dowafu 0.5.1 → 0.7.0

package/CHANGELOG.md

@@ -0,0 +1,92 @@
+# Changelog
+
+Notable changes per released version. Entries for 0.5.0–0.6.0 were **reconstructed** from
+release commits and internal records after the fact; from 0.7.0 on they are written at
+release time. Versions before 0.5.0 are not covered here — see the git tags (`v0.3.0`
+onwards).
+
+## 0.7.0 — 2026-09-12
+
+### Added
+
+- **`--ticket <name>`** names the ticket explicitly. The positional form still works, and
+  giving both is rejected rather than silently resolved. The queue worker now uses the
+  flag, which is what makes the fix below reachable for tickets that already exist.
+- **Three models**, each verified against the live API before shipping — tool calling,
+  usage on every round, and the model name echoed back unchanged:
+  `gpt-6-astra`, `deepseek-flash`, `gemini-3.8-flash`.
+- `dowafu result --help` and `dowafu approve --help` now print their usage. Previously
+  they treated `--help` as an id to look up, failed with "no results found", and opened
+  the database on the way.
+
+### Changed
+
+- **`ticket create` and `ticket import` reject names the CLI reserves**: the eight
+  subcommands (`ticket`, `providers`, `token`, `key`, `result`, `approve`, `serve`,
+  `mcp`), `-h`, `-V`, and any name beginning with `--`. Such a ticket could be created
+  before but could never run, because the CLI parsed the name as a command — one named
+  `serve` started a daemon instead. Tickets already stored under a reserved name still
+  run via `--ticket <name>`.
+- **The deepseek model enabled on a fresh install is now `deepseek-flash`.** DeepSeek
+  retired `deepseek-v4-flash` on 2026-09-10 and currently routes it to V4.1 Flash with no
+  stated end date; shipping it as the default meant new installs depended on that routing.
+  `deepseek-v4-flash` stays on the whitelist, disabled by default. **Existing databases
+  are not touched** — this only affects a database seeded after upgrading.
+- Prices for every provider re-checked against the vendor pricing pages on 2026-09-12.
+
+### Fixed
+
+- **The install command printed inside each language pack's own README pointed at the
+  `v0.4.0` tag** — unchanged through four releases, so anyone following it fetched
+  reviewer definitions three versions old. All four places that carry the tag are now on
+  the released version.
+- **A reviewer could not read its own ticket when the CLI ran with `--repo-root` from a
+  different working directory.** The ticket paths in its first message came out absolute
+  while the snapshot is keyed by a relative path, so every read of the ticket was refused
+  — and the audit still reported success. The result was a paid review written without
+  ever seeing the plan. Present since 0.5.0.
+
+### Upgrading
+
+Upgrading the package does not refresh the model list: seeding happens only when the model
+table is empty, so your existing prices and enabled flags are never silently rewritten. To
+pick up the three new models:
+
+```bash
+dowafu providers import "$(npm root -g)/dowafu/providers.json"
+dowafu providers list
+```
+
+## 0.6.0 — 2026-09-10
+
+*Reconstructed.*
+
+- A daemon no longer runs jobs that were approved before it started; those are returned to
+  pending approval at startup, so a restart cannot silently execute an old approval.
+- `--doctor` reports the job queue.
+- `engines` corrected to `>=22.13.0`.
+
+## 0.5.1 — 2026-09-09
+
+*Reconstructed.*
+
+- Reviewer output no longer carries template placeholders through to the saved report.
+- Queued jobs choose their own language: `dispatch_submit` accepts `lang`.
+
+## 0.5.0 — 2026-09-06
+
+*Reconstructed. The largest release so far; this is a summary, not a full list.*
+
+- **Tickets and reviewer output moved into SQLite.** No ticket directories or output files
+  on disk. What a reviewer reads is the snapshot taken when the ticket was written, not
+  the file as it stands at run time.
+- **Job queue and a long-running daemon** (`dowafu serve`), with MCP over stdio
+  (`dowafu mcp`) and over HTTP bound to `127.0.0.1` only. Inbound tokens are stored
+  hashed, compared in constant time, and rate limited per token.
+- **The model whitelist, per-model enabled flags and prices moved into the database**;
+  the `--providers` flag was removed. An empty database is seeded from the file shipped
+  with the package.
+- **API keys come from the database only** (`dowafu key`); environment variables and
+  `.env` support were removed, along with the `dotenv` dependency.
+- **Costs are stated in dollars** before you approve: a hard upper bound, plus the typical
+  spend of past runs when there are any.

package/README.md

@@ -117,7 +117,7 @@ dowafu ticket create auth-review - <<'EOF'
 ...
 EOF
 
-dowafu ticket add-spoke auth-review hole-finder-safety deepseek deepseek-v4-flash - <<'EOF'
+dowafu ticket add-spoke auth-review hole-finder-safety deepseek deepseek-flash - <<'EOF'
 # Questions
 1. Does the permission check described here hold under concurrent requests?
 
@@ -177,12 +177,24 @@ response for every call. Read a run back with `dowafu result <id>`.
 
 ## Models
 
-| provider | model |
-| --- | --- |
-| `openai` | `gpt-5.6-luna`, `gpt-5.6-terra`, `gpt-5.6-sol` |
-| `deepseek` | `deepseek-v4-flash` |
-| `gemini` | `gemini-3.1-flash-lite`, `gemini-3.5-flash-lite`, `gemini-3.6-flash` |
-| `anthropic` | `claude-opus-5`, `claude-sonnet-5` |
+| provider | model | on a fresh install |
+| --- | --- | :-: |
+| `openai` | `gpt-5.6-luna` | **enabled** |
+| | `gpt-5.6-terra`, `gpt-5.6-sol`, `gpt-6-astra` | disabled |
+| `deepseek` | `deepseek-flash` | **enabled** |
+| | `deepseek-v4-flash`, `deepseek-v4-pro` | disabled |
+| `gemini` | `gemini-3.1-flash-lite`, `gemini-3.5-flash-lite` | **enabled** |
+| | `gemini-3.6-flash`, `gemini-3.7-flash`, `gemini-3.8-flash` | disabled |
+| `anthropic` | `claude-haiku-4-5-20251001` | **enabled** |
+| | `claude-opus-5`, `claude-sonnet-5` | disabled |
+
+Fifteen models, five of them enabled out of the box — the pricier ones start disabled so
+that a typo cannot quietly dispatch to an expensive model. Dispatching to a disabled model
+is rejected before any spend, and tells you the `providers enable` command to run.
+
+`deepseek-v4-flash` was retired upstream on 2026-09-10 and is currently routed to V4.1
+Flash with no stated end date. It stays on the list so existing tickets keep working;
+**new tickets should use `deepseek-flash`**.
 
 The list ships with the package as `providers.json` and is seeded into the database the
 first time one is opened. From then on **the database is the source of truth**:
@@ -193,6 +205,16 @@ dowafu providers enable|disable <model>    # flip one on or off
 dowafu providers import <path>             # load your own file
 ```
 
+**Upgrading the package does not refresh the list.** Seeding happens only when the model
+table is completely empty, so an upgrade never silently changes a price or an enabled flag
+you already have. To pick up models added in a later release, import the shipped file
+yourself:
+
+```bash
+dowafu providers import "$(npm root -g)/dowafu/providers.json"
+dowafu providers list                      # confirm the new models are there
+```
+
 There is no `--providers` flag — it was removed in 0.5.0, when the whitelist moved into
 the database. Passing it is rejected as an unknown option.
 
@@ -208,7 +230,7 @@ not work: a reviewer's fixed closing line has to match the template the audit ch
 against.
 
 ```bash
-npx degit eyesofkids/dowafu/publish/en#v0.5.0 .claude-pack   # or publish/zh-tw
+npx degit eyesofkids/dowafu/publish/en#v0.7.0 .claude-pack   # or publish/zh-tw
 
 cd .claude-pack
 TARGET=<your project>
@@ -244,8 +266,9 @@ There are two transports, and the difference that matters is who starts what.
 ### Both transports need `dowafu serve`
 
 `dowafu mcp` only answers tool calls — **it never runs a reviewer**. The worker that
-actually spends money lives in `dowafu serve`. Without one running, an approved job sits
-in the queue forever and nothing tells the agent why.
+actually spends money lives in `dowafu serve`. Without one running, an approved job never
+runs — `dispatch_submit`, `dispatch_approve` and `dispatch_status` each print a `⚠` line
+saying so.
 
 ```
 stdio:  your client ──spawn──→ dowafu mcp ──┐
@@ -255,9 +278,11 @@ stdio:  your client ──spawn──→ dowafu mcp ──┐
 HTTP:   your client ──x-api-key──→ dowafu serve  (endpoint and worker, one process)
 ```
 
-So on stdio you keep `dowafu serve` running in a terminal next to the client. The order
-is forgiving there — start it before or after approving, and the daemon picks the job up
-on its next tick.
+So on stdio you keep `dowafu serve` running in a terminal next to the client. **Start it
+before you approve.** A daemon only runs approvals made while it is up: when it starts,
+and again when it stops, any job still waiting in `approved` goes back to pending approval,
+so an approval given before the daemon was running has to be given again. `dowafu serve`
+prints how many it sent back.
 
