dsh-remote-plugin 0.6.16 → 0.6.17

package/gateway.cjs

@@ -22,6 +22,8 @@
  *   DSH_REMOTE_FS_ROOT       文件传输额外允许根, 默认 ~, 使用系统路径分隔符配置多根
  *   DSH_REMOTE_FS_MAX_UPLOAD 上传字节上限, 默认 2147483648 (2GB)
  *   DSH_REMOTE_WORKBENCH     工作台绑定文件, 默认 ~/.dsh-remote/workbench.json
+ *   DSH_REMOTE_ADVERTISE_HOSTS 额外写入配对二维码的宿主 IP/主机名, 逗号或空白分隔
+ *   DSH_REMOTE_DSH_CONTROL_MODE DSH 生命周期后端: auto/systemd/windows/disabled
  */
 'use strict'
 
@@ -84,6 +86,8 @@ const STARTED_AT = Date.now()
 const DSH_SERVICE = String(process.env.DSH_REMOTE_DSH_SERVICE || 'dsh-web').trim()
 const SYSTEMCTL = String(process.env.DSH_REMOTE_SYSTEMCTL || 'systemctl').trim() || 'systemctl'
 const WINDOWS_SC = String(process.env.DSH_REMOTE_WINDOWS_SC || 'sc.exe').trim() || 'sc.exe'
+const DSH_CONTROL_MODE_RAW = String(process.env.DSH_REMOTE_DSH_CONTROL_MODE || 'auto').trim().toLowerCase()
+const DSH_CONTROL_MODE = ['auto', 'systemd', 'windows', 'disabled'].includes(DSH_CONTROL_MODE_RAW) ? DSH_CONTROL_MODE_RAW : 'auto'
 const DSH_CONTROL_TIMEOUT_MS = durationEnv('DSH_REMOTE_DSH_CONTROL_TIMEOUT_MS', 45000, 2000, 5 * 60 * 1000)
 const DSH_CONTROL_POLL_MS = durationEnv('DSH_REMOTE_DSH_CONTROL_POLL_MS', 500, 50, 5000)
 const HTTP_REQUEST_TIMEOUT_MS = durationEnv('GATEWAY_HTTP_REQUEST_TIMEOUT_MS', 15 * 60 * 1000, 0, 24 * 60 * 60 * 1000)
@@ -104,6 +108,52 @@ function gatewayVersion() {
     return '0.0.0'
   }
 }
+
+function validAdvertisedHost(value) {
+  const host = String(value || '').trim()
+  if (!host || host.length > 253 || host === '0.0.0.0' || host === '127.0.0.1') return ''
+  if (!/^[A-Za-z0-9.-]+$/.test(host) || host.startsWith('.') || host.endsWith('.') || host.includes('..')) return ''
+  if (/^\d+(?:\.\d+){3}$/.test(host) && host.split('.').some(part => Number(part) > 255)) return ''
+  const labels = host.split('.')
+  if (labels.some(label => !label || label.length > 63 || label.startsWith('-') || label.endsWith('-'))) return ''
+  return host
+}
+
+function configuredAdvertisedHosts() {
+  return [...new Set(String(process.env.DSH_REMOTE_ADVERTISE_HOSTS || '')
+    .split(/[\s,]+/)
+    .map(validAdvertisedHost)
+    .filter(Boolean))]
+}
+
+function containerRuntimeDetected() {
+  if (fs.existsSync('/.dockerenv')) return true
+  try { return /(?:docker|containerd|kubepods|podman|lxc)/i.test(fs.readFileSync('/proc/1/cgroup', 'utf8')) } catch { return false }
+}
+
+function dshControlSupport() {
+  if (DSH_CONTROL_MODE === 'disabled') {
+    return { supported: false, code: 'EXTERNAL_LIFECYCLE', message: '当前 DSH 由 Docker、面板或其他外部平台管理' }
+  }
+  if (process.platform === 'win32') {
+    if (DSH_CONTROL_MODE === 'systemd') return { supported: false, code: 'CONTROL_MODE_MISMATCH', message: 'Windows 环境不能使用 systemd 控制 DSH' }
+    return { supported: true, manager: 'windows' }
+  }
+  if (DSH_CONTROL_MODE === 'windows') return { supported: false, code: 'CONTROL_MODE_MISMATCH', message: '当前系统不能使用 Windows Service 控制 DSH' }
+  if (DSH_CONTROL_MODE === 'systemd' || (process.env.DSH_REMOTE_SYSTEMCTL && SYSTEMCTL !== 'systemctl')) {
+    return { supported: true, manager: 'systemd' }
+  }
+  if (containerRuntimeDetected()) {
+    return { supported: false, code: 'EXTERNAL_LIFECYCLE', message: '当前网关运行在容器中，DSH 生命周期应由 Docker、面板或其他外部平台管理' }
+  }
+  if (!fs.existsSync('/run/systemd/system')) {
+    return { supported: false, code: 'EXTERNAL_LIFECYCLE', message: '当前环境没有 systemd，DSH 可能由 Docker、面板或其他外部平台管理' }
+  }
+  return { supported: true, manager: 'systemd' }
+}
+
+const ADVERTISED_HOSTS = configuredAdvertisedHosts()
+const DSH_CONTROL_SUPPORT = dshControlSupport()
 const VERSION = gatewayVersion()
 const PROTOCOL_VERSION = 1
 const CAPABILITIES = Object.freeze({
@@ -111,7 +161,7 @@ const CAPABILITIES = Object.freeze({
   eventPolling: 1,
   workspaceFiles: 2,
   imagePromptTransport: 1,
-  dshLifecycle: 2,
+  dshLifecycle: DSH_CONTROL_SUPPORT.supported ? 2 : 0,
   centralAnnouncements: 2,
   feedback: 1,
   deviceKeys: 1,
@@ -141,10 +191,16 @@ const MIME = {
 // 所有 /fs/* 路径 resolve 后都必须位于某个根内, 已存在的路径还会用 realpath
 // 复核一次, 防止 ../ 穿越与符号链接逃逸。
 const FS_DEFAULT_ROOT = path.resolve(os.homedir())
+function fsConfiguredRoot(value) {
+  const raw = String(value || '').trim()
+  if (!raw || raw === '~') return raw === '~' ? FS_DEFAULT_ROOT : ''
+  if (/^~[\\/]/.test(raw)) return path.resolve(FS_DEFAULT_ROOT, raw.slice(2))
+  return path.resolve(raw)
+}
 const FS_ROOTS = (process.env.DSH_REMOTE_FS_ROOT || FS_DEFAULT_ROOT)
   .split(path.delimiter)
+  .map(fsConfiguredRoot)
   .filter(Boolean)
-  .map(r => path.resolve(r.trim() === '~' ? FS_DEFAULT_ROOT : r.trim()))
 const FS_WORKSPACE_CACHE_MS = durationEnv('DSH_REMOTE_FS_WORKSPACE_CACHE_MS', 15_000, 1000, 10 * 60_000)
 const FS_MAX_UPLOAD = Number(process.env.DSH_REMOTE_FS_MAX_UPLOAD) || 2 * 1024 * 1024 * 1024
 const FS_UPLOAD_TTL_MS = durationEnv('DSH_REMOTE_FS_UPLOAD_TTL_MS', 24 * 60 * 60 * 1000, 60_000, 7 * 24 * 60 * 60 * 1000)
@@ -159,7 +215,7 @@ function fsRootReals() {
 }
 function fsInsideReal(real) {
   for (const root of [...fsRootReals(), ...fsWorkspaceRootsCache.reals]) {
-    if (real === root || real.startsWith(root + path.sep)) return true
+    if (fsInsideRoot(real, root)) return true
   }
   return false
 }
@@ -925,6 +981,9 @@ async function dshServiceStatus() {
   if (!/^[A-Za-z0-9_.@-]+$/.test(DSH_SERVICE)) {
     return { ok: false, supported: false, running: false, service: DSH_SERVICE, code: 'INVALID_SERVICE', message: 'DSH_REMOTE_DSH_SERVICE 服务名配置不合法' }
   }
+  if (!DSH_CONTROL_SUPPORT.supported) {
+    return { ok: true, supported: false, running: false, service: DSH_SERVICE, ...DSH_CONTROL_SUPPORT }
+  }
   if (process.platform === 'win32') return windowsServiceStatus()
   const r = await execFileResult(SYSTEMCTL, [
     '--user', 'show', DSH_SERVICE,
@@ -2026,6 +2085,7 @@ function serveAdminApi(req, res, url) {
         port: PORT,
         protocol: { version: PROTOCOL_VERSION },
         capabilities: CAPABILITIES,
+        dshControl: DSH_CONTROL_SUPPORT,
         upstream: { url: UPSTREAM.origin, reachable },
         latest: {
           version: latestState.version,
@@ -2243,8 +2303,19 @@ function fsAuthorized(req, url, res) {
   return true
 }
 
