[moz] feat: Runaway Guard per-task dispatch 上限

§15 Runaway Guard — per-task dispatch_count 上限，防止无限循环 dispatch

问题：mail/toolchain task 走 handler auto-working（跳过 claim），不受
claim_timeout 3 次重试兜底保护。如果反复 spawn 但永远到不了 done/failed，
会无限循环消耗资源（实际案例：2026-06-15 mention 重复投递事件）。

设计：
- tasks 表新增 dispatch_count 字段
- 每次 ticker 成功 dispatch 时递增
- dispatch_count >= 10 时自动标 failed（reason=runaway_guard）
- 覆盖所有非终态（pending/working/claimed）
- 参考 Hermes v0.13 §3 Per-Task 重试上限

改动文件：
- src/blackboard/db.py: _safe_add_column dispatch_count
- src/blackboard/models.py: Task dataclass 加 dispatch_count
- src/daemon/ticker.py: dispatch 递增 + _check_timeouts runaway guard
- docs/design/15-runaway-guard.md: 设计文档
- tests/integration/test_ticker_integration.py: E13 测试 3 个

测试：456 passed, 3 skipped

.gitea/workflows/ci.yml

@@ -62,12 +62,30 @@ jobs:
           (echo '=== RETRY WITH VERBOSE ===' && \
            PYTHONPATH=$(pwd) /tmp/ci-venv-test/bin/pytest tests/ -m "not e2e" -x -v 2>&1 | tail -30)
 
-  # ── Job 3: CI 失败通知 ───────────────────────────────
+  # ── Job 3: Frontend Build ───────────────────────────
+  frontend:
+    runs-on: macos-arm64
+    needs: lint
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Install & Build
+        run: |
+          cd src/frontend
+          npm ci || npm install
+          npm run build
+
+  # ── Job 4: CI 失败通知 ───────────────────────────────
   # 使用 needs.<job>.result 直接判断，不查询 commit status API
   # 根因：notify 自身的 pending status 会污染 commit status 查询结果（竞态条件）
   notify-on-failure:
     runs-on: macos-arm64
-    needs: [lint, test]
+    needs: [lint, test, frontend]
     if: always()
     steps:
       - name: Check results and notify
@@ -75,12 +93,13 @@ jobs:
           GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
           LINT_RESULT: ${{ needs.lint.result }}
           TEST_RESULT: ${{ needs.test.result }}
+          FRONTEND_RESULT: ${{ needs.frontend.result }}
         run: |
           echo "Lint result: $LINT_RESULT"
           echo "Test result: $TEST_RESULT"
 
           # 只有 lint 或 test 明确失败时才发通知
-          if [ "$LINT_RESULT" = "failure" ] || [ "$TEST_RESULT" = "failure" ]; then
+          if [ "$LINT_RESULT" = "failure" ] || [ "$TEST_RESULT" = "failure" ] || [ "$FRONTEND_RESULT" = "failure" ]; then
             echo "CI has failures, sending notification..."
 
             # 如果是 PR 事件，写评论通知
@@ -90,6 +109,7 @@ jobs:
               FAILED_JOBS=""
               [ "$LINT_RESULT" = "failure" ] && FAILED_JOBS="${FAILED_JOBS}lint "
               [ "$TEST_RESULT" = "failure" ] && FAILED_JOBS="${FAILED_JOBS}test "
+              [ "$FRONTEND_RESULT" = "failure" ] && FAILED_JOBS="${FAILED_JOBS}frontend "
 
               curl -sf -X POST \
                 -H "Authorization: token $GITEA_TOKEN" \

.gitea/workflows/deploy.yml

@@ -110,15 +110,7 @@ jobs:
           PR_AUTHOR=$(curl --max-time 5 -sf \
             -H "Authorization: token $GITEA_TOKEN" \
             "$API_URL/repos/$REPO/pulls?state=closed&sort=updated&order=desc&limit=10" | \
-            python3 -c "
-import json, sys
-sha = '$COMMIT_SHA'
-for pr in json.load(sys.stdin):
-    merge_sha = pr.get('merge_commit_sha', '') or ''
-    if merge_sha.startswith(sha) or sha.startswith(merge_sha):
-        print(pr['user']['login'])
-        break
-" 2>/dev/null || echo "")
+            python3 -c "import json,sys; sha='$COMMIT_SHA'; matches=[pr['user']['login'] for pr in json.load(sys.stdin) if (pr.get('merge_commit_sha','') or '').startswith(sha) or sha.startswith(pr.get('merge_commit_sha','') or '')]; print(matches[0] if matches else '')" 2>/dev/null || echo "")
 
           # 确定通知对象
           if [ -n "$PR_AUTHOR" ]; then

docs/design/14-task-type-architecture.md

@@ -585,6 +585,18 @@ class PromptComposer:
 | 50-59 | 硬约束 | 安全红线、禁止行为 |
 | 60-69 | 扩展段 | 保留给未来使用 |
 
+## 共性 Section（三 handler 共享）
+
+以下三个 Section 在 `prompt_composer.py` 中统一定义，被 Task/Mail/Toolchain 三个 handler 共同注入：
+
+| Section | priority | 用途 |
+|---------|----------|------|
+| `GiteaConventionSection` | 55 | Gitea Issue/PR 标题规范、分支命名、提交格式 |
+| `DeliveryChecklistSection` | 55 | 交付前检查清单（产出格式、验证项、必读文档） |
+| `WikiGuideSection` | 60 | Wiki 知识库检索指引（检索路径、优先级、知识缺口记录） |
+
+设计意图：将跨 handler 的共性约束从各 handler 的 ConstraintsSection 中抽离，避免重复维护。
+
 ---
 
 # §13 三个 Handler 的 Section 注册
@@ -601,6 +613,9 @@ def get_sections(self) -> list[PromptSection]:
         RoleSkillSection(priority=30),         # BootstrapBuilder 段 3（Skill 全文）
         TaskApiSection(priority=40),           # API 操作指令，success_status="review"
         TaskConstraintsSection(priority=50),   # 硬约束
+        GiteaConventionSection(priority=55),   # Gitea 协作规范（共性）
+        WikiGuideSection(priority=60),         # Wiki 知识库检索指引（共性）
+        DeliveryChecklistSection(priority=55), # 交付检查清单（共性）
     ]
 ```
 
@@ -611,6 +626,9 @@ def get_sections(self) -> list[PromptSection]:
 | RoleSkillSection | BootstrapBuilder 段 3 | 个性：只有 task 读 Skill 全文 |
 | TaskApiSection | spawner `_build_api_section` | **共性基础 + 个性参数**（success_status） |
 | TaskConstraintsSection | BootstrapBuilder 段 4 | 个性：每种 task 约束不同 |
+| GiteaConventionSection | prompt_composer.py | **共性**：Gitea Issue/PR 规范 |
+| WikiGuideSection | prompt_composer.py | **共性**：Wiki 检索指引 |
+| DeliveryChecklistSection | prompt_composer.py | **共性**：交付前检查清单 |
 
 ## MailHandler sections
 
@@ -620,6 +638,9 @@ def get_sections(self) -> list[PromptSection]:
         MailContextSection(priority=10),       # from/to/title/text，区分 inform/request
         MailApiSection(priority=40),           # API 操作指令，success_status="done"
         MailConstraintsSection(priority=50),   # 硬约束（禁止状态转换命令等）
+        GiteaConventionSection(priority=55),   # Gitea 协作规范（共性）
+        WikiGuideSection(priority=60),         # Wiki 知识库检索指引（共性）
+        DeliveryChecklistSection(priority=55), # 交付检查清单（共性）
     ]
 ```
 
@@ -628,6 +649,9 @@ def get_sections(self) -> list[PromptSection]:
 | MailContextSection | MAIL_INFORM_TEMPLATE / MAIL_REQUEST_TEMPLATE | 个性：邮件格式 |
 | MailApiSection | spawner `_build_api_section` 变体 | **共性基础 + 个性参数**（success_status="done"，含 Mail API 指令） |
 | MailConstraintsSection | 模板中的 ⚠️ 约束 | 个性 |
+| GiteaConventionSection | prompt_composer.py | **共性**：Gitea Issue/PR 规范 |
+| WikiGuideSection | prompt_composer.py | **共性**：Wiki 检索指引 |
+| DeliveryChecklistSection | prompt_composer.py | **共性**：交付前检查清单 |
 
