dowafu 0.6.0 → 0.8.0

package/CHANGELOG.md

@@ -0,0 +1,133 @@
+# Changelog
+
+Notable changes per released version. Entries for 0.5.0–0.6.0 were **reconstructed** from
+release commits and internal records after the fact; from 0.7.0 on they are written at
+release time. Versions before 0.5.0 are not covered here — see the git tags (`v0.3.0`
+onwards).
+
+## 0.8.0 — 2026-09-13
+
+### Added
+
+- **Tickets now have two states: draft and sealed.** `dowafu ticket seal <ticket-id>
+  --repo-root <dir>` freezes a ticket, including each reviewer's lens definition as it stands
+  at that moment. Sealing needs at least one spoke and every lens file to exist; if anything
+  is missing, nothing is sealed. A sealed ticket cannot be edited and cannot be unsealed —
+  `dowafu ticket copy <sealed-ticket> <new-id>` gives you a new draft instead.
+- **`dowafu providers import --bundled`** imports the model list shipped with the package
+  without needing its path, and always applies the shipped defaults to models you don't have
+  yet.
+- `--doctor` prints where the shipped `providers.json` is; `--doctor --json` gains a
+  `bundledProvidersPath` field. No existing field changed.
+
+### Changed
+
+- **A draft cannot be run or queued.** Running one exits with code 5 before any spend;
+  `dispatch_submit` refuses it without creating a job; `dispatch_approve` and
+  `dowafu approve` refuse a job whose ticket is a draft. Dry runs work in both states.
+- `dispatch_tickets` shows each ticket's state as a fixed English `[draft]` or `[sealed]`,
+  and a draft's line carries the exact command to seal it.
+- `ticket show` prints the state on its first line; `--json` output gains `ticketStatus`.
+
+### Fixed
+
+- **A queued job used the lens definitions of whatever directory the daemon was started
+  from.** The worker never received a repository root, so a daemon started in one project
+  silently ran another project's ticket with its own same-named lenses. A sealed ticket now
+  carries its lenses and never reads `.claude/agents/` at run time.
+- **A ticket could still be changed after its job was approved**, so the worker could run
+  content — and a cost — that nobody had approved. Sealed content is frozen.
+
+### Upgrading
+
+- 🔴 **Every existing ticket becomes a draft.** The database is migrated on first use (schema
+  version 5 → 6). Seal a ticket again before dispatching it. A job already in the queue cannot
+  be approved while its ticket is a draft.
+- To pick up the model list shipped with a release, run `dowafu providers import --bundled`.
+  Upgrading still never rewrites your prices or enabled flags on its own.
+
+## 0.7.0 — 2026-09-12
+
+### Added
+
+- **`--ticket <name>`** names the ticket explicitly. The positional form still works, and
+  giving both is rejected rather than silently resolved. The queue worker now uses the
+  flag, which is what makes the fix below reachable for tickets that already exist.
+- **Three models**, each verified against the live API before shipping — tool calling,
+  usage on every round, and the model name echoed back unchanged:
+  `gpt-6-astra`, `deepseek-flash`, `gemini-3.8-flash`.
+- `dowafu result --help` and `dowafu approve --help` now print their usage. Previously
+  they treated `--help` as an id to look up, failed with "no results found", and opened
+  the database on the way.
+
+### Changed
+
+- **`ticket create` and `ticket import` reject names the CLI reserves**: the eight
+  subcommands (`ticket`, `providers`, `token`, `key`, `result`, `approve`, `serve`,
+  `mcp`), `-h`, `-V`, and any name beginning with `--`. Such a ticket could be created
+  before but could never run, because the CLI parsed the name as a command — one named
+  `serve` started a daemon instead. Tickets already stored under a reserved name still
+  run via `--ticket <name>`.
+- **The deepseek model enabled on a fresh install is now `deepseek-flash`.** DeepSeek
+  retired `deepseek-v4-flash` on 2026-09-10 and currently routes it to V4.1 Flash with no
+  stated end date; shipping it as the default meant new installs depended on that routing.
+  `deepseek-v4-flash` stays on the whitelist, disabled by default. **Existing databases
+  are not touched** — this only affects a database seeded after upgrading.
+- Prices for every provider re-checked against the vendor pricing pages on 2026-09-12.
+
+### Fixed
+
+- **The install command printed inside each language pack's own README pointed at the
+  `v0.4.0` tag** — unchanged through four releases, so anyone following it fetched
+  reviewer definitions three versions old. All four places that carry the tag are now on
+  the released version.
+- **A reviewer could not read its own ticket when the CLI ran with `--repo-root` from a
+  different working directory.** The ticket paths in its first message came out absolute
+  while the snapshot is keyed by a relative path, so every read of the ticket was refused
+  — and the audit still reported success. The result was a paid review written without
+  ever seeing the plan. Present since 0.5.0.
+
+### Upgrading
+
+Upgrading the package does not refresh the model list: seeding happens only when the model
+table is empty, so your existing prices and enabled flags are never silently rewritten. To
+pick up the three new models:
+
+```bash
+dowafu providers import "$(npm root -g)/dowafu/providers.json"
+dowafu providers list
+```
+
+## 0.6.0 — 2026-09-10
+
+*Reconstructed.*
+
+- A daemon no longer runs jobs that were approved before it started; those are returned to
+  pending approval at startup, so a restart cannot silently execute an old approval.
+- `--doctor` reports the job queue.
+- `engines` corrected to `>=22.13.0`.
+
+## 0.5.1 — 2026-09-09
+
+*Reconstructed.*
+
+- Reviewer output no longer carries template placeholders through to the saved report.
+- Queued jobs choose their own language: `dispatch_submit` accepts `lang`.
+
+## 0.5.0 — 2026-09-06
+
+*Reconstructed. The largest release so far; this is a summary, not a full list.*
+
+- **Tickets and reviewer output moved into SQLite.** No ticket directories or output files
+  on disk. What a reviewer reads is the snapshot taken when the ticket was written, not
+  the file as it stands at run time.
+- **Job queue and a long-running daemon** (`dowafu serve`), with MCP over stdio
+  (`dowafu mcp`) and over HTTP bound to `127.0.0.1` only. Inbound tokens are stored
+  hashed, compared in constant time, and rate limited per token.
+- **The model whitelist, per-model enabled flags and prices moved into the database**;
+  the `--providers` flag was removed. An empty database is seeded from the file shipped
+  with the package.
+- **API keys come from the database only** (`dowafu key`); environment variables and
+  `.env` support were removed, along with the `dotenv` dependency.
+- **Costs are stated in dollars** before you approve: a hard upper bound, plus the typical
+  spend of past runs when there are any.

package/README.md

@@ -103,6 +103,7 @@ A ticket lives in the database, not on disk. Build one with the CLI:
 dowafu ticket create <ticket-id> <shared-file>
 dowafu ticket add-spoke <ticket-id> <agent> <provider> <model> <body-file> [effort]
 dowafu ticket add-allow <ticket-id> <agent> <repo-relative-path> --repo-root .
+dowafu ticket seal <ticket-id> --repo-root .
 ```
 
 The body argument of `create` and `add-spoke` takes a path — or `-`, which reads it from
@@ -117,7 +118,7 @@ dowafu ticket create auth-review - <<'EOF'
 ...
 EOF
 
-dowafu ticket add-spoke auth-review hole-finder-safety deepseek deepseek-v4-flash - <<'EOF'
+dowafu ticket add-spoke auth-review hole-finder-safety deepseek deepseek-flash - <<'EOF'
 # Questions
 1. Does the permission check described here hold under concurrent requests?
 
@@ -132,6 +133,15 @@ content as it stands at that moment — dispatch never re-reads it, so what a re
 is that snapshot. `dowafu ticket show <ticket-id>` prints the models, the allowlists and
 the estimates.
 
+**A ticket must be sealed before it can run.** What you build above is a **draft**: you can
+keep editing it and dry-run it, but `--yes` and `dispatch_submit` both refuse it.
+`dowafu ticket seal <ticket-id> --repo-root .` freezes it — including each reviewer's lens
+definition, read from `.claude/agents/` at that moment — so a sealed ticket runs the same way
+no matter which directory the command or the daemon was started from. A sealed ticket cannot be
+edited; `dowafu ticket copy <ticket-id> <new-id>` gives you a new draft to change, and the
+original keeps matching the results it produced. `ticket show` prints `[draft]` or `[sealed]`
+on its first line.
+
 ### Section headings
 
 The headings inside the bodies above are **literal markers the parser matches** — use one
@@ -177,12 +187,24 @@ response for every call. Read a run back with `dowafu result <id>`.
 
 ## Models
 
-| provider | model |
-| --- | --- |
-| `openai` | `gpt-5.6-luna`, `gpt-5.6-terra`, `gpt-5.6-sol` |
-| `deepseek` | `deepseek-v4-flash` |
-| `gemini` | `gemini-3.1-flash-lite`, `gemini-3.5-flash-lite`, `gemini-3.6-flash` |
-| `anthropic` | `claude-opus-5`, `claude-sonnet-5` |
+| provider | model | on a fresh install |
+| --- | --- | :-: |
+| `openai` | `gpt-5.6-luna` | **enabled** |
+| | `gpt-5.6-terra`, `gpt-5.6-sol`, `gpt-6-astra` | disabled |
+| `deepseek` | `deepseek-flash` | **enabled** |
+| | `deepseek-v4-flash`, `deepseek-v4-pro` | disabled |
+| `gemini` | `gemini-3.1-flash-lite`, `gemini-3.5-flash-lite` | **enabled** |
+| | `gemini-3.6-flash`, `gemini-3.7-flash`, `gemini-3.8-flash` | disabled |
+| `anthropic` | `claude-haiku-4-5-20251001` | **enabled** |
+| | `claude-opus-5`, `claude-sonnet-5` | disabled |
+
+Fifteen models, five of them enabled out of the box — the pricier ones start disabled so
+that a typo cannot quietly dispatch to an expensive model. Dispatching to a disabled model
+is rejected before any spend, and tells you the `providers enable` command to run.
+
+`deepseek-v4-flash` was retired upstream on 2026-09-10 and is currently routed to V4.1
+Flash with no stated end date. It stays on the list so existing tickets keep working;
+**new tickets should use `deepseek-flash`**.
 
 The list ships with the package as `providers.json` and is seeded into the database the
 first time one is opened. From then on **the database is the source of truth**:
@@ -193,6 +215,16 @@ dowafu providers enable|disable <model>    # flip one on or off
 dowafu providers import <path>             # load your own file
 ```
 
+**Upgrading the package does not refresh the list.** Seeding happens only when the model
+table is completely empty, so an upgrade never silently changes a price or an enabled flag
+you already have. To pick up models added in a later release, import the shipped file
+yourself:
+
+```bash
+dowafu providers import --bundled
+dowafu providers list                      # confirm the new models are there
+```
+
 There is no `--providers` flag — it was removed in 0.5.0, when the whitelist moved into
 the database. Passing it is rejected as an unknown option.
 