+function fsInsideRootFor(pathApi, abs, root, caseInsensitive = false) {
+  let candidate = pathApi.resolve(String(abs || ''))
+  let boundary = pathApi.resolve(String(root || ''))
+  if (caseInsensitive) {
+    candidate = candidate.toLowerCase()
+    boundary = boundary.toLowerCase()
+  }
+  const relative = pathApi.relative(boundary, candidate)
+  return relative === '' || (relative !== '..' && !relative.startsWith('..' + pathApi.sep) && !pathApi.isAbsolute(relative))
+}
+
 function fsInsideRoot(abs, root) {
-  return abs === root || abs.startsWith(root + path.sep)
+  return fsInsideRootFor(path, abs, root, process.platform === 'win32')
 }
 
 function fsWorkspacePath(value) {
@@ -2289,7 +2360,7 @@ async function fsResolve(input) {
   const raw = String(input ?? '').trim()
   let abs
   if (!raw || raw === '~') abs = FS_ROOTS[0]
-  else if (raw.startsWith('~/')) abs = path.resolve(FS_DEFAULT_ROOT, raw.slice(2))
+  else if (/^~[\\/]/.test(raw)) abs = path.resolve(FS_DEFAULT_ROOT, raw.slice(2))
   else if (path.isAbsolute(raw)) abs = path.resolve(raw)
   else abs = path.resolve(FS_ROOTS[0], raw) // 相对路径按默认根解析
   if (FS_ROOTS.some(root => fsInsideRoot(abs, root))) return { abs }
@@ -2386,6 +2457,7 @@ async function fsList(req, res, url) {
       if (!info.isFile() && !info.isDirectory()) continue
       entries.push({
         name: d.name,
+        path: full,
         type: info.isDirectory() ? 'dir' : 'file',
         size: info.isDirectory() ? 0 : info.size,
         mtimeMs: Math.round(info.mtimeMs)
@@ -2398,7 +2470,13 @@ async function fsList(req, res, url) {
     if (a.type !== b.type) return a.type === 'dir' ? -1 : 1
     return a.name.localeCompare(b.name, 'zh-CN', { numeric: true })
   })
-  fsJson(res, 200, { path: resolved.abs, entries })
+  fsJson(res, 200, {
+    path: resolved.abs,
+    entries,
+    roots: FS_ROOTS,
+    platform: process.platform,
+    separator: path.sep,
+  })
 }
 
 async function fsFile(req, res, url) {
@@ -3309,6 +3387,7 @@ async function serveHealth(req, res, url) {
     version: VERSION,
     protocol: { version: PROTOCOL_VERSION },
     capabilities: CAPABILITIES,
+    dshControl: DSH_CONTROL_SUPPORT,
     pid: process.pid,
     upstream: UPSTREAM.origin,
     upstreamProbe: DSH_HEALTH_PATH,
@@ -3322,12 +3401,12 @@ async function serveHealth(req, res, url) {
 }
 
 function lanAddresses() {
-  const out = []
+  const out = [...ADVERTISED_HOSTS]
   let groups
   try { groups = Object.values(os.networkInterfaces()) } catch { return out }
   for (const infos of groups) {
     for (const info of infos || []) {
-      if (info.family === 'IPv4' && !info.internal) out.push(info.address)
+      if (info.family === 'IPv4' && !info.internal && !out.includes(info.address)) out.push(info.address)
     }
   }
   return out

package/index.mjs

@@ -70,17 +70,34 @@ try {
 let dshListen = { host: '127.0.0.1', port: 3080 }
 
 function lanIPs() {
-  const out = []
+  const out = [...configuredAdvertisedHosts()]
   let groups
   try { groups = Object.values(networkInterfaces()) } catch { return out }
   for (const list of groups) {
     for (const it of list ?? []) {
-      if (it.family === 'IPv4' && !it.internal) out.push(it.address)
+      if (it.family === 'IPv4' && !it.internal && !out.includes(it.address)) out.push(it.address)
     }
   }
   return out
 }
 
+function validAdvertisedHost(value) {
+  const host = String(value || '').trim()
+  if (!host || host.length > 253 || host === '0.0.0.0' || host === '127.0.0.1') return ''
+  if (!/^[A-Za-z0-9.-]+$/.test(host) || host.startsWith('.') || host.endsWith('.') || host.includes('..')) return ''
+  if (/^\d+(?:\.\d+){3}$/.test(host) && host.split('.').some(part => Number(part) > 255)) return ''
+  const labels = host.split('.')
+  if (labels.some(label => !label || label.length > 63 || label.startsWith('-') || label.endsWith('-'))) return ''
+  return host
+}
+
+function configuredAdvertisedHosts() {
+  return [...new Set(String(process.env.DSH_REMOTE_ADVERTISE_HOSTS || '')
+    .split(/[\s,]+/)
+    .map(validAdvertisedHost)
+    .filter(Boolean))]
+}
+
 function targetPath(pathname) {
   let rel
   try {
@@ -152,7 +169,7 @@ function runExit(cmd, args) {
 
 const GATEWAY_ENV_KEYS = [
   'TOKEN', 'TOKEN_FILE', 'DSH_REMOTE_TOKEN', 'DSH_REMOTE_DEVICE_KEYS', 'DSH_REMOTE_FS_ROOT', 'DSH_REMOTE_FS_WORKSPACE_CACHE_MS', 'DSH_REMOTE_FS_MAX_UPLOAD',
-  'DSH_REMOTE_NOTES', 'DSH_REMOTE_WORKBENCH', 'DSH_REMOTE_DSH_SERVICE', 'DSH_REMOTE_SYSTEMCTL',
+  'DSH_REMOTE_NOTES', 'DSH_REMOTE_WORKBENCH', 'DSH_REMOTE_ADVERTISE_HOSTS', 'DSH_REMOTE_DSH_SERVICE', 'DSH_REMOTE_SYSTEMCTL', 'DSH_REMOTE_DSH_CONTROL_MODE',
   'DSH_REMOTE_DSH_CONTROL_TIMEOUT_MS', 'DSH_REMOTE_DSH_CONTROL_POLL_MS', 'DSH_REMOTE_FEEDBACK_URL',
   'UPDATE_CHECK_URL', 'UPDATE_INTERVAL_MS', 'UPDATE_PROXY', 'DSH_HEALTH_PATH',
   'GATEWAY_WS_IDLE_MS', 'GATEWAY_WS_PING_MS', 'GATEWAY_WS_PONG_TIMEOUT_MS',
@@ -552,6 +569,7 @@ async function serveStatic(req, res, ctx) {
         feedback: 0,
         deviceKeys: 0,
       },
+      dshControl: { supported: false, code: 'EXTERNAL_LIFECYCLE', message: '插件内嵌模式不负责管理 DSH 自身进程' },
       deviceKeys: { supported: false, enabled: false, entries: [] },
       upstream: { url: 'DSH 内嵌(同进程, 无需网关)', reachable: true },
       latest: { version, newer: false },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-remote-plugin",
-  "version": "0.6.16",
+  "version": "0.6.17",
   "description": "DSH Remote 官方 bundle 插件：DSH 左侧原生边栏入口 + 右侧抽屉内嵌管理控制台；内置网关随 DSH 自动启停(systemd 独立单元)，抽屉直显令牌与设备监控；网关提供 /fs/* 文件传输端点(列表/断点下载/上传)，配合 Android App 远程操控会话/审批/提问/goal 与文件互传(多服务器测速切换、聊天记录离线缓存)。",
   "type": "module",
   "main": "./index.mjs",

package/public/admin.html

@@ -113,6 +113,8 @@
     .host-ip-title { font-size: 16px; font-weight: 750; }
     .host-ip-head .muted { margin-top: 4px; font-size: 12px; }
     .host-ip-badge { flex: none; padding: 5px 9px; border: 1px solid var(--dsr-accent-line); border-radius: 999px; color: var(--dsr-accent-strong); background: var(--dsr-accent-soft); font-size: 11px; font-weight: 700; }
+    .host-ip-head-actions { display: flex; align-items: center; justify-content: flex-end; gap: 8px; flex-wrap: wrap; }
+    .host-ip-remove { margin-left: 8px; padding: 3px 7px; }
     .host-ip-desc { margin: 12px 0; color: var(--dsr-muted); font-size: 12px; line-height: 1.55; }
     .host-ip-table-wrap { overflow: hidden; border: 1px solid var(--dsr-line); border-radius: 13px; }
     .host-ip-table { width: 100%; border-collapse: collapse; }
@@ -465,7 +467,10 @@
             <div class="host-ip-title" data-i18n="hostIPs.title">主机 IP 地址</div>
             <div id="host-ip-summary" class="muted" data-i18n="hostIPs.loading">正在读取主机地址…</div>
           </div>
-          <div class="host-ip-badge" data-i18n="hostIPs.badge">手机连接候选</div>
+          <div class="host-ip-head-actions">
+            <button id="btn-host-ip-add" class="mini-btn" type="button" data-i18n="hostIPs.add">添加宿主地址</button>
+            <div class="host-ip-badge" data-i18n="hostIPs.badge">手机连接候选</div>
+          </div>
         </div>
         <div class="host-ip-desc" data-i18n="hostIPs.desc">关闭虚拟机、容器或其他无效地址后，它们不会再写入配对二维码，也不会作为诊断和防火墙建议地址。</div>
         <div class="host-ip-table-wrap">
@@ -473,7 +478,7 @@
             <thead><tr><th data-i18n="hostIPs.enabledColumn">启用</th><th data-i18n="hostIPs.addressColumn">主机 IP</th><th data-i18n="hostIPs.statusColumn">状态</th></tr></thead>
             <tbody id="host-ip-rows"></tbody>
           </table>
-          <div id="host-ip-empty" class="host-ip-empty hidden" data-i18n="hostIPs.empty">暂无可用的非回环 IPv4 地址</div>
+          <div id="host-ip-empty" class="host-ip-empty hidden" data-i18n="hostIPs.empty">暂无可用的非回环地址</div>
         </div>
       </section>
 
