@bolloon/bolloon-agent 0.1.34 → 0.1.36

package/src/web/server.ts

@@ -5,6 +5,7 @@ import { fileURLToPath } from 'url';
 import * as fs from 'fs/promises';
 import * as fsSync from 'fs';
 import * as path from 'path';
+import * as os from 'os';
 import {
   HyperswarmCommunicator,
   createHyperswarmCommunicator,
@@ -39,14 +40,14 @@ function resolveWebRoot(): string {
   }
   const d = _baseDirname;
   const candidates = [
-    path.join(d),                                    // dist/web
-    path.join(d, '..', '..', 'dist', 'web'),         // src/web → dist/web
+    path.join(d, '..', '..', 'dist', 'web'),         // 2026-06-15 优先: src/web → dist/web (build 产物)
+    path.join(d),                                    // dist/web (npm 跑时)
     path.join(d, '..', 'web'),                       // dist/ → web/ 兄弟
   ];
   for (const c of candidates) {
     if (fsSync.existsSync(path.join(c, 'index.html'))) return c;
   }
-  return candidates[1];
+  return candidates[0];
 }
 const webRoot = resolveWebRoot();
 console.log(`[web] webRoot = ${webRoot}`);
@@ -237,11 +238,10 @@ async function saveTheme(theme: 'light' | 'dark', agentId: string): Promise<void
 // ==================== Task Queue & Workflow System ====================
 
 const TASK_QUEUE_PATH = path.join(SHARED_SESSION_PATH, 'task-queue.json');
-const WORKFLOW_STATE_PATH = path.join(SHARED_SESSION_PATH, 'workflow-state.json');
 
 interface Task {
   id: string;
-  type: 'read' | 'summarize' | 'improve' | 'chat' | 'workflow';
+  type: 'read' | 'summarize' | 'improve' | 'chat';
   title: string;
   description?: string;
   status: 'pending' | 'running' | 'completed' | 'failed' | 'paused';
@@ -250,23 +250,10 @@ interface Task {
   error?: string;
   createdAt: string;
   updatedAt: string;
-  steps?: TaskStep[];
+  steps?: any[];
   currentStep?: number;
 }
 
-interface TaskStep {
-  id: string;
-  name: string;
-  status: 'pending' | 'running' | 'completed' | 'failed';
-  result?: string;
-}
-
-interface WorkflowState {
-  channelId: string;
-  tasks: Task[];
-  lastUpdated: string;
-}
-
 async function loadTaskQueue(): Promise<Task[]> {
   try {
     const data = await fs.readFile(TASK_QUEUE_PATH, 'utf-8');
@@ -280,32 +267,6 @@ async function saveTaskQueue(tasks: Task[]): Promise<void> {
   await fs.writeFile(TASK_QUEUE_PATH, JSON.stringify(tasks, null, 2));
 }
 
-async function loadWorkflowState(channelId: string): Promise<WorkflowState | null> {
-  try {
-    const data = await fs.readFile(WORKFLOW_STATE_PATH, 'utf-8');
-    const states = JSON.parse(data) as WorkflowState[];
-    return states.find(s => s.channelId === channelId) || null;
-  } catch {
-    return null;
-  }
-}
-
-async function saveWorkflowState(state: WorkflowState): Promise<void> {
-  try {
-    const data = await fs.readFile(WORKFLOW_STATE_PATH, 'utf-8');
-    const states = JSON.parse(data) as WorkflowState[];
-    const index = states.findIndex(s => s.channelId === state.channelId);
-    if (index >= 0) {
-      states[index] = state;
-    } else {
-      states.push(state);
-    }
-    await fs.writeFile(WORKFLOW_STATE_PATH, JSON.stringify(states, null, 2));
-  } catch {
-    await fs.writeFile(WORKFLOW_STATE_PATH, JSON.stringify([state], null, 2));
-  }
-}
-
 let isExecutingTask = false;
 let executionTaskId: string | null = null;
 
@@ -354,37 +315,6 @@ async function executeTask(task: Task, channelId: string): Promise<void> {
         }
         break;
 
-      case 'workflow':
-        // 执行多步骤工作流
-        if (task.steps && task.steps.length > 0) {
-          let loopCount = 0;
-          for (let i = 0; i < task.steps.length; i++) {
-            // 广播循环开始
-            loopCount++;
-            broadcast({ type: 'workflow_loop', loopCount, content: `开始步骤 ${i + 1}/${task.steps.length}: ${task.steps[i].name}` }, channelId);
-
-            task.steps[i].status = 'running';
-            broadcast({ type: 'task_status', taskId: task.id, status: 'running', currentStep: i, totalSteps: task.steps.length }, channelId);
-            broadcast({ type: 'workflow_step', step: `步骤 ${i + 1}`, content: `执行中: ${task.steps[i].name}` }, channelId);
-
-            // 执行步骤 - 模拟流式输出
-            for (let j = 0; j < 3; j++) {
-              await new Promise(resolve => setTimeout(resolve, 300));
-              broadcast({ type: 'workflow_step', step: `步骤 ${i + 1}`, content: `执行中... (${(j + 1) * 33}%)` }, channelId);
-            }
-
-            task.steps[i].status = 'completed';
-            task.progress = Math.round(((i + 1) / task.steps.length) * 100);
-
-            broadcast({ type: 'workflow_step', step: `步骤 ${i + 1}`, content: `✅ 完成: ${task.steps[i].name}` }, channelId);
-            broadcast({ type: 'workflow_loop', loopCount, status: 'completed', content: `步骤 ${i + 1} 完成` }, channelId);
-            broadcast({ type: 'task_status', taskId: task.id, progress: task.progress }, channelId);
-          }
-          result = '✅ 工作流执行完成';
-          broadcast({ type: 'workflow_loop', loopCount, status: 'finished', content: result }, channelId);
-        }
-        break;
-
       default:
         result = '未知任务类型';
     }
@@ -791,7 +721,7 @@ async function handleV3P2PMessage(parsed: any, conn: P2PConnection, comm: Hypers
       const { getMinimax } = await import('../constraints/index.js');
       const llm = getMinimax();
       // v3 新增: 在 prompt 头部标记"这是远端访客", 让 AI 知道对方不是自己 owner
-      const visitorHint = `[系统上下文] 消息来源: 远端访客 (P2P 连接, publicKey=${senderKey.substring(0, 12)}...). 对方不是你 owner, 是通过 P2P 网络访问你这个 channel 的合作者. 称呼对方时可用 "远端访客" / "朋友" / "合作者", 不要叫 "主人".\n\n`;
+      const visitorHint = `[系统上下文] 消息来源: 远端访客 (P2P 连接, publicKey=${senderKey.substring(0, 12)}...). 对方不是你 owner, 是通过 P2P 网络访问你这个 channel 的合作者. 称呼对方时可用 "远端访客" / "朋友" / "合作者", 不要叫 "用户".\n\n`;
       // v3 新增: 也注入 channel 目录给 LLM (B 的 channel 也可以 @-mention 其他)
       let dirHint = '';
       const localChannels = (await loadChannels()).filter(c => c.id !== channelId);
@@ -812,11 +742,20 @@ async function handleV3P2PMessage(parsed: any, conn: P2PConnection, comm: Hypers
         }
         dirHint += '语法: 在回复中写 "@渠道名 我要说的话" 即可. 消息会持久化到目标 channel 的 session.\n\n';
       }
-      const fullPrompt = `${visitorHint}${dirHint}${judgmentHint}${text}`;
+      // 2026-06-15: P2P 远端访客路径也用显式 marker 包裹 text
+      // 2026-06-15 二次修: 把 text 放在最前 (与主路径 server.ts:1868 对齐),
+      //   避免 LLM 被 judgmentHint 末尾的 "..." 误判为整个 input 被截断
+      const fullPrompt = `【本轮用户请求】\n${text}\n【请求结束】\n\n${visitorHint}${dirHint}${judgmentHint}\n`;
       let fullResponse = '';
       // v3 新增: 流式 token 节流推给 B — 让 B 看到过程
       let lastFlushAt = 0;
+      let usedJudgmentIds: string[] = [];
       const streamCallback: any = (event: any) => {
+        // P0.5: 注入门回传
+        if (event?.type === 'used_judgments' && Array.isArray(event.usedIds)) {
+          usedJudgmentIds = event.usedIds;
+          return;
+        }
         if (event.type === 'token') {
           fullResponse += event.content;
           if (fullResponse.length - lastFlushAt >= 20) {
@@ -830,7 +769,7 @@ async function handleV3P2PMessage(parsed: any, conn: P2PConnection, comm: Hypers
         }
       };
       const agent = await getAgentForChannel(channelId, ch.did || '', ch.name, ch.didDocRef);
-      fullResponse = await agent.promptStream(fullPrompt, streamCallback);
+      fullResponse = await agent.promptStream(fullPrompt, streamCallback, undefined, channelId);
 