 ### stdio
 
@@ -353,6 +378,25 @@ With the daemon always up the stdio path needs nothing extra — `dowafu mcp` fi
 worker already running. Typing `dowafu serve` yourself will then refuse with
 `daemon already running (pid N)`: that is the guard working, not a fault.
 
+### Stopping and restarting
+
+`dowafu serve --stop` stops the daemon; `dowafu serve --restart` stops it and starts a new
+one (or just starts one if none is running). When something would be affected, both ask
+first — separately — about:
+
+- **jobs still running** — stopping the daemon does not stop a reviewer already in flight.
+  It runs to completion, and its results and API cost are still recorded.
+- **jobs approved but not yet started** — they go back to pending approval, so the next
+  daemon cannot run them without a fresh approval.
+
+With no terminal to answer (an agent calling it, a script), a question counts as "no" and
+nothing is stopped; pass `--yes` to go ahead.
+
+If the daemon ignores SIGTERM, `--stop` says so and prints the pid to inspect. Do not reach
+for SIGKILL: a reviewer's worker process can outlive the daemon and still write its results.
+And if the daemon comes straight back after stopping, a service manager (the `KeepAlive` /
+`Restart=always` above) is restarting it — stop it with `launchctl` or `systemctl` instead.
+
 ### Approval is still a separate step
 
 `dispatch_submit` queues a job and stops; nothing is billed until it is approved. Two

package/README_zh-tw.md

@@ -98,7 +98,7 @@ dowafu ticket create auth-review - <<'EOF'
 ...
 EOF
 
-dowafu ticket add-spoke auth-review hole-finder-safety deepseek deepseek-v4-flash - <<'EOF'
+dowafu ticket add-spoke auth-review hole-finder-safety deepseek deepseek-flash - <<'EOF'
 # 具體問題
 1. 這裡描述的權限檢查在併發請求下還成立嗎？
 
@@ -166,12 +166,22 @@ dowafu result <id>
 
 ## Models
 
-| Provider | Model |
-| --- | --- |
-| `openai` | `gpt-5.6-luna`、`gpt-5.6-terra`、`gpt-5.6-sol` |
-| `deepseek` | `deepseek-v4-flash` |
-| `gemini` | `gemini-3.1-flash-lite`、`gemini-3.5-flash-lite`、`gemini-3.6-flash` |
-| `anthropic` | `claude-opus-5`、`claude-sonnet-5` |
+| Provider | Model | 全新安裝時 |
+| --- | --- | :-: |
+| `openai` | `gpt-5.6-luna` | **啟用** |
+| | `gpt-5.6-terra`、`gpt-5.6-sol`、`gpt-6-astra` | 停用 |
+| `deepseek` | `deepseek-flash` | **啟用** |
+| | `deepseek-v4-flash`、`deepseek-v4-pro` | 停用 |
+| `gemini` | `gemini-3.1-flash-lite`、`gemini-3.5-flash-lite` | **啟用** |
+| | `gemini-3.6-flash`、`gemini-3.7-flash`、`gemini-3.8-flash` | 停用 |
+| `anthropic` | `claude-haiku-4-5-20251001` | **啟用** |
+| | `claude-opus-5`、`claude-sonnet-5` | 停用 |
+
+共 15 個 Model，開箱只啟用五個——較貴的預設停用，讓打錯字不會安靜地派到昂貴的 Model 上。
+派到停用的 Model 會在產生任何費用之前被拒絕，並告訴你該跑哪一條 `providers enable`。
+
+`deepseek-v4-flash` 已於 2026-09-10 在上游退役，目前被轉址到 V4.1 Flash，官方未說明何時停止。
+它留在清單上是為了讓既有工單還能運作，**新工單請改用 `deepseek-flash`**。
 
 這份清單會隨套件以 `providers.json` 一起提供，並在第一次開啟資料庫時播種進去。
 之後**資料庫就是唯一來源**：
@@ -182,6 +192,14 @@ dowafu providers enable|disable <model>    # 開關其中一個
 dowafu providers import <path>             # 匯入自己的設定檔
 ```
 
+**升級套件不會刷新這份清單。** 播種只在 Model 表完全為空時發生，所以升級永遠不會安靜地改掉
+你既有的價格或啟用狀態。要取得後續版本新增的 Model，請自己匯入隨套件出貨的那一份：
+
+```bash
+dowafu providers import "$(npm root -g)/dowafu/providers.json"
+dowafu providers list                      # 確認新的 Model 已經進來
+```
+
 **沒有 `--providers` 旗標**——0.5.0 把白名單搬進資料庫時已移除，帶了會被當成未知選項拒絕。
 
 ## 從 Agent 驅動
@@ -199,7 +217,7 @@ dowafu providers import <path>             # 匯入自己的設定檔
 `publish/` 提供兩種語言：`publish/en/` 與 `publish/zh-tw/`。**擇一複製，不可混裝**——審查者的固定收尾句必須與稽核檢查用的範本是同一種語言。
 
 ```bash
-npx degit eyesofkids/dowafu/publish/zh-tw#v0.5.0 .claude-pack   # 或 publish/en
+npx degit eyesofkids/dowafu/publish/zh-tw#v0.7.0 .claude-pack   # 或 publish/en
 
 cd .claude-pack
 TARGET=<your project>
@@ -238,8 +256,8 @@ Agent 可以不走 shell，改用 MCP 驅動 `dowafu`。露出五個 tool：`dis
 ### 兩條路都需要 `dowafu serve`
 
 `dowafu mcp` 只回應 tool 呼叫，**它不執行任何 reviewer**。真正花錢的 worker 在
-`dowafu serve` 裡。沒有它，核准過的 job 會永遠留在佇列裡，而且沒有任何東西會告訴 agent
-為什麼。
+`dowafu serve` 裡。沒有它，核准過的 job 永遠不會執行——`dispatch_submit`、`dispatch_approve`、
+`dispatch_status` 都會印一行 `⚠` 說明這件事。
 
 ```
 stdio：  你的 client ──spawn──→ dowafu mcp ──┐
@@ -249,8 +267,9 @@ stdio：  你的 client ──spawn──→ dowafu mcp ──┐
 HTTP：   你的 client ──x-api-key──→ dowafu serve  （端點與 worker 同一個行程）
 ```
 
-所以走 stdio 時，要在 client 旁邊另開一個終端機讓 `dowafu serve` 跑著。這條路的順序很寬鬆
-——核准之前或之後才起都可以，daemon 下一個 tick 就會把它撿走。
+所以走 stdio 時，要在 client 旁邊另開一個終端機讓 `dowafu serve` 跑著。**要先起 daemon，再核准。**
+daemon 只執行它在線期間核准的 job：它啟動時、以及停止時，還停在「已核准」的 job 會被退回待核准，
+所以在 daemon 起來之前給的核准要再給一次。`dowafu serve` 會印出退回了幾張。
 
 ### stdio
 
@@ -339,6 +358,20 @@ daemon 常駐之後，stdio 那條路不需要任何額外動作——`dowafu mc
 這時自己再打 `dowafu serve` 會被擋下並回報 `daemon already running (pid N)`：
 **那是守衛在運作，不是故障。**
 
+### 停止與重啟
+
+`dowafu serve --stop` 停掉 daemon；`dowafu serve --restart` 停掉之後再起一支新的
+（沒在跑的話就直接起）。有東西會受影響時，兩者都會先分開問兩件事：
+
+- **還在執行的 job**——停掉 daemon 不會停掉已經在跑的審查者，它會跑完，結果與 API 成本照樣記帳。
+- **已核准但還沒開始的 job**——會退回待核准，下一支 daemon 沒有新的核准就不會跑它們。
+
+沒有終端機可以回答時（agent 代為呼叫、腳本），問題一律視為「不要」，什麼都不會停；要繼續就帶 `--yes`。
+
+daemon 收到 SIGTERM 卻沒停下來時，`--stop` 會明說並印出要檢查的 pid。**不要改用 SIGKILL**：
+審查者的 worker 行程可能比 daemon 活得久，照樣會寫入結果。停掉之後 daemon 馬上又回來，
+代表有服務管理器（上面的 `KeepAlive`／`Restart=always`）在重拉它——那要用 `launchctl` 或 `systemctl` 停。
+
 ### 核准仍然是獨立的一步
 