@@ -601,13 +606,13 @@
         'badge.embedded': '内嵌', 'badge.gateway': '网关', 'badge.connected': '已连接',
         'badge.gateway.title': '新标签页打开网关管理面板', 'badge.gatewayDown': '网关未运行',
         'token.pluginNoGateway': '插件模式 · 未接网关, 无需令牌', 'token.unavailable': '未获取到令牌',
-        'toast.tokenInvalid': '令牌无效', 'toast.connFailed': '连接失败',
+        'toast.tokenInvalid': '令牌无效', 'toast.connFailed': '连接失败', 'toast.authLayer': '登录代理拦截了管理 API，请检查 /remote/* 的认证规则',
         'stat.pluginVersion': '插件版本', 'stat.gatewayVersion': '网关版本',
         'stat.updateAvailable': '{version} 可用', 'stat.currentV': '当前 v{version}',
         'stat.download': '去下载', 'stat.embedded': 'DSH 内嵌 · 免网关',
         'stat.updateCheck': '更新检查: {error}', 'stat.latest': '已是最新(来源检查)', 'stat.notChecked': '未检查更新',
         'stat.hostIP': '主机 IP · {hostname}', 'stat.ipSep': '、', 'stat.phoneGateway': ' (手机连 {port} 网关)', 'stat.phoneThis': ' (手机连这个地址)',
-        'hostIPs.title': '主机 IP 地址', 'hostIPs.badge': '手机连接候选', 'hostIPs.loading': '正在读取主机地址…', 'hostIPs.summary': '已启用 {enabled}/{total} 个地址', 'hostIPs.desc': '关闭虚拟机、容器或其他无效地址后，它们不会再写入配对二维码，也不会作为诊断和防火墙建议地址。', 'hostIPs.enabledColumn': '启用', 'hostIPs.addressColumn': '主机 IP', 'hostIPs.statusColumn': '状态', 'hostIPs.enabled': '已启用 · 会用于配对', 'hostIPs.disabled': '已关闭 · 不用于配对', 'hostIPs.enable': '切换此地址', 'hostIPs.empty': '暂无可用的非回环 IPv4 地址', 'hostIPs.keepOne': '至少保留一个可用地址',
+        'hostIPs.title': '主机 IP 地址', 'hostIPs.badge': '手机连接候选', 'hostIPs.loading': '正在读取主机地址…', 'hostIPs.summary': '已启用 {enabled}/{total} 个地址', 'hostIPs.desc': '关闭虚拟机、容器或其他无效地址后，它们不会再写入配对二维码，也不会作为诊断和防火墙建议地址。Docker 中可手动添加宿主地址。', 'hostIPs.enabledColumn': '启用', 'hostIPs.addressColumn': '主机 IP', 'hostIPs.statusColumn': '状态', 'hostIPs.enabled': '已启用 · 会用于配对', 'hostIPs.disabled': '已关闭 · 不用于配对', 'hostIPs.enable': '切换此地址', 'hostIPs.empty': '暂无可用的非回环地址', 'hostIPs.keepOne': '至少保留一个可用地址', 'hostIPs.add': '添加宿主地址', 'hostIPs.addPrompt': '输入手机可访问的宿主 IP 或主机名：', 'hostIPs.invalid': '地址格式无效', 'hostIPs.exists': '该地址已在列表中', 'hostIPs.remove': '删除',
         'stat.reachable': '可达', 'stat.unreachable': '不可达', 'stat.dshUpstream': 'DSH 上游 {url}',
         'stat.devicesOnline': '设备在线 / 累计', 'stat.totalRequests': '总请求数', 'stat.authFailures': '认证失败',
         'stat.uptime': '运行时长 · {host}:{port}',
@@ -711,13 +716,13 @@
         'badge.embedded': 'Embedded', 'badge.gateway': 'Gateway', 'badge.connected': 'Connected',
         'badge.gateway.title': 'Open gateway admin in a new tab', 'badge.gatewayDown': 'Gateway not running',
         'token.pluginNoGateway': 'Plugin mode · no gateway, no token needed', 'token.unavailable': 'Token unavailable',
-        'toast.tokenInvalid': 'Invalid token', 'toast.connFailed': 'Connection failed',
+        'toast.tokenInvalid': 'Invalid token', 'toast.connFailed': 'Connection failed', 'toast.authLayer': 'The login proxy blocked the admin API; check authentication rules for /remote/*',
         'stat.pluginVersion': 'Plugin version', 'stat.gatewayVersion': 'Gateway version',
         'stat.updateAvailable': 'v{version} available', 'stat.currentV': 'Current v{version}',
         'stat.download': 'Download', 'stat.embedded': 'Embedded in DSH · no gateway',
         'stat.updateCheck': 'Update check: {error}', 'stat.latest': 'Up to date (source check)', 'stat.notChecked': 'Not checked',
         'stat.hostIP': 'Host IP · {hostname}', 'stat.ipSep': ', ', 'stat.phoneGateway': ' (phone connects to gateway {port})', 'stat.phoneThis': ' (phone connects to this address)',
-        'hostIPs.title': 'Host IP addresses', 'hostIPs.badge': 'Phone connection candidates', 'hostIPs.loading': 'Reading host addresses…', 'hostIPs.summary': '{enabled}/{total} addresses enabled', 'hostIPs.desc': 'Disabled virtual-machine, container, or other invalid addresses are excluded from pairing QR codes, diagnostics, and firewall suggestions.', 'hostIPs.enabledColumn': 'Enabled', 'hostIPs.addressColumn': 'Host IP', 'hostIPs.statusColumn': 'Status', 'hostIPs.enabled': 'Enabled · used for pairing', 'hostIPs.disabled': 'Disabled · excluded from pairing', 'hostIPs.enable': 'Toggle this address', 'hostIPs.empty': 'No usable non-loopback IPv4 address', 'hostIPs.keepOne': 'Keep at least one usable address enabled',
+        'hostIPs.title': 'Host IP addresses', 'hostIPs.badge': 'Phone connection candidates', 'hostIPs.loading': 'Reading host addresses…', 'hostIPs.summary': '{enabled}/{total} addresses enabled', 'hostIPs.desc': 'Disabled virtual-machine, container, or other invalid addresses are excluded from pairing QR codes, diagnostics, and firewall suggestions. In Docker, add a host address manually.', 'hostIPs.enabledColumn': 'Enabled', 'hostIPs.addressColumn': 'Host IP', 'hostIPs.statusColumn': 'Status', 'hostIPs.enabled': 'Enabled · used for pairing', 'hostIPs.disabled': 'Disabled · excluded from pairing', 'hostIPs.enable': 'Toggle this address', 'hostIPs.empty': 'No usable non-loopback address', 'hostIPs.keepOne': 'Keep at least one usable address enabled', 'hostIPs.add': 'Add host address', 'hostIPs.addPrompt': 'Enter a host IP or hostname reachable by the phone:', 'hostIPs.invalid': 'Invalid address format', 'hostIPs.exists': 'This address is already listed', 'hostIPs.remove': 'Remove',
         'stat.reachable': 'Reachable', 'stat.unreachable': 'Unreachable', 'stat.dshUpstream': 'DSH upstream {url}',
         'stat.devicesOnline': 'Devices online / total', 'stat.totalRequests': 'Total requests', 'stat.authFailures': 'Auth failures',
         'stat.uptime': 'Uptime · {host}:{port}',

package/public/admin.js

@@ -18,6 +18,13 @@ const store = {
   del(k) { try { localStorage.removeItem(k) } catch {} }
 }
 let token = store.get('dshAdminToken') || new URLSearchParams(location.search).get('token') || ''
+function adminHeaders(extra = {}, accessToken = token) {
+  const headers = { 'x-dsh-remote-client': 'admin', ...extra }
+  // /remote/* 可能由 Caddy Basic Auth 保护。插件路由自身已在 DSH 登录态内，
+  // 这里不能再写 Authorization: Bearer，否则会覆盖浏览器的 Basic 凭据并形成 401 循环。
+  if (!pluginMode && accessToken) headers.authorization = 'Bearer ' + accessToken
+  return headers
+}
 let timer = null
 let gatewayRunning = false
 let gatewayBusy = false
@@ -32,17 +39,31 @@ let gatewayPortLoaded = false
 let doctorExpanded = store.get('dshAdminDoctorCollapsed') !== '1'
 let doctorChecks = []
 const HOST_IP_SELECTION_KEY = 'dshAdminEnabledHostIPsV1'
+const MANUAL_HOST_IP_KEY = 'dshAdminManualHostIPsV1'
 
 function normalizedHostIPs(st) {
-  return Array.isArray(st?.lanIPs)
-    ? [...new Set(st.lanIPs.map(value => String(value || '').trim()).filter(value => value && value !== '127.0.0.1' && value !== '0.0.0.0'))]
-    : []
+  const detected = Array.isArray(st?.lanIPs) ? st.lanIPs : []
+  return [...new Set([...detected, ...manualHostIPs(st)].map(validManualHost).filter(Boolean))]
+}
+
+function validManualHost(value) {
+  const host = String(value || '').trim()
+  if (!host || host.length > 253 || host === '0.0.0.0' || host === '127.0.0.1') return ''
+  if (!/^[A-Za-z0-9.-]+$/.test(host) || host.startsWith('.') || host.endsWith('.') || host.includes('..')) return ''
+  if (/^\d+(?:\.\d+){3}$/.test(host) && host.split('.').some(part => Number(part) > 255)) return ''
+  const labels = host.split('.')
+  if (labels.some(label => !label || label.length > 63 || label.startsWith('-') || label.endsWith('-'))) return ''
+  return host
 }
 
 function hostIPScope(st) {
   return [st?.hostname || location.hostname || 'host', st?.host || ''].join('|')
 }
 
+function manualHostIPScope(st) {
+  return st?.hostname || location.hostname || 'host'
+}
+
 function hostIPPreferences() {
   try {
     const value = JSON.parse(store.get(HOST_IP_SELECTION_KEY) || '{}')
@@ -52,6 +73,26 @@ function hostIPPreferences() {
   }
 }
 
+function manualHostPreferences() {
+  try {
+    const value = JSON.parse(store.get(MANUAL_HOST_IP_KEY) || '{}')
+    return value && typeof value === 'object' && !Array.isArray(value) ? value : {}
+  } catch {
+    return {}
+  }
+}
+
+function manualHostIPs(st) {
+  const values = manualHostPreferences()[manualHostIPScope(st)]
+  return Array.isArray(values) ? [...new Set(values.map(validManualHost).filter(Boolean))] : []
+}
+
+function saveManualHostIPs(st, values) {
+  const prefs = manualHostPreferences()
+  prefs[manualHostIPScope(st)] = [...new Set(values.map(validManualHost).filter(Boolean))]
+  store.set(MANUAL_HOST_IP_KEY, JSON.stringify(prefs))
+}
+
 function enabledHostIPs(st) {
   const all = normalizedHostIPs(st)
   if (!all.length) return []
@@ -67,9 +108,33 @@ function saveEnabledHostIPs(st, selected) {
   store.set(HOST_IP_SELECTION_KEY, JSON.stringify(prefs))
 }
 
