({ ...sub, sprint: sprintNum, parent_task: t.id, status: "todo" }),
               });
             }
@@ -515,7 +515,7 @@ export async function runLoop(cliArgs: CliArgs, runner: AgentRunner, shutdownSta
 
               await fetch(`${cliArgs.apiUrl}/api/v1/sprints/${sprintData.sprint.number}/retro`, {
                 method: "POST",
-                headers: { "Content-Type": "application/json", Authorization: `Bearer ${cliArgs.apiKey}` },
+                headers: createAuthHeaders(cliArgs.apiKey),
                 body: JSON.stringify({
                   agent_name: agentConfig.name,
                   went_well: safeWentWell,

src/error-logger.ts

@@ -113,7 +113,7 @@ export function logError(
  * Wrap an async function with error logging.
  * Returns the result or undefined on error.
  */
-export async function withErrorLog<T>(
+async function withErrorLog<T>(
   code: CliErrorCode,
   context: Record<string, unknown>,
   fn: () => Promise<T>,

src/handlers/git-merge.ts

@@ -3,6 +3,9 @@
  * Merges the agent's worktree branch into the base branch.
  */
 
+import { execSync } from "node:child_process";
+import { existsSync, rmSync } from "node:fs";
+import { join } from "node:path";
 import type { TemplateAction, ActionContext } from "../agent-templates.js";
 import * as ui from "../ui.js";
 import { logError, CLI_ERR } from "../error-logger.js";
@@ -14,9 +17,9 @@ export async function handleGitMerge(
   phase: "pre" | "post"
 ): Promise<void> {
   const label = action.label ?? "git_merge";
-  const { execSync: gitExec } = await import("node:child_process");
-  const { existsSync: gitExists } = await import("node:fs");
-  const { join: gitJoin } = await import("node:path");
+  const gitExec = execSync;
+  const gitExists = existsSync;
+  const gitJoin = join;
   // workingDir is the worktree path — we need the main repo root
   const worktreePath = ctx.config.workingDir;
   const repoDir = resolveRepoRoot(worktreePath);
@@ -49,7 +52,6 @@ export async function handleGitMerge(
         ctx.mergeSkipped = true;
         // Clean up the empty branch
         if (gitExists(worktreeDir)) {
-          const { rmSync } = await import("node:fs");
           try { rmSync(worktreeDir, { recursive: true, force: true }); } catch { /* non-fatal */ }
         }
         try { gitExec("git worktree prune", { cwd: repoDir, stdio: "pipe" }); } catch { /* non-fatal */ }
@@ -72,7 +74,6 @@ export async function handleGitMerge(
         ui.warn(`[${phase}] ${label}: only metadata files changed (${diffFiles.join(", ")}) — skipping merge`);
         ctx.mergeSkipped = true;
         if (gitExists(worktreeDir)) {
-          const { rmSync } = await import("node:fs");
           try { rmSync(worktreeDir, { recursive: true, force: true }); } catch { /* non-fatal */ }
         }
         try { gitExec("git worktree prune", { cwd: repoDir, stdio: "pipe" }); } catch { /* non-fatal */ }
@@ -89,7 +90,6 @@ export async function handleGitMerge(
 
       // Clean up worktree
       if (gitExists(worktreeDir)) {
-        const { rmSync } = await import("node:fs");
         try { rmSync(worktreeDir, { recursive: true, force: true }); } catch { /* non-fatal */ }
       }
       try { gitExec("git worktree prune", { cwd: repoDir, stdio: "pipe" }); } catch { /* non-fatal */ }

src/handlers/git-push.ts

@@ -3,6 +3,7 @@
  * Pushes the base branch to the remote origin.
  */
 
+import { execSync } from "node:child_process";
 import type { TemplateAction, ActionContext } from "../agent-templates.js";
 import * as ui from "../ui.js";
 import { logError, CLI_ERR } from "../error-logger.js";
@@ -15,7 +16,7 @@ export async function handleGitPush(
 ): Promise<void> {
   const label = action.label ?? "git_push";
   if (ctx.mergeSkipped) { ui.info(`[${phase}] ${label}: skipped (no merge)`); return; }
-  const { execSync: pushExec } = await import("node:child_process");
+  const pushExec = execSync;
   // Resolve repo root (workingDir may be a worktree)
   const pushRepoDir = resolveRepoRoot(ctx.config.workingDir);
   // Stash any unstaged changes (e.g. inject_memory's CLAUDE.md modifications)