dowafu 0.6.0 → 0.7.0

package/CHANGELOG.md

@@ -0,0 +1,92 @@
+# Changelog
+
+Notable changes per released version. Entries for 0.5.0–0.6.0 were **reconstructed** from
+release commits and internal records after the fact; from 0.7.0 on they are written at
+release time. Versions before 0.5.0 are not covered here — see the git tags (`v0.3.0`
+onwards).
+
+## 0.7.0 — 2026-09-12
+
+### Added
+
+- **`--ticket <name>`** names the ticket explicitly. The positional form still works, and
+  giving both is rejected rather than silently resolved. The queue worker now uses the
+  flag, which is what makes the fix below reachable for tickets that already exist.
+- **Three models**, each verified against the live API before shipping — tool calling,
+  usage on every round, and the model name echoed back unchanged:
+  `gpt-6-astra`, `deepseek-flash`, `gemini-3.8-flash`.
+- `dowafu result --help` and `dowafu approve --help` now print their usage. Previously
+  they treated `--help` as an id to look up, failed with "no results found", and opened
+  the database on the way.
+
+### Changed
+
+- **`ticket create` and `ticket import` reject names the CLI reserves**: the eight
+  subcommands (`ticket`, `providers`, `token`, `key`, `result`, `approve`, `serve`,
+  `mcp`), `-h`, `-V`, and any name beginning with `--`. Such a ticket could be created
+  before but could never run, because the CLI parsed the name as a command — one named
+  `serve` started a daemon instead. Tickets already stored under a reserved name still
+  run via `--ticket <name>`.
+- **The deepseek model enabled on a fresh install is now `deepseek-flash`.** DeepSeek
+  retired `deepseek-v4-flash` on 2026-09-10 and currently routes it to V4.1 Flash with no
+  stated end date; shipping it as the default meant new installs depended on that routing.
+  `deepseek-v4-flash` stays on the whitelist, disabled by default. **Existing databases
+  are not touched** — this only affects a database seeded after upgrading.
+- Prices for every provider re-checked against the vendor pricing pages on 2026-09-12.
+
+### Fixed
+
+- **The install command printed inside each language pack's own README pointed at the
+  `v0.4.0` tag** — unchanged through four releases, so anyone following it fetched
+  reviewer definitions three versions old. All four places that carry the tag are now on
+  the released version.
+- **A reviewer could not read its own ticket when the CLI ran with `--repo-root` from a
+  different working directory.** The ticket paths in its first message came out absolute
+  while the snapshot is keyed by a relative path, so every read of the ticket was refused
+  — and the audit still reported success. The result was a paid review written without
+  ever seeing the plan. Present since 0.5.0.
+
+### Upgrading
+
+Upgrading the package does not refresh the model list: seeding happens only when the model
+table is empty, so your existing prices and enabled flags are never silently rewritten. To
+pick up the three new models:
+
+```bash
+dowafu providers import "$(npm root -g)/dowafu/providers.json"
+dowafu providers list
+```
+
+## 0.6.0 — 2026-09-10
+
+*Reconstructed.*
+
+- A daemon no longer runs jobs that were approved before it started; those are returned to
+  pending approval at startup, so a restart cannot silently execute an old approval.
+- `--doctor` reports the job queue.
+- `engines` corrected to `>=22.13.0`.
+
+## 0.5.1 — 2026-09-09
+
+*Reconstructed.*
+
+- Reviewer output no longer carries template placeholders through to the saved report.
+- Queued jobs choose their own language: `dispatch_submit` accepts `lang`.
+
+## 0.5.0 — 2026-09-06
+
+*Reconstructed. The largest release so far; this is a summary, not a full list.*
+
+- **Tickets and reviewer output moved into SQLite.** No ticket directories or output files
+  on disk. What a reviewer reads is the snapshot taken when the ticket was written, not
+  the file as it stands at run time.
+- **Job queue and a long-running daemon** (`dowafu serve`), with MCP over stdio
+  (`dowafu mcp`) and over HTTP bound to `127.0.0.1` only. Inbound tokens are stored
+  hashed, compared in constant time, and rate limited per token.
+- **The model whitelist, per-model enabled flags and prices moved into the database**;
+  the `--providers` flag was removed. An empty database is seeded from the file shipped
+  with the package.
+- **API keys come from the database only** (`dowafu key`); environment variables and
+  `.env` support were removed, along with the `dotenv` dependency.
+- **Costs are stated in dollars** before you approve: a hard upper bound, plus the typical
+  spend of past runs when there are any.

package/README.md

@@ -117,7 +117,7 @@ dowafu ticket create auth-review - <<'EOF'
 ...
 EOF
 
-dowafu ticket add-spoke auth-review hole-finder-safety deepseek deepseek-v4-flash - <<'EOF'
+dowafu ticket add-spoke auth-review hole-finder-safety deepseek deepseek-flash - <<'EOF'
 # Questions
 1. Does the permission check described here hold under concurrent requests?
 