+function addManualHostIP() {
+  if (!lastState) return
+  const input = prompt(t('hostIPs.addPrompt'), '')
+  if (input === null) return
+  const host = validManualHost(input)
+  if (!host) {
+    toast(t('hostIPs.invalid'), 'err')
+    return
+  }
+  if (normalizedHostIPs(lastState).includes(host)) {
+    toast(t('hostIPs.exists'), 'err')
+    return
+  }
+  saveManualHostIPs(lastState, [...manualHostIPs(lastState), host])
+  saveEnabledHostIPs(lastState, [...enabledHostIPs(lastState), host])
+  render(lastState)
+}
+
+function removeManualHostIP(st, host) {
+  saveManualHostIPs(st, manualHostIPs(st).filter(value => value !== host))
+  render(st)
+}
+
 function renderHostIPs(st) {
   const all = normalizedHostIPs(st)
   const selected = enabledHostIPs(st)
+  const manual = new Set(manualHostIPs(st))
   const rows = $('host-ip-rows')
   const empty = $('host-ip-empty')
   const summary = $('host-ip-summary')
@@ -80,7 +145,7 @@ function renderHostIPs(st) {
   rows.innerHTML = all.map(ip => `<tr>
     <td class="host-ip-toggle"><label class="host-ip-switch" title="${esc(t('hostIPs.enable'))}"><input type="checkbox" data-host-ip-toggle="${esc(ip)}" ${selected.includes(ip) ? 'checked' : ''}><span aria-hidden="true"></span></label></td>
     <td class="mono host-ip-value">${esc(ip)}</td>
-    <td class="host-ip-use">${esc(t(selected.includes(ip) ? 'hostIPs.enabled' : 'hostIPs.disabled'))}</td>
+    <td class="host-ip-use">${esc(t(selected.includes(ip) ? 'hostIPs.enabled' : 'hostIPs.disabled'))}${manual.has(ip) ? ` <button class="mini-btn host-ip-remove" type="button" data-host-ip-remove="${esc(ip)}">${esc(t('hostIPs.remove'))}</button>` : ''}</td>
   </tr>`).join('')
   empty.classList.toggle('hidden', all.length > 0)
   rows.querySelectorAll('[data-host-ip-toggle]').forEach(input => input.addEventListener('change', () => {
@@ -95,6 +160,9 @@ function renderHostIPs(st) {
     saveEnabledHostIPs(st, next)
     render(st)
   }))
+  rows.querySelectorAll('[data-host-ip-remove]').forEach(button => button.addEventListener('click', () => {
+    removeManualHostIP(st, button.dataset.hostIpRemove)
+  }))
 }
 
 function onlineClientDevices(st) {
@@ -183,7 +251,7 @@ async function loadStats() {
   if (!token && !pluginMode) return
   try {
     const res = await fetch(`${STATS_API}/summary?days=7`, {
-      headers: { authorization: 'Bearer ' + token, 'x-dsh-remote-client': 'admin' }
+      headers: adminHeaders(), credentials: 'same-origin'
     })
     if (!res.ok) {
       if (res.status === 401) return
@@ -204,7 +272,7 @@ async function loadGatewayConfig() {
   if (!pluginMode) return
   try {
     const res = await fetch(`${API}/config`, {
-      headers: { authorization: 'Bearer ' + token, 'x-dsh-remote-client': 'admin' }
+      headers: adminHeaders(), credentials: 'same-origin'
     })
     const out = await res.json().catch(() => ({}))
     if (out.ok) {
@@ -355,15 +423,19 @@ async function loadState() {
   if (!token && !pluginMode) return
   try {
     const res = await fetch(`${API}/state`, {
-      headers: { authorization: 'Bearer ' + token, 'x-dsh-remote-client': 'admin' }
+      headers: adminHeaders(), credentials: 'same-origin'
     })
-    if (res.status === 401) throw new Error('AUTH')
+    if (res.status === 401) throw new Error(pluginMode ? 'AUTH_LAYER' : 'AUTH')
+    if (pluginMode && !String(res.headers.get('content-type') || '').includes('application/json')) throw new Error('AUTH_LAYER')
     const st = await res.json()
     render(st)
   } catch (e) {
     if (e.message === 'AUTH') {
       toast(t('toast.tokenInvalid'), 'err')
       logout()
+    } else if (e.message === 'AUTH_LAYER') {
+      $('conn-badge').textContent = t('toast.authLayer')
+      $('conn-badge').className = 'conn-badge off'
     } else {
       $('conn-badge').textContent = t('toast.connFailed')
       $('conn-badge').className = 'conn-badge off'
@@ -530,7 +602,7 @@ async function setNote(ip, current) {
   if (name === null) return
   const res = await fetch(`${API}/note`, {
     method: 'POST',
-    headers: { 'content-type': 'application/json', authorization: 'Bearer ' + token, 'x-dsh-remote-client': 'admin' },
+    headers: adminHeaders({ 'content-type': 'application/json' }), credentials: 'same-origin',
     body: JSON.stringify({ ip, name })
   })
   if (res.ok) {
@@ -545,7 +617,7 @@ async function kick(ip) {
   if (!confirm(t('confirm.kick'))) return
   const res = await fetch(`${API}/kick`, {
     method: 'POST',
-    headers: { 'content-type': 'application/json', authorization: 'Bearer ' + token, 'x-dsh-remote-client': 'admin' },
+    headers: adminHeaders({ 'content-type': 'application/json' }), credentials: 'same-origin',
     body: JSON.stringify({ ip })
   })
   if (res.ok) {
@@ -563,7 +635,7 @@ async function deviceKeyMutation(action, payload = {}) {
   try {
     const res = await fetch(`${API}/device-keys/${action}`, {
       method: 'POST',
-      headers: { 'content-type': 'application/json', authorization: 'Bearer ' + token, 'x-dsh-remote-client': 'admin' },
+      headers: adminHeaders({ 'content-type': 'application/json' }), credentials: 'same-origin',
       body: JSON.stringify(payload),
     })
     const out = await res.json().catch(() => ({}))
@@ -755,6 +827,8 @@ $('btn-qr').addEventListener('click', () => {
   renderQr(lastState || { mode: '', token: shownToken })
 })
 
+$('btn-host-ip-add').addEventListener('click', addManualHostIP)
+
 /* 右上角「网关」徽章: 新标签页打开独立网关管理面板(带 token 免登录) */
 $('conn-badge').addEventListener('click', () => {
   const st = lastState
@@ -774,7 +848,7 @@ $('btn-rotate').addEventListener('click', async () => {
   try {
     const res = await fetch(`${API}/token/rotate`, {
       method: 'POST',
-      headers: { authorization: 'Bearer ' + (token || shownToken), 'x-dsh-remote-client': 'admin' }
+      headers: adminHeaders({}, token || shownToken), credentials: 'same-origin'
     })
     const out = await res.json().catch(() => ({}))
     if (out.ok && out.token) {
@@ -799,7 +873,7 @@ $('btn-gateway').addEventListener('click', async () => {
   try {
     const res = await fetch(`${API}/gateway`, {
       method: 'POST',
-      headers: { 'content-type': 'application/json', authorization: 'Bearer ' + token, 'x-dsh-remote-client': 'admin' },
+      headers: adminHeaders({ 'content-type': 'application/json' }), credentials: 'same-origin',
       body: JSON.stringify({ action: gatewayRunning ? 'stop' : 'start' })
     })
     const out = await res.json().catch(() => ({}))
@@ -829,7 +903,7 @@ $('btn-save-port').addEventListener('click', async () => {
   try {
     const res = await fetch(`${API}/config`, {
       method: 'PUT',
-      headers: { 'content-type': 'application/json', authorization: 'Bearer ' + token, 'x-dsh-remote-client': 'admin' },
+      headers: adminHeaders({ 'content-type': 'application/json' }), credentials: 'same-origin',
       body: JSON.stringify({ port })
     })
     const out = await res.json().catch(() => ({}))

package/public/app.js

@@ -90,7 +90,7 @@ const state = {
   streamMode: 'ws', // 'ws' | 'poll'
   pollSeq: { mux: 0, host: 0 },
   refreshTimer: null,
-  fs: { path: null, initial: null, loaded: false, upload: null, workspaceId: LS.get('fsWorkspaceIdV1', ''), preview: null },
+  fs: { path: null, initial: null, loaded: false, upload: null, workspaceId: LS.get('fsWorkspaceIdV1', ''), roots: [], rootIndex: 0, preview: null },
   composerImages: [], // 当前草稿中的图片附件：只在发送成功后释放
   models: { loaded: false, loading: false, groups: [], current: null, failures: [] },
   modelSettings: { status: 'idle', error: '', writable: false, hasDocument: false, providers: [], namespaces: [], credentials: {} },
@@ -536,6 +536,55 @@ async function safeRpc(method, payload, errText) {
   }
 }
 
