Write local issue report bundles

Author: SqlRush

docs/claude-code-go-rewrite-plan.md

@@ -136,7 +136,7 @@ test/parity/                 # golden tests against TS/official behavior
 - 本轮补充：动态 beta header 推导继续覆盖 strict tool structured-output 请求和 `[1m]` context model 请求；当 request tools 中存在 `strict:true` 时自动追加 structured-outputs beta，当 request model 以 `[1m]` 结尾时自动追加 context-1m beta，并继续和显式 beta 去重合并。
 - 本轮补充：Anthropic client 新增可选 access-token provider，非 streaming 与 streaming request 在 401/403 authentication/permission error 时会强制 refresh OAuth access token 并重试一次当前 payload；headless CLI 的 OAuth credentials 路径会把 file/env refresh token provider 传入 client，刷新后复用既有 credential store 持久化。
 - 本轮补充：conversation runner 的 streaming request 现在在未收到任何 stream event 前失败时，会用同一请求安全回退到 non-streaming `CreateMessage`；一旦已有 stream event 对外发出，错误会原样返回，避免重复生成半截输出。
-- 本轮补充：新增 no-query `/issue [description]` 本地命令入口，Anthropic client 暴露只读 prompt dump cache 摘要接口；runner 会输出 session/cwd/model、dump path 和最近请求的结构化摘要/hash，不输出 prompt 正文、system 内容或 tool schema 名称，作为后续远端 issue 提交集成的安全上下文基础。
+- 本轮补充：新增 no-query `/issue [description]` 本地命令入口，Anthropic client 暴露只读 prompt dump cache 摘要接口；runner 会输出 session/cwd/model、dump path 和最近请求的结构化摘要/hash，不输出 prompt 正文、system 内容或 tool schema 名称，并在 session-scoped `issue-report.json` 写入同一份脱敏 issue bundle，供外部 tracker/远端集成直接提交。
 - 本轮补充：`/cost` 本地命令现在会在 runner 带有 `SessionPath` 时从当前 session transcript 回填历史 usage，并按 message UUID/ID 与内存 history 去重，避免 resume 或新进程场景丢失/重复计算历史 cost。
 - 本轮补充：Anthropic CLI/env client 初始化现在支持 `ANTHROPIC_CUSTOM_HEADERS` 和 `CLAUDE_CODE_CUSTOM_HEADERS`，可用 JSON object 或 `Header: value`/`Header=value` 行格式注入 gateway/proxy 静态请求头；配置错误会在初始化阶段报错，避免静默遗漏代理必需 header。
 - 本轮补充：settings loader 现在会按官方优先级读取 managed policy：macOS MDM plist / Windows HKLM 优先，其次平台 managed file `managed-settings.json` 与 `managed-settings.d/*.json` drop-ins，再读可选 remote managed-settings GET source，最后 Windows HKCU；policy settings 已纳入 runner merged settings、headless model/fastMode 解析、permission engine policy source、MCP policy 和 `/config` 可见文件列表；Runner turn-start 和 daemon heartbeat tick 会在 remote managed source 配置存在时 fail-open 刷新 policy settings，并同步影响 merged settings 与 plugin MCP server app-state；`allowManagedPermissionRulesOnly` 会剥离非 policy permission rules。

internal/conversation/run.go

@@ -1045,10 +1045,18 @@ func (r Runner) formatFilesSummary(raw string) string {
 }
 
 func (r Runner) formatIssueSummary(raw string) string {
+	description := strings.TrimSpace(raw)
 	lines := []string{"Issue report context"}
-	if description := strings.TrimSpace(raw); description != "" {
+	if description != "" {
 		lines = append(lines, "Description: "+description)
 	}
+	bundle := issueReportBundle{
+		GeneratedAt:      time.Now().UTC().Format(time.RFC3339Nano),
+		Description:      description,
+		SessionID:        r.SessionID,
+		WorkingDirectory: strings.TrimSpace(r.WorkingDirectory),
+		Model:            r.model(),
+	}
 	if r.SessionID != "" {
 		lines = append(lines, "Session ID: "+string(r.SessionID))
 	}
@@ -1062,19 +1070,63 @@ func (r Runner) formatIssueSummary(raw string) string {
 		path := strings.TrimSpace(provider.PromptDumpPath())
 		if path != "" {
 			lines = append(lines, "Prompt dump path: "+path)
+			bundle.PromptDumpPath = path
 		}
 		entries := provider.CachedPromptDumpRequests()
 		lines = append(lines, fmt.Sprintf("Recent prompt dumps: %d", len(entries)))
-		for _, entry := range recentPromptDumpSummaries(entries, 3) {
-			lines = append(lines, "- "+entry)
+		summaries := recentPromptDumpSummaries(entries, 3)
+		bundle.RecentPromptDumps = summaries
+		for _, summary := range summaries {
+			lines = append(lines, "- "+summary)
 		}
 	} else {
 		lines = append(lines, "Prompt dump cache: unavailable")
 	}
-	lines = append(lines, "Submission: local context only; remote issue submission is not implemented in the Go runtime yet.")
+	if path := r.issueReportBundlePath(); path != "" {
+		if err := writeIssueReportBundle(path, bundle); err != nil {
+			lines = append(lines, "Issue bundle error: "+err.Error())
+		} else {
+			lines = append(lines, "Issue bundle path: "+path)
+			lines = append(lines, "Submission: local issue bundle prepared.")
+		}
+	} else {
+		lines = append(lines, "Issue bundle path: (not configured)")
+		lines = append(lines, "Submission: local issue context prepared.")
+	}
 	return strings.Join(lines, "\n")
 }
 
