dsh-remote-plugin 0.4.5 → 0.4.8

package/README.md

@@ -1,13 +1,13 @@
 # dsh-remote-plugin
 
-DSH Remote 的 DSH bundle 插件：在 DSH 左侧原生边栏注册入口，点击从右侧滑出管理抽屉；插件**内置网关程序并随 DSH 自动启停**（独立 systemd 单元），抽屉直显令牌、主机 IP 与设备监控，配合 [dsh-Remote](https://github.com/Blank-not-black/dsh-Remote) 的 Android App 实现手机远程操控。
+DSH Remote 的 DSH bundle 插件：在 DSH 左侧原生边栏注册入口，点击从右侧滑出管理抽屉；插件**内置网关程序并随 DSH 自动启停**（独立 systemd 单元），抽屉直显令牌、主机 IP 与设备监控，配合 [dsh-Remote](https://github.com/Blank-not-black/dsh-Remote) 的 Android App 实现手机远程操控与文件互传（`/fs/list`、`/fs/file`、`/fs/upload`）。
 
 ## 安装
 
 ```sh
 dsh plugin --profile web add dsh-remote-plugin
 # 或 pin 版本
-dsh plugin --profile web add dsh-remote-plugin@0.4.4
+dsh plugin --profile web add dsh-remote-plugin@0.4.8
 ```
 
 重启 DSH Web 后 Ctrl+F5，左侧边栏底部出现 App 图标入口。
@@ -24,10 +24,11 @@ dsh plugin --profile web add "github:Blank-not-black/dsh-Remote#main&path:/packa
 - 开关持久化在 `~/.dsh-remote/gateway.enabled`；抽屉内可停止/启动。
 - 令牌在 `~/.dsh-remote/token`（首次自动生成，重复使用不覆盖），抽屉里显示并可复制。
 - 环境变量 `DSH_REMOTE_AUTOSTART=0` 可关闭自动管理。
+- 文件端点：`/fs/list`（列目录）、`/fs/file`（下载，支持 Range）、`/fs/upload`（上传，默认上限 2GB）；默认根目录 `~`，`DSH_REMOTE_FS_ROOT` 可开多根（`:` 分隔）。
 
 ## 手机 App
 
-从 [Releases](https://github.com/Blank-not-black/dsh-Remote/releases/latest) 下载 `dsh-remote.apk`，设置服务器 `http://电脑IP:8787` + 抽屉里的令牌即可。
+从 [Releases](https://github.com/Blank-not-black/dsh-Remote/releases/latest) 下载 `dsh-remote.apk`，App「设置」里可添加多个服务器地址（局域网 + Tailscale），点「测速」自动选最快；填抽屉里的令牌即可。聊天记录会本地缓存，断网也能看历史；下载的文件统一放系统「下载/dsh-remote」。
 
 ## License
 

package/gateway.cjs

@@ -18,6 +18,8 @@
  *   DSH_UPSTREAM  DSH web 服务地址, 默认 http://127.0.0.1:3080
  *   TOKEN       访问令牌; 不设置则读 TOKEN_FILE, 仍没有则自动生成
  *   TOKEN_FILE  令牌文件, 默认 ~/.dsh-remote/token
+ *   DSH_REMOTE_FS_ROOT       文件传输允许根, 默认 ~, 多个用 ':' 分隔
+ *   DSH_REMOTE_FS_MAX_UPLOAD 上传字节上限, 默认 2147483648 (2GB)
  */
 'use strict'
 
@@ -69,6 +71,63 @@ const MIME = {
   '.apk': 'application/vnd.android.package-archive'
 }
 
+// ---------- /fs 文件传输 ----------
+// 允许访问的根目录: DSH_REMOTE_FS_ROOT 用 ':' 分隔多个根, 默认仅 ~。
+// 所有 /fs/* 路径 resolve 后都必须位于某个根内, 已存在的路径还会用 realpath
+// 复核一次, 防止 ../ 穿越与符号链接逃逸。
+const FS_DEFAULT_ROOT = path.resolve(os.homedir())
+const FS_ROOTS = (process.env.DSH_REMOTE_FS_ROOT || FS_DEFAULT_ROOT)
+  .split(':')
+  .filter(Boolean)
+  .map(r => path.resolve(r.trim() === '~' ? FS_DEFAULT_ROOT : r.trim()))
+const FS_MAX_UPLOAD = Number(process.env.DSH_REMOTE_FS_MAX_UPLOAD) || 2 * 1024 * 1024 * 1024
+let FS_ROOT_REALS = null
+function fsRootReals() {
+  if (!FS_ROOT_REALS) {
+    FS_ROOT_REALS = FS_ROOTS.map(r => { try { return fs.realpathSync(r) } catch { return null } }).filter(Boolean)
+  }
+  return FS_ROOT_REALS
+}
+function fsInsideReal(real) {
+  for (const root of fsRootReals()) {
+    if (real === root || real.startsWith(root + path.sep)) return true
+  }
+  return false
+}
+
+const FS_MIME = {
+  ...MIME,
+  '.jpg': 'image/jpeg',
+  '.jpeg': 'image/jpeg',
+  '.gif': 'image/gif',
+  '.webp': 'image/webp',
+  '.bmp': 'image/bmp',
+  '.mp3': 'audio/mpeg',
+  '.wav': 'audio/wav',
+  '.ogg': 'audio/ogg',
+  '.flac': 'audio/flac',
+  '.m4a': 'audio/mp4',
+  '.mp4': 'video/mp4',
+  '.mkv': 'video/x-matroska',
+  '.webm': 'video/webm',
+  '.mov': 'video/quicktime',
+  '.avi': 'video/x-msvideo',
+  '.pdf': 'application/pdf',
+  '.zip': 'application/zip',
+  '.gz': 'application/gzip',
+  '.tar': 'application/x-tar',
+  '.7z': 'application/x-7z-compressed',
+  '.rar': 'application/vnd.rar',
+  '.doc': 'application/msword',
+  '.docx': 'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+  '.xls': 'application/vnd.ms-excel',
+  '.xlsx': 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
+  '.ppt': 'application/vnd.ms-powerpoint',
+  '.pptx': 'application/vnd.openxmlformats-officedocument.presentationml.presentation',
+  '.epub': 'application/epub+zip',
+  '.wasm': 'application/wasm',
+}
+
 // ---------- token ----------
 function loadToken() {
   if (process.env.TOKEN) return process.env.TOKEN
@@ -472,6 +531,397 @@ function serveAdminApi(req, res, url) {
   res.end(JSON.stringify({ error: 'not-found' }))
 }
 
