agent-conveyor 0.1.4 → 0.1.6

package/README.md

@@ -132,6 +132,19 @@ command exits 0 and the JSON result reports `"ok": true`.
 Before publishing `agent-conveyor` to npm, use
 [`docs/package-release.md`](docs/package-release.md).
 
+For common manager setups, start with
+[`docs/manager-recipes.md`](docs/manager-recipes.md). It maps natural-language
+requests such as GoalBuddy conveyor runs, test coverage loops, UX polish loops,
+what-next nudging, and PR/CI/merge Ralph loops to concrete `manager-config`
+settings, permissions, evidence gates, cleanup behavior, and example
+manager/Dispatch/worker interactions. Use `conveyor manager-recipes --list`
+or `conveyor manager-recipes --show goalbuddy-conveyor --json` for a
+machine-readable setup preview.
+For a package-facing overview of these modes, open
+[`docs/landing-page.html`](docs/landing-page.html) locally or host it as a
+static landing page. From the repo, `npm run docs:landing` serves it at
+`http://127.0.0.1:8765/`.
+
 After install, the intended Codex app entry point is natural language. Open a
 new Codex app session in the target repo and say:
 
@@ -163,6 +176,10 @@ Use `conveyor qa-plan adversarial-triggers` to verify natural-language
 manager prompts activate Ralph-loop adversarial gates.
 Use `conveyor qa-plan goalbuddy-conveyor` when a broad request should become
 sequential GoalBuddy child boards with PR/CI/merge receipts.
+Before cutting a manager loose, have it resolve the freeform setup request to a
+named recipe from `docs/manager-recipes.md` or an explicit `custom` setup, then
+show the saved mode, permissions, evidence gates, cleanup policy, and disallowed
+actions.
 For manual QA, launch the dashboard with Dispatch enforcement so the page can
 show live proof:
 
@@ -411,6 +428,11 @@ tmux attach -t codex-live-test
   Use `--require` when a manager command should fail closed. Use
   `--require-handoff` before worker compact/clear style instructions so visible
   context is persisted first.
+- `manager-recipes --list|--show RECIPE [--json]` — List or show built-in
+  manager setup recipes. Recipe JSON includes the supervision mode,
+  permissions, expected tools, epilogues, evidence gates, cleanup behavior,
+  disallowed actions, locked setup summary template, and suggested
+  `manager-config` command. Use this before cutting a manager loose.
 - `worker-ack <task> --from-stdin|--json [--correlation-id ID]` /
   `manager-ack <task> --from-stdin|--json [--correlation-id ID]` — Persist or
   read the latest structured acknowledgement from the worker or manager. Acks

package/dist/cli/typescript-runtime.js

@@ -109,6 +109,9 @@ export function runTypescriptRuntimeCommand(options) {
         if (parsed.command === "ralph-loop-presets") {
             return runRalphLoopPresetsCommand(parsed, options);
         }
+        if (parsed.command === "manager-recipes") {
+            return runManagerRecipesCommand(parsed);
+        }
         if (parsed.command === "loop-triggers") {
             return runLoopTriggersCommand(parsed, options);
         }
@@ -499,6 +502,7 @@ function parseRuntimeArgs(args, env) {
         managerObjective: null,
         managerPermissionsJson: null,
         managerPermit: [],
+        managerRecipe: null,
         managerReference: [],
         managerRequireAcks: false,
         managerTool: [],
@@ -593,6 +597,7 @@ function parseRuntimeArgs(args, env) {
                 && command !== "runs"
                 && command !== "loop-templates"
                 && command !== "ralph-loop-presets"
+                && command !== "manager-recipes"
                 && command !== "loop-triggers"
                 && command !== "manager-permission"
                 && command !== "continuation"
@@ -946,7 +951,7 @@ function parseRuntimeArgs(args, env) {
             index += 1;
         }
         else if (arg === "--show") {
-            if (command !== "runs" && command !== "loop-templates" && command !== "ralph-loop-presets") {
