dowafu 0.7.0 → 0.8.0

package/CHANGELOG.md

@@ -5,6 +5,47 @@ release commits and internal records after the fact; from 0.7.0 on they are writ
 release time. Versions before 0.5.0 are not covered here — see the git tags (`v0.3.0`
 onwards).
 
+## 0.8.0 — 2026-09-13
+
+### Added
+
+- **Tickets now have two states: draft and sealed.** `dowafu ticket seal <ticket-id>
+  --repo-root <dir>` freezes a ticket, including each reviewer's lens definition as it stands
+  at that moment. Sealing needs at least one spoke and every lens file to exist; if anything
+  is missing, nothing is sealed. A sealed ticket cannot be edited and cannot be unsealed —
+  `dowafu ticket copy <sealed-ticket> <new-id>` gives you a new draft instead.
+- **`dowafu providers import --bundled`** imports the model list shipped with the package
+  without needing its path, and always applies the shipped defaults to models you don't have
+  yet.
+- `--doctor` prints where the shipped `providers.json` is; `--doctor --json` gains a
+  `bundledProvidersPath` field. No existing field changed.
+
+### Changed
+
+- **A draft cannot be run or queued.** Running one exits with code 5 before any spend;
+  `dispatch_submit` refuses it without creating a job; `dispatch_approve` and
+  `dowafu approve` refuse a job whose ticket is a draft. Dry runs work in both states.
+- `dispatch_tickets` shows each ticket's state as a fixed English `[draft]` or `[sealed]`,
+  and a draft's line carries the exact command to seal it.
+- `ticket show` prints the state on its first line; `--json` output gains `ticketStatus`.
+
+### Fixed
+
+- **A queued job used the lens definitions of whatever directory the daemon was started
+  from.** The worker never received a repository root, so a daemon started in one project
+  silently ran another project's ticket with its own same-named lenses. A sealed ticket now
+  carries its lenses and never reads `.claude/agents/` at run time.
+- **A ticket could still be changed after its job was approved**, so the worker could run
+  content — and a cost — that nobody had approved. Sealed content is frozen.
+
+### Upgrading
+
+- 🔴 **Every existing ticket becomes a draft.** The database is migrated on first use (schema
+  version 5 → 6). Seal a ticket again before dispatching it. A job already in the queue cannot
+  be approved while its ticket is a draft.
+- To pick up the model list shipped with a release, run `dowafu providers import --bundled`.
+  Upgrading still never rewrites your prices or enabled flags on its own.
+
 ## 0.7.0 — 2026-09-12
 
 ### Added

package/README.md

@@ -103,6 +103,7 @@ A ticket lives in the database, not on disk. Build one with the CLI:
 dowafu ticket create <ticket-id> <shared-file>
 dowafu ticket add-spoke <ticket-id> <agent> <provider> <model> <body-file> [effort]
 dowafu ticket add-allow <ticket-id> <agent> <repo-relative-path> --repo-root .
+dowafu ticket seal <ticket-id> --repo-root .
 ```
 
 The body argument of `create` and `add-spoke` takes a path — or `-`, which reads it from
@@ -132,6 +133,15 @@ content as it stands at that moment — dispatch never re-reads it, so what a re
 is that snapshot. `dowafu ticket show <ticket-id>` prints the models, the allowlists and
 the estimates.
 
+**A ticket must be sealed before it can run.** What you build above is a **draft**: you can
+keep editing it and dry-run it, but `--yes` and `dispatch_submit` both refuse it.
+`dowafu ticket seal <ticket-id> --repo-root .` freezes it — including each reviewer's lens
+definition, read from `.claude/agents/` at that moment — so a sealed ticket runs the same way
+no matter which directory the command or the daemon was started from. A sealed ticket cannot be
+edited; `dowafu ticket copy <ticket-id> <new-id>` gives you a new draft to change, and the
+original keeps matching the results it produced. `ticket show` prints `[draft]` or `[sealed]`
+on its first line.
+
 ### Section headings
 
 The headings inside the bodies above are **literal markers the parser matches** — use one
@@ -211,7 +221,7 @@ you already have. To pick up models added in a later release, import the shipped
 yourself:
 
 ```bash
-dowafu providers import "$(npm root -g)/dowafu/providers.json"
+dowafu providers import --bundled
 dowafu providers list                      # confirm the new models are there
 ```
 
@@ -230,7 +240,7 @@ not work: a reviewer's fixed closing line has to match the template the audit ch
 against.
 
 ```bash
-npx degit eyesofkids/dowafu/publish/en#v0.7.0 .claude-pack   # or publish/zh-tw
+npx degit eyesofkids/dowafu/publish/en#v0.8.0 .claude-pack   # or publish/zh-tw
 
 cd .claude-pack
 TARGET=<your project>
@@ -252,7 +262,8 @@ in its own language.
 
 An agent can drive `dowafu` over MCP instead of through the shell. Five tools are
 exposed: `dispatch_tickets`, `dispatch_submit`, `dispatch_status`, `dispatch_result`
-and `dispatch_approve`.
+and `dispatch_approve`. `dispatch_submit` accepts sealed tickets only, and sealing is done
+from the CLI — there is no MCP tool for it.
 
 There are two transports, and the difference that matters is who starts what.
 

package/README_zh-tw.md

@@ -84,6 +84,7 @@ dowafu --help                  # 查看所有旗標
 dowafu ticket create <ticket-id> <shared-file>
 dowafu ticket add-spoke <ticket-id> <agent> <provider> <model> <body-file> [effort]
 dowafu ticket add-allow <ticket-id> <agent> <repo-relative-path> --repo-root .
+dowafu ticket seal <ticket-id> --repo-root .
 ```
 
 `create` 與 `add-spoke` 的本文參數可以是路徑，也可以是 `-`（從 stdin 讀）——所以用 heredoc
@@ -111,6 +112,13 @@ EOF
 `add-allow` 會立刻驗證路徑、拒絕 `_docs/`，並把該檔案**當下的內容**存起來——派工時不會再讀一次，
 所以審查者看到的是那一刻的快照。用 `dowafu ticket show <ticket-id>` 檢視 Model、允許清單與估算。
 
+**工單要先定稿才能執行。** 上面建出來的是**草稿**：可以繼續修改、可以乾跑，但 `--yes` 與
+`dispatch_submit` 都會拒絕它。`dowafu ticket seal <ticket-id> --repo-root .` 把它凍結——
+連同每位審查者的 lens 定義（在那一刻從 `.claude/agents/` 讀進來）——所以定稿之後，不論指令或
+daemon 從哪個目錄啟動，執行結果都一樣。定稿的工單不能再改；要改就用
+`dowafu ticket copy <ticket-id> <new-id>` 複製出一張新草稿，原本那張與它產出的結果維持對應。
+`ticket show` 的第一行會印出 `[draft]` 或 `[sealed]`。
+
 ### 段落標題
 
 上面本文裡的標題是**字面標記（literal markers）**，Parser 會直接比對——必須完全使用以下兩組
@@ -196,7 +204,7 @@ dowafu providers import <path>             # 匯入自己的設定檔
 你既有的價格或啟用狀態。要取得後續版本新增的 Model，請自己匯入隨套件出貨的那一份：
 