 ## ToolchainHandler sections
 
@@ -637,6 +661,9 @@ def get_sections(self) -> list[PromptSection]:
         ToolchainContextSection(priority=10),  # 事件类型 + 事件详情
         ToolchainApiSection(priority=40),      # API 操作指令，success_status="done"
         ToolchainConstraintsSection(priority=50),  # 硬约束
+        GiteaConventionSection(priority=55),   # Gitea 协作规范（共性）
+        WikiGuideSection(priority=60),         # Wiki 知识库检索指引（共性）
+        DeliveryChecklistSection(priority=55), # 交付检查清单（共性）
     ]
 ```
 
@@ -645,6 +672,9 @@ def get_sections(self) -> list[PromptSection]:
 | ToolchainContextSection | toolchain_templates.py + md 文件 | 个性：事件格式 |
 | ToolchainApiSection | spawner `_build_api_section` 变体 | **共性基础 + 个性参数** |
 | ToolchainConstraintsSection | 新增 | 个性 |
+| GiteaConventionSection | prompt_composer.py | **共性**：Gitea Issue/PR 规范 |
+| WikiGuideSection | prompt_composer.py | **共性**：Wiki 检索指引 |
+| DeliveryChecklistSection | prompt_composer.py | **共性**：交付前检查清单 |
 
 ## Section 复用分析
 
@@ -655,6 +685,9 @@ def get_sections(self) -> list[PromptSection]:
 | *ConstraintsSection | ✅ | ✅ | ✅ | ❌ 约束内容不同，各自实现 |
 | PriorOutputsSection | ✅ | ❌ | ❌ | 仅 task |
 | RoleSkillSection | ✅ | ❌ | ❌ | 仅 task |
+| GiteaConventionSection | ✅ | ✅ | ✅ | **共性**：三 handler 共享，prompt_composer.py 定义 |
+| WikiGuideSection | ✅ | ✅ | ✅ | **共性**：三 handler 共享，prompt_composer.py 定义 |
+| DeliveryChecklistSection | ✅ | ✅ | ✅ | **共性**：三 handler 共享，prompt_composer.py 定义 |
 
 **结论**：ApiSection 可以抽一个 BaseApiSection（curl 模板 + success_status 参数），其余 section 各自实现。
 
@@ -667,9 +700,9 @@ src/daemon/
 ├── task_type_registry.py    # §3 + §4：Protocol + Registry
 ├── prompt_composer.py        # §12 PromptSection + PromptContext + PromptComposer
 ├── base_task_handler.py      # §16 BaseTaskHandler 基类
-├── task_handler.py           # §13 TaskHandler（继承 BaseTaskHandler）+ 5 sections
-├── mail_handler.py           # §13 MailHandler（继承 BaseTaskHandler）+ 3 sections
-├── toolchain_handler.py      # §13 ToolchainHandler（继承 BaseTaskHandler）+ 3 sections
+├── task_handler.py           # §13 TaskHandler（继承 BaseTaskHandler）+ 8 sections
+├── mail_handler.py           # §13 MailHandler（继承 BaseTaskHandler）+ 6 sections
+├── toolchain_handler.py      # §13 ToolchainHandler（继承 BaseTaskHandler）+ 6 sections
 ├── dispatcher.py             # §6 改动
 ├── spawner.py                # §6 改动
 ├── ticker.py                 # §6 改动

docs/design/15-runaway-guard.md

@@ -0,0 +1,61 @@
+# §15 Runaway Guard — Per-Task Dispatch 上限
+
+> 设计文档 v1.0 | 2026-06-16
+
+## 问题
+
+mail/toolchain task 走 handler auto-working（跳过 claim 阶段），不受 claim_timeout 的 3 次重试兜底保护。如果一个 auto-working task 反复 spawn 但永远到不了 done/failed，会无限循环消耗资源。
+
+### 实际案例
+
+2026-06-15 mention 重复投递事件：`spawn_full_agent` 在 `use_main_session=True` 时返回 `None`，ticker `_process_mentions` 误判为失败，每次 tick（30s）都重试。同一 mention 投递了 4 次，直到 retry_count 达到 mention_queue 的 5 次上限才停止。
+
+直接根因已由 PR #80 修复，但如果类似 bug 再次出现，当前没有任何机制阻止 task 层面的无限循环。
+
+## 设计
+
+### 机制
+
+tasks 表新增 `dispatch_count` 字段，每次 ticker 成功 dispatch 一个 task 时递增。当 `dispatch_count >= 10`（全局默认）时，自动标 failed。
+
+### 默认值选择
+
+全局默认 10 次。参考 Hermes v0.13 Best Practices §3 "Per-Task 重试上限"：
+
+- 简单任务重试 1 次
+- 复杂任务重试 3 次
+- crash recovery（3 次）+ api_retry（3 次）余量 = ~10 次
+
+### 适用范围
+
+所有 task 类型（task/mail/toolchain），所有非终态（pending/working/claimed）。
+
+### 检查时机
+
+在 `_check_timeouts` 方法开头，先于现有的 claimed/working 超时检查执行。
+
+### 与现有机制的关系
+
+| 机制 | 覆盖场景 | 触发动作 |
+|------|---------|---------|
+| claim_timeout retry_count >= 3 | 广播任务无人认领 | 升级庞统 |
+| crash_limit 3/30min | working 状态 crash | 标 failed |
+| api_retry_count | API 连续失败 | 标 failed |
+| 续杯 max_retries 3 | 续杯耗尽 | 标 failed |
+| working timeout | working 超时 | 标 failed 或 done |
+| **runaway_guard 10 次** | **任何状态的无限循环** | **标 failed** |
+
+runaway_guard 是最后一道防线，覆盖所有其他机制遗漏的循环场景。
+
+## 改动文件
+
+| 文件 | 改动 |
+|------|------|
+| `src/blackboard/db.py` | `_safe_add_column(conn, "tasks", "dispatch_count", "INTEGER DEFAULT 0")` |
+| `src/blackboard/models.py` | Task dataclass 加 `dispatch_count: int = 0` |
+| `src/daemon/ticker.py` | `_dispatch_pending` / `_dispatch_reviews` 递增 dispatch_count；`_check_timeouts` 加 runaway guard 检查 |
+
+## 参考
+
+- Hermes v0.13 Kanban Best Practices §3 "Per-Task 重试上限"
+- 实际案例：2026-06-15 mention 重复投递事件（PR #80 修复了直接根因，runaway guard 作为兜底）

docs/design/18-api-refactor-and-toolchain-tab.md

@@ -0,0 +1,503 @@
+# API 聚合重构 + 工具链 Tab 设计
+
+> **编号**: §18
+> **状态**: 设计中
+> **日期**: 2026-06-14
+> **作者**: 庞统（副军师）🐦
+> **审查**: 司马懿（mail-1781415763066 已回复，方案 B 调整版确认）
+
+---
+
+## 1. 背景与目标
+
+### 1.1 问题
+
+1. **blackboard_routes.py 膨胀**：572 行、22 个路由，task/comment/output/review/event/decision/observation/archive 全堆一个文件，维护困难
+2. **前端 N+1 请求**：打开 TaskModal 需要 5 次独立请求（task + events + subtasks + progress + comments），影响前端性能
+3. **工具链事件无前端展示**：`_toolchain` DB 隔离已完成，但前端无对应 Tab，工具链事件只能通过 Agent 收 Mail 感知
+
+### 1.2 目标
+
+1. 按领域拆分 blackboard_routes.py → 3 个文件
+2. 实现细粒度 expand 聚合接口，前端 1-2 次请求拿全任务详情
+3. 新增工具链 Tab（列表 + 详情 + 搜索栏）
+4. 任务列表支持标题搜索
+
+### 1.3 不做
+
+- checkpoint_routes.py 不纳入拆分（已独立）
+- mail_routes / toolchain_routes / project_routes 不动
+- SQL JOIN / batch query 性能优化（当前 SQLite 单写下多次查询可接受）
+
+---
+
+## 2. 后端 API 文件拆分
+
+### 2.1 拆分方案（方案 B 调整版，司马懿确认）
+
+| 新文件 | 内容 | 预估行数 |
+|--------|------|---------|
+| `task_routes.py` | task CRUD + create(含 AI 标题) + patch + progress + claim + status(含广播) + archive + archive-done | ~280 |
+| `task_relation_routes.py` | comments + outputs(含文件写入) + reviews + decisions + observations + events + experiences + summary | ~250 |
+| `shared.py` | `_bb()` / `_q()` / `_validate_project()` / `_task_to_dict()` / `_init_agent_ids()` / `_extract_mentions()` / 常量导入 | ~30 |
+
+### 2.2 路由分配明细
+
+**task_routes.py**（10 个路由）：
+
+| 路由 | 方法 | 函数 | 说明 |
+|------|------|------|------|
+| `/tasks` | GET | `list_tasks` | 列表（新增 `q` 搜索参数） |
+| `/tasks` | POST | `create_task` | 创建（含 `_generate_title`） |
+| `/tasks/{tid}` | GET | `get_task` | 详情（含 expand 聚合） |
+| `/tasks/{tid}` | PATCH | `patch_task` | 更新 |
+| `/tasks/{tid}/progress` | GET | `task_progress` | 进度 |
+| `/tasks/{tid}/claim` | POST | `claim_task` | 认领 |
+| `/tasks/{tid}/status` | POST | `update_status` | 状态流转（含广播逻辑） |
+| `/tasks/{tid}/archive` | POST | `archive_task` | 归档 |
+| `/tasks/archive-done` | POST | `archive_done_tasks` | 批量归档 |
+
+**task_relation_routes.py**（13 个路由）：
+
+| 路由 | 方法 | 函数 | 说明 |
+|------|------|------|------|
+| `/tasks/{tid}/comments` | GET | `get_comments` | 评论列表 |
+| `/tasks/{tid}/comments` | POST | `add_comment` | 添加评论（含 @mention 提取） |
+| `/tasks/{tid}/outputs` | GET | `get_outputs` | 产出列表 |
+| `/tasks/{tid}/outputs` | POST | `write_output` | 写入产出（含文件写入逻辑） |
+| `/tasks/{tid}/decisions` | GET | `get_decisions` | 决策列表 |
+| `/tasks/{tid}/decisions` | POST | `add_decision` | 添加决策 |
+| `/tasks/{tid}/observations` | POST | `add_observation` | 添加观察 |
+| `/tasks/{tid}/reviews` | GET | `get_reviews` | 审查列表 |
+| `/tasks/{tid}/reviews` | POST | `add_review` | 添加审查 |
+| `/tasks/{tid}/events` | GET | `get_task_events` | 事件列表 |
+| `/tasks/{tid}/experiences` | GET | `get_task_experiences` | 经验列表 |
+| `/events` | GET | `get_events` | 项目级事件 |
+| `/summary` | GET | `task_summary` | 任务汇总 |
+
+### 2.3 shared.py 共享件
+
+从 blackboard_routes.py 提取到 shared.py：
+
+| 符号 | 类型 | 说明 |
+|------|------|------|
+| `_validate_project()` | function | 项目 ID 校验 |
+| `_bb()` | function | Blackboard 实例获取 |
+| `_q()` | function | Queries 实例获取 |
+| `_task_to_dict()` | function | Task → dict 序列化 |
+| `_init_agent_ids()` | function | Agent ID 初始化 |
+| `_extract_mentions()` | function | @mention 提取 |
+| `VALID_STATUSES` | import | 从 db.py 重导出 |
+| `OUTPUT_TYPES` | import | 从 db.py 重导出 |
+
+### 2.4 main.py 路由注册变更
+
+```python
+# 拆分前
+from src.api.blackboard_routes import router as blackboard_router
+app.include_router(blackboard_router)
+
+# 拆分后
+from src.api.task_routes import router as task_router
+from src.api.task_relation_routes import router as task_relation_router
+app.include_router(task_router)
+app.include_router(task_relation_router)
+```
+
+URL prefix 不变：所有路由仍是 `/api/projects/{pid}/...`，前端 URL 零改动。
+
+### 2.5 向后兼容
+
+- 删除 `blackboard_routes.py`，所有引用指向新文件
+- `expand=all` 保持兼容（内部映射为全量 expand）
+- 不改变任何 API 的请求/响应格式（仅文件组织变化）
+
+---
+
+## 3. expand 聚合接口
+
+### 3.1 设计
+
+`GET /api/projects/{pid}/tasks/{tid}?expand=comments,outputs,reviews,events,decisions`
+
+支持逗号分隔的细粒度选择，替代当前的 `expand=all`。
+
+### 3.2 返回格式
+
+```json
+{
+  "task": { "id": "...", "title": "...", "status": "working", ... },
+  "comments": {
+    "items": [...],
+    "total_count": 45,
+    "limit": 20
+  },
+  "events": {
+    "items": [...],
+    "total_count": 120,
+    "limit": 30
+  },
+  "outputs": [...],
+  "reviews": [...],
+  "decisions": [...]
+}
+```
+
+### 3.3 limit 策略
+
+| 关联资源 | expand 返回 | 分页支持 | 理由 |
+|----------|------------|---------|------|
+| comments | 最新 20 条 + total_count | `GET /comments?limit=50&offset=0` | 高频资源，长任务可能积累几十条 |
+| events | 最新 30 条 + total_count | `GET /events?limit=100&offset=0` | 运行几天可能上百条 |
+| outputs | 全部 | 不需要 | 通常 <5 条 |
+| reviews | 全部 | 不需要 | 通常 <5 条 |
+| decisions | 全部 | 不需要 | 通常 <5 条 |
+
+前端拿到 `total_count > items.length` 时显示"还有 N 条"，按需点击加载。
+
+### 3.4 实现伪码
+
+```python
+@router.get("/tasks/{task_id}")
+async def get_task(project_id: str, task_id: str,
+                   expand: Optional[str] = None):
+    bb = _bb(project_id)
+    task = bb.get_task(task_id)
+    if not task:
+        raise HTTPException(404, f"Task not found: {task_id}")
+
+    result = _task_to_dict(task)
+
+    if not expand:
+        return result
+
+    expand_list = expand.split(",") if expand != "all" else [
+        "comments", "outputs", "reviews", "events", "decisions"
+    ]
+
+    q = _q(project_id)
+
+    if "comments" in expand_list:
+        all_comments = bb.get_comments(task_id)
+        result["comments"] = {
+            "items": [dict(c.__dict__) for c in all_comments[-20:]],
+            "total_count": len(all_comments),
+            "limit": 20,
+        }
+
+    if "events" in expand_list:
+        all_events = q.task_events(task_id)
+        result["events"] = {
+            "items": all_events[-30:],
+            "total_count": len(all_events),
+            "limit": 30,
+        }
+
+    if "outputs" in expand_list:
+        result["outputs"] = [dict(o.__dict__) for o in bb.get_outputs(task_id)]
+
+    if "reviews" in expand_list:
+        result["reviews"] = [dict(r.__dict__) for r in bb.get_reviews(task_id)]
+
+    if "decisions" in expand_list:
+        result["decisions"] = [dict(d.__dict__) for d in bb.get_decisions(task_id)]
+
+    return result
+```
+
+### 3.5 性能分析
+
+| 场景 | 当前（无 expand） | expand 后 | 改善 |
+|------|-----------------|-----------|------|
+| 打开 TaskModal | 5 次 HTTP 请求 | 2 次（task+expand + subtasks） | -60% 请求 |
+| 单次 expand 响应体 | — | ~5-15KB（典型） | 一次大请求 < 五次小请求 |
+| DB 查询次数 | 5 次（各端点独立查） | 5 次（expand 内部循环） | 相同，暂不优化 |
+
+---
+
+## 4. 任务列表搜索
+
+### 4.1 设计
+
+`GET /api/projects/{pid}/tasks?q=关键词`
+
+在现有 `list_tasks` 基础上增加 `q` 查询参数，支持标题模糊搜索（SQL LIKE）。
+
+### 4.2 实现
+
+```python
+@router.get("/tasks")
+async def list_tasks(project_id: str, q: Optional[str] = None, ...):
+    bb = _bb(project_id)
+    tasks = bb.list_tasks(status=status, ...)
+
+    if q:
+        q_lower = q.lower()
+        tasks = [t for t in tasks if q_lower in (t.title or "").lower()]
+
+    return {"tasks": [_task_to_dict(t) for t in tasks]}
+```
+
+**设计决策**：过滤在 Python 层做而非 SQL 层。
+- 理由：当前 `list_tasks` 已在 Python 层做 status 筛选，加一层 title 过滤一致性更好
+- 如果后续任务量大（>1000），再改为 SQL LIKE 查询
+
+---
+
+## 5. 前端：工具链 Tab
+
+### 5.1 Tab 定义
+
+```typescript
+// store.ts TabKey 新增
+| 'toolchain'
+
+// TAB_DEFS 新增（插在 settings 前面）
+{ key: 'toolchain', label: '工具链', icon: '⛓️' },
+```
+
+### 5.2 数据加载
+
+```typescript
+// store.ts 新增
+toolchainTasks: any[];
+loadToolchain: async () => {
+  const res = await fetch('/api/projects/_toolchain/tasks');
+  const data = await res.json();
+  set({ toolchainTasks: data.tasks || [] });
+}
+
+// Tab 切换时加载
+if (tab === 'toolchain') s.loadToolchain();
+```
+
+### 5.3 ToolchainPanel 组件
+
+仿 MailPanel 结构，三个区域：
+
+**搜索栏**（顶部）：
+- 文本输入框，输入关键词实时过滤列表
+- 调用 `GET /api/projects/_toolchain/tasks?q=关键词`
+
+**列表区**（左侧）：
+- 工具链事件列表（时间倒序）
+- 每条显示：标题 + 时间 + 状态标签
+- 点击选中，高亮当前选中项
+
+**详情区**（右侧）：
+- 选中事件的完整内容
+- 调用 `GET /api/projects/_toolchain/tasks/{tid}?expand=comments` 获取详情
+- 展示：标题、描述、状态、评论（action_report 等）
+
+### 5.4 和 Mail 的隔离
+
+| 维度 | Mail Tab | 工具链 Tab |
+|------|---------|-----------|
+| 数据源 | `_mail` 项目 | `_toolchain` 项目 |
+| 事件类型 | Agent 间通信（inform/request） | 系统事件（CI/PR/部署/Review） |
+| 搜索 | 无（邮件量不大） | 有（工具链事件频率高） |
+
+---
+
+## 6. 测试设计
+
+### 6.1 后端 API 拆分测试
+
+**目标**：验证拆分后所有路由 URL 不变、行为不变。
+
+**测试文件**：`tests/integration/test_api.py`（扩展现有）+ 新增 `tests/unit/test_task_routes.py`
+
+| 测试类 | 测试用例 | 验证点 |
+|--------|---------|--------|
+| TestTaskRoutes | test_list_tasks | GET /tasks 返回格式不变 |
+| | test_list_tasks_with_search | q 参数过滤正确 |