@@ -208,7 +240,7 @@ not work: a reviewer's fixed closing line has to match the template the audit ch
 against.
 
 ```bash
-npx degit eyesofkids/dowafu/publish/en#v0.6.0 .claude-pack   # or publish/zh-tw
+npx degit eyesofkids/dowafu/publish/en#v0.8.0 .claude-pack   # or publish/zh-tw
 
 cd .claude-pack
 TARGET=<your project>
@@ -230,7 +262,8 @@ in its own language.
 
 An agent can drive `dowafu` over MCP instead of through the shell. Five tools are
 exposed: `dispatch_tickets`, `dispatch_submit`, `dispatch_status`, `dispatch_result`
-and `dispatch_approve`.
+and `dispatch_approve`. `dispatch_submit` accepts sealed tickets only, and sealing is done
+from the CLI — there is no MCP tool for it.
 
 There are two transports, and the difference that matters is who starts what.
 

package/README_zh-tw.md

@@ -84,6 +84,7 @@ dowafu --help                  # 查看所有旗標
 dowafu ticket create <ticket-id> <shared-file>
 dowafu ticket add-spoke <ticket-id> <agent> <provider> <model> <body-file> [effort]
 dowafu ticket add-allow <ticket-id> <agent> <repo-relative-path> --repo-root .
+dowafu ticket seal <ticket-id> --repo-root .
 ```
 
 `create` 與 `add-spoke` 的本文參數可以是路徑，也可以是 `-`（從 stdin 讀）——所以用 heredoc
@@ -98,7 +99,7 @@ dowafu ticket create auth-review - <<'EOF'
 ...
 EOF
 
-dowafu ticket add-spoke auth-review hole-finder-safety deepseek deepseek-v4-flash - <<'EOF'
+dowafu ticket add-spoke auth-review hole-finder-safety deepseek deepseek-flash - <<'EOF'
 # 具體問題
 1. 這裡描述的權限檢查在併發請求下還成立嗎？
 
@@ -111,6 +112,13 @@ EOF
 `add-allow` 會立刻驗證路徑、拒絕 `_docs/`，並把該檔案**當下的內容**存起來——派工時不會再讀一次，
 所以審查者看到的是那一刻的快照。用 `dowafu ticket show <ticket-id>` 檢視 Model、允許清單與估算。
 
+**工單要先定稿才能執行。** 上面建出來的是**草稿**：可以繼續修改、可以乾跑，但 `--yes` 與
+`dispatch_submit` 都會拒絕它。`dowafu ticket seal <ticket-id> --repo-root .` 把它凍結——
+連同每位審查者的 lens 定義（在那一刻從 `.claude/agents/` 讀進來）——所以定稿之後，不論指令或
+daemon 從哪個目錄啟動，執行結果都一樣。定稿的工單不能再改；要改就用
+`dowafu ticket copy <ticket-id> <new-id>` 複製出一張新草稿，原本那張與它產出的結果維持對應。
+`ticket show` 的第一行會印出 `[draft]` 或 `[sealed]`。
+
 ### 段落標題
 
 上面本文裡的標題是**字面標記（literal markers）**，Parser 會直接比對——必須完全使用以下兩組
@@ -166,12 +174,22 @@ dowafu result <id>
 
 ## Models
 
-| Provider | Model |
-| --- | --- |
-| `openai` | `gpt-5.6-luna`、`gpt-5.6-terra`、`gpt-5.6-sol` |
-| `deepseek` | `deepseek-v4-flash` |
-| `gemini` | `gemini-3.1-flash-lite`、`gemini-3.5-flash-lite`、`gemini-3.6-flash` |
-| `anthropic` | `claude-opus-5`、`claude-sonnet-5` |
+| Provider | Model | 全新安裝時 |
+| --- | --- | :-: |
+| `openai` | `gpt-5.6-luna` | **啟用** |
+| | `gpt-5.6-terra`、`gpt-5.6-sol`、`gpt-6-astra` | 停用 |
+| `deepseek` | `deepseek-flash` | **啟用** |
+| | `deepseek-v4-flash`、`deepseek-v4-pro` | 停用 |
+| `gemini` | `gemini-3.1-flash-lite`、`gemini-3.5-flash-lite` | **啟用** |
+| | `gemini-3.6-flash`、`gemini-3.7-flash`、`gemini-3.8-flash` | 停用 |
+| `anthropic` | `claude-haiku-4-5-20251001` | **啟用** |
+| | `claude-opus-5`、`claude-sonnet-5` | 停用 |
+
+共 15 個 Model，開箱只啟用五個——較貴的預設停用，讓打錯字不會安靜地派到昂貴的 Model 上。
+派到停用的 Model 會在產生任何費用之前被拒絕，並告訴你該跑哪一條 `providers enable`。
+
+`deepseek-v4-flash` 已於 2026-09-10 在上游退役，目前被轉址到 V4.1 Flash，官方未說明何時停止。
+它留在清單上是為了讓既有工單還能運作，**新工單請改用 `deepseek-flash`**。
 
 這份清單會隨套件以 `providers.json` 一起提供，並在第一次開啟資料庫時播種進去。
 之後**資料庫就是唯一來源**：
@@ -182,6 +200,14 @@ dowafu providers enable|disable <model>    # 開關其中一個
 dowafu providers import <path>             # 匯入自己的設定檔
 ```
 
+**升級套件不會刷新這份清單。** 播種只在 Model 表完全為空時發生，所以升級永遠不會安靜地改掉
+你既有的價格或啟用狀態。要取得後續版本新增的 Model，請自己匯入隨套件出貨的那一份：
+
+```bash
+dowafu providers import --bundled
+dowafu providers list                      # 確認新的 Model 已經進來
+```
+
 **沒有 `--providers` 旗標**——0.5.0 把白名單搬進資料庫時已移除，帶了會被當成未知選項拒絕。
 
 ## 從 Agent 驅動
@@ -199,7 +225,7 @@ dowafu providers import <path>             # 匯入自己的設定檔
 `publish/` 提供兩種語言：`publish/en/` 與 `publish/zh-tw/`。**擇一複製，不可混裝**——審查者的固定收尾句必須與稽核檢查用的範本是同一種語言。
 
 ```bash
-npx degit eyesofkids/dowafu/publish/zh-tw#v0.6.0 .claude-pack   # 或 publish/en
+npx degit eyesofkids/dowafu/publish/zh-tw#v0.8.0 .claude-pack   # 或 publish/en
 
 cd .claude-pack
 TARGET=<your project>
@@ -224,7 +250,7 @@ publish/zh-tw/README.md   （或 publish/en/README.md）
 ## 接成 MCP server
 
 Agent 可以不走 shell，改用 MCP 驅動 `dowafu`。露出五個 tool：`dispatch_tickets`、
-`dispatch_submit`、`dispatch_status`、`dispatch_result`、`dispatch_approve`。
+`dispatch_submit`、`dispatch_status`、`dispatch_result`、`dispatch_approve`。`dispatch_submit` 只接受已定稿的工單；定稿只能從 CLI 做，沒有對應的 MCP tool。
 
 有兩條路，差別在**誰啟動誰**。
 

package/dist/cli-args.js

@@ -10,6 +10,7 @@ import { DEFAULT_HTTP_PORT } from "./mcp/http.js";
 import { getCommandName } from "./pkg-info.js";
 import { DEFAULT_MAX_TOOL_CALLS } from "./cost.js";
 import { m } from "./messages.js";
+import { CLI_COMMANDS, CLI_SHORTCUTS } from "./cli-commands.js";
 const DEFAULTS = {
     out: "tmp/spoke",
     concurrency: 2,
@@ -86,9 +87,19 @@ export function resolveLang(cliLangRaw, envLangRaw) {
 export function parseArgs(argv, lang) {
     const helpText = m(lang, "helpText", getCommandName());
     // --help／--version 可出現在任何位置，且優先於其他一切解析——不要求先有 ticketDir。
-    if (argv.includes("--help") || argv.includes("-h"))
+    // A named ticket is opaque, including legacy names such as --help or -V.
+    let ticketValue = false;
+    const controlArgs = argv.filter((arg) => {
+        if (ticketValue) {
+            ticketValue = false;
+            return false;
+        }
+        ticketValue = arg === "--ticket";
+        return true;
+    });
+    if (controlArgs.includes("--help") || controlArgs.includes(CLI_SHORTCUTS.help))
         return { mode: "help" };
-    if (argv.includes("--version") || argv.includes("-V"))
+    if (controlArgs.includes("--version") || controlArgs.includes(CLI_SHORTCUTS.version))
         return { mode: "version" };
     const options = { ...DEFAULTS };
     // 熱修補（票 C 驗收）：`DOWAFU_HTTP_PORT` 原本只寫在 `daemon.ts` 的 `serve()` 參數預設值裡，
@@ -115,6 +126,11 @@ export function parseArgs(argv, lang) {
         };
     };
     const flagHandlers = {};
+    flagHandlers["ticket"] = (v) => {
+        if (ticketDir !== undefined)
+            throw new DispatchError(m(lang, "tooManyArgs", v, ticketDir, helpText), 2);
+        ticketDir = v;
+    };
     flagHandlers["out"] = (v) => (options.out = v);
     flagHandlers["repo-root"] = (v) => (options.repoRoot = v);
     flagHandlers["db"] = (v) => (options.dbPath = v);
@@ -154,7 +170,7 @@ export function parseArgs(argv, lang) {
             // （見迴圈後方）——這樣 --doctor 與 --lang 之類的已知旗標仍可同時給、彼此不衝突。
             doctorMode = true;
         }
-        else if (arg === "serve") {
+        else if (arg === CLI_COMMANDS.serve) {
             serveMode = true;
         }
         else if (arg === "--stop") {
@@ -163,7 +179,7 @@ export function parseArgs(argv, lang) {
         else if (arg === "--restart") {
             serveRestart = true;
         }
-        else if (arg === "mcp") {
+        else if (arg === CLI_COMMANDS.mcp) {
             mcpMode = true;
         }
         else if (arg.startsWith("--")) {