 ```bash
-dowafu providers import "$(npm root -g)/dowafu/providers.json"
+dowafu providers import --bundled
 dowafu providers list                      # 確認新的 Model 已經進來
 ```
 
@@ -217,7 +225,7 @@ dowafu providers list                      # 確認新的 Model 已經進來
 `publish/` 提供兩種語言：`publish/en/` 與 `publish/zh-tw/`。**擇一複製，不可混裝**——審查者的固定收尾句必須與稽核檢查用的範本是同一種語言。
 
 ```bash
-npx degit eyesofkids/dowafu/publish/zh-tw#v0.7.0 .claude-pack   # 或 publish/en
+npx degit eyesofkids/dowafu/publish/zh-tw#v0.8.0 .claude-pack   # 或 publish/en
 
 cd .claude-pack
 TARGET=<your project>
@@ -242,7 +250,7 @@ publish/zh-tw/README.md   （或 publish/en/README.md）
 ## 接成 MCP server
 
 Agent 可以不走 shell，改用 MCP 驅動 `dowafu`。露出五個 tool：`dispatch_tickets`、
-`dispatch_submit`、`dispatch_status`、`dispatch_result`、`dispatch_approve`。
+`dispatch_submit`、`dispatch_status`、`dispatch_result`、`dispatch_approve`。`dispatch_submit` 只接受已定稿的工單；定稿只能從 CLI 做，沒有對應的 MCP tool。
 
 有兩條路，差別在**誰啟動誰**。
 

package/dist/cli.js

@@ -34,7 +34,7 @@ import { parseArgs, formatEvent, resolveLang, resolveFallbackLang, buildStdoutSu
 import { m } from "./messages.js";
 import { defaultDbPath, openDb } from "./db.js";
 import { issueToken, listTokens, revokeToken } from "./api-token.js";
-import { addAllow, addSpoke, createTicket, formatTicket, hasResults, importTicketDirectory } from "./ticket-store.js";
+import { addAllow, addSpoke, copyTicket, createTicket, formatTicket, getStoredTicket, hasResults, importTicketDirectory, sealTicket } from "./ticket-store.js";
 import { approveJob, countQueueJobs, findJobsByIdPrefix, getJob, listPendingApprovalJobs } from "./job.js";
 import { serve, stopDaemon } from "./daemon.js";
 import { daemonAlive, daemonStatePath } from "./liveness.js";
@@ -179,6 +179,20 @@ async function ticketCommand(argv, lang) {
             await importTicketDirectory(db, dir, suppliedName ?? path.basename(path.resolve(dir)), repoRoot, lang);
             return;
         }
+        case "seal": {
+            const [name] = rest;
+            if (!name)
+                throw new DispatchError(m(lang, "ticketHelp", command), 2);
+            await sealTicket(db, name, repoRoot, lang);
+            return;
+        }
+        case "copy": {
+            const [sourceName, newName] = rest;
+            if (!sourceName || !newName)
+                throw new DispatchError(m(lang, "ticketHelp", command), 2);
+            copyTicket(db, sourceName, newName, lang);
+            return;
+        }
         case "show": {
             const [name] = rest;
             if (!name)
@@ -216,10 +230,25 @@ async function providersCommand(argv, lang) {
         return;
     }
     if (action === "import") {
+        const bundled = rest.includes("--bundled");
+        if (bundled) {
+            // `--bundled` is an explicit source choice, not a spelling of the path.
+            // In particular, do not infer this from a path comparison: callers who ask
+            // for the shipped file must get the bundled DEFAULT_ENABLED policy.
+            if (rest.length !== 1)
+                throw new DispatchError(m(lang, "providersHelp", command), 2);
+            const filePath = bundledProvidersPath();
+            mergeProviders(db, await readProvidersFile(filePath, lang), true);
+            console.log(m(lang, "providersImported", filePath));
+            return;
+        }
         const [filePath] = rest;
         if (!filePath)
             throw new DispatchError(m(lang, "providersHelp", command), 2);
-        mergeProviders(db, await readProvidersFile(path.resolve(filePath), lang), path.resolve(filePath) === bundledProvidersPath());
+        const resolvedPath = path.resolve(filePath);
+        // Keep the legacy path form's bundled recognition intact for callers that
+        // already pass the exact installed providers.json path.
+        mergeProviders(db, await readProvidersFile(resolvedPath, lang), resolvedPath === bundledProvidersPath());
         console.log(m(lang, "providersImported", filePath));
         return;
     }
@@ -591,6 +620,9 @@ async function main() {
         const before = pending[0];
         if (!before)
             throw new DispatchError(m(messageLang, "jobNotFound", prefix ?? ""), 2);
+        const ticket = getStoredTicket(db, before.ticket, messageLang);
+        if (ticket.status !== "sealed")
+            throw new DispatchError(m(messageLang, "ticketDraftRunBlocked", ticket.name, getCommandName()), 5);
         // Render the complete paid-work summary before changing the gate state.
         // A corrupted job therefore stays pending instead of becoming approved with
         // no information shown to the human operator.
@@ -638,7 +670,7 @@ async function main() {
             const reason = err instanceof DispatchError ? err.message : maskString(String(err));
             providersResult = { ok: false, reason };
         }
-        const doctorData = buildDoctorReportData(getCommandName(), providersResult, process.env, undefined, undefined, undefined, daemonAlive(daemonStatePath(doctorDbPath)), keyStatusRows, doctorDbPath, queue);
+        const doctorData = buildDoctorReportData(getCommandName(), providersResult, process.env, undefined, undefined, undefined, daemonAlive(daemonStatePath(doctorDbPath)), keyStatusRows, doctorDbPath, queue, bundledProvidersPath());
         console.log(parsed.options.json ? JSON.stringify(doctorData) : renderDoctorReport(messageLang, getCommandName(), doctorData));
         return;
     }
@@ -724,7 +756,7 @@ async function main() {
     // §10 步驟 4–5：effort 值域、API key 齊備、models 白名單（resolveSpokes 內部）。
     // 兩個回呼都是必填：validate.ts 不持有 db handle，「這個型號開著嗎」與「這個 provider
     // 有沒有 key」都由這裡接上——漏傳編不過（typecheck 涵蓋測試檔）。
-    const spokes = await resolveSpokes(ticket, providers, repoRoot, lang, (provider, model) => isModelEnabled(db, provider, model), (provider) => getProviderKey(db, provider) !== undefined);
+    const spokes = await resolveSpokes(ticket, providers, repoRoot, lang, (provider, model) => isModelEnabled(db, provider, model), (provider) => getProviderKey(db, provider) !== undefined, ticket.agentContent);
     // §10 步驟 6／§14 閘門一：呼叫前估算
     const estimates = spokes.map((spoke) => {
         const systemPrompt = buildSystemPrompt(spoke.agentBody, spoke.lang);
@@ -759,6 +791,7 @@ async function main() {
     const plan = buildJsonPlan(spokes, estimates, allowlistEstimates, options);
     const buildPayload = (mode, results, audits, toolCallAudits, exitCode) => buildJsonPayload({
         ticketId,
+        ticketStatus: ticket.status,
         repoRoot,
         outDir,
         providersSource,
@@ -791,6 +824,9 @@ async function main() {
         }
         return;
     }
+    if (ticket.status !== "sealed") {
+        throw new DispatchError(m(lang, "ticketDraftRunBlocked", ticketName, getCommandName()), 5);
+    }
     // 擋在 confirm 之前：不要先問「要不要花錢」再中止。exitCode 5 是「派工前被守則擋下、
     // 未花任何錢」，與 3（成本閘門超限）分開，才分得出是哪一種擋。
     // **刻意不提供 --overwrite 之類的旗標**：有旗標，「加上去」就會變成最便宜的滿足方式，