+| | test_list_tasks_empty_q | q 为空时返回全部 |
+| | test_get_task | GET /tasks/{tid} 基本详情 |
+| | test_get_task_expand_comments | expand=comments 返回带 total_count + limit |
+| | test_get_task_expand_events | expand=events 返回带 total_count + limit |
+| | test_get_task_expand_outputs | expand=outputs 全量返回 |
+| | test_get_task_expand_multiple | expand=comments,outputs,reviews 组合 |
+| | test_get_task_expand_all | expand=all 向后兼容 |
+| | test_get_task_no_expand | 不传 expand 返回基本 task |
+| | test_create_task | POST 格式不变 |
+| | test_claim_task | 认领行为不变 |
+| | test_update_status | 状态流转不变 |
+| | test_patch_task | PATCH 不变 |
+| | test_archive_task | 归档不变 |
+
+| 测试类 | 测试用例 | 验证点 |
+|--------|---------|--------|
+| TestTaskRelationRoutes | test_comments_crud | GET/POST comments 不变 |
+| | test_outputs_crud | GET/POST outputs 不变 |
+| | test_write_output_file | 文件写入逻辑不变 |
+| | test_reviews_crud | GET/POST reviews 不变 |
+| | test_decisions_crud | GET/POST decisions 不变 |
+| | test_observations_add | POST observations 不变 |
+| | test_events_list | GET events 不变 |
+| | test_experiences_list | GET experiences 不变 |
+| | test_project_events | GET /events 不变 |
+| | test_summary | GET /summary 不变 |
+
+**兼容性验证脚本**：
+
+```bash
+#!/bin/bash
+# tests/scripts/verify_api_compat.sh
+# 对比拆分前后所有路由 URL 和方法，确保零变化
+
+echo "=== 拆分前路由清单 ==="
+# 从 git stash 或 main 分支提取
+git stash
+python -c "
+from src.main import app
+for route in app.routes:
+    if hasattr(route, 'methods') and hasattr(route, 'path'):
+        for m in sorted(route.methods):
+            if m in ('GET','POST','PATCH','DELETE','PUT'):
+                print(f'{m} {route.path}')
+" | sort > /tmp/routes_before.txt
+
+git stash pop
+
+echo "=== 拆分后路由清单 ==="
+python -c "
+from src.main import app
+for route in app.routes:
+    if hasattr(route, 'methods') and hasattr(route, 'path'):
+        for m in sorted(route.methods):
+            if m in ('GET','POST','PATCH','DELETE','PUT'):
+                print(f'{m} {route.path}')
+" | sort > /tmp/routes_after.txt
+
+echo "=== Diff ==="
+diff /tmp/routes_before.txt /tmp/routes_after.txt
+if [ $? -eq 0 ]; then
+    echo "✅ 路由完全一致"
+else
+    echo "❌ 路由有差异"
+    exit 1
+fi
+```
+
+### 6.2 expand 聚合测试
+
+**测试文件**：`tests/unit/test_expand_api.py`
+
+| 测试用例 | 验证点 |
+|---------|--------|
+| test_expand_comments_limit | comments 返回最新 20 条 + total_count=25 |
+| test_expand_comments_are_latest | 验证返回的是最新 20 条（index 5-24） |
+| test_expand_events_limit | events 返回最新 30 条 + total_count=35 |
+| test_expand_outputs_full | outputs 全量返回（list 格式，不分页） |
+| test_expand_reviews_full | reviews 全量返回 |
+| test_expand_decisions_full | decisions 全量返回 |
+| test_expand_multiple_fields | expand=comments,outputs,reviews 组合，未请求的不返回 |
+| test_expand_all_compat | expand=all 向后兼容 |
+| test_no_expand | 不传 expand 只返回基本 task |
+| test_expand_invalid_field_ignored | 无效字段静默忽略 |
+
+### 6.3 搜索测试
+
+**测试文件**：`tests/unit/test_task_routes.py` 内 `TestTaskListRoutes`
+
+| 测试用例 | 验证点 |
+|---------|--------|
+| test_list_tasks_with_search | q 参数标题模糊搜索 |
+| test_list_tasks_search_case_insensitive | 大小写不敏感 |
+| test_list_tasks_search_no_match | 无匹配返回空列表 |
+| test_list_tasks_search_empty_q | q 为空返回全部 |
+
+### 6.4 前端测试（手动验证）
+
+| 验证点 | 操作 | 预期 |
+|--------|------|------|
+| 工具链 Tab 出现 | 打开前端 | Tab 栏有 ⛓️ 工具链 |
+| 列表加载 | 点击工具链 Tab | 显示 _toolchain 事件列表 |
+| 搜索过滤 | 输入关键词 | 列表实时过滤 |
+| 详情展示 | 点击某条事件 | 右侧/弹窗显示完整内容 |
+| Tab 切换不丢数据 | 切到其他 Tab 再回来 | 数据保持 |
+
+### 6.5 CI 集成
+
+| 命令 | 说明 |
+|------|------|
+| `bash tests/scripts/verify_api_compat.sh` | 路由兼容性验证（CI 必跑） |
+| `pytest tests/unit/test_task_routes.py tests/unit/test_expand_api.py tests/integration/test_api.py -m "not e2e" -v` | 新增单元 + 集成测试 |
+
+> 测试用例详细设计（fixture + 完整代码 + 覆盖矩阵）见 `docs/design/18-test-design.md`
+
+---
+
+## 7. 实施计划
+
+### Phase 1: 后端 API 拆分（不含功能变更）
+
+| 步骤 | 内容 | 验证 |
+|------|------|------|
+| 1.1 | 创建 `shared.py`，提取共享 helper | import 无报错 |
+| 1.2 | 创建 `task_routes.py`，迁移 10 个路由 | 路由注册成功 |
+| 1.3 | 创建 `task_relation_routes.py`，迁移 13 个路由 | 路由注册成功 |
+| 1.4 | 更新 `main.py` router 注册 | app 启动无报错 |
+| 1.5 | 删除 `blackboard_routes.py` | — |
+| 1.6 | 运行 `verify_api_compat.sh` | 路由清单 diff = 0 |
+| 1.7 | 运行现有测试 | 全量通过 |
+
+### Phase 2: expand 聚合 + 搜索
+
+| 步骤 | 内容 | 验证 |
+|------|------|------|
+| 2.1 | 重写 `get_task` expand 逻辑（细粒度） | TestExpandAPI 通过 |
+| 2.2 | `list_tasks` 加 `q` 参数 | TestTaskSearch 通过 |
+| 2.3 | 新增测试用例 | 覆盖率达标 |
+
+### Phase 3: 前端工具链 Tab
+
+| 步骤 | 内容 | 验证 |
+|------|------|------|
+| 3.1 | store.ts 新增 toolchain 数据加载 | — |
+| 3.2 | api.ts 新增 expand 调用封装 | — |
+| 3.3 | 创建 `ToolchainPanel.tsx` | 组件渲染正常 |
+| 3.4 | App.tsx 注册新 Tab | Tab 显示正确 |
+| 3.5 | TaskModal 改用 expand 减少 | 请求次数减少 |
+
+### Phase 4: 联调 + 评审
+
+| 步骤 | 内容 |
+|------|------|
+| 4.1 | 全量测试 `pytest -m "not e2e"` |
+| 4.2 | 发评审给司马懿 |
+| 4.3 | 前端手动验证 |
+
+---
+
+## 8. 风险评估
+
+| 风险 | 级别 | 缓解 |
+|------|------|------|
+| 拆分后 import 路径断裂 | 中 | IDE 全局搜索 + 运行时验证 |
+| expand 返回体过大 | 低 | comments/events 有 limit |
+| 工具链事件量大影响前端 | 低 | 搜索栏 + 分页 |
+| expand=all 向后兼容 | 低 | 单独兼容分支处理 |
+
+---
+
+## 9. 评审记录
+
+### 司马懿 mail-1781415763066（2026-06-14）
+
+| 项目 | 结论 |
+|------|------|
+| 文件拆分 | 方案 B 调整版（task_routes + task_relation_routes + shared） |
+| expand | 细粒度，events/comments 带 limit+total_count |
+| 性能 | 当前 SQLite 多次查询可接受 |
+| checkpoint | 不纳入 |
+| _generate_title | 留在 task_routes.py |
+| write_output | 注意不是简单 CRUD |
+
+---
+
+## 10. 变更记录
+
+| 日期 | 版本 | 内容 |
+|------|------|------|
+| 2026-06-14 | v1.0 | 初版设计 |

docs/design/18-test-design.md

@@ -0,0 +1,484 @@
+# §18 测试用例详细设计
+
+> **关联**: `docs/design/18-api-refactor-and-toolchain-tab.md`
+> **日期**: 2026-06-14
+
+---
+
+## 1. 测试文件规划
+
+| 文件 | 类型 | 测试数 | 说明 |
+|------|------|--------|------|
+| `tests/integration/test_api.py` | 集成 | 扩展现有 | 拆分后回归验证 |
+| `tests/unit/test_task_routes.py` | 单元 | 14 | task_routes 专项 |
+| `tests/unit/test_expand_api.py` | 单元 | 7 | expand 聚合专项 |
+| `tests/unit/test_task_search.py` | 单元 | 4 | 搜索专项 |
+| `tests/scripts/verify_api_compat.sh` | 脚本 | 1 | CI 路由兼容性 |
+
+**总计**：26 个测试 + 1 个 CI 脚本
+
+---
+
+## 2. 预置 Fixture
+
+```python
+# tests/conftest.py 新增（如果不存在则补充）
+
+@pytest.fixture
+def expand_env(tmp_path):
+    """expand 测试环境：1 个 task + 预置关联数据"""
+    project_root = tmp_path / "projects"
+    project_root.mkdir()
+    os.environ["BLACKBOARD_ROOT"] = str(project_root)
+
+    reg = ProjectRegistry(project_root)
+    reg.create_project("test-proj", "Test Project", agents=["agent1"])
+
+    bb = Blackboard(project_root / "test-proj" / "blackboard.db")
+    bb.create_task(Task(id="t1", title="Expand Test Task", task_type="coding"))
+
+    # 预置 25 条 comment
+    for i in range(25):
+        bb.add_comment("t1", agent="agent1", comment_type="general",
+                       content=f"Comment number {i}")
+
+    # 预置 5 条 output
+    for i in range(5):
+        bb.write_output("t1", agent="agent1",
+                        output_type="code",
+                        content=f"output content {i}",
+                        filename=f"file_{i}.py")
+
+    # 预置 3 条 review
+    for i in range(3):
+        bb.add_review("t1", reviewer="agent1",
+                      verdict="APPROVE",
+                      confidence=0.9,
+                      risk_level="low",
+                      summary=f"Review {i}")
+
+    # 预置 2 条 decision
+    for i in range(2):
+        bb.add_decision("t1", agent="agent1",
+                        decision_type="scope",
+                        rationale=f"Decision {i}")
+
+    # 预置 35 条 event
+    from src.blackboard.queries import Queries
+    q = Queries(project_root / "test-proj" / "blackboard.db")
+    for i in range(35):
+        q.add_event("t1", event_type="status_change",
+                    detail=f"Event {i}")
+
+    yield project_root
+    del os.environ["BLACKBOARD_ROOT"]
+```
+
+---
+
+## 3. task_routes.py 测试（test_task_routes.py）
+
+```python
+"""task_routes.py 路由测试 — 验证拆分后行为不变"""
+
+import pytest
+from fastapi.testclient import TestClient
+from src.main import app
+
+client = TestClient(app)
+pytestmark = pytest.mark.integration
+
+
+class TestTaskListRoutes:
+    """GET /tasks + 搜索"""
+
+    def test_list_tasks_basic(self, project_env):
+        """列表基本返回格式不变"""
+        resp = client.get("/api/projects/test-proj/tasks")
+        assert resp.status_code == 200
+        data = resp.json()
+        assert "tasks" in data
+        assert isinstance(data["tasks"], list)
+
+    def test_list_tasks_with_search(self, project_env):
+        """q 参数搜索标题"""
+        resp = client.get("/api/projects/test-proj/tasks?q=Existing")
+        data = resp.json()
+        assert len(data["tasks"]) == 1
+        assert "Existing" in data["tasks"][0]["title"]
+
+    def test_list_tasks_search_case_insensitive(self, project_env):
+        """大小写不敏感"""
+        resp = client.get("/api/projects/test-proj/tasks?q=existing")
+        data = resp.json()
+        assert len(data["tasks"]) == 1
+
+    def test_list_tasks_search_no_match(self, project_env):
+        """无匹配返回空列表"""
+        resp = client.get("/api/projects/test-proj/tasks?q=nonexistent_xyz")
+        data = resp.json()
+        assert len(data["tasks"]) == 0
+
+    def test_list_tasks_search_empty_q(self, project_env):
+        """q 为空返回全部"""
+        resp = client.get("/api/projects/test-proj/tasks?q=")
+        data = resp.json()
+        assert len(data["tasks"]) >= 1
+
+
+class TestTaskDetailRoutes:
+    """GET /tasks/{tid} + expand"""
+
+    def test_get_task_basic(self, project_env):
+        """无 expand 返回基本 task"""
+        resp = client.get("/api/projects/test-proj/tasks/t1")
+        assert resp.status_code == 200
+        data = resp.json()
+        assert data["id"] == "t1"
+        assert "comments" not in data  # 无 expand 不含关联数据
+
+    def test_get_task_404(self, project_env):
+        """不存在的 task 返回 404"""
+        resp = client.get("/api/projects/test-proj/tasks/nonexistent")
+        assert resp.status_code == 404
+
+
+class TestTaskActionRoutes:
+    """claim/status/patch/archive 行为不变"""
+
+    def test_claim_task(self, project_env):
+        """认领行为不变"""
+        resp = client.post("/api/projects/test-proj/tasks/t1/claim",
+                          json={"agent": "agent1"})
+        assert resp.status_code == 200
+
+    def test_update_status(self, project_env):
+        """状态流转不变"""
+        client.post("/api/projects/test-proj/tasks/t1/claim",
+                   json={"agent": "agent1"})
+        resp = client.post("/api/projects/test-proj/tasks/t1/status",
+                          json={"agent": "agent1", "status": "working"})
+        assert resp.status_code == 200
+
+    def test_invalid_status_transition(self, project_env):
+        """非法状态转换返回 409"""
+        resp = client.post("/api/projects/test-proj/tasks/t1/status",
+                          json={"agent": "agent1", "status": "done"})
+        assert resp.status_code == 409
+
+    def test_patch_task(self, project_env):
+        """PATCH 更新不变"""
+        resp = client.patch("/api/projects/test-proj/tasks/t1",
+                           json={"priority": 5})
+        assert resp.status_code == 200
+
+    def test_archive_task(self, project_env):
+        """归档不变"""
+        resp = client.post("/api/projects/test-proj/tasks/t1/archive",
+                          json={"agent": "agent1"})
+        assert resp.status_code == 200
+
+
+class TestTaskCreateRoute:
+    """POST /tasks 创建行为不变"""
+
+    def test_create_task(self, project_env):
+        """创建格式不变"""
+        resp = client.post("/api/projects/test-proj/tasks",
+                          json={"title": "New Task", "description": "test"})
+        assert resp.status_code == 201
+        data = resp.json()
+        assert "id" in data
+```
+
+---
+
+## 4. expand 聚合测试（test_expand_api.py）
+
+```python
+"""expand 聚合接口测试"""
+
+import pytest
+from fastapi.testclient import TestClient
+from src.main import app
+
+client = TestClient(app)
+pytestmark = pytest.mark.integration
+
+
+class TestExpandComments:
+    """expand=comments"""
+
+    def test_comments_limit_and_count(self, expand_env):
+        """返回最新 20 条 + total_count=25"""
+        resp = client.get("/api/projects/test-proj/tasks/t1?expand=comments")
+        data = resp.json()
+
+        comments = data["comments"]
+        assert isinstance(comments, dict)
+        assert len(comments["items"]) == 20
+        assert comments["total_count"] == 25
+        assert comments["limit"] == 20
+
+    def test_comments_are_latest(self, expand_env):
+        """返回的是最新 20 条（Comment 5-24）"""
+        resp = client.get("/api/projects/test-proj/tasks/t1?expand=comments")
+        data = resp.json()
+        first_content = data["comments"]["items"][0]["content"]
+        last_content = data["comments"]["items"][-1]["content"]
+        # 最新 20 条 = index 5 到 24
+        assert "5" in first_content or "24" in last_content
+
+
+class TestExpandEvents:
+    """expand=events"""
+
+    def test_events_limit_and_count(self, expand_env):
+        """返回最新 30 条 + total_count=35"""
+        resp = client.get("/api/projects/test-proj/tasks/t1?expand=events")
+        data = resp.json()
+
+        events = data["events"]
+        assert isinstance(events, dict)
+        assert len(events["items"]) == 30
+        assert events["total_count"] == 35
+        assert events["limit"] == 30
+
+
+class TestExpandFullResources:
+    """outputs/reviews/decisions 全量返回"""
+
+    def test_expand_outputs_full(self, expand_env):
+        """outputs 全量返回（5 条），格式是 list 不是 dict"""
+        resp = client.get("/api/projects/test-proj/tasks/t1?expand=outputs")
+        data = resp.json()
+
+        outputs = data["outputs"]
+        assert isinstance(outputs, list)
+        assert len(outputs) == 5
+
+    def test_expand_reviews_full(self, expand_env):
+        """reviews 全量返回（3 条）"""
+        resp = client.get("/api/projects/test-proj/tasks/t1?expand=reviews")
+        data = resp.json()
+
+        reviews = data["reviews"]
+        assert isinstance(reviews, list)
+        assert len(reviews) == 3
+
+    def test_expand_decisions_full(self, expand_env):
+        """decisions 全量返回（2 条）"""
+        resp = client.get("/api/projects/test-proj/tasks/t1?expand=decisions")
+        data = resp.json()
+
+        decisions = data["decisions"]
+        assert isinstance(decisions, list)
+        assert len(decisions) == 2
+
+
+class TestExpandCombinations:
+    """组合 expand"""
+
+    def test_expand_multiple_fields(self, expand_env):
+        """expand=comments,outputs,reviews 组合"""
+        resp = client.get(
+            "/api/projects/test-proj/tasks/t1?expand=comments,outputs,reviews"
+        )
+        data = resp.json()
+
+        assert "comments" in data
+        assert "outputs" in data
+        assert "reviews" in data
+        assert "events" not in data  # 未请求
+        assert "decisions" not in data
+
+    def test_expand_all_compat(self, expand_env):
+        """expand=all 向后兼容"""
+        resp = client.get("/api/projects/test-proj/tasks/t1?expand=all")
+        data = resp.json()
+
+        # all 返回所有关联资源
+        assert "comments" in data
+        assert "outputs" in data
+        assert "reviews" in data
+        assert "events" in data
+        assert "decisions" in data
+
+    def test_no_expand(self, expand_env):
+        """不传 expand 只返回基本 task"""
+        resp = client.get("/api/projects/test-proj/tasks/t1")
+        data = resp.json()
+
+        assert "comments" not in data
+        assert "outputs" not in data
+        assert data["id"] == "t1"
+
+    def test_expand_invalid_field_ignored(self, expand_env):
+        """无效 expand 字段静默忽略"""
+        resp = client.get(
+            "/api/projects/test-proj/tasks/t1?expand=comments,invalid_field"
+        )
+        data = resp.json()
+
+        assert "comments" in data
+        assert "invalid_field" not in data
+```
+
+---
+
+## 5. task_relation_routes.py 回归测试
+
+```python
+"""task_relation_routes.py 路由回归 — 验证拆分后行为不变"""
+
+import pytest
+from fastapi.testclient import TestClient
+from src.main import app
+
+client = TestClient(app)
+pytestmark = pytest.mark.integration
+
+
+class TestRelationRoutesRegression:
+    """关联路由回归测试"""
+
+    def test_comments_crud(self, project_env):
+        """GET/POST comments 不变"""
+        # POST
+        resp = client.post("/api/projects/test-proj/tasks/t1/comments",
+                          json={"agent": "a1", "comment_type": "general",
+                                "content": "test comment"})
+        assert resp.status_code == 201
+
+        # GET
+        resp = client.get("/api/projects/test-proj/tasks/t1/comments")
+        assert resp.status_code == 200
+        assert len(resp.json()["comments"]) >= 1
+
+    def test_outputs_crud(self, project_env):
+        """GET/POST outputs 不变"""
+        resp = client.post("/api/projects/test-proj/tasks/t1/outputs",
+                          json={"agent": "a1", "type": "code",
+                                "content": "print('hello')"})
+        assert resp.status_code == 201
+
+        resp = client.get("/api/projects/test-proj/tasks/t1/outputs")
+        assert resp.status_code == 200
+
+    def test_write_output_with_filename(self, project_env):
+        """output 含 filename 的文件写入不变"""
+        resp = client.post("/api/projects/test-proj/tasks/t1/outputs",
+                          json={"agent": "a1", "type": "code",
+                                "content": "x = 1",
+                                "filename": "test.py"})
+        assert resp.status_code == 201
+
+    def test_write_output_invalid_type(self, project_env):
+        """output 无效 type 返回 422"""
+        resp = client.post("/api/projects/test-proj/tasks/t1/outputs",
+                          json={"agent": "a1", "type": "invalid_type",
+                                "content": "x"})
+        assert resp.status_code == 422
+
+    def test_reviews_crud(self, project_env):
+        """GET/POST reviews 不变"""
+        resp = client.post("/api/projects/test-proj/tasks/t1/reviews",
+                          json={"reviewer": "a1", "verdict": "APPROVE",
+                                "confidence": 0.9, "risk_level": "low",
+                                "summary": "LGTM"})
+        assert resp.status_code == 201
+
+        resp = client.get("/api/projects/test-proj/tasks/t1/reviews")
+        assert resp.status_code == 200
+
+    def test_decisions_crud(self, project_env):
+        """GET/POST decisions 不变"""
+        resp = client.post("/api/projects/test-proj/tasks/t1/decisions",
+                          json={"agent": "a1", "decision_type": "scope",
+                                "rationale": "test"})
+        assert resp.status_code == 201
+
+        resp = client.get("/api/projects/test-proj/tasks/t1/decisions")
+        assert resp.status_code == 200
+
+    def test_observations_add(self, project_env):
+        """POST observations 不变"""
+        resp = client.post("/api/projects/test-proj/tasks/t1/observations",
+                          json={"agent": "a1", "observation_type": "note",
+                                "content": "observed"})
+        assert resp.status_code == 201
+
+    def test_events_list(self, project_env):
+        """GET events 不变"""
+        resp = client.get("/api/projects/test-proj/tasks/t1/events")
+        assert resp.status_code == 200
+        assert "events" in resp.json()
+
+    def test_project_events(self, project_env):
+        """GET /events 项目级事件不变"""
+        resp = client.get("/api/projects/test-proj/events")
+        assert resp.status_code == 200
+
+    def test_summary(self, project_env):
+        """GET /summary 不变"""
+        resp = client.get("/api/projects/test-proj/summary")
+        assert resp.status_code == 200
+```
+
+---
+
+## 6. CI 集成
+
+### .gitea/workflows/ci.yml 新增步骤
+
+```yaml
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      # ... 现有步骤 ...
+
+      # API 兼容性验证
+      - name: Verify API Compatibility
+        run: |
+          cd src/frontend && npm run build
+          bash tests/scripts/verify_api_compat.sh
+
+      # 新增测试
+      - name: Run API Tests
+        run: |
+          pytest tests/unit/test_task_routes.py \
+                 tests/unit/test_expand_api.py \
+                 tests/integration/test_api.py \
+                 -m "not e2e" -v
+```
+
+### 本地开发验证流程
+
+```bash
+# 1. 改完代码后先跑兼容性验证
+bash tests/scripts/verify_api_compat.sh
+
+# 2. 跑全量测试
+pytest -m "not e2e" -v
+
+# 3. 跑新增专项测试
+pytest tests/unit/test_task_routes.py tests/unit/test_expand_api.py -v
+```
+
+---
+
+## 7. 测试覆盖矩阵
+
+| 设计文档章节 | 测试文件 | 测试类 | 用例数 |
+|-------------|---------|--------|--------|
+| §2 路由拆分（兼容性） | verify_api_compat.sh | — | 1 |
+| §3.1 基本详情 | test_task_routes.py | TestTaskDetailRoutes | 2 |
+| §3.2 搜索 | test_task_routes.py | TestTaskListRoutes | 5 |
+| §3.3 动作路由 | test_task_routes.py | TestTaskActionRoutes | 5 |
+| §3.4 创建 | test_task_routes.py | TestTaskCreateRoute | 1 |
+| §4 expand comments | test_expand_api.py | TestExpandComments | 2 |
+| §4 expand events | test_expand_api.py | TestExpandEvents | 1 |
+| §4 expand 全量 | test_expand_api.py | TestExpandFullResources | 3 |
+| §4 expand 组合 | test_expand_api.py | TestExpandCombinations | 4 |
+| §5.2 关联回归 | test_api.py | TestRelationRoutesRegression | 10 |
+| **合计** | | | **34** |

src/api/shared.py

@@ -0,0 +1,73 @@
+"""共享 helper 和常量"""
+
+from typing import Any, Dict
+from fastapi import HTTPException
+
+from src.blackboard.operations import Blackboard
+from src.blackboard.queries import Queries
+from src.blackboard.models import Task
+from src.blackboard.registry import ProjectRegistry
+from src.utils import get_data_root
+
+# 虚拟项目白名单
+_VIRTUAL_PROJECTS = frozenset({"_general", "_mail", "_toolchain"})
+
+
+def _validate_project(project_id: str) -> str:
+    """校验 project_id"""
+    if project_id in _VIRTUAL_PROJECTS:
+        return project_id
+    reg = ProjectRegistry(get_data_root())
+    if reg.get_project(project_id):
+        return project_id
+    raise HTTPException(400, {
+        "ok": False,
+        "error": "project_not_found",
+        "detail": f"Project '{project_id}' is not registered.",
+        "suggestions": [
+            f"Register first: POST /api/projects with id='{project_id}'",
+            "Or use '_general' for tasks without a specific project",
+        ],
+    })
+
+
+def _bb(project_id: str) -> Blackboard:
+    _validate_project(project_id)
+    return Blackboard(get_data_root() / project_id / "blackboard.db")
+
+
+def _q(project_id: str) -> Queries:
+    _validate_project(project_id)
+    return Queries(get_data_root() / project_id / "blackboard.db")
+
+
+def _task_to_dict(t: Task) -> Dict[str, Any]:
+    d = {k: v for k, v in t.__dict__.items() if v is not None}
+    return d
+
+
+_KNOWN_AGENT_IDS: list = []
+
+
+def _init_agent_ids():
+    """从配置文件加载 Agent ID 列表"""
+    global _KNOWN_AGENT_IDS
+    if _KNOWN_AGENT_IDS:
+        return
+    try:
+        import yaml
+        import os
+        cfg_path = os.path.join(os.path.dirname(__file__), "..", "..", "config", "default.yaml")
+        with open(cfg_path) as f:
+            cfg = yaml.safe_load(f)
+        _KNOWN_AGENT_IDS = list(cfg.get("daemon", {}).get("agent_profiles", {}).keys())
+    except Exception:
+        _KNOWN_AGENT_IDS = []
+
+
+def _extract_mentions(text: str) -> list:
+    """从文本中自动提取 @agent-id 格式的 mention"""
+    import re
+    _init_agent_ids()
+    candidates = set(re.findall(r'@([a-z][a-z0-9]*(?:-[a-z][a-z0-9]*)+)', text))
+    return [a for a in candidates if a in _KNOWN_AGENT_IDS]

src/api/task_relation_routes.py

@@ -0,0 +1,240 @@
+"""Task 关联路由 — comments / outputs / decisions / observations / reviews / events / experiences / summary"""
+
+from __future__ import annotations
+
+import json
+import os
+from typing import Any, Dict, Optional
+
+from fastapi import APIRouter, HTTPException, Query
+
+from src.blackboard.models import Review
+from src.blackboard.db import OUTPUT_TYPES
+
+from src.api.shared import (
+    _bb,
+    _q,
+    _extract_mentions,
+)
+
+router = APIRouter(prefix="/api/projects/{project_id}", tags=["blackboard"])
+
+
+# --------------------------------------------------------------------------- #
+# Comments
+# --------------------------------------------------------------------------- #
+
+@router.get("/tasks/{task_id}/comments")
+async def get_comments(project_id: str, task_id: str,
+                       comment_type: Optional[str] = None):
+    bb = _bb(project_id)
+    comments = bb.get_comments(task_id, comment_type=comment_type)
+    return {"comments": [dict(c.__dict__) for c in comments]}
+
+
+@router.post("/tasks/{task_id}/comments")
+async def add_comment(project_id: str, task_id: str, body: Dict[str, Any]):
+    bb = _bb(project_id)
+    mentions_raw = body.get("mentions")
+    comment_body = body["body"]
+
+    # #04: 自动从 body 提取 @mention，与显式传的 mentions 取并集
+    auto_mentions = _extract_mentions(comment_body)
+    if isinstance(mentions_raw, str):
+        try:
+            explicit_mentions = json.loads(mentions_raw)
+        except Exception:
+            explicit_mentions = []
+    elif isinstance(mentions_raw, list):
+        explicit_mentions = mentions_raw
+    else:
+        explicit_mentions = []
+    merged_mentions = list(set(explicit_mentions + auto_mentions))
+
+    cid = bb.add_comment(task_id, body["author"], comment_body,
+                         comment_type=body.get("comment_type", "general"),
+                         mentions=merged_mentions)
+    if merged_mentions:
+        bb.record_mentions(cid, task_id, merged_mentions)
+    # #10: SSE 通知前端黑板有新 comment
+    try:
+        from src.api.sse_routes import get_broker
+        broker = get_broker()
+        broker.publish_sync("comment_added", {