+type issueReportBundle struct {
+	GeneratedAt       string       `json:"generated_at"`
+	Description       string       `json:"description,omitempty"`
+	SessionID         contracts.ID `json:"session_id,omitempty"`
+	WorkingDirectory  string       `json:"working_directory,omitempty"`
+	Model             string       `json:"model,omitempty"`
+	PromptDumpPath    string       `json:"prompt_dump_path,omitempty"`
+	RecentPromptDumps []string     `json:"recent_prompt_dumps,omitempty"`
+}
+
+func (r Runner) issueReportBundlePath() string {
+	if strings.TrimSpace(r.SessionPath) == "" || r.SessionID == "" {
+		return ""
+	}
+	return filepath.Join(filepath.Dir(r.SessionPath), string(r.SessionID), "issue-report.json")
+}
+
+func writeIssueReportBundle(path string, bundle issueReportBundle) error {
+	if strings.TrimSpace(path) == "" {
+		return nil
+	}
+	if err := os.MkdirAll(filepath.Dir(path), 0o700); err != nil {
+		return err
+	}
+	data, err := json.MarshalIndent(bundle, "", "  ")
+	if err != nil {
+		return err
+	}
+	return os.WriteFile(path, append(data, '\n'), 0o600)
+}
+
 func recentPromptDumpSummaries(entries []anthropic.PromptDumpCacheEntry, limit int) []string {
 	if limit <= 0 || len(entries) == 0 {
 		return nil

internal/conversation/run_test.go

@@ -2079,18 +2079,21 @@ func TestRunnerExecutesClearSlashCommandWithoutQuery(t *testing.T) {
 }
 
 func TestRunnerExecutesIssueSlashCommandWithoutQuery(t *testing.T) {
+	dir := t.TempDir()
 	client := &fakeClient{
-		dumpPath: filepath.Join(t.TempDir(), "prompt-dump.jsonl"),
+		dumpPath: filepath.Join(dir, "prompt-dump.jsonl"),
 		dumpCache: []anthropic.PromptDumpCacheEntry{{
 			Timestamp: "2026-01-02T03:04:05Z",
 			Request:   json.RawMessage(`{"model":"sonnet","max_tokens":64,"stream":true,"system":"secret system","messages":[{"role":"user","content":"super secret prompt"}],"tools":[{"name":"SecretTool"}]}`),
 		}},
 	}
+	transcriptPath := filepath.Join(dir, "session.jsonl")
 	runner := Runner{
 		Client:           client,
 		Model:            "sonnet",
 		MaxTokens:        128,
 		SessionID:        "sess_issue",
+		SessionPath:      transcriptPath,
 		WorkingDirectory: "/repo",
 	}
 
@@ -2120,6 +2123,8 @@ func TestRunnerExecutesIssueSlashCommandWithoutQuery(t *testing.T) {
 		"messages=1",
 		"tools=1",
 		"system=true",
+		"Issue bundle path: " + filepath.Join(dir, "sess_issue", "issue-report.json"),
+		"Submission: local issue bundle prepared.",
 	} {
 		if !strings.Contains(text, want) {
 			t.Fatalf("issue summary missing %q in:\n%s", want, text)
@@ -2130,6 +2135,32 @@ func TestRunnerExecutesIssueSlashCommandWithoutQuery(t *testing.T) {
 			t.Fatalf("issue summary leaked %q in:\n%s", leaked, text)
 		}
 	}
+	data, err := os.ReadFile(filepath.Join(dir, "sess_issue", "issue-report.json"))
+	if err != nil {
+		t.Fatal(err)
+	}
+	var bundle struct {
+		Description       string   `json:"description"`
+		SessionID         string   `json:"session_id"`
+		WorkingDirectory  string   `json:"working_directory"`
+		Model             string   `json:"model"`
+		PromptDumpPath    string   `json:"prompt_dump_path"`
+		RecentPromptDumps []string `json:"recent_prompt_dumps"`
+	}
+	if err := json.Unmarshal(data, &bundle); err != nil {
+		t.Fatal(err)
+	}
+	if bundle.Description != "auth failed" || bundle.SessionID != "sess_issue" || bundle.WorkingDirectory != "/repo" || bundle.Model != "sonnet" || bundle.PromptDumpPath != client.dumpPath {
+		t.Fatalf("issue bundle = %#v", bundle)
+	}
+	if len(bundle.RecentPromptDumps) != 1 || !strings.Contains(bundle.RecentPromptDumps[0], "request_sha256=") {
+		t.Fatalf("issue bundle prompt summaries = %#v", bundle.RecentPromptDumps)
+	}
+	for _, leaked := range []string{"super secret prompt", "secret system", "SecretTool"} {
+		if strings.Contains(string(data), leaked) {
+			t.Fatalf("issue bundle leaked %q in:\n%s", leaked, data)
+		}
+	}
 }
 
 func TestRunnerExecutesCompactSlashCommandWithoutMainQuery(t *testing.T) {