package/dist/db.js

@@ -191,6 +191,24 @@ const MIGRATIONS = [
                 db.exec("ALTER TABLE jobs ADD COLUMN lang TEXT");
         },
     },
+    // ticket-states-T1: old tickets were created before content had a freeze point.
+    // A v5 database therefore has no sealed content, so every existing ticket starts as
+    // draft and must be sealed explicitly before it can be dispatched.
+    {
+        version: 6,
+        up: (db) => {
+            const columns = new Set(db.prepare("PRAGMA table_info(tickets)").all().map((column) => column.name));
+            if (!columns.has("status"))
+                db.exec("ALTER TABLE tickets ADD COLUMN status TEXT");
+            if (!columns.has("sealed_at"))
+                db.exec("ALTER TABLE tickets ADD COLUMN sealed_at TEXT");
+            // 驗收熱修補：本行原本無條件覆寫，於是對「user_version 被退回 5、但資料已有定稿工單」
+            // 的降版 fixture 重跑時，會把 sealed 洗成 draft、sealed_at 洗成 NULL（實測確認）。
+            // 真實升級路徑上兩者等價——欄位是這一步才加的，全部是 NULL；加了條件之後重跑是 no-op。
+            // v5 的形狀本來就是「加欄位、資料不動」，這裡只是補回同一個紀律。
+            db.exec("UPDATE tickets SET status = 'draft', sealed_at = NULL WHERE status IS NULL");
+        },
+    },
 ];
 const LATEST_SCHEMA_VERSION = MIGRATIONS[MIGRATIONS.length - 1].version;
 function migrate(db, lang) {

package/dist/doctor.js

@@ -120,7 +120,7 @@ function buildLensValue(lang, lenses) {
     const closingNames = lenses.withClosing.length > 0 ? lenses.withClosing.join(joiner) : m(lang, "noneLabel");
     return m(lang, "doctorLensFoundValue", lenses.dirPath, lenses.withClosing.length + lenses.withoutClosing.length, lenses.withClosing.length, closingNames, noClosingSuffix);
 }
-export function buildDoctorReportData(cmd, providers, env = process.env, homedir = os.homedir, probe = DEFAULT_PROBE, cwd = process.cwd(), daemon, keyStatusRows = [], dbPath, queue = { pendingApproval: 0, approved: 0, running: 0 }) {
+export function buildDoctorReportData(cmd, providers, env = process.env, homedir = os.homedir, probe = DEFAULT_PROBE, cwd = process.cwd(), daemon, keyStatusRows = [], dbPath, queue = { pendingApproval: 0, approved: 0, running: 0 }, bundledProvidersPath) {
     const dispatchHome = resolveDispatchHome(env, homedir);
     const configDir = dispatchHome === null
         ? { source: "unresolved" }
@@ -153,6 +153,7 @@ export function buildDoctorReportData(cmd, providers, env = process.env, homedir
         models,
         daemon: daemon ?? { alive: false, reason: "heartbeat_missing" },
         queue: { ...queue },
+        ...(bundledProvidersPath ? { bundledProvidersPath } : {}),
         lenses: buildLensData(probe, cwd),
     };
 }
@@ -164,6 +165,7 @@ export function renderDoctorReport(lang, cmd, data) {
         // 先前 doctor 寫死走預設 DB，於是 `--doctor --db <別的>` 會對著另一個資料庫回答你。
         ...(data.dbPath ? [m(lang, "doctorDbLine", data.dbPath)] : []),
         ...(data.envFilePresent ? [m(lang, "doctorEnvLine", m(lang, "doctorEnvPresentValue"))] : []),
+        ...(data.bundledProvidersPath ? [m(lang, "doctorBundledProvidersLine", data.bundledProvidersPath)] : []),
         m(lang, "doctorApiKeyLine", buildApiKeyValue(lang, data.apiKeys)),
         m(lang, "doctorModelListLine", buildModelListValue(lang, data.models)),
         m(lang, "doctorDaemonLine", buildDaemonValue(lang, data.daemon)),
@@ -174,6 +176,6 @@ export function renderDoctorReport(lang, cmd, data) {
     ];
     return lines.join("\n");
 }
-export function buildDoctorReport(lang, cmd, providers, env = process.env, homedir = os.homedir, probe = DEFAULT_PROBE, cwd = process.cwd(), daemon, keyStatusRows = [], dbPath, queue = { pendingApproval: 0, approved: 0, running: 0 }) {
-    return renderDoctorReport(lang, cmd, buildDoctorReportData(cmd, providers, env, homedir, probe, cwd, daemon, keyStatusRows, dbPath, queue));
+export function buildDoctorReport(lang, cmd, providers, env = process.env, homedir = os.homedir, probe = DEFAULT_PROBE, cwd = process.cwd(), daemon, keyStatusRows = [], dbPath, queue = { pendingApproval: 0, approved: 0, running: 0 }, bundledProvidersPath) {
+    return renderDoctorReport(lang, cmd, buildDoctorReportData(cmd, providers, env, homedir, probe, cwd, daemon, keyStatusRows, dbPath, queue, bundledProvidersPath));
 }