 `dispatch_submit` 只把 job 排進佇列就停下，核准之前不會計費。兩種核准方式：在自己的終端機下

package/dist/cli-args.js

@@ -10,6 +10,7 @@ import { DEFAULT_HTTP_PORT } from "./mcp/http.js";
 import { getCommandName } from "./pkg-info.js";
 import { DEFAULT_MAX_TOOL_CALLS } from "./cost.js";
 import { m } from "./messages.js";
+import { CLI_COMMANDS, CLI_SHORTCUTS } from "./cli-commands.js";
 const DEFAULTS = {
     out: "tmp/spoke",
     concurrency: 2,
@@ -86,9 +87,19 @@ export function resolveLang(cliLangRaw, envLangRaw) {
 export function parseArgs(argv, lang) {
     const helpText = m(lang, "helpText", getCommandName());
     // --help／--version 可出現在任何位置，且優先於其他一切解析——不要求先有 ticketDir。
-    if (argv.includes("--help") || argv.includes("-h"))
+    // A named ticket is opaque, including legacy names such as --help or -V.
+    let ticketValue = false;
+    const controlArgs = argv.filter((arg) => {
+        if (ticketValue) {
+            ticketValue = false;
+            return false;
+        }
+        ticketValue = arg === "--ticket";
+        return true;
+    });
+    if (controlArgs.includes("--help") || controlArgs.includes(CLI_SHORTCUTS.help))
         return { mode: "help" };
-    if (argv.includes("--version") || argv.includes("-V"))
+    if (controlArgs.includes("--version") || controlArgs.includes(CLI_SHORTCUTS.version))
         return { mode: "version" };
     const options = { ...DEFAULTS };
     // 熱修補（票 C 驗收）：`DOWAFU_HTTP_PORT` 原本只寫在 `daemon.ts` 的 `serve()` 參數預設值裡，
@@ -104,6 +115,7 @@ export function parseArgs(argv, lang) {
     let doctorMode = false;
     let serveMode = false;
     let serveStop = false;
+    let serveRestart = false;
     let mcpMode = false;
     const numFlag = (name, apply) => {
         flagHandlers[name] = (v) => {
@@ -114,6 +126,11 @@ export function parseArgs(argv, lang) {
         };
     };
     const flagHandlers = {};
+    flagHandlers["ticket"] = (v) => {
+        if (ticketDir !== undefined)
+            throw new DispatchError(m(lang, "tooManyArgs", v, ticketDir, helpText), 2);
+        ticketDir = v;
+    };
     flagHandlers["out"] = (v) => (options.out = v);
     flagHandlers["repo-root"] = (v) => (options.repoRoot = v);
     flagHandlers["db"] = (v) => (options.dbPath = v);
@@ -153,13 +170,16 @@ export function parseArgs(argv, lang) {
             // （見迴圈後方）——這樣 --doctor 與 --lang 之類的已知旗標仍可同時給、彼此不衝突。
             doctorMode = true;
         }
-        else if (arg === "serve") {
+        else if (arg === CLI_COMMANDS.serve) {
             serveMode = true;
         }
         else if (arg === "--stop") {
             serveStop = true;
         }
-        else if (arg === "mcp") {
+        else if (arg === "--restart") {
+            serveRestart = true;
+        }
+        else if (arg === CLI_COMMANDS.mcp) {
             mcpMode = true;
         }
         else if (arg.startsWith("--")) {
@@ -190,16 +210,18 @@ export function parseArgs(argv, lang) {
         if (ticketDir !== undefined) {
             throw new DispatchError(m(lang, "tooManyArgs", ticketDir, "--doctor", helpText), 2);
         }
-        if (serveStop)
+        if (serveStop || serveRestart)
             throw new DispatchError(m(lang, "stopRequiresServe"), 2);
         return { mode: "doctor", options };
     }
     if (serveMode) {
         if (ticketDir !== undefined)
             throw new DispatchError(m(lang, "tooManyArgs", ticketDir, "serve", helpText), 2);
-        return { mode: "serve", options, stop: serveStop };
+        if (serveStop && serveRestart)
+            throw new DispatchError(m(lang, "stopRestartConflict"), 2);
+        return { mode: "serve", options, stop: serveStop, restart: serveRestart };
     }
-    if (serveStop)
+    if (serveStop || serveRestart)
         throw new DispatchError(m(lang, "stopRequiresServe"), 2);
     if (mcpMode) {
         if (ticketDir !== undefined)

package/dist/cli-commands.js

@@ -0,0 +1,12 @@
+// These spellings drive both dispatch and ticket-name validation.
+export const CLI_COMMANDS = {
+    ticket: "ticket", providers: "providers", token: "token", key: "key",
+    result: "result", approve: "approve", serve: "serve", mcp: "mcp",
+};
+export const CLI_SHORTCUTS = { help: "-h", version: "-V" };
+export function reservedTicketNames() {
+    return [...Object.values(CLI_COMMANDS), ...Object.values(CLI_SHORTCUTS), "--*"];
+}
+export function isReservedTicketName(name) {
+    return name.startsWith("--") || reservedTicketNames().includes(name);
+}

