remotedesktop 1.7.0__tar.gz → 1.8.0__tar.gz

{remotedesktop-1.7.0 → remotedesktop-1.8.0}/CLAUDE.md

@@ -90,6 +90,7 @@ Managed with `uv` (hatchling build backend, src layout):
 - Sharing tests drive real sockets on the GUI thread by pumping `qapp.processEvents()` until a condition holds (see `pump()` in `tests/test_sharing.py`). Use the `make_server`/`make_client` helpers there and the session-scoped `credentials` fixture (one generated cert reused across tests — generating per test is ~100ms each). Tests exercise the real pairing flow (auto-approve), so there is no "pre-approve" shortcut anymore.
 - **Input forwarding**: `ViewerWidget` captures mouse/keyboard events and emits `inputEvent` dicts with coordinates normalized 0..1 over the *displayed* frame rect (letterboxing is reversed via `_display_rect()`; events outside the frame are dropped). Keys carry the client's `nativeVirtualKey()` — since both ends are Windows, the server injects that VK directly with no key-translation table. The client sends these as `{"type": "input", ...}`; `ShareServer` only injects input from streams that completed the hello/approval handshake.
 - **Remote cursor shape** (`cursor_shape.py`): the captured frame never contains the mouse pointer (DXGI duplication and BitBlt both exclude it), so the client mirrors the server's cursor on its *local* cursor instead. `ShareServer` takes an opt-in `cursor_probe=` callable (the `clipboard=` pattern — only the GUI passes one, `SharingTab` wires `current_cursor_shape`: GetCursorInfo compared against the shared standard IDC_* handles; custom cursors → "arrow", not showing → "hidden"). The probe is polled each broadcast tick and `{"type": "cursor", "shape": ...}` is sent on change only, plus once to each just-admitted stream. `ShareClient.cursorShapeChanged` → `ViewerWidget.set_remote_cursor` maps names to Qt cursors (unknown names → arrow); `clear()` unsets the cursor. Peers without the feature never send / silently ignore the message.
+- **Lock-screen notice** (`session_lock.py`): the Windows lock screen / secure desktop (also UAC, Ctrl+Alt+Del) can be neither captured nor injected into by a user-mode process, so remote unlock is impossible by design (documented in the readme; the assumption is the server machine is physically reachable to sign in). `ShareServer` takes an opt-in `lock_probe=` callable (the `cursor_probe=` pattern — only the GUI wires `is_session_locked`, which reads OpenInputDesktop failure as "secure desktop has input"). Polled each broadcast tick; `{"type": "session_lock", "locked": bool}` is sent on change, plus to just-admitted streams while locked (unlocked is the assumed start state, so it's never sent on admission). While locked the server drops remote input with a once-per-lock-episode status line ("Ignoring remote input while the session is locked"). `ShareClient.sessionLockChanged` → `ViewerWidget.set_session_locked`: the viewer dims whatever it shows under `viewer.LOCKED_MESSAGE`; `clear()` resets it (so reconnects start unlocked). Peers without the feature never send / silently ignore the message. Sharing tests inject a fake `lock_probe` — the default None means plain tests never poll the host's real desktop.
 - **Modal-loop pump** (`modal_loop.py`): a Windows title-bar drag (or click-and-hold) puts the window's thread into a native modal move/size loop where Qt's dispatcher stops — for a sharing instance this deadlocked when a *remote* click grabbed the window's own title bar (the mouse-up sat unread on the socket). `MainWindow.nativeEvent` feeds `ModalLoopPump`, which runs a native `SetTimer` from `WM_NCLBUTTONDOWN` (a press-and-hold that never moves blocks in DefWindowProc's click tracking without ever sending `WM_ENTERSIZEMOVE`) until `WM_CAPTURECHANGED`/`WM_EXITSIZEMOVE`, whose callback pumps Qt events (user input excluded). The caption buttons (min/max/close) are the exception — their tracking loop dispatches only mouse messages, so no timer can pump inside it; the pump instead performs those via its `caption_action` callback on press and consumes the message (nativeEvent must return True when `handle_native_event` does), so DefWindowProc's button tracking never starts. Tests inject a fake `timers` backend — never let them create real Win32 timers.
 - **Log exchange**: either side can fetch the peer's debug log over the connection (`{"type": "log_request"}` → `{"type": "log", "text": ...}`, admitted streams only). `ShareServer`/`ShareClient` take a `log_provider=` callable (the app passes `logs.read_log_tail("remotedesktop")`, capped at `logs.TAIL_BYTES`); a missing provider/file answers with a placeholder rather than hanging the requester. The Connection log group on the Connections tab has both buttons — "Get server log" asks the server of the current session tab, "Get client log" asks the most recently admitted viewer; the reply opens a `logs.PeerLogDialog`.
 - **Injection is isolated behind `InputInjector`** (`input_injection.py`, Windows `SendInput` via ctypes; inert stub off-Windows). ShareServer takes an `injector=` param so tests pass a recording fake — **never let tests construct a real `InputInjector`, or they will move the host's actual mouse/keyboard.** Normalized 0..1 coords map directly to SendInput's 0..65535 absolute range over the primary monitor.