       // v3 新增: 存 A 的 assistant 消息到 session — B 拉历史时能看到完整对话
       try {
@@ -842,6 +781,7 @@ async function handleV3P2PMessage(parsed: any, conn: P2PConnection, comm: Hypers
           id: `msg-${Date.now()}-${Math.random().toString(36).slice(2, 6)}`,
           type: 'ai',
           content: fullResponse,
+          ...(usedJudgmentIds.length > 0 ? { metadata: { usedJudgmentIds } } : {}),
           timestamp: new Date().toISOString()
         });
         session.lastUpdated = new Date().toISOString();
@@ -1170,6 +1110,18 @@ export async function createWebServer(port: number = 3000, options: CreateWebSer
     console.error('[警告] 未处理的 Promise 拒绝:', reason);
   });
 
+  // Bolloon Bootstrap (幂等, 重复调不会重复挂定时器)
+  // 这里独立调一次以保证 CLI-only 模式 (无 index.ts 引导) 也能 bootstrap
+  try {
+    const { bootstrapBolloon } = await import(
+      '../pi-ecosystem-judgment/human-value-pipeline.js'
+    );
+    const bs = await bootstrapBolloon({ cwd: process.cwd() });
+    console.log(`[createWebServer] bootstrap 完成 (${bs.durationMs}ms)`);
+  } catch (err) {
+    console.warn('[createWebServer] bootstrap 失败 (非致命):', err);
+  }
+
   // 重置旧的 agent session，确保使用新的 LLM 配置
   const { resetAgentSession } = await import('../agents/pi-sdk.js');
   resetAgentSession();
@@ -1630,11 +1582,42 @@ export async function createWebServer(port: number = 3000, options: CreateWebSer
     // 捕获外层 channel 到独立变量, 避免被 try 块内 (line 740+) 的 const channel 遮蔽
     const channelForJudgment = channel;
 
+    // per-channel queue 检查: 已在跑就入队, 等当前跑完自动接上
+    const runState = getOrCreateRunState(channelId);
+    if (runState.running) {
+      runState.queue.push({ channelId, text, boundWalletAddress, autoToolsEnabled });
+      broadcastQueueUpdate(channelId);
+      console.log(`[queue] /message 入队 channel=${channelId}, queue len=${runState.queue.length}`);
+      return;
+    }
+    runState.running = true;
+    runState.abortController = new AbortController();
+    broadcastQueueUpdate(channelId);
+
     try {
       const agent = await getAgentForChannel(channelId, realChannelDid, realChannelName, realChannelDidDoc);
       let fullResponse = '';
+      // P0.5: 注入门回传的 usedIds, 落 session message metadata, UI 可查
+      let usedJudgmentIds: string[] = [];
 
       const streamCallback: StreamCallback = (event: StreamEvent) => {
+        // P0.5: 捕获注入门回传
+        if ((event as any).type === 'used_judgments' && Array.isArray((event as any).usedIds)) {
+          usedJudgmentIds = (event as any).usedIds;
+          // 同步推给前端 (用于 finalizeTimelineAsMessage 时给 addMessage 传 usedIds)
+          broadcast({ type: 'used_judgments', usedIds: usedJudgmentIds }, channelId);
+          return;
+        }
+        // 阶段事件 (注入门 / D 触发)
+        if ((event as any).type === 'phase') {
+          broadcast({
+            type: 'phase',
+            phase: (event as any).phase,
+            detail: (event as any).detail,
+            usedCount: (event as any).usedCount,
+          }, channelId);
+          return;
+        }
         // 同时发送给流式显示和工作流显示
         if (event.type === 'token' || event.type === 'thinking') {
           broadcast({ type: 'stream', streamType: event.type, content: event.content }, channelId);
@@ -1646,6 +1629,32 @@ export async function createWebServer(port: number = 3000, options: CreateWebSer
           broadcast({ type: 'status', tool: event.tool, content: event.content }, channelId);
           broadcast({ type: 'workflow_step', step: event.tool || '系统', content: event.content }, channelId);
           console.log(`[SSE 广播] workflow_step: step=${event.tool}, content="${event.content?.substring(0, 80)}..."`);
+        } else if (event.type === 'step_start' || event.type === 'step_done' || event.type === 'step_error') {
+          // 2026-06-15: 步骤状态机事件 — 原样转发 (前端 step-timeline 组件订阅)
+          broadcast({
+            type: event.type,
+            tool: event.tool,
+            content: event.content,
+            success: event.success,
+            output: event.output,
+            error: event.error,
+            args: event.args,
+          }, channelId);
+          // 2026-06-16: 累积 step 到 runState, 供 /api/loop/inspect 读取
+          try {
+            if (event.type === 'step_done' || event.type === 'step_error') {
+              const rs = channelRunState.get(channelId);
+              if (rs) {
+                if (!rs.lastSteps) rs.lastSteps = [];
+                rs.lastSteps.push({
+                  name: String(event.tool || event.content || 'step').slice(0, 60),
+                  status: event.type === 'step_error' ? 'failed' : (event.success === false ? 'failed' : 'ok'),
+                  durationMs: typeof event.durationMs === 'number' ? event.durationMs : undefined,
+                  output: event.output ? String(event.output).slice(0, 800) : (event.error ? String(event.error).slice(0, 800) : undefined),
+                });
+              }
+            }
+          } catch { /* non-fatal */ }
         } else if (event.type === 'error') {
           broadcast({ type: 'error', content: event.content }, channelId);
         }
@@ -1657,7 +1666,7 @@ export async function createWebServer(port: number = 3000, options: CreateWebSer
       let contextHint = '';
       if (realChannelDid) contextHint += `[系统上下文] 当前频道名称: ${realChannelName}, 你的真实 DID: ${realChannelDid}\n`;
       // v3 新增: 标识发送方 — 让 AI 分清内部 owner vs 远端访客
-      contextHint += `[系统上下文] 消息来源: 本地 (channel 内部 owner / 此机器上的用户). 称呼对方时用 "你" 或 "主人" 即可.\n`;
+      contextHint += `[系统上下文] 消息来源: 本地 (channel 内部 owner / 此机器上的用户). 称呼对方时用 "你" 或 "用户" 即可.\n`;
       if (boundWalletAddress) {
         contextHint += `[系统上下文] 已绑定的加密钱包地址: ${boundWalletAddress}。当用户授权或启用自动工具调用时, 可使用该地址发起链上操作。\n`;
       }
@@ -1796,7 +1805,26 @@ export async function createWebServer(port: number = 3000, options: CreateWebSer
       }
 
