@bolloon/bolloon-agent 0.2.12 → 0.2.13

package/dist/web/server.js

@@ -6,6 +6,41 @@ import * as fs from 'fs/promises';
 import * as fsSync from 'fs';
 import * as path from 'path';
 import * as os from 'os';
+import * as crypto from 'crypto';
+import { validateMessageInput, validateChannelInput, healthCheck, } from './input-validator.js';
+import { segmentChatReply } from '../agents/chat-segmenter.js';
+import { registerJudgmentsRoutes } from './routes-judgments.js';
+import { registerLlmConfigRoutes } from './routes-llm-config.js';
+import { registerTaskRoutes } from './routes-tasks.js';
+// 2026-07-06: 类型抽到 ./server-types.ts (channel / session / task / sse client / iroh info / paths)
+import { SESSION_CACHE_PATH, IPFS_ENDPOINT, } from './server-types.js';
+// 同时也 re-export 出去 (其它地方可能从 './server.js' 引用)
+export { CHANNELS_PATH, SESSION_CACHE_PATH, THEME_PATH, TASK_QUEUE_PATH, IPFS_ENDPOINT, } from './server-types.js';
+// 读自身 package.json 拿 version (health endpoint 用)
+//   路径: src/web/server.ts → ../../package.json (编译后 dist/web/server.js)
+let cachedVersion = null;
+function getPackageVersion() {
+    if (cachedVersion)
+        return cachedVersion;
+    try {
+        const here = fileURLToPath(import.meta.url);
+        const hereDir = path.dirname(here);
+        // 试 ../package.json (相对 dist/web/) 或 ../../package.json (相对 src/web/)
+        let raw = null;
+        for (const rel of ['../package.json', '../../package.json']) {
+            try {
+                raw = fsSync.readFileSync(path.join(hereDir, rel), 'utf-8');
+                break;
+            }
+            catch { }
+        }
+        cachedVersion = raw ? (JSON.parse(raw).version ?? '0.0.0') : 'unknown';
+    }
+    catch {
+        cachedVersion = 'unknown';
+    }
+    return cachedVersion;
+}
 // 2026-06-17: 终端静默 — server.ts 高频 spam (LLM 流式每个 token 一次 broadcast,
 // 每次 P2P 收发 [v3]/[v3-meta]/[v3-cross]/[v3-friend] 各一次) 全部走 console.log proxy,
 // 默认 (BOLLOON_VERBOSE != '1') 完全不打;VERBOSE=1 时恢复.
@@ -37,16 +72,15 @@ console.log = (...args) => {
     return _origConsoleLog(...args);
 };
 import { createHyperswarmCommunicator, createTopic, KeyManager, AgentAuthManager, } from '@diap/sdk';
-import { documentReader } from '../documents/reader.js';
-import { initMinimax, getMinimax } from '../constraints/index.js';
+import { initMinimax } from '../constraints/index.js';
 import { createAgentSession } from '../agents/pi-sdk.js';
-import { llmConfigStore } from '../llm/config-store.js';
-import { videoConfigStore } from '../llm/video-config-store.js';
-import { audioConfigStore } from '../llm/audio-config-store.js';
 import { irohTransport } from '../network/iroh-transport.js';
 import { createAgentDelegateApp } from './agent-delegate-server.js';
 import { createIrohDelegateTransport } from './iroh-delegate-transport.js';
 import { verifyMessage, isAddress, getAddress } from 'viem';
+// 2026-07-05: peer 目录管理 + manifest 协议
+import * as peerFs from '../network/peer-fs.js';
+import { loadLocalResources, writeRemoteResources } from '../network/peer-resource-bridge.js';
 // 前端资源路径: 兼容 src 运行 + dist 运行 + npm 全局安装
 // - src 跑 (tsx):   __dirname = .../src/web  →  .../dist/web
 // - dist 跑 (npm):  __dirname = .../dist/web → 自身就是 web 根
@@ -74,10 +108,7 @@ function resolveWebRoot() {
 const webRoot = resolveWebRoot();
 console.log(`[web] webRoot = ${webRoot}`);
 const SHARED_SESSION_PATH = path.join(process.env.HOME || '/tmp', '.bolloon', 'sessions');
-const SESSION_CACHE_PATH = path.join(SHARED_SESSION_PATH, 'cache');
-const CHANNELS_PATH = path.join(SHARED_SESSION_PATH, 'channels.json');
-const THEME_PATH = path.join(SHARED_SESSION_PATH, 'theme.json');
-const IPFS_ENDPOINT = 'http://127.0.0.1:5001';
+// iroh P2P 状态
 let irohNodeInfo = null;
 let irohInitialized = false;
 async function ensureSessionDirs() {
@@ -101,163 +132,45 @@ function isValidWalletAddress(addr) {
         return a;
     return '';
 }
-async function loadChannels() {
-    try {
-        const data = await fs.readFile(CHANNELS_PATH, 'utf-8');
-        return JSON.parse(data);
-    }
-    catch {
-        return [];
-    }
-}
-async function saveChannels(channels) {
-    // 写盘前剥掉任何遗留的 didDocument 字段, 防止历史脏数据撑大文件
-    const sanitized = channels.map(ch => {
-        const { didDocument: _omit, ...rest } = ch;
-        return rest;
-    });
-    const jsonStr = JSON.stringify(sanitized, null, 2);
-    // 写盘保护: 内容和上次完全一致就跳过, 避免 SSE ping / 重新 init 触发的无意义写盘
-    if (jsonStr === lastChannelsJson) {
-        return; // 静默跳过, 不打日志
-    }
-    lastChannelsJson = jsonStr;
-    console.log('[saveChannels] 保存频道数据, 数量:', sanitized.length);
-    console.log('[saveChannels] JSON 长度:', jsonStr.length);
-    await fs.writeFile(CHANNELS_PATH, jsonStr);
-    // 写盘即令缓存失效: 用 lastChannelsWriteAt 标记, getChannelsWithDID 会检查
-    lastChannelsWriteAt = Date.now();
-}
-// 写盘去重: 上次写盘内容, 用于跳过幂等调用
-let lastChannelsJson = '';
-// 模块级: 最近一次 channels.json 写盘时间. saveChannels 在模块顶层,
-// getChannelsWithDID 在 createWebServer 内部, 跨作用域用模块变量桥接.
-let lastChannelsWriteAt = 0;
-async function loadSession(channelId, sessionId) {
-    // sessionId is optional for backward compatibility; if provided, load specific session
-    const key = sessionId ? `${channelId}:${sessionId}` : channelId;
-    const sessionPath = path.join(SESSION_CACHE_PATH, `${key}.json`);
-    try {
-        // 内存保护: 拒绝加载过大的 session 文件 (> 50MB 视为异常, 避免 OOM)
-        const stat = await fs.stat(sessionPath);
-        if (stat.size > 50 * 1024 * 1024) {
-            console.warn(`[loadSession] session 过大 (${stat.size} bytes): ${key}`);
-            return null;
-        }
-        const data = await fs.readFile(sessionPath, 'utf-8');
-        return JSON.parse(data);
-    }
-    catch {
-        return null;
-    }
-}
-async function saveSession(session) {
-    const key = session.sessionId ? `${session.channelId}:${session.sessionId}` : session.channelId;
-    const sessionPath = path.join(SESSION_CACHE_PATH, `${key}.json`);
-    await fs.writeFile(sessionPath, JSON.stringify(session, null, 2));
-}
-async function loadTheme() {
-    try {
-        const data = await fs.readFile(THEME_PATH, 'utf-8');
-        return JSON.parse(data);
-    }
-    catch {
-        return { theme: 'light', agentId: '' };
-    }
-}
-async function saveTheme(theme, agentId) {
-    await fs.writeFile(THEME_PATH, JSON.stringify({ theme, agentId }, null, 2));
-}
-// ==================== Task Queue & Workflow System ====================
-const TASK_QUEUE_PATH = path.join(SHARED_SESSION_PATH, 'task-queue.json');
-async function loadTaskQueue() {
+// 2026-07-06: loadChannels / saveChannels / loadSession / saveSession / loadTheme / saveTheme
+// 已抽到 ./server-storage.ts — 这里只保留旧引用供 createWebServer 内部闭包使用
+// TODO: 后续让所有调用走 import, 然后删除这段冗余定义
+import { loadChannels as _loadChannels, saveChannels as _saveChannels, loadSession as _loadSession, saveSession as _saveSession, loadTheme as _loadTheme, saveTheme as _saveTheme, getLastChannelsWriteAt, } from './server-storage.js';
+// 包装成闭包内可用的形式, 保持 createWebServer 内代码不用改
+const loadChannels = _loadChannels;
+const saveChannels = _saveChannels;
+const loadSession = _loadSession;
+const saveSession = _saveSession;
+const loadTheme = _loadTheme;
+const saveTheme = _saveTheme;
+// 2026-07-06: Task Queue 已抽到 ./routes-tasks.ts + ./server-storage.ts
+let sseClients = new Set();
+// v3: 远端 channel UI 元数据缓存 — key: peerId, value: sanitize 过的 channel 列表
+// in-memory only, 进程重启清空 (judgment 内容永远不在这里)
+let remoteChannelCache = new Map();
+// 2026-07-05: 一次性 prompt 附加块 — key: channelId, value: 下一次 LLM prompt 时 prepend 的内容
+//   用于 manifest-loader 加载对方能力后, 仅影响本次对话, 不污染主 prompt
+const nextPromptHints = new Map();
+// 2026-07-05: 直接读 ~/.bolloon/agents/agents.json, 跳过 subagent-manager 的 lazy init
+//   原因: getSubAgentManager().getAllAgents() 只在 SubAgentManager.initialize() 后才加载,
+//   但没人调 initialize(), 永远返回 []. 这里用 raw 文件 IO 直接拿数据.
+async function loadLocalSubAgents() {
     try {
-        const data = await fs.readFile(TASK_QUEUE_PATH, 'utf-8');
-        return JSON.parse(data);
+        const fsPromises = await import('fs/promises');
+        const path = await import('path');
+        const home = process.env.BOLLOON_HOME || process.env.HOME || '/tmp';
+        const file = path.join(home, '.bolloon', 'agents', 'agents.json');
+        const raw = await fsPromises.readFile(file, 'utf-8');
+        const parsed = JSON.parse(raw);
+        const arr = Array.isArray(parsed) ? parsed : [];
+        process.stderr.write(`[LOADED] ${arr.length} agents from ${file}\n`);
+        return arr;
     }
-    catch {
+    catch (e) {
+        process.stderr.write(`[LOAD FAIL] ${e?.message}\n`);
         return [];
     }
 }
-async function saveTaskQueue(tasks) {
-    await fs.writeFile(TASK_QUEUE_PATH, JSON.stringify(tasks, null, 2));
-}
-let isExecutingTask = false;
-let executionTaskId = null;
-async function executeTask(task, channelId) {
-    if (isExecutingTask)
-        return;
-    isExecutingTask = true;
-    executionTaskId = task.id;
-    const agent = await getAgentForChannel(channelId);
-    const tasks = await loadTaskQueue();
-    const taskIndex = tasks.findIndex(t => t.id === task.id);
-    if (taskIndex >= 0) {
-        tasks[taskIndex].status = 'running';
-        tasks[taskIndex].updatedAt = new Date().toISOString();
-        await saveTaskQueue(tasks);
-    }
-    broadcast({ type: 'task_status', taskId: task.id, status: 'running', progress: 0 }, channelId);
-    try {
-        let result = '';
-        switch (task.type) {
-            case 'chat':
-                if (task.description) {
-                    broadcast({ type: 'status', content: `执行任务: ${task.title}` }, channelId);
-                    result = await agent.prompt(task.description);
-                }
-                break;
-            case 'read':
-                if (task.description) {
-                    broadcast({ type: 'status', content: `读取文档: ${task.description}` }, channelId);
-                    const content = await documentReader.read(task.description);
-                    result = `📄 文档读取完成\n\n${content.text.substring(0, 500)}${content.text.length > 500 ? '...' : ''}`;
-                }
-                break;
-            case 'summarize':
-                if (task.description) {
-                    broadcast({ type: 'status', content: `总结文档: ${task.description}` }, channelId);
-                    const content = await documentReader.read(task.description);
-                    const llm = getMinimax();
-                    const summary = await llm.summarize(content.text);
-                    result = `📝 文档总结:\n\n${summary.summary}`;
-                }
-                break;
-            default:
-                result = '未知任务类型';
-        }
-        // 更新任务状态
-        const tasks = await loadTaskQueue();
-        const idx = tasks.findIndex(t => t.id === task.id);
-        if (idx >= 0) {
-            tasks[idx].status = 'completed';
-            tasks[idx].progress = 100;
-            tasks[idx].result = result;
-            tasks[idx].updatedAt = new Date().toISOString();
-            await saveTaskQueue(tasks);
-        }
-        broadcast({ type: 'task_status', taskId: task.id, status: 'completed', progress: 100, result }, channelId);
-        broadcast({ type: 'ai', content: result }, channelId);
-    }
-    catch (error) {
-        const tasks = await loadTaskQueue();
-        const idx = tasks.findIndex(t => t.id === task.id);
-        if (idx >= 0) {
-            tasks[idx].status = 'failed';
-            tasks[idx].error = error.message;
-            tasks[idx].updatedAt = new Date().toISOString();
-            await saveTaskQueue(tasks);
-        }
-        broadcast({ type: 'task_status', taskId: task.id, status: 'failed', error: error.message }, channelId);
-        broadcast({ type: 'error', content: `任务执行失败: ${error.message}` }, channelId);
-    }
-    isExecutingTask = false;
-    executionTaskId = null;
-}
-let sseClients = new Set();
-// v3: 远端 channel UI 元数据缓存 — key: peerId, value: sanitize 过的 channel 列表
-// in-memory only, 进程重启清空 (judgment 内容永远不在这里)
-let remoteChannelCache = new Map();
 // 2026-06-10: 持久化 remote channel cache 到 ~/.bolloon/remote-channels-cache.json
 // 之前是纯内存 Map, nodeA 重启后所有对端 channel 列表丢失, 需要等对面再推一次
 const REMOTE_CACHE_FILE = `${process.env.HOME || '/tmp'}/.bolloon/remote-channels-cache.json`;
@@ -427,22 +340,25 @@ async function routeMentionsInReply(originChannelId, replyText, localChannels, r
                 continue;
             }
             try {
-                const rpc = JSON.stringify({
-                    v: 3, op: 'agent.cross.post',
-                    payload: {
-                        targetChannelId: remoteTarget.id,
-                        targetChannelName: remoteTarget.name,
-                        originChannelId,
-                        originChannelName,
-                        text,
-                        fromPublicKey: v3P2PRef.getPublicKey()
-                    }
-                });
-                const ok = v3P2PRef.sendTo(ownerPk, rpc);
-                if (ok) {
+                const rpcPayload = {
+                    targetChannelId: remoteTarget.id,
+                    targetChannelName: remoteTarget.name,
+                    originChannelId,
+                    originChannelName,
+                    text,
+                    fromPublicKey: v3P2PRef.getPublicKey()
+                };
+                // 2026-07-05: 用 outbox.sendOrQueue 兜底 — 对方不在线时自动入队, 上线后批量重发
+                const { sendOrQueue } = await import('../network/p2p-outbox.js');
+                const r = await sendOrQueue(ownerPk, 'agent.cross.post', rpcPayload, v3P2PRef);
+                if (r === 'SENT') {
                     console.log(`[v3-cross] (${originChannelName}) @${targetName} → 远端 peer ${ownerPk.substring(0, 12)}... (channelId=${remoteTarget.id})`);
                     results.push({ targetName, targetId: remoteTarget.id, source: 'remote', text, status: 'sent' });
                 }
+                else if (r === 'QUEUED') {
+                    console.log(`[v3-cross] (${originChannelName}) @${targetName} → 远端 peer ${ownerPk.substring(0, 12)}... 已入队 (对方不在线)`);
+                    results.push({ targetName, targetId: remoteTarget.id, source: 'remote', text, status: 'queued' });
+                }
                 else {
                     results.push({ targetName, targetId: remoteTarget.id, source: 'remote', text, status: 'failed' });
                 }
@@ -578,6 +494,28 @@ async function handleV3P2PMessage(parsed, conn, comm) {
             catch (saveErr) {
                 console.warn(`[v3] 存 user 消息失败 (不影响 chat):`, saveErr.message);
             }
+            // 2026-07-05: 同时追加到 sender 的 peer 月度归档 — 让 A 本地的"与 sender 对话历史"也能离线查看
+            try {
+                const { appendChatArchive } = await import('../bootstrap/chat-archiver.js');
+                const chanObj = (await loadChannels()).find(c => c.id === channelId);
+                await appendChatArchive({
+                    publicKey: senderKey,
+                    entry: {
+                        ts: new Date().toISOString(),
+                        source: 'remote',
+                        channelId, channelName: chanObj?.name,
+                        text,
+                        fromPublicKey: senderKey,
+                        msgType: 'user',
+                    }
+                });
+                // 顺手把 sender 加入 known peers (如果没有)
+                const { addOrUpdatePeer } = await import('../network/known-peers.js');
+                await addOrUpdatePeer(undefined, senderKey);
+            }
+            catch (archiveErr) {
+                console.warn('[chat-archive] remote user 归档失败 (non-fatal):', archiveErr?.message?.slice(0, 200));
+            }
             // v3 修复: 同步给 A 自己的 UI — broadcast SSE 事件让 A 的 owner 实时看到 B 的消息
             broadcast({
                 type: 'user',
@@ -658,6 +596,10 @@ async function handleV3P2PMessage(parsed, conn, comm) {
             };
             const agent = await getAgentForChannel(channelId, ch.did || '', ch.name, ch.didDocRef);
             fullResponse = await agent.promptStream(fullPrompt, streamCallback, undefined, channelId);
+            // 2026-07-06: 防御性兜底
+            if (!fullResponse.trim()) {
+                fullResponse = '⚠️ AI 未返回内容, 请重试';
