dsh-pocket 2.7.0 → 2.8.0

package/client/api.js

@@ -15,6 +15,9 @@ export const POCKET_ENDPOINTS = Object.freeze({
   lanSetEnabled: 'lan.setEnabled',
   pinSetCustom: 'pin.setCustom',
   pocketReset: 'pocket.reset',
+  // 移动端「复制文件内容」（issue #17）：手机经此 RPC 让主机读取文件正文，
+  // 再写入剪贴板——因为手机无法直接打开电脑上的文件。
+  fileRead: 'pocket.fileRead',
 });
 
 /** 语义化版本比较：a > b 返回正数，相等 0，a < b 负数（数字段 + 预发布后缀）。 */

package/client/client.js

@@ -54,7 +54,10 @@ var POCKET_ENDPOINTS = Object.freeze({
   lanSetOverride: "lan.setOverride",
   lanSetEnabled: "lan.setEnabled",
   pinSetCustom: "pin.setCustom",
-  pocketReset: "pocket.reset"
+  pocketReset: "pocket.reset",
+  // 移动端「复制文件内容」（issue #17）：手机经此 RPC 让主机读取文件正文，
+  // 再写入剪贴板——因为手机无法直接打开电脑上的文件。
+  fileRead: "pocket.fileRead"
 });
 function compareVersions(a, b) {
   const pa = String(a).replace(/^[vV]/, "").split(".");
@@ -337,13 +340,21 @@ function MobileDrawerFooter({ useSessions, downloadSessionLog, toggleSidebar, t
   ));
 }
 