+let hostDescribePromise = null
+let hostDescribeRetryTimer = null
+let hostDescribeFailures = 0
+
+function scheduleHostDescribeRetry() {
+  if (!state.token || hostDescribeRetryTimer) return
+  const delays = [2000, 5000, 15000, 30000, 60000]
+  const delay = delays[Math.min(Math.max(0, hostDescribeFailures - 1), delays.length - 1)]
+  hostDescribeRetryTimer = setTimeout(() => {
+    hostDescribeRetryTimer = null
+    void refreshHostDescription()
+  }, delay)
+}
+
+async function refreshHostDescription({ notify = false } = {}) {
+  if (!state.token) return null
+  if (hostDescribePromise) return hostDescribePromise
+  const server = state.server
+  hostDescribePromise = (async () => {
+    try {
+      const host = await rpc('host.describe', {}, 5000)
+      if (server !== state.server) return null
+      state.hostInfo = host
+      const health = activeGatewayHealth()
+      if (health) health.upstreamReachable = true
+      hostDescribeFailures = 0
+      if (hostDescribeRetryTimer) clearTimeout(hostDescribeRetryTimer)
+      hostDescribeRetryTimer = null
+      const desc = $('host-desc')
+      if (desc && host) desc.textContent = t('settings.hostDesc', { version: host.version, cwd: host.cwd, n: host.attachedSessions })
+      renderOverview()
+      return host
+    } catch (error) {
+      if (server !== state.server) return null
+      if (error.message === 'AUTH') authFailure()
+      else {
+        hostDescribeFailures++
+        scheduleHostDescribeRetry()
+        if (notify) toast(`${t('settings.probeFailed')}：${error.message}`, 'err')
+      }
+      return null
+    } finally {
+      hostDescribePromise = null
+      if (server !== state.server) scheduleHostDescribeRetry()
+    }
+  })()
+  return hostDescribePromise
+}
+
 function authFailure() {
   toast(t('err.accessDenied'), 'err')
   showView('view-settings')
@@ -640,7 +689,10 @@ async function pingServer(base) {
     const res = await fetch(u + '/health?t=' + Date.now(), { signal: ctrl.signal, cache: 'no-store' })
     if (!res.ok) return Infinity
     const health = await res.json().catch(() => null)
-    if (health && typeof health === 'object') state.gatewayHealth[u] = health
+    if (health && typeof health === 'object') {
+      state.gatewayHealth[u] = health
+      renderOverview()
+    }
     return Math.round(performance.now() - t0)
   } catch {
     return Infinity
@@ -650,12 +702,22 @@ async function pingServer(base) {
 }
 
 function activeGatewayCapability(name) {
-  const key = String(state.server || location.origin || '').replace(/\/+$/, '')
-  const capabilities = state.gatewayHealth[key]?.capabilities
+  const capabilities = activeGatewayHealth()?.capabilities
   if (!capabilities || !Object.prototype.hasOwnProperty.call(capabilities, name)) return null
   return Number(capabilities[name]) > 0
 }
 
+function activeGatewayHealth() {
+  const key = String(state.server || location.origin || '').replace(/\/+$/, '')
+  return state.gatewayHealth[key] || null
+}
+
+function dshReachable() {
+  const health = activeGatewayHealth()
+  if (health && typeof health.upstreamReachable === 'boolean') return health.upstreamReachable
+  return !!state.hostInfo
+}
+
 async function selectFastestServer({ silent = false, reconnect = true } = {}) {
   if (state.selectingServer) return null
   state.selectingServer = true
@@ -687,6 +749,11 @@ async function selectFastestServer({ silent = false, reconnect = true } = {}) {
 
     renderServers()
     if (chosen !== state.server) {
+      state.hostInfo = null
+      hostDescribeFailures = 0
+      if (hostDescribeRetryTimer) clearTimeout(hostDescribeRetryTimer)
+      hostDescribeRetryTimer = null
+      resetFsForServer()
       state.server = chosen
       if (state.autoSelect[state.activeGroup] !== false && best) {
         const srv = state.servers.find(s => s.url === best)
@@ -809,6 +876,7 @@ function renderServers() {
     // 手动模式: 点击条目 = 选中该服务器连接
     state.groupActive[group] = id
     state.activeGroup = group
+    if (state.server !== s.url) resetFsForServer()
     state.server = s.url
     saveServers()
     renderServers()
@@ -863,10 +931,14 @@ function editServer(id) {
   const group = prompt(t('servers.promptEditGroup'), s.group || '默认')
   if (group === null) return
   const wasActive = state.server === s.url
+  const changedActiveUrl = wasActive && state.server !== raw
   s.url = raw
   s.note = note.trim()
   s.group = ensureGroup(group.trim() || '默认')
-  if (wasActive) state.server = raw
+  if (wasActive) {
+    if (changedActiveUrl) resetFsForServer()
+    state.server = raw
+  }
   saveServers()
   renderServers()
   toast(t('servers.edited'), 'ok')
@@ -1090,7 +1162,11 @@ function openStream(kind, handler, refreshOnOpen, isRestore, ticket = null) {
       renderPending()
     }
     if (refreshOnOpen) refreshAll()
-    if (allStreamsOpen()) resyncAfterStreamOpen()
+    if (allStreamsOpen()) {
+      resyncAfterStreamOpen()
+      void pingServer(state.server || location.origin)
+      void refreshHostDescription()
+    }
   }
   ws.onmessage = (msg) => {
     if (!streamIsCurrent(kind, ws, generation)) return
@@ -1573,7 +1649,13 @@ function workspaceOptionLabel(workspace) {
 function workspaceOptionsHtml({ all = false, ungrouped = false, root = false, selected = '' } = {}) {
   const rows = []
   if (all) rows.push({ id: '', label: t('workspace.all') })
-  if (root) rows.push({ id: '', label: t('fs.root') })
+  if (root) {
+    const roots = state.fs.roots.length ? state.fs.roots : ['']
+    roots.forEach((rootPath, index) => rows.push({
+      id: index === 0 ? '' : `__fs_root__:${index}`,
+      label: rootPath && roots.length > 1 ? `${t('fs.root')} — ${rootPath}` : t('fs.root'),
+    }))
+  }
   for (const workspace of workspaceItems()) rows.push({ id: workspace.workspaceId, label: workspaceOptionLabel(workspace) })
   if (ungrouped) rows.push({ id: WORKSPACE_UNGROUPED, label: t('workspace.ungrouped') })
   return rows.map(row => `<option value="${esc(row.id)}"${row.id === selected ? ' selected' : ''}>${esc(row.label)}</option>`).join('')
@@ -1601,7 +1683,8 @@ function renderWorkspaceNavigation() {
   }
   const fsSelect = $('fs-workspace')
   if (fsSelect) {
-    fsSelect.innerHTML = workspaceOptionsHtml({ root: true, selected: state.fs.workspaceId })
+    const selected = state.fs.workspaceId || (state.fs.rootIndex > 0 ? `__fs_root__:${state.fs.rootIndex}` : '')
+    fsSelect.innerHTML = workspaceOptionsHtml({ root: true, selected })
     syncCustomSelect(fsSelect)
   }
   if ($('modal-new-session') && !$('modal-new-session').classList.contains('hidden')) renderNewSessionWorkspace()
@@ -3036,7 +3119,7 @@ function renderOverview() {
     // 独立网关页面默认走同源，此时 state.server 合法地为空；不能因此把
     // 已连接网关误报为离线。Capacitor 等非 HTTP 页面仍要求显式服务器。
     gateway: !!state.token && (!!state.server || /^https?:$/.test(location.protocol)),
-    dsh: !!state.hostInfo,
+    dsh: dshReachable(),
     mux: !!state.streamsOk?.mux,
     host: !!state.streamsOk?.host
   }
@@ -3280,14 +3363,80 @@ function fsHeaders() {
 }
 
 function fsJoin(dir, name) {
-  return dir.replace(/\/+$/, '') + '/' + name
+  const meta = fsPathMeta(dir)
+  if (!meta.value) return String(name || '')
+  return meta.value.endsWith(meta.separator) ? meta.value + name : meta.value + meta.separator + name
 }
 
 function fsParent(p) {
-  const clean = String(p || '').replace(/\/+$/, '')
-  const idx = clean.lastIndexOf('/')
-  if (idx <= 0) return clean === '' ? '' : '/'
-  return clean.slice(0, idx)
+  const meta = fsPathMeta(p)
+  if (!meta.value) return ''
+  if (meta.root && fsPathEqual(meta.value, meta.root)) return meta.root
+  const idx = meta.value.lastIndexOf(meta.separator)
+  if (idx < 0) return meta.root || ''
+  const parent = meta.value.slice(0, idx)
+  return meta.root && parent.length < meta.root.length ? meta.root : (parent || meta.root)
+}
+
+function fsPathMeta(input) {
+  const source = String(input || '').trim()
+  const windows = /^[A-Za-z]:(?:[\\/]|$)/.test(source) || /^[\\/]{2}[^\\/]+[\\/][^\\/]+/.test(source) || source.includes('\\')
+  if (!windows) {
+    let value = source.replace(/\/+/g, '/')
+    const root = value.startsWith('/') ? '/' : ''
+    if (root && value.length > root.length) value = value.replace(/\/+$/, '')
+    return { value, root, separator: '/', windows: false }
+  }
+  let value = source.replace(/\//g, '\\')
+  const unc = /^\\{2,}/.test(value)
+  value = unc
+    ? '\\\\' + value.replace(/^\\+/, '').replace(/\\+/g, '\\')
+    : value.replace(/\\+/g, '\\')
+  let root = ''
+  if (unc) {
+    const parts = value.slice(2).split('\\').filter(Boolean)
+    root = parts.length >= 2 ? `\\\\${parts[0]}\\${parts[1]}` : value
+  } else {
+    const drive = /^([A-Za-z]:)/.exec(value)
+    if (drive) {
+      root = drive[1] + '\\'
+      if (value === drive[1]) value = root
+    }
+  }
+  if (root && value.length > root.length) value = value.replace(/\\+$/, '')
+  return { value, root, separator: '\\', windows: true }
+}
+
+function fsPathKey(value) {
+  const meta = fsPathMeta(value)
+  return meta.windows ? meta.value.toLowerCase() : meta.value
+}
+
+function fsPathEqual(left, right) {
+  return fsPathKey(left) === fsPathKey(right)
+}
+
+function fsPathInside(candidate, root) {
+  const child = fsPathMeta(candidate)
+  const boundary = fsPathMeta(root)
+  if (!child.value || !boundary.value || child.windows !== boundary.windows) return false
+  const childKey = child.windows ? child.value.toLowerCase() : child.value
+  const rootKey = boundary.windows ? boundary.value.toLowerCase() : boundary.value
+  if (childKey === rootKey) return true
+  const prefix = rootKey.endsWith(boundary.separator) ? rootKey : rootKey + boundary.separator
+  return childKey.startsWith(prefix)
+}
+
+function resetFsForServer() {
+  state.fs.path = null
+  state.fs.initial = null
+  state.fs.loaded = false
+  state.fs.upload = null
+  state.fs.preview = null
+  state.fs.roots = []
+  state.fs.rootIndex = 0
+  state.fs.workspaceId = ''
+  LS.del('fsWorkspaceIdV1')
 }
 
