Features

• agent：add PSU agent functionality (#1840) (182abc28c4) (#1848) (a9a2bb508e) (#1851) (e962198fad)

Adding ability to Devolutions Agent to connect to PSU over gRPC and start child processes to run PSRP requests from PSU.

• webapp：align standalone UI with DVLS theme (#1845) (db5866b8a8)

Aligns the standalone Gateway webapp styling with the DVLS theme, adding light and dark theme support and refreshing the main UI surfaces users interact with.

This updates the sidebar, login page, session backgrounds, dropdowns, reconnect form layout, and toast spacing so the standalone Gateway webapp feels consistent with the DVLS experience.

• webapp：add Active Directory web client (#1849) (264932d8ce)

Adds Active Directory support to the standalone Gateway web client, allowing users to open LDAP and LDAPS sessions from the Gateway UI.

The new experience includes an Active Directory connection form, session tab handling, LDAP-backed data operations, and theme-aligned Active Directory UI integration using the published Active Directory web component package.

• dgw：add Session Recording Log artifacts (#1857) (e84baaa94b) (DGW-403)

Adds server-side support for Session Recording Log recording artifacts.

Gateway can now accept JREC recording pushes with fileType=slog, persist the raw UTF-8 NDJSON stream as .slog, and serve .slog downloads with the application/x-ndjson content type. This establishes the Gateway storage contract needed by AD Session Recording Log producers and future viewers.

• agent：implement package broker (#1847) (66c8377d40)

Introduces a package broker in Devolutions Agent that enables policy-driven software installation and management. It supports winget and PowerShell package managers, JSON and YAML policy definitions with evaluation and schema generation, elevated and non-elevated execution with user impersonation, and pipe-based authentication that validates the effective user and calling executable signature.

Bug Fixes

• dgw：write boot.stacktrace file when running as a service (#1838) (48a8512bf6) (DGW-401)

• session：scope RDM jump host discovery to the current Windows session (#1839) (3c9fbf65c0)

Fixes RDM (Remote Desktop Manager) “jump host” discovery to only consider RDM instances running in the current Windows session, preventing cross-session collisions when the same user has multiple concurrent sessions.

• agent-installer：fail the install if the agent tunnel can't reach the gateway (#1837) (559f4c2ba3)

• agent：recover DVC initialization after session readiness (#1852) (b897c59b7c)

Improves Devolutions Agent reliability for RDP connections that use multi-step authentication or reconnect an existing session. The session host now waits for the appropriate Windows logon or unlock event before starting, and transient virtual-channel initialization failures recover automatically instead of ending the session immediately.

• dgw：retry transient KDC connection drops (#1863) (de6c29e684) (DGW-423)

The KDC proxy path sometimes sees a connection accepted and then dropped before a reply is returned (suspected DC-side load：connection throttling or port exhaustion), surfacing to clients as a 502 Bad Gateway. Direct KDC exchanges are now retried up to 3 times on such transient failures, spaced with equal-jitter exponential backoff (~1.5s / 3s / 6s) so a loaded KDC gets breathing room and concurrent retries do not synchronize into a storm. Permanent failures are still surfaced immediately, and the KDC target host is now shown at info level for easier diagnosis.