{remotedesktop-1.7.0 → remotedesktop-1.8.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: remotedesktop
-Version: 1.7.0
+Version: 1.8.0
 Summary: Remote desktop app for Windows computers on the same LAN, with autodiscovery. View other computers and optionally share this one — screen, keyboard, mouse, and clipboard, without RDP or Microsoft authentication.
 Project-URL: Homepage, https://github.com/jamesabel/remotedesktop
 Project-URL: Repository, https://github.com/jamesabel/remotedesktop
@@ -139,6 +139,28 @@ access can be revoked at any time from the *Connections* tab. There is
 no dependency
 on Windows RDP or any Microsoft-based authentication.
 
+## The Windows lock screen
+
+**A locked computer cannot be viewed or unlocked remotely.** The lock
+screen, the PIN/password prompt, and UAC elevation prompts run on a
+separate *secure desktop* that Windows deliberately walls off from
+ordinary applications: nothing running as the signed-in user may capture
+it or type into it, so no software can read or fill in a credential
+prompt. This app intentionally runs as the signed-in user — no admin
+rights, no system service — so it sits on the application side of that
+wall (remote-access products that can show the login screen install a
+privileged Windows service to cross it).
+
+What happens instead: when the shared computer locks, viewers stay
+connected and see a clear *"The remote computer is locked"* notice over
+the last frame, and any input they send is ignored until the computer is
+unlocked. The working assumption is that you (or someone nearby) can get
+to the shared computer to sign it in; once its desktop is unlocked,
+streaming and control resume on their own. If that round trip is a
+nuisance, keep the shared computer signed in while you work on it
+remotely — for example by lengthening its lock/sleep timeout in Windows
+settings.
+
 ## How it works
 
 All of this is pure Python — the GUI is PySide6 (Qt), and the two places

{remotedesktop-1.7.0 → remotedesktop-1.8.0}/readme.md

@@ -115,6 +115,28 @@ access can be revoked at any time from the *Connections* tab. There is
 no dependency
 on Windows RDP or any Microsoft-based authentication.
 
+## The Windows lock screen
+
+**A locked computer cannot be viewed or unlocked remotely.** The lock
+screen, the PIN/password prompt, and UAC elevation prompts run on a
+separate *secure desktop* that Windows deliberately walls off from
+ordinary applications: nothing running as the signed-in user may capture
+it or type into it, so no software can read or fill in a credential
+prompt. This app intentionally runs as the signed-in user — no admin
+rights, no system service — so it sits on the application side of that
+wall (remote-access products that can show the login screen install a
+privileged Windows service to cross it).
+
+What happens instead: when the shared computer locks, viewers stay
+connected and see a clear *"The remote computer is locked"* notice over
+the last frame, and any input they send is ignored until the computer is
+unlocked. The working assumption is that you (or someone nearby) can get
+to the shared computer to sign it in; once its desktop is unlocked,
+streaming and control resume on their own. If that round trip is a
+nuisance, keep the shared computer signed in while you work on it
+remotely — for example by lengthening its lock/sleep timeout in Windows
+settings.
+
 ## How it works
 
 All of this is pure Python — the GUI is PySide6 (Qt), and the two places

{remotedesktop-1.7.0 → remotedesktop-1.8.0}/src/remotedesktop/__init__.py

@@ -1,3 +1,3 @@
 """Remote desktop client/server for Windows computers on the same LAN."""
 