       if (contextHint) contextHint += '\n';
-      fullResponse = await agent.promptStream(contextHint + text, streamCallback);
+      try {
+        // 2026-06-15: 把 user text 单独 marker 包起来, LLM 不会被 8K+ 的 system context 吞掉
+        //   (之前 contextHint + text 拼成一整段当 user role, 24 字符的 user input 埋在 8K+ 里看不出)
+        //   修法: contextHint 当 "背景信息", text 当 "本轮用户请求" — 显式 marker 让 LLM 区分
+        // 2026-06-15 二次修: 把 text 放在最前 (LLM 看到 input 第一眼是 user text, 不会被 judgmentHint 末尾
+        //   的 "..." 误判为整个 input 截断)
+        const markedPrompt = `【本轮用户请求】\n${text}\n【请求结束】\n\n${contextHint}`;
+        fullResponse = await agent.promptStream(markedPrompt, streamCallback, runState.abortController?.signal, channelId);
+      } catch (err: any) {
+        // abort 抛错: 保留已输出的部分 (fullResponse 可能是空字符串)
+        if (runState.abortController?.signal.aborted || err?.name === 'AbortError') {
+          console.log(`[chat] aborted channel=${channelId}`);
+        } else {
+          throw err;
+        }
+      }
+      // abort 模式: 给 partial 拼后缀
+      if (runState.abortController?.signal.aborted && fullResponse.trim().length > 0) {
+        fullResponse = fullResponse + '\n\n_[生成已中断]_';
+      }
 
       // v3 新增: 解析 LLM 回复里的 @-mentions, 转发到目标 channel
       await routeMentionsInReply(channelId, fullResponse, localChannels, remoteChannels);
@@ -1808,7 +1836,15 @@ export async function createWebServer(port: number = 3000, options: CreateWebSer
       session.sessionId = currentSessionId;
       // v3: 加 source 标记 (local = 内部 owner, remote = 远端访客)
       session.messages.push({ id: crypto.randomUUID(), type: 'user' as const, content: text, timestamp: new Date().toISOString(), source: 'local' as any });
-      session.messages.push({ id: crypto.randomUUID(), type: 'ai' as const, content: fullResponse, timestamp: new Date().toISOString(), source: 'local' as any });
+      session.messages.push({
+        id: crypto.randomUUID(),
+        type: 'ai' as const,
+        content: fullResponse,
+        timestamp: new Date().toISOString(),
+        source: 'local' as any,
+        // P0.5: 这条 AI 回复引用了哪些 judgment (注入门回传)
+        ...(usedJudgmentIds.length > 0 ? { metadata: { usedJudgmentIds } } : {}),
+      });
       session.lastUpdated = new Date().toISOString();
       await saveSession(session);
 
@@ -1823,12 +1859,62 @@ export async function createWebServer(port: number = 3000, options: CreateWebSer
       }
 
       broadcast({ type: 'done' }, channelId);
+
+      // D 触发: AI 被动捕获判断力 (后台异步, 不阻塞主对话)
+      setImmediate(() => {
+        try {
+          const lastTurns = session.messages.slice(-6).map((m) => ({
+            role: (m.type === 'user' ? 'human' : 'agent') as 'human' | 'agent',
+            content: m.content,
+          }));
+          if (lastTurns.length < 2) return;
+          broadcast({ type: 'phase', phase: 'd_detect', detail: '监测对话...' }, channelId);
+          import('../pi-ecosystem-judgment/human-value-pipeline.js')
+            .then(async ({ detectAndDistillFromChannel, throttleDHook }) => {
+              // channel 维度 5min 节流, 防对话卡顿时 LLM 反复触发
+              if (!throttleDHook(channelId, 5 * 60_000)) {
+                console.log(`[D-hook ${channelId}] throttled (within 5min)`);
+                broadcast({ type: 'phase', phase: 'd_skip', detail: 'throttled' }, channelId);
+                return null;
+              }
+              broadcast({ type: 'phase', phase: 'd_distill', detail: '蒸馏判断力...' }, channelId);
+              return detectAndDistillFromChannel(lastTurns, { channelId });
+            })
+            .then((result) => {
+              if (result && result.triggered) {
+                console.log(
+                  `[D-hook ${channelId}] stored: ${result.reason}`,
+                  result.evolved
+                );
+                broadcast({ type: 'phase', phase: 'd_done', detail: result.reason }, channelId);
+              } else if (result && result.reason) {
+                console.log(`[D-hook ${channelId}] skipped: ${result.reason}`);
+                broadcast({ type: 'phase', phase: 'd_skip', detail: result.reason }, channelId);
+              }
+            })
+            .catch((err) => {
+              console.warn(`[D-hook ${channelId}] failed:`, err);
+              broadcast({ type: 'phase', phase: 'd_error', detail: String(err) }, channelId);
+            });
+        } catch (err) {
+          console.warn(`[D-hook ${channelId}] sync error:`, err);
+        }
+      });
+
       // 2026-06-11: 202 已发的话, 不要重复 res.json (会抛 ERR_HTTP_HEADERS_SENT)
       if (!res.headersSent) res.json({ ok: true });
     } catch (err: any) {
       broadcast({ type: 'error', content: err.message }, channelId);
       broadcast({ type: 'done' }, channelId);
       if (!res.headersSent) res.status(500).json({ error: err.message });
+    } finally {
+      // queue dequeue: 跑完或失败都要清状态
+      // 当前实现: 自动接下一条需要把 ~200 行 try 块抽函数, 暂不抽.
+      // 替代: 用户点 [队列 +N] 按钮时, 客户端发起一个特殊的 HTTP 请求触发下一条
+      // (在 client.js 实现). 这里只清状态 + 广播.
+      runState.running = false;
+      runState.abortController = null;
+      broadcastQueueUpdate(channelId);
     }
   });
 
@@ -1840,6 +1926,41 @@ export async function createWebServer(port: number = 3000, options: CreateWebSer
   let didFixRunning = false;
   let didFixTimer: NodeJS.Timeout | null = null;
 
