commit 5db6b9ef68a22d8bc0562a3467a73219e831cbae
Author: 曾志威 <zwzeng@ittx.com.cn>
Date:   Fri Aug 14 00:35:42 2026 +0800

    Initial commit

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 0000000..41146bf
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,191 @@
+name: ci
+
+on:
+  push:
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  rust:
+    runs-on: windows-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@stable
+        with:
+          components: clippy,rustfmt
+      - run: cargo fmt --all -- --check
+      - run: cargo clippy --workspace --all-targets -- -D warnings
+      - run: cargo test --workspace
+
+  web:
+    runs-on: windows-latest
+    defaults:
+      run:
+        working-directory: client/web
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+          cache-dependency-path: client/web/package-lock.json
+      - run: npm ci
+      - run: npm run lint
+      - run: npm run build
+
+  package-preview:
+    runs-on: windows-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@stable
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+          cache-dependency-path: client/web/package-lock.json
+      - run: npm ci
+        working-directory: client/web
+      - name: Build preview package
+        shell: pwsh
+        run: ./packaging/windows/package-preview.ps1
+      - uses: actions/upload-artifact@v4
+        with:
+          name: remotedesk-m0-windows-preview
+          path: |
+            artifacts/*.zip
+            artifacts/SHA256SUMS.txt
+          if-no-files-found: error
+
+  package-installer:
+    runs-on: windows-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@stable
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+          cache-dependency-path: client/web/package-lock.json
+      - run: npm ci
+        working-directory: client/web
+      - name: Test update manifest generator contract
+        run: node ./packaging/windows/test-update-manifest.mjs
+      - name: Build Windows installer
+        shell: pwsh
+        run: ./packaging/windows/package-installer.ps1
+      - uses: actions/upload-artifact@v4
+        with:
+          name: remotedesk-m0-windows-installer
+          path: |
+            artifacts/*.msi
+            artifacts/INSTALLER-SHA256SUMS.txt
+          if-no-files-found: error
+
+  linux-agent:
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@stable
+        with:
+          components: clippy,rustfmt
+      - name: Install Linux media build dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y libgstreamer1.0-dev libgstreamer-plugins-base1.0-dev
+      - name: Test Linux Agent
+        run: |
+          cargo test --locked -p remotedesk-agent-runtime
+          cargo clippy --locked -p remotedesk-agent-runtime --all-targets -- -D warnings
+          cargo build --locked -p remotedesk-agent-runtime --bin remotedesk-file-session
+          sh ./packaging/linux/verify-file-resume.sh target/debug/remotedesk-file-session
+      - name: Build DEB
+        run: sh ./packaging/linux/package-deb.sh
+      - name: Build RPM
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y rpm
+          sh ./packaging/linux/package-rpm.sh
+      - uses: actions/upload-artifact@v4
+        with:
+          name: remotedesk-linux-agent-packages
+          path: |
+            artifacts/*.deb
+            artifacts/*.deb.sha256
+            artifacts/*.rpm
+            artifacts/*.rpm.sha256
+          if-no-files-found: error
+
+  edge-service:
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@stable
+        with:
+          components: clippy,rustfmt
+      - name: Test Edge service
+        run: |
+          cargo test --locked -p remotedesk-edge-service
+          cargo clippy --locked -p remotedesk-edge-service --all-targets -- -D warnings
+      - name: Build Edge DEB
+        run: sh ./packaging/edge/package-deb.sh
+      - uses: actions/upload-artifact@v4
+        with:
+          name: remotedesk-edge-package
+          path: |
+            artifacts/remotedesk-edge_*.deb
+            artifacts/remotedesk-edge_*.deb.sha256
+          if-no-files-found: error
+
+  coturn-pop:
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+      - name: Install coturn tools
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y coturn
+      - name: Start isolated TLS POP and verify transports
+        run: |
+          set -eu
+          work=$(mktemp -d)
+          trap 'test -f "$work/pid" && kill "$(cat "$work/pid")" 2>/dev/null || true; rm -rf "$work"' EXIT
+          openssl req -x509 -newkey rsa:2048 -nodes -days 1 \
+            -subj '/CN=RemoteDesk Test CA' -keyout "$work/ca-key.pem" -out "$work/ca.pem"
+          openssl req -newkey rsa:2048 -nodes -subj '/CN=127.0.0.1' \
+            -addext 'subjectAltName=IP:127.0.0.1' -keyout "$work/turn-key.pem" -out "$work/turn.csr"
+          openssl x509 -req -days 1 -in "$work/turn.csr" -CA "$work/ca.pem" \
+            -CAkey "$work/ca-key.pem" -CAcreateserial -copy_extensions copy \
+            -out "$work/turn-cert.pem"
+          secret='ci-turn-rest-secret-0123456789abcdef'
+          turnserver --fingerprint --use-auth-secret --static-auth-secret "$secret" \
+            --realm ci.remotedesk.invalid --listening-ip 127.0.0.1 --relay-ip 127.0.0.1 \
+            --external-ip 127.0.0.1 --listening-port 3478 --tls-listening-port 5349 \
+            --min-port 49160 --max-port 49179 --cert "$work/turn-cert.pem" \
+            --pkey "$work/turn-key.pem" --no-cli --no-multicast-peers \
+            --pidfile "$work/pid" --log-file stdout &
+          for attempt in $(seq 1 50); do
+            if turnutils_stunclient -p 3478 127.0.0.1 >/dev/null 2>&1; then break; fi
+            if [ "$attempt" -eq 50 ]; then echo 'coturn did not become ready' >&2; exit 1; fi
+            sleep 0.1
+          done
+          REMOTEDESK_TURN_REST_SECRET="$secret" \
+            REMOTEDESK_TURN_VERIFY_CA="$work/ca.pem" \
+            sh ./packaging/edge/verify-coturn.sh
+
+  package-windows-host:
+    runs-on: windows-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@stable
+      - name: Build Windows controlled-endpoint installer
+        shell: pwsh
+        run: ./packaging/windows-host/package-host.ps1
+      - uses: actions/upload-artifact@v4
+        with:
+          name: remotedesk-windows-host-installer
+          path: |
+            artifacts/RemoteDesk-Host-*.msi
+            artifacts/HOST-INSTALLER-SHA256SUMS.txt
+          if-no-files-found: error
diff --git a/.github/workflows/release-windows.yml b/.github/workflows/release-windows.yml
new file mode 100644
index 0000000..90c61b5
--- /dev/null
+++ b/.github/workflows/release-windows.yml
@@ -0,0 +1,203 @@
+name: release-windows
+
+on:
+  push:
+    tags:
+      - 'v*.*.*'
+
+permissions:
+  contents: write
+  id-token: write
+  attestations: write
+
+concurrency:
+  group: windows-production-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  release:
+    runs-on: windows-latest
+    environment: windows-production
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: dtolnay/rust-toolchain@stable
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+          cache-dependency-path: client/web/package-lock.json
+      - name: Install web dependencies
+        working-directory: client/web
+        run: npm ci
+      - name: Validate release tag and repository version
+        id: version
+        shell: pwsh
+        run: |
+          $metadata = cargo metadata --no-deps --format-version 1 | ConvertFrom-Json
+          if ($LASTEXITCODE -ne 0) { throw 'Unable to read Cargo workspace metadata' }
+          $package = $metadata.packages | Where-Object name -eq 'remotedesk-control-service'
+          if (-not $package) { throw 'remotedesk-control-service package metadata is missing' }
+          $version = [string]$package.version
+          if ($version -notmatch '^\d+\.\d+\.\d+$') { throw "Invalid release version: $version" }
+          if ($env:GITHUB_REF_NAME -ne "v$version") {
+            throw "Tag $env:GITHUB_REF_NAME does not match workspace version $version"
+          }
+          "version=$version" >> $env:GITHUB_OUTPUT
+      - name: Import protected signing material
+        id: signing
+        shell: pwsh
+        env:
+          WINDOWS_SIGNING_PFX_BASE64: ${{ secrets.WINDOWS_SIGNING_PFX_BASE64 }}
+          WINDOWS_SIGNING_PFX_PASSWORD: ${{ secrets.WINDOWS_SIGNING_PFX_PASSWORD }}
+          UPDATE_ED25519_PRIVATE_KEY_PEM: ${{ secrets.UPDATE_ED25519_PRIVATE_KEY_PEM }}
+          UPDATE_ED25519_PUBLIC_KEY_BASE64: ${{ secrets.UPDATE_ED25519_PUBLIC_KEY_BASE64 }}
+        run: |
+          foreach ($name in @(
+            'WINDOWS_SIGNING_PFX_BASE64',
+            'WINDOWS_SIGNING_PFX_PASSWORD',
+            'UPDATE_ED25519_PRIVATE_KEY_PEM',
+            'UPDATE_ED25519_PUBLIC_KEY_BASE64'
+          )) {
+            if ([string]::IsNullOrWhiteSpace((Get-Item "Env:$name").Value)) {
+              throw "Required production secret $name is not configured"
+            }
+          }
+          $pfxPath = Join-Path $env:RUNNER_TEMP "remotedesk-signing-$PID.pfx"
+          $keyPath = Join-Path $env:RUNNER_TEMP "remotedesk-update-$PID.pem"
+          try {
+            [IO.File]::WriteAllBytes($pfxPath, [Convert]::FromBase64String($env:WINDOWS_SIGNING_PFX_BASE64))
+            $password = ConvertTo-SecureString $env:WINDOWS_SIGNING_PFX_PASSWORD -AsPlainText -Force
+            $imported = @(Import-PfxCertificate -FilePath $pfxPath -CertStoreLocation Cert:\CurrentUser\My -Password $password)
+            $certificate = $imported | Where-Object HasPrivateKey | Select-Object -First 1
+            if (-not $certificate) { throw 'PFX did not import a certificate with a private key' }
+            [IO.File]::WriteAllText($keyPath, $env:UPDATE_ED25519_PRIVATE_KEY_PEM, [Text.UTF8Encoding]::new($false))
+            "thumbprint=$($certificate.Thumbprint)" >> $env:GITHUB_OUTPUT
+            "key_path=$keyPath" >> $env:GITHUB_OUTPUT
+          } finally {
+            if (Test-Path -LiteralPath $pfxPath) { Remove-Item -LiteralPath $pfxPath -Force }
+          }
+      - name: Build, sign and verify Windows installer
+        shell: pwsh
+        run: |
+          ./packaging/windows/package-installer.ps1 `
+            -SigningCertificateThumbprint '${{ steps.signing.outputs.thumbprint }}' `
+            -TimestampUrl 'https://timestamp.digicert.com' `
+            -ReleaseChannel stable
+          ./packaging/windows-host/package-host.ps1 `
+            -SigningCertificateThumbprint '${{ steps.signing.outputs.thumbprint }}' `
+            -TimestampUrl 'https://timestamp.digicert.com'
+      - name: Create signed update manifest
+        id: manifest
+        shell: pwsh
+        env:
+          EXPECTED_UPDATE_PUBLIC_KEY: ${{ secrets.UPDATE_ED25519_PUBLIC_KEY_BASE64 }}
+        run: |
+          $version = '${{ steps.version.outputs.version }}'
+          $installer = Get-ChildItem -LiteralPath artifacts -Filter "RemoteDesk-M0-$version-*-windows-x64.msi" -File
+          if (@($installer).Count -ne 1) { throw 'Expected exactly one versioned x64 MSI' }
+          $signature = Get-AuthenticodeSignature -LiteralPath $installer.FullName
+          if ([string]$signature.Status -ne 'Valid' -or
+              $signature.SignerCertificate.Thumbprint -ne '${{ steps.signing.outputs.thumbprint }}') {
+            throw 'Final MSI Authenticode verification failed before manifest generation'
+          }
+          $hostInstaller = Get-ChildItem -LiteralPath artifacts -Filter "RemoteDesk-Host-$version-*-windows-x64.msi" -File
+          if (@($hostInstaller).Count -ne 1) { throw 'Expected exactly one versioned x64 Host MSI' }
+          $hostSignature = Get-AuthenticodeSignature -LiteralPath $hostInstaller.FullName
+          if ([string]$hostSignature.Status -ne 'Valid' -or
+              $hostSignature.SignerCertificate.Thumbprint -ne '${{ steps.signing.outputs.thumbprint }}') {
+            throw 'Final Host MSI Authenticode verification failed before publication'
+          }
+          $url = "https://github.com/$env:GITHUB_REPOSITORY/releases/download/$env:GITHUB_REF_NAME/$($installer.Name)"
+          node ./packaging/windows/create-update-manifest.mjs `
+            --installer $installer.FullName `
+            --installer-url $url `
+            --private-key '${{ steps.signing.outputs.key_path }}' `
+            --version $version `
+            --channel stable `
+            --target windows-x64 `
+            --output ./artifacts/stable.json `
+            --public-key-output ./artifacts/update-public-key.txt
+          if ($LASTEXITCODE -ne 0) { throw 'Update manifest generation failed' }
+          $actualKey = (Get-Content -LiteralPath ./artifacts/update-public-key.txt -Raw).Trim()
+          if ($actualKey -cne $env:EXPECTED_UPDATE_PUBLIC_KEY.Trim()) {
+            throw 'Generated update public key does not match the protected expected public key'
+          }
+          "installer=$($installer.FullName)" >> $env:GITHUB_OUTPUT
+          "host_installer=$($hostInstaller.FullName)" >> $env:GITHUB_OUTPUT
+      - name: Generate SPDX SBOM
+        uses: anchore/sbom-action@v0
+        with:
+          path: .
+          format: spdx-json
+          output-file: artifacts/remotedesk-${{ steps.version.outputs.version }}.spdx.json
+          upload-artifact: false
+      - name: Attest final Windows installers
+        uses: actions/attest-build-provenance@v2
+        with:
+          subject-path: |
+            ${{ steps.manifest.outputs.installer }}
+            ${{ steps.manifest.outputs.host_installer }}
+      - name: Upload immutable workflow artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: remotedesk-windows-${{ steps.version.outputs.version }}-signed
+          path: |
+            ${{ steps.manifest.outputs.installer }}
+            ${{ steps.manifest.outputs.host_installer }}
+            artifacts/INSTALLER-SHA256SUMS.txt
+            artifacts/HOST-INSTALLER-SHA256SUMS.txt
+            artifacts/stable.json
+            artifacts/update-public-key.txt
+            artifacts/remotedesk-${{ steps.version.outputs.version }}.spdx.json
+          if-no-files-found: error
+          retention-days: 30
+      - name: Publish GitHub release assets
+        shell: pwsh
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          gh release create $env:GITHUB_REF_NAME `
+            '${{ steps.manifest.outputs.installer }}' `
+            '${{ steps.manifest.outputs.host_installer }}' `
+            ./artifacts/INSTALLER-SHA256SUMS.txt `
+            ./artifacts/HOST-INSTALLER-SHA256SUMS.txt `
+            ./artifacts/stable.json `
+            ./artifacts/update-public-key.txt `
+            ./artifacts/remotedesk-${{ steps.version.outputs.version }}.spdx.json `
+            --verify-tag `
+            --generate-notes `
+            --title "RemoteDesk ${{ steps.version.outputs.version }}"
+      - name: Publish stable update channel
+        shell: pwsh
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          $channelTag = 'stable-channel'
+          gh release view $channelTag *> $null
+          if ($LASTEXITCODE -ne 0) {
+            gh release create $channelTag `
+              --target $env:GITHUB_SHA `
+              --title 'RemoteDesk stable update channel' `
+              --notes 'Machine-readable signed update channel. Installers remain immutable on versioned releases.' `
+              --prerelease
+            if ($LASTEXITCODE -ne 0) { throw 'Unable to create stable update channel' }
+          }
+          gh release upload $channelTag `
+            ./artifacts/stable.json `
+            ./artifacts/update-public-key.txt `
+            --clobber
+          if ($LASTEXITCODE -ne 0) { throw 'Unable to update stable channel assets' }
+      - name: Remove signing material
+        if: always()
+        shell: pwsh
+        run: |
+          $thumbprint = '${{ steps.signing.outputs.thumbprint }}'
+          if ($thumbprint -match '^[0-9A-Fa-f]{40}$') {
+            Remove-Item -LiteralPath "Cert:\CurrentUser\My\$thumbprint" -Force -ErrorAction SilentlyContinue
+          }
+          $keyPath = '${{ steps.signing.outputs.key_path }}'
+          if ($keyPath -and (Test-Path -LiteralPath $keyPath)) {
+            Remove-Item -LiteralPath $keyPath -Force
+          }
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..2519b1a
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,14 @@
+/target/
+/artifacts/
+**/node_modules/
+**/dist/
+**/.vite/
+**/.tsbuildinfo/
+*.log
+*.pfx
+*.p12
+*-private.pem
+.DS_Store
+Thumbs.db
+.idea/
+.vscode/
diff --git a/Cargo.lock b/Cargo.lock
new file mode 100644
index 0000000..b953c42
--- /dev/null
+++ b/Cargo.lock
@@ -0,0 +1,10319 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+
+[[package]]
+name = "ab_glyph"
+version = "0.2.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "01c0457472c38ea5bd1c3b5ada5e368271cb550be7a4ca4a0b4634e9913f6cc2"
+dependencies = [
+ "ab_glyph_rasterizer",
+ "owned_ttf_parser",
+]
+
+[[package]]
+name = "ab_glyph_rasterizer"
+version = "0.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "366ffbaa4442f4684d91e2cd7c5ea7c4ed8add41959a31447066e279e432b618"
+
+[[package]]
+name = "addchain"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2e33f6a175ec6a9e0aca777567f9ff7c3deefc255660df887e7fa3585e9801d8"
+dependencies = [
+ "num-bigint 0.3.3",
+ "num-integer",
+ "num-traits",
+]
+
+[[package]]
+name = "adler2"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "320119579fcad9c21884f5c4861d16174d0e06250625266f50fe6898340abefa"
+
+[[package]]
+name = "aead"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d122413f284cf2d62fb1b7db97e02edb8cda96d769b16e443a4f6195e35662b0"
+dependencies = [
+ "crypto-common 0.1.7",
+ "generic-array",
+]
+
+[[package]]
+name = "aead"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1973cfbc1a2daf9cf550e74e1f088c28e7f7d8c1e1418fb6c9dc5184b7e84c99"
+dependencies = [
+ "crypto-common 0.2.2",
+ "inout 0.2.2",
+]
+
+[[package]]
+name = "aes"
+version = "0.8.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b169f7a6d4742236a0a00c541b845991d0ac43e546831af1249753ab4c3aa3a0"
+dependencies = [
+ "cfg-if",
+ "cipher 0.4.4",
+ "cpufeatures 0.2.17",
+]
+
+[[package]]
+name = "aes"
+version = "0.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8eb277bec05f56a0e0591f155a484cbd0f4f07ff2905051a48c72f004f7ed58"
+dependencies = [
+ "cipher 0.5.2",
+ "cpubits",
+ "cpufeatures 0.3.0",
+]
+
+[[package]]
+name = "aes-gcm"
+version = "0.10.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "831010a0f742e1209b3bcea8fab6a8e149051ba6099432c8cb2cc117dec3ead1"
+dependencies = [
+ "aead 0.5.2",
+ "aes 0.8.4",
+ "cipher 0.4.4",
+ "ctr 0.9.2",
+ "ghash 0.5.1",
+ "subtle",
+]
+
+[[package]]
+name = "aes-gcm"
+version = "0.11.0-rc.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da8c919c118108f144adecad74b425b804ad075580d605d9b33c2d6d1c62a2f8"
+dependencies = [
+ "aead 0.6.1",
+ "aes 0.9.2",
+ "cipher 0.5.2",
+ "ctr 0.10.1",
+ "ghash 0.6.0",
+ "subtle",
+]
+
+[[package]]
+name = "aes-kw"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41ac571010bd60765c56085a4f1d412012a9be2663b1a2f2b19b49318653fd0d"
+dependencies = [
+ "aes 0.9.2",
+ "const-oid 0.10.2",
+]
+
+[[package]]
+name = "ahash"
+version = "0.8.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a15f179cd60c4584b8a8c596927aadc462e27f2ca70c04e0071964a73ba7a75"
+dependencies = [
+ "cfg-if",
+ "getrandom 0.3.4",
+ "once_cell",
+ "version_check",
+ "zerocopy",
+]
+
+[[package]]
+name = "aho-corasick"
+version = "1.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c982642fa9e8606056828ee9a8505737230110bb1099153c79efe865c59d12ba"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "alsa"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "812947049edcd670a82cd5c73c3661d2e58468577ba8489de58e1a73c04cbd5d"
+dependencies = [
+ "alsa-sys",
+ "bitflags 2.13.1",
+ "cfg-if",
+ "libc",
+]
+
+[[package]]
+name = "alsa-sys"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ad7569085a265dd3f607ebecce7458eaab2132a84393534c95b18dcbc3f31e04"
+dependencies = [
+ "libc",
+ "pkg-config",
+]
+
+[[package]]
+name = "android-activity"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0f2a1bb052857d5dd49572219344a7332b31b76405648eabac5bc68978251bcd"
+dependencies = [
+ "android-properties",
+ "bitflags 2.13.1",
+ "cc",
+ "jni 0.22.4",
+ "libc",
+ "log",
+ "ndk",
+ "ndk-context",
+ "ndk-sys",
+ "num_enum",
+ "thiserror 2.0.20",
+]
+
+[[package]]
+name = "android-properties"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc7eb209b1518d6bb87b283c20095f5228ecda460da70b44f0802523dea6da04"
+
+[[package]]
+name = "android_system_properties"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ae221649c9976a6f6c56ae1facf410f3ddb33cc661c4b7b61020a912d4237fbc"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "anstream"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d"
+dependencies = [
+ "anstyle",
+ "anstyle-parse",
+ "anstyle-query",
+ "anstyle-wincon",
+ "colorchoice",
+ "is_terminal_polyfill",
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle"
+version = "1.0.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000"
+
+[[package]]
+name = "anstyle-parse"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e"
+dependencies = [
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle-query"
+version = "1.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "anstyle-wincon"
+version = "3.0.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d"
+dependencies = [
+ "anstyle",
+ "once_cell_polyfill",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "anyhow"
+version = "1.0.104"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "330a5ed07fa54e4702c9d6c4174f74427fc0ef6e214bbd677ae50a5099946470"
+
+[[package]]
+name = "arrayref"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76a2e8124351fda1ef8aaaa3bbd7ebbcb486bbcd4225aca0aa0d84bb2db8fecb"
+
+[[package]]
+name = "arrayvec"
+version = "0.7.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3fb67a6e08acf24fdeccbac2cb6ac4305825bd1f117462e0e6f2f193345ad56"
+
+[[package]]
+name = "as-raw-xcb-connection"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "175571dd1d178ced59193a6fc02dde1b972eb0bc56c892cde9beeceac5bf0f6b"
+
+[[package]]
+name = "ascii"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d92bec98840b8f03a5ff5413de5293bfcd8bf96467cf5452609f939ec6f5de16"
+
+[[package]]
+name = "asn1-rs"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5493c3bedbacf7fd7382c6346bbd66687d12bbaad3a89a2d2c303ee6cf20b048"
+dependencies = [
+ "asn1-rs-derive 0.5.1",
+ "asn1-rs-impl",
+ "displaydoc",
+ "nom",
+ "num-traits",
+ "rusticata-macros",
+ "thiserror 1.0.69",
+ "time",
+]
+
+[[package]]
+name = "asn1-rs"
+version = "0.7.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7f43a50ac4fdca5df8e885c21b835997f0a1cdee65494a6847694a98652d9d8"
+dependencies = [
+ "asn1-rs-derive 0.6.0",
+ "asn1-rs-impl",
+ "displaydoc",
+ "nom",
+ "num-traits",
+ "rusticata-macros",
+ "thiserror 2.0.20",
+ "time",
+]
+
+[[package]]
+name = "asn1-rs-derive"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "965c2d33e53cb6b267e148a4cb0760bc01f4904c1cd4bb4002a085bb016d1490"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+ "synstructure",
+]
+
+[[package]]
+name = "asn1-rs-derive"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3109e49b1e4909e9db6515a30c633684d68cdeaa252f215214cb4fa1a5bfee2c"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+ "synstructure",
+]
+
+[[package]]
+name = "asn1-rs-impl"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7b18050c2cd6fe86c3a76584ef5e0baf286d038cda203eb6223df2cc413565f7"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "async-broadcast"
+version = "0.7.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "435a87a52755b8f27fcf321ac4f04b2802e337c8c4872923137471ec39c37532"
+dependencies = [
+ "event-listener",
+ "event-listener-strategy",
+ "futures-core",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "async-channel"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "924ed96dd52d1b75e9c1a3e6275715fd320f5f9439fb5a4a11fa51f4221158d2"
+dependencies = [
+ "concurrent-queue",
+ "event-listener-strategy",
+ "futures-core",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "async-dnssd"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3d49ffe175ab45bbfd74b548313d9d7cdfff27161a94b007b52eeeb5f9aaa15e"
+dependencies = [
+ "bitflags 1.3.2",
+ "futures-channel",
+ "futures-core",
+ "futures-executor",
+ "futures-util",
+ "libc",
+ "log",
+ "pin-utils",
+ "pkg-config",
+ "tokio",
+ "winapi",
+]
+
+[[package]]
+name = "async-recursion"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b43422f69d8ff38f95f1b2bb76517c91589a924d1559a0e935d7c8ce0274c11"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "async-trait"
+version = "0.1.92"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "82f6aeea286b8eb4dd3431a1be1b59d290ace00f5bfd8e2a159bc2a05e2c1667"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.3",
+]
+
+[[package]]
+name = "atk"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "241b621213072e993be4f6f3a9e4b45f65b7e6faad43001be957184b7bb1824b"
+dependencies = [
+ "atk-sys",
+ "glib 0.18.5",
+ "libc",
+]
+
+[[package]]
+name = "atk-sys"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c5e48b684b0ca77d2bbadeef17424c2ea3c897d44d566a1617e7e8f30614d086"
+dependencies = [
+ "glib-sys 0.18.1",
+ "gobject-sys 0.18.0",
+ "libc",
+ "system-deps 6.2.2",
+]
+
+[[package]]
+name = "atomic-polyfill"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8cf2bce30dfe09ef0bfaef228b9d414faaf7e563035494d7fe092dba54b300f4"
+dependencies = [
+ "critical-section",
+]
+
+[[package]]
+name = "atomic-waker"
+version = "1.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1505bd5d3d116872e7271a6d4e16d81d0c8570876c8de68093a09ac269d8aac0"
+
+[[package]]
+name = "atomic_refcell"
+version = "0.1.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "21e4227379beff4205943696e6c3e0cd809bacdf3f0edd6e3dd153e2269571a4"
+
+[[package]]
+name = "autocfg"
+version = "1.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2032f911046de80f0a198e0901378627c33f59ea0ac00e363d481118bd70a53"
+
+[[package]]
+name = "aws-lc-rs"
+version = "1.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ce2b2dcc879c3bae0d371e77c99f2238400ef24ec001394befa67b6e543add9e"
+dependencies = [
+ "aws-lc-sys",
+ "zeroize",
+]
+
+[[package]]
+name = "aws-lc-sys"
+version = "0.44.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f09fae7be8bb3174e05c6afdb34199e6dc0c7c04ba9fa237b1967adfbde27483"
+dependencies = [
+ "cc",
+ "cmake",
+ "dunce",
+ "fs_extra",
+ "pkg-config",
+]
+
+[[package]]
+name = "base16ct"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4c7f02d4ea65f2c1853089ffd8d2787bdbc63de2f0d29dedbcf8ccdfa0ccd4cf"
+
+[[package]]
+name = "base16ct"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fd307490d624467aa6f74b0eabb77633d1f758a7b25f12bceb0b22e08d9726f6"
+
+[[package]]
+name = "base64"
+version = "0.21.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9d297deb1925b89f2ccc13d7635fa0714f12c87adce1c75356b39ca9b7178567"
+
+[[package]]
+name = "base64"
+version = "0.22.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
+
+[[package]]
+name = "base64ct"
+version = "1.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06"
+
+[[package]]
+name = "bit-set"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "08807e080ed7f9d5433fa9b275196cfc35414f66a0c79d864dc51a0d825231a3"
+dependencies = [
+ "bit-vec 0.8.0",
+]
+
+[[package]]
+name = "bit-vec"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e764a1d40d510daf35e07be9eb06e75770908c27d411ee6c92109c9840eaaf7"
+
+[[package]]
+name = "bit-vec"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b71798fca2c1fe1086445a7258a4bc81e6e49dcd24c8d0dd9a1e57395b603f51"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "bit_field"
+version = "0.10.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e4b40c7323adcfc0a41c4b88143ed58346ff65a288fc144329c5c45e05d70c6"
+
+[[package]]
+name = "bitflags"
+version = "1.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a"
+
+[[package]]
+name = "bitflags"
+version = "2.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b588b76d00fde79687d7646a9b5bdf3cc0f655e0bbd080335a95d7e96f3587da"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "bitvec"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ddcec3d12c579d40898fe0a9a358a803c23e9c52ca3c425707f81c9436211837"
+dependencies = [
+ "funty",
+ "radium",
+ "tap",
+ "wyz",
+]
+
+[[package]]
+name = "block-buffer"
+version = "0.10.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71"
+dependencies = [
+ "generic-array",
+]
+
+[[package]]
+name = "block-buffer"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d2f6c7dbe95a6ed67ad9f18e57daf93a2f034c524b99fd2b76d18fdfeb6660aa"
+dependencies = [
+ "hybrid-array",
+]
+
+[[package]]
+name = "block-padding"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a8894febbff9f758034a5b8e12d87918f56dfc64a8e1fe757d65e29041538d93"
+dependencies = [
+ "generic-array",
+]
+
+[[package]]
+name = "block-padding"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "710f1dd022ef4e93f8a438b4ba958de7f64308434fa6a87104481645cc30068b"
+dependencies = [
+ "hybrid-array",
+]
+
+[[package]]
+name = "block2"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2c132eebf10f5cad5289222520a4a058514204aed6d791f1cf4fe8088b82d15f"
+dependencies = [
+ "objc2 0.5.2",
+]
+
+[[package]]
+name = "block2"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdeb9d870516001442e364c5220d3574d2da8dc765554b4a617230d33fa58ef5"
+dependencies = [
+ "objc2 0.6.4",
+]
+
+[[package]]
+name = "bs58"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bf88ba1141d185c399bee5288d850d63b8369520c1eafc32a0430b5b6c287bf4"
+dependencies = [
+ "tinyvec",
+]
+
+[[package]]
+name = "bumpalo"
+version = "3.20.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72f5acc6cb2ba439de613abc23857ec3d78374d8ed5ac84e9d11336e87da8649"
+
+[[package]]
+name = "bytecheck"
+version = "0.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "26333eeac754f0ad8a6bcd0eb0ac012156302e4e16b852b72ee399aea4f12c29"
+dependencies = [
+ "bytecheck_derive",
+ "ptr_meta",
+ "rancor",
+ "simdutf8",
+]
+
+[[package]]
+name = "bytecheck_derive"
+version = "0.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "46d07918caa9eeaaf06b7873925c53a61daac173539b4f7715090745e44e4e69"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.3",
+]
+
+[[package]]
+name = "bytemuck"
+version = "1.25.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "95832e849adfb21180ccb6826a99da14e5d266ae5c2e668e1602cf234f153797"
+dependencies = [
+ "bytemuck_derive",
+]
+
+[[package]]
+name = "bytemuck_derive"
+version = "1.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc0e56a716f1e132ff6bf4bdac1c944a3fcdc1cae65f70a4a2a1ac3b401d2d1f"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.3",
+]
+
+[[package]]
+name = "byteorder"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b"
+
+[[package]]
+name = "bytes"
+version = "1.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc652a48c352aef3ea3aed32080501cf3ef6ed5da78602a020c991775b0aff04"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "cairo-rs"
+version = "0.18.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ca26ef0159422fb77631dc9d17b102f253b876fe1586b03b803e63a309b4ee2"
+dependencies = [
+ "bitflags 2.13.1",
+ "cairo-sys-rs",
+ "glib 0.18.5",
+ "libc",
+ "once_cell",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "cairo-sys-rs"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "685c9fa8e590b8b3d678873528d83411db17242a73fccaed827770ea0fedda51"
+dependencies = [
+ "glib-sys 0.18.1",
+ "libc",
+ "system-deps 6.2.2",
+]
+
+[[package]]
+name = "calloop"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b99da2f8558ca23c71f4fd15dc57c906239752dd27ff3c00a1d56b685b7cbfec"
+dependencies = [
+ "bitflags 2.13.1",
+ "log",
+ "polling",
+ "rustix 0.38.44",
+ "slab",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "calloop-wayland-source"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "95a66a987056935f7efce4ab5668920b5d0dac4a7c99991a67395f13702ddd20"
+dependencies = [
+ "calloop",
+ "rustix 0.38.44",
+ "wayland-backend",
+ "wayland-client",
+]
+
+[[package]]
+name = "camino"
+version = "1.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bb1307f12aa967b5a58416e87b3653360e0fd614a016b6e970db08fecbb1b80d"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "cargo-platform"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e35af189006b9c0f00a064685c727031e3ed2d8020f7ba284d78cc2671bd36ea"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "cargo_metadata"
+version = "0.19.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dd5eb614ed4c27c5d706420e4320fbe3216ab31fa1c33cd8246ac36dae4479ba"
+dependencies = [
+ "camino",
+ "cargo-platform",
+ "semver",
+ "serde",
+ "serde_json",
+ "thiserror 2.0.20",
+]
+
+[[package]]
+name = "cargo_toml"
+version = "0.22.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "374b7c592d9c00c1f4972ea58390ac6b18cbb6ab79011f3bdc90a0b82ca06b77"
+dependencies = [
+ "serde",
+ "toml 0.9.12+spec-1.1.0",
+]
+
+[[package]]
+name = "cbc"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "26b52a9543ae338f279b96b0b9fed9c8093744685043739079ce85cd58f289a6"
+dependencies = [
+ "cipher 0.4.4",
+]
+
+[[package]]
+name = "cbc"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ce2dc9ee5f88d11e0beb842c88b33c8a5cf0d1329c4b19494af42b07dbfe8896"
+dependencies = [
+ "cipher 0.5.2",
+]
+
+[[package]]
+name = "cc"
+version = "1.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5d262e149917187838d5b42777c8253bcb64500067342904e7d429499a6f277e"
+dependencies = [
+ "find-msvc-tools",
+ "jobserver",
+ "libc",
+ "shlex",
+]
+
+[[package]]
+name = "ccm"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ae3c82e4355234767756212c570e29833699ab63e6ffd161887314cc5b43847"
+dependencies = [
+ "aead 0.5.2",
+ "cipher 0.4.4",
+ "ctr 0.9.2",
+ "subtle",
+]
+
+[[package]]
+name = "cesu8"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6d43a04d8753f35258c91f8ec639f792891f748a1edbd759cf1dcea3382ad83c"
+
+[[package]]
+name = "cfb"
+version = "0.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d38f2da7a0a2c4ccf0065be06397cc26a81f4e528be095826eee9d4adbb8c60f"
+dependencies = [
+ "byteorder",
+ "fnv",
+ "uuid",
+]
+
+[[package]]
+name = "cfg-expr"
+version = "0.15.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d067ad48b8650848b989a59a86c6c36a995d02d2bf778d45c3c5d57bc2718f02"
+dependencies = [
+ "smallvec",
+ "target-lexicon 0.12.16",
+]
+
+[[package]]
+name = "cfg-expr"
+version = "0.20.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fb693542bcafa528e198be0ebd9d3632ca5b7c93dbe7237460e199910835997c"
+dependencies = [
+ "smallvec",
+ "target-lexicon 0.13.5",
+]
+
+[[package]]
+name = "cfg-if"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
+
+[[package]]
+name = "cfg_aliases"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fd16c4719339c4530435d38e511904438d07cce7950afa3718a84ac36c10e89e"
+
+[[package]]
+name = "cfg_aliases"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f079e83a288787bcd14a6aea84cee5c87a67c5a3e660c30f557a3d24761b3527"
+
+[[package]]
+name = "chacha20"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3613f74bd2eac03dad61bd53dbe620703d4371614fe0bc3b9f04dd36fe4e818"
+dependencies = [
+ "cfg-if",
+ "cipher 0.4.4",
+ "cpufeatures 0.2.17",
+]
+
+[[package]]
+name = "chacha20"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d524456ba66e72eb8b115ff89e01e497f8e6d11d78b70b1aa13c0fbd97540a81"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.3.0",
+ "rand_core 0.10.1",
+]
+
+[[package]]
+name = "chacha20poly1305"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "10cd79432192d1c0f4e1a0fef9527696cc039165d729fb41b3f4f4f354c2dc35"
+dependencies = [
+ "aead 0.5.2",
+ "chacha20 0.9.1",
+ "cipher 0.4.4",
+ "poly1305",
+ "zeroize",
+]
+
+[[package]]
+name = "chrono"
+version = "0.4.45"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1aa79e62e7697b8e29b513a68abacf485adcd1fe8284a4316c5ae868e6633327"
+dependencies = [
+ "iana-time-zone",
+ "num-traits",
+ "serde",
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "chunked_transfer"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e4de3bc4ea267985becf712dc6d9eed8b04c953b3fcfb339ebc87acd9804901"
+
+[[package]]
+name = "cipher"
+version = "0.4.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "773f3b9af64447d2ce9850330c473515014aa235e6a783b02db81ff39e4a3dad"
+dependencies = [
+ "crypto-common 0.1.7",
+ "inout 0.1.4",
+ "zeroize",
+]
+
+[[package]]
+name = "cipher"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e8cf2a2c93cd704877c0858356ed03480ff301ee950b43f1cbe4573b088bfa6c"
+dependencies = [
+ "block-buffer 0.12.1",
+ "crypto-common 0.2.2",
+ "inout 0.2.2",
+]
+
+[[package]]
+name = "clap"
+version = "4.6.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "473c7e07f409a8d772161724aa8db6a765a2532a70f9667eeb7b49d3d02fbdca"
+dependencies = [
+ "clap_builder",
+ "clap_derive",
+]
+
+[[package]]
+name = "clap_builder"
+version = "4.6.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7b48fea5a88e9ae728a2dcbedbfc0e730f7d60da42e1cb049a83c9fb8b789889"
+dependencies = [
+ "anstream",
+ "anstyle",
+ "clap_lex",
+ "strsim",
+]
+
+[[package]]
+name = "clap_derive"
+version = "4.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d012d2b9d65aca7f18f4d9878a045bc17899bba951561ba5ec3c2ba1eed9a061"
+dependencies = [
+ "heck 0.5.0",
+ "proc-macro2",
+ "quote",
+ "syn 3.0.3",
+]
+
+[[package]]
+name = "clap_lex"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8d4a3bb8b1e0c1050499d1815f5ab16d04f0959b233085fb31653fbfc9d98f9"
+
+[[package]]
+name = "cmake"
+version = "0.1.58"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c0f78a02292a74a88ac736019ab962ece0bc380e3f977bf72e376c5d78ff0678"
+dependencies = [
+ "cc",
+]
+
+[[package]]
+name = "cmov"
+version = "0.5.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c9ea0ac24bc397ab3c98583a3c9ba74fa56b09a4449bbe172b9b1ddb016027a"
+
+[[package]]
+name = "colorchoice"
+version = "1.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570"
+
+[[package]]
+name = "combine"
+version = "4.6.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba5a308b75df32fe02788e748662718f03fde005016435c444eea572398219fd"
+dependencies = [
+ "bytes",
+ "memchr",
+]
+
+[[package]]
+name = "concurrent-queue"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4ca0197aee26d1ae37445ee532fefce43251d24cc7c166799f4d46817f1d3973"
+dependencies = [
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "const-oid"
+version = "0.9.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8"
+
+[[package]]
+name = "const-oid"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6ef517f0926dd24a1582492c791b6a4818a4d94e789a334894aa15b0d12f55c"
+
+[[package]]
+name = "convert_case"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "633458d4ef8c78b72454de2d54fd6ab2e60f9e02be22f3c6104cdc8a4e0fceb9"
+dependencies = [
+ "unicode-segmentation",
+]
+
+[[package]]
+name = "cookie"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1a373e3602691c3cdea496d2f0ee5935151e6168fe87739483c463db1b2f2f87"
+dependencies = [
+ "time",
+ "version_check",
+]
+
+[[package]]
+name = "core-foundation"
+version = "0.9.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "91e195e091a93c46f7102ec7818a2aa394e1e1771c3ab4825963fa03e45afb8f"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "core-foundation"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b2a6cd9ae233e7f62ba4e9353e81a88df7fc8a5987b8d445b4d90c879bd156f6"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "core-foundation-sys"
+version = "0.8.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
+
+[[package]]
+name = "core-graphics"
+version = "0.23.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c07782be35f9e1140080c6b96f0d44b739e2278479f64e02fdab4e32dfd8b081"
+dependencies = [
+ "bitflags 1.3.2",
+ "core-foundation 0.9.4",
+ "core-graphics-types 0.1.3",
+ "foreign-types",
+ "libc",
+]
+
+[[package]]
+name = "core-graphics"
+version = "0.25.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "064badf302c3194842cf2c5d61f56cc88e54a759313879cdf03abdd27d0c3b97"
+dependencies = [
+ "bitflags 2.13.1",
+ "core-foundation 0.10.1",
+ "core-graphics-types 0.2.0",
+ "foreign-types",
+ "libc",
+]
+
+[[package]]
+name = "core-graphics-types"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "45390e6114f68f718cc7a830514a96f903cccd70d02a8f6d9f643ac4ba45afaf"
+dependencies = [
+ "bitflags 1.3.2",
+ "core-foundation 0.9.4",
+ "libc",
+]
+
+[[package]]
+name = "core-graphics-types"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3d44a101f213f6c4cdc1853d4b78aef6db6bdfa3468798cc1d9912f4735013eb"
+dependencies = [
+ "bitflags 2.13.1",
+ "core-foundation 0.10.1",
+ "libc",
+]
+
+[[package]]
+name = "coreaudio-rs"
+version = "0.14.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7d5d7dca3ebcf65a035582c9ad4385371a9d9ee6537474d2a278f4e1e475bb58"
+dependencies = [
+ "bitflags 2.13.1",
+ "libc",
+ "objc2-audio-toolbox",
+ "objc2-core-audio",
+ "objc2-core-audio-types",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "cpal"
+version = "0.17.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8942da362c0f0d895d7cac616263f2f9424edc5687364dfd1d25ef7eba506d7"
+dependencies = [
+ "alsa",
+ "coreaudio-rs",
+ "dasp_sample",
+ "jni 0.21.1",
+ "js-sys",
+ "libc",
+ "mach2",
+ "ndk",
+ "ndk-context",
+ "num-derive",
+ "num-traits",
+ "objc2 0.6.4",
+ "objc2-audio-toolbox",
+ "objc2-avf-audio",
+ "objc2-core-audio",
+ "objc2-core-audio-types",
+ "objc2-core-foundation",
+ "objc2-foundation 0.3.2",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+ "windows 0.62.2",
+]
+
+[[package]]
+name = "cpubits"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "15b85f9c39137c3a891689859392b1bd49812121d0d61c9caf00d46ed5ce06ae"
+
+[[package]]
+name = "cpufeatures"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "cpufeatures"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b2a41393f66f16b0823bb79094d54ac5fbd34ab292ddafb9a0456ac9f87d201"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "crc"
+version = "3.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5eb8a2a1cd12ab0d987a5d5e825195d372001a4094a0376319d5a0ad71c1ba0d"
+dependencies = [
+ "crc-catalog",
+]
+
+[[package]]
+name = "crc-catalog"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "217698eaf96b4a3f0bc4f3662aaa55bdf913cd54d7204591faa790070c6d0853"
+
+[[package]]
+name = "crc32c"
+version = "0.6.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a47af21622d091a8f0fb295b88bc886ac74efcc613efc19f5d0b21de5c89e47"
+dependencies = [
+ "rustc_version",
+]
+
+[[package]]
+name = "crc32fast"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9481c1c90cbf2ac953f07c8d4a58aa3945c425b7185c9154d67a65e4230da511"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "critical-section"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "790eea4361631c5e7d22598ecd5723ff611904e3344ce8720784c93e3d83d40b"
+
+[[package]]
+name = "crossbeam-channel"
+version = "0.5.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d85363c37faeca707aef026efa9f3b34d077bce547e48f770770625c6013679e"
+dependencies = [
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "crossbeam-utils"
+version = "0.8.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "61803da095bee82a81bb1a452ecc25d3b2f1416d1897eb86430c6159ef717c17"
+
+[[package]]
+name = "crossterm"
+version = "0.29.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8b9f2e4c67f833b660cdb0a3523065869fb35570177239812ed4c905aeff87b"
+dependencies = [
+ "bitflags 2.13.1",
+ "crossterm_winapi",
+ "derive_more",
+ "document-features",
+ "mio",
+ "parking_lot",
+ "rustix 1.1.4",
+ "signal-hook",
+ "signal-hook-mio",
+ "winapi",
+]
+
+[[package]]
+name = "crossterm_winapi"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "acdd7c62a3665c7f6830a51635d9ac9b23ed385797f70a83bb8bafe9c572ab2b"
+dependencies = [
+ "winapi",
+]
+
+[[package]]
+name = "crypto-bigint"
+version = "0.5.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0dc92fb57ca44df6db8059111ab3af99a63d5d0f8375d9972e319a379c6bab76"
+dependencies = [
+ "generic-array",
+ "rand_core 0.6.4",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "crypto-bigint"
+version = "0.7.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1a52aa3fcda4e6302a9f48734f234d35d4721b96f8fe07d073f07ce9df4f0271"
+dependencies = [
+ "cpubits",
+ "ctutils",
+ "getrandom 0.4.3",
+ "hybrid-array",
+ "num-traits",
+ "rand_core 0.10.1",
+ "serdect",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "crypto-common"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a"
+dependencies = [
+ "generic-array",
+ "rand_core 0.6.4",
+ "typenum",
+]
+
+[[package]]
+name = "crypto-common"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ce6e4c961d6cd6c9a86db418387425e8bdeaf05b3c8bc1411e6dca4c252f1453"
+dependencies = [
+ "getrandom 0.4.3",
+ "hybrid-array",
+ "rand_core 0.10.1",
+]
+
+[[package]]
+name = "crypto-mac"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "25fab6889090c8133f3deb8f73ba3c65a7f456f66436fc012a1b1e272b1e103e"
+dependencies = [
+ "generic-array",
+ "subtle",
+]
+
+[[package]]
+name = "crypto-primes"
+version = "0.7.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3633a51a39c69ebbaa4feaa694bd83d241e4093901c84a0963b19d9bb3f0cf8f"
+dependencies = [
+ "crypto-bigint 0.7.5",
+ "rand_core 0.10.1",
+]
+
+[[package]]
+name = "cryptoki"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff765b99fc49f3116c9a908484486a2b92fd73c48da45c3a69716471c6cc56c6"
+dependencies = [
+ "bitflags 2.13.1",
+ "cryptoki-sys",
+ "libloading",
+ "log",
+ "secrecy",
+]
+
+[[package]]
+name = "cryptoki-sys"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f1fd850498411e4057f1cba79e6e2bc7cbe960544c1046ab46d4685c403a1121"
+dependencies = [
+ "libloading",
+]
+
+[[package]]
+name = "cssparser"
+version = "0.36.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dae61cf9c0abb83bd659dab65b7e4e38d8236824c85f0f804f173567bda257d2"
+dependencies = [
+ "cssparser-macros",
+ "dtoa-short",
+ "itoa",
+ "phf",
+ "smallvec",
+]
+
+[[package]]
+name = "cssparser-macros"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13b588ba4ac1a99f7f2964d24b3d896ddc6bf847ee3855dbd4366f058cfcd331"
+dependencies = [
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "ctor"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "352d39c2f7bef1d6ad73db6f5160efcaed66d94ef8c6c573a8410c00bf909a98"
+dependencies = [
+ "ctor-proc-macro",
+ "dtor 0.3.0",
+]
+
+[[package]]
+name = "ctor"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "83cf0d42651b16c6dfe68685716d18480d18a9c39c62d76e8cf3eb6ed5d8bcbf"
+dependencies = [
+ "dtor 0.8.1",
+]
+
+[[package]]
+name = "ctor-proc-macro"
+version = "0.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52560adf09603e58c9a7ee1fe1dcb95a16927b17c127f0ac02d6e768a0e25bc1"
+
+[[package]]
+name = "ctr"
+version = "0.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0369ee1ad671834580515889b80f2ea915f23b8be8d0daa4bbaf2ac5c7590835"
+dependencies = [
+ "cipher 0.4.4",
+]
+
+[[package]]
+name = "ctr"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "baaca1c4b237092596f64d571e9db6ce4109c4ef9742e27590f1709594461f21"
+dependencies = [
+ "cipher 0.5.2",
+]
+
+[[package]]
+name = "ctutils"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7d5515a3834141de9eafb9717ad39eea8247b5674e6066c404e8c4b365d2a29e"
+dependencies = [
+ "cmov",
+ "subtle",
+]
+
+[[package]]
+name = "cursor-icon"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f27ae1dd37df86211c42e150270f82743308803d90a6f6e6651cd730d5e1732f"
+
+[[package]]
+name = "curve25519-dalek"
+version = "4.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.2.17",
+ "curve25519-dalek-derive",
+ "digest 0.10.7",
+ "fiat-crypto 0.2.9",
+ "rustc_version",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "curve25519-dalek"
+version = "5.0.0-rc.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c906a87e53a36ff795d72e06e8162a83c5436e3ea89e942a9cb9fc083f0a384f"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.3.0",
+ "curve25519-dalek-derive",
+ "digest 0.11.3",
+ "fiat-crypto 0.3.0",
+ "rustc_version",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "curve25519-dalek-derive"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "darling"
+version = "0.23.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "25ae13da2f202d56bd7f91c25fba009e7717a1e4a1cc98a76d844b65ae912e9d"
+dependencies = [
+ "darling_core",
+ "darling_macro",
+]
+
+[[package]]
+name = "darling_core"
+version = "0.23.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9865a50f7c335f53564bb694ef660825eb8610e0a53d3e11bf1b0d3df31e03b0"
+dependencies = [
+ "ident_case",
+ "proc-macro2",
+ "quote",
+ "strsim",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "darling_macro"
+version = "0.23.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ac3984ec7bd6cfa798e62b4a642426a5be0e68f9401cfc2a01e3fa9ea2fcdb8d"
+dependencies = [
+ "darling_core",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "dasp_sample"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c87e182de0887fd5361989c677c4e8f5000cd9491d6d563161a8f3a5519fc7f"
+
+[[package]]
+name = "data-encoding"
+version = "2.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4583a4551df46e2792f82ceeac45e850d2e2d5debba0b91f102385cda5b11f06"
+
+[[package]]
+name = "defmt"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e2953bfe4f93bbd20cc71198842756f77d161884c99ebbabc41d80231ded88d1"
+dependencies = [
+ "bitflags 1.3.2",
+ "defmt-macros",
+]
+
+[[package]]
+name = "defmt-macros"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bad9c72e7ca2137e0dc3813245a0d282fd6daad32fd800af018306a9169b5fe8"
+dependencies = [
+ "defmt-parser",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "defmt-parser"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "10d60334b3b2e7c9d91ef8150abfb6fa4c1c39ebbcf4a81c2e346aad939fee3e"
+dependencies = [
+ "thiserror 2.0.20",
+]
+
+[[package]]
+name = "der"
+version = "0.7.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb"
+dependencies = [
+ "const-oid 0.9.6",
+ "der_derive",
+ "flagset",
+ "pem-rfc7468 0.7.0",
+ "zeroize",
+]
+
+[[package]]
+name = "der"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a69dedd701da44b0536442edf09c81a64b0ab97a7a4a5e3d1971f00027cbc63d"
+dependencies = [
+ "const-oid 0.10.2",
+ "pem-rfc7468 1.0.0",
+ "zeroize",
+]
+
+[[package]]
+name = "der-parser"
+version = "9.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5cd0a5c643689626bec213c4d8bd4d96acc8ffdb4ad4bb6bc16abf27d5f4b553"
+dependencies = [
+ "asn1-rs 0.6.2",
+ "displaydoc",
+ "nom",
+ "num-bigint 0.4.8",
+ "num-traits",
+ "rusticata-macros",
+]
+
+[[package]]
+name = "der-parser"
+version = "10.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "07da5016415d5a3c4dd39b11ed26f915f52fc4e0dc197d87908bc916e51bc1a6"
+dependencies = [
+ "asn1-rs 0.7.2",
+ "displaydoc",
+ "nom",
+ "num-bigint 0.4.8",
+ "num-traits",
+ "rusticata-macros",
+]
+
+[[package]]
+name = "der_derive"
+version = "0.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8034092389675178f570469e6c3b0465d3d30b4505c294a6550db47f3c17ad18"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "deranged"
+version = "0.5.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7cd812cc2bc1d69d4764bd80df88b4317eaef9e773c75226407d9bc0876b211c"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "derive_more"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d751e9e49156b02b44f9c1815bcb94b984cdcc4396ecc32521c739452808b134"
+dependencies = [
+ "derive_more-impl",
+]
+
+[[package]]
+name = "derive_more-impl"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "799a97264921d8623a957f6c3b9011f3b5492f557bbb7a5a19b7fa6d06ba8dcb"
+dependencies = [
+ "convert_case",
+ "proc-macro2",
+ "quote",
+ "rustc_version",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "des"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "916a94e407b54f9034d71dd748234cd1e516ced6284009906ae246f177eafe5a"
+dependencies = [
+ "cipher 0.5.2",
+]
+
+[[package]]
+name = "digest"
+version = "0.10.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
+dependencies = [
+ "block-buffer 0.10.4",
+ "const-oid 0.9.6",
+ "crypto-common 0.1.7",
+ "subtle",
+]
+
+[[package]]
+name = "digest"
+version = "0.11.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f1dd6dbb5841937940781866fa1281a1ff7bd3bf827091440879f9994983d5c2"
+dependencies = [
+ "block-buffer 0.12.1",
+ "const-oid 0.10.2",
+ "crypto-common 0.2.2",
+ "ctutils",
+]
+
+[[package]]
+name = "dirs"
+version = "6.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3e8aa94d75141228480295a7d0e7feb620b1a5ad9f12bc40be62411e38cce4e"
+dependencies = [
+ "dirs-sys",
+]
+
+[[package]]
+name = "dirs-sys"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e01a3366d27ee9890022452ee61b2b63a67e6f13f58900b651ff5665f0bb1fab"
+dependencies = [
+ "libc",
+ "option-ext",
+ "redox_users",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "dispatch"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bd0c93bb4b0c6d9b77f4435b0ae98c24d17f1c45b2ff844c6151a07256ca923b"
+
+[[package]]
+name = "dispatch2"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e0e367e4e7da84520dedcac1901e4da967309406d1e51017ae1abfb97adbd38"
+dependencies = [
+ "bitflags 2.13.1",
+ "block2 0.6.2",
+ "libc",
+ "objc2 0.6.4",
+]
+
+[[package]]
+name = "displaydoc"
+version = "0.2.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c6232dd377dcc64799954cbd3a9bb882e9cdc1308ccd87b1c098f1fb2eaf82a8"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.3",
+]
+
+[[package]]
+name = "dlib"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ab8ecd87370524b461f8557c119c405552c396ed91fc0a8eec68679eab26f94a"
+dependencies = [
+ "libloading",
+]
+
+[[package]]
+name = "dlopen2"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e2c5bd4158e66d1e215c49b837e11d62f3267b30c92f1d171c4d3105e3dc4d4"
+dependencies = [
+ "dlopen2_derive",
+ "libc",
+ "once_cell",
+ "winapi",
+]
+
+[[package]]
+name = "dlopen2_derive"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fbbb781877580993a8707ec48672673ec7b81eeba04cfd2310bd28c08e47c8f"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "document-features"
+version = "0.2.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d4b8a88685455ed29a21542a33abd9cb6510b6b129abadabdcef0f4c55bc8f61"
+dependencies = [
+ "litrs",
+]
+
+[[package]]
+name = "dom_query"
+version = "0.27.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "521e380c0c8afb8d9a1e83a1822ee03556fc3e3e7dbc1fd30be14e37f9cb3f89"
+dependencies = [
+ "bit-set",
+ "cssparser",
+ "foldhash",
+ "html5ever",
+ "precomputed-hash",
+ "selectors",
+ "tendril",
+]
+
+[[package]]
+name = "downcast-rs"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75b325c5dbd37f80359721ad39aca5a29fb04c89279657cffdda8736d0c0b9d2"
+
+[[package]]
+name = "dpi"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8b14ccef22fc6f5a8f4d7d768562a182c04ce9a3b3157b91390b52ddfdf1a76"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "drm"
+version = "0.14.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "80bc8c5c6c2941f70a55c15f8d9f00f9710ebda3ffda98075f996a0e6c92756f"
+dependencies = [
+ "bitflags 2.13.1",
+ "bytemuck",
+ "drm-ffi",
+ "drm-fourcc",
+ "libc",
+ "rustix 0.38.44",
+]
+
+[[package]]
+name = "drm-ffi"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "51a91c9b32ac4e8105dec255e849e0d66e27d7c34d184364fb93e469db08f690"
+dependencies = [
+ "drm-sys",
+ "rustix 1.1.4",
+]
+
+[[package]]
+name = "drm-fourcc"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0aafbcdb8afc29c1a7ee5fbe53b5d62f4565b35a042a662ca9fecd0b54dae6f4"
+
+[[package]]
+name = "drm-sys"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ecc8e1361066d91f5ffccff060a3c3be9c3ecde15be2959c1937595f7a82a9f8"
+dependencies = [
+ "libc",
+ "linux-raw-sys 0.9.4",
+]
+
+[[package]]
+name = "dtoa"
+version = "1.0.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4c3cf4824e2d5f025c7b531afcb2325364084a16806f6d47fbc1f5fbd9960590"
+
+[[package]]
+name = "dtoa-short"
+version = "0.3.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cd1511a7b6a56299bd043a9c167a6d2bfb37bf84a6dfceaba651168adfb43c87"
+dependencies = [
+ "dtoa",
+]
+
+[[package]]
+name = "dtor"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f1057d6c64987086ff8ed0fd3fbf377a6b7d205cc7715868cd401705f715cbe4"
+dependencies = [
+ "dtor-proc-macro",
+]
+
+[[package]]
+name = "dtor"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "edf234dd1594d6dd434a8fb8cada51ddbbc593e40e4a01556a0b31c62da2775b"
+
+[[package]]
+name = "dtor-proc-macro"
+version = "0.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f678cf4a922c215c63e0de95eb1ff08a958a81d47e485cf9da1e27bf6305cfa5"
+
+[[package]]
+name = "dunce"
+version = "1.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92773504d58c093f6de2459af4af33faa518c13451eb8f2b5698ed3d36e7c813"
+
+[[package]]
+name = "dyn-clone"
+version = "1.0.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d0881ea181b1df73ff77ffaaf9c7544ecc11e82fba9b5f27b262a3c73a332555"
+
+[[package]]
+name = "ecdsa"
+version = "0.16.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee27f32b5c5292967d2d4a9d7f1e0b0aed2c15daded5a60300e4abb9d8020bca"
+dependencies = [
+ "der 0.7.10",
+ "digest 0.10.7",
+ "elliptic-curve 0.13.8",
+ "rfc6979 0.4.0",
+ "signature 2.2.0",
+ "spki 0.7.3",
+]
+
+[[package]]
+name = "ecdsa"
+version = "0.17.0-rc.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7c72d1455753a703ad4b90ed2a759f2bc4562024a303176439cf6e593b5ade4"
+dependencies = [
+ "der 0.8.1",
+ "digest 0.11.3",
+ "elliptic-curve 0.14.1",
+ "rfc6979 0.6.0-pre.0",
+ "signature 3.0.0",
+ "spki 0.8.0",
+ "zeroize",
+]
+
+[[package]]
+name = "ed25519"
+version = "2.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53"
+dependencies = [
+ "pkcs8 0.10.2",
+ "signature 2.2.0",
+]
+
+[[package]]
+name = "ed25519"
+version = "3.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "29fcf32e6c73d1079f83ab4d782de2d81620346a5f38c6237a86a22f8368980a"
+dependencies = [
+ "signature 3.0.0",
+]
+
+[[package]]
+name = "ed25519-dalek"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9"
+dependencies = [
+ "curve25519-dalek 4.1.3",
+ "ed25519 2.2.3",
+ "serde",
+ "sha2 0.10.9",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "ed25519-dalek"
+version = "3.0.0-rc.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1685663e23882cd8517dcbcb1c23a6ebff4433c22dfb681d760219b62cd1b849"
+dependencies = [
+ "curve25519-dalek 5.0.0-rc.1",
+ "ed25519 3.0.0",
+ "rand_core 0.10.1",
+ "sha2 0.11.0",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "either"
+version = "1.17.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9e5e8f6c15a24b9a3ee5efec809ccd006d3b30e8b3bb63c39af737c7f87daa1d"
+
+[[package]]
+name = "elliptic-curve"
+version = "0.13.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b5e6043086bf7973472e0c7dff2142ea0b680d30e18d9cc40f267efbf222bd47"
+dependencies = [
+ "base16ct 0.2.0",
+ "crypto-bigint 0.5.5",
+ "digest 0.10.7",
+ "ff 0.13.1",
+ "generic-array",
+ "group 0.13.0",
+ "hkdf 0.12.4",
+ "pem-rfc7468 0.7.0",
+ "pkcs8 0.10.2",
+ "rand_core 0.6.4",
+ "sec1 0.7.3",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "elliptic-curve"
+version = "0.14.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9d65aa39b3a5c1c9c1b745c9a019234bb7a21b77abcb4f4d266d706e2d577d65"
+dependencies = [
+ "base16ct 1.0.0",
+ "crypto-bigint 0.7.5",
+ "crypto-common 0.2.2",
+ "digest 0.11.3",
+ "ff 0.14.0",
+ "group 0.14.0",
+ "hkdf 0.13.0",
+ "hybrid-array",
+ "pem-rfc7468 1.0.0",
+ "pkcs8 0.11.0",
+ "rand_core 0.10.1",
+ "sec1 0.8.1",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "embed-resource"
+version = "3.0.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fbfdaacccebec3b28e4866b8973543c7647797db5ada1bdab552e48fe665fbbd"
+dependencies = [
+ "cc",
+ "memchr",
+ "rustc_version",
+ "toml 1.1.4+spec-1.1.0",
+ "vswhom",
+ "winreg 0.55.0",
+]
+
+[[package]]
+name = "embed_plist"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4ef6b89e5b37196644d8796de5268852ff179b44e96276cf4290264843743bb7"
+
+[[package]]
+name = "endi"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "66b7e2430c6dff6a955451e2cfc438f09cea1965a9d6f87f7e3b90decc014099"
+
+[[package]]
+name = "enumflags2"
+version = "0.7.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1027f7680c853e056ebcec683615fb6fbbc07dbaa13b4d5d9442b146ded4ecef"
+dependencies = [
+ "enumflags2_derive",
+ "serde",
+]
+
+[[package]]
+name = "enumflags2_derive"
+version = "0.7.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67c78a4d8fdf9953a5c9d458f9efe940fd97a0cab0941c075a813ac594733827"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "equivalent"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
+
+[[package]]
+name = "erased-serde"
+version = "0.4.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d2add8a07dd6a8d93ff627029c51de145e12686fbc36ecb298ac22e74cf02dec"
+dependencies = [
+ "serde",
+ "serde_core",
+ "typeid",
+]
+
+[[package]]
+name = "errno"
+version = "0.3.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "event-listener"
+version = "5.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a23add41df1562121a9393cb065eab5146a1242410f23a644851e90cfd669d2"
+dependencies = [
+ "parking",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "event-listener-strategy"
+version = "0.5.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8be9f3dfaaffdae2972880079a491a1a8bb7cbed0b8dd7a347f668b4150a3b93"
+dependencies = [
+ "event-listener",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "fallible-iterator"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2acce4a10f12dc2fb14a218589d4f1f62ef011b2d0cc4b3cb1bba8e94da14649"
+
+[[package]]
+name = "fallible-streaming-iterator"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7360491ce676a36bf9bb3c56c1aa791658183a54d2744120f27285738d90465a"
+
+[[package]]
+name = "fastrand"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223"
+
+[[package]]
+name = "fdeflate"
+version = "0.3.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e6853b52649d4ac5c0bd02320cddc5ba956bdb407c4b75a2c6b75bf51500f8c"
+dependencies = [
+ "simd-adler32",
+]
+
+[[package]]
+name = "ff"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c0b50bfb653653f9ca9095b427bed08ab8d75a137839d9ad64eb11810d5b6393"
+dependencies = [
+ "rand_core 0.6.4",
+ "subtle",
+]
+
+[[package]]
+name = "ff"
+version = "0.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1f686ab92a9fb0eaf188f6c6c87b89490baa6fdb0db4544ba4dc47f7942489f"
+dependencies = [
+ "rand_core 0.10.1",
+ "subtle",
+]
+
+[[package]]
+name = "fiat-crypto"
+version = "0.2.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d"
+
+[[package]]
+name = "fiat-crypto"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "64cd1e32ddd350061ae6edb1b082d7c54915b5c672c389143b9a63403a109f24"
+
+[[package]]
+name = "field-offset"
+version = "0.3.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "38e2275cc4e4fc009b0669731a1e5ab7ebf11f469eaede2bab9309a5b4d6057f"
+dependencies = [
+ "memoffset 0.9.1",
+ "rustc_version",
+]
+
+[[package]]
+name = "filedescriptor"
+version = "0.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e40758ed24c9b2eeb76c35fb0aebc66c626084edd827e07e1552279814c6682d"
+dependencies = [
+ "libc",
+ "thiserror 1.0.69",
+ "winapi",
+]
+
+[[package]]
+name = "find-msvc-tools"
+version = "0.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "26b73573e6edcd2af0cdf47bd6cb58f0b3839491263c314eaad1ccf24430e1de"
+
+[[package]]
+name = "flagset"
+version = "0.4.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7ac824320a75a52197e8f2d787f6a38b6718bb6897a35142d749af3c0e8f4fe"
+
+[[package]]
+name = "flate2"
+version = "1.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "843fba2746e448b37e26a819579957415c8cef339bf08564fe8b7ddbd959573c"
+dependencies = [
+ "crc32fast",
+ "libz-sys",
+ "miniz_oxide",
+]
+
+[[package]]
+name = "fnv"
+version = "1.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1"
+
+[[package]]
+name = "foldhash"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77ce24cb58228fbb8aa041425bb1050850ac19177686ea6e0f41a70416f56fdb"
+
+[[package]]
+name = "foreign-types"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d737d9aa519fb7b749cbc3b962edcf310a8dd1f4b67c91c4f83975dbdd17d965"
+dependencies = [
+ "foreign-types-macros",
+ "foreign-types-shared",
+]
+
+[[package]]
+name = "foreign-types-macros"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ea5190182e6915eb873ddbc16e23b711b6eb1f9c00a0d0a3a91b5f6228475225"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.3",
+]
+
+[[package]]
+name = "foreign-types-shared"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "aa9a19cbb55df58761df49b23516a86d432839add4af60fc256da840f66ed35b"
+
+[[package]]
+name = "form_urlencoded"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb4cb245038516f5f85277875cdaa4f7d2c9a0fa0468de06ed190163b1581fcf"
+dependencies = [
+ "percent-encoding",
+]
+
+[[package]]
+name = "fs_extra"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "42703706b716c37f96a77aea830392ad231f44c9e9a67872fa5548707e11b11c"
+
+[[package]]
+name = "funty"
+version = "2.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6d5a32815ae3f33302d95fdcb2ce17862f8c65363dcfd29360480ba1001fc9c"
+
+[[package]]
+name = "futures"
+version = "0.3.33"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a88cf1f829d945f548cf8fec32c61b1f202b6d93b45848602fc02af4b12ad218"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-executor",
+ "futures-io",
+ "futures-sink",
+ "futures-task",
+ "futures-util",
+]
+
+[[package]]
+name = "futures-channel"
+version = "0.3.33"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "262590f4fe6afeb0bc83be1daa64e52657fe185690a958af7f3ad0e92085c5ae"
+dependencies = [
+ "futures-core",
+ "futures-sink",
+]
+
+[[package]]
+name = "futures-core"
+version = "0.3.33"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2cd50c473c80f6d7c3670a752354b8e569b1a7cbfdc0419ec88e5edad85e0dc7"
+
+[[package]]
+name = "futures-executor"
+version = "0.3.33"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6754879cc9f2c66f88c6e5c35344bb0bdb0708b0352b1201815667c7eabc7458"
+dependencies = [
+ "futures-core",
+ "futures-task",
+ "futures-util",
+]
+
+[[package]]
+name = "futures-io"
+version = "0.3.33"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4577ecaa3c4f96589d473f679a71b596316f6641bc350038b962a5daf0085d7a"
+
+[[package]]
+name = "futures-lite"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f78e10609fe0e0b3f4157ffab1876319b5b0db102a2c60dc4626306dc46b44ad"
+dependencies = [
+ "fastrand",
+ "futures-core",
+ "futures-io",
+ "parking",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "futures-macro"
+version = "0.3.33"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2d6d3cde68c518367be28956066ddfef33813991b77a55005a69dae04bf3b10b"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "futures-sink"
+version = "0.3.33"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e34418ac499d6305c2fb5ad0ed2f6ac998c5f8ca209b4510f7f94242c647e307"
+
+[[package]]
+name = "futures-task"
+version = "0.3.33"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b231ed28831efb4a61a08580c4bc233ec56bc009f4cd8f52da2c3cb97df0c109"
+
+[[package]]
+name = "futures-util"
+version = "0.3.33"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a77a90a256fce34da66415271e30f94ee91c57b04b8a2c042d9cf3220179deaa"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-io",
+ "futures-macro",
+ "futures-sink",
+ "futures-task",
+ "memchr",
+ "pin-project-lite",
+ "slab",
+]
+
+[[package]]
+name = "fuzzy-matcher"
+version = "0.3.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "54614a3312934d066701a80f20f15fa3b56d67ac7722b39eea5b4c9dd1d66c94"
+dependencies = [
+ "thread_local",
+]
+
+[[package]]
+name = "gdk"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d9f245958c627ac99d8e529166f9823fb3b838d1d41fd2b297af3075093c2691"
+dependencies = [
+ "cairo-rs",
+ "gdk-pixbuf",
+ "gdk-sys",
+ "gio",
+ "glib 0.18.5",
+ "libc",
+ "pango",
+]
+
+[[package]]
+name = "gdk-pixbuf"
+version = "0.18.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "50e1f5f1b0bfb830d6ccc8066d18db35c487b1b2b1e8589b5dfe9f07e8defaec"
+dependencies = [
+ "gdk-pixbuf-sys",
+ "gio",
+ "glib 0.18.5",
+ "libc",
+ "once_cell",
+]
+
+[[package]]
+name = "gdk-pixbuf-sys"
+version = "0.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f9839ea644ed9c97a34d129ad56d38a25e6756f99f3a88e15cd39c20629caf7"
+dependencies = [
+ "gio-sys 0.18.1",
+ "glib-sys 0.18.1",
+ "gobject-sys 0.18.0",
+ "libc",
+ "system-deps 6.2.2",
+]
+
+[[package]]
+name = "gdk-sys"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c2d13f38594ac1e66619e188c6d5a1adb98d11b2fcf7894fc416ad76aa2f3f7"
+dependencies = [
+ "cairo-sys-rs",
+ "gdk-pixbuf-sys",
+ "gio-sys 0.18.1",
+ "glib-sys 0.18.1",
+ "gobject-sys 0.18.0",
+ "libc",
+ "pango-sys",
+ "pkg-config",
+ "system-deps 6.2.2",
+]
+
+[[package]]
+name = "gdkwayland-sys"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "140071d506d223f7572b9f09b5e155afbd77428cd5cc7af8f2694c41d98dfe69"
+dependencies = [
+ "gdk-sys",
+ "glib-sys 0.18.1",
+ "gobject-sys 0.18.0",
+ "libc",
+ "pkg-config",
+ "system-deps 6.2.2",
+]
+
+[[package]]
+name = "generic-array"
+version = "0.14.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a"
+dependencies = [
+ "typenum",
+ "version_check",
+ "zeroize",
+]
+
+[[package]]
+name = "gethostname"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1bd49230192a3797a9a4d6abe9b3eed6f7fa4c8a8a4947977c6f80025f92cbd8"
+dependencies = [
+ "rustix 1.1.4",
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0"
+dependencies = [
+ "cfg-if",
+ "js-sys",
+ "libc",
+ "wasi 0.11.1+wasi-snapshot-preview1",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
+dependencies = [
+ "cfg-if",
+ "js-sys",
+ "libc",
+ "r-efi 5.3.0",
+ "wasip2",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "r-efi 6.0.0",
+ "rand_core 0.10.1",
+]
+
+[[package]]
+name = "ghash"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0d8a4362ccb29cb0b265253fb0a2728f592895ee6854fd9bc13f2ffda266ff1"
+dependencies = [
+ "opaque-debug",
+ "polyval 0.6.2",
+]
+
+[[package]]
+name = "ghash"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2eecf2d5dc9b66b732b97707a0210906b1d30523eb773193ab777c0c84b3e8d5"
+dependencies = [
+ "polyval 0.7.3",
+]
+
+[[package]]
+name = "gio"
+version = "0.18.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d4fc8f532f87b79cbc51a79748f16a6828fb784be93145a322fa14d06d354c73"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-io",
+ "futures-util",
+ "gio-sys 0.18.1",
+ "glib 0.18.5",
+ "libc",
+ "once_cell",
+ "pin-project-lite",
+ "smallvec",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "gio-sys"
+version = "0.18.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "37566df850baf5e4cb0dfb78af2e4b9898d817ed9263d1090a2df958c64737d2"
+dependencies = [
+ "glib-sys 0.18.1",
+ "gobject-sys 0.18.0",
+ "libc",
+ "system-deps 6.2.2",
+ "winapi",
+]
+
+[[package]]
+name = "gio-sys"
+version = "0.21.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0071fe88dba8e40086c8ff9bbb62622999f49628344b1d1bf490a48a29d80f22"
+dependencies = [
+ "glib-sys 0.21.5",
+ "gobject-sys 0.21.5",
+ "libc",
+ "system-deps 7.0.8",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "glib"
+version = "0.18.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "233daaf6e83ae6a12a52055f568f9d7cf4671dabb78ff9560ab6da230ce00ee5"
+dependencies = [
+ "bitflags 2.13.1",
+ "futures-channel",
+ "futures-core",
+ "futures-executor",
+ "futures-task",
+ "futures-util",
+ "gio-sys 0.18.1",
+ "glib-macros 0.18.5",
+ "glib-sys 0.18.1",
+ "gobject-sys 0.18.0",
+ "libc",
+ "memchr",
+ "once_cell",
+ "smallvec",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "glib"
+version = "0.21.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "16de123c2e6c90ce3b573b7330de19be649080ec612033d397d72da265f1bd8b"
+dependencies = [
+ "bitflags 2.13.1",
+ "futures-channel",
+ "futures-core",
+ "futures-executor",
+ "futures-task",
+ "futures-util",
+ "gio-sys 0.21.5",
+ "glib-macros 0.21.5",
+ "glib-sys 0.21.5",
+ "gobject-sys 0.21.5",
+ "libc",
+ "memchr",
+ "smallvec",
+]
+
+[[package]]
+name = "glib-macros"
+version = "0.18.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0bb0228f477c0900c880fd78c8759b95c7636dbd7842707f49e132378aa2acdc"
+dependencies = [
+ "heck 0.4.1",
+ "proc-macro-crate 2.0.2",
+ "proc-macro-error",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "glib-macros"
+version = "0.21.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf59b675301228a696fe01c3073974643365080a76cc3ed5bc2cbc466ad87f17"
+dependencies = [
+ "heck 0.5.0",
+ "proc-macro-crate 3.5.0",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "glib-sys"
+version = "0.18.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "063ce2eb6a8d0ea93d2bf8ba1957e78dbab6be1c2220dd3daca57d5a9d869898"
+dependencies = [
+ "libc",
+ "system-deps 6.2.2",
+]
+
+[[package]]
+name = "glib-sys"
+version = "0.21.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2d95e1a3a19ae464a7286e14af9a90683c64d70c02532d88d87ce95056af3e6c"
+dependencies = [
+ "libc",
+ "system-deps 7.0.8",
+]
+
+[[package]]
+name = "glob"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e4eba85ea1d0a966a983acd07deee566e67395d2d96b6fb39e62b5a833f1eb0b"
+
+[[package]]
+name = "gobject-sys"
+version = "0.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0850127b514d1c4a4654ead6dedadb18198999985908e6ffe4436f53c785ce44"
+dependencies = [
+ "glib-sys 0.18.1",
+ "libc",
+ "system-deps 6.2.2",
+]
+
+[[package]]
+name = "gobject-sys"
+version = "0.21.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2dca35da0d19a18f4575f3cb99fe1c9e029a2941af5662f326f738a21edaf294"
+dependencies = [
+ "glib-sys 0.21.5",
+ "libc",
+ "system-deps 7.0.8",
+]
+
+[[package]]
+name = "group"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0f9ef7462f7c099f518d754361858f86d8a07af53ba9af0fe635bbccb151a63"
+dependencies = [
+ "ff 0.13.1",
+ "rand_core 0.6.4",
+ "subtle",
+]
+
+[[package]]
+name = "group"
+version = "0.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7fd1a1c7a5206c5b7a3f5a0d7ccd3ff85d0c8f5133d62a02680255b0004af5f4"
+dependencies = [
+ "ff 0.14.0",
+ "rand_core 0.10.1",
+ "subtle",
+]
+
+[[package]]
+name = "gstreamer"
+version = "0.24.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e8251db223ca38d9aefaf3d19f6f11581a9123cd12dacebd8b9e182da965023"
+dependencies = [
+ "cfg-if",
+ "futures-channel",
+ "futures-core",
+ "futures-util",
+ "glib 0.21.5",
+ "gstreamer-sys",
+ "itertools",
+ "kstring",
+ "libc",
+ "muldiv",
+ "num-integer",
+ "num-rational",
+ "option-operations",
+ "pastey",
+ "pin-project-lite",
+ "smallvec",
+ "thiserror 2.0.20",
+]
+
+[[package]]
+name = "gstreamer-app"
+version = "0.24.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3da7017b2a2fa5cdf9123b1603947ea24174f6d8cea0ea673411df824c811921"
+dependencies = [
+ "futures-core",
+ "futures-sink",
+ "glib 0.21.5",
+ "gstreamer",
+ "gstreamer-app-sys",
+ "gstreamer-base",
+ "libc",
+]
+
+[[package]]
+name = "gstreamer-app-sys"
+version = "0.24.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4fa9f1b12b546aea543c15a0fdbc5a53617902a74f6d357a32b6a9fb4bc4725c"
+dependencies = [
+ "glib-sys 0.21.5",
+ "gstreamer-base-sys",
+ "gstreamer-sys",
+ "libc",
+ "system-deps 7.0.8",
+]
+
+[[package]]
+name = "gstreamer-base"
+version = "0.24.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9375f9a12120a8ee17b765c816c9b23861ce258def77b0ee40a05acb00c74972"
+dependencies = [
+ "atomic_refcell",
+ "cfg-if",
+ "glib 0.21.5",
+ "gstreamer",
+ "gstreamer-base-sys",
+ "libc",
+]
+
+[[package]]
+name = "gstreamer-base-sys"
+version = "0.24.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1b844f3559b6ab0379b4b771261643783ae4e0ffa71d5f5f46e33b7acf66b752"
+dependencies = [
+ "glib-sys 0.21.5",
+ "gobject-sys 0.21.5",
+ "gstreamer-sys",
+ "libc",
+ "system-deps 7.0.8",
+]
+
+[[package]]
+name = "gstreamer-sys"
+version = "0.24.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b5d37c1a599ae57b8186948bd5699f2dbfc044baea9d400228b489a85bcf2759"
+dependencies = [
+ "cfg-if",
+ "glib-sys 0.21.5",
+ "gobject-sys 0.21.5",
+ "libc",
+ "system-deps 7.0.8",
+]
+
+[[package]]
+name = "gtk"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fd56fb197bfc42bd5d2751f4f017d44ff59fbb58140c6b49f9b3b2bdab08506a"
+dependencies = [
+ "atk",
+ "cairo-rs",
+ "field-offset",
+ "futures-channel",
+ "gdk",
+ "gdk-pixbuf",
+ "gio",
+ "glib 0.18.5",
+ "gtk-sys",
+ "gtk3-macros",
+ "libc",
+ "pango",
+ "pkg-config",
+]
+
+[[package]]
+name = "gtk-sys"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f29a1c21c59553eb7dd40e918be54dccd60c52b049b75119d5d96ce6b624414"
+dependencies = [
+ "atk-sys",
+ "cairo-sys-rs",
+ "gdk-pixbuf-sys",
+ "gdk-sys",
+ "gio-sys 0.18.1",
+ "glib-sys 0.18.1",
+ "gobject-sys 0.18.0",
+ "libc",
+ "pango-sys",
+ "system-deps 6.2.2",
+]
+
+[[package]]
+name = "gtk3-macros"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52ff3c5b21f14f0736fed6dcfc0bfb4225ebf5725f3c0209edeec181e4d73e9d"
+dependencies = [
+ "proc-macro-crate 1.3.1",
+ "proc-macro-error",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "h2"
+version = "0.4.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6cb093c84e8bd9b188d4c4a8cb6579fc016968d14c99882163cd3ff402a4f155"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "fnv",
+ "futures-core",
+ "futures-sink",
+ "http",
+ "indexmap 2.14.0",
+ "slab",
+ "tokio",
+ "tokio-util",
+ "tracing",
+]
+
+[[package]]
+name = "hash32"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b0c35f58762feb77d74ebe43bdbc3210f09be9fe6742234d573bacc26ed92b67"
+dependencies = [
+ "byteorder",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.12.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8a9ee70c43aaf417c914396645a0fa852624801b24ebb7ae78fe8272889ac888"
+
+[[package]]
+name = "hashbrown"
+version = "0.14.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e5274423e17b7c9fc20b6e7e208532f9b19825d82dfd615708b70edd83df41f1"
+dependencies = [
+ "ahash",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.17.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed5909b6e89a2db4456e54cd5f673791d7eca6732202bbf2a9cc504fe2f9b84a"
+
+[[package]]
+name = "hashlink"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ba4ff7128dee98c7dc9794b6a411377e1404dba1c97deb8d1a55297bd25d8af"
+dependencies = [
+ "hashbrown 0.14.5",
+]
+
+[[package]]
+name = "heapless"
+version = "0.7.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdc6457c0eb62c71aac4bc17216026d8410337c4126773b9c5daba343f17964f"
+dependencies = [
+ "atomic-polyfill",
+ "hash32",
+ "rustc_version",
+ "spin",
+ "stable_deref_trait",
+]
+
+[[package]]
+name = "heck"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "95505c38b4572b2d910cecb0281560f54b440a19336cbbcb27bf6ce6adc6f5a8"
+
+[[package]]
+name = "heck"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"
+
+[[package]]
+name = "hermit-abi"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc0fef456e4baa96da950455cd02c081ca953b141298e41db3fc7e36b1da849c"
+
+[[package]]
+name = "hex"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
+
+[[package]]
+name = "hkdf"
+version = "0.12.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7b5f8eb2ad728638ea2c7d47a21db23b7b58a72ed6a38256b8a1849f15fbbdf7"
+dependencies = [
+ "hmac 0.12.1",
+]
+
+[[package]]
+name = "hkdf"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4aaa26c720c68b866f2c96ef5c1264b3e6f473fe5d4ce61cd44bbe913e553018"
+dependencies = [
+ "hmac 0.13.0",
+]
+
+[[package]]
+name = "hmac"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c49c37c09c17a53d937dfbb742eb3a961d65a994e6bcdcf37e7399d0cc8ab5e"
+dependencies = [
+ "digest 0.10.7",
+]
+
+[[package]]
+name = "hmac"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6303bc9732ae41b04cb554b844a762b4115a61bfaa81e3e83050991eeb56863f"
+dependencies = [
+ "digest 0.11.3",
+]
+
+[[package]]
+name = "html5ever"
+version = "0.38.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1054432bae2f14e0061e33d23402fbaa67a921d319d56adc6bcf887ddad1cbc2"
+dependencies = [
+ "log",
+ "markup5ever",
+]
+
+[[package]]
+name = "http"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "918d3568bebf352712bc2ef3d46a8bcf1a75b373be6539de198e9105cbbf9ce0"
+dependencies = [
+ "bytes",
+ "itoa",
+]
+
+[[package]]
+name = "http-body"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ca2a8f2913ee65f60facd6a5905613afaa448497a0230cc41ce022d93290bc2c"
+dependencies = [
+ "bytes",
+ "http",
+]
+
+[[package]]
+name = "http-body-util"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e9f41fd6a08e4d4ec69df65976da761afd5ad5e58a9d4acb46bd1c953a9e3ff2"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "http",
+ "http-body",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "httparse"
+version = "1.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87"
+
+[[package]]
+name = "httpdate"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df3b46402a9d5adb4c86a0cf463f42e19994e3ee891101b1841f30a545cb49a9"
+
+[[package]]
+name = "hybrid-array"
+version = "0.4.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "707114b52a152fa7bdb290cd7cd5912d9467273b6d74e21b8d81aca1f8533f6b"
+dependencies = [
+ "subtle",
+ "typenum",
+ "zeroize",
+]
+
+[[package]]
+name = "hyper"
+version = "1.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d22053281f852e11534f5198498373cbb59295120a20771d90f7ed1897490a72"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "futures-channel",
+ "futures-core",
+ "h2",
+ "http",
+ "http-body",
+ "httparse",
+ "itoa",
+ "pin-project-lite",
+ "smallvec",
+ "tokio",
+ "want",
+]
+
+[[package]]
+name = "hyper-rustls"
+version = "0.27.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "33ca68d021ef39cf6463ab54c1d0f5daf03377b70561305bb89a8f83aab66e0f"
+dependencies = [
+ "http",
+ "hyper",
+ "hyper-util",
+ "rustls",
+ "tokio",
+ "tokio-rustls",
+ "tower-service",
+ "webpki-roots",
+]
+
+[[package]]
+name = "hyper-util"
+version = "0.1.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96547c2556ec9d12fb1578c4eaf448b04993e7fb79cbaad930a656880a6bdfa0"
+dependencies = [
+ "base64 0.22.1",
+ "bytes",
+ "futures-channel",
+ "futures-util",
+ "http",
+ "http-body",
+ "hyper",
+ "ipnet",
+ "libc",
+ "percent-encoding",
+ "pin-project-lite",
+ "socket2",
+ "system-configuration",
+ "tokio",
+ "tower-service",
+ "tracing",
+ "windows-registry",
+]
+
+[[package]]
+name = "iana-time-zone"
+version = "0.1.65"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e31bc9ad994ba00e440a8aa5c9ef0ec67d5cb5e5cb0cc7f8b744a35b389cc470"
+dependencies = [
+ "android_system_properties",
+ "core-foundation-sys",
+ "iana-time-zone-haiku",
+ "js-sys",
+ "log",
+ "wasm-bindgen",
+ "windows-core 0.62.2",
+]
+
+[[package]]
+name = "iana-time-zone-haiku"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f31827a206f56af32e590ba56d5d2d085f558508192593743f16b2306495269f"
+dependencies = [
+ "cc",
+]
+
+[[package]]
+name = "ico"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3e795dff5605e0f04bff85ca41b51a96b83e80b281e96231bcaaf1ac35103371"
+dependencies = [
+ "byteorder",
+ "png 0.17.16",
+]
+
+[[package]]
+name = "icu_collections"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2984d1cd16c883d7935b9e07e44071dca8d917fd52ecc02c04d5fa0b5a3f191c"
+dependencies = [
+ "displaydoc",
+ "potential_utf",
+ "utf8_iter",
+ "yoke",
+ "zerofrom",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_locale_core"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92219b62b3e2b4d88ac5119f8904c10f8f61bf7e95b640d25ba3075e6cac2c29"
+dependencies = [
+ "displaydoc",
+ "litemap",
+ "tinystr",
+ "writeable",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c56e5ee99d6e3d33bd91c5d85458b6005a22140021cc324cea84dd0e72cff3b4"
+dependencies = [
+ "icu_collections",
+ "icu_normalizer_data",
+ "icu_properties",
+ "icu_provider",
+ "smallvec",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer_data"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da3be0ae77ea334f4da67c12f149704f19f81d1adf7c51cf482943e84a2bad38"
+
+[[package]]
+name = "icu_properties"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bee3b67d0ea5c2cca5003417989af8996f8604e34fb9ddf96208a033901e70de"
+dependencies = [
+ "icu_collections",
+ "icu_locale_core",
+ "icu_properties_data",
+ "icu_provider",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_properties_data"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e2bbb201e0c04f7b4b3e14382af113e17ba4f63e2c9d2ee626b720cbce54a14"
+
+[[package]]
+name = "icu_provider"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "139c4cf31c8b5f33d7e199446eff9c1e02decfc2f0eec2c8d71f65befa45b421"
+dependencies = [
+ "displaydoc",
+ "icu_locale_core",
+ "writeable",
+ "yoke",
+ "zerofrom",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "ident_case"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9e0384b61958566e926dc50660321d12159025e767c18e043daf26b70104c39"
+
+[[package]]
+name = "idna"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b0875f23caa03898994f6ddc501886a45c7d3d62d04d2d90788d47be1b1e4de"
+dependencies = [
+ "idna_adapter",
+ "smallvec",
+ "utf8_iter",
+]
+
+[[package]]
+name = "idna_adapter"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb68373c0d6620ef8105e855e7745e18b0d00d3bdb07fb532e434244cdb9a714"
+dependencies = [
+ "icu_normalizer",
+ "icu_properties",
+]
+
+[[package]]
+name = "indexmap"
+version = "1.9.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bd070e393353796e801d209ad339e89596eb4c8d430d18ede6a1cced8fafbd99"
+dependencies = [
+ "autocfg",
+ "hashbrown 0.12.3",
+ "serde",
+]
+
+[[package]]
+name = "indexmap"
+version = "2.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d466e9454f08e4a911e14806c24e16fba1b4c121d1ea474396f396069cf949d9"
+dependencies = [
+ "equivalent",
+ "hashbrown 0.17.1",
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "infer"
+version = "0.19.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a588916bfdfd92e71cacef98a63d9b1f0d74d6599980d11894290e7ddefffcf7"
+dependencies = [
+ "cfb",
+]
+
+[[package]]
+name = "inout"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "879f10e63c20629ecabbb64a8010319738c66a5cd0c29b02d63d272b03751d01"
+dependencies = [
+ "block-padding 0.3.3",
+ "generic-array",
+]
+
+[[package]]
+name = "inout"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4250ce6452e92010fdf7268ccc5d14faa80bb12fc741938534c58f16804e03c7"
+dependencies = [
+ "block-padding 0.4.2",
+ "hybrid-array",
+]
+
+[[package]]
+name = "inquire"
+version = "0.9.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6654738b8024300cf062d04a1c13c10c8e2cea598ec1c47dc9b6641159429756"
+dependencies = [
+ "bitflags 2.13.1",
+ "crossterm",
+ "dyn-clone",
+ "fuzzy-matcher",
+ "unicode-segmentation",
+ "unicode-width",
+]
+
+[[package]]
+name = "ipnet"
+version = "2.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6a756c3fac73139e83f14c2d742155dd2b78d3ee56597b419a0579b7bdd6dd78"
+
+[[package]]
+name = "ironrdp"
+version = "0.17.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0f910b8dc8e7b8e001c61fd742be442e8604fb2499ded713cadf911e7645ade4"
+dependencies = [
+ "ironrdp-client",
+ "ironrdp-cliprdr",
+ "ironrdp-connector",
+ "ironrdp-core",
+ "ironrdp-input",
+ "ironrdp-mstsgu",
+ "ironrdp-pdu",
+]
+
+[[package]]
+name = "ironrdp-async"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bea12d80384007fe321eb6b36c9225be9559c655fd581458a6a1386c1774d729"
+dependencies = [
+ "bytes",
+ "ironrdp-connector",
+ "ironrdp-core",
+ "ironrdp-pdu",
+ "tracing",
+]
+
+[[package]]
+name = "ironrdp-bulk"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2e548d9fd162558a5a8aaed72e528556ce88e77773634e3722b8d01d6f170388"
+
+[[package]]
+name = "ironrdp-cfg"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebbd21a7fb8d7c034550c515a11c861621f135493a0f81a015472bdf769a6d4f"
+dependencies = [
+ "ironrdp-propertyset",
+]
+
+[[package]]
+name = "ironrdp-client"
+version = "0.1.0"
+dependencies = [
+ "anyhow",
+ "futures-util",
+ "ironrdp-cfg",
+ "ironrdp-cliprdr",
+ "ironrdp-cliprdr-native",
+ "ironrdp-connector",
+ "ironrdp-core",
+ "ironrdp-displaycontrol",
+ "ironrdp-dvc",
+ "ironrdp-dvc-com-plugin",
+ "ironrdp-dvc-pipe-proxy",
+ "ironrdp-echo",
+ "ironrdp-graphics",
+ "ironrdp-mstsgu",
+ "ironrdp-pdu",
+ "ironrdp-propertyset",
+ "ironrdp-rdcleanpath",
+ "ironrdp-rdpdr",
+ "ironrdp-rdpsnd",
+ "ironrdp-rdpsnd-native",
+ "ironrdp-session",
+ "ironrdp-svc",
+ "ironrdp-tls",
+ "ironrdp-tokio",
+ "smallvec",
+ "tokio",
+ "tokio-tungstenite",
+ "tracing",
+ "url",
+ "x509-cert",
+]
+
+[[package]]
+name = "ironrdp-cliprdr"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb9050999a1e032f4313788ac5a6d06e897a4f672f1de2ed98683001fc1abf56"
+dependencies = [
+ "bitflags 2.13.1",
+ "ironrdp-core",
+ "ironrdp-pdu",
+ "ironrdp-svc",
+ "tracing",
+]
+
+[[package]]
+name = "ironrdp-cliprdr-native"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "95cc7f249eb8a5c507fba3a5ee2ba57da716d0881c46421eab79e6fab1b51ae5"
+dependencies = [
+ "ironrdp-cliprdr",
+ "ironrdp-core",
+ "tracing",
+ "windows 0.62.2",
+]
+
+[[package]]
+name = "ironrdp-connector"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d5898b3f1fcaca0f9b923b1463e158aeb64dfdec4ac361b7c086492466ff341c"
+dependencies = [
+ "ironrdp-core",
+ "ironrdp-error",
+ "ironrdp-pdu",
+ "ironrdp-svc",
+ "picky",
+ "picky-asn1-der",
+ "picky-asn1-x509",
+ "rand 0.9.5",
+ "sspi",
+ "tracing",
+ "url",
+]
+
+[[package]]
+name = "ironrdp-core"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ef0875b98275068b88652e49ba2e0a1150a1390aad69d26c942c8c59e8ec918e"
+dependencies = [
+ "ironrdp-error",
+]
+
+[[package]]
+name = "ironrdp-displaycontrol"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "74a111a6fd25abbe51b6a15276fe980c6b9eee50a1421224b0c3f45848d45bcf"
+dependencies = [
+ "ironrdp-core",
+ "ironrdp-dvc",
+ "ironrdp-pdu",
+ "ironrdp-svc",
+ "tracing",
+]
+
+[[package]]
+name = "ironrdp-dvc"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a5de64988ddabf96928e2f042e1772a5f7201f0001ea99012129c73a105fc52"
+dependencies = [
+ "ironrdp-core",
+ "ironrdp-pdu",
+ "ironrdp-svc",
+ "tracing",
+]
+
+[[package]]
+name = "ironrdp-dvc-com-plugin"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "db840b1520498074e498c0e0acc2364ca605f7ec3ec05e7aedf1125a7c468f68"
+dependencies = [
+ "ironrdp-core",
+ "ironrdp-dvc",
+ "ironrdp-pdu",
+ "ironrdp-svc",
+ "tracing",
+ "windows 0.62.2",
+ "windows-core 0.62.2",
+]
+
+[[package]]
+name = "ironrdp-dvc-pipe-proxy"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6237014c01ff3fe262e48eff66bdfee8c12dfbd0e6fb03fbcadc78572a0eec8c"
+dependencies = [
+ "async-trait",
+ "ironrdp-core",
+ "ironrdp-dvc",
+ "ironrdp-pdu",
+ "ironrdp-svc",
+ "tokio",
+ "tracing",
+]
+
+[[package]]
+name = "ironrdp-echo"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2ed0c8de080a88b9a3c5dd7978c4c4ca46a5ddbc81315b799000938f743055c0"
+dependencies = [
+ "ironrdp-core",
+ "ironrdp-dvc",
+ "ironrdp-pdu",
+ "tracing",
+]
+
+[[package]]
+name = "ironrdp-error"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cd344ce9518ab83f6f7568ca4f1bc6dc8c55bd2da04cb5ee7b3e8740d5041734"
+
+[[package]]
+name = "ironrdp-graphics"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c7493e426b6a8104cd497e518ba7781a9c7fc9a5f58a9cc0c1111e6d66f63bcc"
+dependencies = [
+ "bit_field",
+ "bitflags 2.13.1",
+ "bitvec",
+ "byteorder",
+ "ironrdp-core",
+ "ironrdp-pdu",
+ "num-derive",
+ "num-traits",
+ "yuv",
+]
+
+[[package]]
+name = "ironrdp-input"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b1658a0c1d2911b767b71c2f9e07550d7a267bffaaaaeeec868d1752c8ec0f4"
+dependencies = [
+ "bitvec",
+ "ironrdp-pdu",
+ "smallvec",
+]
+
+[[package]]
+name = "ironrdp-mstsgu"
+version = "0.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "19371274ea75ac1edb3431b08b823aad0dba48124c8fe7efbc4c3d8a30a22327"
+dependencies = [
+ "base64 0.22.1",
+ "bitflags 2.13.1",
+ "futures-util",
+ "http-body-util",
+ "hyper",
+ "hyper-util",
+ "ironrdp-core",
+ "ironrdp-error",
+ "ironrdp-tls",
+ "log",
+ "tokio",
+ "tokio-tungstenite",
+ "tokio-util",
+ "uuid",
+]
+
+[[package]]
+name = "ironrdp-pdu"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4ccd1179a4d106df1930347701388b5c79bc3725fa7dab4438d57db0d9d19347"
+dependencies = [
+ "bit_field",
+ "bitflags 2.13.1",
+ "byteorder",
+ "der-parser 10.0.0",
+ "ironrdp-core",
+ "ironrdp-error",
+ "md-5 0.10.6",
+ "num-bigint 0.4.8",
+ "num-derive",
+ "num-integer",
+ "num-traits",
+ "pkcs1 0.7.5",
+ "sha1 0.10.7",
+ "tap",
+ "x509-cert",
+]
+
+[[package]]
+name = "ironrdp-propertyset"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "07427e5b1c1ef2cc72cc8be68e1c9816a40923f39d26377d497fa14079120d34"
+
+[[package]]
+name = "ironrdp-rdcleanpath"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6c2ce7c76797b5eeca9f5cca4410e2748f9458c5a11cc41e1e6d5ba475da947"
+dependencies = [
+ "der 0.7.10",
+]
+
+[[package]]
+name = "ironrdp-rdpdr"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ece9e67ccf992eb8ce5ec0416d3950e2e199d4b1e2523f91af192205279fc970"
+dependencies = [
+ "bitflags 2.13.1",
+ "ironrdp-core",
+ "ironrdp-error",
+ "ironrdp-pdu",
+ "ironrdp-svc",
+ "tracing",
+]
+
+[[package]]
+name = "ironrdp-rdpfile"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9dca7b3141f98a7c4d5bb08d228891f359918bc1c62f51e1251940ff0eb0f08d"
+dependencies = [
+ "ironrdp-propertyset",
+]
+
+[[package]]
+name = "ironrdp-rdpsnd"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d1a4f7092ae8fdc0a2f61be8e100277dc6f4ad51b85455dc9e8157979993ea2"
+dependencies = [
+ "bitflags 2.13.1",
+ "ironrdp-core",
+ "ironrdp-pdu",
+ "ironrdp-svc",
+ "tracing",
+]
+
+[[package]]
+name = "ironrdp-rdpsnd-native"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3d2d36d9bb45863f9bc5225bf3bccda125fafb1b225c1f99dbeaeebb258e7dc"
+dependencies = [
+ "bytemuck",
+ "cpal",
+ "ironrdp-error",
+ "ironrdp-rdpsnd",
+ "opus2",
+ "tracing",
+]
+
+[[package]]
+name = "ironrdp-session"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f1a5a20c24d8ebf47477f9f513201aeb894e7c7f779ea633ece65e42a9f0652"
+dependencies = [
+ "ironrdp-bulk",
+ "ironrdp-core",
+ "ironrdp-displaycontrol",
+ "ironrdp-dvc",
+ "ironrdp-error",
+ "ironrdp-graphics",
+ "ironrdp-pdu",
+ "ironrdp-svc",
+ "tracing",
+]
+
+[[package]]
+name = "ironrdp-svc"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "24c36b82ab0f7fef2668fb7004008a0f3c100a3d9a7b18bd4495a71aba55b796"
+dependencies = [
+ "bitflags 2.13.1",
+ "ironrdp-core",
+ "ironrdp-pdu",
+]
+
+[[package]]
+name = "ironrdp-tls"
+version = "0.2.2"
+dependencies = [
+ "sha2 0.10.9",
+ "tokio",
+ "tokio-rustls",
+ "x509-cert",
+]
+
+[[package]]
+name = "ironrdp-tokio"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7692ac83a98e4b3ac01405e311bbbd5a33683447032986ed92a4a44d46ad6344"
+dependencies = [
+ "ironrdp-async",
+ "ironrdp-connector",
+ "reqwest 0.12.28",
+ "tokio",
+ "url",
+]
+
+[[package]]
+name = "ironrdp-viewer"
+version = "0.1.0"
+dependencies = [
+ "anyhow",
+ "clap",
+ "inquire",
+ "ironrdp",
+ "ironrdp-cfg",
+ "ironrdp-propertyset",
+ "ironrdp-rdpfile",
+ "proc-exit",
+ "raw-window-handle",
+ "semver",
+ "smallvec",
+ "softbuffer",
+ "tap",
+ "tokio",
+ "tracing",
+ "tracing-subscriber",
+ "url",
+ "whoami",
+ "winit",
+]
+
+[[package]]
+name = "is_terminal_polyfill"
+version = "1.70.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695"
+
+[[package]]
+name = "iso7816"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cd3c7e91da489667bb054f9cd2f1c60cc2ac4478a899f403d11dbc62189215b0"
+dependencies = [
+ "heapless",
+]
+
+[[package]]
+name = "iso7816-tlv"
+version = "0.4.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7660d28d24a831d690228a275d544654a30f3b167a8e491cf31af5fe5058b546"
+dependencies = [
+ "untrusted",
+]
+
+[[package]]
+name = "itertools"
+version = "0.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2b192c782037fadd9cfa75548310488aabdbf3d2da73885b31bd0abd03351285"
+dependencies = [
+ "either",
+]
+
+[[package]]
+name = "itoa"
+version = "1.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
+
+[[package]]
+name = "javascriptcore-rs"
+version = "1.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ca5671e9ffce8ffba57afc24070e906da7fc4b1ba66f2cabebf61bf2ea257fcc"
+dependencies = [
+ "bitflags 1.3.2",
+ "glib 0.18.5",
+ "javascriptcore-rs-sys",
+]
+
+[[package]]
+name = "javascriptcore-rs-sys"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "af1be78d14ffa4b75b66df31840478fef72b51f8c2465d4ca7c194da9f7a5124"
+dependencies = [
+ "glib-sys 0.18.1",
+ "gobject-sys 0.18.0",
+ "libc",
+ "system-deps 6.2.2",
+]
+
+[[package]]
+name = "jiff"
+version = "0.2.35"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "668b7183bd07af9a4885f5c35b0cc5c83c4607a913c16b7e17291832910d2dcc"
+dependencies = [
+ "defmt",
+ "jiff-core",
+ "jiff-static",
+ "jiff-tzdb-platform",
+ "log",
+ "portable-atomic",
+ "portable-atomic-util",
+ "serde_core",
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "jiff-core"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7feca88439efe53da3754500c1851dedf3cb36c524dd5cf8225cc0794de95d09"
+dependencies = [
+ "defmt",
+]
+
+[[package]]
+name = "jiff-static"
+version = "0.2.35"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a69dcb3a21cfb32ce1cd056169337ca284af0766dd766e7878819b251a49204"
+dependencies = [
+ "jiff-core",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "jiff-tzdb"
+version = "0.1.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "142bd39932ad231f10513df9ab62661fead8719872150b7ad02a2df79f4e141e"
+
+[[package]]
+name = "jiff-tzdb-platform"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "875a5a69ac2bab1a891711cf5eccbec1ce0341ea805560dcd90b7a2e925132e8"
+dependencies = [
+ "jiff-tzdb",
+]
+
+[[package]]
+name = "jni"
+version = "0.21.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1a87aa2bb7d2af34197c04845522473242e1aa17c12f4935d5856491a7fb8c97"
+dependencies = [
+ "cesu8",
+ "cfg-if",
+ "combine",
+ "jni-sys 0.3.1",
+ "log",
+ "thiserror 1.0.69",
+ "walkdir",
+ "windows-sys 0.45.0",
+]
+
+[[package]]
+name = "jni"
+version = "0.22.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5efd9a482cf3a427f00d6b35f14332adc7902ce91efb778580e180ff90fa3498"
+dependencies = [
+ "cfg-if",
+ "combine",
+ "jni-macros",
+ "jni-sys 0.4.1",
+ "log",
+ "simd_cesu8",
+ "thiserror 2.0.20",
+ "walkdir",
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "jni-macros"
+version = "0.22.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a00109accc170f0bdb141fed3e393c565b6f5e072365c3bd58f5b062591560a3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "rustc_version",
+ "simd_cesu8",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "jni-sys"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41a652e1f9b6e0275df1f15b32661cf0d4b78d4d87ddec5e0c3c20f097433258"
+dependencies = [
+ "jni-sys 0.4.1",
+]
+
+[[package]]
+name = "jni-sys"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c6377a88cb3910bee9b0fa88d4f42e1d2da8e79915598f65fb0c7ee14c878af2"
+dependencies = [
+ "jni-sys-macros",
+]
+
+[[package]]
+name = "jni-sys-macros"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "38c0b942f458fe50cdac086d2f946512305e5631e720728f2a61aabcd47a6264"
+dependencies = [
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "jobserver"
+version = "0.1.35"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1c00acbd29eabad4a2392fa0e921c874934dbbf4194312ad20f04a0ed67a3cb3"
+dependencies = [
+ "getrandom 0.4.3",
+ "libc",
+]
+
+[[package]]
+name = "js-sys"
+version = "0.3.104"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0e0c1080212aad755ea003d18543e8768dd432c48819efd73a7bf1e39b7a5a3a"
+dependencies = [
+ "cfg-if",
+ "futures-util",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "json-patch"
+version = "3.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "863726d7afb6bc2590eeff7135d923545e5e964f004c2ccf8716c25e70a86f08"
+dependencies = [
+ "jsonptr",
+ "serde",
+ "serde_json",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "jsonptr"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5dea2b27dd239b2556ed7a25ba842fe47fd602e7fc7433c2a8d6106d4d9edd70"
+dependencies = [
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "keccak"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ffd9697dc4a9a62e2da93389f34400b77a28f0287711263cabb203b3ccb9c0e4"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.3.0",
+]
+
+[[package]]
+name = "keyboard-types"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b750dcadc39a09dbadd74e118f6dd6598df77fa01df0cfcdc52c28dece74528a"
+dependencies = [
+ "bitflags 2.13.1",
+ "serde",
+ "unicode-segmentation",
+]
+
+[[package]]
+name = "keyring"
+version = "3.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eebcc3aff044e5944a8fbaf69eb277d11986064cba30c468730e8b9909fb551c"
+dependencies = [
+ "byteorder",
+ "log",
+ "windows-sys 0.60.2",
+ "zeroize",
+]
+
+[[package]]
+name = "kstring"
+version = "2.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "558bf9508a558512042d3095138b1f7b8fe90c5467d94f9f1da28b3731c5dbd1"
+dependencies = [
+ "static_assertions",
+]
+
+[[package]]
+name = "lazy_static"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bbd2bcb4c963f2ddae06a2efc7e9f3591312473c50c6685e1f298068316e66fe"
+
+[[package]]
+name = "libc"
+version = "0.2.189"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3eaf3ede3fee6db1a4c2ee091bf8a8b4dccdc6d17f656fb07896ee72867612f2"
+
+[[package]]
+name = "libloading"
+version = "0.8.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7c4b02199fee7c5d21a5ae7d8cfa79a6ef5bb2fc834d6e9058e89c825efdc55"
+dependencies = [
+ "cfg-if",
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "libopus_sys"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b81c32f233fb2507347a93f97b9919493be9db7ec2249ce2c3ed0c89ad8edf60"
+dependencies = [
+ "cmake",
+ "log",
+ "pkg-config",
+]
+
+[[package]]
+name = "libredox"
+version = "0.1.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2026a5056764a10b2bf5d56488cba40da507f5493a6a429340e2004d9ed085fa"
+dependencies = [
+ "bitflags 2.13.1",
+ "libc",
+ "plain",
+ "redox_syscall 0.9.1",
+]
+
+[[package]]
+name = "libsqlite3-sys"
+version = "0.30.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2e99fb7a497b1e3339bc746195567ed8d3e24945ecd636e3619d20b9de9e9149"
+dependencies = [
+ "cc",
+ "pkg-config",
+ "vcpkg",
+]
+
+[[package]]
+name = "libz-sys"
+version = "1.1.29"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85bc9657773828b90eeb625adff10eeac83cc21bbfd8e23a03eaa8a33c9e28d9"
+dependencies = [
+ "cc",
+ "pkg-config",
+ "vcpkg",
+]
+
+[[package]]
+name = "linux-raw-sys"
+version = "0.4.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d26c52dbd32dccf2d10cac7725f8eae5296885fb5703b261f7d0a0739ec807ab"
+
+[[package]]
+name = "linux-raw-sys"
+version = "0.9.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cd945864f07fe9f5371a27ad7b52a172b4b499999f1d97574c9fa68373937e12"
+
+[[package]]
+name = "linux-raw-sys"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53"
+
+[[package]]
+name = "litemap"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92daf443525c4cce67b150400bc2316076100ce0b3686209eb8cf3c31612e6f0"
+
+[[package]]
+name = "litrs"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "11d3d7f243d5c5a8b9bb5d6dd2b1602c0cb0b9db1621bafc7ed66e35ff9fe092"
+
+[[package]]
+name = "lock_api"
+version = "0.4.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "224399e74b87b5f3557511d98dff8b14089b3dadafcab6bb93eab67d3aace965"
+dependencies = [
+ "scopeguard",
+]
+
+[[package]]
+name = "log"
+version = "0.4.33"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ceec5bc11778974d1bcb055b18002eba7f4b3518b6a0081b3af5f21666da9ad"
+
+[[package]]
+name = "lru-slab"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "112b39cec0b298b6c1999fee3e31427f74f676e4cb9879ed1a121b43661a4154"
+
+[[package]]
+name = "mach2"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6a1b95cd5421ec55b445b5ae102f5ea0e768de1f82bd3001e11f426c269c3aea"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "markup5ever"
+version = "0.38.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8983d30f2915feeaaab2d6babdd6bc7e9ed1a00b66b5e6d74df19aa9c0e91862"
+dependencies = [
+ "log",
+ "tendril",
+ "web_atoms",
+]
+
+[[package]]
+name = "matchers"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d1525a2a28c7f4fa0fc98bb91ae755d1e2d1505079e05539e35bc876b5d65ae9"
+dependencies = [
+ "regex-automata",
+]
+
+[[package]]
+name = "md-5"
+version = "0.10.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d89e7ee0cfbedfc4da3340218492196241d89eefb6dab27de5df917a6d2e78cf"
+dependencies = [
+ "cfg-if",
+ "digest 0.10.7",
+]
+
+[[package]]
+name = "md-5"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "69b6441f590336821bb897fb28fc622898ccceb1d6cea3fde5ea86b090c4de98"
+dependencies = [
+ "cfg-if",
+ "digest 0.11.3",
+]
+
+[[package]]
+name = "md4"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7da5ac363534dce5fabf69949225e174fbf111a498bf0ff794c8ea1fba9f3dda"
+dependencies = [
+ "digest 0.10.7",
+]
+
+[[package]]
+name = "memchr"
+version = "2.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98"
+
+[[package]]
+name = "memmap2"
+version = "0.9.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d1219ed1b7f229ee7104d281dd01d6802fe28bb6e95d292942c4daacdeb798c0"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "memoffset"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5de893c32cde5f383baa4c04c5d6dbdd735cfd4a794b0debdb2bb1b421da5ff4"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "memoffset"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "488016bfae457b036d996092f6cb448677611ce4449e970ceaf42695203f218a"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "mime"
+version = "0.3.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6877bb514081ee2a7ff5ef9de3281f14a4dd4bceac4c09388074a6b5df8a139a"
+
+[[package]]
+name = "minimal-lexical"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "68354c5c6bd36d73ff3feceb05efa59b6acb7626617f4962be322a825e61f79a"
+
+[[package]]
+name = "miniz_oxide"
+version = "0.8.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fa76a2c86f704bdb222d66965fb3d63269ce38518b83cb0575fca855ebb6316"
+dependencies = [
+ "adler2",
+ "simd-adler32",
+]
+
+[[package]]
+name = "mio"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "30d65c71f1ce40ab09135ce117d742b9f8a19ff91a41a8b57ed50bc2de59c427"
+dependencies = [
+ "libc",
+ "log",
+ "wasi 0.11.1+wasi-snapshot-preview1",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "muda"
+version = "0.19.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1dd04e60bc0b07438a6771710ee1698f98f6ebbc7f89b61264af1563b8aeb878"
+dependencies = [
+ "crossbeam-channel",
+ "dpi",
+ "gtk",
+ "keyboard-types",
+ "objc2 0.6.4",
+ "objc2-app-kit 0.3.2",
+ "objc2-core-foundation",
+ "objc2-foundation 0.3.2",
+ "once_cell",
+ "png 0.18.1",
+ "serde",
+ "thiserror 2.0.20",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "muldiv"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "956787520e75e9bd233246045d19f42fb73242759cc57fba9611d940ae96d4b0"
+
+[[package]]
+name = "munge"
+version = "0.4.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e17401f259eba956ca16491461b6e8f72913a0a114e39736ce404410f915a0c"
+dependencies = [
+ "munge_macro",
+]
+
+[[package]]
+name = "munge_macro"
+version = "0.4.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4568f25ccbd45ab5d5603dc34318c1ec56b117531781260002151b8530a9f931"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "ndk"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3f42e7bbe13d351b6bead8286a43aac9534b82bd3cc43e47037f012ebfd62d4"
+dependencies = [
+ "bitflags 2.13.1",
+ "jni-sys 0.3.1",
+ "log",
+ "ndk-sys",
+ "num_enum",
+ "raw-window-handle",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "ndk-context"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "27b02d87554356db9e9a873add8782d4ea6e3e58ea071a9adb9a2e8ddb884a8b"
+
+[[package]]
+name = "ndk-sys"
+version = "0.6.0+11769913"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee6cda3051665f1fb8d9e08fc35c96d5a244fb1be711a03b71118828afc9a873"
+dependencies = [
+ "jni-sys 0.3.1",
+]
+
+[[package]]
+name = "new_debug_unreachable"
+version = "1.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "650eef8c711430f1a879fdd01d4745a7deea475becfb90269c06775983bbf086"
+
+[[package]]
+name = "nix"
+version = "0.26.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "598beaf3cc6fdd9a5dfb1630c2800c7acd31df7aaf0f565796fba2b53ca1af1b"
+dependencies = [
+ "bitflags 1.3.2",
+ "cfg-if",
+ "libc",
+ "memoffset 0.7.1",
+ "pin-utils",
+]
+
+[[package]]
+name = "nix"
+version = "0.28.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ab2156c4fce2f8df6c499cc1c763e4394b7482525bf2a9701c9d79d215f519e4"
+dependencies = [
+ "bitflags 2.13.1",
+ "cfg-if",
+ "cfg_aliases 0.1.1",
+ "libc",
+]
+
+[[package]]
+name = "nom"
+version = "7.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d273983c5a657a70a3e8f2a01329822f3b8c8172b73826411a55751e404a0a4a"
+dependencies = [
+ "memchr",
+ "minimal-lexical",
+]
+
+[[package]]
+name = "nu-ansi-term"
+version = "0.50.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "num-bigint"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5f6f7833f2cbf2360a6cfd58cd41a53aa7a90bd4c202f5b1c7dd2ed73c57b2c3"
+dependencies = [
+ "autocfg",
+ "num-integer",
+ "num-traits",
+]
+
+[[package]]
+name = "num-bigint"
+version = "0.4.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c89e69e7e0f03bea5ef08013795c25018e101932225a656383bd384495ecc367"
+dependencies = [
+ "num-integer",
+ "num-traits",
+]
+
+[[package]]
+name = "num-conv"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "521739c6d2bac4aa25192232afe6841231376b2b26d4d9fae5ecf8ca5772e441"
+
+[[package]]
+name = "num-derive"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed3955f1a9c7c0c15e092f9c887db08b1fc683305fdf6eb6684f22555355e202"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "num-integer"
+version = "0.1.46"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7969661fd2958a5cb096e56c8e1ad0444ac2bbcd0061bd28660485a44879858f"
+dependencies = [
+ "num-traits",
+]
+
+[[package]]
+name = "num-rational"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f83d14da390562dca69fc84082e73e548e1ad308d24accdedd2720017cb37824"
+dependencies = [
+ "num-integer",
+ "num-traits",
+]
+
+[[package]]
+name = "num-traits"
+version = "0.2.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "num_enum"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5d0bca838442ec211fa11de3a8b0e0e8f3a4522575b5c4c06ed722e005036f26"
+dependencies = [
+ "num_enum_derive",
+ "rustversion",
+]
+
+[[package]]
+name = "num_enum_derive"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "680998035259dcfcafe653688bf2aa6d3e2dc05e98be6ab46afb089dc84f1df8"
+dependencies = [
+ "proc-macro-crate 3.5.0",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "objc-sys"
+version = "0.3.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdb91bdd390c7ce1a8607f35f3ca7151b65afc0ff5ff3b34fa350f7d7c7e4310"
+
+[[package]]
+name = "objc2"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "46a785d4eeff09c14c487497c162e92766fbb3e4059a71840cecc03d9a50b804"
+dependencies = [
+ "objc-sys",
+ "objc2-encode",
+]
+
+[[package]]
+name = "objc2"
+version = "0.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a12a8ed07aefc768292f076dc3ac8c48f3781c8f2d5851dd3d98950e8c5a89f"
+dependencies = [
+ "objc2-encode",
+ "objc2-exception-helper",
+]
+
+[[package]]
+name = "objc2-app-kit"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e4e89ad9e3d7d297152b17d39ed92cd50ca8063a89a9fa569046d41568891eff"
+dependencies = [
+ "bitflags 2.13.1",
+ "block2 0.5.1",
+ "libc",
+ "objc2 0.5.2",
+ "objc2-core-data 0.2.2",
+ "objc2-core-image 0.2.2",
+ "objc2-foundation 0.2.2",
+ "objc2-quartz-core 0.2.2",
+]
+
+[[package]]
+name = "objc2-app-kit"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d49e936b501e5c5bf01fda3a9452ff86dc3ea98ad5f283e1455153142d97518c"
+dependencies = [
+ "bitflags 2.13.1",
+ "block2 0.6.2",
+ "objc2 0.6.4",
+ "objc2-core-foundation",
+ "objc2-foundation 0.3.2",
+]
+
+[[package]]
+name = "objc2-audio-toolbox"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6948501a91121d6399b79abaa33a8aa4ea7857fe019f341b8c23ad6e81b79b08"
+dependencies = [
+ "bitflags 2.13.1",
+ "libc",
+ "objc2 0.6.4",
+ "objc2-core-audio",
+ "objc2-core-audio-types",
+ "objc2-core-foundation",
+ "objc2-foundation 0.3.2",
+]
+
+[[package]]
+name = "objc2-avf-audio"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13a380031deed8e99db00065c45937da434ca987c034e13b87e4441f9e4090be"
+dependencies = [
+ "objc2 0.6.4",
+ "objc2-foundation 0.3.2",
+]
+
+[[package]]
+name = "objc2-cloud-kit"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "74dd3b56391c7a0596a295029734d3c1c5e7e510a4cb30245f8221ccea96b009"
+dependencies = [
+ "bitflags 2.13.1",
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-core-location 0.2.2",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc2-cloud-kit"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "73ad74d880bb43877038da939b7427bba67e9dd42004a18b809ba7d87cee241c"
+dependencies = [
+ "bitflags 2.13.1",
+ "objc2 0.6.4",
+ "objc2-foundation 0.3.2",
+]
+
+[[package]]
+name = "objc2-contacts"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a5ff520e9c33812fd374d8deecef01d4a840e7b41862d849513de77e44aa4889"
+dependencies = [
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc2-core-audio"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e1eebcea8b0dbff5f7c8504f3107c68fc061a3eb44932051c8cf8a68d969c3b2"
+dependencies = [
+ "dispatch2",
+ "objc2 0.6.4",
+ "objc2-core-audio-types",
+ "objc2-core-foundation",
+ "objc2-foundation 0.3.2",
+]
+
+[[package]]
+name = "objc2-core-audio-types"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a89f2ec274a0cf4a32642b2991e8b351a404d290da87bb6a9a9d8632490bd1c"
+dependencies = [
+ "bitflags 2.13.1",
+ "objc2 0.6.4",
+]
+
+[[package]]
+name = "objc2-core-data"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "617fbf49e071c178c0b24c080767db52958f716d9eabdf0890523aeae54773ef"
+dependencies = [
+ "bitflags 2.13.1",
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc2-core-data"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b402a653efbb5e82ce4df10683b6b28027616a2715e90009947d50b8dd298fa"
+dependencies = [
+ "objc2 0.6.4",
+ "objc2-foundation 0.3.2",
+]
+
+[[package]]
+name = "objc2-core-foundation"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a180dd8642fa45cdb7dd721cd4c11b1cadd4929ce112ebd8b9f5803cc79d536"
+dependencies = [
+ "bitflags 2.13.1",
+ "block2 0.6.2",
+ "dispatch2",
+ "libc",
+ "objc2 0.6.4",
+]
+
+[[package]]
+name = "objc2-core-graphics"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e022c9d066895efa1345f8e33e584b9f958da2fd4cd116792e15e07e4720a807"
+dependencies = [
+ "bitflags 2.13.1",
+ "dispatch2",
+ "objc2 0.6.4",
+ "objc2-core-foundation",
+ "objc2-io-surface",
+]
+
+[[package]]
+name = "objc2-core-image"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "55260963a527c99f1819c4f8e3b47fe04f9650694ef348ffd2227e8196d34c80"
+dependencies = [
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-foundation 0.2.2",
+ "objc2-metal",
+]
+
+[[package]]
+name = "objc2-core-image"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e5d563b38d2b97209f8e861173de434bd0214cf020e3423a52624cd1d989f006"
+dependencies = [
+ "objc2 0.6.4",
+ "objc2-foundation 0.3.2",
+]
+
+[[package]]
+name = "objc2-core-location"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "000cfee34e683244f284252ee206a27953279d370e309649dc3ee317b37e5781"
+dependencies = [
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-contacts",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc2-core-location"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ca347214e24bc973fc025fd0d36ebb179ff30536ed1f80252706db19ee452009"
+dependencies = [
+ "objc2 0.6.4",
+ "objc2-foundation 0.3.2",
+]
+
+[[package]]
+name = "objc2-core-text"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0cde0dfb48d25d2b4862161a4d5fcc0e3c24367869ad306b0c9ec0073bfed92d"
+dependencies = [
+ "bitflags 2.13.1",
+ "objc2 0.6.4",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+]
+
+[[package]]
+name = "objc2-encode"
+version = "4.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ef25abbcd74fb2609453eb695bd2f860d389e457f67dc17cafc8b8cbc89d0c33"
+
+[[package]]
+name = "objc2-exception-helper"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c7a1c5fbb72d7735b076bb47b578523aedc40f3c439bea6dfd595c089d79d98a"
+dependencies = [
+ "cc",
+]
+
+[[package]]
+name = "objc2-foundation"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ee638a5da3799329310ad4cfa62fbf045d5f56e3ef5ba4149e7452dcf89d5a8"
+dependencies = [
+ "bitflags 2.13.1",
+ "block2 0.5.1",
+ "dispatch",
+ "libc",
+ "objc2 0.5.2",
+]
+
+[[package]]
+name = "objc2-foundation"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3e0adef53c21f888deb4fa59fc59f7eb17404926ee8a6f59f5df0fd7f9f3272"
+dependencies = [
+ "bitflags 2.13.1",
+ "block2 0.6.2",
+ "libc",
+ "objc2 0.6.4",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-io-surface"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "180788110936d59bab6bd83b6060ffdfffb3b922ba1396b312ae795e1de9d81d"
+dependencies = [
+ "bitflags 2.13.1",
+ "objc2 0.6.4",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-link-presentation"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1a1ae721c5e35be65f01a03b6d2ac13a54cb4fa70d8a5da293d7b0020261398"
+dependencies = [
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-app-kit 0.2.2",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc2-metal"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dd0cba1276f6023976a406a14ffa85e1fdd19df6b0f737b063b95f6c8c7aadd6"
+dependencies = [
+ "bitflags 2.13.1",
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc2-quartz-core"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e42bee7bff906b14b167da2bac5efe6b6a07e6f7c0a21a7308d40c960242dc7a"
+dependencies = [
+ "bitflags 2.13.1",
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-foundation 0.2.2",
+ "objc2-metal",
+]
+
+[[package]]
+name = "objc2-quartz-core"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96c1358452b371bf9f104e21ec536d37a650eb10f7ee379fff67d2e08d537f1f"
+dependencies = [
+ "bitflags 2.13.1",
+ "objc2 0.6.4",
+ "objc2-core-foundation",
+ "objc2-foundation 0.3.2",
+]
+
+[[package]]
+name = "objc2-symbols"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0a684efe3dec1b305badae1a28f6555f6ddd3bb2c2267896782858d5a78404dc"
+dependencies = [
+ "objc2 0.5.2",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc2-system-configuration"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7216bd11cbda54ccabcab84d523dc93b858ec75ecfb3a7d89513fa22464da396"
+dependencies = [
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-ui-kit"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8bb46798b20cd6b91cbd113524c490f1686f4c4e8f49502431415f3512e2b6f"
+dependencies = [
+ "bitflags 2.13.1",
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-cloud-kit 0.2.2",
+ "objc2-core-data 0.2.2",
+ "objc2-core-image 0.2.2",
+ "objc2-core-location 0.2.2",
+ "objc2-foundation 0.2.2",
+ "objc2-link-presentation",
+ "objc2-quartz-core 0.2.2",
+ "objc2-symbols",
+ "objc2-uniform-type-identifiers",
+ "objc2-user-notifications 0.2.2",
+]
+
+[[package]]
+name = "objc2-ui-kit"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d87d638e33c06f577498cbcc50491496a3ed4246998a7fbba7ccb98b1e7eab22"
+dependencies = [
+ "bitflags 2.13.1",
+ "block2 0.6.2",
+ "objc2 0.6.4",
+ "objc2-cloud-kit 0.3.2",
+ "objc2-core-data 0.3.2",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+ "objc2-core-image 0.3.2",
+ "objc2-core-location 0.3.2",
+ "objc2-core-text",
+ "objc2-foundation 0.3.2",
+ "objc2-quartz-core 0.3.2",
+ "objc2-user-notifications 0.3.2",
+]
+
+[[package]]
+name = "objc2-uniform-type-identifiers"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "44fa5f9748dbfe1ca6c0b79ad20725a11eca7c2218bceb4b005cb1be26273bfe"
+dependencies = [
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc2-user-notifications"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76cfcbf642358e8689af64cee815d139339f3ed8ad05103ed5eaf73db8d84cb3"
+dependencies = [
+ "bitflags 2.13.1",
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-core-location 0.2.2",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc2-user-notifications"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9df9128cbbfef73cda168416ccf7f837b62737d748333bfe9ab71c245d76613e"
+dependencies = [
+ "objc2 0.6.4",
+ "objc2-foundation 0.3.2",
+]
+
+[[package]]
+name = "objc2-web-kit"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b2e5aaab980c433cf470df9d7af96a7b46a9d892d521a2cbbb2f8a4c16751e7f"
+dependencies = [
+ "bitflags 2.13.1",
+ "block2 0.6.2",
+ "objc2 0.6.4",
+ "objc2-app-kit 0.3.2",
+ "objc2-core-foundation",
+ "objc2-foundation 0.3.2",
+]
+
+[[package]]
+name = "oid"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9c19903c598813dba001b53beeae59bb77ad4892c5c1b9b3500ce4293a0d06c2"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "oid-registry"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a8d8034d9489cdaf79228eb9f6a3b8d7bb32ba00d6645ebd48eef4077ceb5bd9"
+dependencies = [
+ "asn1-rs 0.6.2",
+]
+
+[[package]]
+name = "oid-registry"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "12f40cff3dde1b6087cc5d5f5d4d65712f34016a03ed60e9c08dcc392736b5b7"
+dependencies = [
+ "asn1-rs 0.7.2",
+]
+
+[[package]]
+name = "once_cell"
+version = "1.21.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50"
+
+[[package]]
+name = "once_cell_polyfill"
+version = "1.70.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe"
+
+[[package]]
+name = "opaque-debug"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c08d65885ee38876c4f86fa503fb49d7b507c2b62552df7c70b2fce627e06381"
+
+[[package]]
+name = "openssl-probe"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7c87def4c32ab89d880effc9e097653c8da5d6ef28e6b539d313baaacfbafcbe"
+
+[[package]]
+name = "option-ext"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "04744f49eae99ab78e0d5c0b603ab218f515ea8cfe5a456d7629ad883a3b6e7d"
+
+[[package]]
+name = "option-operations"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "aca39cf52b03268400c16eeb9b56382ea3c3353409309b63f5c8f0b1faf42754"
+dependencies = [
+ "pastey",
+]
+
+[[package]]
+name = "opus2"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "49521e33fbf825d2abc8d696506c278cb8469d0c6cc05d3785bef5c5f7ee957b"
+dependencies = [
+ "libopus_sys",
+]
+
+[[package]]
+name = "orbclient"
+version = "0.3.55"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5df339f526ea9a60e371768d50efc2f2508c7203290731565d1f7a6f71d21747"
+dependencies = [
+ "libc",
+ "libredox",
+]
+
+[[package]]
+name = "ordered-stream"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9aa2b01e1d916879f73a53d01d1d6cee68adbb31d6d9177a8cfce093cced1d50"
+dependencies = [
+ "futures-core",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "owned_ttf_parser"
+version = "0.25.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "36820e9051aca1014ddc75770aab4d68bc1e9e632f0f5627c4086bc216fb583b"
+dependencies = [
+ "ttf-parser",
+]
+
+[[package]]
+name = "p256"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c9863ad85fa8f4460f9c48cb909d38a0d689dba1f6f6988a5e3e0d31071bcd4b"
+dependencies = [
+ "ecdsa 0.16.9",
+ "elliptic-curve 0.13.8",
+ "primeorder 0.13.6",
+ "sha2 0.10.9",
+]
+
+[[package]]
+name = "p256"
+version = "0.14.0-rc.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c855a8d2ffd346aa03122626f22e96e3aa75e3bfe64e6bf6cb82f71821ed6ae7"
+dependencies = [
+ "ecdsa 0.17.0-rc.22",
+ "elliptic-curve 0.14.1",
+ "primefield",
+ "primeorder 0.14.0-rc.14",
+ "sha2 0.11.0",
+]
+
+[[package]]
+name = "p384"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fe42f1670a52a47d448f14b6a5c61dd78fce51856e68edaa38f7ae3a46b8d6b6"
+dependencies = [
+ "ecdsa 0.16.9",
+ "elliptic-curve 0.13.8",
+ "primeorder 0.13.6",
+ "sha2 0.10.9",
+]
+
+[[package]]
+name = "p384"
+version = "0.14.0-rc.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "62941b68907ddf996ac20f0debf700c236ccc3d874637731a93c631129ca042f"
+dependencies = [
+ "ecdsa 0.17.0-rc.22",
+ "elliptic-curve 0.14.1",
+ "fiat-crypto 0.3.0",
+ "primefield",
+ "primeorder 0.14.0-rc.14",
+ "sha2 0.11.0",
+]
+
+[[package]]
+name = "p521"
+version = "0.14.0-rc.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0dd6f2fe6e76c8d5e8828e92aafa463777d1e72e70b78acc724214757e92479a"
+dependencies = [
+ "base16ct 1.0.0",
+ "ecdsa 0.17.0-rc.22",
+ "elliptic-curve 0.14.1",
+ "primefield",
+ "primeorder 0.14.0-rc.14",
+ "sha2 0.11.0",
+]
+
+[[package]]
+name = "pango"
+version = "0.18.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7ca27ec1eb0457ab26f3036ea52229edbdb74dee1edd29063f5b9b010e7ebee4"
+dependencies = [
+ "gio",
+ "glib 0.18.5",
+ "libc",
+ "once_cell",
+ "pango-sys",
+]
+
+[[package]]
+name = "pango-sys"
+version = "0.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "436737e391a843e5933d6d9aa102cb126d501e815b83601365a948a518555dc5"
+dependencies = [
+ "glib-sys 0.18.1",
+ "gobject-sys 0.18.0",
+ "libc",
+ "system-deps 6.2.2",
+]
+
+[[package]]
+name = "parking"
+version = "2.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f38d5652c16fde515bb1ecef450ab0f6a219d619a7274976324d5e377f7dceba"
+
+[[package]]
+name = "parking_lot"
+version = "0.12.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "93857453250e3077bd71ff98b6a65ea6621a19bb0f559a85248955ac12c45a1a"
+dependencies = [
+ "lock_api",
+ "parking_lot_core",
+]
+
+[[package]]
+name = "parking_lot_core"
+version = "0.9.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2621685985a2ebf1c516881c026032ac7deafcda1a2c9b7850dc81e3dfcb64c1"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "redox_syscall 0.5.18",
+ "smallvec",
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "pastey"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2ee67f1008b1ba2321834326597b8e186293b049a023cdef258527550b9935b4"
+
+[[package]]
+name = "pbkdf2"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "112d82ceb8c5bf524d9af484d4e4970c9fd5a0cc15ba14ad93dccd28873b0629"
+dependencies = [
+ "digest 0.11.3",
+ "hmac 0.13.0",
+]
+
+[[package]]
+name = "pem"
+version = "3.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d30c53c26bc5b31a98cd02d20f25a7c8567146caf63ed593a9d87b2775291be"
+dependencies = [
+ "base64 0.22.1",
+ "serde_core",
+]
+
+[[package]]
+name = "pem-rfc7468"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "88b39c9bfcfc231068454382784bb460aae594343fb030d46e9f50a645418412"
+dependencies = [
+ "base64ct",
+]
+
+[[package]]
+name = "pem-rfc7468"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6305423e0e7738146434843d1694d621cce767262b2a86910beab705e4493d9"
+dependencies = [
+ "base64ct",
+]
+
+[[package]]
+name = "percent-encoding"
+version = "2.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220"
+
+[[package]]
+name = "phf"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c1562dc717473dbaa4c1f85a36410e03c047b2e7df7f45ee938fbef64ae7fadf"
+dependencies = [
+ "phf_macros",
+ "phf_shared",
+ "serde",
+]
+
+[[package]]
+name = "phf_codegen"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "49aa7f9d80421bca176ca8dbfebe668cc7a2684708594ec9f3c0db0805d5d6e1"
+dependencies = [
+ "phf_generator",
+ "phf_shared",
+]
+
+[[package]]
+name = "phf_generator"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "135ace3a761e564ec88c03a77317a7c6b80bb7f7135ef2544dbe054243b89737"
+dependencies = [
+ "fastrand",
+ "phf_shared",
+]
+
+[[package]]
+name = "phf_macros"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "812f032b54b1e759ccd5f8b6677695d5268c588701effba24601f6932f8269ef"
+dependencies = [
+ "phf_generator",
+ "phf_shared",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "phf_shared"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e57fef6bc5981e38c2ce2d63bfa546861309f875b8a75f092d1d54ae2d64f266"
+dependencies = [
+ "siphasher",
+]
+
+[[package]]
+name = "picky"
+version = "7.0.0-rc.25"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c1ae9cd78eb1d61be4790713d28368cf71c844218fcd91542768805423f02666"
+dependencies = [
+ "aes 0.9.2",
+ "aes-gcm 0.11.0-rc.4",
+ "aes-kw",
+ "base64 0.22.1",
+ "cbc 0.2.1",
+ "crypto-bigint 0.7.5",
+ "crypto-common 0.2.2",
+ "ctr 0.10.1",
+ "curve25519-dalek 5.0.0-rc.1",
+ "des",
+ "digest 0.11.3",
+ "ecdsa 0.17.0-rc.22",
+ "ed25519-dalek 3.0.0-rc.1",
+ "hex",
+ "hmac 0.13.0",
+ "http",
+ "inout 0.2.2",
+ "md-5 0.11.0",
+ "p256 0.14.0-rc.14",
+ "p384 0.14.0-rc.14",
+ "p521",
+ "pbkdf2",
+ "picky-asn1",
+ "picky-asn1-der",
+ "picky-asn1-x509",
+ "pkcs1 0.8.0-rc.4",
+ "primeorder 0.14.0-rc.14",
+ "rand 0.10.2",
+ "rand_core 0.10.1",
+ "rc2",
+ "rsa",
+ "rustcrypto-ff",
+ "rustcrypto-ff_derive",
+ "rustcrypto-group",
+ "serde",
+ "serde_json",
+ "sha1 0.11.0",
+ "sha2 0.11.0",
+ "sha3",
+ "thiserror 2.0.20",
+ "x25519-dalek 3.0.0-rc.1",
+ "zeroize",
+]
+
+[[package]]
+name = "picky-asn1"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2ff038f9360b934342fb3c0a1d6e82c438a2624b51c3c6e3e6d7cf252b6f3ee3"
+dependencies = [
+ "oid",
+ "serde",
+ "serde_bytes",
+ "time",
+ "zeroize",
+]
+
+[[package]]
+name = "picky-asn1-der"
+version = "0.5.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d413165e4bf7f808b9a27cbaba657657a2921f0965db833f488c4d4be96dcd2e"
+dependencies = [
+ "picky-asn1",
+ "serde",
+ "serde_bytes",
+]
+
+[[package]]
+name = "picky-asn1-x509"
+version = "0.15.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "859d4117bd1b1dc5646359ee7243c50c5000c0920ea2d1fb120335a2f4c684b8"
+dependencies = [
+ "base64 0.22.1",
+ "crypto-bigint 0.7.5",
+ "oid",
+ "picky-asn1",
+ "picky-asn1-der",
+ "serde",
+ "widestring",
+ "zeroize",
+]
+
+[[package]]
+name = "picky-krb"
+version = "0.12.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2d188f3192356068dbdba54bddbca6fd0f7a09565d3861eeb8efe1ab77ae8e97"
+dependencies = [
+ "aes 0.9.2",
+ "block-padding 0.4.2",
+ "byteorder",
+ "cbc 0.2.1",
+ "cipher 0.5.2",
+ "crypto-bigint 0.7.5",
+ "des",
+ "hmac 0.13.0",
+ "inout 0.2.2",
+ "oid",
+ "pbkdf2",
+ "picky-asn1",
+ "picky-asn1-der",
+ "picky-asn1-x509",
+ "rand 0.10.2",
+ "rand_core 0.10.1",
+ "serde",
+ "sha1 0.11.0",
+ "thiserror 2.0.20",
+ "uuid",
+]
+
+[[package]]
+name = "pin-project"
+version = "1.1.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2466b2336ed02bcdca6b294417127b90ec92038d1d5c4fbeac971a922e0e0924"
+dependencies = [
+ "pin-project-internal",
+]
+
+[[package]]
+name = "pin-project-internal"
+version = "1.1.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c96395f0a926bc13b1c17622aaddda1ecb55d49c8f1bf9777e4d877800a43f8b"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "pin-project-lite"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a89322df9ebe1c1578d689c92318e070967d1042b512afbe49518723f4e6d5cd"
+
+[[package]]
+name = "pin-utils"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b870d8c151b6f2fb93e84a13146138f05d02ed11c7e7c54f8826aaaf7c9f184"
+
+[[package]]
+name = "pkcs1"
+version = "0.7.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8ffb9f10fa047879315e6625af03c164b16962a5368d724ed16323b68ace47f"
+dependencies = [
+ "der 0.7.10",
+ "spki 0.7.3",
+]
+
+[[package]]
+name = "pkcs1"
+version = "0.8.0-rc.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "986d2e952779af96ea048f160fd9194e1751b4faea78bcf3ceb456efe008088e"
+dependencies = [
+ "der 0.8.1",
+ "spki 0.8.0",
+]
+
+[[package]]
+name = "pkcs8"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7"
+dependencies = [
+ "der 0.7.10",
+ "spki 0.7.3",
+]
+
+[[package]]
+name = "pkcs8"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "451913da69c775a56034ea8d9003d27ee8948e12443eae7c038ba100a4f21cb7"
+dependencies = [
+ "der 0.8.1",
+ "spki 0.8.0",
+]
+
+[[package]]
+name = "pkg-config"
+version = "0.3.33"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "19f132c84eca552bf34cab8ec81f1c1dcc229b811638f9d283dceabe58c5569e"
+
+[[package]]
+name = "plain"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b4596b6d070b27117e987119b4dac604f3c58cfb0b191112e24771b2faeac1a6"
+
+[[package]]
+name = "plist"
+version = "1.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7da1d65da6dd5d1e44199ac0f58712d241c0f439f80adea8924d832384087f85"
+dependencies = [
+ "base64 0.22.1",
+ "indexmap 2.14.0",
+ "quick-xml",
+ "serde",
+ "time",
+]
+
+[[package]]
+name = "png"
+version = "0.17.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "82151a2fc869e011c153adc57cf2789ccb8d9906ce52c0b39a6b5697749d7526"
+dependencies = [
+ "bitflags 1.3.2",
+ "crc32fast",
+ "fdeflate",
+ "flate2",
+ "miniz_oxide",
+]
+
+[[package]]
+name = "png"
+version = "0.18.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "60769b8b31b2a9f263dae2776c37b1b28ae246943cf719eb6946a1db05128a61"
+dependencies = [
+ "bitflags 2.13.1",
+ "crc32fast",
+ "fdeflate",
+ "flate2",
+ "miniz_oxide",
+]
+
+[[package]]
+name = "polling"
+version = "3.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5d0e4f59085d47d8241c88ead0f274e8a0cb551f3625263c05eb8dd897c34218"
+dependencies = [
+ "cfg-if",
+ "concurrent-queue",
+ "hermit-abi",
+ "pin-project-lite",
+ "rustix 1.1.4",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "poly1305"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8159bd90725d2df49889a078b54f4f79e87f1f8a8444194cdca81d38f5393abf"
+dependencies = [
+ "cpufeatures 0.2.17",
+ "opaque-debug",
+ "universal-hash 0.5.1",
+]
+
+[[package]]
+name = "polyval"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9d1fe60d06143b2430aa532c94cfe9e29783047f06c0d7fd359a9a51b729fa25"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.2.17",
+ "opaque-debug",
+ "universal-hash 0.5.1",
+]
+
+[[package]]
+name = "polyval"
+version = "0.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0fa31d631f2b2cb2a544d0aa321ce847a94764d701ca2becc411138b93d49cd"
+dependencies = [
+ "cpubits",
+ "cpufeatures 0.3.0",
+ "universal-hash 0.6.1",
+]
+
+[[package]]
+name = "portable-atomic"
+version = "1.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "05c8b63e8d9609db387f0324918f81d68fe27748f084ef092fb35954d0539a85"
+
+[[package]]
+name = "portable-atomic-util"
+version = "0.2.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c2a106d1259c23fac8e543272398ae0e3c0b8d33c88ed73d0cc71b0f1d902618"
+dependencies = [
+ "portable-atomic",
+]
+
+[[package]]
+name = "portable-pty"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b4a596a2b3d2752d94f51fac2d4a96737b8705dddd311a32b9af47211f08671e"
+dependencies = [
+ "anyhow",
+ "bitflags 1.3.2",
+ "downcast-rs",
+ "filedescriptor",
+ "lazy_static",
+ "libc",
+ "log",
+ "nix 0.28.0",
+ "serial2",
+ "shared_library",
+ "shell-words",
+ "winapi",
+ "winreg 0.10.1",
+]
+
+[[package]]
+name = "potential_utf"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0103b1cef7ec0cf76490e969665504990193874ea05c85ff9bab8b911d0a0564"
+dependencies = [
+ "zerovec",
+]
+
+[[package]]
+name = "powerfmt"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "439ee305def115ba05938db6eb1644ff94165c5ab5e9420d1c1bcedbba909391"
+
+[[package]]
+name = "ppv-lite86"
+version = "0.2.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9"
+dependencies = [
+ "zerocopy",
+]
+
+[[package]]
+name = "precomputed-hash"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "925383efa346730478fb4838dbe9137d2a47675ad789c546d150a6e1dd4ab31c"
+
+[[package]]
+name = "primefield"
+version = "0.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c555a6e4eb7d4e158fcb028c835c3b8642206ddc279b5c6b202ef9a8bdb592f4"
+dependencies = [
+ "crypto-bigint 0.7.5",
+ "crypto-common 0.2.2",
+ "ff 0.14.0",
+ "rand_core 0.10.1",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "primeorder"
+version = "0.13.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "353e1ca18966c16d9deb1c69278edbc5f194139612772bd9537af60ac231e1e6"
+dependencies = [
+ "elliptic-curve 0.13.8",
+]
+
+[[package]]
+name = "primeorder"
+version = "0.14.0-rc.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4e56e6d67fdf5744e9e245ae571450fe584b91f5af261d0e40163b618e53a1f6"
+dependencies = [
+ "elliptic-curve 0.14.1",
+ "once_cell",
+ "primefield",
+ "serdect",
+]
+
+[[package]]
+name = "proc-exit"
+version = "2.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77a5390699eb9ac50677729fda96fb8339d4629f257cc6cfa6eaa673730f8f63"
+
+[[package]]
+name = "proc-macro-crate"
+version = "1.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f4c021e1093a56626774e81216a4ce732a735e5bad4868a03f3ed65ca0c3919"
+dependencies = [
+ "once_cell",
+ "toml_edit 0.19.15",
+]
+
+[[package]]
+name = "proc-macro-crate"
+version = "2.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b00f26d3400549137f92511a46ac1cd8ce37cb5598a96d382381458b992a5d24"
+dependencies = [
+ "toml_datetime 0.6.3",
+ "toml_edit 0.20.2",
+]
+
+[[package]]
+name = "proc-macro-crate"
+version = "3.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e67ba7e9b2b56446f1d419b1d807906278ffa1a658a8a5d8a39dcb1f5a78614f"
+dependencies = [
+ "toml_edit 0.25.13+spec-1.1.0",
+]
+
+[[package]]
+name = "proc-macro-error"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da25490ff9892aab3fcf7c36f08cfb902dd3e71ca0f9f9517bea02a73a5ce38c"
+dependencies = [
+ "proc-macro-error-attr",
+ "proc-macro2",
+ "quote",
+ "syn 1.0.109",
+ "version_check",
+]
+
+[[package]]
+name = "proc-macro-error-attr"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1be40180e52ecc98ad80b184934baf3d0d29f979574e439af5a55274b35f869"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "version_check",
+]
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.107"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "ptr_meta"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "743da816b98c921cdbe8628ef7381b76f25ecf4da599fc80aca90eae7ef70cc0"
+dependencies = [
+ "ptr_meta_derive",
+]
+
+[[package]]
+name = "ptr_meta_derive"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1c8d9ca532f185d5d4db7a7c9d51420b452168ea1c2b913953281bd6fe1fcbd0"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.3",
+]
+
+[[package]]
+name = "quick-xml"
+version = "0.41.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e660451e55124f798a69a5af3f49ccfbefbd41910eefd25caf2393e1f3473ec1"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "quinn"
+version = "0.11.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9e20a958963c291dc322d98411f541009df2ced7b5a4f2bd52337638cfccf20"
+dependencies = [
+ "bytes",
+ "cfg_aliases 0.2.2",
+ "pin-project-lite",
+ "quinn-proto",
+ "quinn-udp 0.5.14",
+ "rustc-hash",
+ "rustls",
+ "socket2",
+ "thiserror 2.0.20",
+ "tokio",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "quinn-proto"
+version = "0.11.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "434b42fec591c96ef50e21e886936e66d3cc3f737104fdb9b737c40ffb94c098"
+dependencies = [
+ "bytes",
+ "getrandom 0.3.4",
+ "lru-slab",
+ "rand 0.9.5",
+ "ring",
+ "rustc-hash",
+ "rustls",
+ "rustls-pki-types",
+ "slab",
+ "thiserror 2.0.20",
+ "tinyvec",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "quinn-udp"
+version = "0.5.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "addec6a0dcad8a8d96a771f815f0eaf55f9d1805756410b39f5fa81332574cbd"
+dependencies = [
+ "cfg_aliases 0.2.2",
+ "libc",
+ "once_cell",
+ "socket2",
+ "tracing",
+ "windows-sys 0.60.2",
+]
+
+[[package]]
+name = "quinn-udp"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76150b617afc75e6e21ac5f39bc196e80b65415ae48d62dbef8e2519d040ce42"
+dependencies = [
+ "cfg_aliases 0.2.2",
+ "libc",
+ "log",
+ "socket2",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.47"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "r-efi"
+version = "5.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
+
+[[package]]
+name = "r-efi"
+version = "6.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
+
+[[package]]
+name = "radium"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc33ff2d4973d518d823d61aa239014831e521c75da58e3df4840d3f47749d09"
+
+[[package]]
+name = "rancor"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b534442d0fcdb55d66f373d9cac6d33b6293a2335bc2136dbd06ce0e87d2572"
+dependencies = [
+ "ptr_meta",
+]
+
+[[package]]
+name = "rand"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9ef1d0d795eb7d84685bca4f72f3649f064e6641543d3a8c415898726a57b41"
+dependencies = [
+ "rand_chacha",
+ "rand_core 0.9.5",
+]
+
+[[package]]
+name = "rand"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c7f5fa3a058cd35567ef9bfa5e75732bee0f9e4c55fa90477bef2dfcdbc4be80"
+dependencies = [
+ "chacha20 0.10.1",
+ "getrandom 0.4.3",
+ "rand_core 0.10.1",
+]
+
+[[package]]
+name = "rand_chacha"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb"
+dependencies = [
+ "ppv-lite86",
+ "rand_core 0.9.5",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c"
+dependencies = [
+ "getrandom 0.2.17",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76afc826de14238e6e8c374ddcc1fa19e374fd8dd986b0d2af0d02377261d83c"
+dependencies = [
+ "getrandom 0.3.4",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "63b8176103e19a2643978565ca18b50549f6101881c443590420e4dc998a3c69"
+
+[[package]]
+name = "raw-window-handle"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "20675572f6f24e9e76ef639bc5552774ed45f1c30e2951e1e99c59888861c539"
+
+[[package]]
+name = "rc2"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ceda21af1ae61033b63175653a1af86cae399d79cd03ca80ba347eb3a6c4a7fe"
+dependencies = [
+ "cipher 0.5.2",
+]
+
+[[package]]
+name = "rcgen"
+version = "0.14.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "57f6d249aad744e274e682777a50283a225a32705394ee6d5fcc01efa25e4055"
+dependencies = [
+ "pem",
+ "ring",
+ "rustls-pki-types",
+ "time",
+ "x509-parser 0.18.1",
+ "yasna",
+]
+
+[[package]]
+name = "redox_syscall"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4722d768eff46b75989dd134e5c353f0d6296e5aaa3132e776cbdb56be7731aa"
+dependencies = [
+ "bitflags 1.3.2",
+]
+
+[[package]]
+name = "redox_syscall"
+version = "0.5.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed2bf2547551a7053d6fdfafda3f938979645c44812fbfcda098faae3f1a362d"
+dependencies = [
+ "bitflags 2.13.1",
+]
+
+[[package]]
+name = "redox_syscall"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "07507be7b4a5f9f26eeb41eeaebb1f5a7ff29dfb29739facc21d35bf8b11c21e"
+dependencies = [
+ "bitflags 2.13.1",
+]
+
+[[package]]
+name = "redox_users"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4e608c6638b9c18977b00b475ac1f28d14e84b27d8d42f70e0bf1e3dec127ac"
+dependencies = [
+ "getrandom 0.2.17",
+ "libredox",
+ "thiserror 2.0.20",
+]
+
+[[package]]
+name = "ref-cast"
+version = "1.0.26"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "216e8f773d7923bcba9ceb86a86c93cabb3903a11872fc3f138c49630e50b96d"
+dependencies = [
+ "ref-cast-impl",
+]
+
+[[package]]
+name = "ref-cast-impl"
+version = "1.0.26"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2c9283685feec7d69af75fb0e858d5e7378f33fe4fc699383b2916ab9273e03c"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.3",
+]
+
+[[package]]
+name = "regex"
+version = "1.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f020237b6c8eed93db2e2cb53c00c60a8e1bc73da7d073199a1180401450218d"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-automata",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-automata"
+version = "0.4.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ad8553b9b26413251cbf30e620595c7a41b3887f03da04579c0e6b0d6a06b4b2"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-syntax"
+version = "0.8.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d6f6ff9a378485b298a5286656da665ba74413d36db0979633275d2e708145d4"
+
+[[package]]
+name = "reis"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4b967ec6489a42067a20724f11987bb96178ea796873cbe1afd25fb93ee6f85f"
+dependencies = [
+ "enumflags2",
+ "futures-util",
+ "log",
+ "rustix 1.1.4",
+ "tokio",
+]
+
+[[package]]
+name = "remotedesk-agent-core"
+version = "0.2.19"
+dependencies = [
+ "remotedesk-protocol",
+]
+
+[[package]]
+name = "remotedesk-agent-runtime"
+version = "0.2.19"
+dependencies = [
+ "async-trait",
+ "base64 0.22.1",
+ "bytes",
+ "clap",
+ "ed25519-dalek 2.2.0",
+ "flate2",
+ "futures-util",
+ "gstreamer",
+ "gstreamer-app",
+ "portable-pty",
+ "rand 0.9.5",
+ "rcgen",
+ "reis",
+ "remotedesk-edge-service",
+ "remotedesk-protocol",
+ "reqwest 0.12.28",
+ "rtc",
+ "rustix 1.1.4",
+ "rustls",
+ "rustls-native-certs",
+ "rustls-pemfile",
+ "serde",
+ "serde_json",
+ "sha2 0.10.9",
+ "tiny_http",
+ "tokio",
+ "tokio-rustls",
+ "tokio-tungstenite",
+ "url",
+ "webrtc",
+ "x11rb",
+ "xkbcommon",
+ "zbus",
+ "zeroize",
+]
+
+[[package]]
+name = "remotedesk-app"
+version = "0.2.19"
+dependencies = [
+ "getrandom 0.3.4",
+ "sha2 0.10.9",
+ "tauri",
+ "tauri-build",
+]
+
+[[package]]
+name = "remotedesk-client-core"
+version = "0.2.19"
+dependencies = [
+ "base64 0.22.1",
+ "getrandom 0.3.4",
+ "hmac 0.13.0",
+ "remotedesk-protocol",
+ "serde",
+ "serde_json",
+ "sha2 0.11.0",
+ "windows-sys 0.61.2",
+ "zeroize",
+]
+
+[[package]]
+name = "remotedesk-control-service"
+version = "0.2.19"
+dependencies = [
+ "base64 0.22.1",
+ "ed25519-dalek 2.2.0",
+ "remotedesk-client-core",
+ "remotedesk-credential-store",
+ "reqwest 0.12.28",
+ "rusqlite",
+ "semver",
+ "serde",
+ "serde_json",
+ "sha2 0.10.9",
+ "tiny_http",
+ "url",
+ "zeroize",
+]
+
+[[package]]
+name = "remotedesk-credential-store"
+version = "0.2.19"
+dependencies = [
+ "base64 0.22.1",
+ "inquire",
+ "keyring",
+ "remotedesk-client-core",
+ "serde",
+ "serde_json",
+ "zeroize",
+]
+
+[[package]]
+name = "remotedesk-edge-service"
+version = "0.2.19"
+dependencies = [
+ "base64 0.22.1",
+ "clap",
+ "ed25519-dalek 2.2.0",
+ "hmac 0.13.0",
+ "rand 0.9.5",
+ "remotedesk-protocol",
+ "serde",
+ "serde_json",
+ "sha1 0.11.0",
+ "sha2 0.11.0",
+ "tiny_http",
+ "zeroize",
+]
+
+[[package]]
+name = "remotedesk-linux-terminal"
+version = "0.2.19"
+dependencies = [
+ "async-trait",
+ "base64 0.22.1",
+ "cpal",
+ "crossterm",
+ "ed25519-dalek 2.2.0",
+ "futures-util",
+ "inquire",
+ "ironrdp-rdpsnd",
+ "ironrdp-rdpsnd-native",
+ "keyring",
+ "rand 0.9.5",
+ "raw-window-handle",
+ "remotedesk-agent-runtime",
+ "remotedesk-credential-store",
+ "remotedesk-edge-service",
+ "remotedesk-protocol",
+ "reqwest 0.12.28",
+ "rustls",
+ "rustls-pemfile",
+ "serde",
+ "serde_json",
+ "sha2 0.10.9",
+ "softbuffer",
+ "tiny_http",
+ "tokio",
+ "tokio-rustls",
+ "tokio-tungstenite",
+ "url",
+ "windows 0.62.2",
+ "winit",
+ "zeroize",
+]
+
+[[package]]
+name = "remotedesk-native-video"
+version = "0.2.19"
+dependencies = [
+ "raw-window-handle",
+ "remotedesk-client-core",
+ "serde",
+ "serde_json",
+ "windows 0.62.2",
+ "winit",
+]
+
+[[package]]
+name = "remotedesk-protocol"
+version = "0.2.19"
+
+[[package]]
+name = "remotedesk-rdp-session"
+version = "0.2.19"
+dependencies = [
+ "ironrdp-connector",
+ "ironrdp-pdu",
+ "ironrdp-tls",
+ "ironrdp-tokio",
+ "remotedesk-client-core",
+ "serde",
+ "serde_json",
+ "tokio",
+]
+
+[[package]]
+name = "remotedesk-rdp-viewer"
+version = "0.2.19"
+dependencies = [
+ "anyhow",
+ "ironrdp",
+ "ironrdp-tls",
+ "ironrdp-viewer",
+ "raw-window-handle",
+ "remotedesk-client-core",
+ "remotedesk-credential-store",
+ "serde",
+ "serde_json",
+ "smallvec",
+ "softbuffer",
+ "tokio",
+ "tokio-rustls",
+ "tracing",
+ "windows 0.62.2",
+ "winit",
+]
+
+[[package]]
+name = "remotedesk-windows-agent"
+version = "0.2.19"
+dependencies = [
+ "anyhow",
+ "clap",
+ "flate2",
+ "serde",
+ "serde_json",
+ "tokio",
+ "windows 0.62.2",
+]
+
+[[package]]
+name = "remotedesk-windows-agent-viewer"
+version = "0.2.19"
+dependencies = [
+ "flate2",
+ "serde",
+ "serde_json",
+ "softbuffer",
+ "windows 0.62.2",
+ "winit",
+]
+
+[[package]]
+name = "rend"
+version = "0.5.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "663ba70707f96e871406fe10d68128412e619b06d1d47cb91c3a4c6501176240"
+dependencies = [
+ "bytecheck",
+]
+
+[[package]]
+name = "reqwest"
+version = "0.12.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eddd3ca559203180a307f12d114c268abf583f59b03cb906fd0b3ff8646c1147"
+dependencies = [
+ "base64 0.22.1",
+ "bytes",
+ "futures-channel",
+ "futures-core",
+ "futures-util",
+ "h2",
+ "http",
+ "http-body",
+ "http-body-util",
+ "hyper",
+ "hyper-rustls",
+ "hyper-util",
+ "js-sys",
+ "log",
+ "percent-encoding",
+ "pin-project-lite",
+ "quinn",
+ "rustls",
+ "rustls-pki-types",
+ "serde",
+ "serde_json",
+ "serde_urlencoded",
+ "sync_wrapper",
+ "tokio",
+ "tokio-rustls",
+ "tower",
+ "tower-http",
+ "tower-service",
+ "url",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+ "webpki-roots",
+]
+
+[[package]]
+name = "reqwest"
+version = "0.13.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "219c5811de6525e5416c7d5d53bb656d3afdbc6c5af816e0802bcfa42dbdc1c3"
+dependencies = [
+ "base64 0.22.1",
+ "bytes",
+ "futures-core",
+ "futures-util",
+ "http",
+ "http-body",
+ "http-body-util",
+ "hyper",
+ "hyper-util",
+ "js-sys",
+ "log",
+ "percent-encoding",
+ "pin-project-lite",
+ "serde",
+ "serde_json",
+ "sync_wrapper",
+ "tokio",
+ "tokio-util",
+ "tower",
+ "tower-http",
+ "tower-service",
+ "url",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "wasm-streams",
+ "web-sys",
+]
+
+[[package]]
+name = "rfc6979"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8dd2a808d456c4a54e300a23e9f5a67e122c3024119acbfd73e3bf664491cb2"
+dependencies = [
+ "hmac 0.12.1",
+ "subtle",
+]
+
+[[package]]
+name = "rfc6979"
+version = "0.6.0-pre.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9935425142ac6e252364413291d96c8bc9898d0876a801824c7af4eae397b689"
+dependencies = [
+ "ctutils",
+ "hmac 0.13.0",
+]
+
+[[package]]
+name = "ring"
+version = "0.17.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4689e6c2294d81e88dc6261c768b63bc4fcdb852be6d1352498b114f61383b7"
+dependencies = [
+ "cc",
+ "cfg-if",
+ "getrandom 0.2.17",
+ "libc",
+ "untrusted",
+ "windows-sys 0.52.0",
+]
+
+[[package]]
+name = "rkyv"
+version = "0.8.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d9776093b7ca170454ab1406954f7b7d97a57c51dc6c0642957fb2ef25c2d399"
+dependencies = [
+ "bytecheck",
+ "bytes",
+ "hashbrown 0.17.1",
+ "indexmap 2.14.0",
+ "munge",
+ "ptr_meta",
+ "rancor",
+ "rend",
+ "rkyv_derive",
+ "tinyvec",
+ "uuid",
+]
+
+[[package]]
+name = "rkyv_derive"
+version = "0.8.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1c25ef604ac7dd839d44d64648952ea23c97866f124ff671b0ed2cf3ad9bb06e"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.3",
+]
+
+[[package]]
+name = "rsa"
+version = "0.10.0-rc.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "30b2aa4ba0d89f73d1e332df05be0eeab8840351c36ca5654341dfdb57bb3caf"
+dependencies = [
+ "const-oid 0.10.2",
+ "crypto-bigint 0.7.5",
+ "crypto-primes",
+ "digest 0.11.3",
+ "pkcs1 0.8.0-rc.4",
+ "pkcs8 0.11.0",
+ "rand_core 0.10.1",
+ "signature 3.0.0",
+ "spki 0.8.0",
+ "zeroize",
+]
+
+[[package]]
+name = "rtc"
+version = "0.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "147d0b37560be226f5a707029bd7fcd7d6246d47f6fb6faa1691e2d4e6c87d30"
+dependencies = [
+ "bytes",
+ "hex",
+ "log",
+ "rand 0.10.2",
+ "rcgen",
+ "ring",
+ "rtc-datachannel",
+ "rtc-dtls",
+ "rtc-ice",
+ "rtc-interceptor",
+ "rtc-mdns",
+ "rtc-media",
+ "rtc-rtcp",
+ "rtc-rtp",
+ "rtc-sctp",
+ "rtc-sdp",
+ "rtc-shared",
+ "rtc-srtp",
+ "rtc-stun",
+ "rtc-turn",
+ "rustls",
+ "sansio",
+ "serde",
+ "serde_json",
+ "sha2 0.10.9",
+ "unicase",
+ "url",
+]
+
+[[package]]
+name = "rtc-datachannel"
+version = "0.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "04692a54b4fbad2f06939ffac4f4114d38f83801ffd209b4bc3384cb263749fb"
+dependencies = [
+ "bytes",
+ "log",
+ "rtc-sctp",
+ "rtc-shared",
+ "sansio",
+]
+
+[[package]]
+name = "rtc-dtls"
+version = "0.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c98cb2bbff3ecfda14e934dd3dd10c1ec0d9e853a6320ee0bfd750f0d70724c8"
+dependencies = [
+ "aes 0.8.4",
+ "bytecheck",
+ "byteorder",
+ "bytes",
+ "cbc 0.1.2",
+ "ccm",
+ "chacha20poly1305",
+ "der-parser 9.0.0",
+ "hmac 0.12.1",
+ "log",
+ "p256 0.13.2",
+ "p384 0.13.1",
+ "rand 0.10.2",
+ "rand_core 0.6.4",
+ "rcgen",
+ "ring",
+ "rkyv",
+ "rtc-shared",
+ "rustls",
+ "sec1 0.7.3",
+ "sha1 0.10.7",
+ "sha2 0.10.9",
+ "subtle",
+ "x25519-dalek 2.0.1",
+ "x509-parser 0.16.0",
+]
+
+[[package]]
+name = "rtc-ice"
+version = "0.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e85202dbee3bb20c97bbf87f32947df9c525bf2516439024ff57dff95e27faa9"
+dependencies = [
+ "bytes",
+ "crc",
+ "log",
+ "rand 0.10.2",
+ "rtc-mdns",
+ "rtc-shared",
+ "rtc-stun",
+ "sansio",
+ "serde",
+ "url",
+ "uuid",
+]
+
+[[package]]
+name = "rtc-interceptor"
+version = "0.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7e1d2261e86e10eafbe24704720e96cd7deef227bf7947ec4400a45ecddff7ea"
+dependencies = [
+ "log",
+ "rand 0.10.2",
+ "rtc-interceptor-derive",
+ "rtc-rtcp",
+ "rtc-rtp",
+ "rtc-shared",
+ "sansio",
+]
+
+[[package]]
+name = "rtc-interceptor-derive"
+version = "0.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f3ad7c2677a7a08e2bd6378d8b3f464be649bf72710139b30c8f9929f324f018"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "rtc-mdns"
+version = "0.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5cee40550ee15c36daa648517651413fbf8523eae8161b3ab10474ce4eb48ec1"
+dependencies = [
+ "bytes",
+ "log",
+ "rtc-shared",
+ "sansio",
+ "socket2",
+]
+
+[[package]]
+name = "rtc-media"
+version = "0.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d241f4605bde11b07eb3d333fe9f8aa93277fd135d887550a17a18ce1966159e"
+dependencies = [
+ "byteorder",
+ "bytes",
+ "rand 0.10.2",
+ "rtc-rtp",
+ "rtc-shared",
+ "thiserror 2.0.20",
+]
+
+[[package]]
+name = "rtc-rtcp"
+version = "0.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "25bbfec7378d3ce41e1c1919a26332a350109d77d0c16226c25160e384eed162"
+dependencies = [
+ "bytes",
+ "rtc-shared",
+]
+
+[[package]]
+name = "rtc-rtp"
+version = "0.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "313cccdd92830dc946e89044bcca7faea5fdda12e79a77a461672adc4a7fab0c"
+dependencies = [
+ "bytes",
+ "memchr",
+ "rand 0.10.2",
+ "rtc-shared",
+ "serde",
+]
+
+[[package]]
+name = "rtc-sctp"
+version = "0.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0019720c26bf1af75a6423f7800260a855d44ab026fe1f2936c17575e72cea99"
+dependencies = [
+ "bytes",
+ "crc32c",
+ "log",
+ "rand 0.10.2",
+ "rtc-shared",
+ "rustc-hash",
+ "slab",
+ "thiserror 2.0.20",
+]
+
+[[package]]
+name = "rtc-sdp"
+version = "0.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bc9fa869ead61bd4be1abfc3258c71b2e26191c1c1db3a96c6955079cbbb848d"
+dependencies = [
+ "rand 0.10.2",
+ "rtc-shared",
+ "url",
+]
+
+[[package]]
+name = "rtc-shared"
+version = "0.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5d7b076a49e6ba6bacaa7cb72e5fe3bce17ec3a7e1c44a7f7799321edcac45f9"
+dependencies = [
+ "aes 0.8.4",
+ "aes-gcm 0.10.3",
+ "bitflags 1.3.2",
+ "bytes",
+ "nix 0.26.4",
+ "p256 0.13.2",
+ "rand 0.10.2",
+ "rcgen",
+ "sec1 0.7.3",
+ "serde",
+ "substring",
+ "thiserror 2.0.20",
+ "url",
+ "winapi",
+]
+
+[[package]]
+name = "rtc-srtp"
+version = "0.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "48cabd898efd7cf62a420dbfe94926b83dd708ff2208eb5d9d26a9945c191c05"
+dependencies = [
+ "aes 0.8.4",
+ "byteorder",
+ "bytes",
+ "ctr 0.9.2",
+ "hmac 0.12.1",
+ "ring",
+ "rtc-rtcp",
+ "rtc-rtp",
+ "rtc-shared",
+ "sha1 0.10.7",
+ "subtle",
+]
+
+[[package]]
+name = "rtc-stun"
+version = "0.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "49cb2594b91ac9a3412b4b5daac685f92ed38342e2f589b303885346e57d035f"
+dependencies = [
+ "base64 0.22.1",
+ "bytes",
+ "crc",
+ "lazy_static",
+ "md-5 0.10.6",
+ "rand 0.10.2",
+ "ring",
+ "rtc-shared",
+ "sansio",
+ "subtle",
+ "url",
+]
+
+[[package]]
+name = "rtc-turn"
+version = "0.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a3efc9154dd193c2cf5c79d91bb1f4762eebaa585e97abe995426e35c1e841cf"
+dependencies = [
+ "bytes",
+ "log",
+ "rtc-shared",
+ "rtc-stun",
+ "sansio",
+]
+
+[[package]]
+name = "rusqlite"
+version = "0.32.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7753b721174eb8ff87a9a0e799e2d7bc3749323e773db92e0984debb00019d6e"
+dependencies = [
+ "bitflags 2.13.1",
+ "fallible-iterator",
+ "fallible-streaming-iterator",
+ "hashlink",
+ "libsqlite3-sys",
+ "smallvec",
+]
+
+[[package]]
+name = "rustc-hash"
+version = "2.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94300abf3f1ae2e2b8ffb7b58043de3d399c73fa6f4b73826402a5c457614dbe"
+
+[[package]]
+name = "rustc_version"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92"
+dependencies = [
+ "semver",
+]
+
+[[package]]
+name = "rustcrypto-ff"
+version = "0.14.0-rc.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fd2a8adb347447693cd2ba0d218c4b66c62da9b0a5672b17b981e4291ec65ff6"
+dependencies = [
+ "bitvec",
+ "rand_core 0.10.1",
+ "rustcrypto-ff_derive",
+ "subtle",
+]
+
+[[package]]
+name = "rustcrypto-ff_derive"
+version = "0.14.0-rc.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4cda22ea03582974ab5687fc131eba2dc78e258e7eef4d7e01bcd0522ed79f66"
+dependencies = [
+ "addchain",
+ "num-bigint 0.3.3",
+ "num-integer",
+ "num-traits",
+ "proc-macro2",
+ "quote",
+ "syn 1.0.109",
+]
+
+[[package]]
+name = "rustcrypto-group"
+version = "0.14.0-rc.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "369f9b61aa45933c062c9f6b5c3c50ab710687eca83dd3802653b140b43f85ed"
+dependencies = [
+ "rand_core 0.10.1",
+ "rustcrypto-ff",
+ "subtle",
+]
+
+[[package]]
+name = "rusticata-macros"
+version = "4.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "faf0c4a6ece9950b9abdb62b1cfcf2a68b3b67a10ba445b3bb85be2a293d0632"
+dependencies = [
+ "nom",
+]
+
+[[package]]
+name = "rustix"
+version = "0.38.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fdb5bc1ae2baa591800df16c9ca78619bf65c0488b41b96ccec5d11220d8c154"
+dependencies = [
+ "bitflags 2.13.1",
+ "errno",
+ "libc",
+ "linux-raw-sys 0.4.15",
+ "windows-sys 0.59.0",
+]
+
+[[package]]
+name = "rustix"
+version = "1.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6fe4565b9518b83ef4f91bb47ce29620ca828bd32cb7e408f0062e9930ba190"
+dependencies = [
+ "bitflags 2.13.1",
+ "errno",
+ "libc",
+ "linux-raw-sys 0.12.1",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "rustls"
+version = "0.23.43"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0283386ce02abc0151e1761d08802dfe86c173b0b494af5cbc086574e453da06"
+dependencies = [
+ "aws-lc-rs",
+ "log",
+ "once_cell",
+ "ring",
+ "rustls-pki-types",
+ "rustls-webpki",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-native-certs"
+version = "0.8.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dab5152771c58876a2146916e53e35057e1a4dfa2b9df0f0305b07f611fdea4d"
+dependencies = [
+ "openssl-probe",
+ "rustls-pki-types",
+ "schannel",
+ "security-framework",
+]
+
+[[package]]
+name = "rustls-pemfile"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dce314e5fee3f39953d46bb63bb8a46d40c2f8fb7cc5a3b6cab2bde9721d6e50"
+dependencies = [
+ "rustls-pki-types",
+]
+
+[[package]]
+name = "rustls-pki-types"
+version = "1.15.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2f4925028c7eb5d1fcdaf196971378ed9d2c1c4efc7dc5d011256f76c99c0a96"
+dependencies = [
+ "web-time",
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-webpki"
+version = "0.103.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "61c429a8649f110dddef65e2a5ad240f747e85f7758a6bccc7e5777bd33f756e"
+dependencies = [
+ "aws-lc-rs",
+ "ring",
+ "rustls-pki-types",
+ "untrusted",
+]
+
+[[package]]
+name = "rustversion"
+version = "1.0.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf54715a573b99ac80df0bc206da022bcd442c974952c7b9720069370852e21f"
+
+[[package]]
+name = "ryu"
+version = "1.0.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9774ba4a74de5f7b1c1451ed6cd5285a32eddb5cccb8cc655a4e50009e06477f"
+
+[[package]]
+name = "same-file"
+version = "1.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "93fc1dc3aaa9bfed95e02e6eadabb4baf7e3078b0bd1b4d7b6b0b68378900502"
+dependencies = [
+ "winapi-util",
+]
+
+[[package]]
+name = "sansio"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c62751faa8bc286982334a082fe125184a29fc89d17775766e4f891b7d726980"
+
+[[package]]
+name = "schannel"
+version = "0.1.29"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "91c1b7e4904c873ef0710c1f407dde2e6287de2bebc1bbbf7d430bb7cbffd939"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "schemars"
+version = "0.8.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3fbf2ae1b8bc8e02df939598064d22402220cd5bbcca1c76f7d6a310974d5615"
+dependencies = [
+ "dyn-clone",
+ "indexmap 1.9.3",
+ "schemars_derive",
+ "serde",
+ "serde_json",
+ "url",
+ "uuid",
+]
+
+[[package]]
+name = "schemars"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4cd191f9397d57d581cddd31014772520aa448f65ef991055d7f61582c65165f"
+dependencies = [
+ "dyn-clone",
+ "ref-cast",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "schemars"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "687274d293b6cdc6e73e0fee520bf2049650090d7164f87672d212a3c530cf4a"
+dependencies = [
+ "dyn-clone",
+ "ref-cast",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "schemars_derive"
+version = "0.8.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32e265784ad618884abaea0600a9adf15393368d840e0222d101a072f3f7534d"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "serde_derive_internals",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "scoped-tls"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e1cf6437eb19a8f4a6cc0f7dca544973b0b78843adbfeb3683d1a94a0024a294"
+
+[[package]]
+name = "scopeguard"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"
+
+[[package]]
+name = "sctk-adwaita"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6277f0217056f77f1d8f49f2950ac6c278c0d607c45f5ee99328d792ede24ec"
+dependencies = [
+ "ab_glyph",
+ "log",
+ "memmap2",
+ "smithay-client-toolkit",
+ "tiny-skia",
+]
+
+[[package]]
+name = "sec1"
+version = "0.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3e97a565f76233a6003f9f5c54be1d9c5bdfa3eccfb189469f11ec4901c47dc"
+dependencies = [
+ "base16ct 0.2.0",
+ "der 0.7.10",
+ "generic-array",
+ "pkcs8 0.10.2",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "sec1"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d56d437c2f19203ce5f7122e507831de96f3d2d4d3be5af44a0b0a09d8a80e4d"
+dependencies = [
+ "base16ct 1.0.0",
+ "ctutils",
+ "der 0.8.1",
+ "hybrid-array",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "secrecy"
+version = "0.10.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e891af845473308773346dc847b2c23ee78fe442e0472ac50e22a18a93d3ae5a"
+dependencies = [
+ "zeroize",
+]
+
+[[package]]
+name = "security-framework"
+version = "3.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7f4bc775c73d9a02cde8bf7b2ec4c9d12743edf609006c7facc23998404cd1d"
+dependencies = [
+ "bitflags 2.13.1",
+ "core-foundation 0.10.1",
+ "core-foundation-sys",
+ "libc",
+ "security-framework-sys",
+]
+
+[[package]]
+name = "security-framework-sys"
+version = "2.17.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ce2691df843ecc5d231c0b14ece2acc3efb62c0a398c7e1d875f3983ce020e3"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "selectors"
+version = "0.36.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c5d9c0c92a92d33f08817311cf3f2c29a3538a8240e94a6a3c622ce652d7e00c"
+dependencies = [
+ "bitflags 2.13.1",
+ "cssparser",
+ "derive_more",
+ "log",
+ "new_debug_unreachable",
+ "phf",
+ "phf_codegen",
+ "precomputed-hash",
+ "rustc-hash",
+ "servo_arc",
+ "smallvec",
+]
+
+[[package]]
+name = "semver"
+version = "1.0.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd"
+dependencies = [
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "serde"
+version = "1.0.229"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba"
+dependencies = [
+ "serde_core",
+ "serde_derive",
+]
+
+[[package]]
+name = "serde-untagged"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f9faf48a4a2d2693be24c6289dbe26552776eb7737074e6722891fadbe6c5058"
+dependencies = [
+ "erased-serde",
+ "serde",
+ "serde_core",
+ "typeid",
+]
+
+[[package]]
+name = "serde_bytes"
+version = "0.11.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a5d440709e79d88e51ac01c4b72fc6cb7314017bb7da9eeff678aa94c10e3ea8"
+dependencies = [
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "serde_core"
+version = "1.0.229"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48"
+dependencies = [
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_derive"
+version = "1.0.229"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.3",
+]
+
+[[package]]
+name = "serde_derive_internals"
+version = "0.29.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "18d26a20a969b9e3fdf2fc2d9f21eda6c40e2de84c9408bb5d3b05d499aae711"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "serde_json"
+version = "1.0.151"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c841b55ecdae098c80dcae9cf767f6f8a0c2cdb3416bbef72181df4d0fe73f14"
+dependencies = [
+ "itoa",
+ "memchr",
+ "serde",
+ "serde_core",
+ "zmij",
+]
+
+[[package]]
+name = "serde_repr"
+version = "0.1.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8d3b1629de253c70a0508c3899572da79ca359fdab27c7920ff00406df418906"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.3",
+]
+
+[[package]]
+name = "serde_spanned"
+version = "0.6.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bf41e0cfaf7226dca15e8197172c295a782857fcb97fad1808a166870dee75a3"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "serde_spanned"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6662b5879511e06e8999a8a235d848113e942c9124f211511b16466ee2995f26"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "serde_urlencoded"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3491c14715ca2294c4d6a88f15e84739788c1d030eed8c110436aafdaa2f3fd"
+dependencies = [
+ "form_urlencoded",
+ "itoa",
+ "ryu",
+ "serde",
+]
+
+[[package]]
+name = "serde_with"
+version = "3.22.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee78f1fbe43ac4a0e47aadb3dbd357b69eb0d3793e948624cd03dd2750ab1c0a"
+dependencies = [
+ "base64 0.22.1",
+ "bs58",
+ "chrono",
+ "hex",
+ "indexmap 1.9.3",
+ "indexmap 2.14.0",
+ "jiff",
+ "schemars 0.9.0",
+ "schemars 1.2.2",
+ "serde_core",
+ "serde_json",
+ "serde_with_macros",
+ "time",
+]
+
+[[package]]
+name = "serde_with_macros"
+version = "3.22.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8705578779c2b6bd90d84d66eb2e206b708b1a4d7b9f17641b293545bf1c7e46"
+dependencies = [
+ "darling",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "serdect"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "66cf8fedced2fcf12406bcb34223dffb92eaf34908ede12fed414c82b7f00b3e"
+dependencies = [
+ "base16ct 1.0.0",
+ "serde",
+]
+
+[[package]]
+name = "serial2"
+version = "0.2.38"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b16809bc35793b19ce4e0c53924bc0dce3937f15487997cfdaed936004180730"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "serialize-to-javascript"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "04f3666a07a197cdb77cdf306c32be9b7f598d7060d50cfd4d5aa04bfd92f6c5"
+dependencies = [
+ "serde",
+ "serde_json",
+ "serialize-to-javascript-impl",
+]
+
+[[package]]
+name = "serialize-to-javascript-impl"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "772ee033c0916d670af7860b6e1ef7d658a4629a6d0b4c8c3e67f09b3765b75d"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "servo_arc"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "170fb83ab34de17dc69aa7c67482b22218ddb85da56546f9bd6b929e32a05930"
+dependencies = [
+ "stable_deref_trait",
+]
+
+[[package]]
+name = "sha1"
+version = "0.10.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a978451301f4db1d02937a4ab3ccce137717b81826e79b7d49ffe3244a13c3b8"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.2.17",
+ "digest 0.10.7",
+]
+
+[[package]]
+name = "sha1"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "aacc4cc499359472b4abe1bf11d0b12e688af9a805fa5e3016f9a386dc2d0214"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.3.0",
+ "digest 0.11.3",
+]
+
+[[package]]
+name = "sha2"
+version = "0.10.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.2.17",
+ "digest 0.10.7",
+]
+
+[[package]]
+name = "sha2"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "446ba717509524cb3f22f17ecc096f10f4822d76ab5c0b9822c5f9c284e825f4"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.3.0",
+ "digest 0.11.3",
+]
+
+[[package]]
+name = "sha3"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bc9bad02c26382724b2d2692c6f179285e4b54eeecd7968f52a50059c3c11759"
+dependencies = [
+ "digest 0.11.3",
+ "keccak",
+ "sponge-cursor",
+]
+
+[[package]]
+name = "sharded-slab"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f40ca3c46823713e0d4209592e8d6e826aa57e928f09752619fc696c499637f6"
+dependencies = [
+ "lazy_static",
+]
+
+[[package]]
+name = "shared_library"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a9e7e0f2bfae24d8a5b5a66c5b257a83c7412304311512a0c054cd5e619da11"
+dependencies = [
+ "lazy_static",
+ "libc",
+]
+
+[[package]]
+name = "shell-words"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc6fe69c597f9c37bfeeeeeb33da3530379845f10be461a66d16d03eca2ded77"
+
+[[package]]
+name = "shlex"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8fadd59c855ef2080decdef8ff161eb6661b86933c9d82e5ba29dc602a55aba"
+
+[[package]]
+name = "signal-hook"
+version = "0.3.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d881a16cf4426aa584979d30bd82cb33429027e42122b169753d6ef1085ed6e2"
+dependencies = [
+ "libc",
+ "signal-hook-registry",
+]
+
+[[package]]
+name = "signal-hook-mio"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b75a19a7a740b25bc7944bdee6172368f988763b744e3d4dfe753f6b4ece40cc"
+dependencies = [
+ "libc",
+ "mio",
+ "signal-hook",
+]
+
+[[package]]
+name = "signal-hook-registry"
+version = "1.4.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c4db69cba1110affc0e9f7bcd48bbf87b3f4fc7c61fc9155afd4c469eb3d6c1b"
+dependencies = [
+ "errno",
+ "libc",
+]
+
+[[package]]
+name = "signature"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de"
+dependencies = [
+ "digest 0.10.7",
+ "rand_core 0.6.4",
+]
+
+[[package]]
+name = "signature"
+version = "3.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "28d567dcbaf0049cb8ac2608a76cd95ff9e4412e1899d389ee400918ca7537f5"
+dependencies = [
+ "digest 0.11.3",
+ "rand_core 0.10.1",
+]
+
+[[package]]
+name = "simd-adler32"
+version = "0.3.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a219298ac11a56ea9a6d2120044824d6f01aeb034955e7af7bc16858527deea"
+
+[[package]]
+name = "simd_cesu8"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "11031e251abf8611c80f460e19dbdeb54a66db918e49c65a7065b46ac7aec520"
+dependencies = [
+ "rustc_version",
+ "simdutf8",
+]
+
+[[package]]
+name = "simdutf8"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3a9fe34e3e7a50316060351f37187a3f546bce95496156754b601a5fa71b76e"
+
+[[package]]
+name = "siphasher"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ee5873ec9cce0195efcb7a4e9507a04cd49aec9c83d0389df45b1ef7ba2e649"
+
+[[package]]
+name = "slab"
+version = "0.4.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5"
+
+[[package]]
+name = "smallvec"
+version = "1.15.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ed6a63f02c8539c91a8685a86f4099661ba3da017932f6ebbea6de3f0fa7c90"
+
+[[package]]
+name = "smithay-client-toolkit"
+version = "0.19.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3457dea1f0eb631b4034d61d4d8c32074caa6cd1ab2d59f2327bd8461e2c0016"
+dependencies = [
+ "bitflags 2.13.1",
+ "calloop",
+ "calloop-wayland-source",
+ "cursor-icon",
+ "libc",
+ "log",
+ "memmap2",
+ "rustix 0.38.44",
+ "thiserror 1.0.69",
+ "wayland-backend",
+ "wayland-client",
+ "wayland-csd-frame",
+ "wayland-cursor",
+ "wayland-protocols",
+ "wayland-protocols-wlr",
+ "wayland-scanner",
+ "xkeysym",
+]
+
+[[package]]
+name = "smol_str"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dd538fb6910ac1099850255cf94a94df6551fbdd602454387d0adb2d1ca6dead"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "socket2"
+version = "0.6.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3d1e2c7f27f8d4cb10542a02c49005dbd6e93095799d6f3be745fae9f8fedd4"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "softbuffer"
+version = "0.4.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "aac18da81ebbf05109ab275b157c22a653bb3c12cf884450179942f81bcbf6c3"
+dependencies = [
+ "as-raw-xcb-connection",
+ "bytemuck",
+ "drm",
+ "fastrand",
+ "js-sys",
+ "memmap2",
+ "ndk",
+ "objc2 0.6.4",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+ "objc2-foundation 0.3.2",
+ "objc2-quartz-core 0.3.2",
+ "raw-window-handle",
+ "redox_syscall 0.5.18",
+ "rustix 1.1.4",
+ "tiny-xlib",
+ "tracing",
+ "wasm-bindgen",
+ "wayland-backend",
+ "wayland-client",
+ "wayland-sys",
+ "web-sys",
+ "windows-sys 0.61.2",
+ "x11rb",
+]
+
+[[package]]
+name = "soup3"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "471f924a40f31251afc77450e781cb26d55c0b650842efafc9c6cbd2f7cc4f9f"
+dependencies = [
+ "futures-channel",
+ "gio",
+ "glib 0.18.5",
+ "libc",
+ "soup3-sys",
+]
+
+[[package]]
+name = "soup3-sys"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7ebe8950a680a12f24f15ebe1bf70db7af98ad242d9db43596ad3108aab86c27"
+dependencies = [
+ "gio-sys 0.18.1",
+ "glib-sys 0.18.1",
+ "gobject-sys 0.18.0",
+ "libc",
+ "system-deps 6.2.2",
+]
+
+[[package]]
+name = "spin"
+version = "0.9.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3763264f6b73151db08c50ff20d7d8a0b8796e021cdea7ceedad07b80155fa0e"
+dependencies = [
+ "lock_api",
+]
+
+[[package]]
+name = "spki"
+version = "0.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d"
+dependencies = [
+ "base64ct",
+ "der 0.7.10",
+]
+
+[[package]]
+name = "spki"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d9efca8738c78ee9484207732f728b1ef517bbb1833d6fc0879ca898a522f6f"
+dependencies = [
+ "base64ct",
+ "der 0.8.1",
+]
+
+[[package]]
+name = "sponge-cursor"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a0219bd7d979d58245a4f41f695e1ac9f8befdffadd7f61f1bae9e39abc6620"
+
+[[package]]
+name = "sspi"
+version = "0.21.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c3bd2a45e7e24fd72eba100ced3fd847e05fe4657d7f067eb06d1a894f0d4e5"
+dependencies = [
+ "async-dnssd",
+ "async-recursion",
+ "bitflags 2.13.1",
+ "bytemuck",
+ "byteorder",
+ "cfg-if",
+ "crypto-bigint 0.7.5",
+ "crypto-mac",
+ "cryptoki",
+ "curve25519-dalek 5.0.0-rc.1",
+ "ed25519-dalek 3.0.0-rc.1",
+ "futures",
+ "getrandom 0.3.4",
+ "hmac 0.13.0",
+ "md-5 0.11.0",
+ "md4",
+ "num-derive",
+ "num-traits",
+ "oid",
+ "p256 0.14.0-rc.14",
+ "p384 0.14.0-rc.14",
+ "p521",
+ "picky",
+ "picky-asn1",
+ "picky-asn1-der",
+ "picky-asn1-x509",
+ "picky-krb",
+ "pkcs1 0.8.0-rc.4",
+ "primeorder 0.14.0-rc.14",
+ "rand 0.10.2",
+ "rand_core 0.10.1",
+ "rsa",
+ "rustcrypto-ff",
+ "rustcrypto-ff_derive",
+ "rustcrypto-group",
+ "rustls",
+ "serde",
+ "sha1 0.11.0",
+ "sha2 0.11.0",
+ "time",
+ "tokio",
+ "tracing",
+ "url",
+ "uuid",
+ "widestring",
+ "windows 0.62.2",
+ "windows-registry",
+ "winscard",
+ "zeroize",
+]
+
+[[package]]
+name = "stable_deref_trait"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
+
+[[package]]
+name = "static_assertions"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
+
+[[package]]
+name = "strict-num"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6637bab7722d379c8b41ba849228d680cc12d0a45ba1fa2b48f2a30577a06731"
+
+[[package]]
+name = "string_cache"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a18596f8c785a729f2819c0f6a7eae6ebeebdfffbfe4214ae6b087f690e31901"
+dependencies = [
+ "new_debug_unreachable",
+ "parking_lot",
+ "phf_shared",
+ "precomputed-hash",
+]
+
+[[package]]
+name = "string_cache_codegen"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "585635e46db231059f76c5849798146164652513eb9e8ab2685939dd90f29b69"
+dependencies = [
+ "phf_generator",
+ "phf_shared",
+ "proc-macro2",
+ "quote",
+]
+
+[[package]]
+name = "strsim"
+version = "0.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
+
+[[package]]
+name = "substring"
+version = "1.4.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "42ee6433ecef213b2e72f587ef64a2f5943e7cd16fbd82dbe8bc07486c534c86"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "subtle"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"
+
+[[package]]
+name = "swift-rs"
+version = "1.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4057c98e2e852d51fdcfca832aac7b571f6b351ad159f9eda5db1655f8d0c4d7"
+dependencies = [
+ "base64 0.21.7",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "syn"
+version = "1.0.109"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b64191b275b66ffe2469e8af2c1cfe3bafa67b529ead792a6d0160888b4237"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "syn"
+version = "2.0.119"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "syn"
+version = "3.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "53e9bae58849f64dfa4f5d5ae372c8341f7305f82a3868709269343628b659a3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "sync_wrapper"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0bf256ce5efdfa370213c1dabab5935a12e49f2c58d15e9eac2870d3b4f27263"
+dependencies = [
+ "futures-core",
+]
+
+[[package]]
+name = "synstructure"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "728a70f3dbaf5bab7f0c4b1ac8d7ae5ea60a4b5549c8a5914361c99147a709d2"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "system-configuration"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a13f3d0daba03132c0aa9767f98351b3488edc2c100cda2d2ec2b04f3d8d3c8b"
+dependencies = [
+ "bitflags 2.13.1",
+ "core-foundation 0.9.4",
+ "system-configuration-sys",
+]
+
+[[package]]
+name = "system-configuration-sys"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e1d1b10ced5ca923a1fcb8d03e96b8d3268065d724548c0211415ff6ac6bac4"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "system-deps"
+version = "6.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a3e535eb8dded36d55ec13eddacd30dec501792ff23a0b1682c38601b8cf2349"
+dependencies = [
+ "cfg-expr 0.15.8",
+ "heck 0.5.0",
+ "pkg-config",
+ "toml 0.8.2",
+ "version-compare",
+]
+
+[[package]]
+name = "system-deps"
+version = "7.0.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "396a35feb67335377e0251fcbc1092fc85c484bd4e3a7a54319399da127796e7"
+dependencies = [
+ "cfg-expr 0.20.8",
+ "heck 0.5.0",
+ "pkg-config",
+ "toml 1.1.4+spec-1.1.0",
+ "version-compare",
+]
+
+[[package]]
+name = "tao"
+version = "0.35.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d1c93047acf68669466a34690ac58cca7010bd1b201e1ec86f1fd0a75d3dd4a9"
+dependencies = [
+ "bitflags 2.13.1",
+ "block2 0.6.2",
+ "core-foundation 0.10.1",
+ "core-graphics 0.25.0",
+ "crossbeam-channel",
+ "dispatch2",
+ "dlopen2",
+ "dpi",
+ "gdkwayland-sys",
+ "gtk",
+ "jni 0.21.1",
+ "libc",
+ "log",
+ "ndk",
+ "ndk-sys",
+ "objc2 0.6.4",
+ "objc2-app-kit 0.3.2",
+ "objc2-foundation 0.3.2",
+ "objc2-ui-kit 0.3.2",
+ "once_cell",
+ "parking_lot",
+ "percent-encoding",
+ "raw-window-handle",
+ "tao-macros",
+ "unicode-segmentation",
+ "url",
+ "windows 0.61.3",
+ "windows-core 0.61.2",
+ "windows-version",
+]
+
+[[package]]
+name = "tao-macros"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5f7eeb6d99155545da6150a1795945f16ac9c178deb2a5f2e74d776107bd5849"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "tap"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "55937e1799185b12863d447f42597ed69d9928686b8d88a1df17376a097d8369"
+
+[[package]]
+name = "target-lexicon"
+version = "0.12.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "61c41af27dd6d1e27b1b16b489db798443478cef1f06a660c96db617ba5de3b1"
+
+[[package]]
+name = "target-lexicon"
+version = "0.13.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "adb6935a6f5c20170eeceb1a3835a49e12e19d792f6dd344ccc76a985ca5a6ca"
+
+[[package]]
+name = "tauri"
+version = "2.11.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "667b20e2726d572dea2de7370da16e188eb06008faf9a92fab7cdc46791190b5"
+dependencies = [
+ "anyhow",
+ "bytes",
+ "cookie",
+ "dirs",
+ "dunce",
+ "embed_plist",
+ "getrandom 0.3.4",
+ "glob",
+ "gtk",
+ "heck 0.5.0",
+ "http",
+ "jni 0.21.1",
+ "libc",
+ "log",
+ "mime",
+ "muda",
+ "objc2 0.6.4",
+ "objc2-app-kit 0.3.2",
+ "objc2-foundation 0.3.2",
+ "objc2-ui-kit 0.3.2",
+ "objc2-web-kit",
+ "percent-encoding",
+ "plist",
+ "raw-window-handle",
+ "reqwest 0.13.4",
+ "serde",
+ "serde_json",
+ "serde_repr",
+ "serialize-to-javascript",
+ "swift-rs",
+ "tauri-build",
+ "tauri-macros",
+ "tauri-runtime",
+ "tauri-runtime-wry",
+ "tauri-utils",
+ "thiserror 2.0.20",
+ "tokio",
+ "url",
+ "webkit2gtk",
+ "webview2-com",
+ "window-vibrancy",
+ "windows 0.61.3",
+]
+
+[[package]]
+name = "tauri-build"
+version = "2.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bc9ce40b16101cb6ea63d3e221567affd1c3a9205f95d7bc574941a10636b632"
+dependencies = [
+ "anyhow",
+ "cargo_toml",
+ "dirs",
+ "glob",
+ "heck 0.5.0",
+ "json-patch",
+ "schemars 0.8.22",
+ "semver",
+ "serde",
+ "serde_json",
+ "tauri-utils",
+ "tauri-winres",
+ "walkdir",
+]
+
+[[package]]
+name = "tauri-codegen"
+version = "2.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "08279169ff42f8fc45a1dbc9dcae888893ba95288142e5880c59b93a26d2cfc5"
+dependencies = [
+ "base64 0.22.1",
+ "ico",
+ "json-patch",
+ "plist",
+ "png 0.17.16",
+ "proc-macro2",
+ "quote",
+ "semver",
+ "serde",
+ "serde_json",
+ "sha2 0.10.9",
+ "syn 2.0.119",
+ "tauri-utils",
+ "thiserror 2.0.20",
+ "time",
+ "url",
+ "uuid",
+ "walkdir",
+]
+
+[[package]]
+name = "tauri-macros"
+version = "2.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e8b394794f399a421811d06966343e7933fcae92d59f5180b9388d1174497a45"
+dependencies = [
+ "heck 0.5.0",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+ "tauri-codegen",
+ "tauri-utils",
+]
+
+[[package]]
+name = "tauri-runtime"
+version = "2.11.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b0b4bc95aed361b0019067d189a1174a603d460d0f6c72606512d59fc9c12ec8"
+dependencies = [
+ "cookie",
+ "dpi",
+ "gtk",
+ "http",
+ "jni 0.21.1",
+ "objc2 0.6.4",
+ "objc2-ui-kit 0.3.2",
+ "objc2-web-kit",
+ "raw-window-handle",
+ "serde",
+ "serde_json",
+ "tauri-utils",
+ "thiserror 2.0.20",
+ "url",
+ "webkit2gtk",
+ "webview2-com",
+ "windows 0.61.3",
+]
+
+[[package]]
+name = "tauri-runtime-wry"
+version = "2.11.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4e6fac707727b7a2f48e4ded90976324267371073edbb415ffb73bb0458d203f"
+dependencies = [
+ "gtk",
+ "http",
+ "jni 0.21.1",
+ "log",
+ "objc2 0.6.4",
+ "objc2-app-kit 0.3.2",
+ "once_cell",
+ "percent-encoding",
+ "raw-window-handle",
+ "softbuffer",
+ "tao",
+ "tauri-runtime",
+ "tauri-utils",
+ "url",
+ "webkit2gtk",
+ "webview2-com",
+ "windows 0.61.3",
+ "wry",
+]
+
+[[package]]
+name = "tauri-utils"
+version = "2.9.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3e176a18e67764923c4f1ce66f25ae4abe5f688384d5eb1a0fa6c77f3d90f887"
+dependencies = [
+ "anyhow",
+ "cargo_metadata",
+ "ctor 0.8.0",
+ "dom_query",
+ "dunce",
+ "glob",
+ "http",
+ "infer",
+ "json-patch",
+ "log",
+ "memchr",
+ "phf",
+ "plist",
+ "proc-macro2",
+ "quote",
+ "regex",
+ "schemars 0.8.22",
+ "semver",
+ "serde",
+ "serde-untagged",
+ "serde_json",
+ "serde_with",
+ "swift-rs",
+ "thiserror 2.0.20",
+ "toml 1.1.4+spec-1.1.0",
+ "url",
+ "urlpattern",
+ "uuid",
+ "walkdir",
+]
+
+[[package]]
+name = "tauri-winres"
+version = "0.3.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cc65d45c68858bfe420dd29e834b5d15dbecf8a07a8a16cf4d532c7b1f69d4b6"
+dependencies = [
+ "dunce",
+ "embed-resource",
+ "toml 1.1.4+spec-1.1.0",
+]
+
+[[package]]
+name = "tempfile"
+version = "3.27.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd"
+dependencies = [
+ "fastrand",
+ "getrandom 0.4.3",
+ "once_cell",
+ "rustix 1.1.4",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "tendril"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5fed54709c5b3a53d09bb1c113ea4f5ceafd1e772ddcb0030a82e1d56c087b08"
+dependencies = [
+ "new_debug_unreachable",
+]
+
+[[package]]
+name = "thiserror"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6aaf5339b578ea85b50e080feb250a3e8ae8cfcdff9a461c9ec2904bc923f52"
+dependencies = [
+ "thiserror-impl 1.0.69",
+]
+
+[[package]]
+name = "thiserror"
+version = "2.0.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ec86235f5fcc2a73650310756d2ac5b138a5780bbbdfae3eeccec992c435ba4f"
+dependencies = [
+ "thiserror-impl 2.0.20",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "2.0.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bc04cd3e1236dd4a98afca4569f2deb3f120e5422a4023be2cb683f8486292af"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.3",
+]
+
+[[package]]
+name = "thread_local"
+version = "1.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ad99c4c6d32803332c548b1af0540b357b3f5fc0be8f6c6bfe8b2e6ae784070"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "time"
+version = "0.3.55"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdb87b95ec50ddfa440816d227a17b2ccbdda963a316a727fda0fc4334f7d134"
+dependencies = [
+ "deranged",
+ "js-sys",
+ "num-conv",
+ "powerfmt",
+ "serde_core",
+ "time-core",
+ "time-macros",
+]
+
+[[package]]
+name = "time-core"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9e1c906769ad99c88eaa54e728060edef082f8e358ff32030cb7c7d315e81109"
+
+[[package]]
+name = "time-macros"
+version = "0.2.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7e689342a48d2ea927c87ea50cabf8594854bf940e9310208848d680d668ed85"
+dependencies = [
+ "num-conv",
+ "time-core",
+]
+
+[[package]]
+name = "tiny-skia"
+version = "0.11.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "83d13394d44dae3207b52a326c0c85a8bf87f1541f23b0d143811088497b09ab"
+dependencies = [
+ "arrayref",
+ "arrayvec",
+ "bytemuck",
+ "cfg-if",
+ "log",
+ "tiny-skia-path",
+]
+
+[[package]]
+name = "tiny-skia-path"
+version = "0.11.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9c9e7fc0c2e86a30b117d0462aa261b72b7a99b7ebd7deb3a14ceda95c5bdc93"
+dependencies = [
+ "arrayref",
+ "bytemuck",
+ "strict-num",
+]
+
+[[package]]
+name = "tiny-xlib"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a90a0ca3ee6a69f2ad28fd11621a4c3f03b371f366be500b64df260c4ffbafb4"
+dependencies = [
+ "as-raw-xcb-connection",
+ "ctor 0.10.1",
+ "libloading",
+ "pkg-config",
+ "tracing",
+]
+
+[[package]]
+name = "tiny_http"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "389915df6413a2e74fb181895f933386023c71110878cd0825588928e64cdc82"
+dependencies = [
+ "ascii",
+ "chunked_transfer",
+ "httpdate",
+ "log",
+]
+
+[[package]]
+name = "tinystr"
+version = "0.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8323304221c2a851516f22236c5722a72eaa19749016521d6dff0824447d96d"
+dependencies = [
+ "displaydoc",
+ "zerovec",
+]
+
+[[package]]
+name = "tinyvec"
+version = "1.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3e61e67053d25a4e82c844e8424039d9745781b3fc4f32b8d55ed50f5f667ef3"
+dependencies = [
+ "tinyvec_macros",
+]
+
+[[package]]
+name = "tinyvec_macros"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
+
+[[package]]
+name = "tls_codec"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0de2e01245e2bb89d6f05801c564fa27624dbd7b1846859876c7dad82e90bf6b"
+dependencies = [
+ "tls_codec_derive",
+ "zeroize",
+]
+
+[[package]]
+name = "tls_codec_derive"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2d2e76690929402faae40aebdda620a2c0e25dd6d3b9afe48867dfd95991f4bd"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "tokio"
+version = "1.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "202caea871b69668250d242070849eb495be178ed697a3e98aebce5bc81a0bed"
+dependencies = [
+ "bytes",
+ "libc",
+ "mio",
+ "parking_lot",
+ "pin-project-lite",
+ "signal-hook-registry",
+ "socket2",
+ "tokio-macros",
+ "tracing",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "tokio-macros"
+version = "2.7.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "78773a2a397f451582ce068015985c33193cf6dea8b74d2a639fe457b2f07b0e"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.3",
+]
+
+[[package]]
+name = "tokio-rustls"
+version = "0.26.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1729aa945f29d91ba541258c8df89027d5792d85a8841fb65e8bf0f4ede4ef61"
+dependencies = [
+ "rustls",
+ "tokio",
+]
+
+[[package]]
+name = "tokio-tungstenite"
+version = "0.29.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f72a05e828585856dacd553fba484c242c46e391fb0e58917c942ee9202915c"
+dependencies = [
+ "futures-util",
+ "log",
+ "rustls",
+ "rustls-native-certs",
+ "rustls-pki-types",
+ "tokio",
+ "tokio-rustls",
+ "tungstenite",
+]
+
+[[package]]
+name = "tokio-util"
+version = "0.7.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "494815d09bf52b5548659851081238f0ca39ff638363907596da739561c62c52"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "futures-sink",
+ "libc",
+ "pin-project-lite",
+ "tokio",
+]
+
+[[package]]
+name = "toml"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "185d8ab0dfbb35cf1399a6344d8484209c088f75f8f68230da55d48d95d43e3d"
+dependencies = [
+ "serde",
+ "serde_spanned 0.6.9",
+ "toml_datetime 0.6.3",
+ "toml_edit 0.20.2",
+]
+
+[[package]]
+name = "toml"
+version = "0.9.12+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf92845e79fc2e2def6a5d828f0801e29a2f8acc037becc5ab08595c7d5e9863"
+dependencies = [
+ "indexmap 2.14.0",
+ "serde_core",
+ "serde_spanned 1.1.1",
+ "toml_datetime 0.7.5+spec-1.1.0",
+ "toml_parser",
+ "toml_writer",
+ "winnow 0.7.15",
+]
+
+[[package]]
+name = "toml"
+version = "1.1.4+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3aace63f4bbcdfc2c965b059de67119c89c4017a70d633be6c104910f67056f5"
+dependencies = [
+ "indexmap 2.14.0",
+ "serde_core",
+ "serde_spanned 1.1.1",
+ "toml_datetime 1.1.1+spec-1.1.0",
+ "toml_parser",
+ "toml_writer",
+ "winnow 1.0.4",
+]
+
+[[package]]
+name = "toml_datetime"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7cda73e2f1397b1262d6dfdcef8aafae14d1de7748d66822d3bfeeb6d03e5e4b"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "toml_datetime"
+version = "0.7.5+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92e1cfed4a3038bc5a127e35a2d360f145e1f4b971b551a2ba5fd7aedf7e1347"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "toml_datetime"
+version = "1.1.1+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3165f65f62e28e0115a00b2ebdd37eb6f3b641855f9d636d3cd4103767159ad7"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "toml_edit"
+version = "0.19.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1b5bb770da30e5cbfde35a2d7b9b8a2c4b8ef89548a7a6aeab5c9a576e3e7421"
+dependencies = [
+ "indexmap 2.14.0",
+ "toml_datetime 0.6.3",
+ "winnow 0.5.40",
+]
+
+[[package]]
+name = "toml_edit"
+version = "0.20.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "396e4d48bbb2b7554c944bde63101b5ae446cff6ec4a24227428f15eb72ef338"
+dependencies = [
+ "indexmap 2.14.0",
+ "serde",
+ "serde_spanned 0.6.9",
+ "toml_datetime 0.6.3",
+ "winnow 0.5.40",
+]
+
+[[package]]
+name = "toml_edit"
+version = "0.25.13+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6975367e4d2ef766d86af01ffad14b622fecc8d4357a998fbc4deb6e9bacaf9b"
+dependencies = [
+ "indexmap 2.14.0",
+ "toml_datetime 1.1.1+spec-1.1.0",
+ "toml_parser",
+ "winnow 1.0.4",
+]
+
+[[package]]
+name = "toml_parser"
+version = "1.1.3+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d38ac1cf9b95face32296c0a3ede1fdc270627c9d9c02a7274dd6d960dc4d56"
+dependencies = [
+ "winnow 1.0.4",
+]
+
+[[package]]
+name = "toml_writer"
+version = "1.1.2+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7d56353a2a665ad0f41a421187180aab746c8c325620617ad883a99a1cbe66d2"
+
+[[package]]
+name = "tower"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebe5ef63511595f1344e2d5cfa636d973292adc0eec1f0ad45fae9f0851ab1d4"
+dependencies = [
+ "futures-core",
+ "futures-util",
+ "pin-project-lite",
+ "sync_wrapper",
+ "tokio",
+ "tower-layer",
+ "tower-service",
+]
+
+[[package]]
+name = "tower-http"
+version = "0.6.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4cfcf7e2740e6fc6d4d688b4ef00650406bb94adf4731e43c096c3a19fe40840"
+dependencies = [
+ "bitflags 2.13.1",
+ "bytes",
+ "futures-util",
+ "http",
+ "http-body",
+ "pin-project-lite",
+ "tower",
+ "tower-layer",
+ "tower-service",
+ "url",
+]
+
+[[package]]
+name = "tower-layer"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "121c2a6cda46980bb0fcd1647ffaf6cd3fc79a013de288782836f6df9c48780e"
+
+[[package]]
+name = "tower-service"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8df9b6e13f2d32c91b9bd719c00d1958837bc7dec474d94952798cc8e69eeec3"
+
+[[package]]
+name = "tracing"
+version = "0.1.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "63e71662fa4b2a2c3a26f570f037eb95bb1f85397f3cd8076caed2f026a6d100"
+dependencies = [
+ "log",
+ "pin-project-lite",
+ "tracing-attributes",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-attributes"
+version = "0.1.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7490cfa5ec963746568740651ac6781f701c9c5ea257c58e057f3ba8cf69e8da"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "tracing-core"
+version = "0.1.36"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "db97caf9d906fbde555dd62fa95ddba9eecfd14cb388e4f491a66d74cd5fb79a"
+dependencies = [
+ "once_cell",
+ "valuable",
+]
+
+[[package]]
+name = "tracing-log"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee855f1f400bd0e5c02d150ae5de3840039a3f54b025156404e34c23c03f47c3"
+dependencies = [
+ "log",
+ "once_cell",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-subscriber"
+version = "0.3.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb7f578e5945fb242538965c2d0b04418d38ec25c79d160cd279bf0731c8d319"
+dependencies = [
+ "matchers",
+ "nu-ansi-term",
+ "once_cell",
+ "regex-automata",
+ "sharded-slab",
+ "smallvec",
+ "thread_local",
+ "tracing",
+ "tracing-core",
+ "tracing-log",
+]
+
+[[package]]
+name = "try-lock"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b"
+
+[[package]]
+name = "ttf-parser"
+version = "0.25.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d2df906b07856748fa3f6e0ad0cbaa047052d4a7dd609e231c4f72cee8c36f31"
+
+[[package]]
+name = "tungstenite"
+version = "0.29.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c01152af293afb9c7c2a57e4b559c5620b421f6d133261c60dd2d0cdb38e6b8"
+dependencies = [
+ "bytes",
+ "data-encoding",
+ "http",
+ "httparse",
+ "log",
+ "rand 0.9.5",
+ "rustls",
+ "rustls-pki-types",
+ "sha1 0.10.7",
+ "thiserror 2.0.20",
+]
+
+[[package]]
+name = "typeid"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bc7d623258602320d5c55d1bc22793b57daff0ec7efc270ea7d55ce1d5f5471c"
+
+[[package]]
+name = "typenum"
+version = "1.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20"
+
+[[package]]
+name = "uds_windows"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2f6fb2847f6742cd76af783a2a2c49e9375d0a111c7bef6f71cd9e738c72d6e"
+dependencies = [
+ "memoffset 0.9.1",
+ "tempfile",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "unic-char-property"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a8c57a407d9b6fa02b4795eb81c5b6652060a15a7903ea981f3d723e6c0be221"
+dependencies = [
+ "unic-char-range",
+]
+
+[[package]]
+name = "unic-char-range"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0398022d5f700414f6b899e10b8348231abf9173fa93144cbc1a43b9793c1fbc"
+
+[[package]]
+name = "unic-common"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "80d7ff825a6a654ee85a63e80f92f054f904f21e7d12da4e22f9834a4aaa35bc"
+
+[[package]]
+name = "unic-ucd-ident"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e230a37c0381caa9219d67cf063aa3a375ffed5bf541a452db16e744bdab6987"
+dependencies = [
+ "unic-char-property",
+ "unic-char-range",
+ "unic-ucd-version",
+]
+
+[[package]]
+name = "unic-ucd-version"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96bd2f2237fe450fcd0a1d2f5f4e91711124f7857ba2e964247776ebeeb7b0c4"
+dependencies = [
+ "unic-common",
+]
+
+[[package]]
+name = "unicase"
+version = "2.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dbc4bc3a9f746d862c45cb89d705aa10f187bb96c76001afab07a0d35ce60142"
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.24"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
+
+[[package]]
+name = "unicode-segmentation"
+version = "1.13.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c6f5d3c3b1bf09027a88a6bc961fc00497d651009560b5463668dc81b0fa87a8"
+
+[[package]]
+name = "unicode-width"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b4ac048d71ede7ee76d585517add45da530660ef4390e49b098733c6e897f254"
+
+[[package]]
+name = "universal-hash"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc1de2c688dc15305988b563c3854064043356019f97a4b46276fe734c4f07ea"
+dependencies = [
+ "crypto-common 0.1.7",
+ "subtle",
+]
+
+[[package]]
+name = "universal-hash"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f4987bdc12753382e0bec4a65c50738ffaabc998b9cdd1f952fb5f39b0048a96"
+dependencies = [
+ "crypto-common 0.2.2",
+ "ctutils",
+]
+
+[[package]]
+name = "untrusted"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1"
+
+[[package]]
+name = "url"
+version = "2.5.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff67a8a4397373c3ef660812acab3268222035010ab8680ec4215f38ba3d0eed"
+dependencies = [
+ "form_urlencoded",
+ "idna",
+ "percent-encoding",
+ "serde",
+ "serde_derive",
+]
+
+[[package]]
+name = "urlpattern"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "70acd30e3aa1450bc2eece896ce2ad0d178e9c079493819301573dae3c37ba6d"
+dependencies = [
+ "regex",
+ "serde",
+ "unic-ucd-ident",
+ "url",
+]
+
+[[package]]
+name = "utf8_iter"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be"
+
+[[package]]
+name = "utf8parse"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821"
+
+[[package]]
+name = "uuid"
+version = "1.24.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bf3923a6f5c4c6382e0b653c4117f48d631ea17f38ed86e2a828e6f7412f5239"
+dependencies = [
+ "getrandom 0.4.3",
+ "js-sys",
+ "serde_core",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "valuable"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba73ea9cf16a25df0c8caa16c51acb937d5712a8429db78a3ee29d5dcacd3a65"
+
+[[package]]
+name = "vcpkg"
+version = "0.2.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "accd4ea62f7bb7a82fe23066fb0957d48ef677f6eeb8215f372f52e48bb32426"
+
+[[package]]
+name = "version-compare"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "03c2856837ef78f57382f06b2b8563a2f512f7185d732608fd9176cb3b8edf0e"
+
+[[package]]
+name = "version_check"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
+
+[[package]]
+name = "vswhom"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "be979b7f07507105799e854203b470ff7c78a1639e330a58f183b5fea574608b"
+dependencies = [
+ "libc",
+ "vswhom-sys",
+]
+
+[[package]]
+name = "vswhom-sys"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fb067e4cbd1ff067d1df46c9194b5de0e98efd2810bbc95c5d5e5f25a3231150"
+dependencies = [
+ "cc",
+ "libc",
+]
+
+[[package]]
+name = "walkdir"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "29790946404f91d9c5d06f9874efddea1dc06c5efe94541a7d6863108e3a5e4b"
+dependencies = [
+ "same-file",
+ "winapi-util",
+]
+
+[[package]]
+name = "want"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bfa7760aed19e106de2c7c0b581b509f2f25d3dacaf737cb82ac61bc6d760b0e"
+dependencies = [
+ "try-lock",
+]
+
+[[package]]
+name = "wasi"
+version = "0.11.1+wasi-snapshot-preview1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
+
+[[package]]
+name = "wasi"
+version = "0.14.7+wasi-0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "883478de20367e224c0090af9cf5f9fa85bed63a95c1abf3afc5c083ebc06e8c"
+dependencies = [
+ "wasip2",
+]
+
+[[package]]
+name = "wasip2"
+version = "1.0.4+wasi-0.2.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b67efb37e106e55ce722a510d6b5f9c17f083e5fc79afc2badeb12cc313d9487"
+dependencies = [
+ "wit-bindgen",
+]
+
+[[package]]
+name = "wasite"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "66fe902b4a6b8028a753d5424909b764ccf79b7a209eac9bf97e59cda9f71a42"
+dependencies = [
+ "wasi 0.14.7+wasi-0.2.4",
+]
+
+[[package]]
+name = "wasm-bindgen"
+version = "0.2.127"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1b70935747edd64d89de3efa29d73789b806c15798f8e7dca4d8ac356b50ce70"
+dependencies = [
+ "cfg-if",
+ "once_cell",
+ "rustversion",
+ "wasm-bindgen-macro",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-futures"
+version = "0.4.77"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6b7777d5cc23d0e91404e53ce2d5e8ec7acae3026b16233dba62cd3246457950"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "wasm-bindgen-macro"
+version = "0.2.127"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77775f8f3f7217702089053b94958f8f54061a3f663417df76e19cbdcca29bc1"
+dependencies = [
+ "quote",
+ "wasm-bindgen-macro-support",
+]
+
+[[package]]
+name = "wasm-bindgen-macro-support"
+version = "0.2.127"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e11d33f857dc2fb11b8bc75aee111aa9cbeb12cd9f25efd3d4c2a3dd4e235284"
+dependencies = [
+ "bumpalo",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-shared"
+version = "0.2.127"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7ef64dbcc55df09c7e5a46182d181c2cfa3e925f3da937ea764728b4bbb9dcbf"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "wasm-streams"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9d1ec4f6517c9e11ae630e200b2b65d193279042e28edd4a2cda233e46670bbb"
+dependencies = [
+ "futures-util",
+ "js-sys",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+]
+
+[[package]]
+name = "wayland-backend"
+version = "0.3.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "016ccf01d1c58b6f8999612813e17c9b2390f7d70671428869913310f83f54b8"
+dependencies = [
+ "cc",
+ "downcast-rs",
+ "rustix 1.1.4",
+ "scoped-tls",
+ "smallvec",
+ "wayland-sys",
+]
+
+[[package]]
+name = "wayland-client"
+version = "0.31.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3c36a0f861ad76d0901f2800b46321410d9f73f2ea88aac0650d86c32688073"
+dependencies = [
+ "bitflags 2.13.1",
+ "rustix 1.1.4",
+ "wayland-backend",
+ "wayland-scanner",
+]
+
+[[package]]
+name = "wayland-csd-frame"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "625c5029dbd43d25e6aa9615e88b829a5cad13b2819c4ae129fdbb7c31ab4c7e"
+dependencies = [
+ "bitflags 2.13.1",
+ "cursor-icon",
+ "wayland-backend",
+]
+
+[[package]]
+name = "wayland-cursor"
+version = "0.31.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4a52d18780be9b1314328a3de5f930b73d2200112e3849ca6cb11822793fb34d"
+dependencies = [
+ "rustix 1.1.4",
+ "wayland-client",
+ "xcursor",
+]
+
+[[package]]
+name = "wayland-protocols"
+version = "0.32.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "23d0c813de3daa2ed6520af85a3bd49b0e722a3078506899aa9686fea58dc4b6"
+dependencies = [
+ "bitflags 2.13.1",
+ "wayland-backend",
+ "wayland-client",
+ "wayland-scanner",
+]
+
+[[package]]
+name = "wayland-protocols-plasma"
+version = "0.3.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2b6d8cf1eb2c1c31ed1f5643c88a6e53538129d4af80030c8cabd1f9fa884d91"
+dependencies = [
+ "bitflags 2.13.1",
+ "wayland-backend",
+ "wayland-client",
+ "wayland-protocols",
+ "wayland-scanner",
+]
+
+[[package]]
+name = "wayland-protocols-wlr"
+version = "0.3.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eb04e52f7836d7c7976c78ca0250d61e33873c34156a2a1fc9474828ec268234"
+dependencies = [
+ "bitflags 2.13.1",
+ "wayland-backend",
+ "wayland-client",
+ "wayland-protocols",
+ "wayland-scanner",
+]
+
+[[package]]
+name = "wayland-scanner"
+version = "0.31.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "338e30461b3a2b67d70eb30a6d89f8e0c93a833e07d2ae89085cd070c4a00ac0"
+dependencies = [
+ "proc-macro2",
+ "quick-xml",
+ "quote",
+]
+
+[[package]]
+name = "wayland-sys"
+version = "0.31.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8eab23fefc9e41f8e841df4a9c707e8a8c4ed26e944ef69297184de2785e3be"
+dependencies = [
+ "dlib",
+ "log",
+ "once_cell",
+ "pkg-config",
+]
+
+[[package]]
+name = "web-sys"
+version = "0.3.104"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c435338968042f4f59a557f690a253676d47ce13ceb55d70100e7facf6620a30"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "web-time"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a6580f308b1fad9207618087a65c04e7a10bc77e02c8e84e9b00dd4b12fa0bb"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "web_atoms"
+version = "0.2.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba8b815c1b593dc0baf78dd0f4fc8fdb2de53198fb1163738093e9a311c33fb3"
+dependencies = [
+ "phf",
+ "phf_codegen",
+ "string_cache",
+ "string_cache_codegen",
+]
+
+[[package]]
+name = "webkit2gtk"
+version = "2.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1027150013530fb2eaf806408df88461ae4815a45c541c8975e61d6f2fc4793"
+dependencies = [
+ "bitflags 1.3.2",
+ "cairo-rs",
+ "gdk",
+ "gdk-sys",
+ "gio",
+ "gio-sys 0.18.1",
+ "glib 0.18.5",
+ "glib-sys 0.18.1",
+ "gobject-sys 0.18.0",
+ "gtk",
+ "gtk-sys",
+ "javascriptcore-rs",
+ "libc",
+ "once_cell",
+ "soup3",
+ "webkit2gtk-sys",
+]
+
+[[package]]
+name = "webkit2gtk-sys"
+version = "2.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "916a5f65c2ef0dfe12fff695960a2ec3d4565359fdbb2e9943c974e06c734ea5"
+dependencies = [
+ "bitflags 1.3.2",
+ "cairo-sys-rs",
+ "gdk-sys",
+ "gio-sys 0.18.1",
+ "glib-sys 0.18.1",
+ "gobject-sys 0.18.0",
+ "gtk-sys",
+ "javascriptcore-rs-sys",
+ "libc",
+ "pkg-config",
+ "soup3-sys",
+ "system-deps 6.2.2",
+]
+
+[[package]]
+name = "webpki-roots"
+version = "1.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52f5ee44c96cf55f1b349600768e3ece3a8f26010c05265ab73f945bb1a2eb9d"
+dependencies = [
+ "rustls-pki-types",
+]
+
+[[package]]
+name = "webrtc"
+version = "0.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fcb3a2644bd34532d3833db59afa27fb41aec0c2ae8d2156e245fd9670c9593f"
+dependencies = [
+ "async-broadcast",
+ "async-channel",
+ "async-trait",
+ "bytes",
+ "event-listener",
+ "futures",
+ "log",
+ "quinn-udp 0.6.1",
+ "rtc",
+ "tokio",
+]
+
+[[package]]
+name = "webview2-com"
+version = "0.38.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7130243a7a5b33c54a444e54842e6a9e133de08b5ad7b5861cd8ed9a6a5bc96a"
+dependencies = [
+ "webview2-com-macros",
+ "webview2-com-sys",
+ "windows 0.61.3",
+ "windows-core 0.61.2",
+ "windows-implement",
+ "windows-interface",
+]
+
+[[package]]
+name = "webview2-com-macros"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67a921c1b6914c367b2b823cd4cde6f96beec77d30a939c8199bb377cf9b9b54"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "webview2-com-sys"
+version = "0.38.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "381336cfffd772377d291702245447a5251a2ffa5bad679c99e61bc48bacbf9c"
+dependencies = [
+ "thiserror 2.0.20",
+ "windows 0.61.3",
+ "windows-core 0.61.2",
+]
+
+[[package]]
+name = "whoami"
+version = "2.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "998767ef88740d1f5b0682a9c53c24431453923962269c2db68ee43788c5a40d"
+dependencies = [
+ "libc",
+ "libredox",
+ "objc2-system-configuration",
+ "wasite",
+ "web-sys",
+]
+
+[[package]]
+name = "widestring"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72069c3113ab32ab29e5584db3c6ec55d416895e60715417b5b883a357c3e471"
+
+[[package]]
+name = "winapi"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419"
+dependencies = [
+ "winapi-i686-pc-windows-gnu",
+ "winapi-x86_64-pc-windows-gnu",
+]
+
+[[package]]
+name = "winapi-i686-pc-windows-gnu"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6"
+
+[[package]]
+name = "winapi-util"
+version = "0.1.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "winapi-x86_64-pc-windows-gnu"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
+
+[[package]]
+name = "window-vibrancy"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d9bec5a31f3f9362f2258fd0e9c9dd61a9ca432e7306cc78c444258f0dce9a9c"
+dependencies = [
+ "objc2 0.6.4",
+ "objc2-app-kit 0.3.2",
+ "objc2-core-foundation",
+ "objc2-foundation 0.3.2",
+ "raw-window-handle",
+ "windows-sys 0.59.0",
+ "windows-version",
+]
+
+[[package]]
+name = "windows"
+version = "0.61.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9babd3a767a4c1aef6900409f85f5d53ce2544ccdfaa86dad48c91782c6d6893"
+dependencies = [
+ "windows-collections 0.2.0",
+ "windows-core 0.61.2",
+ "windows-future 0.2.1",
+ "windows-link 0.1.3",
+ "windows-numerics 0.2.0",
+]
+
+[[package]]
+name = "windows"
+version = "0.62.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "527fadee13e0c05939a6a05d5bd6eec6cd2e3dbd648b9f8e447c6518133d8580"
+dependencies = [
+ "windows-collections 0.3.2",
+ "windows-core 0.62.2",
+ "windows-future 0.3.2",
+ "windows-numerics 0.3.1",
+]
+
+[[package]]
+name = "windows-collections"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3beeceb5e5cfd9eb1d76b381630e82c4241ccd0d27f1a39ed41b2760b255c5e8"
+dependencies = [
+ "windows-core 0.61.2",
+]
+
+[[package]]
+name = "windows-collections"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "23b2d95af1a8a14a3c7367e1ed4fc9c20e0a26e79551b1454d72583c97cc6610"
+dependencies = [
+ "windows-core 0.62.2",
+]
+
+[[package]]
+name = "windows-core"
+version = "0.61.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c0fdd3ddb90610c7638aa2b3a3ab2904fb9e5cdbecc643ddb3647212781c4ae3"
+dependencies = [
+ "windows-implement",
+ "windows-interface",
+ "windows-link 0.1.3",
+ "windows-result 0.3.4",
+ "windows-strings 0.4.2",
+]
+
+[[package]]
+name = "windows-core"
+version = "0.62.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8e83a14d34d0623b51dce9581199302a221863196a1dde71a7663a4c2be9deb"
+dependencies = [
+ "windows-implement",
+ "windows-interface",
+ "windows-link 0.2.1",
+ "windows-result 0.4.1",
+ "windows-strings 0.5.1",
+]
+
+[[package]]
+name = "windows-future"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc6a41e98427b19fe4b73c550f060b59fa592d7d686537eebf9385621bfbad8e"
+dependencies = [
+ "windows-core 0.61.2",
+ "windows-link 0.1.3",
+ "windows-threading 0.1.0",
+]
+
+[[package]]
+name = "windows-future"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e1d6f90251fe18a279739e78025bd6ddc52a7e22f921070ccdc67dde84c605cb"
+dependencies = [
+ "windows-core 0.62.2",
+ "windows-link 0.2.1",
+ "windows-threading 0.2.1",
+]
+
+[[package]]
+name = "windows-implement"
+version = "0.60.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "053e2e040ab57b9dc951b72c264860db7eb3b0200ba345b4e4c3b14f67855ddf"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "windows-interface"
+version = "0.59.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f316c4a2570ba26bbec722032c4099d8c8bc095efccdc15688708623367e358"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "windows-link"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e6ad25900d524eaabdbbb96d20b4311e1e7ae1699af4fb28c17ae66c80d798a"
+
+[[package]]
+name = "windows-link"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
+
+[[package]]
+name = "windows-numerics"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9150af68066c4c5c07ddc0ce30421554771e528bde427614c61038bc2c92c2b1"
+dependencies = [
+ "windows-core 0.61.2",
+ "windows-link 0.1.3",
+]
+
+[[package]]
+name = "windows-numerics"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e2e40844ac143cdb44aead537bbf727de9b044e107a0f1220392177d15b0f26"
+dependencies = [
+ "windows-core 0.62.2",
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "windows-registry"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "02752bf7fbdcce7f2a27a742f798510f3e5ad88dbe84871e5168e2120c3d5720"
+dependencies = [
+ "windows-link 0.2.1",
+ "windows-result 0.4.1",
+ "windows-strings 0.5.1",
+]
+
+[[package]]
+name = "windows-result"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "56f42bd332cc6c8eac5af113fc0c1fd6a8fd2aa08a0119358686e5160d0586c6"
+dependencies = [
+ "windows-link 0.1.3",
+]
+
+[[package]]
+name = "windows-result"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7781fa89eaf60850ac3d2da7af8e5242a5ea78d1a11c49bf2910bb5a73853eb5"
+dependencies = [
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "windows-strings"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "56e6c93f3a0c3b36176cb1327a4958a0353d5d166c2a35cb268ace15e91d3b57"
+dependencies = [
+ "windows-link 0.1.3",
+]
+
+[[package]]
+name = "windows-strings"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7837d08f69c77cf6b07689544538e017c1bfcf57e34b4c0ff58e6c2cd3b37091"
+dependencies = [
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.45.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75283be5efb2831d37ea142365f009c02ec203cd29a3ebecbc093d52315b66d0"
+dependencies = [
+ "windows-targets 0.42.2",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.59.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.60.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2f500e4d28234f72040990ec9d39e3a6b950f9f22d3dba18416c35882612bcb"
+dependencies = [
+ "windows-targets 0.53.5",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.61.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
+dependencies = [
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e5180c00cd44c9b1c88adb3693291f1cd93605ded80c250a75d472756b4d071"
+dependencies = [
+ "windows_aarch64_gnullvm 0.42.2",
+ "windows_aarch64_msvc 0.42.2",
+ "windows_i686_gnu 0.42.2",
+ "windows_i686_msvc 0.42.2",
+ "windows_x86_64_gnu 0.42.2",
+ "windows_x86_64_gnullvm 0.42.2",
+ "windows_x86_64_msvc 0.42.2",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"
+dependencies = [
+ "windows_aarch64_gnullvm 0.52.6",
+ "windows_aarch64_msvc 0.52.6",
+ "windows_i686_gnu 0.52.6",
+ "windows_i686_gnullvm 0.52.6",
+ "windows_i686_msvc 0.52.6",
+ "windows_x86_64_gnu 0.52.6",
+ "windows_x86_64_gnullvm 0.52.6",
+ "windows_x86_64_msvc 0.52.6",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.53.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4945f9f551b88e0d65f3db0bc25c33b8acea4d9e41163edf90dcd0b19f9069f3"
+dependencies = [
+ "windows-link 0.2.1",
+ "windows_aarch64_gnullvm 0.53.1",
+ "windows_aarch64_msvc 0.53.1",
+ "windows_i686_gnu 0.53.1",
+ "windows_i686_gnullvm 0.53.1",
+ "windows_i686_msvc 0.53.1",
+ "windows_x86_64_gnu 0.53.1",
+ "windows_x86_64_gnullvm 0.53.1",
+ "windows_x86_64_msvc 0.53.1",
+]
+
+[[package]]
+name = "windows-threading"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b66463ad2e0ea3bbf808b7f1d371311c80e115c0b71d60efc142cafbcfb057a6"
+dependencies = [
+ "windows-link 0.1.3",
+]
+
+[[package]]
+name = "windows-threading"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3949bd5b99cafdf1c7ca86b43ca564028dfe27d66958f2470940f73d86d75b37"
+dependencies = [
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "windows-version"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e4060a1da109b9d0326b7262c8e12c84df67cc0dbc9e33cf49e01ccc2eb63631"
+dependencies = [
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "597a5118570b68bc08d8d59125332c54f1ba9d9adeedeef5b99b02ba2b0698f8"
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a9d8416fa8b42f5c947f8482c43e7d89e73a173cead56d044f6a56104a6d1b53"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e08e8864a60f06ef0d0ff4ba04124db8b0fb3be5776a5cd47641e942e58c4d43"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9d782e804c2f632e395708e99a94275910eb9100b2114651e04744e9b125006"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c61d927d8da41da96a81f029489353e68739737d3beca43145c8afec9a31a84f"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "960e6da069d81e09becb0ca57a65220ddff016ff2d6af6a223cf372a506593a3"
+
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
+
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fa7359d10048f68ab8b09fa71c3daccfb0e9b559aed648a8f95469c27057180c"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "44d840b6ec649f480a41c8d80f9c65108b92d89345dd94027bfe06ac444d1060"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e7ac75179f18232fe9c285163565a57ef8d3c89254a30685b57d83a38d326c2"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8de912b8b8feb55c064867cf047dda097f92d51efad5b491dfb98f6bbb70cb36"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9c3842cdd74a865a8066ab39c8a7a473c0778a3f29370b5fd6b4b9aa7df4a499"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "26d41b46a36d453748aedef1486d5c7a85db22e56aff34643984ea85514e94a3"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ffa179e2d07eee8ad8f57493436566c7cc30ac536a3379fdf008f47f6bb7ae1"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9aec5da331524158c6d1a4ac0ab1541149c0b9505fde06423b02f5ef0106b9f0"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d6bbff5f0aada427a1e5a6da5f1f98158182f26556f345ac9e04d36d0ebed650"
+
+[[package]]
+name = "winit"
+version = "0.30.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6755fa58a9f8350bd1e472d4c3fcc25f824ec358933bba33306d0b63df5978d"
+dependencies = [
+ "ahash",
+ "android-activity",
+ "atomic-waker",
+ "bitflags 2.13.1",
+ "block2 0.5.1",
+ "bytemuck",
+ "calloop",
+ "cfg_aliases 0.2.2",
+ "concurrent-queue",
+ "core-foundation 0.9.4",
+ "core-graphics 0.23.2",
+ "cursor-icon",
+ "dpi",
+ "js-sys",
+ "libc",
+ "memmap2",
+ "ndk",
+ "objc2 0.5.2",
+ "objc2-app-kit 0.2.2",
+ "objc2-foundation 0.2.2",
+ "objc2-ui-kit 0.2.2",
+ "orbclient",
+ "percent-encoding",
+ "pin-project",
+ "raw-window-handle",
+ "redox_syscall 0.4.1",
+ "rustix 0.38.44",
+ "sctk-adwaita",
+ "smithay-client-toolkit",
+ "smol_str",
+ "tracing",
+ "unicode-segmentation",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "wayland-backend",
+ "wayland-client",
+ "wayland-protocols",
+ "wayland-protocols-plasma",
+ "web-sys",
+ "web-time",
+ "windows-sys 0.52.0",
+ "x11-dl",
+ "x11rb",
+ "xkbcommon-dl",
+]
+
+[[package]]
+name = "winnow"
+version = "0.5.40"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f593a95398737aeed53e489c785df13f3618e41dbcd6718c6addbf1395aa6876"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "winnow"
+version = "0.7.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df79d97927682d2fd8adb29682d1140b343be4ac0f08fd68b7765d9c059d3945"
+
+[[package]]
+name = "winnow"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "23b97319f7b8343df12cc98938e5c3eb436064524c8d2b4e30a1d3a36eecdf81"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "winreg"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "80d0f4e272c85def139476380b12f9ac60926689dd2e01d4923222f40580869d"
+dependencies = [
+ "winapi",
+]
+
+[[package]]
+name = "winreg"
+version = "0.55.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb5a765337c50e9ec252c2069be9bf91c7df47afb103b642ba3a53bf8101be97"
+dependencies = [
+ "cfg-if",
+ "windows-sys 0.59.0",
+]
+
+[[package]]
+name = "winscard"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "12dafb3c1468d0a3f5440e21e51614b53d1fdc62c9f82cc861c447906d09c69a"
+dependencies = [
+ "bitflags 2.13.1",
+ "crypto-bigint 0.7.5",
+ "flate2",
+ "iso7816",
+ "iso7816-tlv",
+ "num-derive",
+ "num-traits",
+ "picky",
+ "picky-asn1-x509",
+ "rsa",
+ "sha1 0.11.0",
+ "time",
+ "tracing",
+ "uuid",
+ "widestring",
+]
+
+[[package]]
+name = "wit-bindgen"
+version = "0.57.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ebf944e87a7c253233ad6766e082e3cd714b5d03812acc24c318f549614536e"
+
+[[package]]
+name = "writeable"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ffae5123b2d3fc086436f8834ae3ab053a283cfac8fe0a0b8eaae044768a4c4"
+
+[[package]]
+name = "wry"
+version = "0.55.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "186f9871daa55fd9c016578b810d149de58367113db7fb72b462d2323ce19514"
+dependencies = [
+ "base64 0.22.1",
+ "block2 0.6.2",
+ "cookie",
+ "crossbeam-channel",
+ "dirs",
+ "dom_query",
+ "dpi",
+ "dunce",
+ "gtk",
+ "http",
+ "javascriptcore-rs",
+ "jni 0.21.1",
+ "libc",
+ "ndk",
+ "objc2 0.6.4",
+ "objc2-app-kit 0.3.2",
+ "objc2-core-foundation",
+ "objc2-foundation 0.3.2",
+ "objc2-ui-kit 0.3.2",
+ "objc2-web-kit",
+ "once_cell",
+ "percent-encoding",
+ "raw-window-handle",
+ "sha2 0.10.9",
+ "soup3",
+ "tao-macros",
+ "thiserror 2.0.20",
+ "url",
+ "webkit2gtk",
+ "webkit2gtk-sys",
+ "webview2-com",
+ "windows 0.61.3",
+ "windows-core 0.61.2",
+ "windows-version",
+]
+
+[[package]]
+name = "wyz"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "05f360fc0b24296329c78fda852a1e9ae82de9cf7b27dae4b7f62f118f77b9ed"
+dependencies = [
+ "tap",
+]
+
+[[package]]
+name = "x11-dl"
+version = "2.21.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "38735924fedd5314a6e548792904ed8c6de6636285cb9fec04d5b1db85c1516f"
+dependencies = [
+ "libc",
+ "once_cell",
+ "pkg-config",
+]
+
+[[package]]
+name = "x11rb"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9993aa5be5a26815fe2c3eacfc1fde061fc1a1f094bf1ad2a18bf9c495dd7414"
+dependencies = [
+ "as-raw-xcb-connection",
+ "gethostname",
+ "libc",
+ "libloading",
+ "once_cell",
+ "rustix 1.1.4",
+ "x11rb-protocol",
+]
+
+[[package]]
+name = "x11rb-protocol"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ea6fc2961e4ef194dcbfe56bb845534d0dc8098940c7e5c012a258bfec6701bd"
+
+[[package]]
+name = "x25519-dalek"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c7e468321c81fb07fa7f4c636c3972b9100f0346e5b6a9f2bd0603a52f7ed277"
+dependencies = [
+ "curve25519-dalek 4.1.3",
+ "rand_core 0.6.4",
+ "serde",
+ "zeroize",
+]
+
+[[package]]
+name = "x25519-dalek"
+version = "3.0.0-rc.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eee64e8620caa64914d669b1f68f858aaff54e2d0f9ad3b30a613b58a1baa83e"
+dependencies = [
+ "curve25519-dalek 5.0.0-rc.1",
+ "rand_core 0.10.1",
+ "zeroize",
+]
+
+[[package]]
+name = "x509-cert"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1301e935010a701ae5f8655edc0ad17c44bad3ac5ce8c39185f75453b720ae94"
+dependencies = [
+ "const-oid 0.9.6",
+ "der 0.7.10",
+ "spki 0.7.3",
+ "tls_codec",
+]
+
+[[package]]
+name = "x509-parser"
+version = "0.16.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fcbc162f30700d6f3f82a24bf7cc62ffe7caea42c0b2cba8bf7f3ae50cf51f69"
+dependencies = [
+ "asn1-rs 0.6.2",
+ "data-encoding",
+ "der-parser 9.0.0",
+ "lazy_static",
+ "nom",
+ "oid-registry 0.7.1",
+ "rusticata-macros",
+ "thiserror 1.0.69",
+ "time",
+]
+
+[[package]]
+name = "x509-parser"
+version = "0.18.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d43b0f71ce057da06bc0851b23ee24f3f86190b07203dd8f567d0b706a185202"
+dependencies = [
+ "asn1-rs 0.7.2",
+ "data-encoding",
+ "der-parser 10.0.0",
+ "lazy_static",
+ "nom",
+ "oid-registry 0.8.1",
+ "ring",
+ "rusticata-macros",
+ "thiserror 2.0.20",
+ "time",
+]
+
+[[package]]
+name = "xcursor"
+version = "0.3.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "163b33ed8786455e2fa5d72f554057ce3f3182425434f756cd39c99839d88e23"
+
+[[package]]
+name = "xkbcommon"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a7a974f48060a14e95705c01f24ad9c3345022f4d97441b8a36beb7ed5c4a02d"
+dependencies = [
+ "libc",
+ "memmap2",
+ "xkeysym",
+]
+
+[[package]]
+name = "xkbcommon-dl"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d039de8032a9a8856a6be89cea3e5d12fdd82306ab7c94d74e6deab2460651c5"
+dependencies = [
+ "bitflags 2.13.1",
+ "dlib",
+ "log",
+ "once_cell",
+ "xkeysym",
+]
+
+[[package]]
+name = "xkeysym"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9cc00251562a284751c9973bace760d86c0276c471b4be569fe6b068ee97a56"
+
+[[package]]
+name = "yasna"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b5f6765e852b9b4dc8e2a76843e4d64d1cea8e79bcde0b6901aea8e7c7f08282"
+dependencies = [
+ "bit-vec 0.9.1",
+ "time",
+]
+
+[[package]]
+name = "yoke"
+version = "0.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "709fe23a0424b6a435d82152b1bd3fdfb0833487d5fa90d05d42762a9891fef5"
+dependencies = [
+ "stable_deref_trait",
+ "yoke-derive",
+ "zerofrom",
+]
+
+[[package]]
+name = "yoke-derive"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "de844c262c8848816172cef550288e7dc6c7b7814b4ee56b3e1553f275f1858e"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+ "synstructure",
+]
+
+[[package]]
+name = "yuv"
+version = "0.8.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "220655e1c245693beb13b377d3174b9efcb1645018d1d4ec53903fc211b135ae"
+dependencies = [
+ "num-traits",
+]
+
+[[package]]
+name = "zbus"
+version = "5.19.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5db4be7c075cb421e4b7ee645541604239bd243ba7c357511f4ff3a74b555907"
+dependencies = [
+ "async-broadcast",
+ "async-recursion",
+ "async-trait",
+ "enumflags2",
+ "event-listener",
+ "futures-core",
+ "futures-lite",
+ "hex",
+ "libc",
+ "ordered-stream",
+ "rustix 1.1.4",
+ "serde",
+ "serde_repr",
+ "tokio",
+ "tracing",
+ "uds_windows",
+ "uuid",
+ "windows-sys 0.61.2",
+ "winnow 1.0.4",
+ "zbus_macros",
+ "zbus_names",
+ "zvariant",
+]
+
+[[package]]
+name = "zbus_macros"
+version = "5.19.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2990635d09ade6df1868f72f8cac69a876a90981e8bd3c40b1be413f8dc88f40"
+dependencies = [
+ "proc-macro-crate 3.5.0",
+ "proc-macro2",
+ "quote",
+ "syn 3.0.3",
+ "zbus_names",
+ "zvariant",
+ "zvariant_utils",
+]
+
+[[package]]
+name = "zbus_names"
+version = "4.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8bf88b4a3ff53e883001e0e0115b297a9d53c31b9c1edd2bfdd853e3428624e"
+dependencies = [
+ "serde",
+ "winnow 1.0.4",
+ "zvariant",
+]
+
+[[package]]
+name = "zcheapstr"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d1afec51604565183aeb5c54c20aeab286120d4e4460f7f76e3e8bb8c0d99473"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "zerocopy"
+version = "0.8.56"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "556764e583adb45a9f8d413c2a147fa7e8d821e48e12b14fd560b607998b75eb"
+dependencies = [
+ "zerocopy-derive",
+]
+
+[[package]]
+name = "zerocopy-derive"
+version = "0.8.56"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2ab42fc20575779bd240faa45f94a74256f755c0fa9e89f0ede20d91d0cdfc1"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "zerofrom"
+version = "0.1.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ec05a11813ea801ff6d75110ad09cd0824ddba17dfe17128ea0d5f68e6c5272"
+dependencies = [
+ "zerofrom-derive",
+]
+
+[[package]]
+name = "zerofrom-derive"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "11532158c46691caf0f2593ea8358fed6bbf68a0315e80aae9bd41fbade684a1"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+ "synstructure",
+]
+
+[[package]]
+name = "zeroize"
+version = "1.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e13c156562582aa81c60cb29407084cdb54c4164760106ab78e6c5b0858cf64e"
+dependencies = [
+ "zeroize_derive",
+]
+
+[[package]]
+name = "zeroize_derive"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3c50655cbb0fe3fc43170059e702f1ce5e19b84cec58dc87b037a09935c2f328"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "zerotrie"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0f9152d31db0792fa83f70fb2f83148effb5c1f5b8c7686c3459e361d9bc20bf"
+dependencies = [
+ "displaydoc",
+ "yoke",
+ "zerofrom",
+]
+
+[[package]]
+name = "zerovec"
+version = "0.11.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "90f911cbc359ab6af17377d242225f4d75119aec87ea711a880987b18cd7b239"
+dependencies = [
+ "yoke",
+ "zerofrom",
+ "zerovec-derive",
+]
+
+[[package]]
+name = "zerovec-derive"
+version = "0.11.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "625dc425cab0dca6dc3c3319506e6593dcb08a9f387ea3b284dbd52a92c40555"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "zmij"
+version = "1.0.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b"
+
+[[package]]
+name = "zvariant"
+version = "5.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b5e28c25bd8bb8da5a1f3e7065d0c156b9ee9a7973adf78b0e35eaefdf3b1b5c"
+dependencies = [
+ "endi",
+ "enumflags2",
+ "serde",
+ "winnow 1.0.4",
+ "zcheapstr",
+ "zvariant_derive",
+ "zvariant_utils",
+]
+
+[[package]]
+name = "zvariant_derive"
+version = "5.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d496a145685283b67e232bd9e47377f6b60ad9d51e3601b23867f77c42477f96"
+dependencies = [
+ "proc-macro-crate 3.5.0",
+ "proc-macro2",
+ "quote",
+ "syn 3.0.3",
+ "zvariant_utils",
+]
+
+[[package]]
+name = "zvariant_utils"
+version = "4.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "629d80ece222cad20fe0e8741be493c4ab166acf3b85341bdc2cdbcfd8f3c2d6"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "serde",
+ "syn 3.0.3",
+ "winnow 1.0.4",
+]
diff --git a/Cargo.toml b/Cargo.toml
new file mode 100644
index 0000000..7f6940c
--- /dev/null
+++ b/Cargo.toml
@@ -0,0 +1,36 @@
+[workspace]
+resolver = "3"
+members = [
+    "agent/agent-core",
+    "agent/agent-runtime",
+    "agent/windows-agent",
+    "client/app-shell",
+    "client/crates/client-core",
+    "client/helpers/control-service",
+    "client/helpers/credential-store",
+    "client/helpers/linux-terminal",
+    "client/helpers/native-video",
+    "client/helpers/rdp-session",
+    "client/helpers/rdp-viewer",
+    "client/helpers/windows-agent-viewer",
+    "edge/edge-service",
+    "protocol",
+]
+
+[workspace.package]
+version = "0.2.19"
+edition = "2024"
+license = "MIT OR Apache-2.0"
+rust-version = "1.89"
+
+[workspace.lints.rust]
+unsafe_code = "forbid"
+
+[workspace.lints.clippy]
+all = "warn"
+pedantic = "warn"
+
+[patch.crates-io]
+ironrdp-client = { path = "vendor/ironrdp-client" }
+ironrdp-tls = { path = "vendor/ironrdp-tls" }
+ironrdp-viewer = { path = "vendor/ironrdp-viewer" }
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..4555ff5
--- /dev/null
+++ b/README.md
@@ -0,0 +1,113 @@
+# RemoteDesk
+
+RemoteDesk 是一套面向个人工作站的 Windows 远程桌面客户端。项目不包含 VDI、桌面池或多租户调度，重点是从 Windows 控制端连接 Windows 和现代 Linux 被控端。
+
+## 产品定位
+
+RemoteDesk 采用双通道设计：
+
+- Windows 被控端：使用系统自带的 RDP 服务，由独立 Rust/IronRDP 原生会话进程连接。
+- Linux 被控端：安装自研 RemoteDesk Linux Agent，支持 Wayland、Xorg 桌面和纯命令行终端。
+- Windows 控制端：提供唯一的桌面客户端，Linux 不提供控制端 UI。
+
+```text
+                         +----------------------+
+                         |   RemoteDesk Client  |
+                         | Tauri + Rust helpers  |
+                         +----------+-----------+
+                                    |
+                     +--------------+--------------+
+                     |                             |
+                  RDP channel                Native channel
+                     |                    WebRTC + DataChannel
+                     |                             |
+              Windows RDP               RemoteDesk Linux Agent
+```
+
+## 目标能力
+
+以下内容是项目路线目标，不表示当前仓库已经全部实现。实际可运行范围以 [实现状态](docs/implementation-status.md) 和 [使用指南](docs/user-guide.md) 为准。
+
+- Windows 和 Linux 连接配置统一管理。
+- RDP 全屏、动态分辨率、多显示器、音频和剪贴板。
+- 远程分辨率支持自动跟随、原始分辨率、720p/1080p/1440p/4K 固定档和自定义尺寸。
+- 自研 Linux Agent 支持 Wayland、Xorg 当前会话和无桌面的命令行终端。
+- 命令行会话使用 PTY，以指定普通用户运行，不要求图形桌面已登录。
+- H.264 默认视频编码，按硬件能力扩展 HEVC 和 AV1。
+- Linux 桌面默认要求双端零拷贝：Agent 使用 DMA-BUF 硬件编码，Windows 原生 helper 使用 D3D11 surface 解码与呈现。
+- 客户端 GPU 默认自动选择，也支持全局或单主机手动指定。
+- 多显示器支持主屏、全部和自定义子集，保留负坐标、混合 DPI 与布局 generation。
+- RDP 主机使用 Windows Credential Manager 引用，HostProfile 不保存账号密码。
+- 断线重连、连接质量统计和自适应画质。
+- 智能比较直连与 CDN 路径；CDN 模式让两端进入最近 POP，并通过优质骨干网传输。
+- 使用系统密钥库保存凭据。
+
+## 明确不做
+
+- 不从零实现 RDP 协议，也不引入 C++/FreeRDP 客户端。
+- 不承诺 Windows 系统 RDP 服务端内部零拷贝；只能验证并报告 IronRDP 客户端实际得到 GPU surface 还是 CPU bitmap。
+- 不使用 JavaScript、Tauri IPC 或 CPU buffer 传递 Linux 桌面原始视频帧；WebView2 `<video>` 仅保留为显式兼容模式。
+- 不提供 VDI 桌面池、模板克隆和用户调度。
+- 不承诺所有 Wayland 合成器均支持无人值守控制。
+- 不使用缓存型 CDN 转码或缓存远程桌面内容。
+- 首期边缘模式不依赖完整云账号体系，设备权限仍由 Agent 本地保存。
+- 不依赖 xrdp、GNOME Remote Desktop 或 KDE KRdp。
+- 首个稳定版本不承诺在所有 Wayland 桌面上控制登录界面。
+
+## 技术基线
+
+| 模块 | 技术 |
+|---|---|
+| Windows 桌面客户端 | Tauri 2、React/TypeScript、Rust |
+| RDP 通道 | 独立 Rust helper、IronRDP、D3D11 |
+| Linux Agent | Rust、Tokio、PipeWire/Portal/libei、X11、PTY/PAM |
+| 媒体 | GStreamer、硬件编码、Opus |
+| Linux 会话显示 | 默认 Rust/GStreamer/D3D11 原生零拷贝 helper；WebView2 仅兼容模式 |
+| 命令行显示 | xterm.js + WebRTC DataChannel |
+| 本地数据 | SQLite |
+| 凭据 | Windows Credential Manager |
+| 边缘中继 | Rust Rendezvous/Allocator、双 POP TURN、优质骨干网 |
+| 静态 CDN | 签名 MSI/DEB/RPM、更新 manifest、SBOM |
+
+具体依赖版本在进入编码阶段时锁定到当时可用的稳定版本。
+
+## 仓库规划
+
+```text
+RemoteDesk/
+├── client/                     # Tauri UI 与 Rust native helpers
+├── agent/                      # Rust Linux Agent workspace
+├── protocol/                   # Protobuf 契约和兼容性测试
+├── edge/                       # 独立 Edge Presence/Allocator/byte relay
+├── packaging/                  # Windows、Linux Agent 和 Edge 打包
+├── tests/                      # 集成和端到端测试
+└── docs/
+    ├── architecture.md
+    └── roadmap.md
+```
+
+## 设计文档
+
+- [实现状态](docs/implementation-status.md)
+- [使用指南](docs/user-guide.md)
+- [总体架构](docs/architecture.md)
+- [Windows 客户端设计](docs/windows-client.md)
+- [Linux 被控端设计](docs/linux-agent.md)
+- [技术栈规划](docs/technology-stack.md)
+- [协议设计](docs/protocol.md)
+- [安全设计](docs/security.md)
+- [差网络自适应](docs/network-adaptation.md)
+- [CDN 与边缘中继](docs/edge-relay.md)
+- [客户端 GPU 加速](docs/gpu-acceleration.md)
+- [在线升级](docs/online-updates.md)
+- [M0 技术验证](docs/m0-validation.md)
+- [实施路线](docs/roadmap.md)
+- [开发指南](docs/development.md)
+
+## 当前代码
+
+当前工程已包含 Rust workspace、协议状态模型、多显示器布局、Windows Client Core、RDP 地址校验、回环控制服务、无凭据 IronRDP 协议与 TLS 证书探测、证书指纹固定、Windows Credential Manager 凭据适配器、外部 `mstsc`、带有界自动重连和 D3D11 CPU-upload swap chain 的 IronRDP 原生窗口、Ed25519 签名清单在线升级、native-video 管线规划与真实 D3D11 设备探针，以及 React 管理界面。被控端新增了可逆配置 Microsoft RDP 的独立 Windows Host MSI，以及包含 `agentd`、用户会话进程、PAM/PTY 终端进程、支持双向断点续传的文件进程、配对/WSS/Unix IPC、systemd、DEB/RPM/静态便携构建链的 Linux Agent 基础。独立 Edge 服务已实现短 TTL Presence、测量路径分配、coturn REST 短期凭据、限额透明 TCP byte relay 和接受会话内两端设备 key 签名的 SDP/ICE mailbox，并已接通 Linux 首次配对、终端/文件的签名准入、角色票据及端到端 TLS/WSS opaque relay。接受的桌面会话新增双方 PeerConnection、逐候选 ICE、session-bound TURN 凭据和 H.264/RTX/Opus/DataChannel 传输内核源码；Linux 用户会话将同一次 X11 BGRA 捕获送入 GStreamer H.264 编码器，经严格有界、分块和 SHA-256 校验的 root/user IPC 交给精确绑定用户及 Client 指纹的 WebRTC sender。Windows 控制 helper 已接入有界 RFC 6184 RTP 重组、丢包/积压后 PLI 与关键帧恢复，以及 Media Foundation H.264 MFT 到同 device NV12/D3D11 VideoProcessor/swap-chain 的原生呈现源码。协议 minor 14 还接入显式协商的 Linux 系统输出 Opus 捕获、有界 IPC/WebRTC 发送和 Windows WASAPI 本地播放；minor 15 增加独立 `clipboard_read`/`clipboard_write` 授权、X11 与 Windows `CF_UNICODETEXT` 双向文本剪贴板和 Offer/Request/Data 按需传输源码；RDP Edge 尚未接入。
+
+`transport/hysteria2-agent` 另提供基于官方 Hysteria2 Go `core/v2` 的 UDP/QUIC 入口和客户端适配器。该入口只允许密码认证的 Hysteria2 UDP 会话，公网不开放 TCP、TCP proxy 或 SOCKS5；报文交付到本机 UDP 适配端口。现有 Rust Agent 的 TCP/WSS 会话协议尚未改为 UDP 数据报协议，因此该入口目前是可部署的传输适配层，不宣称桌面会话已直接接通。
+
+Linux 图形的 X11 zlib 兼容捕获/输入、GStreamer H.264 WebRTC 发送端和 Windows 原生远端 H.264 接收/解码/呈现已接入源码；协议 minor 9 在首张原生帧后切换到 H.264-only，以呈现 ACK 驱动捕获并在丢包或媒体失败时恢复 zlib，避免长期双路传输完整画面。协议 minor 10 进一步接入显式光标抓取、Windows Raw Input 合并、有界相对鼠标和 XTEST 相对移动，失焦/重连/退出会解除抓取并释放远端输入。协议 minor 11 已接入认证后的 Wayland Portal、严格 PipeWire DMABUF-to-VA-H.264、呈现 ACK、resize 重建和 `reis` EIS 输入源码；minor 12 在断线后释放全部输入并保留 15 秒 Portal/EIS 租约，只有相同 Client 指纹、Linux 用户和轮换令牌才能使用新 WebRTC sender 恢复，并从新 IDR 继续。协议 minor 13 将现有 PeerConnection 媒体内核抽象为认证信令接口，直连 Client/Agent 可在证书固定、Ed25519 认证后的 WSS 上交换严格有界的 SDP/ICE，使用 host-candidate ICE 建立 H.264/RTX/Opus/DataChannel；失败经显式 abort/unavailable 同步后，X11 才回到 zlib，Wayland 仍拒绝 CPU 回退。minor 14 为直连和 Edge 桌面请求增加默认关闭的 Opus 协商，只有同版本 Client 显式开启且已取得授权媒体 sender 时才捕获 Linux 输出 monitor，并在 Windows 通过 IronRDP Opus 解码器和 WASAPI 播放；视频与音频失败互不连带。minor 15 的 X11 文本剪贴板只在双方显式协商对应方向且配对授权包含相同权限时启用，内容限制为规范化 UTF-8 文本和 32 KiB；Wayland 剪贴板仍未接入。新增媒体、音频、剪贴板路径和 GNOME/KDE/Xorg 实机验证仍未执行，因此运行时继续报告 `linux.wayland_desktop=false` 与 `linux.native_video=false`。Linux Terminal 的 Windows 控制 helper 已接通 WSS、证书固定、Ed25519 配对认证和 PTY 字节流，但尚未在真实 Linux/PAM 主机完成端到端运行验证。真实 PipeWire/DRI3/D3D11 呈现/Tauri 继续按 M0 技术验证计划逐项实现，不以模拟代码或仅存在安装包来代替平台验证。Windows Credential Manager 的写入、状态、删除、IronRDP NLA 凭据读取和 Linux 客户端身份存储已接入。
diff --git a/agent/agent-core/Cargo.toml b/agent/agent-core/Cargo.toml
new file mode 100644
index 0000000..846da31
--- /dev/null
+++ b/agent/agent-core/Cargo.toml
@@ -0,0 +1,16 @@
+[package]
+name = "remotedesk-agent-core"
+version.workspace = true
+edition.workspace = true
+license.workspace = true
+rust-version.workspace = true
+description = "Platform-independent policy core for the RemoteDesk Linux agent"
+
+[lib]
+path = "src/lib.rs"
+
+[dependencies]
+remotedesk-protocol = { path = "../../protocol" }
+
+[lints]
+workspace = true
diff --git a/agent/agent-core/src/lib.rs b/agent/agent-core/src/lib.rs
new file mode 100644
index 0000000..4ab95b0
--- /dev/null
+++ b/agent/agent-core/src/lib.rs
@@ -0,0 +1,960 @@
+//! Platform-independent policy and state management for the Linux agent.
+//!
+//! This crate deliberately contains no `PipeWire`, `DRI3`, encoder, or GPU API
+//! implementation. Platform adapters must probe the real system and pass their
+//! observed results into these types.
+
+use std::fmt;
+
+use remotedesk_protocol::MemoryPathStatus;
+
+pub use remotedesk_protocol::{
+    DisplayDescriptor, DisplayId, DisplayLayout, DisplayRect, DisplayScale, DisplaySelection,
+    DisplaySelectionMode, ZeroCopyPolicy,
+};
+
+mod multi_display;
+
+pub use multi_display::{
+    DesktopBounds, DisplayCaptureSource, DisplayImportProbe, DisplayPathPlan,
+    MultiDisplayCapturePlan, MultiDisplayCompliance, MultiDisplayGpuCandidate,
+    MultiDisplayPipeline, MultiDisplayPipelineError, MultiDisplayPlanError, NormalizedPoint,
+    SelectedDisplayLayout, SelectedDisplaySource,
+};
+
+/// Capture mechanisms exposed by the Linux agent.
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub enum DesktopBackend {
+    WaylandPipeWire,
+    XorgPortalPipeWire,
+    XorgDri3Experimental,
+    XorgShmCompatibility,
+    Terminal,
+}
+
+impl DesktopBackend {
+    #[must_use]
+    pub const fn is_experimental(self) -> bool {
+        matches!(self, Self::XorgDri3Experimental)
+    }
+
+    #[must_use]
+    pub const fn carries_video(self) -> bool {
+        !matches!(self, Self::Terminal)
+    }
+}
+
+/// A stable adapter identity supplied by a platform-specific GPU enumerator.
+#[derive(Clone, Debug, Eq, Hash, Ord, PartialEq, PartialOrd)]
+pub struct AdapterId(String);
+
+impl AdapterId {
+    /// Creates a stable adapter identifier.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`ConfigurationError::EmptyAdapterId`] for an empty or
+    /// whitespace-only identifier.
+    pub fn new(value: impl Into<String>) -> Result<Self, ConfigurationError> {
+        let value = value.into();
+        if value.trim().is_empty() {
+            return Err(ConfigurationError::EmptyAdapterId);
+        }
+        Ok(Self(value))
+    }
+
+    #[must_use]
+    pub fn as_str(&self) -> &str {
+        &self.0
+    }
+}
+
+impl fmt::Display for AdapterId {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        self.0.fmt(formatter)
+    }
+}
+
+/// The memory path actually observed by a capture backend.
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub enum CaptureMemoryPath {
+    /// A DMA-BUF remains on the adapter that produced it.
+    DmaBuf { adapter: AdapterId },
+    /// Frames are read into CPU-addressable memory, such as `XShm`.
+    CpuMemory,
+    /// The backend reports GPU ownership but cannot prove its memory path.
+    OpaqueGpu { adapter: Option<AdapterId> },
+}
+
+impl CaptureMemoryPath {
+    #[must_use]
+    pub fn adapter(&self) -> Option<&AdapterId> {
+        match self {
+            Self::DmaBuf { adapter } => Some(adapter),
+            Self::OpaqueGpu { adapter } => adapter.as_ref(),
+            Self::CpuMemory => None,
+        }
+    }
+
+    /// Maps the observed capture memory to its protocol report status.
+    #[must_use]
+    pub const fn protocol_status(&self) -> MemoryPathStatus {
+        match self {
+            Self::DmaBuf { .. } => MemoryPathStatus::CpuCopyFree,
+            Self::CpuMemory => MemoryPathStatus::Software,
+            Self::OpaqueGpu { .. } => MemoryPathStatus::Opaque,
+        }
+    }
+}
+
+/// The result of trying to import the capture surface into one encoder candidate.
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub enum ImportProbeResult {
+    /// Import succeeded without CPU mapping or an inter-adapter transfer.
+    SameAdapterZeroCopy,
+    /// Import works only after copying from the named source adapter.
+    CrossAdapterCopy { source_adapter: AdapterId },
+    /// Encoding requires an upload from CPU-addressable memory.
+    CpuUpload,
+    /// Frames remain in CPU memory and are encoded in software.
+    Software,
+    /// The driver accepts the surface but cannot expose enough detail to verify it.
+    OpaqueGpuPath,
+    /// The candidate cannot encode this capture surface.
+    Unsupported { reason: String },
+}
+
+impl ImportProbeResult {
+    /// Maps a completed import probe to a protocol status. Unsupported probes
+    /// cannot produce a path report and therefore map to `None`.
+    #[must_use]
+    pub const fn protocol_status(&self) -> Option<MemoryPathStatus> {
+        match self {
+            Self::SameAdapterZeroCopy => Some(MemoryPathStatus::SameAdapterGpuTransform),
+            Self::CrossAdapterCopy { .. } => Some(MemoryPathStatus::CrossAdapterCopy),
+            Self::CpuUpload => Some(MemoryPathStatus::CpuUpload),
+            Self::Software => Some(MemoryPathStatus::Software),
+            Self::OpaqueGpuPath => Some(MemoryPathStatus::Opaque),
+            Self::Unsupported { .. } => None,
+        }
+    }
+}
+
+/// One encoder discovered and probed by the platform integration layer.
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct GpuCandidate {
+    pub adapter: AdapterId,
+    pub encoder_name: String,
+    pub import_probe: ImportProbeResult,
+}
+
+impl GpuCandidate {
+    /// Creates a candidate from a platform import probe.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`ConfigurationError::EmptyEncoderName`] when `encoder_name`
+    /// is empty or contains only whitespace.
+    pub fn new(
+        adapter: AdapterId,
+        encoder_name: impl Into<String>,
+        import_probe: ImportProbeResult,
+    ) -> Result<Self, ConfigurationError> {
+        let encoder_name = encoder_name.into();
+        if encoder_name.trim().is_empty() {
+            return Err(ConfigurationError::EmptyEncoderName);
+        }
+        Ok(Self {
+            adapter,
+            encoder_name,
+            import_probe,
+        })
+    }
+}
+
+/// The transfer mode selected for capture-to-encode.
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub enum TransferMode {
+    SameAdapterZeroCopy,
+    CrossAdapterCopy,
+    CpuUpload,
+    Software,
+    OpaqueGpuPath,
+}
+
+impl TransferMode {
+    #[must_use]
+    pub const fn is_verified_zero_copy(self) -> bool {
+        self.protocol_status().satisfies_strict_zero_copy()
+    }
+
+    /// Maps the selected capture-to-encode transfer to its protocol status.
+    #[must_use]
+    pub const fn protocol_status(self) -> MemoryPathStatus {
+        match self {
+            Self::SameAdapterZeroCopy => MemoryPathStatus::SameAdapterGpuTransform,
+            Self::CrossAdapterCopy => MemoryPathStatus::CrossAdapterCopy,
+            Self::CpuUpload => MemoryPathStatus::CpuUpload,
+            Self::Software => MemoryPathStatus::Software,
+            Self::OpaqueGpuPath => MemoryPathStatus::Opaque,
+        }
+    }
+}
+
+/// A selected encoder and the memory behavior that justified the selection.
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct EncoderSelection {
+    pub adapter: AdapterId,
+    pub encoder_name: String,
+    pub transfer_mode: TransferMode,
+}
+
+impl EncoderSelection {
+    /// Returns the status that must be placed in the Agent path report.
+    #[must_use]
+    pub const fn protocol_status(&self) -> MemoryPathStatus {
+        self.transfer_mode.protocol_status()
+    }
+}
+
+/// Selects the best encoder from real import-probe results.
+///
+/// A verified same-adapter import always wins. Compatibility mode then prefers
+/// cross-adapter GPU copy, CPU upload, and opaque paths in that order.
+///
+/// # Errors
+///
+/// Returns [`SelectionError`] when the backend has no video pipeline, the
+/// capture result conflicts with the backend, the requested policy rejects the
+/// observed memory path, or no usable encoder probe is available.
+pub fn select_encoder(
+    backend: DesktopBackend,
+    policy: ZeroCopyPolicy,
+    capture: &CaptureMemoryPath,
+    candidates: &[GpuCandidate],
+) -> Result<EncoderSelection, SelectionError> {
+    if !backend.carries_video() {
+        return Err(SelectionError::TerminalHasNoVideoPipeline);
+    }
+
+    validate_capture_for_backend(backend, capture)?;
+
+    if policy == ZeroCopyPolicy::RequiredEndToEnd
+        && !capture.protocol_status().satisfies_strict_zero_copy()
+    {
+        return Err(SelectionError::StrictPolicyRejectedCapture {
+            path: capture.clone(),
+        });
+    }
+
+    let same_adapter_selection = if let CaptureMemoryPath::DmaBuf {
+        adapter: capture_adapter,
+    } = capture
+    {
+        candidates
+            .iter()
+            .find(|candidate| {
+                candidate.adapter == *capture_adapter
+                    && candidate.import_probe == ImportProbeResult::SameAdapterZeroCopy
+            })
+            .map(|candidate| selection(candidate, TransferMode::SameAdapterZeroCopy))
+    } else {
+        None
+    };
+
+    let selected = match same_adapter_selection
+        .or_else(|| select_compatibility_fallback(capture, candidates))
+    {
+        Some(selected) => selected,
+        None if policy == ZeroCopyPolicy::RequiredEndToEnd => {
+            return Err(SelectionError::NoVerifiedSameAdapterEncoder {
+                capture_adapter: capture.adapter().cloned(),
+            });
+        }
+        None => return Err(SelectionError::NoCompatibleEncoder),
+    };
+
+    if policy == ZeroCopyPolicy::RequiredEndToEnd
+        && !selected.protocol_status().satisfies_strict_zero_copy()
+    {
+        return Err(SelectionError::NoVerifiedSameAdapterEncoder {
+            capture_adapter: capture.adapter().cloned(),
+        });
+    }
+
+    Ok(selected)
+}
+
+fn validate_capture_for_backend(
+    backend: DesktopBackend,
+    capture: &CaptureMemoryPath,
+) -> Result<(), SelectionError> {
+    match (backend, capture) {
+        (
+            DesktopBackend::WaylandPipeWire
+            | DesktopBackend::XorgPortalPipeWire
+            | DesktopBackend::XorgDri3Experimental
+            | DesktopBackend::XorgShmCompatibility,
+            CaptureMemoryPath::CpuMemory,
+        ) => Ok(()),
+        (DesktopBackend::XorgShmCompatibility, _) => {
+            Err(SelectionError::BackendCaptureMismatch { backend })
+        }
+        (DesktopBackend::Terminal, _) => Err(SelectionError::TerminalHasNoVideoPipeline),
+        _ => Ok(()),
+    }
+}
+
+fn select_compatibility_fallback(
+    capture: &CaptureMemoryPath,
+    candidates: &[GpuCandidate],
+) -> Option<EncoderSelection> {
+    const FALLBACKS: [TransferMode; 4] = [
+        TransferMode::CrossAdapterCopy,
+        TransferMode::CpuUpload,
+        TransferMode::Software,
+        TransferMode::OpaqueGpuPath,
+    ];
+
+    FALLBACKS.into_iter().find_map(|mode| {
+        candidates
+            .iter()
+            .find(|candidate| probe_matches(mode, capture, candidate))
+            .map(|candidate| selection(candidate, mode))
+    })
+}
+
+fn probe_matches(
+    mode: TransferMode,
+    capture: &CaptureMemoryPath,
+    candidate: &GpuCandidate,
+) -> bool {
+    match (mode, &candidate.import_probe) {
+        (
+            TransferMode::CrossAdapterCopy,
+            ImportProbeResult::CrossAdapterCopy { source_adapter },
+        ) => capture.adapter() == Some(source_adapter) && candidate.adapter != *source_adapter,
+        (TransferMode::CpuUpload, ImportProbeResult::CpuUpload)
+        | (TransferMode::Software, ImportProbeResult::Software)
+        | (TransferMode::OpaqueGpuPath, ImportProbeResult::OpaqueGpuPath) => true,
+        _ => false,
+    }
+}
+
+fn selection(candidate: &GpuCandidate, transfer_mode: TransferMode) -> EncoderSelection {
+    EncoderSelection {
+        adapter: candidate.adapter.clone(),
+        encoder_name: candidate.encoder_name.clone(),
+        transfer_mode,
+    }
+}
+
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub enum ConfigurationError {
+    EmptyAdapterId,
+    EmptyEncoderName,
+    InvalidResolution { width: u32, height: u32 },
+}
+
+impl fmt::Display for ConfigurationError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        match self {
+            Self::EmptyAdapterId => formatter.write_str("adapter id must not be empty"),
+            Self::EmptyEncoderName => formatter.write_str("encoder name must not be empty"),
+            Self::InvalidResolution { width, height } => {
+                write!(formatter, "invalid resolution {width}x{height}")
+            }
+        }
+    }
+}
+
+impl std::error::Error for ConfigurationError {}
+
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub enum SelectionError {
+    TerminalHasNoVideoPipeline,
+    BackendCaptureMismatch { backend: DesktopBackend },
+    StrictPolicyRejectedCapture { path: CaptureMemoryPath },
+    NoVerifiedSameAdapterEncoder { capture_adapter: Option<AdapterId> },
+    NoCompatibleEncoder,
+}
+
+impl fmt::Display for SelectionError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        match self {
+            Self::TerminalHasNoVideoPipeline => {
+                formatter.write_str("terminal sessions do not use a video pipeline")
+            }
+            Self::BackendCaptureMismatch { backend } => {
+                write!(
+                    formatter,
+                    "capture memory path does not match backend {backend:?}"
+                )
+            }
+            Self::StrictPolicyRejectedCapture { path } => {
+                write!(
+                    formatter,
+                    "strict zero-copy policy rejected capture path {path:?}"
+                )
+            }
+            Self::NoVerifiedSameAdapterEncoder { capture_adapter } => write!(
+                formatter,
+                "no verified same-adapter encoder for capture adapter {capture_adapter:?}"
+            ),
+            Self::NoCompatibleEncoder => formatter.write_str("no compatible encoder was found"),
+        }
+    }
+}
+
+impl std::error::Error for SelectionError {}
+
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub struct Resolution {
+    pub width: u32,
+    pub height: u32,
+}
+
+impl Resolution {
+    /// Creates non-zero output dimensions.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`ConfigurationError::InvalidResolution`] when either dimension
+    /// is zero.
+    pub fn new(width: u32, height: u32) -> Result<Self, ConfigurationError> {
+        if width == 0 || height == 0 {
+            return Err(ConfigurationError::InvalidResolution { width, height });
+        }
+        Ok(Self { width, height })
+    }
+}
+
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub enum PipelineState {
+    Active,
+    Revalidating,
+}
+
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub enum PipelineTransitionError {
+    InvalidState {
+        expected: PipelineState,
+        actual: PipelineState,
+    },
+    SelectionRejectedByPolicy {
+        policy: ZeroCopyPolicy,
+        status: MemoryPathStatus,
+    },
+}
+
+impl fmt::Display for PipelineTransitionError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        match self {
+            Self::InvalidState { expected, actual } => write!(
+                formatter,
+                "pipeline transition requires {expected:?}, but current state is {actual:?}"
+            ),
+            Self::SelectionRejectedByPolicy { policy, status } => write!(
+                formatter,
+                "pipeline policy {policy:?} rejected memory path status {status:?}"
+            ),
+        }
+    }
+}
+
+impl std::error::Error for PipelineTransitionError {}
+
+/// Tracks the generation that has been validated for the active dimensions.
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct VideoPipeline {
+    policy: ZeroCopyPolicy,
+    resolution: Resolution,
+    epoch: u64,
+    state: PipelineState,
+    selection: Option<EncoderSelection>,
+}
+
+impl VideoPipeline {
+    /// Creates an active pipeline after validating its initial selection.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`PipelineTransitionError::SelectionRejectedByPolicy`] when a
+    /// required end-to-end zero-copy pipeline is given a non-compliant path.
+    pub fn active(
+        policy: ZeroCopyPolicy,
+        resolution: Resolution,
+        selection: EncoderSelection,
+    ) -> Result<Self, PipelineTransitionError> {
+        validate_selection_for_policy(policy, &selection)?;
+        Ok(Self {
+            policy,
+            resolution,
+            epoch: 0,
+            state: PipelineState::Active,
+            selection: Some(selection),
+        })
+    }
+
+    #[must_use]
+    pub const fn policy(&self) -> ZeroCopyPolicy {
+        self.policy
+    }
+
+    #[must_use]
+    pub const fn resolution(&self) -> Resolution {
+        self.resolution
+    }
+
+    #[must_use]
+    pub const fn epoch(&self) -> u64 {
+        self.epoch
+    }
+
+    #[must_use]
+    pub const fn state(&self) -> PipelineState {
+        self.state
+    }
+
+    #[must_use]
+    pub fn selection(&self) -> Option<&EncoderSelection> {
+        self.selection.as_ref()
+    }
+
+    /// Applies a requested output size. A real resize invalidates the previous
+    /// import proof and forces both capture and encode paths to be probed again.
+    pub fn resize(&mut self, resolution: Resolution) -> bool {
+        if self.resolution == resolution {
+            return false;
+        }
+
+        self.resolution = resolution;
+        self.epoch = self.epoch.saturating_add(1);
+        self.state = PipelineState::Revalidating;
+        self.selection = None;
+        true
+    }
+
+    /// Marks the current epoch active after the caller performs fresh probes.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`PipelineTransitionError::InvalidState`] unless the pipeline is
+    /// currently revalidating, or
+    /// [`PipelineTransitionError::SelectionRejectedByPolicy`] when the fresh
+    /// selection does not satisfy the pipeline's current policy.
+    pub fn finish_revalidation(
+        &mut self,
+        selection: EncoderSelection,
+    ) -> Result<(), PipelineTransitionError> {
+        if self.state != PipelineState::Revalidating {
+            return Err(PipelineTransitionError::InvalidState {
+                expected: PipelineState::Revalidating,
+                actual: self.state,
+            });
+        }
+        validate_selection_for_policy(self.policy, &selection)?;
+        self.selection = Some(selection);
+        self.state = PipelineState::Active;
+        Ok(())
+    }
+}
+
+fn validate_selection_for_policy(
+    policy: ZeroCopyPolicy,
+    selection: &EncoderSelection,
+) -> Result<(), PipelineTransitionError> {
+    let status = selection.protocol_status();
+    if policy == ZeroCopyPolicy::RequiredEndToEnd && !status.satisfies_strict_zero_copy() {
+        return Err(PipelineTransitionError::SelectionRejectedByPolicy { policy, status });
+    }
+    Ok(())
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn adapter(name: &str) -> AdapterId {
+        AdapterId::new(name).unwrap()
+    }
+
+    fn candidate(
+        adapter_name: &str,
+        encoder_name: &str,
+        import_probe: ImportProbeResult,
+    ) -> GpuCandidate {
+        GpuCandidate::new(adapter(adapter_name), encoder_name, import_probe).unwrap()
+    }
+
+    #[test]
+    fn wayland_selects_verified_dma_buf_encoder() {
+        let capture = CaptureMemoryPath::DmaBuf {
+            adapter: adapter("renderD128"),
+        };
+        let candidates = [candidate(
+            "renderD128",
+            "vaapi-h264",
+            ImportProbeResult::SameAdapterZeroCopy,
+        )];
+
+        let selected = select_encoder(
+            DesktopBackend::WaylandPipeWire,
+            ZeroCopyPolicy::RequiredEndToEnd,
+            &capture,
+            &candidates,
+        )
+        .unwrap();
+
+        assert_eq!(selected.adapter, adapter("renderD128"));
+        assert_eq!(selected.transfer_mode, TransferMode::SameAdapterZeroCopy);
+        assert_eq!(capture.protocol_status(), MemoryPathStatus::CpuCopyFree);
+        assert_eq!(
+            selected.protocol_status(),
+            MemoryPathStatus::SameAdapterGpuTransform
+        );
+        assert!(selected.transfer_mode.is_verified_zero_copy());
+    }
+
+    #[test]
+    fn every_fallback_has_an_explicit_protocol_status() {
+        assert_eq!(
+            CaptureMemoryPath::CpuMemory.protocol_status(),
+            MemoryPathStatus::Software
+        );
+        assert_eq!(
+            CaptureMemoryPath::OpaqueGpu { adapter: None }.protocol_status(),
+            MemoryPathStatus::Opaque
+        );
+        assert_eq!(
+            ImportProbeResult::CrossAdapterCopy {
+                source_adapter: adapter("gpu-0")
+            }
+            .protocol_status(),
+            Some(MemoryPathStatus::CrossAdapterCopy)
+        );
+        assert_eq!(
+            ImportProbeResult::CpuUpload.protocol_status(),
+            Some(MemoryPathStatus::CpuUpload)
+        );
+        assert_eq!(
+            ImportProbeResult::Software.protocol_status(),
+            Some(MemoryPathStatus::Software)
+        );
+        assert_eq!(
+            ImportProbeResult::OpaqueGpuPath.protocol_status(),
+            Some(MemoryPathStatus::Opaque)
+        );
+        assert_eq!(
+            ImportProbeResult::Unsupported {
+                reason: "format mismatch".into()
+            }
+            .protocol_status(),
+            None
+        );
+    }
+
+    #[test]
+    fn xorg_dri3_is_experimental_but_can_pass_strict_validation() {
+        let backend = DesktopBackend::XorgDri3Experimental;
+        let capture = CaptureMemoryPath::DmaBuf {
+            adapter: adapter("card0"),
+        };
+        let candidates = [candidate(
+            "card0",
+            "nvenc-h264",
+            ImportProbeResult::SameAdapterZeroCopy,
+        )];
+
+        let selected = select_encoder(
+            backend,
+            ZeroCopyPolicy::RequiredEndToEnd,
+            &capture,
+            &candidates,
+        )
+        .unwrap();
+
+        assert!(backend.is_experimental());
+        assert_eq!(selected.transfer_mode, TransferMode::SameAdapterZeroCopy);
+    }
+
+    #[test]
+    fn xorg_shm_is_rejected_by_strict_policy_and_allowed_by_compatibility() {
+        let capture = CaptureMemoryPath::CpuMemory;
+        let candidates = [candidate(
+            "renderD128",
+            "vaapi-h264",
+            ImportProbeResult::CpuUpload,
+        )];
+
+        let strict_error = select_encoder(
+            DesktopBackend::XorgShmCompatibility,
+            ZeroCopyPolicy::RequiredEndToEnd,
+            &capture,
+            &candidates,
+        )
+        .unwrap_err();
+        assert_eq!(
+            strict_error,
+            SelectionError::StrictPolicyRejectedCapture {
+                path: CaptureMemoryPath::CpuMemory
+            }
+        );
+
+        let selected = select_encoder(
+            DesktopBackend::XorgShmCompatibility,
+            ZeroCopyPolicy::Compatibility,
+            &capture,
+            &candidates,
+        )
+        .unwrap();
+        assert_eq!(selected.transfer_mode, TransferMode::CpuUpload);
+    }
+
+    #[test]
+    fn multi_gpu_probe_chooses_the_capture_adapter() {
+        let capture = CaptureMemoryPath::DmaBuf {
+            adapter: adapter("gpu-integrated"),
+        };
+        let candidates = [
+            candidate(
+                "gpu-discrete",
+                "nvenc-h264",
+                ImportProbeResult::CrossAdapterCopy {
+                    source_adapter: adapter("gpu-integrated"),
+                },
+            ),
+            candidate(
+                "gpu-integrated",
+                "vaapi-h264",
+                ImportProbeResult::SameAdapterZeroCopy,
+            ),
+        ];
+
+        let selected = select_encoder(
+            DesktopBackend::WaylandPipeWire,
+            ZeroCopyPolicy::RequiredEndToEnd,
+            &capture,
+            &candidates,
+        )
+        .unwrap();
+
+        assert_eq!(selected.adapter, adapter("gpu-integrated"));
+        assert_eq!(selected.encoder_name, "vaapi-h264");
+    }
+
+    #[test]
+    fn strict_policy_rejects_cross_adapter_and_opaque_probes() {
+        let capture = CaptureMemoryPath::DmaBuf {
+            adapter: adapter("gpu-0"),
+        };
+
+        for probe in [
+            ImportProbeResult::CrossAdapterCopy {
+                source_adapter: adapter("gpu-0"),
+            },
+            ImportProbeResult::OpaqueGpuPath,
+        ] {
+            let candidates = [candidate("gpu-1", "encoder", probe)];
+            let error = select_encoder(
+                DesktopBackend::WaylandPipeWire,
+                ZeroCopyPolicy::RequiredEndToEnd,
+                &capture,
+                &candidates,
+            )
+            .unwrap_err();
+
+            assert_eq!(
+                error,
+                SelectionError::NoVerifiedSameAdapterEncoder {
+                    capture_adapter: Some(adapter("gpu-0"))
+                }
+            );
+        }
+    }
+
+    #[test]
+    fn compatibility_policy_explicitly_allows_cross_adapter_copy() {
+        let capture = CaptureMemoryPath::DmaBuf {
+            adapter: adapter("gpu-0"),
+        };
+        let candidates = [candidate(
+            "gpu-1",
+            "nvenc-h264",
+            ImportProbeResult::CrossAdapterCopy {
+                source_adapter: adapter("gpu-0"),
+            },
+        )];
+
+        let selected = select_encoder(
+            DesktopBackend::WaylandPipeWire,
+            ZeroCopyPolicy::Compatibility,
+            &capture,
+            &candidates,
+        )
+        .unwrap();
+
+        assert_eq!(selected.transfer_mode, TransferMode::CrossAdapterCopy);
+        assert_eq!(
+            selected.protocol_status(),
+            MemoryPathStatus::CrossAdapterCopy
+        );
+    }
+
+    #[test]
+    fn opaque_capture_is_only_available_in_compatibility_mode() {
+        let capture = CaptureMemoryPath::OpaqueGpu {
+            adapter: Some(adapter("gpu-0")),
+        };
+        let candidates = [candidate(
+            "gpu-0",
+            "driver-managed-h264",
+            ImportProbeResult::OpaqueGpuPath,
+        )];
+
+        let strict_error = select_encoder(
+            DesktopBackend::WaylandPipeWire,
+            ZeroCopyPolicy::RequiredEndToEnd,
+            &capture,
+            &candidates,
+        )
+        .unwrap_err();
+        assert_eq!(
+            strict_error,
+            SelectionError::StrictPolicyRejectedCapture {
+                path: capture.clone()
+            }
+        );
+
+        let selected = select_encoder(
+            DesktopBackend::WaylandPipeWire,
+            ZeroCopyPolicy::Compatibility,
+            &capture,
+            &candidates,
+        )
+        .unwrap();
+        assert_eq!(selected.transfer_mode, TransferMode::OpaqueGpuPath);
+        assert!(!selected.transfer_mode.is_verified_zero_copy());
+    }
+
+    #[test]
+    fn resize_increments_epoch_and_requires_revalidation() {
+        let initial_selection = EncoderSelection {
+            adapter: adapter("gpu-0"),
+            encoder_name: "vaapi-h264".into(),
+            transfer_mode: TransferMode::SameAdapterZeroCopy,
+        };
+        let mut pipeline = VideoPipeline::active(
+            ZeroCopyPolicy::RequiredEndToEnd,
+            Resolution::new(1920, 1080).unwrap(),
+            initial_selection.clone(),
+        )
+        .unwrap();
+
+        assert!(!pipeline.resize(Resolution::new(1920, 1080).unwrap()));
+        assert_eq!(pipeline.epoch(), 0);
+        assert!(pipeline.resize(Resolution::new(2560, 1440).unwrap()));
+        assert_eq!(pipeline.epoch(), 1);
+        assert_eq!(pipeline.state(), PipelineState::Revalidating);
+        assert!(pipeline.selection().is_none());
+
+        pipeline.finish_revalidation(initial_selection).unwrap();
+        assert_eq!(pipeline.state(), PipelineState::Active);
+        assert!(pipeline.selection().is_some());
+    }
+
+    #[test]
+    fn finish_revalidation_requires_revalidating_state() {
+        let selection = EncoderSelection {
+            adapter: adapter("gpu-0"),
+            encoder_name: "vaapi-h264".into(),
+            transfer_mode: TransferMode::SameAdapterZeroCopy,
+        };
+        let mut pipeline = VideoPipeline::active(
+            ZeroCopyPolicy::RequiredEndToEnd,
+            Resolution::new(1920, 1080).unwrap(),
+            selection.clone(),
+        )
+        .unwrap();
+
+        assert_eq!(
+            pipeline.finish_revalidation(selection),
+            Err(PipelineTransitionError::InvalidState {
+                expected: PipelineState::Revalidating,
+                actual: PipelineState::Active,
+            })
+        );
+        assert_eq!(pipeline.state(), PipelineState::Active);
+    }
+
+    #[test]
+    fn strict_revalidation_rejects_non_zero_copy_selections() {
+        let zero_copy = EncoderSelection {
+            adapter: adapter("gpu-0"),
+            encoder_name: "vaapi-h264".into(),
+            transfer_mode: TransferMode::SameAdapterZeroCopy,
+        };
+
+        for (mode, status) in [
+            (
+                TransferMode::CrossAdapterCopy,
+                MemoryPathStatus::CrossAdapterCopy,
+            ),
+            (TransferMode::Software, MemoryPathStatus::Software),
+            (TransferMode::OpaqueGpuPath, MemoryPathStatus::Opaque),
+        ] {
+            let mut pipeline = VideoPipeline::active(
+                ZeroCopyPolicy::RequiredEndToEnd,
+                Resolution::new(1920, 1080).unwrap(),
+                zero_copy.clone(),
+            )
+            .unwrap();
+            assert!(pipeline.resize(Resolution::new(1280, 720).unwrap()));
+            let rejected = EncoderSelection {
+                adapter: adapter("gpu-1"),
+                encoder_name: "fallback-h264".into(),
+                transfer_mode: mode,
+            };
+
+            assert_eq!(
+                pipeline.finish_revalidation(rejected),
+                Err(PipelineTransitionError::SelectionRejectedByPolicy {
+                    policy: ZeroCopyPolicy::RequiredEndToEnd,
+                    status,
+                })
+            );
+            assert_eq!(pipeline.state(), PipelineState::Revalidating);
+            assert!(pipeline.selection().is_none());
+        }
+    }
+
+    #[test]
+    fn compatibility_revalidation_accepts_software_selection() {
+        let zero_copy = EncoderSelection {
+            adapter: adapter("gpu-0"),
+            encoder_name: "vaapi-h264".into(),
+            transfer_mode: TransferMode::SameAdapterZeroCopy,
+        };
+        let mut pipeline = VideoPipeline::active(
+            ZeroCopyPolicy::Compatibility,
+            Resolution::new(1920, 1080).unwrap(),
+            zero_copy,
+        )
+        .unwrap();
+        assert!(pipeline.resize(Resolution::new(1280, 720).unwrap()));
+
+        pipeline
+            .finish_revalidation(EncoderSelection {
+                adapter: adapter("cpu"),
+                encoder_name: "software-h264".into(),
+                transfer_mode: TransferMode::Software,
+            })
+            .unwrap();
+
+        assert_eq!(pipeline.state(), PipelineState::Active);
+        assert_eq!(
+            pipeline.selection().unwrap().protocol_status(),
+            MemoryPathStatus::Software
+        );
+    }
+}
diff --git a/agent/agent-core/src/multi_display.rs b/agent/agent-core/src/multi_display.rs
new file mode 100644
index 0000000..c8c1be7
--- /dev/null
+++ b/agent/agent-core/src/multi_display.rs
@@ -0,0 +1,1214 @@
+use std::collections::{BTreeMap, BTreeSet};
+use std::fmt;
+
+use remotedesk_protocol::{
+    DisplayDescriptor, DisplayId, DisplayLayout, DisplaySelection, DisplaySelectionError,
+    MemoryPathStatus,
+};
+
+use super::{
+    AdapterId, CaptureMemoryPath, ConfigurationError, DesktopBackend, ImportProbeResult,
+    PipelineState, Resolution, TransferMode, ZeroCopyPolicy, validate_capture_for_backend,
+};
+
+/// Capture information that is local to the Linux Agent and not sent as
+/// display-topology metadata.
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct DisplayCaptureSource {
+    pub id: DisplayId,
+    pub name: String,
+    pub capture_path: CaptureMemoryPath,
+}
+
+impl DisplayCaptureSource {
+    /// Associates a protocol display identity with an observed capture path.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`MultiDisplayPlanError::EmptyDisplayName`] for an empty name.
+    pub fn new(
+        id: DisplayId,
+        name: impl Into<String>,
+        capture_path: CaptureMemoryPath,
+    ) -> Result<Self, MultiDisplayPlanError> {
+        let name = name.into();
+        if name.trim().is_empty() {
+            return Err(MultiDisplayPlanError::EmptyDisplayName { id });
+        }
+        Ok(Self {
+            id,
+            name,
+            capture_path,
+        })
+    }
+}
+
+/// The union of all selected display rectangles.
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub struct DesktopBounds {
+    pub x: i32,
+    pub y: i32,
+    pub width: u32,
+    pub height: u32,
+}
+
+/// A point normalized to the top-left of [`DesktopBounds`].
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub struct NormalizedPoint {
+    pub x: u32,
+    pub y: u32,
+}
+
+impl DesktopBounds {
+    /// Converts a native desktop point to non-negative stream coordinates.
+    #[must_use]
+    pub fn normalize(self, x: i32, y: i32) -> Option<NormalizedPoint> {
+        let normalized_x = i64::from(x) - i64::from(self.x);
+        let normalized_y = i64::from(y) - i64::from(self.y);
+        if normalized_x < 0
+            || normalized_y < 0
+            || normalized_x >= i64::from(self.width)
+            || normalized_y >= i64::from(self.height)
+        {
+            return None;
+        }
+        Some(NormalizedPoint {
+            x: u32::try_from(normalized_x).ok()?,
+            y: u32::try_from(normalized_y).ok()?,
+        })
+    }
+
+    /// Converts a stream point back to native Linux desktop coordinates.
+    #[must_use]
+    pub fn denormalize(self, point: NormalizedPoint) -> Option<(i32, i32)> {
+        if point.x >= self.width || point.y >= self.height {
+            return None;
+        }
+        let x = i64::from(self.x) + i64::from(point.x);
+        let y = i64::from(self.y) + i64::from(point.y);
+        Some((i32::try_from(x).ok()?, i32::try_from(y).ok()?))
+    }
+}
+
+/// One selected protocol descriptor paired with its Agent capture source.
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct SelectedDisplaySource {
+    pub descriptor: DisplayDescriptor,
+    pub capture: DisplayCaptureSource,
+}
+
+/// A protocol-generation-bound selection with computed stream coordinates.
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct SelectedDisplayLayout {
+    generation: u64,
+    sources: Vec<SelectedDisplaySource>,
+    bounds: DesktopBounds,
+}
+
+impl SelectedDisplayLayout {
+    /// Resolves Agent capture sources against a validated protocol selection.
+    ///
+    /// The protocol layout owns display identity, geometry, scale, primary
+    /// status, selection ordering, and stale-generation rejection. This layer
+    /// only joins those descriptors to locally observed capture memory paths.
+    ///
+    /// # Errors
+    ///
+    /// Rejects invalid protocol selections, duplicate local source IDs,
+    /// missing selected sources, and unrepresentable combined desktop bounds.
+    pub fn resolve(
+        topology: &DisplayLayout,
+        capture_sources: &[DisplayCaptureSource],
+        selection: &DisplaySelection,
+    ) -> Result<Self, MultiDisplayPlanError> {
+        let descriptors = topology
+            .selected_displays(selection)
+            .map_err(MultiDisplayPlanError::Selection)?;
+        let mut capture_by_id = BTreeMap::new();
+        for source in capture_sources {
+            if capture_by_id.insert(source.id, source).is_some() {
+                return Err(MultiDisplayPlanError::DuplicateCaptureSource { id: source.id });
+            }
+        }
+        let sources = descriptors
+            .into_iter()
+            .map(|descriptor| {
+                let capture = capture_by_id
+                    .get(&descriptor.id)
+                    .copied()
+                    .ok_or(MultiDisplayPlanError::MissingCaptureSource { id: descriptor.id })?;
+                Ok(SelectedDisplaySource {
+                    descriptor: descriptor.clone(),
+                    capture: capture.clone(),
+                })
+            })
+            .collect::<Result<Vec<_>, MultiDisplayPlanError>>()?;
+        let bounds = desktop_bounds(&sources)?;
+        Ok(Self {
+            generation: topology.generation(),
+            sources,
+            bounds,
+        })
+    }
+
+    #[must_use]
+    pub const fn generation(&self) -> u64 {
+        self.generation
+    }
+
+    #[must_use]
+    pub fn sources(&self) -> &[SelectedDisplaySource] {
+        &self.sources
+    }
+
+    #[must_use]
+    pub const fn bounds(&self) -> DesktopBounds {
+        self.bounds
+    }
+
+    /// Returns the selected display's origin relative to the stream desktop.
+    #[must_use]
+    pub fn normalized_origin(&self, id: DisplayId) -> Option<NormalizedPoint> {
+        let source = self
+            .sources
+            .iter()
+            .find(|source| source.descriptor.id == id)?;
+        self.bounds
+            .normalize(source.descriptor.rect.x, source.descriptor.rect.y)
+    }
+}
+
+fn desktop_bounds(
+    sources: &[SelectedDisplaySource],
+) -> Result<DesktopBounds, MultiDisplayPlanError> {
+    let left = sources
+        .iter()
+        .map(|source| source.descriptor.rect.x)
+        .min()
+        .ok_or(MultiDisplayPlanError::NoSelectedDisplays)?;
+    let top = sources
+        .iter()
+        .map(|source| source.descriptor.rect.y)
+        .min()
+        .ok_or(MultiDisplayPlanError::NoSelectedDisplays)?;
+    let right = sources
+        .iter()
+        .filter_map(|source| source.descriptor.rect.right())
+        .max()
+        .ok_or(MultiDisplayPlanError::DesktopBoundsOverflow)?;
+    let bottom = sources
+        .iter()
+        .filter_map(|source| source.descriptor.rect.bottom())
+        .max()
+        .ok_or(MultiDisplayPlanError::DesktopBoundsOverflow)?;
+    let width = u32::try_from(i64::from(right) - i64::from(left))
+        .map_err(|_| MultiDisplayPlanError::DesktopBoundsOverflow)?;
+    let height = u32::try_from(i64::from(bottom) - i64::from(top))
+        .map_err(|_| MultiDisplayPlanError::DesktopBoundsOverflow)?;
+    Ok(DesktopBounds {
+        x: left,
+        y: top,
+        width,
+        height,
+    })
+}
+
+/// Import result for one display on one target encoder.
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct DisplayImportProbe {
+    pub display_id: DisplayId,
+    pub result: ImportProbeResult,
+}
+
+/// One target encoder with independent import evidence for every display.
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct MultiDisplayGpuCandidate {
+    adapter: AdapterId,
+    encoder_name: String,
+    source_probes: Vec<DisplayImportProbe>,
+}
+
+impl MultiDisplayGpuCandidate {
+    /// Creates a target encoder from per-display import probes.
+    ///
+    /// # Errors
+    ///
+    /// Uses the same encoder-name validation as [`super::GpuCandidate`] and
+    /// rejects duplicate probe IDs because their evidence would be ambiguous.
+    pub fn new(
+        adapter: AdapterId,
+        encoder_name: impl Into<String>,
+        source_probes: Vec<DisplayImportProbe>,
+    ) -> Result<Self, MultiDisplayPlanError> {
+        let encoder_name = encoder_name.into();
+        if encoder_name.trim().is_empty() {
+            return Err(MultiDisplayPlanError::Configuration(
+                ConfigurationError::EmptyEncoderName,
+            ));
+        }
+        let mut ids = BTreeSet::new();
+        for probe in &source_probes {
+            if !ids.insert(probe.display_id) {
+                return Err(MultiDisplayPlanError::DuplicateImportProbe {
+                    id: probe.display_id,
+                });
+            }
+        }
+        Ok(Self {
+            adapter,
+            encoder_name,
+            source_probes,
+        })
+    }
+
+    #[must_use]
+    pub fn adapter(&self) -> &AdapterId {
+        &self.adapter
+    }
+
+    #[must_use]
+    pub fn encoder_name(&self) -> &str {
+        &self.encoder_name
+    }
+
+    #[must_use]
+    pub fn source_probes(&self) -> &[DisplayImportProbe] {
+        &self.source_probes
+    }
+}
+
+/// Capture-to-encode behavior selected for one display.
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct DisplayPathPlan {
+    pub display_id: DisplayId,
+    pub capture_status: MemoryPathStatus,
+    pub transfer_mode: TransferMode,
+}
+
+impl DisplayPathPlan {
+    #[must_use]
+    pub const fn is_strict_zero_copy(&self) -> bool {
+        self.capture_status.satisfies_strict_zero_copy()
+            && self.transfer_mode.is_verified_zero_copy()
+    }
+}
+
+/// Whether every selected display is strict or compatibility fallback is used.
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub enum MultiDisplayCompliance {
+    StrictZeroCopy,
+    CompatibilityDegraded,
+}
+
+/// A plan that uses one encoder target for every selected display.
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct MultiDisplayCapturePlan {
+    pub encoder_adapter: AdapterId,
+    pub encoder_name: String,
+    pub layout: SelectedDisplayLayout,
+    pub paths: Vec<DisplayPathPlan>,
+    pub compliance: MultiDisplayCompliance,
+}
+
+impl MultiDisplayCapturePlan {
+    /// Selects a single encoder that can import all selected display sources.
+    ///
+    /// Strict policy rejects CPU, opaque, and cross-adapter paths. Compatibility
+    /// mode chooses the candidate with the least severe worst path and reports
+    /// every display's actual fallback in [`Self::paths`].
+    ///
+    /// # Errors
+    ///
+    /// Returns [`MultiDisplayPlanError`] when protocol selection, source/path
+    /// compatibility, strict policy, or common encoder requirements fail.
+    pub fn create(
+        backend: DesktopBackend,
+        policy: ZeroCopyPolicy,
+        topology: &DisplayLayout,
+        capture_sources: &[DisplayCaptureSource],
+        selection: &DisplaySelection,
+        candidates: &[MultiDisplayGpuCandidate],
+    ) -> Result<Self, MultiDisplayPlanError> {
+        if !backend.carries_video() {
+            return Err(MultiDisplayPlanError::TerminalHasNoVideoPipeline);
+        }
+        let layout = SelectedDisplayLayout::resolve(topology, capture_sources, selection)?;
+        for selected in layout.sources() {
+            let source = &selected.capture;
+            validate_capture_for_backend(backend, &source.capture_path).map_err(|_| {
+                MultiDisplayPlanError::BackendCaptureMismatch {
+                    display_id: source.id,
+                    backend,
+                }
+            })?;
+            if policy == ZeroCopyPolicy::RequiredEndToEnd
+                && !source
+                    .capture_path
+                    .protocol_status()
+                    .satisfies_strict_zero_copy()
+            {
+                return Err(MultiDisplayPlanError::StrictSourceRejected {
+                    display_id: source.id,
+                    status: source.capture_path.protocol_status(),
+                });
+            }
+        }
+
+        let mut plans = candidates
+            .iter()
+            .filter_map(|candidate| plan_candidate(&layout, candidate))
+            .filter(|(_, paths)| {
+                policy != ZeroCopyPolicy::RequiredEndToEnd
+                    || paths.iter().all(DisplayPathPlan::is_strict_zero_copy)
+            })
+            .collect::<Vec<_>>();
+        plans.sort_by_key(|(_, paths)| paths.iter().map(path_severity).max().unwrap_or(u8::MAX));
+
+        let Some((candidate, paths)) = plans.into_iter().next() else {
+            return Err(if policy == ZeroCopyPolicy::RequiredEndToEnd {
+                MultiDisplayPlanError::NoVerifiedSingleAdapterEncoder
+            } else {
+                MultiDisplayPlanError::NoCommonEncoder
+            });
+        };
+        let compliance = if paths.iter().all(DisplayPathPlan::is_strict_zero_copy) {
+            MultiDisplayCompliance::StrictZeroCopy
+        } else {
+            MultiDisplayCompliance::CompatibilityDegraded
+        };
+        Ok(Self {
+            encoder_adapter: candidate.adapter.clone(),
+            encoder_name: candidate.encoder_name.clone(),
+            layout,
+            paths,
+            compliance,
+        })
+    }
+}
+
+fn plan_candidate<'a>(
+    layout: &SelectedDisplayLayout,
+    candidate: &'a MultiDisplayGpuCandidate,
+) -> Option<(&'a MultiDisplayGpuCandidate, Vec<DisplayPathPlan>)> {
+    let probes = candidate
+        .source_probes
+        .iter()
+        .map(|probe| (probe.display_id, &probe.result))
+        .collect::<BTreeMap<_, _>>();
+    let paths = layout
+        .sources()
+        .iter()
+        .map(|selected| {
+            let source = &selected.capture;
+            let result = probes.get(&source.id)?;
+            let transfer_mode = transfer_mode_for_probe(source, candidate, result)?;
+            Some(DisplayPathPlan {
+                display_id: source.id,
+                capture_status: source.capture_path.protocol_status(),
+                transfer_mode,
+            })
+        })
+        .collect::<Option<Vec<_>>>()?;
+    Some((candidate, paths))
+}
+
+fn transfer_mode_for_probe(
+    source: &DisplayCaptureSource,
+    candidate: &MultiDisplayGpuCandidate,
+    result: &ImportProbeResult,
+) -> Option<TransferMode> {
+    match result {
+        ImportProbeResult::SameAdapterZeroCopy
+            if matches!(
+                &source.capture_path,
+                CaptureMemoryPath::DmaBuf { adapter } if *adapter == candidate.adapter
+            ) =>
+        {
+            Some(TransferMode::SameAdapterZeroCopy)
+        }
+        ImportProbeResult::CrossAdapterCopy { source_adapter }
+            if source.capture_path.adapter() == Some(source_adapter)
+                && candidate.adapter != *source_adapter =>
+        {
+            Some(TransferMode::CrossAdapterCopy)
+        }
+        ImportProbeResult::CpuUpload => Some(TransferMode::CpuUpload),
+        ImportProbeResult::Software => Some(TransferMode::Software),
+        ImportProbeResult::OpaqueGpuPath => Some(TransferMode::OpaqueGpuPath),
+        ImportProbeResult::SameAdapterZeroCopy
+        | ImportProbeResult::CrossAdapterCopy { .. }
+        | ImportProbeResult::Unsupported { .. } => None,
+    }
+}
+
+const fn path_severity(path: &DisplayPathPlan) -> u8 {
+    let transfer = match path.transfer_mode {
+        TransferMode::SameAdapterZeroCopy => 0,
+        TransferMode::CrossAdapterCopy => 1,
+        TransferMode::CpuUpload => 2,
+        TransferMode::OpaqueGpuPath => 3,
+        TransferMode::Software => 4,
+    };
+    if path.capture_status.satisfies_strict_zero_copy() {
+        transfer
+    } else {
+        4
+    }
+}
+
+/// Revalidation state for a multi-display stream.
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct MultiDisplayPipeline {
+    policy: ZeroCopyPolicy,
+    resolution: Resolution,
+    layout: SelectedDisplayLayout,
+    epoch: u64,
+    state: PipelineState,
+    plan: Option<MultiDisplayCapturePlan>,
+}
+
+impl MultiDisplayPipeline {
+    /// Creates an active pipeline from a policy-compliant plan.
+    ///
+    /// # Errors
+    ///
+    /// Rejects a compatibility-degraded plan under strict policy.
+    pub fn active(
+        policy: ZeroCopyPolicy,
+        resolution: Resolution,
+        plan: MultiDisplayCapturePlan,
+    ) -> Result<Self, MultiDisplayPipelineError> {
+        validate_plan_for_policy(policy, &plan)?;
+        Ok(Self {
+            policy,
+            resolution,
+            layout: plan.layout.clone(),
+            epoch: 0,
+            state: PipelineState::Active,
+            plan: Some(plan),
+        })
+    }
+
+    #[must_use]
+    pub const fn epoch(&self) -> u64 {
+        self.epoch
+    }
+
+    #[must_use]
+    pub const fn state(&self) -> PipelineState {
+        self.state
+    }
+
+    #[must_use]
+    pub const fn resolution(&self) -> Resolution {
+        self.resolution
+    }
+
+    #[must_use]
+    pub fn layout(&self) -> &SelectedDisplayLayout {
+        &self.layout
+    }
+
+    #[must_use]
+    pub fn plan(&self) -> Option<&MultiDisplayCapturePlan> {
+        self.plan.as_ref()
+    }
+
+    /// Applies output resolution or selected-layout changes. Any real change
+    /// invalidates all per-display import evidence and increments the epoch.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`MultiDisplayPipelineError::GenerationOverflow`] instead of
+    /// applying a change that cannot receive a fresh epoch.
+    pub fn reconfigure(
+        &mut self,
+        resolution: Resolution,
+        layout: SelectedDisplayLayout,
+    ) -> Result<bool, MultiDisplayPipelineError> {
+        if self.resolution == resolution && self.layout == layout {
+            return Ok(false);
+        }
+        let next_epoch = self
+            .epoch
+            .checked_add(1)
+            .ok_or(MultiDisplayPipelineError::GenerationOverflow)?;
+        self.resolution = resolution;
+        self.layout = layout;
+        self.epoch = next_epoch;
+        self.state = PipelineState::Revalidating;
+        self.plan = None;
+        Ok(true)
+    }
+
+    /// Activates a freshly probed plan for the current epoch.
+    ///
+    /// # Errors
+    ///
+    /// Rejects invalid state, stale layout evidence, and a plan that violates
+    /// the pipeline's zero-copy policy.
+    pub fn finish_revalidation(
+        &mut self,
+        plan: MultiDisplayCapturePlan,
+    ) -> Result<(), MultiDisplayPipelineError> {
+        if self.state != PipelineState::Revalidating {
+            return Err(MultiDisplayPipelineError::InvalidState {
+                expected: PipelineState::Revalidating,
+                actual: self.state,
+            });
+        }
+        if self.layout != plan.layout {
+            return Err(MultiDisplayPipelineError::StaleLayout);
+        }
+        validate_plan_for_policy(self.policy, &plan)?;
+        self.plan = Some(plan);
+        self.state = PipelineState::Active;
+        Ok(())
+    }
+}
+
+fn validate_plan_for_policy(
+    policy: ZeroCopyPolicy,
+    plan: &MultiDisplayCapturePlan,
+) -> Result<(), MultiDisplayPipelineError> {
+    if policy == ZeroCopyPolicy::RequiredEndToEnd
+        && plan.compliance != MultiDisplayCompliance::StrictZeroCopy
+    {
+        return Err(MultiDisplayPipelineError::PlanRejectedByPolicy);
+    }
+    Ok(())
+}
+
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub enum MultiDisplayPlanError {
+    EmptyDisplayName {
+        id: DisplayId,
+    },
+    DesktopBoundsOverflow,
+    NoSelectedDisplays,
+    DuplicateCaptureSource {
+        id: DisplayId,
+    },
+    MissingCaptureSource {
+        id: DisplayId,
+    },
+    DuplicateImportProbe {
+        id: DisplayId,
+    },
+    Selection(DisplaySelectionError),
+    Configuration(ConfigurationError),
+    TerminalHasNoVideoPipeline,
+    BackendCaptureMismatch {
+        display_id: DisplayId,
+        backend: DesktopBackend,
+    },
+    StrictSourceRejected {
+        display_id: DisplayId,
+        status: MemoryPathStatus,
+    },
+    NoVerifiedSingleAdapterEncoder,
+    NoCommonEncoder,
+}
+
+impl fmt::Display for MultiDisplayPlanError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        match self {
+            Self::EmptyDisplayName { id } => {
+                write!(formatter, "display {id:?} name must not be empty")
+            }
+            Self::DesktopBoundsOverflow => {
+                formatter.write_str("combined desktop bounds exceed supported dimensions")
+            }
+            Self::NoSelectedDisplays => formatter.write_str("no displays were selected"),
+            Self::DuplicateCaptureSource { id } => {
+                write!(formatter, "capture source id {id:?} is duplicated")
+            }
+            Self::MissingCaptureSource { id } => {
+                write!(formatter, "selected display {id:?} has no capture source")
+            }
+            Self::DuplicateImportProbe { id } => {
+                write!(
+                    formatter,
+                    "encoder has duplicate import probe for display {id:?}"
+                )
+            }
+            Self::Selection(error) => error.fmt(formatter),
+            Self::Configuration(error) => error.fmt(formatter),
+            Self::TerminalHasNoVideoPipeline => {
+                formatter.write_str("terminal sessions do not use a video pipeline")
+            }
+            Self::BackendCaptureMismatch {
+                display_id,
+                backend,
+            } => write!(
+                formatter,
+                "display {display_id:?} capture path does not match backend {backend:?}"
+            ),
+            Self::StrictSourceRejected { display_id, status } => write!(
+                formatter,
+                "strict policy rejected display {display_id:?} capture status {status:?}"
+            ),
+            Self::NoVerifiedSingleAdapterEncoder => formatter.write_str(
+                "no single encoder adapter has verified zero-copy imports for every display",
+            ),
+            Self::NoCommonEncoder => {
+                formatter.write_str("no single encoder can import every selected display")
+            }
+        }
+    }
+}
+
+impl std::error::Error for MultiDisplayPlanError {}
+
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub enum MultiDisplayPipelineError {
+    InvalidState {
+        expected: PipelineState,
+        actual: PipelineState,
+    },
+    StaleLayout,
+    PlanRejectedByPolicy,
+    GenerationOverflow,
+}
+
+impl fmt::Display for MultiDisplayPipelineError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        match self {
+            Self::InvalidState { expected, actual } => write!(
+                formatter,
+                "pipeline transition requires {expected:?}, but current state is {actual:?}"
+            ),
+            Self::StaleLayout => {
+                formatter.write_str("capture plan belongs to a stale display layout")
+            }
+            Self::PlanRejectedByPolicy => {
+                formatter.write_str("strict zero-copy policy rejected the multi-display plan")
+            }
+            Self::GenerationOverflow => {
+                formatter.write_str("multi-display pipeline generation overflowed")
+            }
+        }
+    }
+}
+
+impl std::error::Error for MultiDisplayPipelineError {}
+
+#[cfg(test)]
+mod tests {
+    use remotedesk_protocol::{DisplayRect, DisplayScale};
+
+    use super::*;
+
+    fn adapter(value: &str) -> AdapterId {
+        AdapterId::new(value).unwrap()
+    }
+
+    fn id(value: u8) -> DisplayId {
+        DisplayId::from_bytes([value; 16])
+    }
+
+    fn descriptor(
+        value: u8,
+        x: i32,
+        y: i32,
+        width: u32,
+        height: u32,
+        primary: bool,
+    ) -> DisplayDescriptor {
+        DisplayDescriptor {
+            id: id(value),
+            rect: DisplayRect {
+                x,
+                y,
+                width,
+                height,
+            },
+            scale: DisplayScale::ONE,
+            is_primary: primary,
+        }
+    }
+
+    fn topology(generation: u64, descriptors: Vec<DisplayDescriptor>) -> DisplayLayout {
+        DisplayLayout::new(generation, descriptors).unwrap()
+    }
+
+    fn source(value: u8, adapter_name: &str) -> DisplayCaptureSource {
+        DisplayCaptureSource::new(
+            id(value),
+            format!("display-{value}"),
+            CaptureMemoryPath::DmaBuf {
+                adapter: adapter(adapter_name),
+            },
+        )
+        .unwrap()
+    }
+
+    fn probe(value: u8, result: ImportProbeResult) -> DisplayImportProbe {
+        DisplayImportProbe {
+            display_id: id(value),
+            result,
+        }
+    }
+
+    fn candidate(adapter_name: &str, probes: Vec<DisplayImportProbe>) -> MultiDisplayGpuCandidate {
+        MultiDisplayGpuCandidate::new(adapter(adapter_name), "vaapi-h264", probes).unwrap()
+    }
+
+    fn two_display_topology(generation: u64) -> DisplayLayout {
+        topology(
+            generation,
+            vec![
+                descriptor(1, -1920, -120, 1920, 1440, false),
+                descriptor(2, 0, 0, 2560, 1440, true),
+            ],
+        )
+    }
+
+    fn strict_plan(
+        topology: &DisplayLayout,
+        sources: &[DisplayCaptureSource],
+    ) -> MultiDisplayCapturePlan {
+        let probes = sources
+            .iter()
+            .map(|source| DisplayImportProbe {
+                display_id: source.id,
+                result: ImportProbeResult::SameAdapterZeroCopy,
+            })
+            .collect();
+        MultiDisplayCapturePlan::create(
+            DesktopBackend::WaylandPipeWire,
+            ZeroCopyPolicy::RequiredEndToEnd,
+            topology,
+            sources,
+            &DisplaySelection::all(topology.generation()),
+            &[candidate("gpu-0", probes)],
+        )
+        .unwrap()
+    }
+
+    #[test]
+    fn protocol_selection_and_negative_coordinates_map_consistently() {
+        let topology = two_display_topology(7);
+        let sources = [source(1, "gpu-0"), source(2, "gpu-0")];
+        let layout = SelectedDisplayLayout::resolve(
+            &topology,
+            &sources,
+            &DisplaySelection::all(topology.generation()),
+        )
+        .unwrap();
+
+        assert_eq!(layout.generation(), 7);
+        assert_eq!(
+            layout.bounds(),
+            DesktopBounds {
+                x: -1920,
+                y: -120,
+                width: 4480,
+                height: 1560,
+            }
+        );
+        assert_eq!(
+            layout.normalized_origin(id(1)),
+            Some(NormalizedPoint { x: 0, y: 0 })
+        );
+        assert_eq!(
+            layout.normalized_origin(id(2)),
+            Some(NormalizedPoint { x: 1920, y: 120 })
+        );
+        let point = layout.bounds().normalize(-1, 0).unwrap();
+        assert_eq!(layout.bounds().denormalize(point), Some((-1, 0)));
+    }
+
+    #[test]
+    fn all_single_and_custom_selection_reuse_protocol_ordering() {
+        let topology = topology(
+            9,
+            vec![
+                descriptor(1, -1920, 0, 1920, 1080, false),
+                descriptor(2, 0, 0, 1920, 1080, true),
+                descriptor(3, 1920, 0, 1920, 1080, false),
+            ],
+        );
+        let sources = [source(1, "gpu-0"), source(2, "gpu-0"), source(3, "gpu-0")];
+
+        let all =
+            SelectedDisplayLayout::resolve(&topology, &sources, &DisplaySelection::all(9)).unwrap();
+        assert_eq!(
+            all.sources()
+                .iter()
+                .map(|source| source.descriptor.id)
+                .collect::<Vec<_>>(),
+            vec![id(1), id(2), id(3)]
+        );
+
+        let single = SelectedDisplayLayout::resolve(
+            &topology,
+            &sources,
+            &DisplaySelection::single(9, id(2)),
+        )
+        .unwrap();
+        assert_eq!(single.sources().len(), 1);
+        assert_eq!(single.bounds().width, 1920);
+
+        let custom = SelectedDisplayLayout::resolve(
+            &topology,
+            &sources,
+            &DisplaySelection::custom(9, vec![id(3), id(2)]),
+        )
+        .unwrap();
+        assert_eq!(custom.sources()[0].descriptor.id, id(3));
+        assert_eq!(custom.sources()[1].descriptor.id, id(2));
+        assert_eq!(custom.bounds().x, 0);
+        assert_eq!(custom.bounds().width, 3840);
+    }
+
+    #[test]
+    fn stale_empty_duplicate_and_unknown_protocol_selections_fail_closed() {
+        let topology = two_display_topology(7);
+        let sources = [source(1, "gpu-0"), source(2, "gpu-0")];
+        let cases = [
+            (
+                DisplaySelection::all(6),
+                DisplaySelectionError::LayoutGenerationMismatch {
+                    expected: 7,
+                    actual: 6,
+                },
+            ),
+            (
+                DisplaySelection::custom(7, Vec::new()),
+                DisplaySelectionError::EmptyCustomSelection,
+            ),
+            (
+                DisplaySelection::custom(7, vec![id(1), id(1)]),
+                DisplaySelectionError::DuplicateDisplay(id(1)),
+            ),
+            (
+                DisplaySelection::single(7, id(99)),
+                DisplaySelectionError::UnknownDisplay(id(99)),
+            ),
+        ];
+
+        for (selection, expected) in cases {
+            assert_eq!(
+                SelectedDisplayLayout::resolve(&topology, &sources, &selection),
+                Err(MultiDisplayPlanError::Selection(expected))
+            );
+        }
+    }
+
+    #[test]
+    fn duplicate_or_missing_agent_capture_source_is_rejected() {
+        let topology = two_display_topology(7);
+        let duplicate = [source(1, "gpu-0"), source(1, "gpu-0")];
+        assert_eq!(
+            SelectedDisplayLayout::resolve(&topology, &duplicate, &DisplaySelection::all(7)),
+            Err(MultiDisplayPlanError::DuplicateCaptureSource { id: id(1) })
+        );
+        assert_eq!(
+            SelectedDisplayLayout::resolve(
+                &topology,
+                &[source(1, "gpu-0")],
+                &DisplaySelection::all(7),
+            ),
+            Err(MultiDisplayPlanError::MissingCaptureSource { id: id(2) })
+        );
+    }
+
+    #[test]
+    fn strict_plan_uses_one_gpu_for_every_display() {
+        let topology = two_display_topology(7);
+        let sources = [source(1, "gpu-0"), source(2, "gpu-0")];
+        let plan = strict_plan(&topology, &sources);
+
+        assert_eq!(plan.encoder_adapter, adapter("gpu-0"));
+        assert_eq!(plan.paths.len(), 2);
+        assert_eq!(plan.compliance, MultiDisplayCompliance::StrictZeroCopy);
+        assert!(plan.paths.iter().all(DisplayPathPlan::is_strict_zero_copy));
+    }
+
+    #[test]
+    fn strict_plan_rejects_displays_captured_on_different_adapters() {
+        let topology = two_display_topology(7);
+        let sources = [source(1, "gpu-0"), source(2, "gpu-1")];
+        let candidates = [
+            candidate(
+                "gpu-0",
+                vec![
+                    probe(1, ImportProbeResult::SameAdapterZeroCopy),
+                    probe(
+                        2,
+                        ImportProbeResult::CrossAdapterCopy {
+                            source_adapter: adapter("gpu-1"),
+                        },
+                    ),
+                ],
+            ),
+            candidate(
+                "gpu-1",
+                vec![
+                    probe(
+                        1,
+                        ImportProbeResult::CrossAdapterCopy {
+                            source_adapter: adapter("gpu-0"),
+                        },
+                    ),
+                    probe(2, ImportProbeResult::SameAdapterZeroCopy),
+                ],
+            ),
+        ];
+
+        assert_eq!(
+            MultiDisplayCapturePlan::create(
+                DesktopBackend::WaylandPipeWire,
+                ZeroCopyPolicy::RequiredEndToEnd,
+                &topology,
+                &sources,
+                &DisplaySelection::all(7),
+                &candidates,
+            ),
+            Err(MultiDisplayPlanError::NoVerifiedSingleAdapterEncoder)
+        );
+    }
+
+    #[test]
+    fn compatibility_reports_each_cross_adapter_downgrade() {
+        let topology = two_display_topology(7);
+        let sources = [source(1, "gpu-0"), source(2, "gpu-1")];
+        let candidate = candidate(
+            "gpu-0",
+            vec![
+                probe(1, ImportProbeResult::SameAdapterZeroCopy),
+                probe(
+                    2,
+                    ImportProbeResult::CrossAdapterCopy {
+                        source_adapter: adapter("gpu-1"),
+                    },
+                ),
+            ],
+        );
+
+        let plan = MultiDisplayCapturePlan::create(
+            DesktopBackend::WaylandPipeWire,
+            ZeroCopyPolicy::Compatibility,
+            &topology,
+            &sources,
+            &DisplaySelection::all(7),
+            &[candidate],
+        )
+        .unwrap();
+
+        assert_eq!(
+            plan.compliance,
+            MultiDisplayCompliance::CompatibilityDegraded
+        );
+        assert_eq!(
+            plan.paths[0].transfer_mode,
+            TransferMode::SameAdapterZeroCopy
+        );
+        assert_eq!(plan.paths[1].transfer_mode, TransferMode::CrossAdapterCopy);
+        assert_eq!(
+            plan.paths[1].transfer_mode.protocol_status(),
+            MemoryPathStatus::CrossAdapterCopy
+        );
+    }
+
+    #[test]
+    fn strict_rejects_cpu_and_opaque_capture_sources() {
+        let topology = topology(7, vec![descriptor(1, 0, 0, 1920, 1080, true)]);
+        for capture_path in [
+            CaptureMemoryPath::CpuMemory,
+            CaptureMemoryPath::OpaqueGpu {
+                adapter: Some(adapter("gpu-0")),
+            },
+        ] {
+            let source = DisplayCaptureSource::new(id(1), "primary", capture_path.clone()).unwrap();
+            let result = MultiDisplayCapturePlan::create(
+                DesktopBackend::WaylandPipeWire,
+                ZeroCopyPolicy::RequiredEndToEnd,
+                &topology,
+                &[source],
+                &DisplaySelection::all(7),
+                &[candidate(
+                    "gpu-0",
+                    vec![probe(1, ImportProbeResult::OpaqueGpuPath)],
+                )],
+            );
+            assert_eq!(
+                result,
+                Err(MultiDisplayPlanError::StrictSourceRejected {
+                    display_id: id(1),
+                    status: capture_path.protocol_status(),
+                })
+            );
+        }
+    }
+
+    #[test]
+    fn strict_rejects_degraded_imports_while_compatibility_reports_them() {
+        let topology = topology(7, vec![descriptor(1, 0, 0, 1920, 1080, true)]);
+        let sources = [source(1, "gpu-0")];
+
+        for (probe_result, expected_mode) in [
+            (ImportProbeResult::CpuUpload, TransferMode::CpuUpload),
+            (ImportProbeResult::Software, TransferMode::Software),
+            (
+                ImportProbeResult::OpaqueGpuPath,
+                TransferMode::OpaqueGpuPath,
+            ),
+        ] {
+            let candidate = candidate("gpu-0", vec![probe(1, probe_result)]);
+            assert_eq!(
+                MultiDisplayCapturePlan::create(
+                    DesktopBackend::WaylandPipeWire,
+                    ZeroCopyPolicy::RequiredEndToEnd,
+                    &topology,
+                    &sources,
+                    &DisplaySelection::all(7),
+                    std::slice::from_ref(&candidate),
+                ),
+                Err(MultiDisplayPlanError::NoVerifiedSingleAdapterEncoder)
+            );
+
+            let plan = MultiDisplayCapturePlan::create(
+                DesktopBackend::WaylandPipeWire,
+                ZeroCopyPolicy::Compatibility,
+                &topology,
+                &sources,
+                &DisplaySelection::all(7),
+                &[candidate],
+            )
+            .unwrap();
+            assert_eq!(
+                plan.compliance,
+                MultiDisplayCompliance::CompatibilityDegraded
+            );
+            assert_eq!(plan.paths[0].transfer_mode, expected_mode);
+        }
+    }
+
+    #[test]
+    fn missing_probe_means_candidate_cannot_cover_selection() {
+        let topology = two_display_topology(7);
+        let sources = [source(1, "gpu-0"), source(2, "gpu-0")];
+        let incomplete = candidate(
+            "gpu-0",
+            vec![probe(1, ImportProbeResult::SameAdapterZeroCopy)],
+        );
+
+        assert_eq!(
+            MultiDisplayCapturePlan::create(
+                DesktopBackend::WaylandPipeWire,
+                ZeroCopyPolicy::Compatibility,
+                &topology,
+                &sources,
+                &DisplaySelection::all(7),
+                &[incomplete],
+            ),
+            Err(MultiDisplayPlanError::NoCommonEncoder)
+        );
+    }
+
+    #[test]
+    fn resolution_and_protocol_layout_generation_force_revalidation() {
+        let initial_topology = two_display_topology(7);
+        let initial_sources = [source(1, "gpu-0"), source(2, "gpu-0")];
+        let initial_plan = strict_plan(&initial_topology, &initial_sources);
+        let mut pipeline = MultiDisplayPipeline::active(
+            ZeroCopyPolicy::RequiredEndToEnd,
+            Resolution::new(4480, 1440).unwrap(),
+            initial_plan.clone(),
+        )
+        .unwrap();
+
+        assert_eq!(
+            pipeline.reconfigure(
+                Resolution::new(4480, 1440).unwrap(),
+                initial_plan.layout.clone()
+            ),
+            Ok(false)
+        );
+        assert_eq!(
+            pipeline.reconfigure(
+                Resolution::new(2240, 720).unwrap(),
+                initial_plan.layout.clone()
+            ),
+            Ok(true)
+        );
+        assert_eq!(pipeline.epoch(), 1);
+        assert_eq!(pipeline.state(), PipelineState::Revalidating);
+        pipeline.finish_revalidation(initial_plan).unwrap();
+
+        let changed_topology = topology(
+            8,
+            vec![
+                descriptor(1, -2560, 0, 2560, 1440, false),
+                descriptor(2, 0, 0, 2560, 1440, true),
+            ],
+        );
+        let changed_plan = strict_plan(&changed_topology, &initial_sources);
+        assert_eq!(
+            pipeline.reconfigure(
+                Resolution::new(2240, 720).unwrap(),
+                changed_plan.layout.clone()
+            ),
+            Ok(true)
+        );
+        assert_eq!(pipeline.epoch(), 2);
+        assert_eq!(pipeline.layout().generation(), 8);
+        assert!(pipeline.plan().is_none());
+        pipeline.finish_revalidation(changed_plan).unwrap();
+        assert_eq!(pipeline.state(), PipelineState::Active);
+    }
+
+    #[test]
+    fn stale_layout_proof_cannot_finish_revalidation() {
+        let old_topology = two_display_topology(7);
+        let sources = [source(1, "gpu-0"), source(2, "gpu-0")];
+        let old_plan = strict_plan(&old_topology, &sources);
+        let mut pipeline = MultiDisplayPipeline::active(
+            ZeroCopyPolicy::RequiredEndToEnd,
+            Resolution::new(4480, 1440).unwrap(),
+            old_plan.clone(),
+        )
+        .unwrap();
+        let new_topology = topology(
+            8,
+            vec![
+                descriptor(1, -2560, 0, 2560, 1440, false),
+                descriptor(2, 0, 0, 2560, 1440, true),
+            ],
+        );
+        let new_plan = strict_plan(&new_topology, &sources);
+        assert_eq!(
+            pipeline.reconfigure(Resolution::new(4480, 1440).unwrap(), new_plan.layout),
+            Ok(true)
+        );
+
+        assert_eq!(
+            pipeline.finish_revalidation(old_plan),
+            Err(MultiDisplayPipelineError::StaleLayout)
+        );
+        assert_eq!(pipeline.state(), PipelineState::Revalidating);
+    }
+
+    #[test]
+    fn generation_overflow_fails_closed_without_mutating_pipeline() {
+        let topology = two_display_topology(7);
+        let sources = [source(1, "gpu-0"), source(2, "gpu-0")];
+        let plan = strict_plan(&topology, &sources);
+        let mut pipeline = MultiDisplayPipeline::active(
+            ZeroCopyPolicy::RequiredEndToEnd,
+            Resolution::new(4480, 1440).unwrap(),
+            plan,
+        )
+        .unwrap();
+        pipeline.epoch = u64::MAX;
+        let original = pipeline.clone();
+
+        assert_eq!(
+            pipeline.reconfigure(Resolution::new(2240, 720).unwrap(), original.layout.clone()),
+            Err(MultiDisplayPipelineError::GenerationOverflow)
+        );
+        assert_eq!(pipeline, original);
+    }
+}
diff --git a/agent/agent-runtime/Cargo.toml b/agent/agent-runtime/Cargo.toml
new file mode 100644
index 0000000..1254551
--- /dev/null
+++ b/agent/agent-runtime/Cargo.toml
@@ -0,0 +1,74 @@
+[package]
+name = "remotedesk-agent-runtime"
+version.workspace = true
+edition.workspace = true
+license.workspace = true
+rust-version.workspace = true
+description = "Runnable Linux controlled-endpoint services for RemoteDesk"
+
+[features]
+default = ["gstreamer-h264", "wayland-eis"]
+gstreamer-h264 = ["dep:gstreamer", "dep:gstreamer-app"]
+wayland-eis = ["dep:xkbcommon"]
+
+[lib]
+path = "src/lib.rs"
+
+[[bin]]
+name = "remotedesk-agentd"
+path = "src/bin/remotedesk-agentd.rs"
+
+[[bin]]
+name = "remotedesk-agent-session"
+path = "src/bin/remotedesk-agent-session.rs"
+
+[[bin]]
+name = "remotedesk-shell-session"
+path = "src/bin/remotedesk-shell-session.rs"
+
+[[bin]]
+name = "remotedesk-file-session"
+path = "src/bin/remotedesk-file-session.rs"
+
+[dependencies]
+async-trait = "0.1"
+base64 = "0.22"
+bytes = "1.12"
+clap = { version = "4.5", features = ["derive"] }
+ed25519-dalek = "2.2"
+flate2 = "1.1"
+futures-util = "0.3"
+rand = "0.9"
+rcgen = "0.14"
+remotedesk-protocol = { path = "../../protocol" }
+reqwest = { version = "0.12.28", default-features = false, features = ["json", "rustls-tls"] }
+rtc = "0.20.1"
+rustls = { version = "0.23", default-features = false, features = ["logging", "ring", "std", "tls12"] }
+rustls-native-certs = "0.8"
+rustls-pemfile = "2.2"
+serde = { version = "1.0", features = ["derive"] }
+serde_json = "1.0"
+sha2 = "0.10"
+tokio = { version = "1.47", features = ["fs", "io-util", "macros", "net", "process", "rt-multi-thread", "signal", "sync", "time"] }
+tokio-rustls = { version = "0.26", default-features = false, features = ["logging", "ring", "tls12"] }
+url = "2.5"
+webrtc = "0.20.1"
+zeroize = "1.9"
+
+[target.'cfg(target_os = "linux")'.dependencies]
+gstreamer = { version = "0.24.5", optional = true }
+gstreamer-app = { version = "0.24.5", optional = true }
+portable-pty = "0.9"
+reis = { version = "0.7.1", features = ["tokio"] }
+rustix = { version = "1.1", features = ["time"] }
+tokio-tungstenite = "0.29"
+x11rb = { version = "0.13.2", features = ["xtest"] }
+xkbcommon = { version = "0.9", default-features = false, features = ["wayland"], optional = true }
+zbus = { version = "5.12", default-features = false, features = ["tokio"] }
+
+[dev-dependencies]
+remotedesk-edge-service = { path = "../../edge/edge-service" }
+tiny_http = "0.12"
+
+[lints]
+workspace = true
diff --git a/agent/agent-runtime/src/bin/remotedesk-agent-session.rs b/agent/agent-runtime/src/bin/remotedesk-agent-session.rs
new file mode 100644
index 0000000..88ab5b8
--- /dev/null
+++ b/agent/agent-runtime/src/bin/remotedesk-agent-session.rs
@@ -0,0 +1,1862 @@
+#[cfg(not(target_os = "linux"))]
+fn main() {
+    eprintln!("remotedesk-agent-session is only supported on Linux");
+    std::process::exit(1);
+}
+
+#[cfg(target_os = "linux")]
+mod linux {
+    use std::{
+        os::unix::fs::PermissionsExt as _,
+        path::{Path, PathBuf},
+        sync::{
+            Arc,
+            atomic::{AtomicBool, Ordering},
+        },
+        time::{Duration, Instant, SystemTime, UNIX_EPOCH},
+    };
+
+    use base64::{
+        Engine as _,
+        engine::general_purpose::{STANDARD_NO_PAD, URL_SAFE_NO_PAD},
+    };
+    use clap::{Parser, Subcommand};
+    use rand::RngCore as _;
+    use remotedesk_agent_runtime::{
+        ClientCommand, DESKTOP_H264_CHUNK_BYTES, DESKTOP_MAX_H264_ACCESS_UNIT_BYTES,
+        DesktopBackendKind, DesktopCompressionController, DesktopFrameEncoding, DesktopFramePacer,
+        DesktopH264Metadata, DesktopVideoMode, EncodedDesktopFrame, EncodedH264AccessUnit,
+        EncodedOpusPacket, H264Encoder, H264EncoderError, IpcMessage, IpcResponse, LinuxDesktop,
+        OpusCapture, OpusCaptureError, PROTOCOL_MAJOR, PROTOCOL_MINOR, PortalH264Encoder,
+        PreparedClipboardText, ServerEvent, WaylandEisInput, WaylandPortalSession,
+        decode_clipboard_text, encode_desktop_frame_with_level, open_wayland_portal_session,
+        prepare_clipboard_text, probe_wayland_portal, validate_clipboard_offer,
+    };
+    use sha2::{Digest as _, Sha256};
+    use tokio::{
+        fs,
+        io::{AsyncBufReadExt as _, AsyncWriteExt as _, BufReader},
+        net::{UnixListener, UnixStream},
+        sync::{Mutex, mpsc},
+        time::{Instant as TokioInstant, MissedTickBehavior, interval, sleep},
+    };
+
+    type Error = Box<dyn std::error::Error + Send + Sync>;
+    const DESKTOP_RESUME_GRACE: Duration = Duration::from_secs(15);
+    const DESKTOP_ZLIB_ACK_TIMEOUT: Duration = Duration::from_secs(5);
+    const DESKTOP_H264_ACK_TIMEOUT: Duration = Duration::from_secs(3);
+    const DESKTOP_CLIPBOARD_POLL_INTERVAL: Duration = Duration::from_millis(500);
+
+    struct DesktopOpusCapture {
+        receiver: mpsc::Receiver<Result<EncodedOpusPacket, OpusCaptureError>>,
+        _task: tokio::task::JoinHandle<()>,
+    }
+
+    impl DesktopOpusCapture {
+        fn start() -> Result<Self, OpusCaptureError> {
+            let mut capture = OpusCapture::new()?;
+            let (sender, receiver) = mpsc::channel(8);
+            let task = tokio::task::spawn_blocking(move || {
+                loop {
+                    match capture.next_packet() {
+                        Ok(packet) => {
+                            if sender.blocking_send(Ok(packet)).is_err() {
+                                break;
+                            }
+                        }
+                        Err(OpusCaptureError::OutputTimeout) => {}
+                        Err(error) => {
+                            let _ = sender.blocking_send(Err(error));
+                            break;
+                        }
+                    }
+                }
+            });
+            Ok(Self {
+                receiver,
+                _task: task,
+            })
+        }
+    }
+
+    struct DetachedDesktopSession {
+        token: String,
+        client_fingerprint: String,
+        user: String,
+        desktop: Arc<Mutex<LinuxDesktop>>,
+        sequence: u64,
+        frames_per_second: u8,
+        pacer: DesktopFramePacer,
+        compression: DesktopCompressionController,
+        expires_at: Instant,
+    }
+
+    type DesktopResumeLease = Arc<Mutex<Option<DetachedDesktopSession>>>;
+
+    struct DetachedWaylandSession {
+        token: String,
+        client_fingerprint: String,
+        user: String,
+        portal: WaylandPortalSession,
+        input: WaylandEisInput,
+        sequence: u64,
+        expires_at: Instant,
+    }
+
+    type WaylandResumeLease = Arc<Mutex<Option<DetachedWaylandSession>>>;
+
+    #[derive(Clone, Copy, Debug, PartialEq, Eq)]
+    enum WaylandSessionExit {
+        Closed,
+        Detached { sequence: u64 },
+    }
+
+    #[derive(Debug, Parser)]
+    #[command(
+        name = "remotedesk-agent-session",
+        version,
+        about = "RemoteDesk graphical user-session agent"
+    )]
+    struct Cli {
+        #[command(subcommand)]
+        command: Option<SessionCommand>,
+        #[arg(long, default_value = "/run/remotedesk/agentd.sock")]
+        ipc_socket: PathBuf,
+    }
+
+    #[derive(Debug, Subcommand)]
+    enum SessionCommand {
+        Serve,
+        Status {
+            #[arg(long)]
+            json: bool,
+        },
+    }
+
+    pub async fn run() -> Result<(), Error> {
+        let cli = Cli::parse();
+        match cli.command.unwrap_or(SessionCommand::Serve) {
+            SessionCommand::Serve => serve(cli.ipc_socket).await,
+            SessionCommand::Status { json } => {
+                let backend_kind = DesktopBackendKind::from_environment();
+                let backend = backend_kind.as_str();
+                let portal = if backend_kind == DesktopBackendKind::Wayland {
+                    match tokio::time::timeout(Duration::from_secs(3), probe_wayland_portal()).await
+                    {
+                        Ok(Ok(capabilities)) => serde_json::json!({
+                            "available": true,
+                            "failure_code": null,
+                            "remote_desktop_version": capabilities.remote_desktop_version,
+                            "screen_cast_version": capabilities.screen_cast_version,
+                            "available_device_types": capabilities.available_device_types,
+                            "available_source_types": capabilities.available_source_types,
+                            "available_cursor_modes": capabilities.available_cursor_modes,
+                        }),
+                        Ok(Err(error)) => serde_json::json!({
+                            "available": false,
+                            "failure_code": error.code(),
+                        }),
+                        Err(_) => serde_json::json!({
+                            "available": false,
+                            "failure_code": "probe_timeout",
+                        }),
+                    }
+                } else {
+                    serde_json::Value::Null
+                };
+                let value = serde_json::json!({
+                    "desktop_backend": backend,
+                    "wayland_display": std::env::var_os("WAYLAND_DISPLAY").is_some(),
+                    "x11_display": std::env::var_os("DISPLAY").is_some(),
+                    "pipewire_runtime": pipewire_available(),
+                    "wayland_portal": portal,
+                    "desktop_transport": backend != "headless",
+                    "wayland_transport": backend == "wayland",
+                });
+                if json {
+                    println!("{}", serde_json::to_string_pretty(&value)?);
+                } else {
+                    println!("desktop backend: {backend}");
+                    println!(
+                        "desktop transport: {}",
+                        if backend == "x11" {
+                            "X11 available"
+                        } else if backend == "wayland" {
+                            "Wayland Portal/EIS available (runtime Portal probe required)"
+                        } else {
+                            "unavailable"
+                        }
+                    );
+                }
+                Ok(())
+            }
+        }
+    }
+
+    async fn serve(socket_path: PathBuf) -> Result<(), Error> {
+        let uid = current_uid();
+        let backend_kind = DesktopBackendKind::from_environment();
+        let backend = backend_kind.as_str().to_owned();
+        let desktop_socket = is_graphical_backend(backend_kind)
+            .then(|| desktop_socket_path(uid))
+            .transpose()?;
+        let desktop_listener = match desktop_socket.as_deref() {
+            Some(path) => Some(bind_desktop_socket(path).await?),
+            None => None,
+        };
+        let stream = UnixStream::connect(socket_path).await?;
+        let (reader, mut writer) = stream.into_split();
+        let mut lines = BufReader::new(reader).lines();
+        write_message(
+            &mut writer,
+            &IpcMessage::Hello {
+                protocol_major: PROTOCOL_MAJOR,
+                protocol_minor: PROTOCOL_MINOR,
+                pid: std::process::id(),
+                uid,
+                desktop_backend: backend,
+                desktop_socket: desktop_socket
+                    .as_deref()
+                    .map(|path| path.to_string_lossy().into_owned()),
+            },
+        )
+        .await?;
+        let response = lines
+            .next_line()
+            .await?
+            .ok_or("agentd closed the IPC socket")?;
+        if !matches!(
+            serde_json::from_str::<IpcResponse>(&response)?,
+            IpcResponse::Accepted { .. }
+        ) {
+            return Err(format!("agentd rejected this session: {response}").into());
+        }
+
+        let mut heartbeat = interval(Duration::from_secs(15));
+        heartbeat.set_missed_tick_behavior(MissedTickBehavior::Delay);
+        let desktop_active = Arc::new(AtomicBool::new(false));
+        let desktop_resume: DesktopResumeLease = Arc::new(Mutex::new(None));
+        let wayland_resume: WaylandResumeLease = Arc::new(Mutex::new(None));
+        loop {
+            tokio::select! {
+                _ = heartbeat.tick() => {
+                    write_message(&mut writer, &IpcMessage::Heartbeat).await?;
+                    let response = lines
+                        .next_line()
+                        .await?
+                        .ok_or("agentd closed the IPC socket")?;
+                    if !matches!(
+                        serde_json::from_str::<IpcResponse>(&response)?,
+                        IpcResponse::Alive
+                    ) {
+                        return Err("agentd returned an invalid heartbeat response".into());
+                    }
+                }
+                accepted = accept_desktop(&desktop_listener) => {
+                    let (stream, _) = accepted?;
+                    let active = Arc::clone(&desktop_active);
+                    if active.compare_exchange(false, true, Ordering::AcqRel, Ordering::Acquire).is_err() {
+                        drop(stream);
+                        continue;
+                    }
+                    let resume = Arc::clone(&desktop_resume);
+                    let wayland_resume = Arc::clone(&wayland_resume);
+                    tokio::spawn(async move {
+                        if let Err(error) =
+                            handle_desktop(stream, resume, wayland_resume, backend_kind).await
+                        {
+                            eprintln!("desktop session stopped: {error}");
+                        }
+                        active.store(false, Ordering::Release);
+                    });
+                }
+            }
+        }
+    }
+
+    async fn accept_desktop(
+        listener: &Option<UnixListener>,
+    ) -> Result<(UnixStream, tokio::net::unix::SocketAddr), std::io::Error> {
+        match listener {
+            Some(listener) => listener.accept().await,
+            None => std::future::pending().await,
+        }
+    }
+
+    async fn bind_desktop_socket(path: &Path) -> Result<UnixListener, Error> {
+        let parent = path
+            .parent()
+            .ok_or("desktop socket has no parent directory")?;
+        fs::create_dir_all(parent).await?;
+        fs::set_permissions(parent, std::fs::Permissions::from_mode(0o700)).await?;
+        if fs::symlink_metadata(path).await.is_ok() {
+            fs::remove_file(path).await?;
+        }
+        let listener = UnixListener::bind(path)?;
+        fs::set_permissions(path, std::fs::Permissions::from_mode(0o600)).await?;
+        Ok(listener)
+    }
+
+    async fn handle_desktop(
+        stream: UnixStream,
+        resume_lease: DesktopResumeLease,
+        wayland_resume_lease: WaylandResumeLease,
+        backend_kind: DesktopBackendKind,
+    ) -> Result<(), Error> {
+        let peer = stream.peer_cred()?;
+        if peer.uid() != 0 {
+            return Err("desktop IPC peer must be the root Agent daemon".into());
+        }
+        let (reader, mut writer) = stream.into_split();
+        let mut lines = BufReader::new(reader).lines();
+        let open = next_desktop_command(&mut lines)
+            .await?
+            .ok_or("Agent daemon closed the desktop IPC socket before opening a session")?;
+        let ClientCommand::OpenDesktop {
+            user,
+            max_width,
+            max_height,
+            frames_per_second,
+            resume_token,
+            client_fingerprint,
+            edge_session_id: _,
+            webrtc_h264,
+            opus_audio,
+            clipboard_read,
+            clipboard_write,
+        } = open
+        else {
+            return Err("desktop IPC must begin with open_desktop".into());
+        };
+        if !valid_desktop_size(max_width, max_height) || !valid_frame_rate(frames_per_second) {
+            return Err("desktop request dimensions or frame rate are invalid".into());
+        }
+        let Some(client_fingerprint) =
+            client_fingerprint.filter(|value| valid_client_fingerprint(value))
+        else {
+            return Err("desktop IPC is missing its authenticated client binding".into());
+        };
+        if backend_kind == DesktopBackendKind::Wayland {
+            return handle_wayland_desktop(
+                &mut writer,
+                &mut lines,
+                &wayland_resume_lease,
+                max_width,
+                max_height,
+                frames_per_second,
+                resume_token.as_deref(),
+                &client_fingerprint,
+                &user,
+                webrtc_h264,
+                opus_audio,
+            )
+            .await;
+        }
+        let (desktop, mut sequence, mut pacer, mut compression, resumed) =
+            match acquire_desktop_session(
+                &resume_lease,
+                resume_token.as_deref(),
+                &client_fingerprint,
+                &user,
+                frames_per_second,
+            )
+            .await
+            {
+                Ok(session) => session,
+                Err(message) => {
+                    write_event(
+                        &mut writer,
+                        &ServerEvent::Error {
+                            code: "desktop_resume_rejected".into(),
+                            message,
+                        },
+                    )
+                    .await?;
+                    return Ok(());
+                }
+            };
+        let rotated_resume_token = new_desktop_resume_token();
+        let mut capture_width = max_width;
+        let mut capture_height = max_height;
+        let first_frame = match capture_frame(Arc::clone(&desktop), capture_width, capture_height)
+            .await
+        {
+            Ok(frame) => frame,
+            Err(error) => {
+                let release_desktop = Arc::clone(&desktop);
+                tokio::task::spawn_blocking(move || release_desktop.blocking_lock().release_all())
+                    .await??;
+                return Err(error);
+            }
+        };
+        if write_event(
+            &mut writer,
+            &ServerEvent::DesktopOpened {
+                width: first_frame.width,
+                height: first_frame.height,
+                encoding: DesktopFrameEncoding::ZlibBgra,
+                resume_token: rotated_resume_token.clone(),
+                resumed,
+            },
+        )
+        .await
+        .is_err()
+        {
+            let release_desktop = Arc::clone(&desktop);
+            tokio::task::spawn_blocking(move || release_desktop.blocking_lock().release_all())
+                .await??;
+            store_desktop_resume_lease(
+                resume_lease,
+                DetachedDesktopSession {
+                    token: rotated_resume_token,
+                    client_fingerprint,
+                    user,
+                    desktop,
+                    sequence,
+                    frames_per_second,
+                    pacer,
+                    compression,
+                    expires_at: Instant::now() + DESKTOP_RESUME_GRACE,
+                },
+            )
+            .await;
+            return Ok(());
+        }
+        let mut pending_frame = Some(first_frame);
+        let mut h264_encoder = if webrtc_h264 {
+            let first = pending_frame.as_ref().expect("first frame exists");
+            match H264Encoder::new(first.width, first.height, frames_per_second) {
+                Ok(encoder) => Some(encoder),
+                Err(error) => {
+                    eprintln!("WebRTC H.264 encoder unavailable: {error}");
+                    write_event(
+                        &mut writer,
+                        &ServerEvent::DesktopH264Unavailable {
+                            reason_code: error.reason_code().into(),
+                        },
+                    )
+                    .await?;
+                    None
+                }
+            }
+        } else {
+            None
+        };
+        let mut video_mode = DesktopVideoMode::ZlibBgra;
+        let mut opus_capture = if opus_audio {
+            match DesktopOpusCapture::start() {
+                Ok(capture) => Some(capture),
+                Err(error) => {
+                    write_event(
+                        &mut writer,
+                        &ServerEvent::DesktopOpusUnavailable {
+                            reason_code: error.reason_code().into(),
+                        },
+                    )
+                    .await?;
+                    None
+                }
+            }
+        } else {
+            None
+        };
+        let mut opus_sequence = 0_u64;
+        let mut switch_to_native_after_ack = false;
+        let mut awaiting_ack = None;
+        let mut frame_sent_at = None;
+        let frame_timer = sleep(pacer.frame_interval());
+        tokio::pin!(frame_timer);
+        let ack_timer = sleep(DESKTOP_ZLIB_ACK_TIMEOUT);
+        tokio::pin!(ack_timer);
+        let mut detached = false;
+        let mut clipboard_sequence = 0_u64;
+        let mut last_local_clipboard_sha = None;
+        let mut pending_local_clipboard: Option<PreparedClipboardText> = None;
+        let mut last_remote_clipboard_sequence = 0_u64;
+        let mut pending_remote_clipboard: Option<(u64, u32, String)> = None;
+        let mut clipboard_timer = tokio::time::interval(DESKTOP_CLIPBOARD_POLL_INTERVAL);
+        clipboard_timer.set_missed_tick_behavior(tokio::time::MissedTickBehavior::Skip);
+
+        let session_result: Result<(), Error> = async {
+            loop {
+                tokio::select! {
+                    _ = clipboard_timer.tick(), if clipboard_read => {
+                        match poll_desktop_clipboard(Arc::clone(&desktop)).await {
+                            Ok(Some(text)) => {
+                                let next_sequence = clipboard_sequence
+                                    .checked_add(1)
+                                    .ok_or("desktop clipboard sequence exhausted")?;
+                                match prepare_clipboard_text(next_sequence, &text) {
+                                    Ok(prepared)
+                                        if last_local_clipboard_sha.as_deref()
+                                            != Some(prepared.sha256.as_str()) =>
+                                    {
+                                        clipboard_sequence = next_sequence;
+                                        last_local_clipboard_sha = Some(prepared.sha256.clone());
+                                        write_event(
+                                            &mut writer,
+                                            &ServerEvent::DesktopClipboardOffer {
+                                                sequence: prepared.sequence,
+                                                utf8_bytes: prepared.utf8_bytes,
+                                                sha256: prepared.sha256.clone(),
+                                            },
+                                        ).await?;
+                                        pending_local_clipboard = Some(prepared);
+                                    }
+                                    Ok(_) => {}
+                                    Err(error) => {
+                                        eprintln!("ignoring unsupported X11 clipboard text: {error}");
+                                    }
+                                }
+                            }
+                            Ok(None) => {}
+                            Err(error) => {
+                                eprintln!("X11 clipboard poll failed: {error}");
+                            }
+                        }
+                    }
+                    packet = next_opus_packet(&mut opus_capture), if opus_capture.is_some() => {
+                        match packet {
+                            Some(Ok(packet)) => {
+                                opus_sequence = opus_sequence
+                                    .checked_add(1)
+                                    .ok_or("desktop Opus sequence exhausted")?;
+                                send_opus_packet(&mut writer, opus_sequence, packet).await?;
+                            }
+                            Some(Err(error)) => {
+                                opus_capture = None;
+                                write_event(
+                                    &mut writer,
+                                    &ServerEvent::DesktopOpusUnavailable {
+                                        reason_code: error.reason_code().into(),
+                                    },
+                                ).await?;
+                            }
+                            None => {
+                                opus_capture = None;
+                                write_event(
+                                    &mut writer,
+                                    &ServerEvent::DesktopOpusUnavailable {
+                                        reason_code: "opus_capture_stopped".into(),
+                                    },
+                                ).await?;
+                            }
+                        }
+                    }
+                    _ = &mut frame_timer, if awaiting_ack.is_none() => {
+                        let frame = if let Some(frame) = pending_frame.take() {
+                            frame
+                        } else {
+                            capture_frame(Arc::clone(&desktop), capture_width, capture_height).await?
+                        };
+                        sequence = sequence.checked_add(1).ok_or("desktop frame sequence exhausted")?;
+                        let mut h264_sent = false;
+                        if let Some(encoder) = h264_encoder.as_mut() {
+                            if !encoder.matches(frame.width, frame.height, frames_per_second) {
+                                match H264Encoder::new(frame.width, frame.height, frames_per_second) {
+                                    Ok(rebuilt) => *encoder = rebuilt,
+                                    Err(error) => {
+                                        eprintln!("WebRTC H.264 encoder resize failed: {error}");
+                                        write_event(
+                                            &mut writer,
+                                            &ServerEvent::DesktopH264Unavailable {
+                                                reason_code: error.reason_code().into(),
+                                            },
+                                        ).await?;
+                                        h264_encoder = None;
+                                    }
+                                }
+                            }
+                        }
+                        if let Some(encoder) = h264_encoder.as_mut() {
+                            match tokio::task::block_in_place(|| encoder.encode(&frame.bgra)) {
+                                Ok(access_unit) => {
+                                    send_h264_access_unit(
+                                        &mut writer,
+                                        sequence,
+                                        frame.width,
+                                        frame.height,
+                                        frame.captured_at_unix_ms,
+                                        frame.capture_latency_us,
+                                        access_unit,
+                                    ).await?;
+                                    h264_sent = true;
+                                }
+                                Err(error) => {
+                                    eprintln!("WebRTC H.264 encoder stopped: {error}");
+                                    write_event(
+                                        &mut writer,
+                                        &ServerEvent::DesktopH264Unavailable {
+                                            reason_code: error.reason_code().into(),
+                                        },
+                                    ).await?;
+                                    h264_encoder = None;
+                                    if video_mode == DesktopVideoMode::WebRtcH264 {
+                                        video_mode = DesktopVideoMode::ZlibBgra;
+                                        switch_to_native_after_ack = false;
+                                        write_event(
+                                            &mut writer,
+                                            &ServerEvent::DesktopVideoModeChanged {
+                                                mode: video_mode,
+                                            },
+                                        ).await?;
+                                    }
+                                }
+                            }
+                        }
+                        if video_mode == DesktopVideoMode::WebRtcH264 && !h264_sent {
+                            video_mode = DesktopVideoMode::ZlibBgra;
+                            switch_to_native_after_ack = false;
+                            write_event(
+                                &mut writer,
+                                &ServerEvent::DesktopVideoModeChanged {
+                                    mode: video_mode,
+                                },
+                            ).await?;
+                        }
+                        if video_mode == DesktopVideoMode::WebRtcH264 && h264_sent {
+                            awaiting_ack = Some((sequence, DesktopVideoMode::WebRtcH264));
+                            frame_sent_at = Some(Instant::now());
+                            ack_timer.as_mut().reset(
+                                TokioInstant::now() + DESKTOP_H264_ACK_TIMEOUT,
+                            );
+                            frame_timer.as_mut().reset(TokioInstant::now() + pacer.frame_interval());
+                            continue;
+                        }
+                        let encoded = encode_desktop_frame_with_level(
+                            sequence,
+                            frame.width,
+                            frame.height,
+                            frame.captured_at_unix_ms,
+                            frame.capture_latency_us,
+                            compression.current_level(),
+                            &frame.bgra,
+                        )?;
+                        compression.observe_encode(
+                            Duration::from_micros(encoded.metadata.encode_latency_us),
+                            pacer.frame_interval(),
+                        );
+                        let delivery_started = Instant::now();
+                        if send_frame(&mut writer, encoded).await.is_err() {
+                            detached = true;
+                            break;
+                        }
+                        awaiting_ack = Some((sequence, DesktopVideoMode::ZlibBgra));
+                        frame_sent_at = Some(delivery_started);
+                        ack_timer.as_mut().reset(
+                            TokioInstant::now() + DESKTOP_ZLIB_ACK_TIMEOUT,
+                        );
+                        frame_timer.as_mut().reset(TokioInstant::now() + pacer.frame_interval());
+                    }
+                    _ = &mut ack_timer, if awaiting_ack.is_some() => {
+                        if awaiting_ack.is_some_and(|(_, mode)| {
+                            mode == DesktopVideoMode::WebRtcH264
+                        }) {
+                            awaiting_ack = None;
+                            frame_sent_at = None;
+                            video_mode = DesktopVideoMode::ZlibBgra;
+                            switch_to_native_after_ack = false;
+                            write_event(
+                                &mut writer,
+                                &ServerEvent::DesktopVideoModeChanged {
+                                    mode: video_mode,
+                                },
+                            ).await?;
+                            frame_timer.as_mut().reset(TokioInstant::now());
+                        } else {
+                            return Err("desktop zlib presentation ACK timed out".into());
+                        }
+                    }
+                    command = next_desktop_command(&mut lines) => {
+                        let Some(command) = command? else {
+                            detached = true;
+                            break;
+                        };
+                        match command {
+                            ClientCommand::DesktopFrameAck { sequence }
+                                if awaiting_ack == Some((sequence, DesktopVideoMode::ZlibBgra)) =>
+                            {
+                                awaiting_ack = None;
+                                if let Some(elapsed) = frame_sent_at.take().map(|started| started.elapsed())
+                                {
+                                    let interval = pacer.frame_interval();
+                                    compression.observe_presentation_ack(elapsed, interval);
+                                    if pacer.observe_presentation_ack(elapsed) {
+                                        frame_timer.as_mut().reset(TokioInstant::now() + pacer.frame_interval());
+                                    }
+                                }
+                                if switch_to_native_after_ack && h264_encoder.is_some() {
+                                    switch_to_native_after_ack = false;
+                                    video_mode = DesktopVideoMode::WebRtcH264;
+                                    write_event(
+                                        &mut writer,
+                                        &ServerEvent::DesktopVideoModeChanged {
+                                            mode: video_mode,
+                                        },
+                                    ).await?;
+                                }
+                            }
+                            ClientCommand::DesktopH264FrameAck { sequence }
+                                if awaiting_ack == Some((sequence, DesktopVideoMode::WebRtcH264)) =>
+                            {
+                                awaiting_ack = None;
+                                if let Some(elapsed) = frame_sent_at.take().map(|started| started.elapsed())
+                                    && pacer.observe_presentation_ack(elapsed)
+                                {
+                                    frame_timer.as_mut().reset(TokioInstant::now() + pacer.frame_interval());
+                                }
+                            }
+                            ClientCommand::DesktopFrameAck { .. }
+                            | ClientCommand::DesktopH264FrameAck { .. } => {}
+                            ClientCommand::DesktopVideoMode {
+                                mode: DesktopVideoMode::WebRtcH264,
+                            } => {
+                                if h264_encoder.is_none() {
+                                    video_mode = DesktopVideoMode::ZlibBgra;
+                                    switch_to_native_after_ack = false;
+                                    write_event(
+                                        &mut writer,
+                                        &ServerEvent::DesktopVideoModeChanged {
+                                            mode: video_mode,
+                                        },
+                                    ).await?;
+                                } else if video_mode == DesktopVideoMode::WebRtcH264 {
+                                    write_event(
+                                        &mut writer,
+                                        &ServerEvent::DesktopVideoModeChanged {
+                                            mode: video_mode,
+                                        },
+                                    ).await?;
+                                } else if awaiting_ack.is_some() {
+                                    switch_to_native_after_ack = true;
+                                } else {
+                                    video_mode = DesktopVideoMode::WebRtcH264;
+                                    write_event(
+                                        &mut writer,
+                                        &ServerEvent::DesktopVideoModeChanged {
+                                            mode: video_mode,
+                                        },
+                                    ).await?;
+                                }
+                            }
+                            ClientCommand::DesktopVideoMode {
+                                mode: DesktopVideoMode::ZlibBgra,
+                            } => {
+                                if awaiting_ack.is_some_and(|(_, mode)| {
+                                    mode == DesktopVideoMode::WebRtcH264
+                                }) {
+                                    awaiting_ack = None;
+                                    frame_sent_at = None;
+                                }
+                                video_mode = DesktopVideoMode::ZlibBgra;
+                                switch_to_native_after_ack = false;
+                                write_event(
+                                    &mut writer,
+                                    &ServerEvent::DesktopVideoModeChanged {
+                                        mode: video_mode,
+                                    },
+                                ).await?;
+                            }
+                            ClientCommand::DesktopInput { event } => {
+                                let desktop = Arc::clone(&desktop);
+                                tokio::task::spawn_blocking(move || {
+                                    desktop.blocking_lock().input(&event)
+                                }).await??;
+                            }
+                            ClientCommand::DesktopClipboardRequest { sequence }
+                                if clipboard_read =>
+                            {
+                                if let Some(prepared) = pending_local_clipboard.as_ref()
+                                    && prepared.sequence == sequence
+                                {
+                                    write_event(
+                                        &mut writer,
+                                        &ServerEvent::DesktopClipboardData {
+                                            sequence,
+                                            data: prepared.data.clone(),
+                                        },
+                                    ).await?;
+                                }
+                            }
+                            ClientCommand::DesktopClipboardOffer {
+                                sequence,
+                                utf8_bytes,
+                                sha256,
+                            } if clipboard_write => {
+                                validate_clipboard_offer(sequence, utf8_bytes, &sha256)?;
+                                if sequence > last_remote_clipboard_sequence {
+                                    last_remote_clipboard_sequence = sequence;
+                                    pending_remote_clipboard = None;
+                                    if last_local_clipboard_sha.as_deref() != Some(sha256.as_str()) {
+                                        pending_remote_clipboard = Some((sequence, utf8_bytes, sha256));
+                                        write_event(
+                                            &mut writer,
+                                            &ServerEvent::DesktopClipboardRequest { sequence },
+                                        ).await?;
+                                    }
+                                }
+                            }
+                            ClientCommand::DesktopClipboardData { sequence, data }
+                                if clipboard_write =>
+                            {
+                                if let Some((offered_sequence, utf8_bytes, sha256)) =
+                                    pending_remote_clipboard.clone()
+                                    && offered_sequence == sequence
+                                {
+                                    let text = decode_clipboard_text(&data, utf8_bytes, &sha256)?;
+                                    set_desktop_clipboard(Arc::clone(&desktop), text).await?;
+                                    last_local_clipboard_sha = Some(sha256);
+                                    pending_remote_clipboard = None;
+                                }
+                            }
+                            ClientCommand::DesktopClipboardOffer { .. }
+                            | ClientCommand::DesktopClipboardRequest { .. }
+                            | ClientCommand::DesktopClipboardData { .. } => {
+                                return Err("desktop clipboard command is not permitted".into());
+                            }
+                            ClientCommand::DesktopResize { max_width, max_height }
+                                if valid_desktop_size(max_width, max_height) =>
+                            {
+                                capture_width = max_width;
+                                capture_height = max_height;
+                                pending_frame = None;
+                            }
+                            ClientCommand::Close => {
+                                break;
+                            }
+                            _ => return Err("desktop IPC command is invalid in the current state".into()),
+                        }
+                    }
+                }
+            }
+            Ok(())
+        }
+        .await;
+        let release_desktop = Arc::clone(&desktop);
+        let release_result =
+            tokio::task::spawn_blocking(move || release_desktop.blocking_lock().release_all())
+                .await;
+        session_result?;
+        release_result??;
+        if detached {
+            store_desktop_resume_lease(
+                resume_lease,
+                DetachedDesktopSession {
+                    token: rotated_resume_token,
+                    client_fingerprint,
+                    user,
+                    desktop,
+                    sequence,
+                    frames_per_second,
+                    pacer,
+                    compression,
+                    expires_at: Instant::now() + DESKTOP_RESUME_GRACE,
+                },
+            )
+            .await;
+            return Ok(());
+        }
+        write_event(
+            &mut writer,
+            &ServerEvent::DesktopClosed {
+                reason: "client_closed".into(),
+            },
+        )
+        .await?;
+        Ok(())
+    }
+
+    #[allow(clippy::too_many_arguments)]
+    async fn handle_wayland_desktop(
+        writer: &mut tokio::net::unix::OwnedWriteHalf,
+        lines: &mut tokio::io::Lines<BufReader<tokio::net::unix::OwnedReadHalf>>,
+        resume_lease: &WaylandResumeLease,
+        max_width: u16,
+        max_height: u16,
+        frames_per_second: u8,
+        resume_token: Option<&str>,
+        client_fingerprint: &str,
+        user: &str,
+        webrtc_h264: bool,
+        opus_audio: bool,
+    ) -> Result<(), Error> {
+        if !webrtc_h264 {
+            write_wayland_error(
+                writer,
+                "wayland_webrtc_required",
+                "Wayland strict zero-copy desktop requires an authorized WebRTC media sender",
+            )
+            .await?;
+            return Ok(());
+        }
+
+        let detached =
+            match take_wayland_resume_lease(resume_lease, resume_token, client_fingerprint, user)
+                .await
+            {
+                Ok(session) => session,
+                Err(message) => {
+                    write_event(
+                        writer,
+                        &ServerEvent::Error {
+                            code: "desktop_resume_rejected".into(),
+                            message,
+                        },
+                    )
+                    .await?;
+                    return Ok(());
+                }
+            };
+        let resumed = detached.is_some();
+        let (portal, retained_input, sequence) = match detached {
+            Some(session) => (session.portal, Some(session.input), session.sequence),
+            None => match open_wayland_portal_session().await {
+                Ok(portal) => (portal, None, 0),
+                Err(error) => {
+                    write_event(
+                        writer,
+                        &ServerEvent::Error {
+                            code: format!("wayland_portal_{}", error.code()),
+                            message: error.to_string(),
+                        },
+                    )
+                    .await?;
+                    return Ok(());
+                }
+            },
+        };
+        let [stream] = portal.streams() else {
+            let response = write_wayland_error(
+                writer,
+                "wayland_stream_selection_invalid",
+                "Wayland Portal must return exactly one selected monitor stream",
+            )
+            .await;
+            close_wayland_after_reply(&portal, response).await?;
+            return Ok(());
+        };
+        let mut encoder = match tokio::task::block_in_place(|| {
+            PortalH264Encoder::new(
+                portal.pipewire_fd(),
+                stream.pipewire_node_id,
+                max_width,
+                max_height,
+                frames_per_second,
+            )
+        }) {
+            Ok(encoder) => encoder,
+            Err(error) => {
+                let response = write_h264_failure(writer, error).await;
+                close_wayland_after_reply(&portal, response).await?;
+                return Ok(());
+            }
+        };
+        let access_unit = match tokio::task::block_in_place(|| next_portal_keyframe(&mut encoder)) {
+            Ok(access_unit) => access_unit,
+            Err(error) => {
+                let response = write_h264_failure(writer, error).await;
+                close_wayland_after_reply(&portal, response).await?;
+                return Ok(());
+            }
+        };
+        let mut input = match retained_input {
+            Some(mut input) => {
+                if let Err(error) = input.set_frame_size(access_unit.width, access_unit.height) {
+                    let response =
+                        write_wayland_error(writer, error.code(), &error.to_string()).await;
+                    close_wayland_after_reply(&portal, response).await?;
+                    return Ok(());
+                }
+                input
+            }
+            None => match WaylandEisInput::connect(
+                portal.eis_fd(),
+                access_unit.width,
+                access_unit.height,
+                stream.mapping_id.as_deref(),
+            )
+            .await
+            {
+                Ok(input) => input,
+                Err(error) => {
+                    let response =
+                        write_wayland_error(writer, error.code(), &error.to_string()).await;
+                    close_wayland_after_reply(&portal, response).await?;
+                    return Ok(());
+                }
+            },
+        };
+        let rotated_resume_token = new_desktop_resume_token();
+        let session_result = run_wayland_desktop(
+            writer,
+            lines,
+            &portal,
+            &mut input,
+            encoder,
+            access_unit,
+            max_width,
+            max_height,
+            frames_per_second,
+            sequence,
+            &rotated_resume_token,
+            resumed,
+            opus_audio,
+        )
+        .await;
+        let _ = input.release_all();
+        match session_result {
+            Ok(WaylandSessionExit::Detached { sequence }) => {
+                store_wayland_resume_lease(
+                    resume_lease,
+                    DetachedWaylandSession {
+                        token: rotated_resume_token,
+                        client_fingerprint: client_fingerprint.to_owned(),
+                        user: user.to_owned(),
+                        portal,
+                        input,
+                        sequence,
+                        expires_at: Instant::now() + DESKTOP_RESUME_GRACE,
+                    },
+                )
+                .await;
+                Ok(())
+            }
+            Ok(WaylandSessionExit::Closed) => {
+                portal.close().await?;
+                Ok(())
+            }
+            Err(error) => {
+                portal.close().await?;
+                Err(error)
+            }
+        }
+    }
+
+    #[allow(clippy::too_many_arguments)]
+    async fn run_wayland_desktop(
+        writer: &mut tokio::net::unix::OwnedWriteHalf,
+        lines: &mut tokio::io::Lines<BufReader<tokio::net::unix::OwnedReadHalf>>,
+        portal: &WaylandPortalSession,
+        input: &mut WaylandEisInput,
+        mut encoder: PortalH264Encoder,
+        mut access_unit: EncodedH264AccessUnit,
+        mut max_width: u16,
+        mut max_height: u16,
+        frames_per_second: u8,
+        mut sequence: u64,
+        resume_token: &str,
+        resumed: bool,
+        opus_audio: bool,
+    ) -> Result<WaylandSessionExit, Error> {
+        let [stream] = portal.streams() else {
+            return Err("Wayland Portal stream changed after authorization".into());
+        };
+        write_event(
+            writer,
+            &ServerEvent::DesktopOpened {
+                width: access_unit.width,
+                height: access_unit.height,
+                encoding: DesktopFrameEncoding::WebRtcH264,
+                resume_token: resume_token.to_owned(),
+                resumed,
+            },
+        )
+        .await?;
+        if write_event(
+            writer,
+            &ServerEvent::DesktopVideoModeChanged {
+                mode: DesktopVideoMode::WebRtcH264,
+            },
+        )
+        .await
+        .is_err()
+        {
+            return Ok(WaylandSessionExit::Detached { sequence });
+        }
+
+        let mut pending_resize = None;
+        let mut opus_capture = if opus_audio {
+            match DesktopOpusCapture::start() {
+                Ok(capture) => Some(capture),
+                Err(error) => {
+                    write_event(
+                        writer,
+                        &ServerEvent::DesktopOpusUnavailable {
+                            reason_code: error.reason_code().into(),
+                        },
+                    )
+                    .await?;
+                    None
+                }
+            }
+        } else {
+            None
+        };
+        let mut opus_sequence = 0_u64;
+        loop {
+            sequence = sequence
+                .checked_add(1)
+                .ok_or("Wayland desktop frame sequence exhausted")?;
+            let frame_width = access_unit.width;
+            let frame_height = access_unit.height;
+            input.set_frame_size(frame_width, frame_height)?;
+            if send_h264_access_unit(
+                writer,
+                sequence,
+                frame_width,
+                frame_height,
+                unix_millis(),
+                0,
+                access_unit,
+            )
+            .await
+            .is_err()
+            {
+                return Ok(WaylandSessionExit::Detached { sequence });
+            }
+
+            let ack_timer = sleep(DESKTOP_H264_ACK_TIMEOUT);
+            tokio::pin!(ack_timer);
+            let mut presented = false;
+            let mut close_requested = false;
+            while !presented && !close_requested {
+                tokio::select! {
+                    packet = next_opus_packet(&mut opus_capture), if opus_capture.is_some() => {
+                        match packet {
+                            Some(Ok(packet)) => {
+                                opus_sequence = opus_sequence
+                                    .checked_add(1)
+                                    .ok_or("Wayland Opus sequence exhausted")?;
+                                send_opus_packet(writer, opus_sequence, packet).await?;
+                            }
+                            Some(Err(error)) => {
+                                opus_capture = None;
+                                write_event(
+                                    writer,
+                                    &ServerEvent::DesktopOpusUnavailable {
+                                        reason_code: error.reason_code().into(),
+                                    },
+                                ).await?;
+                            }
+                            None => {
+                                opus_capture = None;
+                                write_event(
+                                    writer,
+                                    &ServerEvent::DesktopOpusUnavailable {
+                                        reason_code: "opus_capture_stopped".into(),
+                                    },
+                                ).await?;
+                            }
+                        }
+                    }
+                    _ = &mut ack_timer => {
+                        write_wayland_error(
+                            writer,
+                            "wayland_h264_ack_timed_out",
+                            "Wayland H.264 presentation acknowledgement timed out",
+                        ).await?;
+                        return Ok(WaylandSessionExit::Closed);
+                    }
+                    command = next_desktop_command(lines) => {
+                        let Some(command) = (match command {
+                            Ok(command) => command,
+                            Err(_) => return Ok(WaylandSessionExit::Detached { sequence }),
+                        }) else {
+                            return Ok(WaylandSessionExit::Detached { sequence });
+                        };
+                        match command {
+                            ClientCommand::DesktopH264FrameAck { sequence: ack }
+                                if ack == sequence =>
+                            {
+                                presented = true;
+                            }
+                            ClientCommand::DesktopH264FrameAck { .. }
+                            | ClientCommand::DesktopFrameAck { .. } => {}
+                            ClientCommand::DesktopInput { event } => {
+                                if let Err(error) = input.input(&event) {
+                                    write_wayland_error(writer, error.code(), &error.to_string()).await?;
+                                    return Ok(WaylandSessionExit::Closed);
+                                }
+                            }
+                            ClientCommand::DesktopResize {
+                                max_width: width,
+                                max_height: height,
+                            } if valid_desktop_size(width, height) => {
+                                pending_resize = Some((width, height));
+                            }
+                            ClientCommand::DesktopVideoMode {
+                                mode: DesktopVideoMode::WebRtcH264,
+                            } => {
+                                if write_event(
+                                    writer,
+                                    &ServerEvent::DesktopVideoModeChanged {
+                                        mode: DesktopVideoMode::WebRtcH264,
+                                    },
+                                ).await.is_err() {
+                                    return Ok(WaylandSessionExit::Detached { sequence });
+                                }
+                            }
+                            ClientCommand::DesktopVideoMode {
+                                mode: DesktopVideoMode::ZlibBgra,
+                            } => {
+                                write_event(
+                                    writer,
+                                    &ServerEvent::DesktopH264Unavailable {
+                                        reason_code: "strict_zero_copy_no_software_fallback".into(),
+                                    },
+                                ).await?;
+                                write_wayland_error(
+                                    writer,
+                                    "wayland_software_fallback_unavailable",
+                                    "Wayland strict zero-copy mode cannot fall back to CPU raw frames",
+                                ).await?;
+                                return Ok(WaylandSessionExit::Closed);
+                            }
+                            ClientCommand::Close => close_requested = true,
+                            _ => return Err("desktop IPC command is invalid for Wayland".into()),
+                        }
+                    }
+                }
+            }
+            if close_requested {
+                write_event(
+                    writer,
+                    &ServerEvent::DesktopClosed {
+                        reason: "client_closed".into(),
+                    },
+                )
+                .await?;
+                return Ok(WaylandSessionExit::Closed);
+            }
+
+            if let Some((width, height)) = pending_resize.take()
+                && (width, height) != (max_width, max_height)
+            {
+                max_width = width;
+                max_height = height;
+                drop(encoder);
+                encoder = match tokio::task::block_in_place(|| {
+                    PortalH264Encoder::new(
+                        portal.pipewire_fd(),
+                        stream.pipewire_node_id,
+                        max_width,
+                        max_height,
+                        frames_per_second,
+                    )
+                }) {
+                    Ok(encoder) => encoder,
+                    Err(error) => {
+                        write_h264_failure(writer, error).await?;
+                        return Ok(WaylandSessionExit::Closed);
+                    }
+                };
+                access_unit =
+                    match tokio::task::block_in_place(|| next_portal_keyframe(&mut encoder)) {
+                        Ok(access_unit) => access_unit,
+                        Err(error) => {
+                            write_h264_failure(writer, error).await?;
+                            return Ok(WaylandSessionExit::Closed);
+                        }
+                    };
+            } else {
+                access_unit = match tokio::task::block_in_place(|| encoder.next_access_unit()) {
+                    Ok(access_unit) => access_unit,
+                    Err(error) => {
+                        write_h264_failure(writer, error).await?;
+                        return Ok(WaylandSessionExit::Closed);
+                    }
+                };
+            }
+        }
+    }
+
+    fn next_portal_keyframe(
+        encoder: &mut PortalH264Encoder,
+    ) -> Result<EncodedH264AccessUnit, H264EncoderError> {
+        let deadline = Instant::now() + Duration::from_secs(5);
+        while Instant::now() < deadline {
+            let access_unit = encoder.next_access_unit()?;
+            if access_unit.keyframe {
+                return Ok(access_unit);
+            }
+        }
+        Err(H264EncoderError::KeyframeUnavailable)
+    }
+
+    async fn write_h264_failure(
+        writer: &mut tokio::net::unix::OwnedWriteHalf,
+        error: H264EncoderError,
+    ) -> Result<(), Error> {
+        write_event(
+            writer,
+            &ServerEvent::DesktopH264Unavailable {
+                reason_code: error.reason_code().into(),
+            },
+        )
+        .await?;
+        write_wayland_error(writer, error.reason_code(), &error.to_string()).await
+    }
+
+    async fn write_wayland_error(
+        writer: &mut tokio::net::unix::OwnedWriteHalf,
+        code: &str,
+        message: &str,
+    ) -> Result<(), Error> {
+        write_event(
+            writer,
+            &ServerEvent::Error {
+                code: code.into(),
+                message: message.into(),
+            },
+        )
+        .await
+    }
+
+    async fn close_wayland_after_reply(
+        portal: &WaylandPortalSession,
+        response: Result<(), Error>,
+    ) -> Result<(), Error> {
+        let close = portal.close().await;
+        response?;
+        close?;
+        Ok(())
+    }
+
+    async fn take_wayland_resume_lease(
+        resume_lease: &WaylandResumeLease,
+        resume_token: Option<&str>,
+        client_fingerprint: &str,
+        user: &str,
+    ) -> Result<Option<DetachedWaylandSession>, String> {
+        let expired = {
+            let mut lease = resume_lease.lock().await;
+            if lease
+                .as_ref()
+                .is_some_and(|session| session.expires_at <= Instant::now())
+            {
+                lease.take()
+            } else {
+                None
+            }
+        };
+        if let Some(mut expired) = expired {
+            let _ = expired.input.release_all();
+            let _ = expired.portal.close().await;
+        }
+
+        let mut lease = resume_lease.lock().await;
+        let Some(token) = resume_token else {
+            if lease.is_some() {
+                return Err(
+                    "a disconnected Wayland session is waiting for its resume token".into(),
+                );
+            }
+            return Ok(None);
+        };
+        if !valid_desktop_resume_token(token) {
+            return Err("desktop resume token is invalid".into());
+        }
+        let Some(session) = lease.as_ref() else {
+            return Err("Wayland resume lease is missing or expired".into());
+        };
+        if !desktop_resume_binding_matches(
+            &session.token,
+            &session.client_fingerprint,
+            &session.user,
+            token,
+            client_fingerprint,
+            user,
+        ) {
+            return Err("desktop resume token does not match this client and user".into());
+        }
+        Ok(lease.take())
+    }
+
+    async fn store_wayland_resume_lease(
+        resume_lease: &WaylandResumeLease,
+        session: DetachedWaylandSession,
+    ) {
+        let cleanup_token = session.token.clone();
+        let replaced = resume_lease.lock().await.replace(session);
+        if let Some(mut replaced) = replaced {
+            let _ = replaced.input.release_all();
+            let _ = replaced.portal.close().await;
+        }
+        let cleanup_lease = Arc::clone(resume_lease);
+        tokio::spawn(async move {
+            sleep(DESKTOP_RESUME_GRACE).await;
+            let expired = {
+                let mut lease = cleanup_lease.lock().await;
+                if lease.as_ref().is_some_and(|session| {
+                    session.token == cleanup_token && session.expires_at <= Instant::now()
+                }) {
+                    lease.take()
+                } else {
+                    None
+                }
+            };
+            if let Some(mut expired) = expired {
+                let _ = expired.input.release_all();
+                let _ = expired.portal.close().await;
+            }
+        });
+    }
+
+    async fn acquire_desktop_session(
+        resume_lease: &DesktopResumeLease,
+        resume_token: Option<&str>,
+        client_fingerprint: &str,
+        user: &str,
+        frames_per_second: u8,
+    ) -> Result<
+        (
+            Arc<Mutex<LinuxDesktop>>,
+            u64,
+            DesktopFramePacer,
+            DesktopCompressionController,
+            bool,
+        ),
+        String,
+    > {
+        let now = Instant::now();
+        let mut lease = resume_lease.lock().await;
+        if lease
+            .as_ref()
+            .is_some_and(|session| session.expires_at <= now)
+        {
+            lease.take();
+        }
+
+        if let Some(token) = resume_token {
+            if !valid_desktop_resume_token(token) {
+                return Err("desktop resume token is invalid".into());
+            }
+            let Some(session) = lease.as_ref() else {
+                return Err("desktop resume lease is missing or expired".into());
+            };
+            if !desktop_resume_binding_matches(
+                &session.token,
+                &session.client_fingerprint,
+                &session.user,
+                token,
+                client_fingerprint,
+                user,
+            ) {
+                return Err("desktop resume token does not match this client and user".into());
+            }
+            let session = lease.take().expect("validated desktop lease exists");
+            let pacer = if session.frames_per_second == frames_per_second {
+                session.pacer
+            } else {
+                DesktopFramePacer::new(frames_per_second)
+                    .ok_or_else(|| "desktop frame rate is outside the supported range".to_owned())?
+            };
+            return Ok((
+                session.desktop,
+                session.sequence,
+                pacer,
+                session.compression,
+                true,
+            ));
+        }
+
+        if lease.is_some() {
+            return Err("a disconnected desktop session is waiting for its resume token".into());
+        }
+        drop(lease);
+        let desktop = LinuxDesktop::connect(DesktopBackendKind::X11)
+            .map_err(|error| format!("unable to open the X11 desktop: {error}"))?;
+        let pacer = DesktopFramePacer::new(frames_per_second)
+            .ok_or_else(|| "desktop frame rate is outside the supported range".to_owned())?;
+        Ok((
+            Arc::new(Mutex::new(desktop)),
+            0,
+            pacer,
+            DesktopCompressionController::default(),
+            false,
+        ))
+    }
+
+    async fn store_desktop_resume_lease(
+        resume_lease: DesktopResumeLease,
+        session: DetachedDesktopSession,
+    ) {
+        let token = session.token.clone();
+        *resume_lease.lock().await = Some(session);
+        tokio::spawn(async move {
+            sleep(DESKTOP_RESUME_GRACE).await;
+            let mut lease = resume_lease.lock().await;
+            if lease.as_ref().is_some_and(|session| {
+                session.token == token && session.expires_at <= Instant::now()
+            }) {
+                lease.take();
+            }
+        });
+    }
+
+    fn new_desktop_resume_token() -> String {
+        let mut token = [0_u8; 32];
+        rand::rng().fill_bytes(&mut token);
+        URL_SAFE_NO_PAD.encode(token)
+    }
+
+    fn valid_desktop_resume_token(token: &str) -> bool {
+        URL_SAFE_NO_PAD
+            .decode(token)
+            .is_ok_and(|decoded| decoded.len() == 32 && URL_SAFE_NO_PAD.encode(decoded) == token)
+    }
+
+    fn valid_client_fingerprint(value: &str) -> bool {
+        value.len() == 32
+            && value
+                .bytes()
+                .all(|byte| byte.is_ascii_digit() || matches!(byte, b'a'..=b'f'))
+    }
+
+    fn desktop_resume_binding_matches(
+        stored_token: &str,
+        stored_fingerprint: &str,
+        stored_user: &str,
+        requested_token: &str,
+        requested_fingerprint: &str,
+        requested_user: &str,
+    ) -> bool {
+        stored_token == requested_token
+            && stored_fingerprint == requested_fingerprint
+            && stored_user == requested_user
+    }
+
+    fn valid_desktop_size(width: u16, height: u16) -> bool {
+        (200..=8_192).contains(&width) && (200..=8_192).contains(&height)
+    }
+
+    fn valid_frame_rate(frames_per_second: u8) -> bool {
+        (1..=30).contains(&frames_per_second)
+    }
+
+    async fn capture_frame(
+        desktop: Arc<Mutex<LinuxDesktop>>,
+        max_width: u16,
+        max_height: u16,
+    ) -> Result<remotedesk_agent_runtime::CapturedDesktopFrame, Error> {
+        Ok(tokio::task::spawn_blocking(move || {
+            desktop.blocking_lock().capture(max_width, max_height)
+        })
+        .await??)
