Jetsocat፦ ሁሉም ስሪቶች እና የቆዩ ስሪቶች

### Bug Fixes

• _dgw_：start shadow viewers at the live picture ([#2061](https://github.com/Devolutions/devolutions-gateway/issues/2061)) ([3f41378f0b](https://github.com/Devolutions/devolutions-gateway/commit/3f41378f0bcc015d8f099b0cb60f624a8e94ba80)) ([DGW-457](https://devolutions.atlassian.net/browse/DGW-457))

A viewer joining a live recording got every frame since the source's last key frame and started playing from there, so it began behind the live edge, by the whole session when the source sends only one key frame.
Gateway now only decodes those frames and sends the current picture as the first key frame, like before the session streaming rework.

• _agent-installer_：label the package broker as UniGetUI Package Broker ([#2057](https://github.com/Devolutions/devolutions-gateway/issues/2057)) ([72233dfd03](https://github.com/Devolutions/devolutions-gateway/commit/72233dfd03a4223f207c52edc187bf1f5561fe38)) ([#2064](https://github.com/Devolutions/devolutions-gateway/issues/2064)) ([e1dca6a6e9](https://github.com/Devolutions/devolutions-gateway/commit/e1dca6a6e9b406cc4f604310a9944c4c696fec23))

The Agent installer now names the Package Broker feature after the client it serves："UniGetUI Package Broker" in English, "Service d'installation de paquets UniGetUI" in French and "UniGetUI-paketmäklare" in Swedish.

### Security

• _agent_：harden package broker file and executable validation ([#1869](https://github.com/Devolutions/devolutions-gateway/issues/1869)) ([5b0844d816](https://github.com/Devolutions/devolutions-gateway/commit/5b0844d8160d23878d3c18ba5d2a07c32d716708)) ([DGW-419](https://devolutions.atlassian.net/browse/DGW-419)) ([#1870](https://github.com/Devolutions/devolutions-gateway/issues/1870)) ([d1bcc02e80](https://github.com/Devolutions/devolutions-gateway/commit/d1bcc02e80a50a76b3c174129597c7f4842f9f0a)) ([#1872](https://github.com/Devolutions/devolutions-gateway/issues/1872)) ([27f7fc9377](https://github.com/Devolutions/devolutions-gateway/commit/27f7fc9377e939bd2f109246909d506169acff8a)) ([#1889](https://github.com/Devolutions/devolutions-gateway/issues/1889)) ([4e10a490f6](https://github.com/Devolutions/devolutions-gateway/commit/4e10a490f6a365160d364b32827c9d5a838d33d5)) ([#1906](https://github.com/Devolutions/devolutions-gateway/issues/1906)) ([88799db384](https://github.com/Devolutions/devolutions-gateway/commit/88799db384c41dbfae4d6eb92bfc86da53db1cd5))

The Agent now validates package policy files, broker executables, signatures, ownership, and permissions before trusting them for elevated operations.

• _agent_：harden package broker client and execution isolation ([#1871](https://github.com/Devolutions/devolutions-gateway/issues/1871)) ([48f9b0c4b7](https://github.com/Devolutions/devolutions-gateway/commit/48f9b0c4b768ea72a9f561dba7b7988ddbc79dd9)) ([#1873](https://github.com/Devolutions/devolutions-gateway/issues/1873)) ([0e2f9a485c](https://github.com/Devolutions/devolutions-gateway/commit/0e2f9a485c9670bdd750a921607f3cebc487ffc9)) ([#1892](https://github.com/Devolutions/devolutions-gateway/issues/1892)) ([1fe893d2b1](https://github.com/Devolutions/devolutions-gateway/commit/1fe893d2b16211d4f62cf308a7f2f5c0f5b09613)) ([#1902](https://github.com/Devolutions/devolutions-gateway/issues/1902)) ([23a97845f8](https://github.com/Devolutions/devolutions-gateway/commit/23a97845f847664f675227bb0fd39ae33a7476ec)) ([#1903](https://github.com/Devolutions/devolutions-gateway/issues/1903)) ([4c4cd8792f](https://github.com/Devolutions/devolutions-gateway/commit/4c4cd8792f87e663ba3c11bd61af305bbdaca050))

The Agent now verifies the requesting Windows user, restricts temporary scripts and operation hooks, and protects the broker from connection floods.

• _agent_：restrict Agent Tunnel private key permissions on Windows ([#1931](https://github.com/Devolutions/devolutions-gateway/issues/1931)) ([f87b5d7a74](https://github.com/Devolutions/devolutions-gateway/commit/f87b5d7a746cd618f1ce66ed34284e163921193c))

New Agent Tunnel private keys are accessible only to SYSTEM and Administrators.

### Features

• _agent_：add Chocolatey, Scoop, vcpkg, .NET, pip, Cargo, npm, and Bun package broker support ([#1874](https://github.com/Devolutions/devolutions-gateway/issues/1874)) ([8e66d24fe9](https://github.com/Devolutions/devolutions-gateway/commit/8e66d24fe99935410e6fd7c21892fab4f7f25e37)) ([#1876](https://github.com/Devolutions/devolutions-gateway/issues/1876)) ([5e480c9804](https://github.com/Devolutions/devolutions-gateway/commit/5e480c98045c4a85d1e2523c49d1ce522c73a5a3)) ([#1881](https://github.com/Devolutions/devolutions-gateway/issues/1881)) ([235e3a29b5](https://github.com/Devolutions/devolutions-gateway/commit/235e3a29b53adcba54d2e169591bd5c0f179b37f)) ([#1880](https://github.com/Devolutions/devolutions-gateway/issues/1880)) ([d1c276bc57](https://github.com/Devolutions/devolutions-gateway/commit/d1c276bc57417026330bf48f05a07d6341ed6657)) ([#1878](https://github.com/Devolutions/devolutions-gateway/issues/1878)) ([911a658eed](https://github.com/Devolutions/devolutions-gateway/commit/911a658eed79759e0abaec574d0865fbbc5127fd)) ([#1877](https://github.com/Devolutions/devolutions-gateway/issues/1877)) ([3881db378e](https://github.com/Devolutions/devolutions-gateway/commit/3881db378e1440e203294856cdfb6af59d609d14)) ([#1882](https://github.

