claude-nb 0.3.0 → 0.5.1

package/lib/board_maintenance.py

@@ -1,6 +1,5 @@
 """board_maintenance — data maintenance: prune, backup, restore."""
 
-import shutil
 import time
 from pathlib import Path
 
@@ -14,9 +13,9 @@ from lib.board_db import BoardDB
 def cmd_prune(db: BoardDB, args: list[str]) -> None:
     """Prune old messages and inbox entries.
 
-    Usage: board --as <name> prune [--before YYYY-MM-DD] [--keep N] [--dry-run]
+    Usage: board --as <name> prune [--before YYYY-MM-DD] [--dry-run]
     """
-    usage = "Usage: board --as <name> prune [--before YYYY-MM-DD] [--keep N] [--dry-run]"
+    usage = "Usage: board --as <name> prune [--before YYYY-MM-DD] [--dry-run]"
 
     before_days = 90  # default: keep 90 days
     dry_run = False
@@ -27,13 +26,6 @@ def cmd_prune(db: BoardDB, args: list[str]) -> None:
         if args[i] == "--before" and i + 1 < len(args):
             before_days = _parse_days(args[i + 1])
             i += 2
-        elif args[i] == "--keep" and i + 1 < len(args):
-            try:
-                int(args[i + 1])
-            except ValueError:
-                print(f"ERROR: --keep requires a number, got '{args[i + 1]}'")
-                raise SystemExit(1)
-            i += 2
         elif args[i] == "--dry-run":
             dry_run = True
             i += 1
@@ -48,22 +40,29 @@ def cmd_prune(db: BoardDB, args: list[str]) -> None:
     cutoff = _days_ago_ts(before_days)
 
     # Count what would be deleted
-    old_inbox = db.scalar(
-        "SELECT COUNT(*) FROM inbox WHERE message_id IN "
-        "(SELECT id FROM messages WHERE ts < ?)",
-        (cutoff,),
-    ) or 0
-    old_messages = db.scalar(
-        "SELECT COUNT(*) FROM messages WHERE ts < ?",
-        (cutoff,),
-    ) or 0
+    old_inbox = (
+        db.scalar(
+            "SELECT COUNT(*) FROM inbox WHERE message_id IN (SELECT id FROM messages WHERE ts < ?)",
+            (cutoff,),
+        )
+        or 0
+    )
+    old_messages = (
+        db.scalar(
+            "SELECT COUNT(*) FROM messages WHERE ts < ?",
+            (cutoff,),
+        )
+        or 0
+    )
 
     # Also count old read inbox entries (not just those linked to old messages)
-    old_read_inbox = db.scalar(
-        "SELECT COUNT(*) FROM inbox WHERE read=1 AND "
-        "delivered_at < ?",
-        (cutoff,),
-    ) or 0
+    old_read_inbox = (
+        db.scalar(
+            "SELECT COUNT(*) FROM inbox WHERE read=1 AND delivered_at < ?",
+            (cutoff,),
+        )
+        or 0
+    )
 
     if dry_run:
         print("=== DRY RUN: would delete ===")
@@ -204,9 +203,7 @@ def cmd_restore(db: BoardDB, args: list[str]) -> None:
     try:
         conn = sqlite3.connect(str(source))
         conn.execute("PRAGMA integrity_check")
-        tables = conn.execute(
-            "SELECT name FROM sqlite_master WHERE type='table'"
-        ).fetchall()
+        tables = conn.execute("SELECT name FROM sqlite_master WHERE type='table'").fetchall()
         conn.close()
         if not tables:
             print("ERROR: backup file contains no tables")
@@ -229,6 +226,8 @@ def cmd_restore(db: BoardDB, args: list[str]) -> None:
             return
 
     # Atomic restore: copy to temp, rename
+    import shutil
+
     tmp = db.db_path.with_suffix(".db.restore-tmp")
     shutil.copy2(source, tmp)
     tmp.replace(db.db_path)

package/lib/board_msg.py

@@ -1,25 +1,60 @@
 """board_msg — send / inbox / ack / status / log commands."""
 