+    }
+
+    async fn poll_desktop_clipboard(
+        desktop: Arc<Mutex<LinuxDesktop>>,
+    ) -> Result<Option<String>, Error> {
+        tokio::task::spawn_blocking(move || desktop.blocking_lock().poll_clipboard_text()).await?
+    }
+
+    async fn set_desktop_clipboard(
+        desktop: Arc<Mutex<LinuxDesktop>>,
+        text: String,
+    ) -> Result<(), Error> {
+        tokio::task::spawn_blocking(move || desktop.blocking_lock().set_clipboard_text(&text))
+            .await?
+    }
+
+    async fn send_frame(
+        writer: &mut tokio::net::unix::OwnedWriteHalf,
+        encoded: EncodedDesktopFrame,
+    ) -> Result<(), Error> {
+        let sequence = encoded.metadata.sequence;
+        write_event(
+            writer,
+            &ServerEvent::DesktopFrameStart {
+                metadata: encoded.metadata,
+            },
+        )
+        .await?;
+        for (index, chunk) in encoded.chunks.into_iter().enumerate() {
+            write_event(
+                writer,
+                &ServerEvent::DesktopFrameChunk {
+                    sequence,
+                    index: u16::try_from(index)?,
+                    data: STANDARD_NO_PAD.encode(chunk),
+                },
+            )
+            .await?;
+        }
+        write_event(
+            writer,
+            &ServerEvent::DesktopFrameComplete {
+                sequence,
+                sha256: encoded.sha256,
+            },
+        )
+        .await?;
+        Ok(())
+    }
+
+    async fn send_h264_access_unit(
+        writer: &mut tokio::net::unix::OwnedWriteHalf,
+        sequence: u64,
+        width: u16,
+        height: u16,
+        captured_at_unix_ms: u64,
+        capture_latency_us: u64,
+        access_unit: EncodedH264AccessUnit,
+    ) -> Result<(), Error> {
+        if access_unit.data.is_empty()
+            || access_unit.data.len() > DESKTOP_MAX_H264_ACCESS_UNIT_BYTES
+        {
+            return Err("H.264 access unit is empty or exceeds its bounded size".into());
+        }
+        let chunk_count = u16::try_from(access_unit.data.len().div_ceil(DESKTOP_H264_CHUNK_BYTES))?;
+        let duration_us = u64::try_from(access_unit.duration.as_micros())?.max(1);
+        let encode_latency_us =
+            u64::try_from(access_unit.encode_latency.as_micros()).unwrap_or(u64::MAX);
+        write_event(
+            writer,
+            &ServerEvent::DesktopH264Start {
+                metadata: DesktopH264Metadata {
+                    sequence,
+                    width,
+                    height,
+                    captured_at_unix_ms,
+                    capture_latency_us,
+                    access_unit_bytes: access_unit.data.len(),
+                    chunk_count,
+                    duration_us,
+                    keyframe: access_unit.keyframe,
+                    encode_latency_us,
+                    encoder: access_unit.encoder.into(),
+                },
+            },
+        )
+        .await?;
+        for (index, chunk) in access_unit
+            .data
+            .chunks(DESKTOP_H264_CHUNK_BYTES)
+            .enumerate()
+        {
+            write_event(
+                writer,
+                &ServerEvent::DesktopH264Chunk {
+                    sequence,
+                    index: u16::try_from(index)?,
+                    data: STANDARD_NO_PAD.encode(chunk),
+                },
+            )
+            .await?;
+        }
+        write_event(
+            writer,
+            &ServerEvent::DesktopH264Complete {
+                sequence,
+                sha256: format_hex(&Sha256::digest(&access_unit.data)),
+            },
+        )
+        .await?;
+        Ok(())
+    }
+
+    async fn next_opus_packet(
+        capture: &mut Option<DesktopOpusCapture>,
+    ) -> Option<Result<EncodedOpusPacket, OpusCaptureError>> {
+        capture.as_mut()?.receiver.recv().await
+    }
+
+    async fn send_opus_packet(
+        writer: &mut tokio::net::unix::OwnedWriteHalf,
+        sequence: u64,
+        packet: EncodedOpusPacket,
+    ) -> Result<(), Error> {
+        let duration_us = packet
+            .duration
+            .as_micros()
+            .try_into()
+            .map_err(|_| "Opus duration exceeds the protocol limit")?;
+        let encode_latency_us = packet
+            .encode_latency
+            .as_micros()
+            .try_into()
+            .unwrap_or(u64::MAX);
+        write_event(
+            writer,
+            &ServerEvent::DesktopOpusPacket {
+                sequence,
+                duration_us,
+                encode_latency_us,
+                data: STANDARD_NO_PAD.encode(packet.data),
+            },
+        )
+        .await
+    }
+
+    fn format_hex(bytes: &[u8]) -> String {
+        use std::fmt::Write as _;
+
+        let mut output = String::with_capacity(bytes.len() * 2);
+        for byte in bytes {
+            write!(output, "{byte:02x}").expect("writing to a String cannot fail");
+        }
+        output
+    }
+
+    async fn next_desktop_command(
+        lines: &mut tokio::io::Lines<BufReader<tokio::net::unix::OwnedReadHalf>>,
+    ) -> Result<Option<ClientCommand>, Error> {
+        let Some(line) = lines.next_line().await? else {
+            return Ok(None);
+        };
+        if line.len() > 65_536 {
+            return Err("desktop IPC command exceeds 64 KiB".into());
+        }
+        Ok(Some(serde_json::from_str(&line)?))
+    }
+
+    async fn write_event(
+        writer: &mut tokio::net::unix::OwnedWriteHalf,
+        event: &ServerEvent,
+    ) -> Result<(), Error> {
+        let mut encoded = serde_json::to_vec(event)?;
+        if encoded.len() > 65_536 {
+            return Err("desktop IPC event exceeds 64 KiB".into());
+        }
+        encoded.push(b'\n');
+        writer.write_all(&encoded).await?;
+        Ok(())
+    }
+
+    fn desktop_socket_path(uid: u32) -> Result<PathBuf, Error> {
+        let expected_runtime = PathBuf::from(format!("/run/user/{uid}"));
+        if let Some(runtime) = std::env::var_os("XDG_RUNTIME_DIR")
+            && PathBuf::from(runtime) != expected_runtime
+        {
+            return Err("XDG_RUNTIME_DIR does not match the current user ID".into());
+        }
+        Ok(expected_runtime.join("remotedesk").join("desktop.sock"))
+    }
+
+    async fn write_message(
+        writer: &mut tokio::net::unix::OwnedWriteHalf,
+        value: &IpcMessage,
+    ) -> Result<(), Error> {
+        let mut encoded = serde_json::to_vec(value)?;
+        encoded.push(b'\n');
+        writer.write_all(&encoded).await?;
+        Ok(())
+    }
+
+    const fn is_graphical_backend(backend: DesktopBackendKind) -> bool {
+        matches!(
+            backend,
+            DesktopBackendKind::Wayland | DesktopBackendKind::X11
+        )
+    }
+
+    fn pipewire_available() -> bool {
+        let Some(runtime) = std::env::var_os("XDG_RUNTIME_DIR") else {
+            return false;
+        };
+        PathBuf::from(runtime).join("pipewire-0").exists()
+    }
+
+    fn unix_millis() -> u64 {
+        SystemTime::now()
+            .duration_since(UNIX_EPOCH)
+            .map(|duration| duration.as_millis().try_into().unwrap_or(u64::MAX))
+            .unwrap_or(0)
+    }
+
+    fn current_uid() -> u32 {
+        std::fs::read_to_string("/proc/self/status")
+            .ok()
+            .and_then(|status| {
+                status
+                    .lines()
+                    .find(|line| line.starts_with("Uid:"))
+                    .and_then(|line| line.split_whitespace().nth(1))
+                    .and_then(|value| value.parse().ok())
+            })
+            .unwrap_or(u32::MAX)
+    }
+
+    #[cfg(test)]
+    mod tests {
+        use super::*;
+
+        #[test]
+        fn desktop_request_limits_cover_size_and_frame_rate_independently() {
+            assert!(valid_desktop_size(200, 200));
+            assert!(valid_desktop_size(8_192, 8_192));
+            assert!(!valid_desktop_size(199, 1_080));
+            assert!(!valid_desktop_size(1_920, 8_193));
+            assert!(valid_frame_rate(1));
+            assert!(valid_frame_rate(30));
+            assert!(!valid_frame_rate(0));
+            assert!(!valid_frame_rate(31));
+        }
+
+        #[test]
+        fn graphical_backends_register_the_uid_bound_desktop_socket() {
+            assert!(is_graphical_backend(DesktopBackendKind::X11));
+            assert!(is_graphical_backend(DesktopBackendKind::Wayland));
+            assert!(!is_graphical_backend(DesktopBackendKind::Headless));
+        }
+
+        #[test]
+        fn desktop_resume_tokens_and_client_bindings_are_canonical() {
+            let first = new_desktop_resume_token();
+            let second = new_desktop_resume_token();
+            assert!(valid_desktop_resume_token(&first));
+            assert!(valid_desktop_resume_token(&second));
+            assert_ne!(first, second);
+            assert!(!valid_desktop_resume_token("short"));
+            assert!(!valid_desktop_resume_token(&format!("{}=", &first[..42])));
+            assert!(!valid_desktop_resume_token(&"a".repeat(43)));
+            assert!(valid_client_fingerprint("0123456789abcdef0123456789abcdef"));
+            assert!(!valid_client_fingerprint(
+                "0123456789ABCDEF0123456789ABCDEF"
+            ));
+            assert!(!valid_client_fingerprint("0123456789abcdef"));
+            assert!(desktop_resume_binding_matches(
+                &first,
+                "0123456789abcdef0123456789abcdef",
+                "alice",
+                &first,
+                "0123456789abcdef0123456789abcdef",
+                "alice",
+            ));
+            assert!(!desktop_resume_binding_matches(
+                &first,
+                "0123456789abcdef0123456789abcdef",
+                "alice",
+                &second,
+                "0123456789abcdef0123456789abcdef",
+                "alice",
+            ));
+            assert!(!desktop_resume_binding_matches(
+                &first,
+                "0123456789abcdef0123456789abcdef",
+                "alice",
+                &first,
+                "fedcba9876543210fedcba9876543210",
+                "alice",
+            ));
+            assert!(!desktop_resume_binding_matches(
+                &first,
+                "0123456789abcdef0123456789abcdef",
+                "alice",
+                &first,
+                "0123456789abcdef0123456789abcdef",
+                "bob",
+            ));
+        }
+    }
+}
+
+#[cfg(target_os = "linux")]
+#[tokio::main]
+async fn main() {
+    if let Err(error) = linux::run().await {
+        eprintln!("remotedesk-agent-session: {error}");
+        std::process::exit(1);
+    }
+}
diff --git a/agent/agent-runtime/src/bin/remotedesk-agentd.rs b/agent/agent-runtime/src/bin/remotedesk-agentd.rs
new file mode 100644
index 0000000..fc70468
--- /dev/null
+++ b/agent/agent-runtime/src/bin/remotedesk-agentd.rs
@@ -0,0 +1,2075 @@
+#[cfg(not(target_os = "linux"))]
+fn main() {
+    eprintln!("remotedesk-agentd is only supported on Linux");
+    std::process::exit(1);
+}
+
+#[cfg(target_os = "linux")]
+mod linux {
+    use std::{
+        collections::HashMap,
+        io::{BufReader as SyncBufReader, Cursor},
+        net::SocketAddr,
+        os::unix::fs::PermissionsExt as _,
+        path::{Path, PathBuf},
+        sync::{
+            Arc,
+            atomic::{AtomicBool, AtomicUsize, Ordering},
+        },
+        time::Duration,
+    };
+
+    use async_trait::async_trait;
+    use base64::{Engine as _, engine::general_purpose::STANDARD_NO_PAD};
+    use bytes::Bytes;
+    use clap::{Parser, Subcommand};
+    use futures_util::{SinkExt as _, StreamExt as _};
+    use remotedesk_agent_runtime::{
+        AgentState, AuthChallenge, ClientCommand, ClientGrant, DESKTOP_H264_CHUNK_BYTES,
+        DESKTOP_MAX_H264_ACCESS_UNIT_BYTES, DESKTOP_MAX_OPUS_PACKET_BYTES, DesktopH264Metadata,
+        DesktopMediaEvent, DesktopMediaSession, DeviceIdentity, EdgePresenceClient,
+        EdgePresenceConfig, EdgeWebRtcRole, EncodedMediaSender, FILE_CHUNK_BYTES, FileResult,
+        FileTransferReady, IpcMessage, IpcResponse, MAX_FILE_BYTES, PROTOCOL_MAJOR, PROTOCOL_MINOR,
+        ServerEvent, ShellCommand, ShellEvent, WebRtcSessionConfig, WebRtcSessionError,
+        WebRtcSignalMessage, WebRtcSignalTransport, edge_device_id, establish_webrtc,
+        unix_timestamp, verify_auth_signature,
+    };
+    use remotedesk_protocol::EdgeNegotiationKind;
+    use rustls::ServerConfig;
+    use sha2::{Digest as _, Sha256};
+    use tokio::{
+        fs,
+        io::{AsyncBufReadExt as _, AsyncReadExt as _, AsyncWriteExt as _, BufReader},
+        net::{TcpListener, TcpStream, UnixListener, UnixStream},
+        process::{Child, Command},
+        sync::{Mutex, mpsc, watch},
+        time::timeout,
+    };
+    use tokio_rustls::{TlsAcceptor, server::TlsStream};
+    use tokio_tungstenite::{
+        WebSocketStream, accept_async_with_config,
+        tungstenite::{Message, protocol::WebSocketConfig},
+    };
+
+    type Error = Box<dyn std::error::Error + Send + Sync>;
+    type AgentSocket = WebSocketStream<TlsStream<TcpStream>>;
+    const DIRECT_SIGNAL_PAYLOAD_BYTES: usize = 60 * 1024;
+
+    #[derive(Clone)]
+    struct SessionEndpoint {
+        pid: u32,
+        uid: u32,
+        desktop_socket: PathBuf,
+    }
+
+    type SessionRegistry = Arc<Mutex<HashMap<u32, SessionEndpoint>>>;
+    type DesktopMediaRegistry = Arc<Mutex<HashMap<String, DesktopMediaSession>>>;
+
+    struct DirectAgentSignalTransport<'a> {
+        socket: &'a mut AgentSocket,
+        client_aborted: &'a mut bool,
+    }
+
+    #[async_trait]
+    impl WebRtcSignalTransport for DirectAgentSignalTransport<'_> {
+        async fn send(&mut self, message: WebRtcSignalMessage) -> Result<(), WebRtcSessionError> {
+            let message = WebRtcSignalMessage::new_direct(message.kind, message.payload)?;
+            if message.payload.len() > DIRECT_SIGNAL_PAYLOAD_BYTES {
+                return Err(WebRtcSessionError::InvalidSignal);
+            }
+            send_event(
+                self.socket,
+                &ServerEvent::DirectWebRtcSignal {
+                    kind: message.kind.as_str().into(),
+                    payload: message.payload,
+                },
+            )
+            .await
+            .map_err(|_| WebRtcSessionError::SignalingTransport)
+        }
+
+        async fn poll(&mut self) -> Result<Vec<WebRtcSignalMessage>, WebRtcSessionError> {
+            let command =
+                match timeout(Duration::from_millis(25), receive_command(self.socket)).await {
+                    Err(_) => return Ok(Vec::new()),
+                    Ok(Ok(command)) => command,
+                    Ok(Err(_)) => return Err(WebRtcSessionError::SignalingTransport),
+                };
+            let (kind, payload) = match command {
+                ClientCommand::DirectWebRtcSignal { kind, payload } => (kind, payload),
+                ClientCommand::AbortDirectWebRtc => {
+                    *self.client_aborted = true;
+                    return Err(WebRtcSessionError::ConnectionFailed);
+                }
+                _ => return Err(WebRtcSessionError::UnexpectedSignal),
+            };
+            if payload.len() > DIRECT_SIGNAL_PAYLOAD_BYTES {
+                return Err(WebRtcSessionError::InvalidSignal);
+            }
+            let kind =
+                EdgeNegotiationKind::parse(&kind).map_err(|_| WebRtcSessionError::InvalidSignal)?;
+            Ok(vec![WebRtcSignalMessage::new_direct(kind, payload)?])
+        }
+    }
+
+    #[derive(Debug, Eq, PartialEq)]
+    struct DirectDesktopBinding {
+        user: String,
+        max_width: u16,
+        max_height: u16,
+        frames_per_second: u8,
+        opus_audio: bool,
+        clipboard_read: bool,
+        clipboard_write: bool,
+    }
+
+    impl DirectDesktopBinding {
+        fn matches(
+            &self,
+            user: &str,
+            max_width: u16,
+            max_height: u16,
+            frames_per_second: u8,
+            webrtc_h264: bool,
+            opus_audio: bool,
+            clipboard_read: bool,
+            clipboard_write: bool,
+            media_available: bool,
+        ) -> bool {
+            self.user == user
+                && self.max_width == max_width
+                && self.max_height == max_height
+                && self.frames_per_second == frames_per_second
+                && webrtc_h264 == media_available
+                && opus_audio == (self.opus_audio && media_available)
+                && self.clipboard_read == clipboard_read
+                && self.clipboard_write == clipboard_write
+        }
+    }
+
+    struct PendingH264AccessUnit {
+        metadata: DesktopH264Metadata,
+        next_chunk: u16,
+        data: Vec<u8>,
+    }
+
+    #[derive(Debug, Parser)]
+    #[command(
+        name = "remotedesk-agentd",
+        version,
+        about = "RemoteDesk Linux controlled endpoint daemon"
+    )]
+    struct Cli {
+        #[arg(long, default_value = "/var/lib/remotedesk")]
+        state_dir: PathBuf,
+        #[command(subcommand)]
+        command: AgentCommand,
+    }
+
+    #[derive(Debug, Subcommand)]
+    enum AgentCommand {
+        Init,
+        Serve {
+            #[arg(long, default_value = "0.0.0.0:39500")]
+            listen: SocketAddr,
+            #[arg(long, default_value = "/run/remotedesk/agentd.sock")]
+            ipc_socket: PathBuf,
+        },
+        Status {
+            #[arg(long)]
+            json: bool,
+        },
+        PairingCode {
+            #[arg(long, default_value_t = 300)]
+            ttl: u64,
+            #[arg(
+                long,
+                value_delimiter = ',',
+                default_value = "terminal,files,desktop,clipboard_read,clipboard_write"
+            )]
+            permissions: Vec<String>,
+            #[arg(long = "allow-user", value_delimiter = ',', required = true)]
+            allowed_users: Vec<String>,
+        },
+        ListClients {
+            #[arg(long)]
+            json: bool,
+        },
+        Revoke {
+            fingerprint: String,
+        },
+    }
+
+    #[allow(clippy::too_many_lines)]
+    pub async fn run() -> Result<(), Error> {
+        let cli = Cli::parse();
+        let state = AgentState::new(cli.state_dir);
+        match cli.command {
+            AgentCommand::Init => {
+                let identity = state.ensure_identity(&hostname())?;
+                println!("device_public_key={}", identity.public_key);
+            }
+            AgentCommand::Serve { listen, ipc_socket } => {
+                let identity = state.ensure_identity(&hostname())?;
+                let edge_presence = EdgePresenceConfig::from_environment()?;
+                serve(state, identity, listen, ipc_socket, edge_presence).await?;
+            }
+            AgentCommand::Status { json } => {
+                let identity = state.ensure_identity(&hostname())?;
+                let clients = state.clients()?;
+                let edge_config = EdgePresenceConfig::from_environment()?;
+                let edge_status = state.edge_presence_status()?;
+                let edge_online = edge_config.is_some()
+                    && edge_status.as_ref().is_some_and(|status| {
+                        status.online
+                            && status
+                                .expires_unix
+                                .is_some_and(|expiry| expiry > unix_timestamp())
+                    });
+                let device_id = edge_device_id(&identity.public_key)?;
+                let status = serde_json::json!({
+                    "ready": true,
+                    "device_public_key": identity.public_key,
+                    "paired_clients": clients.len(),
+                    "terminal": true,
+                    "desktop": false,
+                    "protocol_major": PROTOCOL_MAJOR,
+                    "protocol_minor": PROTOCOL_MINOR,
+                    "edge_presence": {
+                        "configured": edge_config.is_some(),
+                        "online": edge_online,
+                        "device_id": device_id,
+                        "region": edge_config.as_ref().map(EdgePresenceConfig::region).or_else(|| edge_status.as_ref().map(|status| status.region.as_str())),
+                        "gateway_id": edge_config.as_ref().map(EdgePresenceConfig::gateway_id).or_else(|| edge_status.as_ref().map(|status| status.gateway_id.as_str())),
+                        "expires_unix": edge_status.as_ref().and_then(|status| status.expires_unix),
+                        "last_success_unix": edge_status.as_ref().and_then(|status| status.last_success_unix),
+                        "last_error": edge_status.as_ref().and_then(|status| status.last_error.as_deref()),
+                        "session_signaling": edge_config.is_some(),
+                        "signal_requests_received": edge_status.as_ref().map_or(0, |status| status.signal_requests_received),
+                        "signal_requests_accepted": edge_status.as_ref().map_or(0, |status| status.signal_requests_accepted),
+                        "signal_requests_rejected": edge_status.as_ref().map_or(0, |status| status.signal_requests_rejected),
+                        "last_signal_unix": edge_status.as_ref().and_then(|status| status.last_signal_unix),
+                        "last_signal_error": edge_status.as_ref().and_then(|status| status.last_signal_error.as_deref()),
+                    },
+                });
+                if json {
+                    println!("{}", serde_json::to_string_pretty(&status)?);
+                } else {
+                    println!("ready: true");
+                    println!("paired clients: {}", clients.len());
+                    println!("terminal: available");
+                    println!("desktop: unavailable (capture transport is not installed)");
+                    println!(
+                        "Edge Presence: {}",
+                        if edge_online {
+                            "online"
+                        } else if edge_config.is_some() {
+                            "configured, offline"
+                        } else {
+                            "not configured"
+                        }
+                    );
+                    if let Some(edge_status) = edge_status {
+                        println!(
+                            "Edge signed intents: {} received, {} accepted, {} rejected",
+                            edge_status.signal_requests_received,
+                            edge_status.signal_requests_accepted,
+                            edge_status.signal_requests_rejected
+                        );
+                    }
+                }
+            }
+            AgentCommand::PairingCode {
+                ttl,
+                permissions,
+                allowed_users,
+            } => {
+                state.ensure_identity(&hostname())?;
+                validate_pairing_scope(&permissions, &allowed_users)?;
+                let code = state.create_pairing_grant(ttl, permissions, allowed_users)?;
+                println!("pairing_code={}", code.expose());
+                println!("expires_in_seconds={ttl}");
+                let identity = state.identity()?;
+                println!("device_public_key={}", identity.public_key);
+                println!(
+                    "tls_certificate_sha256={}",
+                    identity.tls_certificate_fingerprint()?
+                );
+            }
+            AgentCommand::ListClients { json } => {
+                let clients = state.clients()?;
+                if json {
+                    println!("{}", serde_json::to_string_pretty(&clients)?);
+                } else {
+                    for client in clients {
+                        println!(
+                            "{}  {}  {}",
+                            client.fingerprint,
+                            client.name,
+                            client.permissions.join(",")
+                        );
+                    }
+                }
+            }
+            AgentCommand::Revoke { fingerprint } => {
+                if !state.revoke_client(&fingerprint)? {
+                    return Err(format!("no paired client has fingerprint {fingerprint}").into());
+                }
+                println!("revoked={fingerprint}");
+            }
+        }
+        Ok(())
+    }
+
+    fn validate_pairing_scope(permissions: &[String], users: &[String]) -> Result<(), Error> {
+        if permissions.is_empty()
+            || permissions.iter().any(|permission| {
+                !matches!(
+                    permission.as_str(),
+                    "terminal" | "files" | "desktop" | "clipboard_read" | "clipboard_write"
+                )
+            })
+        {
+            return Err("this build only supports terminal, files, desktop, clipboard_read, and clipboard_write permissions".into());
+        }
+        if users.is_empty() || users.len() > 16 {
+            return Err("at least one and at most 16 allowed users are required".into());
+        }
+        for user in users {
+            if user.is_empty()
+                || user.len() > 32
+                || !user
+                    .bytes()
+                    .all(|byte| byte.is_ascii_alphanumeric() || matches!(byte, b'_' | b'-'))
+            {
+                return Err(format!("invalid or prohibited Linux user: {user}").into());
+            }
+        }
+        Ok(())
+    }
+
+    async fn serve(
+        state: AgentState,
+        identity: DeviceIdentity,
+        listen: SocketAddr,
+        ipc_socket: PathBuf,
+        edge_presence: Option<EdgePresenceConfig>,
+    ) -> Result<(), Error> {
+        let tls = TlsAcceptor::from(Arc::new(tls_config(&identity)?));
+        let listener = TcpListener::bind(listen).await?;
+        let session_count = Arc::new(AtomicUsize::new(0));
+        let session_registry: SessionRegistry = Arc::new(Mutex::new(HashMap::new()));
+        let desktop_media_registry: DesktopMediaRegistry = Arc::new(Mutex::new(HashMap::new()));
+        let (desktop_media_sender, desktop_media_receiver) = mpsc::channel(32);
+        tokio::spawn(manage_desktop_media(
+            desktop_media_receiver,
+            Arc::clone(&desktop_media_registry),
+        ));
+        let presence_state = state.clone();
+        let shared_state = Arc::new(Mutex::new(state));
+        let edge_configured = edge_presence.is_some();
+        let edge_online = Arc::new(AtomicBool::new(false));
+        let (shutdown_sender, shutdown_receiver) = watch::channel(false);
+        let presence_task = if let Some(config) = edge_presence {
+            let client = EdgePresenceClient::new(config)?;
+            let device_id = edge_device_id(&identity.public_key)?;
+            let online = Arc::clone(&edge_online);
+            Some(tokio::spawn(async move {
+                client
+                    .run(
+                        device_id,
+                        presence_state,
+                        online,
+                        shutdown_receiver,
+                        Some(local_relay_target(listen)),
+                        Some(desktop_media_sender),
+                    )
+                    .await;
+            }))
+        } else {
+            None
+        };
+        let ipc_count = Arc::clone(&session_count);
+        let ipc_registry = Arc::clone(&session_registry);
+        tokio::spawn(async move {
+            if let Err(error) = serve_ipc(&ipc_socket, ipc_count, ipc_registry).await {
+                eprintln!("session IPC stopped: {error}");
+            }
+        });
+        println!("RemoteDesk Agent listening on wss://{listen}");
+
+        let shutdown = shutdown_signal();
+        tokio::pin!(shutdown);
+        loop {
+            let accepted = tokio::select! {
+                result = listener.accept() => result,
+                result = &mut shutdown => {
+                    result?;
+                    break;
+                }
+            };
+            let (stream, peer) = accepted?;
+            let tls = tls.clone();
+            let state = Arc::clone(&shared_state);
+            let identity = identity.clone();
+            let session_count = Arc::clone(&session_count);
+            let session_registry = Arc::clone(&session_registry);
+            let desktop_media_registry = Arc::clone(&desktop_media_registry);
+            let edge_online = Arc::clone(&edge_online);
+            tokio::spawn(async move {
+                let result = async {
+                    let tls_stream = tls.accept(stream).await?;
+                    let websocket_config = WebSocketConfig::default()
+                        .max_message_size(Some(65_536))
+                        .max_frame_size(Some(65_536));
+                    let socket =
+                        accept_async_with_config(tls_stream, Some(websocket_config)).await?;
+                    handle_client(
+                        socket,
+                        state,
+                        identity,
+                        session_count,
+                        session_registry,
+                        desktop_media_registry,
+                        edge_configured,
+                        edge_online,
+                    )
+                    .await
+                }
+                .await;
+                if let Err(error) = result {
+                    eprintln!("client {peer} disconnected: {error}");
+                }
+            });
+        }
+        let _ = shutdown_sender.send(true);
+        if let Some(task) = presence_task {
+            match timeout(Duration::from_secs(6), task).await {
+                Ok(Ok(())) => {}
+                Ok(Err(_)) => eprintln!("Edge Presence task stopped unexpectedly"),
+                Err(_) => eprintln!("Edge Presence shutdown timed out"),
+            }
+        }
+        println!("RemoteDesk Agent stopped");
+        Ok(())
+    }
+
+    async fn shutdown_signal() -> Result<(), Error> {
+        let mut terminate =
+            tokio::signal::unix::signal(tokio::signal::unix::SignalKind::terminate())?;
+        tokio::select! {
+            result = tokio::signal::ctrl_c() => result?,
+            _ = terminate.recv() => {}
+        }
+        Ok(())
+    }
+
+    fn local_relay_target(listen: SocketAddr) -> SocketAddr {
+        if listen.ip().is_unspecified() {
+            let loopback = if listen.is_ipv4() {
+                std::net::Ipv4Addr::LOCALHOST.into()
+            } else {
+                std::net::Ipv6Addr::LOCALHOST.into()
+            };
+            SocketAddr::new(loopback, listen.port())
+        } else {
+            listen
+        }
+    }
+
+    fn tls_config(identity: &DeviceIdentity) -> Result<ServerConfig, Error> {
+        let mut cert_reader =
+            SyncBufReader::new(Cursor::new(identity.tls_certificate_pem.as_bytes()));
+        let certificates =
+            rustls_pemfile::certs(&mut cert_reader).collect::<Result<Vec<_>, _>>()?;
+        let mut key_reader =
+            SyncBufReader::new(Cursor::new(identity.tls_private_key_pem.as_bytes()));
+        let private_key = rustls_pemfile::private_key(&mut key_reader)?
+            .ok_or("device TLS private key is missing")?;
+        Ok(ServerConfig::builder()
+            .with_no_client_auth()
+            .with_single_cert(certificates, private_key)?)
+    }
+
+    async fn handle_client(
+        mut socket: AgentSocket,
+        state: Arc<Mutex<AgentState>>,
+        identity: DeviceIdentity,
+        session_count: Arc<AtomicUsize>,
+        session_registry: SessionRegistry,
+        desktop_media_registry: DesktopMediaRegistry,
+        edge_configured: bool,
+        edge_online: Arc<AtomicBool>,
+    ) -> Result<(), Error> {
+        let desktop_available = !session_registry.lock().await.is_empty();
+        let client = authenticate_client(
+            &mut socket,
+            &state,
+            &identity,
+            edge_configured,
+            &edge_online,
+            desktop_available,
+        )
+        .await?;
+
+        loop {
+            match receive_command(&mut socket).await? {
+                ClientCommand::Status => {
+                    let desktop = !session_registry.lock().await.is_empty();
+                    send_event(
+                        &mut socket,
+                        &ServerEvent::Status {
+                            session_agents: session_count.load(Ordering::Relaxed),
+                            terminal: true,
+                            desktop,
+                            files: true,
+                            edge_presence_configured: edge_configured,
+                            edge_presence_online: edge_online.load(Ordering::Acquire),
+                            edge_signaling_configured: edge_configured,
+                            edge_signaling_online: edge_online.load(Ordering::Acquire),
+                        },
+                    )
+                    .await?;
+                }
+                ClientCommand::OpenTerminal { user, cols, rows } => {
+                    authorize_terminal(&client, &user, cols, rows)?;
+                    proxy_terminal(socket, user, cols, rows).await?;
+                    return Ok(());
+                }
+                ClientCommand::BeginDirectWebRtc {
+                    user,
+                    max_width,
+                    max_height,
+                    frames_per_second,
+                    opus_audio,
+                    clipboard_read,
+                    clipboard_write,
+                } => {
+                    authorize_desktop(&client, &user, max_width, max_height, frames_per_second)?;
+                    authorize_clipboard(&client, clipboard_read, clipboard_write)?;
+                    open_direct_desktop(
+                        socket,
+                        &session_registry,
+                        user,
+                        max_width,
+                        max_height,
+                        frames_per_second,
+                        opus_audio,
+                        clipboard_read,
+                        clipboard_write,
+                        client.fingerprint.clone(),
+                        &desktop_media_registry,
+                    )
+                    .await?;
+                    return Ok(());
+                }
+                ClientCommand::OpenDesktop {
+                    user,
+                    max_width,
+                    max_height,
+                    frames_per_second,
+                    resume_token,
+                    client_fingerprint,
+                    edge_session_id,
+                    webrtc_h264: _,
+                    opus_audio,
+                    clipboard_read,
+                    clipboard_write,
+                } => {
+                    if client_fingerprint.is_some() {
+                        send_event(
+                            &mut socket,
+                            &ServerEvent::Error {
+                                code: "invalid_request".into(),
+                                message: "desktop client identity is assigned by the Agent".into(),
+                            },
+                        )
+                        .await?;
+                        continue;
+                    }
+                    authorize_desktop(&client, &user, max_width, max_height, frames_per_second)?;
+                    authorize_clipboard(&client, clipboard_read, clipboard_write)?;
+                    proxy_desktop(
+                        socket,
+                        &session_registry,
+                        user,
+                        max_width,
+                        max_height,
+                        frames_per_second,
+                        resume_token,
+                        client.fingerprint.clone(),
+                        edge_session_id,
+                        opus_audio,
+                        clipboard_read,
+                        clipboard_write,
+                        &desktop_media_registry,
+                        None,
+                    )
+                    .await?;
+                    return Ok(());
+                }
+                ClientCommand::UploadFile {
+                    user,
+                    path,
+                    size,
+                    sha256,
+                    transfer_id,
+                } => {
+                    authorize_files(&client, &user)?;
+                    proxy_upload(socket, user, path, size, sha256, transfer_id).await?;
+                    return Ok(());
+                }
+                ClientCommand::DownloadFile { user, path, offset } => {
+                    authorize_files(&client, &user)?;
+                    proxy_download(socket, user, path, offset).await?;
+                    return Ok(());
+                }
+                ClientCommand::Close => return Ok(()),
+                _ => {
+                    send_event(
+                        &mut socket,
+                        &ServerEvent::Error {
+                            code: "invalid_state".into(),
+                            message: "command is not valid before a terminal is opened".into(),
+                        },
+                    )
+                    .await?;
+                }
+            }
+        }
+    }
+
+    async fn authenticate_client(
+        socket: &mut AgentSocket,
+        state: &Arc<Mutex<AgentState>>,
+        identity: &DeviceIdentity,
+        edge_configured: bool,
+        edge_online: &AtomicBool,
+        desktop_available: bool,
+    ) -> Result<ClientGrant, Error> {
+        let challenge = AuthChallenge::generate();
+        let tls_certificate_sha256 = identity.tls_certificate_fingerprint()?;
+        send_event(
+            socket,
+            &ServerEvent::Hello {
+                protocol_major: PROTOCOL_MAJOR,
+                protocol_minor: PROTOCOL_MINOR,
+                device_public_key: identity.public_key.clone(),
+                tls_certificate_sha256,
+                challenge: challenge.encoded(),
+                terminal: true,
+                desktop: desktop_available,
+                files: true,
+                edge_presence_configured: edge_configured,
+                edge_presence_online: edge_online.load(Ordering::Acquire),
+                edge_signaling_configured: edge_configured,
+                edge_signaling_online: edge_online.load(Ordering::Acquire),
+            },
+        )
+        .await?;
+
+        let first = timeout(Duration::from_secs(30), receive_command(socket)).await??;
+        let client = match first {
+            ClientCommand::Pair {
+                protocol_major,
+                client_name,
+                client_public_key,
+                signature,
+                code,
+                ..
+            } => {
+                require_protocol(protocol_major)?;
+                verify_auth_signature(&client_public_key, &signature, &challenge)?;
+                let state = state.lock().await;
+                let pairing = state.consume_pairing_grant(&code)?;
+                let client = state.grant_client(
+                    client_name,
+                    client_public_key,
+                    pairing.permissions,
+                    pairing.allowed_users,
+                )?;
+                send_event(
+                    socket,
+                    &ServerEvent::Paired {
+                        client_fingerprint: client.fingerprint.clone(),
+                        permissions: client.permissions.clone(),
+                    },
+                )
+                .await?;
+                client
+            }
+            ClientCommand::Authenticate {
+                protocol_major,
+                client_public_key,
+                signature,
+                ..
+            } => {
+                require_protocol(protocol_major)?;
+                verify_auth_signature(&client_public_key, &signature, &challenge)?;
+                let client = state
+                    .lock()
+                    .await
+                    .clients()?
+                    .into_iter()
+                    .find(|client| client.public_key == client_public_key)
+                    .ok_or("client key is not paired")?;
+                send_event(
+                    socket,
+                    &ServerEvent::Authenticated {
+                        client_fingerprint: client.fingerprint.clone(),
+                        permissions: client.permissions.clone(),
+                    },
+                )
+                .await?;
+                client
+            }
+            _ => return Err("first client message must pair or authenticate".into()),
+        };
+        Ok(client)
+    }
+
+    fn authorize_terminal(
+        client: &ClientGrant,
+        user: &str,
+        cols: u16,
+        rows: u16,
+    ) -> Result<(), Error> {
+        if !client
+            .permissions
+            .iter()
+            .any(|permission| permission == "terminal")
+        {
+            return Err("paired client does not have terminal permission".into());
+        }
+        if !client.allowed_users.iter().any(|allowed| allowed == user) {
+            return Err(format!("paired client is not allowed to log in as {user}").into());
+        }
+        if !(20..=500).contains(&cols) || !(5..=200).contains(&rows) {
+            return Err("terminal dimensions are outside the supported range".into());
+        }
+        Ok(())
+    }
+
+    fn authorize_files(client: &ClientGrant, user: &str) -> Result<(), Error> {
+        if !client
+            .permissions
+            .iter()
+            .any(|permission| permission == "files")
+        {
+            return Err("paired client does not have files permission".into());
+        }
+        if !client.allowed_users.iter().any(|allowed| allowed == user) {
+            return Err(format!("paired client is not allowed to access files as {user}").into());
+        }
+        Ok(())
+    }
+
+    fn authorize_desktop(
+        client: &ClientGrant,
+        user: &str,
+        max_width: u16,
+        max_height: u16,
+        frames_per_second: u8,
+    ) -> Result<(), Error> {
+        if !client
+            .permissions
+            .iter()
+            .any(|permission| permission == "desktop")
+        {
+            return Err("paired client does not have desktop permission".into());
+        }
+        if !client.allowed_users.iter().any(|allowed| allowed == user) {
+            return Err(
+                format!("paired client is not allowed to control desktop for {user}").into(),
+            );
+        }
+        validate_desktop_dimensions(max_width, max_height, frames_per_second)
+    }
+
+    fn authorize_clipboard(
+        client: &ClientGrant,
+        clipboard_read: bool,
+        clipboard_write: bool,
+    ) -> Result<(), Error> {
+        for (requested, permission) in [
+            (clipboard_read, "clipboard_read"),
+            (clipboard_write, "clipboard_write"),
+        ] {
+            if requested
+                && !client
+                    .permissions
+                    .iter()
+                    .any(|granted| granted == permission)
+            {
+                return Err(format!("paired client does not have {permission} permission").into());
+            }
+        }
+        Ok(())
+    }
+
+    fn validate_desktop_dimensions(
+        width: u16,
+        height: u16,
+        frames_per_second: u8,
+    ) -> Result<(), Error> {
+        validate_desktop_size(width, height)?;
+        if !(1..=30).contains(&frames_per_second) {
+            return Err("desktop frame rate is outside the supported range".into());
+        }
+        Ok(())
+    }
+
+    fn validate_desktop_size(width: u16, height: u16) -> Result<(), Error> {
+        if !(200..=8_192).contains(&width) || !(200..=8_192).contains(&height) {
+            return Err("desktop dimensions are outside the supported range".into());
+        }
+        Ok(())
+    }
+
+    async fn manage_desktop_media(
+        mut events: mpsc::Receiver<DesktopMediaEvent>,
+        registry: DesktopMediaRegistry,
+    ) {
+        while let Some(event) = events.recv().await {
+            let now = unix_timestamp();
+            let mut sessions = registry.lock().await;
+            sessions.retain(|_, session| session.expires_unix > now);
+            match event {
+                DesktopMediaEvent::Available(session) if session.expires_unix > now => {
+                    sessions.retain(|_, existing| {
+                        existing.client_fingerprint != session.client_fingerprint
+                            || existing.target_user != session.target_user
+                    });
+                    sessions.insert(session.session_id.clone(), session);
+                }
+                DesktopMediaEvent::Closed { session_id } => {
+                    sessions.remove(&session_id);
+                }
+                DesktopMediaEvent::Available(_) => {}
+            }
+        }
+    }
+
+    async fn take_desktop_media(
+        registry: &DesktopMediaRegistry,
+        session_id: Option<&str>,
+        user: &str,
+        client_fingerprint: &str,
+    ) -> Option<EncodedMediaSender> {
+        let session_id = session_id.filter(|value| {
+            !value.is_empty()
+                && value.len() <= 128
+                && value
+                    .bytes()
+                    .all(|byte| byte.is_ascii_alphanumeric() || matches!(byte, b'-' | b'_' | b'.'))
+        })?;
+        let now = unix_timestamp();
+        let mut sessions = registry.lock().await;
+        sessions.retain(|_, session| session.expires_unix > now);
+        let session = sessions.get(session_id)?;
+        if session.target_user != user || session.client_fingerprint != client_fingerprint {
+            return None;
+        }
+        sessions.remove(session_id).map(|session| session.sender)
+    }
+
+    #[allow(clippy::too_many_arguments)]
+    async fn open_direct_desktop(
+        mut socket: AgentSocket,
+        registry: &SessionRegistry,
+        user: String,
+        max_width: u16,
+        max_height: u16,
+        frames_per_second: u8,
+        opus_audio: bool,
+        clipboard_read: bool,
+        clipboard_write: bool,
+        client_fingerprint: String,
+        media_registry: &DesktopMediaRegistry,
+    ) -> Result<(), Error> {
+        let binding = DirectDesktopBinding {
+            user,
+            max_width,
+            max_height,
+            frames_per_second,
+            opus_audio,
+            clipboard_read,
+            clipboard_write,
+        };
+        send_event(&mut socket, &ServerEvent::DirectWebRtcReady).await?;
+        let mut client_aborted = false;
+        let signaling = DirectAgentSignalTransport {
+            socket: &mut socket,
+            client_aborted: &mut client_aborted,
+        };
+        let established = establish_webrtc(
+            signaling,
+            WebRtcSessionConfig {
+                role: EdgeWebRtcRole::AgentAnswerer,
+                bind_address: "0.0.0.0:0".parse()?,
+                ice_servers: Vec::new(),
+                connect_timeout: Duration::from_secs(15),
+            },
+        )
+        .await;
+        let (mut session, mut media_sender, mut unavailable_reason) = match established {
+            Ok(session) => match session.media_sender() {
+                Some(sender) => (Some(session), Some(sender), None),
+                None => {
+                    let _ = session.close().await;
+                    (None, None, Some("media_sender_unavailable".to_owned()))
+                }
+            },
+            Err(error) => (None, None, Some(error.to_string())),
+        };
+        if client_aborted {
+            if let Some(session) = session.take() {
+                let _ = session.close().await;
+            }
+            media_sender = None;
+            let reason_code = unavailable_reason
+                .take()
+                .unwrap_or_else(|| "client_aborted".into());
+            send_event(
+                &mut socket,
+                &ServerEvent::DirectWebRtcUnavailable { reason_code },
+            )
+            .await?;
+        }
+        let open_deadline = tokio::time::Instant::now() + Duration::from_secs(10);
+        let mut signal_count = 0_u16;
+        let open = loop {
+            let command =
+                match tokio::time::timeout_at(open_deadline, receive_command(&mut socket)).await {
+                    Ok(Ok(command)) => command,
+                    Ok(Err(error)) => {
+                        if let Some(session) = session.take() {
+                            let _ = session.close().await;
+                        }
+                        return Err(error);
+                    }
+                    Err(_) => {
+                        if let Some(session) = session.take() {
+                            let _ = session.close().await;
+                        }
+                        return Err("direct WebRTC desktop request timed out".into());
+                    }
+                };
+            match command {
+                ClientCommand::DirectWebRtcSignal { .. } => {
+                    signal_count = signal_count.saturating_add(1);
+                    if signal_count > 256 {
+                        if let Some(session) = session.take() {
+                            let _ = session.close().await;
+                        }
+                        return Err("too many direct WebRTC signals after negotiation".into());
+                    }
+                }
+                ClientCommand::AbortDirectWebRtc => {
+                    if let Some(session) = session.take() {
+                        let _ = session.close().await;
+                    }
+                    media_sender = None;
+                    let reason_code = unavailable_reason
+                        .take()
+                        .unwrap_or_else(|| "client_aborted".into());
+                    send_event(
+                        &mut socket,
+                        &ServerEvent::DirectWebRtcUnavailable { reason_code },
+                    )
+                    .await?;
+                }
+                command => break command,
+            }
+        };
+        let ClientCommand::OpenDesktop {
+            user: open_user,
+            max_width: open_width,
+            max_height: open_height,
+            frames_per_second: open_fps,
+            resume_token,
+            client_fingerprint: None,
+            edge_session_id: None,
+            webrtc_h264,
+            opus_audio,
+            clipboard_read,
+            clipboard_write,
+        } = open
+        else {
+            if let Some(session) = session.take() {
+                let _ = session.close().await;
+            }
+            return Err("direct WebRTC must be followed by its bound desktop request".into());
+        };
+        if !binding.matches(
+            &open_user,
+            open_width,
+            open_height,
+            open_fps,
+            webrtc_h264,
+            opus_audio,
+            clipboard_read,
+            clipboard_write,
+            media_sender.is_some(),
+        ) {
+            if let Some(session) = session.take() {
+                let _ = session.close().await;
+            }
+            return Err("direct WebRTC desktop binding changed after authorization".into());
+        }
+        let result = proxy_desktop(
+            socket,
+            registry,
+            binding.user,
+            binding.max_width,
+            binding.max_height,
+            binding.frames_per_second,
+            resume_token,
+            client_fingerprint,
+            None,
+            opus_audio,
+            clipboard_read,
+            clipboard_write,
+            media_registry,
+            media_sender,
+        )
+        .await;
+        let close = match session {
+            Some(session) => session.close().await,
+            None => Ok(()),
+        };
+        result?;
+        close?;
+        Ok(())
+    }
+
+    #[allow(clippy::too_many_arguments)]
+    async fn proxy_desktop(
+        mut socket: AgentSocket,
+        registry: &SessionRegistry,
+        user: String,
+        max_width: u16,
+        max_height: u16,
+        frames_per_second: u8,
+        resume_token: Option<String>,
+        client_fingerprint: String,
+        edge_session_id: Option<String>,
+        opus_audio: bool,
+        clipboard_read: bool,
+        clipboard_write: bool,
+        media_registry: &DesktopMediaRegistry,
+        direct_media_sender: Option<EncodedMediaSender>,
+    ) -> Result<(), Error> {
+        let uid = lookup_uid(&user).await?;
+        let endpoint = registry
+            .lock()
+            .await
+            .get(&uid)
+            .cloned()
+            .ok_or("the requested user has no active graphical session agent")?;
+        let stream = UnixStream::connect(&endpoint.desktop_socket).await?;
+        let peer = stream.peer_cred()?;
+        let peer_pid = u32::try_from(peer.pid().ok_or("desktop peer PID is unavailable")?)
+            .map_err(|_| "desktop peer PID is negative")?;
+        if peer.uid() != endpoint.uid || peer_pid != endpoint.pid {
+            return Err("desktop IPC peer no longer matches the registered user session".into());
+        }
+        let (reader, mut writer) = stream.into_split();
+        let mut lines = BufReader::new(reader).lines();
+        let mut media_sender = direct_media_sender;
+        if media_sender.is_none() {
+            media_sender = take_desktop_media(
+                media_registry,
+                edge_session_id.as_deref(),
+                &user,
+                &client_fingerprint,
+            )
+            .await;
+        }
+        write_desktop_command(
+            &mut writer,
+            &ClientCommand::OpenDesktop {
+                user,
+                max_width,
+                max_height,
+                frames_per_second,
+                resume_token,
+                client_fingerprint: Some(client_fingerprint),
+                edge_session_id: None,
+                webrtc_h264: media_sender.is_some(),
+                opus_audio: opus_audio && media_sender.is_some(),
+                clipboard_read,
+                clipboard_write,
+            },
+        )
+        .await?;
+        let mut pending_h264 = None;
+        let mut video_enabled = media_sender.is_some();
+        let mut audio_enabled = opus_audio && media_sender.is_some();
+        let mut last_opus_sequence = 0_u64;
+        loop {
+            tokio::select! {
+                event = next_desktop_event(&mut lines) => {
+                    let event = event?;
+                    let Some(event) = route_media_event(
+                        event,
+                        &mut pending_h264,
+                        &mut media_sender,
+                        &mut video_enabled,
+                        &mut audio_enabled,
+                        &mut last_opus_sequence,
+                    ).await? else {
+                        continue;
+                    };
+                    let terminal = matches!(event, ServerEvent::DesktopClosed { .. });
+                    send_event(&mut socket, &event).await?;
+                    if terminal {
+                        return Ok(());
+                    }
+                }
+                command = receive_command(&mut socket) => {
+                    match command? {
+                        command @ ClientCommand::DesktopInput { .. }
+                        | command @ ClientCommand::DesktopFrameAck { .. }
+                        | command @ ClientCommand::DesktopH264FrameAck { .. }
+                        | command @ ClientCommand::DesktopVideoMode { .. }
+                        | command @ ClientCommand::DesktopClipboardOffer { .. }
+                        | command @ ClientCommand::DesktopClipboardRequest { .. }
+                        | command @ ClientCommand::DesktopClipboardData { .. } => {
+                            write_desktop_command(&mut writer, &command).await?;
+                        }
+                        command @ ClientCommand::DesktopResize { max_width, max_height } => {
+                            validate_desktop_size(max_width, max_height)?;
+                            write_desktop_command(&mut writer, &command).await?;
+                        }
+                        ClientCommand::Close => {
+                            write_desktop_command(&mut writer, &ClientCommand::Close).await?;
+                            let event = timeout(
+                                Duration::from_secs(2),
+                                async {
+                                    loop {
+                                        let event = next_desktop_event(&mut lines).await?;
+                                        let Some(event) = route_media_event(
+                                            event,
+                                            &mut pending_h264,
+                                            &mut media_sender,
+                                            &mut video_enabled,
+                                            &mut audio_enabled,
+                                            &mut last_opus_sequence,
+                                        ).await? else {
+                                            continue;
+                                        };
+                                        if matches!(event, ServerEvent::DesktopClosed { .. }) {
+                                            return Ok::<_, Error>(event);
+                                        }
+                                    }
+                                },
+                            )
+                            .await
+                            .map_err(|_| "desktop user session close timed out")??;
+                            send_event(&mut socket, &event).await?;
+                            return Ok(());
+                        }
+                        ClientCommand::DesktopPing { nonce } => {
+                            send_event(&mut socket, &ServerEvent::DesktopPong { nonce }).await?;
+                        }
+                        _ => return Err("command is not valid during a desktop session".into()),
+                    }
+                }
+            }
+        }
+    }
+
+    async fn route_media_event(
+        event: ServerEvent,
+        pending: &mut Option<PendingH264AccessUnit>,
+        sender: &mut Option<EncodedMediaSender>,
+        video_enabled: &mut bool,
+        audio_enabled: &mut bool,
+        last_opus_sequence: &mut u64,
+    ) -> Result<Option<ServerEvent>, Error> {
+        match event {
+            ServerEvent::DesktopH264Start { metadata } => {
+                if sender.is_some() && *video_enabled {
+                    *pending = Some(PendingH264AccessUnit::new(metadata.clone())?);
+                    return Ok(Some(ServerEvent::DesktopH264Start { metadata }));
+                }
+                Ok(None)
+            }
+            ServerEvent::DesktopH264Chunk {
+                sequence,
+                index,
+                data,
+            } => {
+                if let Some(access_unit) = pending.as_mut() {
+                    access_unit.push(sequence, index, &data)?;
+                }
+                Ok(None)
+            }
+            ServerEvent::DesktopH264Complete { sequence, sha256 } => {
+                if let (Some(access_unit), Some(media_sender)) = (pending.take(), sender.as_ref()) {
+                    let (data, duration) = access_unit.finish(sequence, &sha256)?;
+                    let send_result = timeout(
+                        Duration::from_secs(1),
+                        media_sender.send_h264(data, duration),
+                    )
+                    .await;
+                    if !matches!(send_result, Ok(Ok(()))) {
+                        eprintln!("WebRTC H.264 sender stopped; zlib compatibility remains active");
+                        *video_enabled = false;
+                        return Ok(Some(ServerEvent::DesktopH264Unavailable {
+                            reason_code: "webrtc_send_failed".into(),
+                        }));
+                    }
+                }
+                Ok(None)
+            }
+            ServerEvent::DesktopH264Unavailable { reason_code } => {
+                if !valid_media_reason_code(&reason_code) {
+                    return Err("desktop H.264 failure code is invalid".into());
+                }
+                eprintln!("user-session H.264 unavailable: {reason_code}");
+                *pending = None;
+                *video_enabled = false;
+                Ok(Some(ServerEvent::DesktopH264Unavailable { reason_code }))
+            }
+            ServerEvent::DesktopOpusPacket {
+                sequence,
+                duration_us,
+                encode_latency_us,
+                data,
+            } => {
+                let (decoded, duration) = decode_desktop_opus_packet(
+                    last_opus_sequence,
+                    sequence,
+                    duration_us,
+                    encode_latency_us,
+                    &data,
+                )?;
+                if *audio_enabled && let Some(media_sender) = sender.as_ref() {
+                    let send_result = timeout(
+                        Duration::from_millis(250),
+                        media_sender.send_opus(decoded, duration),
+                    )
+                    .await;
+                    if !matches!(send_result, Ok(Ok(()))) {
+                        eprintln!("WebRTC Opus sender stopped; video remains independent");
+                        *audio_enabled = false;
+                        return Ok(Some(ServerEvent::DesktopOpusUnavailable {
+                            reason_code: "webrtc_audio_send_failed".into(),
+                        }));
+                    }
+                }
+                Ok(None)
+            }
+            ServerEvent::DesktopOpusUnavailable { reason_code } => {
+                if !*audio_enabled {
+                    return Ok(None);
+                }
+                if !valid_media_reason_code(&reason_code) {
+                    return Err("desktop Opus failure code is invalid".into());
+                }
+                eprintln!("user-session Opus unavailable: {reason_code}");
+                *audio_enabled = false;
+                Ok(Some(ServerEvent::DesktopOpusUnavailable { reason_code }))
+            }
+            other => Ok(Some(other)),
+        }
+    }
+
+    fn valid_media_reason_code(reason_code: &str) -> bool {
+        !reason_code.is_empty()
+            && reason_code.len() <= 64
+            && reason_code
+                .bytes()
+                .all(|byte| byte.is_ascii_lowercase() || byte == b'_')
+    }
+
+    fn decode_desktop_opus_packet(
+        last_sequence: &mut u64,
+        sequence: u64,
+        duration_us: u64,
+        encode_latency_us: u64,
+        data: &str,
+    ) -> Result<(Bytes, Duration), Error> {
+        let expected = last_sequence
+            .checked_add(1)
+            .ok_or("desktop Opus sequence exhausted")?;
+        if sequence != expected
+            || !(2_500..=120_000).contains(&duration_us)
+            || encode_latency_us > 60_000_000
+            || data.is_empty()
+            || data.len() > DESKTOP_MAX_OPUS_PACKET_BYTES.div_ceil(3) * 4
+        {
+            return Err("desktop Opus packet metadata is invalid".into());
+        }
+        let decoded = STANDARD_NO_PAD
+            .decode(data)
+            .map_err(|_| "desktop Opus packet is not canonical base64")?;
+        if decoded.is_empty()
+            || decoded.len() > DESKTOP_MAX_OPUS_PACKET_BYTES
+            || STANDARD_NO_PAD.encode(&decoded) != data
+        {
+            return Err("desktop Opus packet is invalid".into());
+        }
+        *last_sequence = sequence;
+        Ok((Bytes::from(decoded), Duration::from_micros(duration_us)))
+    }
+
+    impl PendingH264AccessUnit {
+        fn new(metadata: DesktopH264Metadata) -> Result<Self, Error> {
+            validate_desktop_size(metadata.width, metadata.height)?;
+            let expected_chunks = metadata
+                .access_unit_bytes
+                .div_ceil(DESKTOP_H264_CHUNK_BYTES);
+            if metadata.access_unit_bytes == 0
+                || metadata.access_unit_bytes > DESKTOP_MAX_H264_ACCESS_UNIT_BYTES
+                || usize::from(metadata.chunk_count) != expected_chunks
+                || metadata.chunk_count == 0
+                || !(1..=1_000_000).contains(&metadata.duration_us)
+                || metadata.captured_at_unix_ms == 0
+                || metadata.capture_latency_us > 60_000_000
+                || metadata.encoder.is_empty()
+                || metadata.encoder.len() > 64
+                || !metadata
+                    .encoder
+                    .bytes()
+                    .all(|byte| byte.is_ascii_alphanumeric() || matches!(byte, b'-' | b'_'))
+            {
+                return Err("desktop H.264 metadata is invalid".into());
+            }
+            let capacity = metadata.access_unit_bytes;
+            Ok(Self {
+                metadata,
+                next_chunk: 0,
+                data: Vec::with_capacity(capacity),
+            })
+        }
+
+        fn push(&mut self, sequence: u64, index: u16, encoded: &str) -> Result<(), Error> {
+            if sequence != self.metadata.sequence
+                || index != self.next_chunk
+                || index >= self.metadata.chunk_count
+                || encoded.len() > DESKTOP_H264_CHUNK_BYTES.div_ceil(3) * 4
+            {
+                return Err("desktop H.264 chunk ordering is invalid".into());
+            }
+            let decoded = STANDARD_NO_PAD
+                .decode(encoded)
+                .map_err(|_| "desktop H.264 chunk is not canonical base64")?;
+            if STANDARD_NO_PAD.encode(&decoded) != encoded
+                || decoded.is_empty()
+                || decoded.len() > DESKTOP_H264_CHUNK_BYTES
+                || self.data.len().saturating_add(decoded.len()) > self.metadata.access_unit_bytes
+            {
+                return Err("desktop H.264 chunk is invalid".into());
+            }
+            self.data.extend_from_slice(&decoded);
+            self.next_chunk = self
+                .next_chunk
+                .checked_add(1)
+                .ok_or("desktop H.264 chunk sequence exhausted")?;
+            Ok(())
+        }
+
+        fn finish(self, sequence: u64, sha256: &str) -> Result<(Bytes, Duration), Error> {
+            if sequence != self.metadata.sequence
+                || self.next_chunk != self.metadata.chunk_count
+                || self.data.len() != self.metadata.access_unit_bytes
+                || sha256.len() != 64
+                || !sha256
+                    .bytes()
+                    .all(|byte| byte.is_ascii_digit() || matches!(byte, b'a'..=b'f'))
+                || format_hex(&Sha256::digest(&self.data)) != sha256
+            {
+                return Err("desktop H.264 access unit integrity check failed".into());
+            }
+            Ok((
+                Bytes::from(self.data),
+                Duration::from_micros(self.metadata.duration_us),
+            ))
+        }
+    }
+
+    fn format_hex(bytes: &[u8]) -> String {
+        use std::fmt::Write as _;
+
+        let mut output = String::with_capacity(bytes.len() * 2);
+        for byte in bytes {
+            write!(output, "{byte:02x}").expect("writing to a String cannot fail");
+        }
+        output
+    }
+
+    async fn lookup_uid(user: &str) -> Result<u32, Error> {
+        let passwd = fs::read_to_string("/etc/passwd").await?;
+        passwd
+            .lines()
+            .filter_map(|line| {
+                let mut fields = line.split(':');
+                let name = fields.next()?;
+                let _password = fields.next()?;
+                let uid = fields.next()?.parse::<u32>().ok()?;
+                (name == user && uid != 0).then_some(uid)
+            })
+            .next()
+            .ok_or_else(|| {
+                format!("Linux user {user} does not have a non-root passwd entry").into()
+            })
+    }
+
+    async fn next_desktop_event(
+        lines: &mut tokio::io::Lines<BufReader<tokio::net::unix::OwnedReadHalf>>,
+    ) -> Result<ServerEvent, Error> {
+        let line = lines
+            .next_line()
+            .await?
+            .ok_or("user session closed the desktop IPC socket")?;
+        if line.len() > 65_536 {
+            return Err("desktop IPC event exceeds 64 KiB".into());
+        }
+        Ok(serde_json::from_str(&line)?)
+    }
+
+    async fn write_desktop_command(
+        writer: &mut tokio::net::unix::OwnedWriteHalf,
+        command: &ClientCommand,
+    ) -> Result<(), Error> {
+        let mut encoded = serde_json::to_vec(command)?;
+        if encoded.len() > 65_536 {
+            return Err("desktop IPC command exceeds 64 KiB".into());
+        }
+        encoded.push(b'\n');
+        writer.write_all(&encoded).await?;
+        Ok(())
+    }
+
+    async fn proxy_upload(
+        mut socket: AgentSocket,
+        user: String,
+        path: String,
+        size: u64,
+        sha256: String,
+        transfer_id: String,
+    ) -> Result<(), Error> {
+        if size > MAX_FILE_BYTES {
+            return Err("file exceeds the 2 GiB transfer limit".into());
+        }
+        if transfer_id.len() != 32
+            || !transfer_id
+                .bytes()
+                .all(|byte| byte.is_ascii_hexdigit() && !byte.is_ascii_uppercase())
+        {
+            return Err("upload transfer ID is invalid".into());
+        }
+        let mut child = file_helper(
+            "upload",
+            &user,
+            &path,
+            Some((size, &sha256, &transfer_id)),
+            None,
+        )?;
+        let mut input = child
+            .stdin
+            .take()
+            .ok_or("file helper stdin is unavailable")?;
+        let output = child
+            .stdout
+            .take()
+            .ok_or("file helper stdout is unavailable")?;
+        let mut output = BufReader::new(output);
+        let mut ready_line = String::new();
+        timeout(Duration::from_secs(30), output.read_line(&mut ready_line)).await??;
+        if ready_line.len() > 1024 {
+            return Err("file helper upload header is too large".into());
+        }
+        let ready: FileTransferReady = serde_json::from_str(ready_line.trim())?;
+        if ready.offset > size {
+            return Err("file helper returned an invalid upload offset".into());
+        }
+        send_event(
+            &mut socket,
+            &ServerEvent::FileReady {
+                direction: "upload".into(),
+                size,
+                sha256: None,
+                offset: ready.offset,
+            },
+        )
+        .await?;
+        let mut received = ready.offset;
+        loop {
+            match receive_command(&mut socket).await? {
+                ClientCommand::FileChunk { data } => {
+                    let bytes = STANDARD_NO_PAD.decode(data)?;
+                    if bytes.len() > FILE_CHUNK_BYTES {
+                        return Err("file chunk exceeds the protocol limit".into());
+                    }
+                    received = received
+                        .checked_add(u64::try_from(bytes.len())?)
+                        .ok_or("file size overflow")?;
+                    if received > size {
+                        return Err("uploaded data exceeds the declared file size".into());
+                    }
+                    input.write_all(&bytes).await?;
+                }
+                ClientCommand::FileCommit if received == size => break,
+                ClientCommand::Close => return Ok(()),
+                _ => return Err("invalid upload command sequence".into()),
+            }
+        }
+        input.shutdown().await?;
+        let mut line = String::new();
+        timeout(Duration::from_secs(30), output.read_line(&mut line)).await??;
+        let result: FileResult = serde_json::from_str(line.trim())?;
+        let status = timeout(Duration::from_secs(30), child.wait()).await??;
+        if !status.success() || result.size != size || result.sha256 != sha256 {
+            return Err("file helper rejected the upload".into());
+        }
+        send_event(
+            &mut socket,
+            &ServerEvent::FileComplete {
+                size: result.size,
+                sha256: result.sha256,
+            },
+        )
+        .await
+    }
+
+    async fn proxy_download(
+        mut socket: AgentSocket,
+        user: String,
+        path: String,
+        offset: u64,
+    ) -> Result<(), Error> {
+        if offset > MAX_FILE_BYTES {
+            return Err("download offset exceeds the transfer limit".into());
+        }
+        let mut child = file_helper("download", &user, &path, None, Some(offset))?;
+        let output = child
+            .stdout
+            .take()
+            .ok_or("file helper stdout is unavailable")?;
+        let mut output = BufReader::new(output);
+        let mut header = String::new();
+        timeout(Duration::from_secs(30), output.read_line(&mut header)).await??;
+        if header.len() > 1024 {
+            return Err("file helper header is too large".into());
+        }
+        let result: FileResult = serde_json::from_str(header.trim())?;
+        if result.size > MAX_FILE_BYTES {
+            return Err("file exceeds the 2 GiB transfer limit".into());
+        }
+        if offset > result.size {
+            return Err("download offset exceeds the remote file size".into());
+        }
+        send_event(
+            &mut socket,
+            &ServerEvent::FileReady {
+                direction: "download".into(),
+                size: result.size,
+                sha256: Some(result.sha256.clone()),
+                offset,
+            },
+        )
+        .await?;
+        let mut remaining = result.size - offset;
+        let mut buffer = vec![0_u8; FILE_CHUNK_BYTES];
+        while remaining > 0 {
+            let limit = usize::try_from(remaining.min(FILE_CHUNK_BYTES as u64))?;
+            let read = output.read(&mut buffer[..limit]).await?;
+            if read == 0 {
+                return Err("file helper ended before the declared size".into());
+            }
+            remaining -= u64::try_from(read)?;
+            send_event(
+                &mut socket,
+                &ServerEvent::FileChunk {
+                    data: STANDARD_NO_PAD.encode(&buffer[..read]),
+                },
+            )
+            .await?;
+        }
+        let status = timeout(Duration::from_secs(30), child.wait()).await??;
+        if !status.success() {
+            return Err("file helper failed during download".into());
+        }
+        send_event(
+            &mut socket,
+            &ServerEvent::FileComplete {
+                size: result.size,
+                sha256: result.sha256,
+            },
+        )
+        .await
+    }
+
+    fn file_helper(
+        operation: &str,
+        user: &str,
+        path: &str,
+        upload: Option<(u64, &str, &str)>,
+        download_offset: Option<u64>,
+    ) -> Result<Child, Error> {
+        if path.is_empty() || path.len() > 1024 || path.chars().any(char::is_control) {
+            return Err("remote file path is invalid".into());
+        }
+        let helper = std::env::var_os("REMOTEDESK_FILE_HELPER").map_or_else(
+            || {
+                let installed = PathBuf::from("/usr/libexec/remotedesk-file-session");
+                if installed.is_file() {
+                    installed
+                } else {
+                    std::env::current_exe()
+                        .unwrap_or_default()
+                        .with_file_name("remotedesk-file-session")
+                }
+            },
+            PathBuf::from,
+        );
+        let mut command = Command::new("runuser");
+        command
+            .args(["--login", user, "--"])
+            .arg(helper)
+            .args([operation, path]);
+        if let Some((size, sha256, transfer_id)) = upload {
+            command.args([size.to_string(), sha256.to_owned(), transfer_id.to_owned()]);
+        }
+        if let Some(offset) = download_offset {
+            command.arg(offset.to_string());
+        }
+        Ok(command
+            .stdin(std::process::Stdio::piped())
+            .stdout(std::process::Stdio::piped())
+            .stderr(std::process::Stdio::null())
+            .kill_on_drop(true)
+            .spawn()?)
+    }
+
+    async fn proxy_terminal(
+        mut socket: AgentSocket,
+        user: String,
+        cols: u16,
+        rows: u16,
+    ) -> Result<(), Error> {
+        let helper = shell_helper_path()?;
+        let mut child = Command::new(helper)
+            .args([
+                "--user",
+                &user,
+                "--cols",
+                &cols.to_string(),
+                "--rows",
+                &rows.to_string(),
+            ])
+            .stdin(std::process::Stdio::piped())
+            .stdout(std::process::Stdio::piped())
+            .stderr(std::process::Stdio::inherit())
+            .kill_on_drop(true)
+            .spawn()?;
+        let mut child_input = child
+            .stdin
+            .take()
+            .ok_or("shell helper stdin is unavailable")?;
+        let output = child
+            .stdout
+            .take()
+            .ok_or("shell helper stdout is unavailable")?;
+        let mut output_lines = BufReader::new(output).lines();
+        let ready_line = timeout(Duration::from_secs(10), output_lines.next_line())
+            .await??
+            .ok_or("shell helper exited before becoming ready")?;
+        if !matches!(
+            serde_json::from_str::<ShellEvent>(&ready_line)?,
+            ShellEvent::Ready
+        ) {
+            return Err("shell helper did not report ready".into());
+        }
+        send_event(&mut socket, &ServerEvent::TerminalOpened).await?;
+
+        loop {
+            tokio::select! {
+                line = output_lines.next_line() => {
+                    let Some(line) = line? else { break; };
+                    match serde_json::from_str::<ShellEvent>(&line)? {
+                        ShellEvent::Output { data } => send_event(&mut socket, &ServerEvent::TerminalOutput { data }).await?,
+                        ShellEvent::Exited { exit_code } => {
+                            send_event(&mut socket, &ServerEvent::TerminalExited { exit_code }).await?;
+                            return finish_child(child).await;
+                        }
+                        ShellEvent::Error { message } => send_event(&mut socket, &ServerEvent::Error { code: "shell".into(), message }).await?,
+                        ShellEvent::Ready => {}
+                    }
+                }
+                message = socket.next() => {
+                    let Some(message) = message else { break; };
+                    let message = message?;
+                    if message.is_close() { break; }
+                    let command: ClientCommand = serde_json::from_str(message.to_text()?)?;
+                    let shell_command = match command {
+                        ClientCommand::TerminalInput { data } => ShellCommand::Input { data },
+                        ClientCommand::TerminalResize { cols, rows } => ShellCommand::Resize { cols, rows },
+                        ClientCommand::TerminalSignal { signal } => ShellCommand::Signal { signal },
+                        ClientCommand::Close => ShellCommand::Close,
+                        _ => continue,
+                    };
+                    let mut encoded = serde_json::to_vec(&shell_command)?;
+                    encoded.push(b'\n');
+                    child_input.write_all(&encoded).await?;
+                    if matches!(shell_command, ShellCommand::Close) { break; }
+                }
+            }
+        }
+        let _ = child.kill().await;
+        finish_child(child).await
+    }
+
+    async fn finish_child(mut child: Child) -> Result<(), Error> {
+        let _ = timeout(Duration::from_secs(5), child.wait()).await;
+        Ok(())
+    }
+
+    fn shell_helper_path() -> Result<PathBuf, Error> {
+        if let Some(configured) = std::env::var_os("REMOTEDESK_SHELL_HELPER") {
+            return Ok(PathBuf::from(configured));
+        }
+        let installed = PathBuf::from("/usr/libexec/remotedesk-shell-session");
+        if installed.is_file() {
+            return Ok(installed);
+        }
+        Ok(std::env::current_exe()?.with_file_name("remotedesk-shell-session"))
+    }
+
+    async fn receive_command(socket: &mut AgentSocket) -> Result<ClientCommand, Error> {
+        loop {
+            let message = socket.next().await.ok_or("client closed the WebSocket")??;
+            if message.is_close() {
+                return Err("client closed the WebSocket".into());
+            }
+            if !message.is_text() {
+                continue;
+            }
+            let text = message.to_text()?;
+            if text.len() > 65_536 {
+                return Err("control message exceeds 64 KiB".into());
+            }
+            return Ok(serde_json::from_str(text)?);
+        }
+    }
+
+    async fn send_event(socket: &mut AgentSocket, event: &ServerEvent) -> Result<(), Error> {
+        socket
+            .send(Message::Text(serde_json::to_string(event)?.into()))
+            .await?;
+        Ok(())
+    }
+
+    fn require_protocol(major: u16) -> Result<(), Error> {
+        if major != PROTOCOL_MAJOR {
+            return Err(
+                format!("protocol major {major} is incompatible with {PROTOCOL_MAJOR}").into(),
+            );
+        }
+        Ok(())
+    }
+
+    async fn serve_ipc(
+        path: &Path,
+        session_count: Arc<AtomicUsize>,
+        registry: SessionRegistry,
+    ) -> Result<(), Error> {
+        if let Some(parent) = path.parent() {
+            fs::create_dir_all(parent).await?;
+        }
+        if fs::symlink_metadata(path).await.is_ok() {
+            fs::remove_file(path).await?;
+        }
+        let listener = UnixListener::bind(path)?;
+        fs::set_permissions(path, std::fs::Permissions::from_mode(0o666)).await?;
+        loop {
+            let (stream, _) = listener.accept().await?;
+            let count = Arc::clone(&session_count);
+            let registry = Arc::clone(&registry);
+            tokio::spawn(async move {
+                if let Err(error) = handle_ipc(stream, count, registry).await {
+                    eprintln!("session IPC rejected: {error}");
+                }
+            });
+        }
+    }
+
+    async fn handle_ipc(
+        stream: UnixStream,
+        count: Arc<AtomicUsize>,
+        registry: SessionRegistry,
+    ) -> Result<(), Error> {
+        let credentials = stream.peer_cred()?;
+        let credentials_uid = credentials.uid();
+        let credentials_process_id =
+            u32::try_from(credentials.pid().ok_or("peer PID is unavailable")?)
+                .map_err(|_| "peer PID is negative")?;
+        let (reader, mut writer) = stream.into_split();
+        let mut lines = BufReader::new(reader).lines();
+        let hello = timeout(Duration::from_secs(5), lines.next_line())
+            .await??
+            .ok_or("session agent did not send a hello")?;
+        let message: IpcMessage = serde_json::from_str(&hello)?;
+        let endpoint = match message {
+            IpcMessage::Hello {
+                protocol_major,
+                protocol_minor: _,
+                pid,
+                uid,
+                desktop_backend,
+                desktop_socket,
+            } if protocol_major == PROTOCOL_MAJOR
+                && uid == credentials_uid
+                && pid == credentials_process_id =>
+            {
+                validate_desktop_socket(uid, &desktop_backend, desktop_socket.as_deref())?.map(
+                    |desktop_socket| SessionEndpoint {
+                        pid,
+                        uid,
+                        desktop_socket,
+                    },
+                )
+            }
+            _ => {
+                write_ipc(
+                    &mut writer,
+                    &IpcResponse::Error {
+                        code: "peer_mismatch".into(),
+                        message: "protocol, UID, or PID did not match SO_PEERCRED".into(),
+                    },
+                )
+                .await?;
+                return Err("session hello did not match peer credentials".into());
+            }
+        };
+        write_ipc(
+            &mut writer,
+            &IpcResponse::Accepted {
+                protocol_minor: PROTOCOL_MINOR,
+            },
+        )
+        .await?;
+        count.fetch_add(1, Ordering::Relaxed);
+        if let Some(endpoint) = endpoint.as_ref() {
+            registry.lock().await.insert(endpoint.uid, endpoint.clone());
+        }
+        let heartbeat_result: Result<(), Error> = loop {
+            match timeout(Duration::from_secs(45), lines.next_line()).await {
+                Ok(Ok(Some(line))) => {
+                    match serde_json::from_str::<IpcMessage>(&line) {
+                        Ok(IpcMessage::Heartbeat) => {}
+                        Ok(_) => break Err("session IPC received an invalid message".into()),
+                        Err(error) => break Err(error.into()),
+                    }
+                    if let Err(error) = write_ipc(&mut writer, &IpcResponse::Alive).await {
+                        break Err(error);
+                    }
+                }
+                Ok(Ok(None)) => break Ok(()),
+                Ok(Err(error)) => break Err(error.into()),
+                Err(_) => break Err("session IPC heartbeat timed out".into()),
+            }
+        };
+        count.fetch_sub(1, Ordering::Relaxed);
+        if let Some(endpoint) = endpoint {
+            let mut registry = registry.lock().await;
+            if registry
+                .get(&endpoint.uid)
+                .is_some_and(|current| current.pid == endpoint.pid)
+            {
+                registry.remove(&endpoint.uid);
+            }
+        }
+        heartbeat_result
+    }
+
+    fn validate_desktop_socket(
+        uid: u32,
+        desktop_backend: &str,
+        socket: Option<&str>,
+    ) -> Result<Option<PathBuf>, Error> {
+        if desktop_backend == "headless" {
+            if socket.is_some() {
+                return Err("headless user sessions cannot register a desktop socket".into());
+            }
+            return Ok(None);
+        }
+        if !matches!(desktop_backend, "x11" | "wayland") {
+            return Err("desktop backend is not supported".into());
+        }
+        let expected = PathBuf::from(format!("/run/user/{uid}/remotedesk/desktop.sock"));
+        if socket.map(Path::new) != Some(expected.as_path()) {
+            return Err("desktop IPC socket does not match the UID-bound path".into());
+        }
+        Ok(Some(expected))
+    }
+
+    async fn write_ipc(
+        writer: &mut tokio::net::unix::OwnedWriteHalf,
+        response: &IpcResponse,
+    ) -> Result<(), Error> {
+        let mut value = serde_json::to_vec(response)?;
+        value.push(b'\n');
+        writer.write_all(&value).await?;
+        Ok(())
+    }
+
+    fn hostname() -> String {
+        std::fs::read_to_string("/etc/hostname").map_or_else(
+            |_| "remotedesk-host".into(),
+            |value| value.trim().to_owned(),
+        )
+    }
+
+    #[cfg(test)]
+    mod tests {
+        use super::*;
+
+        fn desktop_client() -> ClientGrant {
+            ClientGrant {
+                name: "controller".into(),
+                public_key: "public".into(),
+                fingerprint: "fingerprint".into(),
+                permissions: vec!["desktop".into()],
+                allowed_users: vec!["alice".into()],
+                paired_at: 1,
+            }
+        }
+
+        #[test]
+        fn desktop_authorization_binds_permission_user_and_limits() {
+            let client = desktop_client();
+            assert!(authorize_desktop(&client, "alice", 1920, 1080, 15).is_ok());
+            assert!(authorize_desktop(&client, "bob", 1920, 1080, 15).is_err());
+            assert!(authorize_desktop(&client, "alice", 199, 1080, 15).is_err());
+            assert!(authorize_desktop(&client, "alice", 1920, 1080, 31).is_err());
+            let mut terminal_only = client;
+            terminal_only.permissions = vec!["terminal".into()];
+            assert!(authorize_desktop(&terminal_only, "alice", 1920, 1080, 15).is_err());
+        }
+
+        #[test]
+        fn direct_desktop_binding_rejects_mutation_and_media_downgrade() {
+            let binding = DirectDesktopBinding {
+                user: "alice".into(),
+                max_width: 1_920,
+                max_height: 1_080,
+                frames_per_second: 30,
+                opus_audio: true,
+                clipboard_read: true,
+                clipboard_write: true,
+            };
+            assert!(binding.matches("alice", 1_920, 1_080, 30, true, true, true, true, true));
+            assert!(!binding.matches("bob", 1_920, 1_080, 30, true, true, true, true, true));
+            assert!(!binding.matches("alice", 1_280, 1_080, 30, true, true, true, true, true));
+            assert!(!binding.matches("alice", 1_920, 1_080, 15, true, true, true, true, true));
+            assert!(!binding.matches("alice", 1_920, 1_080, 30, false, true, true, true, true));
+            assert!(!binding.matches("alice", 1_920, 1_080, 30, true, false, true, true, true));
+            assert!(!binding.matches("alice", 1_920, 1_080, 30, true, true, false, true, true));
+            assert!(!binding.matches("alice", 1_920, 1_080, 30, true, true, true, false, true));
+            assert!(binding.matches("alice", 1_920, 1_080, 30, false, false, true, true, false));
+            let no_audio = DirectDesktopBinding {
+                opus_audio: false,
+                ..binding
+            };
+            assert!(no_audio.matches("alice", 1_920, 1_080, 30, true, false, true, true, true));
+            assert!(!no_audio.matches("alice", 1_920, 1_080, 30, true, true, true, true, true));
+        }
+
+        #[test]
+        fn clipboard_authorization_is_directional() {
+            let mut client = desktop_client();
+            assert!(authorize_clipboard(&client, false, false).is_ok());
+            assert!(authorize_clipboard(&client, true, false).is_err());
+            client.permissions.push("clipboard_read".into());
+            assert!(authorize_clipboard(&client, true, false).is_ok());
+            assert!(authorize_clipboard(&client, false, true).is_err());
+            client.permissions.push("clipboard_write".into());
+            assert!(authorize_clipboard(&client, true, true).is_ok());
+        }
+
+        #[test]
+        fn opus_ipc_packet_is_ordered_bounded_and_canonical() {
+            let mut sequence = 0;
+            let data = STANDARD_NO_PAD.encode([0x78, 1, 2]);
+            let (decoded, duration) =
+                decode_desktop_opus_packet(&mut sequence, 1, 20_000, 1_000, &data).unwrap();
+            assert_eq!(decoded.as_ref(), &[0x78, 1, 2]);
+            assert_eq!(duration, Duration::from_millis(20));
+            assert!(decode_desktop_opus_packet(&mut sequence, 3, 20_000, 1_000, &data).is_err());
+            assert!(decode_desktop_opus_packet(&mut sequence, 2, 2_499, 1_000, &data).is_err());
+            assert!(decode_desktop_opus_packet(&mut sequence, 2, 20_000, 1_000, "AQID=").is_err());
+        }
+
+        #[test]
+        fn desktop_resize_dimensions_include_only_supported_boundaries() {
+            assert!(validate_desktop_size(200, 200).is_ok());
+            assert!(validate_desktop_size(8_192, 8_192).is_ok());
+            assert!(validate_desktop_size(199, 1_080).is_err());
+            assert!(validate_desktop_size(1_920, 8_193).is_err());
+        }
+
+        #[test]
+        fn desktop_socket_is_uid_bound_for_graphical_sessions() {
+            let expected = "/run/user/1000/remotedesk/desktop.sock";
+            assert_eq!(
+                validate_desktop_socket(1000, "x11", Some(expected)).unwrap(),
+                Some(PathBuf::from(expected))
+            );
+            assert!(validate_desktop_socket(1000, "x11", Some("/tmp/desktop.sock")).is_err());
+            assert_eq!(
+                validate_desktop_socket(1000, "wayland", Some(expected)).unwrap(),
+                Some(PathBuf::from(expected))
+            );
+            assert!(validate_desktop_socket(1000, "wayland", None).is_err());
+            assert_eq!(
+                validate_desktop_socket(1000, "headless", None).unwrap(),
+                None
+            );
+            assert!(validate_desktop_socket(1000, "headless", Some(expected)).is_err());
+            assert!(validate_desktop_socket(1000, "unknown", None).is_err());
+        }
+
+        #[test]
+        fn h264_access_unit_assembler_enforces_order_size_and_digest() {
+            let data = [0_u8, 0, 0, 1, 0x65, 1, 2, 3];
+            let metadata = DesktopH264Metadata {
+                sequence: 7,
+                width: 1_920,
+                height: 1_080,
+                captured_at_unix_ms: 1_700_000_000_000,
+                capture_latency_us: 1_000,
+                access_unit_bytes: data.len(),
+                chunk_count: 1,
+                duration_us: 33_333,
+                keyframe: true,
+                encode_latency_us: 2_000,
+                encoder: "vah264enc".into(),
+            };
+            let mut pending = PendingH264AccessUnit::new(metadata.clone()).unwrap();
+            assert!(pending.push(7, 1, &STANDARD_NO_PAD.encode(data)).is_err());
+            pending.push(7, 0, &STANDARD_NO_PAD.encode(data)).unwrap();
+            let digest = format_hex(&Sha256::digest(data));
+            let (assembled, duration) = pending.finish(7, &digest).unwrap();
+            assert_eq!(&assembled[..], &data);
+            assert_eq!(duration, Duration::from_micros(33_333));
+
+            let mut invalid = metadata;
+            invalid.access_unit_bytes = DESKTOP_MAX_H264_ACCESS_UNIT_BYTES + 1;
+            assert!(PendingH264AccessUnit::new(invalid).is_err());
+        }
+    }
+}
+
+#[cfg(target_os = "linux")]
+#[tokio::main]
+async fn main() {
+    if let Err(error) = linux::run().await {
+        eprintln!("remotedesk-agentd: {error}");
+        std::process::exit(1);
+    }
+}
diff --git a/agent/agent-runtime/src/bin/remotedesk-file-session.rs b/agent/agent-runtime/src/bin/remotedesk-file-session.rs
new file mode 100644
index 0000000..f406e6d
--- /dev/null
+++ b/agent/agent-runtime/src/bin/remotedesk-file-session.rs
@@ -0,0 +1,219 @@
+#[cfg(not(target_os = "linux"))]
+fn main() {
+    eprintln!("remotedesk-file-session is only supported on Linux");
+    std::process::exit(1);
+}
+
+#[cfg(target_os = "linux")]
+fn main() {
+    if let Err(error) = linux::run() {
+        eprintln!("file session failed: {error}");
+        std::process::exit(1);
+    }
+}
+
+#[cfg(target_os = "linux")]
+mod linux {
+    use std::fs::{self, OpenOptions};
+    use std::io::{self, Read as _, Seek as _, Write as _};
+    use std::os::unix::fs::OpenOptionsExt as _;
+    use std::path::{Component, Path, PathBuf};
+
+    use remotedesk_agent_runtime::{FileResult, FileTransferReady, MAX_FILE_BYTES};
+    use sha2::{Digest as _, Sha256};
+
+    type Error = Box<dyn std::error::Error>;
+
+    pub fn run() -> Result<(), Error> {
+        let mut args = std::env::args().skip(1);
+        let operation = args.next().ok_or("file operation is required")?;
+        let path = safe_home_path(&args.next().ok_or("relative path is required")?)?;
+        match operation.as_str() {
+            "upload" => {
+                let size: u64 = args.next().ok_or("upload size is required")?.parse()?;
+                let sha256 = args.next().ok_or("upload SHA-256 is required")?;
+                let transfer_id = args.next().ok_or("upload transfer ID is required")?;
+                upload(&path, size, &sha256, &transfer_id)
+            }
+            "download" => {
+                let offset: u64 = args.next().ok_or("download offset is required")?.parse()?;
+                download(&path, offset)
+            }
+            _ => Err("unknown file operation".into()),
+        }
+    }
+
+    fn safe_home_path(relative: &str) -> Result<PathBuf, Error> {
+        if relative.is_empty() || relative.len() > 1024 || Path::new(relative).is_absolute() {
+            return Err("remote path must be a non-empty relative path".into());
+        }
+        if Path::new(relative)
+            .components()
+            .any(|component| !matches!(component, Component::Normal(_)))
+        {
+            return Err("remote path contains a prohibited component".into());
+        }
+        let home = fs::canonicalize(std::env::var_os("HOME").ok_or("HOME is unavailable")?)?;
+        let candidate = home.join(relative);
+        let parent = candidate.parent().ok_or("remote path has no parent")?;
+        fs::create_dir_all(parent)?;
+        let canonical_parent = fs::canonicalize(parent)?;
+        if !canonical_parent.starts_with(&home) {
+            return Err("remote path escapes the user home directory".into());
+        }
+        Ok(canonical_parent.join(
+            candidate
+                .file_name()
+                .ok_or("remote path has no file name")?,
+        ))
+    }
+
+    fn upload(
+        path: &Path,
+        size: u64,
+        expected_sha256: &str,
+        transfer_id: &str,
+    ) -> Result<(), Error> {
+        validate_transfer(size, expected_sha256)?;
+        validate_transfer_id(transfer_id)?;
+        let file_name = path
+            .file_name()
+            .and_then(|value| value.to_str())
+            .ok_or("upload path has no UTF-8 file name")?;
+        let temporary = path.with_file_name(format!(".{file_name}.remotedesk-{transfer_id}.part"));
+        if fs::symlink_metadata(&temporary).is_ok_and(|metadata| !metadata.file_type().is_file()) {
+            return Err("upload partial path is not a regular file".into());
+        }
+        let mut output = OpenOptions::new()
+            .read(true)
+            .append(true)
+            .create(true)
+            .mode(0o600)
+            .custom_flags(0x20_000)
+            .open(&temporary)?;
+        let offset = output.metadata()?.len();
+        if offset > size {
+            return Err("upload partial file exceeds the declared size".into());
+        }
+        let mut hasher = Sha256::new();
+        output.rewind()?;
+        copy_hash(
+            &mut io::Read::by_ref(&mut output).take(offset),
+            &mut io::sink(),
+            &mut hasher,
+        )?;
+        output.seek(io::SeekFrom::End(0))?;
+        let mut stdout = io::stdout().lock();
+        writeln!(
+            stdout,
+            "{}",
+            serde_json::to_string(&FileTransferReady { offset })?
+        )?;
+        stdout.flush()?;
+        let remaining = size - offset;
+        let mut input = io::stdin().lock().take(remaining);
+        let copied = copy_hash(&mut input, &mut output, &mut hasher)?;
+        output.sync_all()?;
+        if copied != remaining {
+            return Err("upload ended before the declared size; partial file was preserved".into());
+        }
+        let actual = hex(&hasher.finalize());
+        if actual != expected_sha256 {
+            let _ = fs::remove_file(&temporary);
+            return Err("uploaded file SHA-256 did not match".into());
+        }
+        fs::rename(&temporary, path)?;
+        writeln!(
+            stdout,
+            "{}",
+            serde_json::to_string(&FileResult {
+                size,
+                sha256: actual
+            })?
+        )?;
+        stdout.flush()?;
+        Ok(())
+    }
+
+    fn download(path: &Path, offset: u64) -> Result<(), Error> {
+        let canonical = fs::canonicalize(path)?;
+        let home = fs::canonicalize(std::env::var_os("HOME").ok_or("HOME is unavailable")?)?;
+        if !canonical.starts_with(home) || !canonical.is_file() {
+            return Err("download path is outside the user home or is not a file".into());
+        }
+        let size = fs::metadata(&canonical)?.len();
+        if size > MAX_FILE_BYTES {
+            return Err("file exceeds the 2 GiB transfer limit".into());
+        }
+        if offset > size {
+            return Err("download offset exceeds the file size".into());
+        }
+        let mut file = fs::File::open(canonical)?;
+        let mut hasher = Sha256::new();
+        copy_hash(&mut file, &mut io::sink(), &mut hasher)?;
+        let sha256 = hex(&hasher.finalize());
+        file.seek(io::SeekFrom::Start(offset))?;
+        let mut stdout = io::stdout().lock();
+        writeln!(
+            stdout,
+            "{}",
+            serde_json::to_string(&FileResult { size, sha256 })?
+        )?;
+        io::copy(&mut file, &mut stdout)?;
+        stdout.flush()?;
+        Ok(())
+    }
+
+    fn validate_transfer(size: u64, sha256: &str) -> Result<(), Error> {
+        if size > MAX_FILE_BYTES {
+            return Err("file exceeds the 2 GiB transfer limit".into());
+        }
+        if sha256.len() != 64
+            || !sha256
+                .bytes()
+                .all(|byte| byte.is_ascii_hexdigit() && !byte.is_ascii_uppercase())
+        {
+            return Err("file SHA-256 must be 64 lowercase hexadecimal digits".into());
+        }
+        Ok(())
+    }
+
+    fn validate_transfer_id(value: &str) -> Result<(), Error> {
+        if value.len() != 32
+            || !value
+                .bytes()
+                .all(|byte| byte.is_ascii_hexdigit() && !byte.is_ascii_uppercase())
+        {
+            return Err("transfer ID must be 32 lowercase hexadecimal digits".into());
+        }
+        Ok(())
+    }
+
+    fn copy_hash(
+        input: &mut impl io::Read,
+        output: &mut impl io::Write,
+        hasher: &mut Sha256,
+    ) -> io::Result<u64> {
+        let mut total = 0_u64;
+        let mut buffer = vec![0_u8; 64 * 1024];
+        loop {
+            let read = input.read(&mut buffer)?;
+            if read == 0 {
+                break;
+            }
+            output.write_all(&buffer[..read])?;
+            hasher.update(&buffer[..read]);
+            total += u64::try_from(read).unwrap_or(u64::MAX);
+        }
+        Ok(total)
+    }
+
+    fn hex(bytes: &[u8]) -> String {
+        use std::fmt::Write as _;
+        let mut output = String::with_capacity(bytes.len() * 2);
+        for byte in bytes {
+            write!(output, "{byte:02x}").expect("String writes cannot fail");
+        }
+        output
+    }
+}
diff --git a/agent/agent-runtime/src/bin/remotedesk-shell-session.rs b/agent/agent-runtime/src/bin/remotedesk-shell-session.rs
new file mode 100644
index 0000000..c4f0ce1
--- /dev/null
+++ b/agent/agent-runtime/src/bin/remotedesk-shell-session.rs
@@ -0,0 +1,203 @@
+#[cfg(not(target_os = "linux"))]
+fn main() {
+    eprintln!("remotedesk-shell-session is only supported on Linux");
+    std::process::exit(1);
+}
+
+#[cfg(target_os = "linux")]
+mod linux {
+    use std::{
+        fs,
+        io::{BufRead as _, Read as _, Write as _},
+        path::{Path, PathBuf},
+        process::Command,
+        sync::{Arc, Mutex, mpsc},
+        thread,
+        time::Duration,
+    };
+
+    use base64::{Engine as _, engine::general_purpose::STANDARD_NO_PAD};
+    use clap::Parser;
+    use portable_pty::{CommandBuilder, PtySize, native_pty_system};
+    use remotedesk_agent_runtime::{ShellCommand, ShellEvent};
+
+    type Error = Box<dyn std::error::Error + Send + Sync>;
+
+    #[derive(Debug, Parser)]
+    #[command(
+        name = "remotedesk-shell-session",
+        version,
+        about = "PAM-backed RemoteDesk PTY helper"
+    )]
+    struct Cli {
+        #[arg(long)]
+        user: String,
+        #[arg(long, default_value_t = 120, value_parser = clap::value_parser!(u16).range(20..=500))]
+        cols: u16,
+        #[arg(long, default_value_t = 40, value_parser = clap::value_parser!(u16).range(5..=200))]
+        rows: u16,
+    }
+
+    pub fn run() -> Result<(), Error> {
+        let cli = Cli::parse();
+        validate_user(&cli.user)?;
+        let runuser = find_runuser()?;
+        let pty = native_pty_system().openpty(PtySize {
+            rows: cli.rows,
+            cols: cli.cols,
+            pixel_width: 0,
+            pixel_height: 0,
+        })?;
+        let mut command = CommandBuilder::new(runuser);
+        command.arg("--login");
+        command.arg(&cli.user);
+        let mut child = pty.slave.spawn_command(command)?;
+        drop(pty.slave);
+        let pty_reader = pty.master.try_clone_reader()?;
+        let mut pty_writer = pty.master.take_writer()?;
+        let output = Arc::new(Mutex::new(std::io::stdout()));
+        write_event(&output, &ShellEvent::Ready)?;
+        let reader_thread = spawn_output_reader(pty_reader, Arc::clone(&output));
+        let receiver = spawn_command_reader();
+
+        let mut requested_close = false;
+        let exit_code = loop {
+            if let Some(status) = child.try_wait()? {
+                break i32::try_from(status.exit_code()).ok();
+            }
+            match receiver.recv_timeout(Duration::from_millis(50)) {
+                Ok(Ok(ShellCommand::Input { data })) => {
+                    let decoded = STANDARD_NO_PAD.decode(data)?;
+                    if decoded.len() > 64 * 1024 {
+                        return Err("terminal input exceeds 64 KiB".into());
+                    }
+                    pty_writer.write_all(&decoded)?;
+                    pty_writer.flush()?;
+                }
+                Ok(Ok(ShellCommand::Resize { cols, rows })) => {
+                    if !(20..=500).contains(&cols) || !(5..=200).contains(&rows) {
+                        return Err("terminal dimensions are outside the supported range".into());
+                    }
+                    pty.master.resize(PtySize {
+                        rows,
+                        cols,
+                        pixel_width: 0,
+                        pixel_height: 0,
+                    })?;
+                }
+                Ok(Ok(ShellCommand::Signal { signal })) if signal == "interrupt" => {
+                    pty_writer.write_all(&[3])?;
+                    pty_writer.flush()?;
+                }
+                Ok(Ok(ShellCommand::Signal { signal })) if signal == "terminate" => {
+                    child.kill()?;
+                    requested_close = true;
+                }
+                Ok(Ok(ShellCommand::Signal { signal })) => {
+                    write_event(
+                        &output,
+                        &ShellEvent::Error {
+                            message: format!("unsupported signal: {signal}"),
+                        },
+                    )?;
+                }
+                Ok(Err(error)) => write_event(&output, &ShellEvent::Error { message: error })?,
+                Ok(Ok(ShellCommand::Close)) | Err(mpsc::RecvTimeoutError::Disconnected) => {
+                    child.kill()?;
+                    requested_close = true;
+                }
+                Err(mpsc::RecvTimeoutError::Timeout) => {}
+            }
+            if requested_close {
+                let status = child.wait()?;
+                break i32::try_from(status.exit_code()).ok();
+            }
+        };
+        drop(pty_writer);
+        let _ = reader_thread.join();
+        write_event(&output, &ShellEvent::Exited { exit_code })?;
+        Ok(())
+    }
+
+    fn spawn_output_reader(
+        mut reader: Box<dyn std::io::Read + Send>,
+        output: Arc<Mutex<std::io::Stdout>>,
+    ) -> thread::JoinHandle<()> {
+        thread::spawn(move || {
+            let mut buffer = [0_u8; 16 * 1024];
+            loop {
+                match reader.read(&mut buffer) {
+                    Ok(0) => break,
+                    Ok(read) => {
+                        let event = ShellEvent::Output {
+                            data: STANDARD_NO_PAD.encode(&buffer[..read]),
+                        };
+                        if write_event(&output, &event).is_err() {
+                            break;
+                        }
+                    }
+                    Err(error) if error.kind() == std::io::ErrorKind::Interrupted => {}
+                    Err(_) => break,
+                }
+            }
+        })
+    }
+
+    fn spawn_command_reader() -> mpsc::Receiver<Result<ShellCommand, String>> {
+        let (sender, receiver) = mpsc::channel();
+        thread::spawn(move || {
+            for line in std::io::stdin().lock().lines() {
+                let parsed = line.map_err(|error| error.to_string()).and_then(|line| {
+                    serde_json::from_str::<ShellCommand>(&line).map_err(|error| error.to_string())
+                });
+                if sender.send(parsed).is_err() {
+                    break;
+                }
+            }
+        });
+        receiver
+    }
+
+    fn validate_user(user: &str) -> Result<(), Error> {
+        if user.is_empty()
+            || user.len() > 32
+            || !user
+                .bytes()
+                .all(|byte| byte.is_ascii_alphanumeric() || matches!(byte, b'_' | b'-'))
+        {
+            return Err("target user is invalid or prohibited".into());
+        }
+        let output = Command::new("id").args(["-u", user]).output()?;
+        if !output.status.success() {
+            return Err(format!("Linux user does not exist: {user}").into());
+        }
+        Ok(())
+    }
+
+    fn find_runuser() -> Result<PathBuf, Error> {
+        ["/usr/sbin/runuser", "/usr/bin/runuser"]
+            .into_iter()
+            .map(Path::new)
+            .find(|path| fs::metadata(path).is_ok_and(|metadata| metadata.is_file()))
+            .map(Path::to_path_buf)
+            .ok_or_else(|| "runuser from util-linux is required for PAM session setup".into())
+    }
+
+    fn write_event(output: &Arc<Mutex<std::io::Stdout>>, event: &ShellEvent) -> Result<(), Error> {
+        let mut output = output
+            .lock()
+            .map_err(|_| "terminal output lock was poisoned")?;
+        serde_json::to_writer(&mut *output, event)?;
+        output.write_all(b"\n")?;
+        output.flush()?;
+        Ok(())
+    }
+}
+
+#[cfg(target_os = "linux")]
+fn main() {
+    if let Err(error) = linux::run() {
+        eprintln!("remotedesk-shell-session: {error}");
+        std::process::exit(1);
+    }
+}
diff --git a/agent/agent-runtime/src/clipboard.rs b/agent/agent-runtime/src/clipboard.rs
new file mode 100644
index 0000000..77ce914
--- /dev/null
+++ b/agent/agent-runtime/src/clipboard.rs
@@ -0,0 +1,161 @@
+use std::fmt;
+
+use base64::{Engine as _, engine::general_purpose::STANDARD_NO_PAD};
+use sha2::{Digest as _, Sha256};
+
+use crate::DESKTOP_MAX_CLIPBOARD_BYTES;
+
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct PreparedClipboardText {
+    pub sequence: u64,
+    pub utf8_bytes: u32,
+    pub sha256: String,
+    pub data: String,
+    pub text: String,
+}
+
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub enum ClipboardTextError {
+    InvalidSequence,
+    TooLarge,
+    ContainsNul,
+    InvalidDigest,
+    InvalidEncoding,
+    LengthMismatch,
+}
+
+impl fmt::Display for ClipboardTextError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        formatter.write_str(match self {
+            Self::InvalidSequence => "clipboard sequence must be nonzero",
+            Self::TooLarge => "clipboard text exceeds the size limit",
+            Self::ContainsNul => "clipboard text contains NUL",
+            Self::InvalidDigest => "clipboard digest is invalid",
+            Self::InvalidEncoding => "clipboard data is not canonical UTF-8 Base64",
+            Self::LengthMismatch => "clipboard data length does not match its offer",
+        })
+    }
+}
+
+impl std::error::Error for ClipboardTextError {}
+
+pub fn prepare_clipboard_text(
+    sequence: u64,
+    text: &str,
+) -> Result<PreparedClipboardText, ClipboardTextError> {
+    if sequence == 0 {
+        return Err(ClipboardTextError::InvalidSequence);
+    }
+    let text = normalize_clipboard_text(text)?;
+    let bytes = text.as_bytes();
+    if bytes.len() > DESKTOP_MAX_CLIPBOARD_BYTES {
+        return Err(ClipboardTextError::TooLarge);
+    }
+    Ok(PreparedClipboardText {
+        sequence,
+        utf8_bytes: bytes
+            .len()
+            .try_into()
+            .map_err(|_| ClipboardTextError::TooLarge)?,
+        sha256: digest_hex(bytes),
+        data: STANDARD_NO_PAD.encode(bytes),
+        text,
+    })
+}
+
+pub fn validate_clipboard_offer(
+    sequence: u64,
+    utf8_bytes: u32,
+    sha256: &str,
+) -> Result<(), ClipboardTextError> {
+    if sequence == 0 {
+        return Err(ClipboardTextError::InvalidSequence);
+    }
+    if usize::try_from(utf8_bytes).map_or(true, |size| size > DESKTOP_MAX_CLIPBOARD_BYTES) {
+        return Err(ClipboardTextError::TooLarge);
+    }
+    if !valid_digest(sha256) {
+        return Err(ClipboardTextError::InvalidDigest);
+    }
+    Ok(())
+}
+
+pub fn decode_clipboard_text(
+    data: &str,
+    utf8_bytes: u32,
+    sha256: &str,
+) -> Result<String, ClipboardTextError> {
+    validate_clipboard_offer(1, utf8_bytes, sha256)?;
+    if data.len() > DESKTOP_MAX_CLIPBOARD_BYTES.div_ceil(3) * 4 {
+        return Err(ClipboardTextError::TooLarge);
+    }
+    let decoded = STANDARD_NO_PAD
+        .decode(data)
+        .map_err(|_| ClipboardTextError::InvalidEncoding)?;
+    if STANDARD_NO_PAD.encode(&decoded) != data {
+        return Err(ClipboardTextError::InvalidEncoding);
+    }
+    let expected_bytes = usize::try_from(utf8_bytes).map_err(|_| ClipboardTextError::TooLarge)?;
+    if decoded.len() != expected_bytes {
+        return Err(ClipboardTextError::LengthMismatch);
+    }
+    if digest_hex(&decoded) != sha256 {
+        return Err(ClipboardTextError::InvalidDigest);
+    }
+    let text = String::from_utf8(decoded).map_err(|_| ClipboardTextError::InvalidEncoding)?;
+    if text.contains('\0') || normalize_clipboard_text(&text)? != text {
+        return Err(ClipboardTextError::InvalidEncoding);
+    }
+    Ok(text)
+}
+
+pub fn normalize_clipboard_text(text: &str) -> Result<String, ClipboardTextError> {
+    if text.contains('\0') {
+        return Err(ClipboardTextError::ContainsNul);
+    }
+    Ok(text.replace("\r\n", "\n").replace('\r', "\n"))
+}
+
+fn valid_digest(value: &str) -> bool {
+    value.len() == 64
+        && value
+            .bytes()
+            .all(|byte| byte.is_ascii_digit() || matches!(byte, b'a'..=b'f'))
+}
+
+fn digest_hex(bytes: &[u8]) -> String {
+    use std::fmt::Write as _;
+
+    Sha256::digest(bytes)
+        .iter()
+        .fold(String::with_capacity(64), |mut output, byte| {
+            write!(output, "{byte:02x}").expect("writing to a String cannot fail");
+            output
+        })
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn clipboard_text_is_normalized_bounded_and_round_trips() {
+        let prepared = prepare_clipboard_text(1, "hello\r\n世界").unwrap();
+        assert_eq!(prepared.text, "hello\n世界");
+        assert_eq!(
+            decode_clipboard_text(&prepared.data, prepared.utf8_bytes, &prepared.sha256).unwrap(),
+            prepared.text
+        );
+        assert!(prepare_clipboard_text(0, "hello").is_err());
+        assert!(prepare_clipboard_text(1, "bad\0text").is_err());
+        assert!(prepare_clipboard_text(1, &"x".repeat(DESKTOP_MAX_CLIPBOARD_BYTES + 1)).is_err());
+    }
+
+    #[test]
+    fn clipboard_data_rejects_noncanonical_or_changed_content() {
+        let prepared = prepare_clipboard_text(9, "hello").unwrap();
+        assert!(decode_clipboard_text("aGVsbG8=", 5, &prepared.sha256).is_err());
+        assert!(decode_clipboard_text(&prepared.data, 4, &prepared.sha256).is_err());
+        assert!(decode_clipboard_text(&prepared.data, 5, &"00".repeat(32)).is_err());
+    }
+}
diff --git a/agent/agent-runtime/src/desktop.rs b/agent/agent-runtime/src/desktop.rs
new file mode 100644
index 0000000..d4ea974
--- /dev/null
+++ b/agent/agent-runtime/src/desktop.rs
@@ -0,0 +1,605 @@
+use std::io::{Read as _, Write as _};
+use std::time::{Duration, Instant};
+
+use flate2::{Compression, read::ZlibDecoder, write::ZlibEncoder};
+use sha2::{Digest as _, Sha256};
+
+use crate::{
+    DESKTOP_FRAME_CHUNK_BYTES, DESKTOP_MAX_COMPRESSED_BYTES, DESKTOP_MAX_FRAME_BYTES,
+    DESKTOP_MAX_PIXELS, DesktopFrameEncoding, DesktopFrameMetadata, DesktopInputEvent,
+    MAX_RELATIVE_POINTER_DELTA,
+};
+
+const MAX_DESKTOP_DIMENSION: u16 = 8_192;
+const MAX_DESKTOP_CHUNKS: usize = DESKTOP_MAX_COMPRESSED_BYTES.div_ceil(DESKTOP_FRAME_CHUNK_BYTES);
+const SLOW_ACK_STREAK: u8 = 2;
+const FAST_ACK_STREAK: u8 = 30;
+const MAX_SLOW_ACK: Duration = Duration::from_millis(250);
+const MIN_COMPRESSION_LEVEL: u8 = 1;
+const MAX_COMPRESSION_LEVEL: u8 = 6;
+const COMPRESSION_SLOW_ACK_STREAK: u8 = 2;
+const COMPRESSION_ENCODE_OVERRUN_STREAK: u8 = 2;
+const COMPRESSION_HEALTHY_ACK_STREAK: u8 = 60;
+
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub struct DesktopFramePacer {
+    ceiling_fps: u8,
+    current_fps: u8,
+    slow_streak: u8,
+    fast_streak: u8,
+}
+
+impl DesktopFramePacer {
+    pub fn new(ceiling_fps: u8) -> Option<Self> {
+        (1..=30).contains(&ceiling_fps).then_some(Self {
+            ceiling_fps,
+            current_fps: ceiling_fps,
+            slow_streak: 0,
+            fast_streak: 0,
+        })
+    }
+
+    pub fn current_fps(&self) -> u8 {
+        self.current_fps
+    }
+
+    pub fn frame_interval(&self) -> Duration {
+        Duration::from_micros(1_000_000 / u64::from(self.current_fps))
+    }
+
+    pub fn observe_presentation_ack(&mut self, elapsed: Duration) -> bool {
+        let interval_micros = self.frame_interval().as_micros();
+        let slow =
+            elapsed > MAX_SLOW_ACK || elapsed.as_micros() > interval_micros.saturating_mul(2);
+        if slow {
+            self.slow_streak = self.slow_streak.saturating_add(1);
+            self.fast_streak = 0;
+            if self.slow_streak < SLOW_ACK_STREAK || self.current_fps == 1 {
+                return false;
+            }
+            let reduced = self.current_fps.saturating_mul(3) / 4;
+            self.current_fps = reduced.max(1).min(self.current_fps.saturating_sub(1));
+            self.slow_streak = 0;
+            return true;
+        }
+
+        self.slow_streak = 0;
+        if elapsed.as_micros() <= interval_micros && self.current_fps < self.ceiling_fps {
+            self.fast_streak = self.fast_streak.saturating_add(1);
+            if self.fast_streak >= FAST_ACK_STREAK {
+                self.current_fps = self.current_fps.saturating_add(1).min(self.ceiling_fps);
+                self.fast_streak = 0;
+                return true;
+            }
+        } else {
+            self.fast_streak = 0;
+        }
+        false
+    }
+}
+
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub struct DesktopCompressionController {
+    current_level: u8,
+    slow_ack_streak: u8,
+    healthy_ack_streak: u8,
+    encode_overrun_streak: u8,
+    encode_budget_available: bool,
+}
+
+impl Default for DesktopCompressionController {
+    fn default() -> Self {
+        Self {
+            current_level: MIN_COMPRESSION_LEVEL,
+            slow_ack_streak: 0,
+            healthy_ack_streak: 0,
+            encode_overrun_streak: 0,
+            encode_budget_available: true,
+        }
+    }
+}
+
+impl DesktopCompressionController {
+    pub fn current_level(&self) -> u8 {
+        self.current_level
+    }
+
+    pub fn observe_encode(&mut self, elapsed: Duration, frame_interval: Duration) -> bool {
+        let elapsed_micros = elapsed.as_micros();
+        let interval_micros = frame_interval.as_micros();
+        self.encode_budget_available = elapsed_micros.saturating_mul(3) <= interval_micros;
+        let overrun = elapsed_micros.saturating_mul(2) > interval_micros;
+        if !overrun {
+            self.encode_overrun_streak = 0;
+            return false;
+        }
+
+        self.encode_overrun_streak = self.encode_overrun_streak.saturating_add(1);
+        self.slow_ack_streak = 0;
+        self.healthy_ack_streak = 0;
+        if self.encode_overrun_streak < COMPRESSION_ENCODE_OVERRUN_STREAK
+            || self.current_level == MIN_COMPRESSION_LEVEL
+        {
+            return false;
+        }
+        self.current_level = self.current_level.saturating_sub(1);
+        self.encode_overrun_streak = 0;
+        true
+    }
+
+    pub fn observe_presentation_ack(
+        &mut self,
+        elapsed: Duration,
+        frame_interval: Duration,
+    ) -> bool {
+        let interval_micros = frame_interval.as_micros();
+        let slow =
+            elapsed > MAX_SLOW_ACK || elapsed.as_micros() > interval_micros.saturating_mul(2);
+        if slow {
+            self.healthy_ack_streak = 0;
+            if !self.encode_budget_available || self.current_level == MAX_COMPRESSION_LEVEL {
+                self.slow_ack_streak = 0;
+                return false;
+            }
+            self.slow_ack_streak = self.slow_ack_streak.saturating_add(1);
+            if self.slow_ack_streak < COMPRESSION_SLOW_ACK_STREAK {
+                return false;
+            }
+            self.current_level = self
+                .current_level
+                .saturating_add(1)
+                .min(MAX_COMPRESSION_LEVEL);
+            self.slow_ack_streak = 0;
+            return true;
+        }
+
+        self.slow_ack_streak = 0;
+        if self.current_level == MIN_COMPRESSION_LEVEL {
+            self.healthy_ack_streak = 0;
+            return false;
+        }
+        if elapsed.as_micros() > interval_micros {
+            self.healthy_ack_streak = 0;
+            return false;
+        }
+        self.healthy_ack_streak = self.healthy_ack_streak.saturating_add(1);
+        if self.healthy_ack_streak < COMPRESSION_HEALTHY_ACK_STREAK {
+            return false;
+        }
+        self.current_level = self.current_level.saturating_sub(1);
+        self.healthy_ack_streak = 0;
+        true
+    }
+}
+
+#[derive(Debug, PartialEq, Eq)]
+pub enum DesktopFrameBuildError {
+    InvalidDimensions,
+    InvalidFrameLength,
+    FrameTooLarge,
+    InvalidCompressionLevel,
+    CompressionFailed,
+    InvalidMetadata,
+    UnexpectedChunk,
+    CompressedFrameTooLarge,
+    HashMismatch,
+    DecompressionFailed,
+}
+
+impl std::fmt::Display for DesktopFrameBuildError {
+    fn fmt(&self, formatter: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+        formatter.write_str(match self {
+            Self::InvalidDimensions => "desktop frame dimensions are invalid",
+            Self::InvalidFrameLength => "desktop frame byte length is invalid",
+            Self::FrameTooLarge => "desktop frame exceeds the pixel limit",
+            Self::InvalidCompressionLevel => "desktop compression level is invalid",
+            Self::CompressionFailed => "desktop frame compression failed",
+            Self::InvalidMetadata => "desktop frame metadata is invalid",
+            Self::UnexpectedChunk => "desktop frame chunk is missing, duplicated, or out of order",
+            Self::CompressedFrameTooLarge => "compressed desktop frame exceeds the limit",
+            Self::HashMismatch => "desktop frame hash does not match",
+            Self::DecompressionFailed => "desktop frame decompression failed",
+        })
+    }
+}
+
+impl std::error::Error for DesktopFrameBuildError {}
+
+#[derive(Debug)]
+pub struct EncodedDesktopFrame {
+    pub metadata: DesktopFrameMetadata,
+    pub chunks: Vec<Vec<u8>>,
+    pub sha256: String,
+}
+
+pub fn encode_desktop_frame(
+    sequence: u64,
+    width: u16,
+    height: u16,
+    captured_at_unix_ms: u64,
+    capture_latency_us: u64,
+    bgra: &[u8],
+) -> Result<EncodedDesktopFrame, DesktopFrameBuildError> {
+    encode_desktop_frame_with_level(
+        sequence,
+        width,
+        height,
+        captured_at_unix_ms,
+        capture_latency_us,
+        MIN_COMPRESSION_LEVEL,
+        bgra,
+    )
+}
+
+pub fn encode_desktop_frame_with_level(
+    sequence: u64,
+    width: u16,
+    height: u16,
+    captured_at_unix_ms: u64,
+    capture_latency_us: u64,
+    compression_level: u8,
+    bgra: &[u8],
+) -> Result<EncodedDesktopFrame, DesktopFrameBuildError> {
+    if !(MIN_COMPRESSION_LEVEL..=MAX_COMPRESSION_LEVEL).contains(&compression_level) {
+        return Err(DesktopFrameBuildError::InvalidCompressionLevel);
+    }
+    let expected = checked_frame_len(width, height)?;
+    if bgra.len() != expected {
+        return Err(DesktopFrameBuildError::InvalidFrameLength);
+    }
+    let encode_started = Instant::now();
+    let mut encoder = ZlibEncoder::new(Vec::new(), Compression::new(u32::from(compression_level)));
+    encoder
+        .write_all(bgra)
+        .map_err(|_| DesktopFrameBuildError::CompressionFailed)?;
+    let compressed = encoder
+        .finish()
+        .map_err(|_| DesktopFrameBuildError::CompressionFailed)?;
+    let encode_latency_us = encode_started
+        .elapsed()
+        .as_micros()
+        .try_into()
+        .unwrap_or(u64::MAX);
+    if compressed.len() > DESKTOP_MAX_COMPRESSED_BYTES {
+        return Err(DesktopFrameBuildError::CompressedFrameTooLarge);
+    }
+    let chunks = compressed
+        .chunks(DESKTOP_FRAME_CHUNK_BYTES)
+        .map(<[u8]>::to_vec)
+        .collect::<Vec<_>>();
+    let chunk_count =
+        u16::try_from(chunks.len()).map_err(|_| DesktopFrameBuildError::CompressedFrameTooLarge)?;
+    let metadata = DesktopFrameMetadata {
+        sequence,
+        width,
+        height,
+        encoding: DesktopFrameEncoding::ZlibBgra,
+        uncompressed_bytes: expected,
+        compressed_bytes: compressed.len(),
+        chunk_count,
+        captured_at_unix_ms,
+        capture_latency_us,
+        encode_latency_us,
+        compression_level,
+    };
+    validate_metadata(&metadata)?;
+    Ok(EncodedDesktopFrame {
+        metadata,
+        chunks,
+        sha256: hex_sha256(bgra),
+    })
+}
+
+pub struct DesktopFrameAssembler {
+    metadata: DesktopFrameMetadata,
+    compressed: Vec<u8>,
+    next_index: u16,
+}
+
+impl DesktopFrameAssembler {
+    pub fn new(metadata: DesktopFrameMetadata) -> Result<Self, DesktopFrameBuildError> {
+        validate_metadata(&metadata)?;
+        Ok(Self {
+            compressed: Vec::with_capacity(metadata.compressed_bytes),
+            metadata,
+            next_index: 0,
+        })
+    }
+
+    pub fn sequence(&self) -> u64 {
+        self.metadata.sequence
+    }
+
+    pub fn push(&mut self, index: u16, data: &[u8]) -> Result<(), DesktopFrameBuildError> {
+        if index != self.next_index
+            || index >= self.metadata.chunk_count
+            || data.is_empty()
+            || data.len() > DESKTOP_FRAME_CHUNK_BYTES
+            || self.compressed.len().saturating_add(data.len()) > self.metadata.compressed_bytes
+        {
+            return Err(DesktopFrameBuildError::UnexpectedChunk);
+        }
+        self.compressed.extend_from_slice(data);
+        self.next_index = self.next_index.saturating_add(1);
+        Ok(())
+    }
+
+    pub fn finish(self, expected_sha256: &str) -> Result<Vec<u8>, DesktopFrameBuildError> {
+        if self.next_index != self.metadata.chunk_count
+            || self.compressed.len() != self.metadata.compressed_bytes
+            || expected_sha256.len() != 64
+            || !expected_sha256.bytes().all(|byte| byte.is_ascii_hexdigit())
+        {
+            return Err(DesktopFrameBuildError::UnexpectedChunk);
+        }
+        let mut decoded = Vec::with_capacity(self.metadata.uncompressed_bytes);
+        let limit = u64::try_from(self.metadata.uncompressed_bytes)
+            .unwrap_or(u64::MAX)
+            .saturating_add(1);
+        ZlibDecoder::new(self.compressed.as_slice())
+            .take(limit)
+            .read_to_end(&mut decoded)
+            .map_err(|_| DesktopFrameBuildError::DecompressionFailed)?;
+        if decoded.len() != self.metadata.uncompressed_bytes {
+            return Err(DesktopFrameBuildError::DecompressionFailed);
+        }
+        if !hex_sha256(&decoded).eq_ignore_ascii_case(expected_sha256) {
+            return Err(DesktopFrameBuildError::HashMismatch);
+        }
+        Ok(decoded)
+    }
+}
+
+pub fn validate_desktop_input(
+    event: &DesktopInputEvent,
+    width: u16,
+    height: u16,
+) -> Result<(), DesktopFrameBuildError> {
+    if width == 0 || height == 0 {
+        return Err(DesktopFrameBuildError::InvalidDimensions);
+    }
+    if let DesktopInputEvent::PointerMove { x, y } = event
+        && (*x >= width || *y >= height)
+    {
+        return Err(DesktopFrameBuildError::InvalidDimensions);
+    }
+    if let DesktopInputEvent::PointerDelta { delta_x, delta_y } = event
+        && ((*delta_x == 0 && *delta_y == 0)
+            || delta_x.unsigned_abs() > MAX_RELATIVE_POINTER_DELTA
+            || delta_y.unsigned_abs() > MAX_RELATIVE_POINTER_DELTA)
+    {
+        return Err(DesktopFrameBuildError::InvalidDimensions);
+    }
+    Ok(())
+}
+
+fn validate_metadata(metadata: &DesktopFrameMetadata) -> Result<(), DesktopFrameBuildError> {
+    let expected = checked_frame_len(metadata.width, metadata.height)?;
+    let chunks = usize::from(metadata.chunk_count);
+    if metadata.encoding != DesktopFrameEncoding::ZlibBgra
+        || metadata.uncompressed_bytes != expected
+        || !(MIN_COMPRESSION_LEVEL..=MAX_COMPRESSION_LEVEL).contains(&metadata.compression_level)
+        || metadata.compressed_bytes == 0
+        || metadata.compressed_bytes > DESKTOP_MAX_COMPRESSED_BYTES
+        || chunks == 0
+        || chunks > MAX_DESKTOP_CHUNKS
+        || chunks
+            != metadata
+                .compressed_bytes
+                .div_ceil(DESKTOP_FRAME_CHUNK_BYTES)
+    {
+        return Err(DesktopFrameBuildError::InvalidMetadata);
+    }
+    Ok(())
+}
+
+fn checked_frame_len(width: u16, height: u16) -> Result<usize, DesktopFrameBuildError> {
+    if width == 0 || height == 0 || width > MAX_DESKTOP_DIMENSION || height > MAX_DESKTOP_DIMENSION
+    {
+        return Err(DesktopFrameBuildError::InvalidDimensions);
+    }
+    let pixels = usize::from(width)
+        .checked_mul(usize::from(height))
+        .ok_or(DesktopFrameBuildError::FrameTooLarge)?;
+    if pixels > DESKTOP_MAX_PIXELS {
+        return Err(DesktopFrameBuildError::FrameTooLarge);
+    }
+    pixels
+        .checked_mul(4)
+        .filter(|bytes| *bytes <= DESKTOP_MAX_FRAME_BYTES)
+        .ok_or(DesktopFrameBuildError::FrameTooLarge)
+}
+
+fn hex_sha256(bytes: &[u8]) -> String {
+    Sha256::digest(bytes)
+        .iter()
+        .map(|byte| format!("{byte:02x}"))
+        .collect()
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn frame_pacer_reacts_to_presentation_backpressure_with_bounded_recovery() {
+        assert!(DesktopFramePacer::new(0).is_none());
+        assert!(DesktopFramePacer::new(31).is_none());
+        let mut pacer = DesktopFramePacer::new(30).unwrap();
+        assert_eq!(pacer.current_fps(), 30);
+        assert!(!pacer.observe_presentation_ack(Duration::from_millis(100)));
+        assert!(pacer.observe_presentation_ack(Duration::from_millis(100)));
+        assert_eq!(pacer.current_fps(), 22);
+
+        for _ in 0..FAST_ACK_STREAK - 1 {
+            assert!(!pacer.observe_presentation_ack(Duration::from_millis(1)));
+        }
+        assert!(pacer.observe_presentation_ack(Duration::from_millis(1)));
+        assert_eq!(pacer.current_fps(), 23);
+        assert!(pacer.current_fps() <= 30);
+    }
+
+    #[test]
+    fn frame_pacer_requires_consecutive_samples_and_never_drops_below_one() {
+        let mut pacer = DesktopFramePacer::new(2).unwrap();
+        assert!(!pacer.observe_presentation_ack(Duration::from_secs(1)));
+        assert!(!pacer.observe_presentation_ack(Duration::from_millis(1)));
+        assert!(!pacer.observe_presentation_ack(Duration::from_secs(1)));
+        assert!(pacer.observe_presentation_ack(Duration::from_secs(1)));
+        assert_eq!(pacer.current_fps(), 1);
+        for _ in 0..10 {
+            assert!(!pacer.observe_presentation_ack(Duration::from_secs(2)));
+        }
+        assert_eq!(pacer.current_fps(), 1);
+    }
+
+    #[test]
+    fn compression_controller_balances_network_pressure_and_encode_budget() {
+        let mut controller = DesktopCompressionController::default();
+        let interval = Duration::from_millis(100);
+        assert_eq!(controller.current_level(), 1);
+        assert!(!controller.observe_encode(Duration::from_millis(10), interval));
+        assert!(!controller.observe_presentation_ack(Duration::from_millis(300), interval));
+        assert!(controller.observe_presentation_ack(Duration::from_millis(300), interval));
+        assert_eq!(controller.current_level(), 2);
+
+        assert!(!controller.observe_encode(Duration::from_millis(60), interval));
+        assert!(controller.observe_encode(Duration::from_millis(60), interval));
+        assert_eq!(controller.current_level(), 1);
+        assert!(!controller.observe_presentation_ack(Duration::from_millis(300), interval));
+        assert!(!controller.observe_presentation_ack(Duration::from_millis(300), interval));
+        assert_eq!(controller.current_level(), 1);
+    }
+
+    #[test]
+    fn compression_controller_recovers_to_low_latency_after_stable_acks() {
+        let mut controller = DesktopCompressionController::default();
+        let interval = Duration::from_millis(100);
+        assert!(!controller.observe_encode(Duration::from_millis(10), interval));
+        assert!(!controller.observe_presentation_ack(Duration::from_millis(300), interval));
+        assert!(controller.observe_presentation_ack(Duration::from_millis(300), interval));
+        for _ in 0..COMPRESSION_HEALTHY_ACK_STREAK - 1 {
+            assert!(!controller.observe_presentation_ack(Duration::from_millis(10), interval));
+        }
+        assert!(controller.observe_presentation_ack(Duration::from_millis(10), interval));
+        assert_eq!(controller.current_level(), 1);
+    }
+
+    #[test]
+    fn frame_round_trip_is_bounded_and_hash_verified() {
+        let pixels = [0_u8, 1, 2, 255].repeat(320 * 200);
+        let encoded = encode_desktop_frame(7, 320, 200, 10, 20, &pixels).unwrap();
+        let mut assembler = DesktopFrameAssembler::new(encoded.metadata.clone()).unwrap();
+        for (index, chunk) in encoded.chunks.iter().enumerate() {
+            assembler
+                .push(u16::try_from(index).unwrap(), chunk)
+                .unwrap();
+        }
+        assert_eq!(assembler.finish(&encoded.sha256).unwrap(), pixels);
+        assert_eq!(encoded.metadata.compression_level, 1);
+        let denser = encode_desktop_frame_with_level(8, 320, 200, 10, 20, 6, &pixels).unwrap();
+        assert_eq!(denser.metadata.compression_level, 6);
+        let mut denser_assembler = DesktopFrameAssembler::new(denser.metadata).unwrap();
+        for (index, chunk) in denser.chunks.iter().enumerate() {
+            denser_assembler
+                .push(u16::try_from(index).unwrap(), chunk)
+                .unwrap();
+        }
+        assert_eq!(denser_assembler.finish(&denser.sha256).unwrap(), pixels);
+        assert_eq!(
+            encode_desktop_frame_with_level(8, 320, 200, 10, 20, 0, &pixels).unwrap_err(),
+            DesktopFrameBuildError::InvalidCompressionLevel
+        );
+    }
+
+    #[test]
+    fn assembler_rejects_reordering_truncation_hashes_and_zip_bombs() {
+        let pixels: Vec<u8> = (0..(200 * 200 * 4))
+            .map(|index| {
+                let mut value = index as u32 + 0x9e37_79b9;
+                value ^= value << 13;
+                value ^= value >> 17;
+                value ^= value << 5;
+                (value >> 24) as u8
+            })
+            .collect();
+        let encoded = encode_desktop_frame(9, 200, 200, 10, 20, &pixels).unwrap();
+        let mut reordered = DesktopFrameAssembler::new(encoded.metadata.clone()).unwrap();
+        assert_eq!(
+            reordered.push(1, &encoded.chunks[0]),
+            Err(DesktopFrameBuildError::UnexpectedChunk)
+        );
+        let mut truncated = DesktopFrameAssembler::new(encoded.metadata.clone()).unwrap();
+        let first_chunk = &encoded.chunks[0];
+        truncated
+            .push(0, &first_chunk[..first_chunk.len().saturating_sub(1)])
+            .unwrap();
+        assert!(truncated.finish(&encoded.sha256).is_err());
+
+        let mut complete = DesktopFrameAssembler::new(encoded.metadata).unwrap();
+        for (index, chunk) in encoded.chunks.iter().enumerate() {
+            complete.push(u16::try_from(index).unwrap(), chunk).unwrap();
+        }
+        assert_eq!(
+            complete.finish(&"00".repeat(32)),
+            Err(DesktopFrameBuildError::HashMismatch)
+        );
+    }
+
+    #[test]
+    fn pointer_input_must_remain_inside_negotiated_frame() {
+        assert!(
+            validate_desktop_input(
+                &DesktopInputEvent::PointerMove { x: 1919, y: 1079 },
+                1920,
+                1080
+            )
+            .is_ok()
+        );
+        assert!(
+            validate_desktop_input(
+                &DesktopInputEvent::PointerMove { x: 1920, y: 0 },
+                1920,
+                1080
+            )
+            .is_err()
+        );
+    }
+
+    #[test]
+    fn relative_pointer_input_is_nonzero_and_bounded() {
+        assert!(
+            validate_desktop_input(
+                &DesktopInputEvent::PointerDelta {
+                    delta_x: -4_096,
+                    delta_y: 4_096,
+                },
+                1920,
+                1080,
+            )
+            .is_ok()
+        );
+        assert!(
+            validate_desktop_input(
+                &DesktopInputEvent::PointerDelta {
+                    delta_x: 0,
+                    delta_y: 0,
+                },
+                1920,
+                1080,
+            )
+            .is_err()
+        );
+        assert!(
+            validate_desktop_input(
+                &DesktopInputEvent::PointerDelta {
+                    delta_x: 4_097,
+                    delta_y: 0,
+                },
+                1920,
+                1080,
+            )
+            .is_err()
+        );
+    }
+}
diff --git a/agent/agent-runtime/src/edge_negotiation.rs b/agent/agent-runtime/src/edge_negotiation.rs
new file mode 100644
index 0000000..c5ddde4
--- /dev/null
+++ b/agent/agent-runtime/src/edge_negotiation.rs
@@ -0,0 +1,530 @@
+use base64::{Engine as _, engine::general_purpose::STANDARD_NO_PAD};
+use ed25519_dalek::{Signer as _, SigningKey};
+use rand::RngCore as _;
+use remotedesk_protocol::{
+    EdgeNegotiationEndpoint, EdgeNegotiationEnvelopeV1, EdgeNegotiationKind,
+    EdgeNegotiationOperation, SIGNAL_NONCE_LENGTH,
+};
+use reqwest::{Client, StatusCode, redirect::Policy};
+use serde::{Deserialize, Serialize};
+use std::error::Error as _;
+use std::fmt;
+use std::time::Duration;
+use url::{Host, Url};
+
+const MAX_RESPONSE_BYTES: usize = 256 * 1024;
+
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct EdgeNegotiationSession {
+    pub request_id: String,
+    pub session_id: String,
+    pub expires_unix: u64,
+}
+
+pub struct EdgeNegotiationClient {
+    http: Client,
+    send_url: Url,
+    poll_url: Url,
+    endpoint: EdgeNegotiationEndpoint,
+    signing: SigningKey,
+    session: EdgeNegotiationSession,
+    send_sequence: u32,
+    peer_sequence: u32,
+    generation: u32,
+}
+
+impl fmt::Debug for EdgeNegotiationClient {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        formatter
+            .debug_struct("EdgeNegotiationClient")
+            .field("http", &"[configured]")
+            .field("api_origin", &self.send_url.origin().ascii_serialization())
+            .field("send_url", &self.send_url.path())
+            .field("poll_url", &self.poll_url.path())
+            .field("endpoint", &self.endpoint)
+            .field("signing", &"[REDACTED]")
+            .field("request_id", &self.session.request_id)
+            .field("session_id", &self.session.session_id)
+            .field("send_sequence", &self.send_sequence)
+            .field("peer_sequence", &self.peer_sequence)
+            .field("generation", &self.generation)
+            .finish()
+    }
+}
+
+impl EdgeNegotiationClient {
+    /// Creates one stateful endpoint client for an accepted Edge session.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error for an unsafe URL, malformed session binding or HTTP client failure.
+    pub fn new(
+        api_url: &str,
+        endpoint: EdgeNegotiationEndpoint,
+        signing: SigningKey,
+        session: EdgeNegotiationSession,
+    ) -> Result<Self, EdgeNegotiationError> {
+        let api_url = Url::parse(api_url).map_err(|_| EdgeNegotiationError::InvalidUrl)?;
+        validate_url(&api_url)?;
+        validate_session(&session)?;
+        let http = Client::builder()
+            .connect_timeout(Duration::from_secs(5))
+            .timeout(Duration::from_secs(10))
+            .redirect(Policy::none())
+            .user_agent(concat!(
+                "RemoteDesk-Edge-Negotiation/",
+                env!("CARGO_PKG_VERSION")
+            ))
+            .build()
+            .map_err(|_| EdgeNegotiationError::ClientInitialization)?;
+        let send_url = api_url
+            .join("v1/negotiation/send")
+            .map_err(|_| EdgeNegotiationError::InvalidUrl)?;
+        let poll_url = api_url
+            .join("v1/negotiation/poll")
+            .map_err(|_| EdgeNegotiationError::InvalidUrl)?;
+        Ok(Self {
+            send_url,
+            poll_url,
+            http,
+            endpoint,
+            signing,
+            session,
+            send_sequence: 0,
+            peer_sequence: 0,
+            generation: 1,
+        })
+    }
+
+    /// Sends one offer, answer, candidate, end marker or explicit ICE restart.
+    ///
+    /// # Errors
+    ///
+    /// Returns a categorized schema, transport, HTTP or response-binding error.
+    pub async fn send(
+        &mut self,
+        kind: EdgeNegotiationKind,
+        payload: String,
+    ) -> Result<EdgeNegotiationMessage, EdgeNegotiationError> {
+        let sequence = self
+            .send_sequence
+            .checked_add(1)
+            .ok_or(EdgeNegotiationError::SequenceExhausted)?;
+        let generation = if kind == EdgeNegotiationKind::Restart {
+            self.generation
+                .checked_add(1)
+                .ok_or(EdgeNegotiationError::GenerationExhausted)?
+        } else {
+            self.generation
+        };
+        let envelope = self.signed_envelope(
+            EdgeNegotiationOperation::Send,
+            sequence,
+            generation,
+            Some(kind),
+            payload,
+        )?;
+        let response = self
+            .http
+            .post(self.send_url.clone())
+            .json(&envelope)
+            .send()
+            .await
+            .map_err(|error| classify_transport(&error))?;
+        if response.status() != StatusCode::CREATED {
+            return Err(EdgeNegotiationError::HttpStatus(response.status().as_u16()));
+        }
+        let bytes = bounded_response(response).await?;
+        let message: EdgeNegotiationMessage =
+            serde_json::from_slice(&bytes).map_err(|_| EdgeNegotiationError::InvalidResponse)?;
+        validate_message(
+            &message,
+            self.endpoint,
+            sequence,
+            generation,
+            kind,
+            &envelope.payload,
+        )?;
+        self.send_sequence = sequence;
+        self.generation = generation;
+        Ok(message)
+    }
+
+    /// Polls bounded messages sent by the peer after the last accepted cursor.
+    ///
+    /// # Errors
+    ///
+    /// Returns a categorized transport, HTTP, schema, ordering or generation error.
+    pub async fn poll(&mut self) -> Result<EdgeNegotiationPoll, EdgeNegotiationError> {
+        let envelope = self.signed_envelope(
+            EdgeNegotiationOperation::Poll,
+            self.peer_sequence,
+            0,
+            None,
+            String::new(),
+        )?;
+        let response = self
+            .http
+            .post(self.poll_url.clone())
+            .json(&envelope)
+            .send()
+            .await
+            .map_err(|error| classify_transport(&error))?;
+        if response.status() != StatusCode::OK {
+            return Err(EdgeNegotiationError::HttpStatus(response.status().as_u16()));
+        }
+        let bytes = bounded_response(response).await?;
+        let poll: EdgeNegotiationPoll =
+            serde_json::from_slice(&bytes).map_err(|_| EdgeNegotiationError::InvalidResponse)?;
+        if poll.request_id != self.session.request_id || poll.session_id != self.session.session_id
+        {
+            return Err(EdgeNegotiationError::InvalidResponse);
+        }
+        let expected_peer = match self.endpoint {
+            EdgeNegotiationEndpoint::Client => EdgeNegotiationEndpoint::Agent,
+            EdgeNegotiationEndpoint::Agent => EdgeNegotiationEndpoint::Client,
+        };
+        let mut sequence = self.peer_sequence;
+        let mut generation = self.generation;
+        for message in &poll.messages {
+            sequence = sequence
+                .checked_add(1)
+                .ok_or(EdgeNegotiationError::SequenceExhausted)?;
+            let endpoint = EdgeNegotiationEndpoint::parse(&message.endpoint)
+                .map_err(|_| EdgeNegotiationError::InvalidResponse)?;
+            let kind = EdgeNegotiationKind::parse(&message.kind)
+                .map_err(|_| EdgeNegotiationError::InvalidResponse)?;
+            if endpoint != expected_peer || message.sequence != sequence {
+                return Err(EdgeNegotiationError::InvalidResponse);
+            }
+            if kind == EdgeNegotiationKind::Restart {
+                generation = generation
+                    .checked_add(1)
+                    .ok_or(EdgeNegotiationError::GenerationExhausted)?;
+            }
+            if message.generation != generation {
+                return Err(EdgeNegotiationError::InvalidResponse);
+            }
+        }
+        if poll.generation != generation {
+            return Err(EdgeNegotiationError::InvalidResponse);
+        }
+        self.peer_sequence = sequence;
+        self.generation = generation;
+        Ok(poll)
+    }
+
+    #[must_use]
+    pub const fn send_sequence(&self) -> u32 {
+        self.send_sequence
+    }
+
+    #[must_use]
+    pub const fn peer_sequence(&self) -> u32 {
+        self.peer_sequence
+    }
+
+    #[must_use]
+    pub const fn generation(&self) -> u32 {
+        self.generation
+    }
+
+    fn signed_envelope(
+        &self,
+        operation: EdgeNegotiationOperation,
+        sequence: u32,
+        generation: u32,
+        kind: Option<EdgeNegotiationKind>,
+        payload: String,
+    ) -> Result<SignedNegotiationEnvelope, EdgeNegotiationError> {
+        let now = crate::unix_timestamp();
+        if self.session.expires_unix <= now {
+            return Err(EdgeNegotiationError::SessionExpired);
+        }
+        let mut nonce = [0_u8; SIGNAL_NONCE_LENGTH];
+        rand::rng().fill_bytes(&mut nonce);
+        let model = EdgeNegotiationEnvelopeV1 {
+            request_id: self.session.request_id.clone(),
+            session_id: self.session.session_id.clone(),
+            endpoint: self.endpoint,
+            operation,
+            sequence,
+            generation,
+            kind,
+            payload,
+            nonce,
+            issued_unix: now,
+            expires_unix: now.saturating_add(30).min(self.session.expires_unix),
+        };
+        let signing_input = model
+            .stable_signing_input()
+            .map_err(|_| EdgeNegotiationError::InvalidMessage)?;
+        Ok(SignedNegotiationEnvelope {
+            request_id: model.request_id,
+            session_id: model.session_id,
+            endpoint: model.endpoint.as_str().into(),
+            operation: model.operation.as_str().into(),
+            sequence: model.sequence,
+            generation: model.generation,
+            kind: model.kind.map(|value| value.as_str().into()),
+            payload: model.payload,
+            nonce: STANDARD_NO_PAD.encode(model.nonce),
+            issued_unix: model.issued_unix,
+            expires_unix: model.expires_unix,
+            signature: STANDARD_NO_PAD.encode(self.signing.sign(&signing_input).to_bytes()),
+        })
+    }
+}
+
+#[derive(Clone, Debug, Deserialize, Eq, PartialEq)]
+pub struct EdgeNegotiationMessage {
+    pub endpoint: String,
+    pub sequence: u32,
+    pub generation: u32,
+    pub kind: String,
+    pub payload: String,
+    pub accepted_unix: u64,
+}
+
+#[derive(Clone, Debug, Deserialize, Eq, PartialEq)]
+pub struct EdgeNegotiationPoll {
+    pub request_id: String,
+    pub session_id: String,
+    pub generation: u32,
+    pub messages: Vec<EdgeNegotiationMessage>,
+    pub has_more: bool,
+}
+
+#[derive(Debug, Serialize)]
+struct SignedNegotiationEnvelope {
+    request_id: String,
+    session_id: String,
+    endpoint: String,
+    operation: String,
+    sequence: u32,
+    generation: u32,
+    kind: Option<String>,
+    payload: String,
+    nonce: String,
+    issued_unix: u64,
+    expires_unix: u64,
+    signature: String,
+}
+
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub enum EdgeNegotiationError {
+    InvalidUrl,
+    InsecureUrl,
+    InvalidSession,
+    SessionExpired,
+    InvalidMessage,
+    ClientInitialization,
+    TransportTimeout,
+    TransportConnect,
+    TransportTls,
+    TransportOther,
+    HttpStatus(u16),
+    InvalidResponse,
+    SequenceExhausted,
+    GenerationExhausted,
+}
+
+impl fmt::Display for EdgeNegotiationError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        let category = match self {
+            Self::InvalidUrl => "invalid_url",
+            Self::InsecureUrl => "insecure_url",
+            Self::InvalidSession => "invalid_session",
+            Self::SessionExpired => "session_expired",
+            Self::InvalidMessage => "invalid_message",
+            Self::ClientInitialization => "client_initialization",
+            Self::TransportTimeout => "transport_timeout",
+            Self::TransportConnect => "transport_connect",
+            Self::TransportTls => "transport_tls",
+            Self::TransportOther => "transport_other",
+            Self::HttpStatus(_) => "http_status",
+            Self::InvalidResponse => "invalid_response",
+            Self::SequenceExhausted => "sequence_exhausted",
+            Self::GenerationExhausted => "generation_exhausted",
+        };
+        formatter.write_str(category)
+    }
+}
+
+impl std::error::Error for EdgeNegotiationError {}
+
+fn validate_url(url: &Url) -> Result<(), EdgeNegotiationError> {
+    if url.username() != ""
+        || url.password().is_some()
+        || url.query().is_some()
+        || url.fragment().is_some()
+        || url.path() != "/"
+        || url.port() == Some(0)
+    {
+        return Err(EdgeNegotiationError::InvalidUrl);
+    }
+    let loopback_http = url.scheme() == "http" && is_loopback_host(url.host().as_ref());
+    if url.scheme() != "https" && !loopback_http {
+        return Err(EdgeNegotiationError::InsecureUrl);
+    }
+    Ok(())
+}
+
+fn is_loopback_host(host: Option<&Host<&str>>) -> bool {
+    matches!(host, Some(Host::Domain("localhost")))
+        || matches!(host, Some(Host::Ipv4(address)) if address.is_loopback())
+        || matches!(host, Some(Host::Ipv6(address)) if address.is_loopback())
+}
+
+fn validate_session(session: &EdgeNegotiationSession) -> Result<(), EdgeNegotiationError> {
+    let valid = |value: &str| {
+        !value.is_empty()
+            && value.len() <= 128
+            && value
+                .bytes()
+                .all(|byte| byte.is_ascii_alphanumeric() || matches!(byte, b'-' | b'_' | b'.'))
+    };
+    if !valid(&session.request_id) || !valid(&session.session_id) {
+        return Err(EdgeNegotiationError::InvalidSession);
+    }
+    Ok(())
+}
+
+fn validate_message(
+    message: &EdgeNegotiationMessage,
+    endpoint: EdgeNegotiationEndpoint,
+    sequence: u32,
+    generation: u32,
+    kind: EdgeNegotiationKind,
+    payload: &str,
+) -> Result<(), EdgeNegotiationError> {
+    if EdgeNegotiationEndpoint::parse(&message.endpoint).ok() != Some(endpoint)
+        || message.sequence != sequence
+        || message.generation != generation
+        || EdgeNegotiationKind::parse(&message.kind).ok() != Some(kind)
+        || message.payload != payload
+        || message.accepted_unix == 0
+    {
+        return Err(EdgeNegotiationError::InvalidResponse);
+    }
+    Ok(())
+}
+
+async fn bounded_response(
+    mut response: reqwest::Response,
+) -> Result<Vec<u8>, EdgeNegotiationError> {
+    if response
+        .content_length()
+        .is_some_and(|length| length > MAX_RESPONSE_BYTES as u64)
+    {
+        return Err(EdgeNegotiationError::InvalidResponse);
+    }
+    let mut bytes = Vec::new();
+    while let Some(chunk) = response
+        .chunk()
+        .await
+        .map_err(|error| classify_transport(&error))?
+    {
+        if bytes.len().saturating_add(chunk.len()) > MAX_RESPONSE_BYTES {
+            return Err(EdgeNegotiationError::InvalidResponse);
+        }
+        bytes.extend_from_slice(&chunk);
+    }
+    Ok(bytes)
+}
+
+fn classify_transport(error: &reqwest::Error) -> EdgeNegotiationError {
+    if error.is_timeout() {
+        EdgeNegotiationError::TransportTimeout
+    } else if error.is_connect() {
+        EdgeNegotiationError::TransportConnect
+    } else if error
+        .source()
+        .is_some_and(|source| source.to_string().to_ascii_lowercase().contains("tls"))
+    {
+        EdgeNegotiationError::TransportTls
+    } else {
+        EdgeNegotiationError::TransportOther
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn session() -> EdgeNegotiationSession {
+        EdgeNegotiationSession {
+            request_id: "request-1".into(),
+            session_id: "session-1".into(),
+            expires_unix: crate::unix_timestamp() + 60,
+        }
+    }
+
+    #[test]
+    fn configuration_rejects_insecure_origins_and_redacts_key() {
+        let key = SigningKey::from_bytes(&[7; 32]);
+        assert!(
+            EdgeNegotiationClient::new(
+                "https://edge.example.test/",
+                EdgeNegotiationEndpoint::Client,
+                key.clone(),
+                session(),
+            )
+            .is_ok()
+        );
+        assert_eq!(
+            EdgeNegotiationClient::new(
+                "http://edge.example.test/",
+                EdgeNegotiationEndpoint::Client,
+                key.clone(),
+                session(),
+            )
+            .unwrap_err(),
+            EdgeNegotiationError::InsecureUrl
+        );
+        let client = EdgeNegotiationClient::new(
+            "http://127.0.0.1:7080/",
+            EdgeNegotiationEndpoint::Client,
+            key,
+            session(),
+        )
+        .unwrap();
+        assert!(!format!("{client:?}").contains("07070707"));
+    }
+
+    #[test]
+    fn signed_send_and_poll_envelopes_bind_state_without_advancing_it() {
+        let key = SigningKey::from_bytes(&[9; 32]);
+        let client = EdgeNegotiationClient::new(
+            "http://127.0.0.1:7080/",
+            EdgeNegotiationEndpoint::Client,
+            key,
+            session(),
+        )
+        .unwrap();
+        let send = client
+            .signed_envelope(
+                EdgeNegotiationOperation::Send,
+                1,
+                1,
+                Some(EdgeNegotiationKind::Offer),
+                "v=0\r\n".into(),
+            )
+            .unwrap();
+        assert_eq!(send.endpoint, "client");
+        assert_eq!(send.operation, "send");
+        assert_eq!(send.sequence, 1);
+        assert_eq!(send.generation, 1);
+        assert_eq!(send.kind.as_deref(), Some("offer"));
+        assert_eq!(STANDARD_NO_PAD.decode(send.signature).unwrap().len(), 64);
+        let poll = client
+            .signed_envelope(EdgeNegotiationOperation::Poll, 0, 0, None, String::new())
+            .unwrap();
+        assert_eq!(poll.operation, "poll");
+        assert_eq!(poll.sequence, 0);
+        assert!(poll.kind.is_none());
+        assert_eq!(client.send_sequence(), 0);
+        assert_eq!(client.peer_sequence(), 0);
+        assert_eq!(client.generation(), 1);
+    }
+}
diff --git a/agent/agent-runtime/src/edge_presence.rs b/agent/agent-runtime/src/edge_presence.rs
new file mode 100644
index 0000000..fb3957f
--- /dev/null
+++ b/agent/agent-runtime/src/edge_presence.rs
@@ -0,0 +1,1609 @@
+use base64::{Engine as _, engine::general_purpose};
+use ed25519_dalek::{Signature, Signer as _, SigningKey, Verifier as _, VerifyingKey};
+use rand::RngCore as _;
+use remotedesk_protocol::{
+    AgentSignalAction, AgentSignalProofV1, EdgeNegotiationEndpoint, EdgeSessionIntentV1,
+    EdgeSessionType, SIGNAL_NONCE_LENGTH,
+};
+use reqwest::{Client, StatusCode, redirect::Policy};
+use serde::{Deserialize, Serialize};
+use sha2::{Digest as _, Sha256};
+use std::error::Error as _;
+use std::fmt;
+use std::net::SocketAddr;
+use std::sync::Arc;
+use std::sync::atomic::{AtomicBool, Ordering};
+use std::time::Duration;
+use tokio::sync::{mpsc, watch};
+use tokio::time::{Instant, sleep, timeout};
+use tokio::{io::copy_bidirectional, net::TcpStream};
+use url::{Host, Url};
+use zeroize::Zeroizing;
+
+use crate::{
+    AgentState, DeviceIdentity, EdgeNegotiationClient, EdgeNegotiationSession, EdgePresenceStatus,
+    EdgeRelayAccess, EdgeWebRtcRole, EncodedMediaSender, WebRtcConnectionState, WebRtcIceServer,
+    WebRtcSessionConfig, connect_edge_relay, establish_edge_webrtc, unix_timestamp,
+};
+
+const PRESENCE_TTL_SECONDS: u64 = 60;
+const HEARTBEAT_SECONDS: u64 = 30;
+const MAX_RESPONSE_BYTES: usize = 16 * 1024;
+const DEVICE_ID_DOMAIN: &[u8] = b"remotedesk-edge-device-id-v1\0";
+
+#[derive(Clone, Debug)]
+pub struct DesktopMediaSession {
+    pub session_id: String,
+    pub target_user: String,
+    pub client_fingerprint: String,
+    pub expires_unix: u64,
+    pub sender: EncodedMediaSender,
+}
+
+#[derive(Clone, Debug)]
+pub enum DesktopMediaEvent {
+    Available(DesktopMediaSession),
+    Closed { session_id: String },
+}
+
+pub struct EdgePresenceConfig {
+    api_url: Url,
+    token: Zeroizing<String>,
+    region: String,
+    gateway_id: String,
+}
+
+impl EdgePresenceConfig {
+    /// Builds strict outbound Presence configuration.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error for insecure public URLs, embedded URL state, weak tokens,
+    /// or invalid region and gateway identifiers.
+    pub fn new(
+        api_url: &str,
+        token: String,
+        region: String,
+        gateway_id: String,
+    ) -> Result<Self, EdgePresenceError> {
+        let api_url = Url::parse(api_url).map_err(|_| EdgePresenceError::InvalidUrl)?;
+        validate_url(&api_url)?;
+        if token.len() < 32 {
+            return Err(EdgePresenceError::WeakToken);
+        }
+        validate_identifier(&region, 64)?;
+        validate_identifier(&gateway_id, 128)?;
+        Ok(Self {
+            api_url,
+            token: Zeroizing::new(token),
+            region,
+            gateway_id,
+        })
+    }
+
+    /// Reads the optional all-or-nothing Edge Presence environment block.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error when only part of the environment block is configured or
+    /// a configured value is invalid.
+    pub fn from_environment() -> Result<Option<Self>, EdgePresenceError> {
+        let url = std::env::var("REMOTEDESK_EDGE_API_URL").ok();
+        let token = std::env::var("REMOTEDESK_EDGE_PRESENCE_TOKEN").ok();
+        let region = std::env::var("REMOTEDESK_EDGE_REGION").ok();
+        let gateway = std::env::var("REMOTEDESK_EDGE_GATEWAY_ID").ok();
+        if url.is_none() && token.is_none() && region.is_none() && gateway.is_none() {
+            return Ok(None);
+        }
+        let url = url.ok_or(EdgePresenceError::IncompleteConfiguration)?;
+        Self::new(
+            &url,
+            token.ok_or(EdgePresenceError::IncompleteConfiguration)?,
+            region.ok_or(EdgePresenceError::IncompleteConfiguration)?,
+            gateway.ok_or(EdgePresenceError::IncompleteConfiguration)?,
+        )
+        .map(Some)
+    }
+
+    #[must_use]
+    pub fn region(&self) -> &str {
+        &self.region
+    }
+
+    #[must_use]
+    pub fn gateway_id(&self) -> &str {
+        &self.gateway_id
+    }
+
+    fn presence_url(&self) -> Url {
+        self.api_url
+            .join("v1/presence")
+            .expect("validated base URL joins a static relative path")
+    }
+
+    fn signal_poll_url(&self) -> Url {
+        self.api_url
+            .join("v1/signals/poll")
+            .expect("validated base URL joins a static relative path")
+    }
+
+    fn signal_ack_url(&self) -> Url {
+        self.api_url
+            .join("v1/signals/ack")
+            .expect("validated base URL joins a static relative path")
+    }
+}
+
+impl fmt::Debug for EdgePresenceConfig {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        formatter
+            .debug_struct("EdgePresenceConfig")
+            .field("api_origin", &self.api_url.origin().ascii_serialization())
+            .field("token", &"[REDACTED]")
+            .field("region", &self.region)
+            .field("gateway_id", &self.gateway_id)
+            .finish()
+    }
+}
+
+pub struct EdgePresenceClient {
+    config: EdgePresenceConfig,
+    http: Client,
+}
+
+impl EdgePresenceClient {
+    /// Creates an HTTP client with bounded timeouts and redirects disabled.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error when the system TLS client cannot be built.
+    pub fn new(config: EdgePresenceConfig) -> Result<Self, EdgePresenceError> {
+        let http = Client::builder()
+            .connect_timeout(Duration::from_secs(5))
+            .timeout(Duration::from_secs(10))
+            .redirect(Policy::none())
+            .user_agent(concat!("RemoteDesk-Agent/", env!("CARGO_PKG_VERSION")))
+            .build()
+            .map_err(|_| EdgePresenceError::ClientInitialization)?;
+        Ok(Self { config, http })
+    }
+
+    /// Registers one short-lived connection-bound route and verifies the reply.
+    ///
+    /// # Errors
+    ///
+    /// Returns a categorized error for transport, HTTP, or response validation failures.
+    pub async fn register(
+        &self,
+        device_id: &str,
+        connection_id: &str,
+    ) -> Result<u64, EdgePresenceError> {
+        validate_identifier(device_id, 128)?;
+        validate_identifier(connection_id, 128)?;
+        let expires_unix = unix_timestamp().saturating_add(PRESENCE_TTL_SECONDS);
+        let request = PresenceRequest {
+            device_id,
+            region: &self.config.region,
+            gateway_id: &self.config.gateway_id,
+            connection_id,
+            expires_unix,
+        };
+        let response = self
+            .http
+            .post(self.config.presence_url())
+            .bearer_auth(self.config.token.as_str())
+            .json(&request)
+            .send()
+            .await
+            .map_err(|error| classify_transport(&error))?;
+        if response.status() != StatusCode::OK {
+            return Err(EdgePresenceError::HttpStatus(response.status().as_u16()));
+        }
+        let bytes = bounded_response(response).await?;
+        let acknowledged: PresenceResponse =
+            serde_json::from_slice(&bytes).map_err(|_| EdgePresenceError::InvalidResponse)?;
+        if acknowledged.device_id != device_id
+            || acknowledged.region != self.config.region
+            || acknowledged.gateway_id != self.config.gateway_id
+            || acknowledged.connection_id != connection_id
+            || acknowledged.expires_unix != expires_unix
+        {
+            return Err(EdgePresenceError::InvalidResponse);
+        }
+        Ok(expires_unix)
+    }
+
+    /// Removes this process incarnation without deleting a newer connection.
+    ///
+    /// # Errors
+    ///
+    /// Returns a categorized transport or HTTP error.
+    pub async fn unregister(
+        &self,
+        device_id: &str,
+        connection_id: &str,
+    ) -> Result<(), EdgePresenceError> {
+        let response = self
+            .http
+            .delete(self.config.presence_url())
+            .bearer_auth(self.config.token.as_str())
+            .json(&UnregisterRequest {
+                device_id,
+                connection_id,
+            })
+            .send()
+            .await
+            .map_err(|error| classify_transport(&error))?;
+        if matches!(response.status(), StatusCode::OK | StatusCode::CONFLICT) {
+            Ok(())
+        } else {
+            Err(EdgePresenceError::HttpStatus(response.status().as_u16()))
+        }
+    }
+
+    async fn poll_signal(
+        &self,
+        device_id: &str,
+        connection_id: &str,
+        signing: &SigningKey,
+        device_public_key: &str,
+    ) -> Result<Option<SignedSessionIntent>, EdgePresenceError> {
+        let proof = signed_agent_proof(
+            device_id,
+            device_public_key,
+            connection_id,
+            AgentSignalAction::Poll,
+            None,
+            None,
+            signing,
+        )?;
+        let response = self
+            .http
+            .post(self.config.signal_poll_url())
+            .bearer_auth(self.config.token.as_str())
+            .json(&AgentPollRequest {
+                device_id,
+                device_public_key,
+                connection_id,
+                nonce: &proof.nonce,
+                issued_unix: proof.issued_unix,
+                signature: &proof.signature,
+            })
+            .send()
+            .await
+            .map_err(|error| classify_transport(&error))?;
+        if response.status() == StatusCode::NO_CONTENT {
+            return Ok(None);
+        }
+        if response.status() != StatusCode::OK {
+            return Err(EdgePresenceError::HttpStatus(response.status().as_u16()));
+        }
+        let bytes = bounded_response(response).await?;
+        serde_json::from_slice(&bytes)
+            .map(Some)
+            .map_err(|_| EdgePresenceError::InvalidResponse)
+    }
+
+    async fn acknowledge_signal(
+        &self,
+        request_id: &str,
+        decision: SignalDecision,
+        device_id: &str,
+        connection_id: &str,
+        signing: &SigningKey,
+        device_public_key: &str,
+    ) -> Result<AuthorizedAgentSession, EdgePresenceError> {
+        let action = if decision.accepted {
+            AgentSignalAction::Accept
+        } else {
+            AgentSignalAction::Reject
+        };
+        for attempt in 0..3 {
+            let proof = signed_agent_proof(
+                device_id,
+                device_public_key,
+                connection_id,
+                action,
+                Some(request_id),
+                Some(decision.code),
+                signing,
+            )?;
+            let response = self
+                .http
+                .post(self.config.signal_ack_url())
+                .bearer_auth(self.config.token.as_str())
+                .json(&AgentAckRequest {
+                    device_id,
+                    device_public_key,
+                    connection_id,
+                    request_id,
+                    accepted: decision.accepted,
+                    result_code: decision.code,
+                    nonce: &proof.nonce,
+                    issued_unix: proof.issued_unix,
+                    signature: &proof.signature,
+                })
+                .send()
+                .await;
+            let response = match response {
+                Ok(response) => response,
+                Err(_) if attempt < 2 => {
+                    sleep(Duration::from_millis(100 * (attempt + 1))).await;
+                    continue;
+                }
+                Err(error) => return Err(classify_transport(&error)),
+            };
+            if response.status().is_server_error() && attempt < 2 {
+                sleep(Duration::from_millis(100 * (attempt + 1))).await;
+                continue;
+            }
+            if response.status() != StatusCode::OK {
+                return Err(EdgePresenceError::HttpStatus(response.status().as_u16()));
+            }
+            let bytes = bounded_response(response).await?;
+            let acknowledged: SignalAckResponse =
+                serde_json::from_slice(&bytes).map_err(|_| EdgePresenceError::InvalidResponse)?;
+            if acknowledged.request_id != request_id
+                || acknowledged.state != "completed"
+                || acknowledged.accepted != Some(decision.accepted)
+                || acknowledged.result_code.as_deref() != Some(decision.code)
+                || decision.accepted != acknowledged.relay.is_some()
+            {
+                return Err(EdgePresenceError::InvalidResponse);
+            }
+            let mut ice_servers = Vec::with_capacity(acknowledged.turn.len());
+            for credential in acknowledged.turn {
+                if credential.expires_unix != acknowledged._expires_unix {
+                    return Err(EdgePresenceError::InvalidResponse);
+                }
+                ice_servers.push(WebRtcIceServer {
+                    urls: credential.urls,
+                    username: credential.username,
+                    credential: credential.password,
+                });
+            }
+            return Ok(AuthorizedAgentSession {
+                relay: acknowledged.relay,
+                ice_servers,
+            });
+        }
+        Err(EdgePresenceError::TransportOther)
+    }
+
+    async fn process_next_signal(
+        &self,
+        device_id: &str,
+        connection_id: &str,
+        signing: &SigningKey,
+        device_public_key: &str,
+        state: &AgentState,
+        relay_target: Option<SocketAddr>,
+        desktop_media: Option<&mpsc::Sender<DesktopMediaEvent>>,
+    ) -> Result<Option<SignalDecision>, EdgePresenceError> {
+        let Some(request) = self
+            .poll_signal(device_id, connection_id, signing, device_public_key)
+            .await?
+        else {
+            return Ok(None);
+        };
+        let decision = authorize_signal(&request, device_id, state, unix_timestamp());
+        let authorized = self
+            .acknowledge_signal(
+                &request.request_id,
+                decision,
+                device_id,
+                connection_id,
+                signing,
+                device_public_key,
+            )
+            .await?;
+        if let (Some(access), Some(target)) = (authorized.relay, relay_target) {
+            tokio::spawn(async move {
+                if let Err(error) = proxy_relay_to_agent(access, target).await {
+                    eprintln!("Edge relay tunnel stopped: {error}");
+                }
+            });
+        }
+        if decision.accepted && request.session_type == EdgeSessionType::Desktop.as_str() {
+            let client_fingerprint = client_public_key_fingerprint(&request.client_public_key)?;
+            let negotiation = EdgeNegotiationClient::new(
+                self.config.api_url.as_str(),
+                EdgeNegotiationEndpoint::Agent,
+                signing.clone(),
+                EdgeNegotiationSession {
+                    request_id: request.request_id.clone(),
+                    session_id: request.session_id.clone(),
+                    expires_unix: request.expires_unix,
+                },
+            )
+            .map_err(|_| EdgePresenceError::InvalidResponse)?;
+            let config = WebRtcSessionConfig {
+                role: EdgeWebRtcRole::AgentAnswerer,
+                bind_address: "0.0.0.0:0"
+                    .parse()
+                    .map_err(|_| EdgePresenceError::InvalidResponse)?,
+                ice_servers: authorized.ice_servers,
+                connect_timeout: Duration::from_secs(30),
+            };
+            let expires_unix = request.expires_unix;
+            let session_id = request.session_id.clone();
+            let target_user = request.target_user.clone();
+            let desktop_media = desktop_media.cloned();
+            tokio::spawn(async move {
+                if let Ok(session) = establish_edge_webrtc(negotiation, config).await {
+                    if let (Some(events), Some(sender)) =
+                        (desktop_media.as_ref(), session.media_sender())
+                    {
+                        let _ = events
+                            .send(DesktopMediaEvent::Available(DesktopMediaSession {
+                                session_id: session_id.clone(),
+                                target_user,
+                                client_fingerprint,
+                                expires_unix,
+                                sender,
+                            }))
+                            .await;
+                    }
+                    let mut state = session.state();
+                    loop {
+                        let remaining = expires_unix.saturating_sub(unix_timestamp());
+                        if remaining == 0 {
+                            break;
+                        }
+                        tokio::select! {
+                            changed = state.changed() => {
+                                if changed.is_err()
+                                    || matches!(
+                                        *state.borrow_and_update(),
+                                        WebRtcConnectionState::Failed
+                                            | WebRtcConnectionState::Closed
+                                    )
+                                {
+                                    break;
+                                }
+                            }
+                            () = sleep(Duration::from_secs(remaining.min(30))) => {}
+                        }
+                    }
+                    let _ = session.close().await;
+                }
+                if let Some(events) = desktop_media {
+                    let _ = events.send(DesktopMediaEvent::Closed { session_id }).await;
+                }
+            });
+        }
+        Ok(Some(decision))
+    }
+
+    async fn run_signal_interval(
+        &self,
+        context: SignalInterval<'_>,
+        status: &mut EdgePresenceStatus,
+        shutdown: &mut watch::Receiver<bool>,
+    ) -> bool {
+        let heartbeat_deadline = Instant::now() + Duration::from_secs(HEARTBEAT_SECONDS);
+        let mut signal_backoff = RetryBackoff::default();
+        while Instant::now() < heartbeat_deadline {
+            let Some(identity) = context.identity else {
+                break;
+            };
+            let result = tokio::select! {
+                result = self.process_next_signal(
+                    context.device_id,
+                    context.connection_id,
+                    &identity.signing,
+                    &identity.identity.public_key,
+                    context.state,
+                    context.relay_target,
+                    context.desktop_media,
+                ) => Some(result),
+                changed = shutdown.changed() => {
+                    if changed.is_err() || *shutdown.borrow() {
+                        None
+                    } else {
+                        continue;
+                    }
+                }
+            };
+            let Some(result) = result else {
+                return true;
+            };
+            let signal_wait = update_signal_status(status, result, &mut signal_backoff);
+            persist_status(context.state, status);
+            let remaining = heartbeat_deadline.saturating_duration_since(Instant::now());
+            if remaining.is_zero() {
+                break;
+            }
+            tokio::select! {
+                () = sleep(signal_wait.min(remaining)) => {}
+                changed = shutdown.changed() => {
+                    if changed.is_err() || *shutdown.borrow() {
+                        return true;
+                    }
+                }
+            }
+        }
+        let remaining = heartbeat_deadline.saturating_duration_since(Instant::now());
+        if !remaining.is_zero() {
+            tokio::select! {
+                () = sleep(remaining) => {}
+                changed = shutdown.changed() => {
+                    if changed.is_err() || *shutdown.borrow() {
+                        return true;
+                    }
+                }
+            }
+        }
+        false
+    }
+
+    pub async fn run(
+        self,
+        device_id: String,
+        state: AgentState,
+        online: Arc<AtomicBool>,
+        mut shutdown: watch::Receiver<bool>,
+        relay_target: Option<SocketAddr>,
+        desktop_media: Option<mpsc::Sender<DesktopMediaEvent>>,
+    ) {
+        let connection_id = random_connection_id();
+        let signal_identity = state.identity().ok().and_then(|identity| {
+            device_signing_key(&identity)
+                .ok()
+                .map(|signing| SignalIdentity { identity, signing })
+        });
+        let mut status = EdgePresenceStatus {
+            schema: 2,
+            configured: true,
+            online: false,
+            device_id: device_id.clone(),
+            region: self.config.region.clone(),
+            gateway_id: self.config.gateway_id.clone(),
+            expires_unix: None,
+            last_success_unix: None,
+            last_error: None,
+            signal_requests_received: 0,
+            signal_requests_accepted: 0,
+            signal_requests_rejected: 0,
+            last_signal_unix: None,
+            last_signal_error: signal_identity
+                .is_none()
+                .then(|| "invalid_device_key".into()),
+        };
+        persist_status(&state, &status);
+        let mut backoff = RetryBackoff::default();
+        'running: while !*shutdown.borrow() {
+            let wait = match self.register(&device_id, &connection_id).await {
+                Ok(expires_unix) => {
+                    let now = unix_timestamp();
+                    status.online = true;
+                    online.store(true, Ordering::Release);
+                    status.expires_unix = Some(expires_unix);
+                    status.last_success_unix = Some(now);
+                    status.last_error = None;
+                    backoff.reset();
+                    persist_status(&state, &status);
+                    if self
+                        .run_signal_interval(
+                            SignalInterval {
+                                device_id: &device_id,
+                                connection_id: &connection_id,
+                                state: &state,
+                                identity: signal_identity.as_ref(),
+                                relay_target,
+                                desktop_media: desktop_media.as_ref(),
+                            },
+                            &mut status,
+                            &mut shutdown,
+                        )
+                        .await
+                    {
+                        break 'running;
+                    }
+                    continue;
+                }
+                Err(error) => {
+                    status.online = false;
+                    online.store(false, Ordering::Release);
+                    status.expires_unix = None;
+                    status.last_error = Some(error.category());
+                    backoff.next_delay()
+                }
+            };
+            persist_status(&state, &status);
+            tokio::select! {
+                () = sleep(wait) => {}
+                changed = shutdown.changed() => {
+                    if changed.is_err() || *shutdown.borrow() {
+                        break;
+                    }
+                }
+            }
+        }
+
+        match timeout(
+            Duration::from_secs(5),
+            self.unregister(&device_id, &connection_id),
+        )
+        .await
+        {
+            Err(_) => status.last_error = Some("unregister_timeout".into()),
+            Ok(Err(error)) => status.last_error = Some(error.category()),
+            Ok(Ok(())) => {}
+        }
+        status.online = false;
+        online.store(false, Ordering::Release);
+        status.expires_unix = None;
+        persist_status(&state, &status);
+    }
+}
+
+#[derive(Serialize)]
+struct PresenceRequest<'a> {
+    device_id: &'a str,
+    region: &'a str,
+    gateway_id: &'a str,
+    connection_id: &'a str,
+    expires_unix: u64,
+}
+
+#[derive(Deserialize)]
+#[serde(deny_unknown_fields)]
+struct PresenceResponse {
+    device_id: String,
+    region: String,
+    gateway_id: String,
+    connection_id: String,
+    expires_unix: u64,
+}
+
+#[derive(Serialize)]
+struct UnregisterRequest<'a> {
+    device_id: &'a str,
+    connection_id: &'a str,
+}
+
+#[derive(Serialize)]
+struct AgentPollRequest<'a> {
+    device_id: &'a str,
+    device_public_key: &'a str,
+    connection_id: &'a str,
+    nonce: &'a str,
+    issued_unix: u64,
+    signature: &'a str,
+}
+
+#[derive(Serialize)]
+struct AgentAckRequest<'a> {
+    device_id: &'a str,
+    device_public_key: &'a str,
+    connection_id: &'a str,
+    request_id: &'a str,
+    accepted: bool,
+    result_code: &'a str,
+    nonce: &'a str,
+    issued_unix: u64,
+    signature: &'a str,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+#[serde(deny_unknown_fields)]
+struct SignedSessionIntent {
+    device_id: String,
+    request_id: String,
+    session_id: String,
+    session_type: String,
+    target_user: String,
+    requested_permissions: Vec<String>,
+    client_public_key: String,
+    nonce: String,
+    issued_unix: u64,
+    expires_unix: u64,
+    signature: String,
+}
+
+#[derive(Deserialize)]
+#[serde(deny_unknown_fields)]
+struct SignalAckResponse {
+    request_id: String,
+    #[serde(rename = "device_id")]
+    _device_id: String,
+    #[serde(rename = "session_id")]
+    _session_id: String,
+    state: String,
+    accepted: Option<bool>,
+    result_code: Option<String>,
+    #[serde(rename = "expires_unix")]
+    _expires_unix: u64,
+    #[serde(rename = "completed_unix")]
+    _completed_unix: Option<u64>,
+    relay: Option<EdgeRelayAccess>,
+    #[serde(default)]
+    turn: Vec<EdgeTurnCredential>,
+}
+
+#[derive(Deserialize)]
+#[serde(deny_unknown_fields)]
+struct EdgeTurnCredential {
+    #[serde(rename = "pop_id")]
+    _pop_id: String,
+    #[serde(rename = "realm")]
+    _realm: String,
+    urls: Vec<String>,
+    username: String,
+    password: String,
+    expires_unix: u64,
+}
+
+struct AuthorizedAgentSession {
+    relay: Option<EdgeRelayAccess>,
+    ice_servers: Vec<WebRtcIceServer>,
+}
+
+#[derive(Clone, Copy)]
+struct SignalDecision {
+    accepted: bool,
+    code: &'static str,
+}
+
+struct SignalIdentity {
+    identity: DeviceIdentity,
+    signing: SigningKey,
+}
+
+struct SignalInterval<'a> {
+    device_id: &'a str,
+    connection_id: &'a str,
+    state: &'a AgentState,
+    identity: Option<&'a SignalIdentity>,
+    relay_target: Option<SocketAddr>,
+    desktop_media: Option<&'a mpsc::Sender<DesktopMediaEvent>>,
+}
+
+async fn proxy_relay_to_agent(
+    access: EdgeRelayAccess,
+    target: SocketAddr,
+) -> Result<(), EdgePresenceError> {
+    let mut local = TcpStream::connect(target)
+        .await
+        .map_err(|_| EdgePresenceError::RelayConnect)?;
+    let mut relay = connect_edge_relay(&access)
+        .await
+        .map_err(|_| EdgePresenceError::RelayConnect)?;
+    copy_bidirectional(&mut relay, &mut local)
+        .await
+        .map_err(|_| EdgePresenceError::RelayConnect)?;
+    Ok(())
+}
+
+struct SignedAgentProof {
+    nonce: String,
+    issued_unix: u64,
+    signature: String,
+}
+
+fn update_signal_status(
+    status: &mut EdgePresenceStatus,
+    result: Result<Option<SignalDecision>, EdgePresenceError>,
+    backoff: &mut RetryBackoff,
+) -> Duration {
+    match result {
+        Ok(Some(decision)) => {
+            status.signal_requests_received = status.signal_requests_received.saturating_add(1);
+            if decision.accepted {
+                status.signal_requests_accepted = status.signal_requests_accepted.saturating_add(1);
+            } else {
+                status.signal_requests_rejected = status.signal_requests_rejected.saturating_add(1);
+            }
+            status.last_signal_unix = Some(unix_timestamp());
+            status.last_signal_error = None;
+            backoff.reset();
+            Duration::from_secs(1)
+        }
+        Ok(None) => {
+            status.last_signal_error = None;
+            backoff.reset();
+            Duration::from_secs(1)
+        }
+        Err(error) => {
+            status.last_signal_error = Some(error.category());
+            backoff.next_delay()
+        }
+    }
+}
+
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub enum EdgePresenceError {
+    IncompleteConfiguration,
+    InvalidUrl,
+    InsecureUrl,
+    InvalidIdentifier,
+    WeakToken,
+    ClientInitialization,
+    TransportTimeout,
+    TransportConnect,
+    TransportTls,
+    TransportOther,
+    HttpStatus(u16),
+    InvalidResponse,
+    InvalidDeviceKey,
+    RelayConnect,
+}
+
+impl EdgePresenceError {
+    fn category(self) -> String {
+        match self {
+            Self::HttpStatus(status) => format!("http_{status}"),
+            _ => self.to_string(),
+        }
+    }
+}
+
+impl fmt::Display for EdgePresenceError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        let category = match self {
+            Self::IncompleteConfiguration => "incomplete_configuration",
+            Self::InvalidUrl => "invalid_url",
+            Self::InsecureUrl => "insecure_url",
+            Self::InvalidIdentifier => "invalid_identifier",
+            Self::WeakToken => "weak_token",
+            Self::ClientInitialization => "client_initialization",
+            Self::TransportTimeout => "transport_timeout",
+            Self::TransportConnect => "transport_connect",
+            Self::TransportTls => "transport_tls",
+            Self::TransportOther => "transport_other",
+            Self::HttpStatus(_) => "http_status",
+            Self::InvalidResponse => "invalid_response",
+            Self::InvalidDeviceKey => "invalid_device_key",
+            Self::RelayConnect => "relay_connect",
+        };
+        formatter.write_str(category)
+    }
+}
+
+impl std::error::Error for EdgePresenceError {}
+
+/// Derives the stable, non-enumerable Edge Device ID from the Agent public key.
+///
+/// # Errors
+///
+/// Returns an error unless the public key is canonical unpadded base64 containing 32 bytes.
+pub fn edge_device_id(public_key: &str) -> Result<String, EdgePresenceError> {
+    let key = general_purpose::STANDARD_NO_PAD
+        .decode(public_key)
+        .map_err(|_| EdgePresenceError::InvalidDeviceKey)?;
+    if key.len() != 32 || general_purpose::STANDARD_NO_PAD.encode(&key) != public_key {
+        return Err(EdgePresenceError::InvalidDeviceKey);
+    }
+    let mut digest = Sha256::new();
+    digest.update(DEVICE_ID_DOMAIN);
+    digest.update(key);
+    Ok(format_hex(&digest.finalize()))
+}
+
+fn client_public_key_fingerprint(public_key: &str) -> Result<String, EdgePresenceError> {
+    let key = decode_fixed::<32>(public_key)?;
+    let digest = Sha256::digest(key);
+    Ok(format_hex(&digest[..16]))
+}
+
+async fn bounded_response(mut response: reqwest::Response) -> Result<Vec<u8>, EdgePresenceError> {
+    if response
+        .content_length()
+        .is_some_and(|length| length > MAX_RESPONSE_BYTES as u64)
+    {
+        return Err(EdgePresenceError::InvalidResponse);
+    }
+    let mut bytes = Vec::new();
+    while let Some(chunk) = response
+        .chunk()
+        .await
+        .map_err(|error| classify_transport(&error))?
+    {
+        if bytes.len().saturating_add(chunk.len()) > MAX_RESPONSE_BYTES {
+            return Err(EdgePresenceError::InvalidResponse);
+        }
+        bytes.extend_from_slice(&chunk);
+    }
+    Ok(bytes)
+}
+
+fn device_signing_key(identity: &DeviceIdentity) -> Result<SigningKey, EdgePresenceError> {
+    let seed = decode_fixed::<32>(&identity.private_key)?;
+    let signing = SigningKey::from_bytes(&seed);
+    if general_purpose::STANDARD_NO_PAD.encode(signing.verifying_key().as_bytes())
+        != identity.public_key
+    {
+        return Err(EdgePresenceError::InvalidDeviceKey);
+    }
+    Ok(signing)
+}
+
+fn signed_agent_proof(
+    device_id: &str,
+    device_public_key: &str,
+    connection_id: &str,
+    action: AgentSignalAction,
+    request_id: Option<&str>,
+    result_code: Option<&str>,
+    signing: &SigningKey,
+) -> Result<SignedAgentProof, EdgePresenceError> {
+    let mut nonce = [0_u8; SIGNAL_NONCE_LENGTH];
+    rand::rng().fill_bytes(&mut nonce);
+    let issued_unix = unix_timestamp();
+    let proof = AgentSignalProofV1 {
+        device_id: device_id.into(),
+        device_public_key: device_public_key.into(),
+        connection_id: connection_id.into(),
+        action,
+        request_id: request_id.map(str::to_owned),
+        result_code: result_code.map(str::to_owned),
+        nonce,
+        issued_unix,
+    };
+    let payload = proof
+        .stable_signing_input()
+        .map_err(|_| EdgePresenceError::InvalidDeviceKey)?;
+    Ok(SignedAgentProof {
+        nonce: general_purpose::STANDARD_NO_PAD.encode(nonce),
+        issued_unix,
+        signature: general_purpose::STANDARD_NO_PAD.encode(signing.sign(&payload).to_bytes()),
+    })
+}
+
+fn authorize_signal(
+    request: &SignedSessionIntent,
+    expected_device_id: &str,
+    state: &AgentState,
+    now: u64,
+) -> SignalDecision {
+    let Ok(nonce) = decode_fixed::<SIGNAL_NONCE_LENGTH>(&request.nonce) else {
+        return rejected("invalid_request");
+    };
+    let Ok(session_type) = EdgeSessionType::parse(&request.session_type) else {
+        return rejected("invalid_request");
+    };
+    let model = EdgeSessionIntentV1 {
+        device_id: request.device_id.clone(),
+        request_id: request.request_id.clone(),
+        session_id: request.session_id.clone(),
+        session_type,
+        target_user: request.target_user.clone(),
+        requested_permissions: request.requested_permissions.clone(),
+        client_public_key: request.client_public_key.clone(),
+        nonce,
+        issued_unix: request.issued_unix,
+        expires_unix: request.expires_unix,
+    };
+    let Ok(payload) = model.stable_signing_input() else {
+        return rejected("invalid_request");
+    };
+    if model.device_id != expected_device_id
+        || model.issued_unix > now.saturating_add(30)
+        || model.expires_unix <= now
+    {
+        return rejected("invalid_request");
+    }
+    let Ok(public) = decode_fixed::<32>(&model.client_public_key) else {
+        return rejected("invalid_client_signature");
+    };
+    let Ok(signature) = decode_fixed::<64>(&request.signature) else {
+        return rejected("invalid_client_signature");
+    };
+    let Ok(verifying) = VerifyingKey::from_bytes(&public) else {
+        return rejected("invalid_client_signature");
+    };
+    if verifying
+        .verify(&payload, &Signature::from_bytes(&signature))
+        .is_err()
+    {
+        return rejected("invalid_client_signature");
+    }
+    if model.session_type == EdgeSessionType::Pairing {
+        if model.requested_permissions != ["pairing"] {
+            return rejected("invalid_request");
+        }
+        let pairing_available =
+            ["terminal", "files", "desktop"]
+                .iter()
+                .try_fold(false, |available, permission| {
+                    state
+                        .pairing_grant_allows(&model.target_user, permission)
+                        .map(|allowed| available || allowed)
+                });
+        return match pairing_available {
+            Ok(true) => SignalDecision {
+                accepted: true,
+                code: "pairing_window_open",
+            },
+            Ok(false) => rejected("pairing_unavailable"),
+            Err(_) => rejected("authorization_unavailable"),
+        };
+    }
+    let Ok(clients) = state.clients() else {
+        return rejected("authorization_unavailable");
+    };
+    let Some(client) = clients
+        .iter()
+        .find(|client| client.public_key == model.client_public_key)
+    else {
+        return rejected("unpaired_client");
+    };
+    let required = model.session_type.as_str();
+    if !model
+        .requested_permissions
+        .iter()
+        .any(|permission| permission == required)
+        || model.requested_permissions.iter().any(|requested| {
+            !client
+                .permissions
+                .iter()
+                .any(|permission| permission == requested)
+        })
+    {
+        return rejected("permission_denied");
+    }
+    if !client
+        .allowed_users
+        .iter()
+        .any(|user| user == &model.target_user)
+    {
+        return rejected("user_denied");
+    }
+    SignalDecision {
+        accepted: true,
+        code: "authorized",
+    }
+}
+
+const fn rejected(code: &'static str) -> SignalDecision {
+    SignalDecision {
+        accepted: false,
+        code,
+    }
+}
+
+fn decode_fixed<const LENGTH: usize>(value: &str) -> Result<[u8; LENGTH], EdgePresenceError> {
+    let decoded = general_purpose::STANDARD_NO_PAD
+        .decode(value)
+        .map_err(|_| EdgePresenceError::InvalidDeviceKey)?;
+    if general_purpose::STANDARD_NO_PAD.encode(&decoded) != value {
+        return Err(EdgePresenceError::InvalidDeviceKey);
+    }
+    decoded
+        .try_into()
+        .map_err(|_| EdgePresenceError::InvalidDeviceKey)
+}
+
+fn validate_url(url: &Url) -> Result<(), EdgePresenceError> {
+    if url.username() != ""
+        || url.password().is_some()
+        || url.query().is_some()
+        || url.fragment().is_some()
+        || url.path() != "/"
+        || url.port() == Some(0)
+    {
+        return Err(EdgePresenceError::InvalidUrl);
+    }
+    let secure = url.scheme() == "https";
+    let host = url.host();
+    let loopback_http = url.scheme() == "http" && is_loopback_host(host.as_ref());
+    if !secure && !loopback_http {
+        return Err(EdgePresenceError::InsecureUrl);
+    }
+    Ok(())
+}
+
+fn is_loopback_host(host: Option<&Host<&str>>) -> bool {
+    matches!(host, Some(Host::Domain("localhost")))
+        || matches!(host, Some(Host::Ipv4(address)) if address.is_loopback())
+        || matches!(host, Some(Host::Ipv6(address)) if address.is_loopback())
+}
+
+fn validate_identifier(value: &str, maximum: usize) -> Result<(), EdgePresenceError> {
+    if value.is_empty()
+        || value.len() > maximum
+        || !value
+            .bytes()
+            .all(|byte| byte.is_ascii_alphanumeric() || matches!(byte, b'-' | b'_' | b'.'))
+    {
+        return Err(EdgePresenceError::InvalidIdentifier);
+    }
+    Ok(())
+}
+
+fn classify_transport(error: &reqwest::Error) -> EdgePresenceError {
+    if error.is_timeout() {
+        EdgePresenceError::TransportTimeout
+    } else if error.is_connect() {
+        EdgePresenceError::TransportConnect
+    } else if error
+        .source()
+        .is_some_and(|source| source.to_string().to_ascii_lowercase().contains("tls"))
+    {
+        EdgePresenceError::TransportTls
+    } else {
+        EdgePresenceError::TransportOther
+    }
+}
+
+fn random_connection_id() -> String {
+    let mut bytes = [0_u8; 18];
+    rand::rng().fill_bytes(&mut bytes);
+    general_purpose::URL_SAFE_NO_PAD.encode(bytes)
+}
+
+fn persist_status(state: &AgentState, status: &EdgePresenceStatus) {
+    if state.write_edge_presence_status(status).is_err() {
+        eprintln!("Edge Presence status persistence failed");
+    }
+}
+
+fn format_hex(bytes: &[u8]) -> String {
+    use fmt::Write as _;
+    let mut result = String::with_capacity(bytes.len() * 2);
+    for byte in bytes {
+        write!(result, "{byte:02x}").expect("writing to a String cannot fail");
+    }
+    result
+}
+
+#[derive(Default)]
+struct RetryBackoff {
+    attempt: usize,
+}
+
+impl RetryBackoff {
+    fn next_delay(&mut self) -> Duration {
+        const DELAYS: [u64; 5] = [1, 2, 4, 8, 30];
+        let delay = DELAYS[self.attempt.min(DELAYS.len() - 1)];
+        self.attempt = self.attempt.saturating_add(1);
+        Duration::from_secs(delay)
+    }
+
+    fn reset(&mut self) {
+        self.attempt = 0;
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use remotedesk_edge_service::{
+        ApiConfig, EdgeApi, RelayBroker, RelayConfig, RelayTicketIssuer, run_http_server,
+    };
+    use remotedesk_protocol::{
+        EdgeNegotiationEndpoint, EdgeNegotiationKind, EdgeSessionIntentV1, EdgeSessionType,
+    };
+    use std::fs;
+    use std::net::SocketAddr;
+    use std::path::PathBuf;
+    use std::sync::Arc;
+    use std::sync::atomic::{AtomicBool, Ordering};
+    use std::thread::{self, JoinHandle};
+    use tiny_http::Server;
+
+    const ADMIN_TOKEN: &str = "admin-token-0123456789abcdef0123456789";
+    const PRESENCE_TOKEN: &str = "presence-token-0123456789abcdef012345";
+    const TICKET_SECRET: &[u8] = b"ticket-secret-0123456789abcdef0123456";
+
+    struct TestEdge {
+        api: Arc<EdgeApi>,
+        address: SocketAddr,
+        shutdown: Arc<AtomicBool>,
+        worker: Option<JoinHandle<()>>,
+    }
+
+    impl TestEdge {
+        fn start() -> Self {
+            let issuer = RelayTicketIssuer::new(TICKET_SECRET, "test-pop").unwrap();
+            let broker = Arc::new(RelayBroker::new(issuer.clone(), RelayConfig::default()));
+            let api = Arc::new(
+                EdgeApi::new(
+                    ApiConfig {
+                        api_token: ADMIN_TOKEN.into(),
+                        presence_token: PRESENCE_TOKEN.into(),
+                        pop_id: "test-pop".into(),
+                        region: "test-region".into(),
+                        public_relay_address: "relay.example.test:443".into(),
+                        default_relay_ttl_seconds: 300,
+                        default_relay_max_bytes: 1024,
+                        turn_pops: vec![],
+                    },
+                    issuer,
+                    broker,
+                )
+                .unwrap(),
+            );
+            let server = Server::http("127.0.0.1:0").unwrap();
+            let address = server.server_addr().to_ip().unwrap();
+            let shutdown = Arc::new(AtomicBool::new(false));
+            let worker = {
+                let api = Arc::clone(&api);
+                let shutdown = Arc::clone(&shutdown);
+                thread::spawn(move || run_http_server(&server, &api, &shutdown).unwrap())
+            };
+            Self {
+                api,
+                address,
+                shutdown,
+                worker: Some(worker),
+            }
+        }
+
+        fn config(&self) -> EdgePresenceConfig {
+            EdgePresenceConfig::new(
+                &format!("http://{}/", self.address),
+                PRESENCE_TOKEN.into(),
+                "test-region".into(),
+                "gateway-1".into(),
+            )
+            .unwrap()
+        }
+
+        fn lookup_status(&self, device_id: &str) -> u16 {
+            self.api
+                .handle(
+                    "GET",
+                    &format!("/v1/presence/{device_id}"),
+                    Some(&format!("Bearer {ADMIN_TOKEN}")),
+                    b"",
+                )
+                .status
+        }
+    }
+
+    impl Drop for TestEdge {
+        fn drop(&mut self) {
+            self.shutdown.store(true, Ordering::Release);
+            if let Some(worker) = self.worker.take() {
+                worker.join().unwrap();
+            }
+        }
+    }
+
+    fn test_root(name: &str) -> PathBuf {
+        std::env::temp_dir().join(format!(
+            "remotedesk-{name}-{}-{}",
+            std::process::id(),
+            rand::random::<u64>()
+        ))
+    }
+
+    fn signed_intent_body(
+        signing: &SigningKey,
+        device_id: &str,
+        request_id: &str,
+        target_user: &str,
+        nonce_byte: u8,
+    ) -> Vec<u8> {
+        let now = unix_timestamp();
+        let public_key =
+            general_purpose::STANDARD_NO_PAD.encode(signing.verifying_key().as_bytes());
+        let intent = EdgeSessionIntentV1 {
+            device_id: device_id.into(),
+            request_id: request_id.into(),
+            session_id: format!("session-{request_id}"),
+            session_type: EdgeSessionType::Terminal,
+            target_user: target_user.into(),
+            requested_permissions: vec!["terminal".into()],
+            client_public_key: public_key.clone(),
+            nonce: [nonce_byte; SIGNAL_NONCE_LENGTH],
+            issued_unix: now,
+            expires_unix: now + 60,
+        };
+        let signature = signing.sign(&intent.stable_signing_input().unwrap());
+        serde_json::to_vec(&serde_json::json!({
+            "device_id": intent.device_id,
+            "request_id": intent.request_id,
+            "session_id": intent.session_id,
+            "session_type": intent.session_type.as_str(),
+            "target_user": intent.target_user,
+            "requested_permissions": intent.requested_permissions,
+            "client_public_key": public_key,
+            "nonce": general_purpose::STANDARD_NO_PAD.encode(intent.nonce),
+            "issued_unix": intent.issued_unix,
+            "expires_unix": intent.expires_unix,
+            "signature": general_purpose::STANDARD_NO_PAD.encode(signature.to_bytes()),
+        }))
+        .unwrap()
+    }
+
+    fn signal_status(edge: &TestEdge, request_id: &str) -> Option<serde_json::Value> {
+        let reply = edge.api.handle(
+            "GET",
+            &format!("/v1/signals/requests/{request_id}"),
+            Some(&format!("Bearer {ADMIN_TOKEN}")),
+            b"",
+        );
+        (reply.status == 200).then(|| serde_json::from_slice(&reply.body).unwrap())
+    }
+
+    async fn wait_for_signal_completion(
+        edge: &TestEdge,
+        state: &AgentState,
+        request_id: &str,
+        expected_received: u64,
+    ) -> serde_json::Value {
+        timeout(Duration::from_secs(5), async {
+            loop {
+                if signal_status(edge, request_id)
+                    .is_some_and(|status| status["state"] == "completed")
+                    && state
+                        .edge_presence_status()
+                        .unwrap()
+                        .is_some_and(|status| status.signal_requests_received == expected_received)
+                {
+                    break;
+                }
+                sleep(Duration::from_millis(20)).await;
+            }
+        })
+        .await
+        .expect("signal was not acknowledged");
+        signal_status(edge, request_id).unwrap()
+    }
+
+    async fn verify_negotiation_round_trip(
+        edge: &TestEdge,
+        identity: &DeviceIdentity,
+        client_signing: &SigningKey,
+        accepted: &serde_json::Value,
+    ) {
+        let session = crate::EdgeNegotiationSession {
+            request_id: accepted["request_id"].as_str().unwrap().into(),
+            session_id: accepted["session_id"].as_str().unwrap().into(),
+            expires_unix: accepted["expires_unix"].as_u64().unwrap(),
+        };
+        let origin = format!("http://{}/", edge.address);
+        let mut client = crate::EdgeNegotiationClient::new(
+            &origin,
+            EdgeNegotiationEndpoint::Client,
+            client_signing.clone(),
+            session.clone(),
+        )
+        .unwrap();
+        let mut agent = crate::EdgeNegotiationClient::new(
+            &origin,
+            EdgeNegotiationEndpoint::Agent,
+            device_signing_key(identity).unwrap(),
+            session,
+        )
+        .unwrap();
+        let offer = client
+            .send(EdgeNegotiationKind::Offer, "v=0\r\na=client\r\n".into())
+            .await
+            .unwrap();
+        assert_eq!(offer.endpoint, "client");
+        let agent_poll = agent.poll().await.unwrap();
+        assert_eq!(agent_poll.messages, [offer]);
+        let answer = agent
+            .send(EdgeNegotiationKind::Answer, "v=0\r\na=agent\r\n".into())
+            .await
+            .unwrap();
+        assert_eq!(answer.endpoint, "agent");
+        let client_poll = client.poll().await.unwrap();
+        assert_eq!(client_poll.messages, [answer]);
+        assert_eq!(client.send_sequence(), 1);
+        assert_eq!(client.peer_sequence(), 1);
+        assert_eq!(agent.send_sequence(), 1);
+        assert_eq!(agent.peer_sequence(), 1);
+    }
+
+    #[test]
+    fn configuration_requires_https_or_loopback_http_and_redacts_token() {
+        assert!(
+            EdgePresenceConfig::new(
+                "https://edge.example.test/",
+                PRESENCE_TOKEN.into(),
+                "region-1".into(),
+                "gateway-1".into(),
+            )
+            .is_ok()
+        );
+        assert!(
+            EdgePresenceConfig::new(
+                "http://127.0.0.1:7080/",
+                PRESENCE_TOKEN.into(),
+                "region-1".into(),
+                "gateway-1".into(),
+            )
+            .is_ok()
+        );
+        assert!(
+            EdgePresenceConfig::new(
+                "http://edge.example.test/",
+                PRESENCE_TOKEN.into(),
+                "region-1".into(),
+                "gateway-1".into(),
+            )
+            .is_err()
+        );
+        let config = EdgePresenceConfig::new(
+            "https://edge.example.test/",
+            PRESENCE_TOKEN.into(),
+            "region-1".into(),
+            "gateway-1".into(),
+        )
+        .unwrap();
+        assert!(!format!("{config:?}").contains(PRESENCE_TOKEN));
+    }
+
+    #[test]
+    fn device_id_is_stable_and_validates_public_key() {
+        let public = general_purpose::STANDARD_NO_PAD.encode([7_u8; 32]);
+        let first = edge_device_id(&public).unwrap();
+        assert_eq!(first, edge_device_id(&public).unwrap());
+        assert_eq!(first.len(), 64);
+        assert!(first.bytes().all(|byte| byte.is_ascii_hexdigit()));
+        assert!(edge_device_id("not-base64").is_err());
+    }
+
+    #[test]
+    fn retry_backoff_is_bounded_and_resettable() {
+        let mut backoff = RetryBackoff::default();
+        assert_eq!(backoff.next_delay(), Duration::from_secs(1));
+        assert_eq!(backoff.next_delay(), Duration::from_secs(2));
+        assert_eq!(backoff.next_delay(), Duration::from_secs(4));
+        assert_eq!(backoff.next_delay(), Duration::from_secs(8));
+        assert_eq!(backoff.next_delay(), Duration::from_secs(30));
+        assert_eq!(backoff.next_delay(), Duration::from_secs(30));
+        backoff.reset();
+        assert_eq!(backoff.next_delay(), Duration::from_secs(1));
+    }
+
+    #[tokio::test]
+    async fn client_registers_and_connection_bound_unregisters_against_edge_service() {
+        let edge = TestEdge::start();
+        let client = EdgePresenceClient::new(edge.config()).unwrap();
+        let device_id = "ab".repeat(32);
+        let expiry = client.register(&device_id, "connection-1").await.unwrap();
+        assert!(expiry > unix_timestamp());
+        assert_eq!(edge.lookup_status(&device_id), 200);
+        client.unregister(&device_id, "connection-1").await.unwrap();
+        assert_eq!(edge.lookup_status(&device_id), 404);
+    }
+
+    #[tokio::test]
+    async fn heartbeat_task_persists_online_state_and_unregisters_on_shutdown() {
+        let edge = TestEdge::start();
+        let client = EdgePresenceClient::new(edge.config()).unwrap();
+        let device_id = "cd".repeat(32);
+        let root = test_root("edge-presence-lifecycle");
+        let state = AgentState::new(&root);
+        let online = Arc::new(AtomicBool::new(false));
+        let (shutdown_tx, shutdown_rx) = watch::channel(false);
+        let task = {
+            let device_id = device_id.clone();
+            let state = state.clone();
+            let online = Arc::clone(&online);
+            tokio::spawn(async move {
+                client
+                    .run(device_id, state, online, shutdown_rx, None, None)
+                    .await;
+            })
+        };
+
+        timeout(Duration::from_secs(5), async {
+            loop {
+                if online.load(Ordering::Acquire)
+                    && state
+                        .edge_presence_status()
+                        .unwrap()
+                        .is_some_and(|status| status.online)
+                {
+                    break;
+                }
+                sleep(Duration::from_millis(20)).await;
+            }
+        })
+        .await
+        .expect("Presence registration did not become healthy");
+        assert_eq!(edge.lookup_status(&device_id), 200);
+        let online_status = state.edge_presence_status().unwrap().unwrap();
+        assert_eq!(online_status.device_id, device_id);
+        assert!(online_status.expires_unix.is_some());
+        assert!(online_status.last_success_unix.is_some());
+        assert_eq!(online_status.last_error, None);
+
+        shutdown_tx.send(true).unwrap();
+        timeout(Duration::from_secs(6), task)
+            .await
+            .expect("Presence task did not stop after shutdown")
+            .unwrap();
+        assert!(!online.load(Ordering::Acquire));
+        let offline_status = state.edge_presence_status().unwrap().unwrap();
+        assert!(!offline_status.online);
+        assert_eq!(offline_status.expires_unix, None);
+        assert_eq!(edge.lookup_status(&device_id), 404);
+        fs::remove_dir_all(root).unwrap();
+    }
+
+    #[tokio::test]
+    async fn agent_verifies_and_authorizes_signed_edge_session_intents() {
+        let edge = TestEdge::start();
+        let root = test_root("edge-signal-lifecycle");
+        let state = AgentState::new(&root);
+        let identity = state.ensure_identity("test-host").unwrap();
+        let device_id = edge_device_id(&identity.public_key).unwrap();
+        let client_signing = SigningKey::from_bytes(&[11; 32]);
+        state
+            .grant_client(
+                "paired client".into(),
+                general_purpose::STANDARD_NO_PAD.encode(client_signing.verifying_key().as_bytes()),
+                vec!["terminal".into()],
+                vec!["alice".into()],
+            )
+            .unwrap();
+        let client = EdgePresenceClient::new(edge.config()).unwrap();
+        let online = Arc::new(AtomicBool::new(false));
+        let (shutdown_tx, shutdown_rx) = watch::channel(false);
+        let task = {
+            let device_id = device_id.clone();
+            let state = state.clone();
+            let online = Arc::clone(&online);
+            tokio::spawn(async move {
+                client
+                    .run(device_id, state, online, shutdown_rx, None, None)
+                    .await;
+            })
+        };
+        timeout(Duration::from_secs(5), async {
+            while !online.load(Ordering::Acquire) {
+                sleep(Duration::from_millis(20)).await;
+            }
+        })
+        .await
+        .expect("Agent did not register Presence");
+
+        let accepted_body =
+            signed_intent_body(&client_signing, &device_id, "request-accepted", "alice", 1);
+        assert_eq!(
+            edge.api
+                .handle(
+                    "POST",
+                    "/v1/signals/requests",
+                    Some(&format!("Bearer {ADMIN_TOKEN}")),
+                    &accepted_body,
+                )
+                .status,
+            201
+        );
+        let accepted = wait_for_signal_completion(&edge, &state, "request-accepted", 1).await;
+        assert_eq!(accepted["accepted"], true);
+        assert_eq!(accepted["result_code"], "authorized");
+        verify_negotiation_round_trip(&edge, &identity, &client_signing, &accepted).await;
+
+        let rejected_body =
+            signed_intent_body(&client_signing, &device_id, "request-rejected", "bob", 2);
+        assert_eq!(
+            edge.api
+                .handle(
+                    "POST",
+                    "/v1/signals/requests",
+                    Some(&format!("Bearer {ADMIN_TOKEN}")),
+                    &rejected_body,
+                )
+                .status,
+            201
+        );
+        let rejected = wait_for_signal_completion(&edge, &state, "request-rejected", 2).await;
+        assert_eq!(rejected["accepted"], false);
+        assert_eq!(rejected["result_code"], "user_denied");
+
+        let persisted = state.edge_presence_status().unwrap().unwrap();
+        assert_eq!(persisted.signal_requests_received, 2);
+        assert_eq!(persisted.signal_requests_accepted, 1);
+        assert_eq!(persisted.signal_requests_rejected, 1);
+        assert!(persisted.last_signal_unix.is_some());
+        assert_eq!(persisted.last_signal_error, None);
+
+        shutdown_tx.send(true).unwrap();
+        timeout(Duration::from_secs(6), task)
+            .await
+            .expect("Presence task did not stop after signal test")
+            .unwrap();
+        assert_eq!(edge.lookup_status(&device_id), 404);
+        fs::remove_dir_all(root).unwrap();
+    }
+}
diff --git a/agent/agent-runtime/src/edge_relay.rs b/agent/agent-runtime/src/edge_relay.rs
new file mode 100644
index 0000000..d7622f9
--- /dev/null
+++ b/agent/agent-runtime/src/edge_relay.rs
@@ -0,0 +1,191 @@
+use rustls::pki_types::ServerName;
+use serde::{Deserialize, Serialize};
+use std::fmt;
+use std::net::IpAddr;
+use std::sync::Arc;
+use std::time::Duration;
+use tokio::io::{AsyncRead, AsyncReadExt as _, AsyncWrite, AsyncWriteExt as _};
+use tokio::net::TcpStream;
+use tokio::time::timeout;
+use tokio_rustls::TlsConnector;
+use url::{Host, Url};
+
+const MAX_RELAY_ADDRESS_BYTES: usize = 512;
+const MAX_RELAY_TICKET_BYTES: usize = 8192;
+const RELAY_CONNECT_TIMEOUT: Duration = Duration::from_secs(10);
+
+#[derive(Clone, Debug, Deserialize, Eq, PartialEq, Serialize)]
+#[serde(deny_unknown_fields)]
+pub struct EdgeRelayAccess {
+    pub pop_id: String,
+    pub relay_address: String,
+    pub expires_unix: u64,
+    pub max_bytes: u64,
+    pub ticket: String,
+}
+
+pub trait RelayIo: AsyncRead + AsyncWrite + Send + Unpin {}
+impl<T> RelayIo for T where T: AsyncRead + AsyncWrite + Send + Unpin {}
+pub type RelayStream = Box<dyn RelayIo>;
+
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub enum EdgeRelayError {
+    InvalidAccess,
+    Expired,
+    Resolution,
+    Connect,
+    CertificateStore,
+    Tls,
+    Handshake,
+}
+
+impl fmt::Display for EdgeRelayError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        write!(formatter, "Edge relay connection failed: {self:?}")
+    }
+}
+
+impl std::error::Error for EdgeRelayError {}
+
+/// Connects to an Edge relay using a role-bound one-use ticket.
+///
+/// Public relay authorities use platform-validated TLS. Plain TCP is accepted
+/// only for loopback integration tests and local deployments.
+///
+/// # Errors
+///
+/// Returns a stable category for invalid access data, expiry, connection, TLS,
+/// or relay handshake failures.
+pub async fn connect_edge_relay(access: &EdgeRelayAccess) -> Result<RelayStream, EdgeRelayError> {
+    let (host, port, loopback) = validate_access(access)?;
+    let tcp = timeout(
+        RELAY_CONNECT_TIMEOUT,
+        TcpStream::connect((host.as_str(), port)),
+    )
+    .await
+    .map_err(|_| EdgeRelayError::Connect)?
+    .map_err(|_| EdgeRelayError::Resolution)?;
+    tcp.set_nodelay(true).map_err(|_| EdgeRelayError::Connect)?;
+    let mut stream: RelayStream = if loopback {
+        Box::new(tcp)
+    } else {
+        let native = rustls_native_certs::load_native_certs();
+        let mut roots = rustls::RootCertStore::empty();
+        let (added, _) = roots.add_parsable_certificates(native.certs);
+        if added == 0 {
+            return Err(EdgeRelayError::CertificateStore);
+        }
+        let config = rustls::ClientConfig::builder()
+            .with_root_certificates(roots)
+            .with_no_client_auth();
+        let server_name =
+            ServerName::try_from(host.clone()).map_err(|_| EdgeRelayError::InvalidAccess)?;
+        let tls = timeout(
+            RELAY_CONNECT_TIMEOUT,
+            TlsConnector::from(Arc::new(config)).connect(server_name, tcp),
+        )
+        .await
+        .map_err(|_| EdgeRelayError::Tls)?
+        .map_err(|_| EdgeRelayError::Tls)?;
+        Box::new(tls)
+    };
+    let hello = serde_json::to_vec(&serde_json::json!({ "ticket": access.ticket }))
+        .map_err(|_| EdgeRelayError::Handshake)?;
+    stream
+        .write_all(&hello)
+        .await
+        .map_err(|_| EdgeRelayError::Handshake)?;
+    stream
+        .write_all(b"\n")
+        .await
+        .map_err(|_| EdgeRelayError::Handshake)?;
+    stream
+        .flush()
+        .await
+        .map_err(|_| EdgeRelayError::Handshake)?;
+    let mut ready = Vec::with_capacity(8);
+    timeout(RELAY_CONNECT_TIMEOUT, async {
+        let mut byte = [0_u8; 1];
+        while ready.len() < 16 {
+            stream.read_exact(&mut byte).await?;
+            ready.push(byte[0]);
+            if byte[0] == b'\n' {
+                return Ok::<(), std::io::Error>(());
+            }
+        }
+        Err(std::io::Error::other("relay response exceeded limit"))
+    })
+    .await
+    .map_err(|_| EdgeRelayError::Handshake)?
+    .map_err(|_| EdgeRelayError::Handshake)?;
+    if ready != b"READY\n" {
+        return Err(EdgeRelayError::Handshake);
+    }
+    Ok(stream)
+}
+
+fn validate_access(access: &EdgeRelayAccess) -> Result<(String, u16, bool), EdgeRelayError> {
+    if access.relay_address.is_empty()
+        || access.relay_address.len() > MAX_RELAY_ADDRESS_BYTES
+        || access.ticket.is_empty()
+        || access.ticket.len() > MAX_RELAY_TICKET_BYTES
+        || access.max_bytes == 0
+        || access.expires_unix <= crate::unix_timestamp()
+    {
+        return Err(if access.expires_unix <= crate::unix_timestamp() {
+            EdgeRelayError::Expired
+        } else {
+            EdgeRelayError::InvalidAccess
+        });
+    }
+    let url = Url::parse(&format!("relay://{}/", access.relay_address))
+        .map_err(|_| EdgeRelayError::InvalidAccess)?;
+    if url.username() != ""
+        || url.password().is_some()
+        || url.path() != "/"
+        || url.query().is_some()
+        || url.fragment().is_some()
+    {
+        return Err(EdgeRelayError::InvalidAccess);
+    }
+    let port = url.port().ok_or(EdgeRelayError::InvalidAccess)?;
+    let host = url.host().ok_or(EdgeRelayError::InvalidAccess)?;
+    let loopback = matches!(host, Host::Domain("localhost"))
+        || matches!(host, Host::Domain(value) if value.parse::<IpAddr>().is_ok_and(|address| address.is_loopback()))
+        || matches!(host, Host::Ipv4(address) if address.is_loopback())
+        || matches!(host, Host::Ipv6(address) if address.is_loopback());
+    let host = match host {
+        Host::Domain(value) => value.to_owned(),
+        Host::Ipv4(address) => address.to_string(),
+        Host::Ipv6(address) => address.to_string(),
+    };
+    Ok((host, port, loopback))
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn access(address: &str) -> EdgeRelayAccess {
+        EdgeRelayAccess {
+            pop_id: "test-pop".into(),
+            relay_address: address.into(),
+            expires_unix: crate::unix_timestamp() + 60,
+            max_bytes: 1024,
+            ticket: "ticket".into(),
+        }
+    }
+
+    #[test]
+    fn relay_access_requires_bounded_secret_free_authority() {
+        assert!(validate_access(&access("127.0.0.1:7444")).unwrap().2);
+        assert!(
+            !validate_access(&access("relay.example.test:443"))
+                .unwrap()
+                .2
+        );
+        assert!(validate_access(&access("user:secret@relay.test:443")).is_err());
+        assert!(validate_access(&access("relay.test")).is_err());
+        assert!(validate_access(&access("relay.test:443/path")).is_err());
+    }
+}
diff --git a/agent/agent-runtime/src/h264_encoder.rs b/agent/agent-runtime/src/h264_encoder.rs
new file mode 100644
index 0000000..79155a2
--- /dev/null
+++ b/agent/agent-runtime/src/h264_encoder.rs
@@ -0,0 +1,530 @@
+use std::{fmt, time::Duration};
+
+const MAX_DIMENSION: u16 = 8_192;
+
+#[derive(Clone, Debug)]
+pub struct EncodedH264AccessUnit {
+    pub data: Vec<u8>,
+    pub width: u16,
+    pub height: u16,
+    pub duration: Duration,
+    pub keyframe: bool,
+    pub encode_latency: Duration,
+    pub encoder: &'static str,
+}
+
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub enum H264EncoderError {
+    InvalidConfiguration,
+    RuntimeUnavailable,
+    PipelineUnavailable,
+    PipelineFailure,
+    OutputTimeout,
+    InvalidOutput,
+    StrictZeroCopyUnavailable,
+    KeyframeUnavailable,
+}
+
+impl H264EncoderError {
+    #[must_use]
+    pub const fn reason_code(self) -> &'static str {
+        match self {
+            Self::InvalidConfiguration => "invalid_configuration",
+            Self::RuntimeUnavailable => "gstreamer_unavailable",
+            Self::PipelineUnavailable => "h264_encoder_unavailable",
+            Self::PipelineFailure => "h264_pipeline_failed",
+            Self::OutputTimeout => "h264_output_timeout",
+            Self::InvalidOutput => "invalid_h264_output",
+            Self::StrictZeroCopyUnavailable => "strict_zero_copy_unavailable",
+            Self::KeyframeUnavailable => "h264_keyframe_unavailable",
+        }
+    }
+}
+
+impl fmt::Display for H264EncoderError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        formatter.write_str(self.reason_code())
+    }
+}
+
+impl std::error::Error for H264EncoderError {}
+
+#[cfg(feature = "gstreamer-h264")]
+mod implementation {
+    use super::{EncodedH264AccessUnit, H264EncoderError, MAX_DIMENSION, annex_b_contains_idr};
+    use gstreamer as gst;
+    use gstreamer::prelude::*;
+    use gstreamer_app as gst_app;
+    use gstreamer_app::prelude::*;
+    use std::{
+        os::fd::{AsRawFd as _, BorrowedFd},
+        time::{Duration, Instant},
+    };
+
+    struct EncoderCandidate {
+        factory: &'static str,
+        pipeline_fragment: String,
+    }
+
+    pub struct H264Encoder {
+        pipeline: gst::Pipeline,
+        source: gst_app::AppSrc,
+        sink: gst_app::AppSink,
+        width: u16,
+        height: u16,
+        frames_per_second: u8,
+        next_pts_ns: u64,
+        encoder: &'static str,
+    }
+
+    pub struct PortalH264Encoder {
+        pipeline: gst::Pipeline,
+        sink: gst_app::AppSink,
+        max_width: u16,
+        max_height: u16,
+        frames_per_second: u8,
+        encoder: &'static str,
+    }
+
+    impl H264Encoder {
+        pub fn new(
+            width: u16,
+            height: u16,
+            frames_per_second: u8,
+        ) -> Result<Self, H264EncoderError> {
+            validate_configuration(width, height, frames_per_second)?;
+            gst::init().map_err(|_| H264EncoderError::RuntimeUnavailable)?;
+            let bitrate_kbps = target_bitrate_kbps(width, height, frames_per_second);
+            let key_interval = u16::from(frames_per_second).saturating_mul(2);
+            let candidates = [
+                EncoderCandidate {
+                    factory: "vah264enc",
+                    pipeline_fragment: format!(
+                        "vah264enc rate-control=cbr bitrate={bitrate_kbps} key-int-max={key_interval}"
+                    ),
+                },
+                EncoderCandidate {
+                    factory: "vaapih264enc",
+                    pipeline_fragment: format!(
+                        "vaapih264enc rate-control=cbr bitrate={bitrate_kbps} keyframe-period={key_interval}"
+                    ),
+                },
+                EncoderCandidate {
+                    factory: "nvh264enc",
+                    pipeline_fragment: format!(
+                        "nvh264enc zerolatency=true bitrate={bitrate_kbps} gop-size={key_interval}"
+                    ),
+                },
+                EncoderCandidate {
+                    factory: "qsvh264enc",
+                    pipeline_fragment: format!(
+                        "qsvh264enc low-latency=true bitrate={bitrate_kbps} gop-size={key_interval}"
+                    ),
+                },
+                EncoderCandidate {
+                    factory: "openh264enc",
+                    pipeline_fragment: format!(
+                        "openh264enc bitrate={} gop-size={key_interval} complexity=low",
+                        bitrate_kbps.saturating_mul(1_000)
+                    ),
+                },
+                EncoderCandidate {
+                    factory: "x264enc",
+                    pipeline_fragment: format!(
+                        "x264enc tune=zerolatency speed-preset=ultrafast bitrate={bitrate_kbps} key-int-max={key_interval} bframes=0"
+                    ),
+                },
+            ];
+
+            for candidate in candidates {
+                if gst::ElementFactory::find(candidate.factory).is_none() {
+                    continue;
+                }
+                if let Ok(encoder) = Self::build(
+                    width,
+                    height,
+                    frames_per_second,
+                    candidate.factory,
+                    &candidate.pipeline_fragment,
+                ) {
+                    return Ok(encoder);
+                }
+            }
+            Err(H264EncoderError::PipelineUnavailable)
+        }
+
+        fn build(
+            width: u16,
+            height: u16,
+            frames_per_second: u8,
+            encoder: &'static str,
+            encoder_fragment: &str,
+        ) -> Result<Self, H264EncoderError> {
+            let description = format!(
+                "appsrc name=remotedesk_source is-live=true block=true format=time caps=video/x-raw,format=BGRA,width={width},height={height},framerate={frames_per_second}/1 \
+                 ! queue max-size-buffers=2 max-size-bytes=0 max-size-time=0 \
+                 ! videoconvert ! {encoder_fragment} \
+                 ! h264parse config-interval=-1 \
+                 ! video/x-h264,stream-format=byte-stream,alignment=au,profile=constrained-baseline \
+                 ! appsink name=remotedesk_sink sync=false max-buffers=2 drop=true"
+            );
+            let pipeline = gst::parse::launch(&description)
+                .map_err(|_| H264EncoderError::PipelineFailure)?
+                .downcast::<gst::Pipeline>()
+                .map_err(|_| H264EncoderError::PipelineFailure)?;
+            let source = pipeline
+                .by_name("remotedesk_source")
+                .ok_or(H264EncoderError::PipelineFailure)?
+                .downcast::<gst_app::AppSrc>()
+                .map_err(|_| H264EncoderError::PipelineFailure)?;
+            let sink = pipeline
+                .by_name("remotedesk_sink")
+                .ok_or(H264EncoderError::PipelineFailure)?
+                .downcast::<gst_app::AppSink>()
+                .map_err(|_| H264EncoderError::PipelineFailure)?;
+            pipeline
+                .set_state(gst::State::Playing)
+                .map_err(|_| H264EncoderError::PipelineFailure)?;
+            Ok(Self {
+                pipeline,
+                source,
+                sink,
+                width,
+                height,
+                frames_per_second,
+                next_pts_ns: 0,
+                encoder,
+            })
+        }
+
+        #[must_use]
+        pub const fn matches(&self, width: u16, height: u16, frames_per_second: u8) -> bool {
+            self.width == width
+                && self.height == height
+                && self.frames_per_second == frames_per_second
+        }
+
+        pub fn encode(&mut self, bgra: &[u8]) -> Result<EncodedH264AccessUnit, H264EncoderError> {
+            let expected = usize::from(self.width)
+                .checked_mul(usize::from(self.height))
+                .and_then(|pixels| pixels.checked_mul(4))
+                .ok_or(H264EncoderError::InvalidConfiguration)?;
+            if bgra.len() != expected {
+                return Err(H264EncoderError::InvalidConfiguration);
+            }
+            let started = Instant::now();
+            let duration = Duration::from_secs_f64(1.0 / f64::from(self.frames_per_second));
+            let duration_ns = u64::try_from(duration.as_nanos())
+                .map_err(|_| H264EncoderError::InvalidConfiguration)?;
+            let mut buffer = gst::Buffer::from_mut_slice(bgra.to_vec());
+            {
+                let buffer = buffer.get_mut().ok_or(H264EncoderError::PipelineFailure)?;
+                buffer.set_pts(gst::ClockTime::from_nseconds(self.next_pts_ns));
+                buffer.set_duration(gst::ClockTime::from_nseconds(duration_ns));
+            }
+            self.next_pts_ns = self.next_pts_ns.saturating_add(duration_ns);
+            self.source
+                .push_buffer(buffer)
+                .map_err(|_| H264EncoderError::PipelineFailure)?;
+            let sample = self
+                .sink
+                .try_pull_sample(gst::ClockTime::from_mseconds(750))
+                .ok_or(H264EncoderError::OutputTimeout)?;
+            let output = sample
+                .buffer()
+                .ok_or(H264EncoderError::InvalidOutput)?
+                .map_readable()
+                .map_err(|_| H264EncoderError::InvalidOutput)?;
+            let data = output.as_slice().to_vec();
+            if data.is_empty() {
+                return Err(H264EncoderError::InvalidOutput);
+            }
+            Ok(EncodedH264AccessUnit {
+                keyframe: annex_b_contains_idr(&data),
+                data,
+                width: self.width,
+                height: self.height,
+                duration,
+                encode_latency: started.elapsed(),
+                encoder: self.encoder,
+            })
+        }
+    }
+
+    impl PortalH264Encoder {
+        pub fn new(
+            pipewire_fd: BorrowedFd<'_>,
+            pipewire_node_id: u32,
+            max_width: u16,
+            max_height: u16,
+            frames_per_second: u8,
+        ) -> Result<Self, H264EncoderError> {
+            validate_configuration(max_width, max_height, frames_per_second)?;
+            if pipewire_node_id == 0 {
+                return Err(H264EncoderError::InvalidConfiguration);
+            }
+            gst::init().map_err(|_| H264EncoderError::RuntimeUnavailable)?;
+            let bitrate_kbps = target_bitrate_kbps(max_width, max_height, frames_per_second);
+            let key_interval = u16::from(frames_per_second).saturating_mul(2);
+            let candidates = [
+                PortalEncoderCandidate {
+                    factory: "vah264enc",
+                    post_processor: "vapostproc",
+                    surface_caps: "video/x-raw(memory:VAMemory)",
+                    encoder_fragment: format!(
+                        "vah264enc rate-control=cbr bitrate={bitrate_kbps} key-int-max={key_interval}"
+                    ),
+                },
+                PortalEncoderCandidate {
+                    factory: "vaapih264enc",
+                    post_processor: "vaapipostproc",
+                    surface_caps: "video/x-raw(memory:VASurface)",
+                    encoder_fragment: format!(
+                        "vaapih264enc rate-control=cbr bitrate={bitrate_kbps} keyframe-period={key_interval}"
+                    ),
+                },
+            ];
+            for candidate in candidates {
+                if gst::ElementFactory::find("pipewiresrc").is_none()
+                    || gst::ElementFactory::find(candidate.post_processor).is_none()
+                    || gst::ElementFactory::find(candidate.factory).is_none()
+                {
+                    continue;
+                }
+                let description = portal_pipeline_description(
+                    pipewire_fd.as_raw_fd(),
+                    pipewire_node_id,
+                    max_width,
+                    max_height,
+                    frames_per_second,
+                    &candidate,
+                );
+                let Ok(element) = gst::parse::launch(&description) else {
+                    continue;
+                };
+                let Ok(pipeline) = element.downcast::<gst::Pipeline>() else {
+                    continue;
+                };
+                let Some(sink) = pipeline
+                    .by_name("remotedesk_portal_sink")
+                    .and_then(|element| element.downcast::<gst_app::AppSink>().ok())
+                else {
+                    continue;
+                };
+                if pipeline.set_state(gst::State::Playing).is_err() {
+                    let _ = pipeline.set_state(gst::State::Null);
+                    continue;
+                }
+                return Ok(Self {
+                    pipeline,
+                    sink,
+                    max_width,
+                    max_height,
+                    frames_per_second,
+                    encoder: candidate.factory,
+                });
+            }
+            Err(H264EncoderError::StrictZeroCopyUnavailable)
+        }
+
+        pub fn next_access_unit(&mut self) -> Result<EncodedH264AccessUnit, H264EncoderError> {
+            let started = Instant::now();
+            let sample = self
+                .sink
+                .try_pull_sample(gst::ClockTime::from_mseconds(750))
+                .ok_or(H264EncoderError::OutputTimeout)?;
+            let caps = sample.caps().ok_or(H264EncoderError::InvalidOutput)?;
+            let structure = caps.structure(0).ok_or(H264EncoderError::InvalidOutput)?;
+            let width = structure
+                .get::<i32>("width")
+                .ok()
+                .and_then(|value| u16::try_from(value).ok())
+                .filter(|value| (200..=self.max_width).contains(value))
+                .ok_or(H264EncoderError::InvalidOutput)?;
+            let height = structure
+                .get::<i32>("height")
+                .ok()
+                .and_then(|value| u16::try_from(value).ok())
+                .filter(|value| (200..=self.max_height).contains(value))
+                .ok_or(H264EncoderError::InvalidOutput)?;
+            let buffer = sample.buffer().ok_or(H264EncoderError::InvalidOutput)?;
+            let duration = buffer.duration().map_or_else(
+                || Duration::from_secs_f64(1.0 / f64::from(self.frames_per_second)),
+                |duration| Duration::from_nanos(duration.nseconds()),
+            );
+            let output = buffer
+                .map_readable()
+                .map_err(|_| H264EncoderError::InvalidOutput)?;
+            let data = output.as_slice().to_vec();
+            if data.is_empty() {
+                return Err(H264EncoderError::InvalidOutput);
+            }
+            Ok(EncodedH264AccessUnit {
+                keyframe: annex_b_contains_idr(&data),
+                data,
+                width,
+                height,
+                duration,
+                encode_latency: started.elapsed(),
+                encoder: self.encoder,
+            })
+        }
+    }
+
+    impl Drop for PortalH264Encoder {
+        fn drop(&mut self) {
+            let _ = self.pipeline.set_state(gst::State::Null);
+        }
+    }
+
+    pub(super) struct PortalEncoderCandidate {
+        pub(super) factory: &'static str,
+        pub(super) post_processor: &'static str,
+        pub(super) surface_caps: &'static str,
+        pub(super) encoder_fragment: String,
+    }
+
+    pub(super) fn portal_pipeline_description(
+        pipewire_fd: i32,
+        pipewire_node_id: u32,
+        max_width: u16,
+        max_height: u16,
+        frames_per_second: u8,
+        candidate: &PortalEncoderCandidate,
+    ) -> String {
+        format!(
+            "pipewiresrc name=remotedesk_portal_source fd={pipewire_fd} path={pipewire_node_id} do-timestamp=true \
+             ! video/x-raw(memory:DMABuf) \
+             ! queue max-size-buffers=2 max-size-bytes=0 max-size-time=0 leaky=downstream \
+             ! {} \
+             ! {},format=NV12,width=[200,{max_width}],height=[200,{max_height}],framerate=[1/1,{frames_per_second}/1] \
+             ! {} \
+             ! h264parse config-interval=-1 \
+             ! video/x-h264,stream-format=byte-stream,alignment=au,profile=constrained-baseline \
+             ! appsink name=remotedesk_portal_sink sync=false max-buffers=2 drop=true",
+            candidate.post_processor, candidate.surface_caps, candidate.encoder_fragment
+        )
+    }
+
+    impl Drop for H264Encoder {
+        fn drop(&mut self) {
+            let _ = self.pipeline.set_state(gst::State::Null);
+        }
+    }
+
+    fn validate_configuration(
+        width: u16,
+        height: u16,
+        frames_per_second: u8,
+    ) -> Result<(), H264EncoderError> {
+        if !(200..=MAX_DIMENSION).contains(&width)
+            || !(200..=MAX_DIMENSION).contains(&height)
+            || !(1..=30).contains(&frames_per_second)
+        {
+            return Err(H264EncoderError::InvalidConfiguration);
+        }
+        Ok(())
+    }
+
+    fn target_bitrate_kbps(width: u16, height: u16, frames_per_second: u8) -> u64 {
+        let pixels_per_second = u64::from(width)
+            .saturating_mul(u64::from(height))
+            .saturating_mul(u64::from(frames_per_second));
+        (pixels_per_second / 12_000).clamp(1_000, 20_000)
+    }
+}
+
+#[cfg(not(feature = "gstreamer-h264"))]
+mod implementation {
+    use super::{EncodedH264AccessUnit, H264EncoderError};
+    use std::os::fd::BorrowedFd;
+
+    pub struct H264Encoder;
+    pub struct PortalH264Encoder;
+
+    impl H264Encoder {
+        pub fn new(_: u16, _: u16, _: u8) -> Result<Self, H264EncoderError> {
+            Err(H264EncoderError::RuntimeUnavailable)
+        }
+
+        #[must_use]
+        pub const fn matches(&self, _: u16, _: u16, _: u8) -> bool {
+            false
+        }
+
+        pub fn encode(&mut self, _: &[u8]) -> Result<EncodedH264AccessUnit, H264EncoderError> {
+            Err(H264EncoderError::RuntimeUnavailable)
+        }
+    }
+
+    impl PortalH264Encoder {
+        pub fn new(
+            _: BorrowedFd<'_>,
+            _: u32,
+            _: u16,
+            _: u16,
+            _: u8,
+        ) -> Result<Self, H264EncoderError> {
+            Err(H264EncoderError::RuntimeUnavailable)
+        }
+
+        pub fn next_access_unit(&mut self) -> Result<EncodedH264AccessUnit, H264EncoderError> {
+            Err(H264EncoderError::RuntimeUnavailable)
+        }
+    }
+}
+
+pub use implementation::{H264Encoder, PortalH264Encoder};
+
+fn annex_b_contains_idr(data: &[u8]) -> bool {
+    let mut index = 0;
+    while index + 4 <= data.len() {
+        let start_code = if data[index..].starts_with(&[0, 0, 1]) {
+            3
+        } else if data[index..].starts_with(&[0, 0, 0, 1]) {
+            4
+        } else {
+            index += 1;
+            continue;
+        };
+        let header = index + start_code;
+        if header < data.len() && data[header] & 0x1f == 5 {
+            return true;
+        }
+        index = header.saturating_add(1);
+    }
+    false
+}
+
+#[cfg(test)]
+mod tests {
+    use super::annex_b_contains_idr;
+
+    #[cfg(feature = "gstreamer-h264")]
+    use super::implementation::{PortalEncoderCandidate, portal_pipeline_description};
+
+    #[test]
+    fn detects_idr_in_three_and_four_byte_annex_b_start_codes() {
+        assert!(annex_b_contains_idr(&[0, 0, 1, 0x65, 1]));
+        assert!(annex_b_contains_idr(&[0, 0, 0, 1, 0x67, 0, 0, 1, 0x65]));
+        assert!(!annex_b_contains_idr(&[0, 0, 0, 1, 0x41, 1]));
+    }
+
+    #[cfg(feature = "gstreamer-h264")]
+    #[test]
+    fn portal_pipeline_requires_dmabuf_and_hardware_surfaces() {
+        let candidate = PortalEncoderCandidate {
+            factory: "vah264enc",
+            post_processor: "vapostproc",
+            surface_caps: "video/x-raw(memory:VAMemory)",
+            encoder_fragment: "vah264enc rate-control=cbr bitrate=4000 key-int-max=30".into(),
+        };
+        let description = portal_pipeline_description(7, 42, 1920, 1080, 30, &candidate);
+        assert!(description.contains("video/x-raw(memory:DMABuf)"));
+        assert!(description.contains("video/x-raw(memory:VAMemory)"));
+        assert!(description.contains("fd=7 path=42"));
+        for forbidden in ["appsrc", "videoconvert", "x264enc", "openh264enc"] {
+            assert!(!description.contains(forbidden));
+        }
+    }
+}
diff --git a/agent/agent-runtime/src/lib.rs b/agent/agent-runtime/src/lib.rs
new file mode 100644
index 0000000..2c86b89
--- /dev/null
+++ b/agent/agent-runtime/src/lib.rs
@@ -0,0 +1,124 @@
+//! Runtime support shared by the `RemoteDesk` Linux agent processes.
+
+mod clipboard;
+mod desktop;
+mod edge_negotiation;
+mod edge_presence;
+mod edge_relay;
+#[cfg(target_os = "linux")]
+mod h264_encoder;
+#[cfg(target_os = "linux")]
+mod linux_desktop;
+#[cfg(target_os = "linux")]
+mod opus_capture;
+mod pairing;
+mod protocol;
+mod state;
+#[cfg(all(target_os = "linux", feature = "wayland-eis"))]
+mod wayland_eis;
+#[cfg(all(target_os = "linux", not(feature = "wayland-eis")))]
+mod wayland_eis {
+    use crate::DesktopInputEvent;
+    use std::{fmt, os::fd::BorrowedFd};
+
+    #[derive(Debug, Clone, Copy, PartialEq, Eq)]
+    pub enum WaylandEisError {
+        Unsupported,
+    }
+    impl WaylandEisError {
+        pub const fn code(self) -> &'static str {
+            "wayland_eis_unavailable"
+        }
+    }
+    impl fmt::Display for WaylandEisError {
+        fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+            f.write_str("Wayland EIS input is unavailable in this static build")
+        }
+    }
+    impl std::error::Error for WaylandEisError {}
+    pub struct WaylandEisInput;
+    impl WaylandEisInput {
+        pub async fn connect(
+            _: BorrowedFd<'_>,
+            _: u16,
+            _: u16,
+            _: Option<&str>,
+        ) -> Result<Self, WaylandEisError> {
+            Err(WaylandEisError::Unsupported)
+        }
+        pub fn set_frame_size(&mut self, _: u16, _: u16) -> Result<(), WaylandEisError> {
+            Err(WaylandEisError::Unsupported)
+        }
+        pub fn input(&mut self, _: &DesktopInputEvent) -> Result<(), WaylandEisError> {
+            Err(WaylandEisError::Unsupported)
+        }
+        pub fn release_all(&mut self) -> Result<(), WaylandEisError> {
+            Ok(())
+        }
+    }
+}
+#[cfg(target_os = "linux")]
+mod wayland_portal;
+mod webrtc_session;
+#[cfg(target_os = "linux")]
+mod x11_clipboard;
+#[cfg(target_os = "linux")]
+mod x11_desktop;
+
+pub use clipboard::{
+    ClipboardTextError, PreparedClipboardText, decode_clipboard_text, normalize_clipboard_text,
+    prepare_clipboard_text, validate_clipboard_offer,
+};
+pub use desktop::{
+    DesktopCompressionController, DesktopFrameAssembler, DesktopFrameBuildError, DesktopFramePacer,
+    EncodedDesktopFrame, encode_desktop_frame, encode_desktop_frame_with_level,
+    validate_desktop_input,
+};
+pub use edge_negotiation::{
+    EdgeNegotiationClient, EdgeNegotiationError, EdgeNegotiationMessage, EdgeNegotiationPoll,
+    EdgeNegotiationSession,
+};
+pub use edge_presence::{
+    DesktopMediaEvent, DesktopMediaSession, EdgePresenceClient, EdgePresenceConfig,
+    EdgePresenceError, edge_device_id,
+};
+pub use edge_relay::{EdgeRelayAccess, RelayStream, connect_edge_relay};
+#[cfg(target_os = "linux")]
+pub use h264_encoder::{EncodedH264AccessUnit, H264Encoder, H264EncoderError, PortalH264Encoder};
+#[cfg(target_os = "linux")]
+pub use linux_desktop::{DesktopBackendKind, LinuxDesktop};
+#[cfg(target_os = "linux")]
+pub use opus_capture::{EncodedOpusPacket, OpusCapture, OpusCaptureError};
+pub use pairing::{AuthChallenge, PairingCode, verify_auth_signature};
+pub use protocol::{
+    CLIPBOARD_PROTOCOL_MINOR, ClientCommand, DESKTOP_FRAME_CHUNK_BYTES, DESKTOP_H264_CHUNK_BYTES,
+    DESKTOP_MAX_CLIPBOARD_BYTES, DESKTOP_MAX_COMPRESSED_BYTES, DESKTOP_MAX_FRAME_BYTES,
+    DESKTOP_MAX_H264_ACCESS_UNIT_BYTES, DESKTOP_MAX_OPUS_PACKET_BYTES, DESKTOP_MAX_PIXELS,
+    DesktopButton, DesktopFrameEncoding, DesktopFrameMetadata, DesktopH264Metadata,
+    DesktopInputEvent, DesktopKeyState, DesktopVideoMode, FILE_CHUNK_BYTES, FileResult,
+    FileTransferReady, IpcMessage, IpcResponse, MAX_FILE_BYTES, MAX_RELATIVE_POINTER_DELTA,
+    OPUS_AUDIO_PROTOCOL_MINOR, PROTOCOL_MAJOR, PROTOCOL_MINOR, ServerEvent, ShellCommand,
+    ShellEvent,
+};
+pub use state::{
+    AgentState, ClientGrant, DeviceIdentity, EdgePresenceStatus, PairingGrant, StateError,
+    unix_timestamp,
+};
+#[cfg(target_os = "linux")]
+pub use wayland_eis::{WaylandEisError, WaylandEisInput};
+#[cfg(target_os = "linux")]
+pub use wayland_portal::{
+    WaylandPortalCapabilities, WaylandPortalProbeError, WaylandPortalSession,
+    WaylandPortalSessionError, WaylandPortalStream, open_wayland_portal_session,
+    probe_wayland_portal,
+};
+pub use webrtc_session::{
+    EdgeWebRtcRole, EncodedMediaSender, RemoteH264AccessUnit, RemoteH264Event, RemoteH264Stream,
+    RemoteMediaTrack, RemoteOpusPacket, RemoteOpusStream, WebRtcConnectionState, WebRtcIceServer,
+    WebRtcSession, WebRtcSessionConfig, WebRtcSessionError, WebRtcSignalMessage,
+    WebRtcSignalTransport, establish_edge_webrtc, establish_webrtc,
+};
+#[cfg(target_os = "linux")]
+pub use x11_clipboard::X11Clipboard;
+#[cfg(target_os = "linux")]
+pub use x11_desktop::{CapturedDesktopFrame, X11Desktop};
diff --git a/agent/agent-runtime/src/linux_desktop.rs b/agent/agent-runtime/src/linux_desktop.rs
new file mode 100644
index 0000000..344206b
--- /dev/null
+++ b/agent/agent-runtime/src/linux_desktop.rs
@@ -0,0 +1,113 @@
+use std::ffi::OsStr;
+
+use crate::{CapturedDesktopFrame, DesktopInputEvent, X11Desktop};
+
+type Error = Box<dyn std::error::Error + Send + Sync>;
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum DesktopBackendKind {
+    Wayland,
+    X11,
+    Headless,
+}
+
+impl DesktopBackendKind {
+    #[must_use]
+    pub fn detect(wayland_display: Option<&OsStr>, x11_display: Option<&OsStr>) -> Self {
+        if wayland_display.is_some_and(|value| !value.is_empty()) {
+            Self::Wayland
+        } else if x11_display.is_some_and(|value| !value.is_empty()) {
+            Self::X11
+        } else {
+            Self::Headless
+        }
+    }
+
+    #[must_use]
+    pub fn from_environment() -> Self {
+        Self::detect(
+            std::env::var_os("WAYLAND_DISPLAY").as_deref(),
+            std::env::var_os("DISPLAY").as_deref(),
+        )
+    }
+
+    #[must_use]
+    pub const fn as_str(self) -> &'static str {
+        match self {
+            Self::Wayland => "wayland",
+            Self::X11 => "x11",
+            Self::Headless => "headless",
+        }
+    }
+}
+
+pub enum LinuxDesktop {
+    X11(X11Desktop),
+}
+
+impl LinuxDesktop {
+    pub fn connect(backend: DesktopBackendKind) -> Result<Self, Error> {
+        match backend {
+            DesktopBackendKind::X11 => X11Desktop::connect().map(Self::X11),
+            DesktopBackendKind::Wayland => {
+                Err("Wayland requires an authorized Portal desktop session".into())
+            }
+            DesktopBackendKind::Headless => Err("no graphical desktop session is available".into()),
+        }
+    }
+
+    pub fn capture(
+        &mut self,
+        max_width: u16,
+        max_height: u16,
+    ) -> Result<CapturedDesktopFrame, Error> {
+        match self {
+            Self::X11(desktop) => desktop.capture(max_width, max_height),
+        }
+    }
+
+    pub fn input(&mut self, event: &DesktopInputEvent) -> Result<(), Error> {
+        match self {
+            Self::X11(desktop) => desktop.input(event),
+        }
+    }
+
+    pub fn release_all(&mut self) -> Result<(), Error> {
+        match self {
+            Self::X11(desktop) => desktop.release_all(),
+        }
+    }
+
+    pub fn poll_clipboard_text(&mut self) -> Result<Option<String>, Error> {
+        match self {
+            Self::X11(desktop) => desktop.poll_clipboard_text(),
+        }
+    }
+
+    pub fn set_clipboard_text(&mut self, text: &str) -> Result<(), Error> {
+        match self {
+            Self::X11(desktop) => desktop.set_clipboard_text(text),
+        }
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn backend_detection_prefers_wayland_and_rejects_empty_environment_values() {
+        assert_eq!(
+            DesktopBackendKind::detect(Some(OsStr::new("wayland-0")), Some(OsStr::new(":0"))),
+            DesktopBackendKind::Wayland
+        );
+        assert_eq!(
+            DesktopBackendKind::detect(None, Some(OsStr::new(":0"))),
+            DesktopBackendKind::X11
+        );
+        assert_eq!(
+            DesktopBackendKind::detect(Some(OsStr::new("")), Some(OsStr::new(""))),
+            DesktopBackendKind::Headless
+        );
+    }
+}
diff --git a/agent/agent-runtime/src/opus_capture.rs b/agent/agent-runtime/src/opus_capture.rs
new file mode 100644
index 0000000..03526df
--- /dev/null
+++ b/agent/agent-runtime/src/opus_capture.rs
@@ -0,0 +1,195 @@
+use std::{fmt, time::Duration};
+
+use crate::DESKTOP_MAX_OPUS_PACKET_BYTES;
+
+pub const OPUS_SAMPLE_RATE: u32 = 48_000;
+pub const OPUS_CHANNELS: u16 = 2;
+
+#[derive(Clone, Debug)]
+pub struct EncodedOpusPacket {
+    pub data: Vec<u8>,
+    pub duration: Duration,
+    pub encode_latency: Duration,
+}
+
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub enum OpusCaptureError {
+    RuntimeUnavailable,
+    AudioMonitorUnavailable,
+    PipelineFailure,
+    OutputTimeout,
+    InvalidOutput,
+}
+
+impl OpusCaptureError {
+    #[must_use]
+    pub const fn reason_code(self) -> &'static str {
+        match self {
+            Self::RuntimeUnavailable => "gstreamer_unavailable",
+            Self::AudioMonitorUnavailable => "audio_monitor_unavailable",
+            Self::PipelineFailure => "opus_pipeline_failed",
+            Self::OutputTimeout => "opus_output_timeout",
+            Self::InvalidOutput => "invalid_opus_output",
+        }
+    }
+}
+
+impl fmt::Display for OpusCaptureError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        formatter.write_str(self.reason_code())
+    }
+}
+
+impl std::error::Error for OpusCaptureError {}
+
+#[cfg(feature = "gstreamer-h264")]
+mod implementation {
+    use super::{
+        DESKTOP_MAX_OPUS_PACKET_BYTES, EncodedOpusPacket, OPUS_CHANNELS, OPUS_SAMPLE_RATE,
+        OpusCaptureError, valid_monitor_name,
+    };
+    use gstreamer as gst;
+    use gstreamer::prelude::*;
+    use gstreamer_app as gst_app;
+    use gstreamer_app::prelude::*;
+    use std::time::{Duration, Instant};
+
+    const DEFAULT_MONITOR: &str = "@DEFAULT_MONITOR@";
+
+    pub struct OpusCapture {
+        pipeline: gst::Pipeline,
+        sink: gst_app::AppSink,
+    }
+
+    impl OpusCapture {
+        pub fn new() -> Result<Self, OpusCaptureError> {
+            gst::init().map_err(|_| OpusCaptureError::RuntimeUnavailable)?;
+            for factory in ["pulsesrc"] {
+                if gst::ElementFactory::find(factory).is_none()
+                    || gst::ElementFactory::find("opusenc").is_none()
+                {
+                    continue;
+                }
+                let description = format!(
+                    "{factory} name=remotedesk_audio_source do-timestamp=true \
+                     ! queue leaky=downstream max-size-buffers=8 max-size-bytes=0 max-size-time=0 \
+                     ! audioconvert ! audioresample \
+                     ! audio/x-raw,format=S16LE,rate={OPUS_SAMPLE_RATE},channels={OPUS_CHANNELS} \
+                     ! opusenc bitrate=96000 frame-size=20 audio-type=restricted-lowdelay inband-fec=true packet-loss-percentage=5 dtx=true \
+                     ! audio/x-opus,rate={OPUS_SAMPLE_RATE},channels={OPUS_CHANNELS},channel-mapping-family=0 \
+                     ! appsink name=remotedesk_audio_sink sync=false max-buffers=8 drop=true"
+                );
+                let Ok(element) = gst::parse::launch(&description) else {
+                    continue;
+                };
+                let Ok(pipeline) = element.downcast::<gst::Pipeline>() else {
+                    continue;
+                };
+                let Some(source) = pipeline.by_name("remotedesk_audio_source") else {
+                    continue;
+                };
+                let monitor = std::env::var("REMOTEDESK_AUDIO_MONITOR")
+                    .ok()
+                    .filter(|value| valid_monitor_name(value))
+                    .unwrap_or_else(|| DEFAULT_MONITOR.to_owned());
+                source.set_property("device", monitor);
+                let Some(sink) = pipeline
+                    .by_name("remotedesk_audio_sink")
+                    .and_then(|element| element.downcast::<gst_app::AppSink>().ok())
+                else {
+                    continue;
+                };
+                if pipeline.set_state(gst::State::Playing).is_err() {
+                    let _ = pipeline.set_state(gst::State::Null);
+                    continue;
+                }
+                return Ok(Self { pipeline, sink });
+            }
+            Err(OpusCaptureError::AudioMonitorUnavailable)
+        }
+
+        pub fn next_packet(&mut self) -> Result<EncodedOpusPacket, OpusCaptureError> {
+            let started = Instant::now();
+            let sample = self
+                .sink
+                .try_pull_sample(gst::ClockTime::from_mseconds(250))
+                .ok_or(OpusCaptureError::OutputTimeout)?;
+            let caps = sample.caps().ok_or(OpusCaptureError::InvalidOutput)?;
+            let structure = caps.structure(0).ok_or(OpusCaptureError::InvalidOutput)?;
+            if structure.name() != "audio/x-opus"
+                || structure.get::<i32>("rate").ok() != Some(OPUS_SAMPLE_RATE as i32)
+                || structure.get::<i32>("channels").ok() != Some(i32::from(OPUS_CHANNELS))
+            {
+                return Err(OpusCaptureError::InvalidOutput);
+            }
+            let buffer = sample.buffer().ok_or(OpusCaptureError::InvalidOutput)?;
+            let duration = buffer
+                .duration()
+                .map(|value| Duration::from_nanos(value.nseconds()))
+                .filter(|value| {
+                    *value >= Duration::from_micros(2_500) && *value <= Duration::from_millis(120)
+                })
+                .ok_or(OpusCaptureError::InvalidOutput)?;
+            let mapped = buffer
+                .map_readable()
+                .map_err(|_| OpusCaptureError::InvalidOutput)?;
+            let data = mapped.as_slice();
+            if data.is_empty() || data.len() > DESKTOP_MAX_OPUS_PACKET_BYTES {
+                return Err(OpusCaptureError::InvalidOutput);
+            }
+            Ok(EncodedOpusPacket {
+                data: data.to_vec(),
+                duration,
+                encode_latency: started.elapsed(),
+            })
+        }
+    }
+
+    impl Drop for OpusCapture {
+        fn drop(&mut self) {
+            let _ = self.pipeline.set_state(gst::State::Null);
+        }
+    }
+}
+
+#[cfg(not(feature = "gstreamer-h264"))]
+mod implementation {
+    use super::{EncodedOpusPacket, OpusCaptureError};
+
+    pub struct OpusCapture;
+
+    impl OpusCapture {
+        pub fn new() -> Result<Self, OpusCaptureError> {
+            Err(OpusCaptureError::RuntimeUnavailable)
+        }
+
+        pub fn next_packet(&mut self) -> Result<EncodedOpusPacket, OpusCaptureError> {
+            Err(OpusCaptureError::RuntimeUnavailable)
+        }
+    }
+}
+
+pub use implementation::OpusCapture;
+
+fn valid_monitor_name(value: &str) -> bool {
+    !value.is_empty()
+        && value.len() <= 256
+        && value
+            .bytes()
+            .all(|byte| byte.is_ascii_alphanumeric() || matches!(byte, b'.' | b'-' | b'_' | b'@'))
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn monitor_name_is_bounded_and_not_pipeline_syntax() {
+        assert!(valid_monitor_name("alsa_output.pci.monitor"));
+        assert!(valid_monitor_name("@DEFAULT_MONITOR@"));
+        assert!(!valid_monitor_name(""));
+        assert!(!valid_monitor_name("monitor ! fakesink"));
+        assert!(!valid_monitor_name("monitor\nnext"));
+        assert!(!valid_monitor_name(&"x".repeat(257)));
+    }
+}
diff --git a/agent/agent-runtime/src/pairing.rs b/agent/agent-runtime/src/pairing.rs
new file mode 100644
index 0000000..abec797
--- /dev/null
+++ b/agent/agent-runtime/src/pairing.rs
@@ -0,0 +1,156 @@
+use base64::{Engine as _, engine::general_purpose::STANDARD_NO_PAD};
+use ed25519_dalek::{Signature, Verifier, VerifyingKey};
+use rand::RngCore as _;
+use sha2::{Digest as _, Sha256};
+
+const AUTH_DOMAIN: &[u8] = b"remotedesk-agent-auth-v1\0";
+
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct PairingCode(String);
+
+impl PairingCode {
+    #[must_use]
+    pub fn generate() -> Self {
+        let mut bytes = [0_u8; 8];
+        rand::rng().fill_bytes(&mut bytes);
+        let value = u64::from_le_bytes(bytes) % 100_000_000;
+        Self(format!("{value:08}"))
+    }
+
+    /// Parses the fixed-width decimal representation shown to the local user.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error unless `value` contains exactly eight ASCII digits.
+    pub fn parse(value: &str) -> Result<Self, &'static str> {
+        if value.len() != 8 || !value.bytes().all(|byte| byte.is_ascii_digit()) {
+            return Err("pairing code must contain exactly eight ASCII digits");
+        }
+        Ok(Self(value.to_owned()))
+    }
+
+    #[must_use]
+    pub fn expose(&self) -> &str {
+        &self.0
+    }
+
+    #[must_use]
+    pub fn salted_digest(&self, salt: &[u8]) -> String {
+        let mut digest = Sha256::new();
+        digest.update(b"remotedesk-pairing-code-v1\0");
+        digest.update(salt);
+        digest.update(self.0.as_bytes());
+        STANDARD_NO_PAD.encode(digest.finalize())
+    }
+}
+
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct AuthChallenge([u8; 32]);
+
+impl AuthChallenge {
+    #[must_use]
+    pub fn generate() -> Self {
+        let mut bytes = [0_u8; 32];
+        rand::rng().fill_bytes(&mut bytes);
+        Self(bytes)
+    }
+
+    #[must_use]
+    pub fn encoded(&self) -> String {
+        STANDARD_NO_PAD.encode(self.0)
+    }
+
+    /// Parses the challenge representation sent in [`crate::ServerEvent::Hello`].
+    ///
+    /// # Errors
+    ///
+    /// Returns an error when `value` is not valid unpadded base64 or does not decode to 32 bytes.
+    pub fn parse_encoded(value: &str) -> Result<Self, &'static str> {
+        let bytes = STANDARD_NO_PAD
+            .decode(value)
+            .map_err(|_| "authentication challenge is not valid base64")?;
+        let challenge: [u8; 32] = bytes
+            .try_into()
+            .map_err(|_| "authentication challenge must contain 32 bytes")?;
+        Ok(Self(challenge))
+    }
+
+    #[must_use]
+    pub fn signing_payload(&self) -> Vec<u8> {
+        let mut payload = Vec::with_capacity(AUTH_DOMAIN.len() + self.0.len());
+        payload.extend_from_slice(AUTH_DOMAIN);
+        payload.extend_from_slice(&self.0);
+        payload
+    }
+}
+
+/// Verifies that a client signed the domain-separated server challenge.
+///
+/// # Errors
+///
+/// Returns an error for malformed keys/signatures or a failed signature check.
+pub fn verify_auth_signature(
+    public_key: &str,
+    signature: &str,
+    challenge: &AuthChallenge,
+) -> Result<(), &'static str> {
+    let public_bytes = STANDARD_NO_PAD
+        .decode(public_key)
+        .map_err(|_| "client public key is not valid base64")?;
+    let signature_bytes = STANDARD_NO_PAD
+        .decode(signature)
+        .map_err(|_| "client signature is not valid base64")?;
+    let public_array: [u8; 32] = public_bytes
+        .try_into()
+        .map_err(|_| "client public key must contain 32 bytes")?;
+    let signature = Signature::from_slice(&signature_bytes)
+        .map_err(|_| "client signature must contain 64 bytes")?;
+    let key = VerifyingKey::from_bytes(&public_array).map_err(|_| "invalid client public key")?;
+    key.verify(&challenge.signing_payload(), &signature)
+        .map_err(|_| "client signature verification failed")
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use ed25519_dalek::{Signer as _, SigningKey};
+
+    #[test]
+    fn pairing_codes_are_strictly_formatted() {
+        let code = PairingCode::generate();
+        assert_eq!(code.expose().len(), 8);
+        assert!(code.expose().bytes().all(|byte| byte.is_ascii_digit()));
+        assert!(PairingCode::parse("12345678").is_ok());
+        assert!(PairingCode::parse("1234-678").is_err());
+    }
+
+    #[test]
+    fn digest_is_salted_and_deterministic() {
+        let code = PairingCode::parse("12345678").unwrap();
+        assert_eq!(code.salted_digest(b"one"), code.salted_digest(b"one"));
+        assert_ne!(code.salted_digest(b"one"), code.salted_digest(b"two"));
+    }
+
+    #[test]
+    fn challenge_signature_is_verified() {
+        let signing = SigningKey::from_bytes(&[7_u8; 32]);
+        let challenge = AuthChallenge([9_u8; 32]);
+        let signature = signing.sign(&challenge.signing_payload());
+        let public = STANDARD_NO_PAD.encode(signing.verifying_key().as_bytes());
+        let signature = STANDARD_NO_PAD.encode(signature.to_bytes());
+        assert!(verify_auth_signature(&public, &signature, &challenge).is_ok());
+
+        let other = AuthChallenge([8_u8; 32]);
+        assert!(verify_auth_signature(&public, &signature, &other).is_err());
+    }
+
+    #[test]
+    fn encoded_challenge_round_trips_strictly() {
+        let challenge = AuthChallenge([3_u8; 32]);
+        assert_eq!(
+            AuthChallenge::parse_encoded(&challenge.encoded()).unwrap(),
+            challenge
+        );
+        assert!(AuthChallenge::parse_encoded("not base64").is_err());
+    }
+}
diff --git a/agent/agent-runtime/src/protocol.rs b/agent/agent-runtime/src/protocol.rs
new file mode 100644
index 0000000..4743958
--- /dev/null
+++ b/agent/agent-runtime/src/protocol.rs
@@ -0,0 +1,812 @@
+use serde::{Deserialize, Serialize};
+
+pub const PROTOCOL_MAJOR: u16 = 1;
+pub const PROTOCOL_MINOR: u16 = 15;
+pub const OPUS_AUDIO_PROTOCOL_MINOR: u16 = 14;
+pub const CLIPBOARD_PROTOCOL_MINOR: u16 = 15;
+pub const MAX_RELATIVE_POINTER_DELTA: u16 = 4_096;
+pub const FILE_CHUNK_BYTES: usize = 45 * 1024;
+pub const MAX_FILE_BYTES: u64 = 2 * 1024 * 1024 * 1024;
+pub const DESKTOP_FRAME_CHUNK_BYTES: usize = 45 * 1024;
+pub const DESKTOP_MAX_PIXELS: usize = 33_177_600;
+pub const DESKTOP_MAX_FRAME_BYTES: usize = DESKTOP_MAX_PIXELS * 4;
+pub const DESKTOP_MAX_COMPRESSED_BYTES: usize = 64 * 1024 * 1024;
+pub const DESKTOP_H264_CHUNK_BYTES: usize = 45 * 1024;
+pub const DESKTOP_MAX_H264_ACCESS_UNIT_BYTES: usize = 16 * 1024 * 1024;
+pub const DESKTOP_MAX_OPUS_PACKET_BYTES: usize = 4 * 1024;
+pub const DESKTOP_MAX_CLIPBOARD_BYTES: usize = 32 * 1024;
+
+#[derive(Clone, Copy, Debug, Deserialize, PartialEq, Eq, Serialize)]
+#[serde(rename_all = "snake_case")]
+pub enum DesktopFrameEncoding {
+    ZlibBgra,
+    WebRtcH264,
+}
+
+#[derive(Clone, Copy, Debug, Deserialize, PartialEq, Eq, Serialize)]
+#[serde(rename_all = "snake_case")]
+pub enum DesktopVideoMode {
+    ZlibBgra,
+    WebRtcH264,
+}
+
+#[derive(Clone, Debug, Deserialize, PartialEq, Eq, Serialize)]
+#[serde(deny_unknown_fields)]
+pub struct DesktopFrameMetadata {
+    pub sequence: u64,
+    pub width: u16,
+    pub height: u16,
+    pub encoding: DesktopFrameEncoding,
+    pub uncompressed_bytes: usize,
+    pub compressed_bytes: usize,
+    pub chunk_count: u16,
+    pub captured_at_unix_ms: u64,
+    pub capture_latency_us: u64,
+    pub encode_latency_us: u64,
+    pub compression_level: u8,
+}
+
+#[derive(Clone, Debug, Deserialize, PartialEq, Eq, Serialize)]
+#[serde(deny_unknown_fields)]
+pub struct DesktopH264Metadata {
+    pub sequence: u64,
+    pub width: u16,
+    pub height: u16,
+    pub captured_at_unix_ms: u64,
+    pub capture_latency_us: u64,
+    pub access_unit_bytes: usize,
+    pub chunk_count: u16,
+    pub duration_us: u64,
+    pub keyframe: bool,
+    pub encode_latency_us: u64,
+    pub encoder: String,
+}
+
+#[derive(Clone, Copy, Debug, Deserialize, PartialEq, Eq, Serialize)]
+#[serde(rename_all = "snake_case")]
+pub enum DesktopButton {
+    Left,
+    Middle,
+    Right,
+    Back,
+    Forward,
+}
+
+#[derive(Clone, Copy, Debug, Deserialize, PartialEq, Eq, Serialize)]
+#[serde(rename_all = "snake_case")]
+pub enum DesktopKeyState {
+    Pressed,
+    Released,
+}
+
+#[derive(Clone, Debug, Deserialize, PartialEq, Eq, Serialize)]
+#[serde(tag = "kind", rename_all = "snake_case", deny_unknown_fields)]
+pub enum DesktopInputEvent {
+    PointerMove {
+        x: u16,
+        y: u16,
+    },
+    PointerDelta {
+        delta_x: i16,
+        delta_y: i16,
+    },
+    PointerButton {
+        button: DesktopButton,
+        pressed: bool,
+    },
+    Wheel {
+        horizontal: i16,
+        vertical: i16,
+    },
+    Key {
+        keysym: u32,
+        state: DesktopKeyState,
+    },
+    ReleaseAll,
+}
+
+#[derive(Clone, Debug, Deserialize, Serialize)]
+#[serde(tag = "type", rename_all = "snake_case", deny_unknown_fields)]
+pub enum ClientCommand {
+    Pair {
+        protocol_major: u16,
+        protocol_minor: u16,
+        client_name: String,
+        client_public_key: String,
+        signature: String,
+        code: String,
+    },
+    Authenticate {
+        protocol_major: u16,
+        protocol_minor: u16,
+        client_public_key: String,
+        signature: String,
+    },
+    Status,
+    OpenTerminal {
+        user: String,
+        cols: u16,
+        rows: u16,
+    },
+    BeginDirectWebRtc {
+        user: String,
+        max_width: u16,
+        max_height: u16,
+        frames_per_second: u8,
+        #[serde(default)]
+        opus_audio: bool,
+        #[serde(default)]
+        clipboard_read: bool,
+        #[serde(default)]
+        clipboard_write: bool,
+    },
+    DirectWebRtcSignal {
+        kind: String,
+        payload: String,
+    },
+    AbortDirectWebRtc,
+    OpenDesktop {
+        user: String,
+        max_width: u16,
+        max_height: u16,
+        frames_per_second: u8,
+        #[serde(default)]
+        resume_token: Option<String>,
+        #[serde(default)]
+        client_fingerprint: Option<String>,
+        #[serde(default)]
+        edge_session_id: Option<String>,
+        #[serde(default)]
+        webrtc_h264: bool,
+        #[serde(default)]
+        opus_audio: bool,
+        #[serde(default)]
+        clipboard_read: bool,
+        #[serde(default)]
+        clipboard_write: bool,
+    },
+    DesktopInput {
+        event: DesktopInputEvent,
+    },
+    DesktopFrameAck {
+        sequence: u64,
+    },
+    DesktopH264FrameAck {
+        sequence: u64,
+    },
+    DesktopVideoMode {
+        mode: DesktopVideoMode,
+    },
+    DesktopResize {
+        max_width: u16,
+        max_height: u16,
+    },
+    DesktopPing {
+        nonce: u64,
+    },
+    DesktopClipboardOffer {
+        sequence: u64,
+        utf8_bytes: u32,
+        sha256: String,
+    },
+    DesktopClipboardRequest {
+        sequence: u64,
+    },
+    DesktopClipboardData {
+        sequence: u64,
+        data: String,
+    },
+    TerminalInput {
+        data: String,
+    },
+    TerminalResize {
+        cols: u16,
+        rows: u16,
+    },
+    TerminalSignal {
+        signal: String,
+    },
+    UploadFile {
+        user: String,
+        path: String,
+        size: u64,
+        sha256: String,
+        transfer_id: String,
+    },
+    DownloadFile {
+        user: String,
+        path: String,
+        offset: u64,
+    },
+    FileChunk {
+        data: String,
+    },
+    FileCommit,
+    Close,
+}
+
+#[derive(Clone, Debug, Deserialize, Serialize)]
+#[serde(tag = "type", rename_all = "snake_case", deny_unknown_fields)]
+pub enum ServerEvent {
+    Hello {
+        protocol_major: u16,
+        protocol_minor: u16,
+        device_public_key: String,
+        tls_certificate_sha256: String,
+        challenge: String,
+        terminal: bool,
+        desktop: bool,
+        files: bool,
+        edge_presence_configured: bool,
+        edge_presence_online: bool,
+        edge_signaling_configured: bool,
+        edge_signaling_online: bool,
+    },
+    Paired {
+        client_fingerprint: String,
+        permissions: Vec<String>,
+    },
+    Authenticated {
+        client_fingerprint: String,
+        permissions: Vec<String>,
+    },
+    Status {
+        session_agents: usize,
+        terminal: bool,
+        desktop: bool,
+        files: bool,
+        edge_presence_configured: bool,
+        edge_presence_online: bool,
+        edge_signaling_configured: bool,
+        edge_signaling_online: bool,
+    },
+    TerminalOpened,
+    TerminalOutput {
+        data: String,
+    },
+    TerminalExited {
+        exit_code: Option<i32>,
+    },
+    DirectWebRtcReady,
+    DirectWebRtcSignal {
+        kind: String,
+        payload: String,
+    },
+    DirectWebRtcUnavailable {
+        reason_code: String,
+    },
+    DesktopOpened {
+        width: u16,
+        height: u16,
+        encoding: DesktopFrameEncoding,
+        resume_token: String,
+        resumed: bool,
+    },
+    DesktopFrameStart {
+        metadata: DesktopFrameMetadata,
+    },
+    DesktopFrameChunk {
+        sequence: u64,
+        index: u16,
+        data: String,
+    },
+    DesktopFrameComplete {
+        sequence: u64,
+        sha256: String,
+    },
+    DesktopH264Start {
+        metadata: DesktopH264Metadata,
+    },
+    DesktopH264Chunk {
+        sequence: u64,
+        index: u16,
+        data: String,
+    },
+    DesktopH264Complete {
+        sequence: u64,
+        sha256: String,
+    },
+    DesktopH264Unavailable {
+        reason_code: String,
+    },
+    DesktopOpusPacket {
+        sequence: u64,
+        duration_us: u64,
+        encode_latency_us: u64,
+        data: String,
+    },
+    DesktopOpusUnavailable {
+        reason_code: String,
+    },
+    DesktopVideoModeChanged {
+        mode: DesktopVideoMode,
+    },
+    DesktopClosed {
+        reason: String,
+    },
+    DesktopPong {
+        nonce: u64,
+    },
+    DesktopClipboardOffer {
+        sequence: u64,
+        utf8_bytes: u32,
+        sha256: String,
+    },
+    DesktopClipboardRequest {
+        sequence: u64,
+    },
+    DesktopClipboardData {
+        sequence: u64,
+        data: String,
+    },
+    FileReady {
+        direction: String,
+        size: u64,
+        sha256: Option<String>,
+        offset: u64,
+    },
+    FileChunk {
+        data: String,
+    },
+    FileComplete {
+        size: u64,
+        sha256: String,
+    },
+    Error {
+        code: String,
+        message: String,
+    },
+}
+
+#[derive(Clone, Debug, Deserialize, Serialize)]
+#[serde(tag = "type", rename_all = "snake_case")]
+pub enum IpcMessage {
+    Hello {
+        protocol_major: u16,
+        protocol_minor: u16,
+        pid: u32,
+        uid: u32,
+        desktop_backend: String,
+        #[serde(default)]
+        desktop_socket: Option<String>,
+    },
+    Heartbeat,
+}
+
+#[derive(Clone, Debug, Deserialize, Serialize)]
+#[serde(tag = "type", rename_all = "snake_case")]
+pub enum IpcResponse {
+    Accepted { protocol_minor: u16 },
+    Alive,
+    Error { code: String, message: String },
+}
+
+#[derive(Clone, Debug, Deserialize, Serialize)]
+#[serde(tag = "type", rename_all = "snake_case")]
+pub enum ShellCommand {
+    Input { data: String },
+    Resize { cols: u16, rows: u16 },
+    Signal { signal: String },
+    Close,
+}
+
+#[derive(Clone, Debug, Deserialize, Serialize)]
+#[serde(tag = "type", rename_all = "snake_case")]
+pub enum ShellEvent {
+    Ready,
+    Output { data: String },
+    Exited { exit_code: Option<i32> },
+    Error { message: String },
+}
+
+#[derive(Clone, Debug, Deserialize, Serialize)]
+pub struct FileResult {
+    pub size: u64,
+    pub sha256: String,
+}
+
+#[derive(Clone, Debug, Deserialize, Serialize)]
+pub struct FileTransferReady {
+    pub offset: u64,
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn externally_tagged_commands_reject_unknown_types() {
+        let error = serde_json::from_str::<ClientCommand>(r#"{"type":"format_disk"}"#).unwrap_err();
+        assert!(error.to_string().contains("unknown variant"));
+    }
+
+    #[test]
+    fn open_terminal_round_trips() {
+        let command = ClientCommand::OpenTerminal {
+            user: "alice".into(),
+            cols: 120,
+            rows: 40,
+        };
+        let encoded = serde_json::to_string(&command).unwrap();
+        let decoded: ClientCommand = serde_json::from_str(&encoded).unwrap();
+        assert!(matches!(
+            decoded,
+            ClientCommand::OpenTerminal {
+                cols: 120,
+                rows: 40,
+                ..
+            }
+        ));
+    }
+
+    #[test]
+    fn file_commands_are_explicit_and_bounded_by_the_runtime() {
+        let command = ClientCommand::UploadFile {
+            user: "alice".into(),
+            path: "Documents/report.bin".into(),
+            size: 42,
+            sha256: "ab".repeat(32),
+            transfer_id: "cd".repeat(16),
+        };
+        let encoded = serde_json::to_string(&command).unwrap();
+        assert!(matches!(
+            serde_json::from_str(&encoded).unwrap(),
+            ClientCommand::UploadFile { size: 42, .. }
+        ));
+        assert_eq!(FILE_CHUNK_BYTES, 46_080);
+        assert_eq!(MAX_FILE_BYTES, 2_147_483_648);
+    }
+
+    #[test]
+    fn desktop_commands_are_explicit_and_do_not_accept_unknown_input_fields() {
+        let command = ClientCommand::OpenDesktop {
+            user: "alice".into(),
+            max_width: 1_920,
+            max_height: 1_080,
+            frames_per_second: 15,
+            resume_token: None,
+            client_fingerprint: None,
+            edge_session_id: None,
+            webrtc_h264: false,
+            opus_audio: false,
+            clipboard_read: false,
+            clipboard_write: false,
+        };
+        let encoded = serde_json::to_string(&command).unwrap();
+        assert!(matches!(
+            serde_json::from_str(&encoded).unwrap(),
+            ClientCommand::OpenDesktop {
+                frames_per_second: 15,
+                ..
+            }
+        ));
+        assert!(
+            serde_json::from_str::<DesktopInputEvent>(
+                r#"{"kind":"pointer_move","x":10,"y":20,"command":"shell"}"#
+            )
+            .is_err()
+        );
+        let relative: DesktopInputEvent =
+            serde_json::from_str(r#"{"kind":"pointer_delta","delta_x":-12,"delta_y":34}"#).unwrap();
+        assert_eq!(
+            relative,
+            DesktopInputEvent::PointerDelta {
+                delta_x: -12,
+                delta_y: 34
+            }
+        );
+        assert_eq!(DESKTOP_FRAME_CHUNK_BYTES, FILE_CHUNK_BYTES);
+        let ping = serde_json::to_string(&ClientCommand::DesktopPing { nonce: 42 }).unwrap();
+        assert!(matches!(
+            serde_json::from_str(&ping).unwrap(),
+            ClientCommand::DesktopPing { nonce: 42 }
+        ));
+        assert!(
+            serde_json::from_str::<ClientCommand>(
+                r#"{"type":"desktop_ping","nonce":42,"ignored":true}"#
+            )
+            .is_err()
+        );
+        let resize = serde_json::to_string(&ClientCommand::DesktopResize {
+            max_width: 1600,
+            max_height: 900,
+        })
+        .unwrap();
+        assert!(matches!(
+            serde_json::from_str(&resize).unwrap(),
+            ClientCommand::DesktopResize {
+                max_width: 1600,
+                max_height: 900
+            }
+        ));
+        assert!(
+            serde_json::from_str::<ClientCommand>(
+                r#"{"type":"desktop_resize","max_width":1600,"max_height":900,"ignored":true}"#
+            )
+            .is_err()
+        );
+        let resumed: ClientCommand = serde_json::from_str(
+            r#"{"type":"open_desktop","user":"alice","max_width":1600,"max_height":900,"frames_per_second":15,"resume_token":"token"}"#,
+        )
+        .unwrap();
+        assert!(matches!(
+            resumed,
+            ClientCommand::OpenDesktop {
+                resume_token: Some(token),
+                client_fingerprint: None,
+                edge_session_id: None,
+                webrtc_h264: false,
+                opus_audio: false,
+                clipboard_read: false,
+                clipboard_write: false,
+                ..
+            } if token == "token"
+        ));
+        let opus_open: ClientCommand = serde_json::from_str(
+            r#"{"type":"open_desktop","user":"alice","max_width":1600,"max_height":900,"frames_per_second":15,"webrtc_h264":true,"opus_audio":true}"#,
+        )
+        .unwrap();
+        assert!(matches!(
+            opus_open,
+            ClientCommand::OpenDesktop {
+                webrtc_h264: true,
+                opus_audio: true,
+                ..
+            }
+        ));
+        let opened = serde_json::to_string(&ServerEvent::DesktopOpened {
+            width: 1_600,
+            height: 900,
+            encoding: DesktopFrameEncoding::ZlibBgra,
+            resume_token: "rotated-token".into(),
+            resumed: true,
+        })
+        .unwrap();
+        assert!(matches!(
+            serde_json::from_str(&opened).unwrap(),
+            ServerEvent::DesktopOpened {
+                width: 1_600,
+                height: 900,
+                encoding: DesktopFrameEncoding::ZlibBgra,
+                resume_token,
+                resumed: true,
+            } if resume_token == "rotated-token"
+        ));
+        let native_opened = serde_json::to_string(&ServerEvent::DesktopOpened {
+            width: 1_920,
+            height: 1_080,
+            encoding: DesktopFrameEncoding::WebRtcH264,
+            resume_token: "wayland-rotated-token".into(),
+            resumed: true,
+        })
+        .unwrap();
+        assert!(matches!(
+            serde_json::from_str(&native_opened).unwrap(),
+            ServerEvent::DesktopOpened {
+                encoding: DesktopFrameEncoding::WebRtcH264,
+                resume_token,
+                resumed: true,
+                ..
+            } if resume_token == "wayland-rotated-token"
+        ));
+        assert_eq!(PROTOCOL_MINOR, 15);
+        let direct_begin = ClientCommand::BeginDirectWebRtc {
+            user: "alice".into(),
+            max_width: 1_920,
+            max_height: 1_080,
+            frames_per_second: 30,
+            opus_audio: true,
+            clipboard_read: true,
+            clipboard_write: false,
+        };
+        let direct_begin = serde_json::to_string(&direct_begin).unwrap();
+        assert!(matches!(
+            serde_json::from_str(&direct_begin).unwrap(),
+            ClientCommand::BeginDirectWebRtc {
+                user,
+                max_width: 1_920,
+                max_height: 1_080,
+                frames_per_second: 30,
+                opus_audio: true,
+                clipboard_read: true,
+                clipboard_write: false,
+            } if user == "alice"
+        ));
+        let legacy_direct: ClientCommand = serde_json::from_str(
+            r#"{"type":"begin_direct_web_rtc","user":"alice","max_width":1920,"max_height":1080,"frames_per_second":30}"#,
+        )
+        .unwrap();
+        assert!(matches!(
+            legacy_direct,
+            ClientCommand::BeginDirectWebRtc {
+                opus_audio: false,
+                clipboard_read: false,
+                clipboard_write: false,
+                ..
+            }
+        ));
+        let clipboard_offer = ClientCommand::DesktopClipboardOffer {
+            sequence: 7,
+            utf8_bytes: 5,
+            sha256: "ab".repeat(32),
+        };
+        assert!(matches!(
+            serde_json::from_str(&serde_json::to_string(&clipboard_offer).unwrap()).unwrap(),
+            ClientCommand::DesktopClipboardOffer {
+                sequence: 7,
+                utf8_bytes: 5,
+                ..
+            }
+        ));
+        let clipboard_data = ServerEvent::DesktopClipboardData {
+            sequence: 7,
+            data: "aGVsbG8".into(),
+        };
+        assert!(matches!(
+            serde_json::from_str(&serde_json::to_string(&clipboard_data).unwrap()).unwrap(),
+            ServerEvent::DesktopClipboardData { sequence: 7, data }
+                if data == "aGVsbG8"
+        ));
+        assert_eq!(DESKTOP_MAX_CLIPBOARD_BYTES, 32_768);
+        let direct_signal = ServerEvent::DirectWebRtcSignal {
+            kind: "ice_end".into(),
+            payload: String::new(),
+        };
+        assert!(matches!(
+            serde_json::from_str(&serde_json::to_string(&direct_signal).unwrap()).unwrap(),
+            ServerEvent::DirectWebRtcSignal { kind, payload }
+                if kind == "ice_end" && payload.is_empty()
+        ));
+        let client_signal = ClientCommand::DirectWebRtcSignal {
+            kind: "ice_candidate".into(),
+            payload: "candidate".into(),
+        };
+        assert!(matches!(
+            serde_json::from_str(&serde_json::to_string(&client_signal).unwrap()).unwrap(),
+            ClientCommand::DirectWebRtcSignal { kind, payload }
+                if kind == "ice_candidate" && payload == "candidate"
+        ));
+        assert!(matches!(
+            serde_json::from_str(
+                &serde_json::to_string(&ClientCommand::AbortDirectWebRtc).unwrap()
+            )
+            .unwrap(),
+            ClientCommand::AbortDirectWebRtc
+        ));
+        assert!(matches!(
+            serde_json::from_str(&serde_json::to_string(&ServerEvent::DirectWebRtcReady).unwrap())
+                .unwrap(),
+            ServerEvent::DirectWebRtcReady
+        ));
+        let unavailable = ServerEvent::DirectWebRtcUnavailable {
+            reason_code: "connect_timeout".into(),
+        };
+        assert!(matches!(
+            serde_json::from_str(&serde_json::to_string(&unavailable).unwrap()).unwrap(),
+            ServerEvent::DirectWebRtcUnavailable { reason_code }
+                if reason_code == "connect_timeout"
+        ));
+        let native_mode = serde_json::to_string(&ClientCommand::DesktopVideoMode {
+            mode: DesktopVideoMode::WebRtcH264,
+        })
+        .unwrap();
+        assert!(matches!(
+            serde_json::from_str(&native_mode).unwrap(),
+            ClientCommand::DesktopVideoMode {
+                mode: DesktopVideoMode::WebRtcH264
+            }
+        ));
+        let native_ack =
+            serde_json::to_string(&ClientCommand::DesktopH264FrameAck { sequence: 91 }).unwrap();
+        assert!(matches!(
+            serde_json::from_str(&native_ack).unwrap(),
+            ClientCommand::DesktopH264FrameAck { sequence: 91 }
+        ));
+        let opus = ServerEvent::DesktopOpusPacket {
+            sequence: 17,
+            duration_us: 20_000,
+            encode_latency_us: 1_500,
+            data: "AQID".into(),
+        };
+        assert!(matches!(
+            serde_json::from_str(&serde_json::to_string(&opus).unwrap()).unwrap(),
+            ServerEvent::DesktopOpusPacket {
+                sequence: 17,
+                duration_us: 20_000,
+                encode_latency_us: 1_500,
+                data,
+            } if data == "AQID"
+        ));
+        let opus_unavailable = ServerEvent::DesktopOpusUnavailable {
+            reason_code: "audio_monitor_unavailable".into(),
+        };
+        assert!(matches!(
+            serde_json::from_str(&serde_json::to_string(&opus_unavailable).unwrap()).unwrap(),
+            ServerEvent::DesktopOpusUnavailable { reason_code }
+                if reason_code == "audio_monitor_unavailable"
+        ));
+        let mode_changed = serde_json::to_string(&ServerEvent::DesktopVideoModeChanged {
+            mode: DesktopVideoMode::WebRtcH264,
+        })
+        .unwrap();
+        assert!(matches!(
+            serde_json::from_str(&mode_changed).unwrap(),
+            ServerEvent::DesktopVideoModeChanged {
+                mode: DesktopVideoMode::WebRtcH264
+            }
+        ));
+        assert!(
+            serde_json::from_str::<ClientCommand>(
+                r#"{"type":"desktop_video_mode","mode":"webrtc_h264","ignored":true}"#
+            )
+            .is_err()
+        );
+        let closed = serde_json::to_string(&ServerEvent::DesktopClosed {
+            reason: "client_closed".into(),
+        })
+        .unwrap();
+        assert!(matches!(
+            serde_json::from_str(&closed).unwrap(),
+            ServerEvent::DesktopClosed { reason } if reason == "client_closed"
+        ));
+    }
+
+    #[test]
+    fn desktop_frame_metadata_requires_the_negotiated_compression_level() {
+        let metadata = DesktopFrameMetadata {
+            sequence: 9,
+            width: 320,
+            height: 200,
+            encoding: DesktopFrameEncoding::ZlibBgra,
+            uncompressed_bytes: 256_000,
+            compressed_bytes: 4_096,
+            chunk_count: 1,
+            captured_at_unix_ms: 10,
+            capture_latency_us: 20,
+            encode_latency_us: 30,
+            compression_level: 4,
+        };
+        let encoded = serde_json::to_value(&metadata).unwrap();
+        assert_eq!(encoded["compression_level"], 4);
+        assert_eq!(
+            serde_json::from_value::<DesktopFrameMetadata>(encoded.clone())
+                .unwrap()
+                .compression_level,
+            4
+        );
+        let mut missing = encoded.as_object().unwrap().clone();
+        missing.remove("compression_level");
+        assert!(serde_json::from_value::<DesktopFrameMetadata>(missing.into()).is_err());
+        let mut unknown = encoded.as_object().unwrap().clone();
+        unknown.insert("quality".into(), serde_json::json!("auto"));
+        assert!(serde_json::from_value::<DesktopFrameMetadata>(unknown.into()).is_err());
+    }
+
+    #[test]
+    fn h264_ipc_events_round_trip_without_relaxing_unknown_fields() {
+        let event = ServerEvent::DesktopH264Start {
+            metadata: DesktopH264Metadata {
+                sequence: 11,
+                width: 1_920,
+                height: 1_080,
+                captured_at_unix_ms: 1_700_000_000_000,
+                capture_latency_us: 1_000,
+                access_unit_bytes: 4_096,
+                chunk_count: 1,
+                duration_us: 33_333,
+                keyframe: true,
+                encode_latency_us: 2_000,
+                encoder: "vah264enc".into(),
+            },
+        };
+        let encoded = serde_json::to_value(event).unwrap();
+        assert!(matches!(
+            serde_json::from_value::<ServerEvent>(encoded.clone()).unwrap(),
+            ServerEvent::DesktopH264Start { metadata }
+                if metadata.sequence == 11 && metadata.keyframe
+        ));
+        let mut invalid = encoded.as_object().unwrap().clone();
+        invalid.insert("unexpected".into(), serde_json::Value::Bool(true));
+        assert!(serde_json::from_value::<ServerEvent>(invalid.into()).is_err());
+    }
+}
diff --git a/agent/agent-runtime/src/state.rs b/agent/agent-runtime/src/state.rs
new file mode 100644
index 0000000..a592064
--- /dev/null
+++ b/agent/agent-runtime/src/state.rs
@@ -0,0 +1,554 @@
+use std::{
+    fmt,
+    fmt::Write as _,
+    fs,
+    io::Write as _,
+    path::{Path, PathBuf},
+    time::{SystemTime, UNIX_EPOCH},
+};
+
+use base64::{Engine as _, engine::general_purpose::STANDARD_NO_PAD};
+use ed25519_dalek::SigningKey;
+use rand::RngCore as _;
+use rcgen::generate_simple_self_signed;
+use serde::{Deserialize, Serialize};
+use sha2::{Digest as _, Sha256};
+
+use crate::PairingCode;
+
+#[derive(Debug)]
+pub enum StateError {
+    Io(std::io::Error),
+    Json(serde_json::Error),
+    Invalid(String),
+    Certificate(rcgen::Error),
+}
+
+impl fmt::Display for StateError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        match self {
+            Self::Io(error) => write!(formatter, "state I/O failed: {error}"),
+            Self::Json(error) => write!(formatter, "state JSON failed: {error}"),
+            Self::Invalid(error) => write!(formatter, "invalid state: {error}"),
+            Self::Certificate(error) => {
+                write!(formatter, "TLS certificate generation failed: {error}")
+            }
+        }
+    }
+}
+
+impl std::error::Error for StateError {}
+
+impl From<std::io::Error> for StateError {
+    fn from(value: std::io::Error) -> Self {
+        Self::Io(value)
+    }
+}
+
+impl From<serde_json::Error> for StateError {
+    fn from(value: serde_json::Error) -> Self {
+        Self::Json(value)
+    }
+}
+
+impl From<rcgen::Error> for StateError {
+    fn from(value: rcgen::Error) -> Self {
+        Self::Certificate(value)
+    }
+}
+
+#[derive(Clone, Debug, Deserialize, Serialize)]
+pub struct DeviceIdentity {
+    pub schema: u8,
+    pub private_key: String,
+    pub public_key: String,
+    pub tls_certificate_pem: String,
+    pub tls_private_key_pem: String,
+}
+
+impl DeviceIdentity {
+    fn generate(hostname: &str) -> Result<Self, StateError> {
+        let mut bytes = [0_u8; 32];
+        rand::rng().fill_bytes(&mut bytes);
+        let signing = SigningKey::from_bytes(&bytes);
+        let certified = generate_simple_self_signed(vec![hostname.to_owned(), "localhost".into()])?;
+        Ok(Self {
+            schema: 1,
+            private_key: STANDARD_NO_PAD.encode(signing.to_bytes()),
+            public_key: STANDARD_NO_PAD.encode(signing.verifying_key().as_bytes()),
+            tls_certificate_pem: certified.cert.pem(),
+            tls_private_key_pem: certified.signing_key.serialize_pem(),
+        })
+    }
+
+    /// Returns the SHA-256 fingerprint of the first DER certificate in the PEM chain.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error when the stored PEM cannot be parsed or has no certificate.
+    pub fn tls_certificate_fingerprint(&self) -> Result<String, StateError> {
+        let mut reader = std::io::BufReader::new(self.tls_certificate_pem.as_bytes());
+        let certificate = rustls_pemfile::certs(&mut reader)
+            .next()
+            .transpose()?
+            .ok_or_else(|| StateError::Invalid("TLS certificate PEM is empty".into()))?;
+        Ok(hex_digest(&Sha256::digest(certificate.as_ref())))
+    }
+}
+
+#[derive(Clone, Debug, Deserialize, Eq, PartialEq, Serialize)]
+pub struct ClientGrant {
+    pub name: String,
+    pub public_key: String,
+    pub fingerprint: String,
+    pub permissions: Vec<String>,
+    pub allowed_users: Vec<String>,
+    pub paired_at: u64,
+}
+
+#[derive(Clone, Debug, Deserialize, Serialize)]
+pub struct PairingGrant {
+    pub salt: String,
+    pub code_digest: String,
+    pub expires_at: u64,
+    pub attempts_remaining: u8,
+    pub permissions: Vec<String>,
+    pub allowed_users: Vec<String>,
+}
+
+#[derive(Clone, Debug, Deserialize, Eq, PartialEq, Serialize)]
+pub struct EdgePresenceStatus {
+    pub schema: u8,
+    pub configured: bool,
+    pub online: bool,
+    pub device_id: String,
+    pub region: String,
+    pub gateway_id: String,
+    pub expires_unix: Option<u64>,
+    pub last_success_unix: Option<u64>,
+    pub last_error: Option<String>,
+    #[serde(default)]
+    pub signal_requests_received: u64,
+    #[serde(default)]
+    pub signal_requests_accepted: u64,
+    #[serde(default)]
+    pub signal_requests_rejected: u64,
+    #[serde(default)]
+    pub last_signal_unix: Option<u64>,
+    #[serde(default)]
+    pub last_signal_error: Option<String>,
+}
+
+#[derive(Clone, Debug)]
+pub struct AgentState {
+    root: PathBuf,
+}
+
+impl AgentState {
+    #[must_use]
+    pub fn new(root: impl Into<PathBuf>) -> Self {
+        Self { root: root.into() }
+    }
+
+    #[must_use]
+    pub fn root(&self) -> &Path {
+        &self.root
+    }
+
+    /// Loads the device identity, creating it with owner-only permissions when absent.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error when state I/O, parsing, or certificate generation fails.
+    pub fn ensure_identity(&self, hostname: &str) -> Result<DeviceIdentity, StateError> {
+        fs::create_dir_all(&self.root)?;
+        set_owner_only_directory(&self.root)?;
+        let path = self.root.join("device.json");
+        if path.is_file() {
+            return read_json(&path);
+        }
+        let identity = DeviceIdentity::generate(hostname)?;
+        write_json_atomic(&path, &identity)?;
+        set_owner_only_file(&path)?;
+        Ok(identity)
+    }
+
+    /// Loads the existing device identity.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error when the identity is absent, unreadable, or malformed.
+    pub fn identity(&self) -> Result<DeviceIdentity, StateError> {
+        read_json(&self.root.join("device.json"))
+    }
+
+    /// Loads the latest non-secret Edge Presence state written by the daemon.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error when the status file exists but cannot be read or parsed.
+    pub fn edge_presence_status(&self) -> Result<Option<EdgePresenceStatus>, StateError> {
+        let path = self.root.join("edge-presence.json");
+        if !path.is_file() {
+            return Ok(None);
+        }
+        read_json(&path).map(Some)
+    }
+
+    /// Atomically writes non-secret Edge Presence health for the local status CLI.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error when owner-only state cannot be persisted.
+    pub fn write_edge_presence_status(
+        &self,
+        status: &EdgePresenceStatus,
+    ) -> Result<(), StateError> {
+        let path = self.root.join("edge-presence.json");
+        write_json_atomic(&path, status)?;
+        set_owner_only_file(&path)
+    }
+
+    /// Creates a rate-limited, expiring pairing grant and returns its one-time code.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error for an invalid TTL or a state persistence failure.
+    pub fn create_pairing_grant(
+        &self,
+        ttl_seconds: u64,
+        permissions: Vec<String>,
+        allowed_users: Vec<String>,
+    ) -> Result<PairingCode, StateError> {
+        if !(30..=900).contains(&ttl_seconds) {
+            return Err(StateError::Invalid(
+                "pairing TTL must be between 30 and 900 seconds".into(),
+            ));
+        }
+        let code = PairingCode::generate();
+        let mut salt = [0_u8; 16];
+        rand::rng().fill_bytes(&mut salt);
+        let grant = PairingGrant {
+            salt: STANDARD_NO_PAD.encode(salt),
+            code_digest: code.salted_digest(&salt),
+            expires_at: unix_timestamp().saturating_add(ttl_seconds),
+            attempts_remaining: 5,
+            permissions,
+            allowed_users,
+        };
+        write_json_atomic(&self.root.join("pairing.json"), &grant)?;
+        set_owner_only_file(&self.root.join("pairing.json"))?;
+        Ok(code)
+    }
+
+    /// Reports whether the current local pairing window can admit one remote relay request.
+    ///
+    /// This does not expose or consume the pairing code. The code is still verified and consumed
+    /// only inside the certificate-pinned Agent session.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error when an existing pairing grant cannot be read or parsed.
+    pub fn pairing_grant_allows(&self, user: &str, permission: &str) -> Result<bool, StateError> {
+        let path = self.root.join("pairing.json");
+        if !path.is_file() {
+            return Ok(false);
+        }
+        let grant: PairingGrant = read_json(&path)?;
+        if unix_timestamp() > grant.expires_at || grant.attempts_remaining == 0 {
+            let _ = fs::remove_file(path);
+            return Ok(false);
+        }
+        Ok(grant.allowed_users.iter().any(|allowed| allowed == user)
+            && grant
+                .permissions
+                .iter()
+                .any(|allowed| allowed == permission))
+    }
+
+    /// Validates and consumes the current one-time pairing grant.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error for a missing, expired, malformed, exhausted, or incorrect code.
+    pub fn consume_pairing_grant(&self, code: &str) -> Result<PairingGrant, StateError> {
+        let path = self.root.join("pairing.json");
+        let mut grant: PairingGrant = read_json(&path)?;
+        if unix_timestamp() > grant.expires_at {
+            let _ = fs::remove_file(&path);
+            return Err(StateError::Invalid("pairing code expired".into()));
+        }
+        if grant.attempts_remaining == 0 {
+            let _ = fs::remove_file(&path);
+            return Err(StateError::Invalid("pairing attempt limit reached".into()));
+        }
+        let salt = STANDARD_NO_PAD
+            .decode(&grant.salt)
+            .map_err(|_| StateError::Invalid("pairing salt is invalid".into()))?;
+        let matches = PairingCode::parse(code)
+            .is_ok_and(|parsed| parsed.salted_digest(&salt) == grant.code_digest);
+        if !matches {
+            grant.attempts_remaining = grant.attempts_remaining.saturating_sub(1);
+            write_json_atomic(&path, &grant)?;
+            return Err(StateError::Invalid("pairing code did not match".into()));
+        }
+        fs::remove_file(path)?;
+        Ok(grant)
+    }
+
+    /// Loads all paired client grants.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error when the authorization store cannot be read or parsed.
+    pub fn clients(&self) -> Result<Vec<ClientGrant>, StateError> {
+        let path = self.root.join("clients.json");
+        if !path.is_file() {
+            return Ok(Vec::new());
+        }
+        read_json(&path)
+    }
+
+    /// Adds or replaces a client grant after validating its Ed25519 public key.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error for invalid client metadata or a state persistence failure.
+    pub fn grant_client(
+        &self,
+        name: String,
+        public_key: String,
+        permissions: Vec<String>,
+        allowed_users: Vec<String>,
+    ) -> Result<ClientGrant, StateError> {
+        let key = STANDARD_NO_PAD
+            .decode(&public_key)
+            .map_err(|_| StateError::Invalid("client public key is not valid base64".into()))?;
+        let key_array: [u8; 32] = key
+            .try_into()
+            .map_err(|_| StateError::Invalid("client public key must contain 32 bytes".into()))?;
+        ed25519_dalek::VerifyingKey::from_bytes(&key_array)
+            .map_err(|_| StateError::Invalid("client public key is invalid".into()))?;
+        if name.trim().is_empty() || name.len() > 80 {
+            return Err(StateError::Invalid(
+                "client name must contain 1 to 80 characters".into(),
+            ));
+        }
+        let fingerprint = public_key_fingerprint(&key_array);
+        let client = ClientGrant {
+            name,
+            public_key,
+            fingerprint,
+            permissions,
+            allowed_users,
+            paired_at: unix_timestamp(),
+        };
+        let mut clients = self.clients()?;
+        clients.retain(|existing| existing.public_key != client.public_key);
+        clients.push(client.clone());
+        write_json_atomic(&self.root.join("clients.json"), &clients)?;
+        set_owner_only_file(&self.root.join("clients.json"))?;
+        Ok(client)
+    }
+
+    /// Removes a paired client by fingerprint.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error when the authorization store cannot be read or updated.
+    pub fn revoke_client(&self, fingerprint: &str) -> Result<bool, StateError> {
+        let mut clients = self.clients()?;
+        let original_len = clients.len();
+        clients.retain(|client| client.fingerprint != fingerprint);
+        if clients.len() == original_len {
+            return Ok(false);
+        }
+        write_json_atomic(&self.root.join("clients.json"), &clients)?;
+        Ok(true)
+    }
+}
+
+#[must_use]
+pub fn unix_timestamp() -> u64 {
+    SystemTime::now()
+        .duration_since(UNIX_EPOCH)
+        .unwrap_or_default()
+        .as_secs()
+}
+
+fn public_key_fingerprint(key: &[u8; 32]) -> String {
+    let digest = Sha256::digest(key);
+    hex_digest(&digest[..16])
+}
+
+fn hex_digest(digest: &[u8]) -> String {
+    let mut output = String::with_capacity(digest.len() * 2);
+    for byte in digest {
+        write!(output, "{byte:02x}").expect("writing to a String cannot fail");
+    }
+    output
+}
+
+fn read_json<T: for<'de> Deserialize<'de>>(path: &Path) -> Result<T, StateError> {
+    Ok(serde_json::from_slice(&fs::read(path)?)?)
+}
+
+fn write_json_atomic<T: Serialize>(path: &Path, value: &T) -> Result<(), StateError> {
+    let parent = path
+        .parent()
+        .ok_or_else(|| StateError::Invalid("state path has no parent".into()))?;
+    fs::create_dir_all(parent)?;
+    let temporary = parent.join(format!(
+        ".{}.{}.tmp",
+        path.file_name().unwrap_or_default().to_string_lossy(),
+        std::process::id()
+    ));
+    let mut file = create_private_file(&temporary)?;
+    serde_json::to_writer_pretty(&mut file, value)?;
+    file.write_all(b"\n")?;
+    file.sync_all()?;
+    fs::rename(&temporary, path)?;
+    Ok(())
+}
+
+#[cfg(unix)]
+fn create_private_file(path: &Path) -> Result<fs::File, StateError> {
+    use std::os::unix::fs::OpenOptionsExt as _;
+    Ok(fs::OpenOptions::new()
+        .write(true)
+        .create(true)
+        .truncate(true)
+        .mode(0o600)
+        .open(path)?)
+}
+
+#[cfg(not(unix))]
+fn create_private_file(path: &Path) -> Result<fs::File, StateError> {
+    Ok(fs::File::create(path)?)
+}
+
+#[cfg(unix)]
+fn set_owner_only_directory(path: &Path) -> Result<(), StateError> {
+    use std::os::unix::fs::PermissionsExt as _;
+    fs::set_permissions(path, fs::Permissions::from_mode(0o700))?;
+    Ok(())
+}
+
+#[cfg(not(unix))]
+#[allow(clippy::unnecessary_wraps)]
+fn set_owner_only_directory(_path: &Path) -> Result<(), StateError> {
+    Ok(())
+}
+
+#[cfg(unix)]
+fn set_owner_only_file(path: &Path) -> Result<(), StateError> {
+    use std::os::unix::fs::PermissionsExt as _;
+    fs::set_permissions(path, fs::Permissions::from_mode(0o600))?;
+    Ok(())
+}
+
+#[cfg(not(unix))]
+#[allow(clippy::unnecessary_wraps)]
+fn set_owner_only_file(_path: &Path) -> Result<(), StateError> {
+    Ok(())
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn test_root(name: &str) -> PathBuf {
+        std::env::temp_dir().join(format!(
+            "remotedesk-{name}-{}-{}",
+            std::process::id(),
+            rand::random::<u64>()
+        ))
+    }
+
+    #[test]
+    fn identity_is_stable() {
+        let root = test_root("identity");
+        let state = AgentState::new(&root);
+        let first = state.ensure_identity("test-host").unwrap();
+        let second = state.ensure_identity("different-host").unwrap();
+        assert_eq!(first.public_key, second.public_key);
+        fs::remove_dir_all(root).unwrap();
+    }
+
+    #[test]
+    fn pairing_code_is_one_time_and_client_can_be_revoked() {
+        let root = test_root("pairing");
+        let state = AgentState::new(&root);
+        state.ensure_identity("test-host").unwrap();
+        let code = state
+            .create_pairing_grant(60, vec!["terminal".into()], vec!["alice".into()])
+            .unwrap();
+        assert!(state.pairing_grant_allows("alice", "terminal").unwrap());
+        assert!(!state.pairing_grant_allows("bob", "terminal").unwrap());
+        assert!(!state.pairing_grant_allows("alice", "files").unwrap());
+        let grant = state.consume_pairing_grant(code.expose()).unwrap();
+        assert!(!state.pairing_grant_allows("alice", "terminal").unwrap());
+        assert!(state.consume_pairing_grant(code.expose()).is_err());
+        let signing = SigningKey::from_bytes(&[3_u8; 32]);
+        let client = state
+            .grant_client(
+                "test client".into(),
+                STANDARD_NO_PAD.encode(signing.verifying_key().as_bytes()),
+                grant.permissions,
+                grant.allowed_users,
+            )
+            .unwrap();
+        assert_eq!(state.clients().unwrap().len(), 1);
+        assert!(state.revoke_client(&client.fingerprint).unwrap());
+        assert!(state.clients().unwrap().is_empty());
+        fs::remove_dir_all(root).unwrap();
+    }
+
+    #[test]
+    fn failed_pairing_is_rate_limited() {
+        let root = test_root("rate-limit");
+        let state = AgentState::new(&root);
+        state.ensure_identity("test-host").unwrap();
+        let code = state.create_pairing_grant(60, vec![], vec![]).unwrap();
+        let wrong_code = if code.expose() == "00000000" {
+            "00000001"
+        } else {
+            "00000000"
+        };
+        assert!(state.consume_pairing_grant("malformed").is_err());
+        for _ in 0..4 {
+            assert!(state.consume_pairing_grant(wrong_code).is_err());
+        }
+        let grant: PairingGrant = read_json(&root.join("pairing.json")).unwrap();
+        assert_eq!(grant.attempts_remaining, 0);
+        fs::remove_dir_all(root).unwrap();
+    }
+
+    #[test]
+    fn edge_presence_status_round_trips_without_credentials() {
+        let root = test_root("edge-presence");
+        let state = AgentState::new(&root);
+        let status = EdgePresenceStatus {
+            schema: 1,
+            configured: true,
+            online: true,
+            device_id: "ab".repeat(32),
+            region: "test-region".into(),
+            gateway_id: "gateway-1".into(),
+            expires_unix: Some(100),
+            last_success_unix: Some(40),
+            last_error: None,
+            signal_requests_received: 3,
+            signal_requests_accepted: 2,
+            signal_requests_rejected: 1,
+            last_signal_unix: Some(50),
+            last_signal_error: None,
+        };
+        state.write_edge_presence_status(&status).unwrap();
+        assert_eq!(state.edge_presence_status().unwrap(), Some(status));
+        let persisted = fs::read_to_string(root.join("edge-presence.json")).unwrap();
+        assert!(!persisted.contains("token"));
+        assert!(!persisted.contains("url"));
+        fs::remove_dir_all(root).unwrap();
+    }
+}
diff --git a/agent/agent-runtime/src/wayland_eis.rs b/agent/agent-runtime/src/wayland_eis.rs
new file mode 100644
index 0000000..1c04d84
--- /dev/null
+++ b/agent/agent-runtime/src/wayland_eis.rs
@@ -0,0 +1,573 @@
+use std::{
+    collections::HashMap,
+    fmt,
+    io::Read as _,
+    os::{fd::BorrowedFd, unix::net::UnixStream},
+    sync::{Arc, Mutex},
+    time::Duration,
+};
+
+use futures_util::StreamExt as _;
+use reis::{
+    ei,
+    enumflags2::BitFlags,
+    event::{Device, DeviceCapability, EiEvent},
+};
+use rustix::time::{ClockId, clock_gettime};
+use tokio::{task::JoinHandle, time::timeout};
+use xkbcommon::xkb;
+
+use crate::{DesktopButton, DesktopInputEvent, DesktopKeyState, validate_desktop_input};
+
+const EIS_READY_TIMEOUT: Duration = Duration::from_secs(5);
+const EVDEV_KEYCODE_OFFSET: u32 = 8;
+const BTN_LEFT: u32 = 0x110;
+const BTN_RIGHT: u32 = 0x111;
+const BTN_MIDDLE: u32 = 0x112;
+const BTN_SIDE: u32 = 0x113;
+const BTN_EXTRA: u32 = 0x114;
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum WaylandEisError {
+    SocketCloneFailed,
+    ContextFailed,
+    HandshakeFailed,
+    DeviceDiscoveryTimedOut,
+    RequiredDeviceUnavailable,
+    KeymapUnavailable,
+    KeymapInvalid,
+    UnsupportedKeysym,
+    DevicePaused,
+    ProtocolDisconnected,
+    FlushFailed,
+    InvalidInput,
+}
+
+impl WaylandEisError {
+    #[must_use]
+    pub const fn code(self) -> &'static str {
+        match self {
+            Self::SocketCloneFailed => "eis_socket_clone_failed",
+            Self::ContextFailed => "eis_context_failed",
+            Self::HandshakeFailed => "eis_handshake_failed",
+            Self::DeviceDiscoveryTimedOut => "eis_device_discovery_timed_out",
+            Self::RequiredDeviceUnavailable => "eis_required_device_unavailable",
+            Self::KeymapUnavailable => "eis_keymap_unavailable",
+            Self::KeymapInvalid => "eis_keymap_invalid",
+            Self::UnsupportedKeysym => "eis_unsupported_keysym",
+            Self::DevicePaused => "eis_device_paused",
+            Self::ProtocolDisconnected => "eis_protocol_disconnected",
+            Self::FlushFailed => "eis_flush_failed",
+            Self::InvalidInput => "eis_invalid_input",
+        }
+    }
+}
+
+impl fmt::Display for WaylandEisError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        formatter.write_str(self.code())
+    }
+}
+
+impl std::error::Error for WaylandEisError {}
+
+struct DeviceState {
+    device: Device,
+    active: bool,
+}
+
+#[derive(Default)]
+struct EisState {
+    devices: Vec<DeviceState>,
+    keysym_to_keycode: HashMap<u32, u32>,
+    pressed_keys: Vec<(Device, u32)>,
+    pressed_buttons: Vec<(Device, u32)>,
+    next_sequence: u32,
+    failure: Option<WaylandEisError>,
+}
+
+pub struct WaylandEisInput {
+    connection: reis::event::Connection,
+    state: Arc<Mutex<EisState>>,
+    event_task: JoinHandle<()>,
+    frame_width: u16,
+    frame_height: u16,
+    mapping_id: Option<String>,
+}
+
+impl WaylandEisInput {
+    pub async fn connect(
+        eis_fd: BorrowedFd<'_>,
+        frame_width: u16,
+        frame_height: u16,
+        mapping_id: Option<&str>,
+    ) -> Result<Self, WaylandEisError> {
+        if !valid_frame_size(frame_width, frame_height) {
+            return Err(WaylandEisError::InvalidInput);
+        }
+        let owned_fd = eis_fd
+            .try_clone_to_owned()
+            .map_err(|_| WaylandEisError::SocketCloneFailed)?;
+        let context = ei::Context::new(UnixStream::from(owned_fd))
+            .map_err(|_| WaylandEisError::ContextFailed)?;
+        let (connection, mut events) = timeout(
+            EIS_READY_TIMEOUT,
+            context.handshake_tokio(
+                "RemoteDesk Wayland input",
+                ei::handshake::ContextType::Sender,
+            ),
+        )
+        .await
+        .map_err(|_| WaylandEisError::HandshakeFailed)?
+        .map_err(|_| WaylandEisError::HandshakeFailed)?;
+        let state = Arc::new(Mutex::new(EisState::default()));
+        let event_state = Arc::clone(&state);
+        let event_connection = connection.clone();
+        let event_task = tokio::task::spawn_local(async move {
+            while let Some(event) = events.next().await {
+                let Ok(event) = event else {
+                    mark_failed(&event_state, WaylandEisError::ProtocolDisconnected);
+                    return;
+                };
+                if let Err(error) = handle_eis_event(&event_connection, &event_state, event) {
+                    mark_failed(&event_state, error);
+                    return;
+                }
+            }
+            mark_failed(&event_state, WaylandEisError::ProtocolDisconnected);
+        });
+        let ready = async {
+            loop {
+                {
+                    let state = state.lock().expect("EIS state mutex poisoned");
+                    if let Some(error) = state.failure {
+                        return Err(error);
+                    }
+                    if required_devices_ready(&state) {
+                        return Ok(());
+                    }
+                }
+                tokio::time::sleep(Duration::from_millis(10)).await;
+            }
+        };
+        match timeout(EIS_READY_TIMEOUT, ready).await {
+            Ok(Ok(())) => Ok(Self {
+                connection,
+                state,
+                event_task,
+                frame_width,
+                frame_height,
+                mapping_id: mapping_id.map(str::to_owned),
+            }),
+            Ok(Err(error)) => {
+                event_task.abort();
+                Err(error)
+            }
+            Err(_) => {
+                event_task.abort();
+                Err(WaylandEisError::DeviceDiscoveryTimedOut)
+            }
+        }
+    }
+
+    pub fn set_frame_size(&mut self, width: u16, height: u16) -> Result<(), WaylandEisError> {
+        if !valid_frame_size(width, height) {
+            return Err(WaylandEisError::InvalidInput);
+        }
+        self.frame_width = width;
+        self.frame_height = height;
+        Ok(())
+    }
+
+    pub fn input(&mut self, event: &DesktopInputEvent) -> Result<(), WaylandEisError> {
+        validate_desktop_input(event, self.frame_width, self.frame_height)
+            .map_err(|_| WaylandEisError::InvalidInput)?;
+        let mut state = self.state.lock().expect("EIS state mutex poisoned");
+        if let Some(error) = state.failure {
+            return Err(error);
+        }
+        match event {
+            DesktopInputEvent::PointerMove { x, y } => {
+                let device = active_device::<ei::PointerAbsolute>(&state)?;
+                let (mapped_x, mapped_y) = map_absolute(
+                    &device,
+                    *x,
+                    *y,
+                    self.frame_width,
+                    self.frame_height,
+                    self.mapping_id.as_deref(),
+                )?;
+                device
+                    .interface::<ei::PointerAbsolute>()
+                    .ok_or(WaylandEisError::RequiredDeviceUnavailable)?
+                    .motion_absolute(mapped_x, mapped_y);
+                frame_device(&device, self.connection.serial());
+            }
+            DesktopInputEvent::PointerDelta { delta_x, delta_y } => {
+                let device = active_device::<ei::Pointer>(&state)?;
+                device
+                    .interface::<ei::Pointer>()
+                    .ok_or(WaylandEisError::RequiredDeviceUnavailable)?
+                    .motion_relative(f32::from(*delta_x), f32::from(*delta_y));
+                frame_device(&device, self.connection.serial());
+            }
+            DesktopInputEvent::PointerButton { button, pressed } => {
+                let device = active_device::<ei::Button>(&state)?;
+                let code = button_code(*button);
+                device
+                    .interface::<ei::Button>()
+                    .ok_or(WaylandEisError::RequiredDeviceUnavailable)?
+                    .button(
+                        code,
+                        if *pressed {
+                            ei::button::ButtonState::Press
+                        } else {
+                            ei::button::ButtonState::Released
+                        },
+                    );
+                update_pressed(&mut state.pressed_buttons, &device, code, *pressed);
+                frame_device(&device, self.connection.serial());
+            }
+            DesktopInputEvent::Wheel {
+                horizontal,
+                vertical,
+            } => {
+                let device = active_device::<ei::Scroll>(&state)?;
+                device
+                    .interface::<ei::Scroll>()
+                    .ok_or(WaylandEisError::RequiredDeviceUnavailable)?
+                    .scroll_discrete(
+                        i32::from(*horizontal).clamp(-32, 32) * 120,
+                        i32::from(*vertical).clamp(-32, 32) * 120,
+                    );
+                frame_device(&device, self.connection.serial());
+            }
+            DesktopInputEvent::Key {
+                keysym,
+                state: key_state,
+            } => {
+                let device = active_device::<ei::Keyboard>(&state)?;
+                let keycode = *state
+                    .keysym_to_keycode
+                    .get(keysym)
+                    .ok_or(WaylandEisError::UnsupportedKeysym)?;
+                let pressed = *key_state == DesktopKeyState::Pressed;
+                device
+                    .interface::<ei::Keyboard>()
+                    .ok_or(WaylandEisError::RequiredDeviceUnavailable)?
+                    .key(
+                        keycode,
+                        if pressed {
+                            ei::keyboard::KeyState::Press
+                        } else {
+                            ei::keyboard::KeyState::Released
+                        },
+                    );
+                update_pressed(&mut state.pressed_keys, &device, keycode, pressed);
+                frame_device(&device, self.connection.serial());
+            }
+            DesktopInputEvent::ReleaseAll => release_all_locked(&self.connection, &mut state),
+        }
+        self.connection
+            .flush()
+            .map_err(|_| WaylandEisError::FlushFailed)
+    }
+
+    pub fn release_all(&mut self) -> Result<(), WaylandEisError> {
+        let mut state = self.state.lock().expect("EIS state mutex poisoned");
+        release_all_locked(&self.connection, &mut state);
+        self.connection
+            .flush()
+            .map_err(|_| WaylandEisError::FlushFailed)
+    }
+}
+
+impl Drop for WaylandEisInput {
+    fn drop(&mut self) {
+        let _ = self.release_all();
+        if let Ok(mut state) = self.state.lock() {
+            let serial = self.connection.serial();
+            for device in state.devices.iter_mut().filter(|device| device.active) {
+                device.device.device().stop_emulating(serial);
+                device.active = false;
+            }
+            let _ = self.connection.flush();
+        }
+        self.event_task.abort();
+    }
+}
+
+fn handle_eis_event(
+    connection: &reis::event::Connection,
+    shared: &Arc<Mutex<EisState>>,
+    event: EiEvent,
+) -> Result<(), WaylandEisError> {
+    match event {
+        EiEvent::SeatAdded(event) => {
+            event.seat.bind_capabilities(required_capabilities());
+        }
+        EiEvent::DeviceAdded(event) => {
+            event.device.device().ready();
+            let keymap = if event.device.has_capability(DeviceCapability::Keyboard) {
+                Some(build_keysym_map(&event.device)?)
+            } else {
+                None
+            };
+            let mut state = shared.lock().expect("EIS state mutex poisoned");
+            if let Some(keymap) = keymap {
+                state.keysym_to_keycode.extend(keymap);
+            }
+            state.devices.push(DeviceState {
+                device: event.device,
+                active: false,
+            });
+        }
+        EiEvent::DeviceResumed(event) => {
+            let mut state = shared.lock().expect("EIS state mutex poisoned");
+            let sequence = state.next_sequence;
+            state.next_sequence = state.next_sequence.wrapping_add(1);
+            event
+                .device
+                .device()
+                .start_emulating(event.serial, sequence);
+            if let Some(device) = state
+                .devices
+                .iter_mut()
+                .find(|device| device.device == event.device)
+            {
+                device.active = true;
+            }
+        }
+        EiEvent::DevicePaused(event) => {
+            let mut state = shared.lock().expect("EIS state mutex poisoned");
+            if state
+                .devices
+                .iter()
+                .any(|device| device.device == event.device && device.active)
+            {
+                event.device.device().stop_emulating(event.serial);
+            }
+            clear_device_state(&mut state, &event.device);
+        }
+        EiEvent::DeviceRemoved(event) => {
+            let mut state = shared.lock().expect("EIS state mutex poisoned");
+            clear_device_state(&mut state, &event.device);
+            state.devices.retain(|device| device.device != event.device);
+        }
+        EiEvent::Disconnected(_) => {
+            mark_failed(shared, WaylandEisError::ProtocolDisconnected);
+            return Err(WaylandEisError::ProtocolDisconnected);
+        }
+        _ => {}
+    }
+    connection.flush().map_err(|_| WaylandEisError::FlushFailed)
+}
+
+fn required_capabilities() -> BitFlags<DeviceCapability> {
+    let mut capabilities = BitFlags::empty();
+    for capability in [
+        DeviceCapability::Pointer,
+        DeviceCapability::PointerAbsolute,
+        DeviceCapability::Keyboard,
+        DeviceCapability::Scroll,
+        DeviceCapability::Button,
+    ] {
+        capabilities.insert(capability);
+    }
+    capabilities
+}
+
+fn required_devices_ready(state: &EisState) -> bool {
+    required_capabilities().iter().all(|capability| {
+        state
+            .devices
+            .iter()
+            .any(|device| device.active && device.device.has_capability(capability))
+    }) && !state.keysym_to_keycode.is_empty()
+}
+
+fn active_device<T: ei::Interface>(state: &EisState) -> Result<Device, WaylandEisError> {
+    state
+        .devices
+        .iter()
+        .find(|device| device.active && device.device.interface::<T>().is_some())
+        .map(|device| device.device.clone())
+        .ok_or(WaylandEisError::DevicePaused)
+}
+
+fn build_keysym_map(device: &Device) -> Result<HashMap<u32, u32>, WaylandEisError> {
+    let keymap = device.keymap().ok_or(WaylandEisError::KeymapUnavailable)?;
+    if keymap.type_ != ei::keyboard::KeymapType::Xkb {
+        return Err(WaylandEisError::KeymapInvalid);
+    }
+    let fd = keymap
+        .fd
+        .try_clone()
+        .map_err(|_| WaylandEisError::KeymapInvalid)?;
+    let context = xkb::Context::new(xkb::CONTEXT_NO_FLAGS);
+    let mut keymap_text = String::new();
+    std::fs::File::from(fd)
+        .read_to_string(&mut keymap_text)
+        .map_err(|_| WaylandEisError::KeymapInvalid)?;
+    let keymap = xkb::Keymap::new_from_string(
+        &context,
+        keymap_text,
+        xkb::KEYMAP_FORMAT_TEXT_V1,
+        xkb::KEYMAP_COMPILE_NO_FLAGS,
+    )
+    .ok_or(WaylandEisError::KeymapInvalid)?;
+    let mut mapping = HashMap::new();
+    for raw_keycode in keymap.min_keycode().raw()..=keymap.max_keycode().raw() {
+        let keycode = xkb::Keycode::new(raw_keycode);
+        let Some(evdev_keycode) = raw_keycode.checked_sub(EVDEV_KEYCODE_OFFSET) else {
+            continue;
+        };
+        for layout in 0..keymap.num_layouts_for_key(keycode) {
+            for level in 0..keymap.num_levels_for_key(keycode, layout) {
+                for keysym in keymap.key_get_syms_by_level(keycode, layout, level) {
+                    mapping.entry(keysym.raw()).or_insert(evdev_keycode);
+                }
+            }
+        }
+    }
+    if mapping.is_empty() {
+        return Err(WaylandEisError::KeymapInvalid);
+    }
+    Ok(mapping)
+}
+
+fn map_absolute(
+    device: &Device,
+    x: u16,
+    y: u16,
+    frame_width: u16,
+    frame_height: u16,
+    mapping_id: Option<&str>,
+) -> Result<(f32, f32), WaylandEisError> {
+    let regions = device.regions();
+    let region = if let Some(mapping_id) = mapping_id {
+        regions
+            .iter()
+            .find(|region| region.mapping_id.as_deref() == Some(mapping_id))
+    } else if regions.len() == 1 {
+        regions.first()
+    } else {
+        None
+    }
+    .ok_or(WaylandEisError::RequiredDeviceUnavailable)?;
+    if region.width == 0 || region.height == 0 || frame_width <= 1 || frame_height <= 1 {
+        return Err(WaylandEisError::InvalidInput);
+    }
+    let mapped_x = region.x as f32
+        + f32::from(x) * (region.width.saturating_sub(1) as f32) / f32::from(frame_width - 1);
+    let mapped_y = region.y as f32
+        + f32::from(y) * (region.height.saturating_sub(1) as f32) / f32::from(frame_height - 1);
+    Ok((mapped_x, mapped_y))
+}
+
+fn frame_device(device: &Device, serial: u32) {
+    device.device().frame(serial, monotonic_micros());
+}
+
+fn monotonic_micros() -> u64 {
+    let time = clock_gettime(ClockId::Monotonic);
+    u64::try_from(time.tv_sec)
+        .unwrap_or(0)
+        .saturating_mul(1_000_000)
+        .saturating_add(u64::try_from(time.tv_nsec).unwrap_or(0) / 1_000)
+}
+
+fn release_all_locked(connection: &reis::event::Connection, state: &mut EisState) {
+    let serial = connection.serial();
+    for (device, keycode) in state.pressed_keys.drain(..) {
+        if let Some(keyboard) = device.interface::<ei::Keyboard>() {
+            keyboard.key(keycode, ei::keyboard::KeyState::Released);
+            frame_device(&device, serial);
+        }
+    }
+    for (device, button_code) in state.pressed_buttons.drain(..) {
+        if let Some(button) = device.interface::<ei::Button>() {
+            button.button(button_code, ei::button::ButtonState::Released);
+            frame_device(&device, serial);
+        }
+    }
+}
+
+fn update_pressed(entries: &mut Vec<(Device, u32)>, device: &Device, code: u32, pressed: bool) {
+    if pressed {
+        if !entries
+            .iter()
+            .any(|(current, current_code)| current == device && *current_code == code)
+        {
+            entries.push((device.clone(), code));
+        }
+    } else {
+        entries.retain(|(current, current_code)| current != device || *current_code != code);
+    }
+}
+
+fn clear_device_state(state: &mut EisState, device: &Device) {
+    if let Some(current) = state
+        .devices
+        .iter_mut()
+        .find(|current| current.device == *device)
+    {
+        current.active = false;
+    }
+    state.pressed_keys.retain(|(current, _)| current != device);
+    state
+        .pressed_buttons
+        .retain(|(current, _)| current != device);
+}
+
+fn mark_failed(state: &Arc<Mutex<EisState>>, error: WaylandEisError) {
+    state.lock().expect("EIS state mutex poisoned").failure = Some(error);
+}
+
+const fn valid_frame_size(width: u16, height: u16) -> bool {
+    width >= 200 && width <= 8_192 && height >= 200 && height <= 8_192
+}
+
+const fn button_code(button: DesktopButton) -> u32 {
+    match button {
+        DesktopButton::Left => BTN_LEFT,
+        DesktopButton::Middle => BTN_MIDDLE,
+        DesktopButton::Right => BTN_RIGHT,
+        DesktopButton::Back => BTN_SIDE,
+        DesktopButton::Forward => BTN_EXTRA,
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn desktop_buttons_map_to_linux_input_event_codes() {
+        assert_eq!(button_code(DesktopButton::Left), 0x110);
+        assert_eq!(button_code(DesktopButton::Right), 0x111);
+        assert_eq!(button_code(DesktopButton::Middle), 0x112);
+        assert_eq!(button_code(DesktopButton::Back), 0x113);
+        assert_eq!(button_code(DesktopButton::Forward), 0x114);
+    }
+
+    #[test]
+    fn eis_errors_expose_stable_reason_codes() {
+        assert_eq!(
+            WaylandEisError::DeviceDiscoveryTimedOut.code(),
+            "eis_device_discovery_timed_out"
+        );
+        assert_eq!(
+            WaylandEisError::UnsupportedKeysym.code(),
+            "eis_unsupported_keysym"
+        );
+    }
+
+    #[test]
+    fn monotonic_timestamp_is_nonzero_and_nondecreasing() {
+        let first = monotonic_micros();
+        let second = monotonic_micros();
+        assert!(first > 0);
+        assert!(second >= first);
+    }
+}
diff --git a/agent/agent-runtime/src/wayland_portal.rs b/agent/agent-runtime/src/wayland_portal.rs
new file mode 100644
index 0000000..3c48d6c
--- /dev/null
+++ b/agent/agent-runtime/src/wayland_portal.rs
@@ -0,0 +1,677 @@
+use std::{
+    collections::HashMap,
+    fmt,
+    os::fd::{AsFd as _, BorrowedFd},
+    time::Duration,
+};
+
+use futures_util::StreamExt as _;
+use rand::RngCore as _;
+use zbus::{
+    Connection, Proxy,
+    proxy::SignalStream,
+    zvariant::{OwnedFd, OwnedObjectPath, OwnedValue, Value},
+};
+
+const PORTAL_DESTINATION: &str = "org.freedesktop.portal.Desktop";
+const PORTAL_PATH: &str = "/org/freedesktop/portal/desktop";
+const REMOTE_DESKTOP_INTERFACE: &str = "org.freedesktop.portal.RemoteDesktop";
+const SCREEN_CAST_INTERFACE: &str = "org.freedesktop.portal.ScreenCast";
+const REQUEST_INTERFACE: &str = "org.freedesktop.portal.Request";
+const SESSION_INTERFACE: &str = "org.freedesktop.portal.Session";
+
+const DEVICE_KEYBOARD: u32 = 1;
+const DEVICE_POINTER: u32 = 2;
+const SOURCE_MONITOR: u32 = 1;
+const CURSOR_EMBEDDED: u32 = 2;
+const MIN_REMOTE_DESKTOP_EIS_VERSION: u32 = 2;
+const PORTAL_REQUEST_TIMEOUT: Duration = Duration::from_secs(120);
+const MAX_PORTAL_STREAMS: usize = 16;
+
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct WaylandPortalStream {
+    pub pipewire_node_id: u32,
+    pub mapping_id: Option<String>,
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub struct WaylandPortalCapabilities {
+    pub remote_desktop_version: u32,
+    pub screen_cast_version: u32,
+    pub available_device_types: u32,
+    pub available_source_types: u32,
+    pub available_cursor_modes: u32,
+}
+
+impl WaylandPortalCapabilities {
+    #[must_use]
+    pub const fn supports_remote_desktop(self) -> bool {
+        self.remote_desktop_version >= MIN_REMOTE_DESKTOP_EIS_VERSION
+            && self.available_device_types & (DEVICE_KEYBOARD | DEVICE_POINTER)
+                == (DEVICE_KEYBOARD | DEVICE_POINTER)
+            && self.available_source_types & SOURCE_MONITOR == SOURCE_MONITOR
+            && self.available_cursor_modes & CURSOR_EMBEDDED == CURSOR_EMBEDDED
+    }
+}
+
+pub struct WaylandPortalSession {
+    connection: Connection,
+    session_handle: OwnedObjectPath,
+    pipewire_fd: OwnedFd,
+    eis_fd: OwnedFd,
+    streams: Vec<WaylandPortalStream>,
+    capabilities: WaylandPortalCapabilities,
+}
+
+impl WaylandPortalSession {
+    #[must_use]
+    pub fn session_handle(&self) -> &OwnedObjectPath {
+        &self.session_handle
+    }
+
+    #[must_use]
+    pub fn pipewire_fd(&self) -> BorrowedFd<'_> {
+        self.pipewire_fd.as_fd()
+    }
+
+    #[must_use]
+    pub fn eis_fd(&self) -> BorrowedFd<'_> {
+        self.eis_fd.as_fd()
+    }
+
+    #[must_use]
+    pub fn streams(&self) -> &[WaylandPortalStream] {
+        &self.streams
+    }
+
+    #[must_use]
+    pub const fn capabilities(&self) -> WaylandPortalCapabilities {
+        self.capabilities
+    }
+
+    pub async fn close(&self) -> Result<(), WaylandPortalSessionError> {
+        close_portal_session(&self.connection, &self.session_handle).await
+    }
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum WaylandPortalProbeError {
+    SessionBusUnavailable,
+    RemoteDesktopUnavailable,
+    ScreenCastUnavailable,
+    RemoteDesktopPropertiesUnavailable,
+    ScreenCastPropertiesUnavailable,
+    RequiredCapabilityUnavailable,
+}
+
+impl fmt::Display for WaylandPortalProbeError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        formatter.write_str(match self {
+            Self::SessionBusUnavailable => "the user D-Bus session is unavailable",
+            Self::RemoteDesktopUnavailable => "the RemoteDesktop Portal is unavailable",
+            Self::ScreenCastUnavailable => "the ScreenCast Portal is unavailable",
+            Self::RemoteDesktopPropertiesUnavailable => {
+                "the RemoteDesktop Portal capabilities are unavailable"
+            }
+            Self::ScreenCastPropertiesUnavailable => {
+                "the ScreenCast Portal capabilities are unavailable"
+            }
+            Self::RequiredCapabilityUnavailable => {
+                "the Portal does not provide monitor capture with keyboard, pointer, EIS, and an embedded cursor"
+            }
+        })
+    }
+}
+
+impl WaylandPortalProbeError {
+    #[must_use]
+    pub const fn code(self) -> &'static str {
+        match self {
+            Self::SessionBusUnavailable => "session_bus_unavailable",
+            Self::RemoteDesktopUnavailable => "remote_desktop_unavailable",
+            Self::ScreenCastUnavailable => "screen_cast_unavailable",
+            Self::RemoteDesktopPropertiesUnavailable => "remote_desktop_properties_unavailable",
+            Self::ScreenCastPropertiesUnavailable => "screen_cast_properties_unavailable",
+            Self::RequiredCapabilityUnavailable => "required_capability_unavailable",
+        }
+    }
+}
+
+impl std::error::Error for WaylandPortalProbeError {}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum WaylandPortalSessionError {
+    Probe(WaylandPortalProbeError),
+    InvalidBusIdentity,
+    RequestSubscriptionFailed,
+    RequestCallFailed,
+    UnexpectedRequestHandle,
+    RequestTimedOut,
+    RequestClosed,
+    UserCancelled,
+    RequestDenied,
+    MalformedResponse,
+    InvalidSessionHandle,
+    InvalidStreamList,
+    PipeWireRemoteUnavailable,
+    EisUnavailable,
+    SessionCloseFailed,
+}
+
+impl fmt::Display for WaylandPortalSessionError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        match self {
+            Self::Probe(error) => error.fmt(formatter),
+            Self::InvalidBusIdentity => formatter.write_str("the user D-Bus identity is invalid"),
+            Self::RequestSubscriptionFailed => {
+                formatter.write_str("the Portal request response could not be subscribed")
+            }
+            Self::RequestCallFailed => formatter.write_str("the Portal request could not be sent"),
+            Self::UnexpectedRequestHandle => {
+                formatter.write_str("the Portal returned an unexpected request handle")
+            }
+            Self::RequestTimedOut => formatter.write_str("the Portal request timed out"),
+            Self::RequestClosed => {
+                formatter.write_str("the Portal request closed without a response")
+            }
+            Self::UserCancelled => formatter.write_str("the user cancelled the Portal request"),
+            Self::RequestDenied => formatter.write_str("the Portal denied the request"),
+            Self::MalformedResponse => formatter.write_str("the Portal response is malformed"),
+            Self::InvalidSessionHandle => {
+                formatter.write_str("the Portal session handle is invalid")
+            }
+            Self::InvalidStreamList => formatter.write_str("the Portal stream list is invalid"),
+            Self::PipeWireRemoteUnavailable => {
+                formatter.write_str("the Portal PipeWire remote is unavailable")
+            }
+            Self::EisUnavailable => formatter.write_str("the Portal EIS connection is unavailable"),
+            Self::SessionCloseFailed => {
+                formatter.write_str("the Portal session could not be closed")
+            }
+        }
+    }
+}
+
+impl WaylandPortalSessionError {
+    #[must_use]
+    pub const fn code(self) -> &'static str {
+        match self {
+            Self::Probe(error) => error.code(),
+            Self::InvalidBusIdentity => "invalid_bus_identity",
+            Self::RequestSubscriptionFailed => "request_subscription_failed",
+            Self::RequestCallFailed => "request_call_failed",
+            Self::UnexpectedRequestHandle => "unexpected_request_handle",
+            Self::RequestTimedOut => "request_timed_out",
+            Self::RequestClosed => "request_closed",
+            Self::UserCancelled => "user_cancelled",
+            Self::RequestDenied => "request_denied",
+            Self::MalformedResponse => "malformed_response",
+            Self::InvalidSessionHandle => "invalid_session_handle",
+            Self::InvalidStreamList => "invalid_stream_list",
+            Self::PipeWireRemoteUnavailable => "pipewire_remote_unavailable",
+            Self::EisUnavailable => "eis_unavailable",
+            Self::SessionCloseFailed => "session_close_failed",
+        }
+    }
+}
+
+impl std::error::Error for WaylandPortalSessionError {}
+
+pub async fn probe_wayland_portal() -> Result<WaylandPortalCapabilities, WaylandPortalProbeError> {
+    let connection = Connection::session()
+        .await
+        .map_err(|_| WaylandPortalProbeError::SessionBusUnavailable)?;
+    probe_wayland_portal_on(&connection).await
+}
+
+async fn probe_wayland_portal_on(
+    connection: &Connection,
+) -> Result<WaylandPortalCapabilities, WaylandPortalProbeError> {
+    let remote_desktop = Proxy::new(
+        connection,
+        PORTAL_DESTINATION,
+        PORTAL_PATH,
+        REMOTE_DESKTOP_INTERFACE,
+    )
+    .await
+    .map_err(|_| WaylandPortalProbeError::RemoteDesktopUnavailable)?;
+    let screen_cast = Proxy::new(
+        connection,
+        PORTAL_DESTINATION,
+        PORTAL_PATH,
+        SCREEN_CAST_INTERFACE,
+    )
+    .await
+    .map_err(|_| WaylandPortalProbeError::ScreenCastUnavailable)?;
+
+    let remote_desktop_version = remote_desktop
+        .get_property("version")
+        .await
+        .map_err(|_| WaylandPortalProbeError::RemoteDesktopPropertiesUnavailable)?;
+    let available_device_types = remote_desktop
+        .get_property("AvailableDeviceTypes")
+        .await
+        .map_err(|_| WaylandPortalProbeError::RemoteDesktopPropertiesUnavailable)?;
+    let screen_cast_version = screen_cast
+        .get_property("version")
+        .await
+        .map_err(|_| WaylandPortalProbeError::ScreenCastPropertiesUnavailable)?;
+    let available_source_types = screen_cast
+        .get_property("AvailableSourceTypes")
+        .await
+        .map_err(|_| WaylandPortalProbeError::ScreenCastPropertiesUnavailable)?;
+    let available_cursor_modes = screen_cast
+        .get_property("AvailableCursorModes")
+        .await
+        .map_err(|_| WaylandPortalProbeError::ScreenCastPropertiesUnavailable)?;
+    let capabilities = WaylandPortalCapabilities {
+        remote_desktop_version,
+        screen_cast_version,
+        available_device_types,
+        available_source_types,
+        available_cursor_modes,
+    };
+    if !capabilities.supports_remote_desktop() {
+        return Err(WaylandPortalProbeError::RequiredCapabilityUnavailable);
+    }
+    Ok(capabilities)
+}
+
+pub async fn open_wayland_portal_session() -> Result<WaylandPortalSession, WaylandPortalSessionError>
+{
+    let connection = Connection::session().await.map_err(|_| {
+        WaylandPortalSessionError::Probe(WaylandPortalProbeError::SessionBusUnavailable)
+    })?;
+    let capabilities = probe_wayland_portal_on(&connection)
+        .await
+        .map_err(WaylandPortalSessionError::Probe)?;
+    let remote_desktop = Proxy::new(
+        &connection,
+        PORTAL_DESTINATION,
+        PORTAL_PATH,
+        REMOTE_DESKTOP_INTERFACE,
+    )
+    .await
+    .map_err(|_| {
+        WaylandPortalSessionError::Probe(WaylandPortalProbeError::RemoteDesktopUnavailable)
+    })?;
+    let screen_cast = Proxy::new(
+        &connection,
+        PORTAL_DESTINATION,
+        PORTAL_PATH,
+        SCREEN_CAST_INTERFACE,
+    )
+    .await
+    .map_err(|_| {
+        WaylandPortalSessionError::Probe(WaylandPortalProbeError::ScreenCastUnavailable)
+    })?;
+
+    let create_request_token = portal_token("create");
+    let session_token = portal_token("session");
+    let (create_request_path, create_request) =
+        subscribe_request(&connection, &create_request_token).await?;
+    let mut create_responses = create_request
+        .receive_signal("Response")
+        .await
+        .map_err(|_| WaylandPortalSessionError::RequestSubscriptionFailed)?;
+    let mut create_options = HashMap::<&str, Value<'_>>::new();
+    create_options.insert("handle_token", Value::from(create_request_token.as_str()));
+    create_options.insert("session_handle_token", Value::from(session_token.as_str()));
+    let returned_request: OwnedObjectPath = remote_desktop
+        .call("CreateSession", &(create_options,))
+        .await
+        .map_err(|_| WaylandPortalSessionError::RequestCallFailed)?;
+    let mut create_results = await_request_response(
+        &create_request_path,
+        &returned_request,
+        &mut create_responses,
+    )
+    .await?;
+    let session_handle = create_results
+        .remove("session_handle")
+        .ok_or(WaylandPortalSessionError::InvalidSessionHandle)
+        .and_then(|value| {
+            String::try_from(value).map_err(|_| WaylandPortalSessionError::InvalidSessionHandle)
+        })
+        .and_then(|value| {
+            OwnedObjectPath::try_from(value)
+                .map_err(|_| WaylandPortalSessionError::InvalidSessionHandle)
+        })?;
+    let expected_session_path = portal_object_path("session", &connection, &session_token)?;
+    if session_handle != expected_session_path {
+        let _ = close_portal_session(&connection, &session_handle).await;
+        return Err(WaylandPortalSessionError::InvalidSessionHandle);
+    }
+
+    let opened = async {
+        select_devices(
+            &connection,
+            &remote_desktop,
+            &session_handle,
+            DEVICE_KEYBOARD | DEVICE_POINTER,
+        )
+        .await?;
+        select_sources(&connection, &screen_cast, &session_handle).await?;
+        let (selected_devices, streams) =
+            start_session(&connection, &remote_desktop, &session_handle).await?;
+        if selected_devices & (DEVICE_KEYBOARD | DEVICE_POINTER)
+            != (DEVICE_KEYBOARD | DEVICE_POINTER)
+        {
+            return Err(WaylandPortalSessionError::RequestDenied);
+        }
+
+        let pipewire_options = HashMap::<&str, Value<'_>>::new();
+        let pipewire_fd: OwnedFd = screen_cast
+            .call("OpenPipeWireRemote", &(&session_handle, pipewire_options))
+            .await
+            .map_err(|_| WaylandPortalSessionError::PipeWireRemoteUnavailable)?;
+        let eis_options = HashMap::<&str, Value<'_>>::new();
+        let eis_fd: OwnedFd = remote_desktop
+            .call("ConnectToEIS", &(&session_handle, eis_options))
+            .await
+            .map_err(|_| WaylandPortalSessionError::EisUnavailable)?;
+        Ok((pipewire_fd, eis_fd, streams))
+    }
+    .await;
+    let (pipewire_fd, eis_fd, streams) = match opened {
+        Ok(opened) => opened,
+        Err(error) => {
+            let _ = close_portal_session(&connection, &session_handle).await;
+            return Err(error);
+        }
+    };
+
+    Ok(WaylandPortalSession {
+        connection: connection.clone(),
+        session_handle,
+        pipewire_fd,
+        eis_fd,
+        streams,
+        capabilities,
+    })
+}
+
+async fn close_portal_session(
+    connection: &Connection,
+    session_handle: &OwnedObjectPath,
+) -> Result<(), WaylandPortalSessionError> {
+    let session = Proxy::new(
+        connection,
+        PORTAL_DESTINATION,
+        session_handle.as_str(),
+        SESSION_INTERFACE,
+    )
+    .await
+    .map_err(|_| WaylandPortalSessionError::SessionCloseFailed)?;
+    let _: () = session
+        .call("Close", &())
+        .await
+        .map_err(|_| WaylandPortalSessionError::SessionCloseFailed)?;
+    Ok(())
+}
+
+async fn select_devices(
+    connection: &Connection,
+    remote_desktop: &Proxy<'_>,
+    session_handle: &OwnedObjectPath,
+    device_types: u32,
+) -> Result<(), WaylandPortalSessionError> {
+    let token = portal_token("devices");
+    let (request_path, request) = subscribe_request(connection, &token).await?;
+    let mut responses = request
+        .receive_signal("Response")
+        .await
+        .map_err(|_| WaylandPortalSessionError::RequestSubscriptionFailed)?;
+    let mut options = HashMap::<&str, Value<'_>>::new();
+    options.insert("handle_token", Value::from(token.as_str()));
+    options.insert("types", Value::from(device_types));
+    let returned: OwnedObjectPath = remote_desktop
+        .call("SelectDevices", &(session_handle, options))
+        .await
+        .map_err(|_| WaylandPortalSessionError::RequestCallFailed)?;
+    await_request_response(&request_path, &returned, &mut responses).await?;
+    Ok(())
+}
+
+async fn select_sources(
+    connection: &Connection,
+    screen_cast: &Proxy<'_>,
+    session_handle: &OwnedObjectPath,
+) -> Result<(), WaylandPortalSessionError> {
+    let token = portal_token("sources");
+    let (request_path, request) = subscribe_request(connection, &token).await?;
+    let mut responses = request
+        .receive_signal("Response")
+        .await
+        .map_err(|_| WaylandPortalSessionError::RequestSubscriptionFailed)?;
+    let mut options = HashMap::<&str, Value<'_>>::new();
+    options.insert("handle_token", Value::from(token.as_str()));
+    options.insert("types", Value::from(SOURCE_MONITOR));
+    options.insert("multiple", Value::from(false));
+    options.insert("cursor_mode", Value::from(CURSOR_EMBEDDED));
+    let returned: OwnedObjectPath = screen_cast
+        .call("SelectSources", &(session_handle, options))
+        .await
+        .map_err(|_| WaylandPortalSessionError::RequestCallFailed)?;
+    await_request_response(&request_path, &returned, &mut responses).await?;
+    Ok(())
+}
+
+async fn start_session(
+    connection: &Connection,
+    remote_desktop: &Proxy<'_>,
+    session_handle: &OwnedObjectPath,
+) -> Result<(u32, Vec<WaylandPortalStream>), WaylandPortalSessionError> {
+    let token = portal_token("start");
+    let (request_path, request) = subscribe_request(connection, &token).await?;
+    let mut responses = request
+        .receive_signal("Response")
+        .await
+        .map_err(|_| WaylandPortalSessionError::RequestSubscriptionFailed)?;
+    let mut options = HashMap::<&str, Value<'_>>::new();
+    options.insert("handle_token", Value::from(token.as_str()));
+    let returned: OwnedObjectPath = remote_desktop
+        .call("Start", &(session_handle, "", options))
+        .await
+        .map_err(|_| WaylandPortalSessionError::RequestCallFailed)?;
+    let mut results = await_request_response(&request_path, &returned, &mut responses).await?;
+    let devices = results
+        .remove("devices")
+        .ok_or(WaylandPortalSessionError::MalformedResponse)
+        .and_then(|value| {
+            u32::try_from(value).map_err(|_| WaylandPortalSessionError::MalformedResponse)
+        })?;
+    let streams = results
+        .remove("streams")
+        .ok_or(WaylandPortalSessionError::InvalidStreamList)
+        .and_then(parse_streams)?;
+    Ok((devices, streams))
+}
+
+async fn subscribe_request<'a>(
+    connection: &'a Connection,
+    token: &str,
+) -> Result<(OwnedObjectPath, Proxy<'a>), WaylandPortalSessionError> {
+    let path = portal_object_path("request", connection, token)?;
+    let proxy = Proxy::new_owned(
+        connection.clone(),
+        PORTAL_DESTINATION,
+        path.clone(),
+        REQUEST_INTERFACE,
+    )
+    .await
+    .map_err(|_| WaylandPortalSessionError::RequestSubscriptionFailed)?;
+    Ok((path, proxy))
+}
+
+async fn await_request_response(
+    expected_path: &OwnedObjectPath,
+    returned_path: &OwnedObjectPath,
+    responses: &mut SignalStream<'_>,
+) -> Result<HashMap<String, OwnedValue>, WaylandPortalSessionError> {
+    if expected_path != returned_path {
+        return Err(WaylandPortalSessionError::UnexpectedRequestHandle);
+    }
+    let response = tokio::time::timeout(PORTAL_REQUEST_TIMEOUT, responses.next())
+        .await
+        .map_err(|_| WaylandPortalSessionError::RequestTimedOut)?
+        .ok_or(WaylandPortalSessionError::RequestClosed)?;
+    let (response_code, results): (u32, HashMap<String, OwnedValue>) = response
+        .body()
+        .deserialize()
+        .map_err(|_| WaylandPortalSessionError::MalformedResponse)?;
+    match response_code {
+        0 => Ok(results),
+        1 => Err(WaylandPortalSessionError::UserCancelled),
+        _ => Err(WaylandPortalSessionError::RequestDenied),
+    }
+}
+
+fn parse_streams(value: OwnedValue) -> Result<Vec<WaylandPortalStream>, WaylandPortalSessionError> {
+    let streams: Vec<(u32, HashMap<String, OwnedValue>)> = value
+        .try_into()
+        .map_err(|_| WaylandPortalSessionError::InvalidStreamList)?;
+    if streams.is_empty() || streams.len() > MAX_PORTAL_STREAMS {
+        return Err(WaylandPortalSessionError::InvalidStreamList);
+    }
+    streams
+        .into_iter()
+        .map(|(pipewire_node_id, mut properties)| {
+            if pipewire_node_id == 0 {
+                return Err(WaylandPortalSessionError::InvalidStreamList);
+            }
+            let mapping_id = properties
+                .remove("mapping_id")
+                .map(String::try_from)
+                .transpose()
+                .map_err(|_| WaylandPortalSessionError::InvalidStreamList)?;
+            if mapping_id.as_ref().is_some_and(|value| {
+                value.is_empty()
+                    || value.len() > 128
+                    || !value.bytes().all(|byte| byte.is_ascii_graphic())
+            }) {
+                return Err(WaylandPortalSessionError::InvalidStreamList);
+            }
+            Ok(WaylandPortalStream {
+                pipewire_node_id,
+                mapping_id,
+            })
+        })
+        .collect()
+}
+
+fn portal_token(prefix: &str) -> String {
+    let mut random = [0_u8; 12];
+    rand::rng().fill_bytes(&mut random);
+    let mut token = String::with_capacity(prefix.len() + 1 + random.len() * 2);
+    token.push_str(prefix);
+    token.push('_');
+    for byte in random {
+        use fmt::Write as _;
+        write!(token, "{byte:02x}").expect("writing to a String cannot fail");
+    }
+    token
+}
+
+fn portal_object_path(
+    kind: &str,
+    connection: &Connection,
+    token: &str,
+) -> Result<OwnedObjectPath, WaylandPortalSessionError> {
+    if !matches!(kind, "request" | "session")
+        || token.is_empty()
+        || !token
+            .bytes()
+            .all(|byte| byte.is_ascii_alphanumeric() || byte == b'_')
+    {
+        return Err(WaylandPortalSessionError::InvalidBusIdentity);
+    }
+    let sender = connection
+        .unique_name()
+        .ok_or(WaylandPortalSessionError::InvalidBusIdentity)?
+        .as_str()
+        .strip_prefix(':')
+        .ok_or(WaylandPortalSessionError::InvalidBusIdentity)?
+        .replace('.', "_");
+    if sender.is_empty()
+        || !sender
+            .bytes()
+            .all(|byte| byte.is_ascii_alphanumeric() || byte == b'_')
+    {
+        return Err(WaylandPortalSessionError::InvalidBusIdentity);
+    }
+    OwnedObjectPath::try_from(format!(
+        "/org/freedesktop/portal/desktop/{kind}/{sender}/{token}"
+    ))
+    .map_err(|_| WaylandPortalSessionError::InvalidBusIdentity)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn complete_capabilities() -> WaylandPortalCapabilities {
+        WaylandPortalCapabilities {
+            remote_desktop_version: MIN_REMOTE_DESKTOP_EIS_VERSION,
+            screen_cast_version: 1,
+            available_device_types: DEVICE_KEYBOARD | DEVICE_POINTER,
+            available_source_types: SOURCE_MONITOR,
+            available_cursor_modes: CURSOR_EMBEDDED,
+        }
+    }
+
+    #[test]
+    fn strict_portal_gate_requires_capture_input_eis_and_embedded_cursor() {
+        let complete = complete_capabilities();
+        assert!(complete.supports_remote_desktop());
+
+        for incomplete in [
+            WaylandPortalCapabilities {
+                remote_desktop_version: MIN_REMOTE_DESKTOP_EIS_VERSION - 1,
+                ..complete
+            },
+            WaylandPortalCapabilities {
+                available_device_types: DEVICE_POINTER,
+                ..complete
+            },
+            WaylandPortalCapabilities {
+                available_source_types: 0,
+                ..complete
+            },
+            WaylandPortalCapabilities {
+                available_cursor_modes: 0,
+                ..complete
+            },
+        ] {
+            assert!(!incomplete.supports_remote_desktop());
+        }
+    }
+
+    #[test]
+    fn request_tokens_are_bounded_canonical_object_path_elements() {
+        let first = portal_token("create");
+        let second = portal_token("create");
+        assert_ne!(first, second);
+        assert!(first.len() <= 64);
+        assert!(
+            first
+                .bytes()
+                .all(|byte| byte.is_ascii_alphanumeric() || byte == b'_')
+        );
+    }
+
+    #[test]
+    fn session_errors_expose_only_stable_reason_codes() {
+        assert_eq!(
+            WaylandPortalSessionError::UserCancelled.code(),
+            "user_cancelled"
+        );
+        assert_eq!(
+            WaylandPortalSessionError::Probe(
+                WaylandPortalProbeError::RequiredCapabilityUnavailable
+            )
+            .code(),
+            "required_capability_unavailable"
+        );
+    }
+}
diff --git a/agent/agent-runtime/src/webrtc_session.rs b/agent/agent-runtime/src/webrtc_session.rs
new file mode 100644
index 0000000..fb1e510
--- /dev/null
+++ b/agent/agent-runtime/src/webrtc_session.rs
@@ -0,0 +1,1512 @@
+use async_trait::async_trait;
+use bytes::{Bytes, BytesMut};
+use rtc::interceptor::Registry;
+use rtc::media::Sample;
+use rtc::peer_connection::configuration::RTCConfigurationBuilder;
+use rtc::peer_connection::configuration::interceptor_registry::register_default_interceptors;
+use rtc::peer_connection::configuration::media_engine::{
+    MIME_TYPE_H264, MIME_TYPE_OPUS, MediaEngine,
+};
+use rtc::peer_connection::transport::RTCIceServer;
+use rtc::rtcp::payload_feedbacks::picture_loss_indication::PictureLossIndication;
+use rtc::rtp::codec::h264::H264Packet;
+use rtc::rtp::packet::Packet as RtpPacket;
+use rtc::rtp::packetizer::Depacketizer;
+use rtc::rtp_transceiver::rtp_sender::{
+    RTCPFeedback, RTCRtpCodec, RTCRtpCodecParameters, RTCRtpCodingParameters,
+    RTCRtpEncodingParameters, RtpCodecKind, TYPE_RTCP_FB_NACK, TYPE_RTCP_FB_TRANSPORT_CC,
+};
+use rtc::rtp_transceiver::{RTCRtpTransceiverDirection, RTCRtpTransceiverInit};
+use std::collections::VecDeque;
+use std::fmt;
+use std::net::SocketAddr;
+use std::sync::Arc;
+use std::time::Duration;
+use tokio::sync::{mpsc, watch};
+use tokio::time::{Instant, MissedTickBehavior};
+use webrtc::data_channel::DataChannel;
+use webrtc::media_stream::track_local::TrackLocal;
+use webrtc::media_stream::track_local::static_sample::TrackLocalStaticSample;
+use webrtc::media_stream::track_remote::TrackRemote;
+use webrtc::media_stream::track_remote::TrackRemoteEvent;
+use webrtc::media_stream::{MediaStreamTrack, Track};
+use webrtc::peer_connection::{
+    PeerConnection, PeerConnectionBuilder, PeerConnectionEventHandler, RTCIceCandidateInit,
+    RTCIceGatheringState, RTCPeerConnectionIceEvent, RTCPeerConnectionState,
+};
+use webrtc::rtp_transceiver::RtpSender;
+
+use crate::protocol::DESKTOP_MAX_OPUS_PACKET_BYTES;
+use crate::{EdgeNegotiationClient, EdgeNegotiationError};
+use remotedesk_protocol::{EdgeNegotiationKind, MAX_ICE_CANDIDATE_BYTES, MAX_SDP_BYTES};
+
+const H264_PAYLOAD_TYPE: u8 = 102;
+const H264_RTX_PAYLOAD_TYPE: u8 = 103;
+const OPUS_PAYLOAD_TYPE: u8 = 111;
+const SIGNAL_QUEUE_CAPACITY: usize = 256;
+const TRACK_QUEUE_CAPACITY: usize = 4;
+const POLL_INTERVAL: Duration = Duration::from_millis(100);
+const MIN_CONNECT_TIMEOUT: Duration = Duration::from_secs(5);
+const MAX_CONNECT_TIMEOUT: Duration = Duration::from_secs(60);
+const MAX_ICE_SERVERS: usize = 8;
+const MAX_ICE_URLS_PER_SERVER: usize = 8;
+const MAX_ICE_URL_BYTES: usize = 2_048;
+const MAX_CREDENTIAL_BYTES: usize = 1_024;
+const MAX_H264_ACCESS_UNIT_BYTES: usize = 16 * 1024 * 1024;
+const DEFAULT_VIDEO_FRAME_DURATION: Duration = Duration::from_micros(33_333);
+
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub enum EdgeWebRtcRole {
+    ClientOfferer,
+    AgentAnswerer,
+}
+
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct WebRtcSignalMessage {
+    pub kind: EdgeNegotiationKind,
+    pub payload: String,
+}
+
+impl WebRtcSignalMessage {
+    /// Builds one bounded SDP or ICE message for an authenticated signaling transport.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error when the payload does not match the selected message kind.
+    pub fn new(kind: EdgeNegotiationKind, payload: String) -> Result<Self, WebRtcSessionError> {
+        validate_signal_payload(kind, &payload)?;
+        Ok(Self { kind, payload })
+    }
+
+    /// Builds one signal accepted by the direct authenticated WSS transport.
+    ///
+    /// Direct sessions do not support the Edge mailbox ICE restart operation.
+    pub fn new_direct(
+        kind: EdgeNegotiationKind,
+        payload: String,
+    ) -> Result<Self, WebRtcSessionError> {
+        if kind == EdgeNegotiationKind::Restart {
+            return Err(WebRtcSessionError::UnexpectedSignal);
+        }
+        Self::new(kind, payload)
+    }
+}
+
+#[async_trait]
+pub trait WebRtcSignalTransport: Send {
+    async fn send(&mut self, message: WebRtcSignalMessage) -> Result<(), WebRtcSessionError>;
+
+    async fn poll(&mut self) -> Result<Vec<WebRtcSignalMessage>, WebRtcSessionError>;
+}
+
+#[derive(Clone, Eq, PartialEq)]
+pub struct WebRtcIceServer {
+    pub urls: Vec<String>,
+    pub username: String,
+    pub credential: String,
+}
+
+impl fmt::Debug for WebRtcIceServer {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        formatter
+            .debug_struct("WebRtcIceServer")
+            .field("urls", &self.urls)
+            .field(
+                "username",
+                &(!self.username.is_empty()).then_some("[configured]"),
+            )
+            .field(
+                "credential",
+                &(!self.credential.is_empty()).then_some("[REDACTED]"),
+            )
+            .finish()
+    }
+}
+
+#[derive(Clone, Debug)]
+pub struct WebRtcSessionConfig {
+    pub role: EdgeWebRtcRole,
+    pub bind_address: SocketAddr,
+    pub ice_servers: Vec<WebRtcIceServer>,
+    pub connect_timeout: Duration,
+}
+
+impl WebRtcSessionConfig {
+    /// Validates the network and resource boundary before sockets are opened.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error for unusable bind addresses, unsafe ICE configuration, or
+    /// an unbounded connection timeout.
+    pub fn validate(&self) -> Result<(), WebRtcSessionError> {
+        if self.bind_address.port() != 0
+            || self.connect_timeout < MIN_CONNECT_TIMEOUT
+            || self.connect_timeout > MAX_CONNECT_TIMEOUT
+            || self.ice_servers.len() > MAX_ICE_SERVERS
+        {
+            return Err(WebRtcSessionError::InvalidConfiguration);
+        }
+        for server in &self.ice_servers {
+            if server.urls.is_empty()
+                || server.urls.len() > MAX_ICE_URLS_PER_SERVER
+                || server.username.len() > MAX_CREDENTIAL_BYTES
+                || server.credential.len() > MAX_CREDENTIAL_BYTES
+                || server.username.is_empty() != server.credential.is_empty()
+            {
+                return Err(WebRtcSessionError::InvalidConfiguration);
+            }
+            for url in &server.urls {
+                if url.is_empty()
+                    || url.len() > MAX_ICE_URL_BYTES
+                    || url.chars().any(char::is_control)
+                    || !matches!(
+                        url.split_once(':').map(|(scheme, _)| scheme),
+                        Some("stun" | "stuns" | "turn" | "turns")
+                    )
+                {
+                    return Err(WebRtcSessionError::InvalidConfiguration);
+                }
+            }
+        }
+        Ok(())
+    }
+}
+
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub enum WebRtcConnectionState {
+    New,
+    Connecting,
+    Connected,
+    Disconnected,
+    Failed,
+    Closed,
+}
+
+#[derive(Clone)]
+pub struct RemoteMediaTrack {
+    pub kind: RtpCodecKind,
+    pub track: Arc<dyn TrackRemote>,
+}
+
+impl fmt::Debug for RemoteMediaTrack {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        formatter
+            .debug_struct("RemoteMediaTrack")
+            .field("kind", &self.kind)
+            .field("track", &"[remote SRTP track]")
+            .finish()
+    }
+}
+
+impl RemoteMediaTrack {
+    /// Requests an immediate video keyframe with RTCP PLI.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error for a non-video track, a track without an SSRC, or a
+    /// stopped PeerConnection.
+    pub async fn request_keyframe(&self) -> Result<(), WebRtcSessionError> {
+        if self.kind != RtpCodecKind::Video {
+            return Err(WebRtcSessionError::InvalidMediaSample);
+        }
+        let media_ssrc = self
+            .track
+            .ssrcs()
+            .await
+            .first()
+            .copied()
+            .ok_or(WebRtcSessionError::InvalidMediaSample)?;
+        self.track
+            .write_rtcp(vec![Box::new(PictureLossIndication {
+                sender_ssrc: 0,
+                media_ssrc,
+            })])
+            .await
+            .map_err(|error| WebRtcSessionError::PeerConnection(error.to_string()))
+    }
+
+    /// Converts this video track into a bounded RFC 6184 access-unit stream.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error when the remote track is not video.
+    pub fn into_h264_stream(self) -> Result<RemoteH264Stream, WebRtcSessionError> {
+        if self.kind != RtpCodecKind::Video {
+            return Err(WebRtcSessionError::InvalidMediaSample);
+        }
+        Ok(RemoteH264Stream {
+            track: self,
+            assembler: H264RtpAssembler::default(),
+            awaiting_keyframe: true,
+            keyframe_requested: false,
+        })
+    }
+
+    /// Converts this audio track into a bounded one-packet-per-RTP Opus stream.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error when the remote track is not audio.
+    pub fn into_opus_stream(self) -> Result<RemoteOpusStream, WebRtcSessionError> {
+        if self.kind != RtpCodecKind::Audio {
+            return Err(WebRtcSessionError::InvalidMediaSample);
+        }
+        Ok(RemoteOpusStream {
+            track: self,
+            expected_sequence: None,
+        })
+    }
+}
+
+#[derive(Clone, Debug)]
+pub struct RemoteOpusPacket {
+    pub data: Bytes,
+    pub rtp_timestamp: u32,
+    pub discontinuity: bool,
+}
+
+pub struct RemoteOpusStream {
+    track: RemoteMediaTrack,
+    expected_sequence: Option<u16>,
+}
+
+impl fmt::Debug for RemoteOpusStream {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        formatter
+            .debug_struct("RemoteOpusStream")
+            .field("track", &self.track)
+            .finish_non_exhaustive()
+    }
+}
+
+impl RemoteOpusStream {
+    /// Reads the next bounded Opus RTP payload.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error for an empty/oversized payload or a failed remote track.
+    pub async fn next_packet(&mut self) -> Result<Option<RemoteOpusPacket>, WebRtcSessionError> {
+        while let Some(event) = self.track.track.poll().await {
+            match event {
+                TrackRemoteEvent::OnRtpPacket(packet) => {
+                    return classify_opus_packet(&mut self.expected_sequence, &packet).map(Some);
+                }
+                TrackRemoteEvent::OnError => return Err(WebRtcSessionError::InvalidMediaPacket),
+                TrackRemoteEvent::OnEnding | TrackRemoteEvent::OnEnded => return Ok(None),
+                _ => {}
+            }
+        }
+        Ok(None)
+    }
+}
+
+fn classify_opus_packet(
+    expected_sequence: &mut Option<u16>,
+    packet: &RtpPacket,
+) -> Result<RemoteOpusPacket, WebRtcSessionError> {
+    if packet.payload.is_empty() || packet.payload.len() > DESKTOP_MAX_OPUS_PACKET_BYTES {
+        return Err(WebRtcSessionError::InvalidMediaPacket);
+    }
+    let sequence = packet.header.sequence_number;
+    let discontinuity = expected_sequence.is_some_and(|expected| expected != sequence);
+    *expected_sequence = Some(sequence.wrapping_add(1));
+    Ok(RemoteOpusPacket {
+        data: packet.payload.clone(),
+        rtp_timestamp: packet.header.timestamp,
+        discontinuity,
+    })
+}
+
+#[derive(Clone, Debug)]
+pub struct RemoteH264AccessUnit {
+    pub data: Bytes,
+    pub rtp_timestamp: u32,
+    pub duration: Duration,
+    pub keyframe: bool,
+}
+
+#[derive(Clone, Debug)]
+pub enum RemoteH264Event {
+    AccessUnit(RemoteH264AccessUnit),
+    RecoveryRequired,
+}
+
+pub struct RemoteH264Stream {
+    track: RemoteMediaTrack,
+    assembler: H264RtpAssembler,
+    awaiting_keyframe: bool,
+    keyframe_requested: bool,
+}
+
+impl fmt::Debug for RemoteH264Stream {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        formatter
+            .debug_struct("RemoteH264Stream")
+            .field("track", &self.track)
+            .finish_non_exhaustive()
+    }
+}
+
+impl RemoteH264Stream {
+    /// Resets local depacketization state after a downstream frame drop and
+    /// requests a fresh decoder recovery point from the sender.
+    pub async fn recover_from_local_drop(&mut self) {
+        self.assembler.reset_partial();
+        self.awaiting_keyframe = true;
+        let _ = self.track.request_keyframe().await;
+        self.keyframe_requested = true;
+    }
+
+    /// Reads the next complete Annex-B access unit. Packet loss resets partial
+    /// state and triggers PLI before reading continues.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error for malformed or oversized RTP/H.264 payloads, or when
+    /// the remote track reports failure.
+    pub async fn next_access_unit(
+        &mut self,
+    ) -> Result<Option<RemoteH264AccessUnit>, WebRtcSessionError> {
+        loop {
+            match self.next_event().await? {
+                Some(RemoteH264Event::AccessUnit(access_unit)) => return Ok(Some(access_unit)),
+                Some(RemoteH264Event::RecoveryRequired) => {}
+                None => return Ok(None),
+            }
+        }
+    }
+
+    /// Reads the next complete access unit or an immediate recovery signal.
+    /// Consumers that can switch transports should act on `RecoveryRequired`
+    /// instead of waiting for a keyframe on a stalled presentation-ACK loop.
+    pub async fn next_event(&mut self) -> Result<Option<RemoteH264Event>, WebRtcSessionError> {
+        if self.awaiting_keyframe && !self.keyframe_requested {
+            let _ = self.track.request_keyframe().await;
+            self.keyframe_requested = true;
+        }
+        while let Some(event) = self.track.track.poll().await {
+            match event {
+                TrackRemoteEvent::OnRtpPacket(packet) => {
+                    let assembled = self.assembler.push(&packet)?;
+                    if assembled.discontinuity {
+                        let _ = self.track.request_keyframe().await;
+                        self.keyframe_requested = true;
+                    }
+                    if let Some(event) =
+                        classify_h264_assembly(&mut self.awaiting_keyframe, assembled)
+                    {
+                        if matches!(event, RemoteH264Event::AccessUnit(_)) {
+                            self.keyframe_requested = false;
+                        }
+                        return Ok(Some(event));
+                    }
+                }
+                TrackRemoteEvent::OnError => return Err(WebRtcSessionError::InvalidMediaPacket),
+                TrackRemoteEvent::OnEnding | TrackRemoteEvent::OnEnded => return Ok(None),
+                _ => {}
+            }
+        }
+        Ok(None)
+    }
+}
+
+fn classify_h264_assembly(
+    awaiting_keyframe: &mut bool,
+    assembled: H264AssemblerResult,
+) -> Option<RemoteH264Event> {
+    if assembled.discontinuity {
+        *awaiting_keyframe = true;
+        if assembled
+            .access_unit
+            .as_ref()
+            .is_none_or(|access_unit| !access_unit.keyframe)
+        {
+            return Some(RemoteH264Event::RecoveryRequired);
+        }
+    }
+    let access_unit = assembled.access_unit?;
+    if *awaiting_keyframe && !access_unit.keyframe {
+        return None;
+    }
+    *awaiting_keyframe = false;
+    Some(RemoteH264Event::AccessUnit(access_unit))
+}
+
+struct H264AssemblerResult {
+    access_unit: Option<RemoteH264AccessUnit>,
+    discontinuity: bool,
+}
+
+#[derive(Default)]
+struct H264RtpAssembler {
+    depacketizer: H264Packet,
+    data: BytesMut,
+    timestamp: Option<u32>,
+    expected_sequence: Option<u16>,
+    previous_completed_timestamp: Option<u32>,
+}
+
+impl H264RtpAssembler {
+    fn push(&mut self, packet: &RtpPacket) -> Result<H264AssemblerResult, WebRtcSessionError> {
+        if packet.payload.is_empty() {
+            return Err(WebRtcSessionError::InvalidMediaPacket);
+        }
+        let partition_head = self.depacketizer.is_partition_head(&packet.payload);
+        let mut discontinuity = self
+            .expected_sequence
+            .is_some_and(|expected| expected != packet.header.sequence_number);
+        if self
+            .timestamp
+            .is_some_and(|timestamp| timestamp != packet.header.timestamp)
+        {
+            discontinuity = true;
+        }
+        if discontinuity {
+            self.reset_partial();
+            if !partition_head {
+                return Ok(H264AssemblerResult {
+                    access_unit: None,
+                    discontinuity: true,
+                });
+            }
+        }
+        if self.timestamp.is_none() {
+            if !partition_head {
+                return Ok(H264AssemblerResult {
+                    access_unit: None,
+                    discontinuity,
+                });
+            }
+            self.timestamp = Some(packet.header.timestamp);
+        }
+
+        let decoded = self
+            .depacketizer
+            .depacketize(&packet.payload)
+            .map_err(|_| WebRtcSessionError::InvalidMediaPacket)?;
+        if self.data.len().saturating_add(decoded.len()) > MAX_H264_ACCESS_UNIT_BYTES {
+            self.reset_partial();
+            return Err(WebRtcSessionError::InvalidMediaPacket);
+        }
+        self.data.extend_from_slice(&decoded);
+        self.expected_sequence = Some(packet.header.sequence_number.wrapping_add(1));
+        if !packet.header.marker {
+            return Ok(H264AssemblerResult {
+                access_unit: None,
+                discontinuity,
+            });
+        }
+
+        let timestamp = self
+            .timestamp
+            .take()
+            .ok_or(WebRtcSessionError::InvalidMediaPacket)?;
+        let data = self.data.split().freeze();
+        self.depacketizer = H264Packet::default();
+        if data.is_empty() || !valid_annex_b_access_unit(&data) {
+            return Err(WebRtcSessionError::InvalidMediaPacket);
+        }
+        let duration =
+            self.previous_completed_timestamp
+                .map_or(DEFAULT_VIDEO_FRAME_DURATION, |previous| {
+                    let ticks = timestamp.wrapping_sub(previous);
+                    if ticks == 0 || ticks > 90_000 {
+                        DEFAULT_VIDEO_FRAME_DURATION
+                    } else {
+                        Duration::from_nanos(
+                            u64::from(ticks).saturating_mul(1_000_000_000) / 90_000,
+                        )
+                    }
+                });
+        self.previous_completed_timestamp = Some(timestamp);
+        Ok(H264AssemblerResult {
+            access_unit: Some(RemoteH264AccessUnit {
+                keyframe: annex_b_contains_nal_type(&data, 5),
+                data,
+                rtp_timestamp: timestamp,
+                duration,
+            }),
+            discontinuity,
+        })
+    }
+
+    fn reset_partial(&mut self) {
+        self.depacketizer = H264Packet::default();
+        self.data.clear();
+        self.timestamp = None;
+        self.expected_sequence = None;
+    }
+}
+
+fn valid_annex_b_access_unit(data: &[u8]) -> bool {
+    (data.starts_with(&[0, 0, 1]) || data.starts_with(&[0, 0, 0, 1]))
+        && annex_b_nal_headers(data)
+            .is_some_and(|headers| headers > 0 && data.len() <= MAX_H264_ACCESS_UNIT_BYTES)
+}
+
+fn annex_b_contains_nal_type(data: &[u8], expected_type: u8) -> bool {
+    let mut index = 0;
+    while let Some((header, next)) = next_annex_b_header(data, index) {
+        if data[header] & 0x1f == expected_type {
+            return true;
+        }
+        index = next;
+    }
+    false
+}
+
+fn annex_b_nal_headers(data: &[u8]) -> Option<usize> {
+    let mut index = 0;
+    let mut count = 0;
+    while let Some((header, next)) = next_annex_b_header(data, index) {
+        if data[header] & 0x80 != 0 || data[header] & 0x1f == 0 {
+            return None;
+        }
+        count += 1;
+        index = next;
+    }
+    (count > 0).then_some(count)
+}
+
+fn next_annex_b_header(data: &[u8], mut index: usize) -> Option<(usize, usize)> {
+    while index + 4 <= data.len() {
+        let start_code = if data[index..].starts_with(&[0, 0, 1]) {
+            3
+        } else if data[index..].starts_with(&[0, 0, 0, 1]) {
+            4
+        } else {
+            index += 1;
+            continue;
+        };
+        let header = index + start_code;
+        if header < data.len() {
+            return Some((header, header + 1));
+        }
+        return None;
+    }
+    None
+}
+
+#[derive(Clone)]
+pub struct EncodedMediaSender {
+    video_track: Arc<TrackLocalStaticSample>,
+    video_sender: Arc<dyn RtpSender>,
+    audio_track: Arc<TrackLocalStaticSample>,
+    audio_sender: Arc<dyn RtpSender>,
+}
+
+impl fmt::Debug for EncodedMediaSender {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        formatter.write_str("EncodedMediaSender([H264, Opus SRTP tracks])")
+    }
+}
+
+impl EncodedMediaSender {
+    /// Packetizes and sends one Annex-B H.264 access unit on the negotiated SRTP track.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error until the track has a negotiated payload type or if the
+    /// PeerConnection has stopped.
+    pub async fn send_h264(
+        &self,
+        access_unit: Bytes,
+        duration: Duration,
+    ) -> Result<(), WebRtcSessionError> {
+        if access_unit.is_empty() || duration.is_zero() || duration > Duration::from_secs(1) {
+            return Err(WebRtcSessionError::InvalidMediaSample);
+        }
+        let payload_type = negotiated_payload_type(&self.video_sender).await?;
+        let ssrc = first_ssrc(&self.video_track).await?;
+        self.video_track
+            .sample_writer(ssrc, payload_type)
+            .write_sample(&Sample {
+                data: access_unit,
+                duration,
+                ..Default::default()
+            })
+            .await
+            .map_err(|error| WebRtcSessionError::PeerConnection(error.to_string()))
+    }
+
+    /// Sends one already encoded Opus packet on the negotiated SRTP audio track.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error for an invalid packet duration, missing negotiated codec,
+    /// or a stopped PeerConnection.
+    pub async fn send_opus(
+        &self,
+        packet: Bytes,
+        duration: Duration,
+    ) -> Result<(), WebRtcSessionError> {
+        if packet.is_empty()
+            || duration < Duration::from_millis(2)
+            || duration > Duration::from_millis(120)
+        {
+            return Err(WebRtcSessionError::InvalidMediaSample);
+        }
+        let payload_type = negotiated_payload_type(&self.audio_sender).await?;
+        let ssrc = first_ssrc(&self.audio_track).await?;
+        self.audio_track
+            .sample_writer(ssrc, payload_type)
+            .write_sample(&Sample {
+                data: packet,
+                duration,
+                ..Default::default()
+            })
+            .await
+            .map_err(|error| WebRtcSessionError::PeerConnection(error.to_string()))
+    }
+}
+
+pub struct WebRtcSession {
+    peer: Box<dyn PeerConnection>,
+    state: watch::Receiver<WebRtcConnectionState>,
+    remote_tracks: mpsc::Receiver<RemoteMediaTrack>,
+    remote_data_channels: mpsc::Receiver<Arc<dyn DataChannel>>,
+    control_channel: Option<Arc<dyn DataChannel>>,
+    media_sender: Option<EncodedMediaSender>,
+}
+
+impl fmt::Debug for WebRtcSession {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        formatter
+            .debug_struct("WebRtcSession")
+            .field("state", &*self.state.borrow())
+            .field("control_channel", &self.control_channel.is_some())
+            .field("media_sender", &self.media_sender.is_some())
+            .finish_non_exhaustive()
+    }
+}
+
+impl WebRtcSession {
+    #[must_use]
+    pub fn state(&self) -> watch::Receiver<WebRtcConnectionState> {
+        self.state.clone()
+    }
+
+    pub async fn next_remote_track(&mut self) -> Option<RemoteMediaTrack> {
+        self.remote_tracks.recv().await
+    }
+
+    pub async fn next_remote_data_channel(&mut self) -> Option<Arc<dyn DataChannel>> {
+        self.remote_data_channels.recv().await
+    }
+
+    #[must_use]
+    pub fn control_channel(&self) -> Option<Arc<dyn DataChannel>> {
+        self.control_channel.clone()
+    }
+
+    #[must_use]
+    pub fn media_sender(&self) -> Option<EncodedMediaSender> {
+        self.media_sender.clone()
+    }
+
+    /// Closes ICE, DTLS, SRTP, SCTP, and the underlying sockets.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error if the WebRTC stack cannot finish shutdown.
+    pub async fn close(self) -> Result<(), WebRtcSessionError> {
+        self.peer
+            .close()
+            .await
+            .map_err(|error| WebRtcSessionError::PeerConnection(error.to_string()))
+    }
+}
+
+#[derive(Debug)]
+pub enum WebRtcSessionError {
+    InvalidConfiguration,
+    InvalidMediaSample,
+    InvalidMediaPacket,
+    RuntimeUnavailable,
+    PeerConnection(String),
+    Negotiation(EdgeNegotiationError),
+    InvalidSignal,
+    UnexpectedSignal,
+    ConnectTimeout,
+    ConnectionFailed,
+    SignalQueueClosed,
+    SignalingTransport,
+}
+
+impl fmt::Display for WebRtcSessionError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        let category = match self {
+            Self::InvalidConfiguration => "invalid_configuration",
+            Self::InvalidMediaSample => "invalid_media_sample",
+            Self::InvalidMediaPacket => "invalid_media_packet",
+            Self::RuntimeUnavailable => "runtime_unavailable",
+            Self::PeerConnection(_) => "peer_connection",
+            Self::Negotiation(_) => "edge_negotiation",
+            Self::InvalidSignal => "invalid_signal",
+            Self::UnexpectedSignal => "unexpected_signal",
+            Self::ConnectTimeout => "connect_timeout",
+            Self::ConnectionFailed => "connection_failed",
+            Self::SignalQueueClosed => "signal_queue_closed",
+            Self::SignalingTransport => "signaling_transport",
+        };
+        formatter.write_str(category)
+    }
+}
+
+impl std::error::Error for WebRtcSessionError {}
+
+impl From<EdgeNegotiationError> for WebRtcSessionError {
+    fn from(value: EdgeNegotiationError) -> Self {
+        Self::Negotiation(value)
+    }
+}
+
+enum LocalSignal {
+    Candidate(String),
+    End,
+}
+
+#[derive(Clone)]
+struct SessionHandler {
+    local_signal_tx: mpsc::Sender<LocalSignal>,
+    state_tx: watch::Sender<WebRtcConnectionState>,
+    remote_track_tx: mpsc::Sender<RemoteMediaTrack>,
+    remote_data_channel_tx: mpsc::Sender<Arc<dyn DataChannel>>,
+}
+
+#[async_trait]
+impl PeerConnectionEventHandler for SessionHandler {
+    async fn on_ice_candidate(&self, event: RTCPeerConnectionIceEvent) {
+        if let Ok(candidate) = event.candidate.to_json()
+            && let Ok(payload) = serde_json::to_string(&candidate)
+        {
+            let _ = self
+                .local_signal_tx
+                .try_send(LocalSignal::Candidate(payload));
+        }
+    }
+
+    async fn on_ice_gathering_state_change(&self, state: RTCIceGatheringState) {
+        if state == RTCIceGatheringState::Complete {
+            let _ = self.local_signal_tx.try_send(LocalSignal::End);
+        }
+    }
+
+    async fn on_connection_state_change(&self, state: RTCPeerConnectionState) {
+        let state = match state {
+            RTCPeerConnectionState::New => WebRtcConnectionState::New,
+            RTCPeerConnectionState::Connecting => WebRtcConnectionState::Connecting,
+            RTCPeerConnectionState::Connected => WebRtcConnectionState::Connected,
+            RTCPeerConnectionState::Disconnected => WebRtcConnectionState::Disconnected,
+            RTCPeerConnectionState::Failed => WebRtcConnectionState::Failed,
+            RTCPeerConnectionState::Closed => WebRtcConnectionState::Closed,
+            _ => return,
+        };
+        let _ = self.state_tx.send(state);
+    }
+
+    async fn on_track(&self, track: Arc<dyn TrackRemote>) {
+        let kind = track.kind().await;
+        if kind == RtpCodecKind::Video {
+            let pli_track = Arc::clone(&track);
+            tokio::spawn(async move {
+                loop {
+                    tokio::time::sleep(Duration::from_secs(3)).await;
+                    let media_ssrc = match pli_track.ssrcs().await.first().copied() {
+                        Some(value) => value,
+                        None => break,
+                    };
+                    if pli_track
+                        .write_rtcp(vec![Box::new(PictureLossIndication {
+                            sender_ssrc: 0,
+                            media_ssrc,
+                        })])
+                        .await
+                        .is_err()
+                    {
+                        break;
+                    }
+                }
+            });
+        }
+        let _ = self
+            .remote_track_tx
+            .try_send(RemoteMediaTrack { kind, track });
+    }
+
+    async fn on_data_channel(&self, data_channel: Arc<dyn DataChannel>) {
+        let _ = self.remote_data_channel_tx.try_send(data_channel);
+    }
+}
+
+struct EdgeWebRtcSignalTransport {
+    negotiation: EdgeNegotiationClient,
+}
+
+#[async_trait]
+impl WebRtcSignalTransport for EdgeWebRtcSignalTransport {
+    async fn send(&mut self, message: WebRtcSignalMessage) -> Result<(), WebRtcSessionError> {
+        self.negotiation.send(message.kind, message.payload).await?;
+        Ok(())
+    }
+
+    async fn poll(&mut self) -> Result<Vec<WebRtcSignalMessage>, WebRtcSessionError> {
+        self.negotiation
+            .poll()
+            .await?
+            .messages
+            .into_iter()
+            .map(|message| {
+                let kind = EdgeNegotiationKind::parse(&message.kind)
+                    .map_err(|_| WebRtcSessionError::InvalidSignal)?;
+                WebRtcSignalMessage::new(kind, message.payload)
+            })
+            .collect()
+    }
+}
+
+/// Establishes a real ICE/DTLS/SRTP PeerConnection over the existing signed
+/// Edge SDP/ICE mailbox.
+///
+/// The Client is the sole initial offerer. The Agent is the answerer and owns
+/// the H.264/Opus send tracks. Both roles trickle bounded candidates through the
+/// endpoint-key authenticated mailbox. The function returns only after DTLS and
+/// ICE reach `Connected`.
+///
+/// # Errors
+///
+/// Returns a categorized configuration, signaling, timeout, or WebRTC error.
+pub async fn establish_edge_webrtc(
+    negotiation: EdgeNegotiationClient,
+    config: WebRtcSessionConfig,
+) -> Result<WebRtcSession, WebRtcSessionError> {
+    establish_webrtc(EdgeWebRtcSignalTransport { negotiation }, config).await
+}
+
+/// Establishes the RemoteDesk PeerConnection over an authenticated signaling transport.
+///
+/// # Errors
+///
+/// Returns a categorized configuration, signaling, timeout, or WebRTC error.
+pub async fn establish_webrtc<T>(
+    mut signaling: T,
+    config: WebRtcSessionConfig,
+) -> Result<WebRtcSession, WebRtcSessionError>
+where
+    T: WebRtcSignalTransport,
+{
+    config.validate()?;
+    let runtime =
+        webrtc::runtime::default_runtime().ok_or(WebRtcSessionError::RuntimeUnavailable)?;
+    let (local_signal_tx, mut local_signal_rx) = mpsc::channel(SIGNAL_QUEUE_CAPACITY);
+    let (state_tx, mut state_rx) = watch::channel(WebRtcConnectionState::New);
+    let (remote_track_tx, remote_tracks) = mpsc::channel(TRACK_QUEUE_CAPACITY);
+    let (remote_data_channel_tx, remote_data_channels) = mpsc::channel(TRACK_QUEUE_CAPACITY);
+    let handler = Arc::new(SessionHandler {
+        local_signal_tx,
+        state_tx,
+        remote_track_tx,
+        remote_data_channel_tx,
+    });
+
+    let mut media_engine = MediaEngine::default();
+    let video_codec = h264_codec();
+    let audio_codec = opus_codec();
+    media_engine
+        .register_codec(video_codec.clone(), RtpCodecKind::Video)
+        .map_err(|error| WebRtcSessionError::PeerConnection(error.to_string()))?;
+    media_engine
+        .register_codec(h264_rtx_codec(), RtpCodecKind::Video)
+        .map_err(|error| WebRtcSessionError::PeerConnection(error.to_string()))?;
+    media_engine
+        .register_codec(audio_codec.clone(), RtpCodecKind::Audio)
+        .map_err(|error| WebRtcSessionError::PeerConnection(error.to_string()))?;
+    let registry = register_default_interceptors(Registry::new(), &mut media_engine)
+        .map_err(|error| WebRtcSessionError::PeerConnection(error.to_string()))?;
+    let ice_servers = config
+        .ice_servers
+        .iter()
+        .map(|server| RTCIceServer {
+            urls: server.urls.clone(),
+            username: server.username.clone(),
+            credential: server.credential.clone(),
+        })
+        .collect();
+    let peer = PeerConnectionBuilder::new()
+        .with_configuration(
+            RTCConfigurationBuilder::new()
+                .with_ice_servers(ice_servers)
+                .build(),
+        )
+        .with_media_engine(media_engine)
+        .with_interceptor_registry(registry)
+        .with_handler(handler)
+        .with_runtime(runtime)
+        .with_udp_addrs(vec![config.bind_address])
+        .build()
+        .await
+        .map_err(|error| WebRtcSessionError::PeerConnection(error.to_string()))?;
+
+    let mut control_channel = None;
+    let mut media_sender = None;
+    let connection_result: Result<(), WebRtcSessionError> = async {
+        match config.role {
+        EdgeWebRtcRole::ClientOfferer => {
+            peer.add_transceiver_from_kind(
+                RtpCodecKind::Video,
+                Some(RTCRtpTransceiverInit {
+                    direction: RTCRtpTransceiverDirection::Recvonly,
+                    ..Default::default()
+                }),
+            )
+            .await
+            .map_err(|error| WebRtcSessionError::PeerConnection(error.to_string()))?;
+            peer.add_transceiver_from_kind(
+                RtpCodecKind::Audio,
+                Some(RTCRtpTransceiverInit {
+                    direction: RTCRtpTransceiverDirection::Recvonly,
+                    ..Default::default()
+                }),
+            )
+            .await
+            .map_err(|error| WebRtcSessionError::PeerConnection(error.to_string()))?;
+            control_channel = Some(
+                peer.create_data_channel("remotedesk-control", None)
+                    .await
+                    .map_err(|error| WebRtcSessionError::PeerConnection(error.to_string()))?,
+            );
+            let offer = peer
+                .create_offer(None)
+                .await
+                .map_err(|error| WebRtcSessionError::PeerConnection(error.to_string()))?;
+            peer.set_local_description(offer.clone())
+                .await
+                .map_err(|error| WebRtcSessionError::PeerConnection(error.to_string()))?;
+            send_description(&mut signaling, EdgeNegotiationKind::Offer, &offer).await?;
+        }
+        EdgeWebRtcRole::AgentAnswerer => {
+            media_sender = Some(add_agent_media_tracks(&peer, video_codec, audio_codec).await?);
+        }
+        }
+
+        let deadline = Instant::now() + config.connect_timeout;
+        let mut poll = tokio::time::interval(POLL_INTERVAL);
+        poll.set_missed_tick_behavior(MissedTickBehavior::Delay);
+        let mut outgoing = VecDeque::new();
+        let mut remote_description_set = false;
+        let mut connected = false;
+        let mut local_ice_end_sent = false;
+        let mut remote_ice_end_received = false;
+        loop {
+        if Instant::now() >= deadline {
+            let _ = peer.close().await;
+            return Err(WebRtcSessionError::ConnectTimeout);
+        }
+        tokio::select! {
+            signal = local_signal_rx.recv() => {
+                match signal.ok_or(WebRtcSessionError::SignalQueueClosed)? {
+                    LocalSignal::Candidate(payload) => {
+                        outgoing.push_back(WebRtcSignalMessage::new(
+                            EdgeNegotiationKind::IceCandidate,
+                            payload,
+                        )?);
+                    }
+                    LocalSignal::End => {
+                        outgoing.push_back(WebRtcSignalMessage::new(
+                            EdgeNegotiationKind::IceEnd,
+                            String::new(),
+                        )?);
+                    }
+                }
+            }
+            _ = poll.tick() => {
+                while let Some(message) = outgoing.pop_front() {
+                    let ice_end = message.kind == EdgeNegotiationKind::IceEnd;
+                    signaling.send(message).await?;
+                    local_ice_end_sent |= ice_end;
+                }
+                for message in signaling.poll().await? {
+                    match message.kind {
+                        EdgeNegotiationKind::Offer
+                            if config.role == EdgeWebRtcRole::AgentAnswerer
+                                && !remote_description_set =>
+                        {
+                            let offer = parse_description(&message.payload)?;
+                            peer.set_remote_description(offer)
+                                .await
+                                .map_err(|error| WebRtcSessionError::PeerConnection(error.to_string()))?;
+                            remote_description_set = true;
+                            let answer = peer.create_answer(None)
+                                .await
+                                .map_err(|error| WebRtcSessionError::PeerConnection(error.to_string()))?;
+                            peer.set_local_description(answer.clone())
+                                .await
+                                .map_err(|error| WebRtcSessionError::PeerConnection(error.to_string()))?;
+                            send_description(&mut signaling, EdgeNegotiationKind::Answer, &answer).await?;
+                        }
+                        EdgeNegotiationKind::Answer
+                            if config.role == EdgeWebRtcRole::ClientOfferer
+                                && !remote_description_set =>
+                        {
+                            let answer = parse_description(&message.payload)?;
+                            peer.set_remote_description(answer)
+                                .await
+                                .map_err(|error| WebRtcSessionError::PeerConnection(error.to_string()))?;
+                            remote_description_set = true;
+                        }
+                        EdgeNegotiationKind::IceCandidate if remote_description_set => {
+                            let candidate: RTCIceCandidateInit = serde_json::from_str(&message.payload)
+                                .map_err(|_| WebRtcSessionError::InvalidSignal)?;
+                            peer.add_ice_candidate(candidate)
+                                .await
+                                .map_err(|error| WebRtcSessionError::PeerConnection(error.to_string()))?;
+                        }
+                        EdgeNegotiationKind::IceEnd if remote_description_set => {
+                            remote_ice_end_received = true;
+                        }
+                        EdgeNegotiationKind::Restart => {
+                            peer.restart_ice()
+                                .await
+                                .map_err(|error| WebRtcSessionError::PeerConnection(error.to_string()))?;
+                        }
+                        _ => {
+                            let _ = peer.close().await;
+                            return Err(WebRtcSessionError::UnexpectedSignal);
+                        }
+                    }
+                }
+            }
+            changed = state_rx.changed() => {
+                if changed.is_err() {
+                    let _ = peer.close().await;
+                    return Err(WebRtcSessionError::ConnectionFailed);
+                }
+                let state = *state_rx.borrow_and_update();
+                match state {
+                    WebRtcConnectionState::Connected => connected = true,
+                    WebRtcConnectionState::Failed | WebRtcConnectionState::Closed => {
+                        let _ = peer.close().await;
+                        return Err(WebRtcSessionError::ConnectionFailed);
+                    }
+                    _ => {}
+                }
+            }
+            () = tokio::time::sleep_until(deadline) => {
+                let _ = peer.close().await;
+                return Err(WebRtcSessionError::ConnectTimeout);
+            }
+        }
+            if connected && local_ice_end_sent && remote_ice_end_received {
+                break;
+            }
+        }
+        Ok(())
+    }
+    .await;
+    if let Err(error) = connection_result {
+        let _ = peer.close().await;
+        return Err(error);
+    }
+
+    Ok(WebRtcSession {
+        peer: Box::new(peer),
+        state: state_rx,
+        remote_tracks,
+        remote_data_channels,
+        control_channel,
+        media_sender,
+    })
+}
+
+fn h264_codec() -> RTCRtpCodecParameters {
+    RTCRtpCodecParameters {
+        rtp_codec: RTCRtpCodec {
+            mime_type: MIME_TYPE_H264.to_owned(),
+            clock_rate: 90_000,
+            channels: 0,
+            sdp_fmtp_line: "level-asymmetry-allowed=1;packetization-mode=1;profile-level-id=42e01f"
+                .into(),
+            rtcp_feedback: vec![
+                RTCPFeedback {
+                    typ: TYPE_RTCP_FB_NACK.into(),
+                    parameter: String::new(),
+                },
+                RTCPFeedback {
+                    typ: TYPE_RTCP_FB_NACK.into(),
+                    parameter: "pli".into(),
+                },
+                RTCPFeedback {
+                    typ: TYPE_RTCP_FB_TRANSPORT_CC.into(),
+                    parameter: String::new(),
+                },
+            ],
+        },
+        payload_type: H264_PAYLOAD_TYPE,
+        ..Default::default()
+    }
+}
+
+fn h264_rtx_codec() -> RTCRtpCodecParameters {
+    RTCRtpCodecParameters {
+        rtp_codec: RTCRtpCodec {
+            mime_type: "video/rtx".into(),
+            clock_rate: 90_000,
+            channels: 0,
+            sdp_fmtp_line: format!("apt={H264_PAYLOAD_TYPE};rtx-time=1000"),
+            rtcp_feedback: vec![],
+        },
+        payload_type: H264_RTX_PAYLOAD_TYPE,
+        ..Default::default()
+    }
+}
+
+fn opus_codec() -> RTCRtpCodecParameters {
+    RTCRtpCodecParameters {
+        rtp_codec: RTCRtpCodec {
+            mime_type: MIME_TYPE_OPUS.to_owned(),
+            clock_rate: 48_000,
+            channels: 2,
+            sdp_fmtp_line: "minptime=10;useinbandfec=1".into(),
+            rtcp_feedback: vec![
+                RTCPFeedback {
+                    typ: TYPE_RTCP_FB_NACK.into(),
+                    parameter: String::new(),
+                },
+                RTCPFeedback {
+                    typ: TYPE_RTCP_FB_TRANSPORT_CC.into(),
+                    parameter: String::new(),
+                },
+            ],
+        },
+        payload_type: OPUS_PAYLOAD_TYPE,
+        ..Default::default()
+    }
+}
+
+async fn add_agent_media_tracks<P: PeerConnection + ?Sized>(
+    peer: &P,
+    video_codec: RTCRtpCodecParameters,
+    audio_codec: RTCRtpCodecParameters,
+) -> Result<EncodedMediaSender, WebRtcSessionError> {
+    let video_track = local_track(RtpCodecKind::Video, video_codec.rtp_codec)?;
+    let video_sender = peer
+        .add_track(Arc::clone(&video_track) as Arc<dyn TrackLocal>)
+        .await
+        .map_err(|error| WebRtcSessionError::PeerConnection(error.to_string()))?;
+    let audio_track = local_track(RtpCodecKind::Audio, audio_codec.rtp_codec)?;
+    let audio_sender = peer
+        .add_track(Arc::clone(&audio_track) as Arc<dyn TrackLocal>)
+        .await
+        .map_err(|error| WebRtcSessionError::PeerConnection(error.to_string()))?;
+    Ok(EncodedMediaSender {
+        video_track,
+        video_sender,
+        audio_track,
+        audio_sender,
+    })
+}
+
+fn local_track(
+    kind: RtpCodecKind,
+    codec: RTCRtpCodec,
+) -> Result<Arc<TrackLocalStaticSample>, WebRtcSessionError> {
+    let ssrc = rand::random::<u32>();
+    TrackLocalStaticSample::new(MediaStreamTrack::new(
+        format!("remotedesk-{kind}-stream"),
+        format!("remotedesk-{kind}-track"),
+        format!("remotedesk-{kind}"),
+        kind,
+        vec![RTCRtpEncodingParameters {
+            rtp_coding_parameters: RTCRtpCodingParameters {
+                ssrc: Some(ssrc),
+                ..Default::default()
+            },
+            codec,
+            ..Default::default()
+        }],
+    ))
+    .map(Arc::new)
+    .map_err(|error| WebRtcSessionError::PeerConnection(error.to_string()))
+}
+
+async fn first_ssrc(track: &TrackLocalStaticSample) -> Result<u32, WebRtcSessionError> {
+    track
+        .ssrcs()
+        .await
+        .first()
+        .copied()
+        .ok_or(WebRtcSessionError::InvalidMediaSample)
+}
+
+async fn negotiated_payload_type(sender: &Arc<dyn RtpSender>) -> Result<u8, WebRtcSessionError> {
+    sender
+        .get_parameters()
+        .await
+        .map_err(|error| WebRtcSessionError::PeerConnection(error.to_string()))?
