termdock 1.4.265 → 1.4.267

package/dist/server/onboardingServer.js

@@ -24,7 +24,6 @@ export function startOnboardingServer(options) {
         res.setHeader('Content-Disposition', 'attachment; filename="rootCA.pem"');
         res.send(fs.readFileSync(options.caCertPath));
     });
-    app.get('/', (_req, res) => res.redirect('/onboarding'));
     const server = createServer(app);
     server.on('error', (error) => {
         console.warn('[onboarding] HTTP setup server failed:', error);
@@ -33,7 +32,7 @@ export function startOnboardingServer(options) {
         const address = server.address();
         const port = address?.port ?? null;
         const host = getLanIPv4Addresses()[0] ?? 'localhost';
-        activeUrl = port ? `http://${host}:${port}/onboarding` : null;
+        activeUrl = port ? `http://${host}:${port}/ca` : null;
     });
     server.listen(0, '0.0.0.0');
     activeServer = server;

package/dist/server/routes/android.js

@@ -185,6 +185,7 @@ export function handleAndroidWebSocket(socket, serial, _clientId, requested = {}
     socket.on('error', () => { closed = true; clearInterval(flowTimer); if (statsTimer)
         clearInterval(statsTimer); void session?.stop(); session = null; });
     session = createScrcpySession(serial, {
+        onBitrateSupport: supported => send({ type: 'bitrate-support', supported }),
         onHeader: header => { send({ type: 'header', ...header }); },
         onFrame: frame => {
             if (closed)
@@ -226,6 +227,15 @@ export function handleAndroidWebSocket(socket, serial, _clientId, requested = {}
             return;
         }
         switch (message.type) {
+            case 'bitrate': {
+                if (typeof message.requestId !== 'number' || !Number.isSafeInteger(message.requestId)
+                    || typeof message.bitRate !== 'number' || !Number.isInteger(message.bitRate)
+                    || message.bitRate < 300_000 || message.bitRate > 30_000_000)
+                    return;
+                const requestId = message.requestId, bitRate = message.bitRate;
+                void session.setBitrate(bitRate).then(applied => send({ type: 'bitrate-result', requestId, bitRate, applied }));
+                break;
+            }
             case 'control': {
                 if (typeof message.data !== 'string' || message.data.length > 64 * 1024)
                     return;

package/dist/server/routes/filesystem.js

@@ -4806,9 +4806,13 @@ router.post('/apply-hunk', async (req, res) => {
         }
         await runGitApply(gitRoot, mode, patch, GIT_APPLY_TIMEOUT_MS);
         clearGitBundleCacheForRoot(gitRoot);
-        const bundle = await refreshGitBundleCacheDetached(resolvedCwd, gitRoot, includeNested, { discoverOnly });
+        // git apply has committed the mutation. A slow/failed workspace scan must
+        // neither delay acknowledgement nor report that successful mutation failed.
+        void refreshGitBundleCacheDetached(resolvedCwd, gitRoot, includeNested, { discoverOnly }).catch((error) => {
+            logFsIoEvent({ id: requestId, action, op: 'git.apply-hunk', event: 'bundle-refresh-error', path: requestedPath, cwd, repoRoot: gitRoot, extra: { mode, error: error instanceof Error ? error.message : String(error) } });
+        });
         logFsIo({ id: requestId, action, op: 'git.apply-hunk', startedAt, status: 'ok', path: requestedPath, cwd, repoRoot: gitRoot, extra: { mode } });
-        res.json({ ok: true, bundle });
+        res.json({ ok: true });
     }
     catch (error) {
         const message = error instanceof Error ? error.message : 'Git apply failed';