 import hashlib
+import re
 import shutil
 import subprocess
 from pathlib import Path
 
 from lib.board_db import BoardDB, ts
-from lib.common import parse_flags
+from lib.common import parse_flags, validate_identity
 
 
 def _ack_marker_path(db: BoardDB, name: str) -> Path:
     """Path to file recording max message_id seen by last inbox call."""
+    assert db.env is not None
     return db.env.sessions_dir / f".{name}.ack_max_id"
 
 
+def _is_idle(sess: str) -> bool:
+    """Check if a Claude Code session is idle at its prompt (not mid-response).
+
+    Claude Code's prompt layout puts the prompt marker a few lines above the bottom
+    (status bar, project name, permissions line are below it), so we
+    check the last ~8 lines rather than just the final line.
+    """
+    r = subprocess.run(
+        ["tmux", "capture-pane", "-t", sess, "-p", "-S", "-10"],
+        capture_output=True,
+        text=True,
+        timeout=3,
+    )
+    if r.returncode != 0:
+        return False
+    text = r.stdout.rstrip()
+    if not text:
+        return False
+    busy_indicators = ("Choreographing", "Seasoning", "Churned", "Gitifying", "Running", "ctrl+b", "thinking")
+    for line in reversed(text.splitlines()):
+        stripped = line.strip()
+        if not stripped:
+            continue
+        if any(ind in stripped for ind in busy_indicators):
+            return False
+        if "❯" in stripped or "Press up to edit" in stripped:
+            return True
+        break
+    return "❯" in text or "Press up to edit" in text
+
+
 def _nudge_session(db: BoardDB, recipient: str) -> None:
     """Inject a fixed prompt into the recipient's tmux session to check inbox.
 
-    Only sends a hardcoded command — never user-controlled content — to avoid
-    shell metacharacter injection via tmux send-keys.
+    Only nudges idle agents — busy agents will pick up messages via the
+    PostToolBatch hook. This avoids commands piling up in Claude Code's
+    message queue when injected mid-response.
     """
+    assert db.env is not None
     if recipient == "all":
         sessions = [r[0] for r in db.query("SELECT name FROM sessions WHERE name != 'all'")]
     else:
@@ -27,17 +62,25 @@ def _nudge_session(db: BoardDB, recipient: str) -> None:
     prefix = db.env.prefix
     board = db.env.install_home / "bin" / "board"
     for name in sessions:
-        if not name.isalnum():
+        if not re.match(r"^[a-z0-9][a-z0-9_-]*$", name):
             continue
         sess = f"{prefix}-{name}"
-        r = subprocess.run(["tmux", "has-session", "-t", sess], capture_output=True)
-        if r.returncode == 0:
+        try:
+            r = subprocess.run(["tmux", "has-session", "-t", sess], capture_output=True, timeout=5)
+            if r.returncode != 0:
+                continue
+            if not _is_idle(sess):
+                continue
             cmd = f"{board} --as {name} inbox"
-            subprocess.run(["tmux", "send-keys", "-t", sess, "-l", cmd], capture_output=True)
-            subprocess.run(["tmux", "send-keys", "-t", sess, "Enter"], capture_output=True)
+            subprocess.run(["tmux", "send-keys", "-t", sess, "-l", cmd], capture_output=True, timeout=5)
+            subprocess.run(["tmux", "send-keys", "-t", sess, "Enter"], capture_output=True, timeout=5)
+        except (subprocess.TimeoutExpired, OSError):
+            continue
 
 
 def cmd_send(db: BoardDB, identity: str, args: list[str]) -> None:
+    assert db.env is not None
+    validate_identity(db, identity)
     name = identity.lower()
     flags, send_args = parse_flags(args, value_flags={"attach": ["--attach", "-a"]})
     attach_file = flags.get("attach")
@@ -48,9 +91,8 @@ def cmd_send(db: BoardDB, identity: str, args: list[str]) -> None:
 
     to = send_args[0].lower()
 
