@bolloon/bolloon-agent 0.1.34 → 0.1.36

package/dist/web/server.js

@@ -5,6 +5,7 @@ import { fileURLToPath } from 'url';
 import * as fs from 'fs/promises';
 import * as fsSync from 'fs';
 import * as path from 'path';
+import * as os from 'os';
 import { createHyperswarmCommunicator, createTopic, KeyManager, AgentAuthManager, } from '@diap/sdk';
 import { documentReader } from '../documents/reader.js';
 import { initMinimax, getMinimax } from '../constraints/index.js';
@@ -30,15 +31,15 @@ function resolveWebRoot() {
     }
     const d = _baseDirname;
     const candidates = [
-        path.join(d), // dist/web
-        path.join(d, '..', '..', 'dist', 'web'), // src/web → dist/web
+        path.join(d, '..', '..', 'dist', 'web'), // 2026-06-15 优先: src/web → dist/web (build 产物)
+        path.join(d), // dist/web (npm 跑时)
         path.join(d, '..', 'web'), // dist/ → web/ 兄弟
     ];
     for (const c of candidates) {
         if (fsSync.existsSync(path.join(c, 'index.html')))
             return c;
     }
-    return candidates[1];
+    return candidates[0];
 }
 const webRoot = resolveWebRoot();
 console.log(`[web] webRoot = ${webRoot}`);
@@ -139,7 +140,6 @@ async function saveTheme(theme, agentId) {
 }
 // ==================== Task Queue & Workflow System ====================
 const TASK_QUEUE_PATH = path.join(SHARED_SESSION_PATH, 'task-queue.json');
-const WORKFLOW_STATE_PATH = path.join(SHARED_SESSION_PATH, 'workflow-state.json');
 async function loadTaskQueue() {
     try {
         const data = await fs.readFile(TASK_QUEUE_PATH, 'utf-8');
@@ -152,33 +152,6 @@ async function loadTaskQueue() {
 async function saveTaskQueue(tasks) {
     await fs.writeFile(TASK_QUEUE_PATH, JSON.stringify(tasks, null, 2));
 }
-async function loadWorkflowState(channelId) {
-    try {
-        const data = await fs.readFile(WORKFLOW_STATE_PATH, 'utf-8');
-        const states = JSON.parse(data);
-        return states.find(s => s.channelId === channelId) || null;
-    }
-    catch {
-        return null;
-    }
-}
-async function saveWorkflowState(state) {
-    try {
-        const data = await fs.readFile(WORKFLOW_STATE_PATH, 'utf-8');
-        const states = JSON.parse(data);
-        const index = states.findIndex(s => s.channelId === state.channelId);
-        if (index >= 0) {
-            states[index] = state;
-        }
-        else {
-            states.push(state);
-        }
-        await fs.writeFile(WORKFLOW_STATE_PATH, JSON.stringify(states, null, 2));
-    }
-    catch {
-        await fs.writeFile(WORKFLOW_STATE_PATH, JSON.stringify([state], null, 2));
-    }
-}
 let isExecutingTask = false;
 let executionTaskId = null;
 async function executeTask(task, channelId) {
@@ -220,32 +193,6 @@ async function executeTask(task, channelId) {
                     result = `📝 文档总结:\n\n${summary.summary}`;
                 }
                 break;
-            case 'workflow':
-                // 执行多步骤工作流
-                if (task.steps && task.steps.length > 0) {
-                    let loopCount = 0;
-                    for (let i = 0; i < task.steps.length; i++) {
-                        // 广播循环开始
-                        loopCount++;
-                        broadcast({ type: 'workflow_loop', loopCount, content: `开始步骤 ${i + 1}/${task.steps.length}: ${task.steps[i].name}` }, channelId);
-                        task.steps[i].status = 'running';
-                        broadcast({ type: 'task_status', taskId: task.id, status: 'running', currentStep: i, totalSteps: task.steps.length }, channelId);
-                        broadcast({ type: 'workflow_step', step: `步骤 ${i + 1}`, content: `执行中: ${task.steps[i].name}` }, channelId);
-                        // 执行步骤 - 模拟流式输出
-                        for (let j = 0; j < 3; j++) {
-                            await new Promise(resolve => setTimeout(resolve, 300));
-                            broadcast({ type: 'workflow_step', step: `步骤 ${i + 1}`, content: `执行中... (${(j + 1) * 33}%)` }, channelId);
-                        }
-                        task.steps[i].status = 'completed';
-                        task.progress = Math.round(((i + 1) / task.steps.length) * 100);
-                        broadcast({ type: 'workflow_step', step: `步骤 ${i + 1}`, content: `✅ 完成: ${task.steps[i].name}` }, channelId);
-                        broadcast({ type: 'workflow_loop', loopCount, status: 'completed', content: `步骤 ${i + 1} 完成` }, channelId);
-                        broadcast({ type: 'task_status', taskId: task.id, progress: task.progress }, channelId);
-                    }
-                    result = '✅ 工作流执行完成';
-                    broadcast({ type: 'workflow_loop', loopCount, status: 'finished', content: result }, channelId);
-                }
-                break;
             default:
                 result = '未知任务类型';
         }
@@ -631,7 +578,7 @@ async function handleV3P2PMessage(parsed, conn, comm) {
             const { getMinimax } = await import('../constraints/index.js');
             const llm = getMinimax();
             // v3 新增: 在 prompt 头部标记"这是远端访客", 让 AI 知道对方不是自己 owner
-            const visitorHint = `[系统上下文] 消息来源: 远端访客 (P2P 连接, publicKey=${senderKey.substring(0, 12)}...). 对方不是你 owner, 是通过 P2P 网络访问你这个 channel 的合作者. 称呼对方时可用 "远端访客" / "朋友" / "合作者", 不要叫 "主人".\n\n`;
+            const visitorHint = `[系统上下文] 消息来源: 远端访客 (P2P 连接, publicKey=${senderKey.substring(0, 12)}...). 对方不是你 owner, 是通过 P2P 网络访问你这个 channel 的合作者. 称呼对方时可用 "远端访客" / "朋友" / "合作者", 不要叫 "用户".\n\n`;
             // v3 新增: 也注入 channel 目录给 LLM (B 的 channel 也可以 @-mention 其他)
             let dirHint = '';
             const localChannels = (await loadChannels()).filter(c => c.id !== channelId);
@@ -653,11 +600,20 @@ async function handleV3P2PMessage(parsed, conn, comm) {
                 }
                 dirHint += '语法: 在回复中写 "@渠道名 我要说的话" 即可. 消息会持久化到目标 channel 的 session.\n\n';
             }
-            const fullPrompt = `${visitorHint}${dirHint}${judgmentHint}${text}`;
+            // 2026-06-15: P2P 远端访客路径也用显式 marker 包裹 text
+            // 2026-06-15 二次修: 把 text 放在最前 (与主路径 server.ts:1868 对齐),
+            //   避免 LLM 被 judgmentHint 末尾的 "..." 误判为整个 input 被截断
+            const fullPrompt = `【本轮用户请求】\n${text}\n【请求结束】\n\n${visitorHint}${dirHint}${judgmentHint}\n`;
             let fullResponse = '';
             // v3 新增: 流式 token 节流推给 B — 让 B 看到过程
             let lastFlushAt = 0;
+            let usedJudgmentIds = [];
             const streamCallback = (event) => {
+                // P0.5: 注入门回传
+                if (event?.type === 'used_judgments' && Array.isArray(event.usedIds)) {