+// ---------- /fs 文件传输: 实现 ----------
+function fsJson(res, status, body) {
+  cors(res)
+  res.writeHead(status, { 'content-type': 'application/json; charset=utf-8' })
+  res.end(JSON.stringify(body))
+}
+
+function fsAuthorized(req, url, res) {
+  const ok = authorized(req, url)
+  touchDevice(req, ok ? {} : { failedAuth: true })
+  if (!ok) {
+    authFailures++
+    fsJson(res, 401, { error: 'unauthorized' })
+    return false
+  }
+  return true
+}
+
+/** 把用户给的 path 解析为绝对路径并做词法根检查; 返回 {abs} 或 {error}。 */
+function fsResolve(input) {
+  const raw = String(input ?? '').trim()
+  let abs
+  if (!raw || raw === '~') abs = FS_ROOTS[0]
+  else if (raw.startsWith('~/')) abs = path.resolve(FS_DEFAULT_ROOT, raw.slice(2))
+  else if (path.isAbsolute(raw)) abs = path.resolve(raw)
+  else abs = path.resolve(FS_ROOTS[0], raw) // 相对路径按默认根解析
+  for (const root of FS_ROOTS) {
+    if (abs === root || abs.startsWith(root + path.sep)) return { abs }
+  }
+  return { error: 'forbidden' }
+}
+
+/** realpath 复核: 符号链接目标也必须落在允许根内。 */
+function fsRealChecked(abs) {
+  let real
+  try {
+    real = fs.realpathSync(abs)
+  } catch (err) {
+    return { error: err.code === 'ENOENT' ? 'not-found' : 'permission-denied' }
+  }
+  if (!fsInsideReal(real)) return { error: 'forbidden' }
+  return { abs: real }
+}
+
+function fsContentDisposition(name) {
+  const ascii = String(name).replace(/[^\x20-\x7e]/g, '_').replace(/["\\]/g, '_') || 'download'
+  const star = encodeURIComponent(name).replace(/['()*]/g, c =>
+    '%' + c.charCodeAt(0).toString(16).toUpperCase())
+  return `attachment; filename="${ascii}"; filename*=UTF-8''${star}`
+}
+
+/** 单段 Range: bytes=a-b / bytes=a- / bytes=-n。多段或不合法返回 null(按 200 整文件处理)。 */
+function fsParseRange(header, size) {
+  if (!header || size <= 0) return null
+  const m = /^bytes=(\d*)-(\d*)$/.exec(String(header).trim())
+  if (!m) return null
+  const s = m[1], e = m[2]
+  if (s === '' && e === '') return null
+  if (s === '') { // 末尾 n 字节
+    const n = Number(e)
+    if (!Number.isFinite(n) || n <= 0) return null
+    return { start: Math.max(0, size - n), end: size - 1 }
+  }
+  const start = Number(s)
+  if (!Number.isFinite(start) || start < 0) return null
+  if (e === '') return { start, end: size - 1 }
+  const end = Number(e)
+  if (!Number.isFinite(end) || end < start) return null
+  return { start, end: Math.min(end, size - 1) }
+}
+
+function fsList(req, res, url) {
+  if (req.method !== 'GET') {
+    res.writeHead(405, { allow: 'GET' })
+    res.end()
+    return
+  }
+  if (!fsAuthorized(req, url, res)) return
+  const resolved = fsResolve(url.searchParams.get('path') ?? '')
+  if (resolved.error) return fsJson(res, resolved.error === 'forbidden' ? 403 : 404, { error: resolved.error })
+  const checked = fsRealChecked(resolved.abs)
+  if (checked.error) return fsJson(res, checked.error === 'forbidden' ? 403 : 404, { error: checked.error })
+
+  let st
+  try { st = fs.statSync(checked.abs) } catch (err) {
+    return fsJson(res, err.code === 'ENOENT' ? 404 : 403, { error: err.code === 'ENOENT' ? 'not-found' : 'permission-denied' })
+  }
+  if (!st.isDirectory()) return fsJson(res, 400, { error: 'not-a-directory' })
+
+  let dirents
+  try { dirents = fs.readdirSync(checked.abs, { withFileTypes: true }) } catch {
+    return fsJson(res, 403, { error: 'permission-denied' })
+  }
+  const entries = []
+  for (const d of dirents) {
+    const full = path.join(checked.abs, d.name)
+    try {
+      // 符号链接指向允许根之外时直接不展示, 点进去/下载也必然被 realpath 复核拒绝
+      if (d.isSymbolicLink()) {
+        const real = fs.realpathSync(full)
+        if (!fsInsideReal(real)) continue
+      }
+      const info = fs.statSync(full)
+      if (!info.isFile() && !info.isDirectory()) continue
+      entries.push({
+        name: d.name,
+        type: info.isDirectory() ? 'dir' : 'file',
+        size: info.isDirectory() ? 0 : info.size,
+        mtimeMs: Math.round(info.mtimeMs)
+      })
+    } catch {
+      // 单个条目无权限/已消失: 跳过, 不让整个列表失败
+    }
+  }
+  entries.sort((a, b) => {
+    if (a.type !== b.type) return a.type === 'dir' ? -1 : 1
+    return a.name.localeCompare(b.name, 'zh-CN', { numeric: true })
+  })
+  fsJson(res, 200, { path: resolved.abs, entries })
+}
+
+function fsFile(req, res, url) {
+  if (req.method !== 'GET' && req.method !== 'HEAD') {
+    res.writeHead(405, { allow: 'GET, HEAD' })
+    res.end()
+    return
+  }
+  if (!fsAuthorized(req, url, res)) return
+  const resolved = fsResolve(url.searchParams.get('path') ?? '')
+  if (resolved.error) return fsJson(res, resolved.error === 'forbidden' ? 403 : 404, { error: resolved.error })
+  const checked = fsRealChecked(resolved.abs)
+  if (checked.error) return fsJson(res, checked.error === 'forbidden' ? 403 : 404, { error: checked.error })
+
+  let st
+  try { st = fs.statSync(checked.abs) } catch (err) {
+    return fsJson(res, err.code === 'ENOENT' ? 404 : 403, { error: err.code === 'ENOENT' ? 'not-found' : 'permission-denied' })
+  }
+  if (!st.isFile()) return fsJson(res, 400, { error: 'not-a-file' })
+
+  const range = fsParseRange(req.headers.range, st.size)
+  if (range && range.start >= st.size) {
+    cors(res)
+    res.writeHead(416, {
+      'content-type': 'application/json; charset=utf-8',
+      'content-range': `bytes */${st.size}`,
+      'accept-ranges': 'bytes'
+    })
+    res.end(JSON.stringify({ error: 'range-not-satisfiable', size: st.size }))
+    return
+  }
+
+  const ext = path.extname(checked.abs).toLowerCase()
+  cors(res)
+  res.writeHead(range ? 206 : 200, {
+    'content-type': FS_MIME[ext] || 'application/octet-stream',
+    'content-length': range ? range.end - range.start + 1 : st.size,
+    'content-disposition': fsContentDisposition(path.basename(checked.abs)),
+    'accept-ranges': 'bytes',
+    'cache-control': 'no-cache',
+    ...(range ? { 'content-range': `bytes ${range.start}-${range.end}/${st.size}` } : {})
+  })
+  if (req.method === 'HEAD') { res.end(); return }
+  const stream = range
+    ? fs.createReadStream(checked.abs, { start: range.start, end: range.end })
+    : fs.createReadStream(checked.abs)
+  stream.on('error', () => { try { res.destroy() } catch {} })
+  stream.pipe(res)
+}
+
+function fsValidName(name) {
+  if (typeof name !== 'string') return false
+  if (!name || name === '.' || name === '..') return false
+  if (name.includes('/') || name.includes('\\') || name.includes('\0')) return false
+  if (path.basename(name) !== name) return false
+  return true
+}
+
+/** 打开上传目标: 同名冲突/符号链接/临时文件都在这层判定。 */
+function fsOpenUploadTarget(res, url, dirLex, dirReal, name) {
+  if (!fsValidName(name)) {
+    fsJson(res, 400, { error: 'bad-name', detail: '文件名不能为空且不能包含路径分隔符' })
+    return null
+  }
+  const target = path.join(dirReal, name)
+  const overwrite = url.searchParams.get('overwrite') === '1' || url.searchParams.get('overwrite') === 'true'
+  let exists = false
+  try {
+    const st = fs.lstatSync(target)
+    exists = true
+    if (st.isSymbolicLink()) {
+      fsJson(res, 403, { error: 'symlink-forbidden', detail: '拒绝覆盖符号链接' })
+      return null
+    }
+  } catch (err) {
+    if (err.code !== 'ENOENT') {
+      fsJson(res, 403, { error: 'permission-denied', detail: err.message })
+      return null
+    }
+  }
+  if (exists && !overwrite) {
+    fsJson(res, 409, { error: 'conflict', detail: '文件已存在, 追加 overwrite=1 可覆盖' })
+    return null
+  }
