refactor(file,shell,process): 去 gin 化——标准库 http.HandlerFunc + webhttp.Router 适配层

- 新增 webhttp 包: Router 最小路由接口(5 动词) + ServeMuxRouter 适配器 + WriteJSON 统一响应 - file/shell/process 三个被控能力包改以标准库 handler 形态注册, 不再绑死 gin - 由此 gin 及其连带重依赖(quic-go/http3、mongo bson、ugorji codec、goccy、validator)退出被控端二进制 - shell: recDir 死参数修复——原实现硬编码 ./rec, 传入的录制目录不生效; 现录制写入与记录列表同源 - shell: 终端创建失败由 panic 改为记日志后关连接(net/http 按连接兜底恢复, 不再依赖框架 Recovery) - file: 上传落盘不再沿用 SaveUploadedFile 的 MkdirAll+Chmod(Windows 盘根 Chmod 报参数不正确), 保留 MkdirAll 去掉 Chmod - 消费方: remote-client 纯 ServeMux 承载; remote-service 保留 gin 栈经 gin.WrapH 桥接(middle 链照常生效) 破坏性变更: RegisterRouters* 形参 gin.RouterGroup → webhttp.Router, 升级 tag v0.5.0
fix(shell): Web 终端 resize 失效修复——前端 resize 消息 Data 字段反序列化为 map[string]interface{}, 对 ResizeDataType 的直接类型断言恒失败被静默吞掉, PTY 固定 180x30 与窗口脱节; 改为二次 marshal+unmarshal 解码行列并校验正值后 SetSize
2026-09-29 08:26:23 +08:00 · 2026-09-25 10:09:39 +08:00 · 2026-09-23 20:01:56 +08:00 · 2026-09-23 19:55:37 +08:00 · 2026-09-23 19:39:08 +08:00 · 2026-09-20 12:50:55 +08:00
17 changed files with 1745 additions and 495 deletions
@@ -0,0 +1,11 @@
+# common
+
+通用小工具（自 remote-backend-server internal/libs/common 裁剪）。
+
+## 用法
+
+```go
+import "git.zeroonesoft.cn/golib/remote-core/common"
+
+exists, err := common.PathExists("C:\\data") // 文件/目录是否存在
+```
@@ -0,0 +1,26 @@
+# file
+
+被控端文件管理 HTTP 能力（自 remote-backend-server internal/handlers/file 移植，
+去 DB 依赖）：目录浏览、改名、删除、上传、下载（断点支持）、目录创建。
+
+## 路由
+
+```go
+import "git.zeroonesoft.cn/golib/remote-core/file"
+
+file.RegisterRoutersGatewayFile(r *gin.RouterGroup)
+```
+
+| 方法 | 路径 | 说明 |
+|---|---|---|
+| GET/POST | `/file/list` | 目录列表（POST 收 JSON `{path}`，避免路径含 `#` 等字符被 query 截断） |
+| PUT | `/file/name` | 重命名 |
+| DELETE | `/file` | 删除文件/目录 |
+| GET/HEAD | `/file/download` | 下载（HEAD 取大小，GET 支持 Range 续传） |
+| POST | `/file/upload` | 上传 |
+| POST | `/file/dir` | 创建目录 |
+
+## 注意
+
+- 与 shell/process 同为被控 HTTP 能力，经 zonat 隧道 + web-gateway 反代出网。
+- 路径参数来自控制端，接入公网前务必在网关侧做鉴权与路径白名单校验。
@@ -1,217 +1,150 @@
 package file

 // 移植自 remote-backend-server internal/handlers/file(去 DB 依赖)。
+// 标准库 http.HandlerFunc 形态, 路由注册经 webhttp.Router 适配(去 gin 化)。

 import (
+	"encoding/json"
 	"fmt"
-	"github.com/gin-gonic/gin"
-	"github.com/jaypipes/ghw"
-	"github.com/shirou/gopsutil/v3/disk"
-	
+	"io"
 	"net/http"
 	"os"
 	"path/filepath"
-	"git.zeroonesoft.cn/golib/remote-core/common"
 	"strconv"
+
+	"github.com/jaypipes/ghw"
+	"github.com/shirou/gopsutil/v3/disk"
+
+	"git.zeroonesoft.cn/golib/remote-core/common"
+	"git.zeroonesoft.cn/golib/remote-core/webhttp"
 )

-// RegisterRoutersGatewayFile 注册路由
-func RegisterRoutersGatewayFile(r *gin.RouterGroup) {
-	r.GET("/file/list", getGatewayFileList())
-	r.POST("/file/list", postGatewayFileList())
-	r.DELETE("/file", deleteGatewayFile())
-	r.PUT("/file/name", putGatewayFileName())
-	r.GET("/file/download", getGatewayFileDownload())
-	r.HEAD("/file/download", headGatewayFileDownload())
-	r.POST("/file/upload", postGatewayFileUpload())
-	r.POST("/file/dir", postGatewayFileDir())
+// RegisterRoutersGatewayFile 注册路由。
+// 下载注册的是 GET, ServeMux 模式下 HEAD 自动兼容(响应头一致、无响应体);
+// 原 gin 独立 HEAD handler 在文件缺失时会因 fi 空指针 panic, 一并消失。
+func RegisterRoutersGatewayFile(r webhttp.Router) {
+	r.GET("/file/list", getGatewayFileList)
+	r.POST("/file/list", postGatewayFileList)
+	r.DELETE("/file", deleteGatewayFile)
+	r.PUT("/file/name", putGatewayFileName)
+	r.GET("/file/download", getGatewayFileDownload)
+	r.HEAD("/file/download", headGatewayFileDownload)
+	r.POST("/file/upload", postGatewayFileUpload)
+	r.POST("/file/dir", postGatewayFileDir)
 }

 type PathData struct {
 	Path string `json:"path"`
 }

-// 传递文件路径不方便  比如 路径中包含 #
-func getGatewayFileList() gin.HandlerFunc {
-	return func(c *gin.Context) {
-		dir := c.Query("path")
-		data, err := getFileList(dir)
-		if err != nil {
-			c.JSON(http.StatusOK, gin.H{
+func fail(w http.ResponseWriter, msg string) {
+	webhttp.WriteJSON(w, http.StatusOK, map[string]any{
 		"code": 1,
-				"msg":  "error:" + err.Error(),
+		"msg":  msg,
 		"data": "OK",
 	})
-			return
 }
-		c.JSON(http.StatusOK, gin.H{
+
+func ok(w http.ResponseWriter, data any) {
+	webhttp.WriteJSON(w, http.StatusOK, map[string]any{
 		"code": 0,
 		"msg":  "操作成功",
-			"data": gin.H{
+		"data": data,
+	})
+}
+
+// 传递文件路径不方便  比如 路径中包含 #
+func getGatewayFileList(w http.ResponseWriter, r *http.Request) {
+	dir := r.URL.Query().Get("path")
+	data, err := getFileList(dir)
+	if err != nil {
+		fail(w, "error:"+err.Error())
+		return
+	}
+	ok(w, map[string]any{
 		"list":  data,
 		"count": len(data),
 		"path":  dir,
-			},
 	})
 }
-}

-func deleteGatewayFile() gin.HandlerFunc {
-	return func(c *gin.Context) {
-		path := c.Query("path")
-		ok, err := common.PathExists(path)
+func deleteGatewayFile(w http.ResponseWriter, r *http.Request) {
+	path := r.URL.Query().Get("path")
+	exists, err := common.PathExists(path)
 	if err != nil {
-			c.JSON(http.StatusOK, gin.H{
-				"code": 1,
-				"msg":  "error:" + err.Error(),
-				"data": "OK",
-			})
+		fail(w, "error:"+err.Error())
 		return
 	}
-		if !ok {
-			if err != nil {
-				c.JSON(http.StatusOK, gin.H{
-					"code": 1,
-					"msg":  "error:" + "文件不存在",
-					"data": "OK",
-				})
+	if !exists {
+		fail(w, "error:文件不存在")
 		return
 	}
-		}

-		err = os.Remove(path)
-		if err != nil {
-			c.JSON(http.StatusOK, gin.H{
-				"code": 1,
-				"msg":  "error:" + err.Error(),
-				"data": "OK",
-			})
+	if err = os.Remove(path); err != nil {
+		fail(w, "error:"+err.Error())
 		return
 	}
-		c.JSON(http.StatusOK, gin.H{
-			"code": 0,
-			"msg":  "操作成功",
-			"data": nil,
-		})
-	}
+	ok(w, nil)
 }

-func putGatewayFileName() gin.HandlerFunc {
-	return func(c *gin.Context) {
-		oldPath := c.Query("old")
-		newFile := c.Query("new")
+func putGatewayFileName(w http.ResponseWriter, r *http.Request) {
+	oldPath := r.URL.Query().Get("old")
+	newFile := r.URL.Query().Get("new")

-		fileInfo, err := os.Stat(oldPath)
-
-		if err != nil {
+	if _, err := os.Stat(oldPath); err != nil {
 		if os.IsNotExist(err) {
-				c.JSON(http.StatusOK, gin.H{
-					"code": 1,
-					"msg":  "error:" + "文件不存在",
-					"data": "OK",
-				})
+			fail(w, "error:文件不存在")
 			return
 		}
-			c.JSON(http.StatusOK, gin.H{
-				"code": 1,
-				"msg":  "error:" + err.Error(),
-				"data": "OK",
-			})
+		fail(w, "error:"+err.Error())
 		return
 	}

 	dir := filepath.Dir(oldPath)
-
 	newPath := filepath.Join(dir, newFile)

-		fmt.Println(fileInfo)
-		fmt.Println(oldPath, newPath)
+	if err := os.Rename(oldPath, newPath); err != nil {
+		fail(w, "error:"+err.Error())
+		return
+	}
+	ok(w, nil)
+}

-		err = os.Rename(oldPath, newPath)
+func postGatewayFileDir(w http.ResponseWriter, r *http.Request) {
+	dir := r.URL.Query().Get("dir")
+	exists, err := common.PathExists(dir)
 	if err != nil {
-			c.JSON(http.StatusOK, gin.H{
-				"code": 1,
-				"msg":  "error:" + err.Error(),
-				"data": "OK",
-			})
+		fail(w, "error:"+err.Error())
 		return
 	}
-		c.JSON(http.StatusOK, gin.H{
-			"code": 0,
-			"msg":  "操作成功",
-			"data": nil,
-		})
-	}
-}
-
-func postGatewayFileDir() gin.HandlerFunc {
-	return func(c *gin.Context) {
-		dir := c.Query("dir")
-		ok, err := common.PathExists(dir)
-		if err != nil {
-			c.JSON(http.StatusOK, gin.H{
-				"code": 1,
-				"msg":  "error:" + err.Error(),
-				"data": "OK",
-			})
+	if exists {
+		fail(w, "error:文件不存在")
 		return
 	}

-		if ok {
-			c.JSON(http.StatusOK, gin.H{
-				"code": 1,
-				"msg":  "error:" + "文件不存在",
-				"data": "OK",
-			})
+	if err = os.MkdirAll(dir, 0750); err != nil {
+		fail(w, "error:"+err.Error())
 		return
 	}
-
-		err = os.MkdirAll(dir, 0750)
-
-		if err != nil {
-			c.JSON(http.StatusOK, gin.H{
-				"code": 1,
-				"msg":  "error:" + err.Error(),
-				"data": "OK",
-			})
-			return
-		}
-		c.JSON(http.StatusOK, gin.H{
-			"code": 0,
-			"msg":  "操作成功",
-			"data": nil,
-		})
-	}
+	ok(w, nil)
 }

-func postGatewayFileList() gin.HandlerFunc {
-	return func(c *gin.Context) {
-
+func postGatewayFileList(w http.ResponseWriter, r *http.Request) {
 	dir := PathData{}
-		err := c.BindJSON(&dir)
-		fmt.Println("dir", dir)
+	// body 解析失败按空路径处理(列盘符), 与原 gin BindJSON 忽略错误的语义一致
+	_ = json.NewDecoder(r.Body).Decode(&dir)

 	data, err := getFileList(dir.Path)
-
 	if err != nil {
-			c.JSON(http.StatusOK, gin.H{
-				"code": 1,
-				"msg":  "error:" + err.Error(),
-				"data": "OK",
-			})
+		fail(w, "error:"+err.Error())
 		return
 	}
-		c.JSON(http.StatusOK, gin.H{
-			"code": 0,
-			"msg":  "操作成功",
-			"data": gin.H{
+	ok(w, map[string]any{
 		"list":  data,
 		"count": len(data),
 		"path":  dir.Path,
-			},
 	})
 }
-}

 type FileInfo struct {
 	Name      string `json:"name"`
@@ -227,17 +160,6 @@ type FileInfo struct {

 func getFileList(dir string) ([]FileInfo, error) {
 	list := make([]FileInfo, 0)
-	/*filepath.Walk(dir, func(path string, info fs.FileInfo, err error) error {
-		list = append(list, FileInfo{
-			Name:    info.Name(),
-			Size:    info.Size(),
-			Mode:    info.Mode().String(),
-			ModTime: time.Time{},
-			IsDir:   info.IsDir(),
-		})
-		fmt.Println(info.Mode().Type())
-		return nil
-	})*/

 	if dir == "" {
 		partitions, err := disk.Partitions(false)
@@ -306,35 +228,25 @@ func getFileList(dir string) ([]FileInfo, error) {
 	return list, nil
 }