@@ -177,12 +177,24 @@ response for every call. Read a run back with `dowafu result <id>`.
 
 ## Models
 
-| provider | model |
-| --- | --- |
-| `openai` | `gpt-5.6-luna`, `gpt-5.6-terra`, `gpt-5.6-sol` |
-| `deepseek` | `deepseek-v4-flash` |
-| `gemini` | `gemini-3.1-flash-lite`, `gemini-3.5-flash-lite`, `gemini-3.6-flash` |
-| `anthropic` | `claude-opus-5`, `claude-sonnet-5` |
+| provider | model | on a fresh install |
+| --- | --- | :-: |
+| `openai` | `gpt-5.6-luna` | **enabled** |
+| | `gpt-5.6-terra`, `gpt-5.6-sol`, `gpt-6-astra` | disabled |
+| `deepseek` | `deepseek-flash` | **enabled** |
+| | `deepseek-v4-flash`, `deepseek-v4-pro` | disabled |
+| `gemini` | `gemini-3.1-flash-lite`, `gemini-3.5-flash-lite` | **enabled** |
+| | `gemini-3.6-flash`, `gemini-3.7-flash`, `gemini-3.8-flash` | disabled |
+| `anthropic` | `claude-haiku-4-5-20251001` | **enabled** |
+| | `claude-opus-5`, `claude-sonnet-5` | disabled |
+
+Fifteen models, five of them enabled out of the box — the pricier ones start disabled so
+that a typo cannot quietly dispatch to an expensive model. Dispatching to a disabled model
+is rejected before any spend, and tells you the `providers enable` command to run.
+
+`deepseek-v4-flash` was retired upstream on 2026-09-10 and is currently routed to V4.1
+Flash with no stated end date. It stays on the list so existing tickets keep working;
+**new tickets should use `deepseek-flash`**.
 
 The list ships with the package as `providers.json` and is seeded into the database the
 first time one is opened. From then on **the database is the source of truth**:
@@ -193,6 +205,16 @@ dowafu providers enable|disable <model>    # flip one on or off
 dowafu providers import <path>             # load your own file
 ```
 
+**Upgrading the package does not refresh the list.** Seeding happens only when the model
+table is completely empty, so an upgrade never silently changes a price or an enabled flag
+you already have. To pick up models added in a later release, import the shipped file
+yourself:
+
+```bash
+dowafu providers import "$(npm root -g)/dowafu/providers.json"
+dowafu providers list                      # confirm the new models are there
+```
+
 There is no `--providers` flag — it was removed in 0.5.0, when the whitelist moved into
 the database. Passing it is rejected as an unknown option.
 
@@ -208,7 +230,7 @@ not work: a reviewer's fixed closing line has to match the template the audit ch
 against.
 
 ```bash
-npx degit eyesofkids/dowafu/publish/en#v0.6.0 .claude-pack   # or publish/zh-tw
+npx degit eyesofkids/dowafu/publish/en#v0.7.0 .claude-pack   # or publish/zh-tw
 
 cd .claude-pack
 TARGET=<your project>

package/README_zh-tw.md

@@ -98,7 +98,7 @@ dowafu ticket create auth-review - <<'EOF'
 ...
 EOF
 
-dowafu ticket add-spoke auth-review hole-finder-safety deepseek deepseek-v4-flash - <<'EOF'
+dowafu ticket add-spoke auth-review hole-finder-safety deepseek deepseek-flash - <<'EOF'
 # 具體問題
 1. 這裡描述的權限檢查在併發請求下還成立嗎？
 