+  const tmp = path.join(dirReal, `.${name}.dsh-remote-part-${process.pid}-${crypto.randomBytes(4).toString('hex')}`)
+  let stream
+  try {
+    stream = fs.createWriteStream(tmp, { flags: 'wx', mode: 0o600 })
+  } catch (err) {
+    fsJson(res, 403, { error: 'permission-denied', detail: err.message })
+    return null
+  }
+  return { stream, tmp, target, displayPath: path.join(dirLex, name), name, overwrite, bytes: 0 }
+}
+
+/** 上传管道: 计数限量, 成功后 rename(先写 .part 再原子落位)。 */
+function fsUploadPipe(res, url, dirLex, dirReal, name) {
+  const up = fsOpenUploadTarget(res, url, dirLex, dirReal, name)
+  return up ? fsUploadPipeFromTarget(res, up) : null
+}
+
+function fsUploadPipeFromTarget(res, up) {
+  let finished = false
+  const cleanup = () => {
+    if (finished) return
+    finished = true
+    try { up.stream.destroy() } catch {}
+    try { fs.unlinkSync(up.tmp) } catch {}
+  }
+  up.stream.on('error', () => {
+    if (finished) return
+    finished = true
+    try { fs.unlinkSync(up.tmp) } catch {}
+    if (!res.headersSent) fsJson(res, 500, { error: 'write-failed' })
+    else try { res.destroy() } catch {}
+  })
+  return {
+    write(chunk) {
+      if (finished) return
+      up.bytes += chunk.length
+      if (up.bytes > FS_MAX_UPLOAD) {
+        cleanup()
+        if (!res.headersSent) fsJson(res, 413, { error: 'too-large', limit: FS_MAX_UPLOAD })
+        else try { res.destroy() } catch {}
+        return
+      }
+      up.stream.write(chunk)
+    },
+    end() {
+      if (finished) return
+      finished = true
+      up.stream.end(() => {
+        try {
+          if (up.overwrite) fs.rmSync(up.target, { force: true })
+          fs.renameSync(up.tmp, up.target)
+        } catch (err) {
+          try { fs.unlinkSync(up.tmp) } catch {}
+          if (!res.headersSent) return fsJson(res, 403, { error: 'permission-denied', detail: err.message })
+          return
+        }
+        fsJson(res, 201, { ok: true, path: up.displayPath, name: up.name, size: up.bytes })
+      })
+    },
+    abort(status, msg) {
+      cleanup()
+      if (!res.headersSent) fsJson(res, status, { error: msg })
+      else try { res.destroy() } catch {}
+    }
+  }
+}
+
+function fsUploadRaw(req, res, url, dirLex, dirReal) {
+  const name = url.searchParams.get('name') || ''
+  const pipe = fsUploadPipe(res, url, dirLex, dirReal, name)
+  if (!pipe) return
+  req.on('aborted', () => pipe.abort(400, 'client-aborted'))
+  req.on('error', () => pipe.abort(400, 'client-aborted'))
+  req.on('data', (chunk) => pipe.write(chunk))
+  req.on('end', () => pipe.end())
+}
+
+/** 零依赖流式 multipart 解析: 只取第一个文件部分, 2GB 也不会整块进内存。 */
+function fsUploadMultipart(req, res, url, dirLex, dirReal, boundary) {
+  const queryName = url.searchParams.get('name') || ''
+  const marker = Buffer.from('\r\n--' + boundary)
+  let head = Buffer.alloc(0)
+  let tail = Buffer.alloc(0)
+  let state = 'headers' // headers -> data -> done
+  let pipe = null
+
+  const fail = (status, msg) => {
+    if (pipe) pipe.abort(status, msg)
+    else if (!res.headersSent) fsJson(res, status, { error: msg })
+  }
+
+  const process = (buf) => {
+    if (state === 'done') return
+    if (state === 'headers') {
+      head = Buffer.concat([head, buf])
+      if (head.length > 64 * 1024) return fail(400, 'multipart-headers-too-large')
+      const idx = head.indexOf('\r\n\r\n')
+      if (idx === -1) return
+      const headerText = head.slice(0, idx).toString('utf8')
+      let partName = queryName
+      if (!partName) {
+        const m = /filename="([^"]*)"/i.exec(headerText)
+        partName = m ? path.basename(String(m[1]).replace(/\\/g, '/')) : ''
+      }
+      if (!fsValidName(partName)) return fail(400, 'bad-name')
+      pipe = fsUploadPipe(res, url, dirLex, dirReal, partName)
+      if (!pipe) { state = 'done'; return }
+      const rest = head.slice(idx + 4)
+      head = null
+      state = 'data'
+      if (rest.length) process(rest)
+      return
+    }
+    // data: 滑动窗口找 \r\n--boundary, 未命中时保留尾部防跨 chunk 边界
+    buf = Buffer.concat([tail, buf])
+    const idx = buf.indexOf(marker)
+    if (idx === -1) {
+      const keep = Math.min(buf.length, marker.length - 1)
+      if (buf.length > keep) pipe.write(buf.slice(0, buf.length - keep))
+      tail = buf.slice(buf.length - keep)
+      return
+    }
+    if (idx > 0) pipe.write(buf.slice(0, idx))
+    state = 'done'
+    pipe.end()
+  }
+
+  req.on('aborted', () => { if (pipe) pipe.abort(400, 'client-aborted') })
+  req.on('error', () => { if (pipe) pipe.abort(400, 'client-aborted') })
+  req.on('data', (chunk) => process(chunk))
+  req.on('end', () => {
+    if (state === 'headers') return fail(400, 'no-file-part')
+    if (state === 'data' && pipe) {
+      if (tail.length) pipe.write(tail)
+      pipe.end()
+    }
+  })
+}
+
+function serveFs(req, res, url) {
+  const sub = url.pathname.slice('/fs'.length)
+
+  // 跨域预检: 浏览器控制台可能从 DSH /remote 页访问网关(Authorization 非简单头)
+  if (req.method === 'OPTIONS') {
+    cors(res)
+    res.writeHead(204)
+    res.end()
+    return
+  }
+
+  if (sub === '/list') return fsList(req, res, url)
+  if (sub === '/file') return fsFile(req, res, url)
+
+  if (sub === '/upload') {
+    if (req.method !== 'POST') {
+      res.writeHead(405, { allow: 'POST' })
+      res.end()
+      return
+    }
+    if (!fsAuthorized(req, url, res)) return
+    touchDevice(req)
+    const resolved = fsResolve(url.searchParams.get('path') ?? '')
+    if (resolved.error) return fsJson(res, resolved.error === 'forbidden' ? 403 : 404, { error: resolved.error })
+    const checked = fsRealChecked(resolved.abs)
+    if (checked.error) return fsJson(res, checked.error === 'forbidden' ? 403 : 404, { error: checked.error })
+    try {
+      const st = fs.statSync(checked.abs)
+      if (!st.isDirectory()) return fsJson(res, 400, { error: 'not-a-directory' })
+    } catch (err) {
+      return fsJson(res, err.code === 'ENOENT' ? 404 : 403, { error: err.code === 'ENOENT' ? 'not-found' : 'permission-denied' })
+    }
+    const contentLength = Number(req.headers['content-length'])
+    if (Number.isFinite(contentLength) && contentLength > FS_MAX_UPLOAD) {
+      return fsJson(res, 413, { error: 'too-large', limit: FS_MAX_UPLOAD })
+    }
+    const contentType = String(req.headers['content-type'] || '')
+    if (contentType.startsWith('multipart/form-data')) {
+      const m = /boundary=(?:"([^"]+)"|([^;]+))/i.exec(contentType)
+      const boundary = (m ? (m[1] || m[2]) : '').trim()
+      if (!boundary) return fsJson(res, 400, { error: 'bad-multipart', detail: '缺少 boundary' })
+      return fsUploadMultipart(req, res, url, resolved.abs, checked.abs, boundary)
+    }
+    return fsUploadRaw(req, res, url, resolved.abs, checked.abs)
+  }
+
+  fsJson(res, 404, { error: 'not-found' })
+}
+
 // ---------- /api 代理 ----------
 function proxyApi(req, res, url) {
   if (req.method === 'OPTIONS') {
@@ -547,6 +997,7 @@ function lanAddresses() {
 const server = http.createServer((req, res) => {
   try {
     const url = new URL(req.url, 'http://dsh-remote.local')
+    if (url.pathname === '/fs' || url.pathname.startsWith('/fs/')) return serveFs(req, res, url)
     if (url.pathname.startsWith('/admin/api')) return serveAdminApi(req, res, url)
     if (url.pathname.startsWith('/api/')) return proxyApi(req, res, url)
     if (url.pathname === '/health') return serveHealth(res)