+                    usedJudgmentIds = event.usedIds;
+                    return;
+                }
                 if (event.type === 'token') {
                     fullResponse += event.content;
                     if (fullResponse.length - lastFlushAt >= 20) {
@@ -671,7 +627,7 @@ async function handleV3P2PMessage(parsed, conn, comm) {
                 }
             };
             const agent = await getAgentForChannel(channelId, ch.did || '', ch.name, ch.didDocRef);
-            fullResponse = await agent.promptStream(fullPrompt, streamCallback);
+            fullResponse = await agent.promptStream(fullPrompt, streamCallback, undefined, channelId);
             // v3 新增: 存 A 的 assistant 消息到 session — B 拉历史时能看到完整对话
             try {
                 const existing = await loadSession(channelId, 'default');
@@ -682,6 +638,7 @@ async function handleV3P2PMessage(parsed, conn, comm) {
                     id: `msg-${Date.now()}-${Math.random().toString(36).slice(2, 6)}`,
                     type: 'ai',
                     content: fullResponse,
+                    ...(usedJudgmentIds.length > 0 ? { metadata: { usedJudgmentIds } } : {}),
                     timestamp: new Date().toISOString()
                 });
                 session.lastUpdated = new Date().toISOString();
@@ -967,6 +924,16 @@ export async function createWebServer(port = 3000, options = {}) {
     process.on('unhandledRejection', (reason, promise) => {
         console.error('[警告] 未处理的 Promise 拒绝:', reason);
     });
+    // Bolloon Bootstrap (幂等, 重复调不会重复挂定时器)
+    // 这里独立调一次以保证 CLI-only 模式 (无 index.ts 引导) 也能 bootstrap
+    try {
+        const { bootstrapBolloon } = await import('../pi-ecosystem-judgment/human-value-pipeline.js');
+        const bs = await bootstrapBolloon({ cwd: process.cwd() });
+        console.log(`[createWebServer] bootstrap 完成 (${bs.durationMs}ms)`);
+    }
+    catch (err) {
+        console.warn('[createWebServer] bootstrap 失败 (非致命):', err);
+    }
     // 重置旧的 agent session，确保使用新的 LLM 配置
     const { resetAgentSession } = await import('../agents/pi-sdk.js');
     resetAgentSession();
@@ -1410,10 +1377,40 @@ export async function createWebServer(port = 3000, options = {}) {
         const autoToolsEnabled = channel?.autoInvokeTools !== false; // 默认开启
         // 捕获外层 channel 到独立变量, 避免被 try 块内 (line 740+) 的 const channel 遮蔽
         const channelForJudgment = channel;
+        // per-channel queue 检查: 已在跑就入队, 等当前跑完自动接上
+        const runState = getOrCreateRunState(channelId);
+        if (runState.running) {
+            runState.queue.push({ channelId, text, boundWalletAddress, autoToolsEnabled });
+            broadcastQueueUpdate(channelId);
+            console.log(`[queue] /message 入队 channel=${channelId}, queue len=${runState.queue.length}`);
+            return;
+        }
+        runState.running = true;
+        runState.abortController = new AbortController();
+        broadcastQueueUpdate(channelId);
         try {
             const agent = await getAgentForChannel(channelId, realChannelDid, realChannelName, realChannelDidDoc);
             let fullResponse = '';
+            // P0.5: 注入门回传的 usedIds, 落 session message metadata, UI 可查
+            let usedJudgmentIds = [];
             const streamCallback = (event) => {
+                // P0.5: 捕获注入门回传
+                if (event.type === 'used_judgments' && Array.isArray(event.usedIds)) {
+                    usedJudgmentIds = event.usedIds;
+                    // 同步推给前端 (用于 finalizeTimelineAsMessage 时给 addMessage 传 usedIds)
+                    broadcast({ type: 'used_judgments', usedIds: usedJudgmentIds }, channelId);
+                    return;
+                }
+                // 阶段事件 (注入门 / D 触发)
+                if (event.type === 'phase') {
+                    broadcast({
+                        type: 'phase',
+                        phase: event.phase,
+                        detail: event.detail,
+                        usedCount: event.usedCount,
+                    }, channelId);
+                    return;
+                }
                 // 同时发送给流式显示和工作流显示
                 if (event.type === 'token' || event.type === 'thinking') {
                     broadcast({ type: 'stream', streamType: event.type, content: event.content }, channelId);
@@ -1427,6 +1424,35 @@ export async function createWebServer(port = 3000, options = {}) {
                     broadcast({ type: 'workflow_step', step: event.tool || '系统', content: event.content }, channelId);
                     console.log(`[SSE 广播] workflow_step: step=${event.tool}, content="${event.content?.substring(0, 80)}..."`);
                 }
+                else if (event.type === 'step_start' || event.type === 'step_done' || event.type === 'step_error') {
+                    // 2026-06-15: 步骤状态机事件 — 原样转发 (前端 step-timeline 组件订阅)
+                    broadcast({
+                        type: event.type,
+                        tool: event.tool,
+                        content: event.content,
+                        success: event.success,
+                        output: event.output,
+                        error: event.error,
+                        args: event.args,
+                    }, channelId);
+                    // 2026-06-16: 累积 step 到 runState, 供 /api/loop/inspect 读取
+                    try {
+                        if (event.type === 'step_done' || event.type === 'step_error') {
+                            const rs = channelRunState.get(channelId);
+                            if (rs) {
+                                if (!rs.lastSteps)
+                                    rs.lastSteps = [];
+                                rs.lastSteps.push({
+                                    name: String(event.tool || event.content || 'step').slice(0, 60),
+                                    status: event.type === 'step_error' ? 'failed' : (event.success === false ? 'failed' : 'ok'),
+                                    durationMs: typeof event.durationMs === 'number' ? event.durationMs : undefined,
+                                    output: event.output ? String(event.output).slice(0, 800) : (event.error ? String(event.error).slice(0, 800) : undefined),
+                                });
+                            }
+                        }
+                    }
+                    catch { /* non-fatal */ }
+                }
                 else if (event.type === 'error') {
                     broadcast({ type: 'error', content: event.content }, channelId);
                 }
