autodev-cli 1.4.0 → 1.4.3

package/out/todoWriteManager.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.todoWriter = void 0;
+const todo_1 = require("./todo");
+/**
+ * Serialises all mutating TODO.md operations so concurrent callers
+ * (email poller, webhook poller, discord poller, sidebar "Add task", task loop)
+ * never overwrite each other's changes.
+ *
+ * Each write operation is queued per file path and executes only after all
+ * previously enqueued operations for that path have settled (resolved or
+ * rejected).  The queue is purely in-process — it does not use file locks,
+ * which is sufficient because all writes originate from within this extension.
+ */
+class TodoWriteManager {
+    _tails = new Map();
+    _enqueue(filePath, op) {
+        const tail = this._tails.get(filePath) ?? Promise.resolve();
+        // Use two-arg .then so the queue keeps draining even if a prior op threw.
+        const result = tail.then(() => op(), () => op());
+        // Store a never-rejecting tail so subsequent ops always get a chance to run.
+        this._tails.set(filePath, result.then(() => undefined, () => undefined));
+        return result;
+    }
+    /** Append a new task to the Todo section and return its generated task ID. */
+    append(filePath, text, id) {
+        return this._enqueue(filePath, () => (0, todo_1.appendTask)(filePath, text, id));
+    }
+    /** Reset a single [~] in-progress task back to [ ]. */
+    resetToTodo(filePath, task) {
+        return this._enqueue(filePath, () => (0, todo_1.resetToTodo)(filePath, task));
+    }
+    /** Reset ALL [~] in-progress tasks back to [ ]. */
+    resetAllInProgress(filePath) {
+        return this._enqueue(filePath, () => (0, todo_1.resetAllInProgress)(filePath));
+    }
+    /** Mark a task as [x] done in TODO.md. */
+    markDone(filePath, task) {
+        return this._enqueue(filePath, () => (0, todo_1.markDone)(filePath, task));
+    }
+}
+/** Singleton — import this everywhere instead of calling todo.ts write functions directly. */
+exports.todoWriter = new TodoWriteManager();
+//# sourceMappingURL=todoWriteManager.js.map

package/out/todoWriteManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"todoWriteManager.js","sourceRoot":"","sources":["../src/todoWriteManager.ts"],"names":[],"mappings":";;;AAAA,iCAAqF;AAErF;;;;;;;;;GASG;AACH,MAAM,gBAAgB;IACD,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEtD,QAAQ,CAAI,QAAgB,EAAE,EAAW;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5D,0EAA0E;QAC1E,MAAM,MAAM,GAAgB,IAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAChF,6EAA6E;QAC7E,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACzE,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,8EAA8E;IAC9E,MAAM,CAAC,QAAgB,EAAE,IAAY,EAAE,EAAW;QAC9C,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAA,iBAAU,EAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,uDAAuD;IACvD,WAAW,CAAC,QAAgB,EAAE,IAAU;QACpC,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAA,kBAAW,EAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,mDAAmD;IACnD,kBAAkB,CAAC,QAAgB;QAC/B,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAA,yBAAkB,EAAC,QAAQ,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,0CAA0C;IAC1C,QAAQ,CAAC,QAAgB,EAAE,IAAU;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAA,eAAQ,EAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IACnE,CAAC;CACJ;AAED,8FAA8F;AACjF,QAAA,UAAU,GAAG,IAAI,gBAAgB,EAAE,CAAC"}

