diff --git a/web/tools_api.py b/web/tools_api.py
index 982cd4a..dc7fc31 100644
--- a/web/tools_api.py
+++ b/web/tools_api.py
@@ -8,6 +8,7 @@ from flask import Blueprint, jsonify, request
 
 from core import device_pool
 from core.adb_helper import adb_connect, adb_connect_light, _ADB_LOCK, _adb
+from config import ADB_PATH
 from core.logger import get_logger
 from web import context
 from web.auth import admin_required, perm_required
@@ -16,6 +17,10 @@ from web.common import _merged_device_list
 _log = get_logger("web")
 bp = Blueprint("tools", __name__)
 
+# adb 终端安全红线：绝不 kill-server / 绝不 disconnect IP:5555——
+# 共享 adb transport，断开会让全部设备连接重建（历史与 STF provider 共用）。
+_ADB_BLOCKED_PATTERNS = ("kill-server", "disconnect")
+
 @bp.route("/api/adb/devices")
 @admin_required
 def api_adb_devices():