-func getGatewayFileDownload() gin.HandlerFunc {
-	return func(c *gin.Context) {
-		filePath := c.Query("filename")
+func getGatewayFileDownload(w http.ResponseWriter, r *http.Request) {
+	filePath := r.URL.Query().Get("filename")
 	fileName := filepath.Base(filePath)
-		c.Header("Content-Type", "application/octet-stream")
-		c.Header("Content-Disposition", "attachment; filename="+fileName)
-		c.Header("Content-Transfer-Encoding", "binary")
-		fi, err := os.Stat(filePath)
-		if err == nil {
-			c.Header("Content-Length", strconv.FormatInt(fi.Size(), 10))
-		}
-		c.File(filePath)
-	}
+	w.Header().Set("Content-Type", "application/octet-stream")
+	w.Header().Set("Content-Disposition", "attachment; filename="+fileName)
+	w.Header().Set("Content-Transfer-Encoding", "binary")
+	http.ServeFile(w, r, filePath)
 }

-func headGatewayFileDownload() gin.HandlerFunc {
-	return func(c *gin.Context) {
-		filePath := c.Query("filename")
+func headGatewayFileDownload(w http.ResponseWriter, r *http.Request) {
+	filePath := r.URL.Query().Get("filename")
 	fileName := filepath.Base(filePath)
-		c.Header("Content-Type", "application/octet-stream")
-		c.Header("Content-Disposition", "attachment; filename="+fileName)
-		c.Header("Content-Transfer-Encoding", "binary")
-		fmt.Println(filePath)
-		fi, err := os.Stat(filePath)
-		if err == nil {
-			fmt.Println("file size is ", fi.Size(), err)
-		}
-		c.Header("Content-Length", strconv.FormatInt(fi.Size(), 10))
+	w.Header().Set("Content-Type", "application/octet-stream")
+	w.Header().Set("Content-Disposition", "attachment; filename="+fileName)
+	w.Header().Set("Content-Transfer-Encoding", "binary")
+	if fi, err := os.Stat(filePath); err == nil {
+		w.Header().Set("Content-Length", strconv.FormatInt(fi.Size(), 10))
 	}
+	w.WriteHeader(http.StatusOK)
 }

 type Win32_Volume struct {
@@ -350,49 +262,54 @@ type FileData struct {
 	Md5              string `json:"md5"`
 }

-func postGatewayFileUpload() gin.HandlerFunc {
-	return func(c *gin.Context) {
-		dir := c.Query("dir")
-		file, err := HttpUploadFile(c, dir)
+func postGatewayFileUpload(w http.ResponseWriter, r *http.Request) {
+	dir := r.URL.Query().Get("dir")
+	file, err := HttpUploadFile(r, dir)
 	if err != nil {
-			c.JSON(http.StatusOK, gin.H{
+		webhttp.WriteJSON(w, http.StatusOK, map[string]any{
 			"code": 1,
 			"msg":  "上传失败:" + err.Error(),
 		})
 		return
 	}

-		c.JSON(http.StatusOK, gin.H{
+	webhttp.WriteJSON(w, http.StatusOK, map[string]any{
 		"code":   0,
 		"msg":    "success",
 		"status": "done",
 		"file":   file,
 	})
-
-	}
 }

-func HttpUploadFile(c *gin.Context, saveDir string) (*FileData, error) {
-	file, err := c.FormFile("file")
+// HttpUploadFile 接收 multipart 上传并落盘。
+// 不沿用 gin SaveUploadedFile 的 MkdirAll+Chmod: Windows 盘根上 Chmod 报
+// "参数不正确" 导致盘根上传必败(remote-service 已用流式接管绕开此坑, 这里
+// 是非 multipart 请求的兜底路径), 目录创建保留、Chmod 去掉。
+func HttpUploadFile(r *http.Request, saveDir string) (*FileData, error) {
+	fh, head, err := r.FormFile("file")
 	if err != nil {
 		return nil, err
 	}
+	defer fh.Close()

-	fileName := file.Filename
-	// 保存路径 绝对路径
-	savePath := filepath.Join(saveDir, file.Filename)
-
-	err = c.SaveUploadedFile(file, savePath)
-	if err != nil {
+	savePath := filepath.Join(saveDir, head.Filename)
+	if err = os.MkdirAll(filepath.Dir(savePath), 0755); err != nil {
 		return nil, err
 	}

-	fileData := &FileData{
-		OriginalFileName: file.Filename,
-		FileName:         fileName,
+	out, err := os.Create(savePath)
+	if err != nil {
+		return nil, err
+	}
+	defer out.Close()
+	if _, err = io.Copy(out, fh); err != nil {
+		return nil, err
+	}
+
+	return &FileData{
+		OriginalFileName: head.Filename,
+		FileName:         head.Filename,
 		FilePath:         savePath,
-		Size:             file.Size,
-	}
-
-	return fileData, nil
+		Size:             head.Size,
+	}, nil
 }
@@ -1,52 +1,36 @@
 module git.zeroonesoft.cn/golib/remote-core

-go 1.24.0
+go 1.26.0

 require (
-	github.com/gin-gonic/gin v1.10.0
+	github.com/KarpelesLab/vncpasswd v1.0.1
 	github.com/gorilla/websocket v1.5.3
 	github.com/jaypipes/ghw v0.13.0
+	github.com/kardianos/service v1.2.2
 	github.com/runletapp/go-console v0.0.0-20211204140000-27323a28410a
 	github.com/shirou/gopsutil/v3 v3.24.5
-	github.com/sirupsen/logrus v1.9.3
+	github.com/sirupsen/logrus v1.10.2
 	github.com/yusufpapurcu/wmi v1.2.4
+	golang.org/x/sys v0.48.0
 )