package/dist/cli.js

@@ -13,10 +13,10 @@ import { loadProviders } from "./providers.js";
 import { loadTicket } from "./ticket.js";
 import { resolveSpokes } from "./validate.js";
 import { estimateTokens, estimateAllowlistTokens, estimateSequentialRead, checkGateOne } from "./gate.js";
-import { buildFirstUserText, buildSystemPrompt } from "./prompt.js";
+import { buildSystemPrompt } from "./prompt.js";
 import { buildReport, effectiveCap, effectiveCharsPerToken } from "./report.js";
 import { checkGitignore } from "./gitignore-check.js";
-import { runSpoke } from "./runner.js";
+import { buildSpokeFirstUserText, runSpoke } from "./runner.js";
 import { Semaphore } from "./semaphore.js";
 import { createResponsesAdapter } from "./adapters/responses.js";
 import { createGeminiAdapter } from "./adapters/gemini-native.js";
@@ -29,12 +29,13 @@ import { registerSecrets, maskString, maskDeep } from "./mask.js";
 import { buildDoctorReportData, renderDoctorReport } from "./doctor.js";
 import { bundledProvidersPath, getPackageVersion, getCommandName } from "./pkg-info.js";
 import { buildJsonPayload, buildJsonPlan } from "./json-output.js";
+import { CLI_COMMANDS } from "./cli-commands.js";
 import { parseArgs, formatEvent, resolveLang, resolveFallbackLang, buildStdoutSummary } from "./cli-args.js";
 import { m } from "./messages.js";
 import { defaultDbPath, openDb } from "./db.js";
 import { issueToken, listTokens, revokeToken } from "./api-token.js";
 import { addAllow, addSpoke, createTicket, formatTicket, hasResults, importTicketDirectory } from "./ticket-store.js";
-import { approveJob, findJobsByIdPrefix, getJob, listPendingApprovalJobs } from "./job.js";
+import { approveJob, countQueueJobs, findJobsByIdPrefix, getJob, listPendingApprovalJobs } from "./job.js";
 import { serve, stopDaemon } from "./daemon.js";
 import { daemonAlive, daemonStatePath } from "./liveness.js";
 import { startStdioServer } from "./mcp/stdio.js";
@@ -489,24 +490,28 @@ async function main() {
     // 這個不會拋例外的簡化判定（resolveFallbackLang，見 cli-args.ts）。--lang 旗標的值在這個
     // 時間點還沒被驗證，不查它（v1.3 §二之2 #5／#6：help／version 的語言不受 --lang 影響）。
     const messageLang = resolveFallbackLang(process.env.DISPATCH_LANG);
-    if (process.argv[2] === "ticket") {
+    if (process.argv[2] === CLI_COMMANDS.ticket) {
         await ticketCommand(process.argv.slice(3), messageLang);
         return;
     }
-    if (process.argv[2] === "providers") {
+    if (process.argv[2] === CLI_COMMANDS.providers) {
         await providersCommand(process.argv.slice(3), messageLang);
         return;
     }
-    if (process.argv[2] === "token") {
+    if (process.argv[2] === CLI_COMMANDS.token) {
         await tokenCommand(process.argv.slice(3), messageLang);
         return;
     }
-    if (process.argv[2] === "key") {
+    if (process.argv[2] === CLI_COMMANDS.key) {
         await keyCommand(process.argv.slice(3), messageLang);
         return;
     }
-    if (process.argv[2] === "result") {
+    if (process.argv[2] === CLI_COMMANDS.result) {
         const args = process.argv.slice(3);
+        if (args[0] === "--help" || args[0] === "-h") {
+            console.log(m(messageLang, "resultHelp", getCommandName()));
+            return;
+        }
         const positional = [];
         let dbPath;
         for (let i = 0; i < args.length; i++) {
@@ -547,8 +552,12 @@ async function main() {
         console.log(lines.join("\n\n"));
         return;
     }
-    if (process.argv[2] === "approve") {
+    if (process.argv[2] === CLI_COMMANDS.approve) {
         const args = process.argv.slice(3);
+        if (args[0] === "--help" || args[0] === "-h") {
+            console.log(m(messageLang, "approveHelp", getCommandName()));
+            return;
+        }
         const positional = [];
         let dbPath;
         for (let i = 0; i < args.length; i++) {
@@ -611,6 +620,9 @@ async function main() {
         // 工單 key-db §B-3 #6：逐 provider 印出實際生效的是哪一層——doctorDb 開不起來時就沒有
         // DB 可查，keyStatusRows 留空陣列（buildApiKeyValue 對空陣列的降級輸出）。
         let keyStatusRows = [];
+        // A database failure must leave --doctor usable. Its JSON contract still has
+        // numeric queue fields, so the unavailable DB degrades to zero counts.
+        let queue = { pendingApproval: 0, approved: 0, running: 0 };
         // A（gaps #1）：整份報表——DB、金鑰、型號白名單、daemon——都要來自**這次真的會用到的**
         // 那個 DB。先前這裡寫死 undefined／defaultDbPath()，於是 `--doctor --db <別的>` 印的
         // 全是預設 DB 的狀況，而使用者指定的那個檔連建都不會建。
@@ -620,49 +632,60 @@ async function main() {
             const providers = loadProviders(doctorDb, messageLang);
             providersResult = { ok: true, providers, models: listModels(doctorDb) };
             keyStatusRows = buildKeyStatusRows(doctorDb);
+            queue = countQueueJobs(doctorDb);
         }
         catch (err) {
             const reason = err instanceof DispatchError ? err.message : maskString(String(err));
             providersResult = { ok: false, reason };
         }
-        const doctorData = buildDoctorReportData(getCommandName(), providersResult, process.env, undefined, undefined, undefined, daemonAlive(daemonStatePath(doctorDbPath)), keyStatusRows, doctorDbPath);
+        const doctorData = buildDoctorReportData(getCommandName(), providersResult, process.env, undefined, undefined, undefined, daemonAlive(daemonStatePath(doctorDbPath)), keyStatusRows, doctorDbPath, queue);
         console.log(parsed.options.json ? JSON.stringify(doctorData) : renderDoctorReport(messageLang, getCommandName(), doctorData));
         return;
     }
     if (parsed.mode === "serve") {
-        if (parsed.stop) {
+        if (parsed.stop || parsed.restart) {
             const outcome = await stopDaemon(parsed.options.dbPath, {
                 force: parsed.options.yes,
                 confirmRunningJobs: async (count) => {
                     console.log(m(messageLang, "daemonStopRunningWarning", count));
                     return confirm(m(messageLang, "daemonStopConfirmPrompt"), process.stdout);
                 },
+                confirmApprovedJobs: async (count) => {
+                    console.log(m(messageLang, "daemonStopApprovedWarning", count));
+                    return confirm(m(messageLang, "daemonStopApprovedConfirmPrompt"), process.stdout);
+                },
             });
             switch (outcome.status) {
                 case "not_running":
                     console.log(m(messageLang, "daemonStopNotRunning", outcome.reason));
+                    if (parsed.restart)
+                        break;
                     break;
                 case "cancelled":
                     console.log(m(messageLang, "daemonStopCancelled"));
-                    break;
+                    return;
                 case "pid_not_dowafu":
                     console.log(m(messageLang, "daemonStopPidNotDowafu", outcome.pid));
-                    break;
+                    return;
                 case "signal_failed":
                     console.log(m(messageLang, "daemonStopSignalFailed", outcome.pid));
-                    break;
+                    console.log(m(messageLang, "daemonStopApprovedCleaned", outcome.requeuedApprovedJobs));
+                    return;
                 case "stopped":
                     console.log(m(messageLang, "daemonStopSucceeded", outcome.pid));
+                    console.log(m(messageLang, "daemonStopApprovedCleaned", outcome.requeuedApprovedJobs));
                     break;
                 case "restarted":
                     console.log(m(messageLang, "daemonStopRestarted", outcome.pid));
-                    break;
+                    return;
             }
-            return;
+            if (parsed.stop)
+                return;
         }
         try {
             const daemon = await serve(parsed.options.dbPath, undefined, parsed.options.httpPort, messageLang);
-            console.log(m(messageLang, "daemonStarted"));
+            console.log(m(messageLang, parsed.restart ? "daemonRestartStarted" : "daemonStarted"));
+            console.log(m(messageLang, "daemonStartApprovedCleaned", daemon.requeuedApprovedJobs));
             console.log(m(messageLang, "httpServerStarted", daemon.httpPort));
             // B-1 #6：端點活著但沒發過 token，任何請求都進不來——失敗長得像成功，必須警告。
             if (!daemon.hasActiveToken)
@@ -689,6 +712,8 @@ async function main() {
     const lang = resolveLang(options.langRaw, process.env.DISPATCH_LANG);
     // v1.10 §9：--repo-root 只影響白名單邊界、.claude/agents 位置、_docs/ 拒絕判定；
     // 工單目錄仍相對 cwd 解析，不要求位於 repoRoot 內（見 resolveSpokes 呼叫處）。
+    // （ticket-dir-cwd 補註：0.5.0 起 CLI 只走 DB 工單，ticket.ticketDir 是虛擬的 `ticket/<name>`，
+    // 不再相對 cwd 解析——見 runner.ts 的 buildSpokeFirstUserText。上一行是目錄工單時代的描述。）
     const repoRoot = path.resolve(options.repoRoot ?? process.cwd());
     const ticketId = ticketName;
     const db = openDbSeeded(options.dbPath, lang);
@@ -703,7 +728,8 @@ async function main() {
     // §10 步驟 6／§14 閘門一：呼叫前估算
     const estimates = spokes.map((spoke) => {
         const systemPrompt = buildSystemPrompt(spoke.agentBody, spoke.lang);
-        const firstUserText = buildFirstUserText(ticket.ticketDir, spoke.agent, spoke.allowedReadsRelative, repoRoot, spoke.lang);
+        // ticket-dir-cwd 不變量 3：與 runSpoke 同一個組裝點——估算的就是實跑會送出的那則訊息。
+        const firstUserText = buildSpokeFirstUserText(spoke, ticket.ticketDir, repoRoot);
         const charsPerToken = effectiveCharsPerToken(spoke, options);
         return {
             agent: spoke.agent,