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-remote-plugin",
-  "version": "0.4.5",
-  "description": "DSH Remote 官方 bundle 插件：DSH 左侧原生边栏入口 + 右侧抽屉内嵌管理控制台；内置网关随 DSH 自动启停(systemd 独立单元)，抽屉直显令牌与设备监控，配合 Android App 远程操控会话/审批/提问/goal。",
+  "version": "0.4.8",
+  "description": "DSH Remote 官方 bundle 插件：DSH 左侧原生边栏入口 + 右侧抽屉内嵌管理控制台；内置网关随 DSH 自动启停(systemd 独立单元)，抽屉直显令牌与设备监控；网关提供 /fs/* 文件传输端点(列表/断点下载/上传)，配合 Android App 远程操控会话/审批/提问/goal 与文件互传(多服务器测速切换、聊天记录离线缓存)。",
   "type": "module",
   "main": "./index.mjs",
   "exports": {

package/public/app.js

@@ -8,9 +8,35 @@ const LS = {
   del(k) { try { localStorage.removeItem(k) } catch {} }
 }
 
+/* 离线缓存: 会话列表 + 每会话聊天记录。只在网络失败时兜底展示, 不会替代线上数据。 */
+const CACHE = {
+  sessions: 'sessionsCacheV1',
+  history: 'historyCacheV1'
+}
+function cacheRead(key, d = null) {
+  try { return JSON.parse(LS.get(key, '')) || d } catch { return d }
+}
+function cacheWrite(key, value) {
+  try { LS.set(key, JSON.stringify(value)) } catch { LS.del(key) }
+}
+function readHistoryCache() { return cacheRead(CACHE.history, {}) || {} }
+function writeHistoryCache(cache) {
+  try { LS.set(CACHE.history, JSON.stringify(cache)); return }
+  catch {
+    // localStorage 配额不足: 每会话只留最近 50 条再试一次
+    try {
+      for (const k of Object.keys(cache)) cache[k].events = (cache[k].events || []).slice(-50)
+      LS.set(CACHE.history, JSON.stringify(cache))
+    } catch { LS.del(CACHE.history) }
+  }
+}
+
 const state = {
   token: '',
-  server: '',             // 网关地址, 空 = 同源(浏览器模式)
+  server: '',             // 当前生效的网关地址, 空 = 同源(浏览器模式)
+  servers: [],            // 备选服务器列表(局域网/远程多地址)
+  serverLatency: {},      // url -> 最近一次 /health 测速毫秒数
+  selectingServer: false, // 防重入: 测速/切换中
   sessions: [],
   byId: new Map(),
   current: null,           // 当前打开的 sessionId
@@ -23,7 +49,8 @@ const state = {
   jobs: {},                // sessionId -> jobs
   history: emptyHistory(),
   errCount: 0,
-  refreshTimer: null
+  refreshTimer: null,
+  fs: { path: null, initial: null, loaded: false }
 }
 
 const $ = (id) => document.getElementById(id)
@@ -57,6 +84,21 @@ function fmtTokens(n) {
   return String(n)
 }
 
+function fmtSize(n) {
+  if (n == null || Number.isNaN(Number(n))) return '—'
+  const b = Number(n)
+  if (b >= 1024 ** 3) return (b / 1024 ** 3).toFixed(2) + ' GB'
+  if (b >= 1024 ** 2) return (b / 1024 ** 2).toFixed(1) + ' MB'
+  if (b >= 1024) return (b / 1024).toFixed(1) + ' KB'
+  return b + ' B'
+}
+
+function fmtFullTime(ts) {
+  if (!ts) return '—'
+  const d = new Date(ts)
+  return `${d.getFullYear()}-${String(d.getMonth() + 1).padStart(2, '0')}-${String(d.getDate()).padStart(2, '0')} ${String(d.getHours()).padStart(2, '0')}:${String(d.getMinutes()).padStart(2, '0')}`
+}
+
 /* ---------------- API ---------------- */
 function apiUrl(path) {
   return (state.server || '') + path
@@ -104,6 +146,133 @@ function authFailure() {
   $('token-desc').textContent = '令牌无效，点「更换」重新设置'
 }
 