 require (
 	github.com/StackExchange/wmi v1.2.1 // indirect
-	github.com/bytedance/sonic v1.11.6 // indirect
-	github.com/bytedance/sonic/loader v0.1.1 // indirect
-	github.com/cloudwego/base64x v0.1.4 // indirect
-	github.com/cloudwego/iasm v0.2.0 // indirect
 	github.com/creack/pty v1.1.17 // indirect
-	github.com/gabriel-vasile/mimetype v1.4.3 // indirect
-	github.com/gin-contrib/sse v0.1.0 // indirect
 	github.com/go-ole/go-ole v1.2.6 // indirect
-	github.com/go-playground/locales v0.14.1 // indirect
-	github.com/go-playground/universal-translator v0.18.1 // indirect
-	github.com/go-playground/validator/v10 v10.20.0 // indirect
-	github.com/goccy/go-json v0.10.2 // indirect
+	github.com/google/go-cmp v0.7.0 // indirect
 	github.com/iamacarpet/go-winpty v1.0.2 // indirect
 	github.com/jaypipes/pcidb v1.0.1 // indirect
-	github.com/json-iterator/go v1.1.12 // indirect
-	github.com/klauspost/cpuid/v2 v2.2.7 // indirect
-	github.com/kr/text v0.2.0 // indirect
-	github.com/leodido/go-urn v1.4.0 // indirect
-	github.com/mattn/go-isatty v0.0.20 // indirect
+	github.com/kr/pretty v0.3.1 // indirect
+	github.com/lufia/plan9stats v0.0.0-20211012122336-39d0f177ccd0 // indirect
 	github.com/mitchellh/go-homedir v1.1.0 // indirect
-	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
-	github.com/modern-go/reflect2 v1.0.2 // indirect
-	github.com/pelletier/go-toml/v2 v2.2.2 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/power-devops/perfstat v0.0.0-20210106213030-5aafc221ea8c // indirect
-	github.com/twitchyliquid64/golang-asm v0.15.1 // indirect
-	github.com/ugorji/go/codec v1.2.12 // indirect
-	golang.org/x/arch v0.8.0 // indirect
-	golang.org/x/crypto v0.23.0 // indirect
-	golang.org/x/net v0.25.0 // indirect
-	golang.org/x/sys v0.20.0 // indirect
-	golang.org/x/text v0.15.0 // indirect
-	google.golang.org/protobuf v1.34.1 // indirect
+	github.com/rogpeppe/go-internal v1.10.0 // indirect
+	github.com/shoenig/go-m1cpu v0.1.6 // indirect
+	github.com/tklauser/go-sysconf v0.3.12 // indirect
+	github.com/tklauser/numcpus v0.6.1 // indirect
+	gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 	howett.net/plist v1.0.0 // indirect
 )
@@ -1,41 +1,17 @@
+github.com/KarpelesLab/vncpasswd v1.0.1 h1:w0dhjSXfo59bm9/LLKhO7hV+GUGEn4WjAZTLXTNSciU=
+github.com/KarpelesLab/vncpasswd v1.0.1/go.mod h1:gh6AFDSUqRZwcdjAm/p8V81P9ePtOI65ajs7KT7D+Fc=
 github.com/StackExchange/wmi v1.2.1 h1:VIkavFPXSjcnS+O8yTq7NI32k0R5Aj+v39y29VYDOSA=
 github.com/StackExchange/wmi v1.2.1/go.mod h1:rcmrprowKIVzvc+NUiLncP2uuArMWLCbu9SBzvHz7e8=
-github.com/bytedance/sonic v1.11.6 h1:oUp34TzMlL+OY1OUWxHqsdkgC/Zfc85zGqw9siXjrc0=
-github.com/bytedance/sonic v1.11.6/go.mod h1:LysEHSvpvDySVdC2f87zGWf6CIKJcAvqab1ZaiQtds4=
-github.com/bytedance/sonic/loader v0.1.1 h1:c+e5Pt1k/cy5wMveRDyk2X4B9hF4g7an8N3zCYjJFNM=
-github.com/bytedance/sonic/loader v0.1.1/go.mod h1:ncP89zfokxS5LZrJxl5z0UJcsk4M4yY2JpfqGeCtNLU=
-github.com/cloudwego/base64x v0.1.4 h1:jwCgWpFanWmN8xoIUHa2rtzmkd5J2plF/dnLS6Xd/0Y=
-github.com/cloudwego/base64x v0.1.4/go.mod h1:0zlkT4Wn5C6NdauXdJRhSKRlJvmclQ1hhJgA0rcu/8w=
-github.com/cloudwego/iasm v0.2.0 h1:1KNIy1I1H9hNNFEEH3DVnI4UujN+1zjpuk6gwHLTssg=
-github.com/cloudwego/iasm v0.2.0/go.mod h1:8rXZaNYT2n95jn+zTI1sDr+IgcD2GVs0nlbbQPiEFhY=
 github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
 github.com/creack/pty v1.1.17 h1:QeVUsEDNrLBW4tMgZHvxy18sKtr6VI492kBhUfhDJNI=
 github.com/creack/pty v1.1.17/go.mod h1:MOBLtS5ELjhRRrroQr9kyvTxUAFNvYEK993ew/Vr4O4=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
-github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
-github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
-github.com/gabriel-vasile/mimetype v1.4.3 h1:in2uUcidCuFcDKtdcBxlR0rJ1+fsokWf+uqxgUFjbI0=
-github.com/gabriel-vasile/mimetype v1.4.3/go.mod h1:d8uq/6HKRL6CGdk+aubisF/M5GcPfT7nKyLpA0lbSSk=
-github.com/gin-contrib/sse v0.1.0 h1:Y/yl/+YNO8GZSjAhjMsSuLt29uWRFHdHYUb5lYOV9qE=
-github.com/gin-contrib/sse v0.1.0/go.mod h1:RHrZQHXnP2xjPF+u1gW/2HnVO7nvIa9PG3Gm+fLHvGI=
-github.com/gin-gonic/gin v1.10.0 h1:nTuyha1TYqgedzytsKYqna+DfLos46nTv2ygFy86HFU=
-github.com/gin-gonic/gin v1.10.0/go.mod h1:4PMNQiOhvDRa013RKVbsiNwoyezlm2rm0uX/T7kzp5Y=
 github.com/go-ole/go-ole v1.2.5/go.mod h1:pprOEPIfldk/42T2oK7lQ4v4JSDwmV0As9GaiUsvbm0=
 github.com/go-ole/go-ole v1.2.6 h1:/Fpf6oFPoeFik9ty7siob0G6Ke8QvQEuVcuChpwXzpY=
 github.com/go-ole/go-ole v1.2.6/go.mod h1:pprOEPIfldk/42T2oK7lQ4v4JSDwmV0As9GaiUsvbm0=
-github.com/go-playground/assert/v2 v2.2.0 h1:JvknZsQTYeFEAhQwI4qEt9cyV5ONwRHC+lYKSsYSR8s=
-github.com/go-playground/assert/v2 v2.2.0/go.mod h1:VDjEfimB/XKnb+ZQfWdccd7VUvScMdVu0Titje2rxJ4=
-github.com/go-playground/locales v0.14.1 h1:EWaQ/wswjilfKLTECiXz7Rh+3BjFhfDFKv/oXslEjJA=
-github.com/go-playground/locales v0.14.1/go.mod h1:hxrqLVvrK65+Rwrd5Fc6F2O76J/NuW9t0sjnWqG1slY=
-github.com/go-playground/universal-translator v0.18.1 h1:Bcnm0ZwsGyWbCzImXv+pAJnYK9S473LQFuzCbDbfSFY=
-github.com/go-playground/universal-translator v0.18.1/go.mod h1:xekY+UJKNuX9WP91TpwSH2VMlDf28Uj24BCp08ZFTUY=
-github.com/go-playground/validator/v10 v10.20.0 h1:K9ISHbSaI0lyB2eWMPJo+kOS/FBExVwjEviJTixqxL8=
-github.com/go-playground/validator/v10 v10.20.0/go.mod h1:dbuPbCMFw/DrkbEynArYaCwl3amGuJotoKCe95atGMM=
-github.com/goccy/go-json v0.10.2 h1:CrxCmQqYDkv1z7lO7Wbh2HN93uovUHgrECaO5ZrCXAU=
-github.com/goccy/go-json v0.10.2/go.mod h1:6MelG93GURQebXPDq3khkgXZkazVtN9CRI+MGFi0w8I=
-github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
-github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
-github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
+github.com/google/go-cmp v0.5.6/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
+github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
+github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
 github.com/gorilla/websocket v1.5.3 h1:saDtZ6Pbx/0u+bgYQ3q96pZgCzfhKXGPqt7kZ72aNNg=
 github.com/gorilla/websocket v1.5.3/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE=
 github.com/iamacarpet/go-winpty v1.0.2 h1:jwPVTYrjAHZx6Mcm6K5i9G4opMp5TblEHH5EQCl/Gzw=
@@ -45,85 +21,64 @@ github.com/jaypipes/ghw v0.13.0/go.mod h1:In8SsaDqlb1oTyrbmTC14uy+fbBMvp+xdqX51M
 github.com/jaypipes/pcidb v1.0.1 h1:WB2zh27T3nwg8AE8ei81sNRb9yWBii3JGNJtT7K9Oic=
 github.com/jaypipes/pcidb v1.0.1/go.mod h1:6xYUz/yYEyOkIkUt2t2J2folIuZ4Yg6uByCGFXMCeE4=
 github.com/jessevdk/go-flags v1.4.0/go.mod h1:4FA24M0QyGHXBuZZK/XkWh8h0e1EYbRYJSGM75WSRxI=
-github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM=
-github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
-github.com/klauspost/cpuid/v2 v2.0.9/go.mod h1:FInQzS24/EEf25PyTYn52gqo7WaD8xa0213Md/qVLRg=
-github.com/klauspost/cpuid/v2 v2.2.7 h1:ZWSB3igEs+d0qvnxR/ZBzXVmxkgt8DdzP6m9pfuVLDM=
-github.com/klauspost/cpuid/v2 v2.2.7/go.mod h1:Lcz8mBdAVJIBVzewtcLocK12l3Y+JytZYpaMropDUws=
-github.com/knz/go-libedit v1.10.1/go.mod h1:MZTVkCWyz0oBc7JOWP3wNAzd002ZbM/5hgShxwh4x8M=
-github.com/kr/pretty v0.1.0 h1:L/CwN0zerZDmRFUapSPitk6f+Q3+0za1rQkzVuMiMFI=
-github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
+github.com/kardianos/service v1.2.2 h1:ZvePhAHfvo0A7Mftk/tEzqEZ7Q4lgnR8sGz4xu1YX60=
+github.com/kardianos/service v1.2.2/go.mod h1:CIMRFEJVL+0DS1a3Nx06NaMn4Dz63Ng6O7dl0qH0zVM=
+github.com/kr/pretty v0.2.1/go.mod h1:ipq/a2n7PKx3OHsz4KJII5eveXtPO4qwEXGdVfWzfnI=
+github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
+github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
+github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
+github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
 github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
 github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
-github.com/leodido/go-urn v1.4.0 h1:WT9HwE9SGECu3lg4d/dIA+jxlljEa1/ffXKmRjqdmIQ=
-github.com/leodido/go-urn v1.4.0/go.mod h1:bvxc+MVxLKB4z00jd1z+Dvzr47oO32F/QSNjSBOlFxI=
-github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
-github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
+github.com/lufia/plan9stats v0.0.0-20211012122336-39d0f177ccd0 h1:6E+4a0GO5zZEnZ81pIr0yLvtUWk2if982qA3F3QD6H4=
+github.com/lufia/plan9stats v0.0.0-20211012122336-39d0f177ccd0/go.mod h1:zJYVVT2jmtg6P3p1VtQj7WsuWi/y4VnjVBn7F8KPB3I=
 github.com/mitchellh/go-homedir v1.1.0 h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y=
 github.com/mitchellh/go-homedir v1.1.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
-github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
-github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg=
-github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
-github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M=
-github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
-github.com/pelletier/go-toml/v2 v2.2.2 h1:aYUidT7k73Pcl9nb2gScu7NSrKCSHIDE89b3+6Wq+LM=
-github.com/pelletier/go-toml/v2 v2.2.2/go.mod h1:1t835xjRzz80PqgE6HHgN2JOsmgYu/h4qDAS4n929Rs=
+github.com/pkg/diff v0.0.0-20210226163009-20ebb0f2a09e/go.mod h1:pJLUxLENpZxwdsKMEsNbx1VGcRFpLqf3715MtcvvzbA=
 github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=
 github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
-github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/power-devops/perfstat v0.0.0-20210106213030-5aafc221ea8c h1:ncq/mPwQF4JjgDlrVEn3C11VoGHZN7m8qihwgMEtzYw=
 github.com/power-devops/perfstat v0.0.0-20210106213030-5aafc221ea8c/go.mod h1:OmDBASR4679mdNQnz2pUhc2G8CO2JrUAVFDRBDP/hJE=
+github.com/rogpeppe/go-internal v1.9.0/go.mod h1:WtVeX8xhTBvf0smdhujwtBcq4Qrzq/fJaraNFVN+nFs=
+github.com/rogpeppe/go-internal v1.10.0 h1:TMyTOH3F/DB16zRVcYyreMH6GnZZrwQVAoYjRBZyWFQ=
+github.com/rogpeppe/go-internal v1.10.0/go.mod h1:UQnix2H7Ngw/k4C5ijL5+65zddjncjaFoBhdsK/akog=
 github.com/runletapp/go-console v0.0.0-20211204140000-27323a28410a h1:1hh8CSomjZSJPk7AgHV8o33Su13bZby81PrC6pIvJqQ=
 github.com/runletapp/go-console v0.0.0-20211204140000-27323a28410a/go.mod h1:9Y3jw1valnPKqsYSsBWxQNAuxqNSBuwd2ZEeElxgNUI=
 github.com/shirou/gopsutil/v3 v3.24.5 h1:i0t8kL+kQTvpAYToeuiVk3TgDeKOFioZO3Ztz/iZ9pI=
 github.com/shirou/gopsutil/v3 v3.24.5/go.mod h1:bsoOS1aStSs9ErQ1WWfxllSeS1K5D+U30r2NfcubMVk=
-github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ=
-github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ=
+github.com/shoenig/go-m1cpu v0.1.6 h1:nxdKQNcEB6vzgA2E2bvzKIYRuNj7XNJ4S/aRSwKzFtM=
+github.com/shoenig/go-m1cpu v0.1.6/go.mod h1:1JJMcUBvfNwpq05QDQVAnx3gUHr9IYF7GNg9SUEw2VQ=
+github.com/shoenig/test v0.6.4 h1:kVTaSd7WLz5WZ2IaoM0RSzRsUD+m8wRR+5qvntpn4LU=
+github.com/shoenig/test v0.6.4/go.mod h1:byHiCGXqrVaflBLAMq/srcZIHynQPQgeyvkvXnjqq0k=
+github.com/sirupsen/logrus v1.10.2 h1:G2SED73/qrAu6YwbdxOD6peLkCBI3z7L+ykJFTXJBBo=
+github.com/sirupsen/logrus v1.10.2/go.mod h1:SLEg8TqYulVKKfIGHldVp2K2aYz2DKSVBq4g/H5bR7Q=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
-github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=
-github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo=
-github.com/stretchr/objx v0.5.2/go.mod h1:FRsXN1f5AsAjCGJKqEizvkpNtU+EGNCLh3NxZ/8L+MA=
-github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
 github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
-github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
-github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
-github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=
-github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
-github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg=
-github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
-github.com/twitchyliquid64/golang-asm v0.15.1 h1:SU5vSMR7hnwNxj24w34ZyCi/FmDZTkS4MhqMhdFk5YI=
-github.com/twitchyliquid64/golang-asm v0.15.1/go.mod h1:a1lVb/DtPvCB8fslRZhAngC2+aY1QWCk3Cedj/Gdt08=
-github.com/ugorji/go/codec v1.2.12 h1:9LC83zGrHhuUA9l16C9AHXAqEV/2wBQ4nkvumAE65EE=
-github.com/ugorji/go/codec v1.2.12/go.mod h1:UNopzCgEMSXjBc6AOMqYvWC1ktqTAfzJZUZgYf6w6lg=
+github.com/stretchr/testify v1.12.1 h1:EuwCh5fleGS7H32xRwO3wRGT7DxrDhLAT6FF8MpWDWE=
+github.com/stretchr/testify v1.12.1/go.mod h1:MDEgiDPPsNp5cuIrHPPCyornHKgEVbtFUmoNlxoYthg=
+github.com/tklauser/go-sysconf v0.3.12 h1:0QaGUFOdQaIVdPgfITYzaTegZvdCjmYO52cSFAEVmqU=
+github.com/tklauser/go-sysconf v0.3.12/go.mod h1:Ho14jnntGE1fpdOqQEEaiKRpvIavV0hSfmBq8nJbHYI=
+github.com/tklauser/numcpus v0.6.1 h1:ng9scYS7az0Bk4OZLvrNXNSAO2Pxr1XXRAPyjhIx+Fk=
+github.com/tklauser/numcpus v0.6.1/go.mod h1:1XfjsgE2zo8GVw7POkMbHENHzVg3GzmoZ9fESEdAacY=
 github.com/yusufpapurcu/wmi v1.2.4 h1:zFUKzehAFReQwLys1b/iSMl+JQGSCSjtVqQn9bBrPo0=
 github.com/yusufpapurcu/wmi v1.2.4/go.mod h1:SBZ9tNy3G9/m5Oi98Zks0QjeHVDvuK0qfxQmPyzfmi0=
-golang.org/x/arch v0.0.0-20210923205945-b76863e36670/go.mod h1:5om86z9Hs0C8fWVUuoMHwpExlXzs5Tkyp9hOrfG7pp8=
-golang.org/x/arch v0.8.0 h1:3wRIsP3pM4yUptoR96otTUOXI367OS0+c9eeRi9doIc=
-golang.org/x/arch v0.8.0/go.mod h1:FEVrYAQjsQXMVJ1nsMoVVXPZg6p2JE2mx8psSWTDQys=
-golang.org/x/crypto v0.23.0 h1:dIJU/v2J8Mdglj/8rJ6UUOM3Zc9zLZxVZwwxMooUSAI=
-golang.org/x/crypto v0.23.0/go.mod h1:CKFgDieR+mRhux2Lsu27y0fO304Db0wZe70UKqHu0v8=
-golang.org/x/net v0.25.0 h1:d/OCCoBEUq33pjydKrGQhw7IlUPI2Oylr+8qLx49kac=
-golang.org/x/net v0.25.0/go.mod h1:JkAGAh7GEvH74S6FOH42FLoXpXbE/aqXSrIQjXgsiwM=