-__version__ = "1.7.0"
+__version__ = "1.8.0"

{remotedesktop-1.7.0 → remotedesktop-1.8.0}/src/remotedesktop/app.py

@@ -1040,6 +1040,7 @@ class MainWindow(QMainWindow):
         client.disconnected.connect(lambda s=session: self._on_disconnected(s))
         client.frameReceived.connect(lambda image, s=session: self._on_frame(s, image))
         client.cursorShapeChanged.connect(lambda shape, s=session: s.viewer.set_remote_cursor(shape))
+        client.sessionLockChanged.connect(lambda locked, s=session: s.viewer.set_session_locked(locked))
         client.logReceived.connect(lambda text, s=session: self._show_server_log(s.name, text))
         client.connectionFailed.connect(lambda _reason, s=session: self._schedule_reconnect(s))
         self._sessions.append(session)

{remotedesktop-1.7.0 → remotedesktop-1.8.0}/src/remotedesktop/server.py

@@ -29,6 +29,7 @@ from PySide6.QtWidgets import (
 from remotedesktop import __version__, compat, tls
 from remotedesktop.config import PairedClients, Settings, default_config_dir
 from remotedesktop.cursor_shape import current_cursor_shape
+from remotedesktop.session_lock import is_session_locked
 from remotedesktop.discovery import (
     DEFAULT_CONNECT_PORT,
     DISCOVERY_PORT,
@@ -276,6 +277,7 @@ class SharingTab(QWidget):
             paired=self._paired,
             clipboard=self._clipboard,
             cursor_probe=current_cursor_shape,
+            lock_probe=is_session_locked,
             performance=self._performance,
             log_provider=lambda: read_log_tail("remotedesktop"),
             input_allowed=self._settings.get_bool(ALLOW_INPUT_KEY, True),

remotedesktop-1.8.0/src/remotedesktop/session_lock.py

@@ -0,0 +1,46 @@
+"""Detect whether the Windows secure desktop is in control (server side).
+
+While the workstation is locked — and during UAC prompts and the
+Ctrl+Alt+Del screen — Windows switches to a separate "secure desktop" that
+processes running as the signed-in user may neither capture nor inject
+input into. That is a deliberate security boundary (nothing in the user's
+session can read or type into a credential prompt), so remote unlock is
+impossible for this app by design: screen capture yields a stale frame and
+SendInput is silently discarded. The server uses this probe to tell
+viewers what is going on instead of leaving them a frozen screen.
+
+The check: `OpenInputDesktop` fails for an ordinary user process while the
+input desktop is the secure desktop, and succeeds while the user's own
+desktop has input.
+
+On non-Windows platforms `is_session_locked()` returns None (the app
+targets Windows).
+"""
+
+import ctypes
+import sys
+
+_IS_WINDOWS = sys.platform == "win32"
+
+# winuser.h desktop access right — the weakest thing OpenInputDesktop can be
+# asked for, enough to answer "may this process touch the input desktop?".
+_DESKTOP_SWITCHDESKTOP = 0x0100
+
+if _IS_WINDOWS:
+    _user32 = ctypes.windll.user32
+    _user32.OpenInputDesktop.restype = ctypes.c_void_p
+    _user32.OpenInputDesktop.argtypes = (ctypes.c_uint32, ctypes.c_int, ctypes.c_uint32)
+    _user32.CloseDesktop.argtypes = (ctypes.c_void_p,)
+
+
+def is_session_locked() -> bool | None:
+    """True while the secure desktop (lock screen, UAC prompt) has the
+    input, False while the user's own desktop does, or None when it cannot
+    be determined (non-Windows)."""
+    if not _IS_WINDOWS:
+        return None
+    handle = _user32.OpenInputDesktop(0, False, _DESKTOP_SWITCHDESKTOP)
+    if not handle:
+        return True
+    _user32.CloseDesktop(handle)
+    return False