@@ -166,12 +166,22 @@ dowafu result <id>
 
 ## Models
 
-| Provider | Model |
-| --- | --- |
-| `openai` | `gpt-5.6-luna`、`gpt-5.6-terra`、`gpt-5.6-sol` |
-| `deepseek` | `deepseek-v4-flash` |
-| `gemini` | `gemini-3.1-flash-lite`、`gemini-3.5-flash-lite`、`gemini-3.6-flash` |
-| `anthropic` | `claude-opus-5`、`claude-sonnet-5` |
+| Provider | Model | 全新安裝時 |
+| --- | --- | :-: |
+| `openai` | `gpt-5.6-luna` | **啟用** |
+| | `gpt-5.6-terra`、`gpt-5.6-sol`、`gpt-6-astra` | 停用 |
+| `deepseek` | `deepseek-flash` | **啟用** |
+| | `deepseek-v4-flash`、`deepseek-v4-pro` | 停用 |
+| `gemini` | `gemini-3.1-flash-lite`、`gemini-3.5-flash-lite` | **啟用** |
+| | `gemini-3.6-flash`、`gemini-3.7-flash`、`gemini-3.8-flash` | 停用 |
+| `anthropic` | `claude-haiku-4-5-20251001` | **啟用** |
+| | `claude-opus-5`、`claude-sonnet-5` | 停用 |
+
+共 15 個 Model，開箱只啟用五個——較貴的預設停用，讓打錯字不會安靜地派到昂貴的 Model 上。
+派到停用的 Model 會在產生任何費用之前被拒絕，並告訴你該跑哪一條 `providers enable`。
+
+`deepseek-v4-flash` 已於 2026-09-10 在上游退役，目前被轉址到 V4.1 Flash，官方未說明何時停止。
+它留在清單上是為了讓既有工單還能運作，**新工單請改用 `deepseek-flash`**。
 
 這份清單會隨套件以 `providers.json` 一起提供，並在第一次開啟資料庫時播種進去。
 之後**資料庫就是唯一來源**：
@@ -182,6 +192,14 @@ dowafu providers enable|disable <model>    # 開關其中一個
 dowafu providers import <path>             # 匯入自己的設定檔
 ```
 
+**升級套件不會刷新這份清單。** 播種只在 Model 表完全為空時發生，所以升級永遠不會安靜地改掉
+你既有的價格或啟用狀態。要取得後續版本新增的 Model，請自己匯入隨套件出貨的那一份：
+
+```bash
+dowafu providers import "$(npm root -g)/dowafu/providers.json"
+dowafu providers list                      # 確認新的 Model 已經進來
+```
+
 **沒有 `--providers` 旗標**——0.5.0 把白名單搬進資料庫時已移除，帶了會被當成未知選項拒絕。
 
 ## 從 Agent 驅動
@@ -199,7 +217,7 @@ dowafu providers import <path>             # 匯入自己的設定檔
 `publish/` 提供兩種語言：`publish/en/` 與 `publish/zh-tw/`。**擇一複製，不可混裝**——審查者的固定收尾句必須與稽核檢查用的範本是同一種語言。
 
 ```bash
-npx degit eyesofkids/dowafu/publish/zh-tw#v0.6.0 .claude-pack   # 或 publish/en
+npx degit eyesofkids/dowafu/publish/zh-tw#v0.7.0 .claude-pack   # 或 publish/en
 
 cd .claude-pack
 TARGET=<your project>

package/dist/cli-args.js

@@ -10,6 +10,7 @@ import { DEFAULT_HTTP_PORT } from "./mcp/http.js";
 import { getCommandName } from "./pkg-info.js";
 import { DEFAULT_MAX_TOOL_CALLS } from "./cost.js";
 import { m } from "./messages.js";
+import { CLI_COMMANDS, CLI_SHORTCUTS } from "./cli-commands.js";
 const DEFAULTS = {
     out: "tmp/spoke",
     concurrency: 2,
@@ -86,9 +87,19 @@ export function resolveLang(cliLangRaw, envLangRaw) {
 export function parseArgs(argv, lang) {
     const helpText = m(lang, "helpText", getCommandName());
     // --help／--version 可出現在任何位置，且優先於其他一切解析——不要求先有 ticketDir。
-    if (argv.includes("--help") || argv.includes("-h"))
+    // A named ticket is opaque, including legacy names such as --help or -V.
+    let ticketValue = false;
+    const controlArgs = argv.filter((arg) => {
+        if (ticketValue) {
+            ticketValue = false;
+            return false;
+        }
+        ticketValue = arg === "--ticket";
+        return true;
+    });
+    if (controlArgs.includes("--help") || controlArgs.includes(CLI_SHORTCUTS.help))
         return { mode: "help" };
-    if (argv.includes("--version") || argv.includes("-V"))
+    if (controlArgs.includes("--version") || controlArgs.includes(CLI_SHORTCUTS.version))
         return { mode: "version" };
     const options = { ...DEFAULTS };
     // 熱修補（票 C 驗收）：`DOWAFU_HTTP_PORT` 原本只寫在 `daemon.ts` 的 `serve()` 參數預設值裡，
@@ -115,6 +126,11 @@ export function parseArgs(argv, lang) {
         };
     };
     const flagHandlers = {};
+    flagHandlers["ticket"] = (v) => {
+        if (ticketDir !== undefined)
+            throw new DispatchError(m(lang, "tooManyArgs", v, ticketDir, helpText), 2);
+        ticketDir = v;
+    };
     flagHandlers["out"] = (v) => (options.out = v);
     flagHandlers["repo-root"] = (v) => (options.repoRoot = v);
     flagHandlers["db"] = (v) => (options.dbPath = v);
@@ -154,7 +170,7 @@ export function parseArgs(argv, lang) {
             // （見迴圈後方）——這樣 --doctor 與 --lang 之類的已知旗標仍可同時給、彼此不衝突。
             doctorMode = true;
         }
-        else if (arg === "serve") {
+        else if (arg === CLI_COMMANDS.serve) {
             serveMode = true;
         }
         else if (arg === "--stop") {
@@ -163,7 +179,7 @@ export function parseArgs(argv, lang) {
         else if (arg === "--restart") {
             serveRestart = true;
         }
-        else if (arg === "mcp") {
+        else if (arg === CLI_COMMANDS.mcp) {
             mcpMode = true;
         }
         else if (arg.startsWith("--")) {