@@ -1437,7 +1463,7 @@ export async function createWebServer(port = 3000, options = {}) {
             if (realChannelDid)
                 contextHint += `[系统上下文] 当前频道名称: ${realChannelName}, 你的真实 DID: ${realChannelDid}\n`;
             // v3 新增: 标识发送方 — 让 AI 分清内部 owner vs 远端访客
-            contextHint += `[系统上下文] 消息来源: 本地 (channel 内部 owner / 此机器上的用户). 称呼对方时用 "你" 或 "主人" 即可.\n`;
+            contextHint += `[系统上下文] 消息来源: 本地 (channel 内部 owner / 此机器上的用户). 称呼对方时用 "你" 或 "用户" 即可.\n`;
             if (boundWalletAddress) {
                 contextHint += `[系统上下文] 已绑定的加密钱包地址: ${boundWalletAddress}。当用户授权或启用自动工具调用时, 可使用该地址发起链上操作。\n`;
             }
@@ -1583,7 +1609,28 @@ export async function createWebServer(port = 3000, options = {}) {
             }
             if (contextHint)
                 contextHint += '\n';
-            fullResponse = await agent.promptStream(contextHint + text, streamCallback);
+            try {
+                // 2026-06-15: 把 user text 单独 marker 包起来, LLM 不会被 8K+ 的 system context 吞掉
+                //   (之前 contextHint + text 拼成一整段当 user role, 24 字符的 user input 埋在 8K+ 里看不出)
+                //   修法: contextHint 当 "背景信息", text 当 "本轮用户请求" — 显式 marker 让 LLM 区分
+                // 2026-06-15 二次修: 把 text 放在最前 (LLM 看到 input 第一眼是 user text, 不会被 judgmentHint 末尾
+                //   的 "..." 误判为整个 input 截断)
+                const markedPrompt = `【本轮用户请求】\n${text}\n【请求结束】\n\n${contextHint}`;
+                fullResponse = await agent.promptStream(markedPrompt, streamCallback, runState.abortController?.signal, channelId);
+            }
+            catch (err) {
+                // abort 抛错: 保留已输出的部分 (fullResponse 可能是空字符串)
+                if (runState.abortController?.signal.aborted || err?.name === 'AbortError') {
+                    console.log(`[chat] aborted channel=${channelId}`);
+                }
+                else {
+                    throw err;
+                }
+            }
+            // abort 模式: 给 partial 拼后缀
+            if (runState.abortController?.signal.aborted && fullResponse.trim().length > 0) {
+                fullResponse = fullResponse + '\n\n_[生成已中断]_';
+            }
             // v3 新增: 解析 LLM 回复里的 @-mentions, 转发到目标 channel
             await routeMentionsInReply(channelId, fullResponse, localChannels, remoteChannels);
             broadcast({ type: 'ai', content: fullResponse }, channelId);
@@ -1592,7 +1639,15 @@ export async function createWebServer(port = 3000, options = {}) {
             session.sessionId = currentSessionId;
             // v3: 加 source 标记 (local = 内部 owner, remote = 远端访客)
             session.messages.push({ id: crypto.randomUUID(), type: 'user', content: text, timestamp: new Date().toISOString(), source: 'local' });
-            session.messages.push({ id: crypto.randomUUID(), type: 'ai', content: fullResponse, timestamp: new Date().toISOString(), source: 'local' });
+            session.messages.push({
+                id: crypto.randomUUID(),
+                type: 'ai',
+                content: fullResponse,
+                timestamp: new Date().toISOString(),
+                source: 'local',
+                // P0.5: 这条 AI 回复引用了哪些 judgment (注入门回传)
+                ...(usedJudgmentIds.length > 0 ? { metadata: { usedJudgmentIds } } : {}),
+            });
             session.lastUpdated = new Date().toISOString();
             await saveSession(session);
             const channels = await loadChannels();
@@ -1605,6 +1660,46 @@ export async function createWebServer(port = 3000, options = {}) {
                 await saveChannels(channels);
             }
             broadcast({ type: 'done' }, channelId);
+            // D 触发: AI 被动捕获判断力 (后台异步, 不阻塞主对话)
+            setImmediate(() => {
+                try {
+                    const lastTurns = session.messages.slice(-6).map((m) => ({
+                        role: (m.type === 'user' ? 'human' : 'agent'),
+                        content: m.content,
+                    }));
+                    if (lastTurns.length < 2)
+                        return;
+                    broadcast({ type: 'phase', phase: 'd_detect', detail: '监测对话...' }, channelId);
+                    import('../pi-ecosystem-judgment/human-value-pipeline.js')
+                        .then(async ({ detectAndDistillFromChannel, throttleDHook }) => {
+                        // channel 维度 5min 节流, 防对话卡顿时 LLM 反复触发
+                        if (!throttleDHook(channelId, 5 * 60_000)) {
+                            console.log(`[D-hook ${channelId}] throttled (within 5min)`);
+                            broadcast({ type: 'phase', phase: 'd_skip', detail: 'throttled' }, channelId);
+                            return null;
+                        }
+                        broadcast({ type: 'phase', phase: 'd_distill', detail: '蒸馏判断力...' }, channelId);
+                        return detectAndDistillFromChannel(lastTurns, { channelId });
+                    })
+                        .then((result) => {
+                        if (result && result.triggered) {
+                            console.log(`[D-hook ${channelId}] stored: ${result.reason}`, result.evolved);
+                            broadcast({ type: 'phase', phase: 'd_done', detail: result.reason }, channelId);
+                        }
+                        else if (result && result.reason) {
+                            console.log(`[D-hook ${channelId}] skipped: ${result.reason}`);
+                            broadcast({ type: 'phase', phase: 'd_skip', detail: result.reason }, channelId);
+                        }
+                    })
+                        .catch((err) => {
+                        console.warn(`[D-hook ${channelId}] failed:`, err);
+                        broadcast({ type: 'phase', phase: 'd_error', detail: String(err) }, channelId);
+                    });
+                }
+                catch (err) {
+                    console.warn(`[D-hook ${channelId}] sync error:`, err);
+                }
+            });
             // 2026-06-11: 202 已发的话, 不要重复 res.json (会抛 ERR_HTTP_HEADERS_SENT)
             if (!res.headersSent)
                 res.json({ ok: true });
@@ -1615,6 +1710,15 @@ export async function createWebServer(port = 3000, options = {}) {
             if (!res.headersSent)
                 res.status(500).json({ error: err.message });
         }
+        finally {
+            // queue dequeue: 跑完或失败都要清状态
+            // 当前实现: 自动接下一条需要把 ~200 行 try 块抽函数, 暂不抽.
+            // 替代: 用户点 [队列 +N] 按钮时, 客户端发起一个特殊的 HTTP 请求触发下一条
+            // (在 client.js 实现). 这里只清状态 + 广播.