-// client/mobile/fileCopy.ts
-var BUTTON_ATTR = "data-mobile-nav";
-var BUTTON_VALUE = "copy-file";
-var MARKER = "data-mobile-nav-copy";
+// client/mobile/fileGuard.ts
+var GUARD_MSG = "\u624B\u673A\u4E0A\u65E0\u6CD5\u76F4\u63A5\u6253\u5F00\u7535\u8111\u4E0A\u7684\u6587\u4EF6";
+var WS_LABELS = ["\u6DFB\u52A0\u5DE5\u4F5C\u533A", "\u6DFB\u52A0\u5DE5\u4F5C\u533A\u2026", "Add workspace", "Add workspace\u2026"];
+var COPY_LABEL = "\u590D\u5236";
+function looksLikeFilePath(text) {
+  const t = (text ?? "").trim();
+  if (t.length < 3 || t.length > 320) return false;
+  if (/^(\/|~\/|\.\.?\/|[A-Za-z]:\\)/.test(t)) return true;
+  if (/\/[\w.\-]+\.\w{1,12}$/.test(t)) return true;
+  if (/[\w.\-]+\/[\w.\-]+\.\w{1,12}/.test(t)) return true;
+  return false;
+}
 async function copyText(text) {
   try {
-    if (navigator.clipboard && window.isSecureContext) {
+    if (navigator.clipboard?.writeText) {
       await navigator.clipboard.writeText(text);
       return true;
     }
@@ -352,69 +363,143 @@ async function copyText(text) {
   try {
     const ta = document.createElement("textarea");
     ta.value = text;
-    ta.setAttribute("readonly", "");
     ta.style.position = "fixed";
-    ta.style.top = "0";
-    ta.style.left = "0";
+    ta.style.top = "-9999px";
     ta.style.opacity = "0";
     document.body.appendChild(ta);
+    ta.focus();
     ta.select();
-    const ok = document.execCommand("copy");
+    const okCopy = document.execCommand("copy");
     ta.remove();
-    return ok;
+    return okCopy;
   } catch {
     return false;
   }
 }
-function createCopyButton() {
-  const btn = document.createElement("button");
-  btn.type = "button";
-  btn.setAttribute(BUTTON_ATTR, BUTTON_VALUE);
-  btn.textContent = "\u590D\u5236";
-  btn.setAttribute("aria-label", "\u590D\u5236\u6587\u4EF6\u5185\u5BB9");
-  btn.addEventListener("click", async (event) => {
+function startFileGuard(readFile) {
+  let toastEl = null;
+  let toastTimer = null;
+  const showToast = (text) => {
+    if (toastEl === null) {
+      toastEl = document.createElement("div");
+      toastEl.setAttribute("data-mobile-nav", "file-guard-toast");
+      Object.assign(toastEl.style, {
+        position: "fixed",
+        left: "50%",
+        bottom: "64px",
+        transform: "translateX(-50%)",
+        maxWidth: "84vw",
+        zIndex: "9999",
+        padding: "10px 14px",
+        borderRadius: "10px",
+        background: "rgba(20,22,28,.92)",
+        color: "#fff",
+        fontSize: "13px",
+        lineHeight: "1.4",
+        textAlign: "center",
+        fontFamily: "inherit",
+        boxShadow: "0 4px 16px rgba(0,0,0,.28)",
+        pointerEvents: "none",
+        opacity: "0",
+        transition: "opacity .18s ease"
+      });
+      document.body.appendChild(toastEl);
+    }
+    toastEl.textContent = text;
+    requestAnimationFrame(() => {
+      if (toastEl !== null) toastEl.style.opacity = "1";
+    });
+    if (toastTimer !== null) window.clearTimeout(toastTimer);
+    toastTimer = window.setTimeout(() => {
+      if (toastEl !== null) toastEl.style.opacity = "0";
+    }, 2600);
+  };
+  const onClick = (event) => {
+    const target = event.target;
+    if (target === null) return;
+    const el = target.closest("button, a");
+    if (el === null) return;
+    if (!looksLikeFilePath(el.textContent)) return;
     event.preventDefault();
-    event.stopPropagation();
-    const card = btn.parentElement;
-    const block = card?.querySelector("pre") ?? null;
-    const text = block?.textContent ?? "";
-    const ok = await copyText(text);
-    const prev = btn.textContent;
-    btn.textContent = ok ? "\u5DF2\u590D\u5236" : "\u590D\u5236\u5931\u8D25";
-    btn.setAttribute("data-copied", ok ? "1" : "0");
-    window.setTimeout(() => {
-      btn.textContent = prev;
-      btn.removeAttribute("data-copied");
-    }, 1500);
-  });
-  return btn;
-}
-function injectInto(card) {
-  if (card.hasAttribute(MARKER)) return;
-  card.setAttribute(MARKER, "1");
-  if (getComputedStyle(card).position === "static") card.style.position = "relative";
-  card.appendChild(createCopyButton());
-}
-function collectCodeBlocks(root) {
-  const out = [];
-  for (const pre of Array.from(root.querySelectorAll("pre"))) {
-    const card = pre.parentElement;
-    if (card === null) continue;
-    if (card.hasAttribute(MARKER)) continue;
-    if ((pre.textContent ?? "").trim().length < 1) continue;
-    out.push(card);
-  }
-  return out;
-}
-function startFileCopyInjection() {
-  const scan = () => {
-    for (const card of collectCodeBlocks(document)) injectInto(card);
+    event.stopImmediatePropagation();
+    showToast(GUARD_MSG);
+  };
+  document.addEventListener("click", onClick, true);
+  const injectCopyButtons = () => {
+    const links = document.querySelectorAll("button, a");
+    links.forEach((el) => {
+      if (el.getAttribute("data-mobile-nav-copy") === "1") return;
+      const txt = (el.textContent ?? "").trim();
+      if (!looksLikeFilePath(txt)) return;
+      el.setAttribute("data-mobile-nav-copy", "1");
+      const btn = document.createElement("button");
+      btn.type = "button";
+      btn.setAttribute("data-mobile-nav", "copy-file");
+      btn.textContent = COPY_LABEL;
+      btn.addEventListener("click", async (e) => {
+        e.preventDefault();
+        e.stopPropagation();
+        const filePath = (el.textContent ?? "").trim();
+        btn.disabled = true;
+        btn.textContent = "\u2026";
+        try {
+          const res = await readFile(filePath);
+          if (!res?.ok) {
+            showToast(res?.error?.message ?? "\u590D\u5236\u5931\u8D25");
+            return;
+          }
+          const content = res.value?.content ?? "";
+          const copied = await copyText(content);
+          if (copied) {
+            const kb = Math.max(1, Math.round((res.value?.size ?? content.length) / 1024));
+            showToast(`\u5DF2\u590D\u5236\u6587\u4EF6\u5185\u5BB9\uFF08${kb} KB\uFF09`);
+          } else {
+            showToast("\u590D\u5236\u5931\u8D25\uFF0C\u8BF7\u624B\u52A8\u9009\u62E9");
+          }
+        } catch (err) {
+          showToast(err instanceof Error ? err.message : "\u590D\u5236\u5931\u8D25");
+        } finally {
+          btn.disabled = false;
+          btn.textContent = COPY_LABEL;
+        }
+      });
+      el.parentElement?.insertBefore(btn, el.nextSibling);
+    });
+  };
+  injectCopyButtons();
+  const copyObserver = new MutationObserver(() => injectCopyButtons());
+  copyObserver.observe(document.body, { childList: true, subtree: true });
+  const hideWsEntries = () => {
+    const checkOne = (node) => {
+      if (node.nodeType !== 1) return;
+      const el = node;
+      const txt = (el.getAttribute("aria-label") ?? el.textContent ?? "").trim();
+      if (WS_LABELS.includes(txt)) {
+        el.style.display = "none";
+        el.setAttribute("data-mobile-nav-hide", "add-workspace");
+      }
+    };
+    const sel = '[role="menuitem"],[role="option"],li,button,a';
+    document.querySelectorAll(sel).forEach(checkOne);
+    const observer = new MutationObserver((mutations) => {
+      for (const m of mutations) {
+        m.addedNodes.forEach((n) => {
+          if (n.nodeType !== 1) return;
+          checkOne(n);
+          n.querySelectorAll?.(sel).forEach(checkOne);
+        });
+      }
+    });
+    observer.observe(document.body, { childList: true, subtree: true });
+    return () => observer.disconnect();
   };
-  const observer = new MutationObserver(scan);
-  observer.observe(document.body, { childList: true, subtree: true });
-  scan();
+  const disconnectWs = hideWsEntries();
   return () => {
-    observer.disconnect();
+    document.removeEventListener("click", onClick, true);
+    copyObserver.disconnect();
+    disconnectWs();
+    if (toastTimer !== null) window.clearTimeout(toastTimer);
+    toastEl?.remove();
   };
 }
 