+            if (command !== "runs" && command !== "loop-templates" && command !== "ralph-loop-presets" && command !== "manager-recipes") {
                 return { command, enabled, error: "Unsupported TypeScript runtime option: --show", explicit, flags, task };
             }
             const value = valueAfter(queue, index, arg);
@@ -1417,6 +1422,17 @@ function parseRuntimeArgs(args, env) {
             flags.managerMode = value.value;
             index += 1;
         }
+        else if (arg === "--manager-recipe") {
+            if (command !== "pair") {
+                return { command, enabled, error: "Unsupported TypeScript runtime option: --manager-recipe", explicit, flags, task };
+            }
+            const value = valueAfter(queue, index, arg);
+            if (value.error) {
+                return { command, enabled, error: value.error, explicit, flags, task };
+            }
+            flags.managerRecipe = value.value;
+            index += 1;
+        }
         else if (arg === "--manager-objective") {
             if (command !== "pair") {
                 return { command, enabled, error: "Unsupported TypeScript runtime option: --manager-objective", explicit, flags, task };
@@ -1551,6 +1567,17 @@ function parseRuntimeArgs(args, env) {
             flags.managerObjective = value.value;
             index += 1;
         }
+        else if (arg === "--recipe") {
+            if (command !== "manager-config") {
+                return { command, enabled, error: "Unsupported TypeScript runtime option: --recipe", explicit, flags, task };
+            }
+            const value = valueAfter(queue, index, arg);
+            if (value.error) {
+                return { command, enabled, error: value.error, explicit, flags, task };
+            }
+            flags.managerRecipe = value.value;
+            index += 1;
+        }
         else if (arg === "--guideline") {
             if (command !== "manager-config") {
                 return { command, enabled, error: "Unsupported TypeScript runtime option: --guideline", explicit, flags, task };
@@ -3110,6 +3137,43 @@ function runRalphLoopPresetsCommand(parsed, options) {
         database.close();
     }
 }
+function runManagerRecipesCommand(parsed) {
+    const unsupportedOptions = unsupportedLoopCommandOptions(parsed, {
+        allowedFlags: new Set(["json", "list", "show"]),
+        commandName: "manager-recipes",
+    });
+    if (unsupportedOptions) {
+        return unsupportedRuntimeResult(parsed, unsupportedOptions);
+    }
+    const actionCount = [parsed.flags.list, parsed.flags.show !== null].filter(Boolean).length;
+    if (actionCount !== 1) {
+        return errorResult("Choose one of --list or --show");
+    }
+    if (parsed.flags.list) {
+        const recipes = listManagerRecipes();
+        if (parsed.flags.json) {
+            return jsonResult({ recipes });
+        }
+        return textResult(recipes.map((recipe) => {
+            const loop = recipe.loop_template ? ` loop=${recipe.loop_template}` : "";
+            return `${recipe.name}\tmode=${recipe.mode}${loop}\t${recipe.description}`;
+        }));
+    }
+    const recipe = managerRecipeSummary(parsed.flags.show ?? "");
+    if (parsed.flags.json) {
+        return jsonResult({ recipe });
+    }
+    const lines = [
+        String(recipe.locked_summary_template),
+        "",
+        "manager config command:",
+        `  ${recipe.manager_config_command.map(shellQuote).join(" ")}`,
+    ];
+    if (recipe.loop_template) {
+        lines.push("", `loop template: ${recipe.loop_template}`);
+    }
+    return textResult(lines);
+}
 function runLoopTriggersCommand(parsed, _options) {
     const unsupported = unsupportedMigratedProofCliOptions(parsed);
     if (unsupported) {
@@ -5733,6 +5797,7 @@ function runPairCommand(parsed, options) {