+            "project_id": project_id,
+            "task_id": task_id,
+            "comment_id": cid,
+            "author": body["author"],
+        })
+    except Exception:
+        pass
+
+    return {"ok": True, "comment_id": cid, "mentions": merged_mentions}
+
+
+# --------------------------------------------------------------------------- #
+# Outputs
+# --------------------------------------------------------------------------- #
+
+@router.get("/tasks/{task_id}/outputs")
+async def get_outputs(project_id: str, task_id: str):
+    bb = _bb(project_id)
+    return {"outputs": [dict(o.__dict__) for o in bb.get_outputs(task_id)]}
+
+
+@router.post("/tasks/{task_id}/outputs")
+async def write_output(project_id: str, task_id: str, body: Dict[str, Any]):
+    bb = _bb(project_id)
+
+    # 字段校验 + Agent-friendly 错误
+    agent = body.get("agent")
+    if not agent:
+        raise HTTPException(422, {
+            "error": "validation_failed",
+            "detail": "Missing required field: agent",
+            "hint": "Provide your agent ID, e.g. 'zhangfei-dev'",
+        })
+
+    # type 字段：接受 type 或 content_type（别名兼容）
+    output_type = body.get("type") or body.get("content_type")
+    valid_types = sorted(OUTPUT_TYPES)
+    if not output_type:
+        raise HTTPException(422, {
+            "error": "validation_failed",
+            "detail": "Missing required field: type",
+            "valid_values": {"type": valid_types},
+            "hint": "Use 'type' field. Also accepts 'content_type' as alias.",
+        })
+    if output_type not in OUTPUT_TYPES:
+        raise HTTPException(422, {
+            "error": "validation_failed",
+            "detail": f"Invalid type: '{output_type}'",
+            "valid_values": {"type": valid_types},
+        })
+
+    title = body.get("title")
+    if not title:
+        raise HTTPException(422, {
+            "error": "validation_failed",
+            "detail": "Missing required field: title",
+            "hint": "Provide a brief title describing this output",
+        })
+
+    # 内容模式：content（直传）或 content_path（引用）
+    content = body.get("content")
+    content_path = body.get("content_path") or body.get("path")
+
+    if content and not content_path:
+        # 内容直传模式：自动写文件
+        artifacts_dir = os.path.join(
+            os.path.dirname(bb.db_path), "artifacts", task_id
+        )
+        os.makedirs(artifacts_dir, exist_ok=True)
+        # 安全文件名
+        safe_name = "".join(
+            c if c.isalnum() or c in "._-" else "_" for c in title)
+        if not safe_name:
+            safe_name = "output"
+        file_path = os.path.join(artifacts_dir, safe_name)
+        with open(file_path, "w", encoding="utf-8") as f:
+            f.write(content)
+        content_path = file_path
+
+    oid = bb.write_output(
+        task_id, agent, output_type, title,
+        content_path=content_path,
+        summary=body.get("summary"),
+        metadata=body.get("metadata"),
+    )
+    return {"ok": True, "output_id": oid}
+
+
+# --------------------------------------------------------------------------- #
+# Decisions
+# --------------------------------------------------------------------------- #
+
+@router.get("/tasks/{task_id}/decisions")
+async def get_decisions(project_id: str, task_id: str):
+    bb = _bb(project_id)
+    return {"decisions": [dict(d.__dict__) for d in bb.get_decisions(task_id)]}
+
+
+@router.post("/tasks/{task_id}/decisions")
+async def add_decision(project_id: str, task_id: str, body: Dict[str, Any]):
+    bb = _bb(project_id)
+    did = bb.add_decision(task_id, body["decider"], body["decision"],
+                          body["rationale"],
+                          alternatives=body.get("alternatives"))
+    return {"ok": True, "decision_id": did}
+
+
+# --------------------------------------------------------------------------- #
+# Observations
+# --------------------------------------------------------------------------- #
+
+@router.post("/tasks/{task_id}/observations")
+async def add_observation(project_id: str, task_id: str, body: Dict[str, Any]):
+    bb = _bb(project_id)
+    oid = bb.add_observation(task_id, body["observer"], body["body"],
+                             severity=body.get("severity", "info"))
+    return {"ok": True, "observation_id": oid}
+
+
+# --------------------------------------------------------------------------- #
+# Reviews
+# --------------------------------------------------------------------------- #
+
+@router.get("/tasks/{task_id}/reviews")
+async def get_reviews(project_id: str, task_id: str):
+    bb = _bb(project_id)
+    return {"reviews": [dict(r.__dict__) for r in bb.get_reviews(task_id)]}
+
+
+@router.post("/tasks/{task_id}/reviews")
+async def add_review(project_id: str, task_id: str, body: Dict[str, Any]):
+    bb = _bb(project_id)
+    review = Review(
+        id=body["id"], task_id=task_id, reviewer=body["reviewer"],
+        review_type=body["review_type"], verdict=body["verdict"],
+        summary=body["summary"], confidence=body.get("confidence"),
+        round=body.get("round", 1), max_rounds=body.get("max_rounds", 3),
+    )
+    bb.add_review(review)
+    return {"ok": True, "review_id": review.id}
+
+
+# --------------------------------------------------------------------------- #
+# Per-task Events & Experiences
+# --------------------------------------------------------------------------- #
+
+@router.get("/tasks/{task_id}/events")
+async def get_task_events(project_id: str, task_id: str,
+                          limit: int = Query(50, le=200)):
+    q = _q(project_id)
+    return {"events": q.task_events(task_id, limit)}
+
+
+@router.get("/tasks/{task_id}/experiences")
+async def get_task_experiences(project_id: str, task_id: str):
+    q = _q(project_id)
+    return {"experiences": q.task_experiences(task_id)}
+
+
+# --------------------------------------------------------------------------- #
+# Global Events
+# --------------------------------------------------------------------------- #
+
+@router.get("/events")
+async def get_events(project_id: str, limit: int = Query(50, le=200)):
+    q = _q(project_id)
+    return {"events": q.recent_events(limit)}
+
+
+# --------------------------------------------------------------------------- #
+# Summary
+# --------------------------------------------------------------------------- #
+
+@router.get("/summary")
+async def task_summary(project_id: str):
+    q = _q(project_id)
+    return {"summary": q.task_summary()}

src/api/task_routes.py

@@ -1,68 +1,45 @@
-"""API 路由 — 黑板 CRUD"""
+"""Task 核心路由 — CRUD、状态、归档"""
 
 from __future__ import annotations
 
 import json
 import os
+import sqlite3
+from datetime import datetime
 from pathlib import Path
 from typing import Any, Dict, Optional
 
-from fastapi import APIRouter, HTTPException, Query
-
-from src.blackboard.operations import Blackboard
-from src.blackboard.models import Task, Review
-from src.blackboard.queries import Queries
-from src.blackboard.db import VALID_STATUSES, OUTPUT_TYPES
-from src.blackboard.registry import ProjectRegistry
+from fastapi import APIRouter, HTTPException
 
+from src.blackboard.models import Task
+from src.blackboard.db import VALID_STATUSES, VALID_TRANSITIONS
 from src.utils import get_data_root
 
+from src.api.shared import (
+    _bb,
+    _q,
+    _task_to_dict,
+    _extract_mentions,
+)
+
 router = APIRouter(prefix="/api/projects/{project_id}", tags=["blackboard"])
 
-# 虚拟项目白名单（不需要在 registry 注册）
-_VIRTUAL_PROJECTS = frozenset({"_general", "_mail"})
 
-
-def _validate_project(project_id: str) -> str:
-    """校验 project_id，已知项目/虚拟项目放行，未知项目返回 400"""
-    if project_id in _VIRTUAL_PROJECTS:
-        return project_id
-    reg = ProjectRegistry(get_data_root())
-    if reg.get_project(project_id):
-        return project_id
-    raise HTTPException(400, {
-        "ok": False,
-        "error": "project_not_found",
-        "detail": f"Project '{project_id}' is not registered.",
-        "suggestions": [
-            f"Register first: POST /api/projects with id='{project_id}'",
-            "Or use '_general' for tasks without a specific project",
-        ],
-    })
-
-
-def _bb(project_id: str) -> Blackboard:
-    _validate_project(project_id)
-    return Blackboard(get_data_root() / project_id / "blackboard.db")
-
-
-def _q(project_id: str) -> Queries:
-    _validate_project(project_id)
-    return Queries(get_data_root() / project_id / "blackboard.db")
-
-
-# --- Tasks ---
+# --------------------------------------------------------------------------- #
+# Tasks
+# --------------------------------------------------------------------------- #
 
 @router.get("/tasks")
 async def list_tasks(project_id: str,
                      status: Optional[str] = None,
                      assignee: Optional[str] = None,
-                     parent_task: Optional[str] = None):
+                     parent_task: Optional[str] = None,
+                     q: Optional[str] = None):
     bb = _bb(project_id)
-    tasks = bb.list_tasks(
-        status=status,
-        assignee=assignee,
-        parent_task=parent_task)
+    tasks = bb.list_tasks(status=status, assignee=assignee, parent_task=parent_task)
+    if q:
+        q_lower = q.lower()
+        tasks = [t for t in tasks if q_lower in (t.title or "").lower()]
     return {"tasks": [_task_to_dict(t) for t in tasks]}
 
 
@@ -74,6 +51,11 @@ async def get_task(project_id: str, task_id: str,
     if not task:
         raise HTTPException(404, f"Task not found: {task_id}")
     result = _task_to_dict(task)
+
+    if not expand:
+        return result
+
+    # expand=all: 保持旧格式（list + 聚合字段），向后兼容前端 TaskModal
     if expand == "all":
         q = _q(project_id)
         detail = q.task_detail(task_id)
@@ -90,6 +72,37 @@ async def get_task(project_id: str, task_id: str,
                                for d in bb.get_decisions(task_id)]
         result["events"] = q.task_events(task_id)
         result["experiences"] = q.task_experiences(task_id)
+        return result
+
+    # 细粒度 expand: 新格式（comments/events 带 limit + total_count）
+    expand_list = expand.split(",")
+    q = _q(project_id)
+
+    if "comments" in expand_list:
+        all_comments = bb.get_comments(task_id)
+        result["comments"] = {
+            "items": [dict(c.__dict__) for c in all_comments[-20:]],
+            "total_count": len(all_comments),
+            "limit": 20,
+        }
+
+    if "events" in expand_list:
+        all_events = q.task_events(task_id, limit=99999)
+        result["events"] = {
+            "items": all_events[-30:],
+            "total_count": len(all_events),
+            "limit": 30,
+        }
+
+    if "outputs" in expand_list:
+        result["outputs"] = [dict(o.__dict__) for o in bb.get_outputs(task_id)]
+
+    if "reviews" in expand_list:
+        result["reviews"] = [dict(r.__dict__) for r in bb.get_reviews(task_id)]
+
+    if "decisions" in expand_list:
+        result["decisions"] = [dict(d.__dict__) for d in bb.get_decisions(task_id)]
+
     return result
 
 
@@ -100,11 +113,9 @@ async def create_task(project_id: str, body: Dict[str, Any]):
     task_id = body.get("id")
     if not task_id:
         import re
-        from datetime import datetime
         prefix = re.sub(r'[^a-z0-9]', '-', project_id.lower()).strip('-')[:20]
         date_str = datetime.now().strftime('%Y%m%d')
         # seq: 查当前项目最大 seq
-        import sqlite3
         db_path = get_data_root() / project_id / "blackboard.db"
         try:
             conn = sqlite3.connect(str(db_path), timeout=5)
@@ -237,7 +248,6 @@ async def update_status(project_id: str, task_id: str, body: Dict[str, Any]):
         })
 
     # 检查转换是否合法
-    from src.blackboard.db import VALID_TRANSITIONS
     current = old_task.status
     allowed = VALID_TRANSITIONS.get(current, set())
     if new_status not in allowed:
@@ -271,220 +281,6 @@ async def update_status(project_id: str, task_id: str, body: Dict[str, Any]):
     return {"ok": True, "old_status": current, "new_status": new_status}
 
 
-# --- @mention 自动提取（#04） ---
-_KNOWN_AGENT_IDS: list = []
-
-
-def _init_agent_ids():
-    """从配置文件加载 Agent ID 列表"""
-    global _KNOWN_AGENT_IDS
-    if _KNOWN_AGENT_IDS:
-        return
-    try:
-        import yaml
-        cfg_path = os.path.join(
-            os.path.dirname(__file__),
-            "..",
-            "..",
-            "config",
-            "default.yaml")
-        with open(cfg_path) as f:
-            cfg = yaml.safe_load(f)
-        _KNOWN_AGENT_IDS = list(
-            cfg.get(
-                "daemon",
-                {}).get(
-                "agent_profiles",
-                {}).keys())
-    except Exception:
-        _KNOWN_AGENT_IDS = []
-
-
-def _extract_mentions(text: str) -> list:
-    """从文本中自动提取 @agent-id 格式的 mention"""