+            runState.running = false;
+            runState.abortController = null;
+            broadcastQueueUpdate(channelId);
+        }
     });
     // ---------- 频道元数据后台修复队列 ----------
     // 关键点: 旧实现会在每次 GET /channels 时同步执行 KeyManager.generate() + IPFS POST,
@@ -1623,6 +1727,24 @@ export async function createWebServer(port = 3000, options = {}) {
     const didFixQueue = new Set(); // 待修复的 channelId
     let didFixRunning = false;
     let didFixTimer = null;
+    const channelRunState = new Map();
+    function getOrCreateRunState(channelId) {
+        let s = channelRunState.get(channelId);
+        if (!s) {
+            s = { running: false, queue: [], abortController: null, lastSteps: [], lastSummary: '', lastFinalReply: '', lastTokens: {} };
+            channelRunState.set(channelId, s);
+        }
+        return s;
+    }
+    function broadcastQueueUpdate(channelId) {
+        const s = channelRunState.get(channelId);
+        const queueLength = s ? s.queue.length : 0;
+        const running = s ? s.running : false;
+        try {
+            broadcast({ type: 'queue_update', channelId, queueLength, running }, channelId);
+        }
+        catch { /* */ }
+    }
     function scheduleDidFix(channelId) {
         didFixQueue.add(channelId);
         if (didFixTimer)
@@ -2312,20 +2434,40 @@ export async function createWebServer(port = 3000, options = {}) {
             broadcast({ type: 'regenerating', channelId }, channelId);
             const agent = await getAgentForChannel(channelId, realChannelDid, realChannelName, realChannelDidDoc);
             let fullResponse = '';
+            let usedJudgmentIds = [];
             const streamCallback = (event) => {
+                // P0.5: 注入门回传
+                if (event.type === 'used_judgments' && Array.isArray(event.usedIds)) {
+                    usedJudgmentIds = event.usedIds;
+                    return;
+                }
                 if (event.type === 'token' || event.type === 'thinking') {
                     broadcast({ type: 'stream', streamType: event.type, content: event.content }, channelId);
                 }
                 else if (event.type === 'status' || event.type === 'tool') {
                     broadcast({ type: 'status', tool: event.tool, content: event.content }, channelId);
                 }
+                else if (event.type === 'step_start' || event.type === 'step_done' || event.type === 'step_error') {
+                    // 2026-06-15: 步骤状态机事件 — 原样转发
+                    broadcast({
+                        type: event.type,
+                        tool: event.tool,
+                        content: event.content,
+                        success: event.success,
+                        output: event.output,
+                        error: event.error,
+                        args: event.args,
+                    }, channelId);
+                }
                 else if (event.type === 'error') {
                     broadcast({ type: 'error', content: event.content }, channelId);
                 }
             };
             // 重新生成时只发送用户消息 (v3: 同时注入 channel 绑定的判断力)
+            // 2026-06-15: 同 /message 路径, 用显式 marker 包裹 userMessage, 避免 LLM 把它当背景信息
             const regenHint = await buildJudgmentHint(channel, channelId);
-            fullResponse = await agent.promptStream(regenHint + userMessage, streamCallback);
+            const markedRegen = `${regenHint}\n\n【本轮用户请求】\n${userMessage}\n【请求结束】\n`;
+            fullResponse = await agent.promptStream(markedRegen, streamCallback, undefined, channelId);
             broadcast({ type: 'ai', content: fullResponse }, channelId);
             // 更新 session
             const existingSession = await loadSession(channelId, currentSessionId);
@@ -2339,7 +2481,8 @@ export async function createWebServer(port = 3000, options = {}) {
                     id: crypto.randomUUID(),
                     type: 'ai',
                     content: fullResponse,
-                    timestamp: new Date().toISOString()
+                    timestamp: new Date().toISOString(),
+                    ...(usedJudgmentIds.length > 0 ? { metadata: { usedJudgmentIds } } : {}),
                 });
                 existingSession.lastUpdated = new Date().toISOString();
                 await saveSession(existingSession);
@@ -2494,42 +2637,6 @@ export async function createWebServer(port = 3000, options = {}) {
             res.status(500).json({ error: err.message });
         }
     });
-    // 创建并执行工作流
-    app.post('/api/workflow', async (req, res) => {
-        try {
-            const { channelId, title, steps } = req.body;
-            if (!channelId || !steps || !Array.isArray(steps)) {
-                return res.status(400).json({ error: 'channelId and steps required' });
-            }
-            const tasks = await loadTaskQueue();
-            const task = {
-                id: `wf_${Date.now()}_${Math.random().toString(36).substring(2, 8)}`,
-                type: 'workflow',
-                title: title || '工作流',
-                description: `包含 ${steps.length} 个步骤的工作流`,
-                status: 'pending',
-                progress: 0,
-                createdAt: new Date().toISOString(),
-                updatedAt: new Date().toISOString(),
-                steps: steps.map((s, i) => ({
-                    id: `step_${i}`,
-                    name: s,
-                    status: 'pending'
-                })),
-                currentStep: 0
-            };
-            tasks.push(task);
-            await saveTaskQueue(tasks);
-            // 自动开始执行
-            if (!isExecutingTask) {
-                executeTask(task, channelId);
-            }
-            res.json({ ok: true, task });
-        }
-        catch (err) {
-            res.status(500).json({ error: err.message });
-        }
-    });
     // ==================== LLM 配置 API ====================
     // 获取所有 LLM 配置
     app.get('/api/llm-config', async (req, res) => {
@@ -3664,7 +3771,25 @@ export async function createWebServer(port = 3000, options = {}) {
             res.status(500).json({ error: err.message });
         }
     });
-    // 主人审阅: 批准 draft
+    // 终止当前 channel 的 LLM 流 (UI 终止按钮)
+    app.post('/api/chat/abort', async (req, res) => {
+        try {
+            const { channelId } = req.body;
+            if (!channelId)
+                return res.status(400).json({ error: 'channelId required' });
+            const s = channelRunState.get(channelId);
+            if (s?.abortController) {
+                s.abortController.abort();
+                console.log(`[abort] user aborted channel=${channelId}`);
+                return res.json({ ok: true, aborted: true });
+            }
+            res.json({ ok: true, aborted: false });
+        }
+        catch (err) {
+            res.status(500).json({ error: err.message });
+        }
+    });
+    // 用户审阅: 批准 draft
     app.post('/api/chat/approve', async (req, res) => {
         try {
             const { messageId, peerDID, finalText } = req.body || {};
@@ -3678,7 +3803,7 @@ export async function createWebServer(port = 3000, options = {}) {
             res.status(500).json({ error: err.message });
         }
     });
-    // 主人审阅: 丢弃 draft
+    // 用户审阅: 丢弃 draft
     app.post('/api/chat/dismiss', async (req, res) => {
         try {
             const { messageId, peerDID } = req.body || {};
@@ -4046,20 +4171,414 @@ export async function createWebServer(port = 3000, options = {}) {
             res.status(500).json({ error: err.message });
         }
     });
-    app.get('/api/judgments', async (_req, res) => {
+    app.get('/api/judgments', async (req, res) => {
         try {
-            const { loadAllJudgments, initializeValueStore } = await import('../pi-ecosystem-judgment/human-value-store.js');
+            const { listJudgmentsByStatus, initializeValueStore } = await import('../pi-ecosystem-judgment/human-value-store.js');
             await initializeValueStore();
-            const all = await loadAllJudgments();
-            // 新的在前