+/* ---------------- 多服务器 + 自动选优 ---------------- */
+function loadServers() {
+  let arr = null
+  try { arr = JSON.parse(LS.get('servers', '')) } catch {}
+  if (!Array.isArray(arr)) {
+    const legacy = LS.get('server', '')
+    arr = legacy ? [legacy] : []
+  }
+  state.servers = arr.map(s => String(s || '').trim().replace(/\/+$/, ''))
+    .filter(s => /^https?:\/\//i.test(s))
+  const active = LS.get('activeServer', '')
+  if (active === 'origin') state.server = ''                       // 浏览器里明确选了同源页面
+  else state.server = state.servers.includes(active) ? active : (state.servers[0] || '')
+}
+
+function saveServers() {
+  LS.set('servers', JSON.stringify(state.servers))
+  LS.set('server', state.server)          // 兼容旧字段
+  LS.set('activeServer', state.server === '' && !CAP?.isNativePlatform?.() ? 'origin' : state.server)
+}
+
+function serverCandidates() {
+  const list = [...state.servers]
+  // 浏览器控制台: 当前页面(同源网关)也作为候选, 通常 0 跳内最快
+  if (!CAP?.isNativePlatform?.() && location.origin && !list.includes(location.origin)) list.push(location.origin)
+  return list
+}
+
+async function pingServer(base) {
+  const u = String(base || '').replace(/\/+$/, '')
+  if (!u) return Infinity
+  const t0 = performance.now()
+  const ctrl = new AbortController()
+  const timer = setTimeout(() => ctrl.abort(), 3500)
+  try {
+    const res = await fetch(u + '/health?t=' + Date.now(), { signal: ctrl.signal, cache: 'no-store' })
+    return res.ok ? Math.round(performance.now() - t0) : Infinity
+  } catch {
+    return Infinity
+  } finally {
+    clearTimeout(timer)
+  }
+}
+
+async function selectFastestServer({ silent = false, reconnect = true } = {}) {
+  if (state.selectingServer) return null
+  state.selectingServer = true
+  try {
+    if (!silent) toast('正在测速各服务器…')
+    const candidates = serverCandidates()
+    for (const u of candidates) state.serverLatency[u] = await pingServer(u)
+    const best = candidates
+      .filter(u => Number.isFinite(state.serverLatency[u]))
+      .sort((a, b) => state.serverLatency[a] - state.serverLatency[b])[0]
+    const sameOrigin = !CAP?.isNativePlatform?.() && best === location.origin
+    // 全部不可达时保持原服务器, 不硬切到空(同源)地址
+    const chosen = best ? (sameOrigin && !state.servers.includes(best) ? '' : best) : (state.server || '')
+    renderServers()
+    if (chosen !== state.server) {
+      state.server = chosen
+      saveServers()
+      if (!silent) toast(`已切换到最快服务器：${chosen || '当前页面'}（${state.serverLatency[best]}ms）`, 'ok')
+      if (reconnect && state.token) { openStreams(); refreshAll() }
+    } else if (!silent) {
+      if (best) toast(`当前已是最快：${chosen || '当前页面'}（${state.serverLatency[best]}ms）`, 'ok')
+      else toast('全部服务器不可达', 'err')
+    }
+    return chosen
+  } finally {
+    state.selectingServer = false
+  }
+}
+
+function renderServers() {
+  const box = $('server-list')
+  if (!box) return
+  if (!state.servers.length) {
+    box.innerHTML = '<div class="server-empty">未添加备用服务器 · 默认使用当前页面地址</div>'
+  } else {
+    box.innerHTML = state.servers.map(u => {
+      const ms = state.serverLatency[u]
+      let badge = '<span class="server-badge">未测速</span>'
+      if (Number.isFinite(ms)) badge = `<span class="server-badge ${u === state.server ? 'good' : ''}">${ms}ms${u === state.server ? ' · 当前' : ''}</span>`
+      else if (ms !== undefined) badge = '<span class="server-badge bad">不可达</span>'
+      return `<div class="server-row ${u === state.server ? 'active' : ''}">
+        <span class="server-url">${esc(u)}</span>${badge}
+        <button class="server-del" data-del="${esc(u)}" aria-label="删除服务器">✕</button>
+      </div>`
+    }).join('')
+    box.querySelectorAll('[data-del]').forEach(b => b.addEventListener('click', () => removeServer(b.dataset.del)))
+  }
+  $('server-desc').textContent = state.server
+    ? `当前: ${state.server}`
+    : (CAP?.isNativePlatform?.() ? '未设置服务器' : '默认 = 当前页面地址')
+}
+
+async function addServer() {
+  const input = $('server-input')
+  let raw = (input?.value || '').trim().replace(/\/+$/, '')
+  if (!raw) return toast('请输入服务器地址', 'err')
+  try {
+    const u = new URL(raw)
+    if (u.protocol !== 'http:' && u.protocol !== 'https:') throw new Error('bad')
+  } catch {
+    return toast('地址需以 http:// 或 https:// 开头', 'err')
+  }
+  if (state.servers.includes(raw)) return toast('该地址已在列表中')
+  state.servers.push(raw)
+  saveServers()
+  if (input) input.value = ''
+  renderServers()
+  toast('已添加服务器', 'ok')
+  if (state.token) selectFastestServer({ silent: false })
+}
+
+function removeServer(url) {
+  state.servers = state.servers.filter(s => s !== url)
+  const wasActive = state.server === url
+  if (wasActive) state.server = ''
+  saveServers()
+  renderServers()
+  if (wasActive) {
+    toast('已删除当前服务器，重新测速…')
+    selectFastestServer({ silent: true })
+  }
+}
+
 /* ---------------- 事件流 (WebSocket) ---------------- */
 const streams = {}
 state.streamsOk = { mux: false, host: false }
@@ -145,6 +314,8 @@ function openStream(kind, handler, refreshOnOpen) {
     state.errCount++
     updateConn()
     if (state.errCount === 3) toast('连接中断，正在重连…', 'err')
+    // 多服务器: 连续掉线若干次就重测速, 自动换到当前可达的最快地址
+    if (state.servers.length && state.errCount % 5 === 0) setTimeout(() => selectFastestServer({ silent: true }), 300)
     // 无条件重连; 页面被挂起时定时器暂停, visibilitychange 会再触发一次
     if (streams[kind] === ws) setTimeout(() => openStream(kind, handler, refreshOnOpen), 1200)
   }
@@ -167,11 +338,12 @@ function onResume() {
   updateConn()
 }
 
-/* 回前台 / 定时兜底: 任何流不在 OPEN 就重连 */
+/* 回前台 / 定时兜底: 任何流不在 OPEN 就重连; 多服务器时顺便重测速 */
 document.addEventListener('visibilitychange', () => {
   if (document.visibilityState === 'visible') {
     onResume()
-    if (streams.mux?.readyState !== WebSocket.OPEN || streams.host?.readyState !== WebSocket.OPEN) openStreams()
+    if (state.servers.length) selectFastestServer({ silent: true })
+    else if (streams.mux?.readyState !== WebSocket.OPEN || streams.host?.readyState !== WebSocket.OPEN) openStreams()
   }
 })
 window.addEventListener('pageshow', onResume)
@@ -180,6 +352,10 @@ setInterval(() => {
     if (streams.mux?.readyState !== WebSocket.OPEN || streams.host?.readyState !== WebSocket.OPEN) openStreams()
   }
 }, 15000)
+// 多服务器: 每 5 分钟重测一次延迟, 网络环境变化(离开 Wi-Fi / 挂上 Tailscale)时自动换线
+setInterval(() => {
+  if (document.visibilityState === 'visible' && state.servers.length) selectFastestServer({ silent: true })
+}, 300000)
 function onMuxFrame(full) {
   const f = full.payload
   if (!f) return
@@ -247,9 +423,22 @@ async function refreshAll() {
 
 async function refreshSessions() {
   const v = await safeRpc('session.list', {}, '拉取会话列表失败')
-  if (!v) return
+  if (!v) {
+    // 网关不可达: 用上次成功的会话列表兜底, 用户仍能打开历史缓存
+    if (!state.sessions.length) {
+      const cached = cacheRead(CACHE.sessions, [])
+      if (Array.isArray(cached) && cached.length) {
+        state.sessions = cached
+        state.byId = new Map(cached.map(s => [s.sessionId, s]))
+        renderSessions()
+        toast('网络不可用：显示本地缓存的会话列表', 'ok')
+      }
+    }
+    return
+  }
   state.sessions = v.items || []
   state.byId = new Map(state.sessions.map(s => [s.sessionId, s]))
+  cacheWrite(CACHE.sessions, state.sessions.slice(0, 80))
   renderSessions()
 }
 
@@ -341,6 +530,10 @@ function bindNativeBack() {
       const openModal = [...document.querySelectorAll('.modal')].find(m => !m.classList.contains('hidden'))
       if (openModal) { openModal.classList.add('hidden'); return }   // 先关弹窗
       if (document.body.classList.contains('in-session')) { closeSession(); return } // 会话页 → 回主页
+      if (!$('view-files').classList.contains('hidden')) {           // 文件页 → 上级目录 → 主页
+        if (state.fs.path && state.fs.initial && state.fs.path !== state.fs.initial) { fsUp(); return }
+        showView('view-home'); return
+      }
       try { CAP.Plugins?.App?.exitApp?.() } catch {}                  // 主页再返回 → 退出(与系统一致)
     })
   } catch {}
@@ -384,6 +577,50 @@ function trimVisible() {
   h.renderEnd = Math.max(h.renderStart, h.renderEnd - drop.length)
 }
 