+  // ---------- per-channel 消息 queue + abort 状态 ----------
+  // 同 channel 串行 (避免 LLM 调用互踩上下文), 跨 channel 互不干扰
+  interface PendingMessage {
+    channelId: string;
+    text: string;
+    boundWalletAddress?: string;
+    autoToolsEnabled?: boolean;
+    // (req, res 已经在 /message 里 res.status(202) 返回, 入队的只是要重跑的内容参数)
+  }
+  interface ChannelRunState {
+    running: boolean;
+    queue: PendingMessage[];
+    abortController: AbortController | null;
+    // 2026-06-16: loop 检查 — 最近一轮的步骤/摘要/最终回复/token
+    lastSteps?: Array<{ name: string; status: string; durationMs?: number; output?: string }>;
+    lastSummary?: string;
+    lastFinalReply?: string;
+    lastTokens?: { input?: number; output?: number };
+  }
+  const channelRunState: Map<string, ChannelRunState> = new Map();
+  function getOrCreateRunState(channelId: string): ChannelRunState {
+    let s = channelRunState.get(channelId);
+    if (!s) {
+      s = { running: false, queue: [], abortController: null, lastSteps: [], lastSummary: '', lastFinalReply: '', lastTokens: {} };
+      channelRunState.set(channelId, s);
+    }
+    return s;
+  }
+  function broadcastQueueUpdate(channelId: string): void {
+    const s = channelRunState.get(channelId);
+    const queueLength = s ? s.queue.length : 0;
+    const running = s ? s.running : false;
+    try { broadcast({ type: 'queue_update', channelId, queueLength, running }, channelId); } catch { /* */ }
+  }
+
   function scheduleDidFix(channelId: string) {
     didFixQueue.add(channelId);
     if (didFixTimer) return;
@@ -2555,20 +2676,39 @@ app.get('/channels', async (_req, res) => {
 
       const agent = await getAgentForChannel(channelId, realChannelDid, realChannelName, realChannelDidDoc);
       let fullResponse = '';
+      let usedJudgmentIds: string[] = [];
 
       const streamCallback: StreamCallback = (event: StreamEvent) => {
+        // P0.5: 注入门回传
+        if ((event as any).type === 'used_judgments' && Array.isArray((event as any).usedIds)) {
+          usedJudgmentIds = (event as any).usedIds;
+          return;
+        }
         if (event.type === 'token' || event.type === 'thinking') {
           broadcast({ type: 'stream', streamType: event.type, content: event.content }, channelId);
         } else if (event.type === 'status' || event.type === 'tool') {
           broadcast({ type: 'status', tool: event.tool, content: event.content }, channelId);
+        } else if (event.type === 'step_start' || event.type === 'step_done' || event.type === 'step_error') {
+          // 2026-06-15: 步骤状态机事件 — 原样转发
+          broadcast({
+            type: event.type,
+            tool: event.tool,
+            content: event.content,
+            success: event.success,
+            output: event.output,
+            error: event.error,
+            args: event.args,
+          }, channelId);
         } else if (event.type === 'error') {
           broadcast({ type: 'error', content: event.content }, channelId);
         }
       };
 
       // 重新生成时只发送用户消息 (v3: 同时注入 channel 绑定的判断力)
+      // 2026-06-15: 同 /message 路径, 用显式 marker 包裹 userMessage, 避免 LLM 把它当背景信息
       const regenHint = await buildJudgmentHint(channel, channelId);
-      fullResponse = await agent.promptStream(regenHint + userMessage, streamCallback);
+      const markedRegen = `${regenHint}\n\n【本轮用户请求】\n${userMessage}\n【请求结束】\n`;
+      fullResponse = await agent.promptStream(markedRegen, streamCallback, undefined, channelId);
 
       broadcast({ type: 'ai', content: fullResponse }, channelId);
 
@@ -2584,7 +2724,8 @@ app.get('/channels', async (_req, res) => {
           id: crypto.randomUUID(),
           type: 'ai' as const,
           content: fullResponse,
-          timestamp: new Date().toISOString()
+          timestamp: new Date().toISOString(),
+          ...(usedJudgmentIds.length > 0 ? { metadata: { usedJudgmentIds } } : {}),
         });
         existingSession.lastUpdated = new Date().toISOString();
         await saveSession(existingSession);
@@ -2755,46 +2896,6 @@ app.get('/channels', async (_req, res) => {
     }
   });
 
-  // 创建并执行工作流
-  app.post('/api/workflow', async (req, res) => {
-    try {
-      const { channelId, title, steps } = req.body;
-      if (!channelId || !steps || !Array.isArray(steps)) {
-        return res.status(400).json({ error: 'channelId and steps required' });
-      }
-
-      const tasks = await loadTaskQueue();
-      const task: Task = {
-        id: `wf_${Date.now()}_${Math.random().toString(36).substring(2, 8)}`,
-        type: 'workflow',
-        title: title || '工作流',
-        description: `包含 ${steps.length} 个步骤的工作流`,
-        status: 'pending',
-        progress: 0,
-        createdAt: new Date().toISOString(),
-        updatedAt: new Date().toISOString(),
-        steps: steps.map((s: string, i: number) => ({
-          id: `step_${i}`,
-          name: s,
-          status: 'pending'
-        })),
-        currentStep: 0
-      };
-
-      tasks.push(task);
-      await saveTaskQueue(tasks);
-
-      // 自动开始执行
-      if (!isExecutingTask) {
-        executeTask(task, channelId);
-      }
-
-      res.json({ ok: true, task });
-    } catch (err: any) {
-      res.status(500).json({ error: err.message });
-    }
-  });
-
   // ==================== LLM 配置 API ====================
 
   // 获取所有 LLM 配置
@@ -4002,7 +4103,24 @@ app.get('/channels', async (_req, res) => {
     }
   });
 
-  // 主人审阅: 批准 draft
+  // 终止当前 channel 的 LLM 流 (UI 终止按钮)
+  app.post('/api/chat/abort', async (req, res) => {
+    try {
+      const { channelId } = req.body as { channelId?: string };
+      if (!channelId) return res.status(400).json({ error: 'channelId required' });
+      const s = channelRunState.get(channelId);
+      if (s?.abortController) {
+        s.abortController.abort();
+        console.log(`[abort] user aborted channel=${channelId}`);
+        return res.json({ ok: true, aborted: true });
+      }
+      res.json({ ok: true, aborted: false });
+    } catch (err: any) {
+      res.status(500).json({ error: err.message });
+    }
+  });
+
+  // 用户审阅: 批准 draft
   app.post('/api/chat/approve', async (req, res) => {
     try {
       const { messageId, peerDID, finalText } = req.body || {};
@@ -4015,7 +4133,7 @@ app.get('/channels', async (_req, res) => {
     }
   });
 
-  // 主人审阅: 丢弃 draft
+  // 用户审阅: 丢弃 draft
   app.post('/api/chat/dismiss', async (req, res) => {
     try {
       const { messageId, peerDID } = req.body || {};
@@ -4417,22 +4535,467 @@ app.get('/channels', async (_req, res) => {
     }
   });
 
-  app.get('/api/judgments', async (_req, res) => {
+  app.get('/api/judgments', async (req, res) => {
     try {
-      const { loadAllJudgments, initializeValueStore } = await import(
+      const { listJudgmentsByStatus, initializeValueStore } = await import(
         '../pi-ecosystem-judgment/human-value-store.js'
       );
       await initializeValueStore();
-      const all = await loadAllJudgments();
-      // 新的在前
+      const status = (typeof req.query.status === 'string' ? req.query.status : 'all') as
+        | 'active'
+        | 'pending'
+        | 'superseded'
+        | 'rejected'
+        | 'all';
+      const all = await listJudgmentsByStatus(status);
       all.sort((a, b) => (b.timestamp || '').localeCompare(a.timestamp || ''));
-      res.json({ count: all.length, judgments: all });
+      res.json({ count: all.length, status, judgments: all });
     } catch (err: any) {
       console.error('[judgments] GET failed:', err);
       res.status(500).json({ error: err.message });
     }
   });
 
