ai-remote 0.1.0

package/dist/protocols/rdp/crypto.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/protocols/rdp/crypto.ts"],
+  "sourcesContent": ["// ---------------------------------------------------------------------------\n// Crypto primitives for the RDP Standard Security layer (MS-RDPBCGR 5.3).\n//\n// RDP's own encryption layer predates anything WebCrypto exposes: it needs\n// synchronous MD5 and SHA-1 for a per-PDU MAC, RC4 stream state that persists\n// across PDUs, and textbook RSA against the key the server hands out in its\n// certificate. All of it is small, so it lives here rather than as a\n// dependency, and every function is deliberately synchronous -- the packet path\n// runs inside WebSocket message handlers.\n// ---------------------------------------------------------------------------\n\n// --- MD5 -------------------------------------------------------------------\n\nconst MD5_SHIFTS = [\n  7, 12, 17, 22, 7, 12, 17, 22, 7, 12, 17, 22, 7, 12, 17, 22,\n  5, 9, 14, 20, 5, 9, 14, 20, 5, 9, 14, 20, 5, 9, 14, 20,\n  4, 11, 16, 23, 4, 11, 16, 23, 4, 11, 16, 23, 4, 11, 16, 23,\n  6, 10, 15, 21, 6, 10, 15, 21, 6, 10, 15, 21, 6, 10, 15, 21,\n];\n\n// K[i] = floor(abs(sin(i + 1)) * 2^32) -- generated so the table cannot be mistyped.\nconst MD5_K = new Uint32Array(\n  Array.from({ length: 64 }, (_, i) => Math.floor(Math.abs(Math.sin(i + 1)) * 4294967296))\n);\n\nfunction rotl32(value: Uint8Array, count: number) {\n  return (value << count) | (value >>> (32 - count));\n}\n\nexport function md5(message: Uint8Array) {\n  const bitLength = message.length * 8;\n  const blockCount = Math.floor((message.length + 8) / 64) + 1;\n  const padded = new Uint8Array(blockCount * 64);\n  padded.set(message);\n  padded[message.length] = 0x80;\n\n  // Length is appended as a 64-bit little-endian bit count.\n  const tail = new DataView(padded.buffer, padded.byteLength - 8, 8);\n  tail.setUint32(0, bitLength >>> 0, true);\n  tail.setUint32(4, Math.floor(bitLength / 4294967296), true);\n\n  let a0 = 0x67452301, b0 = 0xefcdab89, c0 = 0x98badcfe, d0 = 0x10325476;\n  const words = new Uint32Array(16);\n  const view = new DataView(padded.buffer, padded.byteOffset, padded.byteLength);\n\n  for (let block = 0; block < blockCount; block++) {\n    for (let i = 0; i < 16; i++) words[i] = view.getUint32(block * 64 + i * 4, true);\n\n    let a = a0, b = b0, c = c0, d = d0;\n    for (let i = 0; i < 64; i++) {\n      let f;\n      let g;\n      if (i < 16) {\n        f = (b & c) | (~b & d);\n        g = i;\n      } else if (i < 32) {\n        f = (d & b) | (~d & c);\n        g = (5 * i + 1) % 16;\n      } else if (i < 48) {\n        f = b ^ c ^ d;\n        g = (3 * i + 5) % 16;\n      } else {\n        f = c ^ (b | ~d);\n        g = (7 * i) % 16;\n      }\n\n      const temp = d;\n      d = c;\n      c = b;\n      const sum = (a + f + MD5_K[i] + words[g]) | 0;\n      b = (b + rotl32(sum, MD5_SHIFTS[i])) | 0;\n      a = temp;\n    }\n\n    a0 = (a0 + a) | 0;\n    b0 = (b0 + b) | 0;\n    c0 = (c0 + c) | 0;\n    d0 = (d0 + d) | 0;\n  }\n\n  const digest = new Uint8Array(16);\n  const out = new DataView(digest.buffer);\n  out.setUint32(0, a0 >>> 0, true);\n  out.setUint32(4, b0 >>> 0, true);\n  out.setUint32(8, c0 >>> 0, true);\n  out.setUint32(12, d0 >>> 0, true);\n  return digest;\n}\n\n// --- SHA-1 -----------------------------------------------------------------\n\nexport function sha1(message: Uint8Array) {\n  const bitLength = message.length * 8;\n  const blockCount = Math.floor((message.length + 8) / 64) + 1;\n  const padded = new Uint8Array(blockCount * 64);\n  padded.set(message);\n  padded[message.length] = 0x80;\n\n  const tail = new DataView(padded.buffer, padded.byteLength - 8, 8);\n  tail.setUint32(0, Math.floor(bitLength / 4294967296));\n  tail.setUint32(4, bitLength >>> 0);\n\n  let h0 = 0x67452301, h1 = 0xefcdab89, h2 = 0x98badcfe, h3 = 0x10325476, h4 = 0xc3d2e1f0;\n  const words = new Uint32Array(80);\n  const view = new DataView(padded.buffer, padded.byteOffset, padded.byteLength);\n\n  for (let block = 0; block < blockCount; block++) {\n    for (let i = 0; i < 16; i++) words[i] = view.getUint32(block * 64 + i * 4);\n    for (let i = 16; i < 80; i++) {\n      words[i] = rotl32(words[i - 3] ^ words[i - 8] ^ words[i - 14] ^ words[i - 16], 1);\n    }\n\n    let a = h0, b = h1, c = h2, d = h3, e = h4;\n    for (let i = 0; i < 80; i++) {\n      let f;\n      let k;\n      if (i < 20) {\n        f = (b & c) | (~b & d);\n        k = 0x5a827999;\n      } else if (i < 40) {\n        f = b ^ c ^ d;\n        k = 0x6ed9eba1;\n      } else if (i < 60) {\n        f = (b & c) | (b & d) | (c & d);\n        k = 0x8f1bbcdc;\n      } else {\n        f = b ^ c ^ d;\n        k = 0xca62c1d6;\n      }\n\n      const temp = (rotl32(a, 5) + f + e + k + words[i]) | 0;\n      e = d;\n      d = c;\n      c = rotl32(b, 30);\n      b = a;\n      a = temp;\n    }\n\n    h0 = (h0 + a) | 0;\n    h1 = (h1 + b) | 0;\n    h2 = (h2 + c) | 0;\n    h3 = (h3 + d) | 0;\n    h4 = (h4 + e) | 0;\n  }\n\n  const digest = new Uint8Array(20);\n  const out = new DataView(digest.buffer);\n  [h0, h1, h2, h3, h4].forEach((word, i) => out.setUint32(i * 4, word >>> 0));\n  return digest;\n}\n\n// --- RC4 -------------------------------------------------------------------\n\n/** RC4 keystream position. RDP re-keys every 4096 PDUs, so this is mutable. */\nexport interface Rc4State {\n  s: Uint8Array;\n  i: number;\n  j: number;\n}\n\n/** The five values MS-RDPBCGR 5.3.5 derives from the two randoms. */\nexport interface SessionKeys {\n  macKey: Uint8Array;\n  keyLength: number;\n  is40Bit: boolean;\n  initialDecryptKey: Uint8Array;\n  initialEncryptKey: Uint8Array;\n  decryptKey: Uint8Array;\n  encryptKey: Uint8Array;\n}\n\nexport function rc4Init(key: Uint8Array): Rc4State {\n  const s = new Uint8Array(256);\n  for (let i = 0; i < 256; i++) s[i] = i;\n\n  let j = 0;\n  for (let i = 0; i < 256; i++) {\n    j = (j + (s[i] ?? 0) + (key[i % key.length] ?? 0)) & 0xff;\n    const t = s[i] ?? 0;\n    s[i] = s[j] ?? 0;\n    s[j] = t;\n  }\n  return { s, i: 0, j: 0 };\n}\n\n/** RC4 is symmetric, so this both encrypts and decrypts. State advances. */\nexport function rc4Crypt(state, data: Uint8Array) {\n  const out = new Uint8Array(data.length);\n  const { s } = state;\n  let { i, j } = state;\n\n  for (let n = 0; n < data.length; n++) {\n    i = (i + 1) & 0xff;\n    j = (j + s[i]) & 0xff;\n    const t = s[i];\n    s[i] = s[j];\n    s[j] = t;\n    out[n] = data[n] ^ s[(s[i] + s[j]) & 0xff];\n  }\n\n  state.i = i;\n  state.j = j;\n  return out;\n}\n\n// --- RSA -------------------------------------------------------------------\n\nfunction bigIntFromLe(bytes: Uint8Array) {\n  let value = 0n;\n  for (let i = bytes.length - 1; i >= 0; i--) value = (value << 8n) | BigInt(bytes[i]);\n  return value;\n}\n\nfunction bigIntToLe(value: Uint8Array, length: number) {\n  const out = new Uint8Array(length);\n  let remaining = value;\n  for (let i = 0; i < length; i++) {\n    out[i] = Number(remaining & 0xffn);\n    remaining >>= 8n;\n  }\n  return out;\n}\n\nfunction modPow(base: bigint, exponent: bigint, modulus: bigint) {\n  let result = 1n;\n  let b = base % modulus;\n  let e = exponent;\n  while (e > 0n) {\n    if (e & 1n) result = (result * b) % modulus;\n    b = (b * b) % modulus;\n    e >>= 1n;\n  }\n  return result;\n}\n\n/**\n * Textbook RSA over little-endian buffers, which is what RDP's Security\n * Exchange PDU carries: the client random is raised to the server's public\n * exponent with no padding scheme (MS-RDPBCGR 5.3.4.1).\n */\nexport function rsaEncrypt(dataLe: Uint8Array, modulusLe: Uint8Array, exponentLe: Uint8Array) {\n  const modulus = bigIntFromLe(modulusLe);\n  const exponent = bigIntFromLe(exponentLe);\n  const value = bigIntFromLe(dataLe);\n  if (value >= modulus) throw new Error('RDP: client random is larger than the server RSA modulus');\n  return bigIntToLe(modPow(value, exponent, modulus), modulusLe.length);\n}\n\n/**\n * RSAES-PKCS1-v1_5 encryption over big-endian buffers, which is what TLS uses\n * for an RSA key exchange. WebCrypto only offers OAEP, so the padding is built\n * here and the modular exponentiation reuses the same BigInt path as RDP.\n */\nexport function rsaEncryptPkcs1(message: Uint8Array, modulusBe: Uint8Array, exponentBe: Uint8Array) {\n  const bigIntFromBe = (bytes: Uint8Array) => {\n    let value = 0n;\n    for (const byte of bytes) value = (value << 8n) | BigInt(byte);\n    return value;\n  };\n\n  const modulus = bigIntFromBe(modulusBe);\n  const exponent = bigIntFromBe(exponentBe);\n  const keyLength = modulusBe.length;\n  if (message.length > keyLength - 11) {\n    throw new Error('TLS: RSA message is too long for this key');\n  }\n\n  // EM = 0x00 || 0x02 || non-zero padding || 0x00 || message\n  const block = new Uint8Array(keyLength);\n  block[0] = 0x00;\n  block[1] = 0x02;\n  const paddingLength = keyLength - message.length - 3;\n  const padding = new Uint8Array(paddingLength);\n  crypto.getRandomValues(padding);\n  for (let i = 0; i < paddingLength; i++) {\n    // A padding byte of zero would be read as the separator.\n    while (padding[i] === 0) padding[i] = Math.max(1, crypto.getRandomValues(new Uint8Array(1))[0]);\n    block[2 + i] = padding[i];\n  }\n  block[2 + paddingLength] = 0x00;\n  block.set(message, 3 + paddingLength);\n\n  const cipher = modPow(bigIntFromBe(block), exponent, modulus);\n  const out = new Uint8Array(keyLength);\n  let remaining = cipher;\n  for (let i = keyLength - 1; i >= 0; i--) {\n    out[i] = Number(remaining & 0xffn);\n    remaining >>= 8n;\n  }\n  return out;\n}\n\n// --- RDP key derivation (MS-RDPBCGR 5.3.5) ---------------------------------\n\nconst PAD1 = new Uint8Array(40).fill(0x36);\nconst PAD2 = new Uint8Array(48).fill(0x5c);\n\nexport const ENCRYPTION_METHOD = {\n  NONE: 0x00000000,\n  BIT_40: 0x00000001,\n  BIT_128: 0x00000002,\n  BIT_56: 0x00000008,\n  FIPS: 0x00000010,\n};\n\nfunction concat(...parts) {\n  const total = parts.reduce((sum, part) => sum + part.length, 0);\n  const out = new Uint8Array(total);\n  let offset = 0;\n  for (const part of parts) {\n    out.set(part, offset);\n    offset += part.length;\n  }\n  return out;\n}\n\n/** SaltedHash(S, I) = MD5(S + SHA1(I + S + clientRandom + serverRandom)) */\nfunction saltedHash(secret: Uint8Array, salt: Uint8Array, clientRandom: Uint8Array, serverRandom: Uint8Array) {\n  return md5(concat(secret, sha1(concat(salt, secret, clientRandom, serverRandom))));\n}\n\n/** FinalHash(K) = MD5(K + clientRandom + serverRandom) */\nfunction finalHash(key: Uint8Array, clientRandom: Uint8Array, serverRandom: Uint8Array) {\n  return md5(concat(key, clientRandom, serverRandom));\n}\n\nconst SALT_A = new Uint8Array([0x41]);\nconst SALT_BB = new Uint8Array([0x42, 0x42]);\nconst SALT_CCC = new Uint8Array([0x43, 0x43, 0x43]);\nconst SALT_X = new Uint8Array([0x58]);\nconst SALT_YY = new Uint8Array([0x59, 0x59]);\nconst SALT_ZZZ = new Uint8Array([0x5a, 0x5a, 0x5a]);\n\n/**\n * A 40-bit or 56-bit session key is a 64-bit key with known leading bytes;\n * only the remaining entropy is secret (MS-RDPBCGR 5.3.5.1).\n */\nfunction reduceKey(key: Uint8Array, keyLength, is40Bit) {\n  if (keyLength !== 8) return key.slice(0, keyLength);\n\n  const reduced = key.slice(0, 8);\n  reduced[0] = 0xd1;\n  if (is40Bit) {\n    reduced[1] = 0x26;\n    reduced[2] = 0x9e;\n  }\n  return reduced;\n}\n\nexport function keyLengthForMethod(encryptionMethod: number) {\n  if (encryptionMethod === ENCRYPTION_METHOD.BIT_40) return 8;\n  if (encryptionMethod === ENCRYPTION_METHOD.BIT_56) return 8;\n  return 16;\n}\n\n/**\n * Derive the MAC key and both directional RC4 keys from the two random values\n * exchanged during connection.\n */\nexport function deriveSessionKeys(clientRandom: Uint8Array, serverRandom: Uint8Array, encryptionMethod: number) {\n  const preMasterSecret = concat(clientRandom.subarray(0, 24), serverRandom.subarray(0, 24));\n\n  const masterSecret = concat(\n    saltedHash(preMasterSecret, SALT_A, clientRandom, serverRandom),\n    saltedHash(preMasterSecret, SALT_BB, clientRandom, serverRandom),\n    saltedHash(preMasterSecret, SALT_CCC, clientRandom, serverRandom)\n  );\n\n  const sessionKeyBlob = concat(\n    saltedHash(masterSecret, SALT_X, clientRandom, serverRandom),\n    saltedHash(masterSecret, SALT_YY, clientRandom, serverRandom),\n    saltedHash(masterSecret, SALT_ZZZ, clientRandom, serverRandom)\n  );\n\n  const keyLength = keyLengthForMethod(encryptionMethod);\n  const is40Bit = encryptionMethod === ENCRYPTION_METHOD.BIT_40;\n\n  const applyReduction = (key: Uint8Array) => reduceKey(key, keyLength, is40Bit);\n\n  const macKey = applyReduction(sessionKeyBlob.subarray(0, 16));\n  const decryptKey = applyReduction(finalHash(sessionKeyBlob.subarray(16, 32), clientRandom, serverRandom));\n  const encryptKey = applyReduction(finalHash(sessionKeyBlob.subarray(32, 48), clientRandom, serverRandom));\n\n  return {\n    macKey,\n    keyLength,\n    is40Bit,\n    // Session-key updates always restart from these initial values.\n    initialDecryptKey: decryptKey.slice(),\n    initialEncryptKey: encryptKey.slice(),\n    decryptKey,\n    encryptKey,\n  };\n}\n\n/**\n * MACSignature = First64Bits(MD5(macKey + Pad2 + SHA1(macKey + Pad1 + len + data)))\n */\nexport function macSignature(macKey, data: Uint8Array) {\n  const lengthField = new Uint8Array(4);\n  new DataView(lengthField.buffer).setUint32(0, data.length, true);\n  const inner = sha1(concat(macKey, PAD1, lengthField, data));\n  return md5(concat(macKey, PAD2, inner)).subarray(0, 8);\n}\n\n/**\n * Every 4096 PDUs the RC4 key is refreshed from the initial key\n * (MS-RDPBCGR 5.3.7.1). The refreshed key is salted with itself.\n */\nexport function updateSessionKey(initialKey, currentKey, keyLength, is40Bit) {\n  const inner = sha1(concat(initialKey, PAD1, currentKey));\n  const nextKey = md5(concat(initialKey, PAD2, inner)).slice(0, keyLength);\n\n  const salted = rc4Crypt(rc4Init(nextKey), nextKey);\n  return reduceKey(salted, keyLength, is40Bit);\n}\n"],
+  "mappings": "AAaA,MAAM,aAAa;AAAA,EACjB;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EAAI;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EAAI;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EAAI;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EACxD;AAAA,EAAG;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EAAG;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EAAG;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EAAG;AAAA,EAAG;AAAA,EAAI;AAAA,EACpD;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EAAI;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EAAI;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EAAI;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EACxD;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EAAI;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EAAI;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EAAI;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAC1D;AAGA,MAAM,QAAQ,IAAI;AAAA,EAChB,MAAM,KAAK,EAAE,QAAQ,GAAG,GAAG,CAAC,GAAG,MAAM,KAAK,MAAM,KAAK,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC;AACzF;AAEA,SAAS,OAAO,OAAmB,OAAe;AAChD,SAAQ,SAAS,QAAU,UAAW,KAAK;AAC7C;AAEO,SAAS,IAAI,SAAqB;AACvC,QAAM,YAAY,QAAQ,SAAS;AACnC,QAAM,aAAa,KAAK,OAAO,QAAQ,SAAS,KAAK,EAAE,IAAI;AAC3D,QAAM,SAAS,IAAI,WAAW,aAAa,EAAE;AAC7C,SAAO,IAAI,OAAO;AAClB,SAAO,QAAQ,MAAM,IAAI;AAGzB,QAAM,OAAO,IAAI,SAAS,OAAO,QAAQ,OAAO,aAAa,GAAG,CAAC;AACjE,OAAK,UAAU,GAAG,cAAc