package/dist/server/routes/onboarding.js

@@ -1,112 +1,13 @@
 import express from 'express';
 import fs from 'fs';
-import QRCode from 'qrcode';
 import { localAccessManager } from '../utils/localAccess.js';
 function sendCaCertificate(res, caCertPath) {
     res.setHeader('Content-Type', 'application/x-x509-ca-cert');
     res.setHeader('Content-Disposition', 'attachment; filename="rootCA.pem"');
     res.send(fs.readFileSync(caCertPath));
 }
-function escapeHtml(value) {
-    return value
-        .replace(/&/g, '&')
-        .replace(/</g, '&lt;')
-        .replace(/>/g, '&gt;')
-        .replace(/"/g, '&quot;')
-        .replace(/'/g, '&#39;');
-}
-function createQrCards(items) {
-    return items.map((item) => `
-      <div class="qr-card">
-        ${item.qr ? `<div class="qr"><img src="${item.qr}" alt="QR code for ${escapeHtml(item.url)}" /></div>` : ''}
-        <div>
-          <div class="label">${escapeHtml(item.label)} · ${escapeHtml(item.address)}</div>
-          <code>${escapeHtml(item.url)}</code>
-        </div>
-      </div>`).join('');
-}
-function createPage(caAvailable, qrItems, targetUrl) {
-    const state = localAccessManager.getState();
-    const url = escapeHtml(targetUrl ?? state.url);
-    const fallbackUrl = escapeHtml(state.fallbackUrl);
-    const status = escapeHtml(state.status);
-    const reason = state.reason ? escapeHtml(state.reason) : '';
-    const caButton = caAvailable
-        ? '<a class="button" href="/onboarding/ca.crt">Download CA certificate</a>'
-        : '<div class="warn">CA file is not configured. Start Termdock with --https-ca &lt;path&gt; to enable certificate download.</div>';
-    return `<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8" />
-  <meta name="viewport" content="width=device-width, initial-scale=1" />
-  <title>Termdock Local Access</title>
-  <style>
-    body { margin: 0; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; background: #100F0F; color: #CECDC3; }
-    main { max-width: 720px; margin: 0 auto; padding: 32px 20px 48px; }
-    .card { border: 1px solid rgba(255,255,255,.12); border-radius: 20px; background: rgba(255,255,255,.05); padding: 20px; }
-    h1 { font-size: 28px; margin: 0 0 8px; }
-    h2 { font-size: 18px; margin: 24px 0 8px; }
-    p, li { color: rgba(255,255,255,.78); line-height: 1.6; }
-    code { word-break: break-all; color: #4385BE; }
-    .button { display: inline-flex; margin: 12px 0; padding: 12px 16px; border-radius: 999px; background: #879A39; color: #100F0F; font-weight: 700; text-decoration: none; }
-    .warn { margin: 12px 0; padding: 12px; border-radius: 12px; background: rgba(208, 162, 21, .15); color: #D0A215; }
-    .muted { color: rgba(255,255,255,.55); font-size: 13px; }
-    .qr { display: inline-block; margin: 12px 0; padding: 10px; border-radius: 16px; background: #fff; }
-    .qr img { display: block; width: 160px; height: 160px; }
-    .qr-grid { display: grid; grid-template-columns: repeat(auto-fit, minmax(220px, 1fr)); gap: 14px; margin: 14px 0; }
-    .qr-card { border: 1px solid rgba(255,255,255,.1); border-radius: 16px; padding: 12px; background: rgba(255,255,255,.04); }
-    .label { margin: 4px 0 6px; font-weight: 700; color: rgba(255,255,255,.86); }
-  </style>
-</head>
-<body>
-  <main>
-    <div class="card">
-      <h1>Termdock Local Access</h1>
-      <p>Scan one of these QR codes to open an IP fallback address on your phone:</p>
-      <div class="qr-grid">${createQrCards(qrItems)}</div>
-      <p>Install the local CA on your phone first, then open:</p>
-      <p><code>${url}</code></p>
-      <p class="muted">If mDNS does not resolve on your Wi‑Fi, use this IP fallback after installing the CA: <code>${fallbackUrl}</code></p>
-      <p class="muted">Status: ${status}${reason ? ` · ${reason}` : ''}</p>
-      ${caButton}
-      <p class="muted">Short link: <code>/ca</code> (same certificate download)</p>
-      <h2>iPhone / iPad</h2>
-      <ol>
-        <li>Tap “Download CA certificate”.</li>
-        <li>Open Settings and install the downloaded profile.</li>
-        <li>Go to Settings → General → About → Certificate Trust Settings, then fully trust the CA.</li>
-        <li>Return to <code>${url}</code>.</li>
-      </ol>
-      <h2>Android</h2>
-      <ol>
-        <li>Tap “Download CA certificate”.</li>
-        <li>Install it as a CA certificate from system security settings.</li>
-        <li>Return to <code>${url}</code>.</li>
-      </ol>
-    </div>
-  </main>
-</body>
-</html>`;
-}
 export function createOnboardingRouter(options = {}) {
     const router = express.Router();
-    router.get('/', async (_req, res) => {
-        const caAvailable = Boolean(options.caCertPath && fs.existsSync(options.caCertPath));
-        const state = localAccessManager.getState();
-        const targetUrl = state.hostname
-            ? `${state.httpsEnabled ? 'https' : 'http'}://${state.hostname}:${options.port ?? 9834}`
-            : state.url;
-        const qrItems = await Promise.all(state.interfaces.map(async (entry) => {
-            const url = `${state.httpsEnabled ? 'https' : 'http'}://${entry.address}:${options.port ?? 9834}`;
-            const qr = await QRCode.toDataURL(url, {
-                margin: 1,
-                width: 160,
-                errorCorrectionLevel: 'M',
-            }).catch(() => null);
-            return { label: `${entry.label} (${entry.name})`, address: entry.address, url, qr };
-        }));
-        res.type('html').send(createPage(caAvailable, qrItems, targetUrl));
-    });
     router.get('/status', (_req, res) => {
         const state = localAccessManager.getState();
         res.json({