@@ -1279,40 +1364,46 @@ var MOBILE_CSS = `
     gap: 0 !important;
   }
 
-  /* ---------- \u590D\u5236\u6587\u4EF6\u5185\u5BB9\u6309\u94AE\uFF08issue #17\uFF09 ----------
-     \u6302\u5728\u4EE3\u7801/\u6587\u4EF6\u5757\u5BB9\u5668\u53F3\u4E0A\u89D2\uFF08position:relative \u7531 JS \u5728\u6CE8\u5165\u65F6\u8865\u4E0A\uFF09\u3002
-     \u53EA\u5C4F\u5185\u53EF\u89C1\uFF1A\u684C\u9762\u7AEF DSH \u81EA\u5E26\u590D\u5236\uFF0C\u4E14\u672C effect \u53EA\u5728 narrow \u4E0B\u6302\u8F7D\uFF0C\u6309\u94AE
-     \u6839\u672C\u4E0D\u4F1A\u6CE8\u5165\uFF1B\u8FD9\u91CC\u518D\u515C\u5E95\u4E00\u5C42\uFF0C\u907F\u514D\u4EFB\u4F55\u9057\u6F0F\u3002 */
+  /* ---------- \u9690\u85CF\u300C\u6DFB\u52A0\u5DE5\u4F5C\u533A\u300D\u5165\u53E3\uFF08\u624B\u673A\u4E0A\u914D\u5DE5\u4F5C\u533A\u65E0\u610F\u4E49\uFF0Cissue #17 \u4FEE\u6B63\uFF09 ----------
+     \u56FE\u6807\u6309\u94AE\u7684 aria-label \u968F\u8BED\u8A00\u53D8\u5316\uFF08zh\u300C\u6DFB\u52A0\u5DE5\u4F5C\u533A\u300D/ en\u300CAdd workspace\u300D\uFF09\uFF0C
+     \u4E24\u79CD\u90FD\u8986\u76D6\uFF1B\u4E0B\u62C9\u83DC\u5355\u91CC\u7684\u300C\u6DFB\u52A0\u5DE5\u4F5C\u533A\u2026\u300D\u9879\u7531 fileGuard.ts \u7684 MutationObserver
+     \u6309\u6587\u6848\u515C\u5E95\u9690\u85CF\uFF08CSS \u9009\u4E0D\u5230\u7EAF\u6587\u672C\u8282\u70B9\uFF09\u3002\u53EA\u5728\u7A84\u5C4F\u751F\u6548\u2014\u2014\u684C\u9762\u7AEF\u7167\u5E38\u4FDD\u7559\u3002 */
+  button[aria-label="\u6DFB\u52A0\u5DE5\u4F5C\u533A"],
+  button[aria-label="\u6DFB\u52A0\u5DE5\u4F5C\u533A\u2026"],
+  button[aria-label="Add workspace"],
+  button[aria-label="Add workspace\u2026"] {
+    display: none !important;
+  }
+
+  /* ---------- \u6587\u4EF6\u94FE\u63A5\u65C1\u7684\u300C\u590D\u5236\u300D\u6309\u94AE\uFF08issue #17\uFF1A\u590D\u5236\u6587\u4EF6\u5185\u5BB9\uFF09 ----------
+     \u6302\u5728\u5BF9\u8BDD\u91CC\u7684\u6587\u4EF6\u94FE\u63A5\uFF08<button>/<a>\uFF0C\u6587\u6848\u5373\u8DEF\u5F84\uFF09\u7D27\u90BB\u4F4D\u7F6E\uFF0C\u7531 fileGuard.ts
+     \u6CE8\u5165\u3002\u53EA\u5C4F\u5185\u53EF\u89C1\uFF1A\u684C\u9762\u7AEF\u4E0D\u6CE8\u5165\u3001\u4E0D\u663E\u793A\uFF1B\u8FD9\u91CC\u518D\u515C\u5E95\u4E00\u5C42\uFF0C\u907F\u514D\u4EFB\u4F55\u9057\u6F0F\u3002
+     \u6587\u4EF6\u94FE\u63A5\u591A\u4E3A inline\uFF0C\u6309\u94AE\u7528 inline-flex \u7D27\u8DDF\u5176\u540E\u5373\u53EF\u3002 */
   [data-mobile-nav="copy-file"] {
-    position: absolute !important;
-    top: 6px !important;
-    right: 6px !important;
-    z-index: 6 !important;
     display: inline-flex !important;
-    align-items: center !important;
-    justify-content: center !important;
-    height: 26px !important;
-    padding: 0 10px !important;
-    border: 1px solid var(--dsw-alias-border-l1, rgba(0, 0, 0, .12)) !important;
-    border-radius: 8px !important;
-    background: var(--dsw-alias-bg-base, #ffffff) !important;
+    align-items: center;
+    justify-content: center;
+    margin-left: 6px !important;
+    vertical-align: baseline !important;
+    height: 22px !important;
+    padding: 0 8px !important;
+    border: 1px solid var(--dsw-alias-border-l1, rgba(0, 0, 0, .14)) !important;
+    border-radius: 6px !important;
+    background: var(--dsw-alias-bg-layer-1, #fff) !important;
     color: var(--dsw-alias-label-primary, inherit) !important;
     font-family: inherit !important;
-    font-size: 12px !important;
+    font-size: 11px !important;
     line-height: 1 !important;
     cursor: pointer !important;
     -webkit-tap-highlight-color: transparent !important;
-    box-shadow: 0 1px 4px rgba(0, 0, 0, .14) !important;
+    box-shadow: 0 1px 3px rgba(0, 0, 0, .12) !important;
   }
   [data-mobile-nav="copy-file"]:active {
     background: var(--dsw-alias-interactive-bg-hover, rgba(0, 0, 0, .06)) !important;
   }
-  [data-mobile-nav="copy-file"][data-copied="1"] {
-    color: var(--dsw-alias-state-success-primary, #1a9d54) !important;
-    border-color: var(--dsw-alias-state-success-primary, #1a9d54) !important;
-  }
-  [data-mobile-nav="copy-file"][data-copied="0"] {
-    color: var(--dsw-alias-state-danger-primary, #e5484d) !important;
+  [data-mobile-nav="copy-file"][disabled] {
+    opacity: .55 !important;
+    cursor: default !important;
   }
 }
 