,GAAG,IAAI;AACvC,OAAK,UAAU,GAAG,KAAK,MAAM,YAAY,UAAU,GAAG,IAAI;AAE1D,MAAI,KAAK,YAAY,KAAK,YAAY,KAAK,YAAY,KAAK;AAC5D,QAAM,QAAQ,IAAI,YAAY,EAAE;AAChC,QAAM,OAAO,IAAI,SAAS,OAAO,QAAQ,OAAO,YAAY,OAAO,UAAU;AAE7E,WAAS,QAAQ,GAAG,QAAQ,YAAY,SAAS;AAC/C,aAAS,IAAI,GAAG,IAAI,IAAI,IAAK,OAAM,CAAC,IAAI,KAAK,UAAU,QAAQ,KAAK,IAAI,GAAG,IAAI;AAE/E,QAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI;AAChC,aAAS,IAAI,GAAG,IAAI,IAAI,KAAK;AAC3B,UAAI;AACJ,UAAI;AACJ,UAAI,IAAI,IAAI;AACV,YAAK,IAAI,IAAM,CAAC,IAAI;AACpB,YAAI;AAAA,MACN,WAAW,IAAI,IAAI;AACjB,YAAK,IAAI,IAAM,CAAC,IAAI;AACpB,aAAK,IAAI,IAAI,KAAK;AAAA,MACpB,WAAW,IAAI,IAAI;AACjB,YAAI,IAAI,IAAI;AACZ,aAAK,IAAI,IAAI,KAAK;AAAA,MACpB,OAAO;AACL,YAAI,KAAK,IAAI,CAAC;AACd,YAAK,IAAI,IAAK;AAAA,MAChB;AAEA,YAAM,OAAO;AACb,UAAI;AACJ,UAAI;AACJ,YAAM,MAAO,IAAI,IAAI,MAAM,CAAC,IAAI,MAAM,CAAC,IAAK;AAC5C,UAAK,IAAI,OAAO,KAAK,WAAW,CAAC,CAAC,IAAK;AACvC,UAAI;AAAA,IACN;AAEA,SAAM,KAAK,IAAK;AAChB,SAAM,KAAK,IAAK;AAChB,SAAM,KAAK,IAAK;AAChB,SAAM,KAAK,IAAK;AAAA,EAClB;AAEA,QAAM,SAAS,IAAI,WAAW,EAAE;AAChC,QAAM,MAAM,IAAI,SAAS,OAAO,MAAM;AACtC,MAAI,UAAU,GAAG,OAAO,GAAG,IAAI;AAC/B,MAAI,UAAU,GAAG,OAAO,GAAG,IAAI;AAC/B,MAAI,UAAU,GAAG,OAAO,GAAG,IAAI;AAC/B,MAAI,UAAU,IAAI,OAAO,GAAG,IAAI;AAChC,SAAO;AACT;AAIO,SAAS,KAAK,SAAqB;AACxC,QAAM,YAAY,QAAQ,SAAS;AACnC,QAAM,aAAa,KAAK,OAAO,QAAQ,SAAS,KAAK,EAAE,IAAI;AAC3D,QAAM,SAAS,IAAI,WAAW,aAAa,EAAE;AAC7C,SAAO,IAAI,OAAO;AAClB,SAAO,QAAQ,MAAM,IAAI;AAEzB,QAAM,OAAO,IAAI,SAAS,OAAO,QAAQ,OAAO,aAAa,GAAG,CAAC;AACjE,OAAK,UAAU,GAAG,KAAK,MAAM,YAAY,UAAU,CAAC;AACpD,OAAK,UAAU,GAAG,cAAc,CAAC;AAEjC,MAAI,KAAK,YAAY,KAAK,YAAY,KAAK,YAAY,KAAK,WAAY,KAAK;AAC7E,QAAM,QAAQ,IAAI,YAAY,EAAE;AAChC,QAAM,OAAO,IAAI,SAAS,OAAO,QAAQ,OAAO,YAAY,OAAO,UAAU;AAE7E,WAAS,QAAQ,GAAG,QAAQ,YAAY,SAAS;AAC/C,aAAS,IAAI,GAAG,IAAI,IAAI,IAAK,OAAM,CAAC,IAAI,KAAK,UAAU,QAAQ,KAAK,IAAI,CAAC;AACzE,aAAS,IAAI,IAAI,IAAI,IAAI,KAAK;AAC5B,YAAM,CAAC,IAAI,OAAO,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,GAAG,CAAC;AAAA,IAClF;AAEA,QAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI;AACxC,aAAS,IAAI,GAAG,IAAI,IAAI,KAAK;AAC3B,UAAI;AACJ,UAAI;AACJ,UAAI,IAAI,IAAI;AACV,YAAK,IAAI,IAAM,CAAC,IAAI;AACpB,YAAI;AAAA,MACN,WAAW,IAAI,IAAI;AACjB,YAAI,IAAI,IAAI;AACZ,YAAI;AAAA,MACN,WAAW,IAAI,IAAI;AACjB,YAAK,IAAI,IAAM,IAAI,IAAM,IAAI;AAC7B,YAAI;AAAA,MACN,OAAO;AACL,YAAI,IAAI,IAAI;AACZ,YAAI;AAAA,MACN;AAEA,YAAM,OAAQ,OAAO,GAAG,CAAC,IAAI,IAAI,IAAI,IAAI,MAAM,CAAC,IAAK;AACrD,UAAI;AACJ,UAAI;AACJ,UAAI,OAAO,GAAG,EAAE;AAChB,UAAI;AACJ,UAAI;AAAA,IACN;AAEA,SAAM,KAAK,IAAK;AAChB,SAAM,KAAK,IAAK;AAChB,SAAM,KAAK,IAAK;AAChB,SAAM,KAAK,IAAK;AAChB,SAAM,KAAK,IAAK;AAAA,EAClB;AAEA,QAAM,SAAS,IAAI,WAAW,EAAE;AAChC,QAAM,MAAM,IAAI,SAAS,OAAO,MAAM;AACtC,GAAC,IAAI,IAAI,IAAI,IAAI,EAAE,EAAE,QAAQ,CAAC,MAAM,MAAM,IAAI,UAAU,IAAI,GAAG,SAAS,CAAC,CAAC;AAC1E,SAAO;AACT;AAsBO,SAAS,QAAQ,KAA2B;AACjD,QAAM,IAAI,IAAI,WAAW,GAAG;AAC5B,WAAS,IAAI,GAAG,IAAI,KAAK,IAAK,GAAE,CAAC,IAAI;AAErC,MAAI,IAAI;AACR,WAAS,IAAI,GAAG,IAAI,KAAK,KAAK;AAC5B,QAAK,KAAK,EAAE,CAAC,KAAK,MAAM,IAAI,IAAI,IAAI,MAAM,KAAK,KAAM;AACrD,UAAM,IAAI,EAAE,CAAC,KAAK;AAClB,MAAE,CAAC,IAAI,EAAE,CAAC,KAAK;AACf,MAAE,CAAC,IAAI;AAAA,EACT;AACA,SAAO,EAAE,GAAG,GAAG,GAAG,GAAG,EAAE;AACzB;AAGO,SAAS,SAAS,OAAO,MAAkB;AAChD,QAAM,MAAM,IAAI,WAAW,KAAK,MAAM;AACtC,QAAM,EAAE,EAAE,IAAI;AACd,MAAI,EAAE,GAAG,EAAE,IAAI;AAEf,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,QAAK,IAAI,IAAK;AACd,QAAK,IAAI,EAAE,CAAC,IAAK;AACjB,UAAM,IAAI,EAAE,CAAC;AACb,MAAE,CAAC,IAAI,EAAE,CAAC;AACV,MAAE,CAAC,IAAI;AACP,QAAI,CAAC,IAAI,KAAK,CAAC,IAAI,EAAG,EAAE,CAAC,IAAI,EAAE,CAAC,IAAK,GAAI;AAAA,EAC3C;AAEA,QAAM,IAAI;AACV,QAAM,IAAI;AACV,SAAO;AACT;AAIA,SAAS,aAAa,OAAmB;AACvC,MAAI,QAAQ;AACZ,WAAS,IAAI,MAAM,SAAS,GAAG,KAAK,GAAG,IAAK,SAAS,SAAS,KAAM,OAAO,MAAM,CAAC,CAAC;AACnF,SAAO;AACT;AAEA,SAAS,WAAW,OAAmB,QAAgB;AACrD,QAAM,MAAM,IAAI,WAAW,MAAM;AACjC,MAAI,YAAY;AAChB,WAAS,IAAI,GAAG,IAAI,QAAQ,KAAK;AAC/B,QAAI,CAAC,IAAI,OAAO,YAAY,KAAK;AACjC,kBAAc;AAAA,EAChB;AACA,SAAO;AACT;AAEA,SAAS,OAAO,MAAc,UAAkB,SAAiB;AAC/D,MAAI,SAAS;AACb,MAAI,IAAI,OAAO;AACf,MAAI,IAAI;AACR,SAAO,IAAI,IAAI;AACb,QAAI,IAAI,GAAI,UAAU,SAAS,IAAK;AACpC,QAAK,IAAI,IAAK;AACd,UAAM;AAAA,EACR;AACA,SAAO;AACT;AAOO,SAAS,WAAW,QAAoB,WAAuB,YAAwB;AAC5F,QAAM,UAAU,aAAa,SAAS;AACtC,QAAM,WAAW,aAAa,UAAU;AACxC,QAAM,QAAQ,aAAa,MAAM;AACjC,MAAI,SAAS,QAAS,OAAM,IAAI,MAAM,0DAA0D;AAChG,SAAO,WAAW,OAAO,OAAO,UAAU,OAAO,GAAG,UAAU,MAAM;AACtE;AAOO,SAAS,gBAAgB,SAAqB,WAAuB,YAAwB;AAClG,QAAM,eAAe,CAAC,UAAsB;AAC1C,QAAI,QAAQ;AACZ,eAAW,QAAQ,MAAO,SAAS,SAAS,KAAM,OAAO,IAAI;AAC7D,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,aAAa,SAAS;AACtC,QAAM,WAAW,aAAa,UAAU;AACxC,QAAM,YAAY,UAAU;AAC5B,MAAI,QAAQ,SAAS,YAAY,IAAI;AACnC,UAAM,IAAI,MAAM,2CAA2C;AAAA,EAC7D;AAGA,QAAM,QAAQ,IAAI,WAAW,SAAS;AACtC,QAAM,CAAC,IAAI;AACX,QAAM,CAAC,IAAI;AACX,QAAM,gBAAgB,YAAY,QAAQ,SAAS;AACnD,QAAM,UAAU,IAAI,WAAW,aAAa;AAC5C,SAAO,gBAAgB,OAAO;AAC9B,WAAS,IAAI,GAAG,IAAI,eAAe,KAAK;AAEtC,WAAO,QAAQ,CAAC,MAAM,EAAG,SAAQ,CAAC,IAAI,KAAK,IAAI,GAAG,OAAO,gBAAgB,IAAI,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC;AAC9F,UAAM,IAAI,CAAC,IAAI,QAAQ,CAAC;AAAA,EAC1B;AACA,QAAM,IAAI,aAAa,IAAI;AAC3B,QAAM,IAAI,SAAS,IAAI,aAAa;AAEpC,QAAM,SAAS,OAAO,aAAa,KAAK,GAAG,UAAU,OAAO;AAC5D,QAAM,MAAM,IAAI,WAAW,SAAS;AACpC,MAAI,YAAY;AAChB,WAAS,IAAI,YAAY,GAAG,KAAK,GAAG,KAAK;AACvC,QAAI,CAAC,IAAI,OAAO,YAAY,KAAK;AACjC,kBAAc;AAAA,EAChB;AACA,SAAO;AACT;AAIA,MAAM,OAAO,IAAI,WAAW,EAAE,EAAE,KAAK,EAAI;AACzC,MAAM,OAAO,IAAI,WAAW,EAAE,EAAE,KAAK,EAAI;AAElC,MAAM,oBAAoB;AAAA,EAC/B,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,MAAM;AACR;AAEA,SAAS,UAAU,OAAO;AACxB,QAAM,QAAQ,MAAM,OAAO,CAAC,KAAK,SAAS,MAAM,KAAK,QAAQ,CAAC;AAC9D,QAAM,MAAM,IAAI,WAAW,KAAK;AAChC,MAAI,SAAS;AACb,aAAW,QAAQ,OAAO;AACxB,QAAI,IAAI,MAAM,MAAM;AACpB,cAAU,KAAK;AAAA,EACjB;AACA,SAAO;AACT;AAGA,SAAS,WAAW,QAAoB,MAAkB,cAA0B,cAA0B;AAC5G,SAAO,IAAI,OAAO,QAAQ,KAAK,OAAO,MAAM,QAAQ,cAAc,YAAY,CAAC,CAAC,CAAC;AACnF;AAGA,SAAS,UAAU,KAAiB,cAA0B,cAA0B;AACtF,SAAO,IAAI,OAAO,KAAK,cAAc,YAAY,CAAC;AACpD;AAEA,MAAM,SAAS,IAAI,WAAW,CAAC,EAAI,CAAC;AACpC,MAAM,UAAU,IAAI,WAAW,CAAC,IAAM,EAAI,CAAC;AAC3C,MAAM,WAAW,IAAI,WAAW,CAAC,IAAM,IAAM,EAAI,CAAC;AAClD,MAAM,SAAS,IAAI,WAAW,CAAC,EAAI,CAAC;AACpC,MAAM,UAAU,IAAI,WAAW,CAAC,IAAM,EAAI,CAAC;AAC3C,MAAM,WAAW,IAAI,WAAW,CAAC,IAAM,IAAM,EAAI,CAAC;AAMlD,SAAS,UAAU,KAAiB,WAAW,SAAS;AACtD,MAAI,cAAc,EAAG,QAAO,IAAI,MAAM,GAAG,SAAS;AAElD,QAAM,UAAU,IAAI,MAAM,GAAG,CAAC;AAC9B,UAAQ,CAAC,IAAI;AACb,MAAI,SAAS;AACX,YAAQ,CAAC,IAAI;AACb,YAAQ,CAAC,IAAI;AAAA,EACf;AACA,SAAO;AACT;AAEO,SAAS,mBAAmB,kBAA0B;AAC3D,MAAI,qBAAqB,kBAAkB,OAAQ,QAAO;AAC1D,MAAI,qBAAqB,kBAAkB,OAAQ,QAAO;AAC1D,SAAO;AACT;AAMO,SAAS,kBAAkB,cAA0B,cAA0B,kBAA0B;AAC9G,QAAM,kBAAkB,OAAO,aAAa,SAAS,GAAG,EAAE,GAAG,aAAa,SAAS,GAAG,EAAE,CAAC;AAEzF,QAAM,eAAe;AAAA,IACnB,WAAW,iBAAiB,QAAQ,cAAc,YAAY;AAAA,IAC9D,WAAW,iBAAiB,SAAS,cAAc,YAAY;AAAA,IAC/D,WAAW,iBAAiB,UAAU,cAAc,YAAY;AAAA,EAClE;AAEA,QAAM,iBAAiB;AAAA,IACrB,WAAW,cAAc,QAAQ,cAAc,YAAY;AAAA,IAC3D,WAAW,cAAc,SAAS,cAAc,YAAY;AAAA,IAC5D,WAAW,cAAc,UAAU,cAAc,YAAY;AAAA,EAC/D;AAEA,QAAM,YAAY,mBAAmB,gBAAgB;AACrD,QAAM,UAAU,qBAAqB,kBAAkB;AAEvD,QAAM,iBAAiB,CAAC,QAAoB,UAAU,KAAK,WAAW,OAAO;AAE7E,QAAM,SAAS,eAAe,eAAe,SAAS,GAAG,EAAE,CAAC;AAC5D,QAAM,aAAa,eAAe,UAAU,eAAe,SAAS,IAAI,EAAE,GAAG,cAAc,YAAY,CAAC;AACxG,QAAM,aAAa,eAAe,UAAU,eAAe,SAAS,IAAI,EAAE,GAAG,cAAc,YAAY,CAAC;AAExG,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IAEA,mBAAmB,WAAW,MAAM;AAAA,IACpC,mBAAmB,WAAW,MAAM;AAAA,IACpC;AAAA,IACA;AAAA,EACF;AACF;AAKO,SAAS,aAAa,QAAQ,MAAkB;AACrD,QAAM,cAAc,IAAI,WAAW,CAAC;AACpC,MAAI,SAAS,YAAY,MAAM,EAAE,UAAU,GAAG,KAAK,QAAQ,IAAI;AAC/D,QAAM,QAAQ,KAAK,OAAO,QAAQ,MAAM,aAAa,IAAI,CAAC;AAC1D,SAAO,IAAI,OAAO,QAAQ,MAAM,KAAK,CAAC,EAAE,SAAS,GAAG,CAAC;AACvD;AAMO,SAAS,iBAAiB,YAAY,YAAY,WAAW,SAAS;AAC3E,QAAM,QAAQ,KAAK,OAAO,YAAY,MAAM,UAAU,CAAC;AACvD,QAAM,UAAU,IAAI,OAAO,YAAY,MAAM,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS;AAEvE,QAAM,SAAS,SAAS,QAAQ,OAAO,GAAG,OAAO;AACjD,SAAO,UAAU,QAAQ,WAAW,OAAO;AAC7C;",
+  "names": []
+}

package/dist/protocols/rdp/display.js

@@ -0,0 +1,589 @@
+import { decodeBitmapRect } from "./rle";
+import { TOGGLE_FLAG } from "./pdu";
+const IS_MAC = /Mac|iPod|iPhone|iPad/.test(
+  globalThis.navigator?.platform || globalThis.navigator?.userAgent || ""
+);
+const COMMAND_TO_CONTROL = {
+  MetaLeft: "ControlLeft",
+  MetaRight: "ControlRight"
+};
+const WHEEL_STEP_PIXELS = 60;
+const WHEEL_LINE_PIXELS = 16;
+const TOUCH_SCROLL_STEP = 20;
+const MAX_ZOOM = 8;
+const MIN_ZOOM = 1;
+class RdpDisplay {
+  constructor(container) {
+    this.container = container;
+    this.canvas = document.createElement("canvas");
+    this.canvas.tabIndex = 0;
+    this.canvas.style.display = "block";
+    this.canvas.style.position = "absolute";
+    this.canvas.style.outline = "none";
+    this.canvas.style.imageRendering = "auto";
+    this.canvas.style.boxShadow = "none";
+    this.context = this.canvas.getContext("2d", { alpha: false });
+    this.viewportElement = document.createElement("div");
+    this.viewportElement.style.position = "relative";
+    this.viewportElement.style.overflow = "hidden";
+    this.viewportElement.style.margin = "auto";
+    this.viewportElement.style.background = "#000";
+    this.viewportElement.style.boxShadow = "0 10px 30px rgba(0, 0, 0, 0.8)";
+    this.viewportElement.appendChild(this.canvas);
+    container.replaceChildren(this.viewportElement);
+    this.scrollHost = container.parentElement || container;
+    this.width = 0;
+    this.height = 0;
+    this.viewport = { x: 0, y: 0, width: 0, height: 0 };
+    this.scale = 1;
+    this.scaleViewport = true;
+    this.zoom = 1;
+    this.userZoomed = false;
+    this.viewOnly = false;
+    this.client = null;
+    this.palette = null;
+    this.cursorCache = /* @__PURE__ */ new Map();
+    this.heldKeys = /* @__PURE__ */ new Set();
+    this.keyboardSynced = false;
+    this.onWindowResize = () => this.applyScale();
+    window.addEventListener("resize", this.onWindowResize);
+    this.resizeObserver = typeof ResizeObserver === "function" ? new ResizeObserver(() => this.applyScale()) : null;
+    this.resizeObserver?.observe(this.scrollHost);
+  }
+  resize(width, height) {
+    this.width = width;
+    this.height = height;
+    this.canvas.width = width;
+    this.canvas.height = height;
+    this.context.fillStyle = "#000";
+    this.context.fillRect(0, 0, width, height);
+    this.setViewport({ x: 0, y: 0, width, height });
+  }
+  /**
+   * Choose the part of the desktop that is on screen. Everything else about
+   * the session -- painting, input coordinates, the remote pointer -- keeps
+   * working in desktop coordinates, so only the framing changes here.