package/dist/daemon.js

@@ -2,7 +2,7 @@ import { execFileSync, spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
 import { hasAnyActiveToken } from "./api-token.js";
 import { defaultDbPath, openDb } from "./db.js";
-import { claimNextJob, finishJob, heartbeatJob, reapInterruptedJobs } from "./job.js";
+import { claimNextJob, finishJob, heartbeatJob, reapInterruptedJobs, requeueApprovedJobs } from "./job.js";
 import { DAEMON_STALE_MS, daemonAlive, daemonStatePath, writeHeartbeat } from "./liveness.js";
 import { createHttpServer, DEFAULT_HTTP_PORT } from "./mcp/http.js";
 import { maskString } from "./mask.js";
@@ -84,8 +84,8 @@ export function runCliJob(job, dbPath, lang = "en", deps = DEFAULT_RUN_CLI_JOB_D
     // stdout use the same language as the daemon's own failure message.
     const jobLang = job.lang ?? lang;
     const args = sourceMode
-        ? ["--import", "tsx", cliPath, job.ticket, "--yes", "--job-id", job.id, "--db", dbPath, "--lang", jobLang]
-        : [cliPath, job.ticket, "--yes", "--job-id", job.id, "--db", dbPath, "--lang", jobLang];
+        ? ["--import", "tsx", cliPath, "--ticket", job.ticket, "--yes", "--job-id", job.id, "--db", dbPath, "--lang", jobLang]
+        : [cliPath, "--ticket", job.ticket, "--yes", "--job-id", job.id, "--db", dbPath, "--lang", jobLang];
     return new Promise((resolve) => {
         const child = deps.spawn(process.execPath, args, { stdio: ["inherit", "inherit", "pipe"], env: process.env });
         let stderrTail = Buffer.alloc(0);
@@ -112,6 +112,11 @@ const DEFAULT_STOP_DAEMON_DEPS = {
         const row = openDb(dbPath).prepare("SELECT COUNT(*) AS count FROM jobs WHERE status = 'running'").get();
         return row.count;
     },
+    countApprovedJobs: (dbPath) => {
+        const row = openDb(dbPath).prepare("SELECT COUNT(*) AS count FROM jobs WHERE status = 'approved'").get();
+        return row.count;
+    },
+    requeueApprovedJobs: (dbPath) => requeueApprovedJobs(openDb(dbPath)),
     processCommand: (pid) => {
         try {
             return execFileSync("ps", ["-p", String(pid), "-o", "command="], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
@@ -120,6 +125,15 @@ const DEFAULT_STOP_DAEMON_DEPS = {
             return null;
         }
     },
+    processExists: (pid) => {
+        try {
+            process.kill(pid, 0);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    },
     kill: (pid, signal) => process.kill(pid, signal),
     wait: (ms) => new Promise((resolve) => setTimeout(resolve, ms)),
 };
@@ -132,28 +146,33 @@ export async function stopDaemon(dbPath = defaultDbPath(), options = {}) {
     const initial = deps.liveness(statePath);
     if (!initial.alive)
         return { status: "not_running", reason: initial.reason };
-    const runningJobs = deps.countRunningJobs(dbPath);
-    if (runningJobs > 0 && !options.force) {
-        const confirmed = await (options.confirmRunningJobs?.(runningJobs) ?? Promise.resolve(false));
-        if (!confirmed)
-            return { status: "cancelled", runningJobs };
-    }
     if (!isDowafuProcess(deps.processCommand(initial.pid)))
         return { status: "pid_not_dowafu", pid: initial.pid };
+    const runningJobs = deps.countRunningJobs(dbPath);
+    const approvedJobs = deps.countApprovedJobs(dbPath);
+    const confirmedRunning = runningJobs === 0 || options.force || await (options.confirmRunningJobs?.(runningJobs) ?? Promise.resolve(false));
+    // Ask independently even when the stop confirmation was declined.  A running
+    // worker warning and an old-approval cleanup warning describe different risks.
+    const confirmedApproved = approvedJobs === 0 || options.force || await (options.confirmApprovedJobs?.(approvedJobs) ?? Promise.resolve(false));
+    if (!confirmedRunning || !confirmedApproved)
+        return { status: "cancelled", runningJobs, approvedJobs };
+    const requeuedApprovedJobs = deps.requeueApprovedJobs(dbPath);
     try {
         deps.kill(initial.pid, "SIGTERM");
     }
     catch {
-        return { status: "signal_failed", pid: initial.pid };
+        return { status: "signal_failed", pid: initial.pid, requeuedApprovedJobs };
     }
     for (let attempt = 0; attempt < STOP_CHECK_ATTEMPTS; attempt++) {
         await deps.wait(STOP_CHECK_INTERVAL_MS);
-        if (!deps.liveness(statePath).alive) {
+        if (!deps.liveness(statePath).alive && !deps.processExists(initial.pid)) {
             await deps.wait(STOP_RESTART_WAIT_MS);
-            return deps.liveness(statePath).alive ? { status: "restarted", pid: initial.pid } : { status: "stopped", pid: initial.pid };
+            return deps.liveness(statePath).alive
+                ? { status: "restarted", pid: initial.pid }
+                : { status: "stopped", pid: initial.pid, requeuedApprovedJobs };
         }
     }
-    return { status: "signal_failed", pid: initial.pid };
+    return { status: "signal_failed", pid: initial.pid, requeuedApprovedJobs };
 }
 function bindHttp(db, dbPath, httpPort) {
     return new Promise((resolve, reject) => {
@@ -186,7 +205,9 @@ export function serve(dbPath = defaultDbPath(), maxConcurrent = Number(process.e
     const db = openDb(dbPath);
     return bindHttp(db, dbPath, httpPort).then((httpServer) => {
         let daemon;
+        let requeuedApprovedJobs;
         try {
+            requeuedApprovedJobs = requeueApprovedJobs(db);
             daemon = createDaemon(db, { dbPath, maxConcurrent, execute: (job) => runCliJob(job, dbPath, lang) });
         }
         catch (err) {
@@ -208,6 +229,7 @@ export function serve(dbPath = defaultDbPath(), maxConcurrent = Number(process.e
             },
             httpPort: boundPort,
             hasActiveToken: hasAnyActiveToken(db),
+            requeuedApprovedJobs,
         };
     });
 }

package/dist/doctor.js

@@ -64,6 +64,9 @@ function buildDaemonValue(lang, daemon) {
         return m(lang, "doctorDaemonAlive", daemon.pid);
     return m(lang, "doctorDaemonMissing", daemon?.reason ?? "heartbeat_missing");
 }
+function buildQueueValue(lang, queue) {
+    return m(lang, "doctorQueueValue", queue.pendingApproval, queue.approved, queue.running);
+}
 function buildConfigDirValue(lang, configDir) {
     if (configDir.source === "unresolved")
         return m(lang, "doctorConfigDirUnresolved");
@@ -117,7 +120,7 @@ function buildLensValue(lang, lenses) {
     const closingNames = lenses.withClosing.length > 0 ? lenses.withClosing.join(joiner) : m(lang, "noneLabel");
     return m(lang, "doctorLensFoundValue", lenses.dirPath, lenses.withClosing.length + lenses.withoutClosing.length, lenses.withClosing.length, closingNames, noClosingSuffix);
 }
-export function buildDoctorReportData(cmd, providers, env = process.env, homedir = os.homedir, probe = DEFAULT_PROBE, cwd = process.cwd(), daemon, keyStatusRows = [], dbPath) {
+export function buildDoctorReportData(cmd, providers, env = process.env, homedir = os.homedir, probe = DEFAULT_PROBE, cwd = process.cwd(), daemon, keyStatusRows = [], dbPath, queue = { pendingApproval: 0, approved: 0, running: 0 }) {
     const dispatchHome = resolveDispatchHome(env, homedir);
     const configDir = dispatchHome === null
         ? { source: "unresolved" }
@@ -149,6 +152,7 @@ export function buildDoctorReportData(cmd, providers, env = process.env, homedir
         apiKeys: keyStatusRows.map((row) => ({ ...row })),
         models,
         daemon: daemon ?? { alive: false, reason: "heartbeat_missing" },
+        queue: { ...queue },
         lenses: buildLensData(probe, cwd),
     };
 }
@@ -163,12 +167,13 @@ export function renderDoctorReport(lang, cmd, data) {
         m(lang, "doctorApiKeyLine", buildApiKeyValue(lang, data.apiKeys)),
         m(lang, "doctorModelListLine", buildModelListValue(lang, data.models)),
         m(lang, "doctorDaemonLine", buildDaemonValue(lang, data.daemon)),
+        m(lang, "doctorQueueLine", buildQueueValue(lang, data.queue)),
         m(lang, "doctorLensLine", buildLensValue(lang, data.lenses)),
         "",
         m(lang, "doctorFooter"),
     ];
     return lines.join("\n");
 }
-export function buildDoctorReport(lang, cmd, providers, env = process.env, homedir = os.homedir, probe = DEFAULT_PROBE, cwd = process.cwd(), daemon, keyStatusRows = [], dbPath) {
-    return renderDoctorReport(lang, cmd, buildDoctorReportData(cmd, providers, env, homedir, probe, cwd, daemon, keyStatusRows, dbPath));
+export function buildDoctorReport(lang, cmd, providers, env = process.env, homedir = os.homedir, probe = DEFAULT_PROBE, cwd = process.cwd(), daemon, keyStatusRows = [], dbPath, queue = { pendingApproval: 0, approved: 0, running: 0 }) {
+    return renderDoctorReport(lang, cmd, buildDoctorReportData(cmd, providers, env, homedir, probe, cwd, daemon, keyStatusRows, dbPath, queue));
 }

package/dist/job.js

@@ -21,6 +21,26 @@ export function findJobsByIdPrefix(db, prefix) {
 export function listPendingApprovalJobs(db) {
     return db.prepare("SELECT * FROM jobs WHERE status = 'pending_approval' ORDER BY created_at, id").all();
 }
+// Keep this to one indexed aggregate query rather than loading jobs and counting
+// in JavaScript. `idx_jobs_status` covers both the WHERE predicate and status.
+export function countQueueJobs(db) {
+    const rows = db
+        .prepare(`SELECT status, COUNT(*) AS count
+         FROM jobs
+        WHERE status IN ('pending_approval', 'approved', 'running')
+        GROUP BY status`)
+        .all();
+    const counts = { pendingApproval: 0, approved: 0, running: 0 };
+    for (const row of rows) {
+        if (row.status === "pending_approval")
+            counts.pendingApproval = Number(row.count);
+        else if (row.status === "approved")
+            counts.approved = Number(row.count);
+        else
+            counts.running = Number(row.count);
+    }
+    return counts;
+}
 export function submitJob(db, ticket, id = randomUUID(), lang = null) {
     if (!db.prepare("SELECT 1 FROM tickets WHERE name = ?").get(ticket))
         throw new Error(`ticket does not exist: ${ticket}`);
@@ -51,6 +71,15 @@ export function approveJob(db, id) {
      WHERE id = ? AND status = 'pending_approval'
      RETURNING *`, now(), id);
 }
+// A daemon owns only approvals made after it starts.  Before a new daemon begins
+// claiming work, return any older approvals to the explicit human-approval gate.
+// Keep this as a single guarded UPDATE: concurrent approval is allowed to remain
+// approved for the new daemon, and no other lifecycle state is touched.
+export function requeueApprovedJobs(db) {
+    return Number(db.prepare(`UPDATE jobs
+         SET status = 'pending_approval', approved_at = NULL
+       WHERE status = 'approved'`).run().changes);
+}
 export function rejectJob(db, id) {
     return one(db, `UPDATE jobs
        SET status = 'rejected', finished_at = ?