package/dist/cli-commands.js

@@ -0,0 +1,12 @@
+// These spellings drive both dispatch and ticket-name validation.
+export const CLI_COMMANDS = {
+    ticket: "ticket", providers: "providers", token: "token", key: "key",
+    result: "result", approve: "approve", serve: "serve", mcp: "mcp",
+};
+export const CLI_SHORTCUTS = { help: "-h", version: "-V" };
+export function reservedTicketNames() {
+    return [...Object.values(CLI_COMMANDS), ...Object.values(CLI_SHORTCUTS), "--*"];
+}
+export function isReservedTicketName(name) {
+    return name.startsWith("--") || reservedTicketNames().includes(name);
+}

package/dist/cli.js

@@ -13,10 +13,10 @@ import { loadProviders } from "./providers.js";
 import { loadTicket } from "./ticket.js";
 import { resolveSpokes } from "./validate.js";
 import { estimateTokens, estimateAllowlistTokens, estimateSequentialRead, checkGateOne } from "./gate.js";
-import { buildFirstUserText, buildSystemPrompt } from "./prompt.js";
+import { buildSystemPrompt } from "./prompt.js";
 import { buildReport, effectiveCap, effectiveCharsPerToken } from "./report.js";
 import { checkGitignore } from "./gitignore-check.js";
-import { runSpoke } from "./runner.js";
+import { buildSpokeFirstUserText, runSpoke } from "./runner.js";
 import { Semaphore } from "./semaphore.js";
 import { createResponsesAdapter } from "./adapters/responses.js";
 import { createGeminiAdapter } from "./adapters/gemini-native.js";
@@ -29,11 +29,12 @@ import { registerSecrets, maskString, maskDeep } from "./mask.js";
 import { buildDoctorReportData, renderDoctorReport } from "./doctor.js";
 import { bundledProvidersPath, getPackageVersion, getCommandName } from "./pkg-info.js";
 import { buildJsonPayload, buildJsonPlan } from "./json-output.js";
+import { CLI_COMMANDS } from "./cli-commands.js";
 import { parseArgs, formatEvent, resolveLang, resolveFallbackLang, buildStdoutSummary } from "./cli-args.js";
 import { m } from "./messages.js";
 import { defaultDbPath, openDb } from "./db.js";
 import { issueToken, listTokens, revokeToken } from "./api-token.js";
-import { addAllow, addSpoke, createTicket, formatTicket, hasResults, importTicketDirectory } from "./ticket-store.js";
+import { addAllow, addSpoke, copyTicket, createTicket, formatTicket, getStoredTicket, hasResults, importTicketDirectory, sealTicket } from "./ticket-store.js";
 import { approveJob, countQueueJobs, findJobsByIdPrefix, getJob, listPendingApprovalJobs } from "./job.js";
 import { serve, stopDaemon } from "./daemon.js";
 import { daemonAlive, daemonStatePath } from "./liveness.js";
@@ -178,6 +179,20 @@ async function ticketCommand(argv, lang) {
             await importTicketDirectory(db, dir, suppliedName ?? path.basename(path.resolve(dir)), repoRoot, lang);
             return;
         }
+        case "seal": {
+            const [name] = rest;
+            if (!name)
+                throw new DispatchError(m(lang, "ticketHelp", command), 2);
+            await sealTicket(db, name, repoRoot, lang);
+            return;
+        }
+        case "copy": {
+            const [sourceName, newName] = rest;
+            if (!sourceName || !newName)
+                throw new DispatchError(m(lang, "ticketHelp", command), 2);
+            copyTicket(db, sourceName, newName, lang);
+            return;
+        }
         case "show": {
             const [name] = rest;
             if (!name)
@@ -215,10 +230,25 @@ async function providersCommand(argv, lang) {
         return;
     }
     if (action === "import") {
+        const bundled = rest.includes("--bundled");
+        if (bundled) {
+            // `--bundled` is an explicit source choice, not a spelling of the path.
+            // In particular, do not infer this from a path comparison: callers who ask
+            // for the shipped file must get the bundled DEFAULT_ENABLED policy.
+            if (rest.length !== 1)
+                throw new DispatchError(m(lang, "providersHelp", command), 2);
+            const filePath = bundledProvidersPath();
+            mergeProviders(db, await readProvidersFile(filePath, lang), true);
+            console.log(m(lang, "providersImported", filePath));
+            return;
+        }
         const [filePath] = rest;
         if (!filePath)
             throw new DispatchError(m(lang, "providersHelp", command), 2);
-        mergeProviders(db, await readProvidersFile(path.resolve(filePath), lang), path.resolve(filePath) === bundledProvidersPath());
+        const resolvedPath = path.resolve(filePath);
+        // Keep the legacy path form's bundled recognition intact for callers that
+        // already pass the exact installed providers.json path.
+        mergeProviders(db, await readProvidersFile(resolvedPath, lang), resolvedPath === bundledProvidersPath());
         console.log(m(lang, "providersImported", filePath));
         return;
     }
@@ -489,24 +519,28 @@ async function main() {
     // 這個不會拋例外的簡化判定（resolveFallbackLang，見 cli-args.ts）。--lang 旗標的值在這個
     // 時間點還沒被驗證，不查它（v1.3 §二之2 #5／#6：help／version 的語言不受 --lang 影響）。
     const messageLang = resolveFallbackLang(process.env.DISPATCH_LANG);
-    if (process.argv[2] === "ticket") {
+    if (process.argv[2] === CLI_COMMANDS.ticket) {
         await ticketCommand(process.argv.slice(3), messageLang);
         return;
     }
-    if (process.argv[2] === "providers") {
+    if (process.argv[2] === CLI_COMMANDS.providers) {
         await providersCommand(process.argv.slice(3), messageLang);
         return;
     }
-    if (process.argv[2] === "token") {
+    if (process.argv[2] === CLI_COMMANDS.token) {
         await tokenCommand(process.argv.slice(3), messageLang);
         return;
     }
-    if (process.argv[2] === "key") {
+    if (process.argv[2] === CLI_COMMANDS.key) {
         await keyCommand(process.argv.slice(3), messageLang);
         return;
     }
-    if (process.argv[2] === "result") {
+    if (process.argv[2] === CLI_COMMANDS.result) {
         const args = process.argv.slice(3);
+        if (args[0] === "--help" || args[0] === "-h") {
+            console.log(m(messageLang, "resultHelp", getCommandName()));
+            return;
+        }
         const positional = [];
         let dbPath;
         for (let i = 0; i < args.length; i++) {
@@ -547,8 +581,12 @@ async function main() {
         console.log(lines.join("\n\n"));
         return;
     }
-    if (process.argv[2] === "approve") {
+    if (process.argv[2] === CLI_COMMANDS.approve) {
         const args = process.argv.slice(3);
+        if (args[0] === "--help" || args[0] === "-h") {
+            console.log(m(messageLang, "approveHelp", getCommandName()));
+            return;
+        }
         const positional = [];
         let dbPath;
         for (let i = 0; i < args.length; i++) {
@@ -582,6 +620,9 @@ async function main() {
         const before = pending[0];
         if (!before)
             throw new DispatchError(m(messageLang, "jobNotFound", prefix ?? ""), 2);
+        const ticket = getStoredTicket(db, before.ticket, messageLang);
+        if (ticket.status !== "sealed")
+            throw new DispatchError(m(messageLang, "ticketDraftRunBlocked", ticket.name, getCommandName()), 5);
         // Render the complete paid-work summary before changing the gate state.
         // A corrupted job therefore stays pending instead of becoming approved with
         // no information shown to the human operator.
@@ -629,7 +670,7 @@ async function main() {
             const reason = err instanceof DispatchError ? err.message : maskString(String(err));
             providersResult = { ok: false, reason };
         }
-        const doctorData = buildDoctorReportData(getCommandName(), providersResult, process.env, undefined, undefined, undefined, daemonAlive(daemonStatePath(doctorDbPath)), keyStatusRows, doctorDbPath, queue);
+        const doctorData = buildDoctorReportData(getCommandName(), providersResult, process.env, undefined, undefined, undefined, daemonAlive(daemonStatePath(doctorDbPath)), keyStatusRows, doctorDbPath, queue, bundledProvidersPath());
         console.log(parsed.options.json ? JSON.stringify(doctorData) : renderDoctorReport(messageLang, getCommandName(), doctorData));
         return;
     }
@@ -703,6 +744,8 @@ async function main() {
     const lang = resolveLang(options.langRaw, process.env.DISPATCH_LANG);
     // v1.10 §9：--repo-root 只影響白名單邊界、.claude/agents 位置、_docs/ 拒絕判定；
     // 工單目錄仍相對 cwd 解析，不要求位於 repoRoot 內（見 resolveSpokes 呼叫處）。
+    // （ticket-dir-cwd 補註：0.5.0 起 CLI 只走 DB 工單，ticket.ticketDir 是虛擬的 `ticket/<name>`，
+    // 不再相對 cwd 解析——見 runner.ts 的 buildSpokeFirstUserText。上一行是目錄工單時代的描述。）
     const repoRoot = path.resolve(options.repoRoot ?? process.cwd());
     const ticketId = ticketName;
     const db = openDbSeeded(options.dbPath, lang);
@@ -713,11 +756,12 @@ async function main() {
     // §10 步驟 4–5：effort 值域、API key 齊備、models 白名單（resolveSpokes 內部）。
     // 兩個回呼都是必填：validate.ts 不持有 db handle，「這個型號開著嗎」與「這個 provider
     // 有沒有 key」都由這裡接上——漏傳編不過（typecheck 涵蓋測試檔）。
-    const spokes = await resolveSpokes(ticket, providers, repoRoot, lang, (provider, model) => isModelEnabled(db, provider, model), (provider) => getProviderKey(db, provider) !== undefined);
+    const spokes = await resolveSpokes(ticket, providers, repoRoot, lang, (provider, model) => isModelEnabled(db, provider, model), (provider) => getProviderKey(db, provider) !== undefined, ticket.agentContent);
     // §10 步驟 6／§14 閘門一：呼叫前估算
     const estimates = spokes.map((spoke) => {
         const systemPrompt = buildSystemPrompt(spoke.agentBody, spoke.lang);
-        const firstUserText = buildFirstUserText(ticket.ticketDir, spoke.agent, spoke.allowedReadsRelative, repoRoot, spoke.lang);
+        // ticket-dir-cwd 不變量 3：與 runSpoke 同一個組裝點——估算的就是實跑會送出的那則訊息。
+        const firstUserText = buildSpokeFirstUserText(spoke, ticket.ticketDir, repoRoot);
         const charsPerToken = effectiveCharsPerToken(spoke, options);
         return {
             agent: spoke.agent,
@@ -747,6 +791,7 @@ async function main() {
     const plan = buildJsonPlan(spokes, estimates, allowlistEstimates, options);
     const buildPayload = (mode, results, audits, toolCallAudits, exitCode) => buildJsonPayload({
         ticketId,
+        ticketStatus: ticket.status,
         repoRoot,
         outDir,
         providersSource,
@@ -779,6 +824,9 @@ async function main() {
         }
         return;
     }
+    if (ticket.status !== "sealed") {
+        throw new DispatchError(m(lang, "ticketDraftRunBlocked", ticketName, getCommandName()), 5);
+    }
     // 擋在 confirm 之前：不要先問「要不要花錢」再中止。exitCode 5 是「派工前被守則擋下、
     // 未花任何錢」，與 3（成本閘門超限）分開，才分得出是哪一種擋。
     // **刻意不提供 --overwrite 之類的旗標**：有旗標，「加上去」就會變成最便宜的滿足方式，