+go.yaml.in/yaml/v3 v3.0.5 h1:N6y/pJk8buWs9NY5ERU2HSMfm+IuD/OtfdAnq6kESPw=
+go.yaml.in/yaml/v3 v3.0.5/go.mod h1:HVTZu1O7/Vkt2N+BFy8Zza+lnLsABggaTM2ZpNIGuKg=
 golang.org/x/sys v0.0.0-20190916202348-b4ddaad3f8a3/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20201015000850-e3ed0017c211/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20201204225414-ed752295db88/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.20.0 h1:Od9JTbYCk261bKm4M/mw7AklTlFYIa0bIp9BgSm1S8Y=
-golang.org/x/sys v0.20.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/text v0.15.0 h1:h1V/4gjBv8v9cjcR6+AR5+/cIYK5N/WAgiv4xlsEtAk=
-golang.org/x/text v0.15.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
-google.golang.org/protobuf v1.34.1 h1:9ddQBjfCyZPOHPUiPxpYESBLc+T8P3E+Vo4IbKZgFWg=
-google.golang.org/protobuf v1.34.1/go.mod h1:c6P6GXX6sHbq/GpV6MGZEdwhWPcYBgnhAHhKbcUYpos=
+golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.11.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.48.0 h1:bbX/i/6MgT9BVLM9RT1thmxL04yeTAhbEz4SyadbXoo=
+golang.org/x/sys v0.48.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og=
+golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
-gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127 h1:qIbj1fsPNlZgppZ+VLlY7N33q108Sa+fhmuc+sWQYwY=
-gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
+gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
 gopkg.in/yaml.v1 v1.0.0-20140924161607-9f9df34309c0/go.mod h1:WDnlLJ4WF5VGsH/HVa3CI79GS0ol3YnhVnKP89i0kNg=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 howett.net/plist v1.0.0 h1:7CrbWYbPPO/PyNy38b2EB/+gYbjCe2DXBxgtOOZbSQM=
 howett.net/plist v1.0.0/go.mod h1:lqaXoTrLY4hg8tnEzNru53gicrbv7rrk+2xJA/7hw9g=
-nullprogram.com/x/optparse v1.0.0/go.mod h1:KdyPE+Igbe0jQUrVfMqDMeJQIJZEuyV7pjYmp6pbG50=
-rsc.io/pdf v0.1.1/go.mod h1:n8OzWcQ6Sp37PL01nO98y4iUCRdTGarVfzxY20ICaU4=
@@ -0,0 +1,23 @@
+# process
+
+远程进程管理（被控 HTTP 能力）：进程列表 / 结束进程。gopsutil 跨平台实现，
+与 file/shell 同为被控 HTTP 能力——BS 与客户机被控端共用，经 zonat 隧道 +
+web-gateway 反代出网（typ=process，页面 www/process.html）。
+
+## 路由
+
+```go
+import "git.zeroonesoft.cn/golib/remote-core/process"
+
+process.RegisterRoutersProcess(r *gin.RouterGroup)
+```
+
+| 方法 | 路径 | 说明 |
+|---|---|---|
+| GET | `/process/list` | 全量进程列表（`ProcItem`：pid/名称/用户/CPU/内存/启动时间/可执行路径/命令行），按内存占用降序 |
+| POST | `/process/kill` | 结束进程，入参 `{pid, name?}` |
+
+## 注意
+
+- `kill` 带 `name` 时做防误杀校验：实际进程名与传入不符则拒绝（防 pid 复用）。
+- Windows 上 gopsutil 权限不足时自动回退 `taskkill /F /T`（连子进程树强杀）。
@@ -0,0 +1,120 @@
+// 远程进程管理：进程列表 / 结束进程。
+// gopsutil 跨平台实现，与 file/shell 同为被控 HTTP 能力——BS 与客户机被控端共用，
+// 经 zonat 隧道 + web-gateway 反代出网（typ=process，页面 www/process.html）。
+
+package process
+
+import (
+	"encoding/json"
+	"net/http"
+	"os/exec"
+	"runtime"
+	"sort"
+	"strconv"
+
+	"github.com/shirou/gopsutil/v3/process"
+
+	"git.zeroonesoft.cn/golib/remote-core/webhttp"
+)
+
+// ProcItem 进程列表行。
+type ProcItem struct {
+	Pid        int32   `json:"pid"`
+	Name       string  `json:"name"`
+	Status     string  `json:"status"`
+	User       string  `json:"user"`
+	CPUPercent float64 `json:"cpuPercent"` // 进程存活期累计 CPU 占用率(gopsutil 口径)
+	MemRSS     uint64  `json:"memBytes"`   // 物理内存占用(字节)
+	MemPercent float32 `json:"memPercent"`
+	CreateTime int64   `json:"createTime"` // 启动时间(Unix 毫秒)
+	Exe        string  `json:"exe"`
+	Cmdline    string  `json:"cmdline"`
+}
+
+// RegisterRoutersProcess 装配进程管理路由: GET /process/list, POST /process/kill。
+func RegisterRoutersProcess(r webhttp.Router) {
+	r.GET("/process/list", listProcesses)
+	r.POST("/process/kill", killProcess)
+}
+
+func fail(w http.ResponseWriter, msg string) {
+	webhttp.WriteJSON(w, http.StatusOK, map[string]any{"code": 1, "msg": msg, "data": nil})
+}
+
+// listProcesses 全量进程列表(按内存占用降序)。
+func listProcesses(w http.ResponseWriter, _ *http.Request) {
+	procs, err := process.Processes()
+	if err != nil {
+		fail(w, "枚举进程失败: "+err.Error())
+		return
+	}
+	items := make([]ProcItem, 0, len(procs))
+	for _, p := range procs {
+		item := ProcItem{Pid: p.Pid}
+		if name, e := p.Name(); e == nil {
+			item.Name = name
+		}
+		if st, e := p.Status(); e == nil && len(st) > 0 {
+			item.Status = st[0]
+		}
+		if u, e := p.Username(); e == nil {
+			item.User = u
+		}
+		if cpu, e := p.CPUPercent(); e == nil {
+			item.CPUPercent = cpu
+		}
+		if mem, e := p.MemoryInfo(); e == nil {
+			item.MemRSS = mem.RSS
+		}
+		if mp, e := p.MemoryPercent(); e == nil {
+			item.MemPercent = mp
+		}
+		if ct, e := p.CreateTime(); e == nil {
+			item.CreateTime = ct
+		}
+		if exe, e := p.Exe(); e == nil {
+			item.Exe = exe
+		}
+		if cmd, e := p.Cmdline(); e == nil {
+			item.Cmdline = cmd
+		}
+		items = append(items, item)
+	}
+	sort.Slice(items, func(i, j int) bool { return items[i].MemPercent > items[j].MemPercent })
+	webhttp.WriteJSON(w, http.StatusOK, map[string]any{"code": 0, "msg": "OK", "data": map[string]any{"list": items}})
+}
+
+// killProcess 结束进程: {pid: 必填, name: 可选校验(防 pid 复用误杀)}。
+// Windows 上 gopsutil 权限不足时回退 taskkill /F /T(连子进程树强杀)。
+func killProcess(w http.ResponseWriter, r *http.Request) {
+	var req struct {
+		Pid  int32  `json:"pid"`
+		Name string `json:"name"`
+	}
+	if err := json.NewDecoder(r.Body).Decode(&req); err != nil || req.Pid <= 0 {
+		fail(w, "参数错误: pid 必填且为正整数")
+		return
+	}
+	p, err := process.NewProcess(req.Pid)
+	if err != nil {
+		fail(w, "进程不存在: "+err.Error())
+		return
+	}
+	if req.Name != "" {
+		if name, e := p.Name(); e == nil && name != "" && name != req.Name {
+			fail(w, "进程名不匹配(实际 "+name+"), 已拒绝结束")
+			return
+		}
+	}
+	if err := p.Kill(); err != nil {
+		if runtime.GOOS != "windows" {
+			fail(w, "结束进程失败: "+err.Error())
+			return
+		}
+		if out, e := exec.Command("taskkill", "/F", "/T", "/PID", strconv.Itoa(int(req.Pid))).CombinedOutput(); e != nil {
+			fail(w, "结束进程失败: "+err.Error()+"; taskkill: "+string(out))
+			return
+		}
+	}
+	webhttp.WriteJSON(w, http.StatusOK, map[string]any{"code": 0, "msg": "OK", "data": map[string]any{"pid": req.Pid}})
+}
@@ -0,0 +1,63 @@
+# remote
+
+远程控制服务管理（被控端能力）：RDP / VNC(TightVNC) / Radmin 的服务状态查询、
+启停与重置，VNC 服务端安装/配置读写，VNC 密码加解密，远程信息汇总。
+
+> 自 go-hua/remote 平移并入（包名保持 `remote`），与本库 file/shell/process
+> 同属被控端远程运维能力。
+
+## 用法
+
+```go
+import "git.zeroonesoft.cn/golib/remote-core/remote"
+
+// 汇总信息（主机名/IP/MAC/远程端口/VNC 密码等）
+info := remote.GetRemoteInfo()
+
+// 远程服务状态与控制
+_ = remote.GetRdpServiceStatus()   // kardianos/service Status
+_ = remote.GetVncServiceStatus()   // 同上
+_ = remote.GetRadminServiceStatus() // (int, error)：1 运行 / 0 停止 / -1 未安装
+_ = remote.GetServiceStatus("SessionEnv") // 通用按服务名查询
+err := remote.ServiceStart(name)   // 启动 / ServiceStop 停止
+_ = remote.GetServiceReset(name)   // 重置类服务状态
+
+// RDP / VNC 端口与 VNC 密码读取
+port, err := remote.GetRdpPort()
+vncPort, err := remote.GetVncPort()
+pass, err := remote.GetVncPassword()
+
+// VNC(TightVNC) 服务端管理（Windows）
+cfg := remote.VncServerDefaultConfig(true /* 随机密码 */) // VncServerConfig
+err = remote.WriteVncServerConfig(cfg)
+cfg, err = remote.ReadVncServerConfig()
+// 绿色安装最新版 TightVNC：校验 exe → 写注册表全集(随机密码, 需管理员权限) →
+// 注册系统服务（装而不启, 远程时再 VncStart; 已运行则重启加载新配置）。
+// 返回生成的明文密码供调用方上报/展示。
+pass, err := remote.InstallVncServer(`D:\app\tvnc\tvnserver.exe`)
+err = remote.VncInit()                   // 初始化/修复配置
+err = remote.VncStart()                  // VncStop / VncRestart
+err = remote.VncInstall()                // VncUninstall
+err = remote.RunVncService()             // 以服务方式运行
+
+// VNC 密码加解密（TightVNC 注册表存储格式）
+enc := remote.VncPasswordCrypt("plainpass")     // []byte
+plain := remote.VncPasswordDecrypt(enc)          // string
+
+// CAD/SAS 相关注册表开关（Windows）
+err = remote.EnableSoftwareSASGeneration()
+```
+
+## 平台支持
+
+- `remote.go` / `type.go`：跨平台（依赖 `kardianos/service`）。
+- `windows.go` / `vnc.go`：`//go:build windows`（注册表、TightVNC 配置）。
+- `unix.go`：`//go:build linux`（精简实现）。
+
+## 注意
+
+- `GetServiceStatus` 系列对未安装服务返回 -1 而非错误；`GetRdpServiceStatus` /
+  `GetVncServiceStatus` 走 `kardianos/service`，未安装返回 error。
+- `InstallVncServer` / `VncInit` / CAD 开关需要管理员权限，失败信息见返回 error；安装配置对齐最新版 TightVNC(2.8.x) 注册表 37 项全集。
+- VNC 密码格式与 TightVNC 兼容（`KarpelesLab/vncpasswd` 实现），加解密为确定性
+  变换，注意密文落盘位置的访问控制。
@@ -0,0 +1,191 @@
+package remote
+
+import (
+	"fmt"
+	"github.com/kardianos/service"
+	"net"
+)
+
+// Info 远程控制信息汇总（主机、IP、MAC 与 RDP/VNC 状态端口）
+type Info struct {
+	Hostname    string   `json:"hostname"`
+	IpAddr      []string `json:"ipAddr"`
+	MacAddr     []string `json:"macAddr"`
+	RdpState    int      `json:"rdpState"`
+	RdpPort     int      `json:"rdpPort"`
+	VncState    int      `json:"vncState"`
+	VncPort     int      `json:"vncPort"`
+	VncPassword string   `json:"vncPassword"`
+}
+
+// GetRadminServiceStatus 获取服务状态 0.无效 1.运行 2.停止
+func GetRadminServiceStatus() (int, error) {
+	svcConfig := &service.Config{
+		Name: "RServer3",
+	}
+	s, err := service.New(nil, svcConfig)
+	if err != nil {
+		return 0, err
+	}
+	var status service.Status
+	status, err = s.Status()
+	if err != nil {
+		return 0, err
+	}
+	return int(status), nil
+}
+
+// GetVncServiceStatus 获取服务状态 0.无效 1.运行 2.停止
+func GetVncServiceStatus() (service.Status, error) {
+	svcConfig := &service.Config{
+		Name: "tvnserver",
+	}
+	s, err := service.New(nil, svcConfig)
+	if err != nil {
+		return 0, err
+	}
+	var status service.Status
+	status, err = s.Status()
+	if err != nil {
+		return 0, err
+	}
+	return status, nil
+}
+
+// GetRdpServiceStatus 获取服务状态 0.无效 1.运行 2.停止
+func GetRdpServiceStatus() (service.Status, error) {
+	svcConfig := &service.Config{
+		Name: "TermService",
+	}
+	s, err := service.New(nil, svcConfig)
+	if err != nil {
+		return 0, err
+	}
+	var status service.Status
+	status, err = s.Status()
+	if err != nil {
+		return 0, err
+	}
+	return status, nil
+}
+
+// getMacAddrs 获取本机所有非空 MAC 地址
+func getMacAddrs() (macAddrs []string) {
+	netInterfaces, err := net.Interfaces()
+	if err != nil {
+		fmt.Printf("fail to get net interfaces: %v", err)
+		return macAddrs
+	}
+
+	for _, netInterface := range netInterfaces {
+		macAddr := netInterface.HardwareAddr.String()
+		if len(macAddr) == 0 {
+			continue
+		}
+
+		macAddrs = append(macAddrs, macAddr)
+	}
+	return macAddrs
+}
+
+// getIPs 获取本机所有 IPv4 地址（不含回环）
+func getIPs() (ips []string) {
+
+	interfaceAddr, err := net.InterfaceAddrs()
+	if err != nil {
+		fmt.Printf("fail to get net interface addrs: %v", err)
+		return ips
+	}
+
+	for _, address := range interfaceAddr {
+		ipNet, isValidIpNet := address.(*net.IPNet)
+		if isValidIpNet && !ipNet.IP.IsLoopback() {
+			if ipNet.IP.To4() != nil {
+				ips = append(ips, ipNet.IP.String())
+			}
+		}
+	}
+	return ips
+}
+
+// GetServiceStatus 获取服务状态 0.无效 1.运行 2.停止
+func GetServiceStatus(name string) (int, error) {
+	svcConfig := &service.Config{
+		Name: name,
+	}
+	s, err := service.New(nil, svcConfig)
+	if err != nil {
+		return 0, err
+	}
+	var status service.Status
+	status, err = s.Status()
+	if err != nil {
+		return 0, err
+	}
+	return int(status), nil
+}
+
+// ServiceStart 启动服务
+func ServiceStart(name string) error {
+	svcConfig := &service.Config{
+		Name: name,
+	}
+	s, err := service.New(nil, svcConfig)
+	if err != nil {
+		return err
+	}
+	err = s.Start()
+	if err != nil {
+		return err
+	}
+	return nil
+}
+
+// ServiceStop 停止服务
+func ServiceStop(name string) (i error) {
+	svcConfig := &service.Config{
+		Name: name,
+	}
+	s, err := service.New(nil, svcConfig)
+	if err != nil {
+		return err
+	}
+	err = s.Stop()
+	if err != nil {
+		return err
+	}
+	return nil
+}
+
+// GetServiceReset 重启服务
+func GetServiceReset(name string) (int, error) {
+	svcConfig := &service.Config{
+		Name: name,
+	}
+	s, err := service.New(nil, svcConfig)
+	if err != nil {
+		return 0, err
+	}
+	var status service.Status
+	status, err = s.Status()
+	if err != nil {
+		return 0, err
+	}
+	return int(status), nil
+}
+
+// RunVncService 启动 TightVNC 服务
+func RunVncService() error {
+	svcConfig := &service.Config{
+		Name: "tvnserver",
+	}
+	s, err := service.New(nil, svcConfig)
+	if err != nil {
+		return err
+	}
+	err = s.Start()
+	if err != nil {
+		return err
+	}
+	return nil
+}
@@ -0,0 +1,115 @@
+//go:build windows
+
+package remote
+
+import (
+	"reflect"
+	"testing"
+)
+
+func TestGetServiceStatusNonExist(t *testing.T) {
+	// 不存在的服务应返回错误（Radmin 服务普通机器上不会安装）
+	_, err := GetRadminServiceStatus()
+	if err == nil {
+		t.Log("本机安装了 Radmin 服务，跳过该断言")
+	}
+}
+
+func TestGetRemoteInfo(t *testing.T) {
+	info := GetRemoteInfo()
+	if info.Hostname == "" {
+		t.Error("Hostname 不应为空")
+	}
+	if len(info.IpAddr) == 0 {
+		t.Log("本机无 IPv4 地址（CI 环境可能出现）")
+	}
+	// 只读查询，不应 panic
+	_ = info.RdpState
+	_ = info.VncState
+}
+
+func TestVncPasswordCryptDecrypt(t *testing.T) {
+	password := "tvncpass"
+	encrypted := VncPasswordCrypt(password)
+	if len(encrypted) == 0 {
+		t.Fatal("加密结果不应为空")
+	}
+	if string(encrypted) == password {
+		t.Error("加密结果不应等于明文")
+	}
+	decrypted := VncPasswordDecrypt(encrypted)
+	if decrypted != password {
+		t.Errorf("解密 = %q, want %q", decrypted, password)
+	}
+}
+
+func TestVncServerDefaultConfig(t *testing.T) {
+	cfg := VncServerDefaultConfig(false)
+	if cfg.RfbPort == 0 {
+		t.Error("RfbPort 不应为 0")
