Feature: Add host management and connection management MCP tools

Expose the online-list TLS column through list_online_hosts, search_hosts
and get_host_detail. The value comes from the flag the client reports at
login, so old clients always read false.

Add list_network_connections and kill_network_connection on top of the
connection manager sub-connection protocol. The kill path matches the
original 110-byte record instead of rebuilding addresses, supports a dry
run, refuses UDP/IPv6 targets, and verifies that the quadruple really
disappeared instead of assuming success.

Add a host_* family backed by the machine manager protocol: ten read
tools covering every tab of the host management dialog, and four
recoverable write tools for process freeze/thaw, window restore/hide/
maximize/minimize, service start/stop/pause/continue/restart, and
scheduled task run/stop. Every write re-reads the snapshot before sending
and re-checks afterwards, reporting -32009 for stale targets rather than
acting blindly. The family is gated by McpMachine, the risky subset by
McpMachineDangerous, and writes additionally require read-only mode to
be off.

Route managed sub-connections from MessageHandle and OfflineProc, keep
the single-in-flight rule by sharing the pending table with a request
kind, and move the shared JSON/lock/encoding helpers into McpInternal so
both tool families use one implementation. Settings dialog, design docs
and en_US/zh_TW/de_DE translations are updated accordingly.

Co-Authored-By: deepseek-flash

server/2015Remote/2015RemoteDlg.cpp

@@ -2418,6 +2418,11 @@ BOOL CMy2015RemoteDlg::OnInitDialog()
         McpServer().SetFileTransferEnabled(THIS_CFG.GetInt("settings", "McpFileTransfer", 0) != 0);
         // P7 管理控制开关：默认关；要求只读关（McpReadonly=0）才生效（工具列表/分派双重门控）。
         McpServer().SetManageEnabled(THIS_CFG.GetInt("settings", "McpManage", 0) != 0);
+        // P8 主机管理 / 连接管理工具族：总开关默认关（关闭时 16 个工具都不可见）。
+        // 危险子集（进程冻结/解冻、服务停止/重启）在总开关之上再叠一道，默认关。
+        McpServer().SetMachineEnabled(THIS_CFG.GetInt("settings", "McpMachine", 0) != 0);
+        McpServer().SetMachineDangerousEnabled(
+            THIS_CFG.GetInt("settings", "McpMachineDangerous", 0) != 0);
         if (!McpServer().Start(mcpBind, mcpPort)) {
             Mprintf("McpServer start failed on %s:%d\n", mcpBind.c_str(), mcpPort);
         } else {
@@ -5516,6 +5521,12 @@ BOOL CALLBACK CMy2015RemoteDlg::OfflineProc(CONTEXT_OBJECT* ContextObject)
         McpServer().OnManageSubClosed(ContextObject);
     }
 
+    // MCP P8 主机管理 / 连接管理会话的子连接断开：清路由表、唤醒等待线程。必须在
+    // RemoveFromHostList 之前，否则连接池复用同一 context 指针后新连接的包会被误吞。
+    if (McpServer().IsRunning()) {
+        McpServer().OnManagedContextClosed(ContextObject);
+    }
+
     SOCKET nSocket = ContextObject->sClientSocket;
 
 	CDialogBase* p = (CDialogBase*)ContextObject->hDlg;
@@ -5878,6 +5889,14 @@ VOID CMy2015RemoteDlg::MessageHandle(CONTEXT_OBJECT* ContextObject)
         return;
     }
 
+    // ===== MCP 主机管理 / 连接管理：子连接路由（P8）=====
+    // 已绑定的子连接上的所有包由 MCP 消费；未绑定的子连接只有就绪包
+    // TOKEN_SYSINFOLIST(61) / TOKEN_CONNECTION_LIST(255) 会被尝试绑定，其余原样交回
+    // 下方 MFC 分发（用户手动打开对话框的行为不变）。无会话在飞时走无锁快速路径。
+    if (McpServer().OnManagedSubPacket(ContextObject, szBuffer, len)) {
+        return;
+    }
+
     // 【L】：主机上下线和授权
     // 【x】：对话框相关功能
     switch (cmd) {