package/dist/daemon.js

@@ -84,8 +84,8 @@ export function runCliJob(job, dbPath, lang = "en", deps = DEFAULT_RUN_CLI_JOB_D
     // stdout use the same language as the daemon's own failure message.
     const jobLang = job.lang ?? lang;
     const args = sourceMode
-        ? ["--import", "tsx", cliPath, job.ticket, "--yes", "--job-id", job.id, "--db", dbPath, "--lang", jobLang]
-        : [cliPath, job.ticket, "--yes", "--job-id", job.id, "--db", dbPath, "--lang", jobLang];
+        ? ["--import", "tsx", cliPath, "--ticket", job.ticket, "--yes", "--job-id", job.id, "--db", dbPath, "--lang", jobLang]
+        : [cliPath, "--ticket", job.ticket, "--yes", "--job-id", job.id, "--db", dbPath, "--lang", jobLang];
     return new Promise((resolve) => {
         const child = deps.spawn(process.execPath, args, { stdio: ["inherit", "inherit", "pipe"], env: process.env });
         let stderrTail = Buffer.alloc(0);

package/dist/db.js

@@ -191,6 +191,24 @@ const MIGRATIONS = [
                 db.exec("ALTER TABLE jobs ADD COLUMN lang TEXT");
         },
     },
+    // ticket-states-T1: old tickets were created before content had a freeze point.
+    // A v5 database therefore has no sealed content, so every existing ticket starts as
+    // draft and must be sealed explicitly before it can be dispatched.
+    {
+        version: 6,
+        up: (db) => {
+            const columns = new Set(db.prepare("PRAGMA table_info(tickets)").all().map((column) => column.name));
+            if (!columns.has("status"))
+                db.exec("ALTER TABLE tickets ADD COLUMN status TEXT");
+            if (!columns.has("sealed_at"))
+                db.exec("ALTER TABLE tickets ADD COLUMN sealed_at TEXT");
+            // 驗收熱修補：本行原本無條件覆寫，於是對「user_version 被退回 5、但資料已有定稿工單」
+            // 的降版 fixture 重跑時，會把 sealed 洗成 draft、sealed_at 洗成 NULL（實測確認）。
+            // 真實升級路徑上兩者等價——欄位是這一步才加的，全部是 NULL；加了條件之後重跑是 no-op。
+            // v5 的形狀本來就是「加欄位、資料不動」，這裡只是補回同一個紀律。
+            db.exec("UPDATE tickets SET status = 'draft', sealed_at = NULL WHERE status IS NULL");
+        },
+    },
 ];
 const LATEST_SCHEMA_VERSION = MIGRATIONS[MIGRATIONS.length - 1].version;
 function migrate(db, lang) {

package/dist/doctor.js

@@ -120,7 +120,7 @@ function buildLensValue(lang, lenses) {
     const closingNames = lenses.withClosing.length > 0 ? lenses.withClosing.join(joiner) : m(lang, "noneLabel");
     return m(lang, "doctorLensFoundValue", lenses.dirPath, lenses.withClosing.length + lenses.withoutClosing.length, lenses.withClosing.length, closingNames, noClosingSuffix);
 }
-export function buildDoctorReportData(cmd, providers, env = process.env, homedir = os.homedir, probe = DEFAULT_PROBE, cwd = process.cwd(), daemon, keyStatusRows = [], dbPath, queue = { pendingApproval: 0, approved: 0, running: 0 }) {
+export function buildDoctorReportData(cmd, providers, env = process.env, homedir = os.homedir, probe = DEFAULT_PROBE, cwd = process.cwd(), daemon, keyStatusRows = [], dbPath, queue = { pendingApproval: 0, approved: 0, running: 0 }, bundledProvidersPath) {
     const dispatchHome = resolveDispatchHome(env, homedir);
     const configDir = dispatchHome === null
         ? { source: "unresolved" }
@@ -153,6 +153,7 @@ export function buildDoctorReportData(cmd, providers, env = process.env, homedir
         models,
         daemon: daemon ?? { alive: false, reason: "heartbeat_missing" },
         queue: { ...queue },
+        ...(bundledProvidersPath ? { bundledProvidersPath } : {}),
         lenses: buildLensData(probe, cwd),
     };
 }
@@ -164,6 +165,7 @@ export function renderDoctorReport(lang, cmd, data) {
         // 先前 doctor 寫死走預設 DB，於是 `--doctor --db <別的>` 會對著另一個資料庫回答你。
         ...(data.dbPath ? [m(lang, "doctorDbLine", data.dbPath)] : []),
         ...(data.envFilePresent ? [m(lang, "doctorEnvLine", m(lang, "doctorEnvPresentValue"))] : []),
+        ...(data.bundledProvidersPath ? [m(lang, "doctorBundledProvidersLine", data.bundledProvidersPath)] : []),
         m(lang, "doctorApiKeyLine", buildApiKeyValue(lang, data.apiKeys)),
         m(lang, "doctorModelListLine", buildModelListValue(lang, data.models)),
         m(lang, "doctorDaemonLine", buildDaemonValue(lang, data.daemon)),
@@ -174,6 +176,6 @@ export function renderDoctorReport(lang, cmd, data) {
     ];
     return lines.join("\n");
 }
-export function buildDoctorReport(lang, cmd, providers, env = process.env, homedir = os.homedir, probe = DEFAULT_PROBE, cwd = process.cwd(), daemon, keyStatusRows = [], dbPath, queue = { pendingApproval: 0, approved: 0, running: 0 }) {
-    return renderDoctorReport(lang, cmd, buildDoctorReportData(cmd, providers, env, homedir, probe, cwd, daemon, keyStatusRows, dbPath, queue));
+export function buildDoctorReport(lang, cmd, providers, env = process.env, homedir = os.homedir, probe = DEFAULT_PROBE, cwd = process.cwd(), daemon, keyStatusRows = [], dbPath, queue = { pendingApproval: 0, approved: 0, running: 0 }, bundledProvidersPath) {
+    return renderDoctorReport(lang, cmd, buildDoctorReportData(cmd, providers, env, homedir, probe, cwd, daemon, keyStatusRows, dbPath, queue, bundledProvidersPath));
 }

package/dist/job.js

@@ -1,5 +1,9 @@
 import { randomUUID } from "node:crypto";
 import { now } from "./db.js";
+import { m } from "./messages.js";
+import { getCommandName } from "./pkg-info.js";
+import { getStoredTicket } from "./ticket-store.js";
+import { DispatchError } from "./types.js";
 export const JOB_STATUSES = [
     "pending_approval",
     "approved",
@@ -42,8 +46,10 @@ export function countQueueJobs(db) {
     return counts;
 }
 export function submitJob(db, ticket, id = randomUUID(), lang = null) {
-    if (!db.prepare("SELECT 1 FROM tickets WHERE name = ?").get(ticket))
-        throw new Error(`ticket does not exist: ${ticket}`);
+    const messageLang = lang ?? "en";
+    const stored = getStoredTicket(db, ticket, messageLang);
+    if (stored.status !== "sealed")
+        throw new DispatchError(m(messageLang, "ticketDraftRunBlocked", ticket, getCommandName()), 5);
     const createdAt = now();
     db.prepare("INSERT INTO jobs (id, ticket, lang, status, created_at) VALUES (?, ?, ?, 'pending_approval', ?)").run(id, ticket, lang, createdAt);
     return getJob(db, id);

package/dist/json-output.js

@@ -66,6 +66,7 @@ export function buildJsonSpoke(result, audit, toolCallAudit) {
 export function buildJsonPayload(args) {
     return {
         ticketId: args.ticketId,
+        ticketStatus: args.ticketStatus,
         repoRoot: args.repoRoot,
         outDir: args.outDir,
         providersSource: args.providersSource,