             managerObjective: parsed.flags.managerObjective,
             managerPermissionsJson: parsed.flags.managerPermissionsJson,
             managerPermit: parsed.flags.managerPermit,
+            managerRecipe: parsed.flags.managerRecipe,
             managerReference: parsed.flags.managerReference,
             managerRequireAcks: parsed.flags.managerRequireAcks,
             managerTool: parsed.flags.managerTool,
@@ -6012,6 +6077,7 @@ function emitPairTelemetry(database, options) {
 function ensurePairManagerConfig(database, options) {
     const existing = managerConfigSync(database, options.taskId);
     const requested = options.managerMode !== null
+        || options.managerRecipe !== null
         || options.managerObjective !== null
         || options.managerGuideline.length > 0
         || options.managerAcceptance.length > 0
@@ -6032,6 +6098,7 @@ function ensurePairManagerConfig(database, options) {
     if (supervisionMode !== "light" && supervisionMode !== "guided" && supervisionMode !== "strict") {
         throw new Error("manager_mode must be light, guided, or strict");
     }
+    const recipeName = cleanManagerRecipeName(options.managerRecipe, existing?.recipe_name ?? (existing === null ? "custom" : null));
     const objective = options.managerObjective !== null ? options.managerObjective : existing?.objective ?? null;
     const guidelines = options.managerGuideline.length > 0 ? options.managerGuideline : existing?.guidelines ?? [];
     const acceptanceCriteria = options.managerAcceptance.length > 0
@@ -6052,13 +6119,14 @@ function ensurePairManagerConfig(database, options) {
     const requireAcks = options.managerRequireAcks || (existing?.require_acks ?? false);
     database.prepare(`
     insert into manager_configs(
-      task_id, supervision_mode, objective, guidelines_json,
+      task_id, recipe_name, supervision_mode, objective, guidelines_json,
       acceptance_criteria_json, reference_paths_json, permissions_json,
       tools_json, epilogues_json, nudge_on_completion, require_acks,
       revision, created_at, updated_at
     )
-    values (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 1, ?, ?)
+    values (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 1, ?, ?)
     on conflict(task_id) do update set
+      recipe_name = excluded.recipe_name,
       supervision_mode = excluded.supervision_mode,
       objective = excluded.objective,
       guidelines_json = excluded.guidelines_json,
@@ -6070,6 +6138,7 @@ function ensurePairManagerConfig(database, options) {
       nudge_on_completion = excluded.nudge_on_completion,
       require_acks = excluded.require_acks,
       revision = case when
+        manager_configs.recipe_name is not excluded.recipe_name or
         manager_configs.supervision_mode is not excluded.supervision_mode or
         manager_configs.objective is not excluded.objective or
         manager_configs.guidelines_json is not excluded.guidelines_json or
@@ -6082,7 +6151,7 @@ function ensurePairManagerConfig(database, options) {
         manager_configs.require_acks is not excluded.require_acks
       then manager_configs.revision + 1 else manager_configs.revision end,
       updated_at = excluded.updated_at
-  `).run(options.taskId, supervisionMode, objective, stableJson(guidelines), stableJson(acceptanceCriteria), stableJson(referencePaths), stableJson(permissions), stableJson(tools), stableJson(epilogues), nudgeOnCompletion, requireAcks ? 1 : 0, options.timestamp, options.timestamp);
+  `).run(options.taskId, recipeName, supervisionMode, objective, stableJson(guidelines), stableJson(acceptanceCriteria), stableJson(referencePaths), stableJson(permissions), stableJson(tools), stableJson(epilogues), nudgeOnCompletion, requireAcks ? 1 : 0, options.timestamp, options.timestamp);
     const config = managerConfigSync(database, options.taskId);
     if (config === null) {