@@ -1548,8 +1639,28 @@ function mobileApply(ctx) {
   ctx.effect(() => {
     if (!narrow.matches) return () => {
     };
-    return startFileCopyInjection();
-  }, "dsh-mobile-nav: file copy button (issue #17)");
+    const getWorkspaceCwd = () => {
+      try {
+        const ws = ctx.get?.("workspaces") ?? ctx.workspaces;
+        const list = ws?.list;
+        const arr = Array.isArray(list) ? list : list && typeof list === "object" && "value" in list ? list.value : null;
+        if (Array.isArray(arr)) {
+          for (const w of arr) {
+            const c = w?.cwd ?? w?.root;
+            if (typeof c === "string" && c) return c;
+          }
+        }
+      } catch {
+      }
+      return "";
+    };
+    const readFile = (filePath) => ctx.connection.rpc.call(
+      POCKET_RPC_CHANNEL,
+      POCKET_ENDPOINTS.fileRead,
+      { path: filePath, cwd: getWorkspaceCwd() }
+    );
+    return startFileGuard(readFile);
+  }, "dsh-mobile-nav: file open guard + copy button + hide add-workspace (issue #17)");
   ctx.slots.inject("conversation.session.header.actions", () => ctx.slots.register({
     name: "conversation.session.header.actions",
     id: "mobile-nav-toggle",

