dsh-winrm 0.3.0 → 0.3.1

package/lib/client.js

@@ -565,93 +565,93 @@ if (typeof document !== "undefined" && document.querySelector("style[data-plugin
 	document.head.appendChild(tag);
 }
 var panel_module_css_default = {
-	"table": "hAbY3W_table",
-	"modalFooter": "hAbY3W_modalFooter",
-	"hiddenFile": "hAbY3W_hiddenFile",
-	"groupChevron": "hAbY3W_groupChevron",
-	"groupToggle": "hAbY3W_groupToggle",
-	"tab": "hAbY3W_tab",
-	"primaryButton": "hAbY3W_primaryButton",
-	"browsePath": "hAbY3W_browsePath",
-	"consoleInputRow": "hAbY3W_consoleInputRow",
-	"backButton": "hAbY3W_backButton",
-	"dirType": "hAbY3W_dirType",
-	"termContainer": "hAbY3W_termContainer",
-	"browseHeader": "hAbY3W_browseHeader",
-	"modalBackdrop": "hAbY3W_modalBackdrop",
-	"groupName": "hAbY3W_groupName",
-	"tableWrap": "hAbY3W_tableWrap",
-	"progressBar": "hAbY3W_progressBar",
-	"toolbarSpacer": "hAbY3W_toolbarSpacer",
+	"formRow": "hAbY3W_formRow",
+	"termPlaceholder": "hAbY3W_termPlaceholder",
+	"entryLabel": "hAbY3W_entryLabel",
+	"search": "hAbY3W_search",
 	"inlineTest": "hAbY3W_inlineTest",
-	"termWrap": "hAbY3W_termWrap",
-	"tunnelLabel": "hAbY3W_tunnelLabel",
-	"dirName": "hAbY3W_dirName",
+	"loading": "hAbY3W_loading",
+	"checkRow": "hAbY3W_checkRow",
+	"tabBody": "hAbY3W_tabBody",
+	"linkButton": "hAbY3W_linkButton",
+	"browseList": "hAbY3W_browseList",
 	"dirRow": "hAbY3W_dirRow",
-	"termBody": "hAbY3W_termBody",
-	"dialogOverlay": "hAbY3W_dialogOverlay",
+	"clusterFilters": "hAbY3W_clusterFilters",
+	"cellPre": "hAbY3W_cellPre",
 	"dialog": "hAbY3W_dialog",
-	"utf8Note": "hAbY3W_utf8Note",
-	"consoleHeader": "hAbY3W_consoleHeader",
-	"mono": "hAbY3W_mono",
-	"spinner": "hAbY3W_spinner",
-	"tunnelList": "hAbY3W_tunnelList",
-	"groupBySelect": "hAbY3W_groupBySelect",
-	"entryIcon": "hAbY3W_entryIcon",
-	"ghostButton": "hAbY3W_ghostButton",
-	"formCard": "hAbY3W_formCard",
 	"fieldLabel": "hAbY3W_fieldLabel",
-	"controls": "hAbY3W_controls",
-	"linkButton": "hAbY3W_linkButton",
-	"formError": "hAbY3W_formError",
-	"modalTitle": "hAbY3W_modalTitle",
-	"tunnelRow": "hAbY3W_tunnelRow",
-	"modal": "hAbY3W_modal",
 	"panelContent": "hAbY3W_panelContent",
-	"empty": "hAbY3W_empty",
-	"loading": "hAbY3W_loading",
-	"progressMeta": "hAbY3W_progressMeta",
-	"checkRow": "hAbY3W_checkRow",
-	"panel": "hAbY3W_panel",
+	"spinner": "hAbY3W_spinner",
+	"transferBlock": "hAbY3W_transferBlock",
+	"consoleOutput": "hAbY3W_consoleOutput",
+	"table": "hAbY3W_table",
+	"dialogOverlay": "hAbY3W_dialogOverlay",
+	"tunnelRow": "hAbY3W_tunnelRow",
+	"browseHeader": "hAbY3W_browseHeader",
+	"primaryButton": "hAbY3W_primaryButton",
+	"panelHeader": "hAbY3W_panelHeader",
+	"consoleInputRow": "hAbY3W_consoleInputRow",
