WebSocket-Infrastruktur: bidirektionaler Command-Kanal + TCP-Tunnel

- Agent: WS-Client mit Reconnect, Command-Handler (exec, tunnel_open/close/data)
- Backend: WS-Hub, Tunnel-Manager mit dynamischen Proxy-Ports (10000-20000)
- API: /agents/{id}/exec, /tunnel, /tunnels, /proxy/{tunnel_id}
- Binary WebSocket Messages fuer effiziente Tunnel-Daten
- gorilla/websocket (pure Go, kein CGO)
- README aktualisiert

agent/ws/client.go

@@ -3,9 +3,9 @@ package ws
 import (
 	"context"
 	"crypto/tls"
+	"encoding/json"
 	"fmt"
 	"log"
-	"net/http"
 	"net/url"
 	"sync"
 	"time"
@@ -218,12 +218,27 @@ func (c *Client) readMessages(conn *websocket.Conn, msgChan chan<- Message, errC
 	defer close(msgChan)
 	
 	for {
-		var msg Message
-		if err := conn.ReadJSON(&msg); err != nil {
+		messageType, data, err := conn.ReadMessage()
+		if err != nil {
 			errChan <- err
 			return
 		}
 		
+		if messageType == websocket.BinaryMessage {
+			// Binary-Message für Tunnel-Daten verarbeiten
+			if err := c.tunnelManager.ProcessBinaryMessage(data); err != nil {
+				log.Printf("Binary-Message verarbeiten fehlgeschlagen: %v", err)
+			}
+			continue
+		}
+		
+		// JSON-Message parsen
+		var msg Message
+		if err := json.Unmarshal(data, &msg); err != nil {
+			log.Printf("JSON-Message parsen fehlgeschlagen: %v", err)
+			continue
+		}
+		
 		select {
 		case msgChan <- msg:
 		case <-c.ctx.Done():

agent/ws/handler.go

@@ -6,7 +6,6 @@ import (
 	"log"
 	"os/exec"
 	"strconv"
-	"strings"
 	"time"
 )