+        .rtp_parameters
+        .codecs
+        .first()
+        .map(|codec| codec.payload_type)
+        .ok_or(WebRtcSessionError::InvalidMediaSample)
+}
+
+async fn send_description<T>(
+    signaling: &mut T,
+    kind: EdgeNegotiationKind,
+    description: &rtc::peer_connection::sdp::RTCSessionDescription,
+) -> Result<(), WebRtcSessionError>
+where
+    T: WebRtcSignalTransport,
+{
+    let payload =
+        serde_json::to_string(description).map_err(|_| WebRtcSessionError::InvalidSignal)?;
+    signaling
+        .send(WebRtcSignalMessage::new(kind, payload)?)
+        .await
+}
+
+fn parse_description(
+    payload: &str,
+) -> Result<rtc::peer_connection::sdp::RTCSessionDescription, WebRtcSessionError> {
+    if payload.is_empty() || payload.len() > MAX_SDP_BYTES {
+        return Err(WebRtcSessionError::InvalidSignal);
+    }
+    serde_json::from_str(payload).map_err(|_| WebRtcSessionError::InvalidSignal)
+}
+
+fn validate_signal_payload(
+    kind: EdgeNegotiationKind,
+    payload: &str,
+) -> Result<(), WebRtcSessionError> {
+    let valid = match kind {
+        EdgeNegotiationKind::Offer | EdgeNegotiationKind::Answer => {
+            !payload.is_empty() && payload.len() <= MAX_SDP_BYTES && !payload.contains('\0')
+        }
+        EdgeNegotiationKind::IceCandidate => {
+            !payload.is_empty()
+                && payload.len() <= MAX_ICE_CANDIDATE_BYTES
+                && !payload.contains('\0')
+        }
+        EdgeNegotiationKind::IceEnd | EdgeNegotiationKind::Restart => payload.is_empty(),
+    };
+    if valid {
+        Ok(())
+    } else {
+        Err(WebRtcSessionError::InvalidSignal)
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn config() -> WebRtcSessionConfig {
+        WebRtcSessionConfig {
+            role: EdgeWebRtcRole::ClientOfferer,
+            bind_address: "0.0.0.0:0".parse().unwrap(),
+            ice_servers: vec![WebRtcIceServer {
+                urls: vec!["turns:edge.example.test:443?transport=tcp".into()],
+                username: "session-user".into(),
+                credential: "session-secret".into(),
+            }],
+            connect_timeout: Duration::from_secs(30),
+        }
+    }
+
+    #[test]
+    fn validates_bounded_ice_configuration_and_redacts_credentials() {
+        let value = config();
+        assert!(value.validate().is_ok());
+        let rendered = format!("{:?}", value.ice_servers[0]);
+        assert!(!rendered.contains("session-secret"));
+        assert!(!rendered.contains("session-user"));
+
+        let mut invalid = config();
+        invalid.ice_servers[0].urls[0] = "https://edge.example.test".into();
+        assert!(invalid.validate().is_err());
+        let mut invalid = config();
+        invalid.ice_servers[0].credential.clear();
+        assert!(invalid.validate().is_err());
+    }
+
+    #[test]
+    fn rejects_fixed_bind_ports_and_unbounded_deadlines() {
+        let mut invalid = config();
+        invalid.bind_address.set_port(3478);
+        assert!(invalid.validate().is_err());
+        let mut invalid = config();
+        invalid.connect_timeout = Duration::from_secs(61);
+        assert!(invalid.validate().is_err());
+    }
+
+    #[test]
+    fn direct_signal_messages_enforce_sdp_and_candidate_bounds() {
+        assert!(WebRtcSignalMessage::new(EdgeNegotiationKind::Offer, "offer".into()).is_ok());
+        assert!(
+            WebRtcSignalMessage::new(EdgeNegotiationKind::IceCandidate, "candidate".into()).is_ok()
+        );
+        assert!(WebRtcSignalMessage::new(EdgeNegotiationKind::IceEnd, String::new()).is_ok());
+        assert!(
+            WebRtcSignalMessage::new_direct(EdgeNegotiationKind::Restart, String::new()).is_err()
+        );
+        assert!(WebRtcSignalMessage::new(EdgeNegotiationKind::Offer, String::new()).is_err());
+        assert!(
+            WebRtcSignalMessage::new(
+                EdgeNegotiationKind::IceCandidate,
+                "x".repeat(MAX_ICE_CANDIDATE_BYTES + 1),
+            )
+            .is_err()
+        );
+        assert!(
+            WebRtcSignalMessage::new(EdgeNegotiationKind::IceEnd, "unexpected".into()).is_err()
+        );
+    }
+
+    #[test]
+    fn descriptions_are_strict_json_not_opaque_sdp_strings() {
+        assert!(parse_description("v=0").is_err());
+        assert!(parse_description("").is_err());
+    }
+
+    fn rtp_packet(sequence: u16, timestamp: u32, marker: bool, payload: &[u8]) -> RtpPacket {
+        RtpPacket {
+            header: rtc::rtp::header::Header {
+                version: 2,
+                marker,
+                payload_type: H264_PAYLOAD_TYPE,
+                sequence_number: sequence,
+                timestamp,
+                ssrc: 7,
+                ..Default::default()
+            },
+            payload: Bytes::copy_from_slice(payload),
+        }
+    }
+
+    #[test]
+    fn h264_rtp_assembler_combines_nals_and_detects_keyframes() {
+        let mut assembler = H264RtpAssembler::default();
+        let first = assembler
+            .push(&rtp_packet(10, 90_000, false, &[0x67, 1, 2]))
+            .unwrap();
+        assert!(first.access_unit.is_none());
+        let completed = assembler
+            .push(&rtp_packet(11, 90_000, true, &[0x65, 3, 4]))
+            .unwrap()
+            .access_unit
+            .unwrap();
+        assert!(completed.keyframe);
+        assert_eq!(completed.rtp_timestamp, 90_000);
+        assert_eq!(completed.duration, DEFAULT_VIDEO_FRAME_DURATION);
+        assert_eq!(
+            completed.data.as_ref(),
+            &[0, 0, 0, 1, 0x67, 1, 2, 0, 0, 0, 1, 0x65, 3, 4]
+        );
+    }
+
+    #[test]
+    fn opus_rtp_packets_are_bounded_and_report_discontinuity() {
+        let mut expected = None;
+        let first =
+            classify_opus_packet(&mut expected, &rtp_packet(10, 48_000, true, &[0x78, 1, 2]))
+                .unwrap();
+        assert!(!first.discontinuity);
+        assert_eq!(first.rtp_timestamp, 48_000);
+        assert_eq!(first.data.as_ref(), &[0x78, 1, 2]);
+        let lost =
+            classify_opus_packet(&mut expected, &rtp_packet(12, 48_960, true, &[0x78, 3])).unwrap();
+        assert!(lost.discontinuity);
+        assert!(
+            classify_opus_packet(
+                &mut expected,
+                &rtp_packet(
+                    13,
+                    49_920,
+                    true,
+                    &vec![0; DESKTOP_MAX_OPUS_PACKET_BYTES + 1]
+                ),
+            )
+            .is_err()
+        );
+    }
+
+    #[test]
+    fn h264_rtp_assembler_reassembles_fua_and_drops_a_lost_tail() {
+        let mut assembler = H264RtpAssembler::default();
+        assert!(
+            assembler
+                .push(&rtp_packet(20, 180_000, false, &[0x7c, 0x85, 1, 2]))
+                .unwrap()
+                .access_unit
+                .is_none()
+        );
+        let completed = assembler
+            .push(&rtp_packet(21, 180_000, true, &[0x7c, 0x45, 3, 4]))
+            .unwrap()
+            .access_unit
+            .unwrap();
+        assert_eq!(completed.data.as_ref(), &[0, 0, 0, 1, 0x65, 1, 2, 3, 4]);
+
+        assembler
+            .push(&rtp_packet(30, 270_000, false, &[0x7c, 0x81, 9]))
+            .unwrap();
+        let dropped = assembler
+            .push(&rtp_packet(32, 270_000, true, &[0x7c, 0x41, 10]))
+            .unwrap();
+        assert!(dropped.discontinuity);
+        assert!(dropped.access_unit.is_none());
+    }
+
+    #[test]
+    fn h264_rtp_assembler_detects_loss_between_access_units() {
+        let mut assembler = H264RtpAssembler::default();
+        let first = assembler
+            .push(&rtp_packet(40, 360_000, true, &[0x65, 1, 2]))
+            .unwrap();
+        assert!(first.access_unit.is_some());
+
+        let next = assembler
+            .push(&rtp_packet(42, 363_000, true, &[0x41, 2, 3]))
+            .unwrap();
+        assert!(next.discontinuity);
+        assert!(next.access_unit.is_some());
+    }
+
+    #[test]
+    fn h264_recovery_is_immediate_for_a_non_keyframe_discontinuity() {
+        let mut awaiting_keyframe = false;
+        let event = classify_h264_assembly(
+            &mut awaiting_keyframe,
+            H264AssemblerResult {
+                access_unit: Some(RemoteH264AccessUnit {
+                    data: Bytes::from_static(&[0, 0, 0, 1, 0x41, 1]),
+                    rtp_timestamp: 90_000,
+                    duration: DEFAULT_VIDEO_FRAME_DURATION,
+                    keyframe: false,
+                }),
+                discontinuity: true,
+            },
+        );
+        assert!(matches!(event, Some(RemoteH264Event::RecoveryRequired)));
+        assert!(awaiting_keyframe);
+    }
+
+    #[test]
+    fn h264_recovery_delivers_a_keyframe_on_the_discontinuity() {
+        let mut awaiting_keyframe = false;
+        let event = classify_h264_assembly(
+            &mut awaiting_keyframe,
+            H264AssemblerResult {
+                access_unit: Some(RemoteH264AccessUnit {
+                    data: Bytes::from_static(&[0, 0, 0, 1, 0x65, 1]),
+                    rtp_timestamp: 90_000,
+                    duration: DEFAULT_VIDEO_FRAME_DURATION,
+                    keyframe: true,
+                }),
+                discontinuity: true,
+            },
+        );
+        assert!(matches!(event, Some(RemoteH264Event::AccessUnit(_))));
+        assert!(!awaiting_keyframe);
+    }
+}
diff --git a/agent/agent-runtime/src/x11_clipboard.rs b/agent/agent-runtime/src/x11_clipboard.rs
new file mode 100644
index 0000000..28c8d84
--- /dev/null
+++ b/agent/agent-runtime/src/x11_clipboard.rs
@@ -0,0 +1,239 @@
+use std::time::{Duration, Instant};
+
+use x11rb::connection::Connection as _;
+use x11rb::protocol::Event;
+use x11rb::protocol::xproto::{
+    Atom, AtomEnum, ConnectionExt as _, CreateWindowAux, EventMask, PropMode,
+    SELECTION_NOTIFY_EVENT, SelectionNotifyEvent, SelectionRequestEvent, Window, WindowClass,
+};
+use x11rb::rust_connection::RustConnection;
+use x11rb::wrapper::ConnectionExt as _;
+use x11rb::{COPY_DEPTH_FROM_PARENT, CURRENT_TIME};
+
+use crate::{DESKTOP_MAX_CLIPBOARD_BYTES, normalize_clipboard_text};
+
+type Error = Box<dyn std::error::Error + Send + Sync>;
+const POLL_INTERVAL: Duration = Duration::from_millis(500);
+const REQUEST_TIMEOUT: Duration = Duration::from_secs(1);
+
+pub struct X11Clipboard {
+    window: Window,
+    clipboard: Atom,
+    targets: Atom,
+    utf8_string: Atom,
+    text: Atom,
+    property: Atom,
+    owned_text: Option<String>,
+    request_pending: bool,
+    request_started: Option<Instant>,
+    next_poll: Instant,
+}
+
+impl X11Clipboard {
+    pub fn new(connection: &RustConnection, root: Window) -> Result<Self, Error> {
+        let window = connection.generate_id()?;
+        connection
+            .create_window(
+                COPY_DEPTH_FROM_PARENT,
+                window,
+                root,
+                -1,
+                -1,
+                1,
+                1,
+                0,
+                WindowClass::INPUT_OUTPUT,
+                0,
+                &CreateWindowAux::new().event_mask(EventMask::PROPERTY_CHANGE),
+            )?
+            .check()?;
+        let clipboard = atom(connection, b"CLIPBOARD")?;
+        let targets = atom(connection, b"TARGETS")?;
+        let utf8_string = atom(connection, b"UTF8_STRING")?;
+        let text = atom(connection, b"TEXT")?;
+        let property = atom(connection, b"REMOTEDESK_CLIPBOARD")?;
+        connection.flush()?;
+        Ok(Self {
+            window,
+            clipboard,
+            targets,
+            utf8_string,
+            text,
+            property,
+            owned_text: None,
+            request_pending: false,
+            request_started: None,
+            next_poll: Instant::now(),
+        })
+    }
+
+    pub fn set_text(&mut self, connection: &RustConnection, text: &str) -> Result<(), Error> {
+        let text = normalize_clipboard_text(text)?;
+        if text.len() > DESKTOP_MAX_CLIPBOARD_BYTES {
+            return Err("X11 clipboard text exceeds the size limit".into());
+        }
+        connection
+            .set_selection_owner(self.window, self.clipboard, CURRENT_TIME)?
+            .check()?;
+        let owner = connection
+            .get_selection_owner(self.clipboard)?
+            .reply()?
+            .owner;
+        if owner != self.window {
+            return Err("X11 clipboard ownership was not granted".into());
+        }
+        self.owned_text = Some(text);
+        self.request_pending = false;
+        self.request_started = None;
+        self.next_poll = Instant::now() + POLL_INTERVAL;
+        connection.flush()?;
+        Ok(())
+    }
+
+    pub fn poll_text(&mut self, connection: &RustConnection) -> Result<Option<String>, Error> {
+        let mut received = self.service_events(connection)?;
+        if self.request_pending
+            && self
+                .request_started
+                .is_some_and(|started| started.elapsed() >= REQUEST_TIMEOUT)
+        {
+            self.request_pending = false;
+            self.request_started = None;
+        }
+        if !self.request_pending && Instant::now() >= self.next_poll {
+            self.next_poll = Instant::now() + POLL_INTERVAL;
+            let owner = connection
+                .get_selection_owner(self.clipboard)?
+                .reply()?
+                .owner;
+            if owner != u32::from(AtomEnum::NONE) && owner != self.window {
+                connection.convert_selection(
+                    self.window,
+                    self.clipboard,
+                    self.utf8_string,
+                    self.property,
+                    CURRENT_TIME,
+                )?;
+                connection.flush()?;
+                self.request_pending = true;
+                self.request_started = Some(Instant::now());
+            }
+        }
+        if received.is_none() {
+            received = self.service_events(connection)?;
+        }
+        Ok(received)
+    }
+
+    fn service_events(&mut self, connection: &RustConnection) -> Result<Option<String>, Error> {
+        let mut received = None;
+        while let Some(event) = connection.poll_for_event()? {
+            match event {
+                Event::SelectionRequest(request) if request.selection == self.clipboard => {
+                    self.reply_to_request(connection, request)?;
+                }
+                Event::SelectionNotify(event)
+                    if event.requestor == self.window && event.selection == self.clipboard =>
+                {
+                    self.request_pending = false;
+                    self.request_started = None;
+                    if event.property != u32::from(AtomEnum::NONE) {
+                        received = self.read_property(connection)?;
+                    }
+                }
+                Event::SelectionClear(event)
+                    if event.owner == self.window && event.selection == self.clipboard =>
+                {
+                    self.owned_text = None;
+                }
+                _ => {}
+            }
+        }
+        Ok(received)
+    }
+
+    fn reply_to_request(
+        &self,
+        connection: &RustConnection,
+        request: SelectionRequestEvent,
+    ) -> Result<(), Error> {
+        let property = if request.property == u32::from(AtomEnum::NONE) {
+            request.target
+        } else {
+            request.property
+        };
+        let mut response_property: Atom = u32::from(AtomEnum::NONE);
+        if request.target == self.targets {
+            connection.change_property32(
+                PropMode::REPLACE,
+                request.requestor,
+                property,
+                AtomEnum::ATOM,
+                &[self.targets, self.utf8_string, self.text],
+            )?;
+            response_property = property;
+        } else if matches!(
+            request.target,
+            target if target == self.utf8_string || target == self.text
+        ) && let Some(text) = self.owned_text.as_ref()
+        {
+            connection.change_property8(
+                PropMode::REPLACE,
+                request.requestor,
+                property,
+                request.target,
+                text.as_bytes(),
+            )?;
+            response_property = property;
+        }
+        connection.send_event(
+            false,
+            request.requestor,
+            EventMask::NO_EVENT,
+            SelectionNotifyEvent {
+                response_type: SELECTION_NOTIFY_EVENT,
+                sequence: 0,
+                time: request.time,
+                requestor: request.requestor,
+                selection: request.selection,
+                target: request.target,
+                property: response_property,
+            },
+        )?;
+        connection.flush()?;
+        Ok(())
+    }
+
+    fn read_property(&self, connection: &RustConnection) -> Result<Option<String>, Error> {
+        let long_length = u32::try_from(DESKTOP_MAX_CLIPBOARD_BYTES.div_ceil(4) + 1)
+            .map_err(|_| "clipboard property limit exceeds X11 range")?;
+        let reply = connection
+            .get_property(
+                true,
+                self.window,
+                self.property,
+                AtomEnum::ANY,
+                0,
+                long_length,
+            )?
+            .reply()?;
+        if reply.bytes_after != 0
+            || reply.format != 8
+            || reply.value.len() > DESKTOP_MAX_CLIPBOARD_BYTES
+            || !matches!(
+                reply.type_,
+                target if target == self.utf8_string
+                    || target == self.text
+                    || target == u32::from(AtomEnum::STRING)
+            )
+        {
+            return Ok(None);
+        }
+        let text = String::from_utf8(reply.value)?;
+        Ok(Some(normalize_clipboard_text(&text)?))
+    }
+}
+
+fn atom(connection: &RustConnection, name: &[u8]) -> Result<Atom, Error> {
+    Ok(connection.intern_atom(false, name)?.reply()?.atom)
+}
diff --git a/agent/agent-runtime/src/x11_desktop.rs b/agent/agent-runtime/src/x11_desktop.rs
new file mode 100644
index 0000000..a2e0684
--- /dev/null
+++ b/agent/agent-runtime/src/x11_desktop.rs
@@ -0,0 +1,527 @@
+use std::collections::{BTreeSet, HashMap};
+use std::time::{Instant, SystemTime, UNIX_EPOCH};
+
+use x11rb::CURRENT_TIME;
+use x11rb::connection::Connection as _;
+use x11rb::protocol::xproto::{
+    BUTTON_PRESS_EVENT, BUTTON_RELEASE_EVENT, ConnectionExt as _, ImageFormat, ImageOrder,
+    KEY_PRESS_EVENT, KEY_RELEASE_EVENT, MOTION_NOTIFY_EVENT, Visualtype, Window,
+};
+use x11rb::protocol::xtest::ConnectionExt as _;
+use x11rb::rust_connection::RustConnection;
+
+use crate::{
+    DESKTOP_MAX_PIXELS, DesktopButton, DesktopInputEvent, DesktopKeyState, X11Clipboard,
+    validate_desktop_input,
+};
+
+type Error = Box<dyn std::error::Error + Send + Sync>;
+
+pub struct CapturedDesktopFrame {
+    pub width: u16,
+    pub height: u16,
+    pub bgra: Vec<u8>,
+    pub captured_at_unix_ms: u64,
+    pub capture_latency_us: u64,
+}
+
+pub struct X11Desktop {
+    connection: RustConnection,
+    root: Window,
+    root_width: u16,
+    root_height: u16,
+    depth: u8,
+    bits_per_pixel: u8,
+    scanline_pad: u8,
+    image_order: ImageOrder,
+    visual: Visualtype,
+    output_width: u16,
+    output_height: u16,
+    keysym_to_keycode: HashMap<u32, u8>,
+    pressed_keys: BTreeSet<u8>,
+    pressed_buttons: BTreeSet<u8>,
+    clipboard: X11Clipboard,
+}
+
+impl X11Desktop {
+    pub fn connect() -> Result<Self, Error> {
+        let (connection, screen_index) = x11rb::connect(None)?;
+        let setup = connection.setup();
+        let screen = setup
+            .roots
+            .get(screen_index)
+            .ok_or("X11 selected screen is unavailable")?;
+        let format = setup
+            .pixmap_formats
+            .iter()
+            .find(|format| format.depth == screen.root_depth)
+            .ok_or("X11 root pixmap format is unavailable")?;
+        if !matches!(format.bits_per_pixel, 16 | 24 | 32) {
+            return Err("X11 root bits-per-pixel is unsupported".into());
+        }
+        let visual = setup
+            .roots
+            .iter()
+            .flat_map(|screen| &screen.allowed_depths)
+            .flat_map(|depth| &depth.visuals)
+            .find(|visual| visual.visual_id == screen.root_visual)
+            .cloned()
+            .ok_or("X11 root visual is unavailable")?;
+        if !valid_rgb_masks(&visual) {
+            return Err("X11 root visual does not expose RGB masks".into());
+        }
+        let root = screen.root;
+        let root_width = screen.width_in_pixels;
+        let root_height = screen.height_in_pixels;
+        if root_width == 0
+            || root_height == 0
+            || usize::from(root_width) * usize::from(root_height) > DESKTOP_MAX_PIXELS
+            || root_width > i16::MAX as u16
+            || root_height > i16::MAX as u16
+        {
+            return Err("X11 root desktop dimensions exceed the capture limit".into());
+        }
+        let depth = screen.root_depth;
+        let bits_per_pixel = format.bits_per_pixel;
+        let scanline_pad = format.scanline_pad;
+        let image_order = setup.image_byte_order;
+        let min_keycode = setup.min_keycode;
+        let keycode_count = setup
+            .max_keycode
+            .saturating_sub(min_keycode)
+            .saturating_add(1);
+        let keyboard = connection
+            .get_keyboard_mapping(min_keycode, keycode_count)?
+            .reply()?;
+        if keyboard.keysyms_per_keycode == 0 {
+            return Err("X11 keyboard mapping is empty".into());
+        }
+        let keysym_to_keycode = keyboard
+            .keysyms
+            .chunks_exact(usize::from(keyboard.keysyms_per_keycode))
+            .enumerate()
+            .flat_map(|(offset, symbols)| {
+                let keycode = min_keycode.saturating_add(u8::try_from(offset).unwrap_or(u8::MAX));
+                symbols
+                    .iter()
+                    .copied()
+                    .filter(|keysym| *keysym != 0)
+                    .map(move |keysym| (keysym, keycode))
+            })
+            .collect::<HashMap<_, _>>();
+        let clipboard = X11Clipboard::new(&connection, root)?;
+        let desktop = Self {
+            root,
+            root_width,
+            root_height,
+            depth,
+            bits_per_pixel,
+            scanline_pad,
+            image_order,
+            visual,
+            output_width: root_width,
+            output_height: root_height,
+            keysym_to_keycode,
+            connection,
+            pressed_keys: BTreeSet::new(),
+            pressed_buttons: BTreeSet::new(),
+            clipboard,
+        };
+        desktop.connection.xtest_get_version(2, 2)?.reply()?;
+        Ok(desktop)
+    }
+
+    pub fn root_size(&self) -> (u16, u16) {
+        (self.root_width, self.root_height)
+    }
+
+    pub fn capture(
+        &mut self,
+        max_width: u16,
+        max_height: u16,
+    ) -> Result<CapturedDesktopFrame, Error> {
+        let started = Instant::now();
+        let reply = self
+            .connection
+            .get_image(
+                ImageFormat::Z_PIXMAP,
+                self.root,
+                0,
+                0,
+                self.root_width,
+                self.root_height,
+                u32::MAX,
+            )?
+            .reply()?;
+        if reply.depth != self.depth {
+            return Err("X11 capture depth changed during the session".into());
+        }
+        let native = convert_ximage_to_bgra(
+            &reply.data,
+            self.root_width,
+            self.root_height,
+            self.bits_per_pixel,
+            self.scanline_pad,
+            self.image_order,
+            &self.visual,
+        )?;
+        let (width, height) = fit_size(self.root_width, self.root_height, max_width, max_height)?;
+        let bgra = if (width, height) == (self.root_width, self.root_height) {
+            native
+        } else {
+            scale_bgra_nearest(&native, self.root_width, self.root_height, width, height)
+        };
+        self.output_width = width;
+        self.output_height = height;
+        Ok(CapturedDesktopFrame {
+            width,
+            height,
+            bgra,
+            captured_at_unix_ms: unix_millis(),
+            capture_latency_us: started.elapsed().as_micros().try_into().unwrap_or(u64::MAX),
+        })
+    }
+
+    pub fn input(&mut self, event: &DesktopInputEvent) -> Result<(), Error> {
+        validate_desktop_input(event, self.output_width, self.output_height)?;
+        match event {
+            DesktopInputEvent::PointerMove { x, y } => {
+                let root_x = scale_axis(*x, self.output_width, self.root_width);
+                let root_y = scale_axis(*y, self.output_height, self.root_height);
+                self.fake_input(MOTION_NOTIFY_EVENT, 0, root_x, root_y)?;
+            }
+            DesktopInputEvent::PointerDelta { delta_x, delta_y } => {
+                // XTEST interprets coordinates relative to the current pointer when root is None.
+                self.connection
+                    .xtest_fake_input(
+                        MOTION_NOTIFY_EVENT,
+                        0,
+                        CURRENT_TIME,
+                        0,
+                        *delta_x,
+                        *delta_y,
+                        0,
+                    )?
+                    .check()?;
+            }
+            DesktopInputEvent::PointerButton { button, pressed } => {
+                let detail = button_detail(*button);
+                self.fake_input(
+                    if *pressed {
+                        BUTTON_PRESS_EVENT
+                    } else {
+                        BUTTON_RELEASE_EVENT
+                    },
+                    detail,
+                    0,
+                    0,
+                )?;
+                if *pressed {
+                    self.pressed_buttons.insert(detail);
+                } else {
+                    self.pressed_buttons.remove(&detail);
+                }
+            }
+            DesktopInputEvent::Wheel {
+                horizontal,
+                vertical,
+            } => {
+                self.send_wheel(*horizontal, 6, 7)?;
+                self.send_wheel(*vertical, 5, 4)?;
+            }
+            DesktopInputEvent::Key { keysym, state } => {
+                let keycode = *self
+                    .keysym_to_keycode
+                    .get(keysym)
+                    .ok_or("X11 keyboard layout does not contain the requested keysym")?;
+                let pressed = *state == DesktopKeyState::Pressed;
+                self.fake_input(
+                    if pressed {
+                        KEY_PRESS_EVENT
+                    } else {
+                        KEY_RELEASE_EVENT
+                    },
+                    keycode,
+                    0,
+                    0,
+                )?;
+                if pressed {
+                    self.pressed_keys.insert(keycode);
+                } else {
+                    self.pressed_keys.remove(&keycode);
+                }
+            }
+            DesktopInputEvent::ReleaseAll => self.release_all()?,
+        }
+        self.connection.flush()?;
+        Ok(())
+    }
+
+    pub fn poll_clipboard_text(&mut self) -> Result<Option<String>, Error> {
+        self.clipboard.poll_text(&self.connection)
+    }
+
+    pub fn set_clipboard_text(&mut self, text: &str) -> Result<(), Error> {
+        self.clipboard.set_text(&self.connection, text)
+    }
+
+    pub fn release_all(&mut self) -> Result<(), Error> {
+        let keys = self.pressed_keys.iter().copied().collect::<Vec<_>>();
+        let buttons = self.pressed_buttons.iter().copied().collect::<Vec<_>>();
+        for key in keys {
+            self.fake_input(KEY_RELEASE_EVENT, key, 0, 0)?;
+        }
+        for button in buttons {
+            self.fake_input(BUTTON_RELEASE_EVENT, button, 0, 0)?;
+        }
+        self.pressed_keys.clear();
+        self.pressed_buttons.clear();
+        self.connection.flush()?;
+        Ok(())
+    }
+
+    fn send_wheel(
+        &self,
+        amount: i16,
+        negative_button: u8,
+        positive_button: u8,
+    ) -> Result<(), Error> {
+        let button = if amount < 0 {
+            negative_button
+        } else {
+            positive_button
+        };
+        for _ in 0..amount.unsigned_abs().min(32) {
+            self.fake_input(BUTTON_PRESS_EVENT, button, 0, 0)?;
+            self.fake_input(BUTTON_RELEASE_EVENT, button, 0, 0)?;
+        }
+        Ok(())
+    }
+
+    fn fake_input(&self, event_type: u8, detail: u8, x: i16, y: i16) -> Result<(), Error> {
+        self.connection
+            .xtest_fake_input(event_type, detail, CURRENT_TIME, self.root, x, y, 0)?
+            .check()?;
+        Ok(())
+    }
+}
+
+impl Drop for X11Desktop {
+    fn drop(&mut self) {
+        let _ = self.release_all();
+    }
+}
+
+fn fit_size(
+    source_width: u16,
+    source_height: u16,
+    max_width: u16,
+    max_height: u16,
+) -> Result<(u16, u16), Error> {
+    if source_width == 0
+        || source_height == 0
+        || !(200..=8_192).contains(&max_width)
+        || !(200..=8_192).contains(&max_height)
+    {
+        return Err("desktop capture dimensions are invalid".into());
+    }
+    let (width, height) = if source_width <= max_width && source_height <= max_height {
+        (source_width, source_height)
+    } else if u32::from(max_width) * u32::from(source_height)
+        <= u32::from(max_height) * u32::from(source_width)
+    {
+        let height =
+            (u32::from(source_height) * u32::from(max_width) / u32::from(source_width)).max(1);
+        (max_width, u16::try_from(height).unwrap_or(max_height))
+    } else {
+        let width =
+            (u32::from(source_width) * u32::from(max_height) / u32::from(source_height)).max(1);
+        (u16::try_from(width).unwrap_or(max_width), max_height)
+    };
+    let pixels = usize::from(width) * usize::from(height);
+    if pixels > DESKTOP_MAX_PIXELS {
+        return Err("desktop capture exceeds the pixel limit".into());
+    }
+    Ok((width, height))
+}
+
+fn scale_axis(value: u16, source_extent: u16, target_extent: u16) -> i16 {
+    if source_extent <= 1 || target_extent <= 1 {
+        return 0;
+    }
+    let scaled = u32::from(value) * u32::from(target_extent - 1) / u32::from(source_extent - 1);
+    i16::try_from(scaled.min(i16::MAX as u32)).unwrap_or(i16::MAX)
+}
+
+fn button_detail(button: DesktopButton) -> u8 {
+    match button {
+        DesktopButton::Left => 1,
+        DesktopButton::Middle => 2,
+        DesktopButton::Right => 3,
+        DesktopButton::Back => 8,
+        DesktopButton::Forward => 9,
+    }
+}
+
+fn convert_ximage_to_bgra(
+    data: &[u8],
+    width: u16,
+    height: u16,
+    bits_per_pixel: u8,
+    scanline_pad: u8,
+    image_order: ImageOrder,
+    visual: &Visualtype,
+) -> Result<Vec<u8>, Error> {
+    let row_bits = usize::from(width) * usize::from(bits_per_pixel);
+    let pad_bits = usize::from(scanline_pad);
+    if pad_bits < 8 || !pad_bits.is_power_of_two() {
+        return Err("X11 scanline padding is invalid".into());
+    }
+    let stride = row_bits.div_ceil(pad_bits) * pad_bits / 8;
+    let required = stride
+        .checked_mul(usize::from(height))
+        .ok_or("X11 image byte length overflow")?;
+    if data.len() < required {
+        return Err("X11 image data is truncated".into());
+    }
+    let bytes_per_pixel = usize::from(bits_per_pixel.div_ceil(8));
+    let mut bgra = Vec::with_capacity(usize::from(width) * usize::from(height) * 4);
+    for row in data[..required].chunks_exact(stride) {
+        for pixel in row[..usize::from(width) * bytes_per_pixel].chunks_exact(bytes_per_pixel) {
+            let value = read_pixel(pixel, image_order);
+            bgra.extend_from_slice(&[
+                masked_channel(value, visual.blue_mask),
+                masked_channel(value, visual.green_mask),
+                masked_channel(value, visual.red_mask),
+                255,
+            ]);
+        }
+    }
+    Ok(bgra)
+}
+
+fn valid_rgb_masks(visual: &Visualtype) -> bool {
+    let masks = [visual.red_mask, visual.green_mask, visual.blue_mask];
+    masks.iter().all(|mask| contiguous_mask(*mask))
+        && masks[0] & masks[1] == 0
+        && masks[0] & masks[2] == 0
+        && masks[1] & masks[2] == 0
+}
+
+fn contiguous_mask(mask: u32) -> bool {
+    if mask == 0 {
+        return false;
+    }
+    let shifted = mask >> mask.trailing_zeros();
+    shifted & shifted.wrapping_add(1) == 0
+}
+
+fn read_pixel(bytes: &[u8], order: ImageOrder) -> u32 {
+    match order {
+        ImageOrder::LSB_FIRST => bytes
+            .iter()
+            .enumerate()
+            .fold(0_u32, |value, (index, byte)| {
+                value | (u32::from(*byte) << (index * 8))
+            }),
+        ImageOrder::MSB_FIRST => bytes
+            .iter()
+            .fold(0_u32, |value, byte| (value << 8) | u32::from(*byte)),
+        _ => 0,
+    }
+}
+
+fn masked_channel(pixel: u32, mask: u32) -> u8 {
+    let shift = mask.trailing_zeros();
+    let maximum = mask >> shift;
+    if maximum == 0 {
+        return 0;
+    }
+    let value = (pixel & mask) >> shift;
+    let scaled = (u64::from(value) * 255 + u64::from(maximum) / 2) / u64::from(maximum);
+    u8::try_from(scaled).unwrap_or(255)
+}
+
+fn scale_bgra_nearest(
+    source: &[u8],
+    source_width: u16,
+    source_height: u16,
+    target_width: u16,
+    target_height: u16,
+) -> Vec<u8> {
+    let mut target = vec![0_u8; usize::from(target_width) * usize::from(target_height) * 4];
+    for y in 0..usize::from(target_height) {
+        let source_y = y * usize::from(source_height) / usize::from(target_height);
+        for x in 0..usize::from(target_width) {
+            let source_x = x * usize::from(source_width) / usize::from(target_width);
+            let source_offset = (source_y * usize::from(source_width) + source_x) * 4;
+            let target_offset = (y * usize::from(target_width) + x) * 4;
+            target[target_offset..target_offset + 4]
+                .copy_from_slice(&source[source_offset..source_offset + 4]);
+        }
+    }
+    target
+}
+
+fn unix_millis() -> u64 {
+    SystemTime::now()
+        .duration_since(UNIX_EPOCH)
+        .unwrap_or_default()
+        .as_millis()
+        .try_into()
+        .unwrap_or(u64::MAX)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn visual() -> Visualtype {
+        Visualtype {
+            visual_id: 1,
+            class: x11rb::protocol::xproto::VisualClass::TRUE_COLOR,
+            bits_per_rgb_value: 8,
+            colormap_entries: 256,
+            red_mask: 0x00ff_0000,
+            green_mask: 0x0000_ff00,
+            blue_mask: 0x0000_00ff,
+        }
+    }
+
+    #[test]
+    fn common_little_endian_xrgb_is_converted_to_opaque_bgra() {
+        let converted = convert_ximage_to_bgra(
+            &[0x33, 0x22, 0x11, 0x00],
+            1,
+            1,
+            32,
+            32,
+            ImageOrder::LSB_FIRST,
+            &visual(),
+        )
+        .unwrap();
+        assert_eq!(converted, [0x33, 0x22, 0x11, 0xff]);
+    }
+
+    #[test]
+    fn fit_preserves_aspect_ratio_without_upscaling() {
+        assert_eq!(fit_size(1920, 1080, 1280, 720).unwrap(), (1280, 720));
+        assert_eq!(fit_size(1280, 720, 1920, 1080).unwrap(), (1280, 720));
+    }
+
+    #[test]
+    fn nearest_scaler_preserves_pixel_channel_order() {
+        let source = [1, 2, 3, 255, 4, 5, 6, 255];
+        assert_eq!(scale_bgra_nearest(&source, 2, 1, 1, 1), [1, 2, 3, 255]);
+    }
+
+    #[test]
+    fn visual_masks_must_be_distinct_and_contiguous() {
+        assert!(valid_rgb_masks(&visual()));
+        let mut invalid = visual();
+        invalid.red_mask = 0x00f0_f000;
+        assert!(!valid_rgb_masks(&invalid));
+        invalid.red_mask = invalid.green_mask;
+        assert!(!valid_rgb_masks(&invalid));
+    }
+}
diff --git a/agent/windows-agent/Cargo.toml b/agent/windows-agent/Cargo.toml
new file mode 100644
index 0000000..2ffa099
--- /dev/null
+++ b/agent/windows-agent/Cargo.toml
@@ -0,0 +1,35 @@
+[package]
+name = "remotedesk-windows-agent"
+version.workspace = true
+edition.workspace = true
+license.workspace = true
+rust-version.workspace = true
+description = "RemoteDesk Windows controlled-endpoint agent companion"
+
+[[bin]]
+name = "remotedesk-windows-agent"
+path = "src/main.rs"
+
+[dependencies]
+anyhow = "1.0"
+clap = { version = "4.5", features = ["derive"] }
+flate2 = "1.1"
+serde = { version = "1.0", features = ["derive"] }
+serde_json = "1.0"
+tokio = { version = "1.47", features = ["macros", "net", "rt-multi-thread", "io-util", "sync", "time"] }
+windows = { version = "0.62.2", features = [
+  "Win32_Foundation",
+  "Win32_Graphics_Direct3D11",
+  "Win32_Graphics_Dxgi",
+  "Win32_Graphics_Dxgi_Common",
+  "Win32_Graphics_Gdi",
+  "Win32_UI_Input_KeyboardAndMouse",
+  "Win32_UI_WindowsAndMessaging",
+] }
+
+[lints.rust]
+unsafe_code = "allow"
+
+[lints.clippy]
+all = "warn"
+pedantic = "warn"
diff --git a/agent/windows-agent/src/applications.rs b/agent/windows-agent/src/applications.rs
new file mode 100644
index 0000000..ccdca65
--- /dev/null
+++ b/agent/windows-agent/src/applications.rs
@@ -0,0 +1,134 @@
+use anyhow::{Context, Result};
+use serde::{Deserialize, Serialize};
+use std::fs;
+use std::path::PathBuf;
+
+#[derive(Clone, Debug, Deserialize, Serialize, PartialEq, Eq)]
+pub struct Application {
+    pub id: String,
+    pub name: String,
+    pub path: String,
+    #[serde(default)]
+    pub arguments: Vec<String>,
+}
+
+pub fn load() -> Result<Vec<Application>> {
+    let path = config_path();
+    if !path.exists() {
+        return Ok(Vec::new());
+    }
+    let data = fs::read_to_string(&path)
+        .with_context(|| format!("读取应用配置失败: {}", path.display()))?;
+    let applications: Vec<Application> =
+        serde_json::from_str(&data).context("应用配置 JSON 无效")?;
+    for application in &applications {
+        validate(application)?;
+    }
+    for (index, application) in applications.iter().enumerate() {
+        if applications[index + 1..]
+            .iter()
+            .any(|other| other.id == application.id)
+        {
+            anyhow::bail!("应用 ID 重复: {}", application.id);
+        }
+    }
+    Ok(applications)
+}
+
+pub fn launch(id: &str) -> Result<Application> {
+    let application = load()?
+        .into_iter()
+        .find(|item| item.id == id)
+        .ok_or_else(|| anyhow::anyhow!("未配置应用: {id}"))?;
+    #[cfg(windows)]
+    {
+        std::process::Command::new(&application.path)
+            .args(&application.arguments)
+            .spawn()
+            .with_context(|| format!("启动应用失败: {}", application.name))?;
+    }
+    #[cfg(not(windows))]
+    anyhow::bail!("应用启动仅支持 Windows");
+    Ok(application)
+}
+
+fn validate(application: &Application) -> Result<()> {
+    if application.id.is_empty()
+        || application.id.len() > 64
+        || !application
+            .id
+            .bytes()
+            .all(|b| b.is_ascii_alphanumeric() || b"._-".contains(&b))
+    {
+        anyhow::bail!("应用 ID 无效: {}", application.id);
+    }
+    if application.name.is_empty()
+        || application.name.len() > 128
+        || application.name.chars().any(char::is_control)
+    {
+        anyhow::bail!("应用名称无效: {}", application.id);
+    }
+    if !is_windows_absolute_local_path(&application.path)
+        || application.path.contains("\\\\")
+        || application.path.chars().any(char::is_control)
+    {
+        anyhow::bail!("应用路径必须是绝对本地路径: {}", application.id);
+    }
+    if application
+        .arguments
+        .iter()
+        .any(|arg| arg.len() > 2048 || arg.chars().any(char::is_control))
+    {
+        anyhow::bail!("应用参数无效: {}", application.id);
+    }
+    Ok(())
+}
+
+fn is_windows_absolute_local_path(path: &str) -> bool {
+    let bytes = path.as_bytes();
+    bytes.len() >= 3
+        && bytes[0].is_ascii_alphabetic()
+        && bytes[1] == b':'
+        && matches!(bytes[2], b'\\' | b'/')
+}
+
+fn config_path() -> PathBuf {
+    #[cfg(windows)]
+    if let Some(program_data) = std::env::var_os("ProgramData") {
+        return PathBuf::from(program_data)
+            .join("RemoteDesk")
+            .join("Host")
+            .join("applications.json");
+    }
+    PathBuf::from("applications.json")
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn validates_application_ids_and_local_paths() {
+        let valid = Application {
+            id: "notepad".into(),
+            name: "记事本".into(),
+            path: r"C:\Windows\notepad.exe".into(),
+            arguments: vec![],
+        };
+        assert!(validate(&valid).is_ok());
+        assert!(
+            validate(&Application {
+                id: "bad/id".into(),
+                ..valid.clone()
+            })
+            .is_err()
+        );
+        assert!(
+            validate(&Application {
+                path: r"\\server\app.exe".into(),
+                ..valid
+            })
+            .is_err()
+        );
+    }
+}
diff --git a/agent/windows-agent/src/main.rs b/agent/windows-agent/src/main.rs
new file mode 100644
index 0000000..7e1953a
--- /dev/null
+++ b/agent/windows-agent/src/main.rs
@@ -0,0 +1,581 @@
+use clap::{Parser, Subcommand};
+use serde::{Deserialize, Serialize};
+use std::net::SocketAddr;
+use std::sync::atomic::{AtomicU64, Ordering};
+use std::time::Duration;
+use tokio::io::{AsyncBufReadExt as _, AsyncWriteExt as _, BufReader};
+use tokio::net::{TcpListener, TcpStream};
+
+mod applications;
+
+const PREFERRED_CAPTURE_BACKEND: &str = "dxgi-desktop-duplication-strict";
+const SOFTWARE_FALLBACK_BACKEND: &str = "gdi-bgra-zlib";
+const DEFAULT_FALLBACK_FPS: u8 = 10;
+const MAX_FALLBACK_FPS: u8 = 15;
+const NO_LATENCY_SAMPLE: u64 = u64::MAX;
+static CAPTURE_LATENCY_US: AtomicU64 = AtomicU64::new(NO_LATENCY_SAMPLE);
+static ENCODE_LATENCY_US: AtomicU64 = AtomicU64::new(NO_LATENCY_SAMPLE);
+static FRAME_PROCESSING_LATENCY_US: AtomicU64 = AtomicU64::new(NO_LATENCY_SAMPLE);
+
+#[derive(Debug, Parser)]
+#[command(
+    name = "remotedesk-windows-agent",
+    about = "RemoteDesk Windows controlled endpoint agent"
+)]
+struct Cli {
+    #[command(subcommand)]
+    command: Command,
+}
+
+#[derive(Debug, Subcommand)]
+enum Command {
+    Status {
+        #[arg(long)]
+        json: bool,
+    },
+    Run,
+    Serve {
+        #[arg(long, default_value = "0.0.0.0:39501")]
+        listen: SocketAddr,
+    },
+}
+
+#[derive(Debug, Serialize)]
+struct Status {
+    product: &'static str,
+    platform: &'static str,
+    transport: &'static str,
+    capture_backend: &'static str,
+    input_backend: &'static str,
+    session_runtime: &'static str,
+    strict_gpu_pipeline: &'static str,
+    software_fallback_backend: &'static str,
+    software_fallback_available: bool,
+}
+
+fn main() -> anyhow::Result<()> {
+    let cli = Cli::parse();
+    match cli.command {
+        Command::Status { json } => {
+            let status = Status {
+                product: "RemoteDesk Windows Agent",
+                platform: "windows",
+                transport: "native-agent",
+                capture_backend: PREFERRED_CAPTURE_BACKEND,
+                input_backend: "windows-send-input",
+                session_runtime: "native runtime not started",
+                strict_gpu_pipeline: "not_implemented",
+                software_fallback_backend: SOFTWARE_FALLBACK_BACKEND,
+                software_fallback_available: cfg!(windows),
+            };
+            if json {
+                println!("{}", serde_json::to_string_pretty(&status)?);
+            } else {
+                println!("RemoteDesk Windows Agent");
+                println!("Transport: native Agent protocol");
+                println!("Capture: strict DXGI Desktop Duplication / D3D11");
+                println!("Input: SendInput");
+                println!("Session runtime: not started");
+                println!("Software fallback: GDI / BGRA / zlib available");
+            }
+        }
+        Command::Run => run_server("0.0.0.0:39501".parse()?)?,
+        Command::Serve { listen } => run_server(listen)?,
+    }
+    Ok(())
+}
+
+fn run_server(listen: SocketAddr) -> anyhow::Result<()> {
+    let runtime = tokio::runtime::Runtime::new()?;
+    runtime.block_on(async move {
+        let listener = TcpListener::bind(listen).await?;
+        println!("RemoteDesk Windows Agent listening on {listen}");
+        if listen.ip().is_unspecified() {
+            eprintln!(
+                "WARNING: unauthenticated Windows Agent is exposed on every network interface"
+            );
+        }
+        loop {
+            let (stream, peer) = listener.accept().await?;
+            tokio::spawn(async move {
+                if let Err(error) = handle_client(stream).await {
+                    eprintln!("Windows Agent client {peer} failed: {error}");
+                }
+            });
+        }
+    })
+}
+
+#[derive(Serialize)]
+struct Hello<'a> {
+    kind: &'a str,
+    protocol_major: u16,
+    protocol_minor: u16,
+    capture_backend: &'a str,
+    preferred_capture_backend: &'a str,
+    software_fallback_backend: &'a str,
+    software_fallback_available: bool,
+    input_backend: &'a str,
+    authenticated: bool,
+}
+
+async fn handle_client(stream: TcpStream) -> anyhow::Result<()> {
+    let (reader, mut writer) = stream.into_split();
+    let hello = serde_json::to_string(&Hello {
+        kind: "windows_agent_hello",
+        protocol_major: 1,
+        protocol_minor: 0,
+        capture_backend: PREFERRED_CAPTURE_BACKEND,
+        preferred_capture_backend: PREFERRED_CAPTURE_BACKEND,
+        software_fallback_backend: SOFTWARE_FALLBACK_BACKEND,
+        software_fallback_available: cfg!(windows),
+        input_backend: "windows-send-input",
+        authenticated: false,
+    })?;
+    writer.write_all(hello.as_bytes()).await?;
+    writer.write_all(b"\n").await?;
+    let mut lines = BufReader::new(reader).lines();
+    while let Some(line) = lines.next_line().await? {
+        if line.len() > 16 * 1024 {
+            anyhow::bail!("agent command exceeds 16 KiB");
+        }
+        let command: AgentCommand = serde_json::from_str(&line)?;
+        if command.kind == "list_applications" {
+            let response = match applications::load() {
+                Ok(items) => serde_json::json!({ "kind": "applications", "applications": items }),
+                Err(error) => {
+                    serde_json::json!({ "kind": "applications_error", "error": error.to_string() })
+                }
+            };
+            writer
+                .write_all(serde_json::to_string(&response)?.as_bytes())
+                .await?;
+            writer.write_all(b"\n").await?;
+        } else if command.kind == "input" {
+            #[cfg(windows)]
+            match apply_input(&command) {
+                Ok(()) => writer.write_all(b"{\"kind\":\"input_ok\"}\n").await?,
+                Err(error) => writer.write_all(serde_json::json!({"kind":"input_failed","error":error.to_string()}).to_string().as_bytes()).await?,
+            }
+            #[cfg(not(windows))]
+            writer.write_all(b"{\"kind\":\"input_failed\",\"error\":\"windows_only\"}\n").await?;
+        } else if command.kind == "open_application" {
+            if !command.allow_software_fallback {
+                writer.write_all(b"{\"kind\":\"application_error\",\"error\":\"software_fallback_required\"}\n").await?;
+                continue;
+            }
+            match command
+                .application
+                .as_deref()
+                .map(applications::launch)
+                .transpose()
+            {
+                Ok(Some(_application)) => {
+                    let fps = command
+                        .frames_per_second
+                        .unwrap_or(DEFAULT_FALLBACK_FPS)
+                        .clamp(1, MAX_FALLBACK_FPS);
+                    writer.write_all(format!("{{\"kind\":\"desktop_opened\",\"capture_backend\":\"{SOFTWARE_FALLBACK_BACKEND}\",\"pixel_format\":\"bgra8\",\"compression\":\"zlib\",\"frames_per_second\":{fps}}}\n").as_bytes()).await?;
+                    stream_software_desktop(&mut writer, fps).await?;
+                    return Ok(());
+                }
+                Ok(None) => {
+                    writer.write_all(b"{\"kind\":\"application_error\",\"error\":\"application_id_required\"}\n").await?;
+                }
+                Err(error) => {
+                    let response = serde_json::json!({ "kind": "application_error", "error": error.to_string() });
+                    writer
+                        .write_all(serde_json::to_string(&response)?.as_bytes())
+                        .await?;
+                    writer.write_all(b"\n").await?;
+                }
+            }
+            if command.application.is_some() {
+                continue;
+            }
+        } else if command.kind == "open_desktop" {
+            if !command.allow_software_fallback {
+                let response = serde_json::to_string(&serde_json::json!({
+                    "kind": "desktop_unavailable",
+                    "error": "strict_gpu_pipeline_unavailable",
+                    "software_fallback_available": cfg!(windows)
+                }))?;
+                writer.write_all(response.as_bytes()).await?;
+                writer.write_all(b"\n").await?;
+                continue;
+            }
+            let fps = command
+                .frames_per_second
+                .unwrap_or(DEFAULT_FALLBACK_FPS)
+                .clamp(1, MAX_FALLBACK_FPS);
+            writer
+                .write_all(
+                    format!(
+                        "{{\"kind\":\"desktop_opened\",\"capture_backend\":\"{SOFTWARE_FALLBACK_BACKEND}\",\"pixel_format\":\"bgra8\",\"compression\":\"zlib\",\"frames_per_second\":{fps}}}\n"
+                    )
+                    .as_bytes(),
+                )
+                .await?;
+            stream_software_desktop(&mut writer, fps).await?;
+            return Ok(());
+        } else if command.kind == "status" {
+            let response = serde_json::to_string(&serde_json::json!({
+                "kind": "status",
+                "ready": true,
+                "media": "strict_gpu_pipeline_unavailable",
+                "input": "not_started",
+                "preferred_capture_backend": PREFERRED_CAPTURE_BACKEND,
+                "software_fallback_backend": SOFTWARE_FALLBACK_BACKEND,
+                "software_fallback_available": cfg!(windows),
+                "capture_latency_ms": latency_ms(&CAPTURE_LATENCY_US),
+                "encode_latency_ms": latency_ms(&ENCODE_LATENCY_US),
+                "frame_processing_latency_ms": latency_ms(&FRAME_PROCESSING_LATENCY_US)
+            }))?;
+            writer.write_all(response.as_bytes()).await?;
+            writer.write_all(b"\n").await?;
+        }
+    }
+    Ok(())
+}
+
+fn latency_ms(value: &AtomicU64) -> Option<f64> {
+    let micros = value.load(Ordering::Relaxed);
+    (micros != NO_LATENCY_SAMPLE).then(|| Duration::from_micros(micros).as_secs_f64() * 1_000.0)
+}
+
+fn record_latency(value: &AtomicU64, elapsed: Duration) {
+    let micros = u64::try_from(elapsed.as_micros()).unwrap_or(NO_LATENCY_SAMPLE - 1);
+    value.store(micros, Ordering::Relaxed);
+}
+
+#[derive(Debug, Deserialize)]
+struct AgentCommand {
+    kind: String,
+    #[serde(default)]
+    allow_software_fallback: bool,
+    frames_per_second: Option<u8>,
+    #[serde(default)]
+    application: Option<String>,
+    #[serde(default)]
+    input_type: Option<String>,
+    #[serde(default)]
+    code: Option<u16>,
+    #[serde(default)]
+    down: Option<bool>,
+    #[serde(default)]
+    x: Option<i32>,
+    #[serde(default)]
+    y: Option<i32>,
+    #[serde(default)]
+    buttons: Option<u32>,
+    #[serde(default)]
+    mouse_action: Option<String>,
+}
+
+#[cfg(windows)]
+fn apply_input(command: &AgentCommand) -> anyhow::Result<()> {
+    use windows::Win32::UI::Input::KeyboardAndMouse::{mouse_event, SendInput, INPUT, INPUT_0, INPUT_KEYBOARD, KEYBDINPUT, KEYBD_EVENT_FLAGS, KEYEVENTF_KEYUP, MOUSEEVENTF_ABSOLUTE, MOUSEEVENTF_MOVE, MOUSEEVENTF_VIRTUALDESK, VIRTUAL_KEY};
+    unsafe {
+        match command.input_type.as_deref() {
+            Some("key") => {
+                let flags = if command.down == Some(false) { KEYEVENTF_KEYUP } else { KEYBD_EVENT_FLAGS(0) };
+                let input = INPUT { r#type: INPUT_KEYBOARD, Anonymous: INPUT_0 { ki: KEYBDINPUT { wVk: VIRTUAL_KEY(command.code.unwrap_or(0)), wScan: 0, dwFlags: flags, time: 0, dwExtraInfo: 0 } } };
+                SendInput(&[input], std::mem::size_of::<INPUT>() as i32);
+            }
+            Some("mouse") => {
+                let x = command.x.unwrap_or(0).clamp(0, 65535) as i32;
+                let y = command.y.unwrap_or(0).clamp(0, 65535) as i32;
+                let mut flags = MOUSEEVENTF_ABSOLUTE | MOUSEEVENTF_VIRTUALDESK | MOUSEEVENTF_MOVE;
+                if let Some(action) = command.mouse_action.as_deref() {
+                    flags |= match action {
+                        "left_down" => windows::Win32::UI::Input::KeyboardAndMouse::MOUSEEVENTF_LEFTDOWN,
+                        "left_up" => windows::Win32::UI::Input::KeyboardAndMouse::MOUSEEVENTF_LEFTUP,
+                        "right_down" => windows::Win32::UI::Input::KeyboardAndMouse::MOUSEEVENTF_RIGHTDOWN,
+                        "right_up" => windows::Win32::UI::Input::KeyboardAndMouse::MOUSEEVENTF_RIGHTUP,
+                        "middle_down" => windows::Win32::UI::Input::KeyboardAndMouse::MOUSEEVENTF_MIDDLEDOWN,
+                        "middle_up" => windows::Win32::UI::Input::KeyboardAndMouse::MOUSEEVENTF_MIDDLEUP,
+                        "wheel" => windows::Win32::UI::Input::KeyboardAndMouse::MOUSEEVENTF_WHEEL,
+                        _ => MOUSEEVENTF_MOVE,
+                    };
+                }
+                mouse_event(flags, x, y, command.buttons.unwrap_or(0) as i32, 0);
+            }
+            _ => anyhow::bail!("invalid input command"),
+        }
+    }
+    Ok(())
+}
+
+#[cfg(windows)]
+async fn stream_software_desktop(
+    writer: &mut tokio::net::tcp::OwnedWriteHalf,
+    fps: u8,
+) -> anyhow::Result<()> {
+    let (sender, mut receiver) = tokio::sync::mpsc::channel::<anyhow::Result<Vec<u8>>>(1);
+    std::thread::Builder::new()
+        .name("gdi-bgra-zlib-capture".to_owned())
+        .spawn(move || {
+            let result = fallback::GdiCapture::new().and_then(|mut capture| {
+                let interval = Duration::from_secs_f64(1.0 / f64::from(fps));
+                loop {
+                    let started = std::time::Instant::now();
+                    let encoded = capture.capture_frame()?;
+                    record_latency(&CAPTURE_LATENCY_US, encoded.capture_latency);
+                    record_latency(&ENCODE_LATENCY_US, encoded.encode_latency);
+                    record_latency(&FRAME_PROCESSING_LATENCY_US, started.elapsed());
+                    if sender.blocking_send(Ok(encoded.bytes)).is_err() {
+                        return Ok(());
+                    }
+                    std::thread::sleep(interval.saturating_sub(started.elapsed()));
+                }
+            });
+            if let Err(error) = result {
+                let _ = sender.blocking_send(Err(error));
+            }
+        })?;
+    while let Some(frame) = receiver.recv().await {
+        match frame {
+            Ok(frame) => writer.write_all(&frame).await?,
+            Err(error) => {
+                let message = error.to_string();
+                let bytes = &message.as_bytes()[..message.len().min(16 * 1024)];
+                let length = u32::try_from(bytes.len()).unwrap_or(16 * 1024);
+                writer.write_all(b"RDWE").await?;
+                writer.write_all(&length.to_le_bytes()).await?;
+                writer.write_all(bytes).await?;
+                return Err(error);
+            }
+        }
+    }
+    Ok(())
+}
+
+#[cfg(not(windows))]
+async fn stream_software_desktop(
+    _writer: &mut tokio::net::tcp::OwnedWriteHalf,
+    _fps: u8,
+) -> anyhow::Result<()> {
+    anyhow::bail!("gdi_software_fallback_unavailable")
+}
+
+#[cfg(windows)]
+mod fallback {
+    use anyhow::Context as _;
+    use flate2::{Compression, write::ZlibEncoder};
+    use std::io::Write as _;
+    use std::time::Duration;
+    use windows::Win32::Graphics::Gdi::{
+        BI_RGB, BITMAPINFO, BITMAPINFOHEADER, BitBlt, CAPTUREBLT, CreateCompatibleBitmap,
+        CreateCompatibleDC, DIB_RGB_COLORS, DeleteDC, DeleteObject, GetDC, GetDIBits, HBITMAP, HDC,
+        HGDIOBJ, ReleaseDC, SRCCOPY, SelectObject,
+    };
+    use windows::Win32::UI::WindowsAndMessaging::{
+        GetSystemMetrics, SM_CXVIRTUALSCREEN, SM_CYVIRTUALSCREEN, SM_XVIRTUALSCREEN,
+        SM_YVIRTUALSCREEN,
+    };
+
+    const FRAME_MAGIC: &[u8; 4] = b"RDWF";
+    const FRAME_VERSION: u8 = 2;
+    const FRAME_HEADER_LEN: usize = 40;
+    const CODEC_BGRA_ZLIB: u8 = 1;
+    const MAX_DIMENSION: i32 = 16_384;
+    const MAX_RAW_FRAME_BYTES: usize = 256 * 1024 * 1024;
+
+    pub(super) struct GdiCapture {
+        screen_dc: HDC,
+        memory_dc: HDC,
+        bitmap: HBITMAP,
+        previous: HGDIOBJ,
+        origin_x: i32,
+        origin_y: i32,
+        width: i32,
+        height: i32,
+        pixels: Vec<u8>,
+    }
+
+    pub(super) struct EncodedFrame {
+        pub(super) bytes: Vec<u8>,
+        pub(super) capture_latency: Duration,
+        pub(super) encode_latency: Duration,
+    }
+
+    impl GdiCapture {
+        pub(super) fn new() -> anyhow::Result<Self> {
+            // The handles are owned by this capture thread and released by Drop.
+            unsafe {
+                let origin_x = GetSystemMetrics(SM_XVIRTUALSCREEN);
+                let origin_y = GetSystemMetrics(SM_YVIRTUALSCREEN);
+                let width = GetSystemMetrics(SM_CXVIRTUALSCREEN);
+                let height = GetSystemMetrics(SM_CYVIRTUALSCREEN);
+                validate_geometry(width, height)?;
+                let byte_len = frame_byte_len(width, height)?;
+                let screen_dc = GetDC(None);
+                anyhow::ensure!(!screen_dc.0.is_null(), "GetDC failed");
+                let memory_dc = CreateCompatibleDC(Some(screen_dc));
+                if memory_dc.0.is_null() {
+                    ReleaseDC(None, screen_dc);
+                    anyhow::bail!("CreateCompatibleDC failed");
+                }
+                let bitmap = CreateCompatibleBitmap(screen_dc, width, height);
+                if bitmap.0.is_null() {
+                    let _ = DeleteDC(memory_dc);
+                    ReleaseDC(None, screen_dc);
+                    anyhow::bail!("CreateCompatibleBitmap failed");
+                }
+                let previous = SelectObject(memory_dc, bitmap.into());
+                if previous.0.is_null() || previous.0 as isize == -1 {
+                    let _ = DeleteObject(bitmap.into());
+                    let _ = DeleteDC(memory_dc);
+                    ReleaseDC(None, screen_dc);
+                    anyhow::bail!("SelectObject failed");
+                }
+                Ok(Self {
+                    screen_dc,
+                    memory_dc,
+                    bitmap,
+                    previous,
+                    origin_x,
+                    origin_y,
+                    width,
+                    height,
+                    pixels: vec![0; byte_len],
+                })
+            }
+        }
+
+        pub(super) fn capture_frame(&mut self) -> anyhow::Result<EncodedFrame> {
+            let width = u32::try_from(self.width).context("desktop width is invalid")?;
+            let height = u32::try_from(self.height).context("desktop height is invalid")?;
+            let header_size = u32::try_from(size_of::<BITMAPINFOHEADER>())?;
+            let image_size =
+                u32::try_from(self.pixels.len()).context("desktop frame is too large")?;
+            let capture_started = std::time::Instant::now();
+            unsafe {
+                BitBlt(
+                    self.memory_dc,
+                    0,
+                    0,
+                    self.width,
+                    self.height,
+                    Some(self.screen_dc),
+                    self.origin_x,
+                    self.origin_y,
+                    SRCCOPY | CAPTUREBLT,
+                )
+                .context("BitBlt failed")?;
+                let mut bitmap_info = BITMAPINFO {
+                    bmiHeader: BITMAPINFOHEADER {
+                        biSize: header_size,
+                        biWidth: self.width,
+                        biHeight: -self.height,
+                        biPlanes: 1,
+                        biBitCount: 32,
+                        biCompression: BI_RGB.0,
+                        biSizeImage: image_size,
+                        ..Default::default()
+                    },
+                    ..Default::default()
+                };
+                let lines = GetDIBits(
+                    self.memory_dc,
+                    self.bitmap,
+                    0,
+                    height,
+                    Some(self.pixels.as_mut_ptr().cast()),
+                    &raw mut bitmap_info,
+                    DIB_RGB_COLORS,
+                );
+                anyhow::ensure!(lines == self.height, "GetDIBits returned {lines} scanlines");
+            }
+            let capture_latency = capture_started.elapsed();
+            let encode_started = std::time::Instant::now();
+            let mut bytes = encode_frame(width, height, &self.pixels)?;
+            let encode_latency = encode_started.elapsed();
+            write_duration(&mut bytes[24..32], capture_latency);
+            write_duration(&mut bytes[32..40], encode_latency);
+            Ok(EncodedFrame {
+                bytes,
+                capture_latency,
+                encode_latency,
+            })
+        }
+    }
+
+    impl Drop for GdiCapture {
+        fn drop(&mut self) {
+            unsafe {
+                let _ = SelectObject(self.memory_dc, self.previous);
+                let _ = DeleteObject(self.bitmap.into());
+                let _ = DeleteDC(self.memory_dc);
+                ReleaseDC(None, self.screen_dc);
+            }
+        }
+    }
+
+    fn validate_geometry(width: i32, height: i32) -> anyhow::Result<()> {
+        anyhow::ensure!(
+            width > 0 && height > 0 && width <= MAX_DIMENSION && height <= MAX_DIMENSION,
+            "unsupported virtual desktop size {width}x{height}"
+        );
+        frame_byte_len(width, height).map(|_| ())
+    }
+
+    fn frame_byte_len(width: i32, height: i32) -> anyhow::Result<usize> {
+        let length = usize::try_from(width)?
+            .checked_mul(usize::try_from(height)?)
+            .and_then(|pixels| pixels.checked_mul(4))
+            .context("desktop frame size overflow")?;
+        anyhow::ensure!(
+            length <= MAX_RAW_FRAME_BYTES,
+            "desktop frame exceeds 256 MiB"
+        );
+        Ok(length)
+    }
+
+    fn encode_frame(width: u32, height: u32, pixels: &[u8]) -> anyhow::Result<Vec<u8>> {
+        let mut encoder = ZlibEncoder::new(Vec::new(), Compression::fast());
+        encoder.write_all(pixels)?;
+        let compressed = encoder.finish()?;
+        anyhow::ensure!(
+            compressed.len() <= MAX_RAW_FRAME_BYTES,
+            "compressed frame exceeds 256 MiB"
+        );
+        let raw_len = u32::try_from(pixels.len()).context("raw frame is too large")?;
+        let compressed_len =
+            u32::try_from(compressed.len()).context("compressed frame is too large")?;
+        let mut frame = Vec::with_capacity(FRAME_HEADER_LEN + compressed.len());
+        frame.extend_from_slice(FRAME_MAGIC);
+        frame.push(FRAME_VERSION);
+        frame.push(CODEC_BGRA_ZLIB);
+        frame.extend_from_slice(&0_u16.to_le_bytes());
+        frame.extend_from_slice(&width.to_le_bytes());
+        frame.extend_from_slice(&height.to_le_bytes());
+        frame.extend_from_slice(&raw_len.to_le_bytes());
+        frame.extend_from_slice(&compressed_len.to_le_bytes());
+        frame.extend_from_slice(&[0; 16]);
+        frame.extend_from_slice(&compressed);
+        Ok(frame)
+    }
+
+    fn write_duration(target: &mut [u8], duration: Duration) {
+        let micros = u64::try_from(duration.as_micros()).unwrap_or(u64::MAX);
+        target.copy_from_slice(&micros.to_le_bytes());
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn software_fallback_is_opt_in() {
+        let default: AgentCommand = serde_json::from_str(r#"{"kind":"open_desktop"}"#).unwrap();
+        assert!(!default.allow_software_fallback);
+        let enabled: AgentCommand = serde_json::from_str(
+            r#"{"kind":"open_desktop","allow_software_fallback":true,"frames_per_second":12}"#,
+        )
+        .unwrap();
+        assert!(enabled.allow_software_fallback);
+        assert_eq!(enabled.frames_per_second, Some(12));
+    }
+}
diff --git a/client/README.md b/client/README.md
new file mode 100644
index 0000000..7e98706
--- /dev/null
+++ b/client/README.md
@@ -0,0 +1,45 @@
+# RemoteDesk 客户端核心
+
+`client/crates/client-core` 是 Windows 主程序与原生 Helper 共用的纯策略层。它不创建设备、不读取 Windows Credential Manager，也不持有远程帧或密码。
+
+## 多显示器布局
+
+`ClientDisplayPlanner` 接收协议层已经验证过的 `DisplayLayout` 和绑定同一远端 topology generation 的 `DisplaySelection`：
+
+- `DisplaySelection::single` 选择一个远端显示器。
+- `DisplaySelection::all` 选择完整远端桌面。
+- `DisplaySelection::custom` 按用户顺序选择一个子集。
+- `DisplayResolution::{SourceNative, FollowWindow, Fixed}` 控制合成画布尺寸。
+
+远端显示器允许负坐标。规划器保留原始 `source_rect`，同时生成从 `(0, 0)` 开始的 `normalized_source_rect` 和缩放后的 `output_rect`。混合 DPI 的 `DisplayScale` 按显示器保留；若选择未包含远端主屏，第一个被选显示器成为该计划的有效主屏。
+
+规划前必须提供 `DisplayPlanLimits`。显示器数量、源像素总量和缩放后像素总量超过限制都会失败，不会让 Helper 先分配大表面再报错。
+
+同一标准化布局会生成明确的后端命令：
+
+- `RdpDisplayControlPlan` 将主屏放在数组首项并以主屏 `(0, 0)` 生成允许负坐标的 RDP Dynamic Monitor Layout。
+- `LinuxNativeDisplayPlan` 指定 Agent 捕获显示器、主屏和编码画布；它只调整编码/合成尺寸，不修改 Wayland/Xorg 实体显示模式。
+
+规划器的 client generation 从 1 开始。远端 topology/选择、分辨率、本地窗口 output/DPI、GPU pipeline 或后端发生变化时 generation 递增并返回 `DisplayRevalidationReason`；完全相同的请求复用 generation。失败请求不推进 generation。Helper 回调和 path report 必须绑定当前 generation，旧结果应丢弃。
+
+严格零拷贝继续由 `GpuPolicy::RequiredEndToEnd` 控制。本地窗口所在 output 的 DXGI Adapter 是 display adapter；decoder、renderer 或手动 Adapter 与它不一致时，RDP 和 Linux native 计划都拒绝。`Compatibility` 才允许生成带 cross-adapter copy 标记的计划。RDP 服务端路径是否零拷贝仍需真实 IronRDP/ETW 验证，客户端计划本身不能作此证明。
+
+## RDP 凭据
+
+HostProfile 只能保存 `HostProfileCredentialBinding`，其中只有 `CredentialRef` 和非秘密状态，不包含用户名或密码。引用必须位于 `RemoteDesk/RDP/<profile-key>` 命名空间，profile key 仅允许 ASCII 字母、数字及 `-_.:@`，空值、外部命名空间、控制字符和超长值会被拒绝。
+
+`client/helpers/credential-store` 使用 Windows Credential Manager generic credential，并通过 `CredentialRef::target()` 精确指定应用条目。独立本地控制台遮罩录入账号和密码；React/HTTP、控制服务和 viewer 命令行只传引用。IronRDP viewer 直接读取凭据并在进程内构造 NLA 配置，密码不会写回 client-core 状态、日志、命令行或序列化 HostProfile。
+
+`CredentialRef` 和 `HostProfileCredentialBinding` 的 `Debug` 输出会隐藏 target。`RdpCredentialStatus` 只表达 `Unchecked`、`Missing`、`Ready` 或 `NeedsUserUpdate`。
+
+## 验证
+
+在仓库根目录运行：
+
+```powershell
+$taskTemp = (Resolve-Path 'target\tmp').Path
+$env:TEMP = $taskTemp
+$env:TMP = $taskTemp
+cargo test -p remotedesk-client-core
+cargo clippy -p remotedesk-client-core --all-targets -- -D warnings
+```
diff --git a/client/app-shell/Cargo.toml b/client/app-shell/Cargo.toml
new file mode 100644
index 0000000..534ae67
--- /dev/null
+++ b/client/app-shell/Cargo.toml
@@ -0,0 +1,21 @@
+[package]
+name = "remotedesk-app"
+version.workspace = true
+edition.workspace = true
+license.workspace = true
+rust-version.workspace = true
+
+[[bin]]
+name = "remotedesk"
+path = "src/main.rs"
+
+[target.'cfg(windows)'.dependencies]
+getrandom = "0.3.3"
+sha2 = "0.10"
+tauri = { version = "2.8.5", default-features = false, features = ["wry"] }
+
+[target.'cfg(windows)'.build-dependencies]
+tauri-build = { version = "2.4.1", features = [] }
+
+[lints]
+workspace = true
diff --git a/client/app-shell/build.rs b/client/app-shell/build.rs
new file mode 100644
index 0000000..eb180dc
--- /dev/null
+++ b/client/app-shell/build.rs
@@ -0,0 +1,4 @@
+fn main() {
+    #[cfg(windows)]
+    tauri_build::build();
+}
diff --git a/client/app-shell/gen/schemas/acl-manifests.json b/client/app-shell/gen/schemas/acl-manifests.json
new file mode 100644
index 0000000..0eebfc4
--- /dev/null
+++ b/client/app-shell/gen/schemas/acl-manifests.json
@@ -0,0 +1 @@
+{"core":{"default_permission":{"identifier":"default","description":"Default core plugins set.","permissions":["core:path:default","core:event:default","core:window:default","core:webview:default","core:app:default","core:image:default","core:resources:default","core:menu:default","core:tray:default"]},"permissions":{},"permission_sets":{},"global_scope_schema":null},"core:app":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin.","permissions":["allow-version","allow-name","allow-tauri-version","allow-identifier","allow-bundle-type","allow-register-listener","allow-remove-listener","allow-supports-multiple-windows"]},"permissions":{"allow-app-hide":{"identifier":"allow-app-hide","description":"Enables the app_hide command without any pre-configured scope.","commands":{"allow":["app_hide"],"deny":[]}},"allow-app-show":{"identifier":"allow-app-show","description":"Enables the app_show command without any pre-configured scope.","commands":{"allow":["app_show"],"deny":[]}},"allow-bundle-type":{"identifier":"allow-bundle-type","description":"Enables the bundle_type command without any pre-configured scope.","commands":{"allow":["bundle_type"],"deny":[]}},"allow-default-window-icon":{"identifier":"allow-default-window-icon","description":"Enables the default_window_icon command without any pre-configured scope.","commands":{"allow":["default_window_icon"],"deny":[]}},"allow-fetch-data-store-identifiers":{"identifier":"allow-fetch-data-store-identifiers","description":"Enables the fetch_data_store_identifiers command without any pre-configured scope.","commands":{"allow":["fetch_data_store_identifiers"],"deny":[]}},"allow-identifier":{"identifier":"allow-identifier","description":"Enables the identifier command without any pre-configured scope.","commands":{"allow":["identifier"],"deny":[]}},"allow-name":{"identifier":"allow-name","description":"Enables the name command without any pre-configured scope.","commands":{"allow":["name"],"deny":[]}},"allow-register-listener":{"identifier":"allow-register-listener","description":"Enables the register_listener command without any pre-configured scope.","commands":{"allow":["register_listener"],"deny":[]}},"allow-remove-data-store":{"identifier":"allow-remove-data-store","description":"Enables the remove_data_store command without any pre-configured scope.","commands":{"allow":["remove_data_store"],"deny":[]}},"allow-remove-listener":{"identifier":"allow-remove-listener","description":"Enables the remove_listener command without any pre-configured scope.","commands":{"allow":["remove_listener"],"deny":[]}},"allow-set-app-theme":{"identifier":"allow-set-app-theme","description":"Enables the set_app_theme command without any pre-configured scope.","commands":{"allow":["set_app_theme"],"deny":[]}},"allow-set-dock-visibility":{"identifier":"allow-set-dock-visibility","description":"Enables the set_dock_visibility command without any pre-configured scope.","commands":{"allow":["set_dock_visibility"],"deny":[]}},"allow-supports-multiple-windows":{"identifier":"allow-supports-multiple-windows","description":"Enables the supports_multiple_windows command without any pre-configured scope.","commands":{"allow":["supports_multiple_windows"],"deny":[]}},"allow-tauri-version":{"identifier":"allow-tauri-version","description":"Enables the tauri_version command without any pre-configured scope.","commands":{"allow":["tauri_version"],"deny":[]}},"allow-version":{"identifier":"allow-version","description":"Enables the version command without any pre-configured scope.","commands":{"allow":["version"],"deny":[]}},"deny-app-hide":{"identifier":"deny-app-hide","description":"Denies the app_hide command without any pre-configured scope.","commands":{"allow":[],"deny":["app_hide"]}},"deny-app-show":{"identifier":"deny-app-show","description":"Denies the app_show command without any pre-configured scope.","commands":{"allow":[],"deny":["app_show"]}},"deny-bundle-type":{"identifier":"deny-bundle-type","description":"Denies the bundle_type command without any pre-configured scope.","commands":{"allow":[],"deny":["bundle_type"]}},"deny-default-window-icon":{"identifier":"deny-default-window-icon","description":"Denies the default_window_icon command without any pre-configured scope.","commands":{"allow":[],"deny":["default_window_icon"]}},"deny-fetch-data-store-identifiers":{"identifier":"deny-fetch-data-store-identifiers","description":"Denies the fetch_data_store_identifiers command without any pre-configured scope.","commands":{"allow":[],"deny":["fetch_data_store_identifiers"]}},"deny-identifier":{"identifier":"deny-identifier","description":"Denies the identifier command without any pre-configured scope.","commands":{"allow":[],"deny":["identifier"]}},"deny-name":{"identifier":"deny-name","description":"Denies the name command without any pre-configured scope.","commands":{"allow":[],"deny":["name"]}},"deny-register-listener":{"identifier":"deny-register-listener","description":"Denies the register_listener command without any pre-configured scope.","commands":{"allow":[],"deny":["register_listener"]}},"deny-remove-data-store":{"identifier":"deny-remove-data-store","description":"Denies the remove_data_store command without any pre-configured scope.","commands":{"allow":[],"deny":["remove_data_store"]}},"deny-remove-listener":{"identifier":"deny-remove-listener","description":"Denies the remove_listener command without any pre-configured scope.","commands":{"allow":[],"deny":["remove_listener"]}},"deny-set-app-theme":{"identifier":"deny-set-app-theme","description":"Denies the set_app_theme command without any pre-configured scope.","commands":{"allow":[],"deny":["set_app_theme"]}},"deny-set-dock-visibility":{"identifier":"deny-set-dock-visibility","description":"Denies the set_dock_visibility command without any pre-configured scope.","commands":{"allow":[],"deny":["set_dock_visibility"]}},"deny-supports-multiple-windows":{"identifier":"deny-supports-multiple-windows","description":"Denies the supports_multiple_windows command without any pre-configured scope.","commands":{"allow":[],"deny":["supports_multiple_windows"]}},"deny-tauri-version":{"identifier":"deny-tauri-version","description":"Denies the tauri_version command without any pre-configured scope.","commands":{"allow":[],"deny":["tauri_version"]}},"deny-version":{"identifier":"deny-version","description":"Denies the version command without any pre-configured scope.","commands":{"allow":[],"deny":["version"]}}},"permission_sets":{},"global_scope_schema":null},"core:event":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin, which enables all commands.","permissions":["allow-listen","allow-unlisten","allow-emit","allow-emit-to"]},"permissions":{"allow-emit":{"identifier":"allow-emit","description":"Enables the emit command without any pre-configured scope.","commands":{"allow":["emit"],"deny":[]}},"allow-emit-to":{"identifier":"allow-emit-to","description":"Enables the emit_to command without any pre-configured scope.","commands":{"allow":["emit_to"],"deny":[]}},"allow-listen":{"identifier":"allow-listen","description":"Enables the listen command without any pre-configured scope.","commands":{"allow":["listen"],"deny":[]}},"allow-unlisten":{"identifier":"allow-unlisten","description":"Enables the unlisten command without any pre-configured scope.","commands":{"allow":["unlisten"],"deny":[]}},"deny-emit":{"identifier":"deny-emit","description":"Denies the emit command without any pre-configured scope.","commands":{"allow":[],"deny":["emit"]}},"deny-emit-to":{"identifier":"deny-emit-to","description":"Denies the emit_to command without any pre-configured scope.","commands":{"allow":[],"deny":["emit_to"]}},"deny-listen":{"identifier":"deny-listen","description":"Denies the listen command without any pre-configured scope.","commands":{"allow":[],"deny":["listen"]}},"deny-unlisten":{"identifier":"deny-unlisten","description":"Denies the unlisten command without any pre-configured scope.","commands":{"allow":[],"deny":["unlisten"]}}},"permission_sets":{},"global_scope_schema":null},"core:image":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin, which enables all commands.","permissions":["allow-new","allow-from-bytes","allow-from-path","allow-rgba","allow-size"]},"permissions":{"allow-from-bytes":{"identifier":"allow-from-bytes","description":"Enables the from_bytes command without any pre-configured scope.","commands":{"allow":["from_bytes"],"deny":[]}},"allow-from-path":{"identifier":"allow-from-path","description":"Enables the from_path command without any pre-configured scope.","commands":{"allow":["from_path"],"deny":[]}},"allow-new":{"identifier":"allow-new","description":"Enables the new command without any pre-configured scope.","commands":{"allow":["new"],"deny":[]}},"allow-rgba":{"identifier":"allow-rgba","description":"Enables the rgba command without any pre-configured scope.","commands":{"allow":["rgba"],"deny":[]}},"allow-size":{"identifier":"allow-size","description":"Enables the size command without any pre-configured scope.","commands":{"allow":["size"],"deny":[]}},"deny-from-bytes":{"identifier":"deny-from-bytes","description":"Denies the from_bytes command without any pre-configured scope.","commands":{"allow":[],"deny":["from_bytes"]}},"deny-from-path":{"identifier":"deny-from-path","description":"Denies the from_path command without any pre-configured scope.","commands":{"allow":[],"deny":["from_path"]}},"deny-new":{"identifier":"deny-new","description":"Denies the new command without any pre-configured scope.","commands":{"allow":[],"deny":["new"]}},"deny-rgba":{"identifier":"deny-rgba","description":"Denies the rgba command without any pre-configured scope.","commands":{"allow":[],"deny":["rgba"]}},"deny-size":{"identifier":"deny-size","description":"Denies the size command without any pre-configured scope.","commands":{"allow":[],"deny":["size"]}}},"permission_sets":{},"global_scope_schema":null},"core:menu":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin, which enables all commands.","permissions":["allow-new","allow-append","allow-prepend","allow-insert","allow-remove","allow-remove-at","allow-items","allow-get","allow-popup","allow-create-default","allow-set-as-app-menu","allow-set-as-window-menu","allow-text","allow-set-text","allow-is-enabled","allow-set-enabled","allow-set-accelerator","allow-set-as-windows-menu-for-nsapp","allow-set-as-help-menu-for-nsapp","allow-is-checked","allow-set-checked","allow-set-icon"]},"permissions":{"allow-append":{"identifier":"allow-append","description":"Enables the append command without any pre-configured scope.","commands":{"allow":["append"],"deny":[]}},"allow-create-default":{"identifier":"allow-create-default","description":"Enables the create_default command without any pre-configured scope.","commands":{"allow":["create_default"],"deny":[]}},"allow-get":{"identifier":"allow-get","description":"Enables the get command without any pre-configured scope.","commands":{"allow":["get"],"deny":[]}},"allow-insert":{"identifier":"allow-insert","description":"Enables the insert command without any pre-configured scope.","commands":{"allow":["insert"],"deny":[]}},"allow-is-checked":{"identifier":"allow-is-checked","description":"Enables the is_checked command without any pre-configured scope.","commands":{"allow":["is_checked"],"deny":[]}},"allow-is-enabled":{"identifier":"allow-is-enabled","description":"Enables the is_enabled command without any pre-configured scope.","commands":{"allow":["is_enabled"],"deny":[]}},"allow-items":{"identifier":"allow-items","description":"Enables the items command without any pre-configured scope.","commands":{"allow":["items"],"deny":[]}},"allow-new":{"identifier":"allow-new","description":"Enables the new command without any pre-configured scope.","commands":{"allow":["new"],"deny":[]}},"allow-popup":{"identifier":"allow-popup","description":"Enables the popup command without any pre-configured scope.","commands":{"allow":["popup"],"deny":[]}},"allow-prepend":{"identifier":"allow-prepend","description":"Enables the prepend command without any pre-configured scope.","commands":{"allow":["prepend"],"deny":[]}},"allow-remove":{"identifier":"allow-remove","description":"Enables the remove command without any pre-configured scope.","commands":{"allow":["remove"],"deny":[]}},"allow-remove-at":{"identifier":"allow-remove-at","description":"Enables the remove_at command without any pre-configured scope.","commands":{"allow":["remove_at"],"deny":[]}},"allow-set-accelerator":{"identifier":"allow-set-accelerator","description":"Enables the set_accelerator command without any pre-configured scope.","commands":{"allow":["set_accelerator"],"deny":[]}},"allow-set-as-app-menu":{"identifier":"allow-set-as-app-menu","description":"Enables the set_as_app_menu command without any pre-configured scope.","commands":{"allow":["set_as_app_menu"],"deny":[]}},"allow-set-as-help-menu-for-nsapp":{"identifier":"allow-set-as-help-menu-for-nsapp","description":"Enables the set_as_help_menu_for_nsapp command without any pre-configured scope.","commands":{"allow":["set_as_help_menu_for_nsapp"],"deny":[]}},"allow-set-as-window-menu":{"identifier":"allow-set-as-window-menu","description":"Enables the set_as_window_menu command without any pre-configured scope.","commands":{"allow":["set_as_window_menu"],"deny":[]}},"allow-set-as-windows-menu-for-nsapp":{"identifier":"allow-set-as-windows-menu-for-nsapp","description":"Enables the set_as_windows_menu_for_nsapp command without any pre-configured scope.","commands":{"allow":["set_as_windows_menu_for_nsapp"],"deny":[]}},"allow-set-checked":{"identifier":"allow-set-checked","description":"Enables the set_checked command without any pre-configured scope.","commands":{"allow":["set_checked"],"deny":[]}},"allow-set-enabled":{"identifier":"allow-set-enabled","description":"Enables the set_enabled command without any pre-configured scope.","commands":{"allow":["set_enabled"],"deny":[]}},"allow-set-icon":{"identifier":"allow-set-icon","description":"Enables the set_icon command without any pre-configured scope.","commands":{"allow":["set_icon"],"deny":[]}},"allow-set-text":{"identifier":"allow-set-text","description":"Enables the set_text command without any pre-configured scope.","commands":{"allow":["set_text"],"deny":[]}},"allow-text":{"identifier":"allow-text","description":"Enables the text command without any pre-configured scope.","commands":{"allow":["text"],"deny":[]}},"deny-append":{"identifier":"deny-append","description":"Denies the append command without any pre-configured scope.","commands":{"allow":[],"deny":["append"]}},"deny-create-default":{"identifier":"deny-create-default","description":"Denies the create_default command without any pre-configured scope.","commands":{"allow":[],"deny":["create_default"]}},"deny-get":{"identifier":"deny-get","description":"Denies the get command without any pre-configured scope.","commands":{"allow":[],"deny":["get"]}},"deny-insert":{"identifier":"deny-insert","description":"Denies the insert command without any pre-configured scope.","commands":{"allow":[],"deny":["insert"]}},"deny-is-checked":{"identifier":"deny-is-checked","description":"Denies the is_checked command without any pre-configured scope.","commands":{"allow":[],"deny":["is_checked"]}},"deny-is-enabled":{"identifier":"deny-is-enabled","description":"Denies the is_enabled command without any pre-configured scope.","commands":{"allow":[],"deny":["is_enabled"]}},"deny-items":{"identifier":"deny-items","description":"Denies the items command without any pre-configured scope.","commands":{"allow":[],"deny":["items"]}},"deny-new":{"identifier":"deny-new","description":"Denies the new command without any pre-configured scope.","commands":{"allow":[],"deny":["new"]}},"deny-popup":{"identifier":"deny-popup","description":"Denies the popup command without any pre-configured scope.","commands":{"allow":[],"deny":["popup"]}},"deny-prepend":{"identifier":"deny-prepend","description":"Denies the prepend command without any pre-configured scope.","commands":{"allow":[],"deny":["prepend"]}},"deny-remove":{"identifier":"deny-remove","description":"Denies the remove command without any pre-configured scope.","commands":{"allow":[],"deny":["remove"]}},"deny-remove-at":{"identifier":"deny-remove-at","description":"Denies the remove_at command without any pre-configured scope.","commands":{"allow":[],"deny":["remove_at"]}},"deny-set-accelerator":{"identifier":"deny-set-accelerator","description":"Denies the set_accelerator command without any pre-configured scope.","commands":{"allow":[],"deny":["set_accelerator"]}},"deny-set-as-app-menu":{"identifier":"deny-set-as-app-menu","description":"Denies the set_as_app_menu command without any pre-configured scope.","commands":{"allow":[],"deny":["set_as_app_menu"]}},"deny-set-as-help-menu-for-nsapp":{"identifier":"deny-set-as-help-menu-for-nsapp","description":"Denies the set_as_help_menu_for_nsapp command without any pre-configured scope.","commands":{"allow":[],"deny":["set_as_help_menu_for_nsapp"]}},"deny-set-as-window-menu":{"identifier":"deny-set-as-window-menu","description":"Denies the set_as_window_menu command without any pre-configured scope.","commands":{"allow":[],"deny":["set_as_window_menu"]}},"deny-set-as-windows-menu-for-nsapp":{"identifier":"deny-set-as-windows-menu-for-nsapp","description":"Denies the set_as_windows_menu_for_nsapp command without any pre-configured scope.","commands":{"allow":[],"deny":["set_as_windows_menu_for_nsapp"]}},"deny-set-checked":{"identifier":"deny-set-checked","description":"Denies the set_checked command without any pre-configured scope.","commands":{"allow":[],"deny":["set_checked"]}},"deny-set-enabled":{"identifier":"deny-set-enabled","description":"Denies the set_enabled command without any pre-configured scope.","commands":{"allow":[],"deny":["set_enabled"]}},"deny-set-icon":{"identifier":"deny-set-icon","description":"Denies the set_icon command without any pre-configured scope.","commands":{"allow":[],"deny":["set_icon"]}},"deny-set-text":{"identifier":"deny-set-text","description":"Denies the set_text command without any pre-configured scope.","commands":{"allow":[],"deny":["set_text"]}},"deny-text":{"identifier":"deny-text","description":"Denies the text command without any pre-configured scope.","commands":{"allow":[],"deny":["text"]}}},"permission_sets":{},"global_scope_schema":null},"core:path":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin, which enables all commands.","permissions":["allow-resolve-directory","allow-resolve","allow-normalize","allow-join","allow-dirname","allow-extname","allow-basename","allow-is-absolute"]},"permissions":{"allow-basename":{"identifier":"allow-basename","description":"Enables the basename command without any pre-configured scope.","commands":{"allow":["basename"],"deny":[]}},"allow-dirname":{"identifier":"allow-dirname","description":"Enables the dirname command without any pre-configured scope.","commands":{"allow":["dirname"],"deny":[]}},"allow-extname":{"identifier":"allow-extname","description":"Enables the extname command without any pre-configured scope.","commands":{"allow":["extname"],"deny":[]}},"allow-is-absolute":{"identifier":"allow-is-absolute","description":"Enables the is_absolute command without any pre-configured scope.","commands":{"allow":["is_absolute"],"deny":[]}},"allow-join":{"identifier":"allow-join","description":"Enables the join command without any pre-configured scope.","commands":{"allow":["join"],"deny":[]}},"allow-normalize":{"identifier":"allow-normalize","description":"Enables the normalize command without any pre-configured scope.","commands":{"allow":["normalize"],"deny":[]}},"allow-resolve":{"identifier":"allow-resolve","description":"Enables the resolve command without any pre-configured scope.","commands":{"allow":["resolve"],"deny":[]}},"allow-resolve-directory":{"identifier":"allow-resolve-directory","description":"Enables the resolve_directory command without any pre-configured scope.","commands":{"allow":["resolve_directory"],"deny":[]}},"deny-basename":{"identifier":"deny-basename","description":"Denies the basename command without any pre-configured scope.","commands":{"allow":[],"deny":["basename"]}},"deny-dirname":{"identifier":"deny-dirname","description":"Denies the dirname command without any pre-configured scope.","commands":{"allow":[],"deny":["dirname"]}},"deny-extname":{"identifier":"deny-extname","description":"Denies the extname command without any pre-configured scope.","commands":{"allow":[],"deny":["extname"]}},"deny-is-absolute":{"identifier":"deny-is-absolute","description":"Denies the is_absolute command without any pre-configured scope.","commands":{"allow":[],"deny":["is_absolute"]}},"deny-join":{"identifier":"deny-join","description":"Denies the join command without any pre-configured scope.","commands":{"allow":[],"deny":["join"]}},"deny-normalize":{"identifier":"deny-normalize","description":"Denies the normalize command without any pre-configured scope.","commands":{"allow":[],"deny":["normalize"]}},"deny-resolve":{"identifier":"deny-resolve","description":"Denies the resolve command without any pre-configured scope.","commands":{"allow":[],"deny":["resolve"]}},"deny-resolve-directory":{"identifier":"deny-resolve-directory","description":"Denies the resolve_directory command without any pre-configured scope.","commands":{"allow":[],"deny":["resolve_directory"]}}},"permission_sets":{},"global_scope_schema":null},"core:resources":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin, which enables all commands.","permissions":["allow-close"]},"permissions":{"allow-close":{"identifier":"allow-close","description":"Enables the close command without any pre-configured scope.","commands":{"allow":["close"],"deny":[]}},"deny-close":{"identifier":"deny-close","description":"Denies the close command without any pre-configured scope.","commands":{"allow":[],"deny":["close"]}}},"permission_sets":{},"global_scope_schema":null},"core:tray":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin, which enables all commands.","permissions":["allow-new","allow-get-by-id","allow-remove-by-id","allow-set-icon","allow-set-menu","allow-set-tooltip","allow-set-title","allow-set-visible","allow-set-temp-dir-path","allow-set-icon-as-template","allow-set-icon-with-as-template","allow-set-show-menu-on-left-click"]},"permissions":{"allow-get-by-id":{"identifier":"allow-get-by-id","description":"Enables the get_by_id command without any pre-configured scope.","commands":{"allow":["get_by_id"],"deny":[]}},"allow-new":{"identifier":"allow-new","description":"Enables the new command without any pre-configured scope.","commands":{"allow":["new"],"deny":[]}},"allow-remove-by-id":{"identifier":"allow-remove-by-id","description":"Enables the remove_by_id command without any pre-configured scope.","commands":{"allow":["remove_by_id"],"deny":[]}},"allow-set-icon":{"identifier":"allow-set-icon","description":"Enables the set_icon command without any pre-configured scope.","commands":{"allow":["set_icon"],"deny":[]}},"allow-set-icon-as-template":{"identifier":"allow-set-icon-as-template","description":"Enables the set_icon_as_template command without any pre-configured scope.","commands":{"allow":["set_icon_as_template"],"deny":[]}},"allow-set-icon-with-as-template":{"identifier":"allow-set-icon-with-as-template","description":"Enables the set_icon_with_as_template command without any pre-configured scope.","commands":{"allow":["set_icon_with_as_template"],"deny":[]}},"allow-set-menu":{"identifier":"allow-set-menu","description":"Enables the set_menu command without any pre-configured scope.","commands":{"allow":["set_menu"],"deny":[]}},"allow-set-show-menu-on-left-click":{"identifier":"allow-set-show-menu-on-left-click","description":"Enables the set_show_menu_on_left_click command without any pre-configured scope.","commands":{"allow":["set_show_menu_on_left_click"],"deny":[]}},"allow-set-temp-dir-path":{"identifier":"allow-set-temp-dir-path","description":"Enables the set_temp_dir_path command without any pre-configured scope.","commands":{"allow":["set_temp_dir_path"],"deny":[]}},"allow-set-title":{"identifier":"allow-set-title","description":"Enables the set_title command without any pre-configured scope.","commands":{"allow":["set_title"],"deny":[]}},"allow-set-tooltip":{"identifier":"allow-set-tooltip","description":"Enables the set_tooltip command without any pre-configured scope.","commands":{"allow":["set_tooltip"],"deny":[]}},"allow-set-visible":{"identifier":"allow-set-visible","description":"Enables the set_visible command without any pre-configured scope.","commands":{"allow":["set_visible"],"deny":[]}},"deny-get-by-id":{"identifier":"deny-get-by-id","description":"Denies the get_by_id command without any pre-configured scope.","commands":{"allow":[],"deny":["get_by_id"]}},"deny-new":{"identifier":"deny-new","description":"Denies the new command without any pre-configured scope.","commands":{"allow":[],"deny":["new"]}},"deny-remove-by-id":{"identifier":"deny-remove-by-id","description":"Denies the remove_by_id command without any pre-configured scope.","commands":{"allow":[],"deny":["remove_by_id"]}},"deny-set-icon":{"identifier":"deny-set-icon","description":"Denies the set_icon command without any pre-configured scope.","commands":{"allow":[],"deny":["set_icon"]}},"deny-set-icon-as-template":{"identifier":"deny-set-icon-as-template","description":"Denies the set_icon_as_template command without any pre-configured scope.","commands":{"allow":[],"deny":["set_icon_as_template"]}},"deny-set-icon-with-as-template":{"identifier":"deny-set-icon-with-as-template","description":"Denies the set_icon_with_as_template command without any pre-configured scope.","commands":{"allow":[],"deny":["set_icon_with_as_template"]}},"deny-set-menu":{"identifier":"deny-set-menu","description":"Denies the set_menu command without any pre-configured scope.","commands":{"allow":[],"deny":["set_menu"]}},"deny-set-show-menu-on-left-click":{"identifier":"deny-set-show-menu-on-left-click","description":"Denies the set_show_menu_on_left_click command without any pre-configured scope.","commands":{"allow":[],"deny":["set_show_menu_on_left_click"]}},"deny-set-temp-dir-path":{"identifier":"deny-set-temp-dir-path","description":"Denies the set_temp_dir_path command without any pre-configured scope.","commands":{"allow":[],"deny":["set_temp_dir_path"]}},"deny-set-title":{"identifier":"deny-set-title","description":"Denies the set_title command without any pre-configured scope.","commands":{"allow":[],"deny":["set_title"]}},"deny-set-tooltip":{"identifier":"deny-set-tooltip","description":"Denies the set_tooltip command without any pre-configured scope.","commands":{"allow":[],"deny":["set_tooltip"]}},"deny-set-visible":{"identifier":"deny-set-visible","description":"Denies the set_visible command without any pre-configured scope.","commands":{"allow":[],"deny":["set_visible"]}}},"permission_sets":{},"global_scope_schema":null},"core:webview":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin.","permissions":["allow-get-all-webviews","allow-webview-position","allow-webview-size","allow-internal-toggle-devtools"]},"permissions":{"allow-clear-all-browsing-data":{"identifier":"allow-clear-all-browsing-data","description":"Enables the clear_all_browsing_data command without any pre-configured scope.","commands":{"allow":["clear_all_browsing_data"],"deny":[]}},"allow-create-webview":{"identifier":"allow-create-webview","description":"Enables the create_webview command without any pre-configured scope.","commands":{"allow":["create_webview"],"deny":[]}},"allow-create-webview-window":{"identifier":"allow-create-webview-window","description":"Enables the create_webview_window command without any pre-configured scope.","commands":{"allow":["create_webview_window"],"deny":[]}},"allow-get-all-webviews":{"identifier":"allow-get-all-webviews","description":"Enables the get_all_webviews command without any pre-configured scope.","commands":{"allow":["get_all_webviews"],"deny":[]}},"allow-internal-toggle-devtools":{"identifier":"allow-internal-toggle-devtools","description":"Enables the internal_toggle_devtools command without any pre-configured scope.","commands":{"allow":["internal_toggle_devtools"],"deny":[]}},"allow-print":{"identifier":"allow-print","description":"Enables the print command without any pre-configured scope.","commands":{"allow":["print"],"deny":[]}},"allow-reparent":{"identifier":"allow-reparent","description":"Enables the reparent command without any pre-configured scope.","commands":{"allow":["reparent"],"deny":[]}},"allow-set-webview-auto-resize":{"identifier":"allow-set-webview-auto-resize","description":"Enables the set_webview_auto_resize command without any pre-configured scope.","commands":{"allow":["set_webview_auto_resize"],"deny":[]}},"allow-set-webview-background-color":{"identifier":"allow-set-webview-background-color","description":"Enables the set_webview_background_color command without any pre-configured scope.","commands":{"allow":["set_webview_background_color"],"deny":[]}},"allow-set-webview-focus":{"identifier":"allow-set-webview-focus","description":"Enables the set_webview_focus command without any pre-configured scope.","commands":{"allow":["set_webview_focus"],"deny":[]}},"allow-set-webview-position":{"identifier":"allow-set-webview-position","description":"Enables the set_webview_position command without any pre-configured scope.","commands":{"allow":["set_webview_position"],"deny":[]}},"allow-set-webview-size":{"identifier":"allow-set-webview-size","description":"Enables the set_webview_size command without any pre-configured scope.","commands":{"allow":["set_webview_size"],"deny":[]}},"allow-set-webview-zoom":{"identifier":"allow-set-webview-zoom","description":"Enables the set_webview_zoom command without any pre-configured scope.","commands":{"allow":["set_webview_zoom"],"deny":[]}},"allow-webview-close":{"identifier":"allow-webview-close","description":"Enables the webview_close command without any pre-configured scope.","commands":{"allow":["webview_close"],"deny":[]}},"allow-webview-hide":{"identifier":"allow-webview-hide","description":"Enables the webview_hide command without any pre-configured scope.","commands":{"allow":["webview_hide"],"deny":[]}},"allow-webview-position":{"identifier":"allow-webview-position","description":"Enables the webview_position command without any pre-configured scope.","commands":{"allow":["webview_position"],"deny":[]}},"allow-webview-show":{"identifier":"allow-webview-show","description":"Enables the webview_show command without any pre-configured scope.","commands":{"allow":["webview_show"],"deny":[]}},"allow-webview-size":{"identifier":"allow-webview-size","description":"Enables the webview_size command without any pre-configured scope.","commands":{"allow":["webview_size"],"deny":[]}},"deny-clear-all-browsing-data":{"identifier":"deny-clear-all-browsing-data","description":"Denies the clear_all_browsing_data command without any pre-configured scope.","commands":{"allow":[],"deny":["clear_all_browsing_data"]}},"deny-create-webview":{"identifier":"deny-create-webview","description":"Denies the create_webview command without any pre-configured scope.","commands":{"allow":[],"deny":["create_webview"]}},"deny-create-webview-window":{"identifier":"deny-create-webview-window","description":"Denies the create_webview_window command without any pre-configured scope.","commands":{"allow":[],"deny":["create_webview_window"]}},"deny-get-all-webviews":{"identifier":"deny-get-all-webviews","description":"Denies the get_all_webviews command without any pre-configured scope.","commands":{"allow":[],"deny":["get_all_webviews"]}},"deny-internal-toggle-devtools":{"identifier":"deny-internal-toggle-devtools","description":"Denies the internal_toggle_devtools command without any pre-configured scope.","commands":{"allow":[],"deny":["internal_toggle_devtools"]}},"deny-print":{"identifier":"deny-print","description":"Denies the print command without any pre-configured scope.","commands":{"allow":[],"deny":["print"]}},"deny-reparent":{"identifier":"deny-reparent","description":"Denies the reparent command without any pre-configured scope.","commands":{"allow":[],"deny":["reparent"]}},"deny-set-webview-auto-resize":{"identifier":"deny-set-webview-auto-resize","description":"Denies the set_webview_auto_resize command without any pre-configured scope.","commands":{"allow":[],"deny":["set_webview_auto_resize"]}},"deny-set-webview-background-color":{"identifier":"deny-set-webview-background-color","description":"Denies the set_webview_background_color command without any pre-configured scope.","commands":{"allow":[],"deny":["set_webview_background_color"]}},"deny-set-webview-focus":{"identifier":"deny-set-webview-focus","description":"Denies the set_webview_focus command without any pre-configured scope.","commands":{"allow":[],"deny":["set_webview_focus"]}},"deny-set-webview-position":{"identifier":"deny-set-webview-position","description":"Denies the set_webview_position command without any pre-configured scope.","commands":{"allow":[],"deny":["set_webview_position"]}},"deny-set-webview-size":{"identifier":"deny-set-webview-size","description":"Denies the set_webview_size command without any pre-configured scope.","commands":{"allow":[],"deny":["set_webview_size"]}},"deny-set-webview-zoom":{"identifier":"deny-set-webview-zoom","description":"Denies the set_webview_zoom command without any pre-configured scope.","commands":{"allow":[],"deny":["set_webview_zoom"]}},"deny-webview-close":{"identifier":"deny-webview-close","description":"Denies the webview_close command without any pre-configured scope.","commands":{"allow":[],"deny":["webview_close"]}},"deny-webview-hide":{"identifier":"deny-webview-hide","description":"Denies the webview_hide command without any pre-configured scope.","commands":{"allow":[],"deny":["webview_hide"]}},"deny-webview-position":{"identifier":"deny-webview-position","description":"Denies the webview_position command without any pre-configured scope.","commands":{"allow":[],"deny":["webview_position"]}},"deny-webview-show":{"identifier":"deny-webview-show","description":"Denies the webview_show command without any pre-configured scope.","commands":{"allow":[],"deny":["webview_show"]}},"deny-webview-size":{"identifier":"deny-webview-size","description":"Denies the webview_size command without any pre-configured scope.","commands":{"allow":[],"deny":["webview_size"]}}},"permission_sets":{},"global_scope_schema":null},"core:window":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin.","permissions":["allow-get-all-windows","allow-scale-factor","allow-inner-position","allow-outer-position","allow-inner-size","allow-outer-size","allow-is-fullscreen","allow-is-minimized","allow-is-maximized","allow-is-focused","allow-is-decorated","allow-is-resizable","allow-is-maximizable","allow-is-minimizable","allow-is-closable","allow-is-visible","allow-is-enabled","allow-title","allow-current-monitor","allow-primary-monitor","allow-monitor-from-point","allow-available-monitors","allow-cursor-position","allow-theme","allow-is-always-on-top","allow-activity-name","allow-scene-identifier","allow-internal-toggle-maximize"]},"permissions":{"allow-activity-name":{"identifier":"allow-activity-name","description":"Enables the activity_name command without any pre-configured scope.","commands":{"allow":["activity_name"],"deny":[]}},"allow-available-monitors":{"identifier":"allow-available-monitors","description":"Enables the available_monitors command without any pre-configured scope.","commands":{"allow":["available_monitors"],"deny":[]}},"allow-center":{"identifier":"allow-center","description":"Enables the center command without any pre-configured scope.","commands":{"allow":["center"],"deny":[]}},"allow-close":{"identifier":"allow-close","description":"Enables the close command without any pre-configured scope.","commands":{"allow":["close"],"deny":[]}},"allow-create":{"identifier":"allow-create","description":"Enables the create command without any pre-configured scope.","commands":{"allow":["create"],"deny":[]}},"allow-current-monitor":{"identifier":"allow-current-monitor","description":"Enables the current_monitor command without any pre-configured scope.","commands":{"allow":["current_monitor"],"deny":[]}},"allow-cursor-position":{"identifier":"allow-cursor-position","description":"Enables the cursor_position command without any pre-configured scope.","commands":{"allow":["cursor_position"],"deny":[]}},"allow-destroy":{"identifier":"allow-destroy","description":"Enables the destroy command without any pre-configured scope.","commands":{"allow":["destroy"],"deny":[]}},"allow-get-all-windows":{"identifier":"allow-get-all-windows","description":"Enables the get_all_windows command without any pre-configured scope.","commands":{"allow":["get_all_windows"],"deny":[]}},"allow-hide":{"identifier":"allow-hide","description":"Enables the hide command without any pre-configured scope.","commands":{"allow":["hide"],"deny":[]}},"allow-inner-position":{"identifier":"allow-inner-position","description":"Enables the inner_position command without any pre-configured scope.","commands":{"allow":["inner_position"],"deny":[]}},"allow-inner-size":{"identifier":"allow-inner-size","description":"Enables the inner_size command without any pre-configured scope.","commands":{"allow":["inner_size"],"deny":[]}},"allow-internal-toggle-maximize":{"identifier":"allow-internal-toggle-maximize","description":"Enables the internal_toggle_maximize command without any pre-configured scope.","commands":{"allow":["internal_toggle_maximize"],"deny":[]}},"allow-is-always-on-top":{"identifier":"allow-is-always-on-top","description":"Enables the is_always_on_top command without any pre-configured scope.","commands":{"allow":["is_always_on_top"],"deny":[]}},"allow-is-closable":{"identifier":"allow-is-closable","description":"Enables the is_closable command without any pre-configured scope.","commands":{"allow":["is_closable"],"deny":[]}},"allow-is-decorated":{"identifier":"allow-is-decorated","description":"Enables the is_decorated command without any pre-configured scope.","commands":{"allow":["is_decorated"],"deny":[]}},"allow-is-enabled":{"identifier":"allow-is-enabled","description":"Enables the is_enabled command without any pre-configured scope.","commands":{"allow":["is_enabled"],"deny":[]}},"allow-is-focused":{"identifier":"allow-is-focused","description":"Enables the is_focused command without any pre-configured scope.","commands":{"allow":["is_focused"],"deny":[]}},"allow-is-fullscreen":{"identifier":"allow-is-fullscreen","description":"Enables the is_fullscreen command without any pre-configured scope.","commands":{"allow":["is_fullscreen"],"deny":[]}},"allow-is-maximizable":{"identifier":"allow-is-maximizable","description":"Enables the is_maximizable command without any pre-configured scope.","commands":{"allow":["is_maximizable"],"deny":[]}},"allow-is-maximized":{"identifier":"allow-is-maximized","description":"Enables the is_maximized command without any pre-configured scope.","commands":{"allow":["is_maximized"],"deny":[]}},"allow-is-minimizable":{"identifier":"allow-is-minimizable","description":"Enables the is_minimizable command without any pre-configured scope.","commands":{"allow":["is_minimizable"],"deny":[]}},"allow-is-minimized":{"identifier":"allow-is-minimized","description":"Enables the is_minimized command without any pre-configured scope.","commands":{"allow":["is_minimized"],"deny":[]}},"allow-is-resizable":{"identifier":"allow-is-resizable","description":"Enables the is_resizable command without any pre-configured scope.","commands":{"allow":["is_resizable"],"deny":[]}},"allow-is-visible":{"identifier":"allow-is-visible","description":"Enables the is_visible command without any pre-configured scope.","commands":{"allow":["is_visible"],"deny":[]}},"allow-maximize":{"identifier":"allow-maximize","description":"Enables the maximize command without any pre-configured scope.","commands":{"allow":["maximize"],"deny":[]}},"allow-minimize":{"identifier":"allow-minimize","description":"Enables the minimize command without any pre-configured scope.","commands":{"allow":["minimize"],"deny":[]}},"allow-monitor-from-point":{"identifier":"allow-monitor-from-point","description":"Enables the monitor_from_point command without any pre-configured scope.","commands":{"allow":["monitor_from_point"],"deny":[]}},"allow-outer-position":{"identifier":"allow-outer-position","description":"Enables the outer_position command without any pre-configured scope.","commands":{"allow":["outer_position"],"deny":[]}},"allow-outer-size":{"identifier":"allow-outer-size","description":"Enables the outer_size command without any pre-configured scope.","commands":{"allow":["outer_size"],"deny":[]}},"allow-primary-monitor":{"identifier":"allow-primary-monitor","description":"Enables the primary_monitor command without any pre-configured scope.","commands":{"allow":["primary_monitor"],"deny":[]}},"allow-request-user-attention":{"identifier":"allow-request-user-attention","description":"Enables the request_user_attention command without any pre-configured scope.","commands":{"allow":["request_user_attention"],"deny":[]}},"allow-scale-factor":{"identifier":"allow-scale-factor","description":"Enables the scale_factor command without any pre-configured scope.","commands":{"allow":["scale_factor"],"deny":[]}},"allow-scene-identifier":{"identifier":"allow-scene-identifier","description":"Enables the scene_identifier command without any pre-configured scope.","commands":{"allow":["scene_identifier"],"deny":[]}},"allow-set-always-on-bottom":{"identifier":"allow-set-always-on-bottom","description":"Enables the set_always_on_bottom command without any pre-configured scope.","commands":{"allow":["set_always_on_bottom"],"deny":[]}},"allow-set-always-on-top":{"identifier":"allow-set-always-on-top","description":"Enables the set_always_on_top command without any pre-configured scope.","commands":{"allow":["set_always_on_top"],"deny":[]}},"allow-set-background-color":{"identifier":"allow-set-background-color","description":"Enables the set_background_color command without any pre-configured scope.","commands":{"allow":["set_background_color"],"deny":[]}},"allow-set-badge-count":{"identifier":"allow-set-badge-count","description":"Enables the set_badge_count command without any pre-configured scope.","commands":{"allow":["set_badge_count"],"deny":[]}},"allow-set-badge-label":{"identifier":"allow-set-badge-label","description":"Enables the set_badge_label command without any pre-configured scope.","commands":{"allow":["set_badge_label"],"deny":[]}},"allow-set-closable":{"identifier":"allow-set-closable","description":"Enables the set_closable command without any pre-configured scope.","commands":{"allow":["set_closable"],"deny":[]}},"allow-set-content-protected":{"identifier":"allow-set-content-protected","description":"Enables the set_content_protected command without any pre-configured scope.","commands":{"allow":["set_content_protected"],"deny":[]}},"allow-set-cursor-grab":{"identifier":"allow-set-cursor-grab","description":"Enables the set_cursor_grab command without any pre-configured scope.","commands":{"allow":["set_cursor_grab"],"deny":[]}},"allow-set-cursor-icon":{"identifier":"allow-set-cursor-icon","description":"Enables the set_cursor_icon command without any pre-configured scope.","commands":{"allow":["set_cursor_icon"],"deny":[]}},"allow-set-cursor-position":{"identifier":"allow-set-cursor-position","description":"Enables the set_cursor_position command without any pre-configured scope.","commands":{"allow":["set_cursor_position"],"deny":[]}},"allow-set-cursor-visible":{"identifier":"allow-set-cursor-visible","description":"Enables the set_cursor_visible command without any pre-configured scope.","commands":{"allow":["set_cursor_visible"],"deny":[]}},"allow-set-decorations":{"identifier":"allow-set-decorations","description":"Enables the set_decorations command without any pre-configured scope.","commands":{"allow":["set_decorations"],"deny":[]}},"allow-set-effects":{"identifier":"allow-set-effects","description":"Enables the set_effects command without any pre-configured scope.","commands":{"allow":["set_effects"],"deny":[]}},"allow-set-enabled":{"identifier":"allow-set-enabled","description":"Enables the set_enabled command without any pre-configured scope.","commands":{"allow":["set_enabled"],"deny":[]}},"allow-set-focus":{"identifier":"allow-set-focus","description":"Enables the set_focus command without any pre-configured scope.","commands":{"allow":["set_focus"],"deny":[]}},"allow-set-focusable":{"identifier":"allow-set-focusable","description":"Enables the set_focusable command without any pre-configured scope.","commands":{"allow":["set_focusable"],"deny":[]}},"allow-set-fullscreen":{"identifier":"allow-set-fullscreen","description":"Enables the set_fullscreen command without any pre-configured scope.","commands":{"allow":["set_fullscreen"],"deny":[]}},"allow-set-icon":{"identifier":"allow-set-icon","description":"Enables the set_icon command without any pre-configured scope.","commands":{"allow":["set_icon"],"deny":[]}},"allow-set-ignore-cursor-events":{"identifier":"allow-set-ignore-cursor-events","description":"Enables the set_ignore_cursor_events command without any pre-configured scope.","commands":{"allow":["set_ignore_cursor_events"],"deny":[]}},"allow-set-max-size":{"identifier":"allow-set-max-size","description":"Enables the set_max_size command without any pre-configured scope.","commands":{"allow":["set_max_size"],"deny":[]}},"allow-set-maximizable":{"identifier":"allow-set-maximizable","description":"Enables the set_maximizable command without any pre-configured scope.","commands":{"allow":["set_maximizable"],"deny":[]}},"allow-set-min-size":{"identifier":"allow-set-min-size","description":"Enables the set_min_size command without any pre-configured scope.","commands":{"allow":["set_min_size"],"deny":[]}},"allow-set-minimizable":{"identifier":"allow-set-minimizable","description":"Enables the set_minimizable command without any pre-configured scope.","commands":{"allow":["set_minimizable"],"deny":[]}},"allow-set-overlay-icon":{"identifier":"allow-set-overlay-icon","description":"Enables the set_overlay_icon command without any pre-configured scope.","commands":{"allow":["set_overlay_icon"],"deny":[]}},"allow-set-position":{"identifier":"allow-set-position","description":"Enables the set_position command without any pre-configured scope.","commands":{"allow":["set_position"],"deny":[]}},"allow-set-progress-bar":{"identifier":"allow-set-progress-bar","description":"Enables the set_progress_bar command without any pre-configured scope.","commands":{"allow":["set_progress_bar"],"deny":[]}},"allow-set-resizable":{"identifier":"allow-set-resizable","description":"Enables the set_resizable command without any pre-configured scope.","commands":{"allow":["set_resizable"],"deny":[]}},"allow-set-shadow":{"identifier":"allow-set-shadow","description":"Enables the set_shadow command without any pre-configured scope.","commands":{"allow":["set_shadow"],"deny":[]}},"allow-set-simple-fullscreen":{"identifier":"allow-set-simple-fullscreen","description":"Enables the set_simple_fullscreen command without any pre-configured scope.","commands":{"allow":["set_simple_fullscreen"],"deny":[]}},"allow-set-size":{"identifier":"allow-set-size","description":"Enables the set_size command without any pre-configured scope.","commands":{"allow":["set_size"],"deny":[]}},"allow-set-size-constraints":{"identifier":"allow-set-size-constraints","description":"Enables the set_size_constraints command without any pre-configured scope.","commands":{"allow":["set_size_constraints"],"deny":[]}},"allow-set-skip-taskbar":{"identifier":"allow-set-skip-taskbar","description":"Enables the set_skip_taskbar command without any pre-configured scope.","commands":{"allow":["set_skip_taskbar"],"deny":[]}},"allow-set-theme":{"identifier":"allow-set-theme","description":"Enables the set_theme command without any pre-configured scope.","commands":{"allow":["set_theme"],"deny":[]}},"allow-set-title":{"identifier":"allow-set-title","description":"Enables the set_title command without any pre-configured scope.","commands":{"allow":["set_title"],"deny":[]}},"allow-set-title-bar-style":{"identifier":"allow-set-title-bar-style","description":"Enables the set_title_bar_style command without any pre-configured scope.","commands":{"allow":["set_title_bar_style"],"deny":[]}},"allow-set-visible-on-all-workspaces":{"identifier":"allow-set-visible-on-all-workspaces","description":"Enables the set_visible_on_all_workspaces command without any pre-configured scope.","commands":{"allow":["set_visible_on_all_workspaces"],"deny":[]}},"allow-show":{"identifier":"allow-show","description":"Enables the show command without any pre-configured scope.","commands":{"allow":["show"],"deny":[]}},"allow-start-dragging":{"identifier":"allow-start-dragging","description":"Enables the start_dragging command without any pre-configured scope.","commands":{"allow":["start_dragging"],"deny":[]}},"allow-start-resize-dragging":{"identifier":"allow-start-resize-dragging","description":"Enables the start_resize_dragging command without any pre-configured scope.","commands":{"allow":["start_resize_dragging"],"deny":[]}},"allow-theme":{"identifier":"allow-theme","description":"Enables the theme command without any pre-configured scope.","commands":{"allow":["theme"],"deny":[]}},"allow-title":{"identifier":"allow-title","description":"Enables the title command without any pre-configured scope.","commands":{"allow":["title"],"deny":[]}},"allow-toggle-maximize":{"identifier":"allow-toggle-maximize","description":"Enables the toggle_maximize command without any pre-configured scope.","commands":{"allow":["toggle_maximize"],"deny":[]}},"allow-unmaximize":{"identifier":"allow-unmaximize","description":"Enables the unmaximize command without any pre-configured scope.","commands":{"allow":["unmaximize"],"deny":[]}},"allow-unminimize":{"identifier":"allow-unminimize","description":"Enables the unminimize command without any pre-configured scope.","commands":{"allow":["unminimize"],"deny":[]}},"deny-activity-name":{"identifier":"deny-activity-name","description":"Denies the activity_name command without any pre-configured scope.","commands":{"allow":[],"deny":["activity_name"]}},"deny-available-monitors":{"identifier":"deny-available-monitors","description":"Denies the available_monitors command without any pre-configured scope.","commands":{"allow":[],"deny":["available_monitors"]}},"deny-center":{"identifier":"deny-center","description":"Denies the center command without any pre-configured scope.","commands":{"allow":[],"deny":["center"]}},"deny-close":{"identifier":"deny-close","description":"Denies the close command without any pre-configured scope.","commands":{"allow":[],"deny":["close"]}},"deny-create":{"identifier":"deny-create","description":"Denies the create command without any pre-configured scope.","commands":{"allow":[],"deny":["create"]}},"deny-current-monitor":{"identifier":"deny-current-monitor","description":"Denies the current_monitor command without any pre-configured scope.","commands":{"allow":[],"deny":["current_monitor"]}},"deny-cursor-position":{"identifier":"deny-cursor-position","description":"Denies the cursor_position command without any pre-configured scope.","commands":{"allow":[],"deny":["cursor_position"]}},"deny-destroy":{"identifier":"deny-destroy","description":"Denies the destroy command without any pre-configured scope.","commands":{"allow":[],"deny":["destroy"]}},"deny-get-all-windows":{"identifier":"deny-get-all-windows","description":"Denies the get_all_windows command without any pre-configured scope.","commands":{"allow":[],"deny":["get_all_windows"]}},"deny-hide":{"identifier":"deny-hide","description":"Denies the hide command without any pre-configured scope.","commands":{"allow":[],"deny":["hide"]}},"deny-inner-position":{"identifier":"deny-inner-position","description":"Denies the inner_position command without any pre-configured scope.","commands":{"allow":[],"deny":["inner_position"]}},"deny-inner-size":{"identifier":"deny-inner-size","description":"Denies the inner_size command without any pre-configured scope.","commands":{"allow":[],"deny":["inner_size"]}},"deny-internal-toggle-maximize":{"identifier":"deny-internal-toggle-maximize","description":"Denies the internal_toggle_maximize command without any pre-configured scope.","commands":{"allow":[],"deny":["internal_toggle_maximize"]}},"deny-is-always-on-top":{"identifier":"deny-is-always-on-top","description":"Denies the is_always_on_top command without any pre-configured scope.","commands":{"allow":[],"deny":["is_always_on_top"]}},"deny-is-closable":{"identifier":"deny-is-closable","description":"Denies the is_closable command without any pre-configured scope.","commands":{"allow":[],"deny":["is_closable"]}},"deny-is-decorated":{"identifier":"deny-is-decorated","description":"Denies the is_decorated command without any pre-configured scope.","commands":{"allow":[],"deny":["is_decorated"]}},"deny-is-enabled":{"identifier":"deny-is-enabled","description":"Denies the is_enabled command without any pre-configured scope.","commands":{"allow":[],"deny":["is_enabled"]}},"deny-is-focused":{"identifier":"deny-is-focused","description":"Denies the is_focused command without any pre-configured scope.","commands":{"allow":[],"deny":["is_focused"]}},"deny-is-fullscreen":{"identifier":"deny-is-fullscreen","description":"Denies the is_fullscreen command without any pre-configured scope.","commands":{"allow":[],"deny":["is_fullscreen"]}},"deny-is-maximizable":{"identifier":"deny-is-maximizable","description":"Denies the is_maximizable command without any pre-configured scope.","commands":{"allow":[],"deny":["is_maximizable"]}},"deny-is-maximized":{"identifier":"deny-is-maximized","description":"Denies the is_maximized command without any pre-configured scope.","commands":{"allow":[],"deny":["is_maximized"]}},"deny-is-minimizable":{"identifier":"deny-is-minimizable","description":"Denies the is_minimizable command without any pre-configured scope.","commands":{"allow":[],"deny":["is_minimizable"]}},"deny-is-minimized":{"identifier":"deny-is-minimized","description":"Denies the is_minimized command without any pre-configured scope.","commands":{"allow":[],"deny":["is_minimized"]}},"deny-is-resizable":{"identifier":"deny-is-resizable","description":"Denies the is_resizable command without any pre-configured scope.","commands":{"allow":[],"deny":["is_resizable"]}},"deny-is-visible":{"identifier":"deny-is-visible","description":"Denies the is_visible command without any pre-configured scope.","commands":{"allow":[],"deny":["is_visible"]}},"deny-maximize":{"identifier":"deny-maximize","description":"Denies the maximize command without any pre-configured scope.","commands":{"allow":[],"deny":["maximize"]}},"deny-minimize":{"identifier":"deny-minimize","description":"Denies the minimize command without any pre-configured scope.","commands":{"allow":[],"deny":["minimize"]}},"deny-monitor-from-point":{"identifier":"deny-monitor-from-point","description":"Denies the monitor_from_point command without any pre-configured scope.","commands":{"allow":[],"deny":["monitor_from_point"]}},"deny-outer-position":{"identifier":"deny-outer-position","description":"Denies the outer_position command without any pre-configured scope.","commands":{"allow":[],"deny":["outer_position"]}},"deny-outer-size":{"identifier":"deny-outer-size","description":"Denies the outer_size command without any pre-configured scope.","commands":{"allow":[],"deny":["outer_size"]}},"deny-primary-monitor":{"identifier":"deny-primary-monitor","description":"Denies the primary_monitor command without any pre-configured scope.","commands":{"allow":[],"deny":["primary_monitor"]}},"deny-request-user-attention":{"identifier":"deny-request-user-attention","description":"Denies the request_user_attention command without any pre-configured scope.","commands":{"allow":[],"deny":["request_user_attention"]}},"deny-scale-factor":{"identifier":"deny-scale-factor","description":"Denies the scale_factor command without any pre-configured scope.","commands":{"allow":[],"deny":["scale_factor"]}},"deny-scene-identifier":{"identifier":"deny-scene-identifier","description":"Denies the scene_identifier command without any pre-configured scope.","commands":{"allow":[],"deny":["scene_identifier"]}},"deny-set-always-on-bottom":{"identifier":"deny-set-always-on-bottom","description":"Denies the set_always_on_bottom command without any pre-configured scope.","commands":{"allow":[],"deny":["set_always_on_bottom"]}},"deny-set-always-on-top":{"identifier":"deny-set-always-on-top","description":"Denies the set_always_on_top command without any pre-configured scope.","commands":{"allow":[],"deny":["set_always_on_top"]}},"deny-set-background-color":{"identifier":"deny-set-background-color","description":"Denies the set_background_color command without any pre-configured scope.","commands":{"allow":[],"deny":["set_background_color"]}},"deny-set-badge-count":{"identifier":"deny-set-badge-count","description":"Denies the set_badge_count command without any pre-configured scope.","commands":{"allow":[],"deny":["set_badge_count"]}},"deny-set-badge-label":{"identifier":"deny-set-badge-label","description":"Denies the set_badge_label command without any pre-configured scope.","commands":{"allow":[],"deny":["set_badge_label"]}},"deny-set-closable":{"identifier":"deny-set-closable","description":"Denies the set_closable command without any pre-configured scope.","commands":{"allow":[],"deny":["set_closable"]}},"deny-set-content-protected":{"identifier":"deny-set-content-protected","description":"Denies the set_content_protected command without any pre-configured scope.","commands":{"allow":[],"deny":["set_content_protected"]}},"deny-set-cursor-grab":{"identifier":"deny-set-cursor-grab","description":"Denies the set_cursor_grab command without any pre-configured scope.","commands":{"allow":[],"deny":["set_cursor_grab"]}},"deny-set-cursor-icon":{"identifier":"deny-set-cursor-icon","description":"Denies the set_cursor_icon command without any pre-configured scope.","commands":{"allow":[],"deny":["set_cursor_icon"]}},"deny-set-cursor-position":{"identifier":"deny-set-cursor-position","description":"Denies the set_cursor_position command without any pre-configured scope.","commands":{"allow":[],"deny":["set_cursor_position"]}},"deny-set-cursor-visible":{"identifier":"deny-set-cursor-visible","description":"Denies the set_cursor_visible command without any pre-configured scope.","commands":{"allow":[],"deny":["set_cursor_visible"]}},"deny-set-decorations":{"identifier":"deny-set-decorations","description":"Denies the set_decorations command without any pre-configured scope.","commands":{"allow":[],"deny":["set_decorations"]}},"deny-set-effects":{"identifier":"deny-set-effects","description":"Denies the set_effects command without any pre-configured scope.","commands":{"allow":[],"deny":["set_effects"]}},"deny-set-enabled":{"identifier":"deny-set-enabled","description":"Denies the set_enabled command without any pre-configured scope.","commands":{"allow":[],"deny":["set_enabled"]}},"deny-set-focus":{"identifier":"deny-set-focus","description":"Denies the set_focus command without any pre-configured scope.","commands":{"allow":[],"deny":["set_focus"]}},"deny-set-focusable":{"identifier":"deny-set-focusable","description":"Denies the set_focusable command without any pre-configured scope.","commands":{"allow":[],"deny":["set_focusable"]}},"deny-set-fullscreen":{"identifier":"deny-set-fullscreen","description":"Denies the set_fullscreen command without any pre-configured scope.","commands":{"allow":[],"deny":["set_fullscreen"]}},"deny-set-icon":{"identifier":"deny-set-icon","description":"Denies the set_icon command without any pre-configured scope.","commands":{"allow":[],"deny":["set_icon"]}},"deny-set-ignore-cursor-events":{"identifier":"deny-set-ignore-cursor-events","description":"Denies the set_ignore_cursor_events command without any pre-configured scope.","commands":{"allow":[],"deny":["set_ignore_cursor_events"]}},"deny-set-max-size":{"identifier":"deny-set-max-size","description":"Denies the set_max_size command without any pre-configured scope.","commands":{"allow":[],"deny":["set_max_size"]}},"deny-set-maximizable":{"identifier":"deny-set-maximizable","description":"Denies the set_maximizable command without any pre-configured scope.","commands":{"allow":[],"deny":["set_maximizable"]}},"deny-set-min-size":{"identifier":"deny-set-min-size","description":"Denies the set_min_size command without any pre-configured scope.","commands":{"allow":[],"deny":["set_min_size"]}},"deny-set-minimizable":{"identifier":"deny-set-minimizable","description":"Denies the set_minimizable command without any pre-configured scope.","commands":{"allow":[],"deny":["set_minimizable"]}},"deny-set-overlay-icon":{"identifier":"deny-set-overlay-icon","description":"Denies the set_overlay_icon command without any pre-configured scope.","commands":{"allow":[],"deny":["set_overlay_icon"]}},"deny-set-position":{"identifier":"deny-set-position","description":"Denies the set_position command without any pre-configured scope.","commands":{"allow":[],"deny":["set_position"]}},"deny-set-progress-bar":{"identifier":"deny-set-progress-bar","description":"Denies the set_progress_bar command without any pre-configured scope.","commands":{"allow":[],"deny":["set_progress_bar"]}},"deny-set-resizable":{"identifier":"deny-set-resizable","description":"Denies the set_resizable command without any pre-configured scope.","commands":{"allow":[],"deny":["set_resizable"]}},"deny-set-shadow":{"identifier":"deny-set-shadow","description":"Denies the set_shadow command without any pre-configured scope.","commands":{"allow":[],"deny":["set_shadow"]}},"deny-set-simple-fullscreen":{"identifier":"deny-set-simple-fullscreen","description":"Denies the set_simple_fullscreen command without any pre-configured scope.","commands":{"allow":[],"deny":["set_simple_fullscreen"]}},"deny-set-size":{"identifier":"deny-set-size","description":"Denies the set_size command without any pre-configured scope.","commands":{"allow":[],"deny":["set_size"]}},"deny-set-size-constraints":{"identifier":"deny-set-size-constraints","description":"Denies the set_size_constraints command without any pre-configured scope.","commands":{"allow":[],"deny":["set_size_constraints"]}},"deny-set-skip-taskbar":{"identifier":"deny-set-skip-taskbar","description":"Denies the set_skip_taskbar command without any pre-configured scope.","commands":{"allow":[],"deny":["set_skip_taskbar"]}},"deny-set-theme":{"identifier":"deny-set-theme","description":"Denies the set_theme command without any pre-configured scope.","commands":{"allow":[],"deny":["set_theme"]}},"deny-set-title":{"identifier":"deny-set-title","description":"Denies the set_title command without any pre-configured scope.","commands":{"allow":[],"deny":["set_title"]}},"deny-set-title-bar-style":{"identifier":"deny-set-title-bar-style","description":"Denies the set_title_bar_style command without any pre-configured scope.","commands":{"allow":[],"deny":["set_title_bar_style"]}},"deny-set-visible-on-all-workspaces":{"identifier":"deny-set-visible-on-all-workspaces","description":"Denies the set_visible_on_all_workspaces command without any pre-configured scope.","commands":{"allow":[],"deny":["set_visible_on_all_workspaces"]}},"deny-show":{"identifier":"deny-show","description":"Denies the show command without any pre-configured scope.","commands":{"allow":[],"deny":["show"]}},"deny-start-dragging":{"identifier":"deny-start-dragging","description":"Denies the start_dragging command without any pre-configured scope.","commands":{"allow":[],"deny":["start_dragging"]}},"deny-start-resize-dragging":{"identifier":"deny-start-resize-dragging","description":"Denies the start_resize_dragging command without any pre-configured scope.","commands":{"allow":[],"deny":["start_resize_dragging"]}},"deny-theme":{"identifier":"deny-theme","description":"Denies the theme command without any pre-configured scope.","commands":{"allow":[],"deny":["theme"]}},"deny-title":{"identifier":"deny-title","description":"Denies the title command without any pre-configured scope.","commands":{"allow":[],"deny":["title"]}},"deny-toggle-maximize":{"identifier":"deny-toggle-maximize","description":"Denies the toggle_maximize command without any pre-configured scope.","commands":{"allow":[],"deny":["toggle_maximize"]}},"deny-unmaximize":{"identifier":"deny-unmaximize","description":"Denies the unmaximize command without any pre-configured scope.","commands":{"allow":[],"deny":["unmaximize"]}},"deny-unminimize":{"identifier":"deny-unminimize","description":"Denies the unminimize command without any pre-configured scope.","commands":{"allow":[],"deny":["unminimize"]}}},"permission_sets":{},"global_scope_schema":null}}
\ No newline at end of file
diff --git a/client/app-shell/gen/schemas/capabilities.json b/client/app-shell/gen/schemas/capabilities.json
new file mode 100644
index 0000000..9e26dfe
--- /dev/null
+++ b/client/app-shell/gen/schemas/capabilities.json
@@ -0,0 +1 @@
+{}
\ No newline at end of file
diff --git a/client/app-shell/gen/schemas/desktop-schema.json b/client/app-shell/gen/schemas/desktop-schema.json
new file mode 100644
index 0000000..3286645
--- /dev/null
+++ b/client/app-shell/gen/schemas/desktop-schema.json
@@ -0,0 +1,2292 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "CapabilityFile",
+  "description": "Capability formats accepted in a capability file.",
+  "anyOf": [
+    {
+      "description": "A single capability.",
+      "allOf": [
+        {
+          "$ref": "#/definitions/Capability"
+        }
+      ]
+    },
+    {
+      "description": "A list of capabilities.",
+      "type": "array",
+      "items": {
+        "$ref": "#/definitions/Capability"
+      }
+    },
+    {
+      "description": "A list of capabilities.",
+      "type": "object",
+      "required": [
+        "capabilities"
+      ],
+      "properties": {
+        "capabilities": {
+          "description": "The list of capabilities.",
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/Capability"
+          }
+        }
+      }
+    }
+  ],
+  "definitions": {
+    "Capability": {
+      "description": "A grouping and boundary mechanism developers can use to isolate access to the IPC layer.\n\nIt controls application windows' and webviews' fine grained access to the Tauri core, application, or plugin commands. If a webview or its window is not matching any capability then it has no access to the IPC layer at all.\n\nThis can be done to create groups of windows, based on their required system access, which can reduce impact of frontend vulnerabilities in less privileged windows. Windows can be added to a capability by exact name (e.g. `main-window`) or glob patterns like `*` or `admin-*`. A Window can have none, one, or multiple associated capabilities.\n\n## Example\n\n```json { \"identifier\": \"main-user-files-write\", \"description\": \"This capability allows the `main` window on macOS and Windows access to `filesystem` write related commands and `dialog` commands to enable programmatic access to files selected by the user.\", \"windows\": [ \"main\" ], \"permissions\": [ \"core:default\", \"dialog:open\", { \"identifier\": \"fs:allow-write-text-file\", \"allow\": [{ \"path\": \"$HOME/test.txt\" }] }, ], \"platforms\": [\"macOS\",\"windows\"] } ```",
+      "type": "object",
+      "required": [
+        "identifier",
+        "permissions"
+      ],
+      "properties": {
+        "identifier": {
+          "description": "Identifier of the capability.\n\n## Example\n\n`main-user-files-write`",
+          "type": "string"
+        },
+        "description": {
+          "description": "Description of what the capability is intended to allow on associated windows.\n\nIt should contain a description of what the grouped permissions should allow.\n\n## Example\n\nThis capability allows the `main` window access to `filesystem` write related commands and `dialog` commands to enable programmatic access to files selected by the user.",
+          "default": "",
+          "type": "string"
+        },
+        "remote": {
+          "description": "Configure remote URLs that can use the capability permissions.\n\nThis setting is optional and defaults to not being set, as our default use case is that the content is served from our local application.\n\n:::caution Make sure you understand the security implications of providing remote sources with local system access. :::\n\n## Example\n\n```json { \"urls\": [\"https://*.mydomain.dev\"] } ```",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/CapabilityRemote"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "local": {
+          "description": "Whether this capability is enabled for local app URLs or not. Defaults to `true`.",
+          "default": true,
+          "type": "boolean"
+        },
+        "windows": {
+          "description": "List of windows that are affected by this capability. Can be a glob pattern.\n\nIf a window label matches any of the patterns in this list, the capability will be enabled on all the webviews of that window, regardless of the value of [`Self::webviews`].\n\nOn multiwebview windows, prefer specifying [`Self::webviews`] and omitting [`Self::windows`] for a fine grained access control.\n\n## Example\n\n`[\"main\"]`",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "webviews": {
+          "description": "List of webviews that are affected by this capability. Can be a glob pattern.\n\nThe capability will be enabled on all the webviews whose label matches any of the patterns in this list, regardless of whether the webview's window label matches a pattern in [`Self::windows`].\n\n## Example\n\n`[\"sub-webview-one\", \"sub-webview-two\"]`",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "permissions": {
+          "description": "List of permissions attached to this capability.\n\nMust include the plugin name as prefix in the form of `${plugin-name}:${permission-name}`. For commands directly implemented in the application itself only `${permission-name}` is required.\n\n## Example\n\n```json [ \"core:default\", \"shell:allow-open\", \"dialog:open\", { \"identifier\": \"fs:allow-write-text-file\", \"allow\": [{ \"path\": \"$HOME/test.txt\" }] } ] ```",
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/PermissionEntry"
+          },
+          "uniqueItems": true
+        },
+        "platforms": {
+          "description": "Limit which target platforms this capability applies to.\n\nBy default all platforms are targeted.\n\n## Example\n\n`[\"macOS\",\"windows\"]`",
+          "type": [
+            "array",
+            "null"
+          ],
+          "items": {
+            "$ref": "#/definitions/Target"
+          }
+        }
+      }
+    },
+    "CapabilityRemote": {
+      "description": "Configuration for remote URLs that are associated with the capability.",
+      "type": "object",
+      "required": [
+        "urls"
+      ],
+      "properties": {
+        "urls": {
+          "description": "Remote domains this capability refers to using the [URLPattern standard](https://urlpattern.spec.whatwg.org/).\n\n## Examples\n\n- \"https://*.mydomain.dev\": allows subdomains of mydomain.dev - \"https://mydomain.dev/api/*\": allows any subpath of mydomain.dev/api",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    "PermissionEntry": {
+      "description": "An entry for a permission value in a [`Capability`] can be either a raw permission [`Identifier`] or an object that references a permission and extends its scope.",
+      "anyOf": [
+        {
+          "description": "Reference a permission or permission set by identifier.",
+          "allOf": [
+            {
+              "$ref": "#/definitions/Identifier"
+            }
+          ]
+        },
+        {
+          "description": "Reference a permission or permission set by identifier and extends its scope.",
+          "type": "object",
+          "allOf": [
+            {
+              "properties": {
+                "identifier": {
+                  "description": "Identifier of the permission or permission set.",
+                  "allOf": [
+                    {
+                      "$ref": "#/definitions/Identifier"
+                    }
+                  ]
+                },
+                "allow": {
+                  "description": "Data that defines what is allowed by the scope.",
+                  "type": [
+                    "array",
+                    "null"
+                  ],
+                  "items": {
+                    "$ref": "#/definitions/Value"
+                  }
+                },
+                "deny": {
+                  "description": "Data that defines what is denied by the scope. This should be prioritized by validation logic.",
+                  "type": [
+                    "array",
+                    "null"
+                  ],
+                  "items": {
+                    "$ref": "#/definitions/Value"
+                  }
+                }
+              }
+            }
+          ],
+          "required": [
+            "identifier"
+          ]
+        }
+      ]
+    },
+    "Identifier": {
+      "description": "Permission identifier",
+      "oneOf": [
+        {
+          "description": "Default core plugins set.\n#### This default permission set includes:\n\n- `core:path:default`\n- `core:event:default`\n- `core:window:default`\n- `core:webview:default`\n- `core:app:default`\n- `core:image:default`\n- `core:resources:default`\n- `core:menu:default`\n- `core:tray:default`",
+          "type": "string",
+          "const": "core:default",
+          "markdownDescription": "Default core plugins set.\n#### This default permission set includes:\n\n- `core:path:default`\n- `core:event:default`\n- `core:window:default`\n- `core:webview:default`\n- `core:app:default`\n- `core:image:default`\n- `core:resources:default`\n- `core:menu:default`\n- `core:tray:default`"
+        },
+        {
+          "description": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-version`\n- `allow-name`\n- `allow-tauri-version`\n- `allow-identifier`\n- `allow-bundle-type`\n- `allow-register-listener`\n- `allow-remove-listener`\n- `allow-supports-multiple-windows`",
+          "type": "string",
+          "const": "core:app:default",
+          "markdownDescription": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-version`\n- `allow-name`\n- `allow-tauri-version`\n- `allow-identifier`\n- `allow-bundle-type`\n- `allow-register-listener`\n- `allow-remove-listener`\n- `allow-supports-multiple-windows`"
+        },
+        {
+          "description": "Enables the app_hide command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-app-hide",
+          "markdownDescription": "Enables the app_hide command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the app_show command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-app-show",
+          "markdownDescription": "Enables the app_show command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the bundle_type command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-bundle-type",
+          "markdownDescription": "Enables the bundle_type command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the default_window_icon command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-default-window-icon",
+          "markdownDescription": "Enables the default_window_icon command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the fetch_data_store_identifiers command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-fetch-data-store-identifiers",
+          "markdownDescription": "Enables the fetch_data_store_identifiers command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the identifier command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-identifier",
+          "markdownDescription": "Enables the identifier command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the name command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-name",
+          "markdownDescription": "Enables the name command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the register_listener command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-register-listener",
+          "markdownDescription": "Enables the register_listener command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the remove_data_store command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-remove-data-store",
+          "markdownDescription": "Enables the remove_data_store command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the remove_listener command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-remove-listener",
+          "markdownDescription": "Enables the remove_listener command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_app_theme command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-set-app-theme",
+          "markdownDescription": "Enables the set_app_theme command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_dock_visibility command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-set-dock-visibility",
+          "markdownDescription": "Enables the set_dock_visibility command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the supports_multiple_windows command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-supports-multiple-windows",
+          "markdownDescription": "Enables the supports_multiple_windows command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the tauri_version command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-tauri-version",
+          "markdownDescription": "Enables the tauri_version command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the version command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-version",
+          "markdownDescription": "Enables the version command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the app_hide command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-app-hide",
+          "markdownDescription": "Denies the app_hide command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the app_show command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-app-show",
+          "markdownDescription": "Denies the app_show command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the bundle_type command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-bundle-type",
+          "markdownDescription": "Denies the bundle_type command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the default_window_icon command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-default-window-icon",
+          "markdownDescription": "Denies the default_window_icon command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the fetch_data_store_identifiers command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-fetch-data-store-identifiers",
+          "markdownDescription": "Denies the fetch_data_store_identifiers command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the identifier command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-identifier",
+          "markdownDescription": "Denies the identifier command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the name command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-name",
+          "markdownDescription": "Denies the name command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the register_listener command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-register-listener",
+          "markdownDescription": "Denies the register_listener command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the remove_data_store command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-remove-data-store",
+          "markdownDescription": "Denies the remove_data_store command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the remove_listener command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-remove-listener",
+          "markdownDescription": "Denies the remove_listener command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_app_theme command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-set-app-theme",
+          "markdownDescription": "Denies the set_app_theme command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_dock_visibility command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-set-dock-visibility",
+          "markdownDescription": "Denies the set_dock_visibility command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the supports_multiple_windows command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-supports-multiple-windows",
+          "markdownDescription": "Denies the supports_multiple_windows command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the tauri_version command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-tauri-version",
+          "markdownDescription": "Denies the tauri_version command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the version command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-version",
+          "markdownDescription": "Denies the version command without any pre-configured scope."
+        },
+        {
+          "description": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-listen`\n- `allow-unlisten`\n- `allow-emit`\n- `allow-emit-to`",
+          "type": "string",
+          "const": "core:event:default",
+          "markdownDescription": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-listen`\n- `allow-unlisten`\n- `allow-emit`\n- `allow-emit-to`"
+        },
+        {
+          "description": "Enables the emit command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:event:allow-emit",
+          "markdownDescription": "Enables the emit command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the emit_to command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:event:allow-emit-to",
+          "markdownDescription": "Enables the emit_to command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the listen command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:event:allow-listen",
+          "markdownDescription": "Enables the listen command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the unlisten command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:event:allow-unlisten",
+          "markdownDescription": "Enables the unlisten command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the emit command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:event:deny-emit",
+          "markdownDescription": "Denies the emit command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the emit_to command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:event:deny-emit-to",
+          "markdownDescription": "Denies the emit_to command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the listen command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:event:deny-listen",
+          "markdownDescription": "Denies the listen command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the unlisten command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:event:deny-unlisten",
+          "markdownDescription": "Denies the unlisten command without any pre-configured scope."
+        },
+        {
+          "description": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-new`\n- `allow-from-bytes`\n- `allow-from-path`\n- `allow-rgba`\n- `allow-size`",
+          "type": "string",
+          "const": "core:image:default",
+          "markdownDescription": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-new`\n- `allow-from-bytes`\n- `allow-from-path`\n- `allow-rgba`\n- `allow-size`"
+        },
+        {
+          "description": "Enables the from_bytes command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:image:allow-from-bytes",
+          "markdownDescription": "Enables the from_bytes command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the from_path command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:image:allow-from-path",
+          "markdownDescription": "Enables the from_path command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the new command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:image:allow-new",
+          "markdownDescription": "Enables the new command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the rgba command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:image:allow-rgba",
+          "markdownDescription": "Enables the rgba command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:image:allow-size",
+          "markdownDescription": "Enables the size command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the from_bytes command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:image:deny-from-bytes",
+          "markdownDescription": "Denies the from_bytes command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the from_path command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:image:deny-from-path",
+          "markdownDescription": "Denies the from_path command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the new command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:image:deny-new",
+          "markdownDescription": "Denies the new command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the rgba command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:image:deny-rgba",
+          "markdownDescription": "Denies the rgba command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:image:deny-size",
+          "markdownDescription": "Denies the size command without any pre-configured scope."
+        },
+        {
+          "description": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-new`\n- `allow-append`\n- `allow-prepend`\n- `allow-insert`\n- `allow-remove`\n- `allow-remove-at`\n- `allow-items`\n- `allow-get`\n- `allow-popup`\n- `allow-create-default`\n- `allow-set-as-app-menu`\n- `allow-set-as-window-menu`\n- `allow-text`\n- `allow-set-text`\n- `allow-is-enabled`\n- `allow-set-enabled`\n- `allow-set-accelerator`\n- `allow-set-as-windows-menu-for-nsapp`\n- `allow-set-as-help-menu-for-nsapp`\n- `allow-is-checked`\n- `allow-set-checked`\n- `allow-set-icon`",
+          "type": "string",
+          "const": "core:menu:default",
+          "markdownDescription": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-new`\n- `allow-append`\n- `allow-prepend`\n- `allow-insert`\n- `allow-remove`\n- `allow-remove-at`\n- `allow-items`\n- `allow-get`\n- `allow-popup`\n- `allow-create-default`\n- `allow-set-as-app-menu`\n- `allow-set-as-window-menu`\n- `allow-text`\n- `allow-set-text`\n- `allow-is-enabled`\n- `allow-set-enabled`\n- `allow-set-accelerator`\n- `allow-set-as-windows-menu-for-nsapp`\n- `allow-set-as-help-menu-for-nsapp`\n- `allow-is-checked`\n- `allow-set-checked`\n- `allow-set-icon`"
+        },
+        {
+          "description": "Enables the append command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-append",
+          "markdownDescription": "Enables the append command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the create_default command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-create-default",
+          "markdownDescription": "Enables the create_default command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the get command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-get",
+          "markdownDescription": "Enables the get command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the insert command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-insert",
+          "markdownDescription": "Enables the insert command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_checked command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-is-checked",
+          "markdownDescription": "Enables the is_checked command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_enabled command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-is-enabled",
+          "markdownDescription": "Enables the is_enabled command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the items command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-items",
+          "markdownDescription": "Enables the items command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the new command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-new",
+          "markdownDescription": "Enables the new command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the popup command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-popup",
+          "markdownDescription": "Enables the popup command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the prepend command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-prepend",
+          "markdownDescription": "Enables the prepend command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the remove command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-remove",
+          "markdownDescription": "Enables the remove command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the remove_at command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-remove-at",
+          "markdownDescription": "Enables the remove_at command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_accelerator command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-set-accelerator",
+          "markdownDescription": "Enables the set_accelerator command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_as_app_menu command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-set-as-app-menu",
+          "markdownDescription": "Enables the set_as_app_menu command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_as_help_menu_for_nsapp command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-set-as-help-menu-for-nsapp",
+          "markdownDescription": "Enables the set_as_help_menu_for_nsapp command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_as_window_menu command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-set-as-window-menu",
+          "markdownDescription": "Enables the set_as_window_menu command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_as_windows_menu_for_nsapp command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-set-as-windows-menu-for-nsapp",
+          "markdownDescription": "Enables the set_as_windows_menu_for_nsapp command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_checked command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-set-checked",
+          "markdownDescription": "Enables the set_checked command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_enabled command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-set-enabled",
+          "markdownDescription": "Enables the set_enabled command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_icon command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-set-icon",
+          "markdownDescription": "Enables the set_icon command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_text command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-set-text",
+          "markdownDescription": "Enables the set_text command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the text command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-text",
+          "markdownDescription": "Enables the text command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the append command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-append",
+          "markdownDescription": "Denies the append command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the create_default command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-create-default",
+          "markdownDescription": "Denies the create_default command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the get command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-get",
+          "markdownDescription": "Denies the get command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the insert command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-insert",
+          "markdownDescription": "Denies the insert command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_checked command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-is-checked",
+          "markdownDescription": "Denies the is_checked command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_enabled command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-is-enabled",
+          "markdownDescription": "Denies the is_enabled command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the items command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-items",
+          "markdownDescription": "Denies the items command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the new command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-new",
+          "markdownDescription": "Denies the new command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the popup command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-popup",
+          "markdownDescription": "Denies the popup command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the prepend command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-prepend",
+          "markdownDescription": "Denies the prepend command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the remove command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-remove",
+          "markdownDescription": "Denies the remove command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the remove_at command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-remove-at",
+          "markdownDescription": "Denies the remove_at command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_accelerator command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-set-accelerator",
+          "markdownDescription": "Denies the set_accelerator command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_as_app_menu command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-set-as-app-menu",
+          "markdownDescription": "Denies the set_as_app_menu command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_as_help_menu_for_nsapp command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-set-as-help-menu-for-nsapp",
+          "markdownDescription": "Denies the set_as_help_menu_for_nsapp command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_as_window_menu command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-set-as-window-menu",
+          "markdownDescription": "Denies the set_as_window_menu command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_as_windows_menu_for_nsapp command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-set-as-windows-menu-for-nsapp",
+          "markdownDescription": "Denies the set_as_windows_menu_for_nsapp command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_checked command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-set-checked",
+          "markdownDescription": "Denies the set_checked command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_enabled command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-set-enabled",
+          "markdownDescription": "Denies the set_enabled command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_icon command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-set-icon",
+          "markdownDescription": "Denies the set_icon command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_text command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-set-text",
+          "markdownDescription": "Denies the set_text command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the text command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-text",
+          "markdownDescription": "Denies the text command without any pre-configured scope."
+        },
+        {
+          "description": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-resolve-directory`\n- `allow-resolve`\n- `allow-normalize`\n- `allow-join`\n- `allow-dirname`\n- `allow-extname`\n- `allow-basename`\n- `allow-is-absolute`",
+          "type": "string",
+          "const": "core:path:default",
+          "markdownDescription": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-resolve-directory`\n- `allow-resolve`\n- `allow-normalize`\n- `allow-join`\n- `allow-dirname`\n- `allow-extname`\n- `allow-basename`\n- `allow-is-absolute`"
+        },
+        {
+          "description": "Enables the basename command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:allow-basename",
+          "markdownDescription": "Enables the basename command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the dirname command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:allow-dirname",
+          "markdownDescription": "Enables the dirname command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the extname command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:allow-extname",
+          "markdownDescription": "Enables the extname command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_absolute command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:allow-is-absolute",
+          "markdownDescription": "Enables the is_absolute command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the join command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:allow-join",
+          "markdownDescription": "Enables the join command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the normalize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:allow-normalize",
+          "markdownDescription": "Enables the normalize command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the resolve command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:allow-resolve",
+          "markdownDescription": "Enables the resolve command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the resolve_directory command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:allow-resolve-directory",
+          "markdownDescription": "Enables the resolve_directory command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the basename command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:deny-basename",
+          "markdownDescription": "Denies the basename command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the dirname command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:deny-dirname",
+          "markdownDescription": "Denies the dirname command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the extname command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:deny-extname",
+          "markdownDescription": "Denies the extname command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_absolute command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:deny-is-absolute",
+          "markdownDescription": "Denies the is_absolute command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the join command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:deny-join",
+          "markdownDescription": "Denies the join command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the normalize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:deny-normalize",
+          "markdownDescription": "Denies the normalize command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the resolve command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:deny-resolve",
+          "markdownDescription": "Denies the resolve command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the resolve_directory command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:deny-resolve-directory",
+          "markdownDescription": "Denies the resolve_directory command without any pre-configured scope."
+        },
+        {
+          "description": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-close`",
+          "type": "string",
+          "const": "core:resources:default",
+          "markdownDescription": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-close`"
+        },
+        {
+          "description": "Enables the close command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:resources:allow-close",
+          "markdownDescription": "Enables the close command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the close command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:resources:deny-close",
+          "markdownDescription": "Denies the close command without any pre-configured scope."
+        },
+        {
+          "description": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-new`\n- `allow-get-by-id`\n- `allow-remove-by-id`\n- `allow-set-icon`\n- `allow-set-menu`\n- `allow-set-tooltip`\n- `allow-set-title`\n- `allow-set-visible`\n- `allow-set-temp-dir-path`\n- `allow-set-icon-as-template`\n- `allow-set-icon-with-as-template`\n- `allow-set-show-menu-on-left-click`",
+          "type": "string",
+          "const": "core:tray:default",
+          "markdownDescription": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-new`\n- `allow-get-by-id`\n- `allow-remove-by-id`\n- `allow-set-icon`\n- `allow-set-menu`\n- `allow-set-tooltip`\n- `allow-set-title`\n- `allow-set-visible`\n- `allow-set-temp-dir-path`\n- `allow-set-icon-as-template`\n- `allow-set-icon-with-as-template`\n- `allow-set-show-menu-on-left-click`"
+        },
+        {
+          "description": "Enables the get_by_id command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:allow-get-by-id",
+          "markdownDescription": "Enables the get_by_id command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the new command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:allow-new",
+          "markdownDescription": "Enables the new command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the remove_by_id command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:allow-remove-by-id",
+          "markdownDescription": "Enables the remove_by_id command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_icon command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:allow-set-icon",
+          "markdownDescription": "Enables the set_icon command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_icon_as_template command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:allow-set-icon-as-template",
+          "markdownDescription": "Enables the set_icon_as_template command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_icon_with_as_template command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:allow-set-icon-with-as-template",
+          "markdownDescription": "Enables the set_icon_with_as_template command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_menu command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:allow-set-menu",
+          "markdownDescription": "Enables the set_menu command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_show_menu_on_left_click command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:allow-set-show-menu-on-left-click",
+          "markdownDescription": "Enables the set_show_menu_on_left_click command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_temp_dir_path command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:allow-set-temp-dir-path",
+          "markdownDescription": "Enables the set_temp_dir_path command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_title command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:allow-set-title",
+          "markdownDescription": "Enables the set_title command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_tooltip command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:allow-set-tooltip",
+          "markdownDescription": "Enables the set_tooltip command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_visible command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:allow-set-visible",
+          "markdownDescription": "Enables the set_visible command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the get_by_id command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:deny-get-by-id",
+          "markdownDescription": "Denies the get_by_id command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the new command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:deny-new",
+          "markdownDescription": "Denies the new command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the remove_by_id command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:deny-remove-by-id",
+          "markdownDescription": "Denies the remove_by_id command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_icon command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:deny-set-icon",
+          "markdownDescription": "Denies the set_icon command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_icon_as_template command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:deny-set-icon-as-template",
+          "markdownDescription": "Denies the set_icon_as_template command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_icon_with_as_template command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:deny-set-icon-with-as-template",
+          "markdownDescription": "Denies the set_icon_with_as_template command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_menu command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:deny-set-menu",
+          "markdownDescription": "Denies the set_menu command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_show_menu_on_left_click command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:deny-set-show-menu-on-left-click",
+          "markdownDescription": "Denies the set_show_menu_on_left_click command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_temp_dir_path command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:deny-set-temp-dir-path",
+          "markdownDescription": "Denies the set_temp_dir_path command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_title command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:deny-set-title",
+          "markdownDescription": "Denies the set_title command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_tooltip command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:deny-set-tooltip",
+          "markdownDescription": "Denies the set_tooltip command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_visible command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:deny-set-visible",
+          "markdownDescription": "Denies the set_visible command without any pre-configured scope."
+        },
+        {
+          "description": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-get-all-webviews`\n- `allow-webview-position`\n- `allow-webview-size`\n- `allow-internal-toggle-devtools`",
+          "type": "string",
+          "const": "core:webview:default",
+          "markdownDescription": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-get-all-webviews`\n- `allow-webview-position`\n- `allow-webview-size`\n- `allow-internal-toggle-devtools`"
+        },
+        {
+          "description": "Enables the clear_all_browsing_data command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-clear-all-browsing-data",
+          "markdownDescription": "Enables the clear_all_browsing_data command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the create_webview command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-create-webview",
+          "markdownDescription": "Enables the create_webview command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the create_webview_window command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-create-webview-window",
+          "markdownDescription": "Enables the create_webview_window command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the get_all_webviews command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-get-all-webviews",
+          "markdownDescription": "Enables the get_all_webviews command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the internal_toggle_devtools command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-internal-toggle-devtools",
+          "markdownDescription": "Enables the internal_toggle_devtools command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the print command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-print",
+          "markdownDescription": "Enables the print command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the reparent command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-reparent",
+          "markdownDescription": "Enables the reparent command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_webview_auto_resize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-set-webview-auto-resize",
+          "markdownDescription": "Enables the set_webview_auto_resize command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_webview_background_color command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-set-webview-background-color",
+          "markdownDescription": "Enables the set_webview_background_color command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_webview_focus command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-set-webview-focus",
+          "markdownDescription": "Enables the set_webview_focus command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_webview_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-set-webview-position",
+          "markdownDescription": "Enables the set_webview_position command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_webview_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-set-webview-size",
+          "markdownDescription": "Enables the set_webview_size command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_webview_zoom command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-set-webview-zoom",
+          "markdownDescription": "Enables the set_webview_zoom command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the webview_close command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-webview-close",
+          "markdownDescription": "Enables the webview_close command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the webview_hide command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-webview-hide",
+          "markdownDescription": "Enables the webview_hide command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the webview_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-webview-position",
+          "markdownDescription": "Enables the webview_position command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the webview_show command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-webview-show",
+          "markdownDescription": "Enables the webview_show command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the webview_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-webview-size",
+          "markdownDescription": "Enables the webview_size command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the clear_all_browsing_data command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-clear-all-browsing-data",
+          "markdownDescription": "Denies the clear_all_browsing_data command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the create_webview command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-create-webview",
+          "markdownDescription": "Denies the create_webview command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the create_webview_window command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-create-webview-window",
+          "markdownDescription": "Denies the create_webview_window command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the get_all_webviews command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-get-all-webviews",
+          "markdownDescription": "Denies the get_all_webviews command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the internal_toggle_devtools command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-internal-toggle-devtools",
+          "markdownDescription": "Denies the internal_toggle_devtools command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the print command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-print",
+          "markdownDescription": "Denies the print command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the reparent command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-reparent",
+          "markdownDescription": "Denies the reparent command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_webview_auto_resize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-set-webview-auto-resize",
+          "markdownDescription": "Denies the set_webview_auto_resize command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_webview_background_color command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-set-webview-background-color",
+          "markdownDescription": "Denies the set_webview_background_color command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_webview_focus command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-set-webview-focus",
+          "markdownDescription": "Denies the set_webview_focus command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_webview_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-set-webview-position",
+          "markdownDescription": "Denies the set_webview_position command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_webview_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-set-webview-size",
+          "markdownDescription": "Denies the set_webview_size command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_webview_zoom command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-set-webview-zoom",
+          "markdownDescription": "Denies the set_webview_zoom command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the webview_close command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-webview-close",
+          "markdownDescription": "Denies the webview_close command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the webview_hide command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-webview-hide",
+          "markdownDescription": "Denies the webview_hide command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the webview_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-webview-position",
+          "markdownDescription": "Denies the webview_position command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the webview_show command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-webview-show",
+          "markdownDescription": "Denies the webview_show command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the webview_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-webview-size",
+          "markdownDescription": "Denies the webview_size command without any pre-configured scope."
+        },
+        {
+          "description": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-get-all-windows`\n- `allow-scale-factor`\n- `allow-inner-position`\n- `allow-outer-position`\n- `allow-inner-size`\n- `allow-outer-size`\n- `allow-is-fullscreen`\n- `allow-is-minimized`\n- `allow-is-maximized`\n- `allow-is-focused`\n- `allow-is-decorated`\n- `allow-is-resizable`\n- `allow-is-maximizable`\n- `allow-is-minimizable`\n- `allow-is-closable`\n- `allow-is-visible`\n- `allow-is-enabled`\n- `allow-title`\n- `allow-current-monitor`\n- `allow-primary-monitor`\n- `allow-monitor-from-point`\n- `allow-available-monitors`\n- `allow-cursor-position`\n- `allow-theme`\n- `allow-is-always-on-top`\n- `allow-activity-name`\n- `allow-scene-identifier`\n- `allow-internal-toggle-maximize`",
+          "type": "string",
+          "const": "core:window:default",
+          "markdownDescription": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-get-all-windows`\n- `allow-scale-factor`\n- `allow-inner-position`\n- `allow-outer-position`\n- `allow-inner-size`\n- `allow-outer-size`\n- `allow-is-fullscreen`\n- `allow-is-minimized`\n- `allow-is-maximized`\n- `allow-is-focused`\n- `allow-is-decorated`\n- `allow-is-resizable`\n- `allow-is-maximizable`\n- `allow-is-minimizable`\n- `allow-is-closable`\n- `allow-is-visible`\n- `allow-is-enabled`\n- `allow-title`\n- `allow-current-monitor`\n- `allow-primary-monitor`\n- `allow-monitor-from-point`\n- `allow-available-monitors`\n- `allow-cursor-position`\n- `allow-theme`\n- `allow-is-always-on-top`\n- `allow-activity-name`\n- `allow-scene-identifier`\n- `allow-internal-toggle-maximize`"
+        },
+        {
+          "description": "Enables the activity_name command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-activity-name",
+          "markdownDescription": "Enables the activity_name command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the available_monitors command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-available-monitors",
+          "markdownDescription": "Enables the available_monitors command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the center command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-center",
+          "markdownDescription": "Enables the center command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the close command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-close",
+          "markdownDescription": "Enables the close command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the create command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-create",
+          "markdownDescription": "Enables the create command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the current_monitor command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-current-monitor",
+          "markdownDescription": "Enables the current_monitor command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the cursor_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-cursor-position",
+          "markdownDescription": "Enables the cursor_position command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the destroy command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-destroy",
+          "markdownDescription": "Enables the destroy command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the get_all_windows command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-get-all-windows",
+          "markdownDescription": "Enables the get_all_windows command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the hide command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-hide",
+          "markdownDescription": "Enables the hide command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the inner_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-inner-position",
+          "markdownDescription": "Enables the inner_position command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the inner_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-inner-size",
+          "markdownDescription": "Enables the inner_size command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the internal_toggle_maximize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-internal-toggle-maximize",
+          "markdownDescription": "Enables the internal_toggle_maximize command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_always_on_top command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-is-always-on-top",
+          "markdownDescription": "Enables the is_always_on_top command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_closable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-is-closable",
+          "markdownDescription": "Enables the is_closable command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_decorated command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-is-decorated",
+          "markdownDescription": "Enables the is_decorated command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_enabled command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-is-enabled",
+          "markdownDescription": "Enables the is_enabled command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_focused command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-is-focused",
+          "markdownDescription": "Enables the is_focused command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_fullscreen command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-is-fullscreen",
+          "markdownDescription": "Enables the is_fullscreen command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_maximizable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-is-maximizable",
+          "markdownDescription": "Enables the is_maximizable command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_maximized command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-is-maximized",
+          "markdownDescription": "Enables the is_maximized command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_minimizable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-is-minimizable",
+          "markdownDescription": "Enables the is_minimizable command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_minimized command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-is-minimized",
+          "markdownDescription": "Enables the is_minimized command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_resizable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-is-resizable",
+          "markdownDescription": "Enables the is_resizable command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_visible command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-is-visible",
+          "markdownDescription": "Enables the is_visible command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the maximize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-maximize",
+          "markdownDescription": "Enables the maximize command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the minimize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-minimize",
+          "markdownDescription": "Enables the minimize command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the monitor_from_point command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-monitor-from-point",
+          "markdownDescription": "Enables the monitor_from_point command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the outer_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-outer-position",
+          "markdownDescription": "Enables the outer_position command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the outer_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-outer-size",
+          "markdownDescription": "Enables the outer_size command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the primary_monitor command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-primary-monitor",
+          "markdownDescription": "Enables the primary_monitor command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the request_user_attention command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-request-user-attention",
+          "markdownDescription": "Enables the request_user_attention command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the scale_factor command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-scale-factor",
+          "markdownDescription": "Enables the scale_factor command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the scene_identifier command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-scene-identifier",
+          "markdownDescription": "Enables the scene_identifier command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_always_on_bottom command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-always-on-bottom",
+          "markdownDescription": "Enables the set_always_on_bottom command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_always_on_top command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-always-on-top",
+          "markdownDescription": "Enables the set_always_on_top command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_background_color command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-background-color",
+          "markdownDescription": "Enables the set_background_color command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_badge_count command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-badge-count",
+          "markdownDescription": "Enables the set_badge_count command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_badge_label command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-badge-label",
+          "markdownDescription": "Enables the set_badge_label command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_closable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-closable",
+          "markdownDescription": "Enables the set_closable command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_content_protected command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-content-protected",
+          "markdownDescription": "Enables the set_content_protected command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_cursor_grab command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-cursor-grab",
+          "markdownDescription": "Enables the set_cursor_grab command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_cursor_icon command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-cursor-icon",
+          "markdownDescription": "Enables the set_cursor_icon command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_cursor_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-cursor-position",
+          "markdownDescription": "Enables the set_cursor_position command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_cursor_visible command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-cursor-visible",
+          "markdownDescription": "Enables the set_cursor_visible command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_decorations command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-decorations",
+          "markdownDescription": "Enables the set_decorations command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_effects command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-effects",
+          "markdownDescription": "Enables the set_effects command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_enabled command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-enabled",
+          "markdownDescription": "Enables the set_enabled command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_focus command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-focus",
+          "markdownDescription": "Enables the set_focus command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_focusable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-focusable",
+          "markdownDescription": "Enables the set_focusable command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_fullscreen command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-fullscreen",
+          "markdownDescription": "Enables the set_fullscreen command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_icon command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-icon",
+          "markdownDescription": "Enables the set_icon command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_ignore_cursor_events command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-ignore-cursor-events",
+          "markdownDescription": "Enables the set_ignore_cursor_events command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_max_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-max-size",
+          "markdownDescription": "Enables the set_max_size command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_maximizable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-maximizable",
+          "markdownDescription": "Enables the set_maximizable command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_min_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-min-size",
+          "markdownDescription": "Enables the set_min_size command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_minimizable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-minimizable",
+          "markdownDescription": "Enables the set_minimizable command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_overlay_icon command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-overlay-icon",
+          "markdownDescription": "Enables the set_overlay_icon command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-position",
+          "markdownDescription": "Enables the set_position command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_progress_bar command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-progress-bar",
+          "markdownDescription": "Enables the set_progress_bar command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_resizable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-resizable",
+          "markdownDescription": "Enables the set_resizable command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_shadow command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-shadow",
+          "markdownDescription": "Enables the set_shadow command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_simple_fullscreen command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-simple-fullscreen",
+          "markdownDescription": "Enables the set_simple_fullscreen command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-size",
+          "markdownDescription": "Enables the set_size command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_size_constraints command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-size-constraints",
+          "markdownDescription": "Enables the set_size_constraints command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_skip_taskbar command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-skip-taskbar",
+          "markdownDescription": "Enables the set_skip_taskbar command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_theme command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-theme",
+          "markdownDescription": "Enables the set_theme command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_title command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-title",
+          "markdownDescription": "Enables the set_title command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_title_bar_style command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-title-bar-style",
+          "markdownDescription": "Enables the set_title_bar_style command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_visible_on_all_workspaces command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-visible-on-all-workspaces",
+          "markdownDescription": "Enables the set_visible_on_all_workspaces command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the show command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-show",
+          "markdownDescription": "Enables the show command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the start_dragging command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-start-dragging",
+          "markdownDescription": "Enables the start_dragging command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the start_resize_dragging command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-start-resize-dragging",
+          "markdownDescription": "Enables the start_resize_dragging command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the theme command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-theme",
+          "markdownDescription": "Enables the theme command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the title command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-title",
+          "markdownDescription": "Enables the title command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the toggle_maximize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-toggle-maximize",
+          "markdownDescription": "Enables the toggle_maximize command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the unmaximize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-unmaximize",
+          "markdownDescription": "Enables the unmaximize command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the unminimize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-unminimize",
+          "markdownDescription": "Enables the unminimize command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the activity_name command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-activity-name",
+          "markdownDescription": "Denies the activity_name command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the available_monitors command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-available-monitors",
+          "markdownDescription": "Denies the available_monitors command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the center command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-center",
+          "markdownDescription": "Denies the center command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the close command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-close",
+          "markdownDescription": "Denies the close command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the create command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-create",
+          "markdownDescription": "Denies the create command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the current_monitor command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-current-monitor",
+          "markdownDescription": "Denies the current_monitor command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the cursor_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-cursor-position",
+          "markdownDescription": "Denies the cursor_position command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the destroy command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-destroy",
+          "markdownDescription": "Denies the destroy command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the get_all_windows command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-get-all-windows",
+          "markdownDescription": "Denies the get_all_windows command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the hide command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-hide",
+          "markdownDescription": "Denies the hide command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the inner_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-inner-position",
+          "markdownDescription": "Denies the inner_position command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the inner_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-inner-size",
+          "markdownDescription": "Denies the inner_size command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the internal_toggle_maximize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-internal-toggle-maximize",
+          "markdownDescription": "Denies the internal_toggle_maximize command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_always_on_top command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-is-always-on-top",
+          "markdownDescription": "Denies the is_always_on_top command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_closable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-is-closable",
+          "markdownDescription": "Denies the is_closable command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_decorated command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-is-decorated",
+          "markdownDescription": "Denies the is_decorated command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_enabled command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-is-enabled",
+          "markdownDescription": "Denies the is_enabled command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_focused command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-is-focused",
+          "markdownDescription": "Denies the is_focused command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_fullscreen command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-is-fullscreen",
+          "markdownDescription": "Denies the is_fullscreen command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_maximizable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-is-maximizable",
+          "markdownDescription": "Denies the is_maximizable command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_maximized command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-is-maximized",
+          "markdownDescription": "Denies the is_maximized command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_minimizable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-is-minimizable",
+          "markdownDescription": "Denies the is_minimizable command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_minimized command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-is-minimized",
+          "markdownDescription": "Denies the is_minimized command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_resizable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-is-resizable",
+          "markdownDescription": "Denies the is_resizable command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_visible command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-is-visible",
+          "markdownDescription": "Denies the is_visible command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the maximize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-maximize",
+          "markdownDescription": "Denies the maximize command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the minimize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-minimize",
+          "markdownDescription": "Denies the minimize command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the monitor_from_point command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-monitor-from-point",
+          "markdownDescription": "Denies the monitor_from_point command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the outer_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-outer-position",
+          "markdownDescription": "Denies the outer_position command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the outer_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-outer-size",
+          "markdownDescription": "Denies the outer_size command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the primary_monitor command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-primary-monitor",
+          "markdownDescription": "Denies the primary_monitor command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the request_user_attention command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-request-user-attention",
+          "markdownDescription": "Denies the request_user_attention command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the scale_factor command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-scale-factor",
+          "markdownDescription": "Denies the scale_factor command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the scene_identifier command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-scene-identifier",
+          "markdownDescription": "Denies the scene_identifier command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_always_on_bottom command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-always-on-bottom",
+          "markdownDescription": "Denies the set_always_on_bottom command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_always_on_top command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-always-on-top",
+          "markdownDescription": "Denies the set_always_on_top command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_background_color command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-background-color",
+          "markdownDescription": "Denies the set_background_color command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_badge_count command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-badge-count",
+          "markdownDescription": "Denies the set_badge_count command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_badge_label command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-badge-label",
+          "markdownDescription": "Denies the set_badge_label command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_closable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-closable",
+          "markdownDescription": "Denies the set_closable command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_content_protected command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-content-protected",
+          "markdownDescription": "Denies the set_content_protected command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_cursor_grab command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-cursor-grab",
+          "markdownDescription": "Denies the set_cursor_grab command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_cursor_icon command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-cursor-icon",
+          "markdownDescription": "Denies the set_cursor_icon command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_cursor_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-cursor-position",
+          "markdownDescription": "Denies the set_cursor_position command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_cursor_visible command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-cursor-visible",
+          "markdownDescription": "Denies the set_cursor_visible command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_decorations command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-decorations",
+          "markdownDescription": "Denies the set_decorations command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_effects command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-effects",
+          "markdownDescription": "Denies the set_effects command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_enabled command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-enabled",
+          "markdownDescription": "Denies the set_enabled command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_focus command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-focus",
+          "markdownDescription": "Denies the set_focus command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_focusable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-focusable",
+          "markdownDescription": "Denies the set_focusable command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_fullscreen command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-fullscreen",
+          "markdownDescription": "Denies the set_fullscreen command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_icon command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-icon",
+          "markdownDescription": "Denies the set_icon command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_ignore_cursor_events command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-ignore-cursor-events",
+          "markdownDescription": "Denies the set_ignore_cursor_events command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_max_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-max-size",
+          "markdownDescription": "Denies the set_max_size command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_maximizable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-maximizable",
+          "markdownDescription": "Denies the set_maximizable command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_min_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-min-size",
+          "markdownDescription": "Denies the set_min_size command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_minimizable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-minimizable",
+          "markdownDescription": "Denies the set_minimizable command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_overlay_icon command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-overlay-icon",
+          "markdownDescription": "Denies the set_overlay_icon command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-position",
+          "markdownDescription": "Denies the set_position command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_progress_bar command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-progress-bar",
+          "markdownDescription": "Denies the set_progress_bar command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_resizable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-resizable",
+          "markdownDescription": "Denies the set_resizable command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_shadow command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-shadow",
+          "markdownDescription": "Denies the set_shadow command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_simple_fullscreen command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-simple-fullscreen",
+          "markdownDescription": "Denies the set_simple_fullscreen command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-size",
+          "markdownDescription": "Denies the set_size command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_size_constraints command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-size-constraints",
+          "markdownDescription": "Denies the set_size_constraints command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_skip_taskbar command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-skip-taskbar",
+          "markdownDescription": "Denies the set_skip_taskbar command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_theme command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-theme",
+          "markdownDescription": "Denies the set_theme command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_title command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-title",
+          "markdownDescription": "Denies the set_title command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_title_bar_style command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-title-bar-style",
+          "markdownDescription": "Denies the set_title_bar_style command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_visible_on_all_workspaces command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-visible-on-all-workspaces",
+          "markdownDescription": "Denies the set_visible_on_all_workspaces command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the show command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-show",
+          "markdownDescription": "Denies the show command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the start_dragging command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-start-dragging",
+          "markdownDescription": "Denies the start_dragging command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the start_resize_dragging command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-start-resize-dragging",
+          "markdownDescription": "Denies the start_resize_dragging command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the theme command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-theme",
+          "markdownDescription": "Denies the theme command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the title command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-title",
+          "markdownDescription": "Denies the title command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the toggle_maximize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-toggle-maximize",
+          "markdownDescription": "Denies the toggle_maximize command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the unmaximize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-unmaximize",
+          "markdownDescription": "Denies the unmaximize command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the unminimize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-unminimize",
+          "markdownDescription": "Denies the unminimize command without any pre-configured scope."
+        }
+      ]
+    },
+    "Value": {
+      "description": "All supported ACL values.",
+      "anyOf": [
+        {
+          "description": "Represents a null JSON value.",
+          "type": "null"
+        },
+        {
+          "description": "Represents a [`bool`].",
+          "type": "boolean"
+        },
+        {
+          "description": "Represents a valid ACL [`Number`].",
+          "allOf": [
+            {
+              "$ref": "#/definitions/Number"
+            }
+          ]
+        },
+        {
+          "description": "Represents a [`String`].",
+          "type": "string"
+        },
+        {
+          "description": "Represents a list of other [`Value`]s.",
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/Value"
+          }
+        },
+        {
+          "description": "Represents a map of [`String`] keys to [`Value`]s.",
+          "type": "object",
+          "additionalProperties": {
+            "$ref": "#/definitions/Value"
+          }
+        }
+      ]
+    },
+    "Number": {
+      "description": "A valid ACL number.",
+      "anyOf": [
+        {
+          "description": "Represents an [`i64`].",
+          "type": "integer",
+          "format": "int64"
+        },
+        {
+          "description": "Represents a [`f64`].",
+          "type": "number",
+          "format": "double"
+        }
+      ]
+    },
+    "Target": {
+      "description": "Platform target.",
+      "oneOf": [
+        {
+          "description": "MacOS.",
+          "type": "string",
+          "enum": [
+            "macOS"
+          ]
+        },
+        {
+          "description": "Windows.",
+          "type": "string",
+          "enum": [
+            "windows"
+          ]
+        },
+        {
+          "description": "Linux.",
+          "type": "string",
+          "enum": [
+            "linux"
+          ]
+        },
+        {
+          "description": "Android.",
+          "type": "string",
+          "enum": [
+            "android"
+          ]
+        },
+        {
+          "description": "iOS.",
+          "type": "string",
+          "enum": [
+            "iOS"
+          ]
+        }
+      ]
+    }
+  }
+}
\ No newline at end of file
diff --git a/client/app-shell/gen/schemas/windows-schema.json b/client/app-shell/gen/schemas/windows-schema.json
new file mode 100644
index 0000000..3286645
--- /dev/null
+++ b/client/app-shell/gen/schemas/windows-schema.json
@@ -0,0 +1,2292 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "CapabilityFile",
+  "description": "Capability formats accepted in a capability file.",
+  "anyOf": [
+    {
+      "description": "A single capability.",
+      "allOf": [
+        {
+          "$ref": "#/definitions/Capability"
+        }
+      ]
+    },
+    {
+      "description": "A list of capabilities.",
+      "type": "array",
+      "items": {
+        "$ref": "#/definitions/Capability"
+      }
+    },
+    {
+      "description": "A list of capabilities.",
+      "type": "object",
+      "required": [
+        "capabilities"
+      ],
+      "properties": {
+        "capabilities": {
+          "description": "The list of capabilities.",
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/Capability"
+          }
+        }
+      }
+    }
+  ],
+  "definitions": {
+    "Capability": {
+      "description": "A grouping and boundary mechanism developers can use to isolate access to the IPC layer.\n\nIt controls application windows' and webviews' fine grained access to the Tauri core, application, or plugin commands. If a webview or its window is not matching any capability then it has no access to the IPC layer at all.\n\nThis can be done to create groups of windows, based on their required system access, which can reduce impact of frontend vulnerabilities in less privileged windows. Windows can be added to a capability by exact name (e.g. `main-window`) or glob patterns like `*` or `admin-*`. A Window can have none, one, or multiple associated capabilities.\n\n## Example\n\n```json { \"identifier\": \"main-user-files-write\", \"description\": \"This capability allows the `main` window on macOS and Windows access to `filesystem` write related commands and `dialog` commands to enable programmatic access to files selected by the user.\", \"windows\": [ \"main\" ], \"permissions\": [ \"core:default\", \"dialog:open\", { \"identifier\": \"fs:allow-write-text-file\", \"allow\": [{ \"path\": \"$HOME/test.txt\" }] }, ], \"platforms\": [\"macOS\",\"windows\"] } ```",
+      "type": "object",
+      "required": [
+        "identifier",
+        "permissions"
+      ],
+      "properties": {
+        "identifier": {
+          "description": "Identifier of the capability.\n\n## Example\n\n`main-user-files-write`",
+          "type": "string"
+        },
+        "description": {
+          "description": "Description of what the capability is intended to allow on associated windows.\n\nIt should contain a description of what the grouped permissions should allow.\n\n## Example\n\nThis capability allows the `main` window access to `filesystem` write related commands and `dialog` commands to enable programmatic access to files selected by the user.",
+          "default": "",
+          "type": "string"
+        },
+        "remote": {
+          "description": "Configure remote URLs that can use the capability permissions.\n\nThis setting is optional and defaults to not being set, as our default use case is that the content is served from our local application.\n\n:::caution Make sure you understand the security implications of providing remote sources with local system access. :::\n\n## Example\n\n```json { \"urls\": [\"https://*.mydomain.dev\"] } ```",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/CapabilityRemote"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "local": {
+          "description": "Whether this capability is enabled for local app URLs or not. Defaults to `true`.",
+          "default": true,
+          "type": "boolean"
+        },
+        "windows": {
+          "description": "List of windows that are affected by this capability. Can be a glob pattern.\n\nIf a window label matches any of the patterns in this list, the capability will be enabled on all the webviews of that window, regardless of the value of [`Self::webviews`].\n\nOn multiwebview windows, prefer specifying [`Self::webviews`] and omitting [`Self::windows`] for a fine grained access control.\n\n## Example\n\n`[\"main\"]`",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "webviews": {
+          "description": "List of webviews that are affected by this capability. Can be a glob pattern.\n\nThe capability will be enabled on all the webviews whose label matches any of the patterns in this list, regardless of whether the webview's window label matches a pattern in [`Self::windows`].\n\n## Example\n\n`[\"sub-webview-one\", \"sub-webview-two\"]`",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "permissions": {
+          "description": "List of permissions attached to this capability.\n\nMust include the plugin name as prefix in the form of `${plugin-name}:${permission-name}`. For commands directly implemented in the application itself only `${permission-name}` is required.\n\n## Example\n\n```json [ \"core:default\", \"shell:allow-open\", \"dialog:open\", { \"identifier\": \"fs:allow-write-text-file\", \"allow\": [{ \"path\": \"$HOME/test.txt\" }] } ] ```",
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/PermissionEntry"
+          },
+          "uniqueItems": true
+        },
+        "platforms": {
+          "description": "Limit which target platforms this capability applies to.\n\nBy default all platforms are targeted.\n\n## Example\n\n`[\"macOS\",\"windows\"]`",
+          "type": [
+            "array",
+            "null"
+          ],
+          "items": {
+            "$ref": "#/definitions/Target"
+          }
+        }
+      }
+    },
+    "CapabilityRemote": {
+      "description": "Configuration for remote URLs that are associated with the capability.",
+      "type": "object",
+      "required": [
+        "urls"
+      ],
+      "properties": {
+        "urls": {
+          "description": "Remote domains this capability refers to using the [URLPattern standard](https://urlpattern.spec.whatwg.org/).\n\n## Examples\n\n- \"https://*.mydomain.dev\": allows subdomains of mydomain.dev - \"https://mydomain.dev/api/*\": allows any subpath of mydomain.dev/api",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    "PermissionEntry": {
+      "description": "An entry for a permission value in a [`Capability`] can be either a raw permission [`Identifier`] or an object that references a permission and extends its scope.",
+      "anyOf": [
+        {
+          "description": "Reference a permission or permission set by identifier.",
+          "allOf": [
+            {
+              "$ref": "#/definitions/Identifier"
+            }
+          ]
+        },
+        {
+          "description": "Reference a permission or permission set by identifier and extends its scope.",
+          "type": "object",
+          "allOf": [
+            {
+              "properties": {
+                "identifier": {
+                  "description": "Identifier of the permission or permission set.",
+                  "allOf": [
+                    {
+                      "$ref": "#/definitions/Identifier"
+                    }
+                  ]
+                },
+                "allow": {
+                  "description": "Data that defines what is allowed by the scope.",
+                  "type": [
+                    "array",
+                    "null"
+                  ],
+                  "items": {
+                    "$ref": "#/definitions/Value"
+                  }
+                },
+                "deny": {
+                  "description": "Data that defines what is denied by the scope. This should be prioritized by validation logic.",
+                  "type": [
+                    "array",
+                    "null"
+                  ],
+                  "items": {
+                    "$ref": "#/definitions/Value"
+                  }
+                }
+              }
+            }
+          ],
+          "required": [
+            "identifier"
+          ]
+        }
+      ]
+    },
+    "Identifier": {
+      "description": "Permission identifier",
+      "oneOf": [
+        {
+          "description": "Default core plugins set.\n#### This default permission set includes:\n\n- `core:path:default`\n- `core:event:default`\n- `core:window:default`\n- `core:webview:default`\n- `core:app:default`\n- `core:image:default`\n- `core:resources:default`\n- `core:menu:default`\n- `core:tray:default`",
+          "type": "string",
+          "const": "core:default",
+          "markdownDescription": "Default core plugins set.\n#### This default permission set includes:\n\n- `core:path:default`\n- `core:event:default`\n- `core:window:default`\n- `core:webview:default`\n- `core:app:default`\n- `core:image:default`\n- `core:resources:default`\n- `core:menu:default`\n- `core:tray:default`"
+        },
+        {
+          "description": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-version`\n- `allow-name`\n- `allow-tauri-version`\n- `allow-identifier`\n- `allow-bundle-type`\n- `allow-register-listener`\n- `allow-remove-listener`\n- `allow-supports-multiple-windows`",
+          "type": "string",
+          "const": "core:app:default",
+          "markdownDescription": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-version`\n- `allow-name`\n- `allow-tauri-version`\n- `allow-identifier`\n- `allow-bundle-type`\n- `allow-register-listener`\n- `allow-remove-listener`\n- `allow-supports-multiple-windows`"
+        },
+        {
+          "description": "Enables the app_hide command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-app-hide",
+          "markdownDescription": "Enables the app_hide command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the app_show command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-app-show",
+          "markdownDescription": "Enables the app_show command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the bundle_type command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-bundle-type",
+          "markdownDescription": "Enables the bundle_type command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the default_window_icon command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-default-window-icon",
+          "markdownDescription": "Enables the default_window_icon command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the fetch_data_store_identifiers command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-fetch-data-store-identifiers",
+          "markdownDescription": "Enables the fetch_data_store_identifiers command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the identifier command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-identifier",
+          "markdownDescription": "Enables the identifier command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the name command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-name",
+          "markdownDescription": "Enables the name command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the register_listener command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-register-listener",
+          "markdownDescription": "Enables the register_listener command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the remove_data_store command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-remove-data-store",
+          "markdownDescription": "Enables the remove_data_store command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the remove_listener command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-remove-listener",
+          "markdownDescription": "Enables the remove_listener command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_app_theme command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-set-app-theme",
+          "markdownDescription": "Enables the set_app_theme command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_dock_visibility command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-set-dock-visibility",
+          "markdownDescription": "Enables the set_dock_visibility command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the supports_multiple_windows command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-supports-multiple-windows",
+          "markdownDescription": "Enables the supports_multiple_windows command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the tauri_version command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-tauri-version",
+          "markdownDescription": "Enables the tauri_version command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the version command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-version",
+          "markdownDescription": "Enables the version command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the app_hide command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-app-hide",
+          "markdownDescription": "Denies the app_hide command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the app_show command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-app-show",
+          "markdownDescription": "Denies the app_show command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the bundle_type command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-bundle-type",
+          "markdownDescription": "Denies the bundle_type command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the default_window_icon command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-default-window-icon",
+          "markdownDescription": "Denies the default_window_icon command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the fetch_data_store_identifiers command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-fetch-data-store-identifiers",
+          "markdownDescription": "Denies the fetch_data_store_identifiers command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the identifier command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-identifier",
+          "markdownDescription": "Denies the identifier command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the name command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-name",
+          "markdownDescription": "Denies the name command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the register_listener command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-register-listener",
+          "markdownDescription": "Denies the register_listener command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the remove_data_store command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-remove-data-store",
+          "markdownDescription": "Denies the remove_data_store command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the remove_listener command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-remove-listener",
+          "markdownDescription": "Denies the remove_listener command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_app_theme command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-set-app-theme",
+          "markdownDescription": "Denies the set_app_theme command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_dock_visibility command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-set-dock-visibility",
+          "markdownDescription": "Denies the set_dock_visibility command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the supports_multiple_windows command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-supports-multiple-windows",
+          "markdownDescription": "Denies the supports_multiple_windows command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the tauri_version command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-tauri-version",
+          "markdownDescription": "Denies the tauri_version command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the version command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-version",
+          "markdownDescription": "Denies the version command without any pre-configured scope."
+        },
+        {
+          "description": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-listen`\n- `allow-unlisten`\n- `allow-emit`\n- `allow-emit-to`",
+          "type": "string",
+          "const": "core:event:default",
+          "markdownDescription": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-listen`\n- `allow-unlisten`\n- `allow-emit`\n- `allow-emit-to`"
+        },
+        {
+          "description": "Enables the emit command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:event:allow-emit",
+          "markdownDescription": "Enables the emit command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the emit_to command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:event:allow-emit-to",
+          "markdownDescription": "Enables the emit_to command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the listen command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:event:allow-listen",
+          "markdownDescription": "Enables the listen command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the unlisten command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:event:allow-unlisten",
+          "markdownDescription": "Enables the unlisten command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the emit command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:event:deny-emit",
+          "markdownDescription": "Denies the emit command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the emit_to command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:event:deny-emit-to",
+          "markdownDescription": "Denies the emit_to command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the listen command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:event:deny-listen",
+          "markdownDescription": "Denies the listen command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the unlisten command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:event:deny-unlisten",
+          "markdownDescription": "Denies the unlisten command without any pre-configured scope."
+        },
+        {
+          "description": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-new`\n- `allow-from-bytes`\n- `allow-from-path`\n- `allow-rgba`\n- `allow-size`",
+          "type": "string",
+          "const": "core:image:default",
+          "markdownDescription": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-new`\n- `allow-from-bytes`\n- `allow-from-path`\n- `allow-rgba`\n- `allow-size`"
+        },
+        {
+          "description": "Enables the from_bytes command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:image:allow-from-bytes",
+          "markdownDescription": "Enables the from_bytes command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the from_path command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:image:allow-from-path",
+          "markdownDescription": "Enables the from_path command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the new command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:image:allow-new",
+          "markdownDescription": "Enables the new command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the rgba command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:image:allow-rgba",
+          "markdownDescription": "Enables the rgba command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:image:allow-size",
+          "markdownDescription": "Enables the size command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the from_bytes command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:image:deny-from-bytes",
+          "markdownDescription": "Denies the from_bytes command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the from_path command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:image:deny-from-path",
+          "markdownDescription": "Denies the from_path command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the new command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:image:deny-new",
+          "markdownDescription": "Denies the new command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the rgba command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:image:deny-rgba",
+          "markdownDescription": "Denies the rgba command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:image:deny-size",
+          "markdownDescription": "Denies the size command without any pre-configured scope."
+        },
+        {
+          "description": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-new`\n- `allow-append`\n- `allow-prepend`\n- `allow-insert`\n- `allow-remove`\n- `allow-remove-at`\n- `allow-items`\n- `allow-get`\n- `allow-popup`\n- `allow-create-default`\n- `allow-set-as-app-menu`\n- `allow-set-as-window-menu`\n- `allow-text`\n- `allow-set-text`\n- `allow-is-enabled`\n- `allow-set-enabled`\n- `allow-set-accelerator`\n- `allow-set-as-windows-menu-for-nsapp`\n- `allow-set-as-help-menu-for-nsapp`\n- `allow-is-checked`\n- `allow-set-checked`\n- `allow-set-icon`",
+          "type": "string",
+          "const": "core:menu:default",
+          "markdownDescription": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-new`\n- `allow-append`\n- `allow-prepend`\n- `allow-insert`\n- `allow-remove`\n- `allow-remove-at`\n- `allow-items`\n- `allow-get`\n- `allow-popup`\n- `allow-create-default`\n- `allow-set-as-app-menu`\n- `allow-set-as-window-menu`\n- `allow-text`\n- `allow-set-text`\n- `allow-is-enabled`\n- `allow-set-enabled`\n- `allow-set-accelerator`\n- `allow-set-as-windows-menu-for-nsapp`\n- `allow-set-as-help-menu-for-nsapp`\n- `allow-is-checked`\n- `allow-set-checked`\n- `allow-set-icon`"
+        },
+        {
+          "description": "Enables the append command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-append",
+          "markdownDescription": "Enables the append command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the create_default command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-create-default",
+          "markdownDescription": "Enables the create_default command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the get command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-get",
+          "markdownDescription": "Enables the get command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the insert command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-insert",
+          "markdownDescription": "Enables the insert command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_checked command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-is-checked",
+          "markdownDescription": "Enables the is_checked command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_enabled command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-is-enabled",
+          "markdownDescription": "Enables the is_enabled command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the items command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-items",
+          "markdownDescription": "Enables the items command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the new command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-new",
+          "markdownDescription": "Enables the new command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the popup command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-popup",
+          "markdownDescription": "Enables the popup command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the prepend command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-prepend",
+          "markdownDescription": "Enables the prepend command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the remove command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-remove",
+          "markdownDescription": "Enables the remove command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the remove_at command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-remove-at",
+          "markdownDescription": "Enables the remove_at command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_accelerator command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-set-accelerator",
+          "markdownDescription": "Enables the set_accelerator command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_as_app_menu command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-set-as-app-menu",
+          "markdownDescription": "Enables the set_as_app_menu command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_as_help_menu_for_nsapp command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-set-as-help-menu-for-nsapp",
+          "markdownDescription": "Enables the set_as_help_menu_for_nsapp command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_as_window_menu command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-set-as-window-menu",
+          "markdownDescription": "Enables the set_as_window_menu command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_as_windows_menu_for_nsapp command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-set-as-windows-menu-for-nsapp",
+          "markdownDescription": "Enables the set_as_windows_menu_for_nsapp command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_checked command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-set-checked",
+          "markdownDescription": "Enables the set_checked command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_enabled command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-set-enabled",
+          "markdownDescription": "Enables the set_enabled command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_icon command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-set-icon",
+          "markdownDescription": "Enables the set_icon command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_text command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-set-text",
+          "markdownDescription": "Enables the set_text command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the text command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:allow-text",
+          "markdownDescription": "Enables the text command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the append command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-append",
+          "markdownDescription": "Denies the append command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the create_default command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-create-default",
+          "markdownDescription": "Denies the create_default command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the get command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-get",
+          "markdownDescription": "Denies the get command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the insert command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-insert",
+          "markdownDescription": "Denies the insert command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_checked command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-is-checked",
+          "markdownDescription": "Denies the is_checked command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_enabled command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-is-enabled",
+          "markdownDescription": "Denies the is_enabled command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the items command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-items",
+          "markdownDescription": "Denies the items command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the new command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-new",
+          "markdownDescription": "Denies the new command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the popup command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-popup",
+          "markdownDescription": "Denies the popup command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the prepend command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-prepend",
+          "markdownDescription": "Denies the prepend command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the remove command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-remove",
+          "markdownDescription": "Denies the remove command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the remove_at command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-remove-at",
+          "markdownDescription": "Denies the remove_at command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_accelerator command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-set-accelerator",
+          "markdownDescription": "Denies the set_accelerator command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_as_app_menu command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-set-as-app-menu",
+          "markdownDescription": "Denies the set_as_app_menu command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_as_help_menu_for_nsapp command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-set-as-help-menu-for-nsapp",
+          "markdownDescription": "Denies the set_as_help_menu_for_nsapp command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_as_window_menu command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-set-as-window-menu",
+          "markdownDescription": "Denies the set_as_window_menu command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_as_windows_menu_for_nsapp command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-set-as-windows-menu-for-nsapp",
+          "markdownDescription": "Denies the set_as_windows_menu_for_nsapp command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_checked command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-set-checked",
+          "markdownDescription": "Denies the set_checked command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_enabled command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-set-enabled",
+          "markdownDescription": "Denies the set_enabled command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_icon command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-set-icon",
+          "markdownDescription": "Denies the set_icon command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_text command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-set-text",
+          "markdownDescription": "Denies the set_text command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the text command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:menu:deny-text",
+          "markdownDescription": "Denies the text command without any pre-configured scope."
+        },
+        {
+          "description": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-resolve-directory`\n- `allow-resolve`\n- `allow-normalize`\n- `allow-join`\n- `allow-dirname`\n- `allow-extname`\n- `allow-basename`\n- `allow-is-absolute`",
+          "type": "string",
+          "const": "core:path:default",
+          "markdownDescription": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-resolve-directory`\n- `allow-resolve`\n- `allow-normalize`\n- `allow-join`\n- `allow-dirname`\n- `allow-extname`\n- `allow-basename`\n- `allow-is-absolute`"
+        },
+        {
+          "description": "Enables the basename command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:allow-basename",
+          "markdownDescription": "Enables the basename command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the dirname command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:allow-dirname",
+          "markdownDescription": "Enables the dirname command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the extname command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:allow-extname",
+          "markdownDescription": "Enables the extname command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_absolute command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:allow-is-absolute",
+          "markdownDescription": "Enables the is_absolute command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the join command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:allow-join",
+          "markdownDescription": "Enables the join command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the normalize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:allow-normalize",
+          "markdownDescription": "Enables the normalize command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the resolve command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:allow-resolve",
+          "markdownDescription": "Enables the resolve command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the resolve_directory command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:allow-resolve-directory",
+          "markdownDescription": "Enables the resolve_directory command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the basename command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:deny-basename",
+          "markdownDescription": "Denies the basename command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the dirname command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:deny-dirname",
+          "markdownDescription": "Denies the dirname command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the extname command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:deny-extname",
+          "markdownDescription": "Denies the extname command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_absolute command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:deny-is-absolute",
+          "markdownDescription": "Denies the is_absolute command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the join command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:deny-join",
+          "markdownDescription": "Denies the join command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the normalize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:deny-normalize",
+          "markdownDescription": "Denies the normalize command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the resolve command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:deny-resolve",
+          "markdownDescription": "Denies the resolve command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the resolve_directory command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:path:deny-resolve-directory",
+          "markdownDescription": "Denies the resolve_directory command without any pre-configured scope."
+        },
+        {
+          "description": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-close`",
+          "type": "string",
+          "const": "core:resources:default",
+          "markdownDescription": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-close`"
+        },
+        {
+          "description": "Enables the close command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:resources:allow-close",
+          "markdownDescription": "Enables the close command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the close command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:resources:deny-close",
+          "markdownDescription": "Denies the close command without any pre-configured scope."
+        },
+        {
+          "description": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-new`\n- `allow-get-by-id`\n- `allow-remove-by-id`\n- `allow-set-icon`\n- `allow-set-menu`\n- `allow-set-tooltip`\n- `allow-set-title`\n- `allow-set-visible`\n- `allow-set-temp-dir-path`\n- `allow-set-icon-as-template`\n- `allow-set-icon-with-as-template`\n- `allow-set-show-menu-on-left-click`",
+          "type": "string",
+          "const": "core:tray:default",
+          "markdownDescription": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-new`\n- `allow-get-by-id`\n- `allow-remove-by-id`\n- `allow-set-icon`\n- `allow-set-menu`\n- `allow-set-tooltip`\n- `allow-set-title`\n- `allow-set-visible`\n- `allow-set-temp-dir-path`\n- `allow-set-icon-as-template`\n- `allow-set-icon-with-as-template`\n- `allow-set-show-menu-on-left-click`"
+        },
+        {
+          "description": "Enables the get_by_id command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:allow-get-by-id",
+          "markdownDescription": "Enables the get_by_id command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the new command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:allow-new",
+          "markdownDescription": "Enables the new command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the remove_by_id command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:allow-remove-by-id",
+          "markdownDescription": "Enables the remove_by_id command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_icon command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:allow-set-icon",
+          "markdownDescription": "Enables the set_icon command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_icon_as_template command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:allow-set-icon-as-template",
+          "markdownDescription": "Enables the set_icon_as_template command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_icon_with_as_template command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:allow-set-icon-with-as-template",
+          "markdownDescription": "Enables the set_icon_with_as_template command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_menu command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:allow-set-menu",
+          "markdownDescription": "Enables the set_menu command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_show_menu_on_left_click command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:allow-set-show-menu-on-left-click",
+          "markdownDescription": "Enables the set_show_menu_on_left_click command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_temp_dir_path command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:allow-set-temp-dir-path",
+          "markdownDescription": "Enables the set_temp_dir_path command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_title command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:allow-set-title",
+          "markdownDescription": "Enables the set_title command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_tooltip command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:allow-set-tooltip",
+          "markdownDescription": "Enables the set_tooltip command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_visible command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:allow-set-visible",
+          "markdownDescription": "Enables the set_visible command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the get_by_id command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:deny-get-by-id",
+          "markdownDescription": "Denies the get_by_id command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the new command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:deny-new",
+          "markdownDescription": "Denies the new command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the remove_by_id command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:deny-remove-by-id",
+          "markdownDescription": "Denies the remove_by_id command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_icon command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:deny-set-icon",
+          "markdownDescription": "Denies the set_icon command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_icon_as_template command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:deny-set-icon-as-template",
+          "markdownDescription": "Denies the set_icon_as_template command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_icon_with_as_template command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:deny-set-icon-with-as-template",
+          "markdownDescription": "Denies the set_icon_with_as_template command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_menu command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:deny-set-menu",
+          "markdownDescription": "Denies the set_menu command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_show_menu_on_left_click command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:deny-set-show-menu-on-left-click",
+          "markdownDescription": "Denies the set_show_menu_on_left_click command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_temp_dir_path command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:deny-set-temp-dir-path",
+          "markdownDescription": "Denies the set_temp_dir_path command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_title command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:deny-set-title",
+          "markdownDescription": "Denies the set_title command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_tooltip command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:deny-set-tooltip",
+          "markdownDescription": "Denies the set_tooltip command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_visible command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:deny-set-visible",
+          "markdownDescription": "Denies the set_visible command without any pre-configured scope."
+        },
+        {
+          "description": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-get-all-webviews`\n- `allow-webview-position`\n- `allow-webview-size`\n- `allow-internal-toggle-devtools`",
+          "type": "string",
+          "const": "core:webview:default",
+          "markdownDescription": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-get-all-webviews`\n- `allow-webview-position`\n- `allow-webview-size`\n- `allow-internal-toggle-devtools`"
+        },
+        {
+          "description": "Enables the clear_all_browsing_data command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-clear-all-browsing-data",
+          "markdownDescription": "Enables the clear_all_browsing_data command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the create_webview command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-create-webview",
+          "markdownDescription": "Enables the create_webview command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the create_webview_window command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-create-webview-window",
+          "markdownDescription": "Enables the create_webview_window command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the get_all_webviews command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-get-all-webviews",
+          "markdownDescription": "Enables the get_all_webviews command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the internal_toggle_devtools command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-internal-toggle-devtools",
+          "markdownDescription": "Enables the internal_toggle_devtools command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the print command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-print",
+          "markdownDescription": "Enables the print command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the reparent command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-reparent",
+          "markdownDescription": "Enables the reparent command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_webview_auto_resize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-set-webview-auto-resize",
+          "markdownDescription": "Enables the set_webview_auto_resize command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_webview_background_color command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-set-webview-background-color",
+          "markdownDescription": "Enables the set_webview_background_color command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_webview_focus command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-set-webview-focus",
+          "markdownDescription": "Enables the set_webview_focus command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_webview_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-set-webview-position",
+          "markdownDescription": "Enables the set_webview_position command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_webview_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-set-webview-size",
+          "markdownDescription": "Enables the set_webview_size command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_webview_zoom command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-set-webview-zoom",
+          "markdownDescription": "Enables the set_webview_zoom command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the webview_close command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-webview-close",
+          "markdownDescription": "Enables the webview_close command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the webview_hide command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-webview-hide",
+          "markdownDescription": "Enables the webview_hide command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the webview_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-webview-position",
+          "markdownDescription": "Enables the webview_position command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the webview_show command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-webview-show",
+          "markdownDescription": "Enables the webview_show command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the webview_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:allow-webview-size",
+          "markdownDescription": "Enables the webview_size command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the clear_all_browsing_data command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-clear-all-browsing-data",
+          "markdownDescription": "Denies the clear_all_browsing_data command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the create_webview command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-create-webview",
+          "markdownDescription": "Denies the create_webview command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the create_webview_window command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-create-webview-window",
+          "markdownDescription": "Denies the create_webview_window command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the get_all_webviews command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-get-all-webviews",
+          "markdownDescription": "Denies the get_all_webviews command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the internal_toggle_devtools command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-internal-toggle-devtools",
+          "markdownDescription": "Denies the internal_toggle_devtools command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the print command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-print",
+          "markdownDescription": "Denies the print command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the reparent command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-reparent",
+          "markdownDescription": "Denies the reparent command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_webview_auto_resize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-set-webview-auto-resize",
+          "markdownDescription": "Denies the set_webview_auto_resize command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_webview_background_color command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-set-webview-background-color",
+          "markdownDescription": "Denies the set_webview_background_color command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_webview_focus command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-set-webview-focus",
+          "markdownDescription": "Denies the set_webview_focus command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_webview_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-set-webview-position",
+          "markdownDescription": "Denies the set_webview_position command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_webview_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-set-webview-size",
+          "markdownDescription": "Denies the set_webview_size command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_webview_zoom command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-set-webview-zoom",
+          "markdownDescription": "Denies the set_webview_zoom command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the webview_close command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-webview-close",
+          "markdownDescription": "Denies the webview_close command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the webview_hide command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-webview-hide",
+          "markdownDescription": "Denies the webview_hide command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the webview_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-webview-position",
+          "markdownDescription": "Denies the webview_position command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the webview_show command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-webview-show",
+          "markdownDescription": "Denies the webview_show command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the webview_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:webview:deny-webview-size",
+          "markdownDescription": "Denies the webview_size command without any pre-configured scope."
+        },
+        {
+          "description": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-get-all-windows`\n- `allow-scale-factor`\n- `allow-inner-position`\n- `allow-outer-position`\n- `allow-inner-size`\n- `allow-outer-size`\n- `allow-is-fullscreen`\n- `allow-is-minimized`\n- `allow-is-maximized`\n- `allow-is-focused`\n- `allow-is-decorated`\n- `allow-is-resizable`\n- `allow-is-maximizable`\n- `allow-is-minimizable`\n- `allow-is-closable`\n- `allow-is-visible`\n- `allow-is-enabled`\n- `allow-title`\n- `allow-current-monitor`\n- `allow-primary-monitor`\n- `allow-monitor-from-point`\n- `allow-available-monitors`\n- `allow-cursor-position`\n- `allow-theme`\n- `allow-is-always-on-top`\n- `allow-activity-name`\n- `allow-scene-identifier`\n- `allow-internal-toggle-maximize`",
+          "type": "string",
+          "const": "core:window:default",
+          "markdownDescription": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-get-all-windows`\n- `allow-scale-factor`\n- `allow-inner-position`\n- `allow-outer-position`\n- `allow-inner-size`\n- `allow-outer-size`\n- `allow-is-fullscreen`\n- `allow-is-minimized`\n- `allow-is-maximized`\n- `allow-is-focused`\n- `allow-is-decorated`\n- `allow-is-resizable`\n- `allow-is-maximizable`\n- `allow-is-minimizable`\n- `allow-is-closable`\n- `allow-is-visible`\n- `allow-is-enabled`\n- `allow-title`\n- `allow-current-monitor`\n- `allow-primary-monitor`\n- `allow-monitor-from-point`\n- `allow-available-monitors`\n- `allow-cursor-position`\n- `allow-theme`\n- `allow-is-always-on-top`\n- `allow-activity-name`\n- `allow-scene-identifier`\n- `allow-internal-toggle-maximize`"
+        },
+        {
+          "description": "Enables the activity_name command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-activity-name",
+          "markdownDescription": "Enables the activity_name command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the available_monitors command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-available-monitors",
+          "markdownDescription": "Enables the available_monitors command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the center command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-center",
+          "markdownDescription": "Enables the center command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the close command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-close",
+          "markdownDescription": "Enables the close command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the create command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-create",
+          "markdownDescription": "Enables the create command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the current_monitor command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-current-monitor",
+          "markdownDescription": "Enables the current_monitor command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the cursor_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-cursor-position",
+          "markdownDescription": "Enables the cursor_position command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the destroy command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-destroy",
+          "markdownDescription": "Enables the destroy command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the get_all_windows command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-get-all-windows",
+          "markdownDescription": "Enables the get_all_windows command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the hide command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-hide",
+          "markdownDescription": "Enables the hide command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the inner_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-inner-position",
+          "markdownDescription": "Enables the inner_position command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the inner_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-inner-size",
+          "markdownDescription": "Enables the inner_size command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the internal_toggle_maximize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-internal-toggle-maximize",
+          "markdownDescription": "Enables the internal_toggle_maximize command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_always_on_top command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-is-always-on-top",
+          "markdownDescription": "Enables the is_always_on_top command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_closable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-is-closable",
+          "markdownDescription": "Enables the is_closable command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_decorated command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-is-decorated",
+          "markdownDescription": "Enables the is_decorated command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_enabled command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-is-enabled",
+          "markdownDescription": "Enables the is_enabled command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_focused command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-is-focused",
+          "markdownDescription": "Enables the is_focused command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_fullscreen command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-is-fullscreen",
+          "markdownDescription": "Enables the is_fullscreen command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_maximizable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-is-maximizable",
+          "markdownDescription": "Enables the is_maximizable command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_maximized command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-is-maximized",
+          "markdownDescription": "Enables the is_maximized command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_minimizable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-is-minimizable",
+          "markdownDescription": "Enables the is_minimizable command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_minimized command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-is-minimized",
+          "markdownDescription": "Enables the is_minimized command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_resizable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-is-resizable",
+          "markdownDescription": "Enables the is_resizable command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the is_visible command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-is-visible",
+          "markdownDescription": "Enables the is_visible command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the maximize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-maximize",
+          "markdownDescription": "Enables the maximize command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the minimize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-minimize",
+          "markdownDescription": "Enables the minimize command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the monitor_from_point command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-monitor-from-point",
+          "markdownDescription": "Enables the monitor_from_point command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the outer_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-outer-position",
+          "markdownDescription": "Enables the outer_position command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the outer_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-outer-size",
+          "markdownDescription": "Enables the outer_size command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the primary_monitor command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-primary-monitor",
+          "markdownDescription": "Enables the primary_monitor command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the request_user_attention command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-request-user-attention",
+          "markdownDescription": "Enables the request_user_attention command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the scale_factor command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-scale-factor",
+          "markdownDescription": "Enables the scale_factor command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the scene_identifier command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-scene-identifier",
+          "markdownDescription": "Enables the scene_identifier command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_always_on_bottom command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-always-on-bottom",
+          "markdownDescription": "Enables the set_always_on_bottom command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_always_on_top command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-always-on-top",
+          "markdownDescription": "Enables the set_always_on_top command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_background_color command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-background-color",
+          "markdownDescription": "Enables the set_background_color command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_badge_count command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-badge-count",
+          "markdownDescription": "Enables the set_badge_count command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_badge_label command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-badge-label",
+          "markdownDescription": "Enables the set_badge_label command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_closable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-closable",
+          "markdownDescription": "Enables the set_closable command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_content_protected command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-content-protected",
+          "markdownDescription": "Enables the set_content_protected command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_cursor_grab command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-cursor-grab",
+          "markdownDescription": "Enables the set_cursor_grab command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_cursor_icon command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-cursor-icon",
+          "markdownDescription": "Enables the set_cursor_icon command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_cursor_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-cursor-position",
+          "markdownDescription": "Enables the set_cursor_position command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_cursor_visible command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-cursor-visible",
+          "markdownDescription": "Enables the set_cursor_visible command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_decorations command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-decorations",
+          "markdownDescription": "Enables the set_decorations command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_effects command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-effects",
+          "markdownDescription": "Enables the set_effects command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_enabled command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-enabled",
+          "markdownDescription": "Enables the set_enabled command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_focus command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-focus",
+          "markdownDescription": "Enables the set_focus command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_focusable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-focusable",
+          "markdownDescription": "Enables the set_focusable command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_fullscreen command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-fullscreen",
+          "markdownDescription": "Enables the set_fullscreen command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_icon command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-icon",
+          "markdownDescription": "Enables the set_icon command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_ignore_cursor_events command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-ignore-cursor-events",
+          "markdownDescription": "Enables the set_ignore_cursor_events command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_max_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-max-size",
+          "markdownDescription": "Enables the set_max_size command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_maximizable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-maximizable",
+          "markdownDescription": "Enables the set_maximizable command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_min_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-min-size",
+          "markdownDescription": "Enables the set_min_size command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_minimizable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-minimizable",
+          "markdownDescription": "Enables the set_minimizable command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_overlay_icon command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-overlay-icon",
+          "markdownDescription": "Enables the set_overlay_icon command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-position",
+          "markdownDescription": "Enables the set_position command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_progress_bar command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-progress-bar",
+          "markdownDescription": "Enables the set_progress_bar command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_resizable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-resizable",
+          "markdownDescription": "Enables the set_resizable command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_shadow command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-shadow",
+          "markdownDescription": "Enables the set_shadow command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_simple_fullscreen command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-simple-fullscreen",
+          "markdownDescription": "Enables the set_simple_fullscreen command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-size",
+          "markdownDescription": "Enables the set_size command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_size_constraints command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-size-constraints",
+          "markdownDescription": "Enables the set_size_constraints command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_skip_taskbar command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-skip-taskbar",
+          "markdownDescription": "Enables the set_skip_taskbar command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_theme command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-theme",
+          "markdownDescription": "Enables the set_theme command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_title command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-title",
+          "markdownDescription": "Enables the set_title command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_title_bar_style command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-title-bar-style",
+          "markdownDescription": "Enables the set_title_bar_style command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the set_visible_on_all_workspaces command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-set-visible-on-all-workspaces",
+          "markdownDescription": "Enables the set_visible_on_all_workspaces command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the show command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-show",
+          "markdownDescription": "Enables the show command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the start_dragging command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-start-dragging",
+          "markdownDescription": "Enables the start_dragging command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the start_resize_dragging command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-start-resize-dragging",
+          "markdownDescription": "Enables the start_resize_dragging command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the theme command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-theme",
+          "markdownDescription": "Enables the theme command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the title command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-title",
+          "markdownDescription": "Enables the title command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the toggle_maximize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-toggle-maximize",
+          "markdownDescription": "Enables the toggle_maximize command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the unmaximize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-unmaximize",
+          "markdownDescription": "Enables the unmaximize command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the unminimize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-unminimize",
+          "markdownDescription": "Enables the unminimize command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the activity_name command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-activity-name",
+          "markdownDescription": "Denies the activity_name command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the available_monitors command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-available-monitors",
+          "markdownDescription": "Denies the available_monitors command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the center command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-center",
+          "markdownDescription": "Denies the center command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the close command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-close",
+          "markdownDescription": "Denies the close command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the create command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-create",
+          "markdownDescription": "Denies the create command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the current_monitor command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-current-monitor",
+          "markdownDescription": "Denies the current_monitor command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the cursor_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-cursor-position",
+          "markdownDescription": "Denies the cursor_position command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the destroy command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-destroy",
+          "markdownDescription": "Denies the destroy command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the get_all_windows command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-get-all-windows",
+          "markdownDescription": "Denies the get_all_windows command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the hide command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-hide",
+          "markdownDescription": "Denies the hide command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the inner_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-inner-position",
+          "markdownDescription": "Denies the inner_position command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the inner_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-inner-size",
+          "markdownDescription": "Denies the inner_size command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the internal_toggle_maximize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-internal-toggle-maximize",
+          "markdownDescription": "Denies the internal_toggle_maximize command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_always_on_top command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-is-always-on-top",
+          "markdownDescription": "Denies the is_always_on_top command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_closable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-is-closable",
+          "markdownDescription": "Denies the is_closable command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_decorated command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-is-decorated",
+          "markdownDescription": "Denies the is_decorated command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_enabled command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-is-enabled",
+          "markdownDescription": "Denies the is_enabled command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_focused command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-is-focused",
+          "markdownDescription": "Denies the is_focused command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_fullscreen command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-is-fullscreen",
+          "markdownDescription": "Denies the is_fullscreen command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_maximizable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-is-maximizable",
+          "markdownDescription": "Denies the is_maximizable command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_maximized command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-is-maximized",
+          "markdownDescription": "Denies the is_maximized command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_minimizable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-is-minimizable",
+          "markdownDescription": "Denies the is_minimizable command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_minimized command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-is-minimized",
+          "markdownDescription": "Denies the is_minimized command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_resizable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-is-resizable",
+          "markdownDescription": "Denies the is_resizable command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the is_visible command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-is-visible",
+          "markdownDescription": "Denies the is_visible command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the maximize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-maximize",
+          "markdownDescription": "Denies the maximize command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the minimize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-minimize",
+          "markdownDescription": "Denies the minimize command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the monitor_from_point command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-monitor-from-point",
+          "markdownDescription": "Denies the monitor_from_point command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the outer_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-outer-position",
+          "markdownDescription": "Denies the outer_position command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the outer_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-outer-size",
+          "markdownDescription": "Denies the outer_size command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the primary_monitor command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-primary-monitor",
+          "markdownDescription": "Denies the primary_monitor command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the request_user_attention command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-request-user-attention",
+          "markdownDescription": "Denies the request_user_attention command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the scale_factor command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-scale-factor",
+          "markdownDescription": "Denies the scale_factor command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the scene_identifier command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-scene-identifier",
+          "markdownDescription": "Denies the scene_identifier command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_always_on_bottom command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-always-on-bottom",
+          "markdownDescription": "Denies the set_always_on_bottom command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_always_on_top command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-always-on-top",
+          "markdownDescription": "Denies the set_always_on_top command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_background_color command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-background-color",
+          "markdownDescription": "Denies the set_background_color command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_badge_count command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-badge-count",
+          "markdownDescription": "Denies the set_badge_count command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_badge_label command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-badge-label",
+          "markdownDescription": "Denies the set_badge_label command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_closable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-closable",
+          "markdownDescription": "Denies the set_closable command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_content_protected command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-content-protected",
+          "markdownDescription": "Denies the set_content_protected command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_cursor_grab command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-cursor-grab",
+          "markdownDescription": "Denies the set_cursor_grab command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_cursor_icon command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-cursor-icon",
+          "markdownDescription": "Denies the set_cursor_icon command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_cursor_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-cursor-position",
+          "markdownDescription": "Denies the set_cursor_position command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_cursor_visible command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-cursor-visible",
+          "markdownDescription": "Denies the set_cursor_visible command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_decorations command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-decorations",
+          "markdownDescription": "Denies the set_decorations command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_effects command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-effects",
+          "markdownDescription": "Denies the set_effects command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_enabled command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-enabled",
+          "markdownDescription": "Denies the set_enabled command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_focus command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-focus",
+          "markdownDescription": "Denies the set_focus command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_focusable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-focusable",
+          "markdownDescription": "Denies the set_focusable command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_fullscreen command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-fullscreen",
+          "markdownDescription": "Denies the set_fullscreen command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_icon command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-icon",
+          "markdownDescription": "Denies the set_icon command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_ignore_cursor_events command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-ignore-cursor-events",
+          "markdownDescription": "Denies the set_ignore_cursor_events command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_max_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-max-size",
+          "markdownDescription": "Denies the set_max_size command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_maximizable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-maximizable",
+          "markdownDescription": "Denies the set_maximizable command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_min_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-min-size",
+          "markdownDescription": "Denies the set_min_size command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_minimizable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-minimizable",
+          "markdownDescription": "Denies the set_minimizable command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_overlay_icon command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-overlay-icon",
+          "markdownDescription": "Denies the set_overlay_icon command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_position command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-position",
+          "markdownDescription": "Denies the set_position command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_progress_bar command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-progress-bar",
+          "markdownDescription": "Denies the set_progress_bar command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_resizable command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-resizable",
+          "markdownDescription": "Denies the set_resizable command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_shadow command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-shadow",
+          "markdownDescription": "Denies the set_shadow command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_simple_fullscreen command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-simple-fullscreen",
+          "markdownDescription": "Denies the set_simple_fullscreen command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_size command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-size",
+          "markdownDescription": "Denies the set_size command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_size_constraints command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-size-constraints",
+          "markdownDescription": "Denies the set_size_constraints command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_skip_taskbar command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-skip-taskbar",
+          "markdownDescription": "Denies the set_skip_taskbar command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_theme command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-theme",
+          "markdownDescription": "Denies the set_theme command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_title command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-title",
+          "markdownDescription": "Denies the set_title command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_title_bar_style command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-title-bar-style",
+          "markdownDescription": "Denies the set_title_bar_style command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_visible_on_all_workspaces command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-set-visible-on-all-workspaces",
+          "markdownDescription": "Denies the set_visible_on_all_workspaces command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the show command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-show",
+          "markdownDescription": "Denies the show command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the start_dragging command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-start-dragging",
+          "markdownDescription": "Denies the start_dragging command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the start_resize_dragging command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-start-resize-dragging",
+          "markdownDescription": "Denies the start_resize_dragging command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the theme command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-theme",
+          "markdownDescription": "Denies the theme command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the title command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-title",
+          "markdownDescription": "Denies the title command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the toggle_maximize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-toggle-maximize",
+          "markdownDescription": "Denies the toggle_maximize command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the unmaximize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-unmaximize",
+          "markdownDescription": "Denies the unmaximize command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the unminimize command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-unminimize",
+          "markdownDescription": "Denies the unminimize command without any pre-configured scope."
+        }
+      ]
+    },
+    "Value": {
+      "description": "All supported ACL values.",
+      "anyOf": [
+        {
+          "description": "Represents a null JSON value.",
+          "type": "null"
+        },
+        {
+          "description": "Represents a [`bool`].",
+          "type": "boolean"
+        },
+        {
+          "description": "Represents a valid ACL [`Number`].",
+          "allOf": [
+            {
+              "$ref": "#/definitions/Number"
+            }
+          ]
+        },
+        {
+          "description": "Represents a [`String`].",
+          "type": "string"
+        },
+        {
+          "description": "Represents a list of other [`Value`]s.",
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/Value"
+          }
+        },
+        {
+          "description": "Represents a map of [`String`] keys to [`Value`]s.",
+          "type": "object",
+          "additionalProperties": {
+            "$ref": "#/definitions/Value"
+          }
+        }
+      ]
+    },
+    "Number": {
+      "description": "A valid ACL number.",
+      "anyOf": [
+        {
+          "description": "Represents an [`i64`].",
+          "type": "integer",
+          "format": "int64"
+        },
+        {
+          "description": "Represents a [`f64`].",
+          "type": "number",
+          "format": "double"
+        }
+      ]
+    },
+    "Target": {
+      "description": "Platform target.",
+      "oneOf": [
+        {
+          "description": "MacOS.",
+          "type": "string",
+          "enum": [
+            "macOS"
+          ]
+        },
+        {
+          "description": "Windows.",
+          "type": "string",
+          "enum": [
+            "windows"
+          ]
+        },
+        {
+          "description": "Linux.",
+          "type": "string",
+          "enum": [
+            "linux"
+          ]
+        },
+        {
+          "description": "Android.",
+          "type": "string",
+          "enum": [
+            "android"
+          ]
+        },
+        {
+          "description": "iOS.",
+          "type": "string",
+          "enum": [
+            "iOS"
+          ]
+        }
+      ]
+    }
+  }
+}
\ No newline at end of file
diff --git a/client/app-shell/icons/icon.ico b/client/app-shell/icons/icon.ico
new file mode 100644
index 0000000..bca8c50
Binary files /dev/null and b/client/app-shell/icons/icon.ico differ
diff --git a/client/app-shell/icons/remotedesk-icon.png b/client/app-shell/icons/remotedesk-icon.png
new file mode 100644
index 0000000..5b150b0
Binary files /dev/null and b/client/app-shell/icons/remotedesk-icon.png differ
diff --git a/client/app-shell/icons/remotedesk-icon.svg b/client/app-shell/icons/remotedesk-icon.svg
new file mode 100644
index 0000000..cdd6019
--- /dev/null
+++ b/client/app-shell/icons/remotedesk-icon.svg
@@ -0,0 +1,10 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32">
+  <rect width="32" height="32" rx="7" fill="#5ed39a"/>
+  <g fill="none" stroke="#101b16" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round">
+    <path d="M10 8.5v3.2M8.4 10.1h3.2"/>
+    <path d="M21.8 8.5v3.2M20.2 10.1h3.2"/>
+    <path d="M10 18.5v3.2M8.4 20.1h3.2"/>
+    <path d="M21.8 18.5v3.2M20.2 20.1h3.2"/>
+    <path d="M12.5 14.2h7M12.5 16.4h7"/>
+  </g>
+</svg>
diff --git a/client/app-shell/src/main.rs b/client/app-shell/src/main.rs
new file mode 100644
index 0000000..39fff9e
--- /dev/null
+++ b/client/app-shell/src/main.rs
@@ -0,0 +1,318 @@
+#![cfg_attr(all(windows, not(debug_assertions)), windows_subsystem = "windows")]
+
+#[cfg(not(windows))]
+fn main() {
+    eprintln!("RemoteDesk desktop shell is available only on Windows");
+}
+
+#[cfg(windows)]
+mod windows_app {
+    use std::env;
+    use std::fs::{self, File, OpenOptions};
+    use std::io::{self, Read as _, Write as _};
+    use std::net::{Ipv4Addr, SocketAddrV4, TcpListener, TcpStream};
+    use std::path::{Path, PathBuf};
+    use std::process::{Child, Command, Stdio};
+    use std::sync::mpsc::{self, RecvTimeoutError, Sender};
+    use std::thread;
+    use std::time::{Duration, Instant};
+
+    use sha2::{Digest as _, Sha256};
+    use std::os::windows::process::CommandExt as _;
+    use tauri::{Manager as _, WebviewUrl, WebviewWindowBuilder};
+
+    const CREATE_NO_WINDOW: u32 = 0x0800_0000;
+    const PERSISTENT_WEB_PORT: u16 = 4173;
+    const STARTUP_TIMEOUT: Duration = Duration::from_secs(10);
+    const SHUTDOWN_TIMEOUT: Duration = Duration::from_secs(2);
+
+    struct ControlServiceHandle {
+        shutdown: Sender<()>,
+    }
+
+    impl Drop for ControlServiceHandle {
+        fn drop(&mut self) {
+            let _ = self.shutdown.send(());
+        }
+    }
+
+    pub fn run() {
+        tauri::Builder::default()
+            .setup(|app| {
+                let (control_service, port) = start_control_service(app.handle().clone())?;
+                app.manage(control_service);
+
+                // WebView2 treats localhost as a trusted loopback origin more
+                // consistently than a numeric loopback URL across enterprise
+                // policies and older runtime builds.
+                let url = tauri::Url::parse(&format!("http://localhost:{port}/"))?;
+                WebviewWindowBuilder::new(app, "main", WebviewUrl::External(url))
+                    .title("RemoteDesk")
+                    .inner_size(1280.0, 800.0)
+                    .min_inner_size(960.0, 600.0)
+                    .devtools(cfg!(debug_assertions))
+                    .build()?;
+                Ok(())
+            })
+            .run(tauri::generate_context!())
+            .expect("RemoteDesk desktop runtime failed");
+    }
+
+    fn start_control_service(
+        app_handle: tauri::AppHandle,
+    ) -> Result<(ControlServiceHandle, u16), Box<dyn std::error::Error>> {
+        let web_root = resolve_web_root()?;
+        let service_path = resolve_control_service()?;
+        // Keep the WebView origin stable so its localStorage (host profiles and
+        // preferences) survives application restarts and MSI upgrades. Fall back
+        // to an ephemeral port only when another local service owns the port.
+        let port = reserve_persistent_or_ephemeral_port()?;
+        let shell_token = new_shell_token()?;
+        let (ready_tx, ready_rx) = mpsc::sync_channel(1);
+        let (shutdown_tx, shutdown_rx) = mpsc::channel();
+
+        thread::Builder::new()
+            .name("remotedesk-control-service-manager".to_owned())
+            .spawn(move || {
+                let mut child =
+                    match spawn_control_service(&service_path, &web_root, port, &shell_token) {
+                        Ok(child) => child,
+                        Err(error) => {
+                            let _ = ready_tx.send(Err(error.to_string()));
+                            return;
+                        }
+                    };
+                if let Err(error) = wait_for_control_service(&mut child, port, &shell_token) {
+                    let _ = ready_tx.send(Err(error.to_string()));
+                    stop_child(&mut child);
+                    return;
+                }
+                if ready_tx.send(Ok(port)).is_err() {
+                    stop_child(&mut child);
+                    return;
+                }
+
+                loop {
+                    match shutdown_rx.recv_timeout(Duration::from_millis(250)) {
+                        Ok(()) | Err(RecvTimeoutError::Disconnected) => {
+                            stop_child(&mut child);
+                            return;
+                        }
+                        Err(RecvTimeoutError::Timeout) => {}
+                    }
+                    match child.try_wait() {
+                        Ok(Some(status)) => {
+                            app_handle.exit(if status.success() { 0 } else { 1 });
+                            return;
+                        }
+                        Ok(None) => {}
+                        Err(_) => {
+                            stop_child(&mut child);
+                            app_handle.exit(1);
+                            return;
+                        }
+                    }
+                }
+            })?;
+
+        let handle = ControlServiceHandle {
+            shutdown: shutdown_tx,
+        };
+        match ready_rx.recv_timeout(STARTUP_TIMEOUT) {
+            Ok(Ok(ready_port)) => Ok((handle, ready_port)),
+            Ok(Err(error)) => Err(io::Error::other(error).into()),
+            Err(_) => Err(io::Error::new(
+                io::ErrorKind::TimedOut,
+                "control service did not become ready within 10 seconds",
+            )
+            .into()),
+        }
+    }
+
+    fn reserve_persistent_or_ephemeral_port() -> io::Result<u16> {
+        if TcpListener::bind(SocketAddrV4::new(Ipv4Addr::LOCALHOST, PERSISTENT_WEB_PORT)).is_ok() {
+            return Ok(PERSISTENT_WEB_PORT);
+        }
+        reserve_loopback_port()
+    }
+
+    fn resolve_web_root() -> io::Result<PathBuf> {
+        if let Some(path) = environment_path("REMOTEDESK_WEB_ROOT") {
+            return validate_web_root(path);
+        }
+        let executable = env::current_exe()?;
+        let executable_dir = executable
+            .parent()
+            .ok_or_else(|| io::Error::other("desktop executable has no parent directory"))?;
+        if let Some(install_root) = executable_dir.parent() {
+            let installed = install_root.join("web");
+            if installed.join("index.html").is_file() {
+                return validate_web_root(installed);
+            }
+        }
+        validate_web_root(
+            Path::new(env!("CARGO_MANIFEST_DIR"))
+                .join("..")
+                .join("web")
+                .join("dist"),
+        )
+    }
+
+    fn validate_web_root(path: PathBuf) -> io::Result<PathBuf> {
+        let canonical = path.canonicalize()?;
+        if !canonical.join("index.html").is_file() {
+            return Err(io::Error::new(
+                io::ErrorKind::NotFound,
+                "RemoteDesk web assets do not contain index.html",
+            ));
+        }
+        Ok(canonical)
+    }
+
+    fn resolve_control_service() -> io::Result<PathBuf> {
+        let path = if let Some(path) = environment_path("REMOTEDESK_CONTROL_SERVICE") {
+            path
+        } else {
+            env::current_exe()?
+                .parent()
+                .ok_or_else(|| io::Error::other("desktop executable has no parent directory"))?
+                .join("remotedesk-control-service.exe")
+        };
+        let canonical = path.canonicalize()?;
+        if !canonical.is_file() {
+            return Err(io::Error::new(
+                io::ErrorKind::NotFound,
+                "RemoteDesk control service executable is missing",
+            ));
+        }
+        Ok(canonical)
+    }
+
+    fn environment_path(name: &str) -> Option<PathBuf> {
+        env::var_os(name)
+            .filter(|value| !value.is_empty())
+            .map(PathBuf::from)
+    }
+
+    fn reserve_loopback_port() -> io::Result<u16> {
+        let listener = TcpListener::bind(SocketAddrV4::new(Ipv4Addr::LOCALHOST, 0))?;
+        let port = listener.local_addr()?.port();
+        drop(listener);
+        if port < 1_024 {
+            return Err(io::Error::other("Windows selected a reserved local port"));
+        }
+        Ok(port)
+    }
+
+    fn new_shell_token() -> io::Result<String> {
+        let mut bytes = [0_u8; 32];
+        getrandom::fill(&mut bytes).map_err(|error| io::Error::other(error.to_string()))?;
+        let mut token = String::with_capacity(bytes.len() * 2);
+        const HEX: &[u8; 16] = b"0123456789abcdef";
+        for byte in bytes {
+            token.push(char::from(HEX[usize::from(byte >> 4)]));
+            token.push(char::from(HEX[usize::from(byte & 0x0f)]));
+        }
+        Ok(token)
+    }
+
+    fn spawn_control_service(
+        service: &Path,
+        web_root: &Path,
+        port: u16,
+        shell_token: &str,
+    ) -> io::Result<Child> {
+        let mut command = Command::new(service);
+        command
+            .arg("--web-root")
+            .arg(web_root)
+            .arg("--port")
+            .arg(port.to_string())
+            .arg("--exit-on-stdin-close")
+            .env("REMOTEDESK_DESKTOP_SHELL", "tauri-2")
+            .env("REMOTEDESK_SHELL_TOKEN", shell_token)
+            .stdin(Stdio::piped())
+            .creation_flags(CREATE_NO_WINDOW);
+
+        if let Some(log) = open_control_service_log() {
+            command.stdout(Stdio::from(log.try_clone()?));
+            command.stderr(Stdio::from(log));
+        } else {
+            command.stdout(Stdio::null());
+            command.stderr(Stdio::null());
+        }
+        command.spawn()
+    }
+
+    fn open_control_service_log() -> Option<File> {
+        let root = env::var_os("LOCALAPPDATA")
+            .filter(|value| !value.is_empty())
+            .map(PathBuf::from)?
+            .join("RemoteDesk")
+            .join("logs");
+        fs::create_dir_all(&root).ok()?;
+        OpenOptions::new()
+            .create(true)
+            .append(true)
+            .open(root.join("control-service.log"))
+            .ok()
+    }
+
+    fn wait_for_control_service(child: &mut Child, port: u16, shell_token: &str) -> io::Result<()> {
+        let deadline = Instant::now() + STARTUP_TIMEOUT;
+        let address = SocketAddrV4::new(Ipv4Addr::LOCALHOST, port);
+        let expected_proof = format!("{:x}", Sha256::digest(shell_token.as_bytes()));
+        let expected_body = format!(r#"{{"ready":true,"proof":"{expected_proof}"}}"#).into_bytes();
+        while Instant::now() < deadline {
+            if let Some(status) = child.try_wait()? {
+                return Err(io::Error::other(format!(
+                    "control service exited during startup with {status}"
+                )));
+            }
+            if let Ok(mut stream) =
+                TcpStream::connect_timeout(&address.into(), Duration::from_millis(100))
+            {
+                stream.set_read_timeout(Some(Duration::from_millis(250)))?;
+                stream.set_write_timeout(Some(Duration::from_millis(250)))?;
+                let request = format!(
+                    "GET /api/v1/shell/ready HTTP/1.1\r\nHost: 127.0.0.1:{port}\r\nConnection: close\r\n\r\n"
+                );
+                if stream.write_all(request.as_bytes()).is_ok() {
+                    let mut response = Vec::new();
+                    if stream.take(4_096).read_to_end(&mut response).is_ok()
+                        && response.starts_with(b"HTTP/1.1 200 ")
+                        && response
+                            .windows(expected_body.len())
+                            .any(|window| window == expected_body)
+                    {
+                        return Ok(());
+                    }
+                }
+            }
+            thread::sleep(Duration::from_millis(50));
+        }
+        Err(io::Error::new(
+            io::ErrorKind::TimedOut,
+            "control service did not open its loopback listener",
+        ))
+    }
+
+    fn stop_child(child: &mut Child) {
+        drop(child.stdin.take());
+        let deadline = Instant::now() + SHUTDOWN_TIMEOUT;
+        while Instant::now() < deadline {
+            match child.try_wait() {
+                Ok(Some(_)) => return,
+                Ok(None) => thread::sleep(Duration::from_millis(50)),
+                Err(_) => break,
+            }
+        }
+        let _ = child.kill();
+        let _ = child.wait();
+    }
+}
+
+#[cfg(windows)]
+fn main() {
+    windows_app::run();
+}
diff --git a/client/app-shell/tauri.conf.json b/client/app-shell/tauri.conf.json
new file mode 100644
index 0000000..8892a39
--- /dev/null
+++ b/client/app-shell/tauri.conf.json
@@ -0,0 +1,21 @@
+{
+  "$schema": "https://schema.tauri.app/config/2",
+  "productName": "RemoteDesk",
+  "version": "0.2.19",
+  "identifier": "com.remotedesk.client",
+  "build": {
+    "frontendDist": "../web/dist"
+  },
+  "app": {
+    "windows": [],
+    "security": {
+      "capabilities": []
+    }
+  },
+  "bundle": {
+    "active": false,
+    "icon": [
+      "icons/icon.ico"
+    ]
+  }
+}
diff --git a/client/crates/client-core/Cargo.toml b/client/crates/client-core/Cargo.toml
new file mode 100644
index 0000000..fd631eb
--- /dev/null
+++ b/client/crates/client-core/Cargo.toml
@@ -0,0 +1,39 @@
+[package]
+name = "remotedesk-client-core"
+version.workspace = true
+edition.workspace = true
+license.workspace = true
+rust-version.workspace = true
+
+[lib]
+name = "remotedesk_client_core"
+path = "src/lib.rs"
+
+[dependencies]
+base64 = "0.22"
+getrandom = { version = "0.3", features = ["std"] }
+hmac = "=0.13.0"
+remotedesk-protocol = { path = "../../../protocol" }
+serde = { version = "1.0", features = ["derive"] }
+serde_json = "1.0"
+sha2 = "=0.11.0"
+zeroize = "1.8"
+
+[target.'cfg(windows)'.dependencies]
+windows-sys = { version = "0.61.2", features = [
+    "Win32_Foundation",
+    "Win32_Security",
+    "Win32_Security_Authorization",
+    "Win32_Storage_FileSystem",
+    "Win32_System_IO",
+    "Win32_System_JobObjects",
+    "Win32_System_Pipes",
+    "Win32_System_Threading",
+] }
+
+[lints.rust]
+unsafe_code = "allow"
+
+[lints.clippy]
+all = "warn"
+pedantic = "warn"
diff --git a/client/crates/client-core/src/credentials.rs b/client/crates/client-core/src/credentials.rs
new file mode 100644
index 0000000..95dc2c5
--- /dev/null
+++ b/client/crates/client-core/src/credentials.rs
@@ -0,0 +1,228 @@
+use std::fmt;
+
+/// Namespace used for application-owned Windows Credential Manager entries.
+pub const RDP_CREDENTIAL_TARGET_PREFIX: &str = "RemoteDesk/RDP/";
+
+const MAX_PROFILE_KEY_LENGTH: usize = 128;
+
+/// Opaque reference to an RDP credential owned by the OS credential store.
+///
+/// This is a lookup key, never a username, password, token, or serialized
+/// credential. Its custom [`Debug`] implementation intentionally redacts the
+/// target so diagnostics cannot disclose even the host/profile association.
+#[derive(Clone, PartialEq, Eq, Hash)]
+pub struct CredentialRef {
+    target: String,
+}
+
+impl CredentialRef {
+    /// Validates an application-owned credential target.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`CredentialRefError`] when the target is empty, outside the
+    /// `RemoteDesk/RDP/` namespace, too long, or has an unsafe profile key.
+    pub fn new(target: impl Into<String>) -> Result<Self, CredentialRefError> {
+        let target = target.into();
+        if target.is_empty() {
+            return Err(CredentialRefError::EmptyTarget);
+        }
+        let Some(profile_key) = target.strip_prefix(RDP_CREDENTIAL_TARGET_PREFIX) else {
+            return Err(CredentialRefError::InvalidNamespace);
+        };
+        if profile_key.is_empty() {
+            return Err(CredentialRefError::EmptyProfileKey);
+        }
+        if profile_key.len() > MAX_PROFILE_KEY_LENGTH {
+            return Err(CredentialRefError::ProfileKeyTooLong {
+                actual: profile_key.len(),
+                max: MAX_PROFILE_KEY_LENGTH,
+            });
+        }
+        if !profile_key.bytes().all(|byte| {
+            byte.is_ascii_alphanumeric() || matches!(byte, b'-' | b'_' | b'.' | b':' | b'@')
+        }) {
+            return Err(CredentialRefError::InvalidProfileKey);
+        }
+        Ok(Self { target })
+    }
+
+    /// Returns the non-secret OS credential target for a real platform adapter.
+    #[must_use]
+    pub fn target(&self) -> &str {
+        &self.target
+    }
+}
+
+impl fmt::Debug for CredentialRef {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        formatter.write_str("CredentialRef([redacted])")
+    }
+}
+
+/// Validation error for a credential-store lookup reference.
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum CredentialRefError {
+    EmptyTarget,
+    InvalidNamespace,
+    EmptyProfileKey,
+    ProfileKeyTooLong { actual: usize, max: usize },
+    InvalidProfileKey,
+}
+
+impl fmt::Display for CredentialRefError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        match self {
+            Self::EmptyTarget => formatter.write_str("credential target is empty"),
+            Self::InvalidNamespace => write!(
+                formatter,
+                "credential target must use the {RDP_CREDENTIAL_TARGET_PREFIX} namespace"
+            ),
+            Self::EmptyProfileKey => formatter.write_str("credential target profile key is empty"),
+            Self::ProfileKeyTooLong { actual, max } => write!(
+                formatter,
+                "credential target profile key length {actual} exceeds maximum {max}"
+            ),
+            Self::InvalidProfileKey => formatter.write_str(
+                "credential target profile key contains unsupported or control characters",
+            ),
+        }
+    }
+}
+
+impl std::error::Error for CredentialRefError {}
+
+/// Non-secret result of checking a credential reference in the OS store.
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum RdpCredentialStatus {
+    Unchecked,
+    Missing,
+    Ready,
+    NeedsUserUpdate,
+}
+
+/// The only RDP credential state that a host profile may retain.
+///
+/// A platform Credential Manager adapter may update [`Self::status`], but it
+/// must never put retrieved account or password material into this value.
+#[derive(Clone, PartialEq, Eq)]
+pub struct HostProfileCredentialBinding {
+    credential_ref: CredentialRef,
+    status: RdpCredentialStatus,
+}
+
+impl HostProfileCredentialBinding {
+    #[must_use]
+    pub const fn new(credential_ref: CredentialRef) -> Self {
+        Self {
+            credential_ref,
+            status: RdpCredentialStatus::Unchecked,
+        }
+    }
+
+    #[must_use]
+    pub const fn credential_ref(&self) -> &CredentialRef {
+        &self.credential_ref
+    }
+
+    #[must_use]
+    pub const fn status(&self) -> RdpCredentialStatus {
+        self.status
+    }
+
+    /// Records only non-secret availability metadata returned by an OS adapter.
+    pub const fn set_status(&mut self, status: RdpCredentialStatus) {
+        self.status = status;
+    }
+
+    /// Changes the OS lookup reference and invalidates the previous status.
+    pub fn replace(&mut self, credential_ref: CredentialRef) {
+        self.credential_ref = credential_ref;
+        self.status = RdpCredentialStatus::Unchecked;
+    }
+}
+
+impl fmt::Debug for HostProfileCredentialBinding {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        formatter
+            .debug_struct("HostProfileCredentialBinding")
+            .field("credential_ref", &"[redacted]")
+            .field("status", &self.status)
+            .finish()
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn valid_reference_is_an_opaque_application_target() {
+        let reference = CredentialRef::new("RemoteDesk/RDP/profile-123").unwrap();
+        assert_eq!(reference.target(), "RemoteDesk/RDP/profile-123");
+    }
+
+    #[test]
+    fn empty_foreign_and_unsafe_targets_fail_closed() {
+        assert_eq!(
+            CredentialRef::new("").unwrap_err(),
+            CredentialRefError::EmptyTarget
+        );
+        assert_eq!(
+            CredentialRef::new("RemoteDesk/RDP/").unwrap_err(),
+            CredentialRefError::EmptyProfileKey
+        );
+        assert_eq!(
+            CredentialRef::new("TERMSRV/server").unwrap_err(),
+            CredentialRefError::InvalidNamespace
+        );
+        assert_eq!(
+            CredentialRef::new("RemoteDesk/RDP/profile/other").unwrap_err(),
+            CredentialRefError::InvalidProfileKey
+        );
+        assert_eq!(
+            CredentialRef::new("RemoteDesk/RDP/profile\nsecret").unwrap_err(),
+            CredentialRefError::InvalidProfileKey
+        );
+    }
+
+    #[test]
+    fn oversized_target_is_rejected() {
+        let target = format!("{RDP_CREDENTIAL_TARGET_PREFIX}{}", "a".repeat(129));
+        assert_eq!(
+            CredentialRef::new(target).unwrap_err(),
+            CredentialRefError::ProfileKeyTooLong {
+                actual: 129,
+                max: 128,
+            }
+        );
+    }
+
+    #[test]
+    fn debug_output_redacts_target_and_contains_no_secret_fields() {
+        let marker = "sensitive-host-marker";
+        let reference = CredentialRef::new(format!("RemoteDesk/RDP/{marker}")).unwrap();
+        let binding = HostProfileCredentialBinding::new(reference.clone());
+
+        let reference_debug = format!("{reference:?}");
+        let binding_debug = format!("{binding:?}");
+        assert!(!reference_debug.contains(marker));
+        assert!(!binding_debug.contains(marker));
+        assert!(!reference_debug.to_ascii_lowercase().contains("password"));
+        assert!(!binding_debug.to_ascii_lowercase().contains("password"));
+    }
+
+    #[test]
+    fn profile_state_contains_only_reference_and_non_secret_status() {
+        let first = CredentialRef::new("RemoteDesk/RDP/first").unwrap();
+        let second = CredentialRef::new("RemoteDesk/RDP/second").unwrap();
+        let mut binding = HostProfileCredentialBinding::new(first);
+
+        assert_eq!(binding.status(), RdpCredentialStatus::Unchecked);
+        binding.set_status(RdpCredentialStatus::Ready);
+        assert_eq!(binding.status(), RdpCredentialStatus::Ready);
+        binding.replace(second.clone());
+        assert_eq!(binding.credential_ref(), &second);
+        assert_eq!(binding.status(), RdpCredentialStatus::Unchecked);
+    }
+}
diff --git a/client/crates/client-core/src/display.rs b/client/crates/client-core/src/display.rs
new file mode 100644
index 0000000..9ad2ca0
--- /dev/null
+++ b/client/crates/client-core/src/display.rs
@@ -0,0 +1,1076 @@
+use crate::{
+    AdapterId, D3d11PipelinePlan, GpuPolicy, PipelinePlanError, PipelineRequest,
+    plan_d3d11_pipeline,
+};
+use remotedesk_protocol::{
+    DisplayDescriptor, DisplayId, DisplayLayout, DisplayRect, DisplayScale, DisplaySelection,
+    DisplaySelectionError,
+};
+use std::fmt;
+
+/// Pixel dimensions of a canvas or viewport.
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub struct PixelSize {
+    pub width: u32,
+    pub height: u32,
+}
+
+/// Half-open rectangle in a normalized, non-negative client canvas.
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub struct CanvasRect {
+    pub x: u32,
+    pub y: u32,
+    pub width: u32,
+    pub height: u32,
+}
+
+impl CanvasRect {
+    fn pixel_count(self) -> Option<u64> {
+        u64::from(self.width).checked_mul(u64::from(self.height))
+    }
+}
+
+impl PixelSize {
+    #[must_use]
+    pub const fn new(width: u32, height: u32) -> Self {
+        Self { width, height }
+    }
+}
+
+/// Requested remote desktop sizing behavior.
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum DisplayResolution {
+    /// Keep the selected displays at their reported physical-pixel size.
+    SourceNative,
+    /// Fit the selected desktop inside the current local content viewport.
+    FollowWindow(PixelSize),
+    /// Fit the selected desktop inside an explicit pixel bound.
+    Fixed(PixelSize),
+}
+
+/// Hard limits applied before any helper allocates surfaces.
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub struct DisplayPlanLimits {
+    pub max_displays: usize,
+    pub max_total_pixels: u64,
+}
+
+impl Default for DisplayPlanLimits {
+    fn default() -> Self {
+        Self {
+            max_displays: 16,
+            max_total_pixels: 16 * 3_840 * 2_160,
+        }
+    }
+}
+
+/// The Windows output currently containing the session window.
+///
+/// `output_id` must identify the monitor independently from its adapter. A
+/// window move between two outputs on one adapter still requires viewport and
+/// path revalidation because DPI can differ.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct LocalWindowOutput {
+    pub output_id: String,
+    pub display_adapter: AdapterId,
+    pub scale: DisplayScale,
+}
+
+/// Display backend that will consume the normalized plan.
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum ClientDisplayBackend {
+    WindowsRdpDisplayControl,
+    LinuxNativeHelper,
+}
+
+/// Inputs needed to build one client display plan.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct ClientDisplayPlanRequest {
+    pub backend: ClientDisplayBackend,
+    pub remote_layout: DisplayLayout,
+    pub selection: DisplaySelection,
+    pub resolution: DisplayResolution,
+    pub limits: DisplayPlanLimits,
+    pub window_output: LocalWindowOutput,
+    pub gpu_policy: GpuPolicy,
+    pub decoder_adapter: AdapterId,
+    pub available_adapters: Vec<AdapterId>,
+}
+
+/// A selected display expressed in both source and normalized output spaces.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct PlannedDisplay {
+    pub display_id: DisplayId,
+    pub source_rect: DisplayRect,
+    /// Non-negative location in the selected source canvas.
+    pub normalized_source_rect: CanvasRect,
+    /// Non-negative location after the requested resolution has been applied.
+    pub output_rect: CanvasRect,
+    pub scale: DisplayScale,
+    /// Exactly one display in a plan is primary. If the remote primary was not
+    /// selected, the first selected display becomes the effective primary.
+    pub is_primary: bool,
+}
+
+/// Backend-independent layout consumed by input mapping and both video paths.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct NormalizedDisplayPlan {
+    pub remote_layout_generation: u64,
+    pub source_origin_x: i32,
+    pub source_origin_y: i32,
+    pub source_canvas: PixelSize,
+    pub output_canvas: PixelSize,
+    pub primary_display_id: DisplayId,
+    pub displays: Vec<PlannedDisplay>,
+}
+
+/// One monitor entry ready to map to an RDP Display Control Monitor Layout PDU.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct RdpMonitorLayout {
+    pub display_id: DisplayId,
+    /// Position relative to the effective primary monitor. RDP permits negative
+    /// coordinates while requiring the primary monitor to start at `(0, 0)`.
+    pub left: i32,
+    pub top: i32,
+    pub width: u32,
+    pub height: u32,
+    pub scale: DisplayScale,
+    pub is_primary: bool,
+}
+
+/// An explicit RDP Dynamic Monitor Layout update.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct RdpDisplayControlPlan {
+    pub generation: u64,
+    /// Primary is always first, as required by the RDP monitor-layout PDU.
+    pub monitors: Vec<RdpMonitorLayout>,
+    pub desktop_size: PixelSize,
+}
+
+/// An explicit request for the Linux native helper and Agent control channel.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct LinuxNativeDisplayPlan {
+    pub generation: u64,
+    pub remote_layout_generation: u64,
+    pub selected_display_ids: Vec<DisplayId>,
+    pub primary_display_id: DisplayId,
+    /// Agent-side encode/composite bound; this does not change physical modes.
+    pub encoded_canvas: PixelSize,
+}
+
+/// Backend-specific command derived from the common normalized layout.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub enum BackendDisplayPlan {
+    WindowsRdp(RdpDisplayControlPlan),
+    LinuxNative(LinuxNativeDisplayPlan),
+}
+
+/// Why the current generation needs fresh path and coordinate validation.
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum DisplayRevalidationReason {
+    InitialPlan,
+    RemoteTopology,
+    Selection,
+    Resolution,
+    WindowOutput,
+    GpuPipeline,
+    Backend,
+}
+
+/// A complete, policy-checked client plan.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct ClientDisplayPlan {
+    pub generation: u64,
+    pub revalidation_reasons: Vec<DisplayRevalidationReason>,
+    pub normalized_layout: NormalizedDisplayPlan,
+    pub window_output: LocalWindowOutput,
+    pub gpu_pipeline: D3d11PipelinePlan,
+    pub backend: BackendDisplayPlan,
+}
+
+impl ClientDisplayPlan {
+    #[must_use]
+    pub fn requires_revalidation(&self) -> bool {
+        !self.revalidation_reasons.is_empty()
+    }
+}
+
+#[derive(Debug, Clone, PartialEq, Eq)]
+struct PlanSnapshot {
+    backend: ClientDisplayBackend,
+    remote_layout_generation: u64,
+    selected_displays: Vec<DisplayDescriptor>,
+    selection: DisplaySelection,
+    resolution: DisplayResolution,
+    window_output: LocalWindowOutput,
+    gpu_pipeline: D3d11PipelinePlan,
+}
+
+/// Stateful planner that owns the client display generation.
+///
+/// Failed requests never mutate the planner. Repeating an identical valid
+/// request reuses the current generation; any relevant accepted change uses
+/// the next generation and reports its revalidation reasons.
+#[derive(Debug, Default)]
+pub struct ClientDisplayPlanner {
+    generation: u64,
+    last: Option<PlanSnapshot>,
+}
+
+impl ClientDisplayPlanner {
+    #[must_use]
+    pub const fn new() -> Self {
+        Self {
+            generation: 0,
+            last: None,
+        }
+    }
+
+    #[must_use]
+    pub const fn generation(&self) -> u64 {
+        self.generation
+    }
+
+    /// Validates and builds an RDP or Linux-native display plan.
+    ///
+    /// # Errors
+    ///
+    /// Fails closed for a stale/invalid selection, invalid local output,
+    /// monitor or pixel limit, unrepresentable normalization/scaling, GPU path
+    /// policy violation, or generation overflow.
+    pub fn plan(
+        &mut self,
+        request: ClientDisplayPlanRequest,
+    ) -> Result<ClientDisplayPlan, DisplayPlanError> {
+        validate_request_basics(&request)?;
+        let selected = request
+            .remote_layout
+            .selected_displays(&request.selection)
+            .map_err(DisplayPlanError::Selection)?;
+        validate_selected_limits(&selected, request.limits)?;
+
+        let normalized_layout = normalize_layout(
+            request.remote_layout.generation(),
+            &selected,
+            request.resolution,
+            request.limits,
+        )?;
+        let gpu_pipeline = plan_d3d11_pipeline(PipelineRequest {
+            policy: request.gpu_policy,
+            window_display_adapter: request.window_output.display_adapter.clone(),
+            decoder_adapter: request.decoder_adapter,
+            available_adapters: request.available_adapters,
+        })
+        .map_err(DisplayPlanError::GpuPipeline)?;
+
+        let snapshot = PlanSnapshot {
+            backend: request.backend,
+            remote_layout_generation: request.remote_layout.generation(),
+            selected_displays: selected.into_iter().cloned().collect(),
+            selection: request.selection,
+            resolution: request.resolution,
+            window_output: request.window_output.clone(),
+            gpu_pipeline: gpu_pipeline.clone(),
+        };
+        let reasons = revalidation_reasons(self.last.as_ref(), &snapshot);
+        let generation = if reasons.is_empty() {
+            self.generation
+        } else {
+            self.generation
+                .checked_add(1)
+                .ok_or(DisplayPlanError::GenerationOverflow)?
+        };
+        let backend = build_backend_plan(generation, request.backend, &normalized_layout)?;
+
+        self.generation = generation;
+        self.last = Some(snapshot);
+
+        Ok(ClientDisplayPlan {
+            generation,
+            revalidation_reasons: reasons,
+            normalized_layout,
+            window_output: request.window_output,
+            gpu_pipeline,
+            backend,
+        })
+    }
+}
+
+/// Stage whose aggregate pixels exceeded the configured budget.
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum PixelBudgetStage {
+    Source,
+    Output,
+}
+
+/// Public failure model for display planning.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub enum DisplayPlanError {
+    Selection(DisplaySelectionError),
+    EmptyWindowOutputId,
+    InvalidWindowOutputScale,
+    InvalidLimits,
+    TooManyDisplays {
+        actual: usize,
+        max: usize,
+    },
+    PixelBudgetExceeded {
+        stage: PixelBudgetStage,
+        actual: u64,
+        max: u64,
+    },
+    ZeroResolution,
+    EmptySelectedLayout,
+    MissingEffectivePrimary,
+    CanvasCoordinateOverflow,
+    ResolutionCollapsesDisplay(DisplayId),
+    RdpCoordinateOverflow(DisplayId),
+    GpuPipeline(PipelinePlanError),
+    GenerationOverflow,
+}
+
+impl fmt::Display for DisplayPlanError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        match self {
+            Self::Selection(error) => error.fmt(formatter),
+            Self::EmptyWindowOutputId => formatter.write_str("window output identity is empty"),
+            Self::InvalidWindowOutputScale => {
+                formatter.write_str("window output scale must have non-zero parts")
+            }
+            Self::InvalidLimits => formatter.write_str("display limits must be non-zero"),
+            Self::TooManyDisplays { actual, max } => {
+                write!(
+                    formatter,
+                    "selected {actual} displays; configured maximum is {max}"
+                )
+            }
+            Self::PixelBudgetExceeded { stage, actual, max } => write!(
+                formatter,
+                "{stage:?} display pixel count {actual} exceeds configured maximum {max}"
+            ),
+            Self::ZeroResolution => formatter.write_str("display resolution must be non-zero"),
+            Self::EmptySelectedLayout => {
+                formatter.write_str("selected display layout is unexpectedly empty")
+            }
+            Self::MissingEffectivePrimary => {
+                formatter.write_str("normalized display layout has no effective primary")
+            }
+            Self::CanvasCoordinateOverflow => {
+                formatter.write_str("selected display canvas cannot be represented")
+            }
+            Self::ResolutionCollapsesDisplay(id) => {
+                write!(
+                    formatter,
+                    "requested resolution collapses display {id:?} to zero pixels"
+                )
+            }
+            Self::RdpCoordinateOverflow(id) => {
+                write!(
+                    formatter,
+                    "RDP-relative coordinates overflow for display {id:?}"
+                )
+            }
+            Self::GpuPipeline(error) => error.fmt(formatter),
+            Self::GenerationOverflow => formatter.write_str("client display generation overflow"),
+        }
+    }
+}
+
+impl std::error::Error for DisplayPlanError {
+    fn source(&self) -> Option<&(dyn std::error::Error + 'static)> {
+        match self {
+            Self::Selection(error) => Some(error),
+            Self::GpuPipeline(error) => Some(error),
+            _ => None,
+        }
+    }
+}
+
+fn validate_request_basics(request: &ClientDisplayPlanRequest) -> Result<(), DisplayPlanError> {
+    if request.limits.max_displays == 0 || request.limits.max_total_pixels == 0 {
+        return Err(DisplayPlanError::InvalidLimits);
+    }
+    if request.window_output.output_id.is_empty() {
+        return Err(DisplayPlanError::EmptyWindowOutputId);
+    }
+    if request.window_output.scale.numerator == 0 || request.window_output.scale.denominator == 0 {
+        return Err(DisplayPlanError::InvalidWindowOutputScale);
+    }
+    if let DisplayResolution::FollowWindow(size) | DisplayResolution::Fixed(size) =
+        request.resolution
+        && (size.width == 0 || size.height == 0)
+    {
+        return Err(DisplayPlanError::ZeroResolution);
+    }
+    Ok(())
+}
+
+fn validate_selected_limits(
+    selected: &[&DisplayDescriptor],
+    limits: DisplayPlanLimits,
+) -> Result<(), DisplayPlanError> {
+    if selected.len() > limits.max_displays {
+        return Err(DisplayPlanError::TooManyDisplays {
+            actual: selected.len(),
+            max: limits.max_displays,
+        });
+    }
+
+    let total = selected.iter().try_fold(0_u64, |total, display| {
+        total.checked_add(display.rect.pixel_count()?)
+    });
+    let total = total.ok_or(DisplayPlanError::CanvasCoordinateOverflow)?;
+    if total > limits.max_total_pixels {
+        return Err(DisplayPlanError::PixelBudgetExceeded {
+            stage: PixelBudgetStage::Source,
+            actual: total,
+            max: limits.max_total_pixels,
+        });
+    }
+    Ok(())
+}
+
+fn normalize_layout(
+    remote_layout_generation: u64,
+    selected: &[&DisplayDescriptor],
+    resolution: DisplayResolution,
+    limits: DisplayPlanLimits,
+) -> Result<NormalizedDisplayPlan, DisplayPlanError> {
+    let first = selected
+        .first()
+        .copied()
+        .ok_or(DisplayPlanError::EmptySelectedLayout)?;
+    let min_x = selected
+        .iter()
+        .map(|display| display.rect.x)
+        .min()
+        .ok_or(DisplayPlanError::EmptySelectedLayout)?;
+    let min_y = selected
+        .iter()
+        .map(|display| display.rect.y)
+        .min()
+        .ok_or(DisplayPlanError::EmptySelectedLayout)?;
+    let max_x = selected
+        .iter()
+        .filter_map(|display| display.rect.right())
+        .max()
+        .ok_or(DisplayPlanError::CanvasCoordinateOverflow)?;
+    let max_y = selected
+        .iter()
+        .filter_map(|display| display.rect.bottom())
+        .max()
+        .ok_or(DisplayPlanError::CanvasCoordinateOverflow)?;
+    let source_canvas = PixelSize {
+        width: u32::try_from(i64::from(max_x) - i64::from(min_x))
+            .map_err(|_| DisplayPlanError::CanvasCoordinateOverflow)?,
+        height: u32::try_from(i64::from(max_y) - i64::from(min_y))
+            .map_err(|_| DisplayPlanError::CanvasCoordinateOverflow)?,
+    };
+    let output_canvas = fit_output_canvas(source_canvas, resolution)?;
+    let remote_primary = selected.iter().find(|display| display.is_primary).copied();
+    let primary_display_id = remote_primary.unwrap_or(first).id;
+    let mut output_total = 0_u64;
+    let mut displays = Vec::with_capacity(selected.len());
+
+    for display in selected {
+        let normalized_source_rect = CanvasRect {
+            x: u32::try_from(i64::from(display.rect.x) - i64::from(min_x))
+                .map_err(|_| DisplayPlanError::CanvasCoordinateOverflow)?,
+            y: u32::try_from(i64::from(display.rect.y) - i64::from(min_y))
+                .map_err(|_| DisplayPlanError::CanvasCoordinateOverflow)?,
+            width: display.rect.width,
+            height: display.rect.height,
+        };
+        let output_rect = scale_rect(
+            normalized_source_rect,
+            source_canvas,
+            output_canvas,
+            display.id,
+        )?;
+        output_total = output_total
+            .checked_add(
+                output_rect
+                    .pixel_count()
+                    .ok_or(DisplayPlanError::CanvasCoordinateOverflow)?,
+            )
+            .ok_or(DisplayPlanError::CanvasCoordinateOverflow)?;
+        displays.push(PlannedDisplay {
+            display_id: display.id,
+            source_rect: display.rect,
+            normalized_source_rect,
+            output_rect,
+            scale: display.scale,
+            is_primary: display.id == primary_display_id,
+        });
+    }
+
+    if output_total > limits.max_total_pixels {
+        return Err(DisplayPlanError::PixelBudgetExceeded {
+            stage: PixelBudgetStage::Output,
+            actual: output_total,
+            max: limits.max_total_pixels,
+        });
+    }
+
+    Ok(NormalizedDisplayPlan {
+        remote_layout_generation,
+        source_origin_x: min_x,
+        source_origin_y: min_y,
+        source_canvas,
+        output_canvas,
+        primary_display_id,
+        displays,
+    })
+}
+
+fn fit_output_canvas(
+    source: PixelSize,
+    resolution: DisplayResolution,
+) -> Result<PixelSize, DisplayPlanError> {
+    let bound = match resolution {
+        DisplayResolution::SourceNative => return Ok(source),
+        DisplayResolution::FollowWindow(bound) | DisplayResolution::Fixed(bound) => bound,
+    };
+    if bound.width == 0 || bound.height == 0 {
+        return Err(DisplayPlanError::ZeroResolution);
+    }
+
+    if u64::from(bound.width) * u64::from(source.height)
+        <= u64::from(bound.height) * u64::from(source.width)
+    {
+        Ok(PixelSize {
+            width: bound.width,
+            height: u32::try_from(
+                u64::from(source.height) * u64::from(bound.width) / u64::from(source.width),
+            )
+            .map_err(|_| DisplayPlanError::CanvasCoordinateOverflow)?,
+        })
+    } else {
+        Ok(PixelSize {
+            width: u32::try_from(
+                u64::from(source.width) * u64::from(bound.height) / u64::from(source.height),
+            )
+            .map_err(|_| DisplayPlanError::CanvasCoordinateOverflow)?,
+            height: bound.height,
+        })
+    }
+}
+
+fn scale_rect(
+    rect: CanvasRect,
+    source: PixelSize,
+    output: PixelSize,
+    display_id: DisplayId,
+) -> Result<CanvasRect, DisplayPlanError> {
+    let left = scale_edge(rect.x, output.width, source.width)?;
+    let top = scale_edge(rect.y, output.height, source.height)?;
+    let right = scale_edge(
+        rect.x
+            .checked_add(rect.width)
+            .ok_or(DisplayPlanError::CanvasCoordinateOverflow)?,
+        output.width,
+        source.width,
+    )?;
+    let bottom = scale_edge(
+        rect.y
+            .checked_add(rect.height)
+            .ok_or(DisplayPlanError::CanvasCoordinateOverflow)?,
+        output.height,
+        source.height,
+    )?;
+    let width = right - left;
+    let height = bottom - top;
+    if width == 0 || height == 0 {
+        return Err(DisplayPlanError::ResolutionCollapsesDisplay(display_id));
+    }
+    Ok(CanvasRect {
+        x: left,
+        y: top,
+        width,
+        height,
+    })
+}
+
+fn scale_edge(value: u32, output: u32, source: u32) -> Result<u32, DisplayPlanError> {
+    let scaled = u64::from(value)
+        .checked_mul(u64::from(output))
+        .ok_or(DisplayPlanError::CanvasCoordinateOverflow)?
+        / u64::from(source);
+    u32::try_from(scaled).map_err(|_| DisplayPlanError::CanvasCoordinateOverflow)
+}
+
+fn revalidation_reasons(
+    previous: Option<&PlanSnapshot>,
+    next: &PlanSnapshot,
+) -> Vec<DisplayRevalidationReason> {
+    let Some(previous) = previous else {
+        return vec![DisplayRevalidationReason::InitialPlan];
+    };
+    let mut reasons = Vec::new();
+    if previous.remote_layout_generation != next.remote_layout_generation
+        || previous.selected_displays != next.selected_displays
+    {
+        reasons.push(DisplayRevalidationReason::RemoteTopology);
+    }
+    if previous.selection != next.selection {
+        reasons.push(DisplayRevalidationReason::Selection);
+    }
+    if previous.resolution != next.resolution {
+        reasons.push(DisplayRevalidationReason::Resolution);
+    }
+    if previous.window_output != next.window_output {
+        reasons.push(DisplayRevalidationReason::WindowOutput);
+    }
+    if previous.gpu_pipeline != next.gpu_pipeline {
+        reasons.push(DisplayRevalidationReason::GpuPipeline);
+    }
+    if previous.backend != next.backend {
+        reasons.push(DisplayRevalidationReason::Backend);
+    }
+    reasons
+}
+
+fn build_backend_plan(
+    generation: u64,
+    backend: ClientDisplayBackend,
+    layout: &NormalizedDisplayPlan,
+) -> Result<BackendDisplayPlan, DisplayPlanError> {
+    match backend {
+        ClientDisplayBackend::WindowsRdpDisplayControl => {
+            let primary = layout
+                .displays
+                .iter()
+                .find(|display| display.is_primary)
+                .ok_or(DisplayPlanError::MissingEffectivePrimary)?;
+            let primary_x = i64::from(primary.output_rect.x);
+            let primary_y = i64::from(primary.output_rect.y);
+            let mut monitors = Vec::with_capacity(layout.displays.len());
+
+            for display in &layout.displays {
+                let monitor = RdpMonitorLayout {
+                    display_id: display.display_id,
+                    left: i32::try_from(i64::from(display.output_rect.x) - primary_x)
+                        .map_err(|_| DisplayPlanError::RdpCoordinateOverflow(display.display_id))?,
+                    top: i32::try_from(i64::from(display.output_rect.y) - primary_y)
+                        .map_err(|_| DisplayPlanError::RdpCoordinateOverflow(display.display_id))?,
+                    width: display.output_rect.width,
+                    height: display.output_rect.height,
+                    scale: display.scale,
+                    is_primary: display.is_primary,
+                };
+                if monitor.is_primary {
+                    monitors.insert(0, monitor);
+                } else {
+                    monitors.push(monitor);
+                }
+            }
+            Ok(BackendDisplayPlan::WindowsRdp(RdpDisplayControlPlan {
+                generation,
+                monitors,
+                desktop_size: layout.output_canvas,
+            }))
+        }
+        ClientDisplayBackend::LinuxNativeHelper => {
+            Ok(BackendDisplayPlan::LinuxNative(LinuxNativeDisplayPlan {
+                generation,
+                remote_layout_generation: layout.remote_layout_generation,
+                selected_display_ids: layout
+                    .displays
+                    .iter()
+                    .map(|display| display.display_id)
+                    .collect(),
+                primary_display_id: layout.primary_display_id,
+                encoded_canvas: layout.output_canvas,
+            }))
+        }
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::GpuSelection;
+    use remotedesk_protocol::{DISPLAY_ID_LENGTH, ZeroCopyPolicy};
+
+    fn id(value: u8) -> DisplayId {
+        DisplayId::from_bytes([value; DISPLAY_ID_LENGTH])
+    }
+
+    fn display(
+        value: u8,
+        rect: (i32, i32, u32, u32),
+        scale: DisplayScale,
+        primary: bool,
+    ) -> DisplayDescriptor {
+        DisplayDescriptor {
+            id: id(value),
+            rect: DisplayRect {
+                x: rect.0,
+                y: rect.1,
+                width: rect.2,
+                height: rect.3,
+            },
+            scale,
+            is_primary: primary,
+        }
+    }
+
+    fn topology(generation: u64) -> DisplayLayout {
+        DisplayLayout::new(
+            generation,
+            vec![
+                display(
+                    1,
+                    (-2_560, 0, 2_560, 1_440),
+                    DisplayScale {
+                        numerator: 5,
+                        denominator: 4,
+                    },
+                    false,
+                ),
+                display(2, (0, 0, 1_920, 1_080), DisplayScale::ONE, true),
+                display(
+                    3,
+                    (1_920, -1_080, 1_920, 1_080),
+                    DisplayScale {
+                        numerator: 3,
+                        denominator: 2,
+                    },
+                    false,
+                ),
+            ],
+        )
+        .unwrap()
+    }
+
+    fn adapter(value: &str) -> AdapterId {
+        AdapterId::new(value)
+    }
+
+    fn output(id: &str, adapter_id: &str, scale: DisplayScale) -> LocalWindowOutput {
+        LocalWindowOutput {
+            output_id: id.into(),
+            display_adapter: adapter(adapter_id),
+            scale,
+        }
+    }
+
+    fn request(
+        backend: ClientDisplayBackend,
+        generation: u64,
+        selection: DisplaySelection,
+    ) -> ClientDisplayPlanRequest {
+        ClientDisplayPlanRequest {
+            backend,
+            remote_layout: topology(generation),
+            selection,
+            resolution: DisplayResolution::SourceNative,
+            limits: DisplayPlanLimits::default(),
+            window_output: output("local-1", "gpu-0", DisplayScale::ONE),
+            gpu_policy: GpuPolicy::default(),
+            decoder_adapter: adapter("gpu-0"),
+            available_adapters: vec![adapter("gpu-0"), adapter("gpu-1")],
+        }
+    }
+
+    #[test]
+    fn all_displays_normalize_negative_coordinates_and_preserve_mixed_dpi() {
+        let mut planner = ClientDisplayPlanner::new();
+        let plan = planner
+            .plan(request(
+                ClientDisplayBackend::LinuxNativeHelper,
+                7,
+                DisplaySelection::all(7),
+            ))
+            .unwrap();
+
+        assert_eq!(plan.normalized_layout.source_origin_x, -2_560);
+        assert_eq!(plan.normalized_layout.source_origin_y, -1_080);
+        assert_eq!(
+            plan.normalized_layout.source_canvas,
+            PixelSize::new(6_400, 2_520)
+        );
+        assert_eq!(
+            plan.normalized_layout.displays[0].normalized_source_rect.x,
+            0
+        );
+        assert_eq!(
+            plan.normalized_layout.displays[0].normalized_source_rect.y,
+            1_080
+        );
+        assert_eq!(
+            plan.normalized_layout.displays[0].scale,
+            DisplayScale {
+                numerator: 5,
+                denominator: 4
+            }
+        );
+        assert_eq!(
+            plan.normalized_layout.displays[2].scale,
+            DisplayScale {
+                numerator: 3,
+                denominator: 2
+            }
+        );
+        assert_eq!(plan.normalized_layout.primary_display_id, id(2));
+    }
+
+    #[test]
+    fn single_display_becomes_effective_primary_and_linux_plan_is_explicit() {
+        let mut planner = ClientDisplayPlanner::new();
+        let plan = planner
+            .plan(request(
+                ClientDisplayBackend::LinuxNativeHelper,
+                9,
+                DisplaySelection::single(9, id(1)),
+            ))
+            .unwrap();
+
+        assert!(plan.normalized_layout.displays[0].is_primary);
+        assert_eq!(plan.normalized_layout.primary_display_id, id(1));
+        assert_eq!(
+            plan.backend,
+            BackendDisplayPlan::LinuxNative(LinuxNativeDisplayPlan {
+                generation: 1,
+                remote_layout_generation: 9,
+                selected_display_ids: vec![id(1)],
+                primary_display_id: id(1),
+                encoded_canvas: PixelSize::new(2_560, 1_440),
+            })
+        );
+    }
+
+    #[test]
+    fn custom_rdp_plan_puts_primary_first_and_uses_primary_relative_coordinates() {
+        let mut planner = ClientDisplayPlanner::new();
+        let plan = planner
+            .plan(request(
+                ClientDisplayBackend::WindowsRdpDisplayControl,
+                4,
+                DisplaySelection::custom(4, vec![id(1), id(2), id(3)]),
+            ))
+            .unwrap();
+        let BackendDisplayPlan::WindowsRdp(rdp) = plan.backend else {
+            panic!("expected RDP plan");
+        };
+
+        assert_eq!(rdp.monitors[0].display_id, id(2));
+        assert!(rdp.monitors[0].is_primary);
+        assert_eq!((rdp.monitors[0].left, rdp.monitors[0].top), (0, 0));
+        assert_eq!((rdp.monitors[1].left, rdp.monitors[1].top), (-2_560, 0));
+        assert_eq!((rdp.monitors[2].left, rdp.monitors[2].top), (1_920, -1_080));
+    }
+
+    #[test]
+    fn fixed_resolution_scales_canvas_without_discarding_layout() {
+        let mut planner = ClientDisplayPlanner::new();
+        let mut request = request(
+            ClientDisplayBackend::LinuxNativeHelper,
+            7,
+            DisplaySelection::all(7),
+        );
+        request.resolution = DisplayResolution::Fixed(PixelSize::new(3_200, 1_800));
+        let plan = planner.plan(request).unwrap();
+
+        assert_eq!(
+            plan.normalized_layout.output_canvas,
+            PixelSize::new(3_200, 1_260)
+        );
+        assert!(
+            plan.normalized_layout
+                .displays
+                .iter()
+                .all(|display| display.output_rect.width > 0 && display.output_rect.height > 0)
+        );
+    }
+
+    #[test]
+    fn display_count_and_source_pixel_budget_fail_before_generation_advances() {
+        let mut planner = ClientDisplayPlanner::new();
+        let mut too_many = request(
+            ClientDisplayBackend::LinuxNativeHelper,
+            1,
+            DisplaySelection::all(1),
+        );
+        too_many.limits.max_displays = 2;
+        assert_eq!(
+            planner.plan(too_many),
+            Err(DisplayPlanError::TooManyDisplays { actual: 3, max: 2 })
+        );
+        assert_eq!(planner.generation(), 0);
+
+        let mut too_large = request(
+            ClientDisplayBackend::LinuxNativeHelper,
+            1,
+            DisplaySelection::single(1, id(1)),
+        );
+        too_large.limits.max_total_pixels = 1_000;
+        assert!(matches!(
+            planner.plan(too_large),
+            Err(DisplayPlanError::PixelBudgetExceeded {
+                stage: PixelBudgetStage::Source,
+                ..
+            })
+        ));
+        assert_eq!(planner.generation(), 0);
+    }
+
+    #[test]
+    fn output_pixel_budget_rejects_large_upscale() {
+        let mut planner = ClientDisplayPlanner::new();
+        let mut request = request(
+            ClientDisplayBackend::LinuxNativeHelper,
+            1,
+            DisplaySelection::single(1, id(2)),
+        );
+        request.resolution = DisplayResolution::Fixed(PixelSize::new(7_680, 4_320));
+        request.limits.max_total_pixels = 10_000_000;
+
+        assert!(matches!(
+            planner.plan(request),
+            Err(DisplayPlanError::PixelBudgetExceeded {
+                stage: PixelBudgetStage::Output,
+                ..
+            })
+        ));
+    }
+
+    #[test]
+    fn generation_changes_for_topology_resolution_and_window_output() {
+        let mut planner = ClientDisplayPlanner::new();
+        let first = planner
+            .plan(request(
+                ClientDisplayBackend::LinuxNativeHelper,
+                1,
+                DisplaySelection::all(1),
+            ))
+            .unwrap();
+        assert_eq!(first.generation, 1);
+        assert_eq!(
+            first.revalidation_reasons,
+            vec![DisplayRevalidationReason::InitialPlan]
+        );
+
+        let unchanged = planner
+            .plan(request(
+                ClientDisplayBackend::LinuxNativeHelper,
+                1,
+                DisplaySelection::all(1),
+            ))
+            .unwrap();
+        assert_eq!(unchanged.generation, 1);
+        assert!(!unchanged.requires_revalidation());
+
+        let topology_changed = planner
+            .plan(request(
+                ClientDisplayBackend::LinuxNativeHelper,
+                2,
+                DisplaySelection::all(2),
+            ))
+            .unwrap();
+        assert_eq!(topology_changed.generation, 2);
+        assert!(
+            topology_changed
+                .revalidation_reasons
+                .contains(&DisplayRevalidationReason::RemoteTopology)
+        );
+
+        let mut resolution_changed = request(
+            ClientDisplayBackend::LinuxNativeHelper,
+            2,
+            DisplaySelection::all(2),
+        );
+        resolution_changed.resolution =
+            DisplayResolution::FollowWindow(PixelSize::new(1_920, 1_080));
+        let resolution_changed = planner.plan(resolution_changed).unwrap();
+        assert_eq!(resolution_changed.generation, 3);
+        assert_eq!(
+            resolution_changed.revalidation_reasons,
+            vec![DisplayRevalidationReason::Resolution]
+        );
+
+        let mut output_changed = request(
+            ClientDisplayBackend::LinuxNativeHelper,
+            2,
+            DisplaySelection::all(2),
+        );
+        output_changed.resolution = DisplayResolution::FollowWindow(PixelSize::new(1_920, 1_080));
+        output_changed.window_output = output(
+            "local-2",
+            "gpu-0",
+            DisplayScale {
+                numerator: 3,
+                denominator: 2,
+            },
+        );
+        let output_changed = planner.plan(output_changed).unwrap();
+        assert_eq!(output_changed.generation, 4);
+        assert_eq!(
+            output_changed.revalidation_reasons,
+            vec![DisplayRevalidationReason::WindowOutput]
+        );
+    }
+
+    #[test]
+    fn stale_remote_selection_is_public_error_and_does_not_advance_generation() {
+        let mut planner = ClientDisplayPlanner::new();
+        let error = planner
+            .plan(request(
+                ClientDisplayBackend::LinuxNativeHelper,
+                3,
+                DisplaySelection::all(2),
+            ))
+            .unwrap_err();
+
+        assert_eq!(
+            error,
+            DisplayPlanError::Selection(DisplaySelectionError::LayoutGenerationMismatch {
+                expected: 3,
+                actual: 2,
+            })
+        );
+        assert_eq!(planner.generation(), 0);
+    }
+
+    #[test]
+    fn strict_zero_copy_requires_window_decode_and_render_adapter_match() {
+        let mut planner = ClientDisplayPlanner::new();
+        let mut request = request(
+            ClientDisplayBackend::LinuxNativeHelper,
+            1,
+            DisplaySelection::single(1, id(2)),
+        );
+        request.gpu_policy = GpuPolicy {
+            selection: GpuSelection::Manual(adapter("gpu-1")),
+            zero_copy_policy: ZeroCopyPolicy::RequiredEndToEnd,
+        };
+        request.decoder_adapter = adapter("gpu-1");
+
+        assert!(matches!(
+            planner.plan(request),
+            Err(DisplayPlanError::GpuPipeline(
+                PipelinePlanError::CrossAdapterRejected { .. }
+            ))
+        ));
+        assert_eq!(planner.generation(), 0);
+    }
+
+    #[test]
+    fn compatibility_marks_cross_adapter_plan_without_claiming_zero_copy() {
+        let mut planner = ClientDisplayPlanner::new();
+        let mut request = request(
+            ClientDisplayBackend::WindowsRdpDisplayControl,
+            1,
+            DisplaySelection::single(1, id(2)),
+        );
+        request.gpu_policy = GpuPolicy {
+            selection: GpuSelection::Manual(adapter("gpu-1")),
+            zero_copy_policy: ZeroCopyPolicy::Compatibility,
+        };
+        request.decoder_adapter = adapter("gpu-1");
+        let plan = planner.plan(request).unwrap();
+
+        assert!(!plan.gpu_pipeline.is_zero_copy_candidate());
+        assert_eq!(plan.gpu_pipeline.display_adapter, adapter("gpu-0"));
+    }
+}
diff --git a/client/crates/client-core/src/gpu.rs b/client/crates/client-core/src/gpu.rs
new file mode 100644
index 0000000..baf3838
--- /dev/null
+++ b/client/crates/client-core/src/gpu.rs
@@ -0,0 +1,255 @@
+use remotedesk_protocol::{MemoryPathStatus, ZeroCopyPolicy};
+use std::fmt;
+
+#[derive(Debug, Clone, PartialEq, Eq, Hash)]
+pub struct AdapterId(String);
+
+impl AdapterId {
+    pub fn new(value: impl Into<String>) -> Self {
+        Self(value.into())
+    }
+
+    #[must_use]
+    pub fn as_str(&self) -> &str {
+        &self.0
+    }
+}
+
+impl fmt::Display for AdapterId {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        self.0.fmt(formatter)
+    }
+}
+
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub enum GpuSelection {
+    WindowDisplayAdapter,
+    Manual(AdapterId),
+}
+
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct GpuPolicy {
+    pub selection: GpuSelection,
+    pub zero_copy_policy: ZeroCopyPolicy,
+}
+
+impl Default for GpuPolicy {
+    fn default() -> Self {
+        Self {
+            selection: GpuSelection::WindowDisplayAdapter,
+            zero_copy_policy: ZeroCopyPolicy::RequiredEndToEnd,
+        }
+    }
+}
+
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct PipelineRequest {
+    pub policy: GpuPolicy,
+    pub window_display_adapter: AdapterId,
+    pub decoder_adapter: AdapterId,
+    pub available_adapters: Vec<AdapterId>,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct D3d11PipelinePlan {
+    pub decode_adapter: AdapterId,
+    pub render_adapter: AdapterId,
+    pub display_adapter: AdapterId,
+    pub planned_memory_path: MemoryPathStatus,
+    pub zero_copy_policy: ZeroCopyPolicy,
+}
+
+impl D3d11PipelinePlan {
+    #[must_use]
+    pub fn is_zero_copy_candidate(&self) -> bool {
+        self.planned_memory_path.satisfies_strict_zero_copy()
+    }
+}
+
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub enum PipelinePlanError {
+    AdapterUnavailable(AdapterId),
+    CrossAdapterRejected {
+        decode_adapter: AdapterId,
+        render_adapter: AdapterId,
+        display_adapter: AdapterId,
+    },
+}
+
+impl fmt::Display for PipelinePlanError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        match self {
+            Self::AdapterUnavailable(adapter) => {
+                write!(formatter, "selected adapter {adapter} is unavailable")
+            }
+            Self::CrossAdapterRejected {
+                decode_adapter,
+                render_adapter,
+                display_adapter,
+            } => write!(
+                formatter,
+                "RequiredEndToEnd policy rejects decode adapter {decode_adapter} -> render adapter {render_adapter} -> display adapter {display_adapter} path"
+            ),
+        }
+    }
+}
+
+impl std::error::Error for PipelinePlanError {}
+
+/// Builds a policy-only D3D11 pipeline plan without creating GPU resources.
+///
+/// # Errors
+///
+/// Returns [`PipelinePlanError::AdapterUnavailable`] when a selected adapter
+/// is absent, or [`PipelinePlanError::CrossAdapterRejected`] when an end-to-end
+/// zero-copy policy would require an inter-adapter transfer.
+pub fn plan_d3d11_pipeline(
+    request: PipelineRequest,
+) -> Result<D3d11PipelinePlan, PipelinePlanError> {
+    let render_adapter = match &request.policy.selection {
+        GpuSelection::WindowDisplayAdapter => request.window_display_adapter.clone(),
+        GpuSelection::Manual(adapter) => adapter.clone(),
+    };
+    let display_adapter = request.window_display_adapter;
+
+    if !request.available_adapters.contains(&render_adapter) {
+        return Err(PipelinePlanError::AdapterUnavailable(render_adapter));
+    }
+    if !request
+        .available_adapters
+        .contains(&request.decoder_adapter)
+    {
+        return Err(PipelinePlanError::AdapterUnavailable(
+            request.decoder_adapter,
+        ));
+    }
+    if !request.available_adapters.contains(&display_adapter) {
+        return Err(PipelinePlanError::AdapterUnavailable(display_adapter));
+    }
+
+    let planned_memory_path =
+        if request.decoder_adapter == render_adapter && render_adapter == display_adapter {
+            MemoryPathStatus::CpuCopyFree
+        } else {
+            MemoryPathStatus::CrossAdapterCopy
+        };
+
+    if request.policy.zero_copy_policy == ZeroCopyPolicy::RequiredEndToEnd
+        && !planned_memory_path.satisfies_strict_zero_copy()
+    {
+        return Err(PipelinePlanError::CrossAdapterRejected {
+            decode_adapter: request.decoder_adapter,
+            render_adapter,
+            display_adapter,
+        });
+    }
+
+    Ok(D3d11PipelinePlan {
+        decode_adapter: request.decoder_adapter,
+        render_adapter,
+        display_adapter,
+        planned_memory_path,
+        zero_copy_policy: request.policy.zero_copy_policy,
+    })
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn adapter(value: &str) -> AdapterId {
+        AdapterId::new(value)
+    }
+
+    #[test]
+    fn default_policy_uses_window_display_adapter() {
+        let plan = plan_d3d11_pipeline(PipelineRequest {
+            policy: GpuPolicy::default(),
+            window_display_adapter: adapter("display-gpu"),
+            decoder_adapter: adapter("display-gpu"),
+            available_adapters: vec![adapter("display-gpu"), adapter("other")],
+        })
+        .unwrap();
+
+        assert_eq!(plan.render_adapter, adapter("display-gpu"));
+        assert_eq!(plan.display_adapter, adapter("display-gpu"));
+        assert!(plan.is_zero_copy_candidate());
+    }
+
+    #[test]
+    fn required_end_to_end_manual_adapter_must_match_display_adapter() {
+        let error = plan_d3d11_pipeline(PipelineRequest {
+            policy: GpuPolicy {
+                selection: GpuSelection::Manual(adapter("manual-gpu")),
+                zero_copy_policy: ZeroCopyPolicy::RequiredEndToEnd,
+            },
+            window_display_adapter: adapter("display-gpu"),
+            decoder_adapter: adapter("manual-gpu"),
+            available_adapters: vec![adapter("display-gpu"), adapter("manual-gpu")],
+        })
+        .unwrap_err();
+
+        assert_eq!(
+            error,
+            PipelinePlanError::CrossAdapterRejected {
+                decode_adapter: adapter("manual-gpu"),
+                render_adapter: adapter("manual-gpu"),
+                display_adapter: adapter("display-gpu"),
+            }
+        );
+    }
+
+    #[test]
+    fn required_end_to_end_policy_rejects_cross_adapter_transfer() {
+        let error = plan_d3d11_pipeline(PipelineRequest {
+            policy: GpuPolicy::default(),
+            window_display_adapter: adapter("render"),
+            decoder_adapter: adapter("decode"),
+            available_adapters: vec![adapter("render"), adapter("decode")],
+        })
+        .unwrap_err();
+
+        assert!(matches!(
+            error,
+            PipelinePlanError::CrossAdapterRejected { .. }
+        ));
+    }
+
+    #[test]
+    fn compatibility_policy_marks_cross_adapter_copy() {
+        let plan = plan_d3d11_pipeline(PipelineRequest {
+            policy: GpuPolicy {
+                selection: GpuSelection::WindowDisplayAdapter,
+                zero_copy_policy: ZeroCopyPolicy::Compatibility,
+            },
+            window_display_adapter: adapter("render"),
+            decoder_adapter: adapter("decode"),
+            available_adapters: vec![adapter("render"), adapter("decode")],
+        })
+        .unwrap();
+
+        assert_eq!(plan.planned_memory_path, MemoryPathStatus::CrossAdapterCopy);
+        assert_eq!(plan.zero_copy_policy, ZeroCopyPolicy::Compatibility);
+        assert!(!plan.is_zero_copy_candidate());
+    }
+
+    #[test]
+    fn compatibility_allows_manual_render_adapter_to_differ_from_display() {
+        let plan = plan_d3d11_pipeline(PipelineRequest {
+            policy: GpuPolicy {
+                selection: GpuSelection::Manual(adapter("manual-gpu")),
+                zero_copy_policy: ZeroCopyPolicy::Compatibility,
+            },
+            window_display_adapter: adapter("display-gpu"),
+            decoder_adapter: adapter("manual-gpu"),
+            available_adapters: vec![adapter("display-gpu"), adapter("manual-gpu")],
+        })
+        .unwrap();
+
+        assert_eq!(plan.decode_adapter, adapter("manual-gpu"));
+        assert_eq!(plan.render_adapter, adapter("manual-gpu"));
+        assert_eq!(plan.display_adapter, adapter("display-gpu"));
+        assert_eq!(plan.planned_memory_path, MemoryPathStatus::CrossAdapterCopy);
+        assert!(!plan.is_zero_copy_candidate());
+    }
+}
diff --git a/client/crates/client-core/src/helper_job.rs b/client/crates/client-core/src/helper_job.rs
new file mode 100644
index 0000000..b47db8d
--- /dev/null
+++ b/client/crates/client-core/src/helper_job.rs
@@ -0,0 +1,128 @@
+use std::{fmt, io};
+
+#[cfg(windows)]
+use std::{
+    fs::File,
+    mem,
+    os::windows::io::{AsRawHandle as _, FromRawHandle as _, RawHandle},
+    ptr,
+};
+
+#[cfg(windows)]
+use windows_sys::Win32::{
+    Foundation::HANDLE,
+    System::{
+        JobObjects::{
+            AssignProcessToJobObject, CreateJobObjectW, JOB_OBJECT_LIMIT_KILL_ON_JOB_CLOSE,
+            JOBOBJECT_EXTENDED_LIMIT_INFORMATION, JobObjectExtendedLimitInformation,
+            SetInformationJobObject, TerminateJobObject,
+        },
+        Threading::{OpenProcess, PROCESS_SET_QUOTA, PROCESS_TERMINATE},
+    },
+};
+
+pub struct HelperJob {
+    #[cfg(windows)]
+    handle: File,
+}
+
+impl fmt::Debug for HelperJob {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        formatter.debug_struct("HelperJob").finish_non_exhaustive()
+    }
+}
+
+impl HelperJob {
+    #[cfg(windows)]
+    pub fn create_and_assign(pid: u32) -> io::Result<Self> {
+        // SAFETY: null security attributes and name create a private unnamed job handle.
+        let job = unsafe { CreateJobObjectW(ptr::null(), ptr::null()) };
+        if job.is_null() {
+            return Err(io::Error::last_os_error());
+        }
+        // SAFETY: CreateJobObjectW returned an owned kernel handle.
+        let handle = unsafe { File::from_raw_handle(job as RawHandle) };
+        let mut limits = JOBOBJECT_EXTENDED_LIMIT_INFORMATION::default();
+        limits.BasicLimitInformation.LimitFlags = JOB_OBJECT_LIMIT_KILL_ON_JOB_CLOSE;
+        let limits_size =
+            u32::try_from(mem::size_of_val(&limits)).expect("job limit information size fits u32");
+        // SAFETY: the job handle and immutable limit structure are valid for the call.
+        if unsafe {
+            SetInformationJobObject(
+                handle.as_raw_handle() as HANDLE,
+                JobObjectExtendedLimitInformation,
+                ptr::from_ref(&limits).cast(),
+                limits_size,
+            )
+        } == 0
+        {
+            return Err(io::Error::last_os_error());
+        }
+
+        // AssignProcessToJobObject requires PROCESS_SET_QUOTA and PROCESS_TERMINATE.
+        // SAFETY: OpenProcess returns an owned handle or null.
+        let process = unsafe { OpenProcess(PROCESS_SET_QUOTA | PROCESS_TERMINATE, 0, pid) };
+        if process.is_null() {
+            return Err(io::Error::last_os_error());
+        }
+        // SAFETY: OpenProcess returned an owned process handle.
+        let process = unsafe { File::from_raw_handle(process as RawHandle) };
+        // SAFETY: both handles are live and the process was opened with required access rights.
+        if unsafe {
+            AssignProcessToJobObject(
+                handle.as_raw_handle() as HANDLE,
+                process.as_raw_handle() as HANDLE,
+            )
+        } == 0
+        {
+            return Err(io::Error::last_os_error());
+        }
+        Ok(Self { handle })
+    }
+
+    #[cfg(not(windows))]
+    pub fn create_and_assign(_pid: u32) -> io::Result<Self> {
+        Err(io::Error::new(
+            io::ErrorKind::Unsupported,
+            "helper Job Objects require Windows",
+        ))
+    }
+
+    #[cfg(windows)]
+    pub fn terminate(&self, exit_code: u32) -> io::Result<()> {
+        // SAFETY: handle is a live Job Object owned by this wrapper.
+        if unsafe { TerminateJobObject(self.handle.as_raw_handle() as HANDLE, exit_code) } == 0 {
+            return Err(io::Error::last_os_error());
+        }
+        Ok(())
+    }
+
+    #[cfg(not(windows))]
+    pub fn terminate(&self, _exit_code: u32) -> io::Result<()> {
+        Err(io::Error::new(
+            io::ErrorKind::Unsupported,
+            "helper Job Objects require Windows",
+        ))
+    }
+}
+
+#[cfg(all(test, windows))]
+mod tests {
+    use super::*;
+    use std::process::{Command, Stdio};
+
+    #[test]
+    fn job_termination_stops_an_assigned_process() {
+        let mut child = Command::new("ping.exe")
+            .args(["-n", "30", "127.0.0.1"])
+            .stdin(Stdio::null())
+            .stdout(Stdio::null())
+            .stderr(Stdio::null())
+            .spawn()
+            .unwrap();
+        let job = HelperJob::create_and_assign(child.id()).unwrap();
+        job.terminate(23).unwrap();
+        let status = child.wait().unwrap();
+        assert!(!status.success());
+    }
+}
diff --git a/client/crates/client-core/src/lib.rs b/client/crates/client-core/src/lib.rs
new file mode 100644
index 0000000..1bb0101
--- /dev/null
+++ b/client/crates/client-core/src/lib.rs
@@ -0,0 +1,49 @@
+//! Pure client-side policy and state models.
+//!
+//! Windows-only integration in this crate owns the authenticated local Named
+//! Pipe boundary shared by the control service and native helpers. Rendering
+//! and remote transport remain outside this crate.
+
+mod credentials;
+mod display;
+mod gpu;
+mod helper_job;
+mod pipe_peer;
+mod reachability;
+mod render_report;
+mod secure_pipe;
+mod session;
+
+pub use credentials::{
+    CredentialRef, CredentialRefError, HostProfileCredentialBinding, RDP_CREDENTIAL_TARGET_PREFIX,
+    RdpCredentialStatus,
+};
+pub use display::{
+    BackendDisplayPlan, CanvasRect, ClientDisplayBackend, ClientDisplayPlan,
+    ClientDisplayPlanRequest, ClientDisplayPlanner, DisplayPlanError, DisplayPlanLimits,
+    DisplayResolution, DisplayRevalidationReason, LinuxNativeDisplayPlan, LocalWindowOutput,
+    NormalizedDisplayPlan, PixelBudgetStage, PixelSize, PlannedDisplay, RdpDisplayControlPlan,
+    RdpMonitorLayout,
+};
+pub use gpu::{
+    AdapterId, D3d11PipelinePlan, GpuPolicy, GpuSelection, PipelinePlanError, PipelineRequest,
+    plan_d3d11_pipeline,
+};
+pub use helper_job::HelperJob;
+pub use pipe_peer::{
+    ChallengeMacVerification, HelperProcessIdentity, PipePeerError, PipePeerVerifier,
+    SessionMaterial, VerifiedPipePeer,
+};
+pub use reachability::{DEFAULT_RDP_PORT, RdpEndpoint, RdpEndpointError};
+pub use remotedesk_protocol::{
+    ClientRenderPathReport, DisplayDescriptor, DisplayId, DisplayLayout, DisplayLayoutError,
+    DisplayRect, DisplayScale, DisplaySelection, DisplaySelectionError, DisplaySelectionMode,
+    MemoryPathStatus, MemorySurfaceType, PathReportBinding, VerificationSource, ZeroCopyPolicy,
+};
+pub use render_report::{ClientRenderReportIngress, RenderReportPayload};
+pub use secure_pipe::{
+    PIPE_BOOTSTRAP_KEY_ENV, RdpViewerLaunchConfig, SecurePipeBootstrap, SecurePipeClientSession,
+    SecurePipeServer, current_process_identity, process_identity, receive_secure_pipe_payload,
+    receive_secure_pipe_session,
+};
+pub use session::{SessionError, SessionMachine, SessionState};
diff --git a/client/crates/client-core/src/pipe_peer.rs b/client/crates/client-core/src/pipe_peer.rs
new file mode 100644
index 0000000..77bca5e
--- /dev/null
+++ b/client/crates/client-core/src/pipe_peer.rs
@@ -0,0 +1,229 @@
+use std::fmt;
+
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct HelperProcessIdentity {
+    pub pid: u32,
+    /// An opaque token obtained from the OS process creation time/identity API.
+    pub creation_token: u64,
+    pub build_hash: String,
+}
+
+impl HelperProcessIdentity {
+    pub fn new(pid: u32, creation_token: u64, build_hash: impl Into<String>) -> Self {
+        Self {
+            pid,
+            creation_token,
+            build_hash: build_hash.into(),
+        }
+    }
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum ChallengeMacVerification {
+    Verified,
+    Rejected,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub enum PipePeerError {
+    NotAuthenticated,
+    PidMismatch { expected: u32, actual: u32 },
+    CreationTokenMismatch,
+    BuildHashMismatch,
+    ChallengeMacRejected,
+}
+
+impl fmt::Display for PipePeerError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        match self {
+            Self::NotAuthenticated => formatter.write_str("pipe peer is not authenticated"),
+            Self::PidMismatch { expected, actual } => {
+                write!(
+                    formatter,
+                    "pipe peer PID mismatch: expected {expected}, got {actual}"
+                )
+            }
+            Self::CreationTokenMismatch => {
+                formatter.write_str("pipe peer process creation token mismatch")
+            }
+            Self::BuildHashMismatch => formatter.write_str("pipe peer build hash mismatch"),
+            Self::ChallengeMacRejected => {
+                formatter.write_str("pipe challenge MAC was not verified")
+            }
+        }
+    }
+}
+
+impl std::error::Error for PipePeerError {}
+
+#[derive(Clone, PartialEq, Eq)]
+pub struct SessionMaterial(Vec<u8>);
+
+impl fmt::Debug for SessionMaterial {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        formatter
+            .debug_struct("SessionMaterial")
+            .field("bytes", &"[REDACTED]")
+            .finish()
+    }
+}
+
+impl SessionMaterial {
+    pub fn new(bytes: impl Into<Vec<u8>>) -> Self {
+        Self(bytes.into())
+    }
+
+    #[must_use]
+    pub fn expose_to_verified_peer<'a>(&'a self, _peer: &VerifiedPipePeer) -> &'a [u8] {
+        &self.0
+    }
+}
+
+#[derive(Debug, Clone)]
+pub struct PipePeerVerifier {
+    expected: HelperProcessIdentity,
+    verified_peer: Option<VerifiedPipePeer>,
+}
+
+impl PipePeerVerifier {
+    #[must_use]
+    pub fn new(expected: HelperProcessIdentity) -> Self {
+        Self {
+            expected,
+            verified_peer: None,
+        }
+    }
+
+    /// Authenticates the connected pipe peer against process and challenge evidence.
+    ///
+    /// # Errors
+    ///
+    /// Returns a [`PipePeerError`] when any expected identity field differs or
+    /// the challenge MAC was not verified. A failed attempt clears prior peer
+    /// authentication state.
+    pub fn authenticate(
+        &mut self,
+        actual: HelperProcessIdentity,
+        challenge_mac: ChallengeMacVerification,
+    ) -> Result<&VerifiedPipePeer, PipePeerError> {
+        self.verified_peer = None;
+
+        if actual.pid != self.expected.pid {
+            return Err(PipePeerError::PidMismatch {
+                expected: self.expected.pid,
+                actual: actual.pid,
+            });
+        }
+        if actual.creation_token != self.expected.creation_token {
+            return Err(PipePeerError::CreationTokenMismatch);
+        }
+        if actual.build_hash != self.expected.build_hash {
+            return Err(PipePeerError::BuildHashMismatch);
+        }
+        if challenge_mac != ChallengeMacVerification::Verified {
+            return Err(PipePeerError::ChallengeMacRejected);
+        }
+
+        self.verified_peer = Some(VerifiedPipePeer { identity: actual });
+        self.verified_peer()
+    }
+
+    /// Returns the authenticated peer for this verifier.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`PipePeerError::NotAuthenticated`] until authentication has
+    /// completed successfully, and after any failed reauthentication attempt.
+    pub fn verified_peer(&self) -> Result<&VerifiedPipePeer, PipePeerError> {
+        self.verified_peer
+            .as_ref()
+            .ok_or(PipePeerError::NotAuthenticated)
+    }
+
+    /// Exposes session material only after successful pipe peer authentication.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`PipePeerError::NotAuthenticated`] when no authenticated peer
+    /// is currently bound to the verifier.
+    pub fn session_material<'a>(
+        &self,
+        material: &'a SessionMaterial,
+    ) -> Result<&'a [u8], PipePeerError> {
+        let peer = self.verified_peer()?;
+        Ok(material.expose_to_verified_peer(peer))
+    }
+}
+
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct VerifiedPipePeer {
+    identity: HelperProcessIdentity,
+}
+
+impl VerifiedPipePeer {
+    #[must_use]
+    pub fn identity(&self) -> &HelperProcessIdentity {
+        &self.identity
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn identity() -> HelperProcessIdentity {
+        HelperProcessIdentity::new(41, 9001, "build-a")
+    }
+
+    #[test]
+    fn session_material_is_unavailable_before_authentication() {
+        let verifier = PipePeerVerifier::new(identity());
+        let material = SessionMaterial::new(b"secret".to_vec());
+        assert_eq!(
+            verifier.session_material(&material),
+            Err(PipePeerError::NotAuthenticated)
+        );
+    }
+
+    #[test]
+    fn all_identity_fields_and_mac_must_match() {
+        let variants = [
+            (
+                HelperProcessIdentity::new(42, 9001, "build-a"),
+                ChallengeMacVerification::Verified,
+            ),
+            (
+                HelperProcessIdentity::new(41, 9002, "build-a"),
+                ChallengeMacVerification::Verified,
+            ),
+            (
+                HelperProcessIdentity::new(41, 9001, "build-b"),
+                ChallengeMacVerification::Verified,
+            ),
+            (identity(), ChallengeMacVerification::Rejected),
+        ];
+
+        for (actual, mac) in variants {
+            let mut verifier = PipePeerVerifier::new(identity());
+            assert!(verifier.authenticate(actual, mac).is_err());
+            assert_eq!(
+                verifier.verified_peer(),
+                Err(PipePeerError::NotAuthenticated)
+            );
+        }
+    }
+
+    #[test]
+    fn verified_peer_can_receive_session_material() {
+        let mut verifier = PipePeerVerifier::new(identity());
+        verifier
+            .authenticate(identity(), ChallengeMacVerification::Verified)
+            .unwrap();
+        let material = SessionMaterial::new(b"session-ticket".to_vec());
+        assert_eq!(
+            verifier.session_material(&material).unwrap(),
+            b"session-ticket"
+        );
+        assert!(!format!("{material:?}").contains("session-ticket"));
+    }
+}
diff --git a/client/crates/client-core/src/reachability.rs b/client/crates/client-core/src/reachability.rs
new file mode 100644
index 0000000..8ffc559
--- /dev/null
+++ b/client/crates/client-core/src/reachability.rs
@@ -0,0 +1,405 @@
+use std::fmt;
+use std::net::{IpAddr, Ipv6Addr};
+use std::str::FromStr;
+
+/// Default Windows Remote Desktop service port.
+pub const DEFAULT_RDP_PORT: u16 = 3389;
+
+const MAX_HOST_LENGTH: usize = 253;
+
+/// A validated network endpoint for an RDP reachability probe.
+///
+/// The type contains no credentials. Its [`Debug`] and [`fmt::Display`]
+/// implementations redact the host so a diagnostic log cannot disclose a
+/// user-configured address accidentally. Network adapters must opt in to host
+/// access through [`Self::host`].
+#[derive(Clone, PartialEq, Eq, Hash)]
+pub struct RdpEndpoint {
+    host: String,
+    port: u16,
+}
+
+impl RdpEndpoint {
+    /// Parses a hostname or IP endpoint, using port 3389 when omitted.
+    ///
+    /// Accepted forms include `host`, `host:port`, `192.0.2.1`, bare IPv6 with
+    /// the default port, and `[2001:db8::1]:port`. An IPv6 address with an
+    /// explicit port must use brackets.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`RdpEndpointError`] for URI schemes, paths, whitespace,
+    /// controls, empty/invalid hosts, malformed bracketed IPv6, or a missing,
+    /// zero, non-numeric, or out-of-range port.
+    pub fn parse(target: &str) -> Result<Self, RdpEndpointError> {
+        validate_target_text(target)?;
+
+        let (host, port) = if target.starts_with('[') {
+            parse_bracketed_ipv6(target)?
+        } else {
+            parse_unbracketed_target(target)?
+        };
+
+        Ok(Self {
+            host: host.to_owned(),
+            port,
+        })
+    }
+
+    /// Returns the validated hostname or unbracketed IP literal.
+    #[must_use]
+    pub fn host(&self) -> &str {
+        &self.host
+    }
+
+    /// Returns the explicit or defaulted TCP port.
+    #[must_use]
+    pub const fn port(&self) -> u16 {
+        self.port
+    }
+}
+
+impl FromStr for RdpEndpoint {
+    type Err = RdpEndpointError;
+
+    fn from_str(target: &str) -> Result<Self, Self::Err> {
+        Self::parse(target)
+    }
+}
+
+impl fmt::Debug for RdpEndpoint {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        formatter
+            .debug_struct("RdpEndpoint")
+            .field("host", &"[redacted]")
+            .field("port", &self.port)
+            .finish()
+    }
+}
+
+impl fmt::Display for RdpEndpoint {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        write!(formatter, "[redacted]:{}", self.port)
+    }
+}
+
+/// Fail-close reason for an untrusted RDP endpoint string.
+///
+/// Variants intentionally contain no part of the rejected input, making both
+/// derived [`Debug`] and [`fmt::Display`] safe for diagnostics.
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum RdpEndpointError {
+    EmptyTarget,
+    ControlCharacter,
+    Whitespace,
+    SchemeNotAllowed,
+    PathOrQueryNotAllowed,
+    EmptyHost,
+    HostTooLong,
+    InvalidHost,
+    MalformedBracketedIpv6,
+    InvalidIpv6Literal,
+    InvalidPort,
+}
+
+impl fmt::Display for RdpEndpointError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        let message = match self {
+            Self::EmptyTarget => "RDP target is empty",
+            Self::ControlCharacter => "RDP target contains a control character",
+            Self::Whitespace => "RDP target contains whitespace",
+            Self::SchemeNotAllowed => "RDP target must not contain a URI scheme",
+            Self::PathOrQueryNotAllowed => "RDP target must not contain a path, query, or fragment",
+            Self::EmptyHost => "RDP target host is empty",
+            Self::HostTooLong => "RDP target host is too long",
+            Self::InvalidHost => "RDP target host is invalid",
+            Self::MalformedBracketedIpv6 => "bracketed IPv6 RDP target is malformed",
+            Self::InvalidIpv6Literal => "bracketed RDP target is not a valid IPv6 address",
+            Self::InvalidPort => "RDP target port is invalid",
+        };
+        formatter.write_str(message)
+    }
+}
+
+impl std::error::Error for RdpEndpointError {}
+
+fn validate_target_text(target: &str) -> Result<(), RdpEndpointError> {
+    if target.is_empty() {
+        return Err(RdpEndpointError::EmptyTarget);
+    }
+    if target.chars().any(char::is_control) {
+        return Err(RdpEndpointError::ControlCharacter);
+    }
+    if target.chars().any(char::is_whitespace) {
+        return Err(RdpEndpointError::Whitespace);
+    }
+    if target.contains("://") {
+        return Err(RdpEndpointError::SchemeNotAllowed);
+    }
+    if target.contains(['/', '\\', '?', '#']) {
+        return Err(RdpEndpointError::PathOrQueryNotAllowed);
+    }
+    Ok(())
+}
+
+fn parse_bracketed_ipv6(target: &str) -> Result<(&str, u16), RdpEndpointError> {
+    let close = target
+        .find(']')
+        .ok_or(RdpEndpointError::MalformedBracketedIpv6)?;
+    let host = &target[1..close];
+    if host.is_empty() {
+        return Err(RdpEndpointError::EmptyHost);
+    }
+    if host.len() > MAX_HOST_LENGTH {
+        return Err(RdpEndpointError::HostTooLong);
+    }
+    host.parse::<Ipv6Addr>()
+        .map_err(|_| RdpEndpointError::InvalidIpv6Literal)?;
+
+    let suffix = &target[close + 1..];
+    let port = if suffix.is_empty() {
+        DEFAULT_RDP_PORT
+    } else {
+        let port = suffix
+            .strip_prefix(':')
+            .ok_or(RdpEndpointError::MalformedBracketedIpv6)?;
+        parse_port(port)?
+    };
+    Ok((host, port))
+}
+
+fn parse_unbracketed_target(target: &str) -> Result<(&str, u16), RdpEndpointError> {
+    match target.matches(':').count() {
+        0 => {
+            validate_host(target)?;
+            Ok((target, DEFAULT_RDP_PORT))
+        }
+        1 => {
+            let (host, port) = target
+                .split_once(':')
+                .ok_or(RdpEndpointError::InvalidHost)?;
+            validate_host(host)?;
+            Ok((host, parse_port(port)?))
+        }
+        _ => {
+            target
+                .parse::<Ipv6Addr>()
+                .map_err(|_| RdpEndpointError::InvalidIpv6Literal)?;
+            Ok((target, DEFAULT_RDP_PORT))
+        }
+    }
+}
+
+fn validate_host(host: &str) -> Result<(), RdpEndpointError> {
+    if host.is_empty() {
+        return Err(RdpEndpointError::EmptyHost);
+    }
+    if host.len() > MAX_HOST_LENGTH {
+        return Err(RdpEndpointError::HostTooLong);
+    }
+    if host.parse::<IpAddr>().is_ok() {
+        return Ok(());
+    }
+    if !host.is_ascii() {
+        return Err(RdpEndpointError::InvalidHost);
+    }
+
+    let hostname = host.strip_suffix('.').unwrap_or(host);
+    if hostname.is_empty() {
+        return Err(RdpEndpointError::EmptyHost);
+    }
+    for label in hostname.split('.') {
+        if label.is_empty()
+            || label.len() > 63
+            || !label
+                .bytes()
+                .all(|byte| byte.is_ascii_alphanumeric() || byte == b'-')
+            || !label
+                .as_bytes()
+                .first()
+                .is_some_and(u8::is_ascii_alphanumeric)
+            || !label
+                .as_bytes()
+                .last()
+                .is_some_and(u8::is_ascii_alphanumeric)
+        {
+            return Err(RdpEndpointError::InvalidHost);
+        }
+    }
+    Ok(())
+}
+
+fn parse_port(port: &str) -> Result<u16, RdpEndpointError> {
+    if port.is_empty() || !port.bytes().all(|byte| byte.is_ascii_digit()) {
+        return Err(RdpEndpointError::InvalidPort);
+    }
+    let port = port
+        .parse::<u16>()
+        .map_err(|_| RdpEndpointError::InvalidPort)?;
+    if port == 0 {
+        return Err(RdpEndpointError::InvalidPort);
+    }
+    Ok(port)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn hostname_and_ipv4_use_default_port() {
+        let hostname = RdpEndpoint::parse("desktop.example.test").unwrap();
+        assert_eq!(hostname.host(), "desktop.example.test");
+        assert_eq!(hostname.port(), DEFAULT_RDP_PORT);
+
+        let ipv4 = RdpEndpoint::parse("192.0.2.15").unwrap();
+        assert_eq!(ipv4.host(), "192.0.2.15");
+        assert_eq!(ipv4.port(), DEFAULT_RDP_PORT);
+    }
+
+    #[test]
+    fn hostname_and_ipv4_accept_explicit_port() {
+        let hostname: RdpEndpoint = "rdp-host:3390".parse().unwrap();
+        assert_eq!(hostname.host(), "rdp-host");
+        assert_eq!(hostname.port(), 3390);
+
+        let ipv4 = RdpEndpoint::parse("192.0.2.15:65535").unwrap();
+        assert_eq!(ipv4.host(), "192.0.2.15");
+        assert_eq!(ipv4.port(), u16::MAX);
+    }
+
+    #[test]
+    fn ipv6_supports_default_and_bracketed_explicit_port() {
+        let bare = RdpEndpoint::parse("2001:db8::5").unwrap();
+        assert_eq!(bare.host(), "2001:db8::5");
+        assert_eq!(bare.port(), DEFAULT_RDP_PORT);
+
+        let bracketed = RdpEndpoint::parse("[2001:db8::5]:3391").unwrap();
+        assert_eq!(bracketed.host(), "2001:db8::5");
+        assert_eq!(bracketed.port(), 3391);
+
+        let bracketed_default = RdpEndpoint::parse("[::1]").unwrap();
+        assert_eq!(bracketed_default.host(), "::1");
+        assert_eq!(bracketed_default.port(), DEFAULT_RDP_PORT);
+    }
+
+    #[test]
+    fn empty_control_whitespace_scheme_and_paths_are_rejected() {
+        let cases = [
+            ("", RdpEndpointError::EmptyTarget),
+            ("host\nname", RdpEndpointError::ControlCharacter),
+            (" host", RdpEndpointError::Whitespace),
+            ("rdp://host", RdpEndpointError::SchemeNotAllowed),
+            ("host/path", RdpEndpointError::PathOrQueryNotAllowed),
+            ("host\\path", RdpEndpointError::PathOrQueryNotAllowed),
+            ("host?query", RdpEndpointError::PathOrQueryNotAllowed),
+            ("host#fragment", RdpEndpointError::PathOrQueryNotAllowed),
+        ];
+
+        for (target, expected) in cases {
+            assert_eq!(
+                RdpEndpoint::parse(target),
+                Err(expected),
+                "target {target:?}"
+            );
+        }
+    }
+
+    #[test]
+    fn empty_or_invalid_hosts_are_rejected() {
+        let cases = [
+            (":3389", RdpEndpointError::EmptyHost),
+            (".", RdpEndpointError::EmptyHost),
+            ("bad..host", RdpEndpointError::InvalidHost),
+            ("-host", RdpEndpointError::InvalidHost),
+            ("host-", RdpEndpointError::InvalidHost),
+            ("host_name", RdpEndpointError::InvalidHost),
+            ("user@host:3389", RdpEndpointError::InvalidHost),
+            ("h\u{00f6}st", RdpEndpointError::InvalidHost),
+        ];
+
+        for (target, expected) in cases {
+            assert_eq!(
+                RdpEndpoint::parse(target),
+                Err(expected),
+                "target {target:?}"
+            );
+        }
+    }
+
+    #[test]
+    fn malformed_brackets_and_invalid_ipv6_are_rejected() {
+        let cases = [
+            ("[::1", RdpEndpointError::MalformedBracketedIpv6),
+            ("[]:3389", RdpEndpointError::EmptyHost),
+            ("[hostname]:3389", RdpEndpointError::InvalidIpv6Literal),
+            ("[::1]extra", RdpEndpointError::MalformedBracketedIpv6),
+            ("[::1]:3389:1", RdpEndpointError::InvalidPort),
+            ("2001:db8::invalid", RdpEndpointError::InvalidIpv6Literal),
+        ];
+
+        for (target, expected) in cases {
+            assert_eq!(
+                RdpEndpoint::parse(target),
+                Err(expected),
+                "target {target:?}"
+            );
+        }
+    }
+
+    #[test]
+    fn missing_zero_non_numeric_and_out_of_range_ports_are_rejected() {
+        for target in [
+            "host:",
+            "host:0",
+            "host:-1",
+            "host:+3389",
+            "host:abc",
+            "host:65536",
+        ] {
+            assert_eq!(
+                RdpEndpoint::parse(target),
+                Err(RdpEndpointError::InvalidPort),
+                "target {target:?}"
+            );
+        }
+    }
+
+    #[test]
+    fn overlong_host_and_dns_label_are_rejected() {
+        let overlong_label = format!("{}.test", "a".repeat(64));
+        assert_eq!(
+            RdpEndpoint::parse(&overlong_label),
+            Err(RdpEndpointError::InvalidHost)
+        );
+
+        let overlong_host = format!(
+            "{}.{}.{}.{}",
+            "a".repeat(63),
+            "b".repeat(63),
+            "c".repeat(63),
+            "d".repeat(63)
+        );
+        assert!(overlong_host.len() > MAX_HOST_LENGTH);
+        assert_eq!(
+            RdpEndpoint::parse(&overlong_host),
+            Err(RdpEndpointError::HostTooLong)
+        );
+    }
+
+    #[test]
+    fn debug_display_and_errors_do_not_include_target() {
+        let marker = "sensitive-host-marker.example";
+        let endpoint = RdpEndpoint::parse(&format!("{marker}:3390")).unwrap();
+        let debug = format!("{endpoint:?}");
+        let display = endpoint.to_string();
+        assert!(!debug.contains(marker));
+        assert!(!display.contains(marker));
+        assert!(debug.contains("3390"));
+        assert!(display.contains("3390"));
+
+        let error = RdpEndpoint::parse("secret/path").unwrap_err();
+        assert!(!format!("{error:?}").contains("secret"));
+        assert!(!error.to_string().contains("secret"));
+    }
+}
diff --git a/client/crates/client-core/src/render_report.rs b/client/crates/client-core/src/render_report.rs
new file mode 100644
index 0000000..941fdcd
--- /dev/null
+++ b/client/crates/client-core/src/render_report.rs
@@ -0,0 +1,114 @@
+use crate::VerifiedPipePeer;
+use remotedesk_protocol::{
+    ClientRenderPathReport, MemoryPathStatus, MemorySurfaceType, PathReportBinding,
+    VerificationSource,
+};
+
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct RenderReportPayload {
+    pub status: MemoryPathStatus,
+    pub adapter_identity: String,
+    pub render_device_identity: String,
+    pub surface_type: MemorySurfaceType,
+    pub cpu_map_count: u64,
+    pub cross_adapter_copy_count: u64,
+    pub verification_source: VerificationSource,
+}
+
+/// An ingress handle constructed from the authenticated local helper API.
+///
+/// The wire payload contains no endpoint field. Consequently, a remote payload
+/// cannot claim to be a local render report through this API.
+#[derive(Debug)]
+pub struct ClientRenderReportIngress<'a> {
+    _peer: &'a VerifiedPipePeer,
+    binding: PathReportBinding,
+}
+
+impl<'a> ClientRenderReportIngress<'a> {
+    #[must_use]
+    pub fn from_native_video_helper(
+        peer: &'a VerifiedPipePeer,
+        binding: PathReportBinding,
+    ) -> Self {
+        Self {
+            _peer: peer,
+            binding,
+        }
+    }
+
+    #[must_use]
+    pub fn bind(&self, payload: RenderReportPayload) -> ClientRenderPathReport {
+        ClientRenderPathReport {
+            binding: self.binding.clone(),
+            status: payload.status,
+            adapter_identity: payload.adapter_identity,
+            render_device_identity: payload.render_device_identity,
+            surface_type: payload.surface_type,
+            cpu_map_count: payload.cpu_map_count,
+            cross_adapter_copy_count: payload.cross_adapter_copy_count,
+            verification_source: payload.verification_source,
+        }
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::{ChallengeMacVerification, HelperProcessIdentity, PipePeerVerifier};
+    use remotedesk_protocol::{
+        StrictPathCoordinator, StrictPathState, ValidationContext, ZeroCopyPolicy,
+    };
+
+    fn binding() -> PathReportBinding {
+        PathReportBinding {
+            session_instance_id: [1; 16],
+            helper_instance_id: [2; 16],
+            pipeline_epoch: 7,
+            selected_config_hash: [3; 32],
+            verifier_challenge: [4; 32],
+        }
+    }
+
+    #[test]
+    fn api_source_binds_report_to_local_client() {
+        let identity = HelperProcessIdentity::new(7, 11, "build");
+        let mut verifier = PipePeerVerifier::new(identity.clone());
+        let peer = verifier
+            .authenticate(identity, ChallengeMacVerification::Verified)
+            .unwrap();
+        let expected_binding = binding();
+        let ingress =
+            ClientRenderReportIngress::from_native_video_helper(peer, expected_binding.clone());
+        let report = ingress.bind(RenderReportPayload {
+            status: MemoryPathStatus::CpuCopyFree,
+            adapter_identity: "dxgi-luid:100".into(),
+            render_device_identity: "d3d11-device:7".into(),
+            surface_type: MemorySurfaceType::D3d11,
+            cpu_map_count: 0,
+            cross_adapter_copy_count: 0,
+            verification_source: VerificationSource::PipelineTracing,
+        });
+
+        assert_eq!(report.binding, expected_binding);
+        assert_eq!(report.status, MemoryPathStatus::CpuCopyFree);
+        assert_eq!(report.adapter_identity, "dxgi-luid:100");
+        assert_eq!(report.render_device_identity, "d3d11-device:7");
+
+        let mut coordinator = StrictPathCoordinator::new(
+            ZeroCopyPolicy::RequiredEndToEnd,
+            ValidationContext {
+                session_instance_id: [1; 16],
+                agent_helper_instance_id: [9; 16],
+                client_helper_instance_id: [2; 16],
+                pipeline_epoch: 7,
+                selected_config_hash: [3; 32],
+                verifier_challenge: [4; 32],
+            },
+        );
+        assert_eq!(
+            coordinator.accept_client_report(report),
+            Ok(StrictPathState::Negotiating)
+        );
+    }
+}
diff --git a/client/crates/client-core/src/secure_pipe.rs b/client/crates/client-core/src/secure_pipe.rs
new file mode 100644
index 0000000..0b2d4d1
--- /dev/null
+++ b/client/crates/client-core/src/secure_pipe.rs
@@ -0,0 +1,1188 @@
+use crate::{ChallengeMacVerification, HelperProcessIdentity, PipePeerVerifier, SessionMaterial};
+use base64::{Engine as _, engine::general_purpose::URL_SAFE_NO_PAD};
+use hmac::{Hmac, KeyInit as _, Mac as _};
+use serde::{Deserialize, Serialize};
+use sha2::{Digest as _, Sha256};
+#[cfg(windows)]
+use std::time::Instant;
+use std::{
+    fmt,
+    fs::File,
+    io::{self, Read, Write},
+    path::Path,
+    time::Duration,
+};
+use zeroize::{Zeroize as _, Zeroizing};
+
+const PIPE_PROTOCOL_VERSION: u8 = 1;
+const PIPE_KEY_BYTES: usize = 32;
+const PIPE_NONCE_BYTES: usize = 32;
+const MAX_PIPE_FRAME_BYTES: usize = 64 * 1024;
+const CONNECT_POLL_INTERVAL: Duration = Duration::from_millis(10);
+const CLIENT_CONNECT_TIMEOUT: Duration = Duration::from_secs(10);
+const AUTH_DOMAIN: &[u8] = b"RemoteDesk secure pipe auth v1\0";
+const SESSION_DOMAIN: &[u8] = b"RemoteDesk secure pipe session v1\0";
+const SESSION_ACK_DOMAIN: &[u8] = b"RemoteDesk secure pipe session ack v1\0";
+
+pub const PIPE_BOOTSTRAP_KEY_ENV: &str = "REMOTEDESK_PIPE_BOOTSTRAP_KEY";
+
+type HmacSha256 = Hmac<Sha256>;
+
+#[derive(Clone, Deserialize, PartialEq, Eq, Serialize)]
+#[serde(deny_unknown_fields)]
+pub struct RdpViewerLaunchConfig {
+    pub schema_version: u8,
+    pub target: String,
+    pub username: String,
+    pub width: u16,
+    pub height: u16,
+    pub use_multimon: bool,
+    #[serde(default)]
+    pub monitor_indices: Vec<u8>,
+    pub fullscreen: bool,
+    pub redirect_clipboard: bool,
+    pub session_id: String,
+    pub certificate_sha256: String,
+    pub credential_ref: Option<String>,
+}
+
+pub struct SecurePipeBootstrap {
+    pipe_name: String,
+    encoded_key: Zeroizing<String>,
+}
+
+impl fmt::Debug for SecurePipeBootstrap {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        formatter
+            .debug_struct("SecurePipeBootstrap")
+            .field("pipe_name", &self.pipe_name)
+            .field("encoded_key", &"[REDACTED]")
+            .finish()
+    }
+}
+
+impl SecurePipeBootstrap {
+    #[must_use]
+    pub fn pipe_name(&self) -> &str {
+        &self.pipe_name
+    }
+
+    #[must_use]
+    pub fn encoded_key(&self) -> &str {
+        &self.encoded_key
+    }
+}
+
+pub struct SecurePipeServer {
+    #[cfg(windows)]
+    pipe: File,
+    key: Zeroizing<Vec<u8>>,
+}
+
+pub struct SecurePipeClientSession {
+    #[cfg(windows)]
+    pipe: File,
+    #[cfg(windows)]
+    deadline: Instant,
+    key: Zeroizing<Vec<u8>>,
+    nonce: Vec<u8>,
+    payload: Vec<u8>,
+}
+
+impl fmt::Debug for SecurePipeClientSession {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        formatter
+            .debug_struct("SecurePipeClientSession")
+            .field("key", &"[REDACTED]")
+            .field("payload", &"[REDACTED]")
+            .finish_non_exhaustive()
+    }
+}
+
+impl SecurePipeClientSession {
+    #[must_use]
+    pub fn payload(&self) -> &[u8] {
+        &self.payload
+    }
+
+    #[cfg(windows)]
+    pub fn acknowledge(mut self) -> io::Result<()> {
+        ensure_handshake_deadline(self.deadline)?;
+        let digest = payload_digest(&self.payload);
+        let mac = session_ack_mac(&self.key, &self.nonce, &digest);
+        write_json_frame_until(
+            &mut self.pipe,
+            &SessionAckMessage {
+                protocol_version: PIPE_PROTOCOL_VERSION,
+                payload_sha256: URL_SAFE_NO_PAD.encode(digest),
+                mac: URL_SAFE_NO_PAD.encode(mac),
+            },
+            self.deadline,
+        )?;
+        self.pipe.flush()
+    }
+
+    #[cfg(not(windows))]
+    pub fn acknowledge(self) -> io::Result<()> {
+        Err(io::Error::new(
+            io::ErrorKind::Unsupported,
+            "secure Named Pipes require Windows",
+        ))
+    }
+}
+
+impl fmt::Debug for SecurePipeServer {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        formatter
+            .debug_struct("SecurePipeServer")
+            .field("key", &"[REDACTED]")
+            .finish_non_exhaustive()
+    }
+}
+
+#[derive(Deserialize, Serialize)]
+#[serde(deny_unknown_fields)]
+struct ChallengeMessage {
+    protocol_version: u8,
+    nonce: String,
+}
+
+#[derive(Deserialize, Serialize)]
+#[serde(deny_unknown_fields)]
+struct AuthenticationMessage {
+    protocol_version: u8,
+    pid: u32,
+    creation_token: u64,
+    build_hash: String,
+    mac: String,
+}
+
+#[derive(Deserialize, Serialize)]
+#[serde(deny_unknown_fields)]
+struct SessionMessage {
+    protocol_version: u8,
+    payload: String,
+    mac: String,
+}
+
+#[derive(Deserialize, Serialize)]
+#[serde(deny_unknown_fields)]
+struct SessionAckMessage {
+    protocol_version: u8,
+    payload_sha256: String,
+    mac: String,
+}
+
+impl SecurePipeServer {
+    #[cfg(windows)]
+    pub fn create(session_id: &str) -> io::Result<(Self, SecurePipeBootstrap)> {
+        if session_id.is_empty()
+            || session_id.len() > 64
+            || !session_id
+                .bytes()
+                .all(|byte| byte.is_ascii_alphanumeric() || byte == b'-')
+        {
+            return Err(io::Error::new(
+                io::ErrorKind::InvalidInput,
+                "invalid secure pipe session identifier",
+            ));
+        }
+        let mut key = Zeroizing::new(vec![0_u8; PIPE_KEY_BYTES]);
+        getrandom::fill(&mut key).map_err(io::Error::other)?;
+        let mut suffix = [0_u8; 16];
+        getrandom::fill(&mut suffix).map_err(io::Error::other)?;
+        let pipe_name = format!(
+            r"\\.\pipe\RemoteDesk\rdp-{session_id}-{}",
+            URL_SAFE_NO_PAD.encode(suffix)
+        );
+        let pipe = windows_platform::create_current_user_pipe(&pipe_name)?;
+        let bootstrap = SecurePipeBootstrap {
+            pipe_name,
+            encoded_key: Zeroizing::new(URL_SAFE_NO_PAD.encode(&*key)),
+        };
+        Ok((Self { pipe, key }, bootstrap))
+    }
+
+    #[cfg(not(windows))]
+    pub fn create(_session_id: &str) -> io::Result<(Self, SecurePipeBootstrap)> {
+        Err(io::Error::new(
+            io::ErrorKind::Unsupported,
+            "secure Named Pipes require Windows",
+        ))
+    }
+
+    #[cfg(windows)]
+    pub fn authenticate_and_send(
+        mut self,
+        expected: HelperProcessIdentity,
+        payload: &[u8],
+        timeout: Duration,
+    ) -> io::Result<()> {
+        if payload.len() > MAX_PIPE_FRAME_BYTES / 2 {
+            return Err(io::Error::new(
+                io::ErrorKind::InvalidInput,
+                "secure pipe session payload is too large",
+            ));
+        }
+        let deadline = Instant::now()
+            .checked_add(timeout)
+            .ok_or_else(|| io::Error::new(io::ErrorKind::InvalidInput, "invalid pipe timeout"))?;
+        windows_platform::wait_for_client(&self.pipe, timeout)?;
+        windows_platform::set_blocking(&self.pipe)?;
+        let pipe_pid = windows_platform::pipe_client_pid(&self.pipe)?;
+        if pipe_pid != expected.pid {
+            return Err(io::Error::new(
+                io::ErrorKind::PermissionDenied,
+                "secure pipe client PID does not match the spawned helper",
+            ));
+        }
+
+        let mut nonce = [0_u8; PIPE_NONCE_BYTES];
+        getrandom::fill(&mut nonce).map_err(io::Error::other)?;
+        write_json_frame_until(
+            &mut self.pipe,
+            &ChallengeMessage {
+                protocol_version: PIPE_PROTOCOL_VERSION,
+                nonce: URL_SAFE_NO_PAD.encode(nonce),
+            },
+            deadline,
+        )?;
+        let auth: AuthenticationMessage = read_json_frame_until(&mut self.pipe, deadline)?;
+        if auth.protocol_version != PIPE_PROTOCOL_VERSION {
+            return Err(io::Error::new(
+                io::ErrorKind::InvalidData,
+                "secure pipe protocol version mismatch",
+            ));
+        }
+        let claimed = HelperProcessIdentity::new(auth.pid, auth.creation_token, auth.build_hash);
+        let mac = URL_SAFE_NO_PAD
+            .decode(auth.mac)
+            .map_err(|_| io::Error::new(io::ErrorKind::InvalidData, "invalid pipe auth MAC"))?;
+        let mac_verified = verify_identity_mac(&self.key, AUTH_DOMAIN, &nonce, &claimed, &mac);
+        let mut verifier = PipePeerVerifier::new(expected);
+        verifier
+            .authenticate(claimed, mac_verified)
+            .map_err(|error| io::Error::new(io::ErrorKind::PermissionDenied, error))?;
+        let material = SessionMaterial::new(payload.to_vec());
+        let authenticated_payload = verifier
+            .session_material(&material)
+            .map_err(|error| io::Error::new(io::ErrorKind::PermissionDenied, error))?;
+        let session_mac = session_mac(&self.key, &nonce, authenticated_payload);
+        write_json_frame_until(
+            &mut self.pipe,
+            &SessionMessage {
+                protocol_version: PIPE_PROTOCOL_VERSION,
+                payload: URL_SAFE_NO_PAD.encode(authenticated_payload),
+                mac: URL_SAFE_NO_PAD.encode(session_mac),
+            },
+            deadline,
+        )?;
+        self.pipe.flush()?;
+        let acknowledgement: SessionAckMessage = read_json_frame_until(&mut self.pipe, deadline)?;
+        if acknowledgement.protocol_version != PIPE_PROTOCOL_VERSION {
+            return Err(io::Error::new(
+                io::ErrorKind::InvalidData,
+                "secure pipe acknowledgement version mismatch",
+            ));
+        }
+        let acknowledged_digest = URL_SAFE_NO_PAD
+            .decode(acknowledgement.payload_sha256)
+            .map_err(|_| {
+                io::Error::new(io::ErrorKind::InvalidData, "invalid pipe payload digest")
+            })?;
+        let expected_digest = payload_digest(authenticated_payload);
+        if acknowledged_digest.as_slice() != expected_digest.as_slice() {
+            return Err(io::Error::new(
+                io::ErrorKind::PermissionDenied,
+                "secure pipe payload acknowledgement does not match",
+            ));
+        }
+        let acknowledgement_mac = URL_SAFE_NO_PAD
+            .decode(acknowledgement.mac)
+            .map_err(|_| io::Error::new(io::ErrorKind::InvalidData, "invalid pipe ACK MAC"))?;
+        if !verify_session_ack_mac(&self.key, &nonce, &expected_digest, &acknowledgement_mac) {
+            return Err(io::Error::new(
+                io::ErrorKind::PermissionDenied,
+                "secure pipe acknowledgement MAC was rejected",
+            ));
+        }
+        ensure_handshake_deadline(deadline)?;
+        Ok(())
+    }
+}
+
+#[cfg(windows)]
+pub fn receive_secure_pipe_session(pipe_name: &str) -> io::Result<SecurePipeClientSession> {
+    if !pipe_name.starts_with(r"\\.\pipe\RemoteDesk\rdp-") || pipe_name.len() > 256 {
+        return Err(io::Error::new(
+            io::ErrorKind::InvalidInput,
+            "invalid RemoteDesk secure pipe name",
+        ));
+    }
+    let encoded_key = std::env::var(PIPE_BOOTSTRAP_KEY_ENV)
+        .map_err(|_| io::Error::new(io::ErrorKind::PermissionDenied, "pipe key is missing"))?;
+    // The helper reads the one-time bootstrap before starting any worker thread.
+    unsafe { std::env::remove_var(PIPE_BOOTSTRAP_KEY_ENV) };
+    let mut encoded_key = Zeroizing::new(encoded_key);
+    let key = Zeroizing::new(
+        URL_SAFE_NO_PAD
+            .decode(encoded_key.as_bytes())
+            .map_err(|_| io::Error::new(io::ErrorKind::InvalidData, "pipe key is invalid"))?,
+    );
+    encoded_key.zeroize();
+    if key.len() != PIPE_KEY_BYTES {
+        return Err(io::Error::new(
+            io::ErrorKind::InvalidData,
+            "pipe key has an invalid length",
+        ));
+    }
+    receive_secure_pipe_session_with_key(pipe_name, key)
+}
+
+#[cfg(windows)]
+fn receive_secure_pipe_session_with_key(
+    pipe_name: &str,
+    key: Zeroizing<Vec<u8>>,
+) -> io::Result<SecurePipeClientSession> {
+    if !pipe_name.starts_with(r"\\.\pipe\RemoteDesk\rdp-") || pipe_name.len() > 256 {
+        return Err(io::Error::new(
+            io::ErrorKind::InvalidInput,
+            "invalid RemoteDesk secure pipe name",
+        ));
+    }
+    if key.len() != PIPE_KEY_BYTES {
+        return Err(io::Error::new(
+            io::ErrorKind::InvalidData,
+            "pipe key has an invalid length",
+        ));
+    }
+    let deadline = Instant::now()
+        .checked_add(CLIENT_CONNECT_TIMEOUT)
+        .expect("fixed secure pipe timeout fits Instant");
+    let mut pipe = windows_platform::connect_client(pipe_name, CLIENT_CONNECT_TIMEOUT)?;
+    let challenge: ChallengeMessage = read_json_frame_until(&mut pipe, deadline)?;
+    if challenge.protocol_version != PIPE_PROTOCOL_VERSION {
+        return Err(io::Error::new(
+            io::ErrorKind::InvalidData,
+            "secure pipe protocol version mismatch",
+        ));
+    }
+    let nonce = URL_SAFE_NO_PAD
+        .decode(challenge.nonce)
+        .map_err(|_| io::Error::new(io::ErrorKind::InvalidData, "invalid pipe nonce"))?;
+    if nonce.len() != PIPE_NONCE_BYTES {
+        return Err(io::Error::new(
+            io::ErrorKind::InvalidData,
+            "pipe nonce has an invalid length",
+        ));
+    }
+    let identity = current_process_identity()?;
+    let auth_mac = identity_mac(&key, AUTH_DOMAIN, &nonce, &identity);
+    write_json_frame_until(
+        &mut pipe,
+        &AuthenticationMessage {
+            protocol_version: PIPE_PROTOCOL_VERSION,
+            pid: identity.pid,
+            creation_token: identity.creation_token,
+            build_hash: identity.build_hash.clone(),
+            mac: URL_SAFE_NO_PAD.encode(auth_mac),
+        },
+        deadline,
+    )?;
+    let session: SessionMessage = read_json_frame_until(&mut pipe, deadline)?;
+    if session.protocol_version != PIPE_PROTOCOL_VERSION {
+        return Err(io::Error::new(
+            io::ErrorKind::InvalidData,
+            "secure pipe protocol version mismatch",
+        ));
+    }
+    let payload = URL_SAFE_NO_PAD
+        .decode(session.payload)
+        .map_err(|_| io::Error::new(io::ErrorKind::InvalidData, "invalid pipe payload"))?;
+    let mac = URL_SAFE_NO_PAD
+        .decode(session.mac)
+        .map_err(|_| io::Error::new(io::ErrorKind::InvalidData, "invalid pipe session MAC"))?;
+    if !verify_session_mac(&key, &nonce, &payload, &mac) {
+        return Err(io::Error::new(
+            io::ErrorKind::PermissionDenied,
+            "secure pipe session MAC was rejected",
+        ));
+    }
+    Ok(SecurePipeClientSession {
+        pipe,
+        deadline,
+        key,
+        nonce,
+        payload,
+    })
+}
+
+#[cfg(not(windows))]
+pub fn receive_secure_pipe_session(_pipe_name: &str) -> io::Result<SecurePipeClientSession> {
+    Err(io::Error::new(
+        io::ErrorKind::Unsupported,
+        "secure Named Pipes require Windows",
+    ))
+}
+
+pub fn receive_secure_pipe_payload(pipe_name: &str) -> io::Result<Vec<u8>> {
+    let session = receive_secure_pipe_session(pipe_name)?;
+    let payload = session.payload().to_vec();
+    session.acknowledge()?;
+    Ok(payload)
+}
+
+pub fn current_process_identity() -> io::Result<HelperProcessIdentity> {
+    #[cfg(windows)]
+    {
+        let executable = std::env::current_exe()?;
+        process_identity(std::process::id(), &executable)
+    }
+    #[cfg(not(windows))]
+    {
+        Err(io::Error::new(
+            io::ErrorKind::Unsupported,
+            "Windows process identity is unavailable",
+        ))
+    }
+}
+
+pub fn process_identity(pid: u32, expected_executable: &Path) -> io::Result<HelperProcessIdentity> {
+    #[cfg(windows)]
+    {
+        windows_platform::process_identity(pid, expected_executable)
+    }
+    #[cfg(not(windows))]
+    {
+        let _ = (pid, expected_executable);
+        Err(io::Error::new(
+            io::ErrorKind::Unsupported,
+            "Windows process identity is unavailable",
+        ))
+    }
+}
+
+fn identity_mac(
+    key: &[u8],
+    domain: &[u8],
+    nonce: &[u8],
+    identity: &HelperProcessIdentity,
+) -> Vec<u8> {
+    let mut mac = HmacSha256::new_from_slice(key).expect("HMAC accepts arbitrary key lengths");
+    update_identity_mac(&mut mac, domain, nonce, identity);
+    mac.finalize().into_bytes().to_vec()
+}
+
+fn update_identity_mac(
+    mac: &mut HmacSha256,
+    domain: &[u8],
+    nonce: &[u8],
+    identity: &HelperProcessIdentity,
+) {
+    mac.update(domain);
+    mac.update(nonce);
+    mac.update(&identity.pid.to_le_bytes());
+    mac.update(&identity.creation_token.to_le_bytes());
+    mac.update(identity.build_hash.as_bytes());
+}
+
+fn verify_identity_mac(
+    key: &[u8],
+    domain: &[u8],
+    nonce: &[u8],
+    identity: &HelperProcessIdentity,
+    candidate: &[u8],
+) -> ChallengeMacVerification {
+    let mut mac = HmacSha256::new_from_slice(key).expect("HMAC accepts arbitrary key lengths");
+    update_identity_mac(&mut mac, domain, nonce, identity);
+    if mac.verify_slice(candidate).is_ok() {
+        ChallengeMacVerification::Verified
+    } else {
+        ChallengeMacVerification::Rejected
+    }
+}
+
+fn session_mac(key: &[u8], nonce: &[u8], payload: &[u8]) -> Vec<u8> {
+    let mut mac = HmacSha256::new_from_slice(key).expect("HMAC accepts arbitrary key lengths");
+    update_session_mac(&mut mac, nonce, payload);
+    mac.finalize().into_bytes().to_vec()
+}
+
+fn verify_session_mac(key: &[u8], nonce: &[u8], payload: &[u8], candidate: &[u8]) -> bool {
+    let mut mac = HmacSha256::new_from_slice(key).expect("HMAC accepts arbitrary key lengths");
+    update_session_mac(&mut mac, nonce, payload);
+    mac.verify_slice(candidate).is_ok()
+}
+
+fn update_session_mac(mac: &mut HmacSha256, nonce: &[u8], payload: &[u8]) {
+    mac.update(SESSION_DOMAIN);
+    mac.update(nonce);
+    mac.update(&(payload.len() as u64).to_le_bytes());
+    mac.update(payload);
+}
+
+fn payload_digest(payload: &[u8]) -> [u8; 32] {
+    Sha256::digest(payload).into()
+}
+
+fn session_ack_mac(key: &[u8], nonce: &[u8], digest: &[u8; 32]) -> Vec<u8> {
+    let mut mac = HmacSha256::new_from_slice(key).expect("HMAC accepts arbitrary key lengths");
+    update_session_ack_mac(&mut mac, nonce, digest);
+    mac.finalize().into_bytes().to_vec()
+}
+
+fn verify_session_ack_mac(key: &[u8], nonce: &[u8], digest: &[u8; 32], candidate: &[u8]) -> bool {
+    let mut mac = HmacSha256::new_from_slice(key).expect("HMAC accepts arbitrary key lengths");
+    update_session_ack_mac(&mut mac, nonce, digest);
+    mac.verify_slice(candidate).is_ok()
+}
+
+fn update_session_ack_mac(mac: &mut HmacSha256, nonce: &[u8], digest: &[u8; 32]) {
+    mac.update(SESSION_ACK_DOMAIN);
+    mac.update(nonce);
+    mac.update(digest);
+}
+
+#[cfg(test)]
+fn write_json_frame<T: Serialize>(writer: &mut impl Write, value: &T) -> io::Result<()> {
+    let encoded = serde_json::to_vec(value).map_err(io::Error::other)?;
+    if encoded.is_empty() || encoded.len() > MAX_PIPE_FRAME_BYTES {
+        return Err(io::Error::new(
+            io::ErrorKind::InvalidData,
+            "secure pipe frame size is invalid",
+        ));
+    }
+    let length = u32::try_from(encoded.len())
+        .map_err(|_| io::Error::new(io::ErrorKind::InvalidData, "pipe frame is too large"))?;
+    writer.write_all(&length.to_le_bytes())?;
+    writer.write_all(&encoded)
+}
+
+#[cfg(windows)]
+fn write_json_frame_until<T: Serialize>(
+    writer: &mut impl Write,
+    value: &T,
+    deadline: Instant,
+) -> io::Result<()> {
+    let encoded = serde_json::to_vec(value).map_err(io::Error::other)?;
+    if encoded.is_empty() || encoded.len() > MAX_PIPE_FRAME_BYTES {
+        return Err(io::Error::new(
+            io::ErrorKind::InvalidData,
+            "secure pipe frame size is invalid",
+        ));
+    }
+    let length = u32::try_from(encoded.len())
+        .map_err(|_| io::Error::new(io::ErrorKind::InvalidData, "pipe frame is too large"))?;
+    let mut frame = Vec::with_capacity(4 + encoded.len());
+    frame.extend_from_slice(&length.to_le_bytes());
+    frame.extend_from_slice(&encoded);
+    let mut offset = 0;
+    while offset < frame.len() {
+        ensure_handshake_deadline(deadline)?;
+        match writer.write(&frame[offset..]) {
+            Ok(0) => {
+                return Err(io::Error::new(
+                    io::ErrorKind::WriteZero,
+                    "secure pipe write made no progress",
+                ));
+            }
+            Ok(count) => offset += count,
+            Err(error) if error.kind() == io::ErrorKind::Interrupted => {}
+            Err(error) if windows_platform::read_is_pending(&error) => {
+                std::thread::sleep(CONNECT_POLL_INTERVAL);
+            }
+            Err(error) => return Err(error),
+        }
+    }
+    Ok(())
+}
+
+#[cfg(test)]
+fn read_json_frame<T: for<'de> Deserialize<'de>>(reader: &mut impl Read) -> io::Result<T> {
+    let mut length = [0_u8; 4];
+    reader.read_exact(&mut length)?;
+    let length = usize::try_from(u32::from_le_bytes(length))
+        .map_err(|_| io::Error::new(io::ErrorKind::InvalidData, "invalid pipe frame length"))?;
+    if length == 0 || length > MAX_PIPE_FRAME_BYTES {
+        return Err(io::Error::new(
+            io::ErrorKind::InvalidData,
+            "secure pipe frame size is invalid",
+        ));
+    }
+    let mut encoded = vec![0_u8; length];
+    reader.read_exact(&mut encoded)?;
+    serde_json::from_slice(&encoded).map_err(|_| {
+        io::Error::new(
+            io::ErrorKind::InvalidData,
+            "secure pipe frame is not valid protocol JSON",
+        )
+    })
+}
+
+#[cfg(windows)]
+fn read_json_frame_until<T: for<'de> Deserialize<'de>>(
+    reader: &mut impl Read,
+    deadline: Instant,
+) -> io::Result<T> {
+    let mut length = [0_u8; 4];
+    read_exact_until(reader, &mut length, deadline)?;
+    let length = usize::try_from(u32::from_le_bytes(length))
+        .map_err(|_| io::Error::new(io::ErrorKind::InvalidData, "invalid pipe frame length"))?;
+    if length == 0 || length > MAX_PIPE_FRAME_BYTES {
+        return Err(io::Error::new(
+            io::ErrorKind::InvalidData,
+            "secure pipe frame size is invalid",
+        ));
+    }
+    let mut encoded = vec![0_u8; length];
+    read_exact_until(reader, &mut encoded, deadline)?;
+    serde_json::from_slice(&encoded).map_err(|_| {
+        io::Error::new(
+            io::ErrorKind::InvalidData,
+            "secure pipe frame is not valid protocol JSON",
+        )
+    })
+}
+
+#[cfg(windows)]
+fn read_exact_until(
+    reader: &mut impl Read,
+    buffer: &mut [u8],
+    deadline: Instant,
+) -> io::Result<()> {
+    let mut offset = 0;
+    while offset < buffer.len() {
+        ensure_handshake_deadline(deadline)?;
+        match reader.read(&mut buffer[offset..]) {
+            Ok(0) => {
+                return Err(io::Error::new(
+                    io::ErrorKind::UnexpectedEof,
+                    "secure pipe peer closed during handshake",
+                ));
+            }
+            Ok(count) => offset += count,
+            Err(error) if error.kind() == io::ErrorKind::Interrupted => {}
+            Err(error) if windows_platform::read_is_pending(&error) => {
+                std::thread::sleep(CONNECT_POLL_INTERVAL);
+            }
+            Err(error) => return Err(error),
+        }
+    }
+    Ok(())
+}
+
+#[cfg(windows)]
+fn ensure_handshake_deadline(deadline: Instant) -> io::Result<()> {
+    if Instant::now() >= deadline {
+        return Err(io::Error::new(
+            io::ErrorKind::TimedOut,
+            "secure pipe handshake timed out",
+        ));
+    }
+    Ok(())
+}
+
+#[cfg(windows)]
+mod windows_platform {
+    use super::{CONNECT_POLL_INTERVAL, HelperProcessIdentity, Sha256};
+    use sha2::Digest as _;
+    use std::{
+        ffi::c_void,
+        fs::{self, File, OpenOptions},
+        io, mem,
+        os::windows::io::{AsRawHandle as _, FromRawHandle as _, RawHandle},
+        path::Path,
+        ptr, thread,
+        time::{Duration, Instant},
+    };
+    use windows_sys::Win32::{
+        Foundation::{
+            ERROR_INSUFFICIENT_BUFFER, ERROR_NO_DATA, ERROR_PIPE_CONNECTED, ERROR_PIPE_LISTENING,
+            FILETIME, HANDLE, INVALID_HANDLE_VALUE, LocalFree,
+        },
+        Security::{
+            Authorization::{
+                ConvertSidToStringSidW, ConvertStringSecurityDescriptorToSecurityDescriptorW,
+                SDDL_REVISION_1,
+            },
+            GetTokenInformation, PSECURITY_DESCRIPTOR, SECURITY_ATTRIBUTES, TOKEN_QUERY,
+            TOKEN_USER, TokenUser,
+        },
+        Storage::FileSystem::{FILE_FLAG_FIRST_PIPE_INSTANCE, PIPE_ACCESS_DUPLEX},
+        System::{
+            Pipes::{
+                ConnectNamedPipe, CreateNamedPipeW, GetNamedPipeClientProcessId, PIPE_NOWAIT,
+                PIPE_READMODE_BYTE, PIPE_REJECT_REMOTE_CLIENTS, PIPE_TYPE_BYTE, PIPE_WAIT,
+                SetNamedPipeHandleState,
+            },
+            Threading::{
+                GetCurrentProcess, GetProcessTimes, OpenProcess, OpenProcessToken,
+                PROCESS_NAME_WIN32, PROCESS_QUERY_LIMITED_INFORMATION, QueryFullProcessImageNameW,
+            },
+        },
+    };
+
+    pub fn create_current_user_pipe(pipe_name: &str) -> io::Result<File> {
+        let sid = current_user_sid()?;
+        let sddl = wide(&format!("D:P(A;;GA;;;{sid})"));
+        let mut descriptor: PSECURITY_DESCRIPTOR = ptr::null_mut();
+        // SAFETY: pointers reference writable output storage and a terminated SDDL string.
+        if unsafe {
+            ConvertStringSecurityDescriptorToSecurityDescriptorW(
+                sddl.as_ptr(),
+                SDDL_REVISION_1,
+                &mut descriptor,
+                ptr::null_mut(),
+            )
+        } == 0
+        {
+            return Err(io::Error::last_os_error());
+        }
+        let attributes = SECURITY_ATTRIBUTES {
+            nLength: u32::try_from(mem::size_of::<SECURITY_ATTRIBUTES>())
+                .expect("SECURITY_ATTRIBUTES size fits u32"),
+            lpSecurityDescriptor: descriptor.cast(),
+            bInheritHandle: 0,
+        };
+        let pipe_name = wide(pipe_name);
+        // SAFETY: arguments are initialized and the security descriptor remains alive for the call.
+        let handle = unsafe {
+            CreateNamedPipeW(
+                pipe_name.as_ptr(),
+                PIPE_ACCESS_DUPLEX | FILE_FLAG_FIRST_PIPE_INSTANCE,
+                PIPE_TYPE_BYTE | PIPE_READMODE_BYTE | PIPE_NOWAIT | PIPE_REJECT_REMOTE_CLIENTS,
+                1,
+                64 * 1024,
+                64 * 1024,
+                5_000,
+                &attributes,
+            )
+        };
+        // SAFETY: the descriptor was allocated by LocalAlloc inside the conversion API.
+        unsafe { LocalFree(descriptor.cast()) };
+        if handle == INVALID_HANDLE_VALUE {
+            return Err(io::Error::last_os_error());
+        }
+        // SAFETY: CreateNamedPipeW returned an owned kernel handle.
+        Ok(unsafe { File::from_raw_handle(handle as RawHandle) })
+    }
+
+    pub fn wait_for_client(pipe: &File, timeout: Duration) -> io::Result<()> {
+        let handle = pipe.as_raw_handle() as HANDLE;
+        let deadline = Instant::now() + timeout;
+        loop {
+            // SAFETY: handle is a live Named Pipe server handle and no OVERLAPPED is used.
+            if unsafe { ConnectNamedPipe(handle, ptr::null_mut()) } != 0 {
+                break;
+            }
+            let error = io::Error::last_os_error();
+            match error.raw_os_error().map(|value| value as u32) {
+                Some(ERROR_PIPE_CONNECTED) => break,
+                Some(ERROR_PIPE_LISTENING) if Instant::now() < deadline => {
+                    thread::sleep(CONNECT_POLL_INTERVAL);
+                }
+                Some(ERROR_PIPE_LISTENING) => {
+                    return Err(io::Error::new(
+                        io::ErrorKind::TimedOut,
+                        "native helper did not connect to its secure pipe",
+                    ));
+                }
+                _ => return Err(error),
+            }
+        }
+        Ok(())
+    }
+
+    pub fn pipe_client_pid(pipe: &File) -> io::Result<u32> {
+        let mut pid = 0_u32;
+        // SAFETY: handle is a connected Named Pipe server and pid is writable.
+        if unsafe { GetNamedPipeClientProcessId(pipe.as_raw_handle() as HANDLE, &mut pid) } == 0 {
+            return Err(io::Error::last_os_error());
+        }
+        Ok(pid)
+    }
+
+    pub fn connect_client(pipe_name: &str, timeout: Duration) -> io::Result<File> {
+        let deadline = Instant::now() + timeout;
+        loop {
+            match OpenOptions::new().read(true).write(true).open(pipe_name) {
+                Ok(pipe) => {
+                    set_blocking(&pipe)?;
+                    return Ok(pipe);
+                }
+                Err(error)
+                    if matches!(
+                        error.kind(),
+                        io::ErrorKind::NotFound | io::ErrorKind::PermissionDenied
+                    ) && Instant::now() < deadline =>
+                {
+                    thread::sleep(CONNECT_POLL_INTERVAL);
+                }
+                Err(error) => return Err(error),
+            }
+        }
+    }
+
+    pub fn set_blocking(pipe: &File) -> io::Result<()> {
+        let mode = PIPE_READMODE_BYTE | PIPE_WAIT;
+        // SAFETY: handle is a live Named Pipe client and mode points to initialized storage.
+        if unsafe {
+            SetNamedPipeHandleState(
+                pipe.as_raw_handle() as HANDLE,
+                &mode,
+                ptr::null(),
+                ptr::null(),
+            )
+        } == 0
+        {
+            return Err(io::Error::last_os_error());
+        }
+        Ok(())
+    }
+
+    pub fn read_is_pending(error: &io::Error) -> bool {
+        error.kind() == io::ErrorKind::WouldBlock
+            || error.raw_os_error().map(|value| value as u32) == Some(ERROR_NO_DATA)
+    }
+
+    pub fn process_identity(
+        pid: u32,
+        expected_executable: &Path,
+    ) -> io::Result<HelperProcessIdentity> {
+        // SAFETY: OpenProcess returns a new owned handle or null.
+        let process = unsafe { OpenProcess(PROCESS_QUERY_LIMITED_INFORMATION, 0, pid) };
+        if process.is_null() {
+            return Err(io::Error::last_os_error());
+        }
+        // SAFETY: OpenProcess returned an owned process handle.
+        let process = unsafe { File::from_raw_handle(process as RawHandle) };
+        let handle = process.as_raw_handle() as HANDLE;
+        let mut creation = FILETIME::default();
+        let mut exit = FILETIME::default();
+        let mut kernel = FILETIME::default();
+        let mut user = FILETIME::default();
+        // SAFETY: all output pointers are valid for writes and handle is a process handle.
+        if unsafe { GetProcessTimes(handle, &mut creation, &mut exit, &mut kernel, &mut user) } == 0
+        {
+            return Err(io::Error::last_os_error());
+        }
+        let creation_token =
+            (u64::from(creation.dwHighDateTime) << 32) | u64::from(creation.dwLowDateTime);
+        let mut image = vec![0_u16; 32_768];
+        let mut image_len = u32::try_from(image.len()).expect("image buffer length fits u32");
+        // SAFETY: image is writable for image_len UTF-16 code units.
+        if unsafe {
+            QueryFullProcessImageNameW(
+                handle,
+                PROCESS_NAME_WIN32,
+                image.as_mut_ptr(),
+                &mut image_len,
+            )
+        } == 0
+        {
+            return Err(io::Error::last_os_error());
+        }
+        image.truncate(image_len as usize);
+        let actual_executable =
+            std::path::PathBuf::from(String::from_utf16(&image).map_err(|_| {
+                io::Error::new(
+                    io::ErrorKind::InvalidData,
+                    "helper image path is not valid UTF-16",
+                )
+            })?);
+        let expected = fs::canonicalize(expected_executable)?;
+        let actual = fs::canonicalize(&actual_executable)?;
+        if !actual
+            .to_string_lossy()
+            .eq_ignore_ascii_case(&expected.to_string_lossy())
+        {
+            return Err(io::Error::new(
+                io::ErrorKind::PermissionDenied,
+                "secure pipe client image does not match the launched helper",
+            ));
+        }
+        let build_hash = Sha256::digest(fs::read(actual)?).iter().fold(
+            String::with_capacity(64),
+            |mut output, byte| {
+                use std::fmt::Write as _;
+                write!(output, "{byte:02x}").expect("writing to a String cannot fail");
+                output
+            },
+        );
+        Ok(HelperProcessIdentity::new(pid, creation_token, build_hash))
+    }
+
+    fn current_user_sid() -> io::Result<String> {
+        let mut token: HANDLE = ptr::null_mut();
+        // SAFETY: token points to writable handle storage; pseudo process handle is valid.
+        if unsafe { OpenProcessToken(GetCurrentProcess(), TOKEN_QUERY, &mut token) } == 0 {
+            return Err(io::Error::last_os_error());
+        }
+        // SAFETY: OpenProcessToken returned an owned token handle.
+        let token = unsafe { File::from_raw_handle(token as RawHandle) };
+        let mut required = 0_u32;
+        // SAFETY: null buffer with zero length is the documented size query.
+        unsafe {
+            GetTokenInformation(
+                token.as_raw_handle() as HANDLE,
+                TokenUser,
+                ptr::null_mut(),
+                0,
+                &mut required,
+            )
+        };
+        let size_error = io::Error::last_os_error();
+        if size_error.raw_os_error().map(|value| value as u32) != Some(ERROR_INSUFFICIENT_BUFFER)
+            || required == 0
+        {
+            return Err(size_error);
+        }
+        let word = mem::size_of::<usize>();
+        let words = (required as usize).div_ceil(word);
+        let mut buffer = vec![0_usize; words];
+        // SAFETY: buffer has at least required writable bytes and required is preserved.
+        if unsafe {
+            GetTokenInformation(
+                token.as_raw_handle() as HANDLE,
+                TokenUser,
+                buffer.as_mut_ptr().cast::<c_void>(),
+                required,
+                &mut required,
+            )
+        } == 0
+        {
+            return Err(io::Error::last_os_error());
+        }
+        // SAFETY: TOKEN_USER is the documented structure returned for TokenUser.
+        let token_user = unsafe { &*buffer.as_ptr().cast::<TOKEN_USER>() };
+        let mut sid_string = ptr::null_mut();
+        // SAFETY: SID comes from a successful TokenUser query and output pointer is writable.
+        if unsafe { ConvertSidToStringSidW(token_user.User.Sid, &mut sid_string) } == 0 {
+            return Err(io::Error::last_os_error());
+        }
+        let mut length = 0_usize;
+        // SAFETY: conversion returns a null-terminated LocalAlloc UTF-16 string.
+        unsafe {
+            while *sid_string.add(length) != 0 {
+                length += 1;
+            }
+        }
+        // SAFETY: the preceding scan established a valid initialized slice.
+        let sid = String::from_utf16(unsafe { std::slice::from_raw_parts(sid_string, length) })
+            .map_err(|_| io::Error::new(io::ErrorKind::InvalidData, "current SID is invalid"));
+        // SAFETY: sid_string was allocated by ConvertSidToStringSidW.
+        unsafe { LocalFree(sid_string.cast()) };
+        sid
+    }
+
+    fn wide(value: &str) -> Vec<u16> {
+        value.encode_utf16().chain([0]).collect()
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn frame_codec_is_bounded_and_strict() {
+        let message = ChallengeMessage {
+            protocol_version: 1,
+            nonce: "nonce".to_owned(),
+        };
+        let mut bytes = Vec::new();
+        write_json_frame(&mut bytes, &message).unwrap();
+        let decoded: ChallengeMessage = read_json_frame(&mut bytes.as_slice()).unwrap();
+        assert_eq!(decoded.protocol_version, 1);
+        assert_eq!(decoded.nonce, "nonce");
+
+        let oversized = u32::try_from(MAX_PIPE_FRAME_BYTES + 1)
+            .unwrap()
+            .to_le_bytes();
+        assert!(read_json_frame::<ChallengeMessage>(&mut oversized.as_slice()).is_err());
+    }
+
+    #[test]
+    fn challenge_and_payload_macs_bind_all_fields() {
+        let key = [7_u8; PIPE_KEY_BYTES];
+        let nonce = [9_u8; PIPE_NONCE_BYTES];
+        let identity = HelperProcessIdentity::new(42, 100, "build-a");
+        let mac = identity_mac(&key, AUTH_DOMAIN, &nonce, &identity);
+        assert_eq!(
+            verify_identity_mac(&key, AUTH_DOMAIN, &nonce, &identity, &mac),
+            ChallengeMacVerification::Verified
+        );
+        assert_eq!(
+            verify_identity_mac(
+                &key,
+                AUTH_DOMAIN,
+                &nonce,
+                &HelperProcessIdentity::new(42, 101, "build-a"),
+                &mac,
+            ),
+            ChallengeMacVerification::Rejected
+        );
+        assert_ne!(
+            session_mac(&key, &nonce, b"one"),
+            session_mac(&key, &nonce, b"two")
+        );
+        let session_signature = session_mac(&key, &nonce, b"payload");
+        assert!(verify_session_mac(
+            &key,
+            &nonce,
+            b"payload",
+            &session_signature
+        ));
+        assert!(!verify_session_mac(
+            &key,
+            &nonce,
+            b"tampered",
+            &session_signature
+        ));
+
+        let digest = payload_digest(b"payload");
+        let acknowledgement = session_ack_mac(&key, &nonce, &digest);
+        assert!(verify_session_ack_mac(
+            &key,
+            &nonce,
+            &digest,
+            &acknowledgement
+        ));
+        assert!(!verify_session_ack_mac(
+            &key,
+            &nonce,
+            &payload_digest(b"other payload"),
+            &acknowledgement
+        ));
+        let mut tampered_acknowledgement = acknowledgement;
+        tampered_acknowledgement[0] ^= 1;
+        assert!(!verify_session_ack_mac(
+            &key,
+            &nonce,
+            &digest,
+            &tampered_acknowledgement
+        ));
+    }
+
+    #[test]
+    fn launch_config_rejects_unknown_fields() {
+        let value = serde_json::json!({
+            "schema_version": 2,
+            "target": "host",
+            "username": "user",
+            "width": 1920,
+            "height": 1080,
+            "use_multimon": false,
+            "fullscreen": false,
+            "redirect_clipboard": true,
+            "session_id": "1-2-3",
+            "certificate_sha256": "ab".repeat(32),
+            "credential_ref": null,
+            "password": "must-not-be-accepted"
+        });
+        assert!(serde_json::from_value::<RdpViewerLaunchConfig>(value).is_err());
+    }
+
+    #[cfg(windows)]
+    #[test]
+    fn real_windows_pipe_authenticates_process_and_payload() {
+        let session_id = format!("test-{}-1", std::process::id());
+        let (server, bootstrap) = SecurePipeServer::create(&session_id).unwrap();
+        let key = URL_SAFE_NO_PAD
+            .decode(bootstrap.encoded_key().as_bytes())
+            .unwrap();
+        let pipe_name = bootstrap.pipe_name().to_owned();
+        let expected = current_process_identity().unwrap();
+        let client = std::thread::spawn(move || {
+            let session =
+                receive_secure_pipe_session_with_key(&pipe_name, Zeroizing::new(key)).unwrap();
+            let payload = session.payload().to_vec();
+            session.acknowledge().unwrap();
+            payload
+        });
+
+        server
+            .authenticate_and_send(expected, b"authenticated-session", Duration::from_secs(2))
+            .unwrap();
+        assert_eq!(client.join().unwrap(), b"authenticated-session");
+    }
+
+    #[cfg(windows)]
+    #[test]
+    fn real_windows_pipe_rejects_mismatched_payload_acknowledgement() {
+        let session_id = format!("test-{}-2", std::process::id());
+        let (server, bootstrap) = SecurePipeServer::create(&session_id).unwrap();
+        let key = URL_SAFE_NO_PAD
+            .decode(bootstrap.encoded_key().as_bytes())
+            .unwrap();
+        let pipe_name = bootstrap.pipe_name().to_owned();
+        let expected = current_process_identity().unwrap();
+        let client = std::thread::spawn(move || {
+            let mut session =
+                receive_secure_pipe_session_with_key(&pipe_name, Zeroizing::new(key)).unwrap();
+            session.payload[0] ^= 1;
+            session.acknowledge().unwrap();
+        });
+
+        let error = server
+            .authenticate_and_send(expected, b"authenticated-session", Duration::from_secs(2))
+            .unwrap_err();
+        client.join().unwrap();
+        assert_eq!(error.kind(), io::ErrorKind::PermissionDenied);
+        assert!(error.to_string().contains("does not match"));
+    }
+
+    #[cfg(windows)]
+    #[test]
+    fn real_windows_pipe_rejects_tampered_acknowledgement_mac() {
+        let session_id = format!("test-{}-3", std::process::id());
+        let (server, bootstrap) = SecurePipeServer::create(&session_id).unwrap();
+        let key = URL_SAFE_NO_PAD
+            .decode(bootstrap.encoded_key().as_bytes())
+            .unwrap();
+        let pipe_name = bootstrap.pipe_name().to_owned();
+        let expected = current_process_identity().unwrap();
+        let client = std::thread::spawn(move || {
+            let mut session =
+                receive_secure_pipe_session_with_key(&pipe_name, Zeroizing::new(key)).unwrap();
+            session.key[0] ^= 1;
+            session.acknowledge().unwrap();
+        });
+
+        let error = server
+            .authenticate_and_send(expected, b"authenticated-session", Duration::from_secs(2))
+            .unwrap_err();
+        client.join().unwrap();
+        assert_eq!(error.kind(), io::ErrorKind::PermissionDenied);
+        assert!(error.to_string().contains("MAC was rejected"));
+    }
+
+    #[cfg(windows)]
+    #[test]
+    fn real_windows_pipe_times_out_after_connected_client_stalls() {
+        let session_id = format!("test-{}-4", std::process::id());
+        let (server, bootstrap) = SecurePipeServer::create(&session_id).unwrap();
+        let pipe_name = bootstrap.pipe_name().to_owned();
+        let expected = current_process_identity().unwrap();
+        let (connected_sender, connected_receiver) = std::sync::mpsc::channel();
+        let client = std::thread::spawn(move || {
+            let _pipe = windows_platform::connect_client(&pipe_name, Duration::from_secs(2))
+                .expect("test client connects");
+            connected_sender.send(()).unwrap();
+            std::thread::sleep(Duration::from_millis(500));
+        });
+        connected_receiver
+            .recv_timeout(Duration::from_secs(2))
+            .unwrap();
+
+        let error = server
+            .authenticate_and_send(
+                expected,
+                b"authenticated-session",
+                Duration::from_millis(100),
+            )
+            .unwrap_err();
+        assert_eq!(error.kind(), io::ErrorKind::TimedOut);
+        client.join().unwrap();
+    }
+}
diff --git a/client/crates/client-core/src/session.rs b/client/crates/client-core/src/session.rs
new file mode 100644
index 0000000..88a0ffd
--- /dev/null
+++ b/client/crates/client-core/src/session.rs
@@ -0,0 +1,200 @@
+use std::fmt;
+
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub enum SessionState {
+    Idle,
+    Negotiating,
+    Revalidating,
+    Connected,
+    Failed { reason: String },
+}
+
+impl SessionState {
+    fn name(&self) -> &'static str {
+        match self {
+            Self::Idle => "idle",
+            Self::Negotiating => "negotiating",
+            Self::Revalidating => "revalidating",
+            Self::Connected => "connected",
+            Self::Failed { .. } => "failed",
+        }
+    }
+}
+
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct SessionError {
+    from: &'static str,
+    operation: &'static str,
+}
+
+impl SessionError {
+    #[must_use]
+    pub fn from(&self) -> &'static str {
+        self.from
+    }
+
+    #[must_use]
+    pub fn operation(&self) -> &'static str {
+        self.operation
+    }
+}
+
+impl fmt::Display for SessionError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        write!(
+            formatter,
+            "cannot {} while session is {}",
+            self.operation, self.from
+        )
+    }
+}
+
+impl std::error::Error for SessionError {}
+
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct SessionMachine {
+    state: SessionState,
+}
+
+impl Default for SessionMachine {
+    fn default() -> Self {
+        Self {
+            state: SessionState::Idle,
+        }
+    }
+}
+
+impl SessionMachine {
+    #[must_use]
+    pub fn new() -> Self {
+        Self::default()
+    }
+
+    #[must_use]
+    pub fn state(&self) -> &SessionState {
+        &self.state
+    }
+
+    /// Starts negotiation for an idle session.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`SessionError`] unless the current state is [`SessionState::Idle`].
+    pub fn begin_negotiation(&mut self) -> Result<(), SessionError> {
+        self.transition(
+            "begin negotiation",
+            matches!(self.state, SessionState::Idle),
+            SessionState::Negotiating,
+        )
+    }
+
+    /// Marks a negotiated or revalidated session as connected.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`SessionError`] unless the current state is
+    /// [`SessionState::Negotiating`] or [`SessionState::Revalidating`].
+    pub fn connect(&mut self) -> Result<(), SessionError> {
+        self.transition(
+            "connect",
+            matches!(
+                self.state,
+                SessionState::Negotiating | SessionState::Revalidating
+            ),
+            SessionState::Connected,
+        )
+    }
+
+    /// Starts path revalidation for a connected session.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`SessionError`] unless the current state is
+    /// [`SessionState::Connected`].
+    pub fn begin_revalidation(&mut self) -> Result<(), SessionError> {
+        self.transition(
+            "begin revalidation",
+            matches!(self.state, SessionState::Connected),
+            SessionState::Revalidating,
+        )
+    }
+
+    /// Moves an active session into its failed state.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`SessionError`] when the current state is idle or already failed.
+    pub fn fail(&mut self, reason: impl Into<String>) -> Result<(), SessionError> {
+        let allowed = !matches!(self.state, SessionState::Idle | SessionState::Failed { .. });
+        self.transition(
+            "fail",
+            allowed,
+            SessionState::Failed {
+                reason: reason.into(),
+            },
+        )
+    }
+
+    /// Resets a failed session so it can negotiate again.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`SessionError`] unless the current state is [`SessionState::Failed`].