package/out/vnc/auth.d.ts

@@ -0,0 +1,52 @@
+/**
+ * RFB authentication algorithms.
+ *
+ * Supported security types:
+ *   1  — None (no auth required)
+ *   2  — VNC Authentication (DES challenge-response)
+ *  18  — TLS (opportunistic — we accept the server cert without validation;
+ *              used as a wrapper; inner auth type negotiated separately)
+ *  19  — VeNCrypt (TLS variants; we handle plain + VNC sub-types)
+ *
+ * RFB 3.3 only ever sends a single auth type as a 4-byte uint.
+ * RFB 3.7 / 3.8 send a length-prefixed list; the client picks one.
+ */
+import * as tls from 'tls';
+import * as net from 'net';
+export declare const AUTH_NONE = 1;
+export declare const AUTH_VNC = 2;
+export declare const AUTH_TIGHT = 16;
+export declare const AUTH_VENCRYPT = 19;
+export declare const VENCRYPT_PLAIN = 256;
+export declare const VENCRYPT_TLSNONE = 257;
+export declare const VENCRYPT_TLSVNC = 258;
+export declare const VENCRYPT_TLSPLAIN = 259;
+export declare const VENCRYPT_X509NONE = 260;
+export declare const VENCRYPT_X509VNC = 261;
+export declare const VENCRYPT_X509PLAIN = 262;
+/**
+ * VNC challenge-response: DES-encrypt the 16-byte challenge with the
+ * bit-reversed password key.
+ */
+export declare function vncDesResponse(challenge: Buffer, password: string): Buffer;
+/**
+ * Sorted list of auth types we can handle, in preference order.
+ * The bridge uses this when negotiating RFB 3.7/3.8 security type lists.
+ */
+export declare const SUPPORTED_AUTH_TYPES: number[];
+/**
+ * Pick the best supported auth type from a server-provided list.
+ * Returns undefined if none are supported.
+ */
+export declare function pickAuthType(serverTypes: number[]): number | undefined;
+/**
+ * Negotiate VeNCrypt on a raw socket.  On success, returns the upgraded stream
+ * (plain socket or TLS socket) plus the chosen sub-type so the caller knows
+ * which inner auth to perform next.
+ *
+ * Throws on failure.
+ */
+export declare function negotiateVeNCrypt(sock: net.Socket, readBytes: (n: number) => Promise<Buffer>, password: string | undefined, username: string | undefined): Promise<{
+    stream: net.Socket | tls.TLSSocket;
+    subType: number;
+}>;