+/* 聊天记录本地缓存: 每会话最多 250 条, 全局最多 10 个会话 */
+function scheduleHistoryCacheSave() {
+  clearTimeout(scheduleHistoryCacheSave._t)
+  scheduleHistoryCacheSave._t = setTimeout(saveHistoryCache, 400)
+}
+
+function saveHistoryCache() {
+  const id = state.current
+  if (!id || !state.history.visible.length) return
+  const s = state.byId.get(id)
+  const cache = readHistoryCache()
+  cache[id] = {
+    title: s ? titleOf(s) : '',
+    updatedAt: Date.now(),
+    events: state.history.visible.slice(-250).map(e => ({ seq: e.seq, event: e.event }))
+  }
+  const keys = Object.entries(cache)
+    .sort((a, b) => (b[1].updatedAt || 0) - (a[1].updatedAt || 0))
+    .slice(0, 10)
+    .map(([k]) => k)
+  const pruned = {}
+  for (const k of keys) pruned[k] = cache[k]
+  writeHistoryCache(pruned)
+}
+
+/** 网关不可达时回填本地缓存的历史; 返回是否命中。 */
+function restoreCachedHistory() {
+  const id = state.current
+  if (!id) return false
+  const cached = readHistoryCache()[id]
+  if (!cached?.events?.length) return false
+  const h = emptyHistory()
+  for (const e of cached.events) {
+    if (!e?.seq) continue
+    h.seqs.add(e.seq)
+    h.visible.push(e)
+  }
+  h.visible.sort((a, b) => a.seq - b.seq)
+  state.history = h
+  $('history-hint').textContent = `离线缓存 ${h.visible.length} 条`
+  renderHistory(true)
+  return true
+}
+
 async function loadHistory(reset) {
   const id = state.current
   if (!id || state.history.loading) return
@@ -392,8 +629,18 @@ async function loadHistory(reset) {
   if (moreBtn) moreBtn.classList.add('hidden')
   const payload = { sessionId: id, maxMessages: 60 }
   if (!reset && state.history.minSeq !== Infinity) payload.beforeSeq = state.history.minSeq
-  const v = await safeRpc('session.history', payload, '加载历史失败')
-  if (!v) { state.history.loading = false; return }
+
+  let v
+  try {
+    v = await rpc('session.history', payload)
+  } catch (e) {
+    state.history.loading = false
+    if (e.message === 'AUTH') { authFailure(); return }
+    if (restoreCachedHistory()) toast('网络不可用：显示本地缓存的历史', 'ok')
+    else toast('加载历史失败：' + e.message, 'err')
+    return
+  }
+
   const incoming = v.events || []
   let added = 0
   for (const entry of incoming) {
@@ -416,6 +663,7 @@ async function loadHistory(reset) {
   else if (added) renderHistory(false, 'keep')
   if (moreBtn) moreBtn.classList.toggle('hidden', !state.history.hasMore)
   $('history-hint').textContent = state.history.visible.length ? `${state.history.visible.length} 条` : ''
+  scheduleHistoryCacheSave()
 }
 
 function insertLiveEvent(event) {
@@ -435,6 +683,7 @@ function insertLiveEvent(event) {
   } else {
     renderHistory(false, 'keep')
   }
+  scheduleHistoryCacheSave()
 }
 
 function isToolEvent(type) { return type === 'tool/call' || type === 'tool/result' }
@@ -848,6 +1097,206 @@ function renderJobs() {
   }).join(''))
 }
 
+/* ---------------- 文件传输 ---------------- */
+function fsHeaders() {
+  return {
+    authorization: 'Bearer ' + state.token,
+    'x-dsh-remote-client': CAP?.isNativePlatform?.() ? 'app' : 'web'
+  }
+}
+
+function fsJoin(dir, name) {
+  return dir.replace(/\/+$/, '') + '/' + name
+}
+
+function fsParent(p) {
+  const clean = String(p || '').replace(/\/+$/, '')
+  const idx = clean.lastIndexOf('/')
+  if (idx <= 0) return clean === '' ? '' : '/'
+  return clean.slice(0, idx)
+}
+
+function fsApiUrl(sub, params = {}) {
+  const u = new URL(apiUrl('/fs' + sub), location.href)
+  for (const [k, v] of Object.entries(params)) {
+    if (v != null && v !== '') u.searchParams.set(k, v)
+  }
+  return u.href
+}
+
+function fsAuthError(status) {
+  if (status === 401) authFailure()
+}
+
+async function loadFs(dir, { silent = false, resetRoot = false } = {}) {
+  if (!state.token) {
+    $('fs-path').textContent = '未设置令牌'
+    $('fs-list').innerHTML = '<div class="empty">请先到「设置」页粘贴网关令牌</div>'
+    return
+  }
+  if (resetRoot) { state.fs.initial = null; state.fs.path = null }
+  const target = dir ?? state.fs.path ?? ''
+  if (!silent) {
+    $('fs-list').innerHTML = '<div class="empty">加载中…</div>'
+    $('fs-path').textContent = target ? '…' + target.slice(-40) : '加载中…'
+  }
+  try {
+    const res = await fetch(fsApiUrl('/list', target ? { path: target } : {}), { headers: fsHeaders() })
+    if (res.status === 401) { fsAuthError(401); return }
+    const data = await res.json().catch(() => ({}))
+    if (!res.ok || !Array.isArray(data.entries)) throw new Error(data.error === 'not-found' ? '目录不存在' : data.error === 'forbidden' ? '路径不在允许范围内' : data.error || ('HTTP ' + res.status))
+    state.fs.path = data.path
+    if (!state.fs.initial) state.fs.initial = data.path
+    state.fs.loaded = true
+    renderFs(data)
+  } catch (e) {
+    if (e.message === 'AUTH') return
+    $('fs-path').textContent = target || '~'
+    $('fs-list').innerHTML = `<div class="empty">加载失败：${esc(e.message || '网络错误')}</div>`
+    if (!silent) toast('文件列表加载失败：' + e.message, 'err')
+  }
+}
+
+function renderFs(data) {
+  $('fs-path').textContent = data.path || '~'
+  const list = $('fs-list')
+  if (!data.entries.length) {
+    list.innerHTML = '<div class="empty">空目录</div>'
+    return
+  }
+  list.innerHTML = data.entries.map(e => {
+    const isDir = e.type === 'dir'
+    return `<div class="fs-row" data-name="${esc(e.name)}" data-type="${esc(e.type)}">
+      <span class="fs-ico">${isDir ? '📁' : '📄'}</span>
+      <span class="fs-meta">
+        <span class="fs-name">${esc(e.name)}</span>
+        <span class="fs-sub">${isDir ? '目录' : fmtSize(e.size)} · ${fmtFullTime(e.mtimeMs)}</span>
+      </span>
+      <span class="fs-arrow">${isDir ? '›' : '↓'}</span>
+    </div>`
+  }).join('')
+  list.querySelectorAll('.fs-row').forEach(row =>
+    row.addEventListener('click', () => fsOpenEntry(row.dataset.name, row.dataset.type)))
+}
+
+function fsOpenEntry(name, type) {
+  if (!name) return
+  const p = fsJoin(state.fs.path, name)
+  if (type === 'dir') return loadFs(p)
+  downloadFsFile(name)
+}
+
+function downloadFsFile(name) {
+  const p = fsJoin(state.fs.path, name)
+  const url = fsApiUrl('/file', { path: p })
+  if (CAP?.isNativePlatform?.()) {
+    if (window.NativeFile?.downloadToDownloads) {
+      try {
+        window.NativeFile.downloadToDownloads(url, name, state.token)
+        toast('开始下载到「下载/dsh-remote」目录', 'ok')
+      } catch (e) {
+        toast('无法启动下载：' + (e?.message || ''), 'err')
+      }
+      return
+    }
+    toast('当前 App 版本不支持系统下载，请先更新 App', 'err')
+    return
+  }
+  // 浏览器控制台: <a download> + ?token= 兜底(主通道仍是 Bearer 头)
+  const a = document.createElement('a')
+  const u = new URL(url)
+  u.searchParams.set('token', state.token)
+  a.href = u.href
+  a.download = name
+  document.body.appendChild(a)
+  a.click()
+  a.remove()
+}
+
+function showFsProgress(pct, loaded, total) {
+  $('fs-progress').classList.remove('hidden')
+  $('fs-progress-bar').style.width = Math.max(2, Math.min(100, pct)) + '%'
+  $('fs-progress-text').textContent = `${pct}% · ${fmtSize(loaded)} / ${fmtSize(total)}`
+}
+
+function hideFsProgress() {
+  $('fs-progress').classList.add('hidden')
+  $('fs-progress-bar').style.width = '0%'
+}
+
+function uploadFsFile(file) {
+  if (!file) return
+  if (!state.token) { toast('请先到「设置」页设置令牌', 'err'); showView('view-settings'); return }
+  if (file.size > 2 * 1024 * 1024 * 1024) { toast('单文件超过 2GB 上限', 'err'); return }
+
+  const doUpload = (overwrite) => {
+    const params = { path: state.fs.path, name: file.name }
+    if (overwrite) params.overwrite = '1'
+    const xhr = new XMLHttpRequest()
+    xhr.open('POST', fsApiUrl('/upload', params))
+    xhr.setRequestHeader('authorization', 'Bearer ' + state.token)
+    xhr.setRequestHeader('x-dsh-remote-client', CAP?.isNativePlatform?.() ? 'app' : 'web')
+    showFsProgress(0, 0, file.size)
+    xhr.upload.onprogress = (e) => {
+      if (e.lengthComputable) showFsProgress(Math.round(e.loaded / Math.max(1, e.total) * 100), e.loaded, e.total)
+    }
+    xhr.onload = () => {
+      hideFsProgress()
+      if (xhr.status === 201 || xhr.status === 200) {
+        toast(`已上传 ${file.name}`, 'ok')
+        loadFs()
+        return
+      }
+      if (xhr.status === 401) { fsAuthError(401); return }
+      let err = 'HTTP ' + xhr.status
+      try { err = JSON.parse(xhr.responseText || '{}').error || err } catch {}
+      if (xhr.status === 409 && confirm('文件已存在，覆盖它？')) { doUpload(true); return }
+      toast('上传失败：' + err, 'err')
+    }
+    xhr.onerror = () => { hideFsProgress(); toast('上传失败：网络错误', 'err') }
+    xhr.upload.onerror = () => { hideFsProgress(); toast('上传失败：网络中断', 'err') }
+    xhr.send(file) // raw body, 网关直接流式落盘
+  }
+  doUpload(false)
+}
+
+function fsUp() {
+  if (!state.fs.path || !state.fs.initial) return
+  if (state.fs.path === state.fs.initial) {
+    toast('已在允许的根目录')
+    return
+  }
+  loadFs(fsParent(state.fs.path))
+}
+
+function bindFsPullRefresh() {
+  const view = $('view-files')
+  if (!view) return
+  const pull = $('fs-pull')
+  let startY = null
+  view.addEventListener('touchstart', (e) => {
+    if (window.scrollY <= 0) { startY = e.touches[0].clientY; pull.style.height = '0px' }
+  }, { passive: true })
+  view.addEventListener('touchmove', (e) => {
+    if (startY == null) return
+    const dy = e.touches[0].clientY - startY
+    if (dy > 4 && window.scrollY <= 0) {
+      pull.style.height = Math.min(64, dy / 2) + 'px'
+      pull.textContent = dy > 80 ? '松开刷新' : '下拉刷新'
+    }
+  }, { passive: true })
+  view.addEventListener('touchend', () => {
+    if (startY == null) return
+    const h = parseFloat(pull.style.height || '0')
+    startY = null
+    if (h >= 40) {
+      pull.textContent = '刷新中…'
+      loadFs(null, { silent: true })
+    }
+    pull.style.height = '0px'
+  })
+}
+
 /* ---------------- goal 编辑 ---------------- */
 function openGoalModal(goal) {
   state.goalEdit = goal
@@ -988,9 +1437,12 @@ function notify(title, body) {
 