package/dist/job.js

@@ -1,5 +1,9 @@
 import { randomUUID } from "node:crypto";
 import { now } from "./db.js";
+import { m } from "./messages.js";
+import { getCommandName } from "./pkg-info.js";
+import { getStoredTicket } from "./ticket-store.js";
+import { DispatchError } from "./types.js";
 export const JOB_STATUSES = [
     "pending_approval",
     "approved",
@@ -42,8 +46,10 @@ export function countQueueJobs(db) {
     return counts;
 }
 export function submitJob(db, ticket, id = randomUUID(), lang = null) {
-    if (!db.prepare("SELECT 1 FROM tickets WHERE name = ?").get(ticket))
-        throw new Error(`ticket does not exist: ${ticket}`);
+    const messageLang = lang ?? "en";
+    const stored = getStoredTicket(db, ticket, messageLang);
+    if (stored.status !== "sealed")
+        throw new DispatchError(m(messageLang, "ticketDraftRunBlocked", ticket, getCommandName()), 5);
     const createdAt = now();
     db.prepare("INSERT INTO jobs (id, ticket, lang, status, created_at) VALUES (?, ?, ?, 'pending_approval', ?)").run(id, ticket, lang, createdAt);
     return getJob(db, id);

package/dist/json-output.js

@@ -66,6 +66,7 @@ export function buildJsonSpoke(result, audit, toolCallAudit) {
 export function buildJsonPayload(args) {
     return {
         ticketId: args.ticketId,
+        ticketStatus: args.ticketStatus,
         repoRoot: args.repoRoot,
         outDir: args.outDir,
         providersSource: args.providersSource,

package/dist/mcp/protocol.js

@@ -7,17 +7,17 @@ import { m } from "../messages.js";
 import { readResultOutcomes, readResults } from "../output.js";
 import { listModels } from "../providers-store.js";
 import { buildKeyStatusRows } from "../provider-key.js";
-import { getPackageVersion } from "../pkg-info.js";
-import { formatTicket, getTicketDoc, getTicketHardCapUsd } from "../ticket-store.js";
+import { getCommandName, getPackageVersion } from "../pkg-info.js";
+import { formatTicket, getStoredTicket, getTicketHardCapUsd } from "../ticket-store.js";
 export const TOOLS = [
     {
         name: "dispatch_tickets",
-        description: "List DB tickets that can be submitted, including their spokes and allowlist file counts.",
+        description: "List DB tickets and their status: draft tickets are editable but cannot be submitted; sealed tickets have frozen content and lenses, can be submitted repeatedly, and can only be sealed from the CLI.",
         inputSchema: { type: "object", properties: {} },
     },
     {
         name: "dispatch_submit",
-        description: "Queue a DB ticket by name. It remains pending human terminal approval and is not executed by this tool.",
+        description: "Queue a sealed DB ticket by name. Draft tickets are rejected without creating a job; sealing is only available from the CLI. A queued job remains pending human terminal approval and is not executed by this tool.",
         inputSchema: {
             type: "object",
             properties: {
@@ -134,8 +134,12 @@ export function createProtocol(options) {
                 const names = options.db.prepare("SELECT name FROM tickets ORDER BY name").all();
                 const lines = names.length === 0 ? [m(options.lang, "mcpTicketsEmpty")] : [m(options.lang, "mcpTicketsTitle")];
                 for (const { name: ticket } of names) {
-                    const doc = getTicketDoc(options.db, ticket, options.lang);
+                    const stored = getStoredTicket(options.db, ticket, options.lang);
+                    const doc = stored.doc;
                     lines.push(m(options.lang, "mcpTicketsRow", ticket, doc.spokes.length));
+                    lines.push(`  ${stored.status === "sealed"
+                        ? m(options.lang, "mcpTicketStatusSealed", stored.sealedAt ?? "")
+                        : m(options.lang, "mcpTicketStatusDraft", ticket, getCommandName())}`);
                     const priorRuns = countTicketResultRuns(options.db, ticket);
                     if (priorRuns > 0)
                         lines.push(`  ${m(options.lang, "mcpPriorResultsReminder", priorRuns)}`);
@@ -273,6 +277,9 @@ export function createProtocol(options) {
                         ...found.ambiguous.map((candidate) => `  ${candidate.id}  ${candidate.ticket}  ${candidate.status}`)].join("\n"), true);
                 }
                 const job = found.job;
+                const ticket = getStoredTicket(options.db, job.ticket, options.lang);
+                if (ticket.status !== "sealed")
+                    return text(m(options.lang, "ticketDraftRunBlocked", ticket.name, getCommandName()), true);
                 // 工單 §A-1 之二：與 formatTicket 共用同一份算法（getTicketHardCapUsd），不得在這裡
                 // 另算一份——變異 #5 鎖這件事。
                 const expected = getTicketHardCapUsd(options.db, job.ticket, options.lang);