         throw new Error(`manager config was not recorded for task ${options.taskId}`);
@@ -11801,6 +11870,7 @@ function insertCompatEventSync(database, options) {
 }
 function managerConfigMutationRequested(parsed) {
     return parsed.flags.managerMode !== null
+        || parsed.flags.managerRecipe !== null
         || parsed.flags.managerObjective !== null
         || parsed.flags.managerGuideline.length > 0
         || parsed.flags.managerAcceptance.length > 0
@@ -11819,6 +11889,7 @@ function upsertManagerConfigFromParsed(database, options) {
     const parsed = options.parsed;
     const existing = options.existing;
     const supervisionMode = parsed.flags.managerMode ?? existing?.supervision_mode ?? "guided";
+    const recipeName = cleanManagerRecipeName(parsed.flags.managerRecipe, existing?.recipe_name ?? null);
     const objective = parsed.flags.managerObjective !== null ? parsed.flags.managerObjective : existing?.objective ?? null;
     const guidelines = parsed.flags.managerGuideline.length > 0 ? parsed.flags.managerGuideline : existing?.guidelines ?? [];
     const acceptanceCriteria = parsed.flags.managerAcceptance.length > 0
@@ -11839,13 +11910,14 @@ function upsertManagerConfigFromParsed(database, options) {
     const requireAcks = parsed.flags.managerRequireAcks || (existing?.require_acks ?? false);
     database.prepare(`
     insert into manager_configs(
-      task_id, supervision_mode, objective, guidelines_json,
+      task_id, recipe_name, supervision_mode, objective, guidelines_json,
       acceptance_criteria_json, reference_paths_json, permissions_json,
       tools_json, epilogues_json, nudge_on_completion, require_acks,
       revision, created_at, updated_at
     )
-    values (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 1, ?, ?)
+    values (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 1, ?, ?)
     on conflict(task_id) do update set
+      recipe_name = excluded.recipe_name,
       supervision_mode = excluded.supervision_mode,
       objective = excluded.objective,
       guidelines_json = excluded.guidelines_json,
@@ -11857,6 +11929,7 @@ function upsertManagerConfigFromParsed(database, options) {
       nudge_on_completion = excluded.nudge_on_completion,
       require_acks = excluded.require_acks,
       revision = case when
+        manager_configs.recipe_name is not excluded.recipe_name or
         manager_configs.supervision_mode is not excluded.supervision_mode or
         manager_configs.objective is not excluded.objective or
         manager_configs.guidelines_json is not excluded.guidelines_json or
@@ -11869,7 +11942,7 @@ function upsertManagerConfigFromParsed(database, options) {
         manager_configs.require_acks is not excluded.require_acks
       then manager_configs.revision + 1 else manager_configs.revision end,
       updated_at = excluded.updated_at
-  `).run(options.taskId, supervisionMode, objective, stableJson(guidelines), stableJson(acceptanceCriteria), stableJson(referencePaths), stableJson(permissions), stableJson(tools), stableJson(epilogues), nudgeOnCompletion, requireAcks ? 1 : 0, options.timestamp, options.timestamp);
+  `).run(options.taskId, recipeName, supervisionMode, objective, stableJson(guidelines), stableJson(acceptanceCriteria), stableJson(referencePaths), stableJson(permissions), stableJson(tools), stableJson(epilogues), nudgeOnCompletion, requireAcks ? 1 : 0, options.timestamp, options.timestamp);
     const config = managerConfigSync(database, options.taskId);
     if (config === null) {
         throw new Error(`manager config was not recorded for task ${options.taskId}`);
@@ -11892,6 +11965,16 @@ function cleanManagerNudgeOnCompletion(value) {
     }
     return value;
 }
+function cleanManagerRecipeName(value, existing) {
+    if (value === null) {
+        return existing;
+    }
+    const normalized = normalizeManagerRecipeName(value);
+    if (normalized === "custom") {
+        return null;
+    }