package/dist/messages.js

@@ -25,7 +25,7 @@ const MESSAGES = {
         unknownOption: (arg, helpText) => `未知選項：${arg}\n\n${helpText}`,
         missingProviders: (path) => `找不到 providers.json：${path}`,
         dryRunNotice: () => "--dry-run：僅解析／驗證／估算／印報表，未呼叫任何 API。",
-        helpText: (cmd) => `用法：${cmd} <ticket-id> [options]
+        helpText: (cmd) => `用法：${cmd} --ticket <name> [options]（亦接受位置參數 <ticket-id>）
 
 子指令（各自有自己的 --help／用法訊息）：
   ${cmd} ticket ...        建立、匯入、檢視工單
@@ -35,9 +35,11 @@ const MESSAGES = {
   ${cmd} token ...         入站 HTTP 憑證的發／列／撤銷
   ${cmd} approve [jobId]   核准佇列中等待的派工
   ${cmd} serve             啟動常駐 daemon（含 MCP 的 HTTP binding）
-  ${cmd} serve --stop [--yes] 停止常駐 daemon；有執行中的 job 時會先確認
+  ${cmd} serve --stop [--yes] 停止常駐 daemon；有執行中的 job 或舊核准 job 時會先確認
+  ${cmd} serve --restart [--yes] 停止後重新啟動 daemon，會走兩端清理
   ${cmd} mcp               以 stdio 提供 MCP server
 
+  --ticket <name>          指定工單名稱，不可與位置參數同時給
   --lang <en|zh-tw>        CLI 輸出與 spoke prompt 的語言，預設 en
   --repo-root <dir>        白名單邊界與 .claude/agents 的根，預設 cwd
   --db <path>              SQLite 工單與產物資料庫，預設 DISPATCH_HOME/dowafu.db
@@ -107,7 +109,8 @@ const MESSAGES = {
         mcpJobPrefixAmbiguous: (prefix, count) => `前綴 ${prefix} 命中 ${count} 個 job，請改用完整 id：`,
         jobNotApprovable: (jobId, status) => `job ${jobId} 目前是 ${status}，不能核准`,
         jobApproved: (jobId) => `已核准 job：${jobId}`,
-        daemonStarted: () => "daemon 已啟動。收到 SIGINT 時會乾淨退出；進行中的 job 下次啟動會被回收。",
+        daemonStarted: () => "daemon 已啟動。收到 SIGINT 時會乾淨退出。",
+        daemonStartApprovedCleaned: (count) => `啟動前已將 ${count} 張舊的已核准 job 退回待核准。`,
         daemonStartFailed: (detail) => `daemon 無法啟動：${detail}`,
         daemonWorkerSpawnFailed: (detail) => `worker 無法啟動：${detail}`,
         daemonWorkerExited: (exitCode) => `worker 以 exit code ${exitCode} 結束`,
@@ -115,18 +118,23 @@ const MESSAGES = {
         daemonWorkerTerminated: (signal) => `worker 被訊號 ${signal} 終止`,
         daemonWorkerTerminatedDetail: (signal, detail) => `worker 被訊號 ${signal} 終止：${detail}`,
         stopRequiresServe: () => "--stop 只能與 serve 一起使用。",
+        stopRestartConflict: () => "--stop 與 --restart 不能同時使用。",
         daemonStopRunningWarning: (count) => `目前有 ${count} 張 job 正在執行；停止 daemon 不會停止正在跑的 spoke，它們會繼續跑完，之後結果與 API 成本仍會被認列。`,
         daemonStopConfirmPrompt: () => "確定要停止 daemon 嗎？[y/N] ",
+        daemonStopApprovedWarning: (count) => `目前有 ${count} 張已核准 job 尚未執行；停止前會退回待核准，避免下一支 daemon 未經本輪核准就執行。`,
+        daemonStopApprovedConfirmPrompt: () => "確定要清理這些已核准 job 嗎？[y/N] ",
         daemonStopCancelled: () => "已取消，daemon 仍在執行。",
         daemonStopNotRunning: (reason) => `daemon 未在執行（${reason}）。`,
         daemonStopPidNotDowafu: (pid) => `pid ${pid} 的行程不是 dowafu，為避免誤殺未送出訊號。`,
-        daemonStopSignalFailed: (pid) => `已向 pid ${pid} 送出停止訊號，但它沒有停止。`,
+        daemonStopSignalFailed: (pid) => `已向 pid ${pid} 送出 SIGTERM，但它沒有停止。請手動檢查：ps -p ${pid} -o pid,ppid,command=；確認後可再送 SIGTERM。不要用 SIGKILL，worker 子行程可能仍會繼續寫入。`,
         daemonStopSucceeded: (pid) => `daemon（pid ${pid}）已停止。`,
         daemonStopRestarted: (pid) => `daemon（原 pid ${pid}）停止後又恢復運行；看起來有 OS 層服務管理在重拉它。要真的停下來請用 launchctl 或 systemctl。`,
+        daemonStopApprovedCleaned: (count) => `已將 ${count} 張已核准 job 退回待核准。`,
+        daemonRestartStarted: () => "daemon 已重新啟動。",
         doctorDaemonLine: (value) => `  daemon      ${value}`,
         doctorDaemonAlive: (pid) => `運行中（pid ${pid}）`,
         doctorDaemonMissing: (reason) => `未運行（${reason}）`,
-        daemonOfflineWarning: (reason) => `⚠ worker daemon 未運行（${reason}）；job 已排入但不會執行。請先執行 dowafu serve。`,
+        daemonOfflineWarning: (reason) => `⚠ worker daemon 未運行（${reason}）；job 已排入但不會執行。請先起 dowafu serve 再核准——daemon 沒在跑時給的核准，會在它啟動時退回待核准。`,
         mcpTicketsEmpty: () => "沒有可派的 DB 工單。",
         mcpTicketsTitle: () => "可派工單：",
         mcpTicketsRow: (ticket, spokeCount) => `- ${ticket}：${spokeCount} 個 spoke`,
@@ -209,6 +217,7 @@ const MESSAGES = {
         agentFileNotFound: (agentPath, agent) => `找不到 ${agentPath}（_dispatch.md 列了 agent "${agent}"）`,
         ticketNotFound: (name) => `找不到 DB 工單：${name}`,
         ticketCorrupt: (name) => `DB 工單內容損毀：${name}`,
+        ticketNameReserved: (name, reserved) => `工單名稱「${name}」是 CLI 保留字。保留名稱：${reserved}（--* 表示所有 -- 開頭的名稱）`,
         ticketNameInvalid: (name) => `工單名稱無效：${name}`,
         ticketAlreadyExists: (name) => `DB 工單已存在：${name}`,
         ticketSpokeNotFound: (name, agent) => `DB 工單 "${name}" 沒有 agent "${agent}"`,
@@ -346,6 +355,8 @@ const MESSAGES = {
         doctorModelListValue: (enabled, total, mostExpensive) => `啟用 ${enabled}/${total}；最貴啟用型號 ${mostExpensive}；來源 SQLite DB`,
         doctorModelListLoadFailedValue: (reason) => `無法載入：${reason}`,
         doctorLensLine: (value) => `  lens 定義   ${value}`,
+        doctorQueueLine: (value) => `  佇列        ${value}`,
+        doctorQueueValue: (pendingApproval, approved, running) => `待核准 ${pendingApproval}；已核准 ${approved}；執行中 ${running}`,
         doctorLensFoundValue: (dirPath, total, closingCount, closingNames, noClosingSuffix) => `${dirPath} 找到 ${total} 個定義檔，其中 ${closingCount} 個具備固定收尾句：\n${" ".repeat(14)}${closingNames}${noClosingSuffix}`,
         doctorLensNoClosingSuffix: (count, names) => `\n${" ".repeat(14)}（另有 ${count} 個不是 lens：${names}）`,
         doctorLensDirMissingValue: (dirPath) => `目錄不存在：${dirPath}`,
@@ -355,7 +366,7 @@ const MESSAGES = {
         unknownOption: (arg, helpText) => `Unknown option: ${arg}\n\n${helpText}`,
         missingProviders: (path) => `providers.json not found: ${path}`,
         dryRunNotice: () => "--dry-run: parsed, validated, estimated, and reported only; no API calls were made.",
-        helpText: (cmd) => `Usage: ${cmd} <ticket-id> [options]
+        helpText: (cmd) => `Usage: ${cmd} --ticket <name> [options] (positional <ticket-id> also accepted)
 