package/out/vnc/auth.js

@@ -0,0 +1,181 @@
+"use strict";
+/**
+ * RFB authentication algorithms.
+ *
+ * Supported security types:
+ *   1  — None (no auth required)
+ *   2  — VNC Authentication (DES challenge-response)
+ *  18  — TLS (opportunistic — we accept the server cert without validation;
+ *              used as a wrapper; inner auth type negotiated separately)
+ *  19  — VeNCrypt (TLS variants; we handle plain + VNC sub-types)
+ *
+ * RFB 3.3 only ever sends a single auth type as a 4-byte uint.
+ * RFB 3.7 / 3.8 send a length-prefixed list; the client picks one.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SUPPORTED_AUTH_TYPES = exports.VENCRYPT_X509PLAIN = exports.VENCRYPT_X509VNC = exports.VENCRYPT_X509NONE = exports.VENCRYPT_TLSPLAIN = exports.VENCRYPT_TLSVNC = exports.VENCRYPT_TLSNONE = exports.VENCRYPT_PLAIN = exports.AUTH_VENCRYPT = exports.AUTH_TIGHT = exports.AUTH_VNC = exports.AUTH_NONE = void 0;
+exports.vncDesResponse = vncDesResponse;
+exports.pickAuthType = pickAuthType;
+exports.negotiateVeNCrypt = negotiateVeNCrypt;
+const des_1 = require("./des");
+const tls = __importStar(require("tls"));
+// ── Security type constants ────────────────────────────────────────────────
+exports.AUTH_NONE = 1;
+exports.AUTH_VNC = 2;
+exports.AUTH_TIGHT = 16;
+exports.AUTH_VENCRYPT = 19;
+// VeNCrypt sub-types we support (plain TCP variants only — no TLS cert)
+exports.VENCRYPT_PLAIN = 256; // plain username+password
+exports.VENCRYPT_TLSNONE = 257; // TLS with no inner auth
+exports.VENCRYPT_TLSVNC = 258; // TLS + VNC auth
+exports.VENCRYPT_TLSPLAIN = 259; // TLS + plain auth
+exports.VENCRYPT_X509NONE = 260; // X.509 TLS with no inner auth
+exports.VENCRYPT_X509VNC = 261; // X.509 TLS + VNC auth
+exports.VENCRYPT_X509PLAIN = 262; // X.509 TLS + plain auth
+// ── Helpers ────────────────────────────────────────────────────────────────
+function reverseBits(b) {
+    let r = 0;
+    for (let i = 0; i < 8; i++) {
+        r = (r << 1) | (b & 1);
+        b >>= 1;
+    }
+    return r;
+}
+/**
+ * VNC challenge-response: DES-encrypt the 16-byte challenge with the
+ * bit-reversed password key.
+ */
+function vncDesResponse(challenge, password) {
+    const pw = password.padEnd(8, '\0').slice(0, 8);
+    const key = Buffer.alloc(8);
+    for (let i = 0; i < 8; i++)
+        key[i] = reverseBits(pw.charCodeAt(i));
+    const result = Buffer.alloc(16);
+    (0, des_1.desEncrypt)(challenge.slice(0, 8), key).copy(result, 0);
+    (0, des_1.desEncrypt)(challenge.slice(8, 16), key).copy(result, 8);
+    return result;
+}
+// ── Auth negotiation helpers used by VncBridge ─────────────────────────────
+/**
+ * Sorted list of auth types we can handle, in preference order.
+ * The bridge uses this when negotiating RFB 3.7/3.8 security type lists.
+ */
+exports.SUPPORTED_AUTH_TYPES = [exports.AUTH_NONE, exports.AUTH_VNC, exports.AUTH_VENCRYPT];
+/**
+ * Pick the best supported auth type from a server-provided list.
+ * Returns undefined if none are supported.
+ */
+function pickAuthType(serverTypes) {
+    for (const preferred of exports.SUPPORTED_AUTH_TYPES) {
+        if (serverTypes.includes(preferred))
+            return preferred;
+    }
+    return undefined;
+}
+// ── VeNCrypt negotiation ───────────────────────────────────────────────────
+/** VeNCrypt sub-types we can handle, in preference order. */
+const SUPPORTED_VENCRYPT_SUBTYPES = [
+    exports.VENCRYPT_TLSNONE,
+    exports.VENCRYPT_TLSVNC,
+    exports.VENCRYPT_TLSPLAIN,
+    exports.VENCRYPT_X509NONE,
+    exports.VENCRYPT_X509VNC,
+    exports.VENCRYPT_X509PLAIN,
+    exports.VENCRYPT_PLAIN,
+];
+/**
+ * Negotiate VeNCrypt on a raw socket.  On success, returns the upgraded stream
+ * (plain socket or TLS socket) plus the chosen sub-type so the caller knows
+ * which inner auth to perform next.
+ *
+ * Throws on failure.
+ */
+async function negotiateVeNCrypt(sock, readBytes, password, username) {
+    // Send VeNCrypt version 0.2
+    sock.write(Buffer.from([0, 2]));
+    const serverVer = await readBytes(2);
+    if (serverVer[0] !== 0 || serverVer[1] !== 2) {
+        throw new Error(`Unsupported VeNCrypt version: ${serverVer[0]}.${serverVer[1]}`);
+    }
+    // ACK version
+    sock.write(Buffer.from([0]));
+    // Read sub-type list
+    const countBuf = await readBytes(1);
+    const count = countBuf[0];
+    const typesBuf = await readBytes(count * 4);
+    const serverSubTypes = [];
+    for (let i = 0; i < count; i++)
+        serverSubTypes.push(typesBuf.readUInt32BE(i * 4));
+    const chosen = SUPPORTED_VENCRYPT_SUBTYPES.find(t => serverSubTypes.includes(t));
+    if (!chosen) {
+        throw new Error(`No supported VeNCrypt sub-type (server offers: ${serverSubTypes.join(', ')})`);
+    }
+    // Send chosen sub-type
+    const choiceBuf = Buffer.alloc(4);
+    choiceBuf.writeUInt32BE(chosen, 0);
+    sock.write(choiceBuf);
+    // Server ACK (1 byte, must be 1)
+    const ack = await readBytes(1);
+    if (ack[0] !== 1)
+        throw new Error('VeNCrypt: server rejected sub-type selection');
+    // ── Upgrade to TLS if needed ─────────────────────────────────────────────
+    let stream = sock;
+    if (chosen !== exports.VENCRYPT_PLAIN) {
+        stream = await new Promise((resolve, reject) => {
+            const tlsSock = tls.connect({
+                socket: sock,
+                rejectUnauthorized: false, // VNC servers use self-signed certs
+            });
+            tlsSock.once('secureConnect', () => resolve(tlsSock));
+            tlsSock.once('error', (e) => reject(e));
+        });
+    }
+    // ── Inner auth ───────────────────────────────────────────────────────────
+    if (chosen === exports.VENCRYPT_PLAIN || chosen === exports.VENCRYPT_TLSPLAIN || chosen === exports.VENCRYPT_X509PLAIN) {
+        if (!username || !password)
+            throw new Error('VeNCrypt plain auth requires username and password');
+        const userBuf = Buffer.from(username, 'utf8');
+        const passBuf = Buffer.from(password, 'utf8');
+        const lenBuf = Buffer.alloc(8);
+        lenBuf.writeUInt32BE(userBuf.length, 0);
+        lenBuf.writeUInt32BE(passBuf.length, 4);
+        stream.write(Buffer.concat([lenBuf, userBuf, passBuf]));
+    }
+    // TLSNONE / X509NONE: no inner auth data to send
+    // TLSVNC  / X509VNC : VNC challenge-response is handled by bridge after this returns
+    return { stream, subType: chosen };
+}
+//# sourceMappingURL=auth.js.map