 const FS_PREVIEW_EXTENSIONS = new Set([
@@ -3403,7 +3552,14 @@ async function loadFs(dir, { silent = false, resetRoot = false } = {}) {
     if (!res.ok || !Array.isArray(data.entries)) throw new Error(data.error === 'not-found' ? t('fs.notFound') : data.error === 'forbidden' ? t('fs.forbidden') : data.error || ('HTTP ' + res.status))
     state.fs.path = data.path
     if (!state.fs.initial) state.fs.initial = data.path
+    if (Array.isArray(data.roots) && data.roots.length) state.fs.roots = data.roots.map(value => String(value || '')).filter(Boolean)
+    if (!state.fs.roots.length) state.fs.roots = [data.path]
+    if (!state.fs.workspaceId) {
+      const rootIndex = state.fs.roots.findIndex(root => fsPathInside(data.path, root))
+      if (rootIndex >= 0) state.fs.rootIndex = rootIndex
+    }
     state.fs.loaded = true
+    renderWorkspaceNavigation()
     renderFs(data)
   } catch (e) {
     if (e.message === 'AUTH') return
@@ -3807,11 +3963,12 @@ async function runFsUpload(up) {
 
 function fsUp() {
   if (!state.fs.path || !state.fs.initial) return
-  if (state.fs.path === state.fs.initial) {
+  const parent = fsParent(state.fs.path)
+  if (fsPathEqual(state.fs.path, state.fs.initial) || !fsPathInside(parent, state.fs.initial)) {
     toast(t('fs.alreadyRoot'))
     return
   }
-  loadFs(fsParent(state.fs.path))
+  loadFs(parent)
 }
 
 function bindFsPullRefresh() {
@@ -5570,6 +5727,7 @@ function applyPairUrl(url) {
     if (!tok || !servers.length) return false
     state.token = tok
     LS.set('token', tok)
+    if (state.server !== servers[0]) resetFsForServer()
     state.server = servers[0]
     for (let i = servers.length - 1; i >= 0; i--) {
       const server = servers[i]
@@ -6003,7 +6161,10 @@ function renderDshControlStatus(value) {
 async function loadDshControl() {
   if (!state.token || !$('dsh-control-desc')) return
   if (activeGatewayCapability('dshLifecycle') === false) {
-    renderDshControlStatus({ supported: false, message: t('settings.dshUnsupported') })
+    renderDshControlStatus({
+      supported: false,
+      message: activeGatewayHealth()?.dshControl?.message || t('settings.dshUnsupported')
+    })
     return
   }
   try {
@@ -6282,12 +6443,20 @@ function bindUi() {
     renderSessions()
   })
   $('fs-workspace').addEventListener('change', (e) => {
-    state.fs.workspaceId = e.target.value
+    const rootMatch = /^__fs_root__:(\d+)$/.exec(e.target.value)
+    if (rootMatch) {
+      state.fs.rootIndex = Math.min(Number(rootMatch[1]), Math.max(0, state.fs.roots.length - 1))
+      state.fs.workspaceId = ''
+    } else {
+      state.fs.rootIndex = 0
+      state.fs.workspaceId = e.target.value
+    }
     if (state.fs.workspaceId) LS.set('fsWorkspaceIdV1', state.fs.workspaceId)
     else LS.del('fsWorkspaceIdV1')
     state.fs.loaded = false
     const workspace = workspaceById(state.fs.workspaceId)
-    loadFs(workspace?.path || null, { resetRoot: true })
+    const rootPath = !workspace && rootMatch ? state.fs.roots[state.fs.rootIndex] : null
+    loadFs(workspace?.path || rootPath || null, { resetRoot: true })
   })
   $('file-preview-close').addEventListener('click', closeFsPreview)
   $('file-preview-done').addEventListener('click', closeFsPreview)
@@ -6459,11 +6628,7 @@ function bindUi() {
     if (e.key === 'Enter' && !e.isComposing) { e.preventDefault(); addServer() }
   })
   $('btn-host-describe').addEventListener('click', async () => {
-    const v = await safeRpc('host.describe', {}, t('settings.probeFailed'))
-    if (v) {
-      state.hostInfo = v
-      $('host-desc').textContent = t('settings.hostDesc', { version: v.version, cwd: v.cwd, n: v.attachedSessions })
-    }
+    await refreshHostDescription({ notify: true })
   })
   $('btn-dsh-start')?.addEventListener('click', () => controlDsh('start'))
   $('btn-dsh-restart')?.addEventListener('click', () => controlDsh('restart'))
@@ -6632,8 +6797,7 @@ async function boot() {
     await maybeWarnAppBehindGateway({ probe: true })
     openStreams()
     await refreshAll()
-    const host = await safeRpc('host.describe', {}, '')
-    if (host) { state.hostInfo = host; $('host-desc').textContent = t('settings.hostDesc', { version: host.version, cwd: host.cwd, n: host.attachedSessions }) }
+    await refreshHostDescription()
     loadDshControl()
   }
   // 网关从中央 HTTPS 公告源读取并在不可达时回退内置文件。前台每 30 秒检查，

package/public/desktop/desktop.css

@@ -334,6 +334,7 @@ button.ds-overview-attention-item, button.ds-overview-session-item { cursor:poin
 
 /* 文件传输 */
 .ds-fs-bar { display: flex; align-items: center; gap: 8px; margin: 8px 0; }
+.ds-fs-root { max-width: 260px; min-width: 120px; border: 1px solid var(--dsr-line); border-radius: 9px; background: var(--dsr-panel); color: var(--dsr-text); padding: 7px 9px; }
 .ds-fs-path { flex: 1; min-width: 0; font-size: 12.5px; color: var(--dsr-muted); white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
 .ds-fs-list { flex: 1; min-height: 0; overflow-y: auto; overscroll-behavior: contain; border: 1px solid var(--dsr-line); border-radius: 12px; background: var(--dsr-panel); }
 .ds-fs-row { display: flex; align-items: center; gap: 9px; padding: 9px 12px; border-bottom: 1px solid var(--dsr-divider); font-size: 13px; }

package/public/desktop/desktop.html

@@ -189,7 +189,8 @@
           <div class="ds-section-label" data-i18n="ds.files">文件传输</div>
           <div class="ds-fs-bar">
             <button id="fs-up" class="ds-btn" data-i18n="ds.fsUp">上级</button>
-            <span id="fs-path" class="ds-fs-path">/</span>
+            <select id="fs-root" class="ds-fs-root hidden" data-i18n-aria="ds.fsRoot" aria-label="允许根目录"></select>
+            <span id="fs-path" class="ds-fs-path">~</span>
             <button id="fs-new-workspace" class="ds-btn" data-i18n="ds.fsNewWorkspace">新建工作区</button>
             <button id="fs-refresh" class="ds-btn" data-i18n="ds.fsRefresh">刷新</button>
           </div>
@@ -458,7 +459,7 @@
         'ds.cmdCompact': '/compact 压缩对话历史', 'ds.cmdExport': '/export 导出会话日志 ZIP',
         'ds.cmdFeedback': '/feedback 反馈当前会话', 'ds.cmdGoal': '/goal 设置/查看任务目标',
         'ds.cmdPermission': '/permission 切换权限预设', 'ds.cmdPlan': '/plan 进入/退出计划模式',
-        'ds.fsUp': '上级', 'ds.fsNewWorkspace': '新建工作区', 'ds.fsRefresh': '刷新', 'ds.fsEmpty': '目录为空',
+        'ds.fsUp': '上级', 'ds.fsRoot': '允许根目录', 'ds.fsNewWorkspace': '新建工作区', 'ds.fsRefresh': '刷新', 'ds.fsEmpty': '目录为空',
         'ds.workspaceCreateTitle': '新建工作区', 'ds.workspaceCreateDesc': '将在当前文件目录下创建文件夹，并自动打开新会话。', 'ds.workspaceParent': '父目录', 'ds.workspaceNamePlaceholder': '例如：my-project', 'ds.workspaceCreate': '创建并打开', 'ds.cancel': '取消', 'ds.workspaceNameRequired': '请输入工作区名称', 'ds.workspaceExists': '该目录已存在', 'ds.workspaceInvalidName': '名称不能包含路径分隔符', 'ds.workspaceCreateFailed': '创建工作区失败', 'ds.workspaceCreated': '工作区已创建', 'ds.workspaceCreatedNoSession': '工作区已创建，但新会话未能打开',
         'ds.groupGeneral': '通用', 'ds.groupGeneralDesc': '工具调用、预设提示词',
         'ds.groupServers': '服务器', 'ds.groupServersDesc': '服务器地址',
@@ -560,7 +561,7 @@
         'ds.cmdCompact': '/compact Compress conversation history', 'ds.cmdExport': '/export Export session log ZIP',
         'ds.cmdFeedback': '/feedback Feedback current session', 'ds.cmdGoal': '/goal Set/view task goal',
         'ds.cmdPermission': '/permission Switch permission preset', 'ds.cmdPlan': '/plan Enter/exit plan mode',
-        'ds.fsUp': 'Up', 'ds.fsNewWorkspace': 'New workspace', 'ds.fsRefresh': 'Refresh', 'ds.fsEmpty': 'Empty directory',
+        'ds.fsUp': 'Up', 'ds.fsRoot': 'Allowed root', 'ds.fsNewWorkspace': 'New workspace', 'ds.fsRefresh': 'Refresh', 'ds.fsEmpty': 'Empty directory',
         'ds.workspaceCreateTitle': 'New workspace', 'ds.workspaceCreateDesc': 'Create a folder in the current file directory and open a new session there.', 'ds.workspaceParent': 'Parent folder', 'ds.workspaceNamePlaceholder': 'For example: my-project', 'ds.workspaceCreate': 'Create & open', 'ds.cancel': 'Cancel', 'ds.workspaceNameRequired': 'Enter a workspace name', 'ds.workspaceExists': 'That folder already exists', 'ds.workspaceInvalidName': 'The name cannot contain path separators', 'ds.workspaceCreateFailed': 'Could not create workspace', 'ds.workspaceCreated': 'Workspace created', 'ds.workspaceCreatedNoSession': 'Workspace created, but the new session could not be opened',
         'ds.groupGeneral': 'General', 'ds.groupGeneralDesc': 'Tool calls, prompt presets',
         'ds.groupServers': 'Servers', 'ds.groupServersDesc': 'Server address',