+            }
             // v3 新增: 存 A 的 assistant 消息到 session — B 拉历史时能看到完整对话
             try {
                 const existing = await loadSession(channelId, 'default');
@@ -678,6 +620,25 @@ async function handleV3P2PMessage(parsed, conn, comm) {
             catch (saveErr) {
                 console.warn(`[v3] 存 assistant 消息失败 (不影响):`, saveErr.message);
             }
+            // 2026-07-05: A 的 assistant 回复也归档到 sender 的月度 — 这样 sender 本地也有一份"与 A 的对话"
+            try {
+                const { appendChatArchive } = await import('../bootstrap/chat-archiver.js');
+                const chanObj = (await loadChannels()).find(c => c.id === channelId);
+                await appendChatArchive({
+                    publicKey: senderKey,
+                    entry: {
+                        ts: new Date().toISOString(),
+                        source: 'ai-mention-remote',
+                        channelId, channelName: chanObj?.name,
+                        text: `[${v3P2PRef?.getPublicKey()?.slice(0, 12)}…] ${fullResponse.slice(0, 1500)}`,
+                        fromPublicKey: v3P2PRef?.getPublicKey(),
+                        msgType: 'ai',
+                    }
+                });
+            }
+            catch (archiveErr) {
+                console.warn('[chat-archive] remote ai 归档失败 (non-fatal):', archiveErr?.message?.slice(0, 200));
+            }
             // v3 修复: 同步给 A 自己的 UI — broadcast AI 回复给 A 的 owner 实时看到
             broadcast({
                 type: 'ai',
@@ -846,6 +807,26 @@ async function handleV3P2PMessage(parsed, conn, comm) {
             session.lastUpdated = new Date().toISOString();
             await saveSession(session);
             console.log(`[v3-cross] 收到远端 @-mention: ${originChannelName} → 本地 ${targetChannelName} (${text.length} chars)`);
+            // 2026-07-05: 跨渠道 @-mention 也归档到 fromPublicKey 的月度 — 本节点 owner 看月度历史能还原跨节点对话
+            if (fromPublicKey) {
+                try {
+                    const { appendChatArchive } = await import('../bootstrap/chat-archiver.js');
+                    await appendChatArchive({
+                        publicKey: fromPublicKey,
+                        entry: {
+                            ts: new Date().toISOString(),
+                            source: 'ai-mention-remote',
+                            channelId: targetChannelId, channelName: targetChannelName,
+                            text: `[跨渠道] from ${originChannelName}: ${text.slice(0, 1500)}`,
+                            fromPublicKey,
+                            msgType: 'ai',
+                        }
+                    });
+                }
+                catch (archiveErr) {
+                    console.warn('[chat-archive] cross.post 归档失败 (non-fatal):', archiveErr?.message?.slice(0, 200));
+                }
+            }
             // 推 SSE 让本地 UI 知道有跨渠道消息到达
             broadcast({
                 type: 'cross-mention-received',
@@ -860,6 +841,201 @@ async function handleV3P2PMessage(parsed, conn, comm) {
         }
         return;
     }
+    // ============== 2026-07-05: agent.manifest.exchange ==============
+    // 对方问: "给我你的 agent 清单 + capabilities"
+    // 我们回: agent.manifest.exchange.reply, 含本地 SubAgent + persona 描述
+    if (op === 'agent.manifest.exchange') {
+        try {
+            // 直接读 agents.json, 跳过 subagent-manager 的 lazy initialize
+            const localAgents = await loadLocalSubAgents();
+            // 转成 AgentManifestEntry
+            const entries = localAgents.map((a) => ({
+                id: a.id,
+                name: a.name,
+                capabilities: a.capabilities || [],
+                status: a.status || 'active',
+                peerId: a.peerId,
+                irohNodeId: a.irohNodeId,
+                sessionId: a.sessionId,
+                cid: a.cid,
+                ipnsName: a.ipnsName,
+            }));
+            // 读本地 persona 拿 owner 名字 + 简介
+            let ownerName = '';
+            let ownerDescription = '';
+            try {
+                const { readFileSync, existsSync } = await import('fs');
+                const p = path.join(process.env.HOME || '/tmp', '.bolloon', 'persona.json');
+                if (existsSync(p)) {
+                    const pj = JSON.parse(readFileSync(p, 'utf-8'));
+                    ownerName = pj.name || '';
+                    ownerDescription = pj.description || '';
+                }
+            }
+            catch { }
+            const manifest = {
+                ownerName,
+                ownerDescription,
+                ownerPublicKey: v3P2PRef?.getPublicKey() || '',
+                agents: entries,
+                publishedAt: Date.now(),
+                ...(await loadLocalResources()),
+            };
+            const reply = JSON.stringify({
+                v: 3, op: 'agent.manifest.exchange.reply',
+                payload: {
+                    manifest,
+                    since: parsed.payload?.since || 0,
+                }
+            });
+            await comm.sendToConnection(conn.id, reply);
+            // 2026-07-05: P2PDirect.sendToWithWait 双发 (兼容同机 P2PDirect 互不相连场景)
+            if (v3P2PRef && peerKey) {
+                try {
+                    const r = await v3P2PRef.sendToWithWait(peerKey, reply, 2000);
+                    console.log(`[v3-manifest] 回 ${peerKey.substring(0, 12)}... manifest (comm=${await comm.sendToConnection.length}, p2p=${r}, ${entries.length} agents)`);
+                }
+                catch { }
+            }
+            else {
+                console.log(`[v3-manifest] 回 ${peerKey.substring(0, 12)}... manifest (${entries.length} agents, owner=${ownerName || '?'})`);
+            }
+        }
+        catch (err) {
+            console.error('[v3-manifest] 处理 agent.manifest.exchange 失败:', err.message);
+        }
+        return;
+    }
+    // 对方推 manifest 过来 (我们这边是接收方)
+    if (op === 'agent.manifest.exchange.reply') {
+        try {
+            const manifest = parsed.payload?.manifest;
+            if (!manifest || !manifest.ownerPublicKey) {
+                console.warn('[v3-manifest] manifest.exchange.reply 缺 manifest/ownerPublicKey');
+                return;
+            }
+            // 2026-07-05 修复: 跳过自己的 manifest (Hyperswarm 内部 peer discovery 会推送自己)
+            const peerKey2 = manifest.ownerPublicKey;
+            if (v3P2PRef && peerKey2 === v3P2PRef.getPublicKey()) {
+                return;
+            }
+            // 增量: 如果 since >= 本地最新 ts, 跳过
+            const existing = await peerFs.readPeerIndex(peerKey2);
+            if (existing?.manifestTs && existing.manifestTs >= manifest.publishedAt && parsed.payload?.since) {
+                console.log(`[v3-manifest] ${peerKey2.substring(0, 12)}... manifest 已是最新 (ts=${manifest.publishedAt}), 跳过`);
+                return;
+            }
+            // 写 peer.json + _index.json + 每个 agent 的 md
+            await peerFs.upsertPeer({
+                publicKey: peerKey2,
+                name: manifest.ownerName,
+                lastSeenAt: new Date().toISOString(),
+                lastManifestTs: manifest.publishedAt,
+                manifestCount: (await peerFs.getPeer(peerKey2))?.manifestCount ?? 0 + 1,
+            });
+            // 拼 _index.json
+            const ownerDescription = manifest.ownerDescription || '';
+            const idx = {
+                version: 1,
+                publicKey: peerKey2,
+                ownerName: manifest.ownerName,
+                ownerDescription,
+                agents: manifest.agents,
+                groups: manifest.groups,
+                functions: manifest.functions,
+                exportments: manifest.exportments,
+                updatedAt: new Date().toISOString(),
+                manifestTs: manifest.publishedAt,
+            };
+            await peerFs.writePeerIndex(peerKey2, idx);
+            // 每个 agent 写一份 markdown
+            for (const a of manifest.agents) {
+                await peerFs.writeAgentDescription(peerKey2, a, ownerDescription);
+            }
+            // 2026-07-05: 4 类资源 (groups/function/exportment/science) 也落盘
+            const counts = await writeRemoteResources(peerKey2, manifest);
+            // capability-index.md (≤500 字, 进 prompt)
+            await peerFs.writeCapabilityIndex(peerKey2, idx);
+            console.log(`[v3-manifest] 收到 ${peerKey2.substring(0, 12)}... manifest (${manifest.agents.length} agents, owner=${manifest.ownerName || '?'}, +g${counts.groups}/f${counts.functions}/e${counts.exportments}/s${counts.sciences}) → 落盘`);
+            // 推 SSE 让前端知道"对方能力刷新了"
+            broadcast({
+                type: 'peer-manifest-updated',
+                fromPublicKey: peerKey2,
+                ownerName: manifest.ownerName,
+                agentCount: manifest.agents.length,
+                capabilityIndex: await peerFs.readCapabilityIndex(peerKey2),
+            }, 'p2p-global');
+        }
+        catch (err) {
+            console.error('[v3-manifest] 处理 manifest.exchange.reply 失败:', err.message);
+        }
+        return;
+    }
+    // 对方问: "给我某个 agent 的详细描述" (markdown 全文)
+    if (op === 'agent.resource.get') {
+        try {
+            const agentId = parsed.payload?.agentId;
+            if (!agentId)
+                return;
+            // 2026-07-05: 4 类资源 (group/function/exportment/science) 也走同一个 RPC
+            // 识别方式: id 前缀 group:/fn:/game:/exp:  → 读 ~/.bolloon/local-resources/<cat>/<id>.md
+            let body = '';
+            const prefixMatch = String(agentId).match(/^(group|fn|game|exp):(.+)$/);
+            if (prefixMatch) {
+                const cat = prefixMatch[1] === 'fn' ? 'functions'
+                    : prefixMatch[1] === 'game' ? 'exportments'
+                        : prefixMatch[1] === 'exp' ? 'sciences'
+                            : 'groups';
+                try {
+                    const fsPromises = await import('fs/promises');
+                    const safe = String(prefixMatch[2]).replace(/[^a-zA-Z0-9_-]/g, '_').slice(0, 64);
+                    const file = path.join(process.env.HOME || '/tmp', '.bolloon', 'local-resources', cat, `${safe}.md`);
+                    body = await fsPromises.readFile(file, 'utf-8');
+                }
+                catch {
+                    body = '';
+                }
+                const reply = JSON.stringify({
+                    v: 3, op: 'agent.resource.get.reply',
+                    payload: { agentId, body: body || '(空)', fromPublicKey: v3P2PRef?.getPublicKey() || '' }
+                });
+                await comm.sendToConnection(conn.id, reply);
+                return;
+            }
+            // 默认: 读本地 persona/<agentId>/agent.md (6 段 persona 之一)
+            try {
+                const fsPromises = await import('fs/promises');
+                const safeId = agentId.replace(/[^a-zA-Z0-9_-]/g, '_').slice(0, 64);
+                const file = path.join(process.env.HOME || '/tmp', '.bolloon', 'persona', safeId, 'agent.md');
+                body = await fsPromises.readFile(file, 'utf-8');
+            }
+            catch {
+                body = '';
+            }
+            // fallback: 用 subagent-manager 的 description
+            if (!body) {
+                const all = await loadLocalSubAgents();
+                const a = all.find((x) => x.id === agentId);
+                if (a?.persona?.description)
+                    body = a.persona.description;
+            }
+            const reply = JSON.stringify({
+                v: 3, op: 'agent.resource.get.reply',
+                payload: { agentId, body: body || '(空)', fromPublicKey: v3P2PRef?.getPublicKey() || '' }
+            });
+            await comm.sendToConnection(conn.id, reply);
+        }
+        catch (err) {
+            console.error('[v3-manifest] resource.get 失败:', err.message);
+        }
+        return;
+    }
+    // 对方回某 agent 的详细描述
+    if (op === 'agent.resource.get.reply') {
+        // 由 caller 端通过 rpcId 解析 (这里只 log)
+        console.log(`[v3-manifest] 收到 agent.resource.get.reply (agentId=${parsed.payload?.agentId}, body=${(parsed.payload?.body || '').length} chars)`);
+        return;
+    }
     console.log(`[v3] 收到未知 op: ${op}`);
 }
 async function buildJudgmentHint(channel, channelIdForLog) {
@@ -873,29 +1049,80 @@ async function buildJudgmentHint(channel, channelIdForLog) {
         const bound = allJudgments.filter(j => j.id !== undefined && boundIds.has(j.id));
         const others = allJudgments.filter(j => j.id !== undefined && !boundIds.has(j.id));
         let hint = '';
+        // 2026-07-06: 硬上限 — judgment 总数可能 1875 条 (1.3MB), 全注入会把 LLM context 撑爆
+        // MiniMax-M3 只有 8K context ≈ 32K 字符, 完整 judgment hint 必须 < 8K 字符
+        const HARD_LIMIT = 6000; // 总 hint 字符数 < 6K (留 ~26K 给 user + contextHint 其他部分)
+        const BOUND_MAX = 16; // 绑定最多 16 条
+        const OTHERS_MAX = 24; // 候选最多 24 条
+        let boundIncluded = 0;
+        let othersIncluded = 0;
+        let boundSkipped = 0;
+        let othersSkipped = 0;
         // 路 1: 用户手动绑定的 judgment — 硬约束, 必须遵循
         if (bound.length > 0) {
-            hint += `[系统上下文] 此 channel 用户绑定了 ${bound.length} 条判断力, 必须严格遵循:\n`;
+            const headerText = `[系统上下文] 此 channel 用户绑定了 ${bound.length} 条判断力, 必须严格遵循:\n`;
+            hint += headerText;
             for (const j of bound) {
+                if (boundIncluded >= BOUND_MAX) {
+                    boundSkipped++;
+                    continue;
+                }
+                if (hint.length >= HARD_LIMIT) {
+                    boundSkipped++;
+                    continue;
+                }
                 const decision = (j.decision || '').toString().slice(0, 200);
                 const reasonList = Array.isArray(j.reasons) ? j.reasons : [];
                 const reasonText = reasonList.length > 0
                     ? ` (理由: ${reasonList.join('; ').slice(0, 100)})`
                     : '';
-                hint += `- ${decision}${reasonText}\n`;
+                const line = `- ${decision}${reasonText}\n`;
+                if (hint.length + line.length > HARD_LIMIT) {
+                    boundSkipped++;
+                    continue;
+                }
+                hint += line;
+                boundIncluded++;
             }
             hint += '\n';
         }
         // 路 2: 全局 judgment 候选池 — 软参考, LLM 自己挑
         if (others.length > 0) {
-            hint += `[系统上下文] 候选判断力 (用户未明确绑定, 你可以按相关性自主选择参考):\n`;
-            for (const j of others) {
-                const decision = (j.decision || '').toString().slice(0, 120);
-                hint += `- [id=${j.id}] ${decision}\n`;
+            const headerText = `[系统上下文] 候选判断力 (用户未明确绑定, 你可以按相关性自主选择参考, 共 ${others.length} 条):\n`;
+            const footerText = `\n[系统上下文] 如果你的回复参考了某条候选判断力, 请在回复中自然提及 "我参考了你的判断: <decision 简述>" 即可, 无需复述 id.\n\n`;
+            // 先判断 header + footer 能不能放
+            if (hint.length + headerText.length + footerText.length < HARD_LIMIT) {
+                hint += headerText;
+                // 按 id 排序 (deterministic 取最近 N 条)
+                for (const j of others) {
+                    if (othersIncluded >= OTHERS_MAX) {
+                        othersSkipped++;
+                        continue;
+                    }
+                    if (hint.length + footerText.length >= HARD_LIMIT) {
+                        othersSkipped++;
+                        continue;
+                    }
+                    const decision = (j.decision || '').toString().slice(0, 120);
+                    const line = `- [id=${j.id}] ${decision}\n`;
+                    if (hint.length + line.length + footerText.length > HARD_LIMIT) {
+                        othersSkipped++;
+                        continue;
+                    }
+                    hint += line;
+                    othersIncluded++;
+                }
+                hint += footerText;
+            }
+            else {
+                othersSkipped = others.length;
             }
-            hint += `\n[系统上下文] 如果你的回复参考了某条候选判断力, 请在回复中自然提及 "我参考了你的判断: <decision 简述>" 即可, 无需复述 id.\n\n`;
         }
-        console.log(`[v3] channel ${channelIdForLog} 注入: 绑定 ${bound.length} 条, 候选 ${others.length} 条`);
+        // 2026-07-06: 加个 truncate hint (在统计日志打印出来)