package/client/mobile/fileGuard.ts

@@ -0,0 +1,200 @@
+// 移动端文件守卫（issue #17）：dsh-web 在手机上点「文件链接」会触发桌面端
+// workspaces.openPath(open <path>)，既打不开（文件在电脑上），又会抛
+// "path open failed". 这里做两件事：
+//   1) 捕获阶段拦截这类激活（点击 / 键盘），改为弹一个提示；
+//   2) 在每个文件链接旁注入一个「复制」按钮，点它经主机 RPC 读文件正文再写剪贴板。
+// 另外隐藏「添加工作区」入口（手机上配工作区无意义）。
+// 移植自 dsh-web-mobile（MIT）。
+//
+// 识别方式：不依赖 dsh-web 的 hash 类名（每次构建都变），只认「文本像文件路径的
+// <button>/<a>」——文件链接按钮的文案就是路径（如 lib/proxy.mjs / /Users/.../x.ts）。
+
+/** 手机上点击文件时弹出的提示。 */
+const GUARD_MSG = '手机上无法直接打开电脑上的文件'
+/** 「添加工作区」入口的文案（随语言变化），两种都覆盖。 */
+const WS_LABELS = ['添加工作区', '添加工作区…', 'Add workspace', 'Add workspace…']
+/** 复制按钮文案。 */
+const COPY_LABEL = '复制'
+
+/** 主机 fileRead 回调返回结构（与 client/api.js 的 FileReadResult 对齐）。 */
+interface ReadFileResponse {
+  ok: boolean;
+  value?: { content: string; path: string; size: number };
+  error?: { message: string };
+}
+
+/** 文本是否像文件路径：绝对路径 / 相对路径 / 带扩展名的目录路径。 */
+function looksLikeFilePath(text: string | null): boolean {
+  const t = (text ?? '').trim()
+  if (t.length < 3 || t.length > 320) return false
+  if (/^(\/|~\/|\.\.?\/|[A-Za-z]:\\)/.test(t)) return true
+  if (/\/[\w.\-]+\.\w{1,12}$/.test(t)) return true
+  if (/[\w.\-]+\/[\w.\-]+\.\w{1,12}/.test(t)) return true
+  return false
+}
+
+/** 写剪贴板：优先 navigator.clipboard，非安全上下文（局域网 http）回退 execCommand。 */
+async function copyText(text: string): Promise<boolean> {
+  try {
+    if (navigator.clipboard?.writeText) {
+      await navigator.clipboard.writeText(text)
+      return true
+    }
+  } catch { /* 回退 */ }
+  try {
+    const ta = document.createElement('textarea')
+    ta.value = text
+    ta.style.position = 'fixed'
+    ta.style.top = '-9999px'
+    ta.style.opacity = '0'
+    document.body.appendChild(ta)
+    ta.focus()
+    ta.select()
+    const okCopy = document.execCommand('copy')
+    ta.remove()
+    return okCopy
+  } catch {
+    return false
+  }
+}
+
+export function startFileGuard(
+  readFile: (path: string) => Promise<ReadFileResponse>,
+): () => void {
+  // 轻量 toast：自包含，不依赖 dsh-pocket 面板的 React 状态。
+  let toastEl: HTMLElement | null = null
+  let toastTimer: number | null = null
+  const showToast = (text: string): void => {
+    if (toastEl === null) {
+      toastEl = document.createElement('div')
+      toastEl.setAttribute('data-mobile-nav', 'file-guard-toast')
+      Object.assign(toastEl.style, {
+        position: 'fixed',
+        left: '50%',
+        bottom: '64px',
+        transform: 'translateX(-50%)',
+        maxWidth: '84vw',
+        zIndex: '9999',
+        padding: '10px 14px',
+        borderRadius: '10px',
+        background: 'rgba(20,22,28,.92)',
+        color: '#fff',
+        fontSize: '13px',
+        lineHeight: '1.4',
+        textAlign: 'center',
+        fontFamily: 'inherit',
+        boxShadow: '0 4px 16px rgba(0,0,0,.28)',
+        pointerEvents: 'none',
+        opacity: '0',
+        transition: 'opacity .18s ease',
+      } as CSSStyleDeclaration)
+      document.body.appendChild(toastEl)
+    }
+    toastEl.textContent = text
+    requestAnimationFrame(() => {
+      if (toastEl !== null) toastEl.style.opacity = '1'
+    })
+    if (toastTimer !== null) window.clearTimeout(toastTimer)
+    toastTimer = window.setTimeout(() => {
+      if (toastEl !== null) toastEl.style.opacity = '0'
+    }, 2600)
+  }
+
+  // 捕获阶段拦截文件链接的激活。按钮的键盘激活（Enter/Space）会派发 click，
+  // 因此只拦 click 即可同时覆盖鼠标与键盘，避免重复处理。
+  const onClick = (event: MouseEvent): void => {
+    const target = event.target as HTMLElement | null
+    if (target === null) return
+    const el = target.closest('button, a') as HTMLElement | null
+    if (el === null) return
+    if (!looksLikeFilePath(el.textContent)) return
+    event.preventDefault()
+    event.stopImmediatePropagation()
+    showToast(GUARD_MSG)
+  }
+  document.addEventListener('click', onClick, true)
+
+  // 在文件链接旁注入「复制」按钮：点它经主机 RPC 读文件正文再写剪贴板。
+  // 用 data-mobile-nav-copy 标记已处理的链接，避免重复注入；React 重渲染会
+  // 产生新元素（无标记），MutationObserver 重新补上按钮。
+  const injectCopyButtons = (): void => {
+    const links = document.querySelectorAll('button, a')
+    links.forEach((el) => {
+      if (el.getAttribute('data-mobile-nav-copy') === '1') return
+      const txt = (el.textContent ?? '').trim()
+      if (!looksLikeFilePath(txt)) return
+      el.setAttribute('data-mobile-nav-copy', '1')
+      const btn = document.createElement('button')
+      btn.type = 'button'
+      btn.setAttribute('data-mobile-nav', 'copy-file')
+      btn.textContent = COPY_LABEL
+      btn.addEventListener('click', async (e) => {
+        e.preventDefault()
+        e.stopPropagation()
+        const filePath = (el.textContent ?? '').trim()
+        btn.disabled = true
+        btn.textContent = '…'
+        try {
+          const res = await readFile(filePath)
+          if (!res?.ok) {
+            showToast(res?.error?.message ?? '复制失败')
+            return
+          }
+          const content = res.value?.content ?? ''
+          const copied = await copyText(content)
+          if (copied) {
+            const kb = Math.max(1, Math.round((res.value?.size ?? content.length) / 1024))
+            showToast(`已复制文件内容（${kb} KB）`)
+          } else {
+            showToast('复制失败，请手动选择')
+          }
+        } catch (err) {
+          showToast(err instanceof Error ? err.message : '复制失败')
+        } finally {
+          btn.disabled = false
+          btn.textContent = COPY_LABEL
+        }
+      })
+      el.parentElement?.insertBefore(btn, el.nextSibling)
+    })
+  }
+  injectCopyButtons()
+  const copyObserver = new MutationObserver(() => injectCopyButtons())
+  copyObserver.observe(document.body, { childList: true, subtree: true })
+
+  // 隐藏「添加工作区」入口：图标按钮由 mobile.css.ts 按 aria-label 隐藏；
+  // 下拉菜单里的文本项 CSS 选不到，这里按文案兜底（只在新增节点时检查，省开销）。
+  const hideWsEntries = (): (() => void) => {
+    const checkOne = (node: Node): void => {
+      if (node.nodeType !== 1) return
+      const el = node as HTMLElement
+      const txt = (el.getAttribute('aria-label') ?? el.textContent ?? '').trim()
+      if (WS_LABELS.includes(txt)) {
+        el.style.display = 'none'
+        el.setAttribute('data-mobile-nav-hide', 'add-workspace')
+      }
+    }
+    const sel = '[role="menuitem"],[role="option"],li,button,a'
+    document.querySelectorAll(sel).forEach(checkOne)
+    const observer = new MutationObserver((mutations) => {
+      for (const m of mutations) {
+        m.addedNodes.forEach((n) => {
+          if (n.nodeType !== 1) return
+          checkOne(n)
+          ;(n as HTMLElement).querySelectorAll?.(sel).forEach(checkOne)
+        })
+      }
+    })
+    observer.observe(document.body, { childList: true, subtree: true })
+    return () => observer.disconnect()
+  }
+  const disconnectWs = hideWsEntries()
+
+  return () => {
+    document.removeEventListener('click', onClick, true)
+    copyObserver.disconnect()
+    disconnectWs()
+    if (toastTimer !== null) window.clearTimeout(toastTimer)
+    toastEl?.remove()
+  }
+}

package/client/mobile/mobile-apply.tsx

@@ -3,8 +3,9 @@ import type { ClientContext } from '@deepseek-ai/dsh-client-runtime/client'
 import { MobileNavToggle } from './MobileNavToggle.tsx'
 import { MobileNavOverlay } from './MobileNavOverlay.tsx'
 import { MobileDrawerFooter } from './MobileDrawerFooter.tsx'
-import { startFileCopyInjection } from './fileCopy.ts'
+import { startFileGuard } from './fileGuard.ts'
 import { MOBILE_CSS } from './mobile.css.ts'
+import { POCKET_RPC_CHANNEL, POCKET_ENDPOINTS } from '../api.js'
 import { NS, en, zh } from './locales.ts'
 import type { MobileNavKey } from './locales.ts'
 import { resolveLayout, persistLayoutFromUrl } from './layout-mode.mjs'
@@ -263,13 +264,44 @@ export function mobileApply(ctx): void {
     }
   }, 'dsh-mobile-nav: sheet rise animation replay')
 