+	}
+	if cfg.HttpPort == 0 {
+		t.Error("HttpPort 不应为 0")
+	}
+}
+
+// TestVncClientDefaultConfigLatest 锁定对最新版 TightVNC(2.8.x) 注册表全集的支持：
+// 值与本机最新版安装器落盘值逐项对齐（AcceptHttpConnections/RunControlInterface
+// 为安全策略有意取 0：不开 5800 Web 通道、不显托盘）。
+func TestVncClientDefaultConfigLatest(t *testing.T) {
+	cfg := VncClientDefaultConfig(false)
+	if cfg.RfbPort != 5900 || cfg.HttpPort != 5800 {
+		t.Errorf("端口 = %d/%d, want 5900/5800", cfg.RfbPort, cfg.HttpPort)
+	}
+	// 最新版捕获能力：镜像驱动 + D3D + 透明窗口 + 视频区域识别
+	if cfg.UseMirrorDriver != 1 || cfg.UseD3D != 1 {
+		t.Errorf("捕获开关 = mirror:%d d3d:%d, want 1/1", cfg.UseMirrorDriver, cfg.UseD3D)
+	}
+	if cfg.GrabTransparentWindows != 1 || cfg.VideoRecognitionInterval != 3000 {
+		t.Errorf("透明窗口/视频识别 = %d/%d, want 1/3000", cfg.GrabTransparentWindows, cfg.VideoRecognitionInterval)
+	}
+	// 安全策略：不开 HTTP 通道、不出托盘控制台、不接 RDP 会话
+	if cfg.AcceptHttpConnections != 0 || cfg.RunControlInterface != 0 || cfg.ConnectToRdp != 0 {
+		t.Errorf("安全策略 = http:%d tray:%d rdp:%d, want 0/0/0", cfg.AcceptHttpConnections, cfg.RunControlInterface, cfg.ConnectToRdp)
+	}
+	// 连接行为：VNC 认证 + 接受 RFB + 本机输入优先 + 断开踢旧连接
+	if cfg.AcceptRfbConnections != 1 || cfg.UseVncAuthentication != 1 || cfg.LocalInputPriority != 1 || cfg.DisconnectClients != 1 {
+		t.Errorf("连接行为异常: %+v", cfg)
+	}
+	if cfg.QueryTimeout != 30 || cfg.LocalInputPriorityTimeout != 3 || cfg.PollingInterval != 1000 || cfg.AllowLoopback != 1 {
+		t.Errorf("超时/轮询/环回异常: %+v", cfg)
+	}
+	if len(cfg.Password) == 0 {
+		t.Error("固定密码密文不应为空")
+	}
+	if dec := VncPasswordDecrypt(cfg.Password); dec != "tvncpass" {
+		t.Errorf("固定密码回解 = %q, want tvncpass", dec)
+	}
+}
+
+// TestInstallVncServerMissingExe 安装入口对 tvnserver.exe 缺失必须报错（不触注册表/服务）
+func TestInstallVncServerMissingExe(t *testing.T) {
+	_, err := InstallVncServer(`Z:\no\such\dir\tvnserver.exe`)
+	if err == nil {
+		t.Fatal("exe 不存在时应返回错误")
+	}
+}
+
+// TestVncServerConfigFieldCount 锁定配置字段总数：必须与本机最新版 TightVNC(2.8.x)
+// 注册表 SOFTWARE\TightVNC\Server 下的 37 个值一一对应。加/删字段前先核对注册表全集,
+// 并同步检查 ReadVncServerConfig / WriteVncServerConfig 的逐项覆盖(此前曾漏 LogLevel 写、
+// ConnectToRdp 误读、LogLevel 漏读, 靠本测试与脚本对账拦截)。
+func TestVncServerConfigFieldCount(t *testing.T) {
+	if got := reflect.TypeOf(VncServerConfig{}).NumField(); got != 37 {
+		t.Errorf("VncServerConfig 字段数 = %d, want 37(最新版注册表全集)", got)
+	}
+}
+
+// TestVncPasswordDecryptShortInput 短于 8 字节的密文(缺失/截断)必须返回空串而非 panic
+func TestVncPasswordDecryptShortInput(t *testing.T) {
+	for _, data := range [][]byte{nil, {}, []byte("abc"), []byte("1234567")} {
+		if got := VncPasswordDecrypt(data); got != "" {
+			t.Errorf("VncPasswordDecrypt(len=%d) = %q, want 空串且不 panic", len(data), got)
+		}
+	}
+}
@@ -0,0 +1,47 @@
+// Package remote 提供 RDP/VNC 等远程控制的服务状态查询、配置读写与启停控制。
+package remote
+
+// VncServerConfig TightVNC 服务端配置（对应注册表 SOFTWARE\TightVNC\Server 下的键值）。
+// 37 项 = 最新版 TightVNC(2.8.x) 标准安装落盘的全集（经本机注册表与 tvnserver.exe
+// 字符串表双重核对）。另有 ViewOnlyPassword / ControlPassword 两个条件值（只读密码、
+// 控制接口管理密码，开对应功能才会写入，本库暂不覆盖——WriteVncServerConfig 是
+// 无条件全量写，加字段会向每台客户机落空值），待产品启用只读接入/控制认证时再扩展。
+type VncServerConfig struct {
+	ExtraPorts                  string `json:"extraPorts"`                  // 额外端口
+	QueryTimeout                uint32 `json:"queryTimeout"`                // 查询超时
+	QueryAcceptOnTimeout        uint32 `json:"queryAcceptOnTimeout"`        // 查询接受超时
+	LocalInputPriorityTimeout   uint32 `json:"localInputPriorityTimeout"`   // 本地输入优先级超时
+	LocalInputPriority          uint32 `json:"localInputPriority"`          // 本地输入优先
+	BlockRemoteInput            uint32 `json:"blockRemoteInput"`            // 阻止远程输入
+	BlockLocalInput             uint32 `json:"blockLocalInput"`             // 阻止本地输入
+	IpAccessControl             string `json:"ipAccessControl"`             // IP访问控制
+	RfbPort                     uint32 `json:"rfbPort"`                     // 主端口
+	HttpPort                    uint32 `json:"httpPort"`                    // WEB端口
+	DisconnectAction            uint32 `json:"disconnectAction"`            // 断开动作
+	AcceptRfbConnections        uint32 `json:"acceptRfbConnections"`        // 接受RFB连接
+	UseVncAuthentication        uint32 `json:"useVncAuthentication"`        // 使用VNC认证
+	UseControlAuthentication    uint32 `json:"useControlAuthentication"`    // 使用控制认证
+	RepeatControlAuthentication uint32 `json:"repeatControlAuthentication"` // 重复控制认证
+	LoopbackOnly                uint32 `json:"loopbackOnly"`                // 只允许环回
+	AcceptHttpConnections       uint32 `json:"acceptHttpConnections"`       // HTTP请求连接
+	LogLevel                    uint32 `json:"logLevel"`                    // 日志等级
+	EnableFileTransfers         uint32 `json:"enableFileTransfers"`         // 使文件传输
+	RemoveWallpaper             uint32 `json:"removeWallpaper"`             // 移除墙纸
+	UseD3D                      uint32 `json:"useD3D"`                      // 使用D3D驱动
+	UseMirrorDriver             uint32 `json:"useMirrorDriver"`             // 使用镜像驱动
+	EnableUrlParams             uint32 `json:"enableUrlParams"`             // 用URL参数
+	Password                    []byte `json:"password"`                    // 密码(需要加密)
+	AlwaysShared                uint32 `json:"alwaysShared"`                // 总是共享
+	NeverShared                 uint32 `json:"neverShared"`                 // 从不共享
+	DisconnectClients           uint32 `json:"disconnectClients"`           // 断开客户端后操作
+	PollingInterval             uint32 `json:"pollingInterval"`             // 轮询间隔
+	AllowLoopback               uint32 `json:"allowLoopback"`               // 允许环回
+	VideoRecognitionInterval    uint32 `json:"videoRecognitionInterval"`    // 视频轮询间隔
+	GrabTransparentWindows      uint32 `json:"grabTransparentWindows"`      // 抓取透明窗口
+	SaveLogToAllUsersPath       uint32 `json:"saveLogToAllUsersPath"`       // 保存日志所有用户路径
+	RunControlInterface         uint32 `json:"runControlInterface"`         // 运行控制台接口
+	IdleTimeout                 uint32 `json:"idleTimeout"`                 // 空闲超时
+	VideoClasses                string `json:"videoClasses"`                // 视频窗口类名
+	VideoRects                  string `json:"videoRects"`                  // 视频窗口区域
+	ConnectToRdp                uint32 `json:"connectToRdp"`                // 连接到RDP会话
+}
@@ -0,0 +1,69 @@
+//go:build linux
+
+package remote
+
+import "os"
+
+// GetRemoteInfo 获取远程控制相关信息（Linux 平台仅主机名/IP/MAC）
+func GetRemoteInfo() Info {
+	info := Info{}
+
+	/*var status int
+	status, _ = GetRadminServiceStatus()
+	info.RadminState = status
+
+	status, _ = GetVncServiceStatus()
+	info.VncState = status
+
+	status, _ = GetRdpServiceStatus()
+	info.RdpState = status*/
+
+	/*	var port int
+		port, _ = GetRadminPort()
+		info.RadminPort = port
+
+		port, _ = GetRdpPort()
+		info.RdpPort = port
+
+		port, _ = GetVncPort()
+		info.VncPort = port*/
+
+	hostname, _ := os.Hostname()
+	info.Hostname = hostname
+	info.IpAddr = getIPs()
+	info.MacAddr = getMacAddrs()
+
+	return info
+}
+
+// VncServerDefaultConfig 生成 TightVNC 服务端默认配置（Linux 未实现，返回空配置）
+func VncServerDefaultConfig(randPass bool) VncServerConfig {
+	config := VncServerConfig{}
+	return config
+}
+
+// VncClientDefaultConfig 生成 TightVNC 客户端默认配置（Linux 未实现，返回空配置）
+func VncClientDefaultConfig(randPass bool) VncServerConfig {
+	config := VncServerConfig{}
+	return config
+}
+
+// WriteVncServerConfig 写入 TightVNC 服务端配置（Linux 未实现，直接返回 nil）
+func WriteVncServerConfig(config VncServerConfig) error {
+	return nil
+}
+
+// EnableSoftwareSASGeneration 启用软件SAS模拟输入
+func EnableSoftwareSASGeneration() error {
+	return nil
+}
+
+// EnableWinlogonDisableCAD 关闭 Ctrl + Alt + Del 组合键来登录
+func EnableWinlogonDisableCAD() error {
+	return nil
+}
+
+// EnableSystemDisableCAD 关闭 Ctrl + Alt + Del 组合键来登录
+func EnableSystemDisableCAD() error {
+	return nil
+}
@@ -0,0 +1,188 @@
+//go:build windows
+
+package remote
+
+import (
+	"fmt"
+	"os"
+
+	"github.com/KarpelesLab/vncpasswd"
+	"github.com/kardianos/service"
+	"golang.org/x/sys/windows/registry"
+)
+
+var VncService service.Service
+
+// ReadVncServerConfig 从注册表读取 TightVNC 服务端配置（键值缺失按零值返回）
+func ReadVncServerConfig() (VncServerConfig, error) {
+	var config VncServerConfig
+
+	key, err := registry.OpenKey(registry.LOCAL_MACHINE, "SOFTWARE\\TightVNC\\Server", registry.ALL_ACCESS)
+	if err != nil {
+		return config, err
+	}
+	defer key.Close()
+
+	config.ExtraPorts, _, _ = key.GetStringValue("ExtraPorts")
+	config.QueryTimeout, _, _ = GetDwordValue(key, "QueryTimeout")
+	config.QueryAcceptOnTimeout, _, _ = GetDwordValue(key, "QueryAcceptOnTimeout")
+	config.LocalInputPriorityTimeout, _, _ = GetDwordValue(key, "LocalInputPriorityTimeout")
+	config.LocalInputPriority, _, _ = GetDwordValue(key, "LocalInputPriority")
+	config.BlockRemoteInput, _, _ = GetDwordValue(key, "BlockRemoteInput")
+	config.BlockLocalInput, _, _ = GetDwordValue(key, "BlockLocalInput")
+	config.IpAccessControl, _, _ = key.GetStringValue("IpAccessControl")
+	config.RfbPort, _, _ = GetDwordValue(key, "RfbPort")
+	config.HttpPort, _, _ = GetDwordValue(key, "HttpPort")
+	config.DisconnectAction, _, _ = GetDwordValue(key, "DisconnectAction")
+	config.AcceptRfbConnections, _, _ = GetDwordValue(key, "AcceptRfbConnections")
+	config.UseVncAuthentication, _, _ = GetDwordValue(key, "UseVncAuthentication")
+	config.UseControlAuthentication, _, _ = GetDwordValue(key, "UseControlAuthentication")
+	config.RepeatControlAuthentication, _, _ = GetDwordValue(key, "RepeatControlAuthentication")
+	config.LoopbackOnly, _, _ = GetDwordValue(key, "LoopbackOnly")
+	config.AcceptHttpConnections, _, _ = GetDwordValue(key, "AcceptHttpConnections")
+	config.LogLevel, _, _ = GetDwordValue(key, "LogLevel")
+	config.EnableFileTransfers, _, _ = GetDwordValue(key, "EnableFileTransfers")
+	config.RemoveWallpaper, _, _ = GetDwordValue(key, "RemoveWallpaper")
+	config.UseD3D, _, _ = GetDwordValue(key, "UseD3D")
+	config.UseMirrorDriver, _, _ = GetDwordValue(key, "UseMirrorDriver")
+	config.EnableUrlParams, _, _ = GetDwordValue(key, "EnableUrlParams")
+	config.Password, _, _ = key.GetBinaryValue("Password")
+	config.AlwaysShared, _, _ = GetDwordValue(key, "AlwaysShared")
+	config.NeverShared, _, _ = GetDwordValue(key, "NeverShared")
+	config.DisconnectClients, _, _ = GetDwordValue(key, "DisconnectClients")
+	config.PollingInterval, _, _ = GetDwordValue(key, "PollingInterval")
+	config.AllowLoopback, _, _ = GetDwordValue(key, "AllowLoopback")
+	config.VideoRecognitionInterval, _, _ = GetDwordValue(key, "VideoRecognitionInterval")
+	config.GrabTransparentWindows, _, _ = GetDwordValue(key, "GrabTransparentWindows")
+	config.SaveLogToAllUsersPath, _, _ = GetDwordValue(key, "SaveLogToAllUsersPath")
+	config.RunControlInterface, _, _ = GetDwordValue(key, "RunControlInterface")
+	config.IdleTimeout, _, _ = GetDwordValue(key, "IdleTimeout")
+	config.VideoClasses, _, _ = key.GetStringValue("VideoClasses")
+	config.VideoRects, _, _ = key.GetStringValue("VideoRects")
+	config.ConnectToRdp, _, _ = GetDwordValue(key, "ConnectToRdp")
+
+	return config, nil
+}
+
+// GetDwordValue 读取 REG_DWORD 类型注册表值
+func GetDwordValue(k registry.Key, name string) (val uint32, valtype uint32, err error) {
+	val64 := uint64(0)
+	val64, valtype, err = k.GetIntegerValue(name)
+	val = uint32(val64)
+	return
+}
+
+var vncSvcConfig = &service.Config{
+	Name:        "tvnserver",
+	DisplayName: "TightVNC Server",
+	Description: "TightVNC Server (managed by remote-core)",
+	Arguments:   []string{"-service"},
+}
+
+// InstallVncServer 绿色安装 TightVNC 服务端（需管理员权限）。
+// 最新版注册表全集配置（VncClientDefaultConfig 37 项, 随机 8 位密码）→ 注册系统服务。
+// 装而不启：服务注册后保持 Stopped, 等远程指令再 VncStart（避免常驻监听开端口）;
+// 若服务已在运行则重启以加载新配置。返回生成的明文密码（调用方自行上报/展示）。
+func InstallVncServer(exePath string) (string, error) {
+	if finfo, err := os.Stat(exePath); err != nil || finfo.IsDir() {
+		return "", fmt.Errorf("tvnserver.exe 不存在: %s", exePath)
+	}
+
+	// 最新版 TightVNC 注册表配置全集（含随机密码）
+	config := VncClientDefaultConfig(true)
+	if err := WriteVncServerConfig(config); err != nil {
+		return "", err
+	}
+
+	// 注册系统服务：未安装→安装; 运行中→重启加载新配置; 已停止→保持
+	vncSvcConfig.Executable = exePath
+	if err := VncInit(); err != nil {
+		return "", err
+	}
+	status, err := VncService.Status()
+	switch {
+	case err != nil: // 未安装（kardianos 对未安装服务 Status 返回错误）
+		if err := VncInstall(); err != nil {
+			return "", err
+		}
+	case status == service.StatusRunning:
+		if err := VncRestart(); err != nil {
+			return "", err
+		}
+	}
+	return VncPasswordDecrypt(config.Password), nil
+}
+
+// VncInit 初始化 VNC 服务对象，VncInstall/VncStart 等操作前必须调用
+func VncInit() error {
+	var err error
+	VncService, err = service.New(nil, vncSvcConfig)
+	if err != nil {
+		return err
+	}
+	return nil
+}
+
+// VncInstall 安装 TightVNC 服务
+func VncInstall() error {
+	err := VncService.Install()
+	if err != nil {
+		return err
+	}
+	return nil
+}
+
+// VncUninstall 停止并卸载 TightVNC 服务
+func VncUninstall() error {
+	_ = VncService.Stop()
+	err := VncService.Uninstall()
+	if err != nil {
+		return err
+	}
+	return nil
+}
+
+// VncStart 启动 TightVNC 服务
+func VncStart() error {
+	err := VncService.Start()
+	if err != nil {
+		return err
+	}
+	return nil
+}
+
+// VncStop 停止 TightVNC 服务
+func VncStop() error {
+	err := VncService.Stop()