+        if (boundSkipped > 0 || othersSkipped > 0) {
+            console.log(`[v3] channel ${channelIdForLog} judgment hint truncated: bound=${boundIncluded}/${bound.length} (skip ${boundSkipped}), others=${othersIncluded}/${others.length} (skip ${othersSkipped}), hint=${hint.length} chars / limit ${HARD_LIMIT}`);
+        }
+        console.log(`[v3] channel ${channelIdForLog} 注入: 绑定 ${bound.length} 条, 候选 ${others.length} 条 (实际 ${boundIncluded}+${othersIncluded})`);
         return hint;
     }
     catch (err) {
@@ -981,6 +1208,8 @@ async function getAgentForChannel(channelId, channelDid, channelName, channelDid
         cwd: process.cwd(),
         peerId: `channel-${channelId}:${currentSessionId}`,
         identityDoc,
+        // 2026-07-04: 透传 agentId 让 onSessionStart 加载 persona docs
+        agentId: channel?.agentId,
         // M2.3 (2026-06-17): 构造时从 session JSON 回灌历史 — 服务重启后 LLM 仍记得前面对话
         //   key 跟 server.ts:240 写入路径保持一致: ~/.bolloon/sessions/cache/<key>.json
         loadSessionKey: sessionKey,
@@ -998,6 +1227,7 @@ async function getAgentForChannel(channelId, channelDid, channelName, channelDid
     }
     return session;
 }
+// 2026-07-06: CreateWebServerOptions 抽到 ./server-types.ts (顶部 re-export)
 let selfImproveEnabled = false;
 export async function createWebServer(port = 3000, options = {}) {
     selfImproveEnabled = options.selfImprove ?? false;
@@ -1151,13 +1381,31 @@ export async function createWebServer(port = 3000, options = {}) {
                                     pending.reject(new Error(parsed.payload.error));
                                 }
                                 else {
-                                    pending.resolve({
+                                    const replyPayload = {
                                         channelId: parsed.payload.channelId,
                                         messages: parsed.payload.messages || [],
                                         lastUpdated: parsed.payload.lastUpdated,
                                         judgments: parsed.payload.judgments || { bound: [], candidates: [] },
                                         channelName: parsed.payload.channelName
+                                    };
+                                    // 2026-07-07 P0-C: 远端 channel 历史镜像 (B 端副本, 防 A 端删/损坏即丢)
+                                    // fire-and-forget — 不阻塞 RPC reply 返回 (上层是 on('data') 同步回调)
+                                    import('../bootstrap/remote-mirror.js')
+                                        .then(({ mirrorRemoteHistory }) => mirrorRemoteHistory({
+                                        targetPublicKey: evt.fromPublicKey,
+                                        channelId: parsed.payload.channelId,
+                                        channelName: parsed.payload.channelName,
+                                        messages: parsed.payload.messages || [],
+                                        lastUpdated: parsed.payload.lastUpdated,
+                                    }))
+                                        .then((r) => {
+                                        if (!r?.ok)
+                                            console.warn(`[v3-history] mirror 失败: ${r?.error}`);
+                                    })
+                                        .catch((mirrorErr) => {
+                                        console.warn(`[v3-history] mirror 抛错 (${evt.fromPublicKey.substring(0, 12)}/${parsed.payload.channelId}): ${mirrorErr?.message || mirrorErr}`);
                                     });
+                                    pending.resolve(replyPayload);
                                 }
                             }
                             return;
@@ -1228,6 +1476,66 @@ export async function createWebServer(port = 3000, options = {}) {
                             }, 'p2p-global');
                             return;
                         }
+                        // 2026-07-05: v3 P2PDirect 主路径也要独立处理 manifest.exchange.reply — 否则只走老通道就拿不到
+                        if (parsed.op === 'agent.manifest.exchange.reply') {
+                            const manifest = parsed.payload?.manifest;
+                            if (!manifest || !manifest.ownerPublicKey) {
+                                console.warn('[v3-manifest] manifest.exchange.reply 缺 manifest/ownerPublicKey');
+                                return;
+                            }
+                            const peerKey2 = manifest.ownerPublicKey;
+                            // 2026-07-05 修复: 跳过自己的 manifest
+                            if (v3P2PRef && peerKey2 === v3P2PRef.getPublicKey()) {
+                                return;
+                            }
+                            // 异步落盘, 不阻塞 data handler
+                            (async () => {
+                                try {
+                                    const existing = await peerFs.readPeerIndex(peerKey2);
+                                    if (existing?.manifestTs && existing.manifestTs >= manifest.publishedAt && parsed.payload?.since) {
+                                        console.log(`[v3-manifest] ${peerKey2.substring(0, 12)}... manifest 已是最新, 跳过`);
+                                        return;
+                                    }
+                                    await peerFs.upsertPeer({
+                                        publicKey: peerKey2,
+                                        name: manifest.ownerName,
+                                        lastSeenAt: new Date().toISOString(),
+                                        lastManifestTs: manifest.publishedAt,
+                                    });
+                                    const ownerDescription = manifest.ownerDescription || '';
+                                    const idx = {
+                                        version: 1,
+                                        publicKey: peerKey2,
+                                        ownerName: manifest.ownerName,
+                                        ownerDescription,
+                                        agents: manifest.agents,
+                                        groups: manifest.groups,
+                                        functions: manifest.functions,
+                                        exportments: manifest.exportments,
+                                        updatedAt: new Date().toISOString(),
+                                        manifestTs: manifest.publishedAt,
+                                    };
+                                    await peerFs.writePeerIndex(peerKey2, idx);
+                                    for (const a of manifest.agents) {
+                                        await peerFs.writeAgentDescription(peerKey2, a, ownerDescription);
+                                    }
+                                    const counts = await writeRemoteResources(peerKey2, manifest);
+                                    await peerFs.writeCapabilityIndex(peerKey2, idx);
+                                    console.log(`[v3-manifest] (P2PDirect) 收到 ${peerKey2.substring(0, 12)}... manifest (${manifest.agents.length} agents, owner=${manifest.ownerName || '?'}, +g${counts.groups}/f${counts.functions}/e${counts.exportments}/s${counts.sciences}) → 落盘`);
+                                    broadcast({
+                                        type: 'peer-manifest-updated',
+                                        fromPublicKey: peerKey2,
+                                        ownerName: manifest.ownerName,
+                                        agentCount: manifest.agents.length,
+                                        capabilityIndex: await peerFs.readCapabilityIndex(peerKey2),
+                                    }, 'p2p-global');
+                                }
+                                catch (err) {
+                                    console.error('[v3-manifest] (P2PDirect) manifest.exchange.reply 失败:', err.message);
+                                }
+                            })();
+                            return;
+                        }
                         // 2026-06-10: 收到对方请求本机的 channel 列表 (启动时主动发请求, 加速 cache 填充)
                         if (parsed.op === 'agent.meta.list.request') {
                             console.log(`[v3-meta] 收到 ${evt.fromPublicKey.substring(0, 12)}... 的 channel 列表请求 → 立刻回包`);
@@ -1269,6 +1577,47 @@ export async function createWebServer(port = 3000, options = {}) {
                         console.error('[v3] 新连接发 list.reply 失败:', err.message);
                     }
                 }, 500);
+                // 2026-07-05: 新连接到来立刻推自己的 manifest — 让对方秒知道我有哪些 agent
+                setTimeout(async () => {
+                    try {
+                        // 跳过自己的连接 (Hyperswarm 内部 peer discovery 会推自己过来, 形成循环)
+                        if (v3P2PRef && evt.remotePublicKey === v3P2PRef.getPublicKey()) {
+                            return;
+                        }
+                        const localAgents = await loadLocalSubAgents();
+                        const entries = localAgents.map((a) => ({
+                            id: a.id, name: a.name,
+                            capabilities: a.capabilities || [],
+                            status: a.status || 'active',
+                            peerId: a.peerId, irohNodeId: a.irohNodeId,
+                            sessionId: a.sessionId, cid: a.cid, ipnsName: a.ipnsName,
+                        }));
+                        let ownerName = '';
+                        try {
+                            const fsPromises = await import('fs/promises');
+                            const p = (process.env.HOME || '/tmp') + '/.bolloon/persona.json';
+                            const raw = await fsPromises.readFile(p, 'utf-8');
+                            ownerName = JSON.parse(raw).name || '';
+                        }
+                        catch { }
+                        const manifest = {
+                            ownerName,
+                            ownerPublicKey: v3P2PRef?.getPublicKey() || '',
+                            agents: entries,
+                            publishedAt: Date.now(),
+                            ...(await loadLocalResources()),
+                        };
+                        const msg = JSON.stringify({
+                            v: 3, op: 'agent.manifest.exchange.reply',
+                            payload: { manifest, since: 0 }
+                        });
+                        const r = await v3P2PRef.sendToWithWait(evt.remotePublicKey, msg, 3000);
+                        console.log(`[v3-manifest] 新连接 ${evt.remotePublicKey.substring(0, 12)}... → 主动推 manifest (${entries.length} agents, p2p=${r})`);
+                    }
+                    catch (err) {
+                        console.error('[v3-manifest] 新连接推 manifest 失败:', err.message);
+                    }
+                }, 800);
             });
             console.log(`[v3] P2PDirect 已启动, role=${v3P2PRef.getRole()}, publicKey=${v3P2PRef.getPublicKey().substring(0, 12)}...`);
             // v3: 启动后自动重连 known peers — 让"启动就互联"成为现实
@@ -1298,6 +1647,10 @@ export async function createWebServer(port = 3000, options = {}) {
                     // 2026-06-10: 同时主动请求每个 known peer 把 ta 的 channel 列表推过来
                     // 避免对面 publicKey 没变但 cache 丢了(本机重启) → 一直空
                     setTimeout(() => requestChannelsFromAllPeers(), 3500);
+                    // 2026-07-05: 拉每个 known peer 的 manifest (agent 能力清单)
+                    setTimeout(() => requestManifestsFromAllPeers(), 4500);
+                    // 2026-07-05: 对方刚连上来, 把本地的 outbox 重发出去
+                    setTimeout(() => flushAllOutboxes(), 6000);
                 }
                 catch (err) {
                     console.error('[v3] 自动重连失败:', err.message);
@@ -1330,6 +1683,78 @@ export async function createWebServer(port = 3000, options = {}) {
             // 立即跑一次 + 每 30s 兜底 (跟 v3BroadcastOwn 一样的节奏)
             setTimeout(requestChannelsFromAllPeers, 4000);
             setInterval(requestChannelsFromAllPeers, 30000);
+            // 2026-07-05 新增: 主动向所有 known peer 发起 manifest 拉取
+            async function requestManifestsFromAllPeers() {
+                if (!v3P2PRef)
+                    return;
+                try {
+                    const { listPeers } = await import('../network/known-peers.js');
+                    const peers = await listPeers();
+                    const myPk = v3P2PRef.getPublicKey();
+                    let sent = 0;
+                    for (const peer of peers) {
+                        if (peer.publicKey === myPk)
+                            continue;
+                        // 增量: since = 本地已有的 lastManifestTs, 对端 manifestTs <= since 则跳过
+                        const peerRec = await peerFs.getPeer(peer.publicKey);
+                        const since = peerRec?.lastManifestTs || 0;
+                        const req = JSON.stringify({
+                            v: 3, op: 'agent.manifest.exchange',
+                            payload: { since, fromPublicKey: myPk }
+                        });
+                        const r = await v3P2PRef.sendToWithWait(peer.publicKey, req, 3000);
+                        if (r === 'SENT')
+                            sent++;
+                    }
+                    console.log(`[v3-manifest] requestManifestsFromAllPeers → sent=${sent}/${peers.length - 1}`);
+                }
+                catch (err) {
+                    console.warn('[v3-manifest] requestManifestsFromAllPeers failed:', err.message);
+                }
+            }
+            // 每 5 分钟兜底 (manifest 增量拉取)
+            setInterval(requestManifestsFromAllPeers, 5 * 60 * 1000);
+            // 2026-07-05 新增: 把每个 peer 的 outbox 队列重发出去 (对方上线后)
+            async function flushAllOutboxes() {
+                if (!v3P2PRef)
+                    return;
+                try {
+                    const { listPeers } = await import('../network/known-peers.js');
+                    const peers = await listPeers();
+                    const myPk = v3P2PRef.getPublicKey();
+                    let totalFlushed = 0;
+                    for (const peer of peers) {
+                        if (peer.publicKey === myPk)
+                            continue;
+                        const outbox = await peerFs.readOutbox(peer.publicKey);
+                        if (outbox.length === 0)
+                            continue;
+                        let sent = 0;
+                        for (const entry of outbox) {
+                            const rpc = JSON.stringify({ v: 3, op: entry.op, payload: entry.payload });
+                            const r = await v3P2PRef.sendToWithWait(peer.publicKey, rpc, 3000);
+                            if (r === 'SENT')
+                                sent++;
+                        }
+                        if (sent > 0) {
+                            // 全部成功 → 清空; 部分成功 → 写回剩余 (简单起见, 全成功才清)
+                            if (sent === outbox.length) {
+                                await peerFs.clearOutbox(peer.publicKey);
+                                totalFlushed += sent;
+                                console.log(`[v3-outbox] flush → ${peer.publicKey.substring(0, 12)}... 重发 ${sent} 条 ✓`);
+                            }
+                        }
+                    }
+                    if (totalFlushed > 0) {
+                        console.log(`[v3-outbox] 累计重发 ${totalFlushed} 条离线消息`);
+                    }
+                }
+                catch (err) {
+                    console.warn('[v3-outbox] flushAllOutboxes failed:', err.message);
+                }
+            }
+            // 每 2 分钟兜底 flush
+            setInterval(flushAllOutboxes, 2 * 60 * 1000);
         }
         catch (err) {
             console.error('[v3] P2PDirect 启动失败:', err.message);
@@ -1340,6 +1765,9 @@ export async function createWebServer(port = 3000, options = {}) {
         // v3 修复: 用 setInterval 替代一次性 setTimeout, 确保分享变更后能持续推送给 peer
         setInterval(v3BroadcastOwn, 30000);
         // 保留 @diap/sdk 的旧实例 (它的 Hyperswarm 实例能帮 P2PDirect 做 DHT bootstrap)
+        // 2026-07-04: hyperswarm 4.x 删除了 Discovery.update() (被 .flushed() 替代).