{remotedesktop-1.7.0 → remotedesktop-1.8.0}/src/remotedesktop/sharing.py

@@ -117,6 +117,7 @@ class ShareServer(QObject):
         injector: InputInjector | None = None,
         clipboard=None,
         cursor_probe: Callable[[], str | None] | None = None,
+        lock_probe: Callable[[], bool | None] | None = None,
         performance: PerformanceMonitor | None = None,
         log_provider: Callable[[], str] | None = None,
         input_allowed: bool = True,
@@ -137,6 +138,13 @@ class ShareServer(QObject):
         # sharing tests never poll (or depend on) the host's real cursor.
         self._cursor_probe = cursor_probe
         self._cursor_shape: str | None = None  # last shape sent to viewers
+        # Opt-in for the same reason: only the GUI probes the real desktop.
+        # While the session is locked (secure desktop — see session_lock.py)
+        # the screen cannot be captured and injected input is discarded, so
+        # viewers are told and remote input is dropped here.
+        self._lock_probe = lock_probe
+        self._session_locked = False  # last state sent to viewers
+        self._lock_input_reported = False  # one status line per lock episode
         self._streams: list[MessageStream] = []
         self._all_streams: set[MessageStream] = set()
         self._controllers: set[MessageStream] = set()
@@ -243,6 +251,8 @@ class ShareServer(QObject):
         self._viewer_info.clear()
         self._previous_frame = None
         self._cursor_shape = None
+        self._session_locked = False
+        self._lock_input_reported = False
         if self._dxgi is not None:
             self._dxgi.close()
             self._dxgi = None
@@ -475,6 +485,7 @@ class ShareServer(QObject):
         self._needs_keyframe.add(stream)  # its first frame must be a full one
         self._streams.append(stream)
         self._broadcast_cursor(new_stream=stream)  # start with the right cursor
+        self._broadcast_lock(new_stream=stream)  # tell it if the session is locked
         if self._performance is not None:
             self._performance.add_stream(stream)
         self.clientCountChanged.emit(len(self._streams))
@@ -490,6 +501,13 @@ class ShareServer(QObject):
             # View-only: the toggle already produced a status line; per-event
             # noise goes nowhere (not even the debug log — it's every move).
             return
+        if self._session_locked:
+            # The secure desktop discards injected input anyway; drop it here
+            # and say so once per lock episode (not per event — it's every move).
+            if not self._lock_input_reported:
+                self._lock_input_reported = True
+                self.status.emit("Ignoring remote input while the session is locked")
+            return
         action = message.get("action")
         x, y = message.get("x"), message.get("y")
         if stream not in self._controllers:
@@ -664,10 +682,40 @@ class ShareServer(QObject):
         elif new_stream is not None:
             new_stream.send_json({"type": "cursor", "shape": shape})
 
+    def _broadcast_lock(self, new_stream: MessageStream | None = None) -> None:
+        """Tell viewers when the session locks or unlocks (secure desktop —
+        see session_lock.py): the screen can no longer be captured and input
+        cannot be injected, so the client shows a notice instead of leaving
+        its user a silently frozen frame.
+
+        Sent on change to everyone, plus to a just-admitted stream while
+        locked (unlocked is every stream's starting assumption).
+        """
+        if self._lock_probe is None:
+            return
+        locked = self._lock_probe()
+        if locked is None:
+            return
+        if locked != self._session_locked:
+            self._session_locked = locked
+            if locked:
+                self.status.emit(
+                    "Session locked — the lock screen cannot be captured or "
+                    "controlled remotely; viewers are notified"
+                )
+            else:
+                self._lock_input_reported = False
+                self.status.emit("Session unlocked — resuming normal streaming")
+            for stream in self._streams:
+                stream.send_json({"type": "session_lock", "locked": locked})
+        elif new_stream is not None and locked:
+            new_stream.send_json({"type": "session_lock", "locked": True})
+
     def _broadcast_frame(self) -> None:
         if not self._streams:
             return
         self._broadcast_cursor()  # polled at the frame rate, sent on change
+        self._broadcast_lock()  # likewise
         image = self._capture()
         if image is None:
             self.status.emit("Screen capture failed (null image)")
@@ -743,6 +791,10 @@ class ShareClient(QObject):
     # "size_we"); the viewer mirrors it on the local cursor. Servers without
     # the feature (pre-1.6) simply never emit it.
     cursorShapeChanged = Signal(str)
+    # The server's session locked (True) or unlocked (False) — the secure
+    # desktop cannot be captured or controlled, so the viewer shows a notice.
+    # Servers without the feature (pre-1.8) simply never emit it.
+    sessionLockChanged = Signal(bool)
     status = Signal(str)
     logReceived = Signal(str)  # server log text answering request_log
 
