chore: 统一本地服务器与远程仓库源码

- 合并 main 与 master 历史并以服务器结构为基线
- 保留迁移、数据保留、AWS 账单与部署安全能力
- 建立 SDD 规格和 CI 验证闭环

backend/controller/rdp.go

@@ -266,9 +266,7 @@ func (h *RDPHandler) Serve(c *gin.Context) {
 		if errMsg != "" {
 			updates["error"] = errMsg
 		}
-		if err := h.db.Model(&model.RDPSession{}).Where("id = ?", session.ID).Updates(updates).Error; err != nil {
-			log.Printf("[RDP] 更新会话结束状态失败 (session_id=%d, status=%s): %v", session.ID, status, err)
-		}
+		_ = h.db.Model(&model.RDPSession{}).Where("id = ?", session.ID).Updates(updates).Error
 	}()
 
 	audit := newRDPOperationRecorder(h.db, session, userIDPtr, username)
@@ -288,6 +286,9 @@ func (h *RDPHandler) Serve(c *gin.Context) {
 				continue
 			}
 			modifiers.Apply(&event)
+			if event.Type == "clipboard" {
+				log.Printf("[RDP] ws clipboard local→remote session=%d len=%d", session.ID, len(event.Text))
+			}
 			audit.Record(event)
 			enqueueRDPEvent(events, event)
 		}
@@ -530,9 +531,7 @@ func (r *rdpOperationRecorder) create(command string) {
 		Command:     command,
 		Timestamp:   time.Now(),
 	}
-	if err := r.db.Create(&cmd).Error; err != nil {
-		log.Printf("[RDPAudit] 记录 RDP 操作命令失败 (session_id=%d, user=%s, cmd=%q): %v", r.session.ID, r.username, command, err)
-	}
+	_ = r.db.Create(&cmd).Error
 }
 
 func (h *RDPHandler) loadRDPCredential(server model.Server) (model.RDPSecretContent, error) {
@@ -662,7 +661,7 @@ func isMostlyBlackRGBA(img *image.RGBA, threshold float64) bool {
 func writeRDPFrame(mgr *wshub.WSManager, conn *websocket.Conn, frame rdpengine.ServerFrame) error {
 	mgr.SetWriteDeadline(conn)
 	if frame.Type == "bitmap" && len(frame.RGBA) > 0 {
-		return conn.WriteMessage(websocket.BinaryMessage, encodeRDPBitmapBinary(frame))
+		return writeCompressedRDPBitmap(conn, frame)
 	}
 	return conn.WriteJSON(frame)
 }