 /* ---------------- 视图切换 ---------------- */
 function showView(id) {
-  for (const v of ['view-home', 'view-session', 'view-activity', 'view-settings']) $(v).classList.toggle('hidden', v !== id)
+  for (const v of ['view-home', 'view-files', 'view-session', 'view-activity', 'view-settings']) $(v).classList.toggle('hidden', v !== id)
+  // 离开会话页必须清掉 in-session, 否则其他页面顶栏被 body 样式隐藏
+  document.body.classList.toggle('in-session', id === 'view-session')
   document.querySelectorAll('.nav-btn').forEach(b => b.classList.toggle('active', b.dataset.view === id))
   window.scrollTo(0, 0)
+  if (id === 'view-files' && !state.fs.loaded) loadFs(null, { silent: true })
 }
 
 function updateConn() {
@@ -1015,12 +1467,13 @@ function initToken() {
   } else {
     state.token = LS.get('token', '')
   }
-  state.server = LS.get('server', '')
+  loadServers()
   $('token-desc').textContent = state.token ? '已保存(本机)' : '未设置'
   $('server-desc').textContent = state.server || '默认 = 当前页面地址'
 }
 
 function bindUi() {
+  renderServers()
   // 底部导航
   document.querySelectorAll('.nav-btn').forEach(b =>
     b.addEventListener('click', () => showView(b.dataset.view)))
@@ -1065,15 +1518,10 @@ function bindUi() {
     const t = prompt('输入访问令牌(网关启动时打印的 token)：', state.token)
     if (t && t.trim()) { state.token = t.trim(); LS.set('token', t.trim()); $('token-desc').textContent = '已保存'; toast('已保存，正在重连', 'ok'); openStreams(); refreshAll() }
   })
-  $('btn-change-server').addEventListener('click', () => {
-    const s = prompt('输入网关地址(留空 = 当前页面地址)：\n例: http://192.168.1.100:8787', state.server)
-    if (s === null) return
-    const v = (s || '').trim().replace(/\/+$/, '')
-    state.server = v
-    v ? LS.set('server', v) : LS.del('server')
-    $('server-desc').textContent = v || '默认 = 当前页面地址'
-    toast('服务器已设置，正在重连', 'ok')
-    openStreams(); refreshAll()
+  $('btn-server-speed').addEventListener('click', () => selectFastestServer({ silent: false }))
+  $('btn-server-add').addEventListener('click', addServer)
+  $('server-input').addEventListener('keydown', (e) => {
+    if (e.key === 'Enter' && !e.isComposing) { e.preventDefault(); addServer() }
   })
   $('btn-host-describe').addEventListener('click', async () => {
     const v = await safeRpc('host.describe', {}, '探测失败')
@@ -1103,6 +1551,18 @@ function bindUi() {
     if (state.current) renderHistory(true)
     toast(e.target.checked ? '已显示工具调用' : '已隐藏工具调用', 'ok')
   })
+
+  // 文件页
+  $('fs-up').addEventListener('click', fsUp)
+  $('fs-refresh').addEventListener('click', () => { toast('刷新中…'); loadFs() })
+  $('fs-upload-btn').addEventListener('click', () => $('fs-file-input').click())
+  $('fs-file-input').addEventListener('change', (e) => {
+    const f = e.target.files?.[0]
+    if (f) uploadFsFile(f)
+    e.target.value = '' // 允许连续选同一个文件
+  })
+  bindFsPullRefresh()
+
   bindRail()
 
   // 向上翻历史 / 向下回最新
@@ -1150,6 +1610,8 @@ async function boot() {
     showView('view-settings')
     $('token-desc').textContent = '未设置——点「更换」粘贴网关启动时打印的 token'
   } else {
+    // 多服务器: 启动时静默测速一次, 选最快的连接(同源页面也参与比较)
+    await selectFastestServer({ silent: true, reconnect: false })
     openStreams()
     await refreshAll()
     const host = await safeRpc('host.describe', {}, '')

package/public/index.html

@@ -36,6 +36,23 @@
       <div id="home-empty" class="empty hidden">暂无会话</div>
     </section>
 