+        //   @diap/sdk 0.1.10 还调 .update(), 是上游 bug (已记录 docs/plans/2026-06-17-supervisor-iter-1.md).
+        //   这里静默 joinTopic 失败, P2PDirect (v3 主路径) 不依赖 @diap/sdk, 不影响功能.
         try {
             const rawSeed = crypto.getRandomValues(new Uint8Array(32));
             p2pCommunicator = createHyperswarmCommunicator({
@@ -1353,13 +1781,38 @@ export async function createWebServer(port = 3000, options = {}) {
                 // 旧 p2p_message 路径 (非 v3)
                 const content = new TextDecoder().decode(msg.content);
                 broadcast({ type: 'p2p_message', from: conn.publicKey.substring(0, 8), content }, undefined);
+                // 2026-07-05: 老通道也要走 v3 RPC handler — 兼容同机/跨机 P2PDirect 互不相连的场景
+                //   实测: P2PDirect 用 hyperswarm 4.x, 同机 2 role 互不相连; 但 @diap/sdk 0.1.10 的 HyperswarmCommunicator 能互通
+                //   所以 manifest/exchange/chat.send 都可能从老通道来, 必须进 handleV3P2PMessage
+                try {
+                    const parsed = JSON.parse(content);
+                    if (parsed && parsed.v === 3 && parsed.op && p2pCommunicator) {
+                        await handleV3P2PMessage(parsed, conn, p2pCommunicator);
+                    }
+                }
+                catch (err) {
+                    // 非 v3 JSON 帧 (老 p2p_message), 静默忽略
+                }
             });
             await p2pCommunicator.start();
             // @diap/sdk 也 join topic — 它的 Hyperswarm 实例帮 P2PDirect 做 DHT 引导
-            // @diap/sdk 收到的数据是 mock (不真发), 但 DHT 发现 + 节点连接是 OK 的
+            // joinTopic 失败已知 (hyperswarm 4.x + @diap/sdk 0.1.10), catch 静默
             const oldTopic = createTopic('bolloon-agent-harness');
-            await p2pCommunicator.joinTopic(oldTopic);
-            console.log(`P2P 老通道已就绪 (DHT bootstrap 帮 P2PDirect, 实际数据走 P2PDirect)`);
+            try {
+                await p2pCommunicator.joinTopic(oldTopic);
+                console.log(`P2P 老通道已就绪 (DHT bootstrap 帮 P2PDirect, 实际数据走 P2PDirect)`);
+            }
+            catch (joinErr) {
+                // 已知: @diap/sdk 0.1.10 + hyperswarm 4.x → discovery.update is not a function
+                // v3 P2PDirect 是主路径, 此处不阻断
+                const msg = String(joinErr?.message || joinErr);
+                if (msg.includes('discovery.update') || msg.includes('is not a function')) {
+                    console.warn(`[v3-legacy] @diap/sdk joinTopic 失败 (已知 hyperswarm 4.x 兼容问题, 已忽略): ${msg}`);
+                }
+                else {
+                    throw joinErr;
+                }
+            }
         }
         catch (e) {
             console.log(`P2P 老通道初始化失败: ${e.message}`);
@@ -1382,6 +1835,12 @@ export async function createWebServer(port = 3000, options = {}) {
         next();
     });
     app.use(express.static(webRoot));
+    // 2026-07-01 (v0.2.6 修复): 前端 message-renderer import 了 src/agents/chat-segmenter.js,
+    //   浏览器加载时按相对路径解析成 /agents/chat-segmenter.js. 这个路径在 webRoot (dist/web) 之外.
+    //   解决: 把 dist/agents 也 mount 到 /agents 静态路径, 让前端 import 解析成功.
+    //   这条不破坏 segmenter 内部 import (Node 走文件系统, 浏览器走 HTTP).
+    const agentsRoot = path.join(webRoot, '..', 'agents');
+    app.use('/agents', express.static(agentsRoot));
     app.get('/', (req, res) => {
         res.sendFile(join(webRoot, 'index.html'));
     });
@@ -1410,6 +1869,61 @@ export async function createWebServer(port = 3000, options = {}) {
     }
     app.get('/', serveStaticHtml('index.html', 'index.html not found; please run `npm run build:web`', 'index'));
     app.get('/api-config', serveStaticHtml('api-config.html', 'api-config.html not found; please run `npm run build:web`', 'api-config'));
+    // 2026-07-01 (v0.2.5): 输入验证 + 健康检查 API
+    //   - POST /api/validate-input: 前端发送前预校验, 避免后端 reject
+    //   - GET  /api/health: liveness probe + validators 清单
+    //   这些端点不依赖 LLM / P2P, 永远可以响应.
+    app.post('/api/validate-input', async (req, res) => {
+        try {
+            const body = req.body ?? {};
+            const kind = body.kind || 'message';
+            let result;
+            if (kind === 'channel') {
+                result = validateChannelInput({ name: body.name, agentId: body.agentId });
+            }
+            else {
+                result = validateMessageInput({ text: body.text, channelId: body.channelId });
+            }
+            res.json({
+                ok: result.ok,
+                severity: result.severity ?? (result.ok ? 'info' : 'block'),
+                reason: result.reason,
+                cleaned: result.cleaned,
+                kind,
+            });
+        }
+        catch (e) {
+            res.status(400).json({ ok: false, severity: 'block', reason: e?.message ?? 'parse error' });
+        }
+    });
+    app.get('/api/health', (_req, res) => {
+        res.json(healthCheck(getPackageVersion()));
+    });
+    // 2026-07-01 (v0.2.6): 前后端分离核心 — 后端切 LLM 输出为结构化 segments
+    //   - POST /api/segment-reply { reply, knownTools }
+    //   - 返回 ChatSegment[] (think / text / env_details / tool_call / final)
+    //   前端拿到 segments 后只渲染, 不知道任何 LLM 格式 (minimax <invoke>, Hermes <tool_call>, Qwen function_calls, JSON 形式)
+    app.post('/api/segment-reply', async (req, res) => {
+        try {
+            const body = req.body ?? {};
+            const reply = typeof body.reply === 'string' ? body.reply : '';
+            const knownToolsArr = Array.isArray(body.knownTools) ? body.knownTools : [];
+            const knownToolNames = new Set(knownToolsArr.filter((s) => typeof s === 'string'));
+            const segments = segmentChatReply(reply, { knownToolNames });
+            res.json({
+                ok: true,
+                input_length: reply.length,
+                segments,
+                segments_count: segments.length,
+                has_think: segments.some(s => s.type === 'think'),
+                has_tool_call: segments.some(s => s.type === 'tool_call'),
+                has_final: segments.some(s => s.type === 'final'),
+            });
+        }
+        catch (e) {
+            res.status(400).json({ ok: false, reason: e?.message ?? 'parse error' });
+        }
+    });
     // 全局兜底: 任何 next(err) 走到这里, 给出结构化 4xx/5xx 而不是默认 HTML
     app.use((err, req, res, _next) => {
         console.error('[server] unhandled error on', req.method, req.path, '-', err?.message || err);
@@ -1451,6 +1965,10 @@ export async function createWebServer(port = 3000, options = {}) {
         // 获取频道信息（只取轻量引用, 不再读完整 DID 文档）
         const channels = await loadChannels();
         const channel = channels.find(c => c.id === channelId);
+        // 2026-07-07 H2 修复: channel 不存在 → 404 (之前静默通过, 消息写到孤儿目录)
+        if (!channel) {
+            return res.status(404).json({ error: 'channel not found', channelId });
+        }
         const currentSessionId = channel?.currentSessionId || 'default';
         const realChannelDid = channelDid || channel?.did || '';
         const realChannelName = channel?.name || '';
@@ -1479,9 +1997,23 @@ export async function createWebServer(port = 3000, options = {}) {
         }
         runState.running = true;
         runState.abortController = new AbortController();
+        // 2026-07-04: pivot loop safety net — 防止 LLM hang (minimax M3
+        //   偶尔反复 think 不输出 <final gen>, pivot 连 5 次无进展时会 hang 在
+        //   quality 评估). setTimeout 让 LLM 客户端收 signal 主动 break.
+        // 2026-07-06: 30s 太短 — minimax M3 单次 LLM 约 10s, pivot 默认 moderate profile 30 iter
+        //   留 ~300s. 之前 30s 自动 abort 时, 一次"你好"调用就被截断, 用户看到 ❌ 循环异常 + 空内容.
+        //   改为 5 分钟 = 5x 实际耗时上限.
+        const PIVOT_FORCE_TIMEOUT_MS = 5 * 60 * 1000;
+        const forceTimeout = setTimeout(() => {
+            console.warn(`[server] /message pivot 强制 timeout (${PIVOT_FORCE_TIMEOUT_MS}ms), aborting`);
+            runState.abortController?.abort();
+        }, PIVOT_FORCE_TIMEOUT_MS);
         broadcastQueueUpdate(channelId);
+        // 2026-07-01 (v0.2.5): hoist sessionKey 到 try 外, 让 finally 块的 saveCurrentSession 能用
+        const sessionKey = `${channelId}:${currentSessionId}`;
+        let agent = null;
         try {
-            const agent = await getAgentForChannel(channelId, realChannelDid, realChannelName, realChannelDidDoc);
+            agent = await getAgentForChannel(channelId, realChannelDid, realChannelName, realChannelDidDoc);
             let fullResponse = '';
             // P0.5: 注入门回传的 usedIds, 落 session message metadata, UI 可查
             let usedJudgmentIds = [];
@@ -1511,6 +2043,16 @@ export async function createWebServer(port = 3000, options = {}) {
                         broadcast({ type: 'workflow_step', step: 'AI 思考', content: event.content.substring(0, 100) }, channelId);
                     }
                 }
+                else if (event.type === 'reply-preview') {
+                    // 2026-07-06: pivot 每 iter 把完整 reply 推给前端 — 前端可以更新临时气泡
+                    //   等 loop 退完 type=ai 终文事件覆盖. 不依赖整个 promptWithPivotLoop 返回.
+                    //   这样 pivot 中途网络慢 / 5min-long 任务, 用户看到中间内容不是空白 + '任务处理超时'.
+                    broadcast({
+                        type: 'reply-preview',
+                        content: event.content,
+                        iteration: event.iteration,
+                    }, channelId);
+                }
                 else if (event.type === 'status' || event.type === 'tool') {
                     broadcast({ type: 'status', tool: event.tool, content: event.content }, channelId);
                     broadcast({ type: 'workflow_step', step: event.tool || '系统', content: event.content }, channelId);
@@ -1701,19 +2243,41 @@ export async function createWebServer(port = 3000, options = {}) {
             }
             if (contextHint)
                 contextHint += '\n';
+            // 2026-07-06: 全局 contextHint 硬裁 — MiniMax-M3 context window 8K token ≈ 32K 字符
+            //   如果 contextHint 超过 14K 字符 (留 ~18K 给 userText + LLM 输出 + system), 主动截断
+            const CONTEXT_LIMIT = 14000;
+            let contextTruncated = false;
+            if (contextHint.length > CONTEXT_LIMIT) {
+                const originalLen = contextHint.length;
+                contextHint = contextHint.slice(0, CONTEXT_LIMIT);
+                contextHint += `\n[系统上下文] (...剩余 ${originalLen - CONTEXT_LIMIT} 字符因 context window 限制已截断, 完整内容请用 /judgments 查)\n`;
+                contextTruncated = true;
+                console.warn(`[chat] channel=${channelId} contextHint truncated: ${originalLen} -> ${contextHint.length} chars`);
+            }
             try {
                 // 2026-06-15: 把 user text 单独 marker 包起来, LLM 不会被 8K+ 的 system context 吞掉
                 //   (之前 contextHint + text 拼成一整段当 user role, 24 字符的 user input 埋在 8K+ 里看不出)
                 //   修法: contextHint 当 "背景信息", text 当 "本轮用户请求" — 显式 marker 让 LLM 区分
                 // 2026-06-15 二次修: 把 text 放在最前 (LLM 看到 input 第一眼是 user text, 不会被 judgmentHint 末尾
                 //   的 "..." 误判为整个 input 截断)
-                const markedPrompt = `【本轮用户请求】\n${text}\n【请求结束】\n\n${contextHint}`;
+                // 2026-07-05: prepend nextPromptHints (manifest-loader 加载的对方能力, 仅本次生效)
+                let extraHint = '';
+                const hint = nextPromptHints.get(channelId);
+                if (hint) {
+                    extraHint = hint + '\n\n';
+                    nextPromptHints.delete(channelId);
+                }
+                const markedPrompt = `${extraHint}【本轮用户请求】\n${text}\n【请求结束】\n\n${contextHint}`;
                 fullResponse = await agent.promptStream(markedPrompt, streamCallback, runState.abortController?.signal, channelId);
             }
             catch (err) {
                 // abort 抛错: 保留已输出的部分 (fullResponse 可能是空字符串)
                 if (runState.abortController?.signal.aborted || err?.name === 'AbortError') {
                     console.log(`[chat] aborted channel=${channelId}`);
+                    // 2026-07-06: abort 时 fullResponse 可能为空 (LLM 还没输出), 必须给用户一个反馈
+                    if (!fullResponse.trim()) {
+                        fullResponse = '⚠️ 生成已中断 (用户取消)';
+                    }
                 }
                 else {
                     // M1.2 (2026-06-17): 不再 rethrow — 把错误塞到 fullResponse 让 broadcast 出来, 后续 session 仍保存
@@ -1723,10 +2287,22 @@ export async function createWebServer(port = 3000, options = {}) {
                     broadcast({ type: 'error', content: fullResponse }, channelId);
                 }
             }
-            // abort 模式: 给 partial 拼后缀
-            if (runState.abortController?.signal.aborted && fullResponse.trim().length > 0) {
+            // abort 模式: 给 partial 拼后缀 — 只在 LLM 真有输出时加中断标记,
+            //   跳过空响应 + 跳过 [AI 服务调用失败] fallback (这些本身就是错误占位, 拼
+            //   "[生成已中断]" 会误导用户)
+            const hasRealLlmOutput = fullResponse.trim().length > 0 &&
+                !fullResponse.trimStart().startsWith('[AI 服务调用失败]');
+            if (runState.abortController?.signal.aborted && hasRealLlmOutput) {
                 fullResponse = fullResponse + '\n\n_[生成已中断]_';
             }
+            // 2026-06-18: 修 lastFinalReply 没设 → /api/loop/inspect 永远返回空
+            runState.lastFinalReply = fullResponse;
+            // 2026-07-06: 防御性兜底 — fullResponse 为空时, 前端 segmentChatReply('') 返回 [],
+            //   导致气泡不渲染, 用户只看到"思考中"占位符. 这里保证永远有内容可渲染.
+            if (!fullResponse.trim()) {
+                fullResponse = '⚠️ AI 未返回内容, 请重试';
+                console.warn(`[chat] fullResponse empty for channel=${channelId}, using fallback`);
+            }
             // v3 新增: 解析 LLM 回复里的 @-mentions, 转发到目标 channel
             await routeMentionsInReply(channelId, fullResponse, localChannels, remoteChannels);
             broadcast({ type: 'ai', content: fullResponse }, channelId);
@@ -1746,6 +2322,117 @@ export async function createWebServer(port = 3000, options = {}) {
             });
             session.lastUpdated = new Date().toISOString();
             await saveSession(session);
+            // 2026-07-04: 写 session 后, 调 memory-compressor 把消息历史压缩到
+            //   ~/.bolloon/memory/<channel.agentId>/sessions/<safe-channel>__<safe-session>.summary.md
+            // 失败静默, 不阻塞 /message 主路径.