package/dist/server/utils/localAccess.js

@@ -58,7 +58,7 @@ function buildState(setting, options, status, reason) {
         fallbackHostname,
         url: `${options.scheme}://${hostname}:${options.port}`,
         fallbackUrl: `${options.scheme}://${fallbackHostname}:${options.port}`,
-        onboardingUrl: onboardingHost ? `http://${onboardingHost}:${options.onboardingPort ?? options.port}/onboarding` : null,
+        onboardingUrl: onboardingHost ? `http://${onboardingHost}:${options.onboardingPort ?? options.port}/ca` : null,
         status,
         reason,
         httpsEnabled: options.scheme === 'https',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "termdock",
-  "version": "1.4.265",
+  "version": "1.4.267",
   "description": "A complete web-based terminal application with modern UI",
   "type": "module",
   "main": ".desktop-dist/main.js",

package/runtime-manifest.json

@@ -1,13 +1,13 @@
 {
   "schemaVersion": 1,
   "packageName": "termdock",
-  "version": "1.4.265",
+  "version": "1.4.267",
   "runtimeProtocolVersion": 1,
   "minimumDesktopVersion": "1.4.46",
   "nodeMajor": 22,
   "dependencyHash": "sha256-K4KyYJuVoQDpZsBM8ZX1Rw3MddOxAzVdp/cPm0iGZz0=",
-  "serverBundleHash": "sha256-J2E5faoECqRyYnXPzSDHcV9tXUuUih+LDtG464f/dHI=",
-  "clientBundleHash": "sha256-FJtbhUlN3+7dITPffcvTDidMmywkNOsNa+E+7ow3+SY=",
+  "serverBundleHash": "sha256-V1RFgDykQcbwFwXuguqt+02C2XDLyuTE4xkUkvj+uLc=",
+  "clientBundleHash": "sha256-4qEeyM60W0+Bm7KFYE0ixA728Ln+CzwkQ26HnhAvSiA=",
   "entrypoint": "dist/server/cli.js",
   "clientEntrypoint": "dist/client/index.html"
 }

package/scripts/android-bitrate/CaptureReset.java

@@ -0,0 +1,76 @@
+// Based on scrcpy 3.3.4 CaptureReset, Copyright Genymobile.
+// SPDX-License-Identifier: Apache-2.0
+// Termdock addition: a separate, session-scoped bitrate control socket.
+package com.genymobile.scrcpy.video;
+
+import android.media.MediaCodec;
+import android.net.LocalSocket;
+import android.net.LocalSocketAddress;
+import android.os.Bundle;
+import java.io.DataInputStream;
+import java.io.DataOutputStream;
+import java.io.IOException;
+import java.util.concurrent.atomic.AtomicBoolean;
+
+public class CaptureReset implements SurfaceCapture.CaptureListener {
+    private final AtomicBoolean reset = new AtomicBoolean();
+    private MediaCodec runningMediaCodec;
+    private int bitrate;
+    private boolean started;
+
+    public boolean consumeReset() { return reset.getAndSet(false); }
+
+    public synchronized void reset() {
+        reset.set(true);
+        if (runningMediaCodec != null) {
+            try { runningMediaCodec.signalEndOfInputStream(); }
+            catch (IllegalStateException ignored) { }
+        }
+    }
+
+    public synchronized void setRunningMediaCodec(MediaCodec codec) {
+        runningMediaCodec = codec;
+        // Reapply after an actual rotation/reset, without causing one ourselves.
+        if (codec != null && bitrate > 0) applyBitrate(bitrate);
+        String name = System.getProperty("termdock.bitrate");
+        if (codec != null && !started && name != null) {
+            started = true;
+            Thread thread = new Thread(() -> serve(name), "termdock-bitrate");
+            thread.setDaemon(true);
+            thread.start();
+        }
+    }
+
+    private synchronized boolean applyBitrate(int value) {
+        if (runningMediaCodec == null || value < 300000 || value > 30000000) return false;
+        try {
+            Bundle params = new Bundle();
+            params.putInt(MediaCodec.PARAMETER_KEY_VIDEO_BITRATE, value);
+            runningMediaCodec.setParameters(params);
+            bitrate = value;
+            return true;
+        } catch (IllegalArgumentException | IllegalStateException ignored) {
+            return false;
+        }
+    }
+
+    private void serve(String name) {
+        try (LocalSocket socket = new LocalSocket()) {
+            socket.connect(new LocalSocketAddress(name));
+            DataInputStream input = new DataInputStream(socket.getInputStream());
+            DataOutputStream output = new DataOutputStream(socket.getOutputStream());
+            output.writeInt(0x54444231); // TDB1: extension ready, codec is running
+            output.flush();
+            while (true) {
+                int requested = input.readInt();
+                output.writeInt(applyBitrate(requested) ? requested : 0);
+                output.flush();
+            }
+        } catch (IOException ignored) {
+            // A bitrate-channel failure must never tear down video/control.
+        }
+    }
+
+    @Override
+    public void onInvalidated() { reset(); }
+}

package/scripts/android-bitrate/LICENSE

@@ -0,0 +1,203 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright (C) 2018 Genymobile
+   Copyright (C) 2018-2026 Romain Vimont
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/scripts/android-bitrate/README.md