+   */
+  setViewport({ x = 0, y = 0, width, height } = {}) {
+    if (!this.width || !this.height) return;
+    const left = Math.max(0, Math.min(this.width - 1, Math.floor(x)));
+    const top = Math.max(0, Math.min(this.height - 1, Math.floor(y)));
+    this.viewport = {
+      x: left,
+      y: top,
+      width: Math.max(1, Math.min(this.width - left, Math.floor(width || this.width))),
+      height: Math.max(1, Math.min(this.height - top, Math.floor(height || this.height)))
+    };
+    this.canvas.dataset.viewport = [
+      this.viewport.x,
+      this.viewport.y,
+      this.viewport.width,
+      this.viewport.height
+    ].join(",");
+    this.applyScale();
+  }
+  /** The space a fitted desktop has to fit into: the window, not the content. */
+  #available() {
+    const host = this.scrollHost;
+    return {
+      width: host.clientWidth || this.container.clientWidth || 1,
+      height: host.clientHeight || this.container.clientHeight || 1
+    };
+  }
+  /** The scale at which the whole desktop is on screen, letterboxed. */
+  #fitScale(available = this.#available()) {
+    const fitted = Math.min(
+      available.width / this.viewport.width,
+      available.height / this.viewport.height
+    );
+    return Number.isFinite(fitted) && fitted > 0 ? fitted : 1;
+  }
+  /**
+   * The zoom to open a session at.
+   *
+   * On a laptop the fitted view is the right one: the whole desktop is on
+   * screen and readable, and that is where this stays. On a phone it is not --
+   * a 1024x768 desktop fitted to a 375pt-wide window lands at about a third of
+   * full size, a band of unreadable pixels across the middle of a tall black
+   * screen. When fitting would land under LEGIBLE_SCALE the desktop is scaled
+   * to fill the window instead: the short edge matches exactly and the long one
+   * is panned. Everything is still reachable, and a pinch still gets back to
+   * the whole desktop. Legible first and complete second is the right way round
+   * on a screen this size.
+   */
+  #defaultZoom() {
+    return 1;
+  }
+  applyScale() {
+    if (!this.width || !this.height) return;
+    const viewport = this.viewport;
+    const available = this.#available();
+    const fitted = this.#fitScale(available);
+    if (!this.userZoomed) this.zoom = this.#defaultZoom();
+    const scale = (this.scaleViewport ? fitted : 1) * this.zoom;
+    this.scale = scale;
+    this.viewportElement.style.width = `${viewport.width * scale}px`;
+    this.viewportElement.style.height = `${viewport.height * scale}px`;
+    this.canvas.style.width = `${this.width * scale}px`;
+    this.canvas.style.height = `${this.height * scale}px`;
+    this.canvas.style.left = `${-viewport.x * scale}px`;
+    this.canvas.style.top = `${-viewport.y * scale}px`;
+  }
+  /**
+   * Zoom about a point, keeping whatever is under it in place. `focal` is in
+   * client coordinates -- the midpoint between two fingers, usually.
+   */
+  setZoom(next, focal = null) {
+    const clamped = Math.min(MAX_ZOOM, Math.max(MIN_ZOOM, next));
+    if (!Number.isFinite(clamped) || clamped === this.zoom) return;
+    const host = this.scrollHost;
+    const before = this.scale;
+    const bounds = host.getBoundingClientRect();
+    const anchorX = focal ? focal.x - bounds.left : bounds.width / 2;
+    const anchorY = focal ? focal.y - bounds.top : bounds.height / 2;
+    const contentX = host.scrollLeft + anchorX;
+    const contentY = host.scrollTop + anchorY;
+    this.zoom = clamped;
+    this.applyScale();
+    const ratio = before > 0 ? this.scale / before : 1;
+    host.scrollLeft = contentX * ratio - anchorX;
+    host.scrollTop = contentY * ratio - anchorY;
+  }
+  /** Move the visible window over the desktop. Returns what it actually used. */
+  panBy(dx, dy) {
+    const host = this.scrollHost;
+    const beforeX = host.scrollLeft;
+    const beforeY = host.scrollTop;
+    host.scrollLeft = beforeX - dx;
+    host.scrollTop = beforeY - dy;
+    return {
+      x: beforeX - host.scrollLeft,
+      y: beforeY - host.scrollTop
+    };
+  }
+  /** True when the desktop is larger than the window on either axis. */
+  canPan() {
+    if (this.zoom <= 1.05) return false;
+    const host = this.scrollHost;
+    return host.scrollWidth > host.clientWidth + 2 || host.scrollHeight > host.clientHeight + 2;
+  }
+  setScaleViewport(enabled) {
+    this.scaleViewport = enabled;
+    if (!enabled) this.userZoomed = false;
+    this.applyScale();
+  }
+  /** Back to the opening view: whole desktop fitted on screen. */
+  resetZoom() {
+    this.userZoomed = false;
+    this.zoom = 1;
+    this.applyScale();
+    const host = this.scrollHost;
+    host.scrollLeft = 0;
+    host.scrollTop = 0;
+  }
+  drawRects(rects, palette) {
+    if (palette) this.palette = palette;
+    for (const rect of rects) {
+      if (rect.width === 0 || rect.height === 0) continue;
+      try {
+        const rgba = decodeBitmapRect(rect, this.palette);
+        const image = new ImageData(rgba, rect.width, rect.height);
+        this.context.putImageData(image, rect.left, rect.top);
+      } catch (error) {
+        console.warn("[RDP] Dropped an undecodable bitmap rectangle", {
+          geometry: `${rect.width}x${rect.height}+${rect.left}+${rect.top}`,
+          bitsPerPixel: rect.bitsPerPixel,
+          compressed: rect.compressed,
+          error: error instanceof Error ? error.message : String(error)
+        });
+      }
+    }
+  }
+  // --- cursor ---------------------------------------------------------------
+  /**
+   * Turn an RDP pointer bitmap into a CSS cursor. RDP stores both masks
+   * bottom-up with rows padded to an even number of bytes, and a set AND-mask
+   * bit means "leave this pixel alone", which becomes transparency here.