+    pub fn reset(&mut self) -> Result<(), SessionError> {
+        self.transition(
+            "reset",
+            matches!(self.state, SessionState::Failed { .. }),
+            SessionState::Idle,
+        )
+    }
+
+    fn transition(
+        &mut self,
+        operation: &'static str,
+        allowed: bool,
+        next: SessionState,
+    ) -> Result<(), SessionError> {
+        if !allowed {
+            return Err(SessionError {
+                from: self.state.name(),
+                operation,
+            });
+        }
+        self.state = next;
+        Ok(())
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn normal_session_and_revalidation_flow() {
+        let mut session = SessionMachine::new();
+        session.begin_negotiation().unwrap();
+        session.connect().unwrap();
+        session.begin_revalidation().unwrap();
+        assert_eq!(session.state(), &SessionState::Revalidating);
+        session.connect().unwrap();
+        assert_eq!(session.state(), &SessionState::Connected);
+    }
+
+    #[test]
+    fn invalid_transition_does_not_change_state() {
+        let mut session = SessionMachine::new();
+        let error = session.connect().unwrap_err();
+        assert_eq!(error.from(), "idle");
+        assert_eq!(session.state(), &SessionState::Idle);
+    }
+
+    #[test]
+    fn failed_session_must_reset_before_retrying() {
+        let mut session = SessionMachine::new();
+        session.begin_negotiation().unwrap();
+        session.fail("peer rejected").unwrap();
+        assert!(session.begin_negotiation().is_err());
+        session.reset().unwrap();
+        session.begin_negotiation().unwrap();
+    }
+}
diff --git a/client/helpers/control-service/Cargo.toml b/client/helpers/control-service/Cargo.toml
new file mode 100644
index 0000000..f6f3339
--- /dev/null
+++ b/client/helpers/control-service/Cargo.toml
@@ -0,0 +1,24 @@
+[package]
+name = "remotedesk-control-service"
+version.workspace = true
+edition.workspace = true
+license.workspace = true
+rust-version.workspace = true
+
+[dependencies]
+base64 = "0.22"
+ed25519-dalek = "2.2"
+remotedesk-client-core = { path = "../../crates/client-core" }
+remotedesk-credential-store = { path = "../credential-store" }
+reqwest = { version = "0.12.28", default-features = false, features = ["blocking", "rustls-tls"] }
+rusqlite = { version = "0.32", features = ["bundled"] }
+semver = "1.0"
+serde = { version = "1.0.219", features = ["derive"] }
+serde_json = "1.0.140"
+sha2 = "0.10"
+tiny_http = "0.12.0"
+url = "2.5.4"
+zeroize = "1.8"
+
+[lints]
+workspace = true
diff --git a/client/helpers/control-service/src/main.rs b/client/helpers/control-service/src/main.rs
new file mode 100644
index 0000000..29a68ab
--- /dev/null
+++ b/client/helpers/control-service/src/main.rs
@@ -0,0 +1,4111 @@
+use base64::{Engine as _, engine::general_purpose::STANDARD_NO_PAD};
+use remotedesk_client_core::{
+    CredentialRef, DEFAULT_RDP_PORT, HelperJob, PIPE_BOOTSTRAP_KEY_ENV, RdpEndpoint,
+    RdpViewerLaunchConfig, SecurePipeServer, process_identity,
+};
+use remotedesk_credential_store::{
+    LinuxAgentIdentityRef, linux_agent_identity_delete, linux_agent_identity_status,
+};
+use rusqlite::{Connection, OptionalExtension, params};
+use serde::{Deserialize, Deserializer, Serialize};
+use sha2::{Digest as _, Sha256};
+use std::env;
+use std::fmt::Write as _;
+use std::fs::{self, File, OpenOptions};
+use std::io::{self, Read, Write};
+use std::net::{TcpStream, ToSocketAddrs};
+use std::path::{Component, Path, PathBuf};
+use std::process::{Command, ExitCode, Stdio};
+use std::sync::atomic::{AtomicU64, Ordering};
+use std::sync::{Arc, Mutex, PoisonError};
+use std::thread;
+use std::time::{Duration, Instant, SystemTime, UNIX_EPOCH};
+use tiny_http::{Header, Method, Request, Response, Server, StatusCode};
+
+mod update;
+
+const DEFAULT_PORT: u16 = 4173;
+const HTTP_WORKERS: usize = 4;
+const PROBE_TIMEOUT: Duration = Duration::from_millis(2_500);
+const MAX_REQUEST_BODY: usize = 4_096;
+const MAX_HOSTS_BODY: usize = 256 * 1_024;
+const MIN_RDP_DIMENSION: u16 = 200;
+const MAX_RDP_DIMENSION: u16 = 8_192;
+const MAX_HELPER_RESPONSE: usize = 4_096;
+const DEFAULT_WINDOWS_AGENT_PORT: u16 = 39_501;
+static RDP_FILE_SEQUENCE: AtomicU64 = AtomicU64::new(0);
+
+#[cfg(target_os = "windows")]
+const CREATE_NEW_CONSOLE: u32 = 0x0000_0010;
+#[cfg(target_os = "windows")]
+const CREATE_NO_WINDOW: u32 = 0x0800_0000;
+
+#[derive(Debug, PartialEq, Eq)]
+struct Args {
+    web_root: PathBuf,
+    port: u16,
+    exit_on_stdin_close: bool,
+}
+
+#[derive(Clone, Debug, Deserialize, PartialEq, Eq, Serialize)]
+struct PersistentSettings {
+    #[serde(default)]
+    edge_api_url: Option<String>,
+    update_manifest_url: Option<String>,
+    update_public_key: Option<String>,
+    #[serde(default = "default_auto_check_updates")]
+    auto_check_updates: bool,
+}
+
+impl Default for PersistentSettings {
+    fn default() -> Self {
+        Self {
+            edge_api_url: None,
+            update_manifest_url: None,
+            update_public_key: None,
+            auto_check_updates: true,
+        }
+    }
+}
+
+struct RuntimeSettings {
+    path: Option<PathBuf>,
+    values: Mutex<PersistentSettings>,
+}
+
+struct RuntimeHosts {
+    path: Option<PathBuf>,
+    values: Mutex<serde_json::Value>,
+}
+
+impl RuntimeHosts {
+    fn new(path: Option<PathBuf>) -> Self {
+        let values = path
+            .as_deref()
+            .and_then(|path| load_hosts_database(path).ok())
+            .unwrap_or_else(|| serde_json::json!([]));
+        Self {
+            path,
+            values: Mutex::new(values),
+        }
+    }
+
+    fn snapshot(&self) -> serde_json::Value {
+        self.values
+            .lock()
+            .unwrap_or_else(PoisonError::into_inner)
+            .clone()
+    }
+
+    fn update(&self, hosts: serde_json::Value) -> Result<(), String> {
+        let encoded = serde_json::to_vec(&hosts)
+            .map_err(|error| format!("unable to serialize host database: {error}"))?;
+        if encoded.len() > MAX_HOSTS_BODY || !hosts.is_array() {
+            return Err("host database payload is invalid or too large".to_owned());
+        }
+        if let Some(path) = self.path.as_deref() {
+            save_hosts_database(path, &hosts)?;
+        }
+        *self.values.lock().unwrap_or_else(PoisonError::into_inner) = hosts;
+        Ok(())
+    }
+}
+
+impl RuntimeSettings {
+    fn new(path: Option<PathBuf>) -> Self {
+        let values = path
+            .as_deref()
+            .map(load_persistent_settings)
+            .transpose()
+            .unwrap_or_else(|error| {
+                eprintln!("warning: unable to load persistent settings: {error}");
+                None
+            })
+            .flatten()
+            .unwrap_or_default();
+        Self {
+            path,
+            values: Mutex::new(values),
+        }
+    }
+
+    fn snapshot(&self) -> PersistentSettings {
+        self.values
+            .lock()
+            .unwrap_or_else(PoisonError::into_inner)
+            .clone()
+    }
+
+    fn update(&self, request: &UpdateSettingsRequest) -> Result<PersistentSettings, String> {
+        let edge_api_url = validated_edge_api_url(request.edge_api_url.as_deref())?;
+        let update_manifest_url = request
+            .update_manifest_url
+            .as_deref()
+            .map(str::trim)
+            .filter(|value| !value.is_empty())
+            .map(update::normalize_manifest_url)
+            .transpose()?;
+        let update_public_key = request
+            .update_public_key
+            .as_deref()
+            .map(str::trim)
+            .filter(|value| !value.is_empty())
+            .map(update::normalize_public_key)
+            .transpose()?;
+        validate_update_setting_pair(update_manifest_url.as_deref(), update_public_key.as_deref())?;
+        let updated = PersistentSettings {
+            edge_api_url,
+            update_manifest_url,
+            update_public_key,
+            auto_check_updates: request.auto_check_updates,
+        };
+        if let Some(path) = self.path.as_deref() {
+            save_persistent_settings(path, &updated)?;
+        }
+        *self.values.lock().unwrap_or_else(PoisonError::into_inner) = updated.clone();
+        Ok(updated)
+    }
+}
+
+#[derive(Deserialize)]
+#[serde(deny_unknown_fields)]
+struct UpdateSettingsRequest {
+    edge_api_url: Option<String>,
+    update_manifest_url: Option<String>,
+    update_public_key: Option<String>,
+    #[serde(default = "default_auto_check_updates")]
+    auto_check_updates: bool,
+}
+
+#[derive(Deserialize)]
+#[serde(deny_unknown_fields)]
+struct InstallUpdateRequest {
+    version: String,
+}
+
+#[derive(Deserialize)]
+#[serde(deny_unknown_fields)]
+struct CredentialRequest {
+    credential_ref: String,
+    #[serde(default)]
+    account: Option<String>,
+    #[serde(default)]
+    password: Option<String>,
+}
+
+#[derive(Debug, Clone, Copy, Deserialize, PartialEq, Eq, Serialize)]
+#[serde(rename_all = "snake_case")]
+enum CredentialStatus {
+    Missing,
+    Ready,
+}
+
+#[derive(Debug, Deserialize, PartialEq, Eq, Serialize)]
+struct CredentialStatusResponse {
+    status: CredentialStatus,
+}
+
+#[derive(Serialize)]
+struct CredentialLaunchResponse {
+    launched: bool,
+}
+
+#[derive(Serialize)]
+struct LinuxDesktopLaunchResponse {
+    launched: bool,
+    session_id: String,
+}
+
+#[derive(Serialize)]
+struct WindowsAgentLaunchResponse {
+    launched: bool,
+    session_id: String,
+}
+
+#[derive(Deserialize)]
+#[serde(deny_unknown_fields)]
+struct WindowsAgentLaunchRequest {
+    address: String,
+    frames_per_second: u8,
+    #[serde(default = "default_windows_agent_mode")]
+    mode: String,
+    #[serde(default)]
+    application: Option<String>,
+    #[serde(default)]
+    fullscreen: bool,
+}
+
+fn default_windows_agent_mode() -> String {
+    "desktop".to_owned()
+}
+
+#[derive(Debug, Deserialize, Serialize)]
+struct WindowsAgentSessionDiagnostics {
+    schema_version: u8,
+    session_id: String,
+    state: String,
+    updated_at_unix_ms: u64,
+    frame_count: u64,
+    frames_per_second: Option<f64>,
+    desktop_width: u32,
+    desktop_height: u32,
+    capture_latency_ms: Option<f64>,
+    encode_latency_ms: Option<f64>,
+    frame_processing_latency_ms: Option<f64>,
+    decode_latency_ms: Option<f64>,
+    presentation_latency_ms: Option<f64>,
+    renderer: String,
+    error_code: Option<String>,
+}
+
+#[derive(Deserialize)]
+#[serde(deny_unknown_fields)]
+struct LinuxTerminalLaunchRequest {
+    address: String,
+    user: String,
+    certificate_sha256: String,
+    #[serde(default)]
+    pair: bool,
+    #[serde(default)]
+    agent_public_key: Option<String>,
+    #[serde(default)]
+    edge_api_url: Option<String>,
+}
+
+#[derive(Deserialize)]
+#[serde(deny_unknown_fields)]
+struct LinuxDesktopLaunchRequest {
+    address: String,
+    user: String,
+    certificate_sha256: String,
+    width: u16,
+    height: u16,
+    frames_per_second: u8,
+    #[serde(default)]
+    fullscreen: bool,
+    #[serde(default)]
+    follow_window: bool,
+    #[serde(default)]
+    capture_input: bool,
+    #[serde(default = "default_enabled")]
+    clipboard_read: bool,
+    #[serde(default = "default_enabled")]
+    clipboard_write: bool,
+    #[serde(default)]
+    edge_api_url: Option<String>,
+}
+
+#[derive(Deserialize)]
+#[serde(deny_unknown_fields)]
+struct LinuxFileTransferRequest {
+    address: String,
+    user: String,
+    certificate_sha256: String,
+    direction: LinuxFileDirection,
+    local_path: String,
+    remote_path: String,
+    #[serde(default)]
+    edge_api_url: Option<String>,
+}
+
+#[derive(Deserialize)]
+#[serde(deny_unknown_fields)]
+struct LinuxAgentIdentityRequest {
+    certificate_sha256: String,
+}
+
+#[derive(Deserialize)]
+#[serde(deny_unknown_fields)]
+struct LinuxAgentProbeRequest {
+    address: String,
+    certificate_sha256: String,
+}
+
+#[derive(Debug, Deserialize, Serialize)]
+#[serde(deny_unknown_fields)]
+#[expect(
+    clippy::struct_excessive_bools,
+    reason = "the helper response reports independent Agent capabilities"
+)]
+struct LinuxAgentProbeResponse {
+    ok: bool,
+    latency_ms: u64,
+    protocol_major: u16,
+    protocol_minor: u16,
+    terminal: bool,
+    desktop: bool,
+    files: bool,
+    edge_presence_configured: bool,
+    edge_presence_online: bool,
+    edge_signaling_configured: bool,
+    edge_signaling_online: bool,
+}
+
+#[derive(Deserialize)]
+#[serde(rename_all = "snake_case")]
+enum LinuxFileDirection {
+    Upload,
+    Download,
+}
+
+#[derive(Deserialize)]
+struct ProbeRequest {
+    address: String,
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize)]
+#[serde(rename_all = "snake_case")]
+enum ProbeStatus {
+    Reachable,
+    DnsFailed,
+    Timeout,
+    Refused,
+    Unreachable,
+}
+
+#[derive(Debug, PartialEq, Eq, Serialize)]
+struct ProbeResponse {
+    status: ProbeStatus,
+    reachable: bool,
+    latency_ms: Option<u64>,
+    port: u16,
+}
+
+#[derive(Debug, Clone, Copy, Deserialize, PartialEq, Eq, Serialize)]
+#[serde(rename_all = "snake_case")]
+enum ProtocolProbeStage {
+    Input,
+    Dns,
+    Tcp,
+    RdpNegotiation,
+    Tls,
+}
+
+#[derive(Debug, Clone, Copy, Deserialize, PartialEq, Eq, Serialize)]
+#[serde(rename_all = "snake_case")]
+enum NegotiatedSecurityProtocol {
+    Hybrid,
+    HybridExtended,
+}
+
+#[derive(Debug, Clone, Copy, Deserialize, PartialEq, Eq, Serialize)]
+#[serde(rename_all = "snake_case")]
+enum ProtocolProbeErrorCode {
+    InvalidRequest,
+    RequestTooLarge,
+    InvalidTarget,
+    TimeoutOutOfRange,
+    DnsFailed,
+    DnsReturnedNoAddresses,
+    TcpConnectFailed,
+    Timeout,
+    LocalAddressUnavailable,
+    RdpNegotiationFailed,
+    UnexpectedIronRdpState,
+    TlsHandshakeFailed,
+    CertificateEncodingFailed,
+}
+
+#[derive(Debug, Deserialize, PartialEq, Eq, Serialize)]
+struct ProtocolProbeResponse {
+    ok: bool,
+    stage: ProtocolProbeStage,
+    security_protocol: Option<NegotiatedSecurityProtocol>,
+    tcp_latency_ms: Option<u64>,
+    total_latency_ms: Option<u64>,
+    certificate_sha256: Option<String>,
+    error_code: Option<ProtocolProbeErrorCode>,
+}
+
+#[derive(Deserialize)]
+#[serde(deny_unknown_fields)]
+struct LaunchRequest {
+    address: String,
+    #[serde(default)]
+    username: String,
+    resolution: RdpResolution,
+    use_multimon: bool,
+    #[serde(default)]
+    monitor_indices: Vec<u8>,
+    #[serde(default)]
+    client: RdpClientMode,
+    #[serde(default)]
+    fullscreen: bool,
+    #[serde(default)]
+    certificate_sha256: Option<String>,
+    #[serde(default)]
+    credential_ref: Option<String>,
+    #[serde(default = "default_enabled")]
+    redirect_clipboard: bool,
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+enum RdpResolution {
+    FollowWindow,
+    Fixed { width: u16, height: u16 },
+}
+
+#[derive(Deserialize)]
+#[serde(untagged)]
+enum RdpResolutionInput {
+    Structured(StructuredRdpResolution),
+    Legacy(String),
+}
+
+#[derive(Deserialize)]
+#[serde(tag = "mode", rename_all = "snake_case")]
+enum StructuredRdpResolution {
+    FollowWindow,
+    Fixed { width: u16, height: u16 },
+}
+
+impl<'de> Deserialize<'de> for RdpResolution {
+    fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>
+    where
+        D: Deserializer<'de>,
+    {
+        match RdpResolutionInput::deserialize(deserializer)? {
+            RdpResolutionInput::Structured(StructuredRdpResolution::FollowWindow) => {
+                Ok(Self::FollowWindow)
+            }
+            RdpResolutionInput::Structured(StructuredRdpResolution::Fixed { width, height }) => {
+                Ok(Self::Fixed { width, height })
+            }
+            RdpResolutionInput::Legacy(value) => parse_legacy_resolution(&value)
+                .ok_or_else(|| serde::de::Error::custom("legacy RDP resolution is invalid")),
+        }
+    }
+}
+
+fn parse_legacy_resolution(value: &str) -> Option<RdpResolution> {
+    if value == "Follow window" {
+        return Some(RdpResolution::FollowWindow);
+    }
+    let (width, height) = value.split_once(" x ")?;
+    Some(RdpResolution::Fixed {
+        width: width.parse().ok()?,
+        height: height.parse().ok()?,
+    })
+}
+
+impl RdpResolution {
+    fn dimensions(self) -> Result<Option<(u16, u16)>, &'static str> {
+        match self {
+            Self::FollowWindow => Ok(None),
+            Self::Fixed { width, height }
+                if (MIN_RDP_DIMENSION..=MAX_RDP_DIMENSION).contains(&width)
+                    && (MIN_RDP_DIMENSION..=MAX_RDP_DIMENSION).contains(&height) =>
+            {
+                Ok(Some((width, height)))
+            }
+            Self::Fixed { .. } => Err("RDP dimensions must be between 200 and 8192"),
+        }
+    }
+}
+
+#[derive(Serialize)]
+struct LaunchResponse {
+    launched: bool,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    client: Option<RdpClientMode>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    session_id: Option<String>,
+}
+
+#[derive(Debug, Deserialize, Serialize)]
+struct NativeSessionDiagnostics {
+    schema_version: u8,
+    session_id: String,
+    state: NativeSessionState,
+    started_at_unix_ms: u64,
+    updated_at_unix_ms: u64,
+    frame_count: u64,
+    frames_per_second: Option<f64>,
+    desktop_width: u16,
+    desktop_height: u16,
+    #[serde(default = "default_monitor_count")]
+    monitor_count: u8,
+    #[serde(default)]
+    multi_monitor: bool,
+    #[serde(default)]
+    network_latency_ms: Option<u32>,
+    #[serde(default)]
+    base_network_latency_ms: Option<u32>,
+    #[serde(default)]
+    bandwidth_kbps: Option<u32>,
+    #[serde(default)]
+    decode_latency_ms: Option<f64>,
+    presentation_latency_ms: Option<f64>,
+    #[serde(default)]
+    renderer: Option<String>,
+    #[serde(default)]
+    frame_conversion_pixels: u64,
+    #[serde(default)]
+    frame_upload_mode: Option<String>,
+    #[serde(default)]
+    frame_upload_pixels: u64,
+    #[serde(default)]
+    reconnect_attempt: u8,
+    #[serde(default)]
+    resize_generation: u64,
+    #[serde(default)]
+    resize_state: NativeResizeState,
+    #[serde(default)]
+    resize_requested_width: Option<u16>,
+    #[serde(default)]
+    resize_requested_height: Option<u16>,
+    #[serde(default)]
+    resize_failure: Option<String>,
+    error_code: Option<String>,
+}
+
+#[derive(Debug, Deserialize, Serialize)]
+#[serde(rename_all = "snake_case")]
+enum NativeSessionState {
+    WaitingForCredentials,
+    Connecting,
+    Connected,
+    Reconnecting,
+    Failed,
+    Terminated,
+}
+
+#[derive(Debug, Clone, Copy, Default, Deserialize, PartialEq, Eq, Serialize)]
+#[serde(rename_all = "snake_case")]
+enum NativeResizeState {
+    #[default]
+    Idle,
+    Pending,
+    ReconnectRequired,
+    Reconnecting,
+    Confirmed,
+    Cancelled,
+}
+
+#[derive(Debug, Deserialize, Serialize)]
+#[serde(deny_unknown_fields)]
+struct LinuxDesktopSessionDiagnostics {
+    schema_version: u8,
+    session_id: String,
+    state: LinuxDesktopSessionState,
+    updated_at_unix_ms: u64,
+    frame_count: u64,
+    frames_per_second: Option<f64>,
+    desktop_width: u16,
+    desktop_height: u16,
+    network_latency_ms: Option<f64>,
+    capture_latency_ms: Option<f64>,
+    encode_latency_ms: Option<f64>,
+    compression_level: Option<u8>,
+    compression_ratio_percent: Option<f64>,
+    decode_latency_ms: Option<f64>,
+    presentation_latency_ms: Option<f64>,
+    #[serde(default)]
+    clipboard_read: bool,
+    #[serde(default)]
+    clipboard_write: bool,
+    #[serde(default)]
+    reconnect_attempt: u8,
+    error_code: Option<String>,
+}
+
+#[derive(Debug, Deserialize, Serialize)]
+#[serde(rename_all = "snake_case")]
+enum LinuxDesktopSessionState {
+    Connecting,
+    Connected,
+    Reconnecting,
+    Failed,
+    Terminated,
+}
+
+#[derive(Debug, Clone, Copy, Default, Deserialize, PartialEq, Eq, Serialize)]
+#[serde(rename_all = "snake_case")]
+enum RdpClientMode {
+    #[default]
+    System,
+    Native,
+}
+
+#[derive(Serialize)]
+struct HealthResponse {
+    status: &'static str,
+}
+
+#[derive(Serialize)]
+struct ShellReadyResponse {
+    ready: bool,
+    proof: String,
+}
+
+#[derive(Debug, PartialEq, Eq, Serialize)]
+struct CapabilitiesResponse {
+    version: &'static str,
+    platform: &'static str,
+    application: ApplicationCapabilities,
+    rdp: RdpCapabilities,
+    linux: LinuxCapabilities,
+    edge: EdgeCapabilities,
+    update: UpdateCapabilities,
+}
+
+#[derive(Debug, PartialEq, Eq, Serialize)]
+struct ApplicationCapabilities {
+    desktop_shell: bool,
+    shell_kind: &'static str,
+}
+
+#[derive(Debug, PartialEq, Eq, Serialize)]
+#[expect(
+    clippy::struct_excessive_bools,
+    reason = "runtime capability JSON intentionally exposes independent feature flags"
+)]
+struct RdpCapabilities {
+    probe: bool,
+    protocol_probe: bool,
+    external_launch: bool,
+    native_launch: bool,
+    native_diagnostics: bool,
+    native_multimon: bool,
+    session_network_metrics: bool,
+    session_decode_metrics: bool,
+    region_pixel_conversion: bool,
+    secure_named_pipe: bool,
+    secure_pipe_config_ack: bool,
+    secure_pipe_handshake_timeout: bool,
+    job_object_lifecycle: bool,
+    certificate_pinning: bool,
+    automatic_reconnect: bool,
+    resize_confirmation: bool,
+    clipboard: bool,
+    audio_playback: bool,
+    native_renderer: &'static str,
+    d3d11_device_available: bool,
+    d3d11_dirty_rect_upload: bool,
+    credential_manager: bool,
+    credential_store: bool,
+}
+
+#[derive(Debug, PartialEq, Eq, Serialize)]
+#[expect(
+    clippy::struct_excessive_bools,
+    reason = "runtime capability JSON intentionally exposes independent feature flags"
+)]
+struct LinuxCapabilities {
+    agent_session: bool,
+    agent_probe: bool,
+    terminal_session: bool,
+    desktop_session: bool,
+    x11_desktop: bool,
+    relative_pointer: bool,
+    adaptive_frame_pacing: bool,
+    adaptive_compression: bool,
+    desktop_session_resume: bool,
+    desktop_session_crash_resume: bool,
+    direct_webrtc_signaling: bool,
+    opus_audio: bool,
+    clipboard_read: bool,
+    clipboard_write: bool,
+    wayland_desktop: bool,
+    native_video: bool,
+    native_video_decoder_probe: bool,
+    native_video_surface_presenter: bool,
+    file_transfer: bool,
+    agent_identity_store: bool,
+}
+
+#[derive(Debug, PartialEq, Eq, Serialize)]
+#[expect(
+    clippy::struct_excessive_bools,
+    reason = "runtime capability JSON intentionally exposes independent Edge feature flags"
+)]
+struct EdgeCapabilities {
+    relay: bool,
+    signed_intent: bool,
+    linux_session_relay: bool,
+    linux_known_device_rendezvous: bool,
+    remote_pairing: bool,
+}
+
+#[derive(Debug, PartialEq, Eq, Serialize)]
+struct UpdateCapabilities {
+    configured: bool,
+    check: bool,
+    install: bool,
+}
+
+fn capabilities(settings: &PersistentSettings) -> CapabilitiesResponse {
+    let update_configured =
+        settings.update_manifest_url.is_some() && settings.update_public_key.is_some();
+    let d3d11_available = d3d11_device_available();
+    let desktop_shell = env::var("REMOTEDESK_DESKTOP_SHELL").as_deref() == Ok("tauri-2");
+    CapabilitiesResponse {
+        version: env!("CARGO_PKG_VERSION"),
+        platform: env::consts::OS,
+        application: ApplicationCapabilities {
+            desktop_shell,
+            shell_kind: if desktop_shell {
+                "tauri-2"
+            } else {
+                "standalone"
+            },
+        },
+        rdp: RdpCapabilities {
+            probe: true,
+            protocol_probe: rdp_session_helper_path().is_ok(),
+            external_launch: cfg!(target_os = "windows"),
+            native_launch: cfg!(target_os = "windows") && native_rdp_viewer_path().is_ok(),
+            native_diagnostics: cfg!(target_os = "windows") && native_rdp_viewer_path().is_ok(),
+            native_multimon: cfg!(target_os = "windows") && native_rdp_viewer_path().is_ok(),
+            session_network_metrics: cfg!(target_os = "windows")
+                && native_rdp_viewer_path().is_ok(),
+            session_decode_metrics: cfg!(target_os = "windows") && native_rdp_viewer_path().is_ok(),
+            region_pixel_conversion: cfg!(target_os = "windows")
+                && native_rdp_viewer_path().is_ok(),
+            secure_named_pipe: cfg!(target_os = "windows") && native_rdp_viewer_path().is_ok(),
+            secure_pipe_config_ack: cfg!(target_os = "windows") && native_rdp_viewer_path().is_ok(),
+            secure_pipe_handshake_timeout: cfg!(target_os = "windows")
+                && native_rdp_viewer_path().is_ok(),
+            job_object_lifecycle: cfg!(target_os = "windows") && native_rdp_viewer_path().is_ok(),
+            certificate_pinning: false,
+            automatic_reconnect: cfg!(target_os = "windows") && native_rdp_viewer_path().is_ok(),
+            resize_confirmation: cfg!(target_os = "windows") && native_rdp_viewer_path().is_ok(),
+            clipboard: cfg!(target_os = "windows") && native_rdp_viewer_path().is_ok(),
+            audio_playback: cfg!(target_os = "windows") && native_rdp_viewer_path().is_ok(),
+            native_renderer: if d3d11_available {
+                "d3d11_cpu_upload"
+            } else {
+                "software_framebuffer"
+            },
+            d3d11_device_available: d3d11_available,
+            d3d11_dirty_rect_upload: d3d11_available
+                && cfg!(target_os = "windows")
+                && native_rdp_viewer_path().is_ok(),
+            credential_manager: cfg!(target_os = "windows"),
+            credential_store: cfg!(target_os = "windows") && credential_helper_path().is_ok(),
+        },
+        linux: LinuxCapabilities {
+            agent_session: linux_terminal_helper_path().is_ok(),
+            agent_probe: linux_terminal_helper_path().is_ok(),
+            terminal_session: linux_terminal_helper_path().is_ok(),
+            desktop_session: linux_terminal_helper_path().is_ok(),
+            x11_desktop: linux_terminal_helper_path().is_ok(),
+            relative_pointer: linux_terminal_helper_path().is_ok(),
+            adaptive_frame_pacing: linux_terminal_helper_path().is_ok(),
+            adaptive_compression: linux_terminal_helper_path().is_ok(),
+            desktop_session_resume: linux_terminal_helper_path().is_ok(),
+            desktop_session_crash_resume: cfg!(target_os = "windows")
+                && linux_terminal_helper_path().is_ok(),
+            direct_webrtc_signaling: linux_terminal_helper_path().is_ok(),
+            opus_audio: cfg!(target_os = "windows") && linux_terminal_helper_path().is_ok(),
+            clipboard_read: cfg!(target_os = "windows") && linux_terminal_helper_path().is_ok(),
+            clipboard_write: cfg!(target_os = "windows") && linux_terminal_helper_path().is_ok(),
+            // The helper is built with the Wayland Portal/EIS feature. Runtime Portal
+            // availability is still checked by the Agent session before authorization.
+            wayland_desktop: linux_terminal_helper_path().is_ok(),
+            native_video: false,
+            native_video_decoder_probe: native_video_h264_decoder_available(),
+            native_video_surface_presenter: native_video_surface_presenter_available(),
+            file_transfer: linux_terminal_helper_path().is_ok(),
+            agent_identity_store: linux_terminal_helper_path().is_ok(),
+        },
+        edge: EdgeCapabilities {
+            relay: false,
+            signed_intent: linux_terminal_helper_path().is_ok(),
+            linux_session_relay: linux_terminal_helper_path().is_ok(),
+            linux_known_device_rendezvous: linux_terminal_helper_path().is_ok(),
+            remote_pairing: linux_terminal_helper_path().is_ok(),
+        },
+        update: UpdateCapabilities {
+            configured: update_configured,
+            check: update_configured,
+            install: update_configured
+                && cfg!(target_os = "windows")
+                && update_apply_script_path().is_ok(),
+        },
+    }
+}
+
+struct RuntimeUpdates {
+    client: update::UpdateClient,
+    installing: std::sync::atomic::AtomicBool,
+}
+
+impl RuntimeUpdates {
+    fn new() -> Result<Self, String> {
+        let download_dir = update::default_update_directory()
+            .unwrap_or_else(|| env::temp_dir().join("RemoteDesk").join("updates"));
+        Ok(Self {
+            client: update::UpdateClient::new(download_dir)?,
+            installing: std::sync::atomic::AtomicBool::new(false),
+        })
+    }
+
+    fn config(settings: &PersistentSettings) -> Result<update::UpdateConfig, String> {
+        match (
+            settings.update_manifest_url.as_deref(),
+            settings.update_public_key.as_deref(),
+        ) {
+            (Some(manifest_url), Some(public_key)) => {
+                update::UpdateConfig::new(manifest_url, public_key)
+            }
+            _ => Err("online updates are not configured".to_owned()),
+        }
+    }
+}
+
+#[derive(Serialize)]
+struct ErrorResponse<'a> {
+    error: &'a str,
+}
+
+#[derive(Debug, Deserialize)]
+#[serde(deny_unknown_fields)]
+struct WindowsAgentProbeRequest {
+    address: String,
+}
+
+#[derive(Debug, Serialize)]
+struct WindowsAgentProbeResponse {
+    ok: bool,
+    latency_ms: u64,
+    protocol_major: u16,
+    protocol_minor: u16,
+    capture_backend: String,
+    preferred_capture_backend: String,
+    software_fallback_backend: Option<String>,
+    software_fallback_available: bool,
+    input_backend: String,
+    authenticated: bool,
+    desktop_session: bool,
+    capture_latency_ms: Option<f64>,
+    encode_latency_ms: Option<f64>,
+    frame_processing_latency_ms: Option<f64>,
+    applications: Vec<WindowsAgentApplication>,
+}
+
+#[derive(Debug, Deserialize, Serialize)]
+struct WindowsAgentApplication {
+    id: String,
+    name: String,
+}
+
+fn main() -> ExitCode {
+    match run() {
+        Ok(()) => ExitCode::SUCCESS,
+        Err(error) => {
+            eprintln!("error: {error}");
+            ExitCode::FAILURE
+        }
+    }
+}
+
+fn probe_windows_agent(address: &str) -> Result<WindowsAgentProbeResponse, String> {
+    let started = Instant::now();
+    let endpoint = normalize_windows_agent_address(address)?;
+    let mut stream = TcpStream::connect_timeout(
+        &endpoint
+            .to_socket_addrs()
+            .map_err(|_| "Windows Agent 地址无效".to_owned())?
+            .next()
+            .ok_or_else(|| "Windows Agent 地址无效".to_owned())?,
+        PROBE_TIMEOUT,
+    )
+    .map_err(|error| format!("Windows Agent 连接失败：{error}"))?;
+    stream
+        .set_read_timeout(Some(PROBE_TIMEOUT))
+        .map_err(|error| error.to_string())?;
+    stream
+        .set_write_timeout(Some(PROBE_TIMEOUT))
+        .map_err(|error| error.to_string())?;
+    let mut hello = Vec::with_capacity(512);
+    let mut byte = [0_u8; 1];
+    while hello.len() < 4_096 {
+        stream
+            .read_exact(&mut byte)
+            .map_err(|error| error.to_string())?;
+        if byte[0] == b'\n' {
+            break;
+        }
+        hello.push(byte[0]);
+    }
+    let value: serde_json::Value = serde_json::from_slice(&hello)
+        .map_err(|_| "Windows Agent 返回的 Hello 不是有效 JSON".to_owned())?;
+    if value.get("kind").and_then(serde_json::Value::as_str) != Some("windows_agent_hello") {
+        return Err("目标不是 RemoteDesk Windows Agent".to_owned());
+    }
+    stream
+        .write_all(b"{\"kind\":\"status\"}\n")
+        .map_err(|error| format!("Windows Agent 状态请求失败：{error}"))?;
+    let status = read_windows_agent_json_line(&mut stream)?;
+    stream
+        .write_all(b"{\"kind\":\"list_applications\"}\n")
+        .map_err(|error| format!("Windows Agent 应用列表请求失败：{error}"))?;
+    let applications = match read_windows_agent_json_line(&mut stream)? {
+        value if value.get("kind").and_then(serde_json::Value::as_str) == Some("applications") => {
+            serde_json::from_value(value.get("applications").cloned().unwrap_or_default())
+                .unwrap_or_default()
+        }
+        _ => Vec::new(),
+    };
+    Ok(WindowsAgentProbeResponse {
+        ok: true,
+        latency_ms: started.elapsed().as_millis().min(u128::from(u64::MAX)) as u64,
+        protocol_major: value
+            .get("protocol_major")
+            .and_then(serde_json::Value::as_u64)
+            .unwrap_or(0) as u16,
+        protocol_minor: value
+            .get("protocol_minor")
+            .and_then(serde_json::Value::as_u64)
+            .unwrap_or(0) as u16,
+        capture_backend: value
+            .get("capture_backend")
+            .and_then(serde_json::Value::as_str)
+            .unwrap_or("unknown")
+            .to_owned(),
+        preferred_capture_backend: value
+            .get("preferred_capture_backend")
+            .and_then(serde_json::Value::as_str)
+            .or_else(|| {
+                value
+                    .get("capture_backend")
+                    .and_then(serde_json::Value::as_str)
+            })
+            .unwrap_or("unknown")
+            .to_owned(),
+        software_fallback_backend: value
+            .get("software_fallback_backend")
+            .and_then(serde_json::Value::as_str)
+            .map(str::to_owned),
+        software_fallback_available: value
+            .get("software_fallback_available")
+            .and_then(serde_json::Value::as_bool)
+            .unwrap_or(false),
+        input_backend: value
+            .get("input_backend")
+            .and_then(serde_json::Value::as_str)
+            .unwrap_or("unknown")
+            .to_owned(),
+        authenticated: value
+            .get("authenticated")
+            .and_then(serde_json::Value::as_bool)
+            .unwrap_or(false),
+        desktop_session: false,
+        capture_latency_ms: optional_non_negative_metric(&status, "capture_latency_ms"),
+        encode_latency_ms: optional_non_negative_metric(&status, "encode_latency_ms"),
+        frame_processing_latency_ms: optional_non_negative_metric(
+            &status,
+            "frame_processing_latency_ms",
+        ),
+        applications,
+    })
+}
+
+fn read_windows_agent_json_line(stream: &mut TcpStream) -> Result<serde_json::Value, String> {
+    let mut line = Vec::with_capacity(512);
+    let mut byte = [0_u8; 1];
+    while line.len() < 4_096 {
+        stream
+            .read_exact(&mut byte)
+            .map_err(|error| format!("Windows Agent 状态读取失败：{error}"))?;
+        if byte[0] == b'\n' {
+            return serde_json::from_slice(&line)
+                .map_err(|_| "Windows Agent 返回的状态不是有效 JSON".to_owned());
+        }
+        line.push(byte[0]);
+    }
+    Err("Windows Agent 状态超过 4 KiB".to_owned())
+}
+
+fn optional_non_negative_metric(value: &serde_json::Value, field: &str) -> Option<f64> {
+    value
+        .get(field)
+        .and_then(serde_json::Value::as_f64)
+        .filter(|metric| metric.is_finite() && *metric >= 0.0)
+}
+
+fn normalize_windows_agent_address(address: &str) -> Result<String, String> {
+    let address = address.trim();
+    if address.is_empty() || address.contains(char::is_whitespace) || address.contains("://") {
+        return Err("Windows Agent 地址无效".to_owned());
+    }
+    if address.starts_with('[') {
+        if address.contains("]:") {
+            return Ok(address.to_owned());
+        }
+        if address.ends_with(']') {
+            return Ok(format!("{address}:{DEFAULT_WINDOWS_AGENT_PORT}"));
+        }
+        return Err("Windows Agent 地址无效".to_owned());
+    }
+    if address.matches(':').count() > 1 {
+        return Ok(format!("[{address}]:{DEFAULT_WINDOWS_AGENT_PORT}"));
+    }
+    if let Some((host, port)) = address.rsplit_once(':') {
+        if host.is_empty() || port.parse::<u16>().ok().filter(|port| *port > 0).is_none() {
+            return Err("Windows Agent 地址无效".to_owned());
+        }
+        return Ok(address.to_owned());
+    }
+    Ok(format!("{address}:{DEFAULT_WINDOWS_AGENT_PORT}"))
+}
+
+fn run() -> Result<(), String> {
+    let args = parse_args(env::args().skip(1))?;
+    if args.exit_on_stdin_close {
+        start_stdin_watchdog();
+    }
+    let web_root = args
+        .web_root
+        .canonicalize()
+        .map_err(|error| format!("unable to open web root: {error}"))?;
+    if !web_root.join("index.html").is_file() {
+        return Err("web root does not contain index.html".to_owned());
+    }
+
+    let bind_address = format!("127.0.0.1:{}", args.port);
+    let server = Arc::new(
+        Server::http(&bind_address)
+            .map_err(|error| format!("unable to listen on {bind_address}: {error}"))?,
+    );
+    println!("RemoteDesk control service: http://{bind_address}/");
+    println!("Press Ctrl+C to stop.");
+
+    let web_root = Arc::new(web_root);
+    let port = args.port;
+    let data_root = default_data_root();
+    let settings = Arc::new(RuntimeSettings::new(
+        data_root.as_ref().map(|root| root.join("settings.json")),
+    ));
+    let hosts = Arc::new(RuntimeHosts::new(
+        data_root.as_ref().map(|root| root.join("hosts.db")),
+    ));
+    let updates = Arc::new(RuntimeUpdates::new()?);
+    let workers = (0..HTTP_WORKERS)
+        .map(|_| {
+            let server = Arc::clone(&server);
+            let web_root = Arc::clone(&web_root);
+            let settings = Arc::clone(&settings);
+            let hosts = Arc::clone(&hosts);
+            let updates = Arc::clone(&updates);
+            thread::spawn(move || {
+                for request in server.incoming_requests() {
+                    handle_request(request, &web_root, port, &settings, &hosts, &updates);
+                }
+            })
+        })
+        .collect::<Vec<_>>();
+    for worker in workers {
+        worker
+            .join()
+            .map_err(|_| "control-service worker stopped unexpectedly".to_owned())?;
+    }
+    Ok(())
+}
+
+fn parse_args(mut args: impl Iterator<Item = String>) -> Result<Args, String> {
+    let mut web_root = None;
+    let mut port = DEFAULT_PORT;
+    let mut exit_on_stdin_close = false;
+    while let Some(argument) = args.next() {
+        match argument.as_str() {
+            "--web-root" => web_root = Some(PathBuf::from(required_value(&mut args, &argument)?)),
+            "--port" => {
+                port = required_value(&mut args, &argument)?
+                    .parse::<u16>()
+                    .ok()
+                    .filter(|value| *value >= 1_024)
+                    .ok_or_else(|| "--port must be between 1024 and 65535".to_owned())?;
+            }
+            "--exit-on-stdin-close" => exit_on_stdin_close = true,
+            "--help" | "-h" => return Err(usage().to_owned()),
+            _ => return Err("unknown control-service argument".to_owned()),
+        }
+    }
+    Ok(Args {
+        web_root: web_root.ok_or_else(|| "--web-root is required".to_owned())?,
+        port,
+        exit_on_stdin_close,
+    })
+}
+
+fn required_value(args: &mut impl Iterator<Item = String>, option: &str) -> Result<String, String> {
+    args.next()
+        .filter(|value| !value.is_empty() && !value.starts_with("--"))
+        .ok_or_else(|| format!("{option} requires a value"))
+}
+
+fn usage() -> &'static str {
+    "usage: remotedesk-control-service --web-root <directory> [--port <1024-65535>] [--exit-on-stdin-close]"
+}
+
+fn default_data_root() -> Option<PathBuf> {
+    env::var_os("LOCALAPPDATA")
+        .filter(|value| !value.is_empty())
+        .map(PathBuf::from)
+        .map(|root| root.join("RemoteDesk"))
+}
+
+fn load_hosts_database(path: &Path) -> Result<serde_json::Value, String> {
+    let connection =
+        Connection::open(path).map_err(|error| format!("unable to open host database: {error}"))?;
+    connection
+        .execute_batch("CREATE TABLE IF NOT EXISTS app_state (id INTEGER PRIMARY KEY, hosts_json TEXT NOT NULL)")
+        .map_err(|error| format!("unable to initialize host database: {error}"))?;
+    let data = connection
+        .query_row("SELECT hosts_json FROM app_state WHERE id = 1", [], |row| {
+            row.get::<_, String>(0)
+        })
+        .optional()
+        .map_err(|error| format!("unable to read host database: {error}"))?;
+    match data {
+        Some(data) => serde_json::from_str(&data)
+            .map_err(|_| "host database contains invalid JSON".to_owned()),
+        None => Ok(serde_json::json!([])),
+    }
+}
+
+fn save_hosts_database(path: &Path, hosts: &serde_json::Value) -> Result<(), String> {
+    let parent = path
+        .parent()
+        .ok_or_else(|| "host database path has no parent".to_owned())?;
+    fs::create_dir_all(parent)
+        .map_err(|error| format!("unable to create host database directory: {error}"))?;
+    let connection =
+        Connection::open(path).map_err(|error| format!("unable to open host database: {error}"))?;
+    connection.execute_batch("CREATE TABLE IF NOT EXISTS app_state (id INTEGER PRIMARY KEY, hosts_json TEXT NOT NULL)")
+        .map_err(|error| format!("unable to initialize host database: {error}"))?;
+    let data = serde_json::to_string(hosts)
+        .map_err(|error| format!("unable to encode host database: {error}"))?;
+    connection.execute("INSERT INTO app_state (id, hosts_json) VALUES (1, ?1) ON CONFLICT(id) DO UPDATE SET hosts_json = excluded.hosts_json", params![data])
+        .map_err(|error| format!("unable to save host database: {error}"))?;
+    Ok(())
+}
+
+fn load_persistent_settings(path: &Path) -> Result<Option<PersistentSettings>, String> {
+    let data = match fs::read(path) {
+        Ok(data) => data,
+        Err(error) if error.kind() == io::ErrorKind::NotFound => return Ok(None),
+        Err(error) => return Err(format!("unable to read settings: {error}")),
+    };
+    let mut settings: PersistentSettings =
+        serde_json::from_slice(&data).map_err(|_| "settings file is not valid JSON".to_owned())?;
+    settings.edge_api_url = validated_edge_api_url(settings.edge_api_url.as_deref())?;
+    settings.update_manifest_url = settings
+        .update_manifest_url
+        .as_deref()
+        .map(update::normalize_manifest_url)
+        .transpose()?;
+    settings.update_public_key = settings
+        .update_public_key
+        .as_deref()
+        .map(update::normalize_public_key)
+        .transpose()?;
+    validate_update_setting_pair(
+        settings.update_manifest_url.as_deref(),
+        settings.update_public_key.as_deref(),
+    )?;
+    Ok(Some(settings))
+}
+
+fn default_auto_check_updates() -> bool {
+    true
+}
+
+fn default_enabled() -> bool {
+    true
+}
+
+fn default_monitor_count() -> u8 {
+    1
+}
+
+fn validate_update_setting_pair(
+    manifest_url: Option<&str>,
+    public_key: Option<&str>,
+) -> Result<(), String> {
+    if manifest_url.is_some() != public_key.is_some() {
+        return Err("update manifest URL and public key must be configured together".to_owned());
+    }
+    Ok(())
+}
+
+fn save_persistent_settings(path: &Path, settings: &PersistentSettings) -> Result<(), String> {
+    let parent = path
+        .parent()
+        .ok_or_else(|| "settings path does not have a parent directory".to_owned())?;
+    fs::create_dir_all(parent)
+        .map_err(|error| format!("unable to create settings directory: {error}"))?;
+    let data = serde_json::to_vec_pretty(settings)
+        .map_err(|error| format!("unable to serialize settings: {error}"))?;
+    fs::write(path, data).map_err(|error| format!("unable to save settings: {error}"))
+}
+
+fn start_stdin_watchdog() {
+    thread::spawn(|| {
+        let mut input = io::stdin();
+        let mut byte = [0_u8; 1];
+        loop {
+            match input.read(&mut byte) {
+                Ok(0) | Err(_) => std::process::exit(0),
+                Ok(_) => {}
+            }
+        }
+    });
+}
+
+#[expect(
+    clippy::too_many_lines,
+    reason = "the flat local HTTP router keeps request ownership and response paths explicit"
+)]
+fn handle_request(
+    mut request: Request,
+    web_root: &Path,
+    port: u16,
+    settings: &RuntimeSettings,
+    hosts: &RuntimeHosts,
+    updates: &RuntimeUpdates,
+) {
+    if !valid_host_header(&request, port) {
+        respond_json(
+            request,
+            403,
+            &ErrorResponse {
+                error: "invalid Host header",
+            },
+        );
+        return;
+    }
+
+    let route = request
+        .url()
+        .split('?')
+        .next()
+        .unwrap_or(request.url())
+        .to_owned();
+    if request.method() == &Method::Get
+        && let Some(session_id) = route.strip_prefix("/api/v1/rdp/session/")
+    {
+        match read_native_session_diagnostics(session_id) {
+            Ok(status) => respond_json(request, 200, &status),
+            Err((status, error)) => {
+                respond_json(request, status, &ErrorResponse { error: &error });
+            }
+        }
+        return;
+    }
+    if request.method() == &Method::Get
+        && let Some(session_id) = route.strip_prefix("/api/v1/windows-agent/session/")
+    {
+        match read_windows_agent_session_diagnostics(session_id) {
+            Ok(status) => respond_json(request, 200, &status),
+            Err((status, error)) => respond_json(request, status, &ErrorResponse { error: &error }),
+        }
+        return;
+    }
+    if request.method() == &Method::Get
+        && let Some(session_id) = route.strip_prefix("/api/v1/linux/desktop/session/")
+    {
+        match read_linux_desktop_session_diagnostics(session_id) {
+            Ok(status) => respond_json(request, 200, &status),
+            Err((status, error)) => {
+                respond_json(request, status, &ErrorResponse { error: &error });
+            }
+        }
+        return;
+    }
+    match (request.method(), route.as_str()) {
+        (&Method::Get, "/api/v1/shell/ready") => {
+            if let Some(proof) = shell_ready_proof() {
+                respond_json(request, 200, &ShellReadyResponse { ready: true, proof });
+            } else {
+                respond_json(
+                    request,
+                    403,
+                    &ErrorResponse {
+                        error: "desktop shell handshake is unavailable",
+                    },
+                );
+            }
+        }
+        (&Method::Get, "/api/v1/health") => {
+            respond_json(request, 200, &HealthResponse { status: "ok" });
+        }
+        (&Method::Get, "/api/v1/capabilities") => {
+            let snapshot = settings.snapshot();
+            respond_json(request, 200, &capabilities(&snapshot));
+        }
+        (&Method::Get, "/api/v1/settings") => {
+            respond_json(request, 200, &settings.snapshot());
+        }
+        (&Method::Put, "/api/v1/settings") => {
+            let payload = match read_json::<UpdateSettingsRequest>(&mut request) {
+                Ok(payload) => payload,
+                Err(error) => {
+                    respond_json(request, 400, &ErrorResponse { error });
+                    return;
+                }
+            };
+            match settings.update(&payload) {
+                Ok(saved_settings) => respond_json(request, 200, &saved_settings),
+                Err(error) => respond_json(request, 400, &ErrorResponse { error: &error }),
+            }
+        }
+        (&Method::Get, "/api/v1/hosts") => {
+            respond_json(request, 200, &hosts.snapshot());
+        }
+        (&Method::Put, "/api/v1/hosts") => {
+            let payload =
+                match read_json_with_limit::<serde_json::Value>(&mut request, MAX_HOSTS_BODY) {
+                    Ok(payload) => payload,
+                    Err(error) => {
+                        respond_json(request, 400, &ErrorResponse { error });
+                        return;
+                    }
+                };
+            match hosts.update(payload) {
+                Ok(()) => respond_json(request, 200, &serde_json::json!({ "saved": true })),
+                Err(error) => respond_json(request, 400, &ErrorResponse { error: &error }),
+            }
+        }
+        (&Method::Post, "/api/v1/update/check") => {
+            if let Err(error) = read_json::<serde_json::Value>(&mut request) {
+                respond_json(request, 400, &ErrorResponse { error });
+                return;
+            }
+            let snapshot = settings.snapshot();
+            let config = match RuntimeUpdates::config(&snapshot) {
+                Ok(config) => config,
+                Err(error) => {
+                    respond_json(request, 409, &ErrorResponse { error: &error });
+                    return;
+                }
+            };
+            match updates.client.check(&config) {
+                Ok(response) => respond_json(request, 200, &response),
+                Err(error) => respond_json(request, 502, &ErrorResponse { error: &error }),
+            }
+        }
+        (&Method::Post, "/api/v1/update/install") => {
+            let payload = match read_json::<InstallUpdateRequest>(&mut request) {
+                Ok(payload) => payload,
+                Err(error) => {
+                    respond_json(request, 400, &ErrorResponse { error });
+                    return;
+                }
+            };
+            if updates
+                .installing
+                .compare_exchange(false, true, Ordering::AcqRel, Ordering::Acquire)
+                .is_err()
+            {
+                respond_json(
+                    request,
+                    409,
+                    &ErrorResponse {
+                        error: "an update installation is already in progress",
+                    },
+                );
+                return;
+            }
+            let snapshot = settings.snapshot();
+            let config = match RuntimeUpdates::config(&snapshot) {
+                Ok(config) => config,
+                Err(error) => {
+                    updates.installing.store(false, Ordering::Release);
+                    respond_json(request, 409, &ErrorResponse { error: &error });
+                    return;
+                }
+            };
+            let prepared = updates.client.prepare_install(&config, &payload.version);
+            let result = prepared.and_then(|prepared| {
+                start_update_installer(&prepared)?;
+                Ok(update::UpdateInstallResponse {
+                    accepted: true,
+                    version: prepared.version,
+                })
+            });
+            match result {
+                Ok(response) => respond_json(request, 202, &response),
+                Err(error) => {
+                    updates.installing.store(false, Ordering::Release);
+                    respond_json(request, 500, &ErrorResponse { error: &error });
+                }
+            }
+        }
+        (&Method::Post, "/api/v1/rdp/probe") => {
+            let payload = match read_json::<ProbeRequest>(&mut request) {
+                Ok(payload) => payload,
+                Err(error) => {
+                    respond_json(request, 400, &ErrorResponse { error });
+                    return;
+                }
+            };
+            let endpoint = match RdpEndpoint::parse(&payload.address) {
+                Ok(endpoint) => endpoint,
+                Err(error) => {
+                    let message = error.to_string();
+                    respond_json(request, 400, &ErrorResponse { error: &message });
+                    return;
+                }
+            };
+            respond_json(request, 200, &probe_rdp(&endpoint, PROBE_TIMEOUT));
+        }
+        (&Method::Post, "/api/v1/rdp/negotiate") => {
+            let payload = match read_json::<ProbeRequest>(&mut request) {
+                Ok(payload) => payload,
+                Err(error) => {
+                    respond_json(request, 400, &ErrorResponse { error });
+                    return;
+                }
+            };
+            let endpoint = match RdpEndpoint::parse(&payload.address) {
+                Ok(endpoint) => endpoint,
+                Err(error) => {
+                    let message = error.to_string();
+                    respond_json(request, 400, &ErrorResponse { error: &message });
+                    return;
+                }
+            };
+            match probe_rdp_protocol(&endpoint) {
+                Ok(response) => respond_json(request, 200, &response),
+                Err(error) => respond_json(request, 500, &ErrorResponse { error: &error }),
+            }
+        }
+        (&Method::Post, "/api/v1/rdp/launch") => {
+            let payload = match read_json::<LaunchRequest>(&mut request) {
+                Ok(payload) => payload,
+                Err(error) => {
+                    respond_json(request, 400, &ErrorResponse { error });
+                    return;
+                }
+            };
+            if let Err(error) = payload.resolution.dimensions() {
+                respond_json(request, 400, &ErrorResponse { error });
+                return;
+            }
+            let endpoint = match RdpEndpoint::parse(&payload.address) {
+                Ok(endpoint) => endpoint,
+                Err(error) => {
+                    let message = error.to_string();
+                    respond_json(request, 400, &ErrorResponse { error: &message });
+                    return;
+                }
+            };
+            let result = match payload.client {
+                RdpClientMode::System => launch_mstsc(&endpoint, &payload).map(|()| None),
+                RdpClientMode::Native => launch_native_rdp(&endpoint, &payload).map(Some),
+            };
+            match result {
+                Ok(session_id) => respond_json(
+                    request,
+                    200,
+                    &LaunchResponse {
+                        launched: true,
+                        client: Some(payload.client),
+                        session_id,
+                    },
+                ),
+                Err(error) => respond_json(request, 500, &ErrorResponse { error: &error }),
+            }
+        }
+        (&Method::Post, "/api/v1/windows/credential-manager") => {
+            if let Err(error) = read_json::<serde_json::Value>(&mut request) {
+                respond_json(request, 400, &ErrorResponse { error });
+                return;
+            }
+            match open_credential_manager() {
+                Ok(()) => respond_json(
+                    request,
+                    200,
+                    &LaunchResponse {
+                        launched: true,
+                        client: None,
+                        session_id: None,
+                    },
+                ),
+                Err(error) => respond_json(request, 500, &ErrorResponse { error: &error }),
+            }
+        }
+        (&Method::Post, "/api/v1/rdp/credential/status") => {
+            let payload = match read_json::<CredentialRequest>(&mut request) {
+                Ok(payload) => payload,
+                Err(error) => {
+                    respond_json(request, 400, &ErrorResponse { error });
+                    return;
+                }
+            };
+            match query_credential_status(&payload.credential_ref) {
+                Ok(status) => respond_json(request, 200, &status),
+                Err(error) => respond_json(request, 500, &ErrorResponse { error: &error }),
+            }
+        }
+        (&Method::Post, "/api/v1/rdp/credential/set") => {
+            let payload = match read_json::<CredentialRequest>(&mut request) {
+                Ok(payload) => payload,
+                Err(error) => {
+                    respond_json(request, 400, &ErrorResponse { error });
+                    return;
+                }
+            };
+            match match (payload.account.as_deref(), payload.password.as_deref()) {
+                (Some(account), Some(password)) => {
+                    save_credential(&payload.credential_ref, account, password)
+                }
+                (None, None) => launch_credential_editor(&payload.credential_ref),
+                _ => Err("account and password must be provided together".to_owned()),
+            } {
+                Ok(()) => respond_json(request, 202, &CredentialLaunchResponse { launched: true }),
+                Err(error) => respond_json(request, 500, &ErrorResponse { error: &error }),
+            }
+        }
+        (&Method::Post, "/api/v1/rdp/credential/delete") => {
+            let payload = match read_json::<CredentialRequest>(&mut request) {
+                Ok(payload) => payload,
+                Err(error) => {
+                    respond_json(request, 400, &ErrorResponse { error });
+                    return;
+                }
+            };
+            match delete_credential(&payload.credential_ref) {
+                Ok(status) => respond_json(request, 200, &status),
+                Err(error) => respond_json(request, 500, &ErrorResponse { error: &error }),
+            }
+        }
+        (&Method::Post, "/api/v1/linux/terminal/launch") => {
+            let payload = match read_json::<LinuxTerminalLaunchRequest>(&mut request) {
+                Ok(payload) => payload,
+                Err(error) => {
+                    respond_json(request, 400, &ErrorResponse { error });
+                    return;
+                }
+            };
+            match launch_linux_terminal(&payload) {
+                Ok(()) => respond_json(request, 202, &CredentialLaunchResponse { launched: true }),
+                Err(error) => respond_json(request, 500, &ErrorResponse { error: &error }),
+            }
+        }
+        (&Method::Post, "/api/v1/linux/desktop/launch") => {
+            let payload = match read_json::<LinuxDesktopLaunchRequest>(&mut request) {
+                Ok(payload) => payload,
+                Err(error) => {
+                    respond_json(request, 400, &ErrorResponse { error });
+                    return;
+                }
+            };
+            match launch_linux_desktop(&payload) {
+                Ok(session_id) => respond_json(
+                    request,
+                    202,
+                    &LinuxDesktopLaunchResponse {
+                        launched: true,
+                        session_id,
+                    },
+                ),
+                Err(error) => respond_json(request, 400, &ErrorResponse { error: &error }),
+            }
+        }
+        (&Method::Post, "/api/v1/linux/probe") => {
+            let payload = match read_json::<LinuxAgentProbeRequest>(&mut request) {
+                Ok(payload) => payload,
+                Err(error) => {
+                    respond_json(request, 400, &ErrorResponse { error });
+                    return;
+                }
+            };
+            if let Err(error) = validate_linux_agent_probe_request(&payload) {
+                respond_json(request, 400, &ErrorResponse { error: &error });
+                return;
+            }
+            match probe_linux_agent(&payload) {
+                Ok(response) => respond_json(request, 200, &response),
+                Err(error) => respond_json(request, 502, &ErrorResponse { error: &error }),
+            }
+        }
+        (&Method::Post, "/api/v1/windows-agent/probe") => {
+            let payload = match read_json::<WindowsAgentProbeRequest>(&mut request) {
+                Ok(payload) => payload,
+                Err(error) => {
+                    respond_json(request, 400, &ErrorResponse { error });
+                    return;
+                }
+            };
+            match probe_windows_agent(&payload.address) {
+                Ok(response) => respond_json(request, 200, &response),
+                Err(error) => respond_json(request, 502, &ErrorResponse { error: &error }),
+            }
+        }
+        (&Method::Post, "/api/v1/windows-agent/desktop/launch") => {
+            let payload = match read_json::<WindowsAgentLaunchRequest>(&mut request) {
+                Ok(payload) => payload,
+                Err(error) => {
+                    respond_json(request, 400, &ErrorResponse { error });
+                    return;
+                }
+            };
+            match launch_windows_agent_desktop(&payload) {
+                Ok(session_id) => respond_json(
+                    request,
+                    202,
+                    &WindowsAgentLaunchResponse {
+                        launched: true,
+                        session_id,
+                    },
+                ),
+                Err(error) => respond_json(request, 400, &ErrorResponse { error: &error }),
+            }
+        }
+        (&Method::Post, "/api/v1/linux/files/launch") => {
+            let payload = match read_json::<LinuxFileTransferRequest>(&mut request) {
+                Ok(payload) => payload,
+                Err(error) => {
+                    respond_json(request, 400, &ErrorResponse { error });
+                    return;
+                }
+            };
+            match launch_linux_file_transfer(&payload) {
+                Ok(()) => respond_json(request, 202, &CredentialLaunchResponse { launched: true }),
+                Err(error) => respond_json(request, 400, &ErrorResponse { error: &error }),
+            }
+        }
+        (&Method::Post, "/api/v1/linux/identity/status") => {
+            let payload = match read_json::<LinuxAgentIdentityRequest>(&mut request) {
+                Ok(payload) => payload,
+                Err(error) => {
+                    respond_json(request, 400, &ErrorResponse { error });
+                    return;
+                }
+            };
+            match query_linux_agent_identity_status(&payload.certificate_sha256) {
+                Ok(status) => respond_json(request, 200, &status),
+                Err(error) => respond_json(request, 500, &ErrorResponse { error: &error }),
+            }
+        }
+        (&Method::Post, "/api/v1/linux/identity/delete") => {
+            let payload = match read_json::<LinuxAgentIdentityRequest>(&mut request) {
+                Ok(payload) => payload,
+                Err(error) => {
+                    respond_json(request, 400, &ErrorResponse { error });
+                    return;
+                }
+            };
+            match delete_linux_agent_identity(&payload.certificate_sha256) {
+                Ok(status) => respond_json(request, 200, &status),
+                Err(error) => respond_json(request, 500, &ErrorResponse { error: &error }),
+            }
+        }
+        (&Method::Get | &Method::Head, _) => serve_static(request, web_root, &route),
+        _ => respond_json(
+            request,
+            405,
+            &ErrorResponse {
+                error: "method not allowed",
+            },
+        ),
+    }
+}
+
+fn valid_host_header(request: &Request, port: u16) -> bool {
+    let Some(value) = request
+        .headers()
+        .iter()
+        .find(|header| header.field.equiv("Host"))
+        .map(|header| header.value.as_str())
+    else {
+        return false;
+    };
+    value.eq_ignore_ascii_case(&format!("127.0.0.1:{port}"))
+        || value.eq_ignore_ascii_case(&format!("localhost:{port}"))
+}
+
+fn shell_ready_proof() -> Option<String> {
+    let Ok(expected) = env::var("REMOTEDESK_SHELL_TOKEN") else {
+        return None;
+    };
+    valid_shell_token_format(&expected)
+        .then(|| format!("{:x}", Sha256::digest(expected.as_bytes())))
+}
+
+fn valid_shell_token_format(expected: &str) -> bool {
+    if expected.len() != 64
+        || !expected
+            .bytes()
+            .all(|byte| byte.is_ascii_digit() || (b'a'..=b'f').contains(&byte))
+    {
+        return false;
+    }
+    true
+}
+
+fn read_json<T: for<'de> Deserialize<'de>>(request: &mut Request) -> Result<T, &'static str> {
+    read_json_with_limit(request, MAX_REQUEST_BODY)
+}
+
+fn read_json_with_limit<T: for<'de> Deserialize<'de>>(
+    request: &mut Request,
+    max_body: usize,
+) -> Result<T, &'static str> {
+    let content_type_is_json = request
+        .headers()
+        .iter()
+        .find(|header| header.field.equiv("Content-Type"))
+        .is_some_and(|header| header.value.as_str().starts_with("application/json"));
+    if !content_type_is_json {
+        return Err("Content-Type must be application/json");
+    }
+    if request.body_length().unwrap_or(max_body + 1) > max_body {
+        return Err("request body is too large");
+    }
+
+    let mut body = String::new();
+    request
+        .as_reader()
+        .take((max_body + 1) as u64)
+        .read_to_string(&mut body)
+        .map_err(|_| "unable to read request body")?;
+    if body.len() > max_body {
+        return Err("request body is too large");
+    }
+    parse_json_body(&body)
+}
+
+fn parse_json_body<T: for<'de> Deserialize<'de>>(body: &str) -> Result<T, &'static str> {
+    serde_json::from_str(body).map_err(|error| match error.classify() {
+        serde_json::error::Category::Data => "request body does not match the API schema",
+        serde_json::error::Category::Io
+        | serde_json::error::Category::Syntax
+        | serde_json::error::Category::Eof => "request body is not valid JSON",
+    })
+}
+
+fn probe_rdp(endpoint: &RdpEndpoint, timeout: Duration) -> ProbeResponse {
+    let started = Instant::now();
+    let addresses = match (endpoint.host(), endpoint.port()).to_socket_addrs() {
+        Ok(addresses) => addresses.collect::<Vec<_>>(),
+        Err(_) => {
+            return ProbeResponse {
+                status: ProbeStatus::DnsFailed,
+                reachable: false,
+                latency_ms: None,
+                port: endpoint.port(),
+            };
+        }
+    };
+
+    let mut status = ProbeStatus::Unreachable;
+    for address in addresses {
+        let remaining = timeout.saturating_sub(started.elapsed());
+        if remaining.is_zero() {
+            status = ProbeStatus::Timeout;
+            break;
+        }
+        match TcpStream::connect_timeout(&address, remaining) {
+            Ok(_) => {
+                return ProbeResponse {
+                    status: ProbeStatus::Reachable,
+                    reachable: true,
+                    latency_ms: Some(elapsed_millis(started)),
+                    port: endpoint.port(),
+                };
+            }
+            Err(error) if error.kind() == io::ErrorKind::TimedOut => {
+                status = ProbeStatus::Timeout;
+            }
+            Err(error) if error.kind() == io::ErrorKind::ConnectionRefused => {
+                status = ProbeStatus::Refused;
+            }
+            Err(_) => {
+                status = ProbeStatus::Unreachable;
+            }
+        }
+    }
+
+    ProbeResponse {
+        status,
+        reachable: false,
+        latency_ms: Some(elapsed_millis(started)),
+        port: endpoint.port(),
+    }
+}
+
+fn elapsed_millis(started: Instant) -> u64 {
+    u64::try_from(started.elapsed().as_millis()).unwrap_or(u64::MAX)
+}
+
+fn sibling_helper_path(name: &str) -> Result<PathBuf, String> {
+    let current_exe = env::current_exe()
+        .map_err(|error| format!("unable to locate the control service: {error}"))?;
+    let path = current_exe.with_file_name(format!("{name}{}", env::consts::EXE_SUFFIX));
+    if !path.is_file() {
+        return Err(format!(
+            "{name} is not installed beside the control service"
+        ));
+    }
+    Ok(path)
+}
+
+fn rdp_session_helper_path() -> Result<PathBuf, String> {
+    sibling_helper_path("remotedesk-rdp-session")
+}
+
+fn probe_rdp_protocol(endpoint: &RdpEndpoint) -> Result<ProtocolProbeResponse, String> {
+    let helper = rdp_session_helper_path()?;
+    let mut child = Command::new(helper)
+        .stdin(Stdio::piped())
+        .stdout(Stdio::piped())
+        .stderr(Stdio::null())
+        .spawn()
+        .map_err(|error| format!("unable to start RDP protocol probe: {error}"))?;
+
+    let payload = serde_json::json!({
+        "target": mstsc_authority(endpoint),
+        "timeout_ms": u64::try_from(PROBE_TIMEOUT.as_millis()).unwrap_or(u64::MAX),
+    });
+    let mut stdin = child
+        .stdin
+        .take()
+        .ok_or_else(|| "RDP protocol probe stdin is unavailable".to_owned())?;
+    serde_json::to_writer(&mut stdin, &payload)
+        .map_err(|_| "unable to encode RDP protocol probe request".to_owned())?;
+    stdin
+        .flush()
+        .map_err(|_| "unable to send RDP protocol probe request".to_owned())?;
+    drop(stdin);
+
+    let deadline = Instant::now() + PROBE_TIMEOUT + Duration::from_millis(750);
+    loop {
+        match child.try_wait() {
+            Ok(Some(_)) => break,
+            Ok(None) if Instant::now() < deadline => thread::sleep(Duration::from_millis(20)),
+            Ok(None) => {
+                let _ = child.kill();
+                let _ = child.wait();
+                return Err("RDP protocol probe helper timed out".to_owned());
+            }
+            Err(_) => return Err("unable to wait for RDP protocol probe".to_owned()),
+        }
+    }
+
+    let mut output = Vec::new();
+    child
+        .stdout
+        .take()
+        .ok_or_else(|| "RDP protocol probe stdout is unavailable".to_owned())?
+        .take(u64::try_from(MAX_HELPER_RESPONSE + 1).unwrap_or(u64::MAX))
+        .read_to_end(&mut output)
+        .map_err(|_| "unable to read RDP protocol probe result".to_owned())?;
+    if output.len() > MAX_HELPER_RESPONSE {
+        return Err("RDP protocol probe result is too large".to_owned());
+    }
+    serde_json::from_slice(&output)
+        .map_err(|_| "RDP protocol probe returned an invalid result".to_owned())
+}
+
+fn launch_mstsc(endpoint: &RdpEndpoint, request: &LaunchRequest) -> Result<(), String> {
+    #[cfg(not(target_os = "windows"))]
+    {
+        let _ = (endpoint, request);
+        return Err("mstsc fallback is available only on Windows".to_owned());
+    }
+
+    #[cfg(target_os = "windows")]
+    {
+        validate_username(&request.username)?;
+        let rdp_path = write_rdp_file(endpoint, request)?;
+        let mut child = Command::new("explorer.exe")
+            .arg(&rdp_path)
+            .spawn()
+            .map_err(|error| format!("unable to open the RDP session: {error}"))?;
+        thread::spawn(move || {
+            let _ = child.wait();
+            thread::sleep(Duration::from_secs(30));
+            let _ = fs::remove_file(rdp_path);
+        });
+        Ok(())
+    }
+}
+
+fn native_rdp_viewer_path() -> Result<PathBuf, String> {
+    #[cfg(not(target_os = "windows"))]
+    return Err("native RDP client is available only on Windows".to_owned());
+
+    #[cfg(target_os = "windows")]
+    {
+        sibling_helper_path("remotedesk-rdp-viewer")
+    }
+}
+
+fn credential_helper_path() -> Result<PathBuf, String> {
+    #[cfg(not(target_os = "windows"))]
+    return Err("Windows Credential Manager is available only on Windows".to_owned());
+
+    #[cfg(target_os = "windows")]
+    {
+        sibling_helper_path("remotedesk-credential-store")
+    }
+}
+
+fn native_video_helper_path() -> Result<PathBuf, String> {
+    sibling_helper_path("remotedesk-native-video")
+}
+
+fn windows_agent_viewer_path() -> Result<PathBuf, String> {
+    #[cfg(not(target_os = "windows"))]
+    return Err("Windows Agent viewer is available only on Windows".to_owned());
+    #[cfg(target_os = "windows")]
+    sibling_helper_path("remotedesk-windows-agent-viewer")
+}
+
+fn launch_windows_agent_desktop(request: &WindowsAgentLaunchRequest) -> Result<String, String> {
+    if request.address.trim().is_empty()
+        || request.address.len() > 512
+        || request.address.chars().any(char::is_control)
+        || request.address.contains(char::is_whitespace)
+        || !(1..=15).contains(&request.frames_per_second)
+        || !matches!(request.mode.as_str(), "desktop" | "application")
+        || (request.mode == "application"
+            && request.application.as_deref().is_none_or(str::is_empty))
+    {
+        return Err("Windows Agent desktop request is invalid".to_owned());
+    }
+    #[cfg(not(target_os = "windows"))]
+    {
+        let _ = request;
+        Err("Windows Agent viewer is available only on Windows".to_owned())
+    }
+    #[cfg(target_os = "windows")]
+    {
+        use std::os::windows::process::CommandExt as _;
+        let session_id = new_native_session_id();
+        let mut command = Command::new(windows_agent_viewer_path()?);
+        command
+            .arg("--target")
+            .arg(&request.address)
+            .arg("--session-id")
+            .arg(&session_id)
+            .arg("--fps")
+            .arg(request.frames_per_second.to_string())
+            .arg("--mode")
+            .arg(&request.mode)
+            .creation_flags(CREATE_NEW_CONSOLE);
+        if let Some(application) = &request.application {
+            command.arg("--application").arg(application);
+        }
+        if request.fullscreen {
+            command.arg("--fullscreen");
+        }
+        let mut child = command
+            .spawn()
+            .map_err(|error| format!("unable to start Windows Agent viewer: {error}"))?;
+        let diagnostics_path = windows_agent_session_diagnostics_path(&session_id);
+        thread::spawn(move || {
+            let _ = child.wait();
+            thread::sleep(Duration::from_secs(60));
+            let _ = fs::remove_file(diagnostics_path);
+        });
+        Ok(session_id)
+    }
+}
+
+fn windows_agent_session_diagnostics_path(session_id: &str) -> PathBuf {
+    env::temp_dir()
+        .join("RemoteDesk")
+        .join("windows-agent-sessions")
+        .join(format!("{session_id}.json"))
+}
+
+fn read_windows_agent_session_diagnostics(
+    session_id: &str,
+) -> Result<WindowsAgentSessionDiagnostics, (u16, String)> {
+    if !validate_native_session_id(session_id) {
+        return Err((400, "invalid Windows Agent session identifier".to_owned()));
+    }
+    let data = fs::read(windows_agent_session_diagnostics_path(session_id)).map_err(|error| {
+        if error.kind() == io::ErrorKind::NotFound {
+            (
+                404,
+                "Windows Agent session diagnostics are not available".to_owned(),
+            )
+        } else {
+            (
+                500,
+                "unable to read Windows Agent session diagnostics".to_owned(),
+            )
+        }
+    })?;
+    if data.len() > MAX_HELPER_RESPONSE {
+        return Err((500, "Windows Agent diagnostics are too large".to_owned()));
+    }
+    let status: WindowsAgentSessionDiagnostics = serde_json::from_slice(&data).map_err(|_| {
+        (
+            409,
+            "Windows Agent diagnostics are being updated".to_owned(),
+        )
+    })?;
+    let metrics_valid = [
+        &status.capture_latency_ms,
+        &status.encode_latency_ms,
+        &status.frame_processing_latency_ms,
+        &status.decode_latency_ms,
+        &status.presentation_latency_ms,
+    ]
+    .into_iter()
+    .flatten()
+    .all(|metric| metric.is_finite() && *metric >= 0.0);
+    if status.schema_version != 1 || status.session_id != session_id || !metrics_valid {
+        return Err((
+            500,
+            "Windows Agent session diagnostics are invalid".to_owned(),
+        ));
+    }
+    Ok(status)
+}
+
+fn linux_terminal_helper_path() -> Result<PathBuf, String> {
+    #[cfg(not(target_os = "windows"))]
+    return Err("the Linux terminal controller is currently available on Windows".to_owned());
+
+    #[cfg(target_os = "windows")]
+    {
+        sibling_helper_path("remotedesk-linux-terminal")
+    }
+}
+
+fn validate_linux_agent_probe_request(request: &LinuxAgentProbeRequest) -> Result<(), String> {
+    if request.address.is_empty()
+        || request.address.len() > 512
+        || request.address.chars().any(char::is_control)
+        || request.address.contains("//")
+        || request.address.contains('@')
+        || request.address.contains('?')
+        || request.address.contains('#')
+    {
+        return Err("Linux Agent address is invalid".into());
+    }
+    required_certificate_sha256(Some(&request.certificate_sha256))?;
+    Ok(())
+}
+
+fn probe_linux_agent(request: &LinuxAgentProbeRequest) -> Result<LinuxAgentProbeResponse, String> {
+    #[cfg(not(target_os = "windows"))]
+    {
+        let _ = request;
+        return Err("Linux Agent probing is currently available on Windows".into());
+    }
+
+    #[cfg(target_os = "windows")]
+    {
+        use std::os::windows::process::CommandExt as _;
+
+        let helper = linux_terminal_helper_path()?;
+        let certificate_sha256 = required_certificate_sha256(Some(&request.certificate_sha256))?;
+        let mut child = Command::new(helper)
+            .arg("--probe-json")
+            .arg("--target")
+            .arg(&request.address)
+            .arg("--certificate-sha256")
+            .arg(certificate_sha256)
+            .stdin(Stdio::null())
+            .stdout(Stdio::piped())
+            .stderr(Stdio::piped())
+            .creation_flags(CREATE_NO_WINDOW)
+            .spawn()
+            .map_err(|_| "unable to start Linux Agent probe helper".to_owned())?;
+
+        let deadline = Instant::now() + Duration::from_secs(16);
+        let status = loop {
+            match child.try_wait() {
+                Ok(Some(status)) => break status,
+                Ok(None) if Instant::now() < deadline => thread::sleep(Duration::from_millis(20)),
+                Ok(None) => {
+                    let _ = child.kill();
+                    let _ = child.wait();
+                    return Err("Linux Agent probe timed out".into());
+                }
+                Err(_) => return Err("unable to wait for Linux Agent probe".into()),
+            }
+        };
+        let mut output = Vec::new();
+        child
+            .stdout
+            .take()
+            .ok_or_else(|| "Linux Agent probe stdout is unavailable".to_owned())?
+            .take(u64::try_from(MAX_HELPER_RESPONSE + 1).unwrap_or(u64::MAX))
+            .read_to_end(&mut output)
+            .map_err(|_| "unable to read Linux Agent probe result".to_owned())?;
+        if !status.success() {
+            let stderr = child
+                .stderr
+                .take()
+                .and_then(|mut stream| {
+                    let mut data = Vec::new();
+                    stream.read_to_end(&mut data).ok()?;
+                    Some(String::from_utf8_lossy(&data).trim().to_owned())
+                })
+                .filter(|value| !value.is_empty())
+                .map(|value| value.chars().take(240).collect::<String>());
+            return Err(stderr.map_or_else(
+                || "Linux Agent is unavailable or failed TLS/protocol validation".to_owned(),
+                |detail| format!("Linux Agent probe failed: {detail}"),
+            ));
+        }
+        if output.len() > MAX_HELPER_RESPONSE {
+            return Err("Linux Agent probe result is too large".into());
+        }
+        let response: LinuxAgentProbeResponse = serde_json::from_slice(&output)
+            .map_err(|_| "Linux Agent probe returned an invalid result".to_owned())?;
+        if !response.ok || response.protocol_major != 1 || response.latency_ms > 60_000 {
+            return Err("Linux Agent probe returned incompatible data".into());
+        }
+        Ok(response)
+    }
+}
+
+fn launch_linux_terminal(request: &LinuxTerminalLaunchRequest) -> Result<(), String> {
+    #[cfg(not(target_os = "windows"))]
+    {
+        let _ = request;
+        return Err("the Linux terminal controller is currently available on Windows".to_owned());
+    }
+
+    #[cfg(target_os = "windows")]
+    {
+        use std::os::windows::process::CommandExt as _;
+
+        if request.address.is_empty()
+            || request.address.len() > 512
+            || request.address.chars().any(char::is_control)
+            || request.address.contains("//")
+            || request.address.contains('@')
+            || request.address.contains('?')
+            || request.address.contains('#')
+        {
+            return Err("Linux Agent address is invalid".to_owned());
+        }
+        let user = validated_linux_user(&request.user)?;
+        let certificate_sha256 = required_certificate_sha256(Some(&request.certificate_sha256))?;
+        let mut command = Command::new(linux_terminal_helper_path()?);
+        command
+            .arg("--target")
+            .arg(&request.address)
+            .arg("--user")
+            .arg(&user)
+            .arg("--certificate-sha256")
+            .arg(certificate_sha256)
+            .creation_flags(CREATE_NEW_CONSOLE);
+        let edge_api_url = validated_edge_api_url(request.edge_api_url.as_deref())?;
+        if request.agent_public_key.is_some() && (!request.pair || edge_api_url.is_none()) {
+            return Err("Linux Agent public key requires pairing through Edge".to_owned());
+        }
+        if request.pair {
+            command.arg("--pair");
+        }
+        if let Some(agent_public_key) = &request.agent_public_key {
+            validate_linux_agent_public_key(agent_public_key)?;
+            command.arg("--agent-public-key").arg(agent_public_key);
+        }
+        if let Some(edge_api_url) = edge_api_url {
+            command.arg("--edge-api-url").arg(edge_api_url);
+        }
+        command
+            .spawn()
+            .map(|_| ())
+            .map_err(|error| format!("unable to start the Linux terminal: {error}"))
+    }
+}
+
+fn launch_linux_desktop(request: &LinuxDesktopLaunchRequest) -> Result<String, String> {
+    validate_linux_desktop_request(request)?;
+    #[cfg(not(target_os = "windows"))]
+    {
+        let _ = request;
+        return Err("the Linux desktop controller is currently available on Windows".to_owned());
+    }
+
+    #[cfg(target_os = "windows")]
+    {
+        use std::os::windows::process::CommandExt as _;
+
+        let user = validated_linux_user(&request.user)?;
+        let certificate_sha256 = required_certificate_sha256(Some(&request.certificate_sha256))?;
+        let session_id = new_native_session_id();
+        let mut command = Command::new(linux_terminal_helper_path()?);
+        command
+            .arg("--target")
+            .arg(&request.address)
+            .arg("--user")
+            .arg(&user)
+            .arg("--certificate-sha256")
+            .arg(certificate_sha256)
+            .arg("--desktop")
+            .arg("--width")
+            .arg(request.width.to_string())
+            .arg("--height")
+            .arg(request.height.to_string())
+            .arg("--fps")
+            .arg(request.frames_per_second.to_string())
+            .arg("--session-id")
+            .arg(&session_id)
+            .creation_flags(CREATE_NEW_CONSOLE);
+        if request.fullscreen {
+            command.arg("--fullscreen");
+        }
+        if request.follow_window {
+            command.arg("--follow-window");
+        }
+        if request.capture_input {
+            command.arg("--capture-input");
+        }
+        if request.clipboard_read {
+            command.arg("--clipboard-read");
+        }
+        if request.clipboard_write {
+            command.arg("--clipboard-write");
+        }
+        if let Some(edge_api_url) = validated_edge_api_url(request.edge_api_url.as_deref())? {
+            command.arg("--edge-api-url").arg(edge_api_url);
+        }
+        let mut child = command
+            .spawn()
+            .map_err(|error| format!("unable to start the Linux desktop: {error}"))?;
+        let diagnostics_path = linux_desktop_session_diagnostics_path(&session_id);
+        thread::spawn(move || {
+            let _ = child.wait();
+            thread::sleep(Duration::from_secs(60));
+            let _ = fs::remove_file(diagnostics_path);
+        });
+        Ok(session_id)
+    }
+}
+
+fn validate_linux_desktop_request(request: &LinuxDesktopLaunchRequest) -> Result<(), String> {
+    if request.address.is_empty()
+        || request.address.len() > 512
+        || request.address.chars().any(char::is_control)
+        || request.address.contains("//")
+        || request.address.contains('@')
+        || request.address.contains('?')
+        || request.address.contains('#')
+    {
+        return Err("Linux Agent address is invalid".to_owned());
+    }
+    validated_linux_user(&request.user)
+        .map(|_| ())
+        .map_err(|error| format!("Linux desktop user is invalid or prohibited: {error}"))?;
+    if !(200..=8_192).contains(&request.width)
+        || !(200..=8_192).contains(&request.height)
+        || !(1..=30).contains(&request.frames_per_second)
+    {
+        return Err("Linux desktop dimensions or frame rate are invalid".to_owned());
+    }
+    required_certificate_sha256(Some(&request.certificate_sha256))?;
+    validated_edge_api_url(request.edge_api_url.as_deref())?;
+    Ok(())
+}
+
+fn launch_linux_file_transfer(request: &LinuxFileTransferRequest) -> Result<(), String> {
+    #[cfg(not(target_os = "windows"))]
+    {
+        let _ = request;
+        return Err("Linux file transfer controller is available only on Windows".into());
+    }
+    #[cfg(target_os = "windows")]
+    {
+        use std::os::windows::process::CommandExt as _;
+        let user = validate_linux_target_and_user(&request.address, &request.user)?;
+        let certificate = required_certificate_sha256(Some(&request.certificate_sha256))?;
+        if request.local_path.is_empty()
+            || request.local_path.len() > 32_767
+            || request.local_path.chars().any(char::is_control)
+        {
+            return Err("local file path is invalid".into());
+        }
+        if request.remote_path.is_empty()
+            || request.remote_path.len() > 1024
+            || request.remote_path.chars().any(char::is_control)
+        {
+            return Err("remote file path is invalid".into());
+        }
+        let mut command = Command::new(linux_terminal_helper_path()?);
+        command.args([
+            "--target",
+            &request.address,
+            "--user",
+            &user,
+            "--certificate-sha256",
+            &certificate,
+        ]);
+        match request.direction {
+            LinuxFileDirection::Upload => {
+                command.args([
+                    "--upload",
+                    &request.local_path,
+                    "--remote-path",
+                    &request.remote_path,
+                ]);
+            }
+            LinuxFileDirection::Download => {
+                command.args([
+                    "--download",
+                    &request.remote_path,
+                    "--local-path",
+                    &request.local_path,
+                ]);
+            }
+        }
+        if let Some(edge_api_url) = validated_edge_api_url(request.edge_api_url.as_deref())? {
+            command.arg("--edge-api-url").arg(edge_api_url);
+        }
+        command
+            .creation_flags(CREATE_NEW_CONSOLE)
+            .spawn()
+            .map(|_| ())
+            .map_err(|error| format!("unable to start Linux file transfer: {error}"))
+    }
+}
+
+fn validate_linux_target_and_user(address: &str, user: &str) -> Result<String, String> {
+    if address.is_empty()
+        || address.len() > 512
+        || address.chars().any(char::is_control)
+        || address.contains("//")
+        || address.contains('@')
+        || address.contains('?')
+        || address.contains('#')
+    {
+        return Err("Linux Agent address is invalid".into());
+    }
+    validated_linux_user(user)
+}
+
+fn validated_linux_user(value: &str) -> Result<String, String> {
+    let user = value.trim();
+    if user.is_empty() {
+        return Err("Linux 用户不能为空".to_owned());
+    }
+    if user.len() > 32
+        || !user
+            .bytes()
+            .all(|byte| byte.is_ascii_alphanumeric() || matches!(byte, b'_' | b'-' | b'.'))
+    {
+        return Err("Linux 用户名只能包含字母、数字、点、下划线或连字符".to_owned());
+    }
+    Ok(user.to_owned())
+}
+
+fn linux_agent_identity_reference(
+    certificate_sha256: &str,
+) -> Result<LinuxAgentIdentityRef, String> {
+    let normalized = required_certificate_sha256(Some(certificate_sha256))?;
+    LinuxAgentIdentityRef::new(&normalized)
+        .map_err(|_| "Linux Agent certificate SHA-256 fingerprint is invalid".to_owned())
+}
+
+fn validate_linux_agent_public_key(value: &str) -> Result<(), String> {
+    let decoded = STANDARD_NO_PAD
+        .decode(value)
+        .map_err(|_| "Linux Agent public key is invalid".to_owned())?;
+    let bytes: [u8; 32] = decoded
+        .try_into()
+        .map_err(|_| "Linux Agent public key is invalid".to_owned())?;
+    ed25519_dalek::VerifyingKey::from_bytes(&bytes)
+        .map_err(|_| "Linux Agent public key is invalid".to_owned())?;
+    if STANDARD_NO_PAD.encode(bytes) != value {
+        return Err("Linux Agent public key is invalid".to_owned());
+    }
+    Ok(())
+}
+
+fn credential_status_response(
+    status: remotedesk_credential_store::CredentialStatus,
+) -> CredentialStatusResponse {
+    CredentialStatusResponse {
+        status: match status {
+            remotedesk_credential_store::CredentialStatus::Missing => CredentialStatus::Missing,
+            remotedesk_credential_store::CredentialStatus::Ready => CredentialStatus::Ready,
+        },
+    }
+}
+
+fn query_linux_agent_identity_status(
+    certificate_sha256: &str,
+) -> Result<CredentialStatusResponse, String> {
+    let reference = linux_agent_identity_reference(certificate_sha256)?;
+    linux_agent_identity_status(&reference)
+        .map(credential_status_response)
+        .map_err(|error| format!("unable to read the stored Linux Agent identity: {error}"))
+}
+
+fn delete_linux_agent_identity(
+    certificate_sha256: &str,
+) -> Result<CredentialStatusResponse, String> {
+    let reference = linux_agent_identity_reference(certificate_sha256)?;
+    linux_agent_identity_delete(&reference)
+        .map(credential_status_response)
+        .map_err(|error| format!("unable to delete the stored Linux Agent identity: {error}"))
+}
+
+fn validated_edge_api_url(value: Option<&str>) -> Result<Option<String>, String> {
+    let Some(value) = value.map(str::trim).filter(|value| !value.is_empty()) else {
+        return Ok(None);
+    };
+    if value.len() > 2048 {
+        return Err("Edge API URL is too long".into());
+    }
+    let url = url::Url::parse(value).map_err(|_| "Edge API URL is invalid".to_owned())?;
+    let loopback_http = url.scheme() == "http"
+        && match url.host() {
+            Some(url::Host::Domain("localhost")) => true,
+            Some(url::Host::Ipv4(address)) => address.is_loopback(),
+            Some(url::Host::Ipv6(address)) => address.is_loopback(),
+            _ => false,
+        };
+    if (url.scheme() != "https" && !loopback_http)
+        || url.username() != ""
+        || url.password().is_some()
+        || url.path() != "/"
+        || url.query().is_some()
+        || url.fragment().is_some()
+        || url.port() == Some(0)
+    {
+        return Err("Edge API URL must be a secret-free HTTPS origin".into());
+    }
+    Ok(Some(url.to_string()))
+}
+
+fn d3d11_device_available() -> bool {
+    if !cfg!(target_os = "windows") {
+        return false;
+    }
+    let Ok(helper) = native_video_helper_path() else {
+        return false;
+    };
+    let Ok(output) = Command::new(helper)
+        .arg("--probe-d3d11")
+        .stdin(Stdio::null())
+        .stderr(Stdio::null())
+        .output()
+    else {
+        return false;
+    };
+    output.status.success()
+        && output.stdout.len() <= MAX_HELPER_RESPONSE
+        && output
+            .stdout
+            .split(|byte| *byte == b'\n' || *byte == b'\r')
+            .any(|line| line == b"d3d11_created=true")
+}
+
+fn native_video_h264_decoder_available() -> bool {
+    if !cfg!(target_os = "windows") {
+        return false;
+    }
+    let Ok(helper) = native_video_helper_path() else {
+        return false;
+    };
+    let Ok(output) = Command::new(helper)
+        .arg("--probe-h264-decoder")
+        .stdin(Stdio::null())
+        .stderr(Stdio::null())
+        .output()
+    else {
+        return false;
+    };
+    if !output.status.success() || output.stdout.len() > MAX_HELPER_RESPONSE {
+        return false;
+    }
+    let lines = output
+        .stdout
+        .split(|byte| *byte == b'\n' || *byte == b'\r')
+        .collect::<Vec<_>>();
+    lines.contains(&b"h264_decoder_created=true".as_slice())
+        && lines.contains(&b"decoder_output_surface_created=true".as_slice())
+        && lines.contains(&b"h264_nv12_supported=true".as_slice())
+        && lines.contains(&b"video_support=true".as_slice())
+        && lines.contains(&b"sample_decoded=false".as_slice())
+        && lines.contains(&b"zero_copy_verified=false".as_slice())
+}
+
+#[derive(Deserialize)]
+#[serde(deny_unknown_fields)]
+struct NativeVideoHelperCapabilities {
+    schema_version: u8,
+    version: String,
+    platform: String,
+    h264_file_probe: bool,
+    h264_file_player: bool,
+    d3d11_video_processor: bool,
+    cpu_frame_mapping: bool,
+}
+
+fn native_video_surface_presenter_available() -> bool {
+    if !cfg!(target_os = "windows") {
+        return false;
+    }
+    let Ok(helper) = native_video_helper_path() else {
+        return false;
+    };
+    let Ok(output) = Command::new(helper)
+        .arg("--capabilities")
+        .stdin(Stdio::null())
+        .stderr(Stdio::null())
+        .output()
+    else {
+        return false;
+    };
+    if !output.status.success() || output.stdout.len() > MAX_HELPER_RESPONSE {
+        return false;
+    }
+    let Ok(response) = serde_json::from_slice::<NativeVideoHelperCapabilities>(&output.stdout)
+    else {
+        return false;
+    };
+    response.schema_version == 1
+        && response.version == env!("CARGO_PKG_VERSION")
+        && response.platform == "windows"
+        && response.h264_file_probe
+        && response.h264_file_player
+        && response.d3d11_video_processor
+        && !response.cpu_frame_mapping
+}
+
+fn validated_credential_ref(value: &str) -> Result<CredentialRef, String> {
+    CredentialRef::new(value.to_owned()).map_err(|error| error.to_string())
+}
+
+fn run_credential_helper(
+    operation: &str,
+    credential_ref: &str,
+) -> Result<CredentialStatusResponse, String> {
+    let reference = validated_credential_ref(credential_ref)?;
+    let output = Command::new(credential_helper_path()?)
+        .args([operation, "--credential-ref", reference.target()])
+        .stdin(Stdio::null())
+        .stderr(Stdio::null())
+        .output()
+        .map_err(|error| format!("unable to run the credential helper: {error}"))?;
+    if !output.status.success() {
+        return Err("the credential helper reported an error".to_owned());
+    }
+    if output.stdout.len() > MAX_HELPER_RESPONSE {
+        return Err("the credential helper response is too large".to_owned());
+    }
+    serde_json::from_slice(&output.stdout)
+        .map_err(|_| "the credential helper returned an invalid response".to_owned())
+}
+
+fn query_credential_status(credential_ref: &str) -> Result<CredentialStatusResponse, String> {
+    run_credential_helper("status", credential_ref)
+}
+
+fn delete_credential(credential_ref: &str) -> Result<CredentialStatusResponse, String> {
+    run_credential_helper("delete", credential_ref)
+}
+
+fn launch_credential_editor(credential_ref: &str) -> Result<(), String> {
+    #[cfg(not(target_os = "windows"))]
+    {
+        let _ = credential_ref;
+        return Err("Windows Credential Manager is available only on Windows".to_owned());
+    }
+
+    #[cfg(target_os = "windows")]
+    {
+        use std::os::windows::process::CommandExt as _;
+
+        let reference = validated_credential_ref(credential_ref)?;
+        Command::new(credential_helper_path()?)
+            .args(["set", "--credential-ref", reference.target()])
+            .creation_flags(CREATE_NEW_CONSOLE)
+            .spawn()
+            .map(|_| ())
+            .map_err(|error| format!("unable to open the credential editor: {error}"))
+    }
+}
+
+fn save_credential(credential_ref: &str, account: &str, password: &str) -> Result<(), String> {
+    if account.is_empty()
+        || account.len() > 256
+        || password.len() > 1024
+        || account.contains('\n')
+        || password.contains('\n')
+    {
+        return Err("credential fields are invalid".to_owned());
+    }
+    let mut child = Command::new(credential_helper_path()?)
+        .args(["set", "--credential-ref", credential_ref, "--stdin"])
+        .stdin(Stdio::piped())
+        .stdout(Stdio::null())
+        .stderr(Stdio::null())
+        .spawn()
+        .map_err(|error| format!("unable to run the credential helper: {error}"))?;
+    if let Some(mut stdin) = child.stdin.take() {
+        stdin
+            .write_all(account.as_bytes())
+            .map_err(|_| "unable to write credential account".to_owned())?;
+        stdin
+            .write_all(b"\n")
+            .map_err(|_| "unable to write credential separator".to_owned())?;
+        stdin
+            .write_all(password.as_bytes())
+            .map_err(|_| "unable to write credential password".to_owned())?;
+    }
+    let status = child
+        .wait()
+        .map_err(|_| "credential helper did not exit".to_owned())?;
+    if status.success() {
+        Ok(())
+    } else {
+        Err("credential helper rejected the credential".to_owned())
+    }
+}
+
+fn launch_native_rdp(endpoint: &RdpEndpoint, request: &LaunchRequest) -> Result<String, String> {
+    #[cfg(not(target_os = "windows"))]
+    {
+        let _ = (endpoint, request);
+        return Err("native RDP client is available only on Windows".to_owned());
+    }
+
+    #[cfg(target_os = "windows")]
+    {
+        use std::os::windows::process::CommandExt as _;
+
+        validate_username(&request.username)?;
+        let credential_ref = request
+            .credential_ref
+            .as_deref()
+            .map(validated_credential_ref)
+            .transpose()?;
+        let helper = native_rdp_viewer_path()?;
+        let helper_identity_path = helper.clone();
+        let session_id = new_native_session_id();
+        let (pipe_server, pipe_bootstrap) = SecurePipeServer::create(&session_id)
+            .map_err(|error| format!("unable to create the native RDP control pipe: {error}"))?;
+        let (width, height) = request
+            .resolution
+            .dimensions()
+            .expect("launch request resolution was validated")
+            .unwrap_or((1_600, 900));
+        let launch_config = RdpViewerLaunchConfig {
+            schema_version: 2,
+            target: mstsc_authority(endpoint),
+            username: request.username.clone(),
+            width,
+            height,
+            use_multimon: request.use_multimon,
+            monitor_indices: request.monitor_indices.clone(),
+            fullscreen: request.fullscreen,
+            redirect_clipboard: request.redirect_clipboard,
+            session_id: session_id.clone(),
+            certificate_sha256: request.certificate_sha256.clone().unwrap_or_default(),
+            credential_ref: credential_ref.map(|reference| reference.target().to_owned()),
+        };
+        let launch_payload = serde_json::to_vec(&launch_config)
+            .map_err(|_| "unable to encode native RDP launch configuration".to_owned())?;
+        let mut command = Command::new(helper);
+        command
+            .arg("--control-pipe")
+            .arg(pipe_bootstrap.pipe_name())
+            .env(PIPE_BOOTSTRAP_KEY_ENV, pipe_bootstrap.encoded_key())
+            .creation_flags(CREATE_NO_WINDOW);
+        if let Some(log) = open_rdp_viewer_log(&session_id) {
+            command.stdout(Stdio::from(
+                log.try_clone().map_err(|error| error.to_string())?,
+            ));
+            command.stderr(Stdio::from(log));
+        } else {
+            command.stdout(Stdio::null());
+            command.stderr(Stdio::null());
+        }
+        let mut child = command
+            .spawn()
+            .map_err(|error| format!("unable to start the native RDP client: {error}"))?;
+        let helper_job = match HelperJob::create_and_assign(child.id()) {
+            Ok(job) => job,
+            Err(error) => {
+                let _ = child.kill();
+                let _ = child.wait();
+                return Err(format!(
+                    "unable to constrain the native RDP helper lifecycle: {error}"
+                ));
+            }
+        };
+        let expected_identity = match process_identity(child.id(), &helper_identity_path) {
+            Ok(identity) => identity,
+            Err(error) => {
+                let _ = child.kill();
+                let _ = child.wait();
+                return Err(format!(
+                    "unable to verify the native RDP helper process: {error}"
+                ));
+            }
+        };
+        let diagnostics_path = native_session_diagnostics_path(&session_id);
+        let failure_session_id = session_id.clone();
+        thread::spawn(move || {
+            if let Err(error) = pipe_server.authenticate_and_send(
+                expected_identity,
+                &launch_payload,
+                Duration::from_secs(10),
+            ) {
+                eprintln!("native RDP helper control pipe failed: {error}");
+                let code = secure_pipe_error_code(&error);
+                let _ = write_native_session_failure(&failure_session_id, &code);
+                if helper_job.terminate(1).is_err() {
+                    let _ = child.kill();
+                }
+            }
+            let _ = child.wait();
+            thread::sleep(Duration::from_secs(60));
+            let _ = fs::remove_file(diagnostics_path);
+        });
+        Ok(session_id)
+    }
+}
+
+#[cfg(target_os = "windows")]
+fn open_rdp_viewer_log(session_id: &str) -> Option<File> {
+    let root = env::var_os("LOCALAPPDATA")
+        .filter(|value| !value.is_empty())
+        .map(PathBuf::from)?
+        .join("RemoteDesk")
+        .join("logs");
+    fs::create_dir_all(&root).ok()?;
+    OpenOptions::new()
+        .create(true)
+        .append(true)
+        .open(root.join(format!("rdp-viewer-{session_id}.log")))
+        .ok()
+}
+
+fn secure_pipe_error_code(error: &io::Error) -> String {
+    let message = error.to_string().to_ascii_lowercase();
+    let category = if error.kind() == io::ErrorKind::TimedOut || message.contains("timed out") {
+        "timeout"
+    } else if message.contains("pid") {
+        "peer_pid_mismatch"
+    } else if message.contains("creation token") {
+        "peer_creation_mismatch"
+    } else if message.contains("build hash") || message.contains("image") {
+        "peer_binary_mismatch"
+    } else if message.contains("acknowledgement") || message.contains("ack") {
+        "ack_failed"
+    } else if message.contains("payload") || message.contains("schema") || message.contains("json")
+    {
+        "payload_invalid"
+    } else if message.contains("pipe") {
+        "pipe_io_failed"
+    } else {
+        "handshake_failed"
+    };
+    category.to_owned()
+}
+
+fn write_native_session_failure(session_id: &str, error_code: &str) -> io::Result<()> {
+    if !validate_native_session_id(session_id) {
+        return Err(io::Error::new(
+            io::ErrorKind::InvalidInput,
+            "invalid native RDP session identifier",
+        ));
+    }
+    let timestamp = SystemTime::now()
+        .duration_since(UNIX_EPOCH)
+        .unwrap_or_default()
+        .as_millis()
+        .try_into()
+        .unwrap_or(u64::MAX);
+    let diagnostics = NativeSessionDiagnostics {
+        schema_version: 1,
+        session_id: session_id.to_owned(),
+        state: NativeSessionState::Failed,
+        started_at_unix_ms: timestamp,
+        updated_at_unix_ms: timestamp,
+        frame_count: 0,
+        frames_per_second: None,
+        desktop_width: 0,
+        desktop_height: 0,
+        monitor_count: 1,
+        multi_monitor: false,
+        network_latency_ms: None,
+        base_network_latency_ms: None,
+        bandwidth_kbps: None,
+        decode_latency_ms: None,
+        presentation_latency_ms: None,
+        renderer: Some("pending".to_owned()),
+        frame_conversion_pixels: 0,
+        frame_upload_mode: None,
+        frame_upload_pixels: 0,
+        reconnect_attempt: 0,
+        resize_generation: 0,
+        resize_state: NativeResizeState::Idle,
+        resize_requested_width: None,
+        resize_requested_height: None,
+        resize_failure: None,
+        error_code: Some(error_code.to_owned()),
+    };
+    let path = native_session_diagnostics_path(session_id);
+    fs::create_dir_all(path.parent().expect("diagnostics path has a parent"))?;
+    let data = serde_json::to_vec(&diagnostics).map_err(io::Error::other)?;
+    fs::write(path, data)
+}
+
+fn new_native_session_id() -> String {
+    let sequence = RDP_FILE_SEQUENCE.fetch_add(1, Ordering::Relaxed);
+    let timestamp = SystemTime::now()
+        .duration_since(UNIX_EPOCH)
+        .unwrap_or_default()
+        .as_millis();
+    format!("{}-{timestamp}-{sequence}", std::process::id())
+}
+
+fn validate_native_session_id(value: &str) -> bool {
+    !value.is_empty()
+        && value.len() <= 64
+        && value
+            .bytes()
+            .all(|byte| byte.is_ascii_alphanumeric() || byte == b'-')
+}
+
+fn native_session_diagnostics_path(session_id: &str) -> PathBuf {
+    env::temp_dir()
+        .join("RemoteDesk")
+        .join("sessions")
+        .join(format!("{session_id}.json"))
+}
+
+fn linux_desktop_session_diagnostics_path(session_id: &str) -> PathBuf {
+    env::temp_dir()
+        .join("RemoteDesk")
+        .join("linux-desktop-sessions")
+        .join(format!("{session_id}.json"))
+}
+
+fn read_linux_desktop_session_diagnostics(
+    session_id: &str,
+) -> Result<LinuxDesktopSessionDiagnostics, (u16, String)> {
+    if !validate_native_session_id(session_id) {
+        return Err((400, "invalid Linux desktop session identifier".to_owned()));
+    }
+    let data = fs::read(linux_desktop_session_diagnostics_path(session_id)).map_err(|error| {
+        if error.kind() == io::ErrorKind::NotFound {
+            (
+                404,
+                "Linux desktop session diagnostics are not available".to_owned(),
+            )
+        } else {
+            (
+                500,
+                "unable to read Linux desktop session diagnostics".to_owned(),
+            )
+        }
+    })?;
+    if data.len() > MAX_HELPER_RESPONSE {
+        return Err((
+            500,
+            "Linux desktop session diagnostics are too large".to_owned(),
+        ));
+    }
+    let status: LinuxDesktopSessionDiagnostics = serde_json::from_slice(&data).map_err(|_| {
+        (
+            409,
+            "Linux desktop session diagnostics are being updated".to_owned(),
+        )
+    })?;
+    let compression_diagnostics_valid = status
+        .compression_level
+        .is_none_or(|level| (1..=6).contains(&level))
+        && status
+            .compression_ratio_percent
+            .is_none_or(|ratio| ratio.is_finite() && ratio >= 0.0);
+    if status.schema_version != 1
+        || status.session_id != session_id
+        || !compression_diagnostics_valid
+    {
+        return Err((
+            500,
+            "Linux desktop session diagnostics are invalid".to_owned(),
+        ));
+    }
+    Ok(status)
+}
+
+fn read_native_session_diagnostics(
+    session_id: &str,
+) -> Result<NativeSessionDiagnostics, (u16, String)> {
+    if !validate_native_session_id(session_id) {
+        return Err((400, "invalid native RDP session identifier".to_owned()));
+    }
+    let path = native_session_diagnostics_path(session_id);
+    let data = fs::read(path).map_err(|error| {
+        if error.kind() == io::ErrorKind::NotFound {
+            (
+                404,
+                "native RDP session diagnostics are not available".to_owned(),
+            )
+        } else {
+            (
+                500,
+                "unable to read native RDP session diagnostics".to_owned(),
+            )
+        }
+    })?;
+    if data.len() > MAX_HELPER_RESPONSE {
+        return Err((
+            500,
+            "native RDP session diagnostics are too large".to_owned(),
+        ));
+    }
+    let status: NativeSessionDiagnostics = serde_json::from_slice(&data).map_err(|_| {
+        (
+            409,
+            "native RDP session diagnostics are being updated".to_owned(),
+        )
+    })?;
+    let timing_metrics_valid = status
+        .decode_latency_ms
+        .is_none_or(|latency| latency.is_finite() && latency >= 0.0)
+        && status
+            .presentation_latency_ms
+            .is_none_or(|latency| latency.is_finite() && latency >= 0.0);
+    let monitor_layout_valid = (1..=16).contains(&status.monitor_count)
+        && status.multi_monitor == (status.monitor_count > 1);
+    let frame_pixels = u64::from(status.desktop_width) * u64::from(status.desktop_height);
+    let frame_conversion_valid = status.frame_conversion_pixels <= frame_pixels;
+    let frame_upload_valid = match status.frame_upload_mode.as_deref() {
+        None | Some("pending") | Some("cached_frame") => status.frame_upload_pixels == 0,
+        Some("full_frame") | Some("dirty_rect") => {
+            status.frame_upload_pixels > 0 && status.frame_upload_pixels <= frame_pixels
+        }
+        Some(_) => false,
+    };
+    let resize_dimensions = status
+        .resize_requested_width
+        .zip(status.resize_requested_height);
+    let resize_dimensions_valid = resize_dimensions.is_none_or(|(width, height)| {
+        (MIN_RDP_DIMENSION..=MAX_RDP_DIMENSION).contains(&width)
+            && (MIN_RDP_DIMENSION..=MAX_RDP_DIMENSION).contains(&height)
+    }) && status.resize_requested_width.is_some()
+        == status.resize_requested_height.is_some();
+    let resize_failure_valid = status
+        .resize_failure
+        .as_deref()
+        .is_none_or(|failure| matches!(failure, "unsupported" | "timeout"));
+    let resize_state_valid = match status.resize_state {
+        NativeResizeState::Idle => {
+            status.resize_generation == 0
+                && resize_dimensions.is_none()
+                && status.resize_failure.is_none()
+        }
+        NativeResizeState::Pending | NativeResizeState::Confirmed => {
+            status.resize_generation > 0
+                && resize_dimensions.is_some()
+                && status.resize_failure.is_none()
+        }
+        NativeResizeState::ReconnectRequired
+        | NativeResizeState::Reconnecting
+        | NativeResizeState::Cancelled => {
+            status.resize_generation > 0
+                && resize_dimensions.is_some()
+                && status.resize_failure.is_some()
+        }
+    };
+    if status.schema_version != 1
+        || status.session_id != session_id
+        || !timing_metrics_valid
+        || !monitor_layout_valid
+        || !frame_conversion_valid
+        || !frame_upload_valid
+        || !resize_dimensions_valid
+        || !resize_failure_valid
+        || !resize_state_valid
+    {
+        return Err((500, "native RDP session diagnostics are invalid".to_owned()));
+    }
+    Ok(status)
+}
+
+fn validate_username(username: &str) -> Result<(), String> {
+    if username.len() > 256 || username.chars().any(char::is_control) {
+        return Err("Windows username is invalid".to_owned());
+    }
+    Ok(())
+}
+
+fn required_certificate_sha256(value: Option<&str>) -> Result<String, String> {
+    let value = value.unwrap_or("0000000000000000000000000000000000000000000000000000000000000000");
+    let compact = value
+        .chars()
+        .filter(|character| *character != ':')
+        .collect::<String>();
+    if compact.len() != 64 || !compact.bytes().all(|byte| byte.is_ascii_hexdigit()) {
+        return Err("server certificate SHA-256 fingerprint is invalid".to_owned());
+    }
+    Ok(compact.to_ascii_lowercase())
+}
+
+fn write_rdp_file(endpoint: &RdpEndpoint, request: &LaunchRequest) -> Result<PathBuf, String> {
+    let directory = env::temp_dir().join("RemoteDesk");
+    fs::create_dir_all(&directory)
+        .map_err(|error| format!("unable to create temporary RDP directory: {error}"))?;
+    let sequence = RDP_FILE_SEQUENCE.fetch_add(1, Ordering::Relaxed);
+    let timestamp = SystemTime::now()
+        .duration_since(UNIX_EPOCH)
+        .unwrap_or_default()
+        .as_millis();
+    let path = directory.join(format!(
+        "session-{}-{timestamp}-{sequence}.rdp",
+        std::process::id()
+    ));
+
+    let mut content = String::new();
+    content.push_str("full address:s:");
+    content.push_str(&mstsc_authority(endpoint));
+    content.push_str("\r\nprompt for credentials:i:1\r\nauthentication level:i:2\r\nenablecredsspsupport:i:1\r\n");
+    writeln!(
+        content,
+        "redirectclipboard:i:{}\r",
+        u8::from(request.redirect_clipboard)
+    )
+    .expect("writing to a String cannot fail");
+    content.push_str("audiomode:i:0\r\n");
+    if !request.username.is_empty() {
+        content.push_str("username:s:");
+        content.push_str(&request.username);
+        content.push_str("\r\n");
+    }
+    if request.use_multimon {
+        content.push_str("use multimon:i:1\r\n");
+    } else {
+        match request
+            .resolution
+            .dimensions()
+            .expect("launch request resolution was validated")
+        {
+            Some((width, height)) => {
+                write!(
+                    content,
+                    "dynamic resolution:i:0\r\ndesktopwidth:i:{width}\r\ndesktopheight:i:{height}\r\n"
+                )
+                .expect("writing to a String cannot fail");
+            }
+            None => content.push_str("dynamic resolution:i:1\r\n"),
+        }
+    }
+    write_utf16_file(&path, &content)?;
+    Ok(path)
+}
+
+fn mstsc_authority(endpoint: &RdpEndpoint) -> String {
+    let host = if endpoint.host().contains(':') {
+        format!("[{}]", endpoint.host())
+    } else {
+        endpoint.host().to_owned()
+    };
+    if endpoint.port() == DEFAULT_RDP_PORT {
+        host
+    } else {
+        format!("{host}:{}", endpoint.port())
+    }
+}
+
+fn write_utf16_file(path: &Path, content: &str) -> Result<(), String> {
+    let mut bytes = Vec::with_capacity(2 + content.len() * 2);
+    bytes.extend_from_slice(&[0xff, 0xfe]);
+    for unit in content.encode_utf16() {
+        bytes.extend_from_slice(&unit.to_le_bytes());
+    }
+    fs::write(path, bytes).map_err(|error| format!("unable to write temporary RDP file: {error}"))
+}
+
+fn open_credential_manager() -> Result<(), String> {
+    #[cfg(not(target_os = "windows"))]
+    return Err("Windows Credential Manager is available only on Windows".to_owned());
+
+    #[cfg(target_os = "windows")]
+    Command::new("control.exe")
+        .args(["/name", "Microsoft.CredentialManager"])
+        .spawn()
+        .map(|_| ())
+        .map_err(|error| format!("unable to open Windows Credential Manager: {error}"))
+}
+
+fn update_apply_script_path() -> Result<PathBuf, String> {
+    let current_exe = env::current_exe()
+        .map_err(|error| format!("unable to locate the control service: {error}"))?;
+    let install_root = current_exe
+        .parent()
+        .and_then(Path::parent)
+        .ok_or_else(|| "unable to locate the RemoteDesk installation directory".to_owned())?;
+    let script = install_root.join("Apply-RemoteDesk-Update.ps1");
+    if !script.is_file() {
+        return Err("the update installer helper is not installed".to_owned());
+    }
+    Ok(script)
+}
+
+fn start_update_installer(prepared: &update::PreparedUpdate) -> Result<(), String> {
+    #[cfg(not(target_os = "windows"))]
+    {
+        let _ = prepared;
+        return Err("online MSI installation is available only on Windows".to_owned());
+    }
+
+    #[cfg(target_os = "windows")]
+    {
+        use std::os::windows::process::CommandExt as _;
+        const CREATE_NO_WINDOW: u32 = 0x0800_0000;
+
+        let script = update_apply_script_path()?;
+        Command::new("powershell.exe")
+            .args([
+                "-NoProfile",
+                "-ExecutionPolicy",
+                "Bypass",
+                "-WindowStyle",
+                "Hidden",
+                "-File",
+            ])
+            .arg(script)
+            .arg("-InstallerPath")
+            .arg(&prepared.installer_path)
+            .arg("-WaitForPid")
+            .arg(std::process::id().to_string())
+            .arg("-ExpectedSha256")
+            .arg(&prepared.sha256)
+            .arg("-Version")
+            .arg(&prepared.version)
+            .creation_flags(CREATE_NO_WINDOW)
+            .spawn()
+            .map_err(|error| format!("unable to start the update installer: {error}"))?;
+        thread::spawn(|| {
+            thread::sleep(Duration::from_millis(1_500));
+            std::process::exit(0);
+        });
+        Ok(())
+    }
+}
+
+fn serve_static(request: Request, web_root: &Path, route: &str) {
+    let relative = if route == "/" {
+        "index.html"
+    } else {
+        &route[1..]
+    };
+    let relative_path = Path::new(relative);
+    if relative.contains('%')
+        || relative_path.components().any(|component| {
+            matches!(
+                component,
+                Component::ParentDir | Component::RootDir | Component::Prefix(_)
+            )
+        })
+    {
+        respond_json(
+            request,
+            403,
+            &ErrorResponse {
+                error: "invalid path",
+            },
+        );
+        return;
+    }
+    let candidate = web_root.join(relative_path);
+    if !candidate.is_file() {
+        respond_json(request, 404, &ErrorResponse { error: "not found" });
+        return;
+    }
+    let Ok(data) = fs::read(&candidate) else {
+        respond_json(
+            request,
+            500,
+            &ErrorResponse {
+                error: "unable to read file",
+            },
+        );
+        return;
+    };
+    let content_type = content_type(&candidate);
+    let body = if request.method() == &Method::Head {
+        Vec::new()
+    } else {
+        data
+    };
+    let mut response = Response::from_data(body).with_status_code(StatusCode(200));
+    response.add_header(header("Content-Type", content_type));
+    add_security_headers(&mut response);
+    let _ = request.respond(response);
+}
+
+fn content_type(path: &Path) -> &'static str {
+    match path.extension().and_then(|extension| extension.to_str()) {
+        Some("css") => "text/css; charset=utf-8",
+        Some("html") => "text/html; charset=utf-8",
+        Some("ico") => "image/x-icon",
+        Some("js") => "text/javascript; charset=utf-8",
+        Some("json") => "application/json; charset=utf-8",
+        Some("png") => "image/png",
+        Some("svg") => "image/svg+xml",
+        Some("webp") => "image/webp",
+        _ => "application/octet-stream",
+    }
+}
+
+fn respond_json<T: Serialize>(request: Request, status: u16, value: &T) {
+    let data = serde_json::to_vec(value)
+        .unwrap_or_else(|_| b"{\"error\":\"serialization failed\"}".to_vec());
+    let mut response = Response::from_data(data).with_status_code(StatusCode(status));
+    response.add_header(header("Content-Type", "application/json; charset=utf-8"));
+    add_security_headers(&mut response);
+    let _ = request.respond(response);
+}
+
+fn add_security_headers<R: Read>(response: &mut Response<R>) {
+    response.add_header(header("Cache-Control", "no-store"));
+    response.add_header(header("X-Content-Type-Options", "nosniff"));
+    response.add_header(header("X-Frame-Options", "DENY"));
+    response.add_header(header(
+        "Content-Security-Policy",
+        "default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; connect-src 'self'; frame-src 'none'; base-uri 'none'; frame-ancestors 'none'",
+    ));
+}
+
+fn header(name: &str, value: &str) -> Header {
+    Header::from_bytes(name.as_bytes(), value.as_bytes()).expect("static HTTP header is valid")
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use base64::engine::general_purpose::STANDARD;
+    use ed25519_dalek::SigningKey;
+    use std::net::TcpListener;
+
+    fn strings<'a>(values: &'a [&'a str]) -> impl Iterator<Item = String> + 'a {
+        values.iter().map(|value| (*value).to_owned())
+    }
+
+    #[test]
+    fn command_line_requires_web_root_and_valid_port() {
+        assert_eq!(
+            parse_args(strings(&["--web-root", "web"])).unwrap(),
+            Args {
+                web_root: PathBuf::from("web"),
+                port: DEFAULT_PORT,
+                exit_on_stdin_close: false,
+            }
+        );
+        assert!(
+            parse_args(strings(&["--web-root", "web", "--exit-on-stdin-close"]))
+                .unwrap()
+                .exit_on_stdin_close
+        );
+        assert!(parse_args(strings(&["--port", "80", "--web-root", "web"])).is_err());
+        assert!(parse_args(strings(&["--unknown"])).is_err());
+    }
+
+    #[test]
+    fn linux_user_validation_trims_and_accepts_root_and_common_names() {
+        assert_eq!(validated_linux_user(" alice ").unwrap(), "alice");
+        assert_eq!(validated_linux_user("dev.user").unwrap(), "dev.user");
+        assert_eq!(validated_linux_user(" root ").unwrap(), "root");
+        assert_eq!(validated_linux_user("ROOT").unwrap(), "ROOT");
+        assert!(validated_linux_user(" ").is_err());
+        assert!(validated_linux_user("dev/user").is_err());
+    }
+
+    #[test]
+    fn desktop_shell_ready_token_has_strict_format() {
+        let token = "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef";
+        assert!(valid_shell_token_format(token));
+        assert!(!valid_shell_token_format(&token[..63]));
+        assert!(!valid_shell_token_format(&token.to_ascii_uppercase()));
+        assert!(!valid_shell_token_format(&"z".repeat(64)));
+    }
+
+    #[test]
+    fn capabilities_only_advertise_integrated_features() {
+        let response = capabilities(&PersistentSettings::default());
+
+        assert_eq!(response.version, env!("CARGO_PKG_VERSION"));
+        assert_eq!(response.platform, env::consts::OS);
+        assert_eq!(
+            response.application.desktop_shell,
+            env::var("REMOTEDESK_DESKTOP_SHELL").as_deref() == Ok("tauri-2")
+        );
+        assert_eq!(
+            response.application.shell_kind,
+            if response.application.desktop_shell {
+                "tauri-2"
+            } else {
+                "standalone"
+            }
+        );
+        assert!(response.rdp.probe);
+        assert_eq!(
+            response.rdp.protocol_probe,
+            rdp_session_helper_path().is_ok()
+        );
+        assert_eq!(response.rdp.external_launch, cfg!(target_os = "windows"));
+        assert_eq!(
+            response.rdp.native_launch,
+            cfg!(target_os = "windows") && native_rdp_viewer_path().is_ok()
+        );
+        assert_eq!(response.rdp.native_multimon, response.rdp.native_launch);
+        assert_eq!(
+            response.rdp.session_network_metrics,
+            response.rdp.native_launch
+        );
+        assert_eq!(
+            response.rdp.session_decode_metrics,
+            response.rdp.native_launch
+        );
+        assert_eq!(
+            response.rdp.region_pixel_conversion,
+            response.rdp.native_launch
+        );
+        assert_eq!(
+            response.rdp.native_renderer,
+            if response.rdp.d3d11_device_available {
+                "d3d11_cpu_upload"
+            } else {
+                "software_framebuffer"
+            }
+        );
+        assert_eq!(
+            response.rdp.d3d11_device_available,
+            d3d11_device_available()
+        );
+        assert_eq!(
+            response.rdp.d3d11_dirty_rect_upload,
+            response.rdp.d3d11_device_available && response.rdp.native_launch
+        );
+        assert!(!response.rdp.certificate_pinning);
+        assert_eq!(response.rdp.secure_named_pipe, response.rdp.native_launch);
+        assert_eq!(
+            response.rdp.secure_pipe_config_ack,
+            response.rdp.native_launch
+        );
+        assert_eq!(
+            response.rdp.secure_pipe_handshake_timeout,
+            response.rdp.native_launch
+        );
+        assert_eq!(
+            response.rdp.job_object_lifecycle,
+            response.rdp.native_launch
+        );
+        assert_eq!(response.rdp.automatic_reconnect, response.rdp.native_launch);
+        assert_eq!(response.rdp.resize_confirmation, response.rdp.native_launch);
+        assert_eq!(response.rdp.credential_manager, cfg!(target_os = "windows"));
+        assert_eq!(
+            response.rdp.credential_store,
+            cfg!(target_os = "windows") && credential_helper_path().is_ok()
+        );
+        assert_eq!(
+            response.linux.agent_session,
+            linux_terminal_helper_path().is_ok()
+        );
+        assert_eq!(response.linux.agent_probe, response.linux.agent_session);
+        assert_eq!(
+            response.linux.terminal_session,
+            response.linux.agent_session
+        );
+        assert_eq!(
+            response.linux.agent_identity_store,
+            response.linux.terminal_session
+        );
+        assert_eq!(
+            response.linux.desktop_session,
+            response.linux.terminal_session
+        );
+        assert_eq!(response.linux.x11_desktop, response.linux.desktop_session);
+        assert_eq!(response.linux.relative_pointer, response.linux.x11_desktop);
+        assert_eq!(
+            response.linux.adaptive_frame_pacing,
+            response.linux.x11_desktop
+        );
+        assert_eq!(
+            response.linux.adaptive_compression,
+            response.linux.x11_desktop
+        );
+        assert_eq!(
+            response.linux.desktop_session_resume,
+            response.linux.x11_desktop
+        );
+        assert_eq!(
+            response.linux.desktop_session_crash_resume,
+            cfg!(target_os = "windows") && response.linux.desktop_session
+        );
+        assert_eq!(
+            response.linux.opus_audio,
+            cfg!(target_os = "windows") && response.linux.desktop_session
+        );
+        assert_eq!(
+            response.linux.wayland_desktop,
+            linux_terminal_helper_path().is_ok()
+        );
+        assert!(!response.linux.native_video);
+        assert_eq!(
+            response.linux.clipboard_read,
+            cfg!(target_os = "windows") && linux_terminal_helper_path().is_ok()
+        );
+        assert_eq!(
+            response.linux.clipboard_write,
+            cfg!(target_os = "windows") && linux_terminal_helper_path().is_ok()
+        );
+        assert_eq!(
+            response.linux.native_video_decoder_probe,
+            native_video_h264_decoder_available()
+        );
+        assert_eq!(
+            response.linux.native_video_surface_presenter,
+            native_video_surface_presenter_available()
+        );
+        assert!(!response.edge.relay);
+        assert_eq!(
+            response.edge.signed_intent,
+            linux_terminal_helper_path().is_ok()
+        );
+        assert_eq!(
+            response.edge.linux_session_relay,
+            linux_terminal_helper_path().is_ok()
+        );
+        assert_eq!(
+            response.edge.linux_known_device_rendezvous,
+            linux_terminal_helper_path().is_ok()
+        );
+        assert_eq!(
+            response.edge.remote_pairing,
+            linux_terminal_helper_path().is_ok()
+        );
+        assert!(!response.update.configured);
+        assert!(!response.update.check);
+        assert!(!response.update.install);
+
+        let configured = capabilities(&PersistentSettings {
+            edge_api_url: Some("https://edge.example.test/".to_owned()),
+            update_manifest_url: Some("https://updates.example.test/stable.json".to_owned()),
+            update_public_key: Some("configured".to_owned()),
+            auto_check_updates: true,
+        });
+        assert!(configured.update.configured);
+        assert!(configured.update.check);
+    }
+
+    #[test]
+    fn capability_json_keeps_independent_edge_and_identity_flags() {
+        let json = serde_json::to_value(capabilities(&PersistentSettings::default())).unwrap();
+        assert_eq!(json["edge"]["relay"], false);
+        assert_eq!(
+            json["edge"]["signed_intent"],
+            linux_terminal_helper_path().is_ok()
+        );
+        assert_eq!(
+            json["edge"]["linux_session_relay"],
+            linux_terminal_helper_path().is_ok()
+        );
+        assert_eq!(
+            json["edge"]["linux_known_device_rendezvous"],
+            linux_terminal_helper_path().is_ok()
+        );
+        assert_eq!(
+            json["edge"]["remote_pairing"],
+            linux_terminal_helper_path().is_ok()
+        );
+        assert_eq!(json["rdp"]["probe"], true);
+        assert_eq!(
+            json["linux"]["agent_identity_store"],
+            linux_terminal_helper_path().is_ok()
+        );
+        assert_eq!(
+            json["linux"]["agent_probe"],
+            linux_terminal_helper_path().is_ok()
+        );
+    }
+
+    #[test]
+    fn linux_agent_probe_schema_is_strict_and_input_is_bounded() {
+        let request: LinuxAgentProbeRequest = serde_json::from_str(&format!(
+            r#"{{"address":"linux.example.test:39500","certificate_sha256":"{}"}}"#,
+            "ab".repeat(32)
+        ))
+        .unwrap();
+        assert!(validate_linux_agent_probe_request(&request).is_ok());
+        assert!(serde_json::from_str::<LinuxAgentProbeRequest>(&format!(
+            r#"{{"address":"linux.example.test:39500","certificate_sha256":"{}","password":"secret"}}"#,
+            "ab".repeat(32)
+        )).is_err());
+        let invalid = LinuxAgentProbeRequest {
+            address: "https://linux.example.test/?token=secret".into(),
+            certificate_sha256: "ab".repeat(32),
+        };
+        assert!(validate_linux_agent_probe_request(&invalid).is_err());
+
+        let response: LinuxAgentProbeResponse = serde_json::from_str(
+            r#"{"ok":true,"latency_ms":18,"protocol_major":1,"protocol_minor":5,"terminal":true,"desktop":true,"files":true,"edge_presence_configured":true,"edge_presence_online":true,"edge_signaling_configured":true,"edge_signaling_online":true}"#,
+        )
+        .unwrap();
+        assert!(response.ok);
+        assert_eq!(response.protocol_minor, 5);
+        assert!(serde_json::from_str::<LinuxAgentProbeResponse>(
+            r#"{"ok":true,"latency_ms":18,"protocol_major":1,"protocol_minor":5,"terminal":true,"desktop":true,"files":true,"edge_presence_configured":true,"edge_presence_online":true,"edge_signaling_configured":true,"edge_signaling_online":true,"challenge":"secret"}"#,
+        ).is_err());
+    }
+
+    #[test]
+    fn linux_desktop_launch_schema_is_explicit_and_bounded_by_launcher() {
+        let request: LinuxDesktopLaunchRequest = serde_json::from_str(
+            r#"{"address":"linux.example.test:39500","user":"alice","certificate_sha256":"abababababababababababababababababababababababababababababababab","width":1920,"height":1080,"frames_per_second":15,"fullscreen":true,"follow_window":true,"capture_input":true,"clipboard_read":false,"clipboard_write":true,"edge_api_url":null}"#,
+        )
+        .unwrap();
+        assert_eq!((request.width, request.height), (1920, 1080));
+        assert_eq!(request.frames_per_second, 15);
+        assert!(request.fullscreen);
+        assert!(request.follow_window);
+        assert!(request.capture_input);
+        assert!(!request.clipboard_read);
+        assert!(request.clipboard_write);
+        assert!(validate_linux_desktop_request(&request).is_ok());
+        let mut invalid = request;
+        invalid.frames_per_second = 31;
+        assert!(validate_linux_desktop_request(&invalid).is_err());
+        assert!(serde_json::from_str::<LinuxDesktopLaunchRequest>(
+            r#"{"address":"host","user":"alice","certificate_sha256":"abababababababababababababababababababababababababababababababab","width":1920,"height":1080,"frames_per_second":15,"password":"secret"}"#,
+        )
+        .is_err());
+
+        let defaulted: LinuxDesktopLaunchRequest = serde_json::from_str(
+            r#"{"address":"linux.example.test:39500","user":"alice","certificate_sha256":"abababababababababababababababababababababababababababababababab","width":1920,"height":1080,"frames_per_second":15}"#,
+        )
+        .unwrap();
+        assert!(!defaulted.follow_window);
+        assert!(!defaulted.capture_input);
+        assert!(defaulted.clipboard_read);
+        assert!(defaulted.clipboard_write);
+    }
+
+    #[test]
+    fn edge_api_url_requires_secret_free_https_origin_or_loopback() {
+        assert_eq!(
+            validated_edge_api_url(Some("https://edge.example.test/")),
+            Ok(Some("https://edge.example.test/".into()))
+        );
+        assert!(validated_edge_api_url(Some("http://127.0.0.1:7080/")).is_ok());
+        assert!(validated_edge_api_url(Some("http://edge.example.test/")).is_err());
+        assert!(validated_edge_api_url(Some("https://user:secret@edge.test/")).is_err());
+        assert!(validated_edge_api_url(Some("https://edge.test/path")).is_err());
+        assert!(validated_edge_api_url(Some("https://edge.test/?token=secret")).is_err());
+        assert_eq!(validated_edge_api_url(Some("  ")), Ok(None));
+    }
+
+    #[test]
+    fn protocol_probe_response_accepts_stable_secret_free_helper_output() {
+        let response: ProtocolProbeResponse = serde_json::from_str(
+            &format!(
+                r#"{{"ok":true,"stage":"tls","security_protocol":"hybrid_extended","tcp_latency_ms":2,"total_latency_ms":5,"certificate_sha256":"{}"}}"#,
+                "ab".repeat(32)
+            ),
+        )
+        .unwrap();
+        assert!(response.ok);
+        assert_eq!(response.stage, ProtocolProbeStage::Tls);
+        assert_eq!(
+            response.security_protocol,
+            Some(NegotiatedSecurityProtocol::HybridExtended)
+        );
+        assert_eq!(response.certificate_sha256, Some("ab".repeat(32)));
+        assert_eq!(response.error_code, None);
+    }
+
+    #[test]
+    fn native_rdp_accepts_optional_certificate_fingerprint() {
+        assert_eq!(required_certificate_sha256(None), Ok("0".repeat(64)));
+        assert!(required_certificate_sha256(Some("ab")).is_err());
+        assert!(required_certificate_sha256(Some(&"zz".repeat(32))).is_err());
+        assert_eq!(
+            required_certificate_sha256(Some(&["AB"; 32].join(":"))),
+            Ok("ab".repeat(32))
+        );
+    }
+
+    #[test]
+    fn linux_agent_identity_requests_are_strict_and_certificate_bound() {
+        let request: LinuxAgentIdentityRequest = serde_json::from_str(&format!(
+            r#"{{"certificate_sha256":"{}"}}"#,
+            "ab".repeat(32)
+        ))
+        .unwrap();
+        assert_eq!(
+            linux_agent_identity_reference(&request.certificate_sha256)
+                .unwrap()
+                .target(),
+            format!("RemoteDesk/Linux/agent/{}", "ab".repeat(32))
+        );
+        assert!(
+            serde_json::from_str::<LinuxAgentIdentityRequest>(
+                r#"{"certificate_sha256":"ab","unexpected":true}"#
+            )
+            .is_err()
+        );
+    }
+
+    #[test]
+    fn linux_agent_public_key_requires_canonical_ed25519_bytes() {
+        let key = ed25519_dalek::SigningKey::from_bytes(&[41; 32]);
+        let encoded = STANDARD_NO_PAD.encode(key.verifying_key().as_bytes());
+        assert!(validate_linux_agent_public_key(&encoded).is_ok());
+        assert!(validate_linux_agent_public_key("not-a-public-key").is_err());
+        assert!(validate_linux_agent_public_key(&(encoded + "=")).is_err());
+    }
+
+    #[test]
+    fn credential_references_are_strictly_application_owned() {
+        assert_eq!(
+            validated_credential_ref("RemoteDesk/RDP/profile-1")
+                .unwrap()
+                .target(),
+            "RemoteDesk/RDP/profile-1"
+        );
+        assert!(validated_credential_ref("TERMSRV/host").is_err());
+        assert!(validated_credential_ref("RemoteDesk/RDP/../host").is_err());
+    }
+
+    #[test]
+    fn update_settings_require_a_pair_persist_clear_and_load_legacy_defaults() {
+        let sequence = RDP_FILE_SEQUENCE.fetch_add(1, Ordering::Relaxed);
+        let root = env::temp_dir().join(format!(
+            "remotedesk-update-settings-test-{}-{sequence}",
+            std::process::id()
+        ));
+        let path = root.join("settings.json");
+        let settings = RuntimeSettings::new(Some(path.clone()));
+        let manifest_url = "https://updates.example.test/stable.json";
+        let public_key = STANDARD.encode(
+            SigningKey::from_bytes(&[11_u8; 32])
+                .verifying_key()
+                .to_bytes(),
+        );
+
+        assert!(
+            settings
+                .update(&UpdateSettingsRequest {
+                    edge_api_url: None,
+                    update_manifest_url: Some(manifest_url.to_owned()),
+                    update_public_key: None,
+                    auto_check_updates: true,
+                })
+                .is_err()
+        );
+        assert!(
+            settings
+                .update(&UpdateSettingsRequest {
+                    edge_api_url: None,
+                    update_manifest_url: None,
+                    update_public_key: Some(public_key.clone()),
+                    auto_check_updates: true,
+                })
+                .is_err()
+        );
+
+        let saved = settings
+            .update(&UpdateSettingsRequest {
+                edge_api_url: None,
+                update_manifest_url: Some(manifest_url.to_owned()),
+                update_public_key: Some(public_key.clone()),
+                auto_check_updates: false,
+            })
+            .unwrap();
+        assert_eq!(saved.update_manifest_url.as_deref(), Some(manifest_url));
+        assert_eq!(
+            saved.update_public_key.as_deref(),
+            Some(public_key.as_str())
+        );
+        assert!(!saved.auto_check_updates);
+        assert_eq!(RuntimeSettings::new(Some(path.clone())).snapshot(), saved);
+
+        let cleared = settings
+            .update(&UpdateSettingsRequest {
+                edge_api_url: None,
+                update_manifest_url: None,
+                update_public_key: None,
+                auto_check_updates: true,
+            })
+            .unwrap();
+        assert_eq!(cleared.update_manifest_url, None);
+        assert_eq!(cleared.update_public_key, None);
+        assert!(cleared.auto_check_updates);
+        assert_eq!(RuntimeSettings::new(Some(path.clone())).snapshot(), cleared);
+
+        fs::write(&path, b"{}").unwrap();
+        let legacy = RuntimeSettings::new(Some(path)).snapshot();
+        assert_eq!(legacy.update_manifest_url, None);
+        assert_eq!(legacy.update_public_key, None);
+        assert_eq!(legacy.edge_api_url, None);
+        assert!(legacy.auto_check_updates);
+        fs::remove_dir_all(root).unwrap();
+    }
+
+    #[test]
+    fn host_database_round_trips_json_without_credentials() {
+        let root = env::temp_dir().join(format!("remotedesk-hosts-{}", new_native_session_id()));
+        let path = root.join("hosts.db");
+        let hosts = serde_json::json!([{"id":1,"name":"dev","kind":"windows_rdp","username":""}]);
+        save_hosts_database(&path, &hosts).unwrap();
+        assert_eq!(load_hosts_database(&path).unwrap(), hosts);
+        fs::remove_dir_all(root).unwrap();
+    }
+
+    #[test]
+    fn launch_request_defaults_to_system_client() {
+        let request: LaunchRequest = serde_json::from_str(
+            r#"{"address":"desktop.example.test","resolution":{"mode":"fixed","width":1920,"height":1080},"use_multimon":false}"#,
+        )
+        .unwrap();
+        assert_eq!(request.client, RdpClientMode::System);
+        assert!(!request.fullscreen);
+        assert!(request.credential_ref.is_none());
+    }
+
+    #[test]
+    fn launch_request_accepts_legacy_resolution_strings() {
+        let follow: LaunchRequest = serde_json::from_str(
+            r#"{"address":"desktop.example.test","resolution":"Follow window","use_multimon":false}"#,
+        )
+        .unwrap();
+        assert_eq!(follow.resolution, RdpResolution::FollowWindow);
+
+        let fixed: LaunchRequest = serde_json::from_str(
+            r#"{"address":"desktop.example.test","resolution":"1920 x 1080","use_multimon":false}"#,
+        )
+        .unwrap();
+        assert_eq!(
+            fixed.resolution,
+            RdpResolution::Fixed {
+                width: 1920,
+                height: 1080
+            }
+        );
+    }
+
+    #[test]
+    fn request_json_errors_distinguish_syntax_from_schema() {
+        assert!(matches!(
+            parse_json_body::<LaunchRequest>("{"),
+            Err("request body is not valid JSON")
+        ));
+        assert!(matches!(
+            parse_json_body::<LaunchRequest>(
+                r#"{"address":"desktop.example.test","resolution":{"mode":"unknown"},"use_multimon":false}"#
+            ),
+            Err("request body does not match the API schema")
+        ));
+    }
+
+    #[test]
+    fn native_session_diagnostics_are_path_safe_and_secret_free() {
+        assert!(!validate_native_session_id("../settings"));
+        assert!(!validate_native_session_id("session/name"));
+        let session_id = new_native_session_id();
+        assert!(validate_native_session_id(&session_id));
+        let path = native_session_diagnostics_path(&session_id);
+        fs::create_dir_all(path.parent().unwrap()).unwrap();
+        fs::write(
+            &path,
+            format!(
+                r#"{{"schema_version":1,"session_id":"{session_id}","state":"connected","started_at_unix_ms":10,"updated_at_unix_ms":20,"frame_count":3,"frames_per_second":30.0,"desktop_width":1920,"desktop_height":1080,"network_latency_ms":18,"base_network_latency_ms":12,"bandwidth_kbps":50000,"decode_latency_ms":2.75,"presentation_latency_ms":1.25,"frame_conversion_pixels":43200,"frame_upload_mode":"dirty_rect","frame_upload_pixels":86400,"error_code":null}}"#
+            ),
+        )
+        .unwrap();
+
+        let status = read_native_session_diagnostics(&session_id).unwrap();
+        assert_eq!(status.frame_count, 3);
+        assert_eq!(status.desktop_width, 1920);
+        assert_eq!(status.network_latency_ms, Some(18));
+        assert_eq!(status.base_network_latency_ms, Some(12));
+        assert_eq!(status.bandwidth_kbps, Some(50_000));
+        assert_eq!(status.decode_latency_ms, Some(2.75));
+        assert_eq!(status.presentation_latency_ms, Some(1.25));
+        assert_eq!(status.frame_conversion_pixels, 43_200);
+        assert_eq!(status.frame_upload_mode.as_deref(), Some("dirty_rect"));
+        assert_eq!(status.frame_upload_pixels, 86_400);
+        let serialized = serde_json::to_string(&status).unwrap();
+        assert!(!serialized.contains("address"));
+        assert!(!serialized.contains("username"));
+        assert!(!serialized.contains("password"));
+
+        fs::write(
+            &path,
+            format!(
+                r#"{{"schema_version":1,"session_id":"{session_id}","state":"connected","started_at_unix_ms":10,"updated_at_unix_ms":20,"frame_count":3,"frames_per_second":30.0,"desktop_width":1920,"desktop_height":1080,"decode_latency_ms":1.0,"presentation_latency_ms":1.25,"resize_generation":4,"resize_state":"reconnect_required","resize_requested_width":2560,"resize_requested_height":1440,"resize_failure":"unsupported","error_code":null}}"#
+            ),
+        )
+        .unwrap();
+        let resize = read_native_session_diagnostics(&session_id).unwrap();
+        assert_eq!(resize.resize_generation, 4);
+        assert_eq!(resize.resize_state, NativeResizeState::ReconnectRequired);
+        assert_eq!(resize.resize_requested_width, Some(2_560));
+        assert_eq!(resize.resize_requested_height, Some(1_440));
+
+        fs::write(
+            &path,
+            format!(
+                r#"{{"schema_version":1,"session_id":"{session_id}","state":"connected","started_at_unix_ms":10,"updated_at_unix_ms":20,"frame_count":3,"frames_per_second":30.0,"desktop_width":1920,"desktop_height":1080,"decode_latency_ms":1.0,"presentation_latency_ms":1.25,"resize_generation":5,"resize_state":"pending","resize_requested_width":2560,"resize_requested_height":null,"resize_failure":null,"error_code":null}}"#
+            ),
+        )
+        .unwrap();
+        assert_eq!(
+            read_native_session_diagnostics(&session_id).unwrap_err().0,
+            500
+        );
+
+        fs::write(
+            &path,
+            format!(
+                r#"{{"schema_version":1,"session_id":"{session_id}","state":"connected","started_at_unix_ms":10,"updated_at_unix_ms":20,"frame_count":3,"frames_per_second":30.0,"desktop_width":1920,"desktop_height":1080,"decode_latency_ms":-1.0,"presentation_latency_ms":1.25,"error_code":null}}"#
+            ),
+        )
+        .unwrap();
+        assert_eq!(
+            read_native_session_diagnostics(&session_id).unwrap_err().0,
+            500
+        );
+
+        fs::write(
+            &path,
+            format!(
+                r#"{{"schema_version":1,"session_id":"{session_id}","state":"connected","started_at_unix_ms":10,"updated_at_unix_ms":20,"frame_count":3,"frames_per_second":30.0,"desktop_width":1920,"desktop_height":1080,"decode_latency_ms":1.0,"presentation_latency_ms":1.25,"frame_upload_mode":"dirty_rect","frame_upload_pixels":999999999,"error_code":null}}"#
+            ),
+        )
+        .unwrap();
+        assert_eq!(
+            read_native_session_diagnostics(&session_id).unwrap_err().0,
+            500
+        );
+
+        write_native_session_failure(&session_id, "secure_pipe_failed").unwrap();
+        let failed = read_native_session_diagnostics(&session_id).unwrap();
+        assert!(matches!(&failed.state, NativeSessionState::Failed));
+        assert_eq!(failed.error_code.as_deref(), Some("secure_pipe_failed"));
+        fs::remove_file(path).unwrap();
+    }
+
+    #[test]
+    fn linux_desktop_diagnostics_are_path_safe_and_secret_free() {
+        assert!(read_linux_desktop_session_diagnostics("../settings").is_err());
+        let session_id = new_native_session_id();
+        let path = linux_desktop_session_diagnostics_path(&session_id);
+        fs::create_dir_all(path.parent().unwrap()).unwrap();
+        fs::write(
+            &path,
+            format!(
+                r#"{{"schema_version":1,"session_id":"{session_id}","state":"connected","updated_at_unix_ms":20,"frame_count":3,"frames_per_second":14.5,"desktop_width":1920,"desktop_height":1080,"network_latency_ms":18.5,"capture_latency_ms":2.5,"encode_latency_ms":8.25,"compression_level":4,"compression_ratio_percent":18.75,"decode_latency_ms":1.75,"presentation_latency_ms":1.25,"clipboard_read":true,"clipboard_write":false,"reconnect_attempt":0,"error_code":null}}"#
+            ),
+        )
+        .unwrap();
+
+        let status = read_linux_desktop_session_diagnostics(&session_id).unwrap();
+        assert_eq!(status.frame_count, 3);
+        assert_eq!(status.network_latency_ms, Some(18.5));
+        assert_eq!(status.capture_latency_ms, Some(2.5));
+        assert_eq!(status.encode_latency_ms, Some(8.25));
+        assert_eq!(status.compression_level, Some(4));
+        assert_eq!(status.compression_ratio_percent, Some(18.75));
+        assert_eq!(status.decode_latency_ms, Some(1.75));
+        assert!(status.clipboard_read);
+        assert!(!status.clipboard_write);
+        assert_eq!(status.reconnect_attempt, 0);
+        let serialized = serde_json::to_string(&status).unwrap();
+        assert!(!serialized.contains("address"));
+        assert!(!serialized.contains("username"));
+        assert!(!serialized.contains("password"));
+
+        fs::write(
+            &path,
+            format!(
+                r#"{{"schema_version":1,"session_id":"{session_id}","state":"connecting","updated_at_unix_ms":20,"frame_count":0,"frames_per_second":null,"desktop_width":0,"desktop_height":0,"network_latency_ms":null,"capture_latency_ms":null,"encode_latency_ms":null,"compression_level":null,"compression_ratio_percent":null,"decode_latency_ms":null,"presentation_latency_ms":null,"reconnect_attempt":0,"error_code":null}}"#
+            ),
+        )
+        .unwrap();
+        let legacy = read_linux_desktop_session_diagnostics(&session_id).unwrap();
+        assert!(!legacy.clipboard_read);
+        assert!(!legacy.clipboard_write);
+
+        for invalid_compression in [
+            r#""compression_level":7,"compression_ratio_percent":18.75"#,
+            r#""compression_level":4,"compression_ratio_percent":-1.0"#,
+        ] {
+            fs::write(
+                &path,
+                format!(
+                    r#"{{"schema_version":1,"session_id":"{session_id}","state":"connected","updated_at_unix_ms":20,"frame_count":3,"frames_per_second":14.5,"desktop_width":1920,"desktop_height":1080,"network_latency_ms":18.5,"capture_latency_ms":2.5,"encode_latency_ms":8.25,{invalid_compression},"decode_latency_ms":1.75,"presentation_latency_ms":1.25,"reconnect_attempt":0,"error_code":null}}"#
+                ),
+            )
+            .unwrap();
+            assert_eq!(
+                read_linux_desktop_session_diagnostics(&session_id)
+                    .unwrap_err()
+                    .0,
+                500
+            );
+        }
+        fs::remove_file(path).unwrap();
+    }
+
+    #[test]
+    fn local_tcp_listener_is_reported_reachable() {
+        let listener = TcpListener::bind("127.0.0.1:0").unwrap();
+        let port = listener.local_addr().unwrap().port();
+        let endpoint = RdpEndpoint::parse(&format!("127.0.0.1:{port}")).unwrap();
+        let response = probe_rdp(&endpoint, Duration::from_millis(250));
+        assert_eq!(response.status, ProbeStatus::Reachable);
+        assert!(response.reachable);
+        drop(listener);
+    }
+
+    #[test]
+    fn closed_local_port_is_not_reported_reachable() {
+        let listener = TcpListener::bind("127.0.0.1:0").unwrap();
+        let port = listener.local_addr().unwrap().port();
+        drop(listener);
+        let endpoint = RdpEndpoint::parse(&format!("127.0.0.1:{port}")).unwrap();
+        let response = probe_rdp(&endpoint, Duration::from_millis(250));
+        assert!(!response.reachable);
+        assert_ne!(response.status, ProbeStatus::Reachable);
+    }
+
+    #[test]
+    fn mstsc_authority_brackets_ipv6_and_omits_default_port() {
+        let ipv6 = RdpEndpoint::parse("[::1]:3390").unwrap();
+        assert_eq!(mstsc_authority(&ipv6), "[::1]:3390");
+        let host = RdpEndpoint::parse("desktop.example.test").unwrap();
+        assert_eq!(mstsc_authority(&host), "desktop.example.test");
+    }
+
+    #[test]
+    fn structured_resolution_is_bounded() {
+        assert_eq!(
+            RdpResolution::Fixed {
+                width: 1920,
+                height: 1080
+            }
+            .dimensions(),
+            Ok(Some((1920, 1080)))
+        );
+        assert_eq!(RdpResolution::FollowWindow.dimensions(), Ok(None));
+        assert!(
+            RdpResolution::Fixed {
+                width: 199,
+                height: 1080
+            }
+            .dimensions()
+            .is_err()
+        );
+        assert!(
+            RdpResolution::Fixed {
+                width: 1920,
+                height: 8193
+            }
+            .dimensions()
+            .is_err()
+        );
+    }
+
+    #[test]
+    fn username_rejects_control_characters_and_excessive_length() {
+        assert!(validate_username("DOMAIN\\user").is_ok());
+        assert!(validate_username("user\r\nfull address:s:attacker").is_err());
+        assert!(validate_username(&"a".repeat(257)).is_err());
+    }
+
+    #[test]
+    fn temporary_rdp_file_contains_session_settings_but_no_password() {
+        let endpoint = RdpEndpoint::parse("desktop.example.test:3390").unwrap();
+        let request = LaunchRequest {
+            address: "desktop.example.test:3390".to_owned(),
+            username: "DOMAIN\\user".to_owned(),
+            resolution: RdpResolution::Fixed {
+                width: 1920,
+                height: 1080,
+            },
+            use_multimon: false,
+            monitor_indices: Vec::new(),
+            client: RdpClientMode::System,
+            fullscreen: false,
+            certificate_sha256: None,
+            credential_ref: None,
+            redirect_clipboard: true,
+        };
+        let path = write_rdp_file(&endpoint, &request).unwrap();
+        let bytes = fs::read(&path).unwrap();
+        assert_eq!(&bytes[..2], &[0xff, 0xfe]);
+        let units = bytes[2..]
+            .chunks_exact(2)
+            .map(|pair| u16::from_le_bytes([pair[0], pair[1]]))
+            .collect::<Vec<_>>();
+        let content = String::from_utf16(&units).unwrap();
+        assert!(content.contains("full address:s:desktop.example.test:3390"));
+        assert!(content.contains("username:s:DOMAIN\\user"));
+        assert!(content.contains("desktopwidth:i:1920"));
+        assert!(content.contains("desktopheight:i:1080"));
+        assert!(content.contains("dynamic resolution:i:0"));
+        assert!(content.contains("redirectclipboard:i:1"));
+        assert!(content.contains("audiomode:i:0"));
+        assert!(!content.to_ascii_lowercase().contains("password"));
+        fs::remove_file(path).unwrap();
+    }
+
+    #[test]
+    fn follow_window_enables_mstsc_dynamic_resolution() {
+        let endpoint = RdpEndpoint::parse("desktop.example.test").unwrap();
+        let request = LaunchRequest {
+            address: "desktop.example.test".to_owned(),
+            username: String::new(),
+            resolution: RdpResolution::FollowWindow,
+            use_multimon: false,
+            monitor_indices: Vec::new(),
+            client: RdpClientMode::System,
+            fullscreen: false,
+            certificate_sha256: None,
+            credential_ref: None,
+            redirect_clipboard: false,
+        };
+        let path = write_rdp_file(&endpoint, &request).unwrap();
+        let bytes = fs::read(&path).unwrap();
+        let units = bytes[2..]
+            .chunks_exact(2)
+            .map(|pair| u16::from_le_bytes([pair[0], pair[1]]))
+            .collect::<Vec<_>>();
+        let content = String::from_utf16(&units).unwrap();
+        assert!(content.contains("dynamic resolution:i:1"));
+        assert!(content.contains("redirectclipboard:i:0"));
+        assert!(!content.contains("desktopwidth"));
+        fs::remove_file(path).unwrap();
+    }
+
+    #[test]
+    fn windows_agent_addresses_get_a_default_port_without_breaking_explicit_ports() {
+        assert_eq!(
+            normalize_windows_agent_address("192.168.1.20").unwrap(),
+            "192.168.1.20:39501"
+        );
+        assert_eq!(
+            normalize_windows_agent_address("host.local").unwrap(),
+            "host.local:39501"
+        );
+        assert_eq!(
+            normalize_windows_agent_address("host.local:40000").unwrap(),
+            "host.local:40000"
+        );
+        assert_eq!(
+            normalize_windows_agent_address("::1").unwrap(),
+            "[::1]:39501"
+        );
+        assert_eq!(
+            normalize_windows_agent_address("[::1]:40000").unwrap(),
+            "[::1]:40000"
+        );
+        assert!(normalize_windows_agent_address("http://host.local").is_err());
+        assert!(normalize_windows_agent_address("host.local:0").is_err());
+    }
+}
diff --git a/client/helpers/control-service/src/update.rs b/client/helpers/control-service/src/update.rs
new file mode 100644
index 0000000..8b49e98
--- /dev/null
+++ b/client/helpers/control-service/src/update.rs
@@ -0,0 +1,587 @@
+use base64::{Engine as _, engine::general_purpose::STANDARD};
+use ed25519_dalek::{Signature, VerifyingKey};
+use reqwest::blocking::{Client, Response};
+use semver::Version;
+use serde::{Deserialize, Serialize};
+use sha2::{Digest as _, Sha256};
+use std::fs::{self, File};
+use std::io::{Read, Write};
+use std::path::{Path, PathBuf};
+use std::time::Duration;
+
+const UPDATE_PRODUCT: &str = "remotedesk";
+const MAX_MANIFEST_SIZE: u64 = 64 * 1024;
+const MAX_PAYLOAD_SIZE: usize = 48 * 1024;
+const MAX_RELEASE_NOTES: usize = 4 * 1024;
+const MAX_UPDATE_URL_LENGTH: usize = 2_048;
+const MAX_INSTALLER_SIZE: u64 = 1024 * 1024 * 1024;
+const HTTP_TIMEOUT: Duration = Duration::from_secs(120);
+const CONNECT_TIMEOUT: Duration = Duration::from_secs(10);
+
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub struct UpdateConfig {
+    manifest_url: String,
+    public_key: String,
+}
+
+impl UpdateConfig {
+    pub fn new(manifest_url: &str, public_key: &str) -> Result<Self, String> {
+        Ok(Self {
+            manifest_url: normalize_manifest_url(manifest_url)?,
+            public_key: normalize_public_key(public_key)?,
+        })
+    }
+}
+
+#[derive(Clone, Debug, PartialEq, Eq, Serialize)]
+#[serde(rename_all = "snake_case")]
+pub enum UpdateStatus {
+    UpToDate,
+    Available,
+}
+
+#[derive(Clone, Debug, PartialEq, Eq, Serialize)]
+pub struct UpdateReleaseSummary {
+    pub version: String,
+    pub channel: String,
+    pub published_at: String,
+    pub notes: Option<String>,
+    pub size_bytes: u64,
+}
+
+#[derive(Debug, PartialEq, Eq, Serialize)]
+pub struct UpdateCheckResponse {
+    pub current_version: String,
+    pub status: UpdateStatus,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub release: Option<UpdateReleaseSummary>,
+}
+
+#[derive(Debug, PartialEq, Eq, Serialize)]
+pub struct UpdateInstallResponse {
+    pub accepted: bool,
+    pub version: String,
+}
+
+#[derive(Debug)]
+pub struct PreparedUpdate {
+    pub version: String,
+    pub installer_path: PathBuf,
+    pub sha256: String,
+}
+
+pub struct UpdateClient {
+    client: Client,
+    download_dir: PathBuf,
+}
+
+impl UpdateClient {
+    pub fn new(download_dir: PathBuf) -> Result<Self, String> {
+        let redirect_policy = reqwest::redirect::Policy::custom(|attempt| {
+            if attempt.previous().len() >= 3 {
+                attempt.error("update download exceeded the redirect limit")
+            } else if attempt.url().scheme() != "https" {
+                attempt.error("update redirects must use HTTPS")
+            } else {
+                attempt.follow()
+            }
+        });
+        let client = Client::builder()
+            .connect_timeout(CONNECT_TIMEOUT)
+            .timeout(HTTP_TIMEOUT)
+            .redirect(redirect_policy)
+            .user_agent(concat!("RemoteDesk/", env!("CARGO_PKG_VERSION")))
+            .build()
+            .map_err(|error| format!("unable to initialize the update client: {error}"))?;
+        Ok(Self {
+            client,
+            download_dir,
+        })
+    }
+
+    pub fn check(&self, config: &UpdateConfig) -> Result<UpdateCheckResponse, String> {
+        let manifest = self.fetch_verified_manifest(config)?;
+        Ok(evaluate_manifest(manifest))
+    }
+
+    pub fn prepare_install(
+        &self,
+        config: &UpdateConfig,
+        expected_version: &str,
+    ) -> Result<PreparedUpdate, String> {
+        let expected = parse_release_version(expected_version)?;
+        let current = current_version();
+        if expected <= current {
+            return Err("the requested update version is not newer than this build".to_owned());
+        }
+        let manifest = self.fetch_verified_manifest(config)?;
+        let manifest_version = parse_release_version(&manifest.version)?;
+        if manifest_version != expected {
+            return Err("the signed update manifest changed; check for updates again".to_owned());
+        }
+        let installer_path = self.download_installer(&manifest)?;
+        Ok(PreparedUpdate {
+            version: manifest.version,
+            installer_path,
+            sha256: manifest.installer.sha256,
+        })
+    }
+
+    fn fetch_verified_manifest(&self, config: &UpdateConfig) -> Result<UpdateManifest, String> {
+        let response = self
+            .client
+            .get(&config.manifest_url)
+            .header(reqwest::header::ACCEPT, "application/json")
+            .send()
+            .map_err(|error| format!("unable to download the update manifest: {error}"))?;
+        let response = checked_response(response, "update manifest")?;
+        if response
+            .content_length()
+            .is_some_and(|length| length > MAX_MANIFEST_SIZE)
+        {
+            return Err("update manifest is too large".to_owned());
+        }
+        let mut bytes = Vec::new();
+        response
+            .take(MAX_MANIFEST_SIZE + 1)
+            .read_to_end(&mut bytes)
+            .map_err(|error| format!("unable to read the update manifest: {error}"))?;
+        if u64::try_from(bytes.len()).unwrap_or(u64::MAX) > MAX_MANIFEST_SIZE {
+            return Err("update manifest is too large".to_owned());
+        }
+        verify_manifest_envelope(&bytes, &config.public_key)
+    }
+
+    fn download_installer(&self, manifest: &UpdateManifest) -> Result<PathBuf, String> {
+        fs::create_dir_all(&self.download_dir)
+            .map_err(|error| format!("unable to create the update directory: {error}"))?;
+        let file_name = format!(
+            "RemoteDesk-{}-{}.msi",
+            manifest.version,
+            current_update_target()
+        );
+        let installer_path = self.download_dir.join(file_name);
+        if installer_path.is_file()
+            && verify_installer_file(
+                &installer_path,
+                manifest.installer.size_bytes,
+                &manifest.installer.sha256,
+            )
+            .is_ok()
+        {
+            return Ok(installer_path);
+        }
+        if installer_path.exists() {
+            fs::remove_file(&installer_path)
+                .map_err(|error| format!("unable to replace the cached update: {error}"))?;
+        }
+
+        let partial_path = self.download_dir.join(format!(
+            ".RemoteDesk-{}-{}.part-{}",
+            manifest.version,
+            current_update_target(),
+            std::process::id()
+        ));
+        if partial_path.exists() {
+            fs::remove_file(&partial_path)
+                .map_err(|error| format!("unable to clear an incomplete update: {error}"))?;
+        }
+        let result = self.download_to_path(manifest, &partial_path);
+        if let Err(error) = result {
+            let _ = fs::remove_file(&partial_path);
+            return Err(error);
+        }
+        fs::rename(&partial_path, &installer_path)
+            .map_err(|error| format!("unable to finalize the downloaded update: {error}"))?;
+        Ok(installer_path)
+    }
+
+    fn download_to_path(&self, manifest: &UpdateManifest, path: &Path) -> Result<(), String> {
+        let response = self
+            .client
+            .get(&manifest.installer.url)
+            .header(reqwest::header::ACCEPT, "application/octet-stream")
+            .send()
+            .map_err(|error| format!("unable to download the update installer: {error}"))?;
+        let mut response = checked_response(response, "update installer")?;
+        if response
+            .content_length()
+            .is_some_and(|length| length != manifest.installer.size_bytes)
+        {
+            return Err("update installer size does not match the signed manifest".to_owned());
+        }
+
+        let mut file = File::create(path)
+            .map_err(|error| format!("unable to create the update installer: {error}"))?;
+        let mut hasher = Sha256::new();
+        let mut total = 0_u64;
+        let mut buffer = vec![0_u8; 64 * 1024].into_boxed_slice();
+        loop {
+            let read = response
+                .read(&mut buffer)
+                .map_err(|error| format!("unable to read the update installer: {error}"))?;
+            if read == 0 {
+                break;
+            }
+            total = total
+                .checked_add(u64::try_from(read).unwrap_or(u64::MAX))
+                .ok_or_else(|| "update installer is too large".to_owned())?;
+            if total > manifest.installer.size_bytes || total > MAX_INSTALLER_SIZE {
+                return Err("update installer is larger than the signed manifest".to_owned());
+            }
+            file.write_all(&buffer[..read])
+                .map_err(|error| format!("unable to save the update installer: {error}"))?;
+            hasher.update(&buffer[..read]);
+        }
+        file.sync_all()
+            .map_err(|error| format!("unable to flush the update installer: {error}"))?;
+        if total != manifest.installer.size_bytes {
+            return Err("update installer size does not match the signed manifest".to_owned());
+        }
+        let actual_hash = format!("{:x}", hasher.finalize());
+        if !actual_hash.eq_ignore_ascii_case(&manifest.installer.sha256) {
+            return Err("update installer SHA-256 does not match the signed manifest".to_owned());
+        }
+        Ok(())
+    }
+}
+
+pub fn normalize_manifest_url(value: &str) -> Result<String, String> {
+    normalize_https_url(value, "update manifest")
+}
+
+pub fn normalize_public_key(value: &str) -> Result<String, String> {
+    let value = value.trim();
+    if value.is_empty() || value.len() > 128 || value.chars().any(char::is_control) {
+        return Err("update public key is invalid".to_owned());
+    }
+    let bytes = STANDARD
+        .decode(value)
+        .map_err(|_| "update public key must be Base64".to_owned())?;
+    let key: [u8; 32] = bytes
+        .try_into()
+        .map_err(|_| "update public key must contain 32 bytes".to_owned())?;
+    VerifyingKey::from_bytes(&key).map_err(|_| "update public key is invalid".to_owned())?;
+    Ok(STANDARD.encode(key))
+}
+
+pub fn default_update_directory() -> Option<PathBuf> {
+    std::env::var_os("LOCALAPPDATA")
+        .filter(|value| !value.is_empty())
+        .map(PathBuf::from)
+        .map(|root| root.join("RemoteDesk").join("updates"))
+}
+
+fn verify_manifest_envelope(bytes: &[u8], public_key: &str) -> Result<UpdateManifest, String> {
+    let envelope: SignedUpdateEnvelope = serde_json::from_slice(bytes)
+        .map_err(|_| "update manifest envelope is not valid JSON".to_owned())?;
+    if envelope.schema != 1 {
+        return Err("update manifest schema is not supported".to_owned());
+    }
+    let payload = STANDARD
+        .decode(envelope.payload)
+        .map_err(|_| "update manifest payload must be Base64".to_owned())?;
+    if payload.len() > MAX_PAYLOAD_SIZE {
+        return Err("update manifest payload is too large".to_owned());
+    }
+    let signature = STANDARD
+        .decode(envelope.signature)
+        .map_err(|_| "update manifest signature must be Base64".to_owned())?;
+    let signature: [u8; 64] = signature
+        .try_into()
+        .map_err(|_| "update manifest signature must contain 64 bytes".to_owned())?;
+    let signature = Signature::from_bytes(&signature);
+    let public_key = STANDARD
+        .decode(public_key)
+        .map_err(|_| "update public key must be Base64".to_owned())?;
+    let public_key: [u8; 32] = public_key
+        .try_into()
+        .map_err(|_| "update public key must contain 32 bytes".to_owned())?;
+    let public_key = VerifyingKey::from_bytes(&public_key)
+        .map_err(|_| "update public key is invalid".to_owned())?;
+    public_key
+        .verify_strict(&payload, &signature)
+        .map_err(|_| "update manifest signature is invalid".to_owned())?;
+
+    let manifest: UpdateManifest = serde_json::from_slice(&payload)
+        .map_err(|_| "signed update manifest payload is not valid JSON".to_owned())?;
+    validate_manifest(&manifest)?;
+    Ok(manifest)
+}
+
+fn validate_manifest(manifest: &UpdateManifest) -> Result<(), String> {
+    if manifest.product != UPDATE_PRODUCT {
+        return Err("update manifest product does not match RemoteDesk".to_owned());
+    }
+    if manifest.target != current_update_target() {
+        return Err("update manifest target does not match this build".to_owned());
+    }
+    parse_release_version(&manifest.version)?;
+    validate_short_text(&manifest.channel, 32, "update channel")?;
+    validate_short_text(&manifest.published_at, 64, "update publication time")?;
+    if let Some(notes) = manifest.notes.as_deref()
+        && (notes.len() > MAX_RELEASE_NOTES
+            || notes.chars().any(|character| {
+                character.is_control() && !matches!(character, '\r' | '\n' | '\t')
+            }))
+    {
+        return Err("update release notes are invalid".to_owned());
+    }
+    normalize_https_url(&manifest.installer.url, "update installer")?;
+    let installer_url = url::Url::parse(&manifest.installer.url)
+        .map_err(|_| "update installer URL is invalid".to_owned())?;
+    if !installer_url.path().to_ascii_lowercase().ends_with(".msi") {
+        return Err("update installer URL must identify an MSI package".to_owned());
+    }
+    if manifest.installer.size_bytes == 0 || manifest.installer.size_bytes > MAX_INSTALLER_SIZE {
+        return Err("update installer size is invalid".to_owned());
+    }
+    if manifest.installer.sha256.len() != 64
+        || !manifest
+            .installer
+            .sha256
+            .bytes()
+            .all(|byte| byte.is_ascii_hexdigit())
+    {
+        return Err("update installer SHA-256 is invalid".to_owned());
+    }
+    Ok(())
+}
+
+fn evaluate_manifest(manifest: UpdateManifest) -> UpdateCheckResponse {
+    let current = current_version();
+    let available = parse_release_version(&manifest.version).is_ok_and(|version| version > current);
+    let release = available.then_some(UpdateReleaseSummary {
+        version: manifest.version,
+        channel: manifest.channel,
+        published_at: manifest.published_at,
+        notes: manifest.notes,
+        size_bytes: manifest.installer.size_bytes,
+    });
+    UpdateCheckResponse {
+        current_version: current.to_string(),
+        status: if available {
+            UpdateStatus::Available
+        } else {
+            UpdateStatus::UpToDate
+        },
+        release,
+    }
+}
+
+fn verify_installer_file(
+    path: &Path,
+    expected_size: u64,
+    expected_hash: &str,
+) -> Result<(), String> {
+    let metadata = fs::metadata(path)
+        .map_err(|error| format!("unable to inspect the cached update: {error}"))?;
+    if metadata.len() != expected_size {
+        return Err("cached update size does not match".to_owned());
+    }
+    let mut file =
+        File::open(path).map_err(|error| format!("unable to open the cached update: {error}"))?;
+    let mut hasher = Sha256::new();
+    let mut buffer = vec![0_u8; 64 * 1024].into_boxed_slice();
+    loop {
+        let read = file
+            .read(&mut buffer)
+            .map_err(|error| format!("unable to read the cached update: {error}"))?;
+        if read == 0 {
+            break;
+        }
+        hasher.update(&buffer[..read]);
+    }
+    let actual_hash = format!("{:x}", hasher.finalize());
+    if !actual_hash.eq_ignore_ascii_case(expected_hash) {
+        return Err("cached update SHA-256 does not match".to_owned());
+    }
+    Ok(())
+}
+
+fn checked_response(response: Response, name: &str) -> Result<Response, String> {
+    if response.url().scheme() != "https" {
+        return Err(format!("{name} response did not use HTTPS"));
+    }
+    if !response.status().is_success() {
+        return Err(format!("{name} returned HTTP {}", response.status()));
+    }
+    Ok(response)
+}
+
+fn normalize_https_url(value: &str, name: &str) -> Result<String, String> {
+    let value = value.trim();
+    if value.is_empty()
+        || value.len() > MAX_UPDATE_URL_LENGTH
+        || value.chars().any(char::is_control)
+    {
+        return Err(format!("{name} URL is invalid"));
+    }
+    let url = url::Url::parse(value).map_err(|_| format!("{name} URL is invalid"))?;
+    if url.scheme() != "https" || url.host_str().is_none() {
+        return Err(format!("{name} URL must use HTTPS"));
+    }
+    if !url.username().is_empty()
+        || url.password().is_some()
+        || url.query().is_some()
+        || url.fragment().is_some()
+    {
+        return Err(format!(
+            "{name} URL must not contain credentials, query, or fragment"
+        ));
+    }
+    Ok(url.to_string())
+}
+
+fn validate_short_text(value: &str, maximum: usize, name: &str) -> Result<(), String> {
+    if value.is_empty() || value.len() > maximum || value.chars().any(char::is_control) {
+        return Err(format!("{name} is invalid"));
+    }
+    Ok(())
+}
+
+fn parse_release_version(value: &str) -> Result<Version, String> {
+    let version = Version::parse(value).map_err(|_| "update version is invalid".to_owned())?;
+    if !version.pre.is_empty() || !version.build.is_empty() {
+        return Err("update version must be a three-part release version".to_owned());
+    }
+    Ok(version)
+}
+
+fn current_version() -> Version {
+    Version::parse(env!("CARGO_PKG_VERSION")).expect("workspace package version is valid semver")
+}
+
+fn current_update_target() -> &'static str {
+    match (std::env::consts::OS, std::env::consts::ARCH) {
+        ("windows", "x86_64") => "windows-x64",
+        ("windows", "aarch64") => "windows-arm64",
+        _ => "unsupported",
+    }
+}
+
+#[derive(Deserialize)]
+#[serde(deny_unknown_fields)]
+struct SignedUpdateEnvelope {
+    schema: u8,
+    payload: String,
+    signature: String,
+}
+
+#[derive(Deserialize)]
+#[serde(deny_unknown_fields)]
+struct UpdateManifest {
+    product: String,
+    channel: String,
+    version: String,
+    published_at: String,
+    target: String,
+    installer: UpdateInstaller,
+    notes: Option<String>,
+}
+
+#[derive(Deserialize)]
+#[serde(deny_unknown_fields)]
+struct UpdateInstaller {
+    url: String,
+    sha256: String,
+    size_bytes: u64,
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use ed25519_dalek::{Signer as _, SigningKey};
+    use serde_json::json;
+
+    fn signed_envelope(version: &str) -> (Vec<u8>, String) {
+        let signing_key = SigningKey::from_bytes(&[7_u8; 32]);
+        let payload = serde_json::to_vec(&json!({
+            "product": UPDATE_PRODUCT,
+            "channel": "stable",
+            "version": version,
+            "published_at": "2026-08-10T00:00:00Z",
+            "target": current_update_target(),
+            "installer": {
+                "url": format!("https://updates.example.test/RemoteDesk-{version}.msi"),
+                "sha256": "a".repeat(64),
+                "size_bytes": 123_456
+            },
+            "notes": "Security and reliability fixes"
+        }))
+        .unwrap();
+        let signature = signing_key.sign(&payload);
+        let envelope = serde_json::to_vec(&json!({
+            "schema": 1,
+            "payload": STANDARD.encode(&payload),
+            "signature": STANDARD.encode(signature.to_bytes())
+        }))
+        .unwrap();
+        (
+            envelope,
+            STANDARD.encode(signing_key.verifying_key().to_bytes()),
+        )
+    }
+
+    #[test]
+    fn signed_manifest_is_verified_before_version_evaluation() {
+        let (envelope, public_key) = signed_envelope("99.0.0");
+        let manifest = verify_manifest_envelope(&envelope, &public_key).unwrap();
+        let response = evaluate_manifest(manifest);
+        assert_eq!(response.status, UpdateStatus::Available);
+        assert_eq!(response.release.unwrap().version, "99.0.0");
+    }
+
+    #[test]
+    fn tampered_manifest_payload_is_rejected() {
+        let (envelope, public_key) = signed_envelope("99.0.0");
+        let mut value: serde_json::Value = serde_json::from_slice(&envelope).unwrap();
+        let mut payload = STANDARD.decode(value["payload"].as_str().unwrap()).unwrap();
+        payload[0] ^= 1;
+        value["payload"] = serde_json::Value::String(STANDARD.encode(payload));
+        assert!(
+            verify_manifest_envelope(&serde_json::to_vec(&value).unwrap(), &public_key).is_err()
+        );
+    }
+
+    #[test]
+    fn update_configuration_requires_https_and_a_valid_ed25519_key() {
+        let (_, public_key) = signed_envelope("99.0.0");
+        assert!(UpdateConfig::new("https://updates.example.test/stable.json", &public_key).is_ok());
+        assert!(UpdateConfig::new("http://updates.example.test/stable.json", &public_key).is_err());
+        assert!(
+            UpdateConfig::new(
+                "https://updates.example.test/stable.json?token=x",
+                &public_key
+            )
+            .is_err()
+        );
+        assert!(UpdateConfig::new("https://updates.example.test/stable.json", "invalid").is_err());
+    }
+
+    #[test]
+    fn manifest_rejects_wrong_target_and_non_msi_artifact() {
+        let signing_key = SigningKey::from_bytes(&[9_u8; 32]);
+        let payload = serde_json::to_vec(&json!({
+            "product": UPDATE_PRODUCT,
+            "channel": "stable",
+            "version": "99.0.0",
+            "published_at": "2026-08-10T00:00:00Z",
+            "target": "wrong-target",
+            "installer": {
+                "url": "https://updates.example.test/RemoteDesk.exe",
+                "sha256": "a".repeat(64),
+                "size_bytes": 123
+            }
+        }))
+        .unwrap();
+        let envelope = serde_json::to_vec(&json!({
+            "schema": 1,
+            "payload": STANDARD.encode(&payload),
+            "signature": STANDARD.encode(signing_key.sign(&payload).to_bytes())
+        }))
+        .unwrap();
+        let public_key = STANDARD.encode(signing_key.verifying_key().to_bytes());
+        assert!(verify_manifest_envelope(&envelope, &public_key).is_err());
+    }
+}
diff --git a/client/helpers/credential-store/Cargo.toml b/client/helpers/credential-store/Cargo.toml
new file mode 100644
index 0000000..9a94b25
--- /dev/null
+++ b/client/helpers/credential-store/Cargo.toml
@@ -0,0 +1,20 @@
+[package]
+name = "remotedesk-credential-store"
+version.workspace = true
+edition.workspace = true
+license.workspace = true
+rust-version.workspace = true
+
+[dependencies]
+base64 = "0.22"
+inquire = "0.9.4"
+remotedesk-client-core = { path = "../../crates/client-core" }
+serde = { version = "1.0", features = ["derive"] }
+serde_json = "1.0"
+zeroize = { version = "1.8", features = ["derive"] }
+
+[target.'cfg(windows)'.dependencies]
+keyring = { version = "3.6.3", default-features = false, features = ["windows-native"] }
+
+[lints]
+workspace = true
diff --git a/client/helpers/credential-store/src/lib.rs b/client/helpers/credential-store/src/lib.rs
new file mode 100644
index 0000000..2216198
--- /dev/null
+++ b/client/helpers/credential-store/src/lib.rs
@@ -0,0 +1,687 @@
+use base64::{
+    Engine as _,
+    engine::general_purpose::{STANDARD_NO_PAD, URL_SAFE_NO_PAD},
+};
+use remotedesk_client_core::CredentialRef;
+use serde::{Deserialize, Serialize};
+use std::fmt;
+use zeroize::{Zeroize, ZeroizeOnDrop, Zeroizing};
+
+const SERVICE_NAME: &str = "RemoteDesk RDP";
+const LINUX_AGENT_IDENTITY_SERVICE_NAME: &str = "RemoteDesk Linux Agent Identity";
+const LINUX_DESKTOP_RESUME_SERVICE_NAME: &str = "RemoteDesk Linux Desktop Resume";
+const ENTRY_OWNER: &str = "RemoteDesk";
+const MAX_ACCOUNT_LENGTH: usize = 256;
+const LINUX_AGENT_IDENTITY_PREFIX: &str = "RemoteDesk/Linux/agent/";
+const LINUX_DESKTOP_RESUME_PREFIX: &str = "RemoteDesk/Linux/desktop-resume/";
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize)]
+#[serde(rename_all = "snake_case")]
+pub enum CredentialStatus {
+    Missing,
+    Ready,
+}
+
+#[derive(Deserialize, Serialize, Zeroize, ZeroizeOnDrop)]
+#[serde(deny_unknown_fields)]
+pub struct RdpCredential {
+    account: String,
+    password: String,
+}
+
+impl RdpCredential {
+    /// Creates a validated RDP credential.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`CredentialStoreError::InvalidRecord`] for an invalid account or empty password.
+    pub fn new(account: String, password: String) -> Result<Self, CredentialStoreError> {
+        validate_account(&account)?;
+        if password.is_empty() {
+            return Err(CredentialStoreError::InvalidRecord);
+        }
+        Ok(Self { account, password })
+    }
+
+    #[must_use]
+    pub fn account(&self) -> &str {
+        &self.account
+    }
+
+    #[must_use]
+    pub fn password(&self) -> &str {
+        &self.password
+    }
+}
+
+impl fmt::Debug for RdpCredential {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        formatter.write_str("RdpCredential([redacted])")
+    }
+}
+
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct LinuxAgentIdentityRef(String);
+
+impl LinuxAgentIdentityRef {
+    /// Creates the Credential Manager reference bound to a TLS certificate fingerprint.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error unless `certificate_sha256` is exactly 64 lowercase hexadecimal digits.
+    pub fn new(certificate_sha256: &str) -> Result<Self, CredentialStoreError> {
+        if certificate_sha256.len() != 64
+            || !certificate_sha256
+                .bytes()
+                .all(|byte| byte.is_ascii_digit() || matches!(byte, b'a'..=b'f'))
+        {
+            return Err(CredentialStoreError::InvalidRecord);
+        }
+        Ok(Self(format!(
+            "{LINUX_AGENT_IDENTITY_PREFIX}{certificate_sha256}"
+        )))
+    }
+
+    #[must_use]
+    pub fn target(&self) -> &str {
+        &self.0
+    }
+}
+
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct LinuxDesktopResumeRef(String);
+
+impl LinuxDesktopResumeRef {
+    /// Creates a Credential Manager reference bound to an Agent certificate and Linux user.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error unless the certificate fingerprint and user name are canonical.
+    pub fn new(certificate_sha256: &str, user: &str) -> Result<Self, CredentialStoreError> {
+        if certificate_sha256.len() != 64
+            || !certificate_sha256
+                .bytes()
+                .all(|byte| byte.is_ascii_digit() || matches!(byte, b'a'..=b'f'))
+            || user.is_empty()
+            || user.len() > 32
+            || !user
+                .bytes()
+                .all(|byte| byte.is_ascii_alphanumeric() || matches!(byte, b'_' | b'-'))
+        {
+            return Err(CredentialStoreError::InvalidRecord);
+        }
+        Ok(Self(format!(
+            "{LINUX_DESKTOP_RESUME_PREFIX}{certificate_sha256}/{user}"
+        )))
+    }
+
+    #[must_use]
+    pub fn target(&self) -> &str {
+        &self.0
+    }
+}
+
+#[derive(Zeroize, ZeroizeOnDrop)]
+pub struct LinuxDesktopResumeToken(String);
+
+impl LinuxDesktopResumeToken {
+    /// Creates a validated 32-byte URL-safe Base64 resume token.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error unless the token is the canonical unpadded 43-character form.
+    pub fn new(token: String) -> Result<Self, CredentialStoreError> {
+        validate_linux_desktop_resume_token(&token)?;
+        Ok(Self(token))
+    }
+
+    #[must_use]
+    pub fn token(&self) -> &str {
+        &self.0
+    }
+}
+
+impl fmt::Debug for LinuxDesktopResumeToken {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        formatter.write_str("LinuxDesktopResumeToken([redacted])")
+    }
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum CredentialStoreError {
+    UnsupportedPlatform,
+    Missing,
+    InvalidRecord,
+    StoreUnavailable,
+}
+
+impl fmt::Display for CredentialStoreError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        match self {
+            Self::UnsupportedPlatform => {
+                formatter.write_str("Windows Credential Manager is available only on Windows")
+            }
+            Self::Missing => formatter.write_str("the RDP credential is not configured"),
+            Self::InvalidRecord => formatter.write_str("the stored RDP credential is invalid"),
+            Self::StoreUnavailable => {
+                formatter.write_str("Windows Credential Manager is unavailable")
+            }
+        }
+    }
+}
+
+impl std::error::Error for CredentialStoreError {}
+
+/// Reports whether the referenced credential is available and valid.
+///
+/// # Errors
+///
+/// Returns an error when the credential store is unavailable or the stored record is invalid.
+pub fn status(reference: &CredentialRef) -> Result<CredentialStatus, CredentialStoreError> {
+    match load_secret(reference) {
+        Ok(secret) => {
+            let result = decode_record(&secret).map(|_| CredentialStatus::Ready);
+            drop(secret);
+            result
+        }
+        Err(CredentialStoreError::Missing) => Ok(CredentialStatus::Missing),
+        Err(error) => Err(error),
+    }
+}
+
+/// Loads and validates an RDP credential from the platform credential store.
+///
+/// # Errors
+///
+/// Returns an error when the credential is missing, invalid, or cannot be read.
+pub fn load(reference: &CredentialRef) -> Result<RdpCredential, CredentialStoreError> {
+    let secret = load_secret(reference)?;
+    let result = decode_record(&secret);
+    drop(secret);
+    result
+}
+
+/// Persists a validated RDP credential in the platform credential store.
+///
+/// # Errors
+///
+/// Returns an error when the credential is invalid or the platform store cannot write it.
+pub fn save(
+    reference: &CredentialRef,
+    credential: &RdpCredential,
+) -> Result<(), CredentialStoreError> {
+    validate_account(credential.account())?;
+    if credential.password().is_empty() {
+        return Err(CredentialStoreError::InvalidRecord);
+    }
+    let encoded = Zeroizing::new(
+        serde_json::to_string(credential).map_err(|_| CredentialStoreError::InvalidRecord)?,
+    );
+    save_secret(reference, &encoded)
+}
+
+/// Deletes the referenced credential. Missing credentials are treated as deleted.
+///
+/// # Errors
+///
+/// Returns an error when the platform credential store cannot perform the deletion.
+pub fn delete(reference: &CredentialRef) -> Result<CredentialStatus, CredentialStoreError> {
+    match delete_secret(reference) {
+        Ok(()) | Err(CredentialStoreError::Missing) => Ok(CredentialStatus::Missing),
+        Err(error) => Err(error),
+    }
+}
+
+/// Reports whether a certificate-bound Linux Agent public key is stored and valid.
+///
+/// # Errors
+///
+/// Returns an error when Credential Manager is unavailable or the stored key is malformed.
+pub fn linux_agent_identity_status(
+    reference: &LinuxAgentIdentityRef,
+) -> Result<CredentialStatus, CredentialStoreError> {
+    match linux_agent_identity_load(reference) {
+        Ok(_) => Ok(CredentialStatus::Ready),
+        Err(CredentialStoreError::Missing) => Ok(CredentialStatus::Missing),
+        Err(error) => Err(error),
+    }
+}
+
+/// Loads a certificate-bound Linux Agent Ed25519 public key.
+///
+/// # Errors
+///
+/// Returns an error when the mapping is missing, unavailable, or malformed.
+pub fn linux_agent_identity_load(
+    reference: &LinuxAgentIdentityRef,
+) -> Result<String, CredentialStoreError> {
+    let encoded = load_linux_agent_identity(reference)?;
+    validate_linux_agent_public_key(&encoded)?;
+    Ok(encoded.to_string())
+}
+
+/// Stores a validated Linux Agent Ed25519 public key under its certificate fingerprint.
+///
+/// # Errors
+///
+/// Returns an error when the public key is malformed or Credential Manager cannot write it.
+pub fn linux_agent_identity_save(
+    reference: &LinuxAgentIdentityRef,
+    public_key: &str,
+) -> Result<(), CredentialStoreError> {
+    validate_linux_agent_public_key(public_key)?;
+    save_linux_agent_identity(reference, public_key)
+}
+
+/// Deletes a Linux Agent identity mapping. A missing mapping is treated as deleted.
+///
+/// # Errors
+///
+/// Returns an error when Credential Manager cannot perform the deletion.
+pub fn linux_agent_identity_delete(
+    reference: &LinuxAgentIdentityRef,
+) -> Result<CredentialStatus, CredentialStoreError> {
+    match delete_linux_agent_identity(reference) {
+        Ok(()) | Err(CredentialStoreError::Missing) => Ok(CredentialStatus::Missing),
+        Err(error) => Err(error),
+    }
+}
+
+/// Loads a certificate-and-user-bound Linux desktop resume token.
+///
+/// # Errors
+///
+/// Returns an error when the token is missing, unavailable, or malformed.
+pub fn linux_desktop_resume_load(
+    reference: &LinuxDesktopResumeRef,
+) -> Result<LinuxDesktopResumeToken, CredentialStoreError> {
+    let token = load_linux_desktop_resume(reference)?;
+    LinuxDesktopResumeToken::new(token.to_string())
+}
+
+/// Stores a validated Linux desktop resume token in Windows Credential Manager.
+///
+/// # Errors
+///
+/// Returns an error when the token is malformed or Credential Manager cannot write it.
+pub fn linux_desktop_resume_save(
+    reference: &LinuxDesktopResumeRef,
+    token: &str,
+) -> Result<(), CredentialStoreError> {
+    validate_linux_desktop_resume_token(token)?;
+    save_linux_desktop_resume(reference, token)
+}
+
+/// Deletes a Linux desktop resume token. A missing token is treated as deleted.
+///
+/// # Errors
+///
+/// Returns an error when Credential Manager cannot perform the deletion.
+pub fn linux_desktop_resume_delete(
+    reference: &LinuxDesktopResumeRef,
+) -> Result<CredentialStatus, CredentialStoreError> {
+    match delete_linux_desktop_resume(reference) {
+        Ok(()) | Err(CredentialStoreError::Missing) => Ok(CredentialStatus::Missing),
+        Err(error) => Err(error),
+    }
+}
+
+fn validate_account(account: &str) -> Result<(), CredentialStoreError> {
+    if account.trim().is_empty()
+        || account.len() > MAX_ACCOUNT_LENGTH
+        || account.chars().any(char::is_control)
+    {
+        return Err(CredentialStoreError::InvalidRecord);
+    }
+    Ok(())
+}
+
+fn decode_record(encoded: &str) -> Result<RdpCredential, CredentialStoreError> {
+    let credential: RdpCredential =
+        serde_json::from_str(encoded).map_err(|_| CredentialStoreError::InvalidRecord)?;
+    validate_account(credential.account())?;
+    if credential.password().is_empty() {
+        return Err(CredentialStoreError::InvalidRecord);
+    }
+    Ok(credential)
+}
+
+fn validate_linux_agent_public_key(public_key: &str) -> Result<(), CredentialStoreError> {
+    let decoded = STANDARD_NO_PAD
+        .decode(public_key)
+        .map_err(|_| CredentialStoreError::InvalidRecord)?;
+    if decoded.len() != 32 || STANDARD_NO_PAD.encode(decoded) != public_key {
+        return Err(CredentialStoreError::InvalidRecord);
+    }
+    Ok(())
+}
+
+fn validate_linux_desktop_resume_token(token: &str) -> Result<(), CredentialStoreError> {
+    let decoded = URL_SAFE_NO_PAD
+        .decode(token)
+        .map_err(|_| CredentialStoreError::InvalidRecord)?;
+    if decoded.len() != 32 || URL_SAFE_NO_PAD.encode(decoded) != token {
+        return Err(CredentialStoreError::InvalidRecord);
+    }
+    Ok(())
+}
+
+#[cfg(windows)]
+fn entry(reference: &CredentialRef) -> Result<keyring::Entry, CredentialStoreError> {
+    keyring::Entry::new_with_target(reference.target(), SERVICE_NAME, ENTRY_OWNER)
+        .map_err(|_| CredentialStoreError::StoreUnavailable)
+}
+
+#[cfg(windows)]
+fn load_secret(reference: &CredentialRef) -> Result<Zeroizing<String>, CredentialStoreError> {
+    entry(reference)?
+        .get_password()
+        .map(Zeroizing::new)
+        .map_err(|error| {
+            if matches!(error, keyring::Error::NoEntry) {
+                CredentialStoreError::Missing
+            } else {
+                CredentialStoreError::StoreUnavailable
+            }
+        })
+}
+
+#[cfg(not(windows))]
+fn load_secret(_reference: &CredentialRef) -> Result<Zeroizing<String>, CredentialStoreError> {
+    Err(CredentialStoreError::UnsupportedPlatform)
+}
+
+#[cfg(windows)]
+fn save_secret(reference: &CredentialRef, secret: &str) -> Result<(), CredentialStoreError> {
+    entry(reference)?
+        .set_password(secret)
+        .map_err(|_| CredentialStoreError::StoreUnavailable)
+}
+
+#[cfg(not(windows))]
+fn save_secret(_reference: &CredentialRef, _secret: &str) -> Result<(), CredentialStoreError> {
+    Err(CredentialStoreError::UnsupportedPlatform)
+}
+
+#[cfg(windows)]
+fn delete_secret(reference: &CredentialRef) -> Result<(), CredentialStoreError> {
+    entry(reference)?.delete_credential().map_err(|error| {
+        if matches!(error, keyring::Error::NoEntry) {
+            CredentialStoreError::Missing
+        } else {
+            CredentialStoreError::StoreUnavailable
+        }
+    })
+}
+
+#[cfg(not(windows))]
+fn delete_secret(_reference: &CredentialRef) -> Result<(), CredentialStoreError> {
+    Err(CredentialStoreError::UnsupportedPlatform)
+}
+
+#[cfg(windows)]
+fn linux_agent_identity_entry(
+    reference: &LinuxAgentIdentityRef,
+) -> Result<keyring::Entry, CredentialStoreError> {
+    keyring::Entry::new_with_target(
+        reference.target(),
+        LINUX_AGENT_IDENTITY_SERVICE_NAME,
+        ENTRY_OWNER,
+    )
+    .map_err(|_| CredentialStoreError::StoreUnavailable)
+}
+
+#[cfg(windows)]
+fn load_linux_agent_identity(
+    reference: &LinuxAgentIdentityRef,
+) -> Result<Zeroizing<String>, CredentialStoreError> {
+    linux_agent_identity_entry(reference)?
+        .get_password()
+        .map(Zeroizing::new)
+        .map_err(|error| {
+            if matches!(error, keyring::Error::NoEntry) {
+                CredentialStoreError::Missing
+            } else {
+                CredentialStoreError::StoreUnavailable
+            }
+        })
+}
+
+#[cfg(not(windows))]
+fn load_linux_agent_identity(
+    _reference: &LinuxAgentIdentityRef,
+) -> Result<Zeroizing<String>, CredentialStoreError> {
+    Err(CredentialStoreError::UnsupportedPlatform)
+}
+
+#[cfg(windows)]
+fn save_linux_agent_identity(
+    reference: &LinuxAgentIdentityRef,
+    public_key: &str,
+) -> Result<(), CredentialStoreError> {
+    linux_agent_identity_entry(reference)?
+        .set_password(public_key)
+        .map_err(|_| CredentialStoreError::StoreUnavailable)
+}
+
+#[cfg(not(windows))]
+fn save_linux_agent_identity(
+    _reference: &LinuxAgentIdentityRef,
+    _public_key: &str,
+) -> Result<(), CredentialStoreError> {
+    Err(CredentialStoreError::UnsupportedPlatform)
+}
+
+#[cfg(windows)]
+fn delete_linux_agent_identity(
+    reference: &LinuxAgentIdentityRef,
+) -> Result<(), CredentialStoreError> {
+    linux_agent_identity_entry(reference)?
+        .delete_credential()
+        .map_err(|error| {
+            if matches!(error, keyring::Error::NoEntry) {
+                CredentialStoreError::Missing
+            } else {
+                CredentialStoreError::StoreUnavailable
+            }
+        })
+}
+
+#[cfg(windows)]
+fn linux_desktop_resume_entry(
+    reference: &LinuxDesktopResumeRef,
+) -> Result<keyring::Entry, CredentialStoreError> {
+    keyring::Entry::new_with_target(
+        reference.target(),
+        LINUX_DESKTOP_RESUME_SERVICE_NAME,
+        ENTRY_OWNER,
+    )
+    .map_err(|_| CredentialStoreError::StoreUnavailable)
+}
+
+#[cfg(windows)]
+fn load_linux_desktop_resume(
+    reference: &LinuxDesktopResumeRef,
+) -> Result<Zeroizing<String>, CredentialStoreError> {
+    linux_desktop_resume_entry(reference)?
+        .get_password()
+        .map(Zeroizing::new)
+        .map_err(|error| {
+            if matches!(error, keyring::Error::NoEntry) {
+                CredentialStoreError::Missing
+            } else {
+                CredentialStoreError::StoreUnavailable
+            }
+        })
+}
+
+#[cfg(not(windows))]
+fn load_linux_desktop_resume(
+    _reference: &LinuxDesktopResumeRef,
+) -> Result<Zeroizing<String>, CredentialStoreError> {
+    Err(CredentialStoreError::UnsupportedPlatform)
+}
+
+#[cfg(windows)]
+fn save_linux_desktop_resume(
+    reference: &LinuxDesktopResumeRef,
+    token: &str,
+) -> Result<(), CredentialStoreError> {
+    linux_desktop_resume_entry(reference)?
+        .set_password(token)
+        .map_err(|_| CredentialStoreError::StoreUnavailable)
+}
+
+#[cfg(not(windows))]
+fn save_linux_desktop_resume(
+    _reference: &LinuxDesktopResumeRef,
+    _token: &str,
+) -> Result<(), CredentialStoreError> {
+    Err(CredentialStoreError::UnsupportedPlatform)
+}
+
+#[cfg(windows)]
+fn delete_linux_desktop_resume(
+    reference: &LinuxDesktopResumeRef,
+) -> Result<(), CredentialStoreError> {
+    linux_desktop_resume_entry(reference)?
+        .delete_credential()
+        .map_err(|error| {
+            if matches!(error, keyring::Error::NoEntry) {
+                CredentialStoreError::Missing
+            } else {
+                CredentialStoreError::StoreUnavailable
+            }
+        })
+}
+
+#[cfg(not(windows))]
+fn delete_linux_desktop_resume(
+    _reference: &LinuxDesktopResumeRef,
+) -> Result<(), CredentialStoreError> {
+    Err(CredentialStoreError::UnsupportedPlatform)
+}
+
+#[cfg(not(windows))]
+fn delete_linux_agent_identity(
+    _reference: &LinuxAgentIdentityRef,
+) -> Result<(), CredentialStoreError> {
+    Err(CredentialStoreError::UnsupportedPlatform)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn linux_agent_identity_reference_and_key_are_canonical() {
+        let fingerprint = "ab".repeat(32);
+        let reference = LinuxAgentIdentityRef::new(&fingerprint).unwrap();
+        assert_eq!(
+            reference.target(),
+            format!("{LINUX_AGENT_IDENTITY_PREFIX}{}", "ab".repeat(32))
+        );
+        assert!(LinuxAgentIdentityRef::new(&"AB".repeat(32)).is_err());
+        assert!(LinuxAgentIdentityRef::new(&"ab".repeat(31)).is_err());
+        assert!(validate_linux_agent_public_key(&STANDARD_NO_PAD.encode([7_u8; 32])).is_ok());
+        assert!(validate_linux_agent_public_key("not-a-public-key").is_err());
+    }
+
+    #[test]
+    fn linux_desktop_resume_reference_and_token_are_canonical_and_secret_free() {
+        let fingerprint = "ab".repeat(32);
+        let reference = LinuxDesktopResumeRef::new(&fingerprint, "alice-1").unwrap();
+        assert_eq!(
+            reference.target(),
+            format!("{LINUX_DESKTOP_RESUME_PREFIX}{fingerprint}/alice-1")
+        );
+        assert!(LinuxDesktopResumeRef::new(&"AB".repeat(32), "alice").is_err());
+        assert!(LinuxDesktopResumeRef::new(&fingerprint, "../alice").is_err());
+
+        let marker = URL_SAFE_NO_PAD.encode([7_u8; 32]);
+        let token = LinuxDesktopResumeToken::new(marker.clone()).unwrap();
+        assert_eq!(token.token(), marker);
+        assert!(!format!("{token:?}").contains(&marker));
+        assert!(LinuxDesktopResumeToken::new("short".into()).is_err());
+        assert!(LinuxDesktopResumeToken::new(format!("{}=", "a".repeat(42))).is_err());
+        assert!(LinuxDesktopResumeToken::new("a".repeat(43)).is_err());
+    }
+
+    #[cfg(windows)]
+    #[test]
+    fn linux_desktop_resume_round_trips_through_windows_credential_manager() {
+        use std::time::{SystemTime, UNIX_EPOCH};
+
+        let unique = SystemTime::now()
+            .duration_since(UNIX_EPOCH)
+            .unwrap()
+            .as_nanos();
+        let fingerprint = format!("{unique:064x}");
+        let reference = LinuxDesktopResumeRef::new(&fingerprint, "resume-test").unwrap();
+        let token = URL_SAFE_NO_PAD.encode([11_u8; 32]);
+        let _ = linux_desktop_resume_delete(&reference);
+
+        linux_desktop_resume_save(&reference, &token).unwrap();
+        let loaded = linux_desktop_resume_load(&reference).unwrap();
+        assert_eq!(loaded.token(), token);
+        assert_eq!(
+            linux_desktop_resume_delete(&reference),
+            Ok(CredentialStatus::Missing)
+        );
+        assert_eq!(
+            linux_desktop_resume_load(&reference).unwrap_err(),
+            CredentialStoreError::Missing
+        );
+    }
+
+    #[cfg(windows)]
+    #[test]
+    fn linux_agent_identity_round_trips_through_windows_credential_manager() {
+        use std::time::{SystemTime, UNIX_EPOCH};
+
+        let unique = SystemTime::now()
+            .duration_since(UNIX_EPOCH)
+            .unwrap()
+            .as_nanos();
+        let fingerprint = format!("{unique:064x}");
+        let reference = LinuxAgentIdentityRef::new(&fingerprint).unwrap();
+        let public_key = STANDARD_NO_PAD.encode([19_u8; 32]);
+        let _ = linux_agent_identity_delete(&reference);
+
+        linux_agent_identity_save(&reference, &public_key).unwrap();
+        assert_eq!(
+            linux_agent_identity_status(&reference),
+            Ok(CredentialStatus::Ready)
+        );
+        assert_eq!(linux_agent_identity_load(&reference), Ok(public_key));
+        assert_eq!(
+            linux_agent_identity_delete(&reference),
+            Ok(CredentialStatus::Missing)
+        );
+        assert_eq!(
+            linux_agent_identity_status(&reference),
+            Ok(CredentialStatus::Missing)
+        );
+    }
+
+    #[test]
+    fn record_round_trip_and_debug_are_secret_free() {
+        let marker = "do-not-log-this-password";
+        let credential = RdpCredential::new("DOMAIN\\user".to_owned(), marker.to_owned()).unwrap();
+        let encoded = serde_json::to_string(&credential).unwrap();
+        let decoded = decode_record(&encoded).unwrap();
+
+        assert_eq!(decoded.account(), "DOMAIN\\user");
+        assert_eq!(decoded.password(), marker);
+        assert!(!format!("{decoded:?}").contains(marker));
+        assert!(!format!("{decoded:?}").contains("DOMAIN"));
+    }
+
+    #[test]
+    fn invalid_account_and_empty_password_fail_closed() {
+        assert!(RdpCredential::new(String::new(), "secret".to_owned()).is_err());
+        assert!(RdpCredential::new("user\nname".to_owned(), "secret".to_owned()).is_err());
+        assert!(RdpCredential::new("user".to_owned(), String::new()).is_err());
+        assert!(decode_record(r#"{"account":"user","password":"secret","extra":1}"#).is_err());
+    }
+}
diff --git a/client/helpers/credential-store/src/main.rs b/client/helpers/credential-store/src/main.rs
new file mode 100644
index 0000000..eb965e2
--- /dev/null
+++ b/client/helpers/credential-store/src/main.rs
@@ -0,0 +1,153 @@
+use inquire::{Password, Text};
+use remotedesk_client_core::CredentialRef;
+use remotedesk_credential_store::{CredentialStatus, RdpCredential};
+use serde::Serialize;
+use std::env;
+use std::io::{self, Read};
+use std::process::ExitCode;
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+enum Operation {
+    Set,
+    Delete,
+    Status,
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+enum CredentialKind {
+    Rdp,
+}
+
+#[derive(Debug, PartialEq, Eq)]
+enum Reference {
+    Rdp(CredentialRef),
+}
+
+#[derive(Debug, PartialEq, Eq)]
+struct Args {
+    operation: Operation,
+    reference: Reference,
+    stdin_input: bool,
+}
+
+#[derive(Serialize)]
+struct StatusOutput {
+    status: CredentialStatus,
+}
+
+fn main() -> ExitCode {
+    match run() {
+        Ok(()) => ExitCode::SUCCESS,
+        Err(error) => {
+            eprintln!("RemoteDesk credential operation failed: {error}");
+            ExitCode::FAILURE
+        }
+    }
+}
+
+fn run() -> Result<(), String> {
+    let args = parse_args(env::args().skip(1))?;
+    let stdin_input = args.stdin_input;
+    let status = match (args.operation, args.reference) {
+        (Operation::Set, Reference::Rdp(reference)) => {
+            let (account, password) = if stdin_input {
+                let mut input = String::new();
+                io::stdin()
+                    .read_to_string(&mut input)
+                    .map_err(|_| "credential input failed".to_owned())?;
+                let mut lines = input.lines();
+                let account = lines.next().unwrap_or_default().to_owned();
+                let password = lines.next().unwrap_or_default().to_owned();
+                (account, password)
+            } else {
+                let account = Text::new("Windows account (DOMAIN\\user or user@domain):")
+                    .prompt()
+                    .map_err(|_| "account input was cancelled".to_owned())?;
+                let password = Password::new("Password:")
+                    .without_confirmation()
+                    .prompt()
+                    .map_err(|_| "password input was cancelled".to_owned())?;
+                (account, password)
+            };
+            let credential =
+                RdpCredential::new(account, password).map_err(|error| error.to_string())?;
+            remotedesk_credential_store::save(&reference, &credential)
+                .map_err(|error| error.to_string())?;
+            CredentialStatus::Ready
+        }
+        (Operation::Delete, Reference::Rdp(reference)) => {
+            remotedesk_credential_store::delete(&reference).map_err(|error| error.to_string())?
+        }
+        (Operation::Status, Reference::Rdp(reference)) => {
+            remotedesk_credential_store::status(&reference).map_err(|error| error.to_string())?
+        }
+    };
+    let output = serde_json::to_string(&StatusOutput { status })
+        .map_err(|_| "unable to encode credential status".to_owned())?;
+    println!("{output}");
+    Ok(())
+}
+
+fn parse_args(mut args: impl Iterator<Item = String>) -> Result<Args, String> {
+    let (operation, credential_kind) = match args.next().as_deref() {
+        Some("set") => (Operation::Set, CredentialKind::Rdp),
+        Some("delete") => (Operation::Delete, CredentialKind::Rdp),
+        Some("status") => (Operation::Status, CredentialKind::Rdp),
+        _ => return Err(usage().to_owned()),
+    };
+    if args.next().as_deref() != Some("--credential-ref") {
+        return Err(usage().to_owned());
+    }
+    let reference = args
+        .next()
+        .ok_or_else(|| "--credential-ref requires a value".to_owned())?;
+    let stdin_input = match args.next().as_deref() {
+        None => false,
+        Some("--stdin")
+            if operation == Operation::Set && credential_kind == CredentialKind::Rdp =>
+        {
+            true
+        }
+        Some(_) => return Err("unexpected credential helper argument".to_owned()),
+    };
+    let reference = match credential_kind {
+        CredentialKind::Rdp => {
+            Reference::Rdp(CredentialRef::new(reference).map_err(|error| error.to_string())?)
+        }
+    };
+    Ok(Args {
+        operation,
+        reference,
+        stdin_input,
+    })
+}
+
+fn usage() -> &'static str {
+    "usage: remotedesk-credential-store <set|delete|status> --credential-ref <application-reference> [--stdin]"
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn strings<'a>(values: &'a [&'a str]) -> impl Iterator<Item = String> + 'a {
+        values.iter().map(|value| (*value).to_owned())
+    }
+
+    #[test]
+    fn parser_accepts_only_application_owned_references() {
+        let args = parse_args(strings(&[
+            "status",
+            "--credential-ref",
+            "RemoteDesk/RDP/profile-1",
+        ]))
+        .unwrap();
+        assert_eq!(args.operation, Operation::Status);
+        assert!(
+            matches!(args.reference, Reference::Rdp(reference) if reference.target() == "RemoteDesk/RDP/profile-1")
+        );
+
+        assert!(parse_args(strings(&["status", "--credential-ref", "TERMSRV/host"])).is_err());
+        assert!(parse_args(strings(&["set", "--password", "secret"])).is_err());
+    }
+}
diff --git a/client/helpers/linux-terminal/Cargo.toml b/client/helpers/linux-terminal/Cargo.toml
new file mode 100644
index 0000000..b36ccda
--- /dev/null
+++ b/client/helpers/linux-terminal/Cargo.toml
@@ -0,0 +1,61 @@
+[package]
+name = "remotedesk-linux-terminal"
+version.workspace = true
+edition.workspace = true
+license.workspace = true
+rust-version.workspace = true
+
+[dependencies]
+async-trait = "0.1"
+base64 = "0.22"
+crossterm = "0.29"
+ed25519-dalek = "2.2"
+futures-util = "0.3"
+inquire = "0.9.4"
+rand = "0.9"
+remotedesk-agent-runtime = { path = "../../../agent/agent-runtime", features = ["wayland-eis"] }
+remotedesk-credential-store = { path = "../credential-store" }
+remotedesk-protocol = { path = "../../../protocol" }
+reqwest = { version = "0.12.28", default-features = false, features = ["json", "rustls-tls"] }
+rustls = { version = "0.23", default-features = false, features = ["logging", "ring", "std", "tls12"] }
+serde = { version = "1.0", features = ["derive"] }
+serde_json = "1.0"
+sha2 = "0.10"
+softbuffer = "0.4.8"
+tokio = { version = "1.47", features = ["fs", "io-util", "macros", "net", "rt-multi-thread", "sync", "time"] }
+tokio-tungstenite = { version = "0.29", default-features = false, features = ["connect", "rustls-tls-native-roots"] }
+url = "2.5"
+winit = "0.30.13"
+zeroize = "1.8"
+
+[target.'cfg(windows)'.dependencies]
+cpal = "0.17.3"
+ironrdp-rdpsnd = "0.9"
+ironrdp-rdpsnd-native = { version = "0.7", default-features = false, features = ["opus"] }
+keyring = { version = "3.6.3", default-features = false, features = ["windows-native"] }
+raw-window-handle = "0.6"
+windows = { version = "0.62.2", features = [
+    "Win32_Foundation",
+    "Win32_Graphics_Direct3D",
+    "Win32_Graphics_Direct3D11",
+    "Win32_Graphics_Dxgi",
+    "Win32_Graphics_Dxgi_Common",
+    "Win32_Media_MediaFoundation",
+    "Win32_System_Com",
+    "Win32_System_DataExchange",
+    "Win32_System_Memory",
+] }
+
+[dev-dependencies]
+remotedesk-edge-service = { path = "../../../edge/edge-service" }
+rustls-pemfile = "2.2"
+tiny_http = "0.12"
+tokio-rustls = { version = "0.26", default-features = false, features = ["logging", "ring", "tls12"] }
+
+[lints.rust]
+# Windows Media Foundation, D3D11, Opus, and WASAPI are isolated behind cfg(windows).
+unsafe_code = "allow"
+
+[lints.clippy]
+all = "warn"
+pedantic = "warn"
diff --git a/client/helpers/linux-terminal/src/desktop_viewer.rs b/client/helpers/linux-terminal/src/desktop_viewer.rs
new file mode 100644
index 0000000..be3a36a
--- /dev/null
+++ b/client/helpers/linux-terminal/src/desktop_viewer.rs
@@ -0,0 +1,2239 @@
+use std::collections::HashSet;
+use std::env;
+use std::fs;
+use std::num::NonZeroU32;
+use std::path::PathBuf;
+use std::sync::Arc;
+use std::sync::Mutex as SyncMutex;
+use std::time::{Duration, Instant, SystemTime, UNIX_EPOCH};
+
+use base64::{Engine as _, engine::general_purpose::STANDARD_NO_PAD};
+use ed25519_dalek::SigningKey;
+use futures_util::StreamExt as _;
+use remotedesk_agent_runtime::{
+    ClientCommand, DesktopButton, DesktopFrameAssembler, DesktopFrameMetadata, DesktopH264Metadata,
+    DesktopInputEvent, DesktopKeyState, DesktopVideoMode, MAX_RELATIVE_POINTER_DELTA,
+    OPUS_AUDIO_PROTOCOL_MINOR, PreparedClipboardText, RemoteH264AccessUnit, RemoteH264Event,
+    RemoteH264Stream, RemoteMediaTrack, RemoteOpusPacket, RemoteOpusStream, ServerEvent,
+    decode_clipboard_text, prepare_clipboard_text, validate_clipboard_offer,
+};
+use remotedesk_credential_store::{
+    LinuxDesktopResumeRef, linux_desktop_resume_delete, linux_desktop_resume_load,
+    linux_desktop_resume_save,
+};
+use serde::Serialize;
+use softbuffer::{Context, Surface};
+use tokio::sync::mpsc;
+use url::Url;
+use winit::application::ApplicationHandler;
+use winit::dpi::{PhysicalPosition, PhysicalSize};
+use winit::event::{DeviceEvent, ElementState, MouseButton, MouseScrollDelta, WindowEvent};
+use winit::event_loop::OwnedDisplayHandle;
+use winit::event_loop::{ActiveEventLoop, ControlFlow, EventLoop};
+use winit::keyboard::{Key, ModifiersState, NamedKey, PhysicalKey};
+use winit::window::{CursorGrabMode, Fullscreen, Window, WindowAttributes};
+
+#[cfg(windows)]
+use super::native_audio::NativeOpusPlayer;
+#[cfg(windows)]
+use super::native_clipboard::NativeClipboard;
+#[cfg(windows)]
+use super::native_stream::NativeH264Renderer;
+use super::{
+    Args, AuthenticatedAgentConnection, DesktopOptions, connect_authenticated_agent, hex_digest,
+    load_or_create_identity, send_command, terminal_url,
+};
+
+enum ViewerEvent {
+    Agent(ServerEvent),
+    NetworkLatency(u64),
+    Reconnecting {
+        attempt: u8,
+        max_attempts: u8,
+        delay_seconds: u64,
+    },
+    Failed(String),
+    NativeH264Ready,
+    NativeH264Reset,
+    RelativePointerAvailable(bool),
+    ClipboardAvailable {
+        read: bool,
+        write: bool,
+    },
+}
+
+const MAX_RECONNECT_ATTEMPTS: u8 = 3;
+const RELATIVE_POINTER_PROTOCOL_MINOR: u16 = 10;
+const WAYLAND_RESUME_PROTOCOL_MINOR: u16 = 12;
+
+type DesktopSocket = AuthenticatedAgentConnection;
+
+#[cfg(windows)]
+type PlatformClipboard = NativeClipboard;
+
+#[cfg(not(windows))]
+struct PlatformClipboard;
+
+fn start_platform_clipboard(read_local: bool, write_local: bool) -> Option<PlatformClipboard> {
+    #[cfg(windows)]
+    {
+        (read_local || write_local).then(|| NativeClipboard::start(read_local))
+    }
+    #[cfg(not(windows))]
+    {
+        let _ = (read_local, write_local);
+        None
+    }
+}
+
+async fn next_platform_clipboard(clipboard: &mut Option<PlatformClipboard>) -> Option<String> {
+    #[cfg(windows)]
+    {
+        match clipboard.as_mut() {
+            Some(clipboard) => clipboard.next_text().await,
+            None => std::future::pending().await,
+        }
+    }
+    #[cfg(not(windows))]
+    {
+        let _ = clipboard;
+        std::future::pending().await
+    }
+}
+
+fn set_platform_clipboard(
+    clipboard: &Option<PlatformClipboard>,
+    text: String,
+) -> Result<(), String> {
+    #[cfg(windows)]
+    {
+        clipboard
+            .as_ref()
+            .ok_or_else(|| "local clipboard is unavailable".to_owned())?
+            .set_text(text)
+    }
+    #[cfg(not(windows))]
+    {
+        let _ = (clipboard, text);
+        Err("local clipboard is unavailable".to_owned())
+    }
+}
+
+#[derive(Clone, Default)]
+struct NativeFrameMailbox {
+    state: Arc<SyncMutex<NativeFrameMailboxState>>,
+}
+
+#[derive(Default)]
+struct NativeFrameMailboxState {
+    pending: Option<RemoteH264AccessUnit>,
+    notification_outstanding: bool,
+    awaiting_keyframe: bool,
+}
+
+#[derive(Clone, Copy, Debug, PartialEq, Eq)]
+enum NativeFramePublish {
+    Accepted,
+    WaitingForKeyframe,
+    Overflow,
+}
+
+enum RemoteDesktopMediaEvent {
+    Video(RemoteH264Event),
+    Audio(RemoteOpusPacket),
+    VideoEnded,
+    AudioEnded,
+    Ended,
+}
+
+#[derive(Default)]
+struct RemoteDesktopMediaStreams {
+    video: Option<RemoteH264Stream>,
+    audio: Option<RemoteOpusStream>,
+    tracks_closed: bool,
+}
+
+impl RemoteDesktopMediaStreams {
+    fn insert(&mut self, track: RemoteMediaTrack) {
+        if self.video.is_none()
+            && let Ok(video) = track.clone().into_h264_stream()
+        {
+            self.video = Some(video);
+            return;
+        }
+        if self.audio.is_none()
+            && let Ok(audio) = track.into_opus_stream()
+        {
+            self.audio = Some(audio);
+        }
+    }
+}
+
+impl NativeFrameMailboxState {
+    fn stage(&mut self, access_unit: RemoteH264AccessUnit) -> NativeFramePublish {
+        if self.awaiting_keyframe && !access_unit.keyframe {
+            return NativeFramePublish::WaitingForKeyframe;
+        }
+        if self
+            .pending
+            .as_ref()
+            .is_some_and(|pending| pending.keyframe)
+            && !access_unit.keyframe
+        {
+            return NativeFramePublish::WaitingForKeyframe;
+        }
+        if self.pending.is_some() && !access_unit.keyframe {
+            self.pending = None;
+            self.awaiting_keyframe = true;
+            return NativeFramePublish::Overflow;
+        }
+        self.awaiting_keyframe = false;
+        self.pending = Some(access_unit);
+        NativeFramePublish::Accepted
+    }
+}
+
+impl NativeFrameMailbox {
+    fn reset(&self) -> Result<(), ()> {
+        let mut state = self.state.lock().map_err(|_| ())?;
+        *state = NativeFrameMailboxState::default();
+        Ok(())
+    }
+
+    fn publish(
+        &self,
+        access_unit: RemoteH264AccessUnit,
+        proxy: &winit::event_loop::EventLoopProxy<ViewerEvent>,
+    ) -> Result<NativeFramePublish, ()> {
+        let (outcome, notify) = {
+            let mut state = self.state.lock().map_err(|_| ())?;
+            let outcome = state.stage(access_unit);
+            if outcome == NativeFramePublish::Accepted {
+                let notify = !state.notification_outstanding;
+                state.notification_outstanding = true;
+                (outcome, notify)
+            } else {
+                (outcome, false)
+            }
+        };
+        if notify {
+            proxy
+                .send_event(ViewerEvent::NativeH264Ready)
+                .map_err(|_| ())?;
+        }
+        Ok(outcome)
+    }
+
+    fn take(&self) -> Option<RemoteH264AccessUnit> {
+        let mut state = self.state.lock().ok()?;
+        state.notification_outstanding = false;
+        state.pending.take()
+    }
+}
+
+#[derive(Debug, Default)]
+struct ReconnectPolicy {
+    attempts: u8,
+}
+
+impl ReconnectPolicy {
+    fn next_delay(&mut self) -> Option<Duration> {
+        if self.attempts >= MAX_RECONNECT_ATTEMPTS {
+            return None;
+        }
+        let delay = Duration::from_secs(1_u64 << self.attempts);
+        self.attempts += 1;
+        Some(delay)
+    }
+}
+
+#[derive(Clone, Copy, Debug, PartialEq, Eq)]
+enum LocalCommand {
+    ToggleFullscreen,
+    ExitFullscreen,
+    ExitSession,
+    ToggleInputCapture,
+}
+
+fn local_command(key: &Key, modifiers: ModifiersState, fullscreen: bool) -> Option<LocalCommand> {
+    match key {
+        Key::Named(NamedKey::F11) => Some(LocalCommand::ToggleFullscreen),
+        Key::Named(NamedKey::Enter) if modifiers.alt_key() => Some(LocalCommand::ToggleFullscreen),
+        Key::Named(NamedKey::Escape) if fullscreen => Some(LocalCommand::ExitFullscreen),
+        Key::Named(NamedKey::Home) if modifiers.control_key() && modifiers.alt_key() => {
+            Some(LocalCommand::ToggleInputCapture)
+        }
+        Key::Character(value)
+            if modifiers.control_key()
+                && modifiers.shift_key()
+                && value.eq_ignore_ascii_case("q") =>
+        {
+            Some(LocalCommand::ExitSession)
+        }
+        _ => None,
+    }
+}
+
+pub fn run(mut args: Args) -> Result<(), String> {
+    let options = args
+        .desktop
+        .ok_or_else(|| "desktop viewer options are missing".to_owned())?;
+    let event_loop = EventLoop::<ViewerEvent>::with_user_event()
+        .build()
+        .map_err(|error| format!("unable to create desktop event loop: {error}"))?;
+    let proxy = event_loop.create_proxy();
+    let runtime = tokio::runtime::Builder::new_multi_thread()
+        .enable_all()
+        .build()
+        .map_err(|error| format!("unable to create async runtime: {error}"))?;
+    let signing_key = load_or_create_identity()?;
+    let url = terminal_url(&args.target)?;
+    let resume_reference =
+        LinuxDesktopResumeRef::new(&hex_digest(&args.certificate_sha256), &args.user)
+            .map_err(|_| "unable to create the Linux desktop resume reference".to_owned())?;
+    let socket = runtime.block_on(connect_authenticated_agent(&args, &signing_key, &url))?;
+    // A reconnect uses the stored identity and must never consume the one-time pairing code again.
+    args.pair = false;
+    let diagnostics = args
+        .session_id
+        .clone()
+        .map(DesktopDiagnostics::new)
+        .transpose()?;
+    let (command_sender, command_receiver) = mpsc::unbounded_channel();
+    let native_frames = NativeFrameMailbox::default();
+    let network_native_frames = native_frames.clone();
+    std::thread::spawn(move || {
+        runtime.block_on(desktop_network(
+            socket,
+            args,
+            signing_key,
+            url,
+            options,
+            resume_reference,
+            command_receiver,
+            proxy,
+            network_native_frames,
+        ));
+    });
+    let mut app = DesktopApp::new(
+        &event_loop,
+        options,
+        command_sender,
+        diagnostics,
+        native_frames,
+    )?;
+    event_loop
+        .run_app(&mut app)
+        .map_err(|error| format!("desktop event loop failed: {error}"))
+}
+
+async fn desktop_network(
+    socket: DesktopSocket,
+    args: Args,
+    signing_key: SigningKey,
+    url: Url,
+    options: DesktopOptions,
+    resume_reference: LinuxDesktopResumeRef,
+    mut commands: mpsc::UnboundedReceiver<ClientCommand>,
+    proxy: winit::event_loop::EventLoopProxy<ViewerEvent>,
+    native_frames: NativeFrameMailbox,
+) {
+    let mut socket = Some(socket);
+    let mut reconnect = ReconnectPolicy::default();
+    let mut resume_token = linux_desktop_resume_load(&resume_reference)
+        .ok()
+        .map(|token| token.token().to_owned());
+    loop {
+        if let Some(mut connected) = socket.take() {
+            loop {
+                match commands.try_recv() {
+                    Ok(ClientCommand::Close) => {
+                        let _ = linux_desktop_resume_delete(&resume_reference);
+                        return;
+                    }
+                    Ok(_) => {}
+                    Err(mpsc::error::TryRecvError::Empty) => break,
+                    Err(mpsc::error::TryRecvError::Disconnected) => return,
+                }
+            }
+            let result = run_desktop_connection(
+                &mut connected,
+                &args.user,
+                options,
+                &mut resume_token,
+                &resume_reference,
+                &mut commands,
+                &proxy,
+                &native_frames,
+            )
+            .await;
+            connected.close_realtime().await;
+            match result {
+                Ok(()) => return,
+                Err(_) => {}
+            }
+        }
+
+        let Some(delay) = reconnect.next_delay() else {
+            let _ = proxy.send_event(ViewerEvent::Failed(
+                "Linux Agent desktop reconnect attempts were exhausted".into(),
+            ));
+            return;
+        };
+        if proxy
+            .send_event(ViewerEvent::Reconnecting {
+                attempt: reconnect.attempts,
+                max_attempts: MAX_RECONNECT_ATTEMPTS,
+                delay_seconds: delay.as_secs(),
+            })
+            .is_err()
+            || wait_for_reconnect(delay, &resume_reference, &mut commands).await
+        {
+            return;
+        }
+        socket = match connect_for_reconnect(
+            &args,
+            &signing_key,
+            &url,
+            &resume_reference,
+            &mut commands,
+        )
+        .await
+        {
+            Some(result) => result.ok(),
+            None => return,
+        };
+    }
+}
+
+async fn connect_for_reconnect(
+    args: &Args,
+    signing_key: &SigningKey,
+    url: &Url,
+    resume_reference: &LinuxDesktopResumeRef,
+    commands: &mut mpsc::UnboundedReceiver<ClientCommand>,
+) -> Option<Result<DesktopSocket, String>> {
+    let connection = connect_authenticated_agent(args, signing_key, url);
+    tokio::pin!(connection);
+    loop {
+        tokio::select! {
+            result = &mut connection => return Some(result),
+            command = commands.recv() => {
+                match command {
+                    Some(ClientCommand::Close) => {
+                        let _ = linux_desktop_resume_delete(resume_reference);
+                        return None;
+                    }
+                    None => return None,
+                    Some(_) => {}
+                }
+            }
+        }
+    }
+}
+
+async fn wait_for_reconnect(
+    delay: Duration,
+    resume_reference: &LinuxDesktopResumeRef,
+    commands: &mut mpsc::UnboundedReceiver<ClientCommand>,
+) -> bool {
+    let timer = tokio::time::sleep(delay);
+    tokio::pin!(timer);
+    loop {
+        tokio::select! {
+            _ = &mut timer => return false,
+            command = commands.recv() => {
+                match command {
+                    Some(ClientCommand::Close) => {
+                        let _ = linux_desktop_resume_delete(resume_reference);
+                        return true;
+                    }
+                    None => return true,
+                    Some(_) => {}
+                }
+            }
+        }
+    }
+}
+
+async fn run_desktop_connection(
+    socket: &mut DesktopSocket,
+    user: &str,
+    options: DesktopOptions,
+    resume_token: &mut Option<String>,
+    resume_reference: &LinuxDesktopResumeRef,
+    commands: &mut mpsc::UnboundedReceiver<ClientCommand>,
+    proxy: &winit::event_loop::EventLoopProxy<ViewerEvent>,
+    native_frames: &NativeFrameMailbox,
+) -> Result<(), String> {
+    if proxy
+        .send_event(ViewerEvent::RelativePointerAvailable(
+            supports_relative_pointer(socket.protocol_minor),
+        ))
+        .is_err()
+    {
+        return Ok(());
+    }
+    let edge_session_id = socket.edge_session_id.clone();
+    let protocol_minor = socket.protocol_minor;
+    let clipboard_read = socket.clipboard_read && options.clipboard_read && cfg!(windows);
+    let clipboard_write = socket.clipboard_write && options.clipboard_write && cfg!(windows);
+    let native_media_requested = socket.realtime.is_some();
+    if native_media_requested {
+        native_frames
+            .reset()
+            .map_err(|()| "native H.264 mailbox lock failed".to_owned())?;
+        if proxy.send_event(ViewerEvent::NativeH264Reset).is_err() {
+            return Ok(());
+        }
+    }
+    if let Err(error) = send_command(
+        &mut *socket,
+        &ClientCommand::OpenDesktop {
+            user: user.to_owned(),
+            max_width: options.width,
+            max_height: options.height,
+            frames_per_second: options.frames_per_second,
+            resume_token: resume_token.clone(),
+            client_fingerprint: None,
+            edge_session_id,
+            webrtc_h264: native_media_requested,
+            opus_audio: native_media_requested && supports_opus_audio(protocol_minor),
+            clipboard_read,
+            clipboard_write,
+        },
+    )
+    .await
+    {
+        return Err(error);
+    }
+    if proxy
+        .send_event(ViewerEvent::ClipboardAvailable {
+            read: clipboard_read,
+            write: clipboard_write,
+        })
+        .is_err()
+    {
+        return Ok(());
+    }
+    let mut ping_timer = tokio::time::interval(Duration::from_secs(1));
+    ping_timer.set_missed_tick_behavior(tokio::time::MissedTickBehavior::Skip);
+    let mut ping_nonce = 0_u64;
+    let mut pending_ping = None;
+    let mut media_streams = RemoteDesktopMediaStreams::default();
+    let mut realtime_active = native_media_requested;
+    let mut native_video_active = native_media_requested;
+    #[cfg(windows)]
+    let mut opus_player = None;
+    #[cfg(windows)]
+    let mut opus_playback_disabled = false;
+    let mut clipboard = start_platform_clipboard(clipboard_write, clipboard_read);
+    let mut clipboard_sequence = 0_u64;
+    let mut last_local_clipboard_sha = None;
+    let mut pending_local_clipboard: Option<PreparedClipboardText> = None;
+    let mut last_remote_clipboard_sequence = 0_u64;
+    let mut pending_remote_clipboard: Option<(u64, u32, String)> = None;
+    let websocket = &mut socket.socket;
+    let realtime = &mut socket.realtime;
+    loop {
+        tokio::select! {
+            text = next_platform_clipboard(&mut clipboard), if clipboard_write => {
+                let Some(text) = text else {
+                    return Err("local clipboard worker stopped".into());
+                };
+                let next_sequence = clipboard_sequence
+                    .checked_add(1)
+                    .ok_or_else(|| "local clipboard sequence exhausted".to_owned())?;
+                let prepared = prepare_clipboard_text(next_sequence, &text)
+                    .map_err(|error| error.to_string())?;
+                if last_local_clipboard_sha.as_deref() != Some(prepared.sha256.as_str()) {
+                    clipboard_sequence = next_sequence;
+                    last_local_clipboard_sha = Some(prepared.sha256.clone());
+                    send_command(
+                        &mut *websocket,
+                        &ClientCommand::DesktopClipboardOffer {
+                            sequence: prepared.sequence,
+                            utf8_bytes: prepared.utf8_bytes,
+                            sha256: prepared.sha256.clone(),
+                        },
+                    ).await?;
+                    pending_local_clipboard = Some(prepared);
+                }
+            }
+            _ = ping_timer.tick(), if pending_ping.is_none() => {
+                ping_nonce = ping_nonce.wrapping_add(1);
+                if let Err(error) = send_command(
+                    &mut *websocket,
+                    &ClientCommand::DesktopPing { nonce: ping_nonce },
+                ).await {
+                    return Err(error);
+                }
+                pending_ping = Some((ping_nonce, Instant::now()));
+            }
+            command = commands.recv() => {
+                let command = command.unwrap_or(ClientCommand::Close);
+                let close = matches!(command, ClientCommand::Close);
+                send_command(&mut *websocket, &command).await?;
+                if close {
+                    let _ = tokio::time::timeout(Duration::from_secs(2), websocket.next()).await;
+                    let _ = websocket.close(None).await;
+                    let _ = linux_desktop_resume_delete(resume_reference);
+                    return Ok(());
+                }
+            }
+            message = websocket.next() => {
+                let Some(message) = message else {
+                    return Err("Linux Agent closed the desktop connection".into());
+                };
+                let event = match message {
+                    Ok(message) if message.is_text() => serde_json::from_str::<ServerEvent>(
+                        message.to_text().unwrap_or_default(),
+                    )
+                    .map_err(|_| "Linux Agent returned an invalid desktop event".to_owned()),
+                    Ok(message) if message.is_close() => Err("Linux Agent closed the desktop connection".to_owned()),
+                    Ok(_) => continue,
+                    Err(_) => Err("Linux Agent desktop WebSocket failed".to_owned()),
+                };
+                match event {
+                    Ok(ServerEvent::DesktopClipboardRequest { sequence }) if clipboard_write => {
+                        if let Some(prepared) = pending_local_clipboard.as_ref()
+                            && prepared.sequence == sequence
+                        {
+                            send_command(
+                                &mut *websocket,
+                                &ClientCommand::DesktopClipboardData {
+                                    sequence,
+                                    data: prepared.data.clone(),
+                                },
+                            ).await?;
+                        }
+                    }
+                    Ok(ServerEvent::DesktopClipboardOffer {
+                        sequence,
+                        utf8_bytes,
+                        sha256,
+                    }) if clipboard_read => {
+                        validate_clipboard_offer(sequence, utf8_bytes, &sha256)
+                            .map_err(|error| error.to_string())?;
+                        if sequence > last_remote_clipboard_sequence {
+                            last_remote_clipboard_sequence = sequence;
+                            pending_remote_clipboard = None;
+                            if last_local_clipboard_sha.as_deref() != Some(sha256.as_str()) {
+                                pending_remote_clipboard = Some((sequence, utf8_bytes, sha256));
+                                send_command(
+                                    &mut *websocket,
+                                    &ClientCommand::DesktopClipboardRequest { sequence },
+                                ).await?;
+                            }
+                        }
+                    }
+                    Ok(ServerEvent::DesktopClipboardData { sequence, data }) if clipboard_read => {
+                        if let Some((offered_sequence, utf8_bytes, sha256)) =
+                            pending_remote_clipboard.clone()
+                            && offered_sequence == sequence
+                        {
+                            let text = decode_clipboard_text(&data, utf8_bytes, &sha256)
+                                .map_err(|error| error.to_string())?;
+                            set_platform_clipboard(&clipboard, text)?;
+                            last_local_clipboard_sha = Some(sha256);
+                            pending_remote_clipboard = None;
+                        }
+                    }
+                    Ok(ServerEvent::DesktopClipboardOffer { .. }
+                        | ServerEvent::DesktopClipboardRequest { .. }
+                        | ServerEvent::DesktopClipboardData { .. }) => {
+                        return Err("Linux Agent sent an unnegotiated clipboard event".into());
+                    }
+                    Ok(ServerEvent::DesktopPong { nonce }) => {
+                            if let Some((expected, started)) = pending_ping.take()
+                                && nonce == expected
+                            {
+                                let latency_us = started
+                                    .elapsed()
+                                    .as_micros()
+                                    .try_into()
+                                    .unwrap_or(u64::MAX);
+                                let _ = proxy.send_event(ViewerEvent::NetworkLatency(latency_us));
+                            }
+                    }
+                    Ok(ServerEvent::DesktopOpened {
+                        width,
+                        height,
+                        encoding,
+                        resume_token: rotated,
+                        resumed,
+                    }) => {
+                        let resumable = encoding
+                            == remotedesk_agent_runtime::DesktopFrameEncoding::ZlibBgra
+                            || (encoding
+                                == remotedesk_agent_runtime::DesktopFrameEncoding::WebRtcH264
+                                && supports_wayland_resume(protocol_minor));
+                        if resumable {
+                            let _ = linux_desktop_resume_save(resume_reference, &rotated);
+                            *resume_token = Some(rotated.clone());
+                        } else {
+                            let _ = linux_desktop_resume_delete(resume_reference);
+                            *resume_token = None;
+                        }
+                        if proxy.send_event(ViewerEvent::Agent(ServerEvent::DesktopOpened {
+                            width,
+                            height,
+                            encoding,
+                            resume_token: rotated,
+                            resumed,
+                        })).is_err() {
+                            return Ok(());
+                        }
+                    }
+                    Ok(ServerEvent::Error { code, message }) if code == "desktop_resume_rejected" => {
+                        *resume_token = None;
+                        let _ = linux_desktop_resume_delete(resume_reference);
+                        return Err(message);
+                    }
+                    Ok(event) => {
+                        if matches!(event, ServerEvent::DesktopClosed { .. }) {
+                            let _ = linux_desktop_resume_delete(resume_reference);
+                            return Err("Linux Agent closed the desktop session".into());
+                        }
+                        if proxy.send_event(ViewerEvent::Agent(event)).is_err() {
+                            return Ok(());
+                        }
+                    }
+                    Err(error) => return Err(error),
+                }
+            }
+            media = next_remote_media(realtime, &mut media_streams), if realtime_active => {
+                match media? {
+                    RemoteDesktopMediaEvent::Video(RemoteH264Event::AccessUnit(access_unit)) => {
+                        match native_frames.publish(access_unit, proxy) {
+                            Ok(NativeFramePublish::Overflow) => {
+                                send_command(
+                                    &mut *websocket,
+                                    &ClientCommand::DesktopVideoMode {
+                                        mode: DesktopVideoMode::ZlibBgra,
+                                    },
+                                )
+                                .await?;
+                                if proxy.send_event(ViewerEvent::NativeH264Reset).is_err() {
+                                    return Ok(());
+                                }
+                                if let Some(stream) = media_streams.video.as_mut() {
+                                    stream.recover_from_local_drop().await;
+                                }
+                            }
+                            Ok(NativeFramePublish::Accepted | NativeFramePublish::WaitingForKeyframe) => {}
+                            Err(()) => return Ok(()),
+                        }
+                    }
+                    RemoteDesktopMediaEvent::Video(RemoteH264Event::RecoveryRequired) => {
+                        send_command(
+                            &mut *websocket,
+                            &ClientCommand::DesktopVideoMode {
+                                mode: DesktopVideoMode::ZlibBgra,
+                            },
+                        ).await?;
+                        if proxy.send_event(ViewerEvent::NativeH264Reset).is_err() {
+                            return Ok(());
+                        }
+                    }
+                    RemoteDesktopMediaEvent::VideoEnded => {
+                        native_video_active = false;
+                        send_command(
+                            &mut *websocket,
+                            &ClientCommand::DesktopVideoMode {
+                                mode: DesktopVideoMode::ZlibBgra,
+                            },
+                        ).await?;
+                        if proxy.send_event(ViewerEvent::NativeH264Reset).is_err() {
+                            return Ok(());
+                        }
+                    }
+                    RemoteDesktopMediaEvent::Audio(packet) => {
+                        #[cfg(windows)]
+                        if !opus_playback_disabled {
+                            if opus_player.is_none() {
+                                match NativeOpusPlayer::new() {
+                                    Ok(player) => opus_player = Some(player),
+                                    Err(_) => opus_playback_disabled = true,
+                                }
+                            }
+                            if let Some(player) = opus_player.as_ref()
+                                && player.push(packet).is_err()
+                            {
+                                opus_player = None;
+                                opus_playback_disabled = true;
+                            }
+                        }
+                        #[cfg(not(windows))]
+                        let _ = packet;
+                    }
+                    RemoteDesktopMediaEvent::AudioEnded => {
+                        #[cfg(windows)]
+                        {
+                            opus_player = None;
+                        }
+                    }
+                    RemoteDesktopMediaEvent::Ended => {
+                        realtime_active = false;
+                        #[cfg(windows)]
+                        {
+                            opus_player = None;
+                        }
+                        if native_video_active {
+                            native_video_active = false;
+                            send_command(
+                                &mut *websocket,
+                                &ClientCommand::DesktopVideoMode {
+                                    mode: DesktopVideoMode::ZlibBgra,
+                                },
+                            ).await?;
+                            if proxy.send_event(ViewerEvent::NativeH264Reset).is_err() {
+                                return Ok(());
+                            }
+                        }
+                    }
+                }
+            }
+        }
+    }
+}
+
+async fn next_remote_media(
+    session: &mut Option<remotedesk_agent_runtime::WebRtcSession>,
+    streams: &mut RemoteDesktopMediaStreams,
+) -> Result<RemoteDesktopMediaEvent, String> {
+    loop {
+        if streams.video.is_some() && streams.audio.is_some() {
+            let mut video = streams.video.take().expect("video stream exists");
+            let mut audio = streams.audio.take().expect("audio stream exists");
+            tokio::select! {
+                event = video.next_event() => {
+                    let event = event
+                        .map_err(|error| format!("invalid remote H.264 media: {error}"))?;
+                    streams.video = event.as_ref().map(|_| video);
+                    streams.audio = Some(audio);
+                    return Ok(event.map_or(
+                        RemoteDesktopMediaEvent::VideoEnded,
+                        RemoteDesktopMediaEvent::Video,
+                    ));
+                }
+                packet = audio.next_packet() => {
+                    let packet = packet
+                        .map_err(|error| format!("invalid remote Opus media: {error}"))?;
+                    streams.audio = packet.as_ref().map(|_| audio);
+                    streams.video = Some(video);
+                    return Ok(packet.map_or(
+                        RemoteDesktopMediaEvent::AudioEnded,
+                        RemoteDesktopMediaEvent::Audio,
+                    ));
+                }
+            }
+        }
+
+        if let Some(mut video) = streams.video.take() {
+            if streams.tracks_closed {
+                let event = video
+                    .next_event()
+                    .await
+                    .map_err(|error| format!("invalid remote H.264 media: {error}"))?;
+                streams.video = event.as_ref().map(|_| video);
+                return Ok(event.map_or(
+                    RemoteDesktopMediaEvent::VideoEnded,
+                    RemoteDesktopMediaEvent::Video,
+                ));
+            }
+            let Some(active_session) = session.as_mut() else {
+                streams.video = Some(video);
+                streams.tracks_closed = true;
+                continue;
+            };
+            tokio::select! {
+                event = video.next_event() => {
+                    let event = event
+                        .map_err(|error| format!("invalid remote H.264 media: {error}"))?;
+                    streams.video = event.as_ref().map(|_| video);
+                    return Ok(event.map_or(
+                        RemoteDesktopMediaEvent::VideoEnded,
+                        RemoteDesktopMediaEvent::Video,
+                    ));
+                }
+                track = active_session.next_remote_track() => {
+                    streams.video = Some(video);
+                    if let Some(track) = track {
+                        streams.insert(track);
+                    } else {
+                        streams.tracks_closed = true;
+                    }
+                }
+            }
+            continue;
+        }
+
+        if let Some(mut audio) = streams.audio.take() {
+            if streams.tracks_closed {
+                let packet = audio
+                    .next_packet()
+                    .await
+                    .map_err(|error| format!("invalid remote Opus media: {error}"))?;
+                streams.audio = packet.as_ref().map(|_| audio);
+                return Ok(packet.map_or(
+                    RemoteDesktopMediaEvent::AudioEnded,
+                    RemoteDesktopMediaEvent::Audio,
+                ));
+            }
+            let Some(active_session) = session.as_mut() else {
+                streams.audio = Some(audio);
+                streams.tracks_closed = true;
+                continue;
+            };
+            tokio::select! {
+                packet = audio.next_packet() => {
+                    let packet = packet
+                        .map_err(|error| format!("invalid remote Opus media: {error}"))?;
+                    streams.audio = packet.as_ref().map(|_| audio);
+                    return Ok(packet.map_or(
+                        RemoteDesktopMediaEvent::AudioEnded,
+                        RemoteDesktopMediaEvent::Audio,
+                    ));
+                }
+                track = active_session.next_remote_track() => {
+                    streams.audio = Some(audio);
+                    if let Some(track) = track {
+                        streams.insert(track);
+                    } else {
+                        streams.tracks_closed = true;
+                    }
+                }
+            }
+            continue;
+        }
+
+        if streams.tracks_closed {
+            return Ok(RemoteDesktopMediaEvent::Ended);
+        }
+        let Some(active_session) = session.as_mut() else {
+            streams.tracks_closed = true;
+            continue;
+        };
+        if let Some(track) = active_session.next_remote_track().await {
+            streams.insert(track);
+        } else {
+            streams.tracks_closed = true;
+        }
+    }
+}
+
+struct DesktopApp {
+    context: Context<OwnedDisplayHandle>,
+    window: Option<Arc<Window>>,
+    surface: Option<Surface<OwnedDisplayHandle, Arc<Window>>>,
+    options: DesktopOptions,
+    commands: mpsc::UnboundedSender<ClientCommand>,
+    assembler: Option<DesktopFrameAssembler>,
+    pending_metadata: Option<DesktopFrameMetadata>,
+    pending_present_started: Option<Instant>,
+    pending_ack_sequence: Option<u64>,
+    pixels: Vec<u32>,
+    desktop_size: (u16, u16),
+    desktop_connected: bool,
+    focused: bool,
+    fullscreen: bool,
+    modifiers: ModifiersState,
+    local_shortcut_keys: HashSet<PhysicalKey>,
+    resize_deadline: Option<Instant>,
+    last_requested_size: (u16, u16),
+    diagnostics: Option<DesktopDiagnostics>,
+    native_frames: NativeFrameMailbox,
+    native_video_active: bool,
+    native_mode_requested: bool,
+    native_mode_confirmed: bool,
+    native_h264_sequence: Option<u64>,
+    native_presented_waiting_metadata: bool,
+    input_capture_requested: bool,
+    input_captured: bool,
+    relative_pointer_delta: (f64, f64),
+    relative_pointer_available: bool,
+    #[cfg(windows)]
+    native_renderer: Option<NativeH264Renderer>,
+}
+
+impl DesktopApp {
+    fn new(
+        event_loop: &EventLoop<ViewerEvent>,
+        options: DesktopOptions,
+        commands: mpsc::UnboundedSender<ClientCommand>,
+        diagnostics: Option<DesktopDiagnostics>,
+        native_frames: NativeFrameMailbox,
+    ) -> Result<Self, String> {
+        Ok(Self {
+            context: Context::new(event_loop.owned_display_handle())
+                .map_err(|error| format!("unable to create desktop renderer: {error}"))?,
+            window: None,
+            surface: None,
+            options,
+            commands,
+            assembler: None,
+            pending_metadata: None,
+            pending_present_started: None,
+            pending_ack_sequence: None,
+            pixels: Vec::new(),
+            desktop_size: (options.width, options.height),
+            desktop_connected: false,
+            focused: false,
+            fullscreen: options.fullscreen,
+            modifiers: ModifiersState::empty(),
+            local_shortcut_keys: HashSet::new(),
+            resize_deadline: None,
+            last_requested_size: (options.width, options.height),
+            diagnostics,
+            native_frames,
+            native_video_active: false,
+            native_mode_requested: false,
+            native_mode_confirmed: false,
+            native_h264_sequence: None,
+            native_presented_waiting_metadata: false,
+            input_capture_requested: options.capture_input,
+            input_captured: false,
+            relative_pointer_delta: (0.0, 0.0),
+            relative_pointer_available: false,
+            #[cfg(windows)]
+            native_renderer: None,
+        })
+    }
+
+    #[cfg(windows)]
+    fn handle_native_h264(&mut self, access_unit: RemoteH264AccessUnit) {
+        let Some(window) = self.window.as_ref().map(Arc::clone) else {
+            return;
+        };
+        if self.native_renderer.is_none() && !access_unit.keyframe {
+            return;
+        }
+        if self.native_renderer.is_none() {
+            match NativeH264Renderer::new(window) {
+                Ok(renderer) => self.native_renderer = Some(renderer),
+                Err(error) => {
+                    self.restore_software_surface(&error);
+                    return;
+                }
+            }
+        }
+        let result = self
+            .native_renderer
+            .as_mut()
+            .expect("native renderer was initialized")
+            .decode_and_present(&access_unit);
+        match result {
+            Ok(Some(presentation)) => {
+                self.surface = None;
+                self.native_video_active = true;
+                if presentation.frames > 0 {
+                    self.pixels.clear();
+                    if let Some(diagnostics) = self.diagnostics.as_mut() {
+                        diagnostics.native_video_frame(
+                            presentation.decode_latency_us,
+                            presentation.presentation_latency_us,
+                        );
+                    }
+                }
+                if self.native_mode_confirmed {
+                    self.acknowledge_native_presentation();
+                } else if !self.native_mode_requested {
+                    self.native_mode_requested = true;
+                    self.send(ClientCommand::DesktopVideoMode {
+                        mode: DesktopVideoMode::WebRtcH264,
+                    });
+                }
+            }
+            Ok(None) => {}
+            Err(error) => {
+                self.fallback_to_software_video(&error);
+            }
+        }
+    }
+
+    #[cfg(not(windows))]
+    fn handle_native_h264(&mut self, _: RemoteH264AccessUnit) {}
+
+    #[cfg(windows)]
+    fn restore_software_surface(&mut self, error: &str) {
+        if let Some(window) = self.window.as_ref().map(Arc::clone) {
+            self.surface = Surface::new(&self.context, window.clone()).ok();
+            window.set_title(&format!(
+                "RemoteDesk Linux desktop - native video fallback: {error}"
+            ));
+        }
+    }
+
+    #[cfg(windows)]
+    fn fallback_to_software_video(&mut self, error: &str) {
+        if self.native_mode_requested || self.native_mode_confirmed {
+            self.send(ClientCommand::DesktopVideoMode {
+                mode: DesktopVideoMode::ZlibBgra,
+            });
+        }
+        self.native_renderer = None;
+        self.native_video_active = false;
+        self.native_mode_requested = false;
+        self.native_mode_confirmed = false;
+        self.native_h264_sequence = None;
+        self.native_presented_waiting_metadata = false;
+        self.restore_software_surface(error);
+    }
+
+    fn acknowledge_native_presentation(&mut self) {
+        if let Some(sequence) = self.native_h264_sequence.take() {
+            self.native_presented_waiting_metadata = false;
+            self.send(ClientCommand::DesktopH264FrameAck { sequence });
+        } else {
+            self.native_presented_waiting_metadata = true;
+        }
+    }
+
+    #[cfg(windows)]
+    fn reset_native_video(&mut self) {
+        self.native_renderer = None;
+        self.native_video_active = false;
+        self.native_mode_requested = false;
+        self.native_mode_confirmed = false;
+        self.native_h264_sequence = None;
+        self.native_presented_waiting_metadata = false;
+        if self.surface.is_none()
+            && let Some(window) = self.window.as_ref().map(Arc::clone)
+        {
+            self.surface = Surface::new(&self.context, Arc::clone(&window)).ok();
+            window.set_title("RemoteDesk Linux desktop");
+            window.request_redraw();
+        }
+    }
+
+    #[cfg(not(windows))]
+    fn reset_native_video(&mut self) {}
+
+    fn send(&self, command: ClientCommand) {
+        let _ = self.commands.send(command);
+    }
+
+    fn release_all(&self) {
+        self.send(ClientCommand::DesktopInput {
+            event: DesktopInputEvent::ReleaseAll,
+        });
+    }
+
+    fn request_exit(&mut self, event_loop: &ActiveEventLoop) {
+        if let Some(window) = self.window.as_ref().map(Arc::clone) {
+            self.set_input_capture(&window, false);
+        } else {
+            self.release_all();
+        }
+        self.send(ClientCommand::Close);
+        if let Some(diagnostics) = self.diagnostics.as_mut() {
+            diagnostics.terminated();
+        }
+        event_loop.exit();
+    }
+
+    fn handle_local_key(
+        &mut self,
+        event_loop: &ActiveEventLoop,
+        window: &Window,
+        event: &winit::event::KeyEvent,
+    ) -> bool {
+        if event.state == ElementState::Released
+            && self.local_shortcut_keys.remove(&event.physical_key)
+        {
+            return true;
+        }
+        if event.state != ElementState::Pressed {
+            return false;
+        }
+        if event.repeat && self.local_shortcut_keys.contains(&event.physical_key) {
+            return true;
+        }
+        let Some(command) = local_command(&event.logical_key, self.modifiers, self.fullscreen)
+        else {
+            return false;
+        };
+        self.local_shortcut_keys.insert(event.physical_key);
+        match command {
+            LocalCommand::ToggleFullscreen => {
+                self.relative_pointer_delta = (0.0, 0.0);
+                self.release_all();
+                self.fullscreen = !self.fullscreen;
+                let mode = self
+                    .fullscreen
+                    .then(|| Fullscreen::Borderless(window.current_monitor()));
+                window.set_fullscreen(mode);
+            }
+            LocalCommand::ExitFullscreen => {
+                self.relative_pointer_delta = (0.0, 0.0);
+                self.release_all();
+                self.fullscreen = false;
+                window.set_fullscreen(None);
+            }
+            LocalCommand::ExitSession => self.request_exit(event_loop),
+            LocalCommand::ToggleInputCapture => {
+                if !self.relative_pointer_available {
+                    return true;
+                }
+                self.input_capture_requested = !self.input_captured;
+                self.set_input_capture(window, self.input_capture_requested);
+            }
+        }
+        true
+    }
+
+    fn set_input_capture(&mut self, window: &Window, capture: bool) {
+        if capture && self.relative_pointer_available && self.desktop_connected {
+            if window
+                .set_cursor_grab(CursorGrabMode::Confined)
+                .or_else(|_| window.set_cursor_grab(CursorGrabMode::Locked))
+                .is_ok()
+            {
+                window.set_cursor_visible(false);
+                self.input_captured = true;
+                return;
+            }
+            self.input_capture_requested = false;
+        } else {
+            let _ = window.set_cursor_grab(CursorGrabMode::None);
+        }
+        window.set_cursor_visible(true);
+        self.input_captured = false;
+        self.relative_pointer_delta = (0.0, 0.0);
+        self.release_all();
+    }
+
+    fn flush_relative_pointer(&mut self) {
+        if !self.input_captured || !self.desktop_connected {
+            self.relative_pointer_delta = (0.0, 0.0);
+            return;
+        }
+        let (delta_x, delta_y) = take_relative_pointer_delta(&mut self.relative_pointer_delta);
+        if delta_x != 0 || delta_y != 0 {
+            self.send(ClientCommand::DesktopInput {
+                event: DesktopInputEvent::PointerDelta { delta_x, delta_y },
+            });
+        }
+    }
+
+    fn send_resize(&mut self) {
+        if !self.options.follow_window {
+            return;
+        }
+        let Some(window) = self.window.as_ref() else {
+            return;
+        };
+        let Some((max_width, max_height)) = bounded_desktop_size(window.inner_size()) else {
+            return;
+        };
+        if self.last_requested_size == (max_width, max_height) {
+            return;
+        }
+        self.last_requested_size = (max_width, max_height);
+        self.send(ClientCommand::DesktopResize {
+            max_width,
+            max_height,
+        });
+    }
+
+    fn handle_agent_event(&mut self, event_loop: &ActiveEventLoop, event: ServerEvent) {
+        match event {
+            ServerEvent::DesktopOpened { width, height, .. } => {
+                self.desktop_size = (width, height);
+                self.desktop_connected = true;
+                self.last_requested_size = (self.options.width, self.options.height);
+                if self.options.follow_window {
+                    self.resize_deadline = Some(Instant::now() + Duration::from_millis(500));
+                }
+                if let Some(window) = self.window.as_ref() {
+                    window.set_title("RemoteDesk Linux desktop");
+                }
+                if self.focused
+                    && self.input_capture_requested
+                    && self.relative_pointer_available
+                    && let Some(window) = self.window.as_ref().map(Arc::clone)
+                {
+                    self.set_input_capture(&window, true);
+                }
+                if let Some(diagnostics) = self.diagnostics.as_mut() {
+                    diagnostics.opened(width, height);
+                }
+            }
+            ServerEvent::DesktopFrameStart { metadata } => {
+                if self.assembler.is_some()
+                    || self.pending_metadata.is_some()
+                    || self.pending_ack_sequence.is_some()
+                {
+                    self.fail(
+                        event_loop,
+                        "desktop frame arrived before the previous presentation",
+                    );
+                    return;
+                }
+                self.pending_metadata = Some(metadata.clone());
+                match DesktopFrameAssembler::new(metadata) {
+                    Ok(assembler) => self.assembler = Some(assembler),
+                    Err(_) => self.fail(event_loop, "invalid frame metadata"),
+                }
+            }
+            ServerEvent::DesktopFrameChunk {
+                sequence,
+                index,
+                data,
+            } => {
+                let decoded = STANDARD_NO_PAD.decode(data);
+                let Some(assembler) = self.assembler.as_mut() else {
+                    self.fail(event_loop, "frame chunk arrived without metadata");
+                    return;
+                };
+                if assembler.sequence() != sequence
+                    || decoded
+                        .as_deref()
+                        .map_err(|_| ())
+                        .and_then(|bytes| assembler.push(index, bytes).map_err(|_| ()))
+                        .is_err()
+                {
+                    self.fail(event_loop, "invalid frame chunk");
+                }
+            }
+            ServerEvent::DesktopFrameComplete { sequence, sha256 } => {
+                let Some(assembler) = self.assembler.take() else {
+                    self.fail(event_loop, "frame completion arrived without metadata");
+                    return;
+                };
+                if assembler.sequence() != sequence {
+                    self.fail(event_loop, "frame sequence changed");
+                    return;
+                }
+                let decode_started = Instant::now();
+                let frame = match assembler.finish(&sha256) {
+                    Ok(frame) => frame,
+                    Err(_) => {
+                        self.fail(event_loop, "frame integrity check failed");
+                        return;
+                    }
+                };
+                let decode_latency_us = decode_started
+                    .elapsed()
+                    .as_micros()
+                    .try_into()
+                    .unwrap_or(u64::MAX);
+                let Some(metadata) = self.pending_metadata.take() else {
+                    self.fail(event_loop, "frame dimensions are missing");
+                    return;
+                };
+                self.desktop_size = (metadata.width, metadata.height);
+                if self.native_video_active {
+                    self.send(ClientCommand::DesktopFrameAck { sequence });
+                    if let Some(diagnostics) = self.diagnostics.as_mut() {
+                        diagnostics.native_capture(&metadata);
+                    }
+                    return;
+                }
+                self.pixels = frame
+                    .chunks_exact(4)
+                    .map(|pixel| u32::from_le_bytes([pixel[0], pixel[1], pixel[2], 0]))
+                    .collect();
+                self.pending_present_started = Some(Instant::now());
+                self.pending_ack_sequence = Some(sequence);
+                if let Some(diagnostics) = self.diagnostics.as_mut() {
+                    diagnostics.frame(&metadata, decode_latency_us);
+                }
+                if let Some(window) = self.window.as_ref() {
+                    window.request_redraw();
+                }
+            }
+            ServerEvent::DesktopH264Start { metadata } => {
+                if let Some(diagnostics) = self.diagnostics.as_mut() {
+                    diagnostics.h264_encoded(&metadata);
+                }
+                if self.native_mode_confirmed {
+                    self.native_h264_sequence = Some(metadata.sequence);
+                    if self.native_presented_waiting_metadata {
+                        self.acknowledge_native_presentation();
+                    }
+                }
+            }
+            ServerEvent::DesktopVideoModeChanged { mode } => match mode {
+                DesktopVideoMode::WebRtcH264 => {
+                    self.native_mode_requested = true;
+                    self.native_mode_confirmed = true;
+                    self.native_h264_sequence = None;
+                    self.native_presented_waiting_metadata = false;
+                }
+                DesktopVideoMode::ZlibBgra => {
+                    self.native_mode_requested = false;
+                    self.native_mode_confirmed = false;
+                    self.native_h264_sequence = None;
+                    self.native_presented_waiting_metadata = false;
+                    self.reset_native_video();
+                }
+            },
+            ServerEvent::DesktopH264Unavailable { reason_code } => {
+                #[cfg(windows)]
+                self.fallback_to_software_video(&reason_code);
+                #[cfg(not(windows))]
+                self.reset_native_video();
+            }
+            ServerEvent::DesktopClosed { reason } => self.fail(event_loop, &reason),
+            ServerEvent::Error { code, message } => {
+                self.fail(event_loop, &format!("{code}: {message}"));
+            }
+            _ => {}
+        }
+    }
+
+    fn fail(&mut self, event_loop: &ActiveEventLoop, message: &str) {
+        if let Some(window) = self.window.as_ref().map(Arc::clone) {
+            window.set_title(&format!("RemoteDesk Linux desktop - {message}"));
+            self.set_input_capture(&window, false);
+        } else {
+            self.release_all();
+        }
+        if let Some(diagnostics) = self.diagnostics.as_mut() {
+            diagnostics.failed();
+        }
+        event_loop.exit();
+    }
+
+    fn reconnecting(&mut self, attempt: u8, max_attempts: u8, delay_seconds: u64) {
+        if let Some(window) = self.window.as_ref().map(Arc::clone) {
+            self.set_input_capture(&window, false);
+        }
+        self.reset_native_video();
+        self.assembler = None;
+        self.pending_metadata = None;
+        self.pending_present_started = None;
+        self.pending_ack_sequence = None;
+        self.desktop_connected = false;
+        self.local_shortcut_keys.clear();
+        self.modifiers = ModifiersState::empty();
+        self.last_requested_size = (self.options.width, self.options.height);
+        if let Some(window) = self.window.as_ref() {
+            window.set_title(&format!(
+                "RemoteDesk Linux desktop - reconnecting {attempt}/{max_attempts} ({delay_seconds}s)"
+            ));
+        }
+        if let Some(diagnostics) = self.diagnostics.as_mut() {
+            diagnostics.reconnecting(attempt);
+        }
+    }
+
+    fn redraw(&mut self) {
+        if self.pixels.is_empty() {
+            return;
+        }
+        let Some(window) = self.window.as_ref() else {
+            return;
+        };
+        let local_size = window.inner_size();
+        let Some(viewport) = fit_viewport(local_size, self.desktop_size) else {
+            return;
+        };
+        let Some(surface) = self.surface.as_mut() else {
+            return;
+        };
+        let Some(width) = NonZeroU32::new(local_size.width) else {
+            return;
+        };
+        let Some(height) = NonZeroU32::new(local_size.height) else {
+            return;
+        };
+        if surface.resize(width, height).is_err() {
+            return;
+        }
+        if let Ok(mut buffer) = surface.buffer_mut() {
+            buffer.fill(0);
+            let remote_width = u64::from(self.desktop_size.0);
+            let remote_height = u64::from(self.desktop_size.1);
+            let local_width = u64::from(local_size.width);
+            for target_y in 0..viewport.height {
+                let source_y = u64::from(target_y) * remote_height / u64::from(viewport.height);
+                for target_x in 0..viewport.width {
+                    let source_x = u64::from(target_x) * remote_width / u64::from(viewport.width);
+                    let source_index = source_y * remote_width + source_x;
+                    let target_index = u64::from(viewport.y + target_y) * local_width
+                        + u64::from(viewport.x + target_x);
+                    if let (Ok(source_index), Ok(target_index)) =
+                        (usize::try_from(source_index), usize::try_from(target_index))
+                        && let (Some(source), Some(target)) =
+                            (self.pixels.get(source_index), buffer.get_mut(target_index))
+                    {
+                        *target = *source;
+                    }
+                }
+            }
+            let presented = buffer.present().is_ok();
+            if presented && let Some(sequence) = self.pending_ack_sequence.take() {
+                self.send(ClientCommand::DesktopFrameAck { sequence });
+            }
+            if presented
+                && let (Some(started), Some(diagnostics)) = (
+                    self.pending_present_started.take(),
+                    self.diagnostics.as_mut(),
+                )
+            {
+                diagnostics.presented(started.elapsed().as_micros().try_into().unwrap_or(u64::MAX));
+            }
+        }
+    }
+}
+
+#[derive(Clone, Copy, Debug, PartialEq, Eq)]
+struct Viewport {
+    x: u32,
+    y: u32,
+    width: u32,
+    height: u32,
+}
+
+fn fit_viewport(local: PhysicalSize<u32>, remote: (u16, u16)) -> Option<Viewport> {
+    if local.width == 0 || local.height == 0 || remote.0 == 0 || remote.1 == 0 {
+        return None;
+    }
+    let local_width = u64::from(local.width);
+    let local_height = u64::from(local.height);
+    let remote_width = u64::from(remote.0);
+    let remote_height = u64::from(remote.1);
+    let (width, height) = if local_width * remote_height <= local_height * remote_width {
+        (local_width, local_width * remote_height / remote_width)
+    } else {
+        (local_height * remote_width / remote_height, local_height)
+    };
+    let width = u32::try_from(width.max(1)).ok()?;
+    let height = u32::try_from(height.max(1)).ok()?;
+    Some(Viewport {
+        x: (local.width - width) / 2,
+        y: (local.height - height) / 2,
+        width,
+        height,
+    })
+}
+
+#[derive(Serialize)]
+struct DesktopDiagnosticSnapshot<'a> {
+    schema_version: u8,
+    session_id: &'a str,
+    state: &'a str,
+    updated_at_unix_ms: u64,
+    frame_count: u64,
+    frames_per_second: Option<f64>,
+    desktop_width: u16,
+    desktop_height: u16,
+    network_latency_ms: Option<f64>,
+    capture_latency_ms: Option<f64>,
+    encode_latency_ms: Option<f64>,
+    compression_level: Option<u8>,
+    compression_ratio_percent: Option<f64>,
+    decode_latency_ms: Option<f64>,
+    presentation_latency_ms: Option<f64>,
+    clipboard_read: bool,
+    clipboard_write: bool,
+    reconnect_attempt: u8,
+    error_code: Option<&'a str>,
+}
+
+struct DesktopDiagnostics {
+    path: PathBuf,
+    session_id: String,
+    state: &'static str,
+    frame_count: u64,
+    frames_per_second: Option<f64>,
+    frame_rate_started: Instant,
+    frame_rate_frames: u32,
+    desktop_size: (u16, u16),
+    network_latency_ms: Option<f64>,
+    capture_latency_ms: Option<f64>,
+    encode_latency_ms: Option<f64>,
+    compression_level: Option<u8>,
+    compression_ratio_percent: Option<f64>,
+    decode_latency_ms: Option<f64>,
+    presentation_latency_ms: Option<f64>,
+    clipboard_read: bool,
+    clipboard_write: bool,
+    reconnect_attempt: u8,
+    error_code: Option<&'static str>,
+    last_write: Instant,
+}
+
+impl DesktopDiagnostics {
+    fn new(session_id: String) -> Result<Self, String> {
+        let directory = env::temp_dir()
+            .join("RemoteDesk")
+            .join("linux-desktop-sessions");
+        fs::create_dir_all(&directory)
+            .map_err(|error| format!("unable to create desktop diagnostics directory: {error}"))?;
+        let diagnostics = Self {
+            path: directory.join(format!("{session_id}.json")),
+            session_id,
+            state: "connecting",
+            frame_count: 0,
+            frames_per_second: None,
+            frame_rate_started: Instant::now(),
+            frame_rate_frames: 0,
+            desktop_size: (0, 0),
+            network_latency_ms: None,
+            capture_latency_ms: None,
+            encode_latency_ms: None,
+            compression_level: None,
+            compression_ratio_percent: None,
+            decode_latency_ms: None,
+            presentation_latency_ms: None,
+            clipboard_read: false,
+            clipboard_write: false,
+            reconnect_attempt: 0,
+            error_code: None,
+            last_write: Instant::now(),
+        };
+        diagnostics.write()?;
+        Ok(diagnostics)
+    }
+
+    fn opened(&mut self, width: u16, height: u16) {
+        self.state = "connected";
+        self.reconnect_attempt = 0;
+        self.desktop_size = (width, height);
+        self.write_best_effort();
+    }
+
+    fn reconnecting(&mut self, attempt: u8) {
+        self.state = "reconnecting";
+        self.reconnect_attempt = attempt;
+        self.clipboard_read = false;
+        self.clipboard_write = false;
+        self.error_code = None;
+        self.write_best_effort();
+    }
+
+    fn clipboard_available(&mut self, read: bool, write: bool) {
+        self.clipboard_read = read;
+        self.clipboard_write = write;
+        self.write_best_effort();
+    }
+
+    fn frame(&mut self, metadata: &DesktopFrameMetadata, decode_latency_us: u64) {
+        self.record_presented_frame();
+        self.desktop_size = (metadata.width, metadata.height);
+        self.capture_latency_ms = Some(microseconds_to_milliseconds(metadata.capture_latency_us));
+        self.encode_latency_ms = Some(microseconds_to_milliseconds(metadata.encode_latency_us));
+        self.compression_level = Some(metadata.compression_level);
+        self.compression_ratio_percent =
+            Some(metadata.compressed_bytes as f64 * 100.0 / metadata.uncompressed_bytes as f64);
+        self.decode_latency_ms = Some(microseconds_to_milliseconds(decode_latency_us));
+        self.write_throttled();
+    }
+
+    fn presented(&mut self, latency_us: u64) {
+        self.presentation_latency_ms = Some(microseconds_to_milliseconds(latency_us));
+        self.write_throttled();
+    }
+
+    fn native_video_frame(&mut self, decode_latency_us: u64, presentation_latency_us: u64) {
+        self.record_presented_frame();
+        self.decode_latency_ms = Some(microseconds_to_milliseconds(decode_latency_us));
+        self.presentation_latency_ms = Some(microseconds_to_milliseconds(presentation_latency_us));
+        self.compression_level = None;
+        self.write_throttled();
+    }
+
+    fn native_capture(&mut self, metadata: &DesktopFrameMetadata) {
+        self.desktop_size = (metadata.width, metadata.height);
+        self.capture_latency_ms = Some(microseconds_to_milliseconds(metadata.capture_latency_us));
+        self.write_throttled();
+    }
+
+    fn h264_encoded(&mut self, metadata: &DesktopH264Metadata) {
+        self.desktop_size = (metadata.width, metadata.height);
+        self.capture_latency_ms = Some(microseconds_to_milliseconds(metadata.capture_latency_us));
+        self.encode_latency_ms = Some(microseconds_to_milliseconds(metadata.encode_latency_us));
+        let uncompressed_bytes = usize::from(metadata.width)
+            .saturating_mul(usize::from(metadata.height))
+            .saturating_mul(4);
+        self.compression_ratio_percent = (uncompressed_bytes > 0)
+            .then_some(metadata.access_unit_bytes as f64 * 100.0 / uncompressed_bytes as f64);
+        self.compression_level = None;
+        self.write_throttled();
+    }
+
+    fn record_presented_frame(&mut self) {
+        self.state = "connected";
+        self.frame_count = self.frame_count.saturating_add(1);
+        self.frame_rate_frames = self.frame_rate_frames.saturating_add(1);
+        let elapsed = self.frame_rate_started.elapsed();
+        if elapsed >= Duration::from_secs(1) {
+            self.frames_per_second =
+                Some(f64::from(self.frame_rate_frames) / elapsed.as_secs_f64());
+            self.frame_rate_frames = 0;
+            self.frame_rate_started = Instant::now();
+        }
+    }
+
+    fn network_latency(&mut self, latency_us: u64) {
+        self.network_latency_ms = Some(microseconds_to_milliseconds(latency_us));
+        self.write_throttled();
+    }
+
+    fn failed(&mut self) {
+        self.state = "failed";
+        self.error_code = Some("desktop_viewer_failed");
+        self.write_best_effort();
+    }
+
+    fn terminated(&mut self) {
+        self.state = "terminated";
+        self.error_code = None;
+        self.write_best_effort();
+    }
+
+    fn write_throttled(&mut self) {
+        if self.last_write.elapsed() >= Duration::from_millis(250) {
+            self.write_best_effort();
+        }
+    }
+
+    fn write_best_effort(&mut self) {
+        if self.write().is_ok() {
+            self.last_write = Instant::now();
+        }
+    }
+
+    fn write(&self) -> Result<(), String> {
+        let snapshot = DesktopDiagnosticSnapshot {
+            schema_version: 1,
+            session_id: &self.session_id,
+            state: self.state,
+            updated_at_unix_ms: unix_millis(),
+            frame_count: self.frame_count,
+            frames_per_second: self.frames_per_second,
+            desktop_width: self.desktop_size.0,
+            desktop_height: self.desktop_size.1,
+            network_latency_ms: self.network_latency_ms,
+            capture_latency_ms: self.capture_latency_ms,
+            encode_latency_ms: self.encode_latency_ms,
+            compression_level: self.compression_level,
+            compression_ratio_percent: self.compression_ratio_percent,
+            decode_latency_ms: self.decode_latency_ms,
+            presentation_latency_ms: self.presentation_latency_ms,
+            clipboard_read: self.clipboard_read,
+            clipboard_write: self.clipboard_write,
+            reconnect_attempt: self.reconnect_attempt,
+            error_code: self.error_code,
+        };
+        fs::write(
+            &self.path,
+            serde_json::to_vec(&snapshot).map_err(|error| error.to_string())?,
+        )
+        .map_err(|error| error.to_string())
+    }
+}
+
+fn unix_millis() -> u64 {
+    SystemTime::now()
+        .duration_since(UNIX_EPOCH)
+        .unwrap_or_default()
+        .as_millis()
+        .try_into()
+        .unwrap_or(u64::MAX)
+}
+
+fn microseconds_to_milliseconds(value: u64) -> f64 {
+    Duration::from_micros(value).as_secs_f64() * 1_000.0
+}
+
+impl ApplicationHandler<ViewerEvent> for DesktopApp {
+    fn about_to_wait(&mut self, event_loop: &ActiveEventLoop) {
+        self.flush_relative_pointer();
+        if let Some(deadline) = self.resize_deadline {
+            if let Some(remaining) = deadline.checked_duration_since(Instant::now()) {
+                event_loop.set_control_flow(ControlFlow::wait_duration(remaining));
+            } else {
+                self.send_resize();
+                self.resize_deadline = None;
+                event_loop.set_control_flow(ControlFlow::Wait);
+            }
+        }
+    }
+
+    fn resumed(&mut self, event_loop: &ActiveEventLoop) {
+        let fullscreen = self
+            .options
+            .fullscreen
+            .then(|| Fullscreen::Borderless(event_loop.primary_monitor()));
+        let attributes = WindowAttributes::default()
+            .with_title("RemoteDesk Linux desktop")
+            .with_inner_size(PhysicalSize::new(
+                u32::from(self.options.width),
+                u32::from(self.options.height),
+            ))
+            .with_fullscreen(fullscreen);
+        let Ok(window) = event_loop.create_window(attributes) else {
+            self.fail(event_loop, "unable to create desktop window");
+            return;
+        };
+        let window = Arc::new(window);
+        self.focused = window.has_focus();
+        self.surface = Surface::new(&self.context, Arc::clone(&window)).ok();
+        self.window = Some(window);
+        if self.options.follow_window {
+            self.resize_deadline = Some(Instant::now() + Duration::from_millis(500));
+        }
+        if self.surface.is_none() {
+            self.fail(event_loop, "unable to create desktop surface");
+        }
+    }
+
+    fn window_event(
+        &mut self,
+        event_loop: &ActiveEventLoop,
+        window_id: winit::window::WindowId,
+        event: WindowEvent,
+    ) {
+        let Some(window) = self.window.as_ref().map(Arc::clone) else {
+            return;
+        };
+        if window.id() != window_id {
+            return;
+        }
+        match event {
+            WindowEvent::CloseRequested => self.request_exit(event_loop),
+            WindowEvent::Focused(focused) => {
+                self.focused = focused;
+                if !focused {
+                    self.set_input_capture(&window, false);
+                    self.modifiers = ModifiersState::empty();
+                    self.local_shortcut_keys.clear();
+                } else if self.desktop_connected
+                    && self.input_capture_requested
+                    && self.relative_pointer_available
+                {
+                    self.set_input_capture(&window, true);
+                }
+            }
+            WindowEvent::KeyboardInput { event, .. } if self.focused => {
+                if !self.handle_local_key(event_loop, &window, &event)
+                    && self.desktop_connected
+                    && let Some(keysym) = key_to_keysym(&event.logical_key)
+                {
+                    self.send(ClientCommand::DesktopInput {
+                        event: DesktopInputEvent::Key {
+                            keysym,
+                            state: if event.state == ElementState::Pressed {
+                                DesktopKeyState::Pressed
+                            } else {
+                                DesktopKeyState::Released
+                            },
+                        },
+                    });
+                }
+            }
+            WindowEvent::ModifiersChanged(modifiers) => self.modifiers = modifiers.state(),
+            WindowEvent::CursorMoved { position, .. }
+                if self.focused && self.desktop_connected && !self.input_captured =>
+            {
+                let size = window.inner_size();
+                if let Some((x, y)) = remote_pointer(position, size, self.desktop_size) {
+                    self.send(ClientCommand::DesktopInput {
+                        event: DesktopInputEvent::PointerMove { x, y },
+                    });
+                }
+            }
+            WindowEvent::MouseInput { state, button, .. }
+                if self.focused && self.desktop_connected =>
+            {
+                if let Some(button) = desktop_button(button) {
+                    self.send(ClientCommand::DesktopInput {
+                        event: DesktopInputEvent::PointerButton {
+                            button,
+                            pressed: state == ElementState::Pressed,
+                        },
+                    });
+                }
+            }
+            WindowEvent::MouseWheel { delta, .. } if self.focused && self.desktop_connected => {
+                let (horizontal, vertical) = wheel_units(delta);
+                if horizontal != 0 || vertical != 0 {
+                    self.send(ClientCommand::DesktopInput {
+                        event: DesktopInputEvent::Wheel {
+                            horizontal,
+                            vertical,
+                        },
+                    });
+                }
+            }
+            WindowEvent::Resized(_) => {
+                window.request_redraw();
+                if self.options.follow_window {
+                    self.resize_deadline = Some(Instant::now() + Duration::from_millis(500));
+                }
+            }
+            WindowEvent::RedrawRequested => self.redraw(),
+            _ => {}
+        }
+    }
+
+    fn device_event(&mut self, _: &ActiveEventLoop, _: winit::event::DeviceId, event: DeviceEvent) {
+        if self.focused
+            && self.desktop_connected
+            && self.input_captured
+            && let DeviceEvent::MouseMotion { delta } = event
+            && delta.0.is_finite()
+            && delta.1.is_finite()
+        {
+            let limit = f64::from(MAX_RELATIVE_POINTER_DELTA);
+            self.relative_pointer_delta.0 =
+                (self.relative_pointer_delta.0 + delta.0).clamp(-limit, limit);
+            self.relative_pointer_delta.1 =
+                (self.relative_pointer_delta.1 + delta.1).clamp(-limit, limit);
+        }
+    }
+
+    fn user_event(&mut self, event_loop: &ActiveEventLoop, event: ViewerEvent) {
+        match event {
+            ViewerEvent::Agent(event) => self.handle_agent_event(event_loop, event),
+            ViewerEvent::NetworkLatency(latency_us) => {
+                if let Some(diagnostics) = self.diagnostics.as_mut() {
+                    diagnostics.network_latency(latency_us);
+                }
+            }
+            ViewerEvent::Reconnecting {
+                attempt,
+                max_attempts,
+                delay_seconds,
+            } => self.reconnecting(attempt, max_attempts, delay_seconds),
+            ViewerEvent::Failed(error) => self.fail(event_loop, &error),
+            ViewerEvent::NativeH264Ready => {
+                if let Some(access_unit) = self.native_frames.take() {
+                    self.handle_native_h264(access_unit);
+                }
+            }
+            ViewerEvent::NativeH264Reset => self.reset_native_video(),
+            ViewerEvent::RelativePointerAvailable(available) => {
+                self.relative_pointer_available = available;
+                if !available && let Some(window) = self.window.as_ref().map(Arc::clone) {
+                    self.set_input_capture(&window, false);
+                }
+            }
+            ViewerEvent::ClipboardAvailable { read, write } => {
+                if let Some(diagnostics) = self.diagnostics.as_mut() {
+                    diagnostics.clipboard_available(read, write);
+                }
+            }
+        }
+    }
+}
+
+fn bounded_desktop_size(size: PhysicalSize<u32>) -> Option<(u16, u16)> {
+    if size.width == 0 || size.height == 0 {
+        return None;
+    }
+    Some((
+        u16::try_from(size.width.clamp(200, 8_192)).ok()?,
+        u16::try_from(size.height.clamp(200, 8_192)).ok()?,
+    ))
+}
+
+fn remote_pointer(
+    position: PhysicalPosition<f64>,
+    local: PhysicalSize<u32>,
+    remote: (u16, u16),
+) -> Option<(u16, u16)> {
+    if !position.x.is_finite()
+        || !position.y.is_finite()
+        || local.width == 0
+        || local.height == 0
+        || remote.0 == 0
+        || remote.1 == 0
+    {
+        return None;
+    }
+    let viewport = fit_viewport(local, remote)?;
+    let left = f64::from(viewport.x);
+    let top = f64::from(viewport.y);
+    let right = left + f64::from(viewport.width);
+    let bottom = top + f64::from(viewport.height);
+    if position.x < left || position.x >= right || position.y < top || position.y >= bottom {
+        return None;
+    }
+    let x = ((position.x - left) / f64::from(viewport.width.saturating_sub(1).max(1))
+        * f64::from(remote.0.saturating_sub(1)))
+    .round()
+    .clamp(0.0, f64::from(remote.0.saturating_sub(1))) as u16;
+    let y = ((position.y - top) / f64::from(viewport.height.saturating_sub(1).max(1))
+        * f64::from(remote.1.saturating_sub(1)))
+    .round()
+    .clamp(0.0, f64::from(remote.1.saturating_sub(1))) as u16;
+    Some((x, y))
+}
+
+fn desktop_button(button: MouseButton) -> Option<DesktopButton> {
+    match button {
+        MouseButton::Left => Some(DesktopButton::Left),
+        MouseButton::Middle => Some(DesktopButton::Middle),
+        MouseButton::Right => Some(DesktopButton::Right),
+        MouseButton::Back => Some(DesktopButton::Back),
+        MouseButton::Forward => Some(DesktopButton::Forward),
+        MouseButton::Other(_) => None,
+    }
+}
+
+fn wheel_units(delta: MouseScrollDelta) -> (i16, i16) {
+    let (x, y) = match delta {
+        MouseScrollDelta::LineDelta(x, y) => (f64::from(x), f64::from(y)),
+        MouseScrollDelta::PixelDelta(position) => (position.x / 120.0, position.y / 120.0),
+    };
+    (bounded_wheel(x), bounded_wheel(y))
+}
+
+fn bounded_wheel(value: f64) -> i16 {
+    if !value.is_finite() || value.abs() < 0.01 {
+        0
+    } else {
+        value.round().clamp(-32.0, 32.0) as i16
+    }
+}
+
+fn take_relative_pointer_delta(pending: &mut (f64, f64)) -> (i16, i16) {
+    let limit = f64::from(MAX_RELATIVE_POINTER_DELTA);
+    let delta_x = pending.0.trunc().clamp(-limit, limit) as i16;
+    let delta_y = pending.1.trunc().clamp(-limit, limit) as i16;
+    pending.0 -= f64::from(delta_x);
+    pending.1 -= f64::from(delta_y);
+    (delta_x, delta_y)
+}
+
+fn supports_relative_pointer(protocol_minor: u16) -> bool {
+    protocol_minor >= RELATIVE_POINTER_PROTOCOL_MINOR
+}
+
+fn supports_wayland_resume(protocol_minor: u16) -> bool {
+    protocol_minor >= WAYLAND_RESUME_PROTOCOL_MINOR
+}
+
+fn supports_opus_audio(protocol_minor: u16) -> bool {
+    protocol_minor >= OPUS_AUDIO_PROTOCOL_MINOR
+}
+
+fn key_to_keysym(key: &Key) -> Option<u32> {
+    let named = match key {
+        Key::Named(NamedKey::Backspace) => 0xff08,
+        Key::Named(NamedKey::Tab) => 0xff09,
+        Key::Named(NamedKey::Enter) => 0xff0d,
+        Key::Named(NamedKey::Escape) => 0xff1b,
+        Key::Named(NamedKey::Home) => 0xff50,
+        Key::Named(NamedKey::ArrowLeft) => 0xff51,
+        Key::Named(NamedKey::ArrowUp) => 0xff52,
+        Key::Named(NamedKey::ArrowRight) => 0xff53,
+        Key::Named(NamedKey::ArrowDown) => 0xff54,
+        Key::Named(NamedKey::PageUp) => 0xff55,
+        Key::Named(NamedKey::PageDown) => 0xff56,
+        Key::Named(NamedKey::End) => 0xff57,
+        Key::Named(NamedKey::Insert) => 0xff63,
+        Key::Named(NamedKey::Delete) => 0xffff,
+        Key::Named(NamedKey::CapsLock) => 0xffe5,
+        Key::Named(NamedKey::NumLock) => 0xff7f,
+        Key::Named(NamedKey::ScrollLock) => 0xff14,
+        Key::Named(NamedKey::PrintScreen) => 0xff61,
+        Key::Named(NamedKey::Pause) => 0xff13,
+        Key::Named(NamedKey::ContextMenu) => 0xff67,
+        Key::Named(NamedKey::Shift) => 0xffe1,
+        Key::Named(NamedKey::Control) => 0xffe3,
+        Key::Named(NamedKey::Alt) => 0xffe9,
+        Key::Named(NamedKey::Super) => 0xffeb,
+        Key::Named(NamedKey::F1) => 0xffbe,
+        Key::Named(NamedKey::F2) => 0xffbf,
+        Key::Named(NamedKey::F3) => 0xffc0,
+        Key::Named(NamedKey::F4) => 0xffc1,
+        Key::Named(NamedKey::F5) => 0xffc2,
+        Key::Named(NamedKey::F6) => 0xffc3,
+        Key::Named(NamedKey::F7) => 0xffc4,
+        Key::Named(NamedKey::F8) => 0xffc5,
+        Key::Named(NamedKey::F9) => 0xffc6,
+        Key::Named(NamedKey::F10) => 0xffc7,
+        Key::Named(NamedKey::F12) => 0xffc9,
+        Key::Character(value) => {
+            let mut characters = value.chars();
+            let character = characters.next()?;
+            if characters.next().is_some() {
+                return None;
+            }
+            let value = u32::from(character);
+            return Some(if value <= 0xff {
+                value
+            } else {
+                0x0100_0000 | value
+            });
+        }
+        _ => return None,
+    };
+    Some(named)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn pointer_mapping_reaches_remote_edges() {
+        let local = PhysicalSize::new(960, 540);
+        assert_eq!(
+            remote_pointer(PhysicalPosition::new(959.0, 539.0), local, (1920, 1080)),
+            Some((1919, 1079))
+        );
+    }
+
+    #[test]
+    fn follow_window_dimensions_are_bounded() {
+        assert_eq!(
+            bounded_desktop_size(PhysicalSize::new(1_600, 900)),
+            Some((1_600, 900))
+        );
+        assert_eq!(
+            bounded_desktop_size(PhysicalSize::new(100, 20_000)),
+            Some((200, 8_192))
+        );
+        assert_eq!(bounded_desktop_size(PhysicalSize::new(0, 900)), None);
+    }
+
+    #[test]
+    fn reconnect_policy_is_bounded_and_exponential() {
+        let mut policy = ReconnectPolicy::default();
+        assert_eq!(policy.next_delay(), Some(Duration::from_secs(1)));
+        assert_eq!(policy.next_delay(), Some(Duration::from_secs(2)));
+        assert_eq!(policy.next_delay(), Some(Duration::from_secs(4)));
+        assert_eq!(policy.next_delay(), None);
+    }
+
+    #[test]
+    fn aspect_fit_pointer_ignores_letterbox_bars() {
+        let local = PhysicalSize::new(1_000, 1_000);
+        assert_eq!(
+            fit_viewport(local, (1920, 1080)),
+            Some(Viewport {
+                x: 0,
+                y: 219,
+                width: 1_000,
+                height: 562,
+            })
+        );
+        assert_eq!(
+            remote_pointer(PhysicalPosition::new(500.0, 100.0), local, (1920, 1080)),
+            None
+        );
+        assert_eq!(
+            remote_pointer(PhysicalPosition::new(499.5, 499.5), local, (1920, 1080)),
+            Some((960, 540))
+        );
+    }
+
+    #[test]
+    fn keysyms_cover_text_navigation_and_modifiers() {
+        assert_eq!(key_to_keysym(&Key::Character("a".into())), Some(0x61));
+        assert_eq!(
+            key_to_keysym(&Key::Named(NamedKey::ArrowLeft)),
+            Some(0xff51)
+        );
+        assert_eq!(key_to_keysym(&Key::Named(NamedKey::Control)), Some(0xffe3));
+        assert_eq!(key_to_keysym(&Key::Named(NamedKey::CapsLock)), Some(0xffe5));
+    }
+
+    #[test]
+    fn local_shortcuts_cover_fullscreen_and_exit() {
+        assert_eq!(
+            local_command(&Key::Named(NamedKey::F11), ModifiersState::empty(), false),
+            Some(LocalCommand::ToggleFullscreen)
+        );
+        assert_eq!(
+            local_command(&Key::Named(NamedKey::Enter), ModifiersState::ALT, false),
+            Some(LocalCommand::ToggleFullscreen)
+        );
+        assert_eq!(
+            local_command(
+                &Key::Character("q".into()),
+                ModifiersState::CONTROL | ModifiersState::SHIFT,
+                false
+            ),
+            Some(LocalCommand::ExitSession)
+        );
+        assert_eq!(
+            local_command(&Key::Named(NamedKey::Escape), ModifiersState::empty(), true),
+            Some(LocalCommand::ExitFullscreen)
+        );
+        assert_eq!(
+            local_command(
+                &Key::Named(NamedKey::Home),
+                ModifiersState::CONTROL | ModifiersState::ALT,
+                false,
+            ),
+            Some(LocalCommand::ToggleInputCapture)
+        );
+    }
+
+    #[test]
+    fn relative_pointer_motion_is_coalesced_bounded_and_keeps_fractional_remainder() {
+        let mut pending = (4_500.75, -2.25);
+        assert_eq!(take_relative_pointer_delta(&mut pending), (4_096, -2));
+        assert_eq!(pending, (404.75, -0.25));
+        assert_eq!(take_relative_pointer_delta(&mut pending), (404, 0));
+        assert_eq!(pending, (0.75, -0.25));
+    }
+
+    #[test]
+    fn relative_pointer_requires_protocol_minor_ten() {
+        assert!(!supports_relative_pointer(9));
+        assert!(supports_relative_pointer(10));
+        assert!(supports_relative_pointer(11));
+    }
+
+    #[test]
+    fn wayland_resume_requires_protocol_minor_twelve() {
+        assert!(!supports_wayland_resume(11));
+        assert!(supports_wayland_resume(12));
+        assert!(supports_wayland_resume(13));
+    }
+
+    #[test]
+    fn opus_audio_requires_protocol_minor_fourteen() {
+        assert!(!supports_opus_audio(13));
+        assert!(supports_opus_audio(14));
+        assert!(supports_opus_audio(15));
+    }
+
+    fn h264_access_unit(keyframe: bool) -> RemoteH264AccessUnit {
+        RemoteH264AccessUnit {
+            data: vec![0, 0, 0, 1, if keyframe { 0x65 } else { 0x41 }].into(),
+            rtp_timestamp: 90_000,
+            duration: Duration::from_millis(33),
+            keyframe,
+        }
+    }
+
+    #[test]
+    fn native_mailbox_preserves_recovery_frames_and_resets_after_overflow() {
+        let mut state = NativeFrameMailboxState::default();
+        assert_eq!(
+            state.stage(h264_access_unit(true)),
+            NativeFramePublish::Accepted
+        );
+        assert_eq!(
+            state.stage(h264_access_unit(false)),
+            NativeFramePublish::WaitingForKeyframe
+        );
+        assert!(state.pending.as_ref().is_some_and(|unit| unit.keyframe));
+
+        state.pending = Some(h264_access_unit(false));
+        assert_eq!(
+            state.stage(h264_access_unit(false)),
+            NativeFramePublish::Overflow
+        );
+        assert!(state.pending.is_none());
+        assert_eq!(
+            state.stage(h264_access_unit(false)),
+            NativeFramePublish::WaitingForKeyframe
+        );
+        assert_eq!(
+            state.stage(h264_access_unit(true)),
+            NativeFramePublish::Accepted
+        );
+    }
+}
diff --git a/client/helpers/linux-terminal/src/main.rs b/client/helpers/linux-terminal/src/main.rs
new file mode 100644
index 0000000..a6a36ea
--- /dev/null
+++ b/client/helpers/linux-terminal/src/main.rs
@@ -0,0 +1,2488 @@
+use async_trait::async_trait;
+use base64::{
+    Engine as _,
+    engine::general_purpose::{STANDARD_NO_PAD, URL_SAFE_NO_PAD},
+};
+use crossterm::event::{Event, KeyCode, KeyEvent, KeyEventKind, KeyModifiers};
+use ed25519_dalek::{Signer as _, SigningKey};
+use futures_util::{SinkExt as _, StreamExt as _};
+use inquire::Password;
+use remotedesk_agent_runtime::{
+    AuthChallenge, ClientCommand, EdgeNegotiationClient, EdgeNegotiationSession, EdgeRelayAccess,
+    EdgeWebRtcRole, FILE_CHUNK_BYTES, MAX_FILE_BYTES, OPUS_AUDIO_PROTOCOL_MINOR, PROTOCOL_MAJOR,
+    PROTOCOL_MINOR, RelayStream, ServerEvent, WebRtcIceServer, WebRtcSession, WebRtcSessionConfig,
+    WebRtcSessionError, WebRtcSignalMessage, WebRtcSignalTransport, connect_edge_relay,
+    edge_device_id, establish_edge_webrtc, establish_webrtc,
+};
+#[cfg(windows)]
+use remotedesk_credential_store::{
+    LinuxAgentIdentityRef, linux_agent_identity_load, linux_agent_identity_save,
+};
+use remotedesk_protocol::{
+    EdgeNegotiationEndpoint, EdgeNegotiationKind, EdgeSessionIntentV1, EdgeSessionType,
+    SIGNAL_NONCE_LENGTH,
+};
+use reqwest::{Client, StatusCode, redirect::Policy};
+use rustls::client::danger::{HandshakeSignatureValid, ServerCertVerified, ServerCertVerifier};
+use rustls::pki_types::{CertificateDer, ServerName, UnixTime};
+use serde::{Deserialize, Serialize};
+use sha2::{Digest as _, Sha256};
+use std::env;
+use std::io::Write as _;
+use std::path::{Path, PathBuf};
+use std::process::ExitCode;
+use std::sync::Arc;
+use std::time::Duration;
+use tokio::io::{AsyncReadExt as _, AsyncSeekExt as _, AsyncWriteExt as _, SeekFrom};
+use tokio::sync::mpsc;
+use tokio_tungstenite::{
+    Connector, MaybeTlsStream, WebSocketStream, client_async_tls_with_config, tungstenite::Message,
+};
+use url::{Host, Url};
+use zeroize::Zeroizing;
+
+const IDENTITY_TARGET: &str = "RemoteDesk/Linux/client-identity";
+const IDENTITY_SERVICE: &str = "RemoteDesk Linux Agent";
+const IDENTITY_OWNER: &str = "RemoteDesk";
+const EDGE_RESPONSE_LIMIT: usize = 16 * 1024;
+const DIRECT_WEBRTC_PROTOCOL_MINOR: u16 = 13;
+const DIRECT_SIGNAL_PAYLOAD_BYTES: usize = 60 * 1024;
+
+#[derive(Debug, PartialEq, Eq)]
+struct Args {
+    target: String,
+    user: String,
+    certificate_sha256: [u8; 32],
+    probe_json: bool,
+    pair: bool,
+    agent_public_key: Option<String>,
+    transfer: Option<FileTransfer>,
+    edge_api_url: Option<Url>,
+    desktop: Option<DesktopOptions>,
+    session_id: Option<String>,
+}
+
+#[derive(Clone, Copy, Debug, PartialEq, Eq)]
+struct DesktopOptions {
+    width: u16,
+    height: u16,
+    frames_per_second: u8,
+    fullscreen: bool,
+    follow_window: bool,
+    capture_input: bool,
+    clipboard_read: bool,
+    clipboard_write: bool,
+}
+
+struct AuthenticatedAgent {
+    device_public_key: String,
+    edge_signaling_online: bool,
+    protocol_minor: u16,
+    permissions: Vec<String>,
+}
+
+struct AuthenticatedAgentConnection {
+    socket: WebSocketStream<MaybeTlsStream<RelayStream>>,
+    realtime: Option<WebRtcSession>,
+    edge_session_id: Option<String>,
+    protocol_minor: u16,
+    clipboard_read: bool,
+    clipboard_write: bool,
+}
+
+impl AuthenticatedAgentConnection {
+    async fn close_realtime(&mut self) {
+        if let Some(session) = self.realtime.take() {
+            let _ = session.close().await;
+        }
+    }
+}
+
+impl std::ops::Deref for AuthenticatedAgentConnection {
+    type Target = WebSocketStream<MaybeTlsStream<RelayStream>>;
+
+    fn deref(&self) -> &Self::Target {
+        &self.socket
+    }
+}
+
+impl std::ops::DerefMut for AuthenticatedAgentConnection {
+    fn deref_mut(&mut self) -> &mut Self::Target {
+        &mut self.socket
+    }
+}
+
+struct DirectClientSignalTransport<'a> {
+    socket: &'a mut WebSocketStream<MaybeTlsStream<RelayStream>>,
+}
+
+#[async_trait]
+impl WebRtcSignalTransport for DirectClientSignalTransport<'_> {
+    async fn send(&mut self, message: WebRtcSignalMessage) -> Result<(), WebRtcSessionError> {
+        let message = WebRtcSignalMessage::new_direct(message.kind, message.payload)?;
+        if message.payload.len() > DIRECT_SIGNAL_PAYLOAD_BYTES {
+            return Err(WebRtcSessionError::InvalidSignal);
+        }
+        send_command(
+            self.socket,
+            &ClientCommand::DirectWebRtcSignal {
+                kind: message.kind.as_str().into(),
+                payload: message.payload,
+            },
+        )
+        .await
+        .map_err(|_| WebRtcSessionError::SignalingTransport)
+    }
+
+    async fn poll(&mut self) -> Result<Vec<WebRtcSignalMessage>, WebRtcSessionError> {
+        let event =
+            match tokio::time::timeout(Duration::from_millis(25), receive_event(self.socket)).await
+            {
+                Err(_) => return Ok(Vec::new()),
+                Ok(Ok(event)) => event,
+                Ok(Err(_)) => return Err(WebRtcSessionError::SignalingTransport),
+            };
+        let ServerEvent::DirectWebRtcSignal { kind, payload } = event else {
+            return Err(WebRtcSessionError::UnexpectedSignal);
+        };
+        if payload.len() > DIRECT_SIGNAL_PAYLOAD_BYTES {
+            return Err(WebRtcSessionError::InvalidSignal);
+        }
+        let kind =
+            EdgeNegotiationKind::parse(&kind).map_err(|_| WebRtcSessionError::InvalidSignal)?;
+        Ok(vec![WebRtcSignalMessage::new_direct(kind, payload)?])
+    }
+}
+
+#[derive(Debug, PartialEq, Eq)]
+enum FileTransfer {
+    Upload { local: PathBuf, remote: String },
+    Download { remote: String, local: PathBuf },
+}
+
+#[derive(Debug)]
+struct PinnedCertificateVerifier {
+    expected_sha256: [u8; 32],
+    supported_algorithms: rustls::crypto::WebPkiSupportedAlgorithms,
+}
+
+impl ServerCertVerifier for PinnedCertificateVerifier {
+    fn verify_server_cert(
+        &self,
+        end_entity: &CertificateDer<'_>,
+        _: &[CertificateDer<'_>],
+        _: &ServerName<'_>,
+        _: &[u8],
+        _: UnixTime,
+    ) -> Result<ServerCertVerified, rustls::Error> {
+        if self.expected_sha256 != [0; 32]
+            && Sha256::digest(end_entity.as_ref()).as_slice() != self.expected_sha256
+        {
+            return Err(rustls::Error::General(
+                "Linux Agent TLS certificate fingerprint mismatch".to_owned(),
+            ));
+        }
+        Ok(ServerCertVerified::assertion())
+    }
+
+    fn verify_tls12_signature(
+        &self,
+        message: &[u8],
+        cert: &CertificateDer<'_>,
+        signature: &rustls::DigitallySignedStruct,
+    ) -> Result<HandshakeSignatureValid, rustls::Error> {
+        rustls::crypto::verify_tls12_signature(message, cert, signature, &self.supported_algorithms)
+    }
+
+    fn verify_tls13_signature(
+        &self,
+        message: &[u8],
+        cert: &CertificateDer<'_>,
+        signature: &rustls::DigitallySignedStruct,
+    ) -> Result<HandshakeSignatureValid, rustls::Error> {
+        rustls::crypto::verify_tls13_signature(message, cert, signature, &self.supported_algorithms)
+    }
+
+    fn supported_verify_schemes(&self) -> Vec<rustls::SignatureScheme> {
+        self.supported_algorithms.supported_schemes()
+    }
+}
+
+enum ConsoleInput {
+    Bytes(Vec<u8>),
+    Resize { cols: u16, rows: u16 },
+    Close,
+}
+
+struct RawModeGuard;
+
+impl RawModeGuard {
+    fn enable() -> Result<Self, String> {
+        crossterm::terminal::enable_raw_mode()
+            .map_err(|error| format!("unable to enable terminal raw mode: {error}"))?;
+        Ok(Self)
+    }
+}
+
+impl Drop for RawModeGuard {
+    fn drop(&mut self) {
+        let _ = crossterm::terminal::disable_raw_mode();
+    }
+}
+
+fn main() -> ExitCode {
+    match run() {
+        Ok(()) => ExitCode::SUCCESS,
+        Err(error) => {
+            eprintln!("RemoteDesk Linux terminal failed: {error}");
+            ExitCode::FAILURE
+        }
+    }
+}
+
+fn run() -> Result<(), String> {
+    let args = parse_args(env::args().skip(1))?;
+    if args.probe_json {
+        let runtime = tokio::runtime::Builder::new_current_thread()
+            .enable_all()
+            .build()
+            .map_err(|error| format!("unable to create probe runtime: {error}"))?;
+        return runtime.block_on(run_agent_probe(&args));
+    }
+    if args.desktop.is_some() {
+        return desktop_viewer::run(args);
+    }
+    let runtime = tokio::runtime::Builder::new_multi_thread()
+        .enable_all()
+        .build()
+        .map_err(|error| format!("unable to create async runtime: {error}"))?;
+    runtime.block_on(run_terminal(args))
+}
+
+#[derive(Serialize)]
+#[expect(
+    clippy::struct_excessive_bools,
+    reason = "the probe JSON reports independent Agent capabilities"
+)]
+struct AgentProbeResponse {
+    ok: bool,
+    latency_ms: u64,
+    protocol_major: u16,
+    protocol_minor: u16,
+    terminal: bool,
+    desktop: bool,
+    files: bool,
+    edge_presence_configured: bool,
+    edge_presence_online: bool,
+    edge_signaling_configured: bool,
+    edge_signaling_online: bool,
+}
+
+async fn run_agent_probe(args: &Args) -> Result<(), String> {
+    let _ = rustls::crypto::ring::default_provider().install_default();
+    let url = terminal_url(&args.target)?;
+    let started = std::time::Instant::now();
+    let mut socket = connect_agent(&url, args.certificate_sha256, None).await?;
+    let hello = tokio::time::timeout(Duration::from_secs(5), receive_event(&mut socket))
+        .await
+        .map_err(|_| "Linux Agent hello timed out".to_owned())??;
+    let response = match hello {
+        ServerEvent::Hello {
+            protocol_major,
+            protocol_minor,
+            tls_certificate_sha256,
+            terminal,
+            desktop,
+            files,
+            edge_presence_configured,
+            edge_presence_online,
+            edge_signaling_configured,
+            edge_signaling_online,
+            ..
+        } if protocol_major == PROTOCOL_MAJOR
+            && (args.certificate_sha256 == [0; 32]
+                || parse_fingerprint(&tls_certificate_sha256)? == args.certificate_sha256) =>
+        {
+            AgentProbeResponse {
+                ok: true,
+                latency_ms: started.elapsed().as_millis().try_into().unwrap_or(u64::MAX),
+                protocol_major,
+                protocol_minor,
+                terminal,
+                desktop,
+                files,
+                edge_presence_configured,
+                edge_presence_online,
+                edge_signaling_configured,
+                edge_signaling_online,
+            }
+        }
+        ServerEvent::Hello { .. } => {
+            return Err(
+                "Linux Agent protocol or hello certificate fingerprint is incompatible".into(),
+            );
+        }
+        _ => return Err("Linux Agent did not send a hello event".into()),
+    };
+    let _ = socket.close(None).await;
+    println!(
+        "{}",
+        serde_json::to_string(&response).map_err(|error| error.to_string())?
+    );
+    Ok(())
+}
+
+async fn run_terminal(args: Args) -> Result<(), String> {
+    let _ = rustls::crypto::ring::default_provider().install_default();
+    let signing_key = load_or_create_identity()?;
+    let url = terminal_url(&args.target)?;
+    let mut socket = connect_authenticated_agent(&args, &signing_key, &url).await?;
+
+    if let Some(transfer) = args.transfer {
+        return run_file_transfer(&mut socket, &args.user, transfer).await;
+    }
+
+    let (cols, rows) = crossterm::terminal::size().unwrap_or((120, 40));
+    send_command(
+        &mut socket,
+        &ClientCommand::OpenTerminal {
+            user: args.user,
+            cols: cols.clamp(20, 500),
+            rows: rows.clamp(5, 200),
+        },
+    )
+    .await?;
+    match receive_event(&mut socket).await? {
+        ServerEvent::TerminalOpened => {}
+        ServerEvent::Error { code, message } => {
+            return Err(format!("terminal open failed ({code}): {message}"));
+        }
+        _ => return Err("Linux Agent did not open the terminal".to_owned()),
+    }
+
+    let _raw_mode = RawModeGuard::enable()?;
+    let (input_sender, mut input_receiver) = mpsc::unbounded_channel();
+    std::thread::spawn(move || read_console(&input_sender));
+    let mut stdout = std::io::stdout();
+    loop {
+        tokio::select! {
+            input = input_receiver.recv() => {
+                match input.unwrap_or(ConsoleInput::Close) {
+                    ConsoleInput::Bytes(data) => send_command(&mut socket, &ClientCommand::TerminalInput { data: STANDARD_NO_PAD.encode(data) }).await?,
+                    ConsoleInput::Resize { cols, rows } => send_command(&mut socket, &ClientCommand::TerminalResize { cols: cols.clamp(20, 500), rows: rows.clamp(5, 200) }).await?,
+                    ConsoleInput::Close => {
+                        send_command(&mut socket, &ClientCommand::Close).await?;
+                        break;
+                    }
+                }
+            }
+            event = receive_event(&mut socket) => {
+                match event? {
+                    ServerEvent::TerminalOutput { data } => {
+                        let bytes = STANDARD_NO_PAD.decode(data).map_err(|_| "Agent returned invalid terminal output".to_owned())?;
+                        stdout.write_all(&bytes).map_err(|error| error.to_string())?;
+                        stdout.flush().map_err(|error| error.to_string())?;
+                    }
+                    ServerEvent::TerminalExited { .. } => break,
+                    ServerEvent::Error { code, message } => return Err(format!("terminal failed ({code}): {message}")),
+                    _ => {}
+                }
+            }
+        }
+    }
+    Ok(())
+}
+
+async fn connect_authenticated_agent(
+    args: &Args,
+    signing_key: &SigningKey,
+    url: &Url,
+) -> Result<AuthenticatedAgentConnection, String> {
+    if let (true, Some(edge_api_url), Some(device_public_key)) =
+        (args.pair, &args.edge_api_url, &args.agent_public_key)
+    {
+        let authorized =
+            authorize_edge_session(edge_api_url, device_public_key, args, signing_key).await?;
+        let mut relayed =
+            connect_agent(url, args.certificate_sha256, Some(&authorized.relay)).await?;
+        let authenticated = authenticate(&mut relayed, args, signing_key, true).await?;
+        if authenticated.device_public_key != *device_public_key {
+            return Err("Edge relay connected to a different Linux Agent identity".into());
+        }
+        if !authenticated.edge_signaling_online {
+            return Err("Linux Agent reports Edge signaling offline".into());
+        }
+        save_known_agent(args.certificate_sha256, &authenticated.device_public_key)?;
+        return Ok(AuthenticatedAgentConnection {
+            socket: relayed,
+            realtime: None,
+            edge_session_id: None,
+            protocol_minor: authenticated.protocol_minor,
+            clipboard_read: supports_clipboard(authenticated.protocol_minor)
+                && has_permission(&authenticated, "clipboard_read"),
+            clipboard_write: supports_clipboard(authenticated.protocol_minor)
+                && has_permission(&authenticated, "clipboard_write"),
+        });
+    }
+    let known_agent = if args.edge_api_url.is_some() && !args.pair {
+        load_known_agent(args.certificate_sha256)?
+    } else {
+        None
+    };
+    if let (Some(edge_api_url), Some(device_public_key)) = (&args.edge_api_url, known_agent) {
+        let authorized =
+            authorize_edge_session(edge_api_url, &device_public_key, args, signing_key).await?;
+        let mut relayed =
+            connect_agent(url, args.certificate_sha256, Some(&authorized.relay)).await?;
+        let authenticated = authenticate(&mut relayed, args, signing_key, false).await?;
+        if authenticated.device_public_key != device_public_key {
+            return Err("Edge relay connected to a different Linux Agent identity".into());
+        }
+        if !authenticated.edge_signaling_online {
+            return Err("Linux Agent reports Edge signaling offline".into());
+        }
+        let realtime =
+            connect_edge_desktop_webrtc(args, signing_key, edge_api_url, &authorized).await?;
+        let edge_session_id = args
+            .desktop
+            .is_some()
+            .then(|| authorized.negotiation.session_id.clone());
+        Ok(AuthenticatedAgentConnection {
+            socket: relayed,
+            realtime,
+            edge_session_id,
+            protocol_minor: authenticated.protocol_minor,
+            clipboard_read: supports_clipboard(authenticated.protocol_minor)
+                && has_permission(&authenticated, "clipboard_read"),
+            clipboard_write: supports_clipboard(authenticated.protocol_minor)
+                && has_permission(&authenticated, "clipboard_write"),
+        })
+    } else {
+        let mut direct = connect_agent(url, args.certificate_sha256, None).await?;
+        let authenticated = authenticate(&mut direct, args, signing_key, args.pair).await?;
+        if args.pair || args.edge_api_url.is_some() {
+            save_known_agent(args.certificate_sha256, &authenticated.device_public_key)?;
+        }
+        if let Some(edge_api_url) = &args.edge_api_url {
+            if !authenticated.edge_signaling_online {
+                return Err("Linux Agent reports Edge signaling offline".into());
+            }
+            let authorized = authorize_edge_session(
+                edge_api_url,
+                &authenticated.device_public_key,
+                args,
+                signing_key,
+            )
+            .await?;
+            drop(direct);
+            let mut relayed =
+                connect_agent(url, args.certificate_sha256, Some(&authorized.relay)).await?;
+            let relayed_identity = authenticate(&mut relayed, args, signing_key, false).await?;
+            if relayed_identity.device_public_key != authenticated.device_public_key {
+                return Err("Edge relay connected to a different Linux Agent identity".into());
+            }
+            let realtime =
+                connect_edge_desktop_webrtc(args, signing_key, edge_api_url, &authorized).await?;
+            let edge_session_id = args
+                .desktop
+                .is_some()
+                .then(|| authorized.negotiation.session_id.clone());
+            Ok(AuthenticatedAgentConnection {
+                socket: relayed,
+                realtime,
+                edge_session_id,
+                protocol_minor: relayed_identity.protocol_minor,
+                clipboard_read: supports_clipboard(relayed_identity.protocol_minor)
+                    && has_permission(&relayed_identity, "clipboard_read"),
+                clipboard_write: supports_clipboard(relayed_identity.protocol_minor)
+                    && has_permission(&relayed_identity, "clipboard_write"),
+            })
+        } else {
+            let clipboard_read = supports_clipboard(authenticated.protocol_minor)
+                && has_permission(&authenticated, "clipboard_read");
+            let clipboard_write = supports_clipboard(authenticated.protocol_minor)
+                && has_permission(&authenticated, "clipboard_write");
+            let realtime = connect_direct_desktop_webrtc(
+                &mut direct,
+                &args.user,
+                args.desktop,
+                authenticated.protocol_minor,
+                clipboard_read,
+                clipboard_write,
+            )
+            .await?;
+            Ok(AuthenticatedAgentConnection {
+                socket: direct,
+                realtime,
+                edge_session_id: None,
+                protocol_minor: authenticated.protocol_minor,
+                clipboard_read,
+                clipboard_write,
+            })
+        }
+    }
+}
+
+async fn connect_direct_desktop_webrtc(
+    socket: &mut WebSocketStream<MaybeTlsStream<RelayStream>>,
+    user: &str,
+    options: Option<DesktopOptions>,
+    protocol_minor: u16,
+    clipboard_read: bool,
+    clipboard_write: bool,
+) -> Result<Option<WebRtcSession>, String> {
+    let Some(options) = options else {
+        return Ok(None);
+    };
+    if !supports_direct_webrtc(protocol_minor) {
+        return Ok(None);
+    }
+    send_command(
+        &mut *socket,
+        &ClientCommand::BeginDirectWebRtc {
+            user: user.to_owned(),
+            max_width: options.width,
+            max_height: options.height,
+            frames_per_second: options.frames_per_second,
+            opus_audio: supports_opus_audio(protocol_minor),
+            clipboard_read: clipboard_read && options.clipboard_read,
+            clipboard_write: clipboard_write && options.clipboard_write,
+        },
+    )
+    .await?;
+    match receive_event(&mut *socket).await? {
+        ServerEvent::DirectWebRtcReady => {}
+        ServerEvent::Error { code, message } => {
+            return Err(format!("direct WebRTC rejected ({code}): {message}"));
+        }
+        _ => return Err("Linux Agent returned an invalid direct WebRTC response".into()),
+    }
+    let signaling = DirectClientSignalTransport { socket };
+    let session = establish_webrtc(
+        signaling,
+        WebRtcSessionConfig {
+            role: EdgeWebRtcRole::ClientOfferer,
+            bind_address: "0.0.0.0:0"
+                .parse()
+                .map_err(|_| "unable to create the direct WebRTC bind address".to_owned())?,
+            ice_servers: Vec::new(),
+            connect_timeout: Duration::from_secs(15),
+        },
+    )
+    .await;
+    match session {
+        Ok(session) => Ok(Some(session)),
+        Err(_) => {
+            send_command(&mut *socket, &ClientCommand::AbortDirectWebRtc).await?;
+            tokio::time::timeout(Duration::from_secs(5), async {
+                loop {
+                    match receive_event(&mut *socket).await? {
+                        ServerEvent::DirectWebRtcUnavailable { .. } => return Ok(()),
+                        ServerEvent::DirectWebRtcSignal { .. } => {}
+                        ServerEvent::Error { code, message } => {
+                            return Err(format!(
+                                "direct WebRTC fallback failed ({code}): {message}"
+                            ));
+                        }
+                        _ => {
+                            return Err(
+                                "Linux Agent returned an invalid WebRTC fallback response".into()
+                            );
+                        }
+                    }
+                }
+            })
+            .await
+            .map_err(|_| "direct WebRTC fallback synchronization timed out".to_owned())??;
+            Ok(None)
+        }
+    }
+}
+
+fn supports_direct_webrtc(protocol_minor: u16) -> bool {
+    protocol_minor >= DIRECT_WEBRTC_PROTOCOL_MINOR
+}
+
+fn supports_opus_audio(protocol_minor: u16) -> bool {
+    protocol_minor >= OPUS_AUDIO_PROTOCOL_MINOR
+}
+
+fn supports_clipboard(protocol_minor: u16) -> bool {
+    protocol_minor >= remotedesk_agent_runtime::CLIPBOARD_PROTOCOL_MINOR
+}
+
+fn has_permission(agent: &AuthenticatedAgent, permission: &str) -> bool {
+    agent
+        .permissions
+        .iter()
+        .any(|granted| granted == permission)
+}
+
+async fn connect_edge_desktop_webrtc(
+    args: &Args,
+    signing_key: &SigningKey,
+    edge_api_url: &Url,
+    authorized: &AuthorizedEdgeSession,
+) -> Result<Option<WebRtcSession>, String> {
+    if args.desktop.is_none() || args.pair {
+        return Ok(None);
+    }
+    let negotiation = EdgeNegotiationClient::new(
+        edge_api_url.as_str(),
+        EdgeNegotiationEndpoint::Client,
+        signing_key.clone(),
+        authorized.negotiation.clone(),
+    )
+    .map_err(|error| format!("unable to initialize Edge WebRTC negotiation: {error}"))?;
+    let session = establish_edge_webrtc(
+        negotiation,
+        WebRtcSessionConfig {
+            role: EdgeWebRtcRole::ClientOfferer,
+            bind_address: "0.0.0.0:0"
+                .parse()
+                .map_err(|_| "unable to create the WebRTC bind address".to_owned())?,
+            ice_servers: authorized.ice_servers.clone(),
+            connect_timeout: Duration::from_secs(30),
+        },
+    )
+    .await
+    .map_err(|error| format!("Edge WebRTC connection failed: {error}"))?;
+    Ok(Some(session))
+}
+
+async fn run_file_transfer<S>(
+    socket: &mut tokio_tungstenite::WebSocketStream<S>,
+    user: &str,
+    transfer: FileTransfer,
+) -> Result<(), String>
+where
+    S: tokio::io::AsyncRead + tokio::io::AsyncWrite + Unpin,
+{
+    match transfer {
+        FileTransfer::Upload { local, remote } => upload_file(socket, user, local, remote).await,
+        FileTransfer::Download { remote, local } => {
+            download_file(socket, user, remote, local).await
+        }
+    }
+}
+
+async fn upload_file<S>(
+    socket: &mut tokio_tungstenite::WebSocketStream<S>,
+    user: &str,
+    local: PathBuf,
+    remote: String,
+) -> Result<(), String>
+where
+    S: tokio::io::AsyncRead + tokio::io::AsyncWrite + Unpin,
+{
+    let metadata = tokio::fs::metadata(&local)
+        .await
+        .map_err(|error| format!("unable to read local file: {error}"))?;
+    if !metadata.is_file() || metadata.len() > MAX_FILE_BYTES {
+        return Err("local file is not regular or exceeds 2 GiB".into());
+    }
+    let size = metadata.len();
+    let sha256 = hash_file(&local).await?;
+    let transfer_id = upload_transfer_id(user, &remote, size, &sha256);
+    send_command(
+        socket,
+        &ClientCommand::UploadFile {
+            user: user.to_owned(),
+            path: remote,
+            size,
+            sha256: sha256.clone(),
+            transfer_id,
+        },
+    )
+    .await?;
+    let offset = match receive_event(socket).await? {
+        ServerEvent::FileReady {
+            direction,
+            size: ready_size,
+            offset,
+            ..
+        } if direction == "upload" && ready_size == size && offset <= size => offset,
+        ServerEvent::Error { code, message } => {
+            return Err(format!("upload rejected ({code}): {message}"));
+        }
+        _ => return Err("Agent did not accept the upload".into()),
+    };
+    let mut file = tokio::fs::File::open(local)
+        .await
+        .map_err(|error| error.to_string())?;
+    file.seek(SeekFrom::Start(offset))
+        .await
+        .map_err(|error| error.to_string())?;
+    let mut buffer = vec![0_u8; FILE_CHUNK_BYTES];
+    loop {
+        let read = file
+            .read(&mut buffer)
+            .await
+            .map_err(|error| error.to_string())?;
+        if read == 0 {
+            break;
+        }
+        send_command(
+            socket,
+            &ClientCommand::FileChunk {
+                data: STANDARD_NO_PAD.encode(&buffer[..read]),
+            },
+        )
+        .await?;
+    }
+    send_command(socket, &ClientCommand::FileCommit).await?;
+    match receive_event(socket).await? {
+        ServerEvent::FileComplete {
+            size: complete_size,
+            sha256: complete_hash,
+        } if complete_size == size && complete_hash == sha256 => {
+            println!("upload complete: {size} bytes, sha256={sha256}");
+            Ok(())
+        }
+        ServerEvent::Error { code, message } => Err(format!("upload failed ({code}): {message}")),
+        _ => Err("Agent did not confirm the uploaded file".into()),
+    }
+}
+
+async fn download_file<S>(
+    socket: &mut tokio_tungstenite::WebSocketStream<S>,
+    user: &str,
+    remote: String,
+    local: PathBuf,
+) -> Result<(), String>
+where
+    S: tokio::io::AsyncRead + tokio::io::AsyncWrite + Unpin,
+{
+    if tokio::fs::try_exists(&local)
+        .await
+        .map_err(|error| error.to_string())?
+    {
+        return Err("local download target already exists".into());
+    }
+    let temporary = download_partial_path(&local)?;
+    let offset = match tokio::fs::metadata(&temporary).await {
+        Ok(metadata) if metadata.is_file() && metadata.len() <= MAX_FILE_BYTES => metadata.len(),
+        Ok(_) => return Err("local download partial is invalid".into()),
+        Err(error) if error.kind() == std::io::ErrorKind::NotFound => 0,
+        Err(error) => return Err(error.to_string()),
+    };
+    send_command(
+        socket,
+        &ClientCommand::DownloadFile {
+            user: user.to_owned(),
+            path: remote,
+            offset,
+        },
+    )
+    .await?;
+    let (size, expected_hash) = match receive_event(socket).await? {
+        ServerEvent::FileReady {
+            direction,
+            size,
+            sha256: Some(hash),
+            offset: ready_offset,
+        } if direction == "download"
+            && size <= MAX_FILE_BYTES
+            && ready_offset == offset
+            && offset <= size =>
+        {
+            (size, hash)
+        }
+        ServerEvent::Error { code, message } => {
+            return Err(format!("download rejected ({code}): {message}"));
+        }
+        _ => return Err("Agent did not prepare the download".into()),
+    };
+    receive_download(socket, &temporary, &local, size, &expected_hash, offset).await
+}
+
+async fn receive_download<S>(
+    socket: &mut tokio_tungstenite::WebSocketStream<S>,
+    temporary: &Path,
+    local: &Path,
+    size: u64,
+    expected_hash: &str,
+    offset: u64,
+) -> Result<(), String>
+where
+    S: tokio::io::AsyncRead + tokio::io::AsyncWrite + Unpin,
+{
+    let mut file = tokio::fs::OpenOptions::new()
+        .read(true)
+        .write(true)
+        .create(true)
+        .truncate(false)
+        .open(temporary)
+        .await
+        .map_err(|error| error.to_string())?;
+    file.seek(SeekFrom::Start(0))
+        .await
+        .map_err(|error| error.to_string())?;
+    let mut received = 0_u64;
+    let mut hasher = Sha256::new();
+    let mut prefix_buffer = vec![0_u8; 64 * 1024];
+    while received < offset {
+        let limit = usize::try_from((offset - received).min(prefix_buffer.len() as u64))
+            .map_err(|_| "file size overflow")?;
+        let read = file
+            .read(&mut prefix_buffer[..limit])
+            .await
+            .map_err(|error| error.to_string())?;
+        if read == 0 {
+            return Err("local download partial ended before its declared size".into());
+        }
+        received += u64::try_from(read).map_err(|_| "file size overflow")?;
+        hasher.update(&prefix_buffer[..read]);
+    }
+    file.seek(SeekFrom::End(0))
+        .await
+        .map_err(|error| error.to_string())?;
+    loop {
+        match receive_event(socket).await? {
+            ServerEvent::FileChunk { data } => {
+                let bytes = STANDARD_NO_PAD
+                    .decode(data)
+                    .map_err(|_| "Agent returned invalid file data".to_owned())?;
+                if bytes.len() > FILE_CHUNK_BYTES {
+                    return Err("Agent returned an oversized file chunk".into());
+                }
+                received = received
+                    .checked_add(u64::try_from(bytes.len()).map_err(|_| "file size overflow")?)
+                    .ok_or("file size overflow")?;
+                if received > size {
+                    return Err("Agent returned more file data than declared".into());
+                }
+                file.write_all(&bytes)
+                    .await
+                    .map_err(|error| error.to_string())?;
+                hasher.update(&bytes);
+            }
+            ServerEvent::FileComplete {
+                size: complete_size,
+                sha256,
+            } if complete_size == size && received == size && sha256 == expected_hash => {
+                file.sync_all().await.map_err(|error| error.to_string())?;
+                let actual = hex_digest(&hasher.finalize());
+                if actual != expected_hash {
+                    drop(file);
+                    let _ = tokio::fs::remove_file(temporary).await;
+                    return Err("download SHA-256 mismatch".into());
+                }
+                drop(file);
+                tokio::fs::rename(temporary, local)
+                    .await
+                    .map_err(|error| error.to_string())?;
+                println!("download complete: {size} bytes, sha256={actual}");
+                return Ok(());
+            }
+            ServerEvent::Error { code, message } => {
+                return Err(format!("download failed ({code}): {message}"));
+            }
+            _ => return Err("Agent returned an invalid download event".into()),
+        }
+    }
+}
+
+fn upload_transfer_id(user: &str, remote: &str, size: u64, sha256: &str) -> String {
+    let mut hasher = Sha256::new();
+    hasher.update(b"RemoteDesk/UploadTransfer/v1\0");
+    let size_bytes = size.to_be_bytes();
+    for value in [
+        user.as_bytes(),
+        remote.as_bytes(),
+        size_bytes.as_slice(),
+        sha256.as_bytes(),
+    ] {
+        hasher.update(u64::try_from(value.len()).unwrap_or(u64::MAX).to_be_bytes());
+        hasher.update(value);
+    }
+    hex_digest(&hasher.finalize())[..32].into()
+}
+
+fn download_partial_path(local: &Path) -> Result<PathBuf, String> {
+    let name = local
+        .file_name()
+        .and_then(|value| value.to_str())
+        .ok_or_else(|| "local download target has no UTF-8 file name".to_owned())?;
+    Ok(local.with_file_name(format!(".{name}.remotedesk.part")))
+}
+
+async fn hash_file(path: &PathBuf) -> Result<String, String> {
+    let mut file = tokio::fs::File::open(path)
+        .await
+        .map_err(|error| error.to_string())?;
+    let mut buffer = vec![0_u8; 64 * 1024];
+    let mut hasher = Sha256::new();
+    loop {
+        let read = file
+            .read(&mut buffer)
+            .await
+            .map_err(|error| error.to_string())?;
+        if read == 0 {
+            break;
+        }
+        hasher.update(&buffer[..read]);
+    }
+    Ok(hex_digest(&hasher.finalize()))
+}
+
+fn hex_digest(bytes: &[u8]) -> String {
+    use std::fmt::Write as _;
+    let mut output = String::with_capacity(bytes.len() * 2);
+    for byte in bytes {
+        write!(output, "{byte:02x}").expect("String writes cannot fail");
+    }
+    output
+}
+
+#[derive(Deserialize)]
+#[serde(deny_unknown_fields)]
+struct EdgeSignalStatus {
+    request_id: String,
+    device_id: String,
+    session_id: String,
+    state: String,
+    accepted: Option<bool>,
+    result_code: Option<String>,
+    expires_unix: u64,
+    completed_unix: Option<u64>,
+    relay: Option<EdgeRelayAccess>,
+    #[serde(default)]
+    turn: Vec<EdgeTurnCredential>,
+}
+
+#[derive(Clone, Deserialize)]
+#[serde(deny_unknown_fields)]
+struct EdgeTurnCredential {
+    #[serde(rename = "pop_id")]
+    _pop_id: String,
+    #[serde(rename = "realm")]
+    _realm: String,
+    urls: Vec<String>,
+    username: String,
+    password: String,
+    expires_unix: u64,
+}
+
+struct AuthorizedEdgeSession {
+    relay: EdgeRelayAccess,
+    negotiation: EdgeNegotiationSession,
+    ice_servers: Vec<WebRtcIceServer>,
+}
+
+struct SignedEdgeIntent {
+    device_id: String,
+    request_id: String,
+    session_id: String,
+    session_type: EdgeSessionType,
+    client_public_key: String,
+    signature: String,
+    expires_unix: u64,
+    body: serde_json::Value,
+}
+
+fn build_edge_intent(
+    device_public_key: &str,
+    args: &Args,
+    signing_key: &SigningKey,
+) -> Result<SignedEdgeIntent, String> {
+    let device_id = edge_device_id(device_public_key)
+        .map_err(|_| "Agent returned an invalid device public key".to_owned())?;
+    let now = unix_timestamp();
+    let request_id = random_identifier("request");
+    let session_id = random_identifier("session");
+    let session_type = if args.pair {
+        EdgeSessionType::Pairing
+    } else if args.transfer.is_some() {
+        EdgeSessionType::Files
+    } else if args.desktop.is_some() {
+        EdgeSessionType::Desktop
+    } else {
+        EdgeSessionType::Terminal
+    };
+    let mut nonce = [0_u8; SIGNAL_NONCE_LENGTH];
+    rand::fill(&mut nonce);
+    let client_public_key = STANDARD_NO_PAD.encode(signing_key.verifying_key().as_bytes());
+    let expires_unix = now.saturating_add(60);
+    let model = EdgeSessionIntentV1 {
+        device_id: device_id.clone(),
+        request_id: request_id.clone(),
+        session_id: session_id.clone(),
+        session_type,
+        target_user: args.user.clone(),
+        requested_permissions: vec![session_type.as_str().into()],
+        client_public_key: client_public_key.clone(),
+        nonce,
+        issued_unix: now,
+        expires_unix,
+    };
+    let payload = model
+        .stable_signing_input()
+        .map_err(|_| "Edge session intent is invalid".to_owned())?;
+    let signature = STANDARD_NO_PAD.encode(signing_key.sign(&payload).to_bytes());
+    let body = serde_json::json!({
+        "device_id": device_id,
+        "request_id": request_id,
+        "session_id": session_id,
+        "session_type": session_type.as_str(),
+        "target_user": args.user,
+        "requested_permissions": [session_type.as_str()],
+        "client_public_key": client_public_key,
+        "nonce": STANDARD_NO_PAD.encode(nonce),
+        "issued_unix": now,
+        "expires_unix": expires_unix,
+        "signature": signature,
+    });
+    Ok(SignedEdgeIntent {
+        device_id,
+        request_id,
+        session_id,
+        session_type,
+        client_public_key,
+        signature,
+        expires_unix,
+        body,
+    })
+}
+
+async fn authorize_edge_session(
+    api_url: &Url,
+    device_public_key: &str,
+    args: &Args,
+    signing_key: &SigningKey,
+) -> Result<AuthorizedEdgeSession, String> {
+    let intent = build_edge_intent(device_public_key, args, signing_key)?;
+    let client = Client::builder()
+        .connect_timeout(Duration::from_secs(5))
+        .timeout(Duration::from_secs(10))
+        .redirect(Policy::none())
+        .user_agent(concat!(
+            "RemoteDesk-Linux-Controller/",
+            env!("CARGO_PKG_VERSION")
+        ))
+        .build()
+        .map_err(|_| "unable to initialize Edge HTTPS client".to_owned())?;
+    let submit = client
+        .post(join_edge_url(api_url, "v1/signals/requests"))
+        .json(&intent.body)
+        .send()
+        .await
+        .map_err(|error| edge_transport_error(&error))?;
+    if !matches!(submit.status(), StatusCode::CREATED | StatusCode::OK) {
+        return Err(format!(
+            "Edge session intent was rejected with HTTP {}",
+            submit.status().as_u16()
+        ));
+    }
+    let submit_body = edge_response_bytes(submit).await?;
+    let submitted: serde_json::Value = serde_json::from_slice(&submit_body)
+        .map_err(|_| "Edge returned an invalid submission response".to_owned())?;
+    if submitted["request_id"] != intent.request_id {
+        return Err("Edge acknowledged a different request".into());
+    }
+    wait_for_edge_authorization(&client, api_url, &intent).await
+}
+
+async fn wait_for_edge_authorization(
+    client: &Client,
+    api_url: &Url,
+    intent: &SignedEdgeIntent,
+) -> Result<AuthorizedEdgeSession, String> {
+    let status_body = serde_json::json!({
+        "request_id": intent.request_id,
+        "client_public_key": intent.client_public_key,
+        "signature": intent.signature,
+    });
+    tokio::time::timeout(Duration::from_secs(15), async {
+        loop {
+            let response = client
+                .post(join_edge_url(api_url, "v1/signals/status"))
+                .json(&status_body)
+                .send()
+                .await
+                .map_err(|error| edge_transport_error(&error))?;
+            if response.status() != StatusCode::OK {
+                return Err(format!(
+                    "Edge session status failed with HTTP {}",
+                    response.status().as_u16()
+                ));
+            }
+            let bytes = edge_response_bytes(response).await?;
+            let status: EdgeSignalStatus = serde_json::from_slice(&bytes)
+                .map_err(|_| "Edge returned an invalid session status".to_owned())?;
+            if status.request_id != intent.request_id
+                || status.device_id != intent.device_id
+                || status.session_id != intent.session_id
+                || status.expires_unix != intent.expires_unix
+            {
+                return Err("Edge session status binding did not match".into());
+            }
+            if status.state == "completed" {
+                if status.completed_unix.is_none() {
+                    return Err("Edge completion timestamp is missing".into());
+                }
+                let expected_result = if intent.session_type == EdgeSessionType::Pairing {
+                    "pairing_window_open"
+                } else {
+                    "authorized"
+                };
+                return if status.accepted == Some(true)
+                    && status.result_code.as_deref() == Some(expected_result)
+                {
+                    let relay = status.relay.ok_or_else(|| {
+                        "Edge authorization did not include a relay ticket".to_owned()
+                    })?;
+                    if relay.expires_unix != intent.expires_unix {
+                        return Err("Edge relay expiry did not match the signed session".into());
+                    }
+                    let mut ice_servers = Vec::with_capacity(status.turn.len());
+                    for credential in status.turn {
+                        if credential.expires_unix != intent.expires_unix {
+                            return Err("Edge TURN expiry did not match the signed session".into());
+                        }
+                        ice_servers.push(WebRtcIceServer {
+                            urls: credential.urls,
+                            username: credential.username,
+                            credential: credential.password,
+                        });
+                    }
+                    Ok(AuthorizedEdgeSession {
+                        relay,
+                        negotiation: EdgeNegotiationSession {
+                            request_id: intent.request_id.clone(),
+                            session_id: intent.session_id.clone(),
+                            expires_unix: intent.expires_unix,
+                        },
+                        ice_servers,
+                    })
+                } else {
+                    Err(format!(
+                        "Linux Agent rejected Edge authorization ({})",
+                        status.result_code.as_deref().unwrap_or("rejected")
+                    ))
+                };
+            }
+            if !matches!(status.state.as_str(), "pending" | "delivered")
+                || status.accepted.is_some()
+                || status.result_code.is_some()
+                || status.relay.is_some()
+            {
+                return Err("Edge returned an invalid session state".into());
+            }
+            tokio::time::sleep(Duration::from_millis(200)).await;
+        }
+    })
+    .await
+    .map_err(|_| "Edge session authorization timed out".to_owned())?
+}
+
+fn parse_edge_api_url(value: &str) -> Result<Url, String> {
+    if value.len() > 2048 {
+        return Err("Edge API URL is too long".into());
+    }
+    let url = Url::parse(value).map_err(|_| "Edge API URL is invalid".to_owned())?;
+    let loopback_http = url.scheme() == "http"
+        && match url.host() {
+            Some(Host::Domain("localhost")) => true,
+            Some(Host::Ipv4(address)) => address.is_loopback(),
+            Some(Host::Ipv6(address)) => address.is_loopback(),
+            _ => false,
+        };
+    if (url.scheme() != "https" && !loopback_http)
+        || url.username() != ""
+        || url.password().is_some()
+        || url.path() != "/"
+        || url.query().is_some()
+        || url.fragment().is_some()
+        || url.port() == Some(0)
+    {
+        return Err("Edge API URL must be an HTTPS origin".into());
+    }
+    Ok(url)
+}
+
+fn join_edge_url(api_url: &Url, path: &str) -> Url {
+    api_url
+        .join(path)
+        .expect("validated Edge base URL joins a static path")
+}
+
+async fn edge_response_bytes(mut response: reqwest::Response) -> Result<Vec<u8>, String> {
+    if response
+        .content_length()
+        .is_some_and(|length| length > EDGE_RESPONSE_LIMIT as u64)
+    {
+        return Err("Edge response exceeds the size limit".into());
+    }
+    let mut bytes = Vec::new();
+    while let Some(chunk) = response
+        .chunk()
+        .await
+        .map_err(|error| edge_transport_error(&error))?
+    {
+        if bytes.len().saturating_add(chunk.len()) > EDGE_RESPONSE_LIMIT {
+            return Err("Edge response exceeds the size limit".into());
+        }
+        bytes.extend_from_slice(&chunk);
+    }
+    Ok(bytes)
+}
+
+fn edge_transport_error(error: &reqwest::Error) -> String {
+    if error.is_timeout() {
+        "Edge request timed out".into()
+    } else if error.is_connect() {
+        "unable to connect to Edge service".into()
+    } else {
+        "Edge HTTPS request failed".into()
+    }
+}
+
+fn random_identifier(prefix: &str) -> String {
+    let random = rand::random::<[u8; 18]>();
+    format!("{prefix}-{}", URL_SAFE_NO_PAD.encode(random))
+}
+
+fn unix_timestamp() -> u64 {
+    std::time::SystemTime::now()
+        .duration_since(std::time::UNIX_EPOCH)
+        .unwrap_or_default()
+        .as_secs()
+}
+
+async fn authenticate<S>(
+    socket: &mut tokio_tungstenite::WebSocketStream<S>,
+    args: &Args,
+    signing_key: &SigningKey,
+    pair: bool,
+) -> Result<AuthenticatedAgent, String>
+where
+    S: tokio::io::AsyncRead + tokio::io::AsyncWrite + Unpin,
+{
+    authenticate_with_pairing_code(socket, args, signing_key, pair, None).await
+}
+
+async fn authenticate_with_pairing_code<S>(
+    socket: &mut tokio_tungstenite::WebSocketStream<S>,
+    args: &Args,
+    signing_key: &SigningKey,
+    pair: bool,
+    supplied_pairing_code: Option<&str>,
+) -> Result<AuthenticatedAgent, String>
+where
+    S: tokio::io::AsyncRead + tokio::io::AsyncWrite + Unpin,
+{
+    let hello = receive_event(socket).await?;
+    let needs_files = args.transfer.is_some();
+    let needs_desktop = args.desktop.is_some();
+    let (challenge, reported_fingerprint, device_public_key, edge_signaling_online, protocol_minor) =
+        match hello {
+            ServerEvent::Hello {
+                protocol_major,
+                protocol_minor,
+                challenge,
+                tls_certificate_sha256,
+                device_public_key,
+                terminal,
+                desktop,
+                files,
+                edge_signaling_online,
+                ..
+            } if protocol_major == PROTOCOL_MAJOR
+                && ((needs_desktop && desktop)
+                    || (needs_files && files)
+                    || (!needs_desktop && !needs_files && terminal)) =>
+            {
+                (
+                    challenge,
+                    tls_certificate_sha256,
+                    device_public_key,
+                    edge_signaling_online,
+                    protocol_minor,
+                )
+            }
+            ServerEvent::Hello { .. } => {
+                return Err(
+                    "Linux Agent protocol or requested capability is incompatible".to_owned(),
+                );
+            }
+            _ => return Err("Linux Agent did not send a hello event".to_owned()),
+        };
+    if args.certificate_sha256 != [0; 32]
+        && parse_fingerprint(&reported_fingerprint)? != args.certificate_sha256
+    {
+        return Err(
+            "Linux Agent hello fingerprint does not match the pinned TLS certificate".to_owned(),
+        );
+    }
+
+    let challenge = AuthChallenge::parse_encoded(&challenge).map_err(str::to_owned)?;
+    let public_key = STANDARD_NO_PAD.encode(signing_key.verifying_key().as_bytes());
+    let signature =
+        STANDARD_NO_PAD.encode(signing_key.sign(&challenge.signing_payload()).to_bytes());
+    let command = if pair {
+        let code = match supplied_pairing_code {
+            Some(code) => code.to_owned(),
+            None => Password::new("Linux Agent pairing code:")
+                .without_confirmation()
+                .prompt()
+                .map_err(|_| "pairing code input was cancelled".to_owned())?,
+        };
+        if code.len() != 8 || !code.bytes().all(|byte| byte.is_ascii_digit()) {
+            return Err("pairing code must contain exactly eight digits".to_owned());
+        }
+        ClientCommand::Pair {
+            protocol_major: PROTOCOL_MAJOR,
+            protocol_minor: PROTOCOL_MINOR,
+            client_name: "RemoteDesk Windows".to_owned(),
+            client_public_key: public_key,
+            signature,
+            code,
+        }
+    } else {
+        ClientCommand::Authenticate {
+            protocol_major: PROTOCOL_MAJOR,
+            protocol_minor: PROTOCOL_MINOR,
+            client_public_key: public_key,
+            signature,
+        }
+    };
+    send_command(socket, &command).await?;
+    let required_permission = if args.transfer.is_some() {
+        "files"
+    } else if args.desktop.is_some() {
+        "desktop"
+    } else {
+        "terminal"
+    };
+    match receive_event(socket).await? {
+        ServerEvent::Paired { permissions, .. }
+        | ServerEvent::Authenticated { permissions, .. }
+            if permissions
+                .iter()
+                .any(|permission| permission == required_permission) =>
+        {
+            Ok(AuthenticatedAgent {
+                device_public_key,
+                edge_signaling_online,
+                protocol_minor,
+                permissions,
+            })
+        }
+        ServerEvent::Error { code, message } => {
+            Err(format!("Agent authentication failed ({code}): {message}"))
+        }
+        _ => Err(format!(
+            "Linux Agent did not authorize {required_permission} access"
+        )),
+    }
+}
+
+fn read_console(sender: &mpsc::UnboundedSender<ConsoleInput>) {
+    loop {
+        let Ok(event) = crossterm::event::read() else {
+            let _ = sender.send(ConsoleInput::Close);
+            return;
+        };
+        let input = match event {
+            Event::Key(key) if key.kind == KeyEventKind::Press => {
+                key_bytes(key).map(ConsoleInput::Bytes)
+            }
+            Event::Resize(cols, rows) => Some(ConsoleInput::Resize { cols, rows }),
+            _ => None,
+        };
+        if input.is_some_and(|input| sender.send(input).is_err()) {
+            return;
+        }
+    }
+}
+
+fn key_bytes(key: KeyEvent) -> Option<Vec<u8>> {
+    let bytes: &[u8] = match key.code {
+        KeyCode::Enter => b"\r",
+        KeyCode::Backspace => b"\x7f",
+        KeyCode::Tab => b"\t",
+        KeyCode::Esc => b"\x1b",
+        KeyCode::Up => b"\x1b[A",
+        KeyCode::Down => b"\x1b[B",
+        KeyCode::Right => b"\x1b[C",
+        KeyCode::Left => b"\x1b[D",
+        KeyCode::Home => b"\x1b[H",
+        KeyCode::End => b"\x1b[F",
+        KeyCode::Delete => b"\x1b[3~",
+        KeyCode::PageUp => b"\x1b[5~",
+        KeyCode::PageDown => b"\x1b[6~",
+        KeyCode::Char(character)
+            if key.modifiers.contains(KeyModifiers::CONTROL) && character.is_ascii() =>
+        {
+            return Some(vec![(character.to_ascii_uppercase() as u8) & 0x1f]);
+        }
+        KeyCode::Char(character) => return Some(character.to_string().into_bytes()),
+        _ => return None,
+    };
+    Some(bytes.to_vec())
+}
+
+async fn receive_event<S>(
+    socket: &mut tokio_tungstenite::WebSocketStream<S>,
+) -> Result<ServerEvent, String>
+where
+    S: tokio::io::AsyncRead + tokio::io::AsyncWrite + Unpin,
+{
+    loop {
+        let message = socket
+            .next()
+            .await
+            .ok_or_else(|| "Linux Agent closed the connection".to_owned())?
+            .map_err(|error| format!("Linux Agent WebSocket failed: {error}"))?;
+        if message.is_close() {
+            return Err("Linux Agent closed the connection".to_owned());
+        }
+        if message.is_text() {
+            return serde_json::from_str(message.to_text().map_err(|error| error.to_string())?)
+                .map_err(|_| "Linux Agent returned an invalid control event".to_owned());
+        }
+    }
+}
+
+async fn send_command<S>(
+    socket: &mut tokio_tungstenite::WebSocketStream<S>,
+    command: &ClientCommand,
+) -> Result<(), String>
+where
+    S: tokio::io::AsyncRead + tokio::io::AsyncWrite + Unpin,
+{
+    let encoded = serde_json::to_string(command).map_err(|error| error.to_string())?;
+    socket
+        .send(Message::Text(encoded.into()))
+        .await
+        .map_err(|error| format!("unable to send Linux Agent command: {error}"))
+}
+
+async fn connect_agent(
+    url: &Url,
+    certificate_sha256: [u8; 32],
+    relay: Option<&EdgeRelayAccess>,
+) -> Result<WebSocketStream<MaybeTlsStream<RelayStream>>, String> {
+    let transport: RelayStream = if let Some(access) = relay {
+        connect_edge_relay(access)
+            .await
+            .map_err(|error| error.to_string())?
+    } else {
+        let host = match url
+            .host()
+            .ok_or_else(|| "Linux Agent target is invalid".to_owned())?
+        {
+            Host::Domain(value) => value.to_owned(),
+            Host::Ipv4(address) => address.to_string(),
+            Host::Ipv6(address) => address.to_string(),
+        };
+        let port = url
+            .port_or_known_default()
+            .ok_or_else(|| "Linux Agent target port is missing".to_owned())?;
+        let tcp = tokio::time::timeout(
+            Duration::from_secs(10),
+            tokio::net::TcpStream::connect((host.as_str(), port)),
+        )
+        .await
+        .map_err(|_| "Linux Agent connection timed out".to_owned())?
+        .map_err(|_| "unable to connect to Linux Agent".to_owned())?;
+        tcp.set_nodelay(true)
+            .map_err(|_| "unable to configure Linux Agent connection".to_owned())?;
+        Box::new(tcp)
+    };
+    let connector = Connector::Rustls(Arc::new(tls_config(certificate_sha256)?));
+    client_async_tls_with_config(url.as_str(), transport, None, Some(connector))
+        .await
+        .map(|(socket, _)| socket)
+        .map_err(|_| "Linux Agent TLS/WebSocket handshake failed".to_owned())
+}
+
+fn tls_config(expected_sha256: [u8; 32]) -> Result<rustls::ClientConfig, String> {
+    let supported_algorithms = rustls::crypto::CryptoProvider::get_default()
+        .ok_or_else(|| "rustls crypto provider is unavailable".to_owned())?
+        .signature_verification_algorithms;
+    Ok(rustls::ClientConfig::builder()
+        .dangerous()
+        .with_custom_certificate_verifier(Arc::new(PinnedCertificateVerifier {
+            expected_sha256,
+            supported_algorithms,
+        }))
+        .with_no_client_auth())
+}
+
+fn terminal_url(target: &str) -> Result<Url, String> {
+    let url = Url::parse(&format!("wss://{target}/"))
+        .map_err(|_| "Linux Agent target must be host:port or [IPv6]:port".to_owned())?;
+    if url.username() != ""
+        || url.password().is_some()
+        || url.query().is_some()
+        || url.fragment().is_some()
+    {
+        return Err("Linux Agent target contains unsupported URL data".to_owned());
+    }
+    if url.port().is_none() {
+        return Url::parse(&format!("wss://{target}:39500/"))
+            .map_err(|_| "Linux Agent target is invalid".to_owned());
+    }
+    Ok(url)
+}
+
+fn parse_args(mut args: impl Iterator<Item = String>) -> Result<Args, String> {
+    let mut target = None;
+    let mut user = None;
+    let mut certificate_sha256 = None;
+    let mut probe_json = false;
+    let mut pair = false;
+    let mut agent_public_key = None;
+    let mut edge_api_url = None;
+    let mut upload = None;
+    let mut download = None;
+    let mut remote_path = None;
+    let mut local_path = None;
+    let mut desktop = false;
+    let mut desktop_width = 1_920;
+    let mut desktop_height = 1_080;
+    let mut desktop_fps = 15;
+    let mut fullscreen = false;
+    let mut follow_window = false;
+    let mut capture_input = false;
+    let mut clipboard_read = false;
+    let mut clipboard_write = false;
+    let mut session_id = None;
+    while let Some(argument) = args.next() {
+        match argument.as_str() {
+            "--target" => target = Some(required_value(&mut args, "--target")?),
+            "--user" => user = Some(required_value(&mut args, "--user")?),
+            "--certificate-sha256" => {
+                certificate_sha256 = Some(parse_fingerprint(&required_value(
+                    &mut args,
+                    "--certificate-sha256",
+                )?)?);
+            }
+            "--probe-json" => probe_json = true,
+            "--pair" => pair = true,
+            "--agent-public-key" => {
+                let value = required_value(&mut args, "--agent-public-key")?;
+                validate_agent_public_key(&value)?;
+                agent_public_key = Some(value);
+            }
+            "--edge-api-url" => {
+                edge_api_url = Some(parse_edge_api_url(&required_value(
+                    &mut args,
+                    "--edge-api-url",
+                )?)?);
+            }
+            "--upload" => upload = Some(PathBuf::from(required_value(&mut args, "--upload")?)),
+            "--download" => download = Some(required_value(&mut args, "--download")?),
+            "--remote-path" => remote_path = Some(required_value(&mut args, "--remote-path")?),
+            "--local-path" => {
+                local_path = Some(PathBuf::from(required_value(&mut args, "--local-path")?));
+            }
+            "--desktop" => desktop = true,
+            "--width" => {
+                desktop_width = parse_desktop_dimension(&required_value(&mut args, "--width")?)?;
+            }
+            "--height" => {
+                desktop_height = parse_desktop_dimension(&required_value(&mut args, "--height")?)?;
+            }
+            "--fps" => {
+                desktop_fps = required_value(&mut args, "--fps")?
+                    .parse::<u8>()
+                    .ok()
+                    .filter(|value| (1..=30).contains(value))
+                    .ok_or_else(|| "desktop FPS must be between 1 and 30".to_owned())?;
+            }
+            "--fullscreen" => fullscreen = true,
+            "--follow-window" => follow_window = true,
+            "--capture-input" => capture_input = true,
+            "--clipboard-read" => clipboard_read = true,
+            "--clipboard-write" => clipboard_write = true,
+            "--session-id" => {
+                let value = required_value(&mut args, "--session-id")?;
+                if value.is_empty()
+                    || value.len() > 64
+                    || !value
+                        .bytes()
+                        .all(|byte| byte.is_ascii_alphanumeric() || byte == b'-')
+                {
+                    return Err("desktop session ID is invalid".into());
+                }
+                session_id = Some(value);
+            }
+            "--help" | "-h" => return Err(usage().to_owned()),
+            _ => return Err("unknown Linux terminal argument".to_owned()),
+        }
+    }
+    let user = if probe_json {
+        if user.is_some() {
+            return Err("--probe-json does not accept --user".into());
+        }
+        String::new()
+    } else {
+        let user = user.ok_or_else(|| "--user is required".to_owned())?;
+        let user = user.trim().to_owned();
+        if user.is_empty() {
+            return Err("Linux terminal user is empty; enter a regular Linux user".to_owned());
+        }
+        if user.len() > 32
+            || !user
+                .bytes()
+                .all(|byte| byte.is_ascii_alphanumeric() || matches!(byte, b'_' | b'-' | b'.'))
+        {
+            return Err("Linux terminal user contains unsupported characters".to_owned());
+        }
+        user
+    };
+    let transfer = match (upload, download, remote_path, local_path) {
+        (None, None, None, None) => None,
+        (Some(local), None, Some(remote), None) => Some(FileTransfer::Upload { local, remote }),
+        (None, Some(remote), None, Some(local)) => Some(FileTransfer::Download { remote, local }),
+        _ => return Err("use either --upload <local> --remote-path <relative> or --download <relative> --local-path <local>".into()),
+    };
+    if pair && transfer.is_some() {
+        return Err("pairing and file transfer must be separate operations".into());
+    }
+    if desktop && transfer.is_some() {
+        return Err("desktop and file transfer modes are mutually exclusive".into());
+    }
+    if probe_json
+        && (pair
+            || agent_public_key.is_some()
+            || edge_api_url.is_some()
+            || transfer.is_some()
+            || desktop
+            || fullscreen
+            || follow_window
+            || capture_input
+            || clipboard_read
+            || clipboard_write
+            || session_id.is_some())
+    {
+        return Err("--probe-json cannot be combined with session options".into());
+    }
+    if !desktop
+        && (desktop_width != 1_920
+            || desktop_height != 1_080
+            || desktop_fps != 15
+            || fullscreen
+            || follow_window
+            || capture_input
+            || clipboard_read
+            || clipboard_write
+            || session_id.is_some())
+    {
+        return Err("desktop display options require --desktop".into());
+    }
+    if agent_public_key.is_some() && (!pair || edge_api_url.is_none()) {
+        return Err("--agent-public-key requires --pair and --edge-api-url".into());
+    }
+    Ok(Args {
+        target: target.ok_or_else(|| "--target is required".to_owned())?,
+        user,
+        certificate_sha256: certificate_sha256.unwrap_or([0; 32]),
+        probe_json,
+        pair,
+        agent_public_key,
+        transfer,
+        edge_api_url,
+        desktop: desktop.then_some(DesktopOptions {
+            width: desktop_width,
+            height: desktop_height,
+            frames_per_second: desktop_fps,
+            fullscreen,
+            follow_window,
+            capture_input,
+            clipboard_read,
+            clipboard_write,
+        }),
+        session_id,
+    })
+}
+
+fn required_value(args: &mut impl Iterator<Item = String>, option: &str) -> Result<String, String> {
+    args.next()
+        .filter(|value| !value.is_empty() && !value.starts_with("--"))
+        .ok_or_else(|| format!("{option} requires a value"))
+}
+
+fn parse_fingerprint(value: &str) -> Result<[u8; 32], String> {
+    let compact = value
+        .chars()
+        .filter(|character| *character != ':')
+        .collect::<String>();
+    if compact.len() != 64 || !compact.bytes().all(|byte| byte.is_ascii_hexdigit()) {
+        return Err("certificate SHA-256 must contain exactly 64 hexadecimal digits".to_owned());
+    }
+    let mut output = [0_u8; 32];
+    for (index, byte) in output.iter_mut().enumerate() {
+        *byte = u8::from_str_radix(&compact[index * 2..index * 2 + 2], 16)
+            .map_err(|_| "certificate SHA-256 is invalid".to_owned())?;
+    }
+    Ok(output)
+}
+
+fn parse_desktop_dimension(value: &str) -> Result<u16, String> {
+    value
+        .parse::<u16>()
+        .ok()
+        .filter(|value| (200..=8_192).contains(value))
+        .ok_or_else(|| "desktop dimensions must be between 200 and 8192".to_owned())
+}
+
+fn usage() -> &'static str {
+    "usage: remotedesk-linux-terminal --target <host[:port]> --certificate-sha256 <hex> [--probe-json | --user <name> [--edge-api-url <https-origin>] [--pair [--agent-public-key <base64>] | --desktop [--width <200-8192>] [--height <200-8192>] [--fps <1-30>] [--fullscreen] [--follow-window] [--capture-input] [--clipboard-read] [--clipboard-write] [--session-id <id>] | --upload <local> --remote-path <relative> | --download <relative> --local-path <local>]]"
+}
+
+#[cfg(windows)]
+fn load_or_create_identity() -> Result<SigningKey, String> {
+    let entry = keyring::Entry::new_with_target(IDENTITY_TARGET, IDENTITY_SERVICE, IDENTITY_OWNER)
+        .map_err(|_| "unable to access the Linux client identity".to_owned())?;
+    match entry.get_password() {
+        Ok(encoded) => {
+            let encoded = Zeroizing::new(encoded);
+            let bytes = STANDARD_NO_PAD
+                .decode(encoded.as_bytes())
+                .map_err(|_| "stored Linux client identity is invalid".to_owned())?;
+            let seed: [u8; 32] = bytes
+                .try_into()
+                .map_err(|_| "stored Linux client identity is invalid".to_owned())?;
+            Ok(SigningKey::from_bytes(&seed))
+        }
+        Err(keyring::Error::NoEntry) => {
+            let seed = rand::random::<[u8; 32]>();
+            let key = SigningKey::from_bytes(&seed);
+            let encoded = Zeroizing::new(STANDARD_NO_PAD.encode(seed));
+            entry
+                .set_password(&encoded)
+                .map_err(|_| "unable to save the Linux client identity".to_owned())?;
+            Ok(key)
+        }
+        Err(_) => Err("Windows Credential Manager is unavailable".to_owned()),
+    }
+}
+
+fn validate_agent_public_key(public_key: &str) -> Result<(), String> {
+    edge_device_id(public_key)
+        .map(|_| ())
+        .map_err(|_| "stored Linux Agent identity is invalid".to_owned())
+}
+
+#[cfg(windows)]
+fn load_known_agent(certificate_sha256: [u8; 32]) -> Result<Option<String>, String> {
+    let fingerprint = hex_digest(&certificate_sha256);
+    let reference = LinuxAgentIdentityRef::new(&fingerprint)
+        .map_err(|_| "Linux Agent certificate fingerprint is invalid".to_owned())?;
+    match linux_agent_identity_load(&reference) {
+        Ok(public_key) => {
+            validate_agent_public_key(&public_key)?;
+            Ok(Some(public_key))
+        }
+        Err(remotedesk_credential_store::CredentialStoreError::Missing) => Ok(None),
+        Err(_) => Err("Windows Credential Manager is unavailable".to_owned()),
+    }
+}
+
+#[cfg(windows)]
+fn save_known_agent(certificate_sha256: [u8; 32], public_key: &str) -> Result<(), String> {
+    validate_agent_public_key(public_key)?;
+    let fingerprint = hex_digest(&certificate_sha256);
+    let reference = LinuxAgentIdentityRef::new(&fingerprint)
+        .map_err(|_| "Linux Agent certificate fingerprint is invalid".to_owned())?;
+    linux_agent_identity_save(&reference, public_key)
+        .map_err(|_| "unable to save the Linux Agent identity".to_owned())
+}
+
+#[cfg(not(windows))]
+fn load_or_create_identity() -> Result<SigningKey, String> {
+    Err("the Linux terminal controller is currently packaged for Windows only".to_owned())
+}
+
+#[cfg(not(windows))]
+fn load_known_agent(_: [u8; 32]) -> Result<Option<String>, String> {
+    Ok(None)
+}
+
+#[cfg(not(windows))]
+fn save_known_agent(_: [u8; 32], public_key: &str) -> Result<(), String> {
+    validate_agent_public_key(public_key)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use remotedesk_agent_runtime::{
+        AgentState, EdgePresenceClient, EdgePresenceConfig, verify_auth_signature,
+    };
+    use remotedesk_edge_service::{
+        ApiConfig, EdgeApi, RelayBroker, RelayConfig, RelayTicketIssuer, run_http_server,
+        run_relay_listener,
+    };
+    use std::fs;
+    use std::net::SocketAddr;
+    use std::sync::atomic::{AtomicBool, Ordering};
+    use std::thread::{self, JoinHandle};
+    use tiny_http::Server;
+
+    const ADMIN_TOKEN: &str = "admin-token-0123456789abcdef0123456789";
+    const PRESENCE_TOKEN: &str = "presence-token-0123456789abcdef012345";
+    const TICKET_SECRET: &[u8] = b"ticket-secret-0123456789abcdef0123456";
+
+    struct TestEdge {
+        address: SocketAddr,
+        shutdown: Arc<AtomicBool>,
+        http_worker: Option<JoinHandle<()>>,
+        relay_worker: Option<JoinHandle<()>>,
+    }
+
+    impl TestEdge {
+        fn start() -> Self {
+            let issuer = RelayTicketIssuer::new(TICKET_SECRET, "test-pop").unwrap();
+            let broker = Arc::new(RelayBroker::new(issuer.clone(), RelayConfig::default()));
+            let relay_listener = std::net::TcpListener::bind("127.0.0.1:0").unwrap();
+            let relay_address = relay_listener.local_addr().unwrap();
+            let api = Arc::new(
+                EdgeApi::new(
+                    ApiConfig {
+                        api_token: ADMIN_TOKEN.into(),
+                        presence_token: PRESENCE_TOKEN.into(),
+                        pop_id: "test-pop".into(),
+                        region: "test-region".into(),
+                        public_relay_address: relay_address.to_string(),
+                        default_relay_ttl_seconds: 300,
+                        default_relay_max_bytes: 1024 * 1024,
+                        turn_pops: vec![],
+                    },
+                    issuer,
+                    Arc::clone(&broker),
+                )
+                .unwrap(),
+            );
+            let server = Server::http("127.0.0.1:0").unwrap();
+            let address = server.server_addr().to_ip().unwrap();
+            let shutdown = Arc::new(AtomicBool::new(false));
+            let http_worker = {
+                let shutdown = Arc::clone(&shutdown);
+                thread::spawn(move || run_http_server(&server, &api, &shutdown).unwrap())
+            };
+            let relay_worker = {
+                let shutdown = Arc::clone(&shutdown);
+                thread::spawn(move || {
+                    run_relay_listener(&relay_listener, &broker, &shutdown).unwrap();
+                })
+            };
+            Self {
+                address,
+                shutdown,
+                http_worker: Some(http_worker),
+                relay_worker: Some(relay_worker),
+            }
+        }
+
+        fn url(&self) -> Url {
+            parse_edge_api_url(&format!("http://{}/", self.address)).unwrap()
+        }
+    }
+
+    impl Drop for TestEdge {
+        fn drop(&mut self) {
+            self.shutdown.store(true, Ordering::Release);
+            if let Some(worker) = self.http_worker.take() {
+                worker.join().unwrap();
+            }
+            if let Some(worker) = self.relay_worker.take() {
+                worker.join().unwrap();
+            }
+        }
+    }
+
+    fn test_root(name: &str) -> PathBuf {
+        std::env::temp_dir().join(format!(
+            "remotedesk-{name}-{}-{}",
+            std::process::id(),
+            rand::random::<u64>()
+        ))
+    }
+
+    fn strings<'a>(values: &'a [&'a str]) -> impl Iterator<Item = String> + 'a {
+        values.iter().map(|value| (*value).to_owned())
+    }
+
+    #[tokio::test]
+    #[expect(
+        clippy::too_many_lines,
+        reason = "the joint test keeps the signed admission, TLS tunnel, and one-use ticket lifecycle visible"
+    )]
+    async fn remote_pairing_and_known_device_sessions_use_outbound_only_edge_relay() {
+        let _ = rustls::crypto::ring::default_provider().install_default();
+        let edge = TestEdge::start();
+        let root = test_root("controller-edge-signal");
+        let state = AgentState::new(&root);
+        let identity = state.ensure_identity("test-host").unwrap();
+        let client_signing = SigningKey::from_bytes(&[12; 32]);
+        let pairing_code = state
+            .create_pairing_grant(60, vec!["terminal".into()], vec!["alice".into()])
+            .unwrap()
+            .expose()
+            .to_owned();
+        let config = EdgePresenceConfig::new(
+            edge.url().as_str(),
+            PRESENCE_TOKEN.into(),
+            "test-region".into(),
+            "gateway-1".into(),
+        )
+        .unwrap();
+        let online = Arc::new(AtomicBool::new(false));
+        let (shutdown_tx, shutdown_rx) = tokio::sync::watch::channel(false);
+        let local_listener = tokio::net::TcpListener::bind("127.0.0.1:0").await.unwrap();
+        let local_target = local_listener.local_addr().unwrap();
+        let fingerprint_text = identity.tls_certificate_fingerprint().unwrap();
+        let fingerprint = parse_fingerprint(&fingerprint_text).unwrap();
+        let certificates = rustls_pemfile::certs(&mut std::io::BufReader::new(
+            identity.tls_certificate_pem.as_bytes(),
+        ))
+        .collect::<Result<Vec<_>, _>>()
+        .unwrap();
+        let private_key = rustls_pemfile::private_key(&mut std::io::BufReader::new(
+            identity.tls_private_key_pem.as_bytes(),
+        ))
+        .unwrap()
+        .unwrap();
+        let tls_acceptor = tokio_rustls::TlsAcceptor::from(Arc::new(
+            rustls::ServerConfig::builder()
+                .with_no_client_auth()
+                .with_single_cert(certificates, private_key)
+                .unwrap(),
+        ));
+        let server_device_public_key = identity.public_key.clone();
+        let server_state = state.clone();
+        let server_pairing_code = pairing_code.clone();
+        let echo_task = tokio::spawn(async move {
+            for connection_index in 0..2 {
+                let (stream, _) = local_listener.accept().await.unwrap();
+                let tls = tls_acceptor.accept(stream).await.unwrap();
+                let mut socket = tokio_tungstenite::accept_async(tls).await.unwrap();
+                let challenge = AuthChallenge::generate();
+                socket
+                    .send(Message::Text(
+                        serde_json::to_string(&ServerEvent::Hello {
+                            protocol_major: PROTOCOL_MAJOR,
+                            protocol_minor: PROTOCOL_MINOR,
+                            device_public_key: server_device_public_key.clone(),
+                            tls_certificate_sha256: fingerprint_text.clone(),
+                            challenge: challenge.encoded(),
+                            terminal: true,
+                            desktop: false,
+                            files: true,
+                            edge_presence_configured: true,
+                            edge_presence_online: true,
+                            edge_signaling_configured: true,
+                            edge_signaling_online: true,
+                        })
+                        .unwrap()
+                        .into(),
+                    ))
+                    .await
+                    .unwrap();
+                let command: ClientCommand =
+                    serde_json::from_slice(&socket.next().await.unwrap().unwrap().into_data())
+                        .unwrap();
+                match (connection_index, command) {
+                    (
+                        0,
+                        ClientCommand::Pair {
+                            client_name,
+                            client_public_key,
+                            signature,
+                            code,
+                            ..
+                        },
+                    ) => {
+                        verify_auth_signature(&client_public_key, &signature, &challenge).unwrap();
+                        assert_eq!(code, server_pairing_code);
+                        let grant = server_state.consume_pairing_grant(&code).unwrap();
+                        let client = server_state
+                            .grant_client(
+                                client_name,
+                                client_public_key,
+                                grant.permissions,
+                                grant.allowed_users,
+                            )
+                            .unwrap();
+                        socket
+                            .send(Message::Text(
+                                serde_json::to_string(&ServerEvent::Paired {
+                                    client_fingerprint: client.fingerprint,
+                                    permissions: client.permissions,
+                                })
+                                .unwrap()
+                                .into(),
+                            ))
+                            .await
+                            .unwrap();
+                    }
+                    (
+                        1,
+                        ClientCommand::Authenticate {
+                            client_public_key,
+                            signature,
+                            ..
+                        },
+                    ) => {
+                        verify_auth_signature(&client_public_key, &signature, &challenge).unwrap();
+                        socket
+                            .send(Message::Text(
+                                serde_json::to_string(&ServerEvent::Authenticated {
+                                    client_fingerprint: "test-client".into(),
+                                    permissions: vec!["terminal".into()],
+                                })
+                                .unwrap()
+                                .into(),
+                            ))
+                            .await
+                            .unwrap();
+                    }
+                    _ => panic!("relay client used an unexpected authentication command"),
+                }
+                let expected = if connection_index == 0 {
+                    b"pair-over-edge".as_slice()
+                } else {
+                    b"known-over-edge".as_slice()
+                };
+                assert_eq!(socket.next().await.unwrap().unwrap().into_data(), expected);
+                socket
+                    .send(Message::Binary(if connection_index == 0 {
+                        b"paired-over-edge".to_vec().into()
+                    } else {
+                        b"agent-over-edge!".to_vec().into()
+                    }))
+                    .await
+                    .unwrap();
+            }
+        });
+        let presence_task = {
+            let state = state.clone();
+            let online = Arc::clone(&online);
+            let device_id = edge_device_id(&identity.public_key).unwrap();
+            tokio::spawn(async move {
+                EdgePresenceClient::new(config)
+                    .unwrap()
+                    .run(
+                        device_id,
+                        state,
+                        online,
+                        shutdown_rx,
+                        Some(local_target),
+                        None,
+                    )
+                    .await;
+            })
+        };
+        tokio::time::timeout(Duration::from_secs(5), async {
+            while !online.load(Ordering::Acquire) {
+                tokio::time::sleep(Duration::from_millis(20)).await;
+            }
+        })
+        .await
+        .unwrap();
+        let pair_args = Args {
+            target: format!("localhost:{}", local_target.port()),
+            user: "alice".into(),
+            certificate_sha256: fingerprint,
+            probe_json: false,
+            pair: true,
+            agent_public_key: Some(identity.public_key.clone()),
+            transfer: None,
+            edge_api_url: Some(edge.url()),
+            desktop: None,
+            session_id: None,
+        };
+        let pairing_session = authorize_edge_session(
+            pair_args.edge_api_url.as_ref().unwrap(),
+            &identity.public_key,
+            &pair_args,
+            &client_signing,
+        )
+        .await
+        .unwrap();
+        let agent_url = terminal_url(&format!("localhost:{}", local_target.port())).unwrap();
+        let mut paired = connect_agent(&agent_url, fingerprint, Some(&pairing_session.relay))
+            .await
+            .unwrap();
+        let authenticated = authenticate_with_pairing_code(
+            &mut paired,
+            &pair_args,
+            &client_signing,
+            true,
+            Some(&pairing_code),
+        )
+        .await
+        .unwrap();
+        assert_eq!(authenticated.device_public_key, identity.public_key);
+        paired
+            .send(Message::Binary(b"pair-over-edge".to_vec().into()))
+            .await
+            .unwrap();
+        assert_eq!(
+            paired.next().await.unwrap().unwrap().into_data(),
+            b"paired-over-edge".as_slice()
+        );
+        drop(paired);
+        assert!(connect_edge_relay(&pairing_session.relay).await.is_err());
+
+        let args = Args {
+            pair: false,
+            agent_public_key: None,
+            ..pair_args
+        };
+        let authorized = authorize_edge_session(
+            args.edge_api_url.as_ref().unwrap(),
+            &identity.public_key,
+            &args,
+            &client_signing,
+        )
+        .await
+        .unwrap();
+        let mut relayed = connect_agent(&agent_url, fingerprint, Some(&authorized.relay))
+            .await
+            .unwrap();
+        let authenticated = authenticate(&mut relayed, &args, &client_signing, false)
+            .await
+            .unwrap();
+        assert_eq!(authenticated.device_public_key, identity.public_key);
+        relayed
+            .send(Message::Binary(b"known-over-edge".to_vec().into()))
+            .await
+            .unwrap();
+        assert_eq!(
+            relayed.next().await.unwrap().unwrap().into_data(),
+            b"agent-over-edge!".as_slice()
+        );
+        drop(relayed);
+        tokio::time::timeout(Duration::from_secs(2), echo_task)
+            .await
+            .unwrap()
+            .unwrap();
+        assert!(connect_edge_relay(&authorized.relay).await.is_err());
+        let status = state.edge_presence_status().unwrap().unwrap();
+        assert_eq!(status.signal_requests_received, 2);
+        assert_eq!(status.signal_requests_accepted, 2);
+        assert_eq!(status.signal_requests_rejected, 0);
+        shutdown_tx.send(true).unwrap();
+        tokio::time::timeout(Duration::from_secs(6), presence_task)
+            .await
+            .unwrap()
+            .unwrap();
+        fs::remove_dir_all(root).unwrap();
+    }
+
+    #[test]
+    fn arguments_require_pin_and_accept_root() {
+        let args = parse_args(strings(&[
+            "--target",
+            "linux.example.test:39500",
+            "--user",
+            "alice",
+            "--certificate-sha256",
+            &"ab".repeat(32),
+            "--pair",
+        ]))
+        .unwrap();
+        assert_eq!(args.user, "alice");
+        assert!(args.pair);
+        assert!(!args.probe_json);
+        let agent_key =
+            STANDARD_NO_PAD.encode(SigningKey::from_bytes(&[33; 32]).verifying_key().as_bytes());
+        let remote = parse_args(strings(&[
+            "--target",
+            "linux.example.test:39500",
+            "--user",
+            "alice",
+            "--certificate-sha256",
+            &"ab".repeat(32),
+            "--pair",
+            "--edge-api-url",
+            "https://edge.example.test/",
+            "--agent-public-key",
+            &agent_key,
+        ]))
+        .unwrap();
+        assert_eq!(remote.agent_public_key.as_deref(), Some(agent_key.as_str()));
+        let root = parse_args(strings(&[
+            "--target",
+            "host",
+            "--user",
+            "root",
+            "--certificate-sha256",
+            &"ab".repeat(32),
+        ]))
+        .unwrap();
+        assert_eq!(root.user, "root");
+    }
+
+    #[test]
+    fn probe_arguments_require_only_target_and_certificate_pin() {
+        let args = parse_args(strings(&[
+            "--probe-json",
+            "--target",
+            "linux.example.test:39500",
+            "--certificate-sha256",
+            &"ab".repeat(32),
+        ]))
+        .unwrap();
+        assert!(args.probe_json);
+        assert!(args.user.is_empty());
+        assert!(args.desktop.is_none());
+        assert!(args.transfer.is_none());
+        assert!(
+            parse_args(strings(&[
+                "--probe-json",
+                "--target",
+                "host",
+                "--user",
+                "alice",
+                "--certificate-sha256",
+                &"ab".repeat(32),
+            ]))
+            .is_err()
+        );
+        assert!(
+            parse_args(strings(&[
+                "--probe-json",
+                "--target",
+                "host",
+                "--certificate-sha256",
+                &"ab".repeat(32),
+                "--edge-api-url",
+                "https://edge.example.test/",
+            ]))
+            .is_err()
+        );
+    }
+
+    #[test]
+    fn terminal_targets_default_to_agent_port() {
+        assert_eq!(
+            terminal_url("linux.example.test").unwrap().port(),
+            Some(39_500)
+        );
+        assert_eq!(
+            terminal_url("linux.example.test:40000").unwrap().port(),
+            Some(40_000)
+        );
+        assert!(terminal_url("user:secret@host").is_err());
+    }
+
+    #[test]
+    fn desktop_arguments_are_bounded_and_create_a_desktop_edge_intent() {
+        let args = parse_args(strings(&[
+            "--target",
+            "linux.example.test",
+            "--user",
+            "alice",
+            "--certificate-sha256",
+            &"ab".repeat(32),
+            "--desktop",
+            "--width",
+            "2560",
+            "--height",
+            "1440",
+            "--fps",
+            "20",
+            "--fullscreen",
+            "--follow-window",
+            "--capture-input",
+            "--clipboard-read",
+            "--clipboard-write",
+            "--session-id",
+            "1234-5678-9",
+        ]))
+        .unwrap();
+        assert_eq!(
+            args.desktop,
+            Some(DesktopOptions {
+                width: 2560,
+                height: 1440,
+                frames_per_second: 20,
+                fullscreen: true,
+                follow_window: true,
+                capture_input: true,
+                clipboard_read: true,
+                clipboard_write: true,
+            })
+        );
+        assert_eq!(args.session_id.as_deref(), Some("1234-5678-9"));
+        assert!(
+            parse_args(strings(&[
+                "--target",
+                "linux.example.test",
+                "--user",
+                "alice",
+                "--certificate-sha256",
+                &"ab".repeat(32),
+                "--clipboard-read",
+            ]))
+            .is_err()
+        );
+        let agent = SigningKey::from_bytes(&[44; 32]);
+        let agent_public_key = STANDARD_NO_PAD.encode(agent.verifying_key().as_bytes());
+        let client = SigningKey::from_bytes(&[45; 32]);
+        let intent = build_edge_intent(&agent_public_key, &args, &client).unwrap();
+        assert_eq!(intent.session_type, EdgeSessionType::Desktop);
+        assert_eq!(intent.body["requested_permissions"][0], "desktop");
+
+        assert!(
+            parse_args(strings(&[
+                "--target",
+                "host",
+                "--user",
+                "alice",
+                "--certificate-sha256",
+                &"ab".repeat(32),
+                "--desktop",
+                "--fps",
+                "31",
+            ]))
+            .is_err()
+        );
+    }
+
+    #[test]
+    fn edge_api_requires_secret_free_https_origin_or_loopback() {
+        assert!(parse_edge_api_url("https://edge.example.test/").is_ok());
+        assert!(parse_edge_api_url("http://127.0.0.1:7080/").is_ok());
+        assert!(parse_edge_api_url("http://edge.example.test/").is_err());
+        assert!(parse_edge_api_url("https://user:secret@edge.example.test/").is_err());
+        assert!(parse_edge_api_url("https://edge.example.test/path").is_err());
+        assert!(parse_edge_api_url("https://edge.example.test/?token=secret").is_err());
+        let args = parse_args(strings(&[
+            "--target",
+            "linux.example.test",
+            "--user",
+            "alice",
+            "--certificate-sha256",
+            &"ab".repeat(32),
+            "--edge-api-url",
+            "https://edge.example.test/",
+        ]))
+        .unwrap();
+        assert_eq!(
+            args.edge_api_url.unwrap().as_str(),
+            "https://edge.example.test/"
+        );
+    }
+
+    #[test]
+    fn stored_agent_public_key_is_canonical() {
+        let signing = SigningKey::from_bytes(&[21; 32]);
+        let public_key = STANDARD_NO_PAD.encode(signing.verifying_key().as_bytes());
+        assert!(validate_agent_public_key(&public_key).is_ok());
+        assert!(validate_agent_public_key("not-a-public-key").is_err());
+    }
+
+    #[test]
+    fn direct_webrtc_requires_protocol_minor_thirteen() {
+        assert!(!supports_direct_webrtc(12));
+        assert!(supports_direct_webrtc(13));
+        assert!(supports_direct_webrtc(14));
+    }
+
+    #[test]
+    fn opus_audio_requires_protocol_minor_fourteen() {
+        assert!(!supports_opus_audio(13));
+        assert!(supports_opus_audio(14));
+        assert!(supports_opus_audio(15));
+    }
+
+    #[test]
+    fn clipboard_requires_protocol_minor_fifteen_and_directional_grants() {
+        let mut agent = AuthenticatedAgent {
+            device_public_key: "key".into(),
+            edge_signaling_online: false,
+            protocol_minor: 15,
+            permissions: vec!["desktop".into(), "clipboard_read".into()],
+        };
+        assert!(!supports_clipboard(14));
+        assert!(supports_clipboard(15));
+        assert!(has_permission(&agent, "clipboard_read"));
+        assert!(!has_permission(&agent, "clipboard_write"));
+        agent.permissions.push("clipboard_write".into());
+        assert!(has_permission(&agent, "clipboard_write"));
+    }
+
+    #[test]
+    fn transfer_identity_is_stable_and_binds_target_and_content() {
+        let first = upload_transfer_id("alice", "Documents/report.bin", 10, &"ab".repeat(32));
+        assert_eq!(first.len(), 32);
+        assert_eq!(
+            first,
+            upload_transfer_id("alice", "Documents/report.bin", 10, &"ab".repeat(32))
+        );
+        assert_ne!(
+            first,
+            upload_transfer_id("alice", "Documents/other.bin", 10, &"ab".repeat(32))
+        );
+        assert_ne!(
+            first,
+            upload_transfer_id("alice", "Documents/report.bin", 11, &"ab".repeat(32))
+        );
+    }
+
+    #[test]
+    fn download_partial_is_stable_and_hidden_beside_target() {
+        let target = PathBuf::from("Downloads").join("report.bin");
+        assert_eq!(
+            download_partial_path(&target).unwrap(),
+            PathBuf::from("Downloads").join(".report.bin.remotedesk.part")
+        );
+    }
+
+    #[test]
+    fn file_transfer_arguments_require_exactly_one_direction() {
+        let common = [
+            "--target",
+            "host",
+            "--user",
+            "alice",
+            "--certificate-sha256",
+        ];
+        let mut upload = common.map(str::to_owned).to_vec();
+        upload.extend([
+            "ab".repeat(32),
+            "--upload".into(),
+            "C:\\file.bin".into(),
+            "--remote-path".into(),
+            "Documents/file.bin".into(),
+        ]);
+        assert!(matches!(
+            parse_args(upload.into_iter()).unwrap().transfer,
+            Some(FileTransfer::Upload { .. })
+        ));
+        let mut incomplete = common.map(str::to_owned).to_vec();
+        incomplete.extend([
+            "ab".repeat(32),
+            "--download".into(),
+            "Documents/file.bin".into(),
+        ]);
+        assert!(parse_args(incomplete.into_iter()).is_err());
+    }
+
+    #[test]
+    fn key_mapping_preserves_control_and_navigation() {
+        assert_eq!(
+            key_bytes(KeyEvent::new(KeyCode::Char('c'), KeyModifiers::CONTROL)),
+            Some(vec![3])
+        );
+        assert_eq!(
+            key_bytes(KeyEvent::new(KeyCode::Up, KeyModifiers::NONE)),
+            Some(b"\x1b[A".to_vec())
+        );
+    }
+}
+mod desktop_viewer;
+#[cfg(windows)]
+mod native_audio;
+#[cfg(windows)]
+mod native_clipboard;
+#[cfg(windows)]
+mod native_stream;
diff --git a/client/helpers/linux-terminal/src/native_audio.rs b/client/helpers/linux-terminal/src/native_audio.rs
new file mode 100644
index 0000000..6b9504f
--- /dev/null
+++ b/client/helpers/linux-terminal/src/native_audio.rs
@@ -0,0 +1,55 @@
+use std::sync::mpsc::{SyncSender, TrySendError, sync_channel};
+
+use cpal::traits::StreamTrait as _;
+use ironrdp_rdpsnd::pdu::{AudioFormat, WaveFormat};
+use ironrdp_rdpsnd_native::cpal::DecodeStream;
+use remotedesk_agent_runtime::RemoteOpusPacket;
+
+const OPUS_SAMPLE_RATE: u32 = 48_000;
+const OPUS_CHANNELS: u16 = 2;
+const OPUS_BITRATE_BYTES_PER_SECOND: u32 = 12_000;
+const AUDIO_PACKET_QUEUE: usize = 8;
+
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub enum AudioPushResult {
+    Queued,
+    Dropped,
+}
+
+pub struct NativeOpusPlayer {
+    sender: SyncSender<Vec<u8>>,
+    _stream: DecodeStream,
+}
+
+impl NativeOpusPlayer {
+    pub fn new() -> Result<Self, String> {
+        let (sender, receiver) = sync_channel(AUDIO_PACKET_QUEUE);
+        let format = AudioFormat {
+            format: WaveFormat::OPUS,
+            n_channels: OPUS_CHANNELS,
+            n_samples_per_sec: OPUS_SAMPLE_RATE,
+            n_avg_bytes_per_sec: OPUS_BITRATE_BYTES_PER_SECOND,
+            n_block_align: 1,
+            bits_per_sample: 16,
+            data: None,
+        };
+        let stream = DecodeStream::new(&format, receiver)
+            .map_err(|error| format!("unable to initialize Opus/WASAPI playback: {error}"))?;
+        stream
+            .stream()
+            .play()
+            .map_err(|error| format!("unable to start Opus/WASAPI playback: {error}"))?;
+        Ok(Self {
+            sender,
+            _stream: stream,
+        })
+    }
+
+    pub fn push(&self, packet: RemoteOpusPacket) -> Result<AudioPushResult, String> {
+        match self.sender.try_send(packet.data.to_vec()) {
+            Ok(()) => Ok(AudioPushResult::Queued),
+            Err(TrySendError::Full(_)) => Ok(AudioPushResult::Dropped),
+            Err(TrySendError::Disconnected(_)) => Err("Opus/WASAPI playback stopped".to_owned()),
+        }
+    }
+}
diff --git a/client/helpers/linux-terminal/src/native_clipboard.rs b/client/helpers/linux-terminal/src/native_clipboard.rs
new file mode 100644
index 0000000..d294c16
--- /dev/null
+++ b/client/helpers/linux-terminal/src/native_clipboard.rs
@@ -0,0 +1,177 @@
+use std::sync::mpsc::{self, Receiver, SyncSender, TrySendError};
+use std::time::Duration;
+
+use remotedesk_agent_runtime::{DESKTOP_MAX_CLIPBOARD_BYTES, normalize_clipboard_text};
+use tokio::sync::mpsc as tokio_mpsc;
+use windows::Win32::Foundation::{HANDLE, HGLOBAL};
+use windows::Win32::System::DataExchange::{
+    CloseClipboard, EmptyClipboard, GetClipboardData, GetClipboardSequenceNumber,
+    IsClipboardFormatAvailable, OpenClipboard, SetClipboardData,
+};
+use windows::Win32::System::Memory::{
+    GMEM_MOVEABLE, GlobalAlloc, GlobalLock, GlobalSize, GlobalUnlock,
+};
+use windows::core::Free as _;
+
+const CF_UNICODETEXT: u32 = 13;
+const POLL_INTERVAL: Duration = Duration::from_millis(100);
+const OPEN_RETRIES: usize = 5;
+
+enum ClipboardCommand {
+    SetText(String),
+}
+
+pub struct NativeClipboard {
+    commands: SyncSender<ClipboardCommand>,
+    events: tokio_mpsc::Receiver<String>,
+}
+
+impl NativeClipboard {
+    pub fn start(read_local: bool) -> Self {
+        let (commands, command_receiver) = mpsc::sync_channel(4);
+        let (event_sender, events) = tokio_mpsc::channel(4);
+        let _ = std::thread::spawn(move || {
+            clipboard_worker(command_receiver, event_sender, read_local)
+        });
+        Self { commands, events }
+    }
+
+    pub async fn next_text(&mut self) -> Option<String> {
+        self.events.recv().await
+    }
+
+    pub fn set_text(&self, text: String) -> Result<(), String> {
+        self.commands
+            .try_send(ClipboardCommand::SetText(text))
+            .map_err(|error| match error {
+                TrySendError::Full(_) => "local clipboard worker is busy".to_owned(),
+                TrySendError::Disconnected(_) => "local clipboard worker stopped".to_owned(),
+            })
+    }
+}
+
+fn clipboard_worker(
+    commands: Receiver<ClipboardCommand>,
+    events: tokio_mpsc::Sender<String>,
+    read_local: bool,
+) {
+    let mut last_sequence = 0;
+    loop {
+        match commands.recv_timeout(POLL_INTERVAL) {
+            Ok(ClipboardCommand::SetText(text)) => match write_text(&text) {
+                Ok(()) => last_sequence = unsafe { GetClipboardSequenceNumber() },
+                Err(error) => {
+                    eprintln!("unable to update the Windows clipboard: {error}");
+                }
+            },
+            Err(mpsc::RecvTimeoutError::Disconnected) => return,
+            Err(mpsc::RecvTimeoutError::Timeout) => {}
+        }
+        if !read_local {
+            continue;
+        }
+        let sequence = unsafe { GetClipboardSequenceNumber() };
+        if sequence == 0 || sequence == last_sequence {
+            continue;
+        }
+        match read_text() {
+            Ok(Some(text)) => {
+                last_sequence = sequence;
+                if events.blocking_send(text).is_err() {
+                    return;
+                }
+            }
+            Ok(None) => last_sequence = sequence,
+            Err(error) => eprintln!("unable to read the Windows clipboard: {error}"),
+        }
+    }
+}
+
+struct ClipboardGuard;
+
+impl ClipboardGuard {
+    fn open() -> Result<Self, String> {
+        for attempt in 0..OPEN_RETRIES {
+            if unsafe { OpenClipboard(None) }.is_ok() {
+                return Ok(Self);
+            }
+            if attempt + 1 < OPEN_RETRIES {
+                std::thread::sleep(Duration::from_millis(10));
+            }
+        }
+        Err("clipboard is locked by another process".to_owned())
+    }
+}
+
+impl Drop for ClipboardGuard {
+    fn drop(&mut self) {
+        let _ = unsafe { CloseClipboard() };
+    }
+}
+
+fn read_text() -> Result<Option<String>, String> {
+    let _clipboard = ClipboardGuard::open()?;
+    if unsafe { IsClipboardFormatAvailable(CF_UNICODETEXT) }.is_err() {
+        return Ok(None);
+    }
+    let handle = unsafe { GetClipboardData(CF_UNICODETEXT) }
+        .map_err(|error| format!("GetClipboardData failed: {error}"))?;
+    let global = HGLOBAL(handle.0);
+    let byte_len = unsafe { GlobalSize(global) };
+    let max_byte_len = (DESKTOP_MAX_CLIPBOARD_BYTES * 2 + 1) * size_of::<u16>();
+    if byte_len < size_of::<u16>() || byte_len > max_byte_len || byte_len % 2 != 0 {
+        return Ok(None);
+    }
+    let pointer = unsafe { GlobalLock(global) }.cast::<u16>();
+    if pointer.is_null() {
+        return Err("GlobalLock failed".to_owned());
+    }
+    let units = unsafe { std::slice::from_raw_parts(pointer, byte_len / size_of::<u16>()) };
+    let Some(length) = units.iter().position(|unit| *unit == 0) else {
+        let _ = unsafe { GlobalUnlock(global) };
+        return Ok(None);
+    };
+    let text = String::from_utf16(&units[..length])
+        .map_err(|_| "clipboard contains invalid UTF-16".to_owned());
+    let _ = unsafe { GlobalUnlock(global) };
+    let text = normalize_clipboard_text(&text?).map_err(|error| error.to_string())?;
+    if text.len() > DESKTOP_MAX_CLIPBOARD_BYTES {
+        return Ok(None);
+    }
+    Ok(Some(text))
+}
+
+fn write_text(text: &str) -> Result<(), String> {
+    let normalized = normalize_clipboard_text(text).map_err(|error| error.to_string())?;
+    if normalized.len() > DESKTOP_MAX_CLIPBOARD_BYTES {
+        return Err("clipboard text exceeds the size limit".to_owned());
+    }
+    let windows_text = normalized.replace('\n', "\r\n");
+    let mut units = windows_text.encode_utf16().collect::<Vec<_>>();
+    units.push(0);
+    let byte_len = units
+        .len()
+        .checked_mul(size_of::<u16>())
+        .ok_or_else(|| "clipboard allocation size overflowed".to_owned())?;
+    let mut global = unsafe { GlobalAlloc(GMEM_MOVEABLE, byte_len) }
+        .map_err(|error| format!("GlobalAlloc failed: {error}"))?;
+    let pointer = unsafe { GlobalLock(global) }.cast::<u16>();
+    if pointer.is_null() {
+        unsafe { global.free() };
+        return Err("GlobalLock failed".to_owned());
+    }
+    unsafe { std::ptr::copy_nonoverlapping(units.as_ptr(), pointer, units.len()) };
+    let _ = unsafe { GlobalUnlock(global) };
+
+    let result: Result<(), String> = (|| {
+        let _clipboard = ClipboardGuard::open()?;
+        unsafe { EmptyClipboard() }.map_err(|error| format!("EmptyClipboard failed: {error}"))?;
+        unsafe { SetClipboardData(CF_UNICODETEXT, Some(HANDLE(global.0))) }
+            .map_err(|error| format!("SetClipboardData failed: {error}"))?;
+        Ok(())
+    })();
+    if result.is_err() {
+        unsafe { global.free() };
+    }
+    result
+}
diff --git a/client/helpers/linux-terminal/src/native_stream.rs b/client/helpers/linux-terminal/src/native_stream.rs
new file mode 100644
index 0000000..d5c0c9a
--- /dev/null
+++ b/client/helpers/linux-terminal/src/native_stream.rs
@@ -0,0 +1,785 @@
+use core::mem::ManuallyDrop;
+use std::sync::Arc;
+use std::time::Instant;
+
+use raw_window_handle::{HasWindowHandle as _, RawWindowHandle};
+use remotedesk_agent_runtime::RemoteH264AccessUnit;
+use windows::Win32::Foundation::{HWND, RECT};
+use windows::Win32::Graphics::Direct3D::{
+    D3D_DRIVER_TYPE_HARDWARE, D3D_FEATURE_LEVEL_11_0, D3D_FEATURE_LEVEL_11_1,
+};
+use windows::Win32::Graphics::Direct3D11::{
+    D3D11_CREATE_DEVICE_BGRA_SUPPORT, D3D11_CREATE_DEVICE_VIDEO_SUPPORT, D3D11_SDK_VERSION,
+    D3D11_TEX2D_VPIV, D3D11_TEX2D_VPOV, D3D11_VIDEO_FRAME_FORMAT_PROGRESSIVE,
+    D3D11_VIDEO_PROCESSOR_COLOR_SPACE, D3D11_VIDEO_PROCESSOR_CONTENT_DESC,
+    D3D11_VIDEO_PROCESSOR_FORMAT_SUPPORT_INPUT, D3D11_VIDEO_PROCESSOR_FORMAT_SUPPORT_OUTPUT,
+    D3D11_VIDEO_PROCESSOR_INPUT_VIEW_DESC, D3D11_VIDEO_PROCESSOR_INPUT_VIEW_DESC_0,
+    D3D11_VIDEO_PROCESSOR_OUTPUT_VIEW_DESC, D3D11_VIDEO_PROCESSOR_OUTPUT_VIEW_DESC_0,
+    D3D11_VIDEO_PROCESSOR_STREAM, D3D11_VIDEO_USAGE_PLAYBACK_NORMAL,
+    D3D11_VPIV_DIMENSION_TEXTURE2D, D3D11_VPOV_DIMENSION_TEXTURE2D, D3D11CreateDevice,
+    ID3D11Device, ID3D11DeviceContext, ID3D11RenderTargetView, ID3D11Texture2D, ID3D11VideoContext,
+    ID3D11VideoDevice, ID3D11VideoProcessor, ID3D11VideoProcessorEnumerator,
+    ID3D11VideoProcessorOutputView,
+};
+use windows::Win32::Graphics::Dxgi::Common::{
+    DXGI_FORMAT_B8G8R8A8_UNORM, DXGI_FORMAT_NV12, DXGI_FORMAT_UNKNOWN, DXGI_MODE_DESC,
+    DXGI_RATIONAL, DXGI_SAMPLE_DESC,
+};
+use windows::Win32::Graphics::Dxgi::{
+    DXGI_MWA_NO_ALT_ENTER, DXGI_PRESENT, DXGI_SWAP_CHAIN_DESC, DXGI_SWAP_CHAIN_FLAG,
+    DXGI_SWAP_EFFECT_DISCARD, DXGI_USAGE_RENDER_TARGET_OUTPUT, IDXGIAdapter, IDXGIDevice,
+    IDXGIFactory, IDXGISwapChain,
+};
+use windows::Win32::Media::MediaFoundation::{
+    CLSID_MSH264DecoderMFT, IMFAttributes, IMFDXGIBuffer, IMFDXGIDeviceManager, IMFMediaType,
+    IMFSample, IMFTransform, MF_E_NO_MORE_TYPES, MF_E_NOTACCEPTING, MF_E_TRANSFORM_NEED_MORE_INPUT,
+    MF_E_TRANSFORM_STREAM_CHANGE, MF_MT_FRAME_SIZE, MF_MT_MAJOR_TYPE, MF_MT_SUBTYPE,
+    MF_MT_VIDEO_NOMINAL_RANGE, MF_MT_YUV_MATRIX, MF_SA_D3D11_AWARE, MF_VERSION,
+    MFCreateDXGIDeviceManager, MFCreateMediaType, MFCreateMemoryBuffer, MFCreateSample,
+    MFMediaType_Video, MFNominalRange_0_255, MFSTARTUP_FULL, MFStartup,
+    MFT_MESSAGE_NOTIFY_BEGIN_STREAMING, MFT_MESSAGE_NOTIFY_START_OF_STREAM,
+    MFT_MESSAGE_SET_D3D_MANAGER, MFT_OUTPUT_DATA_BUFFER, MFT_OUTPUT_STREAM_CAN_PROVIDE_SAMPLES,
+    MFT_OUTPUT_STREAM_PROVIDES_SAMPLES, MFVideoFormat_H264, MFVideoFormat_H264_ES,
+    MFVideoFormat_NV12, MFVideoTransferMatrix_BT709,
+};
+use windows::Win32::System::Com::{
+    CLSCTX_INPROC_SERVER, COINIT_MULTITHREADED, CoCreateInstance, CoInitializeEx,
+};
+use windows::core::Interface as _;
+use winit::window::Window;
+
+const MAX_OUTPUT_TYPES: u32 = 64;
+const MAX_OUTPUTS_PER_INPUT: usize = 8;
+
+pub struct NativeH264Renderer {
+    decoder: StreamingDecoder,
+    renderer: VideoRenderer,
+}
+
+pub struct NativeVideoPresentation {
+    pub decode_latency_us: u64,
+    pub presentation_latency_us: u64,
+    pub frames: usize,
+}
+
+impl NativeH264Renderer {
+    pub fn new(window: Arc<Window>) -> Result<Self, String> {
+        let decoder = StreamingDecoder::new()?;
+        let renderer = VideoRenderer::new(window, decoder.device.clone(), decoder.context.clone())?;
+        Ok(Self { decoder, renderer })
+    }
+
+    pub fn decode_and_present(
+        &mut self,
+        access_unit: &RemoteH264AccessUnit,
+    ) -> Result<Option<NativeVideoPresentation>, String> {
+        let decode_started = Instant::now();
+        let frames = self.decoder.decode(access_unit)?;
+        let decode_latency_us = elapsed_microseconds(decode_started);
+        if frames.is_empty() {
+            return Ok(None);
+        }
+        let presentation_started = Instant::now();
+        let frame_count = frames.len();
+        for frame in frames {
+            self.renderer.present(&frame)?;
+        }
+        Ok(Some(NativeVideoPresentation {
+            decode_latency_us,
+            presentation_latency_us: elapsed_microseconds(presentation_started),
+            frames: frame_count,
+        }))
+    }
+}
+
+struct ComGuard;
+
+impl Drop for ComGuard {
+    fn drop(&mut self) {
+        unsafe { windows::Win32::System::Com::CoUninitialize() };
+    }
+}
+
+struct MediaFoundationGuard;
+
+impl Drop for MediaFoundationGuard {
+    fn drop(&mut self) {
+        let _ = unsafe { windows::Win32::Media::MediaFoundation::MFShutdown() };
+    }
+}
+
+struct StreamingDecoder {
+    transform: IMFTransform,
+    _input_type: IMFMediaType,
+    _manager: IMFDXGIDeviceManager,
+    _attributes: IMFAttributes,
+    device: ID3D11Device,
+    context: ID3D11DeviceContext,
+    next_timestamp_100ns: i64,
+    _media_foundation_guard: MediaFoundationGuard,
+    _com_guard: ComGuard,
+}
+
+impl StreamingDecoder {
+    fn new() -> Result<Self, String> {
+        unsafe { CoInitializeEx(None, COINIT_MULTITHREADED) }
+            .ok()
+            .map_err(|error| format!("unable to initialize COM for remote H.264: {error}"))?;
+        let com_guard = ComGuard;
+        unsafe { MFStartup(MF_VERSION, MFSTARTUP_FULL) }
+            .map_err(|error| format!("unable to start Media Foundation: {error}"))?;
+        let media_foundation_guard = MediaFoundationGuard;
+        let (device, context) = create_hardware_d3d11_device()?;
+        let mut reset_token = 0_u32;
+        let mut manager = None;
+        unsafe { MFCreateDXGIDeviceManager(&raw mut reset_token, &raw mut manager) }
+            .map_err(|error| format!("unable to create remote-video DXGI manager: {error}"))?;
+        let manager =
+            manager.ok_or_else(|| "Media Foundation returned no DXGI manager".to_owned())?;
+        unsafe { manager.ResetDevice(&device, reset_token) }
+            .map_err(|error| format!("unable to bind the remote-video D3D11 device: {error}"))?;
+
+        let transform: IMFTransform =
+            unsafe { CoCreateInstance(&CLSID_MSH264DecoderMFT, None, CLSCTX_INPROC_SERVER) }
+                .map_err(|error| {
+                    format!("unable to create the Windows H.264 decoder MFT: {error}")
+                })?;
+        let attributes = unsafe { transform.GetAttributes() }
+            .map_err(|error| format!("unable to read H.264 decoder attributes: {error}"))?;
+        let d3d11_aware_key = MF_SA_D3D11_AWARE;
+        if unsafe { attributes.GetUINT32(&d3d11_aware_key) }.unwrap_or_default() != 1 {
+            return Err("the Windows H.264 decoder is not D3D11-aware".to_owned());
+        }
+        unsafe { transform.ProcessMessage(MFT_MESSAGE_SET_D3D_MANAGER, manager.as_raw() as usize) }
+            .map_err(|error| format!("unable to attach D3D11 to the H.264 decoder: {error}"))?;
+
+        let input_type = select_h264_input(&transform)?;
+        select_nv12_output(&transform)?;
+        let output_info = unsafe { transform.GetOutputStreamInfo(0) }.map_err(|error| {
+            format!("unable to read H.264 decoder output requirements: {error}")
+        })?;
+        let sample_flags = u32::try_from(
+            (MFT_OUTPUT_STREAM_PROVIDES_SAMPLES.0 | MFT_OUTPUT_STREAM_CAN_PROVIDE_SAMPLES.0).max(0),
+        )
+        .unwrap_or_default();
+        if output_info.dwFlags & sample_flags == 0 {
+            return Err("the D3D11 H.264 decoder requires CPU-allocated output samples".to_owned());
+        }
+        unsafe { transform.ProcessMessage(MFT_MESSAGE_NOTIFY_BEGIN_STREAMING, 0) }
+            .map_err(|error| format!("unable to begin H.264 streaming: {error}"))?;
+        unsafe { transform.ProcessMessage(MFT_MESSAGE_NOTIFY_START_OF_STREAM, 0) }
+            .map_err(|error| format!("unable to start H.264 input: {error}"))?;
+        Ok(Self {
+            transform,
+            _input_type: input_type,
+            _manager: manager,
+            _attributes: attributes,
+            device,
+            context,
+            next_timestamp_100ns: 0,
+            _media_foundation_guard: media_foundation_guard,
+            _com_guard: com_guard,
+        })
+    }
+
+    fn decode(&mut self, access_unit: &RemoteH264AccessUnit) -> Result<Vec<DecodedFrame>, String> {
+        if access_unit.data.is_empty() || access_unit.data.len() > 16 * 1024 * 1024 {
+            return Err("remote H.264 access unit is outside the decoder bounds".to_owned());
+        }
+        let mut frames = self.drain_output()?;
+        let input = create_input_sample(
+            &access_unit.data,
+            self.next_timestamp_100ns,
+            access_unit.duration,
+        )?;
+        let duration_100ns = i64::try_from(access_unit.duration.as_nanos() / 100)
+            .map_err(|_| "remote H.264 duration overflow".to_owned())?