-    import re
-    _init_agent_ids()
-    candidates = set(
-        re.findall(
-            r'@([a-z][a-z0-9]*(?:-[a-z][a-z0-9]*)+)',
-            text))
-    return [a for a in candidates if a in _KNOWN_AGENT_IDS]
-
-
-# --- Comments ---
-
-@router.get("/tasks/{task_id}/comments")
-async def get_comments(project_id: str, task_id: str,
-                       comment_type: Optional[str] = None):
-    bb = _bb(project_id)
-    comments = bb.get_comments(task_id, comment_type=comment_type)
-    return {"comments": [dict(c.__dict__) for c in comments]}
-
-
-@router.post("/tasks/{task_id}/comments")
-async def add_comment(project_id: str, task_id: str, body: Dict[str, Any]):
-    bb = _bb(project_id)
-    mentions_raw = body.get("mentions")
-    comment_body = body["body"]
-
-    # #04: 自动从 body 提取 @mention，与显式传的 mentions 取并集
-    auto_mentions = _extract_mentions(comment_body)
-    if isinstance(mentions_raw, str):
-        try:
-            explicit_mentions = json.loads(mentions_raw)
-        except Exception:
-            explicit_mentions = []
-    elif isinstance(mentions_raw, list):
-        explicit_mentions = mentions_raw
-    else:
-        explicit_mentions = []
-    merged_mentions = list(set(explicit_mentions + auto_mentions))
-
-    cid = bb.add_comment(task_id, body["author"], comment_body,
-                         comment_type=body.get("comment_type", "general"),
-                         mentions=merged_mentions)
-    if merged_mentions:
-        bb.record_mentions(cid, task_id, merged_mentions)
-    # #10: SSE 通知前端黑板有新 comment
-    try:
-        from src.api.sse_routes import get_broker
-        broker = get_broker()
-        broker.publish_sync("comment_added", {
-            "project_id": project_id,
-            "task_id": task_id,
-            "comment_id": cid,
-            "author": body["author"],
-        })
-    except Exception:
-        pass
-
-    return {"ok": True, "comment_id": cid, "mentions": merged_mentions}
-
-
-# --- Outputs ---
-
-@router.get("/tasks/{task_id}/outputs")
-async def get_outputs(project_id: str, task_id: str):
-    bb = _bb(project_id)
-    return {"outputs": [dict(o.__dict__) for o in bb.get_outputs(task_id)]}
-
-
-@router.post("/tasks/{task_id}/outputs")
-async def write_output(project_id: str, task_id: str, body: Dict[str, Any]):
-    bb = _bb(project_id)
-
-    # 字段校验 + Agent-friendly 错误
-    agent = body.get("agent")
-    if not agent:
-        raise HTTPException(422, {
-            "error": "validation_failed",
-            "detail": "Missing required field: agent",
-            "hint": "Provide your agent ID, e.g. 'zhangfei-dev'",
-        })
-
-    # type 字段：接受 type 或 content_type（别名兼容）
-    output_type = body.get("type") or body.get("content_type")
-    valid_types = sorted(OUTPUT_TYPES)
-    if not output_type:
-        raise HTTPException(422, {
-            "error": "validation_failed",
-            "detail": "Missing required field: type",
-            "valid_values": {"type": valid_types},
-            "hint": "Use 'type' field. Also accepts 'content_type' as alias.",
-        })
-    if output_type not in OUTPUT_TYPES:
-        raise HTTPException(422, {
-            "error": "validation_failed",
-            "detail": f"Invalid type: '{output_type}'",
-            "valid_values": {"type": valid_types},
-        })
-
-    title = body.get("title")
-    if not title:
-        raise HTTPException(422, {
-            "error": "validation_failed",
-            "detail": "Missing required field: title",
-            "hint": "Provide a brief title describing this output",
-        })
-
-    # 内容模式：content（直传）或 content_path（引用）
-    content = body.get("content")
-    content_path = body.get("content_path") or body.get("path")
-
-    if content and not content_path:
-        # 内容直传模式：自动写文件
-        import os
-        artifacts_dir = os.path.join(
-            os.path.dirname(bb.db_path), "artifacts", task_id
-        )
-        os.makedirs(artifacts_dir, exist_ok=True)
-        # 安全文件名
-        safe_name = "".join(
-            c if c.isalnum() or c in "._-" else "_" for c in title)
-        if not safe_name:
-            safe_name = "output"
-        file_path = os.path.join(artifacts_dir, safe_name)
-        with open(file_path, "w", encoding="utf-8") as f:
-            f.write(content)
-        content_path = file_path
-
-    oid = bb.write_output(
-        task_id, agent, output_type, title,
-        content_path=content_path,
-        summary=body.get("summary"),
-        metadata=body.get("metadata"),
-    )
-    return {"ok": True, "output_id": oid}
-
-
-# --- Decisions ---
-
-@router.get("/tasks/{task_id}/decisions")
-async def get_decisions(project_id: str, task_id: str):
-    bb = _bb(project_id)
-    return {"decisions": [dict(d.__dict__) for d in bb.get_decisions(task_id)]}
-
-
-@router.post("/tasks/{task_id}/decisions")
-async def add_decision(project_id: str, task_id: str, body: Dict[str, Any]):
-    bb = _bb(project_id)
-    did = bb.add_decision(task_id, body["decider"], body["decision"],
-                          body["rationale"],
-                          alternatives=body.get("alternatives"))
-    return {"ok": True, "decision_id": did}
-
-
-# --- Observations ---
-
-@router.post("/tasks/{task_id}/observations")
-async def add_observation(project_id: str, task_id: str, body: Dict[str, Any]):
-    bb = _bb(project_id)
-    oid = bb.add_observation(task_id, body["observer"], body["body"],
-                             severity=body.get("severity", "info"))
-    return {"ok": True, "observation_id": oid}
-
-
-# --- Reviews ---
-
-@router.get("/tasks/{task_id}/reviews")
-async def get_reviews(project_id: str, task_id: str):
-    bb = _bb(project_id)
-    return {"reviews": [dict(r.__dict__) for r in bb.get_reviews(task_id)]}
-
-
-@router.post("/tasks/{task_id}/reviews")
-async def add_review(project_id: str, task_id: str, body: Dict[str, Any]):
-    bb = _bb(project_id)
-    review = Review(
-        id=body["id"], task_id=task_id, reviewer=body["reviewer"],
-        review_type=body["review_type"], verdict=body["verdict"],
-        summary=body["summary"], confidence=body.get("confidence"),
-        round=body.get("round", 1), max_rounds=body.get("max_rounds", 3),
-    )
-    bb.add_review(review)
-    return {"ok": True, "review_id": review.id}
-
-
 @router.patch("/tasks/{task_id}")
 async def patch_task(project_id: str, task_id: str, body: Dict[str, Any]):
     """更新任务元数据（归档、标题等）"""
@@ -497,7 +293,6 @@ async def patch_task(project_id: str, task_id: str, body: Dict[str, Any]):
     if not updates:
         return {"ok": True}
     # 直接用 SQL 更新
-    import sqlite3
     conn = sqlite3.connect(str(bb.db_path), timeout=5)
     try:
         set_clause = ", ".join(f"{k}=?" for k in updates)
@@ -509,38 +304,9 @@ async def patch_task(project_id: str, task_id: str, body: Dict[str, Any]):
     return {"ok": True}
 
 
-# --- Per-task Events & Experiences ---
-
-@router.get("/tasks/{task_id}/events")
-async def get_task_events(project_id: str, task_id: str,
-                          limit: int = Query(50, le=200)):
-    q = _q(project_id)
-    return {"events": q.task_events(task_id, limit)}
-
-
-@router.get("/tasks/{task_id}/experiences")
-async def get_task_experiences(project_id: str, task_id: str):
-    q = _q(project_id)
-    return {"experiences": q.task_experiences(task_id)}
-
-
-# --- Global Events ---
-
-@router.get("/events")
-async def get_events(project_id: str, limit: int = Query(50, le=200)):
-    q = _q(project_id)
-    return {"events": q.recent_events(limit)}
-
-
-# --- Summary ---
-
-@router.get("/summary")
-async def task_summary(project_id: str):
-    q = _q(project_id)
-    return {"summary": q.task_summary()}
-
-
-# --- Archive (v2.8) ---
+# --------------------------------------------------------------------------- #
+# Archive (v2.8)
+# --------------------------------------------------------------------------- #
 
 @router.post("/tasks/{task_id}/archive")
 async def archive_task(project_id: str, task_id: str,
@@ -563,10 +329,3 @@ async def archive_done_tasks(project_id: str):
     bb = _bb(project_id)
     count = bb.archive_done_tasks()
     return {"ok": True, "archived_count": count}
-
-
-# --- Helper ---
-
-def _task_to_dict(t: Task) -> Dict[str, Any]:
-    d = {k: v for k, v in t.__dict__.items() if v is not None}
-    return d

src/blackboard/db.py

@@ -117,6 +117,7 @@ def _migrate_v28(conn: sqlite3.Connection) -> None:
 
     _safe_add_column(conn, "tasks", "round_count", "INTEGER DEFAULT 0")
     _safe_add_column(conn, "tasks", "resumed_from", "TEXT")
+    _safe_add_column(conn, "tasks", "dispatch_count", "INTEGER DEFAULT 0")
 
     # 3. checkpoints 表（M3）
     conn.execute("""CREATE TABLE IF NOT EXISTS checkpoints (

src/blackboard/models.py

@@ -41,6 +41,8 @@ class Task:
     resumed_from: Optional[str] = None       # 暂停前状态，恢复时回到原状态
     # v2.9 四相循环
     round_count: int = 0                     # 庞统 review 轮次计数
+    # §15 Runaway Guard
+    dispatch_count: int = 0                  # 被 ticker dispatch 的总次数
     # v2.8 归档
     archived: bool = False
     archived_at: Optional[str] = None

src/blackboard/operations.py

@@ -208,7 +208,7 @@ class Blackboard:
                 params.append(parent_task)
             if conditions:
                 query += " WHERE " + " AND ".join(conditions)
-            query += " ORDER BY priority ASC, created_at ASC"
+            query += " ORDER BY priority ASC, created_at DESC"
             rows = conn.execute(query, params).fetchall()
             return [Task.from_row(r) for r in rows]
         finally:

src/daemon/mail_handler.py

@@ -9,7 +9,7 @@ import logging
 from pathlib import Path
 
 from src.daemon.base_task_handler import BaseTaskHandler, VerifyResult
-from src.daemon.prompt_composer import PromptComposer, PromptContext, GiteaConventionSection, WikiGuideSection
+from src.daemon.prompt_composer import PromptComposer, PromptContext, GiteaConventionSection, WikiGuideSection, DeliveryChecklistSection
 from src.blackboard.db import get_connection
 
 logger = logging.getLogger("moziplus-v2.handler.mail")
@@ -36,7 +36,7 @@ class MailHandler(BaseTaskHandler):
         return composer.compose(context)
 
     def get_sections(self) -> list:
-        return [MailContextSection(), MailApiSection(), MailConstraintsSection(), GiteaConventionSection(), WikiGuideSection()]
+        return [MailContextSection(), MailApiSection(), MailConstraintsSection(), GiteaConventionSection(), WikiGuideSection(), DeliveryChecklistSection()]
 
     def verify_completion(self, task_id: str, db_path: Path) -> VerifyResult:
         """Mail 完成验证：区分 inform/request。

src/daemon/prompt_composer.py

@@ -174,3 +174,27 @@ class WikiGuideSection:
 
     def should_include(self, context: "PromptContext") -> bool:
         return True
+
+
+# ---------------------------------------------------------------------------
+# DeliveryChecklistSection — 交付检查清单
+# ---------------------------------------------------------------------------
+class DeliveryChecklistSection:
+    """交付检查清单 — 提醒 Agent 完成前同步关联成果物。"""
+
+    name: str = "delivery_checklist"
+    priority: int = 55  # CONSTRAINTS(50) 和 EXTENSION(60) 之间
+
+    CHECKLIST_TEXT = (
+        "## 交付检查\n"
+        "完成代码改动前确认：\n"
+        "- 改了实现 → docs/design/ 对应设计文档是否需要更新\n"
+        "- 改了实现 → tests/ 是否有对应测试脚本需要更新\n"
+        "- 所有成果物变更通过 PR 流程：PR review 把关设计合理性，CI 把关代码质量，CD 把关部署正确性\n"
+    )
+
+    def render(self, context: "PromptContext") -> str:
+        return self.CHECKLIST_TEXT
+
+    def should_include(self, context: "PromptContext") -> bool:
+        return True

src/daemon/spawner.py

@@ -625,19 +625,24 @@ curl -X POST http://{self.api_host}:{self.api_port}/api/projects/{project_id}/ta
                 stdout=asyncio.subprocess.PIPE,
                 stderr=asyncio.subprocess.PIPE,
             )
-            self._register_session(session_id, agent_id, task_id, proc.pid,
+            # use_main_session=True 时 session_id 为 None,但 _register_session 和
+            # _monitor_process 需要一个非 None 的 key;同时 ticker 等调用方用
+            # `result is not None` 判断 spawn 是否成功,返回 None 会被误判为失败。
+            # 统一用 "main" 作为占位标识。
+            effective_sid = session_id or "main"
+            self._register_session(effective_sid, agent_id, task_id, proc.pid,
                                    broadcast_task_ids=broadcast_task_ids)
             logger.info("Spawned agent %s (session=%s, pid=%d)",
-                        agent_id, session_id, proc.pid)
+                        agent_id, effective_sid, proc.pid)
 
             # Schedule monitor(传 wrapped_on_complete)
             asyncio.create_task(
-                self._monitor_process(session_id, proc, agent_id, task_id,
+                self._monitor_process(effective_sid, proc, agent_id, task_id,