package/dist/messages.js

@@ -138,6 +138,8 @@ const MESSAGES = {
         mcpTicketsEmpty: () => "沒有可派的 DB 工單。",
         mcpTicketsTitle: () => "可派工單：",
         mcpTicketsRow: (ticket, spokeCount) => `- ${ticket}：${spokeCount} 個 spoke`,
+        mcpTicketStatusDraft: (ticket, cmd) => `[draft] 草稿 — 尚不能送出；定稿請在 CLI 執行：${cmd} ticket seal ${ticket} --repo-root <repo 根>`,
+        mcpTicketStatusSealed: (sealedAt) => `[sealed] 定稿 ${sealedAt} — 內容與 lens 已凍結，可送出。`,
         mcpTicketsSpoke: (agent, provider, model, allowCount) => `  ${agent}：${provider}/${model}；允許清單檔 ${allowCount} 個`,
         mcpKeysTitle: () => "API key 狀態：",
         mcpKeysRow: (provider, status) => `  ${provider}：${status}`,
@@ -221,11 +223,19 @@ const MESSAGES = {
         ticketNameInvalid: (name) => `工單名稱無效：${name}`,
         ticketAlreadyExists: (name) => `DB 工單已存在：${name}`,
         ticketSpokeNotFound: (name, agent) => `DB 工單 "${name}" 沒有 agent "${agent}"`,
+        ticketStatusInvalid: (name) => `DB 工單 "${name}" 的狀態無效或損毀。`,
+        ticketSealedWriteRejected: (name) => `DB 工單 "${name}" 已定稿、內容已凍結；要修改請用 dowafu ticket copy ${name} <新名稱>。`,
+        ticketSealNeedsSpoke: (name) => `DB 工單 "${name}" 至少要有一支 spoke 才能定稿。`,
+        ticketCopyNeedsSealed: (name) => `DB 工單 "${name}" 仍是草稿；只有已定稿工單可以複製。`,
+        ticketSealedLensMissing: (name, agent) => `DB 工單 "${name}" 已定稿但缺少 agent "${agent}" 的 lens 快照，已中止，未讀取磁碟 lens。`,
+        ticketDraftRunBlocked: (name, cmd) => `DB 工單 "${name}" 目前是草稿，lens 尚未凍結；未派工、未呼叫 API。請先執行：${cmd} ticket seal ${name} --repo-root .`,
+        ticketStatusDraft: () => `[draft] 草稿 — 可編輯；尚不能送出。`,
+        ticketStatusSealed: (sealedAt, repoRoot) => `[sealed] 定稿 ${sealedAt}（${repoRoot}）— 內容與 lens 已凍結，可送出。`,
         ticketShowHeader: (name) => `DB 工單 ${name}:`,
         ticketEstimateTokens: (tokens) => `估算 ${tokens} tokens`,
         ticketCompletedRuns: (runs, total, last) => `已完成 ${runs} 次；累計 $${total}；最近一次 ${last}`,
         ticketCompletedRunsNoPricing: (runs, last) => `已完成 ${runs} 次；累計無價目資料；最近一次 ${last}`,
-        ticketHelp: (cmd) => `${cmd} ticket create <name> <shared-file>\n${cmd} ticket add-spoke <name> <agent> <provider> <model> <body-file> [effort]\n${cmd} ticket add-allow <name> <agent> <repo-relative-path> [--repo-root <dir>]\n${cmd} ticket import <existing-ticket-dir> [name] [--repo-root <dir>]\n${cmd} ticket show <name>\n  <shared-file>／<body-file> 可用 - 代表從 stdin 讀取本文（stdin 須為管道／重導向，不得是互動式終端機）`,
+        ticketHelp: (cmd) => `${cmd} ticket create <name> <shared-file>\n${cmd} ticket add-spoke <name> <agent> <provider> <model> <body-file> [effort]\n${cmd} ticket add-allow <name> <agent> <repo-relative-path> [--repo-root <dir>]\n${cmd} ticket import <existing-ticket-dir> [name] [--repo-root <dir>]\n${cmd} ticket seal <name> --repo-root <dir>\n${cmd} ticket copy <sealed-ticket> <new-name>\n${cmd} ticket show <name>\n  draft：可編輯、不能送出；sealed：內容（含 lens）已凍結，可送出且可多次執行。\n  <shared-file>／<body-file> 可用 - 代表從 stdin 讀取本文（stdin 須為管道／重導向，不得是互動式終端機）`,
         ticketStdinRequiresPipe: () => `此指令用 - 讀取 stdin 本文，但目前 stdin 是互動式終端機，沒有東西被導進來。` +
             `請改用管道／重導向提供內容（例如 echo "..." | dowafu ticket create <name> -），或改用一般檔案路徑。`,
         agentDefNotFound: (path, agent) => `找不到 agent 定義檔 ${path}（_dispatch.md 列了 "${agent}"）`,
@@ -258,7 +268,7 @@ const MESSAGES = {
         modelDisabled: (model, cmd) => `型號 "${model}" 已停用；請先執行 ${cmd} providers enable ${model}`,
         providerModelNotFound: (model) => `找不到型號：${model}`,
         providerModelAmbiguous: (model, providers) => `型號 "${model}" 同時存在於：${providers}。請用 ${"dowafu"} providers enable <provider> ${model} 指定目標；可先看 providers list。`,
-        providersHelp: (cmd) => `${cmd} providers list [--db <path>]\n${cmd} providers enable <model> [--db <path>]\n${cmd} providers enable <provider> <model> [--db <path>]\n${cmd} providers disable <model> [--db <path>]\n${cmd} providers disable <provider> <model> [--db <path>]\n${cmd} providers import <path> [--db <path>]`,
+        providersHelp: (cmd) => `${cmd} providers list [--db <path>]\n${cmd} providers enable <model> [--db <path>]\n${cmd} providers enable <provider> <model> [--db <path>]\n${cmd} providers disable <model> [--db <path>]\n${cmd} providers disable <provider> <model> [--db <path>]\n${cmd} providers import <path> [--db <path>]\n${cmd} providers import --bundled [--db <path>]`,
         providersListEmpty: () => "providers DB 尚無型號；請明確執行 providers import。",
         providersListRow: (provider, model, input, output, enabled) => `${provider}\t${model}\tinput $${input}/M\toutput $${output}/M\t${enabled ? "enabled" : "disabled"}`,
         providersImported: (path) => `已合流匯入 providers：${path}`,
@@ -344,6 +354,7 @@ const MESSAGES = {
         doctorConfigDirSourceDefault: (dir) => `${dir}（來源：預設；DISPATCH_HOME 與 XDG_CONFIG_HOME 都沒設）`,
         doctorConfigDirUnresolved: () => "無法解析（沒有 HOME）",
         doctorDbLine: (dbPath) => `  資料庫      ${dbPath}`,
+        doctorBundledProvidersLine: (filePath) => `  出貨型號檔  ${filePath}`,
         doctorEnvLine: (value) => `  .env        ${value}`,
         doctorEnvPresentValue: () => "有，但本版不讀取（API key 請用 `dowafu key` 設定進 DB）",
         doctorApiKeyLine: (value) => `  API key     ${value}`,
@@ -477,6 +488,8 @@ Subcommands (each has its own usage message):
         mcpTicketsEmpty: () => "No dispatchable DB tickets.",
         mcpTicketsTitle: () => "Dispatchable tickets:",
         mcpTicketsRow: (ticket, spokeCount) => `- ${ticket}: ${spokeCount} spoke(s)`,
+        mcpTicketStatusDraft: (ticket, cmd) => `[draft] Draft — cannot be dispatched; seal it in the CLI: ${cmd} ticket seal ${ticket} --repo-root <repo root>`,
+        mcpTicketStatusSealed: (sealedAt) => `[sealed] Sealed ${sealedAt} — content and lenses are frozen; ready to dispatch.`,