+	"entry": "hAbY3W_entry",
 	"groupSection": "hAbY3W_groupSection",
+	"panelTitle": "hAbY3W_panelTitle",
 	"banner": "hAbY3W_banner",
-	"formRow": "hAbY3W_formRow",
-	"progressTrack": "hAbY3W_progressTrack",
-	"cellMuted": "hAbY3W_cellMuted",
-	"tabBar": "hAbY3W_tabBar",
-	"browsePanel": "hAbY3W_browsePanel",
-	"cellDetails": "hAbY3W_cellDetails",
-	"entry": "hAbY3W_entry",
-	"dirSize": "hAbY3W_dirSize",
+	"empty": "hAbY3W_empty",
+	"modalTitle": "hAbY3W_modalTitle",
+	"modalFooter": "hAbY3W_modalFooter",
+	"groupCount": "hAbY3W_groupCount",
 	"radioRow": "hAbY3W_radioRow",
-	"cellPre": "hAbY3W_cellPre",
-	"search": "hAbY3W_search",
+	"termBody": "hAbY3W_termBody",
+	"groupName": "hAbY3W_groupName",
+	"dirSize": "hAbY3W_dirSize",
+	"field": "hAbY3W_field",
+	"progressMeta": "hAbY3W_progressMeta",
 	"fieldHint": "hAbY3W_fieldHint",
-	"panelHeader": "hAbY3W_panelHeader",
-	"panelTitle": "hAbY3W_panelTitle",
-	"radioLabel": "hAbY3W_radioLabel",
-	"termPlaceholder": "hAbY3W_termPlaceholder",
-	"browseList": "hAbY3W_browseList",
-	"clusterFilters": "hAbY3W_clusterFilters",
-	"transferBlock": "hAbY3W_transferBlock",
-	"consoleWrap": "hAbY3W_consoleWrap",
-	"dshSshSpin": "hAbY3W_dshSshSpin",
-	"groupCount": "hAbY3W_groupCount",
+	"utf8Note": "hAbY3W_utf8Note",
+	"panel": "hAbY3W_panel",
+	"hiddenFile": "hAbY3W_hiddenFile",
+	"backButton": "hAbY3W_backButton",
+	"tableWrap": "hAbY3W_tableWrap",
 	"clusterForm": "hAbY3W_clusterForm",
-	"consoleOutput": "hAbY3W_consoleOutput",
+	"tab": "hAbY3W_tab",
+	"input": "hAbY3W_input",
+	"tunnelLabel": "hAbY3W_tunnelLabel",
+	"iconButton": "hAbY3W_iconButton",
+	"actions": "hAbY3W_actions",
 	"fillBody": "hAbY3W_fillBody",
-	"entryLabel": "hAbY3W_entryLabel",
-	"toolbar": "hAbY3W_toolbar",
+	"toolbarSpacer": "hAbY3W_toolbarSpacer",
+	"ghostButton": "hAbY3W_ghostButton",
+	"termWrap": "hAbY3W_termWrap",
+	"browsePanel": "hAbY3W_browsePanel",
+	"browsePath": "hAbY3W_browsePath",
+	"modal": "hAbY3W_modal",
+	"groupBySelect": "hAbY3W_groupBySelect",
 	"groupHeader": "hAbY3W_groupHeader",
-	"badge": "hAbY3W_badge",
+	"dshSshSpin": "hAbY3W_dshSshSpin",
+	"hint": "hAbY3W_hint",
+	"dirName": "hAbY3W_dirName",
+	"dirType": "hAbY3W_dirType",
+	"progressBar": "hAbY3W_progressBar",
+	"formCard": "hAbY3W_formCard",
+	"modalBackdrop": "hAbY3W_modalBackdrop",
 	"commandInput": "hAbY3W_commandInput",
+	"cellDetails": "hAbY3W_cellDetails",
+	"progressTrack": "hAbY3W_progressTrack",
 	"dialogTitle": "hAbY3W_dialogTitle",
-	"tabBody": "hAbY3W_tabBody",
-	"iconButton": "hAbY3W_iconButton",
-	"field": "hAbY3W_field",
-	"hint": "hAbY3W_hint",
-	"actions": "hAbY3W_actions",
-	"input": "hAbY3W_input"
+	"controls": "hAbY3W_controls",