                                       on_complete=_wrapped_on_complete,
                                       db_path=task_db_path or self.db_path)
             )
 
-            return session_id
+            return effective_sid
 
         except Exception as e:
             # spawn 失败也要 release counter
@@ -1949,6 +1954,19 @@ curl -X POST http://{api_host}:{api_port}/api/projects/{project_id}/tasks/{task_
                 try:
                     from src.daemon.mail_notify import _is_mail_project, notify_mail_failed
                     if _is_mail_project(db_path):
+                        # 防御性检查：如果 task 已经 done，不触发失败通知（竞态保护）
+                        # 场景：spawner 标 failed 和 handler 标 done 同时发生
+                        try:
+                            conn2 = get_connection(db_path)
+                            current_status = conn2.execute(
+                                "SELECT status FROM tasks WHERE id=?", (task_id,)
+                            ).fetchone()
+                            conn2.close()
+                            if current_status and current_status["status"] == "done":
+                                logger.info("Task %s already done, skipping mail failure notification", task_id)
+                                return
+                        except Exception:
+                            pass
                         # Mail 失败：通知发件人，不 @pangtong
                         notify_mail_failed(db_path, task_id, reason, detail)
                     else:

src/daemon/task_handler.py

@@ -10,7 +10,7 @@ from pathlib import Path
 from typing import Dict, Optional
 
 from src.daemon.base_task_handler import BaseTaskHandler, VerifyResult
-from src.daemon.prompt_composer import PromptComposer, PromptContext, GiteaConventionSection, WikiGuideSection
+from src.daemon.prompt_composer import PromptComposer, PromptContext, GiteaConventionSection, WikiGuideSection, DeliveryChecklistSection
 from src.blackboard.db import get_connection
 
 logger = logging.getLogger("moziplus-v2.handler")
@@ -315,6 +315,7 @@ class TaskHandler(BaseTaskHandler):
             TaskConstraintsSection(),
             GiteaConventionSection(),
             WikiGuideSection(),
+            DeliveryChecklistSection(),
         ]
 
     def build_prompt(self, context: PromptContext) -> str:

src/daemon/ticker.py

@@ -1084,6 +1084,19 @@ Parent Task ID: {parent_task.id}
             broadcast_ids = await self._broadcast_claim(broadcast_tasks, db_path, project_id)
             dispatched.extend(broadcast_ids)
 
+        # §15 Runaway Guard: 统一递增 dispatch_count
+        if dispatched:
+            conn = get_connection(db_path)
+            try:
+                for tid in dispatched:
+                    conn.execute(
+                        "UPDATE tasks SET dispatch_count = COALESCE(dispatch_count, 0) + 1 WHERE id=?",
+                        (tid,),
+                    )
+                conn.commit()
+            finally:
+                conn.close()
+
         return dispatched
 
     async def _broadcast_claim(self, tasks: list, db_path: Path,
@@ -1376,6 +1389,19 @@ Parent Task ID: {parent_task.id}
             except Exception:
                 logger.exception("Review dispatch failed for %s", task.id)
 
+        # §15 Runaway Guard: 统一递增 dispatch_count (review)
+        if dispatched:
+            conn = get_connection(db_path)
+            try:
+                for tid in dispatched:
+                    conn.execute(
+                        "UPDATE tasks SET dispatch_count = COALESCE(dispatch_count, 0) + 1 WHERE id=?",
+                        (tid,),
+                    )
+                conn.commit()
+            finally:
+                conn.close()
+
         return dispatched
 
     # ------------------------------------------------------------------
@@ -1388,6 +1414,31 @@ Parent Task ID: {parent_task.id}
         reclaimed: List[str] = []
         now = datetime.utcnow()  # UTC，与 SQLite datetime('now') 一致
 
+        # §15 Runaway Guard: per-task dispatch_count 上限检查
+        # 覆盖所有状态，防止无限循环 dispatch
+        MAX_DISPATCH_COUNT = 10
+        for status_to_check in ("pending", "working", "claimed"):
+            tasks_to_check = queries.tasks_by_status(status_to_check)
+            for task in tasks_to_check:
+                dispatch_count = getattr(task, 'dispatch_count', 0) or 0
+                if dispatch_count >= MAX_DISPATCH_COUNT:
+                    conn = get_connection(db_path)
+                    try:
+                        ok = self._transition_status(
+                            conn, task.id, "failed",
+                            agent="daemon",
+                            detail={"reason": "runaway_guard",
+                                    "dispatch_count": dispatch_count,
+                                    "message": f"dispatch {dispatch_count} 次仍未完成，自动标 failed"},
+                        )
+                        if ok:
+                            reclaimed.append(task.id)
+                            logger.error(
+                                "Task %s: runaway guard triggered (dispatch_count=%d, status=%s), marking failed",
+                                task.id, dispatch_count, status_to_check)
+                    finally:
+                        conn.close()
+
         # claimed 超时 → 重置为 pending（如果 retry_count >= 3 则升级庞统）
         claimed = queries.tasks_by_status("claimed")
         for task in claimed:

src/daemon/toolchain_handler.py

@@ -13,7 +13,7 @@ from pathlib import Path
 from typing import Dict, List
 
 from src.daemon.base_task_handler import BaseTaskHandler, VerifyResult
-from src.daemon.prompt_composer import PromptComposer, PromptContext, GiteaConventionSection, WikiGuideSection
+from src.daemon.prompt_composer import PromptComposer, PromptContext, GiteaConventionSection, WikiGuideSection, DeliveryChecklistSection
 from src.daemon.toolchain_templates import render_template, _TEMPLATE_MAP
 from src.blackboard.db import get_connection
 
@@ -51,17 +51,41 @@ class ToolchainContextSection:
     name: str = "toolchain_context"
     priority: int = 10
 
+    EVENT_LABELS_ZH: Dict[str, str] = {
+        "review_request": "Review 请求",
+        "review_result": "Review 结果",
+        "review_merged": "PR 合并",
+        "review_comment": "Review 评论",
+        "review_updated": "Review 更新",
+        "ci_failure": "CI 失败",
+        "deploy_failure": "部署失败",
+        "issue_assigned": "Issue 指派",
+        "mention": "@提及",
+    }
+
     def render(self, context: PromptContext) -> str:
         event_type = context.event_type
         event_data: Dict = context.event_data or {}
 
+        # 事件类型中文标签
+        event_label = self.EVENT_LABELS_ZH.get(event_type, event_type or '未知')
+
+        # from / to 信息
+        to_agent = context.agent_id or ''
+        from_agent = 'system'
+
         # Part 1: 事件信息(现有模板引擎)
         if event_type in _TEMPLATE_MAP:
             variables = {k: str(v) for k, v in event_data.items()}
             event_text = render_template(event_type, variables)
+            # 补充事件类型中文标签 + from/to
+            header = f"- **事件类型**: {event_label}\n- **来源**: {from_agent}\n- **指派**: {to_agent}\n"
+            event_text = header + "\n" + event_text
         else:
             lines = ["## 工具链事件", ""]
-            lines.append(f"- **事件类型**: {event_type or '未知'}")
+            lines.append(f"- **事件类型**: {event_label}")
+            lines.append(f"- **来源**: {from_agent}")
+            lines.append(f"- **指派**: {to_agent}")
             if event_data:
                 lines.append("- **事件详情**:")
                 for key, value in event_data.items():
@@ -228,6 +252,7 @@ class ToolchainHandler(BaseTaskHandler):
             ToolchainConstraintsSection(),
             GiteaConventionSection(),
             WikiGuideSection(),
+            DeliveryChecklistSection(),
         ]
 
     def build_prompt(self, context: PromptContext) -> str:

src/frontend/src/components/SettingsPanel.tsx

@@ -5,6 +5,7 @@
 
 import { useState, useCallback } from 'react';
 import { api, AgentsStatusData } from '../api';
+import ToolchainPanel from './ToolchainPanel';
 
 interface ServiceCheckResult {
   name: string;
@@ -15,7 +16,7 @@ interface ServiceCheckResult {
 }
 
 export default function SettingsPanel() {
-  const [tab, setTab] = useState<'connections' | 'security' | 'version' | 'logs'>('connections');
+  const [tab, setTab] = useState<'connections' | 'security' | 'version' | 'logs' | 'toolchain'>('connections');
 
   // 接线状态巡检
   const [checking, setChecking] = useState(false);
@@ -95,6 +96,7 @@ export default function SettingsPanel() {
           { key: 'security' as const, label: '🛡️ 安全防务' },
           { key: 'version' as const, label: '📦 版本更新' },
           { key: 'logs' as const, label: '📋 城防日志' },
+          { key: 'toolchain' as const, label: '⛓️ 工具链' },
         ].map((t) => (
           <button key={t.key} className={`btn ${tab === t.key ? 'btn-primary' : ''}`} onClick={() => setTab(t.key)}>
             {t.label}
@@ -288,6 +290,9 @@ export default function SettingsPanel() {
           </div>
         </div>
       )}
+
+      {/* ========== 工具链 ========== */}
+      {tab === 'toolchain' && <ToolchainPanel />}
     </div>
   );
 }

src/frontend/src/components/ToolchainPanel.tsx

@@ -0,0 +1,250 @@
+/**
+ * ToolchainPanel — 工具链事件（系统级）
+ * 展示 _toolchain 项目的 tasks：CI/PR/部署/Review 通知
+ */
+import { useEffect, useState } from 'react';
+
+const AGENT_NAMES: Record<string, string> = {
+  'pangtong-fujunshi': '庞统',
+  'simayi-challenger': '司马懿',
+  'zhangfei-dev': '张飞',
+  'guanyu-dev': '关羽',
+  'zhaoyun-data': '赵云',
+  'jiangwei-infra': '姜维',
+  'system': '系统',
+};
+
+const EVENT_LABELS: Record<string, string> = {
+  'review_request': 'Review 请求',
+  'review_result': 'Review 结果',
+  'review_merged': 'PR 合并',
+  'review_comment': 'Review 评论',
+  'review_updated': 'Review 更新',
+  'ci_failure': 'CI 失败',
+  'deploy_failure': '部署失败',
+  'issue_assigned': 'Issue 指派',
+  'mention': '@提及',
+};
+
+const STATUS_COLORS: Record<string, string> = {
+  pending: '#f59e0b22', claimed: '#6a9eff22', working: '#6a9eff22',
+  review: '#818cf822', done: '#2ecc8a22', failed: '#ef444422',
+  cancelled: '#6b728022', blocked: '#ef444422',
+};
+
+const STATUS_LABELS: Record<string, string> = {
+  pending: '待处理', claimed: '已认领', working: '处理中',
+  review: '审查中', done: '已完成', failed: '失败',
+  cancelled: '已取消', blocked: '已拦截',
+};
+
+function fmtTime(iso: string): string {
+  try {
+    const d = new Date(iso.includes('T') ? iso : iso.replace(' ', 'T') + 'Z');
+    const now = Date.now();
+    const diff = now - d.getTime();
+    const mins = Math.floor(diff / 60000);
+    if (mins < 1) return '刚刚';
+    if (mins < 60) return `${mins}分钟前`;
+    const hrs = Math.floor(mins / 60);
+    if (hrs < 24) return `${hrs}小时前`;
+    return `${d.getMonth() + 1}/${d.getDate()} ${d.getHours()}:${String(d.getMinutes()).padStart(2, '0')}`;
+  } catch { return iso; }
+}
+
+export default function ToolchainPanel() {
+  const [tasks, setTasks] = useState<any[]>([]);
+  const [selectedId, setSelectedId] = useState<string | null>(null);
+  const [detail, setDetail] = useState<any>(null);
+  const [searchQuery, setSearchQuery] = useState('');
+  const [loading, setLoading] = useState(false);
+  const [filterMode, setFilterMode] = useState<'all' | 'pending'>('all');
+
+  const loadTasks = async (q?: string) => {
+    setLoading(true);
+    try {
+      const url = q
+        ? `/api/projects/_toolchain/tasks?q=${encodeURIComponent(q)}`
+        : `/api/projects/_toolchain/tasks`;
+      const res = await fetch(url);
+      if (res.ok) {
+        const data = await res.json();
+        setTasks(data.tasks || []);
+      }
+    } catch { /* */ }
+    setLoading(false);
+  };
+
+  const displayed = filterMode === 'pending'
+    ? tasks.filter(t => !['done', 'failed', 'cancelled'].includes(t.status))
+    : tasks;
+
+  useEffect(() => { loadTasks(); }, []);
+
+  // 搜索防抖 300ms
+  useEffect(() => {
+    const timer = setTimeout(() => {
+      if (searchQuery !== undefined) loadTasks(searchQuery || undefined);
+    }, 300);
+    return () => clearTimeout(timer);
+  }, [searchQuery]);
+
+  useEffect(() => {
+    if (!selectedId) { setDetail(null); return; }
+    (async () => {
+      try {
+        const res = await fetch(
+          `/api/projects/_toolchain/tasks/${selectedId}?expand=comments`
+        );
+        if (res.ok) setDetail(await res.json());
+      } catch { /* */ }
+    })();
+  }, [selectedId]);
+
+  // 渲染评论列表（兼容 expand 和裸 list 格式）
+  const renderComments = (comments: any[]) => {
+    if (!comments || comments.length === 0) return null;
+    return (
+      <div style={{ marginTop: 16 }}>
+        <div style={{ fontSize: 11, color: 'var(--muted)', marginBottom: 8, fontWeight: 600 }}>
+          📋 处理记录 ({comments.length})
+        </div>