         mcpTicketsSpoke: (agent, provider, model, allowCount) => `  ${agent}: ${provider}/${model}; allowlist files=${allowCount}`,
         mcpKeysTitle: () => "API key status:",
         mcpKeysRow: (provider, status) => `  ${provider}: ${status}`,
@@ -563,11 +576,19 @@ Subcommands (each has its own usage message):
         ticketNameInvalid: (name) => `Invalid ticket name: ${name}`,
         ticketAlreadyExists: (name) => `DB ticket already exists: ${name}`,
         ticketSpokeNotFound: (name, agent) => `DB ticket "${name}" has no agent "${agent}"`,
+        ticketStatusInvalid: (name) => `DB ticket "${name}" has an invalid or corrupt status.`,
+        ticketSealedWriteRejected: (name) => `DB ticket "${name}" is sealed and its content is frozen; to modify it, run dowafu ticket copy ${name} <new-name>.`,
+        ticketSealNeedsSpoke: (name) => `DB ticket "${name}" needs at least one spoke before it can be sealed.`,
+        ticketCopyNeedsSealed: (name) => `DB ticket "${name}" is still a draft; only a sealed ticket can be copied.`,
+        ticketSealedLensMissing: (name, agent) => `DB ticket "${name}" is sealed but lacks a lens snapshot for agent "${agent}"; aborted without reading a lens from disk.`,
+        ticketDraftRunBlocked: (name, cmd) => `DB ticket "${name}" is a draft and its lenses are not frozen; nothing was dispatched and no API was called. First run: ${cmd} ticket seal ${name} --repo-root .`,
+        ticketStatusDraft: () => `[draft] Draft — editable; cannot be dispatched yet.`,
+        ticketStatusSealed: (sealedAt, repoRoot) => `[sealed] Sealed ${sealedAt} (${repoRoot}) — content and lenses are frozen; ready to dispatch.`,
         ticketShowHeader: (name) => `DB ticket ${name}:`,
         ticketEstimateTokens: (tokens) => `est. ${tokens} tokens`,
         ticketCompletedRuns: (runs, total, last) => `Completed ${runs} times; total $${total}; last ${last}`,
         ticketCompletedRunsNoPricing: (runs, last) => `Completed ${runs} times; total No pricing data; last ${last}`,
-        ticketHelp: (cmd) => `${cmd} ticket create <name> <shared-file>\n${cmd} ticket add-spoke <name> <agent> <provider> <model> <body-file> [effort]\n${cmd} ticket add-allow <name> <agent> <repo-relative-path> [--repo-root <dir>]\n${cmd} ticket import <existing-ticket-dir> [name] [--repo-root <dir>]\n${cmd} ticket show <name>\n  <shared-file>/<body-file> may be - to read the body from stdin (stdin must be piped/redirected, not an interactive terminal)`,
+        ticketHelp: (cmd) => `${cmd} ticket create <name> <shared-file>\n${cmd} ticket add-spoke <name> <agent> <provider> <model> <body-file> [effort]\n${cmd} ticket add-allow <name> <agent> <repo-relative-path> [--repo-root <dir>]\n${cmd} ticket import <existing-ticket-dir> [name] [--repo-root <dir>]\n${cmd} ticket seal <name> --repo-root <dir>\n${cmd} ticket copy <sealed-ticket> <new-name>\n${cmd} ticket show <name>\n  draft: editable, cannot dispatch; sealed: content (including lenses) is frozen, can dispatch and run repeatedly.\n  <shared-file>/<body-file> may be - to read the body from stdin (stdin must be piped/redirected, not an interactive terminal)`,
         ticketStdinRequiresPipe: () => "This command reads the body from stdin via -, but stdin is an interactive terminal right now; nothing is being piped in. " +
             'Pipe or redirect content instead (for example, echo "..." | dowafu ticket create <name> -), or use a regular file path.',
         agentDefNotFound: (path, agent) => `Agent definition file not found: ${path} (_dispatch.md lists "${agent}")`,
@@ -603,7 +624,7 @@ Subcommands (each has its own usage message):
         modelDisabled: (model, cmd) => `Model "${model}" is disabled; first run ${cmd} providers enable ${model}`,
         providerModelNotFound: (model) => `Model not found: ${model}`,
         providerModelAmbiguous: (model, providers) => `Model "${model}" exists in: ${providers}. Use dowafu providers enable <provider> ${model}; see providers list.`,
-        providersHelp: (cmd) => `${cmd} providers list [--db <path>]\n${cmd} providers enable <model> [--db <path>]\n${cmd} providers enable <provider> <model> [--db <path>]\n${cmd} providers disable <model> [--db <path>]\n${cmd} providers disable <provider> <model> [--db <path>]\n${cmd} providers import <path> [--db <path>]`,
+        providersHelp: (cmd) => `${cmd} providers list [--db <path>]\n${cmd} providers enable <model> [--db <path>]\n${cmd} providers enable <provider> <model> [--db <path>]\n${cmd} providers disable <model> [--db <path>]\n${cmd} providers disable <provider> <model> [--db <path>]\n${cmd} providers import <path> [--db <path>]\n${cmd} providers import --bundled [--db <path>]`,
         providersListEmpty: () => "The providers DB has no models; explicitly run providers import.",
         providersListRow: (provider, model, input, output, enabled) => `${provider}\t${model}\tinput $${input}/M\toutput $${output}/M\t${enabled ? "enabled" : "disabled"}`,
         providersImported: (path) => `Providers merged from: ${path}`,
@@ -686,6 +707,7 @@ Subcommands (each has its own usage message):
         doctorConfigDirSourceDefault: (dir) => `${dir} (source: default; neither DISPATCH_HOME nor XDG_CONFIG_HOME is set)`,
         doctorConfigDirUnresolved: () => "could not resolve (no HOME)",
         doctorDbLine: (dbPath) => `  Database     ${dbPath}`,
+        doctorBundledProvidersLine: (filePath) => `  Bundled providers.json  ${filePath}`,
         doctorEnvLine: (value) => `  .env         ${value}`,
         doctorEnvPresentValue: () => "present, but this version does not read it (set API keys with `dowafu key`)",
         doctorApiKeyLine: (value) => `  API keys     ${value}`,