package/dist/cli-commands.js

@@ -0,0 +1,12 @@
+// These spellings drive both dispatch and ticket-name validation.
+export const CLI_COMMANDS = {
+    ticket: "ticket", providers: "providers", token: "token", key: "key",
+    result: "result", approve: "approve", serve: "serve", mcp: "mcp",
+};
+export const CLI_SHORTCUTS = { help: "-h", version: "-V" };
+export function reservedTicketNames() {
+    return [...Object.values(CLI_COMMANDS), ...Object.values(CLI_SHORTCUTS), "--*"];
+}
+export function isReservedTicketName(name) {
+    return name.startsWith("--") || reservedTicketNames().includes(name);
+}

package/dist/cli.js

@@ -13,10 +13,10 @@ import { loadProviders } from "./providers.js";
 import { loadTicket } from "./ticket.js";
 import { resolveSpokes } from "./validate.js";
 import { estimateTokens, estimateAllowlistTokens, estimateSequentialRead, checkGateOne } from "./gate.js";
-import { buildFirstUserText, buildSystemPrompt } from "./prompt.js";
+import { buildSystemPrompt } from "./prompt.js";
 import { buildReport, effectiveCap, effectiveCharsPerToken } from "./report.js";
 import { checkGitignore } from "./gitignore-check.js";
-import { runSpoke } from "./runner.js";
+import { buildSpokeFirstUserText, runSpoke } from "./runner.js";
 import { Semaphore } from "./semaphore.js";
 import { createResponsesAdapter } from "./adapters/responses.js";
 import { createGeminiAdapter } from "./adapters/gemini-native.js";
@@ -29,6 +29,7 @@ import { registerSecrets, maskString, maskDeep } from "./mask.js";
 import { buildDoctorReportData, renderDoctorReport } from "./doctor.js";
 import { bundledProvidersPath, getPackageVersion, getCommandName } from "./pkg-info.js";
 import { buildJsonPayload, buildJsonPlan } from "./json-output.js";
+import { CLI_COMMANDS } from "./cli-commands.js";
 import { parseArgs, formatEvent, resolveLang, resolveFallbackLang, buildStdoutSummary } from "./cli-args.js";
 import { m } from "./messages.js";
 import { defaultDbPath, openDb } from "./db.js";
@@ -489,24 +490,28 @@ async function main() {
     // 這個不會拋例外的簡化判定（resolveFallbackLang，見 cli-args.ts）。--lang 旗標的值在這個
     // 時間點還沒被驗證，不查它（v1.3 §二之2 #5／#6：help／version 的語言不受 --lang 影響）。
     const messageLang = resolveFallbackLang(process.env.DISPATCH_LANG);
-    if (process.argv[2] === "ticket") {
+    if (process.argv[2] === CLI_COMMANDS.ticket) {
         await ticketCommand(process.argv.slice(3), messageLang);
         return;
     }
-    if (process.argv[2] === "providers") {
+    if (process.argv[2] === CLI_COMMANDS.providers) {
         await providersCommand(process.argv.slice(3), messageLang);
         return;
     }
-    if (process.argv[2] === "token") {
+    if (process.argv[2] === CLI_COMMANDS.token) {
         await tokenCommand(process.argv.slice(3), messageLang);
         return;
     }
-    if (process.argv[2] === "key") {
+    if (process.argv[2] === CLI_COMMANDS.key) {
         await keyCommand(process.argv.slice(3), messageLang);
         return;
     }
-    if (process.argv[2] === "result") {
+    if (process.argv[2] === CLI_COMMANDS.result) {
         const args = process.argv.slice(3);
+        if (args[0] === "--help" || args[0] === "-h") {
+            console.log(m(messageLang, "resultHelp", getCommandName()));
+            return;
+        }
         const positional = [];
         let dbPath;
         for (let i = 0; i < args.length; i++) {
@@ -547,8 +552,12 @@ async function main() {
         console.log(lines.join("\n\n"));
         return;
     }
-    if (process.argv[2] === "approve") {
+    if (process.argv[2] === CLI_COMMANDS.approve) {
         const args = process.argv.slice(3);
+        if (args[0] === "--help" || args[0] === "-h") {
+            console.log(m(messageLang, "approveHelp", getCommandName()));
+            return;
+        }
         const positional = [];
         let dbPath;
         for (let i = 0; i < args.length; i++) {
@@ -703,6 +712,8 @@ async function main() {
     const lang = resolveLang(options.langRaw, process.env.DISPATCH_LANG);
     // v1.10 §9：--repo-root 只影響白名單邊界、.claude/agents 位置、_docs/ 拒絕判定；
     // 工單目錄仍相對 cwd 解析，不要求位於 repoRoot 內（見 resolveSpokes 呼叫處）。
+    // （ticket-dir-cwd 補註：0.5.0 起 CLI 只走 DB 工單，ticket.ticketDir 是虛擬的 `ticket/<name>`，
+    // 不再相對 cwd 解析——見 runner.ts 的 buildSpokeFirstUserText。上一行是目錄工單時代的描述。）
     const repoRoot = path.resolve(options.repoRoot ?? process.cwd());
     const ticketId = ticketName;
     const db = openDbSeeded(options.dbPath, lang);
@@ -717,7 +728,8 @@ async function main() {
     // §10 步驟 6／§14 閘門一：呼叫前估算
     const estimates = spokes.map((spoke) => {
         const systemPrompt = buildSystemPrompt(spoke.agentBody, spoke.lang);
-        const firstUserText = buildFirstUserText(ticket.ticketDir, spoke.agent, spoke.allowedReadsRelative, repoRoot, spoke.lang);
+        // ticket-dir-cwd 不變量 3：與 runSpoke 同一個組裝點——估算的就是實跑會送出的那則訊息。
+        const firstUserText = buildSpokeFirstUserText(spoke, ticket.ticketDir, repoRoot);
         const charsPerToken = effectiveCharsPerToken(spoke, options);
         return {
             agent: spoke.agent,