@@ -943,6 +995,14 @@ class ShareClient(QObject):
                 # Too frequent for the status log; unknown names are the
                 # viewer's problem (it falls back to the arrow).
                 self.cursorShapeChanged.emit(str(message.get("shape", "")) or "arrow")
+            case "session_lock":
+                locked = bool(message.get("locked"))
+                self.status.emit(
+                    "Server session is locked — sign in at the server machine"
+                    if locked
+                    else "Server session unlocked"
+                )
+                self.sessionLockChanged.emit(locked)
             case "ping" | "pong":
                 if self._performance is not None:
                     self._performance.handle_message(self._stream, message)

{remotedesktop-1.7.0 → remotedesktop-1.8.0}/src/remotedesktop/viewer.py

@@ -34,6 +34,16 @@ _BUTTON_NAMES = {
     Qt.MouseButton.MiddleButton: "middle",
 }
 
+# Shown (over a dimmed last frame) while the server's session is locked: the
+# secure desktop cannot be captured or controlled remotely, so signing in
+# has to happen at the server machine itself.
+LOCKED_MESSAGE = (
+    "The remote computer is locked.\n"
+    "Its sign-in screen cannot be viewed or controlled remotely —\n"
+    "sign in at that computer to continue."
+)
+_LOCK_DIM = QColor(0, 0, 0, 160)
+
 # Wire cursor-shape names (cursor_shape.py on the server side) -> the local
 # cursor mirroring the remote one. Names this map doesn't know (a newer
 # server's vocabulary) fall back to the arrow.
@@ -78,6 +88,9 @@ class ViewerWidget(QWidget):
         # display-scaling factor (125-150% on most monitors), blurring text.
         self._scaled: QPixmap | None = None
         self._message = "Not connected"
+        # The server's session is locked (secure desktop): the frame is
+        # stale, so it is dimmed under a LOCKED_MESSAGE notice.
+        self._session_locked = False
         # Buttons/keys currently held, so releases can be forwarded even when
         # they happen outside the frame or when the widget loses focus —
         # otherwise the server would keep them pressed forever.
@@ -128,11 +141,24 @@ class ViewerWidget(QWidget):
         self._frame = None
         self._scaled = None
         self._message = message
+        self._session_locked = False
         self._pressed_buttons.clear()
         self._pressed_keys.clear()
         self.unsetCursor()  # a disconnected viewer shows the normal cursor
         self.update()
 