package/out/vnc/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/vnc/auth.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCH,wCAQC;AAcD,oCAKC;AAsBD,8CAgEC;AAjJD,+BAAmC;AACnC,yCAA2B;AAG3B,8EAA8E;AAEjE,QAAA,SAAS,GAAY,CAAC,CAAC;AACvB,QAAA,QAAQ,GAAa,CAAC,CAAC;AACvB,QAAA,UAAU,GAAW,EAAE,CAAC;AACxB,QAAA,aAAa,GAAQ,EAAE,CAAC;AAErC,wEAAwE;AAC3D,QAAA,cAAc,GAAO,GAAG,CAAC,CAAC,0BAA0B;AACpD,QAAA,gBAAgB,GAAK,GAAG,CAAC,CAAC,yBAAyB;AACnD,QAAA,eAAe,GAAM,GAAG,CAAC,CAAC,iBAAiB;AAC3C,QAAA,iBAAiB,GAAI,GAAG,CAAC,CAAC,mBAAmB;AAC7C,QAAA,iBAAiB,GAAI,GAAG,CAAC,CAAC,+BAA+B;AACzD,QAAA,gBAAgB,GAAK,GAAG,CAAC,CAAC,uBAAuB;AACjD,QAAA,kBAAkB,GAAG,GAAG,CAAC,CAAC,yBAAyB;AAEhE,8EAA8E;AAE9E,SAAS,WAAW,CAAC,CAAS;IAC5B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAAC,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAChE,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;GAGG;AACH,SAAgB,cAAc,CAAC,SAAiB,EAAE,QAAgB;IAChE,MAAM,EAAE,GAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChC,IAAA,gBAAU,EAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACvD,IAAA,gBAAU,EAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAE9E;;;GAGG;AACU,QAAA,oBAAoB,GAAG,CAAC,iBAAS,EAAE,gBAAQ,EAAE,qBAAa,CAAC,CAAC;AAEzE;;;GAGG;AACH,SAAgB,YAAY,CAAC,WAAqB;IAChD,KAAK,MAAM,SAAS,IAAI,4BAAoB,EAAE,CAAC;QAC7C,IAAI,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IACxD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8EAA8E;AAE9E,6DAA6D;AAC7D,MAAM,2BAA2B,GAAG;IAClC,wBAAgB;IAChB,uBAAe;IACf,yBAAiB;IACjB,yBAAiB;IACjB,wBAAgB;IAChB,0BAAkB;IAClB,sBAAc;CACf,CAAC;AAEF;;;;;;GAMG;AACI,KAAK,UAAU,iBAAiB,CACrC,IAAgB,EAChB,SAAyC,EACzC,QAA4B,EAC5B,QAA4B;IAE5B,4BAA4B;IAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEhC,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,iCAAiC,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,cAAc;IACd,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE7B,qBAAqB;IACrB,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,KAAK,GAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAC5C,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE;QAAE,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAElF,MAAM,MAAM,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,kDAAkD,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClG,CAAC;IAED,uBAAuB;IACvB,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClC,SAAS,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAEtB,iCAAiC;IACjC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAElF,4EAA4E;IAC5E,IAAI,MAAM,GAA+B,IAAI,CAAC;IAC9C,IAAI,MAAM,KAAK,sBAAc,EAAE,CAAC;QAC9B,MAAM,GAAG,MAAM,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC5D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;gBAC1B,MAAM,EAAc,IAAI;gBACxB,kBAAkB,EAAE,KAAK,EAAE,oCAAoC;aAChE,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YACtD,OAAO,CAAC,IAAI,CAAC,OAAO,EAAU,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,IAAI,MAAM,KAAK,sBAAc,IAAI,MAAM,KAAK,yBAAiB,IAAI,MAAM,KAAK,0BAAkB,EAAE,CAAC;QAC/F,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAClG,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACvC,MAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IACD,iDAAiD;IACjD,qFAAqF;IAErF,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACrC,CAAC"}

