feat: 完善堡垒机与 Agent 智能运维能力

- 支持 Windows Agent 构建、安装脚本和统一上报协议

- 增强 RDP 剪贴板、虚拟盘和文件传输能力

- 新增 AIOps 上下文工具、告警 RCA trace 落库和回放接口

- 重构 docs 模块文档并补充终端、堡垒机、监控、AI Agent 设计

backend/pkg/rdp/session_connect.go

@@ -19,6 +19,11 @@ type Session struct {
 	SharedID uint32
 	Width    int
 	Height   int
+	// ChannelNameByID 记录服务端分配的静态虚拟通道 ID→名称(cliprdr 等)，
+	// 供 readLoop 按通道分发数据给对应 Handler。空表示服务端未授权任何虚拟通道。// Logan.Li
+	ChannelNameByID map[uint16]string
+	// PendingChannelPDUs 缓存握手收尾阶段提前到达的虚拟通道包，避免 cliprdr 初始化被吞。// Logan.Li
+	PendingChannelPDUs []mcsDataIndication
 }
 
 // OpenSession 完成 CredSSP + MCS/GCC 握手并进入可收帧状态 // Logan.Li
@@ -31,7 +36,7 @@ func OpenSession(ctx context.Context, cfg Config) (*Session, error) {
 		cfg.MCSMode = strings.TrimSpace(os.Getenv("RDP_MCS_MODE"))
 	}
 	if cfg.MCSMode == "" {
-		cfg.MCSMode = "grdp-modern"
+		cfg.MCSMode = "modern"
 	}
 	address := fmt.Sprintf("%s:%d", cfg.Host, port)
 	strategies := []credssp.Options{
@@ -80,6 +85,9 @@ func openSessionOnce(ctx context.Context, cfg Config, address string, opts creds
 	}
 	mcsInfo, _ := parseMCSConnectResponse(payload)
 	joinIDs := append([]uint16{mcsGlobalChannelID, userID}, mcsInfo.ServerChannelIDs...)
+	if mcsInfo.MessageChannelID != 0 {
+		joinIDs = append(joinIDs, mcsInfo.MessageChannelID)
+	}
 	for _, channelID := range joinIDs {
 		if _, err := joinMCSChannel(tlsConn, userID, channelID); err != nil {
 			_ = tlsConn.Close()
@@ -91,14 +99,17 @@ func openSessionOnce(ctx context.Context, cfg Config, address string, opts creds
 		_ = tlsConn.Close()
 		return nil, err
 	}
-	if _, err := sendConfirmActiveAndFinalize(tlsConn, cfg, userID, demand); err != nil {
+	_, pending, err := sendConfirmActiveAndFinalize(tlsConn, cfg, userID, demand)
+	if err != nil {
 		_ = tlsConn.Close()
 		return nil, err
 	}
-	if err := requestDisplayUpdates(tlsConn, cfg, userID, demand.sharedID); err != nil {
+	morePending, err := requestDisplayUpdates(tlsConn, cfg, userID, demand.sharedID)
+	if err != nil {
 		_ = tlsConn.Close()
 		return nil, err
 	}
+	pending = append(pending, morePending...)
 	width := cfg.Width
 	if width <= 0 {
 		width = 1280
@@ -109,29 +120,34 @@ func openSessionOnce(ctx context.Context, cfg Config, address string, opts creds
 	}
 	_ = tlsConn.SetDeadline(time.Time{})
 	return &Session{
-		Conn:     tlsConn,
-		UserID:   userID,
-		SharedID: demand.sharedID,
-		Width:    width,
-		Height:   height,
+		Conn:               tlsConn,
+		UserID:             userID,
+		SharedID:           demand.sharedID,
+		Width:              width,
+		Height:             height,
+		ChannelNameByID:    mcsInfo.ChannelNameByID,
+		PendingChannelPDUs: pending,
 	}, nil
 }
 
-func requestDisplayUpdates(rw io.ReadWriter, cfg Config, userID uint16, sharedID uint32) error {
+func requestDisplayUpdates(rw io.ReadWriter, cfg Config, userID uint16, sharedID uint32) ([]mcsDataIndication, error) {
+	var pending []mcsDataIndication
 	if conn, ok := rw.(interface{ SetReadDeadline(time.Time) error }); ok {
 		_ = conn.SetReadDeadline(time.Now().Add(3 * time.Second))
 		pkt, err := ReadWirePacket(rw)
 		_ = conn.SetReadDeadline(time.Time{})
 		if err == nil && !pkt.FastPath {
-			_, _ = parseMCSDataIndication(pkt.Payload)
+			if ind, perr := parseMCSDataIndication(pkt.Payload); perr == nil && ind.channelID != mcsGlobalChannelID {
+				pending = append(pending, ind)
+			}
 		}
 	}
 	body := buildSuppressOutputBody(cfg, true)
 	pdu := buildDataPDU(userID, sharedID, pduType2SuppressOutput, body)
 	if err := transport.WriteX224Data(rw, buildMCSSendDataRequest(userID, mcsGlobalChannelID, pdu)); err != nil {
-		return fmt.Errorf("发送 SuppressOutput 失败: %w", err)
+		return pending, fmt.Errorf("发送 SuppressOutput 失败: %w", err)
 	}
-	return nil
+	return pending, nil
 }
 
 func buildSuppressOutputBody(cfg Config, allow bool) []byte {