+    @property
+    def session_locked(self) -> bool:
+        return self._session_locked
+
+    def set_session_locked(self, locked: bool) -> None:
+        """Dim the view under a lock notice while the server's session is
+        locked (the secure desktop is neither captured nor controllable)."""
+        if self._session_locked == locked:
+            return
+        self._session_locked = locked
+        self.update()
+
     def set_remote_cursor(self, shape: str) -> None:
         """Mirror the server's cursor shape on the local cursor (the frame
         itself never contains the pointer — screen capture excludes it)."""
@@ -270,32 +296,37 @@ class ViewerWidget(QWidget):
         painter = QPainter(self)
         painter.fillRect(self.rect(), Qt.GlobalColor.black)
         if self._frame is None:
+            if not self._session_locked:  # the lock notice below says it all
+                painter.setPen(Qt.GlobalColor.white)
+                painter.drawText(self.rect(), Qt.AlignmentFlag.AlignCenter, self._message)
+        else:
+            rect = self._display_rect().toRect()
+            dpr = self.devicePixelRatioF()
+            target = QSize(round(rect.width() * dpr), round(rect.height() * dpr))
+            if (
+                self._scaled is None
+                or self._scaled.size() != target
+                or self._scaled.devicePixelRatio() != dpr
+            ):
+                if self._frame.size() == target:
+                    # Displayed at exactly 1:1 device pixels — no resample at all.
+                    self._scaled = QPixmap(self._frame)
+                else:
+                    self._scaled = self._frame.scaled(
+                        target,
+                        Qt.AspectRatioMode.IgnoreAspectRatio,  # rect is already aspect-correct
+                        Qt.TransformationMode.SmoothTransformation,
+                    )
+                self._scaled.setDevicePixelRatio(dpr)
+            painter.drawPixmap(rect.topLeft(), self._scaled)
+            # Thin outline marking where the remote screen ends and the app
+            # background begins (they can otherwise blend together).
+            painter.setPen(self._border_color())
+            painter.drawRect(rect.adjusted(0, 0, -1, -1))
+        if self._session_locked:
+            painter.fillRect(self.rect(), _LOCK_DIM)
             painter.setPen(Qt.GlobalColor.white)
-            painter.drawText(self.rect(), Qt.AlignmentFlag.AlignCenter, self._message)
-            return
-        rect = self._display_rect().toRect()
-        dpr = self.devicePixelRatioF()
-        target = QSize(round(rect.width() * dpr), round(rect.height() * dpr))
-        if (
-            self._scaled is None
-            or self._scaled.size() != target
-            or self._scaled.devicePixelRatio() != dpr
-        ):
-            if self._frame.size() == target:
-                # Displayed at exactly 1:1 device pixels — no resample at all.
-                self._scaled = QPixmap(self._frame)
-            else:
-                self._scaled = self._frame.scaled(
-                    target,
-                    Qt.AspectRatioMode.IgnoreAspectRatio,  # rect is already aspect-correct
-                    Qt.TransformationMode.SmoothTransformation,
-                )
-            self._scaled.setDevicePixelRatio(dpr)
-        painter.drawPixmap(rect.topLeft(), self._scaled)
-        # Thin outline marking where the remote screen ends and the app
-        # background begins (they can otherwise blend together).
-        painter.setPen(self._border_color())
-        painter.drawRect(rect.adjusted(0, 0, -1, -1))
+            painter.drawText(self.rect(), Qt.AlignmentFlag.AlignCenter, LOCKED_MESSAGE)
 
     def _border_color(self) -> QColor:
         """Outline shade for the current theme (follows the window background)."""

{remotedesktop-1.7.0 → remotedesktop-1.8.0}/tests/test_input.py

@@ -253,6 +253,62 @@ def test_viewer_mirrors_remote_cursor_shape(qapp):
     assert viewer.cursor().shape() == Qt.CursorShape.ArrowCursor
 