+            const status = (typeof req.query.status === 'string' ? req.query.status : 'all');
+            const all = await listJudgmentsByStatus(status);
             all.sort((a, b) => (b.timestamp || '').localeCompare(a.timestamp || ''));
-            res.json({ count: all.length, judgments: all });
+            res.json({ count: all.length, status, judgments: all });
         }
         catch (err) {
             console.error('[judgments] GET failed:', err);
             res.status(500).json({ error: err.message });
         }
     });
+    // 蒸馏 B 触发 (人类点按钮) — 同步执行演化对齐
+    app.post('/api/judgments/distill-from-conversation', async (req, res) => {
+        try {
+            const { channelId, messageId, recentTurns } = req.body;
+            if (!channelId) {
+                return res.status(400).json({ error: 'channelId required' });
+            }
+            // 取 channel 最近的对话
+            const channels = await loadChannels();
+            const channel = channels.find((c) => c.id === channelId);
+            if (!channel)
+                return res.status(404).json({ error: 'channel not found' });
+            const currentSessionId = channel.currentSessionId;
+            if (!currentSessionId) {
+                return res.status(400).json({ error: 'no active session in channel' });
+            }
+            const session = await loadSession(channelId, currentSessionId);
+            if (!session)
+                return res.status(404).json({ error: 'session not found' });
+            // 取最近 N 轮 (默认 10), 转成 DistillTurn 格式
+            const limit = Math.min(Math.max(recentTurns ?? 10, 2), 30);
+            const turns = session.messages.slice(-limit).map((m) => ({
+                role: (m.type === 'user' ? 'human' : 'agent'),
+                content: m.content,
+            }));
+            const { distillAndStoreFromChannel } = await import('../pi-ecosystem-judgment/human-value-pipeline.js');
+            const result = await distillAndStoreFromChannel(turns, { channelId });
+            res.json({
+                ok: true,
+                triggered: result.triggered,
+                reason: result.reason,
+                judgment: result.judgment,
+                evolved: result.evolved,
+            });
+        }
+        catch (err) {
+            console.error('[judgments] distill-from-conversation failed:', err);
+            res.status(500).json({ error: err.message });
+        }
+    });
+    // 蒸馏 D 触发 (AI 被动) — 后台异步,不阻塞 HTTP 响应
+    app.post('/api/judgments/detect-and-distill', async (req, res) => {
+        try {
+            const { channelId, turns } = req.body;
+            // 先立即返回 202, 不等 LLM
+            res.status(202).json({ ok: true, queued: true });
+            if (!channelId || !Array.isArray(turns) || turns.length === 0) {
+                return;
+            }
+            // 异步处理 (不 await, 不阻塞响应)
+            setImmediate(async () => {
+                try {
+                    const { detectAndDistillFromChannel } = await import('../pi-ecosystem-judgment/human-value-pipeline.js');
+                    const result = await detectAndDistillFromChannel(turns, { channelId });
+                    if (result.triggered) {
+                        console.log(`[D-hook] ${channelId}: ${result.reason}`, result.evolved);
+                    }
+                }
+                catch (err) {
+                    console.warn('[D-hook] background failed:', err);
+                }
+            });
+        }
+        catch (err) {
+            console.error('[judgments] detect-and-distill failed:', err);
+            res.status(500).json({ error: err.message });
+        }
+    });
+    // 判断力使用回溯 (P0.5): 给定 judgmentIds, 反查对应的 decision 文本
+    // 用途: UI 上"这条 AI 回复引用了哪些原则"
+    app.post('/api/judgments/resolve-usage', async (req, res) => {
+        try {
+            const { ids } = req.body;
+            if (!Array.isArray(ids) || ids.length === 0) {
+                return res.json({ items: [] });
+            }
+            const { loadAllJudgments } = await import('../pi-ecosystem-judgment/human-value-store.js');
+            const all = await loadAllJudgments();
+            const byId = new Map(all.map((j) => [j.id, j]));
+            const items = ids
+                .map((id) => byId.get(id))
+                .filter((j) => Boolean(j))
+                .map((j) => ({
+                id: j.id,
+                decision: j.decision,
+                status: j.status ?? 'active',
+                timestamp: j.timestamp,
+            }));
+            res.json({ items });
+        }
+        catch (err) {
+            console.error('[judgments] resolve-usage failed:', err);
+            res.status(500).json({ error: err.message });
+        }
+    });
+    // 判断力违规日志 (P3 UI): 读 violations.jsonl
+    app.get('/api/judgments/violations', async (req, res) => {
+        try {
+            const { getRecentViolations } = await import('../pi-ecosystem-judgment/monitor-gate.js');
+            const limit = Math.min(Math.max(parseInt(String(req.query.limit ?? '20'), 10) || 20, 1), 200);
+            const items = await getRecentViolations(limit);
+            res.json({ count: items.length, items });
+        }
+        catch (err) {
+            console.error('[judgments] violations failed:', err);
+            res.status(500).json({ error: err.message });
+        }
+    });
+    // 类 B 自适应扫描: 读 judgments.json + usage.jsonl, 给出 stale/rising/unused 建议
+    // ?force=1 跳过 24h 缓存
+    app.get('/api/judgments/adaptive-suggestions', async (req, res) => {
+        try {
+            const { getCachedScan } = await import('../pi-ecosystem-judgment/adaptive-scan.js');
+            const force = String(req.query.force ?? '') === '1';
+            const result = await getCachedScan(force);
+            res.json(result);
+        }
+        catch (err) {
+            console.error('[judgments] adaptive-scan failed:', err);
+            res.status(500).json({ error: err.message });
+        }
+    });
+    // Bootstrap Context 调试视图: 返出完整 BolloonContext
+    app.get('/api/bolloon/context', async (req, res) => {
+        try {
+            const { getCachedBolloonContext } = await import('../pi-ecosystem-judgment/human-value-pipeline.js');
+            const force = String(req.query.force ?? '') === '1';
+            const ctx = await getCachedBolloonContext({ cwd: process.cwd() }, force);
+            res.json(ctx);
+        }
+        catch (err) {
+            console.error('[bolloon] context failed:', err);
+            res.status(500).json({ error: err.message });
+        }
+    });
+    // 阶段 B: 周报 (weekly-report.ts 产物) — 仅 API 读取, 不做 UI tab
+    // GET /api/reports           → { files: ['2026-W24.md', ...] }
+    // GET /api/reports/2026-W24  → { week, content }
+    app.get('/api/reports', async (_req, res) => {
+        try {
+            const dir = path.join(os.homedir(), '.bolloon', 'reports');
+            try {
+                const entries = await fs.readdir(dir);
+                const files = entries
+                    .filter((f) => f.endsWith('.md'))
+                    .sort()
+                    .reverse(); // 新的在前
+                res.json({ dir, files });
+            }
+            catch {
+                res.json({ dir, files: [] });
+            }
+        }
+        catch (err) {
+            res.status(500).json({ error: err.message });
+        }
+    });
+    app.get('/api/reports/:week', async (req, res) => {
+        try {
+            const week = req.params.week;
+            // 严格校验, 防路径穿越
+            if (!/^\d{4}-W\d{1,2}$/.test(week)) {
+                return res.status(400).json({ error: 'week must match YYYY-Www' });
+            }
+            const file = path.join(os.homedir(), '.bolloon', 'reports', `${week}.md`);
+            try {
+                const content = await fs.readFile(file, 'utf-8');
+                res.json({ week, content, length: content.length });
+            }
+            catch {
+                res.status(404).json({ error: 'not found', week });
+            }
+        }
+        catch (err) {