-    if to != "all" and not db.scalar("SELECT COUNT(*) FROM sessions WHERE name=?", (to,)):
-        print(f"ERROR: 收件人 '{to}' 不存在")
-        raise SystemExit(1)
+    if to != "all":
+        db.ensure_session(to)
 
     msg = " ".join(send_args[1:]) if len(send_args) > 1 else ""
 
@@ -62,7 +104,7 @@ def cmd_send(db: BoardDB, identity: str, args: list[str]) -> None:
     stored_path = ""
     h = ""
     if attach_file:
-        path = Path(attach_file)
+        path = Path(str(attach_file))
         if not path.is_file():
             print(f"ERROR: file not found: {attach_file}")
             raise SystemExit(1)
@@ -107,6 +149,7 @@ def cmd_send(db: BoardDB, identity: str, args: list[str]) -> None:
 
 
 def cmd_status(db: BoardDB, identity: str, args: list[str]) -> None:
+    validate_identity(db, identity)
     name = identity.lower()
     if not args:
         print("Usage: ./board --as <name> status <description>")
@@ -118,39 +161,51 @@ def cmd_status(db: BoardDB, identity: str, args: list[str]) -> None:
         "UPDATE sessions SET status=?, updated_at=? WHERE name=?",
         (full_status, now, name),
     )
-    db.sync_status_to_file(name, full_status)
     print("OK status updated")
 
 
 def cmd_inbox(db: BoardDB, identity: str) -> None:
+    validate_identity(db, identity)
     name = identity.lower()
-    if not db.scalar("SELECT COUNT(*) FROM sessions WHERE name=?", (name,)):
-        print(f"ERROR: 会话 '{name}' 未注册")
-        raise SystemExit(1)
     count = db.scalar("SELECT COUNT(*) FROM inbox WHERE session=? AND read=0", (name,))
     if not count:
         print("收件箱为空")
     else:
-        print(f"你有 {count} 条未读:")
         rows = db.query(
-            "SELECT i.message_id, '- [' || m.ts || '] **' || m.sender || '**: ' || m.body "
+            "SELECT i.message_id, m.ts, m.sender, m.body "
             "FROM inbox i JOIN messages m ON i.message_id=m.id "
             "WHERE i.session=? AND i.read=0 ORDER BY m.ts",
             (name,),
         )
         max_id = 0
-        for msg_id, line in rows:
-            print(line)
+        for msg_id, msg_ts, sender, body in rows:
+            print(f'<message from="{sender}" ts="{msg_ts}">\n{body}\n</message>')
             if msg_id > max_id:
                 max_id = msg_id
         if max_id > 0:
             _ack_marker_path(db, name).write_text(str(max_id))
-        print(f"\n(运行 ack 清除: board --as {identity} ack)")
 
     _task_print_queue_short(db, name)
 
 
+def _task_print_queue_short(db: BoardDB, target: str) -> None:
+    rows = db.query(
+        "SELECT id, status, priority, description FROM tasks "
+        "WHERE session=? AND status != 'done' "
+        "ORDER BY CASE status WHEN 'active' THEN 0 ELSE 1 END, priority DESC, id ASC",
+        (target,),
+    )
+    print("\n任务队列:")
+    if not rows:
+        print("  (无待办任务)")
+        return
+    for tid, status, priority, desc in rows:
+        marker = "*" if status == "active" else " "
+        print(f"  {marker} #{tid} [{status} p{priority}] {desc}")
+
+
 def cmd_ack(db: BoardDB, identity: str) -> None:
+    validate_identity(db, identity)
     name = identity.lower()
     marker = _ack_marker_path(db, name)
     max_id = None
@@ -170,7 +225,6 @@ def cmd_ack(db: BoardDB, identity: str) -> None:
 
     if count == 0:
         print("收件箱已经是空的")
-        db.clear_inbox_file(name)
         marker.unlink(missing_ok=True)
         return
 