+            try {
+                const channelsForMemory = await loadChannels();
+                const channelForMemory = channelsForMemory.find(c => c.id === channelId);
+                if (channelForMemory?.agentId) {
+                    const { compressSessionToMemory } = await import('../bootstrap/memory-compressor.js');
+                    const compressRes = await compressSessionToMemory({
+                        agentId: channelForMemory.agentId,
+                        channelId,
+                        sessionId: currentSessionId,
+                    });
+                    if (!compressRes.skipped && compressRes.bytesWritten > 0) {
+                        console.log(`[memory] compressed ${compressRes.messagesCount} new messages for ${channelForMemory.agentId}/${channelId} → ${compressRes.summaryPath} (${compressRes.bytesWritten}B)`);
+                    }
+                }
+            }
+            catch (memErr) {
+                console.warn('[memory] compressSessionToMemory failed (non-fatal):', memErr?.message?.slice(0, 200));
+            }
+            // 2026-07-05: 把 session 里的 user/ai 消息按涉及到的远端 peer 归档到月度 markdown
+            //   触发条件: 消息里出现过 @远端 channel, 或者 session 历史上与该 peer 通信过
+            //   失败静默, 不阻塞主对话
+            try {
+                const { appendChatArchive } = await import('../bootstrap/chat-archiver.js');
+                // 找到这条消息涉及到的远端 peer (从 routeMentionsInReply 的结果推断 — 简单起见直接遍历 remoteChannels)
+                const localChannels2 = (await loadChannels());
+                const remoteChannels2 = [];
+                for (const [peerPk, list] of remoteChannelCache.entries()) {
+                    for (const ch of list) {
+                        remoteChannels2.push({ ...ch, _ownerPublicKey: peerPk });
+                    }
+                }
+                // 找出本次 text/fullResponse 里出现 @ 的 channel 对应的 owner pk
+                const peerSet = new Set();
+                const mentionRe = /@([一-龥A-Za-z0-9_\-]{1,30})/g;
+                const mentionedNames = new Set();
+                for (const m of text.matchAll(mentionRe))
+                    mentionedNames.add(m[1]);
+                for (const m of fullResponse.matchAll(mentionRe))
+                    mentionedNames.add(m[1]);
+                for (const rc of remoteChannels2) {
+                    if (mentionedNames.has(rc.name))
+                        peerSet.add(rc._ownerPublicKey);
+                }
+                // 追加到每个相关 peer 的月度归档
+                for (const pk of peerSet) {
+                    await appendChatArchive({
+                        publicKey: pk,
+                        entry: {
+                            ts: new Date().toISOString(),
+                            source: 'local',
+                            channelId, channelName: (await loadChannels()).find(c => c.id === channelId)?.name,
+                            text: `[本节点] user: ${text.slice(0, 500)}\n[本节点] ai: ${fullResponse.slice(0, 800)}`,
+                            fromPublicKey: v3P2PRef?.getPublicKey(),
+                            msgType: 'user',
+                        }
+                    });
+                }
+            }
+            catch (archiveErr) {
+                console.warn('[chat-archive] append failed (non-fatal):', archiveErr?.message?.slice(0, 200));
+            }
+            // 2026-07-05: 懒加载触发器 — 探测到 @-mention 远端 / 连续失败 / 关键词, 拉对方 manifest
+            //   把 capability-index 拼到下一次 prompt 上下文 (只生效 1 次, 不污染主循环)
+            try {
+                const { detectLoadTrigger, loadPeerManifest, clearFailure } = await import('../agents/peer-manifest-loader.js');
+                const remoteChannelsForDetect = [];
+                for (const [peerPk, list] of remoteChannelCache.entries()) {
+                    for (const ch of list) {
+                        remoteChannelsForDetect.push({ ...ch, _ownerPublicKey: peerPk });
+                    }
+                }
+                // 检测 + 加载
+                const detection = detectLoadTrigger({
+                    text,
+                    channelId,
+                    remoteChannels: remoteChannelsForDetect,
+                });
+                if (detection.shouldLoad && detection.remotePublicKey && v3P2PRef) {
+                    const result = await loadPeerManifest({
+                        channelId,
+                        channelName: (await loadChannels()).find(c => c.id === channelId)?.name,
+                        reason: detection.reason,
+                        triggerValue: detection.triggerValue,
+                        remotePublicKey: detection.remotePublicKey,
+                    }, { p2p: v3P2PRef });
+                    if (result && result.promptBlock) {
+                        console.log(`[manifest-loader] ${detection.reason} → ${detection.remotePublicKey.slice(0, 12)}... (${result.durationMs}ms, rpc=${result.rpcTriggered}, agents=${result.agentDescriptions.length})`);
+                        // 把 promptBlock 推给前端 + 写入一次性的 prompt 附加 (nextPromptHint 全局变量, 在下次 agent.promptStream 前 prepend)
+                        broadcast({
+                            type: 'peer-manifest-loaded',
+                            fromPublicKey: detection.remotePublicKey,
+                            reason: detection.reason,
+                            promptBlock: result.promptBlock,
+                            capabilityIndex: result.capabilityIndex,
+                        }, channelId);
+                        // 缓存到 channel 维度的 nextPromptHint (下一次 LLM prompt 前 inject)
+                        nextPromptHints.set(channelId, (nextPromptHints.get(channelId) || '') + '\n\n' + result.promptBlock);
+                        clearFailure(channelId);
+                    }
+                }
+                else {
+                    // 没触发, 也清掉连续失败计数 (用户消息说明对话还在正常进行)
+                    clearFailure(channelId);
+                }
+            }
+            catch (loaderErr) {
+                console.warn('[manifest-loader] failed (non-fatal):', loaderErr?.message?.slice(0, 200));
+            }
             const channels = await loadChannels();
             const channel = channels.find(c => c.id === channelId);
             // 2026-06-11: 移除 suggestRename 的二次 LLM 调用 — 之前每次用户发消息, 智能体 channel 都会再调一次 LLM (5-8s) 自动改名
@@ -1807,6 +2494,10 @@ export async function createWebServer(port = 3000, options = {}) {
                 res.status(500).json({ error: err.message });
         }
         finally {
+            // 2026-07-04: 清掉 pivot 强制 timeout timer, 避免 hang 情况下 timer 在
+            //   process 里一直挂着. forceTimeout 在 try 外创建, finally 在闭包里
+            //   能直接拿到引用.
+            clearTimeout(forceTimeout);
             // queue dequeue: 跑完或失败都要清状态
             // 当前实现: 自动接下一条需要把 ~200 行 try 块抽函数, 暂不抽.
             // 替代: 用户点 [队列 +N] 按钮时, 客户端发起一个特殊的 HTTP 请求触发下一条
@@ -1814,6 +2505,18 @@ export async function createWebServer(port = 3000, options = {}) {
             runState.running = false;
             runState.abortController = null;
             broadcastQueueUpdate(channelId);
+            // 2026-07-01 (v0.2.5): 持久化当前 messageHistory — 让 web 用户跨刷新保留对话.
+            //   saveCurrentSession 失败静默, 不阻塞 channel 状态清理.
+            //   saveCurrentSession 内部走 SessionStore (默认 ~/.bolloon/sessions/cache/<sessionKey>.json).
+            //   agent 可能在 try 抛错后仍为 null (getAgentForChannel 失败), null-guard 跳过 save.
+            if (agent) {
+                try {
+                    await agent.saveCurrentSession(sessionKey);
+                }
+                catch (saveErr) {
+                    console.warn(`[web] saveCurrentSession failed (non-fatal): ${saveErr?.message?.slice(0, 100)}`);
+                }
+            }
         }
     });
     // ---------- 频道元数据后台修复队列 ----------
@@ -1922,7 +2625,7 @@ export async function createWebServer(port = 3000, options = {}) {
     async function getChannelsWithDID() {
         const now = Date.now();
         // 缓存命中: 数据有效 AND 在写盘之后 AND 在 TTL 内
-        if (channelsCache.data && channelsCache.cachedAt > lastChannelsWriteAt && channelsCache.cachedAt + CHANNELS_CACHE_TTL_MS > now) {
+        if (channelsCache.data && channelsCache.cachedAt > getLastChannelsWriteAt() && channelsCache.cachedAt + CHANNELS_CACHE_TTL_MS > now) {
             return channelsCache.data;
         }
         const channels = await loadChannels();
@@ -1946,7 +2649,7 @@ export async function createWebServer(port = 3000, options = {}) {
             // 2026-06-17: 缓存命中 → 0 行;未命中 → 1 行 summary (上面 console.log proxy 已吃掉 [API] /channels 等旧日志)
             const t0 = Date.now();
             const now = t0;
-            const hit = !!(channelsCache.data && channelsCache.cachedAt > lastChannelsWriteAt && channelsCache.cachedAt + CHANNELS_CACHE_TTL_MS > now);
+            const hit = !!(channelsCache.data && channelsCache.cachedAt > getLastChannelsWriteAt() && channelsCache.cachedAt + CHANNELS_CACHE_TTL_MS > now);
             const channels = await getChannelsWithDID();
             if (!hit) {
                 console.log(`[channels] refresh, n=${channels.length}, t=+${Date.now() - t0}ms`);
@@ -2450,8 +3153,58 @@ export async function createWebServer(port = 3000, options = {}) {
             res.status(500).json({ error: err.message });
         }
     });
+    // 2026-07-07 P1-C: 列出 channel 的项目事件日志 (L2)
+    // 用于客户端时间线折叠块 + LLM prompt 注入
+    app.get('/api/events/:channelId', async (req, res) => {
+        try {
+            const { listEvents } = await import('../bootstrap/event-log.js');
+            const limit = parseInt(req.query.limit || '20', 10);
+            const type = req.query.type;
+            const events = await listEvents({
+                channelId: req.params.channelId,
+                limit: Math.min(limit, 100),
+                type: type || undefined,
+            });
+            res.json({ events, total: events.length });
+        }
+        catch (err) {
+            console.warn(`[api/events] ${req.params.channelId} 失败: ${err?.message || err}`);
+            res.json({ events: [], total: 0 });
+        }
+    });
+    // 2026-07-07 P1-C: 追加一条事件 (前端按钮 / 自动检测)
+    app.post('/api/events/:channelId', async (req, res) => {
+        try {
+            const { appendEvent, EVENT_TYPES } = await import('../bootstrap/event-log.js');
+            const { type, summary, detail, source, agentId } = req.body || {};
+            if (!type || !EVENT_TYPES.includes(type)) {
+                return res.status(400).json({ error: `type must be one of ${EVENT_TYPES.join(', ')}` });
+            }
+            if (!summary || typeof summary !== 'string') {
+                return res.status(400).json({ error: 'summary required' });
+            }
+            const r = await appendEvent({
+                channelId: req.params.channelId,
+                type,
+                summary: summary.slice(0, 200),
+                detail: detail || {},
+                source: source || 'user',
+                agentId,
+            });
+            res.json({ ok: true, ...r });
+        }
+        catch (err) {
+            console.warn(`[api/events POST] ${req.params.channelId} 失败: ${err?.message || err}`);
+            res.status(500).json({ error: err?.message || String(err) });
+        }
+    });
     app.get('/sessions/:channelId', async (req, res) => {
         try {
+            // 2026-07-07 H2 修复: channel 不存在 → 404 (之前返回空 Session 导致客户端误以为是空对话)
+            const channels = await loadChannels();
+            if (!channels.find(c => c.id === req.params.channelId)) {
+                return res.status(404).json({ error: 'channel not found', channelId: req.params.channelId });
+            }
             const session = await loadSession(req.params.channelId, req.query.sessionId);
             res.json(session || { channelId: req.params.channelId, sessionId: req.query.sessionId || 'default', messages: [], lastUpdated: null });
         }
@@ -2566,6 +3319,10 @@ export async function createWebServer(port = 3000, options = {}) {
             const regenHint = await buildJudgmentHint(channel, channelId);
             const markedRegen = `${regenHint}\n\n【本轮用户请求】\n${userMessage}\n【请求结束】\n`;
             fullResponse = await agent.promptStream(markedRegen, streamCallback, undefined, channelId);
+            // 2026-07-06: 防御性兜底 — 同 /message 路径
+            if (!fullResponse.trim()) {
+                fullResponse = '⚠️ AI 未返回内容, 请重试';
+            }
             broadcast({ type: 'ai', content: fullResponse }, channelId);
             // 更新 session
             const existingSession = await loadSession(channelId, currentSessionId);
@@ -2594,414 +3351,10 @@ export async function createWebServer(port = 3000, options = {}) {
             res.status(500).json({ error: err.message });
         }
     });
-    // ==================== Task Queue API ====================
-    // 获取所有任务
-    app.get('/api/tasks', async (req, res) => {
-        try {
-            const tasks = await loadTaskQueue();
-            res.json(tasks);
-        }
-        catch (err) {
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 创建新任务
-    app.post('/api/tasks', async (req, res) => {
-        try {
-            const { type, title, description, steps } = req.body;
-            if (!type || !title) {
-                return res.status(400).json({ error: 'type and title required' });
-            }
-            const tasks = await loadTaskQueue();
-            const task = {
-                id: `task_${Date.now()}_${Math.random().toString(36).substring(2, 8)}`,
-                type,
-                title,
-                description,
-                status: 'pending',
-                progress: 0,
-                createdAt: new Date().toISOString(),
-                updatedAt: new Date().toISOString(),
-                steps: steps?.map((s, i) => ({
-                    id: `step_${i}`,
-                    name: s,
-                    status: 'pending'
-                }))
-            };
-            tasks.push(task);
-            await saveTaskQueue(tasks);
-            res.json(task);
-        }
-        catch (err) {
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 获取单个任务
-    app.get('/api/tasks/:taskId', async (req, res) => {
-        try {
-            const { taskId } = req.params;
-            const tasks = await loadTaskQueue();
-            const task = tasks.find(t => t.id === taskId);
-            if (!task) {
-                return res.status(404).json({ error: 'Task not found' });
-            }
-            res.json(task);
-        }
-        catch (err) {
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 更新任务
-    app.patch('/api/tasks/:taskId', async (req, res) => {
-        try {
-            const { taskId } = req.params;
-            const { status, currentStep } = req.body;
-            const tasks = await loadTaskQueue();
-            const taskIndex = tasks.findIndex(t => t.id === taskId);
-            if (taskIndex === -1) {
-                return res.status(404).json({ error: 'Task not found' });
-            }
-            if (status) {
-                tasks[taskIndex].status = status;
-            }
-            if (currentStep !== undefined) {
-                tasks[taskIndex].currentStep = currentStep;
-            }
-            tasks[taskIndex].updatedAt = new Date().toISOString();
-            await saveTaskQueue(tasks);
-            res.json(tasks[taskIndex]);
-        }
-        catch (err) {
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 删除任务
-    app.delete('/api/tasks/:taskId', async (req, res) => {
-        try {
-            const { taskId } = req.params;
-            const tasks = await loadTaskQueue();
-            const filtered = tasks.filter(t => t.id !== taskId);
-            await saveTaskQueue(filtered);
-            res.json({ ok: true });
-        }
-        catch (err) {
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 执行任务（自动执行下一步）
-    app.post('/api/tasks/:taskId/execute', async (req, res) => {
-        try {
-            const { taskId } = req.params;
-            const { channelId } = req.body;
-            if (!channelId) {
-                return res.status(400).json({ error: 'channelId required' });
-            }
-            const tasks = await loadTaskQueue();
-            const task = tasks.find(t => t.id === taskId);
-            if (!task) {
-                return res.status(404).json({ error: 'Task not found' });
-            }
-            if (isExecutingTask) {
-                return res.status(409).json({ error: 'Another task is currently executing' });
-            }
-            // 异步执行任务
-            executeTask(task, channelId);
-            res.json({ ok: true, taskId: task.id });
-        }
-        catch (err) {
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 执行下一个待处理任务
-    app.post('/api/tasks/execute-next', async (req, res) => {
-        try {
-            const { channelId } = req.body;
-            if (!channelId) {
-                return res.status(400).json({ error: 'channelId required' });
-            }
-            const tasks = await loadTaskQueue();
-            const nextTask = tasks.find(t => t.status === 'pending');
-            if (!nextTask) {
-                return res.json({ ok: false, message: 'No pending tasks' });
-            }
-            if (isExecutingTask) {
-                return res.status(409).json({ error: 'Another task is currently executing' });
-            }
-            // 异步执行任务
-            executeTask(nextTask, channelId);
-            res.json({ ok: true, taskId: nextTask.id });
-        }
-        catch (err) {
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // ==================== LLM 配置 API ====================
-    // 获取所有 LLM 配置
-    app.get('/api/llm-config', async (req, res) => {
-        try {
-            const config = await llmConfigStore.getConfig();
-            const providerInfo = llmConfigStore.getAllProviderInfo();