+            res.status(500).json({ error: err.message });
+        }
+    });
+    // 阶段 C 护栏 5: auto-evolve baseline 管理 (无 UI, 仅 API)
+    // GET    /api/auto-evolve/baselines             → 列出所有 baseline tag
+    // GET    /api/auto-evolve/baselines/:tag/diff  → 看某 baseline 的 diff 摘要
+    // POST   /api/auto-evolve/rollback {tag}       → 回滚到指定 baseline
+    app.get('/api/auto-evolve/baselines', async (_req, res) => {
+        try {
+            const { execFile } = await import('child_process');
+            const { promisify } = await import('util');
+            const pExec = promisify(execFile);
+            const { stdout } = await pExec('git', [
+                'tag', '-l', 'auto-evolve-baseline-*', '--format=%(refname:short)|%(contents)|%(objectname:short)|%(taggerdate:iso)',
+            ], { cwd: process.cwd() });
+            const tags = stdout.trim().split('\n').filter(Boolean).map((line) => {
+                const [tag, msg, sha, date] = line.split('|');
+                return { tag, message: msg || '', sha, date };
+            });
+            res.json({ tags, count: tags.length });
+        }
+        catch (err) {
+            res.status(500).json({ error: err.message });
+        }
+    });
+    app.get('/api/auto-evolve/baselines/:tag/diff', async (req, res) => {
+        try {
+            const { execFile } = await import('child_process');
+            const { promisify } = await import('util');
+            const pExec = promisify(execFile);
+            const tag = req.params.tag;
+            if (!/^auto-evolve-baseline-[\w-]+$/.test(tag)) {
+                return res.status(400).json({ error: 'tag must match auto-evolve-baseline-*' });
+            }
+            const { stdout } = await pExec('git', ['show', '--stat', '--no-color', tag], { cwd: process.cwd() });
+            res.json({ tag, diff: stdout.slice(0, 5000) }); // 限长 5KB
+        }
+        catch (err) {
+            res.status(500).json({ error: err.message });
+        }
+    });
+    // Bootstrap Context → 拼好的 system prompt 片段 (供调试看注入效果)
+    app.get('/api/bolloon/context/system-prompt', async (req, res) => {
+        try {
+            const { getCachedBolloonContext } = await import('../pi-ecosystem-judgment/human-value-pipeline.js');
+            const { formatContextForSystemPrompt } = await import('../bootstrap/project-context.js');
+            const ctx = await getCachedBolloonContext({ cwd: process.cwd() });
+            const systemAddition = formatContextForSystemPrompt(ctx, {
+                maxChars: parseInt(String(req.query.max ?? '4000'), 10) || 4000,
+            });
+            res.json({ systemAddition, length: systemAddition.length, truncated: systemAddition.includes('截断模式') });
+        }
+        catch (err) {
+            console.error('[bolloon] context/system-prompt failed:', err);
+            res.status(500).json({ error: err.message });
+        }
+    });
+    // ============================================================
+    // system-prompt health (P-Action 2 — Harness Gardening)
+    // 返回每层 lifecycle 状态: ok | stale | overdue-review | missing-frontmatter | dynamic
+    // query: ?activeOnly=1 → 只返回当前 context 激活的层
+    // ============================================================
+    app.get('/api/prompt/health', async (req, res) => {
+        try {
+            const { listLayers } = await import('../llm/system-prompt/registry.js');
+            const { evaluateLayers, markActive } = await import('../llm/system-prompt/health.js');
+            const all = listLayers();
+            const baseReport = evaluateLayers(all);
+            // 如果 query 里有 activeOnly, 跑一次 assembleSystemPrompt 拿激活列表
+            if (String(req.query.activeOnly ?? '') === '1') {
+                const { assembleSystemPrompt } = await import('../llm/system-prompt/registry.js');
+                const channel = String(req.query.channel ?? 'local');
+                const role = req.query.role;
+                const tool = req.query.tool;
+                try {
+                    const r = await assembleSystemPrompt({ channel, role, tool });
+                    const activeIds = new Set(r.layerIds);
+                    res.json(markActive(baseReport, activeIds));
+                }
+                catch (err) {
+                    console.warn('[prompt-health] assembleSystemPrompt failed (silent, returning base report):', err);
+                    res.json(baseReport);
+                }
+            }
+            else {
+                res.json(baseReport);
+            }
+        }
+        catch (err) {
+            console.error('[prompt-health] failed:', err);
+            res.status(500).json({ error: err.message });
+        }
+    });
+    // 自适应接受/拒绝: 写 evolution.jsonl 留痕, 接受时同时 patch judgments.json
+    // body: { action: 'accept'|'reject'|'revert', suggestion, appliedPatch? }
+    // query: ?auto=1  → 类 B 自动路径, 受 auto-evolve-policy 网关保护
+    //         缺省    → 用户在 UI 手动触发, 不查开关 (避免阻塞用户)
+    app.post('/api/judgments/adaptive-apply', async (req, res) => {
+        try {
+            const isAuto = req.query.auto === '1' || req.query.auto === 'true';
+            const { action, suggestion, appliedPatch } = req.body;
+            if (!action || !suggestion?.judgmentId) {
+                return res.status(400).json({ error: 'action and suggestion.judgmentId required' });
+            }
+            const { updateJudgmentStatus } = await import('../pi-ecosystem-judgment/human-value-store.js');
+            const { logEvolution } = await import('../pi-ecosystem-judgment/adaptive-scan.js');
+            // accept 时: 真正改库
+            if (action === 'accept') {
+                // 阶段 A: 自动路径需先过 auto-evolve-policy 网关
+                if (isAuto) {
+                    const { requireDataLayerAutoEvolve } = await import('../utils/auto-evolve-policy.js');
+                    try {
+                        await requireDataLayerAutoEvolve('adaptive-apply.auto.deprecate');
+                    }
+                    catch (err) {
+                        return res.status(423).json({
+                            error: 'data-layer-auto-evolve-disabled',
+                            message: err.message,
+                            hint: '设 BOLLOON_AUTO_EVOLVE_DATA=1 或在 self-improve-policy.json 加 dataLayerAutoEvolve: true',
+                        });
+                    }
+                }
+                if (suggestion.action === 'deprecate') {
+                    // 标记 superseded (语义: 不再用, 但保留可回滚)
+                    await updateJudgmentStatus(suggestion.judgmentId, 'superseded', {
+                        evolutionReason: 'merged', // 借 merged 字段表达"被自适应废弃"
+                    });
+                }
+                else if (suggestion.action === 'boost') {
+                    // boost: 用户手动接受后, 不改库本身 (weight 在 getRelevantValues 里动态算),
+                    // 但写 evolution 留痕, 未来可以基于此调整算法
+                    // 当前不直接改库, 仅留痕
+                }
+                // 'review' 类不需要自动改库, 仅 log 接受
+            }
+            await logEvolution({
+                ts: new Date().toISOString(),
+                action,
+                suggestion: suggestion,
+                appliedPatch,
+            });
+            res.json({ ok: true });
+        }
+        catch (err) {
+            console.error('[judgments] adaptive-apply failed:', err);
+            res.status(500).json({ error: err.message });
+        }
+    });
+    // 演化日志 (audit / 一键回滚源)
+    app.get('/api/judgments/evolution-log', async (req, res) => {
+        try {
+            const { readEvolutionLog } = await import('../pi-ecosystem-judgment/adaptive-scan.js');
+            const limit = Math.min(Math.max(parseInt(String(req.query.limit ?? '50'), 10) || 50, 1), 200);
+            const items = await readEvolutionLog(limit);
+            res.json({ count: items.length, items });
+        }
+        catch (err) {
+            console.error('[judgments] evolution-log failed:', err);
+            res.status(500).json({ error: err.message });
+        }
+    });
+    // 阶段 2: Causal-judge 4 个 endpoint