package/public/desktop/desktop.js

@@ -88,7 +88,7 @@ const state = {
   },
   streamMode: 'ws', // 'ws' | 'poll'
   pollSeq: { mux: 0, host: 0 },
-  fs: { path: null, initial: null, loaded: false },
+  fs: { path: null, initial: null, loaded: false, roots: [], rootIndex: 0 },
   models: { loaded: false, loading: false, groups: [], current: null, failures: [] },
   wb: { bound: false, path: '', title: '', expanded: false, projects: null, open: null, apiMissing: false },
   archivedIds: [],
@@ -603,6 +603,49 @@ async function safeRpc(method, payload, errText) {
     return null
   }
 }
+let hostDescribePromise = null
+let hostDescribeRetryTimer = null
+let hostDescribeFailures = 0
+
+function scheduleHostDescribeRetryDesktop() {
+  if (!state.token || hostDescribeRetryTimer) return
+  const delays = [2000, 5000, 15000, 30000, 60000]
+  const delay = delays[Math.min(Math.max(0, hostDescribeFailures - 1), delays.length - 1)]
+  hostDescribeRetryTimer = setTimeout(() => {
+    hostDescribeRetryTimer = null
+    void refreshHostDescriptionDesktop()
+  }, delay)
+}
+
+async function refreshHostDescriptionDesktop({ notify = false } = {}) {
+  if (!state.token) return null
+  if (hostDescribePromise) return hostDescribePromise
+  const server = state.server
+  hostDescribePromise = (async () => {
+    try {
+      const host = await rpc('host.describe', {}, 5000)
+      if (server !== state.server) return null
+      state.hostInfo = host
+      const health = activeGatewayHealth()
+      if (health) health.upstreamReachable = true
+      hostDescribeFailures = 0
+      if (hostDescribeRetryTimer) clearTimeout(hostDescribeRetryTimer)
+      hostDescribeRetryTimer = null
+      renderOverviewDesktop()
+      return host
+    } catch (error) {
+      if (server !== state.server) return null
+      hostDescribeFailures++
+      scheduleHostDescribeRetryDesktop()
+      if (notify) toast(error.message === 'AUTH' ? t('ds.toastAuth') : error.message, 'err')
+      return null
+    } finally {
+      hostDescribePromise = null
+      if (server !== state.server) scheduleHostDescribeRetryDesktop()
+    }
+  })()
+  return hostDescribePromise
+}
 function uuid() {
   try { return crypto.randomUUID() } catch { return 'id-' + Date.now() + '-' + Math.random().toString(36).slice(2) }
 }
@@ -676,16 +719,29 @@ async function pingServer(base) {
     const res = await fetch(u + '/health?t=' + Date.now(), { signal: ctrl.signal, cache: 'no-store' })
     if (!res.ok) return Infinity
     const health = await res.json().catch(() => null)
-    if (health && typeof health === 'object') state.gatewayHealth[u] = health
+    if (health && typeof health === 'object') {
+      state.gatewayHealth[u] = health
+      renderOverviewDesktop()
+    }
     return Math.round(performance.now() - t0)
   } catch { return Infinity } finally { clearTimeout(timer) }
 }
 function activeGatewayCapability(name) {
-  const key = String(state.server || location.origin || '').replace(/\/+$/, '')
-  const capabilities = state.gatewayHealth[key]?.capabilities
+  const capabilities = activeGatewayHealth()?.capabilities
   if (!capabilities || !Object.prototype.hasOwnProperty.call(capabilities, name)) return null
   return Number(capabilities[name]) > 0
 }
+
+function activeGatewayHealth() {
+  const key = String(state.server || location.origin || '').replace(/\/+$/, '')
+  return state.gatewayHealth[key] || null
+}
+
+function dshReachable() {
+  const health = activeGatewayHealth()
+  if (health && typeof health.upstreamReachable === 'boolean') return health.upstreamReachable
+  return !!state.hostInfo
+}
 async function selectFastestServer({ silent = false, reconnect = true } = {}) {
   if (state.selectingServer) return null
   state.selectingServer = true
@@ -709,6 +765,11 @@ async function selectFastestServer({ silent = false, reconnect = true } = {}) {
     }
     renderServers()
     if (chosen !== state.server) {
+      state.hostInfo = null
+      hostDescribeFailures = 0
+      if (hostDescribeRetryTimer) clearTimeout(hostDescribeRetryTimer)
+      hostDescribeRetryTimer = null
+      resetFsForServerDesktop()
       state.server = chosen
       if (best) { const srv = state.servers.find(s => s.url === best); if (srv) state.groupActive[state.activeGroup] = srv.id }
       saveServers()
@@ -794,6 +855,7 @@ function renderServers() {
     if (state.autoSelect[s.group] !== false) { editServer(id); return }
     state.groupActive[s.group] = id
     state.activeGroup = s.group
+    if (state.server !== s.url) resetFsForServerDesktop()
     state.server = s.url
     saveServers()
     renderServers()
@@ -836,8 +898,12 @@ function editServer(id) {
   const group = prompt(t('ds.serversPromptEditGroup'), s.group || '默认')
   if (group === null) return
   const wasActive = state.server === s.url
+  const changedActiveUrl = wasActive && state.server !== raw
   s.url = raw; s.note = note.trim(); s.group = ensureGroup(group.trim() || '默认')
-  if (wasActive) state.server = raw
+  if (wasActive) {
+    if (changedActiveUrl) resetFsForServerDesktop()
+    state.server = raw
+  }
   saveServers(); renderServers(); toast(t('ds.serversEdited'), 'ok')
   if (wasActive && state.token) selectFastestServer({ silent: true })
 }
@@ -1020,7 +1086,11 @@ function openStream(kind, handler, refreshOnOpen, isRestore, ticket = null) {
     updateConn()
     if (kind === 'mux') { state.approvals = []; state.questions = []; renderNotifStack() }
     if (refreshOnOpen) refreshSessions()
-    if (allStreamsOpen()) resyncAfterStreamOpen()
+    if (allStreamsOpen()) {
+      resyncAfterStreamOpen()
+      void pingServer(state.server || location.origin)
+      void refreshHostDescriptionDesktop()
+    }
   }
   ws.onmessage = (msg) => {
     if (!streamIsCurrent(kind, ws, generation)) return
@@ -1966,10 +2036,70 @@ function fsHeaders() {
   return { authorization: 'Bearer ' + state.token, 'x-dsh-remote-client': 'web', ...clientIdHeaders() }
 }
 function fsParent(p) {
-  if (!p) return null
-  const parts = String(p).split('/').filter(Boolean)
-  parts.pop()
-  return parts.length ? '/' + parts.join('/') : '/'
+  const meta = fsPathMeta(p)
+  if (!meta.value) return null
+  if (meta.root && fsPathEqual(meta.value, meta.root)) return meta.root
+  const idx = meta.value.lastIndexOf(meta.separator)
+  if (idx < 0) return meta.root || null
+  const parent = meta.value.slice(0, idx)
+  return meta.root && parent.length < meta.root.length ? meta.root : (parent || meta.root)
+}
+function fsJoin(dir, name) {
+  const meta = fsPathMeta(dir)
+  if (!meta.value) return String(name || '')
+  return meta.value.endsWith(meta.separator) ? meta.value + name : meta.value + meta.separator + name
+}
+function fsPathMeta(input) {
+  const source = String(input || '').trim()
+  const windows = /^[A-Za-z]:(?:[\\/]|$)/.test(source) || /^[\\/]{2}[^\\/]+[\\/][^\\/]+/.test(source) || source.includes('\\')
+  if (!windows) {
+    let value = source.replace(/\/+/g, '/')
+    const root = value.startsWith('/') ? '/' : ''
+    if (root && value.length > root.length) value = value.replace(/\/+$/, '')
+    return { value, root, separator: '/', windows: false }
+  }
+  let value = source.replace(/\//g, '\\')
+  const unc = /^\\{2,}/.test(value)
+  value = unc
+    ? '\\\\' + value.replace(/^\\+/, '').replace(/\\+/g, '\\')
+    : value.replace(/\\+/g, '\\')
+  let root = ''
+  if (unc) {
+    const parts = value.slice(2).split('\\').filter(Boolean)
+    root = parts.length >= 2 ? `\\\\${parts[0]}\\${parts[1]}` : value
+  } else {
+    const drive = /^([A-Za-z]:)/.exec(value)
+    if (drive) {
+      root = drive[1] + '\\'
+      if (value === drive[1]) value = root
+    }
+  }
+  if (root && value.length > root.length) value = value.replace(/\\+$/, '')
+  return { value, root, separator: '\\', windows: true }
+}
+function fsPathKey(value) {
+  const meta = fsPathMeta(value)
+  return meta.windows ? meta.value.toLowerCase() : meta.value
+}
+function fsPathEqual(left, right) { return fsPathKey(left) === fsPathKey(right) }
+function fsPathInside(candidate, root) {
+  const child = fsPathMeta(candidate)
+  const boundary = fsPathMeta(root)
+  if (!child.value || !boundary.value || child.windows !== boundary.windows) return false
+  const childKey = child.windows ? child.value.toLowerCase() : child.value
+  const rootKey = boundary.windows ? boundary.value.toLowerCase() : boundary.value
+  if (childKey === rootKey) return true
+  const prefix = rootKey.endsWith(boundary.separator) ? rootKey : rootKey + boundary.separator
+  return childKey.startsWith(prefix)
+}
+function resetFsForServerDesktop() {
+  state.fs.path = null
+  state.fs.initial = null
+  state.fs.loaded = false
+  state.fs.roots = []
+  state.fs.rootIndex = 0
+  const select = $('fs-root')
+  if (select) select.classList.add('hidden')
 }
 async function openWorkspaceModal() {
   if (!state.token) { toast(t('ds.toastAuth'), 'err'); showView('view-settings'); return }
@@ -2031,10 +2161,15 @@ async function loadFs(dir, silent) {
     if (!res.ok || !Array.isArray(data.entries)) throw new Error(data.error || ('HTTP ' + res.status))
     state.fs.path = data.path
     if (!state.fs.initial) state.fs.initial = data.path
+    if (Array.isArray(data.roots) && data.roots.length) state.fs.roots = data.roots.map(value => String(value || '')).filter(Boolean)
+    if (!state.fs.roots.length) state.fs.roots = [data.path]
+    const rootIndex = state.fs.roots.findIndex(root => fsPathInside(data.path, root))
+    if (rootIndex >= 0) state.fs.rootIndex = rootIndex
     state.fs.loaded = true
+    renderFsRootsDesktop()
     $('fs-path').textContent = data.path
     $('fs-list').innerHTML = (data.entries || []).map(e => `
-      <div class="ds-fs-row" data-fs-path="${esc(e.path)}" data-fs-dir="${e.type === 'dir' ? '1' : '0'}">
+      <div class="ds-fs-row" data-fs-path="${esc(e.path || fsJoin(data.path, e.name))}" data-fs-dir="${e.type === 'dir' ? '1' : '0'}">
         <span class="ds-fs-type">${desktopFsIconSvg(e.type === 'dir')}</span>
         <span class="ds-fs-name">${esc(e.name)}</span>
         <span class="ds-fs-size">${e.type === 'dir' ? '' : fmtSize(e.size)}</span>
@@ -2049,15 +2184,23 @@ async function loadFs(dir, silent) {
   }
 }
 