-            // 隐藏 API Key
-            const safeConfig = {
-                ...config,
-                providers: Object.fromEntries(Object.entries(config.providers).map(([key, val]) => [
-                    key,
-                    { ...val, apiKey: val.apiKey ? '***' + val.apiKey.slice(-4) : '' }
-                ])),
-                providerInfo
-            };
-            res.json(safeConfig);
-        }
-        catch (err) {
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 更新 LLM 配置
-    app.post('/api/llm-config', async (req, res) => {
-        try {
-            const { provider, config } = req.body;
-            if (!provider || !config) {
-                return res.status(400).json({ error: 'provider and config required' });
-            }
-            // 如果前端发的是掩码（***xxx），从当前配置里取真实 key
-            const currentConfig = await llmConfigStore.getProvider(provider);
-            if (currentConfig && config.apiKey && config.apiKey.startsWith('***')) {
-                config.apiKey = currentConfig.apiKey;
-            }
-            await llmConfigStore.updateProvider(provider, config);
-            // 如果是活跃供应商，重新初始化 Pi SDK
-            const currentActive = await llmConfigStore.getActiveProvider();
-            if (provider === currentActive) {
-                const newConfig = await llmConfigStore.getActiveProviderConfig();
-                if (newConfig) {
-                    initMinimax({
-                        provider,
-                        apiKey: newConfig.apiKey || undefined,
-                        baseUrl: newConfig.baseUrl || undefined,
-                        model: newConfig.model || undefined
-                    });
-                }
-            }
-            res.json({ ok: true });
-        }
-        catch (err) {
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 设置活跃供应商
-    app.post('/api/llm-provider', async (req, res) => {
-        try {
-            const { provider } = req.body;
-            if (!provider) {
-                return res.status(400).json({ error: 'provider required' });
-            }
-            await llmConfigStore.setActiveProvider(provider);
-            // 重新初始化 Pi SDK
-            const config = await llmConfigStore.getActiveProviderConfig();
-            if (config) {
-                initMinimax({
-                    provider: provider,
-                    apiKey: config.apiKey || undefined,
-                    baseUrl: config.baseUrl || undefined,
-                    model: config.model || undefined
-                });
-            }
-            res.json({ ok: true, provider });
-        }
-        catch (err) {
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 测试供应商连接
-    app.post('/api/llm-test', async (req, res) => {
-        try {
-            const { provider } = req.body;
-            if (!provider) {
-                return res.status(400).json({ error: 'provider required' });
-            }
-            const result = await llmConfigStore.testProvider(provider);
-            res.json(result);
-        }
-        catch (err) {
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // ==================== 视频生成配置 (Seedance 等) ====================
-    // 获取视频生成配置
-    app.get('/api/video-config', async (req, res) => {
-        try {
-            const config = await videoConfigStore.getConfig();
-            const providerInfo = videoConfigStore.getAllProviderInfo();
-            // 脱敏：不返回 apiKey 明文
-            const masked = Object.fromEntries(Object.entries(config.providers).map(([key, val]) => [
-                key,
-                { ...val, apiKey: val.apiKey ? '***' + val.apiKey.slice(-4) : '' }
-            ]));
-            res.json({
-                activeProvider: config.activeProvider,
-                providers: masked,
-                providerInfo
-            });
-        }
-        catch (err) {
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 更新视频供应商配置
-    app.post('/api/video-config', async (req, res) => {
-        try {
-            const { provider, config } = req.body;
-            if (!provider || !config) {
-                return res.status(400).json({ error: 'provider and config required' });
-            }
-            // 如果前端发的是掩码（***xxx），从当前配置里取真实 key
-            const currentConfig = await videoConfigStore.getProvider(provider);
-            if (currentConfig && config.apiKey && config.apiKey.startsWith('***')) {
-                config.apiKey = currentConfig.apiKey;
-            }
-            await videoConfigStore.updateProvider(provider, config);
-            res.json({ ok: true });
-        }
-        catch (err) {
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 测试视频供应商连接
-    app.post('/api/video-test', async (req, res) => {
-        try {
-            const { provider } = req.body;
-            if (!provider) {
-                return res.status(400).json({ error: 'provider required' });
-            }
-            const result = await videoConfigStore.testProvider(provider);
-            res.json(result);
-        }
-        catch (err) {
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // ==================== 音频生成配置 (TTS / Music) ====================
-    // 获取音频配置
-    app.get('/api/audio-config', async (req, res) => {
-        try {
-            const config = await audioConfigStore.getConfig();
-            const providerInfo = audioConfigStore.getAllProviderInfo();
-            const masked = Object.fromEntries(Object.entries(config.providers).map(([key, val]) => [
-                key,
-                { ...val, apiKey: val.apiKey ? '***' + val.apiKey.slice(-4) : '' }
-            ]));
-            res.json({
-                activeProvider: config.activeProvider,
-                providers: masked,
-                providerInfo
-            });
-        }
-        catch (err) {
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 更新音频供应商配置
-    app.post('/api/audio-config', async (req, res) => {
-        try {
-            const { provider, config } = req.body;
-            if (!provider || !config) {
-                return res.status(400).json({ error: 'provider and config required' });
-            }
-            // 掩码回写真实 key
-            const currentConfig = await audioConfigStore.getProvider(provider);
-            if (currentConfig && config.apiKey && config.apiKey.startsWith('***')) {
-                config.apiKey = currentConfig.apiKey;
-            }
-            await audioConfigStore.updateProvider(provider, config);
-            res.json({ ok: true });
-        }
-        catch (err) {
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 测试音频供应商连接
-    app.post('/api/audio-test', async (req, res) => {
-        try {
-            const { provider } = req.body;
-            if (!provider) {
-                return res.status(400).json({ error: 'provider required' });
-            }
-            const result = await audioConfigStore.testProvider(provider);
-            res.json(result);
-        }
-        catch (err) {
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 统一 AI 解析入口：CLI / 接收方节点 调这里完成 LLM + judgment + harness
-    // 入参: { text, mimeType, fileName, fromNodeId, source }
-    // 出参: { summary, qualityScore, judgmentId?, gateArtifact? }
-    app.post('/api/ai-parse', async (req, res) => {
-        try {
-            const { text, mimeType, fileName, fromNodeId, source } = req.body || {};
-            if (!text || !fileName) {
-                return res.status(400).json({ error: 'text and fileName required' });
-            }
-            const truncated = text.length > 6000 ? text.substring(0, 6000) + '...[截断]' : text;
-            const prompt = `请分析以下 ${mimeType || 'text'} 文档，并给出 (1) 一句话中文摘要 (2) 三个关键要点 (3) 质量评分(0-1)。\n\n文件名: ${fileName}\n\n内容:\n${truncated}`;
-            // 1. LLM 解析
-            const llm = getMinimax();
-            const t0 = Date.now();
-            const llmResult = await llm.summarize(prompt);
-            const dt = Date.now() - t0;
-            const out = {
-                ok: true,
-                summary: llmResult.summary,
-                qualityScore: llmResult.qualityScore,
-                latencyMs: dt,
-                mimeType: mimeType || 'text/plain',
-                fileName,
-            };
-            // 2. 蒸馏为 judgment (异步,失败不影响主返回)
-            try {
-                const judgmentMod = await import('../pi-ecosystem-judgment/index.js');
-                await judgmentMod.initializeJudgmentStore();
-                const j = await judgmentMod.createJudgment({
-                    type: 'trajectory',
-                    content: `AI 解析 ${fileName}: ${llmResult.summary.slice(0, 200)}`,
-                    source: 'agent',
-                    confidence: Math.min(1, llmResult.qualityScore),
-                    context: `ai-parse:${mimeType || 'text'}:${source || 'p2p'}`,
-                    evidence: {
-                        trajectory: [{
-                                timestamp: new Date().toISOString(),
-                                action: `parse:${fileName}`,
-                                outcome: `score=${llmResult.qualityScore.toFixed(2)}`,
-                                approved: true,
-                            }],
-                    },
-                });
-                out.judgmentId = j.id;
-            }
-            catch (e) {
-                out.judgmentError = e.message;
-            }
-            // 3. 在 harness 落产物 (异步,失败不影响)
-            try {
-                const harnessMod = await import('../bollharness-integration/index.js');
-                const gate = new harnessMod.GateStateMachine();
-                gate.submitArtifact(`ai-parse:${fileName}`, {
-                    summary: llmResult.summary,
-                    score: llmResult.qualityScore,
-                    fromNodeId: fromNodeId || null,
-                    parsedAt: Date.now(),
-                });
-                out.gateArtifact = `ai-parse:${fileName}`;
-            }
-            catch (e) {
-                out.gateError = e.message;
-            }
-            res.json(out);
-        }
-        catch (err) {
-            res.status(500).json({ error: err.message });
-        }
-    });
+    // 2026-07-06: Task Queue API 抽到 ./routes-tasks.ts
+    registerTaskRoutes(app, { broadcast, getAgentForChannel });
+    // 2026-07-06: LLM/Video/Audio 配置路由抽到 ./routes-llm-config.ts
+    registerLlmConfigRoutes(app);
     // ==================== P2P Network API ====================
     // 获取当前身份
     app.get('/api/identity', async (_req, res) => {
@@ -3558,11 +3911,25 @@ export async function createWebServer(port = 3000, options = {}) {
             res.json({ initialized: false });
             return;
         }
+        // 2026-07-04: irohTransport.getNodeId() 在某些环境下返回空字符串 (@rayhanadev/iroh + Windows
+        //   native binding 启动延迟). fallback: 用 v3 P2PDirect (hyperswarm) 的 publicKey 兜底,
+        //   保证客户端拿到一个可用的 peer id (v3 是实际数据通道, 不是 mock).
+        let effectiveNodeId = irohNodeInfo.irohNodeId;
+        if (!effectiveNodeId && v3P2PRef) {
+            try {
+                effectiveNodeId = v3P2PRef.getPublicKey() || '';
+                if (effectiveNodeId) {
+                    console.log('[iroh API] irohNodeId 为空, fallback 到 v3 P2PDirect publicKey:', effectiveNodeId.substring(0, 16) + '...');
+                }
+            }
+            catch { /* ignore */ }
+        }
         res.json({
             initialized: true,
             did: irohNodeInfo.did,
             cid: irohNodeInfo.cid,
-            irohNodeId: irohNodeInfo.irohNodeId,
+            irohNodeId: effectiveNodeId,
+            irohNodeIdSource: effectiveNodeId === irohNodeInfo.irohNodeId ? 'iroh' : (effectiveNodeId ? 'v3-p2p-fallback' : 'unavailable'),
             name: irohNodeInfo.name
         });
     });
@@ -3887,6 +4254,70 @@ export async function createWebServer(port = 3000, options = {}) {
             res.status(500).json({ error: err.message });
         }
     });
+    // 2026-07-06: SSE 断连恢复 — 拉该 channel 从 afterSeq 之后的 AI 回复 + 状态
+    // body: { channelId, sessionId?, afterSeq }
+    app.post('/api/chat/resume', async (req, res) => {
+        try {
+            const { channelId, sessionId, afterSeq } = req.body;
+            if (!channelId)
+                return res.status(400).json({ error: 'channelId required' });
+            const curSeq = channelEventSeq.get(channelId) || 0;
+            // 1) 拉 session.messages — 这部分已经持久化, 不依赖内存 state
+            const sess = await loadSession(channelId, sessionId || 'default');
+            const messages = sess?.messages || [];
+            // 2) 找从 afterSeq 之后发生的 user/ai 消息 (从 messages[] 推导出"事后视角")
+            // 注意: messages[] 是按时间顺序, 没有 seq 字段; 我们用 lastUpdated + AI msgId 列表 推断
+            // 简单方案: 返回 channels 上 >= afterSeq 对应时间的 ai/user messages (按 timestamp 截)
+            // 因为 seq 是事件层, messages 是实体层 — 这里实体层的 fallback 就够用
+            const afterSeqNum = typeof afterSeq === 'number' ? afterSeq : 0;
+            // 启发式: 如果当前 seq 已经超过 afterSeq, 至少漏了一些事件
+            const missedSome = curSeq > afterSeqNum;
+            // 3) 返回给前端的"补发包": 当 missedSome, 拿最近 1 轮 user+ai (最近的 ai message)
+            let resume = {
+                ok: true,
+                channelId,
+                currentSeq: curSeq,
+                missedSome,
+                recoveredMessages: [],
+            };
+            if (missedSome && messages.length > 0) {
+                // 拿最后一条 ai message
+                const lastAi = [...messages].reverse().find(m => m.type === 'ai');
+                if (lastAi) {
+                    resume.recoveredMessages.push({
+                        msgId: lastAi.id || `recover_${Date.now()}`,
+                        type: 'ai',
+                        content: lastAi.content,
+                        source: lastAi.source,
+                        timestamp: lastAi.timestamp,
+                    });
+                }
+                // 拿最近一条 user message (如果不是用户本地发的, 也能补全)
+                const lastUser = [...messages].reverse().find(m => m.type === 'user');
+                if (lastUser) {
+                    resume.recoveredMessages.push({
+                        msgId: lastUser.id || `recover_user_${Date.now()}`,
+                        type: 'user',
+                        content: lastUser.content,
+                        source: lastUser.source,
+                        timestamp: lastUser.timestamp,
+                    });
+                }
+                // 4) 如果当前还在跑 (channelRunState.running), 通知前端"正在生成中"
+                const runState = channelRunState.get(channelId);
+                if (runState?.running) {
+                    resume.stillRunning = true;
+                    resume.partialText = runState.lastFinalReply || '';
+                }
+            }
+            console.log(`[resume] channel=${channelId}, afterSeq=${afterSeqNum}, curSeq=${curSeq}, recovered=${resume.recoveredMessages.length}, stillRunning=${resume.stillRunning || false}`);
+            res.json(resume);
+        }
+        catch (err) {
+            console.error('[resume] failed:', err.message?.slice(0, 200));
+            res.status(500).json({ error: err.message });
+        }
+    });
     // 用户审阅: 批准 draft
     app.post('/api/chat/approve', async (req, res) => {
         try {
@@ -4232,708 +4663,8 @@ export async function createWebServer(port = 3000, options = {}) {
             res.status(500).json({ error: err.message });
         }
     });
-    // ==================== Judgments (v1 核心: 让我能记录判断) ====================
-    // POST /api/judgments       — 记录一个判断
-    // GET  /api/judgments       — 列出所有判断 (新→旧)
-    // 存储: ~/.bolloon/human-values/judgments.json (human-value-store)
-    //      极简版: 只记录 decision + reason; 其它字段可选
-    app.post('/api/judgments', async (req, res) => {
-        try {
-            const { decision, reason, context } = req.body;
-            if (!decision || typeof decision !== 'string' || !decision.trim()) {
-                return res.status(400).json({ error: 'decision required' });
-            }
-            const { storeHumanJudgment, initializeValueStore } = await import('../pi-ecosystem-judgment/human-value-store.js');
-            await initializeValueStore();
-            const j = await storeHumanJudgment({
-                decision: decision.trim(),
-                decision_type: 'approve',
-                reasons: reason ? [reason.trim()] : [],
-                values_derived: [],
-                context: {
-                    domain: context?.domain || 'general',
-                    complexity: 'moderate',
-                    stakes: context?.stakes || 'medium',
-                    time_pressure: 'low',
-                },
-                metadata: {
-                    source: 'explicit',
-                    confidence: 0.8,
-                    revisable: true,
-                },
-            });
-            res.json({ ok: true, judgment: j });
-        }
-        catch (err) {
-            console.error('[judgments] POST failed:', err);
-            res.status(500).json({ error: err.message });
-        }
-    });
-    app.get('/api/judgments', async (req, res) => {
-        try {
-            const { listJudgmentsByStatus, initializeValueStore } = await import('../pi-ecosystem-judgment/human-value-store.js');
-            await initializeValueStore();
-            const status = (typeof req.query.status === 'string' ? req.query.status : 'all');
-            const all = await listJudgmentsByStatus(status);
-            all.sort((a, b) => (b.timestamp || '').localeCompare(a.timestamp || ''));
-            res.json({ count: all.length, status, judgments: all });
-        }
-        catch (err) {
-            console.error('[judgments] GET failed:', err);
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 蒸馏 B 触发 (人类点按钮) — 同步执行演化对齐
-    app.post('/api/judgments/distill-from-conversation', async (req, res) => {