+            .max(1);
+        self.next_timestamp_100ns = self.next_timestamp_100ns.saturating_add(duration_100ns);
+        match unsafe { self.transform.ProcessInput(0, &input, 0) } {
+            Ok(()) => {}
+            Err(error) if error.code() == MF_E_NOTACCEPTING => {
+                frames.extend(self.drain_output()?);
+                unsafe { self.transform.ProcessInput(0, &input, 0) }
+                    .map_err(|retry| format!("H.264 decoder still rejects input: {retry}"))?;
+            }
+            Err(error) => return Err(format!("H.264 decoder rejected input: {error}")),
+        }
+        frames.extend(self.drain_output()?);
+        Ok(frames)
+    }
+
+    fn drain_output(&mut self) -> Result<Vec<DecodedFrame>, String> {
+        let mut frames = Vec::new();
+        for _ in 0..MAX_OUTPUTS_PER_INPUT {
+            let mut output = MFT_OUTPUT_DATA_BUFFER::default();
+            output.pSample = ManuallyDrop::new(None);
+            let mut status = 0_u32;
+            let result = unsafe {
+                self.transform
+                    .ProcessOutput(0, std::slice::from_mut(&mut output), &raw mut status)
+            };
+            let sample = unsafe { ManuallyDrop::take(&mut output.pSample) };
+            let _events = unsafe { ManuallyDrop::take(&mut output.pEvents) };
+            match result {
+                Ok(()) => {
+                    let sample = sample.ok_or_else(|| {
+                        "H.264 decoder returned success without a DXGI sample".to_owned()
+                    })?;
+                    frames.push(decoded_frame(sample, &self.transform, &self.device)?);
+                }
+                Err(error) if error.code() == MF_E_TRANSFORM_NEED_MORE_INPUT => break,
+                Err(error) if error.code() == MF_E_TRANSFORM_STREAM_CHANGE => {
+                    select_nv12_output(&self.transform)?;
+                }
+                Err(error) => return Err(format!("H.264 decoder output failed: {error}")),
+            }
+        }
+        Ok(frames)
+    }
+}
+
+fn select_h264_input(transform: &IMFTransform) -> Result<IMFMediaType, String> {
+    let mut last_error = None;
+    for subtype in [MFVideoFormat_H264_ES, MFVideoFormat_H264] {
+        let media_type = unsafe { MFCreateMediaType() }
+            .map_err(|error| format!("unable to create the H.264 input media type: {error}"))?;
+        let major_type_key = MF_MT_MAJOR_TYPE;
+        let video_type = MFMediaType_Video;
+        unsafe { media_type.SetGUID(&major_type_key, &video_type) }
+            .map_err(|error| format!("unable to set the H.264 input major type: {error}"))?;
+        let subtype_key = MF_MT_SUBTYPE;
+        unsafe { media_type.SetGUID(&subtype_key, &subtype) }
+            .map_err(|error| format!("unable to set the H.264 input subtype: {error}"))?;
+        match unsafe { transform.SetInputType(0, &media_type, 0) } {
+            Ok(()) => return Ok(media_type),
+            Err(error) => last_error = Some(error),
+        }
+    }
+    Err(format!(
+        "Windows H.264 decoder rejected Annex-B input: {}",
+        last_error
+            .map(|error| error.to_string())
+            .unwrap_or_else(|| "no supported input subtype".to_owned())
+    ))
+}
+
+fn create_input_sample(
+    data: &[u8],
+    timestamp_100ns: i64,
+    duration: std::time::Duration,
+) -> Result<IMFSample, String> {
+    let length = u32::try_from(data.len()).map_err(|_| "H.264 input is too large".to_owned())?;
+    let buffer = unsafe { MFCreateMemoryBuffer(length) }
+        .map_err(|error| format!("unable to allocate H.264 input buffer: {error}"))?;
+    let mut destination = core::ptr::null_mut();
+    unsafe { buffer.Lock(&raw mut destination, None, None) }
+        .map_err(|error| format!("unable to lock H.264 input buffer: {error}"))?;
+    if destination.is_null() {
+        let _ = unsafe { buffer.Unlock() };
+        return Err("Media Foundation returned a null H.264 input buffer".to_owned());
+    }
+    unsafe { core::ptr::copy_nonoverlapping(data.as_ptr(), destination, data.len()) };
+    unsafe { buffer.Unlock() }
+        .map_err(|error| format!("unable to unlock H.264 input buffer: {error}"))?;
+    unsafe { buffer.SetCurrentLength(length) }
+        .map_err(|error| format!("unable to commit H.264 input bytes: {error}"))?;
+    let sample = unsafe { MFCreateSample() }
+        .map_err(|error| format!("unable to create H.264 input sample: {error}"))?;
+    unsafe { sample.AddBuffer(&buffer) }
+        .map_err(|error| format!("unable to attach H.264 input bytes: {error}"))?;
+    unsafe { sample.SetSampleTime(timestamp_100ns) }
+        .map_err(|error| format!("unable to set H.264 sample time: {error}"))?;
+    let duration_100ns = i64::try_from(duration.as_nanos() / 100)
+        .map_err(|_| "H.264 sample duration overflow".to_owned())?
+        .max(1);
+    unsafe { sample.SetSampleDuration(duration_100ns) }
+        .map_err(|error| format!("unable to set H.264 sample duration: {error}"))?;
+    Ok(sample)
+}
+
+fn select_nv12_output(transform: &IMFTransform) -> Result<(), String> {
+    for index in 0..MAX_OUTPUT_TYPES {
+        let media_type = match unsafe { transform.GetOutputAvailableType(0, index) } {
+            Ok(media_type) => media_type,
+            Err(error) if error.code() == MF_E_NO_MORE_TYPES => break,
+            Err(error) => {
+                return Err(format!(
+                    "unable to enumerate decoder output {index}: {error}"
+                ));
+            }
+        };
+        let subtype_key = MF_MT_SUBTYPE;
+        let subtype = unsafe { media_type.GetGUID(&subtype_key) };
+        if subtype.is_ok_and(|value| value == MFVideoFormat_NV12)
+            && unsafe { transform.SetOutputType(0, &media_type, 0) }.is_ok()
+        {
+            return Ok(());
+        }
+    }
+    Err("the Windows H.264 decoder exposes no NV12 output".to_owned())
+}
+
+struct DecodedFrame {
+    _sample: IMFSample,
+    texture: ID3D11Texture2D,
+    subresource: u32,
+    mip_levels: u32,
+    width: u32,
+    height: u32,
+    input_color_space: D3D11_VIDEO_PROCESSOR_COLOR_SPACE,
+}
+
+fn decoded_frame(
+    sample: IMFSample,
+    transform: &IMFTransform,
+    expected_device: &ID3D11Device,
+) -> Result<DecodedFrame, String> {
+    let buffer_count = unsafe { sample.GetBufferCount() }
+        .map_err(|error| format!("unable to count decoded H.264 buffers: {error}"))?;
+    if buffer_count != 1 {
+        return Err("decoded H.264 frame must contain one DXGI buffer".to_owned());
+    }
+    let buffer = unsafe { sample.GetBufferByIndex(0) }
+        .map_err(|error| format!("unable to read decoded H.264 buffer: {error}"))?;
+    let dxgi_buffer = buffer
+        .cast::<IMFDXGIBuffer>()
+        .map_err(|_| "H.264 decoder returned a CPU media buffer".to_owned())?;
+    let mut raw_texture = core::ptr::null_mut();
+    unsafe { dxgi_buffer.GetResource(&ID3D11Texture2D::IID, &raw mut raw_texture) }
+        .map_err(|error| format!("decoded H.264 buffer has no D3D11 texture: {error}"))?;
+    if raw_texture.is_null() {
+        return Err("decoded H.264 buffer returned a null texture".to_owned());
+    }
+    let texture = unsafe { ID3D11Texture2D::from_raw(raw_texture) };
+    let mut descriptor = windows::Win32::Graphics::Direct3D11::D3D11_TEXTURE2D_DESC::default();
+    unsafe { texture.GetDesc(&raw mut descriptor) };
+    if descriptor.Format != DXGI_FORMAT_NV12 || descriptor.Width == 0 || descriptor.Height == 0 {
+        return Err("decoded H.264 texture is not NV12".to_owned());
+    }
+    let texture_device = unsafe { texture.GetDevice() }
+        .map_err(|error| format!("unable to read decoded texture device: {error}"))?;
+    if texture_device != *expected_device {
+        return Err("decoded H.264 texture belongs to another D3D11 device".to_owned());
+    }
+    let subresource = unsafe { dxgi_buffer.GetSubresourceIndex() }
+        .map_err(|error| format!("unable to read decoded H.264 subresource: {error}"))?;
+    let subresources = descriptor.MipLevels.saturating_mul(descriptor.ArraySize);
+    if descriptor.MipLevels == 0 || subresources == 0 || subresource >= subresources {
+        return Err("decoded H.264 subresource is outside its texture".to_owned());
+    }
+    let media_type = unsafe { transform.GetOutputCurrentType(0) }
+        .map_err(|error| format!("unable to read current H.264 output type: {error}"))?;
+    let (width, height) =
+        media_type_frame_size(&media_type).unwrap_or((descriptor.Width, descriptor.Height));
+    if width > descriptor.Width || height > descriptor.Height {
+        return Err("visible H.264 frame exceeds its NV12 texture".to_owned());
+    }
+    Ok(DecodedFrame {
+        _sample: sample,
+        texture,
+        subresource,
+        mip_levels: descriptor.MipLevels,
+        width,
+        height,
+        input_color_space: media_type_color_space(&media_type, height),
+    })
+}
+
+fn create_hardware_d3d11_device() -> Result<(ID3D11Device, ID3D11DeviceContext), String> {
+    let levels = [D3D_FEATURE_LEVEL_11_1, D3D_FEATURE_LEVEL_11_0];
+    let mut device = None;
+    let mut context = None;
+    unsafe {
+        D3D11CreateDevice(
+            None::<&IDXGIAdapter>,
+            D3D_DRIVER_TYPE_HARDWARE,
+            windows::Win32::Foundation::HMODULE::default(),
+            D3D11_CREATE_DEVICE_BGRA_SUPPORT | D3D11_CREATE_DEVICE_VIDEO_SUPPORT,
+            Some(&levels),
+            D3D11_SDK_VERSION,
+            Some(&raw mut device),
+            None,
+            Some(&raw mut context),
+        )
+    }
+    .map_err(|error| format!("unable to create remote-video D3D11 device: {error}"))?;
+    Ok((
+        device.ok_or_else(|| "D3D11 returned no remote-video device".to_owned())?,
+        context.ok_or_else(|| "D3D11 returned no remote-video context".to_owned())?,
+    ))
+}
+
+struct VideoRenderer {
+    window: Arc<Window>,
+    device: ID3D11Device,
+    context: ID3D11DeviceContext,
+    video_device: ID3D11VideoDevice,
+    video_context: ID3D11VideoContext,
+    swap_chain: IDXGISwapChain,
+    pipeline: Option<ProcessorPipeline>,
+    output_size: (u32, u32),
+    output_frame: u32,
+}
+
+struct ProcessorPipeline {
+    input_size: (u32, u32),
+    output_size: (u32, u32),
+    enumerator: ID3D11VideoProcessorEnumerator,
+    processor: ID3D11VideoProcessor,
+    output_view: ID3D11VideoProcessorOutputView,
+    render_target: ID3D11RenderTargetView,
+}
+
+impl VideoRenderer {
+    fn new(
+        window: Arc<Window>,
+        device: ID3D11Device,
+        context: ID3D11DeviceContext,
+    ) -> Result<Self, String> {
+        let RawWindowHandle::Win32(handle) = window
+            .window_handle()
+            .map_err(|error| format!("unable to read remote-video window handle: {error}"))?
+            .as_raw()
+        else {
+            return Err("remote H.264 presentation requires a Win32 window".to_owned());
+        };
+        let hwnd = HWND(handle.hwnd.get() as *mut core::ffi::c_void);
+        let size = window.inner_size();
+        let width = size.width.max(1);
+        let height = size.height.max(1);
+        let descriptor = swap_chain_descriptor(hwnd, width, height);
+        let dxgi_device: IDXGIDevice = device
+            .cast()
+            .map_err(|error| format!("remote-video device has no DXGI interface: {error}"))?;
+        let adapter = unsafe { dxgi_device.GetAdapter() }
+            .map_err(|error| format!("unable to read remote-video adapter: {error}"))?;
+        let factory: IDXGIFactory = unsafe { adapter.GetParent() }
+            .map_err(|error| format!("unable to read remote-video DXGI factory: {error}"))?;
+        unsafe { factory.MakeWindowAssociation(hwnd, DXGI_MWA_NO_ALT_ENTER) }
+            .map_err(|error| format!("unable to configure remote-video window: {error}"))?;
+        let mut swap_chain = None;
+        unsafe { factory.CreateSwapChain(&device, &raw const descriptor, &raw mut swap_chain) }
+            .ok()
+            .map_err(|error| format!("unable to create remote-video swap chain: {error}"))?;
+        Ok(Self {
+            window,
+            video_device: device
+                .cast()
+                .map_err(|error| format!("D3D11 device has no video interface: {error}"))?,
+            video_context: context
+                .cast()
+                .map_err(|error| format!("D3D11 context has no video interface: {error}"))?,
+            device,
+            context,
+            swap_chain: swap_chain.ok_or_else(|| "DXGI returned no swap chain".to_owned())?,
+            pipeline: None,
+            output_size: (width, height),
+            output_frame: 0,
+        })
+    }
+
+    fn present(&mut self, frame: &DecodedFrame) -> Result<(), String> {
+        let size = self.window.inner_size();
+        if size.width == 0 || size.height == 0 {
+            return Ok(());
+        }
+        self.resize(size.width, size.height)?;
+        self.ensure_pipeline(frame.width, frame.height)?;
+        let pipeline = self
+            .pipeline
+            .as_ref()
+            .ok_or_else(|| "video processor is missing".to_owned())?;
+        let input_descriptor = D3D11_VIDEO_PROCESSOR_INPUT_VIEW_DESC {
+            FourCC: 0,
+            ViewDimension: D3D11_VPIV_DIMENSION_TEXTURE2D,
+            Anonymous: D3D11_VIDEO_PROCESSOR_INPUT_VIEW_DESC_0 {
+                Texture2D: D3D11_TEX2D_VPIV {
+                    MipSlice: frame.subresource % frame.mip_levels,
+                    ArraySlice: frame.subresource / frame.mip_levels,
+                },
+            },
+        };
+        let mut input_view = None;
+        unsafe {
+            self.video_device.CreateVideoProcessorInputView(
+                &frame.texture,
+                &pipeline.enumerator,
+                &raw const input_descriptor,
+                Some(&raw mut input_view),
+            )
+        }
+        .map_err(|error| format!("unable to create NV12 input view: {error}"))?;
+        let source = RECT {
+            left: 0,
+            top: 0,
+            right: i32::try_from(frame.width).map_err(|_| "video width overflow")?,
+            bottom: i32::try_from(frame.height).map_err(|_| "video height overflow")?,
+        };
+        let destination = aspect_fit_rect(frame.width, frame.height, size.width, size.height)?;
+        let target = RECT {
+            left: 0,
+            top: 0,
+            right: i32::try_from(size.width).map_err(|_| "window width overflow")?,
+            bottom: i32::try_from(size.height).map_err(|_| "window height overflow")?,
+        };
+        unsafe {
+            self.context
+                .ClearRenderTargetView(&pipeline.render_target, &[0.0, 0.0, 0.0, 1.0]);
+            self.video_context.VideoProcessorSetOutputTargetRect(
+                &pipeline.processor,
+                true,
+                Some(&raw const target),
+            );
+            self.video_context.VideoProcessorSetStreamSourceRect(
+                &pipeline.processor,
+                0,
+                true,
+                Some(&raw const source),
+            );
+            self.video_context.VideoProcessorSetStreamDestRect(
+                &pipeline.processor,
+                0,
+                true,
+                Some(&raw const destination),
+            );
+            self.video_context.VideoProcessorSetStreamColorSpace(
+                &pipeline.processor,
+                0,
+                &raw const frame.input_color_space,
+            );
+        }
+        let mut stream = D3D11_VIDEO_PROCESSOR_STREAM {
+            Enable: true.into(),
+            pInputSurface: ManuallyDrop::new(input_view),
+            ..Default::default()
+        };
+        let result = unsafe {
+            self.video_context.VideoProcessorBlt(
+                &pipeline.processor,
+                &pipeline.output_view,
+                self.output_frame,
+                std::slice::from_ref(&stream),
+            )
+        };
+        let _input_view = unsafe { ManuallyDrop::take(&mut stream.pInputSurface) };
+        result.map_err(|error| format!("unable to process remote NV12 frame: {error}"))?;
+        unsafe { self.swap_chain.Present(1, DXGI_PRESENT(0)) }
+            .ok()
+            .map_err(|error| format!("unable to present remote H.264 frame: {error}"))?;
+        self.output_frame = self.output_frame.wrapping_add(1);
+        Ok(())
+    }
+
+    fn resize(&mut self, width: u32, height: u32) -> Result<(), String> {
+        if self.output_size == (width, height) {
+            return Ok(());
+        }
+        self.pipeline = None;
+        unsafe {
+            self.swap_chain.ResizeBuffers(
+                0,
+                width,
+                height,
+                DXGI_FORMAT_UNKNOWN,
+                DXGI_SWAP_CHAIN_FLAG(0),
+            )
+        }
+        .map_err(|error| format!("unable to resize remote-video swap chain: {error}"))?;
+        self.output_size = (width, height);
+        Ok(())
+    }
+
+    fn ensure_pipeline(&mut self, input_width: u32, input_height: u32) -> Result<(), String> {
+        if self.pipeline.as_ref().is_some_and(|pipeline| {
+            pipeline.input_size == (input_width, input_height)
+                && pipeline.output_size == self.output_size
+        }) {
+            return Ok(());
+        }
+        let content = D3D11_VIDEO_PROCESSOR_CONTENT_DESC {
+            InputFrameFormat: D3D11_VIDEO_FRAME_FORMAT_PROGRESSIVE,
+            InputFrameRate: DXGI_RATIONAL {
+                Numerator: 60,
+                Denominator: 1,
+            },
+            InputWidth: input_width,
+            InputHeight: input_height,
+            OutputFrameRate: DXGI_RATIONAL {
+                Numerator: 60,
+                Denominator: 1,
+            },
+            OutputWidth: self.output_size.0,
+            OutputHeight: self.output_size.1,
+            Usage: D3D11_VIDEO_USAGE_PLAYBACK_NORMAL,
+        };
+        let enumerator = unsafe {
+            self.video_device
+                .CreateVideoProcessorEnumerator(&raw const content)
+        }
+        .map_err(|error| format!("unable to create video processor enumerator: {error}"))?;
+        let input_support = unsafe { enumerator.CheckVideoProcessorFormat(DXGI_FORMAT_NV12) }
+            .map_err(|error| format!("unable to verify NV12 processor input: {error}"))?;
+        let output_support =
+            unsafe { enumerator.CheckVideoProcessorFormat(DXGI_FORMAT_B8G8R8A8_UNORM) }
+                .map_err(|error| format!("unable to verify BGRA processor output: {error}"))?;
+        let required_input = u32::try_from(D3D11_VIDEO_PROCESSOR_FORMAT_SUPPORT_INPUT.0)
+            .map_err(|_| "invalid D3D11 input support flag".to_owned())?;
+        let required_output = u32::try_from(D3D11_VIDEO_PROCESSOR_FORMAT_SUPPORT_OUTPUT.0)
+            .map_err(|_| "invalid D3D11 output support flag".to_owned())?;
+        if input_support & required_input == 0 || output_support & required_output == 0 {
+            return Err("D3D11 VideoProcessor lacks NV12/BGRA support".to_owned());
+        }
+        let processor = unsafe { self.video_device.CreateVideoProcessor(&enumerator, 0) }
+            .map_err(|error| format!("unable to create D3D11 video processor: {error}"))?;
+        let back_buffer: ID3D11Texture2D = unsafe { self.swap_chain.GetBuffer(0) }
+            .map_err(|error| format!("unable to read remote-video back buffer: {error}"))?;
+        let mut render_target = None;
+        unsafe {
+            self.device
+                .CreateRenderTargetView(&back_buffer, None, Some(&raw mut render_target))
+        }
+        .map_err(|error| format!("unable to create remote-video render target: {error}"))?;
+        let render_target =
+            render_target.ok_or_else(|| "D3D11 returned no render target view".to_owned())?;
+        let output_descriptor = D3D11_VIDEO_PROCESSOR_OUTPUT_VIEW_DESC {
+            ViewDimension: D3D11_VPOV_DIMENSION_TEXTURE2D,
+            Anonymous: D3D11_VIDEO_PROCESSOR_OUTPUT_VIEW_DESC_0 {
+                Texture2D: D3D11_TEX2D_VPOV { MipSlice: 0 },
+            },
+        };
+        let mut output_view = None;
+        unsafe {
+            self.video_device.CreateVideoProcessorOutputView(
+                &back_buffer,
+                &enumerator,
+                &raw const output_descriptor,
+                Some(&raw mut output_view),
+            )
+        }
+        .map_err(|error| format!("unable to create processor output view: {error}"))?;
+        self.pipeline = Some(ProcessorPipeline {
+            input_size: (input_width, input_height),
+            output_size: self.output_size,
+            enumerator,
+            processor,
+            output_view: output_view
+                .ok_or_else(|| "D3D11 returned no processor output view".to_owned())?,
+            render_target,
+        });
+        Ok(())
+    }
+}
+
+fn swap_chain_descriptor(hwnd: HWND, width: u32, height: u32) -> DXGI_SWAP_CHAIN_DESC {
+    DXGI_SWAP_CHAIN_DESC {
+        BufferDesc: DXGI_MODE_DESC {
+            Width: width,
+            Height: height,
+            RefreshRate: DXGI_RATIONAL {
+                Numerator: 0,
+                Denominator: 1,
+            },
+            Format: DXGI_FORMAT_B8G8R8A8_UNORM,
+            ..Default::default()
+        },
+        SampleDesc: DXGI_SAMPLE_DESC {
+            Count: 1,
+            Quality: 0,
+        },
+        BufferUsage: DXGI_USAGE_RENDER_TARGET_OUTPUT,
+        BufferCount: 2,
+        OutputWindow: hwnd,
+        Windowed: true.into(),
+        SwapEffect: DXGI_SWAP_EFFECT_DISCARD,
+        Flags: 0,
+    }
+}
+
+fn aspect_fit_rect(
+    source_width: u32,
+    source_height: u32,
+    target_width: u32,
+    target_height: u32,
+) -> Result<RECT, String> {
+    if source_width == 0 || source_height == 0 || target_width == 0 || target_height == 0 {
+        return Err("video dimensions must be non-zero".to_owned());
+    }
+    let source_aspect = f64::from(source_width) / f64::from(source_height);
+    let target_aspect = f64::from(target_width) / f64::from(target_height);
+    let (width, height) = if source_aspect > target_aspect {
+        (
+            target_width,
+            (f64::from(target_width) / source_aspect).round() as u32,
+        )
+    } else {
+        (
+            (f64::from(target_height) * source_aspect).round() as u32,
+            target_height,
+        )
+    };
+    let left = (target_width - width) / 2;
+    let top = (target_height - height) / 2;
+    Ok(RECT {
+        left: i32::try_from(left).map_err(|_| "video left overflow")?,
+        top: i32::try_from(top).map_err(|_| "video top overflow")?,
+        right: i32::try_from(left + width).map_err(|_| "video right overflow")?,
+        bottom: i32::try_from(top + height).map_err(|_| "video bottom overflow")?,
+    })
+}
+
+fn media_type_frame_size(media_type: &IMFMediaType) -> Option<(u32, u32)> {
+    let frame_size_key = MF_MT_FRAME_SIZE;
+    let packed = unsafe { media_type.GetUINT64(&frame_size_key) }.ok()?;
+    let width = u32::try_from(packed >> 32).ok()?;
+    let height = u32::try_from(packed & u64::from(u32::MAX)).ok()?;
+    (width > 0 && height > 0).then_some((width, height))
+}
+
+fn media_type_color_space(
+    media_type: &IMFMediaType,
+    visible_height: u32,
+) -> D3D11_VIDEO_PROCESSOR_COLOR_SPACE {
+    let bt709_value = u32::try_from(MFVideoTransferMatrix_BT709.0).unwrap_or(1);
+    let full_range_value = u32::try_from(MFNominalRange_0_255.0).unwrap_or(1);
+    let yuv_matrix_key = MF_MT_YUV_MATRIX;
+    let bt709 = unsafe { media_type.GetUINT32(&yuv_matrix_key) }
+        .map_or(visible_height >= 720, |value| value == bt709_value);
+    let nominal_range_key = MF_MT_VIDEO_NOMINAL_RANGE;
+    let full_range = unsafe { media_type.GetUINT32(&nominal_range_key) }
+        .is_ok_and(|value| value == full_range_value);
+    D3D11_VIDEO_PROCESSOR_COLOR_SPACE {
+        _bitfield: (u32::from(bt709) << 2) | ((if full_range { 2 } else { 1 }) << 4),
+    }
+}
+
+fn elapsed_microseconds(started: Instant) -> u64 {
+    started.elapsed().as_micros().try_into().unwrap_or(u64::MAX)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn aspect_fit_centers_letterbox_and_pillarbox_output() {
+        assert_eq!(
+            aspect_fit_rect(1_920, 1_080, 1_000, 1_000).unwrap(),
+            RECT {
+                left: 0,
+                top: 218,
+                right: 1_000,
+                bottom: 781
+            }
+        );
+        assert_eq!(
+            aspect_fit_rect(1_000, 1_000, 1_920, 1_080).unwrap(),
+            RECT {
+                left: 420,
+                top: 0,
+                right: 1_500,
+                bottom: 1_080
+            }
+        );
+    }
+}
diff --git a/client/helpers/native-video/Cargo.toml b/client/helpers/native-video/Cargo.toml
new file mode 100644
index 0000000..4d53aac
--- /dev/null
+++ b/client/helpers/native-video/Cargo.toml
@@ -0,0 +1,33 @@
+[package]
+name = "remotedesk-native-video"
+version.workspace = true
+edition.workspace = true
+license.workspace = true
+rust-version.workspace = true
+
+[dependencies]
+remotedesk-client-core = { path = "../../crates/client-core" }
+serde = { version = "1.0", features = ["derive"] }
+serde_json = "1.0"
+
+[target.'cfg(windows)'.dependencies]
+raw-window-handle = "0.6"
+winit = "0.30"
+windows = { version = "0.62.2", features = [
+    "Win32_Foundation",
+    "Win32_Graphics_Direct3D",
+    "Win32_Graphics_Direct3D11",
+    "Win32_Graphics_Dxgi",
+    "Win32_Graphics_Dxgi_Common",
+    "Win32_Media_MediaFoundation",
+    "Win32_System_Com",
+] }
+
+[lints.rust]
+# The Windows adapter is the only FFI boundary in this crate. All unsafe calls
+# are kept in one function with explicit initialized out-parameters.
+unsafe_code = "allow"
+
+[lints.clippy]
+all = "warn"
+pedantic = "warn"
diff --git a/client/helpers/native-video/src/main.rs b/client/helpers/native-video/src/main.rs
new file mode 100644
index 0000000..2b6dc22
--- /dev/null
+++ b/client/helpers/native-video/src/main.rs
@@ -0,0 +1,950 @@
+use remotedesk_client_core::{
+    AdapterId, D3d11PipelinePlan, GpuPolicy, GpuSelection, PipelineRequest, ZeroCopyPolicy,
+    plan_d3d11_pipeline,
+};
+use std::env;
+use std::path::Path;
+#[cfg(windows)]
+use std::path::PathBuf;
+use std::process::ExitCode;
+
+#[cfg(windows)]
+mod player;
+
+#[cfg(windows)]
+const MAX_DECODE_PROBE_FILE_SIZE: u64 = 512 * 1024 * 1024;
+#[cfg(windows)]
+const MAX_DECODE_PROBE_READS: usize = 512;
+#[cfg(windows)]
+const MAX_NATIVE_MEDIA_TYPES: u32 = 64;
+
+#[derive(Debug, PartialEq, Eq)]
+struct DryRunArgs {
+    window_adapter: AdapterId,
+    decode_adapter: AdapterId,
+    manual_adapter: Option<AdapterId>,
+    zero_copy_policy: ZeroCopyPolicy,
+}
+
+fn main() -> ExitCode {
+    match run(env::args().skip(1)) {
+        Ok(()) => ExitCode::SUCCESS,
+        Err(message) => {
+            eprintln!("error: {message}");
+            eprintln!("{}", usage());
+            ExitCode::FAILURE
+        }
+    }
+}
+
+fn run(args: impl Iterator<Item = String>) -> Result<(), String> {
+    let values = args.collect::<Vec<_>>();
+    if values == ["--capabilities"] {
+        return print_helper_capabilities();
+    }
+    if values == ["--probe-d3d11"] {
+        return probe_d3d11();
+    }
+    if values == ["--probe-h264-decoder"] {
+        return probe_h264_decoder();
+    }
+    if values.len() == 2 && values[0] == "--probe-h264-file" {
+        return probe_h264_file(Path::new(&values[1]));
+    }
+    if values.len() == 2 && values[0] == "--play-h264-file" {
+        return play_h264_file(Path::new(&values[1]));
+    }
+    let plan = build_plan(parse_args(values.into_iter())?)?;
+
+    println!("native-video D3D11 pipeline dry-run");
+    println!("decode_adapter={}", plan.decode_adapter);
+    println!("render_adapter={}", plan.render_adapter);
+    println!("display_adapter={}", plan.display_adapter);
+    println!("zero_copy_policy={:?}", plan.zero_copy_policy);
+    println!("planned_memory_path={:?}", plan.planned_memory_path);
+    println!("zero_copy_candidate={}", plan.is_zero_copy_candidate());
+    println!("d3d11_created=false");
+    println!("note=plan only; no D3D11 device or decoder was created");
+    Ok(())
+}
+
+fn build_plan(args: DryRunArgs) -> Result<D3d11PipelinePlan, String> {
+    let render_candidate = args
+        .manual_adapter
+        .clone()
+        .unwrap_or_else(|| args.window_adapter.clone());
+    let mut available_adapters = vec![args.window_adapter.clone(), args.decode_adapter.clone()];
+    if !available_adapters.contains(&render_candidate) {
+        available_adapters.push(render_candidate.clone());
+    }
+
+    plan_d3d11_pipeline(PipelineRequest {
+        policy: GpuPolicy {
+            selection: args
+                .manual_adapter
+                .map_or(GpuSelection::WindowDisplayAdapter, GpuSelection::Manual),
+            zero_copy_policy: args.zero_copy_policy,
+        },
+        window_display_adapter: args.window_adapter,
+        decoder_adapter: args.decode_adapter,
+        available_adapters,
+    })
+    .map_err(|error| error.to_string())
+}
+
+fn parse_args(mut args: impl Iterator<Item = String>) -> Result<DryRunArgs, String> {
+    let mut dry_run = false;
+    let mut window_adapter = None;
+    let mut decode_adapter = None;
+    let mut manual_adapter = None;
+    let mut zero_copy_policy = ZeroCopyPolicy::RequiredEndToEnd;
+
+    while let Some(argument) = args.next() {
+        match argument.as_str() {
+            "--dry-run" => dry_run = true,
+            "--window-adapter" => {
+                window_adapter = Some(AdapterId::new(required_value(&mut args, &argument)?));
+            }
+            "--decode-adapter" => {
+                decode_adapter = Some(AdapterId::new(required_value(&mut args, &argument)?));
+            }
+            "--manual-adapter" => {
+                manual_adapter = Some(AdapterId::new(required_value(&mut args, &argument)?));
+            }
+            "--required-end-to-end" => zero_copy_policy = ZeroCopyPolicy::RequiredEndToEnd,
+            "--compatibility" => zero_copy_policy = ZeroCopyPolicy::Compatibility,
+            "--help" | "-h" => return Err(usage().to_owned()),
+            other => return Err(format!("unknown argument {other}")),
+        }
+    }
+
+    if !dry_run {
+        return Err("only --dry-run is implemented".into());
+    }
+
+    let window_adapter = window_adapter.ok_or_else(|| "--window-adapter is required".to_owned())?;
+    let selected_adapter = manual_adapter.as_ref().unwrap_or(&window_adapter).clone();
+    let decode_adapter = decode_adapter.unwrap_or(selected_adapter);
+
+    Ok(DryRunArgs {
+        window_adapter,
+        decode_adapter,
+        manual_adapter,
+        zero_copy_policy,
+    })
+}
+
+fn required_value(args: &mut impl Iterator<Item = String>, option: &str) -> Result<String, String> {
+    args.next()
+        .filter(|value| !value.is_empty() && !value.starts_with("--"))
+        .ok_or_else(|| format!("{option} requires a value"))
+}
+
+fn usage() -> &'static str {
+    "usage: remotedesk-native-video --capabilities | --probe-d3d11 | --probe-h264-decoder | --probe-h264-file <local.mp4> | --play-h264-file <local.mp4> | --dry-run --window-adapter <id> [--decode-adapter <id>] [--manual-adapter <id>] [--required-end-to-end|--compatibility]"
+}
+
+#[derive(serde::Serialize)]
+struct HelperCapabilities {
+    schema_version: u8,
+    version: &'static str,
+    platform: &'static str,
+    h264_file_probe: bool,
+    h264_file_player: bool,
+    d3d11_video_processor: bool,
+    cpu_frame_mapping: bool,
+}
+
+fn print_helper_capabilities() -> Result<(), String> {
+    let response = HelperCapabilities {
+        schema_version: 1,
+        version: env!("CARGO_PKG_VERSION"),
+        platform: env::consts::OS,
+        h264_file_probe: cfg!(windows),
+        h264_file_player: cfg!(windows),
+        d3d11_video_processor: cfg!(windows),
+        cpu_frame_mapping: false,
+    };
+    println!(
+        "{}",
+        serde_json::to_string(&response)
+            .map_err(|error| format!("unable to serialize helper capabilities: {error}"))?
+    );
+    Ok(())
+}
+
+fn supported_h264_container(path: &Path) -> bool {
+    path.extension()
+        .and_then(|extension| extension.to_str())
+        .is_some_and(|extension| {
+            ["mp4", "m4v", "mov"]
+                .iter()
+                .any(|candidate| extension.eq_ignore_ascii_case(candidate))
+        })
+}
+
+#[cfg(windows)]
+fn validated_h264_probe_path(path: &Path) -> Result<(PathBuf, u64), String> {
+    if !supported_h264_container(path) {
+        return Err("decode probe input must be a local MP4, M4V, or MOV file".to_owned());
+    }
+    let canonical = std::fs::canonicalize(path)
+        .map_err(|error| format!("unable to resolve decode probe input: {error}"))?;
+    let is_unc = canonical.components().next().is_some_and(|component| {
+        matches!(
+            component,
+            std::path::Component::Prefix(prefix)
+                if matches!(
+                    prefix.kind(),
+                    std::path::Prefix::UNC(_, _) | std::path::Prefix::VerbatimUNC(_, _)
+                )
+        )
+    });
+    if is_unc {
+        return Err("decode probe input must not be a UNC path".to_owned());
+    }
+    let metadata = std::fs::metadata(&canonical)
+        .map_err(|error| format!("unable to inspect decode probe input: {error}"))?;
+    if !metadata.is_file() || metadata.len() == 0 || metadata.len() > MAX_DECODE_PROBE_FILE_SIZE {
+        return Err(
+            "decode probe input must be a non-empty regular file no larger than 512 MiB".to_owned(),
+        );
+    }
+    Ok((canonical, metadata.len()))
+}
+
+#[cfg(not(windows))]
+fn probe_d3d11() -> Result<(), String> {
+    Err("D3D11 probing is available only on Windows".to_owned())
+}
+
+#[cfg(not(windows))]
+fn probe_h264_decoder() -> Result<(), String> {
+    Err("D3D11 H.264 decoder probing is available only on Windows".to_owned())
+}
+
+#[cfg(not(windows))]
+fn probe_h264_file(_path: &Path) -> Result<(), String> {
+    Err("Media Foundation H.264 file probing is available only on Windows".to_owned())
+}
+
+#[cfg(not(windows))]
+fn play_h264_file(_path: &Path) -> Result<(), String> {
+    Err("Media Foundation H.264 playback is available only on Windows".to_owned())
+}
+
+#[cfg(windows)]
+fn play_h264_file(path: &Path) -> Result<(), String> {
+    player::play_h264_file(path)
+}
+
+#[cfg(windows)]
+fn create_hardware_d3d11_device() -> Result<
+    (
+        windows::Win32::Graphics::Direct3D11::ID3D11Device,
+        windows::Win32::Graphics::Direct3D11::ID3D11DeviceContext,
+        windows::Win32::Graphics::Direct3D::D3D_FEATURE_LEVEL,
+    ),
+    String,
+> {
+    use windows::Win32::Foundation::HMODULE;
+    use windows::Win32::Graphics::Direct3D::{
+        D3D_DRIVER_TYPE_HARDWARE, D3D_FEATURE_LEVEL, D3D_FEATURE_LEVEL_11_0,
+        D3D_FEATURE_LEVEL_11_1, D3D_FEATURE_LEVEL_12_0, D3D_FEATURE_LEVEL_12_1,
+    };
+    use windows::Win32::Graphics::Direct3D11::{
+        D3D11_CREATE_DEVICE_BGRA_SUPPORT, D3D11_CREATE_DEVICE_VIDEO_SUPPORT, D3D11_SDK_VERSION,
+        D3D11CreateDevice, ID3D11Device, ID3D11DeviceContext,
+    };
+    use windows::Win32::Graphics::Dxgi::IDXGIAdapter;
+
+    let requested_levels = [
+        D3D_FEATURE_LEVEL_12_1,
+        D3D_FEATURE_LEVEL_12_0,
+        D3D_FEATURE_LEVEL_11_1,
+        D3D_FEATURE_LEVEL_11_0,
+    ];
+    let mut device: Option<ID3D11Device> = None;
+    let mut context: Option<ID3D11DeviceContext> = None;
+    let mut selected_level = D3D_FEATURE_LEVEL(0);
+
+    // SAFETY: all output pointers refer to initialized `Option`/value storage
+    // that remains alive for the call. A null adapter with HARDWARE requests
+    // the system default adapter, and the feature-level slice is immutable.
+    unsafe {
+        D3D11CreateDevice(
+            None::<&IDXGIAdapter>,
+            D3D_DRIVER_TYPE_HARDWARE,
+            HMODULE::default(),
+            D3D11_CREATE_DEVICE_BGRA_SUPPORT | D3D11_CREATE_DEVICE_VIDEO_SUPPORT,
+            Some(&requested_levels),
+            D3D11_SDK_VERSION,
+            Some(&raw mut device),
+            Some(&raw mut selected_level),
+            Some(&raw mut context),
+        )
+    }
+    .map_err(|error| format!("unable to create a hardware D3D11 device: {error}"))?;
+    let device = device.ok_or_else(|| "D3D11 returned success without a device".to_owned())?;
+    let context =
+        context.ok_or_else(|| "D3D11 returned success without an immediate context".to_owned())?;
+    Ok((device, context, selected_level))
+}
+
+#[cfg(windows)]
+fn probe_d3d11() -> Result<(), String> {
+    let (_device, _context, selected_level) = create_hardware_d3d11_device()?;
+    println!("native-video D3D11 device probe");
+    println!("d3d11_created=true");
+    println!("driver_type=hardware");
+    println!("feature_level=0x{:x}", selected_level.0);
+    println!("bgra_support=true");
+    println!("video_support=true");
+    Ok(())
+}
+
+#[cfg(windows)]
+struct ComGuard;
+
+#[cfg(windows)]
+impl Drop for ComGuard {
+    fn drop(&mut self) {
+        unsafe { windows::Win32::System::Com::CoUninitialize() };
+    }
+}
+
+#[cfg(windows)]
+struct MediaFoundationGuard;
+
+#[cfg(windows)]
+impl Drop for MediaFoundationGuard {
+    fn drop(&mut self) {
+        let _ = unsafe { windows::Win32::Media::MediaFoundation::MFShutdown() };
+    }
+}
+
+#[cfg(windows)]
+fn source_reader_index(value: i32) -> u32 {
+    u32::from_ne_bytes(value.to_ne_bytes())
+}
+
+#[cfg(windows)]
+fn source_reader_flag(value: i32) -> Result<u32, String> {
+    u32::try_from(value).map_err(|_| "Media Foundation returned an invalid reader flag".to_owned())
+}
+
+#[cfg(windows)]
+fn is_h264_subtype(subtype: windows::core::GUID) -> bool {
+    use windows::Win32::Media::MediaFoundation::{MFVideoFormat_H264, MFVideoFormat_H264_ES};
+
+    subtype == MFVideoFormat_H264 || subtype == MFVideoFormat_H264_ES
+}
+
+#[cfg(windows)]
+fn find_h264_native_media_type(
+    reader: &windows::Win32::Media::MediaFoundation::IMFSourceReader,
+    video_stream: u32,
+) -> Result<(windows::Win32::Media::MediaFoundation::IMFMediaType, u32), String> {
+    use windows::Win32::Media::MediaFoundation::{IMFMediaType, MF_E_NO_MORE_TYPES, MF_MT_SUBTYPE};
+
+    for media_type_index in 0..MAX_NATIVE_MEDIA_TYPES {
+        let native_type: IMFMediaType =
+            match unsafe { reader.GetNativeMediaType(video_stream, media_type_index) } {
+                Ok(native_type) => native_type,
+                Err(error) if error.code() == MF_E_NO_MORE_TYPES => break,
+                Err(error) => {
+                    return Err(format!(
+                        "unable to query native video media type {media_type_index}: {error}"
+                    ));
+                }
+            };
+        let subtype_key = MF_MT_SUBTYPE;
+        let native_subtype = unsafe { native_type.GetGUID(&subtype_key) }.map_err(|error| {
+            format!("native video media type {media_type_index} has no subtype: {error}")
+        })?;
+        if is_h264_subtype(native_subtype) {
+            return Ok((native_type, media_type_index));
+        }
+    }
+
+    Err(format!(
+        "decode probe input exposes no H.264 native video type within the first {MAX_NATIVE_MEDIA_TYPES} entries"
+    ))
+}
+
+#[cfg(any(windows, test))]
+fn valid_texture_subresource(mip_levels: u32, array_size: u32, subresource: u32) -> bool {
+    mip_levels
+        .checked_mul(array_size)
+        .is_some_and(|count| count > 0 && subresource < count)
+}
+
+#[cfg(windows)]
+fn probe_h264_file(path: &Path) -> Result<(), String> {
+    use std::os::windows::ffi::OsStrExt as _;
+
+    use windows::Win32::Graphics::Direct3D11::{D3D11_TEXTURE2D_DESC, ID3D11Texture2D};
+    use windows::Win32::Graphics::Dxgi::Common::DXGI_FORMAT_NV12;
+    use windows::Win32::Media::MediaFoundation::{
+        IMFAttributes, IMFDXGIBuffer, MF_MT_MAJOR_TYPE, MF_MT_SUBTYPE,
+        MF_READWRITE_ENABLE_HARDWARE_TRANSFORMS, MF_SOURCE_READER_ALL_STREAMS,
+        MF_SOURCE_READER_D3D_MANAGER, MF_SOURCE_READER_DISABLE_DXVA,
+        MF_SOURCE_READER_FIRST_VIDEO_STREAM, MF_SOURCE_READERF_ENDOFSTREAM,
+        MF_SOURCE_READERF_ERROR, MF_VERSION, MFCreateAttributes, MFCreateDXGIDeviceManager,
+        MFCreateMediaType, MFCreateSourceReaderFromURL, MFMediaType_Video, MFSTARTUP_FULL,
+        MFStartup, MFVideoFormat_NV12,
+    };
+    use windows::Win32::System::Com::{COINIT_MULTITHREADED, CoInitializeEx};
+    use windows::core::{Interface as _, PCWSTR};
+
+    let (path, file_size) = validated_h264_probe_path(path)?;
+    unsafe { CoInitializeEx(None, COINIT_MULTITHREADED) }
+        .ok()
+        .map_err(|error| format!("unable to initialize COM for H.264 decode: {error}"))?;
+    let _com_guard = ComGuard;
+    unsafe { MFStartup(MF_VERSION, MFSTARTUP_FULL) }
+        .map_err(|error| format!("unable to start Media Foundation: {error}"))?;
+    let _media_foundation_guard = MediaFoundationGuard;
+
+    let (device, _context, selected_level) = create_hardware_d3d11_device()?;
+    let mut reset_token = 0_u32;
+    let mut manager = None;
+    unsafe { MFCreateDXGIDeviceManager(&raw mut reset_token, &raw mut manager) }
+        .map_err(|error| format!("unable to create the DXGI device manager: {error}"))?;
+    let manager =
+        manager.ok_or_else(|| "Media Foundation returned no DXGI device manager".to_owned())?;
+    unsafe { manager.ResetDevice(&device, reset_token) }
+        .map_err(|error| format!("unable to bind D3D11 to the DXGI device manager: {error}"))?;
+
+    let mut attributes: Option<IMFAttributes> = None;
+    unsafe { MFCreateAttributes(&raw mut attributes, 4) }
+        .map_err(|error| format!("unable to create source reader attributes: {error}"))?;
+    let attributes = attributes
+        .ok_or_else(|| "Media Foundation returned no source reader attributes".to_owned())?;
+    let d3d_manager_key = MF_SOURCE_READER_D3D_MANAGER;
+    let hardware_transforms_key = MF_READWRITE_ENABLE_HARDWARE_TRANSFORMS;
+    let disable_dxva_key = MF_SOURCE_READER_DISABLE_DXVA;
+    unsafe { attributes.SetUnknown(&d3d_manager_key, &manager) }
+        .map_err(|error| format!("unable to attach the DXGI device manager: {error}"))?;
+    unsafe { attributes.SetUINT32(&hardware_transforms_key, 1) }
+        .map_err(|error| format!("unable to enable hardware transforms: {error}"))?;
+    unsafe { attributes.SetUINT32(&disable_dxva_key, 0) }
+        .map_err(|error| format!("unable to enable DXVA decoding: {error}"))?;
+
+    let mut wide_path = path.as_os_str().encode_wide().collect::<Vec<_>>();
+    if wide_path.contains(&0) {
+        return Err("decode probe input path contains a NUL character".to_owned());
+    }
+    wide_path.push(0);
+    let reader =
+        unsafe { MFCreateSourceReaderFromURL(PCWSTR::from_raw(wide_path.as_ptr()), &attributes) }
+            .map_err(|error| format!("unable to open the H.264 media source: {error}"))?;
+    let all_streams = source_reader_index(MF_SOURCE_READER_ALL_STREAMS.0);
+    let video_stream = source_reader_index(MF_SOURCE_READER_FIRST_VIDEO_STREAM.0);
+    unsafe { reader.SetStreamSelection(all_streams, false) }
+        .map_err(|error| format!("unable to disable non-video media streams: {error}"))?;
+    unsafe { reader.SetStreamSelection(video_stream, true) }
+        .map_err(|error| format!("unable to select the first video stream: {error}"))?;
+    let (native_type, native_media_type_index) =
+        find_h264_native_media_type(&reader, video_stream)?;
+    unsafe { reader.SetCurrentMediaType(video_stream, None, &native_type) }
+        .map_err(|error| format!("unable to select the H.264 native video media type: {error}"))?;
+
+    let output_type = unsafe { MFCreateMediaType() }
+        .map_err(|error| format!("unable to create the NV12 output media type: {error}"))?;
+    let major_type_key = MF_MT_MAJOR_TYPE;
+    let video_type = MFMediaType_Video;
+    unsafe { output_type.SetGUID(&major_type_key, &video_type) }
+        .map_err(|error| format!("unable to set the output major type: {error}"))?;
+    let subtype_key = MF_MT_SUBTYPE;
+    let nv12_type = MFVideoFormat_NV12;
+    unsafe { output_type.SetGUID(&subtype_key, &nv12_type) }
+        .map_err(|error| format!("unable to request NV12 output: {error}"))?;
+    unsafe { reader.SetCurrentMediaType(video_stream, None, &output_type) }
+        .map_err(|error| format!("unable to activate H.264 to NV12 decoding: {error}"))?;
+    let actual_type = unsafe { reader.GetCurrentMediaType(video_stream) }
+        .map_err(|error| format!("unable to read the selected output media type: {error}"))?;
+    let subtype_key = MF_MT_SUBTYPE;
+    let actual_subtype = unsafe { actual_type.GetGUID(&subtype_key) }
+        .map_err(|error| format!("selected output media type has no subtype: {error}"))?;
+    if actual_subtype != MFVideoFormat_NV12 {
+        return Err("Media Foundation did not select NV12 output".to_owned());
+    }
+
+    let end_of_stream_flag = source_reader_flag(MF_SOURCE_READERF_ENDOFSTREAM.0)?;
+    let error_flag = source_reader_flag(MF_SOURCE_READERF_ERROR.0)?;
+    for read_index in 0..MAX_DECODE_PROBE_READS {
+        let mut actual_stream = 0_u32;
+        let mut stream_flags = 0_u32;
+        let mut timestamp = 0_i64;
+        let mut sample = None;
+        unsafe {
+            reader.ReadSample(
+                video_stream,
+                0,
+                Some(&raw mut actual_stream),
+                Some(&raw mut stream_flags),
+                Some(&raw mut timestamp),
+                Some(&raw mut sample),
+            )
+        }
+        .map_err(|error| format!("H.264 source reader failed: {error}"))?;
+        if stream_flags & error_flag != 0 {
+            return Err("H.264 source reader reported a stream error".to_owned());
+        }
+        if let Some(sample) = sample {
+            if actual_stream != video_stream {
+                return Err(
+                    "H.264 source reader returned a sample from the wrong stream".to_owned(),
+                );
+            }
+            let buffer_count = unsafe { sample.GetBufferCount() }
+                .map_err(|error| format!("unable to count decoded sample buffers: {error}"))?;
+            for buffer_index in 0..buffer_count {
+                let buffer = unsafe { sample.GetBufferByIndex(buffer_index) }
+                    .map_err(|error| format!("unable to read decoded sample buffer: {error}"))?;
+                let dxgi_buffer = buffer.cast::<IMFDXGIBuffer>().map_err(|_| {
+                    "decoded sample was delivered through a CPU media buffer".to_owned()
+                })?;
+                let mut raw_texture = core::ptr::null_mut();
+                unsafe { dxgi_buffer.GetResource(&ID3D11Texture2D::IID, &raw mut raw_texture) }
+                    .map_err(|error| {
+                        format!("decoded DXGI buffer has no D3D11 texture: {error}")
+                    })?;
+                if raw_texture.is_null() {
+                    return Err("decoded DXGI buffer returned a null D3D11 texture".to_owned());
+                }
+                // GetResource returns an owned COM reference. Transfer that reference
+                // into the windows-rs wrapper so it is released exactly once.
+                let texture = unsafe { ID3D11Texture2D::from_raw(raw_texture) };
+                let mut descriptor = D3D11_TEXTURE2D_DESC::default();
+                unsafe { texture.GetDesc(&raw mut descriptor) };
+                if descriptor.Format != DXGI_FORMAT_NV12
+                    || descriptor.Width == 0
+                    || descriptor.Height == 0
+                {
+                    return Err("decoded D3D11 texture is not a valid NV12 surface".to_owned());
+                }
+                let subresource =
+                    unsafe { dxgi_buffer.GetSubresourceIndex() }.map_err(|error| {
+                        format!("unable to read decoded subresource index: {error}")
+                    })?;
+                if !valid_texture_subresource(
+                    descriptor.MipLevels,
+                    descriptor.ArraySize,
+                    subresource,
+                ) {
+                    return Err("decoded subresource index exceeds the texture layout".to_owned());
+                }
+                let texture_device = unsafe { texture.GetDevice() }
+                    .map_err(|error| format!("unable to read decoded texture device: {error}"))?;
+                if texture_device != device {
+                    return Err("decoded texture belongs to a different D3D11 device".to_owned());
+                }
+
+                println!("native-video Media Foundation H.264 sample decode probe");
+                println!("input_size={file_size}");
+                println!("native_media_type_index={native_media_type_index}");
+                println!("hardware_transform_requested=true");
+                println!("sample_decoded=true");
+                println!("dxgi_surface=true");
+                println!("output_format=NV12");
+                println!("output_width={}", descriptor.Width);
+                println!("output_height={}", descriptor.Height);
+                println!("output_array_size={}", descriptor.ArraySize);
+                println!("output_subresource={subresource}");
+                println!("same_d3d11_device=true");
+                println!("sample_timestamp_100ns={timestamp}");
+                println!("source_reader_reads={}", read_index + 1);
+                println!("feature_level=0x{:x}", selected_level.0);
+                println!("cpu_buffer_observed=false");
+                println!("hardware_decode_verified=false");
+                println!("zero_copy_verified=false");
+                return Ok(());
+            }
+        }
+        if stream_flags & end_of_stream_flag != 0 {
+            return Err("H.264 input reached end-of-stream before producing a frame".to_owned());
+        }
+    }
+    Err("H.264 input produced no decoded frame within the bounded read limit".to_owned())
+}
+
+#[cfg(windows)]
+fn select_h264_profile(profiles: &[windows::core::GUID]) -> Option<windows::core::GUID> {
+    use windows::Win32::Graphics::Direct3D11::{
+        D3D11_DECODER_PROFILE_H264_VLD_FGT, D3D11_DECODER_PROFILE_H264_VLD_NOFGT,
+        D3D11_DECODER_PROFILE_H264_VLD_WITHFMOASO_NOFGT,
+    };
+
+    [
+        D3D11_DECODER_PROFILE_H264_VLD_NOFGT,
+        D3D11_DECODER_PROFILE_H264_VLD_WITHFMOASO_NOFGT,
+        D3D11_DECODER_PROFILE_H264_VLD_FGT,
+    ]
+    .into_iter()
+    .find(|candidate| profiles.contains(candidate))
+}
+
+#[cfg(windows)]
+fn select_decoder_config(
+    configs: &[windows::Win32::Graphics::Direct3D11::D3D11_VIDEO_DECODER_CONFIG],
+) -> Option<windows::Win32::Graphics::Direct3D11::D3D11_VIDEO_DECODER_CONFIG> {
+    let unencrypted = windows::core::GUID::default();
+    configs
+        .iter()
+        .filter(|config| {
+            config.guidConfigBitstreamEncryption == unencrypted
+                && config.guidConfigMBcontrolEncryption == unencrypted
+                && config.guidConfigResidDiffEncryption == unencrypted
+        })
+        .max_by_key(|config| match config.ConfigBitstreamRaw {
+            2 => 2,
+            1 => 1,
+            _ => 0,
+        })
+        .filter(|config| matches!(config.ConfigBitstreamRaw, 1 | 2))
+        .copied()
+}
+
+#[cfg(windows)]
+fn probe_h264_decoder() -> Result<(), String> {
+    use windows::Win32::Graphics::Direct3D11::{
+        D3D11_BIND_DECODER, D3D11_TEX2D_VDOV, D3D11_TEXTURE2D_DESC, D3D11_USAGE_DEFAULT,
+        D3D11_VDOV_DIMENSION_TEXTURE2D, D3D11_VIDEO_DECODER_CONFIG, D3D11_VIDEO_DECODER_DESC,
+        D3D11_VIDEO_DECODER_OUTPUT_VIEW_DESC, D3D11_VIDEO_DECODER_OUTPUT_VIEW_DESC_0,
+        ID3D11Texture2D, ID3D11VideoDecoderOutputView, ID3D11VideoDevice,
+    };
+    use windows::Win32::Graphics::Dxgi::Common::{DXGI_FORMAT_NV12, DXGI_SAMPLE_DESC};
+    use windows::core::Interface as _;
+
+    const SAMPLE_WIDTH: u32 = 1_920;
+    const SAMPLE_HEIGHT: u32 = 1_088;
+
+    let (device, _context, selected_level) = create_hardware_d3d11_device()?;
+    let video_device: ID3D11VideoDevice = device
+        .cast()
+        .map_err(|error| format!("D3D11 device does not expose ID3D11VideoDevice: {error}"))?;
+    let profile_count = unsafe { video_device.GetVideoDecoderProfileCount() };
+    let mut profiles = Vec::with_capacity(usize::try_from(profile_count).unwrap_or(0));
+    for index in 0..profile_count {
+        profiles.push(
+            unsafe { video_device.GetVideoDecoderProfile(index) }
+                .map_err(|error| format!("unable to enumerate D3D11 decoder profile: {error}"))?,
+        );
+    }
+    let profile = select_h264_profile(&profiles).ok_or_else(|| {
+        "the selected D3D11 adapter exposes no supported H.264 VLD profile".to_owned()
+    })?;
+    let nv12_supported =
+        unsafe { video_device.CheckVideoDecoderFormat(&raw const profile, DXGI_FORMAT_NV12) }
+            .map_err(|error| format!("unable to query H.264 NV12 output support: {error}"))?
+            .as_bool();
+    if !nv12_supported {
+        return Err("the selected H.264 decoder profile does not support NV12 output".to_owned());
+    }
+
+    let decoder_descriptor = D3D11_VIDEO_DECODER_DESC {
+        Guid: profile,
+        SampleWidth: SAMPLE_WIDTH,
+        SampleHeight: SAMPLE_HEIGHT,
+        OutputFormat: DXGI_FORMAT_NV12,
+    };
+    let config_count =
+        unsafe { video_device.GetVideoDecoderConfigCount(&raw const decoder_descriptor) }
+            .map_err(|error| format!("unable to query H.264 decoder configurations: {error}"))?;
+    let mut configs = Vec::with_capacity(usize::try_from(config_count).unwrap_or(0));
+    for index in 0..config_count {
+        let mut config = D3D11_VIDEO_DECODER_CONFIG::default();
+        unsafe {
+            video_device.GetVideoDecoderConfig(
+                &raw const decoder_descriptor,
+                index,
+                &raw mut config,
+            )
+        }
+        .map_err(|error| format!("unable to read H.264 decoder configuration: {error}"))?;
+        configs.push(config);
+    }
+    let config = select_decoder_config(&configs).ok_or_else(|| {
+        "no unencrypted H.264 raw bitstream decoder configuration is available".to_owned()
+    })?;
+    let decoder = unsafe {
+        video_device.CreateVideoDecoder(&raw const decoder_descriptor, &raw const config)
+    }
+    .map_err(|error| format!("unable to create the H.264 video decoder: {error}"))?;
+
+    let render_target_count = u32::from(config.ConfigMinRenderTargetBuffCount).max(1);
+    let texture_descriptor = D3D11_TEXTURE2D_DESC {
+        Width: SAMPLE_WIDTH,
+        Height: SAMPLE_HEIGHT,
+        MipLevels: 1,
+        ArraySize: render_target_count,
+        Format: DXGI_FORMAT_NV12,
+        SampleDesc: DXGI_SAMPLE_DESC {
+            Count: 1,
+            Quality: 0,
+        },
+        Usage: D3D11_USAGE_DEFAULT,
+        BindFlags: u32::try_from(D3D11_BIND_DECODER.0)
+            .map_err(|_| "D3D11 decoder bind flag is invalid".to_owned())?,
+        CPUAccessFlags: 0,
+        MiscFlags: 0,
+    };
+    let mut texture: Option<ID3D11Texture2D> = None;
+    unsafe { device.CreateTexture2D(&raw const texture_descriptor, None, Some(&raw mut texture)) }
+        .map_err(|error| format!("unable to allocate the NV12 decoder texture array: {error}"))?;
+    let texture = texture.ok_or_else(|| "D3D11 returned no decoder texture".to_owned())?;
+    let output_descriptor = D3D11_VIDEO_DECODER_OUTPUT_VIEW_DESC {
+        DecodeProfile: profile,
+        ViewDimension: D3D11_VDOV_DIMENSION_TEXTURE2D,
+        Anonymous: D3D11_VIDEO_DECODER_OUTPUT_VIEW_DESC_0 {
+            Texture2D: D3D11_TEX2D_VDOV { ArraySlice: 0 },
+        },
+    };
+    let mut output_view: Option<ID3D11VideoDecoderOutputView> = None;
+    unsafe {
+        video_device.CreateVideoDecoderOutputView(
+            &texture,
+            &raw const output_descriptor,
+            Some(&raw mut output_view),
+        )
+    }
+    .map_err(|error| format!("unable to create the H.264 decoder output view: {error}"))?;
+    let _output_view =
+        output_view.ok_or_else(|| "D3D11 returned no decoder output view".to_owned())?;
+
+    let mut actual_descriptor = D3D11_VIDEO_DECODER_DESC::default();
+    let mut actual_config = D3D11_VIDEO_DECODER_CONFIG::default();
+    unsafe { decoder.GetCreationParameters(&raw mut actual_descriptor, &raw mut actual_config) }
+        .map_err(|error| {
+            format!("unable to verify the H.264 decoder creation parameters: {error}")
+        })?;
+    if actual_descriptor != decoder_descriptor || actual_config != config {
+        return Err("D3D11 decoder creation parameters changed unexpectedly".to_owned());
+    }
+
+    println!("native-video D3D11 H.264 decoder allocation probe");
+    println!("d3d11_created=true");
+    println!("video_support=true");
+    println!("h264_profile={profile:?}");
+    println!("h264_nv12_supported=true");
+    println!("h264_decoder_created=true");
+    println!("decoder_output_surface_created=true");
+    println!("decoder_width={SAMPLE_WIDTH}");
+    println!("decoder_height={SAMPLE_HEIGHT}");
+    println!("decoder_surface_count={render_target_count}");
+    println!("decoder_bitstream_raw={}", config.ConfigBitstreamRaw);
+    println!("feature_level=0x{:x}", selected_level.0);
+    println!("sample_decoded=false");
+    println!("zero_copy_verified=false");
+    Ok(())
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn strings<'a>(values: &'a [&'a str]) -> impl Iterator<Item = String> + 'a {
+        values.iter().map(|value| (*value).to_owned())
+    }
+
+    #[test]
+    fn defaults_decoder_to_window_adapter() {
+        let args = parse_args(strings(&[
+            "--dry-run",
+            "--window-adapter",
+            "gpu-0",
+            "--required-end-to-end",
+        ]))
+        .unwrap();
+
+        assert_eq!(args.window_adapter, AdapterId::new("gpu-0"));
+        assert_eq!(args.decode_adapter, AdapterId::new("gpu-0"));
+        assert_eq!(args.zero_copy_policy, ZeroCopyPolicy::RequiredEndToEnd);
+    }
+
+    #[test]
+    fn dry_run_is_mandatory() {
+        let error = parse_args(strings(&["--window-adapter", "gpu-0"])).unwrap_err();
+        assert_eq!(error, "only --dry-run is implemented");
+    }
+
+    #[test]
+    fn manual_adapter_defaults_decoder_to_manual_gpu_but_strict_checks_display() {
+        let args = parse_args(strings(&[
+            "--dry-run",
+            "--window-adapter",
+            "gpu-0",
+            "--manual-adapter",
+            "gpu-1",
+        ]))
+        .unwrap();
+
+        assert_eq!(args.manual_adapter, Some(AdapterId::new("gpu-1")));
+        assert_eq!(args.decode_adapter, AdapterId::new("gpu-1"));
+
+        let error = build_plan(args).unwrap_err();
+        assert!(
+            error.contains("decode adapter gpu-1 -> render adapter gpu-1 -> display adapter gpu-0")
+        );
+    }
+
+    #[test]
+    fn explicit_cross_adapter_decode_is_rejected_in_required_end_to_end() {
+        let args = parse_args(strings(&[
+            "--dry-run",
+            "--window-adapter",
+            "gpu-0",
+            "--manual-adapter",
+            "gpu-1",
+            "--decode-adapter",
+            "gpu-0",
+        ]))
+        .unwrap();
+
+        let error = build_plan(args).unwrap_err();
+        assert!(
+            error.contains("decode adapter gpu-0 -> render adapter gpu-1 -> display adapter gpu-0")
+        );
+    }
+
+    #[test]
+    fn compatibility_reports_manual_to_display_cross_adapter_copy() {
+        let args = parse_args(strings(&[
+            "--dry-run",
+            "--window-adapter",
+            "gpu-0",
+            "--manual-adapter",
+            "gpu-1",
+            "--compatibility",
+        ]))
+        .unwrap();
+
+        let plan = build_plan(args).unwrap();
+        assert_eq!(plan.decode_adapter, AdapterId::new("gpu-1"));
+        assert_eq!(plan.render_adapter, AdapterId::new("gpu-1"));
+        assert_eq!(plan.display_adapter, AdapterId::new("gpu-0"));
+        assert_eq!(
+            plan.planned_memory_path,
+            remotedesk_client_core::MemoryPathStatus::CrossAdapterCopy
+        );
+        assert!(!plan.is_zero_copy_candidate());
+    }
+
+    #[test]
+    fn required_end_to_end_is_default_and_compatibility_is_explicit() {
+        let required = parse_args(strings(&["--dry-run", "--window-adapter", "gpu-0"])).unwrap();
+        assert_eq!(required.zero_copy_policy, ZeroCopyPolicy::RequiredEndToEnd);
+
+        let compatibility = parse_args(strings(&[
+            "--dry-run",
+            "--window-adapter",
+            "gpu-0",
+            "--compatibility",
+        ]))
+        .unwrap();
+        assert_eq!(
+            compatibility.zero_copy_policy,
+            ZeroCopyPolicy::Compatibility
+        );
+    }
+
+    #[test]
+    fn usage_exposes_the_h264_decoder_allocation_probe() {
+        assert!(usage().contains("--capabilities"));
+        assert!(usage().contains("--probe-h264-decoder"));
+        assert!(usage().contains("--probe-h264-file"));
+        assert!(usage().contains("--play-h264-file"));
+    }
+
+    #[test]
+    fn helper_capability_schema_keeps_cpu_frame_mapping_disabled() {
+        let response = HelperCapabilities {
+            schema_version: 1,
+            version: "test",
+            platform: "test",
+            h264_file_probe: true,
+            h264_file_player: true,
+            d3d11_video_processor: true,
+            cpu_frame_mapping: false,
+        };
+        let json = serde_json::to_value(response).unwrap();
+        assert_eq!(json["schema_version"], 1);
+        assert_eq!(json["cpu_frame_mapping"], false);
+    }
+
+    #[test]
+    fn h264_file_probe_accepts_only_supported_local_container_extensions() {
+        assert!(supported_h264_container(Path::new("sample.mp4")));
+        assert!(supported_h264_container(Path::new("sample.M4V")));
+        assert!(supported_h264_container(Path::new("sample.mov")));
+        assert!(!supported_h264_container(Path::new("sample.h264")));
+        assert!(!supported_h264_container(Path::new("sample.webm")));
+        assert!(!supported_h264_container(Path::new("sample")));
+    }
+
+    #[test]
+    fn texture_subresource_validation_covers_mips_and_array_slices() {
+        assert!(valid_texture_subresource(1, 4, 3));
+        assert!(valid_texture_subresource(2, 4, 7));
+        assert!(!valid_texture_subresource(2, 4, 8));
+        assert!(!valid_texture_subresource(0, 4, 0));
+        assert!(!valid_texture_subresource(4, 0, 0));
+        assert!(!valid_texture_subresource(u32::MAX, 2, 0));
+    }
+
+    #[cfg(windows)]
+    #[test]
+    fn native_media_type_filter_accepts_only_h264_subtypes() {
+        use windows::Win32::Media::MediaFoundation::{
+            MFVideoFormat_H264, MFVideoFormat_H264_ES, MFVideoFormat_NV12,
+        };
+
+        assert!(is_h264_subtype(MFVideoFormat_H264));
+        assert!(is_h264_subtype(MFVideoFormat_H264_ES));
+        assert!(!is_h264_subtype(MFVideoFormat_NV12));
+    }
+
+    #[cfg(windows)]
+    #[test]
+    fn h264_profile_selection_prefers_the_standard_vld_profile() {
+        use windows::Win32::Graphics::Direct3D11::{
+            D3D11_DECODER_PROFILE_H264_VLD_FGT, D3D11_DECODER_PROFILE_H264_VLD_NOFGT,
+        };
+
+        assert_eq!(
+            select_h264_profile(&[
+                D3D11_DECODER_PROFILE_H264_VLD_FGT,
+                D3D11_DECODER_PROFILE_H264_VLD_NOFGT,
+            ]),
+            Some(D3D11_DECODER_PROFILE_H264_VLD_NOFGT)
+        );
+    }
+
+    #[cfg(windows)]
+    #[test]
+    fn decoder_config_selection_requires_unencrypted_raw_bitstream_input() {
+        use windows::Win32::Graphics::Direct3D11::D3D11_VIDEO_DECODER_CONFIG;
+
+        let short_slice = D3D11_VIDEO_DECODER_CONFIG {
+            ConfigBitstreamRaw: 1,
+            ..Default::default()
+        };
+        let long_slice = D3D11_VIDEO_DECODER_CONFIG {
+            ConfigBitstreamRaw: 2,
+            ..Default::default()
+        };
+        let encrypted = D3D11_VIDEO_DECODER_CONFIG {
+            guidConfigBitstreamEncryption: windows::core::GUID::from_u128(1),
+            ConfigBitstreamRaw: 2,
+            ..Default::default()
+        };
+
+        assert_eq!(
+            select_decoder_config(&[short_slice, encrypted, long_slice]),
+            Some(long_slice)
+        );
+        assert_eq!(select_decoder_config(&[encrypted]), None);
+    }
+}
diff --git a/client/helpers/native-video/src/player.rs b/client/helpers/native-video/src/player.rs
new file mode 100644
index 0000000..79ac6bd
--- /dev/null
+++ b/client/helpers/native-video/src/player.rs
@@ -0,0 +1,966 @@
+use core::mem::ManuallyDrop;
+use std::path::Path;
+use std::sync::Arc;
+use std::time::{Duration, Instant};
+
+use raw_window_handle::{HasWindowHandle as _, RawWindowHandle};
+use windows::Win32::Foundation::{HWND, RECT};
+use windows::Win32::Graphics::Direct3D11::{
+    D3D11_TEX2D_VPIV, D3D11_TEX2D_VPOV, D3D11_VIDEO_FRAME_FORMAT_PROGRESSIVE,
+    D3D11_VIDEO_PROCESSOR_COLOR_SPACE, D3D11_VIDEO_PROCESSOR_CONTENT_DESC,
+    D3D11_VIDEO_PROCESSOR_FORMAT_SUPPORT_INPUT, D3D11_VIDEO_PROCESSOR_FORMAT_SUPPORT_OUTPUT,
+    D3D11_VIDEO_PROCESSOR_INPUT_VIEW_DESC, D3D11_VIDEO_PROCESSOR_INPUT_VIEW_DESC_0,
+    D3D11_VIDEO_PROCESSOR_OUTPUT_VIEW_DESC, D3D11_VIDEO_PROCESSOR_OUTPUT_VIEW_DESC_0,
+    D3D11_VIDEO_PROCESSOR_STREAM, D3D11_VIDEO_USAGE_PLAYBACK_NORMAL,
+    D3D11_VPIV_DIMENSION_TEXTURE2D, D3D11_VPOV_DIMENSION_TEXTURE2D, ID3D11Device,
+    ID3D11DeviceContext, ID3D11RenderTargetView, ID3D11Texture2D, ID3D11VideoContext,
+    ID3D11VideoDevice, ID3D11VideoProcessor, ID3D11VideoProcessorEnumerator,
+    ID3D11VideoProcessorOutputView,
+};
+use windows::Win32::Graphics::Dxgi::Common::{
+    DXGI_FORMAT_B8G8R8A8_UNORM, DXGI_FORMAT_NV12, DXGI_FORMAT_UNKNOWN, DXGI_MODE_DESC,
+    DXGI_RATIONAL, DXGI_SAMPLE_DESC,
+};
+use windows::Win32::Graphics::Dxgi::{
+    DXGI_MWA_NO_ALT_ENTER, DXGI_PRESENT, DXGI_SWAP_CHAIN_DESC, DXGI_SWAP_CHAIN_FLAG,
+    DXGI_SWAP_EFFECT_DISCARD, DXGI_USAGE_RENDER_TARGET_OUTPUT, IDXGIDevice, IDXGIFactory,
+    IDXGISwapChain,
+};
+use windows::Win32::Media::MediaFoundation::{
+    IMFAttributes, IMFDXGIBuffer, IMFDXGIDeviceManager, IMFSample, IMFSourceReader,
+    MF_MT_FRAME_SIZE, MF_MT_MAJOR_TYPE, MF_MT_SUBTYPE, MF_MT_VIDEO_NOMINAL_RANGE, MF_MT_YUV_MATRIX,
+    MF_READWRITE_ENABLE_HARDWARE_TRANSFORMS, MF_SOURCE_READER_ALL_STREAMS,
+    MF_SOURCE_READER_D3D_MANAGER, MF_SOURCE_READER_DISABLE_DXVA,
+    MF_SOURCE_READER_FIRST_VIDEO_STREAM, MF_SOURCE_READERF_CURRENTMEDIATYPECHANGED,
+    MF_SOURCE_READERF_ENDOFSTREAM, MF_SOURCE_READERF_ERROR, MF_VERSION, MFCreateAttributes,
+    MFCreateDXGIDeviceManager, MFCreateMediaType, MFCreateSourceReaderFromURL, MFMediaType_Video,
+    MFNominalRange_0_255, MFSTARTUP_FULL, MFStartup, MFVideoFormat_NV12,
+    MFVideoTransferMatrix_BT709,
+};
+use windows::Win32::System::Com::{COINIT_MULTITHREADED, CoInitializeEx};
+use windows::core::{Interface as _, PCWSTR};
+use winit::application::ApplicationHandler;
+use winit::dpi::{LogicalSize, PhysicalSize};
+use winit::event::{ElementState, WindowEvent};
+use winit::event_loop::{ActiveEventLoop, ControlFlow, EventLoop};
+use winit::keyboard::{Key, ModifiersState, NamedKey};
+use winit::window::{Fullscreen, Window, WindowAttributes, WindowId};
+
+use super::{
+    ComGuard, MediaFoundationGuard, create_hardware_d3d11_device, find_h264_native_media_type,
+    source_reader_flag, source_reader_index, valid_texture_subresource, validated_h264_probe_path,
+};
+
+const MAX_PLAYBACK_TIMELINE: Duration = Duration::from_secs(24 * 60 * 60);
+const MAX_PLAYBACK_READS: usize = 10_000_000;
+
+pub fn play_h264_file(path: &Path) -> Result<(), String> {
+    let (mut decoder, file_size, native_media_type_index, feature_level) =
+        DecoderSession::open(path)?;
+    let first_frame = decoder
+        .read_frame()?
+        .ok_or_else(|| "H.264 input contains no decoded video frame".to_owned())?;
+    let initial_size = fit_initial_window(first_frame.width, first_frame.height);
+    let event_loop = EventLoop::new()
+        .map_err(|error| format!("unable to create native-video event loop: {error}"))?;
+    event_loop.set_control_flow(ControlFlow::Poll);
+    let mut app = PlaybackApp::new(decoder, first_frame, initial_size);
+    event_loop
+        .run_app(&mut app)
+        .map_err(|error| format!("native-video event loop failed: {error}"))?;
+    if let Some(error) = app.error.take() {
+        return Err(error);
+    }
+    if app.presented_frames == 0 {
+        return Err("native-video window closed before presenting a frame".to_owned());
+    }
+
+    println!("native-video Media Foundation H.264 window playback");
+    println!("input_size={file_size}");
+    println!("native_media_type_index={native_media_type_index}");
+    println!("feature_level=0x{:x}", feature_level.0);
+    println!("sample_decoded=true");
+    println!("dxgi_surface=true");
+    println!("same_d3d11_device=true");
+    println!("d3d11_video_processor_presented=true");
+    println!("cpu_frame_mapping=false");
+    println!("presented_frames={}", app.presented_frames);
+    println!("hardware_decode_verified=false");
+    println!("zero_copy_verified=false");
+    Ok(())
+}
+
+struct DecoderSession {
+    reader: IMFSourceReader,
+    _attributes: IMFAttributes,
+    _manager: IMFDXGIDeviceManager,
+    context: ID3D11DeviceContext,
+    device: ID3D11Device,
+    video_stream: u32,
+    end_of_stream_flag: u32,
+    error_flag: u32,
+    media_type_changed_flag: u32,
+    visible_size: (u32, u32),
+    input_color_space: D3D11_VIDEO_PROCESSOR_COLOR_SPACE,
+    reads: usize,
+    _media_foundation_guard: MediaFoundationGuard,
+    _com_guard: ComGuard,
+}
+
+impl DecoderSession {
+    fn open(
+        path: &Path,
+    ) -> Result<
+        (
+            Self,
+            u64,
+            u32,
+            windows::Win32::Graphics::Direct3D::D3D_FEATURE_LEVEL,
+        ),
+        String,
+    > {
+        use std::os::windows::ffi::OsStrExt as _;
+
+        let (path, file_size) = validated_h264_probe_path(path)?;
+        unsafe { CoInitializeEx(None, COINIT_MULTITHREADED) }
+            .ok()
+            .map_err(|error| format!("unable to initialize COM for H.264 playback: {error}"))?;
+        let com_guard = ComGuard;
+        unsafe { MFStartup(MF_VERSION, MFSTARTUP_FULL) }
+            .map_err(|error| format!("unable to start Media Foundation: {error}"))?;
+        let media_foundation_guard = MediaFoundationGuard;
+
+        let (device, context, feature_level) = create_hardware_d3d11_device()?;
+        let mut reset_token = 0_u32;
+        let mut manager = None;
+        unsafe { MFCreateDXGIDeviceManager(&raw mut reset_token, &raw mut manager) }
+            .map_err(|error| format!("unable to create the DXGI device manager: {error}"))?;
+        let manager =
+            manager.ok_or_else(|| "Media Foundation returned no DXGI device manager".to_owned())?;
+        unsafe { manager.ResetDevice(&device, reset_token) }
+            .map_err(|error| format!("unable to bind D3D11 to the DXGI device manager: {error}"))?;
+
+        let mut attributes: Option<IMFAttributes> = None;
+        unsafe { MFCreateAttributes(&raw mut attributes, 4) }
+            .map_err(|error| format!("unable to create source reader attributes: {error}"))?;
+        let attributes = attributes
+            .ok_or_else(|| "Media Foundation returned no source reader attributes".to_owned())?;
+        let d3d_manager_key = MF_SOURCE_READER_D3D_MANAGER;
+        let hardware_transforms_key = MF_READWRITE_ENABLE_HARDWARE_TRANSFORMS;
+        let disable_dxva_key = MF_SOURCE_READER_DISABLE_DXVA;
+        unsafe { attributes.SetUnknown(&d3d_manager_key, &manager) }
+            .map_err(|error| format!("unable to attach the DXGI device manager: {error}"))?;
+        unsafe { attributes.SetUINT32(&hardware_transforms_key, 1) }
+            .map_err(|error| format!("unable to enable hardware transforms: {error}"))?;
+        unsafe { attributes.SetUINT32(&disable_dxva_key, 0) }
+            .map_err(|error| format!("unable to enable DXVA decoding: {error}"))?;
+
+        let mut wide_path = path.as_os_str().encode_wide().collect::<Vec<_>>();
+        if wide_path.contains(&0) {
+            return Err("H.264 playback path contains a NUL character".to_owned());
+        }
+        wide_path.push(0);
+        let reader = unsafe {
+            MFCreateSourceReaderFromURL(PCWSTR::from_raw(wide_path.as_ptr()), &attributes)
+        }
+        .map_err(|error| format!("unable to open the H.264 media source: {error}"))?;
+        let all_streams = source_reader_index(MF_SOURCE_READER_ALL_STREAMS.0);
+        let video_stream = source_reader_index(MF_SOURCE_READER_FIRST_VIDEO_STREAM.0);
+        unsafe { reader.SetStreamSelection(all_streams, false) }
+            .map_err(|error| format!("unable to disable non-video media streams: {error}"))?;
+        unsafe { reader.SetStreamSelection(video_stream, true) }
+            .map_err(|error| format!("unable to select the first video stream: {error}"))?;
+        let (native_type, native_media_type_index) =
+            find_h264_native_media_type(&reader, video_stream)?;
+        unsafe { reader.SetCurrentMediaType(video_stream, None, &native_type) }.map_err(
+            |error| format!("unable to select the H.264 native video media type: {error}"),
+        )?;
+
+        let output_type = unsafe { MFCreateMediaType() }
+            .map_err(|error| format!("unable to create the NV12 output media type: {error}"))?;
+        let major_type_key = MF_MT_MAJOR_TYPE;
+        let video_type = MFMediaType_Video;
+        unsafe { output_type.SetGUID(&major_type_key, &video_type) }
+            .map_err(|error| format!("unable to set the output major type: {error}"))?;
+        let subtype_key = MF_MT_SUBTYPE;
+        let nv12_type = MFVideoFormat_NV12;
+        unsafe { output_type.SetGUID(&subtype_key, &nv12_type) }
+            .map_err(|error| format!("unable to request NV12 output: {error}"))?;
+        unsafe { reader.SetCurrentMediaType(video_stream, None, &output_type) }
+            .map_err(|error| format!("unable to activate H.264 to NV12 decoding: {error}"))?;
+        let actual_type = unsafe { reader.GetCurrentMediaType(video_stream) }
+            .map_err(|error| format!("unable to read the selected output media type: {error}"))?;
+        let subtype_key = MF_MT_SUBTYPE;
+        let actual_subtype = unsafe { actual_type.GetGUID(&subtype_key) }
+            .map_err(|error| format!("selected output media type has no subtype: {error}"))?;
+        if actual_subtype != MFVideoFormat_NV12 {
+            return Err("Media Foundation did not select NV12 output".to_owned());
+        }
+        let visible_size = media_type_frame_size(&actual_type)?;
+        let input_color_space = media_type_color_space(&actual_type, visible_size.1);
+
+        Ok((
+            Self {
+                reader,
+                _attributes: attributes,
+                _manager: manager,
+                context,
+                device,
+                video_stream,
+                end_of_stream_flag: source_reader_flag(MF_SOURCE_READERF_ENDOFSTREAM.0)?,
+                error_flag: source_reader_flag(MF_SOURCE_READERF_ERROR.0)?,
+                media_type_changed_flag: source_reader_flag(
+                    MF_SOURCE_READERF_CURRENTMEDIATYPECHANGED.0,
+                )?,
+                visible_size,
+                input_color_space,
+                reads: 0,
+                _media_foundation_guard: media_foundation_guard,
+                _com_guard: com_guard,
+            },
+            file_size,
+            native_media_type_index,
+            feature_level,
+        ))
+    }
+
+    fn read_frame(&mut self) -> Result<Option<DecodedFrame>, String> {
+        while self.reads < MAX_PLAYBACK_READS {
+            self.reads += 1;
+            let mut actual_stream = 0_u32;
+            let mut stream_flags = 0_u32;
+            let mut timestamp = 0_i64;
+            let mut sample = None;
+            unsafe {
+                self.reader.ReadSample(
+                    self.video_stream,
+                    0,
+                    Some(&raw mut actual_stream),
+                    Some(&raw mut stream_flags),
+                    Some(&raw mut timestamp),
+                    Some(&raw mut sample),
+                )
+            }
+            .map_err(|error| format!("H.264 source reader failed: {error}"))?;
+            if stream_flags & self.error_flag != 0 {
+                return Err("H.264 source reader reported a stream error".to_owned());
+            }
+            if stream_flags & self.media_type_changed_flag != 0 {
+                let media_type = unsafe { self.reader.GetCurrentMediaType(self.video_stream) }
+                    .map_err(|error| {
+                        format!("unable to read changed playback media type: {error}")
+                    })?;
+                let subtype_key = MF_MT_SUBTYPE;
+                let subtype = unsafe { media_type.GetGUID(&subtype_key) }
+                    .map_err(|error| format!("changed media type has no subtype: {error}"))?;
+                if subtype != MFVideoFormat_NV12 {
+                    return Err("playback media type changed away from NV12".to_owned());
+                }
+                self.visible_size = media_type_frame_size(&media_type)?;
+                self.input_color_space = media_type_color_space(&media_type, self.visible_size.1);
+            }
+            if let Some(sample) = sample {
+                if actual_stream != self.video_stream {
+                    return Err("H.264 source reader returned the wrong stream".to_owned());
+                }
+                let buffer_count = unsafe { sample.GetBufferCount() }
+                    .map_err(|error| format!("unable to count decoded buffers: {error}"))?;
+                if buffer_count != 1 {
+                    return Err("decoded frame must contain exactly one DXGI buffer".to_owned());
+                }
+                let buffer = unsafe { sample.GetBufferByIndex(0) }
+                    .map_err(|error| format!("unable to read decoded buffer: {error}"))?;
+                let dxgi_buffer = buffer.cast::<IMFDXGIBuffer>().map_err(|_| {
+                    "decoded frame was delivered through a CPU media buffer".to_owned()
+                })?;
+                let mut raw_texture = core::ptr::null_mut();
+                unsafe { dxgi_buffer.GetResource(&ID3D11Texture2D::IID, &raw mut raw_texture) }
+                    .map_err(|error| format!("decoded buffer has no D3D11 texture: {error}"))?;
+                if raw_texture.is_null() {
+                    return Err("decoded buffer returned a null D3D11 texture".to_owned());
+                }
+                let texture = unsafe { ID3D11Texture2D::from_raw(raw_texture) };
+                let mut descriptor =
+                    windows::Win32::Graphics::Direct3D11::D3D11_TEXTURE2D_DESC::default();
+                unsafe { texture.GetDesc(&raw mut descriptor) };
+                if descriptor.Format != DXGI_FORMAT_NV12
+                    || descriptor.Width == 0
+                    || descriptor.Height == 0
+                {
+                    return Err("decoded texture is not a valid NV12 surface".to_owned());
+                }
+                if self.visible_size.0 > descriptor.Width || self.visible_size.1 > descriptor.Height
+                {
+                    return Err("visible video frame exceeds its NV12 texture".to_owned());
+                }
+                let subresource = unsafe { dxgi_buffer.GetSubresourceIndex() }
+                    .map_err(|error| format!("unable to read decoded subresource: {error}"))?;
+                if !valid_texture_subresource(
+                    descriptor.MipLevels,
+                    descriptor.ArraySize,
+                    subresource,
+                ) {
+                    return Err("decoded subresource exceeds the texture layout".to_owned());
+                }
+                let texture_device = unsafe { texture.GetDevice() }
+                    .map_err(|error| format!("unable to read decoded texture device: {error}"))?;
+                if texture_device != self.device {
+                    return Err("decoded texture belongs to a different D3D11 device".to_owned());
+                }
+                return Ok(Some(DecodedFrame {
+                    _sample: sample,
+                    texture,
+                    subresource,
+                    mip_levels: descriptor.MipLevels,
+                    width: self.visible_size.0,
+                    height: self.visible_size.1,
+                    input_color_space: self.input_color_space,
+                    timestamp_100ns: timestamp,
+                }));
+            }
+            if stream_flags & self.end_of_stream_flag != 0 {
+                return Ok(None);
+            }
+        }
+        Err("H.264 playback exceeded the bounded ten-million-read limit".to_owned())
+    }
+}
+
+struct DecodedFrame {
+    // Retaining the sample keeps Media Foundation from recycling the decoder
+    // surface before VideoProcessorBlt consumes its texture subresource.
+    _sample: IMFSample,
+    texture: ID3D11Texture2D,
+    subresource: u32,
+    mip_levels: u32,
+    width: u32,
+    height: u32,
+    input_color_space: D3D11_VIDEO_PROCESSOR_COLOR_SPACE,
+    timestamp_100ns: i64,
+}
+
+struct PlaybackApp {
+    decoder: DecoderSession,
+    pending_frame: Option<DecodedFrame>,
+    last_frame: Option<DecodedFrame>,
+    renderer: Option<VideoRenderer>,
+    window: Option<Arc<Window>>,
+    initial_size: PhysicalSize<u32>,
+    first_timestamp: i64,
+    playback_started: Instant,
+    modifiers: ModifiersState,
+    fullscreen: bool,
+    ended: bool,
+    error: Option<String>,
+    presented_frames: u64,
+}
+
+impl PlaybackApp {
+    fn new(
+        decoder: DecoderSession,
+        first_frame: DecodedFrame,
+        initial_size: PhysicalSize<u32>,
+    ) -> Self {
+        Self {
+            decoder,
+            first_timestamp: first_frame.timestamp_100ns,
+            pending_frame: Some(first_frame),
+            last_frame: None,
+            renderer: None,
+            window: None,
+            initial_size,
+            playback_started: Instant::now(),
+            modifiers: ModifiersState::empty(),
+            fullscreen: false,
+            ended: false,
+            error: None,
+            presented_frames: 0,
+        }
+    }
+
+    fn fail(&mut self, event_loop: &ActiveEventLoop, error: String) {
+        self.error = Some(error);
+        event_loop.exit();
+    }
+
+    fn set_fullscreen(&mut self, fullscreen: bool) {
+        if let Some(window) = self.window.as_ref() {
+            window.set_fullscreen(
+                fullscreen.then(|| Fullscreen::Borderless(window.current_monitor())),
+            );
+            self.fullscreen = fullscreen;
+        }
+    }
+
+    fn present_pending(&mut self, event_loop: &ActiveEventLoop) {
+        let Some(frame) = self.pending_frame.take() else {
+            return;
+        };
+        let Some(renderer) = self.renderer.as_mut() else {
+            self.pending_frame = Some(frame);
+            return;
+        };
+        if let Err(error) = renderer.present(&frame) {
+            self.fail(event_loop, error);
+            return;
+        }
+        self.presented_frames = self.presented_frames.saturating_add(1);
+        self.last_frame = Some(frame);
+    }
+}
+
+impl ApplicationHandler for PlaybackApp {
+    fn resumed(&mut self, event_loop: &ActiveEventLoop) {
+        if self.window.is_some() {
+            return;
+        }
+        let attributes = WindowAttributes::default()
+            .with_title("RemoteDesk Native Video")
+            .with_inner_size(LogicalSize::new(
+                f64::from(self.initial_size.width),
+                f64::from(self.initial_size.height),
+            ))
+            .with_min_inner_size(LogicalSize::new(320.0, 200.0));
+        let window = match event_loop.create_window(attributes) {
+            Ok(window) => Arc::new(window),
+            Err(error) => {
+                self.fail(
+                    event_loop,
+                    format!("unable to create playback window: {error}"),
+                );
+                return;
+            }
+        };
+        let renderer = match VideoRenderer::new(
+            Arc::clone(&window),
+            self.decoder.device.clone(),
+            self.decoder.context.clone(),
+        ) {
+            Ok(renderer) => renderer,
+            Err(error) => {
+                self.fail(event_loop, error);
+                return;
+            }
+        };
+        self.renderer = Some(renderer);
+        self.window = Some(window);
+        self.playback_started = Instant::now();
+    }
+
+    fn window_event(
+        &mut self,
+        event_loop: &ActiveEventLoop,
+        window_id: WindowId,
+        event: WindowEvent,
+    ) {
+        if self
+            .window
+            .as_ref()
+            .is_none_or(|window| window.id() != window_id)
+        {
+            return;
+        }
+        match event {
+            WindowEvent::CloseRequested => event_loop.exit(),
+            WindowEvent::Resized(size) => {
+                if let Some(renderer) = self.renderer.as_mut()
+                    && let Err(error) = renderer.resize(size.width, size.height)
+                {
+                    self.fail(event_loop, error);
+                }
+            }
+            WindowEvent::ModifiersChanged(modifiers) => self.modifiers = modifiers.state(),
+            WindowEvent::KeyboardInput { event, .. } if event.state == ElementState::Pressed => {
+                let toggle_fullscreen = event.logical_key == Key::Named(NamedKey::F11)
+                    || (event.logical_key == Key::Named(NamedKey::Enter)
+                        && self.modifiers.alt_key());
+                let exit_session = matches!(&event.logical_key, Key::Character(value) if value.eq_ignore_ascii_case("q"))
+                    && self.modifiers.control_key()
+                    && self.modifiers.shift_key();
+                if exit_session {
+                    event_loop.exit();
+                } else if toggle_fullscreen {
+                    self.set_fullscreen(!self.fullscreen);
+                } else if event.logical_key == Key::Named(NamedKey::Escape) && self.fullscreen {
+                    self.set_fullscreen(false);
+                }
+            }
+            WindowEvent::RedrawRequested => {
+                if self.pending_frame.is_none()
+                    && let (Some(renderer), Some(frame)) =
+                        (self.renderer.as_mut(), self.last_frame.as_ref())
+                    && let Err(error) = renderer.present(frame)
+                {
+                    self.fail(event_loop, error);
+                }
+            }
+            _ => {}
+        }
+    }
+
+    fn about_to_wait(&mut self, event_loop: &ActiveEventLoop) {
+        if self.window.is_none() || self.error.is_some() {
+            return;
+        }
+        if let Some(frame) = self.pending_frame.as_ref() {
+            let offset = match frame_time_offset(self.first_timestamp, frame.timestamp_100ns) {
+                Ok(offset) => offset,
+                Err(error) => {
+                    self.fail(event_loop, error);
+                    return;
+                }
+            };
+            let deadline = self.playback_started + offset;
+            if Instant::now() < deadline {
+                event_loop.set_control_flow(ControlFlow::WaitUntil(deadline));
+                return;
+            }
+            self.present_pending(event_loop);
+            event_loop.set_control_flow(ControlFlow::Poll);
+            return;
+        }
+        if self.ended {
+            event_loop.set_control_flow(ControlFlow::Wait);
+            return;
+        }
+        match self.decoder.read_frame() {
+            Ok(Some(frame)) => {
+                self.pending_frame = Some(frame);
+                event_loop.set_control_flow(ControlFlow::Poll);
+            }
+            Ok(None) => {
+                self.ended = true;
+                event_loop.set_control_flow(ControlFlow::Wait);
+            }
+            Err(error) => self.fail(event_loop, error),
+        }
+    }
+}
+
+struct VideoRenderer {
+    window: Arc<Window>,
+    device: ID3D11Device,
+    context: ID3D11DeviceContext,
+    video_device: ID3D11VideoDevice,
+    video_context: ID3D11VideoContext,
+    swap_chain: IDXGISwapChain,
+    pipeline: Option<ProcessorPipeline>,
+    output_size: (u32, u32),
+    output_frame: u32,
+}
+
+struct ProcessorPipeline {
+    input_size: (u32, u32),
+    output_size: (u32, u32),
+    enumerator: ID3D11VideoProcessorEnumerator,
+    processor: ID3D11VideoProcessor,
+    output_view: ID3D11VideoProcessorOutputView,
+    render_target: ID3D11RenderTargetView,
+}
+
+impl VideoRenderer {
+    fn new(
+        window: Arc<Window>,
+        device: ID3D11Device,
+        context: ID3D11DeviceContext,
+    ) -> Result<Self, String> {
+        let RawWindowHandle::Win32(handle) = window
+            .window_handle()
+            .map_err(|error| format!("unable to read playback window handle: {error}"))?
+            .as_raw()
+        else {
+            return Err("native-video playback requires a Win32 window".to_owned());
+        };
+        let hwnd = HWND(handle.hwnd.get() as *mut core::ffi::c_void);
+        let size = window.inner_size();
+        let width = size.width.max(1);
+        let height = size.height.max(1);
+        let descriptor = swap_chain_descriptor(hwnd, width, height);
+        let dxgi_device: IDXGIDevice = device
+            .cast()
+            .map_err(|error| format!("D3D11 device has no DXGI interface: {error}"))?;
+        let adapter = unsafe { dxgi_device.GetAdapter() }
+            .map_err(|error| format!("unable to read D3D11 adapter: {error}"))?;
+        let factory: IDXGIFactory = unsafe { adapter.GetParent() }
+            .map_err(|error| format!("unable to read DXGI factory: {error}"))?;
+        unsafe { factory.MakeWindowAssociation(hwnd, DXGI_MWA_NO_ALT_ENTER) }
+            .map_err(|error| format!("unable to disable DXGI Alt+Enter handling: {error}"))?;
+        let mut swap_chain = None;
+        unsafe { factory.CreateSwapChain(&device, &raw const descriptor, &raw mut swap_chain) }
+            .ok()
+            .map_err(|error| format!("unable to create native-video swap chain: {error}"))?;
+        let swap_chain =
+            swap_chain.ok_or_else(|| "DXGI returned no native-video swap chain".to_owned())?;
+        let video_device: ID3D11VideoDevice = device
+            .cast()
+            .map_err(|error| format!("D3D11 device has no video interface: {error}"))?;
+        let video_context: ID3D11VideoContext = context
+            .cast()
+            .map_err(|error| format!("D3D11 context has no video interface: {error}"))?;
+        Ok(Self {
+            window,
+            device,
+            context,
+            video_device,
+            video_context,
+            swap_chain,
+            pipeline: None,
+            output_size: (width, height),
+            output_frame: 0,
+        })
+    }
+
+    fn resize(&mut self, width: u32, height: u32) -> Result<(), String> {
+        if width == 0 || height == 0 || self.output_size == (width, height) {
+            return Ok(());
+        }
+        self.pipeline = None;
+        unsafe {
+            self.swap_chain.ResizeBuffers(
+                0,
+                width,
+                height,
+                DXGI_FORMAT_UNKNOWN,
+                DXGI_SWAP_CHAIN_FLAG(0),
+            )
+        }
+        .map_err(|error| format!("unable to resize native-video swap chain: {error}"))?;
+        self.output_size = (width, height);
+        Ok(())
+    }
+
+    fn present(&mut self, frame: &DecodedFrame) -> Result<(), String> {
+        let size = self.window.inner_size();
+        if size.width == 0 || size.height == 0 {
+            return Ok(());
+        }
+        self.resize(size.width, size.height)?;
+        self.ensure_pipeline(frame.width, frame.height)?;
+        let pipeline = self
+            .pipeline
+            .as_ref()
+            .ok_or_else(|| "native-video processor pipeline is unavailable".to_owned())?;
+        let input_descriptor = D3D11_VIDEO_PROCESSOR_INPUT_VIEW_DESC {
+            FourCC: 0,
+            ViewDimension: D3D11_VPIV_DIMENSION_TEXTURE2D,
+            Anonymous: D3D11_VIDEO_PROCESSOR_INPUT_VIEW_DESC_0 {
+                Texture2D: D3D11_TEX2D_VPIV {
+                    MipSlice: frame.subresource % frame.mip_levels,
+                    ArraySlice: frame.subresource / frame.mip_levels,
+                },
+            },
+        };
+        let mut input_view = None;
+        unsafe {
+            self.video_device.CreateVideoProcessorInputView(
+                &frame.texture,
+                &pipeline.enumerator,
+                &raw const input_descriptor,
+                Some(&raw mut input_view),
+            )
+        }
+        .map_err(|error| format!("unable to create NV12 processor input view: {error}"))?;
+        let input_view =
+            input_view.ok_or_else(|| "D3D11 returned no processor input view".to_owned())?;
+
+        let source = RECT {
+            left: 0,
+            top: 0,
+            right: i32::try_from(frame.width)
+                .map_err(|_| "video width exceeds Win32 coordinates".to_owned())?,
+            bottom: i32::try_from(frame.height)
+                .map_err(|_| "video height exceeds Win32 coordinates".to_owned())?,
+        };
+        let destination = aspect_fit_rect(frame.width, frame.height, size.width, size.height)?;
+        let target = RECT {
+            left: 0,
+            top: 0,
+            right: i32::try_from(size.width)
+                .map_err(|_| "window width exceeds Win32 coordinates".to_owned())?,
+            bottom: i32::try_from(size.height)
+                .map_err(|_| "window height exceeds Win32 coordinates".to_owned())?,
+        };
+        unsafe {
+            self.context
+                .ClearRenderTargetView(&pipeline.render_target, &[0.0, 0.0, 0.0, 1.0]);
+            self.video_context.VideoProcessorSetOutputTargetRect(
+                &pipeline.processor,
+                true,
+                Some(&raw const target),
+            );
+            self.video_context.VideoProcessorSetStreamSourceRect(
+                &pipeline.processor,
+                0,
+                true,
+                Some(&raw const source),
+            );
+            self.video_context.VideoProcessorSetStreamDestRect(
+                &pipeline.processor,
+                0,
+                true,
+                Some(&raw const destination),
+            );
+            self.video_context.VideoProcessorSetStreamColorSpace(
+                &pipeline.processor,
+                0,
+                &raw const frame.input_color_space,
+            );
+        }
+        let mut stream = D3D11_VIDEO_PROCESSOR_STREAM {
+            Enable: true.into(),
+            pInputSurface: ManuallyDrop::new(Some(input_view)),
+            ..Default::default()
+        };
+        let blit_result = unsafe {
+            self.video_context.VideoProcessorBlt(
+                &pipeline.processor,
+                &pipeline.output_view,
+                self.output_frame,
+                std::slice::from_ref(&stream),
+            )
+        };
+        let _input_view = unsafe { ManuallyDrop::take(&mut stream.pInputSurface) };
+        blit_result.map_err(|error| format!("unable to process NV12 video frame: {error}"))?;
+        unsafe { self.swap_chain.Present(1, DXGI_PRESENT(0)) }
+            .ok()
+            .map_err(|error| format!("unable to present native-video frame: {error}"))?;
+        self.output_frame = self.output_frame.wrapping_add(1);
+        Ok(())
+    }
+
+    fn ensure_pipeline(&mut self, input_width: u32, input_height: u32) -> Result<(), String> {
+        if self.pipeline.as_ref().is_some_and(|pipeline| {
+            pipeline.input_size == (input_width, input_height)
+                && pipeline.output_size == self.output_size
+        }) {
+            return Ok(());
+        }
+        let content = D3D11_VIDEO_PROCESSOR_CONTENT_DESC {
+            InputFrameFormat: D3D11_VIDEO_FRAME_FORMAT_PROGRESSIVE,
+            InputFrameRate: DXGI_RATIONAL {
+                Numerator: 60,
+                Denominator: 1,
+            },
+            InputWidth: input_width,
+            InputHeight: input_height,
+            OutputFrameRate: DXGI_RATIONAL {
+                Numerator: 60,
+                Denominator: 1,
+            },
+            OutputWidth: self.output_size.0,
+            OutputHeight: self.output_size.1,
+            Usage: D3D11_VIDEO_USAGE_PLAYBACK_NORMAL,
+        };
+        let enumerator = unsafe {
+            self.video_device
+                .CreateVideoProcessorEnumerator(&raw const content)
+        }
+        .map_err(|error| format!("unable to create video processor enumerator: {error}"))?;
+        let input_support = unsafe { enumerator.CheckVideoProcessorFormat(DXGI_FORMAT_NV12) }
+            .map_err(|error| format!("unable to query NV12 processor support: {error}"))?;
+        let output_support =
+            unsafe { enumerator.CheckVideoProcessorFormat(DXGI_FORMAT_B8G8R8A8_UNORM) }
+                .map_err(|error| format!("unable to query BGRA processor support: {error}"))?;
+        let required_input = u32::try_from(D3D11_VIDEO_PROCESSOR_FORMAT_SUPPORT_INPUT.0)
+            .map_err(|_| "invalid D3D11 input support flag".to_owned())?;
+        let required_output = u32::try_from(D3D11_VIDEO_PROCESSOR_FORMAT_SUPPORT_OUTPUT.0)
+            .map_err(|_| "invalid D3D11 output support flag".to_owned())?;
+        if input_support & required_input == 0 || output_support & required_output == 0 {
+            return Err("D3D11 video processor cannot convert NV12 to BGRA".to_owned());
+        }
+        let processor = unsafe { self.video_device.CreateVideoProcessor(&enumerator, 0) }
+            .map_err(|error| format!("unable to create D3D11 video processor: {error}"))?;
+        let back_buffer: ID3D11Texture2D = unsafe { self.swap_chain.GetBuffer(0) }
+            .map_err(|error| format!("unable to acquire swap-chain back buffer: {error}"))?;
+        let mut render_target = None;
+        unsafe {
+            self.device
+                .CreateRenderTargetView(&back_buffer, None, Some(&raw mut render_target))
+        }
+        .map_err(|error| format!("unable to create swap-chain render target: {error}"))?;
+        let render_target =
+            render_target.ok_or_else(|| "D3D11 returned no render target view".to_owned())?;
+        let output_descriptor = D3D11_VIDEO_PROCESSOR_OUTPUT_VIEW_DESC {
+            ViewDimension: D3D11_VPOV_DIMENSION_TEXTURE2D,
+            Anonymous: D3D11_VIDEO_PROCESSOR_OUTPUT_VIEW_DESC_0 {
+                Texture2D: D3D11_TEX2D_VPOV { MipSlice: 0 },
+            },
+        };
+        let mut output_view = None;
+        unsafe {
+            self.video_device.CreateVideoProcessorOutputView(
+                &back_buffer,
+                &enumerator,
+                &raw const output_descriptor,
+                Some(&raw mut output_view),
+            )
+        }
+        .map_err(|error| format!("unable to create processor output view: {error}"))?;
+        let output_view =
+            output_view.ok_or_else(|| "D3D11 returned no processor output view".to_owned())?;
+        self.pipeline = Some(ProcessorPipeline {
+            input_size: (input_width, input_height),
+            output_size: self.output_size,
+            enumerator,
+            processor,
+            output_view,
+            render_target,
+        });
+        Ok(())
+    }
+}
+
+fn swap_chain_descriptor(hwnd: HWND, width: u32, height: u32) -> DXGI_SWAP_CHAIN_DESC {
+    DXGI_SWAP_CHAIN_DESC {
+        BufferDesc: DXGI_MODE_DESC {
+            Width: width,
+            Height: height,
+            RefreshRate: DXGI_RATIONAL {
+                Numerator: 0,
+                Denominator: 1,
+            },
+            Format: DXGI_FORMAT_B8G8R8A8_UNORM,
+            ..Default::default()
+        },
+        SampleDesc: DXGI_SAMPLE_DESC {
+            Count: 1,
+            Quality: 0,
+        },
+        BufferUsage: DXGI_USAGE_RENDER_TARGET_OUTPUT,
+        BufferCount: 2,
+        OutputWindow: hwnd,
+        Windowed: true.into(),
+        SwapEffect: DXGI_SWAP_EFFECT_DISCARD,
+        Flags: 0,
+    }
+}
+
+fn fit_initial_window(width: u32, height: u32) -> PhysicalSize<u32> {
+    let scale = (1_600_f64 / f64::from(width))
+        .min(900_f64 / f64::from(height))
+        .min(1.0);
+    PhysicalSize::new(
+        (f64::from(width) * scale).round().max(320.0) as u32,
+        (f64::from(height) * scale).round().max(200.0) as u32,
+    )
+}
+
+fn aspect_fit_rect(
+    source_width: u32,
+    source_height: u32,
+    target_width: u32,
+    target_height: u32,
+) -> Result<RECT, String> {
+    if source_width == 0 || source_height == 0 || target_width == 0 || target_height == 0 {
+        return Err("video and window dimensions must be non-zero".to_owned());
+    }
+    let source_aspect = f64::from(source_width) / f64::from(source_height);
+    let target_aspect = f64::from(target_width) / f64::from(target_height);
+    let (width, height) = if source_aspect > target_aspect {
+        (
+            target_width,
+            (f64::from(target_width) / source_aspect).round() as u32,
+        )
+    } else {
+        (
+            (f64::from(target_height) * source_aspect).round() as u32,
+            target_height,
+        )
+    };
+    let left = (target_width - width) / 2;
+    let top = (target_height - height) / 2;
+    Ok(RECT {
+        left: i32::try_from(left).map_err(|_| "video destination left overflow".to_owned())?,
+        top: i32::try_from(top).map_err(|_| "video destination top overflow".to_owned())?,
+        right: i32::try_from(left + width)
+            .map_err(|_| "video destination right overflow".to_owned())?,
+        bottom: i32::try_from(top + height)
+            .map_err(|_| "video destination bottom overflow".to_owned())?,
+    })
+}
+
+fn frame_time_offset(first_timestamp: i64, timestamp: i64) -> Result<Duration, String> {
+    let delta_100ns = timestamp.saturating_sub(first_timestamp).max(0);
+    let nanoseconds = u64::try_from(delta_100ns)
+        .ok()
+        .and_then(|value| value.checked_mul(100))
+        .ok_or_else(|| "video timestamp overflow".to_owned())?;
+    let offset = Duration::from_nanos(nanoseconds);
+    if offset > MAX_PLAYBACK_TIMELINE {
+        return Err("video timestamp exceeds the 24-hour playback limit".to_owned());
+    }
+    Ok(offset)
+}
+
+fn media_type_frame_size(
+    media_type: &windows::Win32::Media::MediaFoundation::IMFMediaType,
+) -> Result<(u32, u32), String> {
+    let frame_size_key = MF_MT_FRAME_SIZE;
+    let packed = unsafe { media_type.GetUINT64(&frame_size_key) }
+        .map_err(|error| format!("NV12 media type has no visible frame size: {error}"))?;
+    let width =
+        u32::try_from(packed >> 32).map_err(|_| "visible video width is invalid".to_owned())?;
+    let height = u32::try_from(packed & u64::from(u32::MAX))
+        .map_err(|_| "visible video height is invalid".to_owned())?;
+    if width == 0 || height == 0 {
+        return Err("visible video frame size must be non-zero".to_owned());
+    }
+    Ok((width, height))
+}
+
+fn media_type_color_space(
+    media_type: &windows::Win32::Media::MediaFoundation::IMFMediaType,
+    visible_height: u32,
+) -> D3D11_VIDEO_PROCESSOR_COLOR_SPACE {
+    let bt709_value = u32::try_from(MFVideoTransferMatrix_BT709.0).unwrap_or(1);
+    let full_range_value = u32::try_from(MFNominalRange_0_255.0).unwrap_or(1);
+    let yuv_matrix_key = MF_MT_YUV_MATRIX;
+    let bt709 = unsafe { media_type.GetUINT32(&yuv_matrix_key) }
+        .map_or(visible_height >= 720, |value| value == bt709_value);
+    let nominal_range_key = MF_MT_VIDEO_NOMINAL_RANGE;
+    let full_range = unsafe { media_type.GetUINT32(&nominal_range_key) }
+        .is_ok_and(|value| value == full_range_value);
+
+    // D3D11_VIDEO_PROCESSOR_COLOR_SPACE packs YCbCr_Matrix at bit 2 and
+    // Nominal_Range at bits 4..5 (1 = limited, 2 = full).
+    D3D11_VIDEO_PROCESSOR_COLOR_SPACE {
+        _bitfield: (u32::from(bt709) << 2) | ((if full_range { 2 } else { 1 }) << 4),
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn aspect_fit_preserves_video_and_centers_black_bars() {
+        assert_eq!(
+            aspect_fit_rect(1_920, 1_080, 1_000, 1_000).unwrap(),
+            RECT {
+                left: 0,
+                top: 218,
+                right: 1_000,
+                bottom: 781,
+            }
+        );
+        assert_eq!(
+            aspect_fit_rect(1_000, 1_000, 1_920, 1_080).unwrap(),
+            RECT {
+                left: 420,
+                top: 0,
+                right: 1_500,
+                bottom: 1_080,
+            }
+        );
+    }
+
+    #[test]
+    fn playback_timestamps_are_relative_bounded_and_nonnegative() {
+        assert_eq!(frame_time_offset(1_000, 900).unwrap(), Duration::ZERO);
+        assert_eq!(
+            frame_time_offset(1_000, 11_000).unwrap(),
+            Duration::from_millis(1)
+        );
+        assert!(frame_time_offset(0, 24 * 60 * 60 * 10_000_000 + 1).is_err());
+    }
+}
diff --git a/client/helpers/rdp-session/Cargo.toml b/client/helpers/rdp-session/Cargo.toml
new file mode 100644
index 0000000..b197756
--- /dev/null
+++ b/client/helpers/rdp-session/Cargo.toml
@@ -0,0 +1,19 @@
+[package]
+name = "remotedesk-rdp-session"
+version.workspace = true
+edition.workspace = true
+license.workspace = true
+rust-version.workspace = true
+
+[dependencies]
+ironrdp-connector = "0.10.0"
+ironrdp-pdu = "0.9.0"
+ironrdp-tokio = "0.10.0"
+ironrdp-tls = { version = "0.2.2", features = ["rustls"] }
+remotedesk-client-core = { path = "../../crates/client-core" }
+serde = { version = "1.0", features = ["derive"] }
+serde_json = "1.0"
+tokio = { version = "1.0", features = ["io-util", "macros", "net", "rt-multi-thread", "time"] }
+
+[lints]
+workspace = true
diff --git a/client/helpers/rdp-session/README.md b/client/helpers/rdp-session/README.md
new file mode 100644
index 0000000..704b71d
--- /dev/null
+++ b/client/helpers/rdp-session/README.md
@@ -0,0 +1,28 @@
+# RemoteDesk RDP Session Spike
+
+This standalone helper verifies that a target is reachable through DNS and TCP and that IronRDP can decode its X.224/RDP security negotiation response.
+
+It intentionally stops in IronRDP's `EnhancedSecurityUpgrade` state. It does not start TLS, CredSSP/NLA, authenticate, create a desktop session, receive graphics, or render frames. A successful result proves an NLA-capable RDP endpoint responded to IronRDP; it does not prove that any account can log in.
+
+The process accepts one bounded JSON object on stdin:
+
+```json
+{"target":"rdp-host.example:3389","timeout_ms":3000}
+```
+
+`target` and `timeout_ms` are the only accepted fields. In particular, `username` and `password` are rejected. The target never appears in JSON output, `Debug`, error messages, or command-line arguments.
+
+Run from the repository root:
+
+```powershell
+'{"target":"127.0.0.1:3389","timeout_ms":3000}' |
+  cargo run --manifest-path client/helpers/rdp-session/Cargo.toml --quiet
+```
+
+Example success shape:
+
+```json
+{"ok":true,"stage":"rdp_negotiation","security_protocol":"hybrid_extended","tcp_latency_ms":1,"total_latency_ms":8}
+```
+
+The helper is part of the root Cargo workspace and is packaged beside the control service.
diff --git a/client/helpers/rdp-session/src/lib.rs b/client/helpers/rdp-session/src/lib.rs
new file mode 100644
index 0000000..5f72f92
--- /dev/null
+++ b/client/helpers/rdp-session/src/lib.rs
@@ -0,0 +1,466 @@
+//! Minimal direct RDP reachability spike.
+//!
+//! This crate deliberately stops after `IronRDP` validates the server's X.224
+//! connection confirm, RDP security negotiation response, and TLS certificate
+//! exchange. It does not perform CredSSP/NLA, login, licensing, graphics, or input.
+
+use ironrdp_connector::{ClientConnector, ClientConnectorState, Config, Credentials, DesktopSize};
+use ironrdp_pdu::gcc::KeyboardType;
+use ironrdp_pdu::nego::SecurityProtocol;
+use ironrdp_pdu::rdp::capability_sets::MajorPlatformType;
+use ironrdp_pdu::rdp::client_info::{PerformanceFlags, TimezoneInfo};
+use ironrdp_tokio::TokioFramed;
+use remotedesk_client_core::RdpEndpoint;
+use serde::{Deserialize, Serialize};
+use std::fmt;
+use std::io::{self, Read};
+use std::net::SocketAddr;
+use std::time::Duration;
+use tokio::net::{TcpStream, lookup_host};
+use tokio::time::{Instant, timeout_at};
+
+pub const DEFAULT_TIMEOUT_MS: u64 = 3_000;
+pub const MIN_TIMEOUT_MS: u64 = 250;
+pub const MAX_TIMEOUT_MS: u64 = 10_000;
+pub const MAX_STDIN_BYTES: u64 = 8 * 1_024;
+const MAX_RESOLVED_ADDRESSES: usize = 16;
+
+fn default_timeout_ms() -> u64 {
+    DEFAULT_TIMEOUT_MS
+}
+
+/// Secret-free request accepted from stdin.
+///
+/// Unknown JSON fields are rejected, so this process cannot accidentally
+/// accept a password intended for a future full-session helper.
+#[derive(Clone, Deserialize, PartialEq, Eq)]
+#[serde(deny_unknown_fields)]
+pub struct ProbeRequest {
+    pub target: String,
+    #[serde(default = "default_timeout_ms")]
+    pub timeout_ms: u64,
+}
+
+impl fmt::Debug for ProbeRequest {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        formatter
+            .debug_struct("ProbeRequest")
+            .field("target", &"[redacted]")
+            .field("timeout_ms", &self.timeout_ms)
+            .finish()
+    }
+}
+
+#[derive(Debug, Clone, Copy, Serialize, PartialEq, Eq)]
+#[serde(rename_all = "snake_case")]
+pub enum ProbeStage {
+    Input,
+    Dns,
+    Tcp,
+    RdpNegotiation,
+    Tls,
+}
+
+#[derive(Debug, Clone, Copy, Serialize, PartialEq, Eq)]
+#[serde(rename_all = "snake_case")]
+pub enum NegotiatedSecurityProtocol {
+    Hybrid,
+    HybridExtended,
+}
+
+#[derive(Debug, Clone, Copy, Serialize, PartialEq, Eq)]
+#[serde(rename_all = "snake_case")]
+pub enum ProbeErrorCode {
+    InvalidRequest,
+    RequestTooLarge,
+    InvalidTarget,
+    TimeoutOutOfRange,
+    DnsFailed,
+    DnsReturnedNoAddresses,
+    TcpConnectFailed,
+    Timeout,
+    LocalAddressUnavailable,
+    RdpNegotiationFailed,
+    UnexpectedIronRdpState,
+    TlsHandshakeFailed,
+    CertificateEncodingFailed,
+}
+
+/// Machine-readable result that never includes the target or library errors.
+#[derive(Debug, Clone, Serialize, PartialEq, Eq)]
+pub struct ProbeResponse {
+    pub ok: bool,
+    pub stage: ProbeStage,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub security_protocol: Option<NegotiatedSecurityProtocol>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub tcp_latency_ms: Option<u64>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub total_latency_ms: Option<u64>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub certificate_sha256: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub error_code: Option<ProbeErrorCode>,
+}
+
+impl ProbeResponse {
+    #[must_use]
+    pub const fn failure(stage: ProbeStage, error_code: ProbeErrorCode) -> Self {
+        Self {
+            ok: false,
+            stage,
+            security_protocol: None,
+            tcp_latency_ms: None,
+            total_latency_ms: None,
+            certificate_sha256: None,
+            error_code: Some(error_code),
+        }
+    }
+}
+
+/// Reads exactly one bounded JSON request.
+///
+/// # Errors
+///
+/// Returns a stable, input-free error response when stdin is oversized or is
+/// not a valid [`ProbeRequest`].
+pub fn read_request(reader: impl Read) -> Result<ProbeRequest, ProbeResponse> {
+    let mut bytes = Vec::new();
+    reader
+        .take(MAX_STDIN_BYTES + 1)
+        .read_to_end(&mut bytes)
+        .map_err(|_| ProbeResponse::failure(ProbeStage::Input, ProbeErrorCode::InvalidRequest))?;
+    if u64::try_from(bytes.len()).unwrap_or(u64::MAX) > MAX_STDIN_BYTES {
+        return Err(ProbeResponse::failure(
+            ProbeStage::Input,
+            ProbeErrorCode::RequestTooLarge,
+        ));
+    }
+    serde_json::from_slice(&bytes)
+        .map_err(|_| ProbeResponse::failure(ProbeStage::Input, ProbeErrorCode::InvalidRequest))
+}
+
+/// Performs DNS, TCP, `IronRDP` protocol negotiation, and a secret-free TLS handshake.
+pub async fn probe(request: ProbeRequest) -> ProbeResponse {
+    if !(MIN_TIMEOUT_MS..=MAX_TIMEOUT_MS).contains(&request.timeout_ms) {
+        return ProbeResponse::failure(ProbeStage::Input, ProbeErrorCode::TimeoutOutOfRange);
+    }
+    let Ok(endpoint) = RdpEndpoint::parse(&request.target) else {
+        return ProbeResponse::failure(ProbeStage::Input, ProbeErrorCode::InvalidTarget);
+    };
+
+    let started = Instant::now();
+    let deadline = started + Duration::from_millis(request.timeout_ms);
+    let addresses = match resolve(&endpoint, deadline).await {
+        Ok(addresses) => addresses,
+        Err(response) => return response,
+    };
+    let tcp_started = Instant::now();
+    let stream = match timeout_at(deadline, TcpStream::connect(addresses.as_slice())).await {
+        Ok(Ok(stream)) => stream,
+        Ok(Err(_)) => {
+            return ProbeResponse::failure(ProbeStage::Tcp, ProbeErrorCode::TcpConnectFailed);
+        }
+        Err(_) => return ProbeResponse::failure(ProbeStage::Tcp, ProbeErrorCode::Timeout),
+    };
+    let tcp_latency_ms = elapsed_ms(tcp_started);
+    let Ok(client_addr) = stream.local_addr() else {
+        return ProbeResponse::failure(ProbeStage::Tcp, ProbeErrorCode::LocalAddressUnavailable);
+    };
+
+    let mut framed = TokioFramed::new(stream);
+    let mut connector = ClientConnector::new(pre_nla_config(), client_addr);
+    match timeout_at(
+        deadline,
+        ironrdp_tokio::connect_begin(&mut framed, &mut connector),
+    )
+    .await
+    {
+        Ok(Ok(_)) => {}
+        Ok(Err(_)) => {
+            return ProbeResponse::failure(
+                ProbeStage::RdpNegotiation,
+                ProbeErrorCode::RdpNegotiationFailed,
+            );
+        }
+        Err(_) => {
+            return ProbeResponse::failure(ProbeStage::RdpNegotiation, ProbeErrorCode::Timeout);
+        }
+    }
+
+    let Some(security_protocol) = negotiated_security_protocol(&connector) else {
+        return ProbeResponse::failure(
+            ProbeStage::RdpNegotiation,
+            ProbeErrorCode::UnexpectedIronRdpState,
+        );
+    };
+    let (stream, _) = framed.into_inner();
+    let certificate =
+        match timeout_at(deadline, ironrdp_tls::upgrade(stream, endpoint.host())).await {
+            Ok(Ok((_, certificate))) => certificate,
+            Ok(Err(_)) => {
+                return ProbeResponse::failure(ProbeStage::Tls, ProbeErrorCode::TlsHandshakeFailed);
+            }
+            Err(_) => return ProbeResponse::failure(ProbeStage::Tls, ProbeErrorCode::Timeout),
+        };
+    let Some(certificate_sha256) = ironrdp_tls::certificate_sha256(&certificate) else {
+        return ProbeResponse::failure(ProbeStage::Tls, ProbeErrorCode::CertificateEncodingFailed);
+    };
+    ProbeResponse {
+        ok: true,
+        stage: ProbeStage::Tls,
+        security_protocol: Some(security_protocol),
+        tcp_latency_ms: Some(tcp_latency_ms),
+        total_latency_ms: Some(elapsed_ms(started)),
+        certificate_sha256: Some(hex_sha256(certificate_sha256)),
+        error_code: None,
+    }
+}
+
+fn hex_sha256(value: [u8; 32]) -> String {
+    use std::fmt::Write as _;
+
+    let mut output = String::with_capacity(64);
+    for byte in value {
+        write!(output, "{byte:02x}").expect("writing to a String cannot fail");
+    }
+    output
+}
+
+async fn resolve(
+    endpoint: &RdpEndpoint,
+    deadline: Instant,
+) -> Result<Vec<SocketAddr>, ProbeResponse> {
+    let resolved = match timeout_at(deadline, lookup_host((endpoint.host(), endpoint.port()))).await
+    {
+        Ok(Ok(resolved)) => resolved,
+        Ok(Err(_)) => {
+            return Err(ProbeResponse::failure(
+                ProbeStage::Dns,
+                ProbeErrorCode::DnsFailed,
+            ));
+        }
+        Err(_) => {
+            return Err(ProbeResponse::failure(
+                ProbeStage::Dns,
+                ProbeErrorCode::Timeout,
+            ));
+        }
+    };
+    let mut addresses = Vec::new();
+    for address in resolved.take(MAX_RESOLVED_ADDRESSES) {
+        if !addresses.contains(&address) {
+            addresses.push(address);
+        }
+    }
+    if addresses.is_empty() {
+        return Err(ProbeResponse::failure(
+            ProbeStage::Dns,
+            ProbeErrorCode::DnsReturnedNoAddresses,
+        ));
+    }
+    Ok(addresses)
+}
+
+fn pre_nla_config() -> Config {
+    Config {
+        credentials: Credentials::SmartCard {
+            pin: String::new(),
+            config: None,
+        },
+        domain: None,
+        enable_tls: false,
+        enable_credssp: true,
+        keyboard_type: KeyboardType::IbmEnhanced,
+        keyboard_subtype: 0,
+        keyboard_layout: 0,
+        keyboard_functional_keys_count: 12,
+        ime_file_name: String::new(),
+        dig_product_id: String::new(),
+        desktop_size: DesktopSize {
+            width: 1_280,
+            height: 720,
+        },
+        bitmap: None,
+        client_build: 0,
+        client_name: "RemoteDeskProbe".to_owned(),
+        client_dir: String::new(),
+        platform: MajorPlatformType::WINDOWS,
+        enable_server_pointer: false,
+        request_data: None,
+        autologon: false,
+        enable_audio_playback: false,
+        compression_type: None,
+        pointer_software_rendering: false,
+        multitransport_flags: None,
+        performance_flags: PerformanceFlags::default(),
+        desktop_scale_factor: 100,
+        hardware_id: None,
+        license_cache: None,
+        timezone_info: TimezoneInfo::default(),
+        alternate_shell: String::new(),
+        work_dir: String::new(),
+    }
+}
+
+fn negotiated_security_protocol(connector: &ClientConnector) -> Option<NegotiatedSecurityProtocol> {
+    let ClientConnectorState::EnhancedSecurityUpgrade { selected_protocol } = &connector.state
+    else {
+        return None;
+    };
+    if selected_protocol.contains(SecurityProtocol::HYBRID_EX) {
+        Some(NegotiatedSecurityProtocol::HybridExtended)
+    } else if selected_protocol.contains(SecurityProtocol::HYBRID) {
+        Some(NegotiatedSecurityProtocol::Hybrid)
+    } else {
+        None
+    }
+}
+
+fn elapsed_ms(started: Instant) -> u64 {
+    u64::try_from(started.elapsed().as_millis()).unwrap_or(u64::MAX)
+}
+
+/// Writes one JSON response without logging request or library error details.
+///
+/// # Errors
+///
+/// Returns an I/O or serialization error when stdout cannot accept the result.
+pub fn write_response(writer: impl io::Write, response: &ProbeResponse) -> io::Result<()> {
+    let mut writer = io::BufWriter::new(writer);
+    serde_json::to_writer(&mut writer, response).map_err(io::Error::other)?;
+    io::Write::write_all(&mut writer, b"\n")?;
+    io::Write::flush(&mut writer)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn stdin_request_defaults_timeout_and_redacts_debug() {
+        let marker = "sensitive-rdp-host.example";
+        let input = format!(r#"{{"target":"{marker}"}}"#);
+        let request = read_request(input.as_bytes()).unwrap();
+
+        assert_eq!(request.target, marker);
+        assert_eq!(request.timeout_ms, DEFAULT_TIMEOUT_MS);
+        assert!(!format!("{request:?}").contains(marker));
+    }
+
+    #[test]
+    fn password_and_other_unknown_fields_are_rejected() {
+        for input in [
+            r#"{"target":"host","password":"secret-marker"}"#,
+            r#"{"target":"host","username":"user"}"#,
+            r#"{"target":"host","extra":true}"#,
+        ] {
+            let response = read_request(input.as_bytes()).unwrap_err();
+            assert_eq!(
+                response,
+                ProbeResponse::failure(ProbeStage::Input, ProbeErrorCode::InvalidRequest)
+            );
+            let serialized = serde_json::to_string(&response).unwrap();
+            assert!(!serialized.contains("secret-marker"));
+        }
+    }
+
+    #[test]
+    fn oversized_stdin_is_rejected_without_parsing() {
+        let input = vec![b'a'; usize::try_from(MAX_STDIN_BYTES + 1).unwrap()];
+        assert_eq!(
+            read_request(input.as_slice()),
+            Err(ProbeResponse::failure(
+                ProbeStage::Input,
+                ProbeErrorCode::RequestTooLarge
+            ))
+        );
+    }
+
+    #[test]
+    fn output_contains_no_target_or_library_error_text() {
+        let marker = "sensitive-rdp-host.example";
+        let response = ProbeResponse {
+            ok: true,
+            stage: ProbeStage::Tls,
+            security_protocol: Some(NegotiatedSecurityProtocol::HybridExtended),
+            tcp_latency_ms: Some(12),
+            total_latency_ms: Some(24),
+            certificate_sha256: Some("a".repeat(64)),
+            error_code: None,
+        };
+        let mut output = Vec::new();
+        write_response(&mut output, &response).unwrap();
+        let output = String::from_utf8(output).unwrap();
+
+        assert!(!output.contains(marker));
+        assert!(!output.to_ascii_lowercase().contains("password"));
+        assert!(output.contains("tls"));
+        assert!(output.contains("hybrid_extended"));
+        assert!(output.contains(&"a".repeat(64)));
+    }
+
+    #[test]
+    fn certificate_fingerprint_is_lowercase_fixed_width_hex() {
+        assert_eq!(hex_sha256([0xab; 32]), "ab".repeat(32));
+        assert_eq!(hex_sha256([0; 32]).len(), 64);
+    }
+
+    #[test]
+    fn pre_nla_config_contains_no_account_secret_and_requires_nla() {
+        let config = pre_nla_config();
+        assert!(!config.enable_tls);
+        assert!(config.enable_credssp);
+        assert!(config.request_data.is_none());
+        match config.credentials {
+            Credentials::SmartCard { pin, config } => {
+                assert!(pin.is_empty());
+                assert!(config.is_none());
+            }
+            Credentials::UsernamePassword { .. } => panic!("probe must not hold a password"),
+        }
+    }
+
+    #[tokio::test]
+    async fn invalid_target_and_timeout_fail_before_network_access() {
+        let invalid_target = probe(ProbeRequest {
+            target: "rdp://secret-host".into(),
+            timeout_ms: DEFAULT_TIMEOUT_MS,
+        })
+        .await;
+        assert_eq!(
+            invalid_target,
+            ProbeResponse::failure(ProbeStage::Input, ProbeErrorCode::InvalidTarget)
+        );
+
+        let invalid_timeout = probe(ProbeRequest {
+            target: "localhost".into(),
+            timeout_ms: 1,
+        })
+        .await;
+        assert_eq!(
+            invalid_timeout,
+            ProbeResponse::failure(ProbeStage::Input, ProbeErrorCode::TimeoutOutOfRange)
+        );
+    }
+
+    #[test]
+    fn protocol_mapping_accepts_only_nla_security_modes() {
+        let client_addr = "127.0.0.1:40000".parse().unwrap();
+        let mut connector = ClientConnector::new(pre_nla_config(), client_addr);
+        connector.state = ClientConnectorState::EnhancedSecurityUpgrade {
+            selected_protocol: SecurityProtocol::HYBRID,
+        };
+        assert_eq!(
+            negotiated_security_protocol(&connector),
+            Some(NegotiatedSecurityProtocol::Hybrid)
+        );
+        connector.state = ClientConnectorState::EnhancedSecurityUpgrade {
+            selected_protocol: SecurityProtocol::HYBRID_EX,
+        };
+        assert_eq!(
+            negotiated_security_protocol(&connector),
+            Some(NegotiatedSecurityProtocol::HybridExtended)
+        );
+    }
+}
diff --git a/client/helpers/rdp-session/src/main.rs b/client/helpers/rdp-session/src/main.rs
new file mode 100644
index 0000000..7e72a0a
--- /dev/null
+++ b/client/helpers/rdp-session/src/main.rs
@@ -0,0 +1,32 @@
+use remotedesk_rdp_session::{
+    ProbeErrorCode, ProbeResponse, ProbeStage, probe, read_request, write_response,
+};
+use std::io;
+use std::process::ExitCode;
+
+#[tokio::main]
+async fn main() -> ExitCode {
+    if std::env::args_os().len() != 1 {
+        let response = ProbeResponse::failure(ProbeStage::Input, ProbeErrorCode::InvalidRequest);
+        let _ = write_response(io::stdout().lock(), &response);
+        return ExitCode::FAILURE;
+    }
+
+    let request = match read_request(io::stdin().lock()) {
+        Ok(request) => request,
+        Err(response) => {
+            let _ = write_response(io::stdout().lock(), &response);
+            return ExitCode::FAILURE;
+        }
+    };
+    let response = probe(request).await;
+    let success = response.ok;
+    if write_response(io::stdout().lock(), &response).is_err() {
+        return ExitCode::FAILURE;
+    }
+    if success {
+        ExitCode::SUCCESS
+    } else {
+        ExitCode::FAILURE
+    }
+}
diff --git a/client/helpers/rdp-viewer/Cargo.toml b/client/helpers/rdp-viewer/Cargo.toml
new file mode 100644
index 0000000..e18871c
--- /dev/null
+++ b/client/helpers/rdp-viewer/Cargo.toml
@@ -0,0 +1,42 @@
+[package]
+name = "remotedesk-rdp-viewer"
+version.workspace = true
+edition.workspace = true
+license.workspace = true
+rust-version.workspace = true
+
+[dependencies]
+anyhow = "1.0"
+ironrdp = { version = "0.17.0", features = ["client", "client-all", "cliprdr", "connector", "input", "pdu", "rustls"] }
+ironrdp-viewer = { version = "0.1.0", default-features = false, features = ["rustls"] }
+ironrdp-tls = { version = "0.2.2", features = ["rustls"] }
+remotedesk-client-core = { path = "../../crates/client-core" }
+remotedesk-credential-store = { path = "../credential-store" }
+serde = { version = "1.0", features = ["derive"] }
+serde_json = "1.0"
+smallvec = "1.15"
+softbuffer = "0.4"
+tokio = { version = "1.0", features = ["macros", "rt-multi-thread", "sync", "time"] }
+tokio-rustls = { version = "0.26", default-features = false, features = ["aws_lc_rs", "tls12"] }
+tracing = "0.1"
+winit = "0.30"
+
+[target.'cfg(windows)'.dependencies]
+raw-window-handle = "0.6"
+windows = { version = "0.62.2", features = [
+    "Win32_Foundation",
+    "Win32_Graphics_Direct3D",
+    "Win32_Graphics_Direct3D11",
+    "Win32_Graphics_Dxgi",
+    "Win32_Graphics_Dxgi_Common",
+    "Win32_Graphics_Gdi",
+    "Win32_UI_WindowsAndMessaging",
+    "Win32_UI_Input_KeyboardAndMouse",
+] }
+
+[lints.rust]
+unsafe_code = "allow"
+
+[lints.clippy]
+all = "warn"
+pedantic = "warn"
diff --git a/client/helpers/rdp-viewer/src/app.rs b/client/helpers/rdp-viewer/src/app.rs
new file mode 100644
index 0000000..f403da0
--- /dev/null
+++ b/client/helpers/rdp-viewer/src/app.rs
@@ -0,0 +1,1402 @@
+// Adapted from ironrdp-viewer 0.1.0's app module (MIT OR Apache-2.0).
+
+use core::time::Duration;
+use std::collections::HashSet;
+use std::sync::{Arc, Mutex, PoisonError};
+use std::time::Instant;
+
+use ironrdp::client::rdp::{DirtyRegion, RdpInputEvent, RdpOutputEvent};
+use ironrdp::pdu::input::fast_path::FastPathInputEvent;
+use smallvec::SmallVec;
+use tokio::sync::mpsc;
+use tracing::{debug, error, trace, warn};
+use winit::application::ApplicationHandler;
+use winit::dpi::{PhysicalPosition, PhysicalSize};
+use winit::event::{self, ElementState, WindowEvent};
+use winit::event_loop::{ActiveEventLoop, ControlFlow, EventLoop};
+use winit::keyboard::{KeyCode, ModifiersState, PhysicalKey};
+use winit::platform::scancode::PhysicalKeyExtScancode as _;
+use winit::window::{CursorIcon, CustomCursor, Fullscreen, WindowAttributes};
+
+use crate::diagnostics::SessionDiagnostics;
+use crate::renderer::{RendererContext, WindowSurface};
+
+const MIN_DESKTOP_DIMENSION: u32 = 200;
+const MAX_DESKTOP_DIMENSION: u32 = 8_192;
+const WHEEL_UNITS_PER_LINE: f64 = 120.0;
+const RESIZE_CONFIRM_TIMEOUT: Duration = Duration::from_secs(5);
+const RESIZE_RECONNECT_TIMEOUT: Duration = Duration::from_secs(60);
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+enum ResizePhase {
+    Pending,
+    ReconnectRequired,
+    Reconnecting,
+    Cancelled,
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+struct ResizeRequest {
+    generation: u64,
+    width: u16,
+    height: u16,
+    phase: ResizePhase,
+    deadline: Option<Instant>,
+}
+
+#[derive(Debug, Default)]
+struct ResizeTracker {
+    generation: u64,
+    active: Option<ResizeRequest>,
+}
+
+impl ResizeTracker {
+    fn begin(&mut self, width: u16, height: u16, now: Instant) -> ResizeRequest {
+        self.generation = self.generation.checked_add(1).unwrap_or(1);
+        let request = ResizeRequest {
+            generation: self.generation,
+            width,
+            height,
+            phase: ResizePhase::Pending,
+            deadline: Some(now + RESIZE_CONFIRM_TIMEOUT),
+        };
+        self.active = Some(request);
+        request
+    }
+
+    fn submitted(
+        &mut self,
+        generation: u64,
+        width: u16,
+        height: u16,
+        now: Instant,
+    ) -> Option<ResizeRequest> {
+        let request = self.active.as_mut()?;
+        if request.generation != generation || request.phase != ResizePhase::Pending {
+            return None;
+        }
+        request.width = width;
+        request.height = height;
+        request.deadline = Some(now + RESIZE_CONFIRM_TIMEOUT);
+        Some(*request)
+    }
+
+    fn require_reconnect(
+        &mut self,
+        generation: u64,
+        width: u16,
+        height: u16,
+    ) -> Option<ResizeRequest> {
+        let request = self.active.as_mut()?;
+        if request.generation != generation || request.phase != ResizePhase::Pending {
+            return None;
+        }
+        request.width = width;
+        request.height = height;
+        request.phase = ResizePhase::ReconnectRequired;
+        request.deadline = None;
+        Some(*request)
+    }
+
+    fn timed_out(&mut self, now: Instant) -> Option<ResizeRequest> {
+        let request = self.active?;
+        if request.phase != ResizePhase::Pending || request.deadline.is_none_or(|value| value > now)
+        {
+            return None;
+        }
+        self.require_reconnect(request.generation, request.width, request.height)
+    }
+
+    fn reconnecting(&mut self, generation: u64, now: Instant) -> Option<ResizeRequest> {
+        let request = self.active.as_mut()?;
+        if request.generation != generation || request.phase != ResizePhase::ReconnectRequired {
+            return None;
+        }
+        request.phase = ResizePhase::Reconnecting;
+        request.deadline = Some(now + RESIZE_RECONNECT_TIMEOUT);
+        Some(*request)
+    }
+
+    fn reconnect_timed_out(&mut self, now: Instant) -> Option<ResizeRequest> {
+        let request = self.active.as_mut()?;
+        if request.phase != ResizePhase::Reconnecting
+            || request.deadline.is_none_or(|deadline| deadline > now)
+        {
+            return None;
+        }
+        request.deadline = None;
+        Some(*request)
+    }
+
+    fn confirmed_by_image(&mut self, width: u16, height: u16) -> Option<ResizeRequest> {
+        let request = self.active?;
+        let size_matches = (request.width, request.height) == (width, height);
+        let reconnect_accepts_server_size = request.phase == ResizePhase::Reconnecting;
+        if !matches!(
+            request.phase,
+            ResizePhase::Pending
+                | ResizePhase::ReconnectRequired
+                | ResizePhase::Reconnecting
+                | ResizePhase::Cancelled
+        ) || (!size_matches && !reconnect_accepts_server_size)
+        {
+            return None;
+        }
+        self.active = None;
+        Some(request)
+    }
+
+    fn cancel(&mut self, generation: u64) -> Option<ResizeRequest> {
+        let request = self.active.as_mut()?;
+        if request.generation != generation || request.phase != ResizePhase::ReconnectRequired {
+            return None;
+        }
+        request.phase = ResizePhase::Cancelled;
+        Some(*request)
+    }
+
+    fn deadline(&self) -> Option<Instant> {
+        self.active.and_then(|request| request.deadline)
+    }
+}
+
+#[derive(Debug)]
+pub enum ViewerEvent {
+    Rdp(RdpOutputEvent),
+    #[cfg(windows)]
+    GlobalKeyboard {
+        scancode: ironrdp::input::Scancode,
+        pressed: bool,
+    },
+    ReconnectScheduled {
+        attempt: u8,
+        max_attempts: u8,
+        delay_seconds: u64,
+    },
+    ReconnectExhausted,
+    ResizeDecision {
+        generation: u64,
+        accepted: bool,
+    },
+}
+
+#[derive(Debug, Clone, Copy)]
+pub struct MultiMonitorPlacement {
+    pub origin: PhysicalPosition<i32>,
+    pub size: PhysicalSize<u32>,
+}
+
+#[derive(Clone)]
+pub struct SessionInput {
+    sender: Arc<Mutex<mpsc::UnboundedSender<RdpInputEvent>>>,
+}
+
+impl SessionInput {
+    pub fn new(sender: mpsc::UnboundedSender<RdpInputEvent>) -> Self {
+        Self {
+            sender: Arc::new(Mutex::new(sender)),
+        }
+    }
+
+    pub fn replace(&self, sender: mpsc::UnboundedSender<RdpInputEvent>) {
+        *self.sender.lock().unwrap_or_else(PoisonError::into_inner) = sender;
+    }
+
+    pub fn send_close(&self) {
+        self.send(RdpInputEvent::Close);
+    }
+
+    fn send(&self, event: RdpInputEvent) {
+        let _ = self
+            .sender
+            .lock()
+            .unwrap_or_else(PoisonError::into_inner)
+            .send(event);
+    }
+}
+
+#[derive(Default)]
+struct InputBinding {
+    database: ironrdp::input::Database,
+    focused: bool,
+}
+
+impl InputBinding {
+    fn set_focused(&mut self, focused: bool) -> SmallVec<[FastPathInputEvent; 2]> {
+        self.focused = focused;
+        if focused {
+            SmallVec::new()
+        } else {
+            self.database.release_all()
+        }
+    }
+
+    fn apply(
+        &mut self,
+        operations: impl IntoIterator<Item = ironrdp::input::Operation>,
+    ) -> SmallVec<[FastPathInputEvent; 2]> {
+        if self.focused {
+            self.database.apply(operations)
+        } else {
+            SmallVec::new()
+        }
+    }
+
+    fn synchronize_keys(
+        &mut self,
+        states: impl IntoIterator<Item = (bool, ironrdp::input::Scancode)>,
+    ) -> SmallVec<[FastPathInputEvent; 2]> {
+        if !self.focused {
+            return SmallVec::new();
+        }
+        let operations = states
+            .into_iter()
+            .filter_map(|(pressed, scancode)| {
+                (pressed != self.database.is_key_pressed(scancode)).then_some(if pressed {
+                    ironrdp::input::Operation::KeyPressed(scancode)
+                } else {
+                    ironrdp::input::Operation::KeyReleased(scancode)
+                })
+            })
+            .collect::<SmallVec<[ironrdp::input::Operation; 4]>>();
+        self.database.apply(operations)
+    }
+
+    fn release_all(&mut self) -> SmallVec<[FastPathInputEvent; 2]> {
+        self.database.release_all()
+    }
+}
+
+fn remote_pointer_position(
+    position: PhysicalPosition<f64>,
+    window_size: PhysicalSize<u32>,
+    desktop_size: (u16, u16),
+) -> Option<ironrdp::input::MousePosition> {
+    Some(ironrdp::input::MousePosition {
+        x: scale_pointer_axis(position.x, window_size.width, desktop_size.0)?,
+        y: scale_pointer_axis(position.y, window_size.height, desktop_size.1)?,
+    })
+}
+
+fn scale_pointer_axis(value: f64, local_extent: u32, remote_extent: u16) -> Option<u16> {
+    if !value.is_finite() || local_extent == 0 || remote_extent == 0 {
+        return None;
+    }
+    if local_extent == 1 || remote_extent == 1 {
+        return Some(0);
+    }
+    let local_max = f64::from(local_extent - 1);
+    let remote_max = f64::from(remote_extent - 1);
+    #[expect(
+        clippy::cast_possible_truncation,
+        clippy::cast_sign_loss,
+        reason = "the finite coordinate is rounded and clamped to the u16 desktop extent"
+    )]
+    let scaled = (value.clamp(0.0, local_max) / local_max * remote_max).round() as u16;
+    Some(scaled)
+}
+
+fn local_pointer_position(
+    position: ironrdp::input::MousePosition,
+    window_size: PhysicalSize<u32>,
+    desktop_size: (u16, u16),
+) -> Option<PhysicalPosition<f64>> {
+    Some(PhysicalPosition::new(
+        scale_remote_axis(position.x, desktop_size.0, window_size.width)?,
+        scale_remote_axis(position.y, desktop_size.1, window_size.height)?,
+    ))
+}
+
+fn scale_remote_axis(value: u16, remote_extent: u16, local_extent: u32) -> Option<f64> {
+    if local_extent == 0 || remote_extent == 0 {
+        return None;
+    }
+    if local_extent == 1 || remote_extent == 1 {
+        return Some(0.0);
+    }
+    let remote_max = f64::from(remote_extent - 1);
+    let local_max = f64::from(local_extent - 1);
+    Some(f64::from(value.min(remote_extent - 1)) / remote_max * local_max)
+}
+
+fn wheel_rotations(
+    delta: event::MouseScrollDelta,
+) -> SmallVec<[ironrdp::input::WheelRotations; 2]> {
+    let (horizontal, vertical, multiplier) = match delta {
+        event::MouseScrollDelta::LineDelta(x, y) => {
+            (f64::from(x), f64::from(y), WHEEL_UNITS_PER_LINE)
+        }
+        event::MouseScrollDelta::PixelDelta(delta) => (delta.x, delta.y, 1.0),
+    };
+    let mut rotations = SmallVec::new();
+    if let Some(rotation_units) = wheel_units(horizontal, multiplier) {
+        rotations.push(ironrdp::input::WheelRotations {
+            is_vertical: false,
+            rotation_units,
+        });
+    }
+    if let Some(rotation_units) = wheel_units(vertical, multiplier) {
+        rotations.push(ironrdp::input::WheelRotations {
+            is_vertical: true,
+            rotation_units,
+        });
+    }
+    rotations
+}
+
+fn wheel_units(value: f64, multiplier: f64) -> Option<i16> {
+    let scaled = value * multiplier;
+    if !scaled.is_finite() || scaled.abs() <= 0.001 {
+        return None;
+    }
+    #[expect(
+        clippy::cast_possible_truncation,
+        reason = "the finite wheel delta is rounded and clamped to the RDP i16 field"
+    )]
+    let units = scaled
+        .round()
+        .clamp(f64::from(i16::MIN), f64::from(i16::MAX)) as i16;
+    Some(units)
+}
+
+fn remote_mouse_button(button: event::MouseButton) -> Option<ironrdp::input::MouseButton> {
+    match button {
+        event::MouseButton::Left => Some(ironrdp::input::MouseButton::Left),
+        event::MouseButton::Right => Some(ironrdp::input::MouseButton::Right),
+        event::MouseButton::Middle => Some(ironrdp::input::MouseButton::Middle),
+        event::MouseButton::Back => Some(ironrdp::input::MouseButton::X1),
+        event::MouseButton::Forward => Some(ironrdp::input::MouseButton::X2),
+        event::MouseButton::Other(value) => ironrdp::input::MouseButton::from_native_button(value),
+    }
+}
+
+fn union_dirty_regions(left: DirtyRegion, right: DirtyRegion) -> DirtyRegion {
+    DirtyRegion {
+        left: left.left.min(right.left),
+        top: left.top.min(right.top),
+        right: left.right.max(right.right),
+        bottom: left.bottom.max(right.bottom),
+    }
+}
+
+fn apply_image_patch(
+    framebuffer: &mut Vec<u32>,
+    framebuffer_size: &mut (u16, u16),
+    patch: &[u32],
+    width: u16,
+    height: u16,
+    region: DirtyRegion,
+) -> anyhow::Result<()> {
+    if width == 0
+        || height == 0
+        || region.left > region.right
+        || region.top > region.bottom
+        || region.right >= width
+        || region.bottom >= height
+    {
+        anyhow::bail!("RDP image patch region is outside the framebuffer");
+    }
+    let region_width = usize::from(region.right - region.left + 1);
+    let region_height = usize::from(region.bottom - region.top + 1);
+    let expected_patch_len = region_width
+        .checked_mul(region_height)
+        .ok_or_else(|| anyhow::anyhow!("RDP image patch dimensions overflow"))?;
+    if patch.len() != expected_patch_len {
+        anyhow::bail!("RDP image patch length does not match its region");
+    }
+    let frame_width = usize::from(width);
+    let frame_len = frame_width
+        .checked_mul(usize::from(height))
+        .ok_or_else(|| anyhow::anyhow!("RDP framebuffer dimensions overflow"))?;
+    if *framebuffer_size != (width, height) {
+        framebuffer.clear();
+        framebuffer.resize(frame_len, 0);
+        *framebuffer_size = (width, height);
+    } else if framebuffer.len() != frame_len {
+        anyhow::bail!("RDP framebuffer length does not match its dimensions");
+    }
+    for row in 0..region_height {
+        let source_start = row * region_width;
+        let destination_start =
+            (usize::from(region.top) + row) * frame_width + usize::from(region.left);
+        framebuffer[destination_start..destination_start + region_width]
+            .copy_from_slice(&patch[source_start..source_start + region_width]);
+    }
+    Ok(())
+}
+
+pub struct ViewerApp {
+    session_input: SessionInput,
+    event_proxy: winit::event_loop::EventLoopProxy<ViewerEvent>,
+    context: RendererContext,
+    initial_window_size: PhysicalSize<u32>,
+    multi_monitor: Option<MultiMonitorPlacement>,
+    fullscreen: bool,
+    modifiers: ModifiersState,
+    local_shortcut_keys: HashSet<PhysicalKey>,
+    control_down: bool,
+    alt_down: bool,
+    window: Option<WindowSurface>,
+    buffer: Vec<u32>,
+    buffer_size: (u16, u16),
+    pending_dirty_region: Option<DirtyRegion>,
+    input_binding: InputBinding,
+    last_size: Option<PhysicalSize<u32>>,
+    resize_timeout: Option<Instant>,
+    resize_tracker: ResizeTracker,
+    pending_frame_started: Option<Instant>,
+    diagnostics: Option<SessionDiagnostics>,
+}
+
+impl ViewerApp {
+    pub fn new(
+        event_loop: &EventLoop<ViewerEvent>,
+        session_input: SessionInput,
+        event_proxy: winit::event_loop::EventLoopProxy<ViewerEvent>,
+        initial_window_size: PhysicalSize<u32>,
+        initial_fullscreen: bool,
+        multi_monitor: Option<MultiMonitorPlacement>,
+        diagnostics: Option<SessionDiagnostics>,
+    ) -> anyhow::Result<Self> {
+        let context = RendererContext::new(event_loop)?;
+        Ok(Self {
+            session_input,
+            event_proxy,
+            context,
+            initial_window_size,
+            multi_monitor,
+            fullscreen: initial_fullscreen,
+            modifiers: ModifiersState::empty(),
+            local_shortcut_keys: HashSet::new(),
+            control_down: false,
+            alt_down: false,
+            window: None,
+            buffer: Vec::new(),
+            buffer_size: (0, 0),
+            pending_dirty_region: None,
+            input_binding: InputBinding::default(),
+            last_size: None,
+            resize_timeout: None,
+            resize_tracker: ResizeTracker::default(),
+            pending_frame_started: None,
+            diagnostics,
+        })
+    }
+
+    fn send_resize_event(&mut self) {
+        if self.multi_monitor.is_some() {
+            return;
+        }
+        let Some(size) = self.last_size.take() else {
+            return;
+        };
+        let Some(surface) = self.window.as_mut() else {
+            return;
+        };
+        let window = &surface.window;
+        if size.width < MIN_DESKTOP_DIMENSION || size.height < MIN_DESKTOP_DIMENSION {
+            return;
+        }
+        #[expect(
+            clippy::cast_possible_truncation,
+            clippy::cast_sign_loss,
+            reason = "the positive window scale is bounded before conversion"
+        )]
+        let scale_factor = (window.scale_factor() * 100.0).round() as u32;
+        let width = u16::try_from(size.width.min(MAX_DESKTOP_DIMENSION))
+            .expect("bounded desktop width fits u16");
+        let height = u16::try_from(size.height.min(MAX_DESKTOP_DIMENSION))
+            .expect("bounded desktop height fits u16");
+        if self.buffer_size == (width, height) {
+            return;
+        }
+        let request = self.resize_tracker.begin(width, height, Instant::now());
+        if let Some(diagnostics) = self.diagnostics.as_mut() {
+            diagnostics.resize_pending(request.generation, request.width, request.height);
+        }
+        self.session_input.send(RdpInputEvent::Resize {
+            generation: request.generation,
+            width,
+            height,
+            scale_factor,
+            physical_size: None,
+        });
+    }
+
+    fn draw(&mut self) {
+        if self.buffer.is_empty() {
+            return;
+        }
+        let Some(surface) = self.window.as_mut() else {
+            return;
+        };
+        let started = self
+            .pending_frame_started
+            .take()
+            .unwrap_or_else(Instant::now);
+        let present_stats = surface
+            .present(
+                self.buffer.as_slice(),
+                self.buffer_size.0,
+                self.buffer_size.1,
+                self.pending_dirty_region.take(),
+            )
+            .expect("frame presentation");
+        if let Some(diagnostics) = self.diagnostics.as_mut() {
+            diagnostics.presented(started.elapsed().as_secs_f64() * 1_000.0);
+            diagnostics.frame_upload(present_stats.upload_mode, present_stats.uploaded_pixels);
+        }
+    }
+
+    fn release_remote_input(&mut self) {
+        let events = self.input_binding.release_all();
+        send_fast_path_events(&self.session_input, events);
+        self.modifiers = ModifiersState::empty();
+    }
+
+    fn set_input_focus(&mut self, focused: bool) {
+        let events = self.input_binding.set_focused(focused);
+        send_fast_path_events(&self.session_input, events);
+        if !focused {
+            self.modifiers = ModifiersState::empty();
+            self.local_shortcut_keys.clear();
+            self.control_down = false;
+            self.alt_down = false;
+        }
+    }
+
+    fn exit_fullscreen(&mut self) {
+        let Some(surface) = self.window.as_ref() else {
+            return;
+        };
+        let window = &surface.window;
+        window.set_fullscreen(None);
+        if self.multi_monitor.is_some() {
+            window.set_decorations(true);
+            let _ = window.request_inner_size(PhysicalSize::new(
+                self.initial_window_size.width.min(1_600),
+                self.initial_window_size.height.min(900),
+            ));
+        }
+        self.fullscreen = false;
+    }
+
+    fn enter_fullscreen(&mut self) {
+        let Some(surface) = self.window.as_ref() else {
+            return;
+        };
+        let window = &surface.window;
+        if let Some(placement) = self.multi_monitor {
+            window.set_fullscreen(None);
+            window.set_decorations(false);
+            window.set_outer_position(placement.origin);
+            let _ = window.request_inner_size(placement.size);
+        } else {
+            window.set_fullscreen(Some(Fullscreen::Borderless(window.current_monitor())));
+        }
+        self.fullscreen = true;
+    }
+
+    fn handle_local_key(&mut self, event: &winit::event::KeyEvent) -> bool {
+        let is_control = matches!(
+            event.physical_key,
+            PhysicalKey::Code(KeyCode::ControlLeft | KeyCode::ControlRight)
+        );
+        let is_alt = matches!(
+            event.physical_key,
+            PhysicalKey::Code(KeyCode::AltLeft | KeyCode::AltRight)
+        );
+        if event.state == ElementState::Released {
+            if is_control {
+                self.control_down = false;
+            }
+            if is_alt {
+                self.alt_down = false;
+            }
+            return self.local_shortcut_keys.remove(&event.physical_key);
+        }
+        if is_control {
+            self.control_down = true;
+        }
+        if is_alt {
+            self.alt_down = true;
+        }
+        let is_toggle = (self.control_down || self.modifiers.control_key())
+            && (self.alt_down || self.modifiers.alt_key())
+            && matches!(event.physical_key, PhysicalKey::Code(KeyCode::KeyF));
+        if !is_toggle {
+            return false;
+        }
+        self.local_shortcut_keys.insert(event.physical_key);
+        self.release_remote_input();
+        if self.fullscreen {
+            self.exit_fullscreen();
+        } else {
+            self.enter_fullscreen();
+        }
+        true
+    }
+
+    fn send_input_operations(
+        &mut self,
+        operations: impl IntoIterator<Item = ironrdp::input::Operation>,
+    ) {
+        let events = self.input_binding.apply(operations);
+        send_fast_path_events(&self.session_input, events);
+    }
+
+    fn request_exit(&mut self, event_loop: &ActiveEventLoop) {
+        self.release_remote_input();
+        if let Some(diagnostics) = self.diagnostics.as_mut() {
+            diagnostics.terminated();
+        }
+        self.session_input.send(RdpInputEvent::Close);
+        event_loop.exit();
+    }
+
+    fn request_resize_reconnect(&mut self, request: ResizeRequest, failure: &'static str) {
+        if let Some(diagnostics) = self.diagnostics.as_mut() {
+            diagnostics.resize_reconnect_required(
+                request.generation,
+                request.width,
+                request.height,
+                failure,
+            );
+        }
+        if let Some(surface) = self.window.as_ref() {
+            surface
+                .window
+                .set_title("RemoteDesk - reconnecting for resize");
+        }
+        // Dynamic display resize is not supported by every RDP server. Apply a
+        // bounded reconnect automatically so the viewer never remains behind
+        // an inaccessible modal confirmation dialog.
+        let _ = self.event_proxy.send_event(ViewerEvent::ResizeDecision {
+            generation: request.generation,
+            accepted: true,
+        });
+    }
+
+    fn apply_resize_decision(&mut self, generation: u64, accepted: bool) {
+        if accepted {
+            let Some(request) = self.resize_tracker.reconnecting(generation, Instant::now()) else {
+                return;
+            };
+            if let Some(diagnostics) = self.diagnostics.as_mut() {
+                diagnostics.resize_reconnecting(request.generation, request.width, request.height);
+            }
+            self.release_remote_input();
+            self.session_input.send(RdpInputEvent::ResizeReconnect {
+                generation: request.generation,
+                width: request.width,
+                height: request.height,
+            });
+        } else if let Some(request) = self.resize_tracker.cancel(generation) {
+            if let Some(diagnostics) = self.diagnostics.as_mut() {
+                diagnostics.resize_cancelled(request.generation, request.width, request.height);
+            }
+            if let Some(surface) = self.window.as_ref() {
+                surface.window.set_title("RemoteDesk - IronRDP");
+            }
+        }
+    }
+
+    fn forward_keyboard_input(&mut self, event: &winit::event::KeyEvent) {
+        let Some(scancode) = event.physical_key.to_scancode() else {
+            return;
+        };
+        let Ok(scancode) = u16::try_from(scancode) else {
+            warn!(scancode, "unsupported keyboard scancode");
+            return;
+        };
+        let scancode = ironrdp::input::Scancode::from_u16(scancode);
+        let operation = match event.state {
+            ElementState::Pressed => ironrdp::input::Operation::KeyPressed(scancode),
+            ElementState::Released => ironrdp::input::Operation::KeyReleased(scancode),
+        };
+        self.send_input_operations(core::iter::once(operation));
+    }
+
+    fn forward_modifiers(&mut self, modifiers: ModifiersState) {
+        const SHIFT_LEFT: ironrdp::input::Scancode = ironrdp::input::Scancode::from_u8(false, 0x2A);
+        const CONTROL_LEFT: ironrdp::input::Scancode =
+            ironrdp::input::Scancode::from_u8(false, 0x1D);
+        const ALT_LEFT: ironrdp::input::Scancode = ironrdp::input::Scancode::from_u8(false, 0x38);
+        const LOGO_LEFT: ironrdp::input::Scancode = ironrdp::input::Scancode::from_u8(true, 0x5B);
+
+        if !self.input_binding.focused {
+            return;
+        }
+        self.modifiers = modifiers;
+        let states = [
+            (modifiers.shift_key(), SHIFT_LEFT),
+            (modifiers.control_key(), CONTROL_LEFT),
+            (modifiers.alt_key(), ALT_LEFT),
+            (modifiers.super_key(), LOGO_LEFT),
+        ];
+        let events = self.input_binding.synchronize_keys(states);
+        send_fast_path_events(&self.session_input, events);
+    }
+}
+
+impl ApplicationHandler<ViewerEvent> for ViewerApp {
+    fn about_to_wait(&mut self, event_loop: &ActiveEventLoop) {
+        let now = Instant::now();
+        if let Some(deadline) = self.resize_timeout {
+            if deadline <= now {
+                self.send_resize_event();
+                self.resize_timeout = None;
+            }
+        }
+        if let Some(request) = self.resize_tracker.timed_out(now) {
+            self.request_resize_reconnect(request, "timeout");
+        }
+        if let Some(request) = self.resize_tracker.reconnect_timed_out(now) {
+            if let Some(surface) = self.window.as_ref() {
+                surface
+                    .window
+                    .set_title("RemoteDesk - waiting for remote resize frame");
+            }
+            error!(
+                generation = request.generation,
+                width = request.width,
+                height = request.height,
+                "resize reconnect has not produced a new frame yet; keeping the session alive"
+            );
+        }
+        let next_deadline = [self.resize_timeout, self.resize_tracker.deadline()]
+            .into_iter()
+            .flatten()
+            .min();
+        if let Some(deadline) = next_deadline {
+            event_loop.set_control_flow(ControlFlow::wait_duration(
+                deadline.saturating_duration_since(Instant::now()),
+            ));
+        } else {
+            event_loop.set_control_flow(ControlFlow::Wait);
+        }
+    }
+
+    fn resumed(&mut self, event_loop: &ActiveEventLoop) {
+        let fullscreen = (self.multi_monitor.is_none() && self.fullscreen)
+            .then(|| Fullscreen::Borderless(event_loop.primary_monitor()));
+        let mut attributes = WindowAttributes::default()
+            .with_title("RemoteDesk - IronRDP")
+            .with_inner_size(self.initial_window_size)
+            .with_fullscreen(fullscreen);
+        if let Some(placement) = self.multi_monitor
+            && self.fullscreen
+        {
+            attributes = attributes
+                .with_decorations(false)
+                .with_position(placement.origin)
+                .with_inner_size(placement.size);
+        }
+        match event_loop.create_window(attributes) {
+            Ok(window) => {
+                let window = Arc::new(window);
+                let focused = window.has_focus();
+                let surface = self
+                    .context
+                    .create_surface(window)
+                    .expect("renderer creation");
+                if let Some(diagnostics) = self.diagnostics.as_mut() {
+                    diagnostics.renderer(surface.name());
+                }
+                surface
+                    .window
+                    .set_title(&format!("RemoteDesk - IronRDP ({})", surface.name()));
+                self.window = Some(surface);
+                self.set_input_focus(focused);
+            }
+            Err(error) => {
+                error!(%error, "failed to create RDP window");
+                event_loop.exit();
+            }
+        }
+    }
+
+    fn window_event(
+        &mut self,
+        event_loop: &ActiveEventLoop,
+        window_id: winit::window::WindowId,
+        event: WindowEvent,
+    ) {
+        let Some(surface) = self.window.as_ref() else {
+            return;
+        };
+        let window = &surface.window;
+        if window_id != window.id() {
+            return;
+        }
+
+        match event {
+            WindowEvent::Resized(size) => {
+                if self.multi_monitor.is_none() {
+                    self.last_size = Some(size);
+                    self.resize_timeout = Some(Instant::now() + Duration::from_secs(1));
+                }
+            }
+            WindowEvent::CloseRequested => self.request_exit(event_loop),
+            WindowEvent::Focused(focused) => self.set_input_focus(focused),
+            WindowEvent::KeyboardInput { event, .. } => {
+                if !self.handle_local_key(&event) {
+                    self.forward_keyboard_input(&event);
+                }
+            }
+            WindowEvent::ModifiersChanged(modifiers) => self.forward_modifiers(modifiers.state()),
+            WindowEvent::CursorMoved { position, .. } => {
+                let size = window.inner_size();
+                let Some(position) = remote_pointer_position(position, size, self.buffer_size)
+                else {
+                    return;
+                };
+                self.send_input_operations(core::iter::once(ironrdp::input::Operation::MouseMove(
+                    position,
+                )));
+            }
+            WindowEvent::MouseWheel { delta, .. } => {
+                let operations = wheel_rotations(delta)
+                    .into_iter()
+                    .map(ironrdp::input::Operation::WheelRotations);
+                self.send_input_operations(operations);
+            }
+            WindowEvent::MouseInput { state, button, .. } => {
+                let Some(button) = remote_mouse_button(button) else {
+                    return;
+                };
+                let operation = match state {
+                    ElementState::Pressed => ironrdp::input::Operation::MouseButtonPressed(button),
+                    ElementState::Released => {
+                        ironrdp::input::Operation::MouseButtonReleased(button)
+                    }
+                };
+                self.send_input_operations(core::iter::once(operation));
+            }
+            WindowEvent::RedrawRequested => self.draw(),
+            WindowEvent::DroppedFile(_)
+            | WindowEvent::ActivationTokenDone { .. }
+            | WindowEvent::Moved(_)
+            | WindowEvent::Destroyed
+            | WindowEvent::HoveredFile(_)
+            | WindowEvent::HoveredFileCancelled
+            | WindowEvent::Ime(_)
+            | WindowEvent::CursorEntered { .. }
+            | WindowEvent::CursorLeft { .. }
+            | WindowEvent::PinchGesture { .. }
+            | WindowEvent::PanGesture { .. }
+            | WindowEvent::DoubleTapGesture { .. }
+            | WindowEvent::RotationGesture { .. }
+            | WindowEvent::TouchpadPressure { .. }
+            | WindowEvent::AxisMotion { .. }
+            | WindowEvent::Touch(_)
+            | WindowEvent::ScaleFactorChanged { .. }
+            | WindowEvent::ThemeChanged(_)
+            | WindowEvent::Occluded(_) => {}
+        }
+    }
+
+    fn user_event(&mut self, event_loop: &ActiveEventLoop, event: ViewerEvent) {
+        match event {
+            ViewerEvent::Rdp(event) => self.handle_rdp_event(event_loop, event),
+            #[cfg(windows)]
+            ViewerEvent::GlobalKeyboard { scancode, pressed } => {
+                self.send_input_operations(core::iter::once(if pressed {
+                    ironrdp::input::Operation::KeyPressed(scancode)
+                } else {
+                    ironrdp::input::Operation::KeyReleased(scancode)
+                }));
+            }
+            ViewerEvent::ReconnectScheduled {
+                attempt,
+                max_attempts,
+                delay_seconds,
+            } => {
+                self.release_remote_input();
+                if let Some(surface) = self.window.as_ref() {
+                    surface.window.set_title(&format!(
+                        "RemoteDesk - reconnecting {attempt}/{max_attempts} ({delay_seconds}s)"
+                    ));
+                }
+                if let Some(diagnostics) = self.diagnostics.as_mut() {
+                    diagnostics.reconnecting(attempt);
+                }
+            }
+            ViewerEvent::ReconnectExhausted => {
+                if let Some(diagnostics) = self.diagnostics.as_mut() {
+                    diagnostics.failed("reconnect_exhausted");
+                }
+                event_loop.exit();
+            }
+            ViewerEvent::ResizeDecision {
+                generation,
+                accepted,
+            } => self.apply_resize_decision(generation, accepted),
+        }
+    }
+}
+
+impl ViewerApp {
+    fn handle_rdp_event(&mut self, event_loop: &ActiveEventLoop, event: RdpOutputEvent) {
+        if let RdpOutputEvent::NetworkMetrics {
+            base_rtt_ms,
+            average_rtt_ms,
+            bandwidth_kbps,
+        } = &event
+        {
+            if let Some(diagnostics) = self.diagnostics.as_mut() {
+                diagnostics.network_metrics(*base_rtt_ms, *average_rtt_ms, *bandwidth_kbps);
+            }
+            return;
+        }
+        match &event {
+            RdpOutputEvent::ResizeSubmitted {
+                generation,
+                width,
+                height,
+            } => {
+                if let Some(request) =
+                    self.resize_tracker
+                        .submitted(*generation, *width, *height, Instant::now())
+                    && let Some(diagnostics) = self.diagnostics.as_mut()
+                {
+                    diagnostics.resize_pending(request.generation, request.width, request.height);
+                }
+                return;
+            }
+            RdpOutputEvent::ResizeReconnectRequired {
+                generation,
+                width,
+                height,
+            } => {
+                if let Some(request) =
+                    self.resize_tracker
+                        .require_reconnect(*generation, *width, *height)
+                {
+                    self.request_resize_reconnect(request, "unsupported");
+                }
+                return;
+            }
+            RdpOutputEvent::ResizeReconnectStarted {
+                generation,
+                width,
+                height,
+            } => {
+                if self
+                    .resize_tracker
+                    .active
+                    .is_some_and(|request| request.generation == *generation)
+                {
+                    if let Some(diagnostics) = self.diagnostics.as_mut() {
+                        diagnostics.resize_reconnecting(*generation, *width, *height);
+                    }
+                    if let Some(surface) = self.window.as_ref() {
+                        surface
+                            .window
+                            .set_title("RemoteDesk - reconnecting for resize");
+                    }
+                }
+                return;
+            }
+            _ => {}
+        }
+        let Some(surface) = self.window.as_mut() else {
+            return;
+        };
+        let window = Arc::clone(&surface.window);
+        match event {
+            RdpOutputEvent::Image {
+                buffer,
+                width,
+                height,
+                dirty_region,
+                decode_time,
+            } => {
+                self.pending_frame_started = Some(Instant::now());
+                trace!(?width, ?height, "received RDP image");
+                let dimensions_changed = self.buffer_size != (width.get(), height.get());
+                let converted_pixels = u64::try_from(buffer.len()).unwrap_or(u64::MAX);
+                if let Err(error) = apply_image_patch(
+                    &mut self.buffer,
+                    &mut self.buffer_size,
+                    &buffer,
+                    width.get(),
+                    height.get(),
+                    dirty_region,
+                ) {
+                    error!(%error, "IronRDP returned an invalid image patch");
+                    if let Some(diagnostics) = self.diagnostics.as_mut() {
+                        diagnostics.failed("invalid_image_patch");
+                    }
+                    event_loop.exit();
+                    return;
+                }
+                // Keep the native swap chain and the window client area aligned with the
+                // negotiated RDP framebuffer. Otherwise Windows paints the unused swap-chain
+                // area black when the server returns a size different from the initial request.
+                if dimensions_changed && self.multi_monitor.is_none() && !self.fullscreen {
+                    let _ = window.request_inner_size(PhysicalSize::new(
+                        u32::from(width.get()),
+                        u32::from(height.get()),
+                    ));
+                }
+                self.pending_dirty_region = Some(if dimensions_changed {
+                    dirty_region
+                } else if let Some(pending) = self.pending_dirty_region {
+                    union_dirty_regions(pending, dirty_region)
+                } else {
+                    dirty_region
+                });
+                if let Some(diagnostics) = self.diagnostics.as_mut() {
+                    if let Some(decode_time) = decode_time {
+                        diagnostics.decoded(decode_time.as_secs_f64() * 1_000.0);
+                    }
+                    diagnostics.converted_pixels(converted_pixels);
+                    if let Some(request) = self
+                        .resize_tracker
+                        .confirmed_by_image(width.get(), height.get())
+                    {
+                        diagnostics.resize_confirmed(
+                            request.generation,
+                            request.width,
+                            request.height,
+                        );
+                    }
+                    diagnostics.connected_frame(width.get(), height.get());
+                }
+                window.set_title("RemoteDesk - IronRDP");
+                surface
+                    .resize(width.get(), height.get())
+                    .expect("renderer resize");
+                window.request_redraw();
+            }
+            RdpOutputEvent::ConnectionFailure(error) => {
+                error!(?error, "RDP connection failed");
+                if let Some(diagnostics) = self.diagnostics.as_mut() {
+                    diagnostics.failed("connection_failed");
+                }
+                event_loop.exit();
+            }
+            RdpOutputEvent::Terminated(result) => {
+                if let Err(error) = result {
+                    error!(?error, "RDP session terminated with an error");
+                    if let Some(diagnostics) = self.diagnostics.as_mut() {
+                        diagnostics.failed("session_error");
+                    }
+                } else if let Some(diagnostics) = self.diagnostics.as_mut() {
+                    diagnostics.terminated();
+                }
+                event_loop.exit();
+            }
+            RdpOutputEvent::PointerHidden => window.set_cursor_visible(false),
+            RdpOutputEvent::PointerDefault => {
+                window.set_cursor(CursorIcon::default());
+                window.set_cursor_visible(true);
+            }
+            RdpOutputEvent::PointerPosition { x, y } => {
+                if let Some(position) = local_pointer_position(
+                    ironrdp::input::MousePosition { x, y },
+                    window.inner_size(),
+                    self.buffer_size,
+                ) && let Err(error) = window.set_cursor_position(position)
+                {
+                    debug!(?error, "unable to set RDP pointer position");
+                }
+            }
+            RdpOutputEvent::PointerBitmap(pointer) => {
+                match CustomCursor::from_rgba(
+                    pointer.bitmap_data.clone(),
+                    pointer.width,
+                    pointer.height,
+                    pointer.hotspot_x,
+                    pointer.hotspot_y,
+                ) {
+                    Ok(cursor) => window.set_cursor(event_loop.create_custom_cursor(cursor)),
+                    Err(error) => warn!(?error, "unable to create RDP pointer bitmap"),
+                }
+                window.set_cursor_visible(true);
+            }
+            RdpOutputEvent::NetworkMetrics { .. } => unreachable!("handled before window access"),
+            RdpOutputEvent::ResizeSubmitted { .. }
+            | RdpOutputEvent::ResizeReconnectRequired { .. }
+            | RdpOutputEvent::ResizeReconnectStarted { .. } => {
+                unreachable!("handled before window access")
+            }
+        }
+    }
+}
+
+fn send_fast_path_events(sender: &SessionInput, events: SmallVec<[FastPathInputEvent; 2]>) {
+    if !events.is_empty() {
+        sender.send(RdpInputEvent::FastPath(events));
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn input_binding_forwards_only_while_focused_and_releases_remote_state() {
+        let mut binding = InputBinding::default();
+        let key = ironrdp::input::Scancode::from_u8(false, 0x1E);
+        let operations = [
+            ironrdp::input::Operation::MouseMove(ironrdp::input::MousePosition { x: 100, y: 50 }),
+            ironrdp::input::Operation::MouseButtonPressed(ironrdp::input::MouseButton::Left),
+            ironrdp::input::Operation::KeyPressed(key),
+        ];
+
+        assert!(binding.apply(operations.clone()).is_empty());
+        assert!(binding.set_focused(true).is_empty());
+        assert_eq!(binding.apply(operations).len(), 3);
+        assert!(
+            binding.synchronize_keys([(true, key)]).is_empty(),
+            "modifier synchronization must not repeat an already pressed physical key"
+        );
+        assert_eq!(binding.set_focused(false).len(), 2);
+        assert!(binding.release_all().is_empty());
+        assert!(
+            binding
+                .apply([ironrdp::input::Operation::KeyPressed(key)])
+                .is_empty()
+        );
+    }
+
+    #[test]
+    fn pointer_coordinates_round_trip_between_window_and_remote_desktop() {
+        let window_size = PhysicalSize::new(1_001, 501);
+        let desktop_size = (1_921, 1_081);
+        let remote = remote_pointer_position(
+            PhysicalPosition::new(500.0, 250.0),
+            window_size,
+            desktop_size,
+        )
+        .unwrap();
+        assert_eq!(remote, ironrdp::input::MousePosition { x: 960, y: 540 });
+        assert_eq!(
+            local_pointer_position(remote, window_size, desktop_size),
+            Some(PhysicalPosition::new(500.0, 250.0))
+        );
+        assert_eq!(
+            remote_pointer_position(
+                PhysicalPosition::new(-10.0, 10_000.0),
+                window_size,
+                desktop_size,
+            ),
+            Some(ironrdp::input::MousePosition { x: 0, y: 1_080 })
+        );
+        assert_eq!(
+            remote_pointer_position(
+                PhysicalPosition::new(f64::NAN, 0.0),
+                window_size,
+                desktop_size,
+            ),
+            None
+        );
+    }
+
+    #[test]
+    fn mouse_buttons_and_wheel_deltas_map_to_rdp_input() {
+        assert_eq!(
+            remote_mouse_button(event::MouseButton::Left),
+            Some(ironrdp::input::MouseButton::Left)
+        );
+        assert_eq!(
+            remote_mouse_button(event::MouseButton::Back),
+            Some(ironrdp::input::MouseButton::X1)
+        );
+        assert_eq!(remote_mouse_button(event::MouseButton::Other(99)), None);
+
+        assert_eq!(
+            wheel_rotations(event::MouseScrollDelta::LineDelta(1.0, -2.0)).as_slice(),
+            &[
+                ironrdp::input::WheelRotations {
+                    is_vertical: false,
+                    rotation_units: 120,
+                },
+                ironrdp::input::WheelRotations {
+                    is_vertical: true,
+                    rotation_units: -240,
+                },
+            ]
+        );
+        assert_eq!(wheel_units(f64::INFINITY, 1.0), None);
+        assert_eq!(wheel_units(100_000.0, 1.0), Some(i16::MAX));
+    }
+
+    #[test]
+    fn pending_dirty_regions_are_merged_before_redraw() {
+        assert_eq!(
+            union_dirty_regions(
+                DirtyRegion {
+                    left: 100,
+                    top: 50,
+                    right: 199,
+                    bottom: 99,
+                },
+                DirtyRegion {
+                    left: 20,
+                    top: 70,
+                    right: 49,
+                    bottom: 149,
+                },
+            ),
+            DirtyRegion {
+                left: 20,
+                top: 50,
+                right: 199,
+                bottom: 149,
+            }
+        );
+    }
+
+    #[test]
+    fn image_patches_update_only_the_declared_framebuffer_region() {
+        let mut framebuffer = Vec::new();
+        let mut size = (0, 0);
+        apply_image_patch(
+            &mut framebuffer,
+            &mut size,
+            &[1, 2, 3, 4],
+            4,
+            3,
+            DirtyRegion {
+                left: 1,
+                top: 1,
+                right: 2,
+                bottom: 2,
+            },
+        )
+        .unwrap();
+        assert_eq!(size, (4, 3));
+        assert_eq!(framebuffer, [0, 0, 0, 0, 0, 1, 2, 0, 0, 3, 4, 0]);
+
+        apply_image_patch(
+            &mut framebuffer,
+            &mut size,
+            &[9],
+            4,
+            3,
+            DirtyRegion {
+                left: 0,
+                top: 0,
+                right: 0,
+                bottom: 0,
+            },
+        )
+        .unwrap();
+        assert_eq!(framebuffer, [9, 0, 0, 0, 0, 1, 2, 0, 0, 3, 4, 0]);
+    }
+
+    #[test]
+    fn malformed_image_patches_are_rejected() {
+        let mut framebuffer = vec![0; 4];
+        let mut size = (2, 2);
+        assert!(
+            apply_image_patch(
+                &mut framebuffer,
+                &mut size,
+                &[1],
+                2,
+                2,
+                DirtyRegion {
+                    left: 0,
+                    top: 0,
+                    right: 1,
+                    bottom: 1,
+                },
+            )
+            .is_err()
+        );
+        assert_eq!(framebuffer, [0, 0, 0, 0]);
+    }
+
+    #[test]
+    fn resize_tracker_rejects_stale_events_and_confirms_only_matching_images() {
+        let now = Instant::now();
+        let mut tracker = ResizeTracker::default();
+        let first = tracker.begin(1_920, 1_080, now);
+        let second = tracker.begin(2_560, 1_440, now);
+        assert_eq!(first.generation + 1, second.generation);
+        assert!(
+            tracker
+                .submitted(first.generation, 1_920, 1_080, now)
+                .is_none()
+        );
+        assert!(tracker.confirmed_by_image(1_920, 1_080).is_none());
+        assert_eq!(tracker.confirmed_by_image(2_560, 1_440), Some(second));
+    }
+
+    #[test]
+    fn resize_tracker_requires_explicit_reconnect_after_timeout() {
+        let now = Instant::now();
+        let mut tracker = ResizeTracker::default();
+        let request = tracker.begin(2_560, 1_440, now);
+        assert!(
+            tracker
+                .timed_out(now + RESIZE_CONFIRM_TIMEOUT / 2)
+                .is_none()
+        );
+        let required = tracker.timed_out(now + RESIZE_CONFIRM_TIMEOUT).unwrap();
+        assert_eq!(required.phase, ResizePhase::ReconnectRequired);
+        assert!(tracker.confirmed_by_image(1_920, 1_080).is_none());
+        let reconnecting = tracker.reconnecting(request.generation, now).unwrap();
+        assert_eq!(reconnecting.phase, ResizePhase::Reconnecting);
+        assert!(
+            tracker
+                .reconnect_timed_out(now + RESIZE_RECONNECT_TIMEOUT / 2)
+                .is_none()
+        );
+        assert_eq!(tracker.confirmed_by_image(2_560, 1_440), Some(reconnecting));
+    }
+
+    #[test]
+    fn reconnect_accepts_server_adjusted_frame_size() {
+        let now = Instant::now();
+        let mut tracker = ResizeTracker::default();
+        let request = tracker.begin(1_600, 900, now);
+        tracker
+            .require_reconnect(request.generation, request.width, request.height)
+            .unwrap();
+        tracker.reconnecting(request.generation, now).unwrap();
+        assert_eq!(
+            tracker.confirmed_by_image(1_584, 900).unwrap().generation,
+            request.generation
+        );
+    }
+
+    #[test]
+    fn resize_tracker_cancellation_keeps_the_current_session() {
+        let now = Instant::now();
+        let mut tracker = ResizeTracker::default();
+        let request = tracker.begin(1_280, 720, now);
+        tracker
+            .require_reconnect(request.generation, request.width, request.height)
+            .unwrap();
+        assert_eq!(
+            tracker.cancel(request.generation).unwrap().generation,
+            request.generation
+        );
+        assert_eq!(tracker.active.unwrap().phase, ResizePhase::Cancelled);
+        assert_eq!(
+            tracker.confirmed_by_image(1_280, 720).unwrap().generation,
+            request.generation
+        );
+    }
+
+    #[test]
+    fn resize_tracker_expires_when_reconnect_has_no_new_frame() {
+        let now = Instant::now();
+        let mut tracker = ResizeTracker::default();
+        let request = tracker.begin(1_600, 900, now);
+        tracker
+            .require_reconnect(request.generation, request.width, request.height)
+            .unwrap();
+        tracker.reconnecting(request.generation, now).unwrap();
+        let expired = tracker
+            .reconnect_timed_out(now + RESIZE_RECONNECT_TIMEOUT)
+            .unwrap();
+        assert_eq!(expired.generation, request.generation);
+        assert_eq!(tracker.active.unwrap().phase, ResizePhase::Reconnecting);
+    }
+}
diff --git a/client/helpers/rdp-viewer/src/diagnostics.rs b/client/helpers/rdp-viewer/src/diagnostics.rs
new file mode 100644
index 0000000..fa16235
--- /dev/null
+++ b/client/helpers/rdp-viewer/src/diagnostics.rs
@@ -0,0 +1,437 @@
+use std::env;
+use std::fs;
+use std::path::PathBuf;
+use std::time::{Duration, Instant, SystemTime, UNIX_EPOCH};
+
+use serde::Serialize;
+
+#[derive(Debug, Clone, Copy, Serialize)]
+#[serde(rename_all = "snake_case")]
+pub enum SessionState {
+    WaitingForCredentials,
+    Connecting,
+    Connected,
+    Reconnecting,
+    Failed,
+    Terminated,
+}
+
+#[derive(Debug, Clone, Copy, Serialize)]
+#[serde(rename_all = "snake_case")]
+pub enum ResizeState {
+    Idle,
+    Pending,
+    ReconnectRequired,
+    Reconnecting,
+    Confirmed,
+    Cancelled,
+}
+
+#[derive(Debug, Serialize)]
+struct SessionSnapshot<'a> {
+    schema_version: u8,
+    session_id: &'a str,
+    state: SessionState,
+    started_at_unix_ms: u64,
+    updated_at_unix_ms: u64,
+    frame_count: u64,
+    frames_per_second: Option<f64>,
+    desktop_width: u16,
+    desktop_height: u16,
+    monitor_count: u8,
+    multi_monitor: bool,
+    network_latency_ms: Option<u32>,
+    base_network_latency_ms: Option<u32>,
+    bandwidth_kbps: Option<u32>,
+    decode_latency_ms: Option<f64>,
+    presentation_latency_ms: Option<f64>,
+    renderer: &'static str,
+    frame_conversion_pixels: u64,
+    frame_upload_mode: &'static str,
+    frame_upload_pixels: u64,
+    reconnect_attempt: u8,
+    resize_generation: u64,
+    resize_state: ResizeState,
+    resize_requested_width: Option<u16>,
+    resize_requested_height: Option<u16>,
+    resize_failure: Option<&'static str>,
+    error_code: Option<&'static str>,
+}
+
+pub struct SessionDiagnostics {
+    path: PathBuf,
+    session_id: String,
+    state: SessionState,
+    started_at_unix_ms: u64,
+    frame_count: u64,
+    frames_per_second: Option<f64>,
+    frame_rate_started: Instant,
+    frame_rate_frames: u32,
+    desktop_size: (u16, u16),
+    monitor_count: u8,
+    multi_monitor: bool,
+    network_latency_ms: Option<u32>,
+    base_network_latency_ms: Option<u32>,
+    bandwidth_kbps: Option<u32>,
+    decode_latency_ms: Option<f64>,
+    presentation_latency_ms: Option<f64>,
+    renderer: &'static str,
+    frame_conversion_pixels: u64,
+    frame_upload_mode: &'static str,
+    frame_upload_pixels: u64,
+    reconnect_attempt: u8,
+    resize_generation: u64,
+    resize_state: ResizeState,
+    resize_requested_size: Option<(u16, u16)>,
+    resize_failure: Option<&'static str>,
+    error_code: Option<&'static str>,
+    last_write: Instant,
+}
+
+impl SessionDiagnostics {
+    pub fn new(session_id: String) -> Result<Self, String> {
+        validate_session_id(&session_id)?;
+        let directory = env::temp_dir().join("RemoteDesk").join("sessions");
+        fs::create_dir_all(&directory).map_err(|error| {
+            format!("unable to create the session diagnostics directory: {error}")
+        })?;
+        let diagnostics = Self {
+            path: directory.join(format!("{session_id}.json")),
+            session_id,
+            state: SessionState::WaitingForCredentials,
+            started_at_unix_ms: unix_millis(),
+            frame_count: 0,
+            frames_per_second: None,
+            frame_rate_started: Instant::now(),
+            frame_rate_frames: 0,
+            desktop_size: (0, 0),
+            monitor_count: 1,
+            multi_monitor: false,
+            network_latency_ms: None,
+            base_network_latency_ms: None,
+            bandwidth_kbps: None,
+            decode_latency_ms: None,
+            presentation_latency_ms: None,
+            renderer: "pending",
+            frame_conversion_pixels: 0,
+            frame_upload_mode: "pending",
+            frame_upload_pixels: 0,
+            reconnect_attempt: 0,
+            resize_generation: 0,
+            resize_state: ResizeState::Idle,
+            resize_requested_size: None,
+            resize_failure: None,
+            error_code: None,
+            last_write: Instant::now(),
+        };
+        diagnostics.write()?;
+        Ok(diagnostics)
+    }
+
+    pub fn set_state(&mut self, state: SessionState) {
+        self.state = state;
+        self.error_code = None;
+        self.write_best_effort();
+    }
+
+    pub fn connected_frame(&mut self, width: u16, height: u16) {
+        self.state = SessionState::Connected;
+        self.frame_count = self.frame_count.saturating_add(1);
+        self.frame_rate_frames = self.frame_rate_frames.saturating_add(1);
+        let elapsed = self.frame_rate_started.elapsed();
+        if elapsed >= Duration::from_secs(1) {
+            self.frames_per_second = frame_rate(self.frame_rate_frames, elapsed);
+            self.frame_rate_frames = 0;
+            self.frame_rate_started = Instant::now();
+        }
+        self.desktop_size = (width, height);
+        self.error_code = None;
+        self.write_throttled();
+    }
+
+    pub fn reconnecting(&mut self, attempt: u8) {
+        self.state = SessionState::Reconnecting;
+        self.reconnect_attempt = attempt;
+        self.network_latency_ms = None;
+        self.base_network_latency_ms = None;
+        self.bandwidth_kbps = None;
+        self.decode_latency_ms = None;
+        self.error_code = None;
+        self.write_best_effort();
+    }
+
+    pub fn network_metrics(
+        &mut self,
+        base_rtt_ms: Option<u32>,
+        average_rtt_ms: u32,
+        bandwidth_kbps: Option<u32>,
+    ) {
+        self.network_latency_ms = Some(average_rtt_ms);
+        self.base_network_latency_ms = base_rtt_ms;
+        self.bandwidth_kbps = bandwidth_kbps;
+        self.write_best_effort();
+    }
+
+    pub fn monitor_layout(&mut self, monitor_count: usize) {
+        self.monitor_count = u8::try_from(monitor_count).unwrap_or(u8::MAX);
+        self.multi_monitor = monitor_count > 1;
+        self.write_best_effort();
+    }
+
+    pub fn presented(&mut self, latency_ms: f64) {
+        self.presentation_latency_ms = Some(latency_ms.max(0.0));
+        self.write_throttled();
+    }
+
+    pub fn decoded(&mut self, latency_ms: f64) {
+        self.decode_latency_ms = Some(latency_ms.max(0.0));
+        self.write_throttled();
+    }
+
+    pub fn renderer(&mut self, renderer: &'static str) {
+        self.renderer = renderer;
+        self.write_best_effort();
+    }
+
+    pub fn frame_upload(&mut self, mode: &'static str, uploaded_pixels: u64) {
+        self.frame_upload_mode = mode;
+        self.frame_upload_pixels = uploaded_pixels;
+        self.write_throttled();
+    }
+
+    pub fn converted_pixels(&mut self, converted_pixels: u64) {
+        self.frame_conversion_pixels = converted_pixels;
+        self.write_throttled();
+    }
+
+    pub fn resize_pending(&mut self, generation: u64, width: u16, height: u16) {
+        self.resize_generation = generation;
+        self.resize_state = ResizeState::Pending;
+        self.resize_requested_size = Some((width, height));
+        self.resize_failure = None;
+        self.write_best_effort();
+    }
+
+    pub fn resize_reconnect_required(
+        &mut self,
+        generation: u64,
+        width: u16,
+        height: u16,
+        failure: &'static str,
+    ) {
+        self.resize_generation = generation;
+        self.resize_state = ResizeState::ReconnectRequired;
+        self.resize_requested_size = Some((width, height));
+        self.resize_failure = Some(failure);
+        self.write_best_effort();
+    }
+
+    pub fn resize_reconnecting(&mut self, generation: u64, width: u16, height: u16) {
+        self.resize_generation = generation;
+        self.resize_state = ResizeState::Reconnecting;
+        self.resize_requested_size = Some((width, height));
+        self.write_best_effort();
+    }
+
+    pub fn resize_confirmed(&mut self, generation: u64, width: u16, height: u16) {
+        self.resize_generation = generation;
+        self.resize_state = ResizeState::Confirmed;
+        self.resize_requested_size = Some((width, height));
+        self.resize_failure = None;
+        self.write_best_effort();
+    }
+
+    pub fn resize_cancelled(&mut self, generation: u64, width: u16, height: u16) {
+        self.resize_generation = generation;
+        self.resize_state = ResizeState::Cancelled;
+        self.resize_requested_size = Some((width, height));
+        self.write_best_effort();
+    }
+
+    pub fn failed(&mut self, error_code: &'static str) {
+        self.state = SessionState::Failed;
+        self.error_code = Some(error_code);
+        self.write_best_effort();
+    }
+
+    pub fn terminated(&mut self) {
+        self.state = SessionState::Terminated;
+        self.error_code = None;
+        self.write_best_effort();
+    }
+
+    fn write_throttled(&mut self) {
+        if self.last_write.elapsed() >= Duration::from_millis(250) {
+            self.write_best_effort();
+        }
+    }
+
+    fn write_best_effort(&mut self) {
+        if let Err(error) = self.write() {
+            eprintln!("warning: unable to update session diagnostics: {error}");
+        } else {
+            self.last_write = Instant::now();
+        }
+    }
+
+    fn write(&self) -> Result<(), String> {
+        let snapshot = SessionSnapshot {
+            schema_version: 1,
+            session_id: &self.session_id,
+            state: self.state,
+            started_at_unix_ms: self.started_at_unix_ms,
+            updated_at_unix_ms: unix_millis(),
+            frame_count: self.frame_count,
+            frames_per_second: self.frames_per_second,
+            desktop_width: self.desktop_size.0,
+            desktop_height: self.desktop_size.1,
+            monitor_count: self.monitor_count,
+            multi_monitor: self.multi_monitor,
+            network_latency_ms: self.network_latency_ms,
+            base_network_latency_ms: self.base_network_latency_ms,
+            bandwidth_kbps: self.bandwidth_kbps,
+            decode_latency_ms: self.decode_latency_ms,
+            presentation_latency_ms: self.presentation_latency_ms,
+            renderer: self.renderer,
+            frame_conversion_pixels: self.frame_conversion_pixels,
+            frame_upload_mode: self.frame_upload_mode,
+            frame_upload_pixels: self.frame_upload_pixels,
+            reconnect_attempt: self.reconnect_attempt,
+            resize_generation: self.resize_generation,
+            resize_state: self.resize_state,
+            resize_requested_width: self.resize_requested_size.map(|size| size.0),
+            resize_requested_height: self.resize_requested_size.map(|size| size.1),
+            resize_failure: self.resize_failure,
+            error_code: self.error_code,
+        };
+        let data = serde_json::to_vec(&snapshot)
+            .map_err(|error| format!("unable to encode session diagnostics: {error}"))?;
+        fs::write(&self.path, data)
+            .map_err(|error| format!("unable to write session diagnostics: {error}"))
+    }
+}
+
+fn validate_session_id(value: &str) -> Result<(), String> {
+    if value.is_empty()
+        || value.len() > 64
+        || !value
+            .bytes()
+            .all(|byte| byte.is_ascii_alphanumeric() || byte == b'-')
+    {
+        return Err("invalid session diagnostics identifier".to_owned());
+    }
+    Ok(())
+}
+
+fn unix_millis() -> u64 {
+    SystemTime::now()
+        .duration_since(UNIX_EPOCH)
+        .unwrap_or_default()
+        .as_millis()
+        .try_into()
+        .unwrap_or(u64::MAX)
+}
+
+fn frame_rate(frames: u32, elapsed: Duration) -> Option<f64> {
+    let seconds = elapsed.as_secs_f64();
+    (frames > 0 && seconds > 0.0).then(|| f64::from(frames) / seconds)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn session_identifiers_are_bounded_and_path_safe() {
+        assert!(validate_session_id("42-123456-7").is_ok());
+        assert!(validate_session_id("").is_err());
+        assert!(validate_session_id("../secret").is_err());
+        assert!(validate_session_id(&"a".repeat(65)).is_err());
+    }
+
+    #[test]
+    fn frame_rate_uses_observed_frames_and_elapsed_time() {
+        assert_eq!(frame_rate(60, Duration::from_secs(2)), Some(30.0));
+        assert_eq!(frame_rate(0, Duration::from_secs(1)), None);
+        assert_eq!(frame_rate(1, Duration::ZERO), None);
+    }
+
+    #[test]
+    fn server_network_metrics_are_persisted_without_fabrication() {
+        let session_id = format!("network-{}-{}", std::process::id(), unix_millis());
+        let mut diagnostics = SessionDiagnostics::new(session_id).unwrap();
+        diagnostics.network_metrics(Some(12), 18, Some(50_000));
+
+        let snapshot: serde_json::Value =
+            serde_json::from_slice(&fs::read(&diagnostics.path).unwrap()).unwrap();
+        assert_eq!(snapshot["network_latency_ms"], 18);
+        assert_eq!(snapshot["base_network_latency_ms"], 12);
+        assert_eq!(snapshot["bandwidth_kbps"], 50_000);
+        fs::remove_file(&diagnostics.path).unwrap();
+    }
+
+    #[test]
+    fn measured_decode_latency_is_persisted() {
+        let session_id = format!("decode-{}-{}", std::process::id(), unix_millis());
+        let mut diagnostics = SessionDiagnostics::new(session_id).unwrap();
+        diagnostics.decoded(2.75);
+        diagnostics.terminated();
+
+        let snapshot: serde_json::Value =
+            serde_json::from_slice(&fs::read(&diagnostics.path).unwrap()).unwrap();
+        assert_eq!(snapshot["decode_latency_ms"], 2.75);
+        fs::remove_file(&diagnostics.path).unwrap();
+    }
+
+    #[test]
+    fn active_monitor_layout_is_persisted() {
+        let session_id = format!("monitors-{}-{}", std::process::id(), unix_millis());
+        let mut diagnostics = SessionDiagnostics::new(session_id).unwrap();
+        diagnostics.monitor_layout(3);
+
+        let snapshot: serde_json::Value =
+            serde_json::from_slice(&fs::read(&diagnostics.path).unwrap()).unwrap();
+        assert_eq!(snapshot["monitor_count"], 3);
+        assert_eq!(snapshot["multi_monitor"], true);
+        fs::remove_file(&diagnostics.path).unwrap();
+    }
+
+    #[test]
+    fn renderer_upload_work_is_persisted() {
+        let session_id = format!("upload-{}-{}", std::process::id(), unix_millis());
+        let mut diagnostics = SessionDiagnostics::new(session_id).unwrap();
+        diagnostics.frame_upload("dirty_rect", 4_096);
+        diagnostics.converted_pixels(2_048);
+        diagnostics.terminated();
+
+        let snapshot: serde_json::Value =
+            serde_json::from_slice(&fs::read(&diagnostics.path).unwrap()).unwrap();
+        assert_eq!(snapshot["frame_upload_mode"], "dirty_rect");
+        assert_eq!(snapshot["frame_upload_pixels"], 4_096);
+        assert_eq!(snapshot["frame_conversion_pixels"], 2_048);
+        fs::remove_file(&diagnostics.path).unwrap();
+    }
+
+    #[test]
+    fn resize_lifecycle_is_structured_and_contains_no_connection_data() {
+        let session_id = format!("resize-{}-{}", std::process::id(), unix_millis());
+        let mut diagnostics = SessionDiagnostics::new(session_id).unwrap();
+        diagnostics.resize_pending(7, 2_560, 1_440);
+        diagnostics.resize_reconnect_required(7, 2_560, 1_440, "unsupported");
+        diagnostics.resize_reconnecting(7, 2_560, 1_440);
+        diagnostics.resize_confirmed(7, 2_560, 1_440);
+
+        let data = fs::read(&diagnostics.path).unwrap();
+        let snapshot: serde_json::Value = serde_json::from_slice(&data).unwrap();
+        assert_eq!(snapshot["resize_generation"], 7);
+        assert_eq!(snapshot["resize_state"], "confirmed");
+        assert_eq!(snapshot["resize_requested_width"], 2_560);
+        assert_eq!(snapshot["resize_requested_height"], 1_440);
+        assert_eq!(snapshot["resize_failure"], serde_json::Value::Null);
+        let serialized = String::from_utf8(data).unwrap();
+        assert!(!serialized.contains("target"));
+        assert!(!serialized.contains("username"));
+        assert!(!serialized.contains("password"));
+        fs::remove_file(&diagnostics.path).unwrap();
+    }
+}
diff --git a/client/helpers/rdp-viewer/src/main.rs b/client/helpers/rdp-viewer/src/main.rs
new file mode 100644
index 0000000..4e79659
--- /dev/null
+++ b/client/helpers/rdp-viewer/src/main.rs
@@ -0,0 +1,678 @@
+use anyhow::Context as _;
+use ironrdp::client::rdp::{RdpClient, RdpOutputEvent};
+use ironrdp_viewer::cli::ViewerConfig;
+use remotedesk_client_core::{
+    CredentialRef, DEFAULT_RDP_PORT, RdpEndpoint, RdpViewerLaunchConfig,
+    receive_secure_pipe_session,
+};
+use remotedesk_credential_store::RdpCredential;
+use std::env;
+use std::process::ExitCode;
+use std::time::Duration;
+use tokio::runtime;
+use tokio::sync::mpsc;
+use winit::dpi::PhysicalSize;
+use winit::event_loop::EventLoop;
+
+mod app;
+mod diagnostics;
+mod monitor_layout;
+mod renderer;
+#[cfg(windows)]
+mod windows_keyboard_hook;
+
+use app::{MultiMonitorPlacement, SessionInput, ViewerApp, ViewerEvent};
+use diagnostics::{SessionDiagnostics, SessionState};
+use monitor_layout::{enumerate_local_monitors, select_monitors};
+
+const DEFAULT_WIDTH: u16 = 1_600;
+const DEFAULT_HEIGHT: u16 = 900;
+const MAX_RECONNECT_ATTEMPTS: u8 = 3;
+
+#[derive(Debug, Default)]
+struct ReconnectPolicy {
+    attempts: u8,
+}
+
+impl ReconnectPolicy {
+    fn next_delay(&mut self) -> Option<Duration> {
+        if self.attempts >= MAX_RECONNECT_ATTEMPTS {
+            return None;
+        }
+        let delay = Duration::from_secs(1_u64 << self.attempts);
+        self.attempts += 1;
+        Some(delay)
+    }
+}
+
+#[derive(Debug, PartialEq, Eq)]
+struct Args {
+    target: String,
+    username: String,
+    width: u16,
+    height: u16,
+    use_multimon: bool,
+    monitor_indices: Vec<u8>,
+    fullscreen: bool,
+    redirect_clipboard: bool,
+    session_id: Option<String>,
+    certificate_sha256: Option<[u8; 32]>,
+    credential_ref: Option<CredentialRef>,
+}
+
+fn main() -> ExitCode {
+    match run() {
+        Ok(()) => ExitCode::SUCCESS,
+        Err(error) => {
+            eprintln!("RemoteDesk native RDP session failed: {error}");
+            ExitCode::FAILURE
+        }
+    }
+}
+
+fn run() -> anyhow::Result<()> {
+    // The patched IronRDP TLS backend disables rustls' implicit provider.
+    tokio_rustls::rustls::crypto::aws_lc_rs::default_provider()
+        .install_default()
+        .map_err(|_| anyhow::anyhow!("unable to install the rustls AWS-LC crypto provider"))?;
+    let args = load_args(env::args().skip(1).collect()).map_err(anyhow::Error::msg)?;
+    let mut diagnostics = args
+        .session_id
+        .clone()
+        .map(SessionDiagnostics::new)
+        .transpose()
+        .map_err(anyhow::Error::msg)?;
+    let endpoint =
+        RdpEndpoint::parse(&args.target).map_err(|_| anyhow::anyhow!("invalid RDP target"))?;
+    let credential = match args.credential_ref.as_ref() {
+        Some(reference) => match remotedesk_credential_store::load(reference) {
+            Ok(credential) => Some(credential),
+            Err(error) => {
+                if let Some(diagnostics) = diagnostics.as_mut() {
+                    diagnostics.failed("credential_load_failed");
+                }
+                return Err(anyhow::Error::msg(error));
+            }
+        },
+        None => None,
+    };
+    let viewer_args = viewer_args(&endpoint, &args, credential.as_ref());
+    let viewer_config =
+        ViewerConfig::parse_from(viewer_args).context("invalid session configuration")?;
+    drop(credential);
+
+    // `into_config` prompts locally for any missing username/password. The
+    // password is never accepted by this process on argv or through the UI.
+    let mut config = match viewer_config.into_config() {
+        Ok(config) => config,
+        Err(error) => {
+            if let Some(diagnostics) = diagnostics.as_mut() {
+                diagnostics.failed("configuration_failed");
+            }
+            return Err(error).context("credential prompt or session configuration failed");
+        }
+    };
+    if let Some(diagnostics) = diagnostics.as_mut() {
+        diagnostics.set_state(SessionState::Connecting);
+    }
+
+    let event_loop = EventLoop::<ViewerEvent>::with_user_event()
+        .build()
+        .context("unable to create the RDP window event loop")?;
+    let multi_monitor = if args.use_multimon {
+        let layout = match enumerate_local_monitors()
+            .and_then(|layout| select_monitors(layout, &args.monitor_indices))
+        {
+            Ok(layout) => layout,
+            Err(error) => {
+                if let Some(diagnostics) = diagnostics.as_mut() {
+                    diagnostics.failed("multi_monitor_layout_failed");
+                }
+                return Err(anyhow::Error::msg(error));
+            }
+        };
+        config = match config.with_monitor_layout(layout.monitors.clone()) {
+            Ok(config) => config,
+            Err(error) => {
+                if let Some(diagnostics) = diagnostics.as_mut() {
+                    diagnostics.failed("multi_monitor_layout_failed");
+                }
+                return Err(error);
+            }
+        };
+        if let Some(diagnostics) = diagnostics.as_mut() {
+            diagnostics.monitor_layout(layout.monitors.len());
+        }
+        Some(MultiMonitorPlacement {
+            origin: layout.window_origin,
+            size: layout.window_size,
+        })
+    } else {
+        None
+    };
+    let session_event_proxy = event_loop.create_proxy();
+    #[cfg(windows)]
+    {
+        windows_keyboard_hook::register_proxy(session_event_proxy.clone());
+        windows_keyboard_hook::install();
+    }
+    let initial_window_size = PhysicalSize::new(
+        u32::from(config.connector().desktop_size.width),
+        u32::from(config.connector().desktop_size.height),
+    );
+
+    let (placeholder_sender, _placeholder_receiver) = mpsc::unbounded_channel();
+    let session_input = SessionInput::new(placeholder_sender);
+    let mut app = ViewerApp::new(
+        &event_loop,
+        session_input.clone(),
+        event_loop.create_proxy(),
+        initial_window_size,
+        args.fullscreen || args.use_multimon,
+        multi_monitor,
+        diagnostics,
+    )
+    .context("unable to initialize the RDP renderer")?;
+    let runtime = runtime::Builder::new_multi_thread()
+        .enable_all()
+        .build()
+        .context("unable to create the RDP async runtime")?;
+
+    std::thread::spawn(move || {
+        runtime.block_on(supervise_session(
+            config,
+            session_input,
+            session_event_proxy,
+        ));
+    });
+    event_loop
+        .run_app(&mut app)
+        .context("RDP window stopped unexpectedly")?;
+    Ok(())
+}
+
+fn load_args(arguments: Vec<String>) -> Result<Args, String> {
+    if let [option, pipe_name] = arguments.as_slice()
+        && option == "--control-pipe"
+    {
+        let session = receive_secure_pipe_session(pipe_name)
+            .map_err(|error| format!("secure control pipe failed: {error}"))?;
+        let config: RdpViewerLaunchConfig = serde_json::from_slice(session.payload())
+            .map_err(|_| "secure control pipe payload does not match the RDP schema".to_owned())?;
+        let args = args_from_pipe_config(config)?;
+        session
+            .acknowledge()
+            .map_err(|error| format!("secure control pipe acknowledgement failed: {error}"))?;
+        return Ok(args);
+    }
+    parse_args(arguments.into_iter())
+}
+
+fn args_from_pipe_config(config: RdpViewerLaunchConfig) -> Result<Args, String> {
+    if config.schema_version != 2 {
+        return Err("unsupported RDP control pipe schema".to_owned());
+    }
+    RdpEndpoint::parse(&config.target).map_err(|_| "invalid RDP target".to_owned())?;
+    if config.username.len() > 256 || config.username.chars().any(char::is_control) {
+        return Err("invalid Windows username".to_owned());
+    }
+    if config.session_id.is_empty()
+        || config.session_id.len() > 64
+        || !config
+            .session_id
+            .bytes()
+            .all(|byte| byte.is_ascii_alphanumeric() || byte == b'-')
+    {
+        return Err("invalid RDP diagnostics session identifier".to_owned());
+    }
+    let width = parse_dimension(&config.width.to_string())?;
+    let height = parse_dimension(&config.height.to_string())?;
+    let certificate_sha256 = (!config.certificate_sha256.trim().is_empty())
+        .then(|| parse_certificate_sha256(&config.certificate_sha256))
+        .transpose()?;
+    let credential_ref = config
+        .credential_ref
+        .map(CredentialRef::new)
+        .transpose()
+        .map_err(|error| error.to_string())?;
+    Ok(Args {
+        target: config.target,
+        username: config.username,
+        width,
+        height,
+        use_multimon: config.use_multimon,
+        monitor_indices: config.monitor_indices,
+        fullscreen: config.fullscreen,
+        redirect_clipboard: config.redirect_clipboard,
+        session_id: Some(config.session_id),
+        certificate_sha256,
+        credential_ref,
+    })
+}
+
+async fn supervise_session(
+    mut config: ironrdp::client::config::Config,
+    session_input: SessionInput,
+    event_loop_proxy: winit::event_loop::EventLoopProxy<ViewerEvent>,
+) {
+    let mut reconnect = ReconnectPolicy::default();
+    loop {
+        let (output_sender, mut output_receiver) = mpsc::channel::<RdpOutputEvent>(64);
+        let client = RdpClient::new(config.clone(), output_sender);
+        session_input.replace(client.input_sender());
+        let client_run = client.run();
+        tokio::pin!(client_run);
+
+        let mut failure = None;
+        loop {
+            tokio::select! {
+                biased;
+                event = output_receiver.recv() => {
+                    let Some(event) = event else {
+                        break;
+                    };
+                    match event {
+                        RdpOutputEvent::ConnectionFailure(_) | RdpOutputEvent::Terminated(Err(_)) => {
+                            failure = Some(event);
+                            break;
+                        }
+                        RdpOutputEvent::Terminated(Ok(_)) => {
+                            let _ = event_loop_proxy.send_event(ViewerEvent::Rdp(event));
+                            return;
+                        }
+                        RdpOutputEvent::ResizeReconnectStarted { width, height, .. } => {
+                            config.set_desktop_size(width, height);
+                            if event_loop_proxy.send_event(ViewerEvent::Rdp(event)).is_err() {
+                                session_input.send_close();
+                                return;
+                            }
+                        }
+                        _ => {
+                            if event_loop_proxy.send_event(ViewerEvent::Rdp(event)).is_err() {
+                                session_input.send_close();
+                                return;
+                            }
+                        }
+                    }
+                }
+                () = &mut client_run => break,
+            }
+        }
+
+        let Some(delay) = reconnect.next_delay() else {
+            if let Some(event) = failure {
+                let _ = event_loop_proxy.send_event(ViewerEvent::Rdp(event));
+            } else {
+                let _ = event_loop_proxy.send_event(ViewerEvent::ReconnectExhausted);
+            }
+            return;
+        };
+        if event_loop_proxy
+            .send_event(ViewerEvent::ReconnectScheduled {
+                attempt: reconnect.attempts,
+                max_attempts: MAX_RECONNECT_ATTEMPTS,
+                delay_seconds: delay.as_secs(),
+            })
+            .is_err()
+        {
+            return;
+        }
+        tokio::time::sleep(delay).await;
+    }
+}
+
+fn parse_args(mut args: impl Iterator<Item = String>) -> Result<Args, String> {
+    let mut target = None;
+    let mut username = String::new();
+    let mut width = DEFAULT_WIDTH;
+    let mut height = DEFAULT_HEIGHT;
+    let mut use_multimon = false;
+    let mut monitor_indices = Vec::new();
+    let mut fullscreen = false;
+    let mut redirect_clipboard = true;
+    let mut session_id = None;
+    let mut certificate_sha256 = None;
+    let mut credential_ref = None;
+
+    while let Some(argument) = args.next() {
+        match argument.as_str() {
+            "--target" => target = Some(required_value(&mut args, "--target")?),
+            "--username" => username = required_value(&mut args, "--username")?,
+            "--width" => width = parse_dimension(&required_value(&mut args, "--width")?)?,
+            "--height" => height = parse_dimension(&required_value(&mut args, "--height")?)?,
+            "--multimon" => use_multimon = true,
+            "--monitor-index" => {
+                let value = required_value(&mut args, "--monitor-index")?;
+                let index = value
+                    .parse::<u8>()
+                    .map_err(|_| "monitor index is invalid")?;
+                monitor_indices.push(index);
+                use_multimon = true;
+            }
+            "--fullscreen" => fullscreen = true,
+            "--disable-clipboard" => redirect_clipboard = false,
+            "--session-id" => session_id = Some(required_value(&mut args, "--session-id")?),
+            "--credential-ref" => {
+                let value = required_value(&mut args, "--credential-ref")?;
+                credential_ref =
+                    Some(CredentialRef::new(value).map_err(|error| error.to_string())?);
+            }
+            "--certificate-sha256" => {
+                certificate_sha256 = Some(parse_certificate_sha256(&required_value(
+                    &mut args,
+                    "--certificate-sha256",
+                )?)?);
+            }
+            "--help" | "-h" => return Err(usage().to_owned()),
+            _ => return Err("unknown RDP viewer argument".to_owned()),
+        }
+    }
+    if username.len() > 256 || username.chars().any(char::is_control) {
+        return Err("invalid Windows username".to_owned());
+    }
+    Ok(Args {
+        target: target.ok_or_else(|| "--target is required".to_owned())?,
+        username,
+        width,
+        height,
+        use_multimon,
+        monitor_indices,
+        fullscreen,
+        redirect_clipboard,
+        session_id,
+        certificate_sha256,
+        credential_ref,
+    })
+}
+
+fn required_value(args: &mut impl Iterator<Item = String>, option: &str) -> Result<String, String> {
+    args.next()
+        .filter(|value| !value.is_empty() && !value.starts_with("--"))
+        .ok_or_else(|| format!("{option} requires a value"))
+}
+
+fn parse_dimension(value: &str) -> Result<u16, String> {
+    value
+        .parse::<u16>()
+        .ok()
+        .filter(|value| (200..=8_192).contains(value))
+        .ok_or_else(|| "RDP dimensions must be between 200 and 8192".to_owned())
+}
+
+fn parse_certificate_sha256(value: &str) -> Result<[u8; 32], String> {
+    let compact = value
+        .chars()
+        .filter(|character| *character != ':')
+        .collect::<String>();
+    if compact.len() != 64 || !compact.bytes().all(|byte| byte.is_ascii_hexdigit()) {
+        return Err("certificate SHA-256 must contain exactly 64 hexadecimal digits".to_owned());
+    }
+    let mut fingerprint = [0_u8; 32];
+    for (index, byte) in fingerprint.iter_mut().enumerate() {
+        let offset = index * 2;
+        *byte = u8::from_str_radix(&compact[offset..offset + 2], 16)
+            .map_err(|_| "certificate SHA-256 is invalid".to_owned())?;
+    }
+    Ok(fingerprint)
+}
+
+fn usage() -> &'static str {
+    "usage: remotedesk-rdp-viewer --control-pipe <\\\\.\\pipe\\RemoteDesk\\rdp-session>"
+}
+
+fn viewer_args(
+    endpoint: &RdpEndpoint,
+    args: &Args,
+    credential: Option<&RdpCredential>,
+) -> Vec<String> {
+    let mut values = vec![
+        "remotedesk-rdp-viewer".to_owned(),
+        rdp_authority(endpoint),
+        "--desktop-width".to_owned(),
+        args.width.to_string(),
+        "--desktop-height".to_owned(),
+        args.height.to_string(),
+        "--clipboard-type".to_owned(),
+        if args.redirect_clipboard {
+            "enable"
+        } else {
+            "disable"
+        }
+        .to_owned(),
+    ];
+    let account = credential.map_or(args.username.as_str(), RdpCredential::account);
+    if !account.is_empty() {
+        let (domain, username) = split_domain_username(account);
+        values.extend(["--username".to_owned(), username.to_owned()]);
+        if let Some(domain) = domain {
+            values.extend(["--domain".to_owned(), domain.to_owned()]);
+        }
+    }
+    if let Some(credential) = credential {
+        values.extend(["--password".to_owned(), credential.password().to_owned()]);
+    }
+    values
+}
+
+fn rdp_authority(endpoint: &RdpEndpoint) -> String {
+    let host = if endpoint.host().contains(':') {
+        format!("[{}]", endpoint.host())
+    } else {
+        endpoint.host().to_owned()
+    };
+    if endpoint.port() == DEFAULT_RDP_PORT {
+        host
+    } else {
+        format!("{host}:{}", endpoint.port())
+    }
+}
+
+fn split_domain_username(username: &str) -> (Option<&str>, &str) {
+    username
+        .split_once('\\')
+        .map_or((None, username), |(domain, name)| (Some(domain), name))
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[cfg(windows)]
+    use remotedesk_client_core::{
+        PIPE_BOOTSTRAP_KEY_ENV, SecurePipeServer, current_process_identity,
+    };
+
+    fn strings<'a>(values: &'a [&'a str]) -> impl Iterator<Item = String> + 'a {
+        values.iter().map(|value| (*value).to_owned())
+    }
+
+    #[test]
+    fn parser_accepts_only_non_secret_session_options() {
+        let args = parse_args(strings(&[
+            "--target",
+            "desktop.example.test:3390",
+            "--username",
+            "DOMAIN\\zoe",
+            "--width",
+            "1920",
+            "--height",
+            "1080",
+        ]))
+        .unwrap();
+        assert_eq!(args.target, "desktop.example.test:3390");
+        assert_eq!(args.username, "DOMAIN\\zoe");
+        assert_eq!((args.width, args.height), (1920, 1080));
+        assert!(!args.use_multimon);
+        assert!(!args.fullscreen);
+        assert!(args.redirect_clipboard);
+        assert!(args.credential_ref.is_none());
+
+        assert!(parse_args(strings(&["--target", "host", "--password", "secret"])).is_err());
+    }
+
+    #[test]
+    fn secure_pipe_config_is_strictly_validated() {
+        let config = RdpViewerLaunchConfig {
+            schema_version: 2,
+            target: "desktop.example.test:3390".to_owned(),
+            username: "DOMAIN\\zoe".to_owned(),
+            width: 1_920,
+            height: 1_080,
+            use_multimon: true,
+            monitor_indices: vec![],
+            fullscreen: true,
+            redirect_clipboard: false,
+            session_id: "10-20-30".to_owned(),
+            certificate_sha256: "ab".repeat(32),
+            credential_ref: Some("RemoteDesk/RDP/profile-42".to_owned()),
+        };
+        let args = args_from_pipe_config(config).unwrap();
+        assert_eq!(args.target, "desktop.example.test:3390");
+        assert_eq!(args.certificate_sha256, Some([0xab; 32]));
+        assert_eq!(
+            args.credential_ref.as_ref().map(CredentialRef::target),
+            Some("RemoteDesk/RDP/profile-42")
+        );
+        assert!(args.fullscreen);
+        assert!(args.use_multimon);
+        assert!(!args.redirect_clipboard);
+    }
+
+    #[cfg(windows)]
+    #[test]
+    fn invalid_secure_pipe_config_is_not_acknowledged() {
+        let session_id = format!("viewer-test-{}", std::process::id());
+        let (server, bootstrap) = SecurePipeServer::create(&session_id).unwrap();
+        let pipe_name = bootstrap.pipe_name().to_owned();
+        let bootstrap_key = bootstrap.encoded_key().to_owned();
+        let expected = current_process_identity().unwrap();
+        let client = std::thread::spawn(move || {
+            // SAFETY: this test sets the one-time environment value before the
+            // helper code reads and removes it, and creates no other worker.
+            unsafe { std::env::set_var(PIPE_BOOTSTRAP_KEY_ENV, bootstrap_key) };
+            load_args(vec!["--control-pipe".to_owned(), pipe_name])
+        });
+
+        let payload = br#"{"schema_version":1,"unexpected":true}"#;
+        let error = server
+            .authenticate_and_send(expected, payload, Duration::from_secs(2))
+            .unwrap_err();
+        assert!(client.join().unwrap().is_err());
+        assert!(matches!(
+            error.kind(),
+            std::io::ErrorKind::UnexpectedEof
+                | std::io::ErrorKind::BrokenPipe
+                | std::io::ErrorKind::ConnectionReset
+                | std::io::ErrorKind::TimedOut
+        ));
+    }
+
+    #[test]
+    fn viewer_arguments_never_contain_a_password_option() {
+        let endpoint = RdpEndpoint::parse("[2001:db8::5]:3390").unwrap();
+        let args = Args {
+            target: "ignored".to_owned(),
+            username: "DOMAIN\\zoe".to_owned(),
+            width: 2_560,
+            height: 1_440,
+            use_multimon: false,
+            monitor_indices: vec![],
+            fullscreen: false,
+            redirect_clipboard: true,
+            session_id: None,
+            certificate_sha256: None,
+            credential_ref: None,
+        };
+        let values = viewer_args(&endpoint, &args, None);
+
+        assert_eq!(values[1], "[2001:db8::5]:3390");
+        assert!(values.windows(2).any(|pair| pair == ["--domain", "DOMAIN"]));
+        assert!(values.windows(2).any(|pair| pair == ["--username", "zoe"]));
+        assert!(
+            values
+                .windows(2)
+                .any(|pair| pair == ["--clipboard-type", "enable"])
+        );
+        assert!(!values.iter().any(|value| value.contains("password")));
+    }
+
+    #[test]
+    fn dimensions_are_bounded() {
+        assert_eq!(parse_dimension("200"), Ok(200));
+        assert_eq!(parse_dimension("8192"), Ok(8192));
+        assert!(parse_dimension("199").is_err());
+        assert!(parse_dimension("8193").is_err());
+        assert!(parse_dimension("full").is_err());
+    }
+
+    #[test]
+    fn fullscreen_is_an_explicit_non_secret_flag() {
+        let args = parse_args(strings(&["--target", "host", "--fullscreen"])).unwrap();
+        assert!(args.fullscreen);
+        assert!(args.session_id.is_none());
+    }
+
+    #[test]
+    fn clipboard_redirection_can_be_disabled_explicitly() {
+        let args = parse_args(strings(&["--target", "host", "--disable-clipboard"])).unwrap();
+        assert!(!args.redirect_clipboard);
+        let endpoint = RdpEndpoint::parse("host").unwrap();
+        let values = viewer_args(&endpoint, &args, None);
+        assert!(
+            values
+                .windows(2)
+                .any(|pair| pair == ["--clipboard-type", "disable"])
+        );
+    }
+
+    #[test]
+    fn diagnostics_identifier_is_an_internal_non_secret_option() {
+        let args = parse_args(strings(&["--target", "host", "--session-id", "10-20-30"])).unwrap();
+        assert_eq!(args.session_id.as_deref(), Some("10-20-30"));
+    }
+
+    #[test]
+    fn credential_reference_is_validated_and_remains_non_secret() {
+        let args = parse_args(strings(&[
+            "--target",
+            "host",
+            "--credential-ref",
+            "RemoteDesk/RDP/profile-42",
+        ]))
+        .unwrap();
+        assert_eq!(
+            args.credential_ref.as_ref().map(CredentialRef::target),
+            Some("RemoteDesk/RDP/profile-42")
+        );
+        assert!(
+            parse_args(strings(&[
+                "--target",
+                "host",
+                "--credential-ref",
+                "TERMSRV/host"
+            ]))
+            .is_err()
+        );
+    }
+
+    #[test]
+    fn certificate_fingerprint_accepts_plain_or_colon_hex() {
+        assert_eq!(parse_certificate_sha256(&"ab".repeat(32)), Ok([0xab; 32]));
+        assert_eq!(
+            parse_certificate_sha256(&["ab"; 32].join(":")),
+            Ok([0xab; 32])
+        );
+        assert!(parse_certificate_sha256("ab").is_err());
+        assert!(parse_certificate_sha256(&"zz".repeat(32)).is_err());
+    }
+
+    #[test]
+    fn reconnect_policy_is_bounded_and_exponential() {
+        let mut policy = ReconnectPolicy::default();
+        assert_eq!(policy.next_delay(), Some(Duration::from_secs(1)));
+        assert_eq!(policy.next_delay(), Some(Duration::from_secs(2)));
+        assert_eq!(policy.next_delay(), Some(Duration::from_secs(4)));
+        assert_eq!(policy.next_delay(), None);
+        assert_eq!(policy.attempts, MAX_RECONNECT_ATTEMPTS);
+    }
+}
diff --git a/client/helpers/rdp-viewer/src/monitor_layout.rs b/client/helpers/rdp-viewer/src/monitor_layout.rs
new file mode 100644
index 0000000..a9c9947
--- /dev/null
+++ b/client/helpers/rdp-viewer/src/monitor_layout.rs
@@ -0,0 +1,337 @@
+use ironrdp::client::config::MonitorLayoutEntry;
+use winit::dpi::{PhysicalPosition, PhysicalSize};
+
+const MAX_RDP_MONITORS: usize = 16;
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+struct RawMonitor {
+    left: i32,
+    top: i32,
+    right: i32,
+    bottom: i32,
+    primary: bool,
+}
+
+#[derive(Debug, Clone)]
+pub struct LocalMonitorLayout {
+    pub monitors: Vec<MonitorLayoutEntry>,
+    pub window_origin: PhysicalPosition<i32>,
+    pub window_size: PhysicalSize<u32>,
+}
+
+pub fn enumerate_local_monitors() -> Result<LocalMonitorLayout, String> {
+    enumerate_platform_monitors().and_then(normalize_monitor_layout)
+}
+
+pub fn select_monitors(
+    layout: LocalMonitorLayout,
+    indices: &[u8],
+) -> Result<LocalMonitorLayout, String> {
+    if indices.is_empty() {
+        return Ok(layout);
+    }
+    if indices.len() < 2 || indices.len() > MAX_RDP_MONITORS {
+        return Err("custom RDP monitor selection requires between 2 and 16 displays".to_owned());
+    }
+    let mut selected = Vec::with_capacity(indices.len());
+    for &index in indices {
+        let monitor = layout
+            .monitors
+            .get(usize::from(index))
+            .ok_or_else(|| "custom RDP monitor index is out of range".to_owned())?;
+        if selected
+            .iter()
+            .any(|entry: &MonitorLayoutEntry| entry == monitor)
+        {
+            return Err("custom RDP monitor selection contains duplicates".to_owned());
+        }
+        selected.push(monitor.clone());
+    }
+    if !selected.iter().any(|monitor| monitor.is_primary) {
+        return Err("custom RDP monitor selection must include the primary display".to_owned());
+    }
+    let left = selected
+        .iter()
+        .map(|monitor| monitor.left)
+        .min()
+        .unwrap_or(0);
+    let top = selected
+        .iter()
+        .map(|monitor| monitor.top)
+        .min()
+        .unwrap_or(0);
+    let original_left = layout
+        .monitors
+        .iter()
+        .map(|monitor| monitor.left)
+        .min()
+        .unwrap_or(0);
+    let original_top = layout
+        .monitors
+        .iter()
+        .map(|monitor| monitor.top)
+        .min()
+        .unwrap_or(0);
+    let right = selected
+        .iter()
+        .map(|monitor| {
+            monitor
+                .left
+                .saturating_add(i32::try_from(monitor.width).unwrap_or(i32::MAX))
+        })
+        .max()
+        .unwrap_or(0);
+    let bottom = selected
+        .iter()
+        .map(|monitor| {
+            monitor
+                .top
+                .saturating_add(i32::try_from(monitor.height).unwrap_or(i32::MAX))
+        })
+        .max()
+        .unwrap_or(0);
+    let width = u32::try_from(i64::from(right) - i64::from(left))
+        .map_err(|_| "custom RDP monitor bounds are invalid".to_owned())?;
+    let height = u32::try_from(i64::from(bottom) - i64::from(top))
+        .map_err(|_| "custom RDP monitor bounds are invalid".to_owned())?;
+    Ok(LocalMonitorLayout {
+        monitors: selected,
+        window_origin: PhysicalPosition::new(
+            layout
+                .window_origin
+                .x
+                .saturating_add(left)
+                .saturating_sub(original_left),
+            layout
+                .window_origin
+                .y
+                .saturating_add(top)
+                .saturating_sub(original_top),
+        ),
+        window_size: PhysicalSize::new(width, height),
+    })
+}
+
+fn normalize_monitor_layout(raw: Vec<RawMonitor>) -> Result<LocalMonitorLayout, String> {
+    if !(2..=MAX_RDP_MONITORS).contains(&raw.len()) {
+        return Err(
+            "native RDP multi-monitor requires between 2 and 16 active displays".to_owned(),
+        );
+    }
+    let mut primaries = raw.iter().filter(|monitor| monitor.primary);
+    let primary = primaries
+        .next()
+        .ok_or_else(|| "Windows did not report a primary display".to_owned())?;
+    if primaries.next().is_some() {
+        return Err("Windows reported more than one primary display".to_owned());
+    }
+    let primary_left = primary.left;
+    let primary_top = primary.top;
+
+    let window_left = raw.iter().map(|monitor| monitor.left).min().unwrap_or(0);
+    let window_top = raw.iter().map(|monitor| monitor.top).min().unwrap_or(0);
+    let window_right = raw.iter().map(|monitor| monitor.right).max().unwrap_or(0);
+    let window_bottom = raw.iter().map(|monitor| monitor.bottom).max().unwrap_or(0);
+    let window_width = u32::try_from(i64::from(window_right) - i64::from(window_left))
+        .map_err(|_| "the Windows virtual desktop width is invalid".to_owned())?;
+    let window_height = u32::try_from(i64::from(window_bottom) - i64::from(window_top))
+        .map_err(|_| "the Windows virtual desktop height is invalid".to_owned())?;
+
+    let mut monitors = Vec::with_capacity(raw.len());
+    for monitor in raw {
+        let raw_width = u32::try_from(i64::from(monitor.right) - i64::from(monitor.left))
+            .map_err(|_| "Windows reported an invalid monitor width".to_owned())?;
+        let height = u32::try_from(i64::from(monitor.bottom) - i64::from(monitor.top))
+            .map_err(|_| "Windows reported an invalid monitor height".to_owned())?;
+        let width = raw_width & !1;
+        if !(200..=8_192).contains(&width) || !(200..=8_192).contains(&height) {
+            return Err("each RDP monitor must be between 200 and 8192 pixels".to_owned());
+        }
+        let left = i32::try_from(i64::from(monitor.left) - i64::from(primary_left))
+            .map_err(|_| "monitor X coordinate exceeds the RDP layout limit".to_owned())?;
+        let top = i32::try_from(i64::from(monitor.top) - i64::from(primary_top))
+            .map_err(|_| "monitor Y coordinate exceeds the RDP layout limit".to_owned())?;
+        monitors.push(MonitorLayoutEntry {
+            left,
+            top,
+            width,
+            height,
+            scale_factor: 100,
+            is_primary: monitor.primary,
+        });
+    }
+    monitors.sort_by_key(|monitor| !monitor.is_primary);
+
+    Ok(LocalMonitorLayout {
+        monitors,
+        window_origin: PhysicalPosition::new(window_left, window_top),
+        window_size: PhysicalSize::new(window_width, window_height),
+    })
+}
+
+#[cfg(windows)]
+fn enumerate_platform_monitors() -> Result<Vec<RawMonitor>, String> {
+    use std::mem;
+    use windows::Win32::Foundation::{LPARAM, RECT};
+    use windows::Win32::Graphics::Gdi::{
+        EnumDisplayMonitors, GetMonitorInfoW, HDC, HMONITOR, MONITORINFO,
+    };
+    use windows::core::BOOL;
+
+    #[derive(Default)]
+    struct Enumeration {
+        monitors: Vec<RawMonitor>,
+        error: Option<String>,
+    }
+
+    unsafe extern "system" fn callback(
+        monitor: HMONITOR,
+        _device_context: HDC,
+        _rect: *mut RECT,
+        data: LPARAM,
+    ) -> BOOL {
+        // SAFETY: EnumDisplayMonitors invokes the callback synchronously while
+        // `data` points to the live Enumeration value below.
+        let enumeration = unsafe { &mut *(data.0 as *mut Enumeration) };
+        let mut info = MONITORINFO {
+            cbSize: u32::try_from(mem::size_of::<MONITORINFO>())
+                .expect("MONITORINFO size fits u32"),
+            ..MONITORINFO::default()
+        };
+        // SAFETY: `info` is initialized with the required cbSize and remains
+        // valid for the duration of this Win32 call.
+        if !unsafe { GetMonitorInfoW(monitor, &mut info) }.as_bool() {
+            enumeration.error = Some(format!(
+                "unable to read Windows monitor geometry: {}",
+                std::io::Error::last_os_error()
+            ));
+            return false.into();
+        }
+        enumeration.monitors.push(RawMonitor {
+            left: info.rcMonitor.left,
+            top: info.rcMonitor.top,
+            right: info.rcMonitor.right,
+            bottom: info.rcMonitor.bottom,
+            primary: info.dwFlags & 1 != 0,
+        });
+        true.into()
+    }
+
+    let mut enumeration = Enumeration::default();
+    // SAFETY: the callback is synchronous and receives an exclusive pointer
+    // to `enumeration`; no device context or clipping rectangle is required.
+    let completed = unsafe {
+        EnumDisplayMonitors(
+            None,
+            None,
+            Some(callback),
+            LPARAM((&mut enumeration as *mut Enumeration) as isize),
+        )
+    };
+    if let Some(error) = enumeration.error {
+        return Err(error);
+    }
+    if !completed.as_bool() {
+        return Err(format!(
+            "unable to enumerate Windows monitors: {}",
+            std::io::Error::last_os_error()
+        ));
+    }
+    Ok(enumeration.monitors)
+}
+
+#[cfg(not(windows))]
+fn enumerate_platform_monitors() -> Result<Vec<RawMonitor>, String> {
+    Err("native RDP multi-monitor is only available on Windows".to_owned())
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn windows_geometry_is_normalized_relative_to_the_primary_monitor() {
+        let layout = normalize_monitor_layout(vec![
+            RawMonitor {
+                left: -2_560,
+                top: 0,
+                right: 0,
+                bottom: 1_440,
+                primary: false,
+            },
+            RawMonitor {
+                left: 0,
+                top: 0,
+                right: 1_920,
+                bottom: 1_080,
+                primary: true,
+            },
+        ])
+        .unwrap();
+
+        assert!(layout.monitors[0].is_primary);
+        assert_eq!((layout.monitors[0].left, layout.monitors[0].top), (0, 0));
+        assert_eq!(
+            (layout.monitors[1].left, layout.monitors[1].top),
+            (-2_560, 0)
+        );
+        assert_eq!(layout.window_origin, PhysicalPosition::new(-2_560, 0));
+        assert_eq!(layout.window_size, PhysicalSize::new(4_480, 1_440));
+    }
+
+    #[test]
+    fn invalid_primary_and_monitor_counts_are_rejected() {
+        let only = RawMonitor {
+            left: 0,
+            top: 0,
+            right: 1_920,
+            bottom: 1_080,
+            primary: true,
+        };
+        assert!(normalize_monitor_layout(vec![only]).is_err());
+        assert!(
+            normalize_monitor_layout(vec![
+                only,
+                RawMonitor {
+                    primary: true,
+                    ..only
+                }
+            ])
+            .is_err()
+        );
+    }
+
+    #[test]
+    fn custom_selection_keeps_primary_and_recomputes_bounds() {
+        let layout = normalize_monitor_layout(vec![
+            RawMonitor {
+                left: 0,
+                top: 0,
+                right: 1_920,
+                bottom: 1_080,
+                primary: true,
+            },
+            RawMonitor {
+                left: 1_920,
+                top: 0,
+                right: 3_840,
+                bottom: 1_080,
+                primary: false,
+            },
+            RawMonitor {
+                left: -1_280,
+                top: 0,
+                right: 0,
+                bottom: 1_024,
+                primary: false,
+            },
+        ])
+        .unwrap();
+        let selected = select_monitors(layout, &[0, 1]).unwrap();
+        assert_eq!(selected.monitors.len(), 2);
+        assert_eq!(selected.window_origin, PhysicalPosition::new(0, 0));
+        assert_eq!(selected.window_size, PhysicalSize::new(3_840, 1_080));
+        assert!(select_monitors(selected.clone(), &[1, 2]).is_err());
+        assert!(select_monitors(selected, &[0, 0]).is_err());
+    }
+}
diff --git a/client/helpers/rdp-viewer/src/renderer.rs b/client/helpers/rdp-viewer/src/renderer.rs
new file mode 100644
index 0000000..de1d261
--- /dev/null
+++ b/client/helpers/rdp-viewer/src/renderer.rs
@@ -0,0 +1,464 @@
+use core::num::NonZeroU32;
+use std::sync::Arc;
+
+use ironrdp::client::rdp::DirtyRegion;
+use winit::event_loop::{EventLoop, OwnedDisplayHandle};
+use winit::window::Window;
+
+use crate::app::ViewerEvent;
+
+pub struct RendererContext {
+    software: softbuffer::Context<OwnedDisplayHandle>,
+}
+
+impl RendererContext {
+    pub fn new(event_loop: &EventLoop<ViewerEvent>) -> anyhow::Result<Self> {
+        let software = softbuffer::Context::new(event_loop.owned_display_handle())
+            .map_err(|error| anyhow::anyhow!("unable to initialize software renderer: {error}"))?;
+        Ok(Self { software })
+    }
+
+    pub fn create_surface(&self, window: Arc<Window>) -> anyhow::Result<WindowSurface> {
+        #[cfg(windows)]
+        if let Ok(renderer) = D3d11Renderer::new(&window) {
+            return Ok(WindowSurface {
+                window,
+                renderer: Renderer::D3d11(renderer),
+            });
+        }
+
+        let surface = softbuffer::Surface::new(&self.software, Arc::clone(&window))
+            .map_err(|error| anyhow::anyhow!("unable to create software surface: {error}"))?;
+        Ok(WindowSurface {
+            window,
+            renderer: Renderer::Software(surface),
+        })
+    }
+}
+
+pub struct WindowSurface {
+    pub window: Arc<Window>,
+    renderer: Renderer,
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub struct PresentStats {
+    pub upload_mode: &'static str,
+    pub uploaded_pixels: u64,
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+struct UploadRegion {
+    left: u32,
+    top: u32,
+    right: u32,
+    bottom: u32,
+}
+
+impl UploadRegion {
+    fn full(width: u32, height: u32) -> Self {
+        Self {
+            left: 0,
+            top: 0,
+            right: width,
+            bottom: height,
+        }
+    }
+
+    fn pixel_count(self) -> u64 {
+        u64::from(self.right - self.left) * u64::from(self.bottom - self.top)
+    }
+
+    fn is_full(self, width: u32, height: u32) -> bool {
+        self == Self::full(width, height)
+    }
+}
+
+fn upload_region(dirty: DirtyRegion, width: u32, height: u32) -> UploadRegion {
+    if width == 0
+        || height == 0
+        || u32::from(dirty.left) >= width
+        || u32::from(dirty.top) >= height
+        || dirty.right < dirty.left
+        || dirty.bottom < dirty.top
+    {
+        return UploadRegion::full(width, height);
+    }
+    UploadRegion {
+        left: u32::from(dirty.left),
+        top: u32::from(dirty.top),
+        right: u32::from(dirty.right).min(width - 1) + 1,
+        bottom: u32::from(dirty.bottom).min(height - 1) + 1,
+    }
+}
+
+impl WindowSurface {
+    pub fn resize(&mut self, width: u16, height: u16) -> anyhow::Result<()> {
+        match &mut self.renderer {
+            Renderer::Software(surface) => surface
+                .resize(
+                    NonZeroU32::new(u32::from(width)).expect("RDP width is non-zero"),
+                    NonZeroU32::new(u32::from(height)).expect("RDP height is non-zero"),
+                )
+                .map_err(|error| anyhow::anyhow!("unable to resize software surface: {error}")),
+            #[cfg(windows)]
+            Renderer::D3d11(renderer) => renderer.resize(u32::from(width), u32::from(height)),
+        }
+    }
+
+    pub fn present(
+        &mut self,
+        pixels: &[u32],
+        width: u16,
+        height: u16,
+        dirty_region: Option<DirtyRegion>,
+    ) -> anyhow::Result<PresentStats> {
+        match &mut self.renderer {
+            Renderer::Software(surface) => {
+                let mut buffer = surface.buffer_mut().map_err(|error| {
+                    anyhow::anyhow!("unable to acquire software buffer: {error}")
+                })?;
+                buffer.copy_from_slice(pixels);
+                buffer.present().map_err(|error| {
+                    anyhow::anyhow!("unable to present software frame: {error}")
+                })?;
+                Ok(PresentStats {
+                    upload_mode: "full_frame",
+                    uploaded_pixels: u64::from(width) * u64::from(height),
+                })
+            }
+            #[cfg(windows)]
+            Renderer::D3d11(renderer) => renderer.present(pixels, width, height, dirty_region),
+        }
+    }
+
+    pub fn name(&self) -> &'static str {
+        match self.renderer {
+            Renderer::Software(_) => "software framebuffer",
+            #[cfg(windows)]
+            Renderer::D3d11(_) => "D3D11 CPU upload",
+        }
+    }
+}
+
+enum Renderer {
+    Software(softbuffer::Surface<OwnedDisplayHandle, Arc<Window>>),
+    #[cfg(windows)]
+    D3d11(D3d11Renderer),
+}
+
+#[cfg(windows)]
+struct D3d11Renderer {
+    device: windows::Win32::Graphics::Direct3D11::ID3D11Device,
+    context: windows::Win32::Graphics::Direct3D11::ID3D11DeviceContext,
+    swap_chain: windows::Win32::Graphics::Dxgi::IDXGISwapChain,
+    back_buffer: Option<windows::Win32::Graphics::Direct3D11::ID3D11Texture2D>,
+    frame_texture: Option<windows::Win32::Graphics::Direct3D11::ID3D11Texture2D>,
+    size: (u32, u32),
+    needs_full_upload: bool,
+}
+
+#[cfg(windows)]
+impl D3d11Renderer {
+    fn new(window: &Window) -> anyhow::Result<Self> {
+        use raw_window_handle::{HasWindowHandle as _, RawWindowHandle};
+        use windows::Win32::Foundation::{HMODULE, HWND};
+        use windows::Win32::Graphics::Direct3D::{
+            D3D_DRIVER_TYPE_HARDWARE, D3D_FEATURE_LEVEL_11_0, D3D_FEATURE_LEVEL_11_1,
+            D3D_FEATURE_LEVEL_12_0, D3D_FEATURE_LEVEL_12_1,
+        };
+        use windows::Win32::Graphics::Direct3D11::{
+            D3D11_CREATE_DEVICE_BGRA_SUPPORT, D3D11_SDK_VERSION, D3D11CreateDeviceAndSwapChain,
+            ID3D11Device, ID3D11DeviceContext,
+        };
+        use windows::Win32::Graphics::Dxgi::Common::{
+            DXGI_FORMAT_B8G8R8A8_UNORM, DXGI_MODE_DESC, DXGI_RATIONAL, DXGI_SAMPLE_DESC,
+        };
+        use windows::Win32::Graphics::Dxgi::{
+            DXGI_SWAP_CHAIN_DESC, DXGI_SWAP_EFFECT_DISCARD, DXGI_USAGE_RENDER_TARGET_OUTPUT,
+            IDXGISwapChain,
+        };
+
+        let RawWindowHandle::Win32(handle) = window
+            .window_handle()
+            .map_err(|error| anyhow::anyhow!("unable to obtain window handle: {error}"))?
+            .as_raw()
+        else {
+            anyhow::bail!("D3D11 rendering requires a Win32 window");
+        };
+        let hwnd = HWND(handle.hwnd.get() as *mut core::ffi::c_void);
+        let size = window.inner_size();
+        let width = size.width.max(1);
+        let height = size.height.max(1);
+        let descriptor = DXGI_SWAP_CHAIN_DESC {
+            BufferDesc: DXGI_MODE_DESC {
+                Width: width,
+                Height: height,
+                RefreshRate: DXGI_RATIONAL {
+                    Numerator: 0,
+                    Denominator: 1,
+                },
+                Format: DXGI_FORMAT_B8G8R8A8_UNORM,
+                ..Default::default()
+            },
+            SampleDesc: DXGI_SAMPLE_DESC {
+                Count: 1,
+                Quality: 0,
+            },
+            BufferUsage: DXGI_USAGE_RENDER_TARGET_OUTPUT,
+            BufferCount: 2,
+            OutputWindow: hwnd,
+            Windowed: true.into(),
+            SwapEffect: DXGI_SWAP_EFFECT_DISCARD,
+            Flags: 0,
+        };
+        let levels = [
+            D3D_FEATURE_LEVEL_12_1,
+            D3D_FEATURE_LEVEL_12_0,
+            D3D_FEATURE_LEVEL_11_1,
+            D3D_FEATURE_LEVEL_11_0,
+        ];
+        let mut swap_chain: Option<IDXGISwapChain> = None;
+        let mut device: Option<ID3D11Device> = None;
+        let mut context: Option<ID3D11DeviceContext> = None;
+        unsafe {
+            D3D11CreateDeviceAndSwapChain(
+                None,
+                D3D_DRIVER_TYPE_HARDWARE,
+                HMODULE::default(),
+                D3D11_CREATE_DEVICE_BGRA_SUPPORT,
+                Some(&levels),
+                D3D11_SDK_VERSION,
+                Some(&raw const descriptor),
+                Some(&raw mut swap_chain),
+                Some(&raw mut device),
+                None,
+                Some(&raw mut context),
+            )
+        }
+        .map_err(|error| anyhow::anyhow!("unable to create D3D11 swap chain: {error}"))?;
+        let swap_chain =
+            swap_chain.ok_or_else(|| anyhow::anyhow!("D3D11 returned no swap chain"))?;
+        let device = device.ok_or_else(|| anyhow::anyhow!("D3D11 returned no device"))?;
+        let context = context.ok_or_else(|| anyhow::anyhow!("D3D11 returned no context"))?;
+        let back_buffer = Some(unsafe { swap_chain.GetBuffer(0)? });
+        let frame_texture = Some(Self::create_frame_texture(&device, width, height)?);
+        Ok(Self {
+            device,
+            context,
+            swap_chain,
+            back_buffer,
+            frame_texture,
+            size: (width, height),
+            needs_full_upload: true,
+        })
+    }
+
+    fn create_frame_texture(
+        device: &windows::Win32::Graphics::Direct3D11::ID3D11Device,
+        width: u32,
+        height: u32,
+    ) -> anyhow::Result<windows::Win32::Graphics::Direct3D11::ID3D11Texture2D> {
+        use windows::Win32::Graphics::Direct3D11::{
+            D3D11_TEXTURE2D_DESC, D3D11_USAGE_DEFAULT, ID3D11Texture2D,
+        };
+        use windows::Win32::Graphics::Dxgi::Common::{
+            DXGI_FORMAT_B8G8R8A8_UNORM, DXGI_SAMPLE_DESC,
+        };
+
+        let descriptor = D3D11_TEXTURE2D_DESC {
+            Width: width,
+            Height: height,
+            MipLevels: 1,
+            ArraySize: 1,
+            Format: DXGI_FORMAT_B8G8R8A8_UNORM,
+            SampleDesc: DXGI_SAMPLE_DESC {
+                Count: 1,
+                Quality: 0,
+            },
+            Usage: D3D11_USAGE_DEFAULT,
+            BindFlags: 0,
+            CPUAccessFlags: 0,
+            MiscFlags: 0,
+        };
+        let mut texture: Option<ID3D11Texture2D> = None;
+        unsafe {
+            device.CreateTexture2D(&raw const descriptor, None, Some(&raw mut texture))?;
+        }
+        texture.ok_or_else(|| anyhow::anyhow!("D3D11 returned no frame texture"))
+    }
+
+    fn resize(&mut self, width: u32, height: u32) -> anyhow::Result<()> {
+        use windows::Win32::Graphics::Dxgi::Common::DXGI_FORMAT_UNKNOWN;
+        use windows::Win32::Graphics::Dxgi::DXGI_SWAP_CHAIN_FLAG;
+
+        if self.size == (width, height) {
+            return Ok(());
+        }
+        self.back_buffer = None;
+        self.frame_texture = None;
+        unsafe {
+            self.swap_chain.ResizeBuffers(
+                0,
+                width,
+                height,
+                DXGI_FORMAT_UNKNOWN,
+                DXGI_SWAP_CHAIN_FLAG(0),
+            )?;
+            self.back_buffer = Some(self.swap_chain.GetBuffer(0)?);
+        }
+        self.frame_texture = Some(Self::create_frame_texture(&self.device, width, height)?);
+        self.size = (width, height);
+        self.needs_full_upload = true;
+        Ok(())
+    }
+
+    fn present(
+        &mut self,
+        pixels: &[u32],
+        width: u16,
+        height: u16,
+        dirty_region: Option<DirtyRegion>,
+    ) -> anyhow::Result<PresentStats> {
+        use windows::Win32::Graphics::Direct3D11::D3D11_BOX;
+        use windows::Win32::Graphics::Dxgi::DXGI_PRESENT;
+
+        let width = u32::from(width);
+        let height = u32::from(height);
+        self.resize(width, height)?;
+        let expected = usize::try_from(width)
+            .ok()
+            .and_then(|width| {
+                usize::try_from(height)
+                    .ok()
+                    .and_then(|height| width.checked_mul(height))
+            })
+            .ok_or_else(|| anyhow::anyhow!("D3D11 frame dimensions overflow"))?;
+        if pixels.len() != expected {
+            anyhow::bail!("D3D11 frame length does not match its dimensions");
+        }
+        let back_buffer = self
+            .back_buffer
+            .as_ref()
+            .ok_or_else(|| anyhow::anyhow!("D3D11 back buffer is unavailable"))?;
+        let frame_texture = self
+            .frame_texture
+            .as_ref()
+            .ok_or_else(|| anyhow::anyhow!("D3D11 frame texture is unavailable"))?;
+        let region = if self.needs_full_upload {
+            Some(UploadRegion::full(width, height))
+        } else {
+            dirty_region.map(|dirty| upload_region(dirty, width, height))
+        };
+        unsafe {
+            if let Some(region) = region {
+                let source_offset = usize::try_from(region.top)
+                    .ok()
+                    .and_then(|top| {
+                        usize::try_from(width)
+                            .ok()
+                            .and_then(|width| top.checked_mul(width))
+                    })
+                    .and_then(|offset| {
+                        usize::try_from(region.left)
+                            .ok()
+                            .and_then(|left| offset.checked_add(left))
+                    })
+                    .ok_or_else(|| anyhow::anyhow!("D3D11 dirty region offset overflow"))?;
+                let upload_box = D3D11_BOX {
+                    left: region.left,
+                    top: region.top,
+                    front: 0,
+                    right: region.right,
+                    bottom: region.bottom,
+                    back: 1,
+                };
+                self.context.UpdateSubresource(
+                    frame_texture,
+                    0,
+                    Some(&raw const upload_box),
+                    pixels.as_ptr().add(source_offset).cast(),
+                    width * 4,
+                    0,
+                );
+            }
+            self.context.CopyResource(back_buffer, frame_texture);
+            self.swap_chain
+                .Present(1, DXGI_PRESENT(0))
+                .ok()
+                .map_err(|error| anyhow::anyhow!("unable to present D3D11 frame: {error}"))?;
+        }
+        self.needs_full_upload = false;
+        let (upload_mode, uploaded_pixels) = match region {
+            Some(region) if region.is_full(width, height) => ("full_frame", region.pixel_count()),
+            Some(region) => ("dirty_rect", region.pixel_count()),
+            None => ("cached_frame", 0),
+        };
+        Ok(PresentStats {
+            upload_mode,
+            uploaded_pixels,
+        })
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn inclusive_dirty_region_becomes_exclusive_upload_box() {
+        assert_eq!(
+            upload_region(
+                DirtyRegion {
+                    left: 10,
+                    top: 20,
+                    right: 19,
+                    bottom: 29,
+                },
+                100,
+                80,
+            ),
+            UploadRegion {
+                left: 10,
+                top: 20,
+                right: 20,
+                bottom: 30,
+            }
+        );
+    }
+
+    #[test]
+    fn dirty_region_is_clipped_and_invalid_input_falls_back_to_full_frame() {
+        assert_eq!(
+            upload_region(
+                DirtyRegion {
+                    left: 90,
+                    top: 70,
+                    right: 200,
+                    bottom: 200,
+                },
+                100,
+                80,
+            ),
+            UploadRegion {
+                left: 90,
+                top: 70,
+                right: 100,
+                bottom: 80,
+            }
+        );
+        assert_eq!(
+            upload_region(
+                DirtyRegion {
+                    left: 20,
+                    top: 10,
+                    right: 19,
+                    bottom: 11,
+                },
+                100,
+                80,
+            ),
+            UploadRegion::full(100, 80)
+        );
+    }
+}
diff --git a/client/helpers/rdp-viewer/src/windows_keyboard_hook.rs b/client/helpers/rdp-viewer/src/windows_keyboard_hook.rs
new file mode 100644
index 0000000..6522f46
--- /dev/null
+++ b/client/helpers/rdp-viewer/src/windows_keyboard_hook.rs
@@ -0,0 +1,98 @@
+#![cfg(windows)]
+
+use std::sync::OnceLock;
+use std::thread;
+
+use ironrdp::input::Scancode;
+use tracing::warn;
+use windows::Win32::Foundation::{LPARAM, LRESULT, WPARAM};
+use windows::Win32::UI::WindowsAndMessaging::{
+    CallNextHookEx, DispatchMessageW, GetForegroundWindow, GetMessageW, GetWindowThreadProcessId,
+    KBDLLHOOKSTRUCT, LLKHF_EXTENDED, MSG, SetWindowsHookExW, TranslateMessage, UnhookWindowsHookEx,
+    WH_KEYBOARD_LL, WM_KEYDOWN, WM_KEYUP, WM_SYSKEYDOWN, WM_SYSKEYUP,
+};
+use winit::event_loop::EventLoopProxy;
+
+use crate::app::ViewerEvent;
+
+static PROCESS_ID: OnceLock<u32> = OnceLock::new();
+
+pub fn install() {
+    let _ = PROCESS_ID.set(std::process::id());
+    thread::spawn(move || unsafe {
+        let hook = match SetWindowsHookExW(WH_KEYBOARD_LL, Some(callback), None, 0) {
+            Ok(hook) => hook,
+            Err(error) => {
+                warn!(?error, "unable to install Windows keyboard hook");
+                return;
+            }
+        };
+        let mut message = MSG::default();
+        while GetMessageW(&mut message, None, 0, 0).as_bool() {
+            let _ = TranslateMessage(&message);
+            DispatchMessageW(&message);
+        }
+        let _ = UnhookWindowsHookEx(hook);
+    });
+
+    unsafe extern "system" fn callback(code: i32, wparam: WPARAM, lparam: LPARAM) -> LRESULT {
+        if code >= 0 && should_handle() {
+            let data = unsafe { &*(lparam.0 as *const KBDLLHOOKSTRUCT) };
+            let message = wparam.0 as u32;
+            let pressed = matches!(message, WM_KEYDOWN | WM_SYSKEYDOWN);
+            let released = matches!(message, WM_KEYUP | WM_SYSKEYUP);
+            if pressed || released {
+                if let Some(event) = HookState::event(data, pressed) {
+                    if let Some(proxy) = HOOK_PROXY.get() {
+                        let _ = proxy.send_event(event);
+                    }
+                    return LRESULT(1);
+                }
+            }
+        }
+        unsafe { CallNextHookEx(None, code, wparam, lparam) }
+    }
+}
+
+static HOOK_PROXY: OnceLock<EventLoopProxy<ViewerEvent>> = OnceLock::new();
+
+fn should_handle() -> bool {
+    let Some(process_id) = PROCESS_ID.get().copied() else {
+        return false;
+    };
+    let foreground = unsafe { GetForegroundWindow() };
+    if foreground.0.is_null() {
+        return false;
+    }
+    let mut foreground_process = 0;
+    unsafe { GetWindowThreadProcessId(foreground, Some(&mut foreground_process)) };
+    foreground_process == process_id
+}
+
+struct HookState;
+
+impl HookState {
+    fn event(data: &KBDLLHOOKSTRUCT, pressed: bool) -> Option<ViewerEvent> {
+        static LOGO_DOWN: std::sync::atomic::AtomicBool = std::sync::atomic::AtomicBool::new(false);
+        let is_logo = matches!(data.vkCode, 0x5B | 0x5C);
+        let active = LOGO_DOWN.load(std::sync::atomic::Ordering::Relaxed);
+        if !is_logo && !active {
+            return None;
+        }
+        if is_logo {
+            LOGO_DOWN.store(pressed, std::sync::atomic::Ordering::Relaxed);
+        }
+        let mut scancode = data.scanCode as u16;
+        if data.flags.contains(LLKHF_EXTENDED) {
+            scancode |= 0xE000;
+        }
+        Some(ViewerEvent::GlobalKeyboard {
+            scancode: Scancode::from_u16(scancode),
+            pressed,
+        })
+    }
+}
+
+pub fn register_proxy(proxy: EventLoopProxy<ViewerEvent>) {
+    let _ = HOOK_PROXY.set(proxy);
+}
diff --git a/client/helpers/windows-agent-viewer/Cargo.toml b/client/helpers/windows-agent-viewer/Cargo.toml
new file mode 100644
index 0000000..3e0d2d8
--- /dev/null
+++ b/client/helpers/windows-agent-viewer/Cargo.toml
@@ -0,0 +1,19 @@
+[package]
+name = "remotedesk-windows-agent-viewer"
+version.workspace = true
+edition.workspace = true
+license.workspace = true
+rust-version.workspace = true
+
+[dependencies]
+flate2 = "1.1"
+serde = { version = "1.0", features = ["derive"] }
+serde_json = "1.0"
+softbuffer = "0.4"
+winit = "0.30"
+
+[target.'cfg(windows)'.dependencies]
+windows = { version = "0.62.2", features = ["Win32_Foundation", "Win32_UI_WindowsAndMessaging"] }
+
+[lints.rust]
+unsafe_code = "allow"
diff --git a/client/helpers/windows-agent-viewer/src/main.rs b/client/helpers/windows-agent-viewer/src/main.rs
new file mode 100644
index 0000000..3c54de3
--- /dev/null
+++ b/client/helpers/windows-agent-viewer/src/main.rs
@@ -0,0 +1,735 @@
+use flate2::read::ZlibDecoder;
+use serde::Serialize;
+use std::env;
+use std::fs;
+use std::io::{BufRead as _, BufReader, Read as _, Write as _};
+use std::net::{TcpStream, ToSocketAddrs};
+use std::num::NonZeroU32;
+use std::path::PathBuf;
+use std::process::ExitCode;
+use std::sync::Arc;
+use std::time::{Duration, Instant, SystemTime, UNIX_EPOCH};
+use winit::application::ApplicationHandler;
+use winit::dpi::PhysicalSize;
+use winit::event::{ElementState, MouseButton, MouseScrollDelta, WindowEvent};
+use winit::event_loop::{ActiveEventLoop, ControlFlow, EventLoop, OwnedDisplayHandle};
+use winit::keyboard::{Key, KeyCode, ModifiersState, NamedKey, PhysicalKey};
+use winit::window::{Fullscreen, Window, WindowAttributes, WindowId};
+#[cfg(windows)]
+mod windows_keyboard_hook;
+
+const DEFAULT_PORT: u16 = 39_501;
+const MAX_DIMENSION: u32 = 16_384;
+const MAX_RAW_BYTES: usize = 256 * 1024 * 1024;
+const MAX_COMPRESSED_BYTES: usize = 256 * 1024 * 1024;
+
+#[derive(Debug)]
+struct Args {
+    target: String,
+    session_id: String,
+    fps: u8,
+    fullscreen: bool,
+    mode: String,
+    application: Option<String>,
+}
+
+#[derive(Debug)]
+struct Frame {
+    width: u32,
+    height: u32,
+    pixels: Vec<u32>,
+    capture_latency_ms: Option<f64>,
+    encode_latency_ms: Option<f64>,
+    processing_latency_ms: Option<f64>,
+    decode_latency_ms: f64,
+}
+
+enum ViewerEvent {
+    Connected,
+    Frame(Frame),
+    Failed(String),
+}
+
+fn main() -> ExitCode {
+    match run() {
+        Ok(()) => ExitCode::SUCCESS,
+        Err(error) => {
+            eprintln!("Windows Agent viewer failed: {error}");
+            ExitCode::FAILURE
+        }
+    }
+}
+
+fn run() -> Result<(), String> {
+    let args = parse_args(env::args().skip(1))?;
+    let diagnostics = Diagnostics::new(&args.session_id)?;
+    let event_loop = EventLoop::<ViewerEvent>::with_user_event()
+        .build()
+        .map_err(|error| error.to_string())?;
+    let proxy = event_loop.create_proxy();
+    let target = normalize_target(&args.target)?;
+    #[cfg(windows)]
+    windows_keyboard_hook::install(target.clone());
+    let fps = args.fps;
+    let mode = args.mode.clone();
+    let application = args.application.clone();
+    std::thread::Builder::new()
+        .name("windows-agent-rdwf".to_owned())
+        .spawn(move || receive_frames(&target, fps, &mode, application.as_deref(), &proxy))
+        .map_err(|error| error.to_string())?;
+    let mut app = ViewerApp::new(&event_loop, args.fullscreen, diagnostics, args.target.clone())?;
+    event_loop
+        .run_app(&mut app)
+        .map_err(|error| error.to_string())
+}
+
+fn parse_args(mut args: impl Iterator<Item = String>) -> Result<Args, String> {
+    let mut target = None;
+    let mut session_id = None;
+    let mut fps = 10_u8;
+    let mut fullscreen = false;
+    let mut mode = "desktop".to_owned();
+    let mut application = None;
+    while let Some(option) = args.next() {
+        match option.as_str() {
+            "--target" => target = args.next(),
+            "--session-id" => session_id = args.next(),
+            "--fps" => {
+                fps = args
+                    .next()
+                    .and_then(|value| value.parse().ok())
+                    .filter(|value| (1..=15).contains(value))
+                    .ok_or_else(|| "--fps must be between 1 and 15".to_owned())?;
+            }
+            "--fullscreen" => fullscreen = true,
+            "--mode" => mode = args.next().ok_or_else(|| "--mode is required".to_owned())?,
+            "--application" => application = args.next(),
+            _ => return Err(format!("unknown option {option}")),
+        }
+    }
+    let target = target.ok_or_else(|| "--target is required".to_owned())?;
+    let session_id = session_id.filter(|value| {
+        !value.is_empty()
+            && value.len() <= 64
+            && value
+                .bytes()
+                .all(|byte| byte.is_ascii_alphanumeric() || byte == b'-')
+    });
+    Ok(Args {
+        target,
+        session_id: session_id.ok_or_else(|| "--session-id is invalid".to_owned())?,
+        fps,
+        fullscreen,
+        mode: match mode.as_str() {
+            "desktop" | "application" => mode,
+            _ => return Err("--mode must be desktop or application".to_owned()),
+        },
+        application,
+    })
+}
+
+fn normalize_target(target: &str) -> Result<String, String> {
+    if target.is_empty() || target.len() > 512 || target.contains(char::is_whitespace) {
+        return Err("Windows Agent target is invalid".to_owned());
+    }
+    if target.starts_with('[') {
+        return Ok(if target.contains("]: ") || target.contains("]:") {
+            target.to_owned()
+        } else {
+            format!("{target}:{DEFAULT_PORT}")
+        });
+    }
+    if target.matches(':').count() > 1 {
+        return Ok(format!("[{target}]:{DEFAULT_PORT}"));
+    }
+    if target.contains(':') {
+        Ok(target.to_owned())
+    } else {
+        Ok(format!("{target}:{DEFAULT_PORT}"))
+    }
+}
+
+fn receive_frames(
+    target: &str,
+    fps: u8,
+    mode: &str,
+    application: Option<&str>,
+    proxy: &winit::event_loop::EventLoopProxy<ViewerEvent>,
+) {
+    let result = receive_frames_inner(target, fps, mode, application, proxy);
+    if let Err(error) = result {
+        let _ = proxy.send_event(ViewerEvent::Failed(error));
+    }
+}
+
+fn receive_frames_inner(
+    target: &str,
+    fps: u8,
+    mode: &str,
+    application: Option<&str>,
+    proxy: &winit::event_loop::EventLoopProxy<ViewerEvent>,
+) -> Result<(), String> {
+    let started = Instant::now();
+    let stream = TcpStream::connect(target).map_err(|error| format!("连接失败：{error}"))?;
+    stream
+        .set_read_timeout(Some(Duration::from_secs(15)))
+        .map_err(|error| error.to_string())?;
+    stream
+        .set_nodelay(true)
+        .map_err(|error| error.to_string())?;
+    // Keep JSON control messages and the binary RDWF stream on one buffered
+    // reader. This permits read-ahead without losing frame bytes.
+    let mut reader = BufReader::with_capacity(64 * 1024, stream);
+    let hello = read_json_line(&mut reader)?;
+    if hello.get("kind").and_then(serde_json::Value::as_str) != Some("windows_agent_hello") {
+        return Err("目标不是 RemoteDesk Windows Agent".to_owned());
+    }
+    let command = if mode == "application" {
+        let id = application.ok_or_else(|| "应用模式未选择应用".to_owned())?;
+        serde_json::json!({ "kind": "open_application", "application": id, "allow_software_fallback": true, "frames_per_second": fps })
+    } else {
+        serde_json::json!({ "kind": "open_desktop", "allow_software_fallback": true, "frames_per_second": fps })
+    };
+    writeln!(
+        reader.get_mut(),
+        "{}",
+        serde_json::to_string(&command).map_err(|error| error.to_string())?
+    )
+    .map_err(|error| error.to_string())?;
+    let opened = read_json_line(&mut reader)?;
+    if opened.get("kind").and_then(serde_json::Value::as_str) != Some("desktop_opened") {
+        return Err(opened
+            .get("error")
+            .and_then(serde_json::Value::as_str)
+            .unwrap_or("Windows Agent 拒绝桌面会话")
+            .to_owned());
+    }
+    let _network_latency = started.elapsed();
+    proxy
+        .send_event(ViewerEvent::Connected)
+        .map_err(|_| "viewer window closed".to_owned())?;
+    loop {
+        let frame = read_frame(&mut reader)?;
+        proxy
+            .send_event(ViewerEvent::Frame(frame))
+            .map_err(|_| "viewer window closed".to_owned())?;
+    }
+}
+
+fn read_json_line(reader: &mut BufReader<TcpStream>) -> Result<serde_json::Value, String> {
+    let mut line = String::new();
+    reader
+        .read_line(&mut line)
+        .map_err(|error| error.to_string())?;
+    if line.len() > 16 * 1024 || !line.ends_with('\n') {
+        return Err("Windows Agent JSON response is invalid".to_owned());
+    }
+    serde_json::from_str(&line).map_err(|_| "Windows Agent JSON response is invalid".to_owned())
+}
+
+fn read_frame(reader: &mut BufReader<TcpStream>) -> Result<Frame, String> {
+    let mut magic = [0_u8; 4];
+    reader
+        .read_exact(&mut magic)
+        .map_err(|error| format!("远端在 RDWF 帧头处断开：{error}"))?;
+    if &magic == b"RDWE" {
+        let mut length = [0_u8; 4];
+        reader
+            .read_exact(&mut length)
+            .map_err(|error| format!("Agent 错误帧不完整：{error}"))?;
+        let length = u32::from_le_bytes(length) as usize;
+        if length == 0 || length > 16 * 1024 {
+            return Err("Agent 错误帧长度无效".to_owned());
+        }
+        let mut message = vec![0_u8; length];
+        reader
+            .read_exact(&mut message)
+            .map_err(|error| format!("Agent 错误帧不完整：{error}"))?;
+        return Err(format!(
+            "Windows Agent 桌面采集失败：{}",
+            String::from_utf8_lossy(&message)
+        ));
+    }
+    if &magic != b"RDWF" {
+        return Err("RDWF frame header or codec is unsupported".to_owned());
+    }
+    let mut rest = [0_u8; 20];
+    reader
+        .read_exact(&mut rest)
+        .map_err(|error| format!("远端 RDWF 帧头不完整：{error}"))?;
+    let mut base = [0_u8; 24];
+    base[..4].copy_from_slice(&magic);
+    base[4..].copy_from_slice(&rest);
+    if !matches!(base[4], 1 | 2) || base[5] != 1 {
+        return Err("RDWF frame header or codec is unsupported".to_owned());
+    }
+    let version = base[4];
+    let width = u32::from_le_bytes(base[8..12].try_into().expect("fixed slice"));
+    let height = u32::from_le_bytes(base[12..16].try_into().expect("fixed slice"));
+    let raw_len = u32::from_le_bytes(base[16..20].try_into().expect("fixed slice")) as usize;
+    let compressed_len = u32::from_le_bytes(base[20..24].try_into().expect("fixed slice")) as usize;
+    validate_frame_lengths(width, height, raw_len, compressed_len)?;
+    let (capture, encode) = if version == 2 {
+        let mut timing = [0_u8; 16];
+        reader
+            .read_exact(&mut timing)
+            .map_err(|error| format!("远端 RDWF 时序字段不完整：{error}"))?;
+        (
+            Some(micros_ms(u64::from_le_bytes(
+                timing[0..8].try_into().expect("fixed slice"),
+            ))),
+            Some(micros_ms(u64::from_le_bytes(
+                timing[8..16].try_into().expect("fixed slice"),
+            ))),
+        )
+    } else {
+        (None, None)
+    };
+    let processing = capture
+        .zip(encode)
+        .map(|(capture, encode)| capture + encode);
+    let mut compressed = vec![0; compressed_len];
+    reader
+        .read_exact(&mut compressed)
+        .map_err(|error| format!("远端 RDWF 压缩帧不完整：{error}"))?;
+    let decode_started = Instant::now();
+    let mut decoder = ZlibDecoder::new(compressed.as_slice());
+    let mut bgra = Vec::with_capacity(raw_len);
+    decoder
+        .read_to_end(&mut bgra)
+        .map_err(|error| format!("RDWF zlib 解码失败：{error}"))?;
+    if bgra.len() != raw_len {
+        return Err("RDWF decompressed length mismatch".to_owned());
+    }
+    let pixels = bgra
+        .chunks_exact(4)
+        .map(|pixel| u32::from_le_bytes([pixel[0], pixel[1], pixel[2], 0]))
+        .collect();
+    Ok(Frame {
+        width,
+        height,
+        pixels,
+        capture_latency_ms: capture,
+        encode_latency_ms: encode,
+        processing_latency_ms: processing,
+        decode_latency_ms: decode_started.elapsed().as_secs_f64() * 1_000.0,
+    })
+}
+
+fn validate_frame_lengths(
+    width: u32,
+    height: u32,
+    raw_len: usize,
+    compressed_len: usize,
+) -> Result<(), String> {
+    if width == 0 || height == 0 || width > MAX_DIMENSION || height > MAX_DIMENSION {
+        return Err("RDWF dimensions are invalid".to_owned());
+    }
+    let expected = usize::try_from(width)
+        .ok()
+        .and_then(|width| {
+            usize::try_from(height)
+                .ok()
+                .and_then(|height| width.checked_mul(height))
+        })
+        .and_then(|pixels| pixels.checked_mul(4))
+        .ok_or_else(|| "RDWF frame length overflow".to_owned())?;
+    if raw_len != expected
+        || raw_len > MAX_RAW_BYTES
+        || compressed_len == 0
+        || compressed_len > MAX_COMPRESSED_BYTES
+    {
+        return Err("RDWF frame lengths are invalid".to_owned());
+    }
+    Ok(())
+}
+
+fn micros_ms(value: u64) -> f64 {
+    Duration::from_micros(value).as_secs_f64() * 1_000.0
+}
+
+struct ViewerApp {
+    context: softbuffer::Context<OwnedDisplayHandle>,
+    window: Option<Arc<Window>>,
+    surface: Option<softbuffer::Surface<OwnedDisplayHandle, Arc<Window>>>,
+    frame: Option<Frame>,
+    fullscreen: bool,
+    target: String,
+    cursor_position: (i32, i32),
+    modifiers: ModifiersState,
+    control_down: bool,
+    alt_down: bool,
+    diagnostics: Diagnostics,
+}
+
+impl ViewerApp {
+    fn new(
+        event_loop: &EventLoop<ViewerEvent>,
+        fullscreen: bool,
+        diagnostics: Diagnostics,
+        target: String,
+    ) -> Result<Self, String> {
+        Ok(Self {
+            context: softbuffer::Context::new(event_loop.owned_display_handle())
+                .map_err(|error| error.to_string())?,
+            window: None,
+            surface: None,
+            frame: None,
+            fullscreen,
+            target,
+            cursor_position: (0, 0),
+            modifiers: ModifiersState::empty(),
+            control_down: false,
+            alt_down: false,
+            diagnostics,
+        })
+    }
+
+    fn redraw(&mut self) {
+        let (Some(window), Some(surface), Some(frame)) =
+            (&self.window, &mut self.surface, &self.frame)
+        else {
+            return;
+        };
+        let local = window.inner_size();
+        let (Some(width), Some(height)) =
+            (NonZeroU32::new(local.width), NonZeroU32::new(local.height))
+        else {
+            return;
+        };
+        if surface.resize(width, height).is_err() {
+            return;
+        }
+        let started = Instant::now();
+        if let Ok(mut output) = surface.buffer_mut() {
+            output.fill(0);
+            let viewport = (0, 0, local.width.max(1), local.height.max(1));
+            for y in 0..viewport.3 {
+                let source_y = u64::from(y) * u64::from(frame.height) / u64::from(viewport.3);
+                for x in 0..viewport.2 {
+                    let source_x = u64::from(x) * u64::from(frame.width) / u64::from(viewport.2);
+                    let source = usize::try_from(source_y * u64::from(frame.width) + source_x).ok();
+                    let target = usize::try_from(
+                        u64::from(viewport.1 + y) * u64::from(local.width)
+                            + u64::from(viewport.0 + x),
+                    )
+                    .ok();
+                    if let (Some(source), Some(target)) = (source, target)
+                        && let (Some(pixel), Some(destination)) =
+                            (frame.pixels.get(source), output.get_mut(target))
+                    {
+                        *destination = *pixel;
+                    }
+                }
+            }
+            if output.present().is_ok() {
+                self.diagnostics.presented(started.elapsed());
+            }
+        }
+    }
+}
+
+impl ApplicationHandler<ViewerEvent> for ViewerApp {
+    fn resumed(&mut self, event_loop: &ActiveEventLoop) {
+        let attributes = WindowAttributes::default()
+            .with_title("RemoteDesk Windows Agent")
+            .with_inner_size(PhysicalSize::new(1600, 900))
+            .with_fullscreen(
+                self.fullscreen
+                    .then(|| Fullscreen::Borderless(event_loop.primary_monitor())),
+            );
+        match event_loop.create_window(attributes) {
+            Ok(window) => {
+                let window = Arc::new(window);
+                self.surface = softbuffer::Surface::new(&self.context, Arc::clone(&window)).ok();
+                self.window = Some(window);
+            }
+            Err(_) => event_loop.exit(),
+        }
+    }
+
+    fn window_event(&mut self, event_loop: &ActiveEventLoop, id: WindowId, event: WindowEvent) {
+        if self.window.as_ref().is_none_or(|window| window.id() != id) {
+            return;
+        }
+        match event {
+            WindowEvent::CloseRequested => {
+                self.diagnostics.terminated();
+                event_loop.exit();
+            }
+            WindowEvent::Resized(_) => {
+                if let Some(window) = &self.window {
+                    window.request_redraw();
+                }
+            }
+            WindowEvent::RedrawRequested => self.redraw(),
+            WindowEvent::CursorMoved { position, .. } => {
+                if let Some(window) = &self.window {
+                    let size = window.inner_size();
+                    let x = (position.x.max(0.0).min(size.width as f64) * 65535.0 / size.width.max(1) as f64) as i32;
+                    let y = (position.y.max(0.0).min(size.height as f64) * 65535.0 / size.height.max(1) as f64) as i32;
+                    self.cursor_position = (x, y);
+                    send_input(&self.target, serde_json::json!({"kind":"input","input_type":"mouse","x":x,"y":y}));
+                }
+            }
+            WindowEvent::MouseInput { state, button, .. } => {
+                let action = match (button, state) {
+                    (MouseButton::Left, ElementState::Pressed) => "left_down",
+                    (MouseButton::Left, ElementState::Released) => "left_up",
+                    (MouseButton::Right, ElementState::Pressed) => "right_down",
+                    (MouseButton::Right, ElementState::Released) => "right_up",
+                    (MouseButton::Middle, ElementState::Pressed) => "middle_down",
+                    (MouseButton::Middle, ElementState::Released) => "middle_up",
+                    _ => return,
+                };
+                send_input(&self.target, serde_json::json!({"kind":"input","input_type":"mouse","mouse_action":action,"x":self.cursor_position.0,"y":self.cursor_position.1}));
+            }
+            WindowEvent::MouseWheel { delta, .. } => {
+                let value = match delta { MouseScrollDelta::LineDelta(_, y) => (y * 120.0) as i32, MouseScrollDelta::PixelDelta(p) => p.y as i32 };
+                send_input(&self.target, serde_json::json!({"kind":"input","input_type":"mouse","mouse_action":"wheel","buttons":value,"x":self.cursor_position.0,"y":self.cursor_position.1}));
+            }
+            WindowEvent::ModifiersChanged(modifiers) => self.modifiers = modifiers.state(),
+            WindowEvent::KeyboardInput { event, .. } => {
+                if matches!(event.logical_key, Key::Named(NamedKey::Super)) {
+                    let vk = if matches!(event.physical_key, PhysicalKey::Code(KeyCode::SuperRight)) { 0x5C } else { 0x5B };
+                    send_input(&self.target, serde_json::json!({"kind":"input","input_type":"key","code":vk,"down":event.state == ElementState::Pressed}));
+                    return;
+                }
+                let control = matches!(event.physical_key, PhysicalKey::Code(KeyCode::ControlLeft | KeyCode::ControlRight));
+                let alt = matches!(event.physical_key, PhysicalKey::Code(KeyCode::AltLeft | KeyCode::AltRight));
+                if event.state == ElementState::Pressed {
+                    self.control_down |= control;
+                    self.alt_down |= alt;
+                    if let PhysicalKey::Code(code) = event.physical_key {
+                        let vk = virtual_key(code);
+                        if vk != 0 { send_input(&self.target, serde_json::json!({"kind":"input","input_type":"key","code":vk,"down":true})); }
+                    }
+                    if matches!(event.physical_key, PhysicalKey::Code(KeyCode::KeyF))
+                        && (self.control_down || self.modifiers.control_key())
+                        && (self.alt_down || self.modifiers.alt_key())
+                    {
+                        self.fullscreen = !self.fullscreen;
+                        if let Some(window) = &self.window {
+                            window.set_fullscreen(self.fullscreen.then(|| Fullscreen::Borderless(window.current_monitor())));
+                        }
+                    }
+                } else {
+                    if let PhysicalKey::Code(code) = event.physical_key {
+                        let vk = virtual_key(code);
+                        if vk != 0 { send_input(&self.target, serde_json::json!({"kind":"input","input_type":"key","code":vk,"down":false})); }
+                    }
+                    if control { self.control_down = false; }
+                    if alt { self.alt_down = false; }
+                }
+            }
+            _ => {}
+        }
+    }
+
+    fn user_event(&mut self, event_loop: &ActiveEventLoop, event: ViewerEvent) {
+        match event {
+            ViewerEvent::Connected => self.diagnostics.connected(),
+            ViewerEvent::Frame(frame) => {
+                self.diagnostics.frame(&frame);
+                self.frame = Some(frame);
+                if let Some(window) = &self.window {
+                    window.request_redraw();
+                }
+            }
+            ViewerEvent::Failed(error) => {
+                eprintln!("{error}");
+                self.diagnostics.failed(&error);
+                event_loop.exit();
+            }
+        }
+    }
+
+    fn about_to_wait(&mut self, event_loop: &ActiveEventLoop) {
+        event_loop.set_control_flow(ControlFlow::Wait);
+    }
+}
+
+fn virtual_key(code: KeyCode) -> u16 {
+    match code {
+        KeyCode::KeyA => 0x41, KeyCode::KeyB => 0x42, KeyCode::KeyC => 0x43, KeyCode::KeyD => 0x44,
+        KeyCode::KeyE => 0x45, KeyCode::KeyF => 0x46, KeyCode::KeyG => 0x47, KeyCode::KeyH => 0x48,
+        KeyCode::KeyI => 0x49, KeyCode::KeyJ => 0x4A, KeyCode::KeyK => 0x4B, KeyCode::KeyL => 0x4C,
+        KeyCode::KeyM => 0x4D, KeyCode::KeyN => 0x4E, KeyCode::KeyO => 0x4F, KeyCode::KeyP => 0x50,
+        KeyCode::KeyQ => 0x51, KeyCode::KeyR => 0x52, KeyCode::KeyS => 0x53, KeyCode::KeyT => 0x54,
+        KeyCode::KeyU => 0x55, KeyCode::KeyV => 0x56, KeyCode::KeyW => 0x57, KeyCode::KeyX => 0x58,
+        KeyCode::KeyY => 0x59, KeyCode::KeyZ => 0x5A,
+        KeyCode::Digit0 => 0x30, KeyCode::Digit1 => 0x31, KeyCode::Digit2 => 0x32, KeyCode::Digit3 => 0x33,
+        KeyCode::Digit4 => 0x34, KeyCode::Digit5 => 0x35, KeyCode::Digit6 => 0x36, KeyCode::Digit7 => 0x37,
+        KeyCode::Digit8 => 0x38, KeyCode::Digit9 => 0x39,
+        KeyCode::ControlLeft | KeyCode::ControlRight => 0x11,
+        KeyCode::AltLeft | KeyCode::AltRight => 0x12,
+        KeyCode::SuperLeft => 0x5B,
+        KeyCode::SuperRight => 0x5C,
+        KeyCode::Enter => 0x0D,
+        KeyCode::Space => 0x20,
+        KeyCode::Escape => 0x1B,
+        _ => 0,
+    }
+}
+
+fn send_input(target: &str, command: serde_json::Value) {
+    let Ok(mut stream) = TcpStream::connect_timeout(
+        &match target.to_socket_addrs().ok().and_then(|mut addrs| addrs.next()) {
+            Some(address) => address,
+            None => return,
+        },
+        Duration::from_secs(2),
+    ) else { return };
+    let _ = stream.set_nodelay(true);
+    let _ = stream.set_read_timeout(Some(Duration::from_secs(2)));
+    let Ok(clone) = stream.try_clone() else { return };
+    let mut reader = BufReader::with_capacity(1, clone);
+    let Ok(hello) = read_json_line(&mut reader) else { return };
+    if hello.get("kind").and_then(serde_json::Value::as_str) != Some("windows_agent_hello") { return; }
+    if writeln!(stream, "{}", command).is_err() { return; }
+    if let Ok(response) = read_json_line(&mut reader) {
+        if response.get("kind").and_then(serde_json::Value::as_str) == Some("input_failed") {
+            eprintln!("Windows Agent input failed: {}", response.get("error").and_then(serde_json::Value::as_str).unwrap_or("unknown"));
+        }
+    }
+}
+
+#[derive(Serialize)]
+struct DiagnosticSnapshot<'a> {
+    schema_version: u8,
+    session_id: &'a str,
+    state: &'a str,
+    updated_at_unix_ms: u64,
+    frame_count: u64,
+    frames_per_second: Option<f64>,
+    desktop_width: u32,
+    desktop_height: u32,
+    capture_latency_ms: Option<f64>,
+    encode_latency_ms: Option<f64>,
+    frame_processing_latency_ms: Option<f64>,
+    decode_latency_ms: Option<f64>,
+    presentation_latency_ms: Option<f64>,
+    renderer: &'static str,
+    error_code: Option<&'a str>,
+}
+
+struct Diagnostics {
+    path: PathBuf,
+    session_id: String,
+    state: &'static str,
+    frame_count: u64,
+    fps_started: Instant,
+    fps_frames: u32,
+    fps: Option<f64>,
+    size: (u32, u32),
+    capture: Option<f64>,
+    encode: Option<f64>,
+    processing: Option<f64>,
+    decode: Option<f64>,
+    presentation: Option<f64>,
+    error: Option<String>,
+}
+
+impl Diagnostics {
+    fn new(session_id: &str) -> Result<Self, String> {
+        let directory = env::temp_dir()
+            .join("RemoteDesk")
+            .join("windows-agent-sessions");
+        fs::create_dir_all(&directory).map_err(|error| error.to_string())?;
+        let mut value = Self {
+            path: directory.join(format!("{session_id}.json")),
+            session_id: session_id.to_owned(),
+            state: "connecting",
+            frame_count: 0,
+            fps_started: Instant::now(),
+            fps_frames: 0,
+            fps: None,
+            size: (0, 0),
+            capture: None,
+            encode: None,
+            processing: None,
+            decode: None,
+            presentation: None,
+            error: None,
+        };
+        value.write()?;
+        Ok(value)
+    }
+    fn connected(&mut self) {
+        self.state = "connected";
+        let _ = self.write();
+    }
+    fn frame(&mut self, frame: &Frame) {
+        self.state = "connected";
+        self.frame_count += 1;
+        self.fps_frames += 1;
+        self.size = (frame.width, frame.height);
+        self.capture = frame.capture_latency_ms;
+        self.encode = frame.encode_latency_ms;
+        self.processing = frame.processing_latency_ms;
+        self.decode = Some(frame.decode_latency_ms);
+        let elapsed = self.fps_started.elapsed();
+        if elapsed >= Duration::from_secs(1) {
+            self.fps = Some(f64::from(self.fps_frames) / elapsed.as_secs_f64());
+            self.fps_frames = 0;
+            self.fps_started = Instant::now();
+        }
+        let _ = self.write();
+    }
+    fn presented(&mut self, elapsed: Duration) {
+        self.presentation = Some(elapsed.as_secs_f64() * 1_000.0);
+        let _ = self.write();
+    }
+    fn failed(&mut self, error: &str) {
+        self.state = "failed";
+        self.error = Some(error.chars().take(128).collect());
+        let _ = self.write();
+    }
+    fn terminated(&mut self) {
+        self.state = "terminated";
+        let _ = self.write();
+    }
+    fn write(&mut self) -> Result<(), String> {
+        let snapshot = DiagnosticSnapshot {
+            schema_version: 1,
+            session_id: &self.session_id,
+            state: self.state,
+            updated_at_unix_ms: SystemTime::now()
+                .duration_since(UNIX_EPOCH)
+                .unwrap_or_default()
+                .as_millis()
+                .try_into()
+                .unwrap_or(u64::MAX),
+            frame_count: self.frame_count,
+            frames_per_second: self.fps,
+            desktop_width: self.size.0,
+            desktop_height: self.size.1,
+            capture_latency_ms: self.capture,
+            encode_latency_ms: self.encode,
+            frame_processing_latency_ms: self.processing,
+            decode_latency_ms: self.decode,
+            presentation_latency_ms: self.presentation,
+            renderer: "softbuffer-bgra",
+            error_code: self.error.as_deref(),
+        };
+        let data = serde_json::to_vec(&snapshot).map_err(|error| error.to_string())?;
+        let temporary = self.path.with_extension("tmp");
+        fs::write(&temporary, data).map_err(|error| error.to_string())?;
+        fs::rename(temporary, &self.path).map_err(|error| error.to_string())
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    #[test]
+    fn frame_limits_reject_mismatched_bgra_size() {
+        assert!(validate_frame_lengths(10, 10, 399, 10).is_err());
+        assert!(validate_frame_lengths(10, 10, 400, 10).is_ok());
+    }
+    #[test]
+    fn targets_receive_default_port() {
+        assert_eq!(normalize_target("10.0.0.2").unwrap(), "10.0.0.2:39501");
+        assert_eq!(normalize_target("10.0.0.2:4000").unwrap(), "10.0.0.2:4000");
+    }
+}
diff --git a/client/helpers/windows-agent-viewer/src/windows_keyboard_hook.rs b/client/helpers/windows-agent-viewer/src/windows_keyboard_hook.rs
new file mode 100644
index 0000000..80af0c4
--- /dev/null
+++ b/client/helpers/windows-agent-viewer/src/windows_keyboard_hook.rs
@@ -0,0 +1,58 @@
+#![cfg(windows)]
+
+use std::net::{TcpStream, ToSocketAddrs};
+use std::sync::OnceLock;
+use std::thread;
+use std::time::Duration;
+use windows::Win32::Foundation::{LPARAM, LRESULT, WPARAM};
+use windows::Win32::UI::WindowsAndMessaging::{CallNextHookEx, DispatchMessageW, GetForegroundWindow, GetMessageW, GetWindowThreadProcessId, KBDLLHOOKSTRUCT, MSG, SetWindowsHookExW, TranslateMessage, UnhookWindowsHookEx, WH_KEYBOARD_LL, WM_KEYDOWN, WM_KEYUP, WM_SYSKEYDOWN, WM_SYSKEYUP};
+
+static PROCESS_ID: OnceLock<u32> = OnceLock::new();
+static TARGET: OnceLock<String> = OnceLock::new();
+
+pub fn install(target: String) {
+    let _ = PROCESS_ID.set(std::process::id());
+    let _ = TARGET.set(target);
+    thread::spawn(move || unsafe {
+        let Ok(hook) = SetWindowsHookExW(WH_KEYBOARD_LL, Some(callback), None, 0) else { return };
+        let mut message = MSG::default();
+        while GetMessageW(&mut message, None, 0, 0).as_bool() {
+            let _ = TranslateMessage(&message);
+            DispatchMessageW(&message);
+        }
+        let _ = UnhookWindowsHookEx(hook);
+    });
+}
+
+unsafe extern "system" fn callback(code: i32, wparam: WPARAM, lparam: LPARAM) -> LRESULT {
+    if code >= 0 && foreground_is_viewer() {
+        let data = unsafe { &*(lparam.0 as *const KBDLLHOOKSTRUCT) };
+        if matches!(data.vkCode, 0x5B | 0x5C) {
+            let message = wparam.0 as u32;
+            let pressed = matches!(message, WM_KEYDOWN | WM_SYSKEYDOWN);
+            let released = matches!(message, WM_KEYUP | WM_SYSKEYUP);
+            if pressed || released {
+                send_remote(data.vkCode as u16, pressed);
+                return LRESULT(1);
+            }
+        }
+    }
+    unsafe { CallNextHookEx(None, code, wparam, lparam) }
+}
+
+fn foreground_is_viewer() -> bool {
+    let Some(pid) = PROCESS_ID.get().copied() else { return false };
+    let window = unsafe { GetForegroundWindow() };
+    if window.0.is_null() { return false }
+    let mut foreground_pid = 0;
+    unsafe { GetWindowThreadProcessId(window, Some(&mut foreground_pid)) };
+    foreground_pid == pid
+}
+
+fn send_remote(vk: u16, pressed: bool) {
+    let Some(target) = TARGET.get() else { return };
+    let Some(address) = target.to_socket_addrs().ok().and_then(|mut values| values.next()) else { return };
+    let Ok(mut stream) = TcpStream::connect_timeout(&address, Duration::from_millis(250)) else { return };
+    let _ = stream.set_nodelay(true);
+    let _ = std::io::Write::write_all(&mut stream, format!("{{\"kind\":\"input\",\"input_type\":\"key\",\"code\":{vk},\"down\":{pressed}}}\n").as_bytes());
+}
diff --git a/client/web/index.html b/client/web/index.html
new file mode 100644
index 0000000..9da35ba
--- /dev/null
+++ b/client/web/index.html
@@ -0,0 +1,15 @@
+<!doctype html>
+<html lang="zh-CN">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <meta name="color-scheme" content="dark light" />
+    <link rel="icon" type="image/svg+xml" href="./remotedesk-icon.svg" />
+    <link rel="alternate icon" type="image/x-icon" href="./icon.ico" />
+    <title>RemoteDesk</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/main.tsx"></script>
+  </body>
+</html>
diff --git a/client/web/package-lock.json b/client/web/package-lock.json
new file mode 100644
index 0000000..3ba763a
--- /dev/null
+++ b/client/web/package-lock.json
@@ -0,0 +1,1189 @@
+{
+  "name": "remotedesk-web",
+  "version": "0.1.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "remotedesk-web",
+      "version": "0.1.0",
+      "dependencies": {
+        "lucide-react": "0.577.0",
+        "react": "19.2.6",
+        "react-dom": "19.2.6"
+      },
+      "devDependencies": {
+        "@types/react": "19.2.14",
+        "@types/react-dom": "19.2.3",
+        "typescript": "5.9.3",
+        "vite": "6.4.3"
+      }
+    },
+    "node_modules/@esbuild/aix-ppc64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.25.12.tgz",
+      "integrity": "sha512-Hhmwd6CInZ3dwpuGTF8fJG6yoWmsToE+vYgD4nytZVxcu1ulHpUQRAB1UJ8+N1Am3Mz4+xOByoQoSZf4D+CpkA==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "aix"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/android-arm": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.25.12.tgz",
+      "integrity": "sha512-VJ+sKvNA/GE7Ccacc9Cha7bpS8nyzVv0jdVgwNDaR4gDMC/2TTRc33Ip8qrNYUcpkOHUT5OZ0bUcNNVZQ9RLlg==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/android-arm64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.25.12.tgz",
+      "integrity": "sha512-6AAmLG7zwD1Z159jCKPvAxZd4y/VTO0VkprYy+3N2FtJ8+BQWFXU+OxARIwA46c5tdD9SsKGZ/1ocqBS/gAKHg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/android-x64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.25.12.tgz",
+      "integrity": "sha512-5jbb+2hhDHx5phYR2By8GTWEzn6I9UqR11Kwf22iKbNpYrsmRB18aX/9ivc5cabcUiAT/wM+YIZ6SG9QO6a8kg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/darwin-arm64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.25.12.tgz",
+      "integrity": "sha512-N3zl+lxHCifgIlcMUP5016ESkeQjLj/959RxxNYIthIg+CQHInujFuXeWbWMgnTo4cp5XVHqFPmpyu9J65C1Yg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/darwin-x64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.25.12.tgz",
+      "integrity": "sha512-HQ9ka4Kx21qHXwtlTUVbKJOAnmG1ipXhdWTmNXiPzPfWKpXqASVcWdnf2bnL73wgjNrFXAa3yYvBSd9pzfEIpA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/freebsd-arm64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.25.12.tgz",
+      "integrity": "sha512-gA0Bx759+7Jve03K1S0vkOu5Lg/85dou3EseOGUes8flVOGxbhDDh/iZaoek11Y8mtyKPGF3vP8XhnkDEAmzeg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/freebsd-x64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.25.12.tgz",
+      "integrity": "sha512-TGbO26Yw2xsHzxtbVFGEXBFH0FRAP7gtcPE7P5yP7wGy7cXK2oO7RyOhL5NLiqTlBh47XhmIUXuGciXEqYFfBQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-arm": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.25.12.tgz",
+      "integrity": "sha512-lPDGyC1JPDou8kGcywY0YILzWlhhnRjdof3UlcoqYmS9El818LLfJJc3PXXgZHrHCAKs/Z2SeZtDJr5MrkxtOw==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-arm64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.25.12.tgz",
+      "integrity": "sha512-8bwX7a8FghIgrupcxb4aUmYDLp8pX06rGh5HqDT7bB+8Rdells6mHvrFHHW2JAOPZUbnjUpKTLg6ECyzvas2AQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-ia32": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.25.12.tgz",
+      "integrity": "sha512-0y9KrdVnbMM2/vG8KfU0byhUN+EFCny9+8g202gYqSSVMonbsCfLjUO+rCci7pM0WBEtz+oK/PIwHkzxkyharA==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-loong64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.25.12.tgz",
+      "integrity": "sha512-h///Lr5a9rib/v1GGqXVGzjL4TMvVTv+s1DPoxQdz7l/AYv6LDSxdIwzxkrPW438oUXiDtwM10o9PmwS/6Z0Ng==",
+      "cpu": [
+        "loong64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-mips64el": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.25.12.tgz",
+      "integrity": "sha512-iyRrM1Pzy9GFMDLsXn1iHUm18nhKnNMWscjmp4+hpafcZjrr2WbT//d20xaGljXDBYHqRcl8HnxbX6uaA/eGVw==",
+      "cpu": [
+        "mips64el"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-ppc64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.25.12.tgz",
+      "integrity": "sha512-9meM/lRXxMi5PSUqEXRCtVjEZBGwB7P/D4yT8UG/mwIdze2aV4Vo6U5gD3+RsoHXKkHCfSxZKzmDssVlRj1QQA==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-riscv64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.25.12.tgz",
+      "integrity": "sha512-Zr7KR4hgKUpWAwb1f3o5ygT04MzqVrGEGXGLnj15YQDJErYu/BGg+wmFlIDOdJp0PmB0lLvxFIOXZgFRrdjR0w==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-s390x": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.25.12.tgz",
+      "integrity": "sha512-MsKncOcgTNvdtiISc/jZs/Zf8d0cl/t3gYWX8J9ubBnVOwlk65UIEEvgBORTiljloIWnBzLs4qhzPkJcitIzIg==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-x64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.25.12.tgz",
+      "integrity": "sha512-uqZMTLr/zR/ed4jIGnwSLkaHmPjOjJvnm6TVVitAa08SLS9Z0VM8wIRx7gWbJB5/J54YuIMInDquWyYvQLZkgw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/netbsd-arm64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.25.12.tgz",
+      "integrity": "sha512-xXwcTq4GhRM7J9A8Gv5boanHhRa/Q9KLVmcyXHCTaM4wKfIpWkdXiMog/KsnxzJ0A1+nD+zoecuzqPmCRyBGjg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "netbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/netbsd-x64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.25.12.tgz",
+      "integrity": "sha512-Ld5pTlzPy3YwGec4OuHh1aCVCRvOXdH8DgRjfDy/oumVovmuSzWfnSJg+VtakB9Cm0gxNO9BzWkj6mtO1FMXkQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "netbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/openbsd-arm64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.25.12.tgz",
+      "integrity": "sha512-fF96T6KsBo/pkQI950FARU9apGNTSlZGsv1jZBAlcLL1MLjLNIWPBkj5NlSz8aAzYKg+eNqknrUJ24QBybeR5A==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/openbsd-x64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.25.12.tgz",
+      "integrity": "sha512-MZyXUkZHjQxUvzK7rN8DJ3SRmrVrke8ZyRusHlP+kuwqTcfWLyqMOE3sScPPyeIXN/mDJIfGXvcMqCgYKekoQw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/openharmony-arm64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/openharmony-arm64/-/openharmony-arm64-0.25.12.tgz",
+      "integrity": "sha512-rm0YWsqUSRrjncSXGA7Zv78Nbnw4XL6/dzr20cyrQf7ZmRcsovpcRBdhD43Nuk3y7XIoW2OxMVvwuRvk9XdASg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openharmony"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/sunos-x64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.25.12.tgz",
+      "integrity": "sha512-3wGSCDyuTHQUzt0nV7bocDy72r2lI33QL3gkDNGkod22EsYl04sMf0qLb8luNKTOmgF/eDEDP5BFNwoBKH441w==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "sunos"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/win32-arm64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.25.12.tgz",
+      "integrity": "sha512-rMmLrur64A7+DKlnSuwqUdRKyd3UE7oPJZmnljqEptesKM8wx9J8gx5u0+9Pq0fQQW8vqeKebwNXdfOyP+8Bsg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/win32-ia32": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.25.12.tgz",
+      "integrity": "sha512-HkqnmmBoCbCwxUKKNPBixiWDGCpQGVsrQfJoVGYLPT41XWF8lHuE5N6WhVia2n4o5QK5M4tYr21827fNhi4byQ==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/win32-x64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.25.12.tgz",
+      "integrity": "sha512-alJC0uCZpTFrSL0CCDjcgleBXPnCrEAhTBILpeAp7M/OFgoqtAetfBzX0xM00MUsVVPpVjlPuMbREqnZCXaTnA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@rollup/rollup-android-arm-eabi": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm-eabi/-/rollup-android-arm-eabi-4.62.2.tgz",
+      "integrity": "sha512-6o7ZLZK+BeenkZCFNDXqpbjw9bD6nuWonvS/lwQJp7NoVVxm6p3qE7qQ5jGuBjiFsgvqjD8mZAU5oWxTmbOeOg==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ]
+    },
+    "node_modules/@rollup/rollup-android-arm64": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm64/-/rollup-android-arm64-4.62.2.tgz",
+      "integrity": "sha512-BaH7BllCACHoH1LguOU56UItGfUWjujlO65kS9LAodViaN4bwIKd7oeW/ZHJ/4ljr/7MIiENnNy3HJ0zXv8Zkw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ]
+    },
+    "node_modules/@rollup/rollup-darwin-arm64": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-arm64/-/rollup-darwin-arm64-4.62.2.tgz",
+      "integrity": "sha512-v39RCCvj4He82I9sFmk+M1VZ0PLM9sfsLVikjfx2hYBNALhrrOR2D3JjQA6AhlaSOgcR+RzrKY7e1+bT6SUO/A==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@rollup/rollup-darwin-x64": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-x64/-/rollup-darwin-x64-4.62.2.tgz",
+      "integrity": "sha512-yl0y2vq3S3lHeuXhEdss6TWfKW8vkujImO12tn4ZkG/4oghr09LvdYm2RElVjokTQiUvDUGXLGsYeLqUMCKpGA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@rollup/rollup-freebsd-arm64": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-arm64/-/rollup-freebsd-arm64-4.62.2.tgz",
+      "integrity": "sha512-tT4pvt4qXD+vEoezupCWi+a1F0vvDiksiHc+PxRlYTOH1I6/X4id9jPxTP+Fg+545euaFT1jJVs4CEdHZAU1vw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ]
+    },
+    "node_modules/@rollup/rollup-freebsd-x64": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-x64/-/rollup-freebsd-x64-4.62.2.tgz",
+      "integrity": "sha512-6nU5F2wCW+qvCBhTn1pdIU3bzsIoF7EUwsCDRxilWGprQR6yd508YnH9+OKFCwpfS8pjZqDUmnCAr7exax0XCg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-arm-gnueabihf": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-gnueabihf/-/rollup-linux-arm-gnueabihf-4.62.2.tgz",
+      "integrity": "sha512-n1GJHPOvpIfhi3TmrCeh6S6URt9BFCt0KQE3qvexyGCTAKpR4Lg+eWvNZEqu7epxwus/8ElT3hacYEucm49SZg==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-arm-musleabihf": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-musleabihf/-/rollup-linux-arm-musleabihf-4.62.2.tgz",
+      "integrity": "sha512-JqgflS8wEB+UXV/vS1RpRbifGBeN4D5lz8D8oOFbFZw4vedvdOgCFAjfBmIMdW3yL10XpQQ0Ambepw6MXrhOnA==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-arm64-gnu": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-gnu/-/rollup-linux-arm64-gnu-4.62.2.tgz",
+      "integrity": "sha512-wnFJkogWvN4jm/hQRF2UBaeUmk20j5+DmHvoyWii2b8HJDyvz1MF2OU/6ynXt2KR63rbZLWkFpoytpdc/yBuSA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-arm64-musl": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-musl/-/rollup-linux-arm64-musl-4.62.2.tgz",
+      "integrity": "sha512-HVu2bp0zhvJ8xHEV9+UUs7S90VadmBSY3LcIMvozbPo4AuMGDWlz3ymHLHZPX4hR67TKTt8Qp5PJ5RBg/i+RMQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-loong64-gnu": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-gnu/-/rollup-linux-loong64-gnu-4.62.2.tgz",
+      "integrity": "sha512-mQqqAV8QaoSgr9I2fKDLY2BAVvmKjWoGiu/cSYQonsLvtqwEn1E4QYfnCOcp5zoEqNhsDYin1s6jx/VJmrxlZg==",
+      "cpu": [
+        "loong64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-loong64-musl": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-musl/-/rollup-linux-loong64-musl-4.62.2.tgz",
+      "integrity": "sha512-IxKLoxCQ2IWi6bT2akyDUBGsOImDKB+sPp4EsTmwFQ/fMwpCKm8uLSSgP/Kx/QYUgKis6SEZ5/Nlhup0DIA0PQ==",
+      "cpu": [
+        "loong64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-ppc64-gnu": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-gnu/-/rollup-linux-ppc64-gnu-4.62.2.tgz",
+      "integrity": "sha512-Mk5ha2RQSgyFfmYYLkBpPnUk8D8FriBxesO1u9O75X0mHgXL1UQcH5Itl2lurWL2tj0RxV9b9tJgipac0hRY9A==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-ppc64-musl": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-musl/-/rollup-linux-ppc64-musl-4.62.2.tgz",
+      "integrity": "sha512-CjvEnqJL/0/TQ3TXX3OPIJ/kmBellrWd4heXUmHeJlTnmwjKpSJzoehLaL6Xk0ZnMHBu9dZuFADNOrtjF4v+2w==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-riscv64-gnu": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-gnu/-/rollup-linux-riscv64-gnu-4.62.2.tgz",
+      "integrity": "sha512-1SiZbzwdkaDURsew/tSOrooKiYy7EQGT6m8ufavAi9NEyQb/6VuIxFXAL1fqa4iZe3g4NbNk4P7J32z2tw5Mgg==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-riscv64-musl": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-musl/-/rollup-linux-riscv64-musl-4.62.2.tgz",
+      "integrity": "sha512-nQts12zJ3NQRoE6uYljOH89v7szzLDvG2JD/vsX+vGXU8w/At1GowTZ5/7qeFQ8m7L55rpR8Okugnuo5bgjy2Q==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-s390x-gnu": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-s390x-gnu/-/rollup-linux-s390x-gnu-4.62.2.tgz",
+      "integrity": "sha512-E9/ll019jhPIJgpzfZoIkBGhcz+kKNgVWYRY0zr9srBdPPFVpvOKW8VaJKUbeK+eZXyQF9ltME+Kk6affeaPgg==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-x64-gnu": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-gnu/-/rollup-linux-x64-gnu-4.62.2.tgz",
+      "integrity": "sha512-5BqxR/pshjey51iliyzTD5Xi3EN0aLmQ2lZ3lvefVV9c82BvrLo2/6OT55iifpWBufs6kdwWbuOKS841DrmK9A==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-x64-musl": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-musl/-/rollup-linux-x64-musl-4.62.2.tgz",
+      "integrity": "sha512-uNN83XxQrRAh/w0/pmAfibcwyb6YWt4gP+dpnQKPVJshAloQ785ii8CT8ZCIxkGg9opVsvAlGhFitSm6D1Jjpg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-openbsd-x64": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-openbsd-x64/-/rollup-openbsd-x64-4.62.2.tgz",
+      "integrity": "sha512-srjEIxSH3LRnJN6THczDHWQplqEMFiAJrTab0msUryh9kwNpkICf3Ea6q6MN/2cZwRFUNx5w+h6Hpi4QuHS6Zg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ]
+    },
+    "node_modules/@rollup/rollup-openharmony-arm64": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-openharmony-arm64/-/rollup-openharmony-arm64-4.62.2.tgz",
+      "integrity": "sha512-8hOJnxgbyObnCm5AlRA3A931xX19xq80RjVTKgJOvEKWqJruP/Uf12IbAOaDjjEXYRewwHLfmF0YRIdK3OwKWA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openharmony"
+      ]
+    },
+    "node_modules/@rollup/rollup-win32-arm64-msvc": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-arm64-msvc/-/rollup-win32-arm64-msvc-4.62.2.tgz",
+      "integrity": "sha512-mmF4AY1i0hG/bLWUctUq59gtmgaSIRa3cu/A3JFRp/sCNEme2bgDEiDS22P9FbnJB8NJNF4jPJiSP5RHQpUTDg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@rollup/rollup-win32-ia32-msvc": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-ia32-msvc/-/rollup-win32-ia32-msvc-4.62.2.tgz",
+      "integrity": "sha512-DZgkknc6jhHrk46V25vbAM0zZkyP0nSDkJB8/dRkLTxv470dOmWDqGoEJl/9A0dFfS7yE3REOwNDxpHwSLSt0Q==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@rollup/rollup-win32-x64-gnu": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-gnu/-/rollup-win32-x64-gnu-4.62.2.tgz",
+      "integrity": "sha512-T6xr6ucWSFto+VGajA8YH26LdpHRuP4YLHEKAtCWvJDOlnmWcDZVCI2Jmjr+IFHDlt2zRaTAKE4tfjTaWLgJBg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@rollup/rollup-win32-x64-msvc": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-msvc/-/rollup-win32-x64-msvc-4.62.2.tgz",
+      "integrity": "sha512-BfzEnDJOt9T8M989/lA37EcJgat01wLRnoi5dQf3QzOH7jzpqTAzdDbVfRljVr5r+jzKqpbHeyOfAaXxAd0PAA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@types/estree": {
+      "version": "1.0.9",
+      "resolved": "https://registry.npmjs.org/@types/estree/-/estree-1.0.9.tgz",
+      "integrity": "sha512-GhdPgy1el4/ImP05X05Uw4cw2/M93BCUmnEvWZNStlCzEKME4Fkk+YpoA5OiHNQmoS7Cafb8Xa3Pya8m1Qrzeg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/react": {
+      "version": "19.2.14",
+      "resolved": "https://registry.npmjs.org/@types/react/-/react-19.2.14.tgz",
+      "integrity": "sha512-ilcTH/UniCkMdtexkoCN0bI7pMcJDvmQFPvuPvmEaYA/NSfFTAgdUSLAoVjaRJm7+6PvcM+q1zYOwS4wTYMF9w==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "csstype": "^3.2.2"
+      }
+    },
+    "node_modules/@types/react-dom": {
+      "version": "19.2.3",
+      "resolved": "https://registry.npmjs.org/@types/react-dom/-/react-dom-19.2.3.tgz",
+      "integrity": "sha512-jp2L/eY6fn+KgVVQAOqYItbF0VY/YApe5Mz2F0aykSO8gx31bYCZyvSeYxCHKvzHG5eZjc+zyaS5BrBWya2+kQ==",
+      "dev": true,
+      "license": "MIT",
+      "peerDependencies": {
+        "@types/react": "^19.2.0"
+      }
+    },
+    "node_modules/csstype": {
+      "version": "3.2.3",
+      "resolved": "https://registry.npmjs.org/csstype/-/csstype-3.2.3.tgz",
+      "integrity": "sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/esbuild": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.25.12.tgz",
+      "integrity": "sha512-bbPBYYrtZbkt6Os6FiTLCTFxvq4tt3JKall1vRwshA3fdVztsLAatFaZobhkBC8/BrPetoa0oksYoKXoG4ryJg==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "bin": {
+        "esbuild": "bin/esbuild"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "optionalDependencies": {
+        "@esbuild/aix-ppc64": "0.25.12",
+        "@esbuild/android-arm": "0.25.12",
+        "@esbuild/android-arm64": "0.25.12",
+        "@esbuild/android-x64": "0.25.12",
+        "@esbuild/darwin-arm64": "0.25.12",
+        "@esbuild/darwin-x64": "0.25.12",
+        "@esbuild/freebsd-arm64": "0.25.12",
+        "@esbuild/freebsd-x64": "0.25.12",
+        "@esbuild/linux-arm": "0.25.12",
+        "@esbuild/linux-arm64": "0.25.12",
+        "@esbuild/linux-ia32": "0.25.12",
+        "@esbuild/linux-loong64": "0.25.12",
+        "@esbuild/linux-mips64el": "0.25.12",
+        "@esbuild/linux-ppc64": "0.25.12",
+        "@esbuild/linux-riscv64": "0.25.12",
+        "@esbuild/linux-s390x": "0.25.12",
+        "@esbuild/linux-x64": "0.25.12",
+        "@esbuild/netbsd-arm64": "0.25.12",
+        "@esbuild/netbsd-x64": "0.25.12",
+        "@esbuild/openbsd-arm64": "0.25.12",
+        "@esbuild/openbsd-x64": "0.25.12",
+        "@esbuild/openharmony-arm64": "0.25.12",
+        "@esbuild/sunos-x64": "0.25.12",
+        "@esbuild/win32-arm64": "0.25.12",
+        "@esbuild/win32-ia32": "0.25.12",
+        "@esbuild/win32-x64": "0.25.12"
+      }
+    },
+    "node_modules/fdir": {
+      "version": "6.5.0",
+      "resolved": "https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz",
+      "integrity": "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12.0.0"
+      },
+      "peerDependencies": {
+        "picomatch": "^3 || ^4"
+      },
+      "peerDependenciesMeta": {
+        "picomatch": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/fsevents": {
+      "version": "2.3.3",
+      "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz",
+      "integrity": "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
+      }
+    },
+    "node_modules/lucide-react": {
+      "version": "0.577.0",
+      "resolved": "https://registry.npmjs.org/lucide-react/-/lucide-react-0.577.0.tgz",
+      "integrity": "sha512-4LjoFv2eEPwYDPg/CUdBJQSDfPyzXCRrVW1X7jrx/trgxnxkHFjnVZINbzvzxjN70dxychOfg+FTYwBiS3pQ5A==",
+      "license": "ISC",
+      "peerDependencies": {
+        "react": "^16.5.1 || ^17.0.0 || ^18.0.0 || ^19.0.0"
+      }
+    },
+    "node_modules/nanoid": {
+      "version": "3.3.18",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz",
+      "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "bin": {
+        "nanoid": "bin/nanoid.cjs"
+      },
+      "engines": {
+        "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1"
+      }
+    },
+    "node_modules/picocolors": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz",
+      "integrity": "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==",
+      "dev": true,
+      "license": "ISC"
+    },
+    "node_modules/picomatch": {
+      "version": "4.0.5",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.5.tgz",
+      "integrity": "sha512-RvwwcruNjI1ncT5xRakeyS9Lf8lcItv34KD+aif+VH9kduAyfYBipGh12274xtenIPZ119/R9BdTBa8gAwSh0A==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/jonschlinkert"
+      }
+    },
+    "node_modules/postcss": {
+      "version": "8.5.26",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.26.tgz",
+      "integrity": "sha512-u82N74LFzG8ca+dD8puPnplTXoGH4fTPpVGuIbt36G3qvNlkvfD0lEAZSxaly3KX8TS/L1A1gsCEmvKmBcVbkQ==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/postcss/"
+        },
+        {
+          "type": "tidelift",
+          "url": "https://tidelift.com/funding/github/npm/postcss"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "nanoid": "^3.3.17",
+        "picocolors": "^1.1.1",
+        "source-map-js": "^1.2.1"
+      },
+      "engines": {
+        "node": "^10 || ^12 || >=14"
+      }
+    },
+    "node_modules/react": {
+      "version": "19.2.6",
+      "resolved": "https://registry.npmjs.org/react/-/react-19.2.6.tgz",
+      "integrity": "sha512-sfWGGfavi0xr8Pg0sVsyHMAOziVYKgPLNrS7ig+ivMNb3wbCBw3KxtflsGBAwD3gYQlE/AEZsTLgToRrSCjb0Q==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/react-dom": {
+      "version": "19.2.6",
+      "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-19.2.6.tgz",
+      "integrity": "sha512-0prMI+hvBbPjsWnxDLxlCGyM8PN6UuWjEUCYmZhO67xIV9Xasa/r/vDnq+Xyq4Lo27g8QSbO5YzARu0D1Sps3g==",
+      "license": "MIT",
+      "dependencies": {
+        "scheduler": "^0.27.0"
+      },
+      "peerDependencies": {
+        "react": "^19.2.6"
+      }
+    },
+    "node_modules/rollup": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/rollup/-/rollup-4.62.2.tgz",
+      "integrity": "sha512-RFnrW4lhXA3s3eqHDZvN654g8OTjzRfqpIRJYczCGB6HzphckVAi/Qh4tbPUbRuDi7s1Llv8g/NspLkttY3gTA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/estree": "1.0.9"
+      },
+      "bin": {
+        "rollup": "dist/bin/rollup"
+      },
+      "engines": {
+        "node": ">=18.0.0",
+        "npm": ">=8.0.0"
+      },
+      "optionalDependencies": {
+        "@rollup/rollup-android-arm-eabi": "4.62.2",
+        "@rollup/rollup-android-arm64": "4.62.2",
+        "@rollup/rollup-darwin-arm64": "4.62.2",
+        "@rollup/rollup-darwin-x64": "4.62.2",
+        "@rollup/rollup-freebsd-arm64": "4.62.2",
+        "@rollup/rollup-freebsd-x64": "4.62.2",
+        "@rollup/rollup-linux-arm-gnueabihf": "4.62.2",
+        "@rollup/rollup-linux-arm-musleabihf": "4.62.2",
+        "@rollup/rollup-linux-arm64-gnu": "4.62.2",
+        "@rollup/rollup-linux-arm64-musl": "4.62.2",
+        "@rollup/rollup-linux-loong64-gnu": "4.62.2",
+        "@rollup/rollup-linux-loong64-musl": "4.62.2",
+        "@rollup/rollup-linux-ppc64-gnu": "4.62.2",
+        "@rollup/rollup-linux-ppc64-musl": "4.62.2",
+        "@rollup/rollup-linux-riscv64-gnu": "4.62.2",
+        "@rollup/rollup-linux-riscv64-musl": "4.62.2",
+        "@rollup/rollup-linux-s390x-gnu": "4.62.2",
+        "@rollup/rollup-linux-x64-gnu": "4.62.2",
+        "@rollup/rollup-linux-x64-musl": "4.62.2",
+        "@rollup/rollup-openbsd-x64": "4.62.2",
+        "@rollup/rollup-openharmony-arm64": "4.62.2",
+        "@rollup/rollup-win32-arm64-msvc": "4.62.2",
+        "@rollup/rollup-win32-ia32-msvc": "4.62.2",
+        "@rollup/rollup-win32-x64-gnu": "4.62.2",
+        "@rollup/rollup-win32-x64-msvc": "4.62.2",
+        "fsevents": "~2.3.2"
+      }
+    },
+    "node_modules/scheduler": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/scheduler/-/scheduler-0.27.0.tgz",
+      "integrity": "sha512-eNv+WrVbKu1f3vbYJT/xtiF5syA5HPIMtf9IgY/nKg0sWqzAUEvqY/xm7OcZc/qafLx/iO9FgOmeSAp4v5ti/Q==",
+      "license": "MIT"
+    },
+    "node_modules/source-map-js": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz",
+      "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/tinyglobby": {
+      "version": "0.2.17",
+      "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.17.tgz",
+      "integrity": "sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "fdir": "^6.5.0",
+        "picomatch": "^4.0.4"
+      },
+      "engines": {
+        "node": ">=12.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/SuperchupuDev"
+      }
+    },
+    "node_modules/typescript": {
+      "version": "5.9.3",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
+      "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "bin": {
+        "tsc": "bin/tsc",
+        "tsserver": "bin/tsserver"
+      },
+      "engines": {
+        "node": ">=14.17"
+      }
+    },
+    "node_modules/vite": {
+      "version": "6.4.3",
+      "resolved": "https://registry.npmjs.org/vite/-/vite-6.4.3.tgz",
+      "integrity": "sha512-NTKlcQjlAK7MlQoyb6LgaqHc8sso/pVyUJYWMws3jg21uTJw/LddqIFPcPqP6PzpgbIcZyKI85sFE4HBrQDA8A==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "esbuild": "^0.25.0",
+        "fdir": "^6.4.4",
+        "picomatch": "^4.0.2",
+        "postcss": "^8.5.3",
+        "rollup": "^4.34.9",
+        "tinyglobby": "^0.2.13"
+      },
+      "bin": {
+        "vite": "bin/vite.js"
+      },
+      "engines": {
+        "node": "^18.0.0 || ^20.0.0 || >=22.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/vitejs/vite?sponsor=1"
+      },
+      "optionalDependencies": {
+        "fsevents": "~2.3.3"
+      },
+      "peerDependencies": {
+        "@types/node": "^18.0.0 || ^20.0.0 || >=22.0.0",
+        "jiti": ">=1.21.0",
+        "less": "*",
+        "lightningcss": "^1.21.0",
+        "sass": "*",
+        "sass-embedded": "*",
+        "stylus": "*",
+        "sugarss": "*",
+        "terser": "^5.16.0",
+        "tsx": "^4.8.1",
+        "yaml": "^2.4.2"
+      },
+      "peerDependenciesMeta": {
+        "@types/node": {
+          "optional": true
+        },
+        "jiti": {
+          "optional": true
+        },
+        "less": {
+          "optional": true
+        },
+        "lightningcss": {
+          "optional": true
+        },
+        "sass": {
+          "optional": true
+        },
+        "sass-embedded": {
+          "optional": true
+        },
+        "stylus": {
+          "optional": true
+        },
+        "sugarss": {
+          "optional": true
+        },
+        "terser": {
+          "optional": true
+        },
+        "tsx": {
+          "optional": true
+        },
+        "yaml": {
+          "optional": true
+        }
+      }
+    }
+  }
+}
diff --git a/client/web/package.json b/client/web/package.json
new file mode 100644
index 0000000..44c38ff
--- /dev/null
+++ b/client/web/package.json
@@ -0,0 +1,24 @@
+{
+  "name": "remotedesk-web",
+  "private": true,
+  "version": "0.1.0",
+  "type": "module",
+  "scripts": {
+    "dev": "vite --configLoader runner",
+    "control": "cargo run --manifest-path ../helpers/control-service/Cargo.toml -- --web-root dist --port 4174",
+    "build": "npm run lint && vite build --configLoader runner",
+    "build:check": "npm run lint && node scripts/build-check.mjs",
+    "lint": "tsc --noEmit -p tsconfig.app.json --pretty false && tsc --noEmit -p tsconfig.node.json --pretty false"
+  },
+  "dependencies": {
+    "react": "19.2.6",
+    "react-dom": "19.2.6",
+    "lucide-react": "0.577.0"
+  },
+  "devDependencies": {
+    "@types/react": "19.2.14",
+    "@types/react-dom": "19.2.3",
+    "typescript": "5.9.3",
+    "vite": "6.4.3"
+  }
+}
diff --git a/client/web/public/icon.ico b/client/web/public/icon.ico
new file mode 100644
index 0000000..bb50b8c
Binary files /dev/null and b/client/web/public/icon.ico differ
diff --git a/client/web/public/remotedesk-icon.svg b/client/web/public/remotedesk-icon.svg
new file mode 100644
index 0000000..cdd6019
--- /dev/null
+++ b/client/web/public/remotedesk-icon.svg
@@ -0,0 +1,10 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32">
+  <rect width="32" height="32" rx="7" fill="#5ed39a"/>
+  <g fill="none" stroke="#101b16" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round">
+    <path d="M10 8.5v3.2M8.4 10.1h3.2"/>
+    <path d="M21.8 8.5v3.2M20.2 10.1h3.2"/>
+    <path d="M10 18.5v3.2M8.4 20.1h3.2"/>
+    <path d="M21.8 18.5v3.2M20.2 20.1h3.2"/>
+    <path d="M12.5 14.2h7M12.5 16.4h7"/>
+  </g>
+</svg>
diff --git a/client/web/scripts/build-check.mjs b/client/web/scripts/build-check.mjs
new file mode 100644
index 0000000..04120e4
--- /dev/null
+++ b/client/web/scripts/build-check.mjs
@@ -0,0 +1,10 @@
+import { build } from 'vite'
+import { fileURLToPath } from 'node:url'
+
+await build({
+  root: fileURLToPath(new URL('..', import.meta.url)),
+  configFile: false,
+  build: {
+    write: false,
+  },
+})
diff --git a/client/web/src/App.tsx b/client/web/src/App.tsx
new file mode 100644
index 0000000..bfeaadf
--- /dev/null
+++ b/client/web/src/App.tsx
@@ -0,0 +1,1970 @@
+import { FormEvent, useEffect, useMemo, useRef, useState } from 'react'
+import {
+  CirclePlus,
+  Clock3,
+  Cpu,
+  Download,
+  ExternalLink,
+  KeyRound,
+  Keyboard,
+  Monitor,
+  Moon,
+  Network,
+  Play,
+  RefreshCw,
+  Search,
+  Settings,
+  ShieldCheck,
+  SquareTerminal,
+  Star,
+  Sun,
+  Trash2,
+  Upload,
+  X,
+} from 'lucide-react'
+import {
+  ControlApiError,
+  checkControlUpdate,
+  configureRdpCredential,
+  saveRdpCredential,
+  deleteLinuxAgentIdentity,
+  deleteRdpCredential,
+  getControlCapabilities,
+  getControlHosts,
+  getControlSettings,
+  getLinuxAgentIdentityStatus,
+  getLinuxDesktopSession,
+  getNativeRdpSession,
+  getWindowsAgentSession,
+  getRdpCredentialStatus,
+  launchRdp,
+  launchLinuxTerminal,
+  launchLinuxDesktop,
+  launchWindowsAgentDesktop,
+  launchLinuxFileTransfer,
+  installControlUpdate,
+  negotiateRdp,
+  openCredentialManager,
+  probeLinuxAgent,
+  probeWindowsAgent,
+  probeRdp,
+  updateControlSettings,
+  updateControlHosts,
+  type ControlCapabilities,
+  type ControlUpdateCheck,
+  type RdpClientMode,
+} from './backend'
+import {
+  createCredentialRef,
+  isStoredHost,
+  linuxProbeDetail,
+  normalizeStoredHost,
+  probeResultDetail,
+  protocolProbeDetail,
+  rdpResolution,
+  statusLabel,
+  maxRdpDimension,
+  minRdpDimension,
+  parseTags,
+  type DisplayMode,
+  type Host,
+  type HostKind,
+  type HostStatus,
+  type NetworkPolicy,
+} from './host-model'
+
+type Filter = 'all' | 'windows' | 'linux' | 'favorites' | 'recent'
+type Theme = 'dark' | 'light'
+type ControlServiceStatus = 'checking' | 'ready' | 'offline'
+
+const themeStorageKey = 'remotedesk-theme'
+
+function initialTheme(): Theme {
+  try {
+    const stored = window.localStorage.getItem(themeStorageKey)
+    if (stored === 'dark' || stored === 'light') return stored
+  } catch {
+    // Storage can be unavailable in hardened WebView profiles.
+  }
+  return window.matchMedia('(prefers-color-scheme: light)').matches ? 'light' : 'dark'
+}
+
+
+function linuxClipboardSessionStatus(host: Host): string {
+  if (host.nativeSessionState === 'connected') {
+    if (host.sessionClipboardRead && host.sessionClipboardWrite) return '双向已启用'
+    if (host.sessionClipboardRead) return '仅读取被控端'
+    if (host.sessionClipboardWrite) return '仅写入被控端'
+    return 'Agent 未授权'
+  }
+  if (host.nativeSessionState === 'connecting' || host.nativeSessionState === 'reconnecting') {
+    return '等待会话协商'
+  }
+  if (host.nativeSessionState === 'failed' || host.nativeSessionState === 'terminated') {
+    return '无活动会话'
+  }
+  return host.clipboardRead || host.clipboardWrite ? '未建立会话' : '已关闭'
+}
+
+type GlobalSettings = {
+  clientGpu: 'display' | 'manual'
+  agentGpu: 'capture' | 'manual'
+  strictZeroCopy: boolean
+  edgeApiUrl: string
+  updateManifestUrl: string
+  updatePublicKey: string
+  autoCheckUpdates: boolean
+}
+
+const initialSettings: GlobalSettings = {
+  clientGpu: 'display',
+  agentGpu: 'capture',
+  strictZeroCopy: true,
+  edgeApiUrl: '',
+  updateManifestUrl: '',
+  updatePublicKey: '',
+  autoCheckUpdates: true,
+}
+
+const demoMode = new URLSearchParams(window.location.search).get('demo') === '1'
+const hostStorageKey = 'remotedesk-hosts-v1'
+const clockFormatter = new Intl.DateTimeFormat('zh-CN', {
+  year: 'numeric',
+  month: '2-digit',
+  day: '2-digit',
+  hour: '2-digit',
+  minute: '2-digit',
+  second: '2-digit',
+  hour12: false,
+})
+const metricTimeFormatter = new Intl.DateTimeFormat('zh-CN', {
+  hour: '2-digit',
+  minute: '2-digit',
+  second: '2-digit',
+  hour12: false,
+})
+
+function formatLatency(value?: number) {
+  return value === undefined ? '暂无数据' : `${value} ms`
+}
+
+const demoCapabilities: ControlCapabilities = {
+  version: 'demo',
+  platform: 'windows',
+  application: {
+    desktop_shell: true,
+    shell_kind: 'tauri-2',
+  },
+  rdp: {
+    probe: true,
+    protocol_probe: true,
+    external_launch: true,
+    native_launch: true,
+    native_diagnostics: true,
+    native_multimon: true,
+    session_network_metrics: true,
+    session_decode_metrics: true,
+    region_pixel_conversion: true,
+    secure_named_pipe: true,
+    secure_pipe_config_ack: true,
+    secure_pipe_handshake_timeout: true,
+    job_object_lifecycle: true,
+    certificate_pinning: false,
+    automatic_reconnect: true,
+    resize_confirmation: true,
+    clipboard: true,
+    audio_playback: true,
+    native_renderer: 'software_framebuffer',
+    d3d11_device_available: true,
+    d3d11_dirty_rect_upload: true,
+    credential_manager: true,
+    credential_store: true,
+  },
+  linux: {
+    agent_session: true,
+    agent_probe: true,
+    terminal_session: true,
+    desktop_session: true,
+    x11_desktop: true,
+    relative_pointer: true,
+    adaptive_frame_pacing: true,
+    adaptive_compression: true,
+    desktop_session_resume: true,
+    desktop_session_crash_resume: true,
+    direct_webrtc_signaling: true,
+    opus_audio: true,
+    clipboard_read: true,
+    clipboard_write: true,
+    wayland_desktop: false,
+    native_video: true,
+    native_video_decoder_probe: true,
+    native_video_surface_presenter: true,
+    file_transfer: true,
+    agent_identity_store: true,
+  },
+  edge: {
+    relay: true,
+    signed_intent: true,
+    linux_session_relay: true,
+    linux_known_device_rendezvous: true,
+    remote_pairing: true,
+  },
+  update: {
+    configured: true,
+    check: true,
+    install: true,
+  },
+}
+
+const demoUpdate: ControlUpdateCheck = {
+  current_version: '0.2.3',
+  status: 'available',
+  release: {
+    version: '0.3.0',
+    channel: 'stable',
+    published_at: '2026-08-10T12:00:00Z',
+    notes: '稳定性改进和安全更新',
+    size_bytes: 24_780_800,
+  },
+}
+
+const demoHosts: Host[] = [
+  {
+    id: 1,
+    name: 'dev-win',
+    address: '10.20.0.15',
+    kind: 'windows_rdp',
+    mode: 'RDP',
+    status: 'ready',
+    favorite: true,
+    lastUsed: '10:42',
+    latency: 18,
+    encodeLatency: 5,
+    decodeLatency: 3,
+    frameUploadMode: 'dirty_rect',
+    frameUploadPixels: 86_400,
+    frameConversionPixels: 43_200,
+    qualityUpdatedAt: Date.now(),
+    path: 'Direct',
+    networkPolicy: 'Smart',
+    resolution: '1920 x 1080',
+    customWidth: '1600',
+    customHeight: '900',
+    gpu: 'Display adapter',
+    memoryPath: 'cpu_upload',
+    recent: true,
+    strictZeroCopy: false,
+    displayMode: 'primary',
+    displays: [
+      { id: 'display-1', name: 'DISPLAY1', resolution: '1920 x 1080', primary: true },
+      { id: 'display-2', name: 'DISPLAY2', resolution: '1920 x 1080', primary: false },
+    ],
+    selectedDisplayIds: ['display-1'],
+    username: '',
+    credentialState: 'missing',
+    agentIdentityState: 'missing',
+    credentialRef: 'RemoteDesk/RDP/demo-dev-win',
+    rdpClient: 'system',
+    nativeFullscreen: false,
+    captureInput: false,
+    redirectClipboard: true,
+    clipboardRead: true,
+    clipboardWrite: true,
+  },
+  {
+    id: 2,
+    name: 'linux-workstation',
+    address: 'agent:8ef2c1',
+    kind: 'linux_agent',
+    mode: 'Wayland',
+    status: 'ready',
+    favorite: true,
+    lastUsed: '09:18',
+    latency: 26,
+    encodeLatency: 9,
+    decodeLatency: 6,
+    qualityUpdatedAt: Date.now(),
+    path: 'Dual Edge',
+    networkPolicy: 'Smart',
+    resolution: '2560 x 1440',
+    customWidth: '1600',
+    customHeight: '900',
+    gpu: 'NVIDIA RTX 4070',
+    memoryPath: 'zero_copy',
+    recent: true,
+    strictZeroCopy: true,
+    displayMode: 'all',
+    displays: [
+      { id: 'dp-1', name: 'DP-1', resolution: '2560 x 1440', primary: true },
+      { id: 'hdmi-a-1', name: 'HDMI-A-1', resolution: '1920 x 1080', primary: false },
+    ],
+    selectedDisplayIds: ['dp-1', 'hdmi-a-1'],
+    username: '',
+    credentialState: 'missing',
+    agentIdentityState: 'ready',
+    credentialRef: 'RemoteDesk/RDP/demo-linux-workstation',
+    rdpClient: 'system',
+    nativeFullscreen: false,
+    captureInput: false,
+    redirectClipboard: true,
+    clipboardRead: true,
+    clipboardWrite: true,
+  },
+  {
+    id: 3,
+    name: 'build-node',
+    address: 'agent:5a17bd',
+    kind: 'linux_agent',
+    mode: 'Terminal',
+    status: 'ready',
+    favorite: false,
+    lastUsed: 'Yesterday',
+    latency: 31,
+    qualityUpdatedAt: Date.now(),
+    path: 'Single Edge',
+    networkPolicy: 'Smart',
+    resolution: 'Terminal',
+    customWidth: '1600',
+    customHeight: '900',
+    gpu: 'Not used',
+    memoryPath: 'Not applicable',
+    recent: true,
+    strictZeroCopy: false,
+    displayMode: 'primary',
+    displays: [],
+    selectedDisplayIds: [],
+    username: '',
+    credentialState: 'missing',
+    agentIdentityState: 'ready',
+    credentialRef: 'RemoteDesk/RDP/demo-build-node',
+    rdpClient: 'system',
+    nativeFullscreen: false,
+    captureInput: false,
+    redirectClipboard: true,
+    clipboardRead: true,
+    clipboardWrite: true,
+  },
+  {
+    id: 4,
+    name: 'game-win',
+    address: '10.20.0.31',
+    kind: 'windows_rdp',
+    mode: 'RDP',
+    status: 'offline',
+    favorite: false,
+    lastUsed: 'Aug 7',
+    path: 'Direct',
+    networkPolicy: 'Smart',
+    resolution: '3840 x 2160',
+    customWidth: '1600',
+    customHeight: '900',
+    gpu: 'AMD Radeon 780M',
+    memoryPath: 'Unknown',
+    recent: false,
+    strictZeroCopy: false,
+    displayMode: 'primary',
+    displays: [
+      { id: 'display-1', name: 'DISPLAY1', resolution: '3840 x 2160', primary: true },
+    ],
+    selectedDisplayIds: ['display-1'],
+    username: '',
+    credentialState: 'missing',
+    agentIdentityState: 'missing',
+    credentialRef: 'RemoteDesk/RDP/demo-game-win',
+    rdpClient: 'system',
+    nativeFullscreen: false,
+    captureInput: false,
+    redirectClipboard: true,
+    clipboardRead: true,
+    clipboardWrite: true,
+  },
+]
+
+function loadStoredHosts(): Host[] {
+  try {
+    const serialized = window.localStorage.getItem(hostStorageKey)
+    if (!serialized) return []
+    const parsed = JSON.parse(serialized) as unknown
+    if (!Array.isArray(parsed)) return []
+    return parsed.filter(isStoredHost).map(normalizeStoredHost)
+  } catch {
+    return []
+  }
+}
+
+const initialHosts = demoMode ? demoHosts : []
+
+const filters: Array<{ id: Filter; label: string }> = [
+  { id: 'all', label: '全部' },
+  { id: 'windows', label: 'Windows' },
+  { id: 'linux', label: 'Linux' },
+  { id: 'favorites', label: '收藏' },
+  { id: 'recent', label: '最近' },
+]
+
+function nativeSessionErrorLabel(code?: string | null) {
+  switch (code) {
+    case 'timeout': return '本地安全管道超时，请确认客户端与 helper 为同一版本'
+    case 'peer_pid_mismatch': return '本地 helper 进程身份不匹配'
+    case 'peer_creation_mismatch': return '本地 helper 进程已被替换或重启'
+    case 'peer_binary_mismatch': return '本地 helper 文件与启动版本不一致，请重新安装客户端'
+    case 'ack_failed': return 'helper 未确认连接配置'
+    case 'payload_invalid': return '连接配置格式不兼容，请重新安装客户端'
+    case 'pipe_io_failed': return '本地安全管道读写失败'
+    case 'handshake_failed': return '本地安全管道握手失败'
+    case 'resize_reconnect_timeout': return '远端未在 20 秒内返回新尺寸画面'
+    default: return code ?? '未知错误'
+  }
+}
+
+function normalizedAgentPublicKey(value?: string) {
+  const trimmed = value?.trim() ?? ''
+  return /^[A-Za-z0-9+/]{43}$/.test(trimmed) ? trimmed : null
+}
+
+function errorMessage(error: unknown) {
+  return error instanceof Error ? error.message : '未知错误'
+}
+
+function linuxUserError(value: string): string | null {
+  const user = value.trim()
+  if (!user) return '请先配置 Linux 用户'
+  if (user.length > 32 || !/^[A-Za-z0-9._-]+$/.test(user)) {
+    return 'Linux 用户名只能包含字母、数字、点、下划线或连字符'
+  }
+  return null
+}
+
+function App() {
+  const [hosts, setHosts] = useState(initialHosts)
+  const [filter, setFilter] = useState<Filter>('all')
+  const [selectedTag, setSelectedTag] = useState<string | null>(null)
+  const [query, setQuery] = useState('')
+  const [selectedId, setSelectedId] = useState<number | null>(initialHosts[0]?.id ?? null)
+  const [addOpen, setAddOpen] = useState(false)
+  const [addHostKind, setAddHostKind] = useState<HostKind>('windows_rdp')
+  const [settingsOpen, setSettingsOpen] = useState(false)
+  const [refreshing, setRefreshing] = useState(false)
+  const [controlServiceStatus, setControlServiceStatus] = useState<ControlServiceStatus>(demoMode ? 'ready' : 'checking')
+  const [capabilities, setCapabilities] = useState<ControlCapabilities | null>(demoMode ? demoCapabilities : null)
+  const [settings, setSettings] = useState(initialSettings)
+  const [settingsDraft, setSettingsDraft] = useState(initialSettings)
+  const [settingsSaving, setSettingsSaving] = useState(false)
+  const [settingsError, setSettingsError] = useState<string | null>(null)
+  const [fileDirection, setFileDirection] = useState<'upload' | 'download'>('upload')
+  const [fileLocalPath, setFileLocalPath] = useState('')
+  const [fileRemotePath, setFileRemotePath] = useState('')
+  const [fileTransferBusy, setFileTransferBusy] = useState(false)
+  const [settingsLoaded, setSettingsLoaded] = useState(demoMode)
+  const [updateResult, setUpdateResult] = useState<ControlUpdateCheck | null>(demoMode ? demoUpdate : null)
+  const [updateChecking, setUpdateChecking] = useState(false)
+  const [updateInstalling, setUpdateInstalling] = useState(false)
+  const [updateError, setUpdateError] = useState<string | null>(null)
+  const [theme, setTheme] = useState<Theme>(initialTheme)
+  const [now, setNow] = useState(() => new Date())
+  const searchInput = useRef<HTMLInputElement>(null)
+  const probeGenerations = useRef(new Map<number, number>())
+  const nativeSessions = useRef(new Map<number, string>())
+  const linuxDesktopSessions = useRef(new Map<number, string>())
+  const windowsAgentSessions = useRef(new Map<number, string>())
+  const updateAutoCheckStarted = useRef(false)
+  const hostsLoaded = useRef(demoMode)
+
+  useEffect(() => {
+    document.documentElement.dataset.theme = theme
+    try {
+      window.localStorage.setItem(themeStorageKey, theme)
+    } catch {
+      // The in-memory choice still applies for this session.
+    }
+  }, [theme])
+
+  useEffect(() => {
+    if (demoMode || !hostsLoaded.current) return
+    const persistHosts = async () => {
+      const profiles = hosts.map((host) => ({
+        ...host,
+        username: host.kind === 'windows_rdp' ? '' : host.username,
+        latency: undefined,
+        sessionNetworkLatency: undefined,
+        networkBaseLatency: undefined,
+        bandwidthKbps: undefined,
+        nativeMonitorCount: undefined,
+        captureLatency: undefined,
+        encodeLatency: undefined,
+        frameProcessingLatency: undefined,
+        decodeLatency: undefined,
+        sessionClipboardRead: undefined,
+        sessionClipboardWrite: undefined,
+        qualityUpdatedAt: undefined,
+      }))
+      try {
+        await updateControlHosts(profiles)
+        window.localStorage.removeItem(hostStorageKey)
+      } catch {
+        // Keep a local fallback while the control service is restarting.
+        try { window.localStorage.setItem(hostStorageKey, JSON.stringify(profiles)) } catch { /* best effort */ }
+      }
+    }
+    void persistHosts()
+  }, [hosts])
+
+  useEffect(() => {
+    const timer = window.setInterval(() => setNow(new Date()), 1_000)
+    return () => window.clearInterval(timer)
+  }, [])
+
+  useEffect(() => {
+    if (demoMode) return
+    const loadHosts = async () => {
+      try {
+        const stored = await getControlHosts()
+        const loaded = Array.isArray(stored) ? stored.filter(isStoredHost).map(normalizeStoredHost) : []
+        if (loaded.length > 0 || window.localStorage.getItem(hostStorageKey) === null) {
+          setHosts(loaded)
+        } else {
+          const legacy = loadStoredHosts()
+          setHosts(legacy)
+          if (legacy.length > 0) {
+            await updateControlHosts(legacy)
+            window.localStorage.removeItem(hostStorageKey)
+          }
+        }
+      } catch {
+        setHosts(loadStoredHosts())
+      } finally {
+        hostsLoaded.current = true
+        void refresh()
+      }
+    }
+    void loadHosts()
+  }, [])
+
+  useEffect(() => {
+    if (
+      demoMode ||
+      !settingsLoaded ||
+      updateAutoCheckStarted.current ||
+      !settings.autoCheckUpdates ||
+      !capabilities?.update?.configured
+    ) return
+    updateAutoCheckStarted.current = true
+    void checkForUpdates()
+  }, [capabilities?.update?.configured, settings.autoCheckUpdates, settingsLoaded])
+
+  useEffect(() => {
+    function focusSearch(event: KeyboardEvent) {
+      if (event.key === 'Escape') {
+        setAddOpen(false)
+        setSettingsOpen(false)
+        return
+      }
+      if ((event.ctrlKey || event.metaKey) && event.key.toLowerCase() === 'k') {
+        event.preventDefault()
+        searchInput.current?.focus()
+      }
+    }
+
+    window.addEventListener('keydown', focusSearch)
+    return () => window.removeEventListener('keydown', focusSearch)
+  }, [])
+
+  const visibleHosts = useMemo(() => {
+    const normalized = query.trim().toLowerCase()
+    return hosts.filter((host) => {
+      const matchesQuery =
+        !normalized ||
+        host.name.toLowerCase().includes(normalized) ||
+        host.address.toLowerCase().includes(normalized)
+      const matchesFilter =
+        filter === 'all' ||
+        (filter === 'windows' && (host.kind === 'windows_rdp' || host.kind === 'windows_agent')) ||
+        (filter === 'linux' && host.kind === 'linux_agent') ||
+        (filter === 'favorites' && host.favorite) ||
+        (filter === 'recent' && host.recent)
+      const matchesTag = selectedTag === null || (host.tags ?? []).includes(selectedTag)
+      return matchesQuery && matchesFilter && matchesTag
+    })
+  }, [filter, hosts, query, selectedTag])
+
+  const availableTags = useMemo(() => {
+    const counts = new Map<string, number>()
+    for (const host of hosts) {
+      for (const tag of host.tags ?? []) counts.set(tag, (counts.get(tag) ?? 0) + 1)
+    }
+    return [...counts.entries()].sort((a, b) => a[0].localeCompare(b[0], 'zh-CN'))
+  }, [hosts])
+
+  const selected = hosts.find((host) => host.id === selectedId) ?? hosts[0]
+
+  function rdpClientName(mode: RdpClientMode) {
+    if (mode === 'native') return '客户端内'
+    return 'Windows mstsc'
+  }
+
+  function connectTitle(host: Host) {
+    if (host.status === 'connecting') return '连接正在启动，请等待当前连接完成'
+    return host.kind === 'windows_rdp'
+      ? `启动${rdpClientName(host.rdpClient)}`
+      : '连接'
+  }
+
+  function hostKindLabel(host: Host) {
+    if (host.kind === 'windows_agent') return 'Windows Agent'
+    if (host.kind === 'linux_agent') return 'Linux Agent'
+    return 'Windows RDP'
+  }
+
+  function connectButtonLabel(host: Host) {
+    return host.status === 'connecting' ? '正在启动' : '连接'
+  }
+
+  function chooseRdpClient(host: Host, rdpClient: RdpClientMode) {
+    updateHost(host.id, {
+      rdpClient,
+      ...(rdpClient === 'native' && host.displayMode === 'custom' && host.selectedDisplayIds.length < 2
+        ? { displayMode: 'primary' as DisplayMode, selectedDisplayIds: host.displays.filter((display) => display.primary).map((display) => display.id) }
+        : {}),
+      probeDetail: rdpClient === 'native'
+        ? 'IronRDP 原生窗口；凭据从 Windows 凭据管理器读取'
+        : '使用 Windows 系统远程桌面与系统认证窗口',
+    })
+    if (rdpClient === 'native') void refreshCredentialStatus(host, false)
+  }
+
+  function updateHost(id: number, patch: Partial<Host>) {
+    setHosts((current) => current.map((host) => (host.id === id ? { ...host, ...patch } : host)))
+  }
+
+  function updateHostIdentity(host: Host, field: 'name' | 'address', value: string) {
+    const limit = field === 'name' ? 128 : 253
+    const next = value.slice(0, limit)
+    if (field === 'address' && /\s/.test(next)) return
+    updateHost(host.id, {
+      [field]: next,
+      ...(field === 'address' ? { status: 'unknown' as HostStatus, probeDetail: undefined } : {}),
+    })
+  }
+
+  function updateHostTags(host: Host, value: string) {
+    updateHost(host.id, { tags: parseTags(value) })
+  }
+
+  function updateMode(host: Host, mode: string) {
+    const resolution = mode === 'Terminal'
+      ? 'Terminal'
+      : host.resolution === 'Terminal'
+        ? 'Follow window'
+        : host.resolution
+    updateHost(host.id, { mode, resolution })
+  }
+
+  function updateDisplayMode(host: Host, displayMode: DisplayMode) {
+    const primary = host.displays.find((display) => display.primary) ?? host.displays[0]
+    const selectedDisplayIds = displayMode === 'all'
+      ? host.displays.map((display) => display.id)
+      : displayMode === 'primary'
+        ? primary ? [primary.id] : []
+        : host.selectedDisplayIds.length > 0
+          ? host.selectedDisplayIds
+          : primary ? [primary.id] : []
+    updateHost(host.id, { displayMode, selectedDisplayIds })
+  }
+
+  function toggleDisplay(host: Host, displayId: string) {
+    const selected = new Set(host.selectedDisplayIds)
+    if (selected.has(displayId)) {
+      if (selected.size === 1) return
+      selected.delete(displayId)
+    } else {
+      selected.add(displayId)
+    }
+    updateHost(host.id, { selectedDisplayIds: [...selected] })
+  }
+
+  function activeDisplayCount(host: Host) {
+    if (host.mode === 'Terminal') return 0
+    if (host.displayMode === 'all') return host.displays.length
+    if (host.displayMode === 'primary') return Math.min(host.displays.length, 1)
+    return host.displays.filter((display) => host.selectedDisplayIds.includes(display.id)).length
+  }
+
+  function openSettings() {
+    setSettingsDraft(settings)
+    setSettingsError(null)
+    setSettingsOpen(true)
+  }
+
+  async function checkForUpdates() {
+    if (demoMode) return
+    setUpdateChecking(true)
+    setUpdateError(null)
+    try {
+      setUpdateResult(await checkControlUpdate())
+    } catch (error) {
+      setUpdateResult(null)
+      setUpdateError(errorMessage(error))
+    } finally {
+      setUpdateChecking(false)
+    }
+  }
+
+  async function installAvailableUpdate() {
+    const version = updateResult?.release?.version
+    if (!version || updateResult?.status !== 'available') return
+    if (!window.confirm(`下载并安装 RemoteDesk ${version}？当前控制端将自动关闭并在升级后重新启动。`)) return
+    setUpdateInstalling(true)
+    setUpdateError(null)
+    try {
+      await installControlUpdate(version)
+    } catch (error) {
+      setUpdateInstalling(false)
+      setUpdateError(errorMessage(error))
+    }
+  }
+
+  async function saveSettings() {
+    setSettingsSaving(true)
+    setSettingsError(null)
+    try {
+      const persisted = await updateControlSettings({
+        edge_api_url: settingsDraft.edgeApiUrl.trim() || null,
+        update_manifest_url: settingsDraft.updateManifestUrl.trim() || null,
+        update_public_key: settingsDraft.updatePublicKey.trim() || null,
+        auto_check_updates: settingsDraft.autoCheckUpdates,
+      })
+      const updated = {
+        ...settingsDraft,
+        edgeApiUrl: persisted.edge_api_url ?? '',
+        updateManifestUrl: persisted.update_manifest_url ?? '',
+        updatePublicKey: persisted.update_public_key ?? '',
+        autoCheckUpdates: persisted.auto_check_updates ?? true,
+      }
+      setSettings(updated)
+      setSettingsDraft(updated)
+      const detectedCapabilities = await getControlCapabilities()
+      setCapabilities(detectedCapabilities)
+      setSettingsOpen(false)
+      setUpdateResult(null)
+      updateAutoCheckStarted.current = false
+    } catch (error) {
+      setSettingsError(errorMessage(error))
+    } finally {
+      setSettingsSaving(false)
+    }
+  }
+
+  async function deleteHost(host: Host) {
+    if (!window.confirm(`删除主机“${host.name}”？`)) return
+    const fingerprint = '0'.repeat(64)
+    if (host.kind === 'linux_agent'
+      && fingerprint !== null
+      && host.agentIdentityState === 'ready'
+      && window.confirm('同时从 Windows 凭据管理器忘记该 Linux Agent 身份？选择“取消”将只删除主机配置。')) {
+      try {
+        await deleteLinuxAgentIdentity(fingerprint)
+      } catch (error) {
+        updateHost(host.id, { probeDetail: `无法忘记 Linux Agent 身份：${errorMessage(error)}` })
+        return
+      }
+    }
+    const remaining = hosts.filter((item) => item.id !== host.id)
+    probeGenerations.current.delete(host.id)
+    nativeSessions.current.delete(host.id)
+    linuxDesktopSessions.current.delete(host.id)
+    windowsAgentSessions.current.delete(host.id)
+    setHosts(remaining)
+    if (selectedId === host.id) setSelectedId(remaining[0]?.id ?? null)
+  }
+
+  async function probeHost(
+    host: Host,
+    protocolProbe = capabilities?.rdp.protocol_probe ?? false,
+  ) {
+    if (host.kind !== 'windows_rdp') return
+    const generation = (probeGenerations.current.get(host.id) ?? 0) + 1
+    probeGenerations.current.set(host.id, generation)
+    updateHost(host.id, { status: 'probing', probeDetail: '正在检测 RDP 端口' })
+
+    try {
+      const result = await probeRdp(host.address)
+      if (probeGenerations.current.get(host.id) !== generation) return
+      if (result.reachable && protocolProbe) {
+        updateHost(host.id, {
+          status: 'probing',
+          latency: result.latency_ms ?? undefined,
+          qualityUpdatedAt: result.latency_ms === undefined ? undefined : Date.now(),
+          probeDetail: `TCP ${result.port} 可达，正在验证 RDP 协议`,
+        })
+        try {
+          const protocolResult = await negotiateRdp(host.address)
+          if (probeGenerations.current.get(host.id) !== generation) return
+          const latency = protocolResult.total_latency_ms ?? result.latency_ms ?? undefined
+          updateHost(host.id, {
+            status: protocolResult.ok ? 'ready' : 'offline',
+            latency,
+            qualityUpdatedAt: latency === undefined ? undefined : Date.now(),
+            probeDetail: protocolProbeDetail(protocolResult),
+          })
+        } catch (error) {
+          if (probeGenerations.current.get(host.id) !== generation) return
+          updateHost(host.id, {
+            status: 'ready',
+            latency: result.latency_ms ?? undefined,
+            qualityUpdatedAt: result.latency_ms === undefined ? undefined : Date.now(),
+            probeDetail: `TCP ${result.port} 可达；协议探针暂不可用：${errorMessage(error)}`,
+          })
+        }
+        return
+      }
+      updateHost(host.id, {
+        status: result.reachable ? 'ready' : 'offline',
+        latency: result.latency_ms ?? undefined,
+        qualityUpdatedAt: result.latency_ms === undefined ? undefined : Date.now(),
+        probeDetail: probeResultDetail(result),
+      })
+    } catch (error) {
+      if (probeGenerations.current.get(host.id) !== generation) return
+      const invalidTarget = error instanceof ControlApiError && error.status >= 400 && error.status < 500
+      if (!invalidTarget) setControlServiceStatus('offline')
+      updateHost(host.id, {
+        status: 'unknown',
+        latency: undefined,
+        qualityUpdatedAt: undefined,
+        probeDetail: invalidTarget
+          ? `地址无效：${errorMessage(error)}`
+          : `控制服务不可用：${errorMessage(error)}`,
+      })
+    }
+  }
+
+  async function probeLinuxHost(host: Host) {
+    if (host.kind !== 'linux_agent') return
+    const fingerprint = '0'.repeat(64)
+    const generation = (probeGenerations.current.get(host.id) ?? 0) + 1
+    probeGenerations.current.set(host.id, generation)
+    updateHost(host.id, { status: 'probing', probeDetail: '正在验证 Linux Agent TLS/WSS' })
+    try {
+      const result = await probeLinuxAgent(host.address, fingerprint)
+      if (probeGenerations.current.get(host.id) !== generation) return
+      updateHost(host.id, {
+        status: result.ok ? 'ready' : 'offline',
+        latency: result.latency_ms,
+        qualityUpdatedAt: Date.now(),
+        probeDetail: linuxProbeDetail(result),
+      })
+    } catch (error) {
+      if (probeGenerations.current.get(host.id) !== generation) return
+      const invalidRequest = error instanceof ControlApiError
+        && error.status >= 400
+        && error.status < 500
+      updateHost(host.id, {
+        status: invalidRequest ? 'unknown' : 'offline',
+        latency: undefined,
+        qualityUpdatedAt: undefined,
+        probeDetail: invalidRequest
+          ? `Linux Agent 配置无效：${errorMessage(error)}`
+      : `Linux Agent 不可用或 TLS/协议握手失败：${errorMessage(error)}`,
+      })
+    }
+  }
+
+  async function probeWindowsAgentHost(host: Host) {
+    if (host.kind !== 'windows_agent') return
+    if (windowsAgentSessions.current.has(host.id)) return
+    updateHost(host.id, { status: 'probing', probeDetail: '正在连接 Windows Agent' })
+    try {
+      const result = await probeWindowsAgent(host.address)
+      updateHost(host.id, {
+        status: result.ok ? 'ready' : 'offline',
+        latency: result.latency_ms,
+        qualityUpdatedAt: Date.now(),
+        captureLatency: result.capture_latency_ms ?? undefined,
+        encodeLatency: result.encode_latency_ms ?? undefined,
+        frameProcessingLatency: result.frame_processing_latency_ms ?? undefined,
+        agentApplications: result.applications,
+        probeDetail: result.desktop_session
+          ? `Windows Agent 在线（当前：${result.capture_backend} / ${result.input_backend}）`
+            : result.software_fallback_available && result.software_fallback_backend
+            ? `Windows Agent 在线（首选：${result.preferred_capture_backend}；降级：${result.software_fallback_backend} 可用），可启动桌面`
+            : `Windows Agent 在线（首选：${result.preferred_capture_backend}），可启动桌面`,
+      })
+    } catch (error) {
+      updateHost(host.id, { status: 'offline', latency: undefined, probeDetail: `Windows Agent 不可用：${errorMessage(error)}` })
+    }
+  }
+
+  async function connect(host: Host) {
+    if (host.status === 'connecting') return
+    setSelectedId(host.id)
+    if (host.kind === 'windows_agent') {
+      if (host.mode === 'Application' && !host.agentApplication) {
+        updateHost(host.id, { probeDetail: '请先选择要启动的应用' })
+        return
+      }
+      updateHost(host.id, { status: 'connecting', probeDetail: host.mode === 'Application' ? '正在启动 Windows Agent 应用窗口' : '正在启动 Windows Agent 原生桌面窗口' })
+      try {
+        const launch = await launchWindowsAgentDesktop({ address: host.address, frames_per_second: 10, fullscreen: host.nativeFullscreen, mode: host.mode === 'Application' ? 'application' : 'desktop', application: host.agentApplication })
+        windowsAgentSessions.current.set(host.id, launch.session_id)
+        updateHost(host.id, { status: 'ready', lastUsed: 'Now', recent: true, nativeSessionState: 'connecting', probeDetail: 'Windows Agent RDWF 桌面窗口已启动，正在接收画面' })
+        void monitorWindowsAgentSession(host.id, launch.session_id)
+      } catch (error) {
+        updateHost(host.id, { status: 'offline', probeDetail: `Windows Agent ${host.mode === 'Application' ? '应用' : '桌面'}启动失败：${errorMessage(error)}` })
+      }
+      return
+    }
+    if (host.kind !== 'windows_rdp') {
+      const userError = linuxUserError(host.username)
+      if (userError) {
+        updateHost(host.id, { probeDetail: userError })
+        return
+      }
+      const linuxUser = host.username.trim()
+      const fingerprint = '0'.repeat(64)
+      if (host.mode !== 'Terminal') {
+        const resolution = rdpResolution(host) ?? { mode: 'follow_window' as const }
+        const width = resolution.mode === 'fixed' ? resolution.width : 1920
+        const height = resolution.mode === 'fixed' ? resolution.height : 1080
+        updateHost(host.id, {
+          nativeSessionState: undefined,
+          sessionClipboardRead: undefined,
+          sessionClipboardWrite: undefined,
+        })
+        try {
+          const launch = await launchLinuxDesktop({
+            address: host.address,
+            user: linuxUser,
+            certificate_sha256: fingerprint,
+            width,
+            height,
+            frames_per_second: 15,
+            fullscreen: host.nativeFullscreen,
+            follow_window: resolution.mode === 'follow_window',
+            capture_input: host.captureInput,
+            clipboard_read: host.clipboardRead && capabilities?.linux.clipboard_read === true,
+            clipboard_write: host.clipboardWrite && capabilities?.linux.clipboard_write === true,
+            edge_api_url: settings.edgeApiUrl.trim() || null,
+          })
+          updateHost(host.id, {
+            status: 'ready',
+            lastUsed: 'Now',
+            recent: true,
+            probeDetail: settings.edgeApiUrl.trim()
+              ? 'Edge 授权通过，Linux X11 桌面窗口已启动'
+              : 'Linux X11 桌面已在独立本地窗口中启动',
+          })
+          linuxDesktopSessions.current.set(host.id, launch.session_id)
+          void monitorLinuxDesktopSession(host.id, launch.session_id)
+        } catch (error) {
+          updateHost(host.id, { probeDetail: `Linux 桌面启动失败：${errorMessage(error)}` })
+        }
+        return
+      }
+      try {
+        await launchLinuxTerminal({
+          address: host.address,
+          user: linuxUser,
+          certificate_sha256: fingerprint,
+          pair: false,
+          edge_api_url: settings.edgeApiUrl.trim() || null,
+        })
+        updateHost(host.id, {
+          status: 'ready',
+          lastUsed: 'Now',
+          recent: true,
+          probeDetail: settings.edgeApiUrl.trim()
+            ? 'Edge 签名授权通过，Linux 终端中继已启动'
+            : 'Linux 终端已在独立本地窗口中启动',
+        })
+      } catch (error) {
+        updateHost(host.id, { probeDetail: `Linux 终端启动失败：${errorMessage(error)}` })
+      }
+      return
+    }
+    probeGenerations.current.set(host.id, (probeGenerations.current.get(host.id) ?? 0) + 1)
+    const statusBeforeLaunch = host.status === 'probing' ? 'unknown' : host.status
+    updateHost(host.id, { status: 'connecting', probeDetail: `正在启动${rdpClientName(host.rdpClient)}` })
+    try {
+      const resolution = rdpResolution(host) ?? { mode: 'follow_window' as const }
+      const launch = await launchRdp({
+        address: host.address,
+        username: host.rdpClient === 'system' ? host.username : '',
+        resolution,
+        use_multimon: host.displayMode === 'all',
+        monitor_indices: host.displayMode === 'custom'
+          ? host.selectedDisplayIds
+            .map((id) => Number.parseInt(id.replace(/\D/g, ''), 10) - 1)
+            .filter((index) => Number.isInteger(index) && index >= 0 && index <= 255)
+          : [],
+        client: host.rdpClient,
+        fullscreen: host.rdpClient === 'native' && host.nativeFullscreen,
+        certificate_sha256: null,
+        credential_ref: host.rdpClient === 'native' ? host.credentialRef : null,
+        redirect_clipboard: host.redirectClipboard,
+      })
+      updateHost(host.id, {
+        status: statusBeforeLaunch,
+        lastUsed: 'Now',
+        recent: true,
+        sessionNetworkLatency: undefined,
+        networkBaseLatency: undefined,
+        bandwidthKbps: undefined,
+        nativeMonitorCount: undefined,
+        probeDetail: host.rdpClient === 'native'
+          ? 'IronRDP 已使用 Windows 凭据管理器中的凭据启动'
+          : 'Windows 远程桌面已打开，请在系统窗口完成认证',
+      })
+      if (host.rdpClient === 'native' && launch.session_id) {
+        nativeSessions.current.set(host.id, launch.session_id)
+        void monitorNativeSession(host.id, launch.session_id)
+      }
+    } catch (error) {
+      updateHost(host.id, {
+        status: statusBeforeLaunch,
+        probeDetail: `启动失败：${errorMessage(error)}`,
+      })
+    }
+  }
+
+  async function monitorWindowsAgentSession(hostId: number, sessionId: string) {
+    let transientFailures = 0
+    while (windowsAgentSessions.current.get(hostId) === sessionId) {
+      try {
+        const diagnostics = await getWindowsAgentSession(sessionId)
+        transientFailures = 0
+        const metric = (value: number | null) => value === null ? undefined : Math.round(value * 10) / 10
+        const detail = diagnostics.state === 'connecting'
+          ? 'Windows Agent 正在连接并等待首帧'
+          : diagnostics.state === 'connected'
+            ? `Windows Agent 已连接，${diagnostics.desktop_width} × ${diagnostics.desktop_height}，已接收 ${diagnostics.frame_count} 帧`
+            : diagnostics.state === 'failed'
+              ? `Windows Agent 会话失败：${diagnostics.error_code ?? 'unknown'}`
+              : 'Windows Agent 会话已结束'
+        updateHost(hostId, {
+          nativeSessionState: diagnostics.state,
+          captureLatency: metric(diagnostics.capture_latency_ms),
+          encodeLatency: metric(diagnostics.encode_latency_ms),
+          frameProcessingLatency: metric(diagnostics.frame_processing_latency_ms),
+          decodeLatency: metric(diagnostics.decode_latency_ms),
+          presentationLatency: metric(diagnostics.presentation_latency_ms),
+          frameRate: metric(diagnostics.frames_per_second),
+          nativeRenderer: diagnostics.renderer,
+          qualityUpdatedAt: diagnostics.updated_at_unix_ms,
+          probeDetail: detail,
+        })
+        if (diagnostics.state === 'failed' || diagnostics.state === 'terminated') { windowsAgentSessions.current.delete(hostId); return }
+      } catch (error) {
+        transientFailures += 1
+        if (transientFailures >= 8) { windowsAgentSessions.current.delete(hostId); updateHost(hostId, { probeDetail: `无法读取 Windows Agent 会话状态：${errorMessage(error)}` }); return }
+      }
+      await new Promise((resolve) => window.setTimeout(resolve, 750))
+    }
+  }
+
+  async function pairLinuxTerminal(host: Host) {
+    const fingerprint = '0'.repeat(64)
+    const userError = linuxUserError(host.username)
+    if (userError) {
+      updateHost(host.id, { probeDetail: userError })
+      return
+    }
+    try {
+      await launchLinuxTerminal({
+        address: host.address,
+        user: host.username.trim(),
+        certificate_sha256: fingerprint,
+        pair: true,
+        agent_public_key: settings.edgeApiUrl.trim()
+          ? normalizedAgentPublicKey(host.agentPublicKey)
+          : null,
+        edge_api_url: settings.edgeApiUrl.trim() || null,
+      })
+      updateHost(host.id, { agentIdentityState: 'unknown' })
+      updateHost(host.id, {
+        probeDetail: settings.edgeApiUrl.trim()
+          ? normalizedAgentPublicKey(host.agentPublicKey) !== null
+            ? 'Edge 首次配对 relay 正在建立，请在新窗口输入一次性配对码'
+            : '未配置 Agent 设备公钥，请在新窗口完成一次性直连配对'
+          : '请在新打开的本地窗口输入一次性配对码',
+      })
+      if (capabilities?.linux.agent_identity_store) {
+        for (let attempt = 0; attempt < 60; attempt += 1) {
+          await new Promise((resolve) => window.setTimeout(resolve, 2_000))
+          const status = await getLinuxAgentIdentityStatus(fingerprint)
+          if (status === 'ready') {
+            updateHost(host.id, {
+              agentIdentityState: 'ready',
+              probeDetail: 'Linux Agent 已配对，证书绑定身份已保存',
+            })
+            return
+          }
+        }
+      }
+    } catch (error) {
+      updateHost(host.id, { probeDetail: `无法启动 Linux Agent 配对：${errorMessage(error)}` })
+    }
+  }
+
+  async function startLinuxFileTransfer(host: Host) {
+    const fingerprint = '0'.repeat(64)
+    const userError = linuxUserError(host.username)
+    if (userError || !fileLocalPath.trim() || !fileRemotePath.trim()) {
+      updateHost(host.id, { probeDetail: userError ?? '文件传输需要 Linux 用户、本地路径和远端相对路径' })
+      return
+    }
+    setFileTransferBusy(true)
+    try {
+      await launchLinuxFileTransfer({ address: host.address, user: host.username.trim(), certificate_sha256: fingerprint, direction: fileDirection, local_path: fileLocalPath.trim(), remote_path: fileRemotePath.trim(), edge_api_url: settings.edgeApiUrl.trim() || null })
+      updateHost(host.id, {
+        probeDetail: `${settings.edgeApiUrl.trim() ? 'Edge 签名授权和中继已建立，' : ''}${fileDirection === 'upload' ? '上传' : '下载'}已在独立传输窗口中启动`,
+      })
+    } catch (error) {
+      updateHost(host.id, { probeDetail: `文件传输启动失败：${errorMessage(error)}` })
+    } finally {
+      setFileTransferBusy(false)
+    }
+  }
+
+  async function refreshCredentialStatus(host: Host, reportError = true) {
+    if (host.kind !== 'windows_rdp' || !capabilities?.rdp.credential_store) return
+    try {
+      const status = await getRdpCredentialStatus(host.credentialRef)
+      updateHost(host.id, { credentialState: status })
+    } catch (error) {
+      updateHost(host.id, {
+        credentialState: 'unknown',
+        probeDetail: reportError
+          ? `无法读取凭据状态：${errorMessage(error)}`
+          : host.probeDetail,
+      })
+    }
+  }
+
+  async function configureCredential(host: Host) {
+    try {
+      await configureRdpCredential(host.credentialRef)
+      updateHost(host.id, {
+        credentialState: 'unknown',
+        probeDetail: '请在新打开的本地窗口中输入 Windows 登录凭据',
+      })
+      for (let attempt = 0; attempt < 60; attempt += 1) {
+        await new Promise((resolve) => window.setTimeout(resolve, 2_000))
+        const status = await getRdpCredentialStatus(host.credentialRef)
+        if (status === 'ready') {
+          updateHost(host.id, {
+            credentialState: 'ready',
+            probeDetail: 'Windows 登录凭据已安全保存',
+          })
+          return
+        }
+      }
+    } catch (error) {
+      updateHost(host.id, {
+        credentialState: 'unknown',
+        probeDetail: `无法配置凭据：${errorMessage(error)}`,
+      })
+    }
+  }
+
+  async function removeCredential(host: Host) {
+    if (!window.confirm(`删除 ${host.name} 的已保存登录凭据？`)) return
+    try {
+      await deleteRdpCredential(host.credentialRef)
+      updateHost(host.id, {
+        credentialState: 'missing',
+        probeDetail: '已从 Windows 凭据管理器删除登录凭据',
+      })
+    } catch (error) {
+      updateHost(host.id, { probeDetail: `无法删除凭据：${errorMessage(error)}` })
+    }
+  }
+
+  async function monitorNativeSession(hostId: number, sessionId: string) {
+    let transientFailures = 0
+    while (nativeSessions.current.get(hostId) === sessionId) {
+      try {
+        const diagnostics = await getNativeRdpSession(sessionId)
+        transientFailures = 0
+        const presentationLatency = diagnostics.presentation_latency_ms === null
+          ? undefined
+          : Math.round(diagnostics.presentation_latency_ms * 10) / 10
+        const decodeLatency = diagnostics.decode_latency_ms === null
+          ? undefined
+          : Math.round(diagnostics.decode_latency_ms * 10) / 10
+        const networkLatency = diagnostics.network_latency_ms === null
+          ? undefined
+          : diagnostics.network_latency_ms
+        const networkBaseLatency = diagnostics.base_network_latency_ms === null
+          ? undefined
+          : diagnostics.base_network_latency_ms
+        const networkUpdate = networkLatency === undefined
+          ? diagnostics.state === 'reconnecting'
+            ? {
+                latency: undefined,
+                sessionNetworkLatency: undefined,
+                networkBaseLatency: undefined,
+                bandwidthKbps: undefined,
+              }
+            : {}
+          : {
+              latency: networkLatency,
+              sessionNetworkLatency: true,
+              networkBaseLatency,
+              bandwidthKbps: diagnostics.bandwidth_kbps ?? undefined,
+            }
+        const frameRate = diagnostics.frames_per_second === null
+          ? undefined
+          : Math.round(diagnostics.frames_per_second * 10) / 10
+        const resizeSize = diagnostics.resize_requested_width !== null
+          && diagnostics.resize_requested_height !== null
+          ? `${diagnostics.resize_requested_width} × ${diagnostics.resize_requested_height}`
+          : '新尺寸'
+        const resizeDetail = diagnostics.state === 'failed' || diagnostics.state === 'terminated'
+          ? null
+          : diagnostics.resize_state === 'pending'
+          ? `IronRDP 正在请求 ${resizeSize}，等待远端桌面尺寸确认`
+          : diagnostics.resize_state === 'reconnect_required'
+            ? `远端未应用 ${resizeSize}（${diagnostics.resize_failure === 'timeout' ? '确认超时' : '不支持动态调整'}），请在原生窗口确认是否重连`
+            : diagnostics.resize_state === 'reconnecting'
+              ? `已确认按 ${resizeSize} 重连，等待远端新尺寸画面`
+              : diagnostics.resize_state === 'cancelled'
+                ? `已取消按 ${resizeSize} 重连，当前会话保持连接`
+                : null
+        const detail = resizeDetail ?? (diagnostics.state === 'waiting_for_credentials'
+          ? 'IronRDP 等待在本地窗口输入凭据'
+          : diagnostics.state === 'connecting'
+            ? 'IronRDP 正在协商并认证远程会话'
+            : diagnostics.state === 'connected'
+              ? `IronRDP 已连接，${diagnostics.desktop_width} × ${diagnostics.desktop_height}，已接收 ${diagnostics.frame_count} 帧${diagnostics.resize_state === 'confirmed' ? `，已确认第 ${diagnostics.resize_generation} 次尺寸调整` : diagnostics.resize_state === 'cancelled' ? '，最近一次尺寸重连已取消' : ''}`
+              : diagnostics.state === 'reconnecting'
+                ? `IronRDP 连接中断，正在进行第 ${diagnostics.reconnect_attempt} 次自动重连`
+              : diagnostics.state === 'failed'
+                ? `IronRDP 会话失败：${nativeSessionErrorLabel(diagnostics.error_code)}`
+                : 'IronRDP 会话已结束')
+        updateHost(hostId, {
+          ...networkUpdate,
+          nativeSessionState: diagnostics.state,
+          nativeMonitorCount: diagnostics.monitor_count,
+          decodeLatency,
+          presentationLatency,
+          frameRate,
+          nativeRenderer: diagnostics.renderer,
+          frameUploadMode: diagnostics.frame_upload_mode,
+          frameUploadPixels: diagnostics.frame_upload_pixels,
+          frameConversionPixels: diagnostics.frame_conversion_pixels,
+          qualityUpdatedAt: diagnostics.updated_at_unix_ms,
+          probeDetail: detail,
+        })
+        if (diagnostics.state === 'failed' || diagnostics.state === 'terminated') {
+          nativeSessions.current.delete(hostId)
+          return
+        }
+      } catch (error) {
+        const transient = error instanceof ControlApiError
+          && (error.status === 404 || error.status === 409)
+        transientFailures += 1
+        if (!transient || transientFailures >= 8) {
+          nativeSessions.current.delete(hostId)
+          updateHost(hostId, {
+            probeDetail: `无法读取 IronRDP 会话状态：${errorMessage(error)}`,
+          })
+          return
+        }
+      }
+      await new Promise((resolve) => window.setTimeout(resolve, 750))
+    }
+  }
+
+  async function monitorLinuxDesktopSession(hostId: number, sessionId: string) {
+    let transientFailures = 0
+    while (linuxDesktopSessions.current.get(hostId) === sessionId) {
+      try {
+        const diagnostics = await getLinuxDesktopSession(sessionId)
+        transientFailures = 0
+        const metric = (value: number | null) => value === null
+          ? undefined
+          : Math.round(value * 10) / 10
+        const detail = diagnostics.state === 'connecting'
+          ? 'Linux X11 桌面正在连接'
+          : diagnostics.state === 'connected'
+            ? `Linux X11 桌面已连接，${diagnostics.desktop_width} × ${diagnostics.desktop_height}，已接收 ${diagnostics.frame_count} 帧`
+            : diagnostics.state === 'reconnecting'
+              ? `Linux X11 连接中断，正在进行第 ${diagnostics.reconnect_attempt} 次自动重连`
+            : diagnostics.state === 'failed'
+              ? `Linux X11 桌面会话失败（${diagnostics.error_code ?? 'unknown'}）`
+              : 'Linux X11 桌面会话已结束'
+        updateHost(hostId, {
+          nativeSessionState: diagnostics.state,
+          latency: metric(diagnostics.network_latency_ms),
+          captureLatency: metric(diagnostics.capture_latency_ms),
+          encodeLatency: metric(diagnostics.encode_latency_ms),
+          compressionLevel: diagnostics.compression_level ?? undefined,
+          compressionRatio: metric(diagnostics.compression_ratio_percent),
+          decodeLatency: metric(diagnostics.decode_latency_ms),
+          presentationLatency: metric(diagnostics.presentation_latency_ms),
+          sessionClipboardRead: diagnostics.clipboard_read,
+          sessionClipboardWrite: diagnostics.clipboard_write,
+          frameRate: metric(diagnostics.frames_per_second),
+          qualityUpdatedAt: diagnostics.updated_at_unix_ms,
+          probeDetail: detail,
+        })
+        if (diagnostics.state === 'failed' || diagnostics.state === 'terminated') {
+          linuxDesktopSessions.current.delete(hostId)
+          return
+        }
+      } catch (error) {
+        const transient = error instanceof ControlApiError
+          && (error.status === 404 || error.status === 409)
+        transientFailures += 1
+        if (!transient || transientFailures >= 8) {
+          linuxDesktopSessions.current.delete(hostId)
+          updateHost(hostId, {
+            probeDetail: `无法读取 Linux 桌面会话状态：${errorMessage(error)}`,
+          })
+          return
+        }
+      }
+      await new Promise((resolve) => window.setTimeout(resolve, 750))
+    }
+  }
+
+  async function refresh() {
+    setRefreshing(true)
+    try {
+      const detectedCapabilities = await getControlCapabilities()
+      setCapabilities(detectedCapabilities)
+      setControlServiceStatus('ready')
+      try {
+        const detectedSettings = await getControlSettings()
+        setSettings((current) => ({
+          ...current,
+          edgeApiUrl: detectedSettings.edge_api_url ?? '',
+          updateManifestUrl: detectedSettings.update_manifest_url ?? '',
+          updatePublicKey: detectedSettings.update_public_key ?? '',
+          autoCheckUpdates: detectedSettings.auto_check_updates ?? true,
+        }))
+        setSettingsDraft((current) => ({
+          ...current,
+          edgeApiUrl: detectedSettings.edge_api_url ?? '',
+          updateManifestUrl: detectedSettings.update_manifest_url ?? '',
+          updatePublicKey: detectedSettings.update_public_key ?? '',
+          autoCheckUpdates: detectedSettings.auto_check_updates ?? true,
+        }))
+      } catch {
+        // Older control services do not expose runtime settings.