+	"termContainer": "hAbY3W_termContainer",
+	"consoleWrap": "hAbY3W_consoleWrap",
+	"consoleHeader": "hAbY3W_consoleHeader",
+	"radioLabel": "hAbY3W_radioLabel",
+	"entryIcon": "hAbY3W_entryIcon",
+	"badge": "hAbY3W_badge",
+	"mono": "hAbY3W_mono",
+	"formError": "hAbY3W_formError",
+	"toolbar": "hAbY3W_toolbar",
+	"groupToggle": "hAbY3W_groupToggle",
+	"groupChevron": "hAbY3W_groupChevron",
+	"tabBar": "hAbY3W_tabBar",
+	"cellMuted": "hAbY3W_cellMuted",
+	"tunnelList": "hAbY3W_tunnelList"
 };
 //#endregion
 //#region src/client/panel/ConsoleTab.tsx

package/lib/index.js

@@ -3171,7 +3171,7 @@ function winrmProcessTool(engine) {
 function winrmUploadTool(engine) {
 	return defineTool({
 		name: "winrm_upload",
-		description: "Upload a local file to a configured Windows host (SMB admin share preferred, base64 WinRM chunk fallback). The local path is on THIS machine (the dsh host). Triggers: upload file to Windows server, deploy artifact, copy config to Windows server.",
+		description: "Upload a local file to a configured Windows host. The bytes go over the SMB admin share when it is reachable, otherwise they are streamed over WinRM in one shell with per-chunk gzip (the 48 KiB base64 chunk path is kept only as a fallback). The local path is on THIS machine (the dsh host). Triggers: upload file to Windows server, deploy artifact, copy config to Windows server.",
 		parameters: {
 			alias: {
 				type: "string",
@@ -3239,7 +3239,7 @@ function winrmUploadTool(engine) {
 function winrmDownloadTool(engine) {
 	return defineTool({
 		name: "winrm_download",
-		description: "Download a remote FILE from a configured Windows host to a local path on this machine (SMB admin share preferred, base64 WinRM chunk fallback). Directory download is not supported — download files individually. Triggers: download file from Windows server, fetch remote log/artifact.",
+		description: "Download a remote FILE from a configured Windows host to a local path on this machine. The bytes come over the SMB admin share when it is reachable, otherwise they are streamed over WinRM as parallel byte ranges (the 48 KiB base64 chunk path is kept only as a fallback). Directory download is not supported — download files individually. Triggers: download file from Windows server, fetch remote log/artifact.",
 		parameters: {
 			alias: {
 				type: "string",
@@ -3435,7 +3435,7 @@ const DEFAULT_ENABLED = true;
 /** Order of the announcement section within the tool-guidance band. */
 const SECTION_ORDER = 151;
 /** Model-facing announcement: plugin presence, capabilities, and limits. */