+    return managerRecipeDefinition(normalized).name;
+}
 function managerPermissionWarnings(permissions) {
     const warnings = [];
     for (const [key, value] of Object.entries(permissions ?? {})) {
@@ -13418,6 +13501,7 @@ function isDefaultRuntimeCommand(command) {
         || command === "loop-templates"
         || command === "loop-triggers"
         || command === "ralph-loop-presets"
+        || command === "manager-recipes"
         || command === "qa-plan"
         || command === "qa-run"
         || command === "start"
@@ -15170,6 +15254,232 @@ function ralphLoopPresetMetadata(name, options) {
     ralphLoopPreset(name);
     return loopTemplateMetadata(name, options);
 }
+const MANAGER_RECIPES = {
+    "goalbuddy-conveyor": {
+        acceptance: [
+            "Every child board has PR/CI/merge, satisfied_on_main, or blocker proof.",
+            "Parent state records final status for every child.",
+        ],
+        cleanup: "compact between child boards after saved handoff",
+        description: "Run broad work as one parent GoalBuddy board with one active child board at a time.",
+        disallowedActions: [
+            "Do not run two child boards at once.",
+            "Do not merge without green CI.",
+            "Do not compact or clear before a saved handoff.",
+        ],
+        displayName: "GoalBuddy Conveyor",
+        epilogues: ["draft-pr", "record-handoff"],
+        evidenceGates: [
+            "child receipt with focused verification",
+            "adversarial review",
+            "PR/CI/merge or satisfied_on_main proof",
+            "parent receipt update before the next child",
+        ],
+        guidelines: [
+            "Keep exactly one child board active at a time.",
+            "Before activating the next child, update the parent receipt.",
+        ],
+        loopTemplate: null,
+        mode: "strict",
+        name: "goalbuddy-conveyor",
+        objective: "Run a one-child-at-a-time GoalBuddy conveyor until every child is merged, proven satisfied, or blocked with evidence.",
+        permissions: ["repo.open_pr", "repo.merge_green_pr", "worker_session.compact", "worker_session.clear"],
+        supportPatterns: ["Inbox / No-Tmux App Loop", "Recovery / Resume / Handoff"],
+        tools: ["verification.run_tests", "context.fetch_prs"],
+    },
+    "nudge-whats-next": {
+        acceptance: [
+            "Accepted criteria are satisfied or explicitly deferred.",
+            "The final summary names commands run, changed files, and residual risk.",
+        ],
+        cleanup: "off by default",
+        description: "Observe, ask useful status questions, negotiate criteria, and keep permissions minimal.",
+        disallowedActions: ["Do not grant repo or worker-session mutation permissions by default."],
+        displayName: "Nudge / What's Next Manager",
+        epilogues: [],
+        evidenceGates: ["manager decision", "worker receipt", "accepted criteria closure"],
+        guidelines: [
+            "Prefer wait over nudge while the worker is active.",
+            "Ask for must-have current-task criteria versus follow-ups when scope changes.",
+        ],
+        loopTemplate: null,
+        mode: "guided",
+        name: "nudge-whats-next",
+        objective: "Observe the worker, ask useful status and next-step questions, and finish only with evidence.",
+        permissions: [],
+        supportPatterns: ["Inbox / No-Tmux App Loop", "Recovery / Resume / Handoff"],
+        tools: [],
+    },
+    "pr-ci-merge-ralph-loop": {
+        acceptance: [
+            "PR URL, green CI, merge receipt, and adversarial proof are recorded.",
+            "Worker handoff exists before compact or clear.",
+        ],
+        cleanup: "clear after saved handoff",
+        description: "Drive delivery through PR readiness, CI, merge, handoff, and worker clear receipts.",
+        disallowedActions: [