+        {comments.map((c: any, i: number) => (
+          <div key={c.id || i} style={{
+            padding: '8px 12px', background: 'var(--panel2)', borderRadius: 6, marginBottom: 6,
+          }}>
+            <div style={{ display: 'flex', justifyContent: 'space-between', marginBottom: 4 }}>
+              <span style={{ fontSize: 10, color: 'var(--acc)', fontWeight: 600 }}>
+                {c.author || 'system'}
+              </span>
+              <span style={{ fontSize: 9, color: 'var(--muted)' }}>{fmtTime(c.created_at)}</span>
+            </div>
+            <div style={{ fontSize: 12, color: '#a0aec0', lineHeight: 1.5 }}>{c.body}</div>
+          </div>
+        ))}
+      </div>
+    );
+  };
+
+  return (
+    <div style={{ display: 'flex', gap: 0, height: '100%', minHeight: 500 }}>
+      {/* 左侧列表 */}
+      <div style={{ width: 380, borderRight: '1px solid var(--line)', display: 'flex', flexDirection: 'column', flexShrink: 0 }}>
+        {/* 搜索栏 + 刷新 */}
+        <div style={{ padding: '10px 14px', borderBottom: '1px solid var(--line)', display: 'flex', gap: 6, alignItems: 'center' }}>
+          <input
+            type="text"
+            placeholder="搜索工具链事件..."
+            value={searchQuery}
+            onChange={e => setSearchQuery(e.target.value)}
+            style={{
+              flex: 1, padding: '4px 8px', borderRadius: 4, fontSize: 11,
+              border: '1px solid #2a3550', background: '#161b2e', color: '#dde4f8',
+              outline: 'none',
+            }}
+          />
+          <button onClick={() => loadTasks(searchQuery || undefined)} style={{
+            padding: '3px 8px', borderRadius: 4, fontSize: 10,
+            border: '1px solid #2a3550', background: '#161b2e', color: '#8899aa', cursor: 'pointer',
+          }}>🔄</button>
+          <button onClick={() => setFilterMode('all')} style={{
+            padding: '3px 8px', borderRadius: 4, fontSize: 10,
+            border: `1px solid ${filterMode === 'all' ? 'var(--acc)' : '#2a3550'}`,
+            background: filterMode === 'all' ? 'var(--acc)22' : '#161b2e',
+            color: filterMode === 'all' ? 'var(--acc)' : '#8899aa', cursor: 'pointer',
+          }}>全部</button>
+          <button onClick={() => setFilterMode('pending')} style={{
+            padding: '3px 8px', borderRadius: 4, fontSize: 10,
+            border: `1px solid ${filterMode === 'pending' ? 'var(--acc)' : '#2a3550'}`,
+            background: filterMode === 'pending' ? 'var(--acc)22' : '#161b2e',
+            color: filterMode === 'pending' ? 'var(--acc)' : '#8899aa', cursor: 'pointer',
+          }}>未处理</button>
+          <span style={{ fontSize: 10, color: 'var(--muted)' }}>{filterMode === 'pending' ? displayed.length : tasks.length} 条</span>
+        </div>
+
+        {/* 事件列表 */}
+        <div style={{ flex: 1, overflowY: 'auto' }}>
+          {tasks.length === 0 && (
+            <div style={{ textAlign: 'center', padding: 40, color: 'var(--muted)', fontSize: 12 }}>
+              {loading ? '加载中...' : '暂无工具链事件'}
+            </div>
+          )}
+          {displayed.map((t: any) => (
+            <div key={t.id} onClick={() => setSelectedId(t.id)} style={{
+              padding: '10px 14px', borderBottom: '1px solid var(--line)',
+              cursor: 'pointer', transition: 'background .15s',
+              background: selectedId === t.id ? 'var(--panel2)' : 'transparent',
+            }}
+              onMouseEnter={e => e.currentTarget.style.background = 'var(--panel2)'}
+              onMouseLeave={e => e.currentTarget.style.background = selectedId === t.id ? 'var(--panel2)' : 'transparent'}
+            >
+              <div style={{ display: 'flex', justifyContent: 'space-between', alignItems: 'center', marginBottom: 4 }}>
+                <span style={{
+                  fontSize: 9, padding: '1px 5px', borderRadius: 3,
+                  background: STATUS_COLORS[t.status] || '#2a3550',
+                  color: '#dde4f8',
+                }}>{STATUS_LABELS[t.status] || t.status}</span>
+                <span style={{ fontSize: 9, color: 'var(--muted)' }}>{fmtTime(t.created_at)}</span>
+              </div>
+              <div style={{
+                fontSize: 12, fontWeight: 500, color: '#dde4f8',
+                overflow: 'hidden', textOverflow: 'ellipsis', whiteSpace: 'nowrap',
+              }}>{t.title}</div>
+              <div style={{ fontSize: 10, color: 'var(--muted)', marginTop: 2 }}>
+                {AGENT_NAMES['system'] || '系统'} → {AGENT_NAMES[t.assignee] || t.assignee || '?'}
+              </div>
+            </div>
+          ))}
+        </div>
+      </div>
+
+      {/* 右侧详情 */}
+      <div style={{ flex: 1, padding: '16px 20px', overflowY: 'auto' }}>
+        {!detail ? (
+          <div style={{ textAlign: 'center', padding: 60, color: 'var(--muted)' }}>
+            <div style={{ fontSize: 36, marginBottom: 12 }}>⛓️</div>
+            <div style={{ fontSize: 13 }}>选择一条事件查看详情</div>
+          </div>
+        ) : (
+          <>
+            {/* 头部 */}
+            <div style={{ marginBottom: 16 }}>
+              <div style={{ display: 'flex', alignItems: 'center', gap: 8, marginBottom: 6 }}>
+                <span style={{ fontSize: 10, padding: '2px 6px', borderRadius: 4, background: STATUS_COLORS[detail.status] || '#2a3550', color: '#dde4f8' }}>
+                  {STATUS_LABELS[detail.status] || detail.status}
+                </span>
+                <span style={{ fontSize: 10, color: 'var(--muted)' }}>{detail.id}</span>
+              </div>
+              <div style={{ fontSize: 18, fontWeight: 700, lineHeight: 1.3 }}>{detail.title}</div>
+              <div style={{ fontSize: 11, color: 'var(--muted)', marginTop: 4 }}>
+                {AGENT_NAMES['system'] || '系统'} → {AGENT_NAMES[detail.assignee] || detail.assignee || '?'}
+              </div>
+              <div style={{ fontSize: 12, color: 'var(--muted)', marginTop: 6 }}>
+                {fmtTime(detail.created_at)}
+              </div>
+            </div>
+
+            {/* 正文 */}
+            {detail.description && (
+              <div style={{
+                padding: '14px 16px', background: 'var(--panel2)', borderRadius: 10,
+                fontSize: 13, color: '#a0aec0', lineHeight: 1.7, whiteSpace: 'pre-wrap',
+              }}>
+                {detail.description}
+              </div>
+            )}
+
+            {/* action_report 评论 — expand 格式 {items, total_count} */}
+            {detail.comments && detail.comments.items && detail.comments.items.length > 0 &&
+              renderComments(detail.comments.items)
+            }
+            {/* 兼容裸 list 格式 */}
+            {detail.comments && Array.isArray(detail.comments) && detail.comments.length > 0 &&
+              renderComments(detail.comments)
+            }
+          </>
+        )}
+      </div>
+    </div>
+  );
+}

src/main.py

@@ -7,7 +7,8 @@ from src.api.sse_routes import router as sse_router
 from src.api.project_routes import router as project_router
 from src.api.daemon_routes import router as daemon_router
 from src.api.checkpoint_routes import router as checkpoint_router
-from src.api.blackboard_routes import router as blackboard_router
+from src.api.task_routes import router as task_router
+from src.api.task_relation_routes import router as task_relation_router
 
 import logging
 from contextlib import asynccontextmanager
@@ -273,7 +274,8 @@ app.add_middleware(
 # ---------------------------------------------------------------------------
 
 
-app.include_router(blackboard_router)
+app.include_router(task_router)
+app.include_router(task_relation_router)
 app.include_router(checkpoint_router)
 app.include_router(daemon_router)
 app.include_router(project_router)

tests/integration/test_ticker_integration.py

@@ -543,3 +543,94 @@ class TestCheckTimeoutsUnified:
         reclaimed = ticker._check_timeouts(db_path)
 
         assert "t-review-dead" not in reclaimed
+
+
+# ---------------------------------------------------------------------------
+# E13: §15 Runaway Guard — per-task dispatch_count 上限
+# ---------------------------------------------------------------------------
+
+class TestRunawayGuard:
+    """E13: dispatch_count >= 10 → 自动标 failed（覆盖所有非终态）"""
+
+    @pytest.fixture
+    def guard_project(self, tmp_path):
+        """创建项目 + 任务"""
+        data_root = tmp_path / "projects"
+        registry = ProjectRegistry(data_root)
+        registry.create_project("guard-proj", "Guard Test", agents=["agent-a"])
+        db_path = data_root / "guard-proj" / "blackboard.db"
+        bb = Blackboard(db_path)
+        return registry, db_path, bb
+
+    def test_runaway_guard_triggers_working(self, guard_project):
+        """E13.1: working 状态 dispatch_count >= 10 → 标 failed"""
+        registry, db_path, bb = guard_project
+
+        bb.create_task(Task(
+            id="t-runaway", title="Runaway Task", status="working",
+            assigned_by="daemon", current_agent="agent-a",
+        ))
+
+        conn = bb._conn()
+        try:
+            conn.execute(
+                "UPDATE tasks SET dispatch_count = 10 WHERE id = ?", ("t-runaway",))
+            conn.commit()
+        finally:
+            conn.close()
+
+        ticker = Ticker(registry, tick_interval=30)
+        reclaimed = ticker._check_timeouts(db_path)
+
+        assert "t-runaway" in reclaimed
+        task = Queries(db_path).task_by_id("t-runaway")
+        assert task.status == "failed"
+
+    def test_runaway_guard_triggers_pending(self, guard_project):
+        """E13.2: pending 状态 dispatch_count >= 10 → 标 failed"""
+        registry, db_path, bb = guard_project
+
+        bb.create_task(Task(
+            id="t-pending-runaway", title="Pending Runaway", status="pending",
+            assigned_by="daemon",
+        ))
+
+        conn = bb._conn()
+        try:
+            conn.execute(
+                "UPDATE tasks SET dispatch_count = 10 WHERE id = ?",
+                ("t-pending-runaway",))
+            conn.commit()
+        finally:
+            conn.close()
+
+        ticker = Ticker(registry, tick_interval=30)
+        reclaimed = ticker._check_timeouts(db_path)
+
+        assert "t-pending-runaway" in reclaimed
+        task = Queries(db_path).task_by_id("t-pending-runaway")
+        assert task.status == "failed"
+
+    def test_runaway_guard_not_triggered(self, guard_project):
+        """E13.3: dispatch_count < 10 → 正常流程不受影响"""
+        registry, db_path, bb = guard_project
+
+        bb.create_task(Task(
+            id="t-normal", title="Normal Task", status="working",
+            assigned_by="daemon", current_agent="agent-a",
+        ))
+
+        conn = bb._conn()
+        try:
+            conn.execute(
+                "UPDATE tasks SET dispatch_count = 5 WHERE id = ?", ("t-normal",))
+            conn.commit()
+        finally:
+            conn.close()
+
+        ticker = Ticker(registry, tick_interval=30)
+        reclaimed = ticker._check_timeouts(db_path)
+
+        assert "t-normal" not in reclaimed
+        task = Queries(db_path).task_by_id("t-normal")
+        assert task.status == "working"

tests/scripts/verify_api_compat.sh

@@ -0,0 +1,70 @@
+#!/bin/bash
+# verify_api_compat.sh — 验证 API 拆分前后路由清单完全一致
+#
+# 用法：
+#   bash tests/scripts/verify_api_compat.sh
+#
+# 前置：
+#   - 当前在开发目录（sanguo_moziplus_v2/）
+#   - git working tree 有拆分改动
+#   - main 分支是拆分前的基准
+#
+# 输出：
+#   ✅ 路由完全一致（exit 0）
+#   ❌ 路由有差异（exit 1，打印 diff）
+
+set -euo pipefail
+
+BEFORE_FILE="/tmp/routes_before_$$.txt"
+AFTER_FILE="/tmp/routes_after_$$.txt"
+
+echo "=== 提取拆分前路由清单（main 分支）==="
+
+# stash 当前改动（如果有 untracked 新文件，--include-untracked）
+STASHED=0
+if ! git diff --quiet || ! git diff --cached --quiet; then
+    git stash --include-untracked
+    STASHED=1
+fi
+
+python3 -c "
+from src.main import app
+for route in app.routes:
+    if hasattr(route, 'methods') and hasattr(route, 'path'):
+        for m in sorted(route.methods):
+            if m in ('GET','POST','PATCH','DELETE','PUT'):
+                print(f'{m} {route.path}')
+" | sort > "$BEFORE_FILE"
+
+echo "Routes before: $(wc -l < "$BEFORE_FILE")"
+
+# 恢复改动
+if [ "$STASHED" = "1" ]; then
+    git stash pop
+fi
+
+echo "=== 提取拆分后路由清单（当前 working tree）==="
+
+python3 -c "
+from src.main import app
+for route in app.routes:
+    if hasattr(route, 'methods') and hasattr(route, 'path'):
+        for m in sorted(route.methods):
+            if m in ('GET','POST','PATCH','DELETE','PUT'):
+                print(f'{m} {route.path}')
+" | sort > "$AFTER_FILE"
+
+echo "Routes after: $(wc -l < "$AFTER_FILE")"
+
+echo ""
+echo "=== Diff ==="
+
+if diff "$BEFORE_FILE" "$AFTER_FILE"; then
+    echo "✅ 路由完全一致"
+    rm -f "$BEFORE_FILE" "$AFTER_FILE"
+    exit 0
+else
+    echo "❌ 路由有差异"
+    rm -f "$BEFORE_FILE" "$AFTER_FILE"
+    exit 1
+fi