@@ -183,7 +237,6 @@ def cmd_ack(db: BoardDB, identity: str) -> None:
         db.execute("UPDATE inbox SET read=1 WHERE session=? AND read=0", (name,))
 
     print(f"OK {count} 条已清空（完整记录在 messages.log）")
-    db.clear_inbox_file(name)
     marker.unlink(missing_ok=True)
 
 
@@ -212,19 +265,3 @@ def cmd_log(db: BoardDB, identity: str, args: list[str]) -> None:
         )
     for (line,) in reversed(rows):
         print(line)
-
-
-def _task_print_queue_short(db: BoardDB, target: str) -> None:
-    rows = db.query(
-        "SELECT id, status, priority, description FROM tasks "
-        "WHERE session=? AND status != 'done' "
-        "ORDER BY CASE status WHEN 'active' THEN 0 ELSE 1 END, priority DESC, id ASC",
-        (target,),
-    )
-    print("\n任务队列:")
-    if not rows:
-        print("  (无待办任务)")
-        return
-    for tid, status, priority, desc in rows:
-        marker = "*" if status == "active" else " "
-        print(f"  {marker} #{tid} [{status} p{priority}] {desc}")

package/lib/board_pending.py

@@ -0,0 +1,233 @@
+"""board_pending — pending actions queue: add / list / verify / retry / resolve."""
+
+import subprocess
+
+from lib.board_db import BoardDB, ts
+from lib.common import parse_flags
+
+
+VALID_TYPES = ("auth", "approve", "confirm")
+PENDING_STATUSES = ("pending", "reminded")
+
+
+def cmd_pending(db: BoardDB, identity: str, args: list[str]) -> None:
+    subcmd = args[0] if args else "list"
+    rest = args[1:] if len(args) > 1 else []
+
+    if subcmd == "add":
+        _pending_add(db, identity, rest)
+    elif subcmd == "list":
+        _pending_list(db, identity, rest)
+    elif subcmd == "verify":
+        _pending_verify(db, identity, rest)
+    elif subcmd == "retry":
+        _pending_retry(db, identity, rest)
+    elif subcmd == "resolve":
+        _pending_resolve(db, identity, rest)
+    else:
+        print("Usage: ./board --as <name> pending {add|list|verify|retry|resolve}")
+        raise SystemExit(1)
+
+
+def _pending_add(db: BoardDB, identity: str, args: list[str]) -> None:
+    name = identity.lower()
+    flags, positional = parse_flags(
+        args,
+        value_flags={
+            "type": ["--type", "-t"],
+            "command": ["--command", "-c"],
+            "reason": ["--reason", "-r"],
+            "verify": ["--verify", "-v"],
+            "retry": ["--retry"],
+        },
+    )
+
+    action_type = str(flags.get("type", "")).lower()
+    command = str(flags.get("command", ""))
+    reason = str(flags.get("reason", ""))
+    verify_cmd = str(flags.get("verify", "")) or None
+    retry_cmd = str(flags.get("retry", "")) or None
+
+    if not action_type or not command or not reason:
+        print("Usage: ./board --as <name> pending add --type <auth|approve|confirm> --command <cmd> --reason <why> [--verify <cmd>] [--retry <cmd>]")
+        raise SystemExit(1)
+
+    if action_type not in VALID_TYPES:
+        print(f"ERROR: 类型必须是 {', '.join(VALID_TYPES)} 之一")
+        raise SystemExit(1)
+
+    now = ts()
+    action_id = db.execute(
+        "INSERT INTO pending_actions(type, command, reason, verify_command, retry_command, created_by, created_at) "
+        "VALUES (?, ?, ?, ?, ?, ?, ?)",
+        (action_type, command, reason, verify_cmd, retry_cmd, name, now),
+    )
+    print(f"OK pending #{action_id} added ({action_type})")
+    print(f"  用户需执行: {command}")
+    print(f"  原因: {reason}")
+
+
+def _pending_list(db: BoardDB, identity: str, args: list[str]) -> None:
+    flags, _ = parse_flags(args, bool_flags={"all": ["--all", "-a"]})
+    show_all = bool(flags.get("all"))
+
+    if show_all:
+        rows = db.query(
+            "SELECT id, type, command, reason, verify_command, retry_command, status, created_by, created_at, resolved_at "
+            "FROM pending_actions ORDER BY id"
+        )
+    else:
+        rows = db.query(
+            "SELECT id, type, command, reason, verify_command, retry_command, status, created_by, created_at, resolved_at "
+            "FROM pending_actions WHERE status IN ('pending', 'reminded') ORDER BY id"
+        )
+
+    if not rows:
+        print("无待处理操作" if not show_all else "无操作记录")
+        return
+
+    print("=== 待处理操作 ===" if not show_all else "=== 所有操作 ===")
+    print()
+    for row in rows:
+        aid, atype, cmd, reason, verify, retry, status, creator, created, resolved = row
+        status_icon = {"pending": "⏳", "reminded": "🔔", "done": "✓", "retried": "✓✓", "failed": "✗"}.get(status, "?")
+        print(f"  #{aid} [{status_icon} {status}] ({atype}) by {creator}")
+        print(f"    用户需执行: ! {cmd}")
+        print(f"    原因: {reason}")
+        if verify:
+            print(f"    验证命令: {verify}")
+        if retry:
+            print(f"    重试命令: {retry}")
+        if resolved:
+            print(f"    完成于: {resolved}")
+        print()
+
+
+def _pending_verify(db: BoardDB, identity: str, args: list[str]) -> None:
+    specific_id = None
+    if args:
+        try:
+            specific_id = int(args[0].lstrip("#"))
+        except ValueError:
+            print("Usage: ./board --as <name> pending verify [#id]")
+            raise SystemExit(1)
+
+    if specific_id:
+        rows = db.query(
+            "SELECT id, verify_command, command FROM pending_actions WHERE id=? AND status IN ('pending', 'reminded')",
+            (specific_id,),
+        )
+    else:
+        rows = db.query(
+            "SELECT id, verify_command, command FROM pending_actions WHERE status IN ('pending', 'reminded') AND verify_command IS NOT NULL ORDER BY id"
+        )
+
+    if not rows:
+        print("无可验证的操作")
+        return
+
+    verified = 0
+    failed = 0
+    for aid, verify_cmd, cmd in rows:
+        if not verify_cmd:
+            continue
+        try:
+            r = subprocess.run(verify_cmd, shell=True, capture_output=True, text=True, timeout=30)
+            if r.returncode == 0:
+                now = ts()
+                db.execute(
+                    "UPDATE pending_actions SET status='done', resolved_at=? WHERE id=?",
+                    (now, aid),
+                )
+                print(f"  #{aid}: 验证通过 ✓")
+                verified += 1
+            else:
+                db.execute("UPDATE pending_actions SET status='reminded' WHERE id=?", (aid,))
+                print(f"  #{aid}: 验证失败 — 用户仍需执行: ! {cmd}")
+                failed += 1
+        except subprocess.TimeoutExpired:
+            print(f"  #{aid}: 验证超时")
+            failed += 1
+        except OSError as e:
+            print(f"  #{aid}: 验证出错: {e}")
+            failed += 1
+
+    print(f"\n验证结果: {verified} 通过, {failed} 未通过")
+
+
+def _pending_retry(db: BoardDB, identity: str, args: list[str]) -> None:
+    specific_id = None
+    if args:
+        try:
+            specific_id = int(args[0].lstrip("#"))
+        except ValueError:
+            print("Usage: ./board --as <name> pending retry [#id]")
+            raise SystemExit(1)
+
+    if specific_id:
+        rows = db.query(
+            "SELECT id, retry_command FROM pending_actions WHERE id=? AND status='done'",
+            (specific_id,),
+        )
+    else:
+        rows = db.query(
+            "SELECT id, retry_command FROM pending_actions WHERE status='done' AND retry_command IS NOT NULL ORDER BY id"
+        )
+
+    if not rows:
+        print("无可重试的操作（需先通过验证）")
+        return
+
+    retried = 0
+    failed = 0
+    for aid, retry_cmd in rows:
+        if not retry_cmd:
+            continue
+        try:
+            r = subprocess.run(retry_cmd, shell=True, capture_output=True, text=True, timeout=60)
+            if r.returncode == 0:
+                db.execute("UPDATE pending_actions SET status='retried' WHERE id=?", (aid,))
+                print(f"  #{aid}: 重试成功 ✓")
+                retried += 1
+            else:
+                db.execute("UPDATE pending_actions SET status='failed' WHERE id=?", (aid,))
+                print(f"  #{aid}: 重试失败 — {r.stderr.strip() or r.stdout.strip() or 'exit ' + str(r.returncode)}")
+                failed += 1
+        except subprocess.TimeoutExpired:
+            db.execute("UPDATE pending_actions SET status='failed' WHERE id=?", (aid,))
+            print(f"  #{aid}: 重试超时")
+            failed += 1
+        except OSError as e:
+            db.execute("UPDATE pending_actions SET status='failed' WHERE id=?", (aid,))
+            print(f"  #{aid}: 重试出错: {e}")
+            failed += 1
+
+    print(f"\n重试结果: {retried} 成功, {failed} 失败")
+
+
+def _pending_resolve(db: BoardDB, identity: str, args: list[str]) -> None:
+    if not args:
+        print("Usage: ./board --as <name> pending resolve <#id>")
+        raise SystemExit(1)
+
+    try:
+        action_id = int(args[0].lstrip("#"))
+    except ValueError:
+        print("Usage: ./board --as <name> pending resolve <#id>")
+        raise SystemExit(1)
+
+    row = db.query_one("SELECT status FROM pending_actions WHERE id=?", (action_id,))
+    if not row:
+        print(f"ERROR: pending #{action_id} 不存在")
+        raise SystemExit(1)
+
+    if row[0] not in PENDING_STATUSES:
+        print(f"pending #{action_id} 已是 {row[0]} 状态")
+        return
+
+    now = ts()
+    db.execute(
+        "UPDATE pending_actions SET status='done', resolved_at=? WHERE id=?",
+        (now, action_id),
+    )
+    print(f"OK pending #{action_id} 已手动标记为完成")