-        try {
-            const { channelId, messageId, recentTurns } = req.body;
-            if (!channelId) {
-                return res.status(400).json({ error: 'channelId required' });
-            }
-            // 取 channel 最近的对话
-            const channels = await loadChannels();
-            const channel = channels.find((c) => c.id === channelId);
-            if (!channel)
-                return res.status(404).json({ error: 'channel not found' });
-            const currentSessionId = channel.currentSessionId;
-            if (!currentSessionId) {
-                return res.status(400).json({ error: 'no active session in channel' });
-            }
-            const session = await loadSession(channelId, currentSessionId);
-            if (!session)
-                return res.status(404).json({ error: 'session not found' });
-            // 取最近 N 轮 (默认 10), 转成 DistillTurn 格式
-            const limit = Math.min(Math.max(recentTurns ?? 10, 2), 30);
-            const turns = session.messages.slice(-limit).map((m) => ({
-                role: (m.type === 'user' ? 'human' : 'agent'),
-                content: m.content,
-            }));
-            const { distillAndStoreFromChannel } = await import('../pi-ecosystem-judgment/human-value-pipeline.js');
-            const result = await distillAndStoreFromChannel(turns, { channelId });
-            res.json({
-                ok: true,
-                triggered: result.triggered,
-                reason: result.reason,
-                judgment: result.judgment,
-                evolved: result.evolved,
-            });
-        }
-        catch (err) {
-            console.error('[judgments] distill-from-conversation failed:', err);
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 蒸馏 D 触发 (AI 被动) — 后台异步,不阻塞 HTTP 响应
-    app.post('/api/judgments/detect-and-distill', async (req, res) => {
-        try {
-            const { channelId, turns } = req.body;
-            // 先立即返回 202, 不等 LLM
-            res.status(202).json({ ok: true, queued: true });
-            if (!channelId || !Array.isArray(turns) || turns.length === 0) {
-                return;
-            }
-            // 异步处理 (不 await, 不阻塞响应)
-            setImmediate(async () => {
-                try {
-                    const { detectAndDistillFromChannel } = await import('../pi-ecosystem-judgment/human-value-pipeline.js');
-                    const result = await detectAndDistillFromChannel(turns, { channelId });
-                    if (result.triggered) {
-                        console.log(`[D-hook] ${channelId}: ${result.reason}`, result.evolved);
-                    }
-                }
-                catch (err) {
-                    console.warn('[D-hook] background failed:', err);
-                }
-            });
-        }
-        catch (err) {
-            console.error('[judgments] detect-and-distill failed:', err);
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 判断力使用回溯 (P0.5): 给定 judgmentIds, 反查对应的 decision 文本
-    // 用途: UI 上"这条 AI 回复引用了哪些原则"
-    app.post('/api/judgments/resolve-usage', async (req, res) => {
-        try {
-            const { ids } = req.body;
-            if (!Array.isArray(ids) || ids.length === 0) {
-                return res.json({ items: [] });
-            }
-            const { loadAllJudgments } = await import('../pi-ecosystem-judgment/human-value-store.js');
-            const all = await loadAllJudgments();
-            const byId = new Map(all.map((j) => [j.id, j]));
-            const items = ids
-                .map((id) => byId.get(id))
-                .filter((j) => Boolean(j))
-                .map((j) => ({
-                id: j.id,
-                decision: j.decision,
-                status: j.status ?? 'active',
-                timestamp: j.timestamp,
-            }));
-            res.json({ items });
-        }
-        catch (err) {
-            console.error('[judgments] resolve-usage failed:', err);
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 判断力违规日志 (P3 UI): 读 violations.jsonl
-    app.get('/api/judgments/violations', async (req, res) => {
-        try {
-            const { getRecentViolations } = await import('../pi-ecosystem-judgment/monitor-gate.js');
-            const limit = Math.min(Math.max(parseInt(String(req.query.limit ?? '20'), 10) || 20, 1), 200);
-            const items = await getRecentViolations(limit);
-            res.json({ count: items.length, items });
-        }
-        catch (err) {
-            console.error('[judgments] violations failed:', err);
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 类 B 自适应扫描: 读 judgments.json + usage.jsonl, 给出 stale/rising/unused 建议
-    // ?force=1 跳过 24h 缓存
-    app.get('/api/judgments/adaptive-suggestions', async (req, res) => {
-        try {
-            const { getCachedScan } = await import('../pi-ecosystem-judgment/adaptive-scan.js');
-            const force = String(req.query.force ?? '') === '1';
-            const result = await getCachedScan(force);
-            res.json(result);
-        }
-        catch (err) {
-            console.error('[judgments] adaptive-scan failed:', err);
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // Bootstrap Context 调试视图: 返出完整 BolloonContext
-    app.get('/api/bolloon/context', async (req, res) => {
-        try {
-            const { getCachedBolloonContext } = await import('../pi-ecosystem-judgment/human-value-pipeline.js');
-            const force = String(req.query.force ?? '') === '1';
-            const ctx = await getCachedBolloonContext({ cwd: process.cwd() }, force);
-            res.json(ctx);
-        }
-        catch (err) {
-            console.error('[bolloon] context failed:', err);
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 阶段 B: 周报 (weekly-report.ts 产物) — 仅 API 读取, 不做 UI tab
-    // GET /api/reports           → { files: ['2026-W24.md', ...] }
-    // GET /api/reports/2026-W24  → { week, content }
-    app.get('/api/reports', async (_req, res) => {
-        try {
-            const dir = path.join(os.homedir(), '.bolloon', 'reports');
-            try {
-                const entries = await fs.readdir(dir);
-                const files = entries
-                    .filter((f) => f.endsWith('.md'))
-                    .sort()
-                    .reverse(); // 新的在前
-                res.json({ dir, files });
-            }
-            catch {
-                res.json({ dir, files: [] });
-            }
-        }
-        catch (err) {
-            res.status(500).json({ error: err.message });
-        }
-    });
-    app.get('/api/reports/:week', async (req, res) => {
-        try {
-            const week = req.params.week;
-            // 严格校验, 防路径穿越
-            if (!/^\d{4}-W\d{1,2}$/.test(week)) {
-                return res.status(400).json({ error: 'week must match YYYY-Www' });
-            }
-            const file = path.join(os.homedir(), '.bolloon', 'reports', `${week}.md`);
-            try {
-                const content = await fs.readFile(file, 'utf-8');
-                res.json({ week, content, length: content.length });
-            }
-            catch {
-                res.status(404).json({ error: 'not found', week });
-            }
-        }
-        catch (err) {
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 阶段 C 护栏 5: auto-evolve baseline 管理 (无 UI, 仅 API)
-    // GET    /api/auto-evolve/baselines             → 列出所有 baseline tag
-    // GET    /api/auto-evolve/baselines/:tag/diff  → 看某 baseline 的 diff 摘要
-    // POST   /api/auto-evolve/rollback {tag}       → 回滚到指定 baseline
-    app.get('/api/auto-evolve/baselines', async (_req, res) => {
-        try {
-            const { execFile } = await import('child_process');
-            const { promisify } = await import('util');
-            const pExec = promisify(execFile);
-            const { stdout } = await pExec('git', [
-                'tag', '-l', 'auto-evolve-baseline-*', '--format=%(refname:short)|%(contents)|%(objectname:short)|%(taggerdate:iso)',
-            ], { cwd: process.cwd() });
-            const tags = stdout.trim().split('\n').filter(Boolean).map((line) => {
-                const [tag, msg, sha, date] = line.split('|');
-                return { tag, message: msg || '', sha, date };
-            });
-            res.json({ tags, count: tags.length });
-        }
-        catch (err) {
-            res.status(500).json({ error: err.message });
-        }
-    });
-    app.get('/api/auto-evolve/baselines/:tag/diff', async (req, res) => {
-        try {
-            const { execFile } = await import('child_process');
-            const { promisify } = await import('util');
-            const pExec = promisify(execFile);
-            const tag = req.params.tag;
-            if (!/^auto-evolve-baseline-[\w-]+$/.test(tag)) {
-                return res.status(400).json({ error: 'tag must match auto-evolve-baseline-*' });
-            }
-            const { stdout } = await pExec('git', ['show', '--stat', '--no-color', tag], { cwd: process.cwd() });
-            res.json({ tag, diff: stdout.slice(0, 5000) }); // 限长 5KB
-        }
-        catch (err) {
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // Bootstrap Context → 拼好的 system prompt 片段 (供调试看注入效果)
-    app.get('/api/bolloon/context/system-prompt', async (req, res) => {
-        try {
-            const { getCachedBolloonContext } = await import('../pi-ecosystem-judgment/human-value-pipeline.js');
-            const { formatContextForSystemPrompt } = await import('../bootstrap/project-context.js');
-            const ctx = await getCachedBolloonContext({ cwd: process.cwd() });
-            const systemAddition = formatContextForSystemPrompt(ctx, {
-                maxChars: parseInt(String(req.query.max ?? '4000'), 10) || 4000,
-            });
-            res.json({ systemAddition, length: systemAddition.length, truncated: systemAddition.includes('截断模式') });
-        }
-        catch (err) {
-            console.error('[bolloon] context/system-prompt failed:', err);
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // ============================================================
-    // system-prompt health (P-Action 2 — Harness Gardening)
-    // 返回每层 lifecycle 状态: ok | stale | overdue-review | missing-frontmatter | dynamic
-    // query: ?activeOnly=1 → 只返回当前 context 激活的层
-    // ============================================================
-    app.get('/api/prompt/health', async (req, res) => {
-        try {
-            const { listLayers } = await import('../llm/system-prompt/registry.js');
-            const { evaluateLayers, markActive } = await import('../llm/system-prompt/health.js');
-            const all = listLayers();
-            const baseReport = evaluateLayers(all);
-            // 如果 query 里有 activeOnly, 跑一次 assembleSystemPrompt 拿激活列表
-            if (String(req.query.activeOnly ?? '') === '1') {
-                const { assembleSystemPrompt } = await import('../llm/system-prompt/registry.js');
-                const channel = String(req.query.channel ?? 'local');
-                const role = req.query.role;
-                const tool = req.query.tool;
-                try {
-                    const r = await assembleSystemPrompt({ channel, role, tool });
-                    const activeIds = new Set(r.layerIds);
-                    res.json(markActive(baseReport, activeIds));
-                }
-                catch (err) {
-                    console.warn('[prompt-health] assembleSystemPrompt failed (silent, returning base report):', err);
-                    res.json(baseReport);
-                }
-            }
-            else {
-                res.json(baseReport);
-            }
-        }
-        catch (err) {
-            console.error('[prompt-health] failed:', err);
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 自适应接受/拒绝: 写 evolution.jsonl 留痕, 接受时同时 patch judgments.json
-    // body: { action: 'accept'|'reject'|'revert', suggestion, appliedPatch? }
-    // query: ?auto=1  → 类 B 自动路径, 受 auto-evolve-policy 网关保护
-    //         缺省    → 用户在 UI 手动触发, 不查开关 (避免阻塞用户)
-    app.post('/api/judgments/adaptive-apply', async (req, res) => {
-        try {
-            const isAuto = req.query.auto === '1' || req.query.auto === 'true';
-            const { action, suggestion, appliedPatch } = req.body;
-            if (!action || !suggestion?.judgmentId) {
-                return res.status(400).json({ error: 'action and suggestion.judgmentId required' });
-            }
-            const { updateJudgmentStatus } = await import('../pi-ecosystem-judgment/human-value-store.js');
-            const { logEvolution } = await import('../pi-ecosystem-judgment/adaptive-scan.js');
-            // accept 时: 真正改库
-            if (action === 'accept') {
-                // 阶段 A: 自动路径需先过 auto-evolve-policy 网关
-                if (isAuto) {
-                    const { requireDataLayerAutoEvolve } = await import('../utils/auto-evolve-policy.js');
-                    try {
-                        await requireDataLayerAutoEvolve('adaptive-apply.auto.deprecate');
-                    }
-                    catch (err) {
-                        return res.status(423).json({
-                            error: 'data-layer-auto-evolve-disabled',
-                            message: err.message,
-                            hint: '设 BOLLOON_AUTO_EVOLVE_DATA=1 或在 self-improve-policy.json 加 dataLayerAutoEvolve: true',
-                        });
-                    }
-                }
-                if (suggestion.action === 'deprecate') {
-                    // 标记 superseded (语义: 不再用, 但保留可回滚)
-                    await updateJudgmentStatus(suggestion.judgmentId, 'superseded', {
-                        evolutionReason: 'merged', // 借 merged 字段表达"被自适应废弃"
-                    });
-                }
-                else if (suggestion.action === 'boost') {
-                    // boost: 用户手动接受后, 不改库本身 (weight 在 getRelevantValues 里动态算),
-                    // 但写 evolution 留痕, 未来可以基于此调整算法
-                    // 当前不直接改库, 仅留痕
-                }
-                // 'review' 类不需要自动改库, 仅 log 接受
-            }
-            await logEvolution({
-                ts: new Date().toISOString(),
-                action,
-                suggestion: suggestion,
-                appliedPatch,
-            });
-            res.json({ ok: true });
-        }
-        catch (err) {
-            console.error('[judgments] adaptive-apply failed:', err);
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 演化日志 (audit / 一键回滚源)
-    app.get('/api/judgments/evolution-log', async (req, res) => {
-        try {
-            const { readEvolutionLog } = await import('../pi-ecosystem-judgment/adaptive-scan.js');
-            const limit = Math.min(Math.max(parseInt(String(req.query.limit ?? '50'), 10) || 50, 1), 200);
-            const items = await readEvolutionLog(limit);
-            res.json({ count: items.length, items });
-        }
-        catch (err) {
-            console.error('[judgments] evolution-log failed:', err);
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 阶段 2: Causal-judge 4 个 endpoint
-    app.get('/api/judgments/causal/correlation', async (req, res) => {
-        try {
-            const { runCorrelationAnalysis } = await import('../pi-ecosystem-judgment/human-value-pipeline.js');
-            const topN = Math.min(Math.max(parseInt(String(req.query.topN ?? '5'), 10) || 5, 1), 50);
-            const useLLM = String(req.query.useLLM ?? '1') !== '0';
-            const items = await runCorrelationAnalysis({ topN, useLLM });
-            res.json({ count: items.length, items });
-        }
-        catch (err) {
-            console.error('[causal] correlation failed:', err);
-            res.status(500).json({ error: err.message });
-        }
-    });
-    app.get('/api/judgments/causal/intervention', async (req, res) => {
-        try {
-            const { runIntervention } = await import('../pi-ecosystem-judgment/human-value-pipeline.js');
-            const { judgmentId, scenario } = req.query;
-            if (!judgmentId)
-                return res.status(400).json({ error: 'judgmentId required' });
-            const result = await runIntervention(judgmentId, { scenarioContext: scenario });
-            res.json(result);
-        }
-        catch (err) {
-            console.error('[causal] intervention failed:', err);
-            res.status(500).json({ error: err.message });
-        }
-    });
-    app.post('/api/judgments/causal/counterfactual', async (req, res) => {
-        try {
-            const { runCounterfactualAudit } = await import('../pi-ecosystem-judgment/human-value-pipeline.js');
-            const { userInput, aiReply, violatedPrinciples } = req.body;
-            if (!userInput || !aiReply) {
-                return res.status(400).json({ error: 'userInput and aiReply required' });
-            }
-            const audit = await runCounterfactualAudit({
-                userInput,
-                aiReply,
-                violatedPrinciples: violatedPrinciples ?? [],
-            });
-            res.json(audit);
-        }
-        catch (err) {
-            console.error('[causal] counterfactual failed:', err);
-            res.status(500).json({ error: err.message });
-        }
-    });
-    app.get('/api/judgments/causal/audit-log', async (req, res) => {
-        try {
-            const { readCounterfactualLog } = await import('../pi-ecosystem-judgment/human-value-pipeline.js');
-            const limit = Math.min(Math.max(parseInt(String(req.query.limit ?? '20'), 10) || 20, 1), 200);
-            const items = await readCounterfactualLog(limit);
-            res.json({ count: items.length, items });
-        }
-        catch (err) {
-            console.error('[causal] audit-log failed:', err);
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 导入判断: 接受 { filename, content (base64), context }.