+    app.get('/api/judgments/causal/correlation', async (req, res) => {
+        try {
+            const { runCorrelationAnalysis } = await import('../pi-ecosystem-judgment/human-value-pipeline.js');
+            const topN = Math.min(Math.max(parseInt(String(req.query.topN ?? '5'), 10) || 5, 1), 50);
+            const useLLM = String(req.query.useLLM ?? '1') !== '0';
+            const items = await runCorrelationAnalysis({ topN, useLLM });
+            res.json({ count: items.length, items });
+        }
+        catch (err) {
+            console.error('[causal] correlation failed:', err);
+            res.status(500).json({ error: err.message });
+        }
+    });
+    app.get('/api/judgments/causal/intervention', async (req, res) => {
+        try {
+            const { runIntervention } = await import('../pi-ecosystem-judgment/human-value-pipeline.js');
+            const { judgmentId, scenario } = req.query;
+            if (!judgmentId)
+                return res.status(400).json({ error: 'judgmentId required' });
+            const result = await runIntervention(judgmentId, { scenarioContext: scenario });
+            res.json(result);
+        }
+        catch (err) {
+            console.error('[causal] intervention failed:', err);
+            res.status(500).json({ error: err.message });
+        }
+    });
+    app.post('/api/judgments/causal/counterfactual', async (req, res) => {
+        try {
+            const { runCounterfactualAudit } = await import('../pi-ecosystem-judgment/human-value-pipeline.js');
+            const { userInput, aiReply, violatedPrinciples } = req.body;
+            if (!userInput || !aiReply) {
+                return res.status(400).json({ error: 'userInput and aiReply required' });
+            }
+            const audit = await runCounterfactualAudit({
+                userInput,
+                aiReply,
+                violatedPrinciples: violatedPrinciples ?? [],
+            });
+            res.json(audit);
+        }
+        catch (err) {
+            console.error('[causal] counterfactual failed:', err);
+            res.status(500).json({ error: err.message });
+        }
+    });
+    app.get('/api/judgments/causal/audit-log', async (req, res) => {
+        try {
+            const { readCounterfactualLog } = await import('../pi-ecosystem-judgment/human-value-pipeline.js');
+            const limit = Math.min(Math.max(parseInt(String(req.query.limit ?? '20'), 10) || 20, 1), 200);
+            const items = await readCounterfactualLog(limit);
+            res.json({ count: items.length, items });
+        }
+        catch (err) {
+            console.error('[causal] audit-log failed:', err);
+            res.status(500).json({ error: err.message });
+        }
+    });
     // 导入判断: 接受 { filename, content (base64), context }.
     // 支持 .json / .yaml / .yml / .md / .txt / .html. 完全离线解析, 不调 LLM.
     // 解析规则:
@@ -4398,25 +4917,192 @@ export async function createWebServer(port = 3000, options = {}) {
         const { getEventHistory } = await import('../heartbeat/self-improve-bus.js');
         res.json(getEventHistory());
     });
+    // ============================================================
+    // Permission Mode (P2.2 — UI 暴露开关)
+    // 优先级: 运行时 session 覆盖 > env BOLLOON_PERM_MODE > 'default'
+    // 运行时覆盖存在 ~/.bolloon/sessions/permission-mode.json, 每次 promptStream 入口读取
+    // ============================================================
+    const PERM_MODE_FILE = path.join(process.env.HOME || os.homedir() || '/tmp', '.bolloon', 'sessions', 'permission-mode.json');
+    function readPermModeOverride() {
+        try {
+            // 同步读, 文件很小
+            const raw = fsSync.readFileSync(PERM_MODE_FILE, 'utf-8');
+            const obj = JSON.parse(raw);
+            if (obj && typeof obj.mode === 'string') {
+                return { mode: obj.mode, ts: obj.ts || new Date().toISOString() };
+            }
+        }
+        catch { /* 不存在 = 无 override */ }
+        return null;
+    }
+    function writePermModeOverride(mode) {
+        try {
+            const dir = path.dirname(PERM_MODE_FILE);
+            fsSync.mkdirSync(dir, { recursive: true });
+            fsSync.writeFileSync(PERM_MODE_FILE, JSON.stringify({ mode, ts: new Date().toISOString() }, null, 2), 'utf-8');
+        }
+        catch (err) {
+            console.warn('[server] writePermModeOverride failed:', err);
+        }
+    }
+    // 读当前生效 mode (runtime override > env > default)
+    app.get('/api/permission-mode', async (_req, res) => {
+        const { resolvePermissionMode, ALL_PERMISSION_MODES } = await import('../agents/permission-mode.js');
+        const override = readPermModeOverride();
+        const envMode = process.env.BOLLOON_PERM_MODE || null;
+        const effective = resolvePermissionMode();
+        res.json({
+            effective,
+            override: override?.mode || null,
+            overrideTs: override?.ts || null,
+            env: envMode,
+            allowed: ALL_PERMISSION_MODES,
+            description: {
+                default: '每次工具调用询问; shell 走 shell-guard',
+                acceptEdits: 'edit_*/write_* 跳过黑名单; shell 仍走 shell-guard',
+                bypassPermissions: '非 shell 全部放行; shell 永远走 shell-guard (硬约束)',
+            },
+        });
+    });
+    // 设 runtime override (存盘, 下次 promptStream 入口读取生效)
+    app.post('/api/permission-mode', async (req, res) => {
+        const { resolvePermissionMode, ALL_PERMISSION_MODES } = await import('../agents/permission-mode.js');
+        const mode = String(req.body?.mode || '');
+        if (!ALL_PERMISSION_MODES.includes(mode)) {
+            return res.status(400).json({
+                error: `Invalid mode. Allowed: ${ALL_PERMISSION_MODES.join(', ')}`,
+                allowed: ALL_PERMISSION_MODES,
+            });
+        }
+        const oldMode = readPermModeOverride()?.mode || process.env.BOLLOON_PERM_MODE || 'default';
+        writePermModeOverride(mode);
+        // 写历史 (append-only JSONL, 跟 bolloon 其他 audit 一致)
+        try {
+            const HISTORY_FILE = path.join(process.env.HOME || os.homedir() || '/tmp', '.bolloon', 'sessions', 'permission-mode-history.jsonl');
+            fsSync.mkdirSync(path.dirname(HISTORY_FILE), { recursive: true });
+            fsSync.appendFileSync(HISTORY_FILE, JSON.stringify({
+                ts: new Date().toISOString(),
+                from: oldMode,
+                to: mode,
+                source: 'api',
+            }) + '\n', 'utf-8');
+        }
+        catch { /* 历史写失败不阻塞主流程 */ }
+        console.log(`[server] permission-mode override set to "${mode}" via API (was "${oldMode}")`);
+        res.json({
+            ok: true,
+            mode,
+            previousMode: oldMode,
+            ts: new Date().toISOString(),
+            note: '新 mode 在下一次 promptStream 入口生效 (不打断当前对话)',
+        });
+    });
+    // 取消 runtime override, 回到 env 或 default
+    app.delete('/api/permission-mode', async (_req, res) => {
+        const oldMode = readPermModeOverride()?.mode || process.env.BOLLOON_PERM_MODE || 'default';
+        try {
+            if (fsSync.existsSync(PERM_MODE_FILE))
+                fsSync.unlinkSync(PERM_MODE_FILE);
+        }
+        catch (err) {
+            console.warn('[server] delete perm-mode override failed:', err);
+        }
+        // 写历史
+        try {
+            const HISTORY_FILE = path.join(process.env.HOME || os.homedir() || '/tmp', '.bolloon', 'sessions', 'permission-mode-history.jsonl');
+            fsSync.mkdirSync(path.dirname(HISTORY_FILE), { recursive: true });
+            fsSync.appendFileSync(HISTORY_FILE, JSON.stringify({
+                ts: new Date().toISOString(),
+                from: oldMode,
+                to: 'env-or-default',
+                source: 'api',
+                action: 'delete-override',
+            }) + '\n', 'utf-8');
+        }
+        catch { /* ignore */ }
+        res.json({ ok: true, note: '已删除 runtime override, 回到 env / default' });
+    });
+    // 2026-06-16: 循环检查 — GET /api/loop/inspect?channelId=...