package/lib/board_pulse.py

@@ -0,0 +1,14 @@
+"""board_pulse — lightweight heartbeat + unread count for PostToolBatch hook."""
+
+from lib.board_db import BoardDB, ts
+from lib.common import validate_identity
+
+
+def cmd_pulse(db: BoardDB, identity: str) -> None:
+    name = identity.lower()
+    validate_identity(db, identity)
+    now = ts()
+    db.execute("UPDATE sessions SET last_heartbeat=? WHERE name=?", (now, name))
+    count = db.scalar("SELECT COUNT(*) FROM inbox WHERE session=? AND read=0", (name,))
+    if count:
+        print(f"{count} 条未读")

package/lib/board_task.py

@@ -1,19 +1,21 @@
 """board_task — task queue: add / done / list / next."""
 
 from lib.board_db import BoardDB, ts
-from lib.common import is_privileged, is_terminal_task_status, parse_flags
+from lib.common import is_privileged, is_terminal_task_status, parse_flags, validate_identity
 
 
 def _promote_next(db: BoardDB, target: str) -> None:
-    active = db.scalar("SELECT COUNT(*) FROM tasks WHERE session=? AND status='active'", (target,))
-    if active:
-        return
-    next_id = db.scalar(
-        "SELECT id FROM tasks WHERE session=? AND status='pending' ORDER BY priority DESC, id ASC LIMIT 1",
-        (target,),
-    )
-    if next_id:
-        db.execute("UPDATE tasks SET status='active' WHERE id=?", (next_id,))
+    with db.conn() as c:
+        active = db.scalar("SELECT COUNT(*) FROM tasks WHERE session=? AND status='active'", (target,), c=c)
+        if active:
+            return
+        next_id = db.scalar(
+            "SELECT id FROM tasks WHERE session=? AND status='pending' ORDER BY priority DESC, id ASC LIMIT 1",
+            (target,),
+            c=c,
+        )
+        if next_id:
+            db.execute("UPDATE tasks SET status='active' WHERE id=?", (next_id,), c=c)
 