-  // 复制文件内容按钮（issue #17）：dsh-web 在手机上没有可用的下载入口，于是在
-  // 会话里的代码/文件块右上角注入一个「复制」按钮，把块内文本（文件内容）写
-  // 入剪贴板。只挂窄屏——桌面端 DSH 自带复制，不需要。
+  // 移动端文件守卫（issue #17 修正）：手机上点 dsh-web 渲染的文件链接会触发桌面
+  // 端 workspaces.openPath(open ...) —— 既打不开（路径在电脑上），又会抛
+  // "path open failed"。这里在捕获阶段拦截这类点击 / 键盘激活，改为弹一个提示，
+  // 并隐藏「添加工作区」入口（手机上配工作区无意义）；同时在文件链接旁注入
+  // 「复制」按钮，点它经主机 RPC 读取文件正文再写入剪贴板。只挂窄屏。
   ctx.effect(() => {
     if (!narrow.matches) return () => {}
-    return startFileCopyInjection()
-  }, 'dsh-mobile-nav: file copy button (issue #17)')
+    // 尽量拿到当前工作区 cwd（文件链接文案是相对它的），传给主机 RPC 做精确解析；
+    // 拿不到就回退到主机 process.cwd()。dsh-web 的 workspaces 服务暴露当前工作区。
+    const getWorkspaceCwd = (): string => {
+      try {
+        const ws = (ctx as unknown as { get?: (k: string) => unknown }).get?.('workspaces')
+          ?? (ctx as unknown as { workspaces?: unknown }).workspaces
+        const list = (ws as { list?: unknown })?.list
+        const arr: unknown[] | null = Array.isArray(list)
+          ? list
+          : (list && typeof list === 'object' && 'value' in (list as object)
+            ? (list as { value: unknown[] }).value
+            : null)
+        if (Array.isArray(arr)) {
+          for (const w of arr) {
+            const c = (w as { cwd?: string; root?: string })?.cwd
+              ?? (w as { cwd?: string; root?: string })?.root
+            if (typeof c === 'string' && c) return c
+          }
+        }
+      } catch { /* 忽略，回退 process.cwd() */ }
+      return ''
+    }
+    // 手机侧读文件回调：走 dsh-pocket 的 RPC 通道，由主机侧 fileRead 端点处理。
+    const readFile = (filePath: string) =>
+      ctx.connection.rpc.call(
+        POCKET_RPC_CHANNEL,
+        POCKET_ENDPOINTS.fileRead,
+        { path: filePath, cwd: getWorkspaceCwd() },
+      ) as Promise<{ ok: boolean; value?: { content: string; path: string; size: number }; error?: { message: string } }>
+    return startFileGuard(readFile)
+  }, 'dsh-mobile-nav: file open guard + copy button + hide add-workspace (issue #17)')
 
   ctx.slots.inject('conversation.session.header.actions', () => ctx.slots.register({
     name: 'conversation.session.header.actions',