+	if err != nil {
+		return err
+	}
+	return nil
+}
+
+// VncRestart 重启 TightVNC 服务
+func VncRestart() error {
+	err := VncService.Stop()
+	if err != nil {
+		return err
+	}
+	err = VncService.Start()
+	if err != nil {
+		return err
+	}
+	return nil
+}
+
+// VncPasswordCrypt 加密 VNC 密码（TightVNC 注册表存储格式）
+func VncPasswordCrypt(password string) []byte {
+	return vncpasswd.Crypt(password)
+}
+
+// VncPasswordDecrypt 解密 VNC 密码。密文恒为 8 字节(标准 VNC DES)，
+// 不足 8 字节(缺失/截断)直接返回空串——底层 DES 解密会按前 8 字节切片，短输入必 panic。
+func VncPasswordDecrypt(data []byte) string {
+	if len(data) < 8 {
+		return ""
+	}
+	return vncpasswd.Decrypt(data)
+}
@@ -0,0 +1,455 @@
+//go:build windows
+
+package remote
+
+import (
+	"bytes"
+	"crypto/rand"
+	"golang.org/x/sys/windows/registry"
+	"math/big"
+	"os"
+)
+
+// GetRemoteInfo 一次性获取远程控制相关信息（服务状态/端口/密码/主机信息）
+func GetRemoteInfo() Info {
+	info := Info{}
+
+	status, _ := GetVncServiceStatus()
+	info.VncState = int(status)
+
+	status, _ = GetRdpServiceStatus()
+	info.RdpState = int(status)
+
+	port, _ := GetRdpPort()
+	info.RdpPort = port
+
+	port, _ = GetVncPort()
+	info.VncPort = port
+
+	password, _ := GetVncPassword()
+	info.VncPassword = password
+
+	hostname, _ := os.Hostname()
+	info.Hostname = hostname
+	info.IpAddr = getIPs()
+	info.MacAddr = getMacAddrs()
+
+	return info
+}
+
+// GetVncPort 从注册表读取 TightVNC 主端口
+func GetVncPort() (int, error) {
+	var key registry.Key
+	var err error
+	key, err = registry.OpenKey(registry.LOCAL_MACHINE, `SOFTWARE\TightVNC\Server`, registry.ALL_ACCESS)
+	if err != nil {
+		return 0, err
+	}
+	var val uint64
+	val, _, err = key.GetIntegerValue("RfbPort")
+	if err != nil {
+		return 0, err
+	}
+	var port int = int(val)
+	return port, nil
+}
+
+// GetRdpPort 从注册表读取远程桌面端口
+func GetRdpPort() (int, error) {
+	var key registry.Key
+	var err error
+	key, err = registry.OpenKey(registry.LOCAL_MACHINE, `SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp`, registry.ALL_ACCESS)
+	if err != nil {
+		return 0, err
+	}
+	var val uint64
+	val, _, err = key.GetIntegerValue("PortNumber")
+	if err != nil {
+		return 0, err
+	}
+	var port int = int(val)
+	return port, nil
+}
+
+// GetVncPassword 读取并解密 TightVNC 连接密码
+func GetVncPassword() (string, error) {
+	var key registry.Key
+	var err error
+	key, err = registry.OpenKey(registry.LOCAL_MACHINE, `SOFTWARE\TightVNC\Server`, registry.ALL_ACCESS)
+	if err != nil {
+		return "", err
+	}
+
+	val, _, err := key.GetBinaryValue("Password")
+	if err != nil {
+		return "", err
+	}
+	if len(val) == 0 {
+		return "", err
+	}
+	password := VncPasswordDecrypt(val)
+	if err != nil {
+		return "", err
+	}
+	return password, nil
+}
+
+// VncServerDefaultConfig 生成 TightVNC 服务端默认配置（连接 RDP 会话）
+// randPass 为 true 时生成 8 位随机密码，否则使用固定密码
+func VncServerDefaultConfig(randPass bool) VncServerConfig {
+	password := "tvncpass"
+	if randPass {
+		password = createRandomString(8)
+	}
+	config := VncServerConfig{
+		ExtraPorts:                  "",
+		QueryTimeout:                30,
+		QueryAcceptOnTimeout:        0,
+		LocalInputPriorityTimeout:   3,
+		LocalInputPriority:          1,
+		BlockRemoteInput:            0,
+		BlockLocalInput:             0,
+		IpAccessControl:             "",
+		RfbPort:                     5900,
+		HttpPort:                    5800,
+		DisconnectAction:            0,
+		AcceptRfbConnections:        1,
+		UseVncAuthentication:        1,
+		UseControlAuthentication:    0,
+		RepeatControlAuthentication: 0,
+		LoopbackOnly:                0,
+		AcceptHttpConnections:       0,
+		LogLevel:                    0,
+		EnableFileTransfers:         1,
+		RemoveWallpaper:             1,
+		UseD3D:                      1,
+		UseMirrorDriver:             1,
+		EnableUrlParams:             1,
+		Password:                    VncPasswordCrypt(password),
+		AlwaysShared:                0,
+		NeverShared:                 0,
+		DisconnectClients:           1,
+		PollingInterval:             1000,
+		AllowLoopback:               1,
+		VideoRecognitionInterval:    3000,
+		GrabTransparentWindows:      1,
+		SaveLogToAllUsersPath:       0,
+		RunControlInterface:         0,
+		IdleTimeout:                 0,
+		VideoClasses:                "",
+		VideoRects:                  "",
+		ConnectToRdp:                1,
+	}
+
+	return config
+}
+
+// VncClientDefaultConfig 生成 TightVNC 客户端默认配置（不连接 RDP 会话）
+// randPass 为 true 时生成 8 位随机密码，否则使用固定密码
+func VncClientDefaultConfig(randPass bool) VncServerConfig {
+	password := "tvncpass"
+	if randPass {
+		password = createRandomString(8)
+	}
+	config := VncServerConfig{
+		ExtraPorts:                  "",
+		QueryTimeout:                30,
+		QueryAcceptOnTimeout:        0,
+		LocalInputPriorityTimeout:   3,
+		LocalInputPriority:          1,
+		BlockRemoteInput:            0,
+		BlockLocalInput:             0,
+		IpAccessControl:             "",
+		RfbPort:                     5900,
+		HttpPort:                    5800,
+		DisconnectAction:            0,
+		AcceptRfbConnections:        1,
+		UseVncAuthentication:        1,
+		UseControlAuthentication:    0,
+		RepeatControlAuthentication: 0,
+		LoopbackOnly:                0,
+		AcceptHttpConnections:       0,
+		LogLevel:                    0,
+		EnableFileTransfers:         1,
+		RemoveWallpaper:             0,
+		UseD3D:                      1,
+		UseMirrorDriver:             1,
+		EnableUrlParams:             1,
+		Password:                    VncPasswordCrypt(password),
+		AlwaysShared:                0,
+		NeverShared:                 0,
+		DisconnectClients:           1,
+		PollingInterval:             1000,
+		AllowLoopback:               1,
+		VideoRecognitionInterval:    3000,
+		GrabTransparentWindows:      1,
+		SaveLogToAllUsersPath:       0,
+		RunControlInterface:         0,
+		IdleTimeout:                 0,
+		VideoClasses:                "",
+		VideoRects:                  "",
+		ConnectToRdp:                0,
+	}
+
+	return config
+}
+
+// WriteVncServerConfig 将 TightVNC 服务端配置写入注册表（项不存在时自动创建）
+func WriteVncServerConfig(config VncServerConfig) error {
+
+	key, err := registry.OpenKey(registry.LOCAL_MACHINE, "SOFTWARE\\TightVNC\\Server", registry.ALL_ACCESS)
+	if err != nil {
+		if err == registry.ErrNotExist {
+			// 项不存在 创建它
+			key, _, err = registry.CreateKey(registry.LOCAL_MACHINE, "SOFTWARE\\TightVNC\\Server", registry.ALL_ACCESS)
+			if err != nil {
+				return err
+			}
+		} else {
+			return err
+		}
+	}
+
+	defer key.Close()
+
+	err = key.SetStringValue("ExtraPorts", config.ExtraPorts)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("QueryTimeout", config.QueryTimeout)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("QueryAcceptOnTimeout", config.QueryAcceptOnTimeout)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("LocalInputPriorityTimeout", config.LocalInputPriorityTimeout)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("LocalInputPriority", config.LocalInputPriority)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("BlockRemoteInput", config.BlockRemoteInput)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("BlockLocalInput", config.BlockLocalInput)
+	if err != nil {
+		return err
+	}
+	err = key.SetStringValue("IpAccessControl", config.IpAccessControl)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("RfbPort", config.RfbPort)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("HttpPort", config.HttpPort)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("DisconnectAction", config.DisconnectAction)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("AcceptRfbConnections", config.AcceptRfbConnections)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("UseVncAuthentication", config.UseVncAuthentication)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("UseControlAuthentication", config.UseControlAuthentication)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("RepeatControlAuthentication", config.RepeatControlAuthentication)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("LoopbackOnly", config.LoopbackOnly)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("AcceptHttpConnections", config.AcceptHttpConnections)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("LogLevel", config.LogLevel)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("EnableFileTransfers", config.EnableFileTransfers)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("RemoveWallpaper", config.RemoveWallpaper)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("UseD3D", config.UseD3D)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("UseMirrorDriver", config.UseMirrorDriver)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("EnableUrlParams", config.EnableUrlParams)
+	if err != nil {
+		return err
+	}
+	err = key.SetBinaryValue("Password", config.Password)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("AlwaysShared", config.AlwaysShared)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("NeverShared", config.NeverShared)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("DisconnectClients", config.DisconnectClients)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("PollingInterval", config.PollingInterval)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("AllowLoopback", config.AllowLoopback)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("VideoRecognitionInterval", config.VideoRecognitionInterval)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("GrabTransparentWindows", config.GrabTransparentWindows)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("SaveLogToAllUsersPath", config.SaveLogToAllUsersPath)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("RunControlInterface", config.RunControlInterface)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("IdleTimeout", config.IdleTimeout)
+	if err != nil {
+		return err
+	}
+	err = key.SetStringValue("VideoClasses", config.VideoClasses)
+	if err != nil {
+		return err
+	}
+	err = key.SetStringValue("VideoRects", config.VideoRects)
+	if err != nil {
+		return err
+	}
+	err = key.SetDWordValue("ConnectToRdp", config.ConnectToRdp)
+	if err != nil {
+		return err
+	}
+
+	return nil
+}
+
+// EnableSoftwareSASGeneration 启用软件SAS模拟输入
+func EnableSoftwareSASGeneration() error {
+	// SAS模拟输入
+	key, err := registry.OpenKey(registry.LOCAL_MACHINE, "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", registry.ALL_ACCESS)
+	if err != nil {
+		if err == registry.ErrNotExist {
+			// 项不存在 创建它
+			key, _, err = registry.CreateKey(registry.LOCAL_MACHINE, "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", registry.ALL_ACCESS)
+			if err != nil {
+				return err
+			}
+		} else {
+			return err
+		}
+	}
+
+	defer key.Close()
+
+	err = key.SetDWordValue("SoftwareSASGeneration", 1)
+	if err != nil {
+		return err
+	}
+
+	return nil
+}
+
+// EnableWinlogonDisableCAD 关闭 Ctrl + Alt + Del 组合键来登录
+func EnableWinlogonDisableCAD() error {
+	key, err := registry.OpenKey(registry.LOCAL_MACHINE, "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon", registry.ALL_ACCESS)
+	if err != nil {
+		if err == registry.ErrNotExist {
+			// 项不存在 创建它
+			key, _, err = registry.CreateKey(registry.LOCAL_MACHINE, "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon", registry.ALL_ACCESS)
+			if err != nil {
+				return err
+			}
+		} else {
+			return err
+		}
+	}
+
+	defer key.Close()
+
+	err = key.SetDWordValue("DisableCAD", 1)
+	if err != nil {
+		return err
+	}
+
+	return nil
+}
+
+// EnableSystemDisableCAD 关闭 Ctrl + Alt + Del 组合键来登录
+func EnableSystemDisableCAD() error {
+	key, err := registry.OpenKey(registry.LOCAL_MACHINE, "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", registry.ALL_ACCESS)
+	if err != nil {
+		if err == registry.ErrNotExist {
+			// 项不存在 创建它
+			key, _, err = registry.CreateKey(registry.LOCAL_MACHINE, "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", registry.ALL_ACCESS)
+			if err != nil {
+				return err
+			}
+		} else {
+			return err
+		}
+	}
+
+	defer key.Close()
+
+	err = key.SetDWordValue("DisableCAD", 1)
+	if err != nil {
+		return err
+	}
+
+	return nil
+}
+
+// createRandomString 生成指定长度的随机字符串
+func createRandomString(len int) string {
+	var container string
+	var str = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
+	b := bytes.NewBufferString(str)
+	length := b.Len()
+	bigInt := big.NewInt(int64(length))
+	for i := 0; i < len; i++ {
+		randomInt, _ := rand.Int(rand.Reader, bigInt)
+		container += string(str[randomInt.Int64()])
+	}
+	return container
+}
@@ -0,0 +1,27 @@
+# shell
+
+被控端 Web 终端（自 remote-backend-server internal/handlers/shell 移植，去 DB
+依赖）：WebSocket 交互式终端（Windows ConPTY / Unix pty）+ asciinema 会话录制。
+
+## 路由
+
+```go
+import "git.zeroonesoft.cn/golib/remote-core/shell"
+
+shell.RegisterRoutersWebShell(r *gin.RouterGroup, recDir)
+```
+
+| 方法 | 路径 | 说明 |
+|---|---|---|
+| GET | `/web/shell` | WebSocket 升级，启动终端（Windows 优先 powershell.exe，缺失回退 cmd.exe；Unix 为 bash） |
+| GET | `/web/shell/record` | 录制文件列表 |
+
+## 协议
+
+WebSocket JSON 信封 `OpDataType{op, data}`：输入/输出流与 `resize`（`ResizeDataType`
+调整行列）走同一连接。
+
+## 注意
+
+- 录制为 asciinema 格式，落盘 `recDir`，可用 asciinema 播放器回放审计。
+- `CheckOrigin` 放开所有来源（跨域），接入公网必须由网关侧补鉴权。
@@ -1,31 +1,25 @@
 package shell