package/dist/mcp/protocol.js

@@ -7,17 +7,17 @@ import { m } from "../messages.js";
 import { readResultOutcomes, readResults } from "../output.js";
 import { listModels } from "../providers-store.js";
 import { buildKeyStatusRows } from "../provider-key.js";
-import { getPackageVersion } from "../pkg-info.js";
-import { formatTicket, getTicketDoc, getTicketHardCapUsd } from "../ticket-store.js";
+import { getCommandName, getPackageVersion } from "../pkg-info.js";
+import { formatTicket, getStoredTicket, getTicketHardCapUsd } from "../ticket-store.js";
 export const TOOLS = [
     {
         name: "dispatch_tickets",
-        description: "List DB tickets that can be submitted, including their spokes and allowlist file counts.",
+        description: "List DB tickets and their status: draft tickets are editable but cannot be submitted; sealed tickets have frozen content and lenses, can be submitted repeatedly, and can only be sealed from the CLI.",
         inputSchema: { type: "object", properties: {} },
     },
     {
         name: "dispatch_submit",
-        description: "Queue a DB ticket by name. It remains pending human terminal approval and is not executed by this tool.",
+        description: "Queue a sealed DB ticket by name. Draft tickets are rejected without creating a job; sealing is only available from the CLI. A queued job remains pending human terminal approval and is not executed by this tool.",
         inputSchema: {
             type: "object",
             properties: {
@@ -134,8 +134,12 @@ export function createProtocol(options) {
                 const names = options.db.prepare("SELECT name FROM tickets ORDER BY name").all();
                 const lines = names.length === 0 ? [m(options.lang, "mcpTicketsEmpty")] : [m(options.lang, "mcpTicketsTitle")];
                 for (const { name: ticket } of names) {
-                    const doc = getTicketDoc(options.db, ticket, options.lang);
+                    const stored = getStoredTicket(options.db, ticket, options.lang);
+                    const doc = stored.doc;
                     lines.push(m(options.lang, "mcpTicketsRow", ticket, doc.spokes.length));
+                    lines.push(`  ${stored.status === "sealed"
+                        ? m(options.lang, "mcpTicketStatusSealed", stored.sealedAt ?? "")
+                        : m(options.lang, "mcpTicketStatusDraft", ticket, getCommandName())}`);
                     const priorRuns = countTicketResultRuns(options.db, ticket);
                     if (priorRuns > 0)
                         lines.push(`  ${m(options.lang, "mcpPriorResultsReminder", priorRuns)}`);
@@ -273,6 +277,9 @@ export function createProtocol(options) {
                         ...found.ambiguous.map((candidate) => `  ${candidate.id}  ${candidate.ticket}  ${candidate.status}`)].join("\n"), true);
                 }
                 const job = found.job;
+                const ticket = getStoredTicket(options.db, job.ticket, options.lang);
+                if (ticket.status !== "sealed")
+                    return text(m(options.lang, "ticketDraftRunBlocked", ticket.name, getCommandName()), true);
                 // 工單 §A-1 之二：與 formatTicket 共用同一份算法（getTicketHardCapUsd），不得在這裡
                 // 另算一份——變異 #5 鎖這件事。
                 const expected = getTicketHardCapUsd(options.db, job.ticket, options.lang);

package/dist/messages.js

@@ -25,7 +25,7 @@ const MESSAGES = {
         unknownOption: (arg, helpText) => `未知選項：${arg}\n\n${helpText}`,
         missingProviders: (path) => `找不到 providers.json：${path}`,
         dryRunNotice: () => "--dry-run：僅解析／驗證／估算／印報表，未呼叫任何 API。",
-        helpText: (cmd) => `用法：${cmd} <ticket-id> [options]
+        helpText: (cmd) => `用法：${cmd} --ticket <name> [options]（亦接受位置參數 <ticket-id>）
 
 子指令（各自有自己的 --help／用法訊息）：
   ${cmd} ticket ...        建立、匯入、檢視工單
@@ -39,6 +39,7 @@ const MESSAGES = {
   ${cmd} serve --restart [--yes] 停止後重新啟動 daemon，會走兩端清理
   ${cmd} mcp               以 stdio 提供 MCP server
 
+  --ticket <name>          指定工單名稱，不可與位置參數同時給
   --lang <en|zh-tw>        CLI 輸出與 spoke prompt 的語言，預設 en
   --repo-root <dir>        白名單邊界與 .claude/agents 的根，預設 cwd
   --db <path>              SQLite 工單與產物資料庫，預設 DISPATCH_HOME/dowafu.db
@@ -137,6 +138,8 @@ const MESSAGES = {
         mcpTicketsEmpty: () => "沒有可派的 DB 工單。",
         mcpTicketsTitle: () => "可派工單：",
         mcpTicketsRow: (ticket, spokeCount) => `- ${ticket}：${spokeCount} 個 spoke`,
+        mcpTicketStatusDraft: (ticket, cmd) => `[draft] 草稿 — 尚不能送出；定稿請在 CLI 執行：${cmd} ticket seal ${ticket} --repo-root <repo 根>`,
+        mcpTicketStatusSealed: (sealedAt) => `[sealed] 定稿 ${sealedAt} — 內容與 lens 已凍結，可送出。`,
         mcpTicketsSpoke: (agent, provider, model, allowCount) => `  ${agent}：${provider}/${model}；允許清單檔 ${allowCount} 個`,
         mcpKeysTitle: () => "API key 狀態：",
         mcpKeysRow: (provider, status) => `  ${provider}：${status}`,
@@ -216,14 +219,23 @@ const MESSAGES = {
         agentFileNotFound: (agentPath, agent) => `找不到 ${agentPath}（_dispatch.md 列了 agent "${agent}"）`,
         ticketNotFound: (name) => `找不到 DB 工單：${name}`,
         ticketCorrupt: (name) => `DB 工單內容損毀：${name}`,
+        ticketNameReserved: (name, reserved) => `工單名稱「${name}」是 CLI 保留字。保留名稱：${reserved}（--* 表示所有 -- 開頭的名稱）`,
         ticketNameInvalid: (name) => `工單名稱無效：${name}`,
         ticketAlreadyExists: (name) => `DB 工單已存在：${name}`,
         ticketSpokeNotFound: (name, agent) => `DB 工單 "${name}" 沒有 agent "${agent}"`,
+        ticketStatusInvalid: (name) => `DB 工單 "${name}" 的狀態無效或損毀。`,
+        ticketSealedWriteRejected: (name) => `DB 工單 "${name}" 已定稿、內容已凍結；要修改請用 dowafu ticket copy ${name} <新名稱>。`,
+        ticketSealNeedsSpoke: (name) => `DB 工單 "${name}" 至少要有一支 spoke 才能定稿。`,
+        ticketCopyNeedsSealed: (name) => `DB 工單 "${name}" 仍是草稿；只有已定稿工單可以複製。`,
+        ticketSealedLensMissing: (name, agent) => `DB 工單 "${name}" 已定稿但缺少 agent "${agent}" 的 lens 快照，已中止，未讀取磁碟 lens。`,
+        ticketDraftRunBlocked: (name, cmd) => `DB 工單 "${name}" 目前是草稿，lens 尚未凍結；未派工、未呼叫 API。請先執行：${cmd} ticket seal ${name} --repo-root .`,
+        ticketStatusDraft: () => `[draft] 草稿 — 可編輯；尚不能送出。`,
+        ticketStatusSealed: (sealedAt, repoRoot) => `[sealed] 定稿 ${sealedAt}（${repoRoot}）— 內容與 lens 已凍結，可送出。`,
         ticketShowHeader: (name) => `DB 工單 ${name}:`,
         ticketEstimateTokens: (tokens) => `估算 ${tokens} tokens`,
         ticketCompletedRuns: (runs, total, last) => `已完成 ${runs} 次；累計 $${total}；最近一次 ${last}`,
         ticketCompletedRunsNoPricing: (runs, last) => `已完成 ${runs} 次；累計無價目資料；最近一次 ${last}`,
-        ticketHelp: (cmd) => `${cmd} ticket create <name> <shared-file>\n${cmd} ticket add-spoke <name> <agent> <provider> <model> <body-file> [effort]\n${cmd} ticket add-allow <name> <agent> <repo-relative-path> [--repo-root <dir>]\n${cmd} ticket import <existing-ticket-dir> [name] [--repo-root <dir>]\n${cmd} ticket show <name>\n  <shared-file>／<body-file> 可用 - 代表從 stdin 讀取本文（stdin 須為管道／重導向，不得是互動式終端機）`,
+        ticketHelp: (cmd) => `${cmd} ticket create <name> <shared-file>\n${cmd} ticket add-spoke <name> <agent> <provider> <model> <body-file> [effort]\n${cmd} ticket add-allow <name> <agent> <repo-relative-path> [--repo-root <dir>]\n${cmd} ticket import <existing-ticket-dir> [name] [--repo-root <dir>]\n${cmd} ticket seal <name> --repo-root <dir>\n${cmd} ticket copy <sealed-ticket> <new-name>\n${cmd} ticket show <name>\n  draft：可編輯、不能送出；sealed：內容（含 lens）已凍結，可送出且可多次執行。\n  <shared-file>／<body-file> 可用 - 代表從 stdin 讀取本文（stdin 須為管道／重導向，不得是互動式終端機）`,
         ticketStdinRequiresPipe: () => `此指令用 - 讀取 stdin 本文，但目前 stdin 是互動式終端機，沒有東西被導進來。` +
             `請改用管道／重導向提供內容（例如 echo "..." | dowafu ticket create <name> -），或改用一般檔案路徑。`,
         agentDefNotFound: (path, agent) => `找不到 agent 定義檔 ${path}（_dispatch.md 列了 "${agent}"）`,
@@ -256,7 +268,7 @@ const MESSAGES = {
         modelDisabled: (model, cmd) => `型號 "${model}" 已停用；請先執行 ${cmd} providers enable ${model}`,
         providerModelNotFound: (model) => `找不到型號：${model}`,
         providerModelAmbiguous: (model, providers) => `型號 "${model}" 同時存在於：${providers}。請用 ${"dowafu"} providers enable <provider> ${model} 指定目標；可先看 providers list。`,
-        providersHelp: (cmd) => `${cmd} providers list [--db <path>]\n${cmd} providers enable <model> [--db <path>]\n${cmd} providers enable <provider> <model> [--db <path>]\n${cmd} providers disable <model> [--db <path>]\n${cmd} providers disable <provider> <model> [--db <path>]\n${cmd} providers import <path> [--db <path>]`,
+        providersHelp: (cmd) => `${cmd} providers list [--db <path>]\n${cmd} providers enable <model> [--db <path>]\n${cmd} providers enable <provider> <model> [--db <path>]\n${cmd} providers disable <model> [--db <path>]\n${cmd} providers disable <provider> <model> [--db <path>]\n${cmd} providers import <path> [--db <path>]\n${cmd} providers import --bundled [--db <path>]`,
         providersListEmpty: () => "providers DB 尚無型號；請明確執行 providers import。",
         providersListRow: (provider, model, input, output, enabled) => `${provider}\t${model}\tinput $${input}/M\toutput $${output}/M\t${enabled ? "enabled" : "disabled"}`,
         providersImported: (path) => `已合流匯入 providers：${path}`,
@@ -342,6 +354,7 @@ const MESSAGES = {
         doctorConfigDirSourceDefault: (dir) => `${dir}（來源：預設；DISPATCH_HOME 與 XDG_CONFIG_HOME 都沒設）`,
         doctorConfigDirUnresolved: () => "無法解析（沒有 HOME）",
         doctorDbLine: (dbPath) => `  資料庫      ${dbPath}`,
+        doctorBundledProvidersLine: (filePath) => `  出貨型號檔  ${filePath}`,
         doctorEnvLine: (value) => `  .env        ${value}`,
         doctorEnvPresentValue: () => "有，但本版不讀取（API key 請用 `dowafu key` 設定進 DB）",
         doctorApiKeyLine: (value) => `  API key     ${value}`,
@@ -364,7 +377,7 @@ const MESSAGES = {
         unknownOption: (arg, helpText) => `Unknown option: ${arg}\n\n${helpText}`,
         missingProviders: (path) => `providers.json not found: ${path}`,
         dryRunNotice: () => "--dry-run: parsed, validated, estimated, and reported only; no API calls were made.",
-        helpText: (cmd) => `Usage: ${cmd} <ticket-id> [options]
+        helpText: (cmd) => `Usage: ${cmd} --ticket <name> [options] (positional <ticket-id> also accepted)
 