@@ -0,0 +1,38 @@
+# scrcpy live bitrate extension
+
+Termdock loads this 3 KB Android DEX overlay before the installed scrcpy server
+for preview sessions only. Recording uses the unmodified scrcpy executable/server.
+
+CaptureReset.java preserves scrcpy 3.3.4's existing ABI and reset behavior,
+adding a session-scoped ADB reverse socket. The running hardware encoder receives
+MediaCodec.PARAMETER_KEY_VIDEO_BITRATE via setParameters, under the same lock
+used to clear the codec before stop/reset. There is no transcoding, frame polling,
+forced keyframe, video reset, resolution change or new video connection.
+
+Wire format is big-endian uint32: device sends TDB1 once ready, host sends target
+bps, device replies with that value after setParameters returns, or zero on
+rejection. An ACK confirms API acceptance, not exact vendor output bandwidth.
+One request may be outstanding. Timeout retires only this optional channel;
+video and input keep running.
+
+Enabled only for the tested scrcpy 3.3.4 server SHA-256:
+8588238c9a5a00aa542906b6ec7e6d5541d9ffb9b5d0f6e1bc0e365e2303079e
+Both server and overlay hashes are checked in src/server/android/liveBitrate.ts.
+Unrecognized builds (including 4.x), missing assets, rejected updates and channel
+failures retain existing preview quality, without automatic reconnect fallback.
+Extend the allowlist only after verifying the CaptureReset ABI and real-device
+behavior. No global scrcpy installation is modified.
+
+Rebuild with JDK, Android platform 33 and build tools 33.0.2:
+
+    ANDROID_HOME=/path/to/sdk bash scripts/android-bitrate/build.sh
+
+Update the overlay SHA-256 in liveBitrate.ts after rebuilding. SurfaceCapture is
+a compile-only ABI stub, deliberately excluded from the DEX. The jar is a runtime
+asset distributed through package.json's scripts inclusion, also copied by the
+desktop runtime packager. Apache-2.0 license is included.
+
+Validation: Mi MIX 2S / Android 13 accepted 1.8 → 6 → 0.9 → 4 Mbps within
+one session, continuously producing frames, with one video header and one codec
+configuration packet. Other vendor encoders and macOS/iOS clients require real
+device verification.

package/scripts/android-bitrate/build.sh

@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+set -euo pipefail
+# Rebuild only this ABI-compatible overlay, never the user's installed scrcpy.
+# SDK 33 and Java 8 bytecode are sufficient; the interface stub is compile-only.
+root="$(cd "$(dirname "$0")" && pwd)"
+sdk="${ANDROID_HOME:?Set ANDROID_HOME to an Android SDK}"
+build_tools="${ANDROID_BUILD_TOOLS:-33.0.2}"
+work="$(mktemp -d)"
+trap 'rm -r "$work"' EXIT
+mkdir -p "$work/classes"
+cat > "$work/SurfaceCapture.java" <<'JAVA'
+package com.genymobile.scrcpy.video;
+public abstract class SurfaceCapture {
+    public interface CaptureListener { void onInvalidated(); }
+}
+JAVA
+javac -source 8 -target 8 -bootclasspath "$sdk/platforms/android-33/android.jar" \
+    -cp "$sdk/build-tools/$build_tools/core-lambda-stubs.jar" -d "$work/classes" "$work/SurfaceCapture.java" "$root/CaptureReset.java"
+"$sdk/build-tools/$build_tools/d8" --min-api 21 --lib "$sdk/platforms/android-33/android.jar" \
+    --output "$work" "$work/classes/com/genymobile/scrcpy/video/CaptureReset.class"
+# Deterministic jar (zip timestamps are fixed).
+python3 - "$work/classes.dex" "$root/bitrate.jar" <<'PY'
+import sys, zipfile
+with zipfile.ZipFile(sys.argv[2], 'w', compression=zipfile.ZIP_DEFLATED) as archive:
+    info = zipfile.ZipInfo('classes.dex', (1980, 1, 1, 0, 0, 0))
+    info.compress_type = zipfile.ZIP_DEFLATED
+    archive.writestr(info, open(sys.argv[1], 'rb').read())
+PY