 // 移植自 remote-backend-server internal/handlers/shell(去 DB 依赖, ConPTY 终端 + asciinema 录制)。
+// 标准库 http.HandlerFunc 形态, 路由注册经 webhttp.Router 适配(去 gin 化)。

 import (
 	"encoding/json"
 	"fmt"
-	"github.com/gin-gonic/gin"
-	"github.com/gorilla/websocket"
-	"github.com/runletapp/go-console"
-	
-	"github.com/sirupsen/logrus"
-	"io/ioutil"
 	"net/http"
 	"os"
-	"path"
-	"git.zeroonesoft.cn/golib/remote-core/common"
+	"path/filepath"
 	"runtime"
 	"strings"
 	"time"
-)

-type windowSize struct {
-	Rows uint16 `json:"rows"`
-	Cols uint16 `json:"cols"`
-	X    uint16
-	Y    uint16
-}
+	"github.com/gorilla/websocket"
+	"github.com/runletapp/go-console"
+	"github.com/sirupsen/logrus"
+
+	"git.zeroonesoft.cn/golib/remote-core/common"
+	"git.zeroonesoft.cn/golib/remote-core/webhttp"
+)

 var upgrader = websocket.Upgrader{
 	ReadBufferSize:  1024,
@@ -46,16 +40,22 @@ type ResizeDataType struct {
 	Rows int `json:"rows"`
 }