-const WINRM_GUIDANCE = "本机已安装 dsh-winrm 插件（DSH 远程 Windows 运维，WinRM/PowerShell Remoting）：侧边栏「Windows」入口；仿照 dsh-ssh 插件开发。能力：主机配置存 ~/.dsh/dsh-winrm.json（GUI 配置后 agent 方可使用）；winrm_list 列出主机、winrm_exec 执行 PowerShell 命令（UTF-8 信封，中文不乱码）、winrm_service 服务管理（start/stop/restart/启动类型）、winrm_process 进程管理（list/kill）、winrm_upload/winrm_download 文件传输（base64 分块，无 SMB 依赖）、winrm_cluster 集群并发执行；Web 控制台走 WebSocket。认证：通过原生 Node.js WinRM 客户端（winrm-client）的 NTLM/Negotiate 与 Basic 实现，兼容本地账户与域账户；传输支持 http(5985)/https(5986)。前提：目标机需启用 WinRM（scripts/enable-winrm.ps1），本机无需 Python —— WinRM 走纯 Node 依赖。HTTP 仅建议受信内网使用；密码以明文存在用户主目录私有文件（权限 0600）；命令输出可能含敏感信息；传输/执行消耗真实远程资源，先确认再操作。用户提到「Windows 服务器 / WinRM / PowerShell 远程 / 服务管理 / 进程管理」时即指本插件，请据此协作。";
+const WINRM_GUIDANCE = "本机已安装 dsh-winrm 插件（DSH 远程 Windows 运维，WinRM/PowerShell Remoting）：侧边栏「Windows」入口；仿照 dsh-ssh 插件开发。能力：主机配置存 ~/.dsh/dsh-winrm.json（GUI 配置后 agent 方可使用）；winrm_list 列出主机、winrm_exec 执行 PowerShell 命令（UTF-8 信封，中文不乱码）、winrm_service 服务管理（start/stop/restart/启动类型）、winrm_process 进程管理（list/kill）、winrm_upload/winrm_download 文件传输（SMB 管理共享可达时优先，否则走 WinRM 流式传输，无 SMB 依赖，大文件经 SHA256 校验）、winrm_cluster 集群并发执行；Web 控制台走 WebSocket。认证：通过原生 Node.js WinRM 客户端（winrm-client）的 NTLM/Negotiate 与 Basic 实现，兼容本地账户与域账户；传输支持 http(5985)/https(5986)。前提：目标机需启用 WinRM（scripts/enable-winrm.ps1），本机无需 Python —— WinRM 走纯 Node 依赖。HTTP 仅建议受信内网使用；密码以明文存在用户主目录私有文件（权限 0600）；命令输出可能含敏感信息；传输/执行消耗真实远程资源，先确认再操作。用户提到「Windows 服务器 / WinRM / PowerShell 远程 / 服务管理 / 进程管理」时即指本插件，请据此协作。";
 /**
 * Mount the WinRM engine, routes, tools, and announcement.
 * @param ctx - host plugin context carrying webServer/tools/systemPrompt.

package/lib/types/index.d.ts

@@ -1,16 +1,17 @@
 /**
  * dsh-winrm — host half. Mounts the WinRM engine (per-call PowerShell
  * execution with a UTF-8 envelope, streaming console, service/process
- * management, base64-chunked file transfer, cluster), the /api/dsh-winrm
+ * management, streamed file transfer, cluster), the /api/dsh-winrm
  * route family plus the console WebSocket upgrade, the agent tools
  * (winrm_list, winrm_exec, winrm_service, winrm_process, winrm_upload,
  * winrm_download, winrm_cluster), and a system-prompt announcement. The
  * browser half (./client) renders the host manager and operations panel.
  * Everything rides official NPM SDK packages — no dsh source changes.
  *
- * Config is read live through `Volatile` references (`.get()`), so the
- * Settings page can flip `enabled` / `announceToAgent` without remounting;
- * `loader/volatile-update` re-runs the registration sync when they change.
+ * Config is read live through `Volatile` references (`.get()`), so editing
+ * `enabled` / `announceToAgent` in the profile takes effect without
+ * remounting; `loader/volatile-update` re-runs the registration sync when
+ * they change.