+function renderFsRootsDesktop() {
+  const select = $('fs-root')
+  if (!select) return
+  select.classList.toggle('hidden', state.fs.roots.length <= 1)
+  select.innerHTML = state.fs.roots.map((root, index) => `<option value="${index}"${index === state.fs.rootIndex ? ' selected' : ''}>${esc(root)}</option>`).join('')
+}
+
 function desktopFsIconSvg(isDir) {
   return isDir
     ? '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.7" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M3.5 6.5h6l2 2H20a1 1 0 0 1 1 1v8.5a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V7.5a1 1 0 0 1 .5-1Z"/></svg>'
     : '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.7" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M6 3.5h8l4 4V20a1 1 0 0 1-1 1H6a1 1 0 0 1-1-1V4.5a1 1 0 0 1 1-1Z"/><path d="M14 3.5v4h4M8 13h8M8 16h6"/></svg>'
 }
 function fsUp() {
-  if (state.fs.path && state.fs.initial && state.fs.path !== state.fs.initial) {
-    loadFs(fsParent(state.fs.path))
-  }
+  if (!state.fs.path || !state.fs.initial) return
+  const parent = fsParent(state.fs.path)
+  if (fsPathEqual(state.fs.path, state.fs.initial) || !fsPathInside(parent, state.fs.initial)) return
+  loadFs(parent)
 }
 
 /* ---------------- 工作台绑定 / 项目会话 ---------------- */
@@ -2431,7 +2574,7 @@ function renderOverviewDesktop() {
   const checks = {
     // 桌面独立页面默认使用当前 origin，state.server 为空不代表网关离线。
     gateway: !!state.token && (!!state.server || /^https?:$/.test(location.protocol)),
-    dsh: !!state.hostInfo,
+    dsh: dshReachable(),
     mux: !!state.streamsOk?.mux,
     host: !!state.streamsOk?.host
   }
@@ -2626,8 +2769,7 @@ function bindUi() {
     toast(t('ds.loading'))
     if (state.token) {
       await refreshSessions()
-      const host = await safeRpc('host.describe', {}, '')
-      if (host) state.hostInfo = host
+      await refreshHostDescriptionDesktop({ notify: true })
     }
     renderOverviewDesktop()
   })
@@ -2791,6 +2933,12 @@ function bindUi() {
     renderServers(); renderSessions(); renderNotifStack(); renderOverviewDesktop(); updateConn(); themeApply()
   })
   $('fs-up').addEventListener('click', fsUp)
+  $('fs-root').addEventListener('change', (event) => {
+    const index = Math.min(Number(event.target.value) || 0, Math.max(0, state.fs.roots.length - 1))
+    state.fs.rootIndex = index
+    state.fs.initial = null
+    loadFs(state.fs.roots[index] || null, true)
+  })
   $('fs-new-workspace').addEventListener('click', openWorkspaceModal)
   $('fs-refresh').addEventListener('click', () => loadFs(state.fs.path || null))
   $('btn-question-submit').addEventListener('click', submitQuestion)
@@ -2813,11 +2961,10 @@ async function start() {
   updateConn()
   checkNotesOnStart()
   if (state.token) {
-    if (state.servers.length) await selectFastestServer({ silent: true, reconnect: false })
+    await selectFastestServer({ silent: true, reconnect: false })
     openStreams()
     await refreshSessions()
-    const host = await safeRpc('host.describe', {}, '')
-    if (host) state.hostInfo = host
+    await refreshHostDescriptionDesktop()
     refreshWorkbench({ silent: true })
   }
   renderOverviewDesktop()

package/public/update.json

@@ -1,10 +1,14 @@
 {
-  "version": "0.6.16",
+  "version": "0.6.17",
   "apkUrl": "dsh-remote.apk",
-  "sha256": "f2bae1c266867199cc0c21f9e9d08714543acd1b186220f3de906712ba1d9518",
-  "releasedAt": "2026-08-27T05:20:03.020Z",
-  "notes": "0.6.16：Windows 端 DSH 服务启动/重启接入 Windows Service（实验性功能），启动后继续检查 DSH HTTP 与 mux/host 实时通道；空对话退出时清理 App 本地残留；网关控制台主机 IP 改为可逐项启用的地址表，关闭地址不再进入配对二维码、诊断和防火墙建议；Android 设置新增模型配置、自定义模型思考深度档位和小米/系统 ASR 功能测试，支持复制设备、权限、partial/final、session 重建和错误诊断日志。",
+  "sha256": "fb9c0cc12d1e6479d509f5755090aa95ddff904bbd213545b8eb547030e7d1a3",
+  "releasedAt": "2026-08-28T05:53:18.723Z",
+  "notes": "0.6.17：修复 host.describe 初次失败后总览误报 DSH 上游离线并增加恢复重试；识别 Docker、无 systemd 和插件内嵌等外部生命周期环境，隐藏不可用的 DSH 启停并给出明确提示；兼容 Caddy Basic Auth，避免管理 API 覆盖 Authorization 导致登录循环；支持通过环境变量或管理页手动补充 Docker 宿主、局域网和 Tailscale 地址并写入配对二维码；完整适配 Windows 盘符、UNC、多文件根和跨主机文件路径清理，并新增 Windows 原生 CI 安全门禁。",
   "history": [
+    {
+      "version": "0.6.17",
+      "notes": "0.6.17：修复 host.describe 初次失败后总览误报 DSH 上游离线并增加恢复重试；识别 Docker、无 systemd 和插件内嵌等外部生命周期环境，隐藏不可用的 DSH 启停并给出明确提示；兼容 Caddy Basic Auth，避免管理 API 覆盖 Authorization 导致登录循环；支持通过环境变量或管理页手动补充 Docker 宿主、局域网和 Tailscale 地址并写入配对二维码；完整适配 Windows 盘符、UNC、多文件根和跨主机文件路径清理，并新增 Windows 原生 CI 安全门禁。"
+    },
     {
       "version": "0.6.16",
       "notes": "0.6.16：Windows 端 DSH 服务启动/重启接入 Windows Service（实验性功能），启动后继续检查 DSH HTTP 与 mux/host 实时通道；空对话退出时清理 App 本地残留；网关控制台主机 IP 改为可逐项启用的地址表，关闭地址不再进入配对二维码、诊断和防火墙建议；Android 设置新增模型配置、自定义模型思考深度档位和小米/系统 ASR 功能测试，支持复制设备、权限、partial/final、session 重建和错误诊断日志。"
@@ -40,10 +44,6 @@
     {
       "version": "0.6.8",
       "notes": "0.6.8 正式版：重构手机端、桌面端和插件管理界面；新增工作台、图片附件、历史公告和全屏输入；修复会话布局、系统提示裁切、主题图标对比度与全屏输入高度问题。"
-    },
-    {
-      "version": "0.6.7",
-      "notes": "修复手机端左滑归档松手后按钮不固定；新增云端公告弹窗，支持按 App 版本和有效期定向发布；新增工作台绑定与项目级会话；新增手机端左滑归档和二次确认；新增手机回车行为设置；新增归档会话折叠和 /permission 参数选择。"
     }
   ]
 }

package/public/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "0.6.16"
+  "version": "0.6.17"
 }