Bug: All copy buttons in the web UI silently fail when accessed over HTTP (non-secure context) #17553

Description

Problem

All copy buttons in the web UI (code block copy, assistant response copy, shell output copy, copy path, etc.) silently fail when the app is accessed over a non-secure context (e.g. HTTP over LAN via `opencode web`).

Root cause

Every copy handler called navigator.clipboard.writeText() directly. The Clipboard API requires a secure context (HTTPS or localhost). When the server is accessed via a local network IP (http://192.168.x.x:PORT), the browser rejects the call — and because most handlers had no error handling, the rejection was silently swallowed, making buttons appear to do nothing.

The only working copy in the whole app was the share-URL copy in use-session-commands.tsx, which already had a document.execCommand("copy") fallback.

Plugins

No response

OpenCode version

1.2.25

Steps to reproduce

1. Run opencode web --hostname 0.0.0.0 --port 39769 and access the UI from another device or via LAN IP (HTTP, not localhost)
2. Open any session with file context
3. Click the "Copy path" button on any file reference
4. Nothing happens — no feedback, no copy

Screenshot and/or share link

No response

Operating System

NixOS 25.11

Terminal

No response