### Features

• _agent_：add PSU agent functionality ([#1840](https://github.com/Devolutions/devolutions-gateway/issues/1840)) ([182abc28c4](https://github.com/Devolutions/devolutions-gateway/commit/182abc28c4c3e9f6fcc942b393f4c246fa148d44)) ([#1848](https://github.com/Devolutions/devolutions-gateway/issues/1848)) ([a9a2bb508e](https://github.com/Devolutions/devolutions-gateway/commit/a9a2bb508e79d0c45447ed98ca20067fcf883faa)) ([#1851](https://github.com/Devolutions/devolutions-gateway/issues/1851)) ([e962198fad](https://github.com/Devolutions/devolutions-gateway/commit/e962198fad781ecda6c1e09a598a268f82fb6de6))

Adding ability to Devolutions Agent to connect to PSU over gRPC and
start child processes to run PSRP requests from PSU.

• _webapp_：align standalone UI with DVLS theme ([#1845](https://github.com/Devolutions/devolutions-gateway/issues/1845)) ([db5866b8a8](https://github.com/Devolutions/devolutions-gateway/commit/db5866b8a841a3704d509fa2f2ef5b4b91a98f4d))

Aligns the standalone Gateway webapp styling with the DVLS theme, adding
light and dark theme support and refreshing the main UI surfaces users
interact with.

This updates the sidebar, login page, session backgrounds, dropdowns,
reconnect form layout, and toast spacing so the standalone Gateway
webapp feels consistent with the DVLS experience.

• _webapp_：add Active Directory web client ([#1849](https://github.com/Devolutions/devolutions-gateway/issues/1849)) ([264932d8ce](https://github.com/Devolutions/devolutions-gateway/commit/264932d8ce778fad04986ee1e5f3d7972114200d))

Adds Active Directory support to the standalone Gateway web client,
allowing users to open LDAP and LDAPS sessions from the Gateway UI.

The new experience includes an Active Directory connection form, session
tab handling, LDAP-backed data operations, and theme-aligned Active
Directory UI integration using the published Active Directory web
component package.

• _dgw_：add Session Recording Log artifacts ([#1857](https://github.com/Devolutions/devolutions-gateway/issues/1857)) ([e84baaa94b](https://github.com/Devolutions/devolutions-gateway/commit/e84baaa94b418af976f5742ef0201455161652a2)) ([DGW-403](https://devolutions.atlassian.net/browse/DGW-403))

Adds server-side support for Session Recording Log recording artifacts.

Gateway can now accept JREC recording pushes with `fileType=slog`,
persist the raw UTF-8 NDJSON stream as `.slog`, and serve `.slog`
downloads with the `application/x-ndjson` content type. This establishes
the Gateway storage contract needed by AD Session Recording Log
producers and future viewers.

• _agent_：implement package broker ([#1847](https://github.com/Devolutions/devolutions-gateway/issues/1847)) ([66c8377d40](https://github.com/Devolutions/devolutions-gateway/commit/66c8377d4038236424d32224eb88e6cf6c275e96))

Introduces a package broker in Devolutions Agent that enables
policy-driven software installation and management. It supports winget
and PowerShell package managers, JSON and YAML policy definitions with
evaluation and schema generation, elevated and non-elevated execution
with user impersonation, and pipe-based authentication that validates
the effective user and calling executable signature.

### Bug Fixes

• _dgw_：write boot.stacktrace file when running as a service ([#1838](https://github.com/Devolutions/devolutions-gateway/issues/1838)) ([48a8512bf6](https://github.com/Devolutions/devolutions-gateway/commit/48a8512bf656352a6c57958606480daa0f070629)) ([DGW-401](https://devolutions.atlassian.net/browse/DGW-401))

• _session_：scope RDM jump host discovery to the current Windows session ([#1839](https://github.com/Devolutions/devolutions-gateway/issues/1839)) ([3c9fbf65c0](https://github.com/Devolutions/devolutions-gateway/commit/3c9fbf65c0492d1fd02a488b893dc67c6957fe5b))

Fixes RDM (Remote Desktop Manager) “jump host” discovery to only consider RDM instances running in the current Windows session, preventing cross-session collisions when the same user has multi

Features
- agent-installer: deploy desktop agent in main feature (5422ae5eed)
- agent: UX improvement for desktop agent app (ec76aa4f48)
- agent-installer: auto launch desktop app on install (aad097b8e4)
- dgw: add CredSSP certificate configuration keys (#1676) (443e5f0b02)
Add optional CredSspCertificateFile, CredSspPrivateKeyFile and CredSspPrivateKeyPassword
configuration keys allowing usage of a different certificate for CredSSP
credential injection instead of the main TLS certificate. When unset,
the existing TLS certificate is used (no behavior change).
- dgw: generate self-signed certificate when no TLS cert is configured for CredSSP (#1682) (e4a1b121f8)
When neither a CredSSP-specific certificate nor a main TLS certificate
is configured, automatically generate a self-signed certificate for
CredSSP credential injection.
Bug Fixes
- agent-installer: specify ARM64 platform for ARM64 agent installer (43266e8dba)
- agent-installer: cleanup of agent installer (a5ebf58c7a)
Performance
- dgw: improve real-time performance of session shadowing (#1662) (ea2e6a8334) (DGW-341)