 Subcommands (each has its own usage message):
   ${cmd} ticket ...        Create, import and inspect tickets
@@ -378,6 +391,7 @@ Subcommands (each has its own usage message):
   ${cmd} serve --restart [--yes] Stop then start the daemon, running both cleanup phases
   ${cmd} mcp               Serve MCP over stdio
 
+  --ticket <name>          Select a ticket; cannot be combined with a positional ticket
   --lang <en|zh-tw>        Language for CLI output and spoke prompts, default en
   --repo-root <dir>        Root for the allowlist boundary and .claude/agents, default cwd
   --db <path>              SQLite ticket/result database, default DISPATCH_HOME/dowafu.db
@@ -474,6 +488,8 @@ Subcommands (each has its own usage message):
         mcpTicketsEmpty: () => "No dispatchable DB tickets.",
         mcpTicketsTitle: () => "Dispatchable tickets:",
         mcpTicketsRow: (ticket, spokeCount) => `- ${ticket}: ${spokeCount} spoke(s)`,
+        mcpTicketStatusDraft: (ticket, cmd) => `[draft] Draft — cannot be dispatched; seal it in the CLI: ${cmd} ticket seal ${ticket} --repo-root <repo root>`,
+        mcpTicketStatusSealed: (sealedAt) => `[sealed] Sealed ${sealedAt} — content and lenses are frozen; ready to dispatch.`,
         mcpTicketsSpoke: (agent, provider, model, allowCount) => `  ${agent}: ${provider}/${model}; allowlist files=${allowCount}`,
         mcpKeysTitle: () => "API key status:",
         mcpKeysRow: (provider, status) => `  ${provider}: ${status}`,
@@ -556,14 +572,23 @@ Subcommands (each has its own usage message):
         agentFileNotFound: (agentPath, agent) => `Not found: ${agentPath} (_dispatch.md lists agent "${agent}")`,
         ticketNotFound: (name) => `DB ticket not found: ${name}`,
         ticketCorrupt: (name) => `DB ticket is corrupt: ${name}`,
+        ticketNameReserved: (name, reserved) => `Ticket name "${name}" is reserved by the CLI. Reserved names: ${reserved} (--* means every name starting with --)`,
         ticketNameInvalid: (name) => `Invalid ticket name: ${name}`,
         ticketAlreadyExists: (name) => `DB ticket already exists: ${name}`,
         ticketSpokeNotFound: (name, agent) => `DB ticket "${name}" has no agent "${agent}"`,
+        ticketStatusInvalid: (name) => `DB ticket "${name}" has an invalid or corrupt status.`,
+        ticketSealedWriteRejected: (name) => `DB ticket "${name}" is sealed and its content is frozen; to modify it, run dowafu ticket copy ${name} <new-name>.`,
+        ticketSealNeedsSpoke: (name) => `DB ticket "${name}" needs at least one spoke before it can be sealed.`,
+        ticketCopyNeedsSealed: (name) => `DB ticket "${name}" is still a draft; only a sealed ticket can be copied.`,
+        ticketSealedLensMissing: (name, agent) => `DB ticket "${name}" is sealed but lacks a lens snapshot for agent "${agent}"; aborted without reading a lens from disk.`,
+        ticketDraftRunBlocked: (name, cmd) => `DB ticket "${name}" is a draft and its lenses are not frozen; nothing was dispatched and no API was called. First run: ${cmd} ticket seal ${name} --repo-root .`,
+        ticketStatusDraft: () => `[draft] Draft — editable; cannot be dispatched yet.`,
+        ticketStatusSealed: (sealedAt, repoRoot) => `[sealed] Sealed ${sealedAt} (${repoRoot}) — content and lenses are frozen; ready to dispatch.`,
         ticketShowHeader: (name) => `DB ticket ${name}:`,
         ticketEstimateTokens: (tokens) => `est. ${tokens} tokens`,
         ticketCompletedRuns: (runs, total, last) => `Completed ${runs} times; total $${total}; last ${last}`,
         ticketCompletedRunsNoPricing: (runs, last) => `Completed ${runs} times; total No pricing data; last ${last}`,
-        ticketHelp: (cmd) => `${cmd} ticket create <name> <shared-file>\n${cmd} ticket add-spoke <name> <agent> <provider> <model> <body-file> [effort]\n${cmd} ticket add-allow <name> <agent> <repo-relative-path> [--repo-root <dir>]\n${cmd} ticket import <existing-ticket-dir> [name] [--repo-root <dir>]\n${cmd} ticket show <name>\n  <shared-file>/<body-file> may be - to read the body from stdin (stdin must be piped/redirected, not an interactive terminal)`,
+        ticketHelp: (cmd) => `${cmd} ticket create <name> <shared-file>\n${cmd} ticket add-spoke <name> <agent> <provider> <model> <body-file> [effort]\n${cmd} ticket add-allow <name> <agent> <repo-relative-path> [--repo-root <dir>]\n${cmd} ticket import <existing-ticket-dir> [name] [--repo-root <dir>]\n${cmd} ticket seal <name> --repo-root <dir>\n${cmd} ticket copy <sealed-ticket> <new-name>\n${cmd} ticket show <name>\n  draft: editable, cannot dispatch; sealed: content (including lenses) is frozen, can dispatch and run repeatedly.\n  <shared-file>/<body-file> may be - to read the body from stdin (stdin must be piped/redirected, not an interactive terminal)`,
         ticketStdinRequiresPipe: () => "This command reads the body from stdin via -, but stdin is an interactive terminal right now; nothing is being piped in. " +
             'Pipe or redirect content instead (for example, echo "..." | dowafu ticket create <name> -), or use a regular file path.',
         agentDefNotFound: (path, agent) => `Agent definition file not found: ${path} (_dispatch.md lists "${agent}")`,
@@ -599,7 +624,7 @@ Subcommands (each has its own usage message):
         modelDisabled: (model, cmd) => `Model "${model}" is disabled; first run ${cmd} providers enable ${model}`,
         providerModelNotFound: (model) => `Model not found: ${model}`,
         providerModelAmbiguous: (model, providers) => `Model "${model}" exists in: ${providers}. Use dowafu providers enable <provider> ${model}; see providers list.`,
-        providersHelp: (cmd) => `${cmd} providers list [--db <path>]\n${cmd} providers enable <model> [--db <path>]\n${cmd} providers enable <provider> <model> [--db <path>]\n${cmd} providers disable <model> [--db <path>]\n${cmd} providers disable <provider> <model> [--db <path>]\n${cmd} providers import <path> [--db <path>]`,
+        providersHelp: (cmd) => `${cmd} providers list [--db <path>]\n${cmd} providers enable <model> [--db <path>]\n${cmd} providers enable <provider> <model> [--db <path>]\n${cmd} providers disable <model> [--db <path>]\n${cmd} providers disable <provider> <model> [--db <path>]\n${cmd} providers import <path> [--db <path>]\n${cmd} providers import --bundled [--db <path>]`,
         providersListEmpty: () => "The providers DB has no models; explicitly run providers import.",
         providersListRow: (provider, model, input, output, enabled) => `${provider}\t${model}\tinput $${input}/M\toutput $${output}/M\t${enabled ? "enabled" : "disabled"}`,
         providersImported: (path) => `Providers merged from: ${path}`,
@@ -682,6 +707,7 @@ Subcommands (each has its own usage message):
         doctorConfigDirSourceDefault: (dir) => `${dir} (source: default; neither DISPATCH_HOME nor XDG_CONFIG_HOME is set)`,
         doctorConfigDirUnresolved: () => "could not resolve (no HOME)",
         doctorDbLine: (dbPath) => `  Database     ${dbPath}`,
+        doctorBundledProvidersLine: (filePath) => `  Bundled providers.json  ${filePath}`,
         doctorEnvLine: (value) => `  .env         ${value}`,
         doctorEnvPresentValue: () => "present, but this version does not read it (set API keys with `dowafu key`)",
         doctorApiKeyLine: (value) => `  API keys     ${value}`,

package/dist/prompt.js

@@ -90,6 +90,12 @@ function buildStep3(allowedReadsRelative, lang) {
 function displayTicketDir(ticketDir, repoRoot) {
     if (!repoRoot)
         return ticketDir;
+    // ticket-dir-cwd：相對路徑一律原樣輸出，不交給 path.relative——後者會先以 cwd 解析它，
+    // cwd 不是 repoRoot 時（含 repoRoot 的子目錄）就變成另一個字串。DB 工單的 ticketDir 是虛擬的
+    // `ticket/<name>`，它就是快照查表鍵的前綴，spoke 必須逐字看到它。目錄工單由呼叫端
+    // （runner.ts 的 buildSpokeFirstUserText）先 resolve 成絕對路徑，不走這條。
+    if (!path.isAbsolute(ticketDir))
+        return ticketDir;
     const rel = path.relative(repoRoot, ticketDir);
     if (rel === "" || rel.startsWith("..") || path.isAbsolute(rel))
         return ticketDir;