+            "Do not open PRs before repo.open_pr is permitted.",
+            "Do not merge before repo.merge_green_pr is permitted and CI is green.",
+            "Do not clear before a saved handoff.",
+        ],
+        displayName: "PR/CI/Merge Ralph Loop",
+        epilogues: ["draft-pr", "record-handoff"],
+        evidenceGates: ["pr_url", "ci_green", "merge", "adversarial_check"],
+        guidelines: ["Merge only after green CI and recorded manager decision evidence."],
+        loopTemplate: "pr_ci_merge_loop",
+        mode: "strict",
+        name: "pr-ci-merge-ralph-loop",
+        objective: "Drive the worker through PR readiness, CI, merge, handoff, and clear receipts.",
+        permissions: ["repo.open_pr", "repo.merge_green_pr", "worker_session.compact", "worker_session.clear"],
+        supportPatterns: ["Inbox / No-Tmux App Loop", "Recovery / Resume / Handoff"],
+        tools: ["verification.run_tests", "context.fetch_prs"],
+    },
+    "test-coverage-loop": {
+        acceptance: [
+            "Coverage or targeted test evidence is recorded before another worker pass.",
+            "Structured adversarial proof names the strongest realistic failure mode.",
+        ],
+        cleanup: "clear by default",
+        description: "Improve or prove test confidence with coverage evidence before another pass.",
+        disallowedActions: ["Do not continue after only generic tests-passed text."],
+        displayName: "Test Coverage Loop",
+        epilogues: [],
+        evidenceGates: ["test_coverage", "adversarial_check"],
+        guidelines: ["Record coverage evidence before asking for another worker pass."],
+        loopTemplate: "test_coverage_loop",
+        mode: "strict",
+        name: "test-coverage-loop",
+        objective: "Improve or prove test coverage for the requested behavior.",
+        permissions: ["worker_session.compact", "worker_session.clear"],
+        supportPatterns: ["Inbox / No-Tmux App Loop", "Recovery / Resume / Handoff"],
+        tools: ["verification.run_tests"],
+    },
+    "ux-polish-loop": {
+        acceptance: [
+            "Reference artifact, candidate screenshot, visual diff report, and below-threshold evidence are recorded.",
+            "Structured adversarial proof is recorded before another visual pass.",
+        ],
+        cleanup: "compact by default",
+        description: "Iterate on visible UI quality using browser, screenshot, and visual-diff evidence.",
+        disallowedActions: ["Do not approve a visual pass without screenshot or browser evidence."],
+        displayName: "UX Polish Loop",
+        epilogues: [],
+        evidenceGates: [
+            "reference_artifact",
+            "candidate_screenshot",
+            "visual_diff_report",
+            "diff_below_threshold",
+            "adversarial_check",
+        ],
+        guidelines: ["Compare visible output against references before requesting another pass."],
+        loopTemplate: "visual_diff_loop",
+        mode: "guided",
+        name: "ux-polish-loop",
+        objective: "Iterate on visible UI quality using browser and screenshot evidence.",
+        permissions: ["worker_session.compact", "worker_session.clear"],
+        supportPatterns: ["Inbox / No-Tmux App Loop", "Recovery / Resume / Handoff"],
+        tools: ["verification.run_playwright"],
+    },
+};
+const MANAGER_RECIPE_ALIASES = {
+    "goalbuddy conveyor": "goalbuddy-conveyor",
+    goalbuddy: "goalbuddy-conveyor",
+    "nudge / what's next manager": "nudge-whats-next",
+    "nudge whats next": "nudge-whats-next",
+    "pr ci merge ralph loop": "pr-ci-merge-ralph-loop",
+    "pr/ci/merge ralph loop": "pr-ci-merge-ralph-loop",
+    "ralph loop": "pr-ci-merge-ralph-loop",
+    "test coverage": "test-coverage-loop",
+    "test coverage loop": "test-coverage-loop",
+    "ux polish": "ux-polish-loop",
+    "ux polish loop": "ux-polish-loop",