  */
 import type { Context, Volatile } from '@deepseek-ai/cordis';
 import z from '@deepseek-ai/schemastery';
@@ -33,7 +34,7 @@ export declare const Config: z<Schemastery.ObjectS<NoInfer<{
     enabled: z<boolean, boolean, "volatile-defined">;
 }>>, "plain">;
 /** Model-facing announcement: plugin presence, capabilities, and limits. */
-export declare const WINRM_GUIDANCE = "\u672C\u673A\u5DF2\u5B89\u88C5 dsh-winrm \u63D2\u4EF6\uFF08DSH \u8FDC\u7A0B Windows \u8FD0\u7EF4\uFF0CWinRM/PowerShell Remoting\uFF09\uFF1A\u4FA7\u8FB9\u680F\u300CWindows\u300D\u5165\u53E3\uFF1B\u4EFF\u7167 dsh-ssh \u63D2\u4EF6\u5F00\u53D1\u3002\u80FD\u529B\uFF1A\u4E3B\u673A\u914D\u7F6E\u5B58 ~/.dsh/dsh-winrm.json\uFF08GUI \u914D\u7F6E\u540E agent \u65B9\u53EF\u4F7F\u7528\uFF09\uFF1Bwinrm_list \u5217\u51FA\u4E3B\u673A\u3001winrm_exec \u6267\u884C PowerShell \u547D\u4EE4\uFF08UTF-8 \u4FE1\u5C01\uFF0C\u4E2D\u6587\u4E0D\u4E71\u7801\uFF09\u3001winrm_service \u670D\u52A1\u7BA1\u7406\uFF08start/stop/restart/\u542F\u52A8\u7C7B\u578B\uFF09\u3001winrm_process \u8FDB\u7A0B\u7BA1\u7406\uFF08list/kill\uFF09\u3001winrm_upload/winrm_download \u6587\u4EF6\u4F20\u8F93\uFF08base64 \u5206\u5757\uFF0C\u65E0 SMB \u4F9D\u8D56\uFF09\u3001winrm_cluster \u96C6\u7FA4\u5E76\u53D1\u6267\u884C\uFF1BWeb \u63A7\u5236\u53F0\u8D70 WebSocket\u3002\u8BA4\u8BC1\uFF1A\u901A\u8FC7\u539F\u751F Node.js WinRM \u5BA2\u6237\u7AEF\uFF08winrm-client\uFF09\u7684 NTLM/Negotiate \u4E0E Basic \u5B9E\u73B0\uFF0C\u517C\u5BB9\u672C\u5730\u8D26\u6237\u4E0E\u57DF\u8D26\u6237\uFF1B\u4F20\u8F93\u652F\u6301 http(5985)/https(5986)\u3002\u524D\u63D0\uFF1A\u76EE\u6807\u673A\u9700\u542F\u7528 WinRM\uFF08scripts/enable-winrm.ps1\uFF09\uFF0C\u672C\u673A\u65E0\u9700 Python \u2014\u2014 WinRM \u8D70\u7EAF Node \u4F9D\u8D56\u3002HTTP \u4EC5\u5EFA\u8BAE\u53D7\u4FE1\u5185\u7F51\u4F7F\u7528\uFF1B\u5BC6\u7801\u4EE5\u660E\u6587\u5B58\u5728\u7528\u6237\u4E3B\u76EE\u5F55\u79C1\u6709\u6587\u4EF6\uFF08\u6743\u9650 0600\uFF09\uFF1B\u547D\u4EE4\u8F93\u51FA\u53EF\u80FD\u542B\u654F\u611F\u4FE1\u606F\uFF1B\u4F20\u8F93/\u6267\u884C\u6D88\u8017\u771F\u5B9E\u8FDC\u7A0B\u8D44\u6E90\uFF0C\u5148\u786E\u8BA4\u518D\u64CD\u4F5C\u3002\u7528\u6237\u63D0\u5230\u300CWindows \u670D\u52A1\u5668 / WinRM / PowerShell \u8FDC\u7A0B / \u670D\u52A1\u7BA1\u7406 / \u8FDB\u7A0B\u7BA1\u7406\u300D\u65F6\u5373\u6307\u672C\u63D2\u4EF6\uFF0C\u8BF7\u636E\u6B64\u534F\u4F5C\u3002";