package/dist/providers-store.js

@@ -7,7 +7,10 @@ import { parseProvidersFile } from "./providers.js";
 import { bundledProvidersPath } from "./pkg-info.js";
 const DEFAULT_ENABLED = new Set([
     "gpt-5.6-luna",
-    "deepseek-v4-flash",
+    // 2026-09-12：預設改為 deepseek-flash。deepseek-v4-flash 已於 2026-09-10 退役，
+    // 目前只是暫時轉址到 V4.1 Flash 且官方未給截止日——預設開一個隨時會消失的型號，
+    // 壞法會是「新裝的人某天突然跑不動」。deepseek-flash 已 smoke 實跑通過。
+    "deepseek-flash",
     "gemini-3.1-flash-lite",
     "gemini-3.5-flash-lite",
     "claude-haiku-4-5-20251001",

package/dist/runner.js

@@ -134,10 +134,19 @@ async function sendWithResilience(adapter, conv, sendOpts, cfg, ctx) {
         }
     }
 }
+// ticket-dir-cwd（log_v0_6_0_open.md #31）：spoke 第一則訊息的唯一組裝點——實跑（runSpoke）與
+// 乾跑估算（cli.ts）都走這裡，不得各自組裝。原本 runSpoke 先 path.resolve、乾跑不 resolve，
+// cwd ≠ --repo-root 時實跑給出查表查不到的 `<cwd>/ticket/<name>`，乾跑卻一切正常，所以一路看不見。
+// DB 工單（readableContent 存在）的 ticketDir 是快照查表鍵的前綴、不是檔案系統路徑，原樣傳遞——
+// 判別條件與 executeToolCall 相同，「prompt 給的路徑」因此就是「查表用的鍵」。
+// 目錄工單（僅解析器測試）維持原本「相對 cwd 解析」的語意。
+export function buildSpokeFirstUserText(spoke, ticketDir, repoRoot) {
+    return buildFirstUserText(spoke.readableContent ? ticketDir : path.resolve(ticketDir), spoke.agent, spoke.allowedReadsRelative, repoRoot, spoke.lang);
+}
 export async function runSpoke(spoke, adapter, ticketDir, options) {
     const startedAt = Date.now();
     const systemPrompt = buildSystemPrompt(spoke.agentBody, spoke.lang);
-    const firstUserText = buildFirstUserText(path.resolve(ticketDir), spoke.agent, spoke.allowedReadsRelative, options.repoRoot, spoke.lang);
+    const firstUserText = buildSpokeFirstUserText(spoke, ticketDir, options.repoRoot);
     const conv = { systemPrompt, turns: [{ role: "user", text: firstUserText }] };
     let toolCallCount = 0;
     let cumulativeUsage = { inputTokens: 0, outputTokens: 0, totalTokens: 0, available: true };

package/dist/ticket-store.js

@@ -3,12 +3,14 @@ import fs from "node:fs";
 import path from "node:path";
 import { DispatchError } from "./types.js";
 import { m } from "./messages.js";
+import { isReservedTicketName, reservedTicketNames } from "./cli-commands.js";
 import { now } from "./db.js";
 import { parseAgentTicket, parseDispatchTable } from "./ticket.js";
 import { isModelEnabled, loadProviders } from "./providers-store.js";
 import { getCommandName } from "./pkg-info.js";
 import { formatModelPricing } from "./report.js";
 import { DEFAULT_MAX_TOOL_CALLS, estimateHardCapUsd } from "./cost.js";
+export const TICKET_STATUSES = ["draft", "sealed"];
 function parseDoc(raw, name, lang) {
     try {
         const value = JSON.parse(raw);
@@ -21,19 +23,40 @@ function parseDoc(raw, name, lang) {
     }
 }
 export function getTicketDoc(db, name, lang) {
-    const row = db.prepare("SELECT doc FROM tickets WHERE name = ?").get(name);
-    if (!row?.doc)
+    return getStoredTicket(db, name, lang).doc;
+}
+function isTicketStatus(value) {
+    return typeof value === "string" && TICKET_STATUSES.includes(value);
+}
+export function getStoredTicket(db, name, lang) {
+    const row = db.prepare("SELECT name, doc, status, sealed_at FROM tickets WHERE name = ?").get(name);
+    if (!row?.doc || !row.name)
         throw new DispatchError(m(lang, "ticketNotFound", name), 2);
-    return parseDoc(row.doc, name, lang);
+    if (!isTicketStatus(row.status))
+        throw new DispatchError(m(lang, "ticketStatusInvalid", name), 2);
+    return {
+        name: row.name,
+        doc: parseDoc(row.doc, name, lang),
+        status: row.status,
+        sealedAt: typeof row.sealed_at === "string" ? row.sealed_at : null,
+    };
 }
-function put(db, name, doc) {
+function assertDraft(ticket, lang) {
+    if (ticket.status !== "draft")
+        throw new DispatchError(m(lang, "ticketSealedWriteRejected", ticket.name), 2);
+}
+function put(db, name, doc, lang) {
+    assertDraft(getStoredTicket(db, name, lang), lang);
     db.prepare("UPDATE tickets SET doc = ? WHERE name = ?").run(JSON.stringify(doc), name);
 }
 export function createTicket(db, name, shared, lang) {
     if (!name || name.includes(path.sep) || name === "." || name === "..")
         throw new DispatchError(m(lang, "ticketNameInvalid", name), 2);
+    if (isReservedTicketName(name))
+        throw new DispatchError(m(lang, "ticketNameReserved", name, reservedTicketNames().join(", ")), 2);
     try {
-        db.prepare("INSERT INTO tickets (name, doc, created_at) VALUES (?, ?, ?)").run(name, JSON.stringify({ shared, spokes: [] }), now());
+        db.prepare("INSERT INTO tickets (name, doc, status, sealed_at, created_at) VALUES (?, ?, ?, ?, ?)")
+            .run(name, JSON.stringify({ shared, spokes: [] }), "draft", null, now());
     }
     catch {
         throw new DispatchError(m(lang, "ticketAlreadyExists", name), 2);
@@ -57,7 +80,7 @@ export function addSpoke(db, name, spoke, lang) {
     if (!isModelEnabled(db, spoke.provider, spoke.model))
         throw new DispatchError(m(lang, "modelDisabled", spoke.model, getCommandName()), 6);
     doc.spokes.push({ ...spoke, allow: [] });
-    put(db, name, doc);
+    put(db, name, doc, lang);
 }
 function isUnderDocs(repoRoot, target) {
     const docs = path.resolve(repoRoot, "_docs");
@@ -83,7 +106,47 @@ export async function addAllow(db, name, agent, rel, repoRoot, lang) {
         spoke.allow[i] = { path: rel, content };
     else
         spoke.allow.push({ path: rel, content });
-    put(db, name, doc);
+    put(db, name, doc, lang);
+}
+export async function sealTicket(db, name, repoRoot, lang) {
+    const ticket = getStoredTicket(db, name, lang);
+    assertDraft(ticket, lang);
+    if (ticket.doc.spokes.length === 0)
+        throw new DispatchError(m(lang, "ticketSealNeedsSpoke", name), 2);
+    const resolvedRepoRoot = path.resolve(repoRoot);
+    const agentContent = {};
+    // Read every file before writing anything. A missing lens must leave both the status
+    // and JSON document untouched.
+    for (const spoke of ticket.doc.spokes) {
+        const agentPath = path.join(resolvedRepoRoot, ".claude", "agents", `${spoke.agent}.md`);
+        try {
+            agentContent[spoke.agent] = await readFile(agentPath, "utf8");
+        }
+        catch {
+            throw new DispatchError(m(lang, "agentDefNotFound", agentPath, spoke.agent), 2);
+        }
+    }
+    const sealedAt = now();
+    const sealedDoc = { ...ticket.doc, agentContent, sealedRepoRoot: resolvedRepoRoot };
+    db.exec("BEGIN");
+    try {
+        db.prepare("UPDATE tickets SET doc = ?, status = ?, sealed_at = ? WHERE name = ?")
+            .run(JSON.stringify(sealedDoc), "sealed", sealedAt, name);
+        db.exec("COMMIT");
+    }
+    catch (err) {
+        db.exec("ROLLBACK");
+        throw err;
+    }
+}
+export function copyTicket(db, sourceName, newName, lang) {
+    const source = getStoredTicket(db, sourceName, lang);
+    if (source.status !== "sealed")
+        throw new DispatchError(m(lang, "ticketCopyNeedsSealed", sourceName), 2);
+    createTicket(db, newName, source.doc.shared, lang);
+    // A new draft deliberately retains shared/spokes/allowlist snapshots but never lens
+    // snapshots or the old sealing root; it has to seal against its chosen repo again.
+    put(db, newName, { shared: source.doc.shared, spokes: source.doc.spokes }, lang);
 }
 export async function importTicketDirectory(db, dir, name, repoRoot, lang) {
     const dispatch = await readFile(path.join(dir, "_dispatch.md"), "utf8");
@@ -154,8 +217,14 @@ export function getTicketHardCapUsd(db, name, lang, maxToolCalls = DEFAULT_MAX_T
     return parts.some((p) => p === null) ? null : parts.reduce((sum, p) => sum + p, 0);
 }
 export function formatTicket(db, name, lang, maxToolCalls = DEFAULT_MAX_TOOL_CALLS) {
-    const doc = getTicketDoc(db, name, lang);
-    const lines = [m(lang, "ticketShowHeader", name)];
+    const ticket = getStoredTicket(db, name, lang);
+    const doc = ticket.doc;
+    const statusLine = ticket.status === "sealed"
+        ? m(lang, "ticketStatusSealed", ticket.sealedAt ?? "—", doc.sealedRepoRoot ?? "—")
+        : m(lang, "ticketStatusDraft");
+    // Status is deliberately first: this is the human's decision point before any cost
+    // estimate or content detail.
+    const lines = [`${m(lang, "ticketShowHeader", name)} ${statusLine}`];
     for (const spoke of doc.spokes) {
         const chars = spoke.allow.reduce((sum, item) => sum + item.content.length, 0);
         const details = getTicketPricing(db, spoke.provider, spoke.model);