package/client/mobile/mobile.css.ts

@@ -873,40 +873,46 @@ export const MOBILE_CSS = `
     gap: 0 !important;
   }
 
-  /* ---------- 复制文件内容按钮（issue #17） ----------
-     挂在代码/文件块容器右上角（position:relative 由 JS 在注入时补上）。
-     只屏内可见：桌面端 DSH 自带复制，且本 effect 只在 narrow 下挂载，按钮
-     根本不会注入；这里再兜底一层，避免任何遗漏。 */
+  /* ---------- 隐藏「添加工作区」入口（手机上配工作区无意义，issue #17 修正） ----------
+     图标按钮的 aria-label 随语言变化（zh「添加工作区」/ en「Add workspace」），
+     两种都覆盖；下拉菜单里的「添加工作区…」项由 fileGuard.ts 的 MutationObserver
+     按文案兜底隐藏（CSS 选不到纯文本节点）。只在窄屏生效——桌面端照常保留。 */
+  button[aria-label="添加工作区"],
+  button[aria-label="添加工作区…"],
+  button[aria-label="Add workspace"],
+  button[aria-label="Add workspace…"] {
+    display: none !important;
+  }
+
+  /* ---------- 文件链接旁的「复制」按钮（issue #17：复制文件内容） ----------
+     挂在对话里的文件链接（<button>/<a>，文案即路径）紧邻位置，由 fileGuard.ts
+     注入。只屏内可见：桌面端不注入、不显示；这里再兜底一层，避免任何遗漏。
+     文件链接多为 inline，按钮用 inline-flex 紧跟其后即可。 */
   [data-mobile-nav="copy-file"] {
-    position: absolute !important;
-    top: 6px !important;
-    right: 6px !important;
-    z-index: 6 !important;
     display: inline-flex !important;
-    align-items: center !important;
-    justify-content: center !important;
-    height: 26px !important;
-    padding: 0 10px !important;
-    border: 1px solid var(--dsw-alias-border-l1, rgba(0, 0, 0, .12)) !important;
-    border-radius: 8px !important;
-    background: var(--dsw-alias-bg-base, #ffffff) !important;
+    align-items: center;
+    justify-content: center;
+    margin-left: 6px !important;
+    vertical-align: baseline !important;
+    height: 22px !important;
+    padding: 0 8px !important;
+    border: 1px solid var(--dsw-alias-border-l1, rgba(0, 0, 0, .14)) !important;
+    border-radius: 6px !important;
+    background: var(--dsw-alias-bg-layer-1, #fff) !important;
     color: var(--dsw-alias-label-primary, inherit) !important;
     font-family: inherit !important;
-    font-size: 12px !important;
+    font-size: 11px !important;
     line-height: 1 !important;
     cursor: pointer !important;
     -webkit-tap-highlight-color: transparent !important;
-    box-shadow: 0 1px 4px rgba(0, 0, 0, .14) !important;
+    box-shadow: 0 1px 3px rgba(0, 0, 0, .12) !important;
   }
   [data-mobile-nav="copy-file"]:active {
     background: var(--dsw-alias-interactive-bg-hover, rgba(0, 0, 0, .06)) !important;
   }
-  [data-mobile-nav="copy-file"][data-copied="1"] {
-    color: var(--dsw-alias-state-success-primary, #1a9d54) !important;
-    border-color: var(--dsw-alias-state-success-primary, #1a9d54) !important;
-  }
-  [data-mobile-nav="copy-file"][data-copied="0"] {
-    color: var(--dsw-alias-state-danger-primary, #e5484d) !important;
+  [data-mobile-nav="copy-file"][disabled] {
+    opacity: .55 !important;
+    cursor: default !important;
   }
 }
 

package/lib/web-rpc.js

@@ -1,7 +1,13 @@
 // dsh-pocket Web RPC（loopback-only）：设置页 ⇄ Host 的手机访问通道
 
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
 import { POCKET_RPC_CHANNEL, POCKET_ENDPOINTS, redactStatus } from '../client/api.js';
 
+/** 单次读取上限：4 MB，避免把大文件塞进剪贴板 / 内存。 */
+const FILE_READ_MAX = 4 * 1024 * 1024;
+
 function ok(value) {
   return { ok: true, value };
 }
@@ -137,6 +143,53 @@ export function installPocketRpc(ctx, { service, log = console, desktop = false,
       if (endpoint === POCKET_ENDPOINTS.version) {
         return ok({ current: runUpdate?.currentVersion?.() ?? null, loaded: runUpdate?.loadedVersion?.() ?? null });
       }
+      if (endpoint === POCKET_ENDPOINTS.fileRead) {
+        // 移动端「复制文件内容」（issue #17）：手机点复制按钮 → 主机读文件正文返回。
+        // 路径三种形态：
+        //   - 绝对路径：直接用；
+        //   - ~/ 开头：展开为用户 HOME；
+        //   - 相对路径：相对「客户端传入的 cwd」或「DSH 主机进程 cwd = 工作目录」
+        //     （用户从自己项目里 `dsh web` 时，二者一致，与 dsh-web 的
+        //     resolveWorkspacePath(cwd, path) 行为对齐）。安全边界同既有 RPC：
+        //     仅本机/隧道经 PIN 可达，等同于你自己操作这台机器。
+        const raw = String(payload?.path ?? '').trim();
+        if (!raw) return fail('bad-request', '缺少文件路径 | missing path');
+        let abs;
+        try {
+          if (/^~[/\\]?/.test(raw)) {
+            // 去掉 ~ 及其后的可选斜杠，再相对 HOME 解析
+            abs = path.resolve(os.homedir(), raw.replace(/^~[/\\]?/, ''));
+          } else if (path.isAbsolute(raw)) {
+            abs = path.resolve(raw);
+          } else {
+            const base = typeof payload?.cwd === 'string' && payload.cwd ? payload.cwd : process.cwd();
+            abs = path.resolve(base, raw);
+          }
+        } catch {
+          return fail('bad-request', '路径非法 | invalid path');
+        }
+        let stat;
+        try {
+          stat = await fs.stat(abs);
+        } catch {
+          return fail('bad-request', `文件不存在：${abs} | file not found`);
+        }
+        if (stat.isDirectory()) return fail('bad-request', '这是目录，不是文件 | it is a directory');
+        if (stat.size > FILE_READ_MAX) {
+          return fail('bad-request', `文件过大（${(stat.size / 1024 / 1024).toFixed(1)} MB），无法复制 | file too large`);
+        }
+        let buf;
+        try {
+          buf = await fs.readFile(abs);
+        } catch (err) {
+          return fail('bad-request', `读取失败：${err?.message ?? String(err)} | read failed`);
+        }
+        // 二进制检测：前 8KB 含 NUL 字节即视为二进制，文本复制无意义。
+        if (buf.subarray(0, 8192).includes(0)) {
+          return fail('bad-request', '二进制文件，无法复制文本 | binary file');
+        }
+        return ok({ content: buf.toString('utf8'), path: abs, size: stat.size });
+      }
       if (endpoint === POCKET_ENDPOINTS.update) {
         // 桌面端：更新由 DSH Desktop 管理，这里关闭（不删除，仅禁用）
         if (desktop) return fail('bad-request', '桌面版更新由 DSH Desktop 管理，已在此环境停用 | updates are managed by DSH Desktop here');