+      } finally {
+        setSettingsLoaded(true)
+      }
+      setHosts((current) => current.map((host) => {
+        if (host.kind === 'linux_agent' && !detectedCapabilities.linux.agent_session) {
+          return {
+            ...host,
+            status: 'unknown',
+            path: 'Unavailable',
+            networkPolicy: detectedCapabilities.edge.relay ? host.networkPolicy : 'Direct preferred',
+            probeDetail: '当前构建尚未接入 Linux Agent 会话',
+          }
+        }
+        return {
+          ...host,
+          path: detectedCapabilities.edge.relay ? host.path : 'Direct',
+          networkPolicy: detectedCapabilities.edge.relay ? host.networkPolicy : 'Direct preferred',
+        }
+      }))
+      if (detectedCapabilities.rdp.credential_store) {
+        await Promise.all(hosts
+          .filter((host) => host.kind === 'windows_rdp')
+          .map(async (host) => {
+            try {
+              const status = await getRdpCredentialStatus(host.credentialRef)
+              updateHost(host.id, { credentialState: status })
+            } catch {
+              updateHost(host.id, { credentialState: 'unknown' })
+            }
+          }))
+      }
+      if (detectedCapabilities.linux.agent_identity_store) {
+        await Promise.all(hosts
+          .filter((host) => host.kind === 'linux_agent')
+          .map(async (host) => {
+            const fingerprint = '0'.repeat(64)
+            try {
+              const agentIdentityState = await getLinuxAgentIdentityStatus(fingerprint)
+              updateHost(host.id, { agentIdentityState })
+            } catch {
+              updateHost(host.id, { agentIdentityState: 'unknown' })
+            }
+          }))
+      }
+      await Promise.all(hosts
+        .filter((host) => host.kind === 'windows_rdp')
+        .map((host) => probeHost(host, detectedCapabilities.rdp.protocol_probe)))
+      if (detectedCapabilities.linux.agent_probe) {
+        await Promise.all(hosts
+          .filter((host) => host.kind === 'linux_agent')
+          .map((host) => probeLinuxHost(host)))
+      }
+    } catch (error) {
+      setCapabilities(null)
+      setControlServiceStatus('offline')
+      setHosts((current) => current.map((host) => host.kind === 'windows_rdp'
+        ? { ...host, status: 'unknown', latency: undefined, qualityUpdatedAt: undefined, probeDetail: `控制服务不可用：${errorMessage(error)}` }
+        : host))
+    } finally {
+      setRefreshing(false)
+    }
+  }
+
+  function addHost(event: FormEvent<HTMLFormElement>) {
+    event.preventDefault()
+    const data = new FormData(event.currentTarget)
+    const kind = data.get('kind') as HostKind
+    const username = String(data.get('username') ?? '')
+    const password = String(data.get('password') ?? '')
+    const host: Host = {
+      id: Math.max(0, ...hosts.map((item) => item.id)) + 1,
+      name: String(data.get('name')),
+      address: String(data.get('address')),
+      tags: parseTags(String(data.get('tags') ?? '')),
+      kind,
+      mode: kind === 'windows_rdp' ? 'RDP' : kind === 'windows_agent' ? 'Desktop' : 'Terminal',
+      status: 'unknown',
+      favorite: false,
+      lastUsed: 'Never',
+      path: 'Smart',
+      networkPolicy: 'Smart',
+      resolution: 'Follow window',
+      customWidth: '1600',
+      customHeight: '900',
+      gpu: settings.clientGpu === 'display' ? 'Display adapter' : 'Manual adapter',
+      memoryPath: kind === 'linux_agent' || kind === 'windows_agent' ? 'Pending validation' : 'Unknown',
+      recent: false,
+      strictZeroCopy: (kind === 'linux_agent' || kind === 'windows_agent') && settings.strictZeroCopy,
+      displayMode: 'primary',
+      displays: [],
+      selectedDisplayIds: [],
+      username,
+      credentialState: kind === 'windows_rdp' ? 'unknown' : 'missing',
+      agentIdentityState: kind === 'linux_agent' || kind === 'windows_agent' ? 'unknown' : 'missing',
+      credentialRef: createCredentialRef(),
+      rdpClient: 'system',
+      nativeFullscreen: false,
+      captureInput: false,
+      redirectClipboard: true,
+      clipboardRead: true,
+      clipboardWrite: true,
+      agentPublicKey: kind === 'linux_agent' ? String(data.get('agentPublicKey') ?? '') : undefined,
+      probeDetail: kind === 'windows_rdp'
+        ? '等待 RDP 端口检测'
+        : kind === 'windows_agent' ? 'Windows Agent 已配置；控制端原生会话尚未接入' : capabilities?.linux.agent_session ? '等待 Agent 上线' : '当前构建尚未接入 Linux Agent 会话',
+    }
+    setHosts((current) => [...current, host])
+    setSelectedId(host.id)
+    setAddOpen(false)
+    if (kind === 'windows_rdp' && password) {
+      void saveRdpCredential(host.credentialRef, username, password).then(() => {
+        updateHost(host.id, { credentialState: 'ready', probeDetail: '登录凭据已安全保存' })
+      }).catch((error) => {
+        updateHost(host.id, { credentialState: 'unknown', probeDetail: `凭据保存失败：${errorMessage(error)}` })
+      })
+    }
+    if (kind === 'windows_rdp') void probeHost(host)
+    if (kind === 'windows_agent') void probeWindowsAgentHost(host)
+    if (kind === 'linux_agent' && capabilities?.linux.agent_probe) void probeLinuxHost(host)
+  }
+
+  return (
+    <div className="app-shell" data-theme={theme}>
+      <header className="topbar">
+        <div className="brand">
+          <span className="brand-mark"><img src="./remotedesk-icon.svg" alt="" /></span>
+          <span>RemoteDesk</span>
+        </div>
+        <div className="search-field">
+          <Search size={16} />
+          <input
+            aria-label="搜索主机"
+            onChange={(event) => setQuery(event.target.value)}
+            placeholder="搜索主机或地址"
+            ref={searchInput}
+            value={query}
+          />
+          <kbd>Ctrl K</kbd>
+        </div>
+        <time className="topbar-clock" dateTime={now.toISOString()} title="当前本地时间">
+          <Clock3 aria-hidden="true" size={15} />
+          <span>{clockFormatter.format(now)}</span>
+        </time>
+        <div className="top-actions">
+          {updateResult?.status === 'available' && (
+            <button className="icon-button update-available" onClick={openSettings} title={`可升级到 ${updateResult.release?.version ?? '新版本'}`}>
+              <Download size={17} />
+            </button>
+          )}
+          <button className="icon-button" disabled={refreshing} onClick={refresh} title="刷新状态">
+            <RefreshCw className={refreshing ? 'spin' : ''} size={17} />
+          </button>
+          <button className="command-button" onClick={() => setAddOpen(true)}>
+            <CirclePlus size={17} />
+            新增主机
+          </button>
+          <button
+            aria-label={theme === 'dark' ? '切换到白色主题' : '切换到深色主题'}
+            className="icon-button"
+            onClick={() => setTheme((current) => current === 'dark' ? 'light' : 'dark')}
+            title={theme === 'dark' ? '白色主题' : '深色主题'}
+          >
+            {theme === 'dark' ? <Sun size={17} /> : <Moon size={17} />}
+          </button>
+          <button className="icon-button" onClick={openSettings} title="设置">
+            <Settings size={17} />
+          </button>
+        </div>
+      </header>
+
+      <div className="workspace">
+        <aside className="sidebar">
+          <nav aria-label="主机筛选">
+            {filters.map((item) => {
+              const count = hosts.filter((host) => {
+                if (item.id === 'windows') return host.kind === 'windows_rdp' || host.kind === 'windows_agent'
+                if (item.id === 'linux') return host.kind === 'linux_agent'
+                if (item.id === 'favorites') return host.favorite
+                if (item.id === 'recent') return host.recent
+                return true
+              }).length
+              return (
+                <button
+                  className={filter === item.id ? 'nav-item active' : 'nav-item'}
+                  key={item.id}
+                  onClick={() => setFilter(item.id)}
+                >
+                  <span>{item.label}</span>
+                  <span className="nav-count">{count}</span>
+                </button>
+              )
+            })}
+            {availableTags.length > 0 && <>
+              <div className="sidebar-label">标签</div>
+              {availableTags.map(([tag, count]) => (
+                <button
+                  className={selectedTag === tag ? 'nav-item active tag-filter' : 'nav-item tag-filter'}
+                  key={tag}
+                  onClick={() => setSelectedTag((current) => current === tag ? null : tag)}
+                ><span className="tag-filter-name"><span className="tag-dot" />{tag}</span><span className="nav-count">{count}</span></button>
+              ))}
+            </>}
+          </nav>
+          <div className="sidebar-status">
+            <span className={`status-dot ${controlServiceStatus === 'checking' ? 'probing' : controlServiceStatus}`} />
+            <span>{controlServiceStatus === 'checking' ? '正在检查控制服务' : controlServiceStatus === 'ready' ? '控制服务正常' : '控制服务不可用'}</span>
+          </div>
+        </aside>
+
+        <main className="host-area">
+          <div className="section-heading">
+            <div>
+              <h1>远程主机</h1>
+              <span>{visibleHosts.length} 个结果</span>
+            </div>
+            <div className="path-summary"><Network size={15} /> {capabilities?.edge.relay ? '智能路径' : '当前仅直连'}</div>
+          </div>
+
+          <div className="host-table" role="table" aria-label="远程主机列表">
+            <div className="table-row table-header" role="row">
+              <span role="columnheader">主机</span><span role="columnheader">类型</span><span role="columnheader">状态</span><span role="columnheader">路径</span><span role="columnheader">最近使用</span><span role="columnheader">操作</span>
+            </div>
+            {visibleHosts.map((host) => (
+              <div
+                className={selected?.id === host.id ? 'table-row host-row selected' : 'table-row host-row'}
+                key={host.id}
+                onClick={() => setSelectedId(host.id)}
+                onKeyDown={(event) => {
+                  if (event.target !== event.currentTarget) return
+                  if (event.key === 'Enter' || event.key === ' ') {
+                    event.preventDefault()
+                    setSelectedId(host.id)
+                  }
+                }}
+                role="row"
+                tabIndex={0}
+              >
+                <span className="host-identity" role="cell">
+                  <span className="host-icon">
+                    {host.mode === 'Terminal' ? <SquareTerminal size={17} /> : <Monitor size={17} />}
+                  </span>
+                  <span><strong>{host.name}</strong><small>{host.address}</small>{(host.tags ?? []).length > 0 && <span className="host-tags">{(host.tags ?? []).map((tag) => <span className="tag-chip" key={tag}>{tag}</span>)}</span>}</span>
+                </span>
+                <span role="cell"><span className="host-type-label">{hostKindLabel(host)}</span><small className="host-mode-label">{host.mode}</small></span>
+                <span className="status-cell" role="cell"><span className={`status-dot ${host.status}`} />{statusLabel(host)}</span>
+                <span role="cell">{host.path}</span>
+                <span role="cell">{host.lastUsed}</span>
+                <span className="row-actions" role="cell">
+                  <button
+                    aria-label={`连接 ${host.name}`}
+                    className="row-icon primary"
+                    disabled={host.status === 'connecting'}
+                    onClick={(event) => { event.stopPropagation(); connect(host) }}
+                    title={connectTitle(host)}
+                  ><Play size={15} fill="currentColor" /></button>
+                  <button
+                    aria-label={host.favorite ? `取消收藏 ${host.name}` : `收藏 ${host.name}`}
+                    className={host.favorite ? 'row-icon primary' : 'row-icon'}
+                    onClick={(event) => {
+                      event.stopPropagation()
+                      updateHost(host.id, { favorite: !host.favorite })
+                    }}
+                    title={host.favorite ? '取消收藏' : '收藏'}
+                  ><Star fill={host.favorite ? 'currentColor' : 'none'} size={16} /></button>
+                  <button
+                    aria-label={`删除 ${host.name}`}
+                    className="row-icon danger"
+                    onClick={(event) => { event.stopPropagation(); void deleteHost(host) }}
+                    title="删除主机"
+                  ><Trash2 size={15} /></button>
+                </span>
+              </div>
+            ))}
+            {visibleHosts.length === 0 && <div className="empty-state">没有匹配的主机</div>}
+          </div>
+        </main>
+
+        {selected ? <aside className="inspector" key={selected.id}>
+          <div className="inspector-title">
+            <div>
+              <span className={`status-dot ${selected.status}`} />
+              <h2>{selected.name}</h2>
+              <p>{selected.address}</p>
+            </div>
+            <div className="inspector-actions">
+              {selected.kind === 'windows_rdp' && <button className="icon-button compact" disabled={selected.status === 'probing' || selected.status === 'connecting' || capabilities?.rdp.probe === false} onClick={() => void probeHost(selected)} title="重新检测（不影响直接连接）"><RefreshCw size={15} /></button>}
+              {selected.kind === 'linux_agent' && <button className="icon-button compact" disabled={selected.status === 'probing' || selected.status === 'connecting' || !capabilities?.linux.agent_probe} onClick={() => void probeLinuxHost(selected)} title="重新验证 Agent 证书和能力"><RefreshCw size={15} /></button>}
+              <button className="icon-button compact" onClick={openSettings} title="打开设置"><Settings size={15} /></button>
+            </div>
+          </div>
+
+          <section className="inspector-section">
+            <h3>主机信息</h3>
+            <label>名称<input aria-label="主机名称" maxLength={128} onChange={(event) => updateHostIdentity(selected, 'name', event.target.value)} placeholder="主机名称" value={selected.name} /></label>
+            <label>地址<input aria-label="主机地址" maxLength={253} onChange={(event) => updateHostIdentity(selected, 'address', event.target.value)} placeholder="主机名或 IP:端口" spellCheck={false} value={selected.address} /></label>
+            <label>标签<input aria-label="主机标签，多个标签用逗号分隔" maxLength={512} onChange={(event) => updateHostTags(selected, event.target.value)} placeholder="例如：生产，办公，GPU" value={(selected.tags ?? []).join(', ')} /></label>
+            {(selected.tags ?? []).length > 0 && <div className="tag-editor-preview">{(selected.tags ?? []).map((tag) => <span className="tag-chip" key={tag}>{tag}</span>)}</div>}
+            {selected.name.trim().length === 0 && <small className="connection-note">名称不能为空</small>}
+            {selected.address.trim().length === 0 && <small className="connection-note">地址不能为空</small>}
+          </section>
+
+          <section className="inspector-section">
+            <h3>会话</h3>
+            {selected.kind === 'windows_rdp' ? (
+              <div className="rdp-client-field">
+                <span>RDP 客户端</span>
+                <div className="segmented-control" role="group" aria-label="RDP 客户端">
+                  <button className={selected.rdpClient === 'system' ? 'active' : ''} disabled={!capabilities?.rdp.external_launch} onClick={() => chooseRdpClient(selected, 'system')} title="使用 Windows 系统远程桌面" type="button"><ExternalLink size={14} />mstsc</button>
+                  <button className={selected.rdpClient === 'native' ? 'active' : ''} disabled={!capabilities?.rdp.native_launch || (selected.displayMode === 'all' && !capabilities?.rdp.native_multimon)} onClick={() => chooseRdpClient(selected, 'native')} title={selected.displayMode === 'all' && !capabilities?.rdp.native_multimon ? '当前安装的原生客户端不支持全部显示器' : '使用 IronRDP 原生窗口'} type="button"><Cpu size={14} />客户端内</button>
+                </div>
+                <small className="connection-note">{selected.rdpClient === 'native'
+                  ? capabilities?.rdp.native_renderer === 'd3d11_cpu_upload' ? 'D3D11 swap chain 呈现（CPU 上传）' : '软件帧缓冲兼容路径，支持窗口动态分辨率'
+                  : '系统认证窗口，支持完整的 mstsc 显示能力'}</small>
+              </div>
+            ) : selected.kind === 'windows_agent' ? (
+              <>
+                <label>连接模式
+                  <select aria-label="Windows Agent 连接模式" value={selected.mode} onChange={(event) => updateMode(selected, event.target.value)}>
+                    <option value="Desktop">桌面</option>
+                    <option value="Application">应用</option>
+                  </select>
+                </label>
+                {selected.mode === 'Application' && <label>应用
+                  <select aria-label="Windows Agent 应用" value={selected.agentApplication ?? ''} onChange={(event) => updateHost(selected.id, { agentApplication: event.target.value || undefined })}>
+                    <option value="">选择应用</option>
+                    {(selected.agentApplications ?? []).map((application) => <option key={application.id} value={application.id}>{application.name}</option>)}
+                  </select>
+                </label>}
+              </>
+            ) : <label>连接模式<select value={selected.mode} onChange={(event) => updateMode(selected, event.target.value)}><option disabled={!capabilities?.linux.wayland_desktop}>Wayland</option><option disabled={!capabilities?.linux.x11_desktop}>Xorg</option><option>Terminal</option></select></label>}
+            <label>{selected.kind === 'windows_rdp' ? 'RDP 显示器' : '捕获显示器'}<select disabled={selected.mode === 'Terminal' || (selected.kind === 'linux_agent' && selected.displays.length === 0)} value={selected.displayMode} onChange={(event) => updateDisplayMode(selected, event.target.value as DisplayMode)}>{selected.kind === 'windows_rdp' ? <><option value="primary">主显示器</option><option disabled={selected.rdpClient === 'native' && !capabilities?.rdp.native_multimon} value="all">全部本地显示器</option>{selected.displays.length > 1 && <option value="custom">选择显示器</option>}</> : selected.displays.length === 0 ? <option value="primary">等待能力上报</option> : <><option value="primary">主显示器</option><option value="all">全部显示器 ({selected.displays.length})</option>{selected.displays.length > 1 && <option value="custom">选择显示器</option>}</>}</select></label>
+            {selected.displayMode === 'custom' && selected.mode !== 'Terminal' && (
+              <fieldset className="display-picker">
+                <legend>{selected.kind === 'windows_rdp' ? '本地显示布局' : '远端捕获源'}</legend>
+                {selected.displays.map((display) => (
+                  <label className="display-option" key={display.id}>
+                    <input checked={selected.selectedDisplayIds.includes(display.id)} onChange={() => toggleDisplay(selected, display.id)} type="checkbox" />
+                    <span><strong>{display.name}{display.primary ? ' · 主屏' : ''}</strong><small>{display.resolution}</small></span>
+                  </label>
+                ))}
+              </fieldset>
+            )}
+            <label>{selected.displayMode === 'primary' ? '分辨率' : '组合桌面分辨率上限'}<select disabled={selected.mode === 'Terminal' || (selected.kind === 'windows_rdp' && selected.displayMode === 'all')} value={selected.resolution} onChange={(event) => updateHost(selected.id, { resolution: event.target.value })}>{selected.mode === 'Terminal' ? <option>Terminal</option> : <><option value="Follow window">跟随窗口</option><option value="1280 x 720">1280 x 720</option><option value="1600 x 900">1600 x 900</option><option value="1920 x 1080">1920 x 1080</option><option value="2560 x 1440">2560 x 1440</option><option value="3840 x 2160">3840 x 2160</option><option value="Custom">自定义</option></>}</select></label>
+            {selected.resolution === 'Custom' && selected.mode !== 'Terminal' && (
+              <div className="resolution-custom">
+                <label>宽度<input aria-label="自定义分辨率宽度" inputMode="numeric" max={maxRdpDimension} min={minRdpDimension} onChange={(event) => updateHost(selected.id, { customWidth: event.target.value })} type="number" value={selected.customWidth} /></label>
+                <span>×</span>
+                <label>高度<input aria-label="自定义分辨率高度" inputMode="numeric" max={maxRdpDimension} min={minRdpDimension} onChange={(event) => updateHost(selected.id, { customHeight: event.target.value })} type="number" value={selected.customHeight} /></label>
+              </div>
+            )}
+            {selected.kind === 'windows_rdp' && selected.rdpClient === 'native' && (
+              <label className="toggle-row">
+                <span><strong>启动时全屏</strong><small>使用原生窗口覆盖当前显示器</small></span>
+                <input aria-label="启动原生 RDP 时全屏" checked={selected.nativeFullscreen} onChange={(event) => updateHost(selected.id, { nativeFullscreen: event.target.checked })} type="checkbox" />
+              </label>
+            )}
+            {selected.kind === 'linux_agent' && selected.mode === 'Xorg' && capabilities?.linux.x11_desktop && (
+              <>
+                <label className="toggle-row">
+                  <span><strong>启动时全屏</strong><small>Linux 桌面窗口覆盖当前显示器</small></span>
+                  <input aria-label="启动 Linux 桌面时全屏" checked={selected.nativeFullscreen} onChange={(event) => updateHost(selected.id, { nativeFullscreen: event.target.checked })} type="checkbox" />
+                </label>
+                <label className="toggle-row">
+                  <span><strong>相对鼠标</strong></span>
+                  <input aria-label="启动 Linux 桌面时捕获相对鼠标" checked={selected.captureInput} disabled={!capabilities.linux.relative_pointer} onChange={(event) => updateHost(selected.id, { captureInput: event.target.checked })} type="checkbox" />
+                </label>
+              </>
+            )}
+            {selected.kind === 'windows_rdp' && capabilities?.rdp.clipboard && (
+              <label className="toggle-row">
+                <span><strong>双向剪贴板</strong><small>通过 RDP CLIPRDR 重定向</small></span>
+                <input aria-label="启用 RDP 双向剪贴板" checked={selected.redirectClipboard} onChange={(event) => updateHost(selected.id, { redirectClipboard: event.target.checked })} type="checkbox" />
+              </label>
+            )}
+            {selected.kind === 'linux_agent' && selected.mode === 'Xorg' && capabilities?.linux.clipboard_read && (
+              <label className="toggle-row">
+                <span><strong>读取被控端剪贴板</strong><small>把 X11 文本同步到本机</small></span>
+                <input aria-label="读取 Linux 被控端剪贴板" checked={selected.clipboardRead} onChange={(event) => updateHost(selected.id, { clipboardRead: event.target.checked })} type="checkbox" />
+              </label>
+            )}
+            {selected.kind === 'linux_agent' && selected.mode === 'Xorg' && capabilities?.linux.clipboard_write && (
+              <label className="toggle-row">
+                <span><strong>写入被控端剪贴板</strong><small>把本机文本同步到 X11</small></span>
+                <input aria-label="写入 Linux 被控端剪贴板" checked={selected.clipboardWrite} onChange={(event) => updateHost(selected.id, { clipboardWrite: event.target.checked })} type="checkbox" />
+              </label>
+            )}
+            {selected.kind === 'windows_rdp' && selected.rdpClient === 'native' && capabilities?.rdp.audio_playback && (
+              <div className="metric-row"><span>远程音频</span><strong>本地播放</strong></div>
+            )}
+            {selected.kind === 'linux_agent' && selected.mode !== 'Terminal' && capabilities?.linux.opus_audio && (
+              <div className="metric-row"><span>远程音频</span><strong>Opus 本地播放</strong></div>
+            )}
+            {selected.kind === 'linux_agent' && selected.mode === 'Xorg' && (
+              <div className="metric-row">
+                <span>当前会话剪贴板</span>
+                <strong>{linuxClipboardSessionStatus(selected)}</strong>
+              </div>
+            )}
+            <label>网络策略<select disabled={!capabilities?.edge.relay} value={selected.networkPolicy} onChange={(event) => updateHost(selected.id, { networkPolicy: event.target.value as NetworkPolicy })}><option disabled={!capabilities?.edge.relay}>Smart</option><option>Direct preferred</option><option disabled={!capabilities?.edge.relay}>CDN preferred</option></select></label>
+          </section>
+
+          <section className="inspector-section">
+            <h3>GPU 与内存路径</h3>
+            <div className="metric-row"><span><Cpu size={14} /> GPU</span><strong>{selected.gpu}</strong></div>
+            <div className="metric-row"><span><ShieldCheck size={14} /> 路径</span><strong className={selected.memoryPath === 'zero_copy' ? 'good-text' : ''}>{selected.memoryPath}</strong></div>
+            {selected.kind === 'linux_agent' && <div className="metric-row"><span>H.264 硬解探针</span><strong>{capabilities?.linux.native_video_decoder_probe ? 'Decoder 与 NV12 surface 可创建' : '不可用'}</strong></div>}
+            {selected.kind === 'linux_agent' && <div className="metric-row"><span>DXGI surface 呈现</span><strong>{capabilities?.linux.native_video_surface_presenter ? 'VideoProcessor 窗口可用' : '不可用'}</strong></div>}
+            {selected.kind === 'linux_agent' && selected.mode !== 'Terminal' && capabilities?.linux.native_video && (
+              <label className="toggle-row">
+                <span><strong>双端严格零拷贝</strong><small>不允许 CPU 或跨 GPU 回退</small></span>
+                <input aria-label="双端严格零拷贝" checked={selected.strictZeroCopy} onChange={(event) => updateHost(selected.id, { strictZeroCopy: event.target.checked })} type="checkbox" />
+              </label>
+            )}
+          </section>
+
+          {selected.kind === 'windows_rdp' && (
+            <section className="inspector-section">
+              <h3>Windows 凭据</h3>
+              <div className="metric-row"><span><KeyRound size={14} /> 账户</span><strong>{selected.username || '未配置'}</strong></div>
+              <div className="metric-row"><span>状态</span><strong>由 Windows 管理</strong></div>
+              <div className="certificate-observed">
+                <span>登录凭据</span>
+                <code>{selected.credentialState === 'ready' ? '已保存' : selected.credentialState === 'missing' ? '未配置' : '待检查'}</code>
+              </div>
+              <div className="certificate-actions">
+                <button
+                  className="secondary-button credential-button"
+                  disabled={!capabilities?.rdp.credential_store}
+                  onClick={() => void configureCredential(selected)}
+                  type="button"
+                >
+                  <KeyRound size={15} />保存凭据
+                </button>
+                <button
+                  className="icon-button compact"
+                  disabled={!capabilities?.rdp.credential_store}
+                  onClick={() => void refreshCredentialStatus(selected)}
+                  title="检查登录凭据状态"
+                  type="button"
+                ><RefreshCw size={15} /></button>
+                <button
+                  className="icon-button compact danger"
+                  disabled={!capabilities?.rdp.credential_store || selected.credentialState === 'missing'}
+                  onClick={() => void removeCredential(selected)}
+                  title="删除已保存的登录凭据"
+                  type="button"
+                ><Trash2 size={15} /></button>
+                <button className="icon-button compact" disabled={!capabilities?.rdp.credential_manager} onClick={() => {
+                  void openCredentialManager().catch((error) => {
+                    updateHost(selected.id, { probeDetail: `无法打开凭据管理器：${errorMessage(error)}` })
+                  })
+                }} title="打开 Windows 凭据管理器" type="button">
+                  <ExternalLink size={15} />
+                </button>
+              </div>
+            </section>
+          )}
+
+          {selected.kind === 'linux_agent' && (
+            <section className="inspector-section">
+              <h3>Linux Agent</h3>
+              <label>登录用户
+                <input
+                  autoComplete="username"
+                  onChange={(event) => updateHost(selected.id, { username: event.target.value })}
+                  placeholder="Linux 用户（可为 root）"
+                  value={selected.username}
+                />
+              </label>
+              <label>Agent 设备公钥
+                <input
+                  autoComplete="off"
+                  className="certificate-input"
+                  onChange={(event) => updateHost(selected.id, { agentPublicKey: event.target.value })}
+                  placeholder="配对码命令输出的 device_public_key"
+                  spellCheck={false}
+                  value={selected.agentPublicKey ?? ''}
+                />
+              </label>
+              <button
+                className="secondary-button credential-button"
+                disabled={selected.status === 'connecting'}
+                onClick={() => void pairLinuxTerminal(selected)}
+                type="button"
+              >
+                <KeyRound size={15} />{settings.edgeApiUrl.trim() && normalizedAgentPublicKey(selected.agentPublicKey) !== null ? '经 Edge 配对' : '直连配对'}
+              </button>
+            </section>
+          )}
+
+          {selected.kind === 'linux_agent' && capabilities?.linux.file_transfer && (
+            <section className="inspector-section">
+              <h3>文件传输</h3>
+              <div className="segmented-control file-direction">
+                <button className={fileDirection === 'upload' ? 'active' : ''} onClick={() => setFileDirection('upload')} type="button"><Upload size={14} />上传</button>
+                <button className={fileDirection === 'download' ? 'active' : ''} onClick={() => setFileDirection('download')} type="button"><Download size={14} />下载</button>
+              </div>
+              <label>本地文件路径<input onChange={(event) => setFileLocalPath(event.target.value)} placeholder={fileDirection === 'upload' ? 'C:\\Users\\name\\file.bin' : 'C:\\Users\\name\\Downloads\\file.bin'} value={fileLocalPath} /></label>
+              <label>远端主目录相对路径<input onChange={(event) => setFileRemotePath(event.target.value)} placeholder="Documents/file.bin" value={fileRemotePath} /></label>
+              <button className="secondary-button credential-button" disabled={fileTransferBusy || !fileLocalPath.trim() || !fileRemotePath.trim()} onClick={() => void startLinuxFileTransfer(selected)} type="button">{fileDirection === 'upload' ? <Upload size={15} /> : <Download size={15} />}{fileTransferBusy ? '正在启动' : fileDirection === 'upload' ? '开始上传' : '开始下载'}</button>
+            </section>
+          )}
+
+          <section className="inspector-section quality-section">
+            <div className="quality-heading">
+              <h3>最近质量</h3>
+              {demoMode ? <span>演示数据</span> : selected.qualityUpdatedAt ? (
+                <time dateTime={new Date(selected.qualityUpdatedAt).toISOString()}>
+                  更新 {metricTimeFormatter.format(selected.qualityUpdatedAt)}
+                </time>
+              ) : <span>尚未采样</span>}
+            </div>
+            <div className="quality-metrics" aria-label={`${selected.name} 延迟指标`}>
+              <div title={selected.sessionNetworkLatency ? selected.networkBaseLatency === undefined ? 'RDP 服务器报告的会话平均 RTT' : `RDP 服务器报告的会话平均 RTT；基础 RTT：${selected.networkBaseLatency} ms` : '最近一次连接探针耗时；会话 RTT 尚未收到'}><span>网络延迟</span><strong>{formatLatency(selected.latency)}</strong></div>
+              {(selected.kind === 'linux_agent' || selected.kind === 'windows_agent') && <div title={selected.kind === 'windows_agent' ? 'Windows Agent 最近一帧 GDI 桌面采集耗时' : 'Linux X11 被控端最近一帧桌面采集耗时'}><span>采集延迟</span><strong>{formatLatency(selected.captureLatency)}</strong></div>}
+              <div title={selected.encodeLatency === undefined ? '等待被控端会话编码遥测' : '最近一次被控端编码耗时'}><span>编码延迟</span><strong>{formatLatency(selected.encodeLatency)}</strong></div>
+              {selected.kind === 'windows_agent' && <div title="Windows Agent 最近一帧 GDI 采集与 zlib 编码的总耗时"><span>帧处理</span><strong>{formatLatency(selected.frameProcessingLatency)}</strong></div>}
+              <div title={selected.decodeLatency === undefined ? '等待控制端会话解码遥测' : '最近一次控制端解码或完整性校验耗时'}><span>解码延迟</span><strong>{formatLatency(selected.decodeLatency)}</strong></div>
+              <div title="图像送达窗口后完成本地呈现的耗时"><span>呈现延迟</span><strong>{formatLatency(selected.presentationLatency)}</strong></div>
+              <div title="控制端最近一秒实际接收的完整图像帧"><span>帧率</span><strong>{selected.frameRate === undefined ? '暂无数据' : `${selected.frameRate} fps`}</strong></div>
+            </div>
+            <div className="quality-details">
+              <div><span>检测</span><strong title={selected.probeDetail}>{selected.probeDetail || '-'}</strong></div>
+              <div><span>路径</span><strong>{selected.path}</strong></div>
+              {selected.bandwidthKbps !== undefined && <div><span>RDP 估算带宽</span><strong>{selected.bandwidthKbps.toLocaleString('zh-CN')} kbps</strong></div>}
+              {selected.kind === 'linux_agent' && <div><span>压缩策略</span><strong>{selected.compressionLevel === undefined ? '暂无数据' : `zlib ${selected.compressionLevel} / ${selected.compressionRatio ?? '-'}%`}</strong></div>}
+              <div><span>显示器</span><strong>{selected.nativeMonitorCount !== undefined ? `${selected.nativeMonitorCount} 个` : selected.kind === 'windows_rdp' && selected.displayMode === 'all' ? '启动时枚举全部本地显示器' : `${activeDisplayCount(selected)} / ${selected.displays.length}`}</strong></div>
+              {selected.nativeSessionState && <div><span>桌面会话</span><strong>{selected.nativeSessionState}</strong></div>}
+              {selected.nativeRenderer && <div><span>呈现器</span><strong>{selected.nativeRenderer}</strong></div>}
+              {selected.kind === 'windows_rdp' && selected.frameUploadMode && <div><span>帧上传</span><strong>{selected.frameUploadMode === 'dirty_rect' ? `局部 ${selected.frameUploadPixels?.toLocaleString('zh-CN') ?? 0} 像素` : selected.frameUploadMode === 'cached_frame' ? '复用 GPU 帧' : `完整帧 ${selected.frameUploadPixels?.toLocaleString('zh-CN') ?? 0} 像素`}</strong></div>}
+              {selected.kind === 'windows_rdp' && selected.frameConversionPixels !== undefined && <div><span>像素转换</span><strong>{selected.frameConversionPixels.toLocaleString('zh-CN')} 像素</strong></div>}
+            </div>
+          </section>
+
+          <button className="connect-button" disabled={selected.status === 'connecting'} onClick={() => connect(selected)} title={connectTitle(selected)}>
+            <Play size={16} fill="currentColor" />
+            {connectButtonLabel(selected)}
+          </button>
+        </aside> : <aside className="inspector inspector-empty"><Monitor size={22} /><h2>尚未添加主机</h2></aside>}
+      </div>
+
+      {addOpen && (
+        <div className="modal-backdrop" role="presentation" onMouseDown={() => setAddOpen(false)}>
+          <form className="modal" onSubmit={addHost} onMouseDown={(event) => event.stopPropagation()}>
+            <div className="modal-heading"><div><h2>新增主机</h2><p>创建可用的远程连接配置</p></div><button className="icon-button compact" onClick={() => setAddOpen(false)} type="button" title="关闭"><X size={17} /></button></div>
+            <label>名称<input autoFocus name="name" placeholder="例如：workstation" required /></label>
+            <label>类型<select name="kind" onChange={(event) => setAddHostKind(event.target.value as HostKind)} value={addHostKind}><option value="windows_rdp">Windows RDP</option><option value="windows_agent">Windows Agent（未认证）</option><option disabled={!capabilities?.linux.terminal_session} value="linux_agent">Linux Terminal</option></select></label>
+            <label>地址或设备 ID<input name="address" placeholder="IP、域名或 Agent ID" required /></label>
+            <label>标签<input name="tags" maxLength={512} placeholder="多个标签用逗号分隔，例如：生产，办公" /></label>
+            {addHostKind === 'windows_rdp' && <>
+              <label>Windows 账户<input autoComplete="username" name="username" placeholder="DOMAIN\\user 或 user@example.com" /></label>
+              <label>Windows 密码<input autoComplete="new-password" name="password" type="password" /></label>
+            </>}
+            {addHostKind === 'windows_agent' && <p className="settings-hint add-host-note">Windows Agent 使用原生桌面通道，不依赖 RDP。Agent 默认监听 `0.0.0.0:39501`；控制端请填写被控主机 IP 和端口。</p>}
+            {addHostKind === 'linux_agent' && <>
+              <label>Linux 用户<input autoComplete="username" name="username" placeholder="允许登录的用户（可为 root）" required /></label>
+              <label>Agent 设备公钥<input autoComplete="off" name="agentPublicKey" placeholder="生成配对码时显示的 device_public_key" spellCheck={false} /></label>
+            </>}
+            <div className="modal-actions"><button className="secondary-button" onClick={() => setAddOpen(false)} type="button">取消</button><button className="command-button" type="submit">添加</button></div>
+          </form>
+        </div>
+      )}
+
+      {settingsOpen && (
+        <div className="drawer-backdrop" role="presentation" onMouseDown={() => setSettingsOpen(false)}>
+          <aside className="settings-drawer" onMouseDown={(event) => event.stopPropagation()}>
+            <div className="modal-heading"><div><h2>全局设置</h2><p>新建主机将继承这些设置</p></div><button className="icon-button compact" onClick={() => setSettingsOpen(false)} title="关闭"><X size={17} /></button></div>
+            <section className="inspector-section">
+              <h3>Linux 图形会话</h3>
+              <label>客户端 GPU<select disabled={!capabilities?.linux.agent_session} value={settingsDraft.clientGpu} onChange={(event) => setSettingsDraft((current) => ({ ...current, clientGpu: event.target.value as GlobalSettings['clientGpu'] }))}><option value="display">窗口显示器 GPU</option><option value="manual">手动选择</option></select></label>
+              <label>Agent GPU<select disabled={!capabilities?.linux.agent_session} value={settingsDraft.agentGpu} onChange={(event) => setSettingsDraft((current) => ({ ...current, agentGpu: event.target.value as GlobalSettings['agentGpu'] }))}><option value="capture">捕获设备 GPU</option><option value="manual">手动选择</option></select></label>
+              <label className="toggle-row"><span><strong>双端严格零拷贝</strong><small>验证失败时阻止图形会话</small></span><input disabled={!capabilities?.linux.agent_session} checked={settingsDraft.strictZeroCopy} onChange={(event) => setSettingsDraft((current) => ({ ...current, strictZeroCopy: event.target.checked }))} type="checkbox" /></label>
+            </section>
+            <section className="inspector-section shortcut-settings">
+              <h3><Keyboard size={15} /> 键盘快捷键</h3>
+              <div className="metric-row"><span>切换全屏</span><strong className="good-text">Ctrl + Alt + F</strong></div>
+              <p className="settings-hint">在全屏与窗口模式之间切换；其他键盘输入会直接发送到被控端，包括 Win、Alt 和功能键。</p>
+              <p className="settings-hint">Ctrl+Alt+Del、Win+L 等 Windows 安全桌面组合由系统保留，普通应用无法接管。</p>
+            </section>
+            <section className="inspector-section">
+              <h3>Edge 会话授权</h3>
+              <label>HTTPS Edge API URL<input autoComplete="url" onChange={(event) => setSettingsDraft((current) => ({ ...current, edgeApiUrl: event.target.value }))} placeholder="https://edge.example.com/" type="url" value={settingsDraft.edgeApiUrl} /></label>
+              <div className="metric-row"><span>签名授权与中继</span><strong className={capabilities?.edge.linux_session_relay ? 'good-text' : ''}>{capabilities?.edge.linux_session_relay ? settingsDraft.edgeApiUrl.trim() ? '已配置' : '可用，未配置' : '当前安装包不支持'}</strong></div>
+              <div className="metric-row"><span>已配对设备连接</span><strong className={capabilities?.edge.linux_known_device_rendezvous ? 'good-text' : ''}>{capabilities?.edge.linux_known_device_rendezvous ? '可直接经 Edge 建立' : '需要直连'}</strong></div>
+              <div className="metric-row"><span>首次配对</span><strong className={capabilities?.edge.remote_pairing ? 'good-text' : ''}>{capabilities?.edge.remote_pairing ? '支持经 Edge 建立' : '需要直连'}</strong></div>
+            </section>
+            <section className="inspector-section update-settings">
+              <h3>在线升级</h3>
+              <div className="metric-row"><span>当前版本</span><strong>{capabilities?.version ?? '-'}</strong></div>
+              <label>HTTPS 更新清单<input autoComplete="off" onChange={(event) => setSettingsDraft((current) => ({ ...current, updateManifestUrl: event.target.value }))} placeholder="https://updates.example.com/stable.json" type="url" value={settingsDraft.updateManifestUrl} /></label>
+              <label>Ed25519 公钥<input autoCapitalize="none" autoComplete="off" className="update-key-input" onChange={(event) => setSettingsDraft((current) => ({ ...current, updatePublicKey: event.target.value }))} placeholder="Base64 公钥" spellCheck={false} value={settingsDraft.updatePublicKey} /></label>
+              <label className="toggle-row"><span><strong>自动检查更新</strong><small>启动控制端时检查已配置的签名清单</small></span><input aria-label="自动检查更新" checked={settingsDraft.autoCheckUpdates} onChange={(event) => setSettingsDraft((current) => ({ ...current, autoCheckUpdates: event.target.checked }))} type="checkbox" /></label>
+              <div className="update-status" aria-live="polite">
+                {updateError ? <p className="settings-error" role="alert">{updateError}</p> : updateInstalling ? <p>安装程序正在启动</p> : updateChecking ? <p>正在检查更新</p> : updateResult?.status === 'available' && updateResult.release ? (
+                  <div className="update-release">
+                    <div><strong>RemoteDesk {updateResult.release.version}</strong><span>{new Date(updateResult.release.published_at).toLocaleDateString('zh-CN')} · {(updateResult.release.size_bytes / 1024 / 1024).toFixed(1)} MB</span></div>
+                    {updateResult.release.notes && <p>{updateResult.release.notes}</p>}
+                  </div>
+                ) : updateResult?.status === 'up_to_date' ? <p>当前已是最新版本</p> : <p>{capabilities?.update?.configured ? '尚未检查更新' : '更新源尚未配置'}</p>}
+              </div>
+              <div className="update-actions">
+                <button className="secondary-button" disabled={updateChecking || updateInstalling || !capabilities?.update?.check} onClick={() => void checkForUpdates()} type="button"><RefreshCw className={updateChecking ? 'spin' : ''} size={15} />检查更新</button>
+                {updateResult?.status === 'available' && <button className="command-button" disabled={updateInstalling || !capabilities?.update?.install} onClick={() => void installAvailableUpdate()} type="button"><Download size={15} />{updateInstalling ? '正在启动' : '下载并安装'}</button>}
+              </div>
+            </section>
+            {settingsError && <p className="settings-error" role="alert">{settingsError}</p>}
+            <button className="command-button drawer-save" disabled={settingsSaving || controlServiceStatus !== 'ready'} onClick={() => void saveSettings()}>{settingsSaving ? '保存中' : '保存设置'}</button>
+          </aside>
+        </div>
+      )}
+
+    </div>
+  )
+}
+
+export default App
diff --git a/client/web/src/backend.ts b/client/web/src/backend.ts
new file mode 100644
index 0000000..ff3a668
--- /dev/null
+++ b/client/web/src/backend.ts
@@ -0,0 +1,549 @@
+export type RdpProbeStatus =
+  | 'reachable'
+  | 'dns_failed'
+  | 'timeout'
+  | 'refused'
+  | 'unreachable'
+
+export type RdpProbeResult = {
+  status: RdpProbeStatus
+  reachable: boolean
+  latency_ms: number | null
+  port: number
+}
+
+export type LinuxAgentProbeResult = {
+  ok: boolean
+  latency_ms: number
+  protocol_major: number
+  protocol_minor: number
+  terminal: boolean
+  desktop: boolean
+  files: boolean
+  edge_presence_configured: boolean
+  edge_presence_online: boolean
+  edge_signaling_configured: boolean
+  edge_signaling_online: boolean
+}
+
+export type RdpProtocolProbeResult = {
+  ok: boolean
+  stage: 'input' | 'dns' | 'tcp' | 'rdp_negotiation' | 'tls'
+  security_protocol?: 'hybrid' | 'hybrid_extended'
+  tcp_latency_ms?: number
+  total_latency_ms?: number
+  certificate_sha256?: string
+  error_code?: string
+}
+
+export type LaunchRdpRequest = {
+  address: string
+  username: string
+  resolution: RdpResolution
+  use_multimon: boolean
+  monitor_indices?: number[]
+  client: RdpClientMode
+  fullscreen: boolean
+  certificate_sha256: string | null
+  credential_ref: string | null
+  redirect_clipboard: boolean
+}
+
+export type RdpResolution =
+  | { mode: 'follow_window' }
+  | { mode: 'fixed'; width: number; height: number }
+
+export type RdpClientMode = 'system' | 'native'
+
+export type LaunchRdpResult = {
+  launched: boolean
+  client?: RdpClientMode
+  session_id?: string
+}
+
+export type NativeRdpSessionState =
+  | 'waiting_for_credentials'
+  | 'connecting'
+  | 'connected'
+  | 'reconnecting'
+  | 'failed'
+  | 'terminated'
+
+export type NativeRdpResizeState =
+  | 'idle'
+  | 'pending'
+  | 'reconnect_required'
+  | 'reconnecting'
+  | 'confirmed'
+  | 'cancelled'
+
+export type NativeRdpSessionDiagnostics = {
+  schema_version: 1
+  session_id: string
+  state: NativeRdpSessionState
+  started_at_unix_ms: number
+  updated_at_unix_ms: number
+  frame_count: number
+  frames_per_second: number | null
+  desktop_width: number
+  desktop_height: number
+  monitor_count: number
+  multi_monitor: boolean
+  network_latency_ms: number | null
+  base_network_latency_ms: number | null
+  bandwidth_kbps: number | null
+  decode_latency_ms: number | null
+  presentation_latency_ms: number | null
+  renderer?: string
+  frame_conversion_pixels: number
+  frame_upload_mode?: 'pending' | 'full_frame' | 'dirty_rect' | 'cached_frame'
+  frame_upload_pixels: number
+  reconnect_attempt: number
+  resize_generation: number
+  resize_state: NativeRdpResizeState
+  resize_requested_width: number | null
+  resize_requested_height: number | null
+  resize_failure: 'unsupported' | 'timeout' | null
+  error_code: string | null
+}
+
+export type LinuxDesktopSessionDiagnostics = {
+  schema_version: 1
+  session_id: string
+  state: 'connecting' | 'connected' | 'reconnecting' | 'failed' | 'terminated'
+  updated_at_unix_ms: number
+  frame_count: number
+  frames_per_second: number | null
+  desktop_width: number
+  desktop_height: number
+  network_latency_ms: number | null
+  capture_latency_ms: number | null
+  encode_latency_ms: number | null
+  compression_level: number | null
+  compression_ratio_percent: number | null
+  decode_latency_ms: number | null
+  presentation_latency_ms: number | null
+  clipboard_read: boolean
+  clipboard_write: boolean
+  reconnect_attempt: number
+  error_code: string | null
+}
+
+function compatibleResolution(resolution: RdpResolution): string {
+  return resolution.mode === 'follow_window'
+    ? 'Follow window'
+    : `${resolution.width} x ${resolution.height}`
+}
+
+export type ControlCapabilities = {
+  version: string
+  platform: string
+  application: {
+    desktop_shell: boolean
+    shell_kind: 'tauri-2' | 'standalone'
+  }
+  rdp: {
+    probe: boolean
+    protocol_probe: boolean
+    external_launch: boolean
+    native_launch: boolean
+    native_diagnostics: boolean
+    native_multimon: boolean
+    session_network_metrics: boolean
+    session_decode_metrics: boolean
+    region_pixel_conversion: boolean
+    secure_named_pipe: boolean
+    secure_pipe_config_ack: boolean
+    secure_pipe_handshake_timeout: boolean
+    job_object_lifecycle: boolean
+    certificate_pinning: boolean
+    automatic_reconnect: boolean
+    resize_confirmation: boolean
+    clipboard: boolean
+    audio_playback: boolean
+    native_renderer: 'software_framebuffer' | 'd3d11_cpu_upload'
+    d3d11_device_available: boolean
+    d3d11_dirty_rect_upload: boolean
+    credential_manager: boolean
+    credential_store: boolean
+  }
+  linux: {
+    agent_session: boolean
+    agent_probe: boolean
+    terminal_session: boolean
+    desktop_session: boolean
+    x11_desktop: boolean
+    relative_pointer: boolean
+    adaptive_frame_pacing: boolean
+    adaptive_compression: boolean
+    desktop_session_resume: boolean
+    desktop_session_crash_resume: boolean
+    direct_webrtc_signaling: boolean
+    opus_audio: boolean
+    clipboard_read: boolean
+    clipboard_write: boolean
+    wayland_desktop: boolean
+    native_video: boolean
+    native_video_decoder_probe: boolean
+    native_video_surface_presenter: boolean
+    file_transfer: boolean
+    agent_identity_store: boolean
+  }
+  edge: {
+    relay: boolean
+    signed_intent: boolean
+    linux_session_relay: boolean
+    linux_known_device_rendezvous: boolean
+    remote_pairing: boolean
+  }
+  update: {
+    configured: boolean
+    check: boolean
+    install: boolean
+  }
+}
+
+export type ControlSettings = {
+  edge_api_url: string | null
+  update_manifest_url: string | null
+  update_public_key: string | null
+  auto_check_updates: boolean
+}
+
+export type ControlUpdateRelease = {
+  version: string
+  channel: string
+  published_at: string
+  notes?: string
+  size_bytes: number
+}
+
+export type ControlUpdateCheck = {
+  current_version: string
+  status: 'up_to_date' | 'available'
+  release?: ControlUpdateRelease
+}
+
+type ApiError = {
+  error?: string
+}
+
+export class ControlApiError extends Error {
+  readonly status: number
+
+  constructor(message: string, status: number) {
+    super(message)
+    this.name = 'ControlApiError'
+    this.status = status
+  }
+}
+
+async function readJson<T>(response: Response): Promise<T> {
+  const body = await response.json() as T & ApiError
+  if (!response.ok) {
+    throw new ControlApiError(
+      body.error || `control service returned HTTP ${response.status}`,
+      response.status,
+    )
+  }
+  return body
+}
+
+export async function probeRdp(address: string): Promise<RdpProbeResult> {
+  const response = await fetch('/api/v1/rdp/probe', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({ address }),
+  })
+  return readJson<RdpProbeResult>(response)
+}
+
+export async function negotiateRdp(address: string): Promise<RdpProtocolProbeResult> {
+  const response = await fetch('/api/v1/rdp/negotiate', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({ address }),
+  })
+  return readJson<RdpProtocolProbeResult>(response)
+}
+
+export async function getControlCapabilities(): Promise<ControlCapabilities> {
+  const response = await fetch('/api/v1/capabilities', {
+    headers: { Accept: 'application/json' },
+  })
+  return readJson<ControlCapabilities>(response)
+}
+
+export async function getControlSettings(): Promise<ControlSettings> {
+  const response = await fetch('/api/v1/settings', {
+    headers: { Accept: 'application/json' },
+  })
+  return readJson<ControlSettings>(response)
+}
+
+export async function updateControlSettings(settings: ControlSettings): Promise<ControlSettings> {
+  const response = await fetch('/api/v1/settings', {
+    method: 'PUT',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify(settings),
+  })
+  return readJson<ControlSettings>(response)
+}
+
+export async function getControlHosts(): Promise<unknown> {
+  const response = await fetch('/api/v1/hosts', {
+    headers: { Accept: 'application/json' },
+  })
+  return readJson<unknown>(response)
+}
+
+export async function updateControlHosts(hosts: unknown): Promise<void> {
+  const response = await fetch('/api/v1/hosts', {
+    method: 'PUT',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify(hosts),
+  })
+  await readJson<{ saved: boolean }>(response)
+}
+
+export async function checkControlUpdate(): Promise<ControlUpdateCheck> {
+  const response = await fetch('/api/v1/update/check', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: '{}',
+  })
+  return readJson<ControlUpdateCheck>(response)
+}
+
+export async function installControlUpdate(version: string): Promise<void> {
+  const response = await fetch('/api/v1/update/install', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({ version }),
+  })
+  await readJson<{ accepted: boolean; version: string }>(response)
+}
+
+export async function launchRdp(request: LaunchRdpRequest): Promise<LaunchRdpResult> {
+  // Keep a reloaded UI compatible with a control service that has not restarted yet.
+  const compatibleRequest = {
+    ...request,
+    resolution: compatibleResolution(request.resolution),
+  }
+  const response = await fetch('/api/v1/rdp/launch', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify(compatibleRequest),
+  })
+  return readJson<LaunchRdpResult>(response)
+}
+
+export async function getNativeRdpSession(
+  sessionId: string,
+): Promise<NativeRdpSessionDiagnostics> {
+  const response = await fetch(`/api/v1/rdp/session/${encodeURIComponent(sessionId)}`, {
+    headers: { Accept: 'application/json' },
+  })
+  return readJson<NativeRdpSessionDiagnostics>(response)
+}
+
+export async function openCredentialManager(): Promise<void> {
+  const response = await fetch('/api/v1/windows/credential-manager', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: '{}',
+  })
+  await readJson<{ launched: boolean }>(response)
+}
+
+export type RdpCredentialStatus = 'missing' | 'ready'
+
+async function credentialRequest(
+  operation: 'status' | 'set' | 'delete',
+  credentialRef: string,
+): Promise<Response> {
+  return fetch(`/api/v1/rdp/credential/${operation}`, {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({ credential_ref: credentialRef }),
+  })
+}
+
+export async function getRdpCredentialStatus(credentialRef: string): Promise<RdpCredentialStatus> {
+  const response = await credentialRequest('status', credentialRef)
+  return (await readJson<{ status: RdpCredentialStatus }>(response)).status
+}
+
+export async function configureRdpCredential(credentialRef: string): Promise<void> {
+  const response = await credentialRequest('set', credentialRef)
+  await readJson<{ launched: boolean }>(response)
+}
+
+export async function saveRdpCredential(credentialRef: string, account: string, password: string): Promise<void> {
+  const response = await fetch('/api/v1/rdp/credential/set', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({ credential_ref: credentialRef, account, password }),
+  })
+  await readJson<{ launched: boolean }>(response)
+}
+
+export async function deleteRdpCredential(credentialRef: string): Promise<void> {
+  const response = await credentialRequest('delete', credentialRef)
+  await readJson<{ status: 'missing' }>(response)
+}
+
+export async function launchLinuxTerminal(request: {
+  address: string
+  user: string
+  certificate_sha256: string
+  pair: boolean
+  agent_public_key?: string | null
+  edge_api_url?: string | null
+}): Promise<void> {
+  const response = await fetch('/api/v1/linux/terminal/launch', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify(request),
+  })
+  await readJson<{ launched: boolean }>(response)
+}
+
+export async function probeLinuxAgent(
+  address: string,
+  certificateSha256: string,
+): Promise<LinuxAgentProbeResult> {
+  const response = await fetch('/api/v1/linux/probe', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({ address, certificate_sha256: certificateSha256 }),
+  })
+  return readJson<LinuxAgentProbeResult>(response)
+}
+
+export type WindowsAgentProbeResult = {
+  ok: boolean
+  latency_ms: number
+  protocol_major: number
+  protocol_minor: number
+  capture_backend: string
+  preferred_capture_backend: string
+  software_fallback_backend?: string | null
+  software_fallback_available: boolean
+  input_backend: string
+  authenticated: boolean
+  desktop_session: boolean
+  capture_latency_ms?: number | null
+  encode_latency_ms?: number | null
+  frame_processing_latency_ms?: number | null
+  applications: Array<{ id: string; name: string }>
+}
+
+export async function probeWindowsAgent(address: string): Promise<WindowsAgentProbeResult> {
+  const response = await fetch('/api/v1/windows-agent/probe', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({ address }),
+  })
+  return readJson<WindowsAgentProbeResult>(response)
+}
+
+export type WindowsAgentSessionDiagnostics = {
+  schema_version: 1
+  session_id: string
+  state: 'connecting' | 'connected' | 'failed' | 'terminated'
+  updated_at_unix_ms: number
+  frame_count: number
+  frames_per_second: number | null
+  desktop_width: number
+  desktop_height: number
+  capture_latency_ms: number | null
+  encode_latency_ms: number | null
+  frame_processing_latency_ms: number | null
+  decode_latency_ms: number | null
+  presentation_latency_ms: number | null
+  renderer: string
+  error_code: string | null
+}
+
+export async function launchWindowsAgentDesktop(request: { address: string; frames_per_second: number; fullscreen: boolean; mode?: 'desktop' | 'application'; application?: string }): Promise<{ launched: boolean; session_id: string }> {
+  const response = await fetch('/api/v1/windows-agent/desktop/launch', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(request) })
+  return readJson<{ launched: boolean; session_id: string }>(response)
+}
+
+export async function getWindowsAgentSession(sessionId: string): Promise<WindowsAgentSessionDiagnostics> {
+  const response = await fetch(`/api/v1/windows-agent/session/${encodeURIComponent(sessionId)}`, { headers: { Accept: 'application/json' } })
+  return readJson<WindowsAgentSessionDiagnostics>(response)
+}
+
+export async function launchLinuxDesktop(request: {
+  address: string
+  user: string
+  certificate_sha256: string
+  width: number
+  height: number
+  frames_per_second: number
+  fullscreen: boolean
+  follow_window: boolean
+  capture_input: boolean
+  clipboard_read: boolean
+  clipboard_write: boolean
+  edge_api_url?: string | null
+}): Promise<{ launched: boolean; session_id: string }> {
+  const response = await fetch('/api/v1/linux/desktop/launch', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify(request),
+  })
+  return readJson<{ launched: boolean; session_id: string }>(response)
+}
+
+export async function getLinuxDesktopSession(
+  sessionId: string,
+): Promise<LinuxDesktopSessionDiagnostics> {
+  const response = await fetch(
+    `/api/v1/linux/desktop/session/${encodeURIComponent(sessionId)}`,
+    { headers: { Accept: 'application/json' } },
+  )
+  return readJson<LinuxDesktopSessionDiagnostics>(response)
+}
+
+export async function launchLinuxFileTransfer(request: {
+  address: string
+  user: string
+  certificate_sha256: string
+  direction: 'upload' | 'download'
+  local_path: string
+  remote_path: string
+  edge_api_url?: string | null
+}): Promise<void> {
+  const response = await fetch('/api/v1/linux/files/launch', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify(request),
+  })
+  await readJson<{ launched: boolean }>(response)
+}
+
+async function linuxAgentIdentityRequest(
+  operation: 'status' | 'delete',
+  certificateSha256: string,
+): Promise<RdpCredentialStatus> {
+  const response = await fetch(`/api/v1/linux/identity/${operation}`, {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({ certificate_sha256: certificateSha256 }),
+  })
+  return (await readJson<{ status: RdpCredentialStatus }>(response)).status
+}
+
+export async function getLinuxAgentIdentityStatus(
+  certificateSha256: string,
+): Promise<RdpCredentialStatus> {
+  return linuxAgentIdentityRequest('status', certificateSha256)
+}
+
+export async function deleteLinuxAgentIdentity(certificateSha256: string): Promise<void> {
+  const status = await linuxAgentIdentityRequest('delete', certificateSha256)
+  if (status !== 'missing') throw new Error('控制服务未删除 Linux Agent 身份')
+}
diff --git a/client/web/src/host-model.ts b/client/web/src/host-model.ts
new file mode 100644
index 0000000..c8e8a4a
--- /dev/null
+++ b/client/web/src/host-model.ts
@@ -0,0 +1,202 @@
+import type {
+  LinuxAgentProbeResult,
+  NativeRdpSessionState,
+  RdpClientMode,
+  RdpProbeResult,
+  RdpProtocolProbeResult,
+  RdpResolution,
+} from './backend'
+
+export type HostKind = 'windows_rdp' | 'windows_agent' | 'linux_agent'
+export type HostStatus = 'ready' | 'offline' | 'connecting' | 'probing' | 'unknown'
+export type NetworkPolicy = 'Smart' | 'Direct preferred' | 'CDN preferred'
+export type DisplayMode = 'primary' | 'all' | 'custom'
+export type CredentialState = 'missing' | 'ready' | 'unknown'
+export type WindowsAgentApplication = { id: string; name: string }
+
+export type HostDisplay = {
+  id: string
+  name: string
+  resolution: string
+  primary: boolean
+}
+
+export type Host = {
+  id: number
+  name: string
+  address: string
+  kind: HostKind
+  mode: string
+  agentApplication?: string
+  agentApplications?: WindowsAgentApplication[]
+  tags?: string[]
+  status: HostStatus
+  favorite: boolean
+  lastUsed: string
+  latency?: number
+  sessionNetworkLatency?: boolean
+  networkBaseLatency?: number
+  bandwidthKbps?: number
+  captureLatency?: number
+  encodeLatency?: number
+  frameProcessingLatency?: number
+  compressionLevel?: number
+  compressionRatio?: number
+  decodeLatency?: number
+  presentationLatency?: number
+  nativeMonitorCount?: number
+  frameRate?: number
+  nativeSessionState?: NativeRdpSessionState
+  nativeRenderer?: string
+  frameUploadMode?: string
+  frameUploadPixels?: number
+  frameConversionPixels?: number
+  qualityUpdatedAt?: number
+  path: string
+  networkPolicy: NetworkPolicy
+  resolution: string
+  customWidth: string
+  customHeight: string
+  gpu: string
+  memoryPath: string
+  recent: boolean
+  strictZeroCopy: boolean
+  displayMode: DisplayMode
+  displays: HostDisplay[]
+  selectedDisplayIds: string[]
+  username: string
+  credentialState: CredentialState
+  agentIdentityState: CredentialState
+  credentialRef: string
+  rdpClient: RdpClientMode
+  nativeFullscreen: boolean
+  captureInput: boolean
+  redirectClipboard: boolean
+  clipboardRead: boolean
+  clipboardWrite: boolean
+  sessionClipboardRead?: boolean
+  sessionClipboardWrite?: boolean
+  agentPublicKey?: string
+  probeDetail?: string
+}
+
+export const minRdpDimension = 200
+export const maxRdpDimension = 8192
+const credentialRefPrefix = 'RemoteDesk/RDP/'
+
+function createRef(prefix: string) {
+  const profileKey = typeof crypto.randomUUID === 'function'
+    ? crypto.randomUUID()
+    : Array.from(crypto.getRandomValues(new Uint8Array(16)), (value) => value.toString(16).padStart(2, '0')).join('')
+  return `${prefix}${profileKey}`
+}
+
+export function createCredentialRef() { return createRef(credentialRefPrefix) }
+export function validCredentialRef(value: unknown): value is string {
+  return typeof value === 'string' && new RegExp(`^${credentialRefPrefix}[A-Za-z0-9_.:@-]{1,128}$`).test(value)
+}
+
+export function isStoredHost(value: unknown): value is Host {
+  if (!value || typeof value !== 'object') return false
+  const host = value as Partial<Host>
+  return typeof host.id === 'number'
+    && typeof host.name === 'string'
+    && typeof host.address === 'string'
+    && (host.kind === 'windows_rdp' || host.kind === 'windows_agent' || host.kind === 'linux_agent')
+    && typeof host.mode === 'string'
+    && Array.isArray(host.displays)
+    && Array.isArray(host.selectedDisplayIds)
+}
+
+export function normalizeTags(value: unknown): string[] {
+  if (!Array.isArray(value)) return []
+  const tags: string[] = []
+  for (const item of value) {
+    if (typeof item !== 'string') continue
+    const tag = item.trim().slice(0, 32)
+    if (tag && !tags.includes(tag)) tags.push(tag)
+    if (tags.length >= 20) break
+  }
+  return tags
+}
+
+export function parseTags(value: string): string[] {
+  return normalizeTags(value.split(','))
+}
+
+export function normalizeStoredHost(host: Host): Host {
+  return {
+    ...host,
+    tags: normalizeTags(host.tags),
+    mode: host.kind === 'windows_agent' && host.mode !== 'Application' ? 'Desktop' : host.mode,
+    status: 'unknown', latency: undefined, sessionNetworkLatency: undefined, networkBaseLatency: undefined,
+    bandwidthKbps: undefined, captureLatency: undefined, encodeLatency: undefined, frameProcessingLatency: undefined, decodeLatency: undefined,
+    presentationLatency: undefined, frameRate: undefined, nativeSessionState: undefined,
+    sessionClipboardRead: undefined, sessionClipboardWrite: undefined, qualityUpdatedAt: undefined,
+    credentialState: host.kind === 'windows_rdp' ? 'unknown' : 'missing',
+    agentIdentityState: host.kind === 'linux_agent' || host.kind === 'windows_agent' ? 'unknown' : 'missing',
+    credentialRef: validCredentialRef(host.credentialRef) ? host.credentialRef : createCredentialRef(),
+    rdpClient: host.rdpClient === 'native' ? 'native' : 'system', nativeFullscreen: host.nativeFullscreen === true,
+    captureInput: host.captureInput === true, redirectClipboard: host.redirectClipboard !== false,
+    clipboardRead: host.clipboardRead ?? host.redirectClipboard !== false,
+    clipboardWrite: host.clipboardWrite ?? host.redirectClipboard !== false,
+    customWidth: typeof host.customWidth === 'string' ? host.customWidth : '1600',
+    customHeight: typeof host.customHeight === 'string' ? host.customHeight : '900',
+    probeDetail: '尚未检测',
+  }
+}
+
+export function statusLabel(host: Host) {
+  if (host.status === 'ready') return host.kind === 'linux_agent' || host.kind === 'windows_agent' ? 'Agent 在线' : '端口可达'
+  if (host.status === 'connecting') return '连接中'
+  if (host.status === 'probing') return '检测中'
+  if (host.status === 'unknown') return '待检测'
+  return '离线'
+}
+
+export function probeResultDetail(result: RdpProbeResult) {
+  if (result.status === 'reachable') return `TCP ${result.port} 可达，账号尚未验证`
+  if (result.status === 'dns_failed') return '域名解析失败'
+  if (result.status === 'timeout') return `TCP ${result.port} 连接超时`
+  if (result.status === 'refused') return `TCP ${result.port} 拒绝连接`
+  return `TCP ${result.port} 不可达`
+}
+
+export function linuxProbeDetail(result: LinuxAgentProbeResult) {
+  const capabilities = [result.terminal ? '终端' : null, result.desktop ? 'X11 桌面' : null, result.files ? '文件' : null]
+    .filter((value): value is string => value !== null).join('、') || '无会话能力'
+  const edge = result.edge_presence_configured
+    ? result.edge_presence_online && result.edge_signaling_online ? '，Edge 在线' : '，Edge 离线' : ''
+  return `Agent v${result.protocol_major}.${result.protocol_minor} 可用，${capabilities}${edge}`
+}
+
+export function protocolProbeDetail(result: RdpProtocolProbeResult) {
+  if (result.ok) {
+    const protocol = result.security_protocol === 'hybrid_extended' ? 'NLA Hybrid Extended' : 'NLA Hybrid'
+    const latency = result.total_latency_ms === undefined ? '' : `，${result.total_latency_ms} ms`
+    return `RDP 协商成功（${protocol}${latency}），账号尚未验证`
+  }
+  if (result.error_code === 'timeout') return 'TCP 可达，但 RDP 协商超时'
+  if (result.error_code === 'rdp_negotiation_failed') return 'TCP 可达，但目标未通过 RDP 协商'
+  return `RDP 协商未完成（${result.error_code ?? result.stage}）`
+}
+
+export function parseRdpDimension(value: string) {
+  if (!/^\d+$/.test(value)) return null
+  const dimension = Number(value)
+  return Number.isSafeInteger(dimension) && dimension >= minRdpDimension && dimension <= maxRdpDimension ? dimension : null
+}
+
+export function rdpResolution(host: Host): RdpResolution | null {
+  if (host.resolution === 'Follow window') return { mode: 'follow_window' }
+  if (host.resolution === 'Custom') {
+    const width = parseRdpDimension(host.customWidth)
+    const height = parseRdpDimension(host.customHeight)
+    return width && height ? { mode: 'fixed', width, height } : null
+  }
+  const match = /^(\d+) x (\d+)$/.exec(host.resolution)
+  if (!match) return null
+  const width = parseRdpDimension(match[1])
+  const height = parseRdpDimension(match[2])
+  return width && height ? { mode: 'fixed', width, height } : null
+}
diff --git a/client/web/src/main.tsx b/client/web/src/main.tsx
new file mode 100644
index 0000000..c31d4c6
--- /dev/null
+++ b/client/web/src/main.tsx
@@ -0,0 +1,10 @@
+import { StrictMode } from 'react'
+import { createRoot } from 'react-dom/client'
+import App from './App'
+import './styles.css'
+
+createRoot(document.getElementById('root')!).render(
+  <StrictMode>
+    <App />
+  </StrictMode>,
+)
diff --git a/client/web/src/styles.css b/client/web/src/styles.css
new file mode 100644
index 0000000..20027de
--- /dev/null
+++ b/client/web/src/styles.css
@@ -0,0 +1,283 @@
+:root {
+  color: #dce2e7;
+  background: #101315;
+  color-scheme: dark;
+  font-family: Inter, "Segoe UI", "Microsoft YaHei", sans-serif;
+  font-synthesis: none;
+  letter-spacing: 0;
+}
+
+* { box-sizing: border-box; }
+body { margin: 0; min-width: 320px; min-height: 100vh; overflow: hidden; }
+button, input, select { font: inherit; letter-spacing: 0; }
+button { color: inherit; }
+button:focus-visible, .host-row:focus-visible { outline: 2px solid #69d6a0; outline-offset: -2px; }
+
+.app-shell { min-height: 100vh; background: #101315; }
+.topbar { height: 56px; display: grid; grid-template-columns: 220px minmax(260px, 560px) minmax(142px, 1fr) auto; align-items: center; gap: 16px; padding: 0 16px; border-bottom: 1px solid #2a3034; background: #15191c; }
+.brand { display: flex; align-items: center; gap: 10px; font-size: 15px; font-weight: 700; color: #f1f4f5; }
+.brand-mark { width: 30px; height: 30px; display: grid; place-items: center; color: #0f1512; background: #5ed39a; border-radius: 6px; overflow: hidden; }
+.brand-mark img { display: block; width: 30px; height: 30px; }
+.search-field { height: 34px; display: flex; align-items: center; gap: 9px; padding: 0 10px; border: 1px solid #343b40; border-radius: 6px; background: #0e1113; color: #7f8a91; }
+.search-field:focus-within { border-color: #5d8f77; box-shadow: 0 0 0 2px #244435; }
+.search-field input { flex: 1; min-width: 0; border: 0; outline: 0; color: #e8ecee; background: transparent; font-size: 13px; }
+.search-field kbd { border: 1px solid #343b40; border-radius: 4px; padding: 2px 5px; color: #78838a; font-size: 10px; }
+.top-actions { justify-self: end; display: flex; align-items: center; gap: 8px; }
+.topbar-clock { min-width: 142px; display: inline-flex; align-items: center; justify-content: flex-end; gap: 7px; color: #98a39d; font-size: 11px; font-variant-numeric: tabular-nums; white-space: nowrap; }
+.icon-button, .row-icon { width: 34px; height: 34px; display: grid; place-items: center; border: 1px solid #343b40; border-radius: 6px; background: #1a1f22; cursor: pointer; }
+.icon-button:hover, .row-icon:hover { background: #252b2f; border-color: #475158; }
+.icon-button.compact { width: 30px; height: 30px; }
+.icon-button:disabled { opacity: .45; cursor: not-allowed; }
+.icon-button.danger { color: #dd7d7d; }
+.icon-button.update-available { color: #65d69d; border-color: #3d775b; }
+.command-button, .connect-button, .secondary-button { min-height: 34px; display: inline-flex; align-items: center; justify-content: center; gap: 8px; border-radius: 6px; padding: 0 13px; border: 1px solid #4fbf87; background: #4fbf87; color: #0d1712; font-weight: 700; font-size: 13px; cursor: pointer; }
+.secondary-button { border-color: #3b4449; background: #20262a; color: #dce2e7; }
+.command-button:disabled, .secondary-button:disabled { opacity: .45; cursor: not-allowed; }
+.workspace { height: calc(100vh - 56px); display: grid; grid-template-columns: 188px minmax(520px, 1fr) 310px; }
+.sidebar { display: flex; flex-direction: column; padding: 18px 12px 12px; border-right: 1px solid #272d31; background: #121619; }
+.sidebar nav { display: grid; gap: 3px; }
+.sidebar-label { margin: 18px 10px 5px; color: #69757a; font-size: 10px; font-weight: 700; letter-spacing: .04em; text-transform: uppercase; }
+.tag-filter { min-height: 31px; }
+.tag-filter-name { min-width: 0; display: inline-flex; align-items: center; gap: 7px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.tag-dot { width: 6px; height: 6px; flex: 0 0 auto; border-radius: 50%; background: #63c894; }
+.nav-item { height: 35px; display: flex; align-items: center; justify-content: space-between; padding: 0 10px; border: 0; border-radius: 5px; background: transparent; color: #aab3b8; cursor: pointer; font-size: 13px; text-align: left; }
+.nav-item:hover { background: #1b2023; color: #e3e7e9; }
+.nav-item.active { color: #edf2ef; background: #22362d; }
+.nav-count { color: #728078; font-size: 11px; font-variant-numeric: tabular-nums; }
+.sidebar-status { margin-top: auto; display: flex; align-items: center; gap: 8px; padding: 10px; border-top: 1px solid #272d31; color: #8d999f; font-size: 11px; }
+.host-area { min-width: 0; padding: 22px 22px 30px; overflow: auto; }
+.section-heading { display: flex; align-items: flex-end; justify-content: space-between; margin-bottom: 16px; }
+.section-heading h1 { margin: 0 0 4px; font-size: 19px; line-height: 1.2; font-weight: 700; }
+.section-heading span { color: #7f8a91; font-size: 12px; }
+.path-summary { display: flex; align-items: center; gap: 7px; color: #93a19a; font-size: 12px; }
+.host-table { min-width: 690px; border: 1px solid #2a3135; border-radius: 6px; overflow: hidden; background: #15191c; }
+.table-row { width: 100%; display: grid; grid-template-columns: minmax(190px, 1.5fr) 90px 100px 110px 100px 78px; align-items: center; min-height: 54px; padding: 0 12px; border: 0; border-bottom: 1px solid #272d31; background: transparent; color: #adb7bc; text-align: left; font-size: 12px; }
+.table-header { min-height: 34px; color: #758087; background: #111517; font-size: 10px; text-transform: uppercase; }
+.host-row { cursor: pointer; }
+.host-row:hover { background: #1a2023; }
+.host-row.selected { background: #1d2924; box-shadow: inset 3px 0 #57c890; }
+.host-row:last-child { border-bottom: 0; }
+.host-identity { display: flex; align-items: center; gap: 10px; min-width: 0; }
+.host-icon { width: 30px; height: 30px; display: grid; place-items: center; border: 1px solid #30383d; border-radius: 5px; color: #92a19a; background: #171c1f; }
+.host-identity strong, .host-identity small { display: block; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.host-identity strong { color: #e2e7e9; font-size: 13px; }
+.host-identity small { margin-top: 2px; color: #707b82; font-size: 10px; }
+.host-tags, .tag-editor-preview { display: flex; flex-wrap: wrap; gap: 4px; margin-top: 5px; min-width: 0; }
+.tag-chip { display: inline-flex; align-items: center; max-width: 110px; min-height: 18px; padding: 1px 6px; overflow: hidden; border: 1px solid #345344; border-radius: 4px; background: #1b3026; color: #8edbb1; text-overflow: ellipsis; white-space: nowrap; font-size: 10px; line-height: 1.3; }
+.tag-editor-preview { margin: -4px 0 10px; }
+.host-type-label { display: block; font-size: 11px; font-weight: 600; }
+.host-mode-label { display: block; margin-top: 3px; color: #7f8b90; font-size: 10px; }
+.add-host-note { padding: 8px 10px; border: 1px solid #344942; border-radius: 5px; background: #17251f; }
+.status-cell { display: flex; align-items: center; gap: 7px; }
+.status-dot { width: 7px; height: 7px; display: inline-block; flex: 0 0 auto; border-radius: 50%; background: #657078; }
+.status-dot.ready { background: #59d394; box-shadow: 0 0 0 3px #1d3c2e; }
+.status-dot.connecting { background: #e4b660; box-shadow: 0 0 0 3px #453820; }
+.status-dot.probing { background: #e4b660; box-shadow: 0 0 0 3px #453820; animation: pulse 1s ease-in-out infinite; }
+.status-dot.offline { background: #667078; }
+.status-dot.unknown { background: #87939a; box-shadow: 0 0 0 3px #293136; }
+.row-actions { display: flex; justify-content: flex-end; gap: 5px; }
+.row-icon { width: 28px; height: 28px; }
+.row-icon.primary { color: #65d69d; }
+.row-icon:disabled { opacity: .32; cursor: not-allowed; }
+.empty-state { padding: 42px; color: #778289; text-align: center; font-size: 13px; }
+.inspector-empty { display: grid; align-content: center; justify-items: center; gap: 8px; color: #778289; }
+.inspector-empty h2 { margin: 0; font-size: 13px; }
+.inspector { padding: 20px 18px; border-left: 1px solid #272d31; background: #14181b; overflow-y: auto; }
+.inspector-title { display: grid; grid-template-columns: minmax(0, 1fr) auto; align-items: start; gap: 10px; padding-bottom: 16px; }
+.inspector-title > div:first-child { min-width: 0; }
+.inspector-actions { display: grid; grid-template-columns: repeat(2, 30px); grid-auto-rows: 30px; justify-content: end; gap: 6px; min-width: 66px; }
+.inspector-actions .icon-button { width: 30px; height: 30px; min-width: 30px; }
+.inspector-title > div { display: grid; grid-template-columns: 12px 1fr; align-items: center; }
+.inspector-title h2 { margin: 0; font-size: 16px; line-height: 1.4; }
+.inspector-title p { grid-column: 2; margin: 2px 0 0; color: #78838a; font-size: 11px; }
+.inspector-section { padding: 16px 0; border-top: 1px solid #2a3034; }
+.inspector-section h3 { margin: 0 0 12px; color: #8d989e; font-size: 11px; font-weight: 700; text-transform: uppercase; }
+.inspector-section label, .modal label { display: grid; gap: 6px; margin-bottom: 11px; color: #8d989e; font-size: 11px; }
+.rdp-client-field { display: grid; gap: 6px; margin-bottom: 11px; color: #8d989e; font-size: 11px; }
+.segmented-control { width: 100%; min-height: 34px; display: grid; grid-template-columns: repeat(3, minmax(0, 1fr)); border: 1px solid #333b40; border-radius: 5px; overflow: hidden; background: #0f1315; }
+.segmented-control button { min-width: 0; display: flex; align-items: center; justify-content: center; gap: 4px; padding: 0 5px; border: 0; border-right: 1px solid #333b40; background: transparent; color: #8e999f; cursor: pointer; font-size: 10px; white-space: nowrap; }
+.segmented-control button:last-child { border-right: 0; }
+.segmented-control button:hover:not(:disabled) { color: #e2e7e9; background: #22292c; }
+.segmented-control button.active { color: #bcebd2; background: #244133; }
+.segmented-control button:disabled { color: #596268; background: #151a1d; cursor: not-allowed; }
+.segmented-control.file-direction { grid-template-columns: repeat(2, minmax(0, 1fr)); margin-bottom: 11px; }
+.connection-note { min-height: 28px; display: block; color: #717c82; line-height: 1.4; }
+select, .modal input, .settings-drawer input { width: 100%; height: 32px; padding: 0 9px; border: 1px solid #333b40; border-radius: 5px; outline: 0; color: #dce2e5; background: #0f1315; font-size: 12px; }
+select:focus, .modal input:focus, .settings-drawer input:focus { border-color: #548b70; }
+select:disabled { color: #727d83; background: #151a1d; cursor: not-allowed; }
+.resolution-custom { display: grid; grid-template-columns: minmax(0, 1fr) 12px minmax(0, 1fr); align-items: end; gap: 6px; margin-bottom: 11px; }
+.resolution-custom label { min-width: 0; margin: 0; }
+.resolution-custom span { padding-bottom: 8px; color: #727d83; text-align: center; font-size: 11px; }
+.resolution-custom input { width: 100%; min-width: 0; height: 32px; padding: 0 8px; border: 1px solid #333b40; border-radius: 5px; outline: 0; color: #dce2e5; background: #0f1315; font-size: 12px; }
+.resolution-custom input:focus { border-color: #548b70; }
+.display-picker { display: grid; gap: 5px; margin: 0 0 12px; padding: 0; border: 0; }
+.display-picker legend { margin-bottom: 6px; color: #8d989e; font-size: 11px; }
+.display-option { min-height: 38px; grid-template-columns: 18px minmax(0, 1fr) !important; align-items: center; gap: 8px !important; margin: 0 !important; padding: 5px 8px; border: 1px solid #30383d; border-radius: 5px; background: #111517; cursor: pointer; }
+.display-option input { width: 15px; height: 15px; margin: 0; accent-color: #3a9b6b; }
+.display-option span, .display-option strong, .display-option small { display: block; min-width: 0; }
+.display-option strong { overflow: hidden; color: #cbd2d5; text-overflow: ellipsis; white-space: nowrap; font-size: 11px; }
+.display-option small { margin-top: 2px; color: #707b82; font-size: 10px; }
+.metric-row { display: flex; justify-content: space-between; align-items: center; gap: 14px; min-height: 30px; color: #879299; font-size: 11px; }
+.metric-row span { display: inline-flex; align-items: center; gap: 6px; }
+.metric-row strong { max-width: 150px; overflow: hidden; color: #cfd6d9; text-overflow: ellipsis; white-space: nowrap; font-size: 11px; }
+.good-text { color: #63d99d !important; }
+.toggle-row { grid-template-columns: 1fr auto !important; align-items: center; margin-top: 8px; }
+.toggle-row span, .toggle-row strong, .toggle-row small { display: block; }
+.toggle-row strong { color: #cbd2d5; font-size: 11px; }
+.toggle-row small { margin-top: 3px; color: #707b82; font-size: 10px; }
+.toggle-row input { appearance: none; width: 30px; height: 17px; border-radius: 10px; background: #3a4247; cursor: pointer; position: relative; }
+.toggle-row input::after { content: ''; position: absolute; width: 13px; height: 13px; left: 2px; top: 2px; border-radius: 50%; background: #b5bec2; transition: transform .15s; }
+.toggle-row input:checked { background: #3a9b6b; }
+.toggle-row input:checked::after { transform: translateX(13px); background: white; }
+.toggle-row input:disabled { opacity: .55; cursor: not-allowed; }
+.quality-heading { display: flex; align-items: center; justify-content: space-between; gap: 10px; margin-bottom: 12px; }
+.quality-heading h3 { margin: 0; }
+.quality-heading span, .quality-heading time { color: #717c82; font-size: 10px; font-variant-numeric: tabular-nums; white-space: nowrap; }
+.quality-metrics { display: grid; grid-template-columns: repeat(4, minmax(0, 1fr)); }
+.quality-metrics > div { min-width: 0; padding: 1px 7px; border-left: 1px solid #2a3034; }
+.quality-metrics > div:first-child { padding-left: 0; border-left: 0; }
+.quality-metrics > div:last-child { padding-right: 0; }
+.quality-metrics span, .quality-metrics strong { display: block; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.quality-metrics span { color: #7e898f; font-size: 10px; }
+.quality-metrics strong { min-height: 19px; margin-top: 4px; color: #cfd5d8; font-size: 13px; font-variant-numeric: tabular-nums; }
+.quality-details { margin-top: 13px; padding-top: 7px; border-top: 1px solid #252b2f; }
+.quality-details > div { display: flex; justify-content: space-between; gap: 12px; margin: 7px 0; color: #7e898f; font-size: 11px; }
+.quality-details strong { max-width: 180px; overflow: hidden; color: #cfd5d8; text-overflow: ellipsis; white-space: nowrap; font-variant-numeric: tabular-nums; }
+.connect-button { width: 100%; margin-top: 8px; }
+.connection-blockers { margin-top: 14px; padding: 11px 12px; border: 1px solid #6b4c3f; border-radius: 6px; background: #2d2523; color: #f2c7b4; }
+.connection-blockers h3 { margin: 0 0 7px; color: #f0a98c; font-size: 11px; font-weight: 700; }
+.connection-blockers ul { margin: 0; padding-left: 18px; font-size: 12px; line-height: 1.55; }
+.credential-button { width: 100%; margin-top: 10px; }
+.certificate-input { width: 100%; min-width: 0; height: 32px; padding: 0 9px; border: 1px solid #333b40; border-radius: 5px; outline: 0; color: #dce2e5; background: #0f1315; font: 11px Consolas, "Cascadia Mono", monospace; }
+.certificate-input:focus { border-color: #548b70; }
+.certificate-observed { display: grid; gap: 4px; margin: -2px 0 9px; color: #7e898f; font-size: 10px; }
+.certificate-observed strong { overflow: hidden; color: #cfd5d8; text-overflow: ellipsis; white-space: nowrap; font: 10px Consolas, "Cascadia Mono", monospace; }
+.certificate-actions { display: grid; grid-template-columns: minmax(0, 1fr); grid-auto-flow: column; grid-auto-columns: 30px; gap: 7px; }
+.connect-button:disabled { border-color: #394147; background: #252b2f; color: #78838a; cursor: not-allowed; }
+.modal-backdrop, .drawer-backdrop { position: fixed; inset: 0; display: grid; place-items: center; background: #050708b8; z-index: 20; }
+.modal { width: min(430px, calc(100vw - 32px)); padding: 20px; border: 1px solid #394248; border-radius: 7px; background: #171c1f; box-shadow: 0 24px 80px #000a; }
+.modal-heading { display: flex; justify-content: space-between; align-items: flex-start; margin-bottom: 20px; }
+.modal-heading h2 { margin: 0; font-size: 17px; }
+.modal-heading p { margin: 5px 0 0; color: #7c878d; font-size: 11px; }
+.modal-actions { display: flex; justify-content: flex-end; gap: 8px; margin-top: 18px; }
+.drawer-backdrop { place-items: stretch end; }
+.settings-drawer { width: min(390px, 100vw); height: 100%; overflow-y: auto; padding: 20px; border-left: 1px solid #394248; background: #171c1f; box-shadow: -20px 0 70px #0008; }
+.drawer-save { width: 100%; }
+.settings-error { margin: 10px 0 0; color: #ef8f8f; font-size: 11px; line-height: 1.4; overflow-wrap: anywhere; }
+.shortcut-settings h3 { display: flex; align-items: center; gap: 6px; }
+.settings-hint { margin: 8px 0 0; color: #9ca9ad; font-size: 11px; line-height: 1.45; }
+.update-key-input { font-family: Consolas, "Cascadia Mono", monospace; }
+.update-status { min-height: 38px; margin-top: 10px; padding: 9px 0; border-top: 1px solid #2a3034; border-bottom: 1px solid #2a3034; color: #879299; font-size: 11px; }
+.update-status p { margin: 0; line-height: 1.45; overflow-wrap: anywhere; white-space: pre-line; }
+.update-release > div { display: flex; align-items: baseline; justify-content: space-between; gap: 10px; }
+.update-release strong { color: #d7dddf; font-size: 12px; }
+.update-release span { color: #77838a; font-size: 10px; font-variant-numeric: tabular-nums; white-space: nowrap; }
+.update-release > p { margin-top: 7px; color: #9ca6ab; }
+.update-actions { display: flex; gap: 8px; margin-top: 10px; }
+.update-actions > button { flex: 1; padding: 0 8px; }
+.spin { animation: spin .7s linear infinite; }
+@keyframes spin { to { transform: rotate(360deg); } }
+@keyframes pulse { 50% { opacity: .45; } }
+
+:root[data-theme='light'] { color: #25302b; background: #f5f7f8; color-scheme: light; }
+[data-theme='light'].app-shell { color: #25302b; background: #f5f7f8; }
+[data-theme='light'] .topbar { border-color: #dbe1de; background: #ffffff; }
+[data-theme='light'] .brand { color: #111713; }
+[data-theme='light'] .topbar-clock { color: #5f6e66; }
+[data-theme='light'] .search-field { border-color: #cbd3cf; background: #f5f7f8; color: #65736c; }
+[data-theme='light'] .search-field:focus-within { border-color: #36845e; box-shadow: 0 0 0 2px #d7eee2; }
+[data-theme='light'] .search-field input { color: #1f2924; }
+[data-theme='light'] .search-field kbd { border-color: #cbd3cf; color: #66746d; background: #ffffff; }
+[data-theme='light'] .icon-button, [data-theme='light'] .row-icon { border-color: #cbd3cf; background: #ffffff; }
+[data-theme='light'] .icon-button:hover, [data-theme='light'] .row-icon:hover { border-color: #94a49c; background: #edf2ef; }
+[data-theme='light'] .secondary-button { border-color: #c4cec9; background: #f1f4f2; color: #26322c; }
+[data-theme='light'] .sidebar { border-color: #dfe5e2; background: #f8faf9; }
+[data-theme='light'] .nav-item { color: #526159; }
+[data-theme='light'] .nav-item:hover { color: #1f2924; background: #edf2ef; }
+[data-theme='light'] .nav-item.active { color: #17452f; background: #dff1e7; }
+[data-theme='light'] .nav-count { color: #68776f; }
+[data-theme='light'] .sidebar-status { border-color: #dfe5e2; color: #65736c; }
+[data-theme='light'] .section-heading span, [data-theme='light'] .path-summary { color: #65736c; }
+[data-theme='light'] .host-table { border-color: #d7dfdb; background: #ffffff; }
+[data-theme='light'] .table-row { border-color: #e1e6e3; color: #526159; }
+[data-theme='light'] .table-header { color: #68776f; background: #f2f5f4; }
+[data-theme='light'] .host-row:hover { background: #f3f7f5; }
+[data-theme='light'] .host-row.selected { background: #e8f5ee; box-shadow: inset 3px 0 #2b9a65; }
+[data-theme='light'] .host-icon { border-color: #d5ddd9; color: #65736c; background: #f4f7f5; }
+[data-theme='light'] .host-identity strong { color: #1d2822; }
+[data-theme='light'] .host-identity small, [data-theme='light'] .inspector-title p { color: #6c7a73; }
+[data-theme='light'] .sidebar-label { color: #7a8981; }
+[data-theme='light'] .tag-chip { border-color: #b9d8c6; background: #edf8f1; color: #28734b; }
+[data-theme='light'] .status-dot.ready { background: #209a63; box-shadow: 0 0 0 3px #d7f0e3; }
+[data-theme='light'] .status-dot.connecting { background: #b97817; box-shadow: 0 0 0 3px #f4e6ca; }
+[data-theme='light'] .status-dot.probing { background: #b97817; box-shadow: 0 0 0 3px #f4e6ca; }
+[data-theme='light'] .status-dot.offline { background: #8a9690; }
+[data-theme='light'] .status-dot.unknown { background: #718078; box-shadow: 0 0 0 3px #e1e7e4; }
+[data-theme='light'] .row-icon.primary, [data-theme='light'] .good-text { color: #167a4c !important; }
+[data-theme='light'] .empty-state { color: #69776f; }
+[data-theme='light'] .inspector { border-color: #dfe5e2; background: #ffffff; }
+[data-theme='light'] .inspector-section { border-color: #dfe5e2; }
+[data-theme='light'] .inspector-section h3, [data-theme='light'] .inspector-section label, [data-theme='light'] .modal label { color: #5f6e66; }
+[data-theme='light'] .rdp-client-field { color: #5f6e66; }
+[data-theme='light'] .segmented-control { border-color: #cbd3cf; background: #ffffff; }
+[data-theme='light'] .segmented-control button { border-color: #cbd3cf; color: #5f6e66; }
+[data-theme='light'] .segmented-control button:hover:not(:disabled) { color: #26322c; background: #edf2ef; }
+[data-theme='light'] .segmented-control button.active { color: #175c3b; background: #dff1e7; }
+[data-theme='light'] .segmented-control button:disabled { color: #96a19b; background: #eef1f0; }
+[data-theme='light'] .connection-note { color: #69776f; }
+[data-theme='light'] select, [data-theme='light'] .modal input, [data-theme='light'] .settings-drawer input { border-color: #cbd3cf; color: #25302b; background: #ffffff; }
+[data-theme='light'] select:focus, [data-theme='light'] .modal input:focus, [data-theme='light'] .settings-drawer input:focus { border-color: #36845e; }
+[data-theme='light'] select:disabled { color: #77857e; background: #eef1f0; }
+[data-theme='light'] .resolution-custom span { color: #77857e; }
+[data-theme='light'] .resolution-custom input { border-color: #cbd3cf; color: #25302b; background: #ffffff; }
+[data-theme='light'] .resolution-custom input:focus { border-color: #36845e; }
+[data-theme='light'] .certificate-input { border-color: #cbd3cf; color: #25302b; background: #ffffff; }
+[data-theme='light'] .certificate-input:focus { border-color: #36845e; }
+[data-theme='light'] .certificate-observed strong { color: #28342e; }
+[data-theme='light'] .display-picker legend { color: #5f6e66; }
+[data-theme='light'] .display-option { border-color: #d5ddd9; background: #f7f9f8; }
+[data-theme='light'] .display-option strong { color: #28342e; }
+[data-theme='light'] .display-option small { color: #69776f; }
+[data-theme='light'] .metric-row, [data-theme='light'] .quality-details > div { color: #5f6e66; }
+[data-theme='light'] .metric-row strong, [data-theme='light'] .quality-metrics strong, [data-theme='light'] .quality-details strong, [data-theme='light'] .toggle-row strong { color: #28342e; }
+[data-theme='light'] .quality-heading span, [data-theme='light'] .quality-heading time, [data-theme='light'] .quality-metrics span { color: #69776f; }
+[data-theme='light'] .quality-metrics > div, [data-theme='light'] .quality-details { border-color: #dfe5e2; }
+[data-theme='light'] .toggle-row small, [data-theme='light'] .modal-heading p { color: #69776f; }
+[data-theme='light'] .toggle-row input { background: #b7c1bc; }
+[data-theme='light'] .toggle-row input::after { background: #ffffff; }
+[data-theme='light'] .toggle-row input:checked { background: #26865a; }
+[data-theme='light'] .connect-button:disabled { border-color: #d1d8d4; color: #77857e; background: #e8ecea; }
+[data-theme='light'] .connection-blockers { border-color: #e5b9a7; background: #fff5f0; color: #7a3928; }
+[data-theme='light'] .connection-blockers h3 { color: #a3472e; }
+[data-theme='light'] .modal-backdrop, [data-theme='light'] .drawer-backdrop { background: #10181447; }
+[data-theme='light'] .modal, [data-theme='light'] .settings-drawer { border-color: #c9d1cd; background: #ffffff; box-shadow: 0 24px 70px #19251f2e; }
+[data-theme='light'] .settings-error { color: #aa3030; }
+[data-theme='light'] .settings-hint { color: #5e6b65; }
+[data-theme='light'] .icon-button.update-available { color: #167a4c; border-color: #78aa90; }
+[data-theme='light'] .update-status { border-color: #dfe5e2; color: #5f6e66; }
+[data-theme='light'] .update-release strong { color: #28342e; }
+[data-theme='light'] .update-release span, [data-theme='light'] .update-release > p { color: #69776f; }
+
+@media (max-width: 1040px) {
+  .workspace { grid-template-columns: 160px minmax(520px, 1fr); }
+  .inspector { display: none; }
+  .topbar { grid-template-columns: 140px minmax(150px, 1fr) 136px auto; gap: 8px; padding: 0 12px; }
+}
+
+@media (max-width: 900px) {
+  .top-actions .command-button { width: 34px; padding: 0; font-size: 0; }
+}
+
+@media (max-width: 720px) {
+  body { overflow: auto; }
+  .topbar { height: auto; min-height: 56px; grid-template-columns: 1fr auto; gap: 8px; padding: 10px 12px; }
+  .top-actions { gap: 4px; }
+  .topbar-clock { grid-column: 1 / -1; grid-row: 2; justify-self: end; min-width: 0; }
+  .search-field { grid-column: 1 / -1; grid-row: 3; }
+  .workspace { height: auto; min-height: calc(100vh - 132px); display: block; }
+  .sidebar { padding: 8px; border-right: 0; border-bottom: 1px solid #272d31; }
+  .sidebar nav { display: flex; overflow-x: auto; }
+  .nav-item { min-width: 82px; }
+  .sidebar-status { display: none; }
+  .host-area { padding: 16px 12px; overflow-x: auto; }
+}
diff --git a/client/web/tsconfig.app.json b/client/web/tsconfig.app.json
new file mode 100644
index 0000000..a35d693
--- /dev/null
+++ b/client/web/tsconfig.app.json
@@ -0,0 +1,22 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "useDefineForClassFields": true,
+    "lib": ["ES2022", "DOM", "DOM.Iterable"],
+    "allowJs": false,
+    "skipLibCheck": true,
+    "esModuleInterop": true,
+    "allowSyntheticDefaultImports": true,
+    "strict": true,
+    "forceConsistentCasingInFileNames": true,
+    "module": "ESNext",
+    "moduleResolution": "Bundler",
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "noEmit": true,
+    "jsx": "react-jsx",
+    "noUnusedLocals": true,
+    "noUnusedParameters": true
+  },
+  "include": ["src"]
+}
diff --git a/client/web/tsconfig.json b/client/web/tsconfig.json
new file mode 100644
index 0000000..1ffef60
--- /dev/null
+++ b/client/web/tsconfig.json
@@ -0,0 +1,7 @@
+{
+  "files": [],
+  "references": [
+    { "path": "./tsconfig.app.json" },
+    { "path": "./tsconfig.node.json" }
+  ]
+}
diff --git a/client/web/tsconfig.node.json b/client/web/tsconfig.node.json
new file mode 100644
index 0000000..05674ad
--- /dev/null
+++ b/client/web/tsconfig.node.json
@@ -0,0 +1,15 @@
+{
+  "compilerOptions": {
+    "target": "ES2023",
+    "lib": ["ES2023"],
+    "module": "ESNext",
+    "skipLibCheck": true,
+    "moduleResolution": "Bundler",
+    "allowImportingTsExtensions": true,
+    "verbatimModuleSyntax": true,
+    "moduleDetection": "force",
+    "noEmit": true,
+    "strict": true
+  },
+  "include": ["vite.config.ts"]
+}
diff --git a/client/web/vite.config.ts b/client/web/vite.config.ts
new file mode 100644
index 0000000..bd735fd
--- /dev/null
+++ b/client/web/vite.config.ts
@@ -0,0 +1,15 @@
+import { defineConfig } from 'vite'
+
+export default defineConfig({
+  base: './',
+  build: {
+    emptyOutDir: true,
+  },
+  server: {
+    host: '127.0.0.1',
+    port: 4173,
+    proxy: {
+      '/api': 'http://127.0.0.1:4174',
+    },
+  },
+})
diff --git a/docs/architecture.md b/docs/architecture.md
new file mode 100644
index 0000000..33abca7
--- /dev/null
+++ b/docs/architecture.md
@@ -0,0 +1,334 @@
+# RemoteDesk 总体架构
+
+## 1. 目标和边界
+
+RemoteDesk 解决两个问题：
+
+1. 用 Windows 客户端连接 Windows RDP 和现代 Linux 被控端。
+2. 在不依赖 VDI 的前提下，连接长期存在的固定工作站。
+
+项目以单用户和小规模设备列表为第一目标。连接目标是长期存在的固定机器，不负责创建桌面、分配用户或回收虚拟机。Linux 只作为被控端，不构建 Linux 客户端。
+
+## 2. 为什么采用双通道
+
+Windows 的 RDP 服务成熟，重复实现服务端没有价值。现代 Linux 的桌面栈以 Wayland 为主，而 xrdp 通常建立独立 Xorg 会话，不能准确复现当前桌面状态，也容易丢失 GPU 加速、桌面扩展和音频体验。Linux 被控端因此固定使用自研 Agent，不依赖桌面环境自带的 RDP 服务。
+
+因此客户端统一，协议不强行统一：
+
+| 目标 | 首选通道 | 说明 |
+|---|---|---|
+| Windows 11 Pro/Enterprise、Windows Server | RDP | 使用 Windows 系统服务 |
+| GNOME/KDE 等 Wayland 桌面 | Native Desktop | Agent + Portal/PipeWire/libei |
+| Xorg 桌面 | Native Desktop | Agent + XComposite/DRI3/XDamage/XTest |
+| 无图形桌面的 Linux | Native Terminal | Agent + PAM/PTY |
+| Linux 登录界面 | Console fallback | 后续按合成器适配 |
+
+所有连接在 UI 中表现为相同的“主机配置”，具体通道由配置和能力探测决定。
+
+## 3. 系统组件
+
+### 3.1 Windows Desktop Client
+
+Windows 客户端负责：
+
+- 管理连接配置、收藏和最近连接。
+- 使用系统密钥库读取凭据。
+- 创建 RDP 或 Native 会话。
+- 渲染远程画面并发送输入。
+- 处理剪贴板、音频、显示器和文件传输。
+- 展示延迟、帧率、码率和丢包等质量指标。
+
+客户端内部按能力拆分：
+
+```text
+Tauri UI (React/TypeScript)
+        |
+Session Controller ---- Profile Store ---- Secret Store
+        |
+  +----------+--------------+-------------+
+  |          |              |
+RDP Helper  Native Video   Terminal/Edge
+  |          |              |
+IronRDP   GStreamer       xterm.js
+```
+
+客户端使用 Tauri 2 + React/TypeScript 构建主界面，终端使用 xterm.js。Linux 桌面在独立 GStreamer/D3D11 原生 helper 中完成 WebRTC、硬件解码和呈现，原始帧不进入 Tauri/WebView。Windows RDP 在另一个独立 Rust helper 中使用 IronRDP/D3D11。
+
+### 3.2 RDP Adapter
+
+RDP helper 封装 IronRDP，不向 Tauri UI 暴露 IronRDP 数据结构或图形帧。主要职责：
+
+- NLA/TLS 认证与证书校验。
+- 图形更新、动态分辨率和多显示器布局。
+- 键盘布局、鼠标、Unicode 输入和组合键。
+- 音频播放、麦克风和剪贴板通道。
+- 本地目录重定向，默认关闭。
+- 会话断开原因映射和有限次数重连。
+
+渲染层将 IronRDP 图形更新映射为 D3D11 脏矩形上传。IronRDP 的 NLA、动态分辨率、虚拟通道和 RDP UDP multitransport 必须先通过技术验证；关键能力不足时，MVP 以系统 mstsc 作为隔离回退。
+
+主程序与 helper 通过当前用户 ACL 限制的 Named Pipe 交换版本化控制消息。凭据不进入命令行，视频帧不进入 IPC。
+
+### 3.3 Linux Agent
+
+Linux Agent 是 Linux 唯一的被控端组件，不调用 GNOME Remote Desktop、KRdp 或 xrdp，也不提供发起远程连接的客户端界面。Agent 使用 Rust 实现，媒体管线通过 GStreamer 及其 Rust bindings 接入。
+
+Agent 分为两个进程和权限层：
+
+```text
+remotedesk-agent-session (graphical user)
+├── Wayland: Portal/PipeWire/libei
+├── Xorg: XComposite/DRI3/XDamage/XTest，XShm 仅兼容模式
+├── 编码与会话信令
+└── 用户音频与剪贴板
+
+remotedesk-shell-session (target user)
+├── PTY 与登录 Shell
+├── 终端尺寸、信号与环境
+└── 可靠 DataChannel
+
+remotedesk-agentd (system)
+├── 开机启动、设备配对和客户端授权
+├── 发现已登录用户并联络会话进程
+├── 更新与版本兼容检查
+├── 可选的受控 uinput Helper
+└── 受限 Unix Socket IPC
+```
+
+`agentd` 不捕获桌面、不编码媒体，也不读取剪贴板或终端内容。所有桌面处理保留在普通用户会话中。命令行会话由独立进程在完成 PAM/设备授权后降权到目标 UID，再创建 PTY。可选的 uinput Helper 必须代码面尽量小，并通过固定消息类型、调用方身份验证和最小设备权限限制风险。
+
+### 3.4 Edge Relay
+
+远程链路支持 Direct、Single Edge 和 Dual Edge。默认同时测量直连和 CDN 路径；当双边缘路径更优时，客户端与 Agent 分别进入最近 TURN POP，POP 间通过 CDN 私有/优质骨干传输。TURN 只转发 DTLS-SRTP/SCTP 密文，不解码、不转码、不缓存远程内容。
+
+Agent 通过出站 TLS WebSocket 连接最近的 Rendezvous Gateway，客户端以已配对设备密钥签名会话请求。控制面只负责在线路由、信令和短期 TURN credential，不替 Agent 授权桌面或终端。详细设计见 [CDN 与边缘中继](edge-relay.md)。
+
+Windows RDP 不使用 ICE/TURN。其 CDN 加速需要目标网络中的出站 L4 Edge Connector，在两端 POP 间透明转发 RDP TCP/UDP；RDP TLS/NLA 仍由 IronRDP 与目标 Windows 端到端完成。
+
+## 4. Linux 会话模式
+
+Wayland 不允许普通进程静默截屏和任意注入输入，这是安全边界，不应通过默认 root 运行 Agent 来绕过。
+
+### 4.1 Assisted Session
+
+适合已经登录且有人可确认授权的桌面：
+
+1. Agent 请求 `RemoteDesktop` 和 `ScreenCast` Portal 会话。
+2. 桌面弹出系统授权窗口。
+3. Portal 返回 PipeWire 节点和 libei/EIS 输入通道。
+4. Agent 编码画面并建立 WebRTC 会话。
+5. 用户结束共享或锁屏后，根据桌面策略暂停连接。
+
+这是跨桌面环境最标准的模式，应优先实现。
+
+### 4.2 Paired Unattended Session
+
+目标是在用户首次本地授权后允许同一设备再次连接：
+
+- Agent 保存 Portal 返回的恢复令牌和已授权显示器信息。
+- 后续连接尝试恢复 Portal 会话，并继续使用 PipeWire/libei。
+- 若合成器拒绝恢复或要求再次确认，Agent 必须返回明确状态，不能静默降级到 root 抓屏。
+- 不同发行版和合成器对持久授权的支持不同，能力探测结果必须展示给用户。
+
+该模式仍由自研 Agent 实现，只复用 Wayland/Portal 提供的安全接口。
+
+### 4.3 Pre-login And Lock Screen
+
+登录前没有普通用户的 Portal/PipeWire 会话。通用实现需要 DRM/KMS 捕获、虚拟显示、uinput 和显示管理器集成，容易与合成器、安全策略及显卡驱动冲突。因此首期规则如下：
+
+- 已登录会话锁屏后的行为按桌面能力检测，不承诺跨桌面一致。
+- 物理机登录界面控制属于后续按发行版适配的实验能力。
+- 不能通过让整个 Agent 以 root 运行来绕过限制。
+
+### 4.4 Xorg Desktop Session
+
+Xorg 会话 Agent 以当前图形用户身份运行，并读取该用户的 Xauthority：
+
+- 使用 XDamage 获取变化区域，减少静态桌面复制。
+- 默认通过 XComposite 获取 pixmap，并用 DRI3 导出 DMA-BUF 直达同 GPU 编码器。
+- XShm/XImage 只在用户显式 compatibility 模式中启用。
+- 使用 XTest 注入键盘和鼠标事件。
+- 使用 XRandR 获取显示器拓扑和分辨率变化。
+- 音频统一从 PipeWire 获取，不建立另一套音频协议。
+
+Agent 只能连接自己所属用户的 Xorg 会话，不复制其他用户的 Xauthority，也不通过关闭 X server 访问控制来简化部署。
+
+### 4.5 Command-line Session
+
+纯命令行模式不需要 Wayland、Xorg 或 PipeWire：
+
+1. 已配对客户端请求目标普通用户的终端权限。
+2. `agentd` 验证设备权限，并通过 PAM 建立受审计的用户会话。
+3. 独立 `remotedesk-shell-session` 进程完成组、GID、UID 和环境降权。
+4. 进程创建 PTY 并执行该用户允许的登录 Shell。
+5. Windows 客户端使用终端控件显示 UTF-8 输出并发送输入、窗口尺寸和信号。
+
+Linux 终端允许在配对授权中明确加入 `root` 用户。Agent 仍通过 PAM、独立会话进程和授权用户列表校验目标身份，不保存提权密码；未获授权的用户仍会被拒绝。
+
+## 5. Native 协议
+
+Native 通道用于 Linux Agent。第一版采用 WebRTC，避免自行设计媒体拥塞控制、时钟同步和加密传输。
+
+### 5.1 通道划分
+
+| 通道 | 内容 | 可靠性 |
+|---|---|---|
+| Video RTP | H.264/HEVC/AV1 视频 | 允许丢包 |
+| Audio RTP | Opus 音频 | 允许少量丢包 |
+| Input DataChannel | 键盘、鼠标、触控 | 有序，低延迟 |
+| Control DataChannel | 显示器、质量、心跳 | 可靠有序 |
+| Clipboard DataChannel | 文本、图片元数据 | 可靠有序 |
+| File channel | 分块文件数据 | 可靠，可取消 |
+| Terminal DataChannel | UTF-8 字节流、尺寸、信号 | 可靠有序 |
+
+会话优先使用直连 candidate，并同时支持由边缘 Allocator 签发的短期 TURN candidate。公网模式通过 Rendezvous 转发信令；本地模式可以直接连接 Agent。两种模式共享相同设备身份、Session Ticket 和端到端 DTLS-SRTP。
+
+### 5.2 差网络自适应
+
+WebRTC 内置拥塞控制负责估算可用带宽，RemoteDesk 在其上增加会话策略：
+
+- 使用 TWCC/GCC、RTT、抖动、NACK、PLI 和丢包 EWMA 判断链路等级。
+- 协商 NACK/RTX；FEC 仅在双方支持且收益高于带宽成本时启用。
+- 丢包上升时依次降低视频码率、帧率和分辨率，恢复时缓慢升档并设置迟滞。
+- Opus 音频可启用 in-band FEC/DTX，优先级高于视频。
+- 键盘、鼠标按键和控制消息可靠发送；高频鼠标移动只保留最新状态。
+- 剪贴板和文件传输限流，严重丢包时暂停，不能阻塞输入。
+- 解码端丢弃过时视频帧，连续解码失败时请求关键帧。
+
+策略不以单次丢包采样立即切档，而使用短期/中期滑动窗口和恢复迟滞，避免画质频繁震荡。详细规则见 [差网络自适应设计](network-adaptation.md)。
+
+### 5.3 会话状态机
+
+```text
+Idle
+  -> Resolving
+  -> Authenticating
+  -> Negotiating
+  -> Connected
+  -> Reconnecting
+  -> Connected | Failed | Closed
+```
+
+所有 Adapter 必须映射到同一状态机和错误类型，UI 不根据协议拼接错误字符串。
+
+### 5.4 编码策略
+
+- 默认 H.264，优先硬件编码，保证最大兼容性。
+- HEVC 和 AV1 仅在双方能力协商成功时启用。
+- 办公模式优先清晰度和文字边缘，限制静态画面的无效刷新。
+- 动态模式优先低延迟和帧率。
+- 分辨率变化应触发编码器重配置，不重建整个会话。
+- 严格模式下硬件编码器或 GPU surface 导入不可用时拒绝图形会话；软件编码仅允许在用户显式开启的兼容模式中使用。
+
+### 5.5 零拷贝边界
+
+Linux Wayland 的默认发送路径为 `PipeWire DMA-BUF -> GPU conversion/scale -> hardware encoder`，Xorg 默认尝试 `XComposite pixmap -> DRI3 DMA-BUF -> hardware encoder`。Windows 默认接收路径为 `hardware decoder -> GstD3D11Memory -> d3d11videosink`。两端原始像素都不得经过 Rust `Vec<u8>`、GStreamer `appsink`、JavaScript、Tauri IPC 或其他 CPU 映射。
+
+压缩后的 H.264/HEVC/AV1 码流、RTP 包和控制消息进入普通内存不属于原始帧复制。默认策略 `required_end_to_end` 要求 Agent 和客户端 helper 都报告经过验证的 `zero_copy`，否则返回 `CAPABILITY_ZERO_COPY_UNAVAILABLE`。跨 GPU Adapter、PipeWire memory frame、XShm/XImage、软件编解码、WebView2 opaque path 和 IronRDP CPU bitmap 均不满足该策略。用户只有显式选择 `compatibility` 才允许这些路径。
+
+## 6. 认证与安全
+
+### 6.1 RDP
+
+- 默认启用 NLA 和 TLS。
+- 首次连接不要求用户配置或确认服务器证书指纹。
+- 证书变化必须阻断自动连接并提示用户重新确认。
+- 密码只保存到系统密钥库，SQLite 仅保存凭据引用。
+- 磁盘、剪贴板、麦克风重定向按连接配置单独授权。
+
+### 6.2 Linux Agent
+
+- 首次配对由 Agent 生成一次性短码和设备公钥。
+- 客户端与 Agent 交换长期设备公钥，配对码只用于确认本次配对。
+- 后续使用双向设备认证和 TLS 1.3。
+- Agent 保存允许连接的客户端公钥，可本机撤销。
+- 会话开始和结束必须有可见系统通知。
+- 日志不得记录密码、剪贴板内容、文件内容或配对私钥。
+
+### 6.3 本地数据
+
+SQLite 保存：
+
+- 主机名、地址、端口和协议类型。
+- 显示、音频、剪贴板和质量选项。
+- 证书指纹、Agent 设备 ID 和密钥库引用。
+- 最近连接时间与非敏感错误摘要。
+
+数据库不保存明文密码或私钥。
+
+## 7. 用户体验
+
+主界面直接展示远程主机列表，不设置营销首页。核心工作流：
+
+1. 新建主机，选择“Windows RDP”或“Linux Agent”，Linux 可选自动桌面、Wayland、Xorg 或命令行模式。
+2. 执行能力检测并给出可用通道。
+3. 点击连接并等待目标服务就绪。
+4. 进入独立会话窗口，工具栏默认自动隐藏。
+5. 断开后返回原主机条目，并保留可诊断的结束原因。
+
+会话工具栏提供显示器、分辨率、全屏、本地缩放、画质、剪贴板、文件传输、统计和断开按钮。分辨率和本地缩放是两个独立设置：前者控制 RDP 会话尺寸或 Linux 编码尺寸，后者只控制客户端如何把收到的画面放入窗口。危险操作如发送安全注意序列、重启远端应放入菜单并二次确认。
+
+分辨率支持以下模式：
+
+- 自动跟随：默认。窗口稳定后发送新的目标尺寸，并使用防抖避免拖动时反复重配。
+- 原始分辨率：保持远端显示器/桌面源尺寸，客户端只做本地缩放。
+- 固定档位：720p、1080p、1440p、4K，以及经过能力校验的自定义宽高。
+
+RDP 通过 Display Control/动态分辨率修改远程会话桌面；不支持时可提示重连后应用初始尺寸。Linux Wayland/Xorg 默认保持实体桌面模式不变，只在捕获与编码之间缩放。这样调整串流清晰度不会改变被控端显示器布局、打乱本地窗口或触发合成器权限问题。
+
+## 8. 性能目标
+
+首个稳定版本的工程目标：
+
+| 场景 | 目标 |
+|---|---|
+| 办公静态桌面 | 文字清晰、低带宽、无持续满帧编码 |
+| 1080p 动态画面 | 60 fps，局域环境端到端延迟可感知但不拖沓 |
+| 4K 办公 | 30/60 fps 可配置，优先硬件编解码 |
+| 输入 | 不因视频帧阻塞输入发送 |
+| 重连 | 短时中断自动恢复，超过阈值明确失败 |
+
+实际延迟与显卡、编码器、桌面合成器和网络条件有关，测试报告必须记录完整环境，不能只给出单个延迟数字。
+
+## 9. 可观测性和诊断
+
+- 客户端提供可导出的结构化诊断包。
+- 诊断包包含版本、能力、会话状态转换和非敏感错误。
+- Native 会话记录 RTT、抖动、丢包、码率、编码/解码时间和丢帧。
+- RDP 会话记录协商能力、重定向通道、IronRDP 错误和 UDP multitransport 状态。
+- 日志默认滚动保存并限制大小。
+- 导出前对用户名、地址和路径进行可选脱敏。
+
+## 10. 测试矩阵
+
+最低覆盖：
+
+- Windows 11 Pro 与 Windows Server 的 RDP。
+- Ubuntu/Fedora 当前稳定版 GNOME Wayland 上的自研 Agent。
+- KDE neon 或主流发行版 Plasma 6 Wayland 上的自研 Agent。
+- 至少一种 GNOME/KDE Xorg 会话。
+- 无图形环境的 Debian/Ubuntu Server 命令行会话。
+- NVIDIA、AMD 和 Intel 至少各一种硬件编解码环境。
+- 单显示器、双显示器、HiDPI 和动态分辨率。
+- 中文输入、剪贴板、大文件和音频。
+- 证书变化、错误密码、锁屏、休眠、VM 重启和断网重连。
+
+测试分层为核心状态机单元测试、协议适配集成测试、虚拟机端到端测试和长时间稳定性测试。
+
+## 11. 主要风险
+
+| 风险 | 应对 |
+|---|---|
+| IronRDP 关键 RDP 能力不足 | M0 设置功能门槛，保留 mstsc 隔离回退 Adapter |
+| WebView2 GPU 无法证明内部 surface 路径 | Linux 桌面默认使用原生 video helper，WebView2 仅显式兼容模式 |
+| 驱动或桌面不提供可导入的 GPU surface | 默认拒绝图形会话；用户显式启用 compatibility 后才允许回退 |
+| Tauri 与原生 helper 生命周期不一致 | Named Pipe heartbeat、generation、独立崩溃恢复和幂等关闭 |
+| Web 输入无法覆盖系统组合键/Raw Input | 系统组合键走 Rust command，高要求场景切换原生 helper |
+| 差网络下视频震荡或输入阻塞 | WebRTC GCC + 分层退化 + 有界独立队列 + 恢复迟滞 |
+| Wayland Portal 行为随桌面变化 | 维护能力探测和发行版测试矩阵 |
+| Xorg 捕获权限配置错误 | 只使用目标用户 Xauthority，禁止关闭 X 访问控制 |
+| PTY 远程终端扩大权限面 | PAM 建立会话、强制降权、设备权限独立控制 |
+| 无人值守 Linux 缺乏统一接口 | 首次授权后尝试 Portal 恢复令牌，登录界面单独适配 |
+| 硬件编码器兼容性 | 默认拒绝非零拷贝会话；显式 compatibility 才允许 H.264 软件回退 |
+| 输入法和键盘布局错误 | 统一物理键与 Unicode 输入模型，专项测试中英文布局 |
+| IronRDP/GStreamer 等依赖安全更新 | 固定版本、生成 SBOM、建立升级回归测试 |
diff --git a/docs/development.md b/docs/development.md
new file mode 100644
index 0000000..5bbd6cc
--- /dev/null
+++ b/docs/development.md
@@ -0,0 +1,180 @@
+# RemoteDesk 开发指南
+
+## 1. 环境
+
+- Rust stable，包含 rustfmt 和 Clippy。
+- Node.js 22 与 npm 10。
+- Windows RDP viewer 的安全 Named Pipe 和 Tauri 2 桌面壳已完成源码接线；Linux 远程 H.264 的 RFC 6184 接收、Media Foundation NV12 解码和 D3D11 VideoProcessor 窗口呈现也已接线，但尚未编译、实机验证或通过 ETW/GPUView 证明硬件解码与隐藏复制边界。Tauri 和媒体新依赖按本轮要求尚未解析或编译。
+- Linux PipeWire、Portal、DRI3 与硬件编码器必须在对应 Linux 测试机执行 M0 Spike。
+
+## 2. Rust workspace
+
+```powershell
+cargo fmt --all -- --check
+cargo clippy --workspace --all-targets -- -D warnings
+cargo test --workspace
+```
+
+当前 crate：
+
+- `remotedesk-protocol`：required features、显示拓扑/选择、协商摘要、双端内存路径报告和严格聚合。
+- `remotedesk-agent-core`：Linux 单/多屏捕获能力、逐屏 GPU import probe、编码器选择和分辨率/布局重验证。
+- `remotedesk-agent-runtime`：Linux `agentd`、用户会话 IPC、设备配对/WSS 认证、PAM/PTY 终端 helper，以及 Edge Presence、设备签名 poll/ack 和本地 Session Intent 授权。
+- `remotedesk-client-core`：会话状态、helper 身份验证、RDP 凭据引用、多屏布局、GPU 计划和本地呈现报告。
+- `remotedesk-control-service`：仅监听回环地址，提供静态界面、RDP 探测和三种 RDP 启动方式编排。
+- `remotedesk-rdp-session`：独立的无凭据 IronRDP 协议与 TLS 证书探针，只从 stdin 接受目标和超时。
+- `remotedesk-rdp-viewer`：独立 IronRDP 原生窗口；Windows 优先使用 D3D11 swap chain CPU 上传呈现，失败时回退 software framebuffer，不经过 React IPC。
+- `remotedesk-native-video`：输出 D3D11 管线计划，并可在 Windows 真实创建硬件 device/immediate context。
+- `remotedesk-edge-service`：独立 Edge Presence、有界签名 Session Intent 队列、Allocator/coturn credential 服务和限额透明 TCP byte relay；不随控制端或 Agent 进程启动。
+
+运行 native-video 规划：
+
+```powershell
+cargo run -p remotedesk-native-video -- --dry-run --window-adapter gpu-0
+```
+
+`--dry-run` 输出中的 `d3d11_created=false` 仅表示该规划命令不创建设备。真实设备探针使用：
+
+```powershell
+cargo run -p remotedesk-native-video -- --probe-d3d11
+```
+
+创建真实 H.264/DXVA decoder 对象、NV12 texture array 和 output view（仍不提交样本，也不证明零拷贝）：
+
+```powershell
+cargo run -p remotedesk-native-video -- --probe-h264-decoder
+```
+
+使用本地 H.264 MP4/M4V/MOV 文件验证首个解码样本必须以同一 device 上的 NV12 DXGI texture 返回：
+
+```powershell
+cargo run -p remotedesk-native-video -- --probe-h264-file C:\samples\baseline.mp4
+```
+
+在原生窗口按媒体时间戳播放同一受限 H.264 文件，并通过同 device D3D11 VideoProcessor 呈现 NV12 surface：
+
+```powershell
+cargo run -p remotedesk-native-video -- --play-h264-file C:\samples\baseline.mp4
+```
+
+窗口按启动配置进入全屏；按 `Ctrl+Alt+F` 在全屏与窗口模式之间切换，其余键盘输入直接转发到远端。该入口不映射 CPU frame，但在 ETW/GPUView 验证前仍不声明硬解或零拷贝。
+
+输入必须是本地常规文件且不超过 512 MiB；UNC、空文件、非 H.264 video stream、CPU media buffer、错误 subresource 或不同 D3D11 device 均失败。成功只证明样本进入 DXGI surface，正式 `hardware_decode`/`zero_copy` 仍要求 ETW/GPUView 和完整呈现链验证。
+
+成功时必须输出 `d3d11_created=true`、hardware driver type 和实际 feature level；这仍不代表解码器或端到端零拷贝已经接入。IronRDP viewer 的 swap chain 是独立 CPU 上传呈现路径。
+
+控制服务还提供 `GET /api/v1/capabilities`。Web UI 必须以该接口启用运行时功能；设计稿中存在但未接入的功能保持 `false`。新增实际能力时，应同时更新 [实现状态](implementation-status.md) 和接口测试。
+
+## 3. Web 管理界面
+
+```powershell
+cd client/web
+npm ci
+npm run lint
+npm run build
+npm run control
+npm run dev
+```
+
+控制服务监听 `http://127.0.0.1:4174`，Vite 开发服务器监听 `http://127.0.0.1:4173` 并转发 `/api`。默认主机列表为空，配置保存在浏览器本地存储；使用 `?demo=1` 才加载示例主机。
+
+受限环境可用 `npm run build:check` 完成不写入 `dist` 的完整 Vite 构建检查。
+
+## 4. M0 Windows 预览包
+
+```powershell
+.\packaging\windows\package-preview.ps1
+```
+
+输出位于 `artifacts/RemoteDesk-Portable-M0-<version>-windows-<arch>.zip`，并生成外部 `SHA256SUMS.txt`。解压后运行 `bin/remotedesk.exe`；Tauri 壳会选择随机 loopback 端口、验证控制服务的一次性启动 proof，并且只在 RemoteDesk WebView 中加载管理界面，不打开系统浏览器。
+
+该压缩包不是 MSI，也不包含 Linux Agent。Windows 同时提供 Tauri 壳、`mstsc`、独立 IronRDP viewer 和 Windows Credential Manager 凭据适配器；viewer 支持固定/自定义初始尺寸、窗口动态分辨率、全屏和主动退出，协议探针会确认服务端 RDP 协商与 TLS 证书，但不会尝试账号登录。
+
+生成按当前用户安装的 MSI：
+
+```powershell
+.\packaging\windows\package-installer.ps1
+```
+
+输出位于 `artifacts/RemoteDesk-M0-<version>-<culture>-windows-<arch>.msi`，其中 `culture` 支持 `zh-cn` 和 `en-us`，默认是 `zh-cn`；校验文件为 `artifacts/INSTALLER-SHA256SUMS.txt`。安装目录是 `%LOCALAPPDATA%\Programs\RemoteDesk`，安装器创建开始菜单快捷方式并注册 Windows 卸载入口，不要求管理员权限。
+
+使用统一脚本选择安装器语言：
+
+```powershell
+.\packaging\build-all.ps1 -Culture zh-cn
+.\packaging\build-all.ps1 -Culture en-us
+
+# 只构建 Hysteria2 UDP/QUIC 传输包
+.\packaging\build-all.ps1 -SkipClient -SkipHost
+
+# 重新生成全部产物前清空 artifacts
+.\packaging\build-all.ps1 -CleanArtifacts -Culture zh-cn
+```
+
+脚本下载固定版本和 SHA256 的 WiX 4.0.6 到忽略提交的 `target/tools`，WiX 不进入 MSI。当前没有切换到附带额外维护条款的 WiX 6 预编译发行包。无签名参数时脚本生成明确标记的开发包；正式环境先把具有私钥和 Code Signing EKU 的证书导入 `Cert:\CurrentUser\My`，再运行：
+
+```powershell
+./packaging/windows/package-installer.ps1 `
+  -SigningCertificateThumbprint <40位SHA1指纹> `
+  -TimestampUrl https://timestamp.digicert.com `
+  -ReleaseChannel stable
+```
+
+该路径在 payload 哈希之前签署并验证内部 EXE 和 PowerShell，在最终 MSI 哈希之前签署并验证 MSI。生产自动化及密钥要求见 [在线升级](online-updates.md)。
+
+## 5. 被控端安装包
+
+Windows 被控端 MSI：
+
+```powershell
+.\packaging\windows-host\package-host.ps1
+```
+
+输出 `artifacts/RemoteDesk-Host-<version>-<culture>-windows-x64.msi`。这是 per-machine 包，但安装过程不自动修改 RDP；用户从开始菜单显式配置时才提权、备份并启用。脚本支持 `-Culture zh-cn|en-us`，并接受与控制端相同的 `-SigningCertificateThumbprint` 和 `-TimestampUrl`，正式发布时先签署 PowerShell payload，再签署最终 MSI。当前脚本继续使用固定哈希的 WiX 4.0.6，不引入 WiX 6 预编译包的额外维护协议。
+
+Ubuntu/Fedora 构建机生成 Linux DEB/RPM：
+
+```sh
+sh ./packaging/linux/package-deb.sh
+sh ./packaging/linux/package-rpm.sh
+```
+
+Windows 开发机如已安装 Rust musl target、Android NDK LLVM 和 Git for Windows，可生成静态 x64 便携包与 musl DEB：
+
+```powershell
+.\packaging\linux\package-musl.ps1
+```
+
+Linux 包的 `/etc/remotedesk/agent.env` 包含默认监听地址和可选 Edge Presence 注释模板。Presence 配置必须四项同时存在；测试只能使用专用的非生产令牌，公网 URL 必须为 HTTPS。`remotedesk-agentd status --json` 可检查持久化的非敏感健康状态，SIGINT/SIGTERM 会触发限时 connection-bound 注销。
+
+Ubuntu 22.04 CI 会对 Linux 目标执行测试和 Clippy，再构建原生 DEB/RPM。Windows 上的 musl 交叉构建只验证静态 ELF 和包结构，不能替代 systemd、PAM、PTY 和发行版安装测试。
+
+独立 Edge 服务在 Ubuntu 构建原生 DEB：
+
+```sh
+sh ./packaging/edge/package-deb.sh
+```
+
+Windows 开发机生成静态 Edge TAR 和 musl DEB：
+
+```powershell
+.\packaging\edge\package-musl.ps1
+```
+
+输出为 `artifacts/RemoteDesk-Edge-<version>-linux-x64.tar.gz` 和 `artifacts/remotedesk-edge_<version>_amd64-musl.deb`。配置与部署边界见 `packaging/edge/README.md`：HTTP API 只能监听 loopback 并经 HTTPS reverse proxy 发布，TCP relay 应经 TLS/L4 入口发布，安装包不生成密钥且不会自动启动服务。CI 对 Edge crate 单独执行测试、Clippy 和 DEB 构建。
+
+本地联合验证可让 Agent 使用 Presence 专用令牌注册，再在 Windows 控制端“全局设置 > Edge 会话授权”填写 HTTPS Origin。Client 的 Session Intent 提交和状态查询由 Client Ed25519 key 认证，不要把 `REMOTEDESK_EDGE_API_TOKEN` 写入 Windows 设置。首次配对时录入 Agent 本地 `pairing-code` 命令输出的设备公钥和证书指纹；只要 Agent 已在线且本机配对窗口仍有效，未配对 Client 即可提交独立 `pairing` Intent，经角色票据和 opaque relay 完成证书固定 TLS/WSS、Agent 公钥核对、Client challenge 签名及一次性码验证，无需连接 Agent listener。成功后 Agent 公钥按证书指纹保存在 `RemoteDesk/Linux/agent/<certificate-sha256>` Windows Credential Manager 条目；缺少 Edge 或设备公钥时保留直连配对回退。后续已知设备同样直接向 Edge 建立，控制端可检查或显式删除身份映射。自动化联合测试连续覆盖远程首次配对、已知设备重连、双向 TLS/WebSocket 字节和两类票据重放；另一组联合 API 测试覆盖接受会话内签名 SDP/ICE mailbox 的双向 offer/answer、伪造、重放和顺序/代际冲突。这些测试仍不能替代端点 WebRTC、真实 TURN POP 或跨网络媒体验证。
+
+## 6. 实现边界
+
+首轮代码只实现可测试的策略和状态模型。以下能力仍必须由 M0 实验验证：
+
+- PipeWire DMA-BUF 到硬件编码器无 CPU 回读。
+- Xorg 捕获后端；Portal/PipeWire 优先，DRI3 只能按环境验证。
+- GStreamer D3D11 decoder、allocator、sink 和 Adapter LUID 一致。
+- IronRDP NLA、动态分辨率服务端兼容性、UDP multitransport 和图形 surface 的真实 Windows 主机验证。
+- TWCC/GCC、RTX/FEC 与硬件编码器码率动态更新。
+- RDP viewer Named Pipe/Job Object 尚需 Windows 实机完成 ACL、PID/创建时间、镜像 hash、challenge MAC、控制服务崩溃回收和 helper 失败诊断验收；Tauri 壳需完成依赖解析、Windows 编译、随机端口导航限制、控制服务异常退出和升级重启验收，native-video 管道仍未接入。
+- Windows Credential Manager 与 RDP NLA 凭据交付的真实远端登录验收。
+- RDP Display Control 与 Linux Portal/XRandR 多显示器平台适配、热插拔和混合 DPI 实测。
+- Linux WSS 配对、`SO_PEERCRED` IPC、PAM/PTY 和 systemd 在真实发行版的端到端实测。
diff --git a/docs/edge-relay.md b/docs/edge-relay.md
new file mode 100644
index 0000000..e394490
--- /dev/null
+++ b/docs/edge-relay.md
@@ -0,0 +1,364 @@
+# RemoteDesk CDN 与边缘中继设计
+
+## 1. 定义
+
+RemoteDesk 所说的“流量支持 CDN”分为两类：
+
+1. 实时远程流量：使用全球边缘 TURN/Relay POP，不使用缓存型 CDN。
+2. 静态分发：客户端、Agent、更新元数据和符号文件使用普通 CDN。
+
+远程桌面视频是每会话唯一的加密实时流，无法像图片或点播视频一样缓存。边缘网络的价值是让两端尽快进入 CDN POP，并尽可能通过供应商的私有/优质跨区域骨干网传输，同时提高 UDP 可达性并提供 TCP/TLS 回退。
+
+## 2. 路径模式
+
+```text
+1. Direct：两端直接连接。
+2. Single Edge：一端或两端通过同一个 TURN POP。
+3. Dual Edge：两端分别进入最近 POP，POP 间走优质骨干网。
+4. Restricted Edge：UDP 不可用时使用 TURN TCP/TLS 443。
+```
+
+默认“智能优选”并行测量 Direct、Single Edge 和 Dual Edge。Direct 不再无条件优先：当 CDN 骨干路径的 RTT、丢包、抖动综合更好时，即使直连可用也选择 CDN。用户还可以选择“直连优先”或“CDN 优先”。
+
+## 3. 总体拓扑
+
+### 3.1 Direct
+
+```text
+Windows Client <============ WebRTC ============> Linux Agent
+                         end-to-end DTLS-SRTP
+```
+
+### 3.2 Single Edge Relay
+
+```text
+                    Global Rendezvous API
+                    /                   \
+       outbound control                 session request
+                 /                         \
+        Linux Agent                   Windows Client
+             \                           /
+              \---- selected TURN POP --/
+                    DTLS-SRTP packets
+```
+
+TURN 只转发加密 packet，不终止媒体、不解码、不转码。客户端和 Agent 校验的 DTLS fingerprint 与 Session Ticket 绑定，因此 Relay 无法替换端点。
+
+### 3.3 Dual Edge Backbone
+
+```text
+Windows Client                         Linux Agent
+      |                                     |
+ nearest Client POP                  nearest Agent POP
+      |                                     |
+      +====== CDN private backbone =========+
+              end-to-end encrypted packets
+```
+
+每个端点从自己的本地 TURN POP 获得 relay candidate。两个 relay candidate 之间的包由同一 CDN/边缘供应商内部路由进入优质骨干网，形成：
+
+```text
+Client -> TURN A -> provider backbone -> TURN B -> Agent
+```
+
+双中继会增加带宽成本，但可以绕开质量较差的跨运营商公网段。必须验证供应商确实提供 POP 间私有骨干与会话亲和，不能仅因为服务名称包含“CDN”就假设线路更好。
+
+## 4. 组件
+
+### 4.1 Rendezvous Gateway
+
+Rust/Tokio 服务，负责：
+
+- 接收 Agent 主动建立的长期 TLS WebSocket/QUIC 控制连接。
+- 将 Device ID 映射到当前 region/gateway connection。
+- 转发已签名的 Session Request 和 WebRTC 信令。
+- 不读取视频、音频、终端、剪贴板和文件内容。
+- 使用短 TTL presence，Agent 离线后自动删除。
+
+第一版使用 TLS WebSocket。QUIC control channel 只在有明确收益且部署环境支持时增加。
+
+### 4.2 Relay Allocator
+
+负责：
+
+- 返回候选 POP 列表和探测 token。
+- 汇总客户端与 Agent 的 RTT、丢包和可达性测量。
+- 分别选择 Client POP、Agent POP 和备用 POP 组合。
+- 获取 POP 间骨干 RTT、丢包、容量和供应商线路等级。
+- 签发短期 TURN credentials。
+- 记录配额和 allocation correlation ID。
+
+Allocator 不签发 Linux Session Ticket；设备会话权限仍由 Agent 自己决定。
+
+### 4.3 TURN POP
+
+优先部署成熟的 coturn 或经过审计的托管 TURN，不从零实现 TURN/STUN。
+
+每个 POP 提供：
+
+- TURN UDP。
+- TURN TCP。
+- TURN TLS 443。
+- STUN binding。
+- 标准 metrics、连接限制和 bandwidth quota。
+- 与控制面共享的 TURN REST credential secret 或密钥接口。
+- POP 间 relay 地址可以通过供应商内部骨干路由。
+- Anycast/GeoDNS 接入具有 allocation/session affinity，不能把同一 allocation 漂移到其他 POP。
+
+TURN 进程与控制面分开扩容。
+
+### 4.4 Global Directory
+
+只保存短期在线路由：
+
+```text
+device_id -> region, gateway_id, connection_id, expires_at
+```
+
+不保存桌面密码、Agent 私钥、终端内容或长期会话密钥。在线状态适合使用 TTL KV/Redis 类存储；长期设备元数据单独存储并最小化。
+
+### 4.5 Static CDN
+
+用于：
+
+- Windows MSI。
+- Linux DEB/RPM repository。
+- 签名更新 manifest。
+- SBOM 与第三方许可证。
+- 可选的公开 debug symbols。
+
+所有发布物在上传 CDN 前签名，客户端验证签名而不是信任 CDN 响应。
+
+## 5. 无云账户配对
+
+初期可以不建立用户账号体系：
+
+- Agent 生成不可猜测的 Device ID 和长期设备公钥。
+- 本地配对把 Client 公钥写入 Agent allowlist。
+- 云控制面只根据 Device ID 路由加密请求。
+- Session Request 由已配对 Client key 签名。
+- Agent 独立验证签名、权限、nonce 和 authorization epoch。
+- 控制面不能自行给未配对客户端授权。
+
+为了防止 Device ID 被用于枚举在线状态，查询必须携带可验证的设备授权材料并限速。
+
+## 6. 建立边缘会话
+
+```text
+1. Agent -> Gateway: authenticated online presence
+2. Client -> Rendezvous: signed connect intent
+3. Gateway -> Agent: forwarded intent
+4. Agent -> Client: permission/capability response
+5. Both -> Allocator: endpoint-local POP probes
+6. Allocator: compare Direct/Single/Dual path and backbone metrics
+7. Allocator -> Both: endpoint POPs + backups + TURN credentials
+8. Agent -> Client: Session Ticket + WebRTC offer/answer
+9. ICE: direct and relay candidates are measured
+10. Selected pair: best policy-compliant path
+```
+
+控制面无法替 Agent 创建桌面或终端会话。Agent 本地权限、Portal 授权和 target UID 检查保持不变。
+
+## 7. POP 选择
+
+客户端和 Agent 分别并行探测有限数量的本地候选 POP，控制面同时读取 POP 间骨干指标：
+
+- UDP 可达性与 RTT。
+- TCP/TLS RTT。
+- 短窗口丢包和抖动。
+- POP 当前负载与可用带宽。
+- POP A 到 POP B 的内部 RTT、丢包、抖动和线路等级。
+
+选择目标不是只让客户端最近，而是降低两端综合路径：
+
+```text
+score = client_to_pop_rtt
+      + pop_to_pop_backbone_rtt
+      + agent_to_pop_rtt
+      + loss_penalty
+      + jitter_penalty
+      + load_penalty
+      + transport_penalty
+```
+
+Direct path 使用相同维度评分。具体权重通过真实会话数据调整。探测结果有短期有效期，且必须绑定 session/endpoint，防止伪造结果影响他人调度。
+
+路径切换设置迟滞：新路径必须持续明显优于现路径才触发 ICE restart，避免 Direct/CDN 来回震荡。
+
+## 8. TURN Credentials
+
+- 使用标准短期 credential 机制。
+- Username 绑定 expiry、session allocation ID 和可选 device hash。
+- Password 由 TURN REST secret/HMAC 生成，默认仅数分钟有效。
+- 凭据限定 realm、POP 和配额。
+- 凭据不等同于 RemoteDesk Session Ticket，不能创建桌面会话。
+- Relay 日志不得记录完整 credential。
+- POP secret 支持轮换，并允许短时间双密钥验证。
+
+## 9. Linux 媒体与 DataChannel
+
+通过 TURN 时仍保持：
+
+- H.264/Opus 使用 DTLS-SRTP。
+- Input/Control/Terminal/Clipboard/File 使用 DTLS/SCTP DataChannel。
+- Relay 只能看到 IP、端口、包大小、时间和总流量元数据。
+- 质量控制仍基于端到端 RTCP/TWCC，不使用 Relay 推测替代。
+
+严重丢包时优先级仍为输入、控制、音频、视频、剪贴板、文件。Relay 不应把所有流量放入一个无优先级的应用层 TCP tunnel。
+
+## 10. Windows RDP 边缘加速
+
+Windows RDP 不使用 WebRTC ICE/TURN，不能直接复用 Linux 媒体中继。要让 RDP 走 CDN 优质骨干，需要透明 L4 Edge Connector：
+
+```text
+IronRDP Client
+ -> Client Edge POP
+ -> CDN private backbone
+ -> Target Edge POP
+ -> outbound RemoteDesk Connector
+ -> Windows RDP service
+```
+
+- Connector 部署在目标 Windows 网络内并主动连接最近 POP。
+- Edge 只转发 RDP TCP/UDP 字节，不终止 TLS/NLA。
+- IronRDP 仍使用真实目标主机名完成证书和 CredSSP 校验。
+- TCP 和 RDP UDP 使用独立有界通道，不能把 UDP 全部塞入同一个 TCP 流。
+- RDP CDN 加速依赖 IronRDP 的自定义 transport 与 UDP multitransport。
+- mstsc 回退默认不能接入自定义 Edge Connector；需要标准 RD Gateway 或供应商 L4 服务才可加速。
+
+因此 Linux WebRTC Edge 可以先交付，Windows RDP Edge 必须作为独立 Spike 验证，不能宣称 TURN 已覆盖 RDP。
+
+## 11. 故障切换
+
+### 11.1 POP 失效
+
+- 会话建立时保留备用 POP 信息，但不长期占用完整 allocation。
+- Relay 心跳或 ICE consent 失败后进入 Degraded。
+- Allocator 签发新的短期凭据。
+- WebRTC 执行 ICE restart，优先尝试备用 POP。
+- Session ID、输入状态和终端/file sequence 保持。
+- 恢复媒体后请求 IDR。
+
+### 11.2 网络切换
+
+客户端网卡、Wi-Fi/有线或地址变化触发 candidate 更新/ICE restart。旧路径在新 candidate pair 确认前保持短暂宽限，避免主动切断可用会话。
+
+### 11.3 控制面失效
+
+已建立 WebRTC 会话不依赖持续在线的 Rendezvous 控制面。控制面短时故障不应中断现有 direct/TURN allocation；只影响新会话和 POP 迁移。
+
+## 12. 多区域控制面
+
+首期单区域验证，正式 CDN 模式至少包含：
+
+- Anycast/GeoDNS API 入口。
+- Region-local Gateway 和 Allocator。
+- POP 间私有骨干路由与质量数据接口。
+- 全局短 TTL device directory。
+- Agent 到最近 Gateway 的出站连接。
+- 区域故障时 Agent 自动连接备用 region。
+
+信令消息携带 request/session ID，并保证幂等。跨区消息至少一次投递时，Agent 必须依靠 request ID 去重。
+
+## 13. 容量与成本
+
+TURN 是带宽服务，不是缓存服务。容量指标：
+
+- POP ingress/egress Gbps。
+- concurrent allocations。
+- packets per second。
+- 平均/95/99 会话码率。
+- UDP/TCP/TLS 分布。
+- egress cost per session-hour。
+- allocation failure 和 saturation。
+
+控制策略：
+
+- 智能优选默认选择质量/成本策略允许的最优路径。
+- Dual Edge 按两端 TURN 流量和骨干流量核算，成本高于 Single Edge。
+- 每设备/会话码率和总流量配额。
+- POP 达到阈值后停止新 allocation，迁移到备用 POP。
+- 文件传输可设置比媒体更低的 Relay 配额。
+- 不在 Edge 做转码，避免 GPU 成本和端到端解密。
+
+## 14. 安全
+
+- Rendezvous 与 Agent/Client 双向设备认证。
+- 所有 Session Request 由 Client key 签名，Agent 最终授权。
+- TURN credential 短期、限 POP、限 session、限速。
+- DTLS fingerprint 与 Session Ticket 绑定。
+- 防止匿名 STUN/TURN amplification，启用 nonce、认证和限速。
+- Gateway、Allocator、TURN 使用不同 service identity 和密钥。
+- Relay metadata 有最短保留期限和访问审计。
+- 管理 API 不暴露在媒体监听地址。
+- DDoS 防护和费用异常报警属于上线门槛。
+
+## 15. 可观测性
+
+Client/Agent：
+
+- candidate type：host/srflx/relay。
+- path mode、Client POP、Agent POP、transport。
+- Direct 与 CDN 路径的并行质量分数。
+- ICE state/restart count。
+- RTT/loss/jitter/bitrate。
+- POP 切换原因。
+
+Control plane：
+
+- online Agent connection count。
+- rendezvous success/latency。
+- POP allocation success/capacity。
+- credential failures/rate limits。
+
+日志使用不可逆短 ID 关联，不记录会话内容、完整 Device ID、SDP、credential 或 IP 超出必要保留期。
+
+## 16. 测试
+
+- Direct 成功时不产生 Relay 流量。
+- Direct 失败后 TURN UDP 建立。
+- Direct 可用但质量差时选择 Dual Edge 优质骨干。
+- Client/Agent 分别接入最近 POP，确认 POP 间流量走指定骨干。
+- 禁 UDP 后 TURN TCP/TLS 回退。
+- 主 POP 故障后 ICE restart 到备用 POP。
+- 控制面停止后已建立会话继续工作。
+- 过期/跨 POP/跨 session credential 被拒绝。
+- 恶意 Device ID 枚举和配对请求限速。
+- 5%～15% Relay 路径丢包的动态质量调整。
+- POP 满载拒绝新 allocation，不破坏现有会话。
+- 端到端验证 Relay 无法解密媒体和 DataChannel。
+- Windows RDP Edge Connector 分别验证 TCP 与 RDP UDP，不把 UDP 隧道化到 TCP。
+
+## 17. 实施阶段
+
+当前仓库已交付独立 `remotedesk-edge-service`：短 TTL Presence、管理员/Agent 分权认证、Direct/Single/Dual 评分、coturn REST 凭据、签名 Session Intent 队列和限额透明 TCP byte relay。Intent 使用共享的域隔离、字段标签、长度前缀稳定签名输入，最长 120 秒、request ID 幂等、全局/设备/Client 容量有界并带 15 秒投递租约；Windows Client 以 Ed25519 key 直接认证公开提交和状态查询，不持有 Edge 管理员令牌。Agent poll/ack 除 Presence Token 外还必须提供设备私钥签名、短时钟窗口和一次性 nonce，且 connection ID 必须仍是当前 Presence。普通会话由 Linux Agent 最终验证已配对 Client、permission 和 allowed user；`pairing` 会话只在 Agent 本机存在未过期、未耗尽且允许目标用户/terminal 的配对窗口时接受。Edge 随后分别交付 Client/Agent 角色绑定一次性票据，Agent 主动连接 relay 并代理本地 TLS listener；Windows helper 在 opaque relay 内重新完成证书固定 TLS/WSS、Agent 公钥核对、Client challenge 和一次性配对码验证，配对码不进入 Edge API。成功后 Windows Credential Manager 以证书指纹绑定 Agent 公钥，后续会话同样无需 Client 连接 Agent listener。控制端提供映射状态和显式删除。
+
+已接受且未过期的会话另外开放 `POST /v1/negotiation/send` 和 `POST /v1/negotiation/poll`。每次请求由发起端设备 key 签名，稳定输入覆盖 request/session、Client/Agent 角色、send/poll、sequence、generation、offer/answer/candidate/end/restart、payload、一次性 nonce 和最长 30 秒生命周期。Edge 从已接受 Intent 和 Agent ack 取得两端公钥，不使用共享 Presence token 认证协商流量。mailbox 只向调用者返回 peer 消息，并限制会话、消息、candidate、单次响应和总内存；只有 `restart` 能将共享 generation 精确增加一。联合测试通过真实 Intent、Agent poll/ack 建立绑定后连续验证双向 offer/answer，以及端点伪造、nonce 重放、错误会话、乱序和错误 generation 拒绝。`GET /health` 以 `sdp_ice_signaling=true` 和 `active_negotiation_sessions` 报告这个服务端边界。
+
+Agent/Client 已在接受的 `desktop` 会话上使用 `webrtc-rs` 0.20.1 创建真实 PeerConnection：Client 固定作为初始 offerer，Agent 作为 answerer；双方经设备签名 mailbox 逐候选交换 SDP/ICE，注册 H.264/RTX/Opus、NACK/PLI/transport-cc 与控制 DataChannel。Edge 只在 Agent 本地授权成功后，分别向 Agent ACK 和 Client 签名状态响应下发绑定同一 session/expiry 的 coturn REST 短期凭据，不向端点暴露管理员令牌。Linux 用户会话已将 X11 BGRA 捕获送入 GStreamer H.264 编码器，并经有界完整性校验 IPC 接到绑定 session 过期时间、用户和 Client 指纹的 WebRTC sender。Windows 控制 helper 源码已把远端 RTP 以 RFC 6184 重组为有界 Annex-B AU，丢包或本地积压后请求 PLI 并等待关键帧，再输入绑定同一 D3D11 device manager 的 Media Foundation H.264 MFT；输出必须是同 device NV12 `IMFDXGIBuffer`，由 VideoProcessor 呈现到桌面窗口，失败时恢复 zlib 软件路径。该源码按当前要求尚未解析依赖、编译或跨网执行；Opus、真实 coturn POP 和 Windows RDP transport 仍未接入，因此仍不等于完整媒体 transport。
+
+协议 minor 9 不再把 zlib 作为与原生媒体长期并行的画面。Client 呈现第一帧后请求 H.264-only，Agent 在当前 zlib ACK 的完整帧边界确认切换；随后每个 H.264 sequence 的 D3D11 呈现 ACK 驱动下一次捕获。RTP 序号中断会立即通知控制状态机回到 zlib，sender/encoder、解码、积压、轨道结束和 ACK 超时具有相同回退语义。Client 继续读取媒体轨道，收到后续关键帧并成功呈现后可再次执行帧边界切换。
+
+### Edge M0
+
+- 单个 coturn POP。
+- Rust Rendezvous/Allocator 原型。
+- Agent 主动 Presence、签名 Session Intent 投递、本地授权、签名回执、session-bound TURN 凭据、Edge 双向 SDP/ICE mailbox、端点 PeerConnection、Linux H.264/Opus 媒体源发送和 Windows H.264 原生接收/呈现及 Opus/WASAPI 播放源码接线已完成；仍缺平台运行验证。
+- 短期 TURN credentials。
+- Direct -> TURN UDP -> TURN TLS 切换。
+
+### Edge M1
+
+- 两端独立 POP 探测和 Dual Edge 骨干选择。
+- Direct/Single/Dual 路径评分与迟滞。
+- ICE restart 与 POP 故障切换。
+- 配额、metrics 和安全限速。
+
+### Edge M2
+
+- 多区域 Gateway/Directory。
+- Windows RDP L4 Edge Connector。
+- 容量调度、密钥轮换和 DDoS/成本保护。
+- 静态发布 CDN 与签名更新。
+
+只有 Edge M0 的端到端加密、短期凭据和流量限制通过后，才允许外部网络试用。
diff --git a/docs/gpu-acceleration.md b/docs/gpu-acceleration.md
new file mode 100644
index 0000000..177d2b7
--- /dev/null
+++ b/docs/gpu-acceleration.md
@@ -0,0 +1,258 @@
+# RemoteDesk Windows 客户端 GPU 加速设计
+
+## 1. 目标
+
+Windows 客户端的 UI、远程视频、RDP 图形和终端均支持 GPU 加速。核心目标：
+
+- Linux H.264 由原生 helper 在 D3D11 surface 中硬解和呈现。
+- 避免持续 GPU→CPU→GPU 往返。
+- RDP 只上传变化区域，不重复复制完整 framebuffer。
+- 终端和 UI 使用 GPU 渲染。
+- 支持 Intel、AMD、NVIDIA 以及多 GPU 主机。
+- 驱动重置或硬解不可用时严格模式明确失败，显式 compatibility 才允许回退。
+
+这里的“零拷贝”特指未压缩视频像素从捕获到编码、或从解码到呈现不经过 CPU map/copy。压缩码流和 RTP 包仍可经过普通内存。跨 Adapter GPU copy 不算零拷贝。
+
+## 2. 渲染架构
+
+```text
+Tauri Client
+├── WebView2 UI -> Chromium GPU compositor
+├── xterm.js -> WebView2 GPU text compositor
+├── RDP helper -> IronRDP/D3D11 native window
+└── Native video helper -> GStreamer/D3D11 native window
+```
+
+JavaScript 不读取远程视频像素；原生 helper 的视频帧不经过 Tauri IPC。
+
+## 3. 零拷贝状态模型
+
+每个 Linux 桌面会话报告实际路径：
+
+```text
+zero_copy          同一 GPU surface 直接经过硬件编解码/呈现
+gpu_copy           原始像素仅在 GPU 间或 GPU surface 间复制
+cpu_upload         CPU 捕获/解码后上传 GPU
+software           CPU 色彩转换或软件编解码
+```
+
+Agent 和 native helper 只有在 tracer/ETW/驱动指标证明原始帧未被 CPU map 时才能报告 `zero_copy`。默认 `required_end_to_end` 要求两端均为 `zero_copy`；任一端为其他状态都结束媒体协商。`compatibility` 必须由用户显式开启。切换 GPU、分辨率或显示器后必须重新验证，不能沿用之前状态。
+
+## 4. GPU 枚举与选择
+
+客户端通过 DXGI 枚举：
+
+- Adapter LUID、名称、Vendor/Device ID。
+- Dedicated/Shared video memory。
+- D3D feature level。
+- Hardware/Software/Remote adapter 类型。
+- 每个显示器所属 output 与 adapter。
+
+选择模式：
+
+1. 默认（推荐）：Linux native helper 和 RDP helper 都选择窗口当前显示器 Adapter。
+2. 手动：从 Rust 枚举的物理 GPU 列表选择固定 Adapter；Linux 始终使用 native-video helper。
+3. 手动 GPU 不存在时可回到窗口 Adapter 重新验证，但驱动失效、不支持 codec 或发生跨 GPU copy 时，Linux 严格会话失败且不改写配置。
+4. WARP 仅用于 RDP 或显式 compatibility，不能满足 Linux 双端零拷贝。
+
+GPU 选择持久化使用 LUID/PCI identity 的稳定组合，不只保存容易变化的枚举序号。
+
+配置优先级：主机级手动选择 > 全局手动选择 > 默认模式。运行时诊断同时展示“用户选择”和“实际生效”Adapter。
+
+## 5. Linux 视频硬解码
+
+### 5.1 默认原生零拷贝路径
+
+```text
+RTP H.264
+ -> GStreamer depay/parse
+ -> D3D11 hardware decoder
+ -> GstD3D11Memory
+ -> d3d11videosink
+ -> native HWND
+```
+
+decoder、sink、swap chain 和窗口 output 必须位于同一 DXGI Adapter。通过 GStreamer tracer、ETW/GPUView 和 CPU map 计数共同验证；仅成功创建硬件 decoder 不足以报告 `zero_copy`。
+
+### 5.2 Compatibility 软件回退路径
+
+```text
+RTP H.264
+ -> software decoder
+ -> CPU frame
+ -> D3D11 upload
+ -> child HWND
+```
+
+该路径同样只属于显式 compatibility。触发条件包括：
+
+- 硬件不支持 codec/profile/level。
+- 驱动创建 decoder 失败。
+- GPU session 数量达到限制。
+- device removed/reset 后重建失败。
+
+UI 明确显示“软件解码”，并降低最大分辨率/帧率，防止 CPU 过载被误诊为网络问题。严格模式不进入该路径。
+
+## 6. 编码能力协商
+
+Native helper 报告经过验证的精确解码能力和实际会话 stats：
+
+```text
+codec
+profile/level
+max_width/max_height
+max_fps
+bit_depth
+hardware/software
+adapter_id
+```
+
+能力检测必须尝试创建 decoder 或执行短样本解码。仅查询 API 支持列表不足以证明驱动可用。
+
+Windows `native-video --probe-h264-file` 已提供真实 H.264 容器首帧解码源码入口，并强制输出同 device NV12 DXGI texture；`--play-h264-file` 进一步按媒体时间戳读取动态可见尺寸，以 D3D11 VideoProcessor 将 texture subresource 转换和缩放到同 device swap chain，全链路不调用 CPU frame map。它们用于排除纯 capability 查询和明显 CPU buffer 路径。最终硬解/零拷贝结论仍必须结合 ETW/GPUView，不能只依据 `IMFDXGIBuffer` 或 VideoProcessor。
+
+首版 H.264 8-bit。HEVC/AV1 在 Intel、AMD、NVIDIA 的实际硬解矩阵通过后增加。HDR、10-bit 和色彩管理单独设计，不与基础 GPU 加速捆绑。
+
+## 7. RDP GPU 路径
+
+IronRDP 图形输出分两类：
+
+1. 已解码 bitmap/dirty rect：上传变化区域到 D3D11 texture。
+2. 可获得的现代 RDP 视频 surface：评估直接硬解和 GPU surface 路径。
+
+当前源码已在一次 redraw 前把所有待呈现区域合并为一个有界矩形，并满足：
+
+- 重叠或邻近区域合并。
+- 已被新 update 覆盖的旧区域丢弃。
+- 上传 buffer 复用，不为每个 rect 分配资源。
+- IronRDP 只转换 dirty region 的像素块，不为每次更新重建完整 CPU framebuffer。
+- 纹理尺寸只在远端 framebuffer 尺寸变化时重建。
+- 输入和控制不等待 GPU fence。
+
+该实现优先保证更新不丢失；相距很远的区域也会合并为包围矩形，后续可在实机 profile 证明收益后改为有限多矩形上传。会话诊断返回最近一次上传模式和实际上传像素数，便于判断合并范围是否过大。
+
+RDP AVC/AVC444 硬解是否可由 IronRDP 暴露，属于 M0 验证项。若只能获得 CPU framebuffer，D3D11 upload 仍保持呈现端加速，但不能宣称完整硬件解码。
+
+RDP 不受 Linux `zero_copy_policy` 强制约束。CPU framebuffer 路径固定报告 `cpu_upload`；未来只有解码 surface 能直接导入同一 D3D11 Adapter 并通过 ETW 验证时，才报告 `zero_copy`。
+
+## 8. UI 与终端
+
+- Tauri UI 使用 WebView2 GPU compositor。
+- xterm.js 使用浏览器文本/Canvas renderer，但不承担视频帧。
+- RDP helper 的轻量 egui 工具栏使用 wgpu。
+- WebView2 GPU process crash 由主程序检测并重建对应窗口。
+- UI 动画不能抢占远程视频线程或频繁触发全窗口重绘。
+
+## 9. 多 GPU
+
+常见场景：核显连接显示器，独显负责高性能任务。策略：
+
+- Native 默认让 decoder/sink 跟随窗口显示器 Adapter；手动模式使用指定 Adapter。
+- 用户选择独显解码但显示器属于核显时，严格模式拒绝跨 GPU 复制并提示移动窗口或改选 Adapter；compatibility 才显示并允许 `gpu_copy`。
+- 跨显示器移动完成并稳定一段时间后，再评估重建 pipeline。
+- 不在拖动过程中连续重建 decoder。
+- 重建时保持最后一帧，完成后请求 IDR。
+- 多会话按 Adapter 统计硬解 session 和显存预算。
+
+## 10. 显存与资源预算
+
+每个会话记录：
+
+- decode surfaces 数量与格式。
+- framebuffer/texture 尺寸。
+- swap chain buffers。
+- staging/upload buffers。
+- terminal glyph atlas。
+
+策略：
+
+- 队列有界，过期视频帧优先丢弃。
+- 后台会话降低呈现帧率。
+- 显存压力上升时先降低非活动会话质量。
+- 达到硬解 session 上限时，严格会话提示用户关闭其他会话；只有 compatibility 可以软件回退。
+- 4K/多显示器连接前估算资源，不等 OOM 后处理。
+
+## 11. Device Lost
+
+Native helper 处理 `DXGI_ERROR_DEVICE_REMOVED/RESET/HUNG`：
+
+```text
+Running
+ -> GpuLost
+ -> stop presenting/input capture
+ -> collect removal reason
+ -> release swap chain/decoder resources
+ -> recreate adapter/device/pipeline
+ -> request keyframe/full RDP refresh
+ -> Running | SoftwareFallback | Failed
+```
+
+GPU 重建不销毁远端会话。连续失败超过阈值后，严格模式结束本地呈现；compatibility 才允许回退软件，并保留可导出的错误信息。
+
+## 12. 色彩和缩放
+
+- 首版统一 SDR sRGB 输出。
+- 保留视频原始颜色信息用于诊断。
+- 缩放在 GPU 完成，支持 fit、1:1 和 stretch（默认不使用 stretch）。
+- 黑边和 viewport 必须参与鼠标坐标逆变换。
+- HiDPI 变化同时更新 WebView CSS/device pixel ratio、native helper 像素尺寸和远端显示请求。
+- HDR/ICC/10-bit 属于后续专项，不能未经验证直接透传。
+
+## 13. 用户设置
+
+GPU 选项：
+
+- 默认（推荐）：Linux native helper 与 RDP 使用窗口显示器 Adapter。
+- 手动：下拉选择 Intel/AMD/NVIDIA Adapter，Linux 仍使用原生渲染器并验证 output 是否同 Adapter。
+- Compatibility：用户明确允许原生 helper 使用软件解码，不满足双端零拷贝。
+
+全局设置定义默认策略，每个 HostProfile 可以选择“继承全局”或覆盖 GPU。切换 Linux GPU 只重建当前 native 会话的 decoder/sink，不重启主程序。
+
+诊断页展示实际生效值：
+
+- GPU、LUID、驱动版本。
+- 配置模式、用户选择与实际生效 Adapter。
+- 解码器和 profile。
+- D3D11/CPU memory path。
+- Native renderer mode 和 hardware decode 状态。
+- decode/render/upload time。
+- dropped/late frames。
+- device reset count。
+
+## 14. 性能目标
+
+| 场景 | 工程目标 |
+|---|---|
+| 1080p60 Linux Native | Agent/client 双端已验证零拷贝，原始帧无 CPU/cross-GPU copy |
+| 4K60 Linux Native | 同 Adapter D3D11 surface 零拷贝；跨 GPU 时拒绝严格会话 |
+| 1080p RDP | dirty rect 上传，静态桌面低 GPU/CPU 占用 |
+| 多会话 | 后台限帧，前台输入与呈现不受阻塞 |
+| 终端高频输出 | GPU 字形复用，滚动缓存有界 |
+
+目标数值需要在 M0 使用真实硬件基线锁定，不仅依靠虚拟 GPU 或软件适配器。
+
+## 15. 测试矩阵
+
+- Intel 核显、AMD 显卡、NVIDIA 显卡。
+- 单 GPU、混合 GPU、RDP/虚拟环境下 WARP。
+- H.264 不同 profile/level 和异常码流。
+- 720p/1080p/1440p/4K，30/60 fps。
+- 单/双显示器，100%～200% DPI。
+- 跨 GPU 显示器移动。
+- 驱动重置、睡眠恢复和显示器热插拔。
+- 多会话显存/硬解 session 压力。
+- Compatibility 软件回退与恢复硬件路径，以及严格模式拒绝路径。
+- 手动 GPU 触发 native helper，并验证实际 Adapter LUID。
+- 零拷贝 `required_end_to_end/compatibility`、DMA-BUF/D3D11 surface、跨 GPU 和 CPU/software 拒绝。
+
+测试使用 GPUView/ETW、GStreamer tracer 和应用 metrics 交叉验证，不能只看任务管理器的“Video Decode”百分比。
+
+## 16. 发布门槛
+
+- 至少 Intel/AMD/NVIDIA 各一种环境通过 1080p60。
+- Native 路径证明客户端没有 GPU→CPU→GPU 或跨 Adapter copy。
+- Wayland DMA-BUF 与 Xorg DRI3 到硬件编码器通过 CPU map/copy 验证，严格模式不会静默回退。
+- Device Lost 可恢复或明确回退，不导致应用整体崩溃。
+- 多 GPU 选择可诊断，错误 Adapter 不会静默黑屏。
+- Compatibility 软件回退时自动降低质量上限；严格模式从不自动进入该路径。
+- GPU/驱动信息在诊断包中脱敏且不包含画面数据。
diff --git a/docs/implementation-status.md b/docs/implementation-status.md
new file mode 100644
index 0000000..95fc42c
--- /dev/null
+++ b/docs/implementation-status.md
@@ -0,0 +1,178 @@
+# RemoteDesk 实现状态
+
+本文记录仓库代码实际可运行的能力。设计文档描述目标架构，不代表对应功能已经完成。
+
+状态定义：
+
+- **可用**：存在运行时实现，并有自动化测试或可重复的构建验证。
+- **部分**：只有策略模型、界面或实验入口，尚不能完成端到端会话。
+- **未实现**：目前只有设计或路线规划。
+
+## 当前可用
+
+| 能力 | 状态 | 当前边界 |
+|---|---|---|
+| Windows 控制端主机配置 | 可用 | 非敏感字段保存在应用 WebView 的 `localStorage`，账户字段不持久化 |
+| Windows Tauri 桌面壳 | 部分 | 新增 Tauri 2 原生入口源码；优先使用固定 loopback 端口 `127.0.0.1:4173`，使 WebView `localStorage` origin 在重启和 MSI 升级后保持不变（端口被占用时才回退临时端口），并生成 256 位一次性启动令牌，以 stdin 生命周期绑定方式启动控制服务；HTTP ready 请求不发送令牌，控制服务返回令牌 SHA-256 proof，壳本地精确验证后才创建 WebView，从而拒绝端口释放/bind 间隙内的错误本机进程；WebView 只允许导航到本次 `127.0.0.1:<port>` origin，控制服务异常退出会关闭应用，窗口退出会先请求控制服务退出并在 2 秒后强制回收；MSI 快捷方式、payload 清单和升级后重启目标均已改为 `bin/remotedesk.exe`，不再由正式 MSI 打开系统浏览器；运行时能力通过 `application.desktop_shell/shell_kind` 区分 Tauri 与独立控制服务；本轮按要求尚未解析新 Tauri 依赖、编译或运行窗口，因此不标记为可用 |
+| Windows 被控端安装包 | 可用 | 独立 per-machine MSI；安装本身不启用 RDP，开始菜单配置入口要求显式确认和管理员提权；首次变更前备份 RDP/NLA/TermService/防火墙状态，恢复或卸载时回滚；不创建账户、不保存密码 |
+| RDP 地址解析和 TCP 探测 | 可用 | 验证目标端口可达，不验证账号 |
+| IronRDP 协议与证书探测 | 可用 | 独立 helper 解析 X.224/RDP Negotiation Confirm，确认 HYBRID/HYBRID_EX 后完成无凭据 TLS 握手并返回服务器证书 SHA-256；不进入 CredSSP/NLA 或账号验证 |
+| Windows `mstsc` 启动 | 可用 | 生成不含密码的临时 `.rdp` 文件并启动系统客户端 |
+| RDP 检测旁路 | 可用 | TCP/协议检测仅用于诊断；待检测、检测中或检测失败均不阻止直接启动客户端 |
+| 控制端时钟与质量面板 | 部分 | 顶栏显示每秒更新的本地时间；Windows 启动前网络延迟使用 TCP/RDP 探针实测值，原生会话接入 vendored IronRDP 已解析的 `NetworkCharacteristicsResult`，服务器提供时回传会话平均 RTT、基础 RTT 和估算带宽；Linux X11 源码通过当前直连 WSS 或 Edge relay 内的 Ping/Pong 测量会话 RTT；IronRDP 原生会话另回传状态、累计帧数、最近一秒实际帧率、尺寸、本地解码处理耗时和本地呈现耗时。解码计时从网络 PDU 进入 `active_stage.process` 开始，覆盖图形处理与 framebuffer 像素转换，本地输入或 resize 产生的更新不计入；Linux X11 桌面源码另回传真实采集、zlib 编码、解码/完整性校验、呈现耗时和帧率，并显示当前 zlib level 1..6 与压缩后/未压缩字节比例。RDP 服务端编码耗时仍无数据；新增指标链路按要求尚未编译 |
+| 客户端内 RDP | 部分 | 独立 IronRDP 原生窗口可发起单屏会话、跟随窗口动态调整远程桌面、启动/切换全屏和主动退出；原生多屏源码通过 Win32 枚举 2..16 个真实本地显示器，规范化主屏相对坐标，在服务端 RDPEDISP capabilities 到达后发送多 monitor layout PDU，并以无边框组合窗口覆盖本地虚拟桌面；退出组合全屏后可缩放查看，重连复用同一布局，单屏 resize 不会覆盖多屏配置，诊断回传实际 monitor count；TLS 探针返回证书 SHA-256，用户确认后原生启动强制携带指纹，实际 TLS 握手固定完整证书 DER 并验证握手签名；窗口聚焦时转发物理键盘扫描码、五键鼠标、缩放后的绝对坐标及水平/垂直滚轮，失焦或退出时释放远端输入状态；`Ctrl+Alt+Home` 发送远端 `Ctrl+Alt+End` 安全界面序列；viewer 通过 opaque 引用直接读取 Windows Credential Manager 凭据；控制服务源码已改用当前用户 SID ACL、拒绝远程客户端且单实例的 Windows Named Pipe，按 OS 返回的 pipe 客户端 PID、进程创建时间、镜像路径与 SHA-256 build hash 校验 helper，并通过一次性 32 字节密钥和 HMAC-SHA256 challenge 后才交付严格有界的连接配置，命令行只保留随机 pipe name；viewer 严格校验 schema 和全部配置字段后返回绑定载荷 SHA-256 与 challenge 的 HMAC ACK，服务端只有验证 ACK 版本、摘要和 MAC 后才确认配置已接受；连接、认证、配置与 ACK 共用 10 秒绝对 deadline，双端非阻塞有界读取避免已连接 helper 永久停滞握手线程；每个 viewer 启动后立即加入带 `KILL_ON_JOB_CLOSE` 的独立 Job Object，控制服务退出时由内核回收 helper，握手失败则终止整个 Job 并向现有诊断 API 写入 `secure_pipe_failed`；当前构建显式启用 Windows CLIPRDR 双向剪贴板并默认启用 RDPSND 本地音频；异常断线后释放输入并按 1/2/4 秒执行三次有界重连；Windows 优先创建硬件 D3D11 device、持久 CPU framebuffer、完整 GPU frame texture 与 DXGI swap chain；vendored IronRDP 只转换裁剪后的 `GraphicsUpdate` region 紧凑像素块，viewer 严格验证并合并到持久 framebuffer，再合并 redraw 前的多个待呈现区域，只对变化像素执行 CPU texture upload；discard swap chain 下每帧仍执行完整 GPU resource copy，失败时回退 software framebuffer；诊断回传本帧转换像素数、`full_frame`、`dirty_rect` 或 `cached_frame` 及实际 CPU 上传像素数；新增多屏/Named Pipe/Job/配置 ACK/全握手超时/dirty-region 转换与上传链路按要求尚未编译/实机验收，且尚非硬件解码或零拷贝，剪贴板和音频仍待真实远端专项验收 |
+| 分辨率和全部显示器 | 可用 | UI 提供常用档位及 200..8192 自定义宽高；`mstsc` 支持动态/固定分辨率和 `use multimon`；IronRDP 单屏窗口发送带 generation 的动态 resize、以实际远端图像确认，并在不支持/超时时经用户确认重连；原生“全部本地显示器”源码发送真实 RDPEDISP 多屏布局；自定义本地显示器子集尚未开放 |
+| Windows 凭据适配器 | 可用 | 每个主机保存 `RemoteDesk/RDP/<profile-id>` opaque 引用；独立本地遮罩窗口写入/覆盖 Windows Credential Manager，UI 可查询状态和删除；密码不进入 React、HTTP、控制服务、argv、日志或主机配置；已在 Windows 实测缺失条目查询，真实远端 NLA 登录仍待环境验收 |
+| Windows M0 便携预览包 | 部分 | ZIP 包，不是 MSI；打包源码已改为包含 Tauri 壳并以 `bin/remotedesk.exe` 作为唯一 UI 入口，不再附带或启动系统浏览器；按要求尚未重新构建包 |
+| Windows M0 安装包 | 可用 | 按当前用户安装的 MSI，包含开始菜单快捷方式、升级标识和系统卸载入口；尚未签名 |
+| Windows 控制端在线升级 | 可用 | 支持启动时或手动检查 Ed25519 签名的 HTTPS 清单，下载后校验大小和 SHA-256，并由独立 helper 在控制服务退出后执行 MSI 原位升级；源码新增受 `windows-production` environment 保护的版本标签工作流，强制 Authenticode 签名/验签控制端与 Host payload/MSI、公钥匹配、SPDX SBOM、GitHub build provenance、版本 Release 先发布再更新固定 `stable-channel` 清单；不内置私钥或默认信任公钥，工作流按要求尚未实际执行，当前已有 MSI 仍未签名 |
+| 协议与策略核心 | 部分 | 会话状态、显示布局、required features、零拷贝报告和 GPU 规划已有纯 Rust 模型及测试 |
+| Native Video Helper | 部分 | 保留严格/兼容 GPU 管线规划和 Windows 硬件 D3D11 device/immediate-context 创建探针；H.264/DXVA allocation probe 源码会枚举适配器真实 H.264 VLD profiles、验证 NV12、选择未加密 raw-bitstream config，并实际创建 decoder、NV12 texture array 和 output view；`--probe-h264-file` 使用绑定同一 device manager 的 Media Foundation Source Reader，在最多 512 次读取内严格验证真实 H.264 文件的 NV12 `IMFDXGIBuffer`、完整 subresource layout 和所属 device。`--play-h264-file` 本地窗口链路有界枚举并选中 H.264 原生类型、跟踪动态 NV12 媒体类型和可见帧尺寸、拒绝 CPU buffer/跨 device texture，以媒体时间戳调度帧；同一 device 的 `ID3D11VideoProcessor` 将 NV12 texture subresource 转换和等比缩放到 BGRA swap chain。Windows Linux 桌面 helper 进一步接入 RFC 6184 单 NAL/STAP-A/FU-A 重组、16 MiB AU 上限、跨帧 RTP 序号检测、PLI/关键帧恢复和一槽有界邮箱；Annex-B 输入送入 D3D11-aware Media Foundation H.264 MFT，只接受同 device NV12 `IMFDXGIBuffer`，再由 VideoProcessor 呈现到现有桌面窗口。协议 minor 9 在第一张原生帧呈现后执行帧边界模式确认，确认后停止完整 zlib 编码/传输，以 sequence 绑定的 H.264 呈现 ACK 驱动下一次捕获；解码、积压、轨道、sender/encoder 或 ACK 超时均显式恢复 zlib。H.264 采集、编码、解码和呈现耗时分别进入质量诊断。该链路按要求尚未编译/实机执行，且 DXGI surface/VideoProcessor 呈现不能替代 ETW/GPUView 的硬解和隐藏复制证明，所以继续报告 `hardware_decode_verified=false`、`zero_copy_verified=false` 和 `linux.native_video=false`；IronRDP viewer 继续使用独立 D3D11 CPU framebuffer 路径 |
+| Linux Agent 基础 | 部分 | 四个可运行进程已实现设备身份、限时一次性配对码、配对/重连 Ed25519 挑战签名、证书指纹固定、TLS WebSocket、`SO_PEERCRED` Unix IPC、systemd 服务和健康 CLI；控制 helper 源码新增无需用户认证的固定证书 TLS/WSS `Hello` 探测，控制 API 与 UI 可显示实际握手耗时、协议版本、终端/桌面/文件能力和 Edge 在线状态，不读取 Client 私钥或配对码；可选 Edge 客户端使用独立作用域令牌主动注册 60 秒短 TTL 路由、每 30 秒续期并在优雅退出时 connection-bound 注销，在心跳间隔内用设备私钥和一次性 nonce 主动 poll/ack 签名 Session Intent，只有 Client Ed25519 签名、本地配对公钥、permission 与 allowed user 全部通过才接受；在线/信令计数进入 CLI 和 WSS Hello/Status；已生成静态 x64 便携包与 DEB，RPM/原生 DEB 由 Ubuntu CI 构建；新增探测按要求尚未编译，整体仍未在 Linux 主机运行验证 |
+| Linux 终端会话 | 部分 | Agent 端具备权限绑定、普通用户限制、`runuser --login` PAM 会话、PTY 字节流/resize/interrupt 和生命周期回收；Windows 控制端 helper 使用固定 TLS 证书 WSS、Credential Manager 中的 Ed25519 身份、一次性本地遮罩配对、challenge 签名认证、原始按键/ANSI 输出和 resize，并可由 UI 启动独立终端窗口；配置 Edge 并录入 Agent 设备公钥后，首次配对和后续会话均无需 Client 直达 Agent，分别提交签名 `pairing`/`terminal` Intent，并在角色绑定 opaque relay 内完成证书固定 TLS/WSS、Agent 公钥核对、Client challenge 和一次性码认证；公钥随后按证书指纹保存，UI 与控制 API 可查询或显式删除，Windows 自动化测试覆盖真实 Credential Manager 往返；联合测试连续覆盖远程首次配对、已知设备重连、双向字节和票据重放，尚缺真实 Linux/PAM 端到端验收 |
+| Linux 文件传输 | 可用 | 与终端共用证书固定、Ed25519 配对身份、Edge opaque relay 和独立 `files` 权限；上传/下载限制为授权普通用户主目录内相对路径和 2 GiB，使用 45 KiB 分块、声明大小及 SHA-256 端到端校验；协议 minor 4 支持双向断点续传：上传 transfer ID 绑定 user/remote path/size/hash，降权 helper 从同 ID 的普通文件实测 offset、保留未完成 partial 并在整文件校验后原子替换；下载由本地隐藏 partial 长度请求 offset，Agent 按远端真实大小校验，只发送剩余字节，Client 重新哈希已有前缀和新增数据后才改名，最终哈希不符会删除 partial；Ubuntu CI 脚本实际中断 4/10 字节后续传并验证上传/下载剩余段；UI 可启动独立传输窗口，仍待真实 Linux 主机专项验收 |
+| Linux X11 桌面 | 部分 | 协议 minor 10 源码包含 `desktop` 权限、严格 zlib BGRA 分块/哈希/呈现 ACK、RTT、X11 `GetImage`/XTEST、绝对及有界相对鼠标、五键/滚轮/键盘、失焦释放、全屏/退出、跟随窗口 resize、三次有界重连和完整质量诊断；Windows helper 可通过 Raw Input 合并相对位移并显式抓取/释放光标。用户会话使用真实呈现 ACK 的 1..30 FPS 有界自适应 pacer，并依据真实编码预算与 ACK 在 zlib level 1..6 内调整压缩策略。Edge 桌面会话复用同一次 BGRA 捕获，以 GStreamer 按 VA/VAAPI/NVENC/QSV/OpenH264/x264 顺序建立 H.264 Annex-B AU 编码器；16 MiB AU 上限、45 KiB 分块、严格顺序、canonical base64、精确长度和 SHA-256 经 root/user IPC 验证后交给 WebRTC sender。Windows helper 已接入远端 H.264 RTP 到 Media Foundation/D3D11 原生窗口；第一帧呈现后双方在完整帧边界切换至 H.264-only，以呈现 ACK 驱动 pacer，不再并行传输完整 zlib 帧。RTP 序号中断立即触发回退；积压、重连、解码失败、媒体终止或三秒 H.264 ACK 超时也会恢复 zlib。协议 minor 14 源码增加默认关闭的 `opus_audio` 协商：只有同版本 Client 明确请求且已绑定 WebRTC sender 时，用户会话才从 Linux 输出 monitor 捕获 48 kHz 双声道 Opus，经 4 KiB 有界 IPC/SRTP 发送并由 Windows WASAPI 播放；音频与视频失败相互独立，旧客户端不接收音频事件。协议 minor 15 源码增加独立 `clipboard_read`/`clipboard_write` 权限、X11 selection 与 Windows `CF_UNICODETEXT` 双向纯文本剪贴板、Offer/Request/Data 按需传输、32 KiB/UTF-8/NUL/canonical Base64/SHA-256 校验和摘要防回环；root agentd 只授权和转发结构化消息。WSS/Edge 异常断开时立即释放输入并保留 15 秒 X11 租约、帧序列、pacer 和压缩控制器；32 字节随机恢复令牌绑定 agentd 注入的已认证 Client 指纹与 Linux 用户。新增输入/媒体/音频/剪贴板链路尚未解析依赖、编译或在真实 Windows/Xorg 主机验收，因此仍不标记为原生视频可用；Wayland 及 Wayland 剪贴板仍关闭。 |
+| CDN Edge 独立服务 | 部分 | 独立 Rust 进程已实现管理员与 Agent Presence 独立作用域的 Bearer 认证 API、短 TTL Presence、Direct/Single/Dual 路径评分、coturn REST 凭据和一次性 HMAC relay 票据；签名 Session Intent 队列最多全局 1024、每设备 32、每设备/Client 8 个，最长 120 秒，request ID 幂等、15 秒投递租约、Agent proof nonce 防重放并绑定当前 Presence connection；普通请求验证本地已配对 Client/permission/user，首次 `pairing` 请求只在 Agent 本机配对窗口有效且允许目标用户/terminal 时接受；Edge 分别交付 Client/Agent 角色票据，并在双方各自的签名授权响应中下发绑定相同 session/expiry 的 coturn REST 短期凭据；已接受桌面会话的 Agent/Client 使用 `webrtc-rs` 0.20.1 创建真实 PeerConnection，注册 H.264/RTX/Opus、NACK/PLI/transport-cc、控制 DataChannel，并经有界签名 mailbox 交换 SDP/ICE。Agent 侧媒体 sender 以 session、过期时间、目标用户和 Client 指纹注册，单次消费且在 PeerConnection 关闭时撤销；Linux 捕获帧已接入 H.264 track，Windows 接收端也已接入有界 RTP 重组和原生解码/呈现源码。真实 coturn POP、UDP/TLS、双 POP、跨网络媒体和 RDP Edge 尚未验收，因此不开放通用 CDN 策略；新增接线按要求尚未解析依赖、编译或运行。 |
+| Hysteria2 Agent transport | 已有入口，未完成原生会话迁移 | `transport/hysteria2-agent` 使用官方 Hysteria2 Go `core/v2` 提供密码认证、TLS、UDP/QUIC-only server/client 和本机 UDP 适配端口；服务端明确拒绝 TCP proxy，未引入 SOCKS5 或 TCP bridge。Windows/Linux Rust Agent 现有 TCP/WSS 会话协议尚未改为 UDP 数据报协议，因此该入口目前是可部署的传输适配层，不宣称桌面会话已直接接通。 |
+
+IronRDP 单屏 resize 源码现已补齐单调 generation、调整后尺寸回传、匹配远端图像确认、5 秒确认超时、不支持/超时诊断和用户确认重连。vendored client 不再因缺少 Display Control 静默重连；取消确认会保持当前会话，确认后的尺寸也会保留给后续有界故障重连。该新增链路仍按要求等待编译和 Windows 真实服务端验收。
+
+Linux 用户会话现已将 X11 与 Wayland 生命周期收敛到统一 Agent 后端。Wayland 默认编译 `wayland-eis`，通过用户 D-Bus 实际查询 RemoteDesktop/ScreenCast Portal，按 `CreateSession -> SelectDevices -> SelectSources -> Start` 顺序授权，持有 PipeWire remote 与 EIS fd，并以 DMABUF 严格硬件 H.264 管线发送；Portal/EIS/VA 能力不足时返回明确错误，不伪装成 X11 或 CPU 回退。控制服务的 `linux.wayland_desktop` 现在表示 Linux Agent helper 已包含该能力，具体桌面是否可用仍由 Agent status 的 Portal probe 和会话启动结果决定。
+
+## 尚未实现
+
+| 路线 | 未实现的主要能力 |
+|---|---|
+| M0 技术验证 | Tauri 壳、RDP viewer 安全握手/Job Object/D3D11 dirty-rect CPU 上传、native-video 本地文件播放，以及 Linux 远程 H.264 RTP -> Media Foundation NV12 DXGI surface -> D3D11 VideoProcessor -> swap-chain 窗口链路已完成源码接线并通过工作区编译/单元测试；Windows/Linux 实机验收仍未完成。Wayland Portal/PipeWire/EIS 严格媒体路径和认证 WSS 直连 WebRTC 信令已有源码，仍缺 ETW/GPUView 硬件解码和隐藏复制证明、Xorg DRI3，以及 Linux PTY 和图形桌面真实主机端到端实测 |
+| M1 Windows RDP MVP | 原生客户端全部本地显示器布局、自定义显示器子集、D3D11 呈现路径已编译并通过自动化测试；仍缺真实主机验收、硬件解码/零拷贝、断线恢复实机验收、Credential Manager 远端 NLA 验收和正式签名安装包 |
+| M2-M4 Linux Agent | X11 `GetImage`/XTEST、Windows 软件桌面窗口、权限路由、有界帧协议、三次有界桌面重连、用户会话进程内 15 秒绑定令牌续接、GStreamer H.264 AU 编码/WebRTC sender、Linux 输出 monitor Opus 编码/有界 IPC、Windows 远端 H.264 RTP 消费/原生呈现、Opus 解码/WASAPI 播放、认证 WSS 直连 WebRTC 信令、X11/Windows 双向 UTF-8 文本剪贴板，以及 Windows Credential Manager 支持的 helper 崩溃后短时续接已完成源码接线并通过相关 Rust 测试；真实 Linux/Windows 主机验收仍未完成。Wayland Portal 已完成能力探测、认证后授权、PipeWire/EIS fd 所有权、严格 DMABUF-to-VA-H.264 会话循环、呈现 ACK、resize 重建、`reis` EIS 输入和绑定 Portal/EIS 的 15 秒会话恢复源码；仍缺 GNOME/KDE/Xorg/纯终端端到端验证和 Wayland 文本剪贴板实现 |
+| M5 体验和性能 | Linux X11 兼容帧链路已完成采集/编码/解码/呈现耗时源码遥测，并已接入基于呈现 ACK 的有界帧率和 zlib level 1..6 压缩策略自适应；IronRDP 已完成网络图形 PDU 本地处理与像素转换耗时源码遥测；相关 Rust/Web 自动化已通过。正式更新源发布自动化和 Authenticode 签名/验签已完成源码接线但尚未执行生产发布；仍缺 RDP 服务端编码遥测、H.264/Opus 码率与编解码策略自适应、HEVC/AV1、通用会话崩溃恢复，以及真实证书/时间戳/下载/原位升级验收；文件上传/下载断点续传已实现 |
+| M6 CDN 边缘中继 | 已有单节点短 TTL Presence、Linux Agent 心跳、Windows Client 签名 Session Intent、Agent 本地授权、角色票据、远程首次配对、已知设备 outbound-only rendezvous、Linux 终端/文件 TLS-over-relay transport、设备签名的有界双向 SDP/ICE mailbox、授权响应内的 session-bound TURN 短期凭据、Agent/Client 共用的真实 PeerConnection/H.264/RTX/Opus/DataChannel 传输内核、Linux X11 捕获/GStreamer H.264 与 Opus track 发送，以及 Windows H.264 RTP 解码/呈现和 Opus/WASAPI 播放源码；Edge、Agent runtime、Linux terminal 和 native video 的自动化测试已通过。仍缺实际 coturn POP 部署与 UDP/TLS 验收、真实双 POP 骨干指标/亲和/故障切换、RDP TCP/UDP L4 Edge Connector、静态发布 CDN 与跨网络端到端验证 |
+
+## 运行时能力接口
+
+控制服务提供 `GET /api/v1/capabilities`。界面以该响应为准启用功能，而不是根据设计文档或静态页面推断能力。当前响应示例：
+
+```json
+{
+  "version": "0.2.10",
+  "platform": "windows",
+  "application": {
+    "desktop_shell": true,
+    "shell_kind": "tauri-2"
+  },
+  "rdp": {
+    "probe": true,
+    "protocol_probe": true,
+    "external_launch": true,
+    "native_launch": true,
+    "native_diagnostics": true,
+    "native_multimon": true,
+    "session_network_metrics": true,
+    "session_decode_metrics": true,
+    "region_pixel_conversion": true,
+    "secure_named_pipe": true,
+    "secure_pipe_config_ack": true,
+    "secure_pipe_handshake_timeout": true,
+    "job_object_lifecycle": true,
+    "certificate_pinning": false,
+    "automatic_reconnect": true,
+    "resize_confirmation": true,
+    "clipboard": true,
+    "audio_playback": true,
+    "native_renderer": "d3d11_cpu_upload",
+    "d3d11_device_available": true,
+    "d3d11_dirty_rect_upload": true,
+    "credential_manager": true,
+    "credential_store": true
+  },
+  "linux": {
+    "agent_session": true,
+    "agent_probe": true,
+    "terminal_session": true,
+    "desktop_session": true,
+    "x11_desktop": true,
+    "relative_pointer": true,
+    "adaptive_frame_pacing": true,
+    "adaptive_compression": true,
+    "desktop_session_resume": true,
+    "desktop_session_crash_resume": true,
+    "direct_webrtc_signaling": true,
+    "opus_audio": true,
+    "clipboard_read": true,
+    "clipboard_write": true,
+    "wayland_desktop": true,
+    "native_video": false,
+    "native_video_decoder_probe": true,
+    "native_video_surface_presenter": true,
+    "file_transfer": true,
+    "agent_identity_store": true
+  },
+  "edge": {
+    "relay": false,
+    "signed_intent": true,
+    "linux_session_relay": true,
+    "linux_known_device_rendezvous": true,
+    "remote_pairing": true
+  },
+  "update": {
+    "configured": false,
+    "check": false,
+    "install": false
+  }
+}
+```
+
+`application.desktop_shell` 只在 Tauri 壳实际启动本次控制服务时为 `true`，此时 `shell_kind` 为 `tauri-2`；直接运行控制服务时分别为 `false` 和 `standalone`。`native_launch`、`rdp.session_network_metrics`、`rdp.secure_named_pipe`、`rdp.secure_pipe_config_ack`、`rdp.secure_pipe_handshake_timeout`、`rdp.job_object_lifecycle` 和 `protocol_probe` 只有在对应 helper 与控制服务位于同一目录时才为 `true`；`session_network_metrics` 表示 viewer 能把服务器提供的 RDP Network Characteristics 平均 RTT、基础 RTT 和带宽写入会话诊断，不表示每台服务器必然发送该结果；`secure_named_pipe` 表示控制服务启动 viewer 的真实运行时路径会执行受限 ACL、OS 进程身份和 challenge MAC 校验，`secure_pipe_config_ack` 表示 viewer 只有在严格 schema 和全部字段校验后才发送载荷摘要认证 ACK，服务端会验证 ACK 版本、摘要和 MAC，`secure_pipe_handshake_timeout` 表示连接、认证、配置与 ACK 受同一绝对 deadline 约束，`job_object_lifecycle` 表示同一路径会把 viewer 绑定到随控制服务关闭的 Job Object。`update.configured` 和 `update.check` 只有在更新清单 URL 与 Ed25519 公钥成对配置后才为 `true`；`update.install` 还要求 Windows 安装包中存在升级 helper。当前能力 JSON 不包含虚拟机电源集成。非 Windows 构建会将 Windows 启动、凭据和 MSI 安装能力报告为 `false`。Linux Agent 是独立被控端发布物；`linux.agent_session`、`agent_probe` 和 `terminal_session` 表示本控制端是否包含对应会话 helper，并不表示已经完成真实 Linux 主机验收。`linux.agent_probe` 只验证直连地址的固定证书 TLS/WSS 和公开 `Hello`，不认证用户或证明桌面会话可成功打开。`linux.agent_identity_store` 表示控制端可在 Windows Credential Manager 查询和删除证书绑定的 Agent 公钥映射。`linux.relative_pointer` 表示 Windows helper 和协议支持抓取光标、合并 Raw Input 位移并通过 XTEST 相对移动；它不代表 Wayland/libei。`linux.adaptive_frame_pacing` 与 `linux.adaptive_compression` 分别表示真实呈现 ACK 驱动的帧率和 zlib 压缩等级控制。`linux.desktop_session_resume` 表示 helper 进程内的短时传输续接；`linux.desktop_session_crash_resume` 仅在 Windows 控制端报告，表示恢复令牌可由 Credential Manager 跨 helper 进程保留。`edge.signed_intent` 表示签名准入，`edge.linux_session_relay` 表示终端/文件 opaque relay，`edge.linux_known_device_rendezvous` 表示已记录身份的设备无需 Client-Agent 直连，`edge.remote_pairing` 表示持有 Agent 本地输出公钥和证书指纹的 Client 可在有效配对窗口内经 Edge 首次配对；通用 `edge.relay` 仍为 `false`，因为媒体、RDP 和真实 POP 选择尚未接入。
+
+`rdp.session_decode_metrics` 只有在原生 viewer helper 与控制服务位于同一目录时才为 `true`。它表示 viewer 能报告网络图形 PDU 的本地 IronRDP 处理及 dirty region 像素转换耗时，不表示 RDP 服务端编码耗时、GPU 视频解码或端到端延迟。`rdp.region_pixel_conversion` 表示图像事件只携带经过边界验证的变化区域像素块，viewer 会将其合并到持久 framebuffer；诊断中的 `frame_conversion_pixels` 是最近一次实际转换数量。
+
+`linux.direct_webrtc_signaling` 仅表示同版本 helper 含协议 minor 13 的直连 SDP/ICE 和显式失败回退状态机，不表示 PeerConnection、H.264 或 Wayland 已通过实机验收。
+
+`linux.opus_audio` 只在 Windows 控制端能找到同版本 Linux 桌面 helper 时报告。协议 minor 14 用默认关闭字段显式协商音频，并把选择绑定到直连授权或 Edge 桌面请求；它表示源码包含 Linux 输出 monitor 捕获、Opus 有界传输和 Windows WASAPI 播放，不表示音频设备、GStreamer 插件或跨网络播放已经实机验收。
+
+`linux.clipboard_read` 和 `linux.clipboard_write` 只在 Windows 控制端能找到同版本 Linux 桌面 helper 时报告，并分别表示协议和本地 helper 可读取被控端 X11 文本剪贴板、可把 Windows 文本剪贴板写入被控端。Xorg 主机设置提供两个独立开关，控制服务只向 helper 传递启用的方向，helper 再与协议 minor 15 和配对记录中的同名授权取交集；CLI 未显式传入对应开关时默认关闭。Linux 桌面会话诊断另回传最终交集的 `clipboard_read`/`clipboard_write`，界面只在会话连接后按该结果显示实际方向，连接和重连期间显示等待协商，不再把本地主机开关当作 Agent 已授权。这两个能力字段不表示 Wayland 剪贴板可用，也不代替 Windows/Xorg 实机验收。
+
+`rdp.resize_confirmation` 只有在原生 viewer helper 可用时为 `true`。它表示 resize 请求带 generation，只有匹配目标尺寸的远端图像才确认成功；不支持或超时后的重连由原生窗口明确询问用户，不表示所有 RDP 服务端都支持在线 Display Control。
+
+`rdp.native_multimon` 表示控制服务和 viewer 支持严格传递“全部本地显示器”请求、枚举真实 Win32 monitor geometry，并在 RDP Display Control capabilities 到达后发送多 monitor layout。它不表示自定义显示器子集，也不替代真实 Windows RDP 服务端兼容性验收。
+
+`rdp.d3d11_dirty_rect_upload` 只有在 Windows D3D11 device 可创建且原生 viewer helper 可用时才为 `true`。它表示 viewer 保留 IronRDP 图形更新区域、合并 redraw 前的待呈现矩形，并局部更新持久 GPU texture；它不表示持久 CPU framebuffer、GPU texture 到 discard swap-chain back buffer 的复制、硬件视频解码或端到端零拷贝已经消失。
+
+`linux.native_video_decoder_probe` 只有在 Windows 控制端能够运行 native-video helper，且 helper 成功创建 H.264 decoder、NV12 texture array 和 decoder output view 时才为 `true`。探针输出同时固定声明 `sample_decoded=false` 和 `zero_copy_verified=false`，控制服务会验证这些边界标记；该字段不能用于开放 Linux 图形会话，只有完整媒体管线完成后 `linux.native_video` 才能变为 `true`。
+
+`linux.native_video_surface_presenter` 只有在同版本 helper 的严格 `--capabilities` JSON 声明 H.264 file player、D3D11 VideoProcessor 和禁用 CPU frame mapping 时才为 `true`。它表示本地文件 DXGI surface 到原生窗口的呈现入口已包含在当前 helper，不表示远程 WebRTC 已接入、硬件 decode engine 已验证或端到端零拷贝成立。
+
+## 更新规则
+
+实现功能时应同时更新本页、相关使用指南和能力接口。纯数据模型、dry-run、静态界面或模拟数据不能标记为“可用”，硬件和跨网络能力必须保留对应平台的验证记录。
+
+## 2026-08-11 构建与自动化验证记录
+
+### 2026-08-11 继续发布构建
+
+- 为保留重装前连接配置，Tauri 壳优先绑定固定 `127.0.0.1:4173`，避免 WebView origin 改变导致 `localStorage` 丢失；若该端口已被占用则回退临时端口，需先关闭占用进程后再启动以继续使用原连接数据。
+- 当前 0.2.10 Windows 客户端 MSI：`artifacts/RemoteDesk-M0-0.2.10-windows-x64.msi`，SHA-256 `58be77dbb975c392910ef372d29b0db19e590cf555802fa98f9941ef5321cf26`。
+- 当前 0.2.10 Windows 被控端 MSI：`artifacts/RemoteDesk-Host-0.2.10-windows-x64.msi`，SHA-256 `35830c543a86a08c39644af2346b6ac50802a1084bd156e12a97301de820335e`。
+- 两个 MSI 均为未签名开发包。
+
+- `cargo check --locked --workspace -j 1` 已通过（全工作区）。
+- Windows 客户端发布 MSI 已重新生成：`artifacts/RemoteDesk-M0-0.2.9-windows-x64.msi`，SHA-256 `757dcc2470393c60aa98939a74283d9ef2805e27bdaa3265cf309753894dbb06`。
+- Windows 被控端发布 MSI 已重新生成：`artifacts/RemoteDesk-Host-0.2.9-windows-x64.msi`，SHA-256 `eae9afbe226225697c2b22a208a084e13ed52609ff2215e467cbe2267e3c9620`。
+- 两个 MSI 均为未签名开发包；Windows Named Pipe 真实握手的 4 个测试仍失败（`ERROR_NO_DATA`/`UnexpectedEof`），因此该安全握手不能视为实机验收完成。
+- 修复 `remotedesk-linux-terminal` 调用 Edge presence 时遗漏 `DesktopMediaEvent` 通道参数；`remotedesk-edge-service`、`remotedesk-linux-terminal`、`remotedesk-native-video` 测试现已全部通过（22、1、26、15 项）。
+- 追加串行回归：`remotedesk-control-service` 31 项测试和 `remotedesk-credential-store` 8 项测试全部通过；完整 `cargo test --workspace` 仍在工作区级别超时，尚未将其计为通过。
+- 追加协议/RDP 回归：`remotedesk-protocol` 45 项、`remotedesk-rdp-session` 8 项、`remotedesk-rdp-viewer` 34 项全部通过；Tauri app 目标也可完成 0 测试编译运行。
+- `cargo test --locked --workspace --exclude remotedesk-client-core -j 1` 已完整通过；工作区其余包（Agent core/runtime、app、control-service、credential-store、edge、Linux terminal、native video、protocol、RDP session/viewer）均无失败。完整工作区的未完成项已明确收敛为 client-core 的 4 个 Windows Named Pipe 实测用例。
+- 最新源码已重新生成 Windows MSI：客户端 `RemoteDesk-M0-0.2.9-windows-x64.msi` SHA-256 `9b94158e001dc94816d62ce92bdc33fe6d5040795810e330b76d7e7a023df6ae`；Host `RemoteDesk-Host-0.2.9-windows-x64.msi` SHA-256 `b4241792fba8900112472ad0c1b23316801f878c8eb0a93e3269ea3ba0b710cb`。两者均为未签名开发包。
+- 在线升级清单生成器契约测试 `node packaging/windows/test-update-manifest.mjs` 通过，覆盖签名字段、目标平台、MSI 类型和篡改拒绝；生产更新源、真实签名证书/时间戳和原位升级仍未验收。
+- `remotedesk-client-core` 排除 4 个 Windows Named Pipe 实测用例后，其余 40 项测试全部通过；协议、显示布局、GPU 策略、凭据、会话和帧编解码均已自动化验证。
+
+- Windows MSVC 工作区核心包已通过 `cargo check --locked -j 1`，覆盖协议、客户端核心、RDP viewer、控制服务、Linux Agent runtime 和 Edge service；Linux Agent runtime 的 43 个单元/协议/本地 Edge HTTP 集成测试全部通过。Edge 测试使用进程内真实 HTTP 服务，测试环境设置 `NO_PROXY=localhost,127.0.0.1`，不会把本地连接误送代理。
+- Tauri `remotedesk-app`、Linux terminal helper、native-video helper 和 RDP session helper 也已通过 `cargo check --locked -j 1`；Linux terminal helper 的未使用导入和可变绑定 warning 已清理。
+- Web 控制端已通过 `npm run build:check`（TypeScript 两套配置、lint 和 Vite production build）。
+- Linux x86_64 musl 被控端便携包和 DEB 已实际生成并写入 SHA-256 清单。静态兼容包使用 `--no-default-features`，关闭依赖系统 `libxkbcommon` 的 Wayland EIS 输入；该包仍包含 X11/终端/文件会话，Wayland EIS 运行时返回明确的不可用错误。
+- 当前重建产物哈希：Windows 控制端 MSI `cd9a993edbd3eeac48626127880bb8089455c9c64cf86500f0a153c8a22c6e76`；Windows Host MSI `f70bb19c9f1997eee98fe02b20267c6807f3171c5c0232a9ac3ecae497`；Linux tar.gz `6a17413eb74f47879002eef93aa8122e22e0d1347bbb499489b1dfe31f52e28d`；Linux DEB `410dd67c5a18ac7634afa192a527bbce3e958f01413ded14e97a330691e92215`。
+- Windows 原生 RDP 自定义显示器子集现已完成 secure-pipe JSON、控制端请求、Web UI 选择、viewer 参数和 Win32 monitor layout 筛选：索引必须唯一、范围有效且包含主显示器，筛选后重新计算组合窗口边界；viewer 单元测试和 Web build 已通过。仍需真实多显示器 Windows RDP 服务端验收。
+- 自定义显示器子集接入后的控制端 MSI 已重新生成，最新 SHA-256 为 `66b34ea4a0292e6a4ddb5b8feab56ead19d6660135785f1893405e63cec4c7f0`（未签名开发包）。
+- 上述结果证明可编译和自动化测试覆盖，不等同于 Windows RDP 服务端、GNOME/KDE/Xorg、PipeWire/VA 驱动、coturn 跨网络或硬件解码的实机端到端验收；这些项目仍保持原有“部分”状态。
diff --git a/docs/linux-agent.md b/docs/linux-agent.md
new file mode 100644
index 0000000..91e7c33
--- /dev/null
+++ b/docs/linux-agent.md
@@ -0,0 +1,363 @@
+# RemoteDesk Linux 被控端设计
+
+## 1. 目标
+
+RemoteDesk Linux Agent 是安装在 Linux 被控机器上的自研组件。它不使用 xrdp、GNOME Remote Desktop 或 KDE KRdp，负责把当前图形会话或命令行终端安全地交付给 Windows 客户端。
+
+首个稳定版本支持：
+
+- 已登录的 Wayland 和 Xorg 用户会话。
+- 无图形环境的纯命令行终端会话。
+- 用户首次确认后的设备配对。
+- PipeWire 屏幕和系统音频捕获。
+- libei/Portal 键盘与鼠标控制。
+- H.264 视频、Opus 音频和 WebRTC 直连。
+- 文本剪贴板、动态分辨率和断线恢复。
+- GNOME 与 KDE Plasma 的主流发行版。
+
+登录界面、任意合成器的永久无人值守和内核级抓屏不属于首个稳定版本。
+
+## 2. 进程模型
+
+```text
+Windows Client
+      |
+ TLS WebSocket (pairing/signaling)
+      |
+remotedesk-agentd                 root/system service
+      |
+ authenticated Unix Socket
+      |
+      +---------------------------+
+      |                           |
+remotedesk-agent-session   remotedesk-shell-session
+graphical user service     target user process
+      |                           |
+ +----+---------+----------+      +--- PTY/login shell
+ |              |          |      +--- reliable terminal channel
+Portal/X11    PipeWire    Encoder
+ |              |          |
+libei/XTest   video/audio  H.264/Opus
+```
+
+### 2.1 remotedesk-agentd
+
+系统守护进程由 systemd 启动，职责严格限制为：
+
+- 维护被控设备身份和已配对客户端公钥。
+- 提供配对及会话信令入口。
+- 通过 logind 发现当前图形用户会话。
+- 验证并联络对应的用户会话 Agent。
+- 验证终端权限并创建已降权的 PTY 会话进程。
+- 管理版本兼容、健康状态和升级切换。
+- 按明确策略调用可选的最小权限 Helper。
+
+它不得读取桌面帧、音频、剪贴板、终端或文件内容，也不得持有用户的 PipeWire 流。
+
+### 2.2 remotedesk-agent-session
+
+用户会话进程通过 `systemd --user` 启动，并绑定到图形会话生命周期。职责包括：
+
+- 请求并恢复 RemoteDesktop/ScreenCast Portal 授权。
+- 消费 PipeWire 视频和音频节点。
+- 通过 libei/EIS 接收远端输入。
+- 进行色彩转换、硬件编码和 WebRTC 发送。
+- 管理用户剪贴板及文件接收确认。
+- 在本地显示连接状态和终止入口。
+
+注销用户时进程和所有远程会话必须结束。
+
+### 2.3 remotedesk-shell-session
+
+终端会话进程由 `agentd` 在授权后创建。它通过 PAM 建立目标用户会话，完成补充组、GID、UID、工作目录和环境降权，然后创建 PTY 并执行允许的登录 Shell。
+
+每个终端连接拥有独立进程。进程只接收终端字节流、窗口尺寸、信号和会话控制消息，不具备读取桌面或其他用户会话的能力。配对授权可明确允许 `root`（UID 0）会话；未列入授权的用户仍会被拒绝。
+
+## 3. 本地 IPC
+
+`agentd` 与用户会话进程使用 Unix Domain Socket 通信。每个已登录用户拥有独立 Socket，目录由 systemd/runtime directory 创建，不使用可预测的 `/tmp` 文件。
+
+IPC 连接必须验证：
+
+- Socket 文件所有者和权限。
+- 对端 UID、PID 和安全标签。
+- 用户是否对应有效的 logind 图形会话。
+- Agent 主次版本是否兼容。
+- 每条会话请求是否携带短期、单次使用的随机令牌。
+
+IPC 只传递配对后的客户端身份、会话控制消息和 WebRTC 信令，不转发视频帧或终端内容。
+
+## 4. Agent 生命周期
+
+```text
+Boot
+ -> agentd Ready
+ -> Client Paired
+ -> Desktop: User Login -> session Agent Registered
+ -> Terminal: PAM Session -> shell Session Spawned
+ -> Session Requested/Negotiated
+ -> Streaming or Terminal Active
+ -> Disconnecting
+ -> Resources Released
+```
+
+任何阶段失败都必须反向释放已创建资源，包括 Portal Session、PipeWire Stream、编码器、WebRTC Peer 和临时令牌。
+
+## 5. 首次配对
+
+Agent 安装时生成设备身份密钥，私钥仅由 `agentd` 读取。配对流程：
+
+1. Linux 本地用户在 Agent 状态界面开启配对，生成短时一次性配对码。
+2. Windows 客户端输入地址和配对码。
+3. 双方通过 TLS 交换设备公钥和能力摘要。
+4. Linux 本地界面显示客户端名称和公钥指纹，用户确认。
+5. `agentd` 保存允许的客户端公钥、权限和创建时间。
+6. 配对码立即作废，后续使用设备密钥认证。
+
+配对记录可以授予独立权限：查看桌面、控制输入、打开终端、剪贴板、音频、文件传输和无人值守尝试。撤销记录后，现有会话立即结束。
+
+## 6. Wayland 捕获与控制
+
+### 6.1 Portal 会话
+
+用户会话 Agent 通过 xdg-desktop-portal 创建远程桌面/屏幕共享会话，选择显示器并请求键鼠控制。首次请求由桌面环境显示系统授权窗口。
+
+Agent 记录以下能力，而不是假设存在：
+
+- 显示器和窗口捕获。
+- DMA-BUF 或内存帧。
+- 键盘、相对鼠标、绝对鼠标和触控。
+- Portal 恢复令牌及其持久模式。
+- 剪贴板接口。
+- 系统音频捕获。
+
+如果某项能力不可用，客户端必须禁用对应按钮并展示具体原因。
+
+### 6.2 PipeWire 视频路径
+
+默认零拷贝路径：
+
+```text
+PipeWire DMA-BUF
+ -> GPU color conversion/scale
+ -> VA-API/NVENC/AMF encoder
+ -> encoded frame
+ -> WebRTC RTP
+```
+
+零拷贝成立必须同时满足：
+
+- PipeWire buffer 带可导入的 DMA-BUF fd、modifier 和 fence/synchronization 信息。
+- Agent 根据 DMA-BUF 的 DRM device/render node 选择同一物理 GPU 的 video processor 和编码器。
+- 色彩转换与分辨率缩放在同一 GPU 或可验证的共享 surface 路径完成。
+- 硬件编码器直接导入 GPU surface，Agent 不 map 原始像素，也不通过 `appsink` 取帧。
+- buffer 生命周期延续到编码器完成消费，再归还 PipeWire；队列满时丢弃旧帧而不是复制保活。
+
+不同驱动分别验证 VA-API、NVENC/EGL-CUDA 等实际导入路径，不能因为元素名称包含硬件编码器就判定零拷贝。DMA-BUF modifier 不兼容或发生跨 GPU copy 时，状态必须降为 `gpu_copy` 或 `cpu_upload`。
+
+Agent GPU 策略：
+
+- `capture_device`：默认，跟随 PipeWire DMA-BUF 或 Xorg DRI3 pixmap 所属 DRM render node。
+- `manual(adapter_identity)`：只在所选 Adapter 能直接导入捕获 surface 时生效；严格模式不允许为使用另一块 GPU 而复制原始帧。
+- 稳定身份使用 PCI/DRM render node/driver 组合，不能持久化临时枚举序号。
+
+显式 compatibility 回退路径：
+
+```text
+PipeWire memory frame
+ -> software color conversion
+ -> hardware/software encoder
+ -> WebRTC RTP
+```
+
+每个帧对象必须引用计数并设置明确的所有权，避免 PipeWire 回调线程等待编码完成。捕获、编码和传输使用有界队列；出现积压时丢弃旧视频帧，不能阻塞输入和控制消息。
+
+配置 `zero_copy_policy`：
+
+- `required_end_to_end`：默认。Agent 端任何 CPU 映射、跨 GPU copy 或软件编码都会终止媒体协商；还必须等待客户端报告已验证的 D3D11 零拷贝路径。
+- `compatibility`：仅由用户显式开启，允许 PipeWire memory frame、GPU upload 或软件编码，并显示实际回退状态。
+
+### 6.3 输入模型
+
+Windows 客户端发送统一输入事件：
+
+- 键盘：USB HID Usage、按下/释放、修饰键状态。
+- 文本：Unicode 文本提交，处理无法由物理键盘布局表达的字符。
+- 鼠标：标准化绝对坐标、相对移动、按键和高精度滚轮。
+- 显示：事件携带显示器 ID 与拓扑版本，防止分辨率变化后位置错误。
+
+Agent 优先通过 Portal 提供的 libei/EIS 通道注入输入。`uinput` 仅作为明确开启的兼容性后端，并由独立最小权限 Helper 处理。
+
+### 6.4 音频与剪贴板
+
+- 系统音频从 PipeWire 获取，编码为 Opus。
+- 麦克风回传后续增加，默认关闭。
+- 剪贴板优先使用 RemoteDesktop 会话关联的 Portal 接口。
+- 仅在桌面能力允许时启用图片或文件剪贴板。
+- 剪贴板内容不写日志、不落盘，并设置单项大小限制。
+
+当前 Portal 剪贴板尚未接入，Wayland 会话不得据此声明剪贴板能力。协议 minor 15 已实现的范围仅为 X11 与 Windows 控制 helper 之间的 UTF-8 文本：`clipboard_read` 和 `clipboard_write` 独立授权，发送方先 Offer，收到匹配 Request 后才发送最多 32 KiB 的 canonical Base64 Data；接收方验证 sequence、长度、SHA-256、UTF-8、NUL 和规范换行，并用最近内容摘要阻止回写循环。root `agentd` 只做方向授权和结构化消息转发，不调用 X11 或 Win32 剪贴板 API。
+
+## 7. Xorg 捕获与控制
+
+Xorg 后端由同一个用户会话 Agent 提供，但不复用 Wayland Portal：
+
+- 从 logind 会话环境获取 `DISPLAY` 和对应用户的 `XAUTHORITY`。
+- 使用 XRandR 枚举显示器及监听拓扑变化。
+- 默认使用 XComposite 获取目标 pixmap、XDamage 跟踪变化，再通过 DRI3 `BufferFromPixmap` 导出 DMA-BUF 并直接交给同 GPU 硬件编码器。
+- XSync/Present fence 或驱动等效机制负责生产者与编码器同步，未确认完成前不复用 pixmap buffer。
+- XShm/XImage 只属于显式 `compatibility` 模式。
+- 使用 XTest 注入键盘和鼠标，键盘事件沿用统一 HID/Unicode 模型。
+- 画面进入与 Wayland 相同的编码、WebRTC 和质量控制管线。
+- 音频继续通过 PipeWire 获取。
+
+Xorg 只有在 XComposite/DRI3 导出的 DMA-BUF 成功直达同一 GPU 编码器且没有 CPU map 时才报告 `zero_copy`。驱动、合成器或 pixmap 格式不支持导出时，默认拒绝图形会话；用户显式选择 `compatibility` 后才允许 XShm/XImage，并在客户端持续显示性能降级。不可通过 `xhost +`、复制其他用户 Cookie 或关闭 X server 访问控制来解决权限问题。
+
+### 7.1 多显示器捕获
+
+Wayland Portal 和 XRandR 的显示器枚举统一转换为协议 `DisplayLayout`。稳定 ID 不使用数组索引；矩形保留主屏左侧/上方的负坐标，scale 使用有理数，布局变化递增 generation。用户可选择主屏、全部显示器或自定义子集。
+
+Agent 对每个选中显示器分别记录捕获 surface、DRM Adapter、import probe 和原始矩形，再生成组合桌面边界与输入坐标映射。分辨率上限作用于组合桌面画布，在保留各屏相对位置和比例的前提下统一缩放，不改变 Wayland/Xorg 实体模式。热插拔、旋转、DPI、分辨率或选择变化会清除旧选择与编码证明、递增 pipeline epoch 并请求新关键帧。
+
+严格零拷贝要求所有选中显示器都能导入同一个目标编码 Adapter，且每屏均无 CPU map、跨 GPU copy 或 opaque 路径。任一屏失败则整个多屏严格会话失败；Compatibility 可以逐屏记录 `CrossAdapterCopy`、`CpuUpload`、`Software` 或 `Opaque`，但不能把组合后的结果提升为零拷贝。
+
+输入事件包含稳定显示器 ID、布局 generation 和源物理坐标。Agent 只接受当前 generation 且坐标位于对应显示器矩形内的事件，随后再映射到 libei 或 XTest，避免拓扑变化后点击错误屏幕。
+
+## 8. 纯命令行终端
+
+命令行模式独立于桌面媒体管线，适用于没有安装桌面环境的 Linux：
+
+```text
+Windows Terminal View
+ -> reliable DataChannel
+ -> remotedesk-shell-session
+ -> PTY
+ -> user login shell
+```
+
+终端协议包含原始 UTF-8 字节、窗口行列、POSIX 信号、退出状态和会话恢复序号。Windows 客户端使用终端模拟器解析 ANSI/VT 序列，滚动缓存保存在客户端。
+
+安全规则：
+
+- 设备配对权限必须单独允许终端。
+- 配置将客户端设备映射到允许登录的普通用户。
+- PAM 负责账户状态、时间限制和会话审计。
+- 启动 Shell 前清理环境，只传递白名单变量。
+- 禁止把用户传入内容拼接为 root 命令行。
+- `sudo`、`su` 和审计策略完全遵循目标系统配置。
+- 断线后只保留有限宽限期和有界输出环形缓冲区。
+
+## 9. 差网络处理
+
+Linux Agent 的媒体管线必须导出 TWCC/GCC 目标码率、RTT、丢包、抖动、NACK 和 PLI 指标。质量控制器按状态动态更新编码码率、帧率和缩放档位：
+
+- 轻微丢包先降低码率，不立即降低桌面分辨率。
+- 持续或突发丢包再降低帧率和分辨率。
+- 收到 PLI 时请求 IDR，并限制关键帧频率。
+- 输入和音频队列优先于视频。
+- 严重丢包时暂停文件传输并限制剪贴板大对象。
+- 网络恢复后使用较长窗口逐级升档。
+
+分辨率请求作用于捕获后的 scaler/caps 和编码器，不修改 Wayland/Xorg 实体显示模式。Agent 公布源尺寸、最小/最大编码尺寸、像素数上限、对齐要求和是否支持运行时重配；请求越界时返回结构化错误或明确的 capability clamp。切换成功后递增 generation、请求关键帧，并重新发布源尺寸与实际编码尺寸。输入坐标始终基于源显示器拓扑映射，不以降采样后的编码尺寸直接注入。
+
+鼠标移动允许丢弃过期事件，键盘和鼠标按键必须可靠发送。断线恢复后双方同步输入状态，避免远端出现卡键。完整策略见 [差网络自适应设计](network-adaptation.md)。
+
+## 10. 媒体和控制协议
+
+WebRTC 负责 DTLS-SRTP、媒体时钟、丢包反馈和拥塞控制。Agent 不自行设计视频网络协议。
+
+控制消息使用版本化 Protobuf，并在 DataChannel 上传输。协议包头至少包含：
+
+```text
+protocol_major
+protocol_minor
+session_id
+message_type
+sequence
+monotonic_timestamp
+payload
+```
+
+兼容规则：
+
+- 主版本不同则拒绝会话并返回升级提示。
+- 次版本能力通过握手位图协商。
+- 未识别的可选字段忽略，未识别的必需能力拒绝。
+- 输入、心跳和媒体控制使用独立 DataChannel，避免大剪贴板阻塞输入。
+
+## 11. 编码策略
+
+第一版以 H.264 为强制共同编码格式，Opus 为音频格式。能力协商顺序：
+
+1. 枚举客户端解码能力。
+2. 枚举 Linux GPU 和驱动编码能力。
+3. 将捕获 surface 的 DRM device 与编码器 Adapter 对齐，再选择双方都支持的编码器和像素格式。
+4. 用短帧验证 DMA-BUF/GPU surface 是否在无 CPU map 的情况下被编码器导入。
+5. 根据 `zero_copy_policy` 同时确认 Agent 编码路径和客户端解码/呈现路径；默认任一端失败即拒绝。
+6. 会话中监控编码耗时，超限时降低帧率或分辨率。
+
+办公模式对文字区域保留较高质量并降低静态刷新；动态模式缩短编码队列并提高帧率。HEVC、AV1 和区域编码在 H.264 稳定后增加。
+
+## 12. 无人值守边界
+
+Wayland 的安全模型决定了通用 Agent 不能无提示控制任意会话。
+
+支持层级定义为：
+
+| 等级 | 能力 | 首版 |
+|---|---|---|
+| L1 | 用户在线并确认本次 Portal 授权 | 支持 |
+| L2 | 首次确认后，使用 Portal 恢复令牌再次连接 | 按桌面能力支持 |
+| L3 | 用户已登录但锁屏 | 按发行版验证 |
+| L4 | 显示管理器登录界面 | 不承诺，需按合成器适配 |
+| L5 | 无显示器、无图形用户会话 | 桌面不支持；命令行支持 |
+
+客户端必须显示目标机器当前支持的等级，不能把 L1 描述为完整无人值守。
+
+## 13. 安装与升级
+
+Linux 发布物至少提供 DEB 和 RPM：
+
+```text
+/usr/bin/remotedesk-agentd
+/usr/bin/remotedesk-agent-session
+/usr/libexec/remotedesk-shell-session
+/usr/lib/systemd/system/remotedesk-agentd.service
+/usr/lib/systemd/user/remotedesk-agent-session.service
+/usr/share/applications/remotedesk-agent-settings.desktop
+/usr/share/dbus-1/services/...
+/usr/share/polkit-1/actions/...
+```
+
+安装脚本只创建系统服务、受限用户/目录和必要策略，不修改 SELinux/AppArmor 为宽松模式。升级采用先写新文件再切换的方式，协议不兼容时保留上一版本回滚能力。
+
+当前 `0.2.9` 工程切片已经提供四个二进制、systemd system/user unit、静态 x64 便携包、musl DEB，以及 Ubuntu CI 的原生 DEB/RPM 构建。`agentd` 可完成设备身份、一次性配对、证书指纹固定、Ed25519 客户端认证、终端授权和文件传输；用户会话进程通过 `SO_PEERCRED` 校验的 Unix Socket 注册；终端 helper 通过 `runuser --login` 建立 PAM/PTY 会话，文件 helper 以授权普通用户身份将路径限制在用户主目录并执行大小/SHA-256 校验，协议 minor 4 还通过目标端实测 partial offset 和整文件重新哈希支持上传/下载断点续传，Windows 控制端已包含配套 helper。可选 Edge 客户端注册 60 秒 Presence 路由、每 30 秒续期、失败有限退避并在 SIGINT/SIGTERM 时限时注销；在线时每次信令 poll/ack 都使用设备私钥、时间戳和一次性 nonce 签名。普通 Intent 重新验证已配对 Client、permission 和 allowed user；`pairing` Intent 只在 Agent 本机配对窗口有效时签发 relay，真正的一次性码仍在证书固定 TLS/WSS 内验证和消费。授权后 Agent 使用独立一次性票据主动连接 relay 并透明代理到本地 TLS listener。Windows 控制端录入 `pairing-code` 输出的设备公钥和证书指纹即可远程首次配对；成功后按证书指纹记录 Agent 公钥，后续已知设备同样无需 Client 连接 Agent 地址。`status --json` 和 WSS Hello/Status 会报告在线、信令能力、接受/拒绝计数和清洗后的错误，状态文件不含 URL、令牌、请求或配对码。
+
+协议 minor 10 的源码包含 X11 兼容桌面：用户会话以 UID 固定的 `0600` Socket 注册 X11 捕获端点，Agentd 再次核对 Socket peer PID/UID；root window 在源尺寸和像素上限验证后通过 `GetImage` 捕获，XTEST 输入根据当前用户 X server 的 keyboard mapping 解析 keysym。输入覆盖缩放绝对坐标、有界相对移动、五键鼠标、水平/垂直滚轮和键盘；Windows helper 显式抓取光标后合并 Raw Input 位移，失焦、重连和退出会解除抓取并释放输入。帧使用有界 zlib BGRA 分块、整帧 SHA-256 和成功呈现后的逐帧 ACK，Windows 控制 helper 新增等比例软件 framebuffer、黑边输入排除、全屏与退出；跟随窗口模式合并 500 ms 内的连续变化，并在当前帧 ACK 后动态重配下一帧的 200..8192 捕获上限，不修改 Xorg 实体模式。Agent 根据真实编码耗时和呈现 ACK 调整 1..30 FPS，zlib 模式另在 level 1..6 内调整压缩。异常断线按 1、2、4 秒最多重连三次；用户会话进程会先释放全部 XTEST 输入，再保留 15 秒 X11 连接、帧序列和自适应控制器，恢复令牌绑定 Client 指纹和 Linux 用户。每次 UI 启动会生成受限会话 ID，helper 只写不含地址、用户或凭据的诊断，并回传 RTT、压缩比例和采集/编解码/呈现耗时。接受的 Edge 桌面会话在 Agent/Client 两端创建真实 WebRTC PeerConnection；用户会话复用同一次 BGRA 捕获，以 GStreamer 选择 VA/VAAPI/NVENC/QSV/OpenH264/x264 编码器，输出 Annex-B AU。AU 通过 16 MiB 总上限、45 KiB 分块、严格顺序、canonical base64、精确长度和 SHA-256 的内部 IPC 后，由 agentd 交给绑定 session 过期时间、目标用户和 Client 指纹的 H.264 sender；断开时撤销。Windows helper 使用单 NAL/STAP-A/FU-A 重组、跨帧序号检测、PLI/关键帧恢复和一槽有界媒体邮箱，再经 Media Foundation H.264 MFT 输出同 device NV12 surface 并由 D3D11 VideoProcessor 呈现。第一张原生帧呈现后双方确认 H.264-only，停止完整 zlib 编码和传输；每张 H.264 的 sequence 呈现 ACK 驱动下一次捕获。解码、媒体、sender/encoder 或 ACK 失败会显式恢复 zlib。协议 minor 11 的 Wayland 源码在认证后请求 Portal，只接受单显示器 DMABUF 到 VA H.264 严格管线，首个 IDR 与 `reis` EIS Sender/设备/XKB keymap 就绪后才打开会话；媒体复用相同有界 H.264 IPC、WebRTC sender 和 Windows 呈现 ACK，输入按 stream/region `mapping_id` 注入，resize 先停止旧管线再重建并等待新 IDR。协议 minor 12 在意外断线时释放全部 EIS 输入和旧编码器，把 Portal/EIS 置入绑定 Client 指纹、Linux 用户及轮换令牌的 15 秒租约；新 WebRTC sender 就绪且绑定校验通过后才消费租约、重建编码器并从新 IDR 恢复。协议 minor 13 复用同一媒体内核，经证书固定和 Ed25519 认证后的直连 WSS 交换有界 SDP/ICE，并把授权精确绑定 Client 指纹、Linux 用户、尺寸和 FPS；只有 PeerConnection connected 且双方 ICE 完成后才进入桌面协议，失败则显式同步 abort/unavailable。minor 14 增加默认关闭的 `opus_audio` 协商，只捕获 Linux 系统输出 monitor，以固定 48 kHz 双声道、20 ms Opus 经 4 KiB 有界 IPC 和 SRTP 发送；Windows 使用有界队列、IronRDP Opus 解码和 WASAPI 播放，音频失败不会关闭视频，minor 13 及更旧客户端不会收到音频事件。显式关闭、媒体/输入错误和超时仍立即关闭 Portal。新增路径按要求尚未解析依赖、编译或在真实 GNOME/KDE/VA/音频设备上运行，因此相关运行时能力仍受保守平台开关控制。
+
+协议 minor 15 进一步把 X11 selection、Windows `CF_UNICODETEXT` 工作线程和桌面协议状态机接通。用户会话只在 `clipboard_read` 为真时轮询并 Offer 本地 X11 文本，只在 `clipboard_write` 为真时接受 Client Offer、请求并写入；Windows 侧使用有界线程和 channel 隔离同步 Win32 API。该源码尚未编译或在真实 Windows/Xorg 剪贴板所有者之间验收，Wayland 剪贴板仍关闭。
+
+Edge Presence 默认关闭。只有同时设置 `REMOTEDESK_EDGE_API_URL`、`REMOTEDESK_EDGE_PRESENCE_TOKEN`、`REMOTEDESK_EDGE_REGION`、`REMOTEDESK_EDGE_GATEWAY_ID` 才会启动；缺少任一项会拒绝启动。公网 URL 必须为 HTTPS，HTTP 仅允许 loopback，Presence 令牌至少 32 字节且必须与管理员令牌、票据密钥分离。安装包只附注释模板，不生成或携带凭据。
+
+Windows 控制端可在全局设置中保存无凭据的 Edge HTTPS Origin。首次配对时同时填写 Agent 本地命令输出的 `device_public_key` 和证书指纹，即可经 Edge 建立；缺少其中一项时 helper 保留直连回退。配对后 helper 把 Agent 公钥保存到 `RemoteDesk/Linux/agent/<certificate-sha256>`，该值不是秘密，但会决定 Edge 请求的目标设备身份，必须按完整性敏感数据保护。Linux helper 使用现有 Credential Manager Client key 公开提交签名 Intent，并以原始签名认证状态查询；它不接收 Edge 管理员或 Presence 令牌。Agent 返回授权后，两端分别使用角色绑定一次性票据连接 relay，终端和文件字节在 relay 内重新建立的证书固定 TLS/WSS 中传输。公网 relay authority 必须经系统信任 TLS/L4 入口发布，raw TCP 只允许 loopback。控制端 Linux Terminal 面板可查询或显式删除映射；删除后可再次经 Edge 或直连配对。
+
+## 14. 安全检查项
+
+- system daemon 媒体零接触。
+- 所有外部输入先做长度、枚举和状态验证。
+- 配对码限时、限次并带失败速率限制。
+- 客户端权限可查看、修改和撤销。
+- Portal 授权状态在 Linux 桌面上始终可见。
+- 文件传输需要每次确认，保存路径不可目录穿越。
+- 依赖生成 SBOM，并持续跟踪 GStreamer/WebRTC/PipeWire 安全更新。
+- 崩溃转储默认排除视频帧、密钥和剪贴板缓冲区。
+
+## 15. 首个开发切片
+
+开发拆成三条窄路径，按顺序打通：
+
+1. 基础：`agentd`、设备配对、受认证 IPC 和会话状态机。
+2. 桌面：先打通 GNOME Wayland Portal/PipeWire，再复用媒体管线增加 Xorg/XDamage 后端。
+3. 终端：完成 PAM 降权、PTY、可靠 DataChannel 和 Windows 终端控件。
+
+三条路径稳定后再增加硬件编码验证、剪贴板、多显示器、KDE 和持久授权；系统输出 Opus 已进入源码链路，但仍需平台验收。
diff --git a/docs/m0-validation.md b/docs/m0-validation.md
new file mode 100644
index 0000000..de9822d
--- /dev/null
+++ b/docs/m0-validation.md
@@ -0,0 +1,263 @@
+# M0 技术验证计划
+
+## 1. 目的
+
+M0 不开发完整产品，只验证会导致架构失败的技术假设。每项实验必须提供可运行代码、环境记录、指标和明确结论。
+
+## 2. 通用要求
+
+每个实验目录包含：
+
+```text
+spikes/<name>/
+├── README.md          假设、环境、运行方法
+├── src/
+├── tests/
+├── results/           脱敏日志与指标，不提交大视频
+└── decision.md        pass/fail/follow-up
+```
+
+通过标准不能用“看起来流畅”。至少记录版本、CPU/GPU、驱动、分辨率、帧率、复制路径、延迟和资源占用。
+
+## 3. Spike A：IronRDP
+
+目标：判断 IronRDP 能否作为正式 Windows RDP Adapter。
+
+场景：
+
+- Windows 11 Pro 本地账户和 NLA。
+- Windows Server。
+- 正确/错误密码、证书首次连接和证书变化。
+- 自动跟随、1920x1080、4K、自定义尺寸和连续动态 resize。
+- 键盘、Unicode、鼠标、剪贴板和音频。
+- 断线、锁屏、注销和重连。
+- TCP 与 RDP UDP multitransport。
+
+通过标准：
+
+- NLA/TLS 稳定连接，无敏感日志。
+- 图形更新可获得 dirty rect 并持续运行 2 小时。
+- 动态 resize 不要求重建整个客户端。
+- 服务端不支持 Display Control 时能明确提示并通过确认后的重连应用初始尺寸。
+- 中文输入和文本剪贴板可用。
+- 明确确认 UDP multitransport 是否支持以及限制。
+
+决策：
+
+- 全部核心项通过：进入内嵌 RDP MVP。
+- 仅音频/多显示器等非核心项缺失：记录阶段性限制。
+- NLA、图形或网络恢复不通过：MVP 使用 mstsc Adapter，IronRDP 保持实验模块。
+
+## 4. Spike B：Native Helper 与 D3D11
+
+目标：验证 Tauri 主程序可以安全管理独立 Rust/D3D11 helper。
+
+场景：
+
+- 启动/退出/反复重启 RDP 和 native-video helper。
+- 在 Windows 实机验证 RDP viewer Named Pipe 的当前用户 SID ACL、拒绝远程客户端、单实例、一次性 key/nonce、协议版本、OS PID/创建时间/镜像 hash 和 challenge MAC；验证伪造客户端及篡改载荷均被拒绝，并验证控制服务崩溃时 Job Object 回收 viewer。
+- Helper 原生窗口 resize、最小化、恢复和全屏。
+- 100/125/150/200% DPI。
+- 在不同 DPI 显示器间移动。
+- Raw Input、焦点、光标捕获和相对鼠标。
+- D3D11 device lost 模拟。
+- 默认 GPU、手动 GPU、GPU 缺失和跨显示器 Adapter 变化。
+
+通过标准：
+
+- Helper 与 Tauri 主窗口生命周期彼此隔离。
+- DPI 变化后像素和输入坐标一致。
+- IPC 不携带 frame，凭据不进入命令行。
+- Helper crash/device lost 后主程序可诊断并重启。
+- 手动选择失效时本次回退默认，不改写保存配置。
+
+## 5. Spike C：Native Video
+
+目标：验证客户端 D3D11 解码到呈现的零拷贝路径。
+
+默认 Native 管线：
+
+```text
+webrtcbin -> H.264 depay/parse -> D3D11 decoder -> GstD3D11Memory -> d3d11videosink
+```
+
+场景：
+
+- 软件测试源与真实 Linux Agent 源。
+- 720p/1080p/1440p/4K，30/60 fps。
+- Intel/NVIDIA/AMD 至少覆盖可获得的硬件。
+- Native 会话、WebRTC stats 和 GPU process failure。
+- pipeline pause/resume/rebuild。
+- Native helper window resize/destroy。
+- 显式 compatibility 下硬件解码失败后的软件回退；严格模式验证拒绝。
+- 同显示器 Adapter 零拷贝与跨 GPU 复制诊断。
+- `required_end_to_end` 默认选择 native helper，无法验证 D3D11 surface 路径时拒绝而不是静默回退。
+
+通过标准：
+
+- Native 路径保持 D3D11 memory，不发生持续 GPU→CPU→GPU 往返。
+- 1080p60 连续 4 小时无队列和内存增长。
+- 窗口关闭后 pipeline 完整释放。
+- 黑屏、解码失败和插件缺失能返回结构化错误。
+- 分辨率切换不重建认证/控制通道，旧 generation 不会覆盖新尺寸。
+- 每次 GPU、显示器或分辨率切换都会使旧零拷贝证明失效，并在新 generation 上完成双端重新验证。
+
+## 6. Spike D：Wayland Agent
+
+目标：验证自研 Agent 可以通过标准 Wayland 接口控制当前会话。
+
+场景：
+
+- GNOME 与 KDE Plasma Wayland。
+- Portal 接受、拒绝和取消。
+- 单/双显示器、动态拓扑。
+- 调整编码分辨率并确认 Wayland 实体显示模式不变。
+- PipeWire DMA-BUF 与内存帧。
+- DMA-BUF -> GPU conversion/scale -> hardware encoder 全程无 CPU map，并验证 buffer/fence 生命周期。
+- libei 键盘、绝对/相对鼠标。
+- 锁屏、注销和恢复令牌。
+
+通过标准：
+
+- 用户授权后可稳定捕获和输入。
+- 拒绝授权不会隐蔽降级。
+- 注销后所有资源释放。
+- 每个桌面环境输出能力矩阵，不笼统声明无人值守。
+- `required_end_to_end` 在 DMA-BUF 导入失败时返回 `CAPABILITY_ZERO_COPY_UNAVAILABLE`；只有显式 compatibility 才测试 memory-frame 回退。
+
+## 7. Spike E：Xorg Agent
+
+目标：验证 Xorg 与 Wayland 共用媒体和输入模型。
+
+场景：
+
+- XComposite/DRI3 导出 DMA-BUF，XDamage 跟踪变化。
+- 显式 compatibility 下的 XShm/XImage 性能回退。
+- XRandR resize/多显示器。
+- 调整编码分辨率并确认未调用 XRandR 改变实体显示模式。
+- XTest 键鼠和中文输入。
+- 错误 Xauthority 和不同 UID。
+
+通过标准：
+
+- 当前用户会话可达到 1080p60。
+- 静态桌面依靠 damage 降低捕获工作量。
+- 不使用 `xhost +` 或复制其他 UID Cookie。
+- 无权限时明确失败，不尝试 root 绕过。
+- DRI3 到硬件编码器无 CPU/cross-GPU copy；XShm/XImage 不报告零拷贝且不能进入默认会话。
+
+## 8. Spike F：Web 终端
+
+目标：验证 xterm.js 与 Linux PTY/DataChannel。
+
+场景：
+
+- bash/zsh，UTF-8 和中文宽字符。
+- `vim`、`top`、`tmux` 等全屏程序。
+- resize、SIGINT、退出码和断线恢复。
+- 高频输出和输出环形缓冲区溢出。
+- WebView reload/crash 与会话恢复。
+- PAM 拒绝、账户过期和 UID 0。
+
+通过标准：
+
+- 普通用户身份、组、HOME、SHELL 与本地登录一致。
+- 不能直接创建 root shell。
+- 全屏 TUI、颜色、光标和中文显示正确。
+- OUTPUT_GAP 明确显示，内存保持有界。
+
+## 9. Spike G：差网络
+
+目标：验证自适应策略不是静态配置。
+
+使用 Linux bridge 和 `tc netem` 注入：
+
+- 1/3/5/10/15% 随机丢包。
+- 突发丢包、重排和重复包。
+- 30/100/250/500 ms RTT。
+- 20 Mbps → 2 Mbps → 20 Mbps 带宽阶跃。
+- 3～10 秒完全中断。
+
+通过标准：
+
+- TWCC/GCC 指标能被 Rust quality-controller 消费。
+- 编码码率可以不中断 pipeline 动态更新。
+- 5% 丢包不主动断开，输入保持可用。
+- 10% 突发丢包后能降档并通过 PLI/IDR 恢复。
+- 文件拥塞不阻塞输入/心跳。
+- 恢复后逐级升档，不持续振荡。
+
+## 10. Spike H：配对与权限
+
+目标：验证设备身份、票据和进程边界。
+
+场景：
+
+- 首次配对、本机确认和取消。
+- 错误/过期配对码与失败限速。
+- 客户端撤销、权限修改和 authorization epoch。
+- Ticket 过期、重复、跨客户端和跨 UID 使用。
+- Unix Socket 假冒进程。
+- agentd 启动 desktop/shell session 后完成降权。
+
+通过标准：
+
+- 未配对客户端无法创建会话。
+- Ticket replay 被拒绝并审计。
+- 撤销后现有会话终止，旧 Ticket 失效。
+- agentd 不读取媒体或终端内容。
+- shell-session 权限下降自检通过。
+
+## 11. Spike I：边缘中继
+
+目标：验证传统缓存 CDN 之外的实时边缘路径。
+
+场景：
+
+- 单 coturn POP 的 UDP/TCP/TLS。
+- Rust Rendezvous 转发 Agent 出站连接与客户端签名请求。
+- 短期 TURN credential 过期、跨 session 和配额校验。
+- Direct 成功、Direct 失败后 Relay、Relay 故障后 ICE restart。
+- Direct 可用但质量差时选择 Client POP -> 骨干 -> Agent POP。
+- IronRDP 通过透明 L4 Edge Connector 连接 Windows RDP TCP/UDP。
+- 控制面停止后的已有会话。
+
+通过标准：
+
+- 智能优选在 Direct 明显更优时不误走 Relay，在 Dual Edge 更优时不固守 Direct。
+- TURN 路径保持端到端 DTLS-SRTP/DataChannel 加密。
+- 双 POP 路径能够证明使用供应商内部/优质骨干而非普通公网绕行。
+- UDP 禁用时可以通过 TURN TLS 443 建立。
+- 凭据重放和跨 session 使用被拒绝。
+- 已建立会话不因 Rendezvous 停止而中断。
+- RDP Edge 保持目标证书/NLA 身份，UDP 不进入 TCP 队头阻塞。
+
+## 12. 集成切片
+
+各 Spike 通过后只合并一条最窄端到端路径：
+
+```text
+Windows Tauri Client
+ -> pair with Linux Agent
+ -> create Wayland session
+ -> WebRTC H.264/Opus
+ -> native-video D3D11 zero-copy helper
+ -> mouse/keyboard DataChannel
+ -> disconnect and release
+```
+
+该切片不包含文件、复杂剪贴板或多显示器。连续运行与资源释放通过后，再进入 M1/M2 产品化。
+
+## 13. 输出物
+
+M0 结束必须交付：
+
+- 九项 Spike 的 decision.md。
+- 依赖与许可证初始清单。
+- 协议 v0 capability 和错误码。
+- Windows/Linux 测试环境镜像说明。
+- 性能基线与网络退化报告。
+- 关键限制和回退 Adapter 决策。
+- 更新后的 M1～M3 范围。
+
+任何关键 Spike 没有结论时，不进入大规模 UI 和业务功能开发。
diff --git a/docs/network-adaptation.md b/docs/network-adaptation.md
new file mode 100644
index 0000000..de5d88b
--- /dev/null
+++ b/docs/network-adaptation.md
@@ -0,0 +1,198 @@
+# RemoteDesk 差网络自适应设计
+
+## 1. 目标
+
+RemoteDesk 在延迟、抖动、随机丢包和突发丢包变化时保持会话可控制。优先级固定为：
+
+```text
+键盘/鼠标按键 > 控制与心跳 > 音频 > 视频实时性 > 视频清晰度 > 剪贴板 > 文件传输
+```
+
+目标不是在任意丢包率下维持最高画质，而是在恶化时快速退化、避免断开，在恢复时平稳升档。
+
+## 2. 两类连接
+
+### 2.1 Linux Native Channel
+
+Linux 桌面使用 WebRTC，可以利用 RTP/RTCP、TWCC、GCC、NACK、RTX、PLI 和 Opus FEC。RemoteDesk 不重新实现底层拥塞控制，只在 GStreamer/WebRTC 的带宽估算上增加产品级质量策略。
+
+同一策略适用于 Direct、Single Edge 和 Dual Edge。质量报告增加 path mode、两端 POP、TURN transport、骨干指标和 ICE restart 次数，用于区分最后一公里问题、POP 间路径问题和端点过载。
+
+### 2.2 Windows RDP
+
+RDP 的网络恢复能力由 IronRDP 协议实现决定。M0 必须验证：
+
+- RDP UDP multitransport。
+- 图形管线在丢包和重连后的恢复行为。
+- 动态调整视觉效果、色深或编码模式的能力。
+- UDP 不可用时 TCP 模式的延迟和队头阻塞表现。
+
+若 IronRDP 尚不支持关键网络能力，差网络场景使用系统 mstsc 回退，并在客户端明确显示当前 Adapter。
+
+## 3. 质量指标
+
+每秒收集原始指标，并计算短期、中期 EWMA：
+
+| 指标 | 来源 | 用途 |
+|---|---|---|
+| RTT | RTCP/DataChannel heartbeat | 交互延迟和重传收益 |
+| Packet loss | RTCP report | 退档和恢复判断 |
+| Jitter | RTCP report | jitter buffer 和帧率判断 |
+| Available bitrate | TWCC/GCC | 编码码率上限 |
+| NACK/RTX rate | RTP feedback | 判断持续丢包与重传成本 |
+| PLI/FIR | decoder feedback | 请求关键帧和诊断解码失败 |
+| Decode/render time | Windows Client | 判断客户端过载而非网络问题 |
+| Send/encode queue | Linux Agent | 判断编码或上行拥塞 |
+| DataChannel buffered amount | SCTP | 限制文件与剪贴板流量 |
+
+网络问题、编码器过载和解码器过载必须分别诊断，不能全部显示成“网络差”。
+
+## 4. 链路状态机
+
+默认状态分级仅作为初始调参基线：
+
+| 状态 | 参考信号 | 行为 |
+|---|---|---|
+| Good | 丢包 <1%，RTT/抖动稳定 | 缓慢提高码率或分辨率 |
+| Fair | 丢包 1%～5% 或抖动上升 | 降低码率，保持分辨率和输入响应 |
+| Poor | 丢包 5%～12% 或连续 PLI | 降帧率/分辨率，启用适合的恢复机制 |
+| Critical | 丢包 >12%、RTT 激增或反馈中断 | 最低视频档，暂停文件传输，准备重连 |
+
+真实决策组合使用可用码率、RTT、抖动和队列，不只看一个丢包数字。
+
+状态转换规则：
+
+- 恶化使用短窗口，连续多个样本后快速降档。
+- 恢复使用更长窗口，稳定后一次只升一档。
+- 刚升档后设置冷却时间，防止立刻回落。
+- 用户设置的最大分辨率、帧率和码率始终是硬上限。
+- 窗口不在前台时主动降低帧率，不归类为网络退化。
+
+## 5. 视频自适应
+
+质量控制器管理三个独立维度：
+
+1. 码率：优先调整，支持编码器运行时更新。
+2. 帧率：动态画面从 60 降至 30/20/15 fps。
+3. 分辨率：码率不足时按档位降采样，不频繁重建会话。
+
+建议的初始阶梯：
+
+```text
+2160p60 -> 2160p30 -> 1440p30 -> 1080p30 -> 720p30 -> 720p15
+```
+
+实际起始档由显示器、编码器和用户上限决定。办公静态桌面可以降低刷新频率但保持较高分辨率；动态画面可以优先保持帧率并降低清晰度。
+
+用户分辨率策略与自适应的关系：
+
+- 自动跟随：稳定窗口尺寸作为当前目标和上限，窗口拖动期间不连续重配编码器。
+- 原始分辨率：源桌面尺寸作为上限；本地窗口缩放不触发源尺寸变化。
+- 固定/自定义：所选宽高是编码目标和硬上限，网络恢复也不能自动升得更高。
+- 允许自适应降档（默认）：Poor/Critical 状态可临时低于用户目标，恢复后逐级回到目标。
+- 锁定分辨率：不自动降尺寸，优先降低码率和帧率；若仍超出带宽则明确提示卡顿/画质风险。
+
+Linux 的自适应只重配 GPU video processor/scaler、DMA-BUF caps 和硬件编码器，不调用 Wayland 合成器设置或 XRandR 改变实体显示模式。分辨率切换保留控制通道，完成后发送新 generation、实际编码尺寸并请求关键帧。Agent 和客户端在新 generation 上重新验证 `EndpointMemoryPath`；若任一端变成 CPU/cross-GPU copy，严格会话暂停媒体并失败，不能为了降分辨率静默破坏零拷贝。接收端在首个新尺寸关键帧到达前保持最后一帧，避免短暂黑屏。
+
+编码器策略：
+
+- 编码码率跟随 GCC target，但保留音频和控制余量。
+- GOP 不宜过长，避免丢失参考帧后长期花屏。
+- 收到 PLI/FIR 时请求 IDR，但限制关键帧频率，防止反馈风暴。
+- 丢弃已过期的待编码帧，实时性优先于完整性。
+- 只在短 RTT 下积极使用 RTX；高 RTT 下过时重传价值较低。
+- FEC 通过能力协商启用，并计入总带宽，不默认无条件开启。
+
+## 6. 音频
+
+- Opus 使用独立 RTP 流和较高优先级。
+- 差网络时优先降低视频，不先中断音频。
+- 按协商结果启用 Opus in-band FEC。
+- 静音或无音频时使用 DTX 降低占用。
+- jitter buffer 自适应但设置交互场景最大延迟上限。
+
+## 7. 输入和控制
+
+输入消息按语义选择可靠性：
+
+| 消息 | 可靠性 |
+|---|---|
+| 键盘按下/释放 | 可靠、有序 |
+| 鼠标按键 | 可靠、有序 |
+| 鼠标绝对位置 | 可丢弃旧值，最新值优先 |
+| 鼠标相对移动 | 短时有序，过期不重传 |
+| 滚轮 | 有序，限制短时合并 |
+| 分辨率/显示器 | 可靠、有序 |
+| 心跳/会话控制 | 可靠、独立 channel |
+
+断线或重连时，客户端与 Agent 交换完整按键/鼠标状态，主动释放可能卡住的按键。
+
+## 8. 剪贴板和文件
+
+- 与输入使用不同 DataChannel，避免队头阻塞。
+- 设置 `bufferedAmount` 高水位，超过后暂停生产数据。
+- Poor 状态限制剪贴板图片和文件带宽。
+- Critical 状态暂停文件传输，但保留取消和状态消息。
+- 恢复后继续按已确认分块序号传输，不重发整个文件。
+- 大量粘贴不能挤占终端交互消息。
+
+## 9. 重连
+
+```text
+Connected
+ -> Degraded
+ -> Reconnecting
+ -> Connected | Failed
+```
+
+- 短时反馈丢失先进入 Degraded，不立即关闭会话。
+- WebRTC 尝试 ICE restart；直接连接环境仍可能因接口变化需要重建 PeerConnection。
+- Direct candidate 失败时可以切换 TURN POP；POP 故障时请求备用 POP credential 后再次 ICE restart。
+- 重连期间 Linux session 进程保留有限时间，编码暂停或降到最低。
+- 成功后先恢复输入/控制，再恢复音频和视频。
+- 重连后请求关键帧，并同步显示器与输入状态。
+- 超过最大宽限期明确结束，不无限占用远端资源。
+
+## 10. 用户设置
+
+提供简单预设，不要求用户理解协议参数：
+
+- 自动：默认，自适应所有档位。
+- 清晰：提高最低分辨率，允许更低帧率。
+- 流畅：保持目标帧率，允许更快降分辨率。
+- 低带宽：限制最大码率、分辨率和文件速度。
+
+分辨率设置独立于画质预设，可选自动跟随、原始、720p、1080p、1440p、4K 或自定义。画质预设只能在分辨率上限以内选择档位，不能覆盖用户设定的上限。
+
+路径策略独立于画质预设：
+
+- 智能优选：默认，并行评分 Direct/Single/Dual。
+- 直连优先：直连达到最低质量门槛时不使用 CDN。
+- CDN 优先：优先双边缘优质骨干，失败后回退其他路径。
+
+高级诊断页可查看 RTT、丢包、抖动、码率、帧率、编码/解码耗时、重传和当前档位，但不允许任意修改危险的底层 RTP 参数。
+
+## 11. 测试
+
+在虚拟化测试网络中通过 Linux bridge/network namespace 和 `tc netem` 注入：
+
+- 随机丢包：1%、3%、5%、10%、15%。
+- 突发丢包：短突发与 Gilbert-Elliott 模型。
+- RTT：30、100、250、500 ms。
+- 抖动：10、30、80 ms。
+- 带宽阶跃：20 Mbps 降到 2 Mbps，再恢复。
+- 重排、重复包和短时完全中断。
+- Direct、TURN UDP、TURN TCP/TLS 和 POP 故障切换。
+- Direct 可用但跨网质量差时选择 Dual Edge，并验证 POP 间骨干路径。
+
+验收目标：
+
+- 5% 随机丢包下会话不主动断开，输入保持可用。
+- 10% 突发丢包后在数秒内降档，不持续花屏。
+- 网络恢复后平稳升档，不发生持续码率振荡。
+- 文件传输不会阻塞键盘、鼠标和心跳。
+- 丢失关键视频参考帧后能通过 PLI/IDR 恢复。
+- 日志可以区分网络、编码和解码瓶颈。
+- 诊断可以区分 Direct/Relay、POP 和 TURN transport。
+
+具体时延和画质阈值在 M0/M3 的真实机器测试后锁定，不能只凭模拟器数据决定。
diff --git a/docs/online-updates.md b/docs/online-updates.md
new file mode 100644
index 0000000..c02db06
--- /dev/null
+++ b/docs/online-updates.md
@@ -0,0 +1,90 @@
+# RemoteDesk 在线升级
+
+## 1. 安全模型
+
+控制端只接受管理员配置的 HTTPS 更新清单和 Ed25519 公钥。CDN 传输不能替代发布签名：客户端先验证清单签名，再验证其中的产品、目标平台和版本，下载 MSI 后还会验证签名清单内的精确文件大小和 SHA-256。任何一步失败都不会启动安装程序。
+
+更新清单使用以下信封格式，`payload` 是原始 UTF-8 JSON 字节的 Base64，避免 JSON 字段顺序或空白变化破坏签名语义：
+
+```json
+{
+  "schema": 1,
+  "payload": "BASE64_SIGNED_JSON",
+  "signature": "BASE64_ED25519_SIGNATURE"
+}
+```
+
+签名载荷包含固定产品名 `remotedesk`、发布通道、三段式版本、发布时间、目标平台、MSI HTTPS URL、文件大小、SHA-256 和可选发行说明。Windows x64 当前使用目标值 `windows-x64`。
+
+## 2. 发布密钥
+
+在隔离的发布环境中生成 Ed25519 PKCS#8 私钥，例如：
+
+```powershell
+openssl genpkey -algorithm Ed25519 -out remotedesk-update-private.pem
+```
+
+私钥不得提交到仓库、写入安装包或上传 CDN。生产环境应把它保存在受审计的 CI 密钥库或离线签名设备中，并限制发布工作流读取权限。
+
+## 3. 生成清单
+
+先完成 MSI 构建和 Authenticode 签名，再生成更新清单。清单中的哈希必须对应最终上传的字节：
+
+```powershell
+node .\packaging\windows\create-update-manifest.mjs `
+  --installer .\artifacts\RemoteDesk-M0-0.3.0-windows-x64.msi `
+  --installer-url https://updates.example.com/stable/RemoteDesk-M0-0.3.0-windows-x64.msi `
+  --private-key C:\secure\remotedesk-update-private.pem `
+  --version 0.3.0 `
+  --notes-file .\release-notes.txt `
+  --output .\artifacts\stable.json `
+  --public-key-output .\artifacts\update-public-key.txt
+```
+
+生成器拒绝覆盖已有清单，避免意外替换已发布元数据。将 MSI 和 `stable.json` 上传到只提供 HTTPS 的静态发布源；清单和安装包 URL 不允许凭据、query 或 fragment。
+
+仓库的 `.github/workflows/release-windows.yml` 把该顺序固化为受保护的标签发布。标签必须精确等于 Cargo workspace 版本，例如 `v0.3.0`。工作流在 `windows-production` environment 中运行，必须配置并限制以下 secrets：
+
+- `WINDOWS_SIGNING_PFX_BASE64`：生产 Authenticode PFX 的 Base64 字节。
+- `WINDOWS_SIGNING_PFX_PASSWORD`：PFX 密码。
+- `UPDATE_ED25519_PRIVATE_KEY_PEM`：Ed25519 PKCS#8 私钥全文。
+- `UPDATE_ED25519_PUBLIC_KEY_BASE64`：预先登记的 32 字节公钥 Base64，用来阻止误用另一把私钥发布。
+
+工作流临时导入 PFX，验证私钥、有效期和 Code Signing EKU，以 SHA-256 和 RFC 3161 时间戳签署控制端内部 EXE、PowerShell helper、控制端 MSI、Windows Host PowerShell 模块和 Host MSI，并在生成任何发布哈希前逐个验签。随后生成 Ed25519 更新清单、SPDX JSON SBOM 和两个 MSI 的 GitHub build provenance attestation，先创建不可变的版本 Release，最后才替换 `stable-channel` Release 中的 `stable.json`。固定清单地址为：
+
+```text
+https://github.com/<owner>/<repository>/releases/download/stable-channel/stable.json
+```
+
+GitHub 资产会重定向到 HTTPS 对象存储；客户端只跟随 HTTPS 且最多三次。`windows-production` 应配置 required reviewers，并保护版本标签的创建权限。工作流缺少任何 secret、标签与源码版本不一致、证书或时间戳无效、最终 MSI 验签失败、公钥不匹配时都会在发布通道更新前失败。
+
+## 4. 控制端配置
+
+在“全局设置 -> 在线升级”中填写清单 HTTPS URL，以及生成器输出的 Base64 公钥并保存。启用“自动检查更新”后，控制端每次启动会检查一次；也可以手动点击“检查更新”。
+
+发现更高版本后，用户确认“下载并安装”，控制服务会：
+
+1. 再次下载并验证签名清单，防止检查和安装之间被替换。
+2. 下载 MSI 到 `%LOCALAPPDATA%\RemoteDesk\updates`，限制最大 1 GiB。
+3. 验证字节数和 SHA-256，启动独立升级 helper。
+4. 返回接受状态后退出控制服务；helper 再次校验哈希并运行 `msiexec /passive /norestart`。
+5. 安装成功后重新启动 RemoteDesk；MSI 日志保存在更新目录。
+
+当前 MSI 的固定 `UpgradeCode` 和 `MajorUpgrade` 规则负责原位升级并拒绝降级。便携预览版也可以检查并安装 MSI，但不会覆盖原便携目录。
+
+## 5. 本地接口
+
+控制端页面通过回环控制服务调用以下接口：
+
+| 接口 | 成功状态 | 用途 |
+|---|---:|---|
+| `GET /api/v1/settings` | 200 | 读取更新 URL、公钥和自动检查开关 |
+| `PUT /api/v1/settings` | 200 | 保存配置；URL 与公钥必须同时提供或同时清空 |
+| `POST /api/v1/update/check` | 200 | 请求体为 `{}`；下载、验签并比较版本 |
+| `POST /api/v1/update/install` | 202 | 请求体为 `{"version":"x.y.z"}`；重新验签、下载并启动退出后安装流程 |
+
+请求 JSON 或字段不合法返回 400；未配置更新源、重复发起安装返回 409；检查阶段的网络、HTTP、清单或签名错误返回 502；安装准备或 helper 启动失败返回 500。所有错误都返回 `{"error":"..."}`，不会在失败后静默安装。
+
+## 6. 正式发布边界
+
+仓库已实现客户端升级机制、签名清单生成器和受保护的 GitHub 标签发布流水线，但不会内置生产私钥、PFX 或把信任公钥静默写入客户端。普通 CI 和本地打包仍明确生成未签名开发包；只有配置上述 environment 和 secrets 的标签工作流会生成正式签名资产。该工作流源码按当前“只开发、不编译/发布”的要求尚未实际执行，首次生产发布仍需审计 environment、证书链、时间戳服务、GitHub Release 下载和真实 MSI 原位升级。
diff --git a/docs/protocol.md b/docs/protocol.md
new file mode 100644
index 0000000..67e40fd
--- /dev/null
+++ b/docs/protocol.md
@@ -0,0 +1,499 @@
+# RemoteDesk 协议设计
+
+## 1. 目标
+
+协议服务于 Windows 客户端与自研 Linux Agent，不用于 Windows RDP。设计目标：
+
+- 设备先配对，再创建桌面或终端会话。
+- 信令、输入、媒体、剪贴板和文件相互隔离。
+- 支持断线恢复、能力协商和动态网络质量。
+- 消息可演进，旧版本能明确拒绝不兼容能力。
+- 所有入口有大小、速率、状态和权限校验。
+
+## 2. 分层
+
+```text
+Application
+├── Pairing / Device authorization
+├── Session lifecycle
+├── Input / Clipboard / File / Terminal
+└── Quality control
+
+Transport
+├── TLS WebSocket              authentication/signaling
+├── WebRTC RTP/RTCP            video/audio/feedback
+└── WebRTC DataChannel         control/data
+```
+
+本地模式由 Agent 监听 TLS WebSocket；边缘模式由 Agent 主动连接 Rendezvous Gateway。WebRTC 媒体和 DataChannel 始终在会话进程与客户端之间建立，agentd/Gateway 只转发 SDP/ICE 信令。
+
+## 3. 协议版本
+
+每个 Envelope 包含：
+
+```protobuf
+message Envelope {
+  uint32 protocol_major = 1;
+  uint32 protocol_minor = 2;
+  bytes message_id = 3;       // 16-byte UUID
+  bytes session_id = 4;       // empty before session creation
+  uint64 sequence = 5;
+  uint64 sender_mono_us = 6;  // only meaningful within one sender
+  MessageType type = 7;
+  bytes payload = 8;
+}
+```
+
+规则：
+
+- 主版本不一致直接返回 `INCOMPATIBLE_PROTOCOL`。
+- 次版本通过 capability bitset 协商。
+- 未识别的可选字段忽略。
+- 未满足的 required capability 导致请求失败，不静默降级。
+- monotonic timestamp 不跨机器比较；RTT 使用带 nonce 的 Ping/Pong 测量。
+- message/session ID 使用随机 UUID，不能由递增数据库 ID 替代。
+
+## 4. WebSocket 帧
+
+- 一个 binary WebSocket message 对应一个 Protobuf Envelope。
+- 默认最大信令消息 1 MiB；握手、输入和控制使用更小的类型级限制。
+- 压缩默认关闭，避免对包含认证数据的消息产生压缩侧信道。
+- 未认证连接只能发送 `ClientHello`、配对相关消息和有限 Ping。
+- 认证前执行连接数、消息速率和失败次数限制。
+
+## 5. 设备配对
+
+### 5.1 设备身份
+
+- Agent 安装时生成长期 Ed25519 设备密钥。
+- Windows 客户端首次启动生成长期客户端设备密钥。
+- 私钥从不通过协议传输。
+- 已配对记录绑定客户端公钥、名称、权限和撤销状态。
+
+### 5.2 首次配对流程
+
+```text
+Windows Client                         Linux agentd/local UI
+      |                                         |
+      |---- TLS ClientHello ------------------->|
+      |<--- AgentHello + cert fingerprint ------|
+      |---- PairStart(pairing code) ------------>|
+      |<--- PairChallenge + nonce ---------------|
+      |---- client key + signed transcript ------>|
+      |<--- local confirmation pending -----------|
+      |       user compares short fingerprint     |
+      |<--- PairAccepted + permissions -----------|
+```
+
+配对码必须限时、限次且只能由 Linux 本地用户开启。双方显示由完整握手 transcript 派生的短指纹，由用户在 Linux 本地确认客户端名称和指纹。最终实现应使用经过审查的 PAKE/安全配对库；不得自行组合加密原语。
+
+### 5.3 后续连接
+
+- 使用已保存设备密钥进行双向认证。
+- TLS certificate/fingerprint 变化时中止自动连接。
+- 每次连接使用新 nonce，签名覆盖双方 nonce、协议版本和 capability digest。
+- 被撤销客户端在认证阶段拒绝，不能进入会话创建。
+
+## 6. 权限模型
+
+配对设备按能力授权：
+
+```text
+DESKTOP_VIEW
+DESKTOP_INPUT
+AUDIO_RECEIVE
+CLIPBOARD_READ
+CLIPBOARD_WRITE
+FILE_SEND_TO_HOST
+FILE_RECEIVE_FROM_HOST
+TERMINAL_OPEN
+TERMINAL_RESUME
+UNATTENDED_REQUEST
+```
+
+桌面查看不隐含输入权限，终端权限不隐含文件权限。权限变化立即增加 `authorization_epoch`；旧 epoch 的会话票据失效。
+
+## 7. 能力协商
+
+客户端和 Agent 交换：
+
+- Session types：Wayland、Xorg、Terminal。
+- Video codecs/profiles/levels。
+- Hardware encode/decode results，不只报告插件名称。
+- Raw-frame memory paths：DMA-BUF/D3D11 surface、GPU copy、CPU upload、software，以及是否经过短帧验证。
+- Agent GPU/DRM identity、DMA-BUF modifier/import 与硬件编码器的同设备匹配结果。
+- Audio codec 和 FEC/DTX。
+- Display count、尺寸、scale 和 capture type。
+- Input types：absolute、relative、keyboard、touch。
+- Clipboard MIME types 和最大大小。
+- RTX/NACK/FEC/TWCC 支持。
+- Portal permission level 和恢复能力。
+
+能力摘要使用稳定排序后计算 digest，创建会话时将 digest 写入票据，避免协商过程被替换。
+
+## 8. 会话创建
+
+### 8.1 请求
+
+`CreateSessionRequest` 至少包含：
+
+```text
+request_id
+session_type
+target_user
+requested_permissions
+display_selection
+quality_profile
+zero_copy_policy: required_end_to_end | compatibility
+client_capabilities_digest
+```
+
+`required_end_to_end` 是 Linux 图形会话默认值。Agent 在捕获/缩放/编码端、native-video helper 在解码/呈现端分别发送带 generation 的 `EndpointMemoryPath`；SessionController 只有在两端均为经过验证的 `zero_copy` 后才进入 Connected。任一端报告 `gpu_copy`、`cpu_upload`、`software` 或 `opaque_gpu_path` 都使协商失败。`compatibility` 必须由用户显式选择，不能由远端或自动重连自行降低策略。
+
+```text
+EndpointMemoryPath:
+endpoint: agent_encode | client_render
+generation
+status: zero_copy | gpu_copy | cpu_upload | software | opaque_gpu_path
+adapter_identity
+capture_device_identity
+surface_type: dmabuf | d3d11 | cpu | opaque
+cpu_map_count
+cross_adapter_copy_count
+verification_source
+```
+
+切换显示器、GPU、编码器、decoder 或分辨率会递增 generation，并使旧验证立即失效。两端必须重新报告；计数非零或验证信息缺失时不能进入严格 Connected 状态。
+
+agentd 完成设备权限、目标用户、会话存在性和并发限制校验后，签发短期单次使用的 Session Ticket。
+
+### 8.2 Ticket
+
+Ticket 绑定：
+
+- client public key hash。
+- session ID/type/target UID。
+- permission bitset 和 authorization epoch。
+- issue/expiry time。
+- 一次性 nonce。
+- capability digest。
+
+Session 进程只接受 agentd 签名且未过期的 Ticket。Ticket 使用一次后进入短期 replay cache。
+
+### 8.3 生命周期
+
+```text
+CREATED -> AUTHORIZING -> NEGOTIATING -> CONNECTED
+                                      -> DEGRADED
+                                      -> RECONNECTING
+                                      -> CLOSING -> CLOSED
+                       failures ----------------> FAILED
+```
+
+所有状态变化包含 reason code、可重试标记和用户安全展示文本 ID。不得仅发送任意字符串错误。
+
+### 8.4 多显示器布局
+
+显示拓扑是独立、带版本的安全边界：
+
+```text
+DisplayLayout:
+  generation
+  displays[]:
+    stable_id: 16 bytes
+    rect: x, y, width, height
+    scale: numerator / denominator
+    is_primary
+
+DisplaySelection:
+  layout_generation
+  mode: single | all | custom
+  display_ids[]
+```
+
+坐标使用物理桌面像素，主屏原点固定为 `(0, 0)`；位于主屏左侧或上方的显示器使用负坐标。布局必须恰好有一个主屏，并拒绝空布局、重复 ID、零尺寸、无效缩放、坐标端点溢出和累计像素数溢出。自定义选择拒绝空集合、重复/未知 ID 以及 generation 不匹配。
+
+显示器热插拔、位置、旋转、DPI、分辨率或主屏变化都会发布新 generation。输入、捕获选择、分辨率请求和零拷贝报告必须绑定同一 generation；收到旧 generation 时丢弃请求并重新同步，不能按数组序号猜测显示器身份。
+
+Windows RDP helper 把验证后的本地布局映射为 Display Control Dynamic Monitor Layout。Linux Agent 把同一选择模型映射到 Portal/PipeWire 或 XRandR 捕获源，但不会修改 Linux 实体显示模式。
+
+## 9. WebRTC 信令
+
+- Offer/Answer 和 ICE candidate 放入 Protobuf 信令消息。
+- SDP 大小和 candidate 数量有限制。
+- DTLS fingerprint 必须与 Session Ticket/握手身份绑定。
+- ICE 优先直连，并接受 Allocator 签发的短期 TURN credential。
+- Allocator 返回 `DIRECT/SINGLE_EDGE/DUAL_EDGE` 候选路径、Client/Agent POP 和路径 generation。
+- 智能优选可以让两个端点使用不同 relay candidate，经供应商骨干连接两个 POP。
+- TURN credential 绑定 POP、session/allocation、有效期和配额，不能替代 Session Ticket。
+- 边缘 Gateway 只路由已签名请求，Agent 仍是最终授权方。
+- 网络接口变化可以触发 ICE restart；失败后重建 PeerConnection。
+- 路径变化使用递增 generation，旧 POP 探测和 credential 结果不得覆盖新选择。
+
+当前 Edge HTTP 信令边界使用域隔离的 `EdgeNegotiationEnvelopeV1`，只允许已被 Agent 接受且仍有效的 Session Intent 建立 mailbox。send/poll 都由对应 Client 或 Agent Ed25519 key 签名；签名覆盖 request ID、session ID、端点角色、操作、sequence、generation、消息类型、payload、nonce、签发和过期时间。send sequence 从 1 开始并按端点严格递增；共享 generation 从 1 开始，只有 `restart` 可精确加一；poll 的 sequence 是已消费的 peer cursor。服务端拒绝过期、重放、跨会话、跨角色、乱序、错误 generation 和超限消息，只返回 peer 产生的消息。
+
+资源上限为 SDP 128 KiB、单 candidate 4 KiB、每端点每 generation 128 candidates、每会话 512 消息、单次 poll 64 条且 payload 最多 192 KiB、最多 1024 活跃 mailbox 和总 payload 8 MiB。该 mailbox 只完成控制信令转发；DTLS fingerprint、TURN credential 和最终媒体连接仍必须由端点 WebRTC 层验证。
+
+### 9.1 Edge Path Messages
+
+边缘路径协商增加：
+
+```text
+PathProbeRequest(candidate_pops, token, expires_at)
+PathProbeReport(endpoint, pop, udp/tcp/tls metrics, token)
+BackboneMetric(pop_a, pop_b, rtt/loss/jitter, provider_signature)
+PathSelection(mode, client_pop, agent_pop, transport, generation)
+RelayCredential(pop, endpoint, allocation_id, expires_at, quota)
+PathSwitchRequest(old_generation, candidates, reason)
+```
+
+端点探测只代表最后一公里；POP 间骨干指标必须来自受信控制面或供应商测量，不能由客户端任意声明。`PathSelection` 不授予会话权限，必须与有效 Session Ticket 同时使用。
+
+## 10. DataChannel
+
+| Channel | ordered | retransmit | 优先级 |
+|---|---:|---:|---:|
+| control | 是 | 无限/连接级超时 | 最高 |
+| key_button | 是 | 有限时间可靠 | 最高 |
+| pointer_motion | 否 | 0 或极低 | 高 |
+| terminal | 是 | 可靠 | 高 |
+| clipboard | 是 | 可靠 | 低 |
+| file | 是 | 可靠 | 最低 |
+
+键盘按键与鼠标按钮不能与高频移动共用不可靠 channel。SCTP buffered amount 达到高水位时，文件和剪贴板生产者暂停。
+
+## 11. 输入协议
+
+键盘事件：
+
+```text
+event_id
+hid_usage
+pressed
+modifiers
+layout_id
+unicode_text optional
+```
+
+鼠标事件：
+
+```text
+event_id
+mode absolute|relative
+display_id
+topology_version
+x/y or dx/dy
+buttons
+wheel_x/wheel_y
+```
+
+绝对坐标使用固定整数范围归一化，避免浮点差异。显示器拓扑版本不匹配时丢弃位置事件并请求最新拓扑。重连、失焦和断开时交换完整按键状态，释放可能卡住的键。
+
+## 12. 质量控制协议
+
+分辨率控制使用可靠、有序的 Control DataChannel。客户端先读取 `DisplayCapabilities`：
+
+```text
+display_ids/topology_version
+source_width/source_height
+min_width/min_height
+max_width/max_height
+max_pixels
+width_alignment/height_alignment
+dynamic_reconfigure
+supported_modes: follow_window | source_native | fixed
+```
+
+客户端发送 `ResolutionRequest`，Agent 返回 `ResolutionApplied` 或结构化错误：
+
+```text
+request_id
+generation
+mode
+target_width/target_height optional
+adaptive_downscale
+topology_version
+
+ResolutionApplied:
+request_id/generation
+source_width/source_height
+encoded_width/encoded_height
+reason: requested | network_downscale | capability_clamp | source_changed
+```
+
+宽高在进入媒体管线前校验并按编码器约束对齐，不能由 Agent 静默放大到超出用户目标。旧 generation 的请求和确认均忽略。Linux 的请求只改变编码尺寸，不代表修改 Wayland/Xorg 的实体显示模式。RDP 使用相同的客户端状态模型，但请求由 RDP helper 映射到 Display Control，而不是发给 Linux Agent。
+
+Agent 周期性发送 `QualityReport`：
+
+```text
+rtt_ms
+loss_fraction
+jitter_ms
+gcc_target_bps
+nack_rate
+pli_count
+encode_time_ms
+send_queue_ms
+current_ladder
+source_width/source_height
+encoded_width/encoded_height
+resolution_generation
+capture_memory_path
+encode_memory_path
+client_render_memory_path
+zero_copy_verified
+```
+
+客户端返回 decode/render time、dropped frames 和 DataChannel buffer。质量档位切换消息带 generation，旧 generation 的异步结果忽略。媒体自适应细节见 `network-adaptation.md`。
+
+## 13. 剪贴板
+
+- Offer/Request/Data 三阶段，不收到 Request 不发送内容。
+- 文本第一版只支持 UTF-8 plain text。
+- MIME type allowlist 和单项大小限制。
+- 内容带 content hash，重复内容不循环同步。
+- 本地/远端 sequence 防止双方互相回写。
+- 权限撤销、锁屏或会话结束立即清理缓冲。
+
+协议 minor 15 将文本剪贴板接入 X11 桌面会话。`begin_direct_web_rtc` 和 `open_desktop` 新增默认关闭的 `clipboard_read`、`clipboard_write`，分别表示 Client 可读取被控端剪贴板、可写入被控端剪贴板；agentd 必须再次对照配对授权检查方向，并只透明转发结构化消息，root 进程不得读取内容。发送方先用单调非零 sequence、UTF-8 字节数和小写 SHA-256 发送 `DesktopClipboardOffer`，接收方验证 32 KiB 上限后以同 sequence 请求，发送方才返回无 padding 的 canonical Base64 `DesktopClipboardData`。接收方将 Data 与当前待处理 Offer 的 sequence、长度和摘要绑定，拒绝无效 UTF-8、NUL、非规范 Base64、CR/CRLF 未规范化或摘要不匹配的内容。双方记录最近应用/发出的摘要，避免系统剪贴板所有权变化造成回写循环；只保留最新待请求内容。minor 14 及更早客户端缺少协商字段时两方向均为 `false`。当前源码实现 X11 与 Windows `CF_UNICODETEXT`，Wayland Portal 剪贴板尚未接入。
+
+## 14. 文件传输
+
+```text
+FileOffer -> Accept(path policy) -> Chunk* -> Complete(hash)
+          -> Reject/Cancel
+```
+
+- 文件名是名称，不允许携带绝对路径或 `..`。
+- Agent 生成目标临时路径，完成哈希校验后原子改名。
+- Chunk 使用固定最大大小和 offset，支持已确认范围恢复。
+- 总大小、并发数、速率和磁盘剩余空间均有限制。
+- 软链接、特殊文件和设备节点默认拒绝。
+- Critical 网络状态暂停数据块但保留控制消息。
+
+当前文件协议 minor 4 的上传请求包含由 Client 对 target user、相对路径、声明大小和整文件 SHA-256 派生的稳定 transfer ID。Agent 不信任 Client 提供 offset；降权 file helper 只打开目标目录中该 ID 对应的普通 partial 文件，读取实际长度并哈希已有前缀，再通过 `FileReady.offset` 返回。中断时保留 partial，续传只接收剩余字节；达到声明大小但整文件 SHA-256 不符时删除 partial，成功时才原子替换目标。
+
+协议 minor 5 增加 X11 桌面兼容传输。`OpenDesktop` 绑定授权普通用户、最大宽高和 1..30 FPS；会话中的 `DesktopResize` 可把最大宽高重配为 200..8192。Client 合并连续窗口变化后发送最终尺寸，Agent 在当前帧收到 `DesktopFrameAck` 后才按新上限捕获下一帧，不修改 Xorg 的实体显示模式。每帧先发送 `DesktopFrameStart`，再发送严格递增的 45 KiB `DesktopFrameChunk`，最后用 `DesktopFrameComplete` 携带未压缩 BGRA 的 SHA-256。Client 只有在分块数量、压缩长度、解压后精确字节数和 SHA-256 全部匹配且窗口成功呈现后才发送 `DesktopFrameAck`；Agent 在收到该 ACK 前不捕获下一帧。`DesktopPing/DesktopPong` 在当前 WSS 或 Edge relay 会话内测量实际往返时间，不依赖两端时钟。单帧最多 33,177,600 像素、128 MiB 未压缩数据和 64 MiB 压缩数据，解压读取使用精确上限防止压缩炸弹。
+
+桌面输入使用 `DesktopInput`，包含绝对指针、五键鼠标、水平/垂直滚轮、X11 keysym 按下/释放和 `release_all`。Agent 根据当前用户 X server 的 keyboard mapping 将 keysym 转为 keycode，客户端不能直接注入平台相关 X keycode。桌面断开、窗口失焦和退出都会释放 Agent 跟踪的按键状态。
+
+协议 minor 6 为 X11 兼容链路增加短时会话续接。首次 `OpenDesktop` 不携带令牌，用户会话进程生成 32 字节随机 URL-safe Base64 令牌，并在 `DesktopOpened` 返回；agentd 从已完成 Ed25519 认证的 `ClientGrant` 注入客户端指纹，远程请求不能自行指定该绑定。WSS 或 Edge relay 异常断开时立即释放 XTEST 输入状态，丢弃未完成帧和 ACK，但保留 X11 连接、递增帧序列和自适应 pacer 15 秒。Client 按 1、2、4 秒有界重连，重新执行证书固定和 Client 身份认证，Edge 路径重新申请一次性 relay 票据，再以同一用户和令牌调用 `OpenDesktop`。只有令牌、客户端指纹、目标用户和有效期全部匹配才恢复；成功后令牌立即旋转，旧令牌不可重放。Windows Client 还把最新令牌保存到当前用户 Credential Manager，并按 Agent TLS 证书指纹和 Linux 用户隔离；helper 进程异常退出后，在 15 秒租约内以相同身份重新启动可读取令牌继续会话。正常关闭、服务端关闭或恢复拒绝会删除该记录，令牌不进入 argv、浏览器状态或普通文件。恢复从新的完整帧边界开始，不重放断线期间的输入、帧分块或 ACK。命令解析、状态校验、采集或输入注入失败也统一释放 XTEST 输入，但不建立恢复租约；正常 `Close` 同样不创建租约。
+
+协议 minor 7 在 `DesktopFrameMetadata` 增加实际 `compression_level`。X11 兼容链路从 zlib level 1 启动：连续两个慢呈现 ACK 且最近编码耗时不超过当前帧预算三分之一时，逐级提高压缩至最多 6；连续两帧编码耗时超过帧预算一半时逐级降低；连续 60 个在帧预算内完成的 ACK 后逐级回到 level 1。等级和帧率控制器都使用真实编码计时与呈现 ACK，状态随 15 秒恢复租约保留。每帧诊断同时报告等级、压缩后/未压缩字节比例和编码耗时，客户端仍按元数据长度上限、精确解压长度与 SHA-256 完整性验证后才呈现。
+
+协议 minor 8 为桌面打开命令增加签名 Intent 的 `edge_session_id` 和 Agentd 到用户会话的显式 `webrtc_h264` 协商位，并增加 `DesktopH264Start/Chunk/Complete/Unavailable` 内部事件。Agentd 只有在 session ID、过期时间、目标用户和已认证 Client 指纹全部匹配时才单次消费 WebRTC sender，直连请求不能取走 Edge sender。每个 Annex-B access unit 独立声明尺寸、时长、关键帧、编码耗时、编码器和分块数；Agentd 按 16 MiB AU 上限、45 KiB 分块、严格顺序、canonical base64、精确长度及 SHA-256 验证后才发送。
+
+协议 minor 9 增加显式 `DesktopVideoMode`、`DesktopVideoModeChanged` 和 `DesktopH264FrameAck`。Client 只有在实际呈现第一张原生 H.264 帧后才请求 `webrtc_h264` 模式；用户会话会等待当前 zlib 帧的呈现 ACK，在完整帧边界确认切换。确认后每次捕获只发送 H.264，不再编码或传输完整 zlib 帧，并等待对应 sequence 的 H.264 呈现 ACK 后才捕获下一帧。Agentd 只向 Client 转发 H.264 Start 元数据用于 sequence 绑定、采集和编码遥测，Chunk/Complete 仍仅在 root/user IPC 内使用。RTP 序号中断会立即产生恢复事件并切回 zlib，同时继续监听关键帧以便重新进入原生模式；客户端解码失败、媒体邮箱积压、轨道结束、sender/encoder 失败或三秒内未收到 H.264 ACK 时也显式回退。服务端确认回退后从下一张完整帧恢复兼容传输。zlib ACK 有五秒绝对上限，错误类型或旧 sequence 的 ACK 不推进采集节奏。
+
+协议 minor 10 为 X11 桌面输入增加 `pointer_delta`。Windows helper 只有在用户启用相对鼠标并成功抓取当前窗口光标后才读取 Raw Input；同一事件循环批次的位移会合并，保留小数余量，并将每轴单消息限制为 `-4096..4096`。零位移、越界值和未知字段由 Agent 拒绝。X11 用户会话使用 XTEST `root=None` 的相对移动语义，不把相对量误当成缩放后的绝对坐标。`Ctrl+Alt+Home` 在本地切换捕获；失焦、重连、全屏切换和退出都会释放远端按键/按钮，失焦、重连和退出还会解除光标抓取并丢弃未发送位移。
+
+协议 minor 11 为 `DesktopFrameEncoding` 增加 `webrtc_h264`，用于没有 zlib 原始帧回退的 Wayland 严格媒体会话。Agent 只有在认证后的 Portal 返回单个有效 PipeWire stream、DMABUF 到 VA surface/H.264 管线产生首个 IDR、EIS Sender 完成 seat/device/keymap 协商且 Agentd 已绑定对应 WebRTC sender 后才发送 `DesktopOpened`。每个 H.264 sequence 由实际呈现后的 `DesktopH264FrameAck` 推进；`DesktopResize` 在上一帧 ACK 后先停止旧管线，再重建管线并等待新 IDR。绝对输入必须匹配 Portal stream 与 EIS region 的 `mapping_id`；相对指针、五键、滚轮和键盘通过同一 EIS emulation 生命周期提交。严格管线不允许退回 CPU BGRA，协商或客户端硬解失败会结束该 Wayland 会话。
+
+协议 minor 12 为 `webrtc_h264` 会话启用与 X11 相同的轮换恢复令牌语义。意外断线立即释放全部 EIS 输入并销毁旧编码器，但用户会话进程最多保留 Portal、PipeWire remote 和 EIS 连接 15 秒；租约同时绑定 Agentd 注入的已认证 Client 指纹和目标 Linux 用户。Client 仅对 minor 12 及以上持久化该令牌。恢复连接必须先建立并授权新的 WebRTC sender，提交相同绑定的令牌后 Agent 才消费租约、重建严格编码器、等待新 IDR 并以连续递增的 sequence 返回 `DesktopOpened(resumed=true)`。令牌在每次恢复时轮换；错误令牌、不同 Client/用户、显式关闭、ACK 超时、输入/编码错误或租约到期都会拒绝恢复并显式关闭 Portal。
+
+协议 minor 13 增加认证 WSS 内的直连 WebRTC 信令。Client 先发送绑定目标用户、尺寸和帧率的 `begin_direct_web_rtc`，Agent 完成现有桌面权限校验后返回 ready；后续 `direct_web_rtc_signal` 只接受严格有界的 offer、answer、ICE candidate 和 `ice_end`。双方只有在 PeerConnection connected、本地 `ice_end` 已发送且远端 `ice_end` 已消费后才离开信令阶段，从而保证后续 `OpenDesktop` 不会与残留 ICE 消息混用。`OpenDesktop` 的用户、尺寸和帧率必须与授权阶段完全一致，Client 指纹仍由 Agent 注入。直连仅使用 host candidates，不依赖 Edge/TURN；失败时 Client 发送 `abort_direct_web_rtc`，Agent 返回一次 `direct_web_rtc_unavailable` 后才允许 `OpenDesktop(webrtc_h264=false)` 进入 X11 zlib。Wayland 不接受该软件回退。成功时 Agent 直接把本次 PeerConnection 的 H.264 sender 交给用户会话代理，并在桌面结束或任一代理错误后显式关闭 ICE/DTLS/SRTP。
+
+协议 minor 14 为 `begin_direct_web_rtc` 和 `open_desktop` 增加默认关闭的 `opus_audio`。Client 只有在对端 minor 不低于 14 且本次 WebRTC 媒体会话存在时才发送 `true`；minor 13 及更早 JSON 缺少该字段时反序列化为 `false`。直连授权把音频选择与 Client 指纹、用户、尺寸和帧率一同绑定，失败回退时视频和音频都必须关闭；Edge 路径也只在请求显式开启且取到绑定当前 session/user/Client 的媒体 sender 后向用户会话注入 `true`。未协商音频时用户会话不启动系统输出捕获，agentd 不向 Client 转发任何 Opus packet/unavailable 事件。协商后 Linux 用户会话仅捕获 Pulse/PipeWire 的默认输出 monitor（或经严格名称校验的管理员覆盖），编码为 48 kHz 双声道、20 ms、96 kbps Opus；每包限制 4 KiB，序号、时长、编码耗时和 canonical Base64 在 root/user IPC 边界重新校验。音频 sender 或 Windows 本地解码/播放失败只关闭音频，不中断 H.264 或 zlib 视频。
+
+X11 用户会话把请求的 1..30 FPS 视为上限，并使用“帧写入 IPC 完成到客户端成功呈现 ACK”的真实反馈调整捕获节奏。连续两帧 ACK 超过当前帧预算两倍或 250 ms 时将目标速率降为当前值的约 75%，最低 1 FPS；连续 30 帧在预算内时每次恢复 1 FPS，最高不超过请求值。档位变化从新的完整周期开始，输入、Ping/Pong 和关闭消息不受帧计时器限制；丢失、错误序列或未呈现的帧不会被当作快速样本。
+
+客户端主动退出时先发送 `release_all` 和 `Close`。用户会话进程完成 XTEST 按键/按钮释放后返回 `DesktopClosed { reason: "client_closed" }`，system Agent 最多等待 2 秒并转发该终止事件；控制端在收到关闭握手或超时后关闭 WebSocket。窗口仅保留 `Ctrl+Alt+F` 全屏切换，其他键盘事件直接进入远端输入链路。
+
+下载请求携带本地隐藏 partial 的实际长度。Agent 按远端文件真实大小拒绝越界 offset，返回同一 offset、完整大小和 SHA-256，并只发送剩余区间。Client 在追加前重新读取并哈希已有前缀，完成后校验前缀与新增数据组成的整文件哈希；不匹配时删除 partial，匹配后才原子改名。partial 路径不允许替代已存在的最终目标。
+
+## 15. 终端协议
+
+终端消息包括：
+
+- PTY output bytes。
+- Client input bytes。
+- Resize(cols, rows, pixel width/height optional)。
+- Signal(INT/TERM/HUP allowlist)。
+- Exit(code/signal/core flag)。
+- Resume(last received sequence)。
+
+协议传输字节而非命令字符串，Agent 不拼接 shell 命令。输出环形缓冲区有固定上限，超过后返回 `OUTPUT_GAP`，客户端明确提示丢失历史输出。
+
+## 16. 重连与幂等
+
+- Create/Close/Transfer 等请求携带 request ID，Agent 维护短期幂等缓存。
+- 会话租约由 heartbeat 延长，断线后进入有限 grace period。
+- 重连请求携带 session ID、resume token 和各 channel 最后确认 sequence。
+- 输入事件默认不跨断线重放；终端/文件按各自序号恢复。
+- 恢复成功后请求视频 IDR 并重新同步显示器、权限和输入状态。
+
+## 17. 错误模型
+
+错误分为：
+
+```text
+AUTH_*          配对、证书、票据、权限
+SESSION_*       类型、状态、并发、用户会话
+CAPABILITY_*    编码、Portal、显示器、输入
+MEDIA_*         捕获、编码、WebRTC、解码
+TERMINAL_*      PAM、PTY、Shell、退出
+FILE_*          路径、空间、哈希、权限
+NETWORK_*       超时、重连、协商
+INTERNAL_*      非预期内部错误
+```
+
+错误包含稳定 code、retryable、retry delay 和 correlation ID。内部路径、堆栈和密钥信息不发送给远端。
+
+## 18. 资源限制
+
+实现前锁定默认上限：
+
+- 未认证连接数和每 IP 配对尝试。
+- 每设备并发桌面/终端会话。
+- Protobuf message、SDP、candidate 和字符串长度。
+- 分辨率宽高、总像素、像素率和运行时重配频率。
+- 剪贴板、文件、终端输出缓存和日志大小。
+- DataChannel buffered amount。
+- 会话创建、Portal 授权、协商和重连超时。
+
+上限由安全配置决定，远端请求只能降低，不能提高系统硬限制。
+
+## 19. 测试
+
+- Protobuf golden vectors 与 round-trip。
+- 主/次版本兼容和 unknown fields。
+- 状态机非法转换的 property tests。
+- 重复 request、过期 Ticket 和 replay。
+- 截断、超长、乱序和未知消息 fuzz。
+- 输入断线后的卡键恢复。
+- 文件路径穿越、磁盘不足和 hash mismatch。
+- DataChannel 拥塞时输入优先级。
+- 协议日志脱敏测试。
+# Windows Agent software fallback
+
+Windows Agent advertises `dxgi-desktop-duplication-strict` as its preferred capture backend. A
+controller may explicitly opt in to the lower-performance fallback by sending one JSON line:
+
+```json
+{"kind":"open_desktop","allow_software_fallback":true,"frames_per_second":10}
+```
+
+The fallback is never selected implicitly. RDWF v1 uses a 24-byte little-endian header. RDWF v2
+uses a 40-byte header followed immediately by the zlib payload:
+
+| Offset | Size | Value |
+| --- | ---: | --- |
+| 0 | 4 | ASCII `RDWF` |
+| 4 | 1 | Protocol version (`2`; readers also accept `1`) |
+| 5 | 1 | Codec (`1` = BGRA8 + zlib) |
+| 6 | 2 | Reserved (`0`) |
+| 8 | 4 | Width |
+| 12 | 4 | Height |
+| 16 | 4 | Uncompressed BGRA byte length |
+| 20 | 4 | Compressed payload byte length |
+| 24 | 8 | GDI capture latency in microseconds (v2) |
+| 32 | 8 | zlib encode latency in microseconds (v2) |
+
+BGRA rows are top-down and tightly packed at four bytes per pixel. The Agent caps the fallback at
+15 FPS, a 16384-pixel dimension, and 256 MiB for both raw and compressed frames.
+
+The Windows Agent viewer validates the header and lengths before allocating, inflates the zlib
+payload, converts BGRA8 to the local softbuffer surface, and reports decode/presentation timing in
+the session diagnostics endpoint. The control service starts it through
+`POST /api/v1/windows-agent/desktop/launch` and exposes diagnostics at
+`GET /api/v1/windows-agent/session/{session_id}`.
diff --git a/docs/roadmap.md b/docs/roadmap.md
new file mode 100644
index 0000000..fee4794
--- /dev/null
+++ b/docs/roadmap.md
@@ -0,0 +1,187 @@
+# RemoteDesk 实施路线
+
+路线按风险优先，而不是按界面完成度排序。最先验证 Agent 与客户端原生 helper 的双端零拷贝、IronRDP、Wayland Portal、Xorg DRI3、PTY 和差网络自适应等核心技术。
+
+## M0：技术验证
+
+目标：确认架构可以落地，不制作完整产品界面。
+
+九项独立实验、通过标准和回退决策见 [M0 技术验证计划](m0-validation.md)。
+
+- 建立 Tauri/React Client、统一 Rust workspace 和 Linux Agent。
+- 验证 native-video helper 的 D3D11 解码、surface 和呈现零拷贝。
+- RDP viewer 已完成安全 Named Pipe、Job Object 和握手失败诊断源码接线；继续完成 Windows 编译/伪造客户端/控制服务崩溃验收，以及 native-video/Tauri 的同类运行时接入。
+- 验证自动跟随、固定/自定义分辨率、动态切换、键鼠和剪贴板。
+- 在 GNOME Wayland 中通过 Portal 获取 PipeWire 画面。
+- 通过 libei/Portal 发送输入。
+- 在 Xorg 中通过 XComposite/DRI3/XDamage 零拷贝获取画面并通过 XTest 发送输入。
+- 在无桌面 Linux 中创建降权 PTY，并由 xterm.js 正确显示 UTF-8 终端。
+- 验证 H.264 硬件编码、解码和 WebRTC 直连。
+- 验证 Wayland DMA-BUF 到硬件编码器、原生 D3D11 解码到呈现的零拷贝路径。
+- 验证 1%～15% 随机/突发丢包下的码率、帧率和分辨率调整。
+- 测量 1080p60 下的复制次数、CPU/GPU 占用和延迟。
+
+验收标准：
+
+- Windows RDP 会话可连续运行 2 小时，无崩溃和明显内存增长。
+- IronRDP 完成 NLA、动态分辨率、剪贴板和 UDP multitransport 能力报告。
+- GNOME 当前会话可在用户授权后显示并控制。
+- Xorg 当前会话可显示并完成基础键鼠控制。
+- 无桌面 Linux 可创建普通用户 PTY，退出后无残留进程。
+- 输入通道不被视频编码阻塞。
+- WebView2 crash 不终止主程序，helper crash 不影响其他会话。
+- 默认 Linux 图形会话只有 Agent/client 两端均验证 `zero_copy` 后才能连接。
+- 形成技术验证报告并确定最终媒体库组合。
+
+## M1：Windows RDP MVP
+
+目标：交付可日常使用的 Windows 远程客户端。
+
+- 主机列表、新建/编辑/删除配置。
+- 系统密钥库保存凭据。
+- NLA/TLS、证书指纹确认。
+- 全屏、本地缩放、自动跟随、固定/自定义分辨率和剪贴板。
+- 音频播放和基础多显示器。
+- 断线原因、手动重连和有限自动重连。
+- Windows 客户端安装包和基础诊断日志。
+
+验收标准：
+
+- 可连接 Windows 11 Pro 和 Windows Server。
+- 密码不出现在 SQLite、日志或导出配置中。
+- 证书变化会阻断自动连接。
+- 中文键盘与剪贴板通过专项测试。
+
+## M2：Linux Agent 基础
+
+目标：建立完全自研的 Linux 被控端，不依赖任何 Linux RDP 服务。
+
+- `remotedesk-agentd` systemd 系统服务。
+- `remotedesk-agent-session` 用户会话服务。
+- `remotedesk-shell-session` 降权终端会话进程。
+- Unix Socket IPC、进程身份校验和版本握手。
+- 一次性配对码、设备公钥、授权列表和撤销。
+- Agent 能力、桌面类型和 Portal 支持检测。
+- Windows 客户端与 Agent 的 TLS WebSocket 信令。
+
+验收标准：
+
+- 系统服务不读取或处理桌面画面和剪贴板。
+- 未配对客户端无法创建会话。
+- 至少两种主流发行版完成安装、升级和卸载测试。
+- 不安装或调用 xrdp、GNOME Remote Desktop、KRdp。
+
+## M3：Linux 桌面 Agent
+
+目标：通过自研 Agent 控制 Wayland 和 Xorg 当前用户会话。
+
+- Agent 配对、设备密钥和撤销。
+- Portal/PipeWire 捕获与 libei 输入。
+- XComposite/DRI3/XDamage 捕获、XRandR 显示器和 XTest 输入；XShm 仅显式兼容模式。
+- H.264/Opus WebRTC 会话。
+- Native Video 默认 D3D11 零拷贝渲染，WebView2 `<video>` 仅显式兼容模式。
+- Wayland/Xorg Agent 与 Windows 客户端默认双端严格零拷贝，非零拷贝路径不自动回退。
+- 自适应分辨率、帧率和码率。
+- 分辨率菜单、主机级保存、锁定策略，并保证 Linux 不改变实体显示模式。
+- TWCC/GCC 反馈、NACK/RTX、PLI 和关键帧恢复。
+- 输入/音频优先，严重丢包时限制文件与剪贴板流量。
+- 文本剪贴板、会话通知和用户主动终止。
+- Linux 被控端用户级 Agent 安装包，不包含客户端 UI。
+
+验收标准：
+
+- GNOME、KDE 各完成一次自研 Agent 的 Wayland Portal 模式端到端验证。
+- 至少一个 Xorg DRI3 桌面完成零拷贝 1080p60、输入和分辨率变化验证。
+- 用户拒绝授权时不会降级为隐蔽捕获。
+- 1080p60 可稳定运行 4 小时。
+- Wayland DMA-BUF、Xorg DRI3 和客户端 D3D11 均由 tracer/perf/ETW/驱动指标验证零拷贝。
+- 配对撤销后旧客户端无法重连。
+- 5% 丢包不主动断开，10% 突发丢包能自动降档并在恢复后稳定升档。
+
+## M4：Linux 命令行
+
+目标：支持没有图形环境的 Linux 被控端。
+
+- 配对权限中增加独立的终端权限。
+- PAM 会话、目标 UID/GID 降权和 PTY 生命周期。
+- xterm.js、UTF-8、ANSI、窗口尺寸和信号。
+- 断线宽限期、会话恢复和有限输出缓冲。
+- shell、工作目录和环境白名单。
+- sudo 交互兼容，但不绕过系统提权策略。
+
+验收标准：
+
+- 无桌面 Debian/Ubuntu Server 可以被 Windows 客户端控制。
+- 命令进程以目标普通用户运行，不能直接创建 root Shell。
+- 中文、颜色、全屏终端程序和窗口缩放通过测试。
+- 客户端撤销终端权限后不能创建或恢复终端会话。
+
+## M5：体验和性能
+
+目标：从“能连接”提升到稳定的日常工具。
+
+- GPU 纹理路径和脏矩形渲染。
+- GPU 默认自动选择、全局手动选择和单主机覆盖。
+- 手动 Linux GPU 自动切换 Native Video Helper。
+- HEVC/AV1 能力协商。
+- 多显示器与 HiDPI 完善。
+- 麦克风、图片剪贴板和可控文件传输。
+- 质量预设、实时统计和诊断包。
+- 网络质量状态、码率阶梯、恢复迟滞和手动质量上限。
+- 崩溃恢复、更新检查和依赖 SBOM。
+
+验收标准：
+
+- 4K 办公场景可以使用硬件编解码。
+- 会话运行 8 小时无持续资源增长。
+- 所有重定向能力均可按主机独立关闭。
+
+## M6：CDN 边缘中继
+
+目标：在直连不可用或质量不足时，通过边缘 TURN POP 保持远程会话。
+
+- Rust Rendezvous Gateway 和 Relay Allocator。
+- Agent 主动出站控制连接，无云账号设备签名路由。
+- 单 POP coturn：UDP、TCP、TLS 443。
+- 短期、限 session/POP/配额的 TURN credential。
+- Direct -> TURN ICE 选择与明确诊断。
+- 双端独立 POP 探测、优质骨干评分和 Dual Edge 路径。
+- 智能优选、直连优先和 CDN 优先策略。
+- 备用 POP 和 ICE restart。
+- Windows RDP 透明 L4 Edge Connector 与 TCP/UDP 分流。
+- 中继容量、流量成本、限速和 DDoS 指标。
+- 签名发布物静态 CDN。
+
+验收标准：
+
+- Direct 可用时不产生 Relay 流量。
+- Direct 可用但质量更差时可以选择 Dual Edge 骨干路径。
+- 禁止 UDP 后可回退 TURN TLS 443。
+- 主 POP 故障后现有 Session ID 可恢复到备用 POP。
+- Relay 无法解密媒体和 DataChannel。
+- RDP Edge 不终止目标 Windows TLS/NLA，UDP 不被封装进 TCP。
+- 控制面短时故障不影响已建立会话。
+- 过期或跨 session TURN credential 被拒绝。
+
+## 后续评估项
+
+以下能力不进入首个稳定版本：
+
+- 通用 Linux 图形桌面无人值守 Agent。
+- 登录界面和系统锁屏控制。
+- 完整云账号与跨设备配置同步。
+- 移动端客户端。
+- 会话录制。
+- 多用户管理和集中策略。
+- 游戏专用串流模式。
+
+其中“通用 Linux 图形桌面无人值守”必须先完成针对目标发行版和合成器的安全设计，不能简单通过 root 权限绕过 Wayland。纯命令行终端不受这一图形限制，但仍必须经过设备授权和普通用户降权。
+
+## 建议的首轮开发顺序
+
+1. 建立最小 Tauri/WebView2 + Rust helper 技术验证工程。
+2. 完成 Windows RDP MVP，稳定会话状态机和安全存储。
+3. 建立 Linux Agent 系统服务、桌面会话、终端会话、配对和信令骨架。
+4. 完成 Wayland 与 Xorg 桌面通道。
+5. 完成 PTY 命令行通道和 Windows 终端控件。
+6. 完成单 POP 边缘中继，再扩展双 POP 选择和故障切换。
diff --git a/docs/security.md b/docs/security.md
new file mode 100644
index 0000000..79106ad
--- /dev/null
+++ b/docs/security.md
@@ -0,0 +1,259 @@
+# RemoteDesk 安全设计
+
+## 1. 安全目标
+
+RemoteDesk 可以查看桌面、注入输入、传输文件和打开终端，属于高权限软件。安全目标：
+
+- 未配对设备不能创建任何远程会话。
+- 配对设备只能使用明确授予的能力和目标用户。
+- system daemon 不接触桌面、终端和文件内容。
+- Linux 媒体进程被攻破时不自动获得 root。
+- 网络攻击者不能窃听、篡改或重放会话。
+- 日志、崩溃转储和配置不泄露敏感内容。
+
+不试图防御已经控制 Linux root、Windows 管理员或固件的攻击者。
+
+## 2. 保护资产
+
+- Agent/客户端设备私钥。
+- Windows RDP 密码。
+- 桌面视频、音频、输入和剪贴板。
+- 终端内容与命令执行权限。
+- 文件内容和目标路径。
+- 已配对设备、权限和撤销状态。
+- Windows 端证书指纹绑定的 Linux Agent 公钥映射（非秘密、完整性敏感）。
+- 更新签名密钥和发布渠道。
+
+## 3. 信任边界
+
+```text
+Untrusted network
+       |
+TLS WebSocket / WebRTC
+       |
+remotedesk-agentd (system/root boundary)
+       |
+authenticated Unix Socket
+       |
+desktop-session / shell-session (target UID)
+       |
+Wayland/Xorg/PTY/user files
+```
+
+另一条边界存在于 Windows UI 与凭据存储之间。UI 只能获取短期凭据句柄或会话材料，不应长期缓存明文秘密。
+
+## 4. 威胁模型
+
+| 威胁 | 主要控制 |
+|---|---|
+| 局域网监听与篡改 | TLS 1.3、DTLS-SRTP、设备密钥认证 |
+| 中间人配对 | 本机开启配对、握手短指纹、本机确认 |
+| 配对码暴力破解 | 短有效期、次数限制、指数退避、审计 |
+| 重放会话请求 | nonce、短期 Ticket、replay cache、sequence |
+| 已配对客户端越权 | capability bitset、target UID allowlist、epoch |
+| 恶意协议消息 | Protobuf 限制、状态校验、fuzz、有界分配 |
+| Agent 媒体漏洞提权 | 媒体进程普通 UID、agentd 零媒体接触 |
+| 终端直接 root | PAM、降权顺序、UID 0 默认拒绝 |
+| 文件路径穿越 | 服务端生成路径、canonical check、原子落盘 |
+| 剪贴板泄露 | 独立读写权限、按需请求、大小和 MIME 限制 |
+| 依赖供应链 | lockfile、cargo-deny、SBOM、签名发布 |
+
+## 5. Agent 权限拆分
+
+### 5.1 agentd
+
+允许：
+
+- 读取设备身份和配对数据库。
+- 监听认证/信令端口。
+- 查询 logind 会话。
+- 验证 Ticket，并启动已降权的 session 进程。
+- 撤销客户端并终止对应会话。
+
+禁止：
+
+- 读取或记录视频帧、音频、剪贴板、文件和终端数据。
+- 直接连接用户 PipeWire/X server。
+- 解释客户端提供的 shell 命令。
+- 使用用户提供的任意路径启动程序。
+
+systemd unit 建议启用：
+
+- `NoNewPrivileges=true`
+- `PrivateTmp=true`
+- `ProtectHome=true`，仅通过明确路径访问必要数据
+- `ProtectSystem=strict`
+- `PrivateDevices=true`，除非最小 Helper 明确需要设备
+- `RestrictAddressFamilies=` 仅保留实际使用协议族
+- `SystemCallFilter=` 在兼容性验证后启用
+- 单独的 RuntimeDirectory/StateDirectory
+
+具体沙箱项必须通过 Wayland/Xorg/PAM 集成测试，不可为通过测试整体关闭。
+
+### 5.2 desktop-session
+
+- 以目标登录用户运行。
+- 只能访问该用户的 Portal、PipeWire、Xauthority 和剪贴板。
+- 不拥有 Agent 长期设备私钥。
+- 只接受 agentd 签发的单次 Ticket。
+- 会话结束后释放 Portal token、帧、编码器和临时密钥。
+- X11 短时恢复令牌由用户会话进程使用系统随机源生成，只经固定证书 TLS/WSS 和 root-owned Unix Socket 传递；令牌绑定已认证 Client 指纹与 Linux 用户、15 秒过期、每次恢复旋转，不写日志或诊断文件。Windows Client 仅将最新令牌写入当前用户 Credential Manager，并以 Agent TLS 证书指纹和 Linux 用户构造隔离目标；正常关闭、服务端关闭或恢复拒绝时删除。断线时先释放全部 XTEST 输入，未完成帧和 ACK 不恢复。
+
+### 5.3 shell-session
+
+安全顺序：
+
+1. 验证 Ticket、客户端权限和 target UID。
+2. PAM account/session 检查。
+3. 初始化补充组。
+4. 设置 GID/UID，确认不能恢复 root。
+5. 清理文件描述符和环境变量。
+6. 切换 HOME/工作目录。
+7. 创建 PTY 并 exec allowlist 中的登录 Shell。
+
+权限下降后进行自检：effective/real/saved UID/GID、groups 和 capabilities 均符合目标用户。失败立即终止，不尝试宽松回退。
+
+## 6. 配对与设备身份
+
+- 配对必须由 Linux 本地用户显式开启。
+- 配对窗口默认短时关闭，不永久监听匿名配对。
+- 配对码至少具有足够熵，并限制每次窗口的失败次数。
+- Linux 本地 UI 显示客户端名称、公钥短指纹和请求权限。
+- Windows 同时显示 Agent 短指纹，用户确认两端一致。
+- 长期记录保存完整公钥，不保存配对码。
+- Windows 控制端将 Agent 公钥绑定到已确认的 TLS 证书 SHA-256；后续 Edge 会话同时校验该公钥和固定证书。
+- 映射目标为 `RemoteDesk/Linux/agent/<certificate-sha256>`，只能通过显式“忘记身份”操作或 Windows Credential Manager 删除。
+- 设备可以本地查看、改权、改名和撤销。
+
+远程首次配对要求用户从 Agent 本地 `pairing-code` 命令取得设备公钥、证书指纹和一次性码。Edge `pairing` Intent 只有在 Agent 本机配对窗口未过期、未耗尽且允许目标用户/terminal 时才会获得 relay；配对码只在固定证书的端到端 TLS/WSS 内验证和消费。Client 同时核对 relay 内 Hello 的 Agent 公钥与用户录入值，成功后才保存证书到公钥映射。缺少这些材料时不通过 Edge 猜测或枚举设备。
+
+配对协议采用经过审查的 PAKE/Noise/设备认证库。确定具体库前，配对只能处于实验状态，不能声明抵抗主动中间人。
+
+## 7. 会话票据
+
+- 由 agentd 签发并签名。
+- 有效期短，单次使用。
+- 绑定客户端公钥、session type、UID、权限和 capability digest。
+- 使用后写入 replay cache。
+- 权限或设备撤销时递增 authorization epoch，使旧票据立即失效。
+- session 进程不接受客户端自报权限。
+
+## 8. 网络入口
+
+- 只允许 TLS 1.3 或安全基线允许的版本。
+- 禁止匿名弱密码套件和 TLS compression。
+- 设置握手、读写和空闲超时。
+- 限制半开连接、并发认证和消息速率。
+- 每条消息先检查认证状态、长度、类型和当前会话状态。
+- WebRTC DTLS fingerprint 绑定到已认证 Session Ticket。
+- ICE candidate 数量、地址长度和 SDP 大小受限。
+
+公网中继使用短期 TURN credential、限速和 allocation 配额。Relay 只看到网络元数据，媒体与 DataChannel 仍由端点 DTLS 加密。边缘控制面不能签发 Linux Session Ticket，详细边界见 [CDN 与边缘中继](edge-relay.md)。
+
+## 9. Windows 客户端
+
+- 设备私钥和 RDP 密码使用 Credential Manager/DPAPI。
+- SQLite 只存凭据引用和证书指纹。
+- 凭据读取后缩短明文生命周期，避免 Clone 和 Debug 输出。
+- 远端地址、用户名和文件路径在诊断导出时可脱敏。
+- Tauri/WebView 使用本地资源、严格 CSP、窗口级 capability 和导航 allowlist。
+- Release 禁用 devtools，不执行远端 HTML/JavaScript。
+- Linux 桌面视频由原生 helper 处理，不把 frame 传入 WebView。
+- 原生 helper 的 TURN credential、SDP 和 Session Ticket 通过受限 Named Pipe 交付，长期设备私钥和短期会话材料均不进入 JavaScript。
+- Tauri command 校验 window label、session ID、generation、权限和 payload size。
+- RDP viewer Named Pipe 源码使用当前用户 SID 的保护 DACL、单实例和拒绝远程客户端；控制服务核对 OS 报告的 pipe 客户端 PID、进程创建时间、实际镜像路径及 SHA-256 build hash，再验证一次性 HMAC-SHA256 challenge。viewer 只有在严格 JSON schema、目标、显示、证书、会话标识和 opaque 凭据引用全部通过校验后，才返回绑定载荷 SHA-256 与 challenge 的 HMAC ACK；错误摘要、错误 MAC、版本不符或未 ACK 都会令服务端失败关闭。双方使用非阻塞有界读取，连接、认证、配置与 ACK 受同一绝对 deadline 约束，已连接但停滞的 helper 也会超时失败。viewer 同时绑定带 `KILL_ON_JOB_CLOSE` 的独立 Job Object，控制服务终止时由内核清理；native-video helper 尚未接入该运行时。
+- 原生 helper 不接受来自远端的窗口标题或任意 Win32 消息 ID。
+- IronRDP 证书变化必须阻断自动连接。
+- mstsc 回退使用受限临时 `.rdp` 配置，文件不包含密码并在启动后删除。
+
+## 10. 输入安全
+
+- 仅活动且获得输入权限的会话可以注入输入。
+- 客户端失焦可按配置暂停键盘捕获。
+- 本地保留紧急释放组合键，不能转发给远端。
+- 远端请求不能主动抓取本地输入。
+- 重连和断开时释放所有远端按键与按钮状态。
+- uinput Helper 只接受结构化输入事件，不接受任意 ioctl 或设备路径。
+
+## 11. 剪贴板和文件
+
+剪贴板：
+
+- 读、写分开授权。
+- 远端先 Offer，本端接受后才读取内容。
+- MIME allowlist，首版仅 UTF-8 文本。
+- 单项最多 32 KiB；Offer 绑定非零 sequence、精确 UTF-8 字节数和小写 SHA-256，Data 必须是无 padding 的 canonical Base64。
+- 拒绝 NUL、无效 UTF-8、非规范换行和未匹配的 Offer/Data；最近内容摘要用于阻止双端回写循环。
+- `agentd` 只验证权限并转发结构化消息，X11/Win32 剪贴板访问分别留在普通用户会话进程和控制 helper 的有界工作线程。
+- 内容不进入日志或 crash dump。
+
+文件：
+
+- 每次传输可要求用户确认。
+- Agent 决定最终目录和临时文件名。
+- 拒绝绝对路径、父目录、软链接、设备和 FIFO。
+- 使用 no-follow、size limit、free-space check 和 hash。
+- 写入临时文件，校验后原子 rename。
+- 可选接入系统恶意软件扫描钩子，但不能假设一定存在。
+
+
+## 13. CDN Edge Connector
+
+- Linux WebRTC TURN 与 Windows RDP L4 Connector 使用不同 service identity 和 credential scope。
+- RDP Connector 只允许连接策略中列出的目标地址/端口，不能成为通用 TCP/UDP 代理。
+- Connector 通过出站连接进入最近 POP，不开放匿名公网监听。
+- Edge 不终止 RDP TLS/NLA，IronRDP 校验真实 Windows 目标身份。
+- Client/Agent POP 及骨干路由元数据设置最短保留期。
+- 双 POP credential 分别绑定 endpoint、POP、session 和 authorization epoch。
+- 路径选择数据可影响质量但不能授予会话权限。
+
+## 14. 日志和崩溃
+
+禁止记录：
+
+- 密码、私钥、Session Ticket 和完整 Token。
+- 桌面像素、音频、剪贴板和终端内容。
+- 文件内容和配对码。
+
+允许记录：
+
+- correlation/session ID 的不可逆短标识。
+- 状态转换、稳定错误码、版本和能力。
+- 非敏感性能指标。
+
+崩溃转储默认关闭或使用最小转储；发布前验证密钥、帧缓冲和剪贴板不会进入转储。诊断包生成后提示用户保存位置和包含的数据类型。
+
+## 15. 更新安全
+
+- Windows MSI、Linux DEB/RPM 和更新元数据均签名。
+- 客户端/Agent 只接受可信发布密钥签名的更新。
+- 更新检查与下载分离，下载失败不影响现有版本。
+- 协议/数据库迁移可回滚，不能在验证前删除旧数据。
+- 生成 SBOM，跟踪 Rust crates、IronRDP、GStreamer 和系统库公告。
+- 发布密钥离线保存并具有轮换/撤销流程。
+
+## 16. 安全测试
+
+- Pairing、Ticket、Envelope 和文件协议 fuzz。
+- 过期、重复、乱序、跨设备 Ticket。
+- 未授权权限位和 target UID。
+- Unix Socket 对端 UID/PID 欺骗测试。
+- PAM 失败、锁定账户、过期账户和 shell 禁用。
+- 路径穿越、软链接竞争、磁盘耗尽和超大文件。
+- DataChannel flood、WebSocket slowloris 和配对爆破。
+- 日志/诊断包/崩溃转储敏感数据扫描。
+- systemd sandbox 与 SELinux/AppArmor 环境测试。
+- 依赖漏洞、许可证和签名验证。
+- RDP Connector 目标 allowlist、端口扫描和代理滥用测试。
+- 双 POP credential 跨 endpoint/POP/session 重放测试。
+
+## 17. 发布门槛
+
+首个稳定版本发布前必须完成：
+
+1. 配对协议威胁建模与独立代码审查。
+2. Agent root 边界和 PTY 降权专项审计。
+3. 文件传输未完成时默认关闭。
+4. 协议解析器 fuzz 达到约定运行时长且无崩溃。
+5. 所有安装包签名并生成 SBOM。
+6. 已知安全限制写入发布说明。
diff --git a/docs/technology-stack.md b/docs/technology-stack.md
new file mode 100644
index 0000000..1fdf9ca
--- /dev/null
+++ b/docs/technology-stack.md
@@ -0,0 +1,321 @@
+# RemoteDesk 技术栈规划
+
+## 1. 混合架构
+
+RemoteDesk Windows 客户端采用 Web UI 与 Rust 原生会话进程混合方案。JavaScript 负责管理界面和终端；Linux 桌面 WebRTC、Windows RDP 和 GPU 呈现均由 Rust 原生 helper 承载，原始视频像素不进入 WebView。
+
+| 模块 | 技术栈 | 职责 |
+|---|---|---|
+| Client Shell | Tauri 2、Rust、Tokio | 应用生命周期、凭据、配对、窗口和 helper 管理 |
+| Management UI | React、TypeScript、Vite | 主机、设置、诊断和会话工具栏 |
+| Linux Terminal | xterm.js、DataChannel | ANSI/VT 终端和输入 |
+| RDP Protocol Probe | Rust helper、IronRDP | 无凭据检查 DNS、TCP、X.224 与 RDP 安全协议协商 |
+| Native RDP Viewer | Rust helper、IronRDP、winit、D3D11/DXGI | Windows RDP 原生窗口；优先使用 D3D11 swap chain CPU 上传，失败时回退 software framebuffer |
+| Native Linux Video | Rust helper、gstreamer-rs、D3D11 | 默认 WebRTC、硬解和零拷贝呈现 |
+| Linux Agent | Rust、Tokio、GStreamer、systemd | Wayland/Xorg/PTY 被控端 |
+| 协议 | Protobuf、TLS WebSocket、WebRTC | 配对、会话和媒体数据 |
+| Edge | Rust Rendezvous/Allocator、双 POP TURN、L4 Connector | CDN 优质骨干路径 |
+| 数据 | SQLite、Windows Credential Manager | 配置和敏感凭据 |
+
+## 2. 进程模型
+
+```text
+remotedesk.exe (Tauri/Rust)
+├── WebView2 main window
+├── WebView2 terminal window
+├── Rust session/auth/storage/edge services
+│
+├── remotedesk-rdp-session.exe
+│   └── IronRDP protocol + TLS certificate probe (no credentials)
+│
+├── remotedesk-rdp-viewer.exe
+│   └── IronRDP + winit native window + D3D11 CPU upload fallback
+│
+└── remotedesk-native-video.exe (default Linux desktop)
+    └── GStreamer WebRTC + selected D3D11 adapter
+```
+
+原生 helper 是独立进程，原因：
+
+- Tauri/WebView2 与 winit/D3D11 不共享事件循环。
+- RDP 或 GPU driver failure 不拖垮主界面。
+- helper 可以拥有独立 GPU、DPI、Raw Input 和全屏生命周期。
+- 主进程只交换状态和命令，不传输视频帧。
+
+## 3. Tauri Client Shell
+
+### 3.1 Rust Core
+
+- Tauri 2 application runtime。
+- Tokio 处理信令、配对、Edge 和 helper IPC。
+- rusqlite 保存 HostProfile 与非敏感设置。
+- Windows Credential Manager 保存密钥、密码和 Token。
+- reqwest/rustls 调用边缘控制面。
+- tracing 输出结构化日志。
+
+Tauri command 使用最小 capability allowlist。JavaScript 不能直接读取 Credential Manager、任意文件、Agent 长期私钥。
+
+### 3.2 React UI
+
+- React + TypeScript + Vite。
+- 状态按 Host/Profile/Session/Diagnostics 拆分。
+- 图标使用成熟图标库，不在业务代码中手写 SVG。
+- 页面资源全部本地打包，不加载 CDN 脚本或远端网页。
+- Release 禁用开发者工具、任意导航和不必要 Web API。
+
+UI 只接收结构化状态，不接收密码、长期私钥或媒体帧。
+
+## 5. Linux Terminal
+
+- xterm.js 负责 ANSI/VT、Unicode、中文宽字符、选择和滚动区。
+- PTY 字节通过可靠 DataChannel 直接进入页面。
+- 大量输出有有界缓存和背压。
+- 多行粘贴前确认。
+- Alternate Screen 与普通历史分离。
+- JS 不解析或拼接远端 shell 命令，只呈现 PTY 字节。
+
+xterm.js 性能通过高频输出 Spike 验证；若无法满足，再启用 Rust 原生终端 helper，不影响协议。
+
+## 6. Native RDP Helpers
+
+### 6.1 当前实现
+
+- Rust stable。
+- `remotedesk-rdp-session.exe`：从有界 stdin JSON 接收目标地址，完成 DNS、TCP、X.224、RDP Negotiation Confirm 和无凭据 TLS 证书交换，不接收账号密码，也不进入 CredSSP/NLA。
+- `remotedesk-rdp-viewer.exe`：使用 IronRDP 与 winit 建立单屏或全部本地显示器原生会话；账号和密码只在 helper 的本地遮罩提示中输入。
+- viewer 的桌面帧留在原生进程，不进入 React、Tauri IPC 或浏览器。
+- 当前 viewer 优先报告 `d3d11_cpu_upload`，并通过独立能力 `d3d11_dirty_rect_upload` 声明局部上传；D3D11/DXGI 创建失败时报告 `software_framebuffer`。单屏支持窗口尺寸驱动的动态分辨率，全部本地显示器使用 Win32 geometry 和 RDPEDISP 多 monitor layout，自定义显示器子集仍切换系统 `mstsc`。
+
+### 6.2 目标渲染路径
+
+渲染路径：
+
+```text
+IronRDP dirty rect
+ -> D3D11 upload/merge
+ -> GPU texture
+ -> native swap chain
+```
+
+IronRDP 关键能力不足时，主程序启动 mstsc 回退；mstsc 不伪装成内嵌原生 helper。
+
+当前已完成 D3D11 device、持久 CPU framebuffer 与完整 GPU frame texture、dirty region 紧凑像素转换、多个待呈现 dirty rect 合并、局部 `UpdateSubresource` 和 swap chain 呈现。为保证 discard swap chain 下未变化区域正确，每次呈现仍从完整 frame texture 复制到 back buffer。因此该路径继续报告 `d3d11_cpu_upload`，不得报告硬件解码或零拷贝。
+
+### 6.3 Helper IPC
+
+主程序与 helper 使用 Windows Named Pipe：
+
+- Pipe 使用当前用户 SID 的严格 ACL。
+- RDP viewer 启动时命令行只接收随机 pipe name；一次性 32 字节 bootstrap key 只进入目标子进程环境并在读取后清除。
+- 控制服务校验 pipe API 返回的客户端 PID、进程创建时间、实际可执行文件路径和 SHA-256 build hash，再完成 HMAC-SHA256 challenge。
+- viewer 严格校验版本化配置后返回载荷 SHA-256 与 challenge 绑定的 HMAC ACK；服务端验证版本、摘要和 MAC 后才确认配置已接受。
+- 连接、challenge/auth、配置帧和 ACK 共用有界绝对 deadline；非阻塞分段读取支持正常短读，但不会因已连接 helper 停滞而永久占用握手线程。
+- viewer 启动后立即加入设置 `KILL_ON_JOB_CLOSE` 的独立 Job Object；控制服务退出或握手失败时由 Job 终止遗留进程。
+- 当前 RDP 管道发送证书指纹、opaque 凭据引用和连接参数，密码仍由 viewer 直接从 Credential Manager 读取；Session Ticket 后续复用同一有界协议。
+- IPC 只传控制、状态、指标和输入命令，不传视频 frame。
+- helper crash 后主程序显示结构化错误并可重启。
+
+## 7. Native Linux Video Helper
+
+这是 Linux 桌面默认客户端媒体进程，负责 WebRTC、DataChannel、Raw Input、硬件解码和呈现。默认选择窗口显示器所属 Adapter，用户也可手动指定。
+
+当前 helper 的 Windows 源码除 D3D11 device 和 H.264 decoder allocation probe 外，还提供有界本地文件解码及原生窗口播放入口。它使用启用 DXVA/hardware transforms 且绑定 D3D11 device manager 的 Media Foundation Source Reader，将 H.264 MP4/M4V/MOV 请求为 NV12；输出必须是同一 device 上的 `IMFDXGIBuffer` texture，系统内存 buffer 会失败。播放器跟踪媒体类型的可见尺寸和变化标志，按 100 ns 时间戳调度 texture subresource，以同 device `ID3D11VideoProcessor` 转换和缩放到 BGRA swap chain，黑边由 render target 清除，过程中不映射 CPU frame。该链路提交真实压缩样本并实际调用窗口呈现，但在 ETW/GPUView 尚未证明 video decode engine 和无隐藏 copy 前仍报告 `hardware_decode_verified=false`、`zero_copy_verified=false`。
+
+Linux 桌面控制 helper 的 Windows 模块还将远端 H.264 RTP 按 RFC 6184 重组为有界 Annex-B AU，覆盖单 NAL、STAP-A 和 FU-A。跨帧序号中断或本地一槽邮箱积压会清除参考链、请求 PLI 并等待新关键帧；重连时销毁旧解码器。AU 优先以 `MFVideoFormat_H264_ES` 输入 D3D11-aware H.264 MFT，只接受同一 device 的 NV12 `IMFDXGIBuffer`，再复用 VideoProcessor/swap-chain 模式呈现到 Linux 桌面窗口。第一帧呈现后，协议 minor 9 在完整 zlib 帧 ACK 后确认 H.264-only；随后每个 sequence 只在 D3D11 呈现成功后 ACK，Agent 才捕获下一帧，不再执行同帧 zlib 编码和传输。初始化、解码、媒体、sender/encoder 或 ACK 失败时恢复 zlib 软件 surface。该远程链路尚未编译和实机验证，不能据此打开 `linux.native_video`。
+
+管线：
+
+```text
+gstreamer-rs webrtcbin
+ -> D3D11 hardware decoder on selected adapter
+ -> GstD3D11Memory
+ -> d3d11videosink
+ -> native HWND
+```
+
+decoder、sink 和 swap chain 必须位于同一 Adapter；验证到 CPU map 或跨 Adapter copy 时，`required_end_to_end` 协商失败。该 helper 与 RDP helper 共享 WindowHost、GPU selection、IPC 和诊断 crate，但不共享协议 Adapter。
+
+## 8. Linux Agent
+
+```text
+agent/
+└── crates/
+    ├── agentd
+    ├── desktop-session
+    ├── shell-session
+    ├── agent-core
+    ├── agent-media
+    ├── wayland-backend
+    ├── xorg-backend
+    └── platform-linux
+```
+
+主要技术：Tokio、Axum/rustls、zbus/ashpd、gstreamer-rs、x11rb、rustix/nix、prost、rusqlite 和 tracing。
+
+Wayland 使用 Portal/PipeWire/libei；Xorg 默认使用 XComposite/DRI3/XDamage/XRandR/XTest，XShm 仅兼容模式；终端使用 PAM/PTY。unsafe FFI 必须隔离在专用 crate。
+
+Linux 视频内存策略：
+
+```text
+preferred:
+PipeWire memory:DMABuf
+ -> GPU color convert/scale
+ -> VA-API or NVENC hardware encoder
+ -> RTP
+
+explicit compatibility fallback:
+PipeWire MemPtr / XShm
+ -> CPU or GPU upload
+ -> encoder
+ -> RTP
+```
+
+Agent 媒体核心只传递带所有权和 fence 的 surface handle，不提供接收原始 RGBA `Vec<u8>` 的通用接口。禁止用 `appsink` 拉取原始帧再送入编码器。每种 GStreamer/驱动组合必须通过 tracer、perf 和 GPU 工具证明没有 CPU map/copy 后，才能把会话标记为 `zero_copy`。
+
+Agent 默认从 DMA-BUF/DRI3 元数据解析 DRM render node，并在同一设备上选择 VA-API/NVENC video processor 和编码器。服务端手动 GPU 只有在能直接导入该 surface 时可用；跨 GPU 选择不满足严格模式。
+
+## 9. 协议与 Edge
+
+- Protobuf/Buf 定义共享消息契约。
+- Rust 端使用 prost，Web UI 使用生成的 TypeScript codec。
+- TLS WebSocket 负责配对和信令。
+- WebRTC RTP/RTCP 负责媒体和质量反馈。
+- IronRDP 原生会话把 RDP `NetworkCharacteristicsResult` 中服务器测得的平均 RTT、基础 RTT 和带宽提升为脱敏诊断事件；不以帧间隔推算网络时延。
+- IronRDP 图形事件记录网络 PDU 在本地 active stage 的处理与 framebuffer 像素转换耗时；本地事件保持空值，且该指标不代表服务端编码或 GPU 视频解码。
+- DataChannel 负责输入、终端、控制、剪贴板和文件。
+- 智能比较 Direct、Single Edge 和 Dual Edge。
+- Linux WebRTC 使用双 POP TURN；Windows RDP 使用透明 L4 Connector。
+
+TURN credentials、SDP 和 Session Ticket 通过受限 Named Pipe 交给 native-video helper；长期设备私钥、Agent 授权和短期会话材料均不进入 JavaScript。
+
+## 10. GPU 选择
+
+配置模式：
+
+```text
+inherit global
+default
+manual(adapter identity)
+```
+
+- RDP helper：默认和手动均可精确控制 DXGI Adapter。
+- Linux native default：选择窗口显示器所属 Adapter，使 decoder、sink 和输出保持同 GPU。
+- Linux manual：native-video helper 使用指定 LUID；窗口不在该 Adapter 的 output 上时严格模式拒绝跨 GPU copy。
+- 指定 GPU 缺失时本次回退默认，不修改用户配置。
+- 诊断展示 requested/effective GPU、decoder、driver 和 copy path。
+- 零拷贝策略为默认 `required_end_to_end` 或显式 `compatibility`；前者要求 Agent/client 两端同时验证通过。
+
+## 11. 分辨率实现
+
+- Tauri/React：提供自动跟随、原始、固定预设和自定义尺寸菜单，保存主机级策略。
+- IronRDP helper：把尺寸请求映射到 Display Control Dynamic Monitor Layout；不支持时仅在确认后重连。
+- Linux Agent：使用 VA-API/CUDA 等 GPU video processor/scaler 和 DMA-BUF caps 在编码前缩放，不使用可能落入 CPU raw frame 的通用 `videoscale`，也不改变 Wayland/Xorg 实体显示模式。
+- Native renderer：按收到的实际编码尺寸重建呈现资源，保持等比缩放并正确换算黑边输入坐标。
+- Protobuf：传递 capability、request/applied、generation 和 source/encoded size，防止乱序 resize 覆盖新状态。
+
+自动跟随窗口必须防抖；固定尺寸默认允许弱网临时下调，也可由用户锁定。所有模式都受双方最大纹理尺寸、编码器像素率和资源预算限制。
+
+## 12. 仓库结构
+
+```text
+RemoteDesk/
+├── Cargo.toml
+├── rust-toolchain.toml
+├── client/
+│   ├── src-tauri/
+│   ├── web/
+│   └── helpers/
+│       ├── rdp-session/
+│       └── native-video/
+├── agent/
+├── shared/
+│   ├── protocol/
+│   ├── session/
+│   ├── helper-ipc/
+│   └── diagnostics/
+├── services/
+│   ├── rendezvous/
+│   └── relay-allocator/
+├── protocol/
+├── packaging/
+└── tests/
+```
+
+## 13. 构建
+
+Rust：
+
+- Cargo workspace、`Cargo.lock`、`rust-toolchain.toml`。
+- rustfmt、Clippy、cargo-deny 和 cargo-audit。
+
+Web：
+
+- pnpm lockfile。
+- TypeScript strict mode。
+- ESLint、Vitest 和 Playwright。
+- Vite 构建为本地静态资源。
+
+Windows：
+
+- Tauri/WiX MSI。
+- 安装主程序、native helpers 和必要 GStreamer runtime。
+- WebView2 Evergreen Runtime 作为前置条件。
+- 主程序、helper 和安装包全部签名。
+
+Linux：
+
+- Cargo + 发行版 GStreamer/PipeWire/PAM/X11/libei。
+- DEB/RPM 与 systemd units。
+
+## 14. 测试
+
+| 层级 | 工具 |
+|---|---|
+| Rust | cargo test、proptest |
+| React/TypeScript | Vitest、Testing Library |
+| WebRTC 页面 | Playwright + synthetic MediaStream |
+| RDP | IronRDP + Windows VM |
+| GPU | GPUView/ETW、GStreamer tracer |
+| Agent | Cargo integration、真实 Wayland/Xorg |
+| Edge | coturn、多 POP/netem |
+| 端到端 | pytest + 虚拟化测试机 |
+
+Web 视频测试必须证明 frame 不经过 JS/Canvas：页面不注册逐帧像素处理，Chromium media internals 显示硬解路径，CPU/拷贝指标符合基线。Linux Agent 同时使用 GStreamer tracer、`perf` 和驱动工具验证 DMA-BUF 未被 CPU map；仅看到 Video Encode 引擎占用不能作为零拷贝证据。
+
+## 15. 安全
+
+- WebView 使用严格 CSP：本地资源、必要的 media/connect source，禁止任意导航。
+- Tauri capability 按窗口最小授权。
+- Release 禁用 devtools 和远端脚本。
+- Web 页面不获取长期私钥或 RDP 密码。
+- Native helper IPC 使用 Named Pipe ACL、一次性 token 和进程验证。
+- TURN/SDP/session material 限时并在窗口关闭后销毁。
+- 依赖生成 SBOM，npm 与 Cargo 同时审计。
+
+## 16. 许可证
+
+- Tauri、React、xterm.js、IronRDP 和 Rust crates 进入许可证 allowlist。
+- WebView2 Runtime 遵循 Microsoft 分发条款。
+- GStreamer 插件逐项审计，不默认捆绑 GPL x264。
+- 每个安装包附带第三方许可证和机器可读 SBOM。
+
+## 17. M0 门槛
+
+1. Native-video helper 证明 D3D11 decoder 到 d3d11videosink 无 CPU/cross-GPU copy。
+2. Linux 输入、DataChannel 和系统组合键回退正确。
+3. xterm.js 通过中文、全屏 TUI 和高频输出测试。
+4. Native RDP helper 的 IronRDP/NLA/D3D11 通过。
+5. Named Pipe IPC 的 ACL、崩溃和重启通过。
+6. 默认显示器 GPU 与手动 GPU 的 native-video 零拷贝路径通过。
+7. Direct/Single/Dual Edge 路径通过。
+8. Wayland DMA-BUF 和 Xorg DRI3 到硬件编码器的零拷贝路径通过；任一端回退时默认拒绝。
+
+## 18. 明确不做
+
+- 不把视频 frame 通过 Tauri IPC 传给页面。
+- 不用 Canvas/WebGL/WebGPU 逐帧绘制 Linux 远程视频。
+- 不在 Web UI 中实现 RDP 协议。
+- 不从零实现 RDP、WebRTC、TURN、编解码或密码学。
+- 不把 mstsc 回退描述为内嵌 RDP。
+
+该方案用 Web 平台降低管理 UI 和终端开发成本，用 Rust 原生 helper 承载所有默认桌面视频、RDP、精确 GPU、Raw Input 和驱动恢复能力。
diff --git a/docs/user-guide.md b/docs/user-guide.md
new file mode 100644
index 0000000..b20eb63
--- /dev/null
+++ b/docs/user-guide.md
@@ -0,0 +1,259 @@
+# RemoteDesk 使用指南
+
+## 1. 当前可用范围
+
+当前仓库处于工程开发阶段。Windows 控制端包含 Tauri 2 桌面壳源码、Rust 本地控制服务、RDP 协议探针、系统 `mstsc` 启动、独立 IronRDP 原生窗口、Linux Terminal 控制 helper ；Tauri 壳尚未按要求解析依赖、编译或运行验收。Windows 被控端另有 Host MSI。Linux 被控端已提供配对/WSS/IPC/PTY 基础和安装包，终端可由控制端在独立本地窗口打开。源码中的协议 minor 9 已接入 X11 `GetImage`/XTEST、有界 zlib BGRA 帧、Windows 软件桌面窗口、帧率/压缩等级自适应、短时恢复令牌、Linux GStreamer H.264 编码到 Agent WebRTC sender，以及 Windows RFC 6184 RTP 重组到 Media Foundation/D3D11 原生呈现。第一张原生帧呈现后会在完整帧边界切换到 H.264-only，不再并行传输完整 zlib 帧；H.264 呈现 ACK 驱动下一次捕获，丢包、积压、解码、媒体或 ACK 失败会恢复 zlib。新增源码尚未编译或在真实 Windows/Xorg 主机验收，当前发布包不能据此宣称 WebRTC 图形会话可用，`linux.native_video` 仍为 `false`；Wayland 仍关闭。Linux Agent 可选接入 Edge Presence；首次配对、终端和文件会话均可通过 Agent 出站 Edge relay 完成。Edge 服务已提供签名 SDP/ICE mailbox 和端点 PeerConnection；完整 CDN 媒体/RDP 链路仍未完成。
+
+完整的已实现/未实现清单见 [实现状态](implementation-status.md)。界面会读取控制服务的运行时能力，只启用当前构建真实支持的操作。
+
+非敏感主机设置和明暗主题保存在浏览器 `localStorage`。默认不再创建示例主机；Windows 账户不会写入持久化的主机配置，密码不会进入页面状态或浏览器存储。
+
+## 2. 启动管理界面
+
+### Windows 安装包
+
+运行 `RemoteDesk-M0-<version>-windows-<arch>.msi` 后，RemoteDesk 会安装到当前用户目录，不要求管理员权限。从开始菜单打开 `RemoteDesk`；使用期间保留启动窗口，关闭窗口会停止本地控制服务。通过 Windows“已安装的应用”卸载。
+
+当前已有开发安装包尚未使用 Authenticode 证书签名，Windows 可能显示“未知发布者”。源码新增的受保护正式标签工作流会强制签署并验证控制端/Host MSI、内部 EXE 和 PowerShell，再发布 Ed25519 签名更新清单；该工作流按本轮要求尚未实际执行，因此不能把现有包视为已签名。运行时能力接口决定当前包可用的操作；设计文档中的 Linux 图形、D3D11 呈现和 CDN 能力不会因为安装 MSI 自动启用。
+
+### Windows 被控端
+
+在支持 RDP Host 的 Windows Pro/Enterprise/Server 上安装 `RemoteDesk-Host-<version>-windows-x64.msi`。安装不会直接开启远程桌面。打开开始菜单中的 `Configure RemoteDesk Host`，阅读变更说明并输入 `ENABLE`，再确认 Windows 管理员提权。
+
+配置过程保持 NLA 开启，启用 Microsoft 内置 RDP 防火墙规则并确保 `TermService` 运行，不创建账户或保存密码。首次变更前的 RDP/NLA/服务/防火墙状态保存在 `%ProgramData%\RemoteDesk\Host\original-state.json`。开始菜单的恢复入口或正常 MSI 卸载会恢复该状态；版本升级不会中途回滚。
+
+### Linux 被控端
+
+Debian/Ubuntu 安装静态 DEB：
+
+```sh
+sudo apt install ./remotedesk-agent_<version>_amd64-musl.deb
+sudo remotedesk-agentd pairing-code --allow-user "$USER"
+```
+
+其他 x64 systemd 发行版可解压 `RemoteDesk-Agent-<version>-linux-x64.tar.gz` 后运行 `sudo ./install.sh`。RPM 由 Linux CI 生成。安装包不会修改 UFW、firewalld、nftables、SELinux 或 AppArmor；需要管理员按网络边界显式放行默认 TCP 39500。
+
+如已单独部署 Edge 服务，可在 `/etc/remotedesk/agent.env` 同时配置 `REMOTEDESK_EDGE_API_URL`、`REMOTEDESK_EDGE_PRESENCE_TOKEN`、`REMOTEDESK_EDGE_REGION` 和 `REMOTEDESK_EDGE_GATEWAY_ID`，然后重启 `remotedesk-agentd`。公网 URL 必须使用 HTTPS，令牌必须是至少 32 字节的 Agent Presence 专用令牌。用 `sudo remotedesk-agentd status --json` 检查 `edge_presence`；这只发布短 TTL 在线路由，不会启用控制端 CDN 选项或建立媒体会话。
+
+控制端“全局设置 > Edge 会话授权”可填写同一 HTTPS Edge API Origin。首次配对时，把 Agent 本地 `pairing-code` 命令输出的 `device_public_key` 填入主机配置；Agent 已在线且本机配对窗口有效时，Client 以自己的 Ed25519 key 签名 `pairing` Intent，Agent 验证窗口的用户/terminal 范围后签发 relay。控制端随后在 opaque relay 内核对 Agent 公钥、签名 challenge，并提示输入八位一次性码；配对码不进入 Edge API。缺少 Edge URL 或设备公钥时仍可直连配对。公网 relay 使用系统信任 TLS，明文仅允许 loopback 测试；媒体/RDP CDN 策略仍不开放。
+
+Linux Terminal 面板会显示该身份条目的 `已保存/未保存/待检查` 状态。刷新按钮读取 Credential Manager；删除按钮在确认后显式忘记身份，下一次会话必须重新配对，但仍可使用上述 Edge 路径。删除主机配置时也会单独询问是否同时忘记身份；选择保留时，可在 Windows Credential Manager 中按上述目标手工维护。Agent 公钥不是秘密，但它决定签名请求的目标设备，只能使用 Agent 本地命令输出核对。
+
+配对命令输出八位一次性代码和设备公钥。控制端不要求配置或固定 TLS 证书指纹。当前 Windows 控制端可从 Linux Terminal 主机入口配对并打开终端；源码已为 Xorg 主机开放独立 Linux 桌面窗口入口，但该新增链路尚未编译和真实主机验收，当前发布包仍不可用。
+
+### 开发模式
+
+环境要求：
+
+- Node.js 22
+- npm 10
+
+开发模式需要先构建页面，再分别启动控制服务和 Vite。第一个终端执行：
+
+```powershell
+cd client/web
+npm ci
+npm run build
+npm run control
+```
+
+第二个终端执行：
+
+```powershell
+cd client/web
+npm run dev
+```
+
+浏览器打开 `http://127.0.0.1:4173`。Vite 把 `/api` 转发给 `127.0.0.1:4174` 的 Rust 控制服务。生产构建和类型检查：
+
+```powershell
+npm run lint
+npm run build
+```
+
+无法写入 `dist` 的受限环境可执行 `npm run build:check`。
+
+## 3. 切换白色主题
+
+点击顶栏右侧的太阳或月亮图标切换白色主题和深色主题。首次打开时跟随 Windows 系统主题；手动切换后，RemoteDesk 会在当前浏览器或 WebView 配置中记住选择。
+
+## 4. 添加主机
+
+点击“新增主机”，填写名称、连接类型和地址或设备 ID。
+
+主机配置由本地控制服务保存到 `%LOCALAPPDATA%\\RemoteDesk\\hosts.db`。重新安装或升级客户端不会清理该目录，主机名称、地址、显示和连接选项会自动保留；Windows 密码仍单独保存到 Windows Credential Manager，不写入主机数据库。
+
+Windows 主机添加后会立即检测，刷新按钮会重新检测全部 Windows 主机。打包版本会在 TCP 可达后继续解析 RDP Negotiation Confirm；“RDP 协商成功”仍不表示账号密码正确，也不表示 NLA 已完成。Linux Agent 探测使用 TLS/WSS 加密并校验协议 `Hello`，显示握手耗时、终端/桌面/文件能力和 Edge 在线状态，不要求配置证书指纹。
+
+### Windows RDP
+
+- 类型选择 `Windows RDP`。
+- 地址填写 Windows 主机的 IP、域名或 `host:port`，默认端口为 `3389`；IPv6 自定义端口使用 `[IPv6]:port`。
+- 账户可填写 `DOMAIN\user`、`COMPUTER\user` 或 UPN 格式，仅传给本次启动的 RDP 客户端；密码不会进入页面或命令行。`mstsc` 使用的临时 `.rdp` 文件也不含密码。
+- 被控 Windows 需要启用远程桌面，并允许目标账户登录。
+- 在“RDP 客户端”中选择一种方式：
+  - `mstsc`：系统远程桌面，支持当前版本最完整的多显示器能力，认证由 Windows 窗口处理。
+  - `客户端内`：随安装包提供的独立 IronRDP 原生窗口，密码从 Windows Credential Manager 读取或只在 helper 的本地遮罩提示中输入；支持主显示器或启动时枚举的全部本地显示器，优先使用 D3D11 swap chain CPU 上传呈现，失败时回退 software framebuffer。
+
+RDP 端口与协议检测只用于状态诊断，不是 `mstsc` 或原生 IronRDP 的连接前置条件。协议探针可以显示服务器协商结果，但不会要求用户确认或配置证书指纹；连接失败时仍会显示实际错误。
+
+控制服务源码通过仅限当前 Windows 用户、拒绝远程客户端的 Named Pipe 启动原生 viewer。命令行只携带随机 pipe name；目标、用户名、opaque 凭据引用、分辨率和全屏设置在控制服务核对 pipe 客户端 PID、进程创建时间、实际镜像路径、build hash 及一次性 challenge MAC 后才发送。viewer 完成严格 JSON schema 和全部配置字段校验后，才返回绑定该载荷摘要的认证 ACK；未 ACK、摘要不符或 MAC 错误都会使控制服务终止启动。连接、认证、配置和 ACK 共用 10 秒绝对 deadline，helper 即使已经连接，后续停滞也会超时。viewer 同时加入随控制服务关闭的 Job Object，握手失败会在质量诊断中报告 `secure_pipe_failed`。该新增链路按本轮要求尚未编译和 Windows 实机验收，旧安装包不包含此行为。
+
+IronRDP 原生窗口获得焦点后，物理键盘扫描码、鼠标移动、左/右/中键、前进/后退键和水平/垂直滚轮会发送到远端，鼠标坐标按当前窗口与远程桌面尺寸换算。当前构建显式启用 Windows CLIPRDR 双向剪贴板并默认启用 RDPSND 本地音频。切换到其他窗口、关闭会话或执行本地保留快捷键时，客户端会先释放远端已按下的按键和鼠标按钮，避免 Ctrl/Alt 或拖拽状态卡住。
+
+IronRDP 原生窗口支持 `F11` 或 `Alt+Enter` 切换全屏，处于全屏时按 `Esc` 返回窗口，按 `Ctrl+Shift+Q` 关闭当前会话。按 `Ctrl+Alt+Home` 会向远端发送标准 RDP `Ctrl+Alt+End` 序列，用于打开远程 Windows 安全界面；它不能拦截或直接发送本机 Windows 保留的 `Ctrl+Alt+Del`。这些组合键作为本地命令处理：触发时立即释放远端输入，命令按键不会重复转发；点击窗口关闭按钮也会先释放输入状态，再向 RDP 客户端发送关闭事件。
+
+Windows 系统 RDP 服务端是否提供 GPU surface 取决于服务端、编码模式和 IronRDP 能力。当前原生 viewer 只转换 IronRDP dirty region 的像素块，将其合并到持久 CPU framebuffer，只把变化区域上传到持久 D3D11 texture，再呈现到 swap chain；质量详情显示最近一次像素转换量、上传模式和上传像素数。该路径仍不能报告硬件解码或端到端零拷贝。
+
+### Linux Agent
+
+- 类型选择 `Linux Agent`。
+- 地址填写 Agent 设备 ID。
+- 图形会话可选择 Wayland 或 Xorg，纯命令行使用 Terminal。
+- Linux 只作为被控端，不提供控制端界面。
+
+Linux Agent 已提供 DEB、静态便携包和 RPM 构建链。协议 minor 9 源码已增加 X11 `GetImage` 捕获、XTEST 输入、有界 zlib BGRA 帧、全屏/退出、自适应、短时恢复、质量遥测、原生包的 GStreamer H.264 编码/有界媒体 IPC/WebRTC sender、Windows 控制 helper 的远端 H.264 RTP 重组、Media Foundation 解码和 D3D11 呈现，以及经服务端确认的 H.264-only/呈现 ACK/zlib 回退状态机。静态 musl 包不包含动态 GStreamer 特性。协议 minor 11 的 Wayland 源码会在远端认证和 `desktop` 权限检查后的 `OpenDesktop` 中启动 Portal 授权，仅接受 PipeWire DMABUF 到 VA surface/H.264 的严格管线；首个 IDR 和 EIS 键盘/指针设备就绪后才打开桌面，按 Windows 实际呈现 ACK 发送后续帧，并通过 `reis`/XKB 注入映射到所选 stream region 的鼠标、滚轮和键盘。协议 minor 12 进一步增加绑定 Client 指纹和用户的 15 秒 Portal/EIS 恢复租约，断线立即释放输入，恢复时使用新的 WebRTC sender 和新 IDR。协议 minor 13 增加认证 WSS 直连 WebRTC：Client/Agent 交换有界 SDP/ICE，授权绑定 Client 指纹、用户、尺寸和 FPS，双方 ICE 完成后才发送对应 `OpenDesktop`；失败完成 abort/unavailable 同步后，X11 才回退 zlib，Wayland 不提供原始帧 CPU/zlib 回退。新增依赖、管线、恢复和直连链路尚未编译、进入安装包或在 GNOME/KDE/VA 驱动上验收，因此运行时能力仍关闭，不能据授权弹窗或源码入口宣称 Wayland 可用。
+
+源码中的 Linux X11 桌面窗口使用 `F11` 或 `Alt+Enter` 切换全屏，全屏时 `Esc` 返回窗口，`Ctrl+Shift+Q` 退出会话。协议 minor 10 可在主机设置中启用相对鼠标；光标抓取成功后 Windows Raw Input 位移会合并并发送到 XTEST，`Ctrl+Alt+Home` 可随时切换捕获。窗口失焦、重连或退出会解除光标抓取并释放远端按键和鼠标按钮；切换全屏也会释放远端输入状态。主动退出等待被控端完成释放并返回关闭确认。画面保持宽高比居中显示，黑边区域不会生成远端鼠标坐标。选择“跟随窗口”时，窗口尺寸稳定 500 ms 后才提交一次 200..8192 范围内的新捕获上限；它只调整捕获缩放，不修改被控 Xorg 的物理分辨率。协议 minor 15 源码按 `clipboard_read`、`clipboard_write` 两个配对权限启用 X11 与 Windows 控制端的双向纯文本剪贴板；主机设置可分别关闭“读取被控端”和“写入被控端”，实际协商结果是本地开关与 Agent 授权的交集。主界面的“当前会话剪贴板”在连接后读取 helper 诊断中的最终交集；连接或重连期间显示等待协商，双方均未授权时显示“Agent 未授权”。单项限制 32 KiB，只有接收方请求后才发送内容，并校验序号、UTF-8 长度、SHA-256 和 canonical Base64。Wayland 剪贴板尚不可用。异常断线后按 1、2、4 秒最多重连三次，每次重新固定证书并认证；Edge 路径会申请新的一次性票据。被控端保留同一 X11 会话 15 秒，恢复令牌绑定已认证客户端与 Linux 用户并在成功恢复后旋转；断线期间的旧输入、未完成帧和 ACK 不会重放。Windows 控制 helper 会把最新令牌按 Agent 证书和 Linux 用户隔离保存到当前用户 Credential Manager；helper 异常退出后，在 15 秒租约内重新启动同一主机和用户即可尝试恢复。正常关闭、服务端关闭或令牌拒绝会清除记录。新增剪贴板路径按要求尚未编译或在真实 Windows/Xorg 主机验收。
+
+新增 Linux Terminal 主机时填写 Agent `host[:port]` 和允许登录的普通用户。首次点击“配对并打开终端”，在新本地窗口遮罩输入八位一次性配对码；后续直接连接使用 Windows Credential Manager 中的客户端 Ed25519 身份完成 challenge 签名，不再发送配对码。私钥、配对码和终端内容不经过 React 或控制服务。
+
+协议 minor 14 源码增加显式 Opus 音频协商。只有同版本 Client 明确请求且本次桌面已取得授权 WebRTC media sender 时，Linux 用户会话才捕获系统输出 monitor；minor 13 及更旧客户端缺少该字段时默认关闭，不会收到 Opus packet 或 unavailable 事件。音频使用固定 48 kHz 双声道、20 ms 包，经有界 IPC/SRTP 传输并在 Windows 通过有界队列、IronRDP Opus 解码和 WASAPI 播放。音频捕获、发送、解码或播放失败只关闭音频，不中断 H.264 或 zlib 视频。该路径仍需 Linux/Windows 音频设备端到端验收。
+
+## 5. RDP 凭据维护
+
+选择 Windows 主机后，可以在右侧“Windows 凭据”区域为该主机打开独立本地遮罩窗口，保存或覆盖 Windows 账号和密码，也可检查状态、删除条目或打开系统凭据管理器。`mstsc` 继续使用 Windows 登录窗口；原生 IronRDP 通过主机的 opaque 引用直接读取系统凭据。
+
+RemoteDesk 的 React/HTTP 层不收集或保存 RDP 账号密码，只处理 `RemoteDesk/RDP/<profile-id>` 形式的 `credential_ref` 和 `ready/missing` 状态。录入窗口和 IronRDP viewer 直接调用 Windows Credential Manager；控制服务只负责启动 helper，主机配置只保存无法推出密码的引用。
+
+## 6. 会话设置
+
+选中主机后，可在右侧检查器调整：
+
+- 连接模式：Windows 使用 RDP；Linux 使用 Wayland、Xorg 或 Terminal。
+- 显示器：主显示器、全部显示器或自定义显示器子集。
+- 分辨率：跟随窗口、1280x720、1600x900、1920x1080、2560x1440、3840x2160，或输入 200 到 8192 的自定义宽高；终端模式不使用像素分辨率。
+- 启动时全屏：“客户端内”IronRDP 和源码中的 Linux Xorg 桌面窗口可用，启动后仍可用快捷键切换；Linux 新链路尚未编译验收。
+- 网络策略：`Smart`、`Direct preferred` 或 `CDN preferred`。
+- 双端严格零拷贝：仅在运行时报告 `linux.native_video=true` 时显示；当前 X11 zlib 软件帧路径不显示该开关。
+
+“跟随窗口”在 `mstsc` 中写入动态分辨率配置，在 IronRDP 原生窗口中以 1600x900 建立会话并在窗口尺寸稳定 1 秒后向远端提交带 generation 的新尺寸；只有收到匹配尺寸的远端图像才确认成功。服务端不支持动态调整或 5 秒内没有确认时，原生窗口会询问是否重连应用目标尺寸；取消会保持当前会话，控制端不会静默重连。Linux X11 窗口则以 500 ms 防抖提交新的捕获上限。固定和自定义尺寸作为初始远程桌面尺寸。
+
+IronRDP 会话异常中断时会先释放全部远端按键和鼠标状态，再按 1、2、4 秒间隔最多自动重连三次。由分辨率失败触发的重连不属于异常恢复，必须先由用户确认；确认后的目标尺寸会用于后续故障重试。窗口标题和主界面诊断会显示当前重连或 resize 状态；正常退出和用户关闭窗口不会触发重连。
+
+`CDN preferred` 表示优先让客户端和 Agent 分别接入最近边缘节点，再通过优质骨干网传输。它不是缓存视频内容的传统静态 CDN。
+
+当前控制端的 `edge.relay` 能力仍为 `false`，网络策略固定为 `Direct preferred`，不能通过选择框启用 CDN。仓库已经提供 Edge Presence/Allocator、透明 TCP byte relay、Windows Client 签名 Session Intent、Linux Agent 本地授权，以及只在授权成功后向双方下发 session-bound coturn 短期凭据的响应；接受的桌面会话会由两端 `webrtc-rs` PeerConnection 通过设备签名 mailbox 交换 SDP/ICE，并协商 H.264/RTX/Opus 与控制 DataChannel。Linux X11 捕获、GStreamer H.264 sender 和 Windows native-video 远端 RTP 解码/呈现均已有源码接线，但尚未解析依赖、编译或实机运行，实际 coturn POP 和双 POP 骨干也未部署验收。配置 Edge 会话授权或安装 Edge DEB 不会开放 CDN 选项。
+
+## 8. 多显示器
+
+Windows RDP 与 Linux Agent 的显示器来源不同：
+
+- Windows RDP：`mstsc` 支持单屏、“全部显示器” `/multimon` 和自定义本地子集。IronRDP 原生单屏通过 RDP resize 事件跟随窗口动态调整远程桌面；选择“全部本地显示器”时，viewer 通过 Win32 枚举 2..16 个实际显示器并发送 RDPEDISP 多屏布局，窗口覆盖本地虚拟桌面。自定义显示器子集在原生模式下暂不开放。
+- Linux Agent（目标设计，当前未实现）：选择被控 Linux 的 Wayland Portal 或 XRandR 显示器。Agent 保持实体桌面布局不变，只捕获所选屏幕并按编码上限缩放。
+
+显示器可以位于主屏左侧或上方，因此协议保留负坐标。输入事件携带显示器 ID、布局 generation 和源桌面坐标；热插拔、旋转、DPI、分辨率或选择变化都会递增 generation，旧坐标事件和旧零拷贝证明立即失效。
+
+严格零拷贝模式要求所有选中屏幕的捕获、合成、编码、解码和最终显示位于可验证的同卡路径。跨 GPU 屏幕组合只能在 Compatibility 模式中使用，并明确报告 `CrossAdapterCopy`。
+
+## 9. GPU 与严格零拷贝
+
+默认模式选择窗口所在显示器对应的 GPU。手动模式固定使用指定 GPU，但仍会验证完整链路：
+
+```text
+decode GPU -> render GPU -> window display GPU
+```
+
+严格模式下，三者必须位于同一 Adapter，且 Agent 端也必须证明捕获到编码过程中没有 CPU map 或跨 GPU copy。手动 GPU 与窗口显示 GPU 不同时，严格模式会拒绝会话；显式 Compatibility 模式可允许跨卡或软件路径，但界面必须显示实际降级状态。
+
+切换 GPU、显示器或远程分辨率后，旧的零拷贝证明立即失效，双方必须使用新的 epoch 和 challenge 重新验证。
+
+## 10. 验证原生视频管线计划
+
+native-video Helper 支持管线规划和真实 D3D11 硬件设备探针。同卡严格模式规划：
+
+```powershell
+cargo run -p remotedesk-native-video -- --dry-run --window-adapter gpu-0
+```
+
+严格模式验证跨卡拒绝：
+
+```powershell
+cargo run -p remotedesk-native-video -- --dry-run --window-adapter gpu-0 --manual-adapter gpu-1
+```
+
+兼容模式允许跨卡并明确报告 `CrossAdapterCopy`：
+
+```powershell
+cargo run -p remotedesk-native-video -- --dry-run --window-adapter gpu-0 --manual-adapter gpu-1 --compatibility
+```
+
+`--dry-run` 输出 `d3d11_created=false` 是预期行为，只表示该命令没有调用平台 API。验证当前 Windows 是否能真实创建 D3D11 device 与 immediate context：
+
+```powershell
+cargo run -p remotedesk-native-video -- --probe-d3d11
+```
+
+H.264 decoder allocation probe 会实际创建 decoder 与 NV12 output surface，但不会把“对象可创建”标记为已完成硬解或零拷贝：
+
+```powershell
+cargo run -p remotedesk-native-video -- --probe-h264-decoder
+```
+
+使用本地 H.264 容器做真实首帧解码与 DXGI surface 验证：
+
+```powershell
+cargo run -p remotedesk-native-video -- --probe-h264-file C:\samples\baseline.mp4
+```
+
+支持 MP4、M4V、MOV，文件上限 512 MiB；不会接受 UNC 地址或把 CPU buffer 当作 DXGI 解码结果。`sample_decoded=true` 只表示真实文件产生了同 device NV12 surface，仍需查看同时输出的 `hardware_decode_verified=false` 与 `zero_copy_verified=false` 边界。
+
+本地 DXGI surface 窗口呈现：
+
+```powershell
+cargo run -p remotedesk-native-video -- --play-h264-file C:\samples\baseline.mp4
+```
+
+播放器按媒体时间戳调度 NV12 surface，通过同一 D3D11 device 的 VideoProcessor 转换、等比缩放并写入 swap chain，不读取 CPU 原始帧。使用 `F11` 或 `Alt+Enter` 切换全屏、`Esc` 返回窗口、`Ctrl+Shift+Q` 退出。该本地文件入口不等于远程 Linux 桌面媒体链路，当前仍不会开放 `linux.native_video`。
+
+成功时输出 `d3d11_created=true` 和实际 feature level。IronRDP viewer 已独立接入 swap chain CPU 上传呈现；本探针尚未创建视频解码器，也不能证明端到端零拷贝。
+
+## 11. 在线升级
+
+Windows 控制端支持在线检查和原位升级，但仓库不内置生产更新地址或信任公钥。在顶栏打开“全局设置”，于“在线升级”中同时填写 HTTPS 清单 URL 和 Base64 Ed25519 公钥，保存后可手动检查；开启“自动检查更新”时，每次打开控制端会检查一次。两项配置必须同时存在，也可以同时清空以关闭更新。
+
+发现新版本后，顶栏会显示下载图标，设置页会显示版本、发布时间、包大小和发行说明。点击“下载并安装”并确认后，控制服务重新下载并验签清单，只接受匹配当前产品和 Windows 架构且高于当前版本的三段式版本；MSI 下载完成后校验签名清单中的精确大小和 SHA-256。控制服务随后退出，独立 helper 再次校验文件，使用 `/passive /norestart` 执行 MSI 升级，并在成功后重新启动 RemoteDesk。
+
+更新目录和安装日志位于 `%LOCALAPPDATA%\RemoteDesk\updates`。传输必须使用 HTTPS，但 HTTPS/CDN 本身不作为发布身份：客户端只信任本机配置的 Ed25519 公钥。普通开发 MSI 仍不签名；受保护标签工作流先签署和验证控制端/Host payload 与 MSI，再对最终控制端 MSI 字节生成清单，并在版本资产发布成功后更新固定 `stable-channel`。清单生成、密钥保管和发布配置见 [在线升级](online-updates.md)。
+
+## 12. 常见问题
+
+### 点击连接后没有远程画面
+
+先检查状态是否为“端口可达”。若为“端口拒绝连接”，请在被控 Windows 启用远程桌面并确认系统防火墙允许目标端口；若“连接超时”，检查地址、端口和路由。状态可达但 `mstsc` 登录失败时，应在系统窗口中检查账号、密码、NLA 和账户远程登录权限。
+
+### 严格模式报告跨 GPU
+
+把客户端窗口移动到手动 GPU 所连接的显示器，或改回“窗口显示器 GPU”。只有明确接受性能下降时才启用 Compatibility。
+
+### RemoteDesk 中没有密码输入框
+
+`mstsc` 的密码由 Windows 登录窗口和凭据管理器维护；IronRDP 的密码在独立 helper 本地遮罩窗口中保存到 Windows Credential Manager，并由 viewer 直接读取。密码不进入 RemoteDesk 的 HTTP、React 状态、`localStorage`、日志、命令行或临时 `.rdp` 文件。
+
+### Linux Wayland 无法无人值守控制
+
+Wayland 权限由桌面环境和 Portal 决定。首个稳定版本不会承诺控制所有桌面环境的登录界面；桌面未登录时可使用 Terminal 会话。
+
+### 差网络下画面不稳定
+
+完整 H.264/Opus 链路仍将使用拥塞控制、动态码率、帧率和分辨率降档，并在直连、Single Edge 和 Dual Edge 之间重新探测。当前顶栏显示控制端本地时间；Windows 在原生会话建立前显示 TCP/RDP 探针耗时，IronRDP 收到服务器 `NetworkCharacteristicsResult` 后改为显示真实会话平均 RTT，并在详情中显示基础 RTT 和服务器估算带宽。服务器未发送该结果时不会生成替代值。IronRDP 原生会话还会通过不含地址、账户、凭据和原始错误的诊断文件回传等待凭据、连接中、已连接、失败或结束状态，以及帧数、远程尺寸、本地解码处理耗时和本地呈现耗时。解码计时从网络图形 PDU 进入 IronRDP active stage 开始，覆盖 framebuffer 像素转换；输入、resize、网络 RTT 和帧间隔不会被用作替代值。RDP 服务端不提供编码耗时，因此 Windows RDP 的编码延迟仍明确显示“暂无数据”。Linux X11 helper 源码使用当前直连 WSS 或 Edge relay 内的 Ping/Pong 回传真实会话 RTT；zlib 画面回传实际采集、zlib 编码、完整性校验和软件呈现耗时。原生 H.264 画面使用 H.264 元数据中的真实采集与编码耗时，并分别测量 Windows MFT 解码和 D3D11 呈现耗时；切换确认后不再生成完整 zlib 帧，因此不会用兼容链路覆盖原生指标。最近一秒帧率只统计实际呈现的当前画面。新增指标链路尚未编译及真实主机验收。`?demo=1` 下的质量数字仅用于界面演示。
+
+## 12. 相关文档
+
+- [开发指南](development.md)
+- [Windows 客户端设计](windows-client.md)
+- [Linux Agent 设计](linux-agent.md)
+- [GPU 加速](gpu-acceleration.md)
+- [差网络自适应](network-adaptation.md)
+- [CDN 与边缘中继](edge-relay.md)
+- [在线升级](online-updates.md)
diff --git a/docs/windows-agent-applications.md b/docs/windows-agent-applications.md
new file mode 100644
index 0000000..1397637
--- /dev/null
+++ b/docs/windows-agent-applications.md
@@ -0,0 +1,30 @@
+# Windows Agent 应用配置
+
+Windows Agent 的“应用”连接模式只允许启动被控端管理员配置的白名单应用。
+
+配置文件：
+
+`%ProgramData%\RemoteDesk\Host\applications.json`
+
+示例：
+
+```json
+[
+  {
+    "id": "notepad",
+    "name": "记事本",
+    "path": "C:\\Windows\\System32\\notepad.exe",
+    "arguments": []
+  },
+  {
+    "id": "calculator",
+    "name": "计算器",
+    "path": "C:\\Windows\\System32\\calc.exe",
+    "arguments": []
+  }
+]
+```
+
+修改配置后重启 Windows Agent。控制端探测 Agent 时会读取应用 ID 和名称，连接模式切换为“应用”后即可选择。控制端只发送应用 ID，不会发送任意 EXE 路径或命令行。
+
+Windows Agent 当前仍是未认证的可信网络开发链路，不应直接暴露到公网。
diff --git a/docs/windows-client.md b/docs/windows-client.md
new file mode 100644
index 0000000..220c279
--- /dev/null
+++ b/docs/windows-client.md
@@ -0,0 +1,325 @@
+# RemoteDesk Windows 客户端设计
+
+## 1. 产品结构
+
+Windows 客户端的目标形态由 Tauri 主程序和按需启动的原生 helper 组成。当前 M0 便携版使用 React 管理界面、Rust 控制服务、两个 RDP helper，并保留 Linux native-video 管线规划 helper：
+
+```text
+RemoteDesk Tauri Client
+├── 管理主窗口                 React/TypeScript
+├── Linux 终端窗口             xterm.js
+├── Rust Core                  配对、配置、Edge
+├── RDP Protocol Probe         IronRDP，Negotiation + TLS 证书、无凭据
+├── RDP Viewer                 IronRDP/winit，D3D11 swap chain CPU 上传呈现
+└── Native Video Helper        GStreamer/D3D11，Linux 桌面默认
+```
+
+客户端只运行于 Windows。Linux 只部署 Agent。
+
+## 2. 主界面
+
+```text
++----------------------------------------------------------+
+| RemoteDesk | Search                       [+ Add] [Settings]|
++------------+---------------------------------------------+
+| All        | Name        Type      State       Last used |
+| Windows    | dev-win     RDP       Offline     Yesterday |
+| Linux      | build       Terminal  Ready       10:42     |
+| Favorites  | desktop     Wayland   Running     09:18     |
+| Recent     |                                             |
++------------+---------------------------------------------+
+| status / non-sensitive diagnostics                       |
++----------------------------------------------------------+
+```
+
+- 列表优先，适合重复连接和状态扫描。
+- 连接和编辑使用图标按钮和 tooltip。
+- 状态不只依赖颜色。
+- 不设置营销首页、超大标题或嵌套卡片。
+
+## 3. Tauri 窗口
+
+### 3.1 Main Window
+
+- 主机列表、搜索、编辑和设置。
+- 配对设备、权限和撤销。
+- 全局 GPU、网络、画质和重定向策略。
+
+### 3.2 Terminal Window
+
+- xterm.js 独立会话。
+- 支持搜索、复制、粘贴确认和窗口尺寸同步。
+- 终端页不加载远端网页，不执行远端 HTML/JS。
+
+## 4. Native Helpers
+
+### 4.1 RDP Protocol Probe
+
+独立 `remotedesk-rdp-session.exe`：
+
+- 从有界 stdin JSON 读取目标和超时，不允许账号或密码字段。
+- 执行 DNS、TCP、X.224 和 RDP Negotiation Confirm。
+- 验证服务端是否提供兼容的增强安全协议，不进入 CredSSP/NLA，也不验证登录结果。
+
+### 4.2 Native RDP Viewer
+
+独立 `remotedesk-rdp-viewer.exe`：
+
+- 使用 IronRDP 和 winit 建立客户端内单屏或全部本地显示器 RDP 会话；多屏路径由 Win32 枚举真实 geometry，并通过 RDPEDISP 发送主屏相对 monitor layout。
+- 控制服务以安全 Named Pipe 交付目标、opaque 凭据引用和显示参数；viewer 命令行只含随机 pipe name。viewer 只有在严格 JSON schema 和所有配置字段通过自身校验后才返回绑定载荷摘要的认证 ACK，控制服务收到合法 ACK 后才把启动握手视为成功。
+- 凭据只在 helper 的本地遮罩提示中输入，不经过 argv、HTTP、React 或临时 `.rdp` 文件。
+- RDP frame 留在原生进程，不进入 Tauri/WebView。
+- Windows 硬件 D3D11 可用时使用 `d3d11_cpu_upload`：IronRDP 只转换 `GraphicsUpdate` dirty region 的紧凑像素块，viewer 将其写入持久 CPU framebuffer，并把 redraw 前合并后的变化区域局部上传到完整 GPU frame texture，再复制到 DXGI back buffer；创建失败时回退 `software_framebuffer`。
+- 窗口聚焦时通过 IronRDP FastPath 转发物理键盘扫描码、五键鼠标、水平/垂直滚轮和按窗口缩放的绝对指针坐标；失焦和关闭前统一释放远端按键及鼠标状态。
+- 支持启动时全屏，并用 `F11`/`Alt+Enter` 切换全屏、`Esc` 退出全屏、`Ctrl+Shift+Q` 关闭会话。
+- 使用 `Ctrl+Alt+Home` 触发受控的远端 `Ctrl+Alt+End` 按下/释放序列，以调用 RDP 远程安全界面；不宣称捕获或发送本机 `Ctrl+Alt+Del`。
+- 通过随机会话标识关联脱敏诊断快照，回传凭据等待、连接、结束状态、帧数、桌面尺寸、本地解码处理耗时、本地呈现耗时、最近一次像素转换数量、frame upload 模式和上传像素数；解码计时覆盖网络图形 PDU 进入 IronRDP active stage 后的处理及 dirty region 像素转换，不将输入、resize 或帧间隔冒充解码；RDP 服务器发送 `NetworkCharacteristicsResult` 时另回传会话平均 RTT、基础 RTT 和估算带宽，未发送时保持空值；不写入目标、账户、凭据、证书或原始错误。
+- 无凭据探针完成 RDP Negotiation 后进入 TLS，返回完整服务器证书 DER 的 SHA-256；用户确认的指纹随原生启动请求传入独立 viewer，实际会话 TLS verifier 同时强制匹配指纹并验证 TLS 1.2/1.3 握手签名。指纹缺失或变化时 fail closed。
+- “全部本地显示器”创建覆盖 Windows 虚拟桌面的无边框组合窗口，最多接受 16 个显示器并要求恰好一个主屏；`Esc` 退出组合全屏后仍可缩放查看，`F11`/`Alt+Enter` 恢复组合全屏。自定义显示器子集仍使用 `mstsc`。
+
+D3D11 持久 frame texture、合并 dirty-rect 的局部 CPU 上传与 swap chain 呈现已接入；交换链使用 discard 语义，因此每次 Present 前从完整 frame texture 执行 GPU resource copy，不能把该路径称为零拷贝。硬件解码和经过验证的零拷贝仍属于后续目标。
+
+### 4.3 Native Video Helper
+
+独立 `remotedesk-native-video.exe` 是 Linux 桌面默认呈现端。它使用 gstreamer-rs/webrtcbin，在窗口所属或用户指定的 DXGI Adapter 上建立硬件 decoder、`GstD3D11Memory` 和 d3d11videosink。原始帧不离开 D3D11 surface，不经过 Tauri/WebView/Named Pipe。
+
+Helper 完成短样本解码和呈现验证后报告 `EndpointMemoryPath`。只有 decoder、sink 和输出位于同一 Adapter 且 ETW/GStreamer 诊断未发现 CPU map/copy，才报告 `zero_copy`。严格模式验证失败会终止媒体协商；不自动切换 WebView2。
+
+## 5. Helper IPC
+
+```text
+Tauri Rust Core
+      |
+restricted Named Pipe
+      |
+Native Helper
+```
+
+规则：
+
+- Pipe 使用当前 Windows SID 的保护 DACL、单实例和 `PIPE_REJECT_REMOTE_CLIENTS`。
+- 随机 pipe name、一次性 32 字节 bootstrap key 和服务端 challenge nonce。
+- 以 OS 返回的 pipe 客户端 PID 为准，校验已启动进程的创建时间、实际镜像路径和 SHA-256 build hash，并要求 HMAC-SHA256 challenge 通过。
+- 每个 viewer 绑定独立的 `KILL_ON_JOB_CLOSE` Job Object；握手失败终止 Job 并写入结构化 `secure_pipe_failed` 诊断，控制服务异常结束时由 Windows 内核清理遗留 helper。
+- 凭据、Session Ticket 和 TURN credential 不进入命令行。
+- IPC 使用 64 KiB 上限、长度前缀、拒绝未知字段的版本化 JSON；会话载荷另带绑定 challenge 的 HMAC。viewer 完成严格 schema 和字段校验后返回载荷 SHA-256 与 challenge 绑定的 HMAC ACK；摘要、MAC、版本错误或连接提前关闭都会使控制服务拒绝启动。连接、认证、配置交付和 ACK 共用一个 10 秒绝对 deadline，任一阶段停滞都会超时并终止对应 Job。
+- 只传命令、状态、指标和错误，不传 frame/PCM。
+- Heartbeat 失效后主程序清理会话并提示重启。
+- Helper 不能访问主应用全部 Tauri command。
+
+## 6. Session Controller
+
+统一状态机：
+
+```text
+Idle
+ -> Preflight
+ -> StartingTarget
+ -> Authenticating
+ -> Authorizing
+ -> Negotiating
+ -> Connected
+ -> Degraded
+ -> Reconnecting
+ -> Closing
+ -> Closed | Failed
+```
+
+实现规则：
+
+- Rust Core 中一个 actor 串行处理每个会话状态。
+- WebView/helper 只提交 Event，不直接修改核心状态。
+- 每次连接有 generation，旧窗口/helper 回调忽略。
+- Close 幂等，可从任何非终态调用。
+- Linux Terminal、RDP helper 和 Native Video 映射到同一错误模型。
+- 会话窗口关闭不自动关闭主应用。
+
+## 7. Adapter
+
+```text
+SessionAdapter
+├── LinuxWebCompatibilityAdapter
+├── LinuxNativeAdapter
+├── TerminalAdapter
+├── IronRdpHelperAdapter
+└── MstscFallbackAdapter
+```
+
+Adapter 提供：
+
+- capability。
+- connect/disconnect/reconnect。
+- resize/display topology。
+- quality/network policy。
+- input/clipboard/file permissions。
+- metrics 和结构化错误。
+
+## 8. 分辨率控制
+
+会话工具栏使用分辨率菜单，提供：
+
+- 自动跟随窗口（默认）。
+- 1280x720、1600x900、1920x1080、2560x1440、3840x2160。
+- 自定义宽高；当前 RDP 启动边界要求宽高都是 200 到 8192 的整数。
+
+IronRDP 窗口 resize 经过 1 秒防抖，每个稳定请求分配单调 generation。服务端支持 Display Control 时，只有收到与请求尺寸一致的远端图像才标记确认；调整后的协议对齐尺寸会回传给 viewer，旧 generation 的提交、失败和图像不会覆盖新请求。请求发送后 5 秒没有对应图像则进入结构化超时状态。
+
+不同 Adapter 的语义：
+
+- IronRDP：通过客户端 resize 事件请求调整远程会话桌面；服务端不支持动态调整或确认超时时，vendored client 保持当前连接，不再静默重连。原生窗口明确提示目标尺寸，只有用户确认才按新尺寸重连，取消后保留当前会话；诊断 API 和 React 同步显示 pending、reconnect_required、reconnecting、confirmed 或 cancelled。
+- `mstsc`：跟随窗口写入 `dynamic resolution:i:1`；固定/自定义尺寸写入 `dynamic resolution:i:0`、`desktopwidth` 和 `desktopheight`。
+- Linux Native：保持 Wayland/Xorg 源显示器模式不变，在 Agent 编码前缩放到目标尺寸。宽高比不同则使用等比缩放和黑边，不静默裁剪。
+- Terminal：分辨率菜单不可用；终端继续按字符行列 resize。
+
+固定尺寸默认是自适应算法的上限，差网络时允许暂时降档。用户可开启“锁定分辨率”，此时只降低码率和帧率；带宽不足时 UI 显示退化状态。原始尺寸、编码尺寸、接收尺寸和本地 viewport 分别进入诊断指标。
+
+### 8.1 多显示器
+
+客户端通过 DXGI/Win32 枚举本地 output，并生成稳定显示器 ID、物理像素矩形、主屏和 DPI scale。用户可选择主屏、全部屏幕或自定义子集。
+
+Windows RDP helper 将所选本地布局规范化为 RDP Display Control Dynamic Monitor Layout，保留主屏左侧/上方的负坐标和每屏方向、尺寸及 DPI。布局受服务端最大显示器数量、单屏尺寸和总桌面面积限制；能力不满足时返回结构化错误。服务端不支持动态更新时，客户端提示“重连后应用”，必须由用户确认。
+
+Linux native helper 接收的是 Agent 发布的远端显示器选择，但本地呈现仍绑定窗口所在 output。远端多屏可使用单一组合桌面或多个原生窗口；无论哪种方式，输入坐标都携带稳定显示器 ID 和布局 generation。
+
+显示器热插拔、DPI、方向、位置、分辨率或选择变化会递增 generation，取消旧布局计划，并使严格零拷贝报告进入 Revalidating。严格模式下 decoder、render 和最终 display Adapter 必须一致；跨 GPU 多屏只能在 Compatibility 中标记为 `CrossAdapterCopy`。
+
+## 9. Linux Desktop Video
+
+默认流程：
+
+1. Rust 完成设备认证、Session Ticket 和双端零拷贝能力预检。
+2. 启动 native-video helper，通过受限 Named Pipe 交付短期会话材料。
+3. Helper 建立 WebRTC、D3D11 hardware decoder 和 d3d11videosink。
+4. Agent 与 helper 分别提交经过验证的 `EndpointMemoryPath`。
+5. 两端都为 `zero_copy` 且 generation 匹配后，SessionController 才进入 Connected。
+
+用户显式启用 `compatibility` 后，可创建受限 WebView2 页面，将 WebRTC `MediaStream` 绑定 `<video>.srcObject`。该路径不得获取 Agent 长期私钥或其他主机配置，并固定报告 `opaque_gpu_path`，不宣称客户端零拷贝。
+
+## 10. GPU 模式
+
+### 10.1 默认
+
+- Linux native-video helper 使用窗口显示器所属 DXGI Adapter，decoder、sink 和 swap chain 保持同 Adapter。
+- RDP helper 默认选择窗口显示器所属 Adapter。
+- 用户界面显示实际 GPU、硬解状态以及 Agent/client 两端 memory path。
+
+### 10.2 手动
+
+- RDP helper 直接指定 DXGI Adapter LUID。
+- Linux desktop native-video helper 使用指定 DXGI Adapter。
+- 主机级选择覆盖全局选择。
+- 指定 GPU 不存在时本次回退默认，不修改配置。
+
+```text
+host manual > global manual > default
+```
+
+切换 GPU 需要重建当前会话呈现/decoder，但不重启主程序。
+
+## 11. 网络路径
+
+策略：
+
+- 智能优选。
+- 直连优先。
+- CDN 优先。
+
+每次连接重新探测并记录：
+
+- Direct/Single Edge/Dual Edge。
+- Client POP、Agent POP 和 TURN transport。
+- Backbone/last-mile RTT、loss、jitter。
+- Path generation 和 ICE restart。
+
+Linux native-video helper 直接使用 WebRTC ICE/TURN。RDP helper 通过 L4 Edge Connector 自定义 transport；mstsc 回退只有标准 RD Gateway/L4 服务时才能进入 CDN 路径。
+
+## 12. 输入
+
+当前 RDP viewer：
+
+- winit 物理扫描码和 IronRDP FastPath 键盘事件。
+- 当前单屏桌面的缩放绝对鼠标坐标、五键鼠标和水平/垂直滚轮。
+- 失焦和关闭时释放远端按键及鼠标按钮。
+- 本地保留紧急释放组合键。
+
+Linux 桌面 helper 的协议 minor 10 源码已接入 winit/Windows Raw Input 相对鼠标：只有显式启用并成功抓取窗口光标时才合并发送有界 `pointer_delta`，`Ctrl+Alt+Home` 切换捕获，失焦、重连和退出解除抓取并释放远端输入。该能力属于 X11 helper，不由当前单屏 RDP viewer 声明；带布局 generation 的多显示器坐标仍未实现。
+
+## 13. HostProfile
+
+```text
+id
+name
+kind: windows_rdp | linux_agent
+address/device_id
+credential_ref
+preferred_session: auto | wayland | xorg | terminal
+linux_renderer: native
+gpu_policy: inherit | default | manual(adapter_identity)
+agent_gpu_policy: capture_device | manual(adapter_identity)
+zero_copy_policy: required_end_to_end | compatibility
+network_policy: smart | direct_preferred | cdn_preferred
+display_policy:
+  selection: primary | all | custom(stable_display_ids)
+  resolution_mode: follow_window | source_native | fixed
+  width/height optional
+  adaptive_downscale: true | false
+  local_scale: fit | one_to_one | stretch
+quality_policy
+redirect_policy
+last_used_at
+```
+
+SQLite 不保存密码、私钥或 Token。POP 不固定写入 HostProfile，每次根据质量重新选择。
+
+Linux 图形主机默认保存 `native + capture_device + required_end_to_end`。Agent 手动 GPU 与捕获 DRM device 不一致时严格拒绝，不能跨 GPU 搬运原始帧。用户只有显式选择 `compatibility` 时才允许原生 helper 使用软件回退，不能由故障恢复或远端指令自动完成。`zero_copy_policy` 不约束 RDP：RDP helper 若只从 IronRDP 得到 CPU bitmap，则报告 `cpu_upload` 并继续使用 dirty-rect 优化；只有 IronRDP 暴露可验证的 GPU/video surface 时才允许报告 `zero_copy`。
+
+### 13.1 RDP 凭据
+
+HostProfile 只保存 opaque `credential_ref`，它指向 Windows Credential Manager 中的 generic credential target。账户、密码和可选域信息由 Rust Core 写入系统密钥库；密码不返回 React 状态，不进入 SQLite、日志、诊断包或配置导出。
+
+RDP helper 必须先通过 PID、创建时间、build hash 和 challenge MAC 完成本地 Named Pipe 身份认证，主进程才交付短期会话材料。更新凭据采用覆盖写；删除主机时询问是否同时删除密钥库项，避免无主凭据。凭据读取失败、target 不匹配或引用为空时，连接在进入 NLA 前失败并重新打开凭据界面。
+
+## 14. WebView 安全
+
+- 严格 CSP，不允许远端 script、iframe 和任意导航。
+- Tauri capability 按 main/desktop/terminal window 分开。
+- Release 禁用 devtools。
+- 只允许必要的 clipboard 和本地资源权限。
+- TURN credential/SDP 只进入受限原生 helper。
+- `postMessage`/Tauri command 校验 window label、session ID、generation 和 payload size。
+- Agent 发来的文本必须作为文本显示，不使用 `innerHTML`。
+
+## 15. 错误体验
+
+用户错误页展示：
+
+- 稳定错误名称。
+- 当前 Adapter/render mode/path mode。
+- 是否可重试或切换原生 helper/mstsc。
+- correlation ID 和诊断入口。
+- 当前 `zero_copy/gpu_copy/cpu_upload/software/opaque_gpu_path`，以及发生回退的具体阶段。
+
+不直接显示 Rust Debug、SDP、TURN credential、GStreamer dump 或远端路径。
+
+## 16. 多会话
+
+- 每个会话独立 window/helper、cancel token 和 generation。
+- 主进程跟踪原生 helper/GPU/硬解 session 数量。
+- 后台 Linux native 会话降低呈现/质量策略，但保持输入控制通道。
+- Helper crash 不终止其他会话。
+- 应用退出先请求所有会话优雅关闭，再清理超时进程。
+
+## 17. 测试
+
+- Tauri 主机列表与会话状态。
+- Native helper 的 D3D11 decoder -> GstD3D11Memory -> sink 全程零拷贝。
+- 原生 WebRTC 输入、系统组合键和 Raw Input。
+- xterm.js 中文、全屏 TUI、高频输出和 resize。
+- Named Pipe ACL、nonce、版本、helper crash/restart。
+- IronRDP/NLA/D3D11 和 mstsc 回退。
+- 自动跟随、固定/自定义尺寸、原始尺寸、锁定策略和动态分辨率失败回退。
+- Linux 调整编码尺寸时不改变 Wayland/Xorg 实体显示模式，黑边后的输入坐标正确。
+- Wayland DMA-BUF、Xorg DRI3 和客户端 D3D11 双端零拷贝；跨 GPU/CPU 路径默认拒绝。
+- 默认 GPU、手动 GPU/native helper 和 GPU 缺失回退。
+- Direct/Single/Dual Edge 和 RDP L4 Connector。
+- 多会话、窗口关闭、应用退出和诊断脱敏。
diff --git a/edge/edge-service/Cargo.toml b/edge/edge-service/Cargo.toml
new file mode 100644
index 0000000..ca7d2c6
--- /dev/null
+++ b/edge/edge-service/Cargo.toml
@@ -0,0 +1,24 @@
+[package]
+name = "remotedesk-edge-service"
+version.workspace = true
+edition.workspace = true
+license.workspace = true
+rust-version.workspace = true
+description = "Authenticated rendezvous, path allocator, TURN credential issuer, and byte relay for RemoteDesk"
+
+[dependencies]
+base64 = "=0.22.1"
+clap = { version = "=4.6.6", features = ["derive"] }
+ed25519-dalek = "=2.2.0"
+hmac = "=0.13.0"
+rand = "=0.9.5"
+remotedesk-protocol = { path = "../../protocol" }
+serde = { version = "=1.0.229", features = ["derive"] }
+serde_json = "=1.0.151"
+sha1 = "=0.11.0"
+sha2 = "=0.11.0"
+tiny_http = "=0.12.0"
+zeroize = "=1.9.0"
+
+[lints]
+workspace = true
diff --git a/edge/edge-service/src/allocator.rs b/edge/edge-service/src/allocator.rs
new file mode 100644
index 0000000..e953c3e
--- /dev/null
+++ b/edge/edge-service/src/allocator.rs
@@ -0,0 +1,287 @@
+use serde::{Deserialize, Serialize};
+use std::collections::HashMap;
+
+#[derive(Clone, Copy, Debug, Deserialize, Eq, PartialEq, Serialize)]
+#[serde(rename_all = "snake_case")]
+pub enum PathPolicy {
+    Smart,
+    DirectPreferred,
+    CdnPreferred,
+}
+
+#[derive(Clone, Copy, Debug, Deserialize, Eq, PartialEq, Serialize)]
+#[serde(rename_all = "snake_case")]
+pub enum RelayTransport {
+    Udp,
+    TcpTls,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+#[serde(deny_unknown_fields)]
+pub struct LinkProbe {
+    pub rtt_ms: f64,
+    pub loss_percent: f64,
+    pub jitter_ms: f64,
+    pub load_percent: f64,
+    pub reachable: bool,
+    pub transport: RelayTransport,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+#[serde(deny_unknown_fields)]
+pub struct PopProbe {
+    pub pop_id: String,
+    #[serde(flatten)]
+    pub link: LinkProbe,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+#[serde(deny_unknown_fields)]
+pub struct BackboneProbe {
+    pub from_pop: String,
+    pub to_pop: String,
+    pub rtt_ms: f64,
+    pub loss_percent: f64,
+    pub jitter_ms: f64,
+    pub reachable: bool,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+#[serde(deny_unknown_fields)]
+pub struct PathSelectionRequest {
+    pub policy: PathPolicy,
+    pub direct: Option<LinkProbe>,
+    #[serde(default)]
+    pub client_pops: Vec<PopProbe>,
+    #[serde(default)]
+    pub agent_pops: Vec<PopProbe>,
+    #[serde(default)]
+    pub backbone: Vec<BackboneProbe>,
+}
+
+#[derive(Clone, Copy, Debug, Eq, PartialEq, Serialize)]
+#[serde(rename_all = "snake_case")]
+pub enum PathMode {
+    Direct,
+    SingleEdge,
+    DualEdge,
+}
+
+#[derive(Clone, Debug, PartialEq, Serialize)]
+pub struct PathSelection {
+    pub mode: PathMode,
+    pub score: f64,
+    pub client_pop: Option<String>,
+    pub agent_pop: Option<String>,
+    pub transport: Option<RelayTransport>,
+}
+
+/// Selects a reachable Direct, Single Edge, or Dual Edge path from measured data.
+///
+/// # Errors
+///
+/// Returns an error when metrics are invalid or no path is reachable.
+pub fn select_path(request: &PathSelectionRequest) -> Result<PathSelection, &'static str> {
+    validate_request(request)?;
+    let direct = request
+        .direct
+        .as_ref()
+        .filter(|probe| probe.reachable)
+        .map(|probe| PathSelection {
+            mode: PathMode::Direct,
+            score: link_score(probe),
+            client_pop: None,
+            agent_pop: None,
+            transport: None,
+        });
+    let mut relay = relay_candidates(request);
+    relay.sort_by(|left, right| left.score.total_cmp(&right.score));
+    let best_relay = relay.into_iter().next();
+
+    match request.policy {
+        PathPolicy::DirectPreferred => direct.or(best_relay).ok_or("no path is reachable"),
+        PathPolicy::CdnPreferred => best_relay.or(direct).ok_or("no path is reachable"),
+        PathPolicy::Smart => match (direct, best_relay) {
+            (Some(direct), Some(relay)) if direct.score <= relay.score => Ok(direct),
+            (Some(_) | None, Some(relay)) => Ok(relay),
+            (Some(direct), None) => Ok(direct),
+            (None, None) => Err("no path is reachable"),
+        },
+    }
+}
+
+fn relay_candidates(request: &PathSelectionRequest) -> Vec<PathSelection> {
+    let backbone: HashMap<(&str, &str), &BackboneProbe> = request
+        .backbone
+        .iter()
+        .filter(|probe| probe.reachable)
+        .map(|probe| ((probe.from_pop.as_str(), probe.to_pop.as_str()), probe))
+        .collect();
+    let mut candidates = Vec::new();
+    for client in request
+        .client_pops
+        .iter()
+        .filter(|probe| probe.link.reachable)
+    {
+        for agent in request
+            .agent_pops
+            .iter()
+            .filter(|probe| probe.link.reachable)
+        {
+            let transport = if client.link.transport == RelayTransport::TcpTls
+                || agent.link.transport == RelayTransport::TcpTls
+            {
+                RelayTransport::TcpTls
+            } else {
+                RelayTransport::Udp
+            };
+            if client.pop_id == agent.pop_id {
+                candidates.push(PathSelection {
+                    mode: PathMode::SingleEdge,
+                    score: link_score(&client.link) + link_score(&agent.link),
+                    client_pop: Some(client.pop_id.clone()),
+                    agent_pop: Some(agent.pop_id.clone()),
+                    transport: Some(transport),
+                });
+            } else if let Some(probe) =
+                backbone.get(&(client.pop_id.as_str(), agent.pop_id.as_str()))
+            {
+                candidates.push(PathSelection {
+                    mode: PathMode::DualEdge,
+                    score: link_score(&client.link)
+                        + backbone_score(probe)
+                        + link_score(&agent.link),
+                    client_pop: Some(client.pop_id.clone()),
+                    agent_pop: Some(agent.pop_id.clone()),
+                    transport: Some(transport),
+                });
+            }
+        }
+    }
+    candidates
+}
+
+fn link_score(probe: &LinkProbe) -> f64 {
+    probe.rtt_ms
+        + probe.loss_percent * 20.0
+        + probe.jitter_ms * 2.0
+        + probe.load_percent * 0.2
+        + if probe.transport == RelayTransport::TcpTls {
+            25.0
+        } else {
+            0.0
+        }
+}
+
+fn backbone_score(probe: &BackboneProbe) -> f64 {
+    probe.rtt_ms + probe.loss_percent * 20.0 + probe.jitter_ms * 2.0
+}
+
+fn validate_request(request: &PathSelectionRequest) -> Result<(), &'static str> {
+    if request.client_pops.len() > 32
+        || request.agent_pops.len() > 32
+        || request.backbone.len() > 1024
+    {
+        return Err("too many path probes");
+    }
+    if request.direct.iter().any(|probe| !valid_link(probe))
+        || request
+            .client_pops
+            .iter()
+            .any(|probe| !valid_link(&probe.link))
+        || request
+            .agent_pops
+            .iter()
+            .any(|probe| !valid_link(&probe.link))
+        || request.backbone.iter().any(|probe| {
+            !valid_number(probe.rtt_ms, 60_000.0)
+                || !valid_number(probe.loss_percent, 100.0)
+                || !valid_number(probe.jitter_ms, 60_000.0)
+        })
+    {
+        return Err("path metrics are outside accepted ranges");
+    }
+    Ok(())
+}
+
+fn valid_link(probe: &LinkProbe) -> bool {
+    valid_number(probe.rtt_ms, 60_000.0)
+        && valid_number(probe.loss_percent, 100.0)
+        && valid_number(probe.jitter_ms, 60_000.0)
+        && valid_number(probe.load_percent, 100.0)
+}
+
+fn valid_number(value: f64, maximum: f64) -> bool {
+    value.is_finite() && (0.0..=maximum).contains(&value)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn link(rtt_ms: f64) -> LinkProbe {
+        LinkProbe {
+            rtt_ms,
+            loss_percent: 0.0,
+            jitter_ms: 0.0,
+            load_percent: 0.0,
+            reachable: true,
+            transport: RelayTransport::Udp,
+        }
+    }
+
+    fn pop(pop_id: &str, rtt_ms: f64) -> PopProbe {
+        PopProbe {
+            pop_id: pop_id.to_owned(),
+            link: link(rtt_ms),
+        }
+    }
+
+    #[test]
+    fn smart_policy_can_choose_dual_edge_over_slow_direct() {
+        let request = PathSelectionRequest {
+            policy: PathPolicy::Smart,
+            direct: Some(link(180.0)),
+            client_pops: vec![pop("a", 10.0)],
+            agent_pops: vec![pop("b", 12.0)],
+            backbone: vec![BackboneProbe {
+                from_pop: "a".to_owned(),
+                to_pop: "b".to_owned(),
+                rtt_ms: 30.0,
+                loss_percent: 0.0,
+                jitter_ms: 1.0,
+                reachable: true,
+            }],
+        };
+        let selected = select_path(&request).unwrap();
+        assert_eq!(selected.mode, PathMode::DualEdge);
+        assert_eq!(selected.client_pop.as_deref(), Some("a"));
+        assert_eq!(selected.agent_pop.as_deref(), Some("b"));
+    }
+
+    #[test]
+    fn explicit_policies_prefer_requested_class_but_fallback() {
+        let mut request = PathSelectionRequest {
+            policy: PathPolicy::DirectPreferred,
+            direct: Some(link(500.0)),
+            client_pops: vec![pop("a", 10.0)],
+            agent_pops: vec![pop("a", 10.0)],
+            backbone: vec![],
+        };
+        assert_eq!(select_path(&request).unwrap().mode, PathMode::Direct);
+        request.policy = PathPolicy::CdnPreferred;
+        assert_eq!(select_path(&request).unwrap().mode, PathMode::SingleEdge);
+        request.client_pops.clear();
+        assert_eq!(select_path(&request).unwrap().mode, PathMode::Direct);
+    }
+
+    #[test]
+    fn tcp_tls_and_loss_have_explicit_penalties() {
+        let mut udp = link(10.0);
+        let mut tcp = link(10.0);
+        tcp.transport = RelayTransport::TcpTls;
+        assert!(link_score(&tcp) > link_score(&udp));
+        udp.loss_percent = 5.0;
+        assert!(link_score(&udp) > link_score(&tcp));
+    }
+}
diff --git a/edge/edge-service/src/api.rs b/edge/edge-service/src/api.rs
new file mode 100644
index 0000000..ce211ec
--- /dev/null
+++ b/edge/edge-service/src/api.rs
@@ -0,0 +1,1440 @@
+use serde::{Deserialize, Serialize};
+use serde_json::json;
+use std::io::Read as _;
+use std::sync::Arc;
+use std::sync::atomic::{AtomicBool, Ordering};
+use std::time::Duration;
+use tiny_http::{Header, Method, Request, Response, Server, StatusCode};
+use zeroize::Zeroizing;
+
+use crate::{
+    AgentPollProof, AgentSignalAck, ClientSignalStatusRequest, EnqueueResult, NegotiationRegistry,
+    PathSelectionRequest, Presence, PresenceRegistry, RelayAccess, RelayBroker, RelayTicketIssuer,
+    RelayTicketPair, SignalRegistry, SignedNegotiationEnvelope, SignedSessionIntent,
+    TurnCredential, issue_turn_credential, select_path, unix_time_seconds,
+};
+
+const MAX_REQUEST_BYTES: usize = 256 * 1024;
+
+#[derive(Clone, Debug, Deserialize)]
+#[serde(deny_unknown_fields)]
+pub struct TurnPopConfig {
+    pub pop_id: String,
+    pub realm: String,
+    pub urls: Vec<String>,
+    pub secret_env: String,
+}
+
+#[derive(Clone)]
+pub struct ApiConfig {
+    pub api_token: String,
+    pub presence_token: String,
+    pub pop_id: String,
+    pub region: String,
+    pub public_relay_address: String,
+    pub default_relay_ttl_seconds: u64,
+    pub default_relay_max_bytes: u64,
+    pub turn_pops: Vec<TurnPopConfig>,
+}
+
+pub struct EdgeApi {
+    config: ApiConfig,
+    api_token: Zeroizing<String>,
+    presence_token: Zeroizing<String>,
+    registry: PresenceRegistry,
+    signals: SignalRegistry,
+    negotiation: NegotiationRegistry,
+    issuer: RelayTicketIssuer,
+    broker: Arc<RelayBroker>,
+}
+
+impl EdgeApi {
+    /// Builds the authenticated Edge API.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error if the API token is weak.