package/dist/ticket-store.js

@@ -10,6 +10,7 @@ import { isModelEnabled, loadProviders } from "./providers-store.js";
 import { getCommandName } from "./pkg-info.js";
 import { formatModelPricing } from "./report.js";
 import { DEFAULT_MAX_TOOL_CALLS, estimateHardCapUsd } from "./cost.js";
+export const TICKET_STATUSES = ["draft", "sealed"];
 function parseDoc(raw, name, lang) {
     try {
         const value = JSON.parse(raw);
@@ -22,12 +23,30 @@ function parseDoc(raw, name, lang) {
     }
 }
 export function getTicketDoc(db, name, lang) {
-    const row = db.prepare("SELECT doc FROM tickets WHERE name = ?").get(name);
-    if (!row?.doc)
+    return getStoredTicket(db, name, lang).doc;
+}
+function isTicketStatus(value) {
+    return typeof value === "string" && TICKET_STATUSES.includes(value);
+}
+export function getStoredTicket(db, name, lang) {
+    const row = db.prepare("SELECT name, doc, status, sealed_at FROM tickets WHERE name = ?").get(name);
+    if (!row?.doc || !row.name)
         throw new DispatchError(m(lang, "ticketNotFound", name), 2);
-    return parseDoc(row.doc, name, lang);
+    if (!isTicketStatus(row.status))
+        throw new DispatchError(m(lang, "ticketStatusInvalid", name), 2);
+    return {
+        name: row.name,
+        doc: parseDoc(row.doc, name, lang),
+        status: row.status,
+        sealedAt: typeof row.sealed_at === "string" ? row.sealed_at : null,
+    };
 }
-function put(db, name, doc) {
+function assertDraft(ticket, lang) {
+    if (ticket.status !== "draft")
+        throw new DispatchError(m(lang, "ticketSealedWriteRejected", ticket.name), 2);
+}
+function put(db, name, doc, lang) {
+    assertDraft(getStoredTicket(db, name, lang), lang);
     db.prepare("UPDATE tickets SET doc = ? WHERE name = ?").run(JSON.stringify(doc), name);
 }
 export function createTicket(db, name, shared, lang) {
@@ -36,7 +55,8 @@ export function createTicket(db, name, shared, lang) {
     if (isReservedTicketName(name))
         throw new DispatchError(m(lang, "ticketNameReserved", name, reservedTicketNames().join(", ")), 2);
     try {
-        db.prepare("INSERT INTO tickets (name, doc, created_at) VALUES (?, ?, ?)").run(name, JSON.stringify({ shared, spokes: [] }), now());
+        db.prepare("INSERT INTO tickets (name, doc, status, sealed_at, created_at) VALUES (?, ?, ?, ?, ?)")
+            .run(name, JSON.stringify({ shared, spokes: [] }), "draft", null, now());
     }
     catch {
         throw new DispatchError(m(lang, "ticketAlreadyExists", name), 2);
@@ -60,7 +80,7 @@ export function addSpoke(db, name, spoke, lang) {
     if (!isModelEnabled(db, spoke.provider, spoke.model))
         throw new DispatchError(m(lang, "modelDisabled", spoke.model, getCommandName()), 6);
     doc.spokes.push({ ...spoke, allow: [] });
-    put(db, name, doc);
+    put(db, name, doc, lang);
 }
 function isUnderDocs(repoRoot, target) {
     const docs = path.resolve(repoRoot, "_docs");
@@ -86,7 +106,47 @@ export async function addAllow(db, name, agent, rel, repoRoot, lang) {
         spoke.allow[i] = { path: rel, content };
     else
         spoke.allow.push({ path: rel, content });
-    put(db, name, doc);
+    put(db, name, doc, lang);
+}
+export async function sealTicket(db, name, repoRoot, lang) {
+    const ticket = getStoredTicket(db, name, lang);
+    assertDraft(ticket, lang);
+    if (ticket.doc.spokes.length === 0)
+        throw new DispatchError(m(lang, "ticketSealNeedsSpoke", name), 2);
+    const resolvedRepoRoot = path.resolve(repoRoot);
+    const agentContent = {};
+    // Read every file before writing anything. A missing lens must leave both the status
+    // and JSON document untouched.
+    for (const spoke of ticket.doc.spokes) {
+        const agentPath = path.join(resolvedRepoRoot, ".claude", "agents", `${spoke.agent}.md`);
+        try {
+            agentContent[spoke.agent] = await readFile(agentPath, "utf8");
+        }
+        catch {
+            throw new DispatchError(m(lang, "agentDefNotFound", agentPath, spoke.agent), 2);
+        }
+    }
+    const sealedAt = now();
+    const sealedDoc = { ...ticket.doc, agentContent, sealedRepoRoot: resolvedRepoRoot };
+    db.exec("BEGIN");
+    try {
+        db.prepare("UPDATE tickets SET doc = ?, status = ?, sealed_at = ? WHERE name = ?")
+            .run(JSON.stringify(sealedDoc), "sealed", sealedAt, name);
+        db.exec("COMMIT");
+    }
+    catch (err) {
+        db.exec("ROLLBACK");
+        throw err;
+    }
+}
+export function copyTicket(db, sourceName, newName, lang) {
+    const source = getStoredTicket(db, sourceName, lang);
+    if (source.status !== "sealed")
+        throw new DispatchError(m(lang, "ticketCopyNeedsSealed", sourceName), 2);
+    createTicket(db, newName, source.doc.shared, lang);
+    // A new draft deliberately retains shared/spokes/allowlist snapshots but never lens
+    // snapshots or the old sealing root; it has to seal against its chosen repo again.
+    put(db, newName, { shared: source.doc.shared, spokes: source.doc.spokes }, lang);
 }
 export async function importTicketDirectory(db, dir, name, repoRoot, lang) {
     const dispatch = await readFile(path.join(dir, "_dispatch.md"), "utf8");
@@ -157,8 +217,14 @@ export function getTicketHardCapUsd(db, name, lang, maxToolCalls = DEFAULT_MAX_T
     return parts.some((p) => p === null) ? null : parts.reduce((sum, p) => sum + p, 0);
 }
 export function formatTicket(db, name, lang, maxToolCalls = DEFAULT_MAX_TOOL_CALLS) {
-    const doc = getTicketDoc(db, name, lang);
-    const lines = [m(lang, "ticketShowHeader", name)];
+    const ticket = getStoredTicket(db, name, lang);
+    const doc = ticket.doc;
+    const statusLine = ticket.status === "sealed"
+        ? m(lang, "ticketStatusSealed", ticket.sealedAt ?? "—", doc.sealedRepoRoot ?? "—")
+        : m(lang, "ticketStatusDraft");
+    // Status is deliberately first: this is the human's decision point before any cost
+    // estimate or content detail.
+    const lines = [`${m(lang, "ticketShowHeader", name)} ${statusLine}`];
     for (const spoke of doc.spokes) {
         const chars = spoke.allow.reduce((sum, item) => sum + item.content.length, 0);
         const details = getTicketPricing(db, spoke.provider, spoke.model);