+    // 返回最近一轮 ReAct loop 的产出: 步骤 / 工具调用 / 压缩摘要 / 最终回复 / token 用量.
+    // 用于前端 status bar 的「✓ 检查」按钮弹 modal.
+    app.get('/api/loop/inspect', async (req, res) => {
+        try {
+            const channelId = String(req.query.channelId || '');
+            if (!channelId)
+                return res.status(400).json({ error: 'channelId required' });
+            const s = channelRunState.get(channelId);
+            if (!s)
+                return res.json({ summary: '该 channel 无活跃 loop', steps: [], finalReply: '' });
+            const steps = (s.lastSteps || []).map((st) => ({
+                name: st.name || st.tool || 'step',
+                status: st.status || 'completed',
+                durationMs: st.durationMs,
+                output: st.output || st.result || '',
+            }));
+            res.json({
+                summary: s.lastSummary || (s.running ? 'loop 仍在运行中' : 'loop 已结束'),
+                steps,
+                finalReply: s.lastFinalReply || '',
+                tokens: s.lastTokens || {},
+            });
+        }
+        catch (err) {
+            res.status(500).json({ error: err.message });
+        }
+    });
+    // 历史 (类似 self-improve history, 供前端 timeline)
+    app.get('/api/permission-mode/history', async (_req, res) => {
+        const HISTORY_FILE = path.join(process.env.HOME || os.homedir() || '/tmp', '.bolloon', 'sessions', 'permission-mode-history.jsonl');
+        try {
+            if (!fsSync.existsSync(HISTORY_FILE))
+                return res.json([]);
+            const lines = fsSync.readFileSync(HISTORY_FILE, 'utf-8').split('\n').filter(Boolean);
+            const entries = lines.map((l) => {
+                try {
+                    return JSON.parse(l);
+                }
+                catch {
+                    return null;
+                }
+            }).filter(Boolean);
+            res.json(entries.slice(-50)); // 最近 50 条
+        }
+        catch (err) {
+            res.json([]);
+        }
+    });
     // 健康检查错误数 ≥ 2 -> 触发自改信号
+    // 2026-06-16: 自迭代默认关 (用户模式), 仅 BOLLOON_DEV_MODE=1 或 selfImprove=true 启动项才装 callback
     if (healthMonitor) {
-        healthMonitor.startPeriodicCheck(60000, (status) => {
-            const errorCount = Object.values(status.checks)
-                .filter((c) => c.status === 'error').length;
-            if (errorCount >= 2) {
-                import('../heartbeat/self-improve-bus.js').then(({ reportSelfImproveEvent }) => {
-                    const failedKeys = Object.entries(status.checks)
-                        .filter(([_, c]) => c.status === 'error').map(([k]) => k).join(', ');
-                    reportSelfImproveEvent({
-                        kind: 'silent-timeout',
-                        details: `健康检查有 ${errorCount} 项失败: ${failedKeys}`
+        if (selfImproveEnabled) {
+            healthMonitor.startPeriodicCheck(60000, (status) => {
+                const errorCount = Object.values(status.checks)
+                    .filter((c) => c.status === 'error').length;
+                if (errorCount >= 2) {
+                    import('../heartbeat/self-improve-bus.js').then(({ reportSelfImproveEvent }) => {
+                        const failedKeys = Object.entries(status.checks)
+                            .filter(([_, c]) => c.status === 'error').map(([k]) => k).join(', ');
+                        reportSelfImproveEvent({
+                            kind: 'silent-timeout',
+                            details: `健康检查有 ${errorCount} 项失败: ${failedKeys}`
+                        });
                     });
-                });
-            }
-        });
+                }
+            });
+        }
+        else {
+            // 用户模式: 只跑监控不打自改信号, 心跳仍工作
+            healthMonitor.startPeriodicCheck(60000);
+            console.log('[24h] Health monitor periodic check (no self-improve)');
+        }
+    }
+    // 安装自改总线 -> SSE 桥 (开发者模式才装, 用户模式靠 /api/self-improve/trigger 手动触发)
+    if (selfImproveEnabled) {
+        void installSelfImproveHook();
+    }
+    else {
+        console.log('[self-improve] 用户模式, installSelfImproveHook 跳过 (可用 POST /api/self-improve/trigger 手动触发)');
     }
-    // 安装自改总线 -> SSE 桥
-    void installSelfImproveHook();
     // 端口冲突时自动找下一个可用端口（最多 10 次），避免 EADDRINUSE 直接崩溃
     return new Promise((resolve, reject) => {
         const maxAttempts = 10;
@@ -4436,11 +5122,28 @@ export async function createWebServer(port = 3000, options = {}) {
                 console.log('服务器已监听');
                 // 安装 chat bus -> SSE 桥 (供前端 inbox UI 实时刷新)
                 void installChatBusHook();
+                // 2026-06-16: ping 改为 data: {"type":"ping"} — 之前是 SSE 注释格式 (: ping\n\n),
+                //   浏览器 EventSource 不触发 onmessage, 客户端 60s 阈值 (现已 30s) 误判死链.
+                //   改后前端 onmessage 收到 ping 就重置 lastEventTime, 真死链才 30s 后重建.
                 setInterval(() => {
                     for (const client of sseClients) {
-                        client.res.write(': ping\n\n');
+                        try {
+                            client.res.write('data: {"type":"ping"}\n\n');
+                        }
+                        catch (err) {
+                            // socket 已断, 跳过 — client 端 onerror 会触发重连
+                            console.warn('[SSE ping] write 失败, 跳过该客户端:', err.message);
+                        }
                     }
                 }, 30000);
+                // 2026-06-16: 全局捕获 socket error 事件, 避免未处理 EPIPE/ETIMEDOUT 让进程崩
+                currentServer.on('clientError', (err, socket) => {
+                    console.warn('[server] clientError:', err.code, err.message);
+                    try {
+                        socket.end();
+                    }
+                    catch { }
+                });
                 resolve({ app, server: currentServer, port: currentPort });
             });
         };