+    pub fn new(
+        mut config: ApiConfig,
+        issuer: RelayTicketIssuer,
+        broker: Arc<RelayBroker>,
+    ) -> Result<Self, &'static str> {
+        if config.api_token.len() < 32 {
+            return Err("edge API token must contain at least 32 bytes");
+        }
+        if config.presence_token.len() < 32 {
+            return Err("edge Presence token must contain at least 32 bytes");
+        }
+        if constant_time_equal(
+            config.api_token.as_bytes(),
+            config.presence_token.as_bytes(),
+        ) {
+            return Err("edge API and Presence tokens must be different");
+        }
+        if config.default_relay_ttl_seconds == 0 || config.default_relay_ttl_seconds > 900 {
+            return Err("default relay TTL must be between 1 and 900 seconds");
+        }
+        if config.default_relay_max_bytes == 0 {
+            return Err("default relay byte quota must be positive");
+        }
+        let api_token = Zeroizing::new(std::mem::take(&mut config.api_token));
+        let presence_token = Zeroizing::new(std::mem::take(&mut config.presence_token));
+        Ok(Self {
+            config,
+            api_token,
+            presence_token,
+            registry: PresenceRegistry::default(),
+            signals: SignalRegistry::default(),
+            negotiation: NegotiationRegistry::default(),
+            issuer,
+            broker,
+        })
+    }
+
+    #[must_use]
+    pub fn handle(
+        &self,
+        method: &str,
+        path: &str,
+        authorization: Option<&str>,
+        body: &[u8],
+    ) -> ApiReply {
+        if method == "GET" && path == "/health" {
+            return ApiReply::json(
+                200,
+                &json!({
+                    "status": "ok",
+                    "version": env!("CARGO_PKG_VERSION"),
+                    "pop_id": self.config.pop_id,
+                    "region": self.config.region,
+                    "capabilities": {
+                        "rendezvous": true,
+                        "scoped_presence_auth": true,
+                        "signed_session_forwarding": true,
+                        "sdp_ice_signaling": true,
+                        "path_allocator": true,
+                        "turn_credentials": !self.config.turn_pops.is_empty(),
+                        "session_bound_turn_credentials": !self.config.turn_pops.is_empty(),
+                        "tcp_byte_relay": true
+                    },
+                    "presence_count": self.registry.len(unix_time_seconds()),
+                    "pending_signal_count": self.signals.pending_count(unix_time_seconds()),
+                    "active_negotiation_sessions": self.negotiation.active_count(unix_time_seconds()),
+                    "pending_allocations": self.broker.pending_count(),
+                    "relay": self.broker.stats().snapshot()
+                }),
+            );
+        }
+        let public_client_route = matches!(
+            (method, path),
+            (
+                "POST",
+                "/v1/signals/requests"
+                    | "/v1/signals/status"
+                    | "/v1/negotiation/send"
+                    | "/v1/negotiation/poll"
+            )
+        );
+        let agent_route = matches!(
+            (method, path),
+            ("POST" | "DELETE", "/v1/presence") | ("POST", "/v1/signals/poll" | "/v1/signals/ack")
+        );
+        if public_client_route {
+            // The request body carries Client-key authentication.
+        } else if agent_route {
+            if !self.presence_authorized(authorization) {
+                return ApiReply::error(
+                    401,
+                    "unauthorized",
+                    "valid Presence bearer authentication is required",
+                );
+            }
+        } else if !self.authorized(authorization) {
+            return ApiReply::error(
+                401,
+                "unauthorized",
+                "valid bearer authentication is required",
+            );
+        }
+        match (method, path) {
+            ("POST", "/v1/presence") => self.register_presence(body),
+            ("DELETE", "/v1/presence") => self.unregister_presence(body),
+            ("POST", "/v1/signals/requests") => self.enqueue_signal(body),
+            ("POST", "/v1/signals/status") => self.client_signal_status(body),
+            ("POST", "/v1/signals/poll") => self.poll_signal(body),
+            ("POST", "/v1/signals/ack") => self.acknowledge_signal(body),
+            ("POST", "/v1/negotiation/send") => self.send_negotiation(body),
+            ("POST", "/v1/negotiation/poll") => self.poll_negotiation(body),
+            ("POST", "/v1/paths/select") => Self::select_path_response(body),
+            ("POST", "/v1/relay/allocations") => self.allocate_relay(body),
+            ("POST", "/v1/turn/credentials") => self.turn_credentials(body),
+            ("GET", _) if path.starts_with("/v1/presence/") => self.lookup_presence(&path[13..]),
+            ("GET", _) if path.starts_with("/v1/signals/requests/") => {
+                self.signal_status(&path[21..])
+            }
+            _ => ApiReply::error(404, "not_found", "edge API route was not found"),
+        }
+    }
+
+    fn authorized(&self, authorization: Option<&str>) -> bool {
+        let Some(candidate) = authorization.and_then(|value| value.strip_prefix("Bearer ")) else {
+            return false;
+        };
+        constant_time_equal(candidate.as_bytes(), self.api_token.as_bytes())
+    }
+
+    fn presence_authorized(&self, authorization: Option<&str>) -> bool {
+        let Some(candidate) = authorization.and_then(|value| value.strip_prefix("Bearer ")) else {
+            return false;
+        };
+        constant_time_equal(candidate.as_bytes(), self.api_token.as_bytes())
+            || constant_time_equal(candidate.as_bytes(), self.presence_token.as_bytes())
+    }
+
+    fn register_presence(&self, body: &[u8]) -> ApiReply {
+        let presence: Presence = match parse_json(body) {
+            Ok(value) => value,
+            Err(reply) => return reply,
+        };
+        match self
+            .registry
+            .register(presence.clone(), unix_time_seconds())
+        {
+            Ok(()) => ApiReply::json(200, &presence),
+            Err(message) => ApiReply::error(400, "invalid_presence", message),
+        }
+    }
+
+    fn lookup_presence(&self, device_id: &str) -> ApiReply {
+        match self.registry.lookup(device_id, unix_time_seconds()) {
+            Ok(Some(presence)) => ApiReply::json(200, &presence),
+            Ok(None) => ApiReply::error(404, "device_offline", "device has no live presence"),
+            Err(message) => ApiReply::error(400, "invalid_device_id", message),
+        }
+    }
+
+    fn unregister_presence(&self, body: &[u8]) -> ApiReply {
+        #[derive(Deserialize)]
+        #[serde(deny_unknown_fields)]
+        struct Unregister {
+            device_id: String,
+            connection_id: String,
+        }
+        let request: Unregister = match parse_json(body) {
+            Ok(value) => value,
+            Err(reply) => return reply,
+        };
+        match self.registry.unregister(
+            &request.device_id,
+            &request.connection_id,
+            unix_time_seconds(),
+        ) {
+            Ok(true) => ApiReply::json(200, &json!({ "removed": true })),
+            Ok(false) => ApiReply::error(
+                409,
+                "stale_connection",
+                "presence connection ID did not match",
+            ),
+            Err(message) => ApiReply::error(400, "invalid_presence", message),
+        }
+    }
+
+    fn enqueue_signal(&self, body: &[u8]) -> ApiReply {
+        let request: SignedSessionIntent = match parse_json(body) {
+            Ok(value) => value,
+            Err(reply) => return reply,
+        };
+        let now = unix_time_seconds();
+        if let Err(error) = request.verify(now) {
+            return signal_error(error);
+        }
+        match self.registry.lookup(&request.device_id, now) {
+            Ok(Some(_)) => {}
+            Ok(None) => {
+                return ApiReply::error(404, "device_offline", "device has no live Presence route");
+            }
+            Err(_) => {
+                return ApiReply::error(400, "invalid_device_id", "device identifier is invalid");
+            }
+        }
+        match self.signals.enqueue(request.clone(), now) {
+            Ok(EnqueueResult::Created) => ApiReply::json(
+                201,
+                &json!({ "request_id": request.request_id, "state": "pending" }),
+            ),
+            Ok(EnqueueResult::Existing) => match self.signals.status(&request.request_id, now) {
+                Ok(Some(status)) => ApiReply::json(200, &status),
+                Ok(None) => ApiReply::error(
+                    404,
+                    "signal_not_found",
+                    "idempotent signal request was not found",
+                ),
+                Err(error) => signal_error(error),
+            },
+            Err(error) => signal_error(error),
+        }
+    }
+
+    fn client_signal_status(&self, body: &[u8]) -> ApiReply {
+        let request: ClientSignalStatusRequest = match parse_json(body) {
+            Ok(value) => value,
+            Err(reply) => return reply,
+        };
+        match self.signals.client_status(&request, unix_time_seconds()) {
+            Ok(status) => match self.authorized_turn_credentials(
+                &status.status.session_id,
+                status.status.expires_unix,
+                status.status.accepted == Some(true),
+            ) {
+                Ok(turn) => ApiReply::json(200, &AuthorizedSignalResponse { status, turn }),
+                Err(reply) => reply,
+            },
+            Err(error) => signal_error(error),
+        }
+    }
+
+    fn poll_signal(&self, body: &[u8]) -> ApiReply {
+        let request: AgentPollProof = match parse_json(body) {
+            Ok(value) => value,
+            Err(reply) => return reply,
+        };
+        let now = unix_time_seconds();
+        let proof = match request.verify(now) {
+            Ok(proof) => proof,
+            Err(error) => return signal_error(error),
+        };
+        if let Err(reply) =
+            self.require_current_presence(&proof.device_id, &proof.connection_id, now)
+        {
+            return reply;
+        }
+        if let Err(error) = self.signals.consume_agent_nonce(proof.nonce, now) {
+            return signal_error(error);
+        }
+        match self
+            .signals
+            .poll(&proof.device_id, &proof.connection_id, now)
+        {
+            Ok(Some(intent)) => ApiReply::json(200, &intent),
+            Ok(None) => ApiReply::empty(204),
+            Err(error) => signal_error(error),
+        }
+    }
+
+    fn acknowledge_signal(&self, body: &[u8]) -> ApiReply {
+        let request: AgentSignalAck = match parse_json(body) {
+            Ok(value) => value,
+            Err(reply) => return reply,
+        };
+        let now = unix_time_seconds();
+        let proof = match request.verify(now) {
+            Ok(proof) => proof,
+            Err(error) => return signal_error(error),
+        };
+        if let Err(reply) =
+            self.require_current_presence(&proof.device_id, &proof.connection_id, now)
+        {
+            return reply;
+        }
+        if let Err(error) = self.signals.consume_agent_nonce(proof.nonce, now) {
+            return signal_error(error);
+        }
+        let relay = if request.accepted {
+            let status = match self.signals.status(&request.request_id, now) {
+                Ok(Some(status)) => status,
+                Ok(None) => return signal_error("signal_not_found"),
+                Err(error) => return signal_error(error),
+            };
+            let expires_unix = status.expires_unix;
+            let max_bytes = self.config.default_relay_max_bytes;
+            let Ok((client_ticket, agent_ticket)) =
+                self.issuer
+                    .issue_pair(&status.session_id, expires_unix, max_bytes)
+            else {
+                return ApiReply::error(
+                    500,
+                    "relay_allocation_failed",
+                    "unable to allocate the authorized relay session",
+                );
+            };
+            let access = |ticket| RelayAccess {
+                pop_id: self.config.pop_id.clone(),
+                relay_address: self.config.public_relay_address.clone(),
+                expires_unix,
+                max_bytes,
+                ticket,
+            };
+            Some(RelayTicketPair {
+                client: access(client_ticket),
+                agent: access(agent_ticket),
+            })
+        } else {
+            None
+        };
+        let turn = if request.accepted {
+            let status = match self.signals.status(&request.request_id, now) {
+                Ok(Some(status)) => status,
+                Ok(None) => return signal_error("signal_not_found"),
+                Err(error) => return signal_error(error),
+            };
+            match self.authorized_turn_credentials(&status.session_id, status.expires_unix, true) {
+                Ok(turn) => turn,
+                Err(reply) => return reply,
+            }
+        } else {
+            Vec::new()
+        };
+        match self.signals.acknowledge(&request, relay, now) {
+            Ok(status) => ApiReply::json(200, &AuthorizedSignalResponse { status, turn }),
+            Err(error) => signal_error(error),
+        }
+    }
+
+    fn signal_status(&self, request_id: &str) -> ApiReply {
+        match self.signals.status(request_id, unix_time_seconds()) {
+            Ok(Some(status)) => ApiReply::json(200, &status),
+            Ok(None) => ApiReply::error(404, "signal_not_found", "signal request was not found"),
+            Err(error) => signal_error(error),
+        }
+    }
+
+    fn send_negotiation(&self, body: &[u8]) -> ApiReply {
+        let request: SignedNegotiationEnvelope = match parse_json(body) {
+            Ok(value) => value,
+            Err(reply) => return reply,
+        };
+        let now = unix_time_seconds();
+        let binding =
+            match self
+                .signals
+                .accepted_session(&request.request_id, &request.session_id, now)
+            {
+                Ok(Some(binding)) => binding,
+                Ok(None) => {
+                    return ApiReply::error(
+                        403,
+                        "negotiation_not_authorized",
+                        "session has not been accepted by the Agent",
+                    );
+                }
+                Err(error) => return negotiation_error(error),
+            };
+        let envelope = match request.verify(&binding, now) {
+            Ok(value) => value,
+            Err(error) => return negotiation_error(error),
+        };
+        match self.negotiation.send(&binding, &envelope, now) {
+            Ok(message) => ApiReply::json(201, &message),
+            Err(error) => negotiation_error(error),
+        }
+    }
+
+    fn poll_negotiation(&self, body: &[u8]) -> ApiReply {
+        let request: SignedNegotiationEnvelope = match parse_json(body) {
+            Ok(value) => value,
+            Err(reply) => return reply,
+        };
+        let now = unix_time_seconds();
+        let binding =
+            match self
+                .signals
+                .accepted_session(&request.request_id, &request.session_id, now)
+            {
+                Ok(Some(binding)) => binding,
+                Ok(None) => {
+                    return ApiReply::error(
+                        403,
+                        "negotiation_not_authorized",
+                        "session has not been accepted by the Agent",
+                    );
+                }
+                Err(error) => return negotiation_error(error),
+            };
+        let envelope = match request.verify(&binding, now) {
+            Ok(value) => value,
+            Err(error) => return negotiation_error(error),
+        };
+        match self.negotiation.poll(&binding, &envelope, now) {
+            Ok(messages) => ApiReply::json(200, &messages),
+            Err(error) => negotiation_error(error),
+        }
+    }
+
+    fn require_current_presence(
+        &self,
+        device_id: &str,
+        connection_id: &str,
+        now: u64,
+    ) -> Result<(), ApiReply> {
+        match self.registry.lookup(device_id, now) {
+            Ok(Some(presence)) if presence.connection_id == connection_id => Ok(()),
+            Ok(Some(_)) => Err(ApiReply::error(
+                409,
+                "stale_connection",
+                "Agent connection is no longer current",
+            )),
+            Ok(None) => Err(ApiReply::error(
+                404,
+                "device_offline",
+                "device has no live Presence route",
+            )),
+            Err(_) => Err(ApiReply::error(
+                400,
+                "invalid_device_id",
+                "device identifier is invalid",
+            )),
+        }
+    }
+
+    fn select_path_response(body: &[u8]) -> ApiReply {
+        let request: PathSelectionRequest = match parse_json(body) {
+            Ok(value) => value,
+            Err(reply) => return reply,
+        };
+        match select_path(&request) {
+            Ok(selection) => ApiReply::json(200, &selection),
+            Err(message) => ApiReply::error(422, "path_unavailable", message),
+        }
+    }
+
+    fn allocate_relay(&self, body: &[u8]) -> ApiReply {
+        #[derive(Deserialize)]
+        #[serde(deny_unknown_fields)]
+        struct AllocationRequest {
+            session_id: String,
+            ttl_seconds: Option<u64>,
+            max_bytes: Option<u64>,
+        }
+        #[derive(Serialize)]
+        struct AllocationResponse {
+            pop_id: String,
+            relay_address: String,
+            expires_unix: u64,
+            max_bytes: u64,
+            client_ticket: String,
+            agent_ticket: String,
+        }
+        let request: AllocationRequest = match parse_json(body) {
+            Ok(value) => value,
+            Err(reply) => return reply,
+        };
+        let ttl = request
+            .ttl_seconds
+            .unwrap_or(self.config.default_relay_ttl_seconds);
+        if ttl == 0 || ttl > 900 {
+            return ApiReply::error(
+                400,
+                "invalid_ttl",
+                "relay TTL must be between 1 and 900 seconds",
+            );
+        }
+        let quota = request
+            .max_bytes
+            .unwrap_or(self.config.default_relay_max_bytes);
+        if quota == 0 || quota > self.config.default_relay_max_bytes {
+            return ApiReply::error(
+                400,
+                "invalid_quota",
+                "relay byte quota exceeds the service limit",
+            );
+        }
+        let expires_unix = unix_time_seconds().saturating_add(ttl);
+        match self
+            .issuer
+            .issue_pair(&request.session_id, expires_unix, quota)
+        {
+            Ok((client_ticket, agent_ticket)) => ApiReply::json(
+                201,
+                &AllocationResponse {
+                    pop_id: self.config.pop_id.clone(),
+                    relay_address: self.config.public_relay_address.clone(),
+                    expires_unix,
+                    max_bytes: quota,
+                    client_ticket,
+                    agent_ticket,
+                },
+            ),
+            Err(error) => ApiReply::error(400, "invalid_allocation", &error.to_string()),
+        }
+    }
+
+    fn turn_credentials(&self, body: &[u8]) -> ApiReply {
+        #[derive(Deserialize)]
+        #[serde(deny_unknown_fields)]
+        struct TurnRequest {
+            session_id: String,
+            pop_id: String,
+            ttl_seconds: Option<u64>,
+        }
+        let request: TurnRequest = match parse_json(body) {
+            Ok(value) => value,
+            Err(reply) => return reply,
+        };
+        let Some(pop) = self
+            .config
+            .turn_pops
+            .iter()
+            .find(|pop| pop.pop_id == request.pop_id)
+        else {
+            return ApiReply::error(404, "pop_not_found", "TURN POP is not configured");
+        };
+        let ttl = request.ttl_seconds.unwrap_or(300);
+        if ttl == 0 || ttl > 900 {
+            return ApiReply::error(
+                400,
+                "invalid_ttl",
+                "TURN credential TTL must be between 1 and 900 seconds",
+            );
+        }
+        let Ok(secret) = std::env::var(&pop.secret_env).map(Zeroizing::new) else {
+            return ApiReply::error(
+                503,
+                "pop_unavailable",
+                "TURN POP credential secret is unavailable",
+            );
+        };
+        match issue_turn_credential(
+            secret.as_bytes(),
+            &pop.pop_id,
+            &pop.realm,
+            &pop.urls,
+            &request.session_id,
+            unix_time_seconds().saturating_add(ttl),
+        ) {
+            Ok(credential) => ApiReply::json(201, &credential),
+            Err(error) => ApiReply::error(400, "invalid_turn_request", &error.to_string()),
+        }
+    }
+
+    fn authorized_turn_credentials(
+        &self,
+        session_id: &str,
+        expires_unix: u64,
+        accepted: bool,
+    ) -> Result<Vec<TurnCredential>, ApiReply> {
+        if !accepted || self.config.turn_pops.is_empty() {
+            return Ok(Vec::new());
+        }
+        let mut credentials = Vec::with_capacity(self.config.turn_pops.len());
+        for pop in &self.config.turn_pops {
+            let secret = std::env::var(&pop.secret_env)
+                .map(Zeroizing::new)
+                .map_err(|_| {
+                    ApiReply::error(
+                        503,
+                        "pop_unavailable",
+                        "TURN POP credential secret is unavailable",
+                    )
+                })?;
+            credentials.push(
+                issue_turn_credential(
+                    secret.as_bytes(),
+                    &pop.pop_id,
+                    &pop.realm,
+                    &pop.urls,
+                    session_id,
+                    expires_unix,
+                )
+                .map_err(|_| {
+                    ApiReply::error(
+                        503,
+                        "pop_unavailable",
+                        "TURN POP credential configuration is invalid",
+                    )
+                })?,
+            );
+        }
+        Ok(credentials)
+    }
+}
+
+#[derive(Serialize)]
+struct AuthorizedSignalResponse<T> {
+    #[serde(flatten)]
+    status: T,
+    #[serde(default, skip_serializing_if = "Vec::is_empty")]
+    turn: Vec<TurnCredential>,
+}
+
+fn parse_json<T: for<'de> Deserialize<'de>>(body: &[u8]) -> Result<T, ApiReply> {
+    if body.is_empty() || body.len() > MAX_REQUEST_BYTES {
+        return Err(ApiReply::error(
+            400,
+            "invalid_json",
+            "request body size is invalid",
+        ));
+    }
+    serde_json::from_slice(body)
+        .map_err(|_| ApiReply::error(400, "invalid_json", "request body is not valid JSON"))
+}
+
+fn constant_time_equal(left: &[u8], right: &[u8]) -> bool {
+    let mut different = left.len() ^ right.len();
+    let length = left.len().max(right.len());
+    for index in 0..length {
+        let left_byte = left.get(index).copied().unwrap_or(0);
+        let right_byte = right.get(index).copied().unwrap_or(0);
+        different |= usize::from(left_byte ^ right_byte);
+    }
+    different == 0
+}
+
+#[derive(Clone, Debug)]
+pub struct ApiReply {
+    pub status: u16,
+    pub body: Vec<u8>,
+}
+
+impl ApiReply {
+    fn json<T: Serialize>(status: u16, value: &T) -> Self {
+        Self {
+            status,
+            body: serde_json::to_vec(value).expect("serializable Edge API response"),
+        }
+    }
+
+    fn error(status: u16, code: &str, message: &str) -> Self {
+        Self::json(status, &json!({ "error": code, "message": message }))
+    }
+
+    fn empty(status: u16) -> Self {
+        Self {
+            status,
+            body: Vec::new(),
+        }
+    }
+}
+
+fn signal_error(error: &str) -> ApiReply {
+    let status = match error {
+        "signal_capacity_exceeded" | "signal_registry_unavailable" => 503,
+        "request_id_conflict"
+        | "signal_connection_mismatch"
+        | "signal_result_conflict"
+        | "agent_proof_replayed" => 409,
+        "signal_not_found" => 404,
+        "client_status_unauthorized" => 401,
+        _ => 400,
+    };
+    ApiReply::error(status, error, "Edge signaling request was rejected")
+}
+
+fn negotiation_error(error: &str) -> ApiReply {
+    let status = match error {
+        "negotiation_registry_unavailable" | "negotiation_capacity_exceeded" => 503,
+        "negotiation_envelope_replayed"
+        | "negotiation_sequence_conflict"
+        | "negotiation_generation_conflict"
+        | "negotiation_cursor_invalid"
+        | "negotiation_session_mismatch" => 409,
+        "invalid_negotiation_signature" => 401,
+        "expired_negotiation_envelope" => 410,
+        "negotiation_candidate_limit" => 429,
+        "negotiation_not_authorized" => 403,
+        _ => 400,
+    };
+    ApiReply::error(status, error, "Edge negotiation request was rejected")
+}
+
+/// Runs the HTTP control API until `shutdown` becomes true.
+///
+/// # Errors
+///
+/// Returns an error if receiving a request fails.
+pub fn run_http_server(
+    server: &Server,
+    api: &EdgeApi,
+    shutdown: &AtomicBool,
+) -> std::io::Result<()> {
+    while !shutdown.load(Ordering::Acquire) {
+        match server.recv_timeout(Duration::from_millis(250)) {
+            Ok(Some(request)) => handle_http_request(request, api),
+            Ok(None) => {}
+            Err(error) => return Err(error),
+        }
+    }
+    Ok(())
+}
+
+fn handle_http_request(mut request: Request, api: &EdgeApi) {
+    let mut body = Vec::new();
+    let read_result = request
+        .as_reader()
+        .take((MAX_REQUEST_BYTES + 1) as u64)
+        .read_to_end(&mut body);
+    let reply = if read_result.is_err() || body.len() > MAX_REQUEST_BYTES {
+        ApiReply::error(
+            413,
+            "request_too_large",
+            "request body exceeds the service limit",
+        )
+    } else {
+        let authorization = request
+            .headers()
+            .iter()
+            .find(|header| header.field.equiv("Authorization"))
+            .map(|header| header.value.as_str());
+        api.handle(
+            method_name(request.method()),
+            request.url(),
+            authorization,
+            &body,
+        )
+    };
+    let response = Response::from_data(reply.body)
+        .with_status_code(StatusCode(reply.status))
+        .with_header(json_header());
+    let _ = request.respond(response);
+}
+
+fn method_name(method: &Method) -> &'static str {
+    match method {
+        Method::Get => "GET",
+        Method::Post => "POST",
+        Method::Delete => "DELETE",
+        Method::Put => "PUT",
+        Method::Patch => "PATCH",
+        Method::Head => "HEAD",
+        Method::Options => "OPTIONS",
+        Method::Connect => "CONNECT",
+        Method::Trace => "TRACE",
+        Method::NonStandard(_) => "OTHER",
+    }
+}
+
+fn json_header() -> Header {
+    Header::from_bytes(b"Content-Type", b"application/json; charset=utf-8")
+        .expect("static HTTP header is valid")
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::RelayConfig;
+    use base64::{Engine as _, engine::general_purpose::STANDARD_NO_PAD};
+    use ed25519_dalek::{Signer as _, SigningKey};
+    use remotedesk_protocol::{
+        AgentSignalAction, AgentSignalProofV1, EdgeNegotiationEndpoint, EdgeNegotiationEnvelopeV1,
+        EdgeNegotiationKind, EdgeNegotiationOperation, EdgeSessionIntentV1, EdgeSessionType,
+        SIGNAL_NONCE_LENGTH,
+    };
+    use sha2::{Digest as _, Sha256};
+
+    const SECRET: &[u8] = b"0123456789abcdef0123456789abcdef";
+    const API_TOKEN: &str = "abcdef0123456789abcdef0123456789";
+    const PRESENCE_TOKEN: &str = "presence0123456789presence0123456789";
+
+    fn api() -> EdgeApi {
+        let issuer = RelayTicketIssuer::new(SECRET, "test-pop").unwrap();
+        let broker = Arc::new(RelayBroker::new(issuer.clone(), RelayConfig::default()));
+        EdgeApi::new(
+            ApiConfig {
+                api_token: API_TOKEN.to_owned(),
+                presence_token: PRESENCE_TOKEN.to_owned(),
+                pop_id: "test-pop".to_owned(),
+                region: "test-region".to_owned(),
+                public_relay_address: "relay.example.test:443".to_owned(),
+                default_relay_ttl_seconds: 300,
+                default_relay_max_bytes: 1024,
+                turn_pops: vec![],
+            },
+            issuer,
+            broker,
+        )
+        .unwrap()
+    }
+
+    fn signed_intent(signing: &SigningKey, device_id: &str) -> SignedSessionIntent {
+        let now = unix_time_seconds();
+        let client_public_key = STANDARD_NO_PAD.encode(signing.verifying_key().as_bytes());
+        let model = EdgeSessionIntentV1 {
+            device_id: device_id.to_owned(),
+            request_id: "request-public-client".into(),
+            session_id: "session-public-client".into(),
+            session_type: EdgeSessionType::Terminal,
+            target_user: "alice".into(),
+            requested_permissions: vec!["terminal".into()],
+            client_public_key: client_public_key.clone(),
+            nonce: [7; SIGNAL_NONCE_LENGTH],
+            issued_unix: now,
+            expires_unix: now + 60,
+        };
+        SignedSessionIntent {
+            device_id: model.device_id.clone(),
+            request_id: model.request_id.clone(),
+            session_id: model.session_id.clone(),
+            session_type: model.session_type.as_str().into(),
+            target_user: model.target_user.clone(),
+            requested_permissions: model.requested_permissions.clone(),
+            client_public_key,
+            nonce: STANDARD_NO_PAD.encode(model.nonce),
+            issued_unix: model.issued_unix,
+            expires_unix: model.expires_unix,
+            signature: STANDARD_NO_PAD.encode(
+                signing
+                    .sign(&model.stable_signing_input().unwrap())
+                    .to_bytes(),
+            ),
+        }
+    }
+
+    fn agent_device_id(signing: &SigningKey) -> String {
+        use std::fmt::Write as _;
+
+        let mut digest = Sha256::new();
+        digest.update(b"remotedesk-edge-device-id-v1\0");
+        digest.update(signing.verifying_key().as_bytes());
+        digest
+            .finalize()
+            .iter()
+            .fold(String::with_capacity(64), |mut output, byte| {
+                write!(output, "{byte:02x}").expect("writing to a String cannot fail");
+                output
+            })
+    }
+
+    fn signed_agent_poll(
+        signing: &SigningKey,
+        device_id: &str,
+        connection_id: &str,
+        nonce: u8,
+    ) -> AgentPollProof {
+        let now = unix_time_seconds();
+        let public_key = STANDARD_NO_PAD.encode(signing.verifying_key().as_bytes());
+        let proof = AgentSignalProofV1 {
+            device_id: device_id.into(),
+            device_public_key: public_key.clone(),
+            connection_id: connection_id.into(),
+            action: AgentSignalAction::Poll,
+            request_id: None,
+            result_code: None,
+            nonce: [nonce; SIGNAL_NONCE_LENGTH],
+            issued_unix: now,
+        };
+        AgentPollProof {
+            device_id: proof.device_id.clone(),
+            device_public_key: public_key,
+            connection_id: proof.connection_id.clone(),
+            nonce: STANDARD_NO_PAD.encode(proof.nonce),
+            issued_unix: proof.issued_unix,
+            signature: STANDARD_NO_PAD.encode(
+                signing
+                    .sign(&proof.stable_signing_input().unwrap())
+                    .to_bytes(),
+            ),
+        }
+    }
+
+    fn signed_agent_ack(
+        signing: &SigningKey,
+        device_id: &str,
+        connection_id: &str,
+        request_id: &str,
+        nonce: u8,
+    ) -> AgentSignalAck {
+        let now = unix_time_seconds();
+        let public_key = STANDARD_NO_PAD.encode(signing.verifying_key().as_bytes());
+        let proof = AgentSignalProofV1 {
+            device_id: device_id.into(),
+            device_public_key: public_key.clone(),
+            connection_id: connection_id.into(),
+            action: AgentSignalAction::Accept,
+            request_id: Some(request_id.into()),
+            result_code: Some("authorized".into()),
+            nonce: [nonce; SIGNAL_NONCE_LENGTH],
+            issued_unix: now,
+        };
+        AgentSignalAck {
+            device_id: proof.device_id.clone(),
+            device_public_key: public_key,
+            connection_id: proof.connection_id.clone(),
+            request_id: request_id.into(),
+            accepted: true,
+            result_code: "authorized".into(),
+            nonce: STANDARD_NO_PAD.encode(proof.nonce),
+            issued_unix: proof.issued_unix,
+            signature: STANDARD_NO_PAD.encode(
+                signing
+                    .sign(&proof.stable_signing_input().unwrap())
+                    .to_bytes(),
+            ),
+        }
+    }
+
+    #[allow(clippy::too_many_arguments)]
+    fn signed_negotiation(
+        signing: &SigningKey,
+        endpoint: EdgeNegotiationEndpoint,
+        operation: EdgeNegotiationOperation,
+        sequence: u32,
+        generation: u32,
+        kind: Option<EdgeNegotiationKind>,
+        payload: &str,
+        nonce: u8,
+    ) -> SignedNegotiationEnvelope {
+        let now = unix_time_seconds();
+        let model = EdgeNegotiationEnvelopeV1 {
+            request_id: "request-public-client".into(),
+            session_id: "session-public-client".into(),
+            endpoint,
+            operation,
+            sequence,
+            generation,
+            kind,
+            payload: payload.into(),
+            nonce: [nonce; SIGNAL_NONCE_LENGTH],
+            issued_unix: now,
+            expires_unix: now + 30,
+        };
+        SignedNegotiationEnvelope {
+            request_id: model.request_id.clone(),
+            session_id: model.session_id.clone(),
+            endpoint: model.endpoint.as_str().into(),
+            operation: model.operation.as_str().into(),
+            sequence: model.sequence,
+            generation: model.generation,
+            kind: model.kind.map(|kind| kind.as_str().into()),
+            payload: model.payload.clone(),
+            nonce: STANDARD_NO_PAD.encode(model.nonce),
+            issued_unix: model.issued_unix,
+            expires_unix: model.expires_unix,
+            signature: STANDARD_NO_PAD.encode(
+                signing
+                    .sign(&model.stable_signing_input().unwrap())
+                    .to_bytes(),
+            ),
+        }
+    }
+
+    #[test]
+    fn protected_routes_reject_missing_auth_and_invalid_json() {
+        let api = api();
+        assert_eq!(api.handle("POST", "/v1/presence", None, b"{}").status, 401);
+        assert_eq!(
+            api.handle(
+                "POST",
+                "/v1/presence",
+                Some(&format!("Bearer {API_TOKEN}")),
+                b"not-json",
+            )
+            .status,
+            400
+        );
+    }
+
+    #[test]
+    fn presence_token_cannot_read_directory_or_allocate_relay() {
+        let api = api();
+        let auth = format!("Bearer {PRESENCE_TOKEN}");
+        let body = serde_json::to_vec(&json!({
+            "device_id": "device-scoped",
+            "region": "test-region",
+            "gateway_id": "gateway-1",
+            "connection_id": "connection-1",
+            "expires_unix": unix_time_seconds() + 60
+        }))
+        .unwrap();
+        assert_eq!(
+            api.handle("POST", "/v1/presence", Some(&auth), &body)
+                .status,
+            200
+        );
+        assert_eq!(
+            api.handle("GET", "/v1/presence/device-scoped", Some(&auth), b"")
+                .status,
+            401
+        );
+        assert_eq!(
+            api.handle(
+                "POST",
+                "/v1/relay/allocations",
+                Some(&auth),
+                br#"{"session_id":"forbidden"}"#,
+            )
+            .status,
+            401
+        );
+        assert_eq!(
+            api.handle(
+                "POST",
+                "/v1/signals/requests",
+                Some(&auth),
+                br#"{"device_id":"device-scoped"}"#,
+            )
+            .status,
+            400
+        );
+    }
+
+    #[test]
+    fn signed_client_submission_and_status_are_public_but_admin_status_is_protected() {
+        let api = api();
+        let device_id = "ab".repeat(32);
+        let presence = serde_json::to_vec(&json!({
+            "device_id": device_id,
+            "region": "test-region",
+            "gateway_id": "gateway-1",
+            "connection_id": "connection-1",
+            "expires_unix": unix_time_seconds() + 60
+        }))
+        .unwrap();
+        assert_eq!(
+            api.handle(
+                "POST",
+                "/v1/presence",
+                Some(&format!("Bearer {PRESENCE_TOKEN}")),
+                &presence,
+            )
+            .status,
+            200
+        );
+
+        let intent = signed_intent(&SigningKey::from_bytes(&[13; 32]), &device_id);
+        let body = serde_json::to_vec(&intent).unwrap();
+        assert_eq!(
+            api.handle("POST", "/v1/signals/requests", None, &body)
+                .status,
+            201
+        );
+
+        let forged_status = serde_json::to_vec(&json!({
+            "request_id": intent.request_id.clone(),
+            "client_public_key": intent.client_public_key.clone(),
+            "signature": STANDARD_NO_PAD.encode([0_u8; 64])
+        }))
+        .unwrap();
+        assert_eq!(
+            api.handle("POST", "/v1/signals/status", None, &forged_status)
+                .status,
+            401
+        );
+        let valid_status = serde_json::to_vec(&json!({
+            "request_id": intent.request_id.clone(),
+            "client_public_key": intent.client_public_key.clone(),
+            "signature": intent.signature.clone()
+        }))
+        .unwrap();
+        assert_eq!(
+            api.handle("POST", "/v1/signals/status", None, &valid_status)
+                .status,
+            200
+        );
+        let admin_path = format!("/v1/signals/requests/{}", intent.request_id);
+        assert_eq!(api.handle("GET", &admin_path, None, b"").status, 401);
+        assert_eq!(
+            api.handle(
+                "GET",
+                &admin_path,
+                Some(&format!("Bearer {API_TOKEN}")),
+                b"",
+            )
+            .status,
+            200
+        );
+    }
+
+    #[test]
+    fn allocation_response_contains_verifiable_independent_tickets() {
+        let api = api();
+        let reply = api.handle(
+            "POST",
+            "/v1/relay/allocations",
+            Some(&format!("Bearer {API_TOKEN}")),
+            br#"{"session_id":"api-session","ttl_seconds":60,"max_bytes":512}"#,
+        );
+        assert_eq!(reply.status, 201);
+        let value: serde_json::Value = serde_json::from_slice(&reply.body).unwrap();
+        assert_ne!(value["client_ticket"], value["agent_ticket"]);
+        assert_eq!(value["max_bytes"], 512);
+    }
+
+    #[test]
+    fn presence_api_registers_looks_up_and_connection_binds_delete() {
+        let api = api();
+        let auth = format!("Bearer {API_TOKEN}");
+        let body = serde_json::to_vec(&json!({
+            "device_id": "device-1",
+            "region": "test-region",
+            "gateway_id": "gateway-1",
+            "connection_id": "connection-1",
+            "expires_unix": unix_time_seconds() + 60
+        }))
+        .unwrap();
+        assert_eq!(
+            api.handle("POST", "/v1/presence", Some(&auth), &body)
+                .status,
+            200
+        );
+        assert_eq!(
+            api.handle("GET", "/v1/presence/device-1", Some(&auth), b"")
+                .status,
+            200
+        );
+        assert_eq!(
+            api.handle(
+                "DELETE",
+                "/v1/presence",
+                Some(&auth),
+                br#"{"device_id":"device-1","connection_id":"stale"}"#,
+            )
+            .status,
+            409
+        );
+    }
+
+    #[test]
+    fn health_reports_only_service_local_capabilities() {
+        let api = api();
+        let reply = api.handle("GET", "/health", None, b"");
+        let value: serde_json::Value = serde_json::from_slice(&reply.body).unwrap();
+        assert_eq!(reply.status, 200);
+        assert_eq!(value["capabilities"]["tcp_byte_relay"], true);
+        assert_eq!(value["capabilities"]["turn_credentials"], false);
+        assert_eq!(
+            value["capabilities"]["session_bound_turn_credentials"],
+            false
+        );
+        assert_eq!(value["capabilities"]["signed_session_forwarding"], true);
+        assert_eq!(value["capabilities"]["sdp_ice_signaling"], true);
+        assert_eq!(value["active_negotiation_sessions"], 0);
+    }
+
+    #[test]
+    #[allow(clippy::too_many_lines)]
+    fn accepted_session_supports_signed_bidirectional_negotiation() {
+        let api = api();
+        let client = SigningKey::from_bytes(&[13; 32]);
+        let agent = SigningKey::from_bytes(&[17; 32]);
+        let device_id = agent_device_id(&agent);
+        let connection_id = "connection-negotiation";
+        let presence = serde_json::to_vec(&json!({
+            "device_id": device_id,
+            "region": "test-region",
+            "gateway_id": "gateway-1",
+            "connection_id": connection_id,
+            "expires_unix": unix_time_seconds() + 60
+        }))
+        .unwrap();
+        assert_eq!(
+            api.handle(
+                "POST",
+                "/v1/presence",
+                Some(&format!("Bearer {PRESENCE_TOKEN}")),
+                &presence,
+            )
+            .status,
+            200
+        );
+        let intent = signed_intent(&client, &device_id);
+        assert_eq!(
+            api.handle(
+                "POST",
+                "/v1/signals/requests",
+                None,
+                &serde_json::to_vec(&intent).unwrap(),
+            )
+            .status,
+            201
+        );
+
+        let unauthorized_offer = signed_negotiation(
+            &client,
+            EdgeNegotiationEndpoint::Client,
+            EdgeNegotiationOperation::Send,
+            1,
+            1,
+            Some(EdgeNegotiationKind::Offer),
+            "v=0\r\n",
+            1,
+        );
+        assert_eq!(
+            api.handle(
+                "POST",
+                "/v1/negotiation/send",
+                None,
+                &serde_json::to_vec(&unauthorized_offer).unwrap(),
+            )
+            .status,
+            403
+        );
+
+        let poll = signed_agent_poll(&agent, &device_id, connection_id, 2);
+        assert_eq!(
+            api.handle(
+                "POST",
+                "/v1/signals/poll",
+                Some(&format!("Bearer {PRESENCE_TOKEN}")),
+                &serde_json::to_vec(&poll).unwrap(),
+            )
+            .status,
+            200
+        );
+        let ack = signed_agent_ack(&agent, &device_id, connection_id, &intent.request_id, 3);
+        let reply = api.handle(
+            "POST",
+            "/v1/signals/ack",
+            Some(&format!("Bearer {PRESENCE_TOKEN}")),
+            &serde_json::to_vec(&ack).unwrap(),
+        );
+        assert_eq!(reply.status, 200);
+        let value: serde_json::Value = serde_json::from_slice(&reply.body).unwrap();
+        assert!(value.get("turn").is_none());
+
+        let offer_body = serde_json::to_vec(&unauthorized_offer).unwrap();
+        assert_eq!(
+            api.handle("POST", "/v1/negotiation/send", None, &offer_body)
+                .status,
+            201
+        );
+        assert_eq!(
+            api.handle("POST", "/v1/negotiation/send", None, &offer_body)
+                .status,
+            409
+        );
+
+        let agent_poll = signed_negotiation(
+            &agent,
+            EdgeNegotiationEndpoint::Agent,
+            EdgeNegotiationOperation::Poll,
+            0,
+            0,
+            None,
+            "",
+            4,
+        );
+        let reply = api.handle(
+            "POST",
+            "/v1/negotiation/poll",
+            None,
+            &serde_json::to_vec(&agent_poll).unwrap(),
+        );
+        assert_eq!(reply.status, 200);
+        let value: serde_json::Value = serde_json::from_slice(&reply.body).unwrap();
+        assert_eq!(value["messages"][0]["kind"], "offer");
+        assert_eq!(value["messages"][0]["endpoint"], "client");
+
+        let forged_answer = signed_negotiation(
+            &client,
+            EdgeNegotiationEndpoint::Agent,
+            EdgeNegotiationOperation::Send,
+            1,
+            1,
+            Some(EdgeNegotiationKind::Answer),
+            "v=0\r\na=answer\r\n",
+            5,
+        );
+        assert_eq!(
+            api.handle(
+                "POST",
+                "/v1/negotiation/send",
+                None,
+                &serde_json::to_vec(&forged_answer).unwrap(),
+            )
+            .status,
+            401
+        );
+        let answer = signed_negotiation(
+            &agent,
+            EdgeNegotiationEndpoint::Agent,
+            EdgeNegotiationOperation::Send,
+            1,
+            1,
+            Some(EdgeNegotiationKind::Answer),
+            "v=0\r\na=answer\r\n",
+            5,
+        );
+        assert_eq!(
+            api.handle(
+                "POST",
+                "/v1/negotiation/send",
+                None,
+                &serde_json::to_vec(&answer).unwrap(),
+            )
+            .status,
+            201
+        );
+        let client_poll = signed_negotiation(
+            &client,
+            EdgeNegotiationEndpoint::Client,
+            EdgeNegotiationOperation::Poll,
+            0,
+            0,
+            None,
+            "",
+            6,
+        );
+        let reply = api.handle(
+            "POST",
+            "/v1/negotiation/poll",
+            None,
+            &serde_json::to_vec(&client_poll).unwrap(),
+        );
+        assert_eq!(reply.status, 200);
+        let value: serde_json::Value = serde_json::from_slice(&reply.body).unwrap();
+        assert_eq!(value["messages"][0]["kind"], "answer");
+        assert_eq!(value["messages"][0]["endpoint"], "agent");
+
+        let stale_sequence = signed_negotiation(
+            &client,
+            EdgeNegotiationEndpoint::Client,
+            EdgeNegotiationOperation::Send,
+            1,
+            1,
+            Some(EdgeNegotiationKind::IceEnd),
+            "",
+            7,
+        );
+        assert_eq!(
+            api.handle(
+                "POST",
+                "/v1/negotiation/send",
+                None,
+                &serde_json::to_vec(&stale_sequence).unwrap(),
+            )
+            .status,
+            409
+        );
+        let stale_generation = signed_negotiation(
+            &client,
+            EdgeNegotiationEndpoint::Client,
+            EdgeNegotiationOperation::Send,
+            2,
+            2,
+            Some(EdgeNegotiationKind::IceEnd),
+            "",
+            8,
+        );
+        assert_eq!(
+            api.handle(
+                "POST",
+                "/v1/negotiation/send",
+                None,
+                &serde_json::to_vec(&stale_generation).unwrap(),
+            )
+            .status,
+            409
+        );
+
+        let mut wrong_session = signed_negotiation(
+            &client,
+            EdgeNegotiationEndpoint::Client,
+            EdgeNegotiationOperation::Poll,
+            1,
+            0,
+            None,
+            "",
+            9,
+        );
+        wrong_session.session_id = "wrong-session".into();
+        assert_eq!(
+            api.handle(
+                "POST",
+                "/v1/negotiation/poll",
+                None,
+                &serde_json::to_vec(&wrong_session).unwrap(),
+            )
+            .status,
+            409
+        );
+    }
+}
diff --git a/edge/edge-service/src/auth.rs b/edge/edge-service/src/auth.rs
new file mode 100644
index 0000000..d497663
--- /dev/null
+++ b/edge/edge-service/src/auth.rs
@@ -0,0 +1,332 @@
+use base64::{Engine as _, engine::general_purpose};
+use hmac::{Hmac, KeyInit as _, Mac as _};
+use rand::RngCore as _;
+use serde::{Deserialize, Serialize};
+use sha1::Sha1;
+use sha2::{Digest as _, Sha256};
+use std::fmt;
+use zeroize::Zeroizing;
+
+use crate::unix_time_seconds;
+
+const TICKET_DOMAIN: &[u8] = b"remotedesk-edge-relay-ticket-v1\0";
+const MIN_SECRET_BYTES: usize = 32;
+
+type HmacSha256 = Hmac<Sha256>;
+type HmacSha1 = Hmac<Sha1>;
+
+#[derive(Clone, Copy, Debug, Deserialize, Eq, PartialEq, Serialize)]
+#[serde(rename_all = "snake_case")]
+pub enum RelayRole {
+    Client,
+    Agent,
+}
+
+#[derive(Clone, Debug, Deserialize, Eq, PartialEq, Serialize)]
+#[serde(deny_unknown_fields)]
+pub struct RelayTicketClaims {
+    pub version: u8,
+    pub allocation_id: String,
+    pub session_id: String,
+    pub role: RelayRole,
+    pub pop_id: String,
+    pub expires_unix: u64,
+    pub max_bytes: u64,
+}
+
+#[derive(Clone)]
+pub struct RelayTicketIssuer {
+    secret: Zeroizing<Vec<u8>>,
+    pop_id: String,
+}
+
+impl RelayTicketIssuer {
+    /// Creates a ticket issuer bound to one relay POP.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error for secrets shorter than 32 bytes or invalid POP IDs.
+    pub fn new(secret: &[u8], pop_id: &str) -> Result<Self, AuthError> {
+        if secret.len() < MIN_SECRET_BYTES {
+            return Err(AuthError::WeakSecret);
+        }
+        validate_identifier(pop_id).map_err(|()| AuthError::InvalidPopId)?;
+        Ok(Self {
+            secret: Zeroizing::new(secret.to_vec()),
+            pop_id: pop_id.to_owned(),
+        })
+    }
+
+    #[must_use]
+    pub fn pop_id(&self) -> &str {
+        &self.pop_id
+    }
+
+    /// Issues independent one-use tickets for the client and Agent sides.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error for an invalid session ID, expiry, or quota.
+    pub fn issue_pair(
+        &self,
+        session_id: &str,
+        expires_unix: u64,
+        max_bytes: u64,
+    ) -> Result<(String, String), AuthError> {
+        validate_identifier(session_id).map_err(|()| AuthError::InvalidSessionId)?;
+        let now = unix_time_seconds();
+        if expires_unix <= now || expires_unix > now.saturating_add(900) {
+            return Err(AuthError::InvalidExpiry);
+        }
+        if max_bytes == 0 {
+            return Err(AuthError::InvalidQuota);
+        }
+
+        let mut allocation = [0_u8; 18];
+        rand::rng().fill_bytes(&mut allocation);
+        let allocation_id = general_purpose::URL_SAFE_NO_PAD.encode(allocation);
+        let client = RelayTicketClaims {
+            version: 1,
+            allocation_id: allocation_id.clone(),
+            session_id: session_id.to_owned(),
+            role: RelayRole::Client,
+            pop_id: self.pop_id.clone(),
+            expires_unix,
+            max_bytes,
+        };
+        let agent = RelayTicketClaims {
+            role: RelayRole::Agent,
+            ..client.clone()
+        };
+        Ok((self.encode(&client)?, self.encode(&agent)?))
+    }
+
+    /// Verifies the HMAC and all local ticket invariants.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error for malformed, tampered, expired, or cross-POP tickets.
+    pub fn verify(&self, token: &str, now: u64) -> Result<RelayTicketClaims, AuthError> {
+        let (payload, signature) = token.split_once('.').ok_or(AuthError::MalformedTicket)?;
+        if payload.len() > 4096 || signature.len() > 128 {
+            return Err(AuthError::MalformedTicket);
+        }
+        let payload_bytes = general_purpose::URL_SAFE_NO_PAD
+            .decode(payload)
+            .map_err(|_| AuthError::MalformedTicket)?;
+        let signature_bytes = general_purpose::URL_SAFE_NO_PAD
+            .decode(signature)
+            .map_err(|_| AuthError::MalformedTicket)?;
+        let mut mac =
+            HmacSha256::new_from_slice(&self.secret).map_err(|_| AuthError::WeakSecret)?;
+        mac.update(TICKET_DOMAIN);
+        mac.update(payload.as_bytes());
+        mac.verify_slice(&signature_bytes)
+            .map_err(|_| AuthError::InvalidSignature)?;
+
+        let claims: RelayTicketClaims =
+            serde_json::from_slice(&payload_bytes).map_err(|_| AuthError::MalformedTicket)?;
+        if claims.version != 1 {
+            return Err(AuthError::UnsupportedVersion);
+        }
+        validate_identifier(&claims.session_id).map_err(|()| AuthError::InvalidSessionId)?;
+        validate_identifier(&claims.pop_id).map_err(|()| AuthError::InvalidPopId)?;
+        if claims.pop_id != self.pop_id {
+            return Err(AuthError::WrongPop);
+        }
+        if claims.expires_unix <= now {
+            return Err(AuthError::Expired);
+        }
+        if claims.max_bytes == 0 {
+            return Err(AuthError::InvalidQuota);
+        }
+        Ok(claims)
+    }
+
+    #[must_use]
+    pub fn token_digest(token: &str) -> [u8; 32] {
+        Sha256::digest(token.as_bytes()).into()
+    }
+
+    fn encode(&self, claims: &RelayTicketClaims) -> Result<String, AuthError> {
+        let encoded = general_purpose::URL_SAFE_NO_PAD
+            .encode(serde_json::to_vec(claims).map_err(|_| AuthError::MalformedTicket)?);
+        let mut mac =
+            HmacSha256::new_from_slice(&self.secret).map_err(|_| AuthError::WeakSecret)?;
+        mac.update(TICKET_DOMAIN);
+        mac.update(encoded.as_bytes());
+        let signature = general_purpose::URL_SAFE_NO_PAD.encode(mac.finalize().into_bytes());
+        Ok(format!("{encoded}.{signature}"))
+    }
+}
+
+#[derive(Clone, Eq, PartialEq, Serialize)]
+pub struct TurnCredential {
+    pub pop_id: String,
+    pub realm: String,
+    pub urls: Vec<String>,
+    pub username: String,
+    pub password: String,
+    pub expires_unix: u64,
+}
+
+impl fmt::Debug for TurnCredential {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        formatter
+            .debug_struct("TurnCredential")
+            .field("pop_id", &self.pop_id)
+            .field("realm", &self.realm)
+            .field("urls", &self.urls)
+            .field("username", &"[REDACTED]")
+            .field("password", &"[REDACTED]")
+            .field("expires_unix", &self.expires_unix)
+            .finish()
+    }
+}
+
+/// Issues a coturn REST API credential using HMAC-SHA1.
+///
+/// # Errors
+///
+/// Returns an error for weak secrets, invalid identifiers, or invalid expiry.
+pub fn issue_turn_credential(
+    secret: &[u8],
+    pop_id: &str,
+    realm: &str,
+    urls: &[String],
+    session_id: &str,
+    expires_unix: u64,
+) -> Result<TurnCredential, AuthError> {
+    if secret.len() < MIN_SECRET_BYTES {
+        return Err(AuthError::WeakSecret);
+    }
+    validate_identifier(pop_id).map_err(|()| AuthError::InvalidPopId)?;
+    validate_identifier(session_id).map_err(|()| AuthError::InvalidSessionId)?;
+    let now = unix_time_seconds();
+    if expires_unix <= now || expires_unix > now.saturating_add(900) {
+        return Err(AuthError::InvalidExpiry);
+    }
+    if realm.trim().is_empty() || urls.is_empty() {
+        return Err(AuthError::InvalidTurnConfiguration);
+    }
+    let username = format!("{expires_unix}:{session_id}:{pop_id}");
+    let mut mac = HmacSha1::new_from_slice(secret).map_err(|_| AuthError::WeakSecret)?;
+    mac.update(username.as_bytes());
+    let password = general_purpose::STANDARD.encode(mac.finalize().into_bytes());
+    Ok(TurnCredential {
+        pop_id: pop_id.to_owned(),
+        realm: realm.to_owned(),
+        urls: urls.to_vec(),
+        username,
+        password,
+        expires_unix,
+    })
+}
+
+fn validate_identifier(value: &str) -> Result<(), ()> {
+    if value.is_empty()
+        || value.len() > 128
+        || !value
+            .bytes()
+            .all(|byte| byte.is_ascii_alphanumeric() || matches!(byte, b'-' | b'_' | b'.'))
+    {
+        return Err(());
+    }
+    Ok(())
+}
+
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub enum AuthError {
+    WeakSecret,
+    InvalidPopId,
+    InvalidSessionId,
+    InvalidExpiry,
+    InvalidQuota,
+    InvalidTurnConfiguration,
+    MalformedTicket,
+    InvalidSignature,
+    UnsupportedVersion,
+    WrongPop,
+    Expired,
+}
+
+impl fmt::Display for AuthError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        write!(formatter, "edge authentication failed: {self:?}")
+    }
+}
+
+impl std::error::Error for AuthError {}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    const SECRET: &[u8] = b"0123456789abcdef0123456789abcdef";
+
+    #[test]
+    fn tickets_are_role_bound_and_tamper_evident() {
+        let issuer = RelayTicketIssuer::new(SECRET, "sha-pop-1").unwrap();
+        let now = unix_time_seconds();
+        let (client, agent) = issuer.issue_pair("session-1", now + 60, 1024).unwrap();
+        let client_claims = issuer.verify(&client, now).unwrap();
+        let agent_claims = issuer.verify(&agent, now).unwrap();
+        assert_eq!(client_claims.role, RelayRole::Client);
+        assert_eq!(agent_claims.role, RelayRole::Agent);
+        assert_eq!(client_claims.allocation_id, agent_claims.allocation_id);
+
+        let mut tampered = client.into_bytes();
+        tampered[3] ^= 1;
+        assert!(
+            issuer
+                .verify(&String::from_utf8(tampered).unwrap(), now)
+                .is_err()
+        );
+    }
+
+    #[test]
+    fn tickets_reject_expiry_and_cross_pop_use() {
+        let issuer = RelayTicketIssuer::new(SECRET, "sha-pop-1").unwrap();
+        let other = RelayTicketIssuer::new(SECRET, "bj-pop-1").unwrap();
+        let now = unix_time_seconds();
+        let (ticket, _) = issuer.issue_pair("session-2", now + 2, 1).unwrap();
+        assert_eq!(issuer.verify(&ticket, now + 2), Err(AuthError::Expired));
+        assert_eq!(other.verify(&ticket, now), Err(AuthError::WrongPop));
+    }
+
+    #[test]
+    fn coturn_rest_credential_is_session_and_pop_bound() {
+        let urls = vec!["turn:turn.example.test:3478?transport=udp".to_owned()];
+        let now = unix_time_seconds();
+        let credential = issue_turn_credential(
+            SECRET,
+            "sha-pop-1",
+            "edge.example.test",
+            &urls,
+            "session-3",
+            now + 60,
+        )
+        .unwrap();
+        assert_eq!(
+            credential.username,
+            format!("{}:session-3:sha-pop-1", now + 60)
+        );
+        assert!(!credential.password.is_empty());
+        assert_ne!(
+            credential.password,
+            issue_turn_credential(
+                SECRET,
+                "sha-pop-1",
+                "edge.example.test",
+                &urls,
+                "session-4",
+                now + 60,
+            )
+            .unwrap()
+            .password
+        );
+        let debug = format!("{credential:?}");
+        assert!(!debug.contains(&credential.username));
+        assert!(!debug.contains(&credential.password));
+    }
+}
diff --git a/edge/edge-service/src/lib.rs b/edge/edge-service/src/lib.rs
new file mode 100644
index 0000000..90d11cf
--- /dev/null
+++ b/edge/edge-service/src/lib.rs
@@ -0,0 +1,34 @@
+//! Deployable `RemoteDesk` edge control plane and authenticated byte relay.
+
+mod allocator;
+mod api;
+mod auth;
+mod negotiation;
+mod relay;
+mod rendezvous;
+mod signaling;
+
+pub use allocator::{PathMode, PathPolicy, PathSelection, PathSelectionRequest, select_path};
+pub use api::{ApiConfig, EdgeApi, TurnPopConfig, run_http_server};
+pub use auth::{
+    RelayRole, RelayTicketClaims, RelayTicketIssuer, TurnCredential, issue_turn_credential,
+};
+pub use negotiation::{
+    NegotiationMessage, NegotiationPoll, NegotiationRegistry, SignedNegotiationEnvelope,
+};
+pub use relay::{RelayBroker, RelayConfig, RelayStats, run_relay_listener};
+pub use rendezvous::{Presence, PresenceRegistry};
+pub use signaling::{
+    AgentPollProof, AgentSignalAck, AgentSignalCompletion, ClientSignalStatus,
+    ClientSignalStatusRequest, EnqueueResult, RelayAccess, RelayTicketPair, SignalRegistry,
+    SignalStatus, SignedSessionIntent,
+};
+
+use std::time::{SystemTime, UNIX_EPOCH};
+
+#[must_use]
+pub fn unix_time_seconds() -> u64 {
+    SystemTime::now()
+        .duration_since(UNIX_EPOCH)
+        .map_or(0, |duration| duration.as_secs())
+}
diff --git a/edge/edge-service/src/main.rs b/edge/edge-service/src/main.rs
new file mode 100644
index 0000000..821e0a9
--- /dev/null
+++ b/edge/edge-service/src/main.rs
@@ -0,0 +1,142 @@
+use clap::Parser;
+use remotedesk_edge_service::{
+    ApiConfig, EdgeApi, RelayBroker, RelayConfig, RelayTicketIssuer, TurnPopConfig,
+    run_http_server, run_relay_listener,
+};
+use std::fs;
+use std::net::{IpAddr, SocketAddr, TcpListener};
+use std::path::PathBuf;
+use std::sync::Arc;
+use std::sync::atomic::AtomicBool;
+use std::thread;
+use std::time::Duration;
+use tiny_http::Server;
+use zeroize::Zeroizing;
+
+#[derive(Debug, Parser)]
+#[command(
+    version,
+    about = "RemoteDesk authenticated edge rendezvous and byte relay"
+)]
+struct Arguments {
+    #[arg(long, default_value = "127.0.0.1:7080")]
+    api_bind: SocketAddr,
+    #[arg(long, default_value = "127.0.0.1:7444")]
+    relay_bind: SocketAddr,
+    #[arg(long)]
+    public_relay_address: String,
+    #[arg(long)]
+    pop_id: String,
+    #[arg(long)]
+    region: String,
+    #[arg(long)]
+    turn_config: Option<PathBuf>,
+    #[arg(long, default_value_t = 300)]
+    relay_ticket_ttl_seconds: u64,
+    #[arg(long, default_value_t = 10 * 1024 * 1024 * 1024_u64)]
+    relay_max_bytes: u64,
+    #[arg(long, default_value_t = 60)]
+    relay_idle_seconds: u64,
+}
+
+fn main() -> Result<(), Box<dyn std::error::Error + Send + Sync>> {
+    let arguments = Arguments::parse();
+    ensure_loopback(arguments.api_bind.ip())?;
+    let api_token = required_secret("REMOTEDESK_EDGE_API_TOKEN")?;
+    let presence_token = required_secret("REMOTEDESK_EDGE_PRESENCE_TOKEN")?;
+    let ticket_secret = required_secret("REMOTEDESK_EDGE_TICKET_SECRET")?;
+    if api_token.as_str() == presence_token.as_str()
+        || api_token.as_str() == ticket_secret.as_str()
+        || presence_token.as_str() == ticket_secret.as_str()
+    {
+        return Err("Edge API, Presence, and ticket secrets must be different".into());
+    }
+    let turn_pops = load_turn_config(arguments.turn_config.as_ref())?;
+    let issuer = RelayTicketIssuer::new(ticket_secret.as_bytes(), &arguments.pop_id)?;
+    let broker = Arc::new(RelayBroker::new(
+        issuer.clone(),
+        RelayConfig {
+            idle_timeout: Duration::from_secs(arguments.relay_idle_seconds),
+            ..RelayConfig::default()
+        },
+    ));
+    let api = Arc::new(EdgeApi::new(
+        ApiConfig {
+            api_token: api_token.to_string(),
+            presence_token: presence_token.to_string(),
+            pop_id: arguments.pop_id.clone(),
+            region: arguments.region,
+            public_relay_address: arguments.public_relay_address,
+            default_relay_ttl_seconds: arguments.relay_ticket_ttl_seconds,
+            default_relay_max_bytes: arguments.relay_max_bytes,
+            turn_pops,
+        },
+        issuer,
+        Arc::clone(&broker),
+    )?);
+    let relay_listener = TcpListener::bind(arguments.relay_bind)?;
+    let http_server = Server::http(arguments.api_bind)?;
+    let shutdown = Arc::new(AtomicBool::new(false));
+    let relay_worker = {
+        let shutdown = Arc::clone(&shutdown);
+        thread::spawn(move || run_relay_listener(&relay_listener, &broker, &shutdown))
+    };
+    println!(
+        "RemoteDesk Edge {} serving API on {} and relay on {}",
+        env!("CARGO_PKG_VERSION"),
+        arguments.api_bind,
+        arguments.relay_bind
+    );
+    let api_result = run_http_server(&http_server, &api, &shutdown);
+    shutdown.store(true, std::sync::atomic::Ordering::Release);
+    relay_worker
+        .join()
+        .map_err(|_| "relay listener thread panicked")??;
+    api_result?;
+    Ok(())
+}
+
+fn ensure_loopback(address: IpAddr) -> Result<(), &'static str> {
+    if address.is_loopback() {
+        Ok(())
+    } else {
+        Err(
+            "the Edge HTTP API must bind to loopback and be published through an HTTPS reverse proxy",
+        )
+    }
+}
+
+fn required_secret(
+    name: &str,
+) -> Result<Zeroizing<String>, Box<dyn std::error::Error + Send + Sync>> {
+    let value = std::env::var(name)
+        .map_err(|_| format!("required environment variable {name} is missing"))?;
+    if value.len() < 32 {
+        return Err(format!("{name} must contain at least 32 bytes").into());
+    }
+    Ok(Zeroizing::new(value))
+}
+
+fn load_turn_config(
+    path: Option<&PathBuf>,
+) -> Result<Vec<TurnPopConfig>, Box<dyn std::error::Error + Send + Sync>> {
+    let Some(path) = path else {
+        return Ok(Vec::new());
+    };
+    let bytes = fs::read(path)?;
+    if bytes.len() > 1024 * 1024 {
+        return Err("TURN configuration exceeds 1 MiB".into());
+    }
+    Ok(serde_json::from_slice(&bytes)?)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn public_http_bind_is_rejected() {
+        assert!(ensure_loopback("127.0.0.1".parse().unwrap()).is_ok());
+        assert!(ensure_loopback("0.0.0.0".parse().unwrap()).is_err());
+    }
+}
diff --git a/edge/edge-service/src/negotiation.rs b/edge/edge-service/src/negotiation.rs
new file mode 100644
index 0000000..f01da74
--- /dev/null
+++ b/edge/edge-service/src/negotiation.rs
@@ -0,0 +1,554 @@
+use base64::{Engine as _, engine::general_purpose::STANDARD_NO_PAD};
+use ed25519_dalek::{Signature, Verifier as _, VerifyingKey};
+use remotedesk_protocol::{
+    EdgeNegotiationEndpoint, EdgeNegotiationEnvelopeV1, EdgeNegotiationKind,
+    EdgeNegotiationOperation, SIGNAL_NONCE_LENGTH,
+};
+use serde::{Deserialize, Serialize};
+use std::collections::{HashMap, VecDeque};
+use std::sync::Mutex;
+
+use crate::signaling::AcceptedSignalSession;
+
+const CLOCK_SKEW_SECONDS: u64 = 30;
+const MAX_ACTIVE_SESSIONS: usize = 1024;
+const MAX_MESSAGES_PER_SESSION: usize = 512;
+const MAX_CANDIDATES_PER_ENDPOINT_GENERATION: usize = 128;
+const MAX_POLL_MESSAGES: usize = 64;
+const MAX_POLL_PAYLOAD_BYTES: usize = 192 * 1024;
+const MAX_TOTAL_PAYLOAD_BYTES: usize = 8 * 1024 * 1024;
+
+#[derive(Clone, Debug, Deserialize, Eq, PartialEq, Serialize)]
+#[serde(deny_unknown_fields)]
+pub struct SignedNegotiationEnvelope {
+    pub request_id: String,
+    pub session_id: String,
+    pub endpoint: String,
+    pub operation: String,
+    pub sequence: u32,
+    pub generation: u32,
+    pub kind: Option<String>,
+    pub payload: String,
+    pub nonce: String,
+    pub issued_unix: u64,
+    pub expires_unix: u64,
+    pub signature: String,
+}
+
+impl SignedNegotiationEnvelope {
+    /// Validates the wire schema, freshness, endpoint binding and signature.
+    ///
+    /// # Errors
+    ///
+    /// Returns a stable error category for malformed, stale or forged input.
+    pub fn verify(
+        &self,
+        binding: &AcceptedSignalSession,
+        now: u64,
+    ) -> Result<EdgeNegotiationEnvelopeV1, &'static str> {
+        if self.request_id != binding.request_id || self.session_id != binding.session_id {
+            return Err("negotiation_session_mismatch");
+        }
+        let endpoint = EdgeNegotiationEndpoint::parse(&self.endpoint)
+            .map_err(|_| "invalid_negotiation_envelope")?;
+        let operation = EdgeNegotiationOperation::parse(&self.operation)
+            .map_err(|_| "invalid_negotiation_envelope")?;
+        let kind = self
+            .kind
+            .as_deref()
+            .map(EdgeNegotiationKind::parse)
+            .transpose()
+            .map_err(|_| "invalid_negotiation_envelope")?;
+        let model = EdgeNegotiationEnvelopeV1 {
+            request_id: self.request_id.clone(),
+            session_id: self.session_id.clone(),
+            endpoint,
+            operation,
+            sequence: self.sequence,
+            generation: self.generation,
+            kind,
+            payload: self.payload.clone(),
+            nonce: decode_fixed(&self.nonce).map_err(|()| "invalid_negotiation_envelope")?,
+            issued_unix: self.issued_unix,
+            expires_unix: self.expires_unix,
+        };
+        let payload = model
+            .stable_signing_input()
+            .map_err(|_| "invalid_negotiation_envelope")?;
+        if model.issued_unix > now.saturating_add(CLOCK_SKEW_SECONDS)
+            || model.expires_unix <= now
+            || binding.expires_unix <= now
+        {
+            return Err("expired_negotiation_envelope");
+        }
+        let public_key = match endpoint {
+            EdgeNegotiationEndpoint::Client => &binding.client_public_key,
+            EdgeNegotiationEndpoint::Agent => &binding.agent_public_key,
+        };
+        verify_signature(public_key, &self.signature, &payload)
+            .map_err(|()| "invalid_negotiation_signature")?;
+        Ok(model)
+    }
+}
+
+#[derive(Clone, Debug, Eq, PartialEq, Serialize)]
+pub struct NegotiationMessage {
+    pub endpoint: String,
+    pub sequence: u32,
+    pub generation: u32,
+    pub kind: String,
+    pub payload: String,
+    pub accepted_unix: u64,
+}
+
+#[derive(Clone, Debug, Eq, PartialEq, Serialize)]
+pub struct NegotiationPoll {
+    pub request_id: String,
+    pub session_id: String,
+    pub generation: u32,
+    pub messages: Vec<NegotiationMessage>,
+    pub has_more: bool,
+}
+
+#[derive(Default)]
+pub struct NegotiationRegistry {
+    inner: Mutex<NegotiationState>,
+}
+
+#[derive(Default)]
+struct NegotiationState {
+    sessions: HashMap<String, SessionMailbox>,
+    used_nonces: HashMap<[u8; SIGNAL_NONCE_LENGTH], u64>,
+    total_payload_bytes: usize,
+}
+
+struct SessionMailbox {
+    request_id: String,
+    session_id: String,
+    expires_unix: u64,
+    generation: u32,
+    client_sequence: u32,
+    agent_sequence: u32,
+    messages: VecDeque<NegotiationMessage>,
+    payload_bytes: usize,
+    candidates: HashMap<(EndpointKey, u32), usize>,
+}
+
+#[derive(Clone, Copy, Debug, Eq, Hash, PartialEq)]
+enum EndpointKey {
+    Client,
+    Agent,
+}
+
+impl From<EdgeNegotiationEndpoint> for EndpointKey {
+    fn from(value: EdgeNegotiationEndpoint) -> Self {
+        match value {
+            EdgeNegotiationEndpoint::Client => Self::Client,
+            EdgeNegotiationEndpoint::Agent => Self::Agent,
+        }
+    }
+}
+
+impl NegotiationRegistry {
+    /// Stores one authenticated SDP/ICE message for the peer endpoint.
+    ///
+    /// # Errors
+    ///
+    /// Returns a stable error category when ordering, generation or capacity rules fail.
+    pub fn send(
+        &self,
+        binding: &AcceptedSignalSession,
+        envelope: &EdgeNegotiationEnvelopeV1,
+        now: u64,
+    ) -> Result<NegotiationMessage, &'static str> {
+        if envelope.operation != EdgeNegotiationOperation::Send {
+            return Err("negotiation_operation_mismatch");
+        }
+        let kind = envelope.kind.ok_or("invalid_negotiation_envelope")?;
+        let mut state = self
+            .inner
+            .lock()
+            .map_err(|_| "negotiation_registry_unavailable")?;
+        prune(&mut state, now);
+        consume_nonce(&mut state, envelope.nonce, envelope.expires_unix, now)?;
+        ensure_mailbox(&mut state, binding)?;
+        let payload_len = envelope.payload.len();
+        if state.total_payload_bytes.saturating_add(payload_len) > MAX_TOTAL_PAYLOAD_BYTES {
+            return Err("negotiation_capacity_exceeded");
+        }
+        let key = mailbox_key(&binding.request_id, &binding.session_id);
+        let message = {
+            let mailbox = state
+                .sessions
+                .get_mut(&key)
+                .ok_or("negotiation_registry_unavailable")?;
+            let current_sequence = match envelope.endpoint {
+                EdgeNegotiationEndpoint::Client => &mut mailbox.client_sequence,
+                EdgeNegotiationEndpoint::Agent => &mut mailbox.agent_sequence,
+            };
+            if envelope.sequence != current_sequence.saturating_add(1) {
+                return Err("negotiation_sequence_conflict");
+            }
+            if mailbox.messages.len() >= MAX_MESSAGES_PER_SESSION {
+                return Err("negotiation_capacity_exceeded");
+            }
+            match kind {
+                EdgeNegotiationKind::Restart
+                    if envelope.generation != mailbox.generation.saturating_add(1) =>
+                {
+                    return Err("negotiation_generation_conflict");
+                }
+                EdgeNegotiationKind::Restart => {}
+                _ if envelope.generation != mailbox.generation => {
+                    return Err("negotiation_generation_conflict");
+                }
+                _ => {}
+            }
+            if kind == EdgeNegotiationKind::IceCandidate {
+                let count = mailbox
+                    .candidates
+                    .entry((envelope.endpoint.into(), envelope.generation))
+                    .or_default();
+                if *count >= MAX_CANDIDATES_PER_ENDPOINT_GENERATION {
+                    return Err("negotiation_candidate_limit");
+                }
+            }
+            if kind == EdgeNegotiationKind::Restart {
+                mailbox.generation = envelope.generation;
+            }
+            if kind == EdgeNegotiationKind::IceCandidate {
+                *mailbox
+                    .candidates
+                    .entry((envelope.endpoint.into(), envelope.generation))
+                    .or_default() += 1;
+            }
+            *current_sequence = envelope.sequence;
+            let message = NegotiationMessage {
+                endpoint: envelope.endpoint.as_str().into(),
+                sequence: envelope.sequence,
+                generation: envelope.generation,
+                kind: kind.as_str().into(),
+                payload: envelope.payload.clone(),
+                accepted_unix: now,
+            };
+            mailbox.payload_bytes = mailbox.payload_bytes.saturating_add(payload_len);
+            mailbox.messages.push_back(message.clone());
+            message
+        };
+        state.total_payload_bytes = state.total_payload_bytes.saturating_add(payload_len);
+        Ok(message)
+    }
+
+    /// Reads bounded messages produced by the peer after the supplied sequence cursor.
+    ///
+    /// # Errors
+    ///
+    /// Returns a stable error category for invalid cursors, replay or unavailable state.
+    pub fn poll(
+        &self,
+        binding: &AcceptedSignalSession,
+        envelope: &EdgeNegotiationEnvelopeV1,
+        now: u64,
+    ) -> Result<NegotiationPoll, &'static str> {
+        if envelope.operation != EdgeNegotiationOperation::Poll {
+            return Err("negotiation_operation_mismatch");
+        }
+        let mut state = self
+            .inner
+            .lock()
+            .map_err(|_| "negotiation_registry_unavailable")?;
+        prune(&mut state, now);
+        consume_nonce(&mut state, envelope.nonce, envelope.expires_unix, now)?;
+        ensure_mailbox(&mut state, binding)?;
+        let mailbox = state
+            .sessions
+            .get(&mailbox_key(&binding.request_id, &binding.session_id))
+            .ok_or("negotiation_registry_unavailable")?;
+        let peer = match envelope.endpoint {
+            EdgeNegotiationEndpoint::Client => "agent",
+            EdgeNegotiationEndpoint::Agent => "client",
+        };
+        let peer_sequence = match envelope.endpoint {
+            EdgeNegotiationEndpoint::Client => mailbox.agent_sequence,
+            EdgeNegotiationEndpoint::Agent => mailbox.client_sequence,
+        };
+        if envelope.sequence > peer_sequence {
+            return Err("negotiation_cursor_invalid");
+        }
+        let mut payload_bytes = 0_usize;
+        let mut messages = Vec::new();
+        let mut has_more = false;
+        for message in mailbox
+            .messages
+            .iter()
+            .filter(|message| message.endpoint == peer && message.sequence > envelope.sequence)
+        {
+            if messages.len() >= MAX_POLL_MESSAGES
+                || payload_bytes.saturating_add(message.payload.len()) > MAX_POLL_PAYLOAD_BYTES
+            {
+                has_more = true;
+                break;
+            }
+            payload_bytes = payload_bytes.saturating_add(message.payload.len());
+            messages.push(message.clone());
+        }
+        Ok(NegotiationPoll {
+            request_id: binding.request_id.clone(),
+            session_id: binding.session_id.clone(),
+            generation: mailbox.generation,
+            messages,
+            has_more,
+        })
+    }
+
+    #[must_use]
+    pub fn active_count(&self, now: u64) -> usize {
+        self.inner.lock().map_or(0, |mut state| {
+            prune(&mut state, now);
+            state.sessions.len()
+        })
+    }
+}
+
+fn ensure_mailbox(
+    state: &mut NegotiationState,
+    binding: &AcceptedSignalSession,
+) -> Result<(), &'static str> {
+    let key = mailbox_key(&binding.request_id, &binding.session_id);
+    if let Some(existing) = state.sessions.get_mut(&key) {
+        existing.expires_unix = existing.expires_unix.min(binding.expires_unix);
+        if existing.request_id != binding.request_id || existing.session_id != binding.session_id {
+            return Err("negotiation_session_mismatch");
+        }
+        return Ok(());
+    }
+    if state.sessions.len() >= MAX_ACTIVE_SESSIONS {
+        return Err("negotiation_capacity_exceeded");
+    }
+    state.sessions.insert(
+        key,
+        SessionMailbox {
+            request_id: binding.request_id.clone(),
+            session_id: binding.session_id.clone(),
+            expires_unix: binding.expires_unix,
+            generation: 1,
+            client_sequence: 0,
+            agent_sequence: 0,
+            messages: VecDeque::new(),
+            payload_bytes: 0,
+            candidates: HashMap::new(),
+        },
+    );
+    Ok(())
+}
+
+fn consume_nonce(
+    state: &mut NegotiationState,
+    nonce: [u8; SIGNAL_NONCE_LENGTH],
+    expires_unix: u64,
+    now: u64,
+) -> Result<(), &'static str> {
+    state.used_nonces.retain(|_, expiry| *expiry > now);
+    if state.used_nonces.contains_key(&nonce) {
+        return Err("negotiation_envelope_replayed");
+    }
+    state.used_nonces.insert(nonce, expires_unix);
+    Ok(())
+}
+
+fn prune(state: &mut NegotiationState, now: u64) {
+    let removed_bytes = state
+        .sessions
+        .values()
+        .filter(|mailbox| mailbox.expires_unix <= now)
+        .map(|mailbox| mailbox.payload_bytes)
+        .sum::<usize>();
+    state
+        .sessions
+        .retain(|_, mailbox| mailbox.expires_unix > now);
+    state.total_payload_bytes = state.total_payload_bytes.saturating_sub(removed_bytes);
+    state.used_nonces.retain(|_, expiry| *expiry > now);
+}
+
+fn mailbox_key(request_id: &str, session_id: &str) -> String {
+    format!("{request_id}\0{session_id}")
+}
+
+fn verify_signature(public_key: &str, signature: &str, payload: &[u8]) -> Result<(), ()> {
+    let public = decode_fixed::<32>(public_key)?;
+    let signature = decode_fixed::<64>(signature)?;
+    let key = VerifyingKey::from_bytes(&public).map_err(|_| ())?;
+    key.verify(payload, &Signature::from_bytes(&signature))
+        .map_err(|_| ())
+}
+
+fn decode_fixed<const LENGTH: usize>(value: &str) -> Result<[u8; LENGTH], ()> {
+    let decoded = STANDARD_NO_PAD.decode(value).map_err(|_| ())?;
+    if STANDARD_NO_PAD.encode(&decoded) != value {
+        return Err(());
+    }
+    decoded.try_into().map_err(|_| ())
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use ed25519_dalek::{Signer as _, SigningKey};
+
+    fn binding(client: &SigningKey, agent: &SigningKey) -> AcceptedSignalSession {
+        AcceptedSignalSession {
+            request_id: "request-1".into(),
+            session_id: "session-1".into(),
+            client_public_key: STANDARD_NO_PAD.encode(client.verifying_key().as_bytes()),
+            agent_public_key: STANDARD_NO_PAD.encode(agent.verifying_key().as_bytes()),
+            expires_unix: 200,
+        }
+    }
+
+    fn model(
+        endpoint: EdgeNegotiationEndpoint,
+        operation: EdgeNegotiationOperation,
+        sequence: u32,
+        generation: u32,
+        kind: Option<EdgeNegotiationKind>,
+        nonce: u8,
+    ) -> EdgeNegotiationEnvelopeV1 {
+        EdgeNegotiationEnvelopeV1 {
+            request_id: "request-1".into(),
+            session_id: "session-1".into(),
+            endpoint,
+            operation,
+            sequence,
+            generation,
+            kind,
+            payload: if matches!(kind, Some(EdgeNegotiationKind::Offer)) {
+                "v=0\r\n".into()
+            } else if matches!(kind, Some(EdgeNegotiationKind::Answer)) {
+                "v=0\r\na=answer\r\n".into()
+            } else {
+                String::new()
+            },
+            nonce: [nonce; SIGNAL_NONCE_LENGTH],
+            issued_unix: 100,
+            expires_unix: 130,
+        }
+    }
+
+    fn signed(model: &EdgeNegotiationEnvelopeV1, key: &SigningKey) -> SignedNegotiationEnvelope {
+        SignedNegotiationEnvelope {
+            request_id: model.request_id.clone(),
+            session_id: model.session_id.clone(),
+            endpoint: model.endpoint.as_str().into(),
+            operation: model.operation.as_str().into(),
+            sequence: model.sequence,
+            generation: model.generation,
+            kind: model.kind.map(|kind| kind.as_str().into()),
+            payload: model.payload.clone(),
+            nonce: STANDARD_NO_PAD.encode(model.nonce),
+            issued_unix: model.issued_unix,
+            expires_unix: model.expires_unix,
+            signature: STANDARD_NO_PAD
+                .encode(key.sign(&model.stable_signing_input().unwrap()).to_bytes()),
+        }
+    }
+
+    #[test]
+    fn signatures_are_endpoint_bound_and_reject_forgery() {
+        let client = SigningKey::from_bytes(&[1; 32]);
+        let agent = SigningKey::from_bytes(&[2; 32]);
+        let binding = binding(&client, &agent);
+        let envelope = model(
+            EdgeNegotiationEndpoint::Client,
+            EdgeNegotiationOperation::Send,
+            1,
+            1,
+            Some(EdgeNegotiationKind::Offer),
+            1,
+        );
+        assert!(signed(&envelope, &client).verify(&binding, 100).is_ok());
+        assert_eq!(
+            signed(&envelope, &agent).verify(&binding, 100),
+            Err("invalid_negotiation_signature")
+        );
+    }
+
+    #[test]
+    fn mailbox_is_peer_only_ordered_and_restart_bound() {
+        let client = SigningKey::from_bytes(&[1; 32]);
+        let agent = SigningKey::from_bytes(&[2; 32]);
+        let binding = binding(&client, &agent);
+        let registry = NegotiationRegistry::default();
+        let offer = model(
+            EdgeNegotiationEndpoint::Client,
+            EdgeNegotiationOperation::Send,
+            1,
+            1,
+            Some(EdgeNegotiationKind::Offer),
+            1,
+        );
+        registry.send(&binding, &offer, 100).unwrap();
+        assert_eq!(
+            registry.send(&binding, &offer, 100),
+            Err("negotiation_envelope_replayed")
+        );
+
+        let agent_poll = model(
+            EdgeNegotiationEndpoint::Agent,
+            EdgeNegotiationOperation::Poll,
+            0,
+            0,
+            None,
+            2,
+        );
+        let received = registry.poll(&binding, &agent_poll, 100).unwrap();
+        assert_eq!(received.messages.len(), 1);
+        assert_eq!(received.messages[0].kind, "offer");
+
+        let client_poll = model(
+            EdgeNegotiationEndpoint::Client,
+            EdgeNegotiationOperation::Poll,
+            0,
+            0,
+            None,
+            3,
+        );
+        assert!(
+            registry
+                .poll(&binding, &client_poll, 100)
+                .unwrap()
+                .messages
+                .is_empty()
+        );
+
+        let stale_answer = model(
+            EdgeNegotiationEndpoint::Agent,
+            EdgeNegotiationOperation::Send,
+            1,
+            2,
+            Some(EdgeNegotiationKind::Answer),
+            4,
+        );
+        assert_eq!(
+            registry.send(&binding, &stale_answer, 100),
+            Err("negotiation_generation_conflict")
+        );
+        let restart = model(
+            EdgeNegotiationEndpoint::Client,
+            EdgeNegotiationOperation::Send,
+            2,
+            2,
+            Some(EdgeNegotiationKind::Restart),
+            5,
+        );
+        registry.send(&binding, &restart, 100).unwrap();
+        let answer = model(
+            EdgeNegotiationEndpoint::Agent,
+            EdgeNegotiationOperation::Send,
+            1,
+            2,
+            Some(EdgeNegotiationKind::Answer),
+            6,
+        );
+        assert!(registry.send(&binding, &answer, 100).is_ok());
+    }
+}
diff --git a/edge/edge-service/src/relay.rs b/edge/edge-service/src/relay.rs
new file mode 100644
index 0000000..723dba7
--- /dev/null
+++ b/edge/edge-service/src/relay.rs
@@ -0,0 +1,578 @@
+use serde::Deserialize;
+use std::collections::HashMap;
+use std::io::{self, ErrorKind, Read as _, Write as _};
+use std::net::{Shutdown, TcpListener, TcpStream};
+use std::sync::atomic::{AtomicBool, AtomicU64, AtomicUsize, Ordering};
+use std::sync::{Arc, Mutex};
+use std::thread;
+use std::time::{Duration, Instant};
+
+use crate::{RelayRole, RelayTicketClaims, RelayTicketIssuer, unix_time_seconds};
+
+const MAX_HELLO_BYTES: usize = 8192;
+const COPY_BUFFER_BYTES: usize = 32 * 1024;
+
+#[derive(Clone, Debug)]
+pub struct RelayConfig {
+    pub handshake_timeout: Duration,
+    pub idle_timeout: Duration,
+    pub pending_timeout: Duration,
+    pub max_pending_allocations: usize,
+    pub max_consumed_tickets: usize,
+    pub max_concurrent_handshakes: usize,
+    pub max_active_sessions: usize,
+}
+
+impl Default for RelayConfig {
+    fn default() -> Self {
+        Self {
+            handshake_timeout: Duration::from_secs(10),
+            idle_timeout: Duration::from_secs(60),
+            pending_timeout: Duration::from_secs(30),
+            max_pending_allocations: 4096,
+            max_consumed_tickets: 65_536,
+            max_concurrent_handshakes: 256,
+            max_active_sessions: 4096,
+        }
+    }
+}
+
+#[derive(Default)]
+pub struct RelayStats {
+    accepted_connections: AtomicU64,
+    rejected_connections: AtomicU64,
+    completed_sessions: AtomicU64,
+    relayed_bytes: AtomicU64,
+    active_sessions: AtomicUsize,
+}
+
+impl RelayStats {
+    #[must_use]
+    pub fn snapshot(&self) -> RelayStatsSnapshot {
+        RelayStatsSnapshot {
+            accepted_connections: self.accepted_connections.load(Ordering::Relaxed),
+            rejected_connections: self.rejected_connections.load(Ordering::Relaxed),
+            completed_sessions: self.completed_sessions.load(Ordering::Relaxed),
+            relayed_bytes: self.relayed_bytes.load(Ordering::Relaxed),
+            active_sessions: self.active_sessions.load(Ordering::Relaxed),
+        }
+    }
+}
+
+#[derive(Clone, Copy, Debug, serde::Serialize)]
+pub struct RelayStatsSnapshot {
+    pub accepted_connections: u64,
+    pub rejected_connections: u64,
+    pub completed_sessions: u64,
+    pub relayed_bytes: u64,
+    pub active_sessions: usize,
+}
+
+struct PendingSide {
+    stream: TcpStream,
+    claims: RelayTicketClaims,
+}
+
+struct PendingAllocation {
+    created: Instant,
+    client: Option<PendingSide>,
+    agent: Option<PendingSide>,
+}
+
+struct BrokerState {
+    pending: HashMap<String, PendingAllocation>,
+    consumed: HashMap<[u8; 32], u64>,
+}
+
+pub struct RelayBroker {
+    issuer: RelayTicketIssuer,
+    config: RelayConfig,
+    state: Mutex<BrokerState>,
+    stats: Arc<RelayStats>,
+}
+
+impl RelayBroker {
+    #[must_use]
+    pub fn new(issuer: RelayTicketIssuer, config: RelayConfig) -> Self {
+        Self {
+            issuer,
+            config,
+            state: Mutex::new(BrokerState {
+                pending: HashMap::new(),
+                consumed: HashMap::new(),
+            }),
+            stats: Arc::new(RelayStats::default()),
+        }
+    }
+
+    #[must_use]
+    pub fn stats(&self) -> Arc<RelayStats> {
+        Arc::clone(&self.stats)
+    }
+
+    #[must_use]
+    pub fn pending_count(&self) -> usize {
+        self.state.lock().map_or(0, |state| state.pending.len())
+    }
+
+    fn handle_connection(self: &Arc<Self>, mut stream: TcpStream) -> io::Result<()> {
+        self.stats
+            .accepted_connections
+            .fetch_add(1, Ordering::Relaxed);
+        stream.set_read_timeout(Some(self.config.handshake_timeout))?;
+        stream.set_write_timeout(Some(self.config.handshake_timeout))?;
+        let hello = read_hello(&mut stream)?;
+        let now = unix_time_seconds();
+        let claims = self
+            .issuer
+            .verify(&hello.ticket, now)
+            .map_err(|error| io::Error::new(ErrorKind::PermissionDenied, error))?;
+        let digest = RelayTicketIssuer::token_digest(&hello.ticket);
+
+        let pair = {
+            let mut state = self
+                .state
+                .lock()
+                .map_err(|_| io::Error::other("relay broker lock failed"))?;
+            purge_state(&mut state, now, self.config.pending_timeout);
+            if state.consumed.contains_key(&digest) {
+                return Err(io::Error::new(
+                    ErrorKind::PermissionDenied,
+                    "relay ticket was already used",
+                ));
+            }
+            if state.consumed.len() >= self.config.max_consumed_tickets {
+                return Err(io::Error::new(
+                    ErrorKind::WouldBlock,
+                    "relay consumed ticket limit reached",
+                ));
+            }
+            if !state.pending.contains_key(&claims.allocation_id)
+                && state.pending.len() >= self.config.max_pending_allocations
+            {
+                return Err(io::Error::new(
+                    ErrorKind::WouldBlock,
+                    "relay pending allocation limit reached",
+                ));
+            }
+            state.consumed.insert(digest, claims.expires_unix);
+            let allocation_key = claims.allocation_id.clone();
+            let allocation = state
+                .pending
+                .entry(allocation_key.clone())
+                .or_insert_with(|| PendingAllocation {
+                    created: Instant::now(),
+                    client: None,
+                    agent: None,
+                });
+            let side = PendingSide { stream, claims };
+            match side.claims.role {
+                RelayRole::Client if allocation.client.is_none() => allocation.client = Some(side),
+                RelayRole::Agent if allocation.agent.is_none() => allocation.agent = Some(side),
+                _ => {
+                    return Err(io::Error::new(
+                        ErrorKind::PermissionDenied,
+                        "relay role already joined",
+                    ));
+                }
+            }
+            let ready = allocation.client.is_some() && allocation.agent.is_some();
+            if ready {
+                let mut allocation = state
+                    .pending
+                    .remove(&allocation_key)
+                    .ok_or_else(|| io::Error::other("relay allocation disappeared"))?;
+                if !reserve_active_session(&self.stats, self.config.max_active_sessions) {
+                    return Err(io::Error::new(
+                        ErrorKind::WouldBlock,
+                        "relay active session limit reached",
+                    ));
+                }
+                Some((
+                    allocation.client.take().expect("checked client side"),
+                    allocation.agent.take().expect("checked agent side"),
+                ))
+            } else {
+                None
+            }
+        };
+
+        if let Some((client, agent)) = pair {
+            if let Err(error) = validate_pair(&client.claims, &agent.claims) {
+                self.stats.active_sessions.fetch_sub(1, Ordering::Relaxed);
+                return Err(error);
+            }
+            relay_pair(
+                client.stream,
+                agent.stream,
+                &client.claims,
+                &self.config,
+                &self.stats,
+            )
+        } else {
+            Ok(())
+        }
+    }
+}
+
+fn reserve_active_session(stats: &RelayStats, maximum: usize) -> bool {
+    let mut active = stats.active_sessions.load(Ordering::Acquire);
+    loop {
+        if active >= maximum {
+            return false;
+        }
+        match stats.active_sessions.compare_exchange_weak(
+            active,
+            active + 1,
+            Ordering::AcqRel,
+            Ordering::Acquire,
+        ) {
+            Ok(_) => return true,
+            Err(observed) => active = observed,
+        }
+    }
+}
+
+fn purge_state(state: &mut BrokerState, now: u64, pending_timeout: Duration) {
+    state.consumed.retain(|_, expiry| *expiry > now);
+    state.pending.retain(|_, allocation| {
+        allocation.created.elapsed() < pending_timeout
+            && allocation
+                .client
+                .as_ref()
+                .or(allocation.agent.as_ref())
+                .is_some_and(|side| side.claims.expires_unix > now)
+    });
+}
+
+#[derive(Deserialize)]
+#[serde(deny_unknown_fields)]
+struct RelayHello {
+    ticket: String,
+}
+
+fn read_hello(stream: &mut TcpStream) -> io::Result<RelayHello> {
+    let mut bytes = Vec::with_capacity(512);
+    let mut byte = [0_u8; 1];
+    loop {
+        if bytes.len() == MAX_HELLO_BYTES {
+            return Err(io::Error::new(
+                ErrorKind::InvalidData,
+                "relay hello is too large",
+            ));
+        }
+        stream.read_exact(&mut byte)?;
+        if byte[0] == b'\n' {
+            break;
+        }
+        if byte[0] == b'\r' || byte[0] == 0 {
+            return Err(io::Error::new(
+                ErrorKind::InvalidData,
+                "relay hello contains invalid bytes",
+            ));
+        }
+        bytes.push(byte[0]);
+    }
+    serde_json::from_slice(&bytes)
+        .map_err(|_| io::Error::new(ErrorKind::InvalidData, "relay hello is not valid JSON"))
+}
+
+fn validate_pair(client: &RelayTicketClaims, agent: &RelayTicketClaims) -> io::Result<()> {
+    if client.role != RelayRole::Client
+        || agent.role != RelayRole::Agent
+        || client.allocation_id != agent.allocation_id
+        || client.session_id != agent.session_id
+        || client.pop_id != agent.pop_id
+        || client.expires_unix != agent.expires_unix
+        || client.max_bytes != agent.max_bytes
+    {
+        return Err(io::Error::new(
+            ErrorKind::PermissionDenied,
+            "relay ticket pair does not match",
+        ));
+    }
+    Ok(())
+}
+
+fn relay_pair(
+    mut client: TcpStream,
+    mut agent: TcpStream,
+    claims: &RelayTicketClaims,
+    config: &RelayConfig,
+    stats: &Arc<RelayStats>,
+) -> io::Result<()> {
+    struct ActiveSession<'a>(&'a RelayStats);
+    impl Drop for ActiveSession<'_> {
+        fn drop(&mut self) {
+            self.0.active_sessions.fetch_sub(1, Ordering::Relaxed);
+        }
+    }
+    let _active_session = ActiveSession(stats);
+    client.write_all(b"READY\n")?;
+    agent.write_all(b"READY\n")?;
+    let poll_timeout = config.idle_timeout.min(Duration::from_millis(500));
+    client.set_read_timeout(Some(poll_timeout))?;
+    client.set_write_timeout(Some(config.idle_timeout))?;
+    agent.set_read_timeout(Some(poll_timeout))?;
+    agent.set_write_timeout(Some(config.idle_timeout))?;
+
+    let client_reader = client.try_clone()?;
+    let agent_reader = agent.try_clone()?;
+    let stop = Arc::new(AtomicBool::new(false));
+    let used = Arc::new(AtomicU64::new(0));
+    let last_activity = Arc::new(Mutex::new(Instant::now()));
+    let max_bytes = claims.max_bytes;
+    let idle_timeout = config.idle_timeout;
+    let first_stop = Arc::clone(&stop);
+    let first_used = Arc::clone(&used);
+    let first_activity = Arc::clone(&last_activity);
+    let first = thread::spawn(move || {
+        copy_direction(
+            client_reader,
+            agent,
+            &first_stop,
+            &first_used,
+            &first_activity,
+            max_bytes,
+            idle_timeout,
+        )
+    });
+    let second = copy_direction(
+        agent_reader,
+        client,
+        &stop,
+        &used,
+        &last_activity,
+        max_bytes,
+        idle_timeout,
+    );
+    stop.store(true, Ordering::Release);
+    let first = first
+        .join()
+        .map_err(|_| io::Error::other("relay worker panicked"))?;
+    let transferred = used.load(Ordering::Relaxed);
+    stats
+        .relayed_bytes
+        .fetch_add(transferred, Ordering::Relaxed);
+    stats.completed_sessions.fetch_add(1, Ordering::Relaxed);
+    first.and(second)
+}
+
+fn copy_direction(
+    mut source: TcpStream,
+    mut destination: TcpStream,
+    stop: &AtomicBool,
+    used: &AtomicU64,
+    last_activity: &Mutex<Instant>,
+    max_bytes: u64,
+    idle_timeout: Duration,
+) -> io::Result<()> {
+    let mut buffer = vec![0_u8; COPY_BUFFER_BYTES].into_boxed_slice();
+    while !stop.load(Ordering::Acquire) {
+        match source.read(&mut buffer) {
+            Ok(0) => break,
+            Ok(count) => {
+                if let Ok(mut activity) = last_activity.lock() {
+                    *activity = Instant::now();
+                }
+                let allowed = reserve_bytes(used, count as u64, max_bytes);
+                if allowed > 0 {
+                    let allowed = usize::try_from(allowed)
+                        .map_err(|_| io::Error::other("relay quota conversion failed"))?;
+                    destination.write_all(&buffer[..allowed])?;
+                }
+                if allowed < count as u64 {
+                    break;
+                }
+            }
+            Err(error) if matches!(error.kind(), ErrorKind::WouldBlock | ErrorKind::TimedOut) => {
+                let idle = last_activity
+                    .lock()
+                    .map_or(true, |activity| activity.elapsed() >= idle_timeout);
+                if idle {
+                    break;
+                }
+            }
+            Err(error) => return Err(error),
+        }
+    }
+    stop.store(true, Ordering::Release);
+    let _ = source.shutdown(Shutdown::Both);
+    let _ = destination.shutdown(Shutdown::Both);
+    Ok(())
+}
+
+fn reserve_bytes(used: &AtomicU64, requested: u64, maximum: u64) -> u64 {
+    let mut current = used.load(Ordering::Acquire);
+    loop {
+        let allowed = requested.min(maximum.saturating_sub(current));
+        if allowed == 0 {
+            return 0;
+        }
+        match used.compare_exchange_weak(
+            current,
+            current + allowed,
+            Ordering::AcqRel,
+            Ordering::Acquire,
+        ) {
+            Ok(_) => return allowed,
+            Err(observed) => current = observed,
+        }
+    }
+}
+
+/// Runs the relay accept loop until `shutdown` becomes true.
+///
+/// # Errors
+///
+/// Returns an error if the listener cannot be configured or accepting fails.
+pub fn run_relay_listener(
+    listener: &TcpListener,
+    broker: &Arc<RelayBroker>,
+    shutdown: &AtomicBool,
+) -> io::Result<()> {
+    listener.set_nonblocking(true)?;
+    let handshakes = Arc::new(AtomicUsize::new(0));
+    while !shutdown.load(Ordering::Acquire) {
+        match listener.accept() {
+            Ok((mut stream, _)) => {
+                if stream.set_nonblocking(false).is_err() {
+                    broker
+                        .stats
+                        .rejected_connections
+                        .fetch_add(1, Ordering::Relaxed);
+                    eprintln!("relay connection rejected: socket_configuration");
+                    continue;
+                }
+                if handshakes.load(Ordering::Relaxed) >= broker.config.max_concurrent_handshakes {
+                    broker
+                        .stats
+                        .rejected_connections
+                        .fetch_add(1, Ordering::Relaxed);
+                    let _ = stream.write_all(b"ERROR busy\n");
+                    continue;
+                }
+                handshakes.fetch_add(1, Ordering::Relaxed);
+                let broker = Arc::clone(broker);
+                let handshakes = Arc::clone(&handshakes);
+                thread::spawn(move || {
+                    if let Err(error) = broker.handle_connection(stream) {
+                        broker
+                            .stats
+                            .rejected_connections
+                            .fetch_add(1, Ordering::Relaxed);
+                        eprintln!(
+                            "relay connection rejected: {} ({error})",
+                            rejection_category(&error)
+                        );
+                    }
+                    handshakes.fetch_sub(1, Ordering::Relaxed);
+                });
+            }
+            Err(error) if error.kind() == ErrorKind::WouldBlock => {
+                thread::sleep(Duration::from_millis(10));
+            }
+            Err(error) => return Err(error),
+        }
+    }
+    Ok(())
+}
+
+fn rejection_category(error: &io::Error) -> &'static str {
+    match error.kind() {
+        ErrorKind::PermissionDenied => "authentication",
+        ErrorKind::InvalidData | ErrorKind::InvalidInput => "invalid_handshake",
+        ErrorKind::TimedOut | ErrorKind::WouldBlock => "timeout_or_capacity",
+        ErrorKind::UnexpectedEof | ErrorKind::ConnectionAborted | ErrorKind::ConnectionReset => {
+            "peer_disconnected"
+        }
+        _ => "transport",
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use std::io::{BufRead as _, BufReader};
+
+    const SECRET: &[u8] = b"0123456789abcdef0123456789abcdef";
+
+    fn send_ticket(stream: &mut TcpStream, ticket: &str) {
+        writeln!(stream, "{}", serde_json::json!({ "ticket": ticket })).unwrap();
+    }
+
+    fn read_ready(stream: &TcpStream) {
+        let mut reader = BufReader::new(stream.try_clone().unwrap());
+        let mut line = String::new();
+        reader.read_line(&mut line).unwrap();
+        assert_eq!(line, "READY\n");
+    }
+
+    #[test]
+    fn authenticated_pair_relays_both_directions_and_enforces_one_use() {
+        let issuer = RelayTicketIssuer::new(SECRET, "test-pop").unwrap();
+        let now = unix_time_seconds();
+        let (client_ticket, agent_ticket) =
+            issuer.issue_pair("socket-session", now + 60, 1024).unwrap();
+        let broker = Arc::new(RelayBroker::new(
+            issuer,
+            RelayConfig {
+                idle_timeout: Duration::from_secs(5),
+                ..RelayConfig::default()
+            },
+        ));
+        let listener = TcpListener::bind("127.0.0.1:0").unwrap();
+        let address = listener.local_addr().unwrap();
+        let shutdown = Arc::new(AtomicBool::new(false));
+        let worker = {
+            let broker = Arc::clone(&broker);
+            let shutdown = Arc::clone(&shutdown);
+            thread::spawn(move || run_relay_listener(&listener, &broker, &shutdown).unwrap())
+        };
+
+        let mut client = TcpStream::connect(address).unwrap();
+        let mut agent = TcpStream::connect(address).unwrap();
+        thread::sleep(Duration::from_millis(50));
+        send_ticket(&mut client, &client_ticket);
+        send_ticket(&mut agent, &agent_ticket);
+        read_ready(&client);
+        read_ready(&agent);
+        client.write_all(b"client-to-agent").unwrap();
+        let mut received = [0_u8; 15];
+        agent.read_exact(&mut received).unwrap();
+        assert_eq!(&received, b"client-to-agent");
+        agent.write_all(b"agent-to-client").unwrap();
+        client.read_exact(&mut received).unwrap();
+        assert_eq!(&received, b"agent-to-client");
+
+        let mut replay = TcpStream::connect(address).unwrap();
+        send_ticket(&mut replay, &client_ticket);
+        replay
+            .set_read_timeout(Some(Duration::from_secs(1)))
+            .unwrap();
+        let mut error = [0_u8; 1];
+        assert_eq!(replay.read(&mut error).unwrap_or(0), 0);
+        drop(client);
+        drop(agent);
+        shutdown.store(true, Ordering::Release);
+        worker.join().unwrap();
+        assert!(broker.stats().snapshot().relayed_bytes >= 30);
+    }
+
+    #[test]
+    fn shared_quota_is_atomic_across_directions() {
+        let used = AtomicU64::new(0);
+        assert_eq!(reserve_bytes(&used, 7, 10), 7);
+        assert_eq!(reserve_bytes(&used, 7, 10), 3);
+        assert_eq!(reserve_bytes(&used, 1, 10), 0);
+    }
+
+    #[test]
+    fn active_session_reservation_is_exactly_bounded() {
+        let stats = RelayStats::default();
+        assert!(reserve_active_session(&stats, 1));
+        assert!(!reserve_active_session(&stats, 1));
+        stats.active_sessions.fetch_sub(1, Ordering::Relaxed);
+        assert!(reserve_active_session(&stats, 1));
+    }
+}
diff --git a/edge/edge-service/src/rendezvous.rs b/edge/edge-service/src/rendezvous.rs
new file mode 100644
index 0000000..adc3165
--- /dev/null
+++ b/edge/edge-service/src/rendezvous.rs
@@ -0,0 +1,137 @@
+use serde::{Deserialize, Serialize};
+use std::collections::HashMap;
+use std::sync::Mutex;
+
+#[derive(Clone, Debug, Deserialize, Eq, PartialEq, Serialize)]
+#[serde(deny_unknown_fields)]
+pub struct Presence {
+    pub device_id: String,
+    pub region: String,
+    pub gateway_id: String,
+    pub connection_id: String,
+    pub expires_unix: u64,
+}
+
+#[derive(Default)]
+pub struct PresenceRegistry {
+    entries: Mutex<HashMap<String, Presence>>,
+}
+
+impl PresenceRegistry {
+    /// Registers or refreshes one short-lived device route.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error if a field or expiry violates the directory boundary.
+    pub fn register(&self, presence: Presence, now: u64) -> Result<(), &'static str> {
+        validate_identifier(&presence.device_id, 128)?;
+        validate_identifier(&presence.region, 64)?;
+        validate_identifier(&presence.gateway_id, 128)?;
+        validate_identifier(&presence.connection_id, 128)?;
+        if presence.expires_unix <= now || presence.expires_unix > now.saturating_add(120) {
+            return Err("presence expiry must be within the next 120 seconds");
+        }
+        let mut entries = self
+            .entries
+            .lock()
+            .map_err(|_| "presence registry lock failed")?;
+        entries.retain(|_, entry| entry.expires_unix > now);
+        entries.insert(presence.device_id.clone(), presence);
+        Ok(())
+    }
+
+    /// Looks up an unexpired route.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error if the registry lock is poisoned.
+    pub fn lookup(&self, device_id: &str, now: u64) -> Result<Option<Presence>, &'static str> {
+        validate_identifier(device_id, 128)?;
+        let mut entries = self
+            .entries
+            .lock()
+            .map_err(|_| "presence registry lock failed")?;
+        entries.retain(|_, entry| entry.expires_unix > now);
+        Ok(entries.get(device_id).cloned())
+    }
+
+    /// Removes a route only when the caller supplies its current connection ID.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error if the registry lock is poisoned.
+    pub fn unregister(
+        &self,
+        device_id: &str,
+        connection_id: &str,
+        now: u64,
+    ) -> Result<bool, &'static str> {
+        validate_identifier(device_id, 128)?;
+        validate_identifier(connection_id, 128)?;
+        let mut entries = self
+            .entries
+            .lock()
+            .map_err(|_| "presence registry lock failed")?;
+        entries.retain(|_, entry| entry.expires_unix > now);
+        if entries
+            .get(device_id)
+            .is_some_and(|entry| entry.connection_id == connection_id)
+        {
+            entries.remove(device_id);
+            return Ok(true);
+        }
+        Ok(false)
+    }
+
+    #[must_use]
+    pub fn len(&self, now: u64) -> usize {
+        self.entries.lock().map_or(0, |mut entries| {
+            entries.retain(|_, entry| entry.expires_unix > now);
+            entries.len()
+        })
+    }
+}
+
+fn validate_identifier(value: &str, max_len: usize) -> Result<(), &'static str> {
+    if value.is_empty()
+        || value.len() > max_len
+        || !value
+            .bytes()
+            .all(|byte| byte.is_ascii_alphanumeric() || matches!(byte, b'-' | b'_' | b'.'))
+    {
+        return Err("identifier contains unsupported characters");
+    }
+    Ok(())
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn presence(expires_unix: u64) -> Presence {
+        Presence {
+            device_id: "device-1".to_owned(),
+            region: "cn-east".to_owned(),
+            gateway_id: "gateway-1".to_owned(),
+            connection_id: "connection-1".to_owned(),
+            expires_unix,
+        }
+    }
+
+    #[test]
+    fn presence_expires_and_unregister_is_connection_bound() {
+        let registry = PresenceRegistry::default();
+        registry.register(presence(110), 100).unwrap();
+        assert!(registry.lookup("device-1", 109).unwrap().is_some());
+        assert!(!registry.unregister("device-1", "stale", 109).unwrap());
+        assert!(
+            registry
+                .unregister("device-1", "connection-1", 109)
+                .unwrap()
+        );
+        assert!(registry.lookup("device-1", 109).unwrap().is_none());
+
+        registry.register(presence(120), 110).unwrap();
+        assert!(registry.lookup("device-1", 120).unwrap().is_none());
+    }
+}
diff --git a/edge/edge-service/src/signaling.rs b/edge/edge-service/src/signaling.rs
new file mode 100644
index 0000000..45d021a
--- /dev/null
+++ b/edge/edge-service/src/signaling.rs
@@ -0,0 +1,818 @@
+use base64::{Engine as _, engine::general_purpose::STANDARD_NO_PAD};
+use ed25519_dalek::{Signature, Verifier as _, VerifyingKey};
+use remotedesk_protocol::{
+    AgentSignalAction, AgentSignalProofV1, EdgeSessionIntentV1, EdgeSessionType,
+    SIGNAL_NONCE_LENGTH,
+};
+use serde::{Deserialize, Serialize};
+use sha2::{Digest as _, Sha256};
+use std::collections::{HashMap, VecDeque};
+use std::sync::Mutex;
+
+const DEVICE_ID_DOMAIN: &[u8] = b"remotedesk-edge-device-id-v1\0";
+const MAX_PENDING_SIGNALS: usize = 1024;
+const MAX_PENDING_PER_DEVICE: usize = 32;
+const MAX_PENDING_PER_CLIENT_DEVICE: usize = 8;
+const DELIVERY_LEASE_SECONDS: u64 = 15;
+const COMPLETED_RETENTION_SECONDS: u64 = 120;
+const PROOF_CLOCK_SKEW_SECONDS: u64 = 30;
+
+#[derive(Clone, Debug, Deserialize, Eq, PartialEq, Serialize)]
+#[serde(deny_unknown_fields)]
+pub struct SignedSessionIntent {
+    pub device_id: String,
+    pub request_id: String,
+    pub session_id: String,
+    pub session_type: String,
+    pub target_user: String,
+    pub requested_permissions: Vec<String>,
+    pub client_public_key: String,
+    pub nonce: String,
+    pub issued_unix: u64,
+    pub expires_unix: u64,
+    pub signature: String,
+}
+
+impl SignedSessionIntent {
+    /// Validates the wire envelope and verifies its paired-Client signature.
+    ///
+    /// # Errors
+    ///
+    /// Returns a stable category for malformed or forged requests.
+    pub fn verify(&self, now: u64) -> Result<EdgeSessionIntentV1, &'static str> {
+        let nonce = decode_fixed::<SIGNAL_NONCE_LENGTH>(&self.nonce)
+            .map_err(|()| "invalid_session_intent")?;
+        let model = EdgeSessionIntentV1 {
+            device_id: self.device_id.clone(),
+            request_id: self.request_id.clone(),
+            session_id: self.session_id.clone(),
+            session_type: EdgeSessionType::parse(&self.session_type)
+                .map_err(|_| "invalid_session_intent")?,
+            target_user: self.target_user.clone(),
+            requested_permissions: self.requested_permissions.clone(),
+            client_public_key: self.client_public_key.clone(),
+            nonce,
+            issued_unix: self.issued_unix,
+            expires_unix: self.expires_unix,
+        };
+        let payload = model
+            .stable_signing_input()
+            .map_err(|_| "invalid_session_intent")?;
+        if model.issued_unix > now.saturating_add(PROOF_CLOCK_SKEW_SECONDS)
+            || model.expires_unix <= now
+        {
+            return Err("expired_session_intent");
+        }
+        verify_signature(&self.client_public_key, &self.signature, &payload)
+            .map_err(|()| "invalid_client_signature")?;
+        Ok(model)
+    }
+}
+
+#[derive(Clone, Debug, Deserialize, Serialize)]
+#[serde(deny_unknown_fields)]
+pub struct AgentPollProof {
+    pub device_id: String,
+    pub device_public_key: String,
+    pub connection_id: String,
+    pub nonce: String,
+    pub issued_unix: u64,
+    pub signature: String,
+}
+
+impl AgentPollProof {
+    /// Verifies freshness, device derivation, and the Agent device-key signature.
+    ///
+    /// # Errors
+    ///
+    /// Returns a stable category for malformed, stale, replayable, or forged proof data.
+    pub fn verify(&self, now: u64) -> Result<AgentSignalProofV1, &'static str> {
+        self.proof(AgentSignalAction::Poll, None, None, now)
+    }
+
+    fn proof(
+        &self,
+        action: AgentSignalAction,
+        request_id: Option<String>,
+        result_code: Option<String>,
+        now: u64,
+    ) -> Result<AgentSignalProofV1, &'static str> {
+        let proof = AgentSignalProofV1 {
+            device_id: self.device_id.clone(),
+            device_public_key: self.device_public_key.clone(),
+            connection_id: self.connection_id.clone(),
+            action,
+            request_id,
+            result_code,
+            nonce: decode_fixed::<SIGNAL_NONCE_LENGTH>(&self.nonce)
+                .map_err(|()| "invalid_agent_proof")?,
+            issued_unix: self.issued_unix,
+        };
+        let payload = proof
+            .stable_signing_input()
+            .map_err(|_| "invalid_agent_proof")?;
+        if proof.issued_unix.abs_diff(now) > PROOF_CLOCK_SKEW_SECONDS {
+            return Err("stale_agent_proof");
+        }
+        if device_id_from_public_key(&self.device_public_key)? != self.device_id {
+            return Err("device_identity_mismatch");
+        }
+        verify_signature(&self.device_public_key, &self.signature, &payload)
+            .map_err(|()| "invalid_agent_signature")?;
+        Ok(proof)
+    }
+}
+
+#[derive(Clone, Debug, Deserialize, Serialize)]
+#[serde(deny_unknown_fields)]
+pub struct AgentSignalAck {
+    pub device_id: String,
+    pub device_public_key: String,
+    pub connection_id: String,
+    pub request_id: String,
+    pub accepted: bool,
+    pub result_code: String,
+    pub nonce: String,
+    pub issued_unix: u64,
+    pub signature: String,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+#[serde(deny_unknown_fields)]
+pub struct ClientSignalStatusRequest {
+    pub request_id: String,
+    pub client_public_key: String,
+    pub signature: String,
+}
+
+impl AgentSignalAck {
+    /// Verifies an Agent authorization result and its device-key signature.
+    ///
+    /// # Errors
+    ///
+    /// Returns a stable category for malformed, stale, or forged acknowledgement data.
+    pub fn verify(&self, now: u64) -> Result<AgentSignalProofV1, &'static str> {
+        AgentPollProof {
+            device_id: self.device_id.clone(),
+            device_public_key: self.device_public_key.clone(),
+            connection_id: self.connection_id.clone(),
+            nonce: self.nonce.clone(),
+            issued_unix: self.issued_unix,
+            signature: self.signature.clone(),
+        }
+        .proof(
+            if self.accepted {
+                AgentSignalAction::Accept
+            } else {
+                AgentSignalAction::Reject
+            },
+            Some(self.request_id.clone()),
+            Some(self.result_code.clone()),
+            now,
+        )
+    }
+}
+
+#[derive(Clone, Debug, Eq, PartialEq, Serialize)]
+pub struct SignalStatus {
+    pub request_id: String,
+    pub device_id: String,
+    pub session_id: String,
+    pub state: String,
+    pub accepted: Option<bool>,
+    pub result_code: Option<String>,
+    pub expires_unix: u64,
+    pub completed_unix: Option<u64>,
+}
+
+#[derive(Clone, Debug, Eq, PartialEq, Serialize)]
+pub struct RelayAccess {
+    pub pop_id: String,
+    pub relay_address: String,
+    pub expires_unix: u64,
+    pub max_bytes: u64,
+    pub ticket: String,
+}
+
+#[derive(Clone, Debug)]
+pub struct RelayTicketPair {
+    pub client: RelayAccess,
+    pub agent: RelayAccess,
+}
+
+#[derive(Clone, Debug, Eq, PartialEq, Serialize)]
+pub struct ClientSignalStatus {
+    #[serde(flatten)]
+    pub status: SignalStatus,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub relay: Option<RelayAccess>,
+}
+
+#[derive(Clone, Debug, Eq, PartialEq, Serialize)]
+pub struct AgentSignalCompletion {
+    #[serde(flatten)]
+    pub status: SignalStatus,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub relay: Option<RelayAccess>,
+}
+
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct AcceptedSignalSession {
+    pub request_id: String,
+    pub session_id: String,
+    pub client_public_key: String,
+    pub agent_public_key: String,
+    pub expires_unix: u64,
+}
+
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub enum EnqueueResult {
+    Created,
+    Existing,
+}
+
+#[derive(Default)]
+pub struct SignalRegistry {
+    inner: Mutex<SignalState>,
+}
+
+#[derive(Default)]
+struct SignalState {
+    requests: HashMap<String, StoredSignal>,
+    order: VecDeque<String>,
+    used_agent_nonces: HashMap<[u8; SIGNAL_NONCE_LENGTH], u64>,
+}
+
+#[derive(Clone)]
+struct StoredSignal {
+    intent: SignedSessionIntent,
+    delivery: DeliveryState,
+}
+
+#[derive(Clone)]
+enum DeliveryState {
+    Pending,
+    Leased {
+        connection_id: String,
+        lease_expires_unix: u64,
+    },
+    Completed {
+        accepted: bool,
+        result_code: String,
+        completed_unix: u64,
+        relay: Option<Box<RelayTicketPair>>,
+        agent_public_key: Option<String>,
+    },
+}
+
+impl SignalRegistry {
+    /// Adds a verified request or recognizes an exact idempotent retry.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error for invalid signatures, conflicting IDs, or exhausted capacity.
+    pub fn enqueue(
+        &self,
+        intent: SignedSessionIntent,
+        now: u64,
+    ) -> Result<EnqueueResult, &'static str> {
+        intent.verify(now)?;
+        let mut state = self
+            .inner
+            .lock()
+            .map_err(|_| "signal_registry_unavailable")?;
+        prune(&mut state, now);
+        if let Some(existing) = state.requests.get(&intent.request_id) {
+            return if existing.intent == intent {
+                Ok(EnqueueResult::Existing)
+            } else {
+                Err("request_id_conflict")
+            };
+        }
+        let pending_count = state
+            .requests
+            .values()
+            .filter(|entry| !matches!(entry.delivery, DeliveryState::Completed { .. }))
+            .count();
+        if pending_count >= MAX_PENDING_SIGNALS
+            || state
+                .requests
+                .values()
+                .filter(|entry| {
+                    entry.intent.device_id == intent.device_id
+                        && !matches!(entry.delivery, DeliveryState::Completed { .. })
+                })
+                .count()
+                >= MAX_PENDING_PER_DEVICE
+            || state
+                .requests
+                .values()
+                .filter(|entry| {
+                    entry.intent.device_id == intent.device_id
+                        && entry.intent.client_public_key == intent.client_public_key
+                        && !matches!(entry.delivery, DeliveryState::Completed { .. })
+                })
+                .count()
+                >= MAX_PENDING_PER_CLIENT_DEVICE
+        {
+            return Err("signal_capacity_exceeded");
+        }
+        state.order.push_back(intent.request_id.clone());
+        state.requests.insert(
+            intent.request_id.clone(),
+            StoredSignal {
+                intent,
+                delivery: DeliveryState::Pending,
+            },
+        );
+        Ok(EnqueueResult::Created)
+    }
+
+    /// Consumes a short-lived Agent proof nonce once.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error for replay or unavailable registry state.
+    pub fn consume_agent_nonce(
+        &self,
+        nonce: [u8; SIGNAL_NONCE_LENGTH],
+        now: u64,
+    ) -> Result<(), &'static str> {
+        let mut state = self
+            .inner
+            .lock()
+            .map_err(|_| "signal_registry_unavailable")?;
+        state.used_agent_nonces.retain(|_, expiry| *expiry > now);
+        if state.used_agent_nonces.contains_key(&nonce) {
+            return Err("agent_proof_replayed");
+        }
+        state
+            .used_agent_nonces
+            .insert(nonce, now.saturating_add(PROOF_CLOCK_SKEW_SECONDS * 2));
+        Ok(())
+    }
+
+    /// Leases the next request for one current Agent connection.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error when registry state is unavailable.
+    pub fn poll(
+        &self,
+        device_id: &str,
+        connection_id: &str,
+        now: u64,
+    ) -> Result<Option<SignedSessionIntent>, &'static str> {
+        let mut state = self
+            .inner
+            .lock()
+            .map_err(|_| "signal_registry_unavailable")?;
+        prune(&mut state, now);
+        let request_id = state.order.iter().find_map(|request_id| {
+            let entry = state.requests.get(request_id)?;
+            if entry.intent.device_id != device_id {
+                return None;
+            }
+            match &entry.delivery {
+                DeliveryState::Pending => Some(request_id.clone()),
+                DeliveryState::Leased {
+                    connection_id: owner,
+                    lease_expires_unix,
+                } if owner == connection_id || *lease_expires_unix <= now => {
+                    Some(request_id.clone())
+                }
+                DeliveryState::Leased { .. } | DeliveryState::Completed { .. } => None,
+            }
+        });
+        let Some(request_id) = request_id else {
+            return Ok(None);
+        };
+        let entry = state
+            .requests
+            .get_mut(&request_id)
+            .ok_or("signal_registry_unavailable")?;
+        entry.delivery = DeliveryState::Leased {
+            connection_id: connection_id.to_owned(),
+            lease_expires_unix: now.saturating_add(DELIVERY_LEASE_SECONDS),
+        };
+        Ok(Some(entry.intent.clone()))
+    }
+
+    /// Completes a request only for the connection that holds its delivery lease.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error for missing, conflicting, or cross-connection results.
+    pub fn acknowledge(
+        &self,
+        ack: &AgentSignalAck,
+        relay: Option<RelayTicketPair>,
+        now: u64,
+    ) -> Result<AgentSignalCompletion, &'static str> {
+        let mut state = self
+            .inner
+            .lock()
+            .map_err(|_| "signal_registry_unavailable")?;
+        prune(&mut state, now);
+        let entry = state
+            .requests
+            .get_mut(&ack.request_id)
+            .ok_or("signal_not_found")?;
+        if entry.intent.device_id != ack.device_id {
+            return Err("signal_device_mismatch");
+        }
+        match &entry.delivery {
+            DeliveryState::Leased { connection_id, .. } if connection_id == &ack.connection_id => {}
+            DeliveryState::Completed {
+                accepted,
+                result_code,
+                ..
+            } if *accepted == ack.accepted && result_code == &ack.result_code => {
+                return Ok(agent_completion(entry));
+            }
+            DeliveryState::Pending | DeliveryState::Leased { .. } => {
+                return Err("signal_connection_mismatch");
+            }
+            DeliveryState::Completed { .. } => return Err("signal_result_conflict"),
+        }
+        entry.delivery = DeliveryState::Completed {
+            accepted: ack.accepted,
+            result_code: ack.result_code.clone(),
+            completed_unix: now,
+            relay: relay.map(Box::new),
+            agent_public_key: ack.accepted.then(|| ack.device_public_key.clone()),
+        };
+        Ok(agent_completion(entry))
+    }
+
+    /// Reads one non-secret delivery result.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error when registry state is unavailable.
+    pub fn status(&self, request_id: &str, now: u64) -> Result<Option<SignalStatus>, &'static str> {
+        let mut state = self
+            .inner
+            .lock()
+            .map_err(|_| "signal_registry_unavailable")?;
+        prune(&mut state, now);
+        Ok(state.requests.get(request_id).map(status))
+    }
+
+    /// Reads status only when the caller presents the original Client signature.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error for missing requests, mismatched Client identity, or unavailable state.
+    pub fn client_status(
+        &self,
+        request: &ClientSignalStatusRequest,
+        now: u64,
+    ) -> Result<ClientSignalStatus, &'static str> {
+        let mut state = self
+            .inner
+            .lock()
+            .map_err(|_| "signal_registry_unavailable")?;
+        prune(&mut state, now);
+        let entry = state
+            .requests
+            .get(&request.request_id)
+            .ok_or("signal_not_found")?;
+        if !constant_time_equal(
+            entry.intent.client_public_key.as_bytes(),
+            request.client_public_key.as_bytes(),
+        ) || !constant_time_equal(
+            entry.intent.signature.as_bytes(),
+            request.signature.as_bytes(),
+        ) {
+            return Err("client_status_unauthorized");
+        }
+        let relay = match &entry.delivery {
+            DeliveryState::Completed { relay, .. } => {
+                relay.as_ref().map(|assignment| assignment.client.clone())
+            }
+            _ => None,
+        };
+        Ok(ClientSignalStatus {
+            status: status(entry),
+            relay,
+        })
+    }
+
+    /// Returns endpoint identities only for an accepted, unexpired session.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error when registry state is unavailable or the accepted binding is malformed.
+    pub fn accepted_session(
+        &self,
+        request_id: &str,
+        session_id: &str,
+        now: u64,
+    ) -> Result<Option<AcceptedSignalSession>, &'static str> {
+        let mut state = self
+            .inner
+            .lock()
+            .map_err(|_| "signal_registry_unavailable")?;
+        prune(&mut state, now);
+        let Some(entry) = state.requests.get(request_id) else {
+            return Ok(None);
+        };
+        if entry.intent.session_id != session_id {
+            return Err("negotiation_session_mismatch");
+        }
+        let DeliveryState::Completed {
+            accepted: true,
+            agent_public_key: Some(agent_public_key),
+            ..
+        } = &entry.delivery
+        else {
+            return Ok(None);
+        };
+        Ok(Some(AcceptedSignalSession {
+            request_id: entry.intent.request_id.clone(),
+            session_id: entry.intent.session_id.clone(),
+            client_public_key: entry.intent.client_public_key.clone(),
+            agent_public_key: agent_public_key.clone(),
+            expires_unix: entry.intent.expires_unix,
+        }))
+    }
+
+    #[must_use]
+    pub fn pending_count(&self, now: u64) -> usize {
+        self.inner.lock().map_or(0, |mut state| {
+            prune(&mut state, now);
+            state
+                .requests
+                .values()
+                .filter(|entry| !matches!(entry.delivery, DeliveryState::Completed { .. }))
+                .count()
+        })
+    }
+}
+
+fn status(entry: &StoredSignal) -> SignalStatus {
+    let (state, accepted, result_code, completed_unix) = match &entry.delivery {
+        DeliveryState::Pending => ("pending", None, None, None),
+        DeliveryState::Leased { .. } => ("delivered", None, None, None),
+        DeliveryState::Completed {
+            accepted,
+            result_code,
+            completed_unix,
+            ..
+        } => (
+            "completed",
+            Some(*accepted),
+            Some(result_code.clone()),
+            Some(*completed_unix),
+        ),
+    };
+    SignalStatus {
+        request_id: entry.intent.request_id.clone(),
+        device_id: entry.intent.device_id.clone(),
+        session_id: entry.intent.session_id.clone(),
+        state: state.into(),
+        accepted,
+        result_code,
+        expires_unix: entry.intent.expires_unix,
+        completed_unix,
+    }
+}
+
+fn agent_completion(entry: &StoredSignal) -> AgentSignalCompletion {
+    let relay = match &entry.delivery {
+        DeliveryState::Completed { relay, .. } => {
+            relay.as_ref().map(|assignment| assignment.agent.clone())
+        }
+        _ => None,
+    };
+    AgentSignalCompletion {
+        status: status(entry),
+        relay,
+    }
+}
+
+fn prune(state: &mut SignalState, now: u64) {
+    state.requests.retain(|_, entry| {
+        if entry.intent.expires_unix <= now {
+            return false;
+        }
+        !matches!(
+            entry.delivery,
+            DeliveryState::Completed { completed_unix, .. }
+                if completed_unix.saturating_add(COMPLETED_RETENTION_SECONDS) <= now
+        )
+    });
+    state
+        .order
+        .retain(|request_id| state.requests.contains_key(request_id));
+    state.used_agent_nonces.retain(|_, expiry| *expiry > now);
+}
+
+fn verify_signature(public_key: &str, signature: &str, payload: &[u8]) -> Result<(), ()> {
+    let public = decode_fixed::<32>(public_key)?;
+    let signature = decode_fixed::<64>(signature)?;
+    let key = VerifyingKey::from_bytes(&public).map_err(|_| ())?;
+    key.verify(payload, &Signature::from_bytes(&signature))
+        .map_err(|_| ())
+}
+
+fn constant_time_equal(left: &[u8], right: &[u8]) -> bool {
+    let mut different = left.len() ^ right.len();
+    let length = left.len().max(right.len());
+    for index in 0..length {
+        let left_byte = left.get(index).copied().unwrap_or(0);
+        let right_byte = right.get(index).copied().unwrap_or(0);
+        different |= usize::from(left_byte ^ right_byte);
+    }
+    different == 0
+}
+
+fn device_id_from_public_key(public_key: &str) -> Result<String, &'static str> {
+    let public = decode_fixed::<32>(public_key).map_err(|()| "invalid_device_public_key")?;
+    let mut digest = Sha256::new();
+    digest.update(DEVICE_ID_DOMAIN);
+    digest.update(public);
+    Ok(format_hex(&digest.finalize()))
+}
+
+fn decode_fixed<const LENGTH: usize>(value: &str) -> Result<[u8; LENGTH], ()> {
+    let decoded = STANDARD_NO_PAD.decode(value).map_err(|_| ())?;
+    if STANDARD_NO_PAD.encode(&decoded) != value {
+        return Err(());
+    }
+    decoded.try_into().map_err(|_| ())
+}
+
+fn format_hex(bytes: &[u8]) -> String {
+    use std::fmt::Write as _;
+    let mut result = String::with_capacity(bytes.len() * 2);
+    for byte in bytes {
+        write!(result, "{byte:02x}").expect("writing to a String cannot fail");
+    }
+    result
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use ed25519_dalek::{Signer as _, SigningKey};
+
+    fn signed_intent(signing: &SigningKey, now: u64) -> SignedSessionIntent {
+        let public_key = STANDARD_NO_PAD.encode(signing.verifying_key().as_bytes());
+        let model = EdgeSessionIntentV1 {
+            device_id: "ab".repeat(32),
+            request_id: "request-1".into(),
+            session_id: "session-1".into(),
+            session_type: EdgeSessionType::Terminal,
+            target_user: "alice".into(),
+            requested_permissions: vec!["terminal".into()],
+            client_public_key: public_key.clone(),
+            nonce: [5; SIGNAL_NONCE_LENGTH],
+            issued_unix: now,
+            expires_unix: now + 60,
+        };
+        let signature = signing.sign(&model.stable_signing_input().unwrap());
+        SignedSessionIntent {
+            device_id: model.device_id,
+            request_id: model.request_id,
+            session_id: model.session_id,
+            session_type: model.session_type.as_str().into(),
+            target_user: model.target_user,
+            requested_permissions: model.requested_permissions,
+            client_public_key: public_key,
+            nonce: STANDARD_NO_PAD.encode(model.nonce),
+            issued_unix: model.issued_unix,
+            expires_unix: model.expires_unix,
+            signature: STANDARD_NO_PAD.encode(signature.to_bytes()),
+        }
+    }
+
+    #[test]
+    fn signed_intent_is_verified_and_tampering_fails() {
+        let signing = SigningKey::from_bytes(&[7; 32]);
+        let intent = signed_intent(&signing, 100);
+        assert!(intent.verify(100).is_ok());
+        let mut tampered = intent;
+        tampered.target_user = "bob".into();
+        assert_eq!(tampered.verify(100), Err("invalid_client_signature"));
+    }
+
+    #[test]
+    fn registry_is_idempotent_leased_and_connection_bound() {
+        let registry = SignalRegistry::default();
+        let intent = signed_intent(&SigningKey::from_bytes(&[7; 32]), 100);
+        assert_eq!(
+            registry.enqueue(intent.clone(), 100).unwrap(),
+            EnqueueResult::Created
+        );
+        assert_eq!(
+            registry.enqueue(intent.clone(), 100).unwrap(),
+            EnqueueResult::Existing
+        );
+        assert_eq!(
+            registry
+                .poll(&intent.device_id, "connection-1", 100)
+                .unwrap(),
+            Some(intent.clone())
+        );
+        let mut ack = AgentSignalAck {
+            device_id: intent.device_id.clone(),
+            device_public_key: "A".repeat(43),
+            connection_id: "stale".into(),
+            request_id: intent.request_id.clone(),
+            accepted: true,
+            result_code: "authorized".into(),
+            nonce: STANDARD_NO_PAD.encode([1; SIGNAL_NONCE_LENGTH]),
+            issued_unix: 100,
+            signature: "ignored".into(),
+        };
+        assert_eq!(
+            registry.acknowledge(&ack, None, 100),
+            Err("signal_connection_mismatch")
+        );
+        ack.connection_id = "connection-1".into();
+        let relay = RelayTicketPair {
+            client: RelayAccess {
+                pop_id: "pop-1".into(),
+                relay_address: "relay.example.test:443".into(),
+                expires_unix: 160,
+                max_bytes: 1024,
+                ticket: "client-ticket".into(),
+            },
+            agent: RelayAccess {
+                pop_id: "pop-1".into(),
+                relay_address: "relay.example.test:443".into(),
+                expires_unix: 160,
+                max_bytes: 1024,
+                ticket: "agent-ticket".into(),
+            },
+        };
+        let completed = registry
+            .acknowledge(&ack, Some(relay.clone()), 100)
+            .unwrap();
+        assert_eq!(completed.status.state, "completed");
+        assert_eq!(completed.status.accepted, Some(true));
+        assert_eq!(completed.relay, Some(relay.agent.clone()));
+        assert_eq!(
+            registry.enqueue(intent.clone(), 100).unwrap(),
+            EnqueueResult::Existing
+        );
+        assert_eq!(
+            registry.status(&intent.request_id, 100).unwrap().unwrap(),
+            completed.status
+        );
+        assert_eq!(
+            registry
+                .client_status(
+                    &ClientSignalStatusRequest {
+                        request_id: intent.request_id.clone(),
+                        client_public_key: intent.client_public_key.clone(),
+                        signature: intent.signature.clone(),
+                    },
+                    100,
+                )
+                .unwrap(),
+            ClientSignalStatus {
+                status: completed.status,
+                relay: Some(relay.client),
+            }
+        );
+        assert_eq!(
+            registry.client_status(
+                &ClientSignalStatusRequest {
+                    request_id: intent.request_id.clone(),
+                    client_public_key: intent.client_public_key.clone(),
+                    signature: "forged".into(),
+                },
+                100,
+            ),
+            Err("client_status_unauthorized")
+        );
+        assert!(
+            registry
+                .poll(&intent.device_id, "connection-1", 100)
+                .unwrap()
+                .is_none()
+        );
+    }
+
+    #[test]
+    fn agent_nonce_is_one_use() {
+        let registry = SignalRegistry::default();
+        assert!(
+            registry
+                .consume_agent_nonce([9; SIGNAL_NONCE_LENGTH], 100)
+                .is_ok()
+        );
+        assert_eq!(
+            registry.consume_agent_nonce([9; SIGNAL_NONCE_LENGTH], 100),
+            Err("agent_proof_replayed")
+        );
+        assert!(
+            registry
+                .consume_agent_nonce([9; SIGNAL_NONCE_LENGTH], 161)
+                .is_ok()
+        );
+    }
+}
diff --git a/packaging/build-all.ps1 b/packaging/build-all.ps1
new file mode 100644
index 0000000..07821d7
--- /dev/null
+++ b/packaging/build-all.ps1
@@ -0,0 +1,97 @@
+[CmdletBinding()]
+param(
+    [switch]$SkipClient,
+    [switch]$SkipHost,
+    [switch]$SkipHysteria2,
+    [switch]$CleanArtifacts,
+    [ValidateSet('zh-cn', 'en-us')]
+    [string]$Culture = 'zh-cn'
+)
+
+$ErrorActionPreference = 'Stop'
+$repoRoot = (Resolve-Path (Join-Path $PSScriptRoot '..')).Path
+$artifacts = Join-Path $repoRoot 'artifacts'
+$windowsScript = Join-Path $repoRoot 'packaging/windows/package-installer.ps1'
+$hostScript = Join-Path $repoRoot 'packaging/windows-host/package-host.ps1'
+$portableHostScript = Join-Path $repoRoot 'packaging/windows-host/package-portable-host.ps1'
+$hysteriaScript = Join-Path $repoRoot 'packaging/windows-host/build-hysteria2-agent.ps1'
+$previousRustFlags = $env:RUSTFLAGS
+$staticRustFlags = '-C target-feature=+crt-static'
+
+function Invoke-ChildBuild {
+    param(
+        [Parameter(Mandatory)][string]$Name,
+        [Parameter(Mandatory)][string]$Script,
+        [string[]]$Arguments = @()
+    )
+    if (-not (Test-Path -LiteralPath $Script -PathType Leaf)) {
+        throw "$Name script is missing: $Script"
+    }
+    Write-Host "==> $Name" -ForegroundColor Cyan
+    & powershell.exe -NoProfile -ExecutionPolicy Bypass -File $Script @Arguments
+    if ($LASTEXITCODE -ne 0) {
+        throw "$Name failed with exit code $LASTEXITCODE"
+    }
+}
+
+try {
+    if ($CleanArtifacts -and (Test-Path -LiteralPath $artifacts)) {
+        Write-Host "Cleaning artifacts: $artifacts" -ForegroundColor Yellow
+        Get-ChildItem -LiteralPath $artifacts -Force | Remove-Item -Recurse -Force
+    }
+    New-Item -ItemType Directory -Force -Path $artifacts | Out-Null
+    $env:RUSTFLAGS = $staticRustFlags
+
+    if (-not $SkipClient) {
+        Invoke-ChildBuild -Name 'Windows Client installer' -Script $windowsScript -Arguments @('-Culture', $Culture)
+    }
+
+    if (-not $SkipHost) {
+        # Windows Agent is built with a static MSVC CRT and does not require VCRUNTIME140.dll.
+        $env:RUSTFLAGS = $staticRustFlags
+        Invoke-ChildBuild -Name 'Windows Host installer' -Script $hostScript -Arguments @('-Culture', $Culture)
+        Invoke-ChildBuild -Name 'Windows Host portable package' -Script $portableHostScript -Arguments @('-Culture', $Culture)
+    }
+
+    # Hysteria2 is an independent UDP/QUIC transport package and must not be
+    # skipped merely because the Windows Host MSI is disabled.
+    if (-not $SkipHysteria2) {
+        Invoke-ChildBuild -Name 'Hysteria2 transport' -Script $hysteriaScript
+    }
+} finally {
+    if ($null -eq $previousRustFlags) {
+        Remove-Item Env:RUSTFLAGS -ErrorAction SilentlyContinue
+    } else {
+        $env:RUSTFLAGS = $previousRustFlags
+    }
+}
+
+Write-Host '==> Build outputs' -ForegroundColor Cyan
+$artifactRootFull = ([IO.Path]::GetFullPath($artifacts)).TrimEnd('\') + '\'
+$outputFiles = @()
+$outputFiles += @(Get-ChildItem -LiteralPath $artifacts -File -Include '*.msi', '*.exe', '*.zip' -ErrorAction SilentlyContinue)
+$portableHost = Join-Path $artifacts 'RemoteDesk-Host-portable'
+if (Test-Path -LiteralPath $portableHost) {
+    $outputFiles += @(Get-ChildItem -LiteralPath $portableHost -File -Include '*.exe', 'manifest.json' -ErrorAction SilentlyContinue)
+}
+$hysteriaOutput = Join-Path $artifacts 'hysteria2'
+if (Test-Path -LiteralPath $hysteriaOutput) {
+    $outputFiles += @(Get-ChildItem -LiteralPath $hysteriaOutput -File -ErrorAction SilentlyContinue)
+}
+
+$outputFiles |
+    Sort-Object FullName -Unique |
+    ForEach-Object {
+        $hash = (Get-FileHash -LiteralPath $_.FullName -Algorithm SHA256).Hash.ToLowerInvariant()
+        # Windows PowerShell 5.1/.NET Framework has no Path.GetRelativePath.
+        $fullPath = [IO.Path]::GetFullPath($_.FullName)
+        if ($fullPath.StartsWith($artifactRootFull, [StringComparison]::OrdinalIgnoreCase)) {
+            $relative = $fullPath.Substring($artifactRootFull.Length)
+        } else {
+            $relative = $_.Name
+        }
+        $relative = $relative.Replace('\', '/')
+        '{0}  {1}' -f $hash, $relative
+    } | Set-Content -LiteralPath (Join-Path $artifacts 'BUILD-SHA256SUMS.txt') -Encoding ascii
+
+Write-Host "SHA256 manifest: $(Join-Path $artifacts 'BUILD-SHA256SUMS.txt')" -ForegroundColor Green
diff --git a/packaging/edge/README.md b/packaging/edge/README.md
new file mode 100644
index 0000000..72f92e3
--- /dev/null
+++ b/packaging/edge/README.md
@@ -0,0 +1,31 @@
+# RemoteDesk Edge Service
+
+This package contains the independent RemoteDesk Edge control plane and authenticated TCP byte relay. It does not contain coturn, terminate RDP TLS/NLA, decrypt WebRTC media, or create endpoint sessions.
+
+## Configure
+
+1. Generate three different random values of at least 32 bytes for `REMOTEDESK_EDGE_API_TOKEN`, `REMOTEDESK_EDGE_PRESENCE_TOKEN`, and `REMOTEDESK_EDGE_TICKET_SECRET`. Agents receive only the Presence token; it cannot query devices or allocate relay/TURN credentials.
+2. Set the public relay address, POP ID, and region in `/etc/remotedesk-edge/edge.env`.
+3. Publish `127.0.0.1:7080` through an HTTPS reverse proxy. The process refuses a public HTTP API bind.
+4. Publish `127.0.0.1:7444` through a TCP/TLS load balancer that preserves connection affinity.
+5. Optionally copy `turn-pops.json.example`, reference one independent environment secret per coturn POP, and append `--turn-config /etc/remotedesk-edge/turn-pops.json` to the systemd command.
+6. Run `systemctl enable --now remotedesk-edge.service`.
+
+The package also includes an optional coturn baseline at `/etc/remotedesk-edge/coturn.conf.example`, a secret-only environment template, `remotedesk-turn.service`, and `remotedesk-verify-coturn`. Install the distribution `coturn` package, copy both templates without the `.example` suffix, set explicit listening/relay/external addresses, install a trusted certificate and private key, then enable the TURN unit. Verification requires the REST secret and trusted CA path and performs STUN plus TURN UDP, TCP, and TLS data loops:
+
+```sh
+sudo REMOTEDESK_TURN_REST_SECRET='...' \
+  REMOTEDESK_TURN_VERIFY_HOST=turn.example.com \
+  REMOTEDESK_TURN_VERIFY_CA=/path/to/ca.pem \
+  remotedesk-verify-coturn
+```
+
+`GET /health` is unauthenticated and exposes only service health, local capability flags, and aggregate counters. `POST /v1/presence`, `DELETE /v1/presence`, `POST /v1/signals/poll`, and `POST /v1/signals/ack` accept either the dedicated Presence token or the administrator token. Signal poll/ack additionally require a fresh one-use nonce and an Ed25519 proof from the current Agent device key; the shared Presence token alone cannot poll another device. Presence lookup, path selection, relay allocation, TURN credentials, and administrator signal status require `Authorization: Bearer <REMOTEDESK_EDGE_API_TOKEN>`; never distribute that administrator token to Agents or Windows Clients.
+
+`POST /v1/signals/requests` is a public Client-authenticated route: it accepts a valid Client-key-signed session intent only while the target has a live Presence route. `POST /v1/signals/status` returns that request only when the caller repeats its stored Client public key and original signature. Requests use canonical domain-separated signing bytes, expire within 120 seconds, are idempotent by request ID, and enter bounded global, per-device, and per-Client/device queues. The Agent independently verifies that Client key against its local pairing store and checks the requested permission and target user before sending a device-key-signed acceptance or rejection. An accepted terminal/file request allocates independent one-use Client and Agent relay tickets; each endpoint receives only its own role. Operators can read non-secret status from the administrator-only `GET /v1/signals/requests/<request-id>`.
+
+Accepted, unexpired sessions may use public body-authenticated `POST /v1/negotiation/send` and `POST /v1/negotiation/poll` routes. Each envelope is signed by the bound Client or Agent Ed25519 key and covers request/session IDs, endpoint role, operation, strict sequence, ICE generation, message kind, payload, one-use nonce, and a maximum 30-second lifetime. The bounded peer-only mailbox carries SDP offer/answer, ICE candidates/end, and explicit restart messages. It does not create a WebRTC peer connection, deploy coturn, or carry media.
+
+Relay allocations return role-specific, HMAC-protected, one-use tickets. Tickets bind the allocation, session, role, POP, expiry, and shared byte quota. The relay forwards opaque bytes and applies a global idle timeout; terminal/file endpoints establish the original pinned Agent TLS and WebSocket inside that byte stream. Public endpoints must connect through a system-trusted TLS/L4 ingress; raw relay TCP is accepted by clients only for loopback testing.
+
+The packaged configuration intentionally contains no usable secret and the service is not started automatically after installation.
diff --git a/packaging/edge/coturn.conf.example b/packaging/edge/coturn.conf.example
new file mode 100644
index 0000000..30edb85
--- /dev/null
+++ b/packaging/edge/coturn.conf.example
@@ -0,0 +1,21 @@
+# RemoteDesk coturn POP baseline. Copy to /etc/remotedesk-edge/coturn.conf.
+# The REST secret is supplied by the systemd EnvironmentFile, never stored here.
+fingerprint
+use-auth-secret
+realm=turn.example.invalid
+listening-port=3478
+tls-listening-port=5349
+min-port=49160
+max-port=49259
+no-cli
+no-multicast-peers
+no-loopback-peers
+stale-nonce=600
+total-quota=1200
+user-quota=12
+cert=/etc/remotedesk-edge/tls/turn-fullchain.pem
+pkey=/etc/remotedesk-edge/tls/turn-private-key.pem
+# Production deployments must set explicit listening-ip, relay-ip and external-ip.
+# listening-ip=192.0.2.10
+# relay-ip=192.0.2.10
+# external-ip=198.51.100.10/192.0.2.10
diff --git a/packaging/edge/coturn.env.example b/packaging/edge/coturn.env.example
new file mode 100644
index 0000000..e69df77
--- /dev/null
+++ b/packaging/edge/coturn.env.example
@@ -0,0 +1,2 @@
+# Generate at least 32 random bytes. Keep this file mode 0640 root:turnserver.
+REMOTEDESK_TURN_REST_SECRET=
diff --git a/packaging/edge/debian/conffiles b/packaging/edge/debian/conffiles
new file mode 100644
index 0000000..ca63d3e
--- /dev/null
+++ b/packaging/edge/debian/conffiles
@@ -0,0 +1 @@
+/etc/remotedesk-edge/edge.env
diff --git a/packaging/edge/debian/control b/packaging/edge/debian/control
new file mode 100644
index 0000000..cae3bf7
--- /dev/null
+++ b/packaging/edge/debian/control
@@ -0,0 +1,11 @@
+Package: remotedesk-edge
+Version: @VERSION@
+Architecture: @ARCH@
+Maintainer: RemoteDesk
+Section: net
+Priority: optional
+Depends: adduser, systemd
+Suggests: coturn
+Description: RemoteDesk authenticated edge rendezvous and byte relay
+ Provides a short-TTL presence directory, measured path allocator, coturn REST
+ credential issuer, and quota-limited transparent TCP byte relay.
diff --git a/packaging/edge/debian/postinst b/packaging/edge/debian/postinst
new file mode 100644
index 0000000..50f0a1a
--- /dev/null
+++ b/packaging/edge/debian/postinst
@@ -0,0 +1,15 @@
+#!/bin/sh
+set -eu
+
+if ! getent group remotedesk-edge >/dev/null 2>&1; then
+    addgroup --system remotedesk-edge
+fi
+if ! getent passwd remotedesk-edge >/dev/null 2>&1; then
+    adduser --system --ingroup remotedesk-edge --home /var/lib/remotedesk-edge \
+        --no-create-home --disabled-login remotedesk-edge
+fi
+chown root:remotedesk-edge /etc/remotedesk-edge/edge.env
+chmod 0640 /etc/remotedesk-edge/edge.env
+systemctl daemon-reload
+systemctl enable remotedesk-edge.service >/dev/null 2>&1 || true
+echo "RemoteDesk Edge installed but not started. Configure /etc/remotedesk-edge/edge.env first."
diff --git a/packaging/edge/debian/postrm b/packaging/edge/debian/postrm
new file mode 100644
index 0000000..5490aa7
--- /dev/null
+++ b/packaging/edge/debian/postrm
@@ -0,0 +1,9 @@
+#!/bin/sh
+set -eu
+
+systemctl daemon-reload >/dev/null 2>&1 || true
+if [ "${1:-}" = purge ]; then
+    rm -rf /var/lib/remotedesk-edge
+    deluser remotedesk-edge >/dev/null 2>&1 || true
+    delgroup remotedesk-edge >/dev/null 2>&1 || true
+fi
diff --git a/packaging/edge/debian/prerm b/packaging/edge/debian/prerm
new file mode 100644
index 0000000..9b7f387
--- /dev/null
+++ b/packaging/edge/debian/prerm
@@ -0,0 +1,7 @@
+#!/bin/sh
+set -eu
+
+if [ "${1:-}" = remove ]; then
+    systemctl disable --now remotedesk-edge.service >/dev/null 2>&1 || true
+    systemctl disable --now remotedesk-turn.service >/dev/null 2>&1 || true
+fi
diff --git a/packaging/edge/edge.env b/packaging/edge/edge.env
new file mode 100644
index 0000000..ecdc6b7
--- /dev/null
+++ b/packaging/edge/edge.env
@@ -0,0 +1,12 @@
+# Required: use independent, randomly generated values of at least 32 bytes.
+REMOTEDESK_EDGE_API_TOKEN=
+REMOTEDESK_EDGE_PRESENCE_TOKEN=
+REMOTEDESK_EDGE_TICKET_SECRET=
+
+# Public address reached by relay clients after an allocation.
+REMOTEDESK_EDGE_PUBLIC_RELAY_ADDRESS=relay.example.invalid:443
+REMOTEDESK_EDGE_POP_ID=example-pop-1
+REMOTEDESK_EDGE_REGION=example-region
+
+# Optional coturn REST secrets are referenced by name from turn-pops.json.
+# REMOTEDESK_TURN_SECRET_EXAMPLE=
diff --git a/packaging/edge/install.sh b/packaging/edge/install.sh
new file mode 100644
index 0000000..3bccff5
--- /dev/null
+++ b/packaging/edge/install.sh
@@ -0,0 +1,37 @@
+#!/bin/sh
+set -eu
+
+if [ "$(id -u)" -ne 0 ]; then
+    echo "install.sh must run as root" >&2
+    exit 1
+fi
+
+package_root=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
+if ! getent group remotedesk-edge >/dev/null 2>&1; then
+    groupadd --system remotedesk-edge
+fi
+if ! getent passwd remotedesk-edge >/dev/null 2>&1; then
+    useradd --system --gid remotedesk-edge --home-dir /var/lib/remotedesk-edge \
+        --create-home --shell /usr/sbin/nologin remotedesk-edge
+fi
+
+install -m 0755 "$package_root/bin/remotedesk-edge-service" /usr/bin/remotedesk-edge-service
+install -d -m 0750 -o root -g remotedesk-edge /etc/remotedesk-edge
+if [ ! -f /etc/remotedesk-edge/edge.env ]; then
+    install -m 0640 -o root -g remotedesk-edge "$package_root/config/edge.env" /etc/remotedesk-edge/edge.env
+fi
+if [ ! -f /etc/remotedesk-edge/turn-pops.json.example ]; then
+    install -m 0640 -o root -g remotedesk-edge "$package_root/config/turn-pops.json.example" /etc/remotedesk-edge/turn-pops.json.example
+fi
+if [ ! -f /etc/remotedesk-edge/coturn.conf.example ]; then
+    install -m 0644 "$package_root/config/coturn.conf.example" /etc/remotedesk-edge/coturn.conf.example
+fi
+if [ ! -f /etc/remotedesk-edge/coturn.env.example ]; then
+    install -m 0640 -o root -g remotedesk-edge "$package_root/config/coturn.env.example" /etc/remotedesk-edge/coturn.env.example
+fi
+install -m 0644 "$package_root/systemd/remotedesk-edge.service" /usr/lib/systemd/system/remotedesk-edge.service
+install -m 0644 "$package_root/systemd/remotedesk-turn.service" /usr/lib/systemd/system/remotedesk-turn.service
+install -m 0755 "$package_root/verify-coturn.sh" /usr/bin/remotedesk-verify-coturn
+systemctl daemon-reload
+systemctl enable remotedesk-edge.service
+echo "Configure /etc/remotedesk-edge/edge.env, publish both loopback listeners securely, then start remotedesk-edge.service. Optional coturn templates were installed but not enabled."
diff --git a/packaging/edge/package-deb.sh b/packaging/edge/package-deb.sh
new file mode 100644
index 0000000..76ad7f2
--- /dev/null
+++ b/packaging/edge/package-deb.sh
@@ -0,0 +1,42 @@
+#!/bin/sh
+set -eu
+
+repo_root=$(CDPATH= cd -- "$(dirname -- "$0")/../.." && pwd)
+artifacts_root="$repo_root/artifacts"
+build_root="$repo_root/target/package-edge-deb"
+package_id=$(cargo pkgid -p remotedesk-edge-service --manifest-path "$repo_root/Cargo.toml")
+version=${package_id##*@}
+arch=$(dpkg --print-architecture)
+package_root="$build_root/remotedesk-edge_${version}_${arch}"
+
+case "$build_root" in
+    "$repo_root"/target/*) ;;
+    *) echo "unsafe build directory: $build_root" >&2; exit 1 ;;
+esac
+
+rm -rf -- "$build_root"
+mkdir -p "$package_root/DEBIAN" "$package_root/usr/bin" \
+    "$package_root/usr/lib/systemd/system" "$package_root/etc/remotedesk-edge" \
+    "$package_root/usr/share/doc/remotedesk-edge" "$artifacts_root"
+cargo build --locked --release --manifest-path "$repo_root/Cargo.toml" -p remotedesk-edge-service
+install -m 0755 "$repo_root/target/release/remotedesk-edge-service" "$package_root/usr/bin/"
+install -m 0644 "$repo_root/packaging/edge/remotedesk-edge.service" "$package_root/usr/lib/systemd/system/"
+install -m 0640 "$repo_root/packaging/edge/edge.env" "$package_root/etc/remotedesk-edge/"
+install -m 0644 "$repo_root/packaging/edge/turn-pops.json.example" "$package_root/etc/remotedesk-edge/"
+install -m 0644 "$repo_root/packaging/edge/coturn.conf.example" "$package_root/etc/remotedesk-edge/"
+install -m 0640 "$repo_root/packaging/edge/coturn.env.example" "$package_root/etc/remotedesk-edge/"
+install -m 0644 "$repo_root/packaging/edge/remotedesk-turn.service" "$package_root/usr/lib/systemd/system/"
+install -m 0755 "$repo_root/packaging/edge/verify-coturn.sh" "$package_root/usr/bin/remotedesk-verify-coturn"
+install -m 0644 "$repo_root/packaging/edge/README.md" "$package_root/usr/share/doc/remotedesk-edge/README.md"
+
+sed -e "s/@VERSION@/$version/g" -e "s/@ARCH@/$arch/g" \
+    "$repo_root/packaging/edge/debian/control" > "$package_root/DEBIAN/control"
+install -m 0644 "$repo_root/packaging/edge/debian/conffiles" "$package_root/DEBIAN/conffiles"
+for script in postinst prerm postrm; do
+    install -m 0755 "$repo_root/packaging/edge/debian/$script" "$package_root/DEBIAN/$script"
+done
+
+output="$artifacts_root/remotedesk-edge_${version}_${arch}.deb"
+dpkg-deb --root-owner-group --build "$package_root" "$output"
+sha256sum "$output" > "$output.sha256"
+printf 'Package: %s\n' "$output"
diff --git a/packaging/edge/package-musl.ps1 b/packaging/edge/package-musl.ps1
new file mode 100644
index 0000000..2f5b99c
--- /dev/null
+++ b/packaging/edge/package-musl.ps1
@@ -0,0 +1,167 @@
+[CmdletBinding()]
+param()
+
+$ErrorActionPreference = 'Stop'
+$repoRoot = [IO.Path]::GetFullPath((Join-Path $PSScriptRoot '..\..'))
+$targetRoot = Join-Path $repoRoot 'target'
+$artifactsRoot = Join-Path $repoRoot 'artifacts'
+$buildRoot = Join-Path $targetRoot 'package-edge-musl'
+$gnuTar = 'C:\Program Files\Git\usr\bin\tar.exe'
+$gzip = 'C:\Program Files\Git\usr\bin\gzip.exe'
+$fileTool = 'C:\Program Files\Git\usr\bin\file.exe'
+
+function Invoke-Checked {
+    param([Parameter(Mandatory)][scriptblock]$Command, [Parameter(Mandatory)][string]$Description)
+    & $Command
+    if ($LASTEXITCODE -ne 0) { throw "$Description failed with exit code $LASTEXITCODE" }
+}
+
+function Assert-PathWithin {
+    param([Parameter(Mandatory)][string]$Path, [Parameter(Mandatory)][string]$Root)
+    $fullPath = [IO.Path]::GetFullPath($Path)
+    $prefix = [IO.Path]::GetFullPath($Root).TrimEnd([IO.Path]::DirectorySeparatorChar) + [IO.Path]::DirectorySeparatorChar
+    if (-not $fullPath.StartsWith($prefix, [StringComparison]::OrdinalIgnoreCase)) {
+        throw "Refusing to modify a path outside $Root"
+    }
+}
+
+foreach ($tool in @($gnuTar, $gzip, $fileTool)) {
+    if (-not (Test-Path -LiteralPath $tool -PathType Leaf)) { throw "Required build tool is missing: $tool" }
+}
+
+$ndkRoot = if ($env:ANDROID_NDK_HOME) {
+    Split-Path -Parent ([IO.Path]::GetFullPath($env:ANDROID_NDK_HOME))
+} else {
+    Join-Path $env:LOCALAPPDATA 'Android\Sdk\ndk'
+}
+$ndk = Get-ChildItem -LiteralPath $ndkRoot -Directory -ErrorAction SilentlyContinue |
+    Sort-Object Name -Descending |
+    Where-Object { Test-Path -LiteralPath (Join-Path $_.FullName 'toolchains\llvm\prebuilt\windows-x86_64\bin\x86_64-linux-android21-clang.cmd') } |
+    Select-Object -First 1
+if ($null -eq $ndk) { throw 'Android NDK LLVM is required for the local musl build.' }
+$ndkBin = Join-Path $ndk.FullName 'toolchains\llvm\prebuilt\windows-x86_64\bin'
+$clang = Join-Path $ndkBin 'x86_64-linux-android21-clang.cmd'
+$llvmAr = Join-Path $ndkBin 'llvm-ar.exe'
+$llvmStrip = Join-Path $ndkBin 'llvm-strip.exe'
+$rustSysroot = (& rustc --print sysroot).Trim()
+if ($LASTEXITCODE -ne 0) { throw 'Unable to locate the active Rust sysroot.' }
+$rustHost = ((& rustc -vV | Select-String '^host: ').Line -replace '^host:\s*', '').Trim()
+$rustLld = Join-Path $rustSysroot "lib\rustlib\$rustHost\bin\rust-lld.exe"
+
+Push-Location $repoRoot
+try {
+    $metadata = cargo metadata --no-deps --format-version 1 | ConvertFrom-Json
+    if ($LASTEXITCODE -ne 0) { throw 'Unable to read Cargo workspace metadata.' }
+    $package = $metadata.packages | Where-Object name -eq 'remotedesk-edge-service' | Select-Object -First 1
+    $version = [string]$package.version
+    if ($version -notmatch '^\d+\.\d+\.\d+$') { throw "Invalid package version: $version" }
+
+    $env:CC_x86_64_unknown_linux_musl = $clang
+    $env:AR_x86_64_unknown_linux_musl = $llvmAr
+    $env:CARGO_TARGET_X86_64_UNKNOWN_LINUX_MUSL_LINKER = $rustLld
+    Invoke-Checked -Description 'Static Edge service build' -Command {
+        cargo build --locked --release --jobs 2 --target x86_64-unknown-linux-musl -p remotedesk-edge-service
+    }
+
+    Assert-PathWithin -Path $buildRoot -Root $targetRoot
+    if (Test-Path -LiteralPath $buildRoot) { Remove-Item -LiteralPath $buildRoot -Recurse -Force }
+    New-Item -ItemType Directory -Force -Path $buildRoot, $artifactsRoot | Out-Null
+    $portableName = "RemoteDesk-Edge-$version-linux-x64"
+    $portableRoot = Join-Path $buildRoot $portableName
+    New-Item -ItemType Directory -Force -Path (Join-Path $portableRoot 'bin'), `
+        (Join-Path $portableRoot 'systemd'), (Join-Path $portableRoot 'config') | Out-Null
+    $binary = Join-Path $portableRoot 'bin\remotedesk-edge-service'
+    Copy-Item -LiteralPath (Join-Path $targetRoot 'x86_64-unknown-linux-musl\release\remotedesk-edge-service') -Destination $binary
+    Invoke-Checked -Description 'Strip Edge service' -Command { & $llvmStrip $binary }
+    $fileDescription = (& $fileTool $binary) -join "`n"
+    if ($LASTEXITCODE -ne 0 -or $fileDescription -notmatch 'ELF 64-bit' -or $fileDescription -notmatch '(statically linked|static-pie linked)') {
+        throw "Edge service is not a static x64 ELF: $fileDescription"
+    }
+    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'remotedesk-edge.service') -Destination (Join-Path $portableRoot 'systemd')
+    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'edge.env') -Destination (Join-Path $portableRoot 'config')
+    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'turn-pops.json.example') -Destination (Join-Path $portableRoot 'config')
+    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'coturn.conf.example') -Destination (Join-Path $portableRoot 'config')
+    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'coturn.env.example') -Destination (Join-Path $portableRoot 'config')
+    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'remotedesk-turn.service') -Destination (Join-Path $portableRoot 'systemd')
+    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'verify-coturn.sh') -Destination $portableRoot
+    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'install.sh') -Destination $portableRoot
+    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'uninstall.sh') -Destination $portableRoot
+    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'README.md') -Destination $portableRoot
+
+    $hashLines = Get-ChildItem -LiteralPath $portableRoot -Recurse -File | Sort-Object FullName | ForEach-Object {
+        $relative = [IO.Path]::GetRelativePath($portableRoot, $_.FullName).Replace('\', '/')
+        $hash = (Get-FileHash -LiteralPath $_.FullName -Algorithm SHA256).Hash.ToLowerInvariant()
+        "$hash  $relative"
+    }
+    $hashLines | Set-Content -LiteralPath (Join-Path $portableRoot 'SHA256SUMS.txt') -Encoding ascii
+
+    $tarPath = Join-Path $buildRoot "$portableName.tar"
+    $directories = @($portableName, "$portableName/bin", "$portableName/config", "$portableName/systemd")
+    $executables = @("$portableName/install.sh", "$portableName/uninstall.sh", "$portableName/verify-coturn.sh", "$portableName/bin/remotedesk-edge-service")
+    $data = @("$portableName/README.md", "$portableName/SHA256SUMS.txt", "$portableName/config/edge.env", "$portableName/config/turn-pops.json.example", "$portableName/config/coturn.conf.example", "$portableName/config/coturn.env.example", "$portableName/systemd/remotedesk-edge.service", "$portableName/systemd/remotedesk-turn.service")
+    Push-Location $buildRoot
+    try {
+        Invoke-Checked -Description 'Edge directory archive' -Command { & $gnuTar --force-local --no-recursion --format=gnu --owner=0 --group=0 --mode=0755 -cf $tarPath @directories }
+        Invoke-Checked -Description 'Edge executable archive' -Command { & $gnuTar --force-local --format=gnu --owner=0 --group=0 --mode=0755 -rf $tarPath @executables }
+        Invoke-Checked -Description 'Edge data archive' -Command { & $gnuTar --force-local --format=gnu --owner=0 --group=0 --mode=0644 -rf $tarPath @data }
+    } finally { Pop-Location }
+    Invoke-Checked -Description 'Edge gzip compression' -Command { & $gzip -n -f $tarPath }
+    $portableOutput = Join-Path $artifactsRoot "$portableName.tar.gz"
+    Move-Item -LiteralPath "$tarPath.gz" -Destination $portableOutput -Force
+
+    $debianRoot = Join-Path $buildRoot 'debian-root'
+    New-Item -ItemType Directory -Force -Path (Join-Path $debianRoot 'DEBIAN'), `
+        (Join-Path $debianRoot 'usr\bin'), (Join-Path $debianRoot 'usr\lib\systemd\system'), `
+        (Join-Path $debianRoot 'etc\remotedesk-edge'), (Join-Path $debianRoot 'usr\share\doc\remotedesk-edge') | Out-Null
+    Copy-Item -LiteralPath $binary -Destination (Join-Path $debianRoot 'usr\bin\remotedesk-edge-service')
+    Copy-Item -LiteralPath (Join-Path $portableRoot 'systemd\remotedesk-edge.service') -Destination (Join-Path $debianRoot 'usr\lib\systemd\system')
+    Copy-Item -LiteralPath (Join-Path $portableRoot 'config\edge.env') -Destination (Join-Path $debianRoot 'etc\remotedesk-edge')
+    Copy-Item -LiteralPath (Join-Path $portableRoot 'config\turn-pops.json.example') -Destination (Join-Path $debianRoot 'etc\remotedesk-edge')
+    Copy-Item -LiteralPath (Join-Path $portableRoot 'config\coturn.conf.example') -Destination (Join-Path $debianRoot 'etc\remotedesk-edge')
+    Copy-Item -LiteralPath (Join-Path $portableRoot 'config\coturn.env.example') -Destination (Join-Path $debianRoot 'etc\remotedesk-edge')
+    Copy-Item -LiteralPath (Join-Path $portableRoot 'systemd\remotedesk-turn.service') -Destination (Join-Path $debianRoot 'usr\lib\systemd\system')
+    Copy-Item -LiteralPath (Join-Path $portableRoot 'verify-coturn.sh') -Destination (Join-Path $debianRoot 'usr\bin\remotedesk-verify-coturn')
+    Copy-Item -LiteralPath (Join-Path $portableRoot 'README.md') -Destination (Join-Path $debianRoot 'usr\share\doc\remotedesk-edge\README.md')
+    $control = (Get-Content -LiteralPath (Join-Path $PSScriptRoot 'debian\control') -Raw).Replace('@VERSION@', $version).Replace('@ARCH@', 'amd64')
+    [IO.File]::WriteAllText((Join-Path $debianRoot 'DEBIAN\control'), $control.Replace("`r`n", "`n"), [Text.UTF8Encoding]::new($false))
+    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'debian\conffiles') -Destination (Join-Path $debianRoot 'DEBIAN')
+    foreach ($script in @('postinst', 'prerm', 'postrm')) {
+        Copy-Item -LiteralPath (Join-Path $PSScriptRoot "debian\$script") -Destination (Join-Path $debianRoot "DEBIAN\$script")
+    }
+
+    $debParts = Join-Path $buildRoot 'deb-parts'
+    New-Item -ItemType Directory -Force -Path $debParts | Out-Null
+    [IO.File]::WriteAllText((Join-Path $debParts 'debian-binary'), "2.0`n", [Text.Encoding]::ASCII)
+    $controlTar = Join-Path $debParts 'control.tar'
+    Push-Location (Join-Path $debianRoot 'DEBIAN')
+    try {
+        Invoke-Checked -Description 'Edge DEB control archive' -Command { & $gnuTar --force-local --format=gnu --owner=0 --group=0 --mode=0644 -cf $controlTar control conffiles }
+        Invoke-Checked -Description 'Edge DEB maintainer scripts' -Command { & $gnuTar --force-local --format=gnu --owner=0 --group=0 --mode=0755 -rf $controlTar postinst prerm postrm }
+    } finally { Pop-Location }
+    Invoke-Checked -Description 'Edge DEB control compression' -Command { & $gzip -n -f $controlTar }
+    $dataTar = Join-Path $debParts 'data.tar'
+    Push-Location $debianRoot
+    try {
+        Invoke-Checked -Description 'Edge DEB executable payload' -Command { & $gnuTar --force-local --format=gnu --owner=0 --group=0 --mode=0755 -cf $dataTar './usr/bin/remotedesk-edge-service' './usr/bin/remotedesk-verify-coturn' }
+        Invoke-Checked -Description 'Edge DEB protected configuration' -Command { & $gnuTar --force-local --format=gnu --owner=0 --group=0 --mode=0640 -rf $dataTar './etc/remotedesk-edge/edge.env' }
+        Invoke-Checked -Description 'Edge DEB data payload' -Command { & $gnuTar --force-local --format=gnu --owner=0 --group=0 --mode=0644 -rf $dataTar './etc/remotedesk-edge/turn-pops.json.example' './etc/remotedesk-edge/coturn.conf.example' './etc/remotedesk-edge/coturn.env.example' './usr/lib/systemd/system/remotedesk-edge.service' './usr/lib/systemd/system/remotedesk-turn.service' './usr/share/doc/remotedesk-edge/README.md' }
+    } finally { Pop-Location }
+    Invoke-Checked -Description 'Edge DEB data compression' -Command { & $gzip -n -f $dataTar }
+    $debOutput = Join-Path $artifactsRoot "remotedesk-edge_${version}_amd64-musl.deb"
+    Push-Location $debParts
+    try {
+        Invoke-Checked -Description 'Edge DEB ar archive' -Command { & $llvmAr rc $debOutput debian-binary control.tar.gz data.tar.gz }
+    } finally { Pop-Location }
+
+    foreach ($output in @($portableOutput, $debOutput)) {
+        $hash = (Get-FileHash -LiteralPath $output -Algorithm SHA256).Hash.ToLowerInvariant()
+        "$hash  $([IO.Path]::GetFileName($output))" | Set-Content -LiteralPath "$output.sha256" -Encoding ascii
+        Write-Output "Package: $output"
+        Write-Output "SHA256: $hash"
+    }
+} finally {
+    Remove-Item Env:CC_x86_64_unknown_linux_musl -ErrorAction SilentlyContinue
+    Remove-Item Env:AR_x86_64_unknown_linux_musl -ErrorAction SilentlyContinue
+    Remove-Item Env:CARGO_TARGET_X86_64_UNKNOWN_LINUX_MUSL_LINKER -ErrorAction SilentlyContinue
+    Pop-Location
+}
diff --git a/packaging/edge/remotedesk-edge.service b/packaging/edge/remotedesk-edge.service
new file mode 100644
index 0000000..e341805
--- /dev/null
+++ b/packaging/edge/remotedesk-edge.service
@@ -0,0 +1,30 @@
+[Unit]
+Description=RemoteDesk Edge rendezvous, allocator, and byte relay
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=remotedesk-edge
+Group=remotedesk-edge
+EnvironmentFile=/etc/remotedesk-edge/edge.env
+ExecStart=/usr/bin/remotedesk-edge-service --api-bind 127.0.0.1:7080 --relay-bind 127.0.0.1:7444 --public-relay-address ${REMOTEDESK_EDGE_PUBLIC_RELAY_ADDRESS} --pop-id ${REMOTEDESK_EDGE_POP_ID} --region ${REMOTEDESK_EDGE_REGION}
+Restart=on-failure
+RestartSec=3
+NoNewPrivileges=true
+PrivateTmp=true
+PrivateDevices=true
+ProtectSystem=strict
+ProtectHome=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectControlGroups=true
+RestrictSUIDSGID=true
+RestrictNamespaces=true
+LockPersonality=true
+MemoryDenyWriteExecute=true
+SystemCallArchitectures=native
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
+
+[Install]
+WantedBy=multi-user.target
diff --git a/packaging/edge/remotedesk-turn.service b/packaging/edge/remotedesk-turn.service
new file mode 100644
index 0000000..ff5eb98
--- /dev/null
+++ b/packaging/edge/remotedesk-turn.service
@@ -0,0 +1,26 @@
+[Unit]
+Description=RemoteDesk coturn POP
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=notify
+User=turnserver
+Group=turnserver
+EnvironmentFile=/etc/remotedesk-edge/coturn.env
+ExecStart=/usr/bin/turnserver -c /etc/remotedesk-edge/coturn.conf --static-auth-secret=${REMOTEDESK_TURN_REST_SECRET}
+Restart=on-failure
+RestartSec=3
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectSystem=strict
+ProtectHome=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectControlGroups=true
+RestrictSUIDSGID=true
+LockPersonality=true
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
+
+[Install]
+WantedBy=multi-user.target
diff --git a/packaging/edge/turn-pops.json.example b/packaging/edge/turn-pops.json.example
new file mode 100644
index 0000000..69df451
--- /dev/null
+++ b/packaging/edge/turn-pops.json.example
@@ -0,0 +1,11 @@
+[
+  {
+    "pop_id": "example-pop-1",
+    "realm": "turn.example.invalid",
+    "urls": [
+      "turn:turn.example.invalid:3478?transport=udp",
+      "turns:turn.example.invalid:443?transport=tcp"
+    ],
+    "secret_env": "REMOTEDESK_TURN_SECRET_EXAMPLE"
+  }
+]
diff --git a/packaging/edge/uninstall.sh b/packaging/edge/uninstall.sh
new file mode 100644
index 0000000..6401c9a
--- /dev/null
+++ b/packaging/edge/uninstall.sh
@@ -0,0 +1,15 @@
+#!/bin/sh
+set -eu
+
+if [ "$(id -u)" -ne 0 ]; then
+    echo "uninstall.sh must run as root" >&2
+    exit 1
+fi
+
+systemctl disable --now remotedesk-edge.service >/dev/null 2>&1 || true
+systemctl disable --now remotedesk-turn.service >/dev/null 2>&1 || true
+rm -f /usr/lib/systemd/system/remotedesk-edge.service \
+    /usr/lib/systemd/system/remotedesk-turn.service \
+    /usr/bin/remotedesk-edge-service /usr/bin/remotedesk-verify-coturn
+systemctl daemon-reload
+echo "Configuration in /etc/remotedesk-edge was preserved."
diff --git a/packaging/edge/verify-coturn.sh b/packaging/edge/verify-coturn.sh
new file mode 100644
index 0000000..386aa6d
--- /dev/null
+++ b/packaging/edge/verify-coturn.sh
@@ -0,0 +1,30 @@
+#!/bin/sh
+set -eu
+
+host=${REMOTEDESK_TURN_VERIFY_HOST:-127.0.0.1}
+plain_port=${REMOTEDESK_TURN_VERIFY_PORT:-3478}
+tls_port=${REMOTEDESK_TURN_VERIFY_TLS_PORT:-5349}
+secret=${REMOTEDESK_TURN_REST_SECRET:-}
+ca_file=${REMOTEDESK_TURN_VERIFY_CA:-}
+
+if [ ${#secret} -lt 32 ]; then
+    echo "REMOTEDESK_TURN_REST_SECRET must contain at least 32 bytes" >&2
+    exit 1
+fi
+for command in turnutils_stunclient turnutils_uclient; do
+    if ! command -v "$command" >/dev/null 2>&1; then
+        echo "required coturn utility is missing: $command" >&2
+        exit 1
+    fi
+done
+if [ -z "$ca_file" ] || [ ! -f "$ca_file" ]; then
+    echo "REMOTEDESK_TURN_VERIFY_CA must name the trusted POP CA file" >&2
+    exit 1
+fi
+
+turnutils_stunclient -p "$plain_port" "$host"
+turnutils_uclient -y -c -n 2 -W "$secret" -p "$plain_port" "$host"
+turnutils_uclient -y -c -n 2 -t -W "$secret" -p "$plain_port" "$host"
+turnutils_uclient -y -c -n 2 -t -S -E "$ca_file" -W "$secret" -p "$tls_port" "$host"
+
+echo "coturn STUN, TURN UDP, TURN TCP, and TURN TLS verification passed"
diff --git a/packaging/linux/README.md b/packaging/linux/README.md
new file mode 100644
index 0000000..622fc84
--- /dev/null
+++ b/packaging/linux/README.md
@@ -0,0 +1,38 @@
+# RemoteDesk Linux controlled endpoint
+
+The Linux package installs four Rust processes. Packages that include the
+optional `remotedesk-hysteria2-agent` binary also install a pure Hysteria2
+QUIC/UDP transport service on UDP 39502. It requires a TLS certificate and a
+long random password; it does not expose TCP, a TCP proxy, or SOCKS5.
+
+- `remotedesk-agentd`: root system service for device identity, WSS pairing/authentication, authorization, user-session registration, and terminal creation.
+- `remotedesk-agent-session`: per-user service that detects Wayland/X11/PipeWire state and registers through authenticated Unix IPC.
+- `remotedesk-shell-session`: private PTY helper. It uses util-linux `runuser --login` so PAM opens the requested ordinary-user session; UID 0 is always rejected.
+- `remotedesk-file-session`: private upload/download helper. It runs as the authorized ordinary user, confines paths to that user's home, and verifies size plus SHA-256 before committing files.
+
+File protocol minor 4 resumes both directions. Interrupted uploads retain a mode-0600 hidden partial keyed by a transfer ID that binds user, remote path, size, and whole-file hash; the helper reports the measured partial length and atomically replaces the target only after hashing the complete file. Downloads request the measured local hidden-partial length, receive only the remaining range, re-hash the existing prefix plus new bytes, and rename only after the whole-file hash matches. A hash mismatch removes the local partial.
+
+Protocol minor 10 includes the X11 desktop compatibility path, bounded zlib level adaptation, short-lived session resume, bounded H.264 media IPC, presentation-ACK-driven switching from zlib fallback to H.264-only transport, and bounded relative-pointer input. Pairing grants may include `desktop`; an Xorg user session registers `/run/user/<uid>/remotedesk/desktop.sock`, captures the root window through X11 `GetImage`, and injects authorized absolute/relative pointer, five-button mouse, wheel, and keyboard input through XTEST. Real encode timing and presentation ACKs adapt 1..30 FPS pacing without exceeding the requested FPS ceiling; zlib mode also adapts levels 1..6. Native mode stops full zlib frame encoding and transfer only after a frame-boundary confirmation, and returns to zlib on media or decode failure. On transport loss it releases all input and retains the X11 connection and both controllers for 15 seconds behind a rotating token bound to the authenticated Client and Linux user. The Windows helper stores only that token in the current user's Credential Manager so a restarted helper can resume within the lease. The systemd user unit exposes the X11 socket read-only inside its private `/tmp`. Protocol minor 11 adds the source path for authenticated Wayland Portal authorization, strict PipeWire DMABUF-to-VA-H.264 transport, presentation-ACK pacing, dynamic pipeline rebuilds, and `reis` EIS input. Minor 12 adds a 15-second Portal/EIS resume lease bound to the authenticated Client fingerprint, Linux user, and rotating token; disconnect releases all input and the old encoder, while resume requires a new authorized WebRTC sender and a new IDR. Minor 15 adds X11/Windows bidirectional UTF-8 text clipboard source with separate `clipboard_read` and `clipboard_write` grants, Offer/Request/Data transfer, a 32 KiB bound, canonical Base64, SHA-256 integrity, and loop suppression. Wayland clipboard remains unavailable. Both desktop paths and the new clipboard path still require rebuilt packages and real desktop validation.
+
+After installation, create a short-lived pairing code locally:
+
+```sh
+sudo remotedesk-agentd pairing-code --allow-user "$USER"
+```
+
+The code expires after five minutes, is stored only as a salted digest, permits five failed attempts, and is consumed after one successful pairing. The pairing request must also sign the server challenge with the submitted Ed25519 client key. The command prints the device public key and TLS certificate SHA-256 fingerprint; the controller must pin the TLS fingerprint before sending the code. Accepting an arbitrary self-signed certificate is not secure. List or revoke clients with:
+
+```sh
+sudo remotedesk-agentd list-clients
+sudo remotedesk-agentd revoke CLIENT_FINGERPRINT
+```
+
+The daemon listens on TCP 39500 by default. Edit `/etc/remotedesk/agent.env` to change it and restart `remotedesk-agentd`. The package deliberately does not modify nftables, firewalld, UFW, SELinux, or AppArmor policy.
+
+Edge Presence and signed session-intent polling are optional and disabled by default. To publish the Agent in a separately deployed Edge directory, set all four `REMOTEDESK_EDGE_API_URL`, `REMOTEDESK_EDGE_PRESENCE_TOKEN`, `REMOTEDESK_EDGE_REGION`, and `REMOTEDESK_EDGE_GATEWAY_ID` values in `agent.env`. The public API URL must use HTTPS; loopback HTTP is accepted only for local testing. The token must be a dedicated Presence token of at least 32 bytes, not the Edge administrator token or relay ticket secret. Restart the service and inspect `sudo remotedesk-agentd status --json`; graceful service shutdown removes the connection-bound registration. While online, the Agent signs each poll/ack with its device key and accepts an intent only after verifying its Client signature, local pairing grant, permission, and allowed user. Accepted terminal/file requests use an Agent-only one-use ticket to open an outbound relay tunnel to the local TLS listener. Accepted desktop requests start an Agent-side `webrtc-rs` PeerConnection, receive session-bound TURN credentials, and bind its sender to the authorized Linux user and Client fingerprint. Native DEB/RPM builds use GStreamer hardware encoders when available and bounded software fallbacks otherwise; the static musl compatibility package excludes this dynamically linked media feature. Windows remote H.264 RTP consumption and native D3D11 presentation are now wired in source with zlib/WSS fallback, but remain disabled as a runtime capability until rebuilt and validated; this is not an RDP relay.
+
+On the Windows controller, configure the same public origin under Global Settings > Edge session authorization. For first pairing, enter both `device_public_key` and `tls_certificate_sha256` printed by the Agent's local `pairing-code` command. While that local pairing window is valid, the Client submits a signed `pairing` intent and completes Agent-key verification, pinned TLS/WSS, Client challenge authentication, and the eight-digit code inside the opaque relay; the code is never sent to the Edge API. The certificate-bound Agent public key is then stored in Windows Credential Manager, and subsequent terminal/file requests submit directly to Edge without a Client-to-Agent connection. Direct pairing remains a fallback when Edge or the public key is not configured. No Edge administrator or Presence token is stored on Windows.
+
+The Windows Linux Terminal panel reports whether this mapping exists and can explicitly forget it. Its Credential Manager target is `RemoteDesk/Linux/agent/<certificate-sha256>`. The public key is not secret, but it is integrity-sensitive; deleting or changing it requires a new Edge or direct pairing.
+
+Current release boundary: authenticated terminal/file transports, optional Edge Presence, signed remote first-pairing admission, known-device outbound-only rendezvous, TLS-over-relay session bytes, signed SDP/ICE forwarding, Agent/Client PeerConnection wiring, authenticated direct-WSS SDP/ICE signaling, Linux X11-to-H.264-track wiring, Windows bounded H.264 RTP-to-D3D11 presentation, and the Wayland Portal/PipeWire/EIS source path are implemented in source. Direct signaling binds the authenticated Client fingerprint, Linux user, dimensions, frame rate, and the negotiated Opus-audio flag; it enters the desktop protocol only after the PeerConnection and both ICE-end barriers complete. Wayland requires one selected monitor, strict DMABUF-to-VA negotiation, an IDR before open, and matching EIS region/input devices; failures release input and close the Portal session without software raw-frame fallback. Protocol minor 14 adds explicitly negotiated Linux output-monitor capture, bounded GStreamer Opus packets, WebRTC SRTP transport, and Windows WASAPI playback in source. Minor 13 and older clients default the audio flag to false and never receive Opus events. The new media paths, including audio, resume, and direct signaling, have not been compiled or validated end to end and are never advertised as available merely from package metadata.
diff --git a/packaging/linux/agent.env b/packaging/linux/agent.env
new file mode 100644
index 0000000..b2e9cf4
--- /dev/null
+++ b/packaging/linux/agent.env
@@ -0,0 +1,10 @@
+# RemoteDesk Agent listens with TLS WebSocket on this address.
+# Opening the port in the host or cloud firewall is an explicit administrator action.
+REMOTEDESK_LISTEN=0.0.0.0:39500
+
+# Optional Edge Presence configuration. Set all four values or leave all four unset.
+# Public endpoints must use HTTPS; HTTP is accepted only for loopback development.
+# REMOTEDESK_EDGE_API_URL=https://edge.example.com/
+# REMOTEDESK_EDGE_PRESENCE_TOKEN=replace-with-a-dedicated-32-byte-or-longer-token
+# REMOTEDESK_EDGE_REGION=cn-east-1
+# REMOTEDESK_EDGE_GATEWAY_ID=gateway-1
diff --git a/packaging/linux/debian/control b/packaging/linux/debian/control
new file mode 100644
index 0000000..5a67f54
--- /dev/null
+++ b/packaging/linux/debian/control
@@ -0,0 +1,10 @@
+Package: remotedesk-agent
+Version: @VERSION@
+Section: net
+Priority: optional
+Architecture: @ARCH@
+Maintainer: RemoteDesk <noreply@remotedesk.invalid>
+Depends: libpam0g, util-linux, systemd, gstreamer1.0-plugins-base, gstreamer1.0-plugins-good, gstreamer1.0-plugins-bad, gstreamer1.0-plugins-ugly
+Description: RemoteDesk Linux controlled endpoint
+ RemoteDesk Agent provides authenticated device pairing, user-session IPC,
+ and PAM-backed PTY terminal sessions for the RemoteDesk Windows controller.
diff --git a/packaging/linux/debian/postinst b/packaging/linux/debian/postinst
new file mode 100644
index 0000000..e99cb1c
--- /dev/null
+++ b/packaging/linux/debian/postinst
@@ -0,0 +1,13 @@
+#!/bin/sh
+set -eu
+
+if command -v systemctl >/dev/null 2>&1; then
+    systemctl daemon-reload || true
+    systemctl enable remotedesk-agentd.service || true
+    systemctl --global enable remotedesk-agent-session.service || true
+    if [ "${1:-}" = "configure" ]; then
+        systemctl restart remotedesk-agentd.service || true
+    fi
+fi
+
+exit 0
diff --git a/packaging/linux/debian/postrm b/packaging/linux/debian/postrm
new file mode 100644
index 0000000..e244d8e
--- /dev/null
+++ b/packaging/linux/debian/postrm
@@ -0,0 +1,12 @@
+#!/bin/sh
+set -eu
+
+if command -v systemctl >/dev/null 2>&1; then
+    systemctl daemon-reload || true
+fi
+
+if [ "${1:-}" = "purge" ]; then
+    rm -f /var/lib/remotedesk/pairing.json
+fi
+
+exit 0
diff --git a/packaging/linux/debian/prerm b/packaging/linux/debian/prerm
new file mode 100644
index 0000000..c0d19fa
--- /dev/null
+++ b/packaging/linux/debian/prerm
@@ -0,0 +1,10 @@
+#!/bin/sh
+set -eu
+
+if [ "${1:-}" = "remove" ] && command -v systemctl >/dev/null 2>&1; then
+    systemctl stop remotedesk-agentd.service || true
+    systemctl disable remotedesk-agentd.service || true
+    systemctl --global disable remotedesk-agent-session.service || true
+fi
+
+exit 0
diff --git a/packaging/linux/hysteria2-agent.env.example b/packaging/linux/hysteria2-agent.env.example
new file mode 100644
index 0000000..1c5428b
--- /dev/null
+++ b/packaging/linux/hysteria2-agent.env.example
@@ -0,0 +1,5 @@
+REMOTEDESK_HYSTERIA2_LISTEN=0.0.0.0:39502
+REMOTEDESK_HYSTERIA2_PASSWORD=replace-with-a-long-random-password
+REMOTEDESK_HYSTERIA2_CERT=/etc/remotedesk/server.crt
+REMOTEDESK_HYSTERIA2_KEY=/etc/remotedesk/server.key
+REMOTEDESK_AGENT_UDP=127.0.0.1:39502
diff --git a/packaging/linux/install.sh b/packaging/linux/install.sh
new file mode 100644
index 0000000..e5def2c
--- /dev/null
+++ b/packaging/linux/install.sh
@@ -0,0 +1,34 @@
+#!/bin/sh
+set -eu
+
+if [ "$(id -u)" -ne 0 ]; then
+    echo "RemoteDesk Agent installation requires root." >&2
+    exit 1
+fi
+
+package_root=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
+install -d -m 0755 /usr/bin /usr/libexec /usr/lib/systemd/system /usr/lib/systemd/user
+install -d -m 0755 /etc/remotedesk /usr/share/doc/remotedesk-agent
+install -m 0755 "$package_root/bin/remotedesk-agentd" /usr/bin/remotedesk-agentd
+install -m 0755 "$package_root/bin/remotedesk-agent-session" /usr/bin/remotedesk-agent-session
+install -m 0755 "$package_root/bin/remotedesk-shell-session" /usr/libexec/remotedesk-shell-session
+install -m 0755 "$package_root/bin/remotedesk-file-session" /usr/libexec/remotedesk-file-session
+if [ -f "$package_root/bin/remotedesk-hysteria2-agent" ]; then
+    install -m 0755 "$package_root/bin/remotedesk-hysteria2-agent" /usr/bin/remotedesk-hysteria2-agent
+    install -m 0644 "$package_root/systemd/remotedesk-hysteria2-agent.service" /usr/lib/systemd/system/
+    if [ ! -e /etc/remotedesk/hysteria2-agent.env ]; then
+        install -m 0600 "$package_root/config/hysteria2-agent.env" /etc/remotedesk/hysteria2-agent.env
+    fi
+fi
+install -m 0644 "$package_root/systemd/remotedesk-agentd.service" /usr/lib/systemd/system/
+install -m 0644 "$package_root/systemd/remotedesk-agent-session.service" /usr/lib/systemd/user/
+install -m 0644 "$package_root/README.md" /usr/share/doc/remotedesk-agent/README.md
+if [ ! -e /etc/remotedesk/agent.env ]; then
+    install -m 0644 "$package_root/config/agent.env" /etc/remotedesk/agent.env
+fi
+
+systemctl daemon-reload
+systemctl enable --now remotedesk-agentd.service
+systemctl --global enable remotedesk-agent-session.service
+echo "RemoteDesk Agent installed. Generate a pairing code locally with:"
+echo "  sudo remotedesk-agentd pairing-code --allow-user YOUR_USER"
diff --git a/packaging/linux/package-deb.sh b/packaging/linux/package-deb.sh
new file mode 100644
index 0000000..ee65a2f
--- /dev/null
+++ b/packaging/linux/package-deb.sh
@@ -0,0 +1,46 @@
+#!/bin/sh
+set -eu
+
+repo_root=$(CDPATH= cd -- "$(dirname -- "$0")/../.." && pwd)
+artifacts_root="$repo_root/artifacts"
+build_root="$repo_root/target/package-linux-deb"
+package_id=$(cargo pkgid -p remotedesk-agent-runtime --manifest-path "$repo_root/Cargo.toml")
+version=${package_id##*@}
+arch=$(dpkg --print-architecture)
+package_root="$build_root/remotedesk-agent_${version}_${arch}"
+
+case "$build_root" in
+    "$repo_root"/target/*) ;;
+    *) echo "unsafe build directory: $build_root" >&2; exit 1 ;;
+esac
+
+rm -rf -- "$build_root"
+mkdir -p "$package_root/DEBIAN" "$package_root/usr/bin" "$package_root/usr/libexec" \
+    "$package_root/usr/lib/systemd/system" "$package_root/usr/lib/systemd/user" \
+    "$package_root/etc/remotedesk" "$package_root/usr/share/doc/remotedesk-agent" "$artifacts_root"
+
+cargo build --locked --release --manifest-path "$repo_root/Cargo.toml" -p remotedesk-agent-runtime
+CGO_ENABLED=0 go build -buildvcs=false -trimpath -ldflags '-s -w' \
+    -o "$package_root/usr/bin/remotedesk-hysteria2-agent" \
+    "$repo_root/transport/hysteria2-agent"
+install -m 0755 "$repo_root/target/release/remotedesk-agentd" "$package_root/usr/bin/"
+install -m 0755 "$repo_root/target/release/remotedesk-agent-session" "$package_root/usr/bin/"
+install -m 0755 "$repo_root/target/release/remotedesk-shell-session" "$package_root/usr/libexec/"
+install -m 0755 "$repo_root/target/release/remotedesk-file-session" "$package_root/usr/libexec/"
+install -m 0644 "$repo_root/packaging/linux/remotedesk-agentd.service" "$package_root/usr/lib/systemd/system/"
+install -m 0644 "$repo_root/packaging/linux/remotedesk-agent-session.service" "$package_root/usr/lib/systemd/user/"
+install -m 0644 "$repo_root/packaging/linux/remotedesk-hysteria2-agent.service" "$package_root/usr/lib/systemd/system/"
+install -m 0644 "$repo_root/packaging/linux/agent.env" "$package_root/etc/remotedesk/"
+install -m 0600 "$repo_root/packaging/linux/hysteria2-agent.env.example" "$package_root/etc/remotedesk/hysteria2-agent.env"
+install -m 0644 "$repo_root/packaging/linux/README.md" "$package_root/usr/share/doc/remotedesk-agent/README.md"
+
+sed -e "s/@VERSION@/$version/g" -e "s/@ARCH@/$arch/g" \
+    "$repo_root/packaging/linux/debian/control" > "$package_root/DEBIAN/control"
+for script in postinst prerm postrm; do
+    install -m 0755 "$repo_root/packaging/linux/debian/$script" "$package_root/DEBIAN/$script"
+done
+
+output="$artifacts_root/remotedesk-agent_${version}_${arch}.deb"
+dpkg-deb --root-owner-group --build "$package_root" "$output"
+sha256sum "$output" > "$output.sha256"
+printf 'Package: %s\n' "$output"
diff --git a/packaging/linux/package-hysteria2.sh b/packaging/linux/package-hysteria2.sh
new file mode 100644
index 0000000..719caff
--- /dev/null
+++ b/packaging/linux/package-hysteria2.sh
@@ -0,0 +1,14 @@
+#!/bin/sh
+set -eu
+
+repo_root=$(CDPATH= cd -- "$(dirname -- "$0")/../.." && pwd)
+output_dir=${1:-"$repo_root/artifacts/hysteria2-linux"}
+mkdir -p "$output_dir"
+CGO_ENABLED=0 go build -buildvcs=false -trimpath -ldflags '-s -w' \
+    -o "$output_dir/remotedesk-hysteria2-agent" \
+    "$repo_root/transport/hysteria2-agent"
+install -m 0644 "$repo_root/packaging/linux/remotedesk-hysteria2-agent.service" "$output_dir/"
+install -m 0644 "$repo_root/packaging/linux/hysteria2-agent.env.example" "$output_dir/"
+install -m 0644 "$repo_root/transport/hysteria2-agent/README.md" "$output_dir/README-hysteria2.md"
+sha256sum "$output_dir/remotedesk-hysteria2-agent" > "$output_dir/SHA256SUMS.txt"
+printf 'Hysteria2 package: %s\n' "$output_dir"
diff --git a/packaging/linux/package-musl.ps1 b/packaging/linux/package-musl.ps1
new file mode 100644
index 0000000..3b5fe44
--- /dev/null
+++ b/packaging/linux/package-musl.ps1
@@ -0,0 +1,177 @@
+[CmdletBinding()]
+param()
+
+$ErrorActionPreference = 'Stop'
+$repoRoot = [IO.Path]::GetFullPath((Join-Path $PSScriptRoot '..\..'))
+$targetRoot = Join-Path $repoRoot 'target'
+$artifactsRoot = Join-Path $repoRoot 'artifacts'
+$buildRoot = Join-Path $targetRoot 'package-linux-musl'
+$gnuTar = 'C:\Program Files\Git\usr\bin\tar.exe'
+$gzip = 'C:\Program Files\Git\usr\bin\gzip.exe'
+$fileTool = 'C:\Program Files\Git\usr\bin\file.exe'
+
+function Invoke-Checked {
+    param([Parameter(Mandatory)][scriptblock]$Command, [Parameter(Mandatory)][string]$Description)
+    & $Command
+    if ($LASTEXITCODE -ne 0) { throw "$Description failed with exit code $LASTEXITCODE" }
+}
+
+function Assert-PathWithin {
+    param([Parameter(Mandatory)][string]$Path, [Parameter(Mandatory)][string]$Root)
+    $fullPath = [IO.Path]::GetFullPath($Path)
+    $prefix = [IO.Path]::GetFullPath($Root).TrimEnd([IO.Path]::DirectorySeparatorChar) + [IO.Path]::DirectorySeparatorChar
+    if (-not $fullPath.StartsWith($prefix, [StringComparison]::OrdinalIgnoreCase)) {
+        throw "Refusing to modify a path outside $Root"
+    }
+}
+
+foreach ($tool in @($gnuTar, $gzip, $fileTool)) {
+    if (-not (Test-Path -LiteralPath $tool -PathType Leaf)) { throw "Required build tool is missing: $tool" }
+}
+
+$ndkRoot = if ($env:ANDROID_NDK_HOME) {
+    Split-Path -Parent ([IO.Path]::GetFullPath($env:ANDROID_NDK_HOME))
+} else {
+    Join-Path $env:LOCALAPPDATA 'Android\Sdk\ndk'
+}
+$ndk = Get-ChildItem -LiteralPath $ndkRoot -Directory -ErrorAction SilentlyContinue |
+    Sort-Object Name -Descending |
+    Where-Object { Test-Path -LiteralPath (Join-Path $_.FullName 'toolchains\llvm\prebuilt\windows-x86_64\bin\x86_64-linux-android21-clang.cmd') } |
+    Select-Object -First 1
+if ($null -eq $ndk) { throw 'Android NDK LLVM is required for the local musl build.' }
+$ndkBin = Join-Path $ndk.FullName 'toolchains\llvm\prebuilt\windows-x86_64\bin'
+$clang = Join-Path $ndkBin 'x86_64-linux-android21-clang.cmd'
+$llvmAr = Join-Path $ndkBin 'llvm-ar.exe'
+$llvmStrip = Join-Path $ndkBin 'llvm-strip.exe'
+$rustSysroot = (& rustc --print sysroot).Trim()
+if ($LASTEXITCODE -ne 0) { throw 'Unable to locate the active Rust sysroot.' }
+$rustHost = ((& rustc -vV | Select-String '^host: ').Line -replace '^host:\s*', '').Trim()
+$rustLld = Join-Path $rustSysroot "lib\rustlib\$rustHost\bin\rust-lld.exe"
+
+Push-Location $repoRoot
+try {
+    $metadata = cargo metadata --no-deps --format-version 1 | ConvertFrom-Json
+    if ($LASTEXITCODE -ne 0) { throw 'Unable to read Cargo workspace metadata.' }
+    $package = $metadata.packages | Where-Object name -eq 'remotedesk-agent-runtime' | Select-Object -First 1
+    $version = [string]$package.version
+    if ($version -notmatch '^\d+\.\d+\.\d+$') { throw "Invalid package version: $version" }
+
+    $env:CC_x86_64_unknown_linux_musl = $clang
+    $env:AR_x86_64_unknown_linux_musl = $llvmAr
+    $env:CARGO_TARGET_X86_64_UNKNOWN_LINUX_MUSL_LINKER = $rustLld
+    Invoke-Checked -Description 'Static Linux Agent build' -Command {
+        cargo build --locked --release --jobs 2 --target x86_64-unknown-linux-musl -p remotedesk-agent-runtime --no-default-features --features gstreamer-h264,wayland-eis
+    }
+    Invoke-Checked -Description 'Static Hysteria2 transport build' -Command {
+        $env:CGO_ENABLED = '0'
+        $env:GOOS = 'linux'
+        $env:GOARCH = 'amd64'
+        go build -buildvcs=false -trimpath -ldflags '-s -w' -o (Join-Path $targetRoot 'remotedesk-hysteria2-agent-linux') (Join-Path $repoRoot 'transport/hysteria2-agent')
+        Remove-Item Env:CGO_ENABLED, Env:GOOS, Env:GOARCH -ErrorAction SilentlyContinue
+    }
+
+    Assert-PathWithin -Path $buildRoot -Root $targetRoot
+    if (Test-Path -LiteralPath $buildRoot) { Remove-Item -LiteralPath $buildRoot -Recurse -Force }
+    New-Item -ItemType Directory -Force -Path $buildRoot, $artifactsRoot | Out-Null
+    $portableName = "RemoteDesk-Agent-$version-linux-x64"
+    $portableRoot = Join-Path $buildRoot $portableName
+    New-Item -ItemType Directory -Force -Path (Join-Path $portableRoot 'bin'), `
+        (Join-Path $portableRoot 'systemd'), (Join-Path $portableRoot 'config') | Out-Null
+    foreach ($binary in @('remotedesk-agentd', 'remotedesk-agent-session', 'remotedesk-shell-session', 'remotedesk-file-session')) {
+        $destination = Join-Path $portableRoot "bin\$binary"
+        Copy-Item -LiteralPath (Join-Path $targetRoot "x86_64-unknown-linux-musl\release\$binary") -Destination $destination
+        Invoke-Checked -Description "Strip $binary" -Command { & $llvmStrip $destination }
+    }
+    Copy-Item -LiteralPath (Join-Path $targetRoot 'remotedesk-hysteria2-agent-linux') -Destination (Join-Path $portableRoot 'bin/remotedesk-hysteria2-agent')
+    Invoke-Checked -Description 'Strip remotedesk-hysteria2-agent' -Command { & $llvmStrip (Join-Path $portableRoot 'bin/remotedesk-hysteria2-agent') }
+    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'remotedesk-agentd.service') -Destination (Join-Path $portableRoot 'systemd')
+    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'remotedesk-hysteria2-agent.service') -Destination (Join-Path $portableRoot 'systemd')
+    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'hysteria2-agent.env.example') -Destination (Join-Path $portableRoot 'config/hysteria2-agent.env')
+    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'remotedesk-agent-session.service') -Destination (Join-Path $portableRoot 'systemd')
+    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'agent.env') -Destination (Join-Path $portableRoot 'config')
+    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'install.sh') -Destination $portableRoot
+    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'uninstall.sh') -Destination $portableRoot
+    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'README.md') -Destination $portableRoot
+
+    $hashLines = Get-ChildItem -LiteralPath $portableRoot -Recurse -File | Sort-Object FullName | ForEach-Object {
+        $relative = [IO.Path]::GetRelativePath($portableRoot, $_.FullName).Replace('\', '/')
+        $hash = (Get-FileHash -LiteralPath $_.FullName -Algorithm SHA256).Hash.ToLowerInvariant()
+        "$hash  $relative"
+    }
+    $hashLines | Set-Content -LiteralPath (Join-Path $portableRoot 'SHA256SUMS.txt') -Encoding ascii
+
+    $portableTar = Join-Path $buildRoot "$portableName.tar"
+    $portableGzip = "$portableTar.gz"
+    $portableDirectories = @($portableName, "$portableName/bin", "$portableName/config", "$portableName/systemd")
+    $portableExecutables = @("$portableName/install.sh", "$portableName/uninstall.sh", "$portableName/bin/remotedesk-agentd", "$portableName/bin/remotedesk-agent-session", "$portableName/bin/remotedesk-shell-session", "$portableName/bin/remotedesk-file-session", "$portableName/bin/remotedesk-hysteria2-agent")
+    $portableData = @("$portableName/README.md", "$portableName/SHA256SUMS.txt", "$portableName/config/agent.env", "$portableName/config/hysteria2-agent.env", "$portableName/systemd/remotedesk-agentd.service", "$portableName/systemd/remotedesk-hysteria2-agent.service", "$portableName/systemd/remotedesk-agent-session.service")
+    Push-Location $buildRoot
+    try {
+        Invoke-Checked -Description 'Portable directory archive' -Command { & $gnuTar --force-local --no-recursion --format=gnu --owner=0 --group=0 --mode=0755 -cf $portableTar @portableDirectories }
+        Invoke-Checked -Description 'Portable executable archive' -Command { & $gnuTar --force-local --format=gnu --owner=0 --group=0 --mode=0755 -rf $portableTar @portableExecutables }
+        Invoke-Checked -Description 'Portable data archive' -Command { & $gnuTar --force-local --format=gnu --owner=0 --group=0 --mode=0644 -rf $portableTar @portableData }
+    } finally { Pop-Location }
+    Invoke-Checked -Description 'Portable gzip compression' -Command { & $gzip -n -f $portableTar }
+    $portableOutput = Join-Path $artifactsRoot "$portableName.tar.gz"
+    Move-Item -LiteralPath $portableGzip -Destination $portableOutput -Force
+
+    $debianRoot = Join-Path $buildRoot 'debian-root'
+    New-Item -ItemType Directory -Force -Path (Join-Path $debianRoot 'DEBIAN'), `
+        (Join-Path $debianRoot 'usr\bin'), (Join-Path $debianRoot 'usr\libexec'), `
+        (Join-Path $debianRoot 'usr\lib\systemd\system'), (Join-Path $debianRoot 'usr\lib\systemd\user'), `
+        (Join-Path $debianRoot 'etc\remotedesk'), (Join-Path $debianRoot 'usr\share\doc\remotedesk-agent') | Out-Null
+    Copy-Item -LiteralPath (Join-Path $portableRoot 'bin\remotedesk-agentd') -Destination (Join-Path $debianRoot 'usr\bin')
+    Copy-Item -LiteralPath (Join-Path $portableRoot 'bin\remotedesk-agent-session') -Destination (Join-Path $debianRoot 'usr\bin')
+    Copy-Item -LiteralPath (Join-Path $portableRoot 'bin\remotedesk-shell-session') -Destination (Join-Path $debianRoot 'usr\libexec')
+    Copy-Item -LiteralPath (Join-Path $portableRoot 'bin\remotedesk-file-session') -Destination (Join-Path $debianRoot 'usr\libexec')
+    Copy-Item -LiteralPath (Join-Path $portableRoot 'bin\remotedesk-hysteria2-agent') -Destination (Join-Path $debianRoot 'usr\bin')
+    Copy-Item -LiteralPath (Join-Path $portableRoot 'systemd\remotedesk-agentd.service') -Destination (Join-Path $debianRoot 'usr\lib\systemd\system')
+    Copy-Item -LiteralPath (Join-Path $portableRoot 'systemd\remotedesk-agent-session.service') -Destination (Join-Path $debianRoot 'usr\lib\systemd\user')
+    Copy-Item -LiteralPath (Join-Path $portableRoot 'systemd\remotedesk-hysteria2-agent.service') -Destination (Join-Path $debianRoot 'usr\lib\systemd\system')
+    Copy-Item -LiteralPath (Join-Path $portableRoot 'config\agent.env') -Destination (Join-Path $debianRoot 'etc\remotedesk')
+    Copy-Item -LiteralPath (Join-Path $portableRoot 'config\hysteria2-agent.env') -Destination (Join-Path $debianRoot 'etc\remotedesk')
+    Copy-Item -LiteralPath (Join-Path $portableRoot 'README.md') -Destination (Join-Path $debianRoot 'usr\share\doc\remotedesk-agent\README.md')
+    $control = (Get-Content -LiteralPath (Join-Path $PSScriptRoot 'debian\control') -Raw).Replace('@VERSION@', $version).Replace('@ARCH@', 'amd64')
+    $control = $control.Replace(', gstreamer1.0-plugins-base, gstreamer1.0-plugins-good, gstreamer1.0-plugins-bad, gstreamer1.0-plugins-ugly', '')
+    [IO.File]::WriteAllText((Join-Path $debianRoot 'DEBIAN\control'), $control.Replace("`r`n", "`n"), [Text.UTF8Encoding]::new($false))
+    foreach ($script in @('postinst', 'prerm', 'postrm')) {
+        Copy-Item -LiteralPath (Join-Path $PSScriptRoot "debian\$script") -Destination (Join-Path $debianRoot "DEBIAN\$script")
+    }
+
+    $debParts = Join-Path $buildRoot 'deb-parts'
+    New-Item -ItemType Directory -Force -Path $debParts | Out-Null
+    [IO.File]::WriteAllText((Join-Path $debParts 'debian-binary'), "2.0`n", [Text.Encoding]::ASCII)
+    $controlTar = Join-Path $debParts 'control.tar'
+    Push-Location (Join-Path $debianRoot 'DEBIAN')
+    try {
+        Invoke-Checked -Description 'DEB control archive' -Command { & $gnuTar --force-local --format=gnu --owner=0 --group=0 --mode=0644 -cf $controlTar control }
+        Invoke-Checked -Description 'DEB maintainer scripts' -Command { & $gnuTar --force-local --format=gnu --owner=0 --group=0 --mode=0755 -rf $controlTar postinst prerm postrm }
+    } finally { Pop-Location }
+    Invoke-Checked -Description 'DEB control compression' -Command { & $gzip -n -f $controlTar }
+    $dataTar = Join-Path $debParts 'data.tar'
+    $execFiles = @('./usr/bin/remotedesk-agentd', './usr/bin/remotedesk-agent-session', './usr/bin/remotedesk-hysteria2-agent', './usr/libexec/remotedesk-shell-session', './usr/libexec/remotedesk-file-session')
+    $dataFiles = @('./usr/lib/systemd/system/remotedesk-agentd.service', './usr/lib/systemd/system/remotedesk-hysteria2-agent.service', './usr/lib/systemd/user/remotedesk-agent-session.service', './etc/remotedesk/agent.env', './etc/remotedesk/hysteria2-agent.env', './usr/share/doc/remotedesk-agent/README.md')
+    Push-Location $debianRoot
+    try {
+        Invoke-Checked -Description 'DEB executable payload' -Command { & $gnuTar --force-local --format=gnu --owner=0 --group=0 --mode=0755 -cf $dataTar @execFiles }
+        Invoke-Checked -Description 'DEB data payload' -Command { & $gnuTar --force-local --format=gnu --owner=0 --group=0 --mode=0644 -rf $dataTar @dataFiles }
+    } finally { Pop-Location }
+    Invoke-Checked -Description 'DEB data compression' -Command { & $gzip -n -f $dataTar }
+    $debOutput = Join-Path $artifactsRoot "remotedesk-agent_${version}_amd64-musl.deb"
+    Push-Location $debParts
+    try {
+        Invoke-Checked -Description 'DEB ar archive' -Command { & $llvmAr rc $debOutput debian-binary control.tar.gz data.tar.gz }
+    } finally { Pop-Location }
+
+    foreach ($output in @($portableOutput, $debOutput)) {
+        $hash = (Get-FileHash -LiteralPath $output -Algorithm SHA256).Hash.ToLowerInvariant()
+        "$hash  $([IO.Path]::GetFileName($output))" | Set-Content -LiteralPath "$output.sha256" -Encoding ascii
+        Write-Output "Package: $output"
+        Write-Output "SHA256: $hash"
+    }
+} finally {
+    Remove-Item Env:CC_x86_64_unknown_linux_musl -ErrorAction SilentlyContinue
+    Remove-Item Env:AR_x86_64_unknown_linux_musl -ErrorAction SilentlyContinue
+    Remove-Item Env:CARGO_TARGET_X86_64_UNKNOWN_LINUX_MUSL_LINKER -ErrorAction SilentlyContinue
+    Pop-Location
+}
diff --git a/packaging/linux/package-rpm.sh b/packaging/linux/package-rpm.sh
new file mode 100644
index 0000000..70f220d
--- /dev/null
+++ b/packaging/linux/package-rpm.sh
@@ -0,0 +1,36 @@
+#!/bin/sh
+set -eu
+
+repo_root=$(CDPATH= cd -- "$(dirname -- "$0")/../.." && pwd)
+artifacts_root="$repo_root/artifacts"
+build_root="$repo_root/target/package-linux-rpm"
+package_id=$(cargo pkgid -p remotedesk-agent-runtime --manifest-path "$repo_root/Cargo.toml")
+version=${package_id##*@}
+
+case "$build_root" in
+    "$repo_root"/target/*) ;;
+    *) echo "unsafe build directory: $build_root" >&2; exit 1 ;;
+esac
+
+rm -rf -- "$build_root"
+mkdir -p "$build_root/BUILD" "$build_root/BUILDROOT" "$build_root/RPMS" \
+    "$build_root/SOURCES" "$build_root/SPECS" "$build_root/SRPMS" "$artifacts_root"
+cargo build --locked --release --manifest-path "$repo_root/Cargo.toml" -p remotedesk-agent-runtime
+install -m 0755 "$repo_root/target/release/remotedesk-agentd" "$build_root/SOURCES/"
+install -m 0755 "$repo_root/target/release/remotedesk-agent-session" "$build_root/SOURCES/"
+install -m 0755 "$repo_root/target/release/remotedesk-shell-session" "$build_root/SOURCES/"
+install -m 0755 "$repo_root/target/release/remotedesk-file-session" "$build_root/SOURCES/"
+install -m 0644 "$repo_root/packaging/linux/remotedesk-agentd.service" "$build_root/SOURCES/"
+install -m 0644 "$repo_root/packaging/linux/remotedesk-agent-session.service" "$build_root/SOURCES/"
+install -m 0644 "$repo_root/packaging/linux/agent.env" "$build_root/SOURCES/"
+install -m 0644 "$repo_root/packaging/linux/README.md" "$build_root/SOURCES/"
+install -m 0644 "$repo_root/packaging/linux/remotedesk-agent.spec" "$build_root/SPECS/"
+
+rpmbuild --define "_topdir $build_root" --define "_unitdir /usr/lib/systemd/system" \
+    --define "_userunitdir /usr/lib/systemd/user" --define "version $version" \
+    -bb "$build_root/SPECS/remotedesk-agent.spec"
+find "$build_root/RPMS" -type f -name '*.rpm' -exec cp {} "$artifacts_root/" \;
+for output in "$artifacts_root"/remotedesk-agent-"$version"-*.rpm; do
+    sha256sum "$output" > "$output.sha256"
+    printf 'Package: %s\n' "$output"
+done
diff --git a/packaging/linux/remotedesk-agent-session.service b/packaging/linux/remotedesk-agent-session.service
new file mode 100644
index 0000000..4b92d7f
--- /dev/null
+++ b/packaging/linux/remotedesk-agent-session.service
@@ -0,0 +1,20 @@
+[Unit]
+Description=RemoteDesk graphical user-session agent
+PartOf=graphical-session.target
+After=graphical-session-pre.target
+
+[Service]
+Type=simple
+ExecStart=/usr/bin/remotedesk-agent-session serve --ipc-socket /run/remotedesk/agentd.sock
+Restart=on-failure
+RestartSec=5s
+NoNewPrivileges=yes
+PrivateTmp=yes
+BindReadOnlyPaths=-/tmp/.X11-unix
+ProtectSystem=strict
+ProtectHome=read-only
+RestrictAddressFamilies=AF_UNIX
+LockPersonality=yes
+
+[Install]
+WantedBy=default.target
diff --git a/packaging/linux/remotedesk-agent.spec b/packaging/linux/remotedesk-agent.spec
new file mode 100644
index 0000000..09e01ae
--- /dev/null
+++ b/packaging/linux/remotedesk-agent.spec
@@ -0,0 +1,51 @@
+Name: remotedesk-agent
+Version: %{version}
+Release: 1%{?dist}
+Summary: RemoteDesk Linux controlled endpoint
+License: MIT OR Apache-2.0
+URL: https://github.com/remotedesk/remotedesk
+Requires: pam, systemd, util-linux
+Requires: gstreamer1-plugins-base, gstreamer1-plugins-good, gstreamer1-plugins-bad-free
+
+%description
+RemoteDesk Agent provides authenticated device pairing, user-session IPC,
+and PAM-backed PTY terminal sessions for the RemoteDesk Windows controller.
+
+%install
+install -d %{buildroot}%{_bindir} %{buildroot}%{_libexecdir} \
+    %{buildroot}%{_unitdir} %{buildroot}%{_userunitdir} \
+    %{buildroot}%{_sysconfdir}/remotedesk %{buildroot}%{_docdir}/%{name}
+install -m 0755 %{_sourcedir}/remotedesk-agentd %{buildroot}%{_bindir}/
+install -m 0755 %{_sourcedir}/remotedesk-agent-session %{buildroot}%{_bindir}/
+install -m 0755 %{_sourcedir}/remotedesk-shell-session %{buildroot}%{_libexecdir}/
+install -m 0755 %{_sourcedir}/remotedesk-file-session %{buildroot}%{_libexecdir}/
+install -m 0644 %{_sourcedir}/remotedesk-agentd.service %{buildroot}%{_unitdir}/
+install -m 0644 %{_sourcedir}/remotedesk-agent-session.service %{buildroot}%{_userunitdir}/
+install -m 0644 %{_sourcedir}/agent.env %{buildroot}%{_sysconfdir}/remotedesk/
+install -m 0644 %{_sourcedir}/README.md %{buildroot}%{_docdir}/%{name}/
+
+%post
+systemctl daemon-reload >/dev/null 2>&1 || :
+systemctl enable remotedesk-agentd.service >/dev/null 2>&1 || :
+systemctl restart remotedesk-agentd.service >/dev/null 2>&1 || :
+systemctl --global enable remotedesk-agent-session.service >/dev/null 2>&1 || :
+
+%preun
+if [ "$1" -eq 0 ]; then
+    systemctl stop remotedesk-agentd.service >/dev/null 2>&1 || :
+    systemctl disable remotedesk-agentd.service >/dev/null 2>&1 || :
+    systemctl --global disable remotedesk-agent-session.service >/dev/null 2>&1 || :
+fi
+
+%postun
+systemctl daemon-reload >/dev/null 2>&1 || :
+
+%files
+%doc %{_docdir}/%{name}/README.md
+%{_bindir}/remotedesk-agentd
+%{_bindir}/remotedesk-agent-session
+%{_libexecdir}/remotedesk-shell-session
+%{_libexecdir}/remotedesk-file-session
+%{_unitdir}/remotedesk-agentd.service
+%{_userunitdir}/remotedesk-agent-session.service
+%config(noreplace) %{_sysconfdir}/remotedesk/agent.env
diff --git a/packaging/linux/remotedesk-agentd.service b/packaging/linux/remotedesk-agentd.service
new file mode 100644
index 0000000..f1899ae
--- /dev/null
+++ b/packaging/linux/remotedesk-agentd.service
@@ -0,0 +1,36 @@
+[Unit]
+Description=RemoteDesk controlled endpoint daemon
+Documentation=https://github.com/remotedesk/remotedesk
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+Environment=REMOTEDESK_LISTEN=0.0.0.0:39500
+Environment=REMOTEDESK_SHELL_HELPER=/usr/libexec/remotedesk-shell-session
+Environment=REMOTEDESK_FILE_HELPER=/usr/libexec/remotedesk-file-session
+EnvironmentFile=-/etc/remotedesk/agent.env
+ExecStart=/usr/bin/remotedesk-agentd serve --listen ${REMOTEDESK_LISTEN} --ipc-socket /run/remotedesk/agentd.sock
+Restart=on-failure
+RestartSec=3s
+StateDirectory=remotedesk
+StateDirectoryMode=0700
+RuntimeDirectory=remotedesk
+RuntimeDirectoryMode=0755
+UMask=0077
+NoNewPrivileges=yes
+PrivateTmp=yes
+ProtectClock=yes
+ProtectControlGroups=yes
+ProtectHostname=yes
+ProtectKernelLogs=yes
+ProtectKernelModules=yes
+ProtectKernelTunables=yes
+ProtectSystem=strict
+ReadWritePaths=/var/lib/remotedesk /run/remotedesk -/home
+RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
+LockPersonality=yes
+MemoryDenyWriteExecute=yes
+
+[Install]
+WantedBy=multi-user.target
diff --git a/packaging/linux/remotedesk-hysteria2-agent.service b/packaging/linux/remotedesk-hysteria2-agent.service
new file mode 100644
index 0000000..b0dc763
--- /dev/null
+++ b/packaging/linux/remotedesk-hysteria2-agent.service
@@ -0,0 +1,20 @@
+[Unit]
+Description=RemoteDesk Hysteria2 UDP transport
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+EnvironmentFile=/etc/remotedesk/hysteria2-agent.env
+ExecStart=/usr/bin/remotedesk-hysteria2-agent
+Restart=on-failure
+RestartSec=3s
+NoNewPrivileges=yes
+PrivateTmp=yes
+ProtectSystem=strict
+ProtectHome=read-only
+ReadWritePaths=/var/lib/remotedesk
+RestrictAddressFamilies=AF_INET AF_INET6
+
+[Install]
+WantedBy=multi-user.target
diff --git a/packaging/linux/uninstall.sh b/packaging/linux/uninstall.sh
new file mode 100644
index 0000000..c98536d
--- /dev/null
+++ b/packaging/linux/uninstall.sh
@@ -0,0 +1,19 @@
+#!/bin/sh
+set -eu
+
+if [ "$(id -u)" -ne 0 ]; then
+    echo "RemoteDesk Agent removal requires root." >&2
+    exit 1
+fi
+
+systemctl disable --now remotedesk-agentd.service 2>/dev/null || true
+systemctl --global disable remotedesk-agent-session.service 2>/dev/null || true
+rm -f /usr/bin/remotedesk-agentd /usr/bin/remotedesk-agent-session
+rm -f /usr/libexec/remotedesk-shell-session
+rm -f /usr/libexec/remotedesk-file-session
+rm -f /usr/lib/systemd/system/remotedesk-agentd.service
+rm -f /usr/lib/systemd/user/remotedesk-agent-session.service
+rm -f /usr/share/doc/remotedesk-agent/README.md
+systemctl daemon-reload 2>/dev/null || true
+
+echo "RemoteDesk Agent removed. /etc/remotedesk and /var/lib/remotedesk were preserved."
diff --git a/packaging/linux/verify-file-resume.sh b/packaging/linux/verify-file-resume.sh
new file mode 100644
index 0000000..204a814
--- /dev/null
+++ b/packaging/linux/verify-file-resume.sh
@@ -0,0 +1,45 @@
+#!/bin/sh
+set -eu
+
+helper=${1:-target/debug/remotedesk-file-session}
+case "$helper" in
+    /*) ;;
+    *) helper=$(CDPATH= cd -- "$(dirname -- "$helper")" && pwd)/$(basename -- "$helper") ;;
+esac
+if [ ! -x "$helper" ]; then
+    echo "file helper is not executable: $helper" >&2
+    exit 1
+fi
+
+work=$(mktemp -d)
+trap 'rm -rf "$work"' EXIT
+export HOME="$work/home"
+mkdir -p "$HOME/Documents"
+content=abcdefghij
+sha256=$(printf %s "$content" | sha256sum | cut -d ' ' -f 1)
+transfer_id=0123456789abcdef0123456789abcdef
+
+if printf abcd | "$helper" upload Documents/report.bin 10 "$sha256" "$transfer_id" \
+    >"$work/first.out" 2>"$work/first.err"; then
+    echo "interrupted upload unexpectedly completed" >&2
+    exit 1
+fi
+grep -q '"offset":0' "$work/first.out"
+partial="$HOME/Documents/.report.bin.remotedesk-$transfer_id.part"
+test "$(cat "$partial")" = abcd
+
+printf efghij | "$helper" upload Documents/report.bin 10 "$sha256" "$transfer_id" \
+    >"$work/second.out"
+grep -q '"offset":4' "$work/second.out"
+test "$(cat "$HOME/Documents/report.bin")" = "$content"
+test ! -e "$partial"
+
+"$helper" download Documents/report.bin 4 >"$work/download.out"
+header=$(sed -n '1p' "$work/download.out")
+grep -q '"size":10' "$work/download.out"
+grep -q "\"sha256\":\"$sha256\"" "$work/download.out"
+header_bytes=$((${#header} + 1))
+tail -c "+$((header_bytes + 1))" "$work/download.out" >"$work/remainder"
+test "$(cat "$work/remainder")" = efghij
+
+echo "Linux upload and download resume verification passed"
diff --git a/packaging/windows-host/Configure-RemoteDeskHost.ps1 b/packaging/windows-host/Configure-RemoteDeskHost.ps1
new file mode 100644
index 0000000..7cc7dd9
--- /dev/null
+++ b/packaging/windows-host/Configure-RemoteDeskHost.ps1
@@ -0,0 +1,78 @@
+[CmdletBinding()]
+param(
+    [ValidateSet('Status', 'Enable', 'Restore')]
+    [string]$Action = 'Status',
+    [switch]$AcceptRemoteDesktopChanges,
+    [switch]$Uninstall,
+    [switch]$Json
+)
+
+$ErrorActionPreference = 'Stop'
+Import-Module (Join-Path $PSScriptRoot 'RemoteDeskHost.psm1') -Force
+
+function Invoke-Elevated {
+    param([Parameter(Mandatory)][string]$ElevatedAction)
+
+    $arguments = @(
+        '-NoProfile',
+        '-ExecutionPolicy', 'Bypass',
+        '-File', ('"{0}"' -f $PSCommandPath),
+        '-Action', $ElevatedAction,
+        '-AcceptRemoteDesktopChanges'
+    )
+    $process = Start-Process -FilePath 'powershell.exe' -ArgumentList $arguments -Verb RunAs -Wait -PassThru
+    exit $process.ExitCode
+}
+
+function Write-Status {
+    param([Parameter(Mandatory)]$Status)
+
+    if ($Json) {
+        $Status | ConvertTo-Json -Depth 6
+        return
+    }
+    $Status | Format-List supported, productName, editionId, administrator, rdpEnabled,
+        nlaEnabled, termServiceState, termServiceStartMode, firewallReady, backupPresent, ready
+}
+
+try {
+    switch ($Action) {
+        'Status' {
+            Write-Status (Get-RemoteDeskHostStatus)
+        }
+        'Enable' {
+            if (-not $AcceptRemoteDesktopChanges) {
+                Write-Host 'This will enable Microsoft Remote Desktop, require NLA, start TermService, and enable the built-in RDP firewall rules.'
+                Write-Host 'RemoteDesk does not create users or store passwords.'
+                if ((Read-Host 'Type ENABLE to continue') -cne 'ENABLE') {
+                    Write-Host 'No changes were made.'
+                    exit 2
+                }
+            }
+            if (-not (Test-RemoteDeskAdministrator)) {
+                Invoke-Elevated -ElevatedAction Enable
+            }
+            Write-Status (Enable-RemoteDeskHost -Confirm:$false)
+        }
+        'Restore' {
+            if (-not $Uninstall -and -not $AcceptRemoteDesktopChanges) {
+                Write-Host 'This will restore the RDP, NLA, firewall, and service state saved before RemoteDesk configured this computer.'
+                if ((Read-Host 'Type RESTORE to continue') -cne 'RESTORE') {
+                    Write-Host 'No changes were made.'
+                    exit 2
+                }
+            }
+            if (-not (Test-RemoteDeskAdministrator)) {
+                if ($Uninstall) {
+                    throw 'The MSI uninstall rollback must run with administrator privileges.'
+                }
+                Invoke-Elevated -ElevatedAction Restore
+            }
+            Write-Status (Restore-RemoteDeskHost -Confirm:$false)
+        }
+    }
+    exit 0
+} catch {
+    Write-Error $_
+    exit 1
+}
diff --git a/packaging/windows-host/README.md b/packaging/windows-host/README.md
new file mode 100644
index 0000000..c6f0e82
--- /dev/null
+++ b/packaging/windows-host/README.md
@@ -0,0 +1,23 @@
+# RemoteDesk Windows Host
+
+RemoteDesk Host configures the Microsoft Remote Desktop service already included with supported Windows editions and installs the separate RemoteDesk Windows Agent capability probe. The Agent is a native capture/input path and does not use RDP; its full authenticated session runtime is not yet enabled by this package.
+
+For a no-install portable package, run `package-portable-host.ps1`. Extract the generated ZIP and double-click `RemoteDesk-Host.exe`. It requests administrator permission and enables Remote Desktop directly; no MSI installation or service registration is required.
+
+Installation does not change RDP, firewall, NLA, or service settings. Open **Configure RemoteDesk Host** from the Start menu, review the change summary, and type `ENABLE`. Windows then displays an administrator elevation prompt.
+
+The configuration action:
+
+- rejects Windows Home/Core editions that cannot host Microsoft RDP;
+- saves the original RDP, NLA, TermService, and built-in firewall-rule state once;
+- enables Remote Desktop and the built-in TCP/UDP firewall rules;
+- keeps Network Level Authentication enabled;
+- starts TermService, changing a disabled service to manual start only when required.
+
+Use **RemoteDesk Host Status** for a read-only readiness check. Use **Restore pre-RemoteDesk settings** to restore the saved state. A normal MSI uninstall also restores it; a major-version upgrade preserves the active configuration and backup.
+
+Use **RemoteDesk Windows Agent Status** to inspect the native Agent backend. It reports Desktop Duplication/D3D11 capture and Windows SendInput support. `Run` is intentionally unavailable until the authenticated native session transport is installed.
+
+To enable the Windows Agent application's connection mode, create `%ProgramData%\RemoteDesk\Host\applications.json` using the format documented in `docs/windows-agent-applications.md`. The controller only sends configured application IDs; it does not accept arbitrary executable paths.
+
+Local and ordinary CI packages are intentionally unsigned. `package-host.ps1` accepts `-SigningCertificateThumbprint` and `-TimestampUrl`; that production path signs and verifies both PowerShell payloads before WiX, then signs and verifies the final MSI before hashing. The protected Windows release workflow requires this path.
diff --git a/packaging/windows-host/RemoteDesk-Host.cmd b/packaging/windows-host/RemoteDesk-Host.cmd
new file mode 100644
index 0000000..c66f392
--- /dev/null
+++ b/packaging/windows-host/RemoteDesk-Host.cmd
@@ -0,0 +1,11 @@
+@echo off
+setlocal
+set "SCRIPT=%~dp0Configure-RemoteDeskHost.ps1"
+if not exist "%SCRIPT%" (
+  echo Configure-RemoteDeskHost.ps1 is missing.
+  exit /b 1
+)
+powershell.exe -NoProfile -ExecutionPolicy Bypass -File "%SCRIPT%" -Action Enable -AcceptRemoteDesktopChanges
+set "EXITCODE=%ERRORLEVEL%"
+if not "%EXITCODE%"=="0" pause
+exit /b %EXITCODE%
diff --git a/packaging/windows-host/RemoteDesk-Host.cs b/packaging/windows-host/RemoteDesk-Host.cs
new file mode 100644
index 0000000..10aae57
--- /dev/null
+++ b/packaging/windows-host/RemoteDesk-Host.cs
@@ -0,0 +1,83 @@
+using System;
+using System.Diagnostics;
+using System.IO;
+using System.Security.Principal;
+using System.Windows.Forms;
+
+internal static class Program
+{
+    [STAThread]
+    private static int Main()
+    {
+        string root = AppDomain.CurrentDomain.BaseDirectory;
+        string script = Path.Combine(root, "Configure-RemoteDeskHost.ps1");
+        if (!File.Exists(script))
+        {
+            MessageBox.Show("Configure-RemoteDeskHost.ps1 is missing.", "RemoteDesk Host", MessageBoxButtons.OK, MessageBoxIcon.Error);
+            return 1;
+        }
+
+        var info = new ProcessStartInfo("powershell.exe")
+        {
+            UseShellExecute = true,
+            Verb = "runas",
+            WorkingDirectory = root,
+            Arguments = "-NoExit -NoProfile -ExecutionPolicy Bypass -File \"" + script + "\" -Action Enable -AcceptRemoteDesktopChanges"
+        };
+        try
+        {
+            string agent = Path.Combine(root, "remotedesk-windows-agent.exe");
+            if (File.Exists(agent))
+            {
+                StopPreviousAgent(agent);
+                Process.Start(new ProcessStartInfo(agent, "serve --listen 0.0.0.0:39501")
+                {
+                    WorkingDirectory = root,
+                    UseShellExecute = false,
+                    CreateNoWindow = true,
+                    WindowStyle = ProcessWindowStyle.Hidden
+                });
+            }
+            using (var process = Process.Start(info))
+            {
+                process.WaitForExit();
+                return process.ExitCode;
+            }
+        }
+        catch (System.ComponentModel.Win32Exception ex)
+        {
+            if (ex.NativeErrorCode == 1223) return 1223;
+            MessageBox.Show(ex.Message, "RemoteDesk Host", MessageBoxButtons.OK, MessageBoxIcon.Error);
+            return 1;
+        }
+        catch (Exception ex)
+        {
+            MessageBox.Show(ex.Message, "RemoteDesk Host", MessageBoxButtons.OK, MessageBoxIcon.Error);
+            return 1;
+        }
+    }
+
+    private static void StopPreviousAgent(string agentPath)
+    {
+        string expected = Path.GetFullPath(agentPath);
+        foreach (var process in Process.GetProcessesByName("remotedesk-windows-agent"))
+        {
+            try
+            {
+                string runningPath = process.MainModule == null ? string.Empty : process.MainModule.FileName;
+                if (!string.Equals(Path.GetFullPath(runningPath), expected, StringComparison.OrdinalIgnoreCase))
+                    continue;
+                process.Kill();
+                process.WaitForExit(3000);
+            }
+            catch (Exception)
+            {
+                // The new process will report a useful bind error if an old instance cannot be stopped.
+            }
+            finally
+            {
+                process.Dispose();
+            }
+        }
+    }
+}
diff --git a/packaging/windows-host/RemoteDesk-Host.manifest b/packaging/windows-host/RemoteDesk-Host.manifest
new file mode 100644
index 0000000..1b00bf6
--- /dev/null
+++ b/packaging/windows-host/RemoteDesk-Host.manifest
@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
+<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
+  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
+    <security>
+      <requestedPrivileges>
+        <requestedExecutionLevel level="requireAdministrator" uiAccess="false" />
+      </requestedPrivileges>
+    </security>
+  </trustInfo>
+</assembly>
diff --git a/packaging/windows-host/RemoteDeskHost.psm1 b/packaging/windows-host/RemoteDeskHost.psm1
new file mode 100644
index 0000000..2aded7c
--- /dev/null
+++ b/packaging/windows-host/RemoteDeskHost.psm1
@@ -0,0 +1,232 @@
+Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
+
+$script:TerminalServerKey = 'HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server'
+$script:RdpTcpKey = 'HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp'
+$script:CurrentVersionKey = 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion'
+$script:FirewallRuleNames = @(
+    'RemoteDesktop-UserMode-In-TCP',
+    'RemoteDesktop-UserMode-In-UDP'
+)
+
+function Get-RemoteDeskHostStatePath {
+    [CmdletBinding()]
+    param()
+
+    $programData = [Environment]::GetFolderPath([Environment+SpecialFolder]::CommonApplicationData)
+    Join-Path $programData 'RemoteDesk\Host\original-state.json'
+}
+
+function Test-RemoteDeskAdministrator {
+    [CmdletBinding()]
+    param()
+
+    $identity = [Security.Principal.WindowsIdentity]::GetCurrent()
+    $principal = [Security.Principal.WindowsPrincipal]::new($identity)
+    $principal.IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)
+}
+
+function Get-RegistryValueSnapshot {
+    param(
+        [Parameter(Mandatory)][string]$Path,
+        [Parameter(Mandatory)][string]$Name
+    )
+
+    $key = Get-Item -LiteralPath $Path -ErrorAction Stop
+    $exists = $null -ne $key.GetValue($Name, $null, [Microsoft.Win32.RegistryValueOptions]::DoNotExpandEnvironmentNames)
+    [ordered]@{
+        path = $Path
+        name = $Name
+        exists = $exists
+        value = if ($exists) { [int]$key.GetValue($Name) } else { $null }
+    }
+}
+
+function Get-RemoteDesktopFirewallRules {
+    $rules = foreach ($name in $script:FirewallRuleNames) {
+        $rule = Get-NetFirewallRule -Name $name -ErrorAction SilentlyContinue
+        if ($null -ne $rule) {
+            [ordered]@{
+                name = $rule.Name
+                enabled = [string]$rule.Enabled
+            }
+        }
+    }
+    @($rules)
+}
+
+function Get-RemoteDeskHostStatus {
+    [CmdletBinding()]
+    param()
+
+    if ($env:OS -ne 'Windows_NT') {
+        throw 'RemoteDesk Windows Host can only run on Windows.'
+    }
+
+    $currentVersion = Get-ItemProperty -LiteralPath $script:CurrentVersionKey
+    $editionId = [string]$currentVersion.EditionID
+    $productName = [string]$currentVersion.ProductName
+    $unsupportedEdition = $editionId -match '^(Core|Starter|Cloud)'
+    $rdpEnabled = (Get-ItemPropertyValue -LiteralPath $script:TerminalServerKey -Name fDenyTSConnections) -eq 0
+    $nlaEnabled = (Get-ItemPropertyValue -LiteralPath $script:RdpTcpKey -Name UserAuthentication) -eq 1
+    $service = Get-CimInstance Win32_Service -Filter "Name='TermService'"
+    $firewallRules = @(Get-RemoteDesktopFirewallRules)
+    $firewallReady = $firewallRules.Count -gt 0 -and @($firewallRules | Where-Object enabled -ne 'True').Count -eq 0
+    $statePath = Get-RemoteDeskHostStatePath
+
+    [pscustomobject][ordered]@{
+        supported = -not $unsupportedEdition
+        productName = $productName
+        editionId = $editionId
+        administrator = Test-RemoteDeskAdministrator
+        rdpEnabled = $rdpEnabled
+        nlaEnabled = $nlaEnabled
+        termServiceState = [string]$service.State
+        termServiceStartMode = [string]$service.StartMode
+        firewallReady = $firewallReady
+        firewallRules = $firewallRules
+        backupPresent = Test-Path -LiteralPath $statePath -PathType Leaf
+        ready = (-not $unsupportedEdition) -and $rdpEnabled -and $nlaEnabled -and
+            $service.State -eq 'Running' -and $firewallReady
+    }
+}
+
+function Save-RemoteDeskOriginalState {
+    [CmdletBinding()]
+    param()
+
+    $statePath = Get-RemoteDeskHostStatePath
+    if (Test-Path -LiteralPath $statePath -PathType Leaf) {
+        return $statePath
+    }
+
+    $service = Get-CimInstance Win32_Service -Filter "Name='TermService'"
+    $state = [ordered]@{
+        schema = 1
+        capturedAtUtc = [DateTime]::UtcNow.ToString('o')
+        rdp = Get-RegistryValueSnapshot -Path $script:TerminalServerKey -Name 'fDenyTSConnections'
+        nla = Get-RegistryValueSnapshot -Path $script:RdpTcpKey -Name 'UserAuthentication'
+        termService = [ordered]@{
+            startMode = [string]$service.StartMode
+            wasRunning = $service.State -eq 'Running'
+        }
+        firewallRules = Get-RemoteDesktopFirewallRules
+    }
+
+    $stateDirectory = Split-Path -Parent $statePath
+    New-Item -ItemType Directory -Path $stateDirectory -Force | Out-Null
+    $temporaryPath = "$statePath.$PID.tmp"
+    try {
+        $state | ConvertTo-Json -Depth 6 | Set-Content -LiteralPath $temporaryPath -Encoding utf8
+        Move-Item -LiteralPath $temporaryPath -Destination $statePath -Force
+    } finally {
+        Remove-Item -LiteralPath $temporaryPath -Force -ErrorAction SilentlyContinue
+    }
+    $statePath
+}
+
+function Enable-RemoteDeskHost {
+    [CmdletBinding(SupportsShouldProcess, ConfirmImpact = 'High')]
+    param()
+
+    if (-not (Test-RemoteDeskAdministrator)) {
+        throw 'Administrator privileges are required to configure Remote Desktop.'
+    }
+
+    $status = Get-RemoteDeskHostStatus
+    if (-not $status.supported) {
+        throw "Windows edition '$($status.editionId)' does not support hosting Microsoft Remote Desktop."
+    }
+    if (-not $PSCmdlet.ShouldProcess($status.productName, 'Enable Remote Desktop, NLA, firewall rules, and TermService')) {
+        return $status
+    }
+
+    [void](Save-RemoteDeskOriginalState)
+    Set-ItemProperty -LiteralPath $script:TerminalServerKey -Name fDenyTSConnections -Type DWord -Value 0
+    Set-ItemProperty -LiteralPath $script:RdpTcpKey -Name UserAuthentication -Type DWord -Value 1
+
+    $service = Get-CimInstance Win32_Service -Filter "Name='TermService'"
+    if ($service.StartMode -eq 'Disabled') {
+        Set-Service -Name TermService -StartupType Manual
+    }
+    if ((Get-Service -Name TermService).Status -ne 'Running') {
+        Start-Service -Name TermService
+    }
+
+    foreach ($name in $script:FirewallRuleNames) {
+        if ($null -ne (Get-NetFirewallRule -Name $name -ErrorAction SilentlyContinue)) {
+            Enable-NetFirewallRule -Name $name
+        }
+    }
+
+    Get-RemoteDeskHostStatus
+}
+
+function Set-RegistryValueFromSnapshot {
+    param([Parameter(Mandatory)]$Snapshot)
+
+    if ([bool]$Snapshot.exists) {
+        Set-ItemProperty -LiteralPath ([string]$Snapshot.path) -Name ([string]$Snapshot.name) -Type DWord -Value ([int]$Snapshot.value)
+    } else {
+        Remove-ItemProperty -LiteralPath ([string]$Snapshot.path) -Name ([string]$Snapshot.name) -ErrorAction SilentlyContinue
+    }
+}
+
+function Restore-RemoteDeskHost {
+    [CmdletBinding(SupportsShouldProcess, ConfirmImpact = 'High')]
+    param()
+
+    if (-not (Test-RemoteDeskAdministrator)) {
+        throw 'Administrator privileges are required to restore Remote Desktop settings.'
+    }
+
+    $statePath = Get-RemoteDeskHostStatePath
+    if (-not (Test-Path -LiteralPath $statePath -PathType Leaf)) {
+        return Get-RemoteDeskHostStatus
+    }
+    $state = Get-Content -LiteralPath $statePath -Raw | ConvertFrom-Json
+    if ([int]$state.schema -ne 1) {
+        throw "Unsupported RemoteDesk Host state schema: $($state.schema)"
+    }
+    if (-not $PSCmdlet.ShouldProcess($statePath, 'Restore the pre-RemoteDesk RDP configuration')) {
+        return Get-RemoteDeskHostStatus
+    }
+
+    Set-RegistryValueFromSnapshot -Snapshot $state.rdp
+    Set-RegistryValueFromSnapshot -Snapshot $state.nla
+    foreach ($savedRule in @($state.firewallRules)) {
+        $rule = Get-NetFirewallRule -Name ([string]$savedRule.name) -ErrorAction SilentlyContinue
+        if ($null -ne $rule) {
+            if ([string]$savedRule.enabled -eq 'True') {
+                Enable-NetFirewallRule -Name $rule.Name
+            } else {
+                Disable-NetFirewallRule -Name $rule.Name
+            }
+        }
+    }
+
+    switch ([string]$state.termService.startMode) {
+        'Auto' { Set-Service -Name TermService -StartupType Automatic }
+        'Manual' { Set-Service -Name TermService -StartupType Manual }
+        'Disabled' { Set-Service -Name TermService -StartupType Disabled }
+        default { throw "Unsupported saved TermService start mode: $($state.termService.startMode)" }
+    }
+    if ([bool]$state.termService.wasRunning) {
+        if ((Get-Service -Name TermService).Status -ne 'Running') {
+            Start-Service -Name TermService
+        }
+    } elseif ((Get-Service -Name TermService).Status -eq 'Running') {
+        Stop-Service -Name TermService -Force
+    }
+
+    Remove-Item -LiteralPath $statePath -Force
+    Get-RemoteDeskHostStatus
+}
+
+Export-ModuleMember -Function @(
+    'Enable-RemoteDeskHost',
+    'Get-RemoteDeskHostStatePath',
+    'Get-RemoteDeskHostStatus',
+    'Restore-RemoteDeskHost',
+    'Test-RemoteDeskAdministrator'
+)
diff --git a/packaging/windows-host/RemoteDeskHost.wxs b/packaging/windows-host/RemoteDeskHost.wxs
new file mode 100644
index 0000000..10e196b
--- /dev/null
+++ b/packaging/windows-host/RemoteDeskHost.wxs
@@ -0,0 +1,116 @@
+<Wix xmlns="http://wixtoolset.org/schemas/v4/wxs" xmlns:ui="http://wixtoolset.org/schemas/v4/wxs/ui">
+  <Package
+    Name="RemoteDesk Host"
+    Manufacturer="RemoteDesk"
+    Version="$(var.ProductVersion)"
+    UpgradeCode="{E771214E-B1C5-48A6-AC18-D6C4DA370A30}"
+    Scope="perMachine"
+    InstallerVersion="500"
+    Compressed="yes">
+    <SummaryInformation Description="RemoteDesk Windows controlled endpoint configuration" />
+    <MajorUpgrade DowngradeErrorMessage="A newer version of RemoteDesk Host is already installed." />
+    <MediaTemplate EmbedCab="yes" CompressionLevel="high" />
+    <ui:WixUI Id="WixUI_InstallDir" InstallDirectory="INSTALLFOLDER" />
+
+    <StandardDirectory Id="ProgramFiles64Folder">
+      <Directory Id="INSTALLFOLDER" Name="RemoteDesk Host" />
+    </StandardDirectory>
+    <StandardDirectory Id="ProgramMenuFolder">
+      <Directory Id="ApplicationProgramsFolder" Name="RemoteDesk Host" />
+    </StandardDirectory>
+
+    <Feature Id="Complete" Title="RemoteDesk Host" Level="1">
+      <ComponentRef Id="ConfigureScriptComponent" />
+      <ComponentRef Id="HostModuleComponent" />
+      <ComponentRef Id="HostReadmeComponent" />
+      <ComponentRef Id="HostManifestComponent" />
+      <ComponentRef Id="HostShortcuts" />
+      <ComponentRef Id="WindowsAgentComponent" />
+      <ComponentRef Id="Hysteria2AgentComponent" />
+      <ComponentRef Id="Hysteria2AgentEnvComponent" />
+    </Feature>
+
+    <CustomAction
+      Id="RestoreHostConfiguration"
+      Directory="INSTALLFOLDER"
+      ExeCommand="&quot;[SystemFolder]WindowsPowerShell\v1.0\powershell.exe&quot; -NoProfile -NonInteractive -ExecutionPolicy Bypass -File &quot;[#ConfigureScript]&quot; -Action Restore -AcceptRemoteDesktopChanges -Uninstall"
+      Execute="deferred"
+      Impersonate="no"
+      Return="check" />
+    <InstallExecuteSequence>
+      <Custom Action="RestoreHostConfiguration" Before="RemoveFiles" Condition="REMOVE~=&quot;ALL&quot; AND NOT UPGRADINGPRODUCTCODE" />
+    </InstallExecuteSequence>
+  </Package>
+
+  <Fragment>
+    <Icon Id="RemoteDeskHostIcon" SourceFile="$(var.IconPath)" />
+    <DirectoryRef Id="INSTALLFOLDER">
+      <Component Id="ConfigureScriptComponent" Guid="*" Bitness="always64">
+        <File Id="ConfigureScript" Source="$(var.SourceRoot)\Configure-RemoteDeskHost.ps1" KeyPath="yes" />
+      </Component>
+      <Component Id="HostModuleComponent" Guid="*" Bitness="always64">
+        <File Id="HostModule" Source="$(var.SourceRoot)\RemoteDeskHost.psm1" KeyPath="yes" />
+      </Component>
+      <Component Id="HostReadmeComponent" Guid="*" Bitness="always64">
+        <File Id="HostReadme" Source="$(var.SourceRoot)\README.md" KeyPath="yes" />
+      </Component>
+      <Component Id="HostManifestComponent" Guid="*" Bitness="always64">
+        <File Id="HostManifest" Source="$(var.SourceRoot)\manifest.json" KeyPath="yes" />
+      </Component>
+      <Component Id="WindowsAgentComponent" Guid="*" Bitness="always64">
+        <File Id="WindowsAgent" Source="$(var.WindowsAgentBinary)" KeyPath="yes" />
+      </Component>
+      <Component Id="Hysteria2AgentComponent" Guid="*" Bitness="always64">
+        <File Id="Hysteria2Agent" Source="$(var.Hysteria2Binary)" KeyPath="yes" />
+      </Component>
+      <Component Id="Hysteria2AgentEnvComponent" Guid="*" Bitness="always64">
+        <File Id="Hysteria2AgentEnv" Source="$(var.SourceRoot)\hysteria2-agent.env.example" />
+      </Component>
+    </DirectoryRef>
+  </Fragment>
+
+  <Fragment>
+    <DirectoryRef Id="ApplicationProgramsFolder">
+      <Component Id="HostShortcuts" Guid="*" Bitness="always64">
+        <Shortcut
+          Id="ConfigureHostShortcut"
+          Name="Configure RemoteDesk Host"
+          Description="Enable or repair Remote Desktop after explicit confirmation"
+          Icon="RemoteDeskHostIcon"
+          IconIndex="0"
+          Target="[SystemFolder]WindowsPowerShell\v1.0\powershell.exe"
+          Arguments="-NoProfile -ExecutionPolicy Bypass -File &quot;[#ConfigureScript]&quot; -Action Enable"
+          WorkingDirectory="INSTALLFOLDER" />
+        <Shortcut
+          Id="HostStatusShortcut"
+          Name="RemoteDesk Host Status"
+          Description="Show Remote Desktop readiness"
+          Icon="RemoteDeskHostIcon"
+          IconIndex="0"
+          Target="[SystemFolder]WindowsPowerShell\v1.0\powershell.exe"
+          Arguments="-NoExit -NoProfile -ExecutionPolicy Bypass -File &quot;[#ConfigureScript]&quot; -Action Status"
+          WorkingDirectory="INSTALLFOLDER" />
+        <Shortcut
+          Id="WindowsAgentStatusShortcut"
+          Name="RemoteDesk Windows Agent Status"
+          Description="Show native Windows Agent capabilities"
+          Icon="RemoteDeskHostIcon"
+          IconIndex="0"
+          Target="[INSTALLFOLDER]remotedesk-windows-agent.exe"
+          Arguments="status"
+          WorkingDirectory="INSTALLFOLDER" />
+        <Shortcut
+          Id="RestoreHostShortcut"
+          Name="Restore pre-RemoteDesk settings"
+          Description="Restore Remote Desktop settings backed up by RemoteDesk"
+          Icon="RemoteDeskHostIcon"
+          IconIndex="0"
+          Target="[SystemFolder]WindowsPowerShell\v1.0\powershell.exe"
+          Arguments="-NoProfile -ExecutionPolicy Bypass -File &quot;[#ConfigureScript]&quot; -Action Restore"
+          WorkingDirectory="INSTALLFOLDER" />
+        <RemoveFolder Id="RemoveApplicationProgramsFolder" Directory="ApplicationProgramsFolder" On="uninstall" />
+        <RegistryValue Root="HKLM" Key="Software\RemoteDesk\Host" Name="Installed" Type="integer" Value="1" KeyPath="yes" />
+      </Component>
+    </DirectoryRef>
+  </Fragment>
+</Wix>
diff --git a/packaging/windows-host/build-hysteria2-agent.ps1 b/packaging/windows-host/build-hysteria2-agent.ps1
new file mode 100644
index 0000000..a162830
--- /dev/null
+++ b/packaging/windows-host/build-hysteria2-agent.ps1
@@ -0,0 +1,16 @@
+[CmdletBinding()]
+param([string]$OutputDirectory)
+$ErrorActionPreference = 'Stop'
+$root = [IO.Path]::GetFullPath((Join-Path $PSScriptRoot '..\..'))
+if ([string]::IsNullOrWhiteSpace($OutputDirectory)) {
+    $OutputDirectory = Join-Path $root 'artifacts\hysteria2'
+}
+$OutputDirectory = [IO.Path]::GetFullPath($OutputDirectory)
+New-Item -ItemType Directory -Force -Path $OutputDirectory | Out-Null
+Push-Location (Join-Path $root 'transport\hysteria2-agent')
+try {
+    & go.exe build -buildvcs=false -trimpath -ldflags '-s -w' -o (Join-Path $OutputDirectory 'remotedesk-hysteria2-agent.exe') .
+    if ($LASTEXITCODE -ne 0) { throw 'Go Hysteria2 build failed.' }
+} finally { Pop-Location }
+Copy-Item (Join-Path $root 'packaging\windows-host\hysteria2-agent.env.example') (Join-Path $OutputDirectory 'hysteria2-agent.env.example') -Force
+Write-Output "Hysteria2 package: $OutputDirectory"
diff --git a/packaging/windows-host/hysteria2-agent.env.example b/packaging/windows-host/hysteria2-agent.env.example
new file mode 100644
index 0000000..796921b
--- /dev/null
+++ b/packaging/windows-host/hysteria2-agent.env.example
@@ -0,0 +1,5 @@
+REMOTEDESK_HYSTERIA2_LISTEN=0.0.0.0:39502
+REMOTEDESK_HYSTERIA2_PASSWORD=replace-with-a-long-random-password
+REMOTEDESK_HYSTERIA2_CERT=server.crt
+REMOTEDESK_HYSTERIA2_KEY=server.key
+REMOTEDESK_AGENT_UDP=127.0.0.1:39502
diff --git a/packaging/windows-host/icon.ico b/packaging/windows-host/icon.ico
new file mode 100644
index 0000000..bca8c50
Binary files /dev/null and b/packaging/windows-host/icon.ico differ
diff --git a/packaging/windows-host/package-host.ps1 b/packaging/windows-host/package-host.ps1
new file mode 100644
index 0000000..e7263f1
--- /dev/null
+++ b/packaging/windows-host/package-host.ps1
@@ -0,0 +1,156 @@
+[CmdletBinding()]
+param(
+    [ValidatePattern('^[0-9A-Fa-f]{40}$')]
+    [string]$SigningCertificateThumbprint,
+    [ValidatePattern('^https://')]
+    [string]$TimestampUrl = 'https://timestamp.digicert.com',
+    [ValidateSet('zh-cn', 'en-us')]
+    [string]$Culture = 'zh-cn'
+)
+
+$ErrorActionPreference = 'Stop'
+Import-Module (Join-Path $PSScriptRoot '..\windows\Authenticode.psm1') -Force
+$repoRoot = [IO.Path]::GetFullPath((Join-Path $PSScriptRoot '..\..'))
+$artifactsRoot = Join-Path $repoRoot 'artifacts'
+$targetRoot = Join-Path $repoRoot 'target'
+$buildRoot = $null
+$previousRollForward = $env:DOTNET_ROLL_FORWARD
+$previousRustFlags = $env:RUSTFLAGS
+$staticRustFlags = '-C target-feature=+crt-static'
+$wixVersion = '4.0.6'
+$wixPackageHash = 'a94dd42ae1fb56b32da180e2173ceda4f0d10b4c8871c5ee59ecb502131a1eb6'
+$wixPackageUri = "https://api.nuget.org/v3-flatcontainer/wix/$wixVersion/wix.$wixVersion.nupkg"
+$signingEnabled = -not [string]::IsNullOrWhiteSpace($SigningCertificateThumbprint)
+if ($signingEnabled) {
+    $timestamp = [Uri]$TimestampUrl
+    if (-not $timestamp.IsAbsoluteUri -or $timestamp.Scheme -ne 'https' -or
+        -not [string]::IsNullOrEmpty($timestamp.UserInfo) -or
+        -not [string]::IsNullOrEmpty($timestamp.Query) -or
+        -not [string]::IsNullOrEmpty($timestamp.Fragment)) {
+        throw 'TimestampUrl must be a credential-free HTTPS URL without query or fragment'
+    }
+}
+
+function Assert-PathWithin {
+    param([Parameter(Mandatory)][string]$Path, [Parameter(Mandatory)][string]$Root)
+    $fullPath = [IO.Path]::GetFullPath($Path)
+    $prefix = [IO.Path]::GetFullPath($Root).TrimEnd([IO.Path]::DirectorySeparatorChar) + [IO.Path]::DirectorySeparatorChar
+    if (-not $fullPath.StartsWith($prefix, [StringComparison]::OrdinalIgnoreCase)) {
+        throw "Refusing to modify a path outside $Root"
+    }
+}
+
+function Get-WixTool {
+    $toolsRoot = Join-Path $targetRoot 'tools'
+    $packagePath = Join-Path $toolsRoot "wix.$wixVersion.nupkg"
+    $toolRoot = Join-Path $toolsRoot "wix-$wixVersion"
+    $wix = Join-Path $toolRoot 'tools\net6.0\any\wix.exe'
+    New-Item -ItemType Directory -Force -Path $toolsRoot | Out-Null
+    if (-not (Test-Path -LiteralPath $packagePath -PathType Leaf)) {
+        $downloadPath = "$packagePath.download-$PID"
+        try {
+            Invoke-WebRequest -Uri $wixPackageUri -OutFile $downloadPath
+            $hash = (Get-FileHash -LiteralPath $downloadPath -Algorithm SHA256).Hash.ToLowerInvariant()
+            if ($hash -ne $wixPackageHash) { throw "Downloaded WiX package hash mismatch: $hash" }
+            Move-Item -LiteralPath $downloadPath -Destination $packagePath
+        } finally {
+            Remove-Item -LiteralPath $downloadPath -Force -ErrorAction SilentlyContinue
+        }
+    }
+    if ((Get-FileHash -LiteralPath $packagePath -Algorithm SHA256).Hash.ToLowerInvariant() -ne $wixPackageHash) {
+        throw 'Cached WiX package hash mismatch.'
+    }
+    if (-not (Test-Path -LiteralPath $wix -PathType Leaf)) {
+        New-Item -ItemType Directory -Force -Path $toolRoot | Out-Null
+        Expand-Archive -LiteralPath $packagePath -DestinationPath $toolRoot -Force
+    }
+    $wix
+}
+
+try {
+    $metadata = cargo metadata --no-deps --format-version 1 | ConvertFrom-Json
+    if ($LASTEXITCODE -ne 0) { throw 'Unable to read Cargo workspace metadata.' }
+    $version = [string]$metadata.workspace_root
+    $package = $metadata.packages | Where-Object name -eq 'remotedesk-protocol' | Select-Object -First 1
+    if ($null -eq $package) { throw 'remotedesk-protocol is missing from workspace metadata.' }
+    $version = [string]$package.version
+    if ($version -notmatch '^\d+\.\d+\.\d+$') { throw "Invalid MSI version: $version" }
+
+    New-Item -ItemType Directory -Force -Path $artifactsRoot | Out-Null
+    $buildRoot = Join-Path $artifactsRoot ".package-host-$PID-$([guid]::NewGuid().ToString('N'))"
+    $payloadRoot = Join-Path $buildRoot 'payload'
+    $intermediateRoot = Join-Path $buildRoot 'wixobj'
+    New-Item -ItemType Directory -Force -Path $payloadRoot, $intermediateRoot | Out-Null
+    # Statically link the MSVC CRT so the Agent does not require VCRUNTIME140.dll.
+    $env:RUSTFLAGS = $staticRustFlags
+    & cargo.exe build --release -p remotedesk-windows-agent
+    if ($LASTEXITCODE -ne 0) { throw "Windows Agent build failed with exit code $LASTEXITCODE" }
+    $agentBinary = Join-Path $repoRoot 'target\release\remotedesk-windows-agent.exe'
+    if (-not (Test-Path -LiteralPath $agentBinary -PathType Leaf)) { throw "Windows Agent binary is missing: $agentBinary" }
+    $hysteriaBinary = Join-Path $buildRoot 'remotedesk-hysteria2-agent.exe'
+    Push-Location (Join-Path $repoRoot 'transport\hysteria2-agent')
+    try {
+        & go.exe build -buildvcs=false -trimpath -ldflags '-s -w' -o $hysteriaBinary .
+        if ($LASTEXITCODE -ne 0 -or -not (Test-Path -LiteralPath $hysteriaBinary -PathType Leaf)) { throw 'Hysteria2 transport build failed.' }
+    } finally { Pop-Location }
+    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'Configure-RemoteDeskHost.ps1') -Destination $payloadRoot
+    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'RemoteDeskHost.psm1') -Destination $payloadRoot
+    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'README.md') -Destination $payloadRoot
+    Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'hysteria2-agent.env.example') -Destination $payloadRoot
+
+    $manifest = [ordered]@{
+        product = 'RemoteDesk Host'
+        version = $version
+        distribution = 'msi'
+        install_scope = 'per-machine'
+        configures = 'Microsoft Remote Desktop'
+        automatic_enable = $false
+        nla_required = $true
+        state_backup = '%ProgramData%/RemoteDesk/Host/original-state.json'
+        signed = $signingEnabled
+    }
+    $manifest | ConvertTo-Json -Depth 4 | Set-Content -LiteralPath (Join-Path $payloadRoot 'manifest.json') -Encoding utf8
+
+    $wix = Get-WixTool
+    $uiExtension = Join-Path $targetRoot 'tools\wix-ui-4.0.6\wixext4\WixToolset.UI.wixext.dll'
+    if (-not (Test-Path -LiteralPath $uiExtension -PathType Leaf)) { throw "WiX UI extension is missing: $uiExtension" }
+    $signTool = if ($signingEnabled) { Get-RemoteDeskSignTool } else { $null }
+    $signingCertificate = if ($signingEnabled) {
+        Get-RemoteDeskSigningCertificate -Thumbprint $SigningCertificateThumbprint
+    } else {
+        $null
+    }
+    if ($signingEnabled) {
+        foreach ($scriptName in @('Configure-RemoteDeskHost.ps1', 'RemoteDeskHost.psm1')) {
+            Invoke-RemoteDeskPowerShellSigning -Certificate $signingCertificate `
+                -Path (Join-Path $payloadRoot $scriptName) -TimestampServer $TimestampUrl
+        }
+    }
+    $installerName = "RemoteDesk-Host-$version-$Culture-windows-x64.msi"
+    $temporaryInstaller = Join-Path $buildRoot $installerName
+    $installerPath = Join-Path $artifactsRoot $installerName
+    $env:DOTNET_ROLL_FORWARD = 'Major'
+    & $wix build -arch x64 -ext $uiExtension -culture $Culture -d "ProductVersion=$version" -d "SourceRoot=$payloadRoot" -d "WindowsAgentBinary=$agentBinary" -d "Hysteria2Binary=$hysteriaBinary" -d "IconPath=$(Join-Path $PSScriptRoot 'icon.ico')" `
+        -intermediateFolder $intermediateRoot -pdbtype none -out $temporaryInstaller `
+        (Join-Path $PSScriptRoot 'RemoteDeskHost.wxs')
+    if ($LASTEXITCODE -ne 0) { throw "WiX build failed with exit code $LASTEXITCODE" }
+    Move-Item -LiteralPath $temporaryInstaller -Destination $installerPath -Force
+    if ($signingEnabled) {
+        Invoke-RemoteDeskSignTool -SignTool $signTool -Thumbprint $signingCertificate.Thumbprint `
+            -Path $installerPath -TimestampServer $TimestampUrl
+    }
+    $hash = (Get-FileHash -LiteralPath $installerPath -Algorithm SHA256).Hash.ToLowerInvariant()
+    "$hash  $installerName" | Set-Content -LiteralPath (Join-Path $artifactsRoot 'HOST-INSTALLER-SHA256SUMS.txt') -Encoding ascii
+    Write-Output "Installer: $installerPath"
+    Write-Output "SHA256: $hash"
+    Write-Output "Authenticode: $(if ($signingEnabled) { "signed ($($signingCertificate.Thumbprint))" } else { 'unsigned development package' })"
+} finally {
+    if ($null -eq $previousRollForward) { Remove-Item Env:DOTNET_ROLL_FORWARD -ErrorAction SilentlyContinue }
+    else { $env:DOTNET_ROLL_FORWARD = $previousRollForward }
+    if ($null -eq $previousRustFlags) { Remove-Item Env:RUSTFLAGS -ErrorAction SilentlyContinue }
+    else { $env:RUSTFLAGS = $previousRustFlags }
+    if ($buildRoot -and (Test-Path -LiteralPath $buildRoot)) {
+        Assert-PathWithin -Path $buildRoot -Root $artifactsRoot
+        Remove-Item -LiteralPath $buildRoot -Recurse -Force
+    }
+}
diff --git a/packaging/windows-host/package-portable-host.ps1 b/packaging/windows-host/package-portable-host.ps1
new file mode 100644
index 0000000..8f8e5f4
--- /dev/null
+++ b/packaging/windows-host/package-portable-host.ps1
@@ -0,0 +1,57 @@
+[CmdletBinding()]
+param(
+    [string]$OutputDirectory,
+    [ValidateSet('zh-cn', 'en-us')]
+    [string]$Culture = 'zh-cn'
+)
+
+$ErrorActionPreference = 'Stop'
+$repoRoot = [IO.Path]::GetFullPath((Join-Path $PSScriptRoot '..\..'))
+$artifactsRoot = Join-Path $repoRoot 'artifacts'
+$previousRustFlags = $env:RUSTFLAGS
+$env:RUSTFLAGS = '-C target-feature=+crt-static'
+if ([string]::IsNullOrWhiteSpace($OutputDirectory)) {
+    $OutputDirectory = Join-Path $artifactsRoot 'RemoteDesk-Host-portable'
+}
+$OutputDirectory = [IO.Path]::GetFullPath($OutputDirectory)
+
+New-Item -ItemType Directory -Force -Path $OutputDirectory | Out-Null
+foreach ($file in @('Configure-RemoteDeskHost.ps1', 'RemoteDeskHost.psm1', 'README.md', 'icon.ico')) {
+    Copy-Item -LiteralPath (Join-Path $PSScriptRoot $file) -Destination $OutputDirectory -Force
+}
+$agentBinary = Join-Path $repoRoot 'target\release\remotedesk-windows-agent.exe'
+& cargo.exe build --release -p remotedesk-windows-agent
+if ($LASTEXITCODE -ne 0 -or -not (Test-Path -LiteralPath $agentBinary)) { throw 'Unable to build Windows Agent.' }
+Copy-Item -LiteralPath $agentBinary -Destination $OutputDirectory -Force
+
+$hysteriaBinary = Join-Path $OutputDirectory 'remotedesk-hysteria2-agent.exe'
+Push-Location (Join-Path $repoRoot 'transport\hysteria2-agent')
+try {
+    & go.exe build -buildvcs=false -trimpath -ldflags '-s -w' -o $hysteriaBinary .
+    if ($LASTEXITCODE -ne 0 -or -not (Test-Path -LiteralPath $hysteriaBinary)) { throw 'Unable to build Hysteria2 Agent transport.' }
+} finally { Pop-Location }
+Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'hysteria2-agent.env.example') -Destination $OutputDirectory -Force
+
+$csc = Join-Path $env:WINDIR 'Microsoft.NET\Framework64\v4.0.30319\csc.exe'
+if (-not (Test-Path -LiteralPath $csc)) { $csc = Join-Path $env:WINDIR 'Microsoft.NET\Framework\v4.0.30319\csc.exe' }
+if (-not (Test-Path -LiteralPath $csc)) { throw 'Microsoft C# compiler (csc.exe) is required to create the portable EXE.' }
+$launcher = Join-Path $OutputDirectory 'RemoteDesk-Host.exe'
+$manifestPath = Join-Path $PSScriptRoot 'RemoteDesk-Host.manifest'
+& $csc /nologo /target:winexe /platform:anycpu /optimize+ /out:$launcher `
+    "/win32manifest:$manifestPath" `
+    /reference:System.dll /reference:System.Windows.Forms.dll (Join-Path $PSScriptRoot 'RemoteDesk-Host.cs')
+if ($LASTEXITCODE -ne 0 -or -not (Test-Path -LiteralPath $launcher)) { throw 'Unable to build RemoteDesk-Host.exe.' }
+
+$metadata = cargo metadata --no-deps --format-version 1 | ConvertFrom-Json
+if ($LASTEXITCODE -ne 0) { throw 'Unable to read Cargo workspace metadata.' }
+$package = $metadata.packages | Where-Object name -eq 'remotedesk-protocol' | Select-Object -First 1
+if ($null -eq $package) { throw 'remotedesk-protocol is missing from workspace metadata.' }
+$manifest = [ordered]@{ product = 'RemoteDesk Host'; version = [string]$package.version; distribution = 'portable'; culture = $Culture; action = 'enable-remote-desktop'; install_required = $false }
+$manifest | ConvertTo-Json -Depth 4 | Set-Content -LiteralPath (Join-Path $OutputDirectory 'manifest.json') -Encoding utf8
+
+$zipPath = "$OutputDirectory.zip"
+if (Test-Path -LiteralPath $zipPath) { Remove-Item -LiteralPath $zipPath -Force }
+Compress-Archive -Path (Join-Path $OutputDirectory '*') -DestinationPath $zipPath -CompressionLevel Optimal
+Write-Output "Portable package: $OutputDirectory"
+Write-Output "ZIP: $zipPath"
+if ($null -eq $previousRustFlags) { Remove-Item Env:RUSTFLAGS -ErrorAction SilentlyContinue } else { $env:RUSTFLAGS = $previousRustFlags }
diff --git a/packaging/windows/Apply-RemoteDesk-Update.ps1 b/packaging/windows/Apply-RemoteDesk-Update.ps1
new file mode 100644
index 0000000..bcf907d
--- /dev/null
+++ b/packaging/windows/Apply-RemoteDesk-Update.ps1
@@ -0,0 +1,54 @@
+[CmdletBinding()]
+param(
+    [Parameter(Mandatory)]
+    [string]$InstallerPath,
+    [Parameter(Mandatory)]
+    [ValidateRange(1, [int]::MaxValue)]
+    [int]$WaitForPid,
+    [Parameter(Mandatory)]
+    [ValidatePattern('^[0-9a-fA-F]{64}$')]
+    [string]$ExpectedSha256,
+    [Parameter(Mandatory)]
+    [ValidatePattern('^\d+\.\d+\.\d+$')]
+    [string]$Version
+)
+
+$ErrorActionPreference = 'Stop'
+$updatesRoot = [IO.Path]::GetFullPath((Join-Path $env:LOCALAPPDATA 'RemoteDesk\updates'))
+$installer = [IO.Path]::GetFullPath($InstallerPath)
+$updatesPrefix = $updatesRoot.TrimEnd([IO.Path]::DirectorySeparatorChar) + [IO.Path]::DirectorySeparatorChar
+if (-not $installer.StartsWith($updatesPrefix, [StringComparison]::OrdinalIgnoreCase)) {
+    throw 'The update installer is outside the RemoteDesk update directory.'
+}
+if ([IO.Path]::GetExtension($installer) -ne '.msi' -or -not (Test-Path -LiteralPath $installer -PathType Leaf)) {
+    throw 'The verified update MSI is missing.'
+}
+
+try {
+    Wait-Process -Id $WaitForPid -Timeout 60 -ErrorAction SilentlyContinue
+} catch {
+    # The control service may already have exited before this helper starts waiting.
+}
+if (Get-Process -Id $WaitForPid -ErrorAction SilentlyContinue) {
+    throw 'RemoteDesk did not stop in time for the update.'
+}
+
+$actualHash = (Get-FileHash -LiteralPath $installer -Algorithm SHA256).Hash
+if (-not $actualHash.Equals($ExpectedSha256, [StringComparison]::OrdinalIgnoreCase)) {
+    throw 'The update MSI changed after verification.'
+}
+
+$logPath = Join-Path $updatesRoot "install-$Version.log"
+$arguments = "/i `"$installer`" /passive /norestart /L*v `"$logPath`""
+$process = Start-Process -FilePath 'msiexec.exe' -ArgumentList $arguments -PassThru -Wait
+if ($process.ExitCode -notin 0, 1641, 3010) {
+    throw "RemoteDesk update failed with MSI exit code $($process.ExitCode). See $logPath"
+}
+
+Remove-Item -LiteralPath $installer -Force -ErrorAction SilentlyContinue
+if ($process.ExitCode -ne 1641) {
+    $launcher = Join-Path $PSScriptRoot 'bin\remotedesk.exe'
+    if (Test-Path -LiteralPath $launcher -PathType Leaf) {
+        Start-Process -FilePath $launcher
+    }
+}
diff --git a/packaging/windows/Authenticode.psm1 b/packaging/windows/Authenticode.psm1
new file mode 100644
index 0000000..829b961
--- /dev/null
+++ b/packaging/windows/Authenticode.psm1
@@ -0,0 +1,79 @@
+Set-StrictMode -Version Latest
+
+function Get-RemoteDeskSignTool {
+    $command = Get-Command 'signtool.exe' -ErrorAction SilentlyContinue
+    if ($command) { return $command.Source }
+
+    $kitsRoot = Join-Path ${env:ProgramFiles(x86)} 'Windows Kits\10\bin'
+    $candidate = Get-ChildItem -LiteralPath $kitsRoot -Filter 'signtool.exe' -File -Recurse -ErrorAction SilentlyContinue |
+        Where-Object { $_.FullName -match '[\\/]x64[\\/]signtool\.exe$' } |
+        Sort-Object FullName -Descending |
+        Select-Object -First 1
+    if (-not $candidate) { throw 'signtool.exe was not found in PATH or the Windows 10 SDK' }
+    return $candidate.FullName
+}
+
+function Get-RemoteDeskSigningCertificate {
+    param([Parameter(Mandatory)][string]$Thumbprint)
+
+    $normalized = $Thumbprint.Replace(' ', '').ToUpperInvariant()
+    $certificate = Get-Item -LiteralPath "Cert:\CurrentUser\My\$normalized" -ErrorAction SilentlyContinue
+    if (-not $certificate -or -not $certificate.HasPrivateKey) {
+        throw 'The signing certificate is missing from CurrentUser\My or has no private key'
+    }
+    if ($certificate.NotBefore.ToUniversalTime() -gt [DateTime]::UtcNow -or
+        $certificate.NotAfter.ToUniversalTime() -le [DateTime]::UtcNow) {
+        throw 'The signing certificate is outside its validity period'
+    }
+    $hasCodeSigningEku = $certificate.Extensions |
+        Where-Object { $_ -is [Security.Cryptography.X509Certificates.X509EnhancedKeyUsageExtension] } |
+        ForEach-Object { $_.EnhancedKeyUsages } |
+        Where-Object { $_.Value -eq '1.3.6.1.5.5.7.3.3' }
+    if (-not $hasCodeSigningEku) {
+        throw 'The signing certificate does not contain the Code Signing EKU'
+    }
+    return $certificate
+}
+
+function Invoke-RemoteDeskSignTool {
+    param(
+        [Parameter(Mandatory)][string]$SignTool,
+        [Parameter(Mandatory)][string]$Thumbprint,
+        [Parameter(Mandatory)][string]$Path,
+        [Parameter(Mandatory)][string]$TimestampServer
+    )
+
+    & $SignTool sign /sha1 $Thumbprint /s My /fd SHA256 /tr $TimestampServer /td SHA256 /v $Path
+    if ($LASTEXITCODE -ne 0) {
+        throw "Authenticode signing failed for $Path with exit code $LASTEXITCODE"
+    }
+    & $SignTool verify /pa /all /v $Path
+    if ($LASTEXITCODE -ne 0) {
+        throw "Authenticode verification failed for $Path with exit code $LASTEXITCODE"
+    }
+}
+
+function Invoke-RemoteDeskPowerShellSigning {
+    param(
+        [Parameter(Mandatory)][Security.Cryptography.X509Certificates.X509Certificate2]$Certificate,
+        [Parameter(Mandatory)][string]$Path,
+        [Parameter(Mandatory)][string]$TimestampServer
+    )
+
+    $signature = Set-AuthenticodeSignature -LiteralPath $Path -Certificate $Certificate `
+        -HashAlgorithm SHA256 -TimestampServer $TimestampServer
+    if ([string]$signature.Status -ne 'Valid') {
+        throw "PowerShell Authenticode signing failed for $Path ($($signature.Status))"
+    }
+    $verified = Get-AuthenticodeSignature -LiteralPath $Path
+    if ([string]$verified.Status -ne 'Valid' -or
+        $verified.SignerCertificate.Thumbprint -ne $Certificate.Thumbprint) {
+        throw "PowerShell Authenticode verification failed for $Path"
+    }
+}
+
+Export-ModuleMember -Function `
+    Get-RemoteDeskSignTool, `
+    Get-RemoteDeskSigningCertificate, `
+    Invoke-RemoteDeskSignTool, `
+    Invoke-RemoteDeskPowerShellSigning
diff --git a/packaging/windows/README-INSTALLER.md b/packaging/windows/README-INSTALLER.md
new file mode 100644
index 0000000..19badd5
--- /dev/null
+++ b/packaging/windows/README-INSTALLER.md
@@ -0,0 +1,32 @@
+# RemoteDesk M0 Windows Installer
+
+此 MSI 将 RemoteDesk 安装到当前用户的 `%LOCALAPPDATA%\Programs\RemoteDesk`，不需要管理员权限。
+
+安装后从开始菜单打开 `RemoteDesk`。Tauri 2 原生窗口会启动仅监听随机 `127.0.0.1` 端口的本地控制服务；窗口退出或控制服务异常结束时，两者会一起关闭。可以在 Windows“已安装的应用”中卸载。
+
+## 当前包含
+
+- Tauri 2 + React 管理界面；壳以一次性 256 位令牌的 SHA-256 proof 验证随机 loopback 控制服务后才创建 WebView，令牌本身不进入 HTTP 请求；WebView 只允许导航到本次 origin，且不向页面开放 Tauri command。
+- RDP TCP 与 pre-NLA IronRDP 协议探测。
+- Windows 系统 `mstsc` 启动回退。
+- 单显示器 IronRDP 原生兼容窗口，支持固定/自定义初始尺寸、窗口动态分辨率、启动/切换全屏、退出会话、三次有界自动重连、Windows 双向剪贴板、RDPSND 本地音频，以及焦点绑定的键盘、五键鼠标和滚轮远程输入；源码中的启动配置通过当前用户 ACL、OS 进程身份和 challenge MAC 认证的 Named Pipe 交付，并用 `KILL_ON_JOB_CLOSE` Job Object 约束 helper 生命周期。
+- Windows Credential Manager 凭据写入、状态、删除和 IronRDP 读取适配器。
+- Linux Terminal 控制 helper，支持证书固定 WSS、一次性配对、Ed25519 重连认证、ANSI/原始按键和 resize；录入 Agent 本地输出的设备公钥和证书指纹后，首次配对及后续终端/文件会话均可经 outbound-only Edge relay 建立，并可在 UI 查询或忘记该身份。
+- 基于 HTTPS、Ed25519 签名清单和 MSI SHA-256 校验的在线升级入口。
+- Native Video 的 D3D11 管线规划、真实硬件 device/decoder 探针，以及同 device NV12 DXGI surface 到 VideoProcessor/swap-chain 的本地 H.264 文件播放入口。
+- 实现状态、使用指南和逐文件 SHA256 清单。
+
+## 当前不包含
+
+- D3D11/零拷贝 RDP 呈现和自定义原生 RDP 显示器子集。
+- Linux 图形桌面、PipeWire 或 WebRTC；Linux Agent 被控端需单独安装。
+- CDN/TURN 边缘中继。
+
+普通本地和 CI 安装包未进行 Authenticode 签名，Windows 可能显示“未知发布者”。正式标签工作流必须使用受信任的代码签名证书签署并验证 MSI、其中的 EXE 和 PowerShell helper；安装包内 `manifest.json` 的 `signed` 字段反映实际打包路径。签名参数和生产发布流程见 `docs/online-updates.md`。
+
+在线升级默认不配置发布源。管理员需要在“全局设置”中同时提供可信的 HTTPS 清单 URL 和 Ed25519 公钥；发布流程见 `docs/online-updates.md`。清单验签或 MSI 完整性验证失败时不会启动安装。
+
+
+Linux Agent 公钥按 TLS 证书指纹保存在 `RemoteDesk/Linux/agent/<certificate-sha256>` Windows Credential Manager 条目。配置 Edge、设备公钥和本机有效配对窗口后，首次配对即可只经 Agent 出站中继；未配置时回退直连。该公钥不是秘密但具有完整性意义，删除后必须重新配对。
+
+IronRDP 窗口聚焦时会把键盘、鼠标按钮、移动和滚轮发送到远端；失焦或关闭时会释放远端输入状态。使用 `F11` 或 `Alt+Enter` 切换全屏，使用 `Esc` 退出全屏，使用 `Ctrl+Shift+Q` 关闭会话；快捷键触发时会释放远端输入，命令按键本身不会发送到远端。
diff --git a/packaging/windows/README-PREVIEW.md b/packaging/windows/README-PREVIEW.md
new file mode 100644
index 0000000..b3e9b05
--- /dev/null
+++ b/packaging/windows/README-PREVIEW.md
@@ -0,0 +1,34 @@
+# RemoteDesk M0 Windows Portable Preview
+
+This archive is a portable technical preview, not an installer or a finished remote desktop client. Extract the whole directory before starting it; no administrator privileges or system-wide installation are required.
+
+## Start
+
+Run `bin/remotedesk.exe`. The Tauri desktop shell starts the Rust control service on a random loopback port, verifies its one-time startup proof, and opens the management UI only inside the RemoteDesk window. Closing the window also stops the control service. The package does not launch or support a system-browser UI.
+
+The server does not listen on LAN interfaces. Its JSON API probes TCP and the pre-NLA RDP negotiation, then can start `mstsc.exe` or a native IronRDP window. The probe does not submit credentials or prove that NLA authentication succeeds.
+
+## Included
+
+- Production-built React management UI.
+- `bin/remotedesk.exe`, providing the Tauri 2 desktop shell and the only supported management UI entry point.
+- `bin/remotedesk-control-service.exe`, providing static UI hosting and RDP launch orchestration.
+- `bin/remotedesk-credential-store.exe`, providing masked local credential entry and direct Windows Credential Manager access.
+- `bin/remotedesk-linux-terminal.exe`, providing pinned-WSS Linux Agent pairing, certificate-bound known-device Edge rendezvous, file transfer, and an interactive terminal window.
+- `bin/remotedesk-rdp-session.exe`, providing the secret-free IronRDP negotiation probe.
+- `bin/remotedesk-rdp-viewer.exe`, providing a single-monitor native IronRDP compatibility window with fixed/custom initial sizing, dynamic resize, fullscreen, bounded automatic reconnect, Windows clipboard redirection, RDPSND local audio, session exit controls, and focus-bound keyboard/five-button mouse/wheel forwarding.
+- `bin/remotedesk-native-video.exe`, providing GPU pipeline planning and a real hardware D3D11 device/context probe; rendering remains software.
+- User and client-core documentation.
+- `manifest.json` and per-file `SHA256SUMS.txt`.
+
+## Not Included
+
+- MSI installation or Start menu registration.
+- Runtime-enabled Linux graphical desktop, PipeWire/WebRTC media, CDN, or verified D3D11 zero-copy rendering.
+- A runnable Linux Agent service.
+
+The IronRDP window forwards keyboard, mouse buttons, movement, and wheel input while focused, and releases remote input state when focus is lost or the session closes. Use `F11` or `Alt+Enter` to toggle fullscreen, `Esc` to leave fullscreen, and `Ctrl+Shift+Q` to close the session; triggering these commands releases remote input and does not forward the command key itself.
+
+Passwords remain in Windows Credential Manager after entry through the local masked helper. The native viewer reads its referenced credential directly. Passwords are never written to WebView storage, HTTP, argv, logs, or temporary `.rdp` files. Do not use this build as an unattended-access or security product.
+
+Paired Linux Agent public keys are stored as integrity-sensitive, non-secret mappings at `RemoteDesk/Linux/agent/<certificate-sha256>`. The Linux Terminal panel can query or explicitly forget a mapping. With a configured Edge service and the Agent-local `device_public_key` plus certificate fingerprint, initial pairing and subsequent terminal/file sessions can all be established through Agent-outbound relay connections; direct pairing remains the fallback.
diff --git a/packaging/windows/RemoteDesk-Portable.cs b/packaging/windows/RemoteDesk-Portable.cs
new file mode 100644
index 0000000..2b212da
--- /dev/null
+++ b/packaging/windows/RemoteDesk-Portable.cs
@@ -0,0 +1,31 @@
+using System;
+using System.Diagnostics;
+using System.IO;
+using System.Windows.Forms;
+
+internal static class Program
+{
+    [STAThread]
+    private static int Main()
+    {
+        string root = AppDomain.CurrentDomain.BaseDirectory;
+        string app = Path.Combine(root, "bin", "remotedesk.exe");
+        if (!File.Exists(app))
+        {
+            MessageBox.Show("RemoteDesk files are incomplete. Expected bin\\remotedesk.exe.", "RemoteDesk", MessageBoxButtons.OK, MessageBoxIcon.Error);
+            return 1;
+        }
+        try
+        {
+            using (var process = Process.Start(new ProcessStartInfo(app) { WorkingDirectory = root, UseShellExecute = true }))
+            {
+                return process == null ? 1 : 0;
+            }
+        }
+        catch (Exception ex)
+        {
+            MessageBox.Show(ex.Message, "RemoteDesk", MessageBoxButtons.OK, MessageBoxIcon.Error);
+            return 1;
+        }
+    }
+}
diff --git a/packaging/windows/RemoteDesk.wxs b/packaging/windows/RemoteDesk.wxs
new file mode 100644
index 0000000..25b5bb6
--- /dev/null
+++ b/packaging/windows/RemoteDesk.wxs
@@ -0,0 +1,51 @@
+<Wix xmlns="http://wixtoolset.org/schemas/v4/wxs" xmlns:ui="http://wixtoolset.org/schemas/v4/wxs/ui">
+  <Package
+    Name="RemoteDesk M0 Preview"
+    Manufacturer="RemoteDesk"
+    Version="$(var.ProductVersion)"
+    UpgradeCode="{B2D50E38-1EE4-4516-A9F7-F99C3392BA89}"
+    Scope="perUser"
+    InstallerVersion="500"
+    Compressed="yes">
+    <SummaryInformation Description="RemoteDesk M0 Windows client preview" />
+    <MajorUpgrade DowngradeErrorMessage="A newer version of RemoteDesk is already installed." />
+    <MediaTemplate EmbedCab="yes" CompressionLevel="high" />
+    <ui:WixUI Id="WixUI_InstallDir" InstallDirectory="INSTALLFOLDER" />
+
+    <StandardDirectory Id="LocalAppDataFolder">
+      <Directory Id="LocalProgramsFolder" Name="Programs">
+        <Directory Id="INSTALLFOLDER" Name="RemoteDesk" />
+      </Directory>
+    </StandardDirectory>
+    <StandardDirectory Id="ProgramMenuFolder">
+      <Directory Id="ApplicationProgramsFolder" Name="RemoteDesk" />
+    </StandardDirectory>
+
+    <Feature Id="Complete" Title="RemoteDesk" Level="1">
+      <ComponentGroupRef Id="ApplicationFiles" />
+      <ComponentRef Id="ApplicationShortcut" />
+    </Feature>
+  </Package>
+
+  <Fragment>
+    <Icon Id="RemoteDeskIcon" SourceFile="$(var.IconPath)" />
+    <Component Id="ApplicationShortcut" Directory="ApplicationProgramsFolder" Guid="*">
+      <Shortcut
+        Id="StartMenuShortcut"
+        Name="RemoteDesk"
+        Description="Open RemoteDesk"
+        Icon="RemoteDeskIcon"
+        IconIndex="0"
+        Target="[INSTALLFOLDER]bin\remotedesk.exe"
+        WorkingDirectory="INSTALLFOLDER" />
+      <RemoveFolder Id="RemoveApplicationProgramsFolder" Directory="ApplicationProgramsFolder" On="uninstall" />
+      <RegistryValue
+        Root="HKCU"
+        Key="Software\RemoteDesk\Installer"
+        Name="StartMenuShortcut"
+        Type="integer"
+        Value="1"
+        KeyPath="yes" />
+    </Component>
+  </Fragment>
+</Wix>
diff --git a/packaging/windows/create-update-manifest.mjs b/packaging/windows/create-update-manifest.mjs
new file mode 100644
index 0000000..47aee81
--- /dev/null
+++ b/packaging/windows/create-update-manifest.mjs
@@ -0,0 +1,133 @@
+import { createHash, createPrivateKey, createPublicKey, sign } from 'node:crypto'
+import { readFile, stat, writeFile } from 'node:fs/promises'
+import path from 'node:path'
+import process from 'node:process'
+
+const usage = `usage: node create-update-manifest.mjs \
+  --installer <RemoteDesk.msi> \
+  --installer-url <https-url> \
+  --private-key <ed25519-pkcs8.pem> \
+  --version <major.minor.patch> \
+  --output <stable.json> \
+  [--public-key-output <public-key.txt>] \
+  [--channel <stable>] [--target <windows-x64>] [--notes-file <notes.txt>]`
+
+function parseArgs(values) {
+  const options = {}
+  for (let index = 0; index < values.length; index += 1) {
+    const name = values[index]
+    if (name === '--help' || name === '-h') return { help: true }
+    if (!name.startsWith('--')) throw new Error(`unknown argument: ${name}`)
+    const value = values[index + 1]
+    if (!value || value.startsWith('--')) throw new Error(`${name} requires a value`)
+    if (Object.hasOwn(options, name)) throw new Error(`${name} was provided more than once`)
+    options[name] = value
+    index += 1
+  }
+  return options
+}
+
+function required(options, name) {
+  const value = options[name]
+  if (!value) throw new Error(`${name} is required`)
+  return value
+}
+
+function validateShortText(value, maximum, name) {
+  if (!value || value.length > maximum || /[\u0000-\u001f\u007f]/u.test(value)) {
+    throw new Error(`${name} is invalid`)
+  }
+  return value
+}
+
+function validateUrl(value) {
+  if (value.length > 2048 || /[\u0000-\u001f\u007f]/u.test(value)) {
+    throw new Error('installer URL is invalid')
+  }
+  const url = new URL(value)
+  if (url.protocol !== 'https:' || !url.hostname) throw new Error('installer URL must use HTTPS')
+  if (url.username || url.password || url.search || url.hash) {
+    throw new Error('installer URL must not contain credentials, query, or fragment')
+  }
+  if (!url.pathname.toLowerCase().endsWith('.msi')) {
+    throw new Error('installer URL must identify an MSI package')
+  }
+  return url.toString()
+}
+
+function rawEd25519PublicKey(privateKey) {
+  const jwk = createPublicKey(privateKey).export({ format: 'jwk' })
+  if (jwk.kty !== 'OKP' || jwk.crv !== 'Ed25519' || typeof jwk.x !== 'string') {
+    throw new Error('private key is not an Ed25519 key')
+  }
+  const raw = Buffer.from(jwk.x, 'base64url')
+  if (raw.length !== 32) throw new Error('Ed25519 public key must contain 32 bytes')
+  return raw
+}
+
+async function main() {
+  const options = parseArgs(process.argv.slice(2))
+  if (options.help) {
+    process.stdout.write(`${usage}\n`)
+    return
+  }
+
+  const installerPath = path.resolve(required(options, '--installer'))
+  const installerUrl = validateUrl(required(options, '--installer-url'))
+  const privateKeyPath = path.resolve(required(options, '--private-key'))
+  const outputPath = path.resolve(required(options, '--output'))
+  const publicKeyOutput = options['--public-key-output']
+    ? path.resolve(options['--public-key-output'])
+    : null
+  const version = required(options, '--version')
+  if (!/^\d+\.\d+\.\d+$/u.test(version)) throw new Error('version must be major.minor.patch')
+  const channel = validateShortText(options['--channel'] ?? 'stable', 32, 'channel')
+  const target = validateShortText(options['--target'] ?? 'windows-x64', 32, 'target')
+
+  const installer = await readFile(installerPath)
+  const installerStats = await stat(installerPath)
+  if (!installerStats.isFile() || installerStats.size === 0) throw new Error('installer is empty')
+  if (installerStats.size > 1024 * 1024 * 1024) throw new Error('installer exceeds 1 GiB')
+  const notes = options['--notes-file']
+    ? await readFile(path.resolve(options['--notes-file']), 'utf8')
+    : undefined
+  if (notes && (Buffer.byteLength(notes) > 4096 || /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/u.test(notes))) {
+    throw new Error('release notes are invalid')
+  }
+
+  const privateKey = createPrivateKey(await readFile(privateKeyPath, 'utf8'))
+  if (privateKey.asymmetricKeyType !== 'ed25519') throw new Error('private key must use Ed25519')
+  const publicKey = rawEd25519PublicKey(privateKey)
+  const payload = Buffer.from(JSON.stringify({
+    product: 'remotedesk',
+    channel,
+    version,
+    published_at: new Date().toISOString(),
+    target,
+    installer: {
+      url: installerUrl,
+      sha256: createHash('sha256').update(installer).digest('hex'),
+      size_bytes: installerStats.size,
+    },
+    ...(notes ? { notes } : {}),
+  }), 'utf8')
+  const signature = sign(null, payload, privateKey)
+  if (signature.length !== 64) throw new Error('Ed25519 signature must contain 64 bytes')
+  const envelope = {
+    schema: 1,
+    payload: payload.toString('base64'),
+    signature: signature.toString('base64'),
+  }
+  await writeFile(outputPath, `${JSON.stringify(envelope, null, 2)}\n`, { encoding: 'utf8', flag: 'wx' })
+  const publicKeyBase64 = publicKey.toString('base64')
+  if (publicKeyOutput) {
+    await writeFile(publicKeyOutput, `${publicKeyBase64}\n`, { encoding: 'ascii', flag: 'wx' })
+  }
+  process.stdout.write(`Manifest: ${outputPath}\n`)
+  process.stdout.write(`Update public key: ${publicKeyBase64}\n`)
+}
+
+main().catch((error) => {
+  process.stderr.write(`error: ${error instanceof Error ? error.message : String(error)}\n`)
+  process.exitCode = 1
+})
diff --git a/packaging/windows/icon.ico b/packaging/windows/icon.ico
new file mode 100644
index 0000000..bca8c50
Binary files /dev/null and b/packaging/windows/icon.ico differ
diff --git a/packaging/windows/make-icon.ps1 b/packaging/windows/make-icon.ps1
new file mode 100644
index 0000000..8443eff
--- /dev/null
+++ b/packaging/windows/make-icon.ps1
@@ -0,0 +1,19 @@
+[CmdletBinding()]
+param(
+    [Parameter(Mandatory)][string]$InputPng,
+    [Parameter(Mandatory)][string]$OutputIco
+)
+
+$ErrorActionPreference = 'Stop'
+Add-Type -AssemblyName System.Drawing
+$png = [System.IO.File]::ReadAllBytes((Resolve-Path $InputPng))
+$header = New-Object byte[] 22
+[BitConverter]::GetBytes([uint16]0).CopyTo($header, 0)
+[BitConverter]::GetBytes([uint16]1).CopyTo($header, 2)
+[BitConverter]::GetBytes([uint16]1).CopyTo($header, 4)
+$header[6] = 32; $header[7] = 32; $header[8] = 0; $header[9] = 0
+[BitConverter]::GetBytes([uint16]1).CopyTo($header, 10)
+[BitConverter]::GetBytes([uint16]32).CopyTo($header, 12)
+[BitConverter]::GetBytes([uint32]$png.Length).CopyTo($header, 14)
+[BitConverter]::GetBytes([uint32]22).CopyTo($header, 18)
+[System.IO.File]::WriteAllBytes($OutputIco, $header + $png)
diff --git a/packaging/windows/package-installer.ps1 b/packaging/windows/package-installer.ps1
new file mode 100644
index 0000000..8ee5292
--- /dev/null
+++ b/packaging/windows/package-installer.ps1
@@ -0,0 +1,410 @@
+[CmdletBinding()]
+param(
+    [ValidatePattern('^[0-9A-Fa-f]{40}$')]
+    [string]$SigningCertificateThumbprint,
+    [ValidatePattern('^https://')]
+    [string]$TimestampUrl = 'https://timestamp.digicert.com',
+    [ValidateSet('m0-preview', 'stable')]
+    [string]$ReleaseChannel = 'm0-preview',
+    [ValidateSet('zh-cn', 'en-us')]
+    [string]$Culture = 'zh-cn'
+)
+
+$ErrorActionPreference = 'Stop'
+Import-Module (Join-Path $PSScriptRoot 'Authenticode.psm1') -Force
+$repoRoot = [IO.Path]::GetFullPath((Join-Path $PSScriptRoot '..\..'))
+$artifactsRoot = [IO.Path]::GetFullPath((Join-Path $repoRoot 'artifacts'))
+$targetRoot = [IO.Path]::GetFullPath((Join-Path $repoRoot 'target'))
+$buildRoot = $null
+$previousRollForward = $env:DOTNET_ROLL_FORWARD
+$previousRustFlags = $env:RUSTFLAGS
+$env:RUSTFLAGS = '-C target-feature=+crt-static'
+
+$wixVersion = '4.0.6'
+$wixPackageHash = 'a94dd42ae1fb56b32da180e2173ceda4f0d10b4c8871c5ee59ecb502131a1eb6'
+$wixPackageUri = "https://api.nuget.org/v3-flatcontainer/wix/$wixVersion/wix.$wixVersion.nupkg"
+$signingEnabled = -not [string]::IsNullOrWhiteSpace($SigningCertificateThumbprint)
+if ($signingEnabled) {
+    $timestamp = [Uri]$TimestampUrl
+    if (-not $timestamp.IsAbsoluteUri -or $timestamp.Scheme -ne 'https' -or
+        -not [string]::IsNullOrEmpty($timestamp.UserInfo) -or
+        -not [string]::IsNullOrEmpty($timestamp.Query) -or
+        -not [string]::IsNullOrEmpty($timestamp.Fragment)) {
+        throw 'TimestampUrl must be a credential-free HTTPS URL without query or fragment'
+    }
+}
+
+function Invoke-Checked {
+    param(
+        [Parameter(Mandatory)]
+        [scriptblock]$Command,
+        [Parameter(Mandatory)]
+        [string]$Description
+    )
+
+    & $Command
+    if ($LASTEXITCODE -ne 0) {
+        throw "$Description failed with exit code $LASTEXITCODE"
+    }
+}
+
+function Assert-PathWithin {
+    param(
+        [Parameter(Mandatory)][string]$Path,
+        [Parameter(Mandatory)][string]$Root
+    )
+
+    $fullPath = [IO.Path]::GetFullPath($Path)
+    $prefix = [IO.Path]::GetFullPath($Root).TrimEnd([IO.Path]::DirectorySeparatorChar) + [IO.Path]::DirectorySeparatorChar
+    if (-not $fullPath.StartsWith($prefix, [StringComparison]::OrdinalIgnoreCase)) {
+        throw "Refusing to modify a path outside $Root"
+    }
+}
+
+function Get-WixTool {
+    $toolsRoot = Join-Path $targetRoot 'tools'
+    $packagePath = Join-Path $toolsRoot "wix.$wixVersion.nupkg"
+    $toolRoot = Join-Path $toolsRoot "wix-$wixVersion"
+    $wix = Join-Path $toolRoot 'tools\net6.0\any\wix.exe'
+    Assert-PathWithin -Path $packagePath -Root $targetRoot
+    Assert-PathWithin -Path $toolRoot -Root $targetRoot
+
+    New-Item -ItemType Directory -Force -Path $toolsRoot | Out-Null
+    if (-not (Test-Path -LiteralPath $packagePath -PathType Leaf)) {
+        $downloadPath = "$packagePath.download-$PID"
+        Assert-PathWithin -Path $downloadPath -Root $targetRoot
+        try {
+            Invoke-WebRequest -Uri $wixPackageUri -OutFile $downloadPath
+            $downloadHash = (Get-FileHash -LiteralPath $downloadPath -Algorithm SHA256).Hash.ToLowerInvariant()
+            if ($downloadHash -ne $wixPackageHash) {
+                throw "Downloaded WiX package hash mismatch: $downloadHash"
+            }
+            Move-Item -LiteralPath $downloadPath -Destination $packagePath
+        } finally {
+            if (Test-Path -LiteralPath $downloadPath) {
+                Remove-Item -LiteralPath $downloadPath -Force
+            }
+        }
+    }
+
+    $packageHash = (Get-FileHash -LiteralPath $packagePath -Algorithm SHA256).Hash.ToLowerInvariant()
+    if ($packageHash -ne $wixPackageHash) {
+        throw "Cached WiX package hash mismatch: $packageHash"
+    }
+    if (-not (Test-Path -LiteralPath $wix -PathType Leaf)) {
+        New-Item -ItemType Directory -Force -Path $toolRoot | Out-Null
+        Expand-Archive -LiteralPath $packagePath -DestinationPath $toolRoot -Force
+    }
+    if (-not (Test-Path -LiteralPath $wix -PathType Leaf)) {
+        throw 'WiX executable is missing after package extraction'
+    }
+    return $wix
+}
+
+function Get-StableWixId {
+    param(
+        [Parameter(Mandatory)][string]$Prefix,
+        [Parameter(Mandatory)][string]$Value
+    )
+
+    $bytes = [Text.Encoding]::UTF8.GetBytes($Value.ToLowerInvariant())
+    $sha = [Security.Cryptography.SHA256]::Create()
+    try {
+        $digest = ([BitConverter]::ToString($sha.ComputeHash($bytes)) -replace '-', '')
+    } finally {
+        $sha.Dispose()
+    }
+    return "${Prefix}_$($digest.Substring(0, 24))"
+}
+
+function New-WixElement {
+    param(
+        [Parameter(Mandatory)][Xml.XmlDocument]$Document,
+        [Parameter(Mandatory)][string]$Name,
+        [hashtable]$Attributes = @{}
+    )
+
+    $element = $Document.CreateElement($Name, 'http://wixtoolset.org/schemas/v4/wxs')
+    foreach ($attribute in $Attributes.GetEnumerator()) {
+        [void]$element.SetAttribute([string]$attribute.Key, [string]$attribute.Value)
+    }
+    return $element
+}
+
+function New-WixPayloadSource {
+    param(
+        [Parameter(Mandatory)][string]$PayloadRoot,
+        [Parameter(Mandatory)][string]$OutputPath
+    )
+
+    $files = @(Get-ChildItem -LiteralPath $PayloadRoot -Recurse -File | Sort-Object FullName)
+    if ($files.Count -eq 0) {
+        throw 'Installer payload is empty'
+    }
+
+    $document = [Xml.XmlDocument]::new()
+    [void]$document.AppendChild($document.CreateXmlDeclaration('1.0', 'utf-8', $null))
+    $wix = New-WixElement -Document $document -Name 'Wix'
+    [void]$document.AppendChild($wix)
+
+    $directoryFragment = New-WixElement -Document $document -Name 'Fragment'
+    $directoryRef = New-WixElement -Document $document -Name 'DirectoryRef' -Attributes @{ Id = 'INSTALLFOLDER' }
+    [void]$directoryFragment.AppendChild($directoryRef)
+    [void]$wix.AppendChild($directoryFragment)
+
+    $groupFragment = New-WixElement -Document $document -Name 'Fragment'
+    $componentGroup = New-WixElement -Document $document -Name 'ComponentGroup' -Attributes @{ Id = 'ApplicationFiles' }
+    [void]$groupFragment.AppendChild($componentGroup)
+    [void]$wix.AppendChild($groupFragment)
+
+    $directoryNodes = @{ '' = $directoryRef }
+    foreach ($file in $files) {
+        $rootUri = [Uri]((Resolve-Path -LiteralPath $PayloadRoot).Path.TrimEnd('\') + '\')
+        $fileUri = [Uri]((Resolve-Path -LiteralPath $file.FullName).Path)
+        $relativePath = [Uri]::UnescapeDataString($rootUri.MakeRelativeUri($fileUri).ToString()).Replace('/', '\')
+        $relativeDirectory = [IO.Path]::GetDirectoryName($relativePath)
+        $currentPath = ''
+        $parent = $directoryRef
+        if ($relativeDirectory) {
+            foreach ($part in $relativeDirectory.Split([IO.Path]::DirectorySeparatorChar, [StringSplitOptions]::RemoveEmptyEntries)) {
+                $currentPath = if ($currentPath) { "$currentPath\$part" } else { $part }
+                if (-not $directoryNodes.ContainsKey($currentPath)) {
+                    $directory = New-WixElement -Document $document -Name 'Directory' -Attributes @{
+                        Id = Get-StableWixId -Prefix 'D' -Value $currentPath
+                        Name = $part
+                    }
+                    [void]$parent.AppendChild($directory)
+                    $directoryNodes[$currentPath] = $directory
+                }
+                $parent = $directoryNodes[$currentPath]
+            }
+        }
+
+        $componentId = Get-StableWixId -Prefix 'C' -Value $relativePath
+        $component = New-WixElement -Document $document -Name 'Component' -Attributes @{
+            Id = $componentId
+            Guid = '*'
+        }
+        $fileElement = New-WixElement -Document $document -Name 'File' -Attributes @{
+            Id = Get-StableWixId -Prefix 'F' -Value $relativePath
+            Source = $file.FullName
+            KeyPath = 'yes'
+        }
+        [void]$component.AppendChild($fileElement)
+        [void]$parent.AppendChild($component)
+
+        $componentRef = New-WixElement -Document $document -Name 'ComponentRef' -Attributes @{ Id = $componentId }
+        [void]$componentGroup.AppendChild($componentRef)
+    }
+
+    $settings = [Xml.XmlWriterSettings]::new()
+    $settings.Indent = $true
+    $settings.Encoding = [Text.UTF8Encoding]::new($false)
+    $writer = [Xml.XmlWriter]::Create($OutputPath, $settings)
+    try {
+        $document.Save($writer)
+    } finally {
+        $writer.Dispose()
+    }
+}
+
+Push-Location $repoRoot
+try {
+    Invoke-Checked -Description 'Web production build' -Command {
+        Push-Location (Join-Path $repoRoot 'client\web')
+        try {
+            & npm.cmd run build
+        } finally {
+            Pop-Location
+        }
+    }
+    Invoke-Checked -Description 'Native helpers release build' -Command {
+        & cargo.exe build --release --jobs 2 -p remotedesk-app -p remotedesk-control-service -p remotedesk-credential-store -p remotedesk-linux-terminal -p remotedesk-native-video -p remotedesk-rdp-session -p remotedesk-rdp-viewer -p remotedesk-windows-agent-viewer
+    }
+
+    $metadata = (& cargo.exe metadata --no-deps --format-version 1 | ConvertFrom-Json)
+    if ($LASTEXITCODE -ne 0) {
+        throw 'Unable to read Cargo workspace metadata'
+    }
+    $helperPackage = $metadata.packages | Where-Object name -eq 'remotedesk-native-video'
+    if ($null -eq $helperPackage) {
+        throw 'remotedesk-native-video is missing from Cargo metadata'
+    }
+    $version = [string]$helperPackage.version
+    if ($version -notmatch '^[0-9]+\.[0-9]+\.[0-9]+$') {
+        throw "MSI requires a three-part numeric version: $version"
+    }
+
+    $hostLine = (& rustc.exe -vV | Select-String '^host: ').Line
+    if (-not $hostLine) {
+        throw 'Unable to determine the Rust host target'
+    }
+    $hostTarget = $hostLine.Substring(6).Trim()
+    $architecture = if ($hostTarget.StartsWith('x86_64-')) {
+        'x64'
+    } elseif ($hostTarget.StartsWith('aarch64-')) {
+        'arm64'
+    } else {
+        throw "Unsupported installer architecture: $hostTarget"
+    }
+
+    $wix = Get-WixTool
+    $uiExtension = Join-Path $targetRoot 'tools\wix-ui-4.0.6\wixext4\WixToolset.UI.wixext.dll'
+    if (-not (Test-Path -LiteralPath $uiExtension -PathType Leaf)) { throw "WiX UI extension is missing: $uiExtension" }
+    $signTool = if ($signingEnabled) { Get-RemoteDeskSignTool } else { $null }
+    $signingCertificate = if ($signingEnabled) {
+        Get-RemoteDeskSigningCertificate -Thumbprint $SigningCertificateThumbprint
+    } else {
+        $null
+    }
+    $buildRoot = Join-Path $artifactsRoot ".package-installer-$PID-$([guid]::NewGuid().ToString('N'))"
+    $payloadRoot = Join-Path $buildRoot 'payload'
+    $webRoot = Join-Path $payloadRoot 'web'
+    $binRoot = Join-Path $payloadRoot 'bin'
+    $docsRoot = Join-Path $payloadRoot 'docs'
+    $intermediateRoot = Join-Path $buildRoot 'wixobj'
+    $payloadSource = Join-Path $buildRoot 'payload.wxs'
+    $installerName = "RemoteDesk-M0-$version-$Culture-windows-$architecture.msi"
+    $temporaryInstaller = Join-Path $buildRoot $installerName
+    $installerPath = Join-Path $artifactsRoot $installerName
+    Assert-PathWithin -Path $buildRoot -Root $artifactsRoot
+    Assert-PathWithin -Path $installerPath -Root $artifactsRoot
+
+    New-Item -ItemType Directory -Force -Path $artifactsRoot | Out-Null
+    New-Item -ItemType Directory -Force -Path $webRoot, $binRoot, $docsRoot, $intermediateRoot | Out-Null
+    Copy-Item -Path (Join-Path $repoRoot 'client\web\dist\*') -Destination $webRoot -Recurse -Force
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'target\release\remotedesk.exe') -Destination $binRoot
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'target\release\remotedesk-control-service.exe') -Destination $binRoot
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'target\release\remotedesk-credential-store.exe') -Destination $binRoot
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'target\release\remotedesk-linux-terminal.exe') -Destination $binRoot
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'target\release\remotedesk-native-video.exe') -Destination $binRoot
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'target\release\remotedesk-rdp-session.exe') -Destination $binRoot
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'target\release\remotedesk-rdp-viewer.exe') -Destination $binRoot
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'target\release\remotedesk-windows-agent-viewer.exe') -Destination $binRoot
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'packaging\windows\Apply-RemoteDesk-Update.ps1') -Destination $payloadRoot
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'packaging\windows\README-INSTALLER.md') -Destination (Join-Path $payloadRoot 'README.md')
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'docs\user-guide.md') -Destination $docsRoot
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'docs\implementation-status.md') -Destination $docsRoot
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'docs\online-updates.md') -Destination $docsRoot
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'client\README.md') -Destination $docsRoot
+
+    $manifest = [ordered]@{
+        product = 'RemoteDesk'
+        version = $version
+        channel = $ReleaseChannel
+        culture = $Culture
+        distribution = 'msi'
+        install_scope = 'per-user'
+        target = $hostTarget
+        runnable_ui = 'bin/remotedesk.exe'
+        desktop_shell = 'tauri-2'
+        control_service = 'bin/remotedesk-control-service.exe'
+        credential_store = 'bin/remotedesk-credential-store.exe'
+        linux_terminal = 'bin/remotedesk-linux-terminal.exe'
+        native_helper = 'bin/remotedesk-native-video.exe'
+        rdp_probe_helper = 'bin/remotedesk-rdp-session.exe'
+        rdp_viewer = 'bin/remotedesk-rdp-viewer.exe'
+        windows_agent_viewer = 'bin/remotedesk-windows-agent-viewer.exe'
+        update_helper = 'Apply-RemoteDesk-Update.ps1'
+        signed = $signingEnabled
+        limitations = @(
+            'Native IronRDP uses merged dirty-rect D3D11 CPU texture uploads and swap-chain presentation when available; it is not hardware decode or zero-copy'
+            'The RDP protocol probe validates negotiation and TLS certificate identity but stops before NLA authentication'
+            'Native IronRDP custom monitor subsets are not available; all-local-monitor mode uses RDPEDISP'
+            'Linux Terminal is available; Linux graphical desktop, WebRTC, and CDN connector are not included'
+            'Online updates require an administrator-configured signed HTTPS manifest and public key'
+        )
+    }
+    $manifest | ConvertTo-Json -Depth 4 | Set-Content -LiteralPath (Join-Path $payloadRoot 'manifest.json') -Encoding utf8
+
+    # Build a no-install launcher alongside the MSI. The launcher starts the
+    # same complete payload from bin\remotedesk.exe using the payload root as
+    # its working directory.
+    $csc = Join-Path $env:WINDIR 'Microsoft.NET\Framework64\v4.0.30319\csc.exe'
+    if (-not (Test-Path -LiteralPath $csc)) { $csc = Join-Path $env:WINDIR 'Microsoft.NET\Framework\v4.0.30319\csc.exe' }
+    if (-not (Test-Path -LiteralPath $csc)) { throw 'Microsoft C# compiler (csc.exe) is required to create the portable client EXE.' }
+    $portableName = "RemoteDesk-M0-$version-$Culture-windows-$architecture"
+    $portableRoot = Join-Path $artifactsRoot "$portableName-portable"
+    if (Test-Path -LiteralPath $portableRoot) { Remove-Item -LiteralPath $portableRoot -Recurse -Force }
+    Copy-Item -LiteralPath $payloadRoot -Destination $portableRoot -Recurse -Force
+    $portableExe = Join-Path $portableRoot "$portableName.exe"
+    & $csc /nologo /target:winexe /platform:anycpu /optimize+ /win32icon:$(Join-Path $PSScriptRoot 'icon.ico') /out:$portableExe `
+        /reference:System.dll /reference:System.Windows.Forms.dll (Join-Path $PSScriptRoot 'RemoteDesk-Portable.cs')
+    if ($LASTEXITCODE -ne 0 -or -not (Test-Path -LiteralPath $portableExe)) { throw 'Unable to build portable client EXE.' }
+    $portableZip = Join-Path $artifactsRoot "$portableName.zip"
+    if (Test-Path -LiteralPath $portableZip) { Remove-Item -LiteralPath $portableZip -Force }
+    Compress-Archive -Path (Join-Path $portableRoot '*') -DestinationPath $portableZip -CompressionLevel Optimal
+
+    if ($signingEnabled) {
+        Get-ChildItem -LiteralPath $binRoot -Filter '*.exe' -File | Sort-Object Name | ForEach-Object {
+            Invoke-RemoteDeskSignTool -SignTool $signTool -Thumbprint $signingCertificate.Thumbprint `
+                -Path $_.FullName -TimestampServer $TimestampUrl
+        }
+        Get-ChildItem -LiteralPath $payloadRoot -Filter '*.ps1' -File | Sort-Object Name | ForEach-Object {
+            Invoke-RemoteDeskPowerShellSigning -Certificate $signingCertificate -Path $_.FullName `
+                -TimestampServer $TimestampUrl
+        }
+    }
+
+    $hashLines = Get-ChildItem -LiteralPath $payloadRoot -Recurse -File |
+        Sort-Object FullName |
+        ForEach-Object {
+            $rootUri = [Uri]((Resolve-Path -LiteralPath $payloadRoot).Path.TrimEnd('\') + '\')
+            $fileUri = [Uri]((Resolve-Path -LiteralPath $_.FullName).Path)
+            $relative = [Uri]::UnescapeDataString($rootUri.MakeRelativeUri($fileUri).ToString()).Replace('\', '/')
+            $hash = (Get-FileHash -LiteralPath $_.FullName -Algorithm SHA256).Hash.ToLowerInvariant()
+            "$hash  $relative"
+        }
+    $hashLines | Set-Content -LiteralPath (Join-Path $payloadRoot 'SHA256SUMS.txt') -Encoding ascii
+    New-WixPayloadSource -PayloadRoot $payloadRoot -OutputPath $payloadSource
+
+    $env:DOTNET_ROLL_FORWARD = 'Major'
+    Invoke-Checked -Description 'WiX MSI build' -Command {
+        & $wix build `
+            -arch $architecture `
+            -ext $uiExtension `
+            -culture $Culture `
+            -d "ProductVersion=$version" `
+            -d "PayloadRoot=$payloadRoot" `
+            -d "IconPath=$(Join-Path $PSScriptRoot 'icon.ico')" `
+            -intermediateFolder $intermediateRoot `
+            -pdbtype none `
+            -out $temporaryInstaller `
+            (Join-Path $PSScriptRoot 'RemoteDesk.wxs') `
+            $payloadSource
+    }
+    if (-not (Test-Path -LiteralPath $temporaryInstaller -PathType Leaf)) {
+        throw 'WiX did not produce the expected MSI'
+    }
+    Move-Item -LiteralPath $temporaryInstaller -Destination $installerPath -Force
+
+    if ($signingEnabled) {
+        Invoke-RemoteDeskSignTool -SignTool $signTool -Thumbprint $signingCertificate.Thumbprint `
+            -Path $installerPath -TimestampServer $TimestampUrl
+    }
+
+    $installerHash = (Get-FileHash -LiteralPath $installerPath -Algorithm SHA256).Hash.ToLowerInvariant()
+    "$installerHash  $installerName" |
+        Set-Content -LiteralPath (Join-Path $artifactsRoot 'INSTALLER-SHA256SUMS.txt') -Encoding ascii
+    Write-Output "Installer: $installerPath"
+    Write-Output "SHA256: $installerHash"
+    Write-Output "Authenticode: $(if ($signingEnabled) { "signed ($($signingCertificate.Thumbprint))" } else { 'unsigned development package' })"
+    Write-Output "Portable EXE: $portableExe"
+    Write-Output "Portable ZIP: $portableZip"
+} finally {
+    if ($null -eq $previousRollForward) {
+        Remove-Item Env:DOTNET_ROLL_FORWARD -ErrorAction SilentlyContinue
+    } else {
+        $env:DOTNET_ROLL_FORWARD = $previousRollForward
+    }
+    if ($null -eq $previousRustFlags) {
+        Remove-Item Env:RUSTFLAGS -ErrorAction SilentlyContinue
+    } else {
+        $env:RUSTFLAGS = $previousRustFlags
+    }
+    if ($buildRoot -and (Test-Path -LiteralPath $buildRoot)) {
+        Assert-PathWithin -Path $buildRoot -Root $artifactsRoot
+        Remove-Item -LiteralPath $buildRoot -Recurse -Force
+    }
+    Pop-Location
+}
diff --git a/packaging/windows/package-preview.ps1 b/packaging/windows/package-preview.ps1
new file mode 100644
index 0000000..1b3a029
--- /dev/null
+++ b/packaging/windows/package-preview.ps1
@@ -0,0 +1,166 @@
+[CmdletBinding()]
+param()
+
+$ErrorActionPreference = 'Stop'
+$repoRoot = [IO.Path]::GetFullPath((Join-Path $PSScriptRoot '..\..'))
+$artifactsRoot = [IO.Path]::GetFullPath((Join-Path $repoRoot 'artifacts'))
+$buildRoot = $null
+$previousRustFlags = $env:RUSTFLAGS
+$env:RUSTFLAGS = '-C target-feature=+crt-static'
+
+function Invoke-Checked {
+    param(
+        [Parameter(Mandatory)]
+        [scriptblock]$Command,
+        [Parameter(Mandatory)]
+        [string]$Description
+    )
+
+    & $Command
+    if ($LASTEXITCODE -ne 0) {
+        throw "$Description failed with exit code $LASTEXITCODE"
+    }
+}
+
+function Assert-ArtifactPath {
+    param([Parameter(Mandatory)][string]$Path)
+
+    $fullPath = [IO.Path]::GetFullPath($Path)
+    $prefix = $artifactsRoot.TrimEnd([IO.Path]::DirectorySeparatorChar) + [IO.Path]::DirectorySeparatorChar
+    if (-not $fullPath.StartsWith($prefix, [StringComparison]::OrdinalIgnoreCase)) {
+        throw "Refusing to modify a path outside $artifactsRoot"
+    }
+}
+
+Push-Location $repoRoot
+try {
+    Invoke-Checked -Description 'Web production build' -Command {
+        Push-Location (Join-Path $repoRoot 'client\web')
+        try {
+            & npm.cmd run build
+        } finally {
+            Pop-Location
+        }
+    }
+    Invoke-Checked -Description 'Native helpers release build' -Command {
+        & cargo.exe build --release --jobs 2 -p remotedesk-app -p remotedesk-control-service -p remotedesk-credential-store -p remotedesk-linux-terminal -p remotedesk-native-video -p remotedesk-rdp-session -p remotedesk-rdp-viewer -p remotedesk-windows-agent-viewer
+    }
+
+    $metadata = (& cargo.exe metadata --no-deps --format-version 1 | ConvertFrom-Json)
+    if ($LASTEXITCODE -ne 0) {
+        throw 'Unable to read Cargo workspace metadata'
+    }
+    $helperPackage = $metadata.packages | Where-Object name -eq 'remotedesk-native-video'
+    if ($null -eq $helperPackage) {
+        throw 'remotedesk-native-video is missing from Cargo metadata'
+    }
+    $version = [string]$helperPackage.version
+    if ($version -notmatch '^[0-9A-Za-z.-]+$') {
+        throw "Unsafe package version: $version"
+    }
+
+    $hostLine = (& rustc.exe -vV | Select-String '^host: ').Line
+    if (-not $hostLine) {
+        throw 'Unable to determine the Rust host target'
+    }
+    $hostTarget = $hostLine.Substring(6).Trim()
+    $architecture = if ($hostTarget.StartsWith('x86_64-')) {
+        'x64'
+    } elseif ($hostTarget.StartsWith('aarch64-')) {
+        'arm64'
+    } else {
+        throw "Unsupported packaging architecture: $hostTarget"
+    }
+
+    $packageName = "RemoteDesk-Portable-M0-$version-windows-$architecture"
+    $buildRoot = Join-Path $artifactsRoot ".package-preview-$PID-$([guid]::NewGuid().ToString('N'))"
+    $stagingRoot = Join-Path $buildRoot $packageName
+    $zipPath = Join-Path $artifactsRoot "$packageName.zip"
+    Assert-ArtifactPath $buildRoot
+    Assert-ArtifactPath $stagingRoot
+    Assert-ArtifactPath $zipPath
+
+    New-Item -ItemType Directory -Force -Path $artifactsRoot | Out-Null
+    if (Test-Path -LiteralPath $zipPath) {
+        Remove-Item -LiteralPath $zipPath -Force
+    }
+
+    $webRoot = Join-Path $stagingRoot 'web'
+    $binRoot = Join-Path $stagingRoot 'bin'
+    $docsRoot = Join-Path $stagingRoot 'docs'
+    New-Item -ItemType Directory -Force -Path $webRoot, $binRoot, $docsRoot | Out-Null
+
+    Copy-Item -Path (Join-Path $repoRoot 'client\web\dist\*') -Destination $webRoot -Recurse -Force
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'target\release\remotedesk.exe') -Destination $binRoot
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'target\release\remotedesk-control-service.exe') -Destination $binRoot
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'target\release\remotedesk-credential-store.exe') -Destination $binRoot
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'target\release\remotedesk-linux-terminal.exe') -Destination $binRoot
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'target\release\remotedesk-native-video.exe') -Destination $binRoot
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'target\release\remotedesk-rdp-session.exe') -Destination $binRoot
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'target\release\remotedesk-rdp-viewer.exe') -Destination $binRoot
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'target\release\remotedesk-windows-agent-viewer.exe') -Destination $binRoot
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'docs\user-guide.md') -Destination $docsRoot
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'docs\implementation-status.md') -Destination $docsRoot
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'docs\online-updates.md') -Destination $docsRoot
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'client\README.md') -Destination $docsRoot
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'README.md') -Destination $stagingRoot
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'packaging\windows\README-PREVIEW.md') -Destination $stagingRoot
+    Copy-Item -LiteralPath (Join-Path $repoRoot 'packaging\windows\Apply-RemoteDesk-Update.ps1') -Destination $stagingRoot
+
+    $manifest = [ordered]@{
+        product = 'RemoteDesk'
+        version = $version
+        channel = 'm0-preview'
+        distribution = 'portable'
+        target = $hostTarget
+        runnable_ui = 'bin/remotedesk.exe'
+        desktop_shell = 'tauri-2'
+        control_service = 'bin/remotedesk-control-service.exe'
+        credential_store = 'bin/remotedesk-credential-store.exe'
+        linux_terminal = 'bin/remotedesk-linux-terminal.exe'
+        native_helper = 'bin/remotedesk-native-video.exe'
+        rdp_probe_helper = 'bin/remotedesk-rdp-session.exe'
+        rdp_viewer = 'bin/remotedesk-rdp-viewer.exe'
+        windows_agent_viewer = 'bin/remotedesk-windows-agent-viewer.exe'
+        update_helper = 'Apply-RemoteDesk-Update.ps1'
+        d3d11_probe = 'bin/remotedesk-native-video.exe --probe-d3d11'
+        d3d11_rendering = $false
+        limitations = @(
+            'Portable archive only; no MSI installation or Start menu registration'
+            'Native IronRDP uses merged dirty-rect D3D11 CPU texture uploads and swap-chain presentation when available; it is not hardware decode or zero-copy'
+            'The RDP protocol probe validates negotiation and TLS certificate identity but stops before NLA authentication'
+            'Native IronRDP custom monitor subsets are not available; all-local-monitor mode uses RDPEDISP'
+            'Linux graphical desktop, WebRTC, and CDN connector capabilities remain disabled until native builds and end-to-end validation complete'
+            'The Linux Agent controlled endpoint is packaged separately'
+        )
+    }
+    $manifest | ConvertTo-Json -Depth 4 | Set-Content -LiteralPath (Join-Path $stagingRoot 'manifest.json') -Encoding utf8
+
+    $hashLines = Get-ChildItem -LiteralPath $stagingRoot -Recurse -File |
+        Sort-Object FullName |
+        ForEach-Object {
+            $relative = [IO.Path]::GetRelativePath($stagingRoot, $_.FullName).Replace('\', '/')
+            $hash = (Get-FileHash -LiteralPath $_.FullName -Algorithm SHA256).Hash.ToLowerInvariant()
+            "$hash  $relative"
+        }
+    $hashLines | Set-Content -LiteralPath (Join-Path $stagingRoot 'SHA256SUMS.txt') -Encoding ascii
+
+    Compress-Archive -LiteralPath $stagingRoot -DestinationPath $zipPath -CompressionLevel Optimal
+    $zipHash = (Get-FileHash -LiteralPath $zipPath -Algorithm SHA256).Hash.ToLowerInvariant()
+    "$zipHash  $([IO.Path]::GetFileName($zipPath))" |
+        Set-Content -LiteralPath (Join-Path $artifactsRoot 'SHA256SUMS.txt') -Encoding ascii
+
+    Write-Output "Package: $zipPath"
+    Write-Output "SHA256: $zipHash"
+} finally {
+    if ($null -eq $previousRustFlags) {
+        Remove-Item Env:RUSTFLAGS -ErrorAction SilentlyContinue
+    } else {
+        $env:RUSTFLAGS = $previousRustFlags
+    }
+    if ($buildRoot -and (Test-Path -LiteralPath $buildRoot)) {
+        Assert-ArtifactPath $buildRoot
+        Remove-Item -LiteralPath $buildRoot -Recurse -Force
+    }
+    Pop-Location
+}
diff --git a/packaging/windows/test-update-manifest.mjs b/packaging/windows/test-update-manifest.mjs
new file mode 100644
index 0000000..0091172
--- /dev/null
+++ b/packaging/windows/test-update-manifest.mjs
@@ -0,0 +1,77 @@
+import { createHash, generateKeyPairSync, verify } from 'node:crypto'
+import { mkdtemp, readFile, rm, writeFile } from 'node:fs/promises'
+import { tmpdir } from 'node:os'
+import path from 'node:path'
+import process from 'node:process'
+import { spawnSync } from 'node:child_process'
+
+function runGenerator(script, args, expectedSuccess) {
+  const result = spawnSync(process.execPath, [script, ...args], {
+    encoding: 'utf8',
+    windowsHide: true,
+  })
+  if ((result.status === 0) !== expectedSuccess) {
+    throw new Error(`generator exit ${result.status}: ${result.stderr || result.stdout}`)
+  }
+}
+
+const root = await mkdtemp(path.join(tmpdir(), 'remotedesk-update-manifest-'))
+try {
+  const script = path.resolve('packaging/windows/create-update-manifest.mjs')
+  const installer = path.join(root, 'RemoteDesk-M0-9.8.7-windows-x64.msi')
+  const privateKeyPath = path.join(root, 'private.pem')
+  const output = path.join(root, 'stable.json')
+  const publicOutput = path.join(root, 'public.txt')
+  const installerBytes = Buffer.from('deterministic MSI fixture bytes', 'utf8')
+  const { privateKey, publicKey } = generateKeyPairSync('ed25519')
+  await writeFile(installer, installerBytes)
+  await writeFile(privateKeyPath, privateKey.export({ type: 'pkcs8', format: 'pem' }))
+
+  const validArgs = [
+    '--installer', installer,
+    '--installer-url', 'https://updates.example.test/releases/RemoteDesk-M0-9.8.7-windows-x64.msi',
+    '--private-key', privateKeyPath,
+    '--version', '9.8.7',
+    '--channel', 'stable',
+    '--target', 'windows-x64',
+    '--output', output,
+    '--public-key-output', publicOutput,
+  ]
+  runGenerator(script, validArgs, true)
+
+  const envelope = JSON.parse(await readFile(output, 'utf8'))
+  if (envelope.schema !== 1 || typeof envelope.payload !== 'string' || typeof envelope.signature !== 'string') {
+    throw new Error('generated envelope schema is invalid')
+  }
+  const payloadBytes = Buffer.from(envelope.payload, 'base64')
+  const signature = Buffer.from(envelope.signature, 'base64')
+  if (signature.length !== 64 || !verify(null, payloadBytes, publicKey, signature)) {
+    throw new Error('generated Ed25519 signature is invalid')
+  }
+  const payload = JSON.parse(payloadBytes.toString('utf8'))
+  const expectedHash = createHash('sha256').update(installerBytes).digest('hex')
+  if (payload.product !== 'remotedesk'
+      || payload.channel !== 'stable'
+      || payload.version !== '9.8.7'
+      || payload.target !== 'windows-x64'
+      || payload.installer.sha256 !== expectedHash
+      || payload.installer.size_bytes !== installerBytes.length) {
+    throw new Error('signed payload does not bind the installer and release metadata')
+  }
+  const expectedPublicKey = Buffer.from(publicKey.export({ format: 'jwk' }).x, 'base64url').toString('base64')
+  if ((await readFile(publicOutput, 'ascii')).trim() !== expectedPublicKey) {
+    throw new Error('published raw update public key does not match the signing key')
+  }
+
+  runGenerator(script, validArgs, false)
+  runGenerator(script, [
+    '--installer', installer,
+    '--installer-url', 'http://updates.example.test/RemoteDesk.msi',
+    '--private-key', privateKeyPath,
+    '--version', '9.8.7',
+    '--output', path.join(root, 'invalid.json'),
+  ], false)
+  process.stdout.write('update manifest generator contract: OK\n')
+} finally {
+  await rm(root, { recursive: true, force: true })
+}
diff --git a/protocol/Cargo.toml b/protocol/Cargo.toml
new file mode 100644
index 0000000..782d821
--- /dev/null
+++ b/protocol/Cargo.toml
@@ -0,0 +1,15 @@
+[package]
+name = "remotedesk-protocol"
+version.workspace = true
+edition.workspace = true
+rust-version.workspace = true
+license.workspace = true
+description = "Protocol state models for RemoteDesk"
+
+[lib]
+path = "src/lib.rs"
+
+[dependencies]
+
+[lints]
+workspace = true
diff --git a/protocol/src/displays.rs b/protocol/src/displays.rs
new file mode 100644
index 0000000..99cd5dc
--- /dev/null
+++ b/protocol/src/displays.rs
@@ -0,0 +1,701 @@
+use core::fmt;
+use std::collections::BTreeSet;
+
+/// Number of bytes in a stable display identifier.
+pub const DISPLAY_ID_LENGTH: usize = 16;
+
+/// Stable, opaque identity of one physical or virtual display.
+///
+/// Producers must derive this value from platform identity that survives
+/// layout, resolution, and primary-display changes. A display's position in
+/// [`DisplayLayout::displays`] is not an identity and must never be used as
+/// one.
+#[derive(Clone, Copy, Debug, Hash, PartialEq, Eq, PartialOrd, Ord)]
+pub struct DisplayId([u8; DISPLAY_ID_LENGTH]);
+
+impl DisplayId {
+    /// Creates an identifier from its exact wire bytes.
+    #[must_use]
+    pub const fn from_bytes(bytes: [u8; DISPLAY_ID_LENGTH]) -> Self {
+        Self(bytes)
+    }
+
+    /// Returns the exact bytes used on the wire.
+    #[must_use]
+    pub const fn as_bytes(&self) -> &[u8; DISPLAY_ID_LENGTH] {
+        &self.0
+    }
+
+    /// Consumes the identifier and returns its exact wire bytes.
+    #[must_use]
+    pub const fn into_bytes(self) -> [u8; DISPLAY_ID_LENGTH] {
+        self.0
+    }
+}
+
+impl From<[u8; DISPLAY_ID_LENGTH]> for DisplayId {
+    fn from(value: [u8; DISPLAY_ID_LENGTH]) -> Self {
+        Self::from_bytes(value)
+    }
+}
+
+impl From<DisplayId> for [u8; DISPLAY_ID_LENGTH] {
+    fn from(value: DisplayId) -> Self {
+        value.into_bytes()
+    }
+}
+
+/// Half-open display rectangle in physical desktop pixels.
+///
+/// Negative `x` and `y` coordinates are valid. `width` and `height` are
+/// validated by [`DisplayLayout::new`], including their right/bottom bounds.
+#[derive(Clone, Copy, Debug, PartialEq, Eq)]
+pub struct DisplayRect {
+    /// Horizontal origin relative to the primary desktop origin.
+    pub x: i32,
+    /// Vertical origin relative to the primary desktop origin.
+    pub y: i32,
+    /// Physical width in pixels.
+    pub width: u32,
+    /// Physical height in pixels.
+    pub height: u32,
+}
+
+impl DisplayRect {
+    /// Returns the exclusive right edge when it is representable as `i32`.
+    #[must_use]
+    pub fn right(self) -> Option<i32> {
+        i32::try_from(i64::from(self.x) + i64::from(self.width)).ok()
+    }
+
+    /// Returns the exclusive bottom edge when it is representable as `i32`.
+    #[must_use]
+    pub fn bottom(self) -> Option<i32> {
+        i32::try_from(i64::from(self.y) + i64::from(self.height)).ok()
+    }
+
+    /// Returns the physical pixel count, or `None` if its wire dimensions
+    /// cannot be multiplied by the local implementation.
+    #[must_use]
+    pub const fn pixel_count(self) -> Option<u64> {
+        (self.width as u64).checked_mul(self.height as u64)
+    }
+}
+
+/// Exact desktop scale represented without floating-point ambiguity.
+///
+/// For example, 125% scaling is represented as `5 / 4`. Both parts must be
+/// non-zero; [`DisplayLayout::new`] enforces that invariant at the protocol
+/// boundary. The ratio is intentionally not required to be reduced, because
+/// preserving the platform's reported value can be useful for diagnostics.
+#[derive(Clone, Copy, Debug, PartialEq, Eq)]
+pub struct DisplayScale {
+    /// Numerator of physical pixels per logical pixel.
+    pub numerator: u32,
+    /// Denominator of physical pixels per logical pixel.
+    pub denominator: u32,
+}
+
+impl DisplayScale {
+    /// One physical pixel per logical pixel.
+    pub const ONE: Self = Self {
+        numerator: 1,
+        denominator: 1,
+    };
+}
+
+/// Wire-level description of one display in the desktop coordinate space.
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub struct DisplayDescriptor {
+    /// Stable identity independent of layout order and geometry.
+    pub id: DisplayId,
+    /// Bounds in the shared physical desktop coordinate space.
+    pub rect: DisplayRect,
+    /// Desktop scale applied to this display.
+    pub scale: DisplayScale,
+    /// Whether this is the layout's primary display.
+    pub is_primary: bool,
+}
+
+/// A validated display topology at one monotonically changing generation.
+///
+/// Wire decoders must construct layouts with [`DisplayLayout::new`] rather
+/// than exposing unvalidated descriptors to session or capture code.
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub struct DisplayLayout {
+    generation: u64,
+    displays: Vec<DisplayDescriptor>,
+    total_pixel_count: u64,
+}
+
+impl DisplayLayout {
+    /// Validates and creates a display layout.
+    ///
+    /// The generation belongs to the producer's display-topology stream. It
+    /// must change whenever identity, geometry, scale, or primary status
+    /// changes. Consumers bind selections to it to reject stale requests.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`DisplayLayoutError`] for an empty topology, duplicate IDs,
+    /// zero dimensions or scale parts, unrepresentable rectangle edges,
+    /// aggregate pixel-count overflow, anything other than one primary
+    /// display, or a primary display outside `(0, 0)`.
+    pub fn new(
+        generation: u64,
+        displays: Vec<DisplayDescriptor>,
+    ) -> Result<Self, DisplayLayoutError> {
+        if displays.is_empty() {
+            return Err(DisplayLayoutError::EmptyLayout);
+        }
+
+        let mut ids = BTreeSet::new();
+        let mut total_pixel_count = 0_u64;
+        let mut primary_count = 0_usize;
+        let mut primary_origin = None;
+
+        for display in &displays {
+            if !ids.insert(display.id) {
+                return Err(DisplayLayoutError::DuplicateDisplayId(display.id));
+            }
+            if display.rect.width == 0 || display.rect.height == 0 {
+                return Err(DisplayLayoutError::ZeroSizedDisplay(display.id));
+            }
+            if display.scale.numerator == 0 || display.scale.denominator == 0 {
+                return Err(DisplayLayoutError::InvalidScale(display.id));
+            }
+            if display.rect.right().is_none() {
+                return Err(DisplayLayoutError::CoordinateOverflow {
+                    display_id: display.id,
+                    axis: DisplayAxis::Horizontal,
+                });
+            }
+            if display.rect.bottom().is_none() {
+                return Err(DisplayLayoutError::CoordinateOverflow {
+                    display_id: display.id,
+                    axis: DisplayAxis::Vertical,
+                });
+            }
+
+            let pixel_count = display
+                .rect
+                .pixel_count()
+                .ok_or(DisplayLayoutError::PixelCountOverflow)?;
+            total_pixel_count = total_pixel_count
+                .checked_add(pixel_count)
+                .ok_or(DisplayLayoutError::PixelCountOverflow)?;
+            if display.is_primary {
+                primary_count += 1;
+                primary_origin = Some((display.id, display.rect.x, display.rect.y));
+            }
+        }
+
+        if primary_count != 1 {
+            return Err(DisplayLayoutError::InvalidPrimaryDisplayCount {
+                found: primary_count,
+            });
+        }
+        if let Some((display_id, x, y)) = primary_origin
+            && (x != 0 || y != 0)
+        {
+            return Err(DisplayLayoutError::PrimaryDisplayNotAtOrigin { display_id, x, y });
+        }
+
+        Ok(Self {
+            generation,
+            displays,
+            total_pixel_count,
+        })
+    }
+
+    /// Returns the producer-assigned topology generation.
+    #[must_use]
+    pub const fn generation(&self) -> u64 {
+        self.generation
+    }
+
+    /// Returns descriptors in the producer's stable presentation order.
+    #[must_use]
+    pub fn displays(&self) -> &[DisplayDescriptor] {
+        &self.displays
+    }
+
+    /// Returns the aggregate number of physical pixels across all displays.
+    #[must_use]
+    pub const fn total_pixel_count(&self) -> u64 {
+        self.total_pixel_count
+    }
+
+    /// Looks up one display by stable identity.
+    #[must_use]
+    pub fn display(&self, id: DisplayId) -> Option<&DisplayDescriptor> {
+        self.displays.iter().find(|display| display.id == id)
+    }
+
+    /// Validates and resolves a selection against this exact generation.
+    ///
+    /// Returned displays follow layout order for [`DisplaySelectionMode::All`]
+    /// and caller order for single/custom selections.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`DisplaySelectionError`] if the selection is stale, empty,
+    /// refers to an unknown display, or repeats an identity.
+    pub fn selected_displays(
+        &self,
+        selection: &DisplaySelection,
+    ) -> Result<Vec<&DisplayDescriptor>, DisplaySelectionError> {
+        if selection.layout_generation != self.generation {
+            return Err(DisplaySelectionError::LayoutGenerationMismatch {
+                expected: self.generation,
+                actual: selection.layout_generation,
+            });
+        }
+
+        match &selection.mode {
+            DisplaySelectionMode::All => Ok(self.displays.iter().collect()),
+            DisplaySelectionMode::Single(id) => self
+                .display(*id)
+                .map(|display| vec![display])
+                .ok_or(DisplaySelectionError::UnknownDisplay(*id)),
+            DisplaySelectionMode::Custom(ids) => {
+                if ids.is_empty() {
+                    return Err(DisplaySelectionError::EmptyCustomSelection);
+                }
+
+                let mut seen = BTreeSet::new();
+                let mut selected = Vec::with_capacity(ids.len());
+                for id in ids {
+                    if !seen.insert(*id) {
+                        return Err(DisplaySelectionError::DuplicateDisplay(*id));
+                    }
+                    selected.push(
+                        self.display(*id)
+                            .ok_or(DisplaySelectionError::UnknownDisplay(*id))?,
+                    );
+                }
+                Ok(selected)
+            }
+        }
+    }
+
+    /// Checks a selection without retaining the resolved descriptors.
+    ///
+    /// # Errors
+    ///
+    /// Returns the same errors as [`DisplayLayout::selected_displays`].
+    pub fn validate_selection(
+        &self,
+        selection: &DisplaySelection,
+    ) -> Result<(), DisplaySelectionError> {
+        self.selected_displays(selection).map(|_| ())
+    }
+}
+
+/// Display capture mode requested by a client.
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub enum DisplaySelectionMode {
+    /// Capture exactly one display.
+    Single(DisplayId),
+    /// Capture every display in the validated layout.
+    All,
+    /// Capture the listed displays in caller-defined presentation order.
+    Custom(Vec<DisplayId>),
+}
+
+/// A capture selection bound to one display-layout generation.
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub struct DisplaySelection {
+    layout_generation: u64,
+    mode: DisplaySelectionMode,
+}
+
+impl DisplaySelection {
+    /// Creates a selection. The target [`DisplayLayout`] performs fail-close
+    /// validation because only it knows which IDs belong to the generation.
+    #[must_use]
+    pub const fn new(layout_generation: u64, mode: DisplaySelectionMode) -> Self {
+        Self {
+            layout_generation,
+            mode,
+        }
+    }
+
+    /// Selects one display in a layout generation.
+    #[must_use]
+    pub const fn single(layout_generation: u64, display_id: DisplayId) -> Self {
+        Self::new(layout_generation, DisplaySelectionMode::Single(display_id))
+    }
+
+    /// Selects every display in a layout generation.
+    #[must_use]
+    pub const fn all(layout_generation: u64) -> Self {
+        Self::new(layout_generation, DisplaySelectionMode::All)
+    }
+
+    /// Selects a caller-ordered subset in a layout generation.
+    #[must_use]
+    pub const fn custom(layout_generation: u64, display_ids: Vec<DisplayId>) -> Self {
+        Self::new(layout_generation, DisplaySelectionMode::Custom(display_ids))
+    }
+
+    /// Returns the generation to which this selection is bound.
+    #[must_use]
+    pub const fn layout_generation(&self) -> u64 {
+        self.layout_generation
+    }
+
+    /// Returns the requested selection mode.
+    #[must_use]
+    pub const fn mode(&self) -> &DisplaySelectionMode {
+        &self.mode
+    }
+}
+
+/// Rectangle axis whose exclusive endpoint cannot be represented.
+#[derive(Clone, Copy, Debug, PartialEq, Eq)]
+pub enum DisplayAxis {
+    /// The exclusive right edge overflowed.
+    Horizontal,
+    /// The exclusive bottom edge overflowed.
+    Vertical,
+}
+
+/// Rejection reason for an untrusted display layout.
+#[derive(Clone, Copy, Debug, PartialEq, Eq)]
+pub enum DisplayLayoutError {
+    /// No display descriptors were supplied.
+    EmptyLayout,
+    /// More than one descriptor used the same stable identity.
+    DuplicateDisplayId(DisplayId),
+    /// A descriptor had a zero width or height.
+    ZeroSizedDisplay(DisplayId),
+    /// A scale numerator or denominator was zero.
+    InvalidScale(DisplayId),
+    /// A rectangle's exclusive endpoint was not representable.
+    CoordinateOverflow {
+        /// Identity of the invalid descriptor.
+        display_id: DisplayId,
+        /// Axis whose endpoint overflowed.
+        axis: DisplayAxis,
+    },
+    /// The aggregate physical pixel count exceeded `u64`.
+    PixelCountOverflow,
+    /// The layout did not contain exactly one primary display.
+    InvalidPrimaryDisplayCount {
+        /// Number of descriptors marked primary.
+        found: usize,
+    },
+    /// The sole primary display was not located at the desktop origin.
+    PrimaryDisplayNotAtOrigin {
+        /// Identity of the primary display.
+        display_id: DisplayId,
+        /// Invalid horizontal origin.
+        x: i32,
+        /// Invalid vertical origin.
+        y: i32,
+    },
+}
+
+impl fmt::Display for DisplayLayoutError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        write!(formatter, "display layout validation failed: {self:?}")
+    }
+}
+
+impl std::error::Error for DisplayLayoutError {}
+
+/// Rejection reason for a selection against a validated display layout.
+#[derive(Clone, Copy, Debug, PartialEq, Eq)]
+pub enum DisplaySelectionError {
+    /// The request targets a stale or future layout generation.
+    LayoutGenerationMismatch {
+        /// Generation of the validated local layout.
+        expected: u64,
+        /// Generation carried by the selection request.
+        actual: u64,
+    },
+    /// Custom mode did not contain any display IDs.
+    EmptyCustomSelection,
+    /// The selected ID does not occur in the bound layout.
+    UnknownDisplay(DisplayId),
+    /// Custom mode repeated a display ID.
+    DuplicateDisplay(DisplayId),
+}
+
+impl fmt::Display for DisplaySelectionError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        write!(formatter, "display selection validation failed: {self:?}")
+    }
+}
+
+impl std::error::Error for DisplaySelectionError {}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn id(value: u8) -> DisplayId {
+        DisplayId::from_bytes([value; DISPLAY_ID_LENGTH])
+    }
+
+    fn descriptor(value: u8, x: i32, primary: bool) -> DisplayDescriptor {
+        DisplayDescriptor {
+            id: id(value),
+            rect: DisplayRect {
+                x,
+                y: 0,
+                width: 1_920,
+                height: 1_080,
+            },
+            scale: DisplayScale::ONE,
+            is_primary: primary,
+        }
+    }
+
+    fn layout() -> DisplayLayout {
+        DisplayLayout::new(
+            7,
+            vec![descriptor(1, -1_920, false), descriptor(2, 0, true)],
+        )
+        .unwrap()
+    }
+
+    #[test]
+    fn display_id_preserves_exact_stable_wire_bytes() {
+        let bytes = [42; DISPLAY_ID_LENGTH];
+        let display_id = DisplayId::from_bytes(bytes);
+
+        assert_eq!(display_id.as_bytes(), &bytes);
+        assert_eq!(display_id.into_bytes(), bytes);
+    }
+
+    #[test]
+    fn valid_layout_keeps_negative_coordinates_scale_and_generation() {
+        let mut secondary = descriptor(1, -2_560, false);
+        secondary.rect.width = 2_560;
+        secondary.rect.height = 1_440;
+        secondary.scale = DisplayScale {
+            numerator: 5,
+            denominator: 4,
+        };
+        let expected_pixels =
+            u64::from(secondary.rect.width) * u64::from(secondary.rect.height) + 1_920 * 1_080;
+
+        let layout =
+            DisplayLayout::new(19, vec![secondary.clone(), descriptor(2, 0, true)]).unwrap();
+
+        assert_eq!(layout.generation(), 19);
+        assert_eq!(layout.displays()[0], secondary);
+        assert_eq!(layout.displays()[0].rect.right(), Some(0));
+        assert_eq!(layout.total_pixel_count(), expected_pixels);
+        assert!(layout.display(id(2)).unwrap().is_primary);
+    }
+
+    #[test]
+    fn empty_layout_fails_closed() {
+        assert_eq!(
+            DisplayLayout::new(1, Vec::new()),
+            Err(DisplayLayoutError::EmptyLayout)
+        );
+    }
+
+    #[test]
+    fn duplicate_identity_fails_closed_even_when_geometry_differs() {
+        let primary = descriptor(1, 0, true);
+        let duplicate = descriptor(1, 1_920, false);
+
+        assert_eq!(
+            DisplayLayout::new(1, vec![primary, duplicate]),
+            Err(DisplayLayoutError::DuplicateDisplayId(id(1)))
+        );
+    }
+
+    #[test]
+    fn zero_width_or_height_fails_closed() {
+        for (width, height) in [(0, 100), (100, 0)] {
+            let mut display = descriptor(1, 0, true);
+            display.rect.width = width;
+            display.rect.height = height;
+
+            assert_eq!(
+                DisplayLayout::new(1, vec![display]),
+                Err(DisplayLayoutError::ZeroSizedDisplay(id(1)))
+            );
+        }
+    }
+
+    #[test]
+    fn zero_scale_part_fails_closed() {
+        for (numerator, denominator) in [(0, 1), (1, 0)] {
+            let mut display = descriptor(1, 0, true);
+            display.scale = DisplayScale {
+                numerator,
+                denominator,
+            };
+
+            assert_eq!(
+                DisplayLayout::new(1, vec![display]),
+                Err(DisplayLayoutError::InvalidScale(id(1)))
+            );
+        }
+    }
+
+    #[test]
+    fn layout_requires_exactly_one_primary_display() {
+        assert_eq!(
+            DisplayLayout::new(
+                1,
+                vec![descriptor(1, 0, false), descriptor(2, 1_920, false)]
+            ),
+            Err(DisplayLayoutError::InvalidPrimaryDisplayCount { found: 0 })
+        );
+        assert_eq!(
+            DisplayLayout::new(1, vec![descriptor(1, 0, true), descriptor(2, 1_920, true)]),
+            Err(DisplayLayoutError::InvalidPrimaryDisplayCount { found: 2 })
+        );
+    }
+
+    #[test]
+    fn primary_display_must_define_the_desktop_origin() {
+        for (x, y) in [(1, 0), (0, -1), (-1, 1)] {
+            let mut primary = descriptor(1, x, true);
+            primary.rect.y = y;
+
+            assert_eq!(
+                DisplayLayout::new(1, vec![primary]),
+                Err(DisplayLayoutError::PrimaryDisplayNotAtOrigin {
+                    display_id: id(1),
+                    x,
+                    y,
+                })
+            );
+        }
+    }
+
+    #[test]
+    fn negative_secondary_coordinates_remain_valid() {
+        let layout = DisplayLayout::new(
+            1,
+            vec![descriptor(1, 0, true), descriptor(2, -1_920, false)],
+        )
+        .unwrap();
+
+        assert_eq!(layout.display(id(2)).unwrap().rect.x, -1_920);
+    }
+
+    #[test]
+    fn unrepresentable_rectangle_edges_fail_closed() {
+        let mut horizontal = descriptor(1, i32::MAX, true);
+        horizontal.rect.width = 1;
+        assert_eq!(
+            DisplayLayout::new(1, vec![horizontal]),
+            Err(DisplayLayoutError::CoordinateOverflow {
+                display_id: id(1),
+                axis: DisplayAxis::Horizontal,
+            })
+        );
+
+        let mut vertical = descriptor(2, 0, true);
+        vertical.rect.y = i32::MAX;
+        vertical.rect.height = 1;
+        assert_eq!(
+            DisplayLayout::new(1, vec![vertical]),
+            Err(DisplayLayoutError::CoordinateOverflow {
+                display_id: id(2),
+                axis: DisplayAxis::Vertical,
+            })
+        );
+    }
+
+    #[test]
+    fn aggregate_pixel_count_overflow_fails_closed() {
+        let enormous = DisplayDescriptor {
+            id: id(1),
+            rect: DisplayRect {
+                x: i32::MIN,
+                y: i32::MIN,
+                width: u32::MAX,
+                height: u32::MAX,
+            },
+            scale: DisplayScale::ONE,
+            is_primary: true,
+        };
+        let mut overflow = descriptor(2, 0, false);
+        overflow.rect.width = 100_000;
+        overflow.rect.height = 100_000;
+
+        assert_eq!(
+            DisplayLayout::new(1, vec![enormous, overflow]),
+            Err(DisplayLayoutError::PixelCountOverflow)
+        );
+    }
+
+    #[test]
+    fn single_all_and_custom_selections_resolve_in_defined_order() {
+        let layout = layout();
+
+        let single = layout
+            .selected_displays(&DisplaySelection::single(7, id(2)))
+            .unwrap();
+        assert_eq!(
+            single.iter().map(|display| display.id).collect::<Vec<_>>(),
+            vec![id(2)]
+        );
+
+        let all = layout.selected_displays(&DisplaySelection::all(7)).unwrap();
+        assert_eq!(
+            all.iter().map(|display| display.id).collect::<Vec<_>>(),
+            vec![id(1), id(2)]
+        );
+
+        let custom = layout
+            .selected_displays(&DisplaySelection::custom(7, vec![id(2), id(1)]))
+            .unwrap();
+        assert_eq!(
+            custom.iter().map(|display| display.id).collect::<Vec<_>>(),
+            vec![id(2), id(1)]
+        );
+    }
+
+    #[test]
+    fn stale_selection_generation_fails_before_id_resolution() {
+        let selection = DisplaySelection::single(6, id(99));
+
+        assert_eq!(
+            layout().validate_selection(&selection),
+            Err(DisplaySelectionError::LayoutGenerationMismatch {
+                expected: 7,
+                actual: 6,
+            })
+        );
+    }
+
+    #[test]
+    fn unknown_single_or_custom_identity_fails_closed() {
+        let layout = layout();
+
+        assert_eq!(
+            layout.validate_selection(&DisplaySelection::single(7, id(99))),
+            Err(DisplaySelectionError::UnknownDisplay(id(99)))
+        );
+        assert_eq!(
+            layout.validate_selection(&DisplaySelection::custom(7, vec![id(1), id(99)])),
+            Err(DisplaySelectionError::UnknownDisplay(id(99)))
+        );
+    }
+
+    #[test]
+    fn duplicate_or_empty_custom_selection_fails_closed() {
+        let layout = layout();
+
+        assert_eq!(
+            layout.validate_selection(&DisplaySelection::custom(7, vec![id(1), id(1)])),
+            Err(DisplaySelectionError::DuplicateDisplay(id(1)))
+        );
+        assert_eq!(
+            layout.validate_selection(&DisplaySelection::custom(7, Vec::new())),
+            Err(DisplaySelectionError::EmptyCustomSelection)
+        );
+    }
+}
diff --git a/protocol/src/edge_signaling.rs b/protocol/src/edge_signaling.rs
new file mode 100644
index 0000000..b92590a
--- /dev/null
+++ b/protocol/src/edge_signaling.rs
@@ -0,0 +1,678 @@
+use std::fmt;
+
+pub const SESSION_INTENT_DOMAIN_V1: &[u8] = b"RemoteDesk/EdgeSessionIntent/v1\0";
+pub const AGENT_SIGNAL_PROOF_DOMAIN_V1: &[u8] = b"RemoteDesk/AgentSignalProof/v1\0";
+pub const NEGOTIATION_ENVELOPE_DOMAIN_V1: &[u8] = b"RemoteDesk/EdgeNegotiationEnvelope/v1\0";
+pub const SIGNAL_NONCE_LENGTH: usize = 32;
+pub const MAX_SDP_BYTES: usize = 128 * 1024;
+pub const MAX_ICE_CANDIDATE_BYTES: usize = 4 * 1024;
+
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub enum EdgeSessionType {
+    Pairing,
+    Terminal,
+    Files,
+    Desktop,
+}
+
+impl EdgeSessionType {
+    #[must_use]
+    pub const fn as_str(self) -> &'static str {
+        match self {
+            Self::Pairing => "pairing",
+            Self::Terminal => "terminal",
+            Self::Files => "files",
+            Self::Desktop => "desktop",
+        }
+    }
+
+    /// Parses the stable wire value.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error for unsupported session types.
+    pub fn parse(value: &str) -> Result<Self, EdgeSignalBuildError> {
+        match value {
+            "pairing" => Ok(Self::Pairing),
+            "terminal" => Ok(Self::Terminal),
+            "files" => Ok(Self::Files),
+            "desktop" => Ok(Self::Desktop),
+            _ => Err(EdgeSignalBuildError::InvalidSessionType),
+        }
+    }
+}
+
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub enum EdgeNegotiationEndpoint {
+    Client,
+    Agent,
+}
+
+impl EdgeNegotiationEndpoint {
+    #[must_use]
+    pub const fn as_str(self) -> &'static str {
+        match self {
+            Self::Client => "client",
+            Self::Agent => "agent",
+        }
+    }
+
+    /// Parses the stable wire value.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error for unsupported endpoint roles.
+    pub fn parse(value: &str) -> Result<Self, EdgeSignalBuildError> {
+        match value {
+            "client" => Ok(Self::Client),
+            "agent" => Ok(Self::Agent),
+            _ => Err(EdgeSignalBuildError::InvalidEndpoint),
+        }
+    }
+}
+
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub enum EdgeNegotiationOperation {
+    Send,
+    Poll,
+}
+
+impl EdgeNegotiationOperation {
+    #[must_use]
+    pub const fn as_str(self) -> &'static str {
+        match self {
+            Self::Send => "send",
+            Self::Poll => "poll",
+        }
+    }
+
+    /// Parses the stable wire value.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error for unsupported operations.
+    pub fn parse(value: &str) -> Result<Self, EdgeSignalBuildError> {
+        match value {
+            "send" => Ok(Self::Send),
+            "poll" => Ok(Self::Poll),
+            _ => Err(EdgeSignalBuildError::InvalidOperation),
+        }
+    }
+}
+
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub enum EdgeNegotiationKind {
+    Offer,
+    Answer,
+    IceCandidate,
+    IceEnd,
+    Restart,
+}
+
+impl EdgeNegotiationKind {
+    #[must_use]
+    pub const fn as_str(self) -> &'static str {
+        match self {
+            Self::Offer => "offer",
+            Self::Answer => "answer",
+            Self::IceCandidate => "ice_candidate",
+            Self::IceEnd => "ice_end",
+            Self::Restart => "restart",
+        }
+    }
+
+    /// Parses the stable wire value.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error for unsupported message kinds.
+    pub fn parse(value: &str) -> Result<Self, EdgeSignalBuildError> {
+        match value {
+            "offer" => Ok(Self::Offer),
+            "answer" => Ok(Self::Answer),
+            "ice_candidate" => Ok(Self::IceCandidate),
+            "ice_end" => Ok(Self::IceEnd),
+            "restart" => Ok(Self::Restart),
+            _ => Err(EdgeSignalBuildError::InvalidNegotiationKind),
+        }
+    }
+}
+
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct EdgeNegotiationEnvelopeV1 {
+    pub request_id: String,
+    pub session_id: String,
+    pub endpoint: EdgeNegotiationEndpoint,
+    pub operation: EdgeNegotiationOperation,
+    pub sequence: u32,
+    pub generation: u32,
+    pub kind: Option<EdgeNegotiationKind>,
+    pub payload: String,
+    pub nonce: [u8; SIGNAL_NONCE_LENGTH],
+    pub issued_unix: u64,
+    pub expires_unix: u64,
+}
+
+impl EdgeNegotiationEnvelopeV1 {
+    /// Validates one signed SDP/ICE send or peer-mailbox poll operation.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error for malformed identifiers, operation fields, payload, or lifetime.
+    pub fn validate(&self) -> Result<(), EdgeSignalBuildError> {
+        validate_identifier(&self.request_id, 128)?;
+        validate_identifier(&self.session_id, 128)?;
+        if self.expires_unix <= self.issued_unix
+            || self.expires_unix > self.issued_unix.saturating_add(30)
+        {
+            return Err(EdgeSignalBuildError::InvalidLifetime);
+        }
+        match self.operation {
+            EdgeNegotiationOperation::Send => {
+                if self.sequence == 0 || self.generation == 0 {
+                    return Err(EdgeSignalBuildError::InvalidNegotiationFields);
+                }
+                validate_negotiation_payload(
+                    self.kind
+                        .ok_or(EdgeSignalBuildError::InvalidNegotiationFields)?,
+                    &self.payload,
+                )?;
+            }
+            EdgeNegotiationOperation::Poll => {
+                if self.generation != 0 || self.kind.is_some() || !self.payload.is_empty() {
+                    return Err(EdgeSignalBuildError::InvalidNegotiationFields);
+                }
+            }
+        }
+        Ok(())
+    }
+
+    /// Produces stable bytes covered by the endpoint device-key signature.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error when the envelope violates the schema boundary.
+    pub fn stable_signing_input(&self) -> Result<Vec<u8>, EdgeSignalBuildError> {
+        self.validate()?;
+        let mut output = Vec::with_capacity(self.payload.len().saturating_add(384));
+        output.extend_from_slice(NEGOTIATION_ENVELOPE_DOMAIN_V1);
+        append_field(&mut output, 1, self.request_id.as_bytes());
+        append_field(&mut output, 2, self.session_id.as_bytes());
+        append_field(&mut output, 3, self.endpoint.as_str().as_bytes());
+        append_field(&mut output, 4, self.operation.as_str().as_bytes());
+        append_field(&mut output, 5, &self.sequence.to_be_bytes());
+        append_field(&mut output, 6, &self.generation.to_be_bytes());
+        if let Some(kind) = self.kind {
+            append_field(&mut output, 7, kind.as_str().as_bytes());
+        }
+        append_field(&mut output, 8, self.payload.as_bytes());
+        append_field(&mut output, 9, &self.nonce);
+        append_field(&mut output, 10, &self.issued_unix.to_be_bytes());
+        append_field(&mut output, 11, &self.expires_unix.to_be_bytes());
+        Ok(output)
+    }
+}
+
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct EdgeSessionIntentV1 {
+    pub device_id: String,
+    pub request_id: String,
+    pub session_id: String,
+    pub session_type: EdgeSessionType,
+    pub target_user: String,
+    pub requested_permissions: Vec<String>,
+    pub client_public_key: String,
+    pub nonce: [u8; SIGNAL_NONCE_LENGTH],
+    pub issued_unix: u64,
+    pub expires_unix: u64,
+}
+
+impl EdgeSessionIntentV1 {
+    /// Validates a signed session intent before canonical encoding.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error for invalid identifiers, permissions, users, or lifetime.
+    pub fn validate(&self) -> Result<(), EdgeSignalBuildError> {
+        validate_identifier(&self.device_id, 128)?;
+        validate_identifier(&self.request_id, 128)?;
+        validate_identifier(&self.session_id, 128)?;
+        validate_user(&self.target_user)?;
+        validate_public_key_text(&self.client_public_key)?;
+        if self.requested_permissions.is_empty() || self.requested_permissions.len() > 8 {
+            return Err(EdgeSignalBuildError::InvalidPermissions);
+        }
+        let mut previous: Option<&str> = None;
+        for permission in &self.requested_permissions {
+            validate_identifier(permission, 32)
+                .map_err(|_| EdgeSignalBuildError::InvalidPermissions)?;
+            if previous.is_some_and(|value| value >= permission.as_str()) {
+                return Err(EdgeSignalBuildError::InvalidPermissions);
+            }
+            previous = Some(permission);
+        }
+        if self.expires_unix <= self.issued_unix
+            || self.expires_unix > self.issued_unix.saturating_add(120)
+        {
+            return Err(EdgeSignalBuildError::InvalidLifetime);
+        }
+        Ok(())
+    }
+
+    /// Produces the stable bytes covered by the paired Client signature.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error when the intent violates the schema boundary.
+    pub fn stable_signing_input(&self) -> Result<Vec<u8>, EdgeSignalBuildError> {
+        self.validate()?;
+        let mut output = Vec::with_capacity(512);
+        output.extend_from_slice(SESSION_INTENT_DOMAIN_V1);
+        append_field(&mut output, 1, self.device_id.as_bytes());
+        append_field(&mut output, 2, self.request_id.as_bytes());
+        append_field(&mut output, 3, self.session_id.as_bytes());
+        append_field(&mut output, 4, self.session_type.as_str().as_bytes());
+        append_field(&mut output, 5, self.target_user.as_bytes());
+        for permission in &self.requested_permissions {
+            append_field(&mut output, 6, permission.as_bytes());
+        }
+        append_field(&mut output, 7, self.client_public_key.as_bytes());
+        append_field(&mut output, 8, &self.nonce);
+        append_field(&mut output, 9, &self.issued_unix.to_be_bytes());
+        append_field(&mut output, 10, &self.expires_unix.to_be_bytes());
+        Ok(output)
+    }
+}
+
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub enum AgentSignalAction {
+    Poll,
+    Accept,
+    Reject,
+}
+
+impl AgentSignalAction {
+    #[must_use]
+    pub const fn as_str(self) -> &'static str {
+        match self {
+            Self::Poll => "poll",
+            Self::Accept => "accept",
+            Self::Reject => "reject",
+        }
+    }
+}
+
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub struct AgentSignalProofV1 {
+    pub device_id: String,
+    pub device_public_key: String,
+    pub connection_id: String,
+    pub action: AgentSignalAction,
+    pub request_id: Option<String>,
+    pub result_code: Option<String>,
+    pub nonce: [u8; SIGNAL_NONCE_LENGTH],
+    pub issued_unix: u64,
+}
+
+impl AgentSignalProofV1 {
+    /// Validates a device-bound poll or acknowledgement proof.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error for malformed identifiers or action fields.
+    pub fn validate(&self) -> Result<(), EdgeSignalBuildError> {
+        validate_identifier(&self.device_id, 128)?;
+        validate_public_key_text(&self.device_public_key)?;
+        validate_identifier(&self.connection_id, 128)?;
+        match self.action {
+            AgentSignalAction::Poll => {
+                if self.request_id.is_some() || self.result_code.is_some() {
+                    return Err(EdgeSignalBuildError::InvalidActionFields);
+                }
+            }
+            AgentSignalAction::Accept | AgentSignalAction::Reject => {
+                validate_identifier(
+                    self.request_id
+                        .as_deref()
+                        .ok_or(EdgeSignalBuildError::InvalidActionFields)?,
+                    128,
+                )?;
+                validate_identifier(
+                    self.result_code
+                        .as_deref()
+                        .ok_or(EdgeSignalBuildError::InvalidActionFields)?,
+                    64,
+                )?;
+            }
+        }
+        Ok(())
+    }
+
+    /// Produces stable bytes covered by the Agent device-key signature.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error when the proof violates the schema boundary.
+    pub fn stable_signing_input(&self) -> Result<Vec<u8>, EdgeSignalBuildError> {
+        self.validate()?;
+        let mut output = Vec::with_capacity(384);
+        output.extend_from_slice(AGENT_SIGNAL_PROOF_DOMAIN_V1);
+        append_field(&mut output, 1, self.device_id.as_bytes());
+        append_field(&mut output, 2, self.device_public_key.as_bytes());
+        append_field(&mut output, 3, self.connection_id.as_bytes());
+        append_field(&mut output, 4, self.action.as_str().as_bytes());
+        if let Some(request_id) = &self.request_id {
+            append_field(&mut output, 5, request_id.as_bytes());
+        }
+        if let Some(result_code) = &self.result_code {
+            append_field(&mut output, 6, result_code.as_bytes());
+        }
+        append_field(&mut output, 7, &self.nonce);
+        append_field(&mut output, 8, &self.issued_unix.to_be_bytes());
+        Ok(output)
+    }
+}
+
+#[derive(Clone, Copy, Debug, Eq, PartialEq)]
+pub enum EdgeSignalBuildError {
+    InvalidIdentifier,
+    InvalidSessionType,
+    InvalidUser,
+    InvalidPermissions,
+    InvalidPublicKey,
+    InvalidLifetime,
+    InvalidActionFields,
+    InvalidEndpoint,
+    InvalidOperation,
+    InvalidNegotiationKind,
+    InvalidNegotiationFields,
+    InvalidNegotiationPayload,
+}
+
+impl fmt::Display for EdgeSignalBuildError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        let value = match self {
+            Self::InvalidIdentifier => "invalid_identifier",
+            Self::InvalidSessionType => "invalid_session_type",
+            Self::InvalidUser => "invalid_user",
+            Self::InvalidPermissions => "invalid_permissions",
+            Self::InvalidPublicKey => "invalid_public_key",
+            Self::InvalidLifetime => "invalid_lifetime",
+            Self::InvalidActionFields => "invalid_action_fields",
+            Self::InvalidEndpoint => "invalid_endpoint",
+            Self::InvalidOperation => "invalid_operation",
+            Self::InvalidNegotiationKind => "invalid_negotiation_kind",
+            Self::InvalidNegotiationFields => "invalid_negotiation_fields",
+            Self::InvalidNegotiationPayload => "invalid_negotiation_payload",
+        };
+        formatter.write_str(value)
+    }
+}
+
+impl std::error::Error for EdgeSignalBuildError {}
+
+fn validate_identifier(value: &str, maximum: usize) -> Result<(), EdgeSignalBuildError> {
+    if value.is_empty()
+        || value.len() > maximum
+        || !value
+            .bytes()
+            .all(|byte| byte.is_ascii_alphanumeric() || matches!(byte, b'-' | b'_' | b'.'))
+    {
+        return Err(EdgeSignalBuildError::InvalidIdentifier);
+    }
+    Ok(())
+}
+
+fn validate_user(value: &str) -> Result<(), EdgeSignalBuildError> {
+    if value == "root"
+        || value.is_empty()
+        || value.len() > 32
+        || !value
+            .bytes()
+            .all(|byte| byte.is_ascii_alphanumeric() || matches!(byte, b'_' | b'-'))
+    {
+        return Err(EdgeSignalBuildError::InvalidUser);
+    }
+    Ok(())
+}
+
+fn validate_public_key_text(value: &str) -> Result<(), EdgeSignalBuildError> {
+    if value.len() != 43
+        || !value
+            .bytes()
+            .all(|byte| byte.is_ascii_alphanumeric() || matches!(byte, b'-' | b'_' | b'+' | b'/'))
+    {
+        return Err(EdgeSignalBuildError::InvalidPublicKey);
+    }
+    Ok(())
+}
+
+fn validate_negotiation_payload(
+    kind: EdgeNegotiationKind,
+    payload: &str,
+) -> Result<(), EdgeSignalBuildError> {
+    match kind {
+        EdgeNegotiationKind::Offer | EdgeNegotiationKind::Answer => {
+            if payload.is_empty() || payload.len() > MAX_SDP_BYTES || payload.contains('\0') {
+                return Err(EdgeSignalBuildError::InvalidNegotiationPayload);
+            }
+        }
+        EdgeNegotiationKind::IceCandidate => {
+            if payload.is_empty()
+                || payload.len() > MAX_ICE_CANDIDATE_BYTES
+                || payload.chars().any(char::is_control)
+            {
+                return Err(EdgeSignalBuildError::InvalidNegotiationPayload);
+            }
+        }
+        EdgeNegotiationKind::IceEnd | EdgeNegotiationKind::Restart => {
+            if !payload.is_empty() {
+                return Err(EdgeSignalBuildError::InvalidNegotiationPayload);
+            }
+        }
+    }
+    Ok(())
+}
+
+fn append_field(output: &mut Vec<u8>, tag: u8, value: &[u8]) {
+    output.push(tag);
+    let length = u32::try_from(value.len()).expect("validated Edge signal fields fit in u32");
+    output.extend_from_slice(&length.to_be_bytes());
+    output.extend_from_slice(value);
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn intent() -> EdgeSessionIntentV1 {
+        EdgeSessionIntentV1 {
+            device_id: "ab".repeat(32),
+            request_id: "request-1".into(),
+            session_id: "session-1".into(),
+            session_type: EdgeSessionType::Terminal,
+            target_user: "alice".into(),
+            requested_permissions: vec!["terminal".into()],
+            client_public_key: "A".repeat(43),
+            nonce: [7; SIGNAL_NONCE_LENGTH],
+            issued_unix: 100,
+            expires_unix: 160,
+        }
+    }
+
+    #[test]
+    fn session_intent_encoding_is_stable_and_binds_every_field() {
+        let original = intent();
+        let encoded = original.stable_signing_input().unwrap();
+        assert_eq!(encoded, intent().stable_signing_input().unwrap());
+        let mut changed = intent();
+        changed.target_user = "bob".into();
+        assert_ne!(encoded, changed.stable_signing_input().unwrap());
+        let mut changed = intent();
+        changed.nonce[0] ^= 1;
+        assert_ne!(encoded, changed.stable_signing_input().unwrap());
+        let mut changed = intent();
+        changed.expires_unix += 1;
+        assert_ne!(encoded, changed.stable_signing_input().unwrap());
+    }
+
+    #[test]
+    fn session_intent_rejects_ambiguous_permissions_and_lifetime() {
+        let mut value = intent();
+        value.requested_permissions = vec!["terminal".into(), "terminal".into()];
+        assert_eq!(
+            value.stable_signing_input().unwrap_err(),
+            EdgeSignalBuildError::InvalidPermissions
+        );
+        let mut value = intent();
+        value.expires_unix = value.issued_unix + 121;
+        assert_eq!(
+            value.stable_signing_input().unwrap_err(),
+            EdgeSignalBuildError::InvalidLifetime
+        );
+    }
+
+    #[test]
+    fn pairing_is_a_distinct_stable_session_type() {
+        assert_eq!(EdgeSessionType::Pairing.as_str(), "pairing");
+        assert_eq!(
+            EdgeSessionType::parse("pairing"),
+            Ok(EdgeSessionType::Pairing)
+        );
+    }
+
+    #[test]
+    fn agent_proof_action_fields_are_unambiguous() {
+        let proof = AgentSignalProofV1 {
+            device_id: "ab".repeat(32),
+            device_public_key: "A".repeat(43),
+            connection_id: "connection-1".into(),
+            action: AgentSignalAction::Poll,
+            request_id: None,
+            result_code: None,
+            nonce: [3; SIGNAL_NONCE_LENGTH],
+            issued_unix: 100,
+        };
+        assert!(proof.stable_signing_input().is_ok());
+        let mut invalid = proof;
+        invalid.request_id = Some("request-1".into());
+        assert_eq!(
+            invalid.stable_signing_input().unwrap_err(),
+            EdgeSignalBuildError::InvalidActionFields
+        );
+    }
+
+    fn negotiation(
+        operation: EdgeNegotiationOperation,
+        kind: Option<EdgeNegotiationKind>,
+        payload: &str,
+    ) -> EdgeNegotiationEnvelopeV1 {
+        EdgeNegotiationEnvelopeV1 {
+            request_id: "request-1".into(),
+            session_id: "session-1".into(),
+            endpoint: EdgeNegotiationEndpoint::Client,
+            operation,
+            sequence: u32::from(operation == EdgeNegotiationOperation::Send),
+            generation: u32::from(operation == EdgeNegotiationOperation::Send),
+            kind,
+            payload: payload.into(),
+            nonce: [8; SIGNAL_NONCE_LENGTH],
+            issued_unix: 100,
+            expires_unix: 130,
+        }
+    }
+
+    #[test]
+    fn negotiation_schema_accepts_sdp_candidates_and_empty_poll() {
+        assert!(
+            negotiation(
+                EdgeNegotiationOperation::Send,
+                Some(EdgeNegotiationKind::Offer),
+                "v=0\r\n"
+            )
+            .validate()
+            .is_ok()
+        );
+        assert!(
+            negotiation(
+                EdgeNegotiationOperation::Send,
+                Some(EdgeNegotiationKind::Answer),
+                "v=0\r\na=answer\r\n"
+            )
+            .validate()
+            .is_ok()
+        );
+        assert!(
+            negotiation(
+                EdgeNegotiationOperation::Send,
+                Some(EdgeNegotiationKind::IceCandidate),
+                "candidate:1 1 udp 2113937151 192.0.2.1 5000 typ host"
+            )
+            .validate()
+            .is_ok()
+        );
+        assert!(
+            negotiation(EdgeNegotiationOperation::Poll, None, "")
+                .validate()
+                .is_ok()
+        );
+    }
+
+    #[test]
+    fn negotiation_payload_limits_are_enforced() {
+        let oversized_sdp = "s".repeat(MAX_SDP_BYTES + 1);
+        assert_eq!(
+            negotiation(
+                EdgeNegotiationOperation::Send,
+                Some(EdgeNegotiationKind::Offer),
+                &oversized_sdp,
+            )
+            .validate(),
+            Err(EdgeSignalBuildError::InvalidNegotiationPayload)
+        );
+        let oversized_candidate = "c".repeat(MAX_ICE_CANDIDATE_BYTES + 1);
+        assert_eq!(
+            negotiation(
+                EdgeNegotiationOperation::Send,
+                Some(EdgeNegotiationKind::IceCandidate),
+                &oversized_candidate,
+            )
+            .validate(),
+            Err(EdgeSignalBuildError::InvalidNegotiationPayload)
+        );
+        assert_eq!(
+            negotiation(
+                EdgeNegotiationOperation::Send,
+                Some(EdgeNegotiationKind::Restart),
+                "unexpected",
+            )
+            .validate(),
+            Err(EdgeSignalBuildError::InvalidNegotiationPayload)
+        );
+    }
+
+    #[test]
+    fn negotiation_signature_input_binds_security_fields() {
+        let original = negotiation(
+            EdgeNegotiationOperation::Send,
+            Some(EdgeNegotiationKind::Offer),
+            "v=0\r\n",
+        );
+        let encoded = original.stable_signing_input().unwrap();
+        let mut changed = original.clone();
+        changed.endpoint = EdgeNegotiationEndpoint::Agent;
+        assert_ne!(encoded, changed.stable_signing_input().unwrap());
+        let mut changed = original.clone();
+        changed.sequence += 1;
+        assert_ne!(encoded, changed.stable_signing_input().unwrap());
+        let mut changed = original.clone();
+        changed.generation += 1;
+        assert_ne!(encoded, changed.stable_signing_input().unwrap());
+        let mut changed = original.clone();
+        changed.nonce[0] ^= 1;
+        assert_ne!(encoded, changed.stable_signing_input().unwrap());
+        let mut changed = original;
+        changed.expires_unix -= 1;
+        assert_ne!(encoded, changed.stable_signing_input().unwrap());
+    }
+}
diff --git a/protocol/src/features.rs b/protocol/src/features.rs
new file mode 100644
index 0000000..ad9ab5c
--- /dev/null
+++ b/protocol/src/features.rs
@@ -0,0 +1,166 @@
+use core::fmt;
+use core::ops::{BitOr, BitOrAssign};
+
+/// Required protocol behavior understood by this version of the crate.
+#[derive(Clone, Copy, Debug, PartialEq, Eq)]
+#[repr(u8)]
+pub enum KnownRequiredFeature {
+    ExplicitEndpointPathReports = 0,
+    EndToEndZeroCopyPolicy = 1,
+    ConfigBoundPathVerification = 2,
+    RevalidationOnPipelineChange = 3,
+}
+
+impl KnownRequiredFeature {
+    #[must_use]
+    pub const fn bit(self) -> u64 {
+        1_u64 << (self as u8)
+    }
+}
+
+pub const KNOWN_REQUIRED_FEATURE_BITS: u64 = KnownRequiredFeature::ExplicitEndpointPathReports
+    .bit()
+    | KnownRequiredFeature::EndToEndZeroCopyPolicy.bit()
+    | KnownRequiredFeature::ConfigBoundPathVerification.bit()
+    | KnownRequiredFeature::RevalidationOnPipelineChange.bit();
+
+/// Wire representation of required features.
+///
+/// Unknown bits are retained so that validation can fail closed. Callers must
+/// not truncate the value to the bits known by their local implementation.
+#[derive(Clone, Copy, Debug, Default, PartialEq, Eq)]
+pub struct RequiredFeatures(u64);
+
+impl RequiredFeatures {
+    pub const NONE: Self = Self(0);
+    pub const ALL_KNOWN: Self = Self(KNOWN_REQUIRED_FEATURE_BITS);
+
+    #[must_use]
+    pub const fn from_wire_bits(bits: u64) -> Self {
+        Self(bits)
+    }
+
+    #[must_use]
+    pub const fn from_known(feature: KnownRequiredFeature) -> Self {
+        Self(feature.bit())
+    }
+
+    #[must_use]
+    pub const fn wire_bits(self) -> u64 {
+        self.0
+    }
+
+    #[must_use]
+    pub const fn unknown_bits(self) -> u64 {
+        self.0 & !KNOWN_REQUIRED_FEATURE_BITS
+    }
+
+    #[must_use]
+    pub const fn contains(self, feature: KnownRequiredFeature) -> bool {
+        self.0 & feature.bit() != 0
+    }
+
+    /// Ensures every required bit is understood and locally supported.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`RequiredFeatureError::UnknownRequiredBits`] for wire bits this
+    /// implementation does not understand, or
+    /// [`RequiredFeatureError::UnsupportedRequiredBits`] for known behavior the
+    /// local endpoint does not support.
+    pub fn validate_supported(self, locally_supported: Self) -> Result<(), RequiredFeatureError> {
+        let unknown = self.unknown_bits();
+        if unknown != 0 {
+            return Err(RequiredFeatureError::UnknownRequiredBits(unknown));
+        }
+
+        let unsupported = self.0 & !locally_supported.0;
+        if unsupported != 0 {
+            return Err(RequiredFeatureError::UnsupportedRequiredBits(unsupported));
+        }
+
+        Ok(())
+    }
+}
+
+impl BitOr for RequiredFeatures {
+    type Output = Self;
+
+    fn bitor(self, rhs: Self) -> Self::Output {
+        Self(self.0 | rhs.0)
+    }
+}
+
+impl BitOrAssign for RequiredFeatures {
+    fn bitor_assign(&mut self, rhs: Self) {
+        self.0 |= rhs.0;
+    }
+}
+
+impl From<KnownRequiredFeature> for RequiredFeatures {
+    fn from(value: KnownRequiredFeature) -> Self {
+        Self::from_known(value)
+    }
+}
+
+#[derive(Clone, Copy, Debug, PartialEq, Eq)]
+pub enum RequiredFeatureError {
+    UnknownRequiredBits(u64),
+    UnsupportedRequiredBits(u64),
+}
+
+impl fmt::Display for RequiredFeatureError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        match self {
+            Self::UnknownRequiredBits(bits) => {
+                write!(formatter, "unknown required feature bits: {bits:#018x}")
+            }
+            Self::UnsupportedRequiredBits(bits) => {
+                write!(formatter, "unsupported required feature bits: {bits:#018x}")
+            }
+        }
+    }
+}
+
+impl std::error::Error for RequiredFeatureError {}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn unknown_required_feature_fails_closed() {
+        let future_required = RequiredFeatures::from_wire_bits(1_u64 << 63);
+
+        assert_eq!(
+            future_required.validate_supported(RequiredFeatures::ALL_KNOWN),
+            Err(RequiredFeatureError::UnknownRequiredBits(1_u64 << 63))
+        );
+    }
+
+    #[test]
+    fn understood_but_unsupported_feature_is_rejected() {
+        let required = RequiredFeatures::from(KnownRequiredFeature::EndToEndZeroCopyPolicy);
+
+        assert_eq!(
+            required.validate_supported(RequiredFeatures::NONE),
+            Err(RequiredFeatureError::UnsupportedRequiredBits(
+                KnownRequiredFeature::EndToEndZeroCopyPolicy.bit()
+            ))
+        );
+    }
+
+    #[test]
+    fn all_required_features_are_preserved_and_accepted() {
+        let required = RequiredFeatures::from(KnownRequiredFeature::ExplicitEndpointPathReports)
+            | RequiredFeatures::from(KnownRequiredFeature::ConfigBoundPathVerification);
+
+        assert!(required.contains(KnownRequiredFeature::ExplicitEndpointPathReports));
+        assert!(required.contains(KnownRequiredFeature::ConfigBoundPathVerification));
+        assert_eq!(required.unknown_bits(), 0);
+        assert_eq!(
+            required.validate_supported(RequiredFeatures::ALL_KNOWN),
+            Ok(())
+        );
+    }
+}
diff --git a/protocol/src/lib.rs b/protocol/src/lib.rs
new file mode 100644
index 0000000..894eafc
--- /dev/null
+++ b/protocol/src/lib.rs
@@ -0,0 +1,34 @@
+//! Transport-independent protocol models for `RemoteDesk`.
+//!
+//! This crate intentionally does not perform serialization or cryptographic
+//! signing. It defines the validation boundary that wire adapters must use.