+  // 蒸馏 B 触发 (人类点按钮) — 同步执行演化对齐
+  app.post('/api/judgments/distill-from-conversation', async (req, res) => {
+    try {
+      const { channelId, messageId, recentTurns } = req.body as {
+        channelId?: string;
+        messageId?: string;
+        recentTurns?: number;
+      };
+      if (!channelId) {
+        return res.status(400).json({ error: 'channelId required' });
+      }
+
+      // 取 channel 最近的对话
+      const channels = await loadChannels();
+      const channel = channels.find((c) => c.id === channelId);
+      if (!channel) return res.status(404).json({ error: 'channel not found' });
+
+      const currentSessionId = channel.currentSessionId;
+      if (!currentSessionId) {
+        return res.status(400).json({ error: 'no active session in channel' });
+      }
+      const session = await loadSession(channelId, currentSessionId);
+      if (!session) return res.status(404).json({ error: 'session not found' });
+
+      // 取最近 N 轮 (默认 10), 转成 DistillTurn 格式
+      const limit = Math.min(Math.max(recentTurns ?? 10, 2), 30);
+      const turns = session.messages.slice(-limit).map((m) => ({
+        role: (m.type === 'user' ? 'human' : 'agent') as 'human' | 'agent',
+        content: m.content,
+      }));
+
+      const { distillAndStoreFromChannel } = await import(
+        '../pi-ecosystem-judgment/human-value-pipeline.js'
+      );
+      const result = await distillAndStoreFromChannel(turns, { channelId });
+
+      res.json({
+        ok: true,
+        triggered: result.triggered,
+        reason: result.reason,
+        judgment: result.judgment,
+        evolved: result.evolved,
+      });
+    } catch (err: any) {
+      console.error('[judgments] distill-from-conversation failed:', err);
+      res.status(500).json({ error: err.message });
+    }
+  });
+
+  // 蒸馏 D 触发 (AI 被动) — 后台异步,不阻塞 HTTP 响应
+  app.post('/api/judgments/detect-and-distill', async (req, res) => {
+    try {
+      const { channelId, turns } = req.body as {
+        channelId?: string;
+        turns?: Array<{ role: 'human' | 'agent'; content: string }>;
+      };
+
+      // 先立即返回 202, 不等 LLM
+      res.status(202).json({ ok: true, queued: true });
+
+      if (!channelId || !Array.isArray(turns) || turns.length === 0) {
+        return;
+      }
+
+      // 异步处理 (不 await, 不阻塞响应)
+      setImmediate(async () => {
+        try {
+          const { detectAndDistillFromChannel } = await import(
+            '../pi-ecosystem-judgment/human-value-pipeline.js'
+          );
+          const result = await detectAndDistillFromChannel(turns, { channelId });
+          if (result.triggered) {
+            console.log(`[D-hook] ${channelId}: ${result.reason}`, result.evolved);
+          }
+        } catch (err) {
+          console.warn('[D-hook] background failed:', err);
+        }
+      });
+    } catch (err: any) {
+      console.error('[judgments] detect-and-distill failed:', err);
+      res.status(500).json({ error: err.message });
+    }
+  });
+
+  // 判断力使用回溯 (P0.5): 给定 judgmentIds, 反查对应的 decision 文本
+  // 用途: UI 上"这条 AI 回复引用了哪些原则"
+  app.post('/api/judgments/resolve-usage', async (req, res) => {
+    try {
+      const { ids } = req.body as { ids?: string[] };
+      if (!Array.isArray(ids) || ids.length === 0) {
+        return res.json({ items: [] });
+      }
+      const { loadAllJudgments } = await import(
+        '../pi-ecosystem-judgment/human-value-store.js'
+      );
+      const all = await loadAllJudgments();
+      const byId = new Map(all.map((j) => [j.id, j]));
+      const items = ids
+        .map((id) => byId.get(id))
+        .filter((j): j is NonNullable<typeof j> => Boolean(j))
+        .map((j) => ({
+          id: j.id,
+          decision: j.decision,
+          status: j.status ?? 'active',
+          timestamp: j.timestamp,
+        }));
+      res.json({ items });
+    } catch (err: any) {
+      console.error('[judgments] resolve-usage failed:', err);
+      res.status(500).json({ error: err.message });
+    }
+  });
+
+  // 判断力违规日志 (P3 UI): 读 violations.jsonl
+  app.get('/api/judgments/violations', async (req, res) => {
+    try {
+      const { getRecentViolations } = await import(
+        '../pi-ecosystem-judgment/monitor-gate.js'
+      );
+      const limit = Math.min(Math.max(parseInt(String(req.query.limit ?? '20'), 10) || 20, 1), 200);
+      const items = await getRecentViolations(limit);
+      res.json({ count: items.length, items });
+    } catch (err: any) {
+      console.error('[judgments] violations failed:', err);
+      res.status(500).json({ error: err.message });
+    }
+  });
+
+  // 类 B 自适应扫描: 读 judgments.json + usage.jsonl, 给出 stale/rising/unused 建议
+  // ?force=1 跳过 24h 缓存
+  app.get('/api/judgments/adaptive-suggestions', async (req, res) => {
+    try {
+      const { getCachedScan } = await import(
+        '../pi-ecosystem-judgment/adaptive-scan.js'
+      );
+      const force = String(req.query.force ?? '') === '1';
+      const result = await getCachedScan(force);
+      res.json(result);
+    } catch (err: any) {
+      console.error('[judgments] adaptive-scan failed:', err);
+      res.status(500).json({ error: err.message });
+    }
+  });
+
+  // Bootstrap Context 调试视图: 返出完整 BolloonContext
+  app.get('/api/bolloon/context', async (req, res) => {
+    try {
+      const { getCachedBolloonContext } = await import(
+        '../pi-ecosystem-judgment/human-value-pipeline.js'
+      );
+      const force = String(req.query.force ?? '') === '1';
+      const ctx = await getCachedBolloonContext({ cwd: process.cwd() }, force);
+      res.json(ctx);
+    } catch (err: any) {
+      console.error('[bolloon] context failed:', err);
+      res.status(500).json({ error: err.message });
+    }
+  });
+
+  // 阶段 B: 周报 (weekly-report.ts 产物) — 仅 API 读取, 不做 UI tab
+  // GET /api/reports           → { files: ['2026-W24.md', ...] }
+  // GET /api/reports/2026-W24  → { week, content }
+  app.get('/api/reports', async (_req, res) => {
+    try {
+      const dir = path.join(os.homedir(), '.bolloon', 'reports');
+      try {
+        const entries = await fs.readdir(dir);
+        const files = entries
+          .filter((f) => f.endsWith('.md'))
+          .sort()
+          .reverse(); // 新的在前
+        res.json({ dir, files });
+      } catch {
+        res.json({ dir, files: [] });
+      }
+    } catch (err: any) {
+      res.status(500).json({ error: err.message });
+    }
+  });
+
+  app.get('/api/reports/:week', async (req, res) => {
+    try {
+      const week = req.params.week;
+      // 严格校验, 防路径穿越
+      if (!/^\d{4}-W\d{1,2}$/.test(week)) {
+        return res.status(400).json({ error: 'week must match YYYY-Www' });
+      }
+      const file = path.join(os.homedir(), '.bolloon', 'reports', `${week}.md`);
+      try {
+        const content = await fs.readFile(file, 'utf-8');
+        res.json({ week, content, length: content.length });
+      } catch {
+        res.status(404).json({ error: 'not found', week });
+      }
+    } catch (err: any) {
+      res.status(500).json({ error: err.message });
+    }
+  });
+
+  // 阶段 C 护栏 5: auto-evolve baseline 管理 (无 UI, 仅 API)
+  // GET    /api/auto-evolve/baselines             → 列出所有 baseline tag
+  // GET    /api/auto-evolve/baselines/:tag/diff  → 看某 baseline 的 diff 摘要
+  // POST   /api/auto-evolve/rollback {tag}       → 回滚到指定 baseline
+  app.get('/api/auto-evolve/baselines', async (_req, res) => {
+    try {
+      const { execFile } = await import('child_process');
+      const { promisify } = await import('util');
+      const pExec = promisify(execFile);
+      const { stdout } = await pExec('git', [
+        'tag', '-l', 'auto-evolve-baseline-*', '--format=%(refname:short)|%(contents)|%(objectname:short)|%(taggerdate:iso)',
+      ], { cwd: process.cwd() });
+      const tags = stdout.trim().split('\n').filter(Boolean).map((line) => {
+        const [tag, msg, sha, date] = line.split('|');
+        return { tag, message: msg || '', sha, date };
+      });
+      res.json({ tags, count: tags.length });
+    } catch (err: any) {
+      res.status(500).json({ error: err.message });
+    }
+  });
+
+  app.get('/api/auto-evolve/baselines/:tag/diff', async (req, res) => {
+    try {
+      const { execFile } = await import('child_process');
+      const { promisify } = await import('util');
+      const pExec = promisify(execFile);
+      const tag = req.params.tag;
+      if (!/^auto-evolve-baseline-[\w-]+$/.test(tag)) {
+        return res.status(400).json({ error: 'tag must match auto-evolve-baseline-*' });
+      }
+      const { stdout } = await pExec('git', ['show', '--stat', '--no-color', tag], { cwd: process.cwd() });
+      res.json({ tag, diff: stdout.slice(0, 5000) }); // 限长 5KB
+    } catch (err: any) {
+      res.status(500).json({ error: err.message });