+    "visual polish": "ux-polish-loop",
+    "what's next": "nudge-whats-next",
+    "whats next": "nudge-whats-next",
+};
+function listManagerRecipes() {
+    return Object.keys(MANAGER_RECIPES).sort().map((name) => managerRecipeSummary(name));
+}
+function managerRecipeDefinition(name) {
+    const key = normalizeManagerRecipeName(name);
+    const recipe = MANAGER_RECIPES[key];
+    if (!recipe) {
+        throw new Error(`Unknown manager recipe: ${name}; expected one of: ${Object.keys(MANAGER_RECIPES).sort().join(", ")}`);
+    }
+    return recipe;
+}
+function normalizeManagerRecipeName(name) {
+    const normalized = name.trim().toLowerCase().split(/\s+/).join(" ");
+    return MANAGER_RECIPE_ALIASES[normalized] ?? normalized.replace(/_/g, "-").replace(/ /g, "-");
+}
+function managerRecipeSummary(name) {
+    const recipe = managerRecipeDefinition(name);
+    return {
+        acceptance: [...recipe.acceptance],
+        cleanup: recipe.cleanup,
+        description: recipe.description,
+        disallowed_actions: [...recipe.disallowedActions],
+        display_name: recipe.displayName,
+        epilogues: [...recipe.epilogues],
+        evidence_gates: [...recipe.evidenceGates],
+        guidelines: [...recipe.guidelines],
+        locked_summary_template: lockedManagerRecipeSummary(recipe),
+        loop_template: recipe.loopTemplate,
+        manager_config_command: managerRecipeConfigCommand(recipe),
+        mode: recipe.mode,
+        name: recipe.name,
+        objective: recipe.objective,
+        permissions: [...recipe.permissions],
+        support_patterns: [...recipe.supportPatterns],
+        tools: [...recipe.tools],
+    };
+}
+function managerRecipeConfigCommand(recipe, taskPlaceholder = "<task>") {
+    const command = ["conveyor", "manager-config", taskPlaceholder, "--mode", recipe.mode, "--objective", recipe.objective];
+    for (const guideline of recipe.guidelines) {
+        command.push("--guideline", guideline);
+    }
+    for (const acceptance of recipe.acceptance) {
+        command.push("--acceptance", acceptance);
+    }
+    const permissions = new Set(recipe.permissions);
+    if (permissions.has("worker_session.compact") && permissions.has("worker_session.clear")) {
+        command.push("--allow-worker-compact-clear");
+        permissions.delete("worker_session.compact");
+        permissions.delete("worker_session.clear");
+    }
+    if (permissions.has("repo.open_pr")) {
+        command.push("--allow-pr");
+        permissions.delete("repo.open_pr");
+    }
+    if (permissions.has("repo.merge_green_pr")) {
+        command.push("--allow-merge-green");
+        permissions.delete("repo.merge_green_pr");
+    }
+    for (const permission of [...permissions].sort()) {
+        command.push("--permit", permission);
+    }
+    for (const tool of recipe.tools) {
+        command.push("--tool", tool);
+    }
+    for (const epilogue of recipe.epilogues) {
+        command.push("--epilogue", epilogue);
+    }
+    return command;
+}
+function lockedManagerRecipeSummary(recipe) {
+    return [
+        `Selected recipe: ${recipe.displayName}`,
+        `Mode: ${recipe.mode}`,
+        `Permissions: ${recipe.permissions.length > 0 ? recipe.permissions.join(", ") : "none"}`,
+        `Tools: ${recipe.tools.length > 0 ? recipe.tools.join(", ") : "none"}`,
+        `Epilogues: ${recipe.epilogues.length > 0 ? recipe.epilogues.join(", ") : "none"}`,
+        `Cleanup: ${recipe.cleanup}`,
+        `Evidence gates: ${recipe.evidenceGates.length > 0 ? recipe.evidenceGates.join(", ") : "manager-reviewed evidence"}`,
+        `Not allowed: ${recipe.disallowedActions.length > 0 ? recipe.disallowedActions.join("; ") : "unconfirmed custom actions"}`,
+        "User confirmed: <yes|no>",
+    ].join("\n");
+}
 const LOOP_TRIGGERS = [
     {
         acceptance: "Create or reuse a loop policy whose required_before_continue includes adversarial_check.",