+   */
+  #cursorFromPointer(pointer) {
+    const { width, height, xorBpp, xorMask, andMask, hotSpotX, hotSpotY } = pointer;
+    if (!width || !height) return null;
+    const xorBytesPerRow = Math.ceil(width * xorBpp / 8 / 2) * 2;
+    const andBytesPerRow = Math.ceil(width / 8 / 2) * 2;
+    const rgba = new Uint8ClampedArray(width * height * 4);
+    for (let y = 0; y < height; y++) {
+      const sourceRow = height - 1 - y;
+      for (let x = 0; x < width; x++) {
+        const andByte = andMask[sourceRow * andBytesPerRow + (x >> 3)];
+        const transparent = andByte !== void 0 && (andByte & 128 >> (x & 7)) !== 0;
+        let r = 0;
+        let g = 0;
+        let b = 0;
+        let a = transparent ? 0 : 255;
+        if (xorBpp === 1) {
+          const bit = xorMask[sourceRow * xorBytesPerRow + (x >> 3)] & 128 >> (x & 7);
+          r = g = b = bit ? 255 : 0;
+        } else {
+          const bytesPerPixel = xorBpp / 8;
+          const offset = sourceRow * xorBytesPerRow + x * bytesPerPixel;
+          if (xorBpp === 16) {
+            const value = xorMask[offset] | xorMask[offset + 1] << 8;
+            r = (value >> 11 & 31) * 255 / 31;
+            g = (value >> 5 & 63) * 255 / 63;
+            b = (value & 31) * 255 / 31;
+          } else {
+            b = xorMask[offset] || 0;
+            g = xorMask[offset + 1] || 0;
+            r = xorMask[offset + 2] || 0;
+            if (xorBpp === 32 && xorMask[offset + 3] !== void 0 && andMask.length === 0) {
+              a = xorMask[offset + 3];
+            }
+          }
+        }
+        const target = (y * width + x) * 4;
+        rgba[target] = r;
+        rgba[target + 1] = g;
+        rgba[target + 2] = b;
+        rgba[target + 3] = a;
+      }
+    }
+    const cursorCanvas = document.createElement("canvas");
+    cursorCanvas.width = width;
+    cursorCanvas.height = height;
+    cursorCanvas.getContext("2d").putImageData(new ImageData(rgba, width, height), 0, 0);
+    const hotX = Math.min(hotSpotX || 0, width - 1);
+    const hotY = Math.min(hotSpotY || 0, height - 1);
+    return `url(${cursorCanvas.toDataURL("image/png")}) ${hotX} ${hotY}, default`;
+  }
+  applyPointer(pointer) {
+    if (pointer.kind === "system") {
+      this.canvas.style.cursor = pointer.hidden ? "none" : "default";
+      return;
+    }
+    if (pointer.kind === "position") {
+      return;
+    }
+    if (pointer.kind === "cached") {
+      const cached = this.cursorCache.get(pointer.cacheIndex);
+      if (cached) this.canvas.style.cursor = cached;
+      return;
+    }
+    if (pointer.kind === "bitmap") {
+      try {
+        const cursor = this.#cursorFromPointer(pointer);
+        if (!cursor) return;
+        this.cursorCache.set(pointer.cacheIndex, cursor);
+        this.canvas.style.cursor = cursor;
+      } catch (error) {
+        console.warn("[RDP] Could not build a cursor from the host pointer update", error);
+      }
+    }
+  }
+  // --- input ----------------------------------------------------------------
+  #toRemote(event) {
+    const bounds = this.canvas.getBoundingClientRect();
+    const scaleX = this.width / (bounds.width || 1);
+    const scaleY = this.height / (bounds.height || 1);
+    return {
+      x: Math.max(0, Math.min(this.width - 1, (event.clientX - bounds.left) * scaleX)),
+      y: Math.max(0, Math.min(this.height - 1, (event.clientY - bounds.top) * scaleY))
+    };
+  }
+  #syncKeyboardOnce(event) {
+    if (this.keyboardSynced || !this.client) return;
+    this.keyboardSynced = true;
+    let flags = 0;
+    if (event.getModifierState?.("CapsLock")) flags |= TOGGLE_FLAG.CAPS_LOCK;
+    if (event.getModifierState?.("NumLock")) flags |= TOGGLE_FLAG.NUM_LOCK;
+    if (event.getModifierState?.("ScrollLock")) flags |= TOGGLE_FLAG.SCROLL_LOCK;
+    this.client.sendKeyboardSync(flags);
+  }
+  attachInput(client) {
+    this.client = client;
+    this.keyboardSynced = false;
+    const canSend = () => this.client && this.client.connected && !this.viewOnly;
+    let pendingMove = null;
+    let moveScheduled = false;
+    let pendingWheelDelta = 0;
+    let touchIsDown = false;
+    let lastTouchX = 0;
+    let lastTouchY = 0;
+    let lastTouchScrollY = 0;
+    let lastTouchScrollX = 0;
+    let gestureStartMid = { x: 0, y: 0 };
+    let gestureStartDistance = 0;
+    let lastPinchDistance = 0;
+    let pendingTouchWheelDelta = 0;
+    let touchMode = null;
+    const touchMidpoint = (touches) => ({
+      x: (touches[0].clientX + touches[1].clientX) / 2,
+      y: (touches[0].clientY + touches[1].clientY) / 2
+    });
+    const touchDistance = (touches) => Math.hypot(
+      touches[0].clientX - touches[1].clientX,
+      touches[0].clientY - touches[1].clientY
+    );
+    const flushMove = () => {
+      moveScheduled = false;
+      if (pendingMove && canSend()) this.client.sendMouseMove(pendingMove.x, pendingMove.y);
+      pendingMove = null;
+    };
+    this.handlers = {
+      mousemove: (event) => {
+        if (!canSend()) return;
+        pendingMove = this.#toRemote(event);
+        if (!moveScheduled) {
+          moveScheduled = true;
+          requestAnimationFrame(flushMove);
+        }
+      },
+      mousedown: (event) => {
+        this.canvas.focus();
+        if (!canSend()) return;
+        event.preventDefault();
+        const { x, y } = this.#toRemote(event);
+        this.client.sendMouseButton(event.button, true, x, y);
+      },
+      mouseup: (event) => {
+        if (!canSend()) return;
+        event.preventDefault();
+        const { x, y } = this.#toRemote(event);
+        this.client.sendMouseButton(event.button, false, x, y);
+      },
+      contextmenu: (event) => event.preventDefault(),
+      wheel: (event) => {
+        if (!canSend()) return;
+        event.preventDefault();
+        let delta = event.deltaY;
+        if (event.deltaMode === WheelEvent.DOM_DELTA_LINE) delta *= WHEEL_LINE_PIXELS;
+        if (event.deltaMode === WheelEvent.DOM_DELTA_PAGE) {
+          delta *= Math.max(1, this.canvas.clientHeight || this.height);
+        }
+        if (!delta) return;
+        if (pendingWheelDelta && Math.sign(pendingWheelDelta) !== Math.sign(delta)) {
+          pendingWheelDelta = 0;
+        }
+        pendingWheelDelta += delta;
+        if (Math.abs(pendingWheelDelta) < WHEEL_STEP_PIXELS) return;
+        const direction = Math.sign(pendingWheelDelta);
+        pendingWheelDelta -= direction * WHEEL_STEP_PIXELS;
+        const { x, y } = this.#toRemote(event);
+        this.client.sendWheel(direction, x, y);
+      },
+      touchstart: (event) => {
+        this.canvas.focus();
+        if (!canSend()) return;
+        event.preventDefault();
+        if (event.touches.length === 1) {
+          touchMode = "tap";
+          const touch = event.touches[0];
+          lastTouchX = touch.clientX;
+          lastTouchY = touch.clientY;
+          const { x, y } = this.#toRemote(touch);
+          this.client.sendMouseMove(x, y);
+          this.client.sendMouseButton(0, true, x, y);
+          touchIsDown = true;
+        } else if (event.touches.length === 2) {
+          touchMode = "undecided";
+          if (touchIsDown) {
+            const { x, y } = this.#toRemote({ clientX: lastTouchX, clientY: lastTouchY });
+            this.client.sendMouseButton(0, false, x, y);
+            touchIsDown = false;
+          }
+          const mid = touchMidpoint(event.touches);
+          const dist = touchDistance(event.touches);
+          gestureStartMid = { x: mid.x, y: mid.y };
+          gestureStartDistance = dist;
+          lastTouchScrollY = mid.y;
+          lastTouchScrollX = mid.x;
+          lastPinchDistance = dist;
+          pendingTouchWheelDelta = 0;
+        }
+      },
+      touchmove: (event) => {
+        if (!canSend()) return;
+        event.preventDefault();
+        if (event.touches.length === 1 && touchMode === "tap") {
+          const touch = event.touches[0];
+          lastTouchX = touch.clientX;
