Feature: Add MCP device management-control tools (kill/window/service/power)

Add P7 management-control tools behind a single McpManage flag (plus
McpReadonly=0): kill_process, operate_window, control_service and
power_action. The write tools run a ready->confirm lifecycle on their
sub-connection, using a new followUp/followUpSent field to tell the two
arrivals of the same TOKEN_*LIST apart; the write command and the follow-up
refresh command go out as two separate Send2Client calls, with a new
WaitSendIdle() (context.h / Server.h) draining the outbound buffer in between
so the same buffer is never WSASend'd concurrently.

McpSettingsDlg gains a "management operations" checkbox (IDC_MCP_MANAGE), the
main toolbar gains an MCP entry button, and en/de/zh-TW strings are synced.
power_action is fire-and-forget over the main connection (no confirmation).

Verified end-to-end against a real Windows 10/VMware client: kill_process
returns remaining:[] and operate_window/control_service return ok:true with
their confirm packet arriving after an HTTP split. Verification surfaced a
prerequisite parser bug, fixed separately in a72e6eb, where HeaderParser
latched m_bShouldUnmask FALSE on HTTP continuation chunks and dropped the
confirm packet.

Co-Authored-By: deepseek-v4-pro

server/2015Remote/2015RemoteDlg.cpp

@@ -1415,6 +1415,7 @@ VOID CMy2015RemoteDlg::CreateToolBar()
     m_ToolBar.SetButtonText(12, _TR("搜索"));
     m_ToolBar.SetButtonText(13, _TR("帮助"));
     m_ToolBar.SetButtonText(14, _T("Lang/语言"));
+    m_ToolBar.SetButtonText(15, _T("MCP"));
 
     // ============================================================
     //  UIBranding: 根据编译时配置或运行时标志隐藏工具栏按钮
@@ -1465,7 +1466,7 @@ VOID CMy2015RemoteDlg::CreateToolBar()
     }
 
     // 如果所有按钮都被隐藏，则隐藏整个工具栏
-    if (hiddenCount >= 15) {
+    if (hiddenCount >= 16) {
         m_ToolBar.ShowWindow(SW_HIDE);
     }
 
@@ -2209,6 +2210,8 @@ BOOL CMy2015RemoteDlg::OnInitDialog()
         McpServer().SetRemoteControlEnabled(THIS_CFG.GetInt("settings", "McpRemoteControl", 0) != 0);
         // 文件传输开关：默认关；仅 download_file 门控（不要求只读关）。
         McpServer().SetFileTransferEnabled(THIS_CFG.GetInt("settings", "McpFileTransfer", 0) != 0);
+        // P7 管理控制开关：默认关；要求只读关（McpReadonly=0）才生效（工具列表/分派双重门控）。
+        McpServer().SetManageEnabled(THIS_CFG.GetInt("settings", "McpManage", 0) != 0);
         if (!McpServer().Start(mcpBind, mcpPort)) {
             Mprintf("McpServer start failed on %s:%d\n", mcpBind.c_str(), mcpPort);
         } else {
@@ -5202,6 +5205,12 @@ BOOL CALLBACK CMy2015RemoteDlg::OfflineProc(CONTEXT_OBJECT* ContextObject)
         McpServer().OnScreenControlClosed(ContextObject);
     }
 
+    // MCP P7 管理写操作（kill/窗口/服务）接管的子连接断开：清挂起，避免超时路径对
+    // 已回收（连接池复用）的 context 误 CancelIO（与终端/屏幕子连接的清理同理）。
+    if (McpServer().IsRunning()) {
+        McpServer().OnManageSubClosed(ContextObject);
+    }
+
     SOCKET nSocket = ContextObject->sClientSocket;
 
 	CDialogBase* p = (CDialogBase*)ContextObject->hDlg;
@@ -6541,8 +6550,13 @@ VOID CMy2015RemoteDlg::MessageHandle(CONTEXT_OBJECT* ContextObject)
     case TOKEN_PSLIST: { // 进程管理【x】
         // P2b：MCP 挂起时接管。进程/窗口列表无请求 id，按 device_id 匹配并同步拷贝
         // （此时 IO 线程阻塞在 NotifyProc，缓冲尚未被覆盖，拷贝安全）。
+        // P7：写工具（kill_process/operate_window）的「就绪包」与「确认包」是同一 token，
+        // OnSystemReady 命中就绪包时接管子连接并下发写命令（返回 true、不 CancelIO），
+        // 命中确认包或只读工具时返回 false，走 TakeMainResponse + CancelIO 收尾。
         uint64_t devId = ContextObject->GetClientID();
         if (McpServer().IsPending(devId)) {
+            if (McpServer().OnSystemReady(devId, ContextObject))
+                break;
             McpServer().TakeMainResponse(devId, ContextObject->GetBuffer(0), ContextObject->GetBufferLength());
             ContextObject->CancelIO();  // 用完即关，避免子链接泄漏（仿 WebService 终端关闭）
             break;
@@ -6585,8 +6599,12 @@ VOID CMy2015RemoteDlg::MessageHandle(CONTEXT_OBJECT* ContextObject)
     case TOKEN_SERVERLIST: { // 服务管理【x】
         // P3：MCP 挂起时接管。服务列表为一次性子链接回传（CServicesManager 构造即发），
         // 取走即 CancelIO 关子链接（无 MFC 对话框续用该子链接）。
+        // P7：control_service 的就绪/确认是同一 token，OnServiceReady 命中就绪包时接管并下发
+        // COMMAND_SERVICECONFIG（返回 true、不 CancelIO），确认包走 TakeMainResponse 收尾。
         uint64_t devId = ContextObject->GetClientID();
         if (McpServer().IsPending(devId)) {
+            if (McpServer().OnServiceReady(devId, ContextObject))
+                break;
             McpServer().TakeMainResponse(devId, szBuffer, len);
             ContextObject->CancelIO();
             break;