package/dist/daemon.js

@@ -84,8 +84,8 @@ export function runCliJob(job, dbPath, lang = "en", deps = DEFAULT_RUN_CLI_JOB_D
     // stdout use the same language as the daemon's own failure message.
     const jobLang = job.lang ?? lang;
     const args = sourceMode
-        ? ["--import", "tsx", cliPath, job.ticket, "--yes", "--job-id", job.id, "--db", dbPath, "--lang", jobLang]
-        : [cliPath, job.ticket, "--yes", "--job-id", job.id, "--db", dbPath, "--lang", jobLang];
+        ? ["--import", "tsx", cliPath, "--ticket", job.ticket, "--yes", "--job-id", job.id, "--db", dbPath, "--lang", jobLang]
+        : [cliPath, "--ticket", job.ticket, "--yes", "--job-id", job.id, "--db", dbPath, "--lang", jobLang];
     return new Promise((resolve) => {
         const child = deps.spawn(process.execPath, args, { stdio: ["inherit", "inherit", "pipe"], env: process.env });
         let stderrTail = Buffer.alloc(0);

package/dist/messages.js

@@ -25,7 +25,7 @@ const MESSAGES = {
         unknownOption: (arg, helpText) => `未知選項：${arg}\n\n${helpText}`,
         missingProviders: (path) => `找不到 providers.json：${path}`,
         dryRunNotice: () => "--dry-run：僅解析／驗證／估算／印報表，未呼叫任何 API。",
-        helpText: (cmd) => `用法：${cmd} <ticket-id> [options]
+        helpText: (cmd) => `用法：${cmd} --ticket <name> [options]（亦接受位置參數 <ticket-id>）
 
 子指令（各自有自己的 --help／用法訊息）：
   ${cmd} ticket ...        建立、匯入、檢視工單
@@ -39,6 +39,7 @@ const MESSAGES = {
   ${cmd} serve --restart [--yes] 停止後重新啟動 daemon，會走兩端清理
   ${cmd} mcp               以 stdio 提供 MCP server
 