+    <!-- 文件传输 -->
+    <section id="view-files" class="view hidden">
+      <div class="fs-head">
+        <button id="fs-up" class="icon-btn" title="返回上级" aria-label="返回上级">‹</button>
+        <div id="fs-path" class="fs-path">加载中…</div>
+        <button id="fs-upload-btn" class="mini-btn">上传</button>
+        <button id="fs-refresh" class="icon-btn" title="刷新" aria-label="刷新">⟳</button>
+      </div>
+      <div id="fs-progress" class="fs-progress hidden">
+        <div class="fs-progress-track"><div id="fs-progress-bar" class="fs-progress-bar"></div></div>
+        <div id="fs-progress-text" class="fs-progress-text muted">0%</div>
+      </div>
+      <div id="fs-pull" class="fs-pull">松开刷新</div>
+      <div id="fs-list" class="fs-list"></div>
+      <input type="file" id="fs-file-input" class="hidden">
+    </section>
+
     <!-- 会话详情 -->
     <section id="view-session" class="view hidden">
       <div class="session-head">
@@ -81,8 +98,13 @@
     <section id="view-settings" class="view hidden">
       <div class="settings-group">
         <div class="setting-row">
-          <div><div class="setting-name">服务器地址</div><div class="setting-desc" id="server-desc">默认 = 当前页面地址</div></div>
-          <button id="btn-change-server" class="mini-btn">设置</button>
+          <div><div class="setting-name">服务器地址（可多个）</div><div class="setting-desc" id="server-desc">默认 = 当前页面地址</div></div>
+          <button id="btn-server-speed" class="mini-btn">测速</button>
+        </div>
+        <div id="server-list" class="server-list"></div>
+        <div class="server-add">
+          <input id="server-input" type="url" placeholder="http://IP:8787">
+          <button id="btn-server-add" class="mini-btn">添加</button>
         </div>
         <div class="setting-row">
           <div><div class="setting-name">通知</div><div class="setting-desc">收到审批/提问时推送</div></div>
@@ -118,6 +140,7 @@
 
   <nav class="bottom-nav">
     <button data-view="view-home" class="nav-btn active"><span class="nav-ico">▤</span><span>会话</span></button>
+    <button data-view="view-files" class="nav-btn"><span class="nav-ico">⇅</span><span>文件</span></button>
     <button data-view="view-activity" class="nav-btn"><span class="nav-ico">◷</span><span>待办<b id="nav-pending" class="nav-badge hidden"></b></span></button>
     <button data-view="view-settings" class="nav-btn"><span class="nav-ico">⚙</span><span>设置</span></button>
   </nav>

package/public/styles.css

@@ -307,6 +307,47 @@ body.in-session .main { padding-bottom: 84px; }
 .job-card .job-name { font-weight: 600; font-size: 14px; }
 .job-state { font-size: 12px; color: var(--muted); margin-top: 3px; }
 
+/* ---------- 文件传输 ---------- */
+.fs-head { display: flex; align-items: center; gap: 8px; margin-bottom: 10px; }
+.fs-path {
+  flex: 1; min-width: 0; font-size: 12.5px; color: var(--muted);
+  background: var(--panel); border: 1px solid var(--line); border-radius: 10px;
+  padding: 8px 10px; white-space: nowrap; overflow: hidden; text-overflow: ellipsis;
+}
+.fs-progress {
+  display: flex; align-items: center; gap: 10px;
+  background: var(--panel); border: 1px solid var(--line); border-radius: 10px;
+  padding: 9px 11px; margin-bottom: 10px;
+}
+.fs-progress-track {
+  flex: 1; height: 7px; border-radius: 999px; background: var(--panel-2); overflow: hidden;
+}
+.fs-progress-bar {
+  height: 100%; width: 0%; border-radius: 999px;
+  background: linear-gradient(90deg, var(--blue), var(--cyan));
+  transition: width .15s ease;
+}
+.fs-progress-text { flex-shrink: 0; min-width: 112px; text-align: right; }
+.fs-pull {
+  height: 0; overflow: hidden; text-align: center; font-size: 12px; color: var(--cyan);
+  transition: height .12s ease; line-height: 26px;
+}
+.fs-list { display: flex; flex-direction: column; gap: 8px; }
+.fs-row {
+  display: flex; align-items: center; gap: 11px;
+  background: var(--panel); border: 1px solid var(--line); border-radius: var(--radius);
+  padding: 11px 13px; min-width: 0;
+}
+.fs-row:active { background: var(--panel-2); }
+.fs-ico { flex-shrink: 0; font-size: 22px; }
+.fs-meta { flex: 1; min-width: 0; display: flex; flex-direction: column; }
+.fs-name {
+  font-size: 14.5px; font-weight: 600; white-space: nowrap;
+  overflow: hidden; text-overflow: ellipsis;
+}
+.fs-sub { font-size: 12px; color: var(--muted); margin-top: 1px; }
+.fs-arrow { flex-shrink: 0; color: var(--muted); font-size: 18px; }
+
 /* ---------- 设置 ---------- */
 .settings-group {
   background: var(--panel); border: 1px solid var(--line); border-radius: var(--radius);
@@ -321,6 +362,36 @@ body.in-session .main { padding-bottom: 84px; }
 .setting-desc { font-size: 12px; color: var(--muted); margin-top: 2px; word-break: break-all; }
 .about { text-align: center; color: var(--muted); font-size: 12px; margin-top: 16px; line-height: 1.8; }
 
+/* 多服务器列表 */
+.server-list { padding: 0 14px 10px; display: flex; flex-direction: column; gap: 6px; }
+.server-empty { font-size: 12px; color: var(--muted); }
+.server-row {
+  display: flex; align-items: center; gap: 8px;
+  background: var(--bg-2); border: 1px solid var(--line); border-radius: 10px;
+  padding: 8px 10px;
+}
+.server-row.active { border-color: rgba(125, 207, 255, .55); background: rgba(125, 207, 255, .06); }
+.server-url { flex: 1; min-width: 0; font-size: 12.5px; word-break: break-all; }
+.server-badge {
+  flex-shrink: 0; font-size: 11px; padding: 1px 7px; border-radius: 999px;
+  background: rgba(91, 140, 255, .12); color: var(--blue);
+  border: 1px solid rgba(91, 140, 255, .3); white-space: nowrap;
+}
+.server-badge.good { background: rgba(125, 207, 255, .1); color: var(--cyan); border-color: rgba(125, 207, 255, .35); }
+.server-badge.bad { background: rgba(255, 158, 100, .1); color: var(--orange); border-color: rgba(255, 158, 100, .35); }
+.server-del {
+  flex-shrink: 0; width: 24px; height: 24px; border-radius: 7px;
+  background: var(--panel); border: 1px solid var(--line); color: var(--muted); font-size: 12px;
+}
+.server-del:active { color: var(--danger); }
+.server-add { display: flex; gap: 8px; padding: 0 14px 13px; }
+.server-add input {
+  flex: 1; min-width: 0; background: var(--bg-2); color: var(--text);
+  border: 1px solid var(--line); border-radius: 10px; padding: 8px 10px;
+  font: inherit; font-size: 13px; outline: none;
+}
+.server-add input:focus { border-color: rgba(91, 140, 255, .6); }
+
 /* 开关 */
 .switch { position: relative; display: inline-block; width: 46px; height: 27px; flex-shrink: 0; }
 .switch input { opacity: 0; width: 0; height: 0; }

package/public/update.json

@@ -1,6 +1,6 @@
 {
-  "version": "0.4.5",
+  "version": "0.4.8",
   "apkUrl": "dsh-remote.apk",
-  "releasedAt": "2026-08-15T14:12:16.007Z",
-  "notes": "手机更新走局域网直传: APK 随插件包分发, update.json 不再指向 GitHub"
+  "releasedAt": "2026-08-15T16:19:06.176Z",
+  "notes": "新增文件传输: /fs/list /fs/file /fs/upload, 局域网/Tailscale 直传大小文件; 多服务器地址自动测速切换; 聊天记录本地缓存离线可看; 下载统一到 Downloads/dsh-remote; 修复从会话页切出后顶栏消失"
 }

package/public/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "0.4.5"
+  "version": "0.4.8"
 }