 
 def _print_queue(db: BoardDB, target: str, include_done: bool = False) -> None:
@@ -46,6 +48,7 @@ def _print_queue(db: BoardDB, target: str, include_done: bool = False) -> None:
 
 
 def cmd_task(db: BoardDB, identity: str, args: list[str]) -> None:
+    validate_identity(db, identity)
     subcmd = args[0] if args else "list"
     rest = args[1:] if len(args) > 1 else []
 
@@ -77,46 +80,52 @@ def _task_add(db: BoardDB, identity: str, args: list[str]) -> None:
 
     desc = " ".join(desc_parts)
 
-    db.ensure_session(target)
+    with db.conn() as c:
+        db.ensure_session(target, c=c)
 
-    active = db.scalar("SELECT COUNT(*) FROM tasks WHERE session=? AND status='active'", (target,))
-    status = "active" if not active else "pending"
+        active = db.scalar("SELECT COUNT(*) FROM tasks WHERE session=? AND status='active'", (target,), c=c)
+        status = "active" if not active else "pending"
 
-    task_id = db.execute(
-        "INSERT INTO tasks(session, description, status, priority) VALUES (?, ?, ?, ?)",
-        (target, desc, status, priority),
-    )
-    print(f"OK task #{task_id} added to {target} ({status})")
-
-    if target != name:
-        now = ts()
-        msg_id = db.execute(
-            "INSERT INTO messages(ts, sender, recipient, body) VALUES (?, ?, ?, ?)",
-            (now, name, target, f"[TASK #{task_id}] {desc}"),
+        task_id = db.execute(
+            "INSERT INTO tasks(session, description, status, priority) VALUES (?, ?, ?, ?)",
+            (target, desc, status, priority),
+            c=c,
         )
-        db.execute("INSERT INTO inbox(session, message_id) VALUES (?, ?)", (target, msg_id))
-        db.sync_inbox_to_file(target)
-        print(f"OK notified {target}")
+        print(f"OK task #{task_id} added to {target} ({status})")
+
+        if target != name:
+            now = ts()
+            msg_id = db.execute(
+                "INSERT INTO messages(ts, sender, recipient, body) VALUES (?, ?, ?, ?)",
+                (now, name, target, f"[TASK #{task_id}] {desc}"),
+                c=c,
+            )
+            db.execute("INSERT INTO inbox(session, message_id) VALUES (?, ?)", (target, msg_id), c=c)
+            print(f"OK notified {target}")
     _print_queue(db, target)
 
 
 def _task_done(db: BoardDB, identity: str, args: list[str]) -> None:
     name = identity.lower()
 
-    task_id = args[0] if args else None
+    raw_id: str | int | None = args[0] if args else None
 
-    if not task_id:
+    if not raw_id:
         _promote_next(db, name)
-        task_id = db.scalar(
+        raw_id = db.scalar(
             "SELECT id FROM tasks WHERE session=? AND status='active' ORDER BY id ASC LIMIT 1",
             (name,),
         )
-    if not task_id:
+    if not raw_id:
         print(f"No active task for {name}.")
         _print_queue(db, name)
         return
 
-    task_id = int(task_id)
+    try:
+        task_id = int(raw_id)
+    except (ValueError, TypeError):
+        print(f"ERROR: 无效的任务 ID: {raw_id}")
+        raise SystemExit(1)
     row = db.query_one("SELECT session, status, description FROM tasks WHERE id=?", (task_id,))
     if not row:
         print(f"ERROR: task #{task_id} not found")