+  --ticket <name>          指定工單名稱，不可與位置參數同時給
   --lang <en|zh-tw>        CLI 輸出與 spoke prompt 的語言，預設 en
   --repo-root <dir>        白名單邊界與 .claude/agents 的根，預設 cwd
   --db <path>              SQLite 工單與產物資料庫，預設 DISPATCH_HOME/dowafu.db
@@ -216,6 +217,7 @@ const MESSAGES = {
         agentFileNotFound: (agentPath, agent) => `找不到 ${agentPath}（_dispatch.md 列了 agent "${agent}"）`,
         ticketNotFound: (name) => `找不到 DB 工單：${name}`,
         ticketCorrupt: (name) => `DB 工單內容損毀：${name}`,
+        ticketNameReserved: (name, reserved) => `工單名稱「${name}」是 CLI 保留字。保留名稱：${reserved}（--* 表示所有 -- 開頭的名稱）`,
         ticketNameInvalid: (name) => `工單名稱無效：${name}`,
         ticketAlreadyExists: (name) => `DB 工單已存在：${name}`,
         ticketSpokeNotFound: (name, agent) => `DB 工單 "${name}" 沒有 agent "${agent}"`,
@@ -364,7 +366,7 @@ const MESSAGES = {
         unknownOption: (arg, helpText) => `Unknown option: ${arg}\n\n${helpText}`,
         missingProviders: (path) => `providers.json not found: ${path}`,
         dryRunNotice: () => "--dry-run: parsed, validated, estimated, and reported only; no API calls were made.",
-        helpText: (cmd) => `Usage: ${cmd} <ticket-id> [options]
+        helpText: (cmd) => `Usage: ${cmd} --ticket <name> [options] (positional <ticket-id> also accepted)
 
 Subcommands (each has its own usage message):
   ${cmd} ticket ...        Create, import and inspect tickets
@@ -378,6 +380,7 @@ Subcommands (each has its own usage message):
   ${cmd} serve --restart [--yes] Stop then start the daemon, running both cleanup phases
   ${cmd} mcp               Serve MCP over stdio
 
+  --ticket <name>          Select a ticket; cannot be combined with a positional ticket
   --lang <en|zh-tw>        Language for CLI output and spoke prompts, default en
   --repo-root <dir>        Root for the allowlist boundary and .claude/agents, default cwd
   --db <path>              SQLite ticket/result database, default DISPATCH_HOME/dowafu.db
@@ -556,6 +559,7 @@ Subcommands (each has its own usage message):
         agentFileNotFound: (agentPath, agent) => `Not found: ${agentPath} (_dispatch.md lists agent "${agent}")`,
         ticketNotFound: (name) => `DB ticket not found: ${name}`,
         ticketCorrupt: (name) => `DB ticket is corrupt: ${name}`,
+        ticketNameReserved: (name, reserved) => `Ticket name "${name}" is reserved by the CLI. Reserved names: ${reserved} (--* means every name starting with --)`,
         ticketNameInvalid: (name) => `Invalid ticket name: ${name}`,
         ticketAlreadyExists: (name) => `DB ticket already exists: ${name}`,
         ticketSpokeNotFound: (name, agent) => `DB ticket "${name}" has no agent "${agent}"`,

package/dist/prompt.js

@@ -90,6 +90,12 @@ function buildStep3(allowedReadsRelative, lang) {
 function displayTicketDir(ticketDir, repoRoot) {
     if (!repoRoot)
         return ticketDir;
+    // ticket-dir-cwd：相對路徑一律原樣輸出，不交給 path.relative——後者會先以 cwd 解析它，
+    // cwd 不是 repoRoot 時（含 repoRoot 的子目錄）就變成另一個字串。DB 工單的 ticketDir 是虛擬的
+    // `ticket/<name>`，它就是快照查表鍵的前綴，spoke 必須逐字看到它。目錄工單由呼叫端
+    // （runner.ts 的 buildSpokeFirstUserText）先 resolve 成絕對路徑，不走這條。
+    if (!path.isAbsolute(ticketDir))
+        return ticketDir;
     const rel = path.relative(repoRoot, ticketDir);
     if (rel === "" || rel.startsWith("..") || path.isAbsolute(rel))
         return ticketDir;

package/dist/providers-store.js

@@ -7,7 +7,10 @@ import { parseProvidersFile } from "./providers.js";
 import { bundledProvidersPath } from "./pkg-info.js";
 const DEFAULT_ENABLED = new Set([
     "gpt-5.6-luna",
-    "deepseek-v4-flash",
+    // 2026-09-12：預設改為 deepseek-flash。deepseek-v4-flash 已於 2026-09-10 退役，
+    // 目前只是暫時轉址到 V4.1 Flash 且官方未給截止日——預設開一個隨時會消失的型號，
+    // 壞法會是「新裝的人某天突然跑不動」。deepseek-flash 已 smoke 實跑通過。
+    "deepseek-flash",
     "gemini-3.1-flash-lite",
     "gemini-3.5-flash-lite",
     "claude-haiku-4-5-20251001",