 Subcommands (each has its own usage message):
   ${cmd} ticket ...        Create, import and inspect tickets
@@ -365,9 +376,11 @@ Subcommands (each has its own usage message):
   ${cmd} token ...         Issue, list and revoke inbound HTTP tokens
   ${cmd} approve [jobId]   Approve a dispatch waiting in the queue
   ${cmd} serve             Run the daemon (includes the MCP HTTP binding)
-  ${cmd} serve --stop [--yes] Stop the daemon; asks first if jobs are running
+  ${cmd} serve --stop [--yes] Stop the daemon; asks first about running or old approved jobs
+  ${cmd} serve --restart [--yes] Stop then start the daemon, running both cleanup phases
   ${cmd} mcp               Serve MCP over stdio
 
+  --ticket <name>          Select a ticket; cannot be combined with a positional ticket
   --lang <en|zh-tw>        Language for CLI output and spoke prompts, default en
   --repo-root <dir>        Root for the allowlist boundary and .claude/agents, default cwd
   --db <path>              SQLite ticket/result database, default DISPATCH_HOME/dowafu.db
@@ -435,7 +448,8 @@ Subcommands (each has its own usage message):
         mcpJobPrefixAmbiguous: (prefix, count) => `Prefix ${prefix} matches ${count} jobs; use the full id:`,
         jobNotApprovable: (jobId, status) => `Job ${jobId} is ${status} and cannot be approved`,
         jobApproved: (jobId) => `Approved job: ${jobId}`,
-        daemonStarted: () => "Daemon started. SIGINT exits cleanly; running jobs are reaped on the next start.",
+        daemonStarted: () => "Daemon started. SIGINT exits cleanly.",
+        daemonStartApprovedCleaned: (count) => `${count} older approved job(s) returned to pending approval before startup.`,
         daemonStartFailed: (detail) => `Could not start daemon: ${detail}`,
         daemonWorkerSpawnFailed: (detail) => `Could not start worker: ${detail}`,
         daemonWorkerExited: (exitCode) => `worker exited ${exitCode}`,
@@ -443,18 +457,23 @@ Subcommands (each has its own usage message):
         daemonWorkerTerminated: (signal) => `worker terminated by ${signal}`,
         daemonWorkerTerminatedDetail: (signal, detail) => `worker terminated by ${signal}: ${detail}`,
         stopRequiresServe: () => "--stop can only be used with serve.",
+        stopRestartConflict: () => "--stop and --restart cannot be used together.",
         daemonStopRunningWarning: (count) => `${count} job(s) are running; stopping the daemon does not stop their active spokes, which continue to completion and will still have their results and API costs recorded.`,
         daemonStopConfirmPrompt: () => "Stop the daemon? [y/N] ",
+        daemonStopApprovedWarning: (count) => `${count} approved job(s) have not started; stopping returns them to pending approval so the next daemon cannot run them without a new approval.`,
+        daemonStopApprovedConfirmPrompt: () => "Clear these approved jobs? [y/N] ",
         daemonStopCancelled: () => "Cancelled; the daemon is still running.",
         daemonStopNotRunning: (reason) => `Daemon is not running (${reason}).`,
         daemonStopPidNotDowafu: (pid) => `pid ${pid} is not a dowafu process; no signal was sent to avoid killing the wrong process.`,
-        daemonStopSignalFailed: (pid) => `A stop signal was sent to pid ${pid}, but it did not stop.`,
+        daemonStopSignalFailed: (pid) => `SIGTERM was sent to pid ${pid}, but it did not stop. Inspect it manually: ps -p ${pid} -o pid,ppid,command=; after confirming, you can send SIGTERM again. Do not use SIGKILL: worker children may still write results.`,
         daemonStopSucceeded: (pid) => `Daemon (pid ${pid}) stopped.`,
         daemonStopRestarted: (pid) => `Daemon (previous pid ${pid}) came back after stopping; an OS-level service manager appears to be restarting it. Use launchctl or systemctl to stop it permanently.`,
+        daemonStopApprovedCleaned: (count) => `${count} approved job(s) returned to pending approval.`,
+        daemonRestartStarted: () => "Daemon restarted.",
         doctorDaemonLine: (value) => `  Daemon       ${value}`,
         doctorDaemonAlive: (pid) => `running (pid ${pid})`,
         doctorDaemonMissing: (reason) => `not running (${reason})`,
-        daemonOfflineWarning: (reason) => `⚠ The worker daemon is not running (${reason}); the job is queued but will not execute. Start it with dowafu serve.`,
+        daemonOfflineWarning: (reason) => `⚠ The worker daemon is not running (${reason}); the job is queued but will not execute. Start dowafu serve before approving — approvals given while no daemon is running are returned to pending approval when it starts.`,
         mcpTicketsEmpty: () => "No dispatchable DB tickets.",
         mcpTicketsTitle: () => "Dispatchable tickets:",
         mcpTicketsRow: (ticket, spokeCount) => `- ${ticket}: ${spokeCount} spoke(s)`,
@@ -540,6 +559,7 @@ Subcommands (each has its own usage message):
         agentFileNotFound: (agentPath, agent) => `Not found: ${agentPath} (_dispatch.md lists agent "${agent}")`,
         ticketNotFound: (name) => `DB ticket not found: ${name}`,
         ticketCorrupt: (name) => `DB ticket is corrupt: ${name}`,
+        ticketNameReserved: (name, reserved) => `Ticket name "${name}" is reserved by the CLI. Reserved names: ${reserved} (--* means every name starting with --)`,
         ticketNameInvalid: (name) => `Invalid ticket name: ${name}`,
         ticketAlreadyExists: (name) => `DB ticket already exists: ${name}`,
         ticketSpokeNotFound: (name, agent) => `DB ticket "${name}" has no agent "${agent}"`,
@@ -677,6 +697,8 @@ Subcommands (each has its own usage message):
         doctorModelListValue: (enabled, total, mostExpensive) => `enabled ${enabled}/${total}; most expensive enabled ${mostExpensive}; source SQLite DB`,
         doctorModelListLoadFailedValue: (reason) => `failed to load: ${reason}`,
         doctorLensLine: (value) => `  Lens defs    ${value}`,
+        doctorQueueLine: (value) => `  Queue        ${value}`,
+        doctorQueueValue: (pendingApproval, approved, running) => `pending approval ${pendingApproval}; approved ${approved}; running ${running}`,
         doctorLensFoundValue: (dirPath, total, closingCount, closingNames, noClosingSuffix) => `${dirPath} holds ${total} definition file(s), ${closingCount} with a fixed closing line:\n${" ".repeat(15)}${closingNames}${noClosingSuffix}`,
         doctorLensNoClosingSuffix: (count, names) => `\n${" ".repeat(15)}(${count} other agent file(s), not lenses: ${names})`,
         doctorLensDirMissingValue: (dirPath) => `directory not found: ${dirPath}`,

package/dist/prompt.js

@@ -90,6 +90,12 @@ function buildStep3(allowedReadsRelative, lang) {
 function displayTicketDir(ticketDir, repoRoot) {
     if (!repoRoot)
         return ticketDir;
+    // ticket-dir-cwd：相對路徑一律原樣輸出，不交給 path.relative——後者會先以 cwd 解析它，
+    // cwd 不是 repoRoot 時（含 repoRoot 的子目錄）就變成另一個字串。DB 工單的 ticketDir 是虛擬的
+    // `ticket/<name>`，它就是快照查表鍵的前綴，spoke 必須逐字看到它。目錄工單由呼叫端
+    // （runner.ts 的 buildSpokeFirstUserText）先 resolve 成絕對路徑，不走這條。
+    if (!path.isAbsolute(ticketDir))
+        return ticketDir;
     const rel = path.relative(repoRoot, ticketDir);
     if (rel === "" || rel.startsWith("..") || path.isAbsolute(rel))
         return ticketDir;

package/dist/providers-store.js

@@ -7,7 +7,10 @@ import { parseProvidersFile } from "./providers.js";
 import { bundledProvidersPath } from "./pkg-info.js";
 const DEFAULT_ENABLED = new Set([
     "gpt-5.6-luna",
-    "deepseek-v4-flash",
+    // 2026-09-12：預設改為 deepseek-flash。deepseek-v4-flash 已於 2026-09-10 退役，
+    // 目前只是暫時轉址到 V4.1 Flash 且官方未給截止日——預設開一個隨時會消失的型號，
+    // 壞法會是「新裝的人某天突然跑不動」。deepseek-flash 已 smoke 實跑通過。
+    "deepseek-flash",
     "gemini-3.1-flash-lite",
     "gemini-3.5-flash-lite",
     "claude-haiku-4-5-20251001",