 
+def test_input_dropped_while_session_locked(qapp, credentials, tmp_path):
+    injector = RecordingInjector()
+    locked = [False]
+    server = make_server(
+        credentials,
+        tmp_path,
+        approve=lambda *_: True,
+        injector=injector,
+        lock_probe=lambda: locked[0],
+    )
+    statuses: list[str] = []
+    server.status.connect(statuses.append)
+    client = make_client(tmp_path)
+    lock_states: list[bool] = []
+    client.sessionLockChanged.connect(lock_states.append)
+    connected = []
+    client.connected.connect(connected.append)
+    client.connect_to("127.0.0.1", server.port)
+    try:
+        pump(qapp, lambda: connected)
+        client.send_input({"action": "move", "x": 0.5, "y": 0.25})
+        pump(qapp, lambda: injector.calls)
+        locked[0] = True
+        # The lock notice reaching the client proves the server's own state
+        # flipped before the input below arrives.
+        pump(qapp, lambda: lock_states == [True])
+        injector.calls.clear()
+        client.send_input({"action": "move", "x": 0.1, "y": 0.1})
+        client.send_input({"action": "key", "vk": 65, "pressed": True})
+        pump(qapp, lambda: any("Ignoring remote input" in s for s in statuses))
+        assert injector.calls == []
+        locked[0] = False
+        pump(qapp, lambda: lock_states == [True, False])
+        client.send_input({"action": "move", "x": 0.9, "y": 0.9})
+        pump(qapp, lambda: injector.calls)  # unlocking resumes injection
+    finally:
+        client.close()
+        server.close()
+
+
+def test_viewer_session_lock_overlay(qapp):
+    viewer = ViewerWidget()
+    viewer.resize(400, 400)
+    assert not viewer.session_locked
+    image = QImage(200, 100, QImage.Format.Format_RGB32)
+    image.fill(Qt.GlobalColor.red)
+    viewer.show_frame(image)
+    viewer.set_session_locked(True)
+    assert viewer.session_locked
+    assert not viewer.grab().isNull()  # paints the dimmed-frame notice branch
+    viewer._frame = None
+    assert not viewer.grab().isNull()  # and the no-frame notice branch
+    viewer.clear()  # disconnecting clears the notice with the frame
+    assert not viewer.session_locked
+
+
 def test_viewer_paints_message_and_frame(qapp):
     viewer = ViewerWidget()
     viewer.resize(400, 400)

remotedesktop-1.8.0/tests/test_session_lock.py

@@ -0,0 +1,18 @@
+import sys
+
+import pytest
+
+from remotedesktop.session_lock import is_session_locked
+
+
+@pytest.mark.skipif(sys.platform != "win32", reason="Windows desktop API")
+def test_is_session_locked_reports_a_bool():
+    # The answer depends on the session running the tests (an interactive
+    # desktop says False; a service-like session may say True) — only the
+    # contract is asserted, not the state.
+    assert is_session_locked() in (True, False)
+
+
+@pytest.mark.skipif(sys.platform == "win32", reason="non-Windows returns None")
+def test_is_session_locked_is_none_off_windows():
+    assert is_session_locked() is None

{remotedesktop-1.7.0 → remotedesktop-1.8.0}/tests/test_sharing.py

@@ -30,6 +30,7 @@ def make_server(
     injector=None,
     clipboard=None,
     cursor_probe=None,
+    lock_probe=None,
     log_provider=None,
 ):
     # The server is a distinct "machine" from the client -> its own database.
@@ -40,6 +41,7 @@ def make_server(
         injector=injector,
         clipboard=clipboard,
         cursor_probe=cursor_probe,
+        lock_probe=lock_probe,
         log_provider=log_provider,
     )
     assert server.listen(0)
@@ -134,6 +136,36 @@ def test_cursor_shape_sent_on_admission_and_on_change_only(qapp, credentials, tm
         server.close()
 
 
+def test_session_lock_sent_on_admission_and_on_change_only(qapp, credentials, tmp_path):
+    locked = [True]
+    server = make_server(
+        credentials, tmp_path, approve=lambda *_: True, lock_probe=lambda: locked[0]
+    )
+    client = make_client(tmp_path)
+    states: list[bool] = []
+    client.sessionLockChanged.connect(states.append)
+    statuses: list[str] = []
+    client.status.connect(statuses.append)
+    client.connect_to("127.0.0.1", server.port)
+    try:
+        # A viewer admitted while the session is already locked is told so
+        # immediately (its starting assumption is unlocked).
+        pump(qapp, lambda: states)
+        assert states == [True]
+        assert any("locked — sign in at the server machine" in s for s in statuses)
+        locked[0] = False
+        pump(qapp, lambda: len(states) >= 2)
+        # Give the broadcast timer a few more ticks: the probe is polled at
+        # the frame rate but must send only on change, never per tick.
+        deadline = time.monotonic() + 0.2
+        while time.monotonic() < deadline:
+            qapp.processEvents()
+        assert states == [True, False]
+    finally:
+        client.close()
+        server.close()
+
+
 def test_reconnect_uses_token_without_prompting(qapp, credentials, tmp_path):
     prompts = []
     # Keep one server (same port) so the client's stored "host:port" token matches.