package/dist/runner.js

@@ -134,10 +134,19 @@ async function sendWithResilience(adapter, conv, sendOpts, cfg, ctx) {
         }
     }
 }
+// ticket-dir-cwd（log_v0_6_0_open.md #31）：spoke 第一則訊息的唯一組裝點——實跑（runSpoke）與
+// 乾跑估算（cli.ts）都走這裡，不得各自組裝。原本 runSpoke 先 path.resolve、乾跑不 resolve，
+// cwd ≠ --repo-root 時實跑給出查表查不到的 `<cwd>/ticket/<name>`，乾跑卻一切正常，所以一路看不見。
+// DB 工單（readableContent 存在）的 ticketDir 是快照查表鍵的前綴、不是檔案系統路徑，原樣傳遞——
+// 判別條件與 executeToolCall 相同，「prompt 給的路徑」因此就是「查表用的鍵」。
+// 目錄工單（僅解析器測試）維持原本「相對 cwd 解析」的語意。
+export function buildSpokeFirstUserText(spoke, ticketDir, repoRoot) {
+    return buildFirstUserText(spoke.readableContent ? ticketDir : path.resolve(ticketDir), spoke.agent, spoke.allowedReadsRelative, repoRoot, spoke.lang);
+}
 export async function runSpoke(spoke, adapter, ticketDir, options) {
     const startedAt = Date.now();
     const systemPrompt = buildSystemPrompt(spoke.agentBody, spoke.lang);
-    const firstUserText = buildFirstUserText(path.resolve(ticketDir), spoke.agent, spoke.allowedReadsRelative, options.repoRoot, spoke.lang);
+    const firstUserText = buildSpokeFirstUserText(spoke, ticketDir, options.repoRoot);
     const conv = { systemPrompt, turns: [{ role: "user", text: firstUserText }] };
     let toolCallCount = 0;
     let cumulativeUsage = { inputTokens: 0, outputTokens: 0, totalTokens: 0, available: true };

package/dist/ticket-store.js

@@ -3,6 +3,7 @@ import fs from "node:fs";
 import path from "node:path";
 import { DispatchError } from "./types.js";
 import { m } from "./messages.js";
+import { isReservedTicketName, reservedTicketNames } from "./cli-commands.js";
 import { now } from "./db.js";
 import { parseAgentTicket, parseDispatchTable } from "./ticket.js";
 import { isModelEnabled, loadProviders } from "./providers-store.js";
@@ -32,6 +33,8 @@ function put(db, name, doc) {
 export function createTicket(db, name, shared, lang) {
     if (!name || name.includes(path.sep) || name === "." || name === "..")
         throw new DispatchError(m(lang, "ticketNameInvalid", name), 2);
+    if (isReservedTicketName(name))
+        throw new DispatchError(m(lang, "ticketNameReserved", name, reservedTicketNames().join(", ")), 2);
     try {
         db.prepare("INSERT INTO tickets (name, doc, created_at) VALUES (?, ?, ?)").run(name, JSON.stringify({ shared, spokes: [] }), now());
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dowafu",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "Send a section of your design doc to external LLMs for review. They read only the files you whitelist, and nothing is billed until you confirm.",
   "keywords": [
     "llm",
@@ -33,7 +33,8 @@
   "files": [
     "dist",
     "providers.json",
-    "README_zh-tw.md"
+    "README_zh-tw.md",
+    "CHANGELOG.md"
   ],
   "scripts": {
     "verify:providers": "tsx scripts/verify-providers.ts",