package/dist/ticket.js

@@ -4,7 +4,7 @@ import { readFile } from "node:fs/promises";
 import path from "node:path";
 import { DispatchError } from "./types.js";
 import { m } from "./messages.js";
-import { getTicketDoc } from "./ticket-store.js";
+import { getStoredTicket } from "./ticket-store.js";
 const FORMAT_MARKER = "<!-- format: v1 -->";
 function splitTableRow(line) {
     const trimmed = line.trim().replace(/^\|/, "").replace(/\|$/, "");
@@ -206,11 +206,13 @@ export async function loadTicket(source, nameOrLang, maybeLang) {
         return loadTicketDirectory(source, nameOrLang);
     const name = nameOrLang;
     const lang = maybeLang;
-    const doc = getTicketDoc(source, name, lang);
+    const stored = getStoredTicket(source, name, lang);
+    const doc = stored.doc;
     const shared = parseSharedDoc(doc.shared, lang);
     const rows = doc.spokes.map(({ agent, provider, model, effort }) => ({ agent, provider, model, effort }));
     const perAgent = new Map();
     const allowedContent = new Map();
+    const agentContent = doc.agentContent ? new Map(Object.entries(doc.agentContent)) : undefined;
     const ticketDir = `ticket/${name}`;
     allowedContent.set(`${ticketDir}/_shared.md`, doc.shared);
     for (const spoke of doc.spokes) {
@@ -219,5 +221,16 @@ export async function loadTicket(source, nameOrLang, maybeLang) {
         for (const allowed of spoke.allow)
             allowedContent.set(allowed.path, allowed.content);
     }
-    return { ticketDir, ticketName: name, rows, shared, perAgent, allowedContent };
+    return {
+        ticketDir,
+        ticketName: name,
+        rows,
+        shared,
+        perAgent,
+        allowedContent,
+        agentContent,
+        status: stored.status,
+        sealedAt: stored.sealedAt,
+        sealedRepoRoot: doc.sealedRepoRoot,
+    };
 }

package/dist/validate.js

@@ -36,7 +36,10 @@ isModelEnabled,
 // 而本模組不持有 db handle——比照 isModelEnabled 收一個回呼，由 cli.ts 接上。
 // 原本這裡直接讀 `process.env[`${PROVIDER}_API_KEY`]`，key 搬進 DB 之後那段就成了
 // 一道「更早的、只認環境變數」的閘門，會在 createAdapterFor 之前先攔下所有派工。
-hasApiKey, agentsDir = path.join(repoRoot, ".claude", "agents")) {
+hasApiKey, 
+// Required on purpose: a caller that forgets to forward sealed lens snapshots must
+// fail typechecking, never silently default to disk.
+agentContent, agentsDir = path.join(repoRoot, ".claude", "agents")) {
     const resolved = [];
     // 熱修補（缺口三）：同 ticket-store——空表要講「去匯入」，
     // 不要讓 providerUndefinedInRow 把人帶去查工單裡的 provider 名稱。
@@ -112,7 +115,13 @@ hasApiKey, agentsDir = path.join(repoRoot, ".claude", "agents")) {
                 allowedReadsResolved.push(real);
             }
         }
-        const agentBody = await readAgentBody(agentsDir, row.agent, lang);
+        const sealedAgent = agentContent?.get(row.agent);
+        if (ticket.status === "sealed" && sealedAgent === undefined) {
+            throw new DispatchError(m(lang, "ticketSealedLensMissing", ticket.ticketName ?? ticket.ticketDir, row.agent), 2);
+        }
+        const agentBody = sealedAgent === undefined
+            ? await readAgentBody(agentsDir, row.agent, lang)
+            : stripFrontmatter(sealedAgent);
         const sharedPath = path.join(ticket.ticketDir, "_shared.md");
         const ownAgentPath = path.join(ticket.ticketDir, `${row.agent}.md`);
         const allowSet = ticket.allowedContent

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dowafu",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "Send a section of your design doc to external LLMs for review. They read only the files you whitelist, and nothing is billed until you confirm.",
   "keywords": [
     "llm",