package/package.json

@@ -80,5 +80,5 @@
     "access": "public",
     "registry": "https://registry.npmjs.org/"
   },
-  "version": "2.7.0"
+  "version": "2.8.0"
 }

package/client/mobile/fileCopy.ts

@@ -1,115 +0,0 @@
-// dsh-web-mobile 移植（MIT，见 LICENSE.dsh-web-mobile）：移动端「复制文件内容」按钮。
-//
-// issue #17：用户希望手机上能拿到 DSH 在会话窗口里生成的文件。但当前 dsh-web
-// 的 web UI 没有任何下载能力（全部插件 bundle 里搜不到 download / blob: /
-// saveAs / createObjectURL），桌面端的下载按钮在手机经隧道/局域网访问时也拿
-// 不到文件内容。退而求其次——在「文件内容块」（对话里渲染为 <pre> 代码块）的
-// 右上角注入一个复制按钮，把块内文本（即文件内容）写入剪贴板。
-//
-// 关键：只依赖稳定结构 `<pre>`（fenced code 渲染为 `<pre><code>`），不依赖任何
-// hash 类名。dsh-web 每次构建都会换类名，按类名挂会随版本失效。
-
-/** 我们注入的按钮标记（复用 mobile-nav 的 data 属性命名空间，避免与插件自身控件冲突）。 */
-const BUTTON_ATTR = 'data-mobile-nav';
-const BUTTON_VALUE = 'copy-file';
-/** 打在代码块容器上：已注入过按钮就不再重复注入（React 重渲染时自愈）。 */
-const MARKER = 'data-mobile-nav-copy';
-
-/**
- * 把文本写入剪贴板。优先用 async Clipboard API（隧道/https 下可用）；非安全
- * 上下文（局域网 http）下 Clipboard API 会被浏览器拒绝，回退到隐藏 textarea +
- * execCommand('copy')。两者都失败返回 false。
- */
-export async function copyText(text: string): Promise<boolean> {
-  try {
-    if (navigator.clipboard && window.isSecureContext) {
-      await navigator.clipboard.writeText(text);
-      return true;
-    }
-  } catch {
-    /* 落到下面的回退路径 */
-  }
-  try {
-    const ta = document.createElement('textarea');
-    ta.value = text;
-    ta.setAttribute('readonly', '');
-    ta.style.position = 'fixed';
-    ta.style.top = '0';
-    ta.style.left = '0';
-    ta.style.opacity = '0';
-    document.body.appendChild(ta);
-    ta.select();
-    const ok = document.execCommand('copy');
-    ta.remove();
-    return ok;
-  } catch {
-    return false;
-  }
-}
-
-/** 造一个复制按钮。点击时复制其所在代码卡里的 <pre> 文本。 */
-function createCopyButton(): HTMLButtonElement {
-  const btn = document.createElement('button');
-  btn.type = 'button';
-  btn.setAttribute(BUTTON_ATTR, BUTTON_VALUE);
-  btn.textContent = '复制';
-  btn.setAttribute('aria-label', '复制文件内容');
-  btn.addEventListener('click', async (event) => {
-    event.preventDefault();
-    event.stopPropagation();
-    const card = btn.parentElement;
-    const block = card?.querySelector('pre') ?? null;
-    const text = block?.textContent ?? '';
-    const ok = await copyText(text);
-    const prev = btn.textContent;
-    btn.textContent = ok ? '已复制' : '复制失败';
-    btn.setAttribute('data-copied', ok ? '1' : '0');
-    window.setTimeout(() => {
-      btn.textContent = prev;
-      btn.removeAttribute('data-copied');
-    }, 1500);
-  });
-  return btn;
-}
-
-/** 给一个代码块容器注入复制按钮（幂等）。 */
-function injectInto(card: HTMLElement): void {
-  if (card.hasAttribute(MARKER)) return;
-  card.setAttribute(MARKER, '1');
-  if (getComputedStyle(card).position === 'static') card.style.position = 'relative';
-  card.appendChild(createCopyButton());
-}
-
-/**
- * 收集对话里需要挂复制按钮的代码块容器。候选 = 任何 `<pre>`（fenced code 与
- * 工具结果/错误块都渲染为 <pre>），跳过已标记 / 空块。返回的是其「容器」
- * （pre 的父元素），按钮挂在容器上、定位在块右上角。
- */
-export function collectCodeBlocks(root: ParentNode): HTMLElement[] {
-  const out: HTMLElement[] = [];
-  for (const pre of Array.from(root.querySelectorAll('pre'))) {
-    const card = pre.parentElement;
-    if (card === null) continue;
-    if (card.hasAttribute(MARKER)) continue;
-    if ((pre.textContent ?? '').trim().length < 1) continue;
-    out.push(card);
-  }
-  return out;
-}
-
-/**
- * 启动注入：MutationObserver 监听全文 DOM，新出现的代码块立即挂按钮；React
- * 重渲染替换了容器时旧按钮随容器消失、新容器会在下次回调里补上（自愈）。
- * @returns 清理函数（断开 observer）。
- */
-export function startFileCopyInjection(): () => void {
-  const scan = (): void => {
-    for (const card of collectCodeBlocks(document)) injectInto(card);
-  };
-  const observer = new MutationObserver(scan);
-  observer.observe(document.body, { childList: true, subtree: true });
-  scan();
-  return () => {
-    observer.disconnect();
-  };
-}