package/out/vnc/bridge.d.ts

@@ -0,0 +1,40 @@
+/**
+ * VncBridge — TCP connection to a local VNC server.
+ *
+ * Handles RFB protocol version negotiation (3.3 / 3.7 / 3.8) and
+ * security types: None (1), VNC auth/DES (2), VeNCrypt (19).
+ *
+ * Emits:
+ *   'frame'  (rect: VncRect)  — one decoded framebuffer rectangle
+ *   'error'  (err:  Error)    — unrecoverable error (connection closed)
+ *   'close'  ()               — TCP connection closed
+ */
+import { EventEmitter } from 'events';
+import type { VncInfo } from './types';
+export declare class VncBridge extends EventEmitter {
+    private _sock;
+    private _width;
+    private _height;
+    private _bypp;
+    private _recvBuf;
+    private _closed;
+    get width(): number;
+    get height(): number;
+    /** Connect to a VNC server at 127.0.0.1:port.  Resolves once handshake is done. */
+    connect(port: number, password?: string, username?: string): Promise<VncInfo>;
+    /** Request a framebuffer update. */
+    requestUpdate(x?: number, y?: number, w?: number, h?: number, incremental?: number): void;
+    /** Send a key event. */
+    sendKey(keysym: number, down: boolean): void;
+    /** Send a ClientCutText message (push local clipboard to remote). */
+    sendClientCutText(text: string): void;
+    /** Send a pointer (mouse) event. */
+    sendMouse(x: number, y: number, buttonMask: number): void;
+    close(): void;
+    private _handleVeNCrypt;
+    private _runRunning;
+    private _sendSetPixelFormat;
+    private _sendSetEncodings;
+    private _parseServerMessage;
+    private _parseFBU;
+}