package/dist/ticket.js

@@ -4,7 +4,7 @@ import { readFile } from "node:fs/promises";
 import path from "node:path";
 import { DispatchError } from "./types.js";
 import { m } from "./messages.js";
-import { getTicketDoc } from "./ticket-store.js";
+import { getStoredTicket } from "./ticket-store.js";
 const FORMAT_MARKER = "<!-- format: v1 -->";
 function splitTableRow(line) {
     const trimmed = line.trim().replace(/^\|/, "").replace(/\|$/, "");
@@ -206,11 +206,13 @@ export async function loadTicket(source, nameOrLang, maybeLang) {
         return loadTicketDirectory(source, nameOrLang);
     const name = nameOrLang;
     const lang = maybeLang;
-    const doc = getTicketDoc(source, name, lang);
+    const stored = getStoredTicket(source, name, lang);
+    const doc = stored.doc;
     const shared = parseSharedDoc(doc.shared, lang);
     const rows = doc.spokes.map(({ agent, provider, model, effort }) => ({ agent, provider, model, effort }));
     const perAgent = new Map();
     const allowedContent = new Map();
+    const agentContent = doc.agentContent ? new Map(Object.entries(doc.agentContent)) : undefined;
     const ticketDir = `ticket/${name}`;
     allowedContent.set(`${ticketDir}/_shared.md`, doc.shared);
     for (const spoke of doc.spokes) {
@@ -219,5 +221,16 @@ export async function loadTicket(source, nameOrLang, maybeLang) {
         for (const allowed of spoke.allow)
             allowedContent.set(allowed.path, allowed.content);
     }
-    return { ticketDir, ticketName: name, rows, shared, perAgent, allowedContent };
+    return {
+        ticketDir,
+        ticketName: name,
+        rows,
+        shared,
+        perAgent,
+        allowedContent,
+        agentContent,
+        status: stored.status,
+        sealedAt: stored.sealedAt,
+        sealedRepoRoot: doc.sealedRepoRoot,
+    };
 }

package/dist/validate.js

@@ -36,7 +36,10 @@ isModelEnabled,
 // 而本模組不持有 db handle——比照 isModelEnabled 收一個回呼，由 cli.ts 接上。
 // 原本這裡直接讀 `process.env[`${PROVIDER}_API_KEY`]`，key 搬進 DB 之後那段就成了
 // 一道「更早的、只認環境變數」的閘門，會在 createAdapterFor 之前先攔下所有派工。
-hasApiKey, agentsDir = path.join(repoRoot, ".claude", "agents")) {
+hasApiKey, 
+// Required on purpose: a caller that forgets to forward sealed lens snapshots must
+// fail typechecking, never silently default to disk.
+agentContent, agentsDir = path.join(repoRoot, ".claude", "agents")) {
     const resolved = [];
     // 熱修補（缺口三）：同 ticket-store——空表要講「去匯入」，
     // 不要讓 providerUndefinedInRow 把人帶去查工單裡的 provider 名稱。
@@ -112,7 +115,13 @@ hasApiKey, agentsDir = path.join(repoRoot, ".claude", "agents")) {
                 allowedReadsResolved.push(real);
             }
         }
-        const agentBody = await readAgentBody(agentsDir, row.agent, lang);
+        const sealedAgent = agentContent?.get(row.agent);
+        if (ticket.status === "sealed" && sealedAgent === undefined) {
+            throw new DispatchError(m(lang, "ticketSealedLensMissing", ticket.ticketName ?? ticket.ticketDir, row.agent), 2);
+        }
+        const agentBody = sealedAgent === undefined
+            ? await readAgentBody(agentsDir, row.agent, lang)
+            : stripFrontmatter(sealedAgent);
         const sharedPath = path.join(ticket.ticketDir, "_shared.md");
         const ownAgentPath = path.join(ticket.ticketDir, `${row.agent}.md`);
         const allowSet = ticket.allowedContent

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dowafu",
-  "version": "0.6.0",
+  "version": "0.8.0",
   "description": "Send a section of your design doc to external LLMs for review. They read only the files you whitelist, and nothing is billed until you confirm.",
   "keywords": [
     "llm",
@@ -33,7 +33,8 @@
   "files": [
     "dist",
     "providers.json",
-    "README_zh-tw.md"
+    "README_zh-tw.md",
+    "CHANGELOG.md"
   ],
   "scripts": {
     "verify:providers": "tsx scripts/verify-providers.ts",

package/providers.json

@@ -10,15 +10,16 @@
       "allowed": ["none", "minimal", "low", "medium", "high", "xhigh", "max"],
       "default": "high"
     },
-    "models": ["gpt-5.6-luna", "gpt-5.6-terra", "gpt-5.6-sol"],
+    "models": ["gpt-5.6-luna", "gpt-5.6-terra", "gpt-5.6-sol", "gpt-6-astra"],
     "charsPerToken": 1.0,
     "tpmLimit": 200000,
     "maxSpokeTokens": null,
-    "pricingSource": { "url": "https://developers.openai.com/api/docs/pricing", "asOf": "2026-09-02", "note": "gpt-5.6-sol 為優惠價，官方頁載明至 2026-11-21" },
+    "pricingSource": { "url": "https://developers.openai.com/api/docs/pricing", "asOf": "2026-09-12", "note": "gpt-5.6-sol 為優惠價，官方頁措辭為「at least through 2026-11-21」，到期日可能再延。" },
     "pricing": {
       "gpt-5.6-luna": { "inputPerM": 0.20, "cachedInputPerM": 0.02, "outputPerM": 1.20 },
       "gpt-5.6-terra": { "inputPerM": 2.00, "cachedInputPerM": 0.20, "outputPerM": 12.00 },
-      "gpt-5.6-sol": { "inputPerM": 4.00, "cachedInputPerM": 0.40, "outputPerM": 20.00 }
+      "gpt-5.6-sol": { "inputPerM": 4.00, "cachedInputPerM": 0.40, "outputPerM": 20.00 },
+      "gpt-6-astra": { "inputPerM": 10.00, "cachedInputPerM": 1.00, "outputPerM": 50.00 }
     }
   },
   "deepseek": {
@@ -31,17 +32,18 @@
       "allowed": ["low", "high", "max"],
       "default": "high"
     },
-    "models": ["deepseek-v4-flash", "deepseek-v4-pro"],
+    "models": ["deepseek-v4-flash", "deepseek-flash", "deepseek-v4-pro"],
     "charsPerToken": 1.0,
     "tpmLimit": null,
     "maxSpokeTokens": null,
     "pricingSource": {
       "url": "https://api-docs.deepseek.com/quick_start/pricing/",
-      "asOf": "2026-09-02",
-      "note": "離峰（尖峰時段 01:00-04:00 與 06:00-10:00 UTC 以外）為尖峰的一半；本檔一個型號只放得下一組價，取尖峰＝取上限。"
+      "asOf": "2026-09-12",
+      "note": "離峰（尖峰時段為週一至週五 01:00-04:00 與 06:00-10:00 UTC，其餘時段皆為離峰）為尖峰的一半；本檔一個型號只放得下一組價，取尖峰＝取上限。deepseek-v4-flash 已於 2026-09-10 退役、目前暫時轉址到 V4.1 Flash（deepseek-flash），官方未給截止日；其價格仍為退役前的舊值，故估算偏高。"
     },
     "pricing": {
       "deepseek-v4-flash": { "inputPerM": 0.44, "cachedInputPerM": 0.014, "outputPerM": 1.32 },
+      "deepseek-flash": { "inputPerM": 0.30, "cachedInputPerM": 0.006, "outputPerM": 1.20 },
       "deepseek-v4-pro": { "inputPerM": 1.32, "cachedInputPerM": 0.044, "outputPerM": 3.96 }
     }
   },
@@ -55,16 +57,17 @@
       "allowed": ["minimal", "low", "medium", "high"],
       "default": "high"
     },
-    "models": ["gemini-3.1-flash-lite", "gemini-3.5-flash-lite", "gemini-3.6-flash", "gemini-3.7-flash"],
+    "models": ["gemini-3.1-flash-lite", "gemini-3.5-flash-lite", "gemini-3.6-flash", "gemini-3.7-flash", "gemini-3.8-flash"],
     "charsPerToken": 1.0,
     "tpmLimit": null,
     "maxSpokeTokens": null,
-    "pricingSource": { "url": "https://ai.google.dev/gemini-api/docs/pricing", "asOf": "2026-09-02", "note": "文字／圖片／影片價；音訊另計。output 價含 thinking tokens。gemini-3.6-flash／gemini-3.7-flash 為優惠價，官方頁載明至 2026-12-31；2027-01-01 起漲為 $1.50 in／$7.50 out（兩者皆是）" },
+    "pricingSource": { "url": "https://ai.google.dev/gemini-api/docs/pricing", "asOf": "2026-09-12", "note": "文字／圖片／影片價；音訊另計。output 價含 thinking tokens。gemini-3.6-flash／gemini-3.7-flash／gemini-3.8-flash 為優惠價，官方頁載明至 2026-12-31；2027-01-01 起漲為 $1.50 in／$7.50 out（三者皆是）" },
     "pricing": {
       "gemini-3.1-flash-lite": { "inputPerM": 0.25, "cachedInputPerM": 0.025, "outputPerM": 1.50 },
       "gemini-3.5-flash-lite": { "inputPerM": 0.30, "cachedInputPerM": 0.03, "outputPerM": 2.50 },
       "gemini-3.6-flash": { "inputPerM": 0.75, "cachedInputPerM": 0.075, "outputPerM": 3.75 },
-      "gemini-3.7-flash": { "inputPerM": 0.75, "cachedInputPerM": 0.075, "outputPerM": 3.75 }
+      "gemini-3.7-flash": { "inputPerM": 0.75, "cachedInputPerM": 0.075, "outputPerM": 3.75 },
+      "gemini-3.8-flash": { "inputPerM": 0.75, "cachedInputPerM": 0.075, "outputPerM": 3.75 }
     }
   },
   "anthropic": {