+export declare const WINRM_GUIDANCE = "\u672C\u673A\u5DF2\u5B89\u88C5 dsh-winrm \u63D2\u4EF6\uFF08DSH \u8FDC\u7A0B Windows \u8FD0\u7EF4\uFF0CWinRM/PowerShell Remoting\uFF09\uFF1A\u4FA7\u8FB9\u680F\u300CWindows\u300D\u5165\u53E3\uFF1B\u4EFF\u7167 dsh-ssh \u63D2\u4EF6\u5F00\u53D1\u3002\u80FD\u529B\uFF1A\u4E3B\u673A\u914D\u7F6E\u5B58 ~/.dsh/dsh-winrm.json\uFF08GUI \u914D\u7F6E\u540E agent \u65B9\u53EF\u4F7F\u7528\uFF09\uFF1Bwinrm_list \u5217\u51FA\u4E3B\u673A\u3001winrm_exec \u6267\u884C PowerShell \u547D\u4EE4\uFF08UTF-8 \u4FE1\u5C01\uFF0C\u4E2D\u6587\u4E0D\u4E71\u7801\uFF09\u3001winrm_service \u670D\u52A1\u7BA1\u7406\uFF08start/stop/restart/\u542F\u52A8\u7C7B\u578B\uFF09\u3001winrm_process \u8FDB\u7A0B\u7BA1\u7406\uFF08list/kill\uFF09\u3001winrm_upload/winrm_download \u6587\u4EF6\u4F20\u8F93\uFF08SMB \u7BA1\u7406\u5171\u4EAB\u53EF\u8FBE\u65F6\u4F18\u5148\uFF0C\u5426\u5219\u8D70 WinRM \u6D41\u5F0F\u4F20\u8F93\uFF0C\u65E0 SMB \u4F9D\u8D56\uFF0C\u5927\u6587\u4EF6\u7ECF SHA256 \u6821\u9A8C\uFF09\u3001winrm_cluster \u96C6\u7FA4\u5E76\u53D1\u6267\u884C\uFF1BWeb \u63A7\u5236\u53F0\u8D70 WebSocket\u3002\u8BA4\u8BC1\uFF1A\u901A\u8FC7\u539F\u751F Node.js WinRM \u5BA2\u6237\u7AEF\uFF08winrm-client\uFF09\u7684 NTLM/Negotiate \u4E0E Basic \u5B9E\u73B0\uFF0C\u517C\u5BB9\u672C\u5730\u8D26\u6237\u4E0E\u57DF\u8D26\u6237\uFF1B\u4F20\u8F93\u652F\u6301 http(5985)/https(5986)\u3002\u524D\u63D0\uFF1A\u76EE\u6807\u673A\u9700\u542F\u7528 WinRM\uFF08scripts/enable-winrm.ps1\uFF09\uFF0C\u672C\u673A\u65E0\u9700 Python \u2014\u2014 WinRM \u8D70\u7EAF Node \u4F9D\u8D56\u3002HTTP \u4EC5\u5EFA\u8BAE\u53D7\u4FE1\u5185\u7F51\u4F7F\u7528\uFF1B\u5BC6\u7801\u4EE5\u660E\u6587\u5B58\u5728\u7528\u6237\u4E3B\u76EE\u5F55\u79C1\u6709\u6587\u4EF6\uFF08\u6743\u9650 0600\uFF09\uFF1B\u547D\u4EE4\u8F93\u51FA\u53EF\u80FD\u542B\u654F\u611F\u4FE1\u606F\uFF1B\u4F20\u8F93/\u6267\u884C\u6D88\u8017\u771F\u5B9E\u8FDC\u7A0B\u8D44\u6E90\uFF0C\u5148\u786E\u8BA4\u518D\u64CD\u4F5C\u3002\u7528\u6237\u63D0\u5230\u300CWindows \u670D\u52A1\u5668 / WinRM / PowerShell \u8FDC\u7A0B / \u670D\u52A1\u7BA1\u7406 / \u8FDB\u7A0B\u7BA1\u7406\u300D\u65F6\u5373\u6307\u672C\u63D2\u4EF6\uFF0C\u8BF7\u636E\u6B64\u534F\u4F5C\u3002";
 /**
  * Mount the WinRM engine, routes, tools, and announcement.