+          lastTouchY = touch.clientY;
+          const { x, y } = this.#toRemote(touch);
+          this.client.sendMouseMove(x, y);
+        } else if (event.touches.length === 2) {
+          const mid = touchMidpoint(event.touches);
+          const currX = mid.x;
+          const currY = mid.y;
+          const distance = touchDistance(event.touches);
+          const deltaY = lastTouchScrollY - currY;
+          const deltaX = lastTouchScrollX - currX;
+          lastTouchScrollY = currY;
+          lastTouchScrollX = currX;
+          const totalMove = Math.hypot(currX - gestureStartMid.x, currY - gestureStartMid.y);
+          const pinchDelta = Math.abs(distance - gestureStartDistance);
+          const pinchRatio = gestureStartDistance > 0 ? distance / gestureStartDistance : 1;
+          if (touchMode === "undecided" || touchMode === "gesture") {
+            if (pinchDelta > 20 && Math.abs(pinchRatio - 1) > 0.15 && pinchDelta > totalMove * 0.8) {
+              touchMode = "pinch";
+            } else if (totalMove > 8) {
+              touchMode = "scroll";
+            }
+          }
+          if (touchMode === "pinch") {
+            if (lastPinchDistance > 0 && Math.abs(distance - lastPinchDistance) > 1) {
+              this.userZoomed = true;
+              this.setZoom(this.zoom * (distance / lastPinchDistance), { x: currX, y: currY });
+            }
+            lastPinchDistance = distance;
+          } else if (touchMode === "scroll") {
+            lastPinchDistance = distance;
+            if (this.canPan()) {
+              this.panBy(deltaX * -1, deltaY * -1);
+              pendingTouchWheelDelta = 0;
+              return;
+            }
+            if (deltaY && pendingTouchWheelDelta && Math.sign(pendingTouchWheelDelta) !== Math.sign(deltaY)) {
+              pendingTouchWheelDelta = 0;
+            }
+            pendingTouchWheelDelta += deltaY;
+            while (Math.abs(pendingTouchWheelDelta) >= TOUCH_SCROLL_STEP) {
+              const direction = Math.sign(pendingTouchWheelDelta);
+              pendingTouchWheelDelta -= direction * TOUCH_SCROLL_STEP;
+              const { x, y } = this.#toRemote({ clientX: currX, clientY: currY });
+              this.client.sendWheel(direction, x, y);
+            }
+          }
+        }
+      },
+      touchend: (event) => {
+        if (!canSend()) return;
+        event.preventDefault();
+        if (event.touches.length === 0) {
+          if (touchIsDown) {
+            const { x, y } = this.#toRemote({ clientX: lastTouchX, clientY: lastTouchY });
+            this.client.sendMouseButton(0, false, x, y);
+            touchIsDown = false;
+          }
+          if (touchMode === "pinch" && this.zoom <= 1.05) {
+            this.resetZoom();
+          }
+          touchMode = null;
+          pendingTouchWheelDelta = 0;
+          lastPinchDistance = 0;
+        } else if (event.touches.length === 1) {
+          if (touchMode === "gesture" || touchMode === "pinch" || touchMode === "scroll" || touchMode === "undecided") {
+            if (touchMode === "pinch" && this.zoom <= 1.05) {
+              this.resetZoom();
+            }
+            touchMode = null;
+            lastPinchDistance = 0;
+            pendingTouchWheelDelta = 0;
+          }
+        }
+      },
+      touchcancel: (event) => {
+        if (!canSend()) return;
+        if (touchIsDown) {
+          const { x, y } = this.#toRemote({ clientX: lastTouchX, clientY: lastTouchY });
+          this.client.sendMouseButton(0, false, x, y);
+          touchIsDown = false;
+        }
+        if (touchMode === "pinch" && this.zoom <= 1.05) {
+          this.resetZoom();
+        }
+        touchMode = null;
+        pendingTouchWheelDelta = 0;
+        lastPinchDistance = 0;
+      },
+      keydown: (event) => {
+        if (!canSend()) return;
+        this.#syncKeyboardOnce(event);
+        if (this.#isPasteShortcut(event)) return;
+        const code = this.#translateCode(event.code);
+        if (!this.client.sendKeyByCode(code, true)) return;
+        event.preventDefault();
+        if (IS_MAC && event.metaKey && !COMMAND_TO_CONTROL[event.code]) {
+          this.client.sendKeyByCode(code, false);
+          return;
+        }
+        this.heldKeys.add(code);
+      },
+      keyup: (event) => {
+        if (!canSend()) return;
+        if (this.#isPasteShortcut(event)) return;
+        const code = this.#translateCode(event.code);
+        if (this.client.sendKeyByCode(code, false)) {
+          this.heldKeys.delete(code);
+          event.preventDefault();
+        }
+      },
+      paste: (event) => {
+        if (!canSend()) return;
+        const target = event.target;
+        const onTheScreen = target instanceof Node && this.container.contains(target);
+        if (document.activeElement !== this.canvas && !onTheScreen) return;
+        event.preventDefault();
+        const text = event.clipboardData?.getData("text/plain") || "";
+        if (text) this.client.pasteToHost(text);
+      },
+      blur: () => this.releaseAllKeys()
+    };
+    this.canvas.addEventListener("mousemove", this.handlers.mousemove);
+    this.canvas.addEventListener("mousedown", this.handlers.mousedown);
+    this.canvas.addEventListener("mouseup", this.handlers.mouseup);
+    this.canvas.addEventListener("contextmenu", this.handlers.contextmenu);
+    this.canvas.addEventListener("wheel", this.handlers.wheel, { passive: false });
+    this.canvas.addEventListener("touchstart", this.handlers.touchstart, { passive: false });
+    this.canvas.addEventListener("touchmove", this.handlers.touchmove, { passive: false });
+    this.canvas.addEventListener("touchend", this.handlers.touchend, { passive: false });
+    this.canvas.addEventListener("touchcancel", this.handlers.touchcancel, { passive: false });
+    this.canvas.addEventListener("keydown", this.handlers.keydown);
+    this.canvas.addEventListener("keyup", this.handlers.keyup);
+    this.canvas.addEventListener("blur", this.handlers.blur);
+    document.addEventListener("paste", this.handlers.paste);
+  }
+  /** Command on a Mac stands in for Control everywhere the host is concerned. */
+  #translateCode(code) {
+    return IS_MAC ? COMMAND_TO_CONTROL[code] || code : code;
+  }
+  #isPasteShortcut(event) {
+    if (event.code !== "KeyV") return false;
+    return IS_MAC ? event.metaKey : event.ctrlKey;
+  }
+  /** A key held while focus moves away would otherwise stay down on the host. */
+  releaseAllKeys() {
+    if (!this.client) return;
+    for (const code of this.heldKeys) this.client.sendKeyByCode(code, false);
+    this.heldKeys.clear();
+  }
+  focus() {
+    this.canvas.focus();
+  }
+  blur() {
+    this.canvas.blur();
+  }
+  destroy() {
+    this.releaseAllKeys();
+    window.removeEventListener("resize", this.onWindowResize);
+    this.resizeObserver?.disconnect();
+    if (this.handlers) {
+      this.canvas.removeEventListener("mousemove", this.handlers.mousemove);
+      this.canvas.removeEventListener("mousedown", this.handlers.mousedown);
+      this.canvas.removeEventListener("mouseup", this.handlers.mouseup);
+      this.canvas.removeEventListener("contextmenu", this.handlers.contextmenu);
+      this.canvas.removeEventListener("wheel", this.handlers.wheel);
+      this.canvas.removeEventListener("touchstart", this.handlers.touchstart);
+      this.canvas.removeEventListener("touchmove", this.handlers.touchmove);
+      this.canvas.removeEventListener("touchend", this.handlers.touchend);
+      this.canvas.removeEventListener("touchcancel", this.handlers.touchcancel);
+      this.canvas.removeEventListener("keydown", this.handlers.keydown);
+      this.canvas.removeEventListener("keyup", this.handlers.keyup);
+      this.canvas.removeEventListener("blur", this.handlers.blur);
+      document.removeEventListener("paste", this.handlers.paste);
+    }
+    this.client = null;
+  }
+}
+export {
+  RdpDisplay
+};
+//# sourceMappingURL=display.js.map