+    }
+  });
+
+  // Bootstrap Context → 拼好的 system prompt 片段 (供调试看注入效果)
+  app.get('/api/bolloon/context/system-prompt', async (req, res) => {
+    try {
+      const { getCachedBolloonContext } = await import(
+        '../pi-ecosystem-judgment/human-value-pipeline.js'
+      );
+      const { formatContextForSystemPrompt } = await import(
+        '../bootstrap/project-context.js'
+      );
+      const ctx = await getCachedBolloonContext({ cwd: process.cwd() });
+      const systemAddition = formatContextForSystemPrompt(ctx, {
+        maxChars: parseInt(String(req.query.max ?? '4000'), 10) || 4000,
+      });
+      res.json({ systemAddition, length: systemAddition.length, truncated: systemAddition.includes('截断模式') });
+    } catch (err: any) {
+      console.error('[bolloon] context/system-prompt failed:', err);
+      res.status(500).json({ error: err.message });
+    }
+  });
+
+  // ============================================================
+  // system-prompt health (P-Action 2 — Harness Gardening)
+  // 返回每层 lifecycle 状态: ok | stale | overdue-review | missing-frontmatter | dynamic
+  // query: ?activeOnly=1 → 只返回当前 context 激活的层
+  // ============================================================
+  app.get('/api/prompt/health', async (req, res) => {
+    try {
+      const { listLayers } = await import('../llm/system-prompt/registry.js');
+      const { evaluateLayers, markActive } = await import('../llm/system-prompt/health.js');
+      const all = listLayers() as Array<any>;
+      const baseReport = evaluateLayers(all);
+
+      // 如果 query 里有 activeOnly, 跑一次 assembleSystemPrompt 拿激活列表
+      if (String(req.query.activeOnly ?? '') === '1') {
+        const { assembleSystemPrompt } = await import('../llm/system-prompt/registry.js');
+        const channel = String(req.query.channel ?? 'local') as 'local' | 'p2p-visitor' | 'p2p-agent';
+        const role = req.query.role as any;
+        const tool = req.query.tool as any;
+        try {
+          const r = await assembleSystemPrompt({ channel, role, tool });
+          const activeIds = new Set(r.layerIds);
+          res.json(markActive(baseReport, activeIds));
+        } catch (err: any) {
+          console.warn('[prompt-health] assembleSystemPrompt failed (silent, returning base report):', err);
+          res.json(baseReport);
+        }
+      } else {
+        res.json(baseReport);
+      }
+    } catch (err: any) {
+      console.error('[prompt-health] failed:', err);
+      res.status(500).json({ error: err.message });
+    }
+  });
+
+  // 自适应接受/拒绝: 写 evolution.jsonl 留痕, 接受时同时 patch judgments.json
+  // body: { action: 'accept'|'reject'|'revert', suggestion, appliedPatch? }
+  // query: ?auto=1  → 类 B 自动路径, 受 auto-evolve-policy 网关保护
+  //         缺省    → 用户在 UI 手动触发, 不查开关 (避免阻塞用户)
+  app.post('/api/judgments/adaptive-apply', async (req, res) => {
+    try {
+      const isAuto = req.query.auto === '1' || req.query.auto === 'true';
+      const { action, suggestion, appliedPatch } = req.body as {
+        action: 'accept' | 'reject' | 'revert';
+        suggestion: { judgmentId: string; kind: string; decision: string; reason: string; action: string; metrics: unknown; scannedAt: string; key: string };
+        appliedPatch?: Record<string, unknown>;
+      };
+      if (!action || !suggestion?.judgmentId) {
+        return res.status(400).json({ error: 'action and suggestion.judgmentId required' });
+      }
+      const { updateJudgmentStatus } = await import(
+        '../pi-ecosystem-judgment/human-value-store.js'
+      );
+      const { logEvolution } = await import(
+        '../pi-ecosystem-judgment/adaptive-scan.js'
+      );
+      // accept 时: 真正改库
+      if (action === 'accept') {
+        // 阶段 A: 自动路径需先过 auto-evolve-policy 网关
+        if (isAuto) {
+          const { requireDataLayerAutoEvolve } = await import(
+            '../utils/auto-evolve-policy.js'
+          );
+          try {
+            await requireDataLayerAutoEvolve('adaptive-apply.auto.deprecate');
+          } catch (err: any) {
+            return res.status(423).json({
+              error: 'data-layer-auto-evolve-disabled',
+              message: err.message,
+              hint: '设 BOLLOON_AUTO_EVOLVE_DATA=1 或在 self-improve-policy.json 加 dataLayerAutoEvolve: true',
+            });
+          }
+        }
+        if (suggestion.action === 'deprecate') {
+          // 标记 superseded (语义: 不再用, 但保留可回滚)
+          await updateJudgmentStatus(suggestion.judgmentId, 'superseded', {
+            evolutionReason: 'merged', // 借 merged 字段表达"被自适应废弃"
+          });
+        } else if (suggestion.action === 'boost') {
+          // boost: 用户手动接受后, 不改库本身 (weight 在 getRelevantValues 里动态算),
+          // 但写 evolution 留痕, 未来可以基于此调整算法
+          // 当前不直接改库, 仅留痕
+        }
+        // 'review' 类不需要自动改库, 仅 log 接受
+      }
+      await logEvolution({
+        ts: new Date().toISOString(),
+        action,
+        suggestion: suggestion as any,
+        appliedPatch,
+      });
+      res.json({ ok: true });
+    } catch (err: any) {
+      console.error('[judgments] adaptive-apply failed:', err);
+      res.status(500).json({ error: err.message });
+    }
+  });
+
+  // 演化日志 (audit / 一键回滚源)
+  app.get('/api/judgments/evolution-log', async (req, res) => {
+    try {
+      const { readEvolutionLog } = await import(
+        '../pi-ecosystem-judgment/adaptive-scan.js'
+      );
+      const limit = Math.min(Math.max(parseInt(String(req.query.limit ?? '50'), 10) || 50, 1), 200);
+      const items = await readEvolutionLog(limit);
+      res.json({ count: items.length, items });
+    } catch (err: any) {
+      console.error('[judgments] evolution-log failed:', err);
+      res.status(500).json({ error: err.message });
+    }
+  });
+
+  // 阶段 2: Causal-judge 4 个 endpoint
+  app.get('/api/judgments/causal/correlation', async (req, res) => {
+    try {
+      const { runCorrelationAnalysis } = await import(
+        '../pi-ecosystem-judgment/human-value-pipeline.js'
+      );
+      const topN = Math.min(Math.max(parseInt(String(req.query.topN ?? '5'), 10) || 5, 1), 50);
+      const useLLM = String(req.query.useLLM ?? '1') !== '0';
+      const items = await runCorrelationAnalysis({ topN, useLLM });
+      res.json({ count: items.length, items });
+    } catch (err: any) {
+      console.error('[causal] correlation failed:', err);
+      res.status(500).json({ error: err.message });
+    }
+  });
+
+  app.get('/api/judgments/causal/intervention', async (req, res) => {
+    try {
+      const { runIntervention } = await import(
+        '../pi-ecosystem-judgment/human-value-pipeline.js'
+      );
+      const { judgmentId, scenario } = req.query as { judgmentId?: string; scenario?: string };
+      if (!judgmentId) return res.status(400).json({ error: 'judgmentId required' });
+      const result = await runIntervention(judgmentId, { scenarioContext: scenario });
+      res.json(result);
+    } catch (err: any) {
+      console.error('[causal] intervention failed:', err);
+      res.status(500).json({ error: err.message });
+    }
+  });
+
+  app.post('/api/judgments/causal/counterfactual', async (req, res) => {
+    try {
+      const { runCounterfactualAudit } = await import(
+        '../pi-ecosystem-judgment/human-value-pipeline.js'
+      );
+      const { userInput, aiReply, violatedPrinciples } = req.body as {
+        userInput?: string;
+        aiReply?: string;
+        violatedPrinciples?: Array<{ principle: string; reason: string }>;
+      };
+      if (!userInput || !aiReply) {
+        return res.status(400).json({ error: 'userInput and aiReply required' });
+      }
+      const audit = await runCounterfactualAudit({
+        userInput,
+        aiReply,
+        violatedPrinciples: violatedPrinciples ?? [],
+      });
+      res.json(audit);
+    } catch (err: any) {
+      console.error('[causal] counterfactual failed:', err);
+      res.status(500).json({ error: err.message });
+    }
+  });
+
+  app.get('/api/judgments/causal/audit-log', async (req, res) => {
+    try {
+      const { readCounterfactualLog } = await import(
+        '../pi-ecosystem-judgment/human-value-pipeline.js'
+      );
+      const limit = Math.min(Math.max(parseInt(String(req.query.limit ?? '20'), 10) || 20, 1), 200);
+      const items = await readCounterfactualLog(limit);
+      res.json({ count: items.length, items });
+    } catch (err: any) {
+      console.error('[causal] audit-log failed:', err);
+      res.status(500).json({ error: err.message });
+    }
+  });
+
   // 导入判断: 接受 { filename, content (base64), context }.
   // 支持 .json / .yaml / .yml / .md / .txt / .html. 完全离线解析, 不调 LLM.
   // 解析规则:
@@ -4767,26 +5330,196 @@ app.get('/channels', async (_req, res) => {
     res.json(getEventHistory());
   });
 