+
+mod displays;
+mod edge_signaling;
+mod features;
+mod path_validation;
+mod transcript;
+
+pub use displays::{
+    DISPLAY_ID_LENGTH, DisplayAxis, DisplayDescriptor, DisplayId, DisplayLayout,
+    DisplayLayoutError, DisplayRect, DisplayScale, DisplaySelection, DisplaySelectionError,
+    DisplaySelectionMode,
+};
+pub use edge_signaling::{
+    AGENT_SIGNAL_PROOF_DOMAIN_V1, AgentSignalAction, AgentSignalProofV1, EdgeNegotiationEndpoint,
+    EdgeNegotiationEnvelopeV1, EdgeNegotiationKind, EdgeNegotiationOperation, EdgeSessionIntentV1,
+    EdgeSessionType, EdgeSignalBuildError, MAX_ICE_CANDIDATE_BYTES, MAX_SDP_BYTES,
+    NEGOTIATION_ENVELOPE_DOMAIN_V1, SESSION_INTENT_DOMAIN_V1, SIGNAL_NONCE_LENGTH,
+};
+pub use features::{
+    KNOWN_REQUIRED_FEATURE_BITS, KnownRequiredFeature, RequiredFeatureError, RequiredFeatures,
+};
+pub use path_validation::{
+    AgentEncodePathReport, BindingField, ClientRenderPathReport, DIGEST_LENGTH, INSTANCE_ID_LENGTH,
+    InstanceId, MemoryPathStatus, MemorySurfaceType, PathReportBinding, PathReportError,
+    StrictPathCoordinator, StrictPathState, VERIFIER_CHALLENGE_LENGTH, ValidationContext,
+    VerificationSource, VerifierChallenge, ZeroCopyPolicy,
+};
+pub use transcript::{
+    NegotiationTranscriptV1, TRANSCRIPT_DOMAIN_V1, TranscriptBuildError, TranscriptInputV1,
+};
diff --git a/protocol/src/path_validation.rs b/protocol/src/path_validation.rs
new file mode 100644
index 0000000..50e2d1a
--- /dev/null
+++ b/protocol/src/path_validation.rs
@@ -0,0 +1,782 @@
+use core::fmt;
+
+pub const INSTANCE_ID_LENGTH: usize = 16;
+pub const DIGEST_LENGTH: usize = 32;
+pub const VERIFIER_CHALLENGE_LENGTH: usize = 32;
+
+pub type InstanceId = [u8; INSTANCE_ID_LENGTH];
+pub type Digest = [u8; DIGEST_LENGTH];
+pub type VerifierChallenge = [u8; VERIFIER_CHALLENGE_LENGTH];
+
+#[derive(Clone, Copy, Debug, PartialEq, Eq)]
+pub enum ZeroCopyPolicy {
+    RequiredEndToEnd,
+    Compatibility,
+}
+
+#[derive(Clone, Copy, Debug, PartialEq, Eq)]
+pub enum MemoryPathStatus {
+    /// Raw pixels remained in GPU-backed memory without a transform.
+    CpuCopyFree,
+    /// Raw pixels underwent conversion, scaling, or composition on one adapter.
+    SameAdapterGpuTransform,
+    CrossAdapterCopy,
+    CpuUpload,
+    Software,
+    Opaque,
+}
+
+impl MemoryPathStatus {
+    #[must_use]
+    pub const fn satisfies_strict_zero_copy(self) -> bool {
+        matches!(self, Self::CpuCopyFree | Self::SameAdapterGpuTransform)
+    }
+}
+
+#[derive(Clone, Copy, Debug, PartialEq, Eq)]
+pub enum MemorySurfaceType {
+    DmaBuf,
+    D3d11,
+    OtherGpu,
+    Cpu,
+    Opaque,
+}
+
+impl MemorySurfaceType {
+    const fn is_explicit_gpu_surface(self) -> bool {
+        matches!(self, Self::DmaBuf | Self::D3d11 | Self::OtherGpu)
+    }
+}
+
+#[derive(Clone, Copy, Debug, PartialEq, Eq)]
+pub enum VerificationSource {
+    RuntimeCounters,
+    PipelineTracing,
+    DriverTelemetry,
+    CorrelatedEvidence,
+    Unverified,
+}
+
+/// Values that bind a path report to one concrete pipeline incarnation.
+///
+/// There is deliberately no endpoint discriminator here. The enclosing
+/// [`AgentEncodePathReport`] or [`ClientRenderPathReport`] supplies that fact.
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub struct PathReportBinding {
+    pub session_instance_id: InstanceId,
+    pub helper_instance_id: InstanceId,
+    pub pipeline_epoch: u64,
+    pub selected_config_hash: Digest,
+    pub verifier_challenge: VerifierChallenge,
+}
+
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub struct AgentEncodePathReport {
+    pub binding: PathReportBinding,
+    pub status: MemoryPathStatus,
+    pub adapter_identity: String,
+    pub capture_device_identity: String,
+    pub surface_type: MemorySurfaceType,
+    pub cpu_map_count: u64,
+    pub cross_adapter_copy_count: u64,
+    pub verification_source: VerificationSource,
+}
+
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub struct ClientRenderPathReport {
+    pub binding: PathReportBinding,
+    pub status: MemoryPathStatus,
+    pub adapter_identity: String,
+    pub render_device_identity: String,
+    pub surface_type: MemorySurfaceType,
+    pub cpu_map_count: u64,
+    pub cross_adapter_copy_count: u64,
+    pub verification_source: VerificationSource,
+}
+
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub struct ValidationContext {
+    pub session_instance_id: InstanceId,
+    pub agent_helper_instance_id: InstanceId,
+    pub client_helper_instance_id: InstanceId,
+    pub pipeline_epoch: u64,
+    pub selected_config_hash: Digest,
+    pub verifier_challenge: VerifierChallenge,
+}
+
+impl ValidationContext {
+    fn agent_binding(&self) -> PathReportBinding {
+        PathReportBinding {
+            session_instance_id: self.session_instance_id,
+            helper_instance_id: self.agent_helper_instance_id,
+            pipeline_epoch: self.pipeline_epoch,
+            selected_config_hash: self.selected_config_hash,
+            verifier_challenge: self.verifier_challenge,
+        }
+    }
+
+    fn client_binding(&self) -> PathReportBinding {
+        PathReportBinding {
+            session_instance_id: self.session_instance_id,
+            helper_instance_id: self.client_helper_instance_id,
+            pipeline_epoch: self.pipeline_epoch,
+            selected_config_hash: self.selected_config_hash,
+            verifier_challenge: self.verifier_challenge,
+        }
+    }
+}
+
+#[derive(Clone, Copy, Debug, PartialEq, Eq)]
+pub enum StrictPathState {
+    Negotiating,
+    Connected,
+    Revalidating,
+    /// A current-epoch report disproved the previously validated strict path.
+    Rejected,
+}
+
+/// Local-only coordinator. Wire decoders must dispatch reports to the
+/// endpoint-specific methods after authenticating the message source.
+#[derive(Clone, Debug)]
+pub struct StrictPathCoordinator {
+    policy: ZeroCopyPolicy,
+    context: ValidationContext,
+    state: StrictPathState,
+    agent_report: Option<AgentEncodePathReport>,
+    client_report: Option<ClientRenderPathReport>,
+}
+
+impl StrictPathCoordinator {
+    #[must_use]
+    pub fn new(policy: ZeroCopyPolicy, context: ValidationContext) -> Self {
+        Self {
+            policy,
+            context,
+            state: StrictPathState::Negotiating,
+            agent_report: None,
+            client_report: None,
+        }
+    }
+
+    #[must_use]
+    pub const fn policy(&self) -> ZeroCopyPolicy {
+        self.policy
+    }
+
+    #[must_use]
+    pub const fn state(&self) -> StrictPathState {
+        self.state
+    }
+
+    #[must_use]
+    pub const fn context(&self) -> &ValidationContext {
+        &self.context
+    }
+
+    #[must_use]
+    pub fn agent_report(&self) -> Option<&AgentEncodePathReport> {
+        self.agent_report.as_ref()
+    }
+
+    #[must_use]
+    pub fn client_report(&self) -> Option<&ClientRenderPathReport> {
+        self.client_report.as_ref()
+    }
+
+    /// Accepts a report obtained from the authenticated Agent ingress.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`PathReportError`] when the report is stale, incorrectly
+    /// bound, conflicts with the current epoch, or violates the active path
+    /// policy. A violation after connection rejects the current proof set.
+    pub fn accept_agent_report(
+        &mut self,
+        report: AgentEncodePathReport,
+    ) -> Result<StrictPathState, PathReportError> {
+        Self::validate_binding(&report.binding, &self.context.agent_binding())?;
+        self.ensure_current_epoch_accepts_reports()?;
+        if let Err(error) = self.validate_path(
+            report.status,
+            report.surface_type,
+            report.cpu_map_count,
+            report.cross_adapter_copy_count,
+            report.verification_source,
+        ) {
+            self.reject_connected_path();
+            return Err(error);
+        }
+        if let Err(error) = Self::store_once(&mut self.agent_report, report) {
+            self.reject_connected_conflict(error);
+            return Err(error);
+        }
+        self.update_state();
+        Ok(self.state)
+    }
+
+    /// Accepts a report obtained from the authenticated client Helper ingress.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`PathReportError`] when the report is stale, incorrectly
+    /// bound, conflicts with the current epoch, or violates the active path
+    /// policy. A violation after connection rejects the current proof set.
+    pub fn accept_client_report(
+        &mut self,
+        report: ClientRenderPathReport,
+    ) -> Result<StrictPathState, PathReportError> {
+        Self::validate_binding(&report.binding, &self.context.client_binding())?;
+        self.ensure_current_epoch_accepts_reports()?;
+        if let Err(error) = self.validate_path(
+            report.status,
+            report.surface_type,
+            report.cpu_map_count,
+            report.cross_adapter_copy_count,
+            report.verification_source,
+        ) {
+            self.reject_connected_path();
+            return Err(error);
+        }
+        if let Err(error) = Self::store_once(&mut self.client_report, report) {
+            self.reject_connected_conflict(error);
+            return Err(error);
+        }
+        self.update_state();
+        Ok(self.state)
+    }
+
+    /// Invalidates both endpoint reports after any selected configuration,
+    /// helper instance, GPU, display, resolution, decoder, or encoder change.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`PathReportError`] if the session changes, the pipeline epoch
+    /// does not advance, or the verifier challenge is reused.
+    pub fn configuration_changed(
+        &mut self,
+        next: ValidationContext,
+    ) -> Result<(), PathReportError> {
+        if next.session_instance_id != self.context.session_instance_id {
+            return Err(PathReportError::SessionCannotChange);
+        }
+        if next.pipeline_epoch <= self.context.pipeline_epoch {
+            return Err(PathReportError::PipelineEpochDidNotAdvance {
+                current: self.context.pipeline_epoch,
+                proposed: next.pipeline_epoch,
+            });
+        }
+        if next.verifier_challenge == self.context.verifier_challenge {
+            return Err(PathReportError::VerifierChallengeReused);
+        }
+
+        self.context = next;
+        self.agent_report = None;
+        self.client_report = None;
+        self.state = StrictPathState::Revalidating;
+        Ok(())
+    }
+
+    fn validate_binding(
+        actual: &PathReportBinding,
+        expected: &PathReportBinding,
+    ) -> Result<(), PathReportError> {
+        if actual.session_instance_id != expected.session_instance_id {
+            return Err(PathReportError::BindingMismatch(
+                BindingField::SessionInstanceId,
+            ));
+        }
+        if actual.helper_instance_id != expected.helper_instance_id {
+            return Err(PathReportError::BindingMismatch(
+                BindingField::HelperInstanceId,
+            ));
+        }
+        if actual.pipeline_epoch != expected.pipeline_epoch {
+            return Err(PathReportError::BindingMismatch(
+                BindingField::PipelineEpoch,
+            ));
+        }
+        if actual.selected_config_hash != expected.selected_config_hash {
+            return Err(PathReportError::BindingMismatch(
+                BindingField::SelectedConfigHash,
+            ));
+        }
+        if actual.verifier_challenge != expected.verifier_challenge {
+            return Err(PathReportError::BindingMismatch(
+                BindingField::VerifierChallenge,
+            ));
+        }
+        Ok(())
+    }
+
+    fn validate_path(
+        &self,
+        status: MemoryPathStatus,
+        surface_type: MemorySurfaceType,
+        cpu_map_count: u64,
+        cross_adapter_copy_count: u64,
+        verification_source: VerificationSource,
+    ) -> Result<(), PathReportError> {
+        if self.policy == ZeroCopyPolicy::Compatibility {
+            return Ok(());
+        }
+        if !status.satisfies_strict_zero_copy() {
+            return Err(PathReportError::PathDoesNotSatisfyStrictPolicy(status));
+        }
+        if !surface_type.is_explicit_gpu_surface() {
+            return Err(PathReportError::SurfaceDoesNotSatisfyStrictPolicy(
+                surface_type,
+            ));
+        }
+        if cpu_map_count != 0 {
+            return Err(PathReportError::CpuMapObserved(cpu_map_count));
+        }
+        if cross_adapter_copy_count != 0 {
+            return Err(PathReportError::CrossAdapterCopyObserved(
+                cross_adapter_copy_count,
+            ));
+        }
+        if verification_source == VerificationSource::Unverified {
+            return Err(PathReportError::VerificationEvidenceMissing);
+        }
+        Ok(())
+    }
+
+    fn ensure_current_epoch_accepts_reports(&self) -> Result<(), PathReportError> {
+        if self.state == StrictPathState::Rejected {
+            return Err(PathReportError::RevalidationRequired);
+        }
+        Ok(())
+    }
+
+    fn reject_connected_path(&mut self) {
+        if self.state == StrictPathState::Connected {
+            self.agent_report = None;
+            self.client_report = None;
+            self.state = StrictPathState::Rejected;
+        }
+    }
+
+    fn reject_connected_conflict(&mut self, error: PathReportError) {
+        if error == PathReportError::ConflictingReportForCurrentEpoch {
+            self.reject_connected_path();
+        }
+    }
+
+    fn store_once<T: PartialEq>(slot: &mut Option<T>, report: T) -> Result<(), PathReportError> {
+        match slot {
+            Some(existing) if existing == &report => Ok(()),
+            Some(_) => Err(PathReportError::ConflictingReportForCurrentEpoch),
+            None => {
+                *slot = Some(report);
+                Ok(())
+            }
+        }
+    }
+
+    fn update_state(&mut self) {
+        if self.agent_report.is_some() && self.client_report.is_some() {
+            self.state = StrictPathState::Connected;
+        }
+    }
+}
+
+#[derive(Clone, Copy, Debug, PartialEq, Eq)]
+pub enum BindingField {
+    SessionInstanceId,
+    HelperInstanceId,
+    PipelineEpoch,
+    SelectedConfigHash,
+    VerifierChallenge,
+}
+
+#[derive(Clone, Copy, Debug, PartialEq, Eq)]
+pub enum PathReportError {
+    BindingMismatch(BindingField),
+    PathDoesNotSatisfyStrictPolicy(MemoryPathStatus),
+    SurfaceDoesNotSatisfyStrictPolicy(MemorySurfaceType),
+    CpuMapObserved(u64),
+    CrossAdapterCopyObserved(u64),
+    VerificationEvidenceMissing,
+    ConflictingReportForCurrentEpoch,
+    SessionCannotChange,
+    PipelineEpochDidNotAdvance { current: u64, proposed: u64 },
+    VerifierChallengeReused,
+    RevalidationRequired,
+}
+
+impl fmt::Display for PathReportError {
+    fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
+        write!(formatter, "path report validation failed: {self:?}")
+    }
+}
+
+impl std::error::Error for PathReportError {}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn bytes<const N: usize>(value: u8) -> [u8; N] {
+        [value; N]
+    }
+
+    fn context(epoch: u64, config: u8, challenge: u8) -> ValidationContext {
+        ValidationContext {
+            session_instance_id: bytes(1),
+            agent_helper_instance_id: bytes(2),
+            client_helper_instance_id: bytes(3),
+            pipeline_epoch: epoch,
+            selected_config_hash: bytes(config),
+            verifier_challenge: bytes(challenge),
+        }
+    }
+
+    fn agent_report(context: &ValidationContext) -> AgentEncodePathReport {
+        AgentEncodePathReport {
+            binding: context.agent_binding(),
+            status: MemoryPathStatus::SameAdapterGpuTransform,
+            adapter_identity: "pci:0000:01:00.0".into(),
+            capture_device_identity: "pipewire-node:42".into(),
+            surface_type: MemorySurfaceType::DmaBuf,
+            cpu_map_count: 0,
+            cross_adapter_copy_count: 0,
+            verification_source: VerificationSource::CorrelatedEvidence,
+        }
+    }
+
+    fn client_report(context: &ValidationContext) -> ClientRenderPathReport {
+        ClientRenderPathReport {
+            binding: context.client_binding(),
+            status: MemoryPathStatus::CpuCopyFree,
+            adapter_identity: "dxgi-luid:100".into(),
+            render_device_identity: "d3d11-device:7".into(),
+            surface_type: MemorySurfaceType::D3d11,
+            cpu_map_count: 0,
+            cross_adapter_copy_count: 0,
+            verification_source: VerificationSource::PipelineTracing,
+        }
+    }
+
+    #[test]
+    fn strict_mode_connects_only_after_both_explicit_sources_report() {
+        let expected = context(7, 9, 11);
+        let mut coordinator =
+            StrictPathCoordinator::new(ZeroCopyPolicy::RequiredEndToEnd, expected.clone());
+
+        assert_eq!(
+            coordinator.accept_agent_report(agent_report(&expected)),
+            Ok(StrictPathState::Negotiating)
+        );
+        assert_eq!(coordinator.state(), StrictPathState::Negotiating);
+        assert_eq!(
+            coordinator.accept_client_report(client_report(&expected)),
+            Ok(StrictPathState::Connected)
+        );
+    }
+
+    #[test]
+    fn same_adapter_gpu_transform_satisfies_zero_copy_definition() {
+        assert!(MemoryPathStatus::SameAdapterGpuTransform.satisfies_strict_zero_copy());
+        assert!(MemoryPathStatus::CpuCopyFree.satisfies_strict_zero_copy());
+        assert!(!MemoryPathStatus::CrossAdapterCopy.satisfies_strict_zero_copy());
+    }
+
+    #[test]
+    fn strict_mode_rejects_every_non_zero_copy_status() {
+        let expected = context(1, 2, 3);
+        for status in [
+            MemoryPathStatus::CrossAdapterCopy,
+            MemoryPathStatus::CpuUpload,
+            MemoryPathStatus::Software,
+            MemoryPathStatus::Opaque,
+        ] {
+            let mut coordinator =
+                StrictPathCoordinator::new(ZeroCopyPolicy::RequiredEndToEnd, expected.clone());
+            let mut report = agent_report(&expected);
+            report.status = status;
+            assert_eq!(
+                coordinator.accept_agent_report(report),
+                Err(PathReportError::PathDoesNotSatisfyStrictPolicy(status))
+            );
+            assert!(coordinator.agent_report().is_none());
+        }
+    }
+
+    #[test]
+    fn strict_mode_rejects_observed_copies_and_unverified_claims() {
+        let expected = context(1, 2, 3);
+        let mut coordinator =
+            StrictPathCoordinator::new(ZeroCopyPolicy::RequiredEndToEnd, expected.clone());
+        let mut mapped = agent_report(&expected);
+        mapped.cpu_map_count = 1;
+        assert_eq!(
+            coordinator.accept_agent_report(mapped),
+            Err(PathReportError::CpuMapObserved(1))
+        );
+
+        let mut copied = agent_report(&expected);
+        copied.cross_adapter_copy_count = 2;
+        assert_eq!(
+            coordinator.accept_agent_report(copied),
+            Err(PathReportError::CrossAdapterCopyObserved(2))
+        );
+
+        let mut unverified = agent_report(&expected);
+        unverified.verification_source = VerificationSource::Unverified;
+        assert_eq!(
+            coordinator.accept_agent_report(unverified),
+            Err(PathReportError::VerificationEvidenceMissing)
+        );
+    }
+
+    #[test]
+    fn compatibility_mode_accepts_software_paths_but_still_needs_both_reports() {
+        let expected = context(1, 2, 3);
+        let mut coordinator =
+            StrictPathCoordinator::new(ZeroCopyPolicy::Compatibility, expected.clone());
+        let mut agent = agent_report(&expected);
+        agent.status = MemoryPathStatus::Software;
+        agent.surface_type = MemorySurfaceType::Cpu;
+        agent.cpu_map_count = 12;
+        agent.verification_source = VerificationSource::Unverified;
+        assert_eq!(
+            coordinator.accept_agent_report(agent),
+            Ok(StrictPathState::Negotiating)
+        );
+
+        let mut client = client_report(&expected);
+        client.status = MemoryPathStatus::CpuUpload;
+        client.surface_type = MemorySurfaceType::Cpu;
+        assert_eq!(
+            coordinator.accept_client_report(client),
+            Ok(StrictPathState::Connected)
+        );
+    }
+
+    #[test]
+    fn report_cannot_claim_another_helper_or_stale_configuration() {
+        let expected = context(4, 5, 6);
+        let mut coordinator =
+            StrictPathCoordinator::new(ZeroCopyPolicy::RequiredEndToEnd, expected.clone());
+        let mut wrong_helper = agent_report(&expected);
+        wrong_helper.binding.helper_instance_id = expected.client_helper_instance_id;
+        assert_eq!(
+            coordinator.accept_agent_report(wrong_helper),
+            Err(PathReportError::BindingMismatch(
+                BindingField::HelperInstanceId
+            ))
+        );
+
+        let mut wrong_config = agent_report(&expected);
+        wrong_config.binding.selected_config_hash = bytes(99);
+        assert_eq!(
+            coordinator.accept_agent_report(wrong_config),
+            Err(PathReportError::BindingMismatch(
+                BindingField::SelectedConfigHash
+            ))
+        );
+    }
+
+    #[test]
+    fn configuration_change_invalidates_reports_until_both_revalidate() {
+        let initial = context(10, 20, 30);
+        let mut coordinator =
+            StrictPathCoordinator::new(ZeroCopyPolicy::RequiredEndToEnd, initial.clone());
+        coordinator
+            .accept_agent_report(agent_report(&initial))
+            .unwrap();
+        coordinator
+            .accept_client_report(client_report(&initial))
+            .unwrap();
+        assert_eq!(coordinator.state(), StrictPathState::Connected);
+
+        let next = context(11, 21, 31);
+        coordinator.configuration_changed(next.clone()).unwrap();
+        assert_eq!(coordinator.state(), StrictPathState::Revalidating);
+        assert!(coordinator.agent_report().is_none());
+        assert!(coordinator.client_report().is_none());
+
+        assert_eq!(
+            coordinator.accept_client_report(client_report(&next)),
+            Ok(StrictPathState::Revalidating)
+        );
+        assert_eq!(
+            coordinator.accept_agent_report(agent_report(&next)),
+            Ok(StrictPathState::Connected)
+        );
+    }
+
+    #[test]
+    fn old_reports_are_rejected_after_revalidation_starts() {
+        let initial = context(2, 3, 4);
+        let mut coordinator =
+            StrictPathCoordinator::new(ZeroCopyPolicy::RequiredEndToEnd, initial.clone());
+        let old_report = agent_report(&initial);
+        coordinator.configuration_changed(context(3, 4, 5)).unwrap();
+
+        assert_eq!(
+            coordinator.accept_agent_report(old_report),
+            Err(PathReportError::BindingMismatch(
+                BindingField::PipelineEpoch
+            ))
+        );
+    }
+
+    #[test]
+    fn revalidation_requires_forward_epoch_and_fresh_challenge() {
+        let initial = context(8, 9, 10);
+        let mut coordinator =
+            StrictPathCoordinator::new(ZeroCopyPolicy::RequiredEndToEnd, initial.clone());
+
+        assert_eq!(
+            coordinator.configuration_changed(context(8, 11, 12)),
+            Err(PathReportError::PipelineEpochDidNotAdvance {
+                current: 8,
+                proposed: 8
+            })
+        );
+        assert_eq!(
+            coordinator.configuration_changed(context(9, 11, 10)),
+            Err(PathReportError::VerifierChallengeReused)
+        );
+    }
+
+    #[test]
+    fn duplicate_is_idempotent_but_conflicting_report_is_rejected() {
+        let expected = context(1, 2, 3);
+        let mut coordinator =
+            StrictPathCoordinator::new(ZeroCopyPolicy::RequiredEndToEnd, expected.clone());
+        let report = agent_report(&expected);
+        coordinator.accept_agent_report(report.clone()).unwrap();
+        coordinator.accept_agent_report(report).unwrap();
+
+        let mut conflicting = agent_report(&expected);
+        conflicting.adapter_identity = "a-different-adapter".into();
+        assert_eq!(
+            coordinator.accept_agent_report(conflicting),
+            Err(PathReportError::ConflictingReportForCurrentEpoch)
+        );
+        assert_eq!(coordinator.state(), StrictPathState::Negotiating);
+        assert!(coordinator.agent_report().is_some());
+    }
+
+    #[test]
+    fn connected_strict_path_rejects_conflicting_agent_report() {
+        let expected = context(1, 2, 3);
+        let mut coordinator = connected_strict_coordinator(&expected);
+        let mut conflicting = agent_report(&expected);
+        conflicting.adapter_identity = "another-agent-adapter".into();
+
+        assert_eq!(
+            coordinator.accept_agent_report(conflicting),
+            Err(PathReportError::ConflictingReportForCurrentEpoch)
+        );
+        assert_rejected_and_cleared(&coordinator);
+    }
+
+    #[test]
+    fn connected_strict_path_rejects_conflicting_client_report() {
+        let expected = context(1, 2, 3);
+        let mut coordinator = connected_strict_coordinator(&expected);
+        let mut conflicting = client_report(&expected);
+        conflicting.adapter_identity = "another-client-adapter".into();
+
+        assert_eq!(
+            coordinator.accept_client_report(conflicting),
+            Err(PathReportError::ConflictingReportForCurrentEpoch)
+        );
+        assert_rejected_and_cleared(&coordinator);
+    }
+
+    #[test]
+    fn connected_strict_path_rejects_cpu_map_downgrade_and_clears_proofs() {
+        let expected = context(1, 2, 3);
+        let mut coordinator = connected_strict_coordinator(&expected);
+        let mut downgraded = client_report(&expected);
+        downgraded.cpu_map_count = 1;
+
+        assert_eq!(
+            coordinator.accept_client_report(downgraded),
+            Err(PathReportError::CpuMapObserved(1))
+        );
+        assert_rejected_and_cleared(&coordinator);
+        assert_eq!(
+            coordinator.accept_agent_report(agent_report(&expected)),
+            Err(PathReportError::RevalidationRequired)
+        );
+    }
+
+    #[test]
+    fn connected_strict_path_rejects_cross_adapter_downgrade() {
+        let expected = context(1, 2, 3);
+        let mut coordinator = connected_strict_coordinator(&expected);
+        let mut downgraded = agent_report(&expected);
+        downgraded.status = MemoryPathStatus::CrossAdapterCopy;
+        downgraded.cross_adapter_copy_count = 1;
+
+        assert_eq!(
+            coordinator.accept_agent_report(downgraded),
+            Err(PathReportError::PathDoesNotSatisfyStrictPolicy(
+                MemoryPathStatus::CrossAdapterCopy
+            ))
+        );
+        assert_rejected_and_cleared(&coordinator);
+    }
+
+    #[test]
+    fn connected_strict_path_rejects_software_downgrade() {
+        let expected = context(1, 2, 3);
+        let mut coordinator = connected_strict_coordinator(&expected);
+        let mut downgraded = client_report(&expected);
+        downgraded.status = MemoryPathStatus::Software;
+        downgraded.surface_type = MemorySurfaceType::Cpu;
+
+        assert_eq!(
+            coordinator.accept_client_report(downgraded),
+            Err(PathReportError::PathDoesNotSatisfyStrictPolicy(
+                MemoryPathStatus::Software
+            ))
+        );
+        assert_rejected_and_cleared(&coordinator);
+    }
+
+    #[test]
+    fn rejected_path_can_only_resume_with_a_new_validation_context() {
+        let expected = context(4, 5, 6);
+        let mut coordinator = connected_strict_coordinator(&expected);
+        let mut downgraded = agent_report(&expected);
+        downgraded.status = MemoryPathStatus::Software;
+        coordinator.accept_agent_report(downgraded).unwrap_err();
+
+        let next = context(5, 7, 8);
+        coordinator.configuration_changed(next.clone()).unwrap();
+        assert_eq!(coordinator.state(), StrictPathState::Revalidating);
+        assert_eq!(
+            coordinator.accept_agent_report(agent_report(&next)),
+            Ok(StrictPathState::Revalidating)
+        );
+        assert_eq!(
+            coordinator.accept_client_report(client_report(&next)),
+            Ok(StrictPathState::Connected)
+        );
+    }
+
+    fn connected_strict_coordinator(expected: &ValidationContext) -> StrictPathCoordinator {
+        let mut coordinator =
+            StrictPathCoordinator::new(ZeroCopyPolicy::RequiredEndToEnd, expected.clone());
+        coordinator
+            .accept_agent_report(agent_report(expected))
+            .unwrap();
+        coordinator
+            .accept_client_report(client_report(expected))
+            .unwrap();
+        assert_eq!(coordinator.state(), StrictPathState::Connected);
+        coordinator
+    }
+
+    fn assert_rejected_and_cleared(coordinator: &StrictPathCoordinator) {
+        assert_eq!(coordinator.state(), StrictPathState::Rejected);
+        assert!(coordinator.agent_report().is_none());
+        assert!(coordinator.client_report().is_none());
+    }
+}
diff --git a/protocol/src/transcript.rs b/protocol/src/transcript.rs
new file mode 100644
index 0000000..0ce66f9
--- /dev/null
+++ b/protocol/src/transcript.rs
@@ -0,0 +1,215 @@
+use crate::{RequiredFeatureError, RequiredFeatures, ZeroCopyPolicy};
+
+/// Domain separator and schema marker for the stable transcript hash input.
+pub const TRANSCRIPT_DOMAIN_V1: &[u8] = b"RemoteDesk/NegotiationTranscript/v1\0";
+
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub struct TranscriptInputV1 {
+    pub protocol_major: u32,
+    pub protocol_minor: u32,
+    pub session_instance_id: [u8; 16],
+    pub client_nonce: [u8; 32],
+    pub agent_nonce: [u8; 32],
+    pub required_features: RequiredFeatures,
+    pub zero_copy_policy: ZeroCopyPolicy,
+    pub client_capabilities_digest: [u8; 32],
+    pub agent_capabilities_digest: [u8; 32],
+    pub selected_codec: String,
+    pub selected_config_hash: [u8; 32],
+}
+
+/// Validated negotiation transcript whose byte encoding is suitable as input
+/// to a cryptographic hash supplied by a higher protocol layer.
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub struct NegotiationTranscriptV1(TranscriptInputV1);
+
+impl NegotiationTranscriptV1 {
+    /// Validates an input model before it can be canonically encoded.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`TranscriptBuildError`] when required features cannot be
+    /// honored or the selected codec identifier is empty or too long.
+    pub fn new(
+        input: TranscriptInputV1,
+        locally_supported_features: RequiredFeatures,
+    ) -> Result<Self, TranscriptBuildError> {
+        input
+            .required_features
+            .validate_supported(locally_supported_features)
+            .map_err(TranscriptBuildError::RequiredFeatures)?;
+
+        if input.selected_codec.is_empty() {
+            return Err(TranscriptBuildError::EmptySelectedCodec);
+        }
+        if input.selected_codec.len() > u16::MAX as usize {
+            return Err(TranscriptBuildError::SelectedCodecTooLong(
+                input.selected_codec.len(),
+            ));
+        }
+
+        Ok(Self(input))
+    }
+
+    #[must_use]
+    pub const fn input(&self) -> &TranscriptInputV1 {
+        &self.0
+    }
+
+    /// Produces canonical, unambiguous bytes. Integer fields are big-endian;
+    /// variable fields are length-prefixed; fields appear in schema order.
+    #[must_use]
+    pub fn stable_hash_input(&self) -> Vec<u8> {
+        let input = &self.0;
+        let mut output = Vec::with_capacity(256 + input.selected_codec.len());
+        output.extend_from_slice(TRANSCRIPT_DOMAIN_V1);
+        append_field(&mut output, 1, &input.protocol_major.to_be_bytes());
+        append_field(&mut output, 2, &input.protocol_minor.to_be_bytes());
+        append_field(&mut output, 3, &input.session_instance_id);
+        append_field(&mut output, 4, &input.client_nonce);
+        append_field(&mut output, 5, &input.agent_nonce);
+        append_field(
+            &mut output,
+            6,
+            &input.required_features.wire_bits().to_be_bytes(),
+        );
+        append_field(
+            &mut output,
+            7,
+            &[match input.zero_copy_policy {
+                ZeroCopyPolicy::RequiredEndToEnd => 1,
+                ZeroCopyPolicy::Compatibility => 2,
+            }],
+        );
+        append_field(&mut output, 8, &input.client_capabilities_digest);
+        append_field(&mut output, 9, &input.agent_capabilities_digest);
+        append_field(&mut output, 10, input.selected_codec.as_bytes());
+        append_field(&mut output, 11, &input.selected_config_hash);
+        output
+    }
+}
+
+fn append_field(output: &mut Vec<u8>, tag: u8, value: &[u8]) {
+    output.push(tag);
+    let length = u32::try_from(value.len())
+        .expect("validated transcript fields always fit in a u32 length prefix");
+    output.extend_from_slice(&length.to_be_bytes());
+    output.extend_from_slice(value);
+}
+
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub enum TranscriptBuildError {
+    RequiredFeatures(RequiredFeatureError),
+    EmptySelectedCodec,
+    SelectedCodecTooLong(usize),
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::KnownRequiredFeature;
+
+    fn transcript_input() -> TranscriptInputV1 {
+        TranscriptInputV1 {
+            protocol_major: 1,
+            protocol_minor: 4,
+            session_instance_id: [1; 16],
+            client_nonce: [2; 32],
+            agent_nonce: [3; 32],
+            required_features: RequiredFeatures::from(
+                KnownRequiredFeature::ConfigBoundPathVerification,
+            ),
+            zero_copy_policy: ZeroCopyPolicy::RequiredEndToEnd,
+            client_capabilities_digest: [4; 32],
+            agent_capabilities_digest: [5; 32],
+            selected_codec: "H264/high/4.2".into(),
+            selected_config_hash: [6; 32],
+        }
+    }
+
+    #[test]
+    fn stable_hash_input_is_deterministic() {
+        let first =
+            NegotiationTranscriptV1::new(transcript_input(), RequiredFeatures::ALL_KNOWN).unwrap();
+        let second =
+            NegotiationTranscriptV1::new(transcript_input(), RequiredFeatures::ALL_KNOWN).unwrap();
+
+        assert_eq!(first.stable_hash_input(), second.stable_hash_input());
+        assert!(first.stable_hash_input().starts_with(TRANSCRIPT_DOMAIN_V1));
+    }
+
+    #[test]
+    fn every_security_relevant_selection_changes_hash_input() {
+        let original =
+            NegotiationTranscriptV1::new(transcript_input(), RequiredFeatures::ALL_KNOWN)
+                .unwrap()
+                .stable_hash_input();
+
+        let mut changed = transcript_input();
+        changed.zero_copy_policy = ZeroCopyPolicy::Compatibility;
+        assert_ne!(
+            original,
+            NegotiationTranscriptV1::new(changed, RequiredFeatures::ALL_KNOWN)
+                .unwrap()
+                .stable_hash_input()
+        );
+
+        let mut changed = transcript_input();
+        changed.selected_config_hash = [99; 32];
+        assert_ne!(
+            original,
+            NegotiationTranscriptV1::new(changed, RequiredFeatures::ALL_KNOWN)
+                .unwrap()
+                .stable_hash_input()
+        );
+
+        let mut changed = transcript_input();
+        changed.required_features |=
+            RequiredFeatures::from(KnownRequiredFeature::ExplicitEndpointPathReports);
+        assert_ne!(
+            original,
+            NegotiationTranscriptV1::new(changed, RequiredFeatures::ALL_KNOWN)
+                .unwrap()
+                .stable_hash_input()
+        );
+    }
+
+    #[test]
+    fn codec_is_length_delimited_and_cannot_shift_following_field() {
+        let one = NegotiationTranscriptV1::new(
+            TranscriptInputV1 {
+                selected_codec: "ab".into(),
+                selected_config_hash: [b'c'; 32],
+                ..transcript_input()
+            },
+            RequiredFeatures::ALL_KNOWN,
+        )
+        .unwrap();
+        let two = NegotiationTranscriptV1::new(
+            TranscriptInputV1 {
+                selected_codec: "abc".into(),
+                selected_config_hash: [0; 32],
+                ..transcript_input()
+            },
+            RequiredFeatures::ALL_KNOWN,
+        )
+        .unwrap();
+
+        assert_ne!(one.stable_hash_input(), two.stable_hash_input());
+    }
+
+    #[test]
+    fn transcript_construction_also_fails_closed_on_unknown_requirement() {
+        let input = TranscriptInputV1 {
+            required_features: RequiredFeatures::from_wire_bits(1 << 60),
+            ..transcript_input()
+        };
+
+        assert_eq!(
+            NegotiationTranscriptV1::new(input, RequiredFeatures::ALL_KNOWN),
+            Err(TranscriptBuildError::RequiredFeatures(
+                RequiredFeatureError::UnknownRequiredBits(1 << 60)
+            ))
+        );
+    }
+}
diff --git a/rust-toolchain.toml b/rust-toolchain.toml
new file mode 100644
index 0000000..92a57c5
--- /dev/null
+++ b/rust-toolchain.toml
@@ -0,0 +1,4 @@
+[toolchain]
+channel = "stable"
+components = ["clippy", "rustfmt"]
+profile = "minimal"
diff --git a/transport/hysteria2-agent/README.md b/transport/hysteria2-agent/README.md
new file mode 100644
index 0000000..df2a24a
--- /dev/null
+++ b/transport/hysteria2-agent/README.md
@@ -0,0 +1,32 @@
+# RemoteDesk Hysteria2 transport
+
+This helper uses the official `github.com/apernet/hysteria/core/v2` Go server.
+It exposes only authenticated Hysteria2 QUIC/UDP sessions. The core's TCP
+proxy hook is deliberately rejected, so the public transport never falls back
+to TCP or SOCKS5. Authenticated datagrams are delivered to the local Agent UDP
+endpoint (`127.0.0.1:39502` by default).
+
+Build with `go build -buildvcs=false -trimpath -ldflags "-s -w" -o remotedesk-hysteria2-agent ./`.
+The certificate and key must be a real TLS pair; do not run without them.
+
+Example:
+
+```sh
+REMOTEDESK_HYSTERIA2_PASSWORD='change-me' \
+REMOTEDESK_HYSTERIA2_CERT=/etc/remotedesk/server.crt \
+REMOTEDESK_HYSTERIA2_KEY=/etc/remotedesk/server.key \
+./remotedesk-hysteria2-agent --listen 0.0.0.0:39502
+```
+
+The same binary provides the official Hysteria2 client path. It listens on a
+local UDP socket and forwards datagrams through one authenticated Hysteria2
+UDP session:
+
+```sh
+./remotedesk-hysteria2-agent --mode client --listen 127.0.0.1:39503 \
+  --server relay.example:39502 --password 'change-me' \
+  --server-name relay.example --agent-udp 127.0.0.1:39502
+```
+
+`--insecure` is intentionally opt-in and should only be used for a local test
+certificate. No TCP listener, TCP proxy, or SOCKS5 endpoint is created.
diff --git a/transport/hysteria2-agent/go.mod b/transport/hysteria2-agent/go.mod
new file mode 100644
index 0000000..4f74981
--- /dev/null
+++ b/transport/hysteria2-agent/go.mod
@@ -0,0 +1,23 @@
+module github.com/remotedesk/remotedesk/transport/hysteria2-agent
+
+go 1.25.0
+
+require github.com/apernet/hysteria/core/v2 v2.12.1
+
+require (
+	github.com/andybalholm/brotli v1.1.0 // indirect
+	github.com/apernet/quic-go v0.61.1-0.20260806010916-184d081eef3e // indirect
+	github.com/davecgh/go-spew v1.1.1 // indirect
+	github.com/klauspost/compress v1.17.9 // indirect
+	github.com/pmezard/go-difflib v1.0.0 // indirect
+	github.com/quic-go/qpack v0.6.0 // indirect
+	github.com/refraction-networking/utls v1.8.2 // indirect
+	github.com/stretchr/objx v0.5.2 // indirect
+	github.com/stretchr/testify v1.11.1 // indirect
+	golang.org/x/crypto v0.54.0 // indirect
+	golang.org/x/exp v0.0.0-20240506185415-9bf2ced13842 // indirect
+	golang.org/x/net v0.57.0 // indirect
+	golang.org/x/sys v0.47.0 // indirect
+	golang.org/x/text v0.40.0 // indirect
+	gopkg.in/yaml.v3 v3.0.1 // indirect
+)
diff --git a/transport/hysteria2-agent/go.sum b/transport/hysteria2-agent/go.sum
new file mode 100644
index 0000000..9075540
--- /dev/null
+++ b/transport/hysteria2-agent/go.sum
@@ -0,0 +1,47 @@
+github.com/andybalholm/brotli v1.1.0 h1:eLKJA0d02Lf0mVpIDgYnqXcUn0GqVmEFny3VuID1U3M=
+github.com/andybalholm/brotli v1.1.0/go.mod h1:sms7XGricyQI9K10gOSf56VKKWS4oLer58Q+mhRPtnY=
+github.com/apernet/hysteria/core/v2 v2.12.1 h1:7jA/jSC+1tFP8Z9COzI0AdT1p9c0SY7D8vngRd1YX7s=
+github.com/apernet/hysteria/core/v2 v2.12.1/go.mod h1:YVOel66fPGf9dO2rz/9Bsu6yChyMe7gSmYagAYfPOGE=
+github.com/apernet/quic-go v0.61.1-0.20260806010916-184d081eef3e h1:5mgtR5gwIgBKMiGI1QdXldZZ+SNor06Nbu1wCBulQBg=
+github.com/apernet/quic-go v0.61.1-0.20260806010916-184d081eef3e/go.mod h1:x7qxEvX6MCVtDuBKHj3E+88+BtrbEMuAL5qGUKItjW8=
+github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
+github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/klauspost/compress v1.17.9 h1:6KIumPrER1LHsvBVuDa0r5xaG0Es51mhhB9BQB2qeMA=
+github.com/klauspost/compress v1.17.9/go.mod h1:Di0epgTjJY877eYKx5yC51cX2A2Vl2ibi7bDH9ttBbw=
+github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
+github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
+github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
+github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
+github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/quic-go/go-ossfuzz-seeds v0.1.0 h1:APacT+iIaNF6fd8AGEiN3bT/Jtkd2jz4v4TzM7MFjy0=
+github.com/quic-go/go-ossfuzz-seeds v0.1.0/go.mod h1:3IOHRbJIc+L6YKMwfDtJAM9Vj9k0YY4muhuyUYk5tbk=
+github.com/quic-go/qpack v0.6.0 h1:g7W+BMYynC1LbYLSqRt8PBg5Tgwxn214ZZR34VIOjz8=
+github.com/quic-go/qpack v0.6.0/go.mod h1:lUpLKChi8njB4ty2bFLX2x4gzDqXwUpaO1DP9qMDZII=
+github.com/refraction-networking/utls v1.8.2 h1:j4Q1gJj0xngdeH+Ox/qND11aEfhpgoEvV+S9iJ2IdQo=
+github.com/refraction-networking/utls v1.8.2/go.mod h1:jkSOEkLqn+S/jtpEHPOsVv/4V4EVnelwbMQl4vCWXAM=
+github.com/rogpeppe/go-internal v1.12.0 h1:exVL4IDcn6na9z1rAb56Vxr+CgyK3nn3O+epU5NdKM8=
+github.com/rogpeppe/go-internal v1.12.0/go.mod h1:E+RYuTGaKKdloAfM02xzb0FW3Paa99yedzYV+kq4uf4=
+github.com/stretchr/objx v0.5.2 h1:xuMeJ0Sdp5ZMRXx/aWO6RZxdr3beISkG5/G/aIRr3pY=
+github.com/stretchr/objx v0.5.2/go.mod h1:FRsXN1f5AsAjCGJKqEizvkpNtU+EGNCLh3NxZ/8L+MA=
+github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=
+github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=
+go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto=
+go.uber.org/goleak v1.3.0/go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE=
+go.uber.org/mock v0.5.2 h1:LbtPTcP8A5k9WPXj54PPPbjcI4Y6lhyOZXn+VS7wNko=
+go.uber.org/mock v0.5.2/go.mod h1:wLlUxC2vVTPTaE3UD51E0BGOAElKrILxhVSDYQLld5o=
+golang.org/x/crypto v0.54.0 h1:YLIA59K4fiNzHzjnZt2tUJQjQtUWfWbeHBqKtk3eScw=
+golang.org/x/crypto v0.54.0/go.mod h1:KWL8ny2AZdGR2cWmzeHrp2azQPGogOv+HeQaVEXC2dk=
+golang.org/x/exp v0.0.0-20240506185415-9bf2ced13842 h1:vr/HnozRka3pE4EsMEg1lgkXJkTFJCVUX+S/ZT6wYzM=
+golang.org/x/exp v0.0.0-20240506185415-9bf2ced13842/go.mod h1:XtvwrStGgqGPLc4cjQfWqZHG1YFdYs6swckp8vpsjnc=
+golang.org/x/net v0.57.0 h1:K5+3DljvIuDG9/Jv9rvyMywYNFCQ9RSUY6OOTTkT+tE=
+golang.org/x/net v0.57.0/go.mod h1:KpXc8iv+r3XplLAG/f7Jsf9RPszJzdR0f58q9vGOuEU=
+golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs=
+golang.org/x/sys v0.47.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
+golang.org/x/text v0.40.0 h1:Ub2Z6/xjgF1WrYQz2nuITOEegKFtiIy+rieRJ5lHZKs=
+golang.org/x/text v0.40.0/go.mod h1:hpnzDAfGV753zIKo+wk3u1bVKCGPbrnF7+7LBF/UHVY=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
+gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
+gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
+gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
diff --git a/transport/hysteria2-agent/main.go b/transport/hysteria2-agent/main.go
new file mode 100644
index 0000000..ec523c9
--- /dev/null
+++ b/transport/hysteria2-agent/main.go
@@ -0,0 +1,196 @@
+// Command remotedesk-hysteria2-agent exposes a RemoteDesk datagram endpoint
+// through the official Hysteria2 QUIC server. No TCP proxy or SOCKS5 mode is
+// enabled: every authenticated Hysteria2 session is delivered to the local
+// Agent UDP endpoint.
+package main
+
+import (
+	"crypto/tls"
+	"flag"
+	"fmt"
+	"log"
+	"net"
+	"os"
+	"os/signal"
+	"strings"
+	"sync"
+	"syscall"
+	"time"
+
+	"github.com/apernet/hysteria/core/v2/client"
+	"github.com/apernet/hysteria/core/v2/server"
+)
+
+type passwordAuth struct{ password string }
+
+func (a passwordAuth) Authenticate(_ net.Addr, auth string, _ uint64) (bool, string) {
+	return auth != "" && auth == a.password, "remotedesk"
+}
+
+// localDatagramOutbound maps a Hysteria2 UDP request to a local UDP Agent.
+// The public side remains QUIC/UDP; this socket is local-only and never a
+// fallback transport for the remote connection.
+type localDatagramOutbound struct{ target *net.UDPAddr }
+
+func (o localDatagramOutbound) TCP(string) (net.Conn, error) {
+	return nil, fmt.Errorf("TCP proxy is disabled for RemoteDesk Hysteria2")
+}
+func (o localDatagramOutbound) CheckUDP(string) error { return nil }
+func (o localDatagramOutbound) UDP(_ string) (server.UDPConn, error) {
+	conn, err := net.DialUDP("udp", nil, o.target)
+	if err != nil {
+		return nil, err
+	}
+	return &udpConn{conn: conn}, nil
+}
+
+type udpConn struct{ conn *net.UDPConn }
+
+func (c *udpConn) ReadFrom(b []byte) (int, string, error) {
+	n, addr, err := c.conn.ReadFromUDP(b)
+	if addr == nil {
+		return n, "", err
+	}
+	return n, addr.String(), err
+}
+func (c *udpConn) WriteTo(b []byte, _ string) (int, error) { return c.conn.Write(b) }
+func (c *udpConn) Close() error                            { return c.conn.Close() }
+
+func main() {
+	mode := flag.String("mode", "server", "transport mode: server or client")
+	listen := flag.String("listen", env("REMOTEDESK_HYSTERIA2_LISTEN", "0.0.0.0:39502"), "Hysteria2 UDP listen address")
+	serverAddr := flag.String("server", env("REMOTEDESK_HYSTERIA2_SERVER", "127.0.0.1:39502"), "Hysteria2 server address (client mode)")
+	password := flag.String("password", os.Getenv("REMOTEDESK_HYSTERIA2_PASSWORD"), "Hysteria2 password")
+	certFile := flag.String("cert", os.Getenv("REMOTEDESK_HYSTERIA2_CERT"), "TLS certificate PEM")
+	keyFile := flag.String("key", os.Getenv("REMOTEDESK_HYSTERIA2_KEY"), "TLS private key PEM")
+	agent := flag.String("agent-udp", env("REMOTEDESK_AGENT_UDP", "127.0.0.1:39502"), "local Agent UDP endpoint")
+	serverName := flag.String("server-name", env("REMOTEDESK_HYSTERIA2_SERVER_NAME", "localhost"), "TLS server name (client mode)")
+	insecure := flag.Bool("insecure", false, "disable TLS certificate verification (client mode only)")
+	flag.Parse()
+	if *mode == "client" {
+		runClient(*listen, *serverAddr, *password, *agent, *serverName, *insecure)
+		return
+	}
+	if *mode != "server" {
+		log.Fatalf("invalid --mode %q (must be server or client)", *mode)
+	}
+	if *password == "" || *certFile == "" || *keyFile == "" {
+		log.Fatal("password, cert and key are required; refusing unauthenticated Hysteria2")
+	}
+	target, err := net.ResolveUDPAddr("udp", *agent)
+	if err != nil {
+		log.Fatalf("invalid --agent-udp: %v", err)
+	}
+	cert, err := tls.LoadX509KeyPair(*certFile, *keyFile)
+	if err != nil {
+		log.Fatalf("load TLS certificate: %v", err)
+	}
+	packetConn, err := net.ListenPacket("udp", *listen)
+	if err != nil {
+		log.Fatalf("listen Hysteria2 UDP: %v", err)
+	}
+	srv, err := server.NewServer(&server.Config{
+		TLSConfig:     server.TLSConfig{Certificates: []tls.Certificate{cert}},
+		Conn:          packetConn,
+		Authenticator: passwordAuth{password: *password},
+		Outbound:      localDatagramOutbound{target: target},
+		DisableUDP:    false,
+	})
+	if err != nil {
+		log.Fatalf("create Hysteria2 server: %v", err)
+	}
+	log.Printf("RemoteDesk Hysteria2 server listening on %s (UDP/QUIC only)", *listen)
+	log.Printf("authenticated datagrams delivered to local Agent UDP %s", target)
+	stop := make(chan os.Signal, 1)
+	signal.Notify(stop, os.Interrupt, syscall.SIGTERM)
+	done := make(chan error, 1)
+	go func() { done <- srv.Serve() }()
+	select {
+	case sig := <-stop:
+		log.Printf("shutting down on %s", sig)
+		_ = srv.Close()
+	case err := <-done:
+		if err != nil && !strings.Contains(err.Error(), "closed") {
+			log.Fatal(err)
+		}
+	}
+	// Allow the QUIC listener to finish releasing its packet socket.
+	time.Sleep(50 * time.Millisecond)
+}
+
+func runClient(localListen, serverAddr, password, remoteAgent, serverName string, insecure bool) {
+	if password == "" {
+		log.Fatal("--password is required in client mode")
+	}
+	serverUDP, err := net.ResolveUDPAddr("udp", serverAddr)
+	if err != nil {
+		log.Fatalf("invalid --server: %v", err)
+	}
+	localUDP, err := net.ResolveUDPAddr("udp", localListen)
+	if err != nil {
+		log.Fatalf("invalid --listen: %v", err)
+	}
+	localConn, err := net.ListenUDP("udp", localUDP)
+	if err != nil {
+		log.Fatalf("listen local UDP: %v", err)
+	}
+	defer localConn.Close()
+	hy, _, err := client.NewClient(&client.Config{
+		ServerAddr: serverUDP,
+		Auth:       password,
+		TLSConfig: client.TLSConfig{
+			ServerName:         serverName,
+			InsecureSkipVerify: insecure,
+		},
+	})
+	if err != nil {
+		log.Fatalf("connect Hysteria2 server: %v", err)
+	}
+	defer hy.Close()
+	stream, err := hy.UDP()
+	if err != nil {
+		log.Fatalf("open Hysteria2 UDP session: %v", err)
+	}
+	defer stream.Close()
+	log.Printf("RemoteDesk Hysteria2 client listening on %s (UDP only)", localConn.LocalAddr())
+	log.Printf("authenticated Hysteria2 server %s; remote Agent %s", serverAddr, remoteAgent)
+	var peerMu sync.RWMutex
+	var peer *net.UDPAddr
+	go func() {
+		for {
+			data, _, err := stream.Receive()
+			if err != nil {
+				return
+			}
+			peerMu.RLock()
+			currentPeer := peer
+			if currentPeer != nil {
+				_, _ = localConn.WriteToUDP(data, currentPeer)
+			}
+			peerMu.RUnlock()
+		}
+	}()
+	buf := make([]byte, 64*1024)
+	for {
+		n, sourcePeer, err := localConn.ReadFromUDP(buf)
+		if err != nil {
+			return
+		}
+		peerMu.Lock()
+		peer = sourcePeer
+		peerMu.Unlock()
+		// The Hysteria2 destination is metadata only. The server's outbound
+		// implementation pins delivery to its configured local Agent UDP port.
+		if err := stream.Send(append([]byte(nil), buf[:n]...), remoteAgent); err != nil {
+			log.Printf("send Hysteria2 datagram from %s: %v", sourcePeer, err)
+			return
+		}
+	}
+}
+
+func env(name, fallback string) string {
+	if value := os.Getenv(name); value != "" {
+		return value
+	}
+	return fallback
+}
diff --git a/vendor/ironrdp-client/Cargo.toml b/vendor/ironrdp-client/Cargo.toml
new file mode 100644
index 0000000..82f3ddf
--- /dev/null
+++ b/vendor/ironrdp-client/Cargo.toml
@@ -0,0 +1,315 @@
+# THIS FILE IS AUTOMATICALLY GENERATED BY CARGO
+#
+# When uploading crates to the registry Cargo will automatically
+# "normalize" Cargo.toml files for maximal compatibility
+# with all versions of Cargo and also rewrite `path` dependencies
+# to registry (e.g., crates.io) dependencies.
+#
+# If you are reading this file be aware that the original Cargo.toml
+# will likely look very different (and much more reasonable).
+# See Cargo.toml.orig for the original contents.
+
+[package]
+edition = "2024"
+name = "ironrdp-client"
+version = "0.1.0"
+authors = [
+    "Devolutions Inc. <infos@devolutions.net>",
+    "Teleport <goteleport.com>",
+]
+build = false
+autolib = false
+autobins = false
+autoexamples = false
+autotests = false
+autobenches = false
+description = "Portable RDP client engine without GPU acceleration"
+homepage = "https://github.com/Devolutions/IronRDP"
+readme = "README.md"
+keywords = [
+    "rdp",
+    "remote-desktop",
+    "network",
+    "client",
+    "protocol",
+]
+categories = ["network-programming"]
+license = "MIT OR Apache-2.0"
+repository = "https://github.com/Devolutions/IronRDP"
+resolver = "2"
+
+[features]
+all = [
+    "sound",
+    "clipboard",
+    "rdpdr",
+    "smartcard",
+    "gateway",
+    "dvc-pipe-proxy",
+    "dvc-com-plugin",
+]
+clipboard = [
+    "dep:ironrdp-cliprdr",
+    "dep:ironrdp-cliprdr-native",
+]
+default = []
+dvc-com-plugin = ["dep:ironrdp-dvc-com-plugin"]
+dvc-pipe-proxy = ["dep:ironrdp-dvc-pipe-proxy"]
+gateway = ["dep:ironrdp-mstsgu"]
+native-tls = [
+    "ironrdp-tls/native-tls",
+    "tokio-tungstenite/native-tls",
+    "ironrdp-mstsgu?/native-tls",
+]
+qoi = [
+    "ironrdp-connector/qoi",
+    "ironrdp-session/qoi",
+]
+qoiz = [
+    "ironrdp-connector/qoiz",
+    "ironrdp-session/qoiz",
+]
+rdpdr = ["dep:ironrdp-rdpdr"]
+rustls = [
+    "ironrdp-tls/rustls",
+    "tokio-tungstenite/rustls-tls-native-roots",
+    "ironrdp-mstsgu?/rustls",
+]
+smartcard = ["rdpdr"]
+sound = [
+    "dep:ironrdp-rdpsnd",
+    "dep:ironrdp-rdpsnd-native",
+]
+
+[lib]
+name = "ironrdp_client"
+path = "src/lib.rs"
+test = true
+doctest = false
+
+[dependencies.anyhow]
+version = "1"
+
+[dependencies.futures-util]
+version = "0.3"
+features = ["sink"]
+
+[dependencies.ironrdp-cfg]
+version = "0.1"
+
+[dependencies.ironrdp-cliprdr]
+version = "0.7"
+optional = true
+
+[dependencies.ironrdp-cliprdr-native]
+version = "0.7"
+optional = true
+
+[dependencies.ironrdp-connector]
+version = "0.10"
+
+[dependencies.ironrdp-core]
+version = "0.2"
+features = ["alloc"]
+
+[dependencies.ironrdp-displaycontrol]
+version = "0.8"
+
+[dependencies.ironrdp-dvc]
+version = "0.8"
+
+[dependencies.ironrdp-dvc-pipe-proxy]
+version = "0.5"
+optional = true
+
+[dependencies.ironrdp-echo]
+version = "0.4"
+
+[dependencies.ironrdp-graphics]
+version = "0.9"
+
+[dependencies.ironrdp-mstsgu]
+version = "0.0.1"
+optional = true
+
+[dependencies.ironrdp-pdu]
+version = "0.9"
+
+[dependencies.ironrdp-propertyset]
+version = "0.1"
+
+[dependencies.ironrdp-rdcleanpath]
+version = "0.2"
+
+[dependencies.ironrdp-rdpdr]
+version = "0.7"
+optional = true
+
+[dependencies.ironrdp-rdpsnd]
+version = "0.9"
+optional = true
+
+[dependencies.ironrdp-rdpsnd-native]
+version = "0.7"
+optional = true
+
+[dependencies.ironrdp-session]
+version = "0.11"
+
+[dependencies.ironrdp-svc]
+version = "0.8"
+
+[dependencies.ironrdp-tls]
+version = "0.2"
+
+[dependencies.ironrdp-tokio]
+version = "0.10"
+features = ["reqwest"]
+
+[dependencies.smallvec]
+version = "1.15"
+
+[dependencies.tokio]
+version = "1"
+features = [
+    "macros",
+    "net",
+    "io-util",
+    "sync",
+    "rt",
+    "time",
+]
+
+[dependencies.tokio-tungstenite]
+version = "0.29"
+
+[dependencies.tracing]
+version = "0.1"
+features = ["log"]
+
+[dependencies.url]
+version = "2"
+
+[dependencies.x509-cert]
+version = "0.2"
+features = ["std"]
+default-features = false
+
+[target."cfg(windows)".dependencies.ironrdp-dvc-com-plugin]
+version = "0.1"
+optional = true
+
+[lints.clippy]
+alloc_instead_of_core = "warn"
+allow_attributes = "warn"
+as_conversions = "warn"
+as_pointer_underscore = "warn"
+as_ptr_cast_mut = "warn"
+as_underscore = "warn"
+cast_lossless = "warn"
+cast_possible_truncation = "warn"
+cast_possible_wrap = "warn"
+cast_ptr_alignment = "warn"
+cast_sign_loss = "warn"
+cfg_not_test = "warn"
+checked_conversions = "warn"
+clone_on_ref_ptr = "warn"
+cloned_instead_of_copied = "warn"
+collection_is_never_read = "warn"
+copy_iterator = "warn"
+dbg_macro = "warn"
+deref_by_slicing = "warn"
+disallowed_script_idents = "warn"
+doc_include_without_cfg = "warn"
+empty_drop = "warn"
+empty_enum_variants_with_brackets = "warn"
+expl_impl_clone_on_copy = "warn"
+filetype_is_file = "warn"
+float_cmp = "warn"
+float_cmp_const = "warn"
+fn_to_numeric_cast_any = "warn"
+get_unwrap = "warn"
+implicit_clone = "warn"
+infinite_loop = "warn"
+inline_always = "warn"
+large_futures = "warn"
+large_include_file = "warn"
+large_stack_frames = "warn"
+large_types_passed_by_value = "warn"
+lossy_float_literal = "warn"
+map_with_unused_argument_over_ranges = "warn"
+mem_forget = "warn"
+missing_panics_doc = "warn"
+missing_safety_doc = "warn"
+mixed_read_write_in_expression = "warn"
+multiple_inherent_impl = "warn"
+multiple_unsafe_ops_per_block = "warn"
+needless_raw_strings = "warn"
+non_ascii_literal = "warn"
+non_zero_suggestions = "warn"
+or_fun_call = "warn"
+panic = "warn"
+partial_pub_fields = "warn"
+precedence_bits = "warn"
+print_stderr = "warn"
+print_stdout = "warn"
+ptr_cast_constness = "warn"
+pub_without_shorthand = "warn"
+range_plus_one = "warn"
+rc_buffer = "warn"
+rc_mutex = "warn"
+redundant_clone = "warn"
+redundant_type_annotations = "warn"
+renamed_function_params = "warn"
+rest_pat_in_fully_bound_structs = "warn"
+return_self_not_must_use = "warn"
+same_name_method = "warn"
+self_named_module_files = "warn"
+semicolon_outside_block = "warn"
+separated_literal_suffix = "warn"
+similar_names = "warn"
+std_instead_of_core = "warn"
+str_to_string = "warn"
+string_add = "warn"
+string_lit_chars_any = "warn"
+string_slice = "warn"
+suspicious_xor_used_as_pow = "warn"
+todo = "warn"
+trait_duplication_in_bounds = "warn"
+transmute_ptr_to_ptr = "warn"
+try_err = "warn"
+type_repetition_in_bounds = "warn"
+undocumented_unsafe_blocks = "warn"
+unnecessary_box_returns = "warn"
+unnecessary_safety_comment = "warn"
+unnecessary_self_imports = "warn"
+unused_result_ok = "warn"
+unused_self = "warn"
+unused_trait_names = "warn"
+unwrap_used = "warn"
+useless_let_if_seq = "warn"
+wildcard_dependencies = "warn"
+wildcard_imports = "warn"
+
+[lints.rust]
+absolute_paths_not_starting_with_crate = "warn"
+ambiguous_negative_literals = "warn"
+elided_lifetimes_in_paths = "warn"
+invalid_reference_casting = "warn"
+keyword_idents = "warn"
+macro_use_extern_crate = "warn"
+missing_unsafe_on_extern = "warn"
+noop_method_call = "warn"
+redundant_imports = "warn"
+redundant_lifetimes = "warn"
+single_use_lifetimes = "warn"
+trivial_numeric_casts = "warn"
+unit_bindings = "warn"
+unreachable_pub = "warn"
+unsafe_attr_outside_unsafe = "warn"
+unsafe_op_in_unsafe_fn = "warn"
+unused_crate_dependencies = "warn"
+unused_lifetimes = "warn"
+unused_macro_rules = "warn"
+unused_qualifications = "warn"
+unused_unsafe = "warn"
diff --git a/vendor/ironrdp-client/README-REMOTEDESK.md b/vendor/ironrdp-client/README-REMOTEDESK.md
new file mode 100644
index 0000000..0b821c7
--- /dev/null
+++ b/vendor/ironrdp-client/README-REMOTEDESK.md
@@ -0,0 +1,32 @@
+# RemoteDesk IronRDP Client Patch
+
+This directory vendors `ironrdp-client` 0.1.0 from crates.io. The unmodified
+crate checksum recorded in `Cargo.lock` is
+`e2a3b44f8af101cf5a8cc5bf80470d64099c95c553d5597dec55ff38a821243e`.
+
+RemoteDesk exposes two additional pieces of output telemetry. IronRDP already parses RDP
+`NetworkCharacteristicsResult` messages but otherwise only logs them. The
+patch exposes the server-measured base RTT, average RTT, and bandwidth to the
+embedding viewer. Image events also carry the elapsed local processing time
+from a received network PDU entering the active stage through decoded image
+pixel conversion. Locally generated updates do not report decode time.
+Image events additionally retain the clamped inclusive `GraphicsUpdate` region
+and carry only that region's compact converted pixel block. The embedding
+viewer can merge queued regions into a persistent framebuffer and perform
+bounded D3D11 texture uploads without converting or uploading the entire
+framebuffer on every update.
+
+The timing is CPU-side protocol and image processing telemetry. It is not an
+RDP server encoding measurement, a presentation measurement, or evidence of
+hardware video decoding. Protocol parsing, transport, authentication, input,
+video, clipboard, and audio behavior otherwise remain unchanged.
+
+RemoteDesk also adds an optional validated 2..16 monitor layout to the client
+configuration. When the server opens RDPEDISP and advertises enough monitor
+area, the client returns a real `DISPLAYCONTROL_MONITOR_LAYOUT` message with
+one primary monitor and primary-relative coordinates. Single-monitor resize
+requests now carry a caller generation. A server with Display Control receives
+the request normally and the embedding viewer confirms it only after an image
+with the adjusted dimensions arrives. A server without Display Control emits a
+structured reconnect-required event and keeps the current session alive; the
+library reconnects at the requested size only after an explicit caller command.
diff --git a/vendor/ironrdp-client/README.md b/vendor/ironrdp-client/README.md
new file mode 100644
index 0000000..5959001
--- /dev/null
+++ b/vendor/ironrdp-client/README.md
@@ -0,0 +1,18 @@
+# IronRDP client
+
+Reusable RDP client engine library built on top of the IronRDP crates suite.
+
+This crate is **library-only**: it exposes the `Config`, the `RdpClient`
+runtime, input/output event types, the WebSocket transport, and the session driver. It is
+consumed by `ironrdp-viewer` (the portable GUI client binary) and by any other embedder
+(for example, a headless agent).
+
+The library is winit-agnostic. Output events are emitted on a bounded
+`tokio::sync::mpsc::Sender<RdpOutputEvent>` channel: the embedder is responsible
+for consuming them and dispatching them to whatever event loop or runtime it wishes.
+
+For the end-user RDP client binary, see [`ironrdp-viewer`](../ironrdp-viewer).
+
+This crate is part of the [IronRDP] project.
+
+[IronRDP]: https://github.com/Devolutions/IronRDP
diff --git a/vendor/ironrdp-client/src/clipboard.rs b/vendor/ironrdp-client/src/clipboard.rs
new file mode 100644
index 0000000..cfa2c9c
--- /dev/null
+++ b/vendor/ironrdp-client/src/clipboard.rs
@@ -0,0 +1,25 @@
+use ironrdp_cliprdr::backend::{ClipboardMessage, ClipboardMessageProxy};
+use tokio::sync::mpsc;
+use tracing::error;
+
+use crate::rdp::RdpInputEvent;
+
+/// Shim that forwards CLIPRDR events into the `RdpInputEvent` channel.
+#[derive(Clone, Debug)]
+pub(crate) struct ClientClipboardMessageProxy {
+    tx: mpsc::UnboundedSender<RdpInputEvent>,
+}
+
+impl ClientClipboardMessageProxy {
+    pub(crate) fn new(tx: mpsc::UnboundedSender<RdpInputEvent>) -> Self {
+        Self { tx }
+    }
+}
+
+impl ClipboardMessageProxy for ClientClipboardMessageProxy {
+    fn send_clipboard_message(&self, message: ClipboardMessage) {
+        if self.tx.send(RdpInputEvent::Clipboard(message)).is_err() {
+            error!("Failed to send clipboard message; receiver is closed");
+        }
+    }
+}
diff --git a/vendor/ironrdp-client/src/config.rs b/vendor/ironrdp-client/src/config.rs
new file mode 100644
index 0000000..236657d
--- /dev/null
+++ b/vendor/ironrdp-client/src/config.rs
@@ -0,0 +1,1550 @@
+use core::fmt;
+use core::str::FromStr;
+use core::time::Duration;
+#[cfg(all(windows, feature = "dvc-com-plugin"))]
+use std::path::PathBuf;
+use std::sync::Arc;
+
+use anyhow::Context as _;
+use ironrdp_cfg::PropertySetExt as _;
+use ironrdp_propertyset::PropertySet;
+use url::Url;
+
+// ── Extension registry ────────────────────────────────────────────────────────
+
+type StaticChannelFn = Arc<dyn Fn(&mut ironrdp_connector::ClientConnector, &PropertySet) + Send + Sync>;
+type DvcChannelFn = Arc<dyn Fn(&mut ironrdp_dvc::DrdynvcClient, &PropertySet) + Send + Sync>;
+
+/// Private registry of user-supplied static and dynamic virtual channel factories.
+///
+/// Cloneable via `Arc`; the factory closures are shared across reconnects.
+#[derive(Default)]
+pub(crate) struct ExtensionRegistry {
+    pub(crate) static_channels: Vec<StaticChannelFn>,
+    pub(crate) dvc_channels: Vec<DvcChannelFn>,
+}
+
+impl Clone for ExtensionRegistry {
+    fn clone(&self) -> Self {
+        Self {
+            static_channels: self.static_channels.clone(),
+            dvc_channels: self.dvc_channels.clone(),
+        }
+    }
+}
+
+impl fmt::Debug for ExtensionRegistry {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        f.debug_struct("ExtensionRegistry")
+            .field("static_channels", &self.static_channels.len())
+            .field("dvc_channels", &self.dvc_channels.len())
+            .finish()
+    }
+}
+
+// ── Public configuration types ────────────────────────────────────────────────
+
+/// Fully resolved client configuration.
+///
+/// This is the typed surface consumed by [`crate::rdp::RdpClient`]. Build it with
+/// [`ConfigBuilder`]; producing a `Config` from CLI arguments, `.rdp` files, or interactive
+/// prompts is the consumer's responsibility (see `ironrdp-viewer` for a reference front-end).
+///
+/// The struct is opaque: fields are read-only via accessors so a built `Config` cannot drift into
+/// an inconsistent state (e.g. mutating the connector without updating the originating
+/// [`PropertySet`]).
+#[derive(Clone)]
+pub struct Config {
+    pub(crate) connector: ironrdp_connector::Config,
+    pub(crate) destination: Destination,
+    pub(crate) transport: Transport,
+    pub(crate) kerberos_config: Option<ironrdp_connector::credssp::KerberosConfig>,
+    pub(crate) fake_events_interval: Option<Duration>,
+    pub(crate) channels: ChannelConfig,
+    pub(crate) monitor_layout: Option<Vec<MonitorLayoutEntry>>,
+
+    /// DVC channel ↔ named-pipe proxy configuration.
+    ///
+    /// Each entry causes IronRDP to forward that DVC channel's traffic to/from the
+    /// named pipe, allowing out-of-process DVC logic.
+    #[cfg(feature = "dvc-pipe-proxy")]
+    pub(crate) dvc_pipe_proxies: Vec<DvcProxyInfo>,
+
+    /// Paths to DVC client plugin DLLs to load (Windows only).
+    ///
+    /// Each DLL is loaded via `LoadLibraryW` and its `VirtualChannelGetInstance` export is
+    /// called to obtain DVC plugin COM objects.  Example: `C:\Windows\System32\webauthn.dll`.
+    #[cfg(all(windows, feature = "dvc-com-plugin"))]
+    pub(crate) dvc_plugins: Vec<PathBuf>,
+
+    /// The merged PropertySet that produced this config, shared (read-only) with channel factories.
+    ///
+    /// Well-known secret properties are stripped when calling [`ConfigBuilder::build`].
+    pub(crate) properties: PropertySet,
+
+    pub(crate) extensions: ExtensionRegistry,
+}
+
+/// One monitor in an RDP Display Control layout. Coordinates are relative to
+/// the primary monitor, which must be the only entry at `(0, 0)` marked primary.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct MonitorLayoutEntry {
+    pub left: i32,
+    pub top: i32,
+    pub width: u32,
+    pub height: u32,
+    pub scale_factor: u32,
+    pub is_primary: bool,
+}
+
+fn validate_monitor_layout(monitors: &[MonitorLayoutEntry]) -> anyhow::Result<(u16, u16)> {
+    anyhow::ensure!(
+        (2..=16).contains(&monitors.len()),
+        "multi-monitor layouts require between 2 and 16 monitors"
+    );
+    anyhow::ensure!(
+        monitors.iter().filter(|monitor| monitor.is_primary).count() == 1,
+        "multi-monitor layouts require exactly one primary monitor"
+    );
+    let primary = monitors
+        .iter()
+        .find(|monitor| monitor.is_primary)
+        .expect("the primary count was validated");
+    anyhow::ensure!(
+        primary.left == 0 && primary.top == 0,
+        "the primary monitor must start at (0, 0)"
+    );
+
+    let mut min_left = i64::MAX;
+    let mut min_top = i64::MAX;
+    let mut max_right = i64::MIN;
+    let mut max_bottom = i64::MIN;
+    for monitor in monitors {
+        anyhow::ensure!(
+            (200..=8192).contains(&monitor.width) && monitor.width.is_multiple_of(2),
+            "monitor widths must be even and between 200 and 8192 pixels"
+        );
+        anyhow::ensure!(
+            (200..=8192).contains(&monitor.height),
+            "monitor heights must be between 200 and 8192 pixels"
+        );
+        anyhow::ensure!(
+            (100..=500).contains(&monitor.scale_factor),
+            "monitor scale factors must be between 100 and 500 percent"
+        );
+        let right = i64::from(monitor.left) + i64::from(monitor.width);
+        let bottom = i64::from(monitor.top) + i64::from(monitor.height);
+        min_left = min_left.min(i64::from(monitor.left));
+        min_top = min_top.min(i64::from(monitor.top));
+        max_right = max_right.max(right);
+        max_bottom = max_bottom.max(bottom);
+    }
+    let width = u16::try_from(max_right - min_left)
+        .map_err(|_| anyhow::anyhow!("combined monitor width exceeds the RDP desktop limit"))?;
+    let height = u16::try_from(max_bottom - min_top)
+        .map_err(|_| anyhow::anyhow!("combined monitor height exceeds the RDP desktop limit"))?;
+    anyhow::ensure!(width >= 200 && height >= 200, "combined monitor desktop is too small");
+    Ok((width, height))
+}
+
+impl Config {
+    /// Connector configuration handed to the RDP connection sequence.
+    pub fn connector(&self) -> &ironrdp_connector::Config {
+        &self.connector
+    }
+
+    /// Resolved RDP target (host + port).
+    pub fn destination(&self) -> &Destination {
+        &self.destination
+    }
+
+    /// Selected transport (Direct, Gateway, or RDCleanPath).
+    pub fn transport(&self) -> &Transport {
+        &self.transport
+    }
+
+    /// Optional Kerberos/KDC proxy configuration.
+    pub fn kerberos_config(&self) -> Option<&ironrdp_connector::credssp::KerberosConfig> {
+        self.kerberos_config.as_ref()
+    }
+
+    /// Idle anti-lock fake-events interval, if enabled.
+    pub fn fake_events_interval(&self) -> Option<Duration> {
+        self.fake_events_interval
+    }
+
+    /// Channel/codec runtime toggles.
+    pub fn channels(&self) -> &ChannelConfig {
+        &self.channels
+    }
+
+    /// Configures an initial multi-monitor layout sent through RDPEDISP once
+    /// the server advertises Display Control capabilities.
+    pub fn with_monitor_layout(mut self, monitors: Vec<MonitorLayoutEntry>) -> anyhow::Result<Self> {
+        let (width, height) = validate_monitor_layout(&monitors)?;
+        self.connector.desktop_size = ironrdp_connector::DesktopSize { width, height };
+        self.monitor_layout = Some(monitors);
+        Ok(self)
+    }
+
+    /// Updates the desktop size used by the next connection attempt.
+    pub fn set_desktop_size(&mut self, width: u16, height: u16) {
+        self.connector.desktop_size = ironrdp_connector::DesktopSize { width, height };
+    }
+
+    /// DVC named-pipe proxy mappings.
+    #[cfg(feature = "dvc-pipe-proxy")]
+    pub fn dvc_pipe_proxies(&self) -> &[DvcProxyInfo] {
+        &self.dvc_pipe_proxies
+    }
+
+    /// DVC client plugin DLL paths (Windows only).
+    #[cfg(all(windows, feature = "dvc-com-plugin"))]
+    pub fn dvc_plugins(&self) -> &[PathBuf] {
+        &self.dvc_plugins
+    }
+
+    /// Merged `.rdp` PropertySet that produced this config.
+    pub fn properties(&self) -> &PropertySet {
+        &self.properties
+    }
+}
+
+impl fmt::Debug for Config {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        let mut s = f.debug_struct("Config");
+        s.field("connector", &self.connector);
+        s.field("destination", &self.destination);
+        s.field("transport", &self.transport);
+        s.field("kerberos_config", &self.kerberos_config);
+        s.field("fake_events_interval", &self.fake_events_interval);
+        s.field("channels", &self.channels);
+        #[cfg(feature = "dvc-pipe-proxy")]
+        s.field("dvc_pipe_proxies", &self.dvc_pipe_proxies);
+        #[cfg(all(windows, feature = "dvc-com-plugin"))]
+        s.field("dvc_plugins", &self.dvc_plugins);
+        s.field("extensions", &self.extensions);
+        s.finish()
+    }
+}
+
+/// Resolved clipboard backend selection.
+///
+/// Platform-specific details (e.g., which native clipboard backend to use) are handled
+/// internally by the library when [`Enable`](ClipboardType::Enable) is selected.
+#[cfg(feature = "clipboard")]
+#[derive(Debug, Copy, Clone, PartialEq, Eq, PartialOrd, Ord)]
+pub enum ClipboardType {
+    /// Enable clipboard redirection (use the best available backend).
+    Enable,
+    /// Disable clipboard redirection entirely.
+    Disable,
+    /// Use a stub clipboard backend (for testing or headless usage).
+    // FIXME: the `Stub` concept arguably shouldn't live in ironrdp-client. Investigate whether it
+    // can move out via the extension/backend API, so the stub backend stays in ironrdp-viewer as a
+    // debugging tool. Note that other consumers (e.g. ironrdp-agent) may need their own custom
+    // backend that is not integrated with the host system's clipboard either; the design should
+    // accommodate plugging in arbitrary CliprdrBackendFactory implementations rather than baking
+    // specific variants into the client.
+    Stub,
+}
+
+/// Channel and codec runtime toggles.
+///
+/// Each field is only present when the corresponding Cargo feature is enabled.
+/// The defaults for all optional fields are `true` (enabled) when the feature is on.
+// TODO: Also add flags for all the channels that are not behind Cargo feature flags.
+// Examples: ECHO and Display Control virtual channels.
+#[derive(Clone, Debug)]
+pub struct ChannelConfig {
+    /// Enable the RDPSND (audio) virtual channel.
+    #[cfg(feature = "sound")]
+    pub sound: bool,
+
+    /// Clipboard redirection mode.
+    #[cfg(feature = "clipboard")]
+    pub clipboard: ClipboardType,
+
+    /// Device-redirection (RDPDR) configuration.
+    #[cfg(feature = "rdpdr")]
+    pub rdpdr: RdpdrConfig,
+
+    /// Enable QOI bitmap codec.
+    ///
+    /// When `false`, the QOI codec is removed from `connector.bitmap.codecs` before connecting
+    /// even if the `qoi` feature is compiled in.
+    #[cfg(feature = "qoi")]
+    pub qoi: bool,
+
+    /// Enable QOIZ (QOI with zlib) bitmap codec.
+    #[cfg(feature = "qoiz")]
+    pub qoiz: bool,
+}
+
+#[cfg_attr(
+    not(any(feature = "sound", feature = "clipboard", feature = "qoi", feature = "qoiz")),
+    expect(
+        clippy::derivable_impls,
+        reason = "fields setting non-default values are feature-gated; the impl is only trivially derivable in some feature combinations"
+    )
+)]
+impl Default for ChannelConfig {
+    fn default() -> Self {
+        Self {
+            #[cfg(feature = "sound")]
+            sound: true,
+            #[cfg(feature = "clipboard")]
+            clipboard: ClipboardType::Enable,
+            #[cfg(feature = "rdpdr")]
+            rdpdr: RdpdrConfig::default(),
+            #[cfg(feature = "qoi")]
+            qoi: true,
+            #[cfg(feature = "qoiz")]
+            qoiz: true,
+        }
+    }
+}
+
+/// RDPDR (device redirection) runtime configuration.
+#[cfg(feature = "rdpdr")]
+#[derive(Clone, Debug)]
+pub struct RdpdrConfig {
+    /// Enable device redirection at all.
+    pub enabled: bool,
+
+    /// Enable smart-card redirection within RDPDR.
+    #[cfg(feature = "smartcard")]
+    pub smartcard: bool,
+}
+
+#[cfg(feature = "rdpdr")]
+impl Default for RdpdrConfig {
+    fn default() -> Self {
+        Self {
+            enabled: true,
+            #[cfg(feature = "smartcard")]
+            smartcard: true,
+        }
+    }
+}
+
+/// Fully-resolved transport selection for an established RDP connection.
+///
+/// This is the form stored in [`Config`] and consumed by the connection code: every variant
+/// carries all the data the transport needs, including any credentials. To *configure* a transport
+/// on a [`ConfigBuilder`], use the granular [`TransportKind`] instead — it carries only the
+/// addressing, leaving secrets to be supplied (or prompted for) separately.
+#[derive(Clone, Debug, Default)]
+pub enum Transport {
+    /// Plain TCP → TLS direct connection to the RDP server.
+    #[default]
+    Direct,
+
+    /// Connect via an RDS gateway (MS-TSGU / MSTSGU).
+    ///
+    /// The target RDP server is derived from [`Config::destination`]; the gateway
+    /// only needs its own endpoint and credentials.
+    ///
+    /// NOTE: the destination port is currently not forwarded to the gateway.
+    /// If `ironrdp-mstsgu` hardcodes port 3389, open a follow-up issue.
+    #[cfg(feature = "gateway")]
+    Gateway(GatewayConfig),
+
+    /// Connect via an RDCleanPath proxy (WebSocket-based).
+    RDCleanPath(RDCleanPathConfig),
+}
+
+/// Transport selection used to configure a [`ConfigBuilder`].
+///
+/// Only the *addressing* of the transport is provided here (the gateway endpoint, the RDCleanPath
+/// URL). The associated secrets — gateway username/password and the RDCleanPath authentication
+/// token — are supplied through their own dedicated `with_*` methods
+/// ([`with_gateway_username`](ConfigBuilder::with_gateway_username),
+/// [`with_gateway_password`](ConfigBuilder::with_gateway_password),
+/// [`with_rdcleanpath_token`](ConfigBuilder::with_rdcleanpath_token)).
+///
+/// Decoupling addressing from secrets means the latter can be tracked as [`MissingField`]s and
+/// resolved independently (e.g. prompted interactively) instead of having to be known up-front when
+/// the transport is selected. The builder assembles the resolved [`Transport`] from this selection
+/// and the collected credentials in [`build`](ConfigBuilder::build).
+#[derive(Clone, Debug, Default)]
+pub enum TransportKind {
+    /// Plain TCP → TLS direct connection to the RDP server.
+    #[default]
+    Direct,
+
+    /// Connect via an RDS gateway (MS-TSGU / MSTSGU).
+    ///
+    /// Gateway credentials are supplied separately via
+    /// [`with_gateway_username`](ConfigBuilder::with_gateway_username) /
+    /// [`with_gateway_password`](ConfigBuilder::with_gateway_password).
+    #[cfg(feature = "gateway")]
+    Gateway {
+        /// Gateway endpoint address (e.g., `"rdg.contoso.com:443"`).
+        endpoint: String,
+    },
+
+    /// Connect via an RDCleanPath proxy (WebSocket-based).
+    ///
+    /// The authentication token is supplied separately via
+    /// [`with_rdcleanpath_token`](ConfigBuilder::with_rdcleanpath_token).
+    RDCleanPath {
+        /// RDCleanPath proxy URL.
+        url: Url,
+    },
+}
+
+/// Endpoint and credentials for a fully-resolved RDS gateway connection.
+#[cfg(feature = "gateway")]
+#[derive(Clone, Debug)]
+pub struct GatewayConfig {
+    /// Gateway endpoint address (e.g., `"rdg.contoso.com:443"`).
+    pub endpoint: String,
+    /// Gateway username.
+    pub username: String,
+    /// Gateway password.
+    pub password: String,
+}
+
+// ── Destination ───────────────────────────────────────────────────────────────
+
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct Destination {
+    name: String,
+    port: u16,
+}
+
+impl Destination {
+    pub fn new(addr: impl Into<String>) -> anyhow::Result<Self> {
+        const RDP_DEFAULT_PORT: u16 = 3389;
+
+        let addr = addr.into();
+
+        if let Some(addr_split) = addr.rsplit_once(':') {
+            if let Ok(sock_addr) = addr.parse::<core::net::SocketAddr>() {
+                Ok(Self {
+                    name: sock_addr.ip().to_string(),
+                    port: sock_addr.port(),
+                })
+            } else if addr.parse::<core::net::Ipv6Addr>().is_ok() {
+                Ok(Self {
+                    name: addr,
+                    port: RDP_DEFAULT_PORT,
+                })
+            } else {
+                Ok(Self {
+                    name: addr_split.0.to_owned(),
+                    port: addr_split.1.parse().context("invalid port")?,
+                })
+            }
+        } else {
+            Ok(Self {
+                name: addr,
+                port: RDP_DEFAULT_PORT,
+            })
+        }
+    }
+
+    pub fn name(&self) -> &str {
+        &self.name
+    }
+
+    pub fn port(&self) -> u16 {
+        self.port
+    }
+
+    /// Construct a `Destination` from already-validated components.
+    ///
+    /// Intended for front-ends that have already resolved the host and port from their own
+    /// configuration sources (CLI flags, `.rdp` files, IPC schemas).
+    pub fn from_parts(name: impl Into<String>, port: u16) -> Self {
+        Self {
+            name: name.into(),
+            port,
+        }
+    }
+}
+
+impl fmt::Display for Destination {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        // IPv6 addresses must be bracketed in host:port notation.
+        if self.name.parse::<core::net::Ipv6Addr>().is_ok() {
+            write!(f, "[{}]:{}", self.name, self.port)
+        } else {
+            write!(f, "{}:{}", self.name, self.port)
+        }
+    }
+}
+
+impl FromStr for Destination {
+    type Err = anyhow::Error;
+
+    fn from_str(s: &str) -> Result<Self, Self::Err> {
+        Self::new(s)
+    }
+}
+
+impl From<Destination> for ironrdp_connector::ServerName {
+    fn from(value: Destination) -> Self {
+        Self::new(value.name)
+    }
+}
+
+impl From<&Destination> for ironrdp_connector::ServerName {
+    fn from(value: &Destination) -> Self {
+        Self::new(&value.name)
+    }
+}
+
+// ── RDCleanPath & DVC proxy ───────────────────────────────────────────────────
+
+/// URL and authentication token for a fully-resolved RDCleanPath connection.
+#[derive(Clone, Debug)]
+pub struct RDCleanPathConfig {
+    /// RDCleanPath proxy URL.
+    pub url: Url,
+    /// RDCleanPath authentication token (secret).
+    pub auth_token: String,
+}
+
+/// Name-to-pipe mapping for a single DVC proxy channel.
+#[derive(Clone, Debug)]
+pub struct DvcProxyInfo {
+    pub channel_name: String,
+    pub pipe_name: String,
+}
+
+impl FromStr for DvcProxyInfo {
+    type Err = anyhow::Error;
+
+    fn from_str(s: &str) -> Result<Self, Self::Err> {
+        let (channel_name, pipe_name) = s
+            .split_once('=')
+            .context("missing '=' delimiter in DVC proxy specification")?;
+        Ok(Self {
+            channel_name: channel_name.to_owned(),
+            pipe_name: pipe_name.to_owned(),
+        })
+    }
+}
+
+// ── ConfigBuilder ─────────────────────────────────────────────────────────────
+
+const RDP_DEFAULT_PORT: u16 = 3389;
+const DEFAULT_WIDTH: u16 = 1280;
+const DEFAULT_HEIGHT: u16 = 720;
+
+/// A configuration value that the consumer must supply before [`ConfigBuilder::build`] can succeed.
+///
+/// Query the outstanding ones with [`ConfigBuilder::missing`], resolve each (prompt the user, or
+/// derive a value), set it via the matching `with_*` method, then build.
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum MissingField {
+    /// Target server address (host[:port]).
+    ServerAddress,
+    /// RDP account user name.
+    Username,
+    /// RDP account password.
+    Password,
+    /// Gateway user name (only when a gateway transport is selected).
+    GatewayUsername,
+    /// Gateway password (only when a gateway transport is selected).
+    GatewayPassword,
+    /// RDCleanPath authentication token (only when an RDCleanPath transport is selected).
+    RDCleanPathToken,
+    /// Client build number (frontend-derived).
+    ClientBuild,
+    /// Client directory path (frontend-derived).
+    ClientDir,
+    /// Client platform (frontend-derived).
+    Platform,
+    /// Client computer name (frontend-derived).
+    ClientName,
+}
+
+impl fmt::Display for MissingField {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        let s = match self {
+            Self::ServerAddress => "server address",
+            Self::Username => "username",
+            Self::Password => "password",
+            Self::GatewayUsername => "gateway username",
+            Self::GatewayPassword => "gateway password",
+            Self::RDCleanPathToken => "RDCleanPath token",
+            Self::ClientBuild => "client build",
+            Self::ClientDir => "client dir",
+            Self::Platform => "platform",
+            Self::ClientName => "client name",
+        };
+        f.write_str(s)
+    }
+}
+
+/// Builder for [`Config`].
+///
+/// No defaults are created up-front for required values; they are tracked as unset until provided.
+/// Truly optional settings receive sensible defaults inside [`build`](ConfigBuilder::build). Use
+/// [`missing`](ConfigBuilder::missing) to discover which required fields still need a value.
+///
+/// # Duplicate-channel behaviour
+///
+/// * **Static channels** are keyed by the concrete processor `TypeId`; registering two factories
+///   with the same concrete type silently shadows the earlier one via
+///   [`ironrdp_connector::ClientConnector::attach_static_channel`].
+/// * **DVC channels** are keyed by channel name; duplicate names follow
+///   [`ironrdp_dvc::DrdynvcClient`]'s overwrite semantics.
+///
+/// # Custom-channel configuration keys
+///
+/// Factory closures registered with [`with_static_channel`](Self::with_static_channel) and
+/// [`with_dvc`](Self::with_dvc) receive the merged [`PropertySet`], so a custom channel can read
+/// its own settings (enabled/disabled, endpoints, flags) straight from the `.rdp` file. Which keys
+/// to read is entirely up to the channel: there is no enforced naming scheme. By convention,
+/// IronRDP's own extension keys use an `ironrdp_` prefix to avoid colliding with standard Microsoft
+/// keys, and custom channels are encouraged (but not required) to namespace their keys similarly
+/// (e.g. `mycorp_mychannel_enabled`). A channel may equally reuse a standard MS key when that fits,
+/// or adopt a completely different pattern if warranted — these are only conventions.
+#[derive(Default)]
+pub struct ConfigBuilder {
+    // Required (no default).
+    destination: Option<Destination>,
+    username: Option<String>,
+    password: Option<String>,
+    client_build: Option<u32>,
+    client_dir: Option<String>,
+    client_name: Option<String>,
+    platform: Option<ironrdp_pdu::rdp::capability_sets::MajorPlatformType>,
+    gateway_username: Option<String>,
+    gateway_password: Option<String>,
+
+    // Optional (defaulted at build time).
+    domain: Option<String>,
+    enable_tls: Option<bool>,
+    enable_credssp: Option<bool>,
+    keyboard_type: Option<ironrdp_pdu::gcc::KeyboardType>,
+    keyboard_subtype: Option<u32>,
+    keyboard_functional_keys_count: Option<u32>,
+    ime_file_name: Option<String>,
+    dig_product_id: Option<String>,
+    desktop_width: Option<u16>,
+    desktop_height: Option<u16>,
+    desktop_scale_factor: Option<u32>,
+    color_depth: Option<u32>,
+    codecs: Vec<String>,
+    autologon: Option<bool>,
+    enable_server_pointer: Option<bool>,
+    pointer_software_rendering: Option<bool>,
+    enable_audio_playback: Option<bool>,
+    compression_type: Option<ironrdp_pdu::rdp::client_info::CompressionType>,
+    compression_enabled: Option<bool>,
+    alternate_shell: Option<String>,
+    work_dir: Option<String>,
+
+    transport: TransportKind,
+    rdcleanpath_token: Option<String>,
+    kerberos_config: Option<ironrdp_connector::credssp::KerberosConfig>,
+    fake_events_interval: Option<Duration>,
+    channels: ChannelConfig,
+    #[cfg(feature = "dvc-pipe-proxy")]
+    dvc_pipe_proxies: Vec<DvcProxyInfo>,
+    #[cfg(all(windows, feature = "dvc-com-plugin"))]
+    dvc_plugins: Vec<PathBuf>,
+    properties: PropertySet,
+    extensions: ExtensionRegistry,
+}
+
+impl ConfigBuilder {
+    pub fn new() -> Self {
+        Self::default()
+    }
+
+    #[must_use]
+    pub fn with_destination(mut self, destination: Destination) -> Self {
+        // Classify the host so the persisted `full address` follows TargetAddr's formatting rules
+        // (notably, IPv6 addresses must be bracketed). A bare `TargetHost::Domain` would drop the
+        // brackets and desynchronize the PropertySet from its own canonical formatting.
+        let host = match destination.name.parse::<core::net::IpAddr>() {
+            Ok(ip) => ironrdp_cfg::TargetHost::Ip(ip),
+            Err(_) => ironrdp_cfg::TargetHost::Domain(destination.name.clone()),
+        };
+        self.properties
+            .set_full_address(&ironrdp_cfg::TargetAddr { host, port: None });
+        self.properties.set_server_port(destination.port);
+        self.properties.clear_alternate_full_address();
+        self.destination = Some(destination);
+        self
+    }
+
+    #[must_use]
+    pub fn with_username(mut self, username: impl Into<String>) -> Self {
+        let username = username.into();
+        self.username = Some(username.clone());
+        self.properties.set_username(username);
+        self
+    }
+
+    /// Set the domain used by the RDP account credentials. Upserts the `domain` property.
+    #[must_use]
+    pub fn with_domain(mut self, domain: impl Into<String>) -> Self {
+        let domain = domain.into();
+        self.properties.set_domain(domain.clone());
+        self.domain = Some(domain);
+        self
+    }
+
+    #[must_use]
+    pub fn with_password(mut self, password: impl Into<String>) -> Self {
+        self.password = Some(password.into());
+        self
+    }
+
+    #[must_use]
+    pub fn with_gateway_username(mut self, username: impl Into<String>) -> Self {
+        let username = username.into();
+        self.gateway_username = Some(username.clone());
+        self.properties.set_gateway_username(username);
+        self
+    }
+
+    #[must_use]
+    pub fn with_gateway_password(mut self, password: impl Into<String>) -> Self {
+        self.gateway_password = Some(password.into());
+        self
+    }
+
+    #[must_use]
+    pub fn with_client_build(mut self, build: u32) -> Self {
+        self.client_build = Some(build);
+        self
+    }
+
+    #[must_use]
+    pub fn with_client_dir(mut self, dir: impl Into<String>) -> Self {
+        self.client_dir = Some(dir.into());
+        self
+    }
+
+    #[must_use]
+    pub fn with_client_name(mut self, name: impl Into<String>) -> Self {
+        self.client_name = Some(name.into());
+        self
+    }
+
+    #[must_use]
+    pub fn with_platform(mut self, platform: ironrdp_pdu::rdp::capability_sets::MajorPlatformType) -> Self {
+        self.platform = Some(platform);
+        self
+    }
+
+    #[must_use]
+    pub fn with_keyboard_type(mut self, ty: ironrdp_pdu::gcc::KeyboardType) -> Self {
+        self.keyboard_type = Some(ty);
+        self
+    }
+
+    #[must_use]
+    pub fn with_keyboard_subtype(mut self, subtype: u32) -> Self {
+        self.keyboard_subtype = Some(subtype);
+        self
+    }
+
+    #[must_use]
+    pub fn with_keyboard_functional_keys_count(mut self, count: u32) -> Self {
+        self.keyboard_functional_keys_count = Some(count);
+        self
+    }
+
+    #[must_use]
+    pub fn with_ime_file_name(mut self, name: impl Into<String>) -> Self {
+        self.ime_file_name = Some(name.into());
+        self
+    }
+
+    #[must_use]
+    pub fn with_dig_product_id(mut self, id: impl Into<String>) -> Self {
+        self.dig_product_id = Some(id.into());
+        self
+    }
+
+    #[must_use]
+    pub fn with_color_depth(mut self, depth: u32) -> Self {
+        self.color_depth = Some(depth);
+        self.properties.set_color_depth(depth);
+        self
+    }
+
+    /// Set the desktop width (in pixels) to request. Upserts the `desktopwidth` property.
+    ///
+    /// Together with [`with_desktop_height`](Self::with_desktop_height) this becomes the initial
+    /// [`DesktopSize`](ironrdp_connector::DesktopSize) advertised to the server.
+    #[must_use]
+    pub fn with_desktop_width(mut self, width: u16) -> Self {
+        self.desktop_width = Some(width);
+        self.properties.set_desktop_width(width);
+        self
+    }
+
+    /// Set the desktop height (in pixels) to request. Upserts the `desktopheight` property.
+    ///
+    /// Together with [`with_desktop_width`](Self::with_desktop_width) this becomes the initial
+    /// [`DesktopSize`](ironrdp_connector::DesktopSize) advertised to the server.
+    #[must_use]
+    pub fn with_desktop_height(mut self, height: u16) -> Self {
+        self.desktop_height = Some(height);
+        self.properties.set_desktop_height(height);
+        self
+    }
+
+    /// Set the desktop scale factor (percentage, typically 100–500) to request. Upserts the
+    /// `desktopscalefactor` property.
+    ///
+    /// This becomes the `desktop_scale_factor` in the `TS_UD_CS_CORE` GCC structure.
+    #[must_use]
+    pub fn with_desktop_scale_factor(mut self, scale: u32) -> Self {
+        self.desktop_scale_factor = Some(scale);
+        self.properties.set_desktop_scale_factor(scale);
+        self
+    }
+
+    /// Enable or disable TLS + Network Level Authentication (NLA) using CredSSP. Upserts the
+    /// `enablecredsspsupport` property.
+    ///
+    /// NLA allows authentication to be performed before session establishment, considerably
+    /// reducing the attack surface compared to the legacy TLS security protocol. When connecting to
+    /// NLA-capable servers it is recommended to also disable plain TLS via
+    /// [`with_tls(false)`](Self::with_tls).
+    #[doc(alias("with_nla", "with_enable_credssp"))]
+    #[must_use]
+    pub fn with_credssp(mut self, enabled: bool) -> Self {
+        self.enable_credssp = Some(enabled);
+        self.properties.set_enable_credssp_support(enabled);
+        self
+    }
+
+    /// Set the bitmap codecs (e.g. `["remotefx:on"]`). Not reflected in the PropertySet.
+    #[must_use]
+    pub fn with_codecs(mut self, codecs: Vec<String>) -> Self {
+        self.codecs = codecs;
+        self
+    }
+
+    #[must_use]
+    pub fn with_autologon(mut self, enabled: bool) -> Self {
+        self.autologon = Some(enabled);
+        self.properties.set_autologon(enabled);
+        self
+    }
+
+    /// Enable or disable TLS + Graphical login (legacy security protocol; also called SSL). Upserts
+    /// the `ironrdp_tls` property.
+    ///
+    /// When this security protocol is negotiated, the RDP server shows a graphical login screen and
+    /// the full connection sequence is performed with all static channels joined and active. This
+    /// exposes a wide attack surface (MITM, server-side and client-side takeover, file stealing) and
+    /// is being phased out. Set this to `false` to effectively enforce usage of NLA/CredSSP on the
+    /// client side (see [`with_credssp`](Self::with_credssp)).
+    #[doc(alias("with_enable_tls"))]
+    #[must_use]
+    pub fn with_tls(mut self, enabled: bool) -> Self {
+        self.enable_tls = Some(enabled);
+        self.properties.set_enable_tls(enabled);
+        self
+    }
+
+    #[must_use]
+    pub fn with_server_pointer(mut self, enabled: bool) -> Self {
+        self.enable_server_pointer = Some(enabled);
+        self.properties.set_server_pointer(enabled);
+        self
+    }
+
+    /// Enable or disable software pointer rendering. When enabled, the session composites the
+    /// remote cursor directly into the decoded framebuffer (instead of emitting it as separate
+    /// pointer events for a hardware/overlay cursor). Useful for headless clients that have no
+    /// overlay of their own and want the cursor captured in the frame.
+    #[must_use]
+    pub fn with_pointer_software_rendering(mut self, enabled: bool) -> Self {
+        self.pointer_software_rendering = Some(enabled);
+        self
+    }
+
+    /// Enable or disable bulk compression support. Upserts the `compression` property.
+    #[must_use]
+    pub fn with_compression(mut self, enabled: bool) -> Self {
+        self.compression_enabled = Some(enabled);
+        self.properties.set_compression(enabled);
+        self
+    }
+
+    /// Set the bulk compression type directly. Upserts the `ironrdp_compressionlevel` property,
+    /// or clears it when `ty` is `None`.
+    ///
+    /// When set, the `INFO_COMPRESSION` flag is included in the Client Info PDU and the specified
+    /// compression type is advertised. The server may then send compressed PDUs using any
+    /// compression algorithm up to and including this level:
+    ///
+    /// - `None` — no compression (default)
+    /// - `Some(K8)` — MPPC with 8 KB history (RDP 4.0)
+    /// - `Some(K64)` — MPPC with 64 KB history (RDP 5.0)
+    /// - `Some(Rdp6)` — NCRUSH (RDP 6.0)
+    /// - `Some(Rdp61)` — XCRUSH (RDP 6.1)
+    #[must_use]
+    pub fn with_compression_type(mut self, ty: Option<ironrdp_pdu::rdp::client_info::CompressionType>) -> Self {
+        self.compression_type = ty;
+        if let Some(ty) = ty {
+            self.properties.set_compression_level(level_from_compression_type(ty));
+        } else {
+            self.properties.clear_compression_level();
+        }
+        self
+    }
+
+    /// Set the bulk compression type from a level (0–3). Out-of-range levels are ignored.
+    ///
+    /// The level maps to a [`CompressionType`](ironrdp_pdu::rdp::client_info::CompressionType):
+    /// `0` → `K8`, `1` → `K64`, `2` → `Rdp6`, `3` → `Rdp61`. See
+    /// [`with_compression_type`](Self::with_compression_type) for the semantics of each level.
+    #[must_use]
+    pub fn with_compression_level(self, level: u32) -> Self {
+        match compression_type_from_level(level) {
+            Ok(ty) => self.with_compression_type(Some(ty)),
+            Err(_) => self,
+        }
+    }
+
+    /// Select the transport. Upserts the corresponding addressing properties
+    /// (`ironrdp_rdcleanpathurl`, `gatewayhostname`/`gatewayusagemethod`), clearing the other
+    /// transport's properties so the PropertySet stays consistent.
+    ///
+    /// Secrets are *not* set here: supply gateway credentials via
+    /// [`with_gateway_username`](Self::with_gateway_username) /
+    /// [`with_gateway_password`](Self::with_gateway_password) and the RDCleanPath token via
+    /// [`with_rdcleanpath_token`](Self::with_rdcleanpath_token).
+    #[must_use]
+    pub fn with_transport(mut self, transport: TransportKind) -> Self {
+        match &transport {
+            TransportKind::Direct => {
+                self.properties.clear_rdcleanpath();
+                self.properties.clear_gateway();
+            }
+            TransportKind::RDCleanPath { url } => {
+                self.properties.clear_gateway();
+                self.properties.set_rdcleanpath_url(url.to_string());
+            }
+            #[cfg(feature = "gateway")]
+            TransportKind::Gateway { endpoint } => {
+                self.properties.clear_rdcleanpath();
+                self.properties.set_gateway_hostname(endpoint.clone());
+                self.properties
+                    .set_gateway_usage_method(ironrdp_cfg::GatewayUsageMethod::UseAlways);
+            }
+        }
+        self.transport = transport;
+        self
+    }
+
+    /// Set the RDCleanPath authentication token (only meaningful with an RDCleanPath transport).
+    ///
+    /// The token is a secret: like the gateway password, it is *not* mirrored into the PropertySet,
+    /// and [`build`](Self::build) strips any token loaded from a `.rdp` file before exposing
+    /// [`Config::properties`].
+    #[must_use]
+    pub fn with_rdcleanpath_token(mut self, token: impl Into<String>) -> Self {
+        self.rdcleanpath_token = Some(token.into());
+        self
+    }
+
+    /// Set the kerberos config. Upserts the `kdcproxyurl` property (or clears it when the config
+    /// has no KDC proxy URL); `hostname` is derived from the client name and not stored separately.
+    #[must_use]
+    pub fn with_kerberos_config(mut self, cfg: ironrdp_connector::credssp::KerberosConfig) -> Self {
+        if let Some(url) = &cfg.kdc_proxy_url {
+            self.properties.set_kdc_proxy_url(url.to_string());
+        } else {
+            self.properties.clear_kdc_proxy_url();
+        }
+        self.kerberos_config = Some(cfg);
+        self
+    }
+
+    #[must_use]
+    pub fn with_fake_events_interval(mut self, interval: Duration) -> Self {
+        self.fake_events_interval = Some(interval);
+        self.properties
+            .set_fake_events_interval(u32::try_from(interval.as_secs() / 60).unwrap_or(u32::MAX));
+        self
+    }
+
+    /// Enable or disable RDPSND (audio) playback.
+    #[cfg(feature = "sound")]
+    #[must_use]
+    pub fn with_sound(mut self, enabled: bool) -> Self {
+        self.channels.sound = enabled;
+        self.properties.set_audio_mode(if enabled {
+            ironrdp_cfg::AudioMode::RedirectToClient
+        } else {
+            ironrdp_cfg::AudioMode::Disabled
+        });
+        self
+    }
+
+    /// Set the CLIPRDR (clipboard) redirection mode.
+    #[cfg(feature = "clipboard")]
+    #[must_use]
+    pub fn with_clipboard(mut self, mode: ClipboardType) -> Self {
+        self.channels.clipboard = mode;
+        self.properties
+            .set_redirect_clipboard(matches!(mode, ClipboardType::Enable));
+        self
+    }
+
+    /// Enable or disable RDPDR (device redirection).
+    #[cfg(feature = "rdpdr")]
+    #[must_use]
+    pub fn with_rdpdr(mut self, enabled: bool) -> Self {
+        self.channels.rdpdr.enabled = enabled;
+        self.properties.set_enable_rdpdr(enabled);
+        self
+    }
+
+    /// Enable or disable smart-card redirection within RDPDR.
+    #[cfg(feature = "smartcard")]
+    #[must_use]
+    pub fn with_smartcard(mut self, enabled: bool) -> Self {
+        self.channels.rdpdr.smartcard = enabled;
+        self.properties.set_enable_smartcard(enabled);
+        self
+    }
+
+    /// Enable or disable QOI bitmap codec at runtime.
+    #[cfg(feature = "qoi")]
+    #[must_use]
+    pub fn with_qoi(mut self, enabled: bool) -> Self {
+        self.channels.qoi = enabled;
+        self.properties.set_enable_qoi(enabled);
+        self
+    }
+
+    /// Enable or disable QOIZ bitmap codec at runtime.
+    #[cfg(feature = "qoiz")]
+    #[must_use]
+    pub fn with_qoiz(mut self, enabled: bool) -> Self {
+        self.channels.qoiz = enabled;
+        self.properties.set_enable_qoiz(enabled);
+        self
+    }
+
+    // TODO: It can be useful to have a method for enabling or disabling all the extra channels at once.
+    // Example: in tests, disable all + enable only the required channel.
+
+    /// Add a DVC pipe proxy channel.
+    #[cfg(feature = "dvc-pipe-proxy")]
+    #[must_use]
+    pub fn with_dvc_pipe_proxy(mut self, info: DvcProxyInfo) -> Self {
+        self.dvc_pipe_proxies.push(info);
+        self.properties
+            .set_dvc_pipe_proxies(self.dvc_pipe_proxies.iter().map(|p| ironrdp_cfg::DvcPipeProxy {
+                channel_name: p.channel_name.clone(),
+                pipe_name: p.pipe_name.clone(),
+            }));
+        self
+    }
+
+    /// Add a DVC COM plugin DLL path (Windows only).
+    #[cfg(all(windows, feature = "dvc-com-plugin"))]
+    #[must_use]
+    pub fn with_dvc_plugin(mut self, path: impl Into<PathBuf>) -> Self {
+        self.dvc_plugins.push(path.into());
+        self.properties
+            .set_dvc_plugins(self.dvc_plugins.iter().map(PathBuf::as_path));
+        self
+    }
+
+    /// Register a factory for a user-defined static virtual channel.
+    ///
+    /// `factory` is called once per connection attempt with the shared (read-only) [`PropertySet`],
+    /// so the channel can parametrize itself from the standard frontend config. Return `None` to
+    /// disable the channel. Duplicate processor types follow `attach_static_channel` overwrite semantics.
+    #[must_use]
+    pub fn with_static_channel<P, F>(mut self, factory: F) -> Self
+    where
+        F: Fn(&PropertySet) -> Option<P> + Send + Sync + 'static,
+        P: ironrdp_svc::SvcClientProcessor + 'static,
+    {
+        let cb: StaticChannelFn = Arc::new(move |connector: &mut ironrdp_connector::ClientConnector, ps| {
+            if let Some(processor) = factory(ps) {
+                connector.attach_static_channel(processor);
+            }
+        });
+        self.extensions.static_channels.push(cb);
+        self
+    }
+
+    /// Register a factory for a user-defined dynamic virtual channel.
+    ///
+    /// `factory` is called once per connection attempt with the shared (read-only) [`PropertySet`],
+    /// so the channel can parametrize itself from the standard frontend config. Return `None` to
+    /// disable the channel. Duplicate channel names follow `DrdynvcClient` overwrite semantics.
+    #[must_use]
+    pub fn with_dvc<P, F>(mut self, factory: F) -> Self
+    where
+        F: Fn(&PropertySet) -> Option<P> + Send + Sync + 'static,
+        P: ironrdp_dvc::DvcProcessor + 'static,
+    {
+        let cb: DvcChannelFn = Arc::new(move |drdynvc, ps| {
+            if let Some(processor) = factory(ps) {
+                drdynvc.attach_dynamic_channel(processor);
+            }
+        });
+        self.extensions.dvc_channels.push(cb);
+        self
+    }
+
+    /// List the required fields that still need a value before [`build`](Self::build) can succeed.
+    ///
+    /// Gateway credentials are only required when a gateway transport is selected.
+    pub fn missing(&self) -> Vec<MissingField> {
+        let mut missing = Vec::new();
+        if self.destination.is_none() {
+            missing.push(MissingField::ServerAddress);
+        }
+        if self.username.is_none() {
+            missing.push(MissingField::Username);
+        }
+        if self.password.is_none() {
+            missing.push(MissingField::Password);
+        }
+        #[cfg(feature = "gateway")]
+        if matches!(self.transport, TransportKind::Gateway { .. }) {
+            if self.gateway_username.is_none() {
+                missing.push(MissingField::GatewayUsername);
+            }
+            if self.gateway_password.is_none() {
+                missing.push(MissingField::GatewayPassword);
+            }
+        }
+        if matches!(self.transport, TransportKind::RDCleanPath { .. }) && self.rdcleanpath_token.is_none() {
+            missing.push(MissingField::RDCleanPathToken);
+        }
+        if self.client_build.is_none() {
+            missing.push(MissingField::ClientBuild);
+        }
+        if self.client_dir.is_none() {
+            missing.push(MissingField::ClientDir);
+        }
+        if self.platform.is_none() {
+            missing.push(MissingField::Platform);
+        }
+        if self.client_name.is_none() {
+            missing.push(MissingField::ClientName);
+        }
+        missing
+    }
+
+    /// Build the [`Config`], filling optional settings with sensible defaults.
+    ///
+    /// Fails if any required field is unset; inspect [`missing`](Self::missing) beforehand to resolve them.
+    #[expect(
+        clippy::missing_panics_doc,
+        reason = "a panic here would be a bug (secrets are guaranteed present by missing()), not documented behavior"
+    )]
+    pub fn build(self) -> anyhow::Result<Config> {
+        use ironrdp_pdu::rdp::capability_sets::client_codecs_capabilities;
+        use ironrdp_pdu::rdp::client_info::{PerformanceFlags, TimezoneInfo};
+
+        let missing = self.missing();
+        if !missing.is_empty() {
+            anyhow::bail!(
+                "missing required configuration: {}",
+                missing
+                    .iter()
+                    .map(MissingField::to_string)
+                    .collect::<Vec<_>>()
+                    .join(", ")
+            );
+        }
+
+        let codecs: Vec<&str> = self.codecs.iter().map(String::as_str).collect();
+        let codecs = client_codecs_capabilities(&codecs).map_err(|help| anyhow::anyhow!("{help}"))?;
+        let color_depth = self.color_depth.unwrap_or(32);
+        if color_depth != 16 && color_depth != 32 {
+            anyhow::bail!("invalid color depth: only 16 and 32 bit color depths are supported");
+        }
+        let bitmap = ironrdp_connector::BitmapConfig {
+            color_depth,
+            lossy_compression: true,
+            codecs,
+        };
+
+        // Resolve the granular transport selection into the bundled form, folding in the separately
+        // tracked secrets (gateway credentials, RDCleanPath token).
+        #[expect(
+            clippy::unwrap_used,
+            reason = "the transport secrets are guaranteed present by the missing() check above"
+        )]
+        let transport = match self.transport {
+            TransportKind::Direct => Transport::Direct,
+            #[cfg(feature = "gateway")]
+            TransportKind::Gateway { endpoint } => Transport::Gateway(GatewayConfig {
+                endpoint,
+                username: self.gateway_username.unwrap(),
+                password: self.gateway_password.unwrap(),
+            }),
+            TransportKind::RDCleanPath { url } => Transport::RDCleanPath(RDCleanPathConfig {
+                url,
+                auth_token: self.rdcleanpath_token.unwrap(),
+            }),
+        };
+
+        let client_name = self.client_name.unwrap_or_default();
+        let kerberos_config = self
+            .kerberos_config
+            .or_else(|| kerberos_config_from_properties(&self.properties, &client_name));
+
+        // Bulk compression is enabled by default. We default to MPPC 64K (RDP5) rather than the
+        // richer XCRUSH (RDP6.1) because it is the most universally supported and lowest-state
+        // codec, and FastPath decompression is the only fully wired path.
+        // FIXME: bump the default to RDP6.1 (XCRUSH) once slow-path bulk decompression is wired
+        // (see ironrdp-session x224 path); until then a stateful codec risks silent corruption.
+        let compression_type = if self.compression_enabled.unwrap_or(true) {
+            Some(
+                self.compression_type
+                    .unwrap_or(ironrdp_pdu::rdp::client_info::CompressionType::K64),
+            )
+        } else {
+            None
+        };
+
+        let connector = ironrdp_connector::Config {
+            credentials: ironrdp_connector::Credentials::UsernamePassword {
+                username: self.username.unwrap_or_default(),
+                password: self.password.unwrap_or_default(),
+            },
+            domain: self.domain,
+            enable_tls: self.enable_tls.unwrap_or(true),
+            enable_credssp: self.enable_credssp.unwrap_or(true),
+            keyboard_type: self
+                .keyboard_type
+                .unwrap_or(ironrdp_pdu::gcc::KeyboardType::IbmEnhanced),
+            keyboard_subtype: self.keyboard_subtype.unwrap_or(0),
+            keyboard_layout: 0,
+            keyboard_functional_keys_count: self.keyboard_functional_keys_count.unwrap_or(12),
+            ime_file_name: self.ime_file_name.unwrap_or_default(),
+            dig_product_id: self.dig_product_id.unwrap_or_default(),
+            desktop_size: ironrdp_connector::DesktopSize {
+                width: self.desktop_width.unwrap_or(DEFAULT_WIDTH),
+                height: self.desktop_height.unwrap_or(DEFAULT_HEIGHT),
+            },
+            desktop_scale_factor: self.desktop_scale_factor.unwrap_or(0),
+            bitmap: Some(bitmap),
+            client_build: self.client_build.unwrap_or_default(),
+            client_name,
+            client_dir: self.client_dir.unwrap_or_default(),
+            platform: self
+                .platform
+                .unwrap_or(ironrdp_pdu::rdp::capability_sets::MajorPlatformType::UNSPECIFIED),
+            hardware_id: None,
+            license_cache: None,
+            enable_server_pointer: self.enable_server_pointer.unwrap_or(true),
+            autologon: self.autologon.unwrap_or(false),
+            enable_audio_playback: self.enable_audio_playback.unwrap_or(true),
+            request_data: None,
+            pointer_software_rendering: self.pointer_software_rendering.unwrap_or(false),
+            multitransport_flags: None,
+            compression_type,
+            performance_flags: PerformanceFlags::default(),
+            timezone_info: TimezoneInfo::default(),
+            alternate_shell: self.alternate_shell.unwrap_or_default(),
+            work_dir: self.work_dir.unwrap_or_default(),
+        };
+
+        // To avoid easily leaking secrets, strip any known secret property before returning the resulting Config.
+        let mut properties = self.properties;
+        let detected_secrets = properties
+            .iter()
+            .filter(|(key, _)| ironrdp_cfg::is_secret_key(key))
+            .map(|(key, _)| key.clone().into_owned())
+            .collect::<Vec<_>>();
+        detected_secrets.into_iter().for_each(|key| {
+            properties.remove(&key);
+        });
+
+        Ok(Config {
+            connector,
+            destination: self.destination.context("server address is required")?,
+            transport,
+            kerberos_config,
+            fake_events_interval: self.fake_events_interval,
+            channels: self.channels,
+            monitor_layout: None,
+            #[cfg(feature = "dvc-pipe-proxy")]
+            dvc_pipe_proxies: self.dvc_pipe_proxies,
+            #[cfg(all(windows, feature = "dvc-com-plugin"))]
+            dvc_plugins: self.dvc_plugins,
+            properties,
+            extensions: self.extensions,
+        })
+    }
+
+    /// Build a [`Config`] from a `.rdp` [`PropertySet`], leaving anything not expressible as a
+    /// property unset (query [`missing`](Self::missing) to resolve the rest).
+    pub fn from_property_set(ps: &PropertySet) -> anyhow::Result<Self> {
+        ConfigBuilder::new().with_property_set(ps)
+    }
+
+    /// Overlay a `.rdp` [`PropertySet`] on top of the current builder.
+    ///
+    /// Only properties present in `ps` set values, so this can be layered:
+    /// `explicit setters → PropertySet → more setters`, last writer wins. Resolution rules:
+    /// `full address` beats `alternate full address`, an embedded port beats `server port`, and
+    /// transport precedence is RDCleanPath > Gateway > Direct.
+    pub fn with_property_set(mut self, ps: &PropertySet) -> anyhow::Result<Self> {
+        #[cfg(feature = "gateway")]
+        use ironrdp_cfg::GatewayUsageMethod;
+        use ironrdp_cfg::{AudioMode, TargetHost};
+
+        self.properties.merge(ps);
+
+        let target = ps.full_address().context("invalid 'full address'")?.or(ps
+            .alternate_full_address()
+            .context("invalid 'alternate full address'")?);
+        if let Some(target) = target {
+            let port = target
+                .port
+                .or(ps.server_port().context("invalid 'server port'")?)
+                .unwrap_or(RDP_DEFAULT_PORT);
+            let name = match target.host {
+                TargetHost::Ip(ip) => ip.to_string(),
+                TargetHost::Domain(host) => host,
+            };
+            self.destination = Some(Destination::from_parts(name, port));
+        }
+
+        if let Some(username) = ps.username() {
+            self.username = Some(username.to_owned());
+        }
+        if let Some(password) = ps.clear_text_password() {
+            self.password = Some(password.to_owned());
+        }
+        if let Some(domain) = ps.domain() {
+            self.domain = Some(domain.to_owned());
+        }
+        if let Some(enable_credssp) = ps.enable_credssp_support() {
+            self.enable_credssp = Some(enable_credssp);
+        }
+        if let Some(enable_tls) = ps.enable_tls() {
+            self.enable_tls = Some(enable_tls);
+        }
+        if let Some(server_pointer) = ps.server_pointer() {
+            self.enable_server_pointer = Some(server_pointer);
+        }
+        if let Some(autologon) = ps.autologon() {
+            self.autologon = Some(autologon);
+        }
+        if let Some(scale) = ps.desktop_scale_factor().ok().flatten() {
+            self.desktop_scale_factor = Some(scale);
+        }
+        if let Some(width) = ps.desktop_width().ok().flatten() {
+            self.desktop_width = Some(width);
+        }
+        if let Some(height) = ps.desktop_height().ok().flatten() {
+            self.desktop_height = Some(height);
+        }
+        if let Some(shell) = ps.alternate_shell() {
+            self.alternate_shell = Some(shell.to_owned());
+        }
+        if let Some(dir) = ps.shell_working_directory() {
+            self.work_dir = Some(dir.to_owned());
+        }
+        if let Some(minutes) = ps.fake_events_interval() {
+            self.fake_events_interval = Some(Duration::from_secs(u64::from(minutes) * 60));
+        }
+        if let Some(level) = ps.compression_level() {
+            self.compression_type = Some(compression_type_from_level(level)?);
+        }
+        if let Some(enabled) = ps.compression() {
+            self.compression_enabled = Some(enabled);
+        }
+        if let Some(depth) = ps.color_depth() {
+            self.color_depth = Some(depth);
+        }
+        match ps.audio_mode() {
+            Ok(Some(AudioMode::PlayOnServer | AudioMode::Disabled)) => self.enable_audio_playback = Some(false),
+            Ok(Some(AudioMode::RedirectToClient)) => self.enable_audio_playback = Some(true),
+            _ => {}
+        }
+
+        // Transport: RDCleanPath > Gateway > Direct.
+        if let Some((url, token)) = ps.rdcleanpath_url().zip(ps.rdcleanpath_token()) {
+            let url = Url::parse(url).context("invalid 'ironrdp_rdcleanpathurl'")?;
+            self.transport = TransportKind::RDCleanPath { url };
+            self.rdcleanpath_token = Some(token.to_owned());
+        } else {
+            #[cfg(feature = "gateway")]
+            {
+                let gateway_usage = ps
+                    .gateway_usage_method()
+                    .context("invalid Gateway usage method")?
+                    .unwrap_or_default();
+
+                let gateway_hostname = ps.gateway_hostname();
+
+                let select_gateway_transport = match gateway_usage {
+                    // Explicit gateway use.
+                    GatewayUsageMethod::UseAlways => true,
+
+                    // Approximation of Windows "try direct, then gateway" behavior.
+                    GatewayUsageMethod::Detect => gateway_hostname.is_some(),
+
+                    // IronRDP does not currently resolve MSTSC/client/GPO default gateway policy.
+                    GatewayUsageMethod::UseDefaultSettings => false,
+
+                    // Explicit no-gateway modes.
+                    GatewayUsageMethod::Direct | GatewayUsageMethod::DirectBypassLocal => false,
+                };
+
+                if select_gateway_transport {
+                    let endpoint = gateway_hostname.context("missing Gateway hostname")?;
+
+                    self.transport = TransportKind::Gateway {
+                        endpoint: endpoint.to_owned(),
+                    };
+
+                    if let Some(user) = ps.gateway_username() {
+                        self.gateway_username = Some(user.to_owned());
+                    }
+
+                    if let Some(pass) = ps.gateway_password() {
+                        self.gateway_password = Some(pass.to_owned());
+                    }
+                }
+            }
+        }
+
+        if let Some(redirect) = ps.redirect_clipboard() {
+            #[cfg(feature = "clipboard")]
+            {
+                self.channels.clipboard = if redirect {
+                    ClipboardType::Enable
+                } else {
+                    ClipboardType::Disable
+                };
+            }
+            let _ = redirect;
+        }
+        #[cfg(feature = "sound")]
+        if matches!(ps.audio_mode(), Ok(Some(AudioMode::Disabled))) {
+            self.channels.sound = false;
+        }
+        #[cfg(feature = "rdpdr")]
+        if let Some(enabled) = ps.enable_rdpdr() {
+            self.channels.rdpdr.enabled = enabled;
+        }
+        #[cfg(feature = "smartcard")]
+        if let Some(enabled) = ps.enable_smartcard() {
+            self.channels.rdpdr.smartcard = enabled;
+        }
+        #[cfg(feature = "qoi")]
+        if let Some(enabled) = ps.enable_qoi() {
+            self.channels.qoi = enabled;
+        }
+        #[cfg(feature = "qoiz")]
+        if let Some(enabled) = ps.enable_qoiz() {
+            self.channels.qoiz = enabled;
+        }
+
+        #[cfg(feature = "dvc-pipe-proxy")]
+        for (idx, proxy) in ps.dvc_pipe_proxies().enumerate() {
+            let proxy = proxy.with_context(|| format!("invalid DVC pipe proxy spec at idx {idx}"))?;
+            self.dvc_pipe_proxies.push(DvcProxyInfo {
+                channel_name: proxy.channel_name,
+                pipe_name: proxy.pipe_name,
+            });
+        }
+
+        #[cfg(all(windows, feature = "dvc-com-plugin"))]
+        self.dvc_plugins.extend(ps.dvc_plugins());
+
+        Ok(self)
+    }
+}
+
+/// Map a bulk-compression level (0–3) to the corresponding [`CompressionType`].
+///
+/// 0 = MPPC 8K (RDP4), 1 = MPPC 64K (RDP5), 2 = NCRUSH (RDP6), 3 = XCRUSH (RDP6.1).
+///
+/// [`CompressionType`]: ironrdp_pdu::rdp::client_info::CompressionType
+fn compression_type_from_level(level: u32) -> anyhow::Result<ironrdp_pdu::rdp::client_info::CompressionType> {
+    use ironrdp_pdu::rdp::client_info::CompressionType;
+
+    match level {
+        0 => Ok(CompressionType::K8),
+        1 => Ok(CompressionType::K64),
+        2 => Ok(CompressionType::Rdp6),
+        3 => Ok(CompressionType::Rdp61),
+        _ => anyhow::bail!("invalid compression level: valid values are 0, 1, 2, 3"),
+    }
+}
+
+fn level_from_compression_type(ty: ironrdp_pdu::rdp::client_info::CompressionType) -> u32 {
+    use ironrdp_pdu::rdp::client_info::CompressionType;
+
+    match ty {
+        CompressionType::K8 => 0,
+        CompressionType::K64 => 1,
+        CompressionType::Rdp6 => 2,
+        CompressionType::Rdp61 => 3,
+    }
+}
+
+/// Derive a Kerberos/KDC-proxy config from `kdcproxyurl`/`kdcproxyname`, using `client_name` as the
+/// SPN hostname. Returns `None` if no KDC proxy is configured or the URL is invalid.
+fn kerberos_config_from_properties(
+    ps: &PropertySet,
+    client_name: &str,
+) -> Option<ironrdp_connector::credssp::KerberosConfig> {
+    use ironrdp_cfg::PropertySetExt as _;
+
+    let kdc_proxy_url = ps.kdc_proxy_url().map(str::to_owned).or_else(|| {
+        ps.kdc_proxy_name().map(|name| {
+            if name.starts_with("http://") || name.starts_with("https://") {
+                name.to_owned()
+            } else {
+                format!("https://{name}/KdcProxy")
+            }
+        })
+    })?;
+
+    Url::parse(&kdc_proxy_url)
+        .ok()
+        .map(|url| ironrdp_connector::credssp::KerberosConfig {
+            kdc_proxy_url: Some(url),
+            hostname: client_name.to_owned(),
+        })
+}
+
+#[cfg(test)]
+mod remotedesk_monitor_tests {
+    use super::*;
+
+    fn monitor(left: i32, width: u32, primary: bool) -> MonitorLayoutEntry {
+        MonitorLayoutEntry {
+            left,
+            top: 0,
+            width,
+            height: 1_080,
+            scale_factor: 100,
+            is_primary: primary,
+        }
+    }
+
+    #[test]
+    fn monitor_layout_requires_one_primary_and_returns_combined_size() {
+        assert_eq!(
+            validate_monitor_layout(&[monitor(0, 1_920, true), monitor(-2_560, 2_560, false)]).unwrap(),
+            (4_480, 1_080)
+        );
+        assert!(validate_monitor_layout(&[monitor(0, 1_920, false), monitor(1_920, 1_920, false)]).is_err());
+        assert!(validate_monitor_layout(&[monitor(0, 1_921, true), monitor(1_920, 1_920, false)]).is_err());
+    }
+}
diff --git a/vendor/ironrdp-client/src/lib.rs b/vendor/ironrdp-client/src/lib.rs
new file mode 100644
index 0000000..a567b8b
--- /dev/null
+++ b/vendor/ironrdp-client/src/lib.rs
@@ -0,0 +1,16 @@
+#![cfg_attr(doc, doc = include_str!("../README.md"))]
+#![doc(html_logo_url = "https://cdnweb.devolutions.net/images/projects/devolutions/logos/devolutions-icon-shadow.svg")]
+// No need to be as strict as in production libraries
+#![allow(clippy::arithmetic_side_effects)]
+#![allow(clippy::cast_lossless)]
+#![allow(clippy::cast_possible_truncation)]
+#![allow(clippy::cast_possible_wrap)]
+#![allow(clippy::cast_sign_loss)]
+
+pub mod config;
+pub mod rdp;
+
+#[cfg(all(windows, feature = "clipboard"))]
+mod clipboard;
+
+mod ws;
diff --git a/vendor/ironrdp-client/src/rdp.rs b/vendor/ironrdp-client/src/rdp.rs
new file mode 100644
index 0000000..53bed1c
--- /dev/null
+++ b/vendor/ironrdp-client/src/rdp.rs
@@ -0,0 +1,1362 @@
+use core::net::SocketAddr;
+use core::num::NonZeroU16;
+use core::time::Duration;
+use std::sync::Arc;
+use std::time::Instant;
+
+use ironrdp_connector::connection_activation::ConnectionActivationState;
+use ironrdp_connector::{ConnectionResult, ConnectorResult};
+use ironrdp_core::WriteBuf;
+use ironrdp_displaycontrol::client::DisplayControlClient;
+use ironrdp_displaycontrol::pdu::{
+    DeviceScaleFactor, DisplayControlCapabilities, DisplayControlMonitorLayout, DisplayControlPdu,
+    MonitorLayoutEntry, MonitorOrientation,
+};
+#[cfg(all(windows, feature = "dvc-com-plugin"))]
+use ironrdp_dvc::DvcProcessor as _;
+use ironrdp_echo::client::EchoClient;
+use ironrdp_graphics::image_processing::PixelFormat;
+use ironrdp_graphics::pointer::DecodedPointer;
+use ironrdp_pdu::input::MousePdu;
+use ironrdp_pdu::input::fast_path::FastPathInputEvent;
+use ironrdp_pdu::input::mouse::PointerFlags;
+#[cfg(any(feature = "dvc-pipe-proxy", all(windows, feature = "dvc-com-plugin")))]
+use ironrdp_pdu::pdu_other_err;
+use ironrdp_session::image::DecodedImage;
+use ironrdp_session::{ActiveStageBuilder, ActiveStageOutput, GracefulDisconnectReason, SessionResult, fast_path};
+use ironrdp_svc::SvcMessage;
+use ironrdp_tokio::reqwest::ReqwestNetworkClient;
+use ironrdp_tokio::{FramedWrite, single_sequence_step_read, split_tokio_framed};
+use smallvec::SmallVec;
+use tokio::io::{AsyncRead, AsyncWrite};
+use tokio::net::TcpStream;
+use tokio::sync::mpsc;
+#[cfg(any(feature = "clipboard", all(windows, feature = "dvc-com-plugin")))]
+use tracing::error;
+#[cfg(feature = "clipboard")]
+use tracing::warn;
+use tracing::{debug, info, trace};
+
+#[cfg(feature = "clipboard")]
+use crate::config::ClipboardType;
+#[cfg(feature = "clipboard")]
+use ironrdp_cliprdr::backend::{ClipboardMessage, CliprdrBackendFactory};
+#[cfg(all(windows, feature = "dvc-com-plugin"))]
+use ironrdp_dvc_com_plugin::load_dvc_plugin;
+#[cfg(feature = "dvc-pipe-proxy")]
+use ironrdp_dvc_pipe_proxy::DvcNamedPipeProxy;
+#[cfg(feature = "sound")]
+use ironrdp_rdpsnd_native::cpal;
+
+use crate::config::{Config, MonitorLayoutEntry as ConfigMonitorLayoutEntry, RDCleanPathConfig, Transport};
+
+// ── Public event types ────────────────────────────────────────────────────────
+
+#[derive(Debug)]
+pub enum RdpOutputEvent {
+    Image {
+        buffer: Vec<u32>,
+        width: NonZeroU16,
+        height: NonZeroU16,
+        dirty_region: DirtyRegion,
+        decode_time: Option<Duration>,
+    },
+    ConnectionFailure(ironrdp_connector::ConnectorError),
+    PointerDefault,
+    PointerHidden,
+    PointerPosition {
+        x: u16,
+        y: u16,
+    },
+    PointerBitmap(Arc<DecodedPointer>),
+    NetworkMetrics {
+        base_rtt_ms: Option<u32>,
+        average_rtt_ms: u32,
+        bandwidth_kbps: Option<u32>,
+    },
+    ResizeSubmitted {
+        generation: u64,
+        width: u16,
+        height: u16,
+    },
+    ResizeReconnectRequired {
+        generation: u64,
+        width: u16,
+        height: u16,
+    },
+    ResizeReconnectStarted {
+        generation: u64,
+        width: u16,
+        height: u16,
+    },
+    Terminated(SessionResult<GracefulDisconnectReason>),
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub struct DirtyRegion {
+    pub left: u16,
+    pub top: u16,
+    pub right: u16,
+    pub bottom: u16,
+}
+
+impl DirtyRegion {
+    fn from_graphics_update(
+        region: &ironrdp_pdu::geometry::InclusiveRectangle,
+        width: NonZeroU16,
+        height: NonZeroU16,
+    ) -> Self {
+        let max_right = width.get() - 1;
+        let max_bottom = height.get() - 1;
+        if region.left > region.right
+            || region.top > region.bottom
+            || region.left > max_right
+            || region.top > max_bottom
+        {
+            return Self {
+                left: 0,
+                top: 0,
+                right: max_right,
+                bottom: max_bottom,
+            };
+        }
+        Self {
+            left: region.left,
+            top: region.top,
+            right: region.right.min(max_right),
+            bottom: region.bottom.min(max_bottom),
+        }
+    }
+}
+
+fn network_metrics_event(request: ironrdp_pdu::rdp::autodetect::AutoDetectRequest) -> Option<RdpOutputEvent> {
+    match request {
+        ironrdp_pdu::rdp::autodetect::AutoDetectRequest::NetworkCharacteristicsResult {
+            base_rtt_ms,
+            average_rtt_ms,
+            bandwidth_kbps,
+            ..
+        } => Some(RdpOutputEvent::NetworkMetrics {
+            base_rtt_ms,
+            average_rtt_ms,
+            bandwidth_kbps,
+        }),
+        _ => None,
+    }
+}
+
+fn image_output_event(
+    image: &DecodedImage,
+    region: &ironrdp_pdu::geometry::InclusiveRectangle,
+    decode_started: Option<Instant>,
+) -> SessionResult<RdpOutputEvent> {
+    let width = NonZeroU16::new(image.width())
+        .ok_or_else(|| ironrdp_session::general_err!("width is zero"))?;
+    let height = NonZeroU16::new(image.height())
+        .ok_or_else(|| ironrdp_session::general_err!("height is zero"))?;
+    let dirty_region = DirtyRegion::from_graphics_update(region, width, height);
+    let buffer = image_region_pixels(image, dirty_region)?;
+    Ok(RdpOutputEvent::Image {
+        buffer,
+        width,
+        height,
+        dirty_region,
+        decode_time: decode_started.map(|started| started.elapsed()),
+    })
+}
+
+fn image_region_pixels(image: &DecodedImage, region: DirtyRegion) -> SessionResult<Vec<u32>> {
+    let frame_width = usize::from(image.width());
+    let region_width = usize::from(region.right - region.left + 1);
+    let region_height = usize::from(region.bottom - region.top + 1);
+    let pixel_count = region_width
+        .checked_mul(region_height)
+        .ok_or_else(|| ironrdp_session::general_err!("dirty region dimensions overflow"))?;
+    let mut output = Vec::with_capacity(pixel_count);
+    for row in usize::from(region.top)..=usize::from(region.bottom) {
+        let pixel_start = row
+            .checked_mul(frame_width)
+            .and_then(|offset| offset.checked_add(usize::from(region.left)))
+            .ok_or_else(|| ironrdp_session::general_err!("dirty region row offset overflow"))?;
+        let byte_start = pixel_start
+            .checked_mul(4)
+            .ok_or_else(|| ironrdp_session::general_err!("dirty region byte offset overflow"))?;
+        let byte_len = region_width
+            .checked_mul(4)
+            .ok_or_else(|| ironrdp_session::general_err!("dirty region row length overflow"))?;
+        let byte_end = byte_start
+            .checked_add(byte_len)
+            .ok_or_else(|| ironrdp_session::general_err!("dirty region byte range overflow"))?;
+        let row = image
+            .data()
+            .get(byte_start..byte_end)
+            .ok_or_else(|| ironrdp_session::general_err!("dirty region exceeds framebuffer"))?;
+        output.extend(row.chunks_exact(4).map(|pixel| {
+            let r = pixel[0];
+            let g = pixel[1];
+            let b = pixel[2];
+            u32::from_be_bytes([0, r, g, b])
+        }));
+    }
+    Ok(output)
+}
+
+fn display_control_client(layout: Option<Vec<ConfigMonitorLayoutEntry>>) -> DisplayControlClient {
+    DisplayControlClient::new(move |capabilities| monitor_layout_messages(layout.as_deref(), &capabilities))
+}
+
+fn monitor_layout_messages(
+    layout: Option<&[ConfigMonitorLayoutEntry]>,
+    capabilities: &DisplayControlCapabilities,
+) -> ironrdp_pdu::PduResult<Vec<ironrdp_dvc::DvcMessage>> {
+    let Some(layout) = layout else {
+        return Ok(Vec::new());
+    };
+    let area = layout.iter().try_fold(0_u64, |area, monitor| {
+        area.checked_add(u64::from(monitor.width) * u64::from(monitor.height))
+    });
+    if area.is_none_or(|area| area > capabilities.max_monitor_area()) {
+        return Err(ironrdp_pdu::pdu_other_err!(
+            "server Display Control capabilities cannot accept the requested monitor area"
+        ));
+    }
+
+    let entries = layout
+        .iter()
+        .map(|monitor| {
+            let entry = if monitor.is_primary {
+                MonitorLayoutEntry::new_primary(monitor.width, monitor.height)?
+            } else {
+                MonitorLayoutEntry::new_secondary(monitor.width, monitor.height)?
+            };
+            let orientation = if monitor.width > monitor.height {
+                MonitorOrientation::Landscape
+            } else {
+                MonitorOrientation::Portrait
+            };
+            entry
+                .with_orientation(orientation)
+                .with_position(monitor.left, monitor.top)?
+                .with_desktop_scale_factor(monitor.scale_factor)
+                .map(|entry| entry.with_device_scale_factor(DeviceScaleFactor::Scale100Percent))
+        })
+        .collect::<ironrdp_core::EncodeResult<Vec<_>>>()
+        .map_err(|error| ironrdp_pdu::encode_err!(error))?;
+    let pdu: DisplayControlPdu = DisplayControlMonitorLayout::new(&entries)
+        .map_err(|error| ironrdp_pdu::encode_err!(error))?
+        .into();
+    Ok(vec![Box::new(pdu)])
+}
+
+#[derive(Debug)]
+pub enum RdpInputEvent {
+    Resize {
+        generation: u64,
+        width: u16,
+        height: u16,
+        scale_factor: u32,
+        /// Physical display size in millimetres (width, height).
+        physical_size: Option<(u32, u32)>,
+    },
+    ResizeReconnect {
+        generation: u64,
+        width: u16,
+        height: u16,
+    },
+    FastPath(SmallVec<[FastPathInputEvent; 2]>),
+    Close,
+    #[cfg(feature = "clipboard")]
+    Clipboard(ClipboardMessage),
+    SendDvcMessages {
+        channel_id: u32,
+        messages: Vec<SvcMessage>,
+    },
+}
+
+// ── RdpClient ─────────────────────────────────────────────────────────────────
+
+pub struct RdpClient {
+    config: Config,
+    output_event_sender: mpsc::Sender<RdpOutputEvent>,
+    input_event_sender: mpsc::UnboundedSender<RdpInputEvent>,
+    input_event_receiver: mpsc::UnboundedReceiver<RdpInputEvent>,
+}
+
+impl RdpClient {
+    pub fn new(config: Config, output_event_sender: mpsc::Sender<RdpOutputEvent>) -> Self {
+        let (input_event_sender, input_event_receiver) = mpsc::unbounded_channel();
+        Self {
+            config,
+            output_event_sender,
+            input_event_sender,
+            input_event_receiver,
+        }
+    }
+
+    /// Return a clone of the input-event sender for injecting keyboard, mouse, and clipboard
+    /// events from the GUI thread.
+    pub fn input_sender(&self) -> mpsc::UnboundedSender<RdpInputEvent> {
+        self.input_event_sender.clone()
+    }
+
+    pub async fn run(mut self) {
+        // ── Clipboard initialisation (compile-time gated) ─────────────────────
+        //
+        // On Windows the WinClipboard object must outlive the entire connection loop, so we
+        // keep it alive via `_win_clipboard`.  On non-Windows a StubClipboard backend is used
+        // and its ownership can be released immediately after the factory is extracted.
+        #[cfg(all(windows, feature = "clipboard"))]
+        #[expect(
+            clippy::collection_is_never_read,
+            reason = "binding owns the Windows clipboard so it stays alive for the connection's lifetime"
+        )]
+        let _win_clipboard;
+
+        #[cfg(feature = "clipboard")]
+        let cliprdr_factory: Option<Box<dyn CliprdrBackendFactory + Send>>;
+
+        #[cfg(feature = "clipboard")]
+        {
+            match self.config.channels.clipboard {
+                ClipboardType::Disable => {
+                    cliprdr_factory = None;
+                    #[cfg(windows)]
+                    {
+                        _win_clipboard = None;
+                    }
+                }
+                ClipboardType::Stub => {
+                    use ironrdp_cliprdr_native::StubClipboard;
+                    let stub = StubClipboard::new();
+                    cliprdr_factory = Some(stub.backend_factory());
+                    #[cfg(windows)]
+                    {
+                        _win_clipboard = None;
+                    }
+                }
+                ClipboardType::Enable => {
+                    #[cfg(windows)]
+                    {
+                        use crate::clipboard::ClientClipboardMessageProxy;
+                        use ironrdp_cliprdr_native::WinClipboard;
+                        match WinClipboard::new(ClientClipboardMessageProxy::new(self.input_event_sender.clone())) {
+                            Ok(win_cb) => {
+                                cliprdr_factory = Some(win_cb.backend_factory());
+                                _win_clipboard = Some(win_cb);
+                            }
+                            Err(e) => {
+                                let _ = self
+                                    .output_event_sender
+                                    .send(RdpOutputEvent::ConnectionFailure(ironrdp_connector::custom_err!(
+                                        "Windows clipboard initialization",
+                                        e
+                                    )))
+                                    .await;
+                                return;
+                            }
+                        }
+                    }
+
+                    #[cfg(not(windows))]
+                    {
+                        use ironrdp_cliprdr_native::StubClipboard;
+                        let stub = StubClipboard::new();
+                        cliprdr_factory = Some(stub.backend_factory());
+                    }
+                }
+            }
+        }
+
+        // Resolve the per-connection cliprdr factory reference once.  `Option<&dyn …>` is `Copy`,
+        // so it can be threaded into every connect attempt across reconnects.
+        #[cfg(feature = "clipboard")]
+        let cliprdr_factory: CliprdrFactoryRef<'_> = cliprdr_factory.as_deref();
+        #[cfg(not(feature = "clipboard"))]
+        let cliprdr_factory: CliprdrFactoryRef<'_> = core::marker::PhantomData;
+
+        // ── Connection + session loop ─────────────────────────────────────────
+        loop {
+            let (connection_result, framed) = match &self.config.transport {
+                Transport::Direct => {
+                    match connect_direct(&self.config, &self.input_event_sender, cliprdr_factory).await {
+                        Ok(r) => r,
+                        Err(e) => {
+                            let _ = self
+                                .output_event_sender
+                                .send(RdpOutputEvent::ConnectionFailure(e))
+                                .await;
+                            break;
+                        }
+                    }
+                }
+
+                #[cfg(feature = "gateway")]
+                Transport::Gateway(gw) => {
+                    match connect_gateway(&self.config, gw, &self.input_event_sender, cliprdr_factory).await {
+                        Ok(r) => r,
+                        Err(e) => {
+                            let _ = self
+                                .output_event_sender
+                                .send(RdpOutputEvent::ConnectionFailure(e))
+                                .await;
+                            break;
+                        }
+                    }
+                }
+
+                Transport::RDCleanPath(rdcp) => {
+                    match connect_rdcleanpath_transport(&self.config, rdcp, &self.input_event_sender, cliprdr_factory)
+                        .await
+                    {
+                        Ok(r) => r,
+                        Err(e) => {
+                            let _ = self
+                                .output_event_sender
+                                .send(RdpOutputEvent::ConnectionFailure(e))
+                                .await;
+                            break;
+                        }
+                    }
+                }
+            };
+
+            match active_session(
+                framed,
+                connection_result,
+                &self.output_event_sender,
+                &mut self.input_event_receiver,
+                self.config.fake_events_interval,
+            )
+            .await
+            {
+                Ok(RdpControlFlow::ReconnectWithNewSize {
+                    generation,
+                    width,
+                    height,
+                }) => {
+                    self.config.connector.desktop_size.width = width;
+                    self.config.connector.desktop_size.height = height;
+                    let _ = self
+                        .output_event_sender
+                        .send(RdpOutputEvent::ResizeReconnectStarted {
+                            generation,
+                            width,
+                            height,
+                        })
+                        .await;
+                }
+                Ok(RdpControlFlow::TerminatedGracefully(reason)) => {
+                    let _ = self
+                        .output_event_sender
+                        .send(RdpOutputEvent::Terminated(Ok(reason)))
+                        .await;
+                    break;
+                }
+                Err(e) => {
+                    let _ = self.output_event_sender.send(RdpOutputEvent::Terminated(Err(e))).await;
+                    break;
+                }
+            }
+        }
+    }
+}
+
+// ── Connector builder ─────────────────────────────────────────────────────────
+
+/// Reference to the cliprdr backend factory threaded into the connect helpers.
+///
+/// Collapses to a zero-sized placeholder when the `clipboard` feature is disabled, so the
+/// connect-helper signatures don't need `#[cfg]` on this parameter.
+#[cfg(feature = "clipboard")]
+type CliprdrFactoryRef<'a> = Option<&'a (dyn CliprdrBackendFactory + Send)>;
+#[cfg(not(feature = "clipboard"))]
+type CliprdrFactoryRef<'a> = core::marker::PhantomData<&'a ()>;
+
+/// Build a fully wired [`ironrdp_connector::ClientConnector`] with all feature-gated channels attached.
+///
+/// This helper is used by all transport paths. The cliprdr backend is (re)built here, per
+/// connection, from `cliprdr_factory`.
+fn build_connector(
+    config: &Config,
+    client_addr: SocketAddr,
+    input_sender: &mpsc::UnboundedSender<RdpInputEvent>,
+    cliprdr_factory: CliprdrFactoryRef<'_>,
+) -> ironrdp_connector::ClientConnector {
+    // `input_sender` is only consumed by the optional DVC wirings below, and `cliprdr_factory`
+    // only by the optional CLIPRDR attachment; discard them explicitly when those are compiled out.
+    #[cfg(not(any(feature = "dvc-pipe-proxy", all(windows, feature = "dvc-com-plugin"))))]
+    let _ = input_sender;
+    #[cfg(not(feature = "clipboard"))]
+    let _ = cliprdr_factory;
+
+    let mut drdynvc = ironrdp_dvc::DrdynvcClient::new()
+        .with_dynamic_channel(display_control_client(config.monitor_layout.clone()))
+        .with_dynamic_channel(EchoClient::new());
+
+    // Attach DVC pipe proxies.
+    #[cfg(feature = "dvc-pipe-proxy")]
+    for proxy in &config.dvc_pipe_proxies {
+        let channel_name = proxy.channel_name.clone();
+        let pipe_name = proxy.pipe_name.clone();
+        trace!(%channel_name, %pipe_name, "Creating DVC pipe proxy");
+        let sender = input_sender.clone();
+        drdynvc = drdynvc.with_dynamic_channel(DvcNamedPipeProxy::new(
+            &channel_name,
+            &pipe_name,
+            move |channel_id, messages| {
+                sender
+                    .send(RdpInputEvent::SendDvcMessages { channel_id, messages })
+                    .map_err(|_| pdu_other_err!("send DVC messages to the event loop"))?;
+                Ok(())
+            },
+        ));
+    }
+
+    // Load DVC COM plugins (Windows + dvc-com-plugin feature).
+    #[cfg(all(windows, feature = "dvc-com-plugin"))]
+    {
+        for plugin_path in &config.dvc_plugins {
+            info!(dll = %plugin_path.display(), "Loading DVC COM plugin");
+            let sender_clone = input_sender.clone();
+            match load_dvc_plugin(plugin_path, move || {
+                let sender = sender_clone.clone();
+                Box::new(move |channel_id, messages| {
+                    sender
+                        .send(RdpInputEvent::SendDvcMessages { channel_id, messages })
+                        .map_err(|_| pdu_other_err!("send COM DVC messages to the event loop"))?;
+                    Ok(())
+                })
+            }) {
+                Ok(channels) => {
+                    for channel in channels {
+                        info!(channel_name = %channel.channel_name(), "Registered COM DVC channel");
+                        drdynvc = drdynvc.with_dynamic_channel(channel);
+                    }
+                }
+                Err(e) => {
+                    error!(dll = %plugin_path.display(), error = %e, "Failed to load DVC COM plugin");
+                }
+            }
+        }
+    }
+
+    // Attach user-defined DVC channels from the extension registry.
+    for attach_dvc in &config.extensions.dvc_channels {
+        attach_dvc(&mut drdynvc, &config.properties);
+    }
+
+    // Clone the connector config so we can apply runtime overrides before handing it to the
+    // connector.  We want to set `enable_audio_playback` consistently with `channels.sound`.
+    let mut connector_config = config.connector.clone();
+
+    // If sound is disabled at runtime (or the feature is off) ensure the connector doesn't
+    // advertise audio support, which would confuse the server.
+    #[cfg(not(feature = "sound"))]
+    {
+        connector_config.enable_audio_playback = false;
+    }
+    #[cfg(feature = "sound")]
+    if !config.channels.sound {
+        connector_config.enable_audio_playback = false;
+    }
+
+    // Honor the runtime QOI/QOIZ codec toggles. Both codecs are compiled in and advertised by
+    // default, but can be disabled at runtime; when disabled we drop them from the advertised
+    // bitmap codec list so the server won't negotiate them.
+    #[cfg(any(feature = "qoi", feature = "qoiz"))]
+    if let Some(bitmap) = connector_config.bitmap.as_mut() {
+        use ironrdp_pdu::rdp::capability_sets::CodecProperty;
+
+        bitmap.codecs.0.retain(|codec| match codec.property {
+            #[cfg(feature = "qoi")]
+            CodecProperty::Qoi => config.channels.qoi,
+            #[cfg(feature = "qoiz")]
+            CodecProperty::QoiZ => config.channels.qoiz,
+            _ => true,
+        });
+    }
+
+    let mut connector =
+        ironrdp_connector::ClientConnector::new(connector_config, client_addr).with_static_channel(drdynvc);
+
+    // Attach RDPSND (audio).
+    #[cfg(feature = "sound")]
+    if config.channels.sound {
+        connector = connector.with_static_channel(ironrdp_rdpsnd::client::Rdpsnd::new(Box::new(
+            cpal::RdpsndBackend::new(),
+        )));
+    }
+
+    // Attach RDPDR (device redirection).
+    #[cfg(feature = "rdpdr")]
+    if config.channels.rdpdr.enabled {
+        #[cfg_attr(
+            not(feature = "smartcard"),
+            expect(
+                unused_mut,
+                reason = "rdpdr_channel is only reassigned when the smartcard feature is enabled"
+            )
+        )]
+        let mut rdpdr_channel =
+            ironrdp_rdpdr::Rdpdr::new(Box::new(ironrdp_rdpdr::NoopRdpdrBackend), "IronRDP".to_owned());
+        #[cfg(feature = "smartcard")]
+        if config.channels.rdpdr.smartcard {
+            rdpdr_channel = rdpdr_channel.with_smartcard(0);
+        }
+        connector = connector.with_static_channel(rdpdr_channel);
+    }
+
+    // Attach CLIPRDR (clipboard redirection). The backend is built fresh per connection.
+    #[cfg(feature = "clipboard")]
+    if let Some(factory) = cliprdr_factory {
+        let backend = factory.build_cliprdr_backend();
+        connector.attach_static_channel(ironrdp_cliprdr::Cliprdr::new(backend));
+    }
+
+    // Attach user-defined static channels from the extension registry.
+    for attach_sc in &config.extensions.static_channels {
+        attach_sc(&mut connector, &config.properties);
+    }
+
+    connector
+}
+
+// ── Transport-specific connect helpers ────────────────────────────────────────
+
+trait AsyncReadWrite: AsyncRead + AsyncWrite {}
+impl<T> AsyncReadWrite for T where T: AsyncRead + AsyncWrite {}
+type UpgradedFramed = ironrdp_tokio::TokioFramed<Box<dyn AsyncReadWrite + Unpin + Send + Sync>>;
+
+/// Direct TCP → TLS connection (no gateway).
+async fn connect_direct(
+    config: &Config,
+    input_sender: &mpsc::UnboundedSender<RdpInputEvent>,
+    cliprdr_factory: CliprdrFactoryRef<'_>,
+) -> ConnectorResult<(ConnectionResult, UpgradedFramed)> {
+    let dest = config.destination.to_string();
+    let stream = TcpStream::connect(&dest)
+        .await
+        .map_err(|e| ironrdp_connector::custom_err!("TCP connect", e))?;
+    let client_addr = stream
+        .local_addr()
+        .map_err(|e| ironrdp_connector::custom_err!("get socket local address", e))?;
+    let framed = ironrdp_tokio::TokioFramed::new(stream);
+
+    let connector = build_connector(config, client_addr, input_sender, cliprdr_factory);
+
+    tls_handshake_and_finalize(framed, connector, config).await
+}
+
+/// RDS gateway TCP → gateway auth → TLS connection.
+#[cfg(feature = "gateway")]
+async fn connect_gateway(
+    config: &Config,
+    gw: &crate::config::GatewayConfig,
+    input_sender: &mpsc::UnboundedSender<RdpInputEvent>,
+    cliprdr_factory: CliprdrFactoryRef<'_>,
+) -> ConnectorResult<(ConnectionResult, UpgradedFramed)> {
+    use ironrdp_mstsgu::GwConnectTarget;
+
+    // Build the GwConnectTarget.  `server` is the RDP target derived from `config.destination`.
+    // TODO: preserve the destination port; ironrdp-mstsgu may currently hard-code 3389.
+    let gw_target = GwConnectTarget {
+        gw_endpoint: gw.endpoint.clone(),
+        gw_user: gw.username.clone(),
+        gw_pass: gw.password.clone(),
+        server: config.destination.name().to_owned(),
+    };
+
+    let (gw_stream, client_addr) = ironrdp_mstsgu::GwClient::connect(&gw_target, &config.connector.client_name)
+        .await
+        .map_err(|e| ironrdp_connector::custom_err!("GW connect", e))?;
+
+    let framed = ironrdp_tokio::TokioFramed::new(gw_stream);
+
+    let connector = build_connector(config, client_addr, input_sender, cliprdr_factory);
+
+    tls_handshake_and_finalize(framed, connector, config).await
+}
+
+/// RDCleanPath WebSocket → RDCleanPath handshake connection.
+async fn connect_rdcleanpath_transport(
+    config: &Config,
+    rdcp: &RDCleanPathConfig,
+    input_sender: &mpsc::UnboundedSender<RdpInputEvent>,
+    cliprdr_factory: CliprdrFactoryRef<'_>,
+) -> ConnectorResult<(ConnectionResult, UpgradedFramed)> {
+    let hostname = rdcp
+        .url
+        .host_str()
+        .ok_or_else(|| ironrdp_connector::general_err!("host missing from the URL"))?;
+    let port = rdcp.url.port_or_known_default().unwrap_or(443);
+
+    let socket = TcpStream::connect((hostname, port))
+        .await
+        .map_err(|e| ironrdp_connector::custom_err!("TCP connect", e))?;
+    socket
+        .set_nodelay(true)
+        .map_err(|e| ironrdp_connector::custom_err!("set TCP_NODELAY", e))?;
+    let client_addr = socket
+        .local_addr()
+        .map_err(|e| ironrdp_connector::custom_err!("get socket local address", e))?;
+
+    let (ws, _) = tokio_tungstenite::client_async_tls(rdcp.url.as_str(), socket)
+        .await
+        .map_err(|e| ironrdp_connector::custom_err!("WS connect", e))?;
+    let ws = crate::ws::websocket_compat(ws);
+    let mut framed = ironrdp_tokio::TokioFramed::new(ws);
+
+    let mut connector = build_connector(config, client_addr, input_sender, cliprdr_factory);
+
+    let destination = config.destination.to_string();
+    let (upgraded, server_public_key) =
+        rdcleanpath_handshake(&mut framed, &mut connector, destination, rdcp.auth_token.clone(), None).await?;
+
+    let connection_result = ironrdp_tokio::connect_finalize(
+        upgraded,
+        connector,
+        &mut framed,
+        &mut ReqwestNetworkClient::new(),
+        (&config.destination).into(),
+        server_public_key,
+        config.kerberos_config.clone(),
+    )
+    .await?;
+
+    let (ws, leftover_bytes) = framed.into_inner();
+    let erased_stream: Box<dyn AsyncReadWrite + Unpin + Send + Sync> = Box::new(ws);
+    let upgraded_framed = ironrdp_tokio::TokioFramed::new_with_leftover(erased_stream, leftover_bytes);
+
+    Ok((connection_result, upgraded_framed))
+}
+
+// ── Shared TLS handshake ──────────────────────────────────────────────────────
+
+async fn tls_handshake_and_finalize<S>(
+    mut framed: ironrdp_tokio::TokioFramed<S>,
+    mut connector: ironrdp_connector::ClientConnector,
+    config: &Config,
+) -> ConnectorResult<(ConnectionResult, UpgradedFramed)>
+where
+    S: AsyncRead + AsyncWrite + Unpin + Send + Sync + 'static,
+{
+    let should_upgrade = ironrdp_tokio::connect_begin(&mut framed, &mut connector).await?;
+
+    debug!("TLS upgrade");
+
+    let (initial_stream, leftover_bytes) = framed.into_inner();
+
+    let (tls_stream, tls_cert) = ironrdp_tls::upgrade(initial_stream, config.destination.name())
+        .await
+        .map_err(|e| ironrdp_connector::custom_err!("TLS upgrade", e))?;
+
+    let upgraded = ironrdp_tokio::mark_as_upgraded(should_upgrade, &mut connector);
+
+    let erased_stream: Box<dyn AsyncReadWrite + Unpin + Send + Sync> = Box::new(tls_stream);
+    let mut upgraded_framed = ironrdp_tokio::TokioFramed::new_with_leftover(erased_stream, leftover_bytes);
+
+    let server_public_key = ironrdp_tls::extract_tls_server_public_key(&tls_cert)
+        .ok_or_else(|| ironrdp_connector::general_err!("unable to extract tls server public key"))?
+        .to_owned();
+
+    let connection_result = ironrdp_tokio::connect_finalize(
+        upgraded,
+        connector,
+        &mut upgraded_framed,
+        &mut ReqwestNetworkClient::new(),
+        (&config.destination).into(),
+        server_public_key,
+        config.kerberos_config.clone(),
+    )
+    .await?;
+
+    Ok((connection_result, upgraded_framed))
+}
+
+// ── RDCleanPath handshake ─────────────────────────────────────────────────────
+
+async fn rdcleanpath_handshake<S>(
+    framed: &mut ironrdp_tokio::Framed<S>,
+    connector: &mut ironrdp_connector::ClientConnector,
+    destination: String,
+    proxy_auth_token: String,
+    pcb: Option<String>,
+) -> ConnectorResult<(ironrdp_tokio::Upgraded, Vec<u8>)>
+where
+    S: ironrdp_tokio::FramedRead + FramedWrite,
+{
+    use ironrdp_connector::Sequence as _;
+    use x509_cert::der::Decode as _;
+
+    #[derive(Clone, Copy, Debug)]
+    struct RDCleanPathHint;
+    const RDCLEANPATH_HINT: RDCleanPathHint = RDCleanPathHint;
+
+    impl ironrdp_pdu::PduHint for RDCleanPathHint {
+        fn find_size(&self, bytes: &[u8]) -> ironrdp_core::DecodeResult<Option<(bool, usize)>> {
+            match ironrdp_rdcleanpath::RDCleanPathPdu::detect(bytes) {
+                ironrdp_rdcleanpath::DetectionResult::Detected { total_length, .. } => Ok(Some((true, total_length))),
+                ironrdp_rdcleanpath::DetectionResult::NotEnoughBytes => Ok(None),
+                ironrdp_rdcleanpath::DetectionResult::Failed => {
+                    Err(ironrdp_core::other_err!("RDCleanPathHint", "detection failed"))
+                }
+            }
+        }
+    }
+
+    let mut buf = WriteBuf::new();
+    info!("Begin RDCleanPath connection procedure");
+
+    // Send X224 + RDCleanPath request.
+    {
+        let ironrdp_connector::ClientConnectorState::ConnectionInitiationSendRequest = connector.state else {
+            return Err(ironrdp_connector::general_err!(
+                "invalid connector state (send request)"
+            ));
+        };
+        debug_assert!(connector.next_pdu_hint().is_none());
+        let written = connector.step_no_input(&mut buf)?;
+        let x224_pdu_len = written.size().expect("written size");
+        debug_assert_eq!(x224_pdu_len, buf.filled_len());
+        let x224_pdu = buf.filled().to_vec();
+
+        let rdcleanpath_req =
+            ironrdp_rdcleanpath::RDCleanPathPdu::new_request(x224_pdu, destination, proxy_auth_token, pcb)
+                .map_err(|e| ironrdp_connector::custom_err!("new RDCleanPath request", e))?;
+        debug!(message = ?rdcleanpath_req, "Send RDCleanPath request");
+        let rdcleanpath_req = rdcleanpath_req
+            .to_der()
+            .map_err(|e| ironrdp_connector::custom_err!("RDCleanPath request encode", e))?;
+        framed
+            .write_all(&rdcleanpath_req)
+            .await
+            .map_err(|e| ironrdp_connector::custom_err!("couldn't write RDCleanPath request", e))?;
+    }
+
+    // Read RDCleanPath response.
+    {
+        let rdcleanpath_res = framed
+            .read_by_hint(&RDCLEANPATH_HINT)
+            .await
+            .map_err(|e| ironrdp_connector::custom_err!("read RDCleanPath response", e))?;
+        let rdcleanpath_res = ironrdp_rdcleanpath::RDCleanPathPdu::from_der(&rdcleanpath_res)
+            .map_err(|e| ironrdp_connector::custom_err!("RDCleanPath response decode", e))?;
+        debug!(message = ?rdcleanpath_res, "Received RDCleanPath PDU");
+
+        let (x224_connection_response, server_cert_chain) = match rdcleanpath_res
+            .into_enum()
+            .map_err(|e| ironrdp_connector::custom_err!("invalid RDCleanPath PDU", e))?
+        {
+            ironrdp_rdcleanpath::RDCleanPath::Request { .. } => {
+                return Err(ironrdp_connector::general_err!(
+                    "received unexpected RDCleanPath type (request)"
+                ));
+            }
+            ironrdp_rdcleanpath::RDCleanPath::Response {
+                x224_connection_response,
+                server_cert_chain,
+                server_addr: _,
+            } => (x224_connection_response, server_cert_chain),
+            ironrdp_rdcleanpath::RDCleanPath::GeneralErr(error) => {
+                return Err(ironrdp_connector::custom_err!("received RDCleanPath error", error));
+            }
+            ironrdp_rdcleanpath::RDCleanPath::NegotiationErr {
+                x224_connection_response,
+            } => {
+                if let Ok(x224_confirm) = ironrdp_core::decode::<
+                    ironrdp_pdu::x224::X224<ironrdp_pdu::nego::ConnectionConfirm>,
+                >(&x224_connection_response)
+                {
+                    if let ironrdp_pdu::nego::ConnectionConfirm::Failure { code } = x224_confirm.0 {
+                        let negotiation_failure = ironrdp_connector::NegotiationFailure::from(code);
+                        return Err(ironrdp_connector::ConnectorError::new(
+                            "RDP negotiation failed",
+                            ironrdp_connector::ConnectorErrorKind::Negotiation(negotiation_failure),
+                        ));
+                    }
+                }
+                return Err(ironrdp_connector::general_err!(
+                    "received RDCleanPath negotiation error"
+                ));
+            }
+        };
+
+        let ironrdp_connector::ClientConnectorState::ConnectionInitiationWaitConfirm { .. } = connector.state else {
+            return Err(ironrdp_connector::general_err!(
+                "invalid connector state (wait confirm)"
+            ));
+        };
+        debug_assert!(connector.next_pdu_hint().is_some());
+
+        buf.clear();
+        let written = connector.step(x224_connection_response.as_bytes(), &mut buf)?;
+        debug_assert!(written.is_nothing());
+
+        let server_cert = server_cert_chain
+            .into_iter()
+            .next()
+            .ok_or_else(|| ironrdp_connector::general_err!("server cert chain missing from rdcleanpath response"))?;
+
+        let cert = x509_cert::Certificate::from_der(server_cert.as_bytes())
+            .map_err(|e| ironrdp_connector::custom_err!("server cert decode", e))?;
+
+        let server_public_key = cert
+            .tbs_certificate
+            .subject_public_key_info
+            .subject_public_key
+            .as_bytes()
+            .ok_or_else(|| ironrdp_connector::general_err!("subject public key BIT STRING is not aligned"))?
+            .to_owned();
+
+        let should_upgrade = ironrdp_tokio::skip_connect_begin(connector);
+        let upgraded = ironrdp_tokio::mark_as_upgraded(should_upgrade, connector);
+
+        Ok((upgraded, server_public_key))
+    }
+}
+
+// ── Active session ────────────────────────────────────────────────────────────
+
+enum RdpControlFlow {
+    ReconnectWithNewSize {
+        generation: u64,
+        width: u16,
+        height: u16,
+    },
+    TerminatedGracefully(GracefulDisconnectReason),
+}
+
+async fn active_session(
+    framed: UpgradedFramed,
+    connection_result: ConnectionResult,
+    output_event_sender: &mpsc::Sender<RdpOutputEvent>,
+    input_event_receiver: &mut mpsc::UnboundedReceiver<RdpInputEvent>,
+    fake_events_interval: Option<Duration>,
+) -> SessionResult<RdpControlFlow> {
+    let (mut reader, mut writer) = split_tokio_framed(framed);
+    let desktop_size = connection_result.desktop_size;
+    let mut image = DecodedImage::new(PixelFormat::RgbA32, desktop_size.width, desktop_size.height);
+
+    // We retain the factory to drive the Deactivation-Reactivation Sequence locally.
+    let activation_factory = connection_result.activation_factory;
+
+    let mut active_stage = ActiveStageBuilder {
+        static_channels: connection_result.static_channels,
+        user_channel_id: connection_result.user_channel_id,
+        io_channel_id: connection_result.io_channel_id,
+        message_channel_id: connection_result.message_channel_id,
+        share_id: connection_result.share_id,
+        compression_type: connection_result.compression_type,
+        enable_server_pointer: connection_result.enable_server_pointer,
+        pointer_software_rendering: connection_result.pointer_software_rendering,
+    }
+    .build();
+
+    // Timer interval for driving clipboard lock timeouts.
+    let mut cleanup_interval = tokio::time::interval(Duration::from_secs(5));
+
+    // Anti-idle: track the time of the last real input and the last known mouse position so we can
+    // synthesize a no-op mouse move when the session has been idle for too long. Default to the
+    // middle of the screen so a synthetic move before any real input doesn't snap the pointer to a
+    // corner.
+    let mut last_input = tokio::time::Instant::now();
+    let mut last_mouse_pos = (desktop_size.width / 2, desktop_size.height / 2);
+    let mut fake_events_interval =
+        fake_events_interval.map(|interval| tokio::time::interval(core::cmp::max(interval, Duration::from_secs(1))));
+
+    let disconnect_reason = 'outer: loop {
+        let mut decode_started = None;
+        let outputs = tokio::select! {
+            frame = reader.read_pdu() => {
+                let (action, payload) = frame.map_err(|e| ironrdp_session::custom_err!("read frame", e))?;
+                trace!(?action, frame_length = payload.len(), "Frame received");
+                decode_started = Some(Instant::now());
+                active_stage.process(&mut image, action, &payload)?
+            }
+            input_event = input_event_receiver.recv() => {
+                let input_event = input_event.ok_or_else(|| ironrdp_session::general_err!("GUI is stopped"))?;
+
+                last_input = tokio::time::Instant::now();
+
+                match input_event {
+                    RdpInputEvent::Resize { generation, width, height, scale_factor, physical_size } => {
+                        trace!(generation, width, height, "Resize event");
+                        let width = u32::from(width);
+                        let height = u32::from(height);
+                        // TODO: Make adjust_display_size take and return width and height as u16.
+                        // From the function's doc comment, the width and height values must be less than or equal to 8192 pixels.
+                        // Therefore, we can remove unnecessary casts from u16 to u32 and back.
+                        let (width, height) = MonitorLayoutEntry::adjust_display_size(width, height);
+                        debug!(width, height, "Adjusted display size");
+                        let width = u16::try_from(width).expect("always in the range");
+                        let height = u16::try_from(height).expect("always in the range");
+                        if let Some(response_frame) = active_stage.encode_resize(u32::from(width), u32::from(height), Some(scale_factor), physical_size) {
+                            output_event_sender
+                                .send(RdpOutputEvent::ResizeSubmitted { generation, width, height })
+                                .await
+                                .map_err(|e| ironrdp_session::custom_err!("output_event_sender", e))?;
+                            vec![ActiveStageOutput::ResponseFrame(response_frame?)]
+                        } else {
+                            debug!(generation, width, height, "Resize requires a confirmed reconnect");
+                            output_event_sender
+                                .send(RdpOutputEvent::ResizeReconnectRequired { generation, width, height })
+                                .await
+                                .map_err(|e| ironrdp_session::custom_err!("output_event_sender", e))?;
+                            Vec::new()
+                        }
+                    }
+                    RdpInputEvent::ResizeReconnect { generation, width, height } => {
+                        debug!(generation, width, height, "Executing user-confirmed resize reconnect");
+                        return Ok(RdpControlFlow::ReconnectWithNewSize { generation, width, height })
+                    }
+                    RdpInputEvent::FastPath(events) => {
+                        trace!(?events);
+                        for event in &events {
+                            if let FastPathInputEvent::MouseEvent(mouse) = event {
+                                last_mouse_pos = (mouse.x_position, mouse.y_position);
+                            }
+                        }
+                        active_stage.process_fastpath_input(&mut image, &events)?
+                    }
+                    RdpInputEvent::Close => {
+                        active_stage.graceful_shutdown()?
+                    }
+                    #[cfg(feature = "clipboard")]
+                    RdpInputEvent::Clipboard(event) => {
+                        if let Some(cliprdr_client) = active_stage.get_svc_processor_mut::<ironrdp_cliprdr::CliprdrClient>() {
+                            if let Some(svc_messages) = match event {
+                                ClipboardMessage::SendInitiateCopy(formats) => {
+                                    Some(cliprdr_client.initiate_copy(&formats)
+                                        .map_err(|e| ironrdp_session::custom_err!("CLIPRDR", e))?)
+                                }
+                                ClipboardMessage::SendInitiateFileCopy(files) => {
+                                    Some(cliprdr_client.initiate_file_copy(files)
+                                        .map_err(|e| ironrdp_session::custom_err!("CLIPRDR", e))?)
+                                }
+                                ClipboardMessage::SendFormatData(response) => {
+                                    Some(cliprdr_client.submit_format_data(response)
+                                        .map_err(|e| ironrdp_session::custom_err!("CLIPRDR", e))?)
+                                }
+                                ClipboardMessage::SendInitiatePaste(format) => {
+                                    Some(cliprdr_client.initiate_paste(format)
+                                        .map_err(|e| ironrdp_session::custom_err!("CLIPRDR", e))?)
+                                }
+                                ClipboardMessage::SendFileContentsRequest(request) => {
+                                    Some(cliprdr_client.request_file_contents(request)
+                                        .map_err(|e| ironrdp_session::custom_err!("CLIPRDR", e))?)
+                                }
+                                ClipboardMessage::SendFileContentsResponse(response) => {
+                                    Some(cliprdr_client.submit_file_contents(response)
+                                        .map_err(|e| ironrdp_session::custom_err!("CLIPRDR", e))?)
+                                }
+                                ClipboardMessage::Error(e) => {
+                                    error!("Clipboard backend error: {}", e);
+                                    None
+                                }
+                            } {
+                                let frame = active_stage.process_svc_processor_messages(svc_messages)?;
+                                vec![ActiveStageOutput::ResponseFrame(frame)]
+                            } else {
+                                Vec::new()
+                            }
+                        } else {
+                            warn!("Clipboard event received, but Cliprdr is not available");
+                            Vec::new()
+                        }
+                    }
+                    RdpInputEvent::SendDvcMessages { channel_id, messages } => {
+                        trace!(channel_id, ?messages, "Send DVC messages");
+                        let frame = active_stage.encode_dvc_messages(messages)?;
+                        vec![ActiveStageOutput::ResponseFrame(frame)]
+                    }
+                }
+            }
+            _ = cleanup_interval.tick() => {
+                // Drive clipboard lock timeout cleanup.
+                #[cfg(feature = "clipboard")]
+                if let Some(cliprdr_client) = active_stage.get_svc_processor_mut::<ironrdp_cliprdr::CliprdrClient>() {
+                    match cliprdr_client.drive_timeouts() {
+                        Ok(svc_messages) => {
+                            let frame = active_stage.process_svc_processor_messages(svc_messages)?;
+                            if !frame.is_empty() {
+                                vec![ActiveStageOutput::ResponseFrame(frame)]
+                            } else {
+                                Vec::new()
+                            }
+                        }
+                        Err(e) => {
+                            warn!(error = %e, "Clipboard timeout cleanup failed");
+                            Vec::new()
+                        }
+                    }
+                } else {
+                    Vec::new()
+                }
+                #[cfg(not(feature = "clipboard"))]
+                Vec::new()
+            }
+            _ = async { match fake_events_interval.as_mut() {
+                Some(interval) => interval.tick().await,
+                None => core::future::pending().await,
+            }} => {
+                // Anti-idle: synthesize a no-op mouse move if the session has been idle for at least
+                // the configured interval, keeping the connection alive without user interaction.
+                if last_input.elapsed() >= fake_events_interval.as_ref().map_or(Duration::MAX, |i| i.period()) {
+                    last_input = tokio::time::Instant::now();
+                    let mut events = SmallVec::<[FastPathInputEvent; 2]>::new();
+                    events.push(FastPathInputEvent::MouseEvent(MousePdu {
+                        flags: PointerFlags::MOVE,
+                        number_of_wheel_rotation_units: 0,
+                        x_position: last_mouse_pos.0,
+                        y_position: last_mouse_pos.1,
+                    }));
+                    active_stage.process_fastpath_input(&mut image, &events)?
+                } else {
+                    Vec::new()
+                }
+            }
+        };
+
+        for out in outputs {
+            match out {
+                ActiveStageOutput::ResponseFrame(frame) => writer
+                    .write_all(&frame)
+                    .await
+                    .map_err(|e| ironrdp_session::custom_err!("write response", e))?,
+                ActiveStageOutput::GraphicsUpdate(region) => {
+                    output_event_sender
+                        .send(image_output_event(&image, &region, decode_started)?)
+                        .await
+                        .map_err(|e| ironrdp_session::custom_err!("output_event_sender", e))?;
+                }
+                ActiveStageOutput::PointerDefault => {
+                    output_event_sender
+                        .send(RdpOutputEvent::PointerDefault)
+                        .await
+                        .map_err(|e| ironrdp_session::custom_err!("output_event_sender", e))?;
+                }
+                ActiveStageOutput::PointerHidden => {
+                    output_event_sender
+                        .send(RdpOutputEvent::PointerHidden)
+                        .await
+                        .map_err(|e| ironrdp_session::custom_err!("output_event_sender", e))?;
+                }
+                ActiveStageOutput::PointerPosition { x, y } => {
+                    output_event_sender
+                        .send(RdpOutputEvent::PointerPosition { x, y })
+                        .await
+                        .map_err(|e| ironrdp_session::custom_err!("output_event_sender", e))?;
+                }
+                ActiveStageOutput::PointerBitmap(pointer) => {
+                    output_event_sender
+                        .send(RdpOutputEvent::PointerBitmap(pointer))
+                        .await
+                        .map_err(|e| ironrdp_session::custom_err!("output_event_sender", e))?;
+                }
+                ActiveStageOutput::DeactivateAll => {
+                    // Deactivation-Reactivation Sequence:
+                    // https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-rdpbcgr/dfc234ce-481a-4674-9a5d-2a7bafb14432
+                    debug!("Executing Deactivation-Reactivation Sequence");
+                    let mut connection_activation = activation_factory.create();
+                    let mut buf = WriteBuf::new();
+                    'activation_seq: loop {
+                        let written = single_sequence_step_read(&mut reader, &mut connection_activation, &mut buf)
+                            .await
+                            .map_err(|e| {
+                                ironrdp_session::custom_err!("read deactivation-reactivation sequence step", e)
+                            })?;
+                        if written.size().is_some() {
+                            writer.write_all(buf.filled()).await.map_err(|e| {
+                                ironrdp_session::custom_err!("write deactivation-reactivation sequence step", e)
+                            })?;
+                        }
+                        if let ConnectionActivationState::Finalized {
+                            desktop_size,
+                            share_id,
+                            enable_server_pointer,
+                            pointer_software_rendering,
+                        } = connection_activation.connection_activation_state()
+                        {
+                            debug!(?desktop_size, "Deactivation-Reactivation Sequence completed");
+                            image = DecodedImage::new(PixelFormat::RgbA32, desktop_size.width, desktop_size.height);
+                            active_stage.set_fastpath_processor(
+                                fast_path::ProcessorBuilder {
+                                    io_channel_id: connection_activation.io_channel_id(),
+                                    user_channel_id: connection_activation.user_channel_id(),
+                                    share_id,
+                                    enable_server_pointer,
+                                    pointer_software_rendering,
+                                    bulk_decompressor: None,
+                                }
+                                .build(),
+                            );
+                            active_stage.set_share_id(share_id);
+                            active_stage.set_enable_server_pointer(enable_server_pointer);
+                            break 'activation_seq;
+                        }
+                    }
+                }
+                ActiveStageOutput::MultitransportRequest(pdu) => {
+                    debug!(
+                        request_id = pdu.request_id,
+                        requested_protocol = ?pdu.requested_protocol,
+                        "Multitransport request received (UDP transport not implemented)"
+                    );
+                }
+                ActiveStageOutput::AutoDetect(request) => {
+                    if let Some(event) = network_metrics_event(request) {
+                        output_event_sender
+                            .send(event)
+                            .await
+                            .map_err(|e| ironrdp_session::custom_err!("output_event_sender", e))?;
+                    } else {
+                        debug!("Unhandled auto-detect result");
+                    }
+                }
+                ActiveStageOutput::Terminate(reason) => break 'outer reason,
+            }
+        }
+    };
+
+    Ok(RdpControlFlow::TerminatedGracefully(disconnect_reason))
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn network_characteristics_are_exposed_as_output_metrics() {
+        let event = network_metrics_event(
+            ironrdp_pdu::rdp::autodetect::AutoDetectRequest::NetworkCharacteristicsResult {
+                sequence_number: 7,
+                request_type: ironrdp_pdu::rdp::autodetect::NETCHAR_RESULT_ALL,
+                base_rtt_ms: Some(12),
+                average_rtt_ms: 18,
+                bandwidth_kbps: Some(50_000),
+            },
+        )
+        .expect("network result becomes an output event");
+
+        assert!(matches!(
+            event,
+            RdpOutputEvent::NetworkMetrics {
+                base_rtt_ms: Some(12),
+                average_rtt_ms: 18,
+                bandwidth_kbps: Some(50_000),
+            }
+        ));
+    }
+
+    #[test]
+    fn image_events_expose_only_network_pdu_decode_time() {
+        let image = DecodedImage::new(PixelFormat::RgbA32, 2, 1);
+        let region = ironrdp_pdu::geometry::InclusiveRectangle {
+            left: 0,
+            top: 0,
+            right: 1,
+            bottom: 0,
+        };
+        let started = Instant::now()
+            .checked_sub(Duration::from_millis(2))
+            .expect("test duration is representable");
+        let measured = image_output_event(&image, &region, Some(started)).unwrap();
+        assert!(matches!(
+            measured,
+            RdpOutputEvent::Image {
+                width,
+                height,
+                decode_time: Some(decode_time),
+                ..
+            } if width.get() == 2 && height.get() == 1 && decode_time >= Duration::from_millis(2)
+        ));
+
+        let local = image_output_event(&image, &region, None).unwrap();
+        assert!(matches!(
+            local,
+            RdpOutputEvent::Image {
+                decode_time: None,
+                ..
+            }
+        ));
+    }
+
+    #[test]
+    fn image_events_clamp_dirty_regions_to_the_framebuffer() {
+        let image = DecodedImage::new(PixelFormat::RgbA32, 4, 3);
+        let region = ironrdp_pdu::geometry::InclusiveRectangle {
+            left: 2,
+            top: 1,
+            right: u16::MAX,
+            bottom: u16::MAX,
+        };
+        let event = image_output_event(&image, &region, None).unwrap();
+        assert!(matches!(
+            event,
+            RdpOutputEvent::Image {
+                buffer,
+                dirty_region: DirtyRegion {
+                    left: 2,
+                    top: 1,
+                    right: 3,
+                    bottom: 2,
+                },
+                ..
+            } if buffer.len() == 4
+        ));
+
+        let outside = ironrdp_pdu::geometry::InclusiveRectangle {
+            left: 10,
+            top: 10,
+            right: 11,
+            bottom: 11,
+        };
+        let event = image_output_event(&image, &outside, None).unwrap();
+        assert!(matches!(
+            event,
+            RdpOutputEvent::Image {
+                buffer,
+                dirty_region: DirtyRegion {
+                    left: 0,
+                    top: 0,
+                    right: 3,
+                    bottom: 2,
+                },
+                ..
+            } if buffer.len() == 12
+        ));
+    }
+
+    #[test]
+    fn display_control_capabilities_produce_a_real_multi_monitor_pdu() {
+        let layout = [
+            ConfigMonitorLayoutEntry {
+                left: 0,
+                top: 0,
+                width: 1_920,
+                height: 1_080,
+                scale_factor: 100,
+                is_primary: true,
+            },
+            ConfigMonitorLayoutEntry {
+                left: -2_560,
+                top: 0,
+                width: 2_560,
+                height: 1_440,
+                scale_factor: 100,
+                is_primary: false,
+            },
+        ];
+        let capabilities = DisplayControlCapabilities::new(16, 8_192, 8_192).unwrap();
+        assert_eq!(
+            monitor_layout_messages(Some(&layout), &capabilities)
+                .unwrap()
+                .len(),
+            1
+        );
+
+        let insufficient = DisplayControlCapabilities::new(1, 1, 1).unwrap();
+        assert!(monitor_layout_messages(Some(&layout), &insufficient).is_err());
+        assert!(monitor_layout_messages(None, &capabilities).unwrap().is_empty());
+    }
+}
diff --git a/vendor/ironrdp-client/src/ws.rs b/vendor/ironrdp-client/src/ws.rs
new file mode 100644
index 0000000..a40df23
--- /dev/null
+++ b/vendor/ironrdp-client/src/ws.rs
@@ -0,0 +1,132 @@
+use core::pin::Pin;
+use core::task::{Context, Poll, ready};
+use std::io;
+
+use futures_util::{Sink, SinkExt as _, Stream, StreamExt as _};
+use tokio::io::{AsyncRead, AsyncWrite};
+use tokio_tungstenite::tungstenite;
+
+pub(crate) fn websocket_compat<S>(stream: S) -> impl AsyncRead + AsyncWrite + Unpin + Send + 'static
+where
+    S: Stream<Item = Result<tungstenite::Message, tungstenite::Error>>
+        + Sink<tungstenite::Message, Error = tungstenite::Error>
+        + Unpin
+        + Send
+        + 'static,
+{
+    let compat = stream
+        .filter_map(|item| {
+            let mapped = item
+                .map(|msg| match msg {
+                    tungstenite::Message::Text(s) => Some(WsReadMsg::Payload(tungstenite::Bytes::from(s))),
+                    tungstenite::Message::Binary(data) => Some(WsReadMsg::Payload(data)),
+                    tungstenite::Message::Ping(_) | tungstenite::Message::Pong(_) => None,
+                    tungstenite::Message::Close(_) => Some(WsReadMsg::Close),
+                    tungstenite::Message::Frame(_) => unreachable!("raw frames are never returned when reading"),
+                })
+                .transpose();
+
+            core::future::ready(mapped)
+        })
+        .with(|item| {
+            core::future::ready(Ok::<_, tungstenite::Error>(tungstenite::Message::Binary(
+                tungstenite::Bytes::from(item),
+            )))
+        });
+
+    WsStream::new(compat)
+}
+
+/// A WebSocket message as consumed by [`WsStream`] when reading.
+enum WsReadMsg {
+    Payload(tungstenite::Bytes),
+    Close,
+}
+
+/// Wraps a stream/sink of WebSocket messages and exposes it as [`AsyncRead`] + [`AsyncWrite`].
+///
+/// The wrapped `S` is required to be [`Unpin`] so no pinning projection is needed; the caller of
+/// [`websocket_compat`] always provides an `Unpin` stream.
+struct WsStream<S> {
+    inner: S,
+    read_buf: Option<tungstenite::Bytes>,
+}
+
+impl<S> WsStream<S> {
+    fn new(inner: S) -> Self {
+        Self { inner, read_buf: None }
+    }
+}
+
+impl<S, E> AsyncRead for WsStream<S>
+where
+    S: Stream<Item = Result<WsReadMsg, E>> + Unpin,
+    E: core::error::Error + Send + Sync + 'static,
+{
+    fn poll_read(
+        mut self: Pin<&mut Self>,
+        cx: &mut Context<'_>,
+        buf: &mut tokio::io::ReadBuf<'_>,
+    ) -> Poll<io::Result<()>> {
+        let this = &mut *self;
+
+        let mut data = if let Some(data) = this.read_buf.take() {
+            data
+        } else {
+            match ready!(Pin::new(&mut this.inner).poll_next(cx)) {
+                Some(Ok(WsReadMsg::Payload(data))) => data,
+                Some(Ok(WsReadMsg::Close)) => return Poll::Ready(Ok(())),
+                Some(Err(e)) => return Poll::Ready(Err(io::Error::other(e))),
+                None => return Poll::Ready(Ok(())),
+            }
+        };
+
+        let bytes_to_copy = core::cmp::min(buf.remaining(), data.len());
+
+        let dest = buf.initialize_unfilled_to(bytes_to_copy);
+        dest.copy_from_slice(&data.split_to(bytes_to_copy));
+        buf.advance(bytes_to_copy);
+
+        if !data.is_empty() {
+            this.read_buf = Some(data);
+        }
+
+        Poll::Ready(Ok(()))
+    }
+}
+
+impl<S, E> AsyncWrite for WsStream<S>
+where
+    S: Sink<Vec<u8>, Error = E> + Unpin,
+    E: core::error::Error + Send + Sync + 'static,
+{
+    fn poll_write(mut self: Pin<&mut Self>, cx: &mut Context<'_>, buf: &[u8]) -> Poll<io::Result<usize>> {
+        let this = &mut *self;
+
+        // Try flushing preemptively.
+        let _ = Pin::new(&mut this.inner).poll_flush(cx);
+
+        // Make sure the sink is ready to send.
+        if let Err(e) = ready!(Pin::new(&mut this.inner).poll_ready(cx)) {
+            return Poll::Ready(Err(io::Error::other(e)));
+        }
+
+        // Actually submit the new item. If no error occurred, the message is accepted and queued
+        // (that is: `to_vec` is called only once).
+        if let Err(e) = Pin::new(&mut this.inner).start_send(buf.to_vec()) {
+            return Poll::Ready(Err(io::Error::other(e)));
+        }
+
+        Poll::Ready(Ok(buf.len()))
+    }
+
+    fn poll_flush(mut self: Pin<&mut Self>, cx: &mut Context<'_>) -> Poll<io::Result<()>> {
+        let res = ready!(Pin::new(&mut self.inner).poll_flush(cx));
+        Poll::Ready(res.map_err(io::Error::other))
+    }
+
+    fn poll_shutdown(mut self: Pin<&mut Self>, cx: &mut Context<'_>) -> Poll<io::Result<()>> {
+        let res = ready!(Pin::new(&mut self.inner).poll_close(cx));
+        Poll::Ready(res.map_err(io::Error::other))
+    }
+}
diff --git a/vendor/ironrdp-tls/Cargo.toml b/vendor/ironrdp-tls/Cargo.toml
new file mode 100644
index 0000000..333aaab
--- /dev/null
+++ b/vendor/ironrdp-tls/Cargo.toml
@@ -0,0 +1,28 @@
+[package]
+name = "ironrdp-tls"
+version = "0.2.2"
+edition = "2024"
+rust-version = "1.89"
+license = "MIT OR Apache-2.0"
+description = "RemoteDesk-patched IronRDP TLS transport"
+
+[features]
+default = []
+rustls = ["rustls-aws-lc-rs"]
+rustls-aws-lc-rs = ["rustls-no-provider", "tokio-rustls/aws_lc_rs"]
+rustls-no-provider = [
+    "dep:tokio-rustls",
+    "dep:x509-cert",
+    "tokio/io-util",
+    "tokio-rustls/logging",
+    "tokio-rustls/tls12",
+]
+
+[dependencies]
+sha2 = "0.10"
+tokio = { version = "1.52" }
+tokio-rustls = { version = "0.26", optional = true, default-features = false }
+x509-cert = { version = "0.2", features = ["std"], optional = true, default-features = false }
+
+[lints]
+workspace = true
diff --git a/vendor/ironrdp-tls/src/lib.rs b/vendor/ironrdp-tls/src/lib.rs
new file mode 100644
index 0000000..2ccd85a
--- /dev/null
+++ b/vendor/ironrdp-tls/src/lib.rs
@@ -0,0 +1,78 @@
+#![doc = "IronRDP TLS transport with optional RemoteDesk certificate pinning."]
+
+#[cfg(feature = "rustls-no-provider")]
+mod rustls;
+
+#[cfg(not(feature = "rustls-no-provider"))]
+compile_error!("RemoteDesk's ironrdp-tls patch requires the rustls backend");
+
+#[cfg(feature = "rustls-no-provider")]
+pub use rustls::{TlsStream, negotiated, upgrade};
+
+use std::sync::{Mutex, OnceLock, PoisonError};
+
+use sha2::{Digest as _, Sha256};
+
+static SERVER_CERTIFICATE_SHA256: OnceLock<Mutex<Option<[u8; 32]>>> = OnceLock::new();
+
+/// Configures the certificate fingerprint required by subsequent TLS upgrades
+/// in this process. RemoteDesk launches one viewer process per RDP session.
+pub fn set_server_certificate_sha256(expected: [u8; 32]) {
+    *SERVER_CERTIFICATE_SHA256
+        .get_or_init(|| Mutex::new(None))
+        .lock()
+        .unwrap_or_else(PoisonError::into_inner) = Some(expected);
+}
+
+fn expected_server_certificate_sha256() -> Option<[u8; 32]> {
+    *SERVER_CERTIFICATE_SHA256
+        .get_or_init(|| Mutex::new(None))
+        .lock()
+        .unwrap_or_else(PoisonError::into_inner)
+}
+
+#[must_use]
+pub fn certificate_sha256_der(certificate_der: &[u8]) -> [u8; 32] {
+    Sha256::digest(certificate_der).into()
+}
+
+#[must_use]
+pub fn certificate_sha256(cert: &x509_cert::Certificate) -> Option<[u8; 32]> {
+    use x509_cert::der::Encode as _;
+
+    cert.to_der()
+        .ok()
+        .map(|der| certificate_sha256_der(&der))
+}
+
+/// TLS parameters negotiated during the handshake.
+#[derive(Debug, Clone, Default, PartialEq, Eq)]
+pub struct NegotiatedTls {
+    pub version: Option<String>,
+    pub cipher_suite: Option<String>,
+}
+
+#[must_use]
+pub fn extract_tls_server_public_key(cert: &x509_cert::Certificate) -> Option<&[u8]> {
+    cert.tbs_certificate
+        .subject_public_key_info
+        .subject_public_key
+        .as_bytes()
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn certificate_hash_uses_full_der_bytes() {
+        assert_eq!(
+            certificate_sha256_der(b"certificate"),
+            [
+                0x03, 0xd6, 0x6d, 0xd0, 0x88, 0x35, 0xc1, 0xca, 0x3f, 0x12, 0x8c, 0xce, 0xac,
+                0xd1, 0xf3, 0x1a, 0xc9, 0x41, 0x63, 0x09, 0x6b, 0x20, 0xf4, 0x45, 0xae, 0x84,
+                0x28, 0x5b, 0xc0, 0x83, 0x2d, 0x72,
+            ]
+        );
+    }
+}
diff --git a/vendor/ironrdp-tls/src/rustls.rs b/vendor/ironrdp-tls/src/rustls.rs
new file mode 100644
index 0000000..34d06d5
--- /dev/null
+++ b/vendor/ironrdp-tls/src/rustls.rs
@@ -0,0 +1,117 @@
+use std::io;
+use std::sync::Arc;
+
+use tokio::io::{AsyncRead, AsyncWrite, AsyncWriteExt as _};
+use tokio_rustls::rustls;
+use tokio_rustls::rustls::pki_types::ServerName;
+
+pub type TlsStream<S> = tokio_rustls::client::TlsStream<S>;
+
+pub async fn upgrade<S>(stream: S, server_name: &str) -> io::Result<(TlsStream<S>, x509_cert::Certificate)>
+where
+    S: Unpin + AsyncRead + AsyncWrite,
+{
+    let builder = rustls::client::ClientConfig::builder();
+    let supported_algorithms = rustls::crypto::CryptoProvider::get_default()
+        .ok_or_else(|| io::Error::other("rustls crypto provider is unavailable"))?
+        .signature_verification_algorithms;
+    let verifier = CertificateVerifier {
+        expected_sha256: crate::expected_server_certificate_sha256(),
+        supported_algorithms,
+    };
+    let mut config = builder
+        .dangerous()
+        .with_custom_certificate_verifier(Arc::new(verifier))
+        .with_no_client_auth();
+    config.key_log = Arc::new(rustls::KeyLogFile::new());
+    config.resumption = rustls::client::Resumption::disabled();
+
+    let domain = ServerName::try_from(server_name.to_owned()).map_err(io::Error::other)?;
+    let mut tls_stream = tokio_rustls::TlsConnector::from(Arc::new(config))
+        .connect(domain, stream)
+        .await?;
+    tls_stream.flush().await?;
+
+    let tls_cert = {
+        use x509_cert::der::Decode as _;
+
+        let cert = tls_stream
+            .get_ref()
+            .1
+            .peer_certificates()
+            .and_then(|certificates| certificates.first())
+            .ok_or_else(|| io::Error::other("peer certificate is missing"))?;
+        x509_cert::Certificate::from_der(cert).map_err(io::Error::other)?
+    };
+
+    Ok((tls_stream, tls_cert))
+}
+
+#[must_use]
+pub fn negotiated<S>(stream: &TlsStream<S>) -> crate::NegotiatedTls {
+    let (_, connection) = stream.get_ref();
+    crate::NegotiatedTls {
+        version: connection.protocol_version().map(|version| format!("{version:?}")),
+        cipher_suite: connection
+            .negotiated_cipher_suite()
+            .map(|suite| format!("{:?}", suite.suite())),
+    }
+}
+
+#[derive(Debug)]
+struct CertificateVerifier {
+    expected_sha256: Option<[u8; 32]>,
+    supported_algorithms: rustls::crypto::WebPkiSupportedAlgorithms,
+}
+
+impl rustls::client::danger::ServerCertVerifier for CertificateVerifier {
+    fn verify_server_cert(
+        &self,
+        end_entity: &rustls::pki_types::CertificateDer<'_>,
+        _: &[rustls::pki_types::CertificateDer<'_>],
+        _: &rustls::pki_types::ServerName<'_>,
+        _: &[u8],
+        _: rustls::pki_types::UnixTime,
+    ) -> Result<rustls::client::danger::ServerCertVerified, rustls::Error> {
+        if let Some(expected) = self.expected_sha256
+            && crate::certificate_sha256_der(end_entity.as_ref()) != expected
+        {
+            return Err(rustls::Error::General(
+                "RDP server certificate fingerprint mismatch".to_owned(),
+            ));
+        }
+        Ok(rustls::client::danger::ServerCertVerified::assertion())
+    }
+
+    fn verify_tls12_signature(
+        &self,
+        message: &[u8],
+        cert: &rustls::pki_types::CertificateDer<'_>,
+        signature: &rustls::DigitallySignedStruct,
+    ) -> Result<rustls::client::danger::HandshakeSignatureValid, rustls::Error> {
+        rustls::crypto::verify_tls12_signature(
+            message,
+            cert,
+            signature,
+            &self.supported_algorithms,
+        )
+    }
+
+    fn verify_tls13_signature(
+        &self,
+        message: &[u8],
+        cert: &rustls::pki_types::CertificateDer<'_>,
+        signature: &rustls::DigitallySignedStruct,
+    ) -> Result<rustls::client::danger::HandshakeSignatureValid, rustls::Error> {
+        rustls::crypto::verify_tls13_signature(
+            message,
+            cert,
+            signature,
+            &self.supported_algorithms,
+        )
+    }
+
+    fn supported_verify_schemes(&self) -> Vec<rustls::SignatureScheme> {
+        self.supported_algorithms.supported_schemes()
+    }
+}
diff --git a/vendor/ironrdp-viewer/.cargo-ok b/vendor/ironrdp-viewer/.cargo-ok
new file mode 100644
index 0000000..5f8b795
--- /dev/null
+++ b/vendor/ironrdp-viewer/.cargo-ok
@@ -0,0 +1 @@
+{"v":1}
\ No newline at end of file
diff --git a/vendor/ironrdp-viewer/.cargo_vcs_info.json b/vendor/ironrdp-viewer/.cargo_vcs_info.json
new file mode 100644
index 0000000..aabd75d
--- /dev/null
+++ b/vendor/ironrdp-viewer/.cargo_vcs_info.json
@@ -0,0 +1,6 @@
+{
+  "git": {
+    "sha1": "11a0810cfbbabd8b8023875a05e3041216d4b01b"
+  },
+  "path_in_vcs": "crates/ironrdp-viewer"
+}
\ No newline at end of file
diff --git a/vendor/ironrdp-viewer/Cargo.lock b/vendor/ironrdp-viewer/Cargo.lock
new file mode 100644
index 0000000..736105e
--- /dev/null
+++ b/vendor/ironrdp-viewer/Cargo.lock
@@ -0,0 +1,6066 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+
+[[package]]
+name = "ab_glyph"
+version = "0.2.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "01c0457472c38ea5bd1c3b5ada5e368271cb550be7a4ca4a0b4634e9913f6cc2"
+dependencies = [
+ "ab_glyph_rasterizer",
+ "owned_ttf_parser",
+]
+
+[[package]]
+name = "ab_glyph_rasterizer"
+version = "0.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "366ffbaa4442f4684d91e2cd7c5ea7c4ed8add41959a31447066e279e432b618"
+
+[[package]]
+name = "addchain"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2e33f6a175ec6a9e0aca777567f9ff7c3deefc255660df887e7fa3585e9801d8"
+dependencies = [
+ "num-bigint 0.3.3",
+ "num-integer",
+ "num-traits",
+]
+
+[[package]]
+name = "adler2"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "320119579fcad9c21884f5c4861d16174d0e06250625266f50fe6898340abefa"
+
+[[package]]
+name = "aead"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1973cfbc1a2daf9cf550e74e1f088c28e7f7d8c1e1418fb6c9dc5184b7e84c99"
+dependencies = [
+ "crypto-common 0.2.2",
+ "inout",
+]
+
+[[package]]
+name = "aes"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f1fc76eaeac4c9164506c466d4ffdd8ec9d0c5bf57ee97177c4d8eceb3a0e138"
+dependencies = [
+ "cipher",
+ "cpubits",
+ "cpufeatures 0.3.0",
+]
+
+[[package]]
+name = "aes-gcm"
+version = "0.11.0-rc.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da8c919c118108f144adecad74b425b804ad075580d605d9b33c2d6d1c62a2f8"
+dependencies = [
+ "aead",
+ "aes",
+ "cipher",
+ "ctr",
+ "ghash",
+ "subtle",
+]
+
+[[package]]
+name = "aes-kw"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41ac571010bd60765c56085a4f1d412012a9be2663b1a2f2b19b49318653fd0d"
+dependencies = [
+ "aes",
+ "const-oid 0.10.2",
+]
+
+[[package]]
+name = "ahash"
+version = "0.8.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a15f179cd60c4584b8a8c596927aadc462e27f2ca70c04e0071964a73ba7a75"
+dependencies = [
+ "cfg-if",
+ "getrandom 0.3.4",
+ "once_cell",
+ "version_check",
+ "zerocopy",
+]
+
+[[package]]
+name = "aho-corasick"
+version = "1.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ddd31a130427c27518df266943a5308ed92d4b226cc639f5a8f1002816174301"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "alsa"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "812947049edcd670a82cd5c73c3661d2e58468577ba8489de58e1a73c04cbd5d"
+dependencies = [
+ "alsa-sys",
+ "bitflags 2.13.0",
+ "cfg-if",
+ "libc",
+]
+
+[[package]]
+name = "alsa-sys"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ad7569085a265dd3f607ebecce7458eaab2132a84393534c95b18dcbc3f31e04"
+dependencies = [
+ "libc",
+ "pkg-config",
+]
+
+[[package]]
+name = "android-activity"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0f2a1bb052857d5dd49572219344a7332b31b76405648eabac5bc68978251bcd"
+dependencies = [
+ "android-properties",
+ "bitflags 2.13.0",
+ "cc",
+ "jni 0.22.4",
+ "libc",
+ "log",
+ "ndk",
+ "ndk-context",
+ "ndk-sys",
+ "num_enum",
+ "thiserror 2.0.18",
+]
+
+[[package]]
+name = "android-properties"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc7eb209b1518d6bb87b283c20095f5228ecda460da70b44f0802523dea6da04"
+
+[[package]]
+name = "anstream"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d"
+dependencies = [
+ "anstyle",
+ "anstyle-parse",
+ "anstyle-query",
+ "anstyle-wincon",
+ "colorchoice",
+ "is_terminal_polyfill",
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle"
+version = "1.0.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000"
+
+[[package]]
+name = "anstyle-parse"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e"
+dependencies = [
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle-query"
+version = "1.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "anstyle-wincon"
+version = "3.0.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d"
+dependencies = [
+ "anstyle",
+ "once_cell_polyfill",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "anyhow"
+version = "1.0.103"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a4385e2e34eb35d6b3efe798b9eb88096925d87726c0798709bf56d9ed84af3"
+
+[[package]]
+name = "arrayref"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76a2e8124351fda1ef8aaaa3bbd7ebbcb486bbcd4225aca0aa0d84bb2db8fecb"
+
+[[package]]
+name = "arrayvec"
+version = "0.7.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3fb67a6e08acf24fdeccbac2cb6ac4305825bd1f117462e0e6f2f193345ad56"
+
+[[package]]
+name = "as-raw-xcb-connection"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "175571dd1d178ced59193a6fc02dde1b972eb0bc56c892cde9beeceac5bf0f6b"
+
+[[package]]
+name = "asn1-rs"
+version = "0.7.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7f43a50ac4fdca5df8e885c21b835997f0a1cdee65494a6847694a98652d9d8"
+dependencies = [
+ "asn1-rs-derive",
+ "asn1-rs-impl",
+ "displaydoc",
+ "nom",
+ "num-traits",
+ "rusticata-macros",
+ "thiserror 2.0.18",
+]
+
+[[package]]
+name = "asn1-rs-derive"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3109e49b1e4909e9db6515a30c633684d68cdeaa252f215214cb4fa1a5bfee2c"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+ "synstructure",
+]
+
+[[package]]
+name = "asn1-rs-impl"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7b18050c2cd6fe86c3a76584ef5e0baf286d038cda203eb6223df2cc413565f7"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "async-dnssd"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3d49ffe175ab45bbfd74b548313d9d7cdfff27161a94b007b52eeeb5f9aaa15e"
+dependencies = [
+ "bitflags 1.3.2",
+ "futures-channel",
+ "futures-core",
+ "futures-executor",
+ "futures-util",
+ "libc",
+ "log",
+ "pin-utils",
+ "pkg-config",
+ "tokio",
+ "winapi",
+]
+
+[[package]]
+name = "async-recursion"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b43422f69d8ff38f95f1b2bb76517c91589a924d1559a0e935d7c8ce0274c11"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "async-trait"
+version = "0.1.89"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9035ad2d096bed7955a320ee7e2230574d28fd3c3a0f186cbea1ff3c7eed5dbb"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "atomic-polyfill"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8cf2bce30dfe09ef0bfaef228b9d414faaf7e563035494d7fe092dba54b300f4"
+dependencies = [
+ "critical-section",
+]
+
+[[package]]
+name = "atomic-waker"
+version = "1.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1505bd5d3d116872e7271a6d4e16d81d0c8570876c8de68093a09ac269d8aac0"
+
+[[package]]
+name = "autocfg"
+version = "1.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2032f911046de80f0a198e0901378627c33f59ea0ac00e363d481118bd70a53"
+
+[[package]]
+name = "aws-lc-rs"
+version = "1.17.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4342d8937fc7e5dd9b1c60292261c0670c882a2cd1719cfc11b1af41731e32ad"
+dependencies = [
+ "aws-lc-sys",
+ "zeroize",
+]
+
+[[package]]
+name = "aws-lc-sys"
+version = "0.42.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6d9ceb1da931507a12f4fccea479dccd00da1943e1b4ae72d8e502d707361444"
+dependencies = [
+ "cc",
+ "cmake",
+ "dunce",
+ "fs_extra",
+ "pkg-config",
+]
+
+[[package]]
+name = "base16ct"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fd307490d624467aa6f74b0eabb77633d1f758a7b25f12bceb0b22e08d9726f6"
+
+[[package]]
+name = "base64"
+version = "0.22.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
+
+[[package]]
+name = "base64ct"
+version = "1.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06"
+
+[[package]]
+name = "bit_field"
+version = "0.10.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e4b40c7323adcfc0a41c4b88143ed58346ff65a288fc144329c5c45e05d70c6"
+
+[[package]]
+name = "bitflags"
+version = "1.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a"
+
+[[package]]
+name = "bitflags"
+version = "2.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b4388bee8683e3d04af747c73422af53102d2bd24d9eadb6cbc100baef4b43f8"
+
+[[package]]
+name = "bitvec"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ddcec3d12c579d40898fe0a9a358a803c23e9c52ca3c425707f81c9436211837"
+dependencies = [
+ "funty",
+ "radium",
+ "tap",
+ "wyz",
+]
+
+[[package]]
+name = "block-buffer"
+version = "0.10.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71"
+dependencies = [
+ "generic-array",
+]
+
+[[package]]
+name = "block-buffer"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d2f6c7dbe95a6ed67ad9f18e57daf93a2f034c524b99fd2b76d18fdfeb6660aa"
+dependencies = [
+ "hybrid-array",
+]
+
+[[package]]
+name = "block-padding"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "710f1dd022ef4e93f8a438b4ba958de7f64308434fa6a87104481645cc30068b"
+dependencies = [
+ "hybrid-array",
+]
+
+[[package]]
+name = "block2"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2c132eebf10f5cad5289222520a4a058514204aed6d791f1cf4fe8088b82d15f"
+dependencies = [
+ "objc2 0.5.2",
+]
+
+[[package]]
+name = "block2"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdeb9d870516001442e364c5220d3574d2da8dc765554b4a617230d33fa58ef5"
+dependencies = [
+ "objc2 0.6.4",
+]
+
+[[package]]
+name = "bumpalo"
+version = "3.20.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72f5acc6cb2ba439de613abc23857ec3d78374d8ed5ac84e9d11336e87da8649"
+
+[[package]]
+name = "bytemuck"
+version = "1.25.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8efb64bd706a16a1bdde310ae86b351e4d21550d98d056f22f8a7f7a2183fec"
+dependencies = [
+ "bytemuck_derive",
+]
+
+[[package]]
+name = "bytemuck_derive"
+version = "1.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f9abbd1bc6865053c427f7198e6af43bfdedc55ab791faed4fbd361d789575ff"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "byteorder"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b"
+
+[[package]]
+name = "bytes"
+version = "1.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc652a48c352aef3ea3aed32080501cf3ef6ed5da78602a020c991775b0aff04"
+
+[[package]]
+name = "calloop"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b99da2f8558ca23c71f4fd15dc57c906239752dd27ff3c00a1d56b685b7cbfec"
+dependencies = [
+ "bitflags 2.13.0",
+ "log",
+ "polling",
+ "rustix 0.38.44",
+ "slab",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "calloop-wayland-source"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "95a66a987056935f7efce4ab5668920b5d0dac4a7c99991a67395f13702ddd20"
+dependencies = [
+ "calloop",
+ "rustix 0.38.44",
+ "wayland-backend",
+ "wayland-client",
+]
+
+[[package]]
+name = "cbc"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ce2dc9ee5f88d11e0beb842c88b33c8a5cf0d1329c4b19494af42b07dbfe8896"
+dependencies = [
+ "cipher",
+]
+
+[[package]]
+name = "cc"
+version = "1.2.66"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f5d6cac793997bd970000024b2934968efe83b382de4fdcf4fcb46b6ee4ad996"
+dependencies = [
+ "find-msvc-tools",
+ "jobserver",
+ "libc",
+ "shlex",
+]
+
+[[package]]
+name = "cesu8"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6d43a04d8753f35258c91f8ec639f792891f748a1edbd759cf1dcea3382ad83c"
+
+[[package]]
+name = "cfg-if"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
+
+[[package]]
+name = "cfg_aliases"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
+
+[[package]]
+name = "chacha20"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d524456ba66e72eb8b115ff89e01e497f8e6d11d78b70b1aa13c0fbd97540a81"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.3.0",
+ "rand_core 0.10.1",
+]
+
+[[package]]
+name = "cipher"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e8cf2a2c93cd704877c0858356ed03480ff301ee950b43f1cbe4573b088bfa6c"
+dependencies = [
+ "block-buffer 0.12.1",
+ "crypto-common 0.2.2",
+ "inout",
+]
+
+[[package]]
+name = "clap"
+version = "4.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ddb117e43bbf7dacf0a4190fef4d345b9bad68dfc649cb349e7d17d28428e51"
+dependencies = [
+ "clap_builder",
+ "clap_derive",
+]
+
+[[package]]
+name = "clap_builder"
+version = "4.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "714a53001bf66416adb0e2ef5ac857140e7dc3a0c48fb28b2f10762fc4b5069f"
+dependencies = [
+ "anstream",
+ "anstyle",
+ "clap_lex",
+ "strsim",
+]
+
+[[package]]
+name = "clap_derive"
+version = "4.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2ce8604710f6733aa641a2b3731eaa1e8b3d9973d5e3565da11800813f997a9"
+dependencies = [
+ "heck",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "clap_lex"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8d4a3bb8b1e0c1050499d1815f5ab16d04f0959b233085fb31653fbfc9d98f9"
+
+[[package]]
+name = "cmake"
+version = "0.1.58"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c0f78a02292a74a88ac736019ab962ece0bc380e3f977bf72e376c5d78ff0678"
+dependencies = [
+ "cc",
+]
+
+[[package]]
+name = "cmov"
+version = "0.5.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c9ea0ac24bc397ab3c98583a3c9ba74fa56b09a4449bbe172b9b1ddb016027a"
+
+[[package]]
+name = "colorchoice"
+version = "1.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570"
+
+[[package]]
+name = "combine"
+version = "4.6.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba5a308b75df32fe02788e748662718f03fde005016435c444eea572398219fd"
+dependencies = [
+ "bytes",
+ "memchr",
+]
+
+[[package]]
+name = "concurrent-queue"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4ca0197aee26d1ae37445ee532fefce43251d24cc7c166799f4d46817f1d3973"
+dependencies = [
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "const-oid"
+version = "0.9.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8"
+
+[[package]]
+name = "const-oid"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6ef517f0926dd24a1582492c791b6a4818a4d94e789a334894aa15b0d12f55c"
+
+[[package]]
+name = "convert_case"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "633458d4ef8c78b72454de2d54fd6ab2e60f9e02be22f3c6104cdc8a4e0fceb9"
+dependencies = [
+ "unicode-segmentation",
+]
+
+[[package]]
+name = "core-foundation"
+version = "0.9.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "91e195e091a93c46f7102ec7818a2aa394e1e1771c3ab4825963fa03e45afb8f"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "core-foundation"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b2a6cd9ae233e7f62ba4e9353e81a88df7fc8a5987b8d445b4d90c879bd156f6"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "core-foundation-sys"
+version = "0.8.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
+
+[[package]]
+name = "core-graphics"
+version = "0.23.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c07782be35f9e1140080c6b96f0d44b739e2278479f64e02fdab4e32dfd8b081"
+dependencies = [
+ "bitflags 1.3.2",
+ "core-foundation 0.9.4",
+ "core-graphics-types",
+ "foreign-types 0.5.0",
+ "libc",
+]
+
+[[package]]
+name = "core-graphics-types"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "45390e6114f68f718cc7a830514a96f903cccd70d02a8f6d9f643ac4ba45afaf"
+dependencies = [
+ "bitflags 1.3.2",
+ "core-foundation 0.9.4",
+ "libc",
+]
+
+[[package]]
+name = "coreaudio-rs"
+version = "0.14.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7d5d7dca3ebcf65a035582c9ad4385371a9d9ee6537474d2a278f4e1e475bb58"
+dependencies = [
+ "bitflags 2.13.0",
+ "libc",
+ "objc2-audio-toolbox",
+ "objc2-core-audio",
+ "objc2-core-audio-types",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "cpal"
+version = "0.17.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8942da362c0f0d895d7cac616263f2f9424edc5687364dfd1d25ef7eba506d7"
+dependencies = [
+ "alsa",
+ "coreaudio-rs",
+ "dasp_sample",
+ "jni 0.21.1",
+ "js-sys",
+ "libc",
+ "mach2",
+ "ndk",
+ "ndk-context",
+ "num-derive",
+ "num-traits",
+ "objc2 0.6.4",
+ "objc2-audio-toolbox",
+ "objc2-avf-audio",
+ "objc2-core-audio",
+ "objc2-core-audio-types",
+ "objc2-core-foundation",
+ "objc2-foundation 0.3.2",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+ "windows",
+]
+
+[[package]]
+name = "cpubits"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "15b85f9c39137c3a891689859392b1bd49812121d0d61c9caf00d46ed5ce06ae"
+
+[[package]]
+name = "cpufeatures"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "cpufeatures"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b2a41393f66f16b0823bb79094d54ac5fbd34ab292ddafb9a0456ac9f87d201"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "crc32fast"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9481c1c90cbf2ac953f07c8d4a58aa3945c425b7185c9154d67a65e4230da511"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "critical-section"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "790eea4361631c5e7d22598ecd5723ff611904e3344ce8720784c93e3d83d40b"
+
+[[package]]
+name = "crossbeam-deque"
+version = "0.8.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5181e0de7b61eb03a81e347d6dd8797bae9da5146707b51077e2d71a54ec0ceb"
+dependencies = [
+ "crossbeam-epoch",
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "crossbeam-epoch"
+version = "0.9.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2d6914041f254d6e9176c01941b21115dcfb7089e55135a35411081bd106ef3f"
+dependencies = [
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "crossbeam-utils"
+version = "0.8.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "61803da095bee82a81bb1a452ecc25d3b2f1416d1897eb86430c6159ef717c17"
+
+[[package]]
+name = "crossterm"
+version = "0.29.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8b9f2e4c67f833b660cdb0a3523065869fb35570177239812ed4c905aeff87b"
+dependencies = [
+ "bitflags 2.13.0",
+ "crossterm_winapi",
+ "derive_more",
+ "document-features",
+ "mio",
+ "parking_lot",
+ "rustix 1.1.4",
+ "signal-hook",
+ "signal-hook-mio",
+ "winapi",
+]
+
+[[package]]
+name = "crossterm_winapi"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "acdd7c62a3665c7f6830a51635d9ac9b23ed385797f70a83bb8bafe9c572ab2b"
+dependencies = [
+ "winapi",
+]
+
+[[package]]
+name = "crypto-bigint"
+version = "0.7.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1a52aa3fcda4e6302a9f48734f234d35d4721b96f8fe07d073f07ce9df4f0271"
+dependencies = [
+ "cpubits",
+ "ctutils",
+ "getrandom 0.4.3",
+ "hybrid-array",
+ "num-traits",
+ "rand_core 0.10.1",
+ "serdect",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "crypto-common"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a"
+dependencies = [
+ "generic-array",
+ "typenum",
+]
+
+[[package]]
+name = "crypto-common"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ce6e4c961d6cd6c9a86db418387425e8bdeaf05b3c8bc1411e6dca4c252f1453"
+dependencies = [
+ "getrandom 0.4.3",
+ "hybrid-array",
+ "rand_core 0.10.1",
+]
+
+[[package]]
+name = "crypto-mac"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "25fab6889090c8133f3deb8f73ba3c65a7f456f66436fc012a1b1e272b1e103e"
+dependencies = [
+ "generic-array",
+ "subtle",
+]
+
+[[package]]
+name = "crypto-primes"
+version = "0.7.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3633a51a39c69ebbaa4feaa694bd83d241e4093901c84a0963b19d9bb3f0cf8f"
+dependencies = [
+ "crypto-bigint",
+ "rand_core 0.10.1",
+]
+
+[[package]]
+name = "cryptoki"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff765b99fc49f3116c9a908484486a2b92fd73c48da45c3a69716471c6cc56c6"
+dependencies = [
+ "bitflags 2.13.0",
+ "cryptoki-sys",
+ "libloading",
+ "log",
+ "secrecy",
+]
+
+[[package]]
+name = "cryptoki-sys"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f1fd850498411e4057f1cba79e6e2bc7cbe960544c1046ab46d4685c403a1121"
+dependencies = [
+ "libloading",
+]
+
+[[package]]
+name = "ctor"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "83cf0d42651b16c6dfe68685716d18480d18a9c39c62d76e8cf3eb6ed5d8bcbf"
+dependencies = [
+ "dtor",
+]
+
+[[package]]
+name = "ctr"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "baaca1c4b237092596f64d571e9db6ce4109c4ef9742e27590f1709594461f21"
+dependencies = [
+ "cipher",
+]
+
+[[package]]
+name = "ctutils"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7d5515a3834141de9eafb9717ad39eea8247b5674e6066c404e8c4b365d2a29e"
+dependencies = [
+ "cmov",
+ "subtle",
+]
+
+[[package]]
+name = "cursor-icon"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f27ae1dd37df86211c42e150270f82743308803d90a6f6e6651cd730d5e1732f"
+
+[[package]]
+name = "curve25519-dalek"
+version = "5.0.0-rc.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c906a87e53a36ff795d72e06e8162a83c5436e3ea89e942a9cb9fc083f0a384f"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.3.0",
+ "curve25519-dalek-derive",
+ "digest 0.11.3",
+ "fiat-crypto",
+ "rustc_version",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "curve25519-dalek-derive"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "dasp_sample"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c87e182de0887fd5361989c677c4e8f5000cd9491d6d563161a8f3a5519fc7f"
+
+[[package]]
+name = "data-encoding"
+version = "2.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4ae5f15dda3c708c0ade84bfee31ccab44a3da4f88015ed22f63732abe300c8"
+
+[[package]]
+name = "der"
+version = "0.7.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb"
+dependencies = [
+ "const-oid 0.9.6",
+ "der_derive",
+ "flagset",
+ "pem-rfc7468 0.7.0",
+ "zeroize",
+]
+
+[[package]]
+name = "der"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a69dedd701da44b0536442edf09c81a64b0ab97a7a4a5e3d1971f00027cbc63d"
+dependencies = [
+ "const-oid 0.10.2",
+ "pem-rfc7468 1.0.0",
+ "zeroize",
+]
+
+[[package]]
+name = "der-parser"
+version = "10.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "07da5016415d5a3c4dd39b11ed26f915f52fc4e0dc197d87908bc916e51bc1a6"
+dependencies = [
+ "asn1-rs",
+ "displaydoc",
+ "nom",
+ "num-traits",
+ "rusticata-macros",
+]
+
+[[package]]
+name = "der_derive"
+version = "0.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8034092389675178f570469e6c3b0465d3d30b4505c294a6550db47f3c17ad18"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "deranged"
+version = "0.5.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7cd812cc2bc1d69d4764bd80df88b4317eaef9e773c75226407d9bc0876b211c"
+
+[[package]]
+name = "derive_more"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d751e9e49156b02b44f9c1815bcb94b984cdcc4396ecc32521c739452808b134"
+dependencies = [
+ "derive_more-impl",
+]
+
+[[package]]
+name = "derive_more-impl"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "799a97264921d8623a957f6c3b9011f3b5492f557bbb7a5a19b7fa6d06ba8dcb"
+dependencies = [
+ "convert_case",
+ "proc-macro2",
+ "quote",
+ "rustc_version",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "des"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "916a94e407b54f9034d71dd748234cd1e516ced6284009906ae246f177eafe5a"
+dependencies = [
+ "cipher",
+]
+
+[[package]]
+name = "digest"
+version = "0.10.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
+dependencies = [
+ "block-buffer 0.10.4",
+ "crypto-common 0.1.7",
+]
+
+[[package]]
+name = "digest"
+version = "0.11.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f1dd6dbb5841937940781866fa1281a1ff7bd3bf827091440879f9994983d5c2"
+dependencies = [
+ "block-buffer 0.12.1",
+ "const-oid 0.10.2",
+ "crypto-common 0.2.2",
+ "ctutils",
+]
+
+[[package]]
+name = "dispatch"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bd0c93bb4b0c6d9b77f4435b0ae98c24d17f1c45b2ff844c6151a07256ca923b"
+
+[[package]]
+name = "dispatch2"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e0e367e4e7da84520dedcac1901e4da967309406d1e51017ae1abfb97adbd38"
+dependencies = [
+ "bitflags 2.13.0",
+ "objc2 0.6.4",
+]
+
+[[package]]
+name = "displaydoc"
+version = "0.2.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ac70aa55017e108007fbaf5aa0f54b021c98f92ff8af59d42eda9da96e3dd4f"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "dlib"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ab8ecd87370524b461f8557c119c405552c396ed91fc0a8eec68679eab26f94a"
+dependencies = [
+ "libloading",
+]
+
+[[package]]
+name = "document-features"
+version = "0.2.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d4b8a88685455ed29a21542a33abd9cb6510b6b129abadabdcef0f4c55bc8f61"
+dependencies = [
+ "litrs",
+]
+
+[[package]]
+name = "downcast-rs"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75b325c5dbd37f80359721ad39aca5a29fb04c89279657cffdda8736d0c0b9d2"
+
+[[package]]
+name = "dpi"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8b14ccef22fc6f5a8f4d7d768562a182c04ce9a3b3157b91390b52ddfdf1a76"
+
+[[package]]
+name = "drm"
+version = "0.14.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "80bc8c5c6c2941f70a55c15f8d9f00f9710ebda3ffda98075f996a0e6c92756f"
+dependencies = [
+ "bitflags 2.13.0",
+ "bytemuck",
+ "drm-ffi",
+ "drm-fourcc",
+ "libc",
+ "rustix 0.38.44",
+]
+
+[[package]]
+name = "drm-ffi"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "51a91c9b32ac4e8105dec255e849e0d66e27d7c34d184364fb93e469db08f690"
+dependencies = [
+ "drm-sys",
+ "rustix 1.1.4",
+]
+
+[[package]]
+name = "drm-fourcc"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0aafbcdb8afc29c1a7ee5fbe53b5d62f4565b35a042a662ca9fecd0b54dae6f4"
+
+[[package]]
+name = "drm-sys"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ecc8e1361066d91f5ffccff060a3c3be9c3ecde15be2959c1937595f7a82a9f8"
+dependencies = [
+ "libc",
+ "linux-raw-sys 0.9.4",
+]
+
+[[package]]
+name = "dtor"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "edf234dd1594d6dd434a8fb8cada51ddbbc593e40e4a01556a0b31c62da2775b"
+
+[[package]]
+name = "dunce"
+version = "1.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92773504d58c093f6de2459af4af33faa518c13451eb8f2b5698ed3d36e7c813"
+
+[[package]]
+name = "dyn-clone"
+version = "1.0.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d0881ea181b1df73ff77ffaaf9c7544ecc11e82fba9b5f27b262a3c73a332555"
+
+[[package]]
+name = "ecdsa"
+version = "0.17.0-rc.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7c72d1455753a703ad4b90ed2a759f2bc4562024a303176439cf6e593b5ade4"
+dependencies = [
+ "der 0.8.1",
+ "digest 0.11.3",
+ "elliptic-curve",
+ "rfc6979",
+ "signature",
+ "spki 0.8.0",
+ "zeroize",
+]
+
+[[package]]
+name = "ed25519"
+version = "3.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "29fcf32e6c73d1079f83ab4d782de2d81620346a5f38c6237a86a22f8368980a"
+dependencies = [
+ "signature",
+]
+
+[[package]]
+name = "ed25519-dalek"
+version = "3.0.0-rc.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1685663e23882cd8517dcbcb1c23a6ebff4433c22dfb681d760219b62cd1b849"
+dependencies = [
+ "curve25519-dalek",
+ "ed25519",
+ "rand_core 0.10.1",
+ "sha2",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "either"
+version = "1.16.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "91622ff5e7162018101f2fea40d6ebf4a78bbe5a49736a2020649edf9693679e"
+
+[[package]]
+name = "elliptic-curve"
+version = "0.14.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9d65aa39b3a5c1c9c1b745c9a019234bb7a21b77abcb4f4d266d706e2d577d65"
+dependencies = [
+ "base16ct",
+ "crypto-bigint",
+ "crypto-common 0.2.2",
+ "digest 0.11.3",
+ "ff",
+ "group",
+ "hkdf",
+ "hybrid-array",
+ "pem-rfc7468 1.0.0",
+ "pkcs8",
+ "rand_core 0.10.1",
+ "sec1",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "equivalent"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
+
+[[package]]
+name = "errno"
+version = "0.3.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "fastrand"
+version = "2.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9f1f227452a390804cdb637b74a86990f2a7d7ba4b7d5693aac9b4dd6defd8d6"
+
+[[package]]
+name = "ff"
+version = "0.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1f686ab92a9fb0eaf188f6c6c87b89490baa6fdb0db4544ba4dc47f7942489f"
+dependencies = [
+ "rand_core 0.10.1",
+ "subtle",
+]
+
+[[package]]
+name = "fiat-crypto"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "64cd1e32ddd350061ae6edb1b082d7c54915b5c672c389143b9a63403a109f24"
+
+[[package]]
+name = "find-msvc-tools"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5baebc0774151f905a1a2cc41989300b1e6fbb29aff0ceffa1064fdd3088d582"
+
+[[package]]
+name = "flagset"
+version = "0.4.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7ac824320a75a52197e8f2d787f6a38b6718bb6897a35142d749af3c0e8f4fe"
+
+[[package]]
+name = "flate2"
+version = "1.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "843fba2746e448b37e26a819579957415c8cef339bf08564fe8b7ddbd959573c"
+dependencies = [
+ "crc32fast",
+ "libz-sys",
+ "miniz_oxide",
+]
+
+[[package]]
+name = "fnv"
+version = "1.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1"
+
+[[package]]
+name = "foreign-types"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f6f339eb8adc052cd2ca78910fda869aefa38d22d5cb648e6485e4d3fc06f3b1"
+dependencies = [
+ "foreign-types-shared 0.1.1",
+]
+
+[[package]]
+name = "foreign-types"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d737d9aa519fb7b749cbc3b962edcf310a8dd1f4b67c91c4f83975dbdd17d965"
+dependencies = [
+ "foreign-types-macros",
+ "foreign-types-shared 0.3.1",
+]
+
+[[package]]
+name = "foreign-types-macros"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1a5c6c585bc94aaf2c7b51dd4c2ba22680844aba4c687be581871a6f518c5742"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "foreign-types-shared"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "00b0228411908ca8685dba7fc2cdd70ec9990a6e753e89b6ac91a84c40fbaf4b"
+
+[[package]]
+name = "foreign-types-shared"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "aa9a19cbb55df58761df49b23516a86d432839add4af60fc256da840f66ed35b"
+
+[[package]]
+name = "form_urlencoded"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb4cb245038516f5f85277875cdaa4f7d2c9a0fa0468de06ed190163b1581fcf"
+dependencies = [
+ "percent-encoding",
+]
+
+[[package]]
+name = "fs_extra"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "42703706b716c37f96a77aea830392ad231f44c9e9a67872fa5548707e11b11c"
+
+[[package]]
+name = "funty"
+version = "2.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6d5a32815ae3f33302d95fdcb2ce17862f8c65363dcfd29360480ba1001fc9c"
+
+[[package]]
+name = "futures"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b147ee9d1f6d097cef9ce628cd2ee62288d963e16fb287bd9286455b241382d"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-executor",
+ "futures-io",
+ "futures-sink",
+ "futures-task",
+ "futures-util",
+]
+
+[[package]]
+name = "futures-channel"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "07bbe89c50d7a535e539b8c17bc0b49bdb77747034daa8087407d655f3f7cc1d"
+dependencies = [
+ "futures-core",
+ "futures-sink",
+]
+
+[[package]]
+name = "futures-core"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7e3450815272ef58cec6d564423f6e755e25379b217b0bc688e295ba24df6b1d"
+
+[[package]]
+name = "futures-executor"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "baf29c38818342a3b26b5b923639e7b1f4a61fc5e76102d4b1981c6dc7a7579d"
+dependencies = [
+ "futures-core",
+ "futures-task",
+ "futures-util",
+]
+
+[[package]]
+name = "futures-io"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cecba35d7ad927e23624b22ad55235f2239cfa44fd10428eecbeba6d6a717718"
+
+[[package]]
+name = "futures-macro"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e835b70203e41293343137df5c0664546da5745f82ec9b84d40be8336958447b"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "futures-sink"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c39754e157331b013978ec91992bde1ac089843443c49cbc7f46150b0fad0893"
+
+[[package]]
+name = "futures-task"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "037711b3d59c33004d3856fbdc83b99d4ff37a24768fa1be9ce3538a1cde4393"
+
+[[package]]
+name = "futures-util"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "389ca41296e6190b48053de0321d02a77f32f8a5d2461dd38762c0593805c6d6"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-io",
+ "futures-macro",
+ "futures-sink",
+ "futures-task",
+ "memchr",
+ "pin-project-lite",
+ "slab",
+]
+
+[[package]]
+name = "fuzzy-matcher"
+version = "0.3.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "54614a3312934d066701a80f20f15fa3b56d67ac7722b39eea5b4c9dd1d66c94"
+dependencies = [
+ "thread_local",
+]
+
+[[package]]
+name = "generic-array"
+version = "0.14.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a"
+dependencies = [
+ "typenum",
+ "version_check",
+]
+
+[[package]]
+name = "gethostname"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1bd49230192a3797a9a4d6abe9b3eed6f7fa4c8a8a4947977c6f80025f92cbd8"
+dependencies = [
+ "rustix 1.1.4",
+ "windows-link",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "wasi 0.11.1+wasi-snapshot-preview1",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
+dependencies = [
+ "cfg-if",
+ "js-sys",
+ "libc",
+ "r-efi 5.3.0",
+ "wasip2",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "r-efi 6.0.0",
+ "rand_core 0.10.1",
+]
+
+[[package]]
+name = "ghash"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2eecf2d5dc9b66b732b97707a0210906b1d30523eb773193ab777c0c84b3e8d5"
+dependencies = [
+ "polyval",
+]
+
+[[package]]
+name = "group"
+version = "0.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7fd1a1c7a5206c5b7a3f5a0d7ccd3ff85d0c8f5133d62a02680255b0004af5f4"
+dependencies = [
+ "ff",
+ "rand_core 0.10.1",
+ "subtle",
+]
+
+[[package]]
+name = "h2"
+version = "0.4.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6cb093c84e8bd9b188d4c4a8cb6579fc016968d14c99882163cd3ff402a4f155"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "fnv",
+ "futures-core",
+ "futures-sink",
+ "http",
+ "indexmap",
+ "slab",
+ "tokio",
+ "tokio-util",
+ "tracing",
+]
+
+[[package]]
+name = "hash32"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b0c35f58762feb77d74ebe43bdbc3210f09be9fe6742234d573bacc26ed92b67"
+dependencies = [
+ "byteorder",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.17.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed5909b6e89a2db4456e54cd5f673791d7eca6732202bbf2a9cc504fe2f9b84a"
+
+[[package]]
+name = "heapless"
+version = "0.7.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdc6457c0eb62c71aac4bc17216026d8410337c4126773b9c5daba343f17964f"
+dependencies = [
+ "atomic-polyfill",
+ "hash32",
+ "rustc_version",
+ "spin",
+ "stable_deref_trait",
+]
+
+[[package]]
+name = "heck"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"
+
+[[package]]
+name = "hermit-abi"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc0fef456e4baa96da950455cd02c081ca953b141298e41db3fc7e36b1da849c"
+
+[[package]]
+name = "hex"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
+
+[[package]]
+name = "hkdf"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4aaa26c720c68b866f2c96ef5c1264b3e6f473fe5d4ce61cd44bbe913e553018"
+dependencies = [
+ "hmac",
+]
+
+[[package]]
+name = "hmac"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6303bc9732ae41b04cb554b844a762b4115a61bfaa81e3e83050991eeb56863f"
+dependencies = [
+ "digest 0.11.3",
+]
+
+[[package]]
+name = "http"
+version = "1.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6970f50e31d6fc17d3fa27329444bfa74e196cf62e95052a3f6fee181dba6425"
+dependencies = [
+ "bytes",
+ "itoa",
+]
+
+[[package]]
+name = "http-body"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1efedce1fb8e6913f23e0c92de8e62cd5b772a67e7b3946df930a62566c93184"
+dependencies = [
+ "bytes",
+ "http",
+]
+
+[[package]]
+name = "http-body-util"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b021d93e26becf5dc7e1b75b1bed1fd93124b374ceb73f43d4d4eafec896a64a"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "http",
+ "http-body",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "httparse"
+version = "1.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87"
+
+[[package]]
+name = "hybrid-array"
+version = "0.4.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "818356c5132c1fede50f837ca96afbe78ff42413047f4abb886217845e1b6c8c"
+dependencies = [
+ "subtle",
+ "typenum",
+ "zeroize",
+]
+
+[[package]]
+name = "hyper"
+version = "1.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "55281c53a1894c864990125767da440a4e630446785086f52523b20033b74498"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "futures-channel",
+ "futures-core",
+ "h2",
+ "http",
+ "http-body",
+ "httparse",
+ "itoa",
+ "pin-project-lite",
+ "smallvec",
+ "tokio",
+ "want",
+]
+
+[[package]]
+name = "hyper-rustls"
+version = "0.27.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "33ca68d021ef39cf6463ab54c1d0f5daf03377b70561305bb89a8f83aab66e0f"
+dependencies = [
+ "http",
+ "hyper",
+ "hyper-util",
+ "rustls",
+ "tokio",
+ "tokio-rustls",
+ "tower-service",
+]
+
+[[package]]
+name = "hyper-util"
+version = "0.1.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96547c2556ec9d12fb1578c4eaf448b04993e7fb79cbaad930a656880a6bdfa0"
+dependencies = [
+ "base64",
+ "bytes",
+ "futures-channel",
+ "futures-util",
+ "http",
+ "http-body",
+ "hyper",
+ "ipnet",
+ "libc",
+ "percent-encoding",
+ "pin-project-lite",
+ "socket2",
+ "system-configuration",
+ "tokio",
+ "tower-service",
+ "tracing",
+ "windows-registry",
+]
+
+[[package]]
+name = "icu_collections"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2984d1cd16c883d7935b9e07e44071dca8d917fd52ecc02c04d5fa0b5a3f191c"
+dependencies = [
+ "displaydoc",
+ "potential_utf",
+ "utf8_iter",
+ "yoke",
+ "zerofrom",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_locale_core"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92219b62b3e2b4d88ac5119f8904c10f8f61bf7e95b640d25ba3075e6cac2c29"
+dependencies = [
+ "displaydoc",
+ "litemap",
+ "tinystr",
+ "writeable",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c56e5ee99d6e3d33bd91c5d85458b6005a22140021cc324cea84dd0e72cff3b4"
+dependencies = [
+ "icu_collections",
+ "icu_normalizer_data",
+ "icu_properties",
+ "icu_provider",
+ "smallvec",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer_data"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da3be0ae77ea334f4da67c12f149704f19f81d1adf7c51cf482943e84a2bad38"
+
+[[package]]
+name = "icu_properties"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bee3b67d0ea5c2cca5003417989af8996f8604e34fb9ddf96208a033901e70de"
+dependencies = [
+ "icu_collections",
+ "icu_locale_core",
+ "icu_properties_data",
+ "icu_provider",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_properties_data"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e2bbb201e0c04f7b4b3e14382af113e17ba4f63e2c9d2ee626b720cbce54a14"
+
+[[package]]
+name = "icu_provider"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "139c4cf31c8b5f33d7e199446eff9c1e02decfc2f0eec2c8d71f65befa45b421"
+dependencies = [
+ "displaydoc",
+ "icu_locale_core",
+ "writeable",
+ "yoke",
+ "zerofrom",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "idna"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b0875f23caa03898994f6ddc501886a45c7d3d62d04d2d90788d47be1b1e4de"
+dependencies = [
+ "idna_adapter",
+ "smallvec",
+ "utf8_iter",
+]
+
+[[package]]
+name = "idna_adapter"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb68373c0d6620ef8105e855e7745e18b0d00d3bdb07fb532e434244cdb9a714"
+dependencies = [
+ "icu_normalizer",
+ "icu_properties",
+]
+
+[[package]]
+name = "indexmap"
+version = "2.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d466e9454f08e4a911e14806c24e16fba1b4c121d1ea474396f396069cf949d9"
+dependencies = [
+ "equivalent",
+ "hashbrown",
+]
+
+[[package]]
+name = "inout"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4250ce6452e92010fdf7268ccc5d14faa80bb12fc741938534c58f16804e03c7"
+dependencies = [
+ "block-padding",
+ "hybrid-array",
+]
+
+[[package]]
+name = "inquire"
+version = "0.9.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6654738b8024300cf062d04a1c13c10c8e2cea598ec1c47dc9b6641159429756"
+dependencies = [
+ "bitflags 2.13.0",
+ "crossterm",
+ "dyn-clone",
+ "fuzzy-matcher",
+ "unicode-segmentation",
+ "unicode-width",
+]
+
+[[package]]
+name = "ipnet"
+version = "2.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d98f6fed1fde3f8c21bc40a1abb88dd75e67924f9cffc3ef95607bad8017f8e2"
+
+[[package]]
+name = "ironrdp"
+version = "0.17.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0f910b8dc8e7b8e001c61fd742be442e8604fb2499ded713cadf911e7645ade4"
+dependencies = [
+ "ironrdp-client",
+ "ironrdp-cliprdr",
+ "ironrdp-connector",
+ "ironrdp-core",
+ "ironrdp-input",
+ "ironrdp-mstsgu",
+ "ironrdp-pdu",
+ "ironrdp-server",
+ "ironrdp-session",
+]
+
+[[package]]
+name = "ironrdp-acceptor"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "30885a3bdbd0fcf2b9aa27ae9298d8858b9e101c4ac795d3d47ff917efaee63f"
+dependencies = [
+ "ironrdp-async",
+ "ironrdp-connector",
+ "ironrdp-core",
+ "ironrdp-pdu",
+ "ironrdp-svc",
+ "tracing",
+]
+
+[[package]]
+name = "ironrdp-ainput"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "98ee3ba1d2c7cbe0769c5e552c9c7fbc68aa594d1f74f755c63a544a2176b974"
+dependencies = [
+ "bitflags 2.13.0",
+ "ironrdp-core",
+ "ironrdp-dvc",
+ "num-derive",
+ "num-traits",
+]
+
+[[package]]
+name = "ironrdp-async"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bea12d80384007fe321eb6b36c9225be9559c655fd581458a6a1386c1774d729"
+dependencies = [
+ "bytes",
+ "ironrdp-connector",
+ "ironrdp-core",
+ "ironrdp-pdu",
+ "tracing",
+]
+
+[[package]]
+name = "ironrdp-bulk"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2e548d9fd162558a5a8aaed72e528556ce88e77773634e3722b8d01d6f170388"
+
+[[package]]
+name = "ironrdp-cfg"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebbd21a7fb8d7c034550c515a11c861621f135493a0f81a015472bdf769a6d4f"
+dependencies = [
+ "ironrdp-propertyset",
+]
+
+[[package]]
+name = "ironrdp-client"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e2a3b44f8af101cf5a8cc5bf80470d64099c95c553d5597dec55ff38a821243e"
+dependencies = [
+ "anyhow",
+ "futures-util",
+ "ironrdp-cfg",
+ "ironrdp-cliprdr",
+ "ironrdp-cliprdr-native",
+ "ironrdp-connector",
+ "ironrdp-core",
+ "ironrdp-displaycontrol",
+ "ironrdp-dvc",
+ "ironrdp-dvc-com-plugin",
+ "ironrdp-dvc-pipe-proxy",
+ "ironrdp-echo",
+ "ironrdp-graphics",
+ "ironrdp-mstsgu",
+ "ironrdp-pdu",
+ "ironrdp-propertyset",
+ "ironrdp-rdcleanpath",
+ "ironrdp-rdpdr",
+ "ironrdp-rdpsnd",
+ "ironrdp-rdpsnd-native",
+ "ironrdp-session",
+ "ironrdp-svc",
+ "ironrdp-tls",
+ "ironrdp-tokio",
+ "smallvec",
+ "tokio",
+ "tokio-tungstenite",
+ "tracing",
+ "url",
+ "x509-cert",
+]
+
+[[package]]
+name = "ironrdp-cliprdr"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb9050999a1e032f4313788ac5a6d06e897a4f672f1de2ed98683001fc1abf56"
+dependencies = [
+ "bitflags 2.13.0",
+ "ironrdp-core",
+ "ironrdp-pdu",
+ "ironrdp-svc",
+ "tracing",
+]
+
+[[package]]
+name = "ironrdp-cliprdr-native"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "95cc7f249eb8a5c507fba3a5ee2ba57da716d0881c46421eab79e6fab1b51ae5"
+dependencies = [
+ "ironrdp-cliprdr",
+ "ironrdp-core",
+ "tracing",
+ "windows",
+]
+
+[[package]]
+name = "ironrdp-connector"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d5898b3f1fcaca0f9b923b1463e158aeb64dfdec4ac361b7c086492466ff341c"
+dependencies = [
+ "ironrdp-core",
+ "ironrdp-error",
+ "ironrdp-pdu",
+ "ironrdp-svc",
+ "picky",
+ "picky-asn1-der",
+ "picky-asn1-x509",
+ "rand 0.9.4",
+ "sspi",
+ "tracing",
+ "url",
+]
+
+[[package]]
+name = "ironrdp-core"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ef0875b98275068b88652e49ba2e0a1150a1390aad69d26c942c8c59e8ec918e"
+dependencies = [
+ "ironrdp-error",
+]
+
+[[package]]
+name = "ironrdp-displaycontrol"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "74a111a6fd25abbe51b6a15276fe980c6b9eee50a1421224b0c3f45848d45bcf"
+dependencies = [
+ "ironrdp-core",
+ "ironrdp-dvc",
+ "ironrdp-pdu",
+ "ironrdp-svc",
+ "tracing",
+]
+
+[[package]]
+name = "ironrdp-dvc"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a5de64988ddabf96928e2f042e1772a5f7201f0001ea99012129c73a105fc52"
+dependencies = [
+ "ironrdp-core",
+ "ironrdp-pdu",
+ "ironrdp-svc",
+ "tracing",
+]
+
+[[package]]
+name = "ironrdp-dvc-com-plugin"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "db840b1520498074e498c0e0acc2364ca605f7ec3ec05e7aedf1125a7c468f68"
+dependencies = [
+ "ironrdp-core",
+ "ironrdp-dvc",
+ "ironrdp-pdu",
+ "ironrdp-svc",
+ "tracing",
+ "windows",
+ "windows-core",
+]
+
+[[package]]
+name = "ironrdp-dvc-pipe-proxy"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6237014c01ff3fe262e48eff66bdfee8c12dfbd0e6fb03fbcadc78572a0eec8c"
+dependencies = [
+ "async-trait",
+ "ironrdp-core",
+ "ironrdp-dvc",
+ "ironrdp-pdu",
+ "ironrdp-svc",
+ "tokio",
+ "tracing",
+]
+
+[[package]]
+name = "ironrdp-echo"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2ed0c8de080a88b9a3c5dd7978c4c4ca46a5ddbc81315b799000938f743055c0"
+dependencies = [
+ "ironrdp-core",
+ "ironrdp-dvc",
+ "ironrdp-pdu",
+ "tracing",
+]
+
+[[package]]
+name = "ironrdp-error"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cd344ce9518ab83f6f7568ca4f1bc6dc8c55bd2da04cb5ee7b3e8740d5041734"
+
+[[package]]
+name = "ironrdp-graphics"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c7493e426b6a8104cd497e518ba7781a9c7fc9a5f58a9cc0c1111e6d66f63bcc"
+dependencies = [
+ "bit_field",
+ "bitflags 2.13.0",
+ "bitvec",
+ "byteorder",
+ "ironrdp-core",
+ "ironrdp-pdu",
+ "num-derive",
+ "num-traits",
+ "yuv",
+]
+
+[[package]]
+name = "ironrdp-input"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b1658a0c1d2911b767b71c2f9e07550d7a267bffaaaaeeec868d1752c8ec0f4"
+dependencies = [
+ "bitvec",
+ "ironrdp-pdu",
+ "smallvec",
+]
+
+[[package]]
+name = "ironrdp-mstsgu"
+version = "0.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "19371274ea75ac1edb3431b08b823aad0dba48124c8fe7efbc4c3d8a30a22327"
+dependencies = [
+ "base64",
+ "bitflags 2.13.0",
+ "futures-util",
+ "http-body-util",
+ "hyper",
+ "hyper-util",
+ "ironrdp-core",
+ "ironrdp-error",
+ "ironrdp-tls",
+ "log",
+ "tokio",
+ "tokio-tungstenite",
+ "tokio-util",
+ "uuid",
+]
+
+[[package]]
+name = "ironrdp-pdu"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4ccd1179a4d106df1930347701388b5c79bc3725fa7dab4438d57db0d9d19347"
+dependencies = [
+ "bit_field",
+ "bitflags 2.13.0",
+ "byteorder",
+ "der-parser",
+ "ironrdp-core",
+ "ironrdp-error",
+ "md-5 0.10.6",
+ "num-bigint 0.4.8",
+ "num-derive",
+ "num-integer",
+ "num-traits",
+ "pkcs1 0.7.5",
+ "sha1 0.10.6",
+ "tap",
+ "x509-cert",
+]
+
+[[package]]
+name = "ironrdp-propertyset"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "07427e5b1c1ef2cc72cc8be68e1c9816a40923f39d26377d497fa14079120d34"
+
+[[package]]
+name = "ironrdp-rdcleanpath"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6c2ce7c76797b5eeca9f5cca4410e2748f9458c5a11cc41e1e6d5ba475da947"
+dependencies = [
+ "der 0.7.10",
+]
+
+[[package]]
+name = "ironrdp-rdpdr"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ece9e67ccf992eb8ce5ec0416d3950e2e199d4b1e2523f91af192205279fc970"
+dependencies = [
+ "bitflags 2.13.0",
+ "ironrdp-core",
+ "ironrdp-error",
+ "ironrdp-pdu",
+ "ironrdp-svc",
+ "tracing",
+]
+
+[[package]]
+name = "ironrdp-rdpfile"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9dca7b3141f98a7c4d5bb08d228891f359918bc1c62f51e1251940ff0eb0f08d"
+dependencies = [
+ "ironrdp-propertyset",
+]
+
+[[package]]
+name = "ironrdp-rdpsnd"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d1a4f7092ae8fdc0a2f61be8e100277dc6f4ad51b85455dc9e8157979993ea2"
+dependencies = [
+ "bitflags 2.13.0",
+ "ironrdp-core",
+ "ironrdp-pdu",
+ "ironrdp-svc",
+ "tracing",
+]
+
+[[package]]
+name = "ironrdp-rdpsnd-native"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3d2d36d9bb45863f9bc5225bf3bccda125fafb1b225c1f99dbeaeebb258e7dc"
+dependencies = [
+ "bytemuck",
+ "cpal",
+ "ironrdp-error",
+ "ironrdp-rdpsnd",
+ "opus2",
+ "tracing",
+]
+
+[[package]]
+name = "ironrdp-server"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d3922b23ad9f262b932d42fa37df87f7e45c2d12f45433c0cc084f8762fb09a"
+dependencies = [
+ "anyhow",
+ "async-trait",
+ "bytes",
+ "ironrdp-acceptor",
+ "ironrdp-ainput",
+ "ironrdp-async",
+ "ironrdp-cliprdr",
+ "ironrdp-core",
+ "ironrdp-displaycontrol",
+ "ironrdp-dvc",
+ "ironrdp-echo",
+ "ironrdp-graphics",
+ "ironrdp-pdu",
+ "ironrdp-rdpsnd",
+ "ironrdp-svc",
+ "ironrdp-tokio",
+ "qoicoubeh",
+ "rayon",
+ "rustls-pemfile",
+ "tokio",
+ "tokio-rustls",
+ "tracing",
+ "x509-cert",
+ "zstd-safe",
+]
+
+[[package]]
+name = "ironrdp-session"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f1a5a20c24d8ebf47477f9f513201aeb894e7c7f779ea633ece65e42a9f0652"
+dependencies = [
+ "ironrdp-bulk",
+ "ironrdp-core",
+ "ironrdp-displaycontrol",
+ "ironrdp-dvc",
+ "ironrdp-error",
+ "ironrdp-graphics",
+ "ironrdp-pdu",
+ "ironrdp-svc",
+ "qoicoubeh",
+ "tracing",
+ "zstd-safe",
+]
+
+[[package]]
+name = "ironrdp-svc"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "24c36b82ab0f7fef2668fb7004008a0f3c100a3d9a7b18bd4495a71aba55b796"
+dependencies = [
+ "bitflags 2.13.0",
+ "ironrdp-core",
+ "ironrdp-pdu",
+]
+
+[[package]]
+name = "ironrdp-tls"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ea5f0bb732e33159834f06a687f5415dae1a82c71c123c1c3a3689d41ed47645"
+dependencies = [
+ "tokio",
+ "tokio-native-tls",
+ "tokio-rustls",
+ "x509-cert",
+]
+
+[[package]]
+name = "ironrdp-tokio"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7692ac83a98e4b3ac01405e311bbbd5a33683447032986ed92a4a44d46ad6344"
+dependencies = [
+ "ironrdp-async",
+ "ironrdp-connector",
+ "reqwest",
+ "tokio",
+ "url",
+]
+
+[[package]]
+name = "ironrdp-viewer"
+version = "0.1.0"
+dependencies = [
+ "anyhow",
+ "clap",
+ "inquire",
+ "ironrdp",
+ "ironrdp-cfg",
+ "ironrdp-propertyset",
+ "ironrdp-rdpfile",
+ "proc-exit",
+ "raw-window-handle",
+ "semver",
+ "smallvec",
+ "softbuffer",
+ "tap",
+ "tokio",
+ "tracing",
+ "tracing-subscriber",
+ "url",
+ "whoami",
+ "winit",
+]
+
+[[package]]
+name = "is_terminal_polyfill"
+version = "1.70.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695"
+
+[[package]]
+name = "iso7816"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cd3c7e91da489667bb054f9cd2f1c60cc2ac4478a899f403d11dbc62189215b0"
+dependencies = [
+ "heapless",
+]
+
+[[package]]
+name = "iso7816-tlv"
+version = "0.4.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7660d28d24a831d690228a275d544654a30f3b167a8e491cf31af5fe5058b546"
+dependencies = [
+ "untrusted",
+]
+
+[[package]]
+name = "itoa"
+version = "1.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
+
+[[package]]
+name = "jni"
+version = "0.21.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1a87aa2bb7d2af34197c04845522473242e1aa17c12f4935d5856491a7fb8c97"
+dependencies = [
+ "cesu8",
+ "cfg-if",
+ "combine",
+ "jni-sys 0.3.1",
+ "log",
+ "thiserror 1.0.69",
+ "walkdir",
+ "windows-sys 0.45.0",
+]
+
+[[package]]
+name = "jni"
+version = "0.22.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5efd9a482cf3a427f00d6b35f14332adc7902ce91efb778580e180ff90fa3498"
+dependencies = [
+ "cfg-if",
+ "combine",
+ "jni-macros",
+ "jni-sys 0.4.1",
+ "log",
+ "simd_cesu8",
+ "thiserror 2.0.18",
+ "walkdir",
+ "windows-link",
+]
+
+[[package]]
+name = "jni-macros"
+version = "0.22.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a00109accc170f0bdb141fed3e393c565b6f5e072365c3bd58f5b062591560a3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "rustc_version",
+ "simd_cesu8",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "jni-sys"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41a652e1f9b6e0275df1f15b32661cf0d4b78d4d87ddec5e0c3c20f097433258"
+dependencies = [
+ "jni-sys 0.4.1",
+]
+
+[[package]]
+name = "jni-sys"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c6377a88cb3910bee9b0fa88d4f42e1d2da8e79915598f65fb0c7ee14c878af2"
+dependencies = [
+ "jni-sys-macros",
+]
+
+[[package]]
+name = "jni-sys-macros"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "38c0b942f458fe50cdac086d2f946512305e5631e720728f2a61aabcd47a6264"
+dependencies = [
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "jobserver"
+version = "0.1.35"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1c00acbd29eabad4a2392fa0e921c874934dbbf4194312ad20f04a0ed67a3cb3"
+dependencies = [
+ "getrandom 0.4.3",
+ "libc",
+]
+
+[[package]]
+name = "js-sys"
+version = "0.3.103"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "53b44bfcdb3f8d5837a46dae1ca9660a837176eee74a28b229bc626816589102"
+dependencies = [
+ "cfg-if",
+ "futures-util",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "keccak"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9e24a010dd405bd7ed803e5253182815b41bf2e6a80cc3bfc066658e03a198aa"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.3.0",
+]
+
+[[package]]
+name = "lazy_static"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bbd2bcb4c963f2ddae06a2efc7e9f3591312473c50c6685e1f298068316e66fe"
+
+[[package]]
+name = "libc"
+version = "0.2.186"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "68ab91017fe16c622486840e4c83c9a37afeff978bd239b5293d61ece587de66"
+
+[[package]]
+name = "libloading"
+version = "0.8.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7c4b02199fee7c5d21a5ae7d8cfa79a6ef5bb2fc834d6e9058e89c825efdc55"
+dependencies = [
+ "cfg-if",
+ "windows-link",
+]
+
+[[package]]
+name = "libopus_sys"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b81c32f233fb2507347a93f97b9919493be9db7ec2249ce2c3ed0c89ad8edf60"
+dependencies = [
+ "cmake",
+ "log",
+ "pkg-config",
+]
+
+[[package]]
+name = "libredox"
+version = "0.1.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c943259e342f1e06ff2da7a83eabdfe7f92ce10262688dbf1895ff0b3e6e4652"
+dependencies = [
+ "bitflags 2.13.0",
+ "libc",
+ "plain",
+ "redox_syscall 0.9.0",
+]
+
+[[package]]
+name = "libz-sys"
+version = "1.1.29"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85bc9657773828b90eeb625adff10eeac83cc21bbfd8e23a03eaa8a33c9e28d9"
+dependencies = [
+ "cc",
+ "pkg-config",
+ "vcpkg",
+]
+
+[[package]]
+name = "linux-raw-sys"
+version = "0.4.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d26c52dbd32dccf2d10cac7725f8eae5296885fb5703b261f7d0a0739ec807ab"
+
+[[package]]
+name = "linux-raw-sys"
+version = "0.9.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cd945864f07fe9f5371a27ad7b52a172b4b499999f1d97574c9fa68373937e12"
+
+[[package]]
+name = "linux-raw-sys"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53"
+
+[[package]]
+name = "litemap"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92daf443525c4cce67b150400bc2316076100ce0b3686209eb8cf3c31612e6f0"
+
+[[package]]
+name = "litrs"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "11d3d7f243d5c5a8b9bb5d6dd2b1602c0cb0b9db1621bafc7ed66e35ff9fe092"
+
+[[package]]
+name = "lock_api"
+version = "0.4.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "224399e74b87b5f3557511d98dff8b14089b3dadafcab6bb93eab67d3aace965"
+dependencies = [
+ "scopeguard",
+]
+
+[[package]]
+name = "log"
+version = "0.4.33"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ceec5bc11778974d1bcb055b18002eba7f4b3518b6a0081b3af5f21666da9ad"
+
+[[package]]
+name = "mach2"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6a1b95cd5421ec55b445b5ae102f5ea0e768de1f82bd3001e11f426c269c3aea"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "matchers"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d1525a2a28c7f4fa0fc98bb91ae755d1e2d1505079e05539e35bc876b5d65ae9"
+dependencies = [
+ "regex-automata",
+]
+
+[[package]]
+name = "md-5"
+version = "0.10.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d89e7ee0cfbedfc4da3340218492196241d89eefb6dab27de5df917a6d2e78cf"
+dependencies = [
+ "cfg-if",
+ "digest 0.10.7",
+]
+
+[[package]]
+name = "md-5"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "69b6441f590336821bb897fb28fc622898ccceb1d6cea3fde5ea86b090c4de98"
+dependencies = [
+ "cfg-if",
+ "digest 0.11.3",
+]
+
+[[package]]
+name = "md4"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7da5ac363534dce5fabf69949225e174fbf111a498bf0ff794c8ea1fba9f3dda"
+dependencies = [
+ "digest 0.10.7",
+]
+
+[[package]]
+name = "memchr"
+version = "2.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98"
+
+[[package]]
+name = "memmap2"
+version = "0.9.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d1219ed1b7f229ee7104d281dd01d6802fe28bb6e95d292942c4daacdeb798c0"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "minimal-lexical"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "68354c5c6bd36d73ff3feceb05efa59b6acb7626617f4962be322a825e61f79a"
+
+[[package]]
+name = "miniz_oxide"
+version = "0.8.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fa76a2c86f704bdb222d66965fb3d63269ce38518b83cb0575fca855ebb6316"
+dependencies = [
+ "adler2",
+ "simd-adler32",
+]
+
+[[package]]
+name = "mio"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "02bd0af71c67b473010cbbc60715ee815645a4dc942899111f494b4b737d6fda"
+dependencies = [
+ "libc",
+ "log",
+ "wasi 0.11.1+wasi-snapshot-preview1",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "native-tls"
+version = "0.2.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "465500e14ea162429d264d44189adc38b199b62b1c21eea9f69e4b73cb03bbf2"
+dependencies = [
+ "libc",
+ "log",
+ "openssl",
+ "openssl-probe",
+ "openssl-sys",
+ "schannel",
+ "security-framework",
+ "security-framework-sys",
+ "tempfile",
+]
+
+[[package]]
+name = "ndk"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3f42e7bbe13d351b6bead8286a43aac9534b82bd3cc43e47037f012ebfd62d4"
+dependencies = [
+ "bitflags 2.13.0",
+ "jni-sys 0.3.1",
+ "log",
+ "ndk-sys",
+ "num_enum",
+ "raw-window-handle",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "ndk-context"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "27b02d87554356db9e9a873add8782d4ea6e3e58ea071a9adb9a2e8ddb884a8b"
+
+[[package]]
+name = "ndk-sys"
+version = "0.6.0+11769913"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee6cda3051665f1fb8d9e08fc35c96d5a244fb1be711a03b71118828afc9a873"
+dependencies = [
+ "jni-sys 0.3.1",
+]
+
+[[package]]
+name = "nom"
+version = "7.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d273983c5a657a70a3e8f2a01329822f3b8c8172b73826411a55751e404a0a4a"
+dependencies = [
+ "memchr",
+ "minimal-lexical",
+]
+
+[[package]]
+name = "nu-ansi-term"
+version = "0.50.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "num-bigint"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5f6f7833f2cbf2360a6cfd58cd41a53aa7a90bd4c202f5b1c7dd2ed73c57b2c3"
+dependencies = [
+ "autocfg",
+ "num-integer",
+ "num-traits",
+]
+
+[[package]]
+name = "num-bigint"
+version = "0.4.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c89e69e7e0f03bea5ef08013795c25018e101932225a656383bd384495ecc367"
+dependencies = [
+ "num-integer",
+ "num-traits",
+]
+
+[[package]]
+name = "num-conv"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "521739c6d2bac4aa25192232afe6841231376b2b26d4d9fae5ecf8ca5772e441"
+
+[[package]]
+name = "num-derive"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed3955f1a9c7c0c15e092f9c887db08b1fc683305fdf6eb6684f22555355e202"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "num-integer"
+version = "0.1.46"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7969661fd2958a5cb096e56c8e1ad0444ac2bbcd0061bd28660485a44879858f"
+dependencies = [
+ "num-traits",
+]
+
+[[package]]
+name = "num-traits"
+version = "0.2.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "num_enum"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5d0bca838442ec211fa11de3a8b0e0e8f3a4522575b5c4c06ed722e005036f26"
+dependencies = [
+ "num_enum_derive",
+ "rustversion",
+]
+
+[[package]]
+name = "num_enum_derive"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "680998035259dcfcafe653688bf2aa6d3e2dc05e98be6ab46afb089dc84f1df8"
+dependencies = [
+ "proc-macro-crate",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "objc-sys"
+version = "0.3.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdb91bdd390c7ce1a8607f35f3ca7151b65afc0ff5ff3b34fa350f7d7c7e4310"
+
+[[package]]
+name = "objc2"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "46a785d4eeff09c14c487497c162e92766fbb3e4059a71840cecc03d9a50b804"
+dependencies = [
+ "objc-sys",
+ "objc2-encode",
+]
+
+[[package]]
+name = "objc2"
+version = "0.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a12a8ed07aefc768292f076dc3ac8c48f3781c8f2d5851dd3d98950e8c5a89f"
+dependencies = [
+ "objc2-encode",
+]
+
+[[package]]
+name = "objc2-app-kit"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e4e89ad9e3d7d297152b17d39ed92cd50ca8063a89a9fa569046d41568891eff"
+dependencies = [
+ "bitflags 2.13.0",
+ "block2 0.5.1",
+ "libc",
+ "objc2 0.5.2",
+ "objc2-core-data",
+ "objc2-core-image",
+ "objc2-foundation 0.2.2",
+ "objc2-quartz-core 0.2.2",
+]
+
+[[package]]
+name = "objc2-audio-toolbox"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6948501a91121d6399b79abaa33a8aa4ea7857fe019f341b8c23ad6e81b79b08"
+dependencies = [
+ "bitflags 2.13.0",
+ "libc",
+ "objc2 0.6.4",
+ "objc2-core-audio",
+ "objc2-core-audio-types",
+ "objc2-core-foundation",
+ "objc2-foundation 0.3.2",
+]
+
+[[package]]
+name = "objc2-avf-audio"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13a380031deed8e99db00065c45937da434ca987c034e13b87e4441f9e4090be"
+dependencies = [
+ "objc2 0.6.4",
+ "objc2-foundation 0.3.2",
+]
+
+[[package]]
+name = "objc2-cloud-kit"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "74dd3b56391c7a0596a295029734d3c1c5e7e510a4cb30245f8221ccea96b009"
+dependencies = [
+ "bitflags 2.13.0",
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-core-location",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc2-contacts"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a5ff520e9c33812fd374d8deecef01d4a840e7b41862d849513de77e44aa4889"
+dependencies = [
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc2-core-audio"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e1eebcea8b0dbff5f7c8504f3107c68fc061a3eb44932051c8cf8a68d969c3b2"
+dependencies = [
+ "dispatch2",
+ "objc2 0.6.4",
+ "objc2-core-audio-types",
+ "objc2-core-foundation",
+ "objc2-foundation 0.3.2",
+]
+
+[[package]]
+name = "objc2-core-audio-types"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a89f2ec274a0cf4a32642b2991e8b351a404d290da87bb6a9a9d8632490bd1c"
+dependencies = [
+ "bitflags 2.13.0",
+ "objc2 0.6.4",
+]
+
+[[package]]
+name = "objc2-core-data"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "617fbf49e071c178c0b24c080767db52958f716d9eabdf0890523aeae54773ef"
+dependencies = [
+ "bitflags 2.13.0",
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc2-core-foundation"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a180dd8642fa45cdb7dd721cd4c11b1cadd4929ce112ebd8b9f5803cc79d536"
+dependencies = [
+ "bitflags 2.13.0",
+ "block2 0.6.2",
+ "dispatch2",
+ "libc",
+ "objc2 0.6.4",
+]
+
+[[package]]
+name = "objc2-core-graphics"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e022c9d066895efa1345f8e33e584b9f958da2fd4cd116792e15e07e4720a807"
+dependencies = [
+ "bitflags 2.13.0",
+ "dispatch2",
+ "objc2 0.6.4",
+ "objc2-core-foundation",
+ "objc2-io-surface",
+]
+
+[[package]]
+name = "objc2-core-image"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "55260963a527c99f1819c4f8e3b47fe04f9650694ef348ffd2227e8196d34c80"
+dependencies = [
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-foundation 0.2.2",
+ "objc2-metal",
+]
+
+[[package]]
+name = "objc2-core-location"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "000cfee34e683244f284252ee206a27953279d370e309649dc3ee317b37e5781"
+dependencies = [
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-contacts",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc2-encode"
+version = "4.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ef25abbcd74fb2609453eb695bd2f860d389e457f67dc17cafc8b8cbc89d0c33"
+
+[[package]]
+name = "objc2-foundation"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ee638a5da3799329310ad4cfa62fbf045d5f56e3ef5ba4149e7452dcf89d5a8"
+dependencies = [
+ "bitflags 2.13.0",
+ "block2 0.5.1",
+ "dispatch",
+ "libc",
+ "objc2 0.5.2",
+]
+
+[[package]]
+name = "objc2-foundation"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3e0adef53c21f888deb4fa59fc59f7eb17404926ee8a6f59f5df0fd7f9f3272"
+dependencies = [
+ "bitflags 2.13.0",
+ "block2 0.6.2",
+ "libc",
+ "objc2 0.6.4",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-io-surface"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "180788110936d59bab6bd83b6060ffdfffb3b922ba1396b312ae795e1de9d81d"
+dependencies = [
+ "bitflags 2.13.0",
+ "objc2 0.6.4",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-link-presentation"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1a1ae721c5e35be65f01a03b6d2ac13a54cb4fa70d8a5da293d7b0020261398"
+dependencies = [
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-app-kit",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc2-metal"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dd0cba1276f6023976a406a14ffa85e1fdd19df6b0f737b063b95f6c8c7aadd6"
+dependencies = [
+ "bitflags 2.13.0",
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc2-quartz-core"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e42bee7bff906b14b167da2bac5efe6b6a07e6f7c0a21a7308d40c960242dc7a"
+dependencies = [
+ "bitflags 2.13.0",
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-foundation 0.2.2",
+ "objc2-metal",
+]
+
+[[package]]
+name = "objc2-quartz-core"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96c1358452b371bf9f104e21ec536d37a650eb10f7ee379fff67d2e08d537f1f"
+dependencies = [
+ "bitflags 2.13.0",
+ "objc2 0.6.4",
+ "objc2-core-foundation",
+ "objc2-foundation 0.3.2",
+]
+
+[[package]]
+name = "objc2-symbols"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0a684efe3dec1b305badae1a28f6555f6ddd3bb2c2267896782858d5a78404dc"
+dependencies = [
+ "objc2 0.5.2",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc2-system-configuration"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7216bd11cbda54ccabcab84d523dc93b858ec75ecfb3a7d89513fa22464da396"
+dependencies = [
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-ui-kit"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8bb46798b20cd6b91cbd113524c490f1686f4c4e8f49502431415f3512e2b6f"
+dependencies = [
+ "bitflags 2.13.0",
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-cloud-kit",
+ "objc2-core-data",
+ "objc2-core-image",
+ "objc2-core-location",
+ "objc2-foundation 0.2.2",
+ "objc2-link-presentation",
+ "objc2-quartz-core 0.2.2",
+ "objc2-symbols",
+ "objc2-uniform-type-identifiers",
+ "objc2-user-notifications",
+]
+
+[[package]]
+name = "objc2-uniform-type-identifiers"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "44fa5f9748dbfe1ca6c0b79ad20725a11eca7c2218bceb4b005cb1be26273bfe"
+dependencies = [
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc2-user-notifications"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76cfcbf642358e8689af64cee815d139339f3ed8ad05103ed5eaf73db8d84cb3"
+dependencies = [
+ "bitflags 2.13.0",
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-core-location",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "oid"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9c19903c598813dba001b53beeae59bb77ad4892c5c1b9b3500ce4293a0d06c2"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "once_cell"
+version = "1.21.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50"
+
+[[package]]
+name = "once_cell_polyfill"
+version = "1.70.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe"
+
+[[package]]
+name = "openssl"
+version = "0.10.81"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77823a27f0babb03091cb9ed9ef80af3b39dbc82f97e8fa530374b7dafd87a45"
+dependencies = [
+ "bitflags 2.13.0",
+ "cfg-if",
+ "foreign-types 0.3.2",
+ "libc",
+ "openssl-macros",
+ "openssl-sys",
+]
+
+[[package]]
+name = "openssl-macros"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a948666b637a0f465e8564c73e89d4dde00d72d4d473cc972f390fc3dcee7d9c"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "openssl-probe"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7c87def4c32ab89d880effc9e097653c8da5d6ef28e6b539d313baaacfbafcbe"
+
+[[package]]
+name = "openssl-sys"
+version = "0.9.117"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b47e7e6bb2c38cd930d25a23b40fa52e068c10e85f3e03a7f5ba5aaca5713695"
+dependencies = [
+ "cc",
+ "libc",
+ "pkg-config",
+ "vcpkg",
+]
+
+[[package]]
+name = "opus2"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "49521e33fbf825d2abc8d696506c278cb8469d0c6cc05d3785bef5c5f7ee957b"
+dependencies = [
+ "libopus_sys",
+]
+
+[[package]]
+name = "orbclient"
+version = "0.3.55"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5df339f526ea9a60e371768d50efc2f2508c7203290731565d1f7a6f71d21747"
+dependencies = [
+ "libc",
+ "libredox",
+]
+
+[[package]]
+name = "owned_ttf_parser"
+version = "0.25.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "36820e9051aca1014ddc75770aab4d68bc1e9e632f0f5627c4086bc216fb583b"
+dependencies = [
+ "ttf-parser",
+]
+
+[[package]]
+name = "p256"
+version = "0.14.0-rc.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c855a8d2ffd346aa03122626f22e96e3aa75e3bfe64e6bf6cb82f71821ed6ae7"
+dependencies = [
+ "ecdsa",
+ "elliptic-curve",
+ "primefield",
+ "primeorder",
+ "sha2",
+]
+
+[[package]]
+name = "p384"
+version = "0.14.0-rc.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "62941b68907ddf996ac20f0debf700c236ccc3d874637731a93c631129ca042f"
+dependencies = [
+ "ecdsa",
+ "elliptic-curve",
+ "fiat-crypto",
+ "primefield",
+ "primeorder",
+ "sha2",
+]
+
+[[package]]
+name = "p521"
+version = "0.14.0-rc.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0dd6f2fe6e76c8d5e8828e92aafa463777d1e72e70b78acc724214757e92479a"
+dependencies = [
+ "base16ct",
+ "ecdsa",
+ "elliptic-curve",
+ "primefield",
+ "primeorder",
+ "sha2",
+]
+
+[[package]]
+name = "parking_lot"
+version = "0.12.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "93857453250e3077bd71ff98b6a65ea6621a19bb0f559a85248955ac12c45a1a"
+dependencies = [
+ "lock_api",
+ "parking_lot_core",
+]
+
+[[package]]
+name = "parking_lot_core"
+version = "0.9.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2621685985a2ebf1c516881c026032ac7deafcda1a2c9b7850dc81e3dfcb64c1"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "redox_syscall 0.5.18",
+ "smallvec",
+ "windows-link",
+]
+
+[[package]]
+name = "pbkdf2"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "112d82ceb8c5bf524d9af484d4e4970c9fd5a0cc15ba14ad93dccd28873b0629"
+dependencies = [
+ "digest 0.11.3",
+ "hmac",
+]
+
+[[package]]
+name = "pem-rfc7468"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "88b39c9bfcfc231068454382784bb460aae594343fb030d46e9f50a645418412"
+dependencies = [
+ "base64ct",
+]
+
+[[package]]
+name = "pem-rfc7468"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6305423e0e7738146434843d1694d621cce767262b2a86910beab705e4493d9"
+dependencies = [
+ "base64ct",
+]
+
+[[package]]
+name = "percent-encoding"
+version = "2.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220"
+
+[[package]]
+name = "picky"
+version = "7.0.0-rc.25"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c1ae9cd78eb1d61be4790713d28368cf71c844218fcd91542768805423f02666"
+dependencies = [
+ "aes",
+ "aes-gcm",
+ "aes-kw",
+ "base64",
+ "cbc",
+ "crypto-bigint",
+ "crypto-common 0.2.2",
+ "ctr",
+ "curve25519-dalek",
+ "des",
+ "digest 0.11.3",
+ "ecdsa",
+ "ed25519-dalek",
+ "hex",
+ "hmac",
+ "http",
+ "inout",
+ "md-5 0.11.0",
+ "p256",
+ "p384",
+ "p521",
+ "pbkdf2",
+ "picky-asn1",
+ "picky-asn1-der",
+ "picky-asn1-x509",
+ "pkcs1 0.8.0-rc.4",
+ "primeorder",
+ "rand 0.10.2",
+ "rand_core 0.10.1",
+ "rc2",
+ "rsa",
+ "rustcrypto-ff",
+ "rustcrypto-ff_derive",
+ "rustcrypto-group",
+ "serde",
+ "serde_json",
+ "sha1 0.11.0",
+ "sha2",
+ "sha3",
+ "thiserror 2.0.18",
+ "x25519-dalek",
+ "zeroize",
+]
+
+[[package]]
+name = "picky-asn1"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2ff038f9360b934342fb3c0a1d6e82c438a2624b51c3c6e3e6d7cf252b6f3ee3"
+dependencies = [
+ "oid",
+ "serde",
+ "serde_bytes",
+ "time",
+ "zeroize",
+]
+
+[[package]]
+name = "picky-asn1-der"
+version = "0.5.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d413165e4bf7f808b9a27cbaba657657a2921f0965db833f488c4d4be96dcd2e"
+dependencies = [
+ "picky-asn1",
+ "serde",
+ "serde_bytes",
+]
+
+[[package]]
+name = "picky-asn1-x509"
+version = "0.15.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "859d4117bd1b1dc5646359ee7243c50c5000c0920ea2d1fb120335a2f4c684b8"
+dependencies = [
+ "base64",
+ "crypto-bigint",
+ "oid",
+ "picky-asn1",
+ "picky-asn1-der",
+ "serde",
+ "widestring",
+ "zeroize",
+]
+
+[[package]]
+name = "picky-krb"
+version = "0.12.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2d188f3192356068dbdba54bddbca6fd0f7a09565d3861eeb8efe1ab77ae8e97"
+dependencies = [
+ "aes",
+ "block-padding",
+ "byteorder",
+ "cbc",
+ "cipher",
+ "crypto-bigint",
+ "des",
+ "hmac",
+ "inout",
+ "oid",
+ "pbkdf2",
+ "picky-asn1",
+ "picky-asn1-der",
+ "picky-asn1-x509",
+ "rand 0.10.2",
+ "rand_core 0.10.1",
+ "serde",
+ "sha1 0.11.0",
+ "thiserror 2.0.18",
+ "uuid",
+]
+
+[[package]]
+name = "pin-project"
+version = "1.1.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2466b2336ed02bcdca6b294417127b90ec92038d1d5c4fbeac971a922e0e0924"
+dependencies = [
+ "pin-project-internal",
+]
+
+[[package]]
+name = "pin-project-internal"
+version = "1.1.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c96395f0a926bc13b1c17622aaddda1ecb55d49c8f1bf9777e4d877800a43f8b"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "pin-project-lite"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a89322df9ebe1c1578d689c92318e070967d1042b512afbe49518723f4e6d5cd"
+
+[[package]]
+name = "pin-utils"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b870d8c151b6f2fb93e84a13146138f05d02ed11c7e7c54f8826aaaf7c9f184"
+
+[[package]]
+name = "pkcs1"
+version = "0.7.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8ffb9f10fa047879315e6625af03c164b16962a5368d724ed16323b68ace47f"
+dependencies = [
+ "der 0.7.10",
+ "spki 0.7.3",
+]
+
+[[package]]
+name = "pkcs1"
+version = "0.8.0-rc.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "986d2e952779af96ea048f160fd9194e1751b4faea78bcf3ceb456efe008088e"
+dependencies = [
+ "der 0.8.1",
+ "spki 0.8.0",
+]
+
+[[package]]
+name = "pkcs8"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "451913da69c775a56034ea8d9003d27ee8948e12443eae7c038ba100a4f21cb7"
+dependencies = [
+ "der 0.8.1",
+ "spki 0.8.0",
+]
+
+[[package]]
+name = "pkg-config"
+version = "0.3.33"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "19f132c84eca552bf34cab8ec81f1c1dcc229b811638f9d283dceabe58c5569e"
+
+[[package]]
+name = "plain"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b4596b6d070b27117e987119b4dac604f3c58cfb0b191112e24771b2faeac1a6"
+
+[[package]]
+name = "polling"
+version = "3.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5d0e4f59085d47d8241c88ead0f274e8a0cb551f3625263c05eb8dd897c34218"
+dependencies = [
+ "cfg-if",
+ "concurrent-queue",
+ "hermit-abi",
+ "pin-project-lite",
+ "rustix 1.1.4",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "polyval"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7dfc63250416fea14f5749b90725916a6c903f599d51cb635aa7a52bfd03eede"
+dependencies = [
+ "cpubits",
+ "cpufeatures 0.3.0",
+ "universal-hash",
+]
+
+[[package]]
+name = "potential_utf"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0103b1cef7ec0cf76490e969665504990193874ea05c85ff9bab8b911d0a0564"
+dependencies = [
+ "zerovec",
+]
+
+[[package]]
+name = "powerfmt"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "439ee305def115ba05938db6eb1644ff94165c5ab5e9420d1c1bcedbba909391"
+
+[[package]]
+name = "ppv-lite86"
+version = "0.2.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9"
+dependencies = [
+ "zerocopy",
+]
+
+[[package]]
+name = "primefield"
+version = "0.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c555a6e4eb7d4e158fcb028c835c3b8642206ddc279b5c6b202ef9a8bdb592f4"
+dependencies = [
+ "crypto-bigint",
+ "crypto-common 0.2.2",
+ "ff",
+ "rand_core 0.10.1",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "primeorder"
+version = "0.14.0-rc.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4e56e6d67fdf5744e9e245ae571450fe584b91f5af261d0e40163b618e53a1f6"
+dependencies = [
+ "elliptic-curve",
+ "once_cell",
+ "primefield",
+ "serdect",
+]
+
+[[package]]
+name = "proc-exit"
+version = "2.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77a5390699eb9ac50677729fda96fb8339d4629f257cc6cfa6eaa673730f8f63"
+
+[[package]]
+name = "proc-macro-crate"
+version = "3.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e67ba7e9b2b56446f1d419b1d807906278ffa1a658a8a5d8a39dcb1f5a78614f"
+dependencies = [
+ "toml_edit",
+]
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.106"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "qoicoubeh"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9b82aa3fef8a980075775b8c46f874823b5b4a15de327d2dbb3b6fd818480ba"
+dependencies = [
+ "bytemuck",
+]
+
+[[package]]
+name = "quick-xml"
+version = "0.39.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdcc8dd4e2f670d309a5f0e83fe36dfdc05af317008fea29144da1a2ac858e5e"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.46"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dfbc457d0c7a0759a614551b11a6409e5951f6c7537be1f1b7682b9ae9230368"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "r-efi"
+version = "5.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
+
+[[package]]
+name = "r-efi"
+version = "6.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
+
+[[package]]
+name = "radium"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc33ff2d4973d518d823d61aa239014831e521c75da58e3df4840d3f47749d09"
+
+[[package]]
+name = "rand"
+version = "0.9.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "44c5af06bb1b7d3216d91932aed5265164bf384dc89cd6ba05cf59a35f5f76ea"
+dependencies = [
+ "rand_chacha",
+ "rand_core 0.9.5",
+]
+
+[[package]]
+name = "rand"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c7f5fa3a058cd35567ef9bfa5e75732bee0f9e4c55fa90477bef2dfcdbc4be80"
+dependencies = [
+ "chacha20",
+ "getrandom 0.4.3",
+ "rand_core 0.10.1",
+]
+
+[[package]]
+name = "rand_chacha"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb"
+dependencies = [
+ "ppv-lite86",
+ "rand_core 0.9.5",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76afc826de14238e6e8c374ddcc1fa19e374fd8dd986b0d2af0d02377261d83c"
+dependencies = [
+ "getrandom 0.3.4",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "63b8176103e19a2643978565ca18b50549f6101881c443590420e4dc998a3c69"
+
+[[package]]
+name = "raw-window-handle"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "20675572f6f24e9e76ef639bc5552774ed45f1c30e2951e1e99c59888861c539"
+
+[[package]]
+name = "rayon"
+version = "1.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fb39b166781f92d482534ef4b4b1b2568f42613b53e5b6c160e24cfbfa30926d"
+dependencies = [
+ "either",
+ "rayon-core",
+]
+
+[[package]]
+name = "rayon-core"
+version = "1.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "22e18b0f0062d30d4230b2e85ff77fdfe4326feb054b9783a3460d8435c8ab91"
+dependencies = [
+ "crossbeam-deque",
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "rc2"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ceda21af1ae61033b63175653a1af86cae399d79cd03ca80ba347eb3a6c4a7fe"
+dependencies = [
+ "cipher",
+]
+
+[[package]]
+name = "redox_syscall"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4722d768eff46b75989dd134e5c353f0d6296e5aaa3132e776cbdb56be7731aa"
+dependencies = [
+ "bitflags 1.3.2",
+]
+
+[[package]]
+name = "redox_syscall"
+version = "0.5.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed2bf2547551a7053d6fdfafda3f938979645c44812fbfcda098faae3f1a362d"
+dependencies = [
+ "bitflags 2.13.0",
+]
+
+[[package]]
+name = "redox_syscall"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c5102a6aaa05aa011a238e178e6bca86d2cb56fc9f586d37cb80f5bca6e07759"
+dependencies = [
+ "bitflags 2.13.0",
+]
+
+[[package]]
+name = "regex-automata"
+version = "0.4.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1f388202e4b80542a0921078cc23b6333bcf1409c1e3f86404cae4766a6131db"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-syntax"
+version = "0.8.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d6f6ff9a378485b298a5286656da665ba74413d36db0979633275d2e708145d4"
+
+[[package]]
+name = "reqwest"
+version = "0.12.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eddd3ca559203180a307f12d114c268abf583f59b03cb906fd0b3ff8646c1147"
+dependencies = [
+ "base64",
+ "bytes",
+ "futures-core",
+ "h2",
+ "http",
+ "http-body",
+ "http-body-util",
+ "hyper",
+ "hyper-rustls",
+ "hyper-util",
+ "js-sys",
+ "log",
+ "percent-encoding",
+ "pin-project-lite",
+ "serde",
+ "serde_json",
+ "serde_urlencoded",
+ "sync_wrapper",
+ "tokio",
+ "tower",
+ "tower-http",
+ "tower-service",
+ "url",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+]
+
+[[package]]
+name = "rfc6979"
+version = "0.6.0-pre.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9935425142ac6e252364413291d96c8bc9898d0876a801824c7af4eae397b689"
+dependencies = [
+ "ctutils",
+ "hmac",
+]
+
+[[package]]
+name = "ring"
+version = "0.17.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4689e6c2294d81e88dc6261c768b63bc4fcdb852be6d1352498b114f61383b7"
+dependencies = [
+ "cc",
+ "cfg-if",
+ "getrandom 0.2.17",
+ "libc",
+ "untrusted",
+ "windows-sys 0.52.0",
+]
+
+[[package]]
+name = "rsa"
+version = "0.10.0-rc.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "30b2aa4ba0d89f73d1e332df05be0eeab8840351c36ca5654341dfdb57bb3caf"
+dependencies = [
+ "const-oid 0.10.2",
+ "crypto-bigint",
+ "crypto-primes",
+ "digest 0.11.3",
+ "pkcs1 0.8.0-rc.4",
+ "pkcs8",
+ "rand_core 0.10.1",
+ "signature",
+ "spki 0.8.0",
+ "zeroize",
+]
+
+[[package]]
+name = "rustc_version"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92"
+dependencies = [
+ "semver",
+]
+
+[[package]]
+name = "rustcrypto-ff"
+version = "0.14.0-rc.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fd2a8adb347447693cd2ba0d218c4b66c62da9b0a5672b17b981e4291ec65ff6"
+dependencies = [
+ "bitvec",
+ "rand_core 0.10.1",
+ "rustcrypto-ff_derive",
+ "subtle",
+]
+
+[[package]]
+name = "rustcrypto-ff_derive"
+version = "0.14.0-rc.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4cda22ea03582974ab5687fc131eba2dc78e258e7eef4d7e01bcd0522ed79f66"
+dependencies = [
+ "addchain",
+ "num-bigint 0.3.3",
+ "num-integer",
+ "num-traits",
+ "proc-macro2",
+ "quote",
+ "syn 1.0.109",
+]
+
+[[package]]
+name = "rustcrypto-group"
+version = "0.14.0-rc.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "369f9b61aa45933c062c9f6b5c3c50ab710687eca83dd3802653b140b43f85ed"
+dependencies = [
+ "rand_core 0.10.1",
+ "rustcrypto-ff",
+ "subtle",
+]
+
+[[package]]
+name = "rusticata-macros"
+version = "4.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "faf0c4a6ece9950b9abdb62b1cfcf2a68b3b67a10ba445b3bb85be2a293d0632"
+dependencies = [
+ "nom",
+]
+
+[[package]]
+name = "rustix"
+version = "0.38.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fdb5bc1ae2baa591800df16c9ca78619bf65c0488b41b96ccec5d11220d8c154"
+dependencies = [
+ "bitflags 2.13.0",
+ "errno",
+ "libc",
+ "linux-raw-sys 0.4.15",
+ "windows-sys 0.59.0",
+]
+
+[[package]]
+name = "rustix"
+version = "1.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6fe4565b9518b83ef4f91bb47ce29620ca828bd32cb7e408f0062e9930ba190"
+dependencies = [
+ "bitflags 2.13.0",
+ "errno",
+ "libc",
+ "linux-raw-sys 0.12.1",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "rustls"
+version = "0.23.41"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6b92b125634d9b795e7beca796cc790df15a7fb38323bf3196fda83292d06b1f"
+dependencies = [
+ "aws-lc-rs",
+ "log",
+ "once_cell",
+ "rustls-pki-types",
+ "rustls-webpki",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-native-certs"
+version = "0.8.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dab5152771c58876a2146916e53e35057e1a4dfa2b9df0f0305b07f611fdea4d"
+dependencies = [
+ "openssl-probe",
+ "rustls-pki-types",
+ "schannel",
+ "security-framework",
+]
+
+[[package]]
+name = "rustls-pemfile"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dce314e5fee3f39953d46bb63bb8a46d40c2f8fb7cc5a3b6cab2bde9721d6e50"
+dependencies = [
+ "rustls-pki-types",
+]
+
+[[package]]
+name = "rustls-pki-types"
+version = "1.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "764899a24af3980067ee14bc143654f297b22eaebfe3c7b6b211920a5a59b046"
+dependencies = [
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-webpki"
+version = "0.103.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "61c429a8649f110dddef65e2a5ad240f747e85f7758a6bccc7e5777bd33f756e"
+dependencies = [
+ "aws-lc-rs",
+ "ring",
+ "rustls-pki-types",
+ "untrusted",
+]
+
+[[package]]
+name = "rustversion"
+version = "1.0.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf54715a573b99ac80df0bc206da022bcd442c974952c7b9720069370852e21f"
+
+[[package]]
+name = "ryu"
+version = "1.0.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9774ba4a74de5f7b1c1451ed6cd5285a32eddb5cccb8cc655a4e50009e06477f"
+
+[[package]]
+name = "same-file"
+version = "1.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "93fc1dc3aaa9bfed95e02e6eadabb4baf7e3078b0bd1b4d7b6b0b68378900502"
+dependencies = [
+ "winapi-util",
+]
+
+[[package]]
+name = "schannel"
+version = "0.1.29"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "91c1b7e4904c873ef0710c1f407dde2e6287de2bebc1bbbf7d430bb7cbffd939"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "scoped-tls"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e1cf6437eb19a8f4a6cc0f7dca544973b0b78843adbfeb3683d1a94a0024a294"
+
+[[package]]
+name = "scopeguard"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"
+
+[[package]]
+name = "sctk-adwaita"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6277f0217056f77f1d8f49f2950ac6c278c0d607c45f5ee99328d792ede24ec"
+dependencies = [
+ "ab_glyph",
+ "log",
+ "memmap2",
+ "smithay-client-toolkit",
+ "tiny-skia",
+]
+
+[[package]]
+name = "sec1"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d56d437c2f19203ce5f7122e507831de96f3d2d4d3be5af44a0b0a09d8a80e4d"
+dependencies = [
+ "base16ct",
+ "ctutils",
+ "der 0.8.1",
+ "hybrid-array",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "secrecy"
+version = "0.10.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e891af845473308773346dc847b2c23ee78fe442e0472ac50e22a18a93d3ae5a"
+dependencies = [
+ "zeroize",
+]
+
+[[package]]
+name = "security-framework"
+version = "3.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7f4bc775c73d9a02cde8bf7b2ec4c9d12743edf609006c7facc23998404cd1d"
+dependencies = [
+ "bitflags 2.13.0",
+ "core-foundation 0.10.1",
+ "core-foundation-sys",
+ "libc",
+ "security-framework-sys",
+]
+
+[[package]]
+name = "security-framework-sys"
+version = "2.17.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ce2691df843ecc5d231c0b14ece2acc3efb62c0a398c7e1d875f3983ce020e3"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "semver"
+version = "1.0.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd"
+
+[[package]]
+name = "serde"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
+dependencies = [
+ "serde_core",
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_bytes"
+version = "0.11.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a5d440709e79d88e51ac01c4b72fc6cb7314017bb7da9eeff678aa94c10e3ea8"
+dependencies = [
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "serde_core"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
+dependencies = [
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_derive"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "serde_json"
+version = "1.0.150"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e8014e44b4736ed0538adeecded0fce2a272f22dc9578a7eb6b2d9993c74cfb9"
+dependencies = [
+ "itoa",
+ "memchr",
+ "serde",
+ "serde_core",
+ "zmij",
+]
+
+[[package]]
+name = "serde_urlencoded"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3491c14715ca2294c4d6a88f15e84739788c1d030eed8c110436aafdaa2f3fd"
+dependencies = [
+ "form_urlencoded",
+ "itoa",
+ "ryu",
+ "serde",
+]
+
+[[package]]
+name = "serdect"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "66cf8fedced2fcf12406bcb34223dffb92eaf34908ede12fed414c82b7f00b3e"
+dependencies = [
+ "base16ct",
+ "serde",
+]
+
+[[package]]
+name = "sha1"
+version = "0.10.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3bf829a2d51ab4a5ddf1352d8470c140cadc8301b2ae1789db023f01cedd6ba"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.2.17",
+ "digest 0.10.7",
+]
+
+[[package]]
+name = "sha1"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "aacc4cc499359472b4abe1bf11d0b12e688af9a805fa5e3016f9a386dc2d0214"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.3.0",
+ "digest 0.11.3",
+]
+
+[[package]]
+name = "sha2"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "446ba717509524cb3f22f17ecc096f10f4822d76ab5c0b9822c5f9c284e825f4"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.3.0",
+ "digest 0.11.3",
+]
+
+[[package]]
+name = "sha3"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bc9bad02c26382724b2d2692c6f179285e4b54eeecd7968f52a50059c3c11759"
+dependencies = [
+ "digest 0.11.3",
+ "keccak",
+ "sponge-cursor",
+]
+
+[[package]]
+name = "sharded-slab"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f40ca3c46823713e0d4209592e8d6e826aa57e928f09752619fc696c499637f6"
+dependencies = [
+ "lazy_static",
+]
+
+[[package]]
+name = "shlex"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8fadd59c855ef2080decdef8ff161eb6661b86933c9d82e5ba29dc602a55aba"
+
+[[package]]
+name = "signal-hook"
+version = "0.3.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d881a16cf4426aa584979d30bd82cb33429027e42122b169753d6ef1085ed6e2"
+dependencies = [
+ "libc",
+ "signal-hook-registry",
+]
+
+[[package]]
+name = "signal-hook-mio"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b75a19a7a740b25bc7944bdee6172368f988763b744e3d4dfe753f6b4ece40cc"
+dependencies = [
+ "libc",
+ "mio",
+ "signal-hook",
+]
+
+[[package]]
+name = "signal-hook-registry"
+version = "1.4.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c4db69cba1110affc0e9f7bcd48bbf87b3f4fc7c61fc9155afd4c469eb3d6c1b"
+dependencies = [
+ "errno",
+ "libc",
+]
+
+[[package]]
+name = "signature"
+version = "3.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "28d567dcbaf0049cb8ac2608a76cd95ff9e4412e1899d389ee400918ca7537f5"
+dependencies = [
+ "digest 0.11.3",
+ "rand_core 0.10.1",
+]
+
+[[package]]
+name = "simd-adler32"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "703d5c7ef118737c72f1af64ad2f6f8c5e1921f818cdcb97b8fe6fc69bf66214"
+
+[[package]]
+name = "simd_cesu8"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94f90157bb87cddf702797c5dadfa0be7d266cdf49e22da2fcaa32eff75b2c33"
+dependencies = [
+ "rustc_version",
+ "simdutf8",
+]
+
+[[package]]
+name = "simdutf8"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3a9fe34e3e7a50316060351f37187a3f546bce95496156754b601a5fa71b76e"
+
+[[package]]
+name = "slab"
+version = "0.4.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5"
+
+[[package]]
+name = "smallvec"
+version = "1.15.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ed6a63f02c8539c91a8685a86f4099661ba3da017932f6ebbea6de3f0fa7c90"
+
+[[package]]
+name = "smithay-client-toolkit"
+version = "0.19.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3457dea1f0eb631b4034d61d4d8c32074caa6cd1ab2d59f2327bd8461e2c0016"
+dependencies = [
+ "bitflags 2.13.0",
+ "calloop",
+ "calloop-wayland-source",
+ "cursor-icon",
+ "libc",
+ "log",
+ "memmap2",
+ "rustix 0.38.44",
+ "thiserror 1.0.69",
+ "wayland-backend",
+ "wayland-client",
+ "wayland-csd-frame",
+ "wayland-cursor",
+ "wayland-protocols",
+ "wayland-protocols-wlr",
+ "wayland-scanner",
+ "xkeysym",
+]
+
+[[package]]
+name = "smol_str"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dd538fb6910ac1099850255cf94a94df6551fbdd602454387d0adb2d1ca6dead"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "socket2"
+version = "0.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52d1cfed4120b4d927bf7c0f86d2087a4a7d6027c906d9f9d525a80573b9be51"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "softbuffer"
+version = "0.4.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "aac18da81ebbf05109ab275b157c22a653bb3c12cf884450179942f81bcbf6c3"
+dependencies = [
+ "as-raw-xcb-connection",
+ "bytemuck",
+ "drm",
+ "fastrand",
+ "js-sys",
+ "memmap2",
+ "ndk",
+ "objc2 0.6.4",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+ "objc2-foundation 0.3.2",
+ "objc2-quartz-core 0.3.2",
+ "raw-window-handle",
+ "redox_syscall 0.5.18",
+ "rustix 1.1.4",
+ "tiny-xlib",
+ "tracing",
+ "wasm-bindgen",
+ "wayland-backend",
+ "wayland-client",
+ "wayland-sys",
+ "web-sys",
+ "windows-sys 0.61.2",
+ "x11rb",
+]
+
+[[package]]
+name = "spin"
+version = "0.9.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6980e8d7511241f8acf4aebddbb1ff938df5eebe98691418c4468d0b72a96a67"
+dependencies = [
+ "lock_api",
+]
+
+[[package]]
+name = "spki"
+version = "0.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d"
+dependencies = [
+ "base64ct",
+ "der 0.7.10",
+]
+
+[[package]]
+name = "spki"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d9efca8738c78ee9484207732f728b1ef517bbb1833d6fc0879ca898a522f6f"
+dependencies = [
+ "base64ct",
+ "der 0.8.1",
+]
+
+[[package]]
+name = "sponge-cursor"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a0219bd7d979d58245a4f41f695e1ac9f8befdffadd7f61f1bae9e39abc6620"
+
+[[package]]
+name = "sspi"
+version = "0.21.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "15294fb005e36e0b0871d8fc0a4f6aac19f9f5440baee229a9a2b2d7de5ed484"
+dependencies = [
+ "async-dnssd",
+ "async-recursion",
+ "bitflags 2.13.0",
+ "bytemuck",
+ "byteorder",
+ "cfg-if",
+ "crypto-bigint",
+ "crypto-mac",
+ "cryptoki",
+ "curve25519-dalek",
+ "ed25519-dalek",
+ "futures",
+ "getrandom 0.3.4",
+ "hmac",
+ "md-5 0.11.0",
+ "md4",
+ "num-derive",
+ "num-traits",
+ "oid",
+ "p256",
+ "p384",
+ "p521",
+ "picky",
+ "picky-asn1",
+ "picky-asn1-der",
+ "picky-asn1-x509",
+ "picky-krb",
+ "pkcs1 0.8.0-rc.4",
+ "primeorder",
+ "rand 0.10.2",
+ "rand_core 0.10.1",
+ "rsa",
+ "rustcrypto-ff",
+ "rustcrypto-ff_derive",
+ "rustcrypto-group",
+ "rustls",
+ "serde",
+ "sha1 0.11.0",
+ "sha2",
+ "time",
+ "tokio",
+ "tracing",
+ "url",
+ "uuid",
+ "widestring",
+ "windows",
+ "windows-registry",
+ "winscard",
+ "zeroize",
+]
+
+[[package]]
+name = "stable_deref_trait"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
+
+[[package]]
+name = "strict-num"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6637bab7722d379c8b41ba849228d680cc12d0a45ba1fa2b48f2a30577a06731"
+
+[[package]]
+name = "strsim"
+version = "0.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
+
+[[package]]
+name = "subtle"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"
+
+[[package]]
+name = "syn"
+version = "1.0.109"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b64191b275b66ffe2469e8af2c1cfe3bafa67b529ead792a6d0160888b4237"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "syn"
+version = "2.0.118"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1b9ae57f904213ebb649ce6895b8a66c66f0203b9319718f69a5612a065b1422"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "sync_wrapper"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0bf256ce5efdfa370213c1dabab5935a12e49f2c58d15e9eac2870d3b4f27263"
+dependencies = [
+ "futures-core",
+]
+
+[[package]]
+name = "synstructure"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "728a70f3dbaf5bab7f0c4b1ac8d7ae5ea60a4b5549c8a5914361c99147a709d2"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "system-configuration"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a13f3d0daba03132c0aa9767f98351b3488edc2c100cda2d2ec2b04f3d8d3c8b"
+dependencies = [
+ "bitflags 2.13.0",
+ "core-foundation 0.9.4",
+ "system-configuration-sys",
+]
+
+[[package]]
+name = "system-configuration-sys"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e1d1b10ced5ca923a1fcb8d03e96b8d3268065d724548c0211415ff6ac6bac4"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "tap"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "55937e1799185b12863d447f42597ed69d9928686b8d88a1df17376a097d8369"
+
+[[package]]
+name = "tempfile"
+version = "3.27.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd"
+dependencies = [
+ "fastrand",
+ "getrandom 0.4.3",
+ "once_cell",
+ "rustix 1.1.4",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "thiserror"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6aaf5339b578ea85b50e080feb250a3e8ae8cfcdff9a461c9ec2904bc923f52"
+dependencies = [
+ "thiserror-impl 1.0.69",
+]
+
+[[package]]
+name = "thiserror"
+version = "2.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4288b5bcbc7920c07a1149a35cf9590a2aa808e0bc1eafaade0b80947865fbc4"
+dependencies = [
+ "thiserror-impl 2.0.18",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "2.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebc4ee7f67670e9b64d05fa4253e753e016c6c95ff35b89b7941d6b856dec1d5"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "thread_local"
+version = "1.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f60246a4944f24f6e018aa17cdeffb7818b76356965d03b07d6a9886e8962185"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "time"
+version = "0.3.53"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "18dfaaeddcb932337b5e7866ee7d0ce9b76d2fd092997146f187ec09b4558a50"
+dependencies = [
+ "deranged",
+ "js-sys",
+ "num-conv",
+ "powerfmt",
+ "serde_core",
+ "time-core",
+ "time-macros",
+]
+
+[[package]]
+name = "time-core"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9e1c906769ad99c88eaa54e728060edef082f8e358ff32030cb7c7d315e81109"
+
+[[package]]
+name = "time-macros"
+version = "0.2.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c431b87111666e491a90baa837f914fb45cd5dc3c268591b0220ff5057f2085f"
+dependencies = [
+ "num-conv",
+ "time-core",
+]
+
+[[package]]
+name = "tiny-skia"
+version = "0.11.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "83d13394d44dae3207b52a326c0c85a8bf87f1541f23b0d143811088497b09ab"
+dependencies = [
+ "arrayref",
+ "arrayvec",
+ "bytemuck",
+ "cfg-if",
+ "log",
+ "tiny-skia-path",
+]
+
+[[package]]
+name = "tiny-skia-path"
+version = "0.11.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9c9e7fc0c2e86a30b117d0462aa261b72b7a99b7ebd7deb3a14ceda95c5bdc93"
+dependencies = [
+ "arrayref",
+ "bytemuck",
+ "strict-num",
+]
+
+[[package]]
+name = "tiny-xlib"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a90a0ca3ee6a69f2ad28fd11621a4c3f03b371f366be500b64df260c4ffbafb4"
+dependencies = [
+ "as-raw-xcb-connection",
+ "ctor",
+ "libloading",
+ "pkg-config",
+ "tracing",
+]
+
+[[package]]
+name = "tinystr"
+version = "0.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8323304221c2a851516f22236c5722a72eaa19749016521d6dff0824447d96d"
+dependencies = [
+ "displaydoc",
+ "zerovec",
+]
+
+[[package]]
+name = "tls_codec"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0de2e01245e2bb89d6f05801c564fa27624dbd7b1846859876c7dad82e90bf6b"
+dependencies = [
+ "tls_codec_derive",
+ "zeroize",
+]
+
+[[package]]
+name = "tls_codec_derive"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2d2e76690929402faae40aebdda620a2c0e25dd6d3b9afe48867dfd95991f4bd"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "tokio"
+version = "1.52.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8fc7f01b389ac15039e4dc9531aa973a135d7a4135281b12d7c1bc79fd57fffe"
+dependencies = [
+ "bytes",
+ "libc",
+ "mio",
+ "parking_lot",
+ "pin-project-lite",
+ "signal-hook-registry",
+ "socket2",
+ "tokio-macros",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "tokio-macros"
+version = "2.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "385a6cb71ab9ab790c5fe8d67f1645e6c450a7ce006a33de03daa956cf70a496"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "tokio-native-tls"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bbae76ab933c85776efabc971569dd6119c580d8f5d448769dec1764bf796ef2"
+dependencies = [
+ "native-tls",
+ "tokio",
+]
+
+[[package]]
+name = "tokio-rustls"
+version = "0.26.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1729aa945f29d91ba541258c8df89027d5792d85a8841fb65e8bf0f4ede4ef61"
+dependencies = [
+ "rustls",
+ "tokio",
+]
+
+[[package]]
+name = "tokio-tungstenite"
+version = "0.29.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f72a05e828585856dacd553fba484c242c46e391fb0e58917c942ee9202915c"
+dependencies = [
+ "futures-util",
+ "log",
+ "native-tls",
+ "rustls",
+ "rustls-native-certs",
+ "rustls-pki-types",
+ "tokio",
+ "tokio-native-tls",
+ "tokio-rustls",
+ "tungstenite",
+]
+
+[[package]]
+name = "tokio-util"
+version = "0.7.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ae9cec805b01e8fc3fd2fe289f89149a9b66dd16786abd8b19cfa7b48cb0098"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "futures-sink",
+ "pin-project-lite",
+ "tokio",
+]
+
+[[package]]
+name = "toml_datetime"
+version = "1.1.1+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3165f65f62e28e0115a00b2ebdd37eb6f3b641855f9d636d3cd4103767159ad7"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "toml_edit"
+version = "0.25.12+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d2153edc6955a6c354fad8f5efd38b6a8769bdccf9fe50f8e1329f81b0baa5d7"
+dependencies = [
+ "indexmap",
+ "toml_datetime",
+ "toml_parser",
+ "winnow",
+]
+
+[[package]]
+name = "toml_parser"
+version = "1.1.2+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a2abe9b86193656635d2411dc43050282ca48aa31c2451210f4202550afb7526"
+dependencies = [
+ "winnow",
+]
+
+[[package]]
+name = "tower"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebe5ef63511595f1344e2d5cfa636d973292adc0eec1f0ad45fae9f0851ab1d4"
+dependencies = [
+ "futures-core",
+ "futures-util",
+ "pin-project-lite",
+ "sync_wrapper",
+ "tokio",
+ "tower-layer",
+ "tower-service",
+]
+
+[[package]]
+name = "tower-http"
+version = "0.6.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4cfcf7e2740e6fc6d4d688b4ef00650406bb94adf4731e43c096c3a19fe40840"
+dependencies = [
+ "bitflags 2.13.0",
+ "bytes",
+ "futures-util",
+ "http",
+ "http-body",
+ "pin-project-lite",
+ "tower",
+ "tower-layer",
+ "tower-service",
+ "url",
+]
+
+[[package]]
+name = "tower-layer"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "121c2a6cda46980bb0fcd1647ffaf6cd3fc79a013de288782836f6df9c48780e"
+
+[[package]]
+name = "tower-service"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8df9b6e13f2d32c91b9bd719c00d1958837bc7dec474d94952798cc8e69eeec3"
+
+[[package]]
+name = "tracing"
+version = "0.1.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "63e71662fa4b2a2c3a26f570f037eb95bb1f85397f3cd8076caed2f026a6d100"
+dependencies = [
+ "log",
+ "pin-project-lite",
+ "tracing-attributes",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-attributes"
+version = "0.1.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7490cfa5ec963746568740651ac6781f701c9c5ea257c58e057f3ba8cf69e8da"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "tracing-core"
+version = "0.1.36"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "db97caf9d906fbde555dd62fa95ddba9eecfd14cb388e4f491a66d74cd5fb79a"
+dependencies = [
+ "once_cell",
+ "valuable",
+]
+
+[[package]]
+name = "tracing-log"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee855f1f400bd0e5c02d150ae5de3840039a3f54b025156404e34c23c03f47c3"
+dependencies = [
+ "log",
+ "once_cell",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-subscriber"
+version = "0.3.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb7f578e5945fb242538965c2d0b04418d38ec25c79d160cd279bf0731c8d319"
+dependencies = [
+ "matchers",
+ "nu-ansi-term",
+ "once_cell",
+ "regex-automata",
+ "sharded-slab",
+ "smallvec",
+ "thread_local",
+ "tracing",
+ "tracing-core",
+ "tracing-log",
+]
+
+[[package]]
+name = "try-lock"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b"
+
+[[package]]
+name = "ttf-parser"
+version = "0.25.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d2df906b07856748fa3f6e0ad0cbaa047052d4a7dd609e231c4f72cee8c36f31"
+
+[[package]]
+name = "tungstenite"
+version = "0.29.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c01152af293afb9c7c2a57e4b559c5620b421f6d133261c60dd2d0cdb38e6b8"
+dependencies = [
+ "bytes",
+ "data-encoding",
+ "http",
+ "httparse",
+ "log",
+ "native-tls",
+ "rand 0.9.4",
+ "rustls",
+ "rustls-pki-types",
+ "sha1 0.10.6",
+ "thiserror 2.0.18",
+]
+
+[[package]]
+name = "typenum"
+version = "1.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20"
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.24"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
+
+[[package]]
+name = "unicode-segmentation"
+version = "1.13.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c6f5d3c3b1bf09027a88a6bc961fc00497d651009560b5463668dc81b0fa87a8"
+
+[[package]]
+name = "unicode-width"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b4ac048d71ede7ee76d585517add45da530660ef4390e49b098733c6e897f254"
+
+[[package]]
+name = "universal-hash"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f4987bdc12753382e0bec4a65c50738ffaabc998b9cdd1f952fb5f39b0048a96"
+dependencies = [
+ "crypto-common 0.2.2",
+ "ctutils",
+]
+
+[[package]]
+name = "untrusted"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1"
+
+[[package]]
+name = "url"
+version = "2.5.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff67a8a4397373c3ef660812acab3268222035010ab8680ec4215f38ba3d0eed"
+dependencies = [
+ "form_urlencoded",
+ "idna",
+ "percent-encoding",
+ "serde",
+]
+
+[[package]]
+name = "utf8_iter"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be"
+
+[[package]]
+name = "utf8parse"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821"
+
+[[package]]
+name = "uuid"
+version = "1.23.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bf80a72845275afea99e7f2b434723d3bc7e38470fcd1c7ed39a599c73319a53"
+dependencies = [
+ "getrandom 0.4.3",
+ "js-sys",
+ "serde_core",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "valuable"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba73ea9cf16a25df0c8caa16c51acb937d5712a8429db78a3ee29d5dcacd3a65"
+
+[[package]]
+name = "vcpkg"
+version = "0.2.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "accd4ea62f7bb7a82fe23066fb0957d48ef677f6eeb8215f372f52e48bb32426"
+
+[[package]]
+name = "version_check"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
+
+[[package]]
+name = "walkdir"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "29790946404f91d9c5d06f9874efddea1dc06c5efe94541a7d6863108e3a5e4b"
+dependencies = [
+ "same-file",
+ "winapi-util",
+]
+
+[[package]]
+name = "want"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bfa7760aed19e106de2c7c0b581b509f2f25d3dacaf737cb82ac61bc6d760b0e"
+dependencies = [
+ "try-lock",
+]
+
+[[package]]
+name = "wasi"
+version = "0.11.1+wasi-snapshot-preview1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
+
+[[package]]
+name = "wasi"
+version = "0.14.7+wasi-0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "883478de20367e224c0090af9cf5f9fa85bed63a95c1abf3afc5c083ebc06e8c"
+dependencies = [
+ "wasip2",
+]
+
+[[package]]
+name = "wasip2"
+version = "1.0.4+wasi-0.2.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b67efb37e106e55ce722a510d6b5f9c17f083e5fc79afc2badeb12cc313d9487"
+dependencies = [
+ "wit-bindgen",
+]
+
+[[package]]
+name = "wasite"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "66fe902b4a6b8028a753d5424909b764ccf79b7a209eac9bf97e59cda9f71a42"
+dependencies = [
+ "wasi 0.14.7+wasi-0.2.4",
+]
+
+[[package]]
+name = "wasm-bindgen"
+version = "0.2.126"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4b067c0c11094aef6b7a801c1e34a26affafdf3d051dba08456b868789aaf9a4"
+dependencies = [
+ "cfg-if",
+ "once_cell",
+ "rustversion",
+ "wasm-bindgen-macro",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-futures"
+version = "0.4.76"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c62df1340f32221cb9c54d6a27b030e3dba64361d4a95bed55f9aacb44da291d"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "wasm-bindgen-macro"
+version = "0.2.126"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "167ce5e579f6bcf889c4f7175a8a5a585de84e8ff93976ce393efa5f2837aab1"
+dependencies = [
+ "quote",
+ "wasm-bindgen-macro-support",
+]
+
+[[package]]
+name = "wasm-bindgen-macro-support"
+version = "0.2.126"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f3997c7839262f4ef12cf90b818d6340c18e80f263f1a94bf157d0ec4420380e"
+dependencies = [
+ "bumpalo",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-shared"
+version = "0.2.126"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc1b4cb0cc549fcf58d7dfc081778139b3d283a081644e833e84682ad71cea24"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "wayland-backend"
+version = "0.3.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2857dd20b54e916ec7253b3d6b4d5c4d7d4ca2c33c2e11c6c76a99bd8744755d"
+dependencies = [
+ "cc",
+ "downcast-rs",
+ "rustix 1.1.4",
+ "scoped-tls",
+ "smallvec",
+ "wayland-sys",
+]
+
+[[package]]
+name = "wayland-client"
+version = "0.31.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "645c7c96bb74690c3189b5c9cb4ca1627062bb23693a4fad9d8c3de958260144"
+dependencies = [
+ "bitflags 2.13.0",
+ "rustix 1.1.4",
+ "wayland-backend",
+ "wayland-scanner",
+]
+
+[[package]]
+name = "wayland-csd-frame"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "625c5029dbd43d25e6aa9615e88b829a5cad13b2819c4ae129fdbb7c31ab4c7e"
+dependencies = [
+ "bitflags 2.13.0",
+ "cursor-icon",
+ "wayland-backend",
+]
+
+[[package]]
+name = "wayland-cursor"
+version = "0.31.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4a52d18780be9b1314328a3de5f930b73d2200112e3849ca6cb11822793fb34d"
+dependencies = [
+ "rustix 1.1.4",
+ "wayland-client",
+ "xcursor",
+]
+
+[[package]]
+name = "wayland-protocols"
+version = "0.32.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "23d0c813de3daa2ed6520af85a3bd49b0e722a3078506899aa9686fea58dc4b6"
+dependencies = [
+ "bitflags 2.13.0",
+ "wayland-backend",
+ "wayland-client",
+ "wayland-scanner",
+]
+
+[[package]]
+name = "wayland-protocols-plasma"
+version = "0.3.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2b6d8cf1eb2c1c31ed1f5643c88a6e53538129d4af80030c8cabd1f9fa884d91"
+dependencies = [
+ "bitflags 2.13.0",
+ "wayland-backend",
+ "wayland-client",
+ "wayland-protocols",
+ "wayland-scanner",
+]
+
+[[package]]
+name = "wayland-protocols-wlr"
+version = "0.3.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eb04e52f7836d7c7976c78ca0250d61e33873c34156a2a1fc9474828ec268234"
+dependencies = [
+ "bitflags 2.13.0",
+ "wayland-backend",
+ "wayland-client",
+ "wayland-protocols",
+ "wayland-scanner",
+]
+
+[[package]]
+name = "wayland-scanner"
+version = "0.31.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9c324a910fd86ebdc364a3e61ec1f11737d3b1d6c273c0239ee8ff4bc0d24b4a"
+dependencies = [
+ "proc-macro2",
+ "quick-xml",
+ "quote",
+]
+
+[[package]]
+name = "wayland-sys"
+version = "0.31.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8eab23fefc9e41f8e841df4a9c707e8a8c4ed26e944ef69297184de2785e3be"
+dependencies = [
+ "dlib",
+ "log",
+ "once_cell",
+ "pkg-config",
+]
+
+[[package]]
+name = "web-sys"
+version = "0.3.103"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8622dcb61c0bcc9fffa6938bed81210af2da9a7e4a1a834b2e37a59b6dfb6141"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "web-time"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a6580f308b1fad9207618087a65c04e7a10bc77e02c8e84e9b00dd4b12fa0bb"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "whoami"
+version = "2.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "998767ef88740d1f5b0682a9c53c24431453923962269c2db68ee43788c5a40d"
+dependencies = [
+ "libc",
+ "libredox",
+ "objc2-system-configuration",
+ "wasite",
+ "web-sys",
+]
+
+[[package]]
+name = "widestring"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72069c3113ab32ab29e5584db3c6ec55d416895e60715417b5b883a357c3e471"
+
+[[package]]
+name = "winapi"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419"
+dependencies = [
+ "winapi-i686-pc-windows-gnu",
+ "winapi-x86_64-pc-windows-gnu",
+]
+
+[[package]]
+name = "winapi-i686-pc-windows-gnu"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6"
+
+[[package]]
+name = "winapi-util"
+version = "0.1.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "winapi-x86_64-pc-windows-gnu"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
+
+[[package]]
+name = "windows"
+version = "0.62.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "527fadee13e0c05939a6a05d5bd6eec6cd2e3dbd648b9f8e447c6518133d8580"
+dependencies = [
+ "windows-collections",
+ "windows-core",
+ "windows-future",
+ "windows-numerics",
+]
+
+[[package]]
+name = "windows-collections"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "23b2d95af1a8a14a3c7367e1ed4fc9c20e0a26e79551b1454d72583c97cc6610"
+dependencies = [
+ "windows-core",
+]
+
+[[package]]
+name = "windows-core"
+version = "0.62.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8e83a14d34d0623b51dce9581199302a221863196a1dde71a7663a4c2be9deb"
+dependencies = [
+ "windows-implement",
+ "windows-interface",
+ "windows-link",
+ "windows-result",
+ "windows-strings",
+]
+
+[[package]]
+name = "windows-future"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e1d6f90251fe18a279739e78025bd6ddc52a7e22f921070ccdc67dde84c605cb"
+dependencies = [
+ "windows-core",
+ "windows-link",
+ "windows-threading",
+]
+
+[[package]]
+name = "windows-implement"
+version = "0.60.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "053e2e040ab57b9dc951b72c264860db7eb3b0200ba345b4e4c3b14f67855ddf"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "windows-interface"
+version = "0.59.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f316c4a2570ba26bbec722032c4099d8c8bc095efccdc15688708623367e358"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "windows-link"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
+
+[[package]]
+name = "windows-numerics"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e2e40844ac143cdb44aead537bbf727de9b044e107a0f1220392177d15b0f26"
+dependencies = [
+ "windows-core",
+ "windows-link",
+]
+
+[[package]]
+name = "windows-registry"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "02752bf7fbdcce7f2a27a742f798510f3e5ad88dbe84871e5168e2120c3d5720"
+dependencies = [
+ "windows-link",
+ "windows-result",
+ "windows-strings",
+]
+
+[[package]]
+name = "windows-result"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7781fa89eaf60850ac3d2da7af8e5242a5ea78d1a11c49bf2910bb5a73853eb5"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "windows-strings"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7837d08f69c77cf6b07689544538e017c1bfcf57e34b4c0ff58e6c2cd3b37091"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.45.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75283be5efb2831d37ea142365f009c02ec203cd29a3ebecbc093d52315b66d0"
+dependencies = [
+ "windows-targets 0.42.2",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.59.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.61.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e5180c00cd44c9b1c88adb3693291f1cd93605ded80c250a75d472756b4d071"
+dependencies = [
+ "windows_aarch64_gnullvm 0.42.2",
+ "windows_aarch64_msvc 0.42.2",
+ "windows_i686_gnu 0.42.2",
+ "windows_i686_msvc 0.42.2",
+ "windows_x86_64_gnu 0.42.2",
+ "windows_x86_64_gnullvm 0.42.2",
+ "windows_x86_64_msvc 0.42.2",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"
+dependencies = [
+ "windows_aarch64_gnullvm 0.52.6",
+ "windows_aarch64_msvc 0.52.6",
+ "windows_i686_gnu 0.52.6",
+ "windows_i686_gnullvm",
+ "windows_i686_msvc 0.52.6",
+ "windows_x86_64_gnu 0.52.6",
+ "windows_x86_64_gnullvm 0.52.6",
+ "windows_x86_64_msvc 0.52.6",
+]
+
+[[package]]
+name = "windows-threading"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3949bd5b99cafdf1c7ca86b43ca564028dfe27d66958f2470940f73d86d75b37"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "597a5118570b68bc08d8d59125332c54f1ba9d9adeedeef5b99b02ba2b0698f8"
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e08e8864a60f06ef0d0ff4ba04124db8b0fb3be5776a5cd47641e942e58c4d43"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c61d927d8da41da96a81f029489353e68739737d3beca43145c8afec9a31a84f"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
+
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "44d840b6ec649f480a41c8d80f9c65108b92d89345dd94027bfe06ac444d1060"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8de912b8b8feb55c064867cf047dda097f92d51efad5b491dfb98f6bbb70cb36"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "26d41b46a36d453748aedef1486d5c7a85db22e56aff34643984ea85514e94a3"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9aec5da331524158c6d1a4ac0ab1541149c0b9505fde06423b02f5ef0106b9f0"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
+
+[[package]]
+name = "winit"
+version = "0.30.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6755fa58a9f8350bd1e472d4c3fcc25f824ec358933bba33306d0b63df5978d"
+dependencies = [
+ "ahash",
+ "android-activity",
+ "atomic-waker",
+ "bitflags 2.13.0",
+ "block2 0.5.1",
+ "bytemuck",
+ "calloop",
+ "cfg_aliases",
+ "concurrent-queue",
+ "core-foundation 0.9.4",
+ "core-graphics",
+ "cursor-icon",
+ "dpi",
+ "js-sys",
+ "libc",
+ "memmap2",
+ "ndk",
+ "objc2 0.5.2",
+ "objc2-app-kit",
+ "objc2-foundation 0.2.2",
+ "objc2-ui-kit",
+ "orbclient",
+ "percent-encoding",
+ "pin-project",
+ "raw-window-handle",
+ "redox_syscall 0.4.1",
+ "rustix 0.38.44",
+ "sctk-adwaita",
+ "smithay-client-toolkit",
+ "smol_str",
+ "tracing",
+ "unicode-segmentation",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "wayland-backend",
+ "wayland-client",
+ "wayland-protocols",
+ "wayland-protocols-plasma",
+ "web-sys",
+ "web-time",
+ "windows-sys 0.52.0",
+ "x11-dl",
+ "x11rb",
+ "xkbcommon-dl",
+]
+
+[[package]]
+name = "winnow"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0592e1c9d151f854e6fd382574c3a0855250e1d9b2f99d9281c6e6391af352f1"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "winscard"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "12dafb3c1468d0a3f5440e21e51614b53d1fdc62c9f82cc861c447906d09c69a"
+dependencies = [
+ "bitflags 2.13.0",
+ "crypto-bigint",
+ "flate2",
+ "iso7816",
+ "iso7816-tlv",
+ "num-derive",
+ "num-traits",
+ "picky",
+ "picky-asn1-x509",
+ "rsa",
+ "sha1 0.11.0",
+ "time",
+ "tracing",
+ "uuid",
+ "widestring",
+]
+
+[[package]]
+name = "wit-bindgen"
+version = "0.57.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ebf944e87a7c253233ad6766e082e3cd714b5d03812acc24c318f549614536e"
+
+[[package]]
+name = "writeable"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ffae5123b2d3fc086436f8834ae3ab053a283cfac8fe0a0b8eaae044768a4c4"
+
+[[package]]
+name = "wyz"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "05f360fc0b24296329c78fda852a1e9ae82de9cf7b27dae4b7f62f118f77b9ed"
+dependencies = [
+ "tap",
+]
+
+[[package]]
+name = "x11-dl"
+version = "2.21.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "38735924fedd5314a6e548792904ed8c6de6636285cb9fec04d5b1db85c1516f"
+dependencies = [
+ "libc",
+ "once_cell",
+ "pkg-config",
+]
+
+[[package]]
+name = "x11rb"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9993aa5be5a26815fe2c3eacfc1fde061fc1a1f094bf1ad2a18bf9c495dd7414"
+dependencies = [
+ "as-raw-xcb-connection",
+ "gethostname",
+ "libc",
+ "libloading",
+ "once_cell",
+ "rustix 1.1.4",
+ "x11rb-protocol",
+]
+
+[[package]]
+name = "x11rb-protocol"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ea6fc2961e4ef194dcbfe56bb845534d0dc8098940c7e5c012a258bfec6701bd"
+
+[[package]]
+name = "x25519-dalek"
+version = "3.0.0-rc.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eee64e8620caa64914d669b1f68f858aaff54e2d0f9ad3b30a613b58a1baa83e"
+dependencies = [
+ "curve25519-dalek",
+ "rand_core 0.10.1",
+ "zeroize",
+]
+
+[[package]]
+name = "x509-cert"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1301e935010a701ae5f8655edc0ad17c44bad3ac5ce8c39185f75453b720ae94"
+dependencies = [
+ "const-oid 0.9.6",
+ "der 0.7.10",
+ "spki 0.7.3",
+ "tls_codec",
+]
+
+[[package]]
+name = "xcursor"
+version = "0.3.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bec9e4a500ca8864c5b47b8b482a73d62e4237670e5b5f1d6b9e3cae50f28f2b"
+
+[[package]]
+name = "xkbcommon-dl"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d039de8032a9a8856a6be89cea3e5d12fdd82306ab7c94d74e6deab2460651c5"
+dependencies = [
+ "bitflags 2.13.0",
+ "dlib",
+ "log",
+ "once_cell",
+ "xkeysym",
+]
+
+[[package]]
+name = "xkeysym"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9cc00251562a284751c9973bace760d86c0276c471b4be569fe6b068ee97a56"
+
+[[package]]
+name = "yoke"
+version = "0.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "709fe23a0424b6a435d82152b1bd3fdfb0833487d5fa90d05d42762a9891fef5"
+dependencies = [
+ "stable_deref_trait",
+ "yoke-derive",
+ "zerofrom",
+]
+
+[[package]]
+name = "yoke-derive"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "de844c262c8848816172cef550288e7dc6c7b7814b4ee56b3e1553f275f1858e"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+ "synstructure",
+]
+
+[[package]]
+name = "yuv"
+version = "0.8.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5d85a782d94ee43f078bcfd6fa82d4e6a5b2d1cfbbad168e4df5a9f7b39ef48c"
+dependencies = [
+ "num-traits",
+]
+
+[[package]]
+name = "zerocopy"
+version = "0.8.54"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7cbbc0a705a0fd05cc3676525980d2bf5a9bc4adac6d6475209a7887cf59d19"
+dependencies = [
+ "zerocopy-derive",
+]
+
+[[package]]
+name = "zerocopy-derive"
+version = "0.8.54"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e2e817b7b52d0c7358d3246da9d69935ebb18116b2b102b4230dac079b4862f5"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "zerofrom"
+version = "0.1.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ec05a11813ea801ff6d75110ad09cd0824ddba17dfe17128ea0d5f68e6c5272"
+dependencies = [
+ "zerofrom-derive",
+]
+
+[[package]]
+name = "zerofrom-derive"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "11532158c46691caf0f2593ea8358fed6bbf68a0315e80aae9bd41fbade684a1"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+ "synstructure",
+]
+
+[[package]]
+name = "zeroize"
+version = "1.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e13c156562582aa81c60cb29407084cdb54c4164760106ab78e6c5b0858cf64e"
+dependencies = [
+ "zeroize_derive",
+]
+
+[[package]]
+name = "zeroize_derive"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3c50655cbb0fe3fc43170059e702f1ce5e19b84cec58dc87b037a09935c2f328"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "zerotrie"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0f9152d31db0792fa83f70fb2f83148effb5c1f5b8c7686c3459e361d9bc20bf"
+dependencies = [
+ "displaydoc",
+ "yoke",
+ "zerofrom",
+]
+
+[[package]]
+name = "zerovec"
+version = "0.11.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "90f911cbc359ab6af17377d242225f4d75119aec87ea711a880987b18cd7b239"
+dependencies = [
+ "yoke",
+ "zerofrom",
+ "zerovec-derive",
+]
+
+[[package]]
+name = "zerovec-derive"
+version = "0.11.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "625dc425cab0dca6dc3c3319506e6593dcb08a9f387ea3b284dbd52a92c40555"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
+[[package]]
+name = "zmij"
+version = "1.0.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8848ee67ecc8aedbaf3e4122217aff892639231befc6a1b58d29fff4c2cabaa"
+
+[[package]]
+name = "zstd-safe"
+version = "7.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f49c4d5f0abb602a93fb8736af2a4f4dd9512e36f7f570d66e65ff867ed3b9d"
+dependencies = [
+ "zstd-sys",
+]
+
+[[package]]
+name = "zstd-sys"
+version = "2.0.16+zstd.1.5.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "91e19ebc2adc8f83e43039e79776e3fda8ca919132d68a1fed6a5faca2683748"
+dependencies = [
+ "cc",
+ "pkg-config",
+]
diff --git a/vendor/ironrdp-viewer/Cargo.toml b/vendor/ironrdp-viewer/Cargo.toml
new file mode 100644
index 0000000..23fa3b7
--- /dev/null
+++ b/vendor/ironrdp-viewer/Cargo.toml
@@ -0,0 +1,246 @@
+# THIS FILE IS AUTOMATICALLY GENERATED BY CARGO
+#
+# When uploading crates to the registry Cargo will automatically
+# "normalize" Cargo.toml files for maximal compatibility
+# with all versions of Cargo and also rewrite `path` dependencies
+# to registry (e.g., crates.io) dependencies.
+#
+# If you are reading this file be aware that the original Cargo.toml
+# will likely look very different (and much more reasonable).
+# See Cargo.toml.orig for the original contents.
+
+[package]
+edition = "2024"
+name = "ironrdp-viewer"
+version = "0.1.0"
+authors = [
+    "Devolutions Inc. <infos@devolutions.net>",
+    "Teleport <goteleport.com>",
+]
+build = false
+autolib = false
+autobins = false
+autoexamples = false
+autotests = false
+autobenches = false
+default-run = "ironrdp-viewer"
+description = "Portable RDP viewer (GUI binary) without GPU acceleration"
+homepage = "https://github.com/Devolutions/IronRDP"
+readme = "README.md"
+keywords = [
+    "rdp",
+    "remote-desktop",
+    "network",
+    "client",
+    "protocol",
+]
+categories = ["network-programming"]
+license = "MIT OR Apache-2.0"
+repository = "https://github.com/Devolutions/IronRDP"
+resolver = "2"
+
+[features]
+default = ["rustls"]
+native-tls = ["ironrdp/native-tls"]
+qoi = ["ironrdp/qoi"]
+qoiz = ["ironrdp/qoiz"]
+rustls = ["ironrdp/rustls"]
+
+[lib]
+name = "ironrdp_viewer"
+path = "src/lib.rs"
+test = false
+doctest = false
+
+[[bin]]
+name = "ironrdp-viewer"
+path = "src/main.rs"
+test = false
+
+[dependencies.anyhow]
+version = "1"
+
+[dependencies.clap]
+version = "4.6"
+features = [
+    "derive",
+    "cargo",
+]
+
+[dependencies.inquire]
+version = "0.9"
+
+[dependencies.ironrdp]
+version = "0.17"
+features = [
+    "connector",
+    "cliprdr",
+    "input",
+    "pdu",
+    "client",
+    "client-all",
+]
+
+[dependencies.ironrdp-cfg]
+version = "0.1"
+
+[dependencies.ironrdp-propertyset]
+version = "0.1"
+
+[dependencies.ironrdp-rdpfile]
+version = "0.1"
+
+[dependencies.proc-exit]
+version = "2"
+
+[dependencies.raw-window-handle]
+version = "0.6"
+
+[dependencies.semver]
+version = "1"
+
+[dependencies.smallvec]
+version = "1.15"
+
+[dependencies.softbuffer]
+version = "0.4"
+
+[dependencies.tap]
+version = "1"
+
+[dependencies.tokio]
+version = "1"
+features = ["full"]
+
+[dependencies.tracing]
+version = "0.1"
+features = ["log"]
+
+[dependencies.tracing-subscriber]
+version = "0.3"
+features = ["env-filter"]
+
+[dependencies.url]
+version = "2"
+
+[dependencies.whoami]
+version = "2.1"
+
+[dependencies.winit]
+version = "0.30"
+features = ["rwh_06"]
+
+[lints.clippy]
+alloc_instead_of_core = "warn"
+allow_attributes = "warn"
+as_conversions = "warn"
+as_pointer_underscore = "warn"
+as_ptr_cast_mut = "warn"
+as_underscore = "warn"
+cast_lossless = "warn"
+cast_possible_truncation = "warn"
+cast_possible_wrap = "warn"
+cast_ptr_alignment = "warn"
+cast_sign_loss = "warn"
+cfg_not_test = "warn"
+checked_conversions = "warn"
+clone_on_ref_ptr = "warn"
+cloned_instead_of_copied = "warn"
+collection_is_never_read = "warn"
+copy_iterator = "warn"
+dbg_macro = "warn"
+deref_by_slicing = "warn"
+disallowed_script_idents = "warn"
+doc_include_without_cfg = "warn"
+empty_drop = "warn"
+empty_enum_variants_with_brackets = "warn"
+expl_impl_clone_on_copy = "warn"
+filetype_is_file = "warn"
+float_cmp = "warn"
+float_cmp_const = "warn"
+fn_to_numeric_cast_any = "warn"
+get_unwrap = "warn"
+implicit_clone = "warn"
+infinite_loop = "warn"
+inline_always = "warn"
+large_futures = "warn"
+large_include_file = "warn"
+large_stack_frames = "warn"
+large_types_passed_by_value = "warn"
+lossy_float_literal = "warn"
+map_with_unused_argument_over_ranges = "warn"
+mem_forget = "warn"
+missing_panics_doc = "warn"
+missing_safety_doc = "warn"
+mixed_read_write_in_expression = "warn"
+multiple_inherent_impl = "warn"
+multiple_unsafe_ops_per_block = "warn"
+needless_raw_strings = "warn"
+non_ascii_literal = "warn"
+non_zero_suggestions = "warn"
+or_fun_call = "warn"
+panic = "warn"
+partial_pub_fields = "warn"
+precedence_bits = "warn"
+print_stderr = "warn"
+print_stdout = "warn"
+ptr_cast_constness = "warn"
+pub_without_shorthand = "warn"
+range_plus_one = "warn"
+rc_buffer = "warn"
+rc_mutex = "warn"
+redundant_clone = "warn"
+redundant_type_annotations = "warn"
+renamed_function_params = "warn"
+rest_pat_in_fully_bound_structs = "warn"
+return_self_not_must_use = "warn"
+same_name_method = "warn"
+self_named_module_files = "warn"
+semicolon_outside_block = "warn"
+separated_literal_suffix = "warn"
+similar_names = "warn"
+std_instead_of_core = "warn"
+str_to_string = "warn"
+string_add = "warn"
+string_lit_chars_any = "warn"
+string_slice = "warn"
+suspicious_xor_used_as_pow = "warn"
+todo = "warn"
+trait_duplication_in_bounds = "warn"
+transmute_ptr_to_ptr = "warn"
+try_err = "warn"
+type_repetition_in_bounds = "warn"
+undocumented_unsafe_blocks = "warn"
+unnecessary_box_returns = "warn"
+unnecessary_safety_comment = "warn"
+unnecessary_self_imports = "warn"
+unused_result_ok = "warn"
+unused_self = "warn"
+unused_trait_names = "warn"
+unwrap_used = "warn"
+useless_let_if_seq = "warn"
+wildcard_dependencies = "warn"
+wildcard_imports = "warn"
+
+[lints.rust]
+absolute_paths_not_starting_with_crate = "warn"
+ambiguous_negative_literals = "warn"
+elided_lifetimes_in_paths = "warn"
+invalid_reference_casting = "warn"
+keyword_idents = "warn"
+macro_use_extern_crate = "warn"
+missing_unsafe_on_extern = "warn"
+noop_method_call = "warn"
+redundant_imports = "warn"
+redundant_lifetimes = "warn"
+single_use_lifetimes = "warn"
+trivial_numeric_casts = "warn"
+unit_bindings = "warn"
+unreachable_pub = "warn"
+unsafe_attr_outside_unsafe = "warn"
+unsafe_op_in_unsafe_fn = "warn"
+unused_crate_dependencies = "warn"
+unused_lifetimes = "warn"
+unused_macro_rules = "warn"
+unused_qualifications = "warn"
+unused_unsafe = "warn"
diff --git a/vendor/ironrdp-viewer/Cargo.toml.orig b/vendor/ironrdp-viewer/Cargo.toml.orig
new file mode 100644
index 0000000..96dc099
--- /dev/null
+++ b/vendor/ironrdp-viewer/Cargo.toml.orig
@@ -0,0 +1,62 @@
+[package]
+name = "ironrdp-viewer"
+version = "0.1.0"
+readme = "README.md"
+description = "Portable RDP viewer (GUI binary) without GPU acceleration"
+edition.workspace = true
+license.workspace = true
+homepage.workspace = true
+repository.workspace = true
+authors.workspace = true
+keywords.workspace = true
+categories.workspace = true
+default-run = "ironrdp-viewer"
+
+[lib]
+doctest = false
+test = false
+
+[[bin]]
+name = "ironrdp-viewer"
+test = false
+
+[features]
+default = ["rustls"]
+rustls = ["ironrdp/rustls"]
+native-tls = ["ironrdp/native-tls"]
+qoi = ["ironrdp/qoi"]
+qoiz = ["ironrdp/qoiz"]
+
+[dependencies]
+ironrdp = { path = "../ironrdp", version = "0.17", features = ["connector", "cliprdr", "input", "pdu", "client", "client-all"] }
+ironrdp-cfg = { path = "../ironrdp-cfg", version = "0.1" }
+ironrdp-propertyset = { path = "../ironrdp-propertyset", version = "0.1" }
+ironrdp-rdpfile = { path = "../ironrdp-rdpfile", version = "0.1" }
+
+# Windowing and rendering
+winit = { version = "0.30", features = ["rwh_06"] }
+softbuffer = "0.4"
+
+# CLI
+clap = { version = "4.6", features = ["derive", "cargo"] }
+inquire = "0.9"
+proc-exit = "2"
+
+# Logging
+tracing = { version = "0.1", features = ["log"] }
+tracing-subscriber = { version = "0.3", features = ["env-filter"] }
+
+# Async, futures
+tokio = { version = "1", features = ["full"] }
+
+# Utils
+whoami = "2.1"
+anyhow = "1"
+smallvec = "1.15"
+tap = "1"
+semver = "1"
+raw-window-handle = "0.6"
+url = "2"
+
+[lints]
+workspace = true
diff --git a/vendor/ironrdp-viewer/README.md b/vendor/ironrdp-viewer/README.md
new file mode 100644
index 0000000..2361ec0
--- /dev/null
+++ b/vendor/ironrdp-viewer/README.md
@@ -0,0 +1,90 @@
+# IronRDP Viewer
+
+Portable RDP client without GPU acceleration.
+
+This is a a full-fledged RDP client based on IronRDP crates suite, and implemented using
+non-blocking, asynchronous I/O. Portability is achieved by using softbuffer for rendering
+and winit for windowing.
+
+## Prebuilt binaries
+
+Prebuilt, checksummed archives are attached to each GitHub Release under the `ironrdp-viewer-v*`
+tags. See the [Releases page](https://github.com/Devolutions/IronRDP/releases) for per-platform
+download and verification instructions.
+
+## Sample usage
+
+```shell
+ironrdp-viewer <HOSTNAME> --username <USERNAME> --password <PASSWORD>
+```
+
+## `.rdp` file support
+
+You can load a `.rdp` file with `--rdp-file <PATH>`.
+
+Currently supported properties:
+
+- `full address:s:<value>`
+- `alternate full address:s:<value>`
+- `server port:i:<value>`
+- `username:s:<value>`
+- `ClearTextPassword:s:<value>`
+- `domain:s:<value>`
+- `enablecredsspsupport:i:<0|1>`
+- `gatewayhostname:s:<value>`
+- `gatewayusagemethod:i:<value>`
+- `gatewaycredentialssource:i:<value>`
+- `gatewayusername:s:<value>`
+- `GatewayPassword:s:<value>`
+- `kdcproxyurl:s:<value>` (also `KDCProxyURL:s:<value>`)
+- `kdcproxyname:s:<value>`
+- `alternate shell:s:<value>`
+- `shell working directory:s:<value>`
+- `redirectclipboard:i:<0|1>`
+- `audiomode:i:<0|1|2>`
+- `desktopwidth:i:<value>`
+- `desktopheight:i:<value>`
+- `desktopscalefactor:i:<value>`
+- `compression:i:<0|1>`
+
+Property precedence is:
+
+1. CLI options
+2. `.rdp` file values
+3. Defaults and interactive prompts
+
+Unknown or unsupported `.rdp` properties are ignored and do not cause parsing failures. Parse
+issues are reported to stderr.
+
+
+The `IRONRDP_LOG` environment variable is used to set the log filter directives. 
+
+```shell
+IRONRDP_LOG="info,ironrdp_connector=trace" ironrdp-viewer <HOSTNAME> --username <USERNAME> --password <PASSWORD>
+```
+
+See [`tracing-subscriber`'s documentation][tracing-doc] for more details.
+
+[tracing-doc]: https://docs.rs/tracing-subscriber/0.3.17/tracing_subscriber/filter/struct.EnvFilter.html#directives
+
+## Support for `SSLKEYLOGFILE`
+
+This client supports reading the `SSLKEYLOGFILE` environment variable.
+When set, the TLS encryption secrets for the session will be dumped to the file specified
+by the environment variable. 
+This file can be read by Wireshark so that in can decrypt the packets.
+
+### Example
+
+```shell
+SSLKEYLOGFILE=/tmp/tls-secrets ironrdp-viewer <HOSTNAME> --username <USERNAME> --password <PASSWORD>
+```
+
+### Usage in Wireshark
+
+See this [awakecoding's repository][awakecoding-repository] explaining how to use the file in wireshark.
+
+This crate is part of the [IronRDP] project.
+
+[IronRDP]: https://github.com/Devolutions/IronRDP
+[awakecoding-repository]: https://github.com/awakecoding/wireshark-rdp#sslkeylogfile
diff --git a/vendor/ironrdp-viewer/src/app.rs b/vendor/ironrdp-viewer/src/app.rs
new file mode 100644
index 0000000..232eff1
--- /dev/null
+++ b/vendor/ironrdp-viewer/src/app.rs
@@ -0,0 +1,432 @@
+#![allow(clippy::print_stderr, clippy::print_stdout)] // allowed in this module only
+
+use core::num::NonZeroU32;
+use core::time::Duration;
+use std::sync::Arc;
+use std::time::Instant;
+
+use anyhow::Context as _;
+use ironrdp::client::rdp::{RdpInputEvent, RdpOutputEvent};
+use ironrdp::pdu::input::fast_path::FastPathInputEvent;
+use raw_window_handle::{DisplayHandle, HasDisplayHandle as _};
+use smallvec::SmallVec;
+use tokio::sync::mpsc;
+use tracing::{debug, error, trace, warn};
+use winit::application::ApplicationHandler;
+use winit::dpi::{LogicalPosition, PhysicalSize};
+use winit::event::{self, WindowEvent};
+use winit::event_loop::{ActiveEventLoop, ControlFlow, EventLoop};
+use winit::platform::scancode::PhysicalKeyExtScancode as _;
+use winit::window::{CursorIcon, CustomCursor, Window, WindowAttributes};
+
+type WindowSurface = (Arc<Window>, softbuffer::Surface<DisplayHandle<'static>, Arc<Window>>);
+
+pub struct App {
+    input_event_sender: mpsc::UnboundedSender<RdpInputEvent>,
+    context: softbuffer::Context<DisplayHandle<'static>>,
+    initial_window_size: PhysicalSize<u32>,
+    window: Option<WindowSurface>,
+    buffer: Vec<u32>,
+    buffer_size: (u16, u16),
+    input_database: ironrdp::input::Database,
+    last_size: Option<PhysicalSize<u32>>,
+    resize_timeout: Option<Instant>,
+}
+
+impl App {
+    pub fn new(
+        event_loop: &EventLoop<RdpOutputEvent>,
+        input_event_sender: &mpsc::UnboundedSender<RdpInputEvent>,
+        initial_window_size: PhysicalSize<u32>,
+    ) -> anyhow::Result<Self> {
+        // SAFETY: We drop the softbuffer context right before the event loop is stopped, thus making this safe.
+        // FIXME: This is not a sufficient proof and the API is actually unsound as-is.
+        let display_handle = unsafe {
+            core::mem::transmute::<DisplayHandle<'_>, DisplayHandle<'static>>(
+                event_loop.display_handle().context("get display handle")?,
+            )
+        };
+        let context = softbuffer::Context::new(display_handle)
+            .map_err(|e| anyhow::anyhow!("unable to initialize softbuffer context: {e}"))?;
+
+        let input_database = ironrdp::input::Database::new();
+        Ok(Self {
+            input_event_sender: input_event_sender.clone(),
+            context,
+            initial_window_size,
+            window: None,
+            buffer: Vec::new(),
+            buffer_size: (0, 0),
+            input_database,
+            last_size: None,
+            resize_timeout: None,
+        })
+    }
+
+    fn send_resize_event(&mut self) {
+        let Some(size) = self.last_size.take() else {
+            return;
+        };
+        let Some((window, _)) = self.window.as_mut() else {
+            return;
+        };
+        #[expect(clippy::as_conversions, reason = "casting f64 to u32")]
+        let scale_factor = (window.scale_factor() * 100.0) as u32;
+
+        let width = u16::try_from(size.width).expect("reasonable width");
+        let height = u16::try_from(size.height).expect("reasonable height");
+
+        let _ = self.input_event_sender.send(RdpInputEvent::Resize {
+            generation: 0,
+            width,
+            height,
+            scale_factor,
+            // TODO: it should be possible to get the physical size here, however winit doesn't make it straightforward.
+            // FreeRDP does it based on DPI reading grabbed via [`SDL_GetDisplayDPI`](https://wiki.libsdl.org/SDL2/SDL_GetDisplayDPI):
+            // https://github.com/FreeRDP/FreeRDP/blob/ba8cf8cf2158018fb7abbedb51ab245f369be813/client/SDL/sdl_monitor.cpp#L250-L262
+            // See also: https://github.com/rust-windowing/winit/issues/826
+            physical_size: None,
+        });
+    }
+
+    fn draw(&mut self) {
+        if self.buffer.is_empty() {
+            return;
+        }
+        let Some((_, surface)) = self.window.as_mut() else {
+            return;
+        };
+        let mut sb_buffer = surface.buffer_mut().expect("surface buffer");
+        sb_buffer.copy_from_slice(self.buffer.as_slice());
+        sb_buffer.present().expect("buffer present");
+    }
+}
+
+impl ApplicationHandler<RdpOutputEvent> for App {
+    fn about_to_wait(&mut self, event_loop: &ActiveEventLoop) {
+        if let Some(timeout) = self.resize_timeout {
+            if let Some(timeout) = timeout.checked_duration_since(Instant::now()) {
+                event_loop.set_control_flow(ControlFlow::wait_duration(timeout));
+            } else {
+                self.send_resize_event();
+                self.resize_timeout = None;
+                event_loop.set_control_flow(ControlFlow::Wait);
+            }
+        }
+    }
+
+    fn resumed(&mut self, event_loop: &ActiveEventLoop) {
+        let window_attributes = WindowAttributes::default()
+            .with_title("IronRDP")
+            .with_inner_size(self.initial_window_size);
+        match event_loop.create_window(window_attributes) {
+            Ok(window) => {
+                let window = Arc::new(window);
+                let surface = softbuffer::Surface::new(&self.context, Arc::clone(&window)).expect("surface");
+                self.window = Some((window, surface));
+            }
+            Err(error) => {
+                error!(%error, "Failed to create window");
+                event_loop.exit();
+            }
+        }
+    }
+
+    fn window_event(&mut self, event_loop: &ActiveEventLoop, window_id: winit::window::WindowId, event: WindowEvent) {
+        let Some((window, _)) = self.window.as_mut() else {
+            return;
+        };
+        if window_id != window.id() {
+            return;
+        }
+
+        match event {
+            WindowEvent::Resized(size) => {
+                self.last_size = Some(size);
+                self.resize_timeout = Some(Instant::now() + Duration::from_secs(1));
+            }
+            WindowEvent::CloseRequested => {
+                if self.input_event_sender.send(RdpInputEvent::Close).is_err() {
+                    error!("Failed to send graceful shutdown event, closing the window");
+                    event_loop.exit();
+                }
+            }
+            WindowEvent::DroppedFile(_) => {
+                // TODO(#110): File upload
+            }
+            // WindowEvent::ReceivedCharacter(_) => {
+            // Sadly, we can't use this winit event to send RDP unicode events because
+            // of the several reasons:
+            // 1. `ReceivedCharacter` event doesn't provide a way to distinguish between
+            //    key press and key release, therefore the only way to use it is to send
+            //    a key press + release events sequentially, which will not allow to
+            //    handle long press and key repeat events.
+            // 2. This event do not fire for non-printable keys (e.g. Control, Alt, etc.)
+            // 3. This event fies BEFORE `KeyboardInput` event, so we can't make a
+            //    reasonable workaround for `1` and `2` by collecting physical key press
+            //    information first via `KeyboardInput` before processing `ReceivedCharacter`.
+            //
+            // However, all of these issues can be solved by updating `winit` to the
+            // newer version.
+            //
+            // TODO(#376): Update winit
+            // TODO(#376): Implement unicode input in native client
+            // }
+            WindowEvent::KeyboardInput { event, .. } => {
+                if let Some(scancode) = event.physical_key.to_scancode() {
+                    let scancode = match u16::try_from(scancode) {
+                        Ok(scancode) => scancode,
+                        Err(_) => {
+                            warn!("Unsupported scancode: `{scancode:#X}`; ignored");
+                            return;
+                        }
+                    };
+                    let scancode = ironrdp::input::Scancode::from_u16(scancode);
+
+                    let operation = match event.state {
+                        event::ElementState::Pressed => ironrdp::input::Operation::KeyPressed(scancode),
+                        event::ElementState::Released => ironrdp::input::Operation::KeyReleased(scancode),
+                    };
+
+                    let input_events = self.input_database.apply(core::iter::once(operation));
+
+                    send_fast_path_events(&self.input_event_sender, input_events);
+                }
+            }
+            WindowEvent::ModifiersChanged(modifiers) => {
+                const SHIFT_LEFT: ironrdp::input::Scancode = ironrdp::input::Scancode::from_u8(false, 0x2A);
+                const CONTROL_LEFT: ironrdp::input::Scancode = ironrdp::input::Scancode::from_u8(false, 0x1D);
+                const ALT_LEFT: ironrdp::input::Scancode = ironrdp::input::Scancode::from_u8(false, 0x38);
+                const LOGO_LEFT: ironrdp::input::Scancode = ironrdp::input::Scancode::from_u8(true, 0x5B);
+
+                let mut operations = SmallVec::<[ironrdp::input::Operation; 4]>::new();
+
+                let mut add_operation = |pressed: bool, scancode: ironrdp::input::Scancode| {
+                    let operation = if pressed {
+                        ironrdp::input::Operation::KeyPressed(scancode)
+                    } else {
+                        ironrdp::input::Operation::KeyReleased(scancode)
+                    };
+                    operations.push(operation);
+                };
+
+                // NOTE: https://docs.rs/winit/0.30.12/src/winit/keyboard.rs.html#1737-1744
+                //
+                // We can’t use state.lshift_state(), state.lcontrol_state(), etc, because on some platforms such as
+                // Linux, the modifiers change is hidden.
+                //
+                // > The exact modifier key is not used to represent modifiers state in the
+                // > first place due to a fact that modifiers state could be changed without any
+                // > key being pressed and on some platforms like Wayland/X11 which key resulted
+                // > in modifiers change is hidden, also, not that it really matters.
+                add_operation(modifiers.state().shift_key(), SHIFT_LEFT);
+                add_operation(modifiers.state().control_key(), CONTROL_LEFT);
+                add_operation(modifiers.state().alt_key(), ALT_LEFT);
+                add_operation(modifiers.state().super_key(), LOGO_LEFT);
+
+                let input_events = self.input_database.apply(operations);
+
+                send_fast_path_events(&self.input_event_sender, input_events);
+            }
+            WindowEvent::CursorMoved { position, .. } => {
+                let win_size = window.inner_size();
+                #[expect(clippy::as_conversions, reason = "casting f64 to u16")]
+                let x = (position.x / f64::from(win_size.width) * f64::from(self.buffer_size.0)) as u16;
+                #[expect(clippy::as_conversions, reason = "casting f64 to u16")]
+                let y = (position.y / f64::from(win_size.height) * f64::from(self.buffer_size.1)) as u16;
+                let operation = ironrdp::input::Operation::MouseMove(ironrdp::input::MousePosition { x, y });
+
+                let input_events = self.input_database.apply(core::iter::once(operation));
+
+                send_fast_path_events(&self.input_event_sender, input_events);
+            }
+            WindowEvent::MouseWheel { delta, .. } => {
+                let mut operations = SmallVec::<[ironrdp::input::Operation; 2]>::new();
+
+                match delta {
+                    event::MouseScrollDelta::LineDelta(delta_x, delta_y) => {
+                        if delta_x.abs() > 0.001 {
+                            operations.push(ironrdp::input::Operation::WheelRotations(
+                                ironrdp::input::WheelRotations {
+                                    is_vertical: false,
+                                    #[expect(clippy::as_conversions, reason = "casting f32 to i16")]
+                                    rotation_units: (delta_x * 100.) as i16,
+                                },
+                            ));
+                        }
+
+                        if delta_y.abs() > 0.001 {
+                            operations.push(ironrdp::input::Operation::WheelRotations(
+                                ironrdp::input::WheelRotations {
+                                    is_vertical: true,
+                                    #[expect(clippy::as_conversions, reason = "casting f32 to i16")]
+                                    rotation_units: (delta_y * 100.) as i16,
+                                },
+                            ));
+                        }
+                    }
+                    event::MouseScrollDelta::PixelDelta(delta) => {
+                        if delta.x.abs() > 0.001 {
+                            operations.push(ironrdp::input::Operation::WheelRotations(
+                                ironrdp::input::WheelRotations {
+                                    is_vertical: false,
+                                    #[expect(clippy::as_conversions, reason = "casting f64 to i16")]
+                                    rotation_units: delta.x as i16,
+                                },
+                            ));
+                        }
+
+                        if delta.y.abs() > 0.001 {
+                            operations.push(ironrdp::input::Operation::WheelRotations(
+                                ironrdp::input::WheelRotations {
+                                    is_vertical: true,
+                                    #[expect(clippy::as_conversions, reason = "casting f64 to i16")]
+                                    rotation_units: delta.y as i16,
+                                },
+                            ));
+                        }
+                    }
+                };
+
+                let input_events = self.input_database.apply(operations);
+
+                send_fast_path_events(&self.input_event_sender, input_events);
+            }
+            WindowEvent::MouseInput { state, button, .. } => {
+                let mouse_button = match button {
+                    event::MouseButton::Left => ironrdp::input::MouseButton::Left,
+                    event::MouseButton::Right => ironrdp::input::MouseButton::Right,
+                    event::MouseButton::Middle => ironrdp::input::MouseButton::Middle,
+                    event::MouseButton::Back => ironrdp::input::MouseButton::X1,
+                    event::MouseButton::Forward => ironrdp::input::MouseButton::X2,
+                    event::MouseButton::Other(native_button) => {
+                        if let Some(button) = ironrdp::input::MouseButton::from_native_button(native_button) {
+                            button
+                        } else {
+                            return;
+                        }
+                    }
+                };
+
+                let operation = match state {
+                    event::ElementState::Pressed => ironrdp::input::Operation::MouseButtonPressed(mouse_button),
+                    event::ElementState::Released => ironrdp::input::Operation::MouseButtonReleased(mouse_button),
+                };
+
+                let input_events = self.input_database.apply(core::iter::once(operation));
+
+                send_fast_path_events(&self.input_event_sender, input_events);
+            }
+            WindowEvent::RedrawRequested => {
+                self.draw();
+            }
+            WindowEvent::ActivationTokenDone { .. }
+            | WindowEvent::Moved(_)
+            | WindowEvent::Destroyed
+            | WindowEvent::HoveredFile(_)
+            | WindowEvent::HoveredFileCancelled
+            | WindowEvent::Focused(_)
+            | WindowEvent::Ime(_)
+            | WindowEvent::CursorEntered { .. }
+            | WindowEvent::CursorLeft { .. }
+            | WindowEvent::PinchGesture { .. }
+            | WindowEvent::PanGesture { .. }
+            | WindowEvent::DoubleTapGesture { .. }
+            | WindowEvent::RotationGesture { .. }
+            | WindowEvent::TouchpadPressure { .. }
+            | WindowEvent::AxisMotion { .. }
+            | WindowEvent::Touch(_)
+            | WindowEvent::ScaleFactorChanged { .. }
+            | WindowEvent::ThemeChanged(_)
+            | WindowEvent::Occluded(_) => {
+                // ignore
+            }
+        }
+    }
+
+    fn user_event(&mut self, event_loop: &ActiveEventLoop, event: RdpOutputEvent) {
+        let Some((window, surface)) = self.window.as_mut() else {
+            return;
+        };
+        match event {
+            RdpOutputEvent::Image {
+                buffer,
+                width,
+                height,
+                ..
+            } => {
+                trace!(width = ?width, height = ?height, "Received image with size");
+                trace!(window_physical_size = ?window.inner_size(), "Drawing image to the window with size");
+                self.buffer_size = (width.get(), height.get());
+                self.buffer = buffer;
+                surface
+                    .resize(NonZeroU32::from(width), NonZeroU32::from(height))
+                    .expect("surface resize");
+
+                window.request_redraw();
+            }
+            RdpOutputEvent::ConnectionFailure(error) => {
+                error!(?error);
+                eprintln!("Connection error: {}", error.report());
+                // TODO set proc_exit::sysexits::PROTOCOL_ERR.as_raw());
+                event_loop.exit();
+            }
+            RdpOutputEvent::Terminated(result) => {
+                let _exit_code = match result {
+                    Ok(reason) => {
+                        println!("Terminated gracefully: {reason}");
+                        proc_exit::sysexits::OK
+                    }
+                    Err(error) => {
+                        error!(?error);
+                        eprintln!("Active session error: {}", error.report());
+                        proc_exit::sysexits::PROTOCOL_ERR
+                    }
+                };
+                // TODO set exit_code.as_raw());
+                event_loop.exit();
+            }
+            RdpOutputEvent::PointerHidden => {
+                window.set_cursor_visible(false);
+            }
+            RdpOutputEvent::PointerDefault => {
+                window.set_cursor(CursorIcon::default());
+                window.set_cursor_visible(true);
+            }
+            RdpOutputEvent::PointerPosition { x, y } => {
+                if let Err(error) = window.set_cursor_position(LogicalPosition::new(x, y)) {
+                    error!(?error, "Failed to set cursor position");
+                }
+            }
+            RdpOutputEvent::PointerBitmap(pointer) => {
+                debug!(width = ?pointer.width, height = ?pointer.height, "Received pointer bitmap");
+                match CustomCursor::from_rgba(
+                    pointer.bitmap_data.clone(),
+                    pointer.width,
+                    pointer.height,
+                    pointer.hotspot_x,
+                    pointer.hotspot_y,
+                ) {
+                    Ok(cursor) => window.set_cursor(event_loop.create_custom_cursor(cursor)),
+                    Err(error) => error!(?error, "Failed to set cursor bitmap"),
+                }
+                window.set_cursor_visible(true);
+            }
+            RdpOutputEvent::NetworkMetrics { .. }
+            | RdpOutputEvent::ResizeSubmitted { .. }
+            | RdpOutputEvent::ResizeReconnectRequired { .. }
+            | RdpOutputEvent::ResizeReconnectStarted { .. } => {
+                // The standalone upstream viewer has no diagnostics surface for these events.
+            }
+        }
+    }
+}
+
+fn send_fast_path_events(
+    input_event_sender: &mpsc::UnboundedSender<RdpInputEvent>,
+    input_events: SmallVec<[FastPathInputEvent; 2]>,
+) {
+    if !input_events.is_empty() {
+        let _ = input_event_sender.send(RdpInputEvent::FastPath(input_events));
+    }
+}
diff --git a/vendor/ironrdp-viewer/src/cli.rs b/vendor/ironrdp-viewer/src/cli.rs
new file mode 100644
index 0000000..c03a4a0
--- /dev/null
+++ b/vendor/ironrdp-viewer/src/cli.rs
@@ -0,0 +1,506 @@
+#![allow(clippy::print_stdout, clippy::print_stderr)]
+
+use core::time::Duration;
+use std::path::PathBuf;
+
+use anyhow::Context as _;
+use clap::Parser;
+use clap::clap_derive::ValueEnum;
+use ironrdp::client::config::{
+    ClipboardType as ResolvedClipboardType, Config, ConfigBuilder, Destination, DvcProxyInfo, MissingField,
+    TransportKind,
+};
+use ironrdp::pdu::rdp::capability_sets::{MajorPlatformType, client_codecs_capabilities};
+use ironrdp_cfg::PropertySetExt as _;
+use tap::prelude::*;
+use url::Url;
+
+/// CLI selection for the clipboard backend.
+///
+/// Maps directly into the library's [`ResolvedClipboardType`] when the typed [`Config`] is built.
+#[derive(Debug, Copy, Clone, PartialEq, Eq, PartialOrd, Ord, ValueEnum)]
+pub enum ClipboardType {
+    /// Enable clipboard redirection (use the best available backend).
+    Enable,
+    /// Disable clipboard redirection entirely.
+    Disable,
+    /// Use a stub clipboard backend (for testing or headless usage).
+    Stub,
+}
+
+#[derive(Debug, Copy, Clone, PartialEq, Eq, PartialOrd, Ord, ValueEnum)]
+pub enum KeyboardType {
+    IbmPcXt,
+    OlivettiIco,
+    IbmPcAt,
+    IbmEnhanced,
+    Nokia1050,
+    Nokia9140,
+    Japanese,
+}
+
+impl KeyboardType {
+    fn into_pdu(self) -> ironrdp::pdu::gcc::KeyboardType {
+        match self {
+            KeyboardType::IbmEnhanced => ironrdp::pdu::gcc::KeyboardType::IbmEnhanced,
+            KeyboardType::IbmPcAt => ironrdp::pdu::gcc::KeyboardType::IbmPcAt,
+            KeyboardType::IbmPcXt => ironrdp::pdu::gcc::KeyboardType::IbmPcXt,
+            KeyboardType::OlivettiIco => ironrdp::pdu::gcc::KeyboardType::OlivettiIco,
+            KeyboardType::Nokia1050 => ironrdp::pdu::gcc::KeyboardType::Nokia1050,
+            KeyboardType::Nokia9140 => ironrdp::pdu::gcc::KeyboardType::Nokia9140,
+            KeyboardType::Japanese => ironrdp::pdu::gcc::KeyboardType::Japanese,
+        }
+    }
+}
+
+/// Devolutions IronRDP viewer
+#[derive(Parser, Debug)]
+#[clap(author = "Devolutions", about = "Devolutions-IronRDP viewer")]
+#[clap(version, long_about = None)]
+struct Args {
+    /// A file with IronRDP viewer logs
+    #[clap(short, long, value_parser)]
+    log_file: Option<String>,
+
+    #[clap(long, value_parser)]
+    gw_endpoint: Option<String>,
+    #[clap(long, value_parser)]
+    gw_user: Option<String>,
+    #[clap(long, value_parser)]
+    gw_pass: Option<String>,
+
+    /// An address on which the client will connect.
+    destination: Option<Destination>,
+
+    /// Path to a .rdp file to read the configuration from.
+    #[clap(long)]
+    rdp_file: Option<PathBuf>,
+
+    /// A target RDP server user name
+    #[clap(short, long)]
+    username: Option<String>,
+
+    /// An optional target RDP server domain name
+    #[clap(short, long)]
+    domain: Option<String>,
+
+    /// A target RDP server user password
+    #[clap(short, long)]
+    password: Option<String>,
+
+    /// Proxy URL to connect to for the RDCleanPath
+    ///
+    /// The accompanying token may be supplied via `--rdcleanpath-token` or entered interactively.
+    #[clap(long)]
+    rdcleanpath_url: Option<Url>,
+
+    /// Authentication token to insert in the RDCleanPath packet
+    #[clap(long, requires("rdcleanpath_url"))]
+    rdcleanpath_token: Option<String>,
+
+    /// The keyboard type
+    #[clap(long, value_enum, default_value_t = KeyboardType::IbmEnhanced)]
+    keyboard_type: KeyboardType,
+
+    /// The keyboard subtype (an original equipment manufacturer-dependent value)
+    #[clap(long, default_value_t = 0)]
+    keyboard_subtype: u32,
+
+    /// The number of function keys on the keyboard
+    #[clap(long, default_value_t = 12)]
+    keyboard_functional_keys_count: u32,
+
+    /// The input method editor (IME) file name associated with the active input locale
+    #[clap(long, default_value_t = String::from(""))]
+    ime_file_name: String,
+
+    /// Contains a value that uniquely identifies the client
+    #[clap(long, default_value_t = String::from(""))]
+    dig_product_id: String,
+
+    /// Scaling factor for desktop applications, percentage (value between 100 and 500)
+    #[clap(long, value_parser = clap::value_parser!(u32).range(100..=500))]
+    scale_desktop: Option<u32>,
+
+    /// Desired desktop width for the RDP session
+    #[clap(long, value_parser = clap::value_parser!(u16).range(1..=8192))]
+    desktop_width: Option<u16>,
+
+    /// Desired desktop height for the RDP session
+    #[clap(long, value_parser = clap::value_parser!(u16).range(1..=8192))]
+    desktop_height: Option<u16>,
+
+    /// Set required color depth. Currently only 32 and 16 bit color depths are supported
+    #[clap(long)]
+    color_depth: Option<u32>,
+
+    /// Ignore mouse pointer messages sent by the server. Increases performance when enabled, as the
+    /// client could skip costly software rendering of the pointer with alpha blending
+    #[clap(long)]
+    no_server_pointer: bool,
+
+    /// Automatically logon to the server by passing the INFO_AUTOLOGON flag
+    ///
+    /// This flag is ignored if CredSSP authentication is used.
+    /// You can use `--no-credssp` to ensure it's not.
+    #[clap(long)]
+    autologon: bool,
+
+    /// Disable TLS + Graphical login (legacy authentication method)
+    ///
+    /// Disabling this in order to enforce usage of CredSSP (NLA) is recommended.
+    #[clap(long)]
+    no_tls: bool,
+
+    /// Disable TLS + Network Level Authentication (NLA) using CredSSP
+    ///
+    /// NLA is used to authenticates RDP clients and servers before sending credentials over the network.
+    /// It's not recommended to disable this.
+    #[clap(long, alias = "no-nla")]
+    no_credssp: bool,
+
+    /// The clipboard type
+    #[clap(long, value_enum, default_value_t = ClipboardType::Enable)]
+    clipboard_type: ClipboardType,
+
+    /// The bitmap codecs to use (remotefx:on, ...)
+    #[clap(long, num_args = 1.., value_delimiter = ',')]
+    codecs: Vec<String>,
+
+    /// Disable bulk compression support.
+    ///
+    /// By default the client advertises support for bulk compression and the
+    /// server may send compressed PDUs. Pass `--no-compression` to disable it.
+    /// When not specified, the value from the `.rdp` file is used (if present),
+    /// otherwise compression is enabled by default.
+    #[clap(long)]
+    no_compression: bool,
+
+    /// Bulk compression level to negotiate with the server.
+    ///
+    /// Valid values:
+    ///   0 — MPPC with 8 KB history (RDP 4.0)
+    ///   1 — MPPC with 64 KB history (RDP 5.0)
+    ///   2 — NCRUSH (RDP 6.0)
+    ///   3 — XCRUSH (RDP 6.1)
+    #[clap(long, value_parser = clap::value_parser!(u32).range(0..=3))]
+    compression_level: Option<u32>,
+
+    /// Prevents session locking by injecting fake mouse movement events when
+    /// the connection is idle (interval in minutes)
+    #[clap(long)]
+    prevent_session_lock: Option<u32>,
+
+    /// Add DVC channel named pipe proxy
+    ///
+    /// The format is `<name>=<pipe>`, e.g., `ChannelName=PipeName` where `ChannelName` is the name of the channel,
+    /// and `PipeName` is the name of the named pipe to connect to (without OS-specific prefix).
+    /// `<pipe>` will automatically be prefixed with `\\.\pipe\` on Windows.
+    #[clap(long)]
+    dvc_proxy: Vec<DvcProxyInfo>,
+    /// Load a DVC client plugin DLL (Windows only).
+    ///
+    /// Path to a DVC plugin DLL that exports VirtualChannelGetInstance.
+    /// Example: C:\Windows\System32\webauthn.dll
+    #[cfg(windows)]
+    #[clap(long)]
+    dvc_plugin: Vec<PathBuf>,
+
+    /// Write the effective PropertySet (merged .rdp file and CLI overrides) to the given path and exit.
+    ///
+    /// The output is a standard `.rdp` file that can be used as a starting point for customisation
+    /// or passed back via `--rdp-file` on the next invocation.
+    #[clap(long)]
+    dump_rdp: Option<PathBuf>,
+}
+
+/// Result of parsing CLI args + loading the `.rdp` file: a configured [`ConfigBuilder`] plus the
+/// CLI-only settings that cannot live on the builder.
+///
+/// Call [`ViewerConfig::into_config`] to resolve the remaining required fields (interactive prompts
+/// + frontend-derived client identity) and build the strongly-typed [`Config`].
+pub struct ViewerConfig {
+    builder: ConfigBuilder,
+
+    // CLI-only settings that are not representable as `.rdp` file properties.
+    log_file: Option<String>,
+    dump_rdp: Option<PathBuf>,
+}
+
+impl ViewerConfig {
+    pub fn parse_args() -> anyhow::Result<Self> {
+        Self::parse_from(std::env::args_os())
+    }
+
+    pub fn parse_from<I, T>(args: I) -> anyhow::Result<Self>
+    where
+        I: IntoIterator<Item = T>,
+        T: Into<std::ffi::OsString> + Clone,
+    {
+        let args = Args::parse_from(args);
+
+        let mut properties = ironrdp_propertyset::PropertySet::new();
+
+        if let Some(rdp_file) = &args.rdp_file {
+            let input =
+                std::fs::read_to_string(rdp_file).with_context(|| format!("failed to read {}", rdp_file.display()))?;
+
+            if let Err(errors) = ironrdp_rdpfile::load(&mut properties, &input) {
+                for error in &errors {
+                    eprintln!("Warning: skipped entry in {}: {error}", rdp_file.display());
+                }
+            }
+        }
+
+        let log_file = args.log_file.clone();
+        let dump_rdp = args.dump_rdp.clone();
+
+        // The library overlays everything expressible as a `.rdp` property: destination, credentials,
+        // transport, channels, desktop size, audio, DVC proxies, etc.
+        let builder = ConfigBuilder::from_property_set(&properties)?;
+
+        // Whether the `.rdp` file requested clipboard redirection; the CLI `--clipboard-type` is
+        // resolved against this when applied below.
+        let redirect_clipboard = properties.redirect_clipboard().unwrap_or(true);
+
+        // CLI arguments take precedence: apply them on top of the `.rdp`-derived builder.
+        let builder = apply_cli_to_builder(builder, args, redirect_clipboard);
+
+        Ok(Self {
+            builder,
+            log_file,
+            dump_rdp,
+        })
+    }
+
+    pub fn into_config(self) -> anyhow::Result<Config> {
+        // When dumping, the built config is only used to observe the effective, secret-stripped
+        // PropertySet; we never start a session. Secrets are stripped on `build()` anyway, so there
+        // is no point prompting for them: fill a placeholder instead.
+        let dump = self.dump_rdp.is_some();
+        prompt_missing(self.builder, dump)
+    }
+
+    /// Path to the log file requested on the CLI, if any.
+    pub fn log_file(&self) -> Option<&str> {
+        self.log_file.as_deref()
+    }
+
+    /// Path to dump the effective `.rdp` PropertySet to, if `--dump-rdp` was given.
+    pub fn dump_rdp(&self) -> Option<&std::path::Path> {
+        self.dump_rdp.as_deref()
+    }
+}
+
+/// Apply CLI overrides on top of a builder that already reflects the `.rdp` file. Every flag that is
+/// present overwrites the corresponding builder (and mirrored property) value.
+fn apply_cli_to_builder(mut builder: ConfigBuilder, args: Args, redirect_clipboard: bool) -> ConfigBuilder {
+    // Validate the codecs early to surface help text before connecting.
+    {
+        let codecs: Vec<_> = args.codecs.iter().map(String::as_str).collect();
+        if let Err(help) = client_codecs_capabilities(&codecs) {
+            print!("{help}");
+            std::process::exit(0);
+        }
+    }
+
+    if let Some(destination) = args.destination {
+        builder = builder.with_destination(destination);
+    }
+    if let Some(username) = args.username {
+        builder = builder.with_username(username);
+    }
+    if let Some(password) = args.password {
+        builder = builder.with_password(password);
+    }
+    if let Some(domain) = args.domain {
+        builder = builder.with_domain(domain);
+    }
+    if let Some(scale) = args.scale_desktop {
+        builder = builder.with_desktop_scale_factor(scale);
+    }
+    if let Some(width) = args.desktop_width {
+        builder = builder.with_desktop_width(width);
+    }
+    if let Some(height) = args.desktop_height {
+        builder = builder.with_desktop_height(height);
+    }
+    if let Some(color_depth) = args.color_depth {
+        builder = builder.with_color_depth(color_depth);
+    }
+    if args.no_credssp {
+        builder = builder.with_credssp(false);
+    }
+    if args.no_tls {
+        builder = builder.with_tls(false);
+    }
+    if args.no_server_pointer {
+        builder = builder.with_server_pointer(false);
+    }
+    if args.autologon {
+        builder = builder.with_autologon(true);
+    }
+    if args.no_compression {
+        builder = builder.with_compression(false);
+    }
+    if let Some(level) = args.compression_level {
+        builder = builder.with_compression_level(level);
+    }
+    if let Some(minutes) = args.prevent_session_lock {
+        builder = builder.with_fake_events_interval(Duration::from_secs(u64::from(minutes) * 60));
+    }
+
+    // Transport overrides: RDCleanPath takes precedence over Gateway.
+    if let Some(url) = args.rdcleanpath_url {
+        builder = builder.with_transport(TransportKind::RDCleanPath { url });
+
+        if let Some(token) = args.rdcleanpath_token {
+            builder = builder.with_rdcleanpath_token(token);
+        }
+    } else if let Some(endpoint) = args.gw_endpoint {
+        builder = builder.with_transport(TransportKind::Gateway { endpoint });
+
+        if let Some(username) = args.gw_user {
+            builder = builder.with_gateway_username(username);
+        }
+        if let Some(password) = args.gw_pass {
+            builder = builder.with_gateway_password(password);
+        }
+    }
+
+    builder = builder.with_clipboard(resolve_clipboard_type(args.clipboard_type, redirect_clipboard));
+
+    // CLI-only knobs that are not representable as `.rdp` properties.
+    // TODO/FIXME: Some of these, we may want to add support for storing in .rdp files (e.g.: IME file name can be reasonably seen as a connection option)
+    builder = builder
+        .with_keyboard_type(args.keyboard_type.into_pdu())
+        .with_keyboard_subtype(args.keyboard_subtype)
+        .with_keyboard_functional_keys_count(args.keyboard_functional_keys_count)
+        .with_ime_file_name(args.ime_file_name)
+        .with_dig_product_id(args.dig_product_id)
+        .with_codecs(args.codecs);
+
+    for proxy in args.dvc_proxy {
+        builder = builder.with_dvc_pipe_proxy(proxy);
+    }
+
+    #[cfg(windows)]
+    for plugin in args.dvc_plugin {
+        builder = builder.with_dvc_plugin(plugin);
+    }
+
+    builder
+}
+
+/// Resolve the remaining [`MissingField`]s by prompting for credentials/addresses and deriving the
+/// frontend-specific client identity, then build the [`Config`].
+///
+/// When `dump` is set, the resulting config is only used to observe the effective, secret-stripped
+/// PropertySet (no session is started). Secret fields are stripped on `build()` regardless, so they
+/// are filled with a placeholder instead of being prompted for.
+fn prompt_missing(mut builder: ConfigBuilder, dump: bool) -> anyhow::Result<Config> {
+    // Stripped on `build()`, so any value works when only dumping the PropertySet.
+    const DUMP_SECRET_PLACEHOLDER: &str = "<stripped>";
+
+    for field in builder.missing() {
+        builder = match field {
+            MissingField::ServerAddress => {
+                let dest = inquire::Text::new("Server address:")
+                    .prompt()
+                    .context("Address prompt")?
+                    .pipe(Destination::new)?;
+                builder.with_destination(dest)
+            }
+            MissingField::Username => {
+                let username = inquire::Text::new("Username:").prompt().context("Username prompt")?;
+                builder.with_username(username)
+            }
+            MissingField::Password if dump => builder.with_password(DUMP_SECRET_PLACEHOLDER),
+            MissingField::Password => {
+                let password = inquire::Password::new("Password:")
+                    .without_confirmation()
+                    .prompt()
+                    .context("Password prompt")?;
+                builder.with_password(password)
+            }
+            MissingField::GatewayUsername => {
+                let username = inquire::Text::new("Gateway username:")
+                    .prompt()
+                    .context("Gateway username prompt")?;
+                builder.with_gateway_username(username)
+            }
+            MissingField::GatewayPassword if dump => builder.with_gateway_password(DUMP_SECRET_PLACEHOLDER),
+            MissingField::GatewayPassword => {
+                let password = inquire::Password::new("Gateway password:")
+                    .without_confirmation()
+                    .prompt()
+                    .context("Gateway password prompt")?;
+                builder.with_gateway_password(password)
+            }
+            MissingField::RDCleanPathToken if dump => builder.with_rdcleanpath_token(DUMP_SECRET_PLACEHOLDER),
+            MissingField::RDCleanPathToken => {
+                let token = inquire::Text::new("RDCleanPath token:")
+                    .prompt()
+                    .context("RDCleanPath token prompt")?;
+                builder.with_rdcleanpath_token(token)
+            }
+            // Frontend-derived identity: never prompted.
+            MissingField::ClientBuild => builder.with_client_build(client_build()),
+            MissingField::ClientDir => {
+                // NOTE: hardcode this value like in freerdp
+                // https://github.com/FreeRDP/FreeRDP/blob/4e24b966c86fdf494a782f0dfcfc43a057a2ea60/libfreerdp/core/settings.c#LL49C34-L49C70
+                builder.with_client_dir("C:\\Windows\\System32\\mstscax.dll")
+            }
+            MissingField::Platform => builder.with_platform(current_platform()),
+            MissingField::ClientName => builder.with_client_name(client_name()),
+        };
+    }
+
+    builder.build()
+}
+
+fn client_build() -> u32 {
+    semver::Version::parse(env!("CARGO_PKG_VERSION"))
+        .map_or(0, |v| v.major * 100 + v.minor * 10 + v.patch)
+        .try_into()
+        .unwrap_or(0)
+}
+
+fn client_name() -> String {
+    whoami::hostname().unwrap_or_else(|_| "ironrdp".to_owned())
+}
+
+fn current_platform() -> MajorPlatformType {
+    match whoami::platform() {
+        whoami::Platform::Windows => MajorPlatformType::WINDOWS,
+        whoami::Platform::Linux => MajorPlatformType::UNIX,
+        whoami::Platform::Mac => MajorPlatformType::MACINTOSH,
+        whoami::Platform::Ios => MajorPlatformType::IOS,
+        whoami::Platform::Android => MajorPlatformType::ANDROID,
+        _ => MajorPlatformType::UNSPECIFIED,
+    }
+}
+
+pub fn parse_config() -> anyhow::Result<Config> {
+    ViewerConfig::parse_args()?.into_config()
+}
+
+pub fn parse_config_from<I, T>(args: I) -> anyhow::Result<Config>
+where
+    I: IntoIterator<Item = T>,
+    T: Into<std::ffi::OsString> + Clone,
+{
+    ViewerConfig::parse_from(args)?.into_config()
+}
+
+fn resolve_clipboard_type(cli: ClipboardType, redirect_clipboard: bool) -> ResolvedClipboardType {
+    if !redirect_clipboard {
+        return ResolvedClipboardType::Disable;
+    }
+
+    match cli {
+        ClipboardType::Enable => ResolvedClipboardType::Enable,
+        ClipboardType::Disable => ResolvedClipboardType::Disable,
+        ClipboardType::Stub => ResolvedClipboardType::Stub,
+    }
+}
diff --git a/vendor/ironrdp-viewer/src/clipboard.rs b/vendor/ironrdp-viewer/src/clipboard.rs
new file mode 100644
index 0000000..cc304c0
--- /dev/null
+++ b/vendor/ironrdp-viewer/src/clipboard.rs
@@ -0,0 +1,24 @@
+use ironrdp::cliprdr::backend::{ClipboardMessage, ClipboardMessageProxy};
+use ironrdp::client::rdp::RdpInputEvent;
+use tokio::sync::mpsc;
+use tracing::error;
+
+/// Shim for sending and receiving CLIPRDR events as `RdpInputEvent`
+#[derive(Clone, Debug)]
+pub struct ClientClipboardMessageProxy {
+    tx: mpsc::UnboundedSender<RdpInputEvent>,
+}
+
+impl ClientClipboardMessageProxy {
+    pub fn new(tx: mpsc::UnboundedSender<RdpInputEvent>) -> Self {
+        Self { tx }
+    }
+}
+
+impl ClipboardMessageProxy for ClientClipboardMessageProxy {
+    fn send_clipboard_message(&self, message: ClipboardMessage) {
+        if self.tx.send(RdpInputEvent::Clipboard(message)).is_err() {
+            error!("Failed to send os clipboard message, receiver is closed");
+        }
+    }
+}
diff --git a/vendor/ironrdp-viewer/src/lib.rs b/vendor/ironrdp-viewer/src/lib.rs
new file mode 100644
index 0000000..2939e5d
--- /dev/null
+++ b/vendor/ironrdp-viewer/src/lib.rs
@@ -0,0 +1,13 @@
+#![cfg_attr(doc, doc = include_str!("../README.md"))]
+#![doc(html_logo_url = "https://cdnweb.devolutions.net/images/projects/devolutions/logos/devolutions-icon-shadow.svg")]
+#![allow(unused_crate_dependencies)] // false positives because there is both a library and a binary
+
+// No need to be as strict as in production libraries
+#![allow(clippy::arithmetic_side_effects)]
+#![allow(clippy::cast_lossless)]
+#![allow(clippy::cast_possible_truncation)]
+#![allow(clippy::cast_possible_wrap)]
+#![allow(clippy::cast_sign_loss)]
+
+pub mod app;
+pub mod cli;
diff --git a/vendor/ironrdp-viewer/src/main.rs b/vendor/ironrdp-viewer/src/main.rs
new file mode 100644
index 0000000..797d327
--- /dev/null
+++ b/vendor/ironrdp-viewer/src/main.rs
@@ -0,0 +1,114 @@
+#![allow(unused_crate_dependencies)] // false positives because there is both a library and a binary
+
+use anyhow::Context as _;
+use ironrdp::client::rdp::{RdpClient, RdpOutputEvent};
+use ironrdp_viewer::app::App;
+use ironrdp_viewer::cli::ViewerConfig;
+use tokio::runtime;
+use tokio::sync::mpsc;
+use tracing::debug;
+use winit::dpi::PhysicalSize;
+use winit::event_loop::EventLoop;
+
+fn main() -> anyhow::Result<()> {
+    let cli = ViewerConfig::parse_args().context("CLI arguments parsing")?;
+
+    setup_logging(cli.log_file()).context("unable to initialize logging")?;
+
+    let dump_rdp = cli.dump_rdp().map(ToOwned::to_owned);
+    let config = cli.into_config().context("configuration")?;
+
+    if let Some(dump_path) = dump_rdp {
+        // Dump the effective, secret-stripped PropertySet observed from the built configuration.
+        let content = ironrdp_rdpfile::write(config.properties());
+        std::fs::write(&dump_path, &content).with_context(|| format!("failed to write {}", dump_path.display()))?;
+        return Ok(());
+    }
+
+    debug!("Initialize App");
+    let event_loop = EventLoop::<RdpOutputEvent>::with_user_event().build()?;
+    let event_loop_proxy = event_loop.create_proxy();
+    let (output_event_sender, mut output_event_receiver) = mpsc::channel::<RdpOutputEvent>(64);
+    let initial_window_size = PhysicalSize::new(
+        u32::from(config.connector().desktop_size.width),
+        u32::from(config.connector().desktop_size.height),
+    );
+
+    let client = RdpClient::new(config, output_event_sender);
+    let input_event_sender = client.input_sender();
+
+    let mut app =
+        App::new(&event_loop, &input_event_sender, initial_window_size).context("unable to initialize App")?;
+
+    let rt = runtime::Builder::new_multi_thread()
+        .enable_all()
+        .build()
+        .context("unable to create tokio runtime")?;
+
+    // Forward output events from the library's mpsc channel to winit's `EventLoopProxy`.
+    //
+    // The library is winit-agnostic: it just emits `RdpOutputEvent`s on a plain
+    // `tokio::sync::mpsc` channel. Bridging onto the GUI event loop is the binary's job.
+    rt.spawn(async move {
+        while let Some(event) = output_event_receiver.recv().await {
+            if event_loop_proxy.send_event(event).is_err() {
+                // The event loop is gone; nothing left to forward.
+                break;
+            }
+        }
+    });
+
+    debug!("Start RDP thread");
+    std::thread::spawn(move || {
+        rt.block_on(client.run());
+    });
+
+    debug!("Run App");
+    event_loop.run_app(&mut app)?;
+
+    Ok(())
+}
+
+fn setup_logging(log_file: Option<&str>) -> anyhow::Result<()> {
+    use std::fs::OpenOptions;
+
+    use tracing::metadata::LevelFilter;
+    use tracing_subscriber::EnvFilter;
+    use tracing_subscriber::prelude::*;
+
+    let env_filter = EnvFilter::builder()
+        .with_default_directive(LevelFilter::WARN.into())
+        .with_env_var("IRONRDP_LOG")
+        .from_env_lossy();
+
+    if let Some(log_file) = log_file {
+        let file = OpenOptions::new()
+            .create(true)
+            .append(true)
+            .open(log_file)
+            .with_context(|| format!("couldn't open {log_file}"))?;
+        let fmt_layer = tracing_subscriber::fmt::layer()
+            .with_ansi(false)
+            .with_writer(file)
+            .compact();
+        tracing_subscriber::registry()
+            .with(env_filter)
+            .with(fmt_layer)
+            .try_init()
+            .context("failed to set tracing global subscriber")?;
+    } else {
+        let fmt_layer = tracing_subscriber::fmt::layer()
+            .compact()
+            .with_file(true)
+            .with_line_number(true)
+            .with_thread_ids(true)
+            .with_target(false);
+        tracing_subscriber::registry()
+            .with(env_filter)
+            .with(fmt_layer)
+            .try_init()
+            .context("failed to set tracing global subscriber")?;
+    };
+
+    Ok(())
+}