-// RegisterRoutersWebShell 注册路由
-func RegisterRoutersWebShell(r *gin.RouterGroup, recDir string) {
-	r.GET("/web/shell", getWebShell(recDir))
+// recStoreDir 会话录制目录, Register 时注入; 录制写入与记录列表两处共用。
+// 原实现硬编码 ./rec, recDir 形参是死参数(remote-service 传 RunDir/rec 不生效)。
+var recStoreDir = "./rec"
+
+// RegisterRoutersWebShell 注册路由。recDir 为会话录制目录, 传空退回 ./rec。
+func RegisterRoutersWebShell(r webhttp.Router, recDir string) {
+	if recDir != "" {
+		recStoreDir = recDir
+	}
+	r.GET("/web/shell", getWebShell)
 	r.GET("/web/shell/record", RecoderList)
 }

-func getWebShell(recDir string) gin.HandlerFunc {
-	return func(c *gin.Context) {
+func getWebShell(w http.ResponseWriter, r *http.Request) {

-		conn, err := upgrader.Upgrade(c.Writer, c.Request, nil)
+	conn, err := upgrader.Upgrade(w, r, nil)
 	if err != nil {
 		logrus.Errorf("Unable to upgrade connection")
 		return
@@ -63,7 +63,9 @@ func getWebShell(recDir string) gin.HandlerFunc {

 	proc, err := console.New(180, 30)
 	if err != nil {
-			panic(err)
+		logrus.Errorf("创建终端失败:%s", err.Error())
+		conn.Close()
+		return
 	}

 	arr := make([]string, 0)
@@ -80,12 +82,8 @@ func getWebShell(recDir string) gin.HandlerFunc {

 	if err := proc.Start(arr); err != nil {
 		logrus.Errorf("启动出错:%s", err.Error())
-			panic(err)
-		}
-
-		if err != nil {
-			logrus.Errorf("Unable to start pty/cmd")
 		conn.WriteMessage(websocket.TextMessage, []byte(err.Error()))
+		conn.Close()
 		return
 	}
 	defer func() {
@@ -95,8 +93,8 @@ func getWebShell(recDir string) gin.HandlerFunc {

 	var recorder *Recorder

-		os.MkdirAll("./rec", 0766)
-		fileName := path.Join("./rec/", fmt.Sprintf("%s.cast", time.Now().Format("20060102_150405")))
+	os.MkdirAll(recStoreDir, 0766)
+	fileName := filepath.Join(recStoreDir, fmt.Sprintf("%s.cast", time.Now().Format("20060102_150405")))
 	logrus.Debugf("记录文件名:%s", fileName)
 	f, err := os.OpenFile(fileName, os.O_CREATE|os.O_APPEND|os.O_WRONLY, 0766)
 	if err != nil {
@@ -156,7 +154,6 @@ func getWebShell(recDir string) gin.HandlerFunc {

 			opData := OpDataType{}
 			newBuf := buf[:n]
-				fmt.Println("收到数据", string(newBuf))
 			err = json.Unmarshal(newBuf, &opData)
 			if err != nil {
 				logrus.Errorf("解析错误:%s", err.Error())
@@ -164,44 +161,37 @@ func getWebShell(recDir string) gin.HandlerFunc {
 			if opData.Op == "stdin" {
 				value, ok := opData.Data.(string)
 				if ok {
-
 					n, err = proc.Write([]byte(value))
 					if err != nil {
 						logrus.Errorf("写放数据错误g %d bytes", n)
-						} else {
-							fmt.Println("写入成功")
 					}
 				} else {

 				}

 			} else if opData.Op == "resize" {
-					fmt.Println("resize")
-					value, ok := opData.Data.(ResizeDataType)
-					if ok {
-						err = proc.SetSize(value.Cols, value.Rows)
+				// Data 反序列化后是 map[string]interface{}, 不能直接断言 ResizeDataType
+				// (此前断言恒失败, 前端 resize 被静默吞掉, PTY 固定 180x30)
+				raw, merr := json.Marshal(opData.Data)
+				var size ResizeDataType
+				if merr == nil && json.Unmarshal(raw, &size) == nil && size.Cols > 0 && size.Rows > 0 {
+					if serr := proc.SetSize(size.Cols, size.Rows); serr != nil {
+						logrus.Errorf("重置大小错误: %s", serr.Error())
+					}
+				}
+
+			}
+
+		}
+
+	}
+
+}
+
+func RecoderList(w http.ResponseWriter, _ *http.Request) {
+	files, err := os.ReadDir(recStoreDir)
 	if err != nil {
-							logrus.Errorf("重置大小错误 %d bytes", n)
-						} else {
-							fmt.Println("重置大小成功")
-						}
-					} else {
-
-					}
-
-				}
-
-			}
-
-		}
-	}
-
-}
-
-func RecoderList(c *gin.Context) {
-	files, err := ioutil.ReadDir("./rec")
-	if err != nil {
-		c.AbortWithStatusJSON(200, gin.H{"ok": false, "msg": err.Error()})
+		webhttp.WriteJSON(w, http.StatusOK, map[string]any{"ok": false, "msg": err.Error()})
 		return
 	}
 	var filesName []string
@@ -214,5 +204,5 @@ func RecoderList(c *gin.Context) {
 			filesName = append(filesName, f.Name())
 		}
 	}
-	c.JSON(200, filesName)
+	webhttp.WriteJSON(w, http.StatusOK, filesName)
 }
@@ -0,0 +1,69 @@
+// Package webhttp 被控 HTTP 能力的极薄适配层。
+//
+// file/shell/process 三个被控能力包统一以标准库 http.HandlerFunc 为 handler
+// 形态、以 Router 接口收拢路由注册, 不再绑死任何 Web 框架。消费方按自身
+// 技术栈适配: 纯标准库用 ServeMuxRouter 直挂 *http.ServeMux(Go 1.22+ 方法
+// +路径模式); 已有 gin 栈的用 gin.WrapH 桥接, 中间件链照常生效。
+//
+// 由此 gin(连带其拖入的 quic-go/http3、mongo bson、ugorji codec、goccy
+// 等重依赖)从被控端二进制中整体消失, 体积近乎减半。
+package webhttp
+
+import (
+	"encoding/json"
+	"net/http"
+)
+
+// Router file/shell/process 声明路由用的最小接口(pattern 形如
+// "/file/list", 不含组前缀; 前缀由适配器拼)。
+type Router interface {
+	GET(pattern string, h http.HandlerFunc)
+	POST(pattern string, h http.HandlerFunc)
+	PUT(pattern string, h http.HandlerFunc)
+	DELETE(pattern string, h http.HandlerFunc)
+	HEAD(pattern string, h http.HandlerFunc)
+}
+
+// ServeMuxRouter 把 *http.ServeMux 适配为 Router, 注册
+// "METHOD prefix+pattern" 模式路由(如 "GET /api/file/list")。
+// 注册了 GET 的路径自动兼容 HEAD。
+func ServeMuxRouter(mux *http.ServeMux, prefix string) Router {
+	return &muxRouter{mux: mux, prefix: prefix}
+}
+
+type muxRouter struct {
+	mux    *http.ServeMux
+	prefix string
+}
+
+func (m *muxRouter) route(method, pattern string) string {
+	return method + " " + m.prefix + pattern
+}
+
+func (m *muxRouter) GET(pattern string, h http.HandlerFunc) {
+	m.mux.HandleFunc(m.route(http.MethodGet, pattern), h)
+}
+
+func (m *muxRouter) POST(pattern string, h http.HandlerFunc) {
+	m.mux.HandleFunc(m.route(http.MethodPost, pattern), h)
+}
+
+func (m *muxRouter) PUT(pattern string, h http.HandlerFunc) {
+	m.mux.HandleFunc(m.route(http.MethodPut, pattern), h)
+}
+
+func (m *muxRouter) DELETE(pattern string, h http.HandlerFunc) {
+	m.mux.HandleFunc(m.route(http.MethodDelete, pattern), h)
+}
+
+func (m *muxRouter) HEAD(pattern string, h http.HandlerFunc) {
+	m.mux.HandleFunc(m.route(http.MethodHead, pattern), h)
+}
+
+// WriteJSON 统一 JSON 响应(响应头口径与原 gin c.JSON 一致)。
+// 业务码仍在 body 的 code 字段, HTTP 状态恒 200, 与既有前端约定不变。
+func WriteJSON(w http.ResponseWriter, status int, v any) {
+	w.Header().Set("Content-Type", "application/json; charset=utf-8")
+	w.WriteHeader(status)
+	_ = json.NewEncoder(w).Encode(v)
+}
Author	SHA1	Message	Date
w11	872f843c6f	refactor(file,shell,process): 去 gin 化——标准库 http.HandlerFunc + webhttp.Router 适配层 - 新增 webhttp 包: Router 最小路由接口(5 动词) + ServeMuxRouter 适配器 + WriteJSON 统一响应 - file/shell/process 三个被控能力包改以标准库 handler 形态注册, 不再绑死 gin - 由此 gin 及其连带重依赖(quic-go/http3、mongo bson、ugorji codec、goccy、validator)退出被控端二进制 - shell: recDir 死参数修复——原实现硬编码 ./rec, 传入的录制目录不生效; 现录制写入与记录列表同源 - shell: 终端创建失败由 panic 改为记日志后关连接(net/http 按连接兜底恢复, 不再依赖框架 Recovery) - file: 上传落盘不再沿用 SaveUploadedFile 的 MkdirAll+Chmod(Windows 盘根 Chmod 报参数不正确), 保留 MkdirAll 去掉 Chmod - 消费方: remote-client 纯 ServeMux 承载; remote-service 保留 gin 栈经 gin.WrapH 桥接(middle 链照常生效) 破坏性变更: RegisterRouters* 形参 gin.RouterGroup → webhttp.Router, 升级 tag v0.5.0	2026-09-29 08:26:23 +08:00
w11	16e6037dba	fix(shell): Web 终端 resize 失效修复——前端 resize 消息 Data 字段反序列化为 map[string]interface{}, 对 ResizeDataType 的直接类型断言恒失败被静默吞掉, PTY 固定 180x30 与窗口脱节; 改为二次 marshal+unmarshal 解码行列并校验正值后 SetSize	2026-09-25 10:09:39 +08:00
w11	52593ddd7e	docs(remote): VncServerConfig 注明 37 项口径——标准安装落盘全集(经注册表+tvnserver.exe 字符串表双重核对), ViewOnlyPassword/ControlPassword 为条件值暂不覆盖及原因	2026-09-23 20:01:56 +08:00
w11	006138172f	fix(remote): 补 ReadVncServerConfig 漏读的 LogLevel(读/写/结构体三处均达 37 项全集)+VncPasswordDecrypt 短于 8 字节直接返回空串(底层 DES 按前 8 字节切片, 短输入必 panic); 新增字段数锁定与短密文防护单测	2026-09-23 19:55:37 +08:00
w11	38e44f7b4a	fix(remote): VNC 升级支持最新版 TightVNC——修 ReadVncServerConfig 的 ConnectToRdp 误读 ExtraPorts、补 WriteVncServerConfig 漏写的 LogLevel(读/写均达 37 项全集)、InstallVncServer 从固定密码空壳实现为真安装(校验 exe→写最新版全集配置+随机密码→注册服务, 装而不启/运行中重启, 返回明文密码); 锁定最新版默认值与安装异常路径的单测	2026-09-23 19:39:08 +08:00
4566704	181150b7a1	docs: 补齐 common/file/process/shell 四个既有包的 README - 每包定位/路由表/用法与注意事项(鉴权告诫、录制审计、防误杀语义) - 至此 remote-core 全部包 README 覆盖	2026-09-20 12:50:55 +08:00
4566704	8619afe531	chore(deps): go mod tidy 收敛 remote 依赖声明	2026-09-20 12:41:28 +08:00
4566704	9c2a57b576	feat(remote): 自 go-hua/remote 并入远程控制服务管理 - RDP/VNC(TightVNC)/Radmin 服务状态查询与启停重置、VNC 安装/配置读写/密码加解密、GetRemoteInfo 汇总、CAD/SAS 注册表开关 - 与本库 file/shell/process 同属被控端远程运维能力; 新增依赖 kardianos/service、KarpelesLab/vncpasswd - 附 remote_test.go 与包 README(含平台支持矩阵与权限注意)	2026-09-20 12:39:30 +08:00
4566704	d9eb9acd9b	feat(process): 远程进程管理——GET /process/list(gopsutil 全量枚举, 按内存降序) + POST /process/kill(名称防误杀校验, Windows taskkill /T 兜底强杀) 与 file/shell 同为被控 HTTP 能力: BS 与客户机被控端共用, 经 zonat 隧道 + web-gateway typ=process 反代出网	2026-09-20 02:29:36 +08:00
4566704	5cdb1a3980	chore(deps): go 1.24→1.26, gin v1.10→v1.12, logrus v1.9→v1.10 对齐宿主工程版本	2026-09-20 02:29:36 +08:00