+  // ============================================================
+  // Permission Mode (P2.2 — UI 暴露开关)
+  // 优先级: 运行时 session 覆盖 > env BOLLOON_PERM_MODE > 'default'
+  // 运行时覆盖存在 ~/.bolloon/sessions/permission-mode.json, 每次 promptStream 入口读取
+  // ============================================================
+
+  const PERM_MODE_FILE = path.join(
+    process.env.HOME || os.homedir() || '/tmp',
+    '.bolloon', 'sessions', 'permission-mode.json'
+  );
+
+  function readPermModeOverride(): { mode: string; ts: string } | null {
+    try {
+      // 同步读, 文件很小
+      const raw = fsSync.readFileSync(PERM_MODE_FILE, 'utf-8');
+      const obj = JSON.parse(raw);
+      if (obj && typeof obj.mode === 'string') {
+        return { mode: obj.mode, ts: obj.ts || new Date().toISOString() };
+      }
+    } catch { /* 不存在 = 无 override */ }
+    return null;
+  }
+
+  function writePermModeOverride(mode: string): void {
+    try {
+      const dir = path.dirname(PERM_MODE_FILE);
+      fsSync.mkdirSync(dir, { recursive: true });
+      fsSync.writeFileSync(PERM_MODE_FILE, JSON.stringify({ mode, ts: new Date().toISOString() }, null, 2), 'utf-8');
+    } catch (err) {
+      console.warn('[server] writePermModeOverride failed:', err);
+    }
+  }
+
+  // 读当前生效 mode (runtime override > env > default)
+  app.get('/api/permission-mode', async (_req: any, res: any) => {
+    const { resolvePermissionMode, ALL_PERMISSION_MODES } = await import('../agents/permission-mode.js');
+    const override = readPermModeOverride();
+    const envMode = process.env.BOLLOON_PERM_MODE || null;
+    const effective = resolvePermissionMode();
+    res.json({
+      effective,
+      override: override?.mode || null,
+      overrideTs: override?.ts || null,
+      env: envMode,
+      allowed: ALL_PERMISSION_MODES,
+      description: {
+        default: '每次工具调用询问; shell 走 shell-guard',
+        acceptEdits: 'edit_*/write_* 跳过黑名单; shell 仍走 shell-guard',
+        bypassPermissions: '非 shell 全部放行; shell 永远走 shell-guard (硬约束)',
+      },
+    });
+  });
+
+  // 设 runtime override (存盘, 下次 promptStream 入口读取生效)
+  app.post('/api/permission-mode', async (req: any, res: any) => {
+    const { resolvePermissionMode, ALL_PERMISSION_MODES } = await import('../agents/permission-mode.js');
+    const mode = String(req.body?.mode || '');
+    if (!ALL_PERMISSION_MODES.includes(mode as any)) {
+      return res.status(400).json({
+        error: `Invalid mode. Allowed: ${ALL_PERMISSION_MODES.join(', ')}`,
+        allowed: ALL_PERMISSION_MODES,
+      });
+    }
+    const oldMode = readPermModeOverride()?.mode || process.env.BOLLOON_PERM_MODE || 'default';
+    writePermModeOverride(mode);
+    // 写历史 (append-only JSONL, 跟 bolloon 其他 audit 一致)
+    try {
+      const HISTORY_FILE = path.join(
+        process.env.HOME || os.homedir() || '/tmp',
+        '.bolloon', 'sessions', 'permission-mode-history.jsonl'
+      );
+      fsSync.mkdirSync(path.dirname(HISTORY_FILE), { recursive: true });
+      fsSync.appendFileSync(HISTORY_FILE, JSON.stringify({
+        ts: new Date().toISOString(),
+        from: oldMode,
+        to: mode,
+        source: 'api',
+      }) + '\n', 'utf-8');
+    } catch { /* 历史写失败不阻塞主流程 */ }
+    console.log(`[server] permission-mode override set to "${mode}" via API (was "${oldMode}")`);
+    res.json({
+      ok: true,
+      mode,
+      previousMode: oldMode,
+      ts: new Date().toISOString(),
+      note: '新 mode 在下一次 promptStream 入口生效 (不打断当前对话)',
+    });
+  });
+
+  // 取消 runtime override, 回到 env 或 default
+  app.delete('/api/permission-mode', async (_req: any, res: any) => {
+    const oldMode = readPermModeOverride()?.mode || process.env.BOLLOON_PERM_MODE || 'default';
+    try {
+      if (fsSync.existsSync(PERM_MODE_FILE)) fsSync.unlinkSync(PERM_MODE_FILE);
+    } catch (err) {
+      console.warn('[server] delete perm-mode override failed:', err);
+    }
+    // 写历史
+    try {
+      const HISTORY_FILE = path.join(
+        process.env.HOME || os.homedir() || '/tmp',
+        '.bolloon', 'sessions', 'permission-mode-history.jsonl'
+      );
+      fsSync.mkdirSync(path.dirname(HISTORY_FILE), { recursive: true });
+      fsSync.appendFileSync(HISTORY_FILE, JSON.stringify({
+        ts: new Date().toISOString(),
+        from: oldMode,
+        to: 'env-or-default',
+        source: 'api',
+        action: 'delete-override',
+      }) + '\n', 'utf-8');
+    } catch { /* ignore */ }
+    res.json({ ok: true, note: '已删除 runtime override, 回到 env / default' });
+  });
+
+  // 2026-06-16: 循环检查 — GET /api/loop/inspect?channelId=...
+  // 返回最近一轮 ReAct loop 的产出: 步骤 / 工具调用 / 压缩摘要 / 最终回复 / token 用量.
+  // 用于前端 status bar 的「✓ 检查」按钮弹 modal.
+  app.get('/api/loop/inspect', async (req: any, res: any) => {
+    try {
+      const channelId = String(req.query.channelId || '');
+      if (!channelId) return res.status(400).json({ error: 'channelId required' });
+      const s = channelRunState.get(channelId);
+      if (!s) return res.json({ summary: '该 channel 无活跃 loop', steps: [], finalReply: '' });
+      const steps = (s.lastSteps || []).map((st: any) => ({
+        name: st.name || st.tool || 'step',
+        status: st.status || 'completed',
+        durationMs: st.durationMs,
+        output: st.output || st.result || '',
+      }));
+      res.json({
+        summary: s.lastSummary || (s.running ? 'loop 仍在运行中' : 'loop 已结束'),
+        steps,
+        finalReply: s.lastFinalReply || '',
+        tokens: s.lastTokens || {},
+      });
+    } catch (err: any) {
+      res.status(500).json({ error: err.message });
+    }
+  });
+
+  // 历史 (类似 self-improve history, 供前端 timeline)
+  app.get('/api/permission-mode/history', async (_req: any, res: any) => {
+    const HISTORY_FILE = path.join(
+      process.env.HOME || os.homedir() || '/tmp',
+      '.bolloon', 'sessions', 'permission-mode-history.jsonl'
+    );
+    try {
+      if (!fsSync.existsSync(HISTORY_FILE)) return res.json([]);
+      const lines = fsSync.readFileSync(HISTORY_FILE, 'utf-8').split('\n').filter(Boolean);
+      const entries = lines.map((l: string) => {
+        try { return JSON.parse(l); } catch { return null; }
+      }).filter(Boolean);
+      res.json(entries.slice(-50));  // 最近 50 条
+    } catch (err) {
+      res.json([]);
+    }
+  });
+
   // 健康检查错误数 ≥ 2 -> 触发自改信号
+  // 2026-06-16: 自迭代默认关 (用户模式), 仅 BOLLOON_DEV_MODE=1 或 selfImprove=true 启动项才装 callback
   if (healthMonitor) {
-    healthMonitor.startPeriodicCheck(60000, (status: any) => {
-      const errorCount = Object.values(status.checks as Record<string, { status: string }>)
-        .filter((c) => c.status === 'error').length;
-      if (errorCount >= 2) {
-        import('../heartbeat/self-improve-bus.js').then(({ reportSelfImproveEvent }) => {
-          const failedKeys = Object.entries(status.checks as Record<string, { status: string }>)
-            .filter(([_, c]) => c.status === 'error').map(([k]) => k).join(', ');
-          reportSelfImproveEvent({
-            kind: 'silent-timeout',
-            details: `健康检查有 ${errorCount} 项失败: ${failedKeys}`
+    if (selfImproveEnabled) {
+      healthMonitor.startPeriodicCheck(60000, (status: any) => {
+        const errorCount = Object.values(status.checks as Record<string, { status: string }>)
+          .filter((c) => c.status === 'error').length;
+        if (errorCount >= 2) {
+          import('../heartbeat/self-improve-bus.js').then(({ reportSelfImproveEvent }) => {
+            const failedKeys = Object.entries(status.checks as Record<string, { status: string }>)
+              .filter(([_, c]) => c.status === 'error').map(([k]) => k).join(', ');
+            reportSelfImproveEvent({
+              kind: 'silent-timeout',
+              details: `健康检查有 ${errorCount} 项失败: ${failedKeys}`
+            });
           });
-        });
-      }
-    });
+        }
+      });
+    } else {
+      // 用户模式: 只跑监控不打自改信号, 心跳仍工作
+      healthMonitor.startPeriodicCheck(60000);
+      console.log('[24h] Health monitor periodic check (no self-improve)');
+    }
   }
 