  * @param ctx - host plugin context carrying webServer/tools/systemPrompt.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-winrm",
   "description": "Remote Windows administration for the dsh web GUI: WinRM/PowerShell Remoting host config store (~/.dsh/dsh-winrm.json), PowerShell exec / streaming console / service & process management / streamed file transfer / cluster execution, plus agent tools (winrm_list, winrm_exec, winrm_service, winrm_process, winrm_upload, winrm_download, winrm_cluster). Runs entirely on a native Node.js WinRM client (winrm-client) — no Python/pywinrm required. Standalone Cordis plugin — mounted via cordis.patch.yml + a profile node_modules link, no dsh source changes.",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "type": "module",
   "packageManager": "pnpm@11.7.0",
   "engines": {

package/src/index.ts

@@ -1,16 +1,17 @@
 /**
  * dsh-winrm — host half. Mounts the WinRM engine (per-call PowerShell
  * execution with a UTF-8 envelope, streaming console, service/process
- * management, base64-chunked file transfer, cluster), the /api/dsh-winrm
+ * management, streamed file transfer, cluster), the /api/dsh-winrm
  * route family plus the console WebSocket upgrade, the agent tools
  * (winrm_list, winrm_exec, winrm_service, winrm_process, winrm_upload,
  * winrm_download, winrm_cluster), and a system-prompt announcement. The
  * browser half (./client) renders the host manager and operations panel.
  * Everything rides official NPM SDK packages — no dsh source changes.
  *
- * Config is read live through `Volatile` references (`.get()`), so the
- * Settings page can flip `enabled` / `announceToAgent` without remounting;
- * `loader/volatile-update` re-runs the registration sync when they change.
+ * Config is read live through `Volatile` references (`.get()`), so editing
+ * `enabled` / `announceToAgent` in the profile takes effect without
+ * remounting; `loader/volatile-update` re-runs the registration sync when
+ * they change.