-    // 支持 .json / .yaml / .yml / .md / .txt / .html. 完全离线解析, 不调 LLM.
-    // 解析规则:
-    //   - .json: 顶层数组 [{decision, reason?, context?}, ...] 或 {judgments: [...]} 或 {items: [...]}
-    //   - .yaml/.yml: 期望顶层数组 (用 js-yaml); 不支持复杂结构
-    //   - .md/.txt/.html: 每一段 (按空行分隔) 算一条判断, 首行非空 = decision, 整段 = content
-    //                     如果首行是 markdown 标题 (# ...) 则去掉 #, 整段去掉首行后作 reason
-    app.post('/api/judgments/import', async (req, res) => {
-        try {
-            const { filename, content, context } = req.body;
-            if (!filename || !content) {
-                return res.status(400).json({ error: 'filename and content (base64) required' });
-            }
-            let raw;
-            try {
-                raw = Buffer.from(content, 'base64').toString('utf-8');
-            }
-            catch {
-                return res.status(400).json({ error: 'content is not valid base64' });
-            }
-            const lower = filename.toLowerCase();
-            let items = [];
-            if (lower.endsWith('.json')) {
-                try {
-                    const parsed = JSON.parse(raw);
-                    const arr = Array.isArray(parsed) ? parsed
-                        : Array.isArray(parsed?.judgments) ? parsed.judgments
-                            : Array.isArray(parsed?.items) ? parsed.items
-                                : null;
-                    if (!arr)
-                        return res.status(400).json({ error: 'JSON must be an array, or {judgments:[]}/{items:[]}' });
-                    for (const it of arr) {
-                        if (it && typeof it.decision === 'string' && it.decision.trim()) {
-                            items.push({ decision: it.decision.trim(), reason: it.reason, context: it.context });
-                        }
-                    }
-                }
-                catch (e) {
-                    return res.status(400).json({ error: 'JSON parse failed: ' + e.message });
-                }
-            }
-            else if (lower.endsWith('.yaml') || lower.endsWith('.yml')) {
-                try {
-                    const yaml = (await import('js-yaml')).default;
-                    const parsed = yaml.load(raw);
-                    if (!Array.isArray(parsed))
-                        return res.status(400).json({ error: 'YAML must be a top-level array' });
-                    for (const it of parsed) {
-                        if (it && typeof it.decision === 'string' && it.decision.trim()) {
-                            items.push({ decision: it.decision.trim(), reason: it.reason, context: it.context });
-                        }
-                    }
-                }
-                catch (e) {
-                    return res.status(400).json({ error: 'YAML parse failed: ' + e.message });
-                }
-            }
-            else if (lower.endsWith('.md') || lower.endsWith('.txt') || lower.endsWith('.html') || lower.endsWith('.htm')) {
-                // 通用纯文本: 按空行分段, 每段是一条判断
-                // 对 .html 先剥掉标签, 但保留段落分隔
-                let text = raw;
-                if (lower.endsWith('.html') || lower.endsWith('.htm')) {
-                    text = text.replace(/<script[\s\S]*?<\/script>/gi, '')
-                        .replace(/<style[\s\S]*?<\/style>/gi, '')
-                        // 块级标签 -> 双换行 (保留段落分隔)
-                        .replace(/<\/?(p|div|h[1-6]|li|tr|br)[^>]*>/gi, '\n\n')
-                        .replace(/<[^>]+>/g, ' ')
-                        .replace(/&nbsp;/g, ' ').replace(/&amp;/g, '&').replace(/&lt;/g, '<').replace(/&gt;/g, '>');
-                }
-                const blocks = text.split(/\n\s*\n/).map(b => b.trim()).filter(b => b.length > 0);
-                for (const block of blocks) {
-                    const lines = block.split('\n').map(l => l.trim()).filter(l => l.length > 0);
-                    if (lines.length === 0)
-                        continue;
-                    let decision = lines[0];
-                    // 如果首行是 markdown 标题, 去掉 # 前缀
-                    decision = decision.replace(/^#+\s*/, '');
-                    // 如果整段就是一个短句 (没有换行), 直接当 decision
-                    const reason = lines.length > 1 ? lines.slice(1).join(' ').trim() || undefined : undefined;
-                    if (decision)
-                        items.push({ decision, reason });
-                }
-            }
-            else {
-                return res.status(400).json({ error: 'unsupported file type (use .json .yaml .yml .md .txt .html)' });
-            }
-            if (items.length === 0) {
-                return res.status(400).json({ error: 'no parseable judgments found in file' });
-            }
-            const { storeHumanJudgment, initializeValueStore } = await import('../pi-ecosystem-judgment/human-value-store.js');
-            await initializeValueStore();
-            const imported = [];
-            const errors = [];
-            for (let i = 0; i < items.length; i++) {
-                try {
-                    const it = items[i];
-                    const j = await storeHumanJudgment({
-                        decision: it.decision,
-                        decision_type: 'approve',
-                        reasons: it.reason ? [String(it.reason)] : [],
-                        values_derived: [],
-                        context: {
-                            domain: it.context?.domain || context?.domain || 'general',
-                            complexity: 'moderate',
-                            stakes: it.context?.stakes || context?.stakes || 'medium',
-                            time_pressure: 'low',
-                        },
-                        metadata: {
-                            source: 'explicit',
-                            confidence: 0.8,
-                            revisable: true,
-                        },
-                    });
-                    imported.push(j);
-                }
-                catch (e) {
-                    errors.push(`#${i + 1} (${items[i].decision.substring(0, 30)}): ${e.message}`);
-                }
-            }
-            res.json({ ok: true, imported: imported.length, failed: errors.length, errors: errors.slice(0, 5), judgments: imported });
-        }
-        catch (err) {
-            console.error('[judgments] import failed:', err);
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 修改判断 (手动编辑 decision / reasons / context / values_derived)
-    app.patch('/api/judgments/:id', async (req, res) => {
-        try {
-            const { id } = req.params;
-            const { updateJudgment, initializeValueStore } = await import('../pi-ecosystem-judgment/human-value-store.js');
-            await initializeValueStore();
-            const updated = await updateJudgment(id, req.body || {});
-            if (!updated)
-                return res.status(404).json({ error: 'judgment not found' });
-            res.json({ ok: true, judgment: updated });
-        }
-        catch (err) {
-            console.error('[judgments] PATCH failed:', err);
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 删除判断
-    app.delete('/api/judgments/:id', async (req, res) => {
-        try {
-            const { id } = req.params;
-            const { deleteJudgment, initializeValueStore } = await import('../pi-ecosystem-judgment/human-value-store.js');
-            await initializeValueStore();
-            const ok = await deleteJudgment(id);
-            if (!ok)
-                return res.status(404).json({ error: 'judgment not found' });
-            res.json({ ok: true });
-        }
-        catch (err) {
-            console.error('[judgments] DELETE failed:', err);
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // 批量删除: { ids: ['hv-xxx', ...] } → { ok, deleted, notFound }
-    app.post('/api/judgments/batch-delete', async (req, res) => {
-        try {
-            const ids = (req.body && Array.isArray(req.body.ids)) ? req.body.ids : null;
-            if (!ids)
-                return res.status(400).json({ error: 'ids array required' });
-            const { deleteJudgment, initializeValueStore } = await import('../pi-ecosystem-judgment/human-value-store.js');
-            await initializeValueStore();
-            const idStrs = ids.filter((x) => typeof x === 'string' && x.length > 0);
-            let deleted = 0;
-            const notFound = [];
-            for (const id of idStrs) {
-                const ok = await deleteJudgment(id);
-                if (ok)
-                    deleted++;
-                else
-                    notFound.push(id);
-            }
-            res.json({ ok: true, deleted, notFound });
-        }
-        catch (err) {
-            console.error('[judgments] batch-delete failed:', err);
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // AI 自动委派: 根据新判断的 capability / context 找最匹配的远端 agent, 委派任务
-    // 由前端在 POST /api/judgments 成功后调用 (fire-and-forget)
-    // 出参: { matched, targetAgent, response | skipped, reason }
-    app.post('/api/judgments/auto-delegate', async (req, res) => {
-        try {
-            const { judgmentId, capability, instruction } = req.body;
-            if (!judgmentId && !capability) {
-                return res.status(400).json({ error: 'judgmentId or capability required' });
-            }
-            const cap = capability || 'general';
-            // 用 agent-manifest-protocol 里的 pickAgent (内存) — 走本节点已经缓存的远端 manifest
-            const manifestMod = await import('../agents/agent-manifest-protocol.js');
-            const picked = manifestMod.pickAgent(cap);
-            if (!picked) {
-                return res.json({ ok: true, matched: false, reason: 'no remote agent matches capability' });
-            }
-            // 命中后, 用 iroh delegate transport 真正发过去
-            // 注: irohDelegateTransport.sendToNode 走的是 sendToNode(publicKey, frame, timeoutMs)
-            // irohTransport 的 sendMessage 不等回包, 所以委托是 fire-and-forget
-            // 想等回包需要新接口. 这里先把 "找得到目标 + 发送成功" 作为成功.
-            // TODO: 接入 requestResponse 等待远端 agent_response
-            try {
-                const idMod = await import('../network/iroh-integration.js');
-                const integ = idMod.getIrohIntegration();
-                if (!integ || !integ.getNodeId()) {
-                    return res.json({ ok: true, matched: true, targetAgent: picked.agent, sent: false, reason: 'iroh not initialized' });
-                }
-                // 用 pickAgent 选出来的 agent 关联的 irohNodeId (有的话), 没有就跳到本地自处理
-                const targetIrohNodeId = picked.agent.irohNodeId;
-                if (!targetIrohNodeId) {
-                    return res.json({ ok: true, matched: true, targetAgent: picked.agent, sent: false, reason: 'target agent has no irohNodeId (peer identity not bound)' });
-                }
-                const ok = await integ.sendTo(targetIrohNodeId, 'agent_delegate', new TextEncoder().encode(JSON.stringify({
-                    type: 'agent_delegate',
-                    payload: {
-                        capability: cap,
-                        instruction: instruction || `请执行我的判断: ${judgmentId}`,
-                        fromAgentId: 'local-judgment',
-                    },
-                    ts: Date.now(),
-                    fromDid: '',
-                })));
-                res.json({ ok: true, matched: true, targetAgent: picked.agent, sent: ok });
-            }
-            catch (e) {
-                res.json({ ok: true, matched: true, targetAgent: picked.agent, sent: false, error: e.message });
-            }
-        }
-        catch (err) {
-            console.error('[judgments] auto-delegate failed:', err);
-            res.status(500).json({ error: err.message });
-        }
-    });
-    // (判断的 UI 已合并到主页面 header 的盾牌按钮 + modal, 不再走独立路由)
-    // 启动看门狗监控
-    if (watchdog) {
-        // level 1 (内存爆) → 进程自杀, 依赖外层 supervisor / 用户重启 (Windows 任务计划/手动)
-        // 否则 Node.js 高 GC 压力下 HTTP 响应丢失, 客户端 fetch 永远 pending
-        watchdog.registerRestartStrategy(1, () => {
-            // 2026-06-10: 改为不退出, 因为我们直接后台 tsx 启动没有外层 supervisor.
-            // 误判主要因 recordActivity 仅在显式调用时刷新, 而 broadcast/SSE/连接均不触发.
-            // 退出策略原文保留在注释里:
-            //   console.error('[Watchdog] memory critical, 进程退出 (期望外层重启)');
-            //   setTimeout(() => process.exit(1), 100);
-            console.warn('[Watchdog] silentThreshold 触发, 但跳过 process.exit (无 supervisor)');
-        });
-        watchdog.start();
-        console.log('[24h] Watchdog started');
-    }
-    // 定期健康检查（不阻塞主服务器启动）
-    if (healthMonitor) {
-        healthMonitor.startPeriodicCheck(60000);
-        console.log('[24h] Health monitor periodic check started');
-    }
+    // 2026-07-06: judgments / self-improve / permission-mode 路由抽到 ./routes-judgments.ts
+    registerJudgmentsRoutes(app);
     // ==================== Self-Improve 端点 ====================
     // 查看当前策略 (白名单 / 黑名单)
     app.get('/api/self-improve/policy', async (_req, res) => {
@@ -5207,16 +4938,23 @@ export async function createWebServer(port = 3000, options = {}) {
         const startPort = port;
         let currentPort = startPort;
         let attempt = 0;
+        // 2026-06-24: 默认 loopback bind，避免在 LAN 上暴露 (CORS 已经 * 了)。
+        // Electron 包装里强制 127.0.0.1; CLI 用户想 LAN 访问可显式 BOLLOON_HOST=0.0.0.0
+        const bindHost = options.host ?? process.env.BOLLOON_HOST ?? '127.0.0.1';
         // 局部可变 server 引用 — listen 失败后必须重新 createServer 再 listen
         let currentServer = server;
         const tryListen = () => {
             currentServer.removeAllListeners('error');
             currentServer.once('error', onError);
-            currentServer.listen(currentPort, () => {
+            currentServer.listen(currentPort, bindHost, () => {
                 if (currentPort !== startPort) {
                     console.warn(`⚠ 端口 ${startPort} 被占用，已自动切换到 ${currentPort}`);
                 }
-                console.log(`Web 服务器启动完成: http://localhost:${currentPort}`);
+                // 2026-06-24: BOLLOON_PORT=NNNN 是 Electron 主进程解析的契约行 (parseable),
+                // 旧 marker ('服务器已监听') 也保留给日志/调试看。
+                console.log(`BOLLOON_PORT=${currentPort}`);
+                console.log(`BOLLOON_HOST=${bindHost}`);
+                console.log(`Web 服务器启动完成: http://${bindHost}:${currentPort}`);
                 console.log('服务器已监听');
                 // 安装 chat bus -> SSE 桥 (供前端 inbox UI 实时刷新)
                 void installChatBusHook();
@@ -5266,12 +5004,37 @@ export async function createWebServer(port = 3000, options = {}) {
         tryListen();
     });
 }
+// 2026-07-06: 每个 channelId 维护递增 sequence + msgId, 让前端能去重 + 重连后 resume
+const channelEventSeq = new Map();
+const channelMsgIds = new Map(); // channelId -> 上一条 msgId (uuid)
+function nextEventSeq(channelId) {
+    if (!channelId)
+        return 0;
+    const cur = channelEventSeq.get(channelId) || 0;
+    const next = cur + 1;
+    channelEventSeq.set(channelId, next);
+    return next;
+}
+function nextMsgId(channelId) {
+    const id = `msg_${Date.now()}_${crypto.randomBytes(4).toString('hex')}`;
+    if (channelId)
+        channelMsgIds.set(channelId, id);
+    return id;
+}
 function broadcast(data, channelId) {
     // 2026-06-10: 喂 watchdog, 避免 30min 空闲被误判 (recordActivity 内有 5s 去抖)
     watchdogRef?.recordActivity?.();
-    const envelope = { ...data, channelId };
+    // 2026-07-06: 加 seq + msgId, 前端断连重连后可请求 /api/chat/resume?channelId=X&afterSeq=N 拿回
+    const seq = nextEventSeq(channelId);
+    // 2026-07-06: 每次广播都用 crypto randomBytes 4 生成唯一 id — 防止 seq 撞车 + 前端 seenMsgIds 去重
+    //   user/ai 用 nextMsgId (按 channelId 缓存最后一条) — 让 SSE onmessage 收到时识别
+    //   其他事件用 evt_<ts>_<rand> 形式 — 让前端 seenMsgIds 集合能跨 emit 去重
+    const msgId = (data.type === 'ai' || data.type === 'user')
+        ? nextMsgId(channelId)
+        : `evt_${Date.now()}_${crypto.randomBytes(4).toString('hex')}`;
+    const envelope = { ...data, channelId, seq, msgId };
     const message = `data: ${JSON.stringify(envelope)}\n\n`;
-    console.log(`[broadcast] type=${data.type}, channelId=${channelId}, clients=${sseClients.size}`);
+    console.log(`[broadcast] type=${data.type}, channelId=${channelId}, seq=${seq}, msgId=${msgId}, clients=${sseClients.size}`);
     for (const client of sseClients) {
         if (!channelId || client.channelId === channelId) {
             try {