package/providers.json

@@ -10,15 +10,16 @@
       "allowed": ["none", "minimal", "low", "medium", "high", "xhigh", "max"],
       "default": "high"
     },
-    "models": ["gpt-5.6-luna", "gpt-5.6-terra", "gpt-5.6-sol"],
+    "models": ["gpt-5.6-luna", "gpt-5.6-terra", "gpt-5.6-sol", "gpt-6-astra"],
     "charsPerToken": 1.0,
     "tpmLimit": 200000,
     "maxSpokeTokens": null,
-    "pricingSource": { "url": "https://developers.openai.com/api/docs/pricing", "asOf": "2026-09-02", "note": "gpt-5.6-sol 為優惠價，官方頁載明至 2026-11-21" },
+    "pricingSource": { "url": "https://developers.openai.com/api/docs/pricing", "asOf": "2026-09-12", "note": "gpt-5.6-sol 為優惠價，官方頁措辭為「at least through 2026-11-21」，到期日可能再延。" },
     "pricing": {
       "gpt-5.6-luna": { "inputPerM": 0.20, "cachedInputPerM": 0.02, "outputPerM": 1.20 },
       "gpt-5.6-terra": { "inputPerM": 2.00, "cachedInputPerM": 0.20, "outputPerM": 12.00 },
-      "gpt-5.6-sol": { "inputPerM": 4.00, "cachedInputPerM": 0.40, "outputPerM": 20.00 }
+      "gpt-5.6-sol": { "inputPerM": 4.00, "cachedInputPerM": 0.40, "outputPerM": 20.00 },
+      "gpt-6-astra": { "inputPerM": 10.00, "cachedInputPerM": 1.00, "outputPerM": 50.00 }
     }
   },
   "deepseek": {
@@ -31,17 +32,18 @@
       "allowed": ["low", "high", "max"],
       "default": "high"
     },
-    "models": ["deepseek-v4-flash", "deepseek-v4-pro"],
+    "models": ["deepseek-v4-flash", "deepseek-flash", "deepseek-v4-pro"],
     "charsPerToken": 1.0,
     "tpmLimit": null,
     "maxSpokeTokens": null,
     "pricingSource": {
       "url": "https://api-docs.deepseek.com/quick_start/pricing/",
-      "asOf": "2026-09-02",
-      "note": "離峰（尖峰時段 01:00-04:00 與 06:00-10:00 UTC 以外）為尖峰的一半；本檔一個型號只放得下一組價，取尖峰＝取上限。"
+      "asOf": "2026-09-12",
+      "note": "離峰（尖峰時段為週一至週五 01:00-04:00 與 06:00-10:00 UTC，其餘時段皆為離峰）為尖峰的一半；本檔一個型號只放得下一組價，取尖峰＝取上限。deepseek-v4-flash 已於 2026-09-10 退役、目前暫時轉址到 V4.1 Flash（deepseek-flash），官方未給截止日；其價格仍為退役前的舊值，故估算偏高。"
     },
     "pricing": {
       "deepseek-v4-flash": { "inputPerM": 0.44, "cachedInputPerM": 0.014, "outputPerM": 1.32 },
+      "deepseek-flash": { "inputPerM": 0.30, "cachedInputPerM": 0.006, "outputPerM": 1.20 },
       "deepseek-v4-pro": { "inputPerM": 1.32, "cachedInputPerM": 0.044, "outputPerM": 3.96 }
     }
   },
@@ -55,16 +57,17 @@
       "allowed": ["minimal", "low", "medium", "high"],
       "default": "high"
     },
-    "models": ["gemini-3.1-flash-lite", "gemini-3.5-flash-lite", "gemini-3.6-flash", "gemini-3.7-flash"],
+    "models": ["gemini-3.1-flash-lite", "gemini-3.5-flash-lite", "gemini-3.6-flash", "gemini-3.7-flash", "gemini-3.8-flash"],
     "charsPerToken": 1.0,
     "tpmLimit": null,
     "maxSpokeTokens": null,
-    "pricingSource": { "url": "https://ai.google.dev/gemini-api/docs/pricing", "asOf": "2026-09-02", "note": "文字／圖片／影片價；音訊另計。output 價含 thinking tokens。gemini-3.6-flash／gemini-3.7-flash 為優惠價，官方頁載明至 2026-12-31；2027-01-01 起漲為 $1.50 in／$7.50 out（兩者皆是）" },
+    "pricingSource": { "url": "https://ai.google.dev/gemini-api/docs/pricing", "asOf": "2026-09-12", "note": "文字／圖片／影片價；音訊另計。output 價含 thinking tokens。gemini-3.6-flash／gemini-3.7-flash／gemini-3.8-flash 為優惠價，官方頁載明至 2026-12-31；2027-01-01 起漲為 $1.50 in／$7.50 out（三者皆是）" },
     "pricing": {
       "gemini-3.1-flash-lite": { "inputPerM": 0.25, "cachedInputPerM": 0.025, "outputPerM": 1.50 },
       "gemini-3.5-flash-lite": { "inputPerM": 0.30, "cachedInputPerM": 0.03, "outputPerM": 2.50 },
       "gemini-3.6-flash": { "inputPerM": 0.75, "cachedInputPerM": 0.075, "outputPerM": 3.75 },
-      "gemini-3.7-flash": { "inputPerM": 0.75, "cachedInputPerM": 0.075, "outputPerM": 3.75 }
+      "gemini-3.7-flash": { "inputPerM": 0.75, "cachedInputPerM": 0.075, "outputPerM": 3.75 },
+      "gemini-3.8-flash": { "inputPerM": 0.75, "cachedInputPerM": 0.075, "outputPerM": 3.75 }
     }
   },
   "anthropic": {