-  // 安装自改总线 -> SSE 桥
-  void installSelfImproveHook();
+  // 安装自改总线 -> SSE 桥 (开发者模式才装, 用户模式靠 /api/self-improve/trigger 手动触发)
+  if (selfImproveEnabled) {
+    void installSelfImproveHook();
+  } else {
+    console.log('[self-improve] 用户模式, installSelfImproveHook 跳过 (可用 POST /api/self-improve/trigger 手动触发)');
+  }
 
   // 端口冲突时自动找下一个可用端口（最多 10 次），避免 EADDRINUSE 直接崩溃
   return new Promise<{ app: express.Express; server: ReturnType<typeof createServer>; port: number }>((resolve, reject) => {
@@ -4808,11 +5541,24 @@ app.get('/channels', async (_req, res) => {
         console.log('服务器已监听');
         // 安装 chat bus -> SSE 桥 (供前端 inbox UI 实时刷新)
         void installChatBusHook();
+        // 2026-06-16: ping 改为 data: {"type":"ping"} — 之前是 SSE 注释格式 (: ping\n\n),
+        //   浏览器 EventSource 不触发 onmessage, 客户端 60s 阈值 (现已 30s) 误判死链.
+        //   改后前端 onmessage 收到 ping 就重置 lastEventTime, 真死链才 30s 后重建.
         setInterval(() => {
           for (const client of sseClients) {
-            client.res.write(': ping\n\n');
+            try {
+              client.res.write('data: {"type":"ping"}\n\n');
+            } catch (err) {
+              // socket 已断, 跳过 — client 端 onerror 会触发重连
+              console.warn('[SSE ping] write 失败, 跳过该客户端:', (err as Error).message);
+            }
           }
         }, 30000);
+        // 2026-06-16: 全局捕获 socket error 事件, 避免未处理 EPIPE/ETIMEDOUT 让进程崩
+currentServer.on('clientError', (err, socket) => {
+           console.warn('[server] clientError:', (err as any).code, err.message);
+          try { socket.end(); } catch {}
+        });
         resolve({ app, server: currentServer, port: currentPort });
       });
     };
@@ -4982,4 +5728,4 @@ export async function openBrowser(url: string) {
       console.error('打开浏览器失败:', err.message);
     }
   });
-}
+}