package/dist/runner.js

@@ -134,10 +134,19 @@ async function sendWithResilience(adapter, conv, sendOpts, cfg, ctx) {
         }
     }
 }
+// ticket-dir-cwd（log_v0_6_0_open.md #31）：spoke 第一則訊息的唯一組裝點——實跑（runSpoke）與
+// 乾跑估算（cli.ts）都走這裡，不得各自組裝。原本 runSpoke 先 path.resolve、乾跑不 resolve，
+// cwd ≠ --repo-root 時實跑給出查表查不到的 `<cwd>/ticket/<name>`，乾跑卻一切正常，所以一路看不見。
+// DB 工單（readableContent 存在）的 ticketDir 是快照查表鍵的前綴、不是檔案系統路徑，原樣傳遞——
+// 判別條件與 executeToolCall 相同，「prompt 給的路徑」因此就是「查表用的鍵」。
+// 目錄工單（僅解析器測試）維持原本「相對 cwd 解析」的語意。
+export function buildSpokeFirstUserText(spoke, ticketDir, repoRoot) {
+    return buildFirstUserText(spoke.readableContent ? ticketDir : path.resolve(ticketDir), spoke.agent, spoke.allowedReadsRelative, repoRoot, spoke.lang);
+}
 export async function runSpoke(spoke, adapter, ticketDir, options) {
     const startedAt = Date.now();
     const systemPrompt = buildSystemPrompt(spoke.agentBody, spoke.lang);
-    const firstUserText = buildFirstUserText(path.resolve(ticketDir), spoke.agent, spoke.allowedReadsRelative, options.repoRoot, spoke.lang);
+    const firstUserText = buildSpokeFirstUserText(spoke, ticketDir, options.repoRoot);
     const conv = { systemPrompt, turns: [{ role: "user", text: firstUserText }] };
     let toolCallCount = 0;
     let cumulativeUsage = { inputTokens: 0, outputTokens: 0, totalTokens: 0, available: true };

package/dist/ticket-store.js

@@ -3,6 +3,7 @@ import fs from "node:fs";
 import path from "node:path";
 import { DispatchError } from "./types.js";
 import { m } from "./messages.js";
+import { isReservedTicketName, reservedTicketNames } from "./cli-commands.js";
 import { now } from "./db.js";
 import { parseAgentTicket, parseDispatchTable } from "./ticket.js";
 import { isModelEnabled, loadProviders } from "./providers-store.js";
@@ -32,6 +33,8 @@ function put(db, name, doc) {
 export function createTicket(db, name, shared, lang) {
     if (!name || name.includes(path.sep) || name === "." || name === "..")
         throw new DispatchError(m(lang, "ticketNameInvalid", name), 2);
+    if (isReservedTicketName(name))
+        throw new DispatchError(m(lang, "ticketNameReserved", name, reservedTicketNames().join(", ")), 2);
     try {
         db.prepare("INSERT INTO tickets (name, doc, created_at) VALUES (?, ?, ?)").run(name, JSON.stringify({ shared, spokes: [] }), now());
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dowafu",
-  "version": "0.5.1",
+  "version": "0.7.0",
   "description": "Send a section of your design doc to external LLMs for review. They read only the files you whitelist, and nothing is billed until you confirm.",
   "keywords": [
     "llm",
@@ -25,7 +25,7 @@
   },
   "type": "module",
   "engines": {
-    "node": ">=20"
+    "node": ">=22.13.0"
   },
   "bin": {
     "dowafu": "dist/cli.js"
@@ -33,7 +33,8 @@
   "files": [
     "dist",
     "providers.json",
-    "README_zh-tw.md"
+    "README_zh-tw.md",
+    "CHANGELOG.md"
   ],
   "scripts": {
     "verify:providers": "tsx scripts/verify-providers.ts",

package/providers.json

@@ -10,15 +10,16 @@
       "allowed": ["none", "minimal", "low", "medium", "high", "xhigh", "max"],
       "default": "high"
     },
-    "models": ["gpt-5.6-luna", "gpt-5.6-terra", "gpt-5.6-sol"],
+    "models": ["gpt-5.6-luna", "gpt-5.6-terra", "gpt-5.6-sol", "gpt-6-astra"],
     "charsPerToken": 1.0,
     "tpmLimit": 200000,
     "maxSpokeTokens": null,
-    "pricingSource": { "url": "https://developers.openai.com/api/docs/pricing", "asOf": "2026-09-02", "note": "gpt-5.6-sol 為優惠價，官方頁載明至 2026-11-21" },
+    "pricingSource": { "url": "https://developers.openai.com/api/docs/pricing", "asOf": "2026-09-12", "note": "gpt-5.6-sol 為優惠價，官方頁措辭為「at least through 2026-11-21」，到期日可能再延。" },
     "pricing": {
       "gpt-5.6-luna": { "inputPerM": 0.20, "cachedInputPerM": 0.02, "outputPerM": 1.20 },
       "gpt-5.6-terra": { "inputPerM": 2.00, "cachedInputPerM": 0.20, "outputPerM": 12.00 },
-      "gpt-5.6-sol": { "inputPerM": 4.00, "cachedInputPerM": 0.40, "outputPerM": 20.00 }
+      "gpt-5.6-sol": { "inputPerM": 4.00, "cachedInputPerM": 0.40, "outputPerM": 20.00 },
+      "gpt-6-astra": { "inputPerM": 10.00, "cachedInputPerM": 1.00, "outputPerM": 50.00 }
     }
   },
   "deepseek": {
@@ -31,17 +32,18 @@
       "allowed": ["low", "high", "max"],
       "default": "high"
     },
-    "models": ["deepseek-v4-flash", "deepseek-v4-pro"],
+    "models": ["deepseek-v4-flash", "deepseek-flash", "deepseek-v4-pro"],
     "charsPerToken": 1.0,
     "tpmLimit": null,
     "maxSpokeTokens": null,
     "pricingSource": {
       "url": "https://api-docs.deepseek.com/quick_start/pricing/",
-      "asOf": "2026-09-02",
-      "note": "離峰（尖峰時段 01:00-04:00 與 06:00-10:00 UTC 以外）為尖峰的一半；本檔一個型號只放得下一組價，取尖峰＝取上限。"
+      "asOf": "2026-09-12",
+      "note": "離峰（尖峰時段為週一至週五 01:00-04:00 與 06:00-10:00 UTC，其餘時段皆為離峰）為尖峰的一半；本檔一個型號只放得下一組價，取尖峰＝取上限。deepseek-v4-flash 已於 2026-09-10 退役、目前暫時轉址到 V4.1 Flash（deepseek-flash），官方未給截止日；其價格仍為退役前的舊值，故估算偏高。"
     },
     "pricing": {
       "deepseek-v4-flash": { "inputPerM": 0.44, "cachedInputPerM": 0.014, "outputPerM": 1.32 },
+      "deepseek-flash": { "inputPerM": 0.30, "cachedInputPerM": 0.006, "outputPerM": 1.20 },
       "deepseek-v4-pro": { "inputPerM": 1.32, "cachedInputPerM": 0.044, "outputPerM": 3.96 }
     }
   },
@@ -55,16 +57,17 @@
       "allowed": ["minimal", "low", "medium", "high"],
       "default": "high"
     },
-    "models": ["gemini-3.1-flash-lite", "gemini-3.5-flash-lite", "gemini-3.6-flash", "gemini-3.7-flash"],
+    "models": ["gemini-3.1-flash-lite", "gemini-3.5-flash-lite", "gemini-3.6-flash", "gemini-3.7-flash", "gemini-3.8-flash"],
     "charsPerToken": 1.0,
     "tpmLimit": null,
     "maxSpokeTokens": null,
-    "pricingSource": { "url": "https://ai.google.dev/gemini-api/docs/pricing", "asOf": "2026-09-02", "note": "文字／圖片／影片價；音訊另計。output 價含 thinking tokens。gemini-3.6-flash／gemini-3.7-flash 為優惠價，官方頁載明至 2026-12-31；2027-01-01 起漲為 $1.50 in／$7.50 out（兩者皆是）" },
+    "pricingSource": { "url": "https://ai.google.dev/gemini-api/docs/pricing", "asOf": "2026-09-12", "note": "文字／圖片／影片價；音訊另計。output 價含 thinking tokens。gemini-3.6-flash／gemini-3.7-flash／gemini-3.8-flash 為優惠價，官方頁載明至 2026-12-31；2027-01-01 起漲為 $1.50 in／$7.50 out（三者皆是）" },
     "pricing": {
       "gemini-3.1-flash-lite": { "inputPerM": 0.25, "cachedInputPerM": 0.025, "outputPerM": 1.50 },
       "gemini-3.5-flash-lite": { "inputPerM": 0.30, "cachedInputPerM": 0.03, "outputPerM": 2.50 },
       "gemini-3.6-flash": { "inputPerM": 0.75, "cachedInputPerM": 0.075, "outputPerM": 3.75 },
-      "gemini-3.7-flash": { "inputPerM": 0.75, "cachedInputPerM": 0.075, "outputPerM": 3.75 }
+      "gemini-3.7-flash": { "inputPerM": 0.75, "cachedInputPerM": 0.075, "outputPerM": 3.75 },
+      "gemini-3.8-flash": { "inputPerM": 0.75, "cachedInputPerM": 0.075, "outputPerM": 3.75 }
     }
   },
   "anthropic": {