  */
 
 import type { Context, Volatile } from '@deepseek-ai/cordis'
@@ -63,7 +64,7 @@ const DEFAULT_ENABLED = true
 const SECTION_ORDER = 151
 
 /** Model-facing announcement: plugin presence, capabilities, and limits. */
-export const WINRM_GUIDANCE = '本机已安装 dsh-winrm 插件（DSH 远程 Windows 运维，WinRM/PowerShell Remoting）：侧边栏「Windows」入口；仿照 dsh-ssh 插件开发。能力：主机配置存 ~/.dsh/dsh-winrm.json（GUI 配置后 agent 方可使用）；winrm_list 列出主机、winrm_exec 执行 PowerShell 命令（UTF-8 信封，中文不乱码）、winrm_service 服务管理（start/stop/restart/启动类型）、winrm_process 进程管理（list/kill）、winrm_upload/winrm_download 文件传输（base64 分块，无 SMB 依赖）、winrm_cluster 集群并发执行；Web 控制台走 WebSocket。认证：通过原生 Node.js WinRM 客户端（winrm-client）的 NTLM/Negotiate 与 Basic 实现，兼容本地账户与域账户；传输支持 http(5985)/https(5986)。前提：目标机需启用 WinRM（scripts/enable-winrm.ps1），本机无需 Python —— WinRM 走纯 Node 依赖。HTTP 仅建议受信内网使用；密码以明文存在用户主目录私有文件（权限 0600）；命令输出可能含敏感信息；传输/执行消耗真实远程资源，先确认再操作。用户提到「Windows 服务器 / WinRM / PowerShell 远程 / 服务管理 / 进程管理」时即指本插件，请据此协作。'
+export const WINRM_GUIDANCE = '本机已安装 dsh-winrm 插件（DSH 远程 Windows 运维，WinRM/PowerShell Remoting）：侧边栏「Windows」入口；仿照 dsh-ssh 插件开发。能力：主机配置存 ~/.dsh/dsh-winrm.json（GUI 配置后 agent 方可使用）；winrm_list 列出主机、winrm_exec 执行 PowerShell 命令（UTF-8 信封，中文不乱码）、winrm_service 服务管理（start/stop/restart/启动类型）、winrm_process 进程管理（list/kill）、winrm_upload/winrm_download 文件传输（SMB 管理共享可达时优先，否则走 WinRM 流式传输，无 SMB 依赖，大文件经 SHA256 校验）、winrm_cluster 集群并发执行；Web 控制台走 WebSocket。认证：通过原生 Node.js WinRM 客户端（winrm-client）的 NTLM/Negotiate 与 Basic 实现，兼容本地账户与域账户；传输支持 http(5985)/https(5986)。前提：目标机需启用 WinRM（scripts/enable-winrm.ps1），本机无需 Python —— WinRM 走纯 Node 依赖。HTTP 仅建议受信内网使用；密码以明文存在用户主目录私有文件（权限 0600）；命令输出可能含敏感信息；传输/执行消耗真实远程资源，先确认再操作。用户提到「Windows 服务器 / WinRM / PowerShell 远程 / 服务管理 / 进程管理」时即指本插件，请据此协作。'
 
 /**
  * Mount the WinRM engine, routes, tools, and announcement.

package/src/tools.ts

@@ -266,7 +266,7 @@ export function winrmProcessTool(engine: WinRmEngine) {
 export function winrmUploadTool(engine: WinRmEngine) {
   return defineTool({
     name: 'winrm_upload',
-    description: 'Upload a local file to a configured Windows host (SMB admin share preferred, base64 WinRM chunk fallback). The local path is on THIS machine (the dsh host). ' +
+    description: 'Upload a local file to a configured Windows host. The bytes go over the SMB admin share when it is reachable, otherwise they are streamed over WinRM in one shell with per-chunk gzip (the 48 KiB base64 chunk path is kept only as a fallback). The local path is on THIS machine (the dsh host). ' +
       'Triggers: upload file to Windows server, deploy artifact, copy config to Windows server.',
     parameters: {
       alias: { type: 'string', required: true, description: 'Host alias from winrm_list.' },
@@ -305,7 +305,7 @@ export function winrmUploadTool(engine: WinRmEngine) {
 export function winrmDownloadTool(engine: WinRmEngine) {
   return defineTool({
     name: 'winrm_download',
-    description: 'Download a remote FILE from a configured Windows host to a local path on this machine (SMB admin share preferred, base64 WinRM chunk fallback). Directory download is not supported — download files individually. ' +
+    description: 'Download a remote FILE from a configured Windows host to a local path on this machine. The bytes come over the SMB admin share when it is reachable, otherwise they are streamed over WinRM as parallel byte ranges (the 48 KiB base64 chunk path is kept only as a fallback). Directory download is not supported — download files individually. ' +
       'Triggers: download file from Windows server, fetch remote log/artifact.',
     parameters: {
       alias